Frame 1 (126 bytes on wire, 126 bytes captured) Arrival Time: May 19, 2005 13:56:42.276903000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 126 bytes Capture Length: 126 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:09:5b:2b:a8:d7 Destination: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0xa8bcc244 (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.125 (165.227.249.125) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 108 Identification: 0xfa92 (64146) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x413f (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.125 (165.227.249.125) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 88 Checksum: 0x9fb7 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x579B5453A7FD5272 Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 80 Security Association payload Next payload: NONE (0) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 40 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 32 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) 0000 00 09 5b 2b a8 d7 00 a0 8e 72 1e 40 08 00 45 00 ..[+.....r.@..E. 0010 00 6c fa 92 00 00 40 11 41 3f a5 e3 f9 6a a5 e3 .l....@.A?...j.. 0020 f9 7d 01 f4 01 f4 00 58 9f b7 57 9b 54 53 a7 fd .}.....X..W.TS.. 0030 52 72 00 00 00 00 00 00 00 00 01 10 02 00 00 00 Rr.............. 0040 00 00 00 00 00 50 00 00 00 34 00 00 00 01 00 00 .....P...4...... 0050 00 01 00 00 00 28 01 01 00 01 00 00 00 20 01 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 04 00 02 80 03 ................ 0070 00 01 80 0b 00 01 80 0c 70 80 a8 bc c2 44 ........p....D Frame 2 (126 bytes on wire, 126 bytes captured) Arrival Time: May 19, 2005 13:56:42.280125000 Time delta from previous packet: 0.003222000 seconds Time since reference or first frame: 0.003222000 seconds Frame Number: 2 Packet Length: 126 bytes Capture Length: 126 bytes Ethernet II, Src: 00:09:5b:2b:a8:d7, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Type: IP (0x0800) Frame check sequence: 0x196c8a5c (correct) Internet Protocol, Src Addr: 165.227.249.125 (165.227.249.125), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 108 Identification: 0x0045 (69) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3b8d (correct) Source: 165.227.249.125 (165.227.249.125) Destination: 165.227.249.106 (165.227.249.106) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 88 Checksum: 0x5863 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x579B5453A7FD5272 Responder cookie: 0xBA83AB9DA9D93759 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 80 Security Association payload Next payload: NONE (0) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 40 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 32 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) 0000 00 a0 8e 72 1e 40 00 09 5b 2b a8 d7 08 00 45 00 ...r.@..[+....E. 0010 00 6c 00 45 00 00 40 11 3b 8d a5 e3 f9 7d a5 e3 .l.E..@.;....}.. 0020 f9 6a 01 f4 01 f4 00 58 58 63 57 9b 54 53 a7 fd .j.....XXcW.TS.. 0030 52 72 ba 83 ab 9d a9 d9 37 59 01 10 02 00 00 00 Rr......7Y...... 0040 00 00 00 00 00 50 00 00 00 34 00 00 00 01 00 00 .....P...4...... 0050 00 01 00 00 00 28 01 01 00 01 00 00 00 20 01 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 04 00 02 80 03 ................ 0070 00 01 80 0b 00 01 80 0c 70 80 19 6c 8a 5c ........p..l.