Frame 1 (146 bytes on wire, 146 bytes captured)
    Arrival Time: May  8, 2008 12:50:32.382903000
    Time delta from previous packet: 0.000000000 seconds
    Time since reference or first frame: 0.000000000 seconds
    Frame Number: 1
    Packet Length: 146 bytes
    Capture Length: 146 bytes
    Protocols in frame: eth:ip:udp:isakmp
Ethernet II, Src: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40), Dst: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a)
    Destination: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a)
    Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.106 (165.227.249.106), Dst: 165.227.249.130 (165.227.249.130)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 132
    Identification: 0x67e6 (26598)
    Flags: 0x00
        0... = Reserved bit: Not set
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0xd3ce [correct]
        Good: True
        Bad : False
    Source: 165.227.249.106 (165.227.249.106)
    Destination: 165.227.249.130 (165.227.249.130)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 112
    Checksum: 0xcfa4 [correct]
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x23AE9025A2AE35CD
    Responder cookie: 0x0000000000000000
    Next payload: Security Association (1)
    Version: 1.0
    Exchange type: Identity Protection (Main Mode) (2)
    Flags
        .... ...0 = Not encrypted
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x00000000
    Length: 104
    Security Association payload
        Next payload: Vendor ID (13)
        Length: 56
        Domain of interpretation: IPSEC (1)
        Situation: IDENTITY (1)
        Proposal payload # 1
            Next payload: NONE (0)
            Length: 44
            Proposal number: 1
            Protocol ID: ISAKMP (1)
            SPI size: 0
            Number of transforms: 1
            Transform payload # 1
                Next payload: NONE (0)
                Length: 36
                Transform number: 1
                Transform ID: KEY_IKE (1)
                Encryption-Algorithm (1): AES-CBC (7)
                Key-Length (14): Key-Length (128)
                Hash-Algorithm (2): SHA (2)
                Group-Description (4): Alternate 1024-bit MODP group (2)
                Authentication-Method (3): PSK (1)
                Life-Type (11): Seconds (1)
                Life-Duration (12): Duration-Value (28800)
    Vendor ID payload
        Next payload: NONE (0)
        Length: 20
        Vendor ID: RFC 3706 Detecting Dead IKE Peers (DPD)

0000  00 0c 29 64 f8 4a 00 a0 8e 72 1e 40 08 00 45 00   ..)d.J...r.@..E.
0010  00 84 67 e6 00 00 40 11 d3 ce a5 e3 f9 6a a5 e3   ..g...@......j..
0020  f9 82 01 f4 01 f4 00 70 cf a4 23 ae 90 25 a2 ae   .......p..#..%..
0030  35 cd 00 00 00 00 00 00 00 00 01 10 02 00 00 00   5...............
0040  00 00 00 00 00 68 0d 00 00 38 00 00 00 01 00 00   .....h...8......
0050  00 01 00 00 00 2c 01 01 00 01 00 00 00 24 01 01   .....,.......$..
0060  00 00 80 01 00 07 80 0e 00 80 80 02 00 02 80 04   ................
0070  00 02 80 03 00 01 80 0b 00 01 80 0c 70 80 00 00   ............p...
0080  00 14 af ca d7 13 68 a1 f1 c9 6b 86 96 fc 77 57   ......h...k...wW
0090  01 00                                             ..

Frame 2 (110 bytes on wire, 110 bytes captured)
    Arrival Time: May  8, 2008 12:50:37.252463000
    Time delta from previous packet: 4.869560000 seconds
    Time since reference or first frame: 4.869560000 seconds
    Frame Number: 2
    Packet Length: 110 bytes
    Capture Length: 110 bytes
    Protocols in frame: eth:ip:udp:isakmp
Ethernet II, Src: 00:14:6c:a6:ca:37 (00:14:6c:a6:ca:37), Dst: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40)
    Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40)
    Source: 00:14:6c:a6:ca:37 (00:14:6c:a6:ca:37)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.157 (165.227.249.157), Dst: 165.227.249.106 (165.227.249.106)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 96
    Identification: 0x0015 (21)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0xfba8 [correct]
        Good: True
        Bad : False
    Source: 165.227.249.157 (165.227.249.157)
    Destination: 165.227.249.106 (165.227.249.106)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 76
    Checksum: 0x64d5 [correct]
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x59CDD6A5B70F4FDA
    Responder cookie: 0xF9C5F838753F9756
    Next payload: Hash (8)
    Version: 1.0
    Exchange type: Informational (5)
    Flags
        .... ...1 = Encrypted
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0xADC25F10
    Length: 68
    Encrypted payload (40 bytes)

0000  00 a0 8e 72 1e 40 00 14 6c a6 ca 37 08 00 45 00   ...r.@..l..7..E.
0010  00 60 00 15 40 00 40 11 fb a8 a5 e3 f9 9d a5 e3   .`..@.@.........
0020  f9 6a 01 f4 01 f4 00 4c 64 d5 59 cd d6 a5 b7 0f   .j.....Ld.Y.....
0030  4f da f9 c5 f8 38 75 3f 97 56 08 10 05 01 ad c2   O....8u?.V......
0040  5f 10 00 00 00 44 92 07 86 d9 6a 51 84 d0 b8 9e   _....D....jQ....
0050  91 67 72 04 b8 87 80 49 bb 11 31 ca ad b5 11 3e   .gr....I..1....>
0060  b8 68 4e 36 f8 b0 b5 47 ad 10 84 bb 78 9c         .hN6...G....x.

Frame 3 (126 bytes on wire, 126 bytes captured)
    Arrival Time: May  8, 2008 12:50:37.281322000
    Time delta from previous packet: 0.028859000 seconds
    Time since reference or first frame: 4.898419000 seconds
    Frame Number: 3
    Packet Length: 126 bytes
    Capture Length: 126 bytes
    Protocols in frame: eth:ip:udp:isakmp
Ethernet II, Src: 00:14:6c:a6:ca:37 (00:14:6c:a6:ca:37), Dst: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40)
    Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40)
    Source: 00:14:6c:a6:ca:37 (00:14:6c:a6:ca:37)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.157 (165.227.249.157), Dst: 165.227.249.106 (165.227.249.106)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 112
    Identification: 0x0016 (22)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0xfb97 [correct]
        Good: True
        Bad : False
    Source: 165.227.249.157 (165.227.249.157)
    Destination: 165.227.249.106 (165.227.249.106)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 92
    Checksum: 0xcd71 [correct]
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x59CDD6A5B70F4FDA
    Responder cookie: 0xF9C5F838753F9756
    Next payload: Hash (8)
    Version: 1.0
    Exchange type: Informational (5)
    Flags
        .... ...1 = Encrypted
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0xFD93B042
    Length: 84
    Encrypted payload (56 bytes)

0000  00 a0 8e 72 1e 40 00 14 6c a6 ca 37 08 00 45 00   ...r.@..l..7..E.
0010  00 70 00 16 40 00 40 11 fb 97 a5 e3 f9 9d a5 e3   .p..@.@.........
0020  f9 6a 01 f4 01 f4 00 5c cd 71 59 cd d6 a5 b7 0f   .j.....\.qY.....
0030  4f da f9 c5 f8 38 75 3f 97 56 08 10 05 01 fd 93   O....8u?.V......
0040  b0 42 00 00 00 54 cb c1 0b 1d 12 ee 13 ea 74 c9   .B...T........t.
0050  17 5a 35 fc 50 12 11 23 af d3 6b d8 f6 5d 05 c6   .Z5.P..#..k..]..
0060  eb 79 cf 6f 46 63 59 da 99 89 e7 ca 60 45 af 27   .y.oFcY.....`E.'
0070  0b 97 b5 31 04 43 7b c9 a5 22 f2 01 01 20         ...1.C{.."... 

