Frame 1 (130 bytes on wire, 130 bytes captured)
    Arrival Time: May 24, 2005 10:41:12.721927000
    Time delta from previous packet: 0.000000000 seconds
    Time since reference or first frame: 0.000000000 seconds
    Frame Number: 1
    Packet Length: 130 bytes
    Capture Length: 130 bytes
Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:0c:29:f7:87:89
    Destination: 00:0c:29:f7:87:89 (00:0c:29:f7:87:89)
    Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40)
    Type: IP (0x0800)
    Frame check sequence: 0x1ebe4c67 (correct)
Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.122 (165.227.249.122)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 112
    Identification: 0x7548 (30024)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: ESP (0x32)
    Header checksum: 0xc667 (correct)
    Source: 165.227.249.106 (165.227.249.106)
    Destination: 165.227.249.122 (165.227.249.122)
Encapsulating Security Payload
    SPI: 0xa06212e4
    Sequence: 5
    Data (84 bytes)

0000  00 0c 29 f7 87 89 00 a0 8e 72 1e 40 08 00 45 00   ..)......r.@..E.
0010  00 70 75 48 00 00 40 32 c6 67 a5 e3 f9 6a a5 e3   .puH..@2.g...j..
0020  f9 7a a0 62 12 e4 00 00 00 05 4e 38 3c 49 bd 04   .z.b......N8<I..
0030  fe 4d e7 67 59 e5 93 81 0d b6 09 4f e9 b0 cc 06   .M.gY......O....
0040  c2 f8 38 68 25 74 f6 80 42 bd 6f 48 41 69 34 6e   ..8h%t..B.oHAi4n
0050  2e 9f 04 2c d5 c5 5d 0b 1e 2f 0a b2 a6 f2 24 89   ...,..]../....$.
0060  bd a8 fa f1 47 64 a4 22 48 03 d9 43 d9 56 4f 02   ....Gd."H..C.VO.
0070  d3 a2 19 e3 99 fa 52 6b 83 db 11 bf 63 06 1e be   ......Rk....c...
0080  4c 67                                             Lg

Frame 2 (174 bytes on wire, 174 bytes captured)
    Arrival Time: May 24, 2005 10:41:12.729865000
    Time delta from previous packet: 0.007938000 seconds
    Time since reference or first frame: 0.007938000 seconds
    Frame Number: 2
    Packet Length: 174 bytes
    Capture Length: 174 bytes
Ethernet II, Src: 00:0c:29:f7:87:89, Dst: 00:a0:8e:72:1e:40
    Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40)
    Source: 00:0c:29:f7:87:89 (00:0c:29:f7:87:89)
    Type: IP (0x0800)
    Frame check sequence: 0xda982235 (correct)
Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.106 (165.227.249.106)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 156
    Identification: 0x0000 (0)
    Flags: 0x04
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0xfba4 (correct)
    Source: 165.227.249.122 (165.227.249.122)
    Destination: 165.227.249.106 (165.227.249.106)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 136
    Checksum: 0xc422 (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x7942187F483944BA
    Responder cookie: 0x0000000000000000
    Next payload: Security Association (1)
    Version: 1.0
    Exchange type: Identity Protection (Main Mode) (2)
    Flags
        .... ...0 = No encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x00000000
    Length: 128
    Security Association payload
        Next payload: Vendor ID (13)
        Length: 56
        Domain of interpretation: IPSEC (1)
        Situation: IDENTITY (1)
        Proposal payload # 1
            Next payload: NONE (0)
            Length: 44
            Proposal number: 1
            Protocol ID: ISAKMP (1)
            SPI size: 0
            Number of transforms: 1
            Transform payload # 1
                Next payload: NONE (0)
                Length: 36
                Transform number: 1
                Transform ID: KEY_IKE (1)
                Encryption-Algorithm (1): 3DES-CBC (5)
                Hash-Algorithm (2): SHA (2)
                Authentication-Method (3): PSK (1)
                Group-Description (4): Alternate 1024-bit MODP group (2)
                Life-Type (11): Seconds (1)
                Life-Duration (12): Duration-Value (28800)
    Vendor ID payload
        Next payload: NONE (0)
        Length: 44
        Vendor ID: Check Point
            Check Point Product: VPN-1
            Version: NG with Application Intelligence R55

0000  00 a0 8e 72 1e 40 00 0c 29 f7 87 89 08 00 45 00   ...r.@..).....E.
0010  00 9c 00 00 40 00 40 11 fb a4 a5 e3 f9 7a a5 e3   ....@.@......z..
0020  f9 6a 01 f4 01 f4 00 88 c4 22 79 42 18 7f 48 39   .j......."yB..H9
0030  44 ba 00 00 00 00 00 00 00 00 01 10 02 00 00 00   D...............
0040  00 00 00 00 00 80 0d 00 00 38 00 00 00 01 00 00   .........8......
0050  00 01 00 00 00 2c 01 01 00 01 00 00 00 24 01 01   .....,.......$..
0060  00 00 80 01 00 05 80 02 00 02 80 03 00 01 80 04   ................
0070  00 02 80 0b 00 01 00 0c 00 04 00 00 70 80 00 00   ............p...
0080  00 2c f4 ed 19 e0 c1 14 eb 51 6f aa ac 0e e3 7d   .,.......Qo....}
0090  af 28 07 b4 38 1f 00 00 00 01 00 00 13 8d 00 00   .(..8...........
00a0  00 00 00 00 00 00 18 80 00 00 da 98 22 35         ............"5

Frame 3 (130 bytes on wire, 130 bytes captured)
    Arrival Time: May 24, 2005 10:41:12.732680000
    Time delta from previous packet: 0.002815000 seconds
    Time since reference or first frame: 0.010753000 seconds
    Frame Number: 3
    Packet Length: 130 bytes
    Capture Length: 130 bytes
Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:0c:29:f7:87:89
    Destination: 00:0c:29:f7:87:89 (00:0c:29:f7:87:89)
    Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40)
    Type: IP (0x0800)
    Frame check sequence: 0x7301e97d (correct)
Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.122 (165.227.249.122)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 112
    Identification: 0x7549 (30025)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0xc687 (correct)
    Source: 165.227.249.106 (165.227.249.106)
    Destination: 165.227.249.122 (165.227.249.122)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 92
    Checksum: 0x7aa0 (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x45773FFB60B77C96
    Responder cookie: 0xAEE4ECCA3051C09A
    Next payload: Hash (8)
    Version: 1.0
    Exchange type: Informational (5)
    Flags
        .... ...1 = Encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0xBBFE14C5
    Length: 84
    Encrypted payload (56 bytes)

