Frame 1 (146 bytes on wire, 146 bytes captured) Arrival Time: Sep 28, 2005 14:40:44.868843000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 146 bytes Capture Length: 146 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:0f:b5:5f:1b:8f Destination: 00:0f:b5:5f:1b:8f (00:0f:b5:5f:1b:8f) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0x6ab061be (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.100 (165.227.249.100) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 128 Identification: 0x0ea4 (3748) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x2d33 (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.100 (165.227.249.100) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 108 Checksum: 0x5261 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x989D462B3EBB6CD5 Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 100 Security Association payload Next payload: Vendor ID (13) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 40 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 32 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: draft-ietf-ipsec-dpd-00.txt 0000 00 0f b5 5f 1b 8f 00 a0 8e 72 1e 40 08 00 45 00 ..._.....r.@..E. 0010 00 80 0e a4 00 00 40 11 2d 33 a5 e3 f9 6a a5 e3 ......@.-3...j.. 0020 f9 64 01 f4 01 f4 00 6c 52 61 98 9d 46 2b 3e bb .d.....lRa..F+>. 0030 6c d5 00 00 00 00 00 00 00 00 01 10 02 00 00 00 l............... 0040 00 00 00 00 00 64 0d 00 00 34 00 00 00 01 00 00 .....d...4...... 0050 00 01 00 00 00 28 01 01 00 01 00 00 00 20 01 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 04 00 02 80 03 ................ 0070 00 01 80 0b 00 01 80 0c 70 80 00 00 00 14 af ca ........p....... 0080 d7 13 68 a1 f1 c9 6b 86 96 fc 77 57 01 00 6a b0 ..h...k...wW..j. 0090 61 be a. Frame 2 (126 bytes on wire, 126 bytes captured) Arrival Time: Sep 28, 2005 14:40:44.874107000 Time delta from previous packet: 0.005264000 seconds Time since reference or first frame: 0.005264000 seconds Frame Number: 2 Packet Length: 126 bytes Capture Length: 126 bytes Ethernet II, Src: 00:0f:b5:5f:1b:8f, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:0f:b5:5f:1b:8f (00:0f:b5:5f:1b:8f) Type: IP (0x0800) Frame check sequence: 0x6d9ec6fc (correct) Internet Protocol, Src Addr: 165.227.249.100 (165.227.249.100), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 108 Identification: 0x003d (61) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3bae (correct) Source: 165.227.249.100 (165.227.249.100) Destination: 165.227.249.106 (165.227.249.106) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 88 Checksum: 0xa3a5 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x989D462B3EBB6CD5 Responder cookie: 0x3DCB7A9FA94AB67A Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 80 Security Association payload Next payload: NONE (0) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 40 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 32 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) 0000 00 a0 8e 72 1e 40 00 0f b5 5f 1b 8f 08 00 45 00 ...r.@..._....E. 0010 00 6c 00 3d 00 00 40 11 3b ae a5 e3 f9 64 a5 e3 .l.=..@.;....d.. 0020 f9 6a 01 f4 01 f4 00 58 a3 a5 98 9d 46 2b 3e bb .j.....X....F+>. 