Frame 1 (126 bytes on wire, 126 bytes captured) Arrival Time: May 18, 2005 16:17:19.827299000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 126 bytes Capture Length: 126 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:0f:3d:55:af:ff Destination: 00:0f:3d:55:af:ff (00:0f:3d:55:af:ff) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0x90dd185c (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.142 (165.227.249.142) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 108 Identification: 0xcbc9 (52169) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x6ff7 (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.142 (165.227.249.142) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 88 Checksum: 0xe02e (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x2D084E204542A56B Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 80 Security Association payload Next payload: NONE (0) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 40 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 32 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) 0000 00 0f 3d 55 af ff 00 a0 8e 72 1e 40 08 00 45 00 ..=U.....r.@..E. 0010 00 6c cb c9 00 00 40 11 6f f7 a5 e3 f9 6a a5 e3 .l....@.o....j.. 0020 f9 8e 01 f4 01 f4 00 58 e0 2e 2d 08 4e 20 45 42 .......X..-.N EB 0030 a5 6b 00 00 00 00 00 00 00 00 01 10 02 00 00 00 .k.............. 0040 00 00 00 00 00 50 00 00 00 34 00 00 00 01 00 00 .....P...4...... 0050 00 01 00 00 00 28 01 01 00 01 00 00 00 20 01 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 04 00 02 80 03 ................ 0070 00 01 80 0b 00 01 80 0c 70 80 90 dd 18 5c ........p....\ Frame 2 (266 bytes on wire, 266 bytes captured) Arrival Time: May 18, 2005 16:17:19.832346000 Time delta from previous packet: 0.005047000 seconds Time since reference or first frame: 0.005047000 seconds Frame Number: 2 Packet Length: 266 bytes Capture Length: 266 bytes Ethernet II, Src: 00:0f:3d:55:af:ff, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:0f:3d:55:af:ff (00:0f:3d:55:af:ff) Type: IP (0x0800) Frame check sequence: 0x4c2e0d70 (correct) Internet Protocol, Src Addr: 165.227.249.142 (165.227.249.142), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 248 Identification: 0xe053 (57427) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: UDP (0x11) Header checksum: 0x9be0 (correct) Source: 165.227.249.142 (165.227.249.142) Destination: 165.227.249.106 (165.227.249.106) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 228 Checksum: 0x81fb (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x2D084E204542A56B Responder cookie: 0xC9234BD903E96825 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 220 Security Association payload Next payload: Vendor ID (13) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 40 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 32 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-dpd-00.txt Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-stenberg-ipsec-nat-traversal-01 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-stenberg-ipsec-nat-traversal-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-03 0000 00 a0 8e 72 1e 40 00 0f 3d 55 af ff 08 00 45 00 ...r.