Frame 1 (146 bytes on wire, 146 bytes captured)
    Arrival Time: May 25, 2009 09:49:16.843693000
    [Time delta from previous captured frame: 0.000000000 seconds]
    [Time delta from previous displayed frame: 0.000000000 seconds]
    [Time since reference or first frame: 0.000000000 seconds]
    Frame Number: 1
    Frame Length: 146 bytes
    Capture Length: 146 bytes
    [Frame is marked: False]
    [Protocols in frame: eth:ip:udp:isakmp]
Ethernet II, Src: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40), Dst: 00:24:b2:31:e1:3d (00:24:b2:31:e1:3d)
    Destination: 00:24:b2:31:e1:3d (00:24:b2:31:e1:3d)
        Address: 00:24:b2:31:e1:3d (00:24:b2:31:e1:3d)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40)
        Address: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.106 (165.227.249.106), Dst: 165.227.249.138 (165.227.249.138)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 132
    Identification: 0xee40 (60992)
    Flags: 0x00
        0... = Reserved bit: Not set
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0x4d6c [correct]
        [Good: True]
        [Bad : False]
    Source: 165.227.249.106 (165.227.249.106)
    Destination: 165.227.249.138 (165.227.249.138)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 112
    Checksum: 0x92f9 [correct]
        [Good Checksum: True]
        [Bad Checksum: False]
Internet Security Association and Key Management Protocol
    Initiator cookie: 69F4C7EDD9C8BD47
    Responder cookie: 0000000000000000
    Next payload: Security Association (1)
    Version: 1.0
    Exchange type: Identity Protection (Main Mode) (2)
    Flags: 0x00
        .... ...0 = Not encrypted
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x00000000
    Length: 104
    Security Association payload
        Next payload: Vendor ID (13)
        Payload length: 56
        Domain of interpretation: IPSEC (1)
        Situation: IDENTITY (1)
        Proposal payload # 1
            Next payload: NONE (0)
            Payload length: 44
            Proposal number: 1
            Protocol ID: ISAKMP (1)
            SPI Size: 0
            Proposal transforms: 1
            Transform payload # 1
                Next payload: NONE (0)
                Payload length: 36
                Transform number: 1
                Transform ID: KEY_IKE (1)
                Encryption-Algorithm (1): AES-CBC (7)
                Key-Length (14): Key-Length (128)
                Hash-Algorithm (2): SHA (2)
                Group-Description (4): Alternate 1024-bit MODP group (2)
                Authentication-Method (3): PSK (1)
                Life-Type (11): Seconds (1)
                Life-Duration (12): Duration-Value (28800)
    Vendor ID: RFC 3706 Detecting Dead IKE Peers (DPD)
        Next payload: NONE (0)
        Payload length: 20
        Vendor ID: RFC 3706 Detecting Dead IKE Peers (DPD)

0000  00 24 b2 31 e1 3d 00 a0 8e 72 1e 40 08 00 45 00   .$.1.=...r.@..E.
0010  00 84 ee 40 00 00 40 11 4d 6c a5 e3 f9 6a a5 e3   ...@..@.Ml...j..
0020  f9 8a 01 f4 01 f4 00 70 92 f9 69 f4 c7 ed d9 c8   .......p..i.....
0030  bd 47 00 00 00 00 00 00 00 00 01 10 02 00 00 00   .G..............
0040  00 00 00 00 00 68 0d 00 00 38 00 00 00 01 00 00   .....h...8......
0050  00 01 00 00 00 2c 01 01 00 01 00 00 00 24 01 01   .....,.......$..
0060  00 00 80 01 00 07 80 0e 00 80 80 02 00 02 80 04   ................
0070  00 02 80 03 00 01 80 0b 00 01 80 0c 70 80 00 00   ............p...
0080  00 14 af ca d7 13 68 a1 f1 c9 6b 86 96 fc 77 57   ......h...k...wW
0090  01 00                                             ..

Frame 2 (166 bytes on wire, 166 bytes captured)
    Arrival Time: May 25, 2009 09:49:17.000140000
    [Time delta from previous captured frame: 0.156447000 seconds]
    [Time delta from previous displayed frame: 0.156447000 seconds]
    [Time since reference or first frame: 0.156447000 seconds]
    Frame Number: 2
    Frame Length: 166 bytes
    Capture Length: 166 bytes
    [Frame is marked: False]
    [Protocols in frame: eth:ip:udp:isakmp]
Ethernet II, Src: 00:24:b2:31:e1:3d (00:24:b2:31:e1:3d), Dst: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40)
    Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40)
        Address: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Source: 00:24:b2:31:e1:3d (00:24:b2:31:e1:3d)
        Address: 00:24:b2:31:e1:3d (00:24:b2:31:e1:3d)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.138 (165.227.249.138), Dst: 165.227.249.106 (165.227.249.106)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 152
    Identification: 0x0000 (0)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0xfb98 [correct]
        [Good: True]
        [Bad : False]
    Source: 165.227.249.138 (165.227.249.138)
    Destination: 165.227.249.106 (165.227.249.106)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 132
    Checksum: 0x39a9 [correct]
        [Good Checksum: True]
        [Bad Checksum: False]
Internet Security Association and Key Management Protocol
    Initiator cookie: 69F4C7EDD9C8BD47
    Responder cookie: 8134F5026223469F
    Next payload: Security Association (1)
    Version: 1.0
    Exchange type: Identity Protection (Main Mode) (2)
    Flags: 0x00
        .... ...0 = Not encrypted
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x00000000
    Length: 124
    Security Association payload
        Next payload: Vendor ID (13)
        Payload length: 56
        Domain of interpretation: IPSEC (1)
        Situation: IDENTITY (1)
        Proposal payload # 1
            Next payload: NONE (0)
            Payload length: 44
            Proposal number: 1
            Protocol ID: ISAKMP (1)
            SPI Size: 0
            Proposal transforms: 1
            Transform payload # 1
                Next payload: NONE (0)
                Payload length: 36
                Transform number: 1
                Transform ID: KEY_IKE (1)
                Encryption-Algorithm (1): AES-CBC (7)
                Key-Length (14): Key-Length (128)
                Hash-Algorithm (2): SHA (2)
                Group-Description (4): Alternate 1024-bit MODP group (2)
                Authentication-Method (3): PSK (1)
                Life-Type (11): Seconds (1)
                Life-Duration (12): Duration-Value (28800)
    Vendor ID: 3B9031DCE4FCF88B489A923963DD0C49
        Next payload: Vendor ID (13)
        Payload length: 20
        Vendor ID: 3B9031DCE4FCF88B489A923963DD0C49
    Vendor ID: 7003CBC1097DBE9C2600BA6983BC8B35
        Next payload: NONE (0)
        Payload length: 20
        Vendor ID: 7003CBC1097DBE9C2600BA6983BC8B35

