Frame 1 (126 bytes on wire, 126 bytes captured) Arrival Time: May 19, 2005 14:25:45.252153000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 126 bytes Capture Length: 126 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:80:c8:b9:b1:b8 Destination: 00:80:c8:b9:b1:b8 (00:80:c8:b9:b1:b8) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0xba218970 (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.111 (165.227.249.111) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 108 Identification: 0xfb69 (64361) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x4076 (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.111 (165.227.249.111) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 88 Checksum: 0x7363 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x6C34F5F4A670CA26 Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 80 Security Association payload Next payload: NONE (0) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 40 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 32 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) 0000 00 80 c8 b9 b1 b8 00 a0 8e 72 1e 40 08 00 45 00 .........r.@..E. 0010 00 6c fb 69 00 00 40 11 40 76 a5 e3 f9 6a a5 e3 .l.i..@.@v...j.. 0020 f9 6f 01 f4 01 f4 00 58 73 63 6c 34 f5 f4 a6 70 .o.....Xscl4...p 0030 ca 26 00 00 00 00 00 00 00 00 01 10 02 00 00 00 .&.............. 0040 00 00 00 00 00 50 00 00 00 34 00 00 00 01 00 00 .....P...4...... 0050 00 01 00 00 00 28 01 01 00 01 00 00 00 20 01 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 04 00 02 80 03 ................ 0070 00 01 80 0b 00 01 80 0c 70 80 ba 21 89 70 ........p..!.p Frame 2 (266 bytes on wire, 266 bytes captured) Arrival Time: May 19, 2005 14:25:45.253023000 Time delta from previous packet: 0.000870000 seconds Time since reference or first frame: 0.000870000 seconds Frame Number: 2 Packet Length: 266 bytes Capture Length: 266 bytes Ethernet II, Src: 00:80:c8:b9:b1:b8, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:80:c8:b9:b1:b8 (00:80:c8:b9:b1:b8) Type: IP (0x0800) Frame check sequence: 0x4b9a4fe2 (correct) Internet Protocol, Src Addr: 165.227.249.111 (165.227.249.111), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 248 Identification: 0xddb2 (56754) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x5da1 (correct) Source: 165.227.249.111 (165.227.249.111) Destination: 165.227.249.106 (165.227.249.106) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 228 Checksum: 0x0000 (none) Internet Security Association and Key Management Protocol Initiator cookie: 0x6C34F5F4A670CA26 Responder cookie: 0x97DA62BB0D5D4C1F Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 220 Security Association payload Next payload: Vendor ID (13) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 40 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 32 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: unknown vendor ID: 0x5DE9BC4C3560AA16CB2DF25E7950F160 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-stenberg-ipsec-nat-traversal-01 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-stenberg-ipsec-nat-traversal-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-03 0000 00 a0 8e 72 1e 40 00 80 c8 b9 b1 b8 08 00 45 00 ...r.