Frame 1 (126 bytes on wire, 126 bytes captured) Arrival Time: May 19, 2005 13:55:11.936938000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 126 bytes Capture Length: 126 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:a0:eb:00:cd:44 Destination: 00:a0:eb:00:cd:44 (00:a0:eb:00:cd:44) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0x6923e84c (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.129 (165.227.249.129) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 108 Identification: 0xfa78 (64120) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x4155 (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.129 (165.227.249.129) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 88 Checksum: 0xe1ac (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x4FD98B515D602BDA Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 80 Security Association payload Next payload: NONE (0) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 40 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 32 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) 0000 00 a0 eb 00 cd 44 00 a0 8e 72 1e 40 08 00 45 00 .....D...r.@..E. 0010 00 6c fa 78 00 00 40 11 41 55 a5 e3 f9 6a a5 e3 .l.x..@.AU...j.. 0020 f9 81 01 f4 01 f4 00 58 e1 ac 4f d9 8b 51 5d 60 .......X..O..Q]` 0030 2b da 00 00 00 00 00 00 00 00 01 10 02 00 00 00 +............... 0040 00 00 00 00 00 50 00 00 00 34 00 00 00 01 00 00 .....P...4...... 0050 00 01 00 00 00 28 01 01 00 01 00 00 00 20 01 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 04 00 02 80 03 ................ 0070 00 01 80 0b 00 01 80 0c 70 80 69 23 e8 4c ........p.i#.L Frame 2 (126 bytes on wire, 126 bytes captured) Arrival Time: May 19, 2005 13:55:11.939135000 Time delta from previous packet: 0.002197000 seconds Time since reference or first frame: 0.002197000 seconds Frame Number: 2 Packet Length: 126 bytes Capture Length: 126 bytes Ethernet II, Src: 00:a0:eb:00:cd:44, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:a0:eb:00:cd:44 (00:a0:eb:00:cd:44) Type: IP (0x0800) Frame check sequence: 0x8fafbdcf (correct) Internet Protocol, Src Addr: 165.227.249.129 (165.227.249.129), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 108 Identification: 0x0005 (5) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3bc9 (correct) Source: 165.227.249.129 (165.227.249.129) Destination: 165.227.249.106 (165.227.249.106) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 88 Checksum: 0x2c96 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x4FD98B515D602BDA Responder cookie: 0x0820BACFED3504F1 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 80 Security Association payload Next payload: NONE (0) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 40 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 32 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) 0000 00 a0 8e 72 1e 40 00 a0 eb 00 cd 44 08 00 45 00 ...r.@.....D..E. 0010 00 6c 00 05 00 00 40 11 3b c9 a5 e3 f9 81 a5 e3 .l....@.;....... 0020 f9 6a 01 f4 01 f4 00 58 2c 96 4f d9 8b 51 5d 60 .j.....X,.O..Q]` 0030 2b da 08 20 ba cf ed 35 04 f1 01 10 02 00 00 00 +.. ...5........ 0040 00 00 00 00 00 50 00 00 00 34 00 00 00 01 00 00 .....P...4...... 0050 00 01 00 00 00 28 01 01 00 01 00 00 00 20 01 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 04 00 02 80 03 ................ 