Frame 1 (146 bytes on wire, 146 bytes captured) Arrival Time: Sep 7, 2005 13:56:34.325673000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 146 bytes Capture Length: 146 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:13:46:3d:7d:5e Destination: 00:13:46:3d:7d:5e (00:13:46:3d:7d:5e) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0xc490b76a (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.108 (165.227.249.108) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 128 Identification: 0x5a07 (23047) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xe1c7 (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.108 (165.227.249.108) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 108 Checksum: 0x2c37 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xFD0C29DAB851D142 Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 100 Security Association payload Next payload: Vendor ID (13) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 40 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 32 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: draft-ietf-ipsec-dpd-00.txt 0000 00 13 46 3d 7d 5e 00 a0 8e 72 1e 40 08 00 45 00 ..F=}^...r.@..E. 0010 00 80 5a 07 00 00 40 11 e1 c7 a5 e3 f9 6a a5 e3 ..Z...@......j.. 0020 f9 6c 01 f4 01 f4 00 6c 2c 37 fd 0c 29 da b8 51 .l.....l,7..)..Q 0030 d1 42 00 00 00 00 00 00 00 00 01 10 02 00 00 00 .B.............. 0040 00 00 00 00 00 64 0d 00 00 34 00 00 00 01 00 00 .....d...4...... 0050 00 01 00 00 00 28 01 01 00 01 00 00 00 20 01 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 04 00 02 80 03 ................ 0070 00 01 80 0b 00 01 80 0c 70 80 00 00 00 14 af ca ........p....... 0080 d7 13 68 a1 f1 c9 6b 86 96 fc 77 57 01 00 c4 90 ..h...k...wW.... 0090 b7 6a .j Frame 2 (266 bytes on wire, 266 bytes captured) Arrival Time: Sep 7, 2005 13:56:34.334109000 Time delta from previous packet: 0.008436000 seconds Time since reference or first frame: 0.008436000 seconds Frame Number: 2 Packet Length: 266 bytes Capture Length: 266 bytes Ethernet II, Src: 00:13:46:3d:7d:5e, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:13:46:3d:7d:5e (00:13:46:3d:7d:5e) Type: IP (0x0800) Frame check sequence: 0x6b15670a (correct) Internet Protocol, Src Addr: 165.227.249.108 (165.227.249.108), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 248 Identification: 0x0a13 (2579) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: UDP (0x11) Header checksum: 0x7243 (correct) Source: 165.227.249.108 (165.227.249.108) Destination: 165.227.249.106 (165.227.249.106) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 228 Checksum: 0x6bad (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xFD0C29DAB851D142 Responder cookie: 0x6D4FE745351BC325 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 220 Security Association payload Next payload: Vendor ID (13) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 40 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 32 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-dpd-00.txt Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-stenberg-ipsec-nat-traversal-01 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-stenberg-ipsec-nat-traversal-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-03 0000 00 a0 8e 72 1e 40 00 13 46 3d 7d 5e 08 00 45 00 ...r.