0000  00 0c 29 f7 87 89 00 a0 8e 72 1e 40 08 00 45 00   ..)......r.@..E.
0010  00 70 75 49 00 00 40 11 c6 87 a5 e3 f9 6a a5 e3   .puI..@......j..
0020  f9 7a 01 f4 01 f4 00 5c 7a a0 45 77 3f fb 60 b7   .z.....\z.Ew?.`.
0030  7c 96 ae e4 ec ca 30 51 c0 9a 08 10 05 01 bb fe   |.....0Q........
0040  14 c5 00 00 00 54 f0 98 48 87 18 1a a7 d5 5a 34   .....T..H.....Z4
0050  5b 31 90 7d f2 a1 fe 76 6e e9 67 61 18 a8 f1 80   [1.}...vn.ga....
0060  fc b6 68 02 01 76 d8 63 83 f6 6a 24 a3 44 9d 71   ..h..v.c..j$.D.q
0070  bf 3c 66 2e 51 0e 30 fe 19 63 34 b9 01 04 73 01   .<f.Q.0..c4...s.
0080  e9 7d                                             .}

Frame 4 (122 bytes on wire, 122 bytes captured)
    Arrival Time: May 24, 2005 10:41:12.734141000
    Time delta from previous packet: 0.001461000 seconds
    Time since reference or first frame: 0.012214000 seconds
    Frame Number: 4
    Packet Length: 122 bytes
    Capture Length: 122 bytes
Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:0c:29:f7:87:89
    Destination: 00:0c:29:f7:87:89 (00:0c:29:f7:87:89)
    Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40)
    Type: IP (0x0800)
    Frame check sequence: 0x2311b127 (correct)
Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.122 (165.227.249.122)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 104
    Identification: 0x754a (30026)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0xc68e (correct)
    Source: 165.227.249.106 (165.227.249.106)
    Destination: 165.227.249.122 (165.227.249.122)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 84
    Checksum: 0x6d08 (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x45773FFB60B77C96
    Responder cookie: 0xAEE4ECCA3051C09A
    Next payload: Hash (8)
    Version: 1.0
    Exchange type: Informational (5)
    Flags
        .... ...1 = Encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x086D8774
    Length: 76
    Encrypted payload (48 bytes)

0000  00 0c 29 f7 87 89 00 a0 8e 72 1e 40 08 00 45 00   ..)......r.@..E.
0010  00 68 75 4a 00 00 40 11 c6 8e a5 e3 f9 6a a5 e3   .huJ..@......j..
0020  f9 7a 01 f4 01 f4 00 54 6d 08 45 77 3f fb 60 b7   .z.....Tm.Ew?.`.
0030  7c 96 ae e4 ec ca 30 51 c0 9a 08 10 05 01 08 6d   |.....0Q.......m
0040  87 74 00 00 00 4c a8 de 2d 05 e6 13 cb 75 6b ac   .t...L..-....uk.
0050  93 95 5a a8 34 7c ec db 87 4b 53 27 c7 73 15 af   ..Z.4|...KS'.s..
0060  20 7e 01 ac 9f 1f 7b e8 59 de 2c 43 5f ba 2f 62    ~....{.Y.,C_./b
0070  2b 6a 91 b8 f9 35 23 11 b1 27                     +j...5#..'

Frame 5 (126 bytes on wire, 126 bytes captured)
    Arrival Time: May 24, 2005 10:41:12.858987000
    Time delta from previous packet: 0.124846000 seconds
    Time since reference or first frame: 0.137060000 seconds
    Frame Number: 5
    Packet Length: 126 bytes
    Capture Length: 126 bytes
Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:0c:29:f7:87:89
    Destination: 00:0c:29:f7:87:89 (00:0c:29:f7:87:89)
    Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40)
    Type: IP (0x0800)
    Frame check sequence: 0x1ce3fde4 (correct)
Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.122 (165.227.249.122)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 108
    Identification: 0x754b (30027)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0xc689 (correct)
    Source: 165.227.249.106 (165.227.249.106)
    Destination: 165.227.249.122 (165.227.249.122)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 88
    Checksum: 0x8f4e (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x7942187F483944BA
    Responder cookie: 0xAEE4ECCAC1A03AC5
    Next payload: Security Association (1)
    Version: 1.0
    Exchange type: Identity Protection (Main Mode) (2)
    Flags
        .... ...0 = No encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x00000000
    Length: 80
    Security Association payload
        Next payload: NONE (0)
        Length: 52
        Domain of interpretation: IPSEC (1)
        Situation: IDENTITY (1)
        Proposal payload # 1
            Next payload: NONE (0)
            Length: 40
            Proposal number: 1
            Protocol ID: ISAKMP (1)
            SPI size: 0
            Number of transforms: 1
            Transform payload # 1
                Next payload: NONE (0)
                Length: 32
                Transform number: 1
                Transform ID: KEY_IKE (1)
                Encryption-Algorithm (1): 3DES-CBC (5)
                Hash-Algorithm (2): SHA (2)
                Authentication-Method (3): PSK (1)
                Group-Description (4): Alternate 1024-bit MODP group (2)
                Life-Type (11): Seconds (1)
                Life-Duration (12): Duration-Value (28800)

0000  00 0c 29 f7 87 89 00 a0 8e 72 1e 40 08 00 45 00   ..)......r.@..E.
0010  00 6c 75 4b 00 00 40 11 c6 89 a5 e3 f9 6a a5 e3   .luK..@......j..
0020  f9 7a 01 f4 01 f4 00 58 8f 4e 79 42 18 7f 48 39   .z.....X.NyB..H9
0030  44 ba ae e4 ec ca c1 a0 3a c5 01 10 02 00 00 00   D.......:.......
0040  00 00 00 00 00 50 00 00 00 34 00 00 00 01 00 00   .....P...4......
0050  00 01 00 00 00 28 01 01 00 01 00 00 00 20 01 01   .....(....... ..
0060  00 00 80 01 00 05 80 02 00 02 80 03 00 01 80 04   ................
0070  00 02 80 0b 00 01 80 0c 70 80 1c e3 fd e4         ........p.....

Frame 6 (230 bytes on wire, 230 bytes captured)
    Arrival Time: May 24, 2005 10:41:12.862675000
    Time delta from previous packet: 0.003688000 seconds
    Time since reference or first frame: 0.140748000 seconds
    Frame Number: 6
    Packet Length: 230 bytes
    Capture Length: 230 bytes
Ethernet II, Src: 00:0c:29:f7:87:89, Dst: 00:a0:8e:72:1e:40
    Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40)
    Source: 00:0c:29:f7:87:89 (00:0c:29:f7:87:89)
    Type: IP (0x0800)
    Frame check sequence: 0xbe9361fd (correct)
Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.106 (165.227.249.106)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 212
    Identification: 0x0000 (0)
    Flags: 0x04
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0xfb6c (correct)
    Source: 165.227.249.122 (165.227.249.122)
    Destination: 165.227.249.106 (165.227.249.106)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 192
    Checksum: 0xc511 (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x7942187F483944BA
    Responder cookie: 0xAEE4ECCAC1A03AC5
    Next payload: Key Exchange (4)
    Version: 1.0
    Exchange type: Identity Protection (Main Mode) (2)
    Flags
        .... ...0 = No encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x00000000
    Length: 184
    Key Exchange payload
        Next payload: Nonce (10)
        Length: 132
        Key Exchange Data
    Nonce payload
        Next payload: NONE (0)
        Length: 24
        Nonce Data

