Frame 1 (146 bytes on wire, 146 bytes captured) Arrival Time: Nov 2, 2005 16:33:39.993398000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 146 bytes Capture Length: 146 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:0f:b5:59:12:87 Destination: 00:0f:b5:59:12:87 (00:0f:b5:59:12:87) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0x595cefb0 (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.105 (165.227.249.105) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 128 Identification: 0x5b2f (23343) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xe0a2 (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.105 (165.227.249.105) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 108 Checksum: 0xb392 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x74701441196B8706 Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 100 Security Association payload Next payload: Vendor ID (13) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 40 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 32 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: draft-ietf-ipsec-dpd-00.txt 0000 00 0f b5 59 12 87 00 a0 8e 72 1e 40 08 00 45 00 ...Y.....r.@..E. 0010 00 80 5b 2f 00 00 40 11 e0 a2 a5 e3 f9 6a a5 e3 ..[/..@......j.. 0020 f9 69 01 f4 01 f4 00 6c b3 92 74 70 14 41 19 6b .i.....l..tp.A.k 0030 87 06 00 00 00 00 00 00 00 00 01 10 02 00 00 00 ................ 0040 00 00 00 00 00 64 0d 00 00 34 00 00 00 01 00 00 .....d...4...... 0050 00 01 00 00 00 28 01 01 00 01 00 00 00 20 01 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 04 00 02 80 03 ................ 0070 00 01 80 0b 00 01 80 0c 70 80 00 00 00 14 af ca ........p....... 0080 d7 13 68 a1 f1 c9 6b 86 96 fc 77 57 01 00 59 5c ..h...k...wW..Y\ 0090 ef b0 .. Frame 2 (146 bytes on wire, 146 bytes captured) Arrival Time: Nov 2, 2005 16:33:40.152066000 Time delta from previous packet: 0.158668000 seconds Time since reference or first frame: 0.158668000 seconds Frame Number: 2 Packet Length: 146 bytes Capture Length: 146 bytes Ethernet II, Src: 00:0f:b5:59:12:87, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:0f:b5:59:12:87 (00:0f:b5:59:12:87) Type: IP (0x0800) Frame check sequence: 0x68dc9766 (correct) Internet Protocol, Src Addr: 165.227.249.105 (165.227.249.105), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 128 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfbd1 (correct) Source: 165.227.249.105 (165.227.249.105) Destination: 165.227.249.106 (165.227.249.106) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 108 Checksum: 0x69d0 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x74701441196B8706 Responder cookie: 0x1BD2DC05CC2185C8 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 100 Security Association payload Next payload: Vendor ID (13) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 40 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 32 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: draft-ietf-ipsec-dpd-00.txt 0000 00 a0 8e 72 1e 40 00 0f b5 59 12 87 08 00 45 00 ...r.@...Y....E. 0010 00 80 00 00 40 00 40 11 fb d1 a5 e3 f9 69 a5 e3 ....@.@......i.. 0020 f9 6a 01 f4 01 f4 00 6c 69 d0 74 70 14 41 19 6b .j.....li.tp.A.k 0030 87 06 1b d2 dc 05 cc 21 85 c8 01 10 02 00 00 00 .......!........ 0040 00 00 00 00 00 64 0d 00 00 34 00 00 00 01 00 00 .....d...4...... 0050 00 01 00 00 00 28 01 01 00 01 00 00 00 20 01 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 04 00 02 80 03 ................ 