0000  00 a0 8e 72 1e 40 00 24 b2 31 e1 3d 08 00 45 00   ...r.@.$.1.=..E.
0010  00 98 00 00 40 00 40 11 fb 98 a5 e3 f9 8a a5 e3   ....@.@.........
0020  f9 6a 01 f4 01 f4 00 84 39 a9 69 f4 c7 ed d9 c8   .j......9.i.....
0030  bd 47 81 34 f5 02 62 23 46 9f 01 10 02 00 00 00   .G.4..b#F.......
0040  00 00 00 00 00 7c 0d 00 00 38 00 00 00 01 00 00   .....|...8......
0050  00 01 00 00 00 2c 01 01 00 01 00 00 00 24 01 01   .....,.......$..
0060  00 00 80 01 00 07 80 0e 00 80 80 02 00 02 80 04   ................
0070  00 02 80 03 00 01 80 0b 00 01 80 0c 70 80 0d 00   ............p...
0080  00 14 3b 90 31 dc e4 fc f8 8b 48 9a 92 39 63 dd   ..;.1.....H..9c.
0090  0c 49 00 00 00 14 70 03 cb c1 09 7d be 9c 26 00   .I....p....}..&.
00a0  ba 69 83 bc 8b 35                                 .i...5

Frame 3 (258 bytes on wire, 258 bytes captured)
    Arrival Time: May 25, 2009 09:49:17.124638000
    [Time delta from previous captured frame: 0.124498000 seconds]
    [Time delta from previous displayed frame: 0.124498000 seconds]
    [Time since reference or first frame: 0.280945000 seconds]
    Frame Number: 3
    Frame Length: 258 bytes
    Capture Length: 258 bytes
    [Frame is marked: False]
    [Protocols in frame: eth:ip:udp:isakmp]
Ethernet II, Src: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40), Dst: 00:24:b2:31:e1:3d (00:24:b2:31:e1:3d)
    Destination: 00:24:b2:31:e1:3d (00:24:b2:31:e1:3d)
        Address: 00:24:b2:31:e1:3d (00:24:b2:31:e1:3d)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40)
        Address: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.106 (165.227.249.106), Dst: 165.227.249.138 (165.227.249.138)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 244
    Identification: 0xee41 (60993)
    Flags: 0x00
        0... = Reserved bit: Not set
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0x4cfb [correct]
        [Good: True]
        [Bad : False]
    Source: 165.227.249.106 (165.227.249.106)
    Destination: 165.227.249.138 (165.227.249.138)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 224
    Checksum: 0x0b6b [correct]
        [Good Checksum: True]
        [Bad Checksum: False]
Internet Security Association and Key Management Protocol
    Initiator cookie: 69F4C7EDD9C8BD47
    Responder cookie: 8134F5026223469F
    Next payload: Key Exchange (4)
    Version: 1.0
    Exchange type: Identity Protection (Main Mode) (2)
    Flags: 0x00
        .... ...0 = Not encrypted
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x00000000
    Length: 216
    Key Exchange payload
        Next payload: Nonce (10)
        Payload length: 132
        Key Exchange Data (128 bytes / 1024 bits)
    Nonce payload
        Next payload: Vendor ID (13)
        Payload length: 24
        Nonce Data
    Vendor ID: 030000146FC933FE4861A4E5DB555D7E2721193000000008...
        Next payload: NONE (0)
        Payload length: 32
        Vendor ID: 030000146FC933FE4861A4E5DB555D7E2721193000000008...

0000  00 24 b2 31 e1 3d 00 a0 8e 72 1e 40 08 00 45 00   .$.1.=...r.@..E.
0010  00 f4 ee 41 00 00 40 11 4c fb a5 e3 f9 6a a5 e3   ...A..@.L....j..
0020  f9 8a 01 f4 01 f4 00 e0 0b 6b 69 f4 c7 ed d9 c8   .........ki.....
0030  bd 47 81 34 f5 02 62 23 46 9f 04 10 02 00 00 00   .G.4..b#F.......
0040  00 00 00 00 00 d8 0a 00 00 84 0f 27 3f 1e 31 de   ...........'?.1.
0050  8d 21 01 fe 95 91 9d 8e e1 38 d7 be 46 e5 5e 7f   .!.......8..F.^.
0060  7d 27 14 69 da 60 e5 7f 72 7e 10 a8 50 dc 11 4b   }'.i.`..r~..P..K
0070  c8 13 2f 4e 77 03 4c df ee 30 08 e3 a0 c0 d4 e1   ../Nw.L..0......
0080  e2 72 b8 a8 8d 3e 34 82 9b 85 b9 7d 09 6d 6b 4d   .r...>4....}.mkM
0090  68 e8 a2 3e 62 30 40 93 24 41 58 dd ed 5b 4e f5   h..>b0@.$AX..[N.
00a0  1c 7e 9b df 18 54 5a 40 63 65 7d 01 c6 d7 ca fd   .~...TZ@ce}.....
00b0  a5 76 cb a5 bf c4 76 2d 40 b6 2d 71 4b ca 76 86   .v....v-@.-qK.v.
00c0  df 66 1d de d4 a2 cc 5f ca 35 0d 00 00 18 66 88   .f....._.5....f.
00d0  79 d7 5d d0 ad 72 4a 6d ef cf 9f 17 ea b5 ed 31   y.]..rJm.......1
00e0  94 b3 00 00 00 20 03 00 00 14 6f c9 33 fe 48 61   ..... ....o.3.Ha
00f0  a4 e5 db 55 5d 7e 27 21 19 30 00 00 00 08 00 06   ...U]~'!.0......
0100  00 03                                             ..

