Frame 1 (126 bytes on wire, 126 bytes captured) Arrival Time: May 18, 2005 17:02:08.278919000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 126 bytes Capture Length: 126 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:d0:cf:03:6d:13 Destination: 00:d0:cf:03:6d:13 (00:d0:cf:03:6d:13) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0x1216ea15 (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.139 (165.227.249.139) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 108 Identification: 0xcc8c (52364) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x6f37 (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.139 (165.227.249.139) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 88 Checksum: 0x4c06 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x38358341612BDD5F Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 80 Security Association payload Next payload: NONE (0) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 40 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 32 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) 0000 00 d0 cf 03 6d 13 00 a0 8e 72 1e 40 08 00 45 00 ....m....r.@..E. 0010 00 6c cc 8c 00 00 40 11 6f 37 a5 e3 f9 6a a5 e3 .l....@.o7...j.. 0020 f9 8b 01 f4 01 f4 00 58 4c 06 38 35 83 41 61 2b .......XL.85.Aa+ 0030 dd 5f 00 00 00 00 00 00 00 00 01 10 02 00 00 00 ._.............. 0040 00 00 00 00 00 50 00 00 00 34 00 00 00 01 00 00 .....P...4...... 0050 00 01 00 00 00 28 01 01 00 01 00 00 00 20 01 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 04 00 02 80 03 ................ 0070 00 01 80 0b 00 01 80 0c 70 80 12 16 ea 15 ........p..... Frame 2 (146 bytes on wire, 146 bytes captured) Arrival Time: May 18, 2005 17:02:08.282846000 Time delta from previous packet: 0.003927000 seconds Time since reference or first frame: 0.003927000 seconds Frame Number: 2 Packet Length: 146 bytes Capture Length: 146 bytes Ethernet II, Src: 00:d0:cf:03:6d:13, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:d0:cf:03:6d:13 (00:d0:cf:03:6d:13) Type: IP (0x0800) Frame check sequence: 0xfade5aa2 (correct) Internet Protocol, Src Addr: 165.227.249.139 (165.227.249.139), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 128 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfbaf (correct) Source: 165.227.249.139 (165.227.249.139) Destination: 165.227.249.106 (165.227.249.106) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 108 Checksum: 0xf031 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x38358341612BDD5F Responder cookie: 0x3CDFE152F84CDBE0 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 100 Security Association payload Next payload: Vendor ID (13) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 40 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 32 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: draft-ietf-ipsec-dpd-00.txt 0000 00 a0 8e 72 1e 40 00 d0 cf 03 6d 13 08 00 45 00 ...r.@....m...E. 0010 00 80 00 00 40 00 40 11 fb af a5 e3 f9 8b a5 e3 ....@.@......... 0020 f9 6a 01 f4 01 f4 00 6c f0 31 38 35 83 41 61 2b .j.....l.185.Aa+ 0030 dd 5f 3c df e1 52 f8 4c db e0 01 10 02 00 00 00 ._<..R.L........ 0040 00 00 00 00 00 64 0d 00 00 34 00 00 00 01 00 00 .....d...4...... 