Frame 1 (146 bytes on wire, 146 bytes captured) Arrival Time: May 12, 2005 15:02:52.699126000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 146 bytes Capture Length: 146 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:10:db:16:db:f6 Destination: 00:10:db:16:db:f6 (00:10:db:16:db:f6) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0xb8342342 (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.117 (165.227.249.117) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 128 Identification: 0xd292 (53906) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x6933 (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.117 (165.227.249.117) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 108 Checksum: 0xe52e (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xEB685BE8B0245276 Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 100 Security Association payload Next payload: Vendor ID (13) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 40 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 32 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: unknown vendor ID: 0x810FA565F8AB14369105D706FBD57279 0000 00 10 db 16 db f6 00 a0 8e 72 1e 40 08 00 45 00 .........r.@..E. 0010 00 80 d2 92 00 00 40 11 69 33 a5 e3 f9 6a a5 e3 ......@.i3...j.. 0020 f9 75 01 f4 01 f4 00 6c e5 2e eb 68 5b e8 b0 24 .u.....l...h[..$ 0030 52 76 00 00 00 00 00 00 00 00 01 10 02 00 00 00 Rv.............. 0040 00 00 00 00 00 64 0d 00 00 34 00 00 00 01 00 00 .....d...4...... 0050 00 01 00 00 00 28 01 01 00 01 00 00 00 20 01 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 04 00 02 80 03 ................ 0070 00 01 80 0b 00 01 80 0c 70 80 00 00 00 14 81 0f ........p....... 0080 a5 65 f8 ab 14 36 91 05 d7 06 fb d5 72 79 b8 34 .e...6......ry.4 0090 23 42 #B Frame 2 (182 bytes on wire, 182 bytes captured) Arrival Time: May 12, 2005 15:02:52.700981000 Time delta from previous packet: 0.001855000 seconds Time since reference or first frame: 0.001855000 seconds Frame Number: 2 Packet Length: 182 bytes Capture Length: 182 bytes Ethernet II, Src: 00:10:db:16:db:f6, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:10:db:16:db:f6 (00:10:db:16:db:f6) Type: IP (0x0800) Frame check sequence: 0x4b02daa0 (correct) Internet Protocol, Src Addr: 165.227.249.117 (165.227.249.117), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 164 Identification: 0x04d3 (1235) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x36cf (correct) Source: 165.227.249.117 (165.227.249.117) Destination: 165.227.249.106 (165.227.249.106) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 144 Checksum: 0x5146 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xEB685BE8B0245276 Responder cookie: 0xEA579C83AA6EEFCF Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 136 Security Association payload Next payload: Vendor ID (13) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 40 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 32 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: Vendor ID (13) Length: 32 Vendor ID: unknown vendor ID: 0x47D2B126BFCD83489760E2CF8C5D4D5A... Vendor ID payload Next payload: NONE (0) Length: 24 Vendor ID: unknown vendor ID: 0x4865617274426561745F4E6F74696679... 0000 00 a0 8e 72 1e 40 00 10 db 16 db f6 08 00 45 00 ...r.@........E. 0010 00 a4 04 d3 00 00 40 11 36 cf a5 e3 f9 75 a5 e3 ......@.6....u.. 0020 f9 6a 01 f4 01 f4 00 90 51 46 eb 68 5b e8 b0 24 .j......QF.h[..$ 0030 52 76 ea 57 9c 83 aa 6e ef cf 01 10 02 00 00 00 Rv.W...n........ 0040 00 00 00 00 00 88 0d 00 00 34 00 00 00 01 00 00 .........4...... 0050 00 01 00 00 00 28 01 01 00 01 00 00 00 20 01 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 04 00 02 80 03 ................ 0070 00 01 80 0b 00 01 80 0c 70 80 0d 00 00 20 47 d2 ........p.... G. 0080 b1 26 bf cd 83 48 97 60 e2 cf 8c 5d 4d 5a 03 49 .&...H.