@..=U....E. 0010 00 f8 e0 53 00 00 ff 11 9b e0 a5 e3 f9 8e a5 e3 ...S............ 0020 f9 6a 01 f4 01 f4 00 e4 81 fb 2d 08 4e 20 45 42 .j........-.N EB 0030 a5 6b c9 23 4b d9 03 e9 68 25 01 10 02 00 00 00 .k.#K...h%...... 0040 00 00 00 00 00 dc 0d 00 00 34 00 00 00 01 00 00 .........4...... 0050 00 01 00 00 00 28 01 01 00 01 00 00 00 20 01 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 04 00 02 80 03 ................ 0070 00 01 80 0b 00 01 80 0c 70 80 0d 00 00 14 af ca ........p....... 0080 d7 13 68 a1 f1 c9 6b 86 96 fc 77 57 01 00 0d 00 ..h...k...wW.... 0090 00 14 27 ba b5 dc 01 ea 07 60 ea 4e 31 90 ac 27 ..'......`.N1..' 00a0 c0 d0 0d 00 00 14 61 05 c4 22 e7 68 47 e4 3f 96 ......a..".hG.?. 00b0 84 80 12 92 ae cd 0d 00 00 14 44 85 15 2d 18 b6 ..........D..-.. 00c0 bb cd 0b e8 a8 46 95 79 dd cc 0d 00 00 14 cd 60 .....F.y.......` 00d0 46 43 35 df 21 f8 7c fd b2 fc 68 b6 a4 48 0d 00 FC5.!.|...h..H.. 00e0 00 14 90 cb 80 91 3e bb 69 6e 08 63 81 b5 ec 42 ......>.in.c...B 00f0 7b 1f 00 00 00 14 7d 94 19 a6 53 10 ca 6f 2c 17 {.....}...S..o,. 0100 9d 92 15 52 9d 56 4c 2e 0d 70 ...R.VL..p Frame 3 (262 bytes on wire, 262 bytes captured) Arrival Time: May 18, 2005 16:17:19.959470000 Time delta from previous packet: 0.127124000 seconds Time since reference or first frame: 0.132171000 seconds Frame Number: 3 Packet Length: 262 bytes Capture Length: 262 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:0f:3d:55:af:ff Destination: 00:0f:3d:55:af:ff (00:0f:3d:55:af:ff) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0x4e7098a5 (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.142 (165.227.249.142) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 244 Identification: 0xcbca (52170) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x6f6e (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.142 (165.227.249.142) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 224 Checksum: 0xd0c5 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x2D084E204542A56B Responder cookie: 0xC9234BD903E96825 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 216 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: Vendor ID (13) Length: 24 Nonce Data Vendor ID payload Next payload: NONE (0) Length: 32 Vendor ID: unknown vendor ID: 0x030000142B35BA33D4EBBCC99342E3A5... 0000 00 0f 3d 55 af ff 00 a0 8e 72 1e 40 08 00 45 00 ..=U.....r.@..E. 0010 00 f4 cb ca 00 00 40 11 6f 6e a5 e3 f9 6a a5 e3 ......@.on...j.. 0020 f9 8e 01 f4 01 f4 00 e0 d0 c5 2d 08 4e 20 45 42 ..........-.N EB 0030 a5 6b c9 23 4b d9 03 e9 68 25 04 10 02 00 00 00 .k.#K...h%...... 0040 00 00 00 00 00 d8 0a 00 00 84 b3 ae 19 50 2e b4 .............P.. 0050 41 4b c4 42 f7 57 34 9d b4 2f 0b 08 51 65 f5 d7 AK.B.W4../..Qe.. 0060 ad 54 e3 8b db fd 09 5d da bf 6e bd 35 3d fd b2 .T.....]..n.5=.. 0070 80 19 c1 08 64 a2 86 80 d0 12 23 be 32 54 c0 69 ....d.....#.2T.i 0080 ee 18 18 64 f0 b8 a4 c1 7a 56 35 71 c7 7c a9 8f ...d....zV5q.|.. 0090 ea 54 45 04 9a 98 08 75 c6 69 c1 1e 4c aa 1d e1 .TE....u.i..L... 00a0 81 4d f6 a1 37 a9 3f 8d c9 29 ee 6e 20 08 23 bf .M..7.?..).n .