Frame 1 (226 bytes on wire, 226 bytes captured) Arrival Time: Jul 5, 2007 14:33:58.466824000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 226 bytes Capture Length: 226 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa), Dst: 00:03:d2:20:0e:a4 (00:03:d2:20:0e:a4) Destination: 00:03:d2:20:0e:a4 (00:03:d2:20:0e:a4) Source: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.139 (165.227.249.139) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 212 Identification: 0x4124 (16676) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xba0b [correct] Good: True Bad : False Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.139 (165.227.249.139) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 192 Checksum: 0xdfeb [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xE7A3D835648B5189 Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 184 Security Association payload Next payload: Vendor ID (13) Length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 44 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 36 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): AES-CBC (7) Key-Length (14): Key-Length (128) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: unknown vendor ID: 0x4A131C81070358455C5728F20E95452F Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-03 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: RFC 3706 Detecting Dead IKE Peers (DPD) 0000 00 03 d2 20 0e a4 00 0c 29 96 e1 fa 08 00 45 00 ... ....).....E. 0010 00 d4 41 24 00 00 80 11 ba 0b a5 e3 f9 96 a5 e3 ..A$............ 0020 f9 8b 01 f4 01 f4 00 c0 df eb e7 a3 d8 35 64 8b .............5d. 0030 51 89 00 00 00 00 00 00 00 00 01 10 02 00 00 00 Q............... 0040 00 00 00 00 00 b8 0d 00 00 38 00 00 00 01 00 00 .........8...... 0050 00 01 00 00 00 2c 01 01 00 01 00 00 00 24 01 01 .....,.......$.. 0060 00 00 80 01 00 07 80 0e 00 80 80 02 00 02 80 04 ................ 0070 00 02 80 03 00 01 80 0b 00 01 80 0c 70 80 0d 00 ............p... 0080 00 14 4a 13 1c 81 07 03 58 45 5c 57 28 f2 0e 95 ..J.....XE\W(... 0090 45 2f 0d 00 00 14 7d 94 19 a6 53 10 ca 6f 2c 17 E/....}...S..o,. 00a0 9d 92 15 52 9d 56 0d 00 00 14 90 cb 80 91 3e bb ...R.V........>. 00b0 69 6e 08 63 81 b5 ec 42 7b 1f 0d 00 00 14 44 85 in.c...B{.....D. 00c0 15 2d 18 b6 bb cd 0b e8 a8 46 95 79 dd cc 00 00 .-.......F.y.... 00d0 00 14 af ca d7 13 68 a1 f1 c9 6b 86 96 fc 77 57 ......h...k...wW 00e0 01 00 .. Frame 2 (126 bytes on wire, 126 bytes captured) Arrival Time: Jul 5, 2007 14:33:58.466827000 Time delta from previous packet: 0.000003000 seconds Time since reference or first frame: 0.000003000 seconds Frame Number: 2 Packet Length: 126 bytes Capture Length: 126 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:03:d2:20:0e:a4 (00:03:d2:20:0e:a4), Dst: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Destination: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Source: 00:03:d2:20:0e:a4 (00:03:d2:20:0e:a4) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.139 (165.227.249.139), Dst: 165.227.249.150 (165.227.249.150) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0085 (133) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb0e [correct] Good: True Bad : False Source: 165.227.249.139 (165.227.249.139) Destination: 165.227.249.150 (165.227.249.150) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 92 Checksum: 0xffad [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xE7A3D835648B5189 Responder cookie: 0xA3FA89676B54B6E0 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 84 Security Association payload Next payload: NONE (0) Length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 44 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 36 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): AES-CBC (7) Key-Length (14): Key-Length (128) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) 0000 00 0c 29 96 e1 fa 00 03 d2 20 0e a4 08 00 45 00 ..)