Frame 4 (242 bytes on wire, 242 bytes captured)
    Arrival Time: May 25, 2009 09:49:17.474583000
    [Time delta from previous captured frame: 0.349945000 seconds]
    [Time delta from previous displayed frame: 0.349945000 seconds]
    [Time since reference or first frame: 0.630890000 seconds]
    Frame Number: 4
    Frame Length: 242 bytes
    Capture Length: 242 bytes
    [Frame is marked: False]
    [Protocols in frame: eth:ip:udp:isakmp]
Ethernet II, Src: 00:24:b2:31:e1:3d (00:24:b2:31:e1:3d), Dst: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40)
    Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40)
        Address: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Source: 00:24:b2:31:e1:3d (00:24:b2:31:e1:3d)
        Address: 00:24:b2:31:e1:3d (00:24:b2:31:e1:3d)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.138 (165.227.249.138), Dst: 165.227.249.106 (165.227.249.106)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 228
    Identification: 0x0000 (0)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0xfb4c [correct]
        [Good: True]
        [Bad : False]
    Source: 165.227.249.138 (165.227.249.138)
    Destination: 165.227.249.106 (165.227.249.106)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 208
    Checksum: 0xc4fe [correct]
        [Good Checksum: True]
        [Bad Checksum: False]
Internet Security Association and Key Management Protocol
    Initiator cookie: 69F4C7EDD9C8BD47
    Responder cookie: 8134F5026223469F
    Next payload: Key Exchange (4)
    Version: 1.0
    Exchange type: Identity Protection (Main Mode) (2)
    Flags: 0x00
        .... ...0 = Not encrypted
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x00000000
    Length: 200
    Key Exchange payload
        Next payload: Nonce (10)
        Payload length: 132
        Key Exchange Data (128 bytes / 1024 bits)
    Nonce payload
        Next payload: Vendor ID (13)
        Payload length: 20
        Nonce Data
    Vendor ID: 7003CBC1097DBE9C2600BA6983BC8B35
        Next payload: NONE (0)
        Payload length: 20
        Vendor ID: 7003CBC1097DBE9C2600BA6983BC8B35

0000  00 a0 8e 72 1e 40 00 24 b2 31 e1 3d 08 00 45 00   ...r.@.$.1.=..E.
0010  00 e4 00 00 40 00 40 11 fb 4c a5 e3 f9 8a a5 e3   ....@.@..L......
0020  f9 6a 01 f4 01 f4 00 d0 c4 fe 69 f4 c7 ed d9 c8   .j........i.....
0030  bd 47 81 34 f5 02 62 23 46 9f 04 10 02 00 00 00   .G.4..b#F.......
0040  00 00 00 00 00 c8 0a 00 00 84 fb c2 bb 83 a2 0f   ................
0050  4b 52 1a 52 7d f0 76 a6 12 5a 20 55 fe 9f a3 bb   KR.R}.v..Z U....
0060  ad 95 c0 c0 e8 69 1b 0e 22 0e 5d a5 80 67 c3 5b   .....i..".]..g.[
0070  90 c5 29 67 d8 65 cf 41 e6 e2 08 9d cd 48 33 19   ..)g.e.A.....H3.
0080  3c a2 2f 3e 01 d0 5f d5 98 90 1a 48 bb 50 0d d4   <./>.._....H.P..
0090  3a 2e 8c dc cb 85 d3 31 8b 7d 57 43 6f 7f 92 d8   :......1.}WCo...
00a0  30 eb 73 1d 2a b5 d2 09 38 42 45 c5 85 ff 03 09   0.s.*...8BE.....
00b0  4e b1 75 6a 4f cb dd 1c 4c 89 f1 c3 55 44 94 fc   N.ujO...L...UD..
00c0  5b 74 78 ad 84 a4 90 43 8c bc 0d 00 00 14 c5 e6   [tx....C........
00d0  4d 27 b1 9c d0 ab a1 f7 3a fb 8e 2c 21 62 00 00   M'......:..,!b..
00e0  00 14 70 03 cb c1 09 7d be 9c 26 00 ba 69 83 bc   ..p....}..&..i..
00f0  8b 35                                             .5

Frame 5 (134 bytes on wire, 134 bytes captured)
    Arrival Time: May 25, 2009 09:49:17.627098000
    [Time delta from previous captured frame: 0.152515000 seconds]
    [Time delta from previous displayed frame: 0.152515000 seconds]
    [Time since reference or first frame: 0.783405000 seconds]
    Frame Number: 5
    Frame Length: 134 bytes
    Capture Length: 134 bytes
    [Frame is marked: False]
    [Protocols in frame: eth:ip:udp:isakmp]
Ethernet II, Src: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40), Dst: 00:24:b2:31:e1:3d (00:24:b2:31:e1:3d)
    Destination: 00:24:b2:31:e1:3d (00:24:b2:31:e1:3d)
        Address: 00:24:b2:31:e1:3d (00:24:b2:31:e1:3d)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40)
        Address: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.106 (165.227.249.106), Dst: 165.227.249.138 (165.227.249.138)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 120
    Identification: 0xee42 (60994)
    Flags: 0x00
        0... = Reserved bit: Not set
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0x4d76 [correct]
        [Good: True]
        [Bad : False]
    Source: 165.227.249.106 (165.227.249.106)
    Destination: 165.227.249.138 (165.227.249.138)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 100
    Checksum: 0x15cc [correct]
        [Good Checksum: True]
        [Bad Checksum: False]
Internet Security Association and Key Management Protocol
    Initiator cookie: 69F4C7EDD9C8BD47
    Responder cookie: 8134F5026223469F
    Next payload: Identification (5)
    Version: 1.0
    Exchange type: Identity Protection (Main Mode) (2)
    Flags: 0x01
        .... ...1 = Encrypted
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x00000000
    Length: 92
    Encrypted payload (64 bytes)

0000  00 24 b2 31 e1 3d 00 a0 8e 72 1e 40 08 00 45 00   .$.1.=...r.@..E.
0010  00 78 ee 42 00 00 40 11 4d 76 a5 e3 f9 6a a5 e3   .x.B..@.Mv...j..
0020  f9 8a 01 f4 01 f4 00 64 15 cc 69 f4 c7 ed d9 c8   .......d..i.....
0030  bd 47 81 34 f5 02 62 23 46 9f 05 10 02 01 00 00   .G.4..b#F.......
0040  00 00 00 00 00 5c a9 df 65 9a 31 bd 7b c7 6a 23   .....\..e.1.{.j#
0050  d5 ed d2 38 29 e6 4a ee c2 10 27 65 f3 d6 22 82   ...8).J...'e..".
0060  dd 8a 6f 16 3c d0 92 cb 7b f9 3e 18 37 8f 3c 68   ..o.<...{.>.7.<h
0070  3d 7e 2d 0d 32 b5 24 2b cb 69 15 42 4f 59 d4 a9   =~-.2.$+.i.BOY..
0080  56 1a 09 4f 03 a5                                 V..O..