0070 00 01 80 0b 00 01 80 0c 70 80 00 00 00 14 af ca ........p....... 0080 d7 13 68 a1 f1 c9 6b 86 96 fc 77 57 01 00 68 dc ..h...k...wW..h. 0090 97 66 .f Frame 3 (262 bytes on wire, 262 bytes captured) Arrival Time: Nov 2, 2005 16:33:40.278668000 Time delta from previous packet: 0.126602000 seconds Time since reference or first frame: 0.285270000 seconds Frame Number: 3 Packet Length: 262 bytes Capture Length: 262 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:0f:b5:59:12:87 Destination: 00:0f:b5:59:12:87 (00:0f:b5:59:12:87) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0x1edc7704 (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.105 (165.227.249.105) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 244 Identification: 0x5b30 (23344) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xe02d (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.105 (165.227.249.105) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 224 Checksum: 0x4699 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x74701441196B8706 Responder cookie: 0x1BD2DC05CC2185C8 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 216 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: Vendor ID (13) Length: 24 Nonce Data Vendor ID payload Next payload: NONE (0) Length: 32 Vendor ID: unknown vendor ID: 0x03000014724DE05288C29EA441B37479... 0000 00 0f b5 59 12 87 00 a0 8e 72 1e 40 08 00 45 00 ...Y.....r.@..E. 0010 00 f4 5b 30 00 00 40 11 e0 2d a5 e3 f9 6a a5 e3 ..[0..@..-...j.. 0020 f9 69 01 f4 01 f4 00 e0 46 99 74 70 14 41 19 6b .i......F.tp.A.k 0030 87 06 1b d2 dc 05 cc 21 85 c8 04 10 02 00 00 00 .......!........ 0040 00 00 00 00 00 d8 0a 00 00 84 ed 5d ef 59 c2 42 ...........].Y.B 0050 10 91 cb 4c 28 5d f2 c1 05 41 73 ec d2 b4 b6 8c ...L(]...As..... 0060 91 00 63 ed 0a 11 54 cb c3 e2 40 d8 7e 63 8c 85 ..c...T...@.~c.. 0070 63 60 e1 ea a1 ae 21 60 37 bf b2 b3 39 6f ea 96 c`....!`7...9o.. 0080 e6 3f cb 12 95 4c f6 dd 1c fb 61 d3 4c 7f 0b 55 .?...L....a.L..U 0090 5f f4 26 8d e2 26 c2 fa 72 71 a8 52 dd 80 1f 6f _.&..&..rq.R...o 00a0 68 a1 4e 80 82 75 5b 53 dc cc 3f fb 2a e9 dd a5 h.N..u[S..?.*... 00b0 4e 32 dc c0 25 6d 5c 60 60 0c a2 80 8f 41 63 90 N2..%m\``....Ac. 00c0 e3 16 97 15 8b c4 f4 fb 82 bf 0d 00 00 18 99 5c ...............\ 00d0 d1 b4 09 a8 ec bf bd 1f 2e 61 ad 9b 4d 7c f4 fe .........a..M|.. 00e0 cb 64 00 00 00 20 03 00 00 14 72 4d e0 52 88 c2 .d... ....rM.R.. 00f0 9e a4 41 b3 74 79 89 23 da 67 00 00 00 08 00 06 ..A.ty.#.g...... 0100 00 03 1e dc 77 04 ....w. Frame 4 (226 bytes on wire, 226 bytes captured) Arrival Time: Nov 2, 2005 16:33:40.615905000 Time delta from previous packet: 0.337237000 seconds Time since reference or first frame: 0.622507000 seconds Frame Number: 4 Packet Length: 226 bytes Capture Length: 226 bytes Ethernet II, Src: 00:0f:b5:59:12:87, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:0f:b5:59:12:87 (00:0f:b5:59:12:87) Type: IP (0x0800) Frame check sequence: 0xe1198a86 (correct) Internet Protocol, Src Addr: 165.227.249.105 (165.227.249.105), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 208 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb81 (correct) Source: 165.227.249.105 (165.227.249.105) Destination: 165.227.249.106 (165.227.249.106) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 188 Checksum: 0xac09 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x74701441196B8706 Responder cookie: 0x1BD2DC05CC2185C8 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 180 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 20 Nonce Data 0000 00 a0 8e 72 1e 40 00 0f b5 59 12 87 08 00 45 00 ...r.@...Y....E. 0010 00 d0 00 00 40 00 40 11 fb 81 a5 e3 f9 69 a5 e3 ....@.@......i.. 0020 f9 6a 01 f4 01 f4 00 bc ac 09 74 70 14 41 19 6b .j........tp.A.k 0030 87 06 1b d2 dc 05 cc 21 85 c8 04 10 02 00 00 00 .......!........ 0040 00 00 00 00 00 b4 0a 00 00 84 c7 5d 9f 14 d8 a4 ...........].... 0050 46 ca d6 a9 09 b4 2b 51 3c 0d 8c 6e e7 3a 82 c9 F.....+Q<..n.:.. 0060 6d 2c cd 11 e0 d3 bd a0 69 ea 43 c5 b9 b6 f9 75 m,......i.C....u 0070 54 b4 7e 5e 5d f6 6d 4e a9 3d 63 af 90 18 e3 9d T.~^].mN.