...... ....E. 0010 00 70 00 85 40 00 40 11 fb 0e a5 e3 f9 8b a5 e3 .p..@.@......... 0020 f9 96 01 f4 01 f4 00 5c ff ad e7 a3 d8 35 64 8b .......\.....5d. 0030 51 89 a3 fa 89 67 6b 54 b6 e0 01 10 02 00 00 00 Q....gkT........ 0040 00 00 00 00 00 54 00 00 00 38 00 00 00 01 00 00 .....T...8...... 0050 00 01 00 00 00 2c 01 01 00 01 00 00 00 24 01 01 .....,.......$.. 0060 00 00 80 01 00 07 80 0e 00 80 80 02 00 02 80 04 ................ 0070 00 02 80 03 00 01 80 0b 00 01 80 0c 70 80 ............p. Frame 3 (222 bytes on wire, 222 bytes captured) Arrival Time: Jul 5, 2007 14:33:58.479017000 Time delta from previous packet: 0.012190000 seconds Time since reference or first frame: 0.012193000 seconds Frame Number: 3 Packet Length: 222 bytes Capture Length: 222 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa), Dst: 00:03:d2:20:0e:a4 (00:03:d2:20:0e:a4) Destination: 00:03:d2:20:0e:a4 (00:03:d2:20:0e:a4) Source: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.139 (165.227.249.139) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 208 Identification: 0x4125 (16677) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xba0e [correct] Good: True Bad : False Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.139 (165.227.249.139) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 188 Checksum: 0x88f8 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xE7A3D835648B5189 Responder cookie: 0xA3FA89676B54B6E0 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 180 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 20 Nonce Data 0000 00 03 d2 20 0e a4 00 0c 29 96 e1 fa 08 00 45 00 ... ....).....E. 0010 00 d0 41 25 00 00 80 11 ba 0e a5 e3 f9 96 a5 e3 ..A%............ 0020 f9 8b 01 f4 01 f4 00 bc 88 f8 e7 a3 d8 35 64 8b .............5d. 0030 51 89 a3 fa 89 67 6b 54 b6 e0 04 10 02 00 00 00 Q....gkT........ 0040 00 00 00 00 00 b4 0a 00 00 84 9a 1e 9b 09 5f 4a .............._J 0050 19 f7 72 54 7c f1 b2 59 1d b1 21 34 12 60 15 32 ..rT|..Y..!4.`.2 0060 df 05 47 de f9 20 86 0c b2 ca 7a 8b db 90 3b 39 ..G.. ....z...;9 0070 dd 57 07 ed e8 ed fb 31 2c 27 f5 c4 4c 48 a8 d1 .W.....1,'..LH.. 0080 e1 4c b7 b3 22 06 83 81 e6 63 c4 e7 8a 58 db 9f .L.."....c...X.. 0090 eb cb e6 47 c5 f9 3d b9 39 b1 92 2d 94 6b 19 4b ...G..=.9..-.k.K 00a0 61 b9 cf 0c 5c c6 21 7d 56 c1 df e4 09 52 fa 6b a...\.!}V....R.k 00b0 37 7c 4b 92 7f 32 50 c9 9e b6 e0 60 69 0a 0a 0f 7|K..2P....`i... 00c0 78 b4 67 17 7c a9 0a c8 54 0b 00 00 00 14 94 c5 x.g.|...T....... 00d0 5f 48 88 0e 1a b3 22 31 ed d2 ec b7 be 06 _H...."1...... Frame 4 (226 bytes on wire, 226 bytes captured) Arrival Time: Jul 5, 2007 14:33:58.488544000 Time delta from previous packet: 0.009527000 seconds Time since reference or first frame: 0.021720000 seconds Frame Number: 4 Packet Length: 226 bytes Capture Length: 226 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:03:d2:20:0e:a4 (00:03:d2:20:0e:a4), Dst: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Destination: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Source: 00:03:d2:20:0e:a4 (00:03:d2:20:0e:a4) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.139 (165.227.249.139), Dst: 165.227.249.150 (165.227.249.150) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 212 Identification: 0x0086 (134) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfaa9 [correct] Good: True Bad : False Source: 165.227.249.139 (165.227.249.139) Destination: 165.227.249.150 (165.227.249.150) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 192 Checksum: 0x4008 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xE7A3D835648B5189 Responder cookie: 0xA3FA89676B54B6E0 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 184 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 24 Nonce Data 0000 00 0c 29 96 e1 fa 00 03 d2 20 0e a4 08 00 45 00 ..)...... ....E. 0010 00 d4 00 86 40 00 40 11 fa a9 a5 e3 f9 8b a5 e3 ....@.@......... 0020 f9 96 01 f4 01 f4 00 c0 40 08 e7 a3 d8 35 64 8b ........@....5d. 0030 51 89 a3 fa 89 67 6b 54 b6 e0 04 10 02 00 00 00 Q....gkT........ 0040 00 00 00 00 00 b8 0a 00 00 84 b2 6f ea e6 ca de ...........o.... 0050 b0 82 dc 28 24 2f 84 6c 30 03 63 ce e3 48 a9 92 ...($/.l0.c..H.. 0060 d6 b0 d1 92 37 ef 35 dc 97 f9 3b 0d 65 0a 23 d2 ....7.5...;.e.#. 0070 10 d1 fd 5b 50 31 3c a2 88 44 04 ac c6 9d 62 b0 ...[P1<..D....b. 0080 a9 53 27 61 2d 0d 9c bc c3 b6 1d 93 85 58 ce ec .S'a-........X.. 0090 8a 55 fb f7 d2 1c ae 6f 57 ba 3d 5b d1 4f 2e e5 .U.....oW.=[.O.. 00a0 29 65 b0 35 b5 45 4d 08 c9 96 53 da 31 25 f7 d1 )e.5.EM...S.1%.. 00b0 3c c9 78 21 c8 ee 32 cd d3 ac 63 8d fd 57 b3 ff <.x!..2...c..W.. 00c0 59 c1 7a 5c 8d cf 30 cb 89 28 00 00 00 18 87 2b Y.z\..0..(.....+ 00d0 32 68 2c 7f e0 e2 ed d4 93 5e 0f 4d 38 41 55 04 2h,......^.M8AU. 00e0 fa f5 .. Frame 5 (150 bytes on wire, 150 bytes captured) Arrival Time: Jul 5, 2007 14:33:58.528100000 Time delta from previous packet: 0.039556000 seconds Time since reference or first frame: 0.061276000 seconds Frame Number: 5 Packet Length: 150 bytes Capture Length: 150 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa), Dst: 00:03:d2:20:0e:a4 (00:03:d2:20:0e:a4) Destination: 00:03:d2:20:0e:a4 (00:03:d2:20:0e:a4) Source: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.139 (165.227.249.139) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 136 Identification: 0x4126 (16678) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xba55 [correct] Good: True Bad : False Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.139 (165.227.249.139) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 116 Checksum: 0xd1d0 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xE7A3D835648B5189 Responder cookie: 0xA3FA89676B54B6E0 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 108 Encrypted payload (80 bytes) 0000 00 03 d2 20 0e a4 00 0c 29 96 e1 fa 08 00 45 00 ... ....).....E. 0010 00 88 41 26 00 00 80 11 ba 55 a5 e3 f9 96 a5 e3 ..A&.....U...... 0020 f9 8b 01 f4 01 f4 00 74 d1 d0 e7 a3 d8 35 64 8b .......t.....5d. 0030 51 89 a3 fa 89 67 6b 54 b6 e0 05 10 02 01 00 00 Q....gkT........ 0040 00 00 00 00 00 6c 74 58 d2 17 c4 ee bc d6 28 75 .....ltX......(u 0050 03 d3 45 c2 b1 d7 79 c3 12 a2 cd 40 bd 9f c4 7e ..E...y....@...~ 0060 8c a2 20 78 d0 fb 1a e7 20 23 ea a8 03 70 52 b3 .. x.... #...pR. 0070 e5 e6 d2 30 b8 58 67 69 ec af 43 dc 74 5f 8f e3 ...0.Xgi..C.t_.. 0080 60 c4 ed ee fa 22 b4 0a 64 16 fa 2d 8b a5 41 be `...."..d..