Frame 1 (126 bytes on wire, 126 bytes captured) Arrival Time: May 27, 2005 14:24:49.842210000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 126 bytes Capture Length: 126 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:e0:4c:69:0a:78 Destination: 00:e0:4c:69:0a:78 (00:e0:4c:69:0a:78) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0x5750a185 (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.102 (165.227.249.102) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 108 Identification: 0x9146 (37190) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xaaa2 (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.102 (165.227.249.102) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 88 Checksum: 0x181c (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xD639BBA9263875F5 Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 80 Security Association payload Next payload: NONE (0) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 40 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 32 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) 0000 00 e0 4c 69 0a 78 00 a0 8e 72 1e 40 08 00 45 00 ..Li.x...r.@..E. 0010 00 6c 91 46 00 00 40 11 aa a2 a5 e3 f9 6a a5 e3 .l.F..@......j.. 0020 f9 66 01 f4 01 f4 00 58 18 1c d6 39 bb a9 26 38 .f.....X...9..&8 0030 75 f5 00 00 00 00 00 00 00 00 01 10 02 00 00 00 u............... 0040 00 00 00 00 00 50 00 00 00 34 00 00 00 01 00 00 .....P...4...... 0050 00 01 00 00 00 28 01 01 00 01 00 00 00 20 01 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 04 00 02 80 03 ................ 0070 00 01 80 0b 00 01 80 0c 70 80 57 50 a1 85 ........p.WP.. Frame 2 (166 bytes on wire, 166 bytes captured) Arrival Time: May 27, 2005 14:24:49.844166000 Time delta from previous packet: 0.001956000 seconds Time since reference or first frame: 0.001956000 seconds Frame Number: 2 Packet Length: 166 bytes Capture Length: 166 bytes Ethernet II, Src: 00:e0:4c:69:0a:78, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:e0:4c:69:0a:78 (00:e0:4c:69:0a:78) Type: IP (0x0800) Frame check sequence: 0x6effe7e9 (correct) Internet Protocol, Src Addr: 165.227.249.102 (165.227.249.102), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 148 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfbc0 (correct) Source: 165.227.249.102 (165.227.249.102) Destination: 165.227.249.106 (165.227.249.106) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 128 Checksum: 0xd179 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xD639BBA9263875F5 Responder cookie: 0x8AA4B5744540BA1A Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 120 Security Association payload Next payload: Vendor ID (13) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 40 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 32 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-dpd-00.txt Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: unknown vendor ID: 0x648982785BEDBDD66A6DD356F0E160FD 0000 00 a0 8e 72 1e 40 00 e0 4c 69 0a 78 08 00 45 00 ...r.@..Li.x..E. 0010 00 94 00 00 40 00 40 11 fb c0 a5 e3 f9 66 a5 e3 ....@.@......f.. 0020 f9 6a 01 f4 01 f4 00 80 d1 79 d6 39 bb a9 26 38 .j.......y.9..&8 0030 75 f5 8a a4 b5 74 45 40 ba 1a 01 10 02 00 00 00 u....tE@........ 0040 00 00 00 00 00 78 0d 00 00 34 00 00 00 01 00 00 .....x...4...... 0050 00 01 00 00 00 28 01 01 00 01 00 00 00 20 01 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 04 00 02 80 03 ................ 