\ Frame 3 (262 bytes on wire, 262 bytes captured) Arrival Time: May 19, 2005 13:56:42.403071000 Time delta from previous packet: 0.122946000 seconds Time since reference or first frame: 0.126168000 seconds Frame Number: 3 Packet Length: 262 bytes Capture Length: 262 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:09:5b:2b:a8:d7 Destination: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0xaf253f2b (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.125 (165.227.249.125) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 244 Identification: 0xfa93 (64147) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x40b6 (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.125 (165.227.249.125) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 224 Checksum: 0x0aa3 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x579B5453A7FD5272 Responder cookie: 0xBA83AB9DA9D93759 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 216 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: Vendor ID (13) Length: 24 Nonce Data Vendor ID payload Next payload: NONE (0) Length: 32 Vendor ID: unknown vendor ID: 0x0300001451A6A04036544BD0E0E203E1... 0000 00 09 5b 2b a8 d7 00 a0 8e 72 1e 40 08 00 45 00 ..[+.....r.@..E. 0010 00 f4 fa 93 00 00 40 11 40 b6 a5 e3 f9 6a a5 e3 ......@.@....j.. 0020 f9 7d 01 f4 01 f4 00 e0 0a a3 57 9b 54 53 a7 fd .}........W.TS.. 0030 52 72 ba 83 ab 9d a9 d9 37 59 04 10 02 00 00 00 Rr......7Y...... 0040 00 00 00 00 00 d8 0a 00 00 84 31 53 53 3d db f0 ..........1SS=.. 0050 fd db 61 2b 37 07 0f 6b 40 ad 3c 29 ca 12 c0 72 ..a+7..k@.<)...r 0060 1c 99 8d 1b 7b f0 3c f3 4f 04 ee 9a 35 a8 90 42 ....{.<.O...5..B 0070 64 dc ae 93 03 56 5e da a1 22 8c 31 03 31 c2 42 d....V^..".1.1.B 0080 7d 85 cd 8e e5 28 dc 9e 84 05 fa a3 b8 81 94 61 }....(.........a 0090 54 4b 47 13 48 a5 2c 78 73 36 53 7c 85 a1 4d 7f TKG.H.,xs6S|..M. 00a0 85 5b 1b 3e 66 49 7a be 1a 40 b3 38 3c cf c0 a6 .[.>fIz..@.8<... 00b0 ce 2d 9b 79 fb b8 72 aa 4e 34 63 4e 58 0b 49 81 .-.y..r.N4cNX.I. 00c0 63 51 d9 56 c8 3b ee 77 e1 77 0d 00 00 18 2b 03 cQ.V.;.w.w....+. 00d0 70 01 49 20 27 3b ee 1b f3 98 88 5f 3b 30 9b d6 p.I ';....._;0.. 00e0 fb 42 00 00 00 20 03 00 00 14 51 a6 a0 40 36 54 .B... ....Q..@6T 00f0 4b d0 e0 e2 03 e1 ec db 68 f6 00 00 00 08 00 06 K.......h....... 0100 00 02 af 25 3f 2b ...%?+ Frame 4 (218 bytes on wire, 218 bytes captured) Arrival Time: May 19, 2005 13:56:42.806088000 Time delta from previous packet: 0.403017000 seconds Time since reference or first frame: 0.529185000 seconds Frame Number: 4 Packet Length: 218 bytes Capture Length: 218 bytes Ethernet II, Src: 00:09:5b:2b:a8:d7, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Type: IP (0x0800) Frame check sequence: 0xe025a3b3 (correct) Internet Protocol, Src Addr: 165.227.249.125 (165.227.249.125), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 200 Identification: 0x0046 (70) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3b30 (correct) Source: 165.227.249.125 (165.227.249.125) Destination: 165.227.249.106 (165.227.249.106) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 180 Checksum: 0x5e74 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x579B5453A7FD5272 Responder cookie: 0xBA83AB9DA9D93759 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 172 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 12 Nonce Data 0000 00 a0 8e 72 1e 40 00 09 5b 2b a8 d7 08 00 45 00 ...r.@..[+....E. 0010 00 c8 00 46 00 00 40 11 3b 30 a5 e3 f9 7d a5 e3 ...F..@.;0...}.. 0020 f9 6a 01 f4 01 f4 00 b4 5e 74 57 9b 54 53 a7 fd .j......^tW.TS.. 0030 52 72 ba 83 ab 9d a9 d9 37 59 04 10 02 00 00 00 Rr......7Y...... 0040 00 00 00 00 00 ac 0a 00 00 84 76 27 dd ea 8e 05 ..........v'.... 