`...]MZ.I 0090 7c 15 00 00 00 03 00 00 05 00 00 00 00 18 48 65 |.............He 00a0 61 72 74 42 65 61 74 5f 4e 6f 74 69 66 79 38 6b artBeat_Notify8k 00b0 01 00 4b 02 da a0 ..K... Frame 3 (282 bytes on wire, 282 bytes captured) Arrival Time: May 12, 2005 15:02:52.818263000 Time delta from previous packet: 0.117282000 seconds Time since reference or first frame: 0.119137000 seconds Frame Number: 3 Packet Length: 282 bytes Capture Length: 282 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:10:db:16:db:f6 Destination: 00:10:db:16:db:f6 (00:10:db:16:db:f6) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0xcc78f127 (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.117 (165.227.249.117) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 264 Identification: 0xd293 (53907) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x68aa (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.117 (165.227.249.117) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 244 Checksum: 0x8876 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xEB685BE8B0245276 Responder cookie: 0xEA579C83AA6EEFCF Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 236 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: Vendor ID (13) Length: 24 Nonce Data Vendor ID payload Next payload: NONE (0) Length: 52 Vendor ID: unknown vendor ID: 0x02000014ED55AFFB218D4BD4B03634FF... 0000 00 10 db 16 db f6 00 a0 8e 72 1e 40 08 00 45 00 .........r.@..E. 0010 01 08 d2 93 00 00 40 11 68 aa a5 e3 f9 6a a5 e3 ......@.h....j.. 0020 f9 75 01 f4 01 f4 00 f4 88 76 eb 68 5b e8 b0 24 .u.......v.h[..$ 0030 52 76 ea 57 9c 83 aa 6e ef cf 04 10 02 00 00 00 Rv.W...n........ 0040 00 00 00 00 00 ec 0a 00 00 84 2b 31 eb 9b 44 1c ..........+1..D. 0050 c9 73 3a fe 1e a2 e3 78 fd af 5f 09 7b 59 77 f2 .s:....x.._.{Yw. 0060 ec f8 f2 f2 3f c6 64 11 00 20 6a 42 3b ad 65 cb ....?.d.. jB;.e. 0070 9b 88 f1 e0 9d 01 d2 c8 8a 4d 9f 34 ea e5 9d bc .........M.4.... 0080 5c 38 11 92 51 af 46 11 47 9e a5 76 41 51 22 49 \8..Q.F.G..vAQ"I 0090 2e 09 9c 20 ee b4 64 67 c6 0b 9f 4b 8f db c8 6a ... ..dg...K...j 00a0 a2 08 e8 49 a2 8f 62 55 39 59 9e 53 cb de 7b b6 ...I..bU9Y.S..{. 00b0 f9 6d fb d3 9f 62 1f 11 3c 4a cc a6 1f 81 0f d8 .m...b..'.( 0100 c3 6f bf a7 2b cb 78 8c 7d e5 df 72 7d a6 5b d9 .o..+.x.}..r}.[. 0110 ef c2 51 c5 d7 af 58 a0 b7 59 c8 93 2f 57 7b 54 ..Q...X..Y../W{T 0120 52 e7 82 51 5b 79 7a b2 25 02 c1 b5 32 c9 81 df R..Q[yz.%...2... 0130 63 96 9d 00 e9 0b 72 a1 5d ca 05 32 59 29 f4 5f c.....r.]..2Y)._ 0140 20 c0 f3 0b 81 ec 95 58 f0 f4 25 c1 54 cf 3e 7a ......X..%.T.>z 0150 95 6f 21 24 4b 54 7e 58 4a 40 .o!$KT~XJ@ Frame 9 (98 bytes on wire, 98 bytes captured) Arrival Time: May 12, 2005 15:02:53.258063000 Time delta from previous packet: 0.150167000 seconds Time since reference or first frame: 0.558937000 seconds Frame Number: 9 Packet Length: 98 bytes Capture Length: 98 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:10:db:16:db:f6 Destination: 00:10:db:16:db:f6 (00:10:db:16:db:f6) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0xd3cd70dc (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.117 (165.227.249.117) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 80 Identification: 0xd296 (53910) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x695f (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.117 (165.227.249.117) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 60 Checksum: 0x41f7 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xEB685BE8B0245276 Responder cookie: 0xEA579C83AA6EEFCF Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x496AF215 Length: 52 Encrypted payload (24 bytes) 0000 00 10 db 16 db f6 00 a0 8e 72 1e 40 08 00 45 00 .........r.@..E. 0010 00 50 d2 96 00 00 40 11 69 5f a5 e3 f9 6a a5 e3 .P....@.i_...j.. 0020 f9 75 01 f4 01 f4 00 3c 41 f7 eb 68 5b e8 b0 24 .u..... 0030 7a 44 24 b8 49 1e 77 f3 c7 34 c0 c1 76 7c df d0 zD$.I.w..4..v|.. 0040 4d 6e 21 95 74 b8 66 43 57 86 ab 75 c9 c9 9a 7e Mn!.t.fCW..u...~ 0050 00 63 18 e8 65 02 90 4b 95 62 d8 9f 85 7a b8 ae .c..e..K.b...z.. 0060 c0 b5 48 bb be 7c 1b 44 e4 10 1a c4 d2 4c e6 9a ..H..|.D.....L.. 0070 e7 81 49 a9 35 98 9f 0c 60 18 58 97 ee 23 24 97 ..I.5...