Frame 1 (226 bytes on wire, 226 bytes captured) Arrival Time: Nov 30, 2010 10:15:19.960857000 [Time delta from previous captured frame: 0.000000000 seconds] [Time delta from previous displayed frame: 0.000000000 seconds] [Time since reference or first frame: 0.000000000 seconds] Frame Number: 1 Frame Length: 226 bytes Capture Length: 226 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:0c:29:8f:0a:05 (00:0c:29:8f:0a:05), Dst: c8:4c:75:18:34:40 (c8:4c:75:18:34:40) Destination: c8:4c:75:18:34:40 (c8:4c:75:18:34:40) Address: c8:4c:75:18:34:40 (c8:4c:75:18:34:40) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:8f:0a:05 (00:0c:29:8f:0a:05) Address: 00:0c:29:8f:0a:05 (00:0c:29:8f:0a:05) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.118 (165.227.249.118) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 212 Identification: 0x012b (299) Flags: 0x00 0.. = Reserved bit: Not Set .0. = Don't fragment: Not Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xfa19 [correct] [Good: True] [Bad : False] Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.118 (165.227.249.118) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 192 Checksum: 0x00aa [validation disabled] [Good Checksum: False] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 93544D8DBFF4B46E Responder cookie: 0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags: 0x00 .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 184 Security Association payload Next payload: Vendor ID (13) Payload length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Payload length: 44 Proposal number: 1 Protocol ID: ISAKMP (1) SPI Size: 0 Proposal transforms: 1 Transform payload # 1 Next payload: NONE (0) Payload length: 36 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): AES-CBC (7) Key-Length (14): Key-Length (128) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID: RFC 3947 Negotiation of NAT-Traversal in the IKE Next payload: Vendor ID (13) Payload length: 20 Vendor ID: RFC 3947 Negotiation of NAT-Traversal in the IKE Vendor ID: draft-ietf-ipsec-nat-t-ike-03 Next payload: Vendor ID (13) Payload length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-03 Vendor ID: draft-ietf-ipsec-nat-t-ike-02\n Next payload: Vendor ID (13) Payload length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02\n Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Next payload: Vendor ID (13) Payload length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Vendor ID: RFC 3706 Detecting Dead IKE Peers (DPD) Next payload: NONE (0) Payload length: 20 Vendor ID: RFC 3706 Detecting Dead IKE Peers (DPD) 0000 c8 4c 75 18 34 40 00 0c 29 8f 0a 05 08 00 45 00 .Lu.4@..).....E. 0010 00 d4 01 2b 00 00 80 11 fa 19 a5 e3 f9 96 a5 e3 ...+............ 0020 f9 76 01 f4 01 f4 00 c0 00 aa 93 54 4d 8d bf f4 .v.........TM... 0030 b4 6e 00 00 00 00 00 00 00 00 01 10 02 00 00 00 .n.............. 0040 00 00 00 00 00 b8 0d 00 00 38 00 00 00 01 00 00 .........8...... 0050 00 01 00 00 00 2c 01 01 00 01 00 00 00 24 01 01 .....,.......$.. 0060 00 00 80 01 00 07 80 0e 00 80 80 02 00 02 80 04 ................ 0070 00 02 80 03 00 01 80 0b 00 01 80 0c 70 80 0d 00 ............p... 0080 00 14 4a 13 1c 81 07 03 58 45 5c 57 28 f2 0e 95 ..J.....XE\W(... 0090 45 2f 0d 00 00 14 7d 94 19 a6 53 10 ca 6f 2c 17 E/....}...S..o,. 00a0 9d 92 15 52 9d 56 0d 00 00 14 90 cb 80 91 3e bb ...R.V........>. 00b0 69 6e 08 63 81 b5 ec 42 7b 1f 0d 00 00 14 44 85 in.c...B{.....D. 00c0 15 2d 18 b6 bb cd 0b e8 a8 46 95 79 dd cc 00 00 .-.......F.y.... 00d0 00 14 af ca d7 13 68 a1 f1 c9 6b 86 96 fc 77 57 ......h...k...wW 00e0 01 00 .. Frame 2 (226 bytes on wire, 226 bytes captured) Arrival Time: Nov 30, 2010 10:15:19.960872000 [Time delta from previous captured frame: 0.000015000 seconds] [Time delta from previous displayed frame: 0.000015000 seconds] [Time since reference or first frame: 0.000015000 seconds] Frame Number: 2 Frame Length: 226 bytes Capture Length: 226 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:0c:29:8f:0a:05 (00:0c:29:8f:0a:05), Dst: c8:4c:75:18:34:40 (c8:4c:75:18:34:40) Destination: c8:4c:75:18:34:40 (c8:4c:75:18:34:40) Address: c8:4c:75:18:34:40 (c8:4c:75:18:34:40) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:8f:0a:05 (00:0c:29:8f:0a:05) Address: 00:0c:29:8f:0a:05 (00:0c:29:8f:0a:05) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.118 (165.227.249.118) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 212 Identification: 0x012b (299) Flags: 0x00 0.. = Reserved bit: Not Set .0. = Don't fragment: Not Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xfa19 [correct] [Good: True] [Bad : False] Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.118 (165.227.249.118) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 192 Checksum: 0x00aa [validation disabled] [Good Checksum: False] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 93544D8DBFF4B46E Responder cookie: 0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags: 0x00 .