0070 00 01 80 0b 00 01 80 0c 70 80 8f af bd cf ........p..... Frame 3 (262 bytes on wire, 262 bytes captured) Arrival Time: May 19, 2005 13:55:12.062534000 Time delta from previous packet: 0.123399000 seconds Time since reference or first frame: 0.125596000 seconds Frame Number: 3 Packet Length: 262 bytes Capture Length: 262 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:a0:eb:00:cd:44 Destination: 00:a0:eb:00:cd:44 (00:a0:eb:00:cd:44) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0xa877aac0 (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.129 (165.227.249.129) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 244 Identification: 0xfa79 (64121) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x40cc (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.129 (165.227.249.129) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 224 Checksum: 0x4179 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x4FD98B515D602BDA Responder cookie: 0x0820BACFED3504F1 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 216 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: Vendor ID (13) Length: 24 Nonce Data Vendor ID payload Next payload: NONE (0) Length: 32 Vendor ID: unknown vendor ID: 0x0300001449E47F42CCC93278524112B3... 0000 00 a0 eb 00 cd 44 00 a0 8e 72 1e 40 08 00 45 00 .....D...r.@..E. 0010 00 f4 fa 79 00 00 40 11 40 cc a5 e3 f9 6a a5 e3 ...y..@.@....j.. 0020 f9 81 01 f4 01 f4 00 e0 41 79 4f d9 8b 51 5d 60 ........AyO..Q]` 0030 2b da 08 20 ba cf ed 35 04 f1 04 10 02 00 00 00 +.. ...5........ 0040 00 00 00 00 00 d8 0a 00 00 84 45 c4 4b 4c 0c a7 ..........E.KL.. 0050 d0 91 d4 a9 eb 82 6b 0a 92 27 18 4e 5a ce b2 63 ......k..'.NZ..c 0060 e0 9e 82 e9 15 4b 27 5e 81 a1 a5 b4 a9 e4 a6 59 .....K'^.......Y 0070 49 aa eb 69 93 cf a8 e4 01 46 f3 69 19 4c bd 07 I..i.....F.i.L.. 0080 bb 05 ca 27 fa 24 4f c3 97 cc e5 fe a3 20 31 8e ...'.$O...... 1. 0090 21 e5 76 7f a7 c1 a3 91 fb a3 c9 d6 a3 ff af e9 !.v............. 00a0 07 02 18 51 b9 28 3d cb 34 3d 69 de 4b 6c 80 f4 ...Q.(=.4=i.Kl.. 00b0 27 66 c8 b1 c8 72 75 4a c8 49 f8 1a 01 c2 b2 4c 'f...ruJ.I.....L 00c0 43 00 45 93 97 76 df 02 3f 05 0d 00 00 18 db f7 C.E..v..?....... 00d0 c2 03 8d 99 2e d6 aa 8a e6 38 db 33 1e c4 e0 f2 .........8.3.... 00e0 22 43 00 00 00 20 03 00 00 14 49 e4 7f 42 cc c9 "C... ....I..B.. 00f0 32 78 52 41 12 b3 a8 37 5b 5e 00 00 00 08 00 06 2xRA...7[^...... 0100 00 02 a8 77 aa c0 ...w.. Frame 4 (226 bytes on wire, 226 bytes captured) Arrival Time: May 19, 2005 13:55:12.787096000 Time delta from previous packet: 0.724562000 seconds Time since reference or first frame: 0.850158000 seconds Frame Number: 4 Packet Length: 226 bytes Capture Length: 226 bytes Ethernet II, Src: 00:a0:eb:00:cd:44, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:a0:eb:00:cd:44 (00:a0:eb:00:cd:44) Type: IP (0x0800) Frame check sequence: 0xeccede38 (correct) Internet Protocol, Src Addr: 165.227.249.129 (165.227.249.129), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 208 Identification: 0x0006 (6) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3b64 (correct) Source: 165.227.249.129 (165.227.249.129) Destination: 165.227.249.106 (165.227.249.106) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 188 Checksum: 0x2204 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x4FD98B515D602BDA Responder cookie: 0x0820BACFED3504F1 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 180 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 20 Nonce Data 0000 00 a0 8e 72 1e 40 00 a0 eb 00 cd 44 08 00 45 00 ...r.@.....D..E. 0010 00 d0 00 06 00 00 40 11 3b 64 a5 e3 f9 81 a5 e3 ......@.;d...... 0020 f9 6a 01 f4 01 f4 00 bc 22 04 4f d9 8b 51 5d 60 .j......".O..Q]` 0030 2b da 08 20 ba cf ed 35 04 f1 04 10 02 00 00 00 +.. ...5........ 