Frame 6 (118 bytes on wire, 118 bytes captured)
    Arrival Time: May 25, 2009 09:49:18.025321000
    [Time delta from previous captured frame: 0.398223000 seconds]
    [Time delta from previous displayed frame: 0.398223000 seconds]
    [Time since reference or first frame: 1.181628000 seconds]
    Frame Number: 6
    Frame Length: 118 bytes
    Capture Length: 118 bytes
    [Frame is marked: False]
    [Protocols in frame: eth:ip:udp:isakmp]
Ethernet II, Src: 00:24:b2:31:e1:3d (00:24:b2:31:e1:3d), Dst: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40)
    Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40)
        Address: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Source: 00:24:b2:31:e1:3d (00:24:b2:31:e1:3d)
        Address: 00:24:b2:31:e1:3d (00:24:b2:31:e1:3d)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.138 (165.227.249.138), Dst: 165.227.249.106 (165.227.249.106)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 104
    Identification: 0x0000 (0)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0xfbc8 [correct]
        [Good: True]
        [Bad : False]
    Source: 165.227.249.138 (165.227.249.138)
    Destination: 165.227.249.106 (165.227.249.106)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 84
    Checksum: 0xbc8e [correct]
        [Good Checksum: True]
        [Bad Checksum: False]
Internet Security Association and Key Management Protocol
    Initiator cookie: 69F4C7EDD9C8BD47
    Responder cookie: 8134F5026223469F
    Next payload: Identification (5)
    Version: 1.0
    Exchange type: Identity Protection (Main Mode) (2)
    Flags: 0x01
        .... ...1 = Encrypted
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x00000000
    Length: 76
    Encrypted payload (48 bytes)

0000  00 a0 8e 72 1e 40 00 24 b2 31 e1 3d 08 00 45 00   ...r.@.$.1.=..E.
0010  00 68 00 00 40 00 40 11 fb c8 a5 e3 f9 8a a5 e3   .h..@.@.........
0020  f9 6a 01 f4 01 f4 00 54 bc 8e 69 f4 c7 ed d9 c8   .j.....T..i.....
0030  bd 47 81 34 f5 02 62 23 46 9f 05 10 02 01 00 00   .G.4..b#F.......
0040  00 00 00 00 00 4c 31 99 40 aa ea c1 5c 79 99 df   .....L1.@...\y..
0050  73 60 93 90 86 ad 39 3b 43 fa a3 ad df 42 f7 58   s`....9;C....B.X
0060  20 6f 38 43 d9 c5 22 70 e9 c6 e9 2a ee 47 f4 40    o8C.."p...*.G.@
0070  0c 14 1a f9 06 dd                                 ......

Frame 7 (134 bytes on wire, 134 bytes captured)
    Arrival Time: May 25, 2009 09:49:18.102153000
    [Time delta from previous captured frame: 0.076832000 seconds]
    [Time delta from previous displayed frame: 0.076832000 seconds]
    [Time since reference or first frame: 1.258460000 seconds]
    Frame Number: 7
    Frame Length: 134 bytes
    Capture Length: 134 bytes
    [Frame is marked: False]
    [Protocols in frame: eth:ip:udp:isakmp]
Ethernet II, Src: 00:24:b2:31:e1:3d (00:24:b2:31:e1:3d), Dst: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40)
    Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40)
        Address: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Source: 00:24:b2:31:e1:3d (00:24:b2:31:e1:3d)
        Address: 00:24:b2:31:e1:3d (00:24:b2:31:e1:3d)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.138 (165.227.249.138), Dst: 165.227.249.106 (165.227.249.106)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 120
    Identification: 0x0000 (0)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0xfbb8 [correct]
        [Good: True]
        [Bad : False]
    Source: 165.227.249.138 (165.227.249.138)
    Destination: 165.227.249.106 (165.227.249.106)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 100
    Checksum: 0xc32d [correct]
        [Good Checksum: True]
        [Bad Checksum: False]
Internet Security Association and Key Management Protocol
    Initiator cookie: 69F4C7EDD9C8BD47
    Responder cookie: 8134F5026223469F
    Next payload: Hash (8)
    Version: 1.0
    Exchange type: Informational (5)
    Flags: 0x01
        .... ...1 = Encrypted
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x8acff9a3
    Length: 92
    Encrypted payload (64 bytes)

0000  00 a0 8e 72 1e 40 00 24 b2 31 e1 3d 08 00 45 00   ...r.@.$.1.=..E.
0010  00 78 00 00 40 00 40 11 fb b8 a5 e3 f9 8a a5 e3   .x..@.@.........
0020  f9 6a 01 f4 01 f4 00 64 c3 2d 69 f4 c7 ed d9 c8   .j.....d.-i.....
0030  bd 47 81 34 f5 02 62 23 46 9f 08 10 05 01 8a cf   .G.4..b#F.......
0040  f9 a3 00 00 00 5c de ae 30 9a 3d 43 b4 f3 08 e9   .....\..0.=C....
0050  ea a4 47 fc a6 50 6b 70 ec 87 b9 8f 04 6a c0 40   ..G..Pkp.....j.@
0060  8a 1c 53 29 43 c6 16 a0 b9 23 4c 27 0c c6 b6 86   ..S)C....#L'....
0070  be ff 69 35 94 09 06 40 90 30 61 0c a8 83 cb a9   ..i5...@.0a.....
0080  06 fa 2d d3 68 fe                                 ..-.h.