=c..... 0080 fb ee 80 7d 0b 34 cc e6 ef 4a eb 72 00 62 33 8a ...}.4...J.r.b3. 0090 c9 8f 5e 3e 66 aa fa f6 d8 af 56 c8 04 ef f9 f8 ..^>f.....V..... 00a0 77 57 39 fc 6b 71 76 71 cc 4a 65 c3 ac 3f bf dc wW9.kqvq.Je..?.. 00b0 b5 93 85 6e 9c f2 00 a6 6b d4 26 84 db 9e 66 06 ...n....k.&...f. 00c0 53 4d 02 5d 2a be 54 0c 46 fe 00 00 00 14 7f f9 SM.]*.T.F....... 00d0 17 58 f9 f8 0e cc 02 9e 7a cd 09 6f 33 ad e1 19 .X......z..o3... 00e0 8a 86 .. Frame 5 (138 bytes on wire, 138 bytes captured) Arrival Time: Nov 2, 2005 16:33:40.769098000 Time delta from previous packet: 0.153193000 seconds Time since reference or first frame: 0.775700000 seconds Frame Number: 5 Packet Length: 138 bytes Capture Length: 138 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:0f:b5:59:12:87 Destination: 00:0f:b5:59:12:87 (00:0f:b5:59:12:87) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0x03dd3383 (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.105 (165.227.249.105) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x5b31 (23345) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xe0a8 (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.105 (165.227.249.105) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 100 Checksum: 0x8726 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x74701441196B8706 Responder cookie: 0x1BD2DC05CC2185C8 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 92 Encrypted payload (64 bytes) 0000 00 0f b5 59 12 87 00 a0 8e 72 1e 40 08 00 45 00 ...Y.....r.@..E. 0010 00 78 5b 31 00 00 40 11 e0 a8 a5 e3 f9 6a a5 e3 .x[1..@......j.. 0020 f9 69 01 f4 01 f4 00 64 87 26 74 70 14 41 19 6b .i.....d.&tp.A.k 0030 87 06 1b d2 dc 05 cc 21 85 c8 05 10 02 01 00 00 .......!........ 0040 00 00 00 00 00 5c 4d 60 f8 e1 4d b8 42 c2 c3 e0 .....\M`..M.B... 0050 bb fe 06 93 2b 0e fe 77 54 d6 57 11 12 e6 1d cd ....+..wT.W..... 0060 f1 67 14 3a b8 60 2e 31 cd 42 0f 0b ab 09 42 f1 .g.:.`.1.B....B. 0070 ba 1b c9 c6 01 5a d6 c3 4e 71 a9 05 3d 30 e9 10 .....Z..Nq..=0.. 0080 da e8 8a 4c c2 6e 03 dd 33 83 ...L.n..3. Frame 6 (114 bytes on wire, 114 bytes captured) Arrival Time: Nov 2, 2005 16:33:40.894052000 Time delta from previous packet: 0.124954000 seconds Time since reference or first frame: 0.900654000 seconds Frame Number: 6 Packet Length: 114 bytes Capture Length: 114 bytes Ethernet II, Src: 00:0f:b5:59:12:87, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:0f:b5:59:12:87 (00:0f:b5:59:12:87) Type: IP (0x0800) Frame check sequence: 0x8ef8d099 (correct) Internet Protocol, Src Addr: 165.227.249.105 (165.227.249.105), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfbf1 (correct) Source: 165.227.249.105 (165.227.249.105) Destination: 165.227.249.106 (165.227.249.106) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 76 Checksum: 0xa7d3 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x74701441196B8706 Responder cookie: 0x1BD2DC05CC2185C8 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 68 Encrypted payload (40 bytes) 0000 00 a0 8e 72 1e 40 00 0f b5 59 12 87 08 00 45 00 ...r.@...Y....E. 0010 00 60 00 00 40 00 40 11 fb f1 a5 e3 f9 69 a5 e3 .`..@.@......i.. 0020 f9 6a 01 f4 01 f4 00 4c a7 d3 74 70 14 41 19 6b .j.....L..tp.A.k 0030 87 06 1b d2 dc 05 cc 21 85 c8 05 10 02 01 00 00 .......!........ 0040 00 00 00 00 00 44 d5 85 8a a3 b5 6a 7f 3c 45 3f .....D.....j.1....F..5...v 0090 18 75 13 a2 81 59 f3 9d 0a c5 16 1d 82 5c 69 f4 .u...Y.......\i. 00a0 4b df f7 f2 9f 7d fe 4d df 7d 71 34 3a ef 46 70 K....}.M.}q4:.Fp 00b0 59 77 9a a1 c9 c7 6f 87 0b c6 7a 56 8a c8 07 02 Yw....o...zV.... 00c0 bc 89 e1 e3 7e a8 4a 46 a8 35 b8 ac 1f 63 09 fe ....~.JF.5...c.. 00d0 58 f5 ee 5e cc 42 4c ef d8 69 02 67 67 07 7c 9f X..^.BL..i.gg.|. 00e0 69 62 66 8b 66 0f 7c 53 ad f0 5b 56 8f a9 f1 a3 ibf.f.|S..