0030 6c d5 3d cb 7a 9f a9 4a b6 7a 01 10 02 00 00 00 l.=.z..J.z...... 0040 00 00 00 00 00 50 00 00 00 34 00 00 00 01 00 00 .....P...4...... 0050 00 01 00 00 00 28 01 01 00 01 00 00 00 20 01 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 04 00 02 80 03 ................ 0070 00 01 80 0b 00 01 80 0c 70 80 6d 9e c6 fc ........p.m... Frame 3 (262 bytes on wire, 262 bytes captured) Arrival Time: Sep 28, 2005 14:40:44.997896000 Time delta from previous packet: 0.123789000 seconds Time since reference or first frame: 0.129053000 seconds Frame Number: 3 Packet Length: 262 bytes Capture Length: 262 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:0f:b5:5f:1b:8f Destination: 00:0f:b5:5f:1b:8f (00:0f:b5:5f:1b:8f) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0x22cc51af (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.100 (165.227.249.100) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 244 Identification: 0x0ea5 (3749) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x2cbe (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.100 (165.227.249.100) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 224 Checksum: 0xd1df (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x989D462B3EBB6CD5 Responder cookie: 0x3DCB7A9FA94AB67A Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 216 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: Vendor ID (13) Length: 24 Nonce Data Vendor ID payload Next payload: NONE (0) Length: 32 Vendor ID: unknown vendor ID: 0x030000149EA0B238AF12757767AAD2E3... 0000 00 0f b5 5f 1b 8f 00 a0 8e 72 1e 40 08 00 45 00 ..._.....r.@..E. 0010 00 f4 0e a5 00 00 40 11 2c be a5 e3 f9 6a a5 e3 ......@.,....j.. 0020 f9 64 01 f4 01 f4 00 e0 d1 df 98 9d 46 2b 3e bb .d..........F+>. 0030 6c d5 3d cb 7a 9f a9 4a b6 7a 04 10 02 00 00 00 l.=.z..J.z...... 0040 00 00 00 00 00 d8 0a 00 00 84 75 6c c2 df 7a 92 ..........ul..z. 0050 ce 1b df ea 67 0c ab bf 16 ea 2c c6 4f 42 f8 60 ....g.....,.OB.` 0060 3e c6 24 4a 5f ac b0 f8 f7 6c 5b f5 1d 73 b1 5a >.$J_....l[..s.Z 0070 9f 21 24 75 66 d7 fd 73 f5 67 15 56 2a 81 94 ad .!$uf..s.g.V*... 0080 c5 de f2 71 5e 1c 03 24 ef 91 b9 03 21 c9 5a 91 ...q^..$....!.Z. 0090 31 ed c3 44 d3 b7 37 f8 3f 8b a6 f5 5e 45 30 b1 1..D..7.?...^E0. 00a0 f3 a7 2c f5 44 82 ff 41 11 ca 68 d8 c7 ef f1 fd ..,.D..A..h..... 00b0 64 ea 95 ee 6d e7 43 6b 4c f8 0a c4 9b ca 6c 5a d...m.CkL.....lZ 00c0 d6 21 c2 a0 43 5d a5 57 88 5d 0d 00 00 18 24 e5 .!..C].W.]....$. 00d0 74 19 67 25 0e 47 6c 5d 01 07 d1 a2 fc e0 1e 8e t.g%.Gl]........ 00e0 4c 23 00 00 00 20 03 00 00 14 9e a0 b2 38 af 12 L#... .......8.. 00f0 75 77 67 aa d2 e3 ec 48 e9 d5 00 00 00 08 00 06 uwg....H........ 0100 00 03 22 cc 51 af ..".Q. Frame 4 (218 bytes on wire, 218 bytes captured) Arrival Time: Sep 28, 2005 14:40:46.322453000 Time delta from previous packet: 1.324557000 seconds Time since reference or first frame: 1.453610000 seconds Frame Number: 4 Packet Length: 218 bytes Capture Length: 218 bytes Ethernet II, Src: 00:0f:b5:5f:1b:8f, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:0f:b5:5f:1b:8f (00:0f:b5:5f:1b:8f) Type: IP (0x0800) Frame