@..F=}^..E. 0010 00 f8 0a 13 00 00 ff 11 72 43 a5 e3 f9 6c a5 e3 ........rC...l.. 0020 f9 6a 01 f4 01 f4 00 e4 6b ad fd 0c 29 da b8 51 .j......k...)..Q 0030 d1 42 6d 4f e7 45 35 1b c3 25 01 10 02 00 00 00 .BmO.E5..%...... 0040 00 00 00 00 00 dc 0d 00 00 34 00 00 00 01 00 00 .........4...... 0050 00 01 00 00 00 28 01 01 00 01 00 00 00 20 01 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 04 00 02 80 03 ................ 0070 00 01 80 0b 00 01 80 0c 70 80 0d 00 00 14 af ca ........p....... 0080 d7 13 68 a1 f1 c9 6b 86 96 fc 77 57 01 00 0d 00 ..h...k...wW.... 0090 00 14 27 ba b5 dc 01 ea 07 60 ea 4e 31 90 ac 27 ..'......`.N1..' 00a0 c0 d0 0d 00 00 14 61 05 c4 22 e7 68 47 e4 3f 96 ......a..".hG.?. 00b0 84 80 12 92 ae cd 0d 00 00 14 44 85 15 2d 18 b6 ..........D..-.. 00c0 bb cd 0b e8 a8 46 95 79 dd cc 0d 00 00 14 cd 60 .....F.y.......` 00d0 46 43 35 df 21 f8 7c fd b2 fc 68 b6 a4 48 0d 00 FC5.!.|...h..H.. 00e0 00 14 90 cb 80 91 3e bb 69 6e 08 63 81 b5 ec 42 ......>.in.c...B 00f0 7b 1f 00 00 00 14 7d 94 19 a6 53 10 ca 6f 2c 17 {.....}...S..o,. 0100 9d 92 15 52 9d 56 6b 15 67 0a ...R.Vk.g. Frame 3 (262 bytes on wire, 262 bytes captured) Arrival Time: Sep 7, 2005 13:56:34.467169000 Time delta from previous packet: 0.133060000 seconds Time since reference or first frame: 0.141496000 seconds Frame Number: 3 Packet Length: 262 bytes Capture Length: 262 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:13:46:3d:7d:5e Destination: 00:13:46:3d:7d:5e (00:13:46:3d:7d:5e) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0x5d1c7906 (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.108 (165.227.249.108) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 244 Identification: 0x5a08 (23048) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xe152 (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.108 (165.227.249.108) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 224 Checksum: 0x31c7 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xFD0C29DAB851D142 Responder cookie: 0x6D4FE745351BC325 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 216 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: Vendor ID (13) Length: 24 Nonce Data Vendor ID payload Next payload: NONE (0) Length: 32 Vendor ID: unknown vendor ID: 0x03000014FB31DDC929F8C8E0372E4F39... 0000 00 13 46 3d 7d 5e 00 a0 8e 72 1e 40 08 00 45 00 ..F=}^...r.@..E. 0010 00 f4 5a 08 00 00 40 11 e1 52 a5 e3 f9 6a a5 e3 ..Z...@..R...j.. 0020 f9 6c 01 f4 01 f4 00 e0 31 c7 fd 0c 29 da b8 51 .l......1...)..Q 0030 d1 42 6d 4f e7 45 35 1b c3 25 04 10 02 00 00 00 .BmO.E5..%...... 0040 00 00 00 00 00 d8 0a 00 00 84 51 ac 4e 14 96 d0 ..........Q.N... 0050 6b 0c c6 73 3b 33 d5 4a 67 e8 33 7d 3c 58 2c b8 k..s;3.Jg.3}7X. 0080 ba bf 74 23 96 96 83 1e bc 35 b9 8f db c8 13 f1 ..t#.....5...... 0090 66 e2 32 5d 9e d5 d1 7a 47 a3 a3 65 ed fc 81 4f f.2]...zG..e...O 00a0 64 0c 72 5e 13 8e 9e 2e 68 50 a0 a4 81 72 c3 8d d.r^....hP...r.. 00b0 cb c0 59 77 50 49 94 6d 54 1d 4e 2f 01 dc 32 e7 ..YwPI.mT.N/..2. 