Frame 1 (126 bytes on wire, 126 bytes captured) Arrival Time: May 19, 2005 13:58:21.258348000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 126 bytes Capture Length: 126 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:09:5b:b0:f5:3d Destination: 00:09:5b:b0:f5:3d (00:09:5b:b0:f5:3d) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0x278012b1 (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.136 (165.227.249.136) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 108 Identification: 0xfaac (64172) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x411a (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.136 (165.227.249.136) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 88 Checksum: 0x50b5 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x6B324FE0067F33C4 Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 80 Security Association payload Next payload: NONE (0) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 40 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 32 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) 0000 00 09 5b b0 f5 3d 00 a0 8e 72 1e 40 08 00 45 00 ..[..=...r.@..E. 0010 00 6c fa ac 00 00 40 11 41 1a a5 e3 f9 6a a5 e3 .l....@.A....j.. 0020 f9 88 01 f4 01 f4 00 58 50 b5 6b 32 4f e0 06 7f .......XP.k2O... 0030 33 c4 00 00 00 00 00 00 00 00 01 10 02 00 00 00 3............... 0040 00 00 00 00 00 50 00 00 00 34 00 00 00 01 00 00 .....P...4...... 0050 00 01 00 00 00 28 01 01 00 01 00 00 00 20 01 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 04 00 02 80 03 ................ 0070 00 01 80 0b 00 01 80 0c 70 80 27 80 12 b1 ........p.'... Frame 2 (126 bytes on wire, 126 bytes captured) Arrival Time: May 19, 2005 13:58:21.261023000 Time delta from previous packet: 0.002675000 seconds Time since reference or first frame: 0.002675000 seconds Frame Number: 2 Packet Length: 126 bytes Capture Length: 126 bytes Ethernet II, Src: 00:09:5b:b0:f5:3d, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:09:5b:b0:f5:3d (00:09:5b:b0:f5:3d) Type: IP (0x0800) Frame check sequence: 0xfe73b708 (correct) Internet Protocol, Src Addr: 165.227.249.136 (165.227.249.136), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 108 Identification: 0x0045 (69) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3b82 (correct) Source: 165.227.249.136 (165.227.249.136) Destination: 165.227.249.106 (165.227.249.106) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 88 Checksum: 0x5b1c (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x6B324FE0067F33C4 Responder cookie: 0x6AE11D4D3A4D331D Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 80 Security Association payload Next payload: NONE (0) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 40 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 32 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) 0000 00 a0 8e 72 1e 40 00 09 5b b0 f5 3d 08 00 45 00 ...r.@..[..=..E. 0010 00 6c 00 45 00 00 40 11 3b 82 a5 e3 f9 88 a5 e3 .l.E..@.;....... 0020 f9 6a 01 f4 01 f4 00 58 5b 1c 6b 32 4f e0 06 7f .j.....X[.k2O... 0030 33 c4 6a e1 1d 4d 3a 4d 33 1d 01 10 02 00 00 00 3.j..M:M3....... 