Frame 1 (126 bytes on wire, 126 bytes captured) Arrival Time: Jun 16, 2005 15:37:49.016963000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 126 bytes Capture Length: 126 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:0f:b5:4b:45:e0 Destination: 00:0f:b5:4b:45:e0 (00:0f:b5:4b:45:e0) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0x22244389 (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.101 (165.227.249.101) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 108 Identification: 0xfe38 (65080) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3db1 (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.101 (165.227.249.101) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 88 Checksum: 0xa734 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x707B4CA192B74F25 Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 80 Security Association payload Next payload: NONE (0) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 40 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 32 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) 0000 00 0f b5 4b 45 e0 00 a0 8e 72 1e 40 08 00 45 00 ...KE....r.@..E. 0010 00 6c fe 38 00 00 40 11 3d b1 a5 e3 f9 6a a5 e3 .l.8..@.=....j.. 0020 f9 65 01 f4 01 f4 00 58 a7 34 70 7b 4c a1 92 b7 .e.....X.4p{L... 0030 4f 25 00 00 00 00 00 00 00 00 01 10 02 00 00 00 O%.............. 0040 00 00 00 00 00 50 00 00 00 34 00 00 00 01 00 00 .....P...4...... 0050 00 01 00 00 00 28 01 01 00 01 00 00 00 20 01 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 04 00 02 80 03 ................ 0070 00 01 80 0b 00 01 80 0c 70 80 22 24 43 89 ........p."$C. Frame 2 (166 bytes on wire, 166 bytes captured) Arrival Time: Jun 16, 2005 15:37:49.022782000 Time delta from previous packet: 0.005819000 seconds Time since reference or first frame: 0.005819000 seconds Frame Number: 2 Packet Length: 166 bytes Capture Length: 166 bytes Ethernet II, Src: 00:0f:b5:4b:45:e0, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:0f:b5:4b:45:e0 (00:0f:b5:4b:45:e0) Type: IP (0x0800) Frame check sequence: 0x619aa833 (correct) Internet Protocol, Src Addr: 165.227.249.101 (165.227.249.101), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 148 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfbc1 (correct) Source: 165.227.249.101 (165.227.249.101) Destination: 165.227.249.106 (165.227.249.106) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 128 Checksum: 0x1264 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x707B4CA192B74F25 Responder cookie: 0x08AE6DA240F8D659 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 120 Security Association payload Next payload: Vendor ID (13) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 40 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 32 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-dpd-00.txt Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: unknown vendor ID: 0x648982785BEDBDD66A6DD356F0E160FD 0000 00 a0 8e 72 1e 40 00 0f b5 4b 45 e0 08 00 45 00 ...r.@...KE...E. 0010 00 94 00 00 40 00 40 11 fb c1 a5 e3 f9 65 a5 e3 ....@.@......e.. 0020 f9 6a 01 f4 01 f4 00 80 12 64 70 7b 4c a1 92 b7 .j.......dp{L... 0030 4f 25 08 ae 6d a2 40 f8 d6 59 01 10 02 00 00 00 O%..m.