0040 00 00 00 00 00 b4 0a 00 00 84 5c f8 bc 0a 1d 6f ..........\....o 0050 c9 e2 1c 82 b0 8e b1 b0 f6 d4 2a 14 91 c3 1d 13 ..........*..... 0060 20 46 7d be bb c0 9a ae 2b b6 58 eb 7c d4 38 c2 F}.....+.X.|.8. 0070 99 3a 7f 25 77 bd bd ef db b1 ca 61 03 65 1a 67 .:.%w......a.e.g 0080 3b 74 69 87 6a 6b c2 6c 9f 64 b4 d5 4e 9e dd b9 ;ti.jk.l.d..N... 0090 c2 05 bb 8d 50 42 da d9 1b e1 07 37 4a 09 ac 52 ....PB.....7J..R 00a0 58 a5 b8 b5 3e c3 78 f3 e3 eb 2c 10 ef 26 56 ef X...>.x...,..&V. 00b0 5b d4 b4 fb 28 1d aa 42 2a a7 cf 0b 7b 78 00 f1 [...(..B*...{x.. 00c0 fd 2f 40 a4 d8 0c 6c e3 78 ee 00 00 00 14 90 73 ./@...l.x......s 00d0 34 44 1b ed 25 18 92 33 59 c7 2c 3e 38 eb ec ce 4D..%..3Y.,>8... 00e0 de 38 .8 Frame 5 (138 bytes on wire, 138 bytes captured) Arrival Time: May 19, 2005 13:55:12.941188000 Time delta from previous packet: 0.154092000 seconds Time since reference or first frame: 1.004250000 seconds Frame Number: 5 Packet Length: 138 bytes Capture Length: 138 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:a0:eb:00:cd:44 Destination: 00:a0:eb:00:cd:44 (00:a0:eb:00:cd:44) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0x4fdc4ed7 (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.129 (165.227.249.129) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0xfa7a (64122) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x4147 (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.129 (165.227.249.129) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 100 Checksum: 0x255c (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x4FD98B515D602BDA Responder cookie: 0x0820BACFED3504F1 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 92 Encrypted payload (64 bytes) 0000 00 a0 eb 00 cd 44 00 a0 8e 72 1e 40 08 00 45 00 .....D...r.@..E. 0010 00 78 fa 7a 00 00 40 11 41 47 a5 e3 f9 6a a5 e3 .x.z..@.AG...j.. 0020 f9 81 01 f4 01 f4 00 64 25 5c 4f d9 8b 51 5d 60 .......d%\O..Q]` 0030 2b da 08 20 ba cf ed 35 04 f1 05 10 02 01 00 00 +.. ...5........ 0040 00 00 00 00 00 5c da 60 fb 40 4c 4a 1a b5 0b e7 .....\.`.@LJ.... 0050 57 48 88 60 b6 68 de f5 78 db 85 7f eb d4 1f a8 WH.`.h..x....... 0060 72 6e d4 fe 3f 9b a7 b0 3d 84 24 0b a9 b4 00 7a rn..?...=.$....z 0070 2d 01 eb 6b ea af 94 07 83 21 b9 b7 25 88 51 02 -..k.....!..%.Q. 0080 cd f3 c4 98 97 51 4f dc 4e d7 .....QO.N. Frame 6 (114 bytes on wire, 114 bytes captured) Arrival Time: May 19, 2005 13:55:12.944827000 Time delta from previous packet: 0.003639000 seconds Time since reference or first frame: 1.007889000 seconds Frame Number: 6 Packet Length: 114 bytes Capture Length: 114 bytes Ethernet II, Src: 00:a0:eb:00:cd:44, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:a0:eb:00:cd:44 (00:a0:eb:00:cd:44) Type: IP (0x0800) Frame check sequence: 0xa2aeeeb1 (correct) Internet Protocol, Src Addr: 165.227.249.129 (165.227.249.129), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0x0007 (7) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3bd3 (correct) Source: 165.227.249.129 (165.227.249.129) Destination: 165.227.249.106 (165.227.249.106) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 76 Checksum: 0x4528 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x4FD98B515D602BDA Responder cookie: 0x0820BACFED3504F1 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 68 Encrypted payload (40 bytes) 0000 00 a0 8e 72 1e 40 00 a0 eb 00 cd 44 08 00 45 00 ...r.@.....D..E. 0010 00 60 00 07 00 00 40 11 3b d3 a5 e3 f9 81 a5 e3 .`....@.;....... 0020 f9 6a 01 f4 01 f4 00 4c 45 28 4f d9 8b 51 5d 60 .j.....LE(O..Q]` 0030 2b da 08 20 ba cf ed 35 04 f1 05 10 02 01 00 00 +.. ...5........ 