@........E. 0010 00 f8 dd b2 00 00 40 11 5d a1 a5 e3 f9 6f a5 e3 ......@.]....o.. 0020 f9 6a 01 f4 01 f4 00 e4 00 00 6c 34 f5 f4 a6 70 .j........l4...p 0030 ca 26 97 da 62 bb 0d 5d 4c 1f 01 10 02 00 00 00 .&..b..]L....... 0040 00 00 00 00 00 dc 0d 00 00 34 00 00 00 01 00 00 .........4...... 0050 00 01 00 00 00 28 01 01 00 01 00 00 00 20 01 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 04 00 02 80 03 ................ 0070 00 01 80 0b 00 01 80 0c 70 80 0d 00 00 14 5d e9 ........p.....]. 0080 bc 4c 35 60 aa 16 cb 2d f2 5e 79 50 f1 60 0d 00 .L5`...-.^yP.`.. 0090 00 14 27 ba b5 dc 01 ea 07 60 ea 4e 31 90 ac 27 ..'......`.N1..' 00a0 c0 d0 0d 00 00 14 61 05 c4 22 e7 68 47 e4 3f 96 ......a..".hG.?. 00b0 84 80 12 92 ae cd 0d 00 00 14 44 85 15 2d 18 b6 ..........D..-.. 00c0 bb cd 0b e8 a8 46 95 79 dd cc 0d 00 00 14 cd 60 .....F.y.......` 00d0 46 43 35 df 21 f8 7c fd b2 fc 68 b6 a4 48 0d 00 FC5.!.|...h..H.. 00e0 00 14 90 cb 80 91 3e bb 69 6e 08 63 81 b5 ec 42 ......>.in.c...B 00f0 7b 1f 00 00 00 14 7d 94 19 a6 53 10 ca 6f 2c 17 {.....}...S..o,. 0100 9d 92 15 52 9d 56 4b 9a 4f e2 ...R.VK.O. Frame 3 (262 bytes on wire, 262 bytes captured) Arrival Time: May 19, 2005 14:25:45.378600000 Time delta from previous packet: 0.125577000 seconds Time since reference or first frame: 0.126447000 seconds Frame Number: 3 Packet Length: 262 bytes Capture Length: 262 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:80:c8:b9:b1:b8 Destination: 00:80:c8:b9:b1:b8 (00:80:c8:b9:b1:b8) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0xd5a8a7eb (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.111 (165.227.249.111) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 244 Identification: 0xfb6a (64362) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3fed (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.111 (165.227.249.111) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 224 Checksum: 0xcbb3 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x6C34F5F4A670CA26 Responder cookie: 0x97DA62BB0D5D4C1F Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 216 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: Vendor ID (13) Length: 24 Nonce Data Vendor ID payload Next payload: NONE (0) Length: 32 Vendor ID: unknown vendor ID: 0x030000146A0901E737D9D384CDBBCAC7... 0000 00 80 c8 b9 b1 b8 00 a0 8e 72 1e 40 08 00 45 00 .........r.@..E. 0010 00 f4 fb 6a 00 00 40 11 3f ed a5 e3 f9 6a a5 e3 ...j..@.?....j.. 0020 f9 6f 01 f4 01 f4 00 e0 cb b3 6c 34 f5 f4 a6 70 .o........l4...p 0030 ca 26 97 da 62 bb 0d 5d 4c 1f 04 10 02 00 00 00 .&..b..]L....... 0040 00 00 00 00 00 d8 0a 00 00 84 51 43 1a 34 e8 b9 ..........QC.4.. 0050 0c 64 8d 88 5b 76 4d 81 dd 5e d9 e9 99 03 99 2e .d..[vM..^...... 0060 22 09 8d 05 2a 4b 95 7e 73 4d 53 bb de c7 2f 19 "...