#. 00b0 b7 0c 60 4c 31 6c c2 e7 4c d2 ee c1 3d 82 1e da ..`L1l..L...=... 00c0 ff 47 11 1d e3 6d cc 89 c7 36 0d 00 00 18 f4 a0 .G...m...6...... 00d0 ca 81 cc bc b8 b9 bd 50 c9 41 7f 5f 4b 7f 5a e8 .......P.A._K.Z. 00e0 b4 80 00 00 00 20 03 00 00 14 2b 35 ba 33 d4 eb ..... ....+5.3.. 00f0 bc c9 93 42 e3 a5 46 eb 37 8a 00 00 00 08 00 06 ...B..F.7....... 0100 00 02 4e 70 98 a5 ..Np.. Frame 4 (226 bytes on wire, 226 bytes captured) Arrival Time: May 18, 2005 16:17:20.257781000 Time delta from previous packet: 0.298311000 seconds Time since reference or first frame: 0.430482000 seconds Frame Number: 4 Packet Length: 226 bytes Capture Length: 226 bytes Ethernet II, Src: 00:0f:3d:55:af:ff, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:0f:3d:55:af:ff (00:0f:3d:55:af:ff) Type: IP (0x0800) Frame check sequence: 0x5163e426 (correct) Internet Protocol, Src Addr: 165.227.249.142 (165.227.249.142), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 208 Identification: 0xf451 (62545) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: UDP (0x11) Header checksum: 0x880a (correct) Source: 165.227.249.142 (165.227.249.142) Destination: 165.227.249.106 (165.227.249.106) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 188 Checksum: 0x0ce1 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x2D084E204542A56B Responder cookie: 0xC9234BD903E96825 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 180 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 20 Nonce Data 0000 00 a0 8e 72 1e 40 00 0f 3d 55 af ff 08 00 45 00 ...r.@..=U....E. 0010 00 d0 f4 51 00 00 ff 11 88 0a a5 e3 f9 8e a5 e3 ...Q............ 0020 f9 6a 01 f4 01 f4 00 bc 0c e1 2d 08 4e 20 45 42 .j........-.N EB 0030 a5 6b c9 23 4b d9 03 e9 68 25 04 10 02 00 00 00 .k.#K...h%...... 0040 00 00 00 00 00 b4 0a 00 00 84 04 3f 7a 09 aa 5c ...........?z..\ 0050 d5 74 36 35 d5 0d 13 ae d3 8d 50 63 57 3d ff c8 .t65......PcW=.. 0060 f7 9d 06 96 e0 7b 87 1c c9 1e 4c 62 7c 0c 4d 73 .....{....Lb|.Ms 0070 20 e1 8a 25 4e 09 70 f7 fc 78 0c 9d 17 4e b2 e8 ..%N.p..x...N.. 0080 73 4c 2c ad 3c 95 63 e2 a8 21 66 be c1 57 38 4a sL,.<.c..!f..W8J 0090 a6 8c dc 20 82 87 77 56 f4 91 84 10 c1 83 42 03 ... ..wV......B. 00a0 3b a6 d3 88 2f c4 8d d5 df 47 21 04 6c f5 cf b4 ;.../....G!.l... 00b0 d5 1b 10 ca f0 2e 5e 9b 4e a3 aa a9 f6 2e 7d ae ......^.N.....}. 00c0 89 b6 35 46 65 62 6e 2d 4f 8f 00 00 00 14 dc 4e ..5Febn-O......N 00d0 a5 89 c0 91 17 18 56 30 92 61 27 e1 63 37 51 63 ......V0.a'.c7Qc 00e0 e4 26 .& Frame 5 (138 bytes on wire, 138 bytes captured) Arrival Time: May 18, 2005 16:17:20.409210000 Time delta from previous packet: 0.151429000 seconds Time since reference or first frame: 0.581911000 seconds Frame Number: 5 Packet Length: 138 bytes Capture Length: 138 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:0f:3d:55:af:ff Destination: 00:0f:3d:55:af:ff (00:0f:3d:55:af:ff) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0x42c7e902 (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.142 (165.227.249.142) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0xcbcb (52171) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x6fe9 (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.142 (165.227.249.142) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 100 Checksum: 0xe530 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x2D084E204542A56B Responder cookie: 0xC9234BD903E96825 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 92 Encrypted payload (64 bytes) 0000 00 0f 3d 55 af ff 00 a0 8e 72 1e 40 08 00 45 00 ..