@..Y...... 0040 00 00 00 00 00 78 0d 00 00 34 00 00 00 01 00 00 .....x...4...... 0050 00 01 00 00 00 28 01 01 00 01 00 00 00 20 01 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 04 00 02 80 03 ................ 0070 00 01 80 0b 00 01 80 0c 70 80 0d 00 00 14 af ca ........p....... 0080 d7 13 68 a1 f1 c9 6b 86 96 fc 77 57 01 00 00 00 ..h...k...wW.... 0090 00 14 64 89 82 78 5b ed bd d6 6a 6d d3 56 f0 e1 ..d..x[...jm.V.. 00a0 60 fd 61 9a a8 33 `.a..3 Frame 3 (262 bytes on wire, 262 bytes captured) Arrival Time: Jun 16, 2005 15:37:49.148795000 Time delta from previous packet: 0.126013000 seconds Time since reference or first frame: 0.131832000 seconds Frame Number: 3 Packet Length: 262 bytes Capture Length: 262 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:0f:b5:4b:45:e0 Destination: 00:0f:b5:4b:45:e0 (00:0f:b5:4b:45:e0) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0xe253c5cb (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.101 (165.227.249.101) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 244 Identification: 0xfe39 (65081) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3d28 (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.101 (165.227.249.101) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 224 Checksum: 0x04e7 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x707B4CA192B74F25 Responder cookie: 0x08AE6DA240F8D659 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 216 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: Vendor ID (13) Length: 24 Nonce Data Vendor ID payload Next payload: NONE (0) Length: 32 Vendor ID: unknown vendor ID: 0x030000147646B8B2031E568752CFC5DE... 0000 00 0f b5 4b 45 e0 00 a0 8e 72 1e 40 08 00 45 00 ...KE....r.@..E. 0010 00 f4 fe 39 00 00 40 11 3d 28 a5 e3 f9 6a a5 e3 ...9..@.=(...j.. 0020 f9 65 01 f4 01 f4 00 e0 04 e7 70 7b 4c a1 92 b7 .e........p{L... 0030 4f 25 08 ae 6d a2 40 f8 d6 59 04 10 02 00 00 00 O%..m.@..Y...... 0040 00 00 00 00 00 d8 0a 00 00 84 3f 85 89 7d 1d 50 ..........?..}.P 0050 72 36 d0 4b 75 32 f7 6d 8f ef 90 12 55 ed e4 52 r6.Ku2.m....U..R 0060 ff 36 7a 70 36 87 c4 09 eb ca 77 03 60 01 5b e6 .6zp6.....w.`.[. 0070 92 44 c5 a0 d2 d9 fa 20 43 fb 45 0b 65 02 0b bb .D..... C.E.e... 0080 58 57 a1 72 60 80 e3 0d dc d0 bb 29 dd 5d 6d b9 XW.r`......).]m. 0090 5e b4 7c af 3b fc 99 28 76 31 88 49 b4 da 1d 36 ^.|.;..(v1.I...6 00a0 60 16 90 9c 50 14 f8 3e cc 3e e2 67 f2 6b 28 31 `...P..>.>.g.k(1 00b0 56 6c 97 58 b3 a0 cb b7 f7 38 33 88 5f 0f 62 e1 Vl.X.....83._.b. 00c0 c6 e7 cb ef 94 c2 d8 9f 32 d0 0d 00 00 18 97 d9 ........2....... 00d0 0e e8 11 c1 e9 56 25 12 26 6a 68 24 3f 5e f5 ea .....V%.&jh$?^.. 00e0 da 75 00 00 00 20 03 00 00 14 76 46 b8 b2 03 1e .u... ....vF.... 00f0 56 87 52 cf c5 de 05 fa 89 f6 00 00 00 08 00 06 V.R............. 0100 00 02 e2 53 c5 cb ...S.. Frame 4 (218 bytes on wire, 218 bytes captured) Arrival Time: Jun 16, 2005 15:37:49.344537000 Time delta from previous packet: 0.195742000 seconds Time since reference or first frame: 0.327574000 seconds Frame Number: 4 Packet Length: 218 bytes Capture Length: 218 bytes Ethernet II, Src: 00:0f:b5:4b:45:e0, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:0f:b5:4b:45:e0 (00:0f:b5:4b:45:e0) Type: IP (0x0800) Frame check sequence: 0xe2aa8062 (correct) Internet Protocol, Src Addr: 165.227.249.101 (165.227.249.101), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 200 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb8d (correct) Source: 165.227.249.101 (165.227.249.101) Destination: 165.227.249.106 (165.227.249.106) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 180 Checksum: 0x4844 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x707B4CA192B74F25 Responder cookie: 0x08AE6DA240F8D659 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 172 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 12 Nonce Data 0000 00 a0 8e 72 1e 40 00 0f b5 4b 45 e0 08 00 45 00 ...r.@...KE...E. 0010 00 c8 00 00 40 00 40 11 fb 8d a5 e3 f9 65 a5 e3 ....@.@......e.. 0020 f9 6a 01 f4 01 f4 00 b4 48 44 70 7b 4c a1 92 b7 .j......HDp{L... 0030 4f 25 08 ae 6d a2 40 f8 d6 59 04 10 02 00 00 00 O%..m.@..Y...... 0040 00 00 00 00 00 ac 0a 00 00 84 16 85 8a 5a d6 4b .............Z.K 0050 5c be 02 54 c5 dd e5 e9 97 43 e2 c2 63 5c d2 ed \..T.....C..c\.. 0060 f3 b9 e6 c4 2b 49 99 3a 7b 6b cc 7f ee b7 1a 02 ....+I.:{k...... 0070 9f 34 7a 81 46 77 ef 2d fb 14 fc 7c 83 14 e1 90 .4z.Fw.-...|.... 0080 46 24 d3 c9 fe 6a 71 45 11 09 a2 3b a6 7d c2 c3 F$...jqE...;.}.. 0090 51 e6 5a 53 59 22 f8 d9 c3 db 9e c6 8d f0 8d 15 Q.ZSY".......... 00a0 70 84 3b 3b 59 1a 36 cb b6 61 a8 66 88 bd 73 b0 p.;;Y.6..a.f..s. 00b0 f7 d7 15 25 48 7d 72 4d 0e 9f 1f 36 f7 ab 06 39 ...%H}rM...6...9 00c0 73 d8 d3 37 3a 71 32 e9 af 17 00 00 00 0c 8c d1 s..7:q2......... 00d0 5b 1b 0a 30 66 49 e2 aa 80 62 [..0fI...b Frame 5 (138 bytes on wire, 138 bytes captured) Arrival Time: Jun 16, 2005 15:37:49.497812000 Time delta from previous packet: 0.153275000 seconds Time since reference or first frame: 0.480849000 seconds Frame Number: 5 Packet Length: 138 bytes Capture Length: 138 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:0f:b5:4b:45:e0 Destination: 00:0f:b5:4b:45:e0 (00:0f:b5:4b:45:e0) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0x5477490f (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.101 (165.227.249.101) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0xfe3a (65082) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3da3 (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.101 (165.227.249.101) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 100 Checksum: 0xd690 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x707B4CA192B74F25 Responder cookie: 0x08AE6DA240F8D659 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 92 Encrypted payload (64 bytes) 0000 00 0f b5 4b 45 e0 00 a0 8e 72 1e 40 08 00 45 00 ...KE....r.@..E. 0010 00 78 fe 3a 00 00 40 11 3d a3 a5 e3 f9 6a a5 e3 .x.:..@.=....j.. 0020 f9 65 01 f4 01 f4 00 64 d6 90 70 7b 4c a1 92 b7 .e.....d..p{L... 0030 4f 25 08 ae 6d a2 40 f8 d6 59 05 10 02 01 00 00 O%..m.@..Y...... 0040 00 00 00 00 00 5c 5a 9a 53 24 d5 75 f9 04 ce 3f .....\Z.S$.u...? 0050 78 f0 ff ea 99 e3 08 81 09 f9 07 19 16 ed c4 3c x..............< 0060 99 e8 4a 7b a2 9b ce 02 9b 1d 24 c9 30 8b a1 b1 ..J{......$.0... 0070 95 4f 9c 91 2c 85 7c de 2f a9 b5 33 5c 0b 0f 14 .O..,.