Frame 1 (126 bytes on wire, 126 bytes captured) Arrival Time: May 19, 2005 14:18:04.408310000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 126 bytes Capture Length: 126 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:00:24:c0:92:d1 Destination: 00:00:24:c0:92:d1 (00:00:24:c0:92:d1) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0x71c59880 (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.116 (165.227.249.116) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 108 Identification: 0xfb35 (64309) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x40a5 (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.116 (165.227.249.116) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 88 Checksum: 0x85e2 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xF5D2BFE1D2563831 Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 80 Security Association payload Next payload: NONE (0) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 40 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 32 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) 0000 00 00 24 c0 92 d1 00 a0 8e 72 1e 40 08 00 45 00 ..$......r.@..E. 0010 00 6c fb 35 00 00 40 11 40 a5 a5 e3 f9 6a a5 e3 .l.5..@.@....j.. 0020 f9 74 01 f4 01 f4 00 58 85 e2 f5 d2 bf e1 d2 56 .t.....X.......V 0030 38 31 00 00 00 00 00 00 00 00 01 10 02 00 00 00 81.............. 0040 00 00 00 00 00 50 00 00 00 34 00 00 00 01 00 00 .....P...4...... 0050 00 01 00 00 00 28 01 01 00 01 00 00 00 20 01 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 04 00 02 80 03 ................ 0070 00 01 80 0b 00 01 80 0c 70 80 71 c5 98 80 ........p.q... Frame 2 (126 bytes on wire, 126 bytes captured) Arrival Time: May 19, 2005 14:18:04.412184000 Time delta from previous packet: 0.003874000 seconds Time since reference or first frame: 0.003874000 seconds Frame Number: 2 Packet Length: 126 bytes Capture Length: 126 bytes Ethernet II, Src: 00:00:24:c0:92:d1, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:00:24:c0:92:d1 (00:00:24:c0:92:d1) Type: IP (0x0800) Frame check sequence: 0xc738cf0e (correct) Internet Protocol, Src Addr: 165.227.249.116 (165.227.249.116), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 108 Identification: 0x000e (14) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 30 Protocol: UDP (0x11) Header checksum: 0x5dcd (correct) Source: 165.227.249.116 (165.227.249.116) Destination: 165.227.249.106 (165.227.249.106) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 88 Checksum: 0x44f5 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xF5D2BFE1D2563831 Responder cookie: 0x2EFA93E4426A3BA4 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 80 Security Association payload Next payload: NONE (0) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 40 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 32 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) 0000 00 a0 8e 72 1e 40 00 00 24 c0 92 d1 08 00 45 00 ...r.@..$.....E. 0010 00 6c 00 0e 00 00 1e 11 5d cd a5 e3 f9 74 a5 e3 .l......]....t.. 0020 f9 6a 01 f4 01 f4 00 58 44 f5 f5 d2 bf e1 d2 56 .j.....XD......V 0030 38 31 2e fa 93 e4 42 6a 3b a4 01 10 02 00 00 00 81....Bj;....... 