Frame 4 (146 bytes on wire, 146 bytes captured)
    Arrival Time: May  8, 2008 12:50:37.397555000
    Time delta from previous packet: 0.116233000 seconds
    Time since reference or first frame: 5.014652000 seconds
    Frame Number: 4
    Packet Length: 146 bytes
    Capture Length: 146 bytes
    Protocols in frame: eth:ip:udp:isakmp
Ethernet II, Src: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40), Dst: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a)
    Destination: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a)
    Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.106 (165.227.249.106), Dst: 165.227.249.130 (165.227.249.130)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 132
    Identification: 0x67e7 (26599)
    Flags: 0x00
        0... = Reserved bit: Not set
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0xd3cd [correct]
        Good: True
        Bad : False
    Source: 165.227.249.106 (165.227.249.106)
    Destination: 165.227.249.130 (165.227.249.130)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 112
    Checksum: 0xcfa4 [correct]
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x23AE9025A2AE35CD
    Responder cookie: 0x0000000000000000
    Next payload: Security Association (1)
    Version: 1.0
    Exchange type: Identity Protection (Main Mode) (2)
    Flags
        .... ...0 = Not encrypted
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x00000000
    Length: 104
    Security Association payload
        Next payload: Vendor ID (13)
        Length: 56
        Domain of interpretation: IPSEC (1)
        Situation: IDENTITY (1)
        Proposal payload # 1
            Next payload: NONE (0)
            Length: 44
            Proposal number: 1
            Protocol ID: ISAKMP (1)
            SPI size: 0
            Number of transforms: 1
            Transform payload # 1
                Next payload: NONE (0)
                Length: 36
                Transform number: 1
                Transform ID: KEY_IKE (1)
                Encryption-Algorithm (1): AES-CBC (7)
                Key-Length (14): Key-Length (128)
                Hash-Algorithm (2): SHA (2)
                Group-Description (4): Alternate 1024-bit MODP group (2)
                Authentication-Method (3): PSK (1)
                Life-Type (11): Seconds (1)
                Life-Duration (12): Duration-Value (28800)
    Vendor ID payload
        Next payload: NONE (0)
        Length: 20
        Vendor ID: RFC 3706 Detecting Dead IKE Peers (DPD)

0000  00 0c 29 64 f8 4a 00 a0 8e 72 1e 40 08 00 45 00   ..)d.J...r.@..E.
0010  00 84 67 e7 00 00 40 11 d3 cd a5 e3 f9 6a a5 e3   ..g...@......j..
0020  f9 82 01 f4 01 f4 00 70 cf a4 23 ae 90 25 a2 ae   .......p..#..%..
0030  35 cd 00 00 00 00 00 00 00 00 01 10 02 00 00 00   5...............
0040  00 00 00 00 00 68 0d 00 00 38 00 00 00 01 00 00   .....h...8......
0050  00 01 00 00 00 2c 01 01 00 01 00 00 00 24 01 01   .....,.......$..
0060  00 00 80 01 00 07 80 0e 00 80 80 02 00 02 80 04   ................
0070  00 02 80 03 00 01 80 0b 00 01 80 0c 70 80 00 00   ............p...
0080  00 14 af ca d7 13 68 a1 f1 c9 6b 86 96 fc 77 57   ......h...k...wW
0090  01 00                                             ..

Frame 5 (126 bytes on wire, 126 bytes captured)
    Arrival Time: May  8, 2008 12:50:37.805264000
    Time delta from previous packet: 0.407709000 seconds
    Time since reference or first frame: 5.422361000 seconds
    Frame Number: 5
    Packet Length: 126 bytes
    Capture Length: 126 bytes
    Protocols in frame: eth:ip:udp:isakmp
Ethernet II, Src: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40), Dst: 00:14:6c:a6:ca:37 (00:14:6c:a6:ca:37)
    Destination: 00:14:6c:a6:ca:37 (00:14:6c:a6:ca:37)
    Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.106 (165.227.249.106), Dst: 165.227.249.157 (165.227.249.157)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 112
    Identification: 0x67e8 (26600)
    Flags: 0x00
        0... = Reserved bit: Not set
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0xd3c5 [correct]
        Good: True
        Bad : False
    Source: 165.227.249.106 (165.227.249.106)
    Destination: 165.227.249.157 (165.227.249.157)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 92
    Checksum: 0x385a [correct]
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x59CDD6A5B70F4FDA
    Responder cookie: 0xF9C5F838753F9756
    Next payload: Hash (8)
    Version: 1.0
    Exchange type: Informational (5)
    Flags
        .... ...1 = Encrypted
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0xFEE77305
    Length: 84
    Encrypted payload (56 bytes)

0000  00 14 6c a6 ca 37 00 a0 8e 72 1e 40 08 00 45 00   ..l..7...r.@..E.
0010  00 70 67 e8 00 00 40 11 d3 c5 a5 e3 f9 6a a5 e3   .pg...@......j..
0020  f9 9d 01 f4 01 f4 00 5c 38 5a 59 cd d6 a5 b7 0f   .......\8ZY.....
0030  4f da f9 c5 f8 38 75 3f 97 56 08 10 05 01 fe e7   O....8u?.V......
0040  73 05 00 00 00 54 ce bb 42 5b 95 8f 6f 64 51 d9   s....T..B[..odQ.
0050  6e 7c 11 06 9c c6 02 d6 1b db a2 77 87 ac 82 df   n|.........w....
0060  7b 97 70 58 e1 06 a9 23 38 8b 9f 3f b1 5f e3 3d   {.pX...#8..?._.=
0070  99 f9 d9 8a 95 b9 9e d3 58 98 76 b2 25 1e         ........X.v.%.

Frame 6 (118 bytes on wire, 118 bytes captured)
    Arrival Time: May  8, 2008 12:50:37.806781000
    Time delta from previous packet: 0.001517000 seconds
    Time since reference or first frame: 5.423878000 seconds
    Frame Number: 6
    Packet Length: 118 bytes
    Capture Length: 118 bytes
    Protocols in frame: eth:ip:udp:isakmp
Ethernet II, Src: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40), Dst: 00:14:6c:a6:ca:37 (00:14:6c:a6:ca:37)
    Destination: 00:14:6c:a6:ca:37 (00:14:6c:a6:ca:37)
    Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.106 (165.227.249.106), Dst: 165.227.249.157 (165.227.249.157)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 104
    Identification: 0x67e9 (26601)
    Flags: 0x00
        0... = Reserved bit: Not set
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0xd3cc [correct]
        Good: True
        Bad : False
    Source: 165.227.249.106 (165.227.249.106)
    Destination: 165.227.249.157 (165.227.249.157)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 84
    Checksum: 0x572a [correct]
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x59CDD6A5B70F4FDA
    Responder cookie: 0xF9C5F838753F9756
    Next payload: Hash (8)
    Version: 1.0
    Exchange type: Informational (5)
    Flags
        .... ...1 = Encrypted
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x9EC50C65
    Length: 76
    Encrypted payload (48 bytes)

0000  00 14 6c a6 ca 37 00 a0 8e 72 1e 40 08 00 45 00   ..l..7...r.@..E.
0010  00 68 67 e9 00 00 40 11 d3 cc a5 e3 f9 6a a5 e3   .hg...@......j..
0020  f9 9d 01 f4 01 f4 00 54 57 2a 59 cd d6 a5 b7 0f   .......TW*Y.....
0030  4f da f9 c5 f8 38 75 3f 97 56 08 10 05 01 9e c5   O....8u?.V......
0040  0c 65 00 00 00 4c bf d5 58 73 ae 80 33 fd c1 52   .e...L..Xs..3..R
0050  8b da 76 ef 65 4b ec 6e 4b 24 d6 c7 4a 82 10 d5   ..v.eK.nK$..J...
0060  16 f4 6f 6e e5 2f a4 12 62 b7 68 4b 38 1f a2 a4   ..on./..b.hK8...
0070  68 84 86 e7 44 31                                 h...D1

Frame 7 (142 bytes on wire, 142 bytes captured)
    Arrival Time: May  8, 2008 12:50:41.771641000
    Time delta from previous packet: 3.964860000 seconds
    Time since reference or first frame: 9.388738000 seconds
    Frame Number: 7
    Packet Length: 142 bytes
    Capture Length: 142 bytes
    Protocols in frame: eth:ip:udp:isakmp
Ethernet II, Src: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40), Dst: 00:14:6c:a6:ca:37 (00:14:6c:a6:ca:37)
    Destination: 00:14:6c:a6:ca:37 (00:14:6c:a6:ca:37)
    Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.106 (165.227.249.106), Dst: 165.227.249.157 (165.227.249.157)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 128
    Identification: 0x67ea (26602)
    Flags: 0x00
        0... = Reserved bit: Not set
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0xd3b3 [correct]
        Good: True
        Bad : False
    Source: 165.227.249.106 (165.227.249.106)
    Destination: 165.227.249.157 (165.227.249.157)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 108
    Checksum: 0x9780 [correct]
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x59CDD6A51C35F858
    Responder cookie: 0x0000000000000000
    Next payload: Security Association (1)
    Version: 1.0
    Exchange type: Identity Protection (Main Mode) (2)
    Flags
        .... ...0 = Not encrypted
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x00000000
    Length: 100
    Security Association payload
        Next payload: Vendor ID (13)
        Length: 52
        Domain of interpretation: IPSEC (1)
        Situation: IDENTITY (1)
        Proposal payload # 1
            Next payload: NONE (0)
            Length: 40
            Proposal number: 1
            Protocol ID: ISAKMP (1)
            SPI size: 0
            Number of transforms: 1
            Transform payload # 1
                Next payload: NONE (0)
                Length: 32
                Transform number: 1
                Transform ID: KEY_IKE (1)
                Encryption-Algorithm (1): 3DES-CBC (5)
                Hash-Algorithm (2): SHA (2)
                Group-Description (4): Alternate 1024-bit MODP group (2)
                Authentication-Method (3): PSK (1)
                Life-Type (11): Seconds (1)
                Life-Duration (12): Duration-Value (28800)
    Vendor ID payload
        Next payload: NONE (0)
        Length: 20
        Vendor ID: RFC 3706 Detecting Dead IKE Peers (DPD)

0000  00 14 6c a6 ca 37 00 a0 8e 72 1e 40 08 00 45 00   ..l..7...r.@..E.
0010  00 80 67 ea 00 00 40 11 d3 b3 a5 e3 f9 6a a5 e3   ..g...@......j..
0020  f9 9d 01 f4 01 f4 00 6c 97 80 59 cd d6 a5 1c 35   .......l..Y....5
0030  f8 58 00 00 00 00 00 00 00 00 01 10 02 00 00 00   .X..............
0040  00 00 00 00 00 64 0d 00 00 34 00 00 00 01 00 00   .....d...4......
0050  00 01 00 00 00 28 01 01 00 01 00 00 00 20 01 01   .....(....... ..
0060  00 00 80 01 00 05 80 02 00 02 80 04 00 02 80 03   ................
0070  00 01 80 0b 00 01 80 0c 70 80 00 00 00 14 af ca   ........p.......
0080  d7 13 68 a1 f1 c9 6b 86 96 fc 77 57 01 00         ..h...k...wW..