|./..3\... 0080 a3 44 cb 68 df 02 54 77 49 0f .D.h..TwI. Frame 6 (138 bytes on wire, 138 bytes captured) Arrival Time: Jun 16, 2005 15:37:49.800146000 Time delta from previous packet: 0.302334000 seconds Time since reference or first frame: 0.783183000 seconds Frame Number: 6 Packet Length: 138 bytes Capture Length: 138 bytes Ethernet II, Src: 00:0f:b5:4b:45:e0, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:0f:b5:4b:45:e0 (00:0f:b5:4b:45:e0) Type: IP (0x0800) Frame check sequence: 0x9c15c973 (correct) Internet Protocol, Src Addr: 165.227.249.101 (165.227.249.101), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfbdd (correct) Source: 165.227.249.101 (165.227.249.101) Destination: 165.227.249.106 (165.227.249.106) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 100 Checksum: 0x3d3f (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x707B4CA192B74F25 Responder cookie: 0x08AE6DA240F8D659 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 92 Encrypted payload (64 bytes) 0000 00 a0 8e 72 1e 40 00 0f b5 4b 45 e0 08 00 45 00 ...r.@...KE...E. 0010 00 78 00 00 40 00 40 11 fb dd a5 e3 f9 65 a5 e3 .x..@.@......e.. 0020 f9 6a 01 f4 01 f4 00 64 3d 3f 70 7b 4c a1 92 b7 .j.....d=?p{L... 0030 4f 25 08 ae 6d a2 40 f8 d6 59 05 10 02 01 00 00 O%..m.@..Y...... 0040 00 00 00 00 00 5c e6 da 5a 8a ab 66 64 b4 dc ae .....\..Z..fd... 0050 8e f0 6a f8 18 a1 4b 93 e6 50 56 53 34 19 cc 7b ..j...K..PVS4..{ 0060 a5 36 2d 83 74 17 ab d2 a7 95 1c f2 b5 41 ad 1c .6-.t........A.. 0070 81 29 66 cb 3f ec d4 f4 61 6e ff cf 96 d8 27 fc .)f.?...an....'. 0080 bd f3 bf 1c ce 54 9c 15 c9 73 .....T...s Frame 7 (338 bytes on wire, 338 bytes captured) Arrival Time: Jun 16, 2005 15:37:49.927845000 Time delta from previous packet: 0.127699000 seconds Time since reference or first frame: 0.910882000 seconds Frame Number: 7 Packet Length: 338 bytes Capture Length: 338 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:0f:b5:4b:45:e0 Destination: 00:0f:b5:4b:45:e0 (00:0f:b5:4b:45:e0) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0x78693533 (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.101 (165.227.249.101) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 320 Identification: 0xfe3b (65083) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3cda (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.101 (165.227.249.101) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 300 Checksum: 0xdc20 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x707B4CA192B74F25 Responder cookie: 0x08AE6DA240F8D659 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x53BF0DE0 Length: 292 Encrypted payload (264 bytes) 0000 00 0f b5 4b 45 e0 00 a0 8e 72 1e 40 08 00 45 00 ...KE....r.@..E. 0010 01 40 fe 3b 00 00 40 11 3c da a5 e3 f9 6a a5 e3 .@.;..@.<....j.. 0020 f9 65 01 f4 01 f4 01 2c dc 20 70 7b 4c a1 92 b7 .e.....,. p{L... 0030 4f 25 08 ae 6d a2 40 f8 d6 59 08 10 20 01 53 bf O%..m.@..Y.. .S. 0040 0d e0 00 00 01 24 96 f9 ad 9a 3b d8 c0 5d 5f 9a .....$....;..]_. 0050 07 22 ac 06 62 b7 6f 18 7c cf f6 10 8d 65 dc 31 ."..b.o.|....e.1 0060 b4 f1 bd 64 de 17 cc b1 0f 65 fb 18 09 64 40 1a ...d.....e...d@. 