0070 00 01 80 0b 00 01 80 0c 70 80 0d 00 00 14 af ca ........p....... 0080 d7 13 68 a1 f1 c9 6b 86 96 fc 77 57 01 00 00 00 ..h...k...wW.... 0090 00 14 64 89 82 78 5b ed bd d6 6a 6d d3 56 f0 e1 ..d..x[...jm.V.. 00a0 60 fd 6e ff e7 e9 `.n... Frame 3 (262 bytes on wire, 262 bytes captured) Arrival Time: May 27, 2005 14:24:49.968557000 Time delta from previous packet: 0.124391000 seconds Time since reference or first frame: 0.126347000 seconds Frame Number: 3 Packet Length: 262 bytes Capture Length: 262 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:e0:4c:69:0a:78 Destination: 00:e0:4c:69:0a:78 (00:e0:4c:69:0a:78) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0x29415b22 (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.102 (165.227.249.102) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 244 Identification: 0x9147 (37191) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xaa19 (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.102 (165.227.249.102) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 224 Checksum: 0x5e36 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xD639BBA9263875F5 Responder cookie: 0x8AA4B5744540BA1A Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 216 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: Vendor ID (13) Length: 24 Nonce Data Vendor ID payload Next payload: NONE (0) Length: 32 Vendor ID: unknown vendor ID: 0x03000014D0044FBAB7916C57D0C51D08... 0000 00 e0 4c 69 0a 78 00 a0 8e 72 1e 40 08 00 45 00 ..Li.x...r.@..E. 0010 00 f4 91 47 00 00 40 11 aa 19 a5 e3 f9 6a a5 e3 ...G..@......j.. 0020 f9 66 01 f4 01 f4 00 e0 5e 36 d6 39 bb a9 26 38 .f......^6.9..&8 0030 75 f5 8a a4 b5 74 45 40 ba 1a 04 10 02 00 00 00 u....tE@........ 0040 00 00 00 00 00 d8 0a 00 00 84 fd 67 c5 3f 2f 7b ...........g.?/{ 0050 d9 19 cc 5b ee 7c ae 9e fb e8 b5 67 0b 3a 8d 7c ...[.|.....g.:.| 0060 5c 33 0d 5b 2e d6 35 55 7d 38 c2 73 05 c4 97 be \3.[..5U}8.s.... 0070 ff 1e 8a 93 ef a7 54 7c fc 92 ab 06 eb 95 07 8e ......T|........ 0080 f7 b6 e8 bd aa 37 3b f0 f6 03 3f ad 73 6d ef 2f .....7;...?.sm./ 0090 4f 30 1f ea 49 b4 3f 7d 38 43 f7 6d 41 c5 89 88 O0..I.?}8C.mA... 00a0 06 43 47 f5 15 bb 0a a9 61 3b 40 65 9a 84 6e f5 .CG.....a;@e..n. 00b0 30 e8 33 e7 9f b9 d4 59 68 5d 93 48 e4 61 6c f3 0.3....Yh].H.al. 00c0 6f ac 04 87 0d 0c c8 fd 62 2f 0d 00 00 18 35 5f o.......b/....5_ 00d0 02 0f 35 5e 13 83 c5 23 3c 10 c3 eb 02 5d 49 0f ..5^...#<....]I. 00e0 55 6f 00 00 00 20 03 00 00 14 d0 04 4f ba b7 91 Uo... ......O... 00f0 6c 57 d0 c5 1d 08 00 42 e5 b5 00 00 00 08 00 06 lW.....B........ 0100 00 02 29 41 5b 22 ..)A[" Frame 4 (218 bytes on wire, 218 bytes captured) Arrival Time: May 27, 2005 14:24:49.977205000 Time delta from previous packet: 0.008648000 seconds Time since reference or first frame: 0.134995000 seconds Frame Number: 4 Packet Length: 218 bytes Capture Length: 218 bytes Ethernet II, Src: 00:e0:4c:69:0a:78, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:e0:4c:69:0a:78 (00:e0:4c:69:0a:78) Type: IP (0x0800) Frame check sequence: 0x68415828 (correct) Internet Protocol, Src Addr: 165.227.249.102 (165.227.249.102), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 200 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb8c (correct) Source: 165.227.249.102 (165.227.249.102) Destination: 165.227.249.106 (165.227.249.106) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 180 Checksum: 0x6faf (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xD639BBA9263875F5 Responder cookie: 0x8AA4B5744540BA1A Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 172 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 12 Nonce Data 0000 00 a0 8e 72 1e 40 00 e0 4c 69 0a 78 08 00 45 00 ...r.