0040 00 00 00 00 00 50 00 00 00 34 00 00 00 01 00 00 .....P...4...... 0050 00 01 00 00 00 28 01 01 00 01 00 00 00 20 01 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 04 00 02 80 03 ................ 0070 00 01 80 0b 00 01 80 0c 70 80 fe 73 b7 08 ........p..s.. Frame 3 (262 bytes on wire, 262 bytes captured) Arrival Time: May 19, 2005 13:58:21.386615000 Time delta from previous packet: 0.125592000 seconds Time since reference or first frame: 0.128267000 seconds Frame Number: 3 Packet Length: 262 bytes Capture Length: 262 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:09:5b:b0:f5:3d Destination: 00:09:5b:b0:f5:3d (00:09:5b:b0:f5:3d) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0x15178cac (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.136 (165.227.249.136) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 244 Identification: 0xfaad (64173) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x4091 (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.136 (165.227.249.136) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 224 Checksum: 0x2ba0 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x6B324FE0067F33C4 Responder cookie: 0x6AE11D4D3A4D331D Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 216 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: Vendor ID (13) Length: 24 Nonce Data Vendor ID payload Next payload: NONE (0) Length: 32 Vendor ID: unknown vendor ID: 0x030000146D0FBBF397D62A663080B531... 0000 00 09 5b b0 f5 3d 00 a0 8e 72 1e 40 08 00 45 00 ..[..=...r.@..E. 0010 00 f4 fa ad 00 00 40 11 40 91 a5 e3 f9 6a a5 e3 ......@.@....j.. 0020 f9 88 01 f4 01 f4 00 e0 2b a0 6b 32 4f e0 06 7f ........+.k2O... 0030 33 c4 6a e1 1d 4d 3a 4d 33 1d 04 10 02 00 00 00 3.j..M:M3....... 0040 00 00 00 00 00 d8 0a 00 00 84 67 0f 52 5c d8 a1 ..........g.R\.. 0050 ff bf 46 62 d2 23 ef f6 ef b6 90 71 1d 6f 98 cf ..Fb.#.....q.o.. 0060 38 82 ca fa 2b 0e d9 a2 23 31 a8 c8 93 47 9e 51 8...+...#1...G.Q 0070 68 73 50 2e 7d f8 80 71 32 c2 06 09 7c 23 87 e5 hsP.}..q2...|#.. 0080 d5 43 81 b6 e8 9c bf 5d d4 a3 fc 32 b8 38 ea e5 .C.....]...2.8.. 0090 a8 e7 e4 3e 6b 58 b5 f9 34 ff 41 17 72 d1 48 fa ...>kX..4.A.r.H. 00a0 cb b8 ac 0e a0 00 20 a4 9e 2d 2b 18 35 a0 09 cf ...... ..-+.5... 00b0 a7 a3 89 cc e2 e8 26 9b 2c 5a c1 8a d4 f9 f1 fe ......&.,Z...... 00c0 64 ea d6 56 90 7e d6 82 1f ff 0d 00 00 18 39 80 d..V.~........9. 00d0 a2 15 9c 98 74 a4 c8 54 dc 71 b8 6b 51 91 70 b3 ....t..T.q.kQ.p. 00e0 a9 29 00 00 00 20 03 00 00 14 6d 0f bb f3 97 d6 .)... ....m..... 00f0 2a 66 30 80 b5 31 7f 4f 6c b2 00 00 00 08 00 06 *f0..1.Ol....... 0100 00 02 15 17 8c ac ...... Frame 4 (218 bytes on wire, 218 bytes captured) Arrival Time: May 19, 2005 13:58:21.838734000 Time delta from previous packet: 0.452119000 seconds Time since reference or first frame: 0.580386000 seconds Frame Number: 4 Packet Length: 218 bytes Capture Length: 218 bytes Ethernet II, Src: 00:09:5b:b0:f5:3d, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:09:5b:b0:f5:3d (00:09:5b:b0:f5:3d) Type: IP (0x0800) Frame check sequence: 0xa4d5c7a9 (correct) Internet Protocol, Src Addr: 165.227.249.136 (165.227.249.136), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 