0040 00 00 00 00 00 44 6e 46 51 c0 2e 20 fa 97 b9 51 .....DnFQ.. ...Q 0050 20 98 f3 0f ca 8a bd 8d d8 e8 a2 cb cc a6 48 61 .............Ha 0060 8c a6 2e 85 b0 68 ce 34 6f a7 6d 13 71 af a2 ae .....h.4o.m.q... 0070 ee b1 .. Frame 7 (338 bytes on wire, 338 bytes captured) Arrival Time: May 19, 2005 13:55:13.071655000 Time delta from previous packet: 0.126828000 seconds Time since reference or first frame: 1.134717000 seconds Frame Number: 7 Packet Length: 338 bytes Capture Length: 338 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:a0:eb:00:cd:44 Destination: 00:a0:eb:00:cd:44 (00:a0:eb:00:cd:44) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0x91a44791 (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.129 (165.227.249.129) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 320 Identification: 0xfa7b (64123) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x407e (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.129 (165.227.249.129) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 300 Checksum: 0xbe64 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x4FD98B515D602BDA Responder cookie: 0x0820BACFED3504F1 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x5265DB61 Length: 292 Encrypted payload (264 bytes) 0000 00 a0 eb 00 cd 44 00 a0 8e 72 1e 40 08 00 45 00 .....D...r.@..E. 0010 01 40 fa 7b 00 00 40 11 40 7e a5 e3 f9 6a a5 e3 .@.{..@.@~...j.. 0020 f9 81 01 f4 01 f4 01 2c be 64 4f d9 8b 51 5d 60 .......,.dO..Q]` 0030 2b da 08 20 ba cf ed 35 04 f1 08 10 20 01 52 65 +.. ...5.... .Re 0040 db 61 00 00 01 24 14 bd e0 25 8c c6 1f bd d8 0d .a...$...%...... 0050 19 69 41 70 fb b5 5d 92 1c f9 09 32 af 94 e2 ba .iAp..]....2.... 0060 b8 ad e0 f0 54 f3 54 95 ef 8a de 35 11 33 23 eb ....T.T....5.3#. 0070 49 27 f0 58 8d ac 7a 63 66 9e 83 ec f2 ef a4 da I'.X..zcf....... 0080 6d c6 42 23 8f b1 82 dd a3 c5 e3 6d 3e 62 bf f7 m.B#.......m>b.. 0090 34 7b 55 6a d0 35 10 5a a9 3f 50 e1 b6 20 1e 12 4{Uj.5.Z.?P.. .. 00a0 e1 b2 2d 0b 25 e2 13 dc 8b eb ce 44 f4 a6 76 f8 ..-.%......D..v. 00b0 18 83 12 98 cd 0c 50 85 e3 df e5 b9 6e 4b 70 a2 ......P.....nKp. 00c0 c4 75 73 5c 3c 78 cf 86 9d 9a bd 3e 25 e1 1b 24 .us\%..$ 00d0 51 c0 a6 4c ea 7b b7 ae d7 61 bd 1f 34 55 f8 0a Q..L.{...a..4U.. 00e0 28 1c ed d7 42 7f bf 54 01 3d e0 cc bb 6f 53 15 (...B..T.=...oS. 00f0 0b c9 43 94 45 3d 8a c4 f4 c1 21 72 ff 6d 6a c6 ..C.E=....!r.mj. 0100 86 8f 10 89 ad 8b 4c 42 97 a9 ac af 3b 91 ed 33 ......LB....;..3 0110 02 e1 f0 ac b1 b8 52 d5 c9 34 01 06 23 b0 f3 c1 ......R..4..#... 0120 ba cc 9e 57 b6 30 e5 bf 57 dc fc 0f 90 33 ff 4b ...W.0..W....3.K 0130 b7 18 a0 62 ba 99 f0 37 12 3d 70 a1 2f 12 6f 9b ...b...7.=p./.o. 0140 1d bc 45 56 43 83 12 7a ce df ff fd dc d2 91 a4 ..EVC..z........ 0150 47 91 G. Frame 8 (338 bytes on wire, 338 bytes captured) Arrival Time: May 19, 2005 13:55:13.797636000 Time delta from previous packet: 0.725981000 seconds Time since reference or first frame: 1.860698000 seconds Frame Number: 8 Packet Length: 338 bytes Capture Length: 338 bytes Ethernet II, Src: 00:a0:eb:00:cd:44, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:a0:eb:00:cd:44 (00:a0:eb:00:cd:44) Type: IP (0x0800) Frame check sequence: 0x2a46bbc5 (correct) Internet Protocol, Src Addr: 165.227.249.129 (165.227.249.129), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 320 Identification: 0x0008 (8) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3af2 (correct) Source: 165.227.249.129 (165.227.249.129) Destination: 165.227.249.106 (165.227.249.106) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 300 Checksum: 0xd414 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x4FD98B515D602BDA Responder cookie: 0x0820BACFED3504F1 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x5265DB61 Length: 292 Encrypted payload (264 bytes) 0000 00 a0 8e 72 1e 40 00 a0 eb 00 cd 44 08 00 45 00 ...r.