Frame 1 (226 bytes on wire, 226 bytes captured) Arrival Time: Aug 11, 2010 11:13:56.176270000 [Time delta from previous captured frame: 0.000000000 seconds] [Time delta from previous displayed frame: 0.000000000 seconds] [Time since reference or first frame: 0.000000000 seconds] Frame Number: 1 Frame Length: 226 bytes Capture Length: 226 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00), Dst: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) Destination: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) Address: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00) Address: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 212 Identification: 0x1148 (4424) Flags: 0x00 0.. = Reserved bit: Not Set .0. = Don't fragment: Not Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xe9f8 [correct] [Good: True] [Bad : False] Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.122 (165.227.249.122) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 192 Checksum: 0x8239 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 61CCEF4FE89C99F8 Responder cookie: 0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags: 0x00 .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 184 Security Association payload Next payload: Vendor ID (13) Payload length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Payload length: 44 Proposal number: 1 Protocol ID: ISAKMP (1) SPI Size: 0 Proposal transforms: 1 Transform payload # 1 Next payload: NONE (0) Payload length: 36 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): AES-CBC (7) Key-Length (14): Key-Length (128) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID: RFC 3947 Negotiation of NAT-Traversal in the IKE Next payload: Vendor ID (13) Payload length: 20 Vendor ID: RFC 3947 Negotiation of NAT-Traversal in the IKE Vendor ID: draft-ietf-ipsec-nat-t-ike-03 Next payload: Vendor ID (13) Payload length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-03 Vendor ID: draft-ietf-ipsec-nat-t-ike-02\n Next payload: Vendor ID (13) Payload length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02\n Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Next payload: Vendor ID (13) Payload length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Vendor ID: RFC 3706 Detecting Dead IKE Peers (DPD) Next payload: NONE (0) Payload length: 20 Vendor ID: RFC 3706 Detecting Dead IKE Peers (DPD) 0000 00 0c 29 51 89 a7 00 0c 29 93 b9 00 08 00 45 00 ..)Q....).....E. 0010 00 d4 11 48 00 00 80 11 e9 f8 a5 e3 f9 96 a5 e3 ...H............ 0020 f9 7a 01 f4 01 f4 00 c0 82 39 61 cc ef 4f e8 9c .z.......9a..O.. 0030 99 f8 00 00 00 00 00 00 00 00 01 10 02 00 00 00 ................ 0040 00 00 00 00 00 b8 0d 00 00 38 00 00 00 01 00 00 .........8...... 0050 00 01 00 00 00 2c 01 01 00 01 00 00 00 24 01 01 .....,.......$.. 0060 00 00 80 01 00 07 80 0e 00 80 80 02 00 02 80 04 ................ 0070 00 02 80 03 00 01 80 0b 00 01 80 0c 70 80 0d 00 ............p... 0080 00 14 4a 13 1c 81 07 03 58 45 5c 57 28 f2 0e 95 ..J.....XE\W(... 0090 45 2f 0d 00 00 14 7d 94 19 a6 53 10 ca 6f 2c 17 E/....}...S..o,. 00a0 9d 92 15 52 9d 56 0d 00 00 14 90 cb 80 91 3e bb ...R.V........>. 00b0 69 6e 08 63 81 b5 ec 42 7b 1f 0d 00 00 14 44 85 in.c...B{.....D. 00c0 15 2d 18 b6 bb cd 0b e8 a8 46 95 79 dd cc 00 00 .-.......F.y.... 00d0 00 14 af ca d7 13 68 a1 f1 c9 6b 86 96 fc 77 57 ......h...k...wW 00e0 01 00 .. Frame 2 (226 bytes on wire, 226 bytes captured) Arrival Time: Aug 11, 2010 11:13:56.176280000 [Time delta from previous captured frame: 0.000010000 seconds] [Time delta from previous displayed frame: 0.000010000 seconds] [Time since reference or first frame: 0.000010000 seconds] Frame Number: 2 Frame Length: 226 bytes Capture Length: 226 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00), Dst: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) Destination: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) Address: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00) Address: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 212 Identification: 0x1148 (4424) Flags: 0x00 0.. = Reserved bit: Not Set .0. = Don't fragment: Not Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xe9f8 [correct] [Good: True] [Bad : False] Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.122 (165.227.249.122) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 192 Checksum: 0x8239 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 61CCEF4FE89C99F8 Responder cookie: 0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags: 0x00 .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 184 Security Association payload Next payload: Vendor ID (13) Payload length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Payload length: 44 Proposal number: 1 Protocol ID: ISAKMP (1) SPI Size: 0 Proposal transforms: 1 Transform payload # 1 Next payload: NONE (0) Payload length: 36 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): AES-CBC (7) Key-Length (14): Key-Length (128) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID: RFC 3947 Negotiation of NAT-Traversal in the IKE Next payload: Vendor ID (13) Payload length: 20 Vendor ID: RFC 3947 Negotiation of NAT-Traversal in the IKE Vendor ID: draft-ietf-ipsec-nat-t-ike-03 Next payload: Vendor ID (13) Payload length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-03 Vendor ID: draft-ietf-ipsec-nat-t-ike-02\n Next payload: Vendor ID (13) Payload length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02\n Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Next payload: Vendor ID (13) Payload length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Vendor ID: RFC 3706 Detecting Dead IKE Peers (DPD) Next payload: NONE (0) Payload length: 20 Vendor ID: RFC 3706 Detecting Dead IKE Peers (DPD) 0000 00 0c 29 51 89 a7 00 0c 29 93 b9 00 08 00 45 00 ..)Q....).....E. 0010 00 d4 11 48 00 00 80 11 e9 f8 a5 e3 f9 96 a5 e3 ...H............ 0020 f9 7a 01 f4 01 f4 00 c0 82 39 61 cc ef 4f e8 9c .z.......9a..O.. 0030 99 f8 00 00 00 00 00 00 00 00 01 10 02 00 00 00 ................ 0040 00 00 00 00 00 b8 0d 00 00 38 00 00 00 01 00 00 .........8...... 0050 00 01 00 00 00 2c 01 01 00 01 00 00 00 24 01 01 .....,.......$.. 0060 00 00 80 01 00 07 80 0e 00 80 80 02 00 02 80 04 ................ 0070 00 02 80 03 00 01 80 0b 00 01 80 0c 70 80 0d 00 ............p... 0080 00 14 4a 13 1c 81 07 03 58 45 5c 57 28 f2 0e 95 ..J.....XE\W(... 0090 45 2f 0d 00 00 14 7d 94 19 a6 53 10 ca 6f 2c 17 E/....}...S..o,. 00a0 9d 92 15 52 9d 56 0d 00 00 14 90 cb 80 91 3e bb ...R.V........>. 00b0 69 6e 08 63 81 b5 ec 42 7b 1f 0d 00 00 14 44 85 in.c...B{.....D. 00c0 15 2d 18 b6 bb cd 0b e8 a8 46 95 79 dd cc 00 00 .