00c0 f2 6d 42 47 52 59 04 74 51 45 00 00 00 14 38 ff .mBGRY.tQE....8. 00d0 94 45 0f 45 69 cb 4c 15 93 80 ca 4b 85 72 75 3d .E.Ei.L....K.ru= 00e0 cf 9f .. Frame 5 (138 bytes on wire, 138 bytes captured) Arrival Time: Sep 7, 2005 13:56:34.947205000 Time delta from previous packet: 0.150337000 seconds Time since reference or first frame: 0.621532000 seconds Frame Number: 5 Packet Length: 138 bytes Capture Length: 138 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:13:46:3d:7d:5e Destination: 00:13:46:3d:7d:5e (00:13:46:3d:7d:5e) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0x17e9b693 (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.108 (165.227.249.108) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x5a09 (23049) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xe1cd (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.108 (165.227.249.108) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 100 Checksum: 0xeb77 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xFD0C29DAB851D142 Responder cookie: 0x6D4FE745351BC325 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 92 Encrypted payload (64 bytes) 0000 00 13 46 3d 7d 5e 00 a0 8e 72 1e 40 08 00 45 00 ..F=}^...r.@..E. 0010 00 78 5a 09 00 00 40 11 e1 cd a5 e3 f9 6a a5 e3 .xZ...@......j.. 0020 f9 6c 01 f4 01 f4 00 64 eb 77 fd 0c 29 da b8 51 .l.....d.w..)..Q 0030 d1 42 6d 4f e7 45 35 1b c3 25 05 10 02 01 00 00 .BmO.E5..%...... 0040 00 00 00 00 00 5c c0 a6 8f 23 1c 44 30 db ec c1 .....\...#.D0... 0050 60 d4 b1 f8 f8 3c cc 2e c7 86 6e 0a 41 06 fd 2c `....<....n.A.., 0060 8b d1 a2 e3 5e e9 10 2b b2 97 82 f9 72 a2 17 95 ....^..+....r... 0070 2d 27 d0 53 3f 68 04 ce 1f 41 ac a4 26 3a fb b3 -'.S?h...A..&:.. 0080 7d f1 d2 b3 1a 03 17 e9 b6 93 }......... Frame 6 (114 bytes on wire, 114 bytes captured) Arrival Time: Sep 7, 2005 13:56:34.954856000 Time delta from previous packet: 0.007651000 seconds Time since reference or first frame: 0.629183000 seconds Frame Number: 6 Packet Length: 114 bytes Capture Length: 114 bytes Ethernet II, Src: 00:13:46:3d:7d:5e, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:13:46:3d:7d:5e (00:13:46:3d:7d:5e) Type: IP (0x0800) Frame check sequence: 0x536728cc (correct) Internet Protocol, Src Addr: 165.227.249.108 (165.227.249.108), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0x0a33 (2611) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: UDP (0x11) Header checksum: 0x72bb (correct) Source: 165.227.249.108 (165.227.249.108) Destination: 165.227.249.106 (165.227.249.106) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 76 Checksum: 0x8a63 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xFD0C29DAB851D142 Responder cookie: 0x6D4FE745351BC325 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 68 Encrypted payload (40 bytes) 0000 00 a0 8e 72 1e 40 00 13 46 3d 7d 5e 08 00 45 00 ...r.@..F=}^..E. 0010 00 60 0a 33 00 00 ff 11 72 bb a5 e3 f9 6c a5 e3 .`.3....r....l.. 0020 f9 6a 01 f4 01 f4 00 4c 8a 63 fd 0c 29 da b8 51 .j.....L.c..)