Frame 1 (126 bytes on wire, 126 bytes captured) Arrival Time: May 24, 2005 10:18:03.374178000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 126 bytes Capture Length: 126 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:e0:13:00:2c:4a Destination: 00:e0:13:00:2c:4a (00:e0:13:00:2c:4a) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0x25c8d9b0 (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.137 (165.227.249.137) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 108 Identification: 0x74a8 (29864) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xc71d (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.137 (165.227.249.137) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 88 Checksum: 0x1e81 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x02D94E222C0FAA7E Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 80 Security Association payload Next payload: NONE (0) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 40 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 32 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) 0000 00 e0 13 00 2c 4a 00 a0 8e 72 1e 40 08 00 45 00 ....,J...r.@..E. 0010 00 6c 74 a8 00 00 40 11 c7 1d a5 e3 f9 6a a5 e3 .lt...@......j.. 0020 f9 89 01 f4 01 f4 00 58 1e 81 02 d9 4e 22 2c 0f .......X....N",. 0030 aa 7e 00 00 00 00 00 00 00 00 01 10 02 00 00 00 .~.............. 0040 00 00 00 00 00 50 00 00 00 34 00 00 00 01 00 00 .....P...4...... 0050 00 01 00 00 00 28 01 01 00 01 00 00 00 20 01 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 04 00 02 80 03 ................ 0070 00 01 80 0b 00 01 80 0c 70 80 25 c8 d9 b0 ........p.%... Frame 2 (126 bytes on wire, 126 bytes captured) Arrival Time: May 24, 2005 10:18:03.378761000 Time delta from previous packet: 0.004583000 seconds Time since reference or first frame: 0.004583000 seconds Frame Number: 2 Packet Length: 126 bytes Capture Length: 126 bytes Ethernet II, Src: 00:e0:13:00:2c:4a, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:e0:13:00:2c:4a (00:e0:13:00:2c:4a) Type: IP (0x0800) Frame check sequence: 0x3a882782 (correct) Internet Protocol, Src Addr: 165.227.249.137 (165.227.249.137), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 108 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfbc5 (correct) Source: 165.227.249.137 (165.227.249.137) Destination: 165.227.249.106 (165.227.249.106) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 88 Checksum: 0xcbde (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x02D94E222C0FAA7E Responder cookie: 0x557C1A3092E55010 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 80 Security Association payload Next payload: NONE (0) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 40 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 32 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) 0000 00 a0 8e 72 1e 40 00 e0 13 00 2c 4a 08 00 45 00 ...r.@....,J..E. 0010 00 6c 00 00 40 00 40 11 fb c5 a5 e3 f9 89 a5 e3 .l..@.@......... 0020 f9 6a 01 f4 01 f4 00 58 cb de 02 d9 4e 22 2c 0f .j.....X....N",. 0030 aa 7e 55 7c 1a 30 92 e5 50 10 01 10 02 00 00 00 .~U|.0..P....... 0040 00 00 00 00 00 50 00 00 00 34 00 00 00 01 00 00 .....P...4...... 