Frame 1 (226 bytes on wire, 226 bytes captured) Arrival Time: Aug 28, 2006 14:06:42.731527000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 226 bytes Capture Length: 226 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa), Dst: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 212 Identification: 0x0294 (660) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf8bc [correct] Good: True Bad : False Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.106 (165.227.249.106) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 192 Checksum: 0xea57 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xB02A23F76E1C2965 Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 184 Security Association payload Next payload: Vendor ID (13) Length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 44 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 36 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): AES-CBC (7) Key-Length (14): Key-Length (128) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: unknown vendor ID: 0x4A131C81070358455C5728F20E95452F Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-03 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: RFC 3706 Detecting Dead IKE Peers (DPD) 0000 00 a0 8e 72 1e 40 00 0c 29 96 e1 fa 08 00 45 00 ...r.@..).....E. 0010 00 d4 02 94 00 00 80 11 f8 bc a5 e3 f9 96 a5 e3 ................ 0020 f9 6a 01 f4 01 f4 00 c0 ea 57 b0 2a 23 f7 6e 1c .j.......W.*#.n. 0030 29 65 00 00 00 00 00 00 00 00 01 10 02 00 00 00 )e.............. 0040 00 00 00 00 00 b8 0d 00 00 38 00 00 00 01 00 00 .........8...... 0050 00 01 00 00 00 2c 01 01 00 01 00 00 00 24 01 01 .....,.......$.. 0060 00 00 80 01 00 07 80 0e 00 80 80 02 00 02 80 04 ................ 0070 00 02 80 03 00 01 80 0b 00 01 80 0c 70 80 0d 00 ............p... 0080 00 14 4a 13 1c 81 07 03 58 45 5c 57 28 f2 0e 95 ..J.....XE\W(... 0090 45 2f 0d 00 00 14 7d 94 19 a6 53 10 ca 6f 2c 17 E/....}...S..o,. 00a0 9d 92 15 52 9d 56 0d 00 00 14 90 cb 80 91 3e bb ...R.V........>. 00b0 69 6e 08 63 81 b5 ec 42 7b 1f 0d 00 00 14 44 85 in.c...B{.....D. 00c0 15 2d 18 b6 bb cd 0b e8 a8 46 95 79 dd cc 00 00 .-.......F.y.... 00d0 00 14 af ca d7 13 68 a1 f1 c9 6b 86 96 fc 77 57 ......h...k...wW 00e0 01 00 .. Frame 2 (146 bytes on wire, 146 bytes captured) Arrival Time: Aug 28, 2006 14:06:42.939337000 Time delta from previous packet: 0.207810000 seconds Time since reference or first frame: 0.207810000 seconds Frame Number: 2 Packet Length: 146 bytes Capture Length: 146 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40), Dst: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Destination: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.106 (165.227.249.106), Dst: 165.227.249.150 (165.227.249.150) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 132 Identification: 0x5ce2 (23778) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xdebe [correct] Good: True Bad : False Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.150 (165.227.249.150) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 112 Checksum: 0xec3b [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xB02A23F76E1C2965 Responder cookie: 0xB86D6D6A1B7EC2AA Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 104 Security Association payload Next payload: Vendor ID (13) Length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 44 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 36 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): AES-CBC (7) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Key-Length (14): Key-Length (128) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: RFC 3706 Detecting Dead IKE Peers (DPD) 0000 00 0c 29 96 e1 fa 00 a0 8e 72 1e 40 08 00 45 00 ..)