Frame 1 (126 bytes on wire, 126 bytes captured) Arrival Time: May 19, 2005 14:10:13.147686000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 126 bytes Capture Length: 126 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:07:e9:0f:d4:32 Destination: 00:07:e9:0f:d4:32 (00:07:e9:0f:d4:32) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0x2c338c6b (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.127 (165.227.249.127) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 108 Identification: 0xfaf0 (64240) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x40df (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.127 (165.227.249.127) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 88 Checksum: 0x0ad4 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xD7B088DAD52B0589 Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 80 Security Association payload Next payload: NONE (0) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 40 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 32 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) 0000 00 07 e9 0f d4 32 00 a0 8e 72 1e 40 08 00 45 00 .....2...r.@..E. 0010 00 6c fa f0 00 00 40 11 40 df a5 e3 f9 6a a5 e3 .l....@.@....j.. 0020 f9 7f 01 f4 01 f4 00 58 0a d4 d7 b0 88 da d5 2b .......X.......+ 0030 05 89 00 00 00 00 00 00 00 00 01 10 02 00 00 00 ................ 0040 00 00 00 00 00 50 00 00 00 34 00 00 00 01 00 00 .....P...4...... 0050 00 01 00 00 00 28 01 01 00 01 00 00 00 20 01 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 04 00 02 80 03 ................ 0070 00 01 80 0b 00 01 80 0c 70 80 2c 33 8c 6b ........p.,3.k Frame 2 (158 bytes on wire, 158 bytes captured) Arrival Time: May 19, 2005 14:10:13.149112000 Time delta from previous packet: 0.001426000 seconds Time since reference or first frame: 0.001426000 seconds Frame Number: 2 Packet Length: 158 bytes Capture Length: 158 bytes Ethernet II, Src: 00:07:e9:0f:d4:32, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:07:e9:0f:d4:32 (00:07:e9:0f:d4:32) Type: IP (0x0800) Frame check sequence: 0x36940416 (correct) Internet Protocol, Src Addr: 165.227.249.127 (165.227.249.127), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 140 Identification: 0x0064 (100) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3b4c (correct) Source: 165.227.249.127 (165.227.249.127) Destination: 165.227.249.106 (165.227.249.106) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 120 Checksum: 0xfd55 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xD7B088DAD52B0589 Responder cookie: 0xB41646F8586A3237 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 112 Security Association payload Next payload: Vendor ID (13) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 40 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 32 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: unknown vendor ID: 0x402F7B247B5A5066C1FB9F53F480C9F5 Vendor ID payload Next payload: NONE (0) Length: 12 Vendor ID: draft-beaulieu-ike-xauth-02.txt 0000 00 a0 8e 72 1e 40 00 07 e9 0f d4 32 08 00 45 00 ...r.@.....2..E. 0010 00 8c 00 64 00 00 40 11 3b 4c a5 e3 f9 7f a5 e3 ...d..@.;L...... 0020 f9 6a 01 f4 01 f4 00 78 fd 55 d7 b0 88 da d5 2b .j.....x.U.....