*K.~sMS.../. 0070 ac b9 e5 6f 28 f2 7f d6 9c 92 f2 b2 28 f6 3c 21 ...o(.......(. 00c0 b8 7b 96 2b e2 39 8d 82 b9 63 00 00 00 14 ca dc .{.+.9...c...... 00d0 09 41 b0 5f be 6e 46 b9 9e 89 da 34 27 27 cd c8 .A._.nF....4''.. 00e0 d7 51 .Q Frame 5 (138 bytes on wire, 138 bytes captured) Arrival Time: May 19, 2005 14:25:45.585464000 Time delta from previous packet: 0.152163000 seconds Time since reference or first frame: 0.333311000 seconds Frame Number: 5 Packet Length: 138 bytes Capture Length: 138 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:80:c8:b9:b1:b8 Destination: 00:80:c8:b9:b1:b8 (00:80:c8:b9:b1:b8) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0x910bba4c (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.111 (165.227.249.111) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0xfb6b (64363) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x4068 (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.111 (165.227.249.111) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 100 Checksum: 0x8a40 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x6C34F5F4A670CA26 Responder cookie: 0x97DA62BB0D5D4C1F Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 92 Encrypted payload (64 bytes) 0000 00 80 c8 b9 b1 b8 00 a0 8e 72 1e 40 08 00 45 00 .........r.@..E. 0010 00 78 fb 6b 00 00 40 11 40 68 a5 e3 f9 6a a5 e3 .x.k..@.@h...j.. 0020 f9 6f 01 f4 01 f4 00 64 8a 40 6c 34 f5 f4 a6 70 .o.....d.@l4...p 0030 ca 26 97 da 62 bb 0d 5d 4c 1f 05 10 02 01 00 00 .&..b..]L....... 0040 00 00 00 00 00 5c 85 dd 3a 76 ed 9e 35 00 c1 f4 .....\..:v..5... 0050 b9 ab 81 d4 38 a4 e7 9e b1 b9 24 a3 29 d1 fe 4c ....8.....$.)..L 0060 f2 0f 05 63 99 fc a6 25 37 67 6b 01 0c 30 0e eb ...c...%7gk..0.. 0070 db 51 64 53 2c e7 1e b4 03 16 df 0c fd 6c 1a 4b .QdS,........l.K 0080 e5 18 8f 4f 16 59 91 0b ba 4c ...O.Y...L Frame 6 (114 bytes on wire, 114 bytes captured) Arrival Time: May 19, 2005 14:25:45.586565000 Time delta from previous packet: 0.001101000 seconds Time since reference or first frame: 0.334412000 seconds Frame Number: 6 Packet Length: 114 bytes Capture Length: 114 bytes Ethernet II, Src: 00:80:c8:b9:b1:b8, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:80:c8:b9:b1:b8 (00:80:c8:b9:b1:b8) Type: IP (0x0800) Frame check sequence: 0x97892938 (correct) Internet Protocol, Src Addr: 165.227.249.111 (165.227.249.111), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0xe912 (59666) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x52d9 (correct) Source: 165.227.249.111 (165.227.249.111) Destination: 165.227.249.106 (165.227.249.106) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 76 Checksum: 0x0000 (none) Internet Security Association and Key Management Protocol Initiator cookie: 0x6C34F5F4A670CA26 Responder cookie: 0x97DA62BB0D5D4C1F Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 68 Encrypted payload (40 bytes) 0000 00 a0 8e 72 1e 40 00 80 c8 b9 b1 b8 08 00 45 00 ...r.@........E. 0010 00 60 e9 12 00 00 40 11 52 d9 a5 e3 f9 6f a5 e3 .