0050 00 01 00 00 00 28 01 01 00 01 00 00 00 20 01 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 04 00 02 80 03 ................ 0070 00 01 80 0b 00 01 80 0c 70 80 00 00 00 14 af ca ........p....... 0080 d7 13 68 a1 f1 c9 6b 86 96 fc 77 57 01 00 fa de ..h...k...wW.... 0090 5a a2 Z. Frame 3 (262 bytes on wire, 262 bytes captured) Arrival Time: May 18, 2005 17:02:08.408540000 Time delta from previous packet: 0.125694000 seconds Time since reference or first frame: 0.129621000 seconds Frame Number: 3 Packet Length: 262 bytes Capture Length: 262 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:d0:cf:03:6d:13 Destination: 00:d0:cf:03:6d:13 (00:d0:cf:03:6d:13) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0x782ac4a5 (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.139 (165.227.249.139) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 244 Identification: 0xcc8d (52365) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x6eae (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.139 (165.227.249.139) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 224 Checksum: 0xc02c (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x38358341612BDD5F Responder cookie: 0x3CDFE152F84CDBE0 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 216 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: Vendor ID (13) Length: 24 Nonce Data Vendor ID payload Next payload: NONE (0) Length: 32 Vendor ID: unknown vendor ID: 0x030000143E087752F082C4FD66BE492E... 0000 00 d0 cf 03 6d 13 00 a0 8e 72 1e 40 08 00 45 00 ....m....r.@..E. 0010 00 f4 cc 8d 00 00 40 11 6e ae a5 e3 f9 6a a5 e3 ......@.n....j.. 0020 f9 8b 01 f4 01 f4 00 e0 c0 2c 38 35 83 41 61 2b .........,85.Aa+ 0030 dd 5f 3c df e1 52 f8 4c db e0 04 10 02 00 00 00 ._<..R.L........ 0040 00 00 00 00 00 d8 0a 00 00 84 f8 1f 7d ea c3 f0 ............}... 0050 cc dc 13 26 9e dc 7f 20 3d 70 07 c6 cc e6 7c 87 ...&... =p....|. 0060 5d 96 3b af 69 a4 64 ed 75 a4 5b e0 0f cb 2c aa ].;.i.d.u.[...,. 0070 ac c3 4c d8 88 36 82 4a 11 5f b8 1e 64 86 07 27 ..L..6.J._..d..' 0080 ec 98 72 50 63 d9 4b 4f 9f 90 28 e6 28 02 1b 28 ..rPc.KO..(.(..( 0090 54 a2 e1 f9 a3 04 df a0 16 76 87 1b 76 be ff e9 T........v..v... 00a0 f1 9b bf 88 e7 c3 15 8b 2e 71 79 3c 4c bb c5 53 .........qy.wR.. 00f0 c4 fd 66 be 49 2e bd 4e 84 4f 00 00 00 08 00 06 ..f.I..N.O...... 0100 00 02 78 2a c4 a5 ..x*.. Frame 4 (226 bytes on wire, 226 bytes captured) Arrival Time: May 18, 2005 17:02:08.691331000 Time delta from previous packet: 0.282791000 seconds Time since reference or first frame: 0.412412000 seconds Frame Number: 4 Packet Length: 226 bytes Capture Length: 226 bytes Ethernet II, Src: 00:d0:cf:03:6d:13, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:d0:cf:03:6d:13 (00:d0:cf:03:6d:13) Type: IP (0x0800) Frame check sequence: 0xbcf64478 (correct) Internet Protocol, Src Addr: 165.227.249.139 (165.227.249.139), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 208 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb5f (correct) Source: 165.227.249.139 (165.227.249.139) Destination: 165.227.249.106 (165.227.249.106) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 188 Checksum: 0x670e (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x38358341612BDD5F Responder cookie: 0x3CDFE152F84CDBE0 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 180 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 20 Nonce Data 0000 00 a0 8e 72 1e 40 00 d0 cf 03 6d 13 08 00 45 00 ...r.