0050 b6 d0 bd 44 77 bc 7c 0a fe 04 b6 55 ea 3d 0e ba ...Dw.|....U.=.. 0060 49 f9 df 9a 8d ed fc 82 b8 e6 5b 1c 72 70 10 04 I.........[.rp.. 0070 3f 78 71 30 55 d7 7e 72 06 dc 4b 8a 09 26 86 cd ?xq0U.~r..K..&.. 0080 90 ee 38 b6 ee 8f 05 4b 23 49 37 b6 5b 29 ca 85 ..8....K#I7.[).. 0090 99 bd c6 e2 a9 25 b2 32 7c ad 33 61 78 fe 0e 3c .....%.2|.3ax..< 00a0 2e eb cb 85 82 8b fb e2 bc 92 9a 67 53 4f 87 97 ...........gSO.. 00b0 e0 d0 cd 7f 47 50 95 89 e1 e9 bf 8d 6d 22 67 25 ....GP......m"g% 00c0 2e 9c a7 74 b5 b5 39 4c e8 89 00 00 00 0c 8e 0a ...t..9L........ 00d0 b3 21 46 80 a3 07 e0 25 a3 b3 .!F....%.. Frame 5 (138 bytes on wire, 138 bytes captured) Arrival Time: May 19, 2005 13:56:42.958501000 Time delta from previous packet: 0.152413000 seconds Time since reference or first frame: 0.681598000 seconds Frame Number: 5 Packet Length: 138 bytes Capture Length: 138 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:09:5b:2b:a8:d7 Destination: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0x586f1773 (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.125 (165.227.249.125) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0xfa94 (64148) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x4131 (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.125 (165.227.249.125) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 100 Checksum: 0xb087 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x579B5453A7FD5272 Responder cookie: 0xBA83AB9DA9D93759 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 92 Encrypted payload (64 bytes) 0000 00 09 5b 2b a8 d7 00 a0 8e 72 1e 40 08 00 45 00 ..[+.....r.@..E. 0010 00 78 fa 94 00 00 40 11 41 31 a5 e3 f9 6a a5 e3 .x....@.A1...j.. 0020 f9 7d 01 f4 01 f4 00 64 b0 87 57 9b 54 53 a7 fd .}.....d..W.TS.. 0030 52 72 ba 83 ab 9d a9 d9 37 59 05 10 02 01 00 00 Rr......7Y...... 0040 00 00 00 00 00 5c 4b 1c a9 e8 4d a6 d2 20 f7 61 .....\K...M.. .a 0050 f1 59 3f e5 0b 14 b0 b7 5c b6 52 ed 8e 2c 2a 58 .Y?.....\.R..,*X 0060 49 81 44 20 c1 07 f9 55 d2 72 4f 88 58 97 e6 a5 I.D ...U.rO.X... 0070 85 77 54 86 e1 52 0f 64 ae 22 e0 c8 bf 3b 03 bb .wT..R.d."...;.. 0080 98 50 65 26 f2 3f 58 6f 17 73 .Pe&.?Xo.s Frame 6 (114 bytes on wire, 114 bytes captured) Arrival Time: May 19, 2005 13:56:43.452135000 Time delta from previous packet: 0.493634000 seconds Time since reference or first frame: 1.175232000 seconds Frame Number: 6 Packet Length: 114 bytes Capture Length: 114 bytes Ethernet II, Src: 00:09:5b:2b:a8:d7, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Type: IP (0x0800) Frame check sequence: 0x32069db4 (correct) Internet Protocol, Src Addr: 165.227.249.125 (165.227.249.125), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0x0047 (71) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3b97 (correct) Source: 165.227.249.125 (165.227.249.125) Destination: 165.227.249.106 (165.227.249.106) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 76 Checksum: 0xea52 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x579B5453A7FD5272 Responder cookie: 0xBA83AB9DA9D93759 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 68 Encrypted payload (40 bytes) 0000 00 a0 8e 72 1e 40 00 09 5b 2b a8 d7 08 00 45 00 ...r.@..[+....E. 0010 00 60 00 47 00 00 40 11 3b 97 a5 e3 f9 7d a5 e3 .`.G..@.;....}.. 0020 f9 6a 01 f4 01 f4 00 4c ea 52 57 9b 54 53 a7 fd .j.....L.RW.TS.. 0030 52 72 ba 83 ab 9d a9 d9 37 59 05 10 02 01 00 00 Rr......7Y...... 0040 00 00 00 00 00 44 46 5e 43 0a 24 8c 3e 33 7e f1 .....DF^C.