Frame 1 (126 bytes on wire, 126 bytes captured) Arrival Time: Jun 8, 2005 13:40:49.956018000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 126 bytes Capture Length: 126 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:13:19:ca:ce:30 Destination: 00:13:19:ca:ce:30 (00:13:19:ca:ce:30) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0x8fe913ba (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.118 (165.227.249.118) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 108 Identification: 0x59e7 (23015) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xe1f1 (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.118 (165.227.249.118) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 88 Checksum: 0xb2b8 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xE9E5DCA2C2080AD3 Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 80 Security Association payload Next payload: NONE (0) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 40 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 32 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) 0000 00 13 19 ca ce 30 00 a0 8e 72 1e 40 08 00 45 00 .....0...r.@..E. 0010 00 6c 59 e7 00 00 40 11 e1 f1 a5 e3 f9 6a a5 e3 .lY...@......j.. 0020 f9 76 01 f4 01 f4 00 58 b2 b8 e9 e5 dc a2 c2 08 .v.....X........ 0030 0a d3 00 00 00 00 00 00 00 00 01 10 02 00 00 00 ................ 0040 00 00 00 00 00 50 00 00 00 34 00 00 00 01 00 00 .....P...4...... 0050 00 01 00 00 00 28 01 01 00 01 00 00 00 20 01 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 04 00 02 80 03 ................ 0070 00 01 80 0b 00 01 80 0c 70 80 8f e9 13 ba ........p..... Frame 2 (126 bytes on wire, 126 bytes captured) Arrival Time: Jun 8, 2005 13:40:49.969583000 Time delta from previous packet: 0.013565000 seconds Time since reference or first frame: 0.013565000 seconds Frame Number: 2 Packet Length: 126 bytes Capture Length: 126 bytes Ethernet II, Src: 00:13:19:ca:ce:30, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:13:19:ca:ce:30 (00:13:19:ca:ce:30) Type: IP (0x0800) Frame check sequence: 0xbb210439 (correct) Internet Protocol, Src Addr: 165.227.249.118 (165.227.249.118), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0xc0 (DSCP 0x30: Class Selector 6; ECN: 0x00) 1100 00.. = Differentiated Services Codepoint: Class Selector 6 (0x30) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 108 Identification: 0x0094 (148) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: UDP (0x11) Header checksum: 0x7b84 (correct) Source: 165.227.249.118 (165.227.249.118) Destination: 165.227.249.106 (165.227.249.106) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 88 Checksum: 0xd307 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xE9E5DCA2C2080AD3 Responder cookie: 0xB252F341A67793A4 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 80 Security Association payload Next payload: NONE (0) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 40 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 32 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) 0000 00 a0 8e 72 1e 40 00 13 19 ca ce 30 08 00 45 c0 ...r.@.....0..E. 0010 00 6c 00 94 00 00 ff 11 7b 84 a5 e3 f9 76 a5 e3 .l......