-.......F.y.... 00d0 00 14 af ca d7 13 68 a1 f1 c9 6b 86 96 fc 77 57 ......h...k...wW 00e0 01 00 .. Frame 3 (126 bytes on wire, 126 bytes captured) Arrival Time: Aug 11, 2010 11:13:56.177574000 [Time delta from previous captured frame: 0.001294000 seconds] [Time delta from previous displayed frame: 0.001294000 seconds] [Time since reference or first frame: 0.001304000 seconds] Frame Number: 3 Frame Length: 126 bytes Capture Length: 126 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7), Dst: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00) Destination: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00) Address: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) Address: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.122 (165.227.249.122), Dst: 165.227.249.150 (165.227.249.150) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x406d (16493) Flags: 0x00 0.. = Reserved bit: Not Set .0. = Don't fragment: Not Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb37 [correct] [Good: True] [Bad : False] Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.150 (165.227.249.150) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 92 Checksum: 0xf6ff [validation disabled] [Good Checksum: False] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 61CCEF4FE89C99F8 Responder cookie: E549F66C3C23E2B8 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags: 0x00 .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 84 Security Association payload Next payload: NONE (0) Payload length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Payload length: 44 Proposal number: 1 Protocol ID: ISAKMP (1) SPI Size: 0 Proposal transforms: 1 Transform payload # 1 Next payload: NONE (0) Payload length: 36 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): AES-CBC (7) Key-Length (14): Key-Length (128) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) 0000 00 0c 29 93 b9 00 00 0c 29 51 89 a7 08 00 45 00 ..).....)Q....E. 0010 00 70 40 6d 00 00 40 11 fb 37 a5 e3 f9 7a a5 e3 .p@m..@..7...z.. 0020 f9 96 01 f4 01 f4 00 5c f6 ff 61 cc ef 4f e8 9c .......\..a..O.. 0030 99 f8 e5 49 f6 6c 3c 23 e2 b8 01 10 02 00 00 00 ...I.l<#........ 0040 00 00 00 00 00 54 00 00 00 38 00 00 00 01 00 00 .....T...8...... 0050 00 01 00 00 00 2c 01 01 00 01 00 00 00 24 01 01 .....,.......$.. 0060 00 00 80 01 00 07 80 0e 00 80 80 02 00 02 80 04 ................ 0070 00 02 80 03 00 01 80 0b 00 01 80 0c 70 80 ............p. Frame 4 (126 bytes on wire, 126 bytes captured) Arrival Time: Aug 11, 2010 11:13:56.177590000 [Time delta from previous captured frame: 0.000016000 seconds] [Time delta from previous displayed frame: 0.000016000 seconds] [Time since reference or first frame: 0.001320000 seconds] Frame Number: 4 Frame Length: 126 bytes Capture Length: 126 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7), Dst: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00) Destination: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00) Address: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) Address: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.122 (165.227.249.122), Dst: 165.227.249.150 (165.227.249.150) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x406d (16493) Flags: 0x00 0.. = Reserved bit: Not Set .0. = Don't fragment: Not Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb37 [correct] [Good: True] [Bad : False] Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.150 (165.227.249.150) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 92 Checksum: 0xf6ff [validation disabled] [Good Checksum: False] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 61CCEF4FE89C99F8 Responder cookie: E549F66C3C23E2B8 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags: 0x00 .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 84 Security Association payload Next payload: NONE (0) Payload length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Payload length: 44 Proposal number: 1 Protocol ID: ISAKMP (1) SPI Size: 0 Proposal transforms: 1 Transform payload # 1 Next payload: NONE (0) Payload length: 36 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): AES-CBC (7) Key-Length (14): Key-Length (128) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) 0000 00 0c 29 93 b9 00 00 0c 29 51 89 a7 08 00 45 00 ..).....)Q....E. 0010 00 70 40 6d 00 00 40 11 fb 37 a5 e3 f9 7a a5 e3 .p@m..@..7...z.. 0020 f9 96 01 f4 01 f4 00 5c f6 ff 61 cc ef 4f e8 9c .......\..a..O.. 0030 99 f8 e5 49 f6 6c 3c 23 e2 b8 01 10 02 00 00 00 ...I.l<#........ 0040 00 00 00 00 00 54 00 00 00 38 00 00 00 01 00 00 .....T...8...... 0050 00 01 00 00 00 2c 01 01 00 01 00 00 00 24 01 01 .....,.......$.. 0060 00 00 80 01 00 07 80 0e 00 80 80 02 00 02 80 04 ................ 0070 00 02 80 03 00 01 80 0b 00 01 80 0c 70 80 ............p. Frame 5 (270 bytes on wire, 270 bytes captured) Arrival Time: Aug 11, 2010 11:13:56.184809000 [Time delta from previous captured frame: 0.007219000 seconds] [Time delta from previous displayed frame: 0.007219000 seconds] [Time since reference or first frame: 0.008539000 seconds] Frame Number: 5 Frame Length: 270 bytes Capture Length: 270 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00), Dst: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) Destination: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) Address: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00) Address: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 256 Identification: 0x1149 (4425) Flags: 0x00 0.. = Reserved bit: Not Set .0. = Don't fragment: Not Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xe9cb [correct] [Good: True] [Bad : False] Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.122 (165.227.249.122) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 236 Checksum: 0x654c [validation disabled] [Good Checksum: False] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 61CCEF4FE89C99F8 Responder cookie: E549F66C3C23E2B8 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags: 0x00 .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 228 Key Exchange payload Next payload: Nonce (10) Payload length: 132 Key Exchange Data (128 bytes / 1024 bits) Nonce payload Next payload: NONE (0) Payload length: 68 Nonce Data 0000 00 0c 29 51 89 a7 00 0c 29 93 b9 00 08 00 45 00 ..)Q....).....E. 0010 01 00 11 49 00 00 80 11 e9 cb a5 e3 f9 96 a5 e3 ...I............ 0020 f9 7a 01 f4 01 f4 00 ec 65 4c 61 cc ef 4f e8 9c .z......eLa..O.. 0030 99 f8 e5 49 f6 6c 3c 23 e2 b8 04 10 02 00 00 00 ...I.l<#........ 0040 00 00 00 00 00 e4 0a 00 00 84 d7 ac 54 7f 8a a1 ............T... 0050 23 f3 15 e2 08 13 43 ae aa 38 55 4a ff 02 48 78 #.....C..8UJ..Hx 0060 61 1c d6 c1 7d ad 1d b4 d7 5b c3 d0 0b cd b9 2d a...}....[.....- 0070 90 39 61 65 45 c6 37 2c 16 bf a2 15 00 43 e7 c4 .9aeE.7,.....C.. 0080 fc 83 d8 0b 38 58 ab 69 f0 4c 63 ef a3 f2 11 a7 ....8X.i.Lc..... 0090 af 1b 8d c0 4e d3 18 46 d9 36 f9 7c 45 9f 21 cb ....N..F.6.|E.!. 00a0 3a 36 31 f4 7c 49 e3 16 7a 21 f0 c1 27 e4 7c 9d :61.