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 184 Security Association payload Next payload: Vendor ID (13) Payload length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Payload length: 44 Proposal number: 1 Protocol ID: ISAKMP (1) SPI Size: 0 Proposal transforms: 1 Transform payload # 1 Next payload: NONE (0) Payload length: 36 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): AES-CBC (7) Key-Length (14): Key-Length (128) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID: RFC 3947 Negotiation of NAT-Traversal in the IKE Next payload: Vendor ID (13) Payload length: 20 Vendor ID: RFC 3947 Negotiation of NAT-Traversal in the IKE Vendor ID: draft-ietf-ipsec-nat-t-ike-03 Next payload: Vendor ID (13) Payload length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-03 Vendor ID: draft-ietf-ipsec-nat-t-ike-02\n Next payload: Vendor ID (13) Payload length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02\n Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Next payload: Vendor ID (13) Payload length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Vendor ID: RFC 3706 Detecting Dead IKE Peers (DPD) Next payload: NONE (0) Payload length: 20 Vendor ID: RFC 3706 Detecting Dead IKE Peers (DPD) 0000 c8 4c 75 18 34 40 00 0c 29 8f 0a 05 08 00 45 00 .Lu.4@..).....E. 0010 00 d4 01 2b 00 00 80 11 fa 19 a5 e3 f9 96 a5 e3 ...+............ 0020 f9 76 01 f4 01 f4 00 c0 00 aa 93 54 4d 8d bf f4 .v.........TM... 0030 b4 6e 00 00 00 00 00 00 00 00 01 10 02 00 00 00 .n.............. 0040 00 00 00 00 00 b8 0d 00 00 38 00 00 00 01 00 00 .........8...... 0050 00 01 00 00 00 2c 01 01 00 01 00 00 00 24 01 01 .....,.......$.. 0060 00 00 80 01 00 07 80 0e 00 80 80 02 00 02 80 04 ................ 0070 00 02 80 03 00 01 80 0b 00 01 80 0c 70 80 0d 00 ............p... 0080 00 14 4a 13 1c 81 07 03 58 45 5c 57 28 f2 0e 95 ..J.....XE\W(... 0090 45 2f 0d 00 00 14 7d 94 19 a6 53 10 ca 6f 2c 17 E/....}...S..o,. 00a0 9d 92 15 52 9d 56 0d 00 00 14 90 cb 80 91 3e bb ...R.V........>. 00b0 69 6e 08 63 81 b5 ec 42 7b 1f 0d 00 00 14 44 85 in.c...B{.....D. 00c0 15 2d 18 b6 bb cd 0b e8 a8 46 95 79 dd cc 00 00 .-.......F.y.... 00d0 00 14 af ca d7 13 68 a1 f1 c9 6b 86 96 fc 77 57 ......h...k...wW 00e0 01 00 .. Frame 3 (146 bytes on wire, 146 bytes captured) Arrival Time: Nov 30, 2010 10:15:19.964134000 [Time delta from previous captured frame: 0.003262000 seconds] [Time delta from previous displayed frame: 0.003262000 seconds] [Time since reference or first frame: 0.003277000 seconds] Frame Number: 3 Frame Length: 146 bytes Capture Length: 146 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: c8:4c:75:18:34:40 (c8:4c:75:18:34:40), Dst: 00:0c:29:8f:0a:05 (00:0c:29:8f:0a:05) Destination: 00:0c:29:8f:0a:05 (00:0c:29:8f:0a:05) Address: 00:0c:29:8f:0a:05 (00:0c:29:8f:0a:05) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: c8:4c:75:18:34:40 (c8:4c:75:18:34:40) Address: c8:4c:75:18:34:40 (c8:4c:75:18:34:40) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.118 (165.227.249.118), Dst: 165.227.249.150 (165.227.249.150) Version: 4 Header length: 20 bytes Differentiated Services Field: 0xc0 (DSCP 0x30: Class Selector 6; ECN: 0x00) 1100 00.. = Differentiated Services Codepoint: Class Selector 6 (0x30) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 132 Identification: 0x016b (363) Flags: 0x00 0.. = Reserved bit: Not Set .0. = Don't fragment: Not Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 255 Protocol: UDP (0x11) Header checksum: 0x7a69 [correct] [Good: True] [Bad : False] Source: 165.227.249.118 (165.227.249.118) Destination: 165.227.249.150 (165.227.249.150) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 112 Checksum: 0xc507 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 93544D8DBFF4B46E Responder cookie: 6DB267D4A36985D0 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags: 0x00 .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 104 Security Association payload Next payload: Vendor ID (13) Payload length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Payload length: 44 Proposal number: 1 Protocol ID: ISAKMP (1) SPI Size: 0 Proposal transforms: 1 Transform payload # 1 Next payload: NONE (0) Payload length: 36 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): AES-CBC (7) Key-Length (14): Key-Length (128) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID: RFC 3947 Negotiation of NAT-Traversal in the IKE Next payload: NONE (0) Payload length: 20 Vendor ID: RFC 3947 Negotiation of NAT-Traversal in the IKE 0000 00 0c 29 8f 0a 05 c8 4c 75 18 34 40 08 00 45 c0 ..)....Lu.4@..E. 0010 00 84 01 6b 00 00 ff 11 7a 69 a5 e3 f9 76 a5 e3 ...k....zi...v.. 0020 f9 96 01 f4 01 f4 00 70 c5 07 93 54 4d 8d bf f4 .......p...TM... 0030 b4 6e 6d b2 67 d4 a3 69 85 d0 01 10 02 00 00 00 .nm.g..i........ 0040 00 00 00 00 00 68 0d 00 00 38 00 00 00 01 00 00 .....h...8...... 0050 00 01 00 00 00 2c 01 01 00 01 00 00 00 24 01 01 .....,.......$.. 0060 00 00 80 01 00 07 80 0e 00 80 80 02 00 02 80 04 ................ 0070 00 02 80 03 00 01 80 0b 00 01 80 0c 70 80 00 00 ............p... 0080 00 14 4a 13 1c 81 07 03 58 45 5c 57 28 f2 0e 95 ..J.....XE\W(... 