{....v.. 0020 f9 6a 01 f4 01 f4 00 58 d3 07 e9 e5 dc a2 c2 08 .j.....X........ 0030 0a d3 b2 52 f3 41 a6 77 93 a4 01 10 02 00 00 00 ...R.A.w........ 0040 00 00 00 00 00 50 00 00 00 34 00 00 00 01 00 00 .....P...4...... 0050 00 01 00 00 00 28 01 01 00 01 00 00 00 20 01 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 04 00 02 80 03 ................ 0070 00 01 80 0b 00 01 80 0c 70 80 bb 21 04 39 ........p..!.9 Frame 3 (262 bytes on wire, 262 bytes captured) Arrival Time: Jun 8, 2005 13:40:50.095678000 Time delta from previous packet: 0.126095000 seconds Time since reference or first frame: 0.139660000 seconds Frame Number: 3 Packet Length: 262 bytes Capture Length: 262 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:13:19:ca:ce:30 Destination: 00:13:19:ca:ce:30 (00:13:19:ca:ce:30) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0x33d531d2 (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.118 (165.227.249.118) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 244 Identification: 0x59e8 (23016) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xe168 (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.118 (165.227.249.118) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 224 Checksum: 0x868a (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xE9E5DCA2C2080AD3 Responder cookie: 0xB252F341A67793A4 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 216 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: Vendor ID (13) Length: 24 Nonce Data Vendor ID payload Next payload: NONE (0) Length: 32 Vendor ID: unknown vendor ID: 0x03000014EFD828B153A11371E8335B3D... 0000 00 13 19 ca ce 30 00 a0 8e 72 1e 40 08 00 45 00 .....0...r.@..E. 0010 00 f4 59 e8 00 00 40 11 e1 68 a5 e3 f9 6a a5 e3 ..Y...@..h...j.. 0020 f9 76 01 f4 01 f4 00 e0 86 8a e9 e5 dc a2 c2 08 .v.............. 0030 0a d3 b2 52 f3 41 a6 77 93 a4 04 10 02 00 00 00 ...R.A.w........ 0040 00 00 00 00 00 d8 0a 00 00 84 de ad 37 82 2d 2d ............7.-- 0050 d0 8e d3 78 bd 5e 0f ff e6 bb 18 e7 c1 ad 4d ac ...x.^........M. 0060 2a 43 70 51 1e 56 ba 57 c6 30 93 2a ec e1 3d 58 *CpQ.V.W.0.*..=X 0070 08 75 aa 0d 4a 2c 14 35 be 89 8b cd a4 31 c4 bc .u..J,.5.....1.. 0080 59 25 a1 a5 01 d4 32 fa 38 84 40 47 ad 39 e7 98 Y%....2.8.@G.9.. 0090 00 d4 77 ed 4d f0 cd 78 77 1f 20 7e ae 94 44 2b ..w.M..xw. ~..D+ 00a0 7f 43 8c b8 13 a1 59 94 42 97 0c bd 69 f4 91 ae .C....Y.B...i... 00b0 3e 93 53 44 e0 4a 76 04 45 c2 37 00 15 f6 a0 38 >.SD.Jv.E.7....8 00c0 b1 8c ee 87 a3 91 0c 1d 9a 26 0d 00 00 18 2b 57 .........&....+W 00d0 da ed 20 85 2e c2 69 fd 25 10 79 79 04 18 ef 24 .. ...i.%.yy...$ 00e0 38 aa 00 00 00 20 03 00 00 14 ef d8 28 b1 53 a1 8.... ......(.S. 00f0 13 71 e8 33 5b 3d e3 75 cc 0b 00 00 00 08 00 06 .q.3[=.u........ 0100 00 02 33 d5 31 d2 ..3.1. Frame 4 (302 bytes on wire, 302 bytes captured) Arrival Time: Jun 8, 2005 13:40:50.112726000 Time delta from previous packet: 0.017048000 seconds Time since reference or first frame: 0.156708000 seconds Frame Number: 4 Packet Length: 302 bytes Capture Length: 302 bytes Ethernet II, Src: 00:13:19:ca:ce:30, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:13:19:ca:ce:30 (00:13:19:ca:ce:30) Type: IP (0x0800) Frame check sequence: 0x26ac8d58 (correct) Internet Protocol, Src Addr: 165.227.249.118 (165.227.249.118), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0xc0 (DSCP 0x30: Class Selector 6; ECN: 0x00) 1100 00.. = Differentiated Services Codepoint: Class Selector 6 (0x30) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 284 Identification: 0x0095 (149) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: UDP (0x11) Header checksum: 0x7ad3 (correct) Source: 165.227.249.118 (165.227.249.118) Destination: 165.227.249.106 (165.227.249.106) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 264 Checksum: 0x9cd0 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xE9E5DCA2C2080AD3 Responder cookie: 0xB252F341A67793A4 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 256 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: Vendor ID (13) Length: 24 Nonce Data Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: unknown vendor ID: 0x12F5F28C457168A9702D9FE274CC0100 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-dpd-00.txt Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: unknown vendor ID: 0x4795545CA67693A41FBC0A3FE988B6D4 Vendor ID payload Next payload: NONE (0) Length: 12 Vendor ID: draft-beaulieu-ike-xauth-02.txt 0000 00 a0 8e 72 1e 40 00 13 19 ca ce 30 08 00 45 c0 ...r.@.....0..E. 0010 01 1c 00 95 00 00 ff 11 7a d3 a5 e3 f9 76 a5 e3 ........z....v.. 0020 f9 6a 01 f4 01 f4 01 08 9c d0 e9 e5 dc a2 c2 08 .j.............. 0030 0a d3 b2 52 f3 41 a6 77 93 a4 04 10 02 00 00 00 ...R.A.w........ 0040 00 00 00 00 01 00 0a 00 00 84 f7 0a 54 37 ff 1a ............T7.. 0050 05 46 e5 5e 93 0e 69 7f e9 dd af 7a c3 99 d9 77 .F.^..i....z...w 0060 02 3c 8a 06 c7 77 35 95 eb 02 91 e2 0e 19 ff db .<...w5......... 0070 de 4f 4d cb 74 29 06 ca 1a 56 95 95 01 36 e7 9f .OM.t)...V...6.. 0080 0d 19 2e d5 7e 19 a6 ba e6 b7 9c ab d2 88 ff 9b ....~........... 0090 56 0b 9c 16 bd 0e db 63 0e fa 4a 14 f0 98 cf 1a V......c..J..... 00a0 38 53 d8 08 f5 30 05 6c c2 e5 8b e8 d5 c6 d0 46 8S...0.l.......F 00b0 06 a2 27 f3 66 e7 e1 96 a4 ce 65 5c 2a f3 c1 3b ..'.f.....e\*..; 00c0 b8 2c 86 d5 0c 17 a3 36 c1 68 0d 00 00 18 3d 54 .,.....6.h....=T 00d0 73 7b 4f f6 86 0f 6b 9f 84 3f be e7 44 a7 6a 07 s{O...k..?..D.j. 00e0 52 21 0d 00 00 14 12 f5 f2 8c 45 71 68 a9 70 2d R!........Eqh.p- 00f0 9f e2 74 cc 01 00 0d 00 00 14 af ca d7 13 68 a1 ..t...........h. 0100 f1 c9 6b 86 96 fc 77 57 01 00 0d 00 00 14 47 95 ..k...wW......G. 0110 54 5c a6 76 93 a4 1f bc 0a 3f e9 88 b6 d4 00 00 T\.v.....?...... 0120 00 0c 09 00 26 89 df d6 b7 12 26 ac 8d 58 ....&.....&..X Frame 5 (138 bytes on wire, 138 bytes captured) Arrival Time: Jun 8, 2005 13:40:50.266670000 Time delta from previous packet: 0.153944000 seconds Time since reference or first frame: 0.310652000 seconds Frame Number: 5 Packet Length: 138 bytes Capture Length: 138 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:13:19:ca:ce:30 Destination: 00:13:19:ca:ce:30 (00:13:19:ca:ce:30) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0xc6253f53 (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.118 (165.227.249.118) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x59e9 (23017) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xe1e3 (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.118 (165.227.249.118) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 100 Checksum: 0x74fc (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xE9E5DCA2C2080AD3 Responder cookie: 0xB252F341A67793A4 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 92 Encrypted payload (64 bytes) 0000 00 13 19 ca ce 30 00 a0 8e 72 1e 40 08 00 45 00 .....0...r.