|I..z!..'.|. 00b0 1b dc ea cc ff 1f 2a 41 61 e7 9a f6 30 85 54 f1 ......*Aa...0.T. 00c0 f9 f5 24 01 d8 8b 3e 47 95 29 00 00 00 44 5c 98 ..$...>G.)...D\. 00d0 15 f6 ce 5d 80 1e 08 0b 0b b6 bf 49 43 f0 d9 a9 ...].......IC... 00e0 69 c5 ad 82 75 c8 c7 2f a6 a1 ec 73 7a 50 d6 ba i...u../...szP.. 00f0 c8 52 35 54 99 95 e5 1b 9f 9d 48 e9 21 15 e2 2d .R5T......H.!..- 0100 dc 57 9b 94 ce b5 ca 46 a7 b2 9b 63 12 20 .W.....F...c. Frame 6 (270 bytes on wire, 270 bytes captured) Arrival Time: Aug 11, 2010 11:13:56.184825000 [Time delta from previous captured frame: 0.000016000 seconds] [Time delta from previous displayed frame: 0.000016000 seconds] [Time since reference or first frame: 0.008555000 seconds] Frame Number: 6 Frame Length: 270 bytes Capture Length: 270 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00), Dst: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) Destination: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) Address: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00) Address: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 256 Identification: 0x1149 (4425) Flags: 0x00 0.. = Reserved bit: Not Set .0. = Don't fragment: Not Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xe9cb [correct] [Good: True] [Bad : False] Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.122 (165.227.249.122) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 236 Checksum: 0x654c [validation disabled] [Good Checksum: False] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 61CCEF4FE89C99F8 Responder cookie: E549F66C3C23E2B8 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags: 0x00 .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 228 Key Exchange payload Next payload: Nonce (10) Payload length: 132 Key Exchange Data (128 bytes / 1024 bits) Nonce payload Next payload: NONE (0) Payload length: 68 Nonce Data 0000 00 0c 29 51 89 a7 00 0c 29 93 b9 00 08 00 45 00 ..)Q....).....E. 0010 01 00 11 49 00 00 80 11 e9 cb a5 e3 f9 96 a5 e3 ...I............ 0020 f9 7a 01 f4 01 f4 00 ec 65 4c 61 cc ef 4f e8 9c .z......eLa..O.. 0030 99 f8 e5 49 f6 6c 3c 23 e2 b8 04 10 02 00 00 00 ...I.l<#........ 0040 00 00 00 00 00 e4 0a 00 00 84 d7 ac 54 7f 8a a1 ............T... 0050 23 f3 15 e2 08 13 43 ae aa 38 55 4a ff 02 48 78 #.....C..8UJ..Hx 0060 61 1c d6 c1 7d ad 1d b4 d7 5b c3 d0 0b cd b9 2d a...}....[.....- 0070 90 39 61 65 45 c6 37 2c 16 bf a2 15 00 43 e7 c4 .9aeE.7,.....C.. 0080 fc 83 d8 0b 38 58 ab 69 f0 4c 63 ef a3 f2 11 a7 ....8X.i.Lc..... 0090 af 1b 8d c0 4e d3 18 46 d9 36 f9 7c 45 9f 21 cb ....N..F.6.|E.!. 00a0 3a 36 31 f4 7c 49 e3 16 7a 21 f0 c1 27 e4 7c 9d :61.|I..z!..'.|. 00b0 1b dc ea cc ff 1f 2a 41 61 e7 9a f6 30 85 54 f1 ......*Aa...0.T. 00c0 f9 f5 24 01 d8 8b 3e 47 95 29 00 00 00 44 5c 98 ..$...>G.)...D\. 00d0 15 f6 ce 5d 80 1e 08 0b 0b b6 bf 49 43 f0 d9 a9 ...].......IC... 00e0 69 c5 ad 82 75 c8 c7 2f a6 a1 ec 73 7a 50 d6 ba i...u../...szP.. 00f0 c8 52 35 54 99 95 e5 1b 9f 9d 48 e9 21 15 e2 2d .R5T......H.!..- 0100 dc 57 9b 94 ce b5 ca 46 a7 b2 9b 63 12 20 .W.....F...c. Frame 7 (226 bytes on wire, 226 bytes captured) Arrival Time: Aug 11, 2010 11:13:56.185789000 [Time delta from previous captured frame: 0.000964000 seconds] [Time delta from previous displayed frame: 0.000964000 seconds] [Time since reference or first frame: 0.009519000 seconds] Frame Number: 7 Frame Length: 226 bytes Capture Length: 226 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7), Dst: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00) Destination: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00) Address: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) Address: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.122 (165.227.249.122), Dst: 165.227.249.150 (165.227.249.150) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 212 Identification: 0x406e (16494) Flags: 0x00 0.. = Reserved bit: Not Set .0. = Don't fragment: Not Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfad2 [correct] [Good: True] [Bad : False] Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.150 (165.227.249.150) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 192 Checksum: 0x4946 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 61CCEF4FE89C99F8 Responder cookie: E549F66C3C23E2B8 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags: 0x00 .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 184 Key Exchange payload Next payload: Nonce (10) Payload length: 132 Key Exchange Data (128 bytes / 1024 bits) Nonce payload Next payload: NONE (0) Payload length: 24 Nonce Data 0000 00 0c 29 93 b9 00 00 0c 29 51 89 a7 08 00 45 00 ..).....)Q....E. 0010 00 d4 40 6e 00 00 40 11 fa d2 a5 e3 f9 7a a5 e3 ..@n..@......z.. 0020 f9 96 01 f4 01 f4 00 c0 49 46 61 cc ef 4f e8 9c ........IFa..O.. 0030 99 f8 e5 49 f6 6c 3c 23 e2 b8 04 10 02 00 00 00 ...I.l<#........ 0040 00 00 00 00 00 b8 0a 00 00 84 ce 7c df e2 6c b3 ...........|..l. 0050 b1 d3 13 22 d0 12 8a bf e1 27 34 7b 18 c9 c1 6d ...".....'4{...m 0060 82 ae ca 71 a4 57 0b 73 7d 02 1d b7 59 7c 48 6f ...q.W.s}...Y|Ho 0070 ef 34 a8 cd b9 1a e4 88 87 69 59 ae 8a 50 e8 7f .4.......iY..P.. 0080 45 c8 ec a6 49 9d a6 f8 f7 be 40 43 52 de f8 00 E...I.....@CR... 0090 3b 1c 41 0b b5 47 c0 f0 1a 5c c1 92 93 a5 15 e6 ;.A..G...\...... 00a0 dc cb 6b 4c fc 1e e1 d7 ea 64 1d 25 1e c1 04 58 ..kL.....d.%...X 00b0 a0 b3 f5 82 0e b9 6a 8e 18 9b 3c 23 48 97 50 de ......j...<#H.P. 00c0 04 44 d5 80 85 9d f9 33 45 7d 00 00 00 18 20 d7 .D.....3E}.... . 00d0 c1 e4 32 bf 04 d7 8e 12 6e b2 b5 47 13 6a d0 72 ..2.....n..G.j.r 00e0 ea 75 .u Frame 8 (226 bytes on wire, 226 bytes captured) Arrival Time: Aug 11, 2010 11:13:56.185806000 [Time delta from previous captured frame: 0.000017000 seconds] [Time delta from previous displayed frame: 0.000017000 seconds] [Time since reference or first frame: 0.009536000 seconds] Frame Number: 8 Frame Length: 226 bytes Capture Length: 226 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7), Dst: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00) Destination: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00) Address: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) Address: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.122 (165.227.249.122), Dst: 165.227.249.150 (165.227.249.150) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 212 Identification: 0x406e (16494) Flags: 0x00 0.. = Reserved bit: Not Set .0. = Don't fragment: Not Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfad2 [correct] [Good: True] [Bad : False] Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.150 (165.227.249.150) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 192 Checksum: 0x4946 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 61CCEF4FE89C99F8 Responder cookie: E549F66C3C23E2B8 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags: 0x00 .