0000  00 a0 8e 72 1e 40 00 0c 29 f7 87 89 08 00 45 00   ...r.@..).....E.
0010  00 d4 00 00 40 00 40 11 fb 6c a5 e3 f9 7a a5 e3   ....@.@..l...z..
0020  f9 6a 01 f4 01 f4 00 c0 c5 11 79 42 18 7f 48 39   .j........yB..H9
0030  44 ba ae e4 ec ca c1 a0 3a c5 04 10 02 00 00 00   D.......:.......
0040  00 00 00 00 00 b8 0a 00 00 84 aa 48 da 59 cb f3   ...........H.Y..
0050  48 e3 b8 ae bd a4 48 5e f6 38 9e 81 fe 76 c8 6b   H.....H^.8...v.k
0060  28 67 ca 3f ca 02 78 7d b1 73 a6 25 03 51 a2 58   (g.?..x}.s.%.Q.X
0070  a0 da 97 b3 0b a3 07 f2 25 5d 82 db 70 ab 57 c1   ........%]..p.W.
0080  f8 1a 5f 2b 24 32 9c 86 29 b6 ac 85 ea 29 60 f9   .._+$2..)....)`.
0090  2b 7a 73 b9 46 37 2b 0d 74 08 9e fa 4d 16 a8 9b   +zs.F7+.t...M...
00a0  6c 7c 75 26 d3 d5 a5 20 62 cd 0e 9b d8 9a 21 93   l|u&... b.....!.
00b0  8c 61 d9 36 5e ba 65 fa 63 2b e8 7f 51 ea df cc   .a.6^.e.c+..Q...
00c0  90 98 48 16 13 2a 02 a5 2c 73 00 00 00 18 90 97   ..H..*..,s......
00d0  04 15 b8 fe 8b ef 44 38 25 1b 62 00 57 d0 cb 11   ......D8%.b.W...
00e0  e8 70 be 93 61 fd                                 .p..a.

Frame 7 (262 bytes on wire, 262 bytes captured)
    Arrival Time: May 24, 2005 10:41:13.013070000
    Time delta from previous packet: 0.150395000 seconds
    Time since reference or first frame: 0.291143000 seconds
    Frame Number: 7
    Packet Length: 262 bytes
    Capture Length: 262 bytes
Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:0c:29:f7:87:89
    Destination: 00:0c:29:f7:87:89 (00:0c:29:f7:87:89)
    Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40)
    Type: IP (0x0800)
    Frame check sequence: 0x9b646830 (correct)
Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.122 (165.227.249.122)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 244
    Identification: 0x754c (30028)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0xc600 (correct)
    Source: 165.227.249.106 (165.227.249.106)
    Destination: 165.227.249.122 (165.227.249.122)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 224
    Checksum: 0xf180 (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x7942187F483944BA
    Responder cookie: 0xAEE4ECCAC1A03AC5
    Next payload: Key Exchange (4)
    Version: 1.0
    Exchange type: Identity Protection (Main Mode) (2)
    Flags
        .... ...0 = No encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x00000000
    Length: 216
    Key Exchange payload
        Next payload: Nonce (10)
        Length: 132
        Key Exchange Data
    Nonce payload
        Next payload: Vendor ID (13)
        Length: 24
        Nonce Data
    Vendor ID payload
        Next payload: NONE (0)
        Length: 32
        Vendor ID: unknown vendor ID: 0x030000147F7FEC6CD9905D18F48544B6...

0000  00 0c 29 f7 87 89 00 a0 8e 72 1e 40 08 00 45 00   ..)......r.@..E.
0010  00 f4 75 4c 00 00 40 11 c6 00 a5 e3 f9 6a a5 e3   ..uL..@......j..
0020  f9 7a 01 f4 01 f4 00 e0 f1 80 79 42 18 7f 48 39   .z........yB..H9
0030  44 ba ae e4 ec ca c1 a0 3a c5 04 10 02 00 00 00   D.......:.......
0040  00 00 00 00 00 d8 0a 00 00 84 47 52 c1 8e f2 78   ..........GR...x
0050  52 58 cb d8 f3 37 4a 1d b5 8e 91 3d b3 dd b5 ad   RX...7J....=....
0060  f5 83 51 e4 57 18 66 71 d3 8b c0 70 5a 14 d8 fa   ..Q.W.fq...pZ...
0070  54 3d 4b c4 86 dd 07 e3 ec 17 8e ef d8 c9 1d 92   T=K.............
0080  de d2 7b 3e b0 98 6e 2a f7 a9 70 f1 14 b3 79 b9   ..{>..n*..p...y.
0090  f2 a4 b7 01 4d 4c 99 71 90 bc 9a c3 61 96 1b d9   ....ML.q....a...
00a0  c0 21 a8 80 f8 0e 1c 44 dd 07 05 58 b0 1d 32 7a   .!.....D...X..2z
00b0  e7 88 f7 1f 8e fa af af 82 84 1f 94 c2 6d 72 60   .............mr`
00c0  b9 a6 2b dc 58 47 f3 75 fc 49 0d 00 00 18 c4 db   ..+.XG.u.I......
00d0  81 da e8 80 d7 4f 82 6a 86 1e b3 a4 f5 92 43 55   .....O.j......CU
00e0  af cc 00 00 00 20 03 00 00 14 7f 7f ec 6c d9 90   ..... .......l..
00f0  5d 18 f4 85 44 b6 84 a2 65 6a 00 00 00 08 00 06   ]...D...ej......
0100  00 02 9b 64 68 30                                 ...dh0

Frame 8 (114 bytes on wire, 114 bytes captured)
    Arrival Time: May 24, 2005 10:41:13.019668000
    Time delta from previous packet: 0.006598000 seconds
    Time since reference or first frame: 0.297741000 seconds
    Frame Number: 8
    Packet Length: 114 bytes
    Capture Length: 114 bytes
Ethernet II, Src: 00:0c:29:f7:87:89, Dst: 00:a0:8e:72:1e:40
    Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40)
    Source: 00:0c:29:f7:87:89 (00:0c:29:f7:87:89)
    Type: IP (0x0800)
    Frame check sequence: 0x34432dc6 (correct)
Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.106 (165.227.249.106)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 96
    Identification: 0x0000 (0)
    Flags: 0x04
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0xfbe0 (correct)
    Source: 165.227.249.122 (165.227.249.122)
    Destination: 165.227.249.106 (165.227.249.106)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 76
    Checksum: 0x219b (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x7942187F483944BA
    Responder cookie: 0xAEE4ECCAC1A03AC5
    Next payload: Identification (5)
    Version: 1.0
    Exchange type: Identity Protection (Main Mode) (2)
    Flags
        .... ...1 = Encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x00000000
    Length: 68
    Encrypted payload (40 bytes)

0000  00 a0 8e 72 1e 40 00 0c 29 f7 87 89 08 00 45 00   ...r.@..).....E.
0010  00 60 00 00 40 00 40 11 fb e0 a5 e3 f9 7a a5 e3   .`..@.@......z..
0020  f9 6a 01 f4 01 f4 00 4c 21 9b 79 42 18 7f 48 39   .j.....L!.yB..H9
0030  44 ba ae e4 ec ca c1 a0 3a c5 05 10 02 01 00 00   D.......:.......
0040  00 00 00 00 00 44 19 12 a6 b7 c2 0b a0 08 6f 41   .....D........oA
0050  95 b7 8a 20 43 e6 76 d5 86 6d ea d2 a9 b3 7b 10   ... C.v..m....{.
0060  88 50 62 20 60 ad 23 8a e3 ab f6 97 92 62 34 43   .Pb `.#......b4C
0070  2d c6                                             -.