0090 45 2f E/ Frame 4 (318 bytes on wire, 318 bytes captured) Arrival Time: Nov 30, 2010 10:15:19.966718000 [Time delta from previous captured frame: 0.002584000 seconds] [Time delta from previous displayed frame: 0.002584000 seconds] [Time since reference or first frame: 0.005861000 seconds] Frame Number: 4 Frame Length: 318 bytes Capture Length: 318 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:0c:29:8f:0a:05 (00:0c:29:8f:0a:05), Dst: c8:4c:75:18:34:40 (c8:4c:75:18:34:40) Destination: c8:4c:75:18:34:40 (c8:4c:75:18:34:40) Address: c8:4c:75:18:34:40 (c8:4c:75:18:34:40) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:8f:0a:05 (00:0c:29:8f:0a:05) Address: 00:0c:29:8f:0a:05 (00:0c:29:8f:0a:05) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.118 (165.227.249.118) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 304 Identification: 0x012c (300) Flags: 0x00 0.. = Reserved bit: Not Set .0. = Don't fragment: Not Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf9bc [correct] [Good: True] [Bad : False] Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.118 (165.227.249.118) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 284 Checksum: 0x9637 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 93544D8DBFF4B46E Responder cookie: 6DB267D4A36985D0 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags: 0x00 .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 276 Key Exchange payload Next payload: Nonce (10) Payload length: 132 Key Exchange Data (128 bytes / 1024 bits) Nonce payload Next payload: NAT-D (RFC 3947) (20) Payload length: 68 Nonce Data NAT-D (RFC 3947) payload Next payload: NAT-D (RFC 3947) (20) Payload length: 24 Hash of address and port: 1594EEF2BDF2E4D55453353E3B68BD35B3A19AD3 NAT-D (RFC 3947) payload Next payload: NONE (0) Payload length: 24 Hash of address and port: 10577F3701DE9B07A6B35BA36BFF2BBC39E53AD2 0000 c8 4c 75 18 34 40 00 0c 29 8f 0a 05 08 00 45 00 .Lu.4@..).....E. 0010 01 30 01 2c 00 00 80 11 f9 bc a5 e3 f9 96 a5 e3 .0.,............ 0020 f9 76 01 f4 01 f4 01 1c 96 37 93 54 4d 8d bf f4 .v.......7.TM... 0030 b4 6e 6d b2 67 d4 a3 69 85 d0 04 10 02 00 00 00 .nm.g..i........ 0040 00 00 00 00 01 14 0a 00 00 84 b6 49 68 93 27 75 ...........Ih.'u 0050 e5 df 6f 1c 7c d9 28 8d 75 ae d4 bf 90 91 61 41 ..o.|.(.u.....aA 0060 41 f1 2b 7e 46 1f 0b 0e f4 ef 6f b5 98 38 13 54 A.+~F.....o..8.T 0070 11 d0 dd 8b 78 79 bd 0c 2e 23 ad 32 59 08 b9 c4 ....xy...#.2Y... 0080 41 cc b1 16 6f f3 9f a7 f3 60 43 60 8b b4 77 1e A...o....`C`..w. 0090 4a f8 30 c5 78 80 bc 87 ca 81 2c 68 69 83 9a 4a J.0.x.....,hi..J 00a0 ad 2d 88 b4 8a a5 57 89 fc 5c a1 f6 cf b1 ab 53 .-....W..\.....S 00b0 a6 d2 28 27 da a4 a7 79 20 97 35 1a 6d 64 c6 67 ..('...y .5.md.g 00c0 f3 a4 59 17 0b 7f b3 7b 93 e5 14 00 00 44 77 c0 ..Y....{.....Dw. 00d0 4c 34 d2 9d b9 8c cd e9 32 81 9e 71 f0 3d 20 ba L4......2..q.= . 00e0 ad a3 81 2f ad df df 54 df ae 9e e4 85 8c 1b b4 .../...T........ 00f0 e5 0f 77 4a 4b a7 d2 35 f8 d4 20 c1 3f 1c 23 36 ..wJK..5.. .?.#6 0100 e2 b7 d6 ea 9c fb 45 fe 9b 66 45 1e a2 64 14 00 ......E..fE..d.. 0110 00 18 15 94 ee f2 bd f2 e4 d5 54 53 35 3e 3b 68 ..........TS5>;h 0120 bd 35 b3 a1 9a d3 00 00 00 18 10 57 7f 37 01 de .5.........W.7.. 0130 9b 07 a6 b3 5b a3 6b ff 2b bc 39 e5 3a d2 ....[.k.+.9.:. Frame 5 (318 bytes on wire, 318 bytes captured) Arrival Time: Nov 30, 2010 10:15:19.966740000 [Time delta from previous captured frame: 0.000022000 seconds] [Time delta from previous displayed frame: 0.000022000 seconds] [Time since reference or first frame: 0.005883000 seconds] Frame Number: 5 Frame Length: 318 bytes Capture Length: 318 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:0c:29:8f:0a:05 (00:0c:29:8f:0a:05), Dst: c8:4c:75:18:34:40 (c8:4c:75:18:34:40) Destination: c8:4c:75:18:34:40 (c8:4c:75:18:34:40) Address: c8:4c:75:18:34:40 (c8:4c:75:18:34:40) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:8f:0a:05 (00:0c:29:8f:0a:05) Address: 00:0c:29:8f:0a:05 (00:0c:29:8f:0a:05) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.118 (165.227.249.118) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 304 Identification: 0x012c (300) Flags: 0x00 0.. = Reserved bit: Not Set .0. = Don't fragment: Not Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf9bc [correct] [Good: True] [Bad : False] Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.118 (165.227.249.118) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 284 Checksum: 0x9637 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 93544D8DBFF4B46E Responder cookie: 6DB267D4A36985D0 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags: 0x00 .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 276 Key Exchange payload Next payload: Nonce (10) Payload length: 132 Key Exchange Data (128 bytes / 1024 bits) Nonce payload Next payload: NAT-D (RFC 3947) (20) Payload length: 68 Nonce Data NAT-D (RFC 3947) payload Next payload: NAT-D (RFC 3947) (20) Payload length: 24 Hash of address and port: 1594EEF2BDF2E4D55453353E3B68BD35B3A19AD3 NAT-D (RFC 3947) payload Next payload: NONE (0) Payload length: 24 Hash of address and port: 10577F3701DE9B07A6B35BA36BFF2BBC39E53AD2 0000 c8 4c 75 18 34 40 00 0c 29 8f 0a 05 08 00 45 00 .Lu.4@..).....E. 0010 01 30 01 2c 00 00 80 11 f9 bc a5 e3 f9 96 a5 e3 .0.,............ 0020 f9 76 01 f4 01 f4 01 1c 96 37 93 54 4d 8d bf f4 .v.......7.TM... 0030 b4 6e 6d b2 67 d4 a3 69 85 d0 04 10 02 00 00 00 .nm.g..i........ 0040 00 00 00 00 01 14 0a 00 00 84 b6 49 68 93 27 75 ...........Ih.'u 0050 e5 df 6f 1c 7c d9 28 8d 75 ae d4 bf 90 91 61 41 ..o.|.(.u.....aA 0060 41 f1 2b 7e 46 1f 0b 0e f4 ef 6f b5 98 38 13 54 A.+~F.....o..8.T 0070 11 d0 dd 8b 78 79 bd 0c 2e 23 ad 32 59 08 b9 c4 ....xy...#.2Y... 0080 41 cc b1 16 6f f3 9f a7 f3 60 43 60 8b b4 77 1e A...o....`C`..w. 0090 4a f8 30 c5 78 80 bc 87 ca 81 2c 68 69 83 9a 4a J.0.x.....,hi..J 00a0 ad 2d 88 b4 8a a5 57 89 fc 5c a1 f6 cf b1 ab 53 .-....W..\.....S 00b0 a6 d2 28 27 da a4 a7 79 20 97 35 1a 6d 64 c6 67 ..('...y .5.md.g 00c0 f3 a4 59 17 0b 7f b3 7b 93 e5 14 00 00 44 77 c0 ..Y....