@....m...E. 0010 00 d0 00 00 40 00 40 11 fb 5f a5 e3 f9 8b a5 e3 ....@.@.._...... 0020 f9 6a 01 f4 01 f4 00 bc 67 0e 38 35 83 41 61 2b .j......g.85.Aa+ 0030 dd 5f 3c df e1 52 f8 4c db e0 04 10 02 00 00 00 ._<..R.L........ 0040 00 00 00 00 00 b4 0a 00 00 84 3a 62 06 0b 3e ce ..........:b..>. 0050 a4 d7 ac 2d 6a 8a da 1f f1 dc 9a cc 64 72 72 29 ...-j.......drr) 0060 1e 1f 48 7e f0 62 60 7f ba fa 98 dc 87 da 99 8b ..H~.b`......... 0070 0a d5 b8 18 9c bf db 0e cb 71 f1 75 c9 1c 99 75 .........q.u...u 0080 9d a6 c9 27 12 09 6b 13 8c b8 b2 2e 22 a5 73 7a ...'..k.....".sz 0090 e6 d3 64 82 ba 7b e5 54 4f 06 94 f2 03 f9 14 47 ..d..{.TO......G 00a0 4d bd 7d 0b 33 25 74 c6 b8 40 3a 39 9d dd ef a8 M.}.3%t..@:9.... 00b0 10 37 a3 78 ee 57 d5 50 67 11 1d 75 4f 40 d9 83 .7.x.W.Pg..uO@.. 00c0 ba ad 87 b0 8b d3 bc 05 6a 53 00 00 00 14 04 e1 ........jS...... 00d0 7d 52 61 3f 93 74 1e 2d e1 26 0c cc 28 a4 bc f6 }Ra?.t.-.&..(... 00e0 44 78 Dx Frame 5 (138 bytes on wire, 138 bytes captured) Arrival Time: May 18, 2005 17:02:08.842757000 Time delta from previous packet: 0.151426000 seconds Time since reference or first frame: 0.563838000 seconds Frame Number: 5 Packet Length: 138 bytes Capture Length: 138 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:d0:cf:03:6d:13 Destination: 00:d0:cf:03:6d:13 (00:d0:cf:03:6d:13) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0xf2fcdd87 (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.139 (165.227.249.139) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0xcc8e (52366) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x6f29 (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.139 (165.227.249.139) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 100 Checksum: 0xdb25 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x38358341612BDD5F Responder cookie: 0x3CDFE152F84CDBE0 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 92 Encrypted payload (64 bytes) 0000 00 d0 cf 03 6d 13 00 a0 8e 72 1e 40 08 00 45 00 ....m....r.@..E. 0010 00 78 cc 8e 00 00 40 11 6f 29 a5 e3 f9 6a a5 e3 .x....@.o)...j.. 0020 f9 8b 01 f4 01 f4 00 64 db 25 38 35 83 41 61 2b .......d.%85.Aa+ 0030 dd 5f 3c df e1 52 f8 4c db e0 05 10 02 01 00 00 ._<..R.L........ 0040 00 00 00 00 00 5c e0 22 6b ed de 17 49 47 c5 b7 .....\."k...IG.. 0050 8c 54 18 6c 62 00 a5 5c e4 1d 18 a4 54 8d 99 92 .T.lb..\....T... 0060 0a 96 a6 4b ab 34 7c d2 12 1e 4d 95 a5 12 27 96 ...K.4|...M...'. 0070 f0 1e 67 e3 a0 68 d2 08 80 f7 6d f9 83 44 83 32 ..g..h....m..D.2 0080 f7 2d 5e 7b 02 9b f2 fc dd 87 .