$.>3~. 0050 6b da 5f 3a 04 fd 9e e3 6b 63 c7 a5 ac dc f0 7b k._:....kc.....{ 0060 1f f2 e8 37 41 41 e2 50 79 ff e5 ed a7 49 32 06 ...7AA.Py....I2. 0070 9d b4 .. Frame 7 (114 bytes on wire, 114 bytes captured) Arrival Time: May 19, 2005 13:56:43.454566000 Time delta from previous packet: 0.002431000 seconds Time since reference or first frame: 1.177663000 seconds Frame Number: 7 Packet Length: 114 bytes Capture Length: 114 bytes Ethernet II, Src: 00:09:5b:2b:a8:d7, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Type: IP (0x0800) Frame check sequence: 0x37daf6fd (correct) Internet Protocol, Src Addr: 165.227.249.125 (165.227.249.125), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0x0048 (72) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3b96 (correct) Source: 165.227.249.125 (165.227.249.125) Destination: 165.227.249.106 (165.227.249.106) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 76 Checksum: 0xe607 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x579B5453A7FD5272 Responder cookie: 0xBA83AB9DA9D93759 Next payload: Hash (8) Version: 1.0 Exchange type: Informational (5) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xDC627496 Length: 68 Encrypted payload (40 bytes) 0000 00 a0 8e 72 1e 40 00 09 5b 2b a8 d7 08 00 45 00 ...r.@..[+....E. 0010 00 60 00 48 00 00 40 11 3b 96 a5 e3 f9 7d a5 e3 .`.H..@.;....}.. 0020 f9 6a 01 f4 01 f4 00 4c e6 07 57 9b 54 53 a7 fd .j.....L..W.TS.. 0030 52 72 ba 83 ab 9d a9 d9 37 59 08 10 05 01 dc 62 Rr......7Y.....b 0040 74 96 00 00 00 44 31 49 0d fb 80 bf 85 cd 36 0b t....D1I......6. 0050 ec c0 11 30 6d 8c fe 31 6d a0 f5 7d 6f 8e b2 c6 ...0m..1m..}o... 0060 0d de 17 92 14 0a d6 5b a0 7b 0e 74 60 f0 37 da .......[.{.t`.7. 0070 f6 fd .. Frame 8 (338 bytes on wire, 338 bytes captured) Arrival Time: May 19, 2005 13:56:43.578068000 Time delta from previous packet: 0.123502000 seconds Time since reference or first frame: 1.301165000 seconds Frame Number: 8 Packet Length: 338 bytes Capture Length: 338 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:09:5b:2b:a8:d7 Destination: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0x9799ebf4 (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.125 (165.227.249.125) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 320 Identification: 0xfa95 (64149) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x4068 (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.125 (165.227.249.125) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 300 Checksum: 0x6359 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x579B5453A7FD5272 Responder cookie: 0xBA83AB9DA9D93759 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x717EFFCB Length: 292 Encrypted payload (264 bytes) 0000 00 09 5b 2b a8 d7 00 a0 8e 72 1e 40 08 00 45 00 ..[+.....r.@..E. 0010 01 40 fa 95 00 00 40 11 40 68 a5 e3 f9 6a a5 e3 .@....@.@h...j.. 0020 f9 7d 01 f4 01 f4 01 2c 63 59 57 9b 54 53 a7 fd .}.....,cYW.TS.. 0030 52 72 ba 83 ab 9d a9 d9 37 59 08 10 20 01 71 7e Rr......7Y.. .q~ 0040 ff cb 00 00 01 24 43 d3 4a c0 50 7c bd 8f 81 d1 .....$C.J.P|.... 0050 2b 15 65 f3 7f 33 bc 58 da 58 4b a9 b9 b4 7a 74 +.e..3.X.XK...zt 0060 d2 39 24 05 73 32 77 33 94 65 98 32 0b 0e b3 cc .9$.s2w3.e.2.... 0070 0c c2 77 31 30 08 76 98 43 5d 23 56 07 72 f2 54 ..w10.v.C]#V.r.T 0080 80 c0 03 51 97 97 2d b6 d4 17 ff e2 4d bc 47 c3 ...Q..-.....M.G. 0090 33 60 e4 01 58 7b 09 51 12 3f b5 86 40 12 78 ab 3`..X{.Q.?..