{.....Dw. 00d0 4c 34 d2 9d b9 8c cd e9 32 81 9e 71 f0 3d 20 ba L4......2..q.= . 00e0 ad a3 81 2f ad df df 54 df ae 9e e4 85 8c 1b b4 .../...T........ 00f0 e5 0f 77 4a 4b a7 d2 35 f8 d4 20 c1 3f 1c 23 36 ..wJK..5.. .?.#6 0100 e2 b7 d6 ea 9c fb 45 fe 9b 66 45 1e a2 64 14 00 ......E..fE..d.. 0110 00 18 15 94 ee f2 bd f2 e4 d5 54 53 35 3e 3b 68 ..........TS5>;h 0120 bd 35 b3 a1 9a d3 00 00 00 18 10 57 7f 37 01 de .5.........W.7.. 0130 9b 07 a6 b3 5b a3 6b ff 2b bc 39 e5 3a d2 ....[.k.+.9.:. Frame 6 (346 bytes on wire, 346 bytes captured) Arrival Time: Nov 30, 2010 10:15:19.996575000 [Time delta from previous captured frame: 0.029835000 seconds] [Time delta from previous displayed frame: 0.029835000 seconds] [Time since reference or first frame: 0.035718000 seconds] Frame Number: 6 Frame Length: 346 bytes Capture Length: 346 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: c8:4c:75:18:34:40 (c8:4c:75:18:34:40), Dst: 00:0c:29:8f:0a:05 (00:0c:29:8f:0a:05) Destination: 00:0c:29:8f:0a:05 (00:0c:29:8f:0a:05) Address: 00:0c:29:8f:0a:05 (00:0c:29:8f:0a:05) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: c8:4c:75:18:34:40 (c8:4c:75:18:34:40) Address: c8:4c:75:18:34:40 (c8:4c:75:18:34:40) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.118 (165.227.249.118), Dst: 165.227.249.150 (165.227.249.150) Version: 4 Header length: 20 bytes Differentiated Services Field: 0xc0 (DSCP 0x30: Class Selector 6; ECN: 0x00) 1100 00.. = Differentiated Services Codepoint: Class Selector 6 (0x30) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 332 Identification: 0x016c (364) Flags: 0x00 0.. = Reserved bit: Not Set .0. = Don't fragment: Not Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 255 Protocol: UDP (0x11) Header checksum: 0x79a0 [correct] [Good: True] [Bad : False] Source: 165.227.249.118 (165.227.249.118) Destination: 165.227.249.150 (165.227.249.150) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 312 Checksum: 0xaaf0 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 93544D8DBFF4B46E Responder cookie: 6DB267D4A36985D0 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags: 0x00 .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 304 Key Exchange payload Next payload: Nonce (10) Payload length: 132 Key Exchange Data (128 bytes / 1024 bits) Nonce payload Next payload: Vendor ID (13) Payload length: 24 Nonce Data Vendor ID: CISCO-UNITY-1.0 Next payload: Vendor ID (13) Payload length: 20 Vendor ID: CISCO-UNITY-1.0 Vendor ID: RFC 3706 Detecting Dead IKE Peers (DPD) Next payload: Vendor ID (13) Payload length: 20 Vendor ID: RFC 3706 Detecting Dead IKE Peers (DPD) Vendor ID: 9875C0C9A36885D00794E3971026E30A Next payload: Vendor ID (13) Payload length: 20 Vendor ID: 9875C0C9A36885D00794E3971026E30A Vendor ID: draft-beaulieu-ike-xauth-02.txt Next payload: NAT-D (RFC 3947) (20) Payload length: 12 Vendor ID: draft-beaulieu-ike-xauth-02.txt NAT-D (RFC 3947) payload Next payload: NAT-D (RFC 3947) (20) Payload length: 24 Hash of address and port: 10577F3701DE9B07A6B35BA36BFF2BBC39E53AD2 NAT-D (RFC 3947) payload Next payload: NONE (0) Payload length: 24 Hash of address and port: 1594EEF2BDF2E4D55453353E3B68BD35B3A19AD3 0000 00 0c 29 8f 0a 05 c8 4c 75 18 34 40 08 00 45 c0 ..)....Lu.4@..E. 0010 01 4c 01 6c 00 00 ff 11 79 a0 a5 e3 f9 76 a5 e3 .L.l....y....v.. 0020 f9 96 01 f4 01 f4 01 38 aa f0 93 54 4d 8d bf f4 .......8...TM... 0030 b4 6e 6d b2 67 d4 a3 69 85 d0 04 10 02 00 00 00 .nm.g..i........ 0040 00 00 00 00 01 30 0a 00 00 84 3b 05 2f 6b 42 42 .....0....;./kBB 0050 0a a9 a8 9d 7b be 84 85 3a 79 f4 7a 38 3e 76 4b ....{...:y.z8>vK 0060 67 fb 23 16 04 60 93 e9 66 f7 4b 8a 25 3b 41 84 g.#..`..f.K.%;A. 0070 9b 76 37 85 5d 99 66 a4 05 5c 22 39 25 74 64 4c .v7.].f..\"9%tdL 0080 0f 03 71 1c 7e 45 fe 64 36 ce da c2 da a1 b6 ee ..q.~E.d6....... 0090 5a 3d 32 14 72 8a d1 85 96 69 54 d9 f3 b3 2e 15 Z=2.r....iT..... 00a0 e8 cb ec 21 27 3a b9 e5 23 93 38 ef 91 c8 cf 06 ...!':..#.8..... 00b0 b9 3f de 99 2c a0 cd 6d 94 2b 9f 22 4c c5 59 0a .?..,..m.+."L.Y. 00c0 65 0f c7 c9 e2 02 bb 8b d5 66 0d 00 00 18 7e f1 e........f....~. 00d0 f0 97 d9 90 e4 9c 35 c6 bf f6 42 5e 4a 1f d7 fc ......5...B^J... 00e0 96 fb 0d 00 00 14 12 f5 f2 8c 45 71 68 a9 70 2d ..........Eqh.p- 00f0 9f e2 74 cc 01 00 0d 00 00 14 af ca d7 13 68 a1 ..t...........h. 0100 f1 c9 6b 86 96 fc 77 57 01 00 0d 00 00 14 98 75 ..k...wW.......u 0110 c0 c9 a3 68 85 d0 07 94 e3 97 10 26 e3 0a 14 00 ...h.......&.... 0120 00 0c 09 00 26 89 df d6 b7 12 14 00 00 18 10 57 ....&..........W 0130 7f 37 01 de 9b 07 a6 b3 5b a3 6b ff 2b bc 39 e5 .7......[.k.+.9. 0140 3a d2 00 00 00 18 15 94 ee f2 bd f2 e4 d5 54 53 :.............TS 0150 35 3e 3b 68 bd 35 b3 a1 9a d3 5>;h.5.... Frame 7 (150 bytes on wire, 150 bytes captured) Arrival Time: Nov 30, 2010 10:15:20.003330000 [Time delta from previous captured frame: 0.006755000 seconds] [Time delta from previous displayed frame: 0.006755000 seconds] [Time since reference or first frame: 0.042473000 seconds] Frame Number: 7 Frame Length: 150 bytes Capture Length: 150 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:0c:29:8f:0a:05 (00:0c:29:8f:0a:05), Dst: c8:4c:75:18:34:40 (c8:4c:75:18:34:40) Destination: c8:4c:75:18:34:40 (c8:4c:75:18:34:40) Address: c8:4c:75:18:34:40 (c8:4c:75:18:34:40) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:8f:0a:05 (00:0c:29:8f:0a:05) Address: 00:0c:29:8f:0a:05 (00:0c:29:8f:0a:05) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.118 (165.227.249.118) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 136 Identification: 0x012d (301) Flags: 0x00 0.. = Reserved bit: Not Set .0. = Don't fragment: Not Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xfa63 [correct] [Good: True] [Bad : False] Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.118 (165.227.249.118) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 116 Checksum: 0x2f21 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 93544D8DBFF4B46E Responder cookie: 6DB267D4A36985D0 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags: 0x01 .