check sequence: 0x0961af74 (correct) Internet Protocol, Src Addr: 165.227.249.100 (165.227.249.100), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 200 Identification: 0x003e (62) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3b51 (correct) Source: 165.227.249.100 (165.227.249.100) Destination: 165.227.249.106 (165.227.249.106) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 180 Checksum: 0x8124 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x989D462B3EBB6CD5 Responder cookie: 0x3DCB7A9FA94AB67A Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 172 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 12 Nonce Data 0000 00 a0 8e 72 1e 40 00 0f b5 5f 1b 8f 08 00 45 00 ...r.@..._....E. 0010 00 c8 00 3e 00 00 40 11 3b 51 a5 e3 f9 64 a5 e3 ...>..@.;Q...d.. 0020 f9 6a 01 f4 01 f4 00 b4 81 24 98 9d 46 2b 3e bb .j.......$..F+>. 0030 6c d5 3d cb 7a 9f a9 4a b6 7a 04 10 02 00 00 00 l.=.z..J.z...... 0040 00 00 00 00 00 ac 0a 00 00 84 a0 be c4 0d b8 05 ................ 0050 98 cd f5 84 4d 9b 4c 43 d3 5e a2 ba bc 52 0c bb ....M.LC.^...R.. 0060 50 5b a2 d0 5f 65 35 dc ee e0 ef 0f 91 c9 53 2a P[.._e5.......S* 0070 ba 01 6f a4 91 ee ac 16 8a a5 4f 95 5d 0f 72 b3 ..o.......O.].r. 0080 98 5e 4d 07 06 37 08 75 67 0e 31 7a 9c d5 18 f9 .^M..7.ug.1z.... 0090 d9 74 15 20 a1 b6 e6 2e d0 83 05 4d f5 37 e6 46 .t. .......M.7.F 00a0 02 00 57 d1 9a 15 9e 1f 73 2f 45 3f 64 3f b0 e7 ..W.....s/E?d?.. 00b0 ce eb 3c 36 90 b1 02 2f 79 0e d7 3a d7 fa 29 05 ..<6.../y..:..). 00c0 b6 9f 99 d7 ac b7 73 20 16 ce 00 00 00 0c ed d8 ......s ........ 00d0 2e c7 a2 bb a6 52 09 61 af 74 .....R.a.t Frame 5 (138 bytes on wire, 138 bytes captured) Arrival Time: Sep 28, 2005 14:40:46.475600000 Time delta from previous packet: 0.153147000 seconds Time since reference or first frame: 1.606757000 seconds Frame Number: 5 Packet Length: 138 bytes Capture Length: 138 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:0f:b5:5f:1b:8f Destination: 00:0f:b5:5f:1b:8f (00:0f:b5:5f:1b:8f) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0x95ff61b2 (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.100 (165.227.249.100) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0ea6 (3750) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x2d39 (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.100 (165.227.249.100) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 100 Checksum: 0x2b42 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x989D462B3EBB6CD5 Responder cookie: 0x3DCB7A9FA94AB67A Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 92 Encrypted payload (64 bytes) 0000 00 0f b5 5f 1b 8f 00 a0 8e 72 1e 40 08 00 45 00 ..._.....r.@..E. 0010 00 78 0e a6 00 00 40 11 2d 39 a5 e3 f9 6a a5 e3 .x....@.-9...j.. 0020 f9 64 01 f4 01 f4 00 64 2b 42 98 9d 46 2b 3e bb .d.....d+B..F+>. 0030 6c d5 3d cb 7a 9f a9 4a b6 7a 05 10 02 01 00 00 l.=.z..J.z...... 0040 00 00 00 00 00 5c d8 a6 f8 b4 25 8d 15 c4 ca f5 .....\....%..... 0050 65 95 b6 67 45 62 64 de 30 05 63 92 33 cb 9c 22 e..gEbd.0.c.3.." 0060 24 f3 4d 61 39 b3 7e 53 db cf 9d 43 39 4e c5 53 $.Ma9.~S...C9N.S 0070 35 3d 1e 76 7f 23 2e 0e 8b 12 bd 14 1a d8 8b 7b 5=.v.