@..E. 0010 00 78 59 e9 00 00 40 11 e1 e3 a5 e3 f9 6a a5 e3 .xY...@......j.. 0020 f9 76 01 f4 01 f4 00 64 74 fc e9 e5 dc a2 c2 08 .v.....dt....... 0030 0a d3 b2 52 f3 41 a6 77 93 a4 05 10 02 01 00 00 ...R.A.w........ 0040 00 00 00 00 00 5c 92 f8 49 11 72 0a f8 c8 bb 48 .....\..I.r....H 0050 4f 82 60 be f0 00 86 9e 63 3a 29 3a c4 22 d2 a5 O.`.....c:):.".. 0060 6a 72 63 24 22 94 b1 a8 99 ff 7f 86 d3 c2 71 23 jrc$".........q# 0070 59 b2 ae 81 cd d0 fe ca 93 79 c5 c0 04 a9 98 75 Y........y.....u 0080 ed 8e a5 11 22 ca c6 25 3f 53 ...."..%?S Frame 6 (114 bytes on wire, 114 bytes captured) Arrival Time: Jun 8, 2005 13:40:50.268377000 Time delta from previous packet: 0.001707000 seconds Time since reference or first frame: 0.312359000 seconds Frame Number: 6 Packet Length: 114 bytes Capture Length: 114 bytes Ethernet II, Src: 00:13:19:ca:ce:30, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:13:19:ca:ce:30 (00:13:19:ca:ce:30) Type: IP (0x0800) Frame check sequence: 0x5ef894c8 (correct) Internet Protocol, Src Addr: 165.227.249.118 (165.227.249.118), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0xc0 (DSCP 0x30: Class Selector 6; ECN: 0x00) 1100 00.. = Differentiated Services Codepoint: Class Selector 6 (0x30) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0x0096 (150) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: UDP (0x11) Header checksum: 0x7b8e (correct) Source: 165.227.249.118 (165.227.249.118) Destination: 165.227.249.106 (165.227.249.106) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 76 Checksum: 0xed97 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xE9E5DCA2C2080AD3 Responder cookie: 0xB252F341A67793A4 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 68 Encrypted payload (40 bytes) 0000 00 a0 8e 72 1e 40 00 13 19 ca ce 30 08 00 45 c0 ...r.@.....0..E. 0010 00 60 00 96 00 00 ff 11 7b 8e a5 e3 f9 76 a5 e3 .`......{....v.. 0020 f9 6a 01 f4 01 f4 00 4c ed 97 e9 e5 dc a2 c2 08 .j.....L........ 0030 0a d3 b2 52 f3 41 a6 77 93 a4 05 10 02 01 00 00 ...R.A.w........ 0040 00 00 00 00 00 44 b1 0e 24 78 99 7b b6 bd d7 0c .....D..$x.{.... 0050 4a 42 39 73 7b d5 07 80 8d 89 9d 3d 60 8b c8 69 JB9s{......=`..i 0060 93 43 2b 23 0c c2 a4 7d ab 7a 9e ce 43 3f 5e f8 .C+#...}.z..C?^. 0070 94 c8 .. Frame 7 (338 bytes on wire, 338 bytes captured) Arrival Time: Jun 8, 2005 13:40:50.395406000 Time delta from previous packet: 0.127029000 seconds Time since reference or first frame: 0.439388000 seconds Frame Number: 7 Packet Length: 338 bytes Capture Length: 338 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:13:19:ca:ce:30 Destination: 00:13:19:ca:ce:30 (00:13:19:ca:ce:30) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0x064f8a02 (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.118 (165.227.249.118) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 320 Identification: 0x59ea (23018) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xe11a (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.118 (165.227.249.118) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 300 Checksum: 0x21a3 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xE9E5DCA2C2080AD3 Responder cookie: 0xB252F341A67793A4 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x331324DB Length: 292 Encrypted payload (264 bytes) 0000 00 13 19 ca ce 30 00 a0 8e 72 1e 40 08 00 45 00 .....0...r.