200 Identification: 0x0046 (70) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3b25 (correct) Source: 165.227.249.136 (165.227.249.136) Destination: 165.227.249.106 (165.227.249.106) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 180 Checksum: 0x7f60 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x6B324FE0067F33C4 Responder cookie: 0x6AE11D4D3A4D331D Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 172 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 12 Nonce Data 0000 00 a0 8e 72 1e 40 00 09 5b b0 f5 3d 08 00 45 00 ...r.@..[..=..E. 0010 00 c8 00 46 00 00 40 11 3b 25 a5 e3 f9 88 a5 e3 ...F..@.;%...... 0020 f9 6a 01 f4 01 f4 00 b4 7f 60 6b 32 4f e0 06 7f .j.......`k2O... 0030 33 c4 6a e1 1d 4d 3a 4d 33 1d 04 10 02 00 00 00 3.j..M:M3....... 0040 00 00 00 00 00 ac 0a 00 00 84 69 0a 79 4d 83 06 ..........i.yM.. 0050 ba 5d af 63 f9 54 86 40 23 41 9a c1 b8 8c 25 25 .].c.T.@#A....%% 0060 e0 f7 3b 84 fb fa d1 45 44 c1 82 c9 d6 e2 9a 93 ..;....ED....... 0070 11 da 44 2a 2d 82 6c 86 e1 47 4d 37 7c e9 a9 84 ..D*-.l..GM7|... 0080 cb 31 b2 d7 72 83 a6 f0 d7 4f d8 7f 7f 73 c0 43 .1..r....O...s.C 0090 10 44 f4 bc 25 f3 81 b6 e9 c3 cd a3 07 b2 d1 47 .D..%..........G 00a0 06 ec 3a 10 21 36 be 4f 18 ab b7 db 58 02 97 c0 ..:.!6.O....X... 00b0 dc 0f 24 92 ad 1e 0b f0 b3 40 f6 e3 9b 8c bf a1 ..$......@...... 00c0 3f 85 d4 49 e1 c2 25 20 1d b1 00 00 00 0c c9 82 ?..I..% ........ 00d0 a9 eb 2a ca b3 a9 a4 d5 c7 a9 ..*....... Frame 5 (138 bytes on wire, 138 bytes captured) Arrival Time: May 19, 2005 13:58:21.990458000 Time delta from previous packet: 0.151724000 seconds Time since reference or first frame: 0.732110000 seconds Frame Number: 5 Packet Length: 138 bytes Capture Length: 138 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:09:5b:b0:f5:3d Destination: 00:09:5b:b0:f5:3d (00:09:5b:b0:f5:3d) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0x158bae1a (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.136 (165.227.249.136) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0xfaae (64174) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x410c (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.136 (165.227.249.136) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 100 Checksum: 0x0f87 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x6B324FE0067F33C4 Responder cookie: 0x6AE11D4D3A4D331D Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 92 Encrypted payload (64 bytes) 0000 00 09 5b b0 f5 3d 00 a0 8e 72 1e 40 08 00 45 00 ..[..=...r.@..E. 0010 00 78 fa ae 00 00 40 11 41 0c a5 e3 f9 6a a5 e3 .x....@.A....j.. 0020 f9 88 01 f4 01 f4 00 64 0f 87 6b 32 4f e0 06 7f .......d..k2O... 0030 33 c4 6a e1 1d 4d 3a 4d 33 1d 05 10 02 01 00 00 3.j..M:M3....... 0040 00 00 00 00 00 5c f5 62 82 81 b7 da 51 6a 9a ed .....\.b....Qj.. 0050 7f 26 81 37 20 7e 2f 2d e4 b4 73 90 3c 37 37 05 .&.7 ~/-..s.<77. 0060 fd c9 6d 50 97 4a ec 9a 6e 3b 12 0e d9 6b 14 81 ..mP.J..n;...k.. 0070 f1 60 b0 7a 17 39 9f b3 5d cd 98 f9 e7 36 4a df .`.z.9..]