0040 00 00 00 00 00 50 00 00 00 34 00 00 00 01 00 00 .....P...4...... 0050 00 01 00 00 00 28 01 01 00 01 00 00 00 20 01 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 04 00 02 80 03 ................ 0070 00 01 80 0b 00 01 80 0c 70 80 c7 38 cf 0e ........p..8.. Frame 3 (262 bytes on wire, 262 bytes captured) Arrival Time: May 19, 2005 14:18:04.535228000 Time delta from previous packet: 0.123044000 seconds Time since reference or first frame: 0.126918000 seconds Frame Number: 3 Packet Length: 262 bytes Capture Length: 262 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:00:24:c0:92:d1 Destination: 00:00:24:c0:92:d1 (00:00:24:c0:92:d1) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0x1dca02a5 (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.116 (165.227.249.116) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 244 Identification: 0xfb36 (64310) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x401c (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.116 (165.227.249.116) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 224 Checksum: 0x1fce (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xF5D2BFE1D2563831 Responder cookie: 0x2EFA93E4426A3BA4 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 216 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: Vendor ID (13) Length: 24 Nonce Data Vendor ID payload Next payload: NONE (0) Length: 32 Vendor ID: unknown vendor ID: 0x03000014F3EF4BF243FF2193749B3B98... 0000 00 00 24 c0 92 d1 00 a0 8e 72 1e 40 08 00 45 00 ..$......r.@..E. 0010 00 f4 fb 36 00 00 40 11 40 1c a5 e3 f9 6a a5 e3 ...6..@.@....j.. 0020 f9 74 01 f4 01 f4 00 e0 1f ce f5 d2 bf e1 d2 56 .t.............V 0030 38 31 2e fa 93 e4 42 6a 3b a4 04 10 02 00 00 00 81....Bj;....... 0040 00 00 00 00 00 d8 0a 00 00 84 d4 f3 c0 87 43 ce ..............C. 0050 20 7f d5 e7 39 ca 9f 0a 23 d1 62 db 91 e3 be 27 ...9...#.b....' 0060 d6 8e 9f 14 8c 3a 42 de e5 22 e0 6c 94 ab 9b 60 .....:B..".l...` 0070 be 7c 1e c5 3f 50 e2 59 5a d1 66 dc dd ee 10 a7 .|..?P.YZ.f..... 0080 3a 22 d8 29 fe 9a 39 b5 13 43 3f d7 b6 4f 94 79 :".)..9..C?..O.y 0090 14 39 7f d4 fa 18 51 70 40 0b e2 3f 87 b5 53 22 .9....Qp@..?..S" 00a0 74 c2 6d d5 68 8b f9 81 06 0b c8 ab 8c dd 3f 73 t.m.h.........?s 00b0 7e ad b6 7a 62 17 a8 4a 88 1c b2 3a cd d5 44 a2 ~..zb..J...:..D. 00c0 1c ee b7 1f 93 f4 6c ee a9 6d 0d 00 00 18 31 ab ......l..m....1. 00d0 53 01 be 6c 30 90 c8 52 0b a9 d6 31 b7 ae d6 a3 S..l0..R...1.... 00e0 f3 35 00 00 00 20 03 00 00 14 f3 ef 4b f2 43 ff .5... ......K.C. 00f0 21 93 74 9b 3b 98 07 68 64 0b 00 00 00 08 00 06 !.t.;..hd....... 0100 00 02 1d ca 02 a5 ...... Frame 4 (218 bytes on wire, 218 bytes captured) Arrival Time: May 19, 2005 14:18:06.338398000 Time delta from previous packet: 1.803170000 seconds Time since reference or first frame: 1.930088000 seconds Frame Number: 4 Packet Length: 218 bytes Capture Length: 218 bytes Ethernet II, Src: 00:00:24:c0:92:d1, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:00:24:c0:92:d1 (00:00:24:c0:92:d1) Type: IP (0x0800) Frame check sequence: 0x0ebb8230 (correct) Internet Protocol, Src Addr: 165.227.249.116 (165.227.249.116), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 200 Identification: 0x000f (15) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 30 Protocol: UDP (0x11) Header checksum: 0x5d70 (correct) Source: 165.227.249.116 (165.227.249.116) Destination: 165.227.249.106 (165.227.249.106) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 180 Checksum: 0xac99 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xF5D2BFE1D2563831 Responder cookie: 0x2EFA93E4426A3BA4 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 172 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 12 Nonce Data 0000 00 a0 8e 72 1e 40 00 00 24 c0 92 d1 08 00 45 00 ...r.@..$.....E. 0010 00 c8 00 0f 00 00 1e 11 5d 70 a5 e3 f9 74 a5 e3 ........]p...t.. 0020 f9 6a 01 f4 01 f4 00 b4 ac 99 f5 d2 bf e1 d2 56 .j.............V 0030 38 31 2e fa 93 e4 42 6a 3b a4 04 10 02 00 00 00 81....Bj;....... 0040 00 00 00 00 00 ac 0a 00 00 84 7a 68 1d a8 ec f9 ..........zh.... 0050 58 a7 d7 75 89 02 1b 5c 16 fc a8 33 2f a1 7f 6b X..u...\...3/..k 0060 b0 aa a6 27 d8 7c 57 67 45 ff c4 db b8 61 60 14 ...'.|WgE....a`. 0070 73 a4 fe 21 d7 8f c7 22 a5 94 76 78 cc 33 df e5 s..!..."..vx.3.. 0080 7f 62 33 2d e0 db f2 01 6e a7 30 48 df 12 a9 d2 .b3-....n.0H.... 0090 6e a9 d4 74 63 5d 36 e4 38 91 36 2a d0 c1 55 a8 n..tc]6.8.6*..U. 00a0 f1 96 09 ba 81 4a 4d ae 85 89 95 c3 c2 ee 1b ac .....JM......... 00b0 c0 3d 69 98 e4 f3 16 93 85 4e 2e c2 26 1a 29 df .=i......N..&.). 00c0 e6 c8 96 9b 3c 7a 38 c3 cb d6 00 00 00 0c 9d 04 ........D.oV...._.. 0050 eb 11 30 fb b5 54 b3 3b 3f 53 ac 3e a7 94 ae bf ..0..T.;?S.>.... 0060 25 98 79 b8 a3 b3 ff 2d ff a5 9d 6a c9 4f 78 64 %.y....-...j.Oxd 0070 92 17 .. Frame 8 (114 bytes on wire, 114 bytes captured) Arrival Time: May 19, 2005 14:18:08.670424000 Time delta from previous packet: 0.000212000 seconds Time since reference or first frame: 4.262114000 seconds Frame Number: 8 Packet Length: 114 bytes Capture Length: 114 bytes Ethernet II, Src: 00:00:24:c0:92:d1, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:00:24:c0:92:d1 (00:00:24:c0:92:d1) Type: IP (0x0800) Frame check sequence: 0x32d2d8bc (correct) Internet Protocol, Src Addr: 165.227.249.116 (165.227.249.116), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0x0012 (18) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 30 Protocol: UDP (0x11) Header checksum: 0x5dd5 (correct) Source: 165.227.249.116 (165.227.249.116) Destination: 165.227.249.106 (165.227.249.106) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 76 Checksum: 0xf230 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xF5D2BFE1D2563831 Responder cookie: 0x2EFA93E4426A3BA4 Next payload: Hash (8) Version: 1.0 Exchange type: Informational (5) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xD2EAA198 Length: 68 Encrypted payload (40 bytes) 0000 00 a0 8e 72 1e 40 00 00 24 c0 92 d1 08 00 45 00 ...r.@..$.....E. 0010 00 60 00 12 00 00 1e 11 5d d5 a5 e3 f9 74 a5 e3 .`......]....t.. 0020 f9 6a 01 f4 01 f4 00 4c f2 30 f5 d2 bf e1 d2 56 .j.....L.0.....V 0030 38 31 2e fa 93 e4 42 6a 3b a4 08 10 05 01 d2 ea 81....Bj;....... 0040 a1 98 00 00 00 44 30 e5 55 72 5a 39 15 04 33 c2 .....D0.UrZ9..3. 