`....@.R....o.. 0020 f9 6a 01 f4 01 f4 00 4c 00 00 6c 34 f5 f4 a6 70 .j.....L..l4...p 0030 ca 26 97 da 62 bb 0d 5d 4c 1f 05 10 02 01 00 00 .&..b..]L....... 0040 00 00 00 00 00 44 1a 68 2e b9 9c 99 fb ee ee d3 .....D.h........ 0050 90 64 ec 25 f4 59 b9 53 16 57 d7 06 12 8b a7 1d .d.%.Y.S.W...... 0060 a9 25 c0 2a 4f 98 b7 6b 4c 23 c6 33 82 f0 97 89 .%.*O..kL#.3.... 0070 29 38 )8 Frame 7 (338 bytes on wire, 338 bytes captured) Arrival Time: May 19, 2005 14:25:45.712758000 Time delta from previous packet: 0.126193000 seconds Time since reference or first frame: 0.460605000 seconds Frame Number: 7 Packet Length: 338 bytes Capture Length: 338 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:80:c8:b9:b1:b8 Destination: 00:80:c8:b9:b1:b8 (00:80:c8:b9:b1:b8) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0xb40a4955 (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.111 (165.227.249.111) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 320 Identification: 0xfb6c (64364) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3f9f (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.111 (165.227.249.111) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 300 Checksum: 0x8201 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x6C34F5F4A670CA26 Responder cookie: 0x97DA62BB0D5D4C1F Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xBC8F48FB Length: 292 Encrypted payload (264 bytes) 0000 00 80 c8 b9 b1 b8 00 a0 8e 72 1e 40 08 00 45 00 .........r.@..E. 0010 01 40 fb 6c 00 00 40 11 3f 9f a5 e3 f9 6a a5 e3 .@.l..@.?....j.. 0020 f9 6f 01 f4 01 f4 01 2c 82 01 6c 34 f5 f4 a6 70 .o.....,..l4...p 0030 ca 26 97 da 62 bb 0d 5d 4c 1f 08 10 20 01 bc 8f .&..b..]L... ... 0040 48 fb 00 00 01 24 92 46 ce 9b 3a 0f 7a 20 50 2a H....$.F..:.z P* 0050 7e d0 e1 1d a0 8a 50 cf 6a 87 ec 3b a0 0c a6 cc ~.....P.j..;.... 0060 b3 38 b8 24 d0 f5 65 e8 61 ee a3 38 c0 3e 54 f4 .8.$..e.a..8.>T. 0070 51 35 db 48 fd 67 25 44 f2 57 a6 99 d1 e0 0c 29 Q5.H.g%D.W.....) 0080 29 a7 1f 27 6a 97 53 10 21 fc 21 09 5a 45 5e 64 )..'j.S.!.!.ZE^d 0090 cb f1 5b 76 ba 05 dd 17 98 31 8e a3 16 24 36 de ..[v.....1...$6. 00a0 58 23 51 2f 33 bc 7b 6d 9d 3e bb 17 6f 71 d2 18 X#Q/3.{m.>..oq.. 00b0 aa b5 00 51 12 7b c7 ee 41 df db 15 e4 f0 18 c1 ...Q.{..A....... 00c0 a7 a3 2a 99 8a bd 13 d0 4a a0 67 b9 77 e6 d8 59 ..*.....J.g.w..Y 00d0 3a c4 05 c4 ca bc 1b b1 1d c2 55 03 e5 aa 51 54 :.........U...QT 00e0 13 22 b5 8c f9 33 f8 65 b9 4d 73 10 63 d4 cc 6a ."...3.e.Ms.c..j 00f0 5d 07 fc c0 8e 94 4b 6c a7 b1 ce 3e ef 82 48 6e ].....Kl...>..Hn 0100 b5 5a 24 96 2b ec 83 18 19 b6 2f 6f 0d 9f e2 60 .Z$.+...../o...` 0110 c0 07 05 dc 66 e4 df 91 0d cc 4b f4 05 09 f2 5e ....f.....K....^ 0120 17 b8 61 1b 9e 20 2a 10 b5 ab 6d 9e f2 09 08 68 ..a.. *...m....h 0130 2c a9 fc dc 0e c1 59 77 ee 6f 01 3a 6e 41 0b af ,.....Yw.o.:nA.. 0140 8f 74 71 e3 64 75 1d 09 da fb 26 08 0b 63 b4 0a .tq.du....