@..Li.x..E. 0010 00 c8 00 00 40 00 40 11 fb 8c a5 e3 f9 66 a5 e3 ....@.@......f.. 0020 f9 6a 01 f4 01 f4 00 b4 6f af d6 39 bb a9 26 38 .j......o..9..&8 0030 75 f5 8a a4 b5 74 45 40 ba 1a 04 10 02 00 00 00 u....tE@........ 0040 00 00 00 00 00 ac 0a 00 00 84 e3 6e 43 f0 db 99 ...........nC... 0050 b1 fc 48 59 41 4c 24 bb 38 f5 86 69 71 7c 11 68 ..HYAL$.8..iq|.h 0060 62 64 7d fa 59 17 57 69 d3 9b b4 f0 df 93 33 42 bd}.Y.Wi......3B 0070 37 44 ee 14 cb 8d 85 d8 c6 f7 b2 0f 90 79 ea fb 7D...........y.. 0080 22 dd 8b 54 ee 5d fa b5 7c be 5d 05 b1 9b a2 d9 "..T.]..|.]..... 0090 eb f4 6b 04 74 76 2c 42 c7 77 53 0a b4 7b 50 54 ..k.tv,B.wS..{PT 00a0 31 9d 5d 6b ef 46 73 db 00 98 d4 17 28 6e 13 2a 1.]k.Fs.....(n.* 00b0 d7 78 ac 9c 95 c5 61 45 fe 0c 20 39 c0 55 c3 d3 .x....aE.. 9.U.. 00c0 23 10 7e 42 d1 eb af f3 b2 21 00 00 00 0c ea 1d #.~B.....!...... 00d0 bf 1e 08 38 0d 1e 68 41 58 28 ...8..hAX( Frame 5 (138 bytes on wire, 138 bytes captured) Arrival Time: May 27, 2005 14:24:50.129598000 Time delta from previous packet: 0.152393000 seconds Time since reference or first frame: 0.287388000 seconds Frame Number: 5 Packet Length: 138 bytes Capture Length: 138 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:e0:4c:69:0a:78 Destination: 00:e0:4c:69:0a:78 (00:e0:4c:69:0a:78) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0x086390b9 (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.102 (165.227.249.102) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x9148 (37192) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xaa94 (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.102 (165.227.249.102) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 100 Checksum: 0x5d6f (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xD639BBA9263875F5 Responder cookie: 0x8AA4B5744540BA1A Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 92 Encrypted payload (64 bytes) 0000 00 e0 4c 69 0a 78 00 a0 8e 72 1e 40 08 00 45 00 ..Li.x...r.@..E. 0010 00 78 91 48 00 00 40 11 aa 94 a5 e3 f9 6a a5 e3 .x.H..@......j.. 0020 f9 66 01 f4 01 f4 00 64 5d 6f d6 39 bb a9 26 38 .f.....d]o.9..&8 0030 75 f5 8a a4 b5 74 45 40 ba 1a 05 10 02 01 00 00 u....tE@........ 0040 00 00 00 00 00 5c f5 34 9b 5c ef 40 82 67 f5 81 .....\.4.\.@.g.. 0050 c3 5e 87 8c d4 21 f3 ce ef d4 4e a5 f8 dd 5d 2b .^...!....N...]+ 0060 60 43 3c d3 37 65 b6 71 32 b0 15 94 07 0a 5c b1 `C<.7e.q2.....\. 0070 72 24 cc 1a 89 cf ae 36 de fd e4 4c 17 8e 79 b2 r$.....6...L..y. 0080 d3 ab bd cb b7 f2 08 63 90 b9 .......c.. Frame 6 (138 bytes on wire, 138 bytes captured) Arrival Time: May 27, 2005 14:24:50.137294000 Time delta from previous packet: 0.007696000 seconds Time since reference or first frame: 0.295084000 seconds Frame Number: 6 Packet Length: 138 bytes Capture Length: 138 bytes Ethernet II, Src: 00:e0:4c:69:0a:78, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:e0:4c:69:0a:78 (00:e0:4c:69:0a:78) Type: IP (0x0800) Frame check sequence: 0x834b8805 (correct) Internet Protocol, Src Addr: 165.227.249.102 (165.227.249.102), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfbdc (correct) Source: 165.227.249.102 (165.227.249.102) Destination: 165.227.249.106 (165.227.249.106) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 100 Checksum: 0xf64d (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xD639BBA9263875F5 Responder cookie: 0x8AA4B5744540BA1A Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 92 Encrypted payload (64 bytes) 0000 00 a0 8e 72 1e 40 00 e0 4c 69 0a 78 08 00 45 00 ...r.