0050 00 01 00 00 00 28 01 01 00 01 00 00 00 20 01 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 04 00 02 80 03 ................ 0070 00 01 80 0b 00 01 80 0c 70 80 3a 88 27 82 ........p.:.'. Frame 3 (262 bytes on wire, 262 bytes captured) Arrival Time: May 24, 2005 10:18:03.502335000 Time delta from previous packet: 0.123574000 seconds Time since reference or first frame: 0.128157000 seconds Frame Number: 3 Packet Length: 262 bytes Capture Length: 262 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:e0:13:00:2c:4a Destination: 00:e0:13:00:2c:4a (00:e0:13:00:2c:4a) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0x5cbae066 (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.137 (165.227.249.137) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 244 Identification: 0x74a9 (29865) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xc694 (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.137 (165.227.249.137) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 224 Checksum: 0x1db6 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x02D94E222C0FAA7E Responder cookie: 0x557C1A3092E55010 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 216 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: Vendor ID (13) Length: 24 Nonce Data Vendor ID payload Next payload: NONE (0) Length: 32 Vendor ID: unknown vendor ID: 0x0300001404E4BA31BDA6B3DC0F1DB24C... 0000 00 e0 13 00 2c 4a 00 a0 8e 72 1e 40 08 00 45 00 ....,J...r.@..E. 0010 00 f4 74 a9 00 00 40 11 c6 94 a5 e3 f9 6a a5 e3 ..t...@......j.. 0020 f9 89 01 f4 01 f4 00 e0 1d b6 02 d9 4e 22 2c 0f ............N",. 0030 aa 7e 55 7c 1a 30 92 e5 50 10 04 10 02 00 00 00 .~U|.0..P....... 0040 00 00 00 00 00 d8 0a 00 00 84 7c aa f1 28 4a 33 ..........|..(J3 0050 8e d2 64 48 54 8d 1f 9c 39 fe cd 38 48 47 91 37 ..dHT...9..8HG.7 0060 c8 aa 4e 50 52 cf b6 c4 b1 01 18 95 c7 f7 4d 72 ..NPR.........Mr 0070 09 1a 91 c8 e8 19 3c 10 73 cb ee a9 76 1e 9c 29 ......<.s...v..) 0080 28 9c f8 33 99 21 c4 d5 d9 89 d8 0b d2 e4 c9 3f (..3.!.........? 0090 c8 40 84 5a 6a 9d 75 f2 05 bc ff e5 cd e6 87 d3 .@.Zj.u......... 00a0 4c e6 75 52 8e b0 dd cb 66 bf 25 6e 24 0a 04 77 L.uR....f.%n$..w 00b0 89 ce 30 91 f0 34 b7 ac ab c0 f6 50 ec bb a2 1f ..0..4.....P.... 00c0 85 8b 66 fd bb 3c 13 68 fc e4 0d 00 00 18 87 5d ..f..<.h.......] 00d0 26 36 bb 3e e1 b1 c4 be 9e b2 96 ec 9c b0 26 e7 &6.>..........&. 00e0 68 b3 00 00 00 20 03 00 00 14 04 e4 ba 31 bd a6 h.... .......1.. 00f0 b3 dc 0f 1d b2 4c d7 e7 0f bf 00 00 00 08 00 06 .....L.......... 0100 00 02 5c ba e0 66 ..\..f Frame 4 (226 bytes on wire, 226 bytes captured) Arrival Time: May 24, 2005 10:18:03.520216000 Time delta from previous packet: 0.017881000 seconds Time since reference or first frame: 0.146038000 seconds Frame Number: 4 Packet Length: 226 bytes Capture Length: 226 bytes Ethernet II, Src: 00:e0:13:00:2c:4a, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:e0:13:00:2c:4a (00:e0:13:00:2c:4a) Type: IP (0x0800) Frame check sequence: 0x4a0909d4 (correct) Internet Protocol, Src Addr: 165.227.249.137 (165.227.249.137), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 208 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb61 (correct) Source: 165.227.249.137 (165.227.249.137) Destination: 165.227.249.106 (165.227.249.106) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 188 Checksum: 0x1270 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x02D94E222C0FAA7E Responder cookie: 0x557C1A3092E55010 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 180 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 20 Nonce Data 0000 00 a0 8e 72 1e 40 00 e0 13 00 2c 4a 08 00 45 00 ...r.