-..A. 0090 be ec 9e cf c8 a8 ...... Frame 6 (118 bytes on wire, 118 bytes captured) Arrival Time: Jul 5, 2007 14:33:58.533126000 Time delta from previous packet: 0.005026000 seconds Time since reference or first frame: 0.066302000 seconds Frame Number: 6 Packet Length: 118 bytes Capture Length: 118 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:03:d2:20:0e:a4 (00:03:d2:20:0e:a4), Dst: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Destination: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Source: 00:03:d2:20:0e:a4 (00:03:d2:20:0e:a4) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.139 (165.227.249.139), Dst: 165.227.249.150 (165.227.249.150) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 104 Identification: 0x0087 (135) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb14 [correct] Good: True Bad : False Source: 165.227.249.139 (165.227.249.139) Destination: 165.227.249.150 (165.227.249.150) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 84 Checksum: 0xa1b8 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xE7A3D835648B5189 Responder cookie: 0xA3FA89676B54B6E0 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 76 Encrypted payload (48 bytes) 0000 00 0c 29 96 e1 fa 00 03 d2 20 0e a4 08 00 45 00 ..)...... ....E. 0010 00 68 00 87 40 00 40 11 fb 14 a5 e3 f9 8b a5 e3 .h..@.@......... 0020 f9 96 01 f4 01 f4 00 54 a1 b8 e7 a3 d8 35 64 8b .......T.....5d. 0030 51 89 a3 fa 89 67 6b 54 b6 e0 05 10 02 01 00 00 Q....gkT........ 0040 00 00 00 00 00 4c f2 f6 87 3b 0b 87 45 d0 17 4d .....L...;..E..M 0050 76 78 80 bd 5c 6e 0b 41 2e 80 73 a0 c2 af 05 91 vx..\n.A..s..... 0060 fe a0 f9 4e 8e a7 5a b5 2d 93 a4 a4 ca c3 8f 7b ...N..Z.-......{ 0070 ac 45 10 8b d7 26 .E...& Frame 7 (118 bytes on wire, 118 bytes captured) Arrival Time: Jul 5, 2007 14:33:58.545912000 Time delta from previous packet: 0.012786000 seconds Time since reference or first frame: 0.079088000 seconds Frame Number: 7 Packet Length: 118 bytes Capture Length: 118 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:03:d2:20:0e:a4 (00:03:d2:20:0e:a4), Dst: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Destination: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Source: 00:03:d2:20:0e:a4 (00:03:d2:20:0e:a4) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.139 (165.227.249.139), Dst: 165.227.249.150 (165.227.249.150) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 104 Identification: 0x0088 (136) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb13 [correct] Good: True Bad : False Source: 165.227.249.139 (165.227.249.139) Destination: 165.227.249.150 (165.227.249.150) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 84 Checksum: 0xa1b8 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xE7A3D835648B5189 Responder cookie: 0xA3FA89676B54B6E0 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 76 Encrypted payload (48 bytes) 0000 00 0c 29 96 e1 fa 00 03 d2 20 0e a4 08 00 45 00 ..)...... ....E. 0010 00 68 00 88 40 00 40 11 fb 13 a5 e3 f9 8b a5 e3 .h..@.@......... 0020 f9 96 01 f4 01 f4 00 54 a1 b8 e7 a3 d8 35 64 8b .......T.....5d. 0030 51 89 a3 fa 89 67 6b 54 b6 e0 05 10 02 01 00 00 Q....gkT........ 0040 00 00 00 00 00 4c f2 f6 87 3b 0b 87 45 d0 17 4d .....L...;..E..M 0050 76 78 80 bd 5c 6e 0b 41 2e 80 73 a0 c2 af 05 91 vx..\n.A..s..... 0060 fe a0 f9 4e 8e a7 5a b5 2d 93 a4 a4 ca c3 8f 7b ...N..Z.-......{ 0070 ac 45 10 8b d7 26 .E...& Frame 8 (118 bytes on wire, 118 bytes captured) Arrival Time: Jul 5, 2007 14:33:58.563760000 Time delta from previous packet: 0.017848000 seconds Time since reference or first frame: 0.096936000 seconds Frame Number: 8 Packet Length: 118 bytes Capture Length: 118 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:03:d2:20:0e:a4 (00:03:d2:20:0e:a4), Dst: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Destination: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Source: 00:03:d2:20:0e:a4 (00:03:d2:20:0e:a4) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.139 (165.227.249.139), Dst: 165.227.249.150 (165.227.249.150) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 104 Identification: 0x0089 (137) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb12 [correct] Good: True Bad : False Source: 165.227.249.139 (165.227.249.139) Destination: 165.227.249.150 (165.227.249.150) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 84 Checksum: 0xa1b8 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xE7A3D835648B5189 Responder cookie: 0xA3FA89676B54B6E0 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 76 Encrypted payload (48 bytes) 0000 00 0c 29 96 e1 fa 00 03 d2 20 0e a4 08 00 45 00 ..)...... ....E. 0010 00 68 00 89 40 00 40 11 fb 12 a5 e3 f9 8b a5 e3 .h..@.@......... 0020 f9 96 01 f4 01 f4 00 54 a1 b8 e7 a3 d8 35 64 8b .......T.....5d. 0030 51 89 a3 fa 89 67 6b 54 b6 e0 05 10 02 01 00 00 Q....gkT........ 0040 00 00 00 00 00 4c f2 f6 87 3b 0b 87 45 d0 17 4d .....L...;..E..M 0050 76 78 80 bd 5c 6e 0b 41 2e 80 73 a0 c2 af 05 91 vx..\n.A..s..... 0060 fe a0 f9 4e 8e a7 5a b5 2d 93 a4 a4 ca c3 8f 7b ...N..Z.-......{ 0070 ac 45 10 8b d7 26 .E...& Frame 9 (342 bytes on wire, 342 bytes captured) Arrival Time: Jul 5, 2007 14:33:58.563762000 Time delta from previous packet: 0.000002000 seconds Time since reference or first frame: 0.096938000 seconds Frame Number: 9 Packet Length: 342 bytes Capture Length: 342 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa), Dst: 00:03:d2:20:0e:a4 (00:03:d2:20:0e:a4) Destination: 00:03:d2:20:0e:a4 (00:03:d2:20:0e:a4) Source: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.139 (165.227.249.139) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 328 Identification: 0x4127 (16679) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xb994 [correct] Good: True Bad : False Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.139 (165.227.249.139) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 308 Checksum: 0x891a [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xE7A3D835648B5189 Responder cookie: 0xA3FA89676B54B6E0 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x739889D1 Length: 300 Encrypted payload (272 bytes) 0000 00 03 d2 20 0e a4 00 0c 29 96 e1 fa 08 00 45 00 ... ....).....E. 0010 01 48 41 27 00 00 80 11 b9 94 a5 e3 f9 96 a5 e3 .HA'............ 0020 f9 8b 01 f4 01 f4 01 34 89 1a e7 a3 d8 35 64 8b .......4.....5d. 0030 51 89 a3 fa 89 67 6b 54 b6 e0 08 10 20 01 73 98 Q....gkT.... .s. 0040 89 d1 00 00 01 2c 45 e2 91 d0 8d e6 26 a5 f1 8f .....,E.....&... 0050 f1 38 2e fa da 91 31 73 4c 5c 98 79 c1 9f e6 4f .8....1sL\.y...O 0060 f7 22 90 df 38 be da c6 21 a9 1f a2 86 0b a6 55 ."..8...!......U 0070 6e cc eb 10 de b0 42 56 6b de ba c1 59 17 ea cc n.....BVk...Y... 0080 6f 71 50 a1 73 dc 8f 32 b7 8f ab 59 01 5e 7f a5 oqP.s..2...Y.^.. 0090 9a 5c e6 25 30 6c 5a 01 85 b1 ec a9 06 80 e3 80 .\.%0lZ......... 00a0 19 84 a3 22 4f f3 f2 bf 7b 9e 25 32 75 0d a4 7d ..."O...{.%2u..} 00b0 e5 61 62 e5 a4 cb 48 35 22 d8 47 c1 42 5f 51 30 .ab...H5".G.B_Q0 00c0 75 6d 52 ba 09 aa fc 8e d9 ba 1d cf 7f b1 00 7a umR............z 00d0 e0 3d b6 ea 53 a0 30 0c 32 5d 97 91 3e 5f 1c a5 .=..S.0.2]..>_.. 00e0 73 9f 18 8d 8d 85 d3 df 77 f2 9f 53 ae e6 f5 41 s.......w..S...A 00f0 dd 68 64 9f 30 ca 12 97 23 c3 2f 30 4d ed 94 00 .hd.0...#./0M... 0100 7a 25 67 d8 b3 ec 69 0d 12 d7 13 56 1e 5a 94 5b z%g...i....V.Z.[ 0110 26 3c b3 49 d1 3f c5 62 91 f9 b1 94 59 4b 3b 6d &<.I.?.b....YK;m 0120 78 e6 e8 ce 7d 10 4f b4 fe b7 cf 63 1f f6 e4 21 x...}.O....c...! 0130 4b 73 4a 1f 9a df 08 9d 39 6d e0 77 01 e3 d1 e3 KsJ.....9m.w.... 0140 87 9a d9 32 d6 21 c2 20 e4 12 51 da f5 ac 28 86 ...2.!. ..Q...(. 