-^{...... Frame 6 (114 bytes on wire, 114 bytes captured) Arrival Time: May 18, 2005 17:02:08.847748000 Time delta from previous packet: 0.004991000 seconds Time since reference or first frame: 0.568829000 seconds Frame Number: 6 Packet Length: 114 bytes Capture Length: 114 bytes Ethernet II, Src: 00:d0:cf:03:6d:13, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:d0:cf:03:6d:13 (00:d0:cf:03:6d:13) Type: IP (0x0800) Frame check sequence: 0x58aa50c6 (correct) Internet Protocol, Src Addr: 165.227.249.139 (165.227.249.139), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfbcf (correct) Source: 165.227.249.139 (165.227.249.139) Destination: 165.227.249.106 (165.227.249.106) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 76 Checksum: 0xbb6e (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x38358341612BDD5F Responder cookie: 0x3CDFE152F84CDBE0 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 68 Encrypted payload (40 bytes) 0000 00 a0 8e 72 1e 40 00 d0 cf 03 6d 13 08 00 45 00 ...r.@....m...E. 0010 00 60 00 00 40 00 40 11 fb cf a5 e3 f9 8b a5 e3 .`..@.@......... 0020 f9 6a 01 f4 01 f4 00 4c bb 6e 38 35 83 41 61 2b .j.....L.n85.Aa+ 0030 dd 5f 3c df e1 52 f8 4c db e0 05 10 02 01 00 00 ._<..R.L........ 0040 00 00 00 00 00 44 5f 17 dc d1 6f 4d f5 96 18 ef .....D_...oM.... 0050 ec 2e 28 4c a5 e0 12 32 12 ec 4f 77 6c 2f 04 07 ..(L...2..Owl/.. 0060 0f 6d 51 74 03 1d 24 2b 0e 1b 0c ac 11 b6 58 aa .mQt..$+......X. 0070 50 c6 P. Frame 7 (338 bytes on wire, 338 bytes captured) Arrival Time: May 18, 2005 17:02:08.974502000 Time delta from previous packet: 0.126754000 seconds Time since reference or first frame: 0.695583000 seconds Frame Number: 7 Packet Length: 338 bytes Capture Length: 338 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:d0:cf:03:6d:13 Destination: 00:d0:cf:03:6d:13 (00:d0:cf:03:6d:13) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0x0ba1d2f7 (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.139 (165.227.249.139) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 320 Identification: 0xcc8f (52367) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x6e60 (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.139 (165.227.249.139) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 300 Checksum: 0x04b8 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x38358341612BDD5F Responder cookie: 0x3CDFE152F84CDBE0 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x8EFF538E Length: 292 Encrypted payload (264 bytes) 0000 00 d0 cf 03 6d 13 00 a0 8e 72 1e 40 08 00 45 00 ....m....r.@..E. 0010 01 40 cc 8f 00 00 40 11 6e 60 a5 e3 f9 6a a5 e3 .@....@.n`...j.. 0020 f9 8b 01 f4 01 f4 01 2c 04 b8 38 35 83 41 61 2b .......,..85.Aa+ 0030 dd 5f 3c df e1 52 f8 4c db e0 08 10 20 01 8e ff ._<..R.L.... ... 0040 53 8e 00 00 01 24 87 af c2 f7 31 5a b1 6c f6 98 S....$....1Z.l.. 0050 df 27 a3 22 9e 9a b1 af 72 01 5c c7 0a 1a de 1f .'."....r.\..... 0060 60 a6 de 7f ce f1 9a db 73 d6 af e2 fc 4a bb e1 `.......s....J.. 0070 ea e0 e7 c9 18 0d 35 d3 37 8e 67 0b 42 8e b4 55 ......5.7.g.B..U 0080 90 9d 32 89 69 f6 95 99 01 78 1f 63 41 ec 64 05 ..2.i....x.cA.d. 0090 e3 0a 03 0e 29 22 1c 47 1e f2 fc 5d e3 15 34 ff ....)".G...]..4. 00a0 5b 5a 9f af dc 1c 3b 8d da 86 04 19 6f 9f 85 ab [Z....;.....o... 00b0 7a 35 05 35 da 4f 63 79 2f 6f 50 67 5f 7c 3a fc z5.5.Ocy/oPg_|:. 