@.x. 00a0 6d 7c 0d 6c 59 23 d6 88 e6 d4 6c 50 b6 ee 0c 09 m|.lY#....lP.... 00b0 5e e2 9a 52 d8 02 da cd 9f 66 8c 2b fa 18 94 ec ^..R.....f.+.... 00c0 c8 37 ea fd 8e 41 e4 fd 16 88 dd 72 1b a7 51 34 .7...A.....r..Q4 00d0 d0 0c 6b 15 f7 88 6e b4 91 29 2f 4f 10 c3 40 eb ..k...n..)/O..@. 00e0 c8 51 ee ce cf 3c 40 2c 4c 92 48 e1 91 64 b2 c7 .Q...<@,L.H..d.. 00f0 39 22 b2 d7 b9 63 6e 53 3d 6f c0 fe e2 65 ad 1a 9"...cnS=o...e.. 0100 7b c6 81 00 1f c0 8d 84 38 21 8d 51 42 ba 35 e3 {.......8!.QB.5. 0110 55 c2 60 1c 8c 95 db 20 ae 43 22 56 4e 63 2a 10 U.`.... .C"VNc*. 0120 b5 12 1e f4 8d d3 0b 09 33 d5 ec 22 9f cb 38 ad ........3.."..8. 0130 60 a8 17 70 1b db dc 29 ff 5f bc 5d bc ec 9d c7 `..p...)._.].... 0140 22 ef 37 fa da 2d 19 d8 b6 2d 99 24 09 c1 97 99 ".7..-...-.$.... 0150 eb f4 .. Frame 9 (330 bytes on wire, 330 bytes captured) Arrival Time: May 19, 2005 13:56:43.985002000 Time delta from previous packet: 0.406934000 seconds Time since reference or first frame: 1.708099000 seconds Frame Number: 9 Packet Length: 330 bytes Capture Length: 330 bytes Ethernet II, Src: 00:09:5b:2b:a8:d7, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Type: IP (0x0800) Frame check sequence: 0x8b9ce990 (correct) Internet Protocol, Src Addr: 165.227.249.125 (165.227.249.125), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 312 Identification: 0x0049 (73) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3abd (correct) Source: 165.227.249.125 (165.227.249.125) Destination: 165.227.249.106 (165.227.249.106) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 292 Checksum: 0xa4c6 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x579B5453A7FD5272 Responder cookie: 0xBA83AB9DA9D93759 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x717EFFCB Length: 284 Encrypted payload (256 bytes) 0000 00 a0 8e 72 1e 40 00 09 5b 2b a8 d7 08 00 45 00 ...r.@..[+....E. 0010 01 38 00 49 00 00 40 11 3a bd a5 e3 f9 7d a5 e3 .8.I..@.:....}.. 0020 f9 6a 01 f4 01 f4 01 24 a4 c6 57 9b 54 53 a7 fd .j.....$..W.TS.. 0030 52 72 ba 83 ab 9d a9 d9 37 59 08 10 20 01 71 7e Rr......7Y.. .q~ 0040 ff cb 00 00 01 1c 27 31 4e 5a 88 a2 de 0b 77 56 ......'1NZ....wV 0050 1d c7 ba 55 ec 13 f7 e9 5b cb 2c 33 2f b8 fd 38 ...U....[.,3/..8 0060 24 85 75 61 50 32 49 dd bf f6 af 23 6f 94 00 76 $.uaP2I....#o..v 0070 7d c8 30 f5 c1 d4 14 98 f4 12 6b 57 bb 57 77 94 }.0.......kW.Ww. 0080 3d 74 15 9a 4f 35 1c 1f 59 f2 df 9d 33 85 7e a5 =t..O5..Y...3.~. 0090 9a cd 92 3c a3 d3 5f b7 f6 ed 69 5f e2 73 31 5e ...<.._...i_.s1^ 00a0 c4 0f 27 dd 07 bb 5c 24 03 80 20 b5 97 31 09 a0 ..'...\$.. ..1.. 00b0 56 4d a3 db a3 04 b6 fc e8 7b d3 fc f2 89 e1 01 VM.......{...... 00c0 85 fa ca 71 e4 89 a4 51 5d 3f 0e b3 ff 08 51 b0 ...q...Q]?....Q. 00d0 84 49 af 8c 17 c8 92 ff 6f 10 85 21 60 65 b0 f5 .I......o..!`e.. 00e0 10 a3 ae 53 13 17 e7 d2 42 64 40 20 b4 24 85 32 ...S....Bd@ .$.2 00f0 8c a6 bc 2d 81 f6 d9 15 27 83 5d 43 69 3a 93 74 ...-....'.]Ci:.t 0100 05 35 bf 73 2c 31 c6 9f 1b 45 2d 93 79 13 55 fd .5.s,1...E-.y.U. 0110 e6 a2 78 25 d7 87 e5 fb c7 89 f3 15 7e 21 cc ef ..x%........~!.. 0120 17 bf 49 ae 40 27 f2 d7 cf d8 69 ce 97 4c 6f c1 ..I.@'....i..Lo. 0130 9e cc e7 f5 c1 6d 42 a9 f0 f0 6b 80 fa c2 ca b5 .....mB...k..... 0140 33 7f 23 88 77 94 8b 9c e9 90 3.