+ 0030 05 89 b4 16 46 f8 58 6a 32 37 01 10 02 00 00 00 ....F.Xj27...... 0040 00 00 00 00 00 70 0d 00 00 34 00 00 00 01 00 00 .....p...4...... 0050 00 01 00 00 00 28 01 01 00 01 00 00 00 20 01 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 04 00 02 80 03 ................ 0070 00 01 80 0b 00 01 80 0c 70 80 0d 00 00 14 40 2f ........p.....@/ 0080 7b 24 7b 5a 50 66 c1 fb 9f 53 f4 80 c9 f5 00 00 {${ZPf...S...... 0090 00 0c 09 00 26 89 df d6 b7 12 36 94 04 16 ....&.....6... Frame 3 (262 bytes on wire, 262 bytes captured) Arrival Time: May 19, 2005 14:10:13.273235000 Time delta from previous packet: 0.124123000 seconds Time since reference or first frame: 0.125549000 seconds Frame Number: 3 Packet Length: 262 bytes Capture Length: 262 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:07:e9:0f:d4:32 Destination: 00:07:e9:0f:d4:32 (00:07:e9:0f:d4:32) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0x2f8bbd6b (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.127 (165.227.249.127) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 244 Identification: 0xfaf1 (64241) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x4056 (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.127 (165.227.249.127) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 224 Checksum: 0xb6b9 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xD7B088DAD52B0589 Responder cookie: 0xB41646F8586A3237 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 216 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: Vendor ID (13) Length: 24 Nonce Data Vendor ID payload Next payload: NONE (0) Length: 32 Vendor ID: unknown vendor ID: 0x03000014D18D7CC944821C2BEE77EE84... 0000 00 07 e9 0f d4 32 00 a0 8e 72 1e 40 08 00 45 00 .....2...r.@..E. 0010 00 f4 fa f1 00 00 40 11 40 56 a5 e3 f9 6a a5 e3 ......@.@V...j.. 0020 f9 7f 01 f4 01 f4 00 e0 b6 b9 d7 b0 88 da d5 2b ...............+ 0030 05 89 b4 16 46 f8 58 6a 32 37 04 10 02 00 00 00 ....F.Xj27...... 0040 00 00 00 00 00 d8 0a 00 00 84 e1 d0 f6 6d 2f 1b .............m/. 0050 80 20 72 b4 ab ab 86 b6 c3 1c 94 2c 6d 39 3f 9d . r........,m9?. 0060 47 ff 0a 12 f5 9b 7a a9 0e 9e 44 12 ec ee db 9a G.....z...D..... 0070 84 3a b5 2b be 4c 64 b7 20 4f ac b2 d4 6e 9e ee .:.+.Ld. O...n.. 0080 c9 0e c3 64 c7 2d 73 c8 ea 2f 0f 23 ee a0 76 b4 ...d.-s../.#..v. 0090 d7 b3 0b 45 52 b0 b9 c8 da 31 6e 7b 2a 91 c7 4f ...ER....1n{*..O 00a0 bf f2 1d 48 66 fd 57 2f ab 99 0e a8 e6 82 78 f0 ...Hf.W/......x. 00b0 d2 8d 3f 24 de f4 93 2e b9 4d 14 8b 6d 68 23 b1 ..?$.....M..mh#. 00c0 28 ef 1b e4 37 e9 55 d7 4f aa 0d 00 00 18 01 b9 (...7.U.O....... 00d0 e6 54 7a a6 22 b2 08 94 18 89 34 d7 a0 ce ed 65 .Tz.".....4....e 00e0 ec 4f 00 00 00 20 03 00 00 14 d1 8d 7c c9 44 82 .O... ......|.D. 00f0 1c 2b ee 77 ee 84 1d 68 6d 98 00 00 00 08 00 06 .