@..E. 0010 01 40 59 ea 00 00 40 11 e1 1a a5 e3 f9 6a a5 e3 .@Y...@......j.. 0020 f9 76 01 f4 01 f4 01 2c 21 a3 e9 e5 dc a2 c2 08 .v.....,!....... 0030 0a d3 b2 52 f3 41 a6 77 93 a4 08 10 20 01 33 13 ...R.A.w.... .3. 0040 24 db 00 00 01 24 51 ac c4 78 2d 30 63 9a 52 b3 $....$Q..x-0c.R. 0050 3d 51 ae dc 35 2b a3 d2 c6 7a e8 8f 5f 94 3d 1f =Q..5+...z.._.=. 0060 ca de b2 39 83 1c 27 27 bf 8c 4a 59 25 a7 64 5f ...9..''..JY%.d_ 0070 4c bd dd cb d5 ce 7e 14 0c aa 87 e3 d6 03 62 44 L.....~.......bD 0080 e6 0d 13 49 c3 99 f0 42 78 d4 5d b1 2b d3 81 5d ...I...Bx.].+..] 0090 e3 be 37 7e e4 f5 ff de ba 96 8c 61 6e d3 5b 32 ..7~.......an.[2 00a0 81 18 8a 6c 76 fe 3f 3f a5 2c 79 1f 36 6b 13 25 ...lv.??.,y.6k.% 00b0 d3 14 01 f7 d8 e6 e0 55 9b ac 3b 85 15 32 3c 51 .......U..;..2....._..q.y 00f0 06 96 1a 88 dd b2 26 d3 93 f6 12 3c bd 92 86 14 ......&....<.... 0100 2c 47 bb bf 2d f0 24 ca 4e 20 4d fa 20 79 ed db ,G..-.$.N M. y.. 0110 ee 69 82 11 ba de 6d 5a 91 15 ac f1 b9 32 53 39 .i....mZ.....2S9 0120 07 5d 3a 60 c5 42 d6 d6 a8 fb db ac 47 03 d9 42 .]:`.B......G..B 0130 e1 fe 80 37 ef e1 76 9c fa 22 0c 0c 7b c8 f6 b7 ...7..v.."..{... 0140 10 b6 11 cc 4c 08 f9 81 4f 4a 38 8d fb 3e 06 4f ....L...OJ8..>.O 0150 8a 02 .. Frame 8 (370 bytes on wire, 370 bytes captured) Arrival Time: Jun 8, 2005 13:40:50.424990000 Time delta from previous packet: 0.029584000 seconds Time since reference or first frame: 0.468972000 seconds Frame Number: 8 Packet Length: 370 bytes Capture Length: 370 bytes Ethernet II, Src: 00:13:19:ca:ce:30, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:13:19:ca:ce:30 (00:13:19:ca:ce:30) Type: IP (0x0800) Frame check sequence: 0x14172d18 (correct) Internet Protocol, Src Addr: 165.227.249.118 (165.227.249.118), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0xc0 (DSCP 0x30: Class Selector 6; ECN: 0x00) 1100 00.. = Differentiated Services Codepoint: Class Selector 6 (0x30) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 352 Identification: 0x0097 (151) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: UDP (0x11) Header checksum: 0x7a8d (correct) Source: 165.227.249.118 (165.227.249.118) Destination: 165.227.249.106 (165.227.249.106) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 332 Checksum: 0xc8c5 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xE9E5DCA2C2080AD3 Responder cookie: 0xB252F341A67793A4 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x331324DB Length: 324 Encrypted payload (296 bytes) 0000 00 a0 8e 72 1e 40 00 13 19 ca ce 30 08 00 45 c0 ...r.@.....0..E. 0010 01 60 00 97 00 00 ff 11 7a 8d a5 e3 f9 76 a5 e3 .`......z....v.. 0020 f9 6a 01 f4 01 f4 01 4c c8 c5 e9 e5 dc a2 c2 08 .j.....L........ 0030 0a d3 b2 52 f3 41 a6 77 93 a4 08 10 20 01 33 13 ...R.A.w.... .3. 0040 24 db 00 00 01 44 53 1a 59 d7 68 ca a5 1d 18 94 $....DS.Y.h..... 0050 c8 59 5e 2f 27 28 7a f6 2e 4f 20 e9 06 5b 86 54 .Y^/'(z..O ..[.T 0060 26 a5 7b 65 80 ed 0a 5d 77 ff 4a 86 c4 64 3c 5a &.