....6J. 0080 3b d8 f0 82 77 c7 15 8b ae 1a ;...w..... Frame 6 (114 bytes on wire, 114 bytes captured) Arrival Time: May 19, 2005 13:58:22.540764000 Time delta from previous packet: 0.550306000 seconds Time since reference or first frame: 1.282416000 seconds Frame Number: 6 Packet Length: 114 bytes Capture Length: 114 bytes Ethernet II, Src: 00:09:5b:b0:f5:3d, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:09:5b:b0:f5:3d (00:09:5b:b0:f5:3d) Type: IP (0x0800) Frame check sequence: 0xcee00ceb (correct) Internet Protocol, Src Addr: 165.227.249.136 (165.227.249.136), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0x0047 (71) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3b8c (correct) Source: 165.227.249.136 (165.227.249.136) Destination: 165.227.249.106 (165.227.249.106) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 76 Checksum: 0x33d9 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x6B324FE0067F33C4 Responder cookie: 0x6AE11D4D3A4D331D Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 68 Encrypted payload (40 bytes) 0000 00 a0 8e 72 1e 40 00 09 5b b0 f5 3d 08 00 45 00 ...r.@..[..=..E. 0010 00 60 00 47 00 00 40 11 3b 8c a5 e3 f9 88 a5 e3 .`.G..@.;....... 0020 f9 6a 01 f4 01 f4 00 4c 33 d9 6b 32 4f e0 06 7f .j.....L3.k2O... 0030 33 c4 6a e1 1d 4d 3a 4d 33 1d 05 10 02 01 00 00 3.j..M:M3....... 0040 00 00 00 00 00 44 41 c4 e8 42 12 ea c7 68 5f 6d .....DA..B...h_m 0050 5a 72 53 bc f7 d7 9d 8e 9a 35 a2 01 67 aa b8 10 ZrS......5..g... 0060 c6 d5 25 dd d9 1e a8 c3 9a 96 7a a9 0f 72 ce e0 ..%.......z..r.. 0070 0c eb .. Frame 7 (114 bytes on wire, 114 bytes captured) Arrival Time: May 19, 2005 13:58:22.542399000 Time delta from previous packet: 0.001635000 seconds Time since reference or first frame: 1.284051000 seconds Frame Number: 7 Packet Length: 114 bytes Capture Length: 114 bytes Ethernet II, Src: 00:09:5b:b0:f5:3d, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:09:5b:b0:f5:3d (00:09:5b:b0:f5:3d) Type: IP (0x0800) Frame check sequence: 0x29f67642 (correct) Internet Protocol, Src Addr: 165.227.249.136 (165.227.249.136), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0x0048 (72) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3b8b (correct) Source: 165.227.249.136 (165.227.249.136) Destination: 165.227.249.106 (165.227.249.106) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 76 Checksum: 0x49ca (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x6B324FE0067F33C4 Responder cookie: 0x6AE11D4D3A4D331D Next payload: Hash (8) Version: 1.0 Exchange type: Informational (5) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x8AAD2EF9 Length: 68 Encrypted payload (40 bytes) 0000 00 a0 8e 72 1e 40 00 09 5b b0 f5 3d 08 00 45 00 ...r.@..[..=..E. 0010 00 60 00 48 00 00 40 11 3b 8b a5 e3 f9 88 a5 e3 .`.H..@.;....... 0020 f9 6a 01 f4 01 f4 00 4c 49 ca 6b 32 4f e0 06 7f .j.....LI.k2O... 0030 33 c4 6a e1 1d 4d 3a 4d 33 1d 08 10 05 01 8a ad 3.j..M:M3....... 0040 2e f9 00 00 00 44 75 97 b8 a3 86 65 b2 b1 2b 71 .....Du....e..+q 0050 0f a7 de 81 ca d2 77 6f f2 47 a1 58 7d e1 d6 7e ......wo.G.X}..~ 0060 91 88 3c b2 98 57 32 9c 6f 7c a1 b6 6b 6d 29 f6 ..<..W2.o|..km). 