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 184 Key Exchange payload Next payload: Nonce (10) Payload length: 132 Key Exchange Data (128 bytes / 1024 bits) Nonce payload Next payload: NONE (0) Payload length: 24 Nonce Data 0000 00 0c 29 93 b9 00 00 0c 29 51 89 a7 08 00 45 00 ..).....)Q....E. 0010 00 d4 40 6e 00 00 40 11 fa d2 a5 e3 f9 7a a5 e3 ..@n..@......z.. 0020 f9 96 01 f4 01 f4 00 c0 49 46 61 cc ef 4f e8 9c ........IFa..O.. 0030 99 f8 e5 49 f6 6c 3c 23 e2 b8 04 10 02 00 00 00 ...I.l<#........ 0040 00 00 00 00 00 b8 0a 00 00 84 ce 7c df e2 6c b3 ...........|..l. 0050 b1 d3 13 22 d0 12 8a bf e1 27 34 7b 18 c9 c1 6d ...".....'4{...m 0060 82 ae ca 71 a4 57 0b 73 7d 02 1d b7 59 7c 48 6f ...q.W.s}...Y|Ho 0070 ef 34 a8 cd b9 1a e4 88 87 69 59 ae 8a 50 e8 7f .4.......iY..P.. 0080 45 c8 ec a6 49 9d a6 f8 f7 be 40 43 52 de f8 00 E...I.....@CR... 0090 3b 1c 41 0b b5 47 c0 f0 1a 5c c1 92 93 a5 15 e6 ;.A..G...\...... 00a0 dc cb 6b 4c fc 1e e1 d7 ea 64 1d 25 1e c1 04 58 ..kL.....d.%...X 00b0 a0 b3 f5 82 0e b9 6a 8e 18 9b 3c 23 48 97 50 de ......j...<#H.P. 00c0 04 44 d5 80 85 9d f9 33 45 7d 00 00 00 18 20 d7 .D.....3E}.... . 00d0 c1 e4 32 bf 04 d7 8e 12 6e b2 b5 47 13 6a d0 72 ..2.....n..G.j.r 00e0 ea 75 .u Frame 9 (150 bytes on wire, 150 bytes captured) Arrival Time: Aug 11, 2010 11:13:56.188763000 [Time delta from previous captured frame: 0.002957000 seconds] [Time delta from previous displayed frame: 0.002957000 seconds] [Time since reference or first frame: 0.012493000 seconds] Frame Number: 9 Frame Length: 150 bytes Capture Length: 150 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00), Dst: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) Destination: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) Address: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00) Address: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 136 Identification: 0x114a (4426) Flags: 0x00 0.. = Reserved bit: Not Set .0. = Don't fragment: Not Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xea42 [correct] [Good: True] [Bad : False] Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.122 (165.227.249.122) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 116 Checksum: 0x6ec7 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 61CCEF4FE89C99F8 Responder cookie: E549F66C3C23E2B8 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags: 0x01 .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 108 Encrypted payload (80 bytes) 0000 00 0c 29 51 89 a7 00 0c 29 93 b9 00 08 00 45 00 ..)Q....).....E. 0010 00 88 11 4a 00 00 80 11 ea 42 a5 e3 f9 96 a5 e3 ...J.....B...... 0020 f9 7a 01 f4 01 f4 00 74 6e c7 61 cc ef 4f e8 9c .z.....tn.a..O.. 0030 99 f8 e5 49 f6 6c 3c 23 e2 b8 05 10 02 01 00 00 ...I.l<#........ 0040 00 00 00 00 00 6c 21 b6 a2 5f 72 03 16 c5 80 2d .....l!.._r....- 0050 d5 a4 12 9a 24 43 49 51 96 12 4b 0b 04 71 67 8f ....$CIQ..K..qg. 0060 b1 61 37 39 85 42 03 7f fb 0a ce 30 da 5d 45 35 .a79.B.....0.]E5 0070 8b 2b 9c 00 c7 14 bd d1 cb 71 98 67 60 cb 84 24 .+.......q.g`..$ 0080 d4 fa 98 33 a8 21 44 57 8e c7 d6 d4 a4 57 19 13 ...3.!DW.....W.. 0090 6d 7e 68 e7 65 a3 m~h.e. Frame 10 (150 bytes on wire, 150 bytes captured) Arrival Time: Aug 11, 2010 11:13:56.188774000 [Time delta from previous captured frame: 0.000011000 seconds] [Time delta from previous displayed frame: 0.000011000 seconds] [Time since reference or first frame: 0.012504000 seconds] Frame Number: 10 Frame Length: 150 bytes Capture Length: 150 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00), Dst: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) Destination: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) Address: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00) Address: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 136 Identification: 0x114a (4426) Flags: 0x00 0.. = Reserved bit: Not Set .0. = Don't fragment: Not Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xea42 [correct] [Good: True] [Bad : False] Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.122 (165.227.249.122) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 116 Checksum: 0x6ec7 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 61CCEF4FE89C99F8 Responder cookie: E549F66C3C23E2B8 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags: 0x01 .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 108 Encrypted payload (80 bytes) 0000 00 0c 29 51 89 a7 00 0c 29 93 b9 00 08 00 45 00 ..)Q....).....E. 0010 00 88 11 4a 00 00 80 11 ea 42 a5 e3 f9 96 a5 e3 ...J.....B...... 0020 f9 7a 01 f4 01 f4 00 74 6e c7 61 cc ef 4f e8 9c .z.....tn.a..O.. 0030 99 f8 e5 49 f6 6c 3c 23 e2 b8 05 10 02 01 00 00 ...I.l<#........ 0040 00 00 00 00 00 6c 21 b6 a2 5f 72 03 16 c5 80 2d .....l!.._r....- 0050 d5 a4 12 9a 24 43 49 51 96 12 4b 0b 04 71 67 8f ....$CIQ..K..qg. 0060 b1 61 37 39 85 42 03 7f fb 0a ce 30 da 5d 45 35 .a79.B.....0.]E5 0070 8b 2b 9c 00 c7 14 bd d1 cb 71 98 67 60 cb 84 24 .+.......q.g`..$ 0080 d4 fa 98 33 a8 21 44 57 8e c7 d6 d4 a4 57 19 13 ...3.!DW.....W.. 0090 6d 7e 68 e7 65 a3 m~h.e. Frame 11 (118 bytes on wire, 118 bytes captured) Arrival Time: Aug 11, 2010 11:13:56.191837000 [Time delta from previous captured frame: 0.003063000 seconds] [Time delta from previous displayed frame: 0.003063000 seconds] [Time since reference or first frame: 0.015567000 seconds] Frame Number: 11 Frame Length: 118 bytes Capture Length: 118 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7), Dst: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00) Destination: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00) Address: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) Address: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.122 (165.227.249.122), Dst: 165.227.249.150 (165.227.249.150) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 104 Identification: 0x406f (16495) Flags: 0x00 0.. = Reserved bit: Not Set .0. = Don't fragment: Not Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb3d [correct] [Good: True] [Bad : False] Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.150 (165.227.249.150) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 84 Checksum: 0x78a3 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 61CCEF4FE89C99F8 Responder cookie: E549F66C3C23E2B8 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags: 0x01 .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 76 Encrypted payload (48 bytes) 0000 00 0c 29 93 b9 00 00 0c 29 51 89 a7 08 00 45 00 ..).....)Q....E. 0010 00 68 40 6f 00 00 40 11 fb 3d a5 e3 f9 7a a5 e3 .h@o..@..=...z.. 0020 f9 96 01 f4 01 f4 00 54 78 a3 61 cc ef 4f e8 9c .......Tx.a..O.. 0030 99 f8 e5 49 f6 6c 3c 23 e2 b8 05 10 02 01 00 00 ...I.l<#........ 