{e...]w.J..d..c....m.u+I 0060 55 04 f2 9c 90 cc 39 a2 57 d4 53 ff 4a c4 85 b7 U.....9.W.S.J... 0070 aa e2 c3 29 bf e0 df fe 6f 12 42 30 bb ab 37 2a ...)....o.B0..7* 0080 a7 a2 .. Frame 11 (130 bytes on wire, 130 bytes captured) Arrival Time: Jun 8, 2005 13:40:51.090972000 Time delta from previous packet: 0.001483000 seconds Time since reference or first frame: 1.134954000 seconds Frame Number: 11 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:13:19:ca:ce:30, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:13:19:ca:ce:30 (00:13:19:ca:ce:30) Type: IP (0x0800) Frame check sequence: 0x601217a6 (correct) Internet Protocol, Src Addr: 165.227.249.118 (165.227.249.118), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0098 (152) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 127 Protocol: ESP (0x32) Header checksum: 0xfc1b (correct) Source: 165.227.249.118 (165.227.249.118) Destination: 165.227.249.106 (165.227.249.106) Encapsulating Security Payload SPI: 0x68529400 Sequence: 1 Data (84 bytes) 0000 00 a0 8e 72 1e 40 00 13 19 ca ce 30 08 00 45 00 ...r.@.....0..E. 0010 00 70 00 98 00 00 7f 32 fc 1b a5 e3 f9 76 a5 e3 .p.....2.....v.. 0020 f9 6a 68 52 94 00 00 00 00 01 f9 5c 8f c1 b1 20 .jhR.......\... 0030 17 99 a0 27 c2 9c 60 58 fa 2f 64 3c b6 c7 1e d7 ...'..`X./d<.... 0040 9d b6 7f c2 76 f0 2a 7e 64 c9 9b a2 0f d9 c8 f5 ....v.*~d....... 0050 8d 8b 5e 77 16 77 19 24 75 b0 d2 0c 8a 91 23 ac ..^w.w.$u.....#. 0060 8b d1 21 ec 2a 15 fa 65 91 69 79 31 a1 b1 f4 31 ..!.*..e.iy1...1 0070 5c b0 87 84 88 12 11 72 24 b5 ac 28 83 3e 60 12 \......r$..(.>`. 0080 17 a6 .. Frame 12 (130 bytes on wire, 130 bytes captured) Arrival Time: Jun 8, 2005 13:40:51.100710000 Time delta from previous packet: 0.009738000 seconds Time since reference or first frame: 1.144692000 seconds Frame Number: 12 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:13:19:ca:ce:30 Destination: 00:13:19:ca:ce:30 (00:13:19:ca:ce:30) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0x0722ac54 (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.118 (165.227.249.118) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x59ed (23021) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0xe1c6 (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.118 (165.227.249.118) Encapsulating Security Payload SPI: 0x69bde023 Sequence: 2 Data (84 bytes) 0000 00 13 19 ca ce 30 00 a0 8e 72 1e 40 08 00 45 00 .....0...r.@..E. 0010 00 70 59 ed 00 00 40 32 e1 c6 a5 e3 f9 6a a5 e3 .pY...@2.....j.. 0020 f9 76 69 bd e0 23 00 00 00 02 14 28 4d c9 75 d1 .vi..#.....(M.u. 0030 0a 62 ea 5d 38 84 84 23 87 ac 70 40 f9 03 d1 fd .b.]8..#..p@.... 0040 67 6e 3a 39 79 b7 68 3b 12 9f 2d dc f6 e1 be 0f gn:9y.h;..-..... 0050 e0 03 93 58 19 b0 64 65 aa 71 d0 56 61 9b 1c ad ...X..de.q.Va... 0060 89 e9 2d 50 c1 6e 48 ec c3 ba 25 90 6d 5f 7e cb ..-P.nH...%.m_~. 0070 5e f0 ae 3f 3a b4 d4 71 b5 d2 84 69 73 36 07 22 ^..?:..q...is6." 