&..c.. 0150 49 55 IU Frame 8 (338 bytes on wire, 338 bytes captured) Arrival Time: May 19, 2005 14:25:45.741976000 Time delta from previous packet: 0.029218000 seconds Time since reference or first frame: 0.489823000 seconds Frame Number: 8 Packet Length: 338 bytes Capture Length: 338 bytes Ethernet II, Src: 00:80:c8:b9:b1:b8, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:80:c8:b9:b1:b8 (00:80:c8:b9:b1:b8) Type: IP (0x0800) Frame check sequence: 0xe4831666 (correct) Internet Protocol, Src Addr: 165.227.249.111 (165.227.249.111), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 320 Identification: 0xabaf (43951) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x8f5c (correct) Source: 165.227.249.111 (165.227.249.111) Destination: 165.227.249.106 (165.227.249.106) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 300 Checksum: 0x0000 (none) Internet Security Association and Key Management Protocol Initiator cookie: 0x6C34F5F4A670CA26 Responder cookie: 0x97DA62BB0D5D4C1F Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xBC8F48FB Length: 292 Encrypted payload (264 bytes) 0000 00 a0 8e 72 1e 40 00 80 c8 b9 b1 b8 08 00 45 00 ...r.@........E. 0010 01 40 ab af 00 00 40 11 8f 5c a5 e3 f9 6f a5 e3 .@....@..\...o.. 0020 f9 6a 01 f4 01 f4 01 2c 00 00 6c 34 f5 f4 a6 70 .j.....,..l4...p 0030 ca 26 97 da 62 bb 0d 5d 4c 1f 08 10 20 01 bc 8f .&..b..]L... ... 0040 48 fb 00 00 01 24 66 28 14 70 8f 5c fb 98 c7 ba H....$f(.p.\.... 0050 07 69 8e 7a 4d 58 e4 60 91 64 ce 0b f4 6c 1b 09 .i.zMX.`.d...l.. 0060 df 07 3c d3 45 4d 45 c6 0b 88 45 4d bc 9d d1 32 ..<.EME...EM...2 0070 e3 fe fc 35 c6 76 66 0a 62 a2 20 15 ea 3a 0d 6a ...5.vf.b. ..:.j 0080 02 9c 7f 70 64 fd 81 d8 ba 37 ad 06 9f e6 7e 39 ...pd....7....~9 0090 22 5a a8 d0 6a bb 44 7e c7 14 b2 8c be 24 9a cc "Z..j.D~.....$.. 00a0 12 bb 4a e9 0c 62 7a 5d c7 86 a6 8b 65 da e0 1e ..J..bz]....e... 00b0 2c 0b cd 6b 05 c1 5a 47 bf 41 62 4e 4c 4c 56 7d ,..k..ZG.AbNLLV} 00c0 37 75 b1 57 a4 71 ab 9a ee 77 f1 39 1f 08 6b 20 7u.W.q...w.9..k 00d0 4a b7 39 8d 2a 50 7a fb d0 d6 44 4a 66 c9 79 e8 J.9.*Pz...DJf.y. 00e0 0f d7 e7 25 6f fa b6 9e de 6c 14 d7 85 da 0e d0 ...%o....l...... 00f0 35 d2 de 2f 34 bd 24 3d 3a ac df fe 38 95 7a 88 5../4.$=:...8.z. 0100 a5 e7 76 aa be 82 67 32 2b 13 29 a6 71 6c e6 56 ..v...g2+.).ql.V 0110 e5 3d 29 c4 9d d5 39 72 5e 7b a7 b7 2e 52 72 f7 .=)...9r^{...Rr. 0120 3a fa ba 9c 62 38 12 9f 33 81 36 37 ea 93 f4 ac :...b8..3.67.... 0130 d3 b8 6a d5 2c a9 50 0f a1 12 19 2f f4 4e bd 82 ..j.,.P..../.N.. 0140 63 c7 58 54 16 af 48 41 f4 43 b0 1e d8 8b e4 83 c.XT..HA.C...... 0150 16 66 .f Frame 9 (98 bytes on wire, 98 bytes captured) Arrival Time: May 19, 2005 14:25:45.901872000 Time delta from previous packet: 0.159896000 seconds Time since reference or first frame: 0.649719000 seconds Frame Number: 9 Packet Length: 98 bytes Capture Length: 98 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:80:c8:b9:b1:b8 Destination: 00:80:c8:b9:b1:b8 (00:80:c8:b9:b1:b8) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0x93fb32bb (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.111 (165.227.249.111) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 80 Identification: 0xfb6d (64365) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x408e (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.111 (165.227.249.111) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 60 Checksum: 0x2ca3 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x6C34F5F4A670CA26 Responder cookie: 0x97DA62BB0D5D4C1F Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xBC8F48FB Length: 52 Encrypted payload (24 bytes) 0000 00 80 c8 b9 b1 b8 00 a0 8e 72 1e 40 08 00 45 00 .........r.@..E. 0010 00 50 fb 6d 00 00 40 11 40 8e a5 e3 f9 6a a5 e3 .P.m..@.@....j.. 0020 f9 6f 01 f4 01 f4 00 3c 2c a3 6c 34 f5 f4 a6 70 .o.....<,.l4...p 0030 ca 26 97 da 62 bb 0d 5d 4c 1f 08 10 20 01 bc 8f .&..b..]L... ... 0040 48 fb 00 00 00 34 cc 9b 82 63 41 9e 00 6a cb 56 H....4...cA..j.V 0050 66 6c 29 cd 88 52 f9 76 41 9f 03 05 88 a0 93 fb fl)..R.vA....... 0060 32 bb 2. Frame 10 (130 bytes on wire, 130 bytes captured) Arrival Time: May 19, 2005 14:25:46.402714000 Time delta from previous packet: 0.500842000 seconds Time since reference or first frame: 1.150561000 seconds Frame Number: 10 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:80:c8:b9:b1:b8 Destination: 00:80:c8:b9:b1:b8 (00:80:c8:b9:b1:b8) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0xccd65f73 (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.111 (165.227.249.111) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0xfb6e (64366) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x404c (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.111 (165.227.249.111) Encapsulating Security Payload SPI: 0x01141921 Sequence: 1 Data (84 bytes) 0000 00 80 c8 b9 b1 b8 00 a0 8e 72 1e 40 08 00 45 00 .........r.@..E. 0010 00 70 fb 6e 00 00 40 32 40 4c a5 e3 f9 6a a5 e3 .p.n..@2@L...j.. 0020 f9 6f 01 14 19 21 00 00 00 01 7a ed 9c 5c 11 9b .o...!....z..\.. 0030 b4 05 bb fe f1 89 5b bc 92 32 fa 03 4f 4a d7 45 ......[..2..OJ.E 0040 78 31 a4 86 c2 d1 81 29 8f b2 66 86 9c e1 19 a5 x1.....)..f..... 0050 5b 2b 4a 6e cc 43 7d c6 09 0b 4d 9f ef 97 01 8f [+Jn.C}...M..... 0060 ba 95 76 90 cf e5 db 47 ef 42 3a 90 90 66 94 0d ..v....G.B:..f.. 0070 37 b6 81 0c a0 04 d3 0c b0 bc e8 2b dc 35 cc d6 7..........+.5.. 0080 5f 73 _s Frame 11 (130 bytes on wire, 130 bytes captured) Arrival Time: May 19, 2005 14:25:46.403430000 Time delta from previous packet: 0.000716000 seconds Time since reference or first frame: 1.151277000 seconds Frame Number: 11 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:80:c8:b9:b1:b8, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:80:c8:b9:b1:b8 (00:80:c8:b9:b1:b8) Type: IP (0x0800) Frame check sequence: 0xe1821500 (correct) Internet Protocol, Src Addr: 165.227.249.111 (165.227.249.111), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0004 (4) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8bb6 (correct) Source: 165.227.249.111 (165.227.249.111) Destination: 165.227.249.106 (165.227.249.106) Encapsulating Security Payload SPI: 0x18ba5c00 Sequence: 1 Data (84 bytes) 0000 00 a0 8e 72 1e 40 00 80 c8 b9 b1 b8 08 00 45 00 ...r.