Frame 9 (138 bytes on wire, 138 bytes captured)
    Arrival Time: May 24, 2005 10:41:13.023867000
    Time delta from previous packet: 0.004199000 seconds
    Time since reference or first frame: 0.301940000 seconds
    Frame Number: 9
    Packet Length: 138 bytes
    Capture Length: 138 bytes
Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:0c:29:f7:87:89
    Destination: 00:0c:29:f7:87:89 (00:0c:29:f7:87:89)
    Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40)
    Type: IP (0x0800)
    Frame check sequence: 0x20a8199d (correct)
Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.122 (165.227.249.122)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 120
    Identification: 0x754d (30029)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0xc67b (correct)
    Source: 165.227.249.106 (165.227.249.106)
    Destination: 165.227.249.122 (165.227.249.122)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 100
    Checksum: 0x331a (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x7942187F483944BA
    Responder cookie: 0xAEE4ECCAC1A03AC5
    Next payload: Identification (5)
    Version: 1.0
    Exchange type: Identity Protection (Main Mode) (2)
    Flags
        .... ...1 = Encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x00000000
    Length: 92
    Encrypted payload (64 bytes)

0000  00 0c 29 f7 87 89 00 a0 8e 72 1e 40 08 00 45 00   ..)......r.@..E.
0010  00 78 75 4d 00 00 40 11 c6 7b a5 e3 f9 6a a5 e3   .xuM..@..{...j..
0020  f9 7a 01 f4 01 f4 00 64 33 1a 79 42 18 7f 48 39   .z.....d3.yB..H9
0030  44 ba ae e4 ec ca c1 a0 3a c5 05 10 02 01 00 00   D.......:.......
0040  00 00 00 00 00 5c 74 51 96 9e 49 a1 32 3d f2 50   .....\tQ..I.2=.P
0050  68 94 ca a6 dd d0 6f 53 99 a8 44 16 a2 e5 2a e1   h.....oS..D...*.
0060  ff ca b2 32 fb f2 58 a7 31 ba 42 39 4b c3 78 fe   ...2..X.1.B9K.x.
0070  04 f0 fd fe c6 35 2b 36 74 0a 9c 7a 4d ca ae d4   .....5+6t..zM...
0080  31 9e e7 7a cc 55 20 a8 19 9d                     1..z.U ...

Frame 10 (122 bytes on wire, 122 bytes captured)
    Arrival Time: May 24, 2005 10:41:13.028474000
    Time delta from previous packet: 0.004607000 seconds
    Time since reference or first frame: 0.306547000 seconds
    Frame Number: 10
    Packet Length: 122 bytes
    Capture Length: 122 bytes
Ethernet II, Src: 00:0c:29:f7:87:89, Dst: 00:a0:8e:72:1e:40
    Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40)
    Source: 00:0c:29:f7:87:89 (00:0c:29:f7:87:89)
    Type: IP (0x0800)
    Frame check sequence: 0x84e054c8 (correct)
Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.106 (165.227.249.106)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 104
    Identification: 0x0000 (0)
    Flags: 0x04
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0xfbd8 (correct)
    Source: 165.227.249.122 (165.227.249.122)
    Destination: 165.227.249.106 (165.227.249.106)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 84
    Checksum: 0x1283 (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x7942187F483944BA
    Responder cookie: 0xAEE4ECCAC1A03AC5
    Next payload: Hash (8)
    Version: 1.0
    Exchange type: Informational (5)
    Flags
        .... ...1 = Encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0xD28FA7A7
    Length: 76
    Encrypted payload (48 bytes)

0000  00 a0 8e 72 1e 40 00 0c 29 f7 87 89 08 00 45 00   ...r.@..).....E.
0010  00 68 00 00 40 00 40 11 fb d8 a5 e3 f9 7a a5 e3   .h..@.@......z..
0020  f9 6a 01 f4 01 f4 00 54 12 83 79 42 18 7f 48 39   .j.....T..yB..H9
0030  44 ba ae e4 ec ca c1 a0 3a c5 08 10 05 01 d2 8f   D.......:.......
0040  a7 a7 00 00 00 4c f7 f3 1b 42 f3 85 c1 00 f7 ed   .....L...B......
0050  9a c3 51 08 23 dc 02 2e 89 f1 36 14 e5 77 19 3a   ..Q.#.....6..w.:
0060  37 0e cc 7e 44 40 df b3 1d 0c 4d 15 61 8a 7e dc   7..~D@....M.a.~.
0070  44 09 50 0c d5 77 84 e0 54 c8                     D.P..w..T.

Frame 11 (338 bytes on wire, 338 bytes captured)
    Arrival Time: May 24, 2005 10:41:18.287173000
    Time delta from previous packet: 5.258699000 seconds
    Time since reference or first frame: 5.565246000 seconds
    Frame Number: 11
    Packet Length: 338 bytes
    Capture Length: 338 bytes
Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:0c:29:f7:87:89
    Destination: 00:0c:29:f7:87:89 (00:0c:29:f7:87:89)
    Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40)
    Type: IP (0x0800)
    Frame check sequence: 0x02f8a7f8 (correct)
Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.122 (165.227.249.122)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 320
    Identification: 0x754e (30030)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0xc5b2 (correct)
    Source: 165.227.249.106 (165.227.249.106)
    Destination: 165.227.249.122 (165.227.249.122)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 300
    Checksum: 0x3292 (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x7942187F483944BA
    Responder cookie: 0xAEE4ECCAC1A03AC5
    Next payload: Hash (8)
    Version: 1.0
    Exchange type: Quick Mode (32)
    Flags
        .... ...1 = Encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x65538D47
    Length: 292
    Encrypted payload (264 bytes)