0070 fa de 50 01 43 04 32 2b da 4e 63 a1 63 2e c9 33 ..P.C.2+.Nc.c..3 0080 10 3e 05 59 f2 70 cc 45 52 24 6d 15 e4 a5 3b 1f .>.Y.p.ER$m...;. 0090 86 5f ea f9 60 74 a6 bc 1e d0 67 4c 4e 54 b8 8c ._..`t....gLNT.. 00a0 ea 93 89 73 90 87 d6 9c b3 ce 6c e5 2d 89 40 1e ...s......l.-.@. 00b0 28 d2 3e 94 dd 2c 9f 40 02 3f 3a 2d 59 0d 06 0a (.>..,.@.?:-Y... 00c0 dd 04 5b 4b 5d 76 6c b6 b4 a2 32 8f cc 2b 34 03 ..[K]vl...2..+4. 00d0 b2 b9 a7 11 f2 59 89 77 c6 c3 a7 35 4a 57 aa 73 .....Y.w...5JW.s 00e0 d7 f8 c0 50 1b bb 5e 9b 3b b9 2b 7a 14 24 7b 39 ...P..^.;.+z.${9 00f0 04 02 a7 49 1e 93 72 55 9c 0b 25 26 75 31 6a f6 ...I..rU..%&u1j. 0100 6a 15 db 42 a6 82 61 75 a7 8d 52 b0 dd fb 75 17 j..B..au..R...u. 0110 57 6d b8 9f 40 10 83 d1 8e 4e ed bf c0 4a 97 bc Wm..@....N...J.. 0120 35 98 6c 7b 29 d7 51 f9 7a 5d f9 ef c1 c5 e5 d3 5.l{).Q.z]...... 0130 ae 92 67 95 79 52 93 b4 f4 c0 6c 2d 10 c9 86 1b ..g.yR....l-.... 0140 c8 50 e1 8d 2c b3 03 73 da f6 38 23 5a ed 78 69 .P..,..s..8#Z.xi 0150 35 33 53 Frame 8 (330 bytes on wire, 330 bytes captured) Arrival Time: Jun 16, 2005 15:37:50.128772000 Time delta from previous packet: 0.200927000 seconds Time since reference or first frame: 1.111809000 seconds Frame Number: 8 Packet Length: 330 bytes Capture Length: 330 bytes Ethernet II, Src: 00:0f:b5:4b:45:e0, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:0f:b5:4b:45:e0 (00:0f:b5:4b:45:e0) Type: IP (0x0800) Frame check sequence: 0xb179fa27 (correct) Internet Protocol, Src Addr: 165.227.249.101 (165.227.249.101), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 312 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb1d (correct) Source: 165.227.249.101 (165.227.249.101) Destination: 165.227.249.106 (165.227.249.106) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 292 Checksum: 0x38cb (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x707B4CA192B74F25 Responder cookie: 0x08AE6DA240F8D659 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x53BF0DE0 Length: 284 Encrypted payload (256 bytes) 0000 00 a0 8e 72 1e 40 00 0f b5 4b 45 e0 08 00 45 00 ...r.@...KE...E. 0010 01 38 00 00 40 00 40 11 fb 1d a5 e3 f9 65 a5 e3 .8..@.@......e.. 0020 f9 6a 01 f4 01 f4 01 24 38 cb 70 7b 4c a1 92 b7 .j.....$8.p{L... 0030 4f 25 08 ae 6d a2 40 f8 d6 59 08 10 20 01 53 bf O%..m.@..Y.. .S. 0040 0d e0 00 00 01 1c fa d6 03 66 6c a8 e5 f0 f4 e8 .........fl..... 0050 8c 6b 16 74 65 6c c2 ec 1f 00 b4 9c 9c b1 c6 d2 .k.tel.......... 0060 66 c6 44 3f ff bc b0 f1 fa fa 61 a1 96 41 53 b1 f.D?......a..AS. 0070 1a 24 a4 64 06 8e 1a d1 2e e6 82 76 fd 6d f1 01 .$.d.......v.m.. 0080 2f 0f a6 e9 c8 09 40 3e 20 74 7f 68 1b af 78 8f /.....@> t.h..x. 0090 47 d9 ba 77 b9 47 8e 4a 56 ec 61 cf f9 df d0 d4 G..w.G.JV.a..... 00a0 bc 72 68 55 6b 96 15 0d bf 53 5e 5a be 07 93 2d .rhUk....S^Z...- 00b0 cb 3e a8 94 9c 14 91 5f 1f 63 17 8e 16 22 f8 71 .>....._.c...".q 00c0 16 c0 9b 55 3c 4e d6 95 d3 c6 f9 af e2 90 a9 db ...U9..M1.V. 0050 c1 67 ff 39 4d 00 a6 79 31 fd af de de 24 d2 a9 .g.9M..y1....$.. 