Frame 8 (142 bytes on wire, 142 bytes captured)
    Arrival Time: May  8, 2008 12:50:42.022415000
    Time delta from previous packet: 0.250774000 seconds
    Time since reference or first frame: 9.639512000 seconds
    Frame Number: 8
    Packet Length: 142 bytes
    Capture Length: 142 bytes
    Protocols in frame: eth:ip:udp:isakmp
Ethernet II, Src: 00:14:6c:a6:ca:37 (00:14:6c:a6:ca:37), Dst: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40)
    Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40)
    Source: 00:14:6c:a6:ca:37 (00:14:6c:a6:ca:37)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.157 (165.227.249.157), Dst: 165.227.249.106 (165.227.249.106)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 128
    Identification: 0x0017 (23)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0xfb86 [correct]
        Good: True
        Bad : False
    Source: 165.227.249.157 (165.227.249.157)
    Destination: 165.227.249.106 (165.227.249.106)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 108
    Checksum: 0x8cc1 [correct]
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x59CDD6A51C35F858
    Responder cookie: 0xBE016B4C2AD5B69B
    Next payload: Security Association (1)
    Version: 1.0
    Exchange type: Identity Protection (Main Mode) (2)
    Flags
        .... ...0 = Not encrypted
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x00000000
    Length: 100
    Security Association payload
        Next payload: Vendor ID (13)
        Length: 52
        Domain of interpretation: IPSEC (1)
        Situation: IDENTITY (1)
        Proposal payload # 1
            Next payload: NONE (0)
            Length: 40
            Proposal number: 1
            Protocol ID: ISAKMP (1)
            SPI size: 0
            Number of transforms: 1
            Transform payload # 1
                Next payload: NONE (0)
                Length: 32
                Transform number: 1
                Transform ID: KEY_IKE (1)
                Encryption-Algorithm (1): 3DES-CBC (5)
                Hash-Algorithm (2): SHA (2)
                Group-Description (4): Alternate 1024-bit MODP group (2)
                Authentication-Method (3): PSK (1)
                Life-Type (11): Seconds (1)
                Life-Duration (12): Duration-Value (28800)
    Vendor ID payload
        Next payload: NONE (0)
        Length: 20
        Vendor ID: RFC 3706 Detecting Dead IKE Peers (DPD)

0000  00 a0 8e 72 1e 40 00 14 6c a6 ca 37 08 00 45 00   ...r.@..l..7..E.
0010  00 80 00 17 40 00 40 11 fb 86 a5 e3 f9 9d a5 e3   ....@.@.........
0020  f9 6a 01 f4 01 f4 00 6c 8c c1 59 cd d6 a5 1c 35   .j.....l..Y....5
0030  f8 58 be 01 6b 4c 2a d5 b6 9b 01 10 02 00 00 00   .X..kL*.........
0040  00 00 00 00 00 64 0d 00 00 34 00 00 00 01 00 00   .....d...4......
0050  00 01 00 00 00 28 01 01 00 01 00 00 00 20 01 01   .....(....... ..
0060  00 00 80 01 00 05 80 02 00 02 80 04 00 02 80 03   ................
0070  00 01 80 0b 00 01 80 0c 70 80 00 00 00 14 af ca   ........p.......
0080  d7 13 68 a1 f1 c9 6b 86 96 fc 77 57 01 00         ..h...k...wW..

Frame 9 (258 bytes on wire, 258 bytes captured)
    Arrival Time: May  8, 2008 12:50:42.163297000
    Time delta from previous packet: 0.140882000 seconds
    Time since reference or first frame: 9.780394000 seconds
    Frame Number: 9
    Packet Length: 258 bytes
    Capture Length: 258 bytes
    Protocols in frame: eth:ip:udp:isakmp
Ethernet II, Src: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40), Dst: 00:14:6c:a6:ca:37 (00:14:6c:a6:ca:37)
    Destination: 00:14:6c:a6:ca:37 (00:14:6c:a6:ca:37)
    Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.106 (165.227.249.106), Dst: 165.227.249.157 (165.227.249.157)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 244
    Identification: 0x67eb (26603)
    Flags: 0x00
        0... = Reserved bit: Not set
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0xd33e [correct]
        Good: True
        Bad : False
    Source: 165.227.249.106 (165.227.249.106)
    Destination: 165.227.249.157 (165.227.249.157)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 224
    Checksum: 0x3b01 [correct]
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x59CDD6A51C35F858
    Responder cookie: 0xBE016B4C2AD5B69B
    Next payload: Key Exchange (4)
    Version: 1.0
    Exchange type: Identity Protection (Main Mode) (2)
    Flags
        .... ...0 = Not encrypted
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x00000000
    Length: 216
    Key Exchange payload
        Next payload: Nonce (10)
        Length: 132
        Key Exchange Data
    Nonce payload
        Next payload: Vendor ID (13)
        Length: 24
        Nonce Data
    Vendor ID payload
        Next payload: NONE (0)
        Length: 32
        Vendor ID: unknown vendor ID: 0x030000145FF022B68D9CE1FAE460C3306FD7E93400000008...

0000  00 14 6c a6 ca 37 00 a0 8e 72 1e 40 08 00 45 00   ..l..7...r.@..E.
0010  00 f4 67 eb 00 00 40 11 d3 3e a5 e3 f9 6a a5 e3   ..g...@..>...j..
0020  f9 9d 01 f4 01 f4 00 e0 3b 01 59 cd d6 a5 1c 35   ........;.Y....5
0030  f8 58 be 01 6b 4c 2a d5 b6 9b 04 10 02 00 00 00   .X..kL*.........
0040  00 00 00 00 00 d8 0a 00 00 84 d2 a5 0a 35 4f 30   .............5O0
0050  01 5a 1d 5b 22 21 99 2e 60 e3 3f 58 99 5e 4a 88   .Z.["!..`.?X.^J.
0060  9d 66 d7 2a b2 29 0e e0 69 a2 61 47 8f 0d fc 66   .f.*.)..i.aG...f
0070  54 ce c9 d4 82 e9 e8 6a 74 2a 0d b2 5b 99 46 f4   T......jt*..[.F.
0080  7b 92 1f d5 00 1f 1c 90 5c ac d0 3b ad 69 ea 6f   {.......\..;.i.o
0090  67 b0 82 74 7b 23 df 21 ef 58 3c db ba 9b 79 b5   g..t{#.!.X<...y.
00a0  4f 40 4e 5b 47 82 b0 48 5c 79 b0 26 80 a7 c9 c2   O@N[G..H\y.&....
00b0  5b 49 a4 69 aa 2d 68 7a d5 ac 25 12 30 f4 ec 9b   [I.i.-hz..%.0...
00c0  86 38 eb 6a db b3 9c 70 ca 42 0d 00 00 18 5b c3   .8.j...p.B....[.
00d0  31 98 50 22 1e 99 af 9f f1 a1 48 01 a8 c6 d2 68   1.P"......H....h
00e0  0a 0b 00 00 00 20 03 00 00 14 5f f0 22 b6 8d 9c   ..... ...._."...
00f0  e1 fa e4 60 c3 30 6f d7 e9 34 00 00 00 08 00 06   ...`.0o..4......
0100  00 03                                             ..