#.w..... Frame 10 (98 bytes on wire, 98 bytes captured) Arrival Time: May 19, 2005 13:56:44.145478000 Time delta from previous packet: 0.160476000 seconds Time since reference or first frame: 1.868575000 seconds Frame Number: 10 Packet Length: 98 bytes Capture Length: 98 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:09:5b:2b:a8:d7 Destination: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0x7028253f (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.125 (165.227.249.125) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 80 Identification: 0xfa96 (64150) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x4157 (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.125 (165.227.249.125) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 60 Checksum: 0xf2d5 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x579B5453A7FD5272 Responder cookie: 0xBA83AB9DA9D93759 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x717EFFCB Length: 52 Encrypted payload (24 bytes) 0000 00 09 5b 2b a8 d7 00 a0 8e 72 1e 40 08 00 45 00 ..[+.....r.@..E. 0010 00 50 fa 96 00 00 40 11 41 57 a5 e3 f9 6a a5 e3 .P....@.AW...j.. 0020 f9 7d 01 f4 01 f4 00 3c f2 d5 57 9b 54 53 a7 fd .}.....<..W.TS.. 0030 52 72 ba 83 ab 9d a9 d9 37 59 08 10 20 01 71 7e Rr......7Y.. .q~ 0040 ff cb 00 00 00 34 3a 3b 98 35 e5 04 40 c5 52 80 .....4:;.5..@.R. 0050 ee c1 ea d9 39 29 23 6b 6f 80 73 fd de 5c 70 28 ....9)#ko.s..\p( 0060 25 3f %? Frame 11 (130 bytes on wire, 130 bytes captured) Arrival Time: May 19, 2005 13:56:44.650603000 Time delta from previous packet: 0.505125000 seconds Time since reference or first frame: 2.373700000 seconds Frame Number: 11 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:09:5b:2b:a8:d7 Destination: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0xb26fd1c3 (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.125 (165.227.249.125) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0xfa97 (64151) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x4115 (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.125 (165.227.249.125) Encapsulating Security Payload SPI: 0xec6501a5 Sequence: 1 Data (84 bytes) 0000 00 09 5b 2b a8 d7 00 a0 8e 72 1e 40 08 00 45 00 ..[+.....r.@..E. 0010 00 70 fa 97 00 00 40 32 41 15 a5 e3 f9 6a a5 e3 .p....@2A....j.. 0020 f9 7d ec 65 01 a5 00 00 00 01 73 a6 7e 3d 1c 12 .}.e......s.~=.. 0030 aa 37 71 ae 0d 45 fb ca fc e6 90 0d 7c 83 73 99 .7q..E......|.s. 0040 ae 41 e8 b9 0c d1 86 14 e9 37 cd c0 3c 3f 26 74 .A.......7...$.4y.....0.2x8 0070 18 2d aa d4 8a 09 5c 62 92 69 49 8f 7c 34 d9 f4 .-....\b.iI.|4.. 0080 61 6c al Frame 13 (130 bytes on wire, 130 bytes captured) Arrival Time: May 19, 2005 13:56:44.654470000 Time delta from previous packet: 0.002226000 seconds Time since reference or first frame: 2.377567000 seconds Frame Number: 13 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:09:5b:2b:a8:d7 Destination: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0xbbb20d39 (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.125 (165.227.249.125) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0xfa98 (64152) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x4114 (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.125 (165.227.249.125) Encapsulating Security Payload SPI: 0xec6501a5 Sequence: 2 Data (84 bytes) 0000 00 09 5b 2b a8 d7 00 a0 8e 72 1e 40 08 00 45 00 ..[+.....r.@..E. 0010 00 70 fa 98 00 00 40 32 41 14 a5 e3 f9 6a a5 e3 .p....@2A....j.. 0020 f9 7d ec 65 01 a5 00 00 00 02 7e 8b 08 d0 97 d0 .}.e......~..... 0030 ef 59 2d 47 96 23 44 89 78 32 48 ca ea 24 ec 27 .Y-G.#D.x2H..$.' 0040 b2 b6 a0 24 9e 76 5b 6d 66 19 77 60 da ea eb b1 ...$.v[mf.w`.... 