@....,J..E. 0010 00 d0 00 00 40 00 40 11 fb 61 a5 e3 f9 89 a5 e3 ....@.@..a...... 0020 f9 6a 01 f4 01 f4 00 bc 12 70 02 d9 4e 22 2c 0f .j.......p..N",. 0030 aa 7e 55 7c 1a 30 92 e5 50 10 04 10 02 00 00 00 .~U|.0..P....... 0040 00 00 00 00 00 b4 0a 00 00 84 2d da dd a5 3a 32 ..........-...:2 0050 a1 ca 66 49 7d 12 dd 85 22 9d 4d 7f aa 75 88 7c ..fI}...".M..u.| 0060 40 ce f4 52 14 61 ff 19 dc 31 08 19 b5 47 fd 00 @..R.a...1...G.. 0070 64 18 94 a9 ef a2 d4 b7 b1 27 7c a2 99 71 4e ec d........'|..qN. 0080 57 f2 26 6b 86 3b 18 fc ba c9 4e 3e 53 e9 60 70 W.&k.;....N>S.`p 0090 fa 6b 82 9b 38 f0 91 61 e6 86 ef 79 fa 1b 41 78 .k..8..a...y..Ax 00a0 10 a8 93 5f 44 86 9a 67 3f aa 83 9b 6e a5 eb 56 ..._D..g?...n..V 00b0 ca a3 f5 82 58 b8 66 de 9f 0e a6 57 a3 51 e8 bf ....X.f....W.Q.. 00c0 80 2a 73 b7 cf 0f e4 db 82 d0 00 00 00 14 5e 8d .*s...........^. 00d0 aa 5c 16 7a 98 29 da a7 71 c1 67 98 64 79 4a 09 .\.z.)..q.g.dyJ. 00e0 09 d4 .. Frame 5 (138 bytes on wire, 138 bytes captured) Arrival Time: May 24, 2005 10:18:03.672517000 Time delta from previous packet: 0.152301000 seconds Time since reference or first frame: 0.298339000 seconds Frame Number: 5 Packet Length: 138 bytes Capture Length: 138 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:e0:13:00:2c:4a Destination: 00:e0:13:00:2c:4a (00:e0:13:00:2c:4a) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0xc8ee6679 (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.137 (165.227.249.137) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x74aa (29866) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xc70f (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.137 (165.227.249.137) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 100 Checksum: 0x2da0 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x02D94E222C0FAA7E Responder cookie: 0x557C1A3092E55010 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 92 Encrypted payload (64 bytes) 0000 00 e0 13 00 2c 4a 00 a0 8e 72 1e 40 08 00 45 00 ....,J...r.@..E. 0010 00 78 74 aa 00 00 40 11 c7 0f a5 e3 f9 6a a5 e3 .xt...@......j.. 0020 f9 89 01 f4 01 f4 00 64 2d a0 02 d9 4e 22 2c 0f .......d-...N",. 0030 aa 7e 55 7c 1a 30 92 e5 50 10 05 10 02 01 00 00 .~U|.0..P....... 0040 00 00 00 00 00 5c bd 22 a5 5e c3 a5 3c 6b c4 6c .....\.".^...e...... 0050 91 31 9d f7 59 d5 c5 63 8a de 49 ad d8 00 c8 3b .1..Y..c..I....; 0060 00 ff 8b 68 89 40 6b e9 a9 f6 60 6a f2 91 27 0f ...h.@k...`j..'. 0070 52 34 f7 23 14 d6 aa 12 1d 50 6e 01 11 6a 87 fa R4.#.....Pn..j.. 0080 9a 52 bb 62 08 85 66 29 26 6f ef d2 05 b2 00 f9 .R.b..f)&o...... 0090 60 48 f0 de a4 66 0c 73 d1 66 d5 12 e8 62 8c 4d `H...f.s.f...b.M 00a0 be da bb f7 3a 85 c2 df 7b 5f d2 40 12 e6 3f 69 ....:...{_.@..?i 00b0 04 5a a9 33 6d af d2 06 9c 92 6b f6 69 ac 1b dd .Z.3m.....k.i... 00c0 cf 84 24 83 16 4a b4 45 1a 66 e8 32 99 e8 bd eb ..$..J.E.f.2.... 