Frame 10 (222 bytes on wire, 222 bytes captured)
    Arrival Time: May  8, 2008 12:50:42.397861000
    Time delta from previous packet: 0.234564000 seconds
    Time since reference or first frame: 10.014958000 seconds
    Frame Number: 10
    Packet Length: 222 bytes
    Capture Length: 222 bytes
    Protocols in frame: eth:ip:udp:isakmp
Ethernet II, Src: 00:14:6c:a6:ca:37 (00:14:6c:a6:ca:37), Dst: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40)
    Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40)
    Source: 00:14:6c:a6:ca:37 (00:14:6c:a6:ca:37)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.157 (165.227.249.157), Dst: 165.227.249.106 (165.227.249.106)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 208
    Identification: 0x0018 (24)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0xfb35 [correct]
        Good: True
        Bad : False
    Source: 165.227.249.157 (165.227.249.157)
    Destination: 165.227.249.106 (165.227.249.106)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 188
    Checksum: 0x9659 [correct]
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x59CDD6A51C35F858
    Responder cookie: 0xBE016B4C2AD5B69B
    Next payload: Key Exchange (4)
    Version: 1.0
    Exchange type: Identity Protection (Main Mode) (2)
    Flags
        .... ...0 = Not encrypted
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x00000000
    Length: 180
    Key Exchange payload
        Next payload: Nonce (10)
        Length: 132
        Key Exchange Data
    Nonce payload
        Next payload: NONE (0)
        Length: 20
        Nonce Data

0000  00 a0 8e 72 1e 40 00 14 6c a6 ca 37 08 00 45 00   ...r.@..l..7..E.
0010  00 d0 00 18 40 00 40 11 fb 35 a5 e3 f9 9d a5 e3   ....@.@..5......
0020  f9 6a 01 f4 01 f4 00 bc 96 59 59 cd d6 a5 1c 35   .j.......YY....5
0030  f8 58 be 01 6b 4c 2a d5 b6 9b 04 10 02 00 00 00   .X..kL*.........
0040  00 00 00 00 00 b4 0a 00 00 84 fc e2 98 2a b9 9c   .............*..
0050  69 53 fb b0 1a 6a fe 8b 8c 04 a0 9a b0 21 03 00   iS...j.......!..
0060  54 ea 1f 60 b2 f8 72 70 ee 3f fd 43 8c 8a 8e 77   T..`..rp.?.C...w
0070  e7 ee c5 eb 42 99 24 86 79 0d ec 56 13 a9 40 81   ....B.$.y..V..@.
0080  0c 3a 3c 3c ad 03 d8 73 8b f0 fa 2d 7d 8d 3b 4f   .:<<...s...-}.;O
0090  9b 1c a2 17 d8 6e 34 b6 60 e3 dc 07 44 11 3b 4c   .....n4.`...D.;L
00a0  b3 bd 5f 73 a5 e0 c7 e6 d9 14 4b a6 48 42 5a fc   .._s......K.HBZ.
00b0  1c 92 77 7b d9 e7 1d 4b c5 39 cf cf b8 84 b8 df   ..w{...K.9......
00c0  a5 17 8d c6 63 68 08 86 fe 63 00 00 00 14 d5 cb   ....ch...c......
00d0  b0 7b e4 7d 3e 89 47 2f 02 70 cd fa 5c db         .{.}>.G/.p..\.

Frame 11 (134 bytes on wire, 134 bytes captured)
    Arrival Time: May  8, 2008 12:50:42.582527000
    Time delta from previous packet: 0.184666000 seconds
    Time since reference or first frame: 10.199624000 seconds
    Frame Number: 11
    Packet Length: 134 bytes
    Capture Length: 134 bytes
    Protocols in frame: eth:ip:udp:isakmp
Ethernet II, Src: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40), Dst: 00:14:6c:a6:ca:37 (00:14:6c:a6:ca:37)
    Destination: 00:14:6c:a6:ca:37 (00:14:6c:a6:ca:37)
    Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.106 (165.227.249.106), Dst: 165.227.249.157 (165.227.249.157)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 120
    Identification: 0x67ec (26604)
    Flags: 0x00
        0... = Reserved bit: Not set
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0xd3b9 [correct]
        Good: True
        Bad : False
    Source: 165.227.249.106 (165.227.249.106)
    Destination: 165.227.249.157 (165.227.249.157)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 100
    Checksum: 0x5d94 [correct]
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x59CDD6A51C35F858
    Responder cookie: 0xBE016B4C2AD5B69B
    Next payload: Identification (5)
    Version: 1.0
    Exchange type: Identity Protection (Main Mode) (2)
    Flags
        .... ...1 = Encrypted
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x00000000
    Length: 92
    Encrypted payload (64 bytes)

0000  00 14 6c a6 ca 37 00 a0 8e 72 1e 40 08 00 45 00   ..l..7...r.@..E.
0010  00 78 67 ec 00 00 40 11 d3 b9 a5 e3 f9 6a a5 e3   .xg...@......j..
0020  f9 9d 01 f4 01 f4 00 64 5d 94 59 cd d6 a5 1c 35   .......d].Y....5
0030  f8 58 be 01 6b 4c 2a d5 b6 9b 05 10 02 01 00 00   .X..kL*.........
0040  00 00 00 00 00 5c 2a a7 56 02 18 3e ab 1c 39 d3   .....\*.V..>..9.
0050  1f 4d 9e c4 09 f8 af c3 19 27 e1 2c ca 3f 5b f0   .M.......'.,.?[.
0060  a9 81 d0 43 c6 c2 8a 5e d4 d3 eb 44 74 0d 3f b8   ...C...^...Dt.?.
0070  8a 78 2e c3 a7 3f 9e 36 e1 b0 0e 9d 1d dd 8d b9   .x...?.6........
0080  14 0f 1b bd e8 5b                                 .....[

Frame 12 (110 bytes on wire, 110 bytes captured)
    Arrival Time: May  8, 2008 12:50:42.705645000
    Time delta from previous packet: 0.123118000 seconds
    Time since reference or first frame: 10.322742000 seconds
    Frame Number: 12
    Packet Length: 110 bytes
    Capture Length: 110 bytes
    Protocols in frame: eth:ip:udp:isakmp
Ethernet II, Src: 00:14:6c:a6:ca:37 (00:14:6c:a6:ca:37), Dst: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40)
    Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40)
    Source: 00:14:6c:a6:ca:37 (00:14:6c:a6:ca:37)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.157 (165.227.249.157), Dst: 165.227.249.106 (165.227.249.106)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 96
    Identification: 0x0019 (25)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0xfba4 [correct]
        Good: True
        Bad : False
    Source: 165.227.249.157 (165.227.249.157)
    Destination: 165.227.249.106 (165.227.249.106)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 76
    Checksum: 0x357e [correct]
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x59CDD6A51C35F858
    Responder cookie: 0xBE016B4C2AD5B69B
    Next payload: Identification (5)
    Version: 1.0
    Exchange type: Identity Protection (Main Mode) (2)
    Flags
        .... ...1 = Encrypted
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x00000000
    Length: 68
    Encrypted payload (40 bytes)

0000  00 a0 8e 72 1e 40 00 14 6c a6 ca 37 08 00 45 00   ...r.@..l..7..E.
0010  00 60 00 19 40 00 40 11 fb a4 a5 e3 f9 9d a5 e3   .`..@.@.........
0020  f9 6a 01 f4 01 f4 00 4c 35 7e 59 cd d6 a5 1c 35   .j.....L5~Y....5
0030  f8 58 be 01 6b 4c 2a d5 b6 9b 05 10 02 01 00 00   .X..kL*.........
0040  00 00 00 00 00 44 8f df 7d 98 68 71 bc c9 46 b8   .....D..}.hq..F.
0050  76 dc 7b 51 05 30 ee 6f 4c fb 7e a2 b3 80 ba 55   v.{Q.0.oL.~....U
0060  d9 3b ed 49 91 c2 3e 98 17 f7 70 02 78 83         .;.I..>...p.x.

Frame 13 (334 bytes on wire, 334 bytes captured)
    Arrival Time: May  8, 2008 12:50:42.828696000
    Time delta from previous packet: 0.123051000 seconds
    Time since reference or first frame: 10.445793000 seconds
    Frame Number: 13
    Packet Length: 334 bytes
    Capture Length: 334 bytes
    Protocols in frame: eth:ip:udp:isakmp
Ethernet II, Src: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40), Dst: 00:14:6c:a6:ca:37 (00:14:6c:a6:ca:37)
    Destination: 00:14:6c:a6:ca:37 (00:14:6c:a6:ca:37)
    Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.106 (165.227.249.106), Dst: 165.227.249.157 (165.227.249.157)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 320
    Identification: 0x67ed (26605)
    Flags: 0x00
        0... = Reserved bit: Not set
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0xd2f0 [correct]
        Good: True
        Bad : False
    Source: 165.227.249.106 (165.227.249.106)
    Destination: 165.227.249.157 (165.227.249.157)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 300
    Checksum: 0xddb8 [correct]
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x59CDD6A51C35F858
    Responder cookie: 0xBE016B4C2AD5B69B
    Next payload: Hash (8)
    Version: 1.0
    Exchange type: Quick Mode (32)
    Flags
        .... ...1 = Encrypted
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x7614297A
    Length: 292
    Encrypted payload (264 bytes)