+.w...hm....... 0100 00 02 2f 8b bd 6b ../..k Frame 4 (226 bytes on wire, 226 bytes captured) Arrival Time: May 19, 2005 14:10:13.309653000 Time delta from previous packet: 0.036418000 seconds Time since reference or first frame: 0.161967000 seconds Frame Number: 4 Packet Length: 226 bytes Capture Length: 226 bytes Ethernet II, Src: 00:07:e9:0f:d4:32, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:07:e9:0f:d4:32 (00:07:e9:0f:d4:32) Type: IP (0x0800) Frame check sequence: 0x1898c488 (correct) Internet Protocol, Src Addr: 165.227.249.127 (165.227.249.127), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 208 Identification: 0x0065 (101) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3b07 (correct) Source: 165.227.249.127 (165.227.249.127) Destination: 165.227.249.106 (165.227.249.106) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 188 Checksum: 0x06a7 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xD7B088DAD52B0589 Responder cookie: 0xB41646F8586A3237 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 180 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 20 Nonce Data 0000 00 a0 8e 72 1e 40 00 07 e9 0f d4 32 08 00 45 00 ...r.@.....2..E. 0010 00 d0 00 65 00 00 40 11 3b 07 a5 e3 f9 7f a5 e3 ...e..@.;....... 0020 f9 6a 01 f4 01 f4 00 bc 06 a7 d7 b0 88 da d5 2b .j.............+ 0030 05 89 b4 16 46 f8 58 6a 32 37 04 10 02 00 00 00 ....F.Xj27...... 0040 00 00 00 00 00 b4 0a 00 00 84 13 58 b1 c4 35 bf ...........X..5. 0050 2c 9c 5f 11 72 38 f7 0d da 7e e2 66 bd 9b c7 bd ,._.r8...~.f.... 0060 92 7d 2f d6 33 05 d2 25 71 f3 79 bd f6 fe 9a 01 .}/.3..%q.y..... 0070 87 04 ca b4 b0 96 46 2e df 95 cd 8f ce a8 dc c3 ......F......... 0080 e6 f5 80 d0 86 13 51 10 9e bc 13 06 09 92 91 29 ......Q........) 0090 95 67 f4 3d 5c 7a a1 3a d1 5d c7 76 3a 36 90 7c .g.=\z.:.].v:6.| 00a0 00 b5 10 37 51 77 fd 84 77 8e f5 51 3a f0 3c 47 ...7Qw..w..Q:..[^..`..\...%/ 0060 d5 4e 40 6f cc e0 a6 f6 fe ee 25 b6 81 92 43 f0 .N@o......%...C. 0070 5d 37 da bd 35 29 a1 92 b3 ee 9a 10 62 bd b5 22 ]7..5)......b.." 0080 61 a3 b0 99 dc 99 4d 60 43 2a a.....M`C* Frame 6 (114 bytes on wire, 114 bytes captured) Arrival Time: May 19, 2005 14:10:13.462653000 Time delta from previous packet: 0.000875000 seconds Time since reference or first frame: 0.314967000 seconds Frame Number: 6 Packet Length: 114 bytes Capture Length: 114 bytes Ethernet II, Src: 00:07:e9:0f:d4:32, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:07:e9:0f:d4:32 (00:07:e9:0f:d4:32) Type: IP (0x0800) Frame check sequence: 0x4c75fc79 (correct) Internet Protocol, Src Addr: 165.227.249.127 (165.227.249.127), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0x0066 (102) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3b76 (correct) Source: 165.227.249.127 (165.227.249.127) Destination: 165.227.249.106 (165.227.249.106) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 76 Checksum: 0x063f (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xD7B088DAD52B0589 Responder cookie: 0xB41646F8586A3237 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 68 Encrypted payload (40 bytes) 0000 00 a0 8e 72 1e 40 00 07 e9 0f d4 32 08 00 45 00 ...r.@.....2..E. 0010 00 60 00 66 00 00 40 11 3b 76 a5 e3 f9 7f a5 e3 .`.f..@.;v...... 0020 f9 6a 01 f4 01 f4 00 4c 06 3f d7 b0 88 da d5 2b .j.....L.?.....+ 0030 05 89 b4 16 46 f8 58 6a 32 37 05 10 02 01 00 00 ....F.Xj27...... 0040 00 00 00 00 00 44 30 5b d5 7b d6 b0 c4 4d 61 bf .....D0[.