Frame 8 (342 bytes on wire, 342 bytes captured)
    Arrival Time: May 25, 2009 09:49:18.152182000
    [Time delta from previous captured frame: 0.050029000 seconds]
    [Time delta from previous displayed frame: 0.050029000 seconds]
    [Time since reference or first frame: 1.308489000 seconds]
    Frame Number: 8
    Frame Length: 342 bytes
    Capture Length: 342 bytes
    [Frame is marked: False]
    [Protocols in frame: eth:ip:udp:isakmp]
Ethernet II, Src: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40), Dst: 00:24:b2:31:e1:3d (00:24:b2:31:e1:3d)
    Destination: 00:24:b2:31:e1:3d (00:24:b2:31:e1:3d)
        Address: 00:24:b2:31:e1:3d (00:24:b2:31:e1:3d)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40)
        Address: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.106 (165.227.249.106), Dst: 165.227.249.138 (165.227.249.138)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 328
    Identification: 0xee43 (60995)
    Flags: 0x00
        0... = Reserved bit: Not set
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0x4ca5 [correct]
        [Good: True]
        [Bad : False]
    Source: 165.227.249.106 (165.227.249.106)
    Destination: 165.227.249.138 (165.227.249.138)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 308
    Checksum: 0x86df [correct]
        [Good Checksum: True]
        [Bad Checksum: False]
Internet Security Association and Key Management Protocol
    Initiator cookie: 69F4C7EDD9C8BD47
    Responder cookie: 8134F5026223469F
    Next payload: Hash (8)
    Version: 1.0
    Exchange type: Quick Mode (32)
    Flags: 0x01
        .... ...1 = Encrypted
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x2ff9133b
    Length: 300
    Encrypted payload (272 bytes)

0000  00 24 b2 31 e1 3d 00 a0 8e 72 1e 40 08 00 45 00   .$.1.=...r.@..E.
0010  01 48 ee 43 00 00 40 11 4c a5 a5 e3 f9 6a a5 e3   .H.C..@.L....j..
0020  f9 8a 01 f4 01 f4 01 34 86 df 69 f4 c7 ed d9 c8   .......4..i.....
0030  bd 47 81 34 f5 02 62 23 46 9f 08 10 20 01 2f f9   .G.4..b#F... ./.
0040  13 3b 00 00 01 2c 6b b5 44 e2 ea bb 4c 46 64 8d   .;...,k.D...LFd.
0050  75 2f 6b 08 15 35 ab f5 b0 a9 be f3 f3 c8 56 13   u/k..5........V.
0060  ba 32 9c 6d 01 cf ff e7 cd c9 ea bf 76 77 4e 1a   .2.m........vwN.
0070  ea e9 8a 7b 70 75 cc fc 98 3c 07 78 67 41 c6 24   ...{pu...<.xgA.$
0080  10 52 db 6f 12 d0 09 36 34 a0 0f df 02 e6 7f 47   .R.o...64......G
0090  28 03 95 f9 5a 5a e9 48 e8 96 6e 2b 7b 0a 68 97   (...ZZ.H..n+{.h.
00a0  9a a3 46 5b 54 7c 0b a7 ec 30 48 4b eb 52 54 cd   ..F[T|...0HK.RT.
00b0  8d 51 40 d3 21 b6 f9 47 b0 1f 17 64 b3 d5 1e 3b   .Q@.!..G...d...;
00c0  61 2b c9 86 ba 9a 70 bb 32 c6 eb e3 90 74 0c 40   a+....p.2....t.@
00d0  2e f3 70 c6 2a d1 00 26 62 72 dd d0 d7 fd d3 9b   ..p.*..&br......
00e0  e0 50 d4 08 f2 2d ec 60 e2 b8 18 06 55 5d 27 d9   .P...-.`....U]'.
00f0  f5 32 e2 30 b0 7b d6 0c 5e e2 08 94 fb 2a 38 a9   .2.0.{..^....*8.
0100  fb f6 e7 d6 c9 51 c3 f5 66 54 c5 75 6d 04 e9 50   .....Q..fT.um..P
0110  32 4e 36 a6 28 b1 7f 99 75 11 42 e2 c7 80 02 98   2N6.(...u.B.....
0120  88 00 52 65 d2 0c d6 ae e8 a5 f1 95 ee 4f 98 6e   ..Re.........O.n
0130  d0 d0 05 19 5d 8b 1b 13 2e 84 19 ae 50 32 94 f2   ....].......P2..
0140  d8 4f 23 81 5a db 74 78 98 16 47 f2 da 81 41 83   .O#.Z.tx..G...A.
0150  de 4b ad 12 9b 34                                 .K...4

Frame 9 (342 bytes on wire, 342 bytes captured)
    Arrival Time: May 25, 2009 09:49:18.886154000
    [Time delta from previous captured frame: 0.733972000 seconds]
    [Time delta from previous displayed frame: 0.733972000 seconds]
    [Time since reference or first frame: 2.042461000 seconds]
    Frame Number: 9
    Frame Length: 342 bytes
    Capture Length: 342 bytes
    [Frame is marked: False]
    [Protocols in frame: eth:ip:udp:isakmp]
Ethernet II, Src: 00:24:b2:31:e1:3d (00:24:b2:31:e1:3d), Dst: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40)
    Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40)
        Address: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Source: 00:24:b2:31:e1:3d (00:24:b2:31:e1:3d)
        Address: 00:24:b2:31:e1:3d (00:24:b2:31:e1:3d)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.138 (165.227.249.138), Dst: 165.227.249.106 (165.227.249.106)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 328
    Identification: 0x0000 (0)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0xfae8 [correct]
        [Good: True]
        [Bad : False]
    Source: 165.227.249.138 (165.227.249.138)
    Destination: 165.227.249.106 (165.227.249.106)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 308
    Checksum: 0x2bbf [correct]
        [Good Checksum: True]
        [Bad Checksum: False]
Internet Security Association and Key Management Protocol
    Initiator cookie: 69F4C7EDD9C8BD47
    Responder cookie: 8134F5026223469F
    Next payload: Hash (8)
    Version: 1.0
    Exchange type: Quick Mode (32)
    Flags: 0x01
        .... ...1 = Encrypted
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x2ff9133b
    Length: 300
    Encrypted payload (272 bytes)