#.........{ 0080 a4 b2 cd 77 e2 6d 95 ff 61 b2 ...w.m..a. Frame 6 (114 bytes on wire, 114 bytes captured) Arrival Time: Sep 28, 2005 14:40:48.108443000 Time delta from previous packet: 1.632843000 seconds Time since reference or first frame: 3.239600000 seconds Frame Number: 6 Packet Length: 114 bytes Capture Length: 114 bytes Ethernet II, Src: 00:0f:b5:5f:1b:8f, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:0f:b5:5f:1b:8f (00:0f:b5:5f:1b:8f) Type: IP (0x0800) Frame check sequence: 0x73e2239c (correct) Internet Protocol, Src Addr: 165.227.249.100 (165.227.249.100), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0x003f (63) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3bb8 (correct) Source: 165.227.249.100 (165.227.249.100) Destination: 165.227.249.106 (165.227.249.106) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 76 Checksum: 0x1f2b (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x989D462B3EBB6CD5 Responder cookie: 0x3DCB7A9FA94AB67A Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 68 Encrypted payload (40 bytes) 0000 00 a0 8e 72 1e 40 00 0f b5 5f 1b 8f 08 00 45 00 ...r.@..._....E. 0010 00 60 00 3f 00 00 40 11 3b b8 a5 e3 f9 64 a5 e3 .`.?..@.;....d.. 0020 f9 6a 01 f4 01 f4 00 4c 1f 2b 98 9d 46 2b 3e bb .j.....L.+..F+>. 0030 6c d5 3d cb 7a 9f a9 4a b6 7a 05 10 02 01 00 00 l.=.z..J.z...... 0040 00 00 00 00 00 44 70 90 d3 cc 38 f7 8a 09 de 16 .....Dp...8..... 0050 bb 2b 2c e1 42 81 02 31 03 db 8a 7c ed 42 3a 48 .+,.B..1...|.B:H 0060 e8 06 23 07 e7 78 01 83 00 e1 6c 8b ca 40 73 e2 ..#..x....l..@s. 0070 23 9c #. Frame 7 (338 bytes on wire, 338 bytes captured) Arrival Time: Sep 28, 2005 14:40:48.238054000 Time delta from previous packet: 0.129611000 seconds Time since reference or first frame: 3.369211000 seconds Frame Number: 7 Packet Length: 338 bytes Capture Length: 338 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:0f:b5:5f:1b:8f Destination: 00:0f:b5:5f:1b:8f (00:0f:b5:5f:1b:8f) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0xd07d354f (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.100 (165.227.249.100) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 320 Identification: 0x0ea7 (3751) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x2c70 (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.100 (165.227.249.100) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 300 Checksum: 0xdfc0 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x989D462B3EBB6CD5 Responder cookie: 0x3DCB7A9FA94AB67A Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x28CD19E9 Length: 292 Encrypted payload (264 bytes) 0000 00 0f b5 5f 1b 8f 00 a0 8e 72 1e 40 08 00 45 00 ..._.....r.@..E. 0010 01 40 0e a7 00 00 40 11 2c 70 a5 e3 f9 6a a5 e3 .@....@.,p...j.. 0020 f9 64 01 f4 01 f4 01 2c df c0 98 9d 46 2b 3e bb .d.....,....F+>. 0030 6c d5 3d cb 7a 9f a9 4a b6 7a 08 10 20 01 28 cd l.=.z..J.z.. .(. 0040 19 e9 00 00 01 24 01 b7 d7 ee 0a 33 e2 c1 64 8b .....$.....3..d. 0050 ca fe f4 de 94 d6 1c b9 7f f2 ff bb 05 e7 ee a2 ................ 0060 68 4f 40 a2 18 13 aa 54 96 7f cb 95 a5 4b 06 3e hO@....T.....K.> 0070 2b 7f 4f dc 24 ec 42 02 fd 98 70 6b c0 cd 3e 8e +.O.