[V.... 00f0 6f 26 04 e8 c1 87 d2 f2 57 ff 8c 78 34 a8 85 a9 o&......W..x4... 0100 3b f7 84 70 b5 b1 be 4d d3 02 75 01 4d a3 89 a8 ;..p...M..u.M... 0110 c9 16 b2 d2 ef f5 b5 17 72 4d 36 db 10 83 0d 2f ........rM6..../ 0120 f9 13 57 d8 d1 d0 1b 75 c3 c0 83 07 85 50 ea 9d ..W....u.....P.. 0130 c2 8d 7f 95 c4 c3 d6 0d 8e 2a 3d 89 00 0d ed 1a .........*=..... 0140 77 87 ca 64 d1 bf 91 4a ee 70 0d 02 40 d3 ab 0b w..d...J.p..@... 0150 89 76 .v Frame 8 (338 bytes on wire, 338 bytes captured) Arrival Time: Nov 2, 2005 16:33:41.450493000 Time delta from previous packet: 0.429340000 seconds Time since reference or first frame: 1.457095000 seconds Frame Number: 8 Packet Length: 338 bytes Capture Length: 338 bytes Ethernet II, Src: 00:0f:b5:59:12:87, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:0f:b5:59:12:87 (00:0f:b5:59:12:87) Type: IP (0x0800) Frame check sequence: 0xa3b1ecfe (correct) Internet Protocol, Src Addr: 165.227.249.105 (165.227.249.105), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 320 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb11 (correct) Source: 165.227.249.105 (165.227.249.105) Destination: 165.227.249.106 (165.227.249.106) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 300 Checksum: 0x3cbb (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x74701441196B8706 Responder cookie: 0x1BD2DC05CC2185C8 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xC1F0BAF2 Length: 292 Encrypted payload (264 bytes) 0000 00 a0 8e 72 1e 40 00 0f b5 59 12 87 08 00 45 00 ...r.@...Y....E. 0010 01 40 00 00 40 00 40 11 fb 11 a5 e3 f9 69 a5 e3 .@..@.@......i.. 0020 f9 6a 01 f4 01 f4 01 2c 3c bb 74 70 14 41 19 6b .j.....,<.tp.A.k 0030 87 06 1b d2 dc 05 cc 21 85 c8 08 10 20 01 c1 f0 .......!.... ... 0040 ba f2 00 00 01 24 11 75 b2 9e 15 f3 7e ba 04 31 .....$.u....~..1 0050 e7 5f c9 52 c5 42 f7 cb cb e3 ec 88 84 08 4f 5b ._.R.B........O[ 0060 07 78 6d f3 d4 8d a8 03 b0 95 c2 a6 ec 8e 5b 65 .xm...........[e 0070 28 86 c5 21 35 59 19 c9 8a ec 78 44 61 89 15 c2 (..!5Y....xDa... 0080 54 8d 0d 47 28 b8 a5 a6 44 f9 69 e7 3c 36 8b e9 T..G(...D.i.<6.. 0090 71 e5 fa 28 1b a6 77 9b 51 9c 91 8f ee c6 08 3c q..(..w.Q......< 00a0 30 0c 16 12 7b f8 0c 46 35 02 44 31 11 58 c9 58 0...{..F5.D1.X.X 00b0 89 b3 a5 2e 93 88 53 29 06 b9 ac ff 32 a9 b3 67 ......S)....2..g 00c0 f8 9b 34 bb e1 11 a2 91 ee 0a 95 01 dc e6 2a 80 ..4...........*. 00d0 9c ca 1e 0e 39 4c 58 85 66 f3 ce 59 83 9a 61 7b ....9LX.f..Y..a{ 00e0 52 b3 6b 49 a9 58 ae 5a b8 85 a6 4c ab 91 02 21 R.kI.X.Z...L...! 00f0 39 85 27 70 12 b7 ee 34 89 61 5e 93 ca 98 95 8e 9.'p...4.a^..... 0100 a0 3b ef 5b 5d b9 67 0b b4 05 70 b3 5e c6 7a 12 .;.[].g...p.^.z. 0110 26 e3 d2 cd b8 ae f3 20 fd a7 12 c4 7b ba ae 88 &...... ....{... 0120 f9 f8 3f 8f cf 23 a2 81 f1 23 0e 55 d8 70 03 a8 ..?..#...#.U.p.. 0130 45 f5 24 88 37 04 6f 38 52 89 34 f4 36 24 07 96 E.$.7.o8R.4.6$.. 0140 ce f9 48 fe 9f 4b 41 ad c2 19 31 a1 6d e5 a3 b1 ..H..KA...1.m... 0150 ec fe .. Frame 9 (98 bytes on wire, 98 bytes captured) Arrival Time: Nov 2, 2005 16:33:41.609451000 Time delta from previous packet: 0.158958000 seconds Time since reference or first frame: 1.616053000 seconds Frame Number: 9 Packet Length: 98 bytes Capture Length: 98 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:0f:b5:59:12:87 Destination: 00:0f:b5:59:12:87 (00:0f:b5:59:12:87) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0x5515a576 (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.105 (165.227.249.105) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 80 Identification: 0x5b33 (23347) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xe0ce (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.105 (165.227.249.105) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 60 Checksum: 0xccfc (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x74701441196B8706 Responder cookie: 0x1BD2DC05CC2185C8 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xC1F0BAF2 Length: 52 Encrypted payload (24 bytes) 0000 00 0f b5 59 12 87 00 a0 8e 72 1e 40 08 00 45 00 ...Y.....r.