0000  00 a0 8e 72 1e 40 00 24 b2 31 e1 3d 08 00 45 00   ...r.@.$.1.=..E.
0010  01 48 00 00 40 00 40 11 fa e8 a5 e3 f9 8a a5 e3   .H..@.@.........
0020  f9 6a 01 f4 01 f4 01 34 2b bf 69 f4 c7 ed d9 c8   .j.....4+.i.....
0030  bd 47 81 34 f5 02 62 23 46 9f 08 10 20 01 2f f9   .G.4..b#F... ./.
0040  13 3b 00 00 01 2c bc 17 a8 28 2a cf 0f 37 b5 89   .;...,...(*..7..
0050  59 73 7e 47 d1 8b fc 26 ed d4 28 34 b9 52 a6 b8   Ys~G...&..(4.R..
0060  ee a0 e3 16 e5 a8 67 bc 97 ef b0 6d a0 a5 a6 68   ......g....m...h
0070  7d 97 3b 80 9c c2 86 46 a3 d6 78 32 1f 29 cd eb   }.;....F..x2.)..
0080  e3 b9 e0 e6 6b ee 15 12 6a 8c 79 63 41 eb 8c 4e   ....k...j.ycA..N
0090  10 35 a1 cb 31 85 7c 31 f6 38 a5 77 4b a6 29 f1   .5..1.|1.8.wK.).
00a0  f8 ef f3 1d d2 3a df 3f 2b 39 6c ee 72 34 4d 7e   .....:.?+9l.r4M~
00b0  2d 83 33 2f fb c1 be 70 9d d2 db 51 7e eb bb 76   -.3/...p...Q~..v
00c0  44 5c a6 f2 7d fb cf 7c 04 b8 46 55 4e ef 80 67   D\..}..|..FUN..g
00d0  7a 81 6d b5 80 7c 6c bd 2d b1 59 68 a5 67 4d 27   z.m..|l.-.Yh.gM'
00e0  19 cd d0 07 e6 af 53 d4 ce 78 5b 88 3c 6d 71 8e   ......S..x[.<mq.
00f0  11 60 8d 80 67 72 92 64 d9 fd d0 82 e8 e8 86 90   .`..gr.d........
0100  5e 8e 8c 2f 1a cb a4 94 f1 8e bf e7 7f a9 8c 9c   ^../............
0110  9d f1 e3 85 b6 f6 d1 c1 5d 27 d5 8e 5e 12 6c 5a   ........]'..^.lZ
0120  42 60 14 74 af e6 63 d0 c4 80 1f b5 78 9d b1 c3   B`.t..c.....x...
0130  ff ad de f1 05 bf 6a 93 e6 b1 fb 49 24 d5 e7 79   ......j....I$..y
0140  ce 08 f5 98 f3 95 c6 7d ac 6f 92 3b cc c5 87 90   .......}.o.;....
0150  7f 05 39 23 cb 57                                 ..9#.W

Frame 10 (102 bytes on wire, 102 bytes captured)
    Arrival Time: May 25, 2009 09:49:19.047514000
    [Time delta from previous captured frame: 0.161360000 seconds]
    [Time delta from previous displayed frame: 0.161360000 seconds]
    [Time since reference or first frame: 2.203821000 seconds]
    Frame Number: 10
    Frame Length: 102 bytes
    Capture Length: 102 bytes
    [Frame is marked: False]
    [Protocols in frame: eth:ip:udp:isakmp]
Ethernet II, Src: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40), Dst: 00:24:b2:31:e1:3d (00:24:b2:31:e1:3d)
    Destination: 00:24:b2:31:e1:3d (00:24:b2:31:e1:3d)
        Address: 00:24:b2:31:e1:3d (00:24:b2:31:e1:3d)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40)
        Address: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.106 (165.227.249.106), Dst: 165.227.249.138 (165.227.249.138)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 88
    Identification: 0xee45 (60997)
    Flags: 0x00
        0... = Reserved bit: Not set
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0x4d93 [correct]
        [Good: True]
        [Bad : False]
    Source: 165.227.249.106 (165.227.249.106)
    Destination: 165.227.249.138 (165.227.249.138)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 68
    Checksum: 0x49a5 [correct]
        [Good Checksum: True]
        [Bad Checksum: False]
Internet Security Association and Key Management Protocol
    Initiator cookie: 69F4C7EDD9C8BD47
    Responder cookie: 8134F5026223469F
    Next payload: Hash (8)
    Version: 1.0
    Exchange type: Quick Mode (32)
    Flags: 0x01
        .... ...1 = Encrypted
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x2ff9133b
    Length: 60
    Encrypted payload (32 bytes)

0000  00 24 b2 31 e1 3d 00 a0 8e 72 1e 40 08 00 45 00   .$.1.=...r.@..E.
0010  00 58 ee 45 00 00 40 11 4d 93 a5 e3 f9 6a a5 e3   .X.E..@.M....j..
0020  f9 8a 01 f4 01 f4 00 44 49 a5 69 f4 c7 ed d9 c8   .......DI.i.....
0030  bd 47 81 34 f5 02 62 23 46 9f 08 10 20 01 2f f9   .G.4..b#F... ./.
0040  13 3b 00 00 00 3c a2 16 5f 46 fd 51 11 64 ad 86   .;...<.._F.Q.d..
0050  5b 4d f3 f0 2c 29 73 a4 44 65 f9 5d 8f 4e 9f db   [M..,)s.De.].N..
0060  8a fa 5a 6b 20 b5                                 ..Zk .

Frame 11 (134 bytes on wire, 134 bytes captured)
    Arrival Time: May 25, 2009 09:49:19.552281000
    [Time delta from previous captured frame: 0.504767000 seconds]
    [Time delta from previous displayed frame: 0.504767000 seconds]
    [Time since reference or first frame: 2.708588000 seconds]
    Frame Number: 11
    Frame Length: 134 bytes
    Capture Length: 134 bytes
    [Frame is marked: False]
    [Protocols in frame: eth:ip:esp]
Ethernet II, Src: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40), Dst: 00:24:b2:31:e1:3d (00:24:b2:31:e1:3d)
    Destination: 00:24:b2:31:e1:3d (00:24:b2:31:e1:3d)
        Address: 00:24:b2:31:e1:3d (00:24:b2:31:e1:3d)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40)
        Address: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.106 (165.227.249.106), Dst: 165.227.249.138 (165.227.249.138)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 120
    Identification: 0xee47 (60999)
    Flags: 0x00
        0... = Reserved bit: Not set
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: ESP (0x32)
    Header checksum: 0x4d50 [correct]
        [Good: True]
        [Bad : False]
    Source: 165.227.249.106 (165.227.249.106)
    Destination: 165.227.249.138 (165.227.249.138)
Encapsulating Security Payload
    ESP SPI: 0x02c5b335
    ESP Sequence: 1

0000  00 24 b2 31 e1 3d 00 a0 8e 72 1e 40 08 00 45 00   .$.1.=...r.@..E.
0010  00 78 ee 47 00 00 40 32 4d 50 a5 e3 f9 6a a5 e3   .x.G..@2MP...j..
0020  f9 8a 02 c5 b3 35 00 00 00 01 3c 88 b4 d7 33 18   .....5....<...3.
0030  ae 4d 19 5b 5b 70 11 23 d0 3c 56 16 42 06 ce fa   .M.[[p.#.<V.B...
0040  ed 66 bc 28 74 52 38 0d 0d d5 cd 83 0b 7f 62 03   .f.(tR8.......b.
0050  b8 23 53 23 ea 58 24 60 26 ea 99 f1 a4 53 ab bb   .#S#.X$`&....S..
0060  45 ad ae b6 f4 66 69 68 58 7b dd 25 b1 09 fe d6   E....fihX{.%....
0070  b7 5e 7a c6 c3 95 73 6e 8f 5f 26 5a d4 3f e6 1f   .^z...sn._&Z.?..
0080  dc dc ae ef 3c fa                                 ....<.