@.....D..E. 0010 01 40 00 08 00 00 40 11 3a f2 a5 e3 f9 81 a5 e3 .@....@.:....... 0020 f9 6a 01 f4 01 f4 01 2c d4 14 4f d9 8b 51 5d 60 .j.....,..O..Q]` 0030 2b da 08 20 ba cf ed 35 04 f1 08 10 20 01 52 65 +.. ...5.... .Re 0040 db 61 00 00 01 24 01 7e 52 94 34 33 03 5c 7f f0 .a...$.~R.43.\.. 0050 8f eb 64 c1 6e be 6a c9 a8 01 88 06 8b 0e b3 f7 ..d.n.j......... 0060 fe e4 37 62 56 61 1d db 29 74 40 95 75 49 ea dd ..7bVa..)t@.uI.. 0070 1f 2a ba 4d 6e 99 dc 31 86 08 73 45 5c 5f 4e 6c .*.Mn..1..sE\_Nl 0080 44 88 c6 39 6b 6b 96 c4 8c 05 d6 e2 d3 78 7d 7f D..9kk.......x}. 0090 07 40 a9 c9 4d 66 ff 73 a3 6f 78 a4 bc 98 1d dc .@..Mf.s.ox..... 00a0 bd ad 9c ba ef f4 52 cd 92 43 e4 cd 5a c1 b5 13 ......R..C..Z... 00b0 38 ee 75 8f 45 f7 a3 ac 97 e7 12 a9 d5 80 ab b4 8.u.E........... 00c0 bc 62 3a 9b 55 13 99 6b 42 73 91 af 54 2c 0b 4a .b:.U..kBs..T,.J 00d0 9c 32 e5 29 31 20 e1 18 8a 88 05 9d 16 d5 31 fc .2.)1 ........1. 00e0 d5 52 92 81 8a c5 99 e7 76 e1 d8 7e 64 f3 e1 e4 .R......v..~d... 00f0 78 99 c8 1a 5f 29 96 c4 21 e6 6b ff ea 04 3a 0d x..._)..!.k...:. 0100 f4 8b c0 be dd 5b f0 b4 1f 3e 94 f4 ac d8 cc 73 .....[...>.....s 0110 41 18 fc 94 ac 60 64 d8 2e e5 61 8c 9b 8b 3e 97 A....`d...a...>. 0120 8c 5e 3b d3 12 98 90 bc a6 16 65 fa 2e 5c 01 fd .^;.......e..\.. 0130 39 df 51 b7 64 cc 01 9a c2 9f 70 03 42 0f f5 04 9.Q.d.....p.B... 0140 2c 60 8f 9c 11 63 f7 8a 35 fb 91 1e c8 58 2a 46 ,`...c..5....X*F 0150 bb c5 .. Frame 9 (98 bytes on wire, 98 bytes captured) Arrival Time: May 19, 2005 13:55:13.957272000 Time delta from previous packet: 0.159636000 seconds Time since reference or first frame: 2.020334000 seconds Frame Number: 9 Packet Length: 98 bytes Capture Length: 98 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:a0:eb:00:cd:44 Destination: 00:a0:eb:00:cd:44 (00:a0:eb:00:cd:44) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0xd5dd1d47 (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.129 (165.227.249.129) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 80 Identification: 0xfa7c (64124) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x416d (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.129 (165.227.249.129) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 60 Checksum: 0xb361 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x4FD98B515D602BDA Responder cookie: 0x0820BACFED3504F1 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x5265DB61 Length: 52 Encrypted payload (24 bytes) 0000 00 a0 eb 00 cd 44 00 a0 8e 72 1e 40 08 00 45 00 .....D...r.@..E. 0010 00 50 fa 7c 00 00 40 11 41 6d a5 e3 f9 6a a5 e3 .P.|..@.Am...j.. 0020 f9 81 01 f4 01 f4 00 3c b3 61 4f d9 8b 51 5d 60 .......<.aO..Q]` 0030 2b da 08 20 ba cf ed 35 04 f1 08 10 20 01 52 65 +.. ...5.... .Re 0040 db 61 00 00 00 34 ef e2 2f da e2 0f b1 d7 38 b7 .a...4../.....8. 0050 25 32 48 60 31 9e 7b f9 3e 73 04 52 4f a5 d5 dd %2H`1.{.