0040 00 00 00 00 00 4c 37 6b 6e 54 9e bd 8f 4d 3b 5e .....L7knT...M;^ 0050 bf a6 57 fb c5 71 65 09 59 d9 44 96 6a 64 1c c6 ..W..qe.Y.D.jd.. 0060 ca f8 5b 0c b5 a0 7b 5a db 71 56 9d f7 8d a0 c6 ..[...{Z.qV..... 0070 6d ba ee 8d 79 b3 m...y. Frame 12 (118 bytes on wire, 118 bytes captured) Arrival Time: Aug 11, 2010 11:13:56.191855000 [Time delta from previous captured frame: 0.000018000 seconds] [Time delta from previous displayed frame: 0.000018000 seconds] [Time since reference or first frame: 0.015585000 seconds] Frame Number: 12 Frame Length: 118 bytes Capture Length: 118 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7), Dst: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00) Destination: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00) Address: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) Address: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.122 (165.227.249.122), Dst: 165.227.249.150 (165.227.249.150) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 104 Identification: 0x406f (16495) Flags: 0x00 0.. = Reserved bit: Not Set .0. = Don't fragment: Not Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb3d [correct] [Good: True] [Bad : False] Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.150 (165.227.249.150) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 84 Checksum: 0x78a3 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 61CCEF4FE89C99F8 Responder cookie: E549F66C3C23E2B8 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags: 0x01 .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 76 Encrypted payload (48 bytes) 0000 00 0c 29 93 b9 00 00 0c 29 51 89 a7 08 00 45 00 ..).....)Q....E. 0010 00 68 40 6f 00 00 40 11 fb 3d a5 e3 f9 7a a5 e3 .h@o..@..=...z.. 0020 f9 96 01 f4 01 f4 00 54 78 a3 61 cc ef 4f e8 9c .......Tx.a..O.. 0030 99 f8 e5 49 f6 6c 3c 23 e2 b8 05 10 02 01 00 00 ...I.l<#........ 0040 00 00 00 00 00 4c 37 6b 6e 54 9e bd 8f 4d 3b 5e .....L7knT...M;^ 0050 bf a6 57 fb c5 71 65 09 59 d9 44 96 6a 64 1c c6 ..W..qe.Y.D.jd.. 0060 ca f8 5b 0c b5 a0 7b 5a db 71 56 9d f7 8d a0 c6 ..[...{Z.qV..... 0070 6d ba ee 8d 79 b3 m...y. Frame 13 (390 bytes on wire, 390 bytes captured) Arrival Time: Aug 11, 2010 11:13:56.197772000 [Time delta from previous captured frame: 0.005917000 seconds] [Time delta from previous displayed frame: 0.005917000 seconds] [Time since reference or first frame: 0.021502000 seconds] Frame Number: 13 Frame Length: 390 bytes Capture Length: 390 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00), Dst: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) Destination: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) Address: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00) Address: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 376 Identification: 0x114b (4427) Flags: 0x00 0.. = Reserved bit: Not Set .0. = Don't fragment: Not Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xe951 [correct] [Good: True] [Bad : False] Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.122 (165.227.249.122) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 356 Checksum: 0x8b57 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 61CCEF4FE89C99F8 Responder cookie: E549F66C3C23E2B8 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags: 0x01 .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0xcb379cd2 Length: 348 Encrypted payload (320 bytes) 0000 00 0c 29 51 89 a7 00 0c 29 93 b9 00 08 00 45 00 ..)Q....).....E. 0010 01 78 11 4b 00 00 80 11 e9 51 a5 e3 f9 96 a5 e3 .x.K.....Q...... 0020 f9 7a 01 f4 01 f4 01 64 8b 57 61 cc ef 4f e8 9c .z.....d.Wa..O.. 0030 99 f8 e5 49 f6 6c 3c 23 e2 b8 08 10 20 01 cb 37 ...I.l<#.... ..7 0040 9c d2 00 00 01 5c 19 2a 41 8c 8f 05 db 38 f9 7b .....\.*A....8.{ 0050 0b 91 50 05 6c 63 10 b1 c5 0d a3 11 d3 9c c4 e3 ..P.lc.......... 0060 26 8e a3 c0 62 d6 43 f9 7e 4d bd d7 86 e1 69 11 &...b.C.~M....i. 0070 18 8f 71 e0 7d 91 b7 a0 f2 1a a5 f4 53 23 13 9e ..q.}.......S#.. 0080 60 95 f8 c4 9f c4 24 09 a9 0b 34 8d 39 6f 90 e3 `.....$...4.9o.. 0090 cc 47 dc d4 47 a9 01 10 63 ac 70 33 3f a2 83 a5 .G..G...c.p3?... 00a0 1c 05 34 c2 19 c4 2b 3f 7c 91 94 c2 77 41 f6 ba ..4...+?|...wA.. 00b0 ce 6a 6d 52 12 54 88 3a 5c 7f 18 fe 45 d3 42 59 .jmR.T.:\...E.BY 00c0 87 e6 e6 a5 ad 4a e8 a4 df 3a 91 4f 0f e3 a2 21 .....J...:.O...! 00d0 ea 37 bf 42 98 77 ba 61 7c db 41 5f 3f 24 a5 c8 .7.B.w.a|.A_?$.. 00e0 40 6d 66 f3 33 db ac ba 78 71 7f 0e 65 2b c9 55 @mf.3...xq..e+.U 00f0 4d 88 25 cd 51 45 e6 4a 6e 74 32 51 4d 59 83 4b M.%.QE.Jnt2QMY.K 0100 66 94 33 bd 34 35 b5 d2 a9 94 79 ca 9a de f8 0f f.3.45....y..... 0110 17 9d 21 9d 5d 04 20 7a 59 d7 a7 39 dc 3b a5 b8 ..!.]. zY..9.;.. 0120 17 89 7e 60 bf d5 97 08 5c 46 78 71 2a d4 b5 f4 ..~`....\Fxq*... 0130 34 34 b8 1d ec 34 b9 66 13 10 47 b9 d0 25 ea cc 44...4.f..G..%.. 0140 c1 6d 24 5b b4 ff 41 ec 8a be 01 48 eb c8 37 39 .m$[..A....H..79 0150 e2 ec 9d 95 55 ca b4 8e 32 5b c0 24 20 45 67 f2 ....U...2[.$ Eg. 0160 dc ae 53 4c 86 74 47 4b 58 83 b8 3f 8b 07 e6 75 ..SL.tGKX..?...u 0170 86 56 dd b4 95 9f 9a 81 ad b9 60 ac da f1 af f2 .V........`..... 0180 77 c1 db 80 c3 9e w..... Frame 14 (390 bytes on wire, 390 bytes captured) Arrival Time: Aug 11, 2010 11:13:56.197793000 [Time delta from previous captured frame: 0.000021000 seconds] [Time delta from previous displayed frame: 0.000021000 seconds] [Time since reference or first frame: 0.021523000 seconds] Frame Number: 14 Frame Length: 390 bytes Capture Length: 390 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00), Dst: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) Destination: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) Address: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00) Address: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 376 Identification: 0x114b (4427) Flags: 0x00 0.. = Reserved bit: Not Set .0. = Don't fragment: Not Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xe951 [correct] [Good: True] [Bad : False] Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.122 (165.227.249.122) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 356 Checksum: 0x8b57 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 61CCEF4FE89C99F8 Responder cookie: E549F66C3C23E2B8 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags: 0x01 .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0xcb379cd2 Length: 348 Encrypted payload (320 bytes) 0000 00 0c 29 51 89 a7 00 0c 29 93 b9 00 08 00 45 00 ..)Q....).....E. 0010 01 78 11 4b 00 00 80 11 e9 51 a5 e3 f9 96 a5 e3 .x.K.....Q...... 0020 f9 7a 01 f4 01 f4 01 64 8b 57 61 cc ef 4f e8 9c .z.....d.Wa..O.. 0030 99 f8 e5 49 f6 6c 3c 23 e2 b8 08 10 20 01 cb 37 ...I.l<#.... ..7 0040 9c d2 00 00 01 5c 19 2a 41 8c 8f 05 db 38 f9 7b .....\.*A....8.{ 0050 0b 91 50 05 6c 63 10 b1 c5 0d a3 11 d3 9c c4 e3 ..P.lc.......... 0060 26 8e a3 c0 62 d6 43 f9 7e 4d bd d7 86 e1 69 11 &...b.C.