00d0 a3 18 0a 1d 47 48 26 7f f9 b2 1b 9a 57 32 4a 25 ....GH&.....W2J% 00e0 0f 02 c1 b2 ad 51 4f 25 89 7a c2 4e 9a 3e e0 7b .....QO%.z.N.>.{ 00f0 e4 7c 91 03 94 6a 8b ac a6 94 46 d9 d2 db 06 26 .|...j....F....& 0100 6c 89 26 90 b2 4f a6 92 cc 61 79 be e4 07 9b 17 l.&..O...ay..... 0110 e1 59 b6 a2 30 01 10 9f 0f 99 c7 da ca 7f d5 6b .Y..0..........k 0120 64 5d 60 a2 9a d7 db 75 94 18 59 5e a5 47 5f 74 d]`....u..Y^.G_t 0130 41 2a 9a 21 82 52 e2 6c b6 c6 ee 7d 91 ae f5 ee A*.!.R.l...}.... 0140 dd 24 3e 7d 67 9f 52 f7 15 5f ff 51 c4 76 79 75 .$>}g.R.._.Q.vyu 0150 4b 82 K. Frame 8 (338 bytes on wire, 338 bytes captured) Arrival Time: May 24, 2005 10:18:03.822707000 Time delta from previous packet: 0.020826000 seconds Time since reference or first frame: 0.448529000 seconds Frame Number: 8 Packet Length: 338 bytes Capture Length: 338 bytes Ethernet II, Src: 00:e0:13:00:2c:4a, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:e0:13:00:2c:4a (00:e0:13:00:2c:4a) Type: IP (0x0800) Frame check sequence: 0x87677591 (correct) Internet Protocol, Src Addr: 165.227.249.137 (165.227.249.137), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 320 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfaf1 (correct) Source: 165.227.249.137 (165.227.249.137) Destination: 165.227.249.106 (165.227.249.106) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 300 Checksum: 0xc2be (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x02D94E222C0FAA7E Responder cookie: 0x557C1A3092E55010 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xF0FECCE7 Length: 292 Encrypted payload (264 bytes) 0000 00 a0 8e 72 1e 40 00 e0 13 00 2c 4a 08 00 45 00 ...r.@....,J..E. 0010 01 40 00 00 40 00 40 11 fa f1 a5 e3 f9 89 a5 e3 .@..@.@......... 0020 f9 6a 01 f4 01 f4 01 2c c2 be 02 d9 4e 22 2c 0f .j.....,....N",. 0030 aa 7e 55 7c 1a 30 92 e5 50 10 08 10 20 01 f0 fe .~U|.0..P... ... 0040 cc e7 00 00 01 24 de 53 d2 4d e1 b2 3e 8a e7 0b .....$.S.M..>... 0050 c4 e5 9a 8d 36 ee 24 7b b1 26 ce 23 d5 38 d7 c8 ....6.${.&.#.8.. 0060 f5 87 56 98 a5 be 33 93 37 1b a2 21 db 02 c9 82 ..V...3.7..!.... 0070 62 c9 13 72 00 fb 5e db 92 26 c9 70 f5 9e 77 70 b..r..^..&.p..wp 0080 18 1e c7 df 9e a6 a0 cd 1f 5a b4 fe 42 dd ab d5 .........Z..B... 0090 80 2d 55 00 97 2c 85 3b c7 19 3c f2 6b fd 99 2e .-U..,.;..<.k... 00a0 85 80 78 01 7d 59 23 22 80 bb 4e 3f a7 e4 c5 e4 ..x.}Y#"..N?.... 00b0 95 13 64 22 aa 32 0f b2 1c ce 75 b4 bf 8f 23 ac ..d".2....u...#. 00c0 bc 4d 23 8d 53 56 81 6c 9c 48 04 c6 53 77 d5 1f .M#.SV.l.H..Sw.. 00d0 0b 01 ec 94 d0 5b 15 9e 04 d2 17 8f f3 bf 4a 3f .....[........J? 00e0 35 70 4f 24 01 cf 05 37 05 80 7e 71 fb 7e 6b 81 5pO$...7..~q.~k. 00f0 35 7e 87 36 e2 67 98 93 3b f4 40 81 2c 31 5d 0d 5~.6.g..;.@.,1]. 0100 05 4b 62 93 1a fa 5a f1 fd ff 5f c8 f0 48 cf a6 .Kb...Z..._..H.. 0110 a9 26 ce 75 c6 e1 7b f7 36 77 70 11 53 46 0d db .&.u..{.6wp.SF.. 0120 2c 73 d3 70 d6 bc cb 7e 8f 7c 23 98 f7 04 4a e2 ,s.p...~.|#...J. 0130 8a e0 fe 7d f9 d7 b2 4c 26 c2 dc b0 da 9f eb 31 ...