@..E. 0010 00 50 5b 33 00 00 40 11 e0 ce a5 e3 f9 6a a5 e3 .P[3..@......j.. 0020 f9 69 01 f4 01 f4 00 3c cc fc 74 70 14 41 19 6b .i.....<..tp.A.k 0030 87 06 1b d2 dc 05 cc 21 85 c8 08 10 20 01 c1 f0 .......!.... ... 0040 ba f2 00 00 00 34 c1 99 06 0f 96 06 42 19 55 9b .....4......B.U. 0050 9d 4a 77 a5 f2 6e 24 71 6b 88 59 df f1 4b 55 15 .Jw..n$qk.Y..KU. 0060 a5 76 .v Frame 10 (130 bytes on wire, 130 bytes captured) Arrival Time: Nov 2, 2005 16:33:42.110248000 Time delta from previous packet: 0.500797000 seconds Time since reference or first frame: 2.116850000 seconds Frame Number: 10 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:0f:b5:59:12:87 Destination: 00:0f:b5:59:12:87 (00:0f:b5:59:12:87) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0x0eb590de (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.105 (165.227.249.105) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x5b34 (23348) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0xe08c (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.105 (165.227.249.105) Encapsulating Security Payload SPI: 0x69fd1815 Sequence: 1 Data (84 bytes) 0000 00 0f b5 59 12 87 00 a0 8e 72 1e 40 08 00 45 00 ...Y.....r.@..E. 0010 00 70 5b 34 00 00 40 32 e0 8c a5 e3 f9 6a a5 e3 .p[4..@2.....j.. 0020 f9 69 69 fd 18 15 00 00 00 01 08 ed e8 e1 5b 10 .ii...........[. 0030 54 3b fb 94 9c b8 da 0e 56 d3 bc 12 59 fa 9b a2 T;......V...Y... 0040 f2 fa 88 c0 9e b7 df 0c 62 fb 83 05 9a 50 56 8c ........b....PV. 0050 d0 32 9e d2 ac 1f 4c 8b d8 2a 89 bc 48 4c c4 6d .2....L..*..HL.m 0060 4f f6 af 90 60 b1 c6 99 bd 34 bb ea 8a 64 80 b7 O...`....4...d.. 0070 74 2a 7a 5a 93 20 21 3e e1 85 1b 2e 7a c4 0e b5 t*zZ. !>....z... 0080 90 de .. Frame 11 (338 bytes on wire, 338 bytes captured) Arrival Time: Nov 2, 2005 16:33:42.510418000 Time delta from previous packet: 0.400170000 seconds Time since reference or first frame: 2.517020000 seconds Frame Number: 11 Packet Length: 338 bytes Capture Length: 338 bytes Ethernet II, Src: 00:0f:b5:59:12:87, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:0f:b5:59:12:87 (00:0f:b5:59:12:87) Type: IP (0x0800) Frame check sequence: 0x05469225 (correct) Internet Protocol, Src Addr: 165.227.249.105 (165.227.249.105), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 320 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb11 (correct) Source: 165.227.249.105 (165.227.249.105) Destination: 165.227.249.106 (165.227.249.106) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 300 Checksum: 0x4a51 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x74701441196B8706 Responder cookie: 0x1BD2DC05CC2185C8 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x41AE5911 Length: 292 Encrypted payload (264 bytes) 0000 00 a0 8e 72 1e 40 00 0f b5 59 12 87 08 00 45 00 ...r.@...Y....E. 0010 01 40 00 00 40 00 40 11 fb 11 a5 e3 f9 69 a5 e3 .@..@.@......i.. 0020 f9 6a 01 f4 01 f4 01 2c 4a 51 74 70 14 41 19 6b .j.....,JQtp.A.k 0030 87 06 1b d2 dc 05 cc 21 85 c8 08 10 20 01 41 ae .......!.... .A. 0040 59 11 00 00 01 24 4f ee b8 61 bd f9 e4 5c ae c7 Y....$O..a...\.. 0050 e1 34 a9 95 1f 05 54 a5 41 48 d2 7f 4c eb 40 14 .4....T.AH..L.@. 0060 35 56 10 0b 4b 63 b0 6c ac 3b ac cb cb 3e bb 5b 5V..Kc.l.;...>.[ 0070 1b 5f 35 02 51 aa b4 86 23 a2 e5 d3 77 98 27 af ._5.Q...#...w.'. 0080 07 c5 0e 4c 39 95 0a 14 44 d3 c5 e9 d1 b8 75 1b ...L9...D.....u. 0090 c0 af 38 3f 74 63 fc de c8 a6 d5 78 85 9c f2 6e ..8?tc.....x...n 00a0 b6 2c 05 0f 61 0d 4b 18 9d 84 46 d1 7f 59 e2 55 .,..a.K...F..Y.U 00b0 4e c4 36 55 0c ba b9 f8 a1 1e b1 38 87 69 c2 2b N.6U.......8.i.