0000  00 14 6c a6 ca 37 00 a0 8e 72 1e 40 08 00 45 00   ..l..7...r.@..E.
0010  01 40 67 ed 00 00 40 11 d2 f0 a5 e3 f9 6a a5 e3   .@g...@......j..
0020  f9 9d 01 f4 01 f4 01 2c dd b8 59 cd d6 a5 1c 35   .......,..Y....5
0030  f8 58 be 01 6b 4c 2a d5 b6 9b 08 10 20 01 76 14   .X..kL*..... .v.
0040  29 7a 00 00 01 24 c2 c2 53 bb e9 54 d1 98 16 bb   )z...$..S..T....
0050  0f 6b 1f db 91 09 9b a8 62 75 73 57 f0 80 8f 70   .k......busW...p
0060  b8 a4 16 23 52 83 86 e6 97 a8 cd c0 95 58 b4 d3   ...#R........X..
0070  db 13 22 94 a7 39 45 60 2d 06 0f 1d bc 3d 17 e2   .."..9E`-....=..
0080  f9 ac d2 4e aa 8d c8 cc f4 0b cc 1a 8a 59 3c 0f   ...N.........Y<.
0090  5d 5d 43 ba 24 e4 8f ce f9 46 85 c1 48 61 30 66   ]]C.$....F..Ha0f
00a0  0b 0f d6 cf be c8 3a 01 13 d8 e5 25 0f 56 6c e4   ......:....%.Vl.
00b0  e6 85 78 d5 4c 7f 4d f5 64 b9 0a c5 61 41 c4 ee   ..x.L.M.d...aA..
00c0  3c 77 8e e6 0a 58 8d e4 e8 ab 0c 77 29 03 04 63   <w...X.....w)..c
00d0  a6 ad 9d 3d c3 a4 70 43 8c 50 c0 18 dd 17 c2 ac   ...=..pC.P......
00e0  50 fc 65 f9 d3 a6 40 4e 1f 85 e6 c9 67 a7 5c 17   P.e...@N....g.\.
00f0  8e 54 e1 44 9e 83 79 c1 48 08 98 ff a4 2b 2a e9   .T.D..y.H....+*.
0100  c8 1b e6 4d aa 81 fe 6c b5 db ce 45 0e 48 5c e7   ...M...l...E.H\.
0110  ec c6 c8 dd 45 90 18 c5 21 c7 1e c2 32 09 25 d7   ....E...!...2.%.
0120  b1 2a 4d b7 af 26 91 39 02 bc 4c b8 32 29 61 1b   .*M..&.9..L.2)a.
0130  9f dd b0 b2 9f 38 90 5e 45 5d 6c 5b 63 83 c9 cb   .....8.^E]l[c...
0140  5b 37 61 c6 b1 99 cd cf ac 4c 21 5c b0 37         [7a......L!\.7

Frame 14 (334 bytes on wire, 334 bytes captured)
    Arrival Time: May  8, 2008 12:50:43.155202000
    Time delta from previous packet: 0.326506000 seconds
    Time since reference or first frame: 10.772299000 seconds
    Frame Number: 14
    Packet Length: 334 bytes
    Capture Length: 334 bytes
    Protocols in frame: eth:ip:udp:isakmp
Ethernet II, Src: 00:14:6c:a6:ca:37 (00:14:6c:a6:ca:37), Dst: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40)
    Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40)
    Source: 00:14:6c:a6:ca:37 (00:14:6c:a6:ca:37)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.157 (165.227.249.157), Dst: 165.227.249.106 (165.227.249.106)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 320
    Identification: 0x001a (26)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0xfac3 [correct]
        Good: True
        Bad : False
    Source: 165.227.249.157 (165.227.249.157)
    Destination: 165.227.249.106 (165.227.249.106)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 300
    Checksum: 0x496b [correct]
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x59CDD6A51C35F858
    Responder cookie: 0xBE016B4C2AD5B69B
    Next payload: Hash (8)
    Version: 1.0
    Exchange type: Quick Mode (32)
    Flags
        .... ...1 = Encrypted
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x7614297A
    Length: 292
    Encrypted payload (264 bytes)

0000  00 a0 8e 72 1e 40 00 14 6c a6 ca 37 08 00 45 00   ...r.@..l..7..E.
0010  01 40 00 1a 40 00 40 11 fa c3 a5 e3 f9 9d a5 e3   .@..@.@.........
0020  f9 6a 01 f4 01 f4 01 2c 49 6b 59 cd d6 a5 1c 35   .j.....,IkY....5
0030  f8 58 be 01 6b 4c 2a d5 b6 9b 08 10 20 01 76 14   .X..kL*..... .v.
0040  29 7a 00 00 01 24 6b 61 a5 d4 30 4b 54 3f df d4   )z...$ka..0KT?..
0050  13 40 4a 8f 36 12 88 c5 5c b5 4f 6b bc 94 91 a3   .@J.6...\.Ok....
0060  3b 69 d5 77 c9 4b bb e7 c7 9d 71 27 26 6c 94 f1   ;i.w.K....q'&l..
0070  6a f1 d5 f9 2a ab e4 89 10 c8 2b 5f d0 0e ee fc   j...*.....+_....
0080  67 86 a1 65 3c ad fb 6b 2d b2 a7 de d6 ac 09 d7   g..e<..k-.......
0090  61 b6 91 77 0d 45 f1 f0 b9 80 1e f2 91 ca b6 4b   a..w.E.........K
00a0  df 6a ff 6e 7f b1 b3 7a 9b 1f c5 6c ae 48 7f a9   .j.n...z...l.H..
00b0  75 46 41 fc da f7 a8 13 78 25 c0 43 6b dc a0 a7   uFA.....x%.Ck...
00c0  5b c1 8b 39 89 28 8c c0 aa 8e c7 4f ec 21 96 b4   [..9.(.....O.!..
00d0  60 7d e3 e6 5e e6 38 2d e7 40 6e 21 09 d6 04 9c   `}..^.8-.@n!....
00e0  67 88 ae 67 d2 2d 8e 15 a0 11 24 64 5f b1 e0 27   g..g.-....$d_..'
00f0  ea a1 91 64 67 40 0e 66 ca 31 b4 0c 19 f3 ed 84   ...dg@.f.1......
0100  e5 14 c2 53 3a 2c 58 00 ac 0e dd d9 c8 90 68 e6   ...S:,X.......h.
0110  73 c8 12 70 9c 8c fd 15 bf 60 15 52 17 71 0b e3   s..p.....`.R.q..
0120  1a 7e 64 35 1b 1b 88 3d 60 e6 38 49 04 67 57 3c   .~d5...=`.8I.gW<
0130  f6 2f c9 a6 1e 49 ec d7 ca 0c 62 90 7e a8 b2 9a   ./...I....b.~...
0140  f0 4e 7d 3a 7f 45 73 9a 39 aa 64 fc 5e 9e         .N}:.Es.9.d.^.

Frame 15 (94 bytes on wire, 94 bytes captured)
    Arrival Time: May  8, 2008 12:50:43.323843000
    Time delta from previous packet: 0.168641000 seconds
    Time since reference or first frame: 10.940940000 seconds
    Frame Number: 15
    Packet Length: 94 bytes
    Capture Length: 94 bytes
    Protocols in frame: eth:ip:udp:isakmp
Ethernet II, Src: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40), Dst: 00:14:6c:a6:ca:37 (00:14:6c:a6:ca:37)
    Destination: 00:14:6c:a6:ca:37 (00:14:6c:a6:ca:37)
    Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.106 (165.227.249.106), Dst: 165.227.249.157 (165.227.249.157)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 80
    Identification: 0x67ee (26606)
    Flags: 0x00
        0... = Reserved bit: Not set
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0xd3df [correct]
        Good: True
        Bad : False
    Source: 165.227.249.106 (165.227.249.106)
    Destination: 165.227.249.157 (165.227.249.157)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 60
    Checksum: 0x274d [correct]
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x59CDD6A51C35F858
    Responder cookie: 0xBE016B4C2AD5B69B
    Next payload: Hash (8)
    Version: 1.0
    Exchange type: Quick Mode (32)
    Flags
        .... ...1 = Encrypted
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x7614297A
    Length: 52
    Encrypted payload (24 bytes)

0000  00 14 6c a6 ca 37 00 a0 8e 72 1e 40 08 00 45 00   ..l..7...r.@..E.
0010  00 50 67 ee 00 00 40 11 d3 df a5 e3 f9 6a a5 e3   .Pg...@......j..
0020  f9 9d 01 f4 01 f4 00 3c 27 4d 59 cd d6 a5 1c 35   .......<'MY....5
0030  f8 58 be 01 6b 4c 2a d5 b6 9b 08 10 20 01 76 14   .X..kL*..... .v.
0040  29 7a 00 00 00 34 d7 07 ea 04 92 a5 5f f1 17 c5   )z...4......_...
0050  9b 37 b1 be 50 e2 33 b6 46 28 0d b0 8d 0d         .7..P.3.F(....