00c0 31 d0 34 f5 cc ef cd af f1 ca 24 0b 05 b5 62 2a 1.4.......$...b* 00d0 9a 26 ef 92 6e 3e 66 08 f5 e1 fd a1 ab 2b 23 b0 .&..n>f......+#. 00e0 4b f1 57 ed be e0 89 a0 b4 5b 63 cf 36 3f a5 3f K.W......[c.6?.? 00f0 90 23 48 7a 56 cb b8 69 97 ba cc ae f9 98 8f 55 .#HzV..i.......U 0100 7b 0c 1f 2f 4e 6f 7c 02 5e c0 b0 e4 72 a5 4d 46 {../No|.^...r.MF 0110 6f 00 d6 54 34 73 18 0e 7d f3 0c f3 61 b9 e1 1d o..T4s..}...a... 0120 da 2d 00 4b 7d 53 44 13 d5 e8 fa 80 e0 df 86 48 .-.K}SD........H 0130 d3 70 ef d7 31 28 47 b9 6a dc 34 46 ff 2e ed 64 .p..1(G.j.4F...d 0140 e9 96 f2 2e e3 78 07 f1 5f 8a 29 21 5b 56 0b a1 .....x.._.)![V.. 0150 d2 f7 .. Frame 8 (338 bytes on wire, 338 bytes captured) Arrival Time: May 18, 2005 17:02:09.269863000 Time delta from previous packet: 0.295361000 seconds Time since reference or first frame: 0.990944000 seconds Frame Number: 8 Packet Length: 338 bytes Capture Length: 338 bytes Ethernet II, Src: 00:d0:cf:03:6d:13, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:d0:cf:03:6d:13 (00:d0:cf:03:6d:13) Type: IP (0x0800) Frame check sequence: 0xe8dd84d7 (correct) Internet Protocol, Src Addr: 165.227.249.139 (165.227.249.139), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 320 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfaef (correct) Source: 165.227.249.139 (165.227.249.139) Destination: 165.227.249.106 (165.227.249.106) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 300 Checksum: 0xe811 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x38358341612BDD5F Responder cookie: 0x3CDFE152F84CDBE0 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x8EFF538E Length: 292 Encrypted payload (264 bytes) 0000 00 a0 8e 72 1e 40 00 d0 cf 03 6d 13 08 00 45 00 ...r.@....m...E. 0010 01 40 00 00 40 00 40 11 fa ef a5 e3 f9 8b a5 e3 .@..@.@......... 0020 f9 6a 01 f4 01 f4 01 2c e8 11 38 35 83 41 61 2b .j.....,..85.Aa+ 0030 dd 5f 3c df e1 52 f8 4c db e0 08 10 20 01 8e ff ._<..R.L.... ... 0040 53 8e 00 00 01 24 73 b6 68 88 49 bd ac f7 7c e7 S....$s.h.I...|. 0050 3d 7e c5 d4 3c 08 80 c0 30 73 11 80 4d 63 33 64 =~..<...0s..Mc3d 0060 98 f5 78 e8 3b 35 4f d5 a9 aa 47 5e cc 57 64 f1 ..x.;5O...G^.Wd. 0070 0a be 88 2a d8 bd 24 3d 3b 63 17 31 e9 f5 eb 5f ...*..$=;c.1..._ 0080 ed 46 03 a7 82 1c 0e 0b 18 b0 d0 bc ec cd 92 85 .F.............. 0090 4f 16 b3 e9 f1 0d ba dc d6 49 e6 6d 6f 4c 12 b7 O........I.moL.. 00a0 36 5d 30 4d 57 84 c8 79 be 01 e3 e6 df aa 84 fd 6]0MW..y........ 00b0 a1 6e 07 2a fc 4a 4d b2 1a 2c ce f6 7e f5 88 7b .n.*.JM..,..~..{ 00c0 88 73 1b 02 69 51 c4 f3 4c 96 0f 56 af 29 e4 b3 .s..iQ..L..V.).. 00d0 bf 11 bc 35 f7 5b 05 45 57 b2 18 a3 38 69 3d 33 ...5.[.EW...8i=3 00e0 47 e6 51 8f 7f ce 88 a3 81 18 6a 98 83 fe 4c e3 G.Q.......j...L. 00f0 e5 4d a0 07 29 fc 61 a4 52 21 cd a8 31 09 1d 40 .M..).a.R!..1..@ 0100 1b e0 fe bd 8d b5 99 e5 85 d2 83 17 95 16 f6 62 ...............b 0110 24 6a 6f d0 07 f4 93 48 8d 16 79 1f 41 74 33 8b $jo....H..y.At3. 0120 0c 9e 1e bb b1 27 aa ca b6 a8 57 52 af 39 cc 3e .....'....WR.9.> 0130 20 e2 c2 0a d0 77 b9 38 fa 39 01 25 54 73 41 01 ....w.8.9.%TsA. 0140 37 05 b6 ac 2a 61 91 2b ac de 83 48 e3 5d e8 dd 7...*a.+...H.].. 