0050 7e 21 3e e2 aa 85 9b bb 13 cf e5 77 5a c4 ca fd ~!>........wZ... 0060 f6 b7 b8 39 fd b4 cc 92 d1 df 9d 48 90 24 4c 80 ...9.......H.$L. 0070 dd c2 64 20 e8 db 86 23 a4 90 15 7c 66 ad bb b2 ..d ...#...|f... 0080 0d 39 .9 Frame 14 (130 bytes on wire, 130 bytes captured) Arrival Time: May 19, 2005 13:56:44.655768000 Time delta from previous packet: 0.001298000 seconds Time since reference or first frame: 2.378865000 seconds Frame Number: 14 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:09:5b:2b:a8:d7, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Type: IP (0x0800) Frame check sequence: 0x276ab818 (correct) Internet Protocol, Src Addr: 165.227.249.125 (165.227.249.125), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x421a (16922) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 30 Protocol: ESP (0x32) Header checksum: 0x1b93 (correct) Source: 165.227.249.125 (165.227.249.125) Destination: 165.227.249.106 (165.227.249.106) Encapsulating Security Payload SPI: 0xb8b61400 Sequence: 2 Data (84 bytes) 0000 00 a0 8e 72 1e 40 00 09 5b 2b a8 d7 08 00 45 00 ...r.@..[+....E. 0010 00 70 42 1a 00 00 1e 32 1b 93 a5 e3 f9 7d a5 e3 .pB....2.....}.. 0020 f9 6a b8 b6 14 00 00 00 00 02 d1 30 dd 32 78 38 .j.........0.2x8 0030 18 2d 5e d6 e0 16 74 3f 3b c9 18 a0 fd 3a 7a ae .-^...t?;....:z. 0040 86 af 85 9a 34 f6 48 54 ae 3e 15 83 10 dd 7b 51 ....4.HT.>....{Q 0050 84 46 4e 03 d6 75 05 88 1b af 52 f1 2c 3f a7 2f .FN..u....R.,?./ 0060 6d 2a 87 a8 3e f9 40 66 59 02 0a 6c b6 86 8e fd m*..>.@fY..l.... 0070 a1 38 ec 62 4a ea 43 04 f9 4d 59 db 32 c8 27 6a .8.bJ.C..MY.2.'j 0080 b8 18 .. Frame 15 (130 bytes on wire, 130 bytes captured) Arrival Time: May 19, 2005 13:56:45.649406000 Time delta from previous packet: 0.993638000 seconds Time since reference or first frame: 3.372503000 seconds Frame Number: 15 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:09:5b:2b:a8:d7 Destination: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0x91f69204 (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.125 (165.227.249.125) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0xfa99 (64153) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x4113 (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.125 (165.227.249.125) Encapsulating Security Payload SPI: 0xec6501a5 Sequence: 3 Data (84 bytes) 0000 00 09 5b 2b a8 d7 00 a0 8e 72 1e 40 08 00 45 00 ..[+.....r.@..E. 0010 00 70 fa 99 00 00 40 32 41 13 a5 e3 f9 6a a5 e3 .p....@2A....j.. 0020 f9 7d ec 65 01 a5 00 00 00 03 09 39 e6 eb 08 53 .}.e.......9...S 0030 67 38 9e 27 7f 7f 18 72 20 a4 8b c2 33 af 85 bc g8.'...r ...3... 0040 35 2a b9 c5 71 2d 86 bf 38 6d ff 18 6a 5b 69 18 5*..q-..8m..j[i. 0050 b3 19 3a cf 33 fd fa 8d 92 bb 43 ac f6 1c 01 13 ..:.3.....C..... 0060 48 2f cf da 77 08 d0 fb 91 8c cd e5 7a 24 bd 7a H/..w.......z$.z 0070 ff 9f dd 86 ee dd 39 2c 54 75 b3 8e d5 4e 91 f6 ......9,Tu...N.. 0080 92 04 .. Frame 16 (130 bytes on wire, 130 bytes captured) Arrival Time: May 19, 2005 13:56:45.650679000 Time delta from previous packet: 0.001273000 seconds Time since reference or first frame: 3.373776000 seconds Frame Number: 16 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:09:5b:2b:a8:d7, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Type: IP (0x0800) Frame check sequence: 0xd80f9f5d (correct) Internet Protocol, Src Addr: 165.227.249.125 (165.227.249.125), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x8bfd (35837) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 30 Protocol: ESP (0x32) Header checksum: 0xd1af (correct) Source: 165.227.249.125 (165.227.249.125) Destination: 165.227.249.106 (165.227.249.106) Encapsulating Security Payload SPI: 0xb8b61400 Sequence: 3 Data (84 bytes) 0000 00 a0 8e 72 1e 40 00 09 5b 2b a8 d7 08 00 45 00 ...r.