0080 ac 54 .T Frame 13 (130 bytes on wire, 130 bytes captured) Arrival Time: Jun 8, 2005 13:40:51.101946000 Time delta from previous packet: 0.001236000 seconds Time since reference or first frame: 1.145928000 seconds Frame Number: 13 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:13:19:ca:ce:30, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:13:19:ca:ce:30 (00:13:19:ca:ce:30) Type: IP (0x0800) Frame check sequence: 0x8f91b6ca (correct) Internet Protocol, Src Addr: 165.227.249.118 (165.227.249.118), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0099 (153) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 127 Protocol: ESP (0x32) Header checksum: 0xfc1a (correct) Source: 165.227.249.118 (165.227.249.118) Destination: 165.227.249.106 (165.227.249.106) Encapsulating Security Payload SPI: 0x68529400 Sequence: 2 Data (84 bytes) 0000 00 a0 8e 72 1e 40 00 13 19 ca ce 30 08 00 45 00 ...r.@.....0..E. 0010 00 70 00 99 00 00 7f 32 fc 1a a5 e3 f9 76 a5 e3 .p.....2.....v.. 0020 f9 6a 68 52 94 00 00 00 00 02 79 31 a1 b1 f4 31 .jhR......y1...1 0030 5c b0 3e b1 3c 1a df 0a a5 40 4c 3f 8a 22 bb 9c \.>.<....@L?.".. 0040 1a 0c 51 73 21 83 e0 b4 79 aa a2 c7 7a 62 6f bb ..Qs!...y...zbo. 0050 00 48 08 8b 34 9d 7a 1b 75 4b e3 36 86 70 8b ca .H..4.z.uK.6.p.. 0060 67 b9 04 38 89 47 69 32 13 73 24 95 69 39 9d 66 g..8.Gi2.s$.i9.f 0070 f0 2c f2 14 8b 9d e1 1b ea 96 00 d6 ee 80 8f 91 .,.............. 0080 b6 ca .. Frame 14 (130 bytes on wire, 130 bytes captured) Arrival Time: Jun 8, 2005 13:40:52.108496000 Time delta from previous packet: 1.006550000 seconds Time since reference or first frame: 2.152478000 seconds Frame Number: 14 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:13:19:ca:ce:30 Destination: 00:13:19:ca:ce:30 (00:13:19:ca:ce:30) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0x7726eeb9 (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.118 (165.227.249.118) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x59ee (23022) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0xe1c5 (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.118 (165.227.249.118) Encapsulating Security Payload SPI: 0x69bde023 Sequence: 3 Data (84 bytes) 0000 00 13 19 ca ce 30 00 a0 8e 72 1e 40 08 00 45 00 .....0...r.@..E. 0010 00 70 59 ee 00 00 40 32 e1 c5 a5 e3 f9 6a a5 e3 .pY...@2.....j.. 0020 f9 76 69 bd e0 23 00 00 00 03 13 35 64 5f d3 a2 .vi..#.....5d_.. 0030 50 16 ab dc 99 aa f0 29 f6 ae de e5 71 d8 5b da P......)....q.[. 0040 e7 e9 13 53 e1 f9 e7 54 ee a3 a0 c2 0c 35 48 a8 ...S...T.....5H. 0050 9f e9 a4 0c 63 3b 98 61 bb c9 e7 20 7d 94 71 ac ....c;.a... }.q. 0060 ff dd 3b c1 15 45 77 d0 ad 17 2d ee 06 67 a4 b4 ..;..Ew...-..g.. 0070 e4 86 60 29 98 78 7f b4 45 56 56 68 8f a4 77 26 ..`).x..EVVh..w& 0080 ee b9 .. Frame 15 (130 bytes on wire, 130 bytes captured) Arrival Time: Jun 8, 2005 13:40:52.109812000 Time delta from previous packet: 0.001316000 seconds Time since reference or first frame: 2.153794000 seconds Frame Number: 15 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:13:19:ca:ce:30, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:13:19:ca:ce:30 (00:13:19:ca:ce:30) Type: IP (0x0800) Frame check sequence: 0x6b2f07e0 (correct) Internet Protocol, Src Addr: 165.227.249.118 (165.227.249.118), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x009a (154) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 127 Protocol: ESP (0x32) Header checksum: 0xfc19 (correct) Source: 165.227.249.118 (165.227.249.118) Destination: 165.227.249.106 (165.227.249.106) Encapsulating Security Payload SPI: 0x68529400 Sequence: 3 Data (84 bytes) 0000 00 a0 8e 72 1e 40 00 13 19 ca ce 30 08 00 45 00 ...r.