..Q 0030 d1 42 6d 4f e7 45 35 1b c3 25 05 10 02 01 00 00 .BmO.E5..%...... 0040 00 00 00 00 00 44 92 de 96 98 8a ee d5 63 98 72 .....D.......c.r 0050 e3 58 71 5b f5 b3 b2 02 6b 06 f1 1f 71 e1 00 55 .Xq[....k...q..U 0060 53 86 49 37 c0 77 58 c5 7f f2 25 fe e4 d5 53 67 S.I7.wX...%...Sg 0070 28 cc (. Frame 7 (338 bytes on wire, 338 bytes captured) Arrival Time: Sep 7, 2005 13:56:35.082174000 Time delta from previous packet: 0.127318000 seconds Time since reference or first frame: 0.756501000 seconds Frame Number: 7 Packet Length: 338 bytes Capture Length: 338 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:13:46:3d:7d:5e Destination: 00:13:46:3d:7d:5e (00:13:46:3d:7d:5e) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0x168da694 (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.108 (165.227.249.108) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 320 Identification: 0x5a0a (23050) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xe104 (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.108 (165.227.249.108) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 300 Checksum: 0xb09b (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xFD0C29DAB851D142 Responder cookie: 0x6D4FE745351BC325 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x10ED512F Length: 292 Encrypted payload (264 bytes) 0000 00 13 46 3d 7d 5e 00 a0 8e 72 1e 40 08 00 45 00 ..F=}^...r.@..E. 0010 01 40 5a 0a 00 00 40 11 e1 04 a5 e3 f9 6a a5 e3 .@Z...@......j.. 0020 f9 6c 01 f4 01 f4 01 2c b0 9b fd 0c 29 da b8 51 .l.....,....)..Q 0030 d1 42 6d 4f e7 45 35 1b c3 25 08 10 20 01 10 ed .BmO.E5..%.. ... 0040 51 2f 00 00 01 24 82 f0 68 6f c9 8e 76 d3 33 f0 Q/...$..ho..v.3. 0050 52 7d 67 50 5d e3 e3 26 b7 96 b1 ac d7 41 27 9b R}gP]..&.....A'. 0060 0f 6d 66 ed 51 84 fb bd f5 44 44 fe 1d 1b df 09 .mf.Q....DD..... 0070 36 1f 54 2c cf 5a 44 c1 a1 41 ec 45 90 2a bd 78 6.T,.ZD..A.E.*.x 0080 4a 13 ca cf e9 5f 4e 44 30 8b 92 f9 b6 2a 35 c4 J...._ND0....*5. 0090 1d 5a bf 42 a1 dd 48 5b 48 e6 51 28 66 6d 6e c2 .Z.B..H[H.Q(fmn. 00a0 0c 0a 47 7b 54 96 3e bd b5 2e 94 83 65 b2 a2 53 ..G{T.>.....e..S 00b0 79 9c e8 9f 1f a4 35 55 c0 69 b3 81 9f 85 af 98 y.....5U.i...... 00c0 00 98 d5 7d 00 99 ef 00 38 34 7e ec 82 26 67 8a ...}....84~..&g. 00d0 13 cf 7a df 6a 87 ce 7b 19 cf e7 7f c3 67 7d 4c ..z.j..{.....g}L 00e0 9e 45 5c 48 7d 3a ab d9 f5 87 2b 64 f5 eb e3 e6 .E\H}:....+d.... 00f0 f8 4e b8 06 ed 6f 80 98 02 68 9a cb 2e 69 65 71 .N...o...h...ieq 0100 b1 52 2a 52 ee 09 ce d8 7f ee a3 13 bd bc 20 ab .R*R.......... . 0110 a0 ea 1d 0c 24 4d b8 dd 06 08 0d bb bc 6e b9 d0 ....$M.......n.. 0120 b0 21 fa 6d ce 57 3d b4 5e 8d 76 ef de 7a 12 d6 .!.m.W=.^.v..z.. 0130 90 4f 9f db a9 a6 66 7a e1 75 f5 38 7c 65 3c 6f .O....fz.u.8|e.. 0150 71 85 q. Frame 9 (98 bytes on wire, 98 bytes captured) Arrival Time: Sep 7, 2005 13:56:35.411428000 Time delta from previous packet: 0.160145000 seconds Time since reference or first frame: 1.085755000 seconds Frame Number: 9 Packet Length: 98 bytes Capture Length: 98 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:13:46:3d:7d:5e Destination: 00:13:46:3d:7d:5e (00:13:46:3d:7d:5e) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0xbba33353 (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.108 (165.227.249.108) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 80 Identification: 0x5a0b (23051) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xe1f3 (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.108 (165.227.249.108) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 60 Checksum: 0x0d09 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xFD0C29DAB851D142 Responder cookie: 0x6D4FE745351BC325 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x10ED512F Length: 52 Encrypted payload (24 bytes) 0000 00 13 46 3d 7d 5e 00 a0 8e 72 1e 40 08 00 45 00 ..F=}^...r.@..E. 0010 00 50 5a 0b 00 00 40 11 e1 f3 a5 e3 f9 6a a5 e3 .PZ...@......j.. 0020 f9 6c 01 f4 01 f4 00 3c 0d 09 fd 0c 29 da b8 51 .l.....<....)..Q 0030 d1 42 6d 4f e7 45 35 1b c3 25 08 10 20 01 10 ed .BmO.E5..%.. ... 0040 51 2f 00 00 00 34 d7 9f f5 f5 ed 39 44 aa 39 96 Q/...4.....9D.9. 0050 e1 92 bc 82 7b 19 74 ce 9b b9 1d 55 a8 16 bb a3 ....{.t....U.... 0060 33 53 3S Frame 10 (130 bytes on wire, 130 bytes captured) Arrival Time: Sep 7, 2005 13:56:35.918854000 Time delta from previous packet: 0.507426000 seconds Time since reference or first frame: 1.593181000 seconds Frame Number: 10 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:13:46:3d:7d:5e Destination: 00:13:46:3d:7d:5e (00:13:46:3d:7d:5e) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0x56888caf (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.108 (165.227.249.108) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x5a0c (23052) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0xe1b1 (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.108 (165.227.249.108) Encapsulating Security Payload SPI: 0x32b57b48 Sequence: 1 Data (84 bytes) 0000 00 13 46 3d 7d 5e 00 a0 8e 72 1e 40 08 00 45 00 ..F=}^...r.@..E. 0010 00 70 5a 0c 00 00 40 32 e1 b1 a5 e3 f9 6a a5 e3 .pZ...@2.....j.. 0020 f9 6c 32 b5 7b 48 00 00 00 01 17 f4 c6 4d 84 f5 .l2.{H.......M.. 0030 06 47 94 80 05 b8 3f c0 61 c4 3e da 81 a8 0b db .G....?.a.>..... 0040 d7 81 ef 73 34 b9 39 fa e3 e1 8b 24 ea d7 6e 4f ...s4.9....$..nO 0050 ab 6b 06 24 c1 03 d3 1f f8 2f 30 e5 d8 7a d0 95 .k.$...../0..z.. 0060 dd 37 5f 05 40 5b 70 bb 46 43 32 c4 b7 26 8a 0d .7_.@[p.FC2..&.. 0070 fa 49 f5 eb 8d fb 44 f2 b7 47 d7 0c 15 b1 56 88 .I....D..G....V. 0080 8c af .. Frame 11 (130 bytes on wire, 130 bytes captured) Arrival Time: Sep 7, 2005 13:56:35.920986000 Time delta from previous packet: 0.002132000 seconds Time since reference or first frame: 1.595313000 seconds Frame Number: 11 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:13:46:3d:7d:5e, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:13:46:3d:7d:5e (00:13:46:3d:7d:5e) Type: IP (0x0800) Frame check sequence: 0x729c356e (correct) Internet Protocol, Src Addr: 165.227.249.108 (165.227.249.108), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x098a (2442) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8233 (correct) Source: 165.227.249.108 (165.227.249.108) Destination: 165.227.249.106 (165.227.249.106) Encapsulating Security Payload SPI: 0x726b9c00 Sequence: 1 Data (84 bytes) 0000 00 a0 8e 72 1e 40 00 13 46 3d 7d 5e 08 00 45 00 ...r.