0060 72 ce c3 a0 b2 51 f9 de 4d 56 83 37 dc 57 6f bc r....Q..MV.7.Wo. 0070 8d a4 72 8a ba 80 03 fa ce b7 6e 68 99 c0 01 67 ..r.......nh...g 0080 93 05 .. Frame 11 (130 bytes on wire, 130 bytes captured) Arrival Time: Jun 16, 2005 15:37:51.798837000 Time delta from previous packet: 1.001752000 seconds Time since reference or first frame: 2.781874000 seconds Frame Number: 11 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:0f:b5:4b:45:e0, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:0f:b5:4b:45:e0 (00:0f:b5:4b:45:e0) Type: IP (0x0800) Frame check sequence: 0x8121e79e (correct) Internet Protocol, Src Addr: 165.227.249.101 (165.227.249.101), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x006c (108) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 30 Protocol: ESP (0x32) Header checksum: 0x5d59 (correct) Source: 165.227.249.101 (165.227.249.101) Destination: 165.227.249.106 (165.227.249.106) Encapsulating Security Payload SPI: 0x269e0400 Sequence: 1 Data (84 bytes) 0000 00 a0 8e 72 1e 40 00 0f b5 4b 45 e0 08 00 45 00 ...r.@...KE...E. 0010 00 70 00 6c 00 00 1e 32 5d 59 a5 e3 f9 65 a5 e3 .p.l...2]Y...e.. 0020 f9 6a 26 9e 04 00 00 00 00 01 c4 bc f8 59 b4 fa .j&..........Y.. 0030 90 2e ef a9 3c 15 c6 dd 58 08 e5 94 c7 d3 f5 7f ....<...X....... 0040 9d b4 59 77 30 20 b8 5f c6 a3 01 8a a8 59 4f 07 ..Yw0 ._.....YO. 0050 ec 4a aa 23 06 51 6f ac 84 51 5f 0f 37 67 d6 e8 .J.#.Qo..Q_.7g.. 0060 9c 74 99 1b 7b 12 04 c3 7e c9 ea 0e c1 9e 6a 1b .t..{...~.....j. 0070 91 ed b7 b6 bf d0 3e cc 6d 4b af 6a bf fa 81 21 ......>.mK.j...! 0080 e7 9e .. Frame 12 (130 bytes on wire, 130 bytes captured) Arrival Time: Jun 16, 2005 15:37:51.801456000 Time delta from previous packet: 0.002619000 seconds Time since reference or first frame: 2.784493000 seconds Frame Number: 12 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:0f:b5:4b:45:e0 Destination: 00:0f:b5:4b:45:e0 (00:0f:b5:4b:45:e0) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0x389b4b54 (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.101 (165.227.249.101) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0xfe3e (65086) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x3d86 (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.101 (165.227.249.101) Encapsulating Security Payload SPI: 0x8104730d Sequence: 2 Data (84 bytes) 0000 00 0f b5 4b 45 e0 00 a0 8e 72 1e 40 08 00 45 00 ...KE....r.@..E. 0010 00 70 fe 3e 00 00 40 32 3d 86 a5 e3 f9 6a a5 e3 .p.>..@2=....j.. 0020 f9 65 81 04 73 0d 00 00 00 02 75 3d 84 89 81 7a .e..s.....u=...z 0030 c8 19 f3 56 23 7f 0f 4d c3 a8 d9 50 e0 a1 a8 2f ...V#..M...P.../ 0040 58 a5 f5 1f 92 3e 3b a8 a5 f5 76 87 79 33 78 78 X....>;...v.y3xx 0050 b0 a6 89 89 4a 7c 35 42 c9 9b 6a 71 91 33 d5 65 ....J|5B..jq.3.e 0060 27 ad e1 6a 9f 96 ef b7 1b 20 88 be 4d 8e fc 68 '..j..... ..M..h 0070 33 9c df ba 36 eb f9 b5 c2 6c fb d1 9c 9d 38 9b 3...6....l....8. 0080 4b 54 KT Frame 13 (130 bytes on wire, 130 bytes captured) Arrival Time: Jun 16, 2005 15:37:51.802967000 Time delta from previous packet: 0.001511000 seconds Time since reference or first frame: 2.786004000 seconds Frame Number: 13 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:0f:b5:4b:45:e0, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:0f:b5:4b:45:e0 (00:0f:b5:4b:45:e0) Type: IP (0x0800) Frame check sequence: 0x58f2db04 (correct) Internet Protocol, Src Addr: 165.227.249.101 (165.227.249.101), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x006d (109) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 30 Protocol: ESP (0x32) Header checksum: 0x5d58 (correct) Source: 165.227.249.101 (165.227.249.101) Destination: 165.227.249.106 (165.227.249.106) Encapsulating Security Payload SPI: 0x269e0400 Sequence: 2 Data (84 bytes) 0000 00 a0 8e 72 1e 40 00 0f b5 4b 45 e0 08 00 45 00 ...r.