=U.....r.@..E. 0010 00 78 cb cb 00 00 40 11 6f e9 a5 e3 f9 6a a5 e3 .x....@.o....j.. 0020 f9 8e 01 f4 01 f4 00 64 e5 30 2d 08 4e 20 45 42 .......d.0-.N EB 0030 a5 6b c9 23 4b d9 03 e9 68 25 05 10 02 01 00 00 .k.#K...h%...... 0040 00 00 00 00 00 5c 74 d5 a7 46 20 10 51 37 5a e4 .....\t..F .Q7Z. 0050 fd 12 f6 24 d8 e2 71 54 61 49 40 8b be d2 ca 17 ...$..qTaI@..... 0060 c4 ed 9f f4 a7 fd 87 aa fa 01 5d 82 3b 4f 37 98 ..........].;O7. 0070 21 e7 e5 5b 75 50 ce 30 da a4 51 14 f1 8b 62 90 !..[uP.0..Q...b. 0080 68 93 73 8f 92 d4 42 c7 e9 02 h.s...B... Frame 6 (114 bytes on wire, 114 bytes captured) Arrival Time: May 18, 2005 16:17:20.414230000 Time delta from previous packet: 0.005020000 seconds Time since reference or first frame: 0.586931000 seconds Frame Number: 6 Packet Length: 114 bytes Capture Length: 114 bytes Ethernet II, Src: 00:0f:3d:55:af:ff, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:0f:3d:55:af:ff (00:0f:3d:55:af:ff) Type: IP (0x0800) Frame check sequence: 0x1c18a847 (correct) Internet Protocol, Src Addr: 165.227.249.142 (165.227.249.142), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0x0953 (2387) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: UDP (0x11) Header checksum: 0x7379 (correct) Source: 165.227.249.142 (165.227.249.142) Destination: 165.227.249.106 (165.227.249.106) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 76 Checksum: 0xc910 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x2D084E204542A56B Responder cookie: 0xC9234BD903E96825 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 68 Encrypted payload (40 bytes) 0000 00 a0 8e 72 1e 40 00 0f 3d 55 af ff 08 00 45 00 ...r.@..=U....E. 0010 00 60 09 53 00 00 ff 11 73 79 a5 e3 f9 8e a5 e3 .`.S....sy...... 0020 f9 6a 01 f4 01 f4 00 4c c9 10 2d 08 4e 20 45 42 .j.....L..-.N EB 0030 a5 6b c9 23 4b d9 03 e9 68 25 05 10 02 01 00 00 .k.#K...h%...... 0040 00 00 00 00 00 44 6c a5 cb 3d 58 20 3e ab 7f dd .....Dl..=X >... 0050 25 e3 cc d8 14 a6 4b 06 64 93 30 b0 ef 86 a4 00 %.....K.d.0..... 0060 93 ea 76 a2 1f c0 3a bf eb 83 e2 1b 08 fa 1c 18 ..v...:......... 0070 a8 47 .G Frame 7 (338 bytes on wire, 338 bytes captured) Arrival Time: May 18, 2005 16:17:20.540869000 Time delta from previous packet: 0.126639000 seconds Time since reference or first frame: 0.713570000 seconds Frame Number: 7 Packet Length: 338 bytes Capture Length: 338 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:0f:3d:55:af:ff Destination: 00:0f:3d:55:af:ff (00:0f:3d:55:af:ff) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0xe03fbf9b (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.142 (165.227.249.142) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 320 Identification: 0xcbcc (52172) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x6f20 (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.142 (165.227.249.142) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 300 Checksum: 0x0ee9 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x2D084E204542A56B Responder cookie: 0xC9234BD903E96825 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x6A65E14F Length: 292 Encrypted payload (264 bytes) 0000 00 0f 3d 55 af ff 00 a0 8e 72 1e 40 08 00 45 00 ..=U.....r.@..E. 0010 01 40 cb cc 00 00 40 11 6f 20 a5 e3 f9 6a a5 e3 .@....@.o ...j.. 0020 f9 8e 01 f4 01 f4 01 2c 0e e9 2d 08 4e 20 45 42 .......,..-.N EB 0030 a5 6b c9 23 4b d9 03 e9 68 25 08 10 20 01 6a 65 .k.#K...h%.. .je 0040 e1 4f 00 00 01 24 46 c8 f8 f7 58 27 f1 58 12 b9 .O...$F...X'.X.. 0050 c9 58 67 46 d0 4b 30 e7 9f 12 9c a0 b0 54 3b a5 .XgF.K0......T;. 0060 70 23 37 0c 18 f2 62 64 31 8f 71 21 ad 72 5a 3c p#7...bd1.q!.rZ< 0070 80 19 0c b5 a7 4b 0d fb 80 f0 3f 12 4c fd 3f 11 .....K....?.L.?. 0080 26 c6 89 f9 25 04 44 22 fd 88 60 8d 99 01 b2 4b &...%.D"..`....K 0090 ae 50 9e 34 3a 55 7a e6 52 7f 98 7e ce bd 5e 0e .P.4:Uz.R..~..^. 00a0 4b 16 dc 57 03 26 f5 6e 65 92 86 85 70 41 0d 42 K..W.&.ne...pA.B 00b0 32 40 20 55 e7 60 a2 c3 8b 27 ba 31 fb 97 50 e9 2@ U.`...'.1..P. 00c0 64 d4 4a 3f 37 91 13 8b 6f 53 46 4b 6e 96 fc fc d.J?7...oSFKn... 00d0 cd f0 a8 fe f2 e0 1a de 86 c9 f5 85 a9 17 f2 55 ...............U 00e0 56 e4 a3 44 a7 27 ad 6c 24 7b e9 54 c6 69 1d 57 V..D.'.l${.T.i.W 00f0 8d ea 0b bc 6a b0 a3 1b fe ea 30 f1 cf e5 27 2b ....j.....0...'+ 0100 f8 96 bf a8 ed 49 9f 91 69 a2 d6 99 43 b3 fa 25 .....I..i...C..% 0110 cc 28 d4 84 f6 39 93 01 7c 71 5f 26 af a8 c2 be .(...9..|q_&.... 0120 88 3a 50 87 79 97 49 db f5 f8 50 ff 91 b7 06 6e .:P.y.I...P....n 0130 8c 7d 52 a3 7b 24 62 0f ce 8e 7c 3f a0 dc 68 88 .}R.{$b...|?..h. 0140 7b 77 54 e6 76 71 87 f3 08 3f 19 8b ac ae e0 3f {wT.vq...?.....? 0150 bf 9b .. Frame 8 (338 bytes on wire, 338 bytes captured) Arrival Time: May 18, 2005 16:17:20.698258000 Time delta from previous packet: 0.157389000 seconds Time since reference or first frame: 0.870959000 seconds Frame Number: 8 Packet Length: 338 bytes Capture Length: 338 bytes Ethernet II, Src: 00:0f:3d:55:af:ff, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:0f:3d:55:af:ff (00:0f:3d:55:af:ff) Type: IP (0x0800) Frame check sequence: 0xf506f8c3 (correct) Internet Protocol, Src Addr: 165.227.249.142 (165.227.249.142), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 320 Identification: 0x2351 (9041) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: UDP (0x11) Header checksum: 0x589b (correct) Source: 165.227.249.142 (165.227.249.142) Destination: 165.227.249.106 (165.227.249.106) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 300 Checksum: 0x3291 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x2D084E204542A56B Responder cookie: 0xC9234BD903E96825 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x6A65E14F Length: 292 Encrypted payload (264 bytes) 0000 00 a0 8e 72 1e 40 00 0f 3d 55 af ff 08 00 45 00 ...r.@..=U....E. 0010 01 40 23 51 00 00 ff 11 58 9b a5 e3 f9 8e a5 e3 .