0150 84 d7 .. Frame 9 (98 bytes on wire, 98 bytes captured) Arrival Time: May 18, 2005 17:02:09.430131000 Time delta from previous packet: 0.160268000 seconds Time since reference or first frame: 1.151212000 seconds Frame Number: 9 Packet Length: 98 bytes Capture Length: 98 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:d0:cf:03:6d:13 Destination: 00:d0:cf:03:6d:13 (00:d0:cf:03:6d:13) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0x7f3c88a8 (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.139 (165.227.249.139) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 80 Identification: 0xcc90 (52368) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x6f4f (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.139 (165.227.249.139) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 60 Checksum: 0x6da2 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x38358341612BDD5F Responder cookie: 0x3CDFE152F84CDBE0 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x8EFF538E Length: 52 Encrypted payload (24 bytes) 0000 00 d0 cf 03 6d 13 00 a0 8e 72 1e 40 08 00 45 00 ....m....r.@..E. 0010 00 50 cc 90 00 00 40 11 6f 4f a5 e3 f9 6a a5 e3 .P....@.oO...j.. 0020 f9 8b 01 f4 01 f4 00 3c 6d a2 38 35 83 41 61 2b .......5....e..... 0080 aa 39 .9 Frame 12 (130 bytes on wire, 130 bytes captured) Arrival Time: May 18, 2005 17:02:09.941558000 Time delta from previous packet: 0.004608000 seconds Time since reference or first frame: 1.662639000 seconds Frame Number: 12 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:d0:cf:03:6d:13 Destination: 00:d0:cf:03:6d:13 (00:d0:cf:03:6d:13) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0xc384783b (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.139 (165.227.249.139) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0xcc92 (52370) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x6f0c (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.139 (165.227.249.139) Encapsulating Security Payload SPI: 0xd2e50940 Sequence: 2 Data (84 bytes) 0000 00 d0 cf 03 6d 13 00 a0 8e 72 1e 40 08 00 45 00 ....m....r.@..E. 0010 00 70 cc 92 00 00 40 32 6f 0c a5 e3 f9 6a a5 e3 .p....@2o....j.. 0020 f9 8b d2 e5 09 40 00 00 00 02 72 6e 1a 3d 7c d5 .....@....rn.=|. 0030 7c 1a bb 21 d2 4c a2 8b 95 9e e5 29 a8 b6 5a 38 |..!.L.....)..Z8 0040 50 3e 42 e3 eb c8 99 5e 2f 64 f9 83 6b c2 f5 44 P>B....^/d..k..D 0050 70 eb 36 48 84 64 36 ef a0 9a 92 bf dd e0 5c fa p.6H.d6.......\. 0060 00 d1 f4 7e e5 f8 e5 91 62 9b bb 6a a6 fe bb 74 ...~....b..j...t 0070 6d 86 55 ac a8 da e4 30 5e d1 d6 e2 e8 8b c3 84 m.U....0^....... 0080 78 3b x; Frame 13 (130 bytes on wire, 130 bytes captured) Arrival Time: May 18, 2005 17:02:09.943438000 Time delta from previous packet: 0.001880000 seconds Time since reference or first frame: 1.664519000 seconds Frame Number: 13 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:d0:cf:03:6d:13, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:d0:cf:03:6d:13 (00:d0:cf:03:6d:13) Type: IP (0x0800) Frame check sequence: 0x08480c43 (correct) Internet Protocol, Src Addr: 165.227.249.139 (165.227.249.139), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0xf96b (63851) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x4233 (correct) Source: 165.227.249.139 (165.227.249.139) Destination: 165.227.249.106 (165.227.249.106) Encapsulating Security Payload SPI: 0x8c39bc01 Sequence: 2 Data (84 bytes) 0000 00 a0 8e 72 1e 40 00 d0 cf 03 6d 13 08 00 45 00 ...r.