0150 74 84 75 ee bc 01 t.u... Frame 10 (342 bytes on wire, 342 bytes captured) Arrival Time: Jul 5, 2007 14:33:58.563764000 Time delta from previous packet: 0.000002000 seconds Time since reference or first frame: 0.096940000 seconds Frame Number: 10 Packet Length: 342 bytes Capture Length: 342 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:03:d2:20:0e:a4 (00:03:d2:20:0e:a4), Dst: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Destination: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Source: 00:03:d2:20:0e:a4 (00:03:d2:20:0e:a4) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.139 (165.227.249.139), Dst: 165.227.249.150 (165.227.249.150) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 328 Identification: 0x008a (138) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfa31 [correct] Good: True Bad : False Source: 165.227.249.139 (165.227.249.139) Destination: 165.227.249.150 (165.227.249.150) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 308 Checksum: 0x967b [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xE7A3D835648B5189 Responder cookie: 0xA3FA89676B54B6E0 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x739889D1 Length: 300 Encrypted payload (272 bytes) 0000 00 0c 29 96 e1 fa 00 03 d2 20 0e a4 08 00 45 00 ..)...... ....E. 0010 01 48 00 8a 40 00 40 11 fa 31 a5 e3 f9 8b a5 e3 .H..@.@..1...... 0020 f9 96 01 f4 01 f4 01 34 96 7b e7 a3 d8 35 64 8b .......4.{...5d. 0030 51 89 a3 fa 89 67 6b 54 b6 e0 08 10 20 01 73 98 Q....gkT.... .s. 0040 89 d1 00 00 01 2c 8c fe 78 d1 0d 83 5f 3c 8e 05 .....,..x..._<.. 0050 28 d7 c0 fa f8 4a 43 7f e1 ad b0 dd db a9 51 bc (....JC.......Q. 0060 28 1a 7e 0a 4a f3 38 88 10 35 61 ad bf eb a6 15 (.~.J.8..5a..... 0070 a2 38 f6 dd e3 7b 8b 53 b6 96 a0 53 78 c7 46 bf .8...{.S...Sx.F. 0080 0d fa 90 f9 78 62 c4 cf 1b 30 10 e2 3e a5 d9 83 ....xb...0..>... 0090 8d fe fe c0 61 03 b5 74 b9 c4 0c 07 90 45 30 43 ....a..t.....E0C 00a0 8e 3d 3a 45 98 99 ec 93 8d 68 e2 61 d1 ac 40 a8 .=:E.....h.a..@. 00b0 22 fe 79 eb ff e3 89 07 d5 86 fd d1 0f 6e 26 6d ".y..........n&m 00c0 fe f7 49 1a 74 0c af 8e 82 d7 84 fc d0 d8 ad 12 ..I.t........... 00d0 d2 a7 31 fd 2b ad f0 f2 14 c3 a1 37 e6 56 da f8 ..1.+......7.V.. 00e0 8e 71 10 d8 d9 4c 08 59 e5 69 da 3f 06 2c 5d b6 .q...L.Y.i.?.,]. 00f0 46 7f a7 58 62 7e 61 f3 d4 c5 db 71 4d b9 6a 99 F..Xb~a....qM.j. 0100 58 57 c9 fd 3a 99 a9 9e 48 e4 d0 fc a3 0a 7a c7 XW..:...H.....z. 0110 46 47 2d b9 72 db 39 7e 0b 18 c0 7e da 77 da d5 FG-.r.9~...~.w.. 0120 97 58 ac a9 92 c1 8c ea 65 e8 e2 9d 13 c7 ad e7 .X......e....... 0130 04 be 32 21 76 20 cd 74 f5 04 14 dd fa 37 eb 63 ..2!v .t.....7.c 0140 49 90 8b f8 a0 c8 dc e5 c3 83 b8 01 a2 46 d4 d0 I............F.. 0150 0e d8 d4 a1 bf 58 .....X Frame 11 (342 bytes on wire, 342 bytes captured) Arrival Time: Jul 5, 2007 14:33:58.563766000 Time delta from previous packet: 0.000002000 seconds Time since reference or first frame: 0.096942000 seconds Frame Number: 11 Packet Length: 342 bytes Capture Length: 342 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa), Dst: 00:03:d2:20:0e:a4 (00:03:d2:20:0e:a4) Destination: 00:03:d2:20:0e:a4 (00:03:d2:20:0e:a4) Source: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.139 (165.227.249.139) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 328 Identification: 0x4128 (16680) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xb993 [correct] Good: True Bad : False Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.139 (165.227.249.139) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 308 Checksum: 0x891a [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xE7A3D835648B5189 Responder cookie: 0xA3FA89676B54B6E0 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x739889D1 Length: 300 Encrypted payload (272 bytes) 0000 00 03 d2 20 0e a4 00 0c 29 96 e1 fa 08 00 45 00 ... ....).....E. 0010 01 48 41 28 00 00 80 11 b9 93 a5 e3 f9 96 a5 e3 .HA(............ 