@#Q....X....... 0020 f9 6a 01 f4 01 f4 01 2c 32 91 2d 08 4e 20 45 42 .j.....,2.-.N EB 0030 a5 6b c9 23 4b d9 03 e9 68 25 08 10 20 01 6a 65 .k.#K...h%.. .je 0040 e1 4f 00 00 01 24 0f 54 2f 35 84 4e 2d fa 8d 70 .O...$.T/5.N-..p 0050 e0 05 4f aa bc e4 90 ea eb fc 77 99 45 62 37 fa ..O.......w.Eb7. 0060 83 b9 18 2e aa 97 99 10 93 31 8d 1b ee a5 17 92 .........1...... 0070 db b3 1f 60 69 33 f0 4a ff 9e 86 a7 4e a4 93 74 ...`i3.J....N..t 0080 cf 3e c0 ba 31 fb a3 0b c3 b8 76 62 0d 8b fe b3 .>..1.....vb.... 0090 8b 23 5b fc 87 17 bd 58 3b d8 d5 e0 8f 84 5c 65 .#[....X;.....\e 00a0 d3 5a 64 e9 70 3e e9 75 8e 3a de c4 1b 00 4a 97 .Zd.p>.u.:....J. 00b0 d3 6c 29 f8 86 7a 01 e0 70 05 1b 6d 5b 82 61 5b .l)..z..p..m[.a[ 00c0 d8 d8 2d 3e 6e db 04 b5 26 08 4f e2 f7 3c 0a 56 ..->n...&.O..<.V 00d0 66 c5 2a c5 96 32 68 7a 37 c9 bc d3 d3 51 51 4a f.*..2hz7....QQJ 00e0 8c cb 22 b5 27 bb 02 a1 e1 f9 4b 06 f1 14 0f 7f ..".'.....K..... 00f0 e4 e2 7d d0 5d b4 b7 d4 fb 02 b2 a8 f1 d8 b3 86 ..}.]........... 0100 ea 7b c4 5a cd 0b 91 fb 8a 98 f2 d2 97 a1 27 6b .{.Z..........'k 0110 5d 2e 23 f7 a9 5a 6b 3b fa e8 f4 b7 d4 0e 7d 9d ].#..Zk;......}. 0120 9f 40 c9 03 73 5d 44 ad 5e 30 92 66 05 cc 4e c8 .@..s]D.^0.f..N. 0130 69 89 b0 c7 bf aa 9e 24 15 c9 f3 3e 3d b6 91 07 i......$...>=... 0140 e3 5e 17 e2 97 f7 cb d2 e3 72 dd 3b 21 df f5 06 .^.......r.;!... 0150 f8 c3 .. Frame 9 (98 bytes on wire, 98 bytes captured) Arrival Time: May 18, 2005 16:17:20.854342000 Time delta from previous packet: 0.156084000 seconds Time since reference or first frame: 1.027043000 seconds Frame Number: 9 Packet Length: 98 bytes Capture Length: 98 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:0f:3d:55:af:ff Destination: 00:0f:3d:55:af:ff (00:0f:3d:55:af:ff) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0x80535082 (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.142 (165.227.249.142) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 80 Identification: 0xcbcd (52173) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x700f (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.142 (165.227.249.142) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 60 Checksum: 0xb0f6 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x2D084E204542A56B Responder cookie: 0xC9234BD903E96825 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x6A65E14F Length: 52 Encrypted payload (24 bytes) 0000 00 0f 3d 55 af ff 00 a0 8e 72 1e 40 08 00 45 00 ..=U.....r.@..E. 0010 00 50 cb cd 00 00 40 11 70 0f a5 e3 f9 6a a5 e3 .P....@.p....j.. 0020 f9 8e 01 f4 01 f4 00 3c b0 f6 2d 08 4e 20 45 42 .......<..-.N EB 0030 a5 6b c9 23 4b d9 03 e9 68 25 08 10 20 01 6a 65 .k.#K...h%.. .je 0040 e1 4f 00 00 00 34 52 42 34 50 5c 79 90 e4 13 05 .O...4RB4P\y.... 0050 75 e2 f8 b3 62 ec 44 6c d2 2d df 0d 62 da 80 53 u...b.Dl.