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 108 Encrypted payload (80 bytes) 0000 c8 4c 75 18 34 40 00 0c 29 8f 0a 05 08 00 45 00 .Lu.4@..).....E. 0010 00 88 01 2d 00 00 80 11 fa 63 a5 e3 f9 96 a5 e3 ...-.....c...... 0020 f9 76 01 f4 01 f4 00 74 2f 21 93 54 4d 8d bf f4 .v.....t/!.TM... 0030 b4 6e 6d b2 67 d4 a3 69 85 d0 05 10 02 01 00 00 .nm.g..i........ 0040 00 00 00 00 00 6c 34 e1 b5 63 f6 95 90 dd 25 ae .....l4..c....%. 0050 c3 c0 cc 5b fe 9b d6 ea 03 d7 4e 58 2f e3 33 8c ...[......NX/.3. 0060 e5 3b d1 b4 97 a9 7b ad ec fd 7a a6 3a cb e4 3d .;....{...z.:..= 0070 1f bb 81 dc 8b 42 c8 37 bf 87 0c b5 e6 7d 76 d8 .....B.7.....}v. 0080 89 c0 2c 85 c8 d7 0b e7 e4 12 85 d4 26 69 3a ea ..,.........&i:. 0090 d8 ca 47 6a 98 ed ..Gj.. Frame 8 (150 bytes on wire, 150 bytes captured) Arrival Time: Nov 30, 2010 10:15:20.003361000 [Time delta from previous captured frame: 0.000031000 seconds] [Time delta from previous displayed frame: 0.000031000 seconds] [Time since reference or first frame: 0.042504000 seconds] Frame Number: 8 Frame Length: 150 bytes Capture Length: 150 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:0c:29:8f:0a:05 (00:0c:29:8f:0a:05), Dst: c8:4c:75:18:34:40 (c8:4c:75:18:34:40) Destination: c8:4c:75:18:34:40 (c8:4c:75:18:34:40) Address: c8:4c:75:18:34:40 (c8:4c:75:18:34:40) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:8f:0a:05 (00:0c:29:8f:0a:05) Address: 00:0c:29:8f:0a:05 (00:0c:29:8f:0a:05) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.118 (165.227.249.118) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 136 Identification: 0x012d (301) Flags: 0x00 0.. = Reserved bit: Not Set .0. = Don't fragment: Not Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xfa63 [correct] [Good: True] [Bad : False] Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.118 (165.227.249.118) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 116 Checksum: 0x2f21 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 93544D8DBFF4B46E Responder cookie: 6DB267D4A36985D0 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags: 0x01 .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 108 Encrypted payload (80 bytes) 0000 c8 4c 75 18 34 40 00 0c 29 8f 0a 05 08 00 45 00 .Lu.4@..).....E. 0010 00 88 01 2d 00 00 80 11 fa 63 a5 e3 f9 96 a5 e3 ...-.....c...... 0020 f9 76 01 f4 01 f4 00 74 2f 21 93 54 4d 8d bf f4 .v.....t/!.TM... 0030 b4 6e 6d b2 67 d4 a3 69 85 d0 05 10 02 01 00 00 .nm.g..i........ 0040 00 00 00 00 00 6c 34 e1 b5 63 f6 95 90 dd 25 ae .....l4..c....%. 0050 c3 c0 cc 5b fe 9b d6 ea 03 d7 4e 58 2f e3 33 8c ...[......NX/.3. 0060 e5 3b d1 b4 97 a9 7b ad ec fd 7a a6 3a cb e4 3d .;....{...z.:..= 0070 1f bb 81 dc 8b 42 c8 37 bf 87 0c b5 e6 7d 76 d8 .....B.7.....}v. 0080 89 c0 2c 85 c8 d7 0b e7 e4 12 85 d4 26 69 3a ea ..,.........&i:. 0090 d8 ca 47 6a 98 ed ..Gj.. Frame 9 (118 bytes on wire, 118 bytes captured) Arrival Time: Nov 30, 2010 10:15:20.004848000 [Time delta from previous captured frame: 0.001487000 seconds] [Time delta from previous displayed frame: 0.001487000 seconds] [Time since reference or first frame: 0.043991000 seconds] Frame Number: 9 Frame Length: 118 bytes Capture Length: 118 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: c8:4c:75:18:34:40 (c8:4c:75:18:34:40), Dst: 00:0c:29:8f:0a:05 (00:0c:29:8f:0a:05) Destination: 00:0c:29:8f:0a:05 (00:0c:29:8f:0a:05) Address: 00:0c:29:8f:0a:05 (00:0c:29:8f:0a:05) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: c8:4c:75:18:34:40 (c8:4c:75:18:34:40) Address: c8:4c:75:18:34:40 (c8:4c:75:18:34:40) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.118 (165.227.249.118), Dst: 165.227.249.150 (165.227.249.150) Version: 4 Header length: 20 bytes Differentiated Services Field: 0xc0 (DSCP 0x30: Class Selector 6; ECN: 0x00) 1100 00.. = Differentiated Services Codepoint: Class Selector 6 (0x30) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 104 Identification: 0x016d (365) Flags: 0x00 0.. = Reserved bit: Not Set .0. = Don't fragment: Not Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 255 Protocol: UDP (0x11) Header checksum: 0x7a83 [correct] [Good: True] [Bad : False] Source: 165.227.249.118 (165.227.249.118) Destination: 165.227.249.150 (165.227.249.150) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 84 Checksum: 0xe40d [validation disabled] [Good Checksum: False] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 93544D8DBFF4B46E Responder cookie: 6DB267D4A36985D0 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags: 0x01 .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 76 Encrypted payload (48 bytes) 0000 00 0c 29 8f 0a 05 c8 4c 75 18 34 40 08 00 45 c0 ..)