}...L&......1 0140 fb f8 a0 e3 2c 4c 25 cd e9 77 4f 77 ef 75 87 67 ....,L%..wOw.u.g 0150 75 91 u. Frame 9 (98 bytes on wire, 98 bytes captured) Arrival Time: May 24, 2005 10:18:03.981507000 Time delta from previous packet: 0.158800000 seconds Time since reference or first frame: 0.607329000 seconds Frame Number: 9 Packet Length: 98 bytes Capture Length: 98 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:e0:13:00:2c:4a Destination: 00:e0:13:00:2c:4a (00:e0:13:00:2c:4a) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0x19566eef (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.137 (165.227.249.137) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 80 Identification: 0x74ac (29868) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xc735 (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.137 (165.227.249.137) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 60 Checksum: 0x54f2 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x02D94E222C0FAA7E Responder cookie: 0x557C1A3092E55010 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xF0FECCE7 Length: 52 Encrypted payload (24 bytes) 0000 00 e0 13 00 2c 4a 00 a0 8e 72 1e 40 08 00 45 00 ....,J...r.@..E. 0010 00 50 74 ac 00 00 40 11 c7 35 a5 e3 f9 6a a5 e3 .Pt...@..5...j.. 0020 f9 89 01 f4 01 f4 00 3c 54 f2 02 d9 4e 22 2c 0f ........ 0060 49 03 23 96 73 17 62 a3 9f 71 97 30 09 34 c0 84 I.#.s.b..q.0.4.. 0070 bf e7 72 8d 6c c6 37 c0 64 6f eb ef eb 58 20 74 ..r.l.7.do...X t 0080 a8 93 .. Frame 14 (130 bytes on wire, 130 bytes captured) Arrival Time: May 24, 2005 10:18:12.630931000 Time delta from previous packet: 0.998870000 seconds Time since reference or first frame: 9.256753000 seconds Frame Number: 14 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:e0:13:00:2c:4a Destination: 00:e0:13:00:2c:4a (00:e0:13:00:2c:4a) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0xcb914260 (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.137 (165.227.249.137) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x74af (29871) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0xc6f1 (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.137 (165.227.249.137) Encapsulating Security Payload SPI: 0xf6498b3c Sequence: 3 Data (84 bytes) 0000 00 e0 13 00 2c 4a 00 a0 8e 72 1e 40 08 00 45 00 ....,J...r.@..E. 0010 00 70 74 af 00 00 40 32 c6 f1 a5 e3 f9 6a a5 e3 .pt...@2.....j.. 0020 f9 89 f6 49 8b 3c 00 00 00 03 22 39 57 fb 4a 31 ...I.<...."9W.J1 0030 bf 62 b1 29 32 c1 7d 37 b1 b2 50 39 02 97 c2 53 .b.)2.}7..P9...S 0040 c8 da b8 6d 5b de 3d 61 a4 7b 9e 99 d8 f5 64 af ...m[.=a.{....d. 0050 7c d5 e6 8e c2 a5 a4 91 85 2d 4d 6f 46 e9 26 2c |........-MoF.&, 0060 ba 90 e7 b2 86 38 40 53 21 69 0f 63 82 23 75 a0 .....8@S!i.c.#u. 0070 8b 24 d5 2d 28 0c e9 25 0d 41 a6 17 ce 66 cb 91 .$.-(..%.A...f.. 0080 42 60 B` Frame 15 (130 bytes on wire, 130 bytes captured) Arrival Time: May 24, 2005 10:18:12.631985000 Time delta from previous packet: 0.001054000 seconds Time since reference or first frame: 9.257807000 seconds Frame Number: 15 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:e0:13:00:2c:4a, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:e0:13:00:2c:4a (00:e0:13:00:2c:4a) Type: IP (0x0800) Frame check sequence: 0x907d0b81 (correct) Internet Protocol, Src Addr: 165.227.249.137 (165.227.249.137), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x5417 (21527) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0xe789 (correct) Source: 165.227.249.137 (165.227.249.137) Destination: 165.227.249.106 (165.227.249.106) Encapsulating Security Payload SPI: 0xd7af6c00 Sequence: 3 Data (84 bytes) 0000 00 a0 8e 72 1e 40 00 e0 13 00 2c 4a 08 00 45 00 ...r.