@..F=}^..E. 0010 00 70 09 8a 00 00 f0 32 82 33 a5 e3 f9 6c a5 e3 .p.....2.3...l.. 0020 f9 6a 72 6b 9c 00 00 00 00 01 a5 e3 f9 6c a5 e3 .jrk.........l.. 0030 f9 6a a8 b8 91 a0 6f ff 26 a5 bf 7e 00 1c 2b 47 .j....o.&..~..+G 0040 15 76 05 7b bf 9d df 88 a2 d0 b8 8f 22 21 97 a8 .v.{........"!.. 0050 39 0f 85 3f 6d e8 f9 1c cf 6a e0 c8 33 f2 de 46 9..?m....j..3..F 0060 ed 11 50 3a 87 72 42 17 1d 3b 6a 47 06 6f 12 e5 ..P:.rB..;jG.o.. 0070 92 d4 de 4c 3e 16 d2 87 7c 79 d5 4f 37 a5 72 9c ...L>...|y.O7.r. 0080 35 6e 5n Frame 12 (130 bytes on wire, 130 bytes captured) Arrival Time: Sep 7, 2005 13:56:35.926037000 Time delta from previous packet: 0.005051000 seconds Time since reference or first frame: 1.600364000 seconds Frame Number: 12 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:13:46:3d:7d:5e Destination: 00:13:46:3d:7d:5e (00:13:46:3d:7d:5e) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0x62391dcb (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.108 (165.227.249.108) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x5a0d (23053) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0xe1b0 (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.108 (165.227.249.108) Encapsulating Security Payload SPI: 0x32b57b48 Sequence: 2 Data (84 bytes) 0000 00 13 46 3d 7d 5e 00 a0 8e 72 1e 40 08 00 45 00 ..F=}^...r.@..E. 0010 00 70 5a 0d 00 00 40 32 e1 b0 a5 e3 f9 6a a5 e3 .pZ...@2.....j.. 0020 f9 6c 32 b5 7b 48 00 00 00 02 19 e0 d1 8a 4b c8 .l2.{H........K. 0030 dc 76 2b 32 a5 bf 2b b5 84 65 9e 61 bb 80 b1 2b .v+2..+..e.a...+ 0040 f4 b0 77 fe fb 12 02 26 2b 43 33 07 46 fe 90 4c ..w....&+C3.F..L 0050 bd a2 ae c3 28 66 3c 0f d2 bc 79 d3 f7 01 95 4d ....(f<...y....M 0060 d0 ac 71 4b 44 8d fd 45 3a 73 97 0c 4e 1b 99 a6 ..qKD..E:s..N... 0070 fe 33 0d 78 a8 e9 02 a6 91 86 f4 a1 27 3f 62 39 .3.x........'?b9 0080 1d cb .. Frame 13 (130 bytes on wire, 130 bytes captured) Arrival Time: Sep 7, 2005 13:56:35.927281000 Time delta from previous packet: 0.001244000 seconds Time since reference or first frame: 1.601608000 seconds Frame Number: 13 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:13:46:3d:7d:5e, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:13:46:3d:7d:5e (00:13:46:3d:7d:5e) Type: IP (0x0800) Frame check sequence: 0xf508bfc3 (correct) Internet Protocol, Src Addr: 165.227.249.108 (165.227.249.108), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0c09 (3081) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x7fb4 (correct) Source: 165.227.249.108 (165.227.249.108) Destination: 165.227.249.106 (165.227.249.106) Encapsulating Security Payload SPI: 0x726b9c00 Sequence: 2 Data (84 bytes) 0000 00 a0 8e 72 1e 40 00 13 46 3d 7d 5e 08 00 45 00 ...r.@..F=}^..E. 0010 00 70 0c 09 00 00 f0 32 7f b4 a5 e3 f9 6c a5 e3 .p.....2.....l.. 0020 f9 6a 72 6b 9c 00 00 00 00 02 a5 e3 f9 6c a5 e3 .jrk.........l.. 0030 f9 6a 49 41 b5 48 63 ce 78 36 c3 11 e5 17 86 de .jIA.Hc.x6...... 