Frame 12 (134 bytes on wire, 134 bytes captured)
    Arrival Time: May 25, 2009 09:49:19.557299000
    [Time delta from previous captured frame: 0.005018000 seconds]
    [Time delta from previous displayed frame: 0.005018000 seconds]
    [Time since reference or first frame: 2.713606000 seconds]
    Frame Number: 12
    Frame Length: 134 bytes
    Capture Length: 134 bytes
    [Frame is marked: False]
    [Protocols in frame: eth:ip:esp]
Ethernet II, Src: 00:24:b2:31:e1:3d (00:24:b2:31:e1:3d), Dst: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40)
    Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40)
        Address: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Source: 00:24:b2:31:e1:3d (00:24:b2:31:e1:3d)
        Address: 00:24:b2:31:e1:3d (00:24:b2:31:e1:3d)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.138 (165.227.249.138), Dst: 165.227.249.106 (165.227.249.106)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 120
    Identification: 0x3c55 (15445)
    Flags: 0x00
        0... = Reserved bit: Not set
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: ESP (0x32)
    Header checksum: 0xff42 [correct]
        [Good: True]
        [Bad : False]
    Source: 165.227.249.138 (165.227.249.138)
    Destination: 165.227.249.106 (165.227.249.106)
Encapsulating Security Payload
    ESP SPI: 0x912ec000
    ESP Sequence: 1

0000  00 a0 8e 72 1e 40 00 24 b2 31 e1 3d 08 00 45 00   ...r.@.$.1.=..E.
0010  00 78 3c 55 00 00 40 32 ff 42 a5 e3 f9 8a a5 e3   .x<U..@2.B......
0020  f9 6a 91 2e c0 00 00 00 00 01 22 ba 79 ba 86 c1   .j........".y...
0030  6c c2 7c 57 ad de f3 6b 56 1c 55 14 8a 5d f6 c4   l.|W...kV.U..]..
0040  8c 73 35 4f d6 90 3d 1a 1d 48 cb 9c 54 25 a0 a4   .s5O..=..H..T%..
0050  4a 0c 52 24 c3 14 83 d1 a0 d7 02 6e 83 15 71 c6   J.R$.......n..q.
0060  c0 72 29 13 72 64 5f f1 9a ca bc 46 e1 81 fd 7c   .r).rd_....F...|
0070  b1 5c e8 35 f2 6b 5d a4 6f 02 6d 2e 5c de fa 2b   .\.5.k].o.m.\..+
0080  f2 fa 9f 76 de 2c                                 ...v.,

Frame 13 (134 bytes on wire, 134 bytes captured)
    Arrival Time: May 25, 2009 09:49:19.564161000
    [Time delta from previous captured frame: 0.006862000 seconds]
    [Time delta from previous displayed frame: 0.006862000 seconds]
    [Time since reference or first frame: 2.720468000 seconds]
    Frame Number: 13
    Frame Length: 134 bytes
    Capture Length: 134 bytes
    [Frame is marked: False]
    [Protocols in frame: eth:ip:esp]
Ethernet II, Src: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40), Dst: 00:24:b2:31:e1:3d (00:24:b2:31:e1:3d)
    Destination: 00:24:b2:31:e1:3d (00:24:b2:31:e1:3d)
        Address: 00:24:b2:31:e1:3d (00:24:b2:31:e1:3d)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40)
        Address: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.106 (165.227.249.106), Dst: 165.227.249.138 (165.227.249.138)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 120
    Identification: 0xee48 (61000)
    Flags: 0x00
        0... = Reserved bit: Not set
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: ESP (0x32)
    Header checksum: 0x4d4f [correct]
        [Good: True]
        [Bad : False]
    Source: 165.227.249.106 (165.227.249.106)
    Destination: 165.227.249.138 (165.227.249.138)
Encapsulating Security Payload
    ESP SPI: 0x02c5b335
    ESP Sequence: 2

0000  00 24 b2 31 e1 3d 00 a0 8e 72 1e 40 08 00 45 00   .$.1.=...r.@..E.
0010  00 78 ee 48 00 00 40 32 4d 4f a5 e3 f9 6a a5 e3   .x.H..@2MO...j..
0020  f9 8a 02 c5 b3 35 00 00 00 02 04 ae 50 48 50 18   .....5......PHP.
0030  a9 5e 03 17 83 67 c6 e0 b3 7c 72 1f b7 e6 a5 f7   .^...g...|r.....
0040  87 a1 ee 7d 14 7a fe 25 c0 cf c0 7b c3 9d 0c 78   ...}.z.%...{...x
0050  d6 f6 4c 77 c8 21 8f 92 45 de 55 3b 1b b0 9e 87   ..Lw.!..E.U;....
0060  10 2b f6 57 48 1d 83 55 11 3f cd 8e 30 40 0a 1e   .+.WH..U.?..0@..
0070  59 db 82 8a 01 af 7a 3f f0 8e 54 3e bf c7 3a a6   Y.....z?..T>..:.
0080  65 21 6e 80 5c 6d                                 e!n.\m

Frame 14 (134 bytes on wire, 134 bytes captured)
    Arrival Time: May 25, 2009 09:49:19.568479000
    [Time delta from previous captured frame: 0.004318000 seconds]
    [Time delta from previous displayed frame: 0.004318000 seconds]
    [Time since reference or first frame: 2.724786000 seconds]
    Frame Number: 14
    Frame Length: 134 bytes
    Capture Length: 134 bytes
    [Frame is marked: False]
    [Protocols in frame: eth:ip:esp]
Ethernet II, Src: 00:24:b2:31:e1:3d (00:24:b2:31:e1:3d), Dst: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40)
    Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40)
        Address: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Source: 00:24:b2:31:e1:3d (00:24:b2:31:e1:3d)
        Address: 00:24:b2:31:e1:3d (00:24:b2:31:e1:3d)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.138 (165.227.249.138), Dst: 165.227.249.106 (165.227.249.106)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 120
    Identification: 0x128c (4748)
    Flags: 0x00
        0... = Reserved bit: Not set
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: ESP (0x32)
    Header checksum: 0x290c [correct]
        [Good: True]
        [Bad : False]
    Source: 165.227.249.138 (165.227.249.138)
    Destination: 165.227.249.106 (165.227.249.106)
Encapsulating Security Payload
    ESP SPI: 0x912ec000
    ESP Sequence: 2