......r.@..E. 0010 00 84 5c e2 00 00 40 11 de be a5 e3 f9 6a a5 e3 ..\...@......j.. 0020 f9 96 01 f4 01 f4 00 70 ec 3b b0 2a 23 f7 6e 1c .......p.;.*#.n. 0030 29 65 b8 6d 6d 6a 1b 7e c2 aa 01 10 02 00 00 00 )e.mmj.~........ 0040 00 00 00 00 00 68 0d 00 00 38 00 00 00 01 00 00 .....h...8...... 0050 00 01 00 00 00 2c 01 01 00 01 00 00 00 24 01 01 .....,.......$.. 0060 00 00 80 01 00 07 80 02 00 02 80 03 00 01 80 0e ................ 0070 00 80 80 04 00 02 80 0b 00 01 80 0c 70 80 00 00 ............p... 0080 00 14 af ca d7 13 68 a1 f1 c9 6b 86 96 fc 77 57 ......h...k...wW 0090 01 00 .. Frame 3 (222 bytes on wire, 222 bytes captured) Arrival Time: Aug 28, 2006 14:06:42.984621000 Time delta from previous packet: 0.045284000 seconds Time since reference or first frame: 0.253094000 seconds Frame Number: 3 Packet Length: 222 bytes Capture Length: 222 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa), Dst: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 208 Identification: 0x0295 (661) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf8bf [correct] Good: True Bad : False Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.106 (165.227.249.106) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 188 Checksum: 0xfa12 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xB02A23F76E1C2965 Responder cookie: 0xB86D6D6A1B7EC2AA Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 180 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 20 Nonce Data 0000 00 a0 8e 72 1e 40 00 0c 29 96 e1 fa 08 00 45 00 ...r.@..).....E. 0010 00 d0 02 95 00 00 80 11 f8 bf a5 e3 f9 96 a5 e3 ................ 0020 f9 6a 01 f4 01 f4 00 bc fa 12 b0 2a 23 f7 6e 1c .j.........*#.n. 0030 29 65 b8 6d 6d 6a 1b 7e c2 aa 04 10 02 00 00 00 )e.mmj.~........ 0040 00 00 00 00 00 b4 0a 00 00 84 a8 3e 3d 56 b0 1a ...........>=V.. 0050 ee 11 b1 e1 d6 a5 3b 75 e2 8d 7c 38 74 f0 46 2a ......;u..|8t.F* 0060 0c 8c 8c 86 2a e5 0d fe d0 7e 23 dc 07 62 5e 63 ....*....~#..b^c 0070 60 ff 49 f0 20 24 cb 89 f4 a3 5f 98 26 81 ef 66 `.I. $...._.&..f 0080 0d 5b 8d 4b db a1 60 41 de 75 9b fd 64 3e d4 33 .[.K..`A.u..d>.3 0090 7a 05 42 7b fc e8 63 04 99 ef 43 97 fd 61 11 6a z.B{..c...C..a.j 00a0 61 1d 16 35 b2 40 d9 49 fc 27 48 dd 45 e2 3f b5 a..5.@.I.'H.E.?. 00b0 bd 92 bb e7 64 29 8d 2a dc 67 bd a8 d4 33 74 00 ....d).*.g...3t. 00c0 21 5c ac 24 8a 02 99 d9 0c 06 00 00 00 14 5e c8 !\.$..........^. 00d0 b0 57 4e 1c 48 fb 6b 36 fa 0f f4 2f 08 6c .WN.H.k6.../.l Frame 4 (258 bytes on wire, 258 bytes captured) Arrival Time: Aug 28, 2006 14:06:43.200794000 Time delta from previous packet: 0.216173000 seconds Time since reference or first frame: 0.469267000 seconds Frame Number: 4 Packet Length: 258 bytes Capture Length: 258 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40), Dst: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Destination: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.106 (165.227.249.106), Dst: 165.227.249.150 (165.227.249.150) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 244 Identification: 0x5ce3 (23779) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xde4d [correct] Good: True Bad : False Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.150 (165.227.249.150) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 224 Checksum: 0xaa16 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xB02A23F76E1C2965 Responder cookie: 0xB86D6D6A1B7EC2AA Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 216 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: Vendor ID (13) Length: 24 Nonce Data Vendor ID payload Next payload: NONE (0) Length: 32 Vendor ID: unknown vendor ID: 0x03000014B617D7E4FFB530C7E20CC5165E7C9D0500000008... 0000 00 0c 29 96 e1 fa 00 a0 8e 72 1e 40 08 00 45 00 ..)......r.@..E. 0010 00 f4 5c e3 00 00 40 11 de 4d a5 e3 f9 6a a5 e3 ..\...@..M...j.. 0020 f9 96 01 f4 01 f4 00 e0 aa 16 b0 2a 23 f7 6e 1c ...........*#.n. 0030 29 65 b8 6d 6d 6a 1b 7e c2 aa 04 10 02 00 00 00 )e.mmj.~........ 0040 00 00 00 00 00 d8 0a 00 00 84 30 b8 c0 4a ee 45 ..........0..J.E 0050 6d 02 90 ac 5a c2 f3 58 b0 72 3d 45 0f 0a e8 4b m...Z..X.r=E...K 0060 39 cc d1 9a b3 1c e9 f0 b9 37 13 64 2a 4f a1 3a 9........7.d*O.: 0070 28 39 46 35 07 da f7 a3 bc 4b 7a da 58 c2 2c 16 (9F5.....Kz.X.,. 0080 d8 0b 9c 4a 60 96 ec 38 78 14 fb 5c 00 75 97 8f ...J`..8x..\.u.. 0090 5e dd 16 dd b2 a1 91 60 7b e8 85 c5 83 06 6f 09 ^......`{.....o. 00a0 54 7f 9c a0 46 2b 89 70 1d 97 de c3 cc 4f 2f 72 T...F+.p.....O/r 00b0 d1 c7 c4 f6 1c b9 79 2c 1d 61 d5 b2 fe 5a aa a6 ......y,.a...Z.. 00c0 f0 0c d7 d7 75 28 dd 5e af 63 0d 00 00 18 0d 58 ....u(.^.c.....X 00d0 fd de 9a c8 0b 59 75 bb 93 9b 90 3c dc b7 89 40 .....Yu....<...@ 00e0 2d d6 00 00 00 20 03 00 00 14 b6 17 d7 e4 ff b5 -.... .......... 00f0 30 c7 e2 0c c5 16 5e 7c 9d 05 00 00 00 08 00 06 0.....^|........ 0100 00 03 .. Frame 5 (150 bytes on wire, 150 bytes captured) Arrival Time: Aug 28, 2006 14:06:43.227455000 Time delta from previous packet: 0.026661000 seconds Time since reference or first frame: 0.495928000 seconds Frame Number: 5 Packet Length: 150 bytes Capture Length: 150 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa), Dst: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 136 Identification: 0x0296 (662) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf906 [correct] Good: True Bad : False Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.106 (165.227.249.106) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 116 Checksum: 0xedba [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xB02A23F76E1C2965 Responder cookie: 0xB86D6D6A1B7EC2AA Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 108 Encrypted payload (80 bytes) 0000 00 a0 8e 72 1e 40 00 0c 29 96 e1 fa 08 00 45 00 ...r.@..).....E. 0010 00 88 02 96 00 00 80 11 f9 06 a5 e3 f9 96 a5 e3 ................ 0020 f9 6a 01 f4 01 f4 00 74 ed ba b0 2a 23 f7 6e 1c .j.....t...*#.n. 0030 29 65 b8 6d 6d 6a 1b 7e c2 aa 05 10 02 01 00 00 )e.mmj.~........ 0040 00 00 00 00 00 6c 15 39 48 6d 8e e3 47 c9 2c 2a .....l.9Hm..G.,* 0050 6c bc 12 be db 4c 76 71 4f f8 16 cd c4 f2 f0 03 l....LvqO....... 0060 44 32 b0 b7 e9 2a 38 31 9e 15 76 ca 5e 4f 1e 71 D2...*81..v.^O.q 0070 a1 42 4b 2c c6 6a 41 7b 0b 9d 08 b0 7a 74 d6 c7 .BK,.jA{....zt.. 0080 28 22 60 28 8a df db 5d 6c c7 c4 ae 14 fc de 5f ("`(...]l......