....Lu.4@..E. 0010 00 68 01 6d 00 00 ff 11 7a 83 a5 e3 f9 76 a5 e3 .h.m....z....v.. 0020 f9 96 01 f4 01 f4 00 54 e4 0d 93 54 4d 8d bf f4 .......T...TM... 0030 b4 6e 6d b2 67 d4 a3 69 85 d0 05 10 02 01 00 00 .nm.g..i........ 0040 00 00 00 00 00 4c 8a 40 2e 89 a0 f0 f6 e4 29 da .....L.@......). 0050 0a 46 7c d7 a2 35 2b af b6 3e 9a 69 f6 ad 0b f2 .F|..5+..>.i.... 0060 5c 43 2f 2b 76 3c 19 b9 c0 6f f6 94 af cf 09 50 \C/+v<...o.....P 0070 a1 7f 5d b0 cf 9b ..]... Frame 10 (390 bytes on wire, 390 bytes captured) Arrival Time: Nov 30, 2010 10:15:20.016931000 [Time delta from previous captured frame: 0.012083000 seconds] [Time delta from previous displayed frame: 0.012083000 seconds] [Time since reference or first frame: 0.056074000 seconds] Frame Number: 10 Frame Length: 390 bytes Capture Length: 390 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:0c:29:8f:0a:05 (00:0c:29:8f:0a:05), Dst: c8:4c:75:18:34:40 (c8:4c:75:18:34:40) Destination: c8:4c:75:18:34:40 (c8:4c:75:18:34:40) Address: c8:4c:75:18:34:40 (c8:4c:75:18:34:40) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:8f:0a:05 (00:0c:29:8f:0a:05) Address: 00:0c:29:8f:0a:05 (00:0c:29:8f:0a:05) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.118 (165.227.249.118) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 376 Identification: 0x012e (302) Flags: 0x00 0.. = Reserved bit: Not Set .0. = Don't fragment: Not Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf972 [correct] [Good: True] [Bad : False] Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.118 (165.227.249.118) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 356 Checksum: 0xe053 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 93544D8DBFF4B46E Responder cookie: 6DB267D4A36985D0 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags: 0x01 .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x8fd1bc29 Length: 348 Encrypted payload (320 bytes) 0000 c8 4c 75 18 34 40 00 0c 29 8f 0a 05 08 00 45 00 .Lu.4@..).....E. 0010 01 78 01 2e 00 00 80 11 f9 72 a5 e3 f9 96 a5 e3 .x.......r...... 0020 f9 76 01 f4 01 f4 01 64 e0 53 93 54 4d 8d bf f4 .v.....d.S.TM... 0030 b4 6e 6d b2 67 d4 a3 69 85 d0 08 10 20 01 8f d1 .nm.g..i.... ... 0040 bc 29 00 00 01 5c cd 5f 1e 21 94 47 ee 4a 64 06 .)...\._.!.G.Jd. 0050 4f 9e e1 22 c5 0a 47 96 41 c3 7c 8a 99 87 43 dc O.."..G.A.|...C. 0060 65 35 be e8 0b 20 55 f0 6e 02 f0 31 a5 ce 8d 89 e5... U.n..1.... 0070 c1 40 70 80 06 4e cd e5 dd 9f 32 79 22 f7 d3 9e .@p..N....2y"... 0080 04 69 25 d8 36 f7 99 ea 36 b1 45 c2 b9 ca ac 14 .i%.6...6.E..... 0090 18 30 b1 4d 84 ee 88 55 63 f2 28 5b 96 cc bb ac .0.M...Uc.([.... 00a0 74 2c c9 7a c8 c6 48 10 61 f0 1a 1e 18 71 d2 ec t,.z..H.a....q.. 00b0 79 62 f2 2c 0f 2e 53 40 fc d9 2a 6c 81 aa 33 63 yb.,..S@..*l..3c 00c0 38 10 c7 c4 ee d4 d8 57 42 a8 b2 e7 91 d7 78 bf 8......WB.....x. 00d0 7c a7 37 ca eb ba e5 ce 78 46 d2 49 38 8a 1d a0 |.7.....xF.I8... 00e0 ca 83 d1 6a ed 97 ed 8b c1 b2 0c 61 48 59 08 00 ...j.......aHY.. 00f0 41 16 e4 01 8b 35 ce 2d ca d6 d7 43 0c 30 e3 04 A....5.-...C.0.. 0100 c8 f7 f9 60 42 dd b3 5d 46 89 cc 99 9a 89 f9 2e ...`B..]F....... 0110 96 a6 02 11 e7 de 18 1b ba c1 71 d5 16 4b d4 9c ..........q..K.. 0120 95 4f 34 46 0a 6e 09 2a 24 73 9f 78 d4 fd 1e bb .O4F.n.*$s.x.... 0130 cf 6c ed 7d a8 24 3b be 4a bd 1d bf b6 90 39 8a .l.}.$;.J.....9. 0140 df 53 13 9f c2 43 b9 99 fe b7 97 f8 c1 5c 58 ae .S...C.......\X. 0150 10 c9 06 a8 a0 0a 6f 1e 10 16 3e 76 da b2 a3 44 ......o...>v...D 0160 1a b5 75 62 7f 3a 65 19 b0 53 8e 2d be 09 52 11 ..ub.:e..S.-..R. 0170 dc a4 28 15 c4 63 04 05 be d2 4e fb c3 99 66 d3 ..(..c....N...f. 0180 63 39 9d 85 42 0f c9..B. Frame 11 (390 bytes on wire, 390 bytes captured) Arrival Time: Nov 30, 2010 10:15:20.016953000 [Time delta from previous captured frame: 0.000022000 seconds] [Time delta from previous displayed frame: 0.000022000 seconds] [Time since reference or first frame: 0.056096000 seconds] Frame Number: 11 Frame Length: 390 bytes Capture Length: 390 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:0c:29:8f:0a:05 (00:0c:29:8f:0a:05), Dst: c8:4c:75:18:34:40 (c8:4c:75:18:34:40) Destination: c8:4c:75:18:34:40 (c8:4c:75:18:34:40) Address: c8:4c:75:18:34:40 (c8:4c:75:18:34:40) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:8f:0a:05 (00:0c:29:8f:0a:05) Address: 00:0c:29:8f:0a:05 (00:0c:29:8f:0a:05) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.118 (165.227.249.118) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 376 Identification: 0x012e (302) Flags: 0x00 0.. = Reserved bit: Not Set .0. = Don't fragment: Not Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf972 [correct] [Good: True] [Bad : False] Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.118 (165.227.249.118) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 356 Checksum: 0xe053 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 93544D8DBFF4B46E Responder cookie: 6DB267D4A36985D0 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags: 0x01 .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x8fd1bc29 Length: 348 Encrypted payload (320 bytes) 0000 c8 4c 75 18 34 40 00 0c 29 8f 0a 05 08 00 45 00 .Lu.4@..).....E. 0010 01 78 01 2e 00 00 80 11 f9 72 a5 e3 f9 96 a5 e3 .x.......r...... 0020 f9 76 01 f4 01 f4 01 64 e0 53 93 54 4d 8d bf f4 .v.....d.S.TM... 0030 b4 6e 6d b2 67 d4 a3 69 85 d0 08 10 20 01 8f d1 .nm.g..i.... ... 0040 bc 29 00 00 01 5c cd 5f 1e 21 94 47 ee 4a 64 06 .)...\._.!.G.Jd. 0050 4f 9e e1 22 c5 0a 47 96 41 c3 7c 8a 99 87 43 dc O.."..G.A.|...C. 0060 65 35 be e8 0b 20 55 f0 6e 02 f0 31 a5 ce 8d 89 e5... U.n..1.... 