0050 04 3e 28 1e a7 5c fd c3 17 a0 7e 23 49 cf 62 ba .>(..\....~#I.b. 0060 8c 49 c3 2a 8b 16 f2 01 e3 9e b6 b3 a3 93 32 d2 .I.*..........2. 0070 d8 bc .. Frame 9 (338 bytes on wire, 338 bytes captured) Arrival Time: May 19, 2005 14:18:08.795891000 Time delta from previous packet: 0.125467000 seconds Time since reference or first frame: 4.387581000 seconds Frame Number: 9 Packet Length: 338 bytes Capture Length: 338 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:00:24:c0:92:d1 Destination: 00:00:24:c0:92:d1 (00:00:24:c0:92:d1) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0xe799d974 (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.116 (165.227.249.116) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 320 Identification: 0xfb38 (64312) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3fce (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.116 (165.227.249.116) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 300 Checksum: 0x05a0 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xF5D2BFE1D2563831 Responder cookie: 0x2EFA93E4426A3BA4 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x99EFC852 Length: 292 Encrypted payload (264 bytes) 0000 00 00 24 c0 92 d1 00 a0 8e 72 1e 40 08 00 45 00 ..$......r.@..E. 0010 01 40 fb 38 00 00 40 11 3f ce a5 e3 f9 6a a5 e3 .@.8..@.?....j.. 0020 f9 74 01 f4 01 f4 01 2c 05 a0 f5 d2 bf e1 d2 56 .t.....,.......V 0030 38 31 2e fa 93 e4 42 6a 3b a4 08 10 20 01 99 ef 81....Bj;... ... 0040 c8 52 00 00 01 24 f7 d0 c4 89 31 51 79 22 97 7f .R...$....1Qy".. 0050 54 df 23 0b e0 ed 9b 91 3c b3 73 75 a5 36 b2 6b T.#.....<.su.6.k 0060 91 81 e8 8a d6 a0 9f 08 a5 51 d7 70 c9 06 a2 7f .........Q.p.... 0070 dc 94 c0 ed ad c5 f5 36 21 73 fc 5b 53 62 2c 29 .......6!s.[Sb,) 0080 b0 2c 3c 4d b3 bf 43 19 70 4f 09 13 45 ca 77 08 .,...%N. 00d0 4c 2f ba eb c9 be 00 87 bc b7 35 02 b9 99 a0 33 L/........5....3 00e0 fd 89 c0 46 4a 0e c4 e0 9c 4f 14 f9 78 e4 d0 a4 ...FJ....O..x... 00f0 8c 9a af 98 01 c6 c9 ab 32 b8 fe 8d 00 a7 02 1f ........2....... 0100 05 aa 28 51 6b 21 30 91 10 47 d0 a7 4f e9 bb ed ..(Qk!0..G..O... 0110 95 8a 53 20 d2 72 ba bd 1d 6d 52 69 ac 2a 0d 39 ..S .r...mRi.*.9 0120 3c cb 5a 8d 0d 9c df ae 61 bb 57 7c 93 c0 85 67 <.Z.....a.W|...g 0130 bc 86 83 fb 8f 4d b5 db cf 87 9e aa 05 0b 1d d2 .....M.......... 0140 21 51 b1 ba 39 f7 72 78 3f 06 02 47 d1 48 e7 99 !Q..9.rx?..G.H.. 0150 d9 74 .t Frame 10 (330 bytes on wire, 330 bytes captured) Arrival Time: May 19, 2005 14:18:10.595739000 Time delta from previous packet: 1.799848000 seconds Time since reference or first frame: 6.187429000 seconds Frame Number: 10 Packet Length: 330 bytes Capture Length: 330 bytes Ethernet II, Src: 00:00:24:c0:92:d1, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:00:24:c0:92:d1 (00:00:24:c0:92:d1) Type: IP (0x0800) Frame check sequence: 0xbecd289c (correct) Internet Protocol, Src Addr: 165.227.249.116 (165.227.249.116), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 312 Identification: 0x0013 (19) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 30 Protocol: UDP (0x11) Header checksum: 0x5cfc (correct) Source: 165.227.249.116 (165.227.249.116) Destination: 165.227.249.106 (165.227.249.106) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 292 Checksum: 0xbdde (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xF5D2BFE1D2563831 Responder cookie: 0x2EFA93E4426A3BA4 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x99EFC852 Length: 284 Encrypted payload (256 bytes) 0000 00 a0 8e 72 1e 40 00 00 24 c0 92 d1 08 00 45 00 ...r.