@........E. 0010 00 70 00 04 00 00 f0 32 8b b6 a5 e3 f9 6f a5 e3 .p.....2.....o.. 0020 f9 6a 18 ba 5c 00 00 00 00 01 11 12 94 a8 83 5c .j..\..........\ 0030 4b 32 5e b8 3b ef cb 48 0c 0f 0a a7 b2 cd 52 56 K2^.;..H......RV 0040 9a 7e 69 c6 39 3f 20 21 81 a3 78 3e ef 42 c3 ff .~i.9? !..x>.B.. 0050 d6 31 4b 80 e3 4d 92 1f db d2 18 a7 95 c1 53 81 .1K..M........S. 0060 73 30 32 d7 aa 0c 92 9d 17 5c c2 e2 f4 5d e6 8a s02......\...].. 0070 b9 25 b9 db 33 a4 fe eb 69 bd 11 91 42 32 e1 82 .%..3...i...B2.. 0080 15 00 .. Frame 12 (130 bytes on wire, 130 bytes captured) Arrival Time: May 19, 2005 14:25:46.406091000 Time delta from previous packet: 0.002661000 seconds Time since reference or first frame: 1.153938000 seconds Frame Number: 12 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:80:c8:b9:b1:b8 Destination: 00:80:c8:b9:b1:b8 (00:80:c8:b9:b1:b8) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0xfefbd8c3 (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.111 (165.227.249.111) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0xfb6f (64367) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x404b (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.111 (165.227.249.111) Encapsulating Security Payload SPI: 0x01141921 Sequence: 2 Data (84 bytes) 0000 00 80 c8 b9 b1 b8 00 a0 8e 72 1e 40 08 00 45 00 .........r.@..E. 0010 00 70 fb 6f 00 00 40 32 40 4b a5 e3 f9 6a a5 e3 .p.o..@2@K...j.. 0020 f9 6f 01 14 19 21 00 00 00 02 14 30 7c 04 f6 f4 .o...!.....0|... 0030 1d 7b f3 6f 63 a8 6d e3 11 ca 92 80 25 c4 c2 1d .{.oc.m.....%... 0040 9d 26 21 b7 e3 4c 94 79 d2 8a 74 e0 e3 ea 87 1a .&!..L.y..t..... 0050 d1 bb c5 88 10 a4 51 12 23 02 9d 29 9b 31 ea d3 ......Q.#..).1.. 0060 f9 d0 3b 2f 39 36 bd 35 30 9a 02 51 42 1b f1 84 ..;/96.50..QB... 0070 f7 ac f8 6e 42 09 bc fc a1 74 e6 29 6a 96 fe fb ...nB....t.)j... 0080 d8 c3 .. Frame 13 (130 bytes on wire, 130 bytes captured) Arrival Time: May 19, 2005 14:25:46.406450000 Time delta from previous packet: 0.000359000 seconds Time since reference or first frame: 1.154297000 seconds Frame Number: 13 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:80:c8:b9:b1:b8, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:80:c8:b9:b1:b8 (00:80:c8:b9:b1:b8) Type: IP (0x0800) Frame check sequence: 0xfd7dc7c6 (correct) Internet Protocol, Src Addr: 165.227.249.111 (165.227.249.111), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0005 (5) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8bb5 (correct) Source: 165.227.249.111 (165.227.249.111) Destination: 165.227.249.106 (165.227.249.106) Encapsulating Security Payload SPI: 0x18ba5c00 Sequence: 2 Data (84 bytes) 0000 00 a0 8e 72 1e 40 00 80 c8 b9 b1 b8 08 00 45 00 ...r.@........E. 0010 00 70 00 05 00 00 f0 32 8b b5 a5 e3 f9 6f a5 e3 .p.....2.....o.. 0020 f9 6a 18 ba 5c 00 00 00 00 02 5d 33 07 e9 87 98 .j..\.....]3.... 