0000  00 a0 8e 72 1e 40 00 24 b2 31 e1 3d 08 00 45 00   ...r.@.$.1.=..E.
0010  00 78 12 8c 00 00 40 32 29 0c a5 e3 f9 8a a5 e3   .x....@2).......
0020  f9 6a 91 2e c0 00 00 00 00 02 7a e7 79 0b d6 b2   .j........z.y...
0030  49 d1 70 90 3a 8f 58 fb af 50 55 26 72 80 dd 90   I.p.:.X..PU&r...
0040  be 24 c1 56 07 09 ef 85 95 7c 14 6f 3d d9 23 65   .$.V.....|.o=.#e
0050  32 0c 8f 64 d5 06 8e d5 66 aa 72 6f a7 23 91 1d   2..d....f.ro.#..
0060  5c a7 5a 60 01 c9 57 14 39 e9 26 37 2a 62 13 0b   \.Z`..W.9.&7*b..
0070  75 8a 0f 1e ec a0 72 f3 d5 e9 bd 30 18 7d 4d cd   u.....r....0.}M.
0080  c1 f3 fe 16 12 84                                 ......

Frame 15 (134 bytes on wire, 134 bytes captured)
    Arrival Time: May 25, 2009 09:49:20.575985000
    [Time delta from previous captured frame: 1.007506000 seconds]
    [Time delta from previous displayed frame: 1.007506000 seconds]
    [Time since reference or first frame: 3.732292000 seconds]
    Frame Number: 15
    Frame Length: 134 bytes
    Capture Length: 134 bytes
    [Frame is marked: False]
    [Protocols in frame: eth:ip:esp]
Ethernet II, Src: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40), Dst: 00:24:b2:31:e1:3d (00:24:b2:31:e1:3d)
    Destination: 00:24:b2:31:e1:3d (00:24:b2:31:e1:3d)
        Address: 00:24:b2:31:e1:3d (00:24:b2:31:e1:3d)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40)
        Address: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.106 (165.227.249.106), Dst: 165.227.249.138 (165.227.249.138)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 120
    Identification: 0xee49 (61001)
    Flags: 0x00
        0... = Reserved bit: Not set
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: ESP (0x32)
    Header checksum: 0x4d4e [correct]
        [Good: True]
        [Bad : False]
    Source: 165.227.249.106 (165.227.249.106)
    Destination: 165.227.249.138 (165.227.249.138)
Encapsulating Security Payload
    ESP SPI: 0x02c5b335
    ESP Sequence: 3

0000  00 24 b2 31 e1 3d 00 a0 8e 72 1e 40 08 00 45 00   .$.1.=...r.@..E.
0010  00 78 ee 49 00 00 40 32 4d 4e a5 e3 f9 6a a5 e3   .x.I..@2MN...j..
0020  f9 8a 02 c5 b3 35 00 00 00 03 5d ff f4 5f 4f 04   .....5....].._O.
0030  b9 2f 3f 19 e5 30 ad d2 15 3d 19 54 c9 f9 d5 d4   ./?..0...=.T....
0040  24 bd df 63 b7 0b 62 cf 3c 41 75 c1 86 50 d0 ca   $..c..b.<Au..P..
0050  0e 23 75 2a 80 4b 2e 94 f4 1e f9 60 db 8a c9 76   .#u*.K.....`...v
0060  6d 0a 29 d6 e4 94 54 bc d6 f4 21 87 09 2d d0 77   m.)...T...!..-.w
0070  a3 16 6d a2 70 31 1e d3 39 88 a0 43 05 68 23 e1   ..m.p1..9..C.h#.
0080  ba 7a 7a a4 89 38                                 .zz..8

Frame 16 (134 bytes on wire, 134 bytes captured)
    Arrival Time: May 25, 2009 09:49:20.580238000
    [Time delta from previous captured frame: 0.004253000 seconds]
    [Time delta from previous displayed frame: 0.004253000 seconds]
    [Time since reference or first frame: 3.736545000 seconds]
    Frame Number: 16
    Frame Length: 134 bytes
    Capture Length: 134 bytes
    [Frame is marked: False]
    [Protocols in frame: eth:ip:esp]
Ethernet II, Src: 00:24:b2:31:e1:3d (00:24:b2:31:e1:3d), Dst: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40)
    Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40)
        Address: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Source: 00:24:b2:31:e1:3d (00:24:b2:31:e1:3d)
        Address: 00:24:b2:31:e1:3d (00:24:b2:31:e1:3d)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.138 (165.227.249.138), Dst: 165.227.249.106 (165.227.249.106)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 120
    Identification: 0xdbe2 (56290)
    Flags: 0x00
        0... = Reserved bit: Not set
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: ESP (0x32)
    Header checksum: 0x5fb5 [correct]
        [Good: True]
        [Bad : False]
    Source: 165.227.249.138 (165.227.249.138)
    Destination: 165.227.249.106 (165.227.249.106)
Encapsulating Security Payload
    ESP SPI: 0x912ec000
    ESP Sequence: 3

0000  00 a0 8e 72 1e 40 00 24 b2 31 e1 3d 08 00 45 00   ...r.@.$.1.=..E.
0010  00 78 db e2 00 00 40 32 5f b5 a5 e3 f9 8a a5 e3   .x....@2_.......
0020  f9 6a 91 2e c0 00 00 00 00 03 53 5a 87 2d 10 bd   .j........SZ.-..
0030  ab 8c bc a3 b1 13 d6 62 47 fb 00 b3 c8 ce 1b 59   .......bG......Y
0040  44 ad 33 70 b7 be 3b 26 03 b2 90 fb b8 04 13 3b   D.3p..;&.......;
0050  bf 9a f3 75 69 b1 04 d8 54 c2 06 22 96 4a 5c de   ...ui...T..".J\.
0060  31 d6 6f 21 32 02 d4 a6 59 9a 2a 4b 2b 14 ab 50   1.o!2...Y.*K+..P
0070  07 65 e5 f3 5d fe b5 f0 fb d7 75 6f cc 2f 2a f5   .e..].....uo./*.
0080  6f 41 b9 31 5e d3                                 oA.1^.