$.B...pk..>. 0080 39 a0 8a 12 c6 b4 0d 79 df eb 2d 4a 97 69 4c db 9......y..-J.iL. 0090 9b bb 38 0e 7b a7 99 b4 95 66 13 8d 6e 03 6c a3 ..8.{....f..n.l. 00a0 ca 96 db 43 1a b8 48 b0 6b 6b 4e 5f 48 71 fb 9c ...C..H.kkN_Hq.. 00b0 e6 66 66 c4 c4 db 57 4a f4 70 62 c5 c4 f6 69 5a .ff...WJ.pb...iZ 00c0 00 f9 4e 40 10 83 04 aa 37 3f 6b 05 cb 2e e7 0c ..N@....7?k..... 00d0 f0 6b 7c c3 a8 60 c6 8d 4f 41 17 40 75 d7 04 58 .k|..`..OA.@u..X 00e0 1c d5 8b 93 a8 d5 50 f8 ad 72 af 45 cb 88 7a be ......P..r.E..z. 00f0 57 bc cb 09 9c 11 10 aa 6a 34 ff 61 d7 bb a5 05 W.......j4.a.... 0100 6a d0 c9 1c 55 df d8 c5 66 2e 68 68 4e 9a 2a 14 j...U...f.hhN.*. 0110 74 5c 48 63 df 0c 79 51 57 31 c2 3d 17 8e dc d6 t\Hc..yQW1.=.... 0120 25 8a d6 2e 77 a7 a9 0f 00 62 ba 04 0b e1 0b 93 %...w....b...... 0130 cb 2d ad b0 17 d3 45 cf 22 72 5b 63 d8 fb 45 70 .-....E."r[c..Ep 0140 92 8a de 7c 08 e4 75 48 45 a2 2f ea 04 05 d0 7d ...|..uHE./....} 0150 35 4f 5O Frame 8 (330 bytes on wire, 330 bytes captured) Arrival Time: Sep 28, 2005 14:40:49.568295000 Time delta from previous packet: 1.330241000 seconds Time since reference or first frame: 4.699452000 seconds Frame Number: 8 Packet Length: 330 bytes Capture Length: 330 bytes Ethernet II, Src: 00:0f:b5:5f:1b:8f, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:0f:b5:5f:1b:8f (00:0f:b5:5f:1b:8f) Type: IP (0x0800) Frame check sequence: 0x44177ecc (correct) Internet Protocol, Src Addr: 165.227.249.100 (165.227.249.100), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 312 Identification: 0x0044 (68) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3adb (correct) Source: 165.227.249.100 (165.227.249.100) Destination: 165.227.249.106 (165.227.249.106) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 292 Checksum: 0x63be (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x989D462B3EBB6CD5 Responder cookie: 0x3DCB7A9FA94AB67A Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x28CD19E9 Length: 284 Encrypted payload (256 bytes) 0000 00 a0 8e 72 1e 40 00 0f b5 5f 1b 8f 08 00 45 00 ...r.@..._....E. 0010 01 38 00 44 00 00 40 11 3a db a5 e3 f9 64 a5 e3 .8.D..@.:....d.. 0020 f9 6a 01 f4 01 f4 01 24 63 be 98 9d 46 2b 3e bb .j.....$c...F+>. 0030 6c d5 3d cb 7a 9f a9 4a b6 7a 08 10 20 01 28 cd l.=.z..J.z.. .(. 0040 19 e9 00 00 01 1c e4 7b c3 3f 4e 43 63 a7 07 f7 .......{.?NCc... 0050 ab 9a 12 ea de 41 c4 65 93 51 6a e8 2c d6 f9 15 .....A.e.Qj.,... 0060 04 38 87 03 5b 98 1b 6b 93 78 0f 31 16 c0 2b c9 .8..[..k.x.1..+. 0070 c1 33 21 c8 56 0d 14 ae 0c b3 63 fe 8b 0c fc 20 .3!.V.....c.... 0080 88 24 fd 9e 9c 09 d4 95 a1 6e 45 e9 1d 88 6e 58 .$.......nE...nX 0090 e2 7a 99 ed e5 be dd f9 0c 92 cb 86 60 74 7f 5b .z..........`t.[ 00a0 01 3f be 8a ef 7d cb c1 ee 49 b6 9a e7 47 57 cf .?...}...I...GW. 00b0 5c 5b c7 ee 35 12 c4 3e 94 9a 82 fd 65 3b 78 6a \[..5..>....e;xj 00c0 41 92 69 ba 14 88 cb 6d 4f c2 1c 15 24 60 5a 54 A.i....mO...$`ZT 00d0 a1 8b 2e 6a 29 a8 57 f7 07 dd a0 ff 16 5b 84 21 ...j).W......[.! 00e0 4f 73 ed c0 df 8d d5 3a a1 6f 91 55 ac f0 12 ba Os.....:.o.U.... 00f0 63 f0 a9 92 d0 2e 1a 91 5b 22 c7 9e 9f dc 9b 45 c.......