0020 f9 8b 01 f4 01 f4 01 34 89 1a e7 a3 d8 35 64 8b .......4.....5d. 0030 51 89 a3 fa 89 67 6b 54 b6 e0 08 10 20 01 73 98 Q....gkT.... .s. 0040 89 d1 00 00 01 2c 45 e2 91 d0 8d e6 26 a5 f1 8f .....,E.....&... 0050 f1 38 2e fa da 91 31 73 4c 5c 98 79 c1 9f e6 4f .8....1sL\.y...O 0060 f7 22 90 df 38 be da c6 21 a9 1f a2 86 0b a6 55 ."..8...!......U 0070 6e cc eb 10 de b0 42 56 6b de ba c1 59 17 ea cc n.....BVk...Y... 0080 6f 71 50 a1 73 dc 8f 32 b7 8f ab 59 01 5e 7f a5 oqP.s..2...Y.^.. 0090 9a 5c e6 25 30 6c 5a 01 85 b1 ec a9 06 80 e3 80 .\.%0lZ......... 00a0 19 84 a3 22 4f f3 f2 bf 7b 9e 25 32 75 0d a4 7d ..."O...{.%2u..} 00b0 e5 61 62 e5 a4 cb 48 35 22 d8 47 c1 42 5f 51 30 .ab...H5".G.B_Q0 00c0 75 6d 52 ba 09 aa fc 8e d9 ba 1d cf 7f b1 00 7a umR............z 00d0 e0 3d b6 ea 53 a0 30 0c 32 5d 97 91 3e 5f 1c a5 .=..S.0.2]..>_.. 00e0 73 9f 18 8d 8d 85 d3 df 77 f2 9f 53 ae e6 f5 41 s.......w..S...A 00f0 dd 68 64 9f 30 ca 12 97 23 c3 2f 30 4d ed 94 00 .hd.0...#./0M... 0100 7a 25 67 d8 b3 ec 69 0d 12 d7 13 56 1e 5a 94 5b z%g...i....V.Z.[ 0110 26 3c b3 49 d1 3f c5 62 91 f9 b1 94 59 4b 3b 6d &<.I.?.b....YK;m 0120 78 e6 e8 ce 7d 10 4f b4 fe b7 cf 63 1f f6 e4 21 x...}.O....c...! 0130 4b 73 4a 1f 9a df 08 9d 39 6d e0 77 01 e3 d1 e3 KsJ.....9m.w.... 0140 87 9a d9 32 d6 21 c2 20 e4 12 51 da f5 ac 28 86 ...2.!. ..Q...(. 0150 74 84 75 ee bc 01 t.u... Frame 12 (342 bytes on wire, 342 bytes captured) Arrival Time: Jul 5, 2007 14:33:58.563768000 Time delta from previous packet: 0.000002000 seconds Time since reference or first frame: 0.096944000 seconds Frame Number: 12 Packet Length: 342 bytes Capture Length: 342 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa), Dst: 00:03:d2:20:0e:a4 (00:03:d2:20:0e:a4) Destination: 00:03:d2:20:0e:a4 (00:03:d2:20:0e:a4) Source: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.139 (165.227.249.139) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 328 Identification: 0x4129 (16681) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xb992 [correct] Good: True Bad : False Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.139 (165.227.249.139) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 308 Checksum: 0x891a [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xE7A3D835648B5189 Responder cookie: 0xA3FA89676B54B6E0 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x739889D1 Length: 300 Encrypted payload (272 bytes) 0000 00 03 d2 20 0e a4 00 0c 29 96 e1 fa 08 00 45 00 ... ....).....E. 0010 01 48 41 29 00 00 80 11 b9 92 a5 e3 f9 96 a5 e3 .HA)............ 0020 f9 8b 01 f4 01 f4 01 34 89 1a e7 a3 d8 35 64 8b .......4.....5d. 0030 51 89 a3 fa 89 67 6b 54 b6 e0 08 10 20 01 73 98 Q....gkT.... .s. 0040 89 d1 00 00 01 2c 45 e2 91 d0 8d e6 26 a5 f1 8f .....,E.....&... 0050 f1 38 2e fa da 91 31 73 4c 5c 98 79 c1 9f e6 4f .8....1sL\.y...O 0060 f7 22 90 df 38 be da c6 21 a9 1f a2 86 0b a6 55 ."..8...!......U 0070 6e cc eb 10 de b0 42 56 6b de ba c1 59 17 ea cc n.....BVk...Y... 0080 6f 71 50 a1 73 dc 8f 32 b7 8f ab 59 01 5e 7f a5 oqP.s..2...Y.^.. 0090 9a 5c e6 25 30 6c 5a 01 85 b1 ec a9 06 80 e3 80 .\.%0lZ......... 00a0 19 84 a3 22 4f f3 f2 bf 7b 9e 25 32 75 0d a4 7d ..."O...{.%2u..