+ 00c0 87 ec d6 6c 5a 19 b1 53 f2 d4 3e 73 f5 3d b4 ef ...lZ..S..>s.=.. 00d0 9c 79 df 74 99 0d b3 92 0a 88 ef 2d 82 2c 5f 1b .y.t.......-.,_. 00e0 e4 65 1f bd 11 f2 b8 29 8e 80 d9 24 de 3f 76 2b .e.....)...$.?v+ 00f0 27 57 f8 32 de 7f c7 10 20 6b 90 1a d3 74 40 a8 'W.2.... k...t@. 0100 79 f9 6f dd 19 14 91 14 c8 85 0b d3 c5 0a e5 df y.o............. 0110 0b ad 5a 49 dd 5b 17 18 34 b7 7c 67 76 54 b9 3f ..ZI.[..4.|gvT.? 0120 b9 b9 1f db 1c 67 f0 cd d1 58 d2 65 a9 b3 39 9a .....g...X.e..9. 0130 9a 08 0e 02 85 63 0d a2 4f 87 ea 14 5f 89 31 18 .....c..O..._.1. 0140 3d fd 0a 78 95 65 bc 7e 5e eb 87 11 21 a0 05 46 =..x.e.~^...!..F 0150 92 25 .% Frame 12 (362 bytes on wire, 362 bytes captured) Arrival Time: Nov 2, 2005 16:33:42.938010000 Time delta from previous packet: 0.427592000 seconds Time since reference or first frame: 2.944612000 seconds Frame Number: 12 Packet Length: 362 bytes Capture Length: 362 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:0f:b5:59:12:87 Destination: 00:0f:b5:59:12:87 (00:0f:b5:59:12:87) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0x49d108ea (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.105 (165.227.249.105) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 344 Identification: 0x5b35 (23349) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xdfc4 (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.105 (165.227.249.105) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 324 Checksum: 0x46b8 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x74701441196B8706 Responder cookie: 0x1BD2DC05CC2185C8 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x41AE5911 Length: 316 Encrypted payload (288 bytes) 0000 00 0f b5 59 12 87 00 a0 8e 72 1e 40 08 00 45 00 ...Y.....r.@..E. 0010 01 58 5b 35 00 00 40 11 df c4 a5 e3 f9 6a a5 e3 .X[5..@......j.. 0020 f9 69 01 f4 01 f4 01 44 46 b8 74 70 14 41 19 6b .i.....DF.tp.A.k 0030 87 06 1b d2 dc 05 cc 21 85 c8 08 10 20 01 41 ae .......!.... .A. 0040 59 11 00 00 01 3c 92 60 14 54 3c 5e 0c db da c6 Y....<.`.T<^.... 0050 c2 d5 8c 39 fb 28 74 5a ba cd 14 35 38 05 7e cc ...9.(tZ...58.~. 0060 00 12 c9 17 b0 02 e0 fd 93 05 77 2a c5 47 a8 ab ..........w*.G.. 0070 f4 fc 34 c9 42 ab 4e ca 2e f6 6f 9a d2 87 db 18 ..4.B.N...o..... 0080 bb 87 be 17 c3 f9 fc 6c 16 c4 b8 a9 29 6e bb 73 .......l....)n.s 0090 ae 40 49 cf 3c 52 69 d5 44 0c cc f7 fe f5 fa 7c .@I. 00f0 4d db 8e 07 3a 43 43 74 28 3e 77 91 39 a5 c8 8c M...:CCt(>w.9... 0100 3e 3d 8b ee 5e b0 b0 63 e6 6e fb df 21 ea 29 06 >=..^..c.n..!.). 0110 23 d4 a0 f9 a5 c5 db 14 52 01 f7 67 b4 66 08 95 #.......R..g.f.. 0120 11 1a 01 0d 1d ff 4e d0 27 b9 4b 6f 87 18 c9 d6 ......N.'.Ko.... 0130 72 3c 42 d8 02 4d 62 4b 72 2c 11 37 2a ae 6c 51 r....~.c..nZ 0080 9b bb .. Frame 15 (130 bytes on wire, 130 bytes captured) Arrival Time: Nov 2, 2005 16:33:45.278582000 Time delta from previous packet: 0.154181000 seconds Time since reference or first frame: 5.285184000 seconds Frame Number: 15 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:0f:b5:59:12:87, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:0f:b5:59:12:87 (00:0f:b5:59:12:87) Type: IP (0x0800) Frame check sequence: 0x333ec328 (correct) Internet Protocol, Src Addr: 165.227.249.105 (165.227.249.105), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0xbb1a (47898) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x80a6 (correct) Source: 165.227.249.105 (165.227.249.105) Destination: 165.227.249.106 (165.227.249.106) Encapsulating Security Payload SPI: 0x4a015a47 Sequence: 1 Data (84 bytes) 0000 00 a0 8e 72 1e 40 00 0f b5 59 12 87 08 00 45 00 ...r.@...Y....E. 0010 00 70 bb 1a 00 00 40 32 80 a6 a5 e3 f9 69 a5 e3 .p....@2.....i.. 0020 f9 6a 4a 01 5a 47 00 00 00 01 87 b6 ff ad 58 eb .jJ.ZG........X. 0030 39 f1 3e 37 ac 7a 94 61 6f 9f 38 36 c4 09 59 e6 9.