-..b..S 0060 50 82 P. Frame 10 (130 bytes on wire, 130 bytes captured) Arrival Time: May 18, 2005 16:17:21.355237000 Time delta from previous packet: 0.500895000 seconds Time since reference or first frame: 1.527938000 seconds Frame Number: 10 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:0f:3d:55:af:ff Destination: 00:0f:3d:55:af:ff (00:0f:3d:55:af:ff) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0xc2e13ef1 (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.142 (165.227.249.142) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0xcbce (52174) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x6fcd (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.142 (165.227.249.142) Encapsulating Security Payload SPI: 0xd2036acd Sequence: 1 Data (84 bytes) 0000 00 0f 3d 55 af ff 00 a0 8e 72 1e 40 08 00 45 00 ..=U.....r.@..E. 0010 00 70 cb ce 00 00 40 32 6f cd a5 e3 f9 6a a5 e3 .p....@2o....j.. 0020 f9 8e d2 03 6a cd 00 00 00 01 13 3b 4f 6f 46 0a ....j......;OoF. 0030 dc 1a f1 2b 74 79 4d 97 9b 7b e1 d8 13 9e 62 11 ...+tyM..{....b. 0040 6b 12 68 dd e5 75 97 1e 33 10 81 1f 1e 23 26 72 k.h..u..3....#&r 0050 d4 80 6b ad ae d2 3f cb 89 dc d5 9e ce 2b 92 02 ..k...?......+.. 0060 d4 4b a0 ac 82 cc eb 1b 81 41 cf 24 8e de 99 8e .K.......A.$.... 0070 f0 54 39 cc 17 de f8 da c4 7b fa 61 87 c5 c2 e1 .T9......{.a.... 0080 3e f1 >. Frame 11 (130 bytes on wire, 130 bytes captured) Arrival Time: May 18, 2005 16:17:21.356497000 Time delta from previous packet: 0.001260000 seconds Time since reference or first frame: 1.529198000 seconds Frame Number: 11 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:0f:3d:55:af:ff, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:0f:3d:55:af:ff (00:0f:3d:55:af:ff) Type: IP (0x0800) Frame check sequence: 0x3588d17d (correct) Internet Protocol, Src Addr: 165.227.249.142 (165.227.249.142), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x6051 (24657) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x1c4a (correct) Source: 165.227.249.142 (165.227.249.142) Destination: 165.227.249.106 (165.227.249.106) Encapsulating Security Payload SPI: 0x0e943400 Sequence: 2 Data (84 bytes) 0000 00 a0 8e 72 1e 40 00 0f 3d 55 af ff 08 00 45 00 ...r.@..=U....E. 0010 00 70 60 51 00 00 ff 32 1c 4a a5 e3 f9 8e a5 e3 .p`Q...2.J...... 0020 f9 6a 0e 94 34 00 00 00 00 02 9b 3d 9c e3 ab 14 .j..4......=.... 0030 98 82 6d 4f 52 89 dd 39 3d f0 7d 9c 1e 66 7d ed ..mOR..9=.}..f}. 0040 42 fa a1 bf e5 5a ad b7 e4 73 65 d1 d1 b6 6c 56 B....Z...se...lV 0050 2e cb 62 69 97 2f cb 84 a2 ea b3 cd 02 77 b7 dc ..bi./.......w.. 0060 0d 94 c6 2e c1 a3 64 90 69 a3 43 ae 08 c6 5b e0 ......d.i.C...[. 0070 9a ee 4b 9f 19 42 e5 6f 24 e6 5f 69 0f 4a 35 88 ..K..B.o$._i.J5. 0080 d1 7d .} Frame 12 (130 bytes on wire, 130 bytes captured) Arrival Time: May 18, 2005 16:17:21.359257000 Time delta from previous packet: 0.002760000 seconds Time since reference or first frame: 1.531958000 seconds Frame Number: 12 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:0f:3d:55:af:ff Destination: 00:0f:3d:55:af:ff (00:0f:3d:55:af:ff) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0x1d25643d (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.142 (165.227.249.142) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0xcbcf (52175) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x6fcc (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.142 (165.227.249.142) Encapsulating Security Payload SPI: 0xd2036acd Sequence: 2 Data (84 bytes) 0000 00 0f 3d 55 af ff 00 a0 8e 72 1e 40 08 00 45 00 ..