Frame 16 (146 bytes on wire, 146 bytes captured)
    Arrival Time: May  8, 2008 12:50:43.409992000
    Time delta from previous packet: 0.086149000 seconds
    Time since reference or first frame: 11.027089000 seconds
    Frame Number: 16
    Packet Length: 146 bytes
    Capture Length: 146 bytes
    Protocols in frame: eth:ip:udp:isakmp
Ethernet II, Src: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40), Dst: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a)
    Destination: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a)
    Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.106 (165.227.249.106), Dst: 165.227.249.130 (165.227.249.130)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 132
    Identification: 0x67ef (26607)
    Flags: 0x00
        0... = Reserved bit: Not set
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0xd3c5 [correct]
        Good: True
        Bad : False
    Source: 165.227.249.106 (165.227.249.106)
    Destination: 165.227.249.130 (165.227.249.130)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 112
    Checksum: 0xcfa4 [correct]
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x23AE9025A2AE35CD
    Responder cookie: 0x0000000000000000
    Next payload: Security Association (1)
    Version: 1.0
    Exchange type: Identity Protection (Main Mode) (2)
    Flags
        .... ...0 = Not encrypted
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x00000000
    Length: 104
    Security Association payload
        Next payload: Vendor ID (13)
        Length: 56
        Domain of interpretation: IPSEC (1)
        Situation: IDENTITY (1)
        Proposal payload # 1
            Next payload: NONE (0)
            Length: 44
            Proposal number: 1
            Protocol ID: ISAKMP (1)
            SPI size: 0
            Number of transforms: 1
            Transform payload # 1
                Next payload: NONE (0)
                Length: 36
                Transform number: 1
                Transform ID: KEY_IKE (1)
                Encryption-Algorithm (1): AES-CBC (7)
                Key-Length (14): Key-Length (128)
                Hash-Algorithm (2): SHA (2)
                Group-Description (4): Alternate 1024-bit MODP group (2)
                Authentication-Method (3): PSK (1)
                Life-Type (11): Seconds (1)
                Life-Duration (12): Duration-Value (28800)
    Vendor ID payload
        Next payload: NONE (0)
        Length: 20
        Vendor ID: RFC 3706 Detecting Dead IKE Peers (DPD)

0000  00 0c 29 64 f8 4a 00 a0 8e 72 1e 40 08 00 45 00   ..)d.J...r.@..E.
0010  00 84 67 ef 00 00 40 11 d3 c5 a5 e3 f9 6a a5 e3   ..g...@......j..
0020  f9 82 01 f4 01 f4 00 70 cf a4 23 ae 90 25 a2 ae   .......p..#..%..
0030  35 cd 00 00 00 00 00 00 00 00 01 10 02 00 00 00   5...............
0040  00 00 00 00 00 68 0d 00 00 38 00 00 00 01 00 00   .....h...8......
0050  00 01 00 00 00 2c 01 01 00 01 00 00 00 24 01 01   .....,.......$..
0060  00 00 80 01 00 07 80 0e 00 80 80 02 00 02 80 04   ................
0070  00 02 80 03 00 01 80 0b 00 01 80 0c 70 80 00 00   ............p...
0080  00 14 af ca d7 13 68 a1 f1 c9 6b 86 96 fc 77 57   ......h...k...wW
0090  01 00                                             ..

Frame 17 (126 bytes on wire, 126 bytes captured)
    Arrival Time: May  8, 2008 12:50:43.833693000
    Time delta from previous packet: 0.423701000 seconds
    Time since reference or first frame: 11.450790000 seconds
    Frame Number: 17
    Packet Length: 126 bytes
    Capture Length: 126 bytes
    Protocols in frame: eth:ip:esp:data
Ethernet II, Src: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40), Dst: 00:14:6c:a6:ca:37 (00:14:6c:a6:ca:37)
    Destination: 00:14:6c:a6:ca:37 (00:14:6c:a6:ca:37)
    Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.106 (165.227.249.106), Dst: 165.227.249.157 (165.227.249.157)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 112
    Identification: 0x67f0 (26608)
    Flags: 0x00
        0... = Reserved bit: Not set
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: ESP (0x32)
    Header checksum: 0xd39c [correct]
        Good: True
        Bad : False
    Source: 165.227.249.106 (165.227.249.106)
    Destination: 165.227.249.157 (165.227.249.157)
Encapsulating Security Payload
    SPI: 0xe6570302
    Sequence: 1
    Data (84 bytes)

0000  00 14 6c a6 ca 37 00 a0 8e 72 1e 40 08 00 45 00   ..l..7...r.@..E.
0010  00 70 67 f0 00 00 40 32 d3 9c a5 e3 f9 6a a5 e3   .pg...@2.....j..
0020  f9 9d e6 57 03 02 00 00 00 01 35 aa 78 7e b8 b3   ...W......5.x~..
0030  cc 4a ec 50 8c 36 32 f9 be a0 5f d9 c1 4a f6 0e   .J.P.62..._..J..
0040  2f 06 bf 4f a6 43 83 c0 d3 27 14 f5 e4 99 7d a0   /..O.C...'....}.
0050  f5 43 39 31 65 ff 4f 76 d2 90 9c 88 80 5b 2f d7   .C91e.Ov.....[/.
0060  eb c6 50 73 2d c9 b0 23 c2 9e b0 f7 2a 6a 5f bb   ..Ps-..#....*j_.
0070  d2 59 37 6f 82 13 c4 c6 9e aa 34 0a ed d1         .Y7o......4...

Frame 18 (126 bytes on wire, 126 bytes captured)
    Arrival Time: May  8, 2008 12:50:43.995940000
    Time delta from previous packet: 0.162247000 seconds
    Time since reference or first frame: 11.613037000 seconds
    Frame Number: 18
    Packet Length: 126 bytes
    Capture Length: 126 bytes
    Protocols in frame: eth:ip:esp:data
Ethernet II, Src: 00:14:6c:a6:ca:37 (00:14:6c:a6:ca:37), Dst: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40)
    Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40)
    Source: 00:14:6c:a6:ca:37 (00:14:6c:a6:ca:37)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.157 (165.227.249.157), Dst: 165.227.249.106 (165.227.249.106)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 112
    Identification: 0x2d50 (11600)
    Flags: 0x00
        0... = Reserved bit: Not set
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: ESP (0x32)
    Header checksum: 0x0e3d [correct]
        Good: True
        Bad : False
    Source: 165.227.249.157 (165.227.249.157)
    Destination: 165.227.249.106 (165.227.249.106)
Encapsulating Security Payload
    SPI: 0x1a56b800
    Sequence: 1
    Data (84 bytes)

0000  00 a0 8e 72 1e 40 00 14 6c a6 ca 37 08 00 45 00   ...r.@..l..7..E.
0010  00 70 2d 50 00 00 40 32 0e 3d a5 e3 f9 9d a5 e3   .p-P..@2.=......
0020  f9 6a 1a 56 b8 00 00 00 00 01 6c d6 1d 14 9d 8c   .j.V......l.....
0030  19 bb da 30 5f bf bc 4b db 84 7a d5 99 61 bc 8e   ...0_..K..z..a..
0040  cb 4e 7f 4d 49 70 10 b3 46 89 b0 5b 71 27 ba f9   .N.MIp..F..[q'..
0050  be ca aa 45 62 dc cc fb 48 38 c5 ac ff 2d f5 6d   ...Eb...H8...-.m
0060  22 21 7c 44 53 54 25 1f 4a fa 69 77 1b 4e 5b 9b   "!|DST%.J.iw.N[.
0070  27 c3 b1 3c 51 fe 78 42 2c 21 0c 87 cd 0a         '..<Q.xB,!....

Frame 19 (126 bytes on wire, 126 bytes captured)
    Arrival Time: May  8, 2008 12:50:43.995942000
    Time delta from previous packet: 0.000002000 seconds
    Time since reference or first frame: 11.613039000 seconds
    Frame Number: 19
    Packet Length: 126 bytes
    Capture Length: 126 bytes
    Protocols in frame: eth:ip:esp:data
Ethernet II, Src: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40), Dst: 00:14:6c:a6:ca:37 (00:14:6c:a6:ca:37)
    Destination: 00:14:6c:a6:ca:37 (00:14:6c:a6:ca:37)
    Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.106 (165.227.249.106), Dst: 165.227.249.157 (165.227.249.157)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 112
    Identification: 0x67f1 (26609)
    Flags: 0x00
        0... = Reserved bit: Not set
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: ESP (0x32)
    Header checksum: 0xd39b [correct]
        Good: True
        Bad : False
    Source: 165.227.249.106 (165.227.249.106)
    Destination: 165.227.249.157 (165.227.249.157)
Encapsulating Security Payload
    SPI: 0xe6570302
    Sequence: 2
    Data (84 bytes)

0000  00 14 6c a6 ca 37 00 a0 8e 72 1e 40 08 00 45 00   ..l..7...r.@..E.
0010  00 70 67 f1 00 00 40 32 d3 9b a5 e3 f9 6a a5 e3   .pg...@2.....j..
0020  f9 9d e6 57 03 02 00 00 00 02 11 13 a7 5d 6d d3   ...W.........]m.
0030  50 21 1c 51 86 22 76 ab 55 dc ee 8e 08 05 69 ef   P!.Q."v.U.....i.
0040  64 36 4a 83 69 b5 75 c3 38 bd 76 5c 51 c3 93 94   d6J.i.u.8.v\Q...
0050  d7 b1 88 d5 d2 6f 22 7f e2 ca a9 b5 49 a0 9e 4e   .....o".....I..N
0060  95 43 b1 35 90 fd 79 49 b0 91 c8 73 b1 9c 49 9f   .C.5..yI...s..I.
0070  95 99 b4 d8 c1 cb 81 58 da b4 67 8a 7d 87         .......X..g.}.