@..Li.x..E. 0010 00 78 00 00 40 00 40 11 fb dc a5 e3 f9 66 a5 e3 .x..@.@......f.. 0020 f9 6a 01 f4 01 f4 00 64 f6 4d d6 39 bb a9 26 38 .j.....d.M.9..&8 0030 75 f5 8a a4 b5 74 45 40 ba 1a 05 10 02 01 00 00 u....tE@........ 0040 00 00 00 00 00 5c 82 9a 03 06 c5 de 3f 33 46 5e .....\......?3F^ 0050 1d 8b bc 3c af a7 83 f8 f5 70 85 78 31 68 8f a2 ...<.....p.x1h.. 0060 b2 a2 25 7c 6b 93 d8 9f ee cb 55 da 8e 88 b8 7b ..%|k.....U....{ 0070 d1 03 c8 ba a6 85 ef 82 83 dd 75 2f 3c f5 cb 86 ..........u/<... 0080 03 c2 70 5b e9 8d 83 4b 88 05 ..p[...K.. Frame 7 (338 bytes on wire, 338 bytes captured) Arrival Time: May 27, 2005 14:24:50.268088000 Time delta from previous packet: 0.130794000 seconds Time since reference or first frame: 0.425878000 seconds Frame Number: 7 Packet Length: 338 bytes Capture Length: 338 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:e0:4c:69:0a:78 Destination: 00:e0:4c:69:0a:78 (00:e0:4c:69:0a:78) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0x3042731e (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.102 (165.227.249.102) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 320 Identification: 0x9149 (37193) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xa9cb (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.102 (165.227.249.102) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 300 Checksum: 0x7f12 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xD639BBA9263875F5 Responder cookie: 0x8AA4B5744540BA1A Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x0FA18DF0 Length: 292 Encrypted payload (264 bytes) 0000 00 e0 4c 69 0a 78 00 a0 8e 72 1e 40 08 00 45 00 ..Li.x...r.@..E. 0010 01 40 91 49 00 00 40 11 a9 cb a5 e3 f9 6a a5 e3 .@.I..@......j.. 0020 f9 66 01 f4 01 f4 01 2c 7f 12 d6 39 bb a9 26 38 .f.....,...9..&8 0030 75 f5 8a a4 b5 74 45 40 ba 1a 08 10 20 01 0f a1 u....tE@.... ... 0040 8d f0 00 00 01 24 e9 90 b8 eb 95 c4 e2 d9 35 d6 .....$........5. 0050 46 bd 7a f3 ff 80 6a d8 97 7b 13 88 c4 e6 d6 07 F.z...j..{...... 0060 78 06 95 74 df 81 5d dd 9a f5 db 7d 5b 97 04 59 x..t..]....}[..Y 0070 64 74 40 cf dd 9a ff 8e fd f1 e6 55 3b da ee 66 dt@........U;..f 0080 65 38 47 19 9a f4 d4 42 20 a8 ae 1b f3 65 e9 ee e8G....B ....e.. 0090 52 fd 2d bd f1 62 56 7b b1 e8 c7 3a 81 ce b6 a4 R.-..bV{...:.... 00a0 7e 58 9e d7 51 06 e1 7f c8 af f7 6b a3 7f 7c 26 ~X..Q......k..|& 00b0 a5 e3 d3 e9 74 52 bf b5 d0 9a 7b 2a ed 8c cf 2a ....tR....{*...* 00c0 1e 02 aa d7 86 fd b1 e6 64 82 97 19 ed 17 bb 21 ........d......! 00d0 01 a1 53 1b b0 3c 56 fd 4c 95 32 e7 a2 41 87 45 ..S........j....C. 0120 7b ce 5a e0 14 34 f7 13 01 7d 66 8a ed 69 52 79 {.Z..4...}f..iRy 0130 13 22 67 51 fc 79 67 8a 17 9c 62 cc 95 47 04 8c ."gQ.yg...b..G.. 0140 09 30 a8 fb 2c ab d0 d7 da 71 72 31 f1 6b 30 42 .0..,....qr1.k0B 0150 73 1e s. Frame 8 (330 bytes on wire, 330 bytes captured) Arrival Time: May 27, 2005 14:24:50.279252000 Time delta from previous packet: 0.011164000 seconds Time since reference or first frame: 0.437042000 seconds Frame Number: 8 Packet Length: 330 bytes Capture Length: 330 bytes Ethernet II, Src: 00:e0:4c:69:0a:78, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:e0:4c:69:0a:78 (00:e0:4c:69:0a:78) Type: IP (0x0800) Frame check sequence: 0xd8d826df (correct) Internet Protocol, Src Addr: 165.227.249.102 (165.227.249.102), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 312 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb1c (correct) Source: 165.227.249.102 (165.227.249.102) Destination: 165.227.249.106 (165.227.249.106) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 292 Checksum: 0xf530 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xD639BBA9263875F5 Responder cookie: 0x8AA4B5744540BA1A Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x0FA18DF0 Length: 284 Encrypted payload (256 bytes) 0000 00 a0 8e 72 1e 40 00 e0 4c 69 0a 78 08 00 45 00 ...r.