~M....i. 0070 18 8f 71 e0 7d 91 b7 a0 f2 1a a5 f4 53 23 13 9e ..q.}.......S#.. 0080 60 95 f8 c4 9f c4 24 09 a9 0b 34 8d 39 6f 90 e3 `.....$...4.9o.. 0090 cc 47 dc d4 47 a9 01 10 63 ac 70 33 3f a2 83 a5 .G..G...c.p3?... 00a0 1c 05 34 c2 19 c4 2b 3f 7c 91 94 c2 77 41 f6 ba ..4...+?|...wA.. 00b0 ce 6a 6d 52 12 54 88 3a 5c 7f 18 fe 45 d3 42 59 .jmR.T.:\...E.BY 00c0 87 e6 e6 a5 ad 4a e8 a4 df 3a 91 4f 0f e3 a2 21 .....J...:.O...! 00d0 ea 37 bf 42 98 77 ba 61 7c db 41 5f 3f 24 a5 c8 .7.B.w.a|.A_?$.. 00e0 40 6d 66 f3 33 db ac ba 78 71 7f 0e 65 2b c9 55 @mf.3...xq..e+.U 00f0 4d 88 25 cd 51 45 e6 4a 6e 74 32 51 4d 59 83 4b M.%.QE.Jnt2QMY.K 0100 66 94 33 bd 34 35 b5 d2 a9 94 79 ca 9a de f8 0f f.3.45....y..... 0110 17 9d 21 9d 5d 04 20 7a 59 d7 a7 39 dc 3b a5 b8 ..!.]. zY..9.;.. 0120 17 89 7e 60 bf d5 97 08 5c 46 78 71 2a d4 b5 f4 ..~`....\Fxq*... 0130 34 34 b8 1d ec 34 b9 66 13 10 47 b9 d0 25 ea cc 44...4.f..G..%.. 0140 c1 6d 24 5b b4 ff 41 ec 8a be 01 48 eb c8 37 39 .m$[..A....H..79 0150 e2 ec 9d 95 55 ca b4 8e 32 5b c0 24 20 45 67 f2 ....U...2[.$ Eg. 0160 dc ae 53 4c 86 74 47 4b 58 83 b8 3f 8b 07 e6 75 ..SL.tGKX..?...u 0170 86 56 dd b4 95 9f 9a 81 ad b9 60 ac da f1 af f2 .V........`..... 0180 77 c1 db 80 c3 9e w..... Frame 15 (342 bytes on wire, 342 bytes captured) Arrival Time: Aug 11, 2010 11:13:56.199425000 [Time delta from previous captured frame: 0.001632000 seconds] [Time delta from previous displayed frame: 0.001632000 seconds] [Time since reference or first frame: 0.023155000 seconds] Frame Number: 15 Frame Length: 342 bytes Capture Length: 342 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7), Dst: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00) Destination: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00) Address: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) Address: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.122 (165.227.249.122), Dst: 165.227.249.150 (165.227.249.150) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 328 Identification: 0x4070 (16496) Flags: 0x00 0.. = Reserved bit: Not Set .0. = Don't fragment: Not Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfa5c [correct] [Good: True] [Bad : False] Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.150 (165.227.249.150) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 308 Checksum: 0x499d [validation disabled] [Good Checksum: False] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 61CCEF4FE89C99F8 Responder cookie: E549F66C3C23E2B8 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags: 0x01 .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0xcb379cd2 Length: 300 Encrypted payload (272 bytes) 0000 00 0c 29 93 b9 00 00 0c 29 51 89 a7 08 00 45 00 ..).....)Q....E. 0010 01 48 40 70 00 00 40 11 fa 5c a5 e3 f9 7a a5 e3 .H@p..@..\...z.. 0020 f9 96 01 f4 01 f4 01 34 49 9d 61 cc ef 4f e8 9c .......4I.a..O.. 0030 99 f8 e5 49 f6 6c 3c 23 e2 b8 08 10 20 01 cb 37 ...I.l<#.... ..7 0040 9c d2 00 00 01 2c 3e 96 ac 6f cc 2c 2a 0a 77 78 .....,>..o.,*.wx 0050 5a 38 be 3b 2d f9 0e 47 f5 53 2d c2 ba e0 4c 41 Z8.;-..G.S-...LA 0060 05 23 a2 19 2e 51 7b 7e 93 63 b1 ad 08 b1 e8 ac .#...Q{~.c...... 0070 a3 fa de 2e 67 2f 44 a8 d4 50 93 46 f0 d3 b0 1e ....g/D..P.F.... 0080 8c e1 f3 90 19 83 7e 05 0f 33 ba 3a e1 dc e8 3e ......~..3.:...> 0090 fb 72 e4 9b a9 99 53 f9 71 8c 21 5e 8f ca 35 66 .r....S.q.!^..5f 00a0 dc 3e 82 0f 83 23 6c b4 4a d7 d8 8c 52 06 40 47 .>...#l.J...R.@G 00b0 61 6e 41 04 14 4c 27 37 b8 51 b1 b2 29 4f 5e 23 anA..L'7.Q..)O^# 00c0 55 c9 30 2c 24 08 ec 13 10 18 05 c4 99 7b 0e ba U.0,$........{.. 00d0 d6 83 e4 7f bf c5 b0 78 54 6e 2c 5a b1 3a c3 b0 .......xTn,Z.:.. 00e0 36 b0 4f a2 4f 9e 31 8d d4 72 e4 35 74 27 df 1e 6.O.O.1..r.5t'.. 00f0 ae 8a 8f 2d d5 68 b2 e4 1c 0d d7 ec 5d 8c 89 d8 ...-.h......]... 0100 ad a4 45 b2 47 bf 32 28 df 37 45 75 5b d0 e5 7a ..E.G.2(.7Eu[..z 0110 e7 d5 a7 85 9a 4a c4 22 2b 6c 89 88 23 a7 e3 1c .....J."+l..#... 0120 de 0a f3 77 e8 30 ce 78 d3 93 d6 b2 ba c6 df 43 ...w.0.x.......C 0130 8d 51 1e b0 d3 80 61 0f 09 40 7b 96 8a 35 6f 05 .Q....a..@{..5o. 0140 21 3d 7a 4c 7d 75 9f ea ff 0e 4c e8 ba 9a 79 90 !=zL}u....L...y. 0150 91 3d 18 7e 12 e0 .=.~.. Frame 16 (342 bytes on wire, 342 bytes captured) Arrival Time: Aug 11, 2010 11:13:56.199443000 [Time delta from previous captured frame: 0.000018000 seconds] [Time delta from previous displayed frame: 0.000018000 seconds] [Time since reference or first frame: 0.023173000 seconds] Frame Number: 16 Frame Length: 342 bytes Capture Length: 342 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7), Dst: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00) Destination: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00) Address: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) Address: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.122 (165.227.249.122), Dst: 165.227.249.150 (165.227.249.150) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 328 Identification: 0x4070 (16496) Flags: 0x00 0.. = Reserved bit: Not Set .0. = Don't fragment: Not Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfa5c [correct] [Good: True] [Bad : False] Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.150 (165.227.249.150) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 308 Checksum: 0x499d [validation disabled] [Good Checksum: False] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 61CCEF4FE89C99F8 Responder cookie: E549F66C3C23E2B8 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags: 0x01 .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0xcb379cd2 Length: 300 Encrypted payload (272 bytes) 0000 00 0c 29 93 b9 00 00 0c 29 51 89 a7 08 00 45 00 ..).....)Q....E. 0010 01 48 40 70 00 00 40 11 fa 5c a5 e3 f9 7a a5 e3 .H@p..@..\...z.. 0020 f9 96 01 f4 01 f4 01 34 49 9d 61 cc ef 4f e8 9c .......4I.a..O.. 0030 99 f8 e5 49 f6 6c 3c 23 e2 b8 08 10 20 01 cb 37 ...I.l<#.... ..7 0040 9c d2 00 00 01 2c 3e 96 ac 6f cc 2c 2a 0a 77 78 .....,>..o.,*.wx 0050 5a 38 be 3b 2d f9 0e 47 f5 53 2d c2 ba e0 4c 41 Z8.;-..G.S-...LA 0060 05 23 a2 19 2e 51 7b 7e 93 63 b1 ad 08 b1 e8 ac .#...Q{~.c...... 0070 a3 fa de 2e 67 2f 44 a8 d4 50 93 46 f0 d3 b0 1e ....g/D..P.F.... 0080 8c e1 f3 90 19 83 7e 05 0f 33 ba 3a e1 dc e8 3e ......~..3.:...> 0090 fb 72 e4 9b a9 99 53 f9 71 8c 21 5e 8f ca 35 66 .r....S.q.!^..5f 00a0 dc 3e 82 0f 83 23 6c b4 4a d7 d8 8c 52 06 40 47 .>...#l.J...R.@G 00b0 61 6e 41 04 14 4c 27 37 b8 51 b1 b2 29 4f 5e 23 anA..L'7.Q..)O^# 00c0 55 c9 30 2c 24 08 ec 13 10 18 05 c4 99 7b 0e ba U.0,$........{.. 00d0 d6 83 e4 7f bf c5 b0 78 54 6e 2c 5a b1 3a c3 b0 .......xTn,Z.:.. 00e0 36 b0 4f a2 4f 9e 31 8d d4 72 e4 35 74 27 df 1e 6.O.O.1..r.5t'.. 00f0 ae 8a 8f 2d d5 68 b2 e4 1c 0d d7 ec 5d 8c 89 d8 ...-.h......]... 0100 ad a4 45 b2 47 bf 32 28 df 37 45 75 5b d0 e5 7a ..E.G.2(.7Eu[..z 0110 e7 d5 a7 85 9a 4a c4 22 2b 6c 89 88 23 a7 e3 1c .....J."