@....m...E. 0010 00 70 f9 6b 00 00 40 32 42 33 a5 e3 f9 8b a5 e3 .p.k..@2B3...... 0020 f9 6a 8c 39 bc 01 00 00 00 02 c7 9f 83 00 60 f7 .j.9..........`. 0030 fb eb 2a c0 18 03 3f 57 b2 20 d4 88 ce 1e f7 de ..*...?W. ...... 0040 75 5d d1 a4 0f 8e 49 3c 1d 28 7b 2c fe fa a2 6b u]....I<.({,...k 0050 16 3c ae 3f f5 ea d6 38 67 b0 b4 8b bc f7 5e 48 .<.?...8g.....^H 0060 93 a7 2b 6a b0 8d df 44 64 83 ff 07 4c 64 89 c8 ..+j...Dd...Ld.. 0070 1c 0f 82 ce 0a ab 97 67 a6 8d 62 4e 44 b9 08 48 .......g..bND..H 0080 0c 43 .C Frame 14 (130 bytes on wire, 130 bytes captured) Arrival Time: May 18, 2005 17:02:10.946007000 Time delta from previous packet: 1.002569000 seconds Time since reference or first frame: 2.667088000 seconds Frame Number: 14 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:d0:cf:03:6d:13 Destination: 00:d0:cf:03:6d:13 (00:d0:cf:03:6d:13) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0xb7182586 (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.139 (165.227.249.139) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0xcc93 (52371) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x6f0b (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.139 (165.227.249.139) Encapsulating Security Payload SPI: 0xd2e50940 Sequence: 3 Data (84 bytes) 0000 00 d0 cf 03 6d 13 00 a0 8e 72 1e 40 08 00 45 00 ....m....r.@..E. 0010 00 70 cc 93 00 00 40 32 6f 0b a5 e3 f9 6a a5 e3 .p....@2o....j.. 0020 f9 8b d2 e5 09 40 00 00 00 03 2c 69 e9 11 de 71 .....@....,i...q 0030 44 5d 42 00 bd d1 b4 15 b7 bc 11 bd e9 76 c8 16 D]B..........v.. 0040 10 bc 1c fd 0b d4 a6 80 00 86 67 e6 8f 5a af 56 ..........g..Z.V 0050 18 1f b4 20 8c cc 0e cd 99 82 20 8f 77 53 df 1a ... ...... .wS.. 0060 1a 1c f8 a5 6f 8a 0b 2e 95 6f 3c 5f aa e8 9a 01 ....o....o<_.... 0070 dc 33 5d 79 ad 14 12 22 bc 43 d4 99 fb 3d b7 18 .3]y...".C...=.. 0080 25 86 %. Frame 15 (130 bytes on wire, 130 bytes captured) Arrival Time: May 18, 2005 17:02:10.949424000 Time delta from previous packet: 0.003417000 seconds Time since reference or first frame: 2.670505000 seconds Frame Number: 15 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:d0:cf:03:6d:13, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:d0:cf:03:6d:13 (00:d0:cf:03:6d:13) Type: IP (0x0800) Frame check sequence: 0x323d8667 (correct) Internet Protocol, Src Addr: 165.227.249.139 (165.227.249.139), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0xf96c (63852) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x4232 (correct) Source: 165.227.249.139 (165.227.249.139) Destination: 165.227.249.106 (165.227.249.106) Encapsulating Security Payload SPI: 0x8c39bc01 Sequence: 3 Data (84 bytes) 0000 00 a0 8e 72 1e 40 00 d0 cf 03 6d 13 08 00 45 00 ...r.@....m...E. 0010 00 70 f9 6c 00 00 40 32 42 32 a5 e3 f9 8b a5 e3 .p.l..@2B2...... 