0070 c1 40 70 80 06 4e cd e5 dd 9f 32 79 22 f7 d3 9e .@p..N....2y"... 0080 04 69 25 d8 36 f7 99 ea 36 b1 45 c2 b9 ca ac 14 .i%.6...6.E..... 0090 18 30 b1 4d 84 ee 88 55 63 f2 28 5b 96 cc bb ac .0.M...Uc.([.... 00a0 74 2c c9 7a c8 c6 48 10 61 f0 1a 1e 18 71 d2 ec t,.z..H.a....q.. 00b0 79 62 f2 2c 0f 2e 53 40 fc d9 2a 6c 81 aa 33 63 yb.,..S@..*l..3c 00c0 38 10 c7 c4 ee d4 d8 57 42 a8 b2 e7 91 d7 78 bf 8......WB.....x. 00d0 7c a7 37 ca eb ba e5 ce 78 46 d2 49 38 8a 1d a0 |.7.....xF.I8... 00e0 ca 83 d1 6a ed 97 ed 8b c1 b2 0c 61 48 59 08 00 ...j.......aHY.. 00f0 41 16 e4 01 8b 35 ce 2d ca d6 d7 43 0c 30 e3 04 A....5.-...C.0.. 0100 c8 f7 f9 60 42 dd b3 5d 46 89 cc 99 9a 89 f9 2e ...`B..]F....... 0110 96 a6 02 11 e7 de 18 1b ba c1 71 d5 16 4b d4 9c ..........q..K.. 0120 95 4f 34 46 0a 6e 09 2a 24 73 9f 78 d4 fd 1e bb .O4F.n.*$s.x.... 0130 cf 6c ed 7d a8 24 3b be 4a bd 1d bf b6 90 39 8a .l.}.$;.J.....9. 0140 df 53 13 9f c2 43 b9 99 fe b7 97 f8 c1 5c 58 ae .S...C.......\X. 0150 10 c9 06 a8 a0 0a 6f 1e 10 16 3e 76 da b2 a3 44 ......o...>v...D 0160 1a b5 75 62 7f 3a 65 19 b0 53 8e 2d be 09 52 11 ..ub.:e..S.-..R. 0170 dc a4 28 15 c4 63 04 05 be d2 4e fb c3 99 66 d3 ..(..c....N...f. 0180 63 39 9d 85 42 0f c9..B. Frame 12 (374 bytes on wire, 374 bytes captured) Arrival Time: Nov 30, 2010 10:15:20.066366000 [Time delta from previous captured frame: 0.049413000 seconds] [Time delta from previous displayed frame: 0.049413000 seconds] [Time since reference or first frame: 0.105509000 seconds] Frame Number: 12 Frame Length: 374 bytes Capture Length: 374 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: c8:4c:75:18:34:40 (c8:4c:75:18:34:40), Dst: 00:0c:29:8f:0a:05 (00:0c:29:8f:0a:05) Destination: 00:0c:29:8f:0a:05 (00:0c:29:8f:0a:05) Address: 00:0c:29:8f:0a:05 (00:0c:29:8f:0a:05) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: c8:4c:75:18:34:40 (c8:4c:75:18:34:40) Address: c8:4c:75:18:34:40 (c8:4c:75:18:34:40) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.118 (165.227.249.118), Dst: 165.227.249.150 (165.227.249.150) Version: 4 Header length: 20 bytes Differentiated Services Field: 0xc0 (DSCP 0x30: Class Selector 6; ECN: 0x00) 1100 00.. = Differentiated Services Codepoint: Class Selector 6 (0x30) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 360 Identification: 0x016e (366) Flags: 0x00 0.. = Reserved bit: Not Set .0. = Don't fragment: Not Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 255 Protocol: UDP (0x11) Header checksum: 0x7982 [correct] [Good: True] [Bad : False] Source: 165.227.249.118 (165.227.249.118) Destination: 165.227.249.150 (165.227.249.150) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 340 Checksum: 0x1346 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 93544D8DBFF4B46E Responder cookie: 6DB267D4A36985D0 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags: 0x01 .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x8fd1bc29 Length: 332 Encrypted payload (304 bytes) 0000 00 0c 29 8f 0a 05 c8 4c 75 18 34 40 08 00 45 c0 ..)....Lu.4@..E. 0010 01 68 01 6e 00 00 ff 11 79 82 a5 e3 f9 76 a5 e3 .h.n....y....v.. 0020 f9 96 01 f4 01 f4 01 54 13 46 93 54 4d 8d bf f4 .......T.F.TM... 0030 b4 6e 6d b2 67 d4 a3 69 85 d0 08 10 20 01 8f d1 .nm.g..i.... ... 0040 bc 29 00 00 01 4c ca 9d 8a 3c 48 82 db 37 b2 a4 .)...L......... 0020 f9 76 c3 90 c7 db 00 00 00 01 69 34 c8 80 68 af .v........i4..h. 0030 a9 63 77 ee 6b b4 91 15 11 b0 52 1b c2 8e a7 c8 .cw.k.....R..... 0040 f2 20 e4 0b 1c ab 3b 45 57 ac 2d 7a 7f b2 ab b3 . ....;EW.-z.... 0050 07 d4 fc 83 86 58 4e bb e7 b5 d6 14 28 44 bd 1d .....XN.....(D.. 0060 05 65 d8 91 ad 06 ee 62 d5 60 05 73 36 36 5a 12 .e.....b.`.s66Z. 0070 5a e4 84 e7 fb 32 53 f3 7b 70 7a 5d b1 d3 1f 31 Z....2S.{pz]...1 0080 18 69 01 ea c9 9c 43 e5 c2 18 91 ed de bb 3d 5c .i....C.......=\ 0090 78 ff 8c 96 d5 44 1c 5d 87 b1 0e ed ff 36 56 6b x....D.].....6Vk 00a0 a1 19 7b 78 cb 3d d0 fd 1c 77 45 25 5c 6b 6d f9 ..{x.=...wE%\km. 00b0 8d 1f 11 a1 c5 90 83 54 82 24 fd c5 c1 8a 8e 5f .......T.$....._ 00c0 0b d9 d9 e6 6a ee b0 c5 a7 fd ba c2 81 e2 b2 47 ....j..........G 00d0 65 77 6e 22 1d 87 79 90 65 7e 7b 1c 67 ee 4d d6 ewn"..y.e~{.g.M. 00e0 a7 c9 4d 22 fd 37 b8 06 4f 3d 69 08 f3 f0 ef 10 ..M".7..O=i..... 00f0 e9 9c 64 c3 66 b9 d7 cc 73 09 e4 f4 5f d6 9e 40 ..d.f...s..._..@ 0100 da 1a 6f a2 f6 d7 7a 2c 1c 90 8b 88 d6 68 19 0c ..o...z,.....h.. 0110 51 90 32 5d 87 e6 92 3e 19 ce 43 48 c2 25 51 93 Q.2]...>..CH.%Q. 0120 e2 2d af c6 82 4f 45 98 4d 2a 11 f2 d2 44 04 c8 .-...OE.M*...D.. 0130 76 ee 91 12 ff 85 74 8d 9a 54 42 65 d0 28 90 8f v.....t..TBe.(.. 0140 75 85 d6 9a aa ff 73 ed 6c 72 3d 34 14 44 74 20 u.....s.lr=4.Dt 0150 e4 89 05 ab 8e b1 69 f9 82 c8 8f 3d 9b a5 80 e3 ......i....=.... 0160 da 84 da e0 18 63 24 3e fb 16 23 e0 f3 a2 03 a8 .....c$>..#..... 