{...Ma. 0050 4f 4f 93 d4 cc f6 b2 33 05 2f d8 e7 0a 11 90 57 OO.....3./.....W 0060 14 4e 91 76 25 9a 5f 2f 97 f6 53 23 fb 2c 4c 75 .N.v%._/..S#.,Lu 0070 fc 79 .y Frame 7 (338 bytes on wire, 338 bytes captured) Arrival Time: May 19, 2005 14:10:13.590548000 Time delta from previous packet: 0.127895000 seconds Time since reference or first frame: 0.442862000 seconds Frame Number: 7 Packet Length: 338 bytes Capture Length: 338 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:07:e9:0f:d4:32 Destination: 00:07:e9:0f:d4:32 (00:07:e9:0f:d4:32) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0x30b3367e (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.127 (165.227.249.127) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 320 Identification: 0xfaf3 (64243) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x4008 (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.127 (165.227.249.127) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 300 Checksum: 0xacdb (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xD7B088DAD52B0589 Responder cookie: 0xB41646F8586A3237 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x4544975E Length: 292 Encrypted payload (264 bytes) 0000 00 07 e9 0f d4 32 00 a0 8e 72 1e 40 08 00 45 00 .....2...r.@..E. 0010 01 40 fa f3 00 00 40 11 40 08 a5 e3 f9 6a a5 e3 .@....@.@....j.. 0020 f9 7f 01 f4 01 f4 01 2c ac db d7 b0 88 da d5 2b .......,.......+ 0030 05 89 b4 16 46 f8 58 6a 32 37 08 10 20 01 45 44 ....F.Xj27.. .ED 0040 97 5e 00 00 01 24 6f 91 e9 27 04 58 bd 56 0d c2 .^...$o..'.X.V.. 0050 03 ce e0 ea 49 51 be 4c a7 77 93 bb 8d 6b a5 99 ....IQ.L.w...k.. 0060 bb 9b da 0f 06 14 25 45 2d 8a d6 05 70 9d b6 2d ......%E-...p..- 0070 04 24 ff 5e 6c 1a 04 52 2d 46 db 0c 22 ef f7 4e .$.^l..R-F.."..N 0080 e7 3d 3d 98 6c 58 d2 bd b8 45 10 0f 42 53 06 c8 .==.lX...E..BS.. 0090 2e b6 ba 88 56 f2 45 96 bc a3 bd 9f 21 c0 35 f1 ....V.E.....!.5. 00a0 11 c3 9c d6 43 b0 28 dc bf ff 19 3e d9 a1 58 20 ....C.(....>..X 00b0 be 21 2e 8f ff 2b 39 25 97 59 78 2f cf 70 d6 85 .!...+9%.Yx/.p.. 00c0 2d cd f3 de 79 42 8d f1 72 55 82 5b 10 78 aa ea -...yB..rU.[.x.. 00d0 93 d6 4a 9d 4b 48 a8 40 18 0f ca f4 f6 a9 a9 9d ..J.KH.@........ 00e0 6a ed d2 7e b7 c6 5f 16 e6 b6 e5 33 23 7d 46 4b j..~.._....3#}FK 00f0 9d 3f 3f 1f 55 a7 c8 22 ea 44 ca 05 60 f7 2f b3 .??.U..".D..`./. 0100 b9 01 21 1c fa bf ae d7 a6 e0 c0 7e 03 2b 16 12 ..!........~.+.. 0110 01 0d b0 30 12 87 86 88 01 a5 a6 68 34 c1 e8 37 ...0.......h4..7 0120 3a db 67 9b 34 68 76 52 6b 1e eb 82 4c f8 e8 03 :.g.4hvRk...L... 0130 bb 33 9c 85 4c 60 ff f4 eb 99 ac 13 a1 f1 35 00 .3..L`........5. 0140 75 b9 ff e5 c5 e5 fa a8 78 a7 35 ff 99 ae 30 b3 u.......x.5...0. 0150 36 7e 6~ Frame 8 (338 bytes on wire, 338 bytes captured) Arrival Time: May 19, 2005 14:10:13.609559000 Time delta from previous packet: 0.019011000 seconds Time since reference or first frame: 0.461873000 seconds Frame Number: 8 Packet Length: 338 bytes Capture Length: 338 bytes Ethernet II, Src: 00:07:e9:0f:d4:32, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:07:e9:0f:d4:32 (00:07:e9:0f:d4:32) Type: IP (0x0800) Frame check sequence: 0xf4d9090a (correct) Internet Protocol, Src Addr: 165.227.249.127 (165.227.249.127), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 320 Identification: 0x0067 (103) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3a95 (correct) Source: 165.227.249.127 (165.227.249.127) Destination: 165.227.249.106 (165.227.249.106) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 300 Checksum: 0x347b (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xD7B088DAD52B0589 Responder cookie: 0xB41646F8586A3237 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x4544975E Length: 292 Encrypted payload (264 bytes) 0000 00 a0 8e 72 1e 40 00 07 e9 0f d4 32 08 00 45 00 ...r.