>7.z.ao.86..Y. 0040 8b 69 bd 7a c8 ed 32 fe 1e 28 0e 2e d9 85 88 2b .i.z..2..(.....+ 0050 eb 5c 12 ee 4a 87 6a 20 6d 13 a9 cb cf 78 4f 9c .\..J.j m....xO. 0060 59 3d e7 1d 13 50 81 0f 93 bb cc e0 53 a8 75 a9 Y=...P......S.u. 0070 82 b9 c9 98 69 0f 8b a6 3b b6 1b 1c 1d a6 33 3e ....i...;.....3> 0080 c3 28 .( Frame 16 (130 bytes on wire, 130 bytes captured) Arrival Time: Nov 2, 2005 16:33:46.139254000 Time delta from previous packet: 0.860672000 seconds Time since reference or first frame: 6.145856000 seconds Frame Number: 16 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:0f:b5:59:12:87 Destination: 00:0f:b5:59:12:87 (00:0f:b5:59:12:87) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0x2cea0f66 (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.105 (165.227.249.105) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x5b37 (23351) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0xe089 (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.105 (165.227.249.105) Encapsulating Security Payload SPI: 0x69fd1816 Sequence: 2 Data (84 bytes) 0000 00 0f b5 59 12 87 00 a0 8e 72 1e 40 08 00 45 00 ...Y.....r.@..E. 0010 00 70 5b 37 00 00 40 32 e0 89 a5 e3 f9 6a a5 e3 .p[7..@2.....j.. 0020 f9 69 69 fd 18 16 00 00 00 02 0e 56 36 e5 bd fb .ii........V6... 0030 2d 3e 6a ea 17 72 53 55 d9 ce 3e af 86 62 91 b3 ->j..rSU..>..b.. 0040 2e a0 7f 0a f6 71 8c 5e 69 3b 04 af 0b 01 1b 0c .....q.^i;...... 0050 10 41 2d 3e 6b c9 82 d6 75 7d e8 7f 50 34 3a 7a .A->k...u}..P4:z 0060 84 18 f0 b7 47 9f 02 ea c6 17 6f 13 67 3a c3 21 ....G.....o.g:.! 0070 a7 c3 1a c4 ab ab b4 06 66 e3 30 cd e5 b8 2c ea ........f.0...,. 0080 0f 66 .f Frame 17 (130 bytes on wire, 130 bytes captured) Arrival Time: Nov 2, 2005 16:33:46.258716000 Time delta from previous packet: 0.119462000 seconds Time since reference or first frame: 6.265318000 seconds Frame Number: 17 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:0f:b5:59:12:87, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:0f:b5:59:12:87 (00:0f:b5:59:12:87) Type: IP (0x0800) Frame check sequence: 0x5fcf1dca (correct) Internet Protocol, Src Addr: 165.227.249.105 (165.227.249.105), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0xbb1b (47899) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x80a5 (correct) Source: 165.227.249.105 (165.227.249.105) Destination: 165.227.249.106 (165.227.249.106) Encapsulating Security Payload SPI: 0x4a015a47 Sequence: 2 Data (84 bytes) 0000 00 a0 8e 72 1e 40 00 0f b5 59 12 87 08 00 45 00 ...r.@...Y....E. 0010 00 70 bb 1b 00 00 40 32 80 a5 a5 e3 f9 69 a5 e3 .p....@2.....i.. 0020 f9 6a 4a 01 5a 47 00 00 00 02 cc e0 53 a8 75 a9 .jJ.ZG......S.u. 0030 82 b9 72 a9 2e 85 18 ec e3 ed 8a e0 5d 89 b2 5a ..r.........]..Z 0040 cc 22 d7 e7 b6 33 c7 11 9b eb 3f 42 b6 69 3e a0 ."...3....?B.i>. 0050 9b af 2c 47 0e 32 e3 9c 84 14 dd ab 03 c6 3f 2b ..,G.2........?+ 0060 19 ab 30 ca 76 6b ef 61 f4 d6 8d 65 a9 55 58 26 ..0.vk.a...e.UX& 0070 12 1f 03 25 75 2c b2 a5 17 32 5e d6 fd 3d 5f cf ...%u,...2^..=_. 0080 1d ca .. Frame 18 (130 bytes on wire, 130 bytes captured) Arrival Time: Nov 2, 2005 16:33:47.154604000 Time delta from previous packet: 0.895888000 seconds Time since reference or first frame: 7.161206000 seconds Frame Number: 18 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:0f:b5:59:12:87 Destination: 00:0f:b5:59:12:87 (00:0f:b5:59:12:87) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0x44e757a7 (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.105 (165.227.249.105) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x5b38 (23352) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0xe088 (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.105 (165.227.249.105) Encapsulating Security Payload SPI: 0x69fd1816 Sequence: 3 Data (84 bytes) 0000 00 0f b5 59 12 87 00 a0 8e 72 1e 40 08 00 45 00 ...Y.....r.