+l..#... 0120 de 0a f3 77 e8 30 ce 78 d3 93 d6 b2 ba c6 df 43 ...w.0.x.......C 0130 8d 51 1e b0 d3 80 61 0f 09 40 7b 96 8a 35 6f 05 .Q....a..@{..5o. 0140 21 3d 7a 4c 7d 75 9f ea ff 0e 4c e8 ba 9a 79 90 !=zL}u....L...y. 0150 91 3d 18 7e 12 e0 .=.~.. Frame 17 (102 bytes on wire, 102 bytes captured) Arrival Time: Aug 11, 2010 11:13:56.207223000 [Time delta from previous captured frame: 0.007780000 seconds] [Time delta from previous displayed frame: 0.007780000 seconds] [Time since reference or first frame: 0.030953000 seconds] Frame Number: 17 Frame Length: 102 bytes Capture Length: 102 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00), Dst: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) Destination: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) Address: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00) Address: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 88 Identification: 0x114c (4428) Flags: 0x00 0.. = Reserved bit: Not Set .0. = Don't fragment: Not Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xea70 [correct] [Good: True] [Bad : False] Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.122 (165.227.249.122) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 68 Checksum: 0xafa1 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 61CCEF4FE89C99F8 Responder cookie: E549F66C3C23E2B8 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags: 0x01 .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0xcb379cd2 Length: 60 Encrypted payload (32 bytes) 0000 00 0c 29 51 89 a7 00 0c 29 93 b9 00 08 00 45 00 ..)Q....).....E. 0010 00 58 11 4c 00 00 80 11 ea 70 a5 e3 f9 96 a5 e3 .X.L.....p...... 0020 f9 7a 01 f4 01 f4 00 44 af a1 61 cc ef 4f e8 9c .z.....D..a..O.. 0030 99 f8 e5 49 f6 6c 3c 23 e2 b8 08 10 20 01 cb 37 ...I.l<#.... ..7 0040 9c d2 00 00 00 3c f8 1b b0 d2 41 e0 ca a8 8d eb .....<....A..... 0050 bb bc 72 04 8f a3 dd ec 25 10 0e 5b 7b 83 0f e0 ..r.....%..[{... 0060 56 24 91 37 29 88 V$.7). Frame 18 (102 bytes on wire, 102 bytes captured) Arrival Time: Aug 11, 2010 11:13:56.207238000 [Time delta from previous captured frame: 0.000015000 seconds] [Time delta from previous displayed frame: 0.000015000 seconds] [Time since reference or first frame: 0.030968000 seconds] Frame Number: 18 Frame Length: 102 bytes Capture Length: 102 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00), Dst: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) Destination: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) Address: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00) Address: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 88 Identification: 0x114c (4428) Flags: 0x00 0.. = Reserved bit: Not Set .0. = Don't fragment: Not Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xea70 [correct] [Good: True] [Bad : False] Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.122 (165.227.249.122) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 68 Checksum: 0xafa1 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 61CCEF4FE89C99F8 Responder cookie: E549F66C3C23E2B8 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags: 0x01 .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0xcb379cd2 Length: 60 Encrypted payload (32 bytes) 0000 00 0c 29 51 89 a7 00 0c 29 93 b9 00 08 00 45 00 ..)Q....).....E. 0010 00 58 11 4c 00 00 80 11 ea 70 a5 e3 f9 96 a5 e3 .X.L.....p...... 0020 f9 7a 01 f4 01 f4 00 44 af a1 61 cc ef 4f e8 9c .z.....D..a..O.. 0030 99 f8 e5 49 f6 6c 3c 23 e2 b8 08 10 20 01 cb 37 ...I.l<#.... ..7 0040 9c d2 00 00 00 3c f8 1b b0 d2 41 e0 ca a8 8d eb .....<....A..... 0050 bb bc 72 04 8f a3 dd ec 25 10 0e 5b 7b 83 0f e0 ..r.....%..[{... 0060 56 24 91 37 29 88 V$.7). Frame 19 (406 bytes on wire, 406 bytes captured) Arrival Time: Aug 11, 2010 11:14:00.985546000 [Time delta from previous captured frame: 4.778308000 seconds] [Time delta from previous displayed frame: 4.778308000 seconds] [Time since reference or first frame: 4.809276000 seconds] Frame Number: 19 Frame Length: 406 bytes Capture Length: 406 bytes [Frame is marked: False] [Protocols in frame: eth:ip:esp] Ethernet II, Src: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00), Dst: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) Destination: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) Address: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00) Address: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 392 Identification: 0x114d (4429) Flags: 0x00 0.. = Reserved bit: Not Set .0. = Don't fragment: Not Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 128 Protocol: ESP (0x32) Header checksum: 0xe91e [correct] [Good: True] [Bad : False] Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.122 (165.227.249.122) Encapsulating Security Payload ESP SPI: 0xc5955435 ESP Sequence: 1 0000 00 0c 29 51 89 a7 00 0c 29 93 b9 00 08 00 45 00 ..)Q....).....E. 0010 01 88 11 4d 00 00 80 32 e9 1e a5 e3 f9 96 a5 e3 ...M...2........ 0020 f9 7a c5 95 54 35 00 00 00 01 29 68 dd aa 9a ce .z..T5....)h.... 0030 c9 09 5b 7a 3f b1 f2 8e e5 fa c8 87 e5 de 45 02 ..[z?.........E. 0040 1b 02 1b 63 a2 98 53 5f 56 30 ac c1 8b 8b b9 30 ...c..S_V0.....0 0050 9a 67 26 c6 00 74 1f ba 7a 4e 5d 34 eb 86 62 78 .g&..t..zN]4..bx 0060 43 7f b7 20 66 e6 3f a0 4f 9c 4d 26 03 99 79 7f C.. f.?.O.M&..y. 0070 c5 b3 21 ac 65 91 f3 ae 3a cf 21 3a 3e 4f c9 cc ..!.e...:.!:>O.. 0080 c4 6c 28 58 b7 26 3d 00 3d 65 59 37 dc 57 d4 5e .l(X.&=.=eY7.W.^ 0090 bf 22 f5 bb 49 cb d3 84 bf fe ca 9c 1f be 78 85 ."..I.........x. 00a0 21 26 79 cc 27 b5 9f 88 26 6f 37 7b 04 4f 31 03 !&y.'...&o7{.O1. 00b0 17 26 48 b7 5c 90 5d e7 1c 4c 79 83 6b 04 06 45 .&H.\.]..Ly.k..E 00c0 a5 04 94 07 ef 81 b3 a8 43 b8 7f b6 e8 8b ab 45 ........C......E 00d0 48 aa 29 1b 1f 6b 1c 7b 74 5f ef ec 96 d3 13 52 H.)..k.{t_.....R 00e0 ae 85 29 2f 69 1d 34 db 5d ae 4a 13 ba 15 28 ea ..)/i.4.].J...(. 00f0 fd 40 90 52 34 08 a9 27 00 8f cf a2 a1 9f 58 46 .@.R4..'......XF 0100 48 bc bf ca de d3 2b e2 10 eb a0 f5 89 1f 7a f4 H.....+.......z. 0110 2f 9c b2 cb 89 85 3a 06 65 54 97 22 93 65 fb 00 /.....:.eT.".e.. 0120 48 76 44 62 09 6c 28 46 12 66 fb dc 89 2a 5a e7 HvDb.l(F.f...*Z. 0130 b1 6d a1 0d aa 48 4d 1c 19 38 1b 89 c0 b1 d4 c1 .m...HM..8...... 0140 36 76 04 c1 c2 e1 56 54 78 5b 2f 9e cc 99 40 85 6v....VTx[/...@. 0150 2f c2 17 96 ca 65 65 c8 40 b6 f0 b4 e1 69 05 64 /....ee.@....i.d 0160 8a b3 c1 0f e7 4d 05 08 67 86 5b c7 02 dd 5c 0e .....M..g.[...\. 0170 ea 52 2f 3a 5e 56 1e ff 05 18 71 1e ee 9a 35 41 .R/:^V....q...5A 0180 cd 41 eb 6d 4a b1 f5 5a ff 48 c8 95 63 16 c3 7d .A.mJ..Z.H..c..