0030 4e 86 3b 20 e7 8d f6 8e 74 ed a2 8c f2 6c 96 c8 N.; ....t....l.. 0040 55 80 53 59 c8 57 76 24 c3 0a 1d c6 83 09 77 74 U.SY.Wv$......wt 0050 13 7d ed 26 00 c2 e2 51 4e 3c 80 a0 7e 54 8e e0 .}.&...QN<..~T.. 0060 00 78 d3 0b 6a ca 7f dc b9 44 fd cf 3f 51 87 58 .x..j....D..?Q.X 0070 8f c1 3c 54 77 fa 3f 9d 08 b5 7e ca 3c c1 fd 7d .. Frame 16 (130 bytes on wire, 130 bytes captured) Arrival Time: May 19, 2005 14:25:48.400931000 Time delta from previous packet: 0.999376000 seconds Time since reference or first frame: 3.148778000 seconds Frame Number: 16 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:80:c8:b9:b1:b8 Destination: 00:80:c8:b9:b1:b8 (00:80:c8:b9:b1:b8) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0x66243442 (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.111 (165.227.249.111) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0xfb71 (64369) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x4049 (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.111 (165.227.249.111) Encapsulating Security Payload SPI: 0x01141921 Sequence: 4 Data (84 bytes) 0000 00 80 c8 b9 b1 b8 00 a0 8e 72 1e 40 08 00 45 00 .........r.@..E. 0010 00 70 fb 71 00 00 40 32 40 49 a5 e3 f9 6a a5 e3 .p.q..@2@I...j.. 0020 f9 6f 01 14 19 21 00 00 00 04 69 fd 00 64 98 db .o...!....i..d.. 0030 24 61 3a c3 56 a5 4b 5d 33 32 66 5c 87 15 94 23 $a:.V.K]32f\...# 0040 ce 32 e9 be f1 c3 da 54 82 67 ea f5 fe d1 a6 41 .2.....T.g.....A 0050 62 7e df 57 ec bd af 6c 0e c9 91 f9 c0 53 18 12 b~.W...l.....S.. 0060 07 df af f9 b7 3b 7f b0 25 15 1c ca 9c e3 82 ab .....;..%....... 0070 2c 50 23 bd a3 e4 10 55 1b af c7 37 bf d9 66 24 ,P#....U...7..f$ 0080 34 42 4B Frame 17 (130 bytes on wire, 130 bytes captured) Arrival Time: May 19, 2005 14:25:48.401507000 Time delta from previous packet: 0.000576000 seconds Time since reference or first frame: 3.149354000 seconds Frame Number: 17 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:80:c8:b9:b1:b8, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:80:c8:b9:b1:b8 (00:80:c8:b9:b1:b8) Type: IP (0x0800) Frame check sequence: 0x4cabd9ef (correct) Internet Protocol, Src Addr: 165.227.249.111 (165.227.249.111), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0007 (7) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8bb3 (correct) Source: 165.227.249.111 (165.227.249.111) Destination: 165.227.249.106 (165.227.249.106) Encapsulating Security Payload SPI: 0x18ba5c00 Sequence: 4 Data (84 bytes) 0000 00 a0 8e 72 1e 40 00 80 c8 b9 b1 b8 08 00 45 00 ...r.@........E. 0010 00 70 00 07 00 00 f0 32 8b b3 a5 e3 f9 6f a5 e3 .p.....2.....o.. 0020 f9 6a 18 ba 5c 00 00 00 00 04 8a ec 11 cf 32 68 .j..\.........2h 0030 17 76 e2 e0 e4 3b 1d 12 f6 43 41 cb f5 7d 8b 5d .v...;...CA..}.] 0040 b5 b7 d5 c4 2a 8d 8e 1e 04 0d 23 28 5f 4c 81 e0 ....*.....#(_L.. 0050 e4 27 ab b6 e6 91 f0 5d 5d 21 0c 19 82 cf 8b ad .'.....]]!...... 0060 75 15 ec d3 fe 99 02 06 00 4a e1 2e bb 98 94 2a u........J.....* 0070 7c 62 ff c2 0c 43 37 8b c3 85 99 f8 18 31 4c ab |b...C7......1L. 0080 d9 ef ..