0070 76 42 vB Frame 8 (338 bytes on wire, 338 bytes captured) Arrival Time: May 19, 2005 13:58:22.668723000 Time delta from previous packet: 0.126324000 seconds Time since reference or first frame: 1.410375000 seconds Frame Number: 8 Packet Length: 338 bytes Capture Length: 338 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:09:5b:b0:f5:3d Destination: 00:09:5b:b0:f5:3d (00:09:5b:b0:f5:3d) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0x61f539f1 (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.136 (165.227.249.136) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 320 Identification: 0xfaaf (64175) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x4043 (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.136 (165.227.249.136) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 300 Checksum: 0x3369 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x6B324FE0067F33C4 Responder cookie: 0x6AE11D4D3A4D331D Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xB9C87531 Length: 292 Encrypted payload (264 bytes) 0000 00 09 5b b0 f5 3d 00 a0 8e 72 1e 40 08 00 45 00 ..[..=...r.@..E. 0010 01 40 fa af 00 00 40 11 40 43 a5 e3 f9 6a a5 e3 .@....@.@C...j.. 0020 f9 88 01 f4 01 f4 01 2c 33 69 6b 32 4f e0 06 7f .......,3ik2O... 0030 33 c4 6a e1 1d 4d 3a 4d 33 1d 08 10 20 01 b9 c8 3.j..M:M3... ... 0040 75 31 00 00 01 24 ed de bd e3 bb 3a 91 39 5d a5 u1...$.....:.9]. 0050 38 87 bc ca 7c 70 9a 81 56 72 4d 4b cf 73 cd 08 8...|p..VrMK.s.. 0060 5d d9 22 29 ac 87 ce 99 6e 2f 91 e4 f4 d2 db e2 ].")....n/...... 0070 fe 06 db 81 15 97 7a 88 51 42 7f 55 e1 31 a0 e1 ......z.QB.U.1.. 0080 79 7c 7a d4 c5 31 6e 3f a7 0a e3 55 f1 f1 c3 7d y|z..1n?...U...} 0090 20 c7 63 be 9c c8 c9 47 6b f3 cf 91 25 a9 f8 6d .c....Gk...%..m 00a0 33 a5 00 a8 77 81 b6 29 38 5b fa 1e 4d 24 33 53 3...w..)8[..M$3S 00b0 4a 86 25 7f 82 ea 38 02 d8 20 a8 e5 7f 79 3f cb J.%...8.. ...y?. 00c0 78 d8 9b 33 f4 24 2e cf 68 f0 b7 41 bc 40 45 4f x..3.$..h..A.@EO 00d0 87 4b 90 ca ed 7c 89 3a 62 49 6c 07 68 35 01 84 .K...|.:bIl.h5.. 00e0 71 89 d1 f5 9f 26 e3 f0 5e 70 3c f5 de 2b d4 56 q....&..^p<..+.V 00f0 72 a9 49 34 4b f3 d7 49 7b 6d 58 f1 8d 79 bd 4f r.I4K..I{mX..y.O 0100 3f fd b8 67 33 18 c0 56 1f 27 32 2e 5f f5 ad ec ?..g3..V.'2._... 0110 9e 89 85 2d be 7d 5b ca a2 f5 5e fa 0a fb cb bb ...-.}[...^..... 0120 f7 71 ad 6d 44 52 f8 e3 29 b8 e7 63 f6 88 7c ce .q.mDR..)..c..|. 0130 c3 69 06 41 a8 90 ed 8b 96 b0 0e 11 39 d0 fc 39 .i.A........9..9 0140 98 73 e1 af 63 fd 93 8f 7c 3b 3f 59 8b 74 61 f5 .s..c...|;?Y.ta. 0150 39 f1 9. Frame 9 (330 bytes on wire, 330 bytes captured) Arrival Time: May 19, 2005 13:58:23.124406000 Time delta from previous packet: 0.455683000 seconds Time since reference or first frame: 1.866058000 seconds Frame Number: 9 Packet Length: 330 bytes Capture Length: 330 bytes Ethernet II, Src: 00:09:5b:b0:f5:3d, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:09:5b:b0:f5:3d (00:09:5b:b0:f5:3d) Type: IP (0x0800) Frame check sequence: 0x488adefa (correct) Internet Protocol, Src Addr: 165.227.249.136 (165.227.249.136), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 312 Identification: 0x0049 (73) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3ab2 (correct) Source: 165.227.249.136 (165.227.249.136) Destination: 165.227.249.106 (165.227.249.106) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 292 Checksum: 0x175b (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x6B324FE0067F33C4 Responder cookie: 0x6AE11D4D3A4D331D Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xB9C87531 Length: 284 Encrypted payload (256 bytes) 0000 00 a0 8e 72 1e 40 00 09 5b b0 f5 3d 08 00 45 00 ...r.