Frame 20 (126 bytes on wire, 126 bytes captured)
    Arrival Time: May  8, 2008 12:50:44.115914000
    Time delta from previous packet: 0.119972000 seconds
    Time since reference or first frame: 11.733011000 seconds
    Frame Number: 20
    Packet Length: 126 bytes
    Capture Length: 126 bytes
    Protocols in frame: eth:ip:esp:data
Ethernet II, Src: 00:14:6c:a6:ca:37 (00:14:6c:a6:ca:37), Dst: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40)
    Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40)
    Source: 00:14:6c:a6:ca:37 (00:14:6c:a6:ca:37)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.157 (165.227.249.157), Dst: 165.227.249.106 (165.227.249.106)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 112
    Identification: 0x2d51 (11601)
    Flags: 0x00
        0... = Reserved bit: Not set
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: ESP (0x32)
    Header checksum: 0x0e3c [correct]
        Good: True
        Bad : False
    Source: 165.227.249.157 (165.227.249.157)
    Destination: 165.227.249.106 (165.227.249.106)
Encapsulating Security Payload
    SPI: 0x1a56b800
    Sequence: 2
    Data (84 bytes)

0000  00 a0 8e 72 1e 40 00 14 6c a6 ca 37 08 00 45 00   ...r.@..l..7..E.
0010  00 70 2d 51 00 00 40 32 0e 3c a5 e3 f9 9d a5 e3   .p-Q..@2.<......
0020  f9 6a 1a 56 b8 00 00 00 00 02 4d ac d9 8f 76 fb   .j.V......M...v.
0030  10 85 bf 32 33 32 ac 42 3c 5b 5b ca 1d 9a c7 95   ...232.B<[[.....
0040  ba 2d 5c e0 56 81 b7 ce 2a 10 b4 1c 26 2e 38 a7   .-\.V...*...&.8.
0050  75 0f 71 30 17 6f 3f f0 10 ad bb c9 9b 94 55 96   u.q0.o?.......U.
0060  6b 16 d2 07 f3 c0 35 a9 a6 d1 0f ec 61 f2 b7 85   k.....5.....a...
0070  19 77 ab 88 c7 41 8a 20 69 12 1a 14 1d 58         .w...A. i....X

Frame 21 (126 bytes on wire, 126 bytes captured)
    Arrival Time: May  8, 2008 12:50:45.002294000
    Time delta from previous packet: 0.886380000 seconds
    Time since reference or first frame: 12.619391000 seconds
    Frame Number: 21
    Packet Length: 126 bytes
    Capture Length: 126 bytes
    Protocols in frame: eth:ip:esp:data
Ethernet II, Src: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40), Dst: 00:14:6c:a6:ca:37 (00:14:6c:a6:ca:37)
    Destination: 00:14:6c:a6:ca:37 (00:14:6c:a6:ca:37)
    Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.106 (165.227.249.106), Dst: 165.227.249.157 (165.227.249.157)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 112
    Identification: 0x67f2 (26610)
    Flags: 0x00
        0... = Reserved bit: Not set
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: ESP (0x32)
    Header checksum: 0xd39a [correct]
        Good: True
        Bad : False
    Source: 165.227.249.106 (165.227.249.106)
    Destination: 165.227.249.157 (165.227.249.157)
Encapsulating Security Payload
    SPI: 0xe6570302
    Sequence: 3
    Data (84 bytes)

0000  00 14 6c a6 ca 37 00 a0 8e 72 1e 40 08 00 45 00   ..l..7...r.@..E.
0010  00 70 67 f2 00 00 40 32 d3 9a a5 e3 f9 6a a5 e3   .pg...@2.....j..
0020  f9 9d e6 57 03 02 00 00 00 03 74 10 f2 52 06 21   ...W......t..R.!
0030  95 04 80 84 b6 d8 47 c6 87 c6 e9 d0 2f 55 bb cb   ......G...../U..
0040  49 7f 4f f4 75 41 6d d0 bf d6 60 b5 4e c3 01 c1   I.O.uAm...`.N...
0050  e6 f9 53 07 9d ce 49 fd 22 86 bd 5f 48 e3 1c 3f   ..S...I.".._H..?
0060  33 59 6c 6b ce ed 98 ca 86 d0 60 f7 60 3b f1 6d   3Ylk......`.`;.m
0070  c2 21 6c 66 a8 93 fe cb 29 17 2e c6 14 2e         .!lf....).....

Frame 22 (126 bytes on wire, 126 bytes captured)
    Arrival Time: May  8, 2008 12:50:45.142892000
    Time delta from previous packet: 0.140598000 seconds
    Time since reference or first frame: 12.759989000 seconds
    Frame Number: 22
    Packet Length: 126 bytes
    Capture Length: 126 bytes
    Protocols in frame: eth:ip:esp:data
Ethernet II, Src: 00:14:6c:a6:ca:37 (00:14:6c:a6:ca:37), Dst: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40)
    Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40)
    Source: 00:14:6c:a6:ca:37 (00:14:6c:a6:ca:37)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.157 (165.227.249.157), Dst: 165.227.249.106 (165.227.249.106)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 112
    Identification: 0x2d52 (11602)
    Flags: 0x00
        0... = Reserved bit: Not set
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: ESP (0x32)
    Header checksum: 0x0e3b [correct]
        Good: True
        Bad : False
    Source: 165.227.249.157 (165.227.249.157)
    Destination: 165.227.249.106 (165.227.249.106)
Encapsulating Security Payload
    SPI: 0x1a56b800
    Sequence: 3
    Data (84 bytes)

0000  00 a0 8e 72 1e 40 00 14 6c a6 ca 37 08 00 45 00   ...r.@..l..7..E.
0010  00 70 2d 52 00 00 40 32 0e 3b a5 e3 f9 9d a5 e3   .p-R..@2.;......
0020  f9 6a 1a 56 b8 00 00 00 00 03 d3 b9 35 2d b4 2d   .j.V........5-.-
0030  da 87 77 20 5d f7 e4 67 b2 6a fe 56 1a dd c4 a8   ..w ]..g.j.V....
0040  07 b5 52 69 5d 41 9b c9 50 f7 48 2d 34 0f df fa   ..Ri]A..P.H-4...
0050  3b 3b 13 a2 63 ae 01 5b 2a a9 e5 13 de e6 b0 d0   ;;..c..[*.......
0060  a5 c5 42 37 f9 fc ac 45 20 9b 3b ba 3d a8 ad e4   ..B7...E .;.=...
0070  56 2e 56 85 e7 a1 31 ea 7f 31 a8 b9 47 cf         V.V...1..1..G.

Frame 23 (126 bytes on wire, 126 bytes captured)
    Arrival Time: May  8, 2008 12:50:46.027947000
    Time delta from previous packet: 0.885055000 seconds
    Time since reference or first frame: 13.645044000 seconds
    Frame Number: 23
    Packet Length: 126 bytes
    Capture Length: 126 bytes
    Protocols in frame: eth:ip:esp:data
Ethernet II, Src: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40), Dst: 00:14:6c:a6:ca:37 (00:14:6c:a6:ca:37)
    Destination: 00:14:6c:a6:ca:37 (00:14:6c:a6:ca:37)
    Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.106 (165.227.249.106), Dst: 165.227.249.157 (165.227.249.157)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 112
    Identification: 0x67f3 (26611)
    Flags: 0x00
        0... = Reserved bit: Not set
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: ESP (0x32)
    Header checksum: 0xd399 [correct]
        Good: True
        Bad : False
    Source: 165.227.249.106 (165.227.249.106)
    Destination: 165.227.249.157 (165.227.249.157)
Encapsulating Security Payload
    SPI: 0xe6570302
    Sequence: 4
    Data (84 bytes)

0000  00 14 6c a6 ca 37 00 a0 8e 72 1e 40 08 00 45 00   ..l..7...r.@..E.
0010  00 70 67 f3 00 00 40 32 d3 99 a5 e3 f9 6a a5 e3   .pg...@2.....j..
0020  f9 9d e6 57 03 02 00 00 00 04 73 e6 a5 8f bb 8a   ...W......s.....
0030  7f 2b 66 38 c7 b4 40 4d 85 8c f1 70 54 c5 e7 89   .+f8..@M...pT...
0040  be 42 0e 67 31 af e9 9d 6a 8f 64 75 8f 71 75 6b   .B.g1...j.du.quk
0050  df 5b 97 01 2e 1a 15 cf bc 01 5e 79 dd 7f 23 47   .[........^y..#G
0060  e5 92 51 ee 39 84 3c f4 4f ef 0a 40 21 11 ca 93   ..Q.9.<.O..@!...
0070  38 5c 82 3a 26 42 85 e4 44 3e f6 76 25 b0         8\.:&B..D>.v%.