@.....2..E. 0010 01 40 00 67 00 00 40 11 3a 95 a5 e3 f9 7f a5 e3 .@.g..@.:....... 0020 f9 6a 01 f4 01 f4 01 2c 34 7b d7 b0 88 da d5 2b .j.....,4{.....+ 0030 05 89 b4 16 46 f8 58 6a 32 37 08 10 20 01 45 44 ....F.Xj27.. .ED 0040 97 5e 00 00 01 24 7e b9 bd a8 21 52 bb 81 e1 56 .^...$~...!R...V 0050 fa b3 d8 a3 30 15 c9 de 2f 2e 27 d7 d8 27 4a 3f ....0.../.'..'J? 0060 e2 90 56 6b 92 96 b8 13 f2 79 be b5 da c5 ad f6 ..Vk.....y...... 0070 4d e1 08 51 ea bb 12 9b 17 1a 84 31 a9 18 24 4e M..Q.......1..$N 0080 ae f8 1a 2d 6e 1f 7d 76 4e 63 65 1a fa ba cb 7a ...-n.}vNce....z 0090 83 8c a7 2e 84 fb 24 4d 25 90 ff 72 bc 2f d3 67 ......$M%..r./.g 00a0 82 f1 30 a1 5b 37 61 f8 91 1b 07 fc cc fc c9 77 ..0.[7a........w 00b0 5c e7 de 5b 7d 8a ad 24 6a 84 69 dc 8a d3 4a f4 \..[}..$j.i...J. 00c0 42 2d 20 8b b4 99 58 b4 81 38 fd d3 b4 81 36 6d B- ...X..8....6m 00d0 9a 0e f5 a8 c4 29 a1 e2 79 37 db 92 36 3d 0d 13 .....)..y7..6=.. 00e0 96 b5 e5 65 2c 9e d0 f8 b5 32 af 24 3c 2a 3d 4a ...e,....2.$<*=J 00f0 5a 14 cd ea 56 fa 73 6f 8e f0 2e 7f 6c 65 db af Z...V.so....le.. 0100 36 ce d8 88 1d f5 65 b0 86 37 01 6d d3 91 6f 6c 6.....e..7.m..ol 0110 ea 33 ce aa ba 38 53 da c5 4b 0f 8a 68 23 56 f5 .3...8S..K..h#V. 0120 01 3b e4 98 0d cd cf 42 dc 31 bc 55 66 66 ab ce .;.....B.1.Uff.. 0130 48 b0 ac f5 0d 9b 48 9b a7 1a 13 71 9d 79 2f 59 H.....H....q.y/Y 0140 85 db 58 7a f2 6c 7f 3e 38 5a 27 c5 3c 65 f4 d9 ..Xz.l.>8Z'.......+ 0030 05 89 b4 16 46 f8 58 6a 32 37 08 10 20 01 45 44 ....F.Xj27.. .ED 0040 97 5e 00 00 00 34 7c 7e f1 25 03 97 7c ac 22 16 .^...4|~.%..|.". 0050 7e b2 86 53 54 3d 35 90 5c b3 38 8d 84 54 da b6 ~..ST=5.\.8..T.. 0060 29 88 ). Frame 10 (130 bytes on wire, 130 bytes captured) Arrival Time: May 19, 2005 14:10:18.610960000 Time delta from previous packet: 4.842332000 seconds Time since reference or first frame: 5.463274000 seconds Frame Number: 10 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:07:e9:0f:d4:32 Destination: 00:07:e9:0f:d4:32 (00:07:e9:0f:d4:32) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0x472a102d (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.127 (165.227.249.127) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0xfaf5 (64245) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x40b5 (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.127 (165.227.249.127) Encapsulating Security Payload SPI: 0x00001d4d Sequence: 1 Data (84 bytes) 0000 00 07 e9 0f d4 32 00 a0 8e 72 1e 40 08 00 45 00 .....2...r.@..E. 0010 00 70 fa f5 00 00 40 32 40 b5 a5 e3 f9 6a a5 e3 .p....@2@....j.. 0020 f9 7f 00 00 1d 4d 00 00 00 01 5e 9d fa b7 e8 34 .....M....^....4 0030 b7 55 4a e9 00 e8 5d 4e 78 d8 13 2f 78 9c 27 27 .UJ...]Nx../x.'' 0040 cc 59 ba d6 ec a8 61 20 6e a5 4e cb 74 59 96 92 .Y....a n.N.tY.. 0050 c3 49 f8 d5 5e 49 2a 39 f7 6a ea 76 ac 6b 65 07 .I..^I*9.j.v.ke. 0060 4b 42 cc de 83 5e 85 3f 08 5c 3e af 95 d4 19 eb KB...