@..$.....E. 0010 01 38 00 13 00 00 1e 11 5c fc a5 e3 f9 74 a5 e3 .8......\....t.. 0020 f9 6a 01 f4 01 f4 01 24 bd de f5 d2 bf e1 d2 56 .j.....$.......V 0030 38 31 2e fa 93 e4 42 6a 3b a4 08 10 20 01 99 ef 81....Bj;... ... 0040 c8 52 00 00 01 1c 10 42 60 bb c5 04 9e e1 8b 5d .R.....B`......] 0050 13 73 f0 08 a5 76 7a da cc 27 b2 17 b0 51 fc a5 .s...vz..'...Q.. 0060 87 d7 39 27 1b c2 9a 7c aa 2f cd d5 b9 8b a1 ae ..9'...|./...... 0070 8b 59 f6 bc 19 f3 c7 b2 69 2a d1 5d 7f de 84 18 .Y......i*.].... 0080 25 9d 80 7d 51 cf aa 38 09 0d 27 2d 75 db 2f 83 %..}Q..8..'-u./. 0090 32 c4 a9 1b 1e 32 d5 f6 53 ea 06 cf 2d 70 1d fd 2....2..S...-p.. 00a0 07 67 2f fb 3c fe 39 4d 61 d4 04 cb e3 07 1f f4 .g/.<.9Ma....... 00b0 0e d7 82 ba a1 24 c0 af 61 cf 86 ca cc 9d 30 3c .....$..a.....0< 00c0 45 80 64 6a ef cf 84 c6 bb b0 8d ef 70 14 a4 3a E.dj........p..: 00d0 a4 3d 46 5e db 46 e2 dd b0 c9 8f 15 b7 30 48 d3 .=F^.F.......0H. 00e0 b4 d4 61 65 9d 1c 0c 0f dc e2 f4 b6 6c 0a e6 31 ..ae........l..1 00f0 8e a3 8c 83 b6 db d2 b7 16 25 b2 4b 54 5e 60 b8 .........%.KT^`. 0100 39 1a ae a4 ae 56 90 0d f0 3c 10 0a eb fb ee ce 9....V...<...... 0110 cb 06 ce fb 9a cd 33 11 48 6b 21 50 92 01 72 c5 ......3.Hk!P..r. 0120 b3 9a 68 dc 95 aa 5e 5e 96 98 72 eb b1 74 c2 7e ..h...^^..r..t.~ 0130 8f e0 95 63 7c ac 04 1e c8 c2 aa 4a 6c 93 d1 ee ...c|......Jl... 0140 32 42 be f3 dd 9b be cd 28 9c 2B......(. Frame 11 (98 bytes on wire, 98 bytes captured) Arrival Time: May 19, 2005 14:18:10.758124000 Time delta from previous packet: 0.162385000 seconds Time since reference or first frame: 6.349814000 seconds Frame Number: 11 Packet Length: 98 bytes Capture Length: 98 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:00:24:c0:92:d1 Destination: 00:00:24:c0:92:d1 (00:00:24:c0:92:d1) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0x55180d0e (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.116 (165.227.249.116) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 80 Identification: 0xfb39 (64313) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x40bd (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.116 (165.227.249.116) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 60 Checksum: 0x44d8 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xF5D2BFE1D2563831 Responder cookie: 0x2EFA93E4426A3BA4 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x99EFC852 Length: 52 Encrypted payload (24 bytes) 0000 00 00 24 c0 92 d1 00 a0 8e 72 1e 40 08 00 45 00 ..$......r.@..E. 0010 00 50 fb 39 00 00 40 11 40 bd a5 e3 f9 6a a5 e3 .P.9..@.@....j.. 0020 f9 74 01 f4 01 f4 00 3c 44 d8 f5 d2 bf e1 d2 56 .t........H..`...... 0060 bc d8 7c 3f 12 80 7c 20 0b c9 98 b7 b0 fc 64 29 ..|?..| ......d) 0070 12 89 f1 14 bd 2d 26 81 e8 53 7b 35 42 b6 15 2c .....-&..S{5B.., 0080 9b 94 ..