[".....E 0100 e5 c4 86 fb 0e 11 1e d8 9c bc d8 b8 8e a8 56 a3 ..............V. 0110 90 9a 08 d4 3c 5a 4f a1 d4 28 b7 ba d1 e5 b3 c1 ..... 0030 6c d5 3d cb 7a 9f a9 4a b6 7a 08 10 20 01 28 cd l.=.z..J.z.. .(. 0040 19 e9 00 00 00 34 0e a5 ee d3 50 bb 77 28 c2 04 .....4....P.w(.. 0050 73 d5 ed 18 68 f8 63 4f a8 0e e3 37 5a 96 29 ee s...h.cO...7Z.). 0060 6e 59 nY Frame 10 (130 bytes on wire, 130 bytes captured) Arrival Time: Sep 28, 2005 14:40:50.133092000 Time delta from previous packet: 0.404936000 seconds Time since reference or first frame: 5.264249000 seconds Frame Number: 10 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:0f:b5:5f:1b:8f Destination: 00:0f:b5:5f:1b:8f (00:0f:b5:5f:1b:8f) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0xdbdf637e (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.100 (165.227.249.100) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0ea9 (3753) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x2d1d (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.100 (165.227.249.100) Encapsulating Security Payload SPI: 0xe63c3aee Sequence: 1 Data (84 bytes) 0000 00 0f b5 5f 1b 8f 00 a0 8e 72 1e 40 08 00 45 00 ..._.....r.@..E. 0010 00 70 0e a9 00 00 40 32 2d 1d a5 e3 f9 6a a5 e3 .p....@2-....j.. 0020 f9 64 e6 3c 3a ee 00 00 00 01 59 40 ae 61 0e 90 .d.<:.....Y@.a.. 0030 78 25 7c 60 4c 5e 13 92 68 84 58 73 b1 bc b1 f6 x%|`L^..h.Xs.... 0040 fd b9 fe 55 88 11 bf 2a 08 df 46 e0 cc 05 87 f8 ...U...*..F..... 0050 b1 be 13 ca 9f 31 59 86 8b f3 a9 d9 c5 53 af df .....1Y......S.. 0060 73 5a 7e 43 b5 04 32 e9 c1 4b 4f 8a 2b 81 95 9f sZ~C..2..KO.+... 0070 47 6e 68 3f 95 73 61 e3 27 dc 29 b4 8c fd db df Gnh?.sa.'.)..... 0080 63 7e c~ Frame 11 (130 bytes on wire, 130 bytes captured) Arrival Time: Sep 28, 2005 14:40:50.228910000 Time delta from previous packet: 0.095818000 seconds Time since reference or first frame: 5.360067000 seconds Frame Number: 11 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:0f:b5:5f:1b:8f Destination: 00:0f:b5:5f:1b:8f (00:0f:b5:5f:1b:8f) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0x352fa1b1 (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.100 (165.227.249.100) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0eaa (3754) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x2d1c (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.100 (165.227.249.100) Encapsulating Security Payload SPI: 0xe63c3aee Sequence: 2 Data (84 bytes) 0000 00 0f b5 5f 1b 8f 00 a0 8e 72 1e 40 08 00 45 00 ..._.....r.@..E. 0010 00 70 0e aa 00 00 40 32 2d 1c a5 e3 f9 6a a5 e3 .p....@2-....j.. 0020 f9 64 e6 3c 3a ee 00 00 00 02 63 9d eb 9d 83 c3 .d.<:.....c..... 0030 d7 14 d5 e9 da a3 9e d9 e1 23 f7 16 e5 5b c9 3d .........#...[.= 0040 a0 ab 68 93 c8 b4 09 51 ee 7c c7 b0 af 85 24 4c ..h....Q.|....$L 0050 50 e1 c5 e1 1d eb a1 4f 92 a4 82 2d e9 5f 26 61 P......O...-._&a 0060 9f bc 29 1c a9 0d 33 9a fe 59 ae 7b 5e 38 3c 0b ..)...3..Y.{^8<. 0070 07 18 2c ef 00 e2 40 7e ca fd 01 ef 86 80 35 2f ..,...