@..[..=..E. 0010 01 38 00 49 00 00 40 11 3a b2 a5 e3 f9 88 a5 e3 .8.I..@.:....... 0020 f9 6a 01 f4 01 f4 01 24 17 5b 6b 32 4f e0 06 7f .j.....$.[k2O... 0030 33 c4 6a e1 1d 4d 3a 4d 33 1d 08 10 20 01 b9 c8 3.j..M:M3... ... 0040 75 31 00 00 01 1c d0 27 9e a7 f1 e9 77 fd fe a5 u1.....'....w... 0050 b2 7f a3 ba cf 6d 30 b0 a7 da 63 f4 bc a2 e2 da .....m0...c..... 0060 d2 c7 4f 80 ba 0f 40 44 6f 20 9a 80 a5 d5 17 a8 ..O...@Do ...... 0070 9a 1e f6 e3 c3 9b 6b ad 2c 35 6f 2c f7 5d ec 8a ......k.,5o,.].. 0080 2d 14 3d 4d 84 37 71 88 90 2d 8f 56 e7 9e e8 5c -.=M.7q..-.V...\ 0090 9e e7 da f0 f3 d7 8f 0d 1a 45 f1 b2 39 4a cd 6d .........E..9J.m 00a0 82 65 c4 5a 1a d7 d7 ca 9a 30 ee 6c e4 8b ad ad .e.Z.....0.l.... 00b0 ee be 6a 5c a4 70 43 37 a9 5d ef 4a b4 fa ce be ..j\.pC7.].J.... 00c0 05 38 d0 34 02 ef 42 3c c7 df fb 80 23 cc 90 96 .8.4..B<....#... 00d0 20 51 06 4c c7 3a 66 45 c1 a4 ed 14 36 81 3c 08 Q.L.:fE....6.<. 00e0 35 87 2a 1e 31 db 9e f3 22 eb 68 cf 99 c0 7b f5 5.*.1...".h...{. 00f0 56 bb 31 60 36 9f 87 b1 08 22 53 43 23 53 4e 81 V.1`6...."SC#SN. 0100 7b 53 9f c2 99 00 e9 c4 ef 8f 38 3b 36 ec eb da {S........8;6... 0110 4e fc 1f f4 7b 97 b2 8b 47 a5 e8 ed 88 09 f0 27 N...{...G......' 0120 f5 c4 4e 8c 76 61 69 c4 f9 e8 49 95 9c 9f c3 36 ..N.vai...I....6 0130 d7 52 71 a3 db 49 67 8b cd c5 e0 0a 78 ac 3e 17 .Rq..Ig.....x.>. 0140 ac aa 47 92 8b db 48 8a de fa ..G...H... Frame 10 (98 bytes on wire, 98 bytes captured) Arrival Time: May 19, 2005 13:58:23.285047000 Time delta from previous packet: 0.160641000 seconds Time since reference or first frame: 2.026699000 seconds Frame Number: 10 Packet Length: 98 bytes Capture Length: 98 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:09:5b:b0:f5:3d Destination: 00:09:5b:b0:f5:3d (00:09:5b:b0:f5:3d) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0x8933d59f (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.136 (165.227.249.136) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 80 Identification: 0xfab0 (64176) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x4132 (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.136 (165.227.249.136) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 60 Checksum: 0x6a57 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x6B324FE0067F33C4 Responder cookie: 0x6AE11D4D3A4D331D Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xB9C87531 Length: 52 Encrypted payload (24 bytes) 0000 00 09 5b b0 f5 3d 00 a0 8e 72 1e 40 08 00 45 00 ..[..=...r.@..E. 0010 00 50 fa b0 00 00 40 11 41 32 a5 e3 f9 6a a5 e3 .P....@.A2...j.. 0020 f9 88 01 f4 01 f4 00 3c 6a 57 6b 32 4f e0 06 7f .........b..w.q.... 0070 b0 6b 9f 7c e2 04 82 b2 87 36 78 f1 0c ae 12 93 .k.