@..Li.x..E. 0010 01 38 00 00 40 00 40 11 fb 1c a5 e3 f9 66 a5 e3 .8..@.@......f.. 0020 f9 6a 01 f4 01 f4 01 24 f5 30 d6 39 bb a9 26 38 .j.....$.0.9..&8 0030 75 f5 8a a4 b5 74 45 40 ba 1a 08 10 20 01 0f a1 u....tE@.... ... 0040 8d f0 00 00 01 1c 3b fc 7d a4 15 3b 4d 82 e1 c0 ......;.}..;M... 0050 a7 db ae d1 98 bf 2e 75 85 07 99 5f af 40 c8 bd .......u..._.@.. 0060 c7 b6 9b 16 3e d6 7d d8 b1 e9 d8 ca 58 55 63 aa ....>.}.....XUc. 0070 f4 fc 14 b6 04 2a cd 04 6e 45 a7 41 e7 2c 4d c7 .....*..nE.A.,M. 0080 70 da 1e a6 c6 d0 c1 7b 76 33 97 92 e4 b0 6b 7d p......{v3....k} 0090 63 2c ab 53 a1 82 94 85 f9 c1 46 e1 9b b1 0c 88 c,.S......F..... 00a0 ba 14 dc 7d ea 6c 2d ee f5 14 2f eb 91 f3 ca 19 ...}.l-.../..... 00b0 03 10 4e 20 a9 4f ac 0c 6a d8 f0 16 05 24 e0 be ..N .O..j....$.. 00c0 bf cb ec a6 4b 86 f5 a7 bd 5b e9 ba f0 39 18 9c ....K....[...9.. 00d0 3c 2d 72 d1 64 de 21 77 38 c7 3e 9e d6 5c 7a 0b <-r.d.!w8.>..\z. 00e0 00 d6 85 5b 75 54 1a 46 88 14 ac 74 88 1f e5 e1 ...[uT.F...t.... 00f0 91 93 c3 12 fe f9 3b a4 51 8b 91 44 0b 62 08 c5 ......;.Q..D.b.. 0100 04 5e ef ce 99 3b bc 07 27 c7 de aa b8 ec fc aa .^...;..'....... 0110 6f ee f3 fb 2e df fe e9 28 ab d1 0d 63 61 27 54 o.......(...ca'T 0120 5e d1 df c7 04 02 c4 0c 90 46 02 7f 40 dd 35 c0 ^........F..@.5. 0130 9b c7 8c 9e 65 ae 3a 6a 29 2a 07 76 7c 30 5e 9d ....e.:j)*.v|0^. 0140 39 ae 5b da 2a dd d8 d8 26 df 9.[.*...&. Frame 9 (98 bytes on wire, 98 bytes captured) Arrival Time: May 27, 2005 14:24:50.439026000 Time delta from previous packet: 0.159774000 seconds Time since reference or first frame: 0.596816000 seconds Frame Number: 9 Packet Length: 98 bytes Capture Length: 98 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:e0:4c:69:0a:78 Destination: 00:e0:4c:69:0a:78 (00:e0:4c:69:0a:78) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0x393ada5b (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.102 (165.227.249.102) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 80 Identification: 0x914a (37194) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xaaba (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.102 (165.227.249.102) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 60 Checksum: 0xcd34 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xD639BBA9263875F5 Responder cookie: 0x8AA4B5744540BA1A Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x0FA18DF0 Length: 52 Encrypted payload (24 bytes) 0000 00 e0 4c 69 0a 78 00 a0 8e 72 1e 40 08 00 45 00 ..Li.x...r.@..E. 0010 00 50 91 4a 00 00 40 11 aa ba a5 e3 f9 6a a5 e3 .P.J..@......j.. 0020 f9 66 01 f4 01 f4 00 3c cd 34 d6 39 bb a9 26 38 .f.....<.4.9..&8 0030 75 f5 8a a4 b5 74 45 40 ba 1a 08 10 20 01 0f a1 u....tE@.... ... 0040 8d f0 00 00 00 34 20 b4 13 6f 3e 4b 72 34 03 e6 .....4 ..o>Kr4.. 0050 fa 58 15 51 20 3c 02 80 2c bb d0 0a a4 af 39 3a .X.Q <..,.....9: 0060 da 5b .