^.?.\>..... 0070 64 6a 35 2a 96 76 0b 4b f2 41 ea f5 f5 98 47 2a dj5*.v.K.A....G* 0080 10 2d .- Frame 11 (130 bytes on wire, 130 bytes captured) Arrival Time: May 19, 2005 14:10:18.612339000 Time delta from previous packet: 0.001379000 seconds Time since reference or first frame: 5.464653000 seconds Frame Number: 11 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:07:e9:0f:d4:32, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:07:e9:0f:d4:32 (00:07:e9:0f:d4:32) Type: IP (0x0800) Frame check sequence: 0xa47de0e1 (correct) Internet Protocol, Src Addr: 165.227.249.127 (165.227.249.127), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0068 (104) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x3b43 (correct) Source: 165.227.249.127 (165.227.249.127) Destination: 165.227.249.106 (165.227.249.106) Encapsulating Security Payload SPI: 0x63b50c00 Sequence: 2 Data (84 bytes) 0000 00 a0 8e 72 1e 40 00 07 e9 0f d4 32 08 00 45 00 ...r.@.....2..E. 0010 00 70 00 68 00 00 40 32 3b 43 a5 e3 f9 7f a5 e3 .p.h..@2;C...... 0020 f9 6a 63 b5 0c 00 00 00 00 02 98 59 1a 6a 72 08 .jc........Y.jr. 0030 da 91 ec 64 e5 3f e0 8f bc 6b bf cb 8d cb f0 62 ...d.?...k.....b 0040 67 3e 06 d6 c3 8b e7 c2 1b 4e ec bd 61 68 b8 94 g>.......N..ah.. 0050 da 59 9e 2e a2 8c a6 bd 17 4d 10 ce b0 e6 36 5d .Y.......M....6] 0060 d1 60 53 09 fa d3 a0 38 03 2a 81 b8 95 f1 0a ee .`S....8.*...... 0070 49 41 94 1a df 9c c2 30 28 9b f3 92 1e bd a4 7d IA.....0(......} 0080 e0 e1 .. Frame 12 (130 bytes on wire, 130 bytes captured) Arrival Time: May 19, 2005 14:10:19.610561000 Time delta from previous packet: 0.998222000 seconds Time since reference or first frame: 6.462875000 seconds Frame Number: 12 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:07:e9:0f:d4:32 Destination: 00:07:e9:0f:d4:32 (00:07:e9:0f:d4:32) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0x8ef29481 (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.127 (165.227.249.127) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0xfaf6 (64246) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x40b4 (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.127 (165.227.249.127) Encapsulating Security Payload SPI: 0x00001d4d Sequence: 2 Data (84 bytes) 0000 00 07 e9 0f d4 32 00 a0 8e 72 1e 40 08 00 45 00 .....2...r.@..E. 0010 00 70 fa f6 00 00 40 32 40 b4 a5 e3 f9 6a a5 e3 .p....@2@....j.. 0020 f9 7f 00 00 1d 4d 00 00 00 02 6e 7d a3 0a 31 1e .....M....n}..1. 0030 5b 7a 0e 08 47 cf ba 51 68 f2 be da 6c 0a 05 0d [z..G..Qh...l... 0040 21 d8 f3 40 8e 4e 59 00 83 b3 ee 86 e8 95 c2 01 !..@.NY......... 0050 eb e9 b4 5d d6 31 c0 fc 54 5d 79 54 4d b1 52 3a ...].1..T]yTM.R: 0060 bb e1 9c 76 84 a1 36 b0 6f 9c 59 7c b2 78 0c a8 ...v..6.o.Y|.x.. 0070 f0 13 90 0e b9 30 89 e9 7e 60 45 a5 45 57 8e f2 .....0..