|.....6x..... 0080 7b fe {. Frame 15 (130 bytes on wire, 130 bytes captured) Arrival Time: May 19, 2005 13:58:24.840143000 Time delta from previous packet: 0.993926000 seconds Time since reference or first frame: 3.581795000 seconds Frame Number: 15 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:09:5b:b0:f5:3d Destination: 00:09:5b:b0:f5:3d (00:09:5b:b0:f5:3d) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0xf944f61b (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.136 (165.227.249.136) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0xfab3 (64179) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x40ee (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.136 (165.227.249.136) Encapsulating Security Payload SPI: 0xe4296be9 Sequence: 3 Data (84 bytes) 0000 00 09 5b b0 f5 3d 00 a0 8e 72 1e 40 08 00 45 00 ..[..=...r.@..E. 0010 00 70 fa b3 00 00 40 32 40 ee a5 e3 f9 6a a5 e3 .p....@2@....j.. 0020 f9 88 e4 29 6b e9 00 00 00 03 1a 0c c7 20 3c 13 ...)k........ <. 0030 e5 3c 4a 6b 4d 5e 32 ea bf 91 24 44 14 b9 fd fc ..w..Y....... 0060 50 ed bf de 45 e0 ce 11 61 3f b8 f9 9e 25 f1 27 P...E...a?...%.' 0070 72 92 53 d6 b0 be 07 3e 17 25 85 89 e4 34 52 34 r.S....>.%...4R4 0080 0f 59 .Y Frame 17 (130 bytes on wire, 130 bytes captured) Arrival Time: May 19, 2005 13:58:25.837867000 Time delta from previous packet: 0.997717000 seconds Time since reference or first frame: 4.579519000 seconds Frame Number: 17 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:09:5b:b0:f5:3d Destination: 00:09:5b:b0:f5:3d (00:09:5b:b0:f5:3d) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0xc1747a66 (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.136 (165.227.249.136) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0xfab4 (64180) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x40ed (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.136 (165.227.249.136) Encapsulating Security Payload SPI: 0xe4296be9 Sequence: 4 Data (84 bytes) 0000 00 09 5b b0 f5 3d 00 a0 8e 72 1e 40 08 00 45 00 ..[..=...r.@..E. 0010 00 70 fa b4 00 00 40 32 40 ed a5 e3 f9 6a a5 e3 .p....@2@....j.. 0020 f9 88 e4 29 6b e9 00 00 00 04 3c fc e4 6e 09 11 ...)k.....<..n.. 0030 f9 7e 52 58 e7 8c 8c 0e 22 57 cc ad 44 a7 59 0a .~RX...."W..D.Y. 0040 ab ff 05 17 af 1f 80 c3 b1 97 25 5e 74 39 2a 81 ..........%^t9*. 0050 ad 93 1e 91 ce 5b 5f cb 02 db c9 c2 c4 b8 d5 57 .....[_........W 0060 54 ba c9 e7 9d 43 4a 42 3e 30 6c f1 6d 18 9b 2f T....CJB>0l.m../ 0070 d7 0a 3b c0 03 a0 09 1d 32 5d 5d 04 0b 55 c1 74 ..;.....2]]..U.t 0080 7a 66 zf Frame 18 (130 bytes on wire, 130 bytes captured) Arrival Time: May 19, 2005 13:58:25.839223000 Time delta from previous packet: 0.001356000 seconds Time since reference or first frame: 4.580875000 seconds Frame Number: 18 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:09:5b:b0:f5:3d, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:09:5b:b0:f5:3d (00:09:5b:b0:f5:3d) Type: IP (0x0800) Frame check sequence: 0x4865d601 (correct) Internet Protocol, Src Addr: 165.227.249.136 (165.227.249.136), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x41fc (16892) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 30 Protocol: ESP (0x32) Header checksum: 0x1ba6 (correct) Source: 165.227.249.136 (165.227.249.136) Destination: 165.227.249.106 (165.227.249.106) Encapsulating Security Payload SPI: 0xa5d49c00 Sequence: 4 Data (84 bytes) 0000 00 a0 8e 72 1e 40 00 09 5b b0 f5 3d 08 00 45 00 ...r.