[ Frame 10 (130 bytes on wire, 130 bytes captured) Arrival Time: May 27, 2005 14:24:50.941034000 Time delta from previous packet: 0.502008000 seconds Time since reference or first frame: 1.098824000 seconds Frame Number: 10 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:e0:4c:69:0a:78 Destination: 00:e0:4c:69:0a:78 (00:e0:4c:69:0a:78) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0x0956ca6a (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.102 (165.227.249.102) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x914b (37195) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0xaa78 (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.102 (165.227.249.102) Encapsulating Security Payload SPI: 0xa530ff32 Sequence: 1 Data (84 bytes) 0000 00 e0 4c 69 0a 78 00 a0 8e 72 1e 40 08 00 45 00 ..Li.x...r.@..E. 0010 00 70 91 4b 00 00 40 32 aa 78 a5 e3 f9 6a a5 e3 .p.K..@2.x...j.. 0020 f9 66 a5 30 ff 32 00 00 00 01 53 24 4e 52 22 14 .f.0.2....S$NR". 0030 92 74 d9 6b 1a 8c 7e 0b cf 64 8e 26 59 f2 b1 d0 .t.k..~..d.&Y... 0040 2f 8c f0 1b 3d d2 dc e8 2b e2 94 48 6f b7 1d 7e /...=...+..Ho..~ 0050 59 c9 2c 53 9f 3c 06 e8 bf 6e cc 6f ea 6d f0 2c Y.,S.<...n.o.m., 0060 f1 56 85 25 9c 42 ec 63 32 cc c6 1b 11 6c 71 d1 .V.%.B.c2....lq. 0070 db 7d c8 0b 2f 18 6d dd 4a 97 48 7f f1 6c 09 56 .}../.m.J.H..l.V 0080 ca 6a .j Frame 11 (130 bytes on wire, 130 bytes captured) Arrival Time: May 27, 2005 14:24:50.942355000 Time delta from previous packet: 0.001321000 seconds Time since reference or first frame: 1.100145000 seconds Frame Number: 11 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:e0:4c:69:0a:78, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:e0:4c:69:0a:78 (00:e0:4c:69:0a:78) Type: IP (0x0800) Frame check sequence: 0xb85d308d (correct) Internet Protocol, Src Addr: 165.227.249.102 (165.227.249.102), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0003 (3) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 30 Protocol: ESP (0x32) Header checksum: 0x5dc1 (correct) Source: 165.227.249.102 (165.227.249.102) Destination: 165.227.249.106 (165.227.249.106) Encapsulating Security Payload SPI: 0x45a82000 Sequence: 1 Data (84 bytes) 0000 00 a0 8e 72 1e 40 00 e0 4c 69 0a 78 08 00 45 00 ...r.@..Li.x..E. 0010 00 70 00 03 00 00 1e 32 5d c1 a5 e3 f9 66 a5 e3 .p.....2]....f.. 0020 f9 6a 45 a8 20 00 00 00 00 01 e9 dc f2 1c 92 3d .jE. ..........= 0030 82 e2 62 34 28 22 ac d0 12 0d 99 9f 71 28 51 52 ..b4("......q(QR 0040 d7 86 9d 84 cd 4e e9 f9 47 38 b7 60 2a ca 7b 8d .....N..G8.`*.{. 0050 98 a1 04 86 40 83 33 46 df 5a 5f 2d f5 94 67 57 ....@.3F.Z_-..gW 0060 8e f5 36 32 77 23 a2 fb 56 1c e6 f6 48 a6 5d c3 ..62w#..V...H.]. 0070 ad d5 05 c4 64 0f 59 75 81 5d b3 42 1f 7c b8 5d ....d.Yu.].B.|.] 0080 30 8d 0. Frame 12 (130 bytes on wire, 130 bytes captured) Arrival Time: May 27, 2005 14:24:50.944904000 Time delta from previous packet: 0.002549000 seconds Time since reference or first frame: 1.102694000 seconds Frame Number: 12 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:e0:4c:69:0a:78 Destination: 00:e0:4c:69:0a:78 (00:e0:4c:69:0a:78) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0x750742c5 (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.102 (165.227.249.102) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x914c (37196) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0xaa77 (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.102 (165.227.249.102) Encapsulating Security Payload SPI: 0xa530ff32 Sequence: 2 Data (84 bytes) 0000 00 e0 4c 69 0a 78 00 a0 8e 72 1e 40 08 00 45 00 ..Li.x...r.@..E. 0010 00 70 91 4c 00 00 40 32 aa 77 a5 e3 f9 6a a5 e3 .p.L..@2.w...j.. 0020 f9 66 a5 30 ff 32 00 00 00 02 22 67 ff f8 6d 04 .f.0.2...."g..m. 0030 d6 59 bc e6 d9 9a 0f b2 fb f4 e2 ac 13 a7 67 bd .Y............g. 0040 8d 6e 15 1f 36 34 b1 d1 77 b0 34 a4 9f 0f e1 62 .n..64..w.4....b 0050 31 f9 8f 38 05 20 a1 f5 03 5c f9 62 7f 1b 37 24 1..8. ...