0040 59 1e 6e 4b ad fa a0 3f e6 f7 d0 41 46 13 d3 67 Y.nK...?...AF..g 0050 61 f7 07 eb fa 22 3f 4a 1a 4d 58 88 56 20 12 39 a...."?J.MX.V .9 0060 96 81 40 f8 9e 57 89 b4 ff 54 6b 35 a9 59 05 78 ..@..W...Tk5.Y.x 0070 7d d6 b3 ee 00 0e b9 07 c7 5b b7 40 b9 fe f5 08 }........[.@.... 0080 bf c3 .. Frame 14 (130 bytes on wire, 130 bytes captured) Arrival Time: Sep 7, 2005 13:56:36.931082000 Time delta from previous packet: 1.003801000 seconds Time since reference or first frame: 2.605409000 seconds Frame Number: 14 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:13:46:3d:7d:5e Destination: 00:13:46:3d:7d:5e (00:13:46:3d:7d:5e) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0x8336cdef (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.108 (165.227.249.108) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x5a0e (23054) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0xe1af (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.108 (165.227.249.108) Encapsulating Security Payload SPI: 0x32b57b48 Sequence: 3 Data (84 bytes) 0000 00 13 46 3d 7d 5e 00 a0 8e 72 1e 40 08 00 45 00 ..F=}^...r.@..E. 0010 00 70 5a 0e 00 00 40 32 e1 af a5 e3 f9 6a a5 e3 .pZ...@2.....j.. 0020 f9 6c 32 b5 7b 48 00 00 00 03 72 71 1b f0 42 64 .l2.{H....rq..Bd 0030 e1 5f c4 f2 64 73 9c 20 1f 2e 91 1b 0f 80 78 4c ._..ds. ......xL 0040 12 9e d2 9d 07 5e 4e 8b e9 25 e5 a1 ff e4 9f 16 .....^N..%...... 0050 6a 57 a3 a3 57 1a 07 e5 37 21 66 46 f4 05 36 99 jW..W...7!fF..6. 0060 bf 37 8a a8 1d 09 c0 34 d8 cd 3e 65 af d2 af 99 .7.....4..>e.... 0070 3c 2b e0 c9 47 99 db 46 37 1e 00 82 c4 26 83 36 <+..G..F7....&.6 0080 cd ef .. Frame 15 (130 bytes on wire, 130 bytes captured) Arrival Time: Sep 7, 2005 13:56:36.932462000 Time delta from previous packet: 0.001380000 seconds Time since reference or first frame: 2.606789000 seconds Frame Number: 15 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:13:46:3d:7d:5e, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:13:46:3d:7d:5e (00:13:46:3d:7d:5e) Type: IP (0x0800) Frame check sequence: 0x3c709512 (correct) Internet Protocol, Src Addr: 165.227.249.108 (165.227.249.108), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0d3c (3388) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x7e81 (correct) Source: 165.227.249.108 (165.227.249.108) Destination: 165.227.249.106 (165.227.249.106) Encapsulating Security Payload SPI: 0x726b9c00 Sequence: 3 Data (84 bytes) 0000 00 a0 8e 72 1e 40 00 13 46 3d 7d 5e 08 00 45 00 ...r.@..F=}^..E. 0010 00 70 0d 3c 00 00 f0 32 7e 81 a5 e3 f9 6c a5 e3 .p.<...2~....l.. 0020 f9 6a 72 6b 9c 00 00 00 00 03 a5 e3 f9 6c a5 e3 .jrk.........l.. 0030 f9 6a dd 81 e9 26 d0 a8 d3 8c 82 e2 60 4e a6 47 .j...&......`N.G 0040 d9 99 38 9a ee 9b 38 28 ef d2 8f 87 81 e2 20 2e ..8...8(...... . 0050 9b 39 5e 41 a9 4d 1a d1 12 ee ac a6 bd 36 df 5b .9^A.M.......6.[ 0060 41 40 95 d6 32 49 31 67 ca f8 79 54 ca b8 d3 f4 A@..2I1g..yT.... 0070 6d a7 bb 7e c7 98 52 ee 8b 8c 30 29 ea bb 3c 70 m..~..R...0)..

+ 0060 0c 13 2f 92 4b f1 2d 51 52 80 50 d3 6d e2 42 d6 ../.K.-QR.P.m.B. 0070 0a eb 54 92 c5 d0 4a a6 00 73 9f 87 c8 61 ad 7a ..T...J..s...a.z 0080 a5 f7 ..