@....,J..E. 0010 00 70 54 17 00 00 40 32 e7 89 a5 e3 f9 89 a5 e3 .pT...@2........ 0020 f9 6a d7 af 6c 00 00 00 00 03 97 30 09 34 c0 84 .j..l......0.4.. 0030 bf e7 22 60 62 a6 76 50 e1 6c b6 55 20 96 aa 62 .."`b.vP.l.U ..b 0040 39 74 ae ab 35 d2 c9 b0 8f ae 34 33 2d 0e 71 e6 9t..5.....43-.q. 0050 d0 4a 9a dc 4c 25 94 c1 e3 5c 49 cd 9b fe 98 58 .J..L%...\I....X 0060 b2 de 59 8a 9b 38 05 5b 4e 08 e6 bb 89 4c 51 c5 ..Y..8.[N....LQ. 0070 f8 59 95 dc eb 81 9d f8 c9 8a 5b 08 6f fc 90 7d .Y........[.o..} 0080 0b 81 .. Frame 16 (130 bytes on wire, 130 bytes captured) Arrival Time: May 24, 2005 10:18:13.630884000 Time delta from previous packet: 0.998899000 seconds Time since reference or first frame: 10.256706000 seconds Frame Number: 16 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:e0:13:00:2c:4a Destination: 00:e0:13:00:2c:4a (00:e0:13:00:2c:4a) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0x5a30b240 (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.137 (165.227.249.137) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x74b0 (29872) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0xc6f0 (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.137 (165.227.249.137) Encapsulating Security Payload SPI: 0xf6498b3c Sequence: 4 Data (84 bytes) 0000 00 e0 13 00 2c 4a 00 a0 8e 72 1e 40 08 00 45 00 ....,J...r.@..E. 0010 00 70 74 b0 00 00 40 32 c6 f0 a5 e3 f9 6a a5 e3 .pt...@2.....j.. 0020 f9 89 f6 49 8b 3c 00 00 00 04 33 03 d3 63 bf 22 ...I.<....3..c." 0030 2b 40 95 cc 68 29 36 69 77 00 c9 98 90 0d 43 58 +@..h)6iw.....CX 0040 ff 1c 5b 36 da ad b2 5a df 52 85 fa 5f 0a bd 8f ..[6...Z.R.._... 0050 28 6a b2 69 9e 2a f3 25 d1 6f 30 e3 01 1e 56 22 (j.i.*.%.o0...V" 0060 09 1e 56 00 6e 97 8d 6c 34 68 1a 52 ea 2d 3d a6 ..V.n..l4h.R.-=. 0070 82 57 66 8c 2d 63 78 4c 8c 78 45 5d 78 b3 5a 30 .Wf.-cxL.xE]x.Z0 0080 b2 40 .@ Frame 17 (130 bytes on wire, 130 bytes captured) Arrival Time: May 24, 2005 10:18:13.632087000 Time delta from previous packet: 0.001203000 seconds Time since reference or first frame: 10.257909000 seconds Frame Number: 17 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:e0:13:00:2c:4a, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:e0:13:00:2c:4a (00:e0:13:00:2c:4a) Type: IP (0x0800) Frame check sequence: 0x9097b3d0 (correct) Internet Protocol, Src Addr: 165.227.249.137 (165.227.249.137), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x5418 (21528) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0xe788 (correct) Source: 165.227.249.137 (165.227.249.137) Destination: 165.227.249.106 (165.227.249.106) Encapsulating Security Payload SPI: 0xd7af6c00 Sequence: 4 Data (84 bytes) 0000 00 a0 8e 72 1e 40 00 e0 13 00 2c 4a 08 00 45 00 ...r.@....,J..E. 0010 00 70 54 18 00 00 40 32 e7 88 a5 e3 f9 89 a5 e3 .pT...@2........ 0020 f9 6a d7 af 6c 00 00 00 00 04 e6 bb 89 4c 51 c5 .j..l........LQ. 0030 f8 59 ba 4a 65 30 73 9c ff 12 43 f5 d9 b2 3e 95 .Y.Je0s...C...>. 0040 91 b8 7f 1f 59 3c 59 8a 53 b7 b3 d6 ef 82 28 50 ....Y 0070 3f 8d a6 59 e5 76 79 47 e3 8e 94 69 24 1f 90 97 ?..Y.vyG...i$... 0080 b3 d0 ..