\.b..7$ 0060 93 7c c1 20 b7 a8 3d 20 7b 72 40 7e 1d a8 86 fc .|. ..= {r@~.... 0070 13 b1 8b 73 64 d8 54 b5 d3 37 ee e9 62 7c 75 07 ...sd.T..7..b|u. 0080 42 c5 B. Frame 13 (130 bytes on wire, 130 bytes captured) Arrival Time: May 27, 2005 14:24:50.945519000 Time delta from previous packet: 0.000615000 seconds Time since reference or first frame: 1.103309000 seconds Frame Number: 13 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:e0:4c:69:0a:78, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:e0:4c:69:0a:78 (00:e0:4c:69:0a:78) Type: IP (0x0800) Frame check sequence: 0xfd7d8449 (correct) Internet Protocol, Src Addr: 165.227.249.102 (165.227.249.102), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0004 (4) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 30 Protocol: ESP (0x32) Header checksum: 0x5dc0 (correct) Source: 165.227.249.102 (165.227.249.102) Destination: 165.227.249.106 (165.227.249.106) Encapsulating Security Payload SPI: 0x45a82000 Sequence: 2 Data (84 bytes) 0000 00 a0 8e 72 1e 40 00 e0 4c 69 0a 78 08 00 45 00 ...r.@..Li.x..E. 0010 00 70 00 04 00 00 1e 32 5d c0 a5 e3 f9 66 a5 e3 .p.....2]....f.. 0020 f9 6a 45 a8 20 00 00 00 00 02 ed 02 b2 6e 03 12 .jE. ........n.. 0030 4c c9 5e 3f dc 25 1d cd 8d e2 1e ac 0e 05 b1 40 L.^?.%.........@ 0040 06 e7 9a b8 07 cd 20 f2 75 c0 08 bc c9 36 7c 63 ...... .u....6|c 0050 81 2a a9 df b7 90 63 3d 49 0a c0 2f f3 44 d1 65 .*....c=I../.D.e 0060 db e1 9b 01 75 ec b2 3e 99 66 18 b0 26 56 82 6d ....u..>.f..&V.m 0070 a2 ef bd 97 8d 16 18 1a 21 9f bb 79 a9 69 fd 7d ........!..y.i.} 0080 84 49 .I Frame 14 (130 bytes on wire, 130 bytes captured) Arrival Time: May 27, 2005 14:24:51.933873000 Time delta from previous packet: 0.988354000 seconds Time since reference or first frame: 2.091663000 seconds Frame Number: 14 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:e0:4c:69:0a:78 Destination: 00:e0:4c:69:0a:78 (00:e0:4c:69:0a:78) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0x2de842a8 (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.102 (165.227.249.102) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x914d (37197) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0xaa76 (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.102 (165.227.249.102) Encapsulating Security Payload SPI: 0xa530ff32 Sequence: 3 Data (84 bytes) 0000 00 e0 4c 69 0a 78 00 a0 8e 72 1e 40 08 00 45 00 ..Li.x...r.@..E. 0010 00 70 91 4d 00 00 40 32 aa 76 a5 e3 f9 6a a5 e3 .p.M..@2.v...j.. 0020 f9 66 a5 30 ff 32 00 00 00 03 2b 63 20 ca 06 c4 .f.0.2....+c ... 0030 fd 78 6c 38 f5 e2 11 7b 42 a5 e5 4f d9 1e cc 1b .xl8...{B..O.... 0040 3b 40 94 dd d0 06 6d be 8b 6f 96 72 5c e9 1b 57 ;@....m..o.r\..W 0050 47 5b 62 d0 b5 c2 4f ce 9d 28 30 1f 49 14 f1 7b G[b...O..(0.I..{ 0060 cb e2 0f b2 c2 bf 32 28 b9 08 89 d2 ed 70 d1 e7 ......2(.....p.. 0070 04 af 69 bc f7 c2 93 dd 7a 34 cf 70 68 b3 2d e8 ..i.....z4.ph.-. 0080 42 a8 B. Frame 15 (130 bytes on wire, 130 bytes captured) Arrival Time: May 27, 2005 14:24:51.934759000 Time delta from previous packet: 0.000886000 seconds Time since reference or first frame: 2.092549000 seconds Frame Number: 15 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:e0:4c:69:0a:78, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:e0:4c:69:0a:78 (00:e0:4c:69:0a:78) Type: IP (0x0800) Frame check sequence: 0xb4202496 (correct) Internet Protocol, Src Addr: 165.227.249.102 (165.227.249.102), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0005 (5) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 30 Protocol: ESP (0x32) Header checksum: 0x5dbf (correct) Source: 165.227.249.102 (165.227.249.102) Destination: 165.227.249.106 (165.227.249.106) Encapsulating Security Payload SPI: 0x45a82000 Sequence: 3 Data (84 bytes) 0000 00 a0 8e 72 1e 40 00 e0 4c 69 0a 78 08 00 45 00 ...r.