>s.RO... 0060 1d 47 .G Frame 10 (130 bytes on wire, 130 bytes captured) Arrival Time: May 19, 2005 13:55:14.462491000 Time delta from previous packet: 0.505219000 seconds Time since reference or first frame: 2.525553000 seconds Frame Number: 10 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:a0:eb:00:cd:44 Destination: 00:a0:eb:00:cd:44 (00:a0:eb:00:cd:44) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0x60f45b43 (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.129 (165.227.249.129) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0xfa7d (64125) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x412b (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.129 (165.227.249.129) Encapsulating Security Payload SPI: 0x1b05d86a Sequence: 1 Data (84 bytes) 0000 00 a0 eb 00 cd 44 00 a0 8e 72 1e 40 08 00 45 00 .....D...r.@..E. 0010 00 70 fa 7d 00 00 40 32 41 2b a5 e3 f9 6a a5 e3 .p.}..@2A+...j.. 0020 f9 81 1b 05 d8 6a 00 00 00 01 0b 12 18 6a d3 dc .....j.......j.. 0030 00 51 1f c3 65 d3 91 d8 1f 55 c1 22 49 f5 33 59 .Q..e....U."I.3Y 0040 b5 ab c3 47 f3 8f be ec 55 58 24 05 83 d3 43 77 ...G....UX$...Cw 0050 97 24 0c 91 84 fc ae 10 26 5b c0 69 c1 46 8b 42 .$......&[.i.F.B 0060 5e 5e 83 d8 db c4 a4 33 45 20 b0 18 1f 49 42 59 ^^.....3E ...IBY 0070 e9 5c f4 43 e6 42 0c 95 8f e9 d5 a1 1e c1 60 f4 .\.C.B........`. 0080 5b 43 [C Frame 11 (130 bytes on wire, 130 bytes captured) Arrival Time: May 19, 2005 13:55:14.464530000 Time delta from previous packet: 0.002039000 seconds Time since reference or first frame: 2.527592000 seconds Frame Number: 11 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:a0:eb:00:cd:44, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:a0:eb:00:cd:44 (00:a0:eb:00:cd:44) Type: IP (0x0800) Frame check sequence: 0x50101e7c (correct) Internet Protocol, Src Addr: 165.227.249.129 (165.227.249.129), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x1363 (4963) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: ESP (0x32) Header checksum: 0xe845 (correct) Source: 165.227.249.129 (165.227.249.129) Destination: 165.227.249.106 (165.227.249.106) Encapsulating Security Payload SPI: 0x95106400 Sequence: 3 Data (84 bytes) 0000 00 a0 8e 72 1e 40 00 a0 eb 00 cd 44 08 00 45 00 ...r.@.....D..E. 0010 00 70 13 63 00 00 80 32 e8 45 a5 e3 f9 81 a5 e3 .p.c...2.E...... 0020 f9 6a 95 10 64 00 00 00 00 03 00 00 00 00 00 00 .j..d........... 0030 00 00 da b7 de 4d 0f 31 68 53 f8 bd f2 60 97 64 .....M.1hS...`.d 0040 13 54 08 04 21 19 44 bf d1 10 cc e7 0b ef 0f df .T..!.D......... 0050 e4 1a 4a 4a d4 c9 a4 5c 53 fe 3d aa b0 a6 27 73 ..JJ...\S.=...'s 0060 a4 c1 76 24 25 7b 87 60 a8 3f 08 a7 f5 cd a5 bf ..v$%{.`.?...... 0070 b7 0c 05 05 2b 77 51 02 f8 c7 f7 77 48 df 50 10 ....+wQ....wH.P. 0080 1e 7c .| Frame 12 (130 bytes on wire, 130 bytes captured) Arrival Time: May 19, 2005 13:55:14.466986000 Time delta from previous packet: 0.002456000 seconds Time since reference or first frame: 2.530048000 seconds Frame Number: 12 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:a0:eb:00:cd:44 Destination: 00:a0:eb:00:cd:44 (00:a0:eb:00:cd:44) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0x398f4ec8 (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.129 (165.227.249.129) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0xfa7e (64126) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x412a (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.129 (165.227.249.129) Encapsulating Security Payload SPI: 0x1b05d86a Sequence: 2 Data (84 bytes) 0000 00 a0 eb 00 cd 44 00 a0 8e 72 1e 40 08 00 45 00 .....D...r.@..E. 0010 00 70 fa 7e 00 00 40 32 41 2a a5 e3 f9 6a a5 e3 .p.~..@2A*...j.. 0020 f9 81 1b 05 d8 6a 00 00 00 02 0f a1 ca 31 fb 5e .....j.......1.^ 0030 e1 46 2b 16 ef 7a e3 28 2b 75 06 20 a6 1a 53 30 .F+..z.(+u. ..S0 0040 72 04 8f 00 a3 d9 29 2b 19 08 40 df 6a fa 6d c5 r.....)+..