} 00b0 e5 61 62 e5 a4 cb 48 35 22 d8 47 c1 42 5f 51 30 .ab...H5".G.B_Q0 00c0 75 6d 52 ba 09 aa fc 8e d9 ba 1d cf 7f b1 00 7a umR............z 00d0 e0 3d b6 ea 53 a0 30 0c 32 5d 97 91 3e 5f 1c a5 .=..S.0.2]..>_.. 00e0 73 9f 18 8d 8d 85 d3 df 77 f2 9f 53 ae e6 f5 41 s.......w..S...A 00f0 dd 68 64 9f 30 ca 12 97 23 c3 2f 30 4d ed 94 00 .hd.0...#./0M... 0100 7a 25 67 d8 b3 ec 69 0d 12 d7 13 56 1e 5a 94 5b z%g...i....V.Z.[ 0110 26 3c b3 49 d1 3f c5 62 91 f9 b1 94 59 4b 3b 6d &<.I.?.b....YK;m 0120 78 e6 e8 ce 7d 10 4f b4 fe b7 cf 63 1f f6 e4 21 x...}.O....c...! 0130 4b 73 4a 1f 9a df 08 9d 39 6d e0 77 01 e3 d1 e3 KsJ.....9m.w.... 0140 87 9a d9 32 d6 21 c2 20 e4 12 51 da f5 ac 28 86 ...2.!. ..Q...(. 0150 74 84 75 ee bc 01 t.u... Frame 13 (102 bytes on wire, 102 bytes captured) Arrival Time: Jul 5, 2007 14:33:58.695178000 Time delta from previous packet: 0.131410000 seconds Time since reference or first frame: 0.228354000 seconds Frame Number: 13 Packet Length: 102 bytes Capture Length: 102 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa), Dst: 00:03:d2:20:0e:a4 (00:03:d2:20:0e:a4) Destination: 00:03:d2:20:0e:a4 (00:03:d2:20:0e:a4) Source: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.139 (165.227.249.139) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 88 Identification: 0x412a (16682) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xba81 [correct] Good: True Bad : False Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.139 (165.227.249.139) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 68 Checksum: 0x96ca [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xE7A3D835648B5189 Responder cookie: 0xA3FA89676B54B6E0 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x739889D1 Length: 60 Encrypted payload (32 bytes) 0000 00 03 d2 20 0e a4 00 0c 29 96 e1 fa 08 00 45 00 ... ....).....E. 0010 00 58 41 2a 00 00 80 11 ba 81 a5 e3 f9 96 a5 e3 .XA*............ 0020 f9 8b 01 f4 01 f4 00 44 96 ca e7 a3 d8 35 64 8b .......D.....5d. 0030 51 89 a3 fa 89 67 6b 54 b6 e0 08 10 20 01 73 98 Q....gkT.... .s. 0040 89 d1 00 00 00 3c 91 4c f5 e6 b2 ac 95 12 59 b3 .....<.L......Y. 0050 e5 9f af 37 3d cb 2d 7d 5b 7b 0f 7f 69 6d ea fa ...7=.-}[{..im.. 0060 cf c3 f4 c3 8d dc ...... Frame 14 (406 bytes on wire, 406 bytes captured) Arrival Time: Jul 5, 2007 14:34:06.295964000 Time delta from previous packet: 7.600786000 seconds Time since reference or first frame: 7.829140000 seconds Frame Number: 14 Packet Length: 406 bytes Capture Length: 406 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa), Dst: 00:03:d2:20:0e:a4 (00:03:d2:20:0e:a4) Destination: 00:03:d2:20:0e:a4 (00:03:d2:20:0e:a4) Source: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.139 (165.227.249.139) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 392 Identification: 0x412b (16683) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: ESP (0x32) Header checksum: 0xb92f [correct] Good: True Bad : False Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.139 (165.227.249.139) Encapsulating Security Payload SPI: 0x07f2a808 Sequence: 1 Data (364 bytes) 0000 00 03 d2 20 0e a4 00 0c 29 96 e1 fa 08 00 45 00 ... ....).....E. 0010 01 88 41 2b 00 00 80 32 b9 2f a5 e3 f9 96 a5 e3 ..A+...2./...... 0020 f9 8b 07 f2 a8 08 00 00 00 01 c4 15 06 2d 28 da .............-(. 0030 4a b3 f9 38 64 42 34 35 6d 51 7a fd 5d 3d b2 30 J..8dB45mQz.]=.0 0040 89 80 37 ed c6 d1 3c 58 9a a4 8c 80 1d b6 27 10 ..7...H,........ .. 0160 35 82 87 2e af 9e ca 89 20 9e 95 8a 70 91 4c 53 5....... ...p.LS 0170 38 94 43 c4 f3 e9 49 c4 41 d4 a0 0a 6f 79 c0 62 8.C...I.A...oy.b 0180 c1 be f4 1a 2f 41 bb 15 96 36 70 71 f0 95 09 85 ..../A...6pq.... 0190 55 24 15 fd b8 31 U$...1