@..E. 0010 00 70 5b 38 00 00 40 32 e0 88 a5 e3 f9 6a a5 e3 .p[8..@2.....j.. 0020 f9 69 69 fd 18 16 00 00 00 03 54 0d 18 74 c8 92 .ii.......T..t.. 0030 c0 27 a2 8a 02 b2 b8 83 01 51 a9 cb 5e 09 92 16 .'.......Q..^... 0040 6e 4a ff 59 eb 45 c5 23 15 ad 11 62 06 dd 73 02 nJ.Y.E.#...b..s. 0050 be db 79 fe 21 26 bc 6d d7 6f 35 b1 8a 00 35 6d ..y.!&.m.o5...5m 0060 a3 e1 b4 1b ba ff 32 5f 56 72 23 e5 b9 41 50 d7 ......2_Vr#..AP. 0070 53 92 b3 e7 ab a2 dd 51 b6 26 09 55 3c 52 44 e7 S......Q.&.U.s3+....B1...^ 0070 dd 5b 8e 28 ef e4 16 d2 da 6e 79 7a 6f 39 b7 56 .[.(.....nyzo9.V 0080 20 47 G Frame 20 (114 bytes on wire, 114 bytes captured) Arrival Time: Nov 2, 2005 16:33:48.402154000 Time delta from previous packet: 0.977551000 seconds Time since reference or first frame: 8.408756000 seconds Frame Number: 20 Packet Length: 114 bytes Capture Length: 114 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:0f:b5:59:12:87 Destination: 00:0f:b5:59:12:87 (00:0f:b5:59:12:87) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0x2ce14142 (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.105 (165.227.249.105) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0x5b39 (23353) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xe0b8 (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.105 (165.227.249.105) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 76 Checksum: 0x54bb (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x74701441196B8706 Responder cookie: 0x1BD2DC05CC2185C8 Next payload: Hash (8) Version: 1.0 Exchange type: Informational (5) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xEB3ED713 Length: 68 Encrypted payload (40 bytes) 0000 00 0f b5 59 12 87 00 a0 8e 72 1e 40 08 00 45 00 ...Y.....r.@..E. 0010 00 60 5b 39 00 00 40 11 e0 b8 a5 e3 f9 6a a5 e3 .`[9..@......j.. 0020 f9 69 01 f4 01 f4 00 4c 54 bb 74 70 14 41 19 6b .i.....LT.tp.A.k 0030 87 06 1b d2 dc 05 cc 21 85 c8 08 10 05 01 eb 3e .......!.......> 0040 d7 13 00 00 00 44 a0 86 44 35 eb 8b bc c7 e8 37 .....D..D5.....7 0050 2d c9 ab b1 d8 98 91 67 36 63 42 e2 cf e8 44 6e -......g6cB...Dn 0060 6f db 8d 6b 8e b5 85 38 67 88 d8 56 8e 16 2c e1 o..k...8g..V..,. 0070 41 42 AB Frame 21 (114 bytes on wire, 114 bytes captured) Arrival Time: Nov 2, 2005 16:33:48.524230000 Time delta from previous packet: 0.122076000 seconds Time since reference or first frame: 8.530832000 seconds Frame Number: 21 Packet Length: 114 bytes Capture Length: 114 bytes Ethernet II, Src: 00:0f:b5:59:12:87, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:0f:b5:59:12:87 (00:0f:b5:59:12:87) Type: IP (0x0800) Frame check sequence: 0x0d266c53 (correct) Internet Protocol, Src Addr: 165.227.249.105 (165.227.249.105), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfbf1 (correct) Source: 165.227.249.105 (165.227.249.105) Destination: 165.227.249.106 (165.227.249.106) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 76 Checksum: 0x7bb1 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x74701441196B8706 Responder cookie: 0x1BD2DC05CC2185C8 Next payload: Hash (8) Version: 1.0 Exchange type: Informational (5) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x35D05D63 Length: 68 Encrypted payload (40 bytes) 0000 00 a0 8e 72 1e 40 00 0f b5 59 12 87 08 00 45 00 ...r.@...Y....E. 0010 00 60 00 00 40 00 40 11 fb f1 a5 e3 f9 69 a5 e3 .`..@.@......i.. 0020 f9 6a 01 f4 01 f4 00 4c 7b b1 74 70 14 41 19 6b .j.....L{.tp.A.k 0030 87 06 1b d2 dc 05 cc 21 85 c8 08 10 05 01 35 d0 .......!......5. 0040 5d 63 00 00 00 44 31 64 8c 38 d3 4f 01 28 e4 bf ]c...D1d.8.O.(.. 0050 71 8d 9d f3 cc 8c af ba a6 bd 07 ce 40 ed b2 d1 q...........@... 0060 32 3a 88 4c 3d a0 e9 a0 48 34 19 1d 45 b2 0d 26 2:.L=...H4..E..& 0070 6c 53 lS