@.j.m. 0050 b6 04 a0 39 ed 74 be 67 f3 d2 e9 3e 00 85 92 2d ...9.t.g...>...- 0060 47 7a 1e 48 48 f9 b3 1e af d6 49 52 f6 80 69 4c Gz.HH.....IR..iL 0070 7e 67 af c0 ab d6 2c f8 f0 94 27 86 73 5e 39 8f ~g....,...'.s^9. 0080 4e c8 N. Frame 13 (130 bytes on wire, 130 bytes captured) Arrival Time: May 19, 2005 13:55:14.468821000 Time delta from previous packet: 0.001835000 seconds Time since reference or first frame: 2.531883000 seconds Frame Number: 13 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:a0:eb:00:cd:44, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:a0:eb:00:cd:44 (00:a0:eb:00:cd:44) Type: IP (0x0800) Frame check sequence: 0xe5a7f077 (correct) Internet Protocol, Src Addr: 165.227.249.129 (165.227.249.129), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x1364 (4964) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: ESP (0x32) Header checksum: 0xe844 (correct) Source: 165.227.249.129 (165.227.249.129) Destination: 165.227.249.106 (165.227.249.106) Encapsulating Security Payload SPI: 0x95106400 Sequence: 4 Data (84 bytes) 0000 00 a0 8e 72 1e 40 00 a0 eb 00 cd 44 08 00 45 00 ...r.@.....D..E. 0010 00 70 13 64 00 00 80 32 e8 44 a5 e3 f9 81 a5 e3 .p.d...2.D...... 0020 f9 6a 95 10 64 00 00 00 00 04 08 a7 f5 cd a5 bf .j..d........... 0030 b7 0c 48 1a ef b3 0c 7e 23 33 75 8f 59 b7 c5 a0 ..H....~#3u.Y... 0040 8c d3 29 48 db 0c dd a5 52 ba ab 87 7c fd 6b 3c ..)H....R...|.k< 0050 ce 28 09 63 a8 59 0d 65 bd 5f 01 62 6d 70 cd 14 .(.c.Y.e._.bmp.. 0060 44 bd 18 3c 0c 14 49 76 f9 88 ed 8c 5d 2e 54 df D..<..Iv....].T. 0070 ee dd ac 51 32 e3 52 5d 0c 26 cb 6b 89 ad e5 a7 ...Q2.R].&.k.... 0080 f0 77 .w Frame 14 (130 bytes on wire, 130 bytes captured) Arrival Time: May 19, 2005 13:55:15.461041000 Time delta from previous packet: 0.992220000 seconds Time since reference or first frame: 3.524103000 seconds Frame Number: 14 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:a0:eb:00:cd:44 Destination: 00:a0:eb:00:cd:44 (00:a0:eb:00:cd:44) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0x47e90998 (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.129 (165.227.249.129) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0xfa7f (64127) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x4129 (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.129 (165.227.249.129) Encapsulating Security Payload SPI: 0x1b05d86a Sequence: 3 Data (84 bytes) 0000 00 a0 eb 00 cd 44 00 a0 8e 72 1e 40 08 00 45 00 .....D...r.@..E. 0010 00 70 fa 7f 00 00 40 32 41 29 a5 e3 f9 6a a5 e3 .p....@2A)...j.. 0020 f9 81 1b 05 d8 6a 00 00 00 03 11 14 02 23 97 50 .....j.......#.P 0030 98 38 6b f2 e6 32 2a 19 a5 97 ae 68 21 46 c0 4a .8k..2*....h!F.J 0040 bd 36 fe 19 6f 6d 5b df 4d 96 98 e8 43 11 c1 77 .6..om[.M...C..w 0050 d8 9e 26 a8 f6 c1 70 ee fe ad 33 c2 6d d2 7c 26 ..&...p...3.m.|& 0060 f4 5c 3a 4a 10 45 4b 66 0f df 08 59 68 58 1f 06 .\:J.EKf...YhX.. 0070 40 93 79 92 bd 62 de 85 80 3f db 2f 73 cb 47 e9 @.y..b...?./s.G. 0080 09 98 .. Frame 15 (130 bytes on wire, 130 bytes captured) Arrival Time: May 19, 2005 13:55:15.462758000 Time delta from previous packet: 0.001717000 seconds Time since reference or first frame: 3.525820000 seconds Frame Number: 15 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:a0:eb:00:cd:44, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:a0:eb:00:cd:44 (00:a0:eb:00:cd:44) Type: IP (0x0800) Frame check sequence: 0x0001fded (correct) Internet Protocol, Src Addr: 165.227.249.129 (165.227.249.129), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x1365 (4965) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: ESP (0x32) Header checksum: 0xe843 (correct) Source: 165.227.249.129 (165.227.249.129) Destination: 165.227.249.106 (165.227.249.106) Encapsulating Security Payload SPI: 0x95106400 Sequence: 5 Data (84 bytes) 0000 00 a0 8e 72 1e 40 00 a0 eb 00 cd 44 08 00 45 00 ...r.