@...KE...E. 0010 00 70 00 6d 00 00 1e 32 5d 58 a5 e3 f9 65 a5 e3 .p.m...2]X...e.. 0020 f9 6a 26 9e 04 00 00 00 00 02 c9 d0 ad 58 b1 d0 .j&..........X.. 0030 8c 36 47 f9 4a d2 d2 65 d3 13 42 24 45 b4 aa 77 .6G.J..e..B$E..w 0040 54 14 be 16 8a 7f d0 b5 b0 1c e4 3e 35 fe 6b 1a T..........>5.k. 0050 45 dc 94 d7 fa d0 6d 9f 67 4f 5f 68 82 3a 2f b7 E.....m.gO_h.:/. 0060 c7 4a 12 ea 39 d1 47 90 28 f9 ad fc d7 d0 95 a0 .J..9.G.(....... 0070 d8 69 ff bd 4c 99 bb 79 97 62 fb aa 01 06 58 f2 .i..L..y.b....X. 0080 db 04 .. Frame 14 (130 bytes on wire, 130 bytes captured) Arrival Time: Jun 16, 2005 15:37:52.790694000 Time delta from previous packet: 0.987727000 seconds Time since reference or first frame: 3.773731000 seconds Frame Number: 14 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:0f:b5:4b:45:e0 Destination: 00:0f:b5:4b:45:e0 (00:0f:b5:4b:45:e0) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0x7a3e1530 (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.101 (165.227.249.101) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0xfe3f (65087) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x3d85 (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.101 (165.227.249.101) Encapsulating Security Payload SPI: 0x8104730d Sequence: 3 Data (84 bytes) 0000 00 0f b5 4b 45 e0 00 a0 8e 72 1e 40 08 00 45 00 ...KE....r.@..E. 0010 00 70 fe 3f 00 00 40 32 3d 85 a5 e3 f9 6a a5 e3 .p.?..@2=....j.. 0020 f9 65 81 04 73 0d 00 00 00 03 60 d6 6f 30 fb e9 .e..s.....`.o0.. 0030 1d 1e e1 2e b1 b0 e4 61 c9 98 00 0d 15 08 43 d6 .......a......C. 0040 a4 36 ea fc 09 f8 45 53 4c ac 04 04 9d 76 5c be .6....ESL....v\. 0050 a8 c1 ed 6f 13 b3 ed 51 e5 9e 9f 6c f1 bd ee 0a ...o...Q...l.... 0060 3c 3b ae f3 7f a8 71 85 8d 95 a8 05 d2 9f f2 dc <;....q......... 0070 49 ed 8e d0 02 1c 55 47 90 c7 23 01 cc eb 7a 3e I.....UG..#...z> 0080 15 30 .0 Frame 15 (130 bytes on wire, 130 bytes captured) Arrival Time: Jun 16, 2005 15:37:52.791655000 Time delta from previous packet: 0.000961000 seconds Time since reference or first frame: 3.774692000 seconds Frame Number: 15 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:0f:b5:4b:45:e0, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:0f:b5:4b:45:e0 (00:0f:b5:4b:45:e0) Type: IP (0x0800) Frame check sequence: 0xb0a7f344 (correct) Internet Protocol, Src Addr: 165.227.249.101 (165.227.249.101), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x006e (110) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 30 Protocol: ESP (0x32) Header checksum: 0x5d57 (correct) Source: 165.227.249.101 (165.227.249.101) Destination: 165.227.249.106 (165.227.249.106) Encapsulating Security Payload SPI: 0x269e0400 Sequence: 3 Data (84 bytes) 0000 00 a0 8e 72 1e 40 00 0f b5 4b 45 e0 08 00 45 00 ...r.