@~......5/ 0080 a1 b1 .. Frame 12 (130 bytes on wire, 130 bytes captured) Arrival Time: Sep 28, 2005 14:40:51.374553000 Time delta from previous packet: 1.145643000 seconds Time since reference or first frame: 6.505710000 seconds Frame Number: 12 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:0f:b5:5f:1b:8f, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:0f:b5:5f:1b:8f (00:0f:b5:5f:1b:8f) Type: IP (0x0800) Frame check sequence: 0x2f0b2976 (correct) Internet Protocol, Src Addr: 165.227.249.100 (165.227.249.100), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x5f99 (24473) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 30 Protocol: ESP (0x32) Header checksum: 0xfe2c (correct) Source: 165.227.249.100 (165.227.249.100) Destination: 165.227.249.106 (165.227.249.106) Encapsulating Security Payload SPI: 0xf2307000 Sequence: 1 Data (84 bytes) 0000 00 a0 8e 72 1e 40 00 0f b5 5f 1b 8f 08 00 45 00 ...r.@..._....E. 0010 00 70 5f 99 00 00 1e 32 fe 2c a5 e3 f9 64 a5 e3 .p_....2.,...d.. 0020 f9 6a f2 30 70 00 00 00 00 01 20 67 d5 be b2 07 .j.0p..... g.... 0030 32 1d 58 60 63 61 65 f7 a6 5d f6 37 5f 1d 8b ab 2.X`cae..].7_... 0040 34 85 b1 4d 51 bd 8d 7b 48 b4 2d ae 62 41 ae 68 4..MQ..{H.-.bA.h 0050 b6 00 76 14 ee e8 51 6c 49 96 1c 7e 05 91 51 e3 ..v...QlI..~..Q. 0060 67 2c c7 5d 17 68 4d c4 eb 89 2a 76 69 ae 1f e7 g,.].hM...*vi... 0070 af b8 57 38 ea 24 c4 7f f5 ce e1 6b 4d 43 2f 0b ..W8.$.....kMC/. 0080 29 76 )v Frame 13 (130 bytes on wire, 130 bytes captured) Arrival Time: Sep 28, 2005 14:40:55.632746000 Time delta from previous packet: 4.258193000 seconds Time since reference or first frame: 10.763903000 seconds Frame Number: 13 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:0f:b5:5f:1b:8f Destination: 00:0f:b5:5f:1b:8f (00:0f:b5:5f:1b:8f) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0x217bb3c2 (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.100 (165.227.249.100) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0eab (3755) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x2d1b (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.100 (165.227.249.100) Encapsulating Security Payload SPI: 0xe63c3aee Sequence: 3 Data (84 bytes) 0000 00 0f b5 5f 1b 8f 00 a0 8e 72 1e 40 08 00 45 00 ..._.....r.@..E. 0010 00 70 0e ab 00 00 40 32 2d 1b a5 e3 f9 6a a5 e3 .p....@2-....j.. 0020 f9 64 e6 3c 3a ee 00 00 00 03 3f 5b 47 0c 53 85 .d.<:.....?[G.S. 0030 95 01 a6 ae fe 26 3d 93 c6 ad 54 fd 06 19 10 cc .....&=...T..... 0040 3a d4 c7 1b 9d 3f 8d 66 2b b9 c7 b5 06 a2 8e ae :....?.f+....... 0050 78 21 16 68 55 77 da af 85 a5 5c 20 6a 1f 0b d2 x!.hUw....\ j... 0060 9b 63 7a 02 ce 55 05 b1 b3 ac 9a 78 1b 86 88 67 .cz..U.....x...g 0070 55 8b e7 da 14 06 15 94 09 8b d4 b5 41 7d 21 7b U...........A}!{ 0080 b3 c2 .. Frame 14 (130 bytes on wire, 130 bytes captured) Arrival Time: Sep 28, 2005 14:40:55.635345000 Time delta from previous packet: 0.002599000 seconds Time since reference or first frame: 10.766502000 seconds Frame Number: 14 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:0f:b5:5f:1b:8f, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:0f:b5:5f:1b:8f (00:0f:b5:5f:1b:8f) Type: IP (0x0800) Frame check sequence: 0xb4f0cdb1 (correct) Internet Protocol, Src Addr: 165.227.249.100 (165.227.249.100), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x4bdd (19421) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 30 Protocol: ESP (0x32) Header checksum: 0x11e9 (correct) Source: 165.227.249.100 (165.227.249.100) Destination: 165.227.249.106 (165.227.249.106) Encapsulating Security Payload SPI: 0xf2307000 Sequence: 2 Data (84 bytes) 0000 00 a0 8e 72 1e 40 00 0f b5 5f 1b 8f 08 00 45 00 ...r.