@..[+....E. 0010 00 70 8b fd 00 00 1e 32 d1 af a5 e3 f9 7d a5 e3 .p.....2.....}.. 0020 f9 6a b8 b6 14 00 00 00 00 03 0a 6c b6 86 8e fd .j.........l.... 0030 a1 38 56 5b b6 33 1c b0 a1 54 f9 4b 1f 2c 4e 1c .8V[.3...T.K.,N. 0040 ac e2 e8 65 86 0d b5 9b 33 56 79 b8 b0 0b df 40 ...e....3Vy....@ 0050 1a 09 5d 06 09 48 26 f4 24 f0 79 15 d8 f4 85 24 ..]..H&.$.y....$ 0060 92 c7 87 98 4d 14 20 90 c1 02 9e 0e 4e d0 9f dc ....M. .....N... 0070 4f 09 5b 07 7a 8b c7 66 35 d4 f4 b9 ef 8c d8 0f O.[.z..f5....... 0080 9f 5d .] Frame 17 (130 bytes on wire, 130 bytes captured) Arrival Time: May 19, 2005 13:56:46.649412000 Time delta from previous packet: 0.998733000 seconds Time since reference or first frame: 4.372509000 seconds Frame Number: 17 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:09:5b:2b:a8:d7 Destination: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0x9d23f271 (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.125 (165.227.249.125) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0xfa9a (64154) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x4112 (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.125 (165.227.249.125) Encapsulating Security Payload SPI: 0xec6501a5 Sequence: 4 Data (84 bytes) 0000 00 09 5b 2b a8 d7 00 a0 8e 72 1e 40 08 00 45 00 ..[+.....r.@..E. 0010 00 70 fa 9a 00 00 40 32 41 12 a5 e3 f9 6a a5 e3 .p....@2A....j.. 0020 f9 7d ec 65 01 a5 00 00 00 04 39 0b c9 9f fb 02 .}.e......9..... 0030 e2 34 ac 21 5a 25 cd e4 cd 49 cd 74 18 c6 c8 03 .4.!Z%...I.t.... 0040 bb 11 27 a3 fb b9 35 45 9d 68 23 83 d2 32 0c 8b ..'...5E.h#..2.. 0050 77 20 59 61 12 69 aa 83 cd 1f 2f 6e 89 64 97 04 w Ya.i..../n.d.. 0060 dd c2 5a 9c 82 b2 16 79 ec eb 88 6e 84 8e 66 7b ..Z....y...n..f{ 0070 b8 53 1a 9f 68 83 0c 4d 42 af 34 22 70 c8 9d 23 .S..h..MB.4"p..# 0080 f2 71 .q Frame 18 (130 bytes on wire, 130 bytes captured) Arrival Time: May 19, 2005 13:56:46.651014000 Time delta from previous packet: 0.001602000 seconds Time since reference or first frame: 4.374111000 seconds Frame Number: 18 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:09:5b:2b:a8:d7, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Type: IP (0x0800) Frame check sequence: 0x4d9f85f2 (correct) Internet Protocol, Src Addr: 165.227.249.125 (165.227.249.125), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x14d8 (5336) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 30 Protocol: ESP (0x32) Header checksum: 0x48d5 (correct) Source: 165.227.249.125 (165.227.249.125) Destination: 165.227.249.106 (165.227.249.106) Encapsulating Security Payload SPI: 0xb8b61400 Sequence: 4 Data (84 bytes) 0000 00 a0 8e 72 1e 40 00 09 5b 2b a8 d7 08 00 45 00 ...r.@..[+....E. 0010 00 70 14 d8 00 00 1e 32 48 d5 a5 e3 f9 7d a5 e3 .p.....2H....}.. 0020 f9 6a b8 b6 14 00 00 00 00 04 9e 0e 4e d0 9f dc .j..........N... 0030 4f 09 66 3f ed c7 91 64 a9 e1 ef 17 7d 90 60 91 O.f?...d....}.`. 0040 72 41 68 a0 27 b8 4c 24 57 2a a8 aa 88 d9 ea 9f rAh.'.L$W*...... 0050 bf 51 0c b4 26 c5 25 a3 a8 c0 75 73 c5 c2 de 7c .Q..&.%...us...| 0060 6b cd ed 7a a8 02 11 f4 2f 87 68 ae 40 7f 34 3f k..z..../.h.@.4? 0070 76 65 5e 83 26 18 9e 19 02 cc 48 99 56 a5 4d 9f ve^.&.....H.V.M. 0080 85 f2 ..