} 0190 07 29 4f b8 35 4b .)O.5K Frame 20 (406 bytes on wire, 406 bytes captured) Arrival Time: Aug 11, 2010 11:14:00.985563000 [Time delta from previous captured frame: 0.000017000 seconds] [Time delta from previous displayed frame: 0.000017000 seconds] [Time since reference or first frame: 4.809293000 seconds] Frame Number: 20 Frame Length: 406 bytes Capture Length: 406 bytes [Frame is marked: False] [Protocols in frame: eth:ip:esp] Ethernet II, Src: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00), Dst: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) Destination: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) Address: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00) Address: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 392 Identification: 0x114d (4429) Flags: 0x00 0.. = Reserved bit: Not Set .0. = Don't fragment: Not Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 128 Protocol: ESP (0x32) Header checksum: 0xe91e [correct] [Good: True] [Bad : False] Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.122 (165.227.249.122) Encapsulating Security Payload ESP SPI: 0xc5955435 ESP Sequence: 1 0000 00 0c 29 51 89 a7 00 0c 29 93 b9 00 08 00 45 00 ..)Q....).....E. 0010 01 88 11 4d 00 00 80 32 e9 1e a5 e3 f9 96 a5 e3 ...M...2........ 0020 f9 7a c5 95 54 35 00 00 00 01 29 68 dd aa 9a ce .z..T5....)h.... 0030 c9 09 5b 7a 3f b1 f2 8e e5 fa c8 87 e5 de 45 02 ..[z?.........E. 0040 1b 02 1b 63 a2 98 53 5f 56 30 ac c1 8b 8b b9 30 ...c..S_V0.....0 0050 9a 67 26 c6 00 74 1f ba 7a 4e 5d 34 eb 86 62 78 .g&..t..zN]4..bx 0060 43 7f b7 20 66 e6 3f a0 4f 9c 4d 26 03 99 79 7f C.. f.?.O.M&..y. 0070 c5 b3 21 ac 65 91 f3 ae 3a cf 21 3a 3e 4f c9 cc ..!.e...:.!:>O.. 0080 c4 6c 28 58 b7 26 3d 00 3d 65 59 37 dc 57 d4 5e .l(X.&=.=eY7.W.^ 0090 bf 22 f5 bb 49 cb d3 84 bf fe ca 9c 1f be 78 85 ."..I.........x. 00a0 21 26 79 cc 27 b5 9f 88 26 6f 37 7b 04 4f 31 03 !&y.'...&o7{.O1. 00b0 17 26 48 b7 5c 90 5d e7 1c 4c 79 83 6b 04 06 45 .&H.\.]..Ly.k..E 00c0 a5 04 94 07 ef 81 b3 a8 43 b8 7f b6 e8 8b ab 45 ........C......E 00d0 48 aa 29 1b 1f 6b 1c 7b 74 5f ef ec 96 d3 13 52 H.)..k.{t_.....R 00e0 ae 85 29 2f 69 1d 34 db 5d ae 4a 13 ba 15 28 ea ..)/i.4.].J...(. 00f0 fd 40 90 52 34 08 a9 27 00 8f cf a2 a1 9f 58 46 .@.R4..'......XF 0100 48 bc bf ca de d3 2b e2 10 eb a0 f5 89 1f 7a f4 H.....+.......z. 0110 2f 9c b2 cb 89 85 3a 06 65 54 97 22 93 65 fb 00 /.....:.eT.".e.. 0120 48 76 44 62 09 6c 28 46 12 66 fb dc 89 2a 5a e7 HvDb.l(F.f...*Z. 0130 b1 6d a1 0d aa 48 4d 1c 19 38 1b 89 c0 b1 d4 c1 .m...HM..8...... 0140 36 76 04 c1 c2 e1 56 54 78 5b 2f 9e cc 99 40 85 6v....VTx[/...@. 0150 2f c2 17 96 ca 65 65 c8 40 b6 f0 b4 e1 69 05 64 /....ee.@....i.d 0160 8a b3 c1 0f e7 4d 05 08 67 86 5b c7 02 dd 5c 0e .....M..g.[...\. 0170 ea 52 2f 3a 5e 56 1e ff 05 18 71 1e ee 9a 35 41 .R/:^V....q...5A 0180 cd 41 eb 6d 4a b1 f5 5a ff 48 c8 95 63 16 c3 7d .A.mJ..Z.H..c..} 0190 07 29 4f b8 35 4b .)O.5K Frame 21 (406 bytes on wire, 406 bytes captured) Arrival Time: Aug 11, 2010 11:14:00.987013000 [Time delta from previous captured frame: 0.001450000 seconds] [Time delta from previous displayed frame: 0.001450000 seconds] [Time since reference or first frame: 4.810743000 seconds] Frame Number: 21 Frame Length: 406 bytes Capture Length: 406 bytes [Frame is marked: False] [Protocols in frame: eth:ip:esp] Ethernet II, Src: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7), Dst: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00) Destination: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00) Address: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) Address: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.122 (165.227.249.122), Dst: 165.227.249.150 (165.227.249.150) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 392 Identification: 0x0025 (37) Flags: 0x00 0.. = Reserved bit: Not Set .0. = Don't fragment: Not Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x7b46 [correct] [Good: True] [Bad : False] Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.150 (165.227.249.150) Encapsulating Security Payload ESP SPI: 0x66fadf5c ESP Sequence: 1 0000 00 0c 29 93 b9 00 00 0c 29 51 89 a7 08 00 45 00 ..).....)Q....E. 0010 01 88 00 25 00 00 ff 32 7b 46 a5 e3 f9 7a a5 e3 ...%...2{F...z.. 0020 f9 96 66 fa df 5c 00 00 00 01 f4 36 e9 06 ac 64 ..f..\.....6...d 0030 81 91 99 83 95 49 ff 56 68 07 71 ec 7f a4 b5 0a .....I.Vh.q..... 0040 c3 4e b2 d8 5f a2 96 b0 69 3c 47 4b fa 0b 82 6e .N.._...i^R.<..nkmhu?? 0120 e6 76 09 f8 cd 12 2a c6 84 1f 74 fd 2a 9c 9d f0 .v....*...t.*... 0130 a8 ff 62 63 a0 b8 4e 4f a8 30 10 06 48 24 4f 82 ..bc..NO.0..H$O. 0140 68 a4 51 1a e0 fb 88 18 4a fa 85 8a a6 bf e4 21 h.Q.....J......! 0150 7b 57 56 a0 b7 5b 1f 53 53 11 11 e1 11 f9 95 d6 {WV..[.SS....... 0160 6a dd f4 15 24 a3 cc 93 65 ef 2f e2 98 3b a2 c3 j...$...e./..;.. 0170 ad 75 c1 a8 9e 92 ab 1a da cd 51 d9 cd 86 e6 bb .u........Q..... 0180 61 92 92 ad b9 ea ff 2b 53 e7 dc c5 d0 81 56 2d a......+S.....V- 0190 c2 96 5d 2a 43 f5 ..]*C. Frame 22 (406 bytes on wire, 406 bytes captured) Arrival Time: Aug 11, 2010 11:14:00.987029000 [Time delta from previous captured frame: 0.000016000 seconds] [Time delta from previous displayed frame: 0.000016000 seconds] [Time since reference or first frame: 4.810759000 seconds] Frame Number: 22 Frame Length: 406 bytes Capture Length: 406 bytes [Frame is marked: False] [Protocols in frame: eth:ip:esp] Ethernet II, Src: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7), Dst: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00) Destination: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00) Address: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) Address: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.122 (165.227.249.122), Dst: 165.227.249.150 (165.227.249.150) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 392 Identification: 0x0025 (37) Flags: 0x00 0.. = Reserved bit: Not Set .0. = Don't fragment: Not Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x7b46 [correct] [Good: True] [Bad : False] Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.150 (165.227.249.150) Encapsulating Security Payload ESP SPI: 0x66fadf5c ESP Sequence: 1 0000 00 0c 29 93 b9 00 00 0c 29 51 89 a7 08 00 45 00 ..).....)Q....E. 0010 01 88 00 25 00 00 ff 32 7b 46 a5 e3 f9 7a a5 e3 ...%...2{F...z.. 0020 f9 96 66 fa df 5c 00 00 00 01 f4 36 e9 06 ac 64 ..f..\.....6...d 0030 81 91 99 83 95 49 ff 56 68 07 71 ec 7f a4 b5 0a .....I.Vh.q..... 0040 c3 4e b2 d8 5f a2 96 b0 69 3c 47 4b fa 0b 82 6e .N.._...i^R.<..nkmhu?? 0120 e6 76 09 f8 cd 12 2a c6 84 1f 74 fd 2a 9c 9d f0 .v....*...t.*... 0130 a8 ff 62 63 a0 b8 4e 4f a8 30 10 06 48 24 4f 82 ..bc..NO.0..H$O. 0140 68 a4 51 1a e0 fb 88 18 4a fa 85 8a a6 bf e4 21 h.Q.....J......! 0150 7b 57 56 a0 b7 5b 1f 53 53 11 11 e1 11 f9 95 d6 {WV..[.SS....... 0160 6a dd f4 15 24 a3 cc 93 65 ef 2f e2 98 3b a2 c3 j...$...e./..;.. 0170 ad 75 c1 a8 9e 92 ab 1a da cd 51 d9 cd 86 e6 bb .u........Q..... 0180 61 92 92 ad b9 ea ff 2b 53 e7 dc c5 d0 81 56 2d a......+S.....V- 0190 c2 96 5d 2a 43 f5 ..]*C.