@..Li.x..E. 0010 00 70 00 05 00 00 1e 32 5d bf a5 e3 f9 66 a5 e3 .p.....2]....f.. 0020 f9 6a 45 a8 20 00 00 00 00 03 1f ce 49 1d 68 34 .jE. .......I.h4 0030 af ce f7 86 2d a9 04 49 db 31 68 cc 33 d5 07 33 ....-..I.1h.3..3 0040 24 d5 4f 4a c0 16 81 99 d7 1d bf ae 69 ad c7 71 $.OJ........i..q 0050 c6 29 6f 51 57 38 b7 85 13 a4 19 25 5d 08 5d da .)oQW8.....%].]. 0060 24 46 1f 47 2b 50 d7 3b 49 c2 64 93 61 5d 16 c6 $F.G+P.;I.d.a].. 0070 b6 27 96 20 85 90 c3 5c a7 9d dc 52 11 ae b4 20 .'. ...\...R... 0080 24 96 $. Frame 16 (130 bytes on wire, 130 bytes captured) Arrival Time: May 27, 2005 14:24:52.933855000 Time delta from previous packet: 0.999096000 seconds Time since reference or first frame: 3.091645000 seconds Frame Number: 16 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:e0:4c:69:0a:78 Destination: 00:e0:4c:69:0a:78 (00:e0:4c:69:0a:78) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0x5ef1ea73 (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.102 (165.227.249.102) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x914e (37198) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0xaa75 (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.102 (165.227.249.102) Encapsulating Security Payload SPI: 0xa530ff32 Sequence: 4 Data (84 bytes) 0000 00 e0 4c 69 0a 78 00 a0 8e 72 1e 40 08 00 45 00 ..Li.x...r.@..E. 0010 00 70 91 4e 00 00 40 32 aa 75 a5 e3 f9 6a a5 e3 .p.N..@2.u...j.. 0020 f9 66 a5 30 ff 32 00 00 00 04 56 a7 df 2f 1b b3 .f.0.2....V../.. 0030 2d 27 b3 e7 9b 9a 4a 35 f0 c5 69 32 ae 49 f0 ab -'....J5..i2.I.. 0040 92 24 ba f0 8d 45 4e f9 18 88 df 3a 1f 15 59 c6 .$...EN....:..Y. 0050 e9 ab 86 30 f3 84 7e ef 43 91 dd f5 1e 2b 67 ec ...0..~.C....+g. 0060 1d 91 6f 48 76 18 4a 40 d7 98 d1 e4 77 85 47 75 ..oHv.J@....w.Gu 0070 46 73 d1 4b 3d 8e 80 96 f6 a4 8f 51 a2 13 5e f1 Fs.K=......Q..^. 0080 ea 73 .s Frame 17 (130 bytes on wire, 130 bytes captured) Arrival Time: May 27, 2005 14:24:52.934723000 Time delta from previous packet: 0.000868000 seconds Time since reference or first frame: 3.092513000 seconds Frame Number: 17 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:e0:4c:69:0a:78, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:e0:4c:69:0a:78 (00:e0:4c:69:0a:78) Type: IP (0x0800) Frame check sequence: 0xe4254a75 (correct) Internet Protocol, Src Addr: 165.227.249.102 (165.227.249.102), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0006 (6) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 30 Protocol: ESP (0x32) Header checksum: 0x5dbe (correct) Source: 165.227.249.102 (165.227.249.102) Destination: 165.227.249.106 (165.227.249.106) Encapsulating Security Payload SPI: 0x45a82000 Sequence: 4 Data (84 bytes) 0000 00 a0 8e 72 1e 40 00 e0 4c 69 0a 78 08 00 45 00 ...r.@..Li.x..E. 0010 00 70 00 06 00 00 1e 32 5d be a5 e3 f9 66 a5 e3 .p.....2]....f.. 0020 f9 6a 45 a8 20 00 00 00 00 04 88 34 25 8f 62 3d .jE. ......4%.b= 0030 85 f7 c4 13 cb 76 e9 0b 7e 6e 7c ee 99 c0 83 28 .....v..~n|....( 0040 72 cb 03 7d 6d 7d 25 7a b7 bc 34 3a a5 33 3f 48 r..}m}%z..4:.3?H 0050 0f 7a a4 b9 fb 32 f5 5b 40 eb 65 3f 53 b8 92 0c .z...2.[@.e?S... 0060 23 a3 d3 57 7f c6 02 cb b7 48 aa 0c 73 d4 ea ad #..W.....H..s... 0070 a1 33 2d 47 db 10 bd 5d 79 3d 79 7e 55 78 e4 25 .3-G...]y=y~Ux.% 0080 4a 75 Ju