_ 0090 be ab ad ca 88 71 .....q Frame 6 (134 bytes on wire, 134 bytes captured) Arrival Time: Aug 28, 2006 14:06:43.245261000 Time delta from previous packet: 0.017806000 seconds Time since reference or first frame: 0.513734000 seconds Frame Number: 6 Packet Length: 134 bytes Capture Length: 134 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40), Dst: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Destination: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.106 (165.227.249.106), Dst: 165.227.249.150 (165.227.249.150) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x5ce4 (23780) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xdec8 [correct] Good: True Bad : False Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.150 (165.227.249.150) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 100 Checksum: 0xdf31 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xB02A23F76E1C2965 Responder cookie: 0xB86D6D6A1B7EC2AA Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 92 Encrypted payload (64 bytes) 0000 00 0c 29 96 e1 fa 00 a0 8e 72 1e 40 08 00 45 00 ..)......r.@..E. 0010 00 78 5c e4 00 00 40 11 de c8 a5 e3 f9 6a a5 e3 .x\...@......j.. 0020 f9 96 01 f4 01 f4 00 64 df 31 b0 2a 23 f7 6e 1c .......d.1.*#.n. 0030 29 65 b8 6d 6d 6a 1b 7e c2 aa 05 10 02 01 00 00 )e.mmj.~........ 0040 00 00 00 00 00 5c 2b 83 f1 18 5b 27 3c a4 7c 80 .....\+...['<.|. 0050 4c 82 ed e9 c3 8e 04 b2 7b a7 73 59 d6 d2 d5 d2 L.......{.sY.... 0060 39 0b f7 c9 10 d4 e3 d7 1f 16 35 b5 35 3d 75 50 9.........5.5=uP 0070 d9 17 aa b2 b7 a6 e7 89 f9 2e ac 97 ea e3 1b 88 ................ 0080 be 87 a0 51 44 15 ...QD. Frame 7 (342 bytes on wire, 342 bytes captured) Arrival Time: Aug 28, 2006 14:06:43.267004000 Time delta from previous packet: 0.021743000 seconds Time since reference or first frame: 0.535477000 seconds Frame Number: 7 Packet Length: 342 bytes Capture Length: 342 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa), Dst: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 328 Identification: 0x0297 (663) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf845 [correct] Good: True Bad : False Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.106 (165.227.249.106) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 308 Checksum: 0x9591 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xB02A23F76E1C2965 Responder cookie: 0xB86D6D6A1B7EC2AA Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x2B93A31B Length: 300 Encrypted payload (272 bytes) 0000 00 a0 8e 72 1e 40 00 0c 29 96 e1 fa 08 00 45 00 ...r.@..).....E. 0010 01 48 02 97 00 00 80 11 f8 45 a5 e3 f9 96 a5 e3 .H.......E...... 0020 f9 6a 01 f4 01 f4 01 34 95 91 b0 2a 23 f7 6e 1c .j.....4...*#.n. 0030 29 65 b8 6d 6d 6a 1b 7e c2 aa 08 10 20 01 2b 93 )e.mmj.~.... .+. 0040 a3 1b 00 00 01 2c 01 b6 3d 88 ef 0f 13 3c 5a 4b .....,..=....v...})s. 00e0 02 05 fa b2 bf 92 7d 8f e1 2f a8 d2 d6 77 bf fd ......}../...w.. 00f0 9b 03 4b 60 72 9c 00 27 2d 39 c0 da 10 0e fe b9 ..K`r..'-9...... 0100 40 57 cc 69 99 5c 23 53 38 a9 3f fd e4 bd 4a 54 @W.i.\#S8.?...JT 0110 cc 97 a9 30 df 89 c5 b5 fe f0 56 8f 91 87 9c 24 ...0......V....$ 0120 4f e2 63 80 3f b6 b6 6d 89 4f 3c d5 20 5a 7d 80 O.c.?..m.O<. Z}. 0130 fb df 4a 7b e8 f3 87 68 02 06 c1 1f f5 d0 55 42 ..J{...h......UB 0140 0c 67 9a ac 64 cb 5f 7b 1d fd 32 35 ba 8d 4a 7f .g..d._{..25..J. 0150 4e ee 69 ca a8 29 N.i..) Frame 8 (342 bytes on wire, 342 bytes captured) Arrival Time: Aug 28, 2006 14:06:43.696842000 Time delta from previous packet: 0.429838000 seconds Time since reference or first frame: 0.965315000 seconds Frame Number: 8 Packet Length: 342 bytes Capture Length: 342 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40), Dst: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Destination: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.106 (165.227.249.106), Dst: 165.227.249.150 (165.227.249.150) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 328 Identification: 0x5ce5 (23781) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xddf7 [correct] Good: True Bad : False Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.150 (165.227.249.150) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 308 Checksum: 0x43c4 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xB02A23F76E1C2965 Responder cookie: 0xB86D6D6A1B7EC2AA Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x2B93A31B Length: 300 Encrypted payload (272 bytes) 0000 00 0c 29 96 e1 fa 00 a0 8e 72 1e 40 08 00 45 00 ..)......r.@..E. 0010 01 48 5c e5 00 00 40 11 dd f7 a5 e3 f9 6a a5 e3 .H\...@......j.. 0020 f9 96 01 f4 01 f4 01 34 43 c4 b0 2a 23 f7 6e 1c .......4C..*#.n. 0030 29 65 b8 6d 6d 6a 1b 7e c2 aa 08 10 20 01 2b 93 )e.mmj.~.... .+. 0040 a3 1b 00 00 01 2c bd d3 ba 2f 7c d4 43 11 ad 7d .....,.../|.C..} 0050 c5 07 a7 0e 4c 5e 56 b8 bd 9a 0e ee bf 25 4d df ....L^V......%M. 0060 72 6b 74 2d d3 ff 09 0f fa 55 66 c6 60 5c 2c 72 rkt-.....Uf.`\,r 0070 27 57 3f 5f 04 85 4a 26 93 4a c6 08 f3 c4 b9 04 'W?_..J&.J...... 0080 63 db 2a 76 99 c7 c7 b3 2e 54 9f db bf 5e 3c 79 c.*v.....T...^..|.. 0170 0d 87 fe 63 10 d5 c5 00 9b 81 cb 07 3e 9d 12 3e ...c........>..> 0180 bc d1 2d 32 f9 59 f4 32 6b 80 31 e5 38 50 58 6e ..-2.Y.2k.1.8PXn 0190 1d d0 63 80 af 0d ..c... Frame 11 (406 bytes on wire, 406 bytes captured) Arrival Time: Aug 28, 2006 14:06:48.231399000 Time delta from previous packet: 0.008516000 seconds Time since reference or first frame: 5.499872000 seconds Frame Number: 11 Packet Length: 406 bytes Capture Length: 406 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40), Dst: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Destination: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.106 (165.227.249.106), Dst: 165.227.249.150 (165.227.249.150) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 392 Identification: 0x5ce6 (23782) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0xdd95 [correct] Good: True Bad : False Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.150 (165.227.249.150) Encapsulating Security Payload SPI: 0x925c6818 Sequence: 1 Data (364 bytes) 0000 00 0c 29 96 e1 fa 00 a0 8e 72 1e 40 08 00 45 00 ..)......r.@..E. 0010 01 88 5c e6 00 00 40 32 dd 95 a5 e3 f9 6a a5 e3 ..\...@2.....j.. 0020 f9 96 92 5c 68 18 00 00 00 01 71 ab 19 bc 18 26 ...\h.....q....& 0030 bf f1 18 03 73 9a c7 8f 9a 0a af 68 c0 c7 ba 2a ....s......h...* 0040 ca 5a d7 45 b9 11 54 55 fd dd dd 87 70 7b 8a 5a .Z.E..TU....p{.Z 0050 b7 cb 0e 69 8d a7 d2 a9 e6 d3 fe 75 e2 92 38 87 ...i.......u..8. 0060 e1 9e 4c 69 1a 91 1b cd 2a 41 86 13 d0 d5 63 24 ..Li....*A....c$ 0070 36 e4 0f 51 19 fb cf 26 f6 44 a9 06 5d c6 b3 14 6..Q...&.D..]... 0080 0a f6 b2 f0 ba 73 0c bf c2 b8 53 7e 7e 31 29 e9 .....s....S~~1). 0090 43 2c e7 67 73 71 6e 6c 01 94 1d 58 0f b4 37 82 C,.gsqnl...X..7. 00a0 85 c5 43 c8 cc 9e 29 d8 be 08 02 b0 78 e7 33 8e ..C...).....x.3. 00b0 4a b6 ff 0b d5 c9 9b 4d 4b e4 ca d7 78 80 df 45 J......MK...x..E 00c0 ed 2e 80 80 b6 cd 3c 84 20 ed 85 28 11 51 fd 1e ......<. ..(.Q.. 00d0 29 b1 8d 4b b2 f5 7c f9 10 58 af cc 1b 8e d4 02 )..K..|..X...... 00e0 07 90 c1 6a a7 45 2c f1 9a 8f 9b 59 7e 44 8f 22 ...j.E,....Y~D." 00f0 2d 08 1b 8e 1c 58 c8 11 3c 62 de 47 db 30 d4 dc -....X..