0000  00 0c 29 f7 87 89 00 a0 8e 72 1e 40 08 00 45 00   ..)......r.@..E.
0010  01 40 75 4e 00 00 40 11 c5 b2 a5 e3 f9 6a a5 e3   .@uN..@......j..
0020  f9 7a 01 f4 01 f4 01 2c 32 92 79 42 18 7f 48 39   .z.....,2.yB..H9
0030  44 ba ae e4 ec ca c1 a0 3a c5 08 10 20 01 65 53   D.......:... .eS
0040  8d 47 00 00 01 24 87 91 25 79 64 03 61 bc 77 1a   .G...$..%yd.a.w.
0050  5e 79 e9 e1 39 6b e3 72 8c 75 4a 58 33 51 22 02   ^y..9k.r.uJX3Q".
0060  69 82 82 8d 06 ce d7 e0 1e fa 18 e4 94 80 b2 48   i..............H
0070  2c 85 54 95 30 a8 8a 5b 34 96 a5 b8 1e 78 86 49   ,.T.0..[4....x.I
0080  03 93 1b 2c 41 05 71 85 30 92 e6 80 70 1c d2 1f   ...,A.q.0...p...
0090  a6 8f 19 ff 7d ed 96 d5 56 01 59 ce 80 98 98 98   ....}...V.Y.....
00a0  e7 8d 8e a3 da ec 36 63 4f e5 90 0c cc fe 7a 6e   ......6cO.....zn
00b0  af 25 3a 5f 5e 2c 7c 31 a4 b1 6b 19 e6 eb a3 17   .%:_^,|1..k.....
00c0  f2 f6 31 2c 61 af 36 05 34 d3 f5 fd 88 f0 9a 72   ..1,a.6.4......r
00d0  06 f8 7d 13 dc 12 dd 21 53 cd 37 4f 46 73 c9 1b   ..}....!S.7OFs..
00e0  06 93 a9 84 f6 66 9a bb ee a0 30 5c 73 13 86 6d   .....f....0\s..m
00f0  d3 eb 97 08 ab 31 c6 a5 04 7c 44 d5 aa a1 b8 24   .....1...|D....$
0100  b1 7a 95 5f 69 5b 43 16 54 a6 f2 f9 05 e4 ff 98   .z._i[C.T.......
0110  8f 81 a3 94 ab 9d cc 23 57 23 cc e1 2d 2d ac 0b   .......#W#..--..
0120  e2 e5 93 f2 cb 27 0c fe ae c9 e8 64 37 e8 38 56   .....'.....d7.8V
0130  c0 32 63 be 18 22 c0 b6 e8 4c 8a f5 49 f0 9b 95   .2c.."...L..I...
0140  ee c0 06 f4 d7 63 f0 3c e4 a3 0a 31 5b 47 02 f8   .....c.<...1[G..
0150  a7 f8                                             ..

Frame 12 (346 bytes on wire, 346 bytes captured)
    Arrival Time: May 24, 2005 10:41:18.292886000
    Time delta from previous packet: 0.005713000 seconds
    Time since reference or first frame: 5.570959000 seconds
    Frame Number: 12
    Packet Length: 346 bytes
    Capture Length: 346 bytes
Ethernet II, Src: 00:0c:29:f7:87:89, Dst: 00:a0:8e:72:1e:40
    Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40)
    Source: 00:0c:29:f7:87:89 (00:0c:29:f7:87:89)
    Type: IP (0x0800)
    Frame check sequence: 0x5b3dcd14 (correct)
Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.106 (165.227.249.106)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 328
    Identification: 0x0000 (0)
    Flags: 0x04
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0xfaf8 (correct)
    Source: 165.227.249.122 (165.227.249.122)
    Destination: 165.227.249.106 (165.227.249.106)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 308
    Checksum: 0xb7f6 (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x7942187F483944BA
    Responder cookie: 0xAEE4ECCAC1A03AC5
    Next payload: Hash (8)
    Version: 1.0
    Exchange type: Quick Mode (32)
    Flags
        .... ...1 = Encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x65538D47
    Length: 300
    Encrypted payload (272 bytes)

0000  00 a0 8e 72 1e 40 00 0c 29 f7 87 89 08 00 45 00   ...r.@..).....E.
0010  01 48 00 00 40 00 40 11 fa f8 a5 e3 f9 7a a5 e3   .H..@.@......z..
0020  f9 6a 01 f4 01 f4 01 34 b7 f6 79 42 18 7f 48 39   .j.....4..yB..H9
0030  44 ba ae e4 ec ca c1 a0 3a c5 08 10 20 01 65 53   D.......:... .eS
0040  8d 47 00 00 01 2c b6 b4 df 87 2a f0 91 ae 2f d9   .G...,....*.../.
0050  7a f5 19 6b e6 cf ce b7 a8 d6 7d fe e5 da 5e fd   z..k......}...^.
0060  e1 4e 01 f2 cb 59 78 f8 d0 00 90 4c e9 b9 60 dc   .N...Yx....L..`.
0070  87 fa c4 cb 39 b4 2c 5c a6 93 0b c9 ad f5 82 e2   ....9.,\........
0080  2b e3 15 0c 0f 23 12 91 ba 23 62 22 16 52 be ab   +....#...#b".R..
0090  55 6d bb 7a 4a 6a 13 3c 55 83 46 1a 57 7d 6d 4b   Um.zJj.<U.F.W}mK
00a0  9f 9c 73 0a 65 56 1f 91 79 6d c7 07 f2 e3 7d c2   ..s.eV..ym....}.
00b0  3b e0 74 05 aa ef 28 f0 60 e0 a8 f0 d0 04 b3 d9   ;.t...(.`.......
00c0  9f 9e 56 e3 db a9 73 28 ee e7 4d 3b 98 4f ee 12   ..V...s(..M;.O..
00d0  d0 a5 ff 25 56 01 21 b6 f0 c9 66 a6 2c 08 1a 02   ...%V.!...f.,...
00e0  9a e4 4e 2a 92 70 fb 0b 00 ff a6 35 c5 20 d0 22   ..N*.p.....5. ."
00f0  a0 26 03 bc 8a 83 a7 26 42 a4 8e 35 68 eb c1 6e   .&.....&B..5h..n
0100  72 9e 31 46 f9 69 6d ac 5b d4 46 24 d4 d1 37 29   r.1F.im.[.F$..7)
0110  48 2b 3c 65 00 ba f2 71 65 ad 0a c1 c9 33 e4 1e   H+<e...qe....3..
0120  f8 cc 15 93 39 85 aa 28 83 76 aa 3a 56 3d 05 ac   ....9..(.v.:V=..
0130  01 86 be 77 27 7b 6c 98 ba 70 12 98 fb 63 77 e9   ...w'{l..p...cw.
0140  af df 99 ca 7e 76 02 2e c5 6a 70 a4 07 f9 a6 f5   ....~v...jp.....
0150  cb 83 ff 39 c9 6c 5b 3d cd 14                     ...9.l[=..