0170 f6 84 79 94 da f3 88 53 6a d6 12 e3 f6 38 42 74 ..y....Sj....8Bt 0180 7b de 9b fa 94 2c 73 0b 49 08 94 0a 56 89 96 ad {....,s.I...V... 0190 c4 a5 b2 53 04 58 ...S.X Frame 16 (406 bytes on wire, 406 bytes captured) Arrival Time: Nov 30, 2010 10:15:26.815129000 [Time delta from previous captured frame: 0.000034000 seconds] [Time delta from previous displayed frame: 0.000034000 seconds] [Time since reference or first frame: 6.854272000 seconds] Frame Number: 16 Frame Length: 406 bytes Capture Length: 406 bytes [Frame is marked: False] [Protocols in frame: eth:ip:esp] Ethernet II, Src: 00:0c:29:8f:0a:05 (00:0c:29:8f:0a:05), Dst: c8:4c:75:18:34:40 (c8:4c:75:18:34:40) Destination: c8:4c:75:18:34:40 (c8:4c:75:18:34:40) Address: c8:4c:75:18:34:40 (c8:4c:75:18:34:40) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:8f:0a:05 (00:0c:29:8f:0a:05) Address: 00:0c:29:8f:0a:05 (00:0c:29:8f:0a:05) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.118 (165.227.249.118) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 392 Identification: 0x0131 (305) Flags: 0x00 0.. = Reserved bit: Not Set .0. = Don't fragment: Not Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 128 Protocol: ESP (0x32) Header checksum: 0xf93e [correct] [Good: True] [Bad : False] Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.118 (165.227.249.118) Encapsulating Security Payload ESP SPI: 0xc390c7db ESP Sequence: 1 0000 c8 4c 75 18 34 40 00 0c 29 8f 0a 05 08 00 45 00 .Lu.4@..).....E. 0010 01 88 01 31 00 00 80 32 f9 3e a5 e3 f9 96 a5 e3 ...1...2.>...... 0020 f9 76 c3 90 c7 db 00 00 00 01 69 34 c8 80 68 af .v........i4..h. 0030 a9 63 77 ee 6b b4 91 15 11 b0 52 1b c2 8e a7 c8 .cw.k.....R..... 0040 f2 20 e4 0b 1c ab 3b 45 57 ac 2d 7a 7f b2 ab b3 . ....;EW.-z.... 0050 07 d4 fc 83 86 58 4e bb e7 b5 d6 14 28 44 bd 1d .....XN.....(D.. 0060 05 65 d8 91 ad 06 ee 62 d5 60 05 73 36 36 5a 12 .e.....b.`.s66Z. 0070 5a e4 84 e7 fb 32 53 f3 7b 70 7a 5d b1 d3 1f 31 Z....2S.{pz]...1 0080 18 69 01 ea c9 9c 43 e5 c2 18 91 ed de bb 3d 5c .i....C.......=\ 0090 78 ff 8c 96 d5 44 1c 5d 87 b1 0e ed ff 36 56 6b x....D.].....6Vk 00a0 a1 19 7b 78 cb 3d d0 fd 1c 77 45 25 5c 6b 6d f9 ..{x.=...wE%\km. 00b0 8d 1f 11 a1 c5 90 83 54 82 24 fd c5 c1 8a 8e 5f .......T.$....._ 00c0 0b d9 d9 e6 6a ee b0 c5 a7 fd ba c2 81 e2 b2 47 ....j..........G 00d0 65 77 6e 22 1d 87 79 90 65 7e 7b 1c 67 ee 4d d6 ewn"..y.e~{.g.M. 00e0 a7 c9 4d 22 fd 37 b8 06 4f 3d 69 08 f3 f0 ef 10 ..M".7..O=i..... 00f0 e9 9c 64 c3 66 b9 d7 cc 73 09 e4 f4 5f d6 9e 40 ..d.f...s..._..@ 0100 da 1a 6f a2 f6 d7 7a 2c 1c 90 8b 88 d6 68 19 0c ..o...z,.....h.. 0110 51 90 32 5d 87 e6 92 3e 19 ce 43 48 c2 25 51 93 Q.2]...>..CH.%Q. 0120 e2 2d af c6 82 4f 45 98 4d 2a 11 f2 d2 44 04 c8 .-...OE.M*...D.. 0130 76 ee 91 12 ff 85 74 8d 9a 54 42 65 d0 28 90 8f v.....t..TBe.(.. 0140 75 85 d6 9a aa ff 73 ed 6c 72 3d 34 14 44 74 20 u.....s.lr=4.Dt 0150 e4 89 05 ab 8e b1 69 f9 82 c8 8f 3d 9b a5 80 e3 ......i....=.... 0160 da 84 da e0 18 63 24 3e fb 16 23 e0 f3 a2 03 a8 .....c$>..#..... 0170 f6 84 79 94 da f3 88 53 6a d6 12 e3 f6 38 42 74 ..y....Sj....8Bt 0180 7b de 9b fa 94 2c 73 0b 49 08 94 0a 56 89 96 ad {....,s.I...V... 0190 c4 a5 b2 53 04 58 ...S.X Frame 17 (406 bytes on wire, 406 bytes captured) Arrival Time: Nov 30, 2010 10:15:26.818380000 [Time delta from previous captured frame: 0.003251000 seconds] [Time delta from previous displayed frame: 0.003251000 seconds] [Time since reference or first frame: 6.857523000 seconds] Frame Number: 17 Frame Length: 406 bytes Capture Length: 406 bytes [Frame is marked: False] [Protocols in frame: eth:ip:esp] Ethernet II, Src: c8:4c:75:18:34:40 (c8:4c:75:18:34:40), Dst: 00:0c:29:8f:0a:05 (00:0c:29:8f:0a:05) Destination: 00:0c:29:8f:0a:05 (00:0c:29:8f:0a:05) Address: 00:0c:29:8f:0a:05 (00:0c:29:8f:0a:05) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: c8:4c:75:18:34:40 (c8:4c:75:18:34:40) Address: c8:4c:75:18:34:40 (c8:4c:75:18:34:40) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.118 (165.227.249.118), Dst: 165.227.249.150 (165.227.249.150) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 392 Identification: 0x0170 (368) Flags: 0x00 0.. = Reserved bit: Not Set .0. = Don't fragment: Not Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x79ff [correct] [Good: True] [Bad : False] Source: 165.227.249.118 (165.227.249.118) Destination: 165.227.249.150 (165.227.249.150) Encapsulating Security Payload ESP SPI: 0x90f5ae36 ESP Sequence: 1 0000 00 0c 29 8f 0a 05 c8 4c 75 18 34 40 08 00 45 00 ..)....Lu.4@..E. 0010 01 88 01 70 00 00 ff 32 79 ff a5 e3 f9 76 a5 e3 ...p...2y....v.. 0020 f9 96 90 f5 ae 36 00 00 00 01 e0 8b e4 8f b9 28 .....6.........( 0030 59 35 22 26 c9 49 c6 4c a2 3e 91 d4 76 e5 a8 bc Y5"&.I.L.>..v... 0040 7c a4 94 cd 55 08 b1 b7 fa 8f de de 42 60 f3 a5 |...U.......B`.. 0050 27 eb b2 88 ff 83 8e fb 02 a5 b2 a1 4c f4 d5 2b '...........L..+ 0060 f3 f1 28 80 7c b5 f3 eb 24 47 b9 08 ce 36 6c 1a ..(.|...$G...6l. 0070 81 ca 84 d0 3b 5a 4d ec e8 d8 9b 61 b9 29 9b 6f ....;ZM....a.).o 0080 36 fd 1e 9f 3b 1b 28 e1 3e 34 67 56 e3 f9 8c a7 6...;.(.>4gV.... 0090 e6 ce aa c7 c5 58 c3 04 c8 4e 1e c4 1a cb 05 a3 .....X...N...... 00a0 a2 75 c8 9d 5a b2 3b ef e9 bc 4b d1 74 23 6b 2f .u..Z.;...K.t#k/ 00b0 26 2e ca 5e a2 0c b1 db 20 ed 92 32 48 40 ce ac &..^.... ..2H@.. 00c0 3a 0a 94 26 55 b8 b8 a5 39 1a f4 74 71 96 76 d1 :..&U...9..tq.v. 00d0 0d f0 e5 ad ed 5b e0 23 8d e7 b6 02 31 ef 38 03 .....[.#....1.8. 00e0 a2 dc e7 2f 94 53 67 5a c1 04 46 20 8b ac bd 7e .../.SgZ..F ...~ 00f0 a8 a3 0d 62 28 d7 8c c0 85 cb 0a 02 8a d5 3c a5 ...b(.........<. 0100 53 f4 50 08 63 64 db b5 2f e8 3f e1 25 86 b6 5d S.P.cd../.?.%..] 0110 a1 9f 2e 7c bc d4 73 39 c7 9c ae a8 a0 4b 77 9b ...|..s9.....Kw. 0120 ca fb 31 c3 2d 8a 66 d1 f3 97 b6 e8 a8 0e e0 bd ..1.-.f......... 0130 12 5f 4e 87 4e b6 42 44 fd d7 7d 64 1c af 24 92 ._N.N.BD..}d..$. 0140 ba a6 97 ca 56 bb 78 94 22 a7 f3 41 fa 5b ae 63 ....V.x."..A.[.c 0150 48 4a 66 7b eb a1 38 46 f5 2d ff 78 4e 8b 3c 45 HJf{..8F.-.xN.