~`E.EW.. 0080 94 81 .. Frame 13 (130 bytes on wire, 130 bytes captured) Arrival Time: May 19, 2005 14:10:19.611509000 Time delta from previous packet: 0.000948000 seconds Time since reference or first frame: 6.463823000 seconds Frame Number: 13 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:07:e9:0f:d4:32, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:07:e9:0f:d4:32 (00:07:e9:0f:d4:32) Type: IP (0x0800) Frame check sequence: 0xbec8dc8d (correct) Internet Protocol, Src Addr: 165.227.249.127 (165.227.249.127), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0069 (105) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 63 Protocol: ESP (0x32) Header checksum: 0x3c42 (correct) Source: 165.227.249.127 (165.227.249.127) Destination: 165.227.249.106 (165.227.249.106) Encapsulating Security Payload SPI: 0x63b50c00 Sequence: 3 Data (84 bytes) 0000 00 a0 8e 72 1e 40 00 07 e9 0f d4 32 08 00 45 00 ...r.@.....2..E. 0010 00 70 00 69 00 00 3f 32 3c 42 a5 e3 f9 7f a5 e3 .p.i..?2.8..^D..H. ..F. 0040 a4 b4 be aa 0c dc ec 9e 8e cc 85 b7 46 8a fe 43 ............F..C 0050 bc 47 3c 9f b3 27 8a 98 72 b4 ac 72 e9 e7 88 37 .G<..'..r..r...7 0060 d8 71 03 c0 75 0f 6a a4 19 7c 60 3a 68 6a 50 04 .q..u.j..|`:hjP. 0070 77 11 a4 0c bf 3f 0b 8a cc 6a 4a a5 21 66 be c8 w....?...jJ.!f.. 0080 dc 8d .. Frame 14 (130 bytes on wire, 130 bytes captured) Arrival Time: May 19, 2005 14:10:20.610548000 Time delta from previous packet: 0.999039000 seconds Time since reference or first frame: 7.462862000 seconds Frame Number: 14 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:07:e9:0f:d4:32 Destination: 00:07:e9:0f:d4:32 (00:07:e9:0f:d4:32) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0x3a97c916 (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.127 (165.227.249.127) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0xfaf7 (64247) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x40b3 (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.127 (165.227.249.127) Encapsulating Security Payload SPI: 0x00001d4d Sequence: 3 Data (84 bytes) 0000 00 07 e9 0f d4 32 00 a0 8e 72 1e 40 08 00 45 00 .....2...r.@..E. 0010 00 70 fa f7 00 00 40 32 40 b3 a5 e3 f9 6a a5 e3 .p....@2@....j.. 0020 f9 7f 00 00 1d 4d 00 00 00 03 0a 57 3c dd 78 d6 .....M.....W<.x. 0030 5c 65 97 2f 73 68 9d 2a db 0f 0d 21 c8 aa e6 5d \e./sh.*...!...] 0040 31 f9 a2 13 e8 ce 2a a2 b6 ef 7c 04 7c c2 07 23 1.....*...|.|..# 0050 c7 d3 80 f0 cb 21 fc 04 fb 0c 97 39 59 1c 49 d6 .....!.....9Y.I. 0060 b3 11 5e ec e1 b3 96 57 3d 92 2b 4d 42 61 22 b7 ..^....W=.+MBa". 0070 6f 20 1f 68 00 5f 01 f0 3c ad 17 8a db 6b 3a 97 o .h._..<....k:. 0080 c9 16 .. Frame 15 (130 bytes on wire, 130 bytes captured) Arrival Time: May 19, 2005 14:10:20.611611000 Time delta from previous packet: 0.001063000 seconds Time since reference or first frame: 7.463925000 seconds Frame Number: 15 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:07:e9:0f:d4:32, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:07:e9:0f:d4:32 (00:07:e9:0f:d4:32) Type: IP (0x0800) Frame check sequence: 0x18b705b7 (correct) Internet Protocol, Src Addr: 165.227.249.127 (165.227.249.127), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x006a (106) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 63 Protocol: ESP (0x32) Header checksum: 0x3c41 (correct) Source: 165.227.249.127 (165.227.249.127) Destination: 165.227.249.106 (165.227.249.106) Encapsulating Security Payload SPI: 0x63b50c00 Sequence: 4 Data (84 bytes) 0000 00 a0 8e 72 1e 40 00 07 e9 0f d4 32 08 00 45 00 ...r.@.....2..E. 0010 00 70 00 6a 00 00 3f 32 3c 41 a5 e3 f9 7f a5 e3 .p.j..?2