@.....D..E. 0010 00 70 13 65 00 00 80 32 e8 43 a5 e3 f9 81 a5 e3 .p.e...2.C...... 0020 f9 6a 95 10 64 00 00 00 00 05 ed 8c 5d 2e 54 df .j..d.......].T. 0030 ee dd 5f 9f 10 1b 93 b6 0a 8f b5 a8 90 2d 85 1a .._..........-.. 0040 18 6a b5 a4 b8 1a e8 c4 83 a1 01 ae a2 ba 8b 89 .j.............. 0050 e7 cd 58 21 4f 5a 09 c2 0a 6c 3d 06 66 23 6f f1 ..X!OZ...l=.f#o. 0060 43 5d 2f 9b 1c cf df 34 7b 12 ef 37 6a 46 ca 19 C]/....4{..7jF.. 0070 75 22 2c a4 22 6a ea ee 03 70 f6 41 67 5a 00 01 u",."j...p.AgZ.. 0080 fd ed .. Frame 16 (130 bytes on wire, 130 bytes captured) Arrival Time: May 19, 2005 13:55:16.461055000 Time delta from previous packet: 0.998297000 seconds Time since reference or first frame: 4.524117000 seconds Frame Number: 16 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:a0:eb:00:cd:44 Destination: 00:a0:eb:00:cd:44 (00:a0:eb:00:cd:44) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0xc9f635c8 (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.129 (165.227.249.129) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0xfa80 (64128) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x4128 (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.129 (165.227.249.129) Encapsulating Security Payload SPI: 0x1b05d86a Sequence: 4 Data (84 bytes) 0000 00 a0 eb 00 cd 44 00 a0 8e 72 1e 40 08 00 45 00 .....D...r.@..E. 0010 00 70 fa 80 00 00 40 32 41 28 a5 e3 f9 6a a5 e3 .p....@2A(...j.. 0020 f9 81 1b 05 d8 6a 00 00 00 04 5c d4 5a 4a e2 df .....j....\.ZJ.. 0030 73 79 dd b4 ac 1e a5 04 5d 3f 17 e2 e2 9e 26 0e sy......]?....&. 0040 48 1b 65 07 4e f9 12 3a e5 69 75 17 4b 98 39 50 H.e.N..:.iu.K.9P 0050 c2 a5 d7 a7 d0 92 0b d0 96 69 cc ba 80 4a fd cb .........i...J.. 0060 17 09 e2 95 b7 1a 38 9c 6f 56 5f 93 86 d1 a8 fb ......8.oV_..... 0070 97 fe 69 af c5 e9 a9 1f 07 db e8 04 98 ae c9 f6 ..i............. 0080 35 c8 5. Frame 17 (130 bytes on wire, 130 bytes captured) Arrival Time: May 19, 2005 13:55:16.462851000 Time delta from previous packet: 0.001796000 seconds Time since reference or first frame: 4.525913000 seconds Frame Number: 17 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:a0:eb:00:cd:44, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:a0:eb:00:cd:44 (00:a0:eb:00:cd:44) Type: IP (0x0800) Frame check sequence: 0xac819185 (correct) Internet Protocol, Src Addr: 165.227.249.129 (165.227.249.129), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x1366 (4966) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: ESP (0x32) Header checksum: 0xe842 (correct) Source: 165.227.249.129 (165.227.249.129) Destination: 165.227.249.106 (165.227.249.106) Encapsulating Security Payload SPI: 0x95106400 Sequence: 6 Data (84 bytes) 0000 00 a0 8e 72 1e 40 00 a0 eb 00 cd 44 08 00 45 00 ...r.@.....D..E. 0010 00 70 13 66 00 00 80 32 e8 42 a5 e3 f9 81 a5 e3 .p.f...2.B...... 0020 f9 6a 95 10 64 00 00 00 00 06 ef 37 6a 46 ca 19 .j..d......7jF.. 0030 75 22 db 99 e4 4c 09 91 4d e5 db f9 ef fb 70 e8 u"...L..M.....p. 0040 ad 7e 19 d0 de 81 af b6 85 c2 99 4b 46 90 d5 f3 .~.........KF... 0050 52 a8 0f ef cd c4 3b 7d b9 45 a8 6f a2 f7 66 a1 R.....;}.E.o..f. 0060 10 48 c8 9b 5f 56 7d 35 9f 42 af 56 ae 76 40 fb .H.._V}5.B.V.v@. 0070 5d 88 2d 87 6c 62 a5 23 fd 89 0b 03 47 cd ac 81 ].-.lb.#....G... 0080 91 85 ..