Frame 24 (126 bytes on wire, 126 bytes captured)
    Arrival Time: May  8, 2008 12:50:46.163853000
    Time delta from previous packet: 0.135906000 seconds
    Time since reference or first frame: 13.780950000 seconds
    Frame Number: 24
    Packet Length: 126 bytes
    Capture Length: 126 bytes
    Protocols in frame: eth:ip:esp:data
Ethernet II, Src: 00:14:6c:a6:ca:37 (00:14:6c:a6:ca:37), Dst: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40)
    Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40)
    Source: 00:14:6c:a6:ca:37 (00:14:6c:a6:ca:37)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.157 (165.227.249.157), Dst: 165.227.249.106 (165.227.249.106)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 112
    Identification: 0x2d53 (11603)
    Flags: 0x00
        0... = Reserved bit: Not set
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: ESP (0x32)
    Header checksum: 0x0e3a [correct]
        Good: True
        Bad : False
    Source: 165.227.249.157 (165.227.249.157)
    Destination: 165.227.249.106 (165.227.249.106)
Encapsulating Security Payload
    SPI: 0x1a56b800
    Sequence: 4
    Data (84 bytes)

0000  00 a0 8e 72 1e 40 00 14 6c a6 ca 37 08 00 45 00   ...r.@..l..7..E.
0010  00 70 2d 53 00 00 40 32 0e 3a a5 e3 f9 9d a5 e3   .p-S..@2.:......
0020  f9 6a 1a 56 b8 00 00 00 00 04 f4 33 5e 86 7c cd   .j.V.......3^.|.
0030  f3 05 e2 a5 fb e8 ab a9 19 f8 d8 7d 8e 8a 55 dd   ...........}..U.
0040  56 cb cf 7d ce 13 8c c5 5e bd c6 72 bf a1 5c e0   V..}....^..r..\.
0050  13 8d a3 94 de ad d0 37 16 23 b6 60 d3 67 e1 a5   .......7.#.`.g..
0060  0b 01 21 34 84 29 11 ea dd 7b 9c 3b e6 a6 fd 40   ..!4.)...{.;...@
0070  8c 60 ff aa f1 35 85 6c 2d 2d 20 e2 63 82         .`...5.l-- .c.

Frame 25 (146 bytes on wire, 146 bytes captured)
    Arrival Time: May  8, 2008 12:50:50.883075000
    Time delta from previous packet: 4.719222000 seconds
    Time since reference or first frame: 18.500172000 seconds
    Frame Number: 25
    Packet Length: 146 bytes
    Capture Length: 146 bytes
    Protocols in frame: eth:ip:udp:isakmp
Ethernet II, Src: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40), Dst: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a)
    Destination: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a)
    Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.106 (165.227.249.106), Dst: 165.227.249.130 (165.227.249.130)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 132
    Identification: 0x67f4 (26612)
    Flags: 0x00
        0... = Reserved bit: Not set
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0xd3c0 [correct]
        Good: True
        Bad : False
    Source: 165.227.249.106 (165.227.249.106)
    Destination: 165.227.249.130 (165.227.249.130)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 112
    Checksum: 0x43e4 [correct]
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x23AE9025A2AE35CD
    Responder cookie: 0x0000000000000000
    Next payload: Delete (12)
    Version: 1.0
    Exchange type: Informational (5)
    Flags
        .... ...0 = Not encrypted
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x00000000
    Length: 56
    Delete payload
        Next payload: NONE (0)
        Length: 28
        Domain of Interpretation: IPSEC (1)
        Protocol ID: ISAKMP (1)
        SPI size: 16
        Number of SPIs: 1
        SPI: 0x23AE9025A2AE35CD0000000000000000

0000  00 0c 29 64 f8 4a 00 a0 8e 72 1e 40 08 00 45 00   ..)d.J...r.@..E.
0010  00 84 67 f4 00 00 40 11 d3 c0 a5 e3 f9 6a a5 e3   ..g...@......j..
0020  f9 82 01 f4 01 f4 00 70 43 e4 23 ae 90 25 a2 ae   .......pC.#..%..
0030  35 cd 00 00 00 00 00 00 00 00 0c 10 05 00 00 00   5...............
0040  00 00 00 00 00 38 00 00 00 1c 00 00 00 01 01 10   .....8..........
0050  00 01 23 ae 90 25 a2 ae 35 cd 00 00 00 00 00 00   ..#..%..5.......
0060  00 00 80 01 00 07 80 0e 00 80 80 02 00 02 80 04   ................
0070  00 02 80 03 00 01 80 0b 00 01 80 0c 70 80 00 00   ............p...
0080  00 14 af ca d7 13 68 a1 f1 c9 6b 86 96 fc 77 57   ......h...k...wW
0090  01 00                                             ..

Frame 26 (146 bytes on wire, 146 bytes captured)
    Arrival Time: May  8, 2008 12:50:56.209014000
    Time delta from previous packet: 5.325939000 seconds
    Time since reference or first frame: 23.826111000 seconds
    Frame Number: 26
    Packet Length: 146 bytes
    Capture Length: 146 bytes
    Protocols in frame: eth:ip:udp:isakmp
Ethernet II, Src: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40), Dst: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a)
    Destination: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a)
    Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.106 (165.227.249.106), Dst: 165.227.249.130 (165.227.249.130)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 132
    Identification: 0x67f5 (26613)
    Flags: 0x00
        0... = Reserved bit: Not set
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0xd3bf [correct]
        Good: True
        Bad : False
    Source: 165.227.249.106 (165.227.249.106)
    Destination: 165.227.249.130 (165.227.249.130)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 112
    Checksum: 0x013d [correct]
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x23AE9025830D23D6
    Responder cookie: 0x0000000000000000
    Next payload: Security Association (1)
    Version: 1.0
    Exchange type: Identity Protection (Main Mode) (2)
    Flags
        .... ...0 = Not encrypted
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x00000000
    Length: 104
    Security Association payload
        Next payload: Vendor ID (13)
        Length: 56
        Domain of interpretation: IPSEC (1)
        Situation: IDENTITY (1)
        Proposal payload # 1
            Next payload: NONE (0)
            Length: 44
            Proposal number: 1
            Protocol ID: ISAKMP (1)
            SPI size: 0
            Number of transforms: 1
            Transform payload # 1
                Next payload: NONE (0)
                Length: 36
                Transform number: 1
                Transform ID: KEY_IKE (1)
                Encryption-Algorithm (1): AES-CBC (7)
                Key-Length (14): Key-Length (128)
                Hash-Algorithm (2): SHA (2)
                Group-Description (4): Alternate 1024-bit MODP group (2)
                Authentication-Method (3): PSK (1)
                Life-Type (11): Seconds (1)
                Life-Duration (12): Duration-Value (28800)
    Vendor ID payload
        Next payload: NONE (0)
        Length: 20
        Vendor ID: RFC 3706 Detecting Dead IKE Peers (DPD)

0000  00 0c 29 64 f8 4a 00 a0 8e 72 1e 40 08 00 45 00   ..)d.J...r.@..E.
0010  00 84 67 f5 00 00 40 11 d3 bf a5 e3 f9 6a a5 e3   ..g...@......j..
0020  f9 82 01 f4 01 f4 00 70 01 3d 23 ae 90 25 83 0d   .......p.=#..%..
0030  23 d6 00 00 00 00 00 00 00 00 01 10 02 00 00 00   #...............
0040  00 00 00 00 00 68 0d 00 00 38 00 00 00 01 00 00   .....h...8......
0050  00 01 00 00 00 2c 01 01 00 01 00 00 00 24 01 01   .....,.......$..
0060  00 00 80 01 00 07 80 0e 00 80 80 02 00 02 80 04   ................
0070  00 02 80 03 00 01 80 0b 00 01 80 0c 70 80 00 00   ............p...
0080  00 14 af ca d7 13 68 a1 f1 c9 6b 86 96 fc 77 57   ......h...k...wW
0090  01 00                                             ..