0020 f9 6a 8c 39 bc 01 00 00 00 03 ff 07 4c 64 89 c8 .j.9........Ld.. 0030 1c 0f 40 bc 2d 06 4b ba 28 ac ec 7d 6c 3a 01 47 ..@.-.K.(..}l:.G 0040 c5 11 61 95 67 aa 29 08 0f 67 27 d8 67 76 63 0f ..a.g.)..g'.gvc. 0050 21 cb b1 c7 7b c7 c3 10 f7 59 c6 8e 6c ba 01 13 !...{....Y..l... 0060 e0 83 3f 3c ee f4 88 2f 35 2a 79 c8 cc f3 ac a6 ..?<.../5*y..... 0070 b9 60 78 18 38 4e 24 c9 cc 89 f5 38 96 04 32 3d .`x.8N$....8..2= 0080 86 67 .g Frame 16 (130 bytes on wire, 130 bytes captured) Arrival Time: May 18, 2005 17:02:11.946052000 Time delta from previous packet: 0.996628000 seconds Time since reference or first frame: 3.667133000 seconds Frame Number: 16 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:d0:cf:03:6d:13 Destination: 00:d0:cf:03:6d:13 (00:d0:cf:03:6d:13) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0xef3cc10d (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.139 (165.227.249.139) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0xcc94 (52372) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x6f0a (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.139 (165.227.249.139) Encapsulating Security Payload SPI: 0xd2e50940 Sequence: 4 Data (84 bytes) 0000 00 d0 cf 03 6d 13 00 a0 8e 72 1e 40 08 00 45 00 ....m....r.@..E. 0010 00 70 cc 94 00 00 40 32 6f 0a a5 e3 f9 6a a5 e3 .p....@2o....j.. 0020 f9 8b d2 e5 09 40 00 00 00 04 1a a2 79 68 81 a8 .....@......yh.. 0030 d0 20 e1 b9 ea 61 0e a9 75 a8 c7 9a bd e4 4f f6 . ...a..u.....O. 0040 be 7a 76 f5 1e b1 29 0c d5 01 fc c6 98 28 6b e1 .zv...)......(k. 0050 13 cc fe 1c 34 91 06 e2 ef 67 c2 aa 59 37 f4 7e ....4....g..Y7.~ 0060 92 ef 57 b9 6f 79 5e 3f f0 5e 0c 4c 5d a4 cf fa ..W.oy^?.^.L]... 0070 a5 10 87 37 f0 51 3a 83 ba 54 64 9a 57 ee ef 3c ...7.Q:..Td.W..< 0080 c1 0d .. Frame 17 (130 bytes on wire, 130 bytes captured) Arrival Time: May 18, 2005 17:02:11.949614000 Time delta from previous packet: 0.003562000 seconds Time since reference or first frame: 3.670695000 seconds Frame Number: 17 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:d0:cf:03:6d:13, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:d0:cf:03:6d:13 (00:d0:cf:03:6d:13) Type: IP (0x0800) Frame check sequence: 0x3b465202 (correct) Internet Protocol, Src Addr: 165.227.249.139 (165.227.249.139), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0xf96d (63853) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x4231 (correct) Source: 165.227.249.139 (165.227.249.139) Destination: 165.227.249.106 (165.227.249.106) Encapsulating Security Payload SPI: 0x8c39bc01 Sequence: 4 Data (84 bytes) 0000 00 a0 8e 72 1e 40 00 d0 cf 03 6d 13 08 00 45 00 ...r.@....m...E. 0010 00 70 f9 6d 00 00 40 32 42 31 a5 e3 f9 8b a5 e3 .p.m..@2B1...... 0020 f9 6a 8c 39 bc 01 00 00 00 04 79 c8 cc f3 ac a6 .j.9......y..... 0030 b9 60 51 4f 9c de bf f7 df 26 61 c9 0e d0 d5 f8 .`QO.....&a..... 0040 12 16 d1 55 3e 4d 28 6a b2 75 e8 db 05 f1 e3 2e ...U>M(j.u...... 0050 82 9b af aa e8 01 a0 04 f8 e0 71 6a 58 7e d4 4f ..........qjX~.O 0060 df ae f9 43 ca db 27 ba 36 7f cb 4e f9 85 16 1e ...C..'.6..N.... 0070 ae 4c 3f 4e 63 4f 41 5b 74 91 8e 85 63 2b 3b 46 .L?NcOA[t...c+;F 0080 52 02 R.