@...KE...E. 0010 00 70 00 6e 00 00 1e 32 5d 57 a5 e3 f9 65 a5 e3 .p.n...2]W...e.. 0020 f9 6a 26 9e 04 00 00 00 00 03 da 9a 4a d0 93 05 .j&.........J... 0030 31 62 49 49 72 3e ba ac e7 db 1f 10 f7 55 22 45 1bIIr>.......U"E 0040 e4 67 6f 88 74 41 6f 8e 28 c7 91 7c d2 ce 6b b0 .go.tAo.(..|..k. 0050 73 9d f4 c9 31 4b c7 18 a6 92 59 9d 0e 23 6b 5a s...1K....Y..#kZ 0060 4f 81 1e b0 56 f0 98 68 ee 8f 76 bc 8b 35 3d 6c O...V..h..v..5=l 0070 21 93 b9 90 c0 71 17 53 fe 56 c6 da 40 e5 b0 a7 !....q.S.V..@... 0080 f3 44 .D Frame 16 (130 bytes on wire, 130 bytes captured) Arrival Time: Jun 16, 2005 15:37:53.790422000 Time delta from previous packet: 0.998767000 seconds Time since reference or first frame: 4.773459000 seconds Frame Number: 16 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:0f:b5:4b:45:e0 Destination: 00:0f:b5:4b:45:e0 (00:0f:b5:4b:45:e0) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0x879b35c2 (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.101 (165.227.249.101) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0xfe40 (65088) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x3d84 (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.101 (165.227.249.101) Encapsulating Security Payload SPI: 0x8104730d Sequence: 4 Data (84 bytes) 0000 00 0f b5 4b 45 e0 00 a0 8e 72 1e 40 08 00 45 00 ...KE....r.@..E. 0010 00 70 fe 40 00 00 40 32 3d 84 a5 e3 f9 6a a5 e3 .p.@..@2=....j.. 0020 f9 65 81 04 73 0d 00 00 00 04 76 58 5b 86 1d f7 .e..s.....vX[... 0030 e0 22 65 a5 d1 3b ad 31 4b 54 ef 0f 58 2e d1 36 ."e..;.1KT..X..6 0040 89 78 8e 10 d9 93 bb bb 92 72 93 84 8b 74 09 12 .x.......r...t.. 0050 25 fe 31 9e 88 df bb a2 31 47 d1 b5 81 58 b6 44 %.1.....1G...X.D 0060 ff 63 05 24 01 4a b0 6d a3 e1 af 82 ff 9e e5 2d .c.$.J.m.......- 0070 f2 ed 01 b3 2c 98 d4 fb ff 27 b3 d6 f1 65 87 9b ....,....'...e.. 0080 35 c2 5. Frame 17 (130 bytes on wire, 130 bytes captured) Arrival Time: Jun 16, 2005 15:37:53.791402000 Time delta from previous packet: 0.000980000 seconds Time since reference or first frame: 4.774439000 seconds Frame Number: 17 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:0f:b5:4b:45:e0, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:0f:b5:4b:45:e0 (00:0f:b5:4b:45:e0) Type: IP (0x0800) Frame check sequence: 0xd78ea90a (correct) Internet Protocol, Src Addr: 165.227.249.101 (165.227.249.101), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x006f (111) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 30 Protocol: ESP (0x32) Header checksum: 0x5d56 (correct) Source: 165.227.249.101 (165.227.249.101) Destination: 165.227.249.106 (165.227.249.106) Encapsulating Security Payload SPI: 0x269e0400 Sequence: 4 Data (84 bytes) 0000 00 a0 8e 72 1e 40 00 0f b5 4b 45 e0 08 00 45 00 ...r.@...KE...E. 0010 00 70 00 6f 00 00 1e 32 5d 56 a5 e3 f9 65 a5 e3 .p.o...2]V...e.. 0020 f9 6a 26 9e 04 00 00 00 00 04 fc bc cd 0d bd 98 .j&............. 0030 d8 1a e4 a9 6d d4 20 80 a5 f1 73 7f 5a 92 7d 81 ....m. ...s.Z.}. 0040 a2 7f b6 07 9f 60 93 a3 5d e9 43 13 fc 34 ec 51 .....`..].C..4.Q 0050 be 94 4e 48 95 e1 fc 94 37 1a fa ec a2 4a 13 36 ..NH....7....J.6 0060 c6 91 fb 51 78 8d a0 95 54 00 a5 20 50 b9 80 ba ...Qx...T.. P... 0070 dc a7 a1 f5 77 31 63 c3 73 14 de ab 96 84 d7 8e ....w1c.s....... 0080 a9 0a ..