Frame 13 (98 bytes on wire, 98 bytes captured)
    Arrival Time: May 24, 2005 10:41:18.452616000
    Time delta from previous packet: 0.159730000 seconds
    Time since reference or first frame: 5.730689000 seconds
    Frame Number: 13
    Packet Length: 98 bytes
    Capture Length: 98 bytes
Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:0c:29:f7:87:89
    Destination: 00:0c:29:f7:87:89 (00:0c:29:f7:87:89)
    Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40)
    Type: IP (0x0800)
    Frame check sequence: 0xdb41f9f1 (correct)
Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.122 (165.227.249.122)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 80
    Identification: 0x754f (30031)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0xc6a1 (correct)
    Source: 165.227.249.106 (165.227.249.106)
    Destination: 165.227.249.122 (165.227.249.122)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 60
    Checksum: 0x7fe0 (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x7942187F483944BA
    Responder cookie: 0xAEE4ECCAC1A03AC5
    Next payload: Hash (8)
    Version: 1.0
    Exchange type: Quick Mode (32)
    Flags
        .... ...1 = Encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x65538D47
    Length: 52
    Encrypted payload (24 bytes)

0000  00 0c 29 f7 87 89 00 a0 8e 72 1e 40 08 00 45 00   ..)......r.@..E.
0010  00 50 75 4f 00 00 40 11 c6 a1 a5 e3 f9 6a a5 e3   .PuO..@......j..
0020  f9 7a 01 f4 01 f4 00 3c 7f e0 79 42 18 7f 48 39   .z.....<..yB..H9
0030  44 ba ae e4 ec ca c1 a0 3a c5 08 10 20 01 65 53   D.......:... .eS
0040  8d 47 00 00 00 34 aa 85 b9 db 9e c3 3e 59 47 35   .G...4......>YG5
0050  0a 70 26 71 7d 80 32 57 06 80 37 ad c3 bc db 41   .p&q}.2W..7....A
0060  f9 f1                                             ..

Frame 14 (130 bytes on wire, 130 bytes captured)
    Arrival Time: May 24, 2005 10:41:18.960080000
    Time delta from previous packet: 0.507464000 seconds
    Time since reference or first frame: 6.238153000 seconds
    Frame Number: 14
    Packet Length: 130 bytes
    Capture Length: 130 bytes
Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:0c:29:f7:87:89
    Destination: 00:0c:29:f7:87:89 (00:0c:29:f7:87:89)
    Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40)
    Type: IP (0x0800)
    Frame check sequence: 0x90e15738 (correct)
Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.122 (165.227.249.122)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 112
    Identification: 0x7550 (30032)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: ESP (0x32)
    Header checksum: 0xc65f (correct)
    Source: 165.227.249.106 (165.227.249.106)
    Destination: 165.227.249.122 (165.227.249.122)
Encapsulating Security Payload
    SPI: 0x9feae688
    Sequence: 1
    Data (84 bytes)

0000  00 0c 29 f7 87 89 00 a0 8e 72 1e 40 08 00 45 00   ..)......r.@..E.
0010  00 70 75 50 00 00 40 32 c6 5f a5 e3 f9 6a a5 e3   .puP..@2._...j..
0020  f9 7a 9f ea e6 88 00 00 00 01 69 40 ef 0c d0 32   .z........i@...2
0030  0e 26 51 58 8b 3f 00 f0 1f bc d2 63 2e 8b cd d3   .&QX.?.....c....
0040  d2 be 47 06 86 8e bb fa cd e7 c8 c9 2f 39 09 b2   ..G........./9..
0050  3d 37 44 f0 d6 e9 57 c5 6b 32 38 6a e8 e5 e6 b7   =7D...W.k28j....
0060  db 90 66 d6 70 0e 16 47 3c d0 80 a9 c7 e9 74 c2   ..f.p..G<.....t.
0070  53 19 2b d2 e9 03 19 10 a2 e1 9a f1 81 6c 90 e1   S.+..........l..
0080  57 38                                             W8

Frame 15 (130 bytes on wire, 130 bytes captured)
    Arrival Time: May 24, 2005 10:41:18.968253000
    Time delta from previous packet: 0.008173000 seconds
    Time since reference or first frame: 6.246326000 seconds
    Frame Number: 15
    Packet Length: 130 bytes
    Capture Length: 130 bytes
Ethernet II, Src: 00:0c:29:f7:87:89, Dst: 00:00:24:c3:5e:28
    Destination: 00:00:24:c3:5e:28 (00:00:24:c3:5e:28)
    Source: 00:0c:29:f7:87:89 (00:0c:29:f7:87:89)
    Type: IP (0x0800)
    Frame check sequence: 0x30b34aff (correct)
Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.106 (165.227.249.106)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 112
    Identification: 0x0004 (4)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 255
    Protocol: ESP (0x32)
    Header checksum: 0x7cab (correct)
    Source: 165.227.249.122 (165.227.249.122)
    Destination: 165.227.249.106 (165.227.249.106)
Encapsulating Security Payload
    SPI: 0x47c84402
    Sequence: 1
    Data (84 bytes)

0000  00 00 24 c3 5e 28 00 0c 29 f7 87 89 08 00 45 00   ..$.^(..).....E.
0010  00 70 00 04 00 00 ff 32 7c ab a5 e3 f9 7a a5 e3   .p.....2|....z..
0020  f9 6a 47 c8 44 02 00 00 00 01 18 41 9d 6b 67 2c   .jG.D......A.kg,
0030  30 d6 87 42 53 65 3a b5 e2 a1 57 02 de 83 2c b2   0..BSe:...W...,.
0040  3b 27 4a f5 c1 10 be 51 d4 12 65 9e 9c 0c de 69   ;'J....Q..e....i
0050  8f 2d 6a 0f e4 9e 25 0b 05 28 9d 77 aa 15 db 2a   .-j...%..(.w...*
0060  85 40 42 5d ee f2 60 54 85 d3 1c 13 82 fb 8d 43   .@B]..`T.......C
0070  7d c4 90 fc 3d 0e 31 51 ff 8d cd a4 94 06 30 b3   }...=.1Q......0.
0080  4a ff                                             J.