=U.....r.@..E. 0010 00 70 cb cf 00 00 40 32 6f cc a5 e3 f9 6a a5 e3 .p....@2o....j.. 0020 f9 8e d2 03 6a cd 00 00 00 02 64 26 87 70 6e fd ....j.....d&.pn. 0030 85 1d 92 71 f6 15 44 d8 3f 3e 1b 2d 42 9b 53 b3 ...q..D.?>.-B.S. 0040 bb cd 68 f7 30 29 a6 84 96 d0 41 bb 33 4e 4c 46 ..h.0)....A.3NLF 0050 e3 11 f1 c7 fd 2f 91 f5 d3 a9 f5 0c 56 60 28 6a ...../......V`(j 0060 d7 13 6a c0 82 41 b9 f1 d6 69 ef eb 52 ce 94 05 ..j..A...i..R... 0070 8b ea 70 d1 dd 3a 5a 88 de bf 2a e4 34 2b 1d 25 ..p..:Z...*.4+.% 0080 64 3d d= Frame 13 (130 bytes on wire, 130 bytes captured) Arrival Time: May 18, 2005 16:17:21.360085000 Time delta from previous packet: 0.000828000 seconds Time since reference or first frame: 1.532786000 seconds Frame Number: 13 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:0f:3d:55:af:ff, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:0f:3d:55:af:ff (00:0f:3d:55:af:ff) Type: IP (0x0800) Frame check sequence: 0x9a24a97a (correct) Internet Protocol, Src Addr: 165.227.249.142 (165.227.249.142), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0xbc53 (48211) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0xc047 (correct) Source: 165.227.249.142 (165.227.249.142) Destination: 165.227.249.106 (165.227.249.106) Encapsulating Security Payload SPI: 0x0e943400 Sequence: 3 Data (84 bytes) 0000 00 a0 8e 72 1e 40 00 0f 3d 55 af ff 08 00 45 00 ...r.@..=U....E. 0010 00 70 bc 53 00 00 ff 32 c0 47 a5 e3 f9 8e a5 e3 .p.S...2.G...... 0020 f9 6a 0e 94 34 00 00 00 00 03 78 74 1a a0 b8 cf .j..4.....xt.... 0030 e6 d8 ee e9 3b f0 62 c3 b2 88 6d 62 45 be 91 94 ....;.b...mbE... 0040 3c 2f c2 93 51 8a 79 57 93 08 42 93 24 3a 0b 50 ..r..m 0080 dd 46 .F Frame 17 (130 bytes on wire, 130 bytes captured) Arrival Time: May 18, 2005 16:17:23.358051000 Time delta from previous packet: 0.000899000 seconds Time since reference or first frame: 3.530752000 seconds Frame Number: 17 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:0f:3d:55:af:ff, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:0f:3d:55:af:ff (00:0f:3d:55:af:ff) Type: IP (0x0800) Frame check sequence: 0xe6a9f430 (correct) Internet Protocol, Src Addr: 165.227.249.142 (165.227.249.142), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x2050 (8272) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x5c4b (correct) Source: 165.227.249.142 (165.227.249.142) Destination: 165.227.249.106 (165.227.249.106) Encapsulating Security Payload SPI: 0x0e943400 Sequence: 5 Data (84 bytes) 0000 00 a0 8e 72 1e 40 00 0f 3d 55 af ff 08 00 45 00 ...r.@..=U....E. 0010 00 70 20 50 00 00 ff 32 5c 4b a5 e3 f9 8e a5 e3 .p P...2\K...... 0020 f9 6a 0e 94 34 00 00 00 00 05 86 2d 74 6f e4 9b .j..4......-to.. 0030 98 c3 65 6b 82 b5 56 a9 3d 0c 64 3a d9 01 ea b9 ..ek..V.=.d:.... 0040 42 c3 f9 3b db 39 e9 6e a9 d1 da ec 63 87 d4 2c B..;.9.n....c.., 0050 1f d6 93 11 a4 b1 7d 1b 34 42 96 44 ad ba b3 6e ......}.4B.D...n 0060 6b ce f5 13 df 7d 11 6d 49 68 7e 6a 87 96 a6 9f k....}.mIh~j.... 0070 72 bc fd af 73 12 2b 71 83 be ae c7 42 47 e6 a9 r...s.+q....BG.. 0080 f4 30 .0