@.....0..E. 0010 00 70 00 9a 00 00 7f 32 fc 19 a5 e3 f9 76 a5 e3 .p.....2.....v.. 0020 f9 6a 68 52 94 00 00 00 00 03 24 95 69 39 9d 66 .jhR......$.i9.f 0030 f0 2c 07 75 a6 21 0e 90 85 80 c6 b6 5d 4d 2e 62 .,.u.!......]M.b 0040 8c 30 71 80 11 14 e8 48 09 70 88 c7 79 a7 2d 3a .0q....H.p..y.-: 0050 39 ca c4 c9 8d ea 62 22 43 c6 ba 4e 2a b5 0a 42 9.....b"C..N*..B 0060 c9 b6 ef cd 7e 24 b2 05 03 97 63 a9 d7 21 08 0b ....~$....c..!.. 0070 09 ef f4 2a 96 6a 8a b4 0c b6 44 cf d2 3d 6b 2f ...*.j....D..=k/ 0080 07 e0 .. Frame 16 (130 bytes on wire, 130 bytes captured) Arrival Time: Jun 8, 2005 13:40:53.108604000 Time delta from previous packet: 0.998792000 seconds Time since reference or first frame: 3.152586000 seconds Frame Number: 16 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:13:19:ca:ce:30 Destination: 00:13:19:ca:ce:30 (00:13:19:ca:ce:30) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0x24146232 (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.118 (165.227.249.118) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x59ef (23023) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0xe1c4 (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.118 (165.227.249.118) Encapsulating Security Payload SPI: 0x69bde023 Sequence: 4 Data (84 bytes) 0000 00 13 19 ca ce 30 00 a0 8e 72 1e 40 08 00 45 00 .....0...r.@..E. 0010 00 70 59 ef 00 00 40 32 e1 c4 a5 e3 f9 6a a5 e3 .pY...@2.....j.. 0020 f9 76 69 bd e0 23 00 00 00 04 2f 86 2b b7 c1 13 .vi..#..../.+... 0030 a0 11 7c 8f 20 bb 84 61 c7 0f e3 40 7b 55 65 83 ..|. ..a...@{Ue. 0040 9f b6 e4 a4 57 89 a8 7b 62 a2 0e ea 14 43 91 b8 ....W..{b....C.. 0050 75 ed f1 c7 1b 2d f2 03 22 e7 94 87 35 fc d1 19 u....-.."...5... 0060 23 a2 f3 24 9f 43 5d 49 11 a8 01 09 80 f8 46 bd #..$.C]I......F. 0070 11 d0 7b e7 89 e2 18 23 e1 8f 34 f7 a3 54 24 14 ..{....#..4..T$. 0080 62 32 b2 Frame 17 (130 bytes on wire, 130 bytes captured) Arrival Time: Jun 8, 2005 13:40:53.109879000 Time delta from previous packet: 0.001275000 seconds Time since reference or first frame: 3.153861000 seconds Frame Number: 17 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:13:19:ca:ce:30, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:13:19:ca:ce:30 (00:13:19:ca:ce:30) Type: IP (0x0800) Frame check sequence: 0x10e69a57 (correct) Internet Protocol, Src Addr: 165.227.249.118 (165.227.249.118), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x009b (155) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 127 Protocol: ESP (0x32) Header checksum: 0xfc18 (correct) Source: 165.227.249.118 (165.227.249.118) Destination: 165.227.249.106 (165.227.249.106) Encapsulating Security Payload SPI: 0x68529400 Sequence: 4 Data (84 bytes) 0000 00 a0 8e 72 1e 40 00 13 19 ca ce 30 08 00 45 00 ...r.@.....0..E. 0010 00 70 00 9b 00 00 7f 32 fc 18 a5 e3 f9 76 a5 e3 .p.....2.....v.. 0020 f9 6a 68 52 94 00 00 00 00 04 63 a9 d7 21 08 0b .jhR......c..!.. 0030 09 ef d5 95 00 7a 07 60 b4 c1 31 e3 95 ca 68 18 .....z.`..1...h. 0040 0a de a4 20 8b d0 6e 02 ca 9f 1a 9d 6d c8 ba 89 ... ..n.....m... 0050 28 21 0b e7 9e b8 33 fd b0 ae 39 56 88 74 08 65 (!....3...9V.t.e 0060 38 54 1b 31 66 f4 6a 85 42 17 cf e4 f5 65 3f df 8T.1f.j.B....e?. 0070 2e 69 1c a9 9c 54 fd 0f 8c b6 9f 80 d6 ea 10 e6 .i...T.......... 0080 9a 57 .W