Frame 16 (130 bytes on wire, 130 bytes captured)
    Arrival Time: May 24, 2005 10:41:18.968718000
    Time delta from previous packet: 0.000465000 seconds
    Time since reference or first frame: 6.246791000 seconds
    Frame Number: 16
    Packet Length: 130 bytes
    Capture Length: 130 bytes
Ethernet II, Src: 00:00:24:c3:5e:28, Dst: 00:a0:8e:72:1e:40
    Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40)
    Source: 00:00:24:c3:5e:28 (00:00:24:c3:5e:28)
    Type: IP (0x0800)
    Frame check sequence: 0xf4c97c18 (correct)
Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.106 (165.227.249.106)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 112
    Identification: 0x0004 (4)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 254
    Protocol: ESP (0x32)
    Header checksum: 0x7dab (correct)
    Source: 165.227.249.122 (165.227.249.122)
    Destination: 165.227.249.106 (165.227.249.106)
Encapsulating Security Payload
    SPI: 0x47c84402
    Sequence: 1
    Data (84 bytes)

0000  00 a0 8e 72 1e 40 00 00 24 c3 5e 28 08 00 45 00   ...r.@..$.^(..E.
0010  00 70 00 04 00 00 fe 32 7d ab a5 e3 f9 7a a5 e3   .p.....2}....z..
0020  f9 6a 47 c8 44 02 00 00 00 01 18 41 9d 6b 67 2c   .jG.D......A.kg,
0030  30 d6 87 42 53 65 3a b5 e2 a1 57 02 de 83 2c b2   0..BSe:...W...,.
0040  3b 27 4a f5 c1 10 be 51 d4 12 65 9e 9c 0c de 69   ;'J....Q..e....i
0050  8f 2d 6a 0f e4 9e 25 0b 05 28 9d 77 aa 15 db 2a   .-j...%..(.w...*
0060  85 40 42 5d ee f2 60 54 85 d3 1c 13 82 fb 8d 43   .@B]..`T.......C
0070  7d c4 90 fc 3d 0e 31 51 ff 8d cd a4 94 06 f4 c9   }...=.1Q........
0080  7c 18                                             |.

Frame 17 (130 bytes on wire, 130 bytes captured)
    Arrival Time: May 24, 2005 10:41:19.160268000
    Time delta from previous packet: 0.191550000 seconds
    Time since reference or first frame: 6.438341000 seconds
    Frame Number: 17
    Packet Length: 130 bytes
    Capture Length: 130 bytes
Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:0c:29:f7:87:89
    Destination: 00:0c:29:f7:87:89 (00:0c:29:f7:87:89)
    Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40)
    Type: IP (0x0800)
    Frame check sequence: 0xe0a6e179 (correct)
Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.122 (165.227.249.122)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 112
    Identification: 0x7551 (30033)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: ESP (0x32)
    Header checksum: 0xc65e (correct)
    Source: 165.227.249.106 (165.227.249.106)
    Destination: 165.227.249.122 (165.227.249.122)
Encapsulating Security Payload
    SPI: 0x9feae688
    Sequence: 2
    Data (84 bytes)

0000  00 0c 29 f7 87 89 00 a0 8e 72 1e 40 08 00 45 00   ..)......r.@..E.
0010  00 70 75 51 00 00 40 32 c6 5e a5 e3 f9 6a a5 e3   .puQ..@2.^...j..
0020  f9 7a 9f ea e6 88 00 00 00 02 07 9e d0 9d 53 f7   .z............S.
0030  91 4b 5b 95 f3 79 90 9d ff 17 df 1d 76 0f 6d 95   .K[..y......v.m.
0040  eb d0 8b a7 2c 1d 3e 01 9b fb 0d db ce 60 88 f0   ....,.>......`..
0050  b5 58 4b 30 31 0f b2 84 28 73 8a d8 a0 3c ce 80   .XK01...(s...<..
0060  b0 88 25 7a 16 34 34 c1 0c 63 73 aa 67 72 20 4c   ..%z.44..cs.gr L
0070  08 bb fc c5 c8 b3 17 7b 89 03 ed 65 f7 d7 e0 a6   .......{...e....
0080  e1 79                                             .y

Frame 18 (130 bytes on wire, 130 bytes captured)
    Arrival Time: May 24, 2005 10:41:19.162378000
    Time delta from previous packet: 0.002110000 seconds
    Time since reference or first frame: 6.440451000 seconds
    Frame Number: 18
    Packet Length: 130 bytes
    Capture Length: 130 bytes
Ethernet II, Src: 00:0c:29:f7:87:89, Dst: 00:00:24:c3:5e:28
    Destination: 00:00:24:c3:5e:28 (00:00:24:c3:5e:28)
    Source: 00:0c:29:f7:87:89 (00:0c:29:f7:87:89)
    Type: IP (0x0800)
    Frame check sequence: 0x2a7d9bb4 (correct)
Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.106 (165.227.249.106)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 112
    Identification: 0x0005 (5)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 255
    Protocol: ESP (0x32)
    Header checksum: 0x7caa (correct)
    Source: 165.227.249.122 (165.227.249.122)
    Destination: 165.227.249.106 (165.227.249.106)
Encapsulating Security Payload
    SPI: 0x47c84402
    Sequence: 2
    Data (84 bytes)

0000  00 00 24 c3 5e 28 00 0c 29 f7 87 89 08 00 45 00   ..$.^(..).....E.
0010  00 70 00 05 00 00 ff 32 7c aa a5 e3 f9 7a a5 e3   .p.....2|....z..
0020  f9 6a 47 c8 44 02 00 00 00 02 1c 13 82 fb 8d 43   .jG.D..........C
0030  7d c4 13 a9 aa d6 4c 39 25 60 fc 27 dc ba 63 9d   }.....L9%`.'..c.
0040  0c b5 9c 87 2c 30 f6 42 22 97 da 8b b3 0c 72 d4   ....,0.B".....r.
0050  fc 26 fe 58 2f f6 49 31 27 25 27 37 fc 17 b4 5d   .&.X/.I1'%'7...]
0060  e8 f2 ba 61 d8 10 75 d0 5c 4e 20 1e e0 24 bf 7e   ...a..u.\N ..$.~
0070  26 18 8d c0 5c fd b7 28 f9 77 ed 2b 57 6a 2a 7d   &...\..(.w.+Wj*}
0080  9b b4                                             ..

Frame 19 (130 bytes on wire, 130 bytes captured)
    Arrival Time: May 24, 2005 10:41:19.162791000
    Time delta from previous packet: 0.000413000 seconds
    Time since reference or first frame: 6.440864000 seconds
    Frame Number: 19
    Packet Length: 130 bytes
    Capture Length: 130 bytes
Ethernet II, Src: 00:00:24:c3:5e:28, Dst: 00:a0:8e:72:1e:40
    Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40)
    Source: 00:00:24:c3:5e:28 (00:00:24:c3:5e:28)
    Type: IP (0x0800)
    Frame check sequence: 0xee07ad53 (correct)
Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.106 (165.227.249.106)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 112
    Identification: 0x0005 (5)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 254
    Protocol: ESP (0x32)
    Header checksum: 0x7daa (correct)
    Source: 165.227.249.122 (165.227.249.122)
    Destination: 165.227.249.106 (165.227.249.106)
Encapsulating Security Payload
    SPI: 0x47c84402
    Sequence: 2
    Data (84 bytes)