@..[..=..E. 0010 00 70 41 fc 00 00 1e 32 1b a6 a5 e3 f9 88 a5 e3 .pA....2........ 0020 f9 6a a5 d4 9c 00 00 00 00 04 b8 f9 9e 25 f1 27 .j...........%.' 0030 72 92 ba 42 ec 4a 3f 91 f7 54 71 26 c0 e5 20 7c r..B.J?..Tq&.. | 0040 45 0f 69 66 49 55 22 5e b8 d8 02 0b 46 24 95 19 E.ifIU"^....F$.. 0050 05 1d c0 64 eb e5 23 75 2b aa 82 f0 00 26 c9 8e ...d..#u+....&.. 0060 5d 16 6b 08 9e 7c 7f 68 11 4d 4d 46 d4 e3 0f 51 ].k..|.h.MMF...Q 0070 8d 2e f5 76 9e ed aa ac a2 ff 96 18 30 8a 48 65 ...v........0.He 0080 d6 01 .. Frame 19 (330 bytes on wire, 330 bytes captured) Arrival Time: May 19, 2005 13:58:27.170954000 Time delta from previous packet: 1.331731000 seconds Time since reference or first frame: 5.912606000 seconds Frame Number: 19 Packet Length: 330 bytes Capture Length: 330 bytes Ethernet II, Src: 00:09:5b:b0:f5:3d, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:09:5b:b0:f5:3d (00:09:5b:b0:f5:3d) Type: IP (0x0800) Frame check sequence: 0x0d9ba411 (correct) Internet Protocol, Src Addr: 165.227.249.136 (165.227.249.136), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 312 Identification: 0x004a (74) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3ab1 (correct) Source: 165.227.249.136 (165.227.249.136) Destination: 165.227.249.106 (165.227.249.106) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 292 Checksum: 0x175b (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x6B324FE0067F33C4 Responder cookie: 0x6AE11D4D3A4D331D Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xB9C87531 Length: 284 Encrypted payload (256 bytes) 0000 00 a0 8e 72 1e 40 00 09 5b b0 f5 3d 08 00 45 00 ...r.@..[..=..E. 0010 01 38 00 4a 00 00 40 11 3a b1 a5 e3 f9 88 a5 e3 .8.J..@.:....... 0020 f9 6a 01 f4 01 f4 01 24 17 5b 6b 32 4f e0 06 7f .j.....$.[k2O... 0030 33 c4 6a e1 1d 4d 3a 4d 33 1d 08 10 20 01 b9 c8 3.j..M:M3... ... 0040 75 31 00 00 01 1c d0 27 9e a7 f1 e9 77 fd fe a5 u1.....'....w... 0050 b2 7f a3 ba cf 6d 30 b0 a7 da 63 f4 bc a2 e2 da .....m0...c..... 0060 d2 c7 4f 80 ba 0f 40 44 6f 20 9a 80 a5 d5 17 a8 ..O...@Do ...... 0070 9a 1e f6 e3 c3 9b 6b ad 2c 35 6f 2c f7 5d ec 8a ......k.,5o,.].. 0080 2d 14 3d 4d 84 37 71 88 90 2d 8f 56 e7 9e e8 5c -.=M.7q..-.V...\ 0090 9e e7 da f0 f3 d7 8f 0d 1a 45 f1 b2 39 4a cd 6d .........E..9J.m 00a0 82 65 c4 5a 1a d7 d7 ca 9a 30 ee 6c e4 8b ad ad .e.Z.....0.l.... 00b0 ee be 6a 5c a4 70 43 37 a9 5d ef 4a b4 fa ce be ..j\.pC7.].J.... 00c0 05 38 d0 34 02 ef 42 3c c7 df fb 80 23 cc 90 96 .8.4..B<....#... 00d0 20 51 06 4c c7 3a 66 45 c1 a4 ed 14 36 81 3c 08 Q.L.:fE....6.<. 00e0 35 87 2a 1e 31 db 9e f3 22 eb 68 cf 99 c0 7b f5 5.*.1...".h...{. 00f0 56 bb 31 60 36 9f 87 b1 08 22 53 43 23 53 4e 81 V.1`6...."SC#SN. 0100 7b 53 9f c2 99 00 e9 c4 ef 8f 38 3b 36 ec eb da {S........8;6... 0110 4e fc 1f f4 7b 97 b2 8b 47 a5 e8 ed 88 09 f0 27 N...{...G......' 0120 f5 c4 4e 8c 76 61 69 c4 f9 e8 49 95 9c 9f c3 36 ..N.vai...I....6 0130 d7 52 71 a3 db 49 67 8b cd c5 e0 0a 78 ac 3e 17 .Rq..Ig.....x.>. 0140 ac aa 47 92 8b db 0d 9b a4 11 ..G.......