`.X..#$. 0080 07 96 .. Frame 13 (130 bytes on wire, 130 bytes captured) Arrival Time: May 12, 2005 15:02:53.864472000 Time delta from previous packet: 0.000510000 seconds Time since reference or first frame: 1.165346000 seconds Frame Number: 13 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:10:db:16:db:f6, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:10:db:16:db:f6 (00:10:db:16:db:f6) Type: IP (0x0800) Frame check sequence: 0xb98916fe (correct) Internet Protocol, Src Addr: 165.227.249.117 (165.227.249.117), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x04d9 (1241) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x36dc (correct) Source: 165.227.249.117 (165.227.249.117) Destination: 165.227.249.106 (165.227.249.106) Encapsulating Security Payload SPI: 0xa970b400 Sequence: 2 Data (84 bytes) 0000 00 a0 8e 72 1e 40 00 10 db 16 db f6 08 00 45 00 ...r.@........E. 0010 00 70 04 d9 00 00 40 32 36 dc a5 e3 f9 75 a5 e3 .p....@26....u.. 0020 f9 6a a9 70 b4 00 00 00 00 02 41 0e c4 70 7c 33 .j.p......A..p|3 0030 05 7e b9 b4 5d 78 8a ea 30 34 67 19 5e 8b 46 56 .~..]x..04g.^.FV 0040 66 cb a5 96 ff df 5c d2 c0 14 ce 48 56 62 81 4e f.....\....HVb.N 0050 ca bb 62 46 7f c6 73 e0 1a 3e bb a0 84 11 c8 2e ..bF..s..>...... 0060 42 7b 8b 7c eb 17 c6 9b 13 f4 86 fe c7 4f 66 dd B{.|.........Of. 0070 d7 f1 d9 5a 04 ec 59 0d fc c2 c5 6b b0 08 b9 89 ...Z..Y....k.... 0080 16 fe .. Frame 14 (130 bytes on wire, 130 bytes captured) Arrival Time: May 12, 2005 15:02:54.870899000 Time delta from previous packet: 1.006427000 seconds Time since reference or first frame: 2.171773000 seconds Frame Number: 14 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:10:db:16:db:f6 Destination: 00:10:db:16:db:f6 (00:10:db:16:db:f6) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0xea4485eb (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.117 (165.227.249.117) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0xd299 (53913) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x691b (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.117 (165.227.249.117) Encapsulating Security Payload SPI: 0x30d8827f Sequence: 3 Data (84 bytes) 0000 00 10 db 16 db f6 00 a0 8e 72 1e 40 08 00 45 00 .........r.@..E. 0010 00 70 d2 99 00 00 40 32 69 1b a5 e3 f9 6a a5 e3 .p....@2i....j.. 0020 f9 75 30 d8 82 7f 00 00 00 03 07 92 e3 74 8e d8 .u0..........t.. 0030 92 3c d5 8f 89 c7 67 6c de bb 2d 60 1b 14 cd ca .<....gl..-`.... 0040 ea d2 8b d0 b4 df ff f7 fa 34 02 40 71 62 82 5d .........4.@qb.] 0050 7a 44 bc 56 aa a1 5a a0 e6 72 54 d0 5d 26 fa 06 zD.V..Z..rT.]&.. 0060 22 c8 38 ee 90 25 ba 87 f4 c3 e6 2a 80 30 2c 7d ".8..%.....*.0,} 0070 35 43 a8 b6 6c 7e a6 d9 01 96 3b 67 ac d4 ea 44 5C..l~....;g...D 0080 85 eb .. Frame 15 (130 bytes on wire, 130 bytes captured) Arrival Time: May 12, 2005 15:02:54.871513000 Time delta from previous packet: 0.000614000 seconds Time since reference or first frame: 2.172387000 seconds Frame Number: 15 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:10:db:16:db:f6, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:10:db:16:db:f6 (00:10:db:16:db:f6) Type: IP (0x0800) Frame check sequence: 0xbd512a16 (correct) Internet Protocol, Src Addr: 165.227.249.117 (165.227.249.117), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x04da (1242) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x36db (correct) Source: 165.227.249.117 (165.227.249.117) Destination: 165.227.249.106 (165.227.249.106) Encapsulating Security Payload SPI: 0xa970b400 Sequence: 3 Data (84 bytes) 0000 00 a0 8e 72 1e 40 00 10 db 16 db f6 08 00 45 00 ...r.@........E. 0010 00 70 04 da 00 00 40 32 36 db a5 e3 f9 75 a5 e3 .p....@26....u.. 0020 f9 6a a9 70 b4 00 00 00 00 03 8b 7c eb 17 c6 9b .j.p.......|.... 0030 13 f4 9e 59 43 18 9d e3 fc fa ba 02 2b 27 42 a4 ...YC.......+'B. 0040 be 86 0a 5d 7a 3e 6c ed ba 3e d3 67 10 72 e1 8f ...]z>l..>.g.r.. 0050 e3 a0 0f 40 b5 8e a0 06 f1 75 bc 68 cd 36 c3 f2 ...@.....u.h.6.. 0060 3c 57 2f 75 06 79 5b 40 88 55 e2 80 c3 eb 77 69