@..._....E. 0010 00 70 4b dd 00 00 1e 32 11 e9 a5 e3 f9 64 a5 e3 .pK....2.....d.. 0020 f9 6a f2 30 70 00 00 00 00 02 2a 76 69 ae 1f e7 .j.0p.....*vi... 0030 af b8 45 f4 97 71 c3 c7 86 37 28 c4 e4 0e ee 7c ..E..q...7(....| 0040 ab 42 1d 2a 40 4e 3a 7c f7 a7 7a 5d 4c 3f 00 a6 .B.*@N:|..z]L?.. 0050 43 55 58 d6 07 0b b3 eb 33 a9 e4 46 cb ff 50 15 CUX.....3..F..P. 0060 e2 6b 41 b9 3f 7e 7e 45 0a a5 c2 93 01 78 d4 eb .kA.?~~E.....x.. 0070 4d 80 4d 93 8b 7f 96 3f 4d b3 57 71 78 29 b4 f0 M.M....?M.Wqx).. 0080 cd b1 .. Frame 15 (330 bytes on wire, 330 bytes captured) Arrival Time: Sep 28, 2005 14:40:56.399309000 Time delta from previous packet: 0.763964000 seconds Time since reference or first frame: 11.530466000 seconds Frame Number: 15 Packet Length: 330 bytes Capture Length: 330 bytes Ethernet II, Src: 00:0f:b5:5f:1b:8f, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:0f:b5:5f:1b:8f (00:0f:b5:5f:1b:8f) Type: IP (0x0800) Frame check sequence: 0xc2f62d7e (correct) Internet Protocol, Src Addr: 165.227.249.100 (165.227.249.100), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 312 Identification: 0x0046 (70) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3ad9 (correct) Source: 165.227.249.100 (165.227.249.100) Destination: 165.227.249.106 (165.227.249.106) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 292 Checksum: 0x63be (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x989D462B3EBB6CD5 Responder cookie: 0x3DCB7A9FA94AB67A Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x28CD19E9 Length: 284 Encrypted payload (256 bytes) 0000 00 a0 8e 72 1e 40 00 0f b5 5f 1b 8f 08 00 45 00 ...r.@..._....E. 0010 01 38 00 46 00 00 40 11 3a d9 a5 e3 f9 64 a5 e3 .8.F..@.:....d.. 0020 f9 6a 01 f4 01 f4 01 24 63 be 98 9d 46 2b 3e bb .j.....$c...F+>. 0030 6c d5 3d cb 7a 9f a9 4a b6 7a 08 10 20 01 28 cd l.=.z..J.z.. .(. 0040 19 e9 00 00 01 1c e4 7b c3 3f 4e 43 63 a7 07 f7 .......{.?NCc... 0050 ab 9a 12 ea de 41 c4 65 93 51 6a e8 2c d6 f9 15 .....A.e.Qj.,... 0060 04 38 87 03 5b 98 1b 6b 93 78 0f 31 16 c0 2b c9 .8..[..k.x.1..+. 0070 c1 33 21 c8 56 0d 14 ae 0c b3 63 fe 8b 0c fc 20 .3!.V.....c.... 0080 88 24 fd 9e 9c 09 d4 95 a1 6e 45 e9 1d 88 6e 58 .$.......nE...nX 0090 e2 7a 99 ed e5 be dd f9 0c 92 cb 86 60 74 7f 5b .z..........`t.[ 00a0 01 3f be 8a ef 7d cb c1 ee 49 b6 9a e7 47 57 cf .?...}...I...GW. 00b0 5c 5b c7 ee 35 12 c4 3e 94 9a 82 fd 65 3b 78 6a \[..5..>....e;xj 00c0 41 92 69 ba 14 88 cb 6d 4f c2 1c 15 24 60 5a 54 A.i....mO...$`ZT 00d0 a1 8b 2e 6a 29 a8 57 f7 07 dd a0 ff 16 5b 84 21 ...j).W......[.! 00e0 4f 73 ed c0 df 8d d5 3a a1 6f 91 55 ac f0 12 ba Os.....:.o.U.... 00f0 63 f0 a9 92 d0 2e 1a 91 5b 22 c7 9e 9f dc 9b 45 c.......[".....E 0100 e5 c4 86 fb 0e 11 1e d8 9c bc d8 b8 8e a8 56 a3 ..............V. 0110 90 9a 08 d4 3c 5a 4f a1 d4 28 b7 ba d1 e5 b3 c1 ....