0000  00 a0 8e 72 1e 40 00 00 24 c3 5e 28 08 00 45 00   ...r.@..$.^(..E.
0010  00 70 00 05 00 00 fe 32 7d aa a5 e3 f9 7a a5 e3   .p.....2}....z..
0020  f9 6a 47 c8 44 02 00 00 00 02 1c 13 82 fb 8d 43   .jG.D..........C
0030  7d c4 13 a9 aa d6 4c 39 25 60 fc 27 dc ba 63 9d   }.....L9%`.'..c.
0040  0c b5 9c 87 2c 30 f6 42 22 97 da 8b b3 0c 72 d4   ....,0.B".....r.
0050  fc 26 fe 58 2f f6 49 31 27 25 27 37 fc 17 b4 5d   .&.X/.I1'%'7...]
0060  e8 f2 ba 61 d8 10 75 d0 5c 4e 20 1e e0 24 bf 7e   ...a..u.\N ..$.~
0070  26 18 8d c0 5c fd b7 28 f9 77 ed 2b 57 6a ee 07   &...\..(.w.+Wj..
0080  ad 53                                             .S

Frame 20 (130 bytes on wire, 130 bytes captured)
    Arrival Time: May 24, 2005 10:41:20.160177000
    Time delta from previous packet: 0.997386000 seconds
    Time since reference or first frame: 7.438250000 seconds
    Frame Number: 20
    Packet Length: 130 bytes
    Capture Length: 130 bytes
Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:0c:29:f7:87:89
    Destination: 00:0c:29:f7:87:89 (00:0c:29:f7:87:89)
    Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40)
    Type: IP (0x0800)
    Frame check sequence: 0xf3d4527e (correct)
Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.122 (165.227.249.122)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 112
    Identification: 0x7552 (30034)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: ESP (0x32)
    Header checksum: 0xc65d (correct)
    Source: 165.227.249.106 (165.227.249.106)
    Destination: 165.227.249.122 (165.227.249.122)
Encapsulating Security Payload
    SPI: 0x9feae688
    Sequence: 3
    Data (84 bytes)

0000  00 0c 29 f7 87 89 00 a0 8e 72 1e 40 08 00 45 00   ..)......r.@..E.
0010  00 70 75 52 00 00 40 32 c6 5d a5 e3 f9 6a a5 e3   .puR..@2.]...j..
0020  f9 7a 9f ea e6 88 00 00 00 03 4a a1 59 23 1c 2f   .z........J.Y#./
0030  e3 26 51 7e 00 91 fc a8 89 07 6e 2a c6 3c 13 28   .&Q~......n*.<.(
0040  1e 09 d1 f8 a1 74 96 70 9f f5 80 ec 2e 82 38 39   .....t.p......89
0050  64 01 26 92 83 7f 10 2b 80 3a 5d 19 fb 3f d1 8f   d.&....+.:]..?..
0060  cc f4 d7 c2 ba a0 0a ed d1 5a 28 3e 56 de 57 86   .........Z(>V.W.
0070  0f fd cd 77 ad 43 66 68 fb 12 3f 80 fc 10 f3 d4   ...w.Cfh..?.....
0080  52 7e                                             R~

Frame 21 (130 bytes on wire, 130 bytes captured)
    Arrival Time: May 24, 2005 10:41:20.162508000
    Time delta from previous packet: 0.002331000 seconds
    Time since reference or first frame: 7.440581000 seconds
    Frame Number: 21
    Packet Length: 130 bytes
    Capture Length: 130 bytes
Ethernet II, Src: 00:0c:29:f7:87:89, Dst: 00:00:24:c3:5e:28
    Destination: 00:00:24:c3:5e:28 (00:00:24:c3:5e:28)
    Source: 00:0c:29:f7:87:89 (00:0c:29:f7:87:89)
    Type: IP (0x0800)
    Frame check sequence: 0xdb34564c (correct)
Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.106 (165.227.249.106)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 112
    Identification: 0x0006 (6)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 255
    Protocol: ESP (0x32)
    Header checksum: 0x7ca9 (correct)
    Source: 165.227.249.122 (165.227.249.122)
    Destination: 165.227.249.106 (165.227.249.106)
Encapsulating Security Payload
    SPI: 0x47c84402
    Sequence: 3
    Data (84 bytes)

0000  00 00 24 c3 5e 28 00 0c 29 f7 87 89 08 00 45 00   ..$.^(..).....E.
0010  00 70 00 06 00 00 ff 32 7c a9 a5 e3 f9 7a a5 e3   .p.....2|....z..
0020  f9 6a 47 c8 44 02 00 00 00 03 20 1e e0 24 bf 7e   .jG.D..... ..$.~
0030  26 18 53 70 04 81 40 5e 97 d2 3d bb 31 99 2e e8   &.Sp..@^..=.1...
0040  c6 a6 02 ce a8 2e 02 7c cf d4 f0 3c db 05 a9 78   .......|...<...x
0050  57 69 35 bb 36 bc b7 df 4d f8 22 8b 1b 88 cd 5c   Wi5.6...M."....\
0060  d7 cf af 55 ec 9a f0 07 45 fa 1c c9 0a 65 eb ae   ...U....E....e..
0070  cf 1d bd 5d 75 a1 f5 1e 8e f9 b0 88 4f a0 db 34   ...]u.......O..4
0080  56 4c                                             VL

Frame 22 (130 bytes on wire, 130 bytes captured)
    Arrival Time: May 24, 2005 10:41:20.162883000
    Time delta from previous packet: 0.000375000 seconds
    Time since reference or first frame: 7.440956000 seconds
    Frame Number: 22
    Packet Length: 130 bytes
    Capture Length: 130 bytes
Ethernet II, Src: 00:00:24:c3:5e:28, Dst: 00:a0:8e:72:1e:40
    Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40)
    Source: 00:00:24:c3:5e:28 (00:00:24:c3:5e:28)
    Type: IP (0x0800)
    Frame check sequence: 0x1f4e60ab (correct)
Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.106 (165.227.249.106)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 112
    Identification: 0x0006 (6)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 254
    Protocol: ESP (0x32)
    Header checksum: 0x7da9 (correct)
    Source: 165.227.249.122 (165.227.249.122)
    Destination: 165.227.249.106 (165.227.249.106)
Encapsulating Security Payload
    SPI: 0x47c84402
    Sequence: 3
    Data (84 bytes)

0000  00 a0 8e 72 1e 40 00 00 24 c3 5e 28 08 00 45 00   ...r.@..$.^(..E.
0010  00 70 00 06 00 00 fe 32 7d a9 a5 e3 f9 7a a5 e3   .p.....2}....z..
0020  f9 6a 47 c8 44 02 00 00 00 03 20 1e e0 24 bf 7e   .jG.D..... ..$.~
0030  26 18 53 70 04 81 40 5e 97 d2 3d bb 31 99 2e e8   &.Sp..@^..=.1...
0040  c6 a6 02 ce a8 2e 02 7c cf d4 f0 3c db 05 a9 78   .......|...<...x
0050  57 69 35 bb 36 bc b7 df 4d f8 22 8b 1b 88 cd 5c   Wi5.6...M."....\
0060  d7 cf af 55 ec 9a f0 07 45 fa 1c c9 0a 65 eb ae   ...U....E....e..
0070  cf 1d bd 5d 75 a1 f5 1e 8e f9 b0 88 4f a0 1f 4e   ...]u.......O..N
0080  60 ab                                             `.