Frame 1 (130 bytes on wire, 130 bytes captured) Arrival Time: Dec 7, 2004 11:04:33.284018000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:01:02:46:6a:04, Dst: 00:0f:3d:10:fc:2c Destination: 00:0f:3d:10:fc:2c (00:0f:3d:10:fc:2c) Source: 00:01:02:46:6a:04 (00:01:02:46:6a:04) Type: IP (0x0800) Frame check sequence: 0x9c9625a8 (correct) Internet Protocol, Src Addr: 165.227.249.134 (165.227.249.134), Dst Addr: 165.227.249.142 (165.227.249.142) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0026 (38) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3b7b (correct) Source: 165.227.249.134 (165.227.249.134) Destination: 165.227.249.142 (165.227.249.142) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 92 Checksum: 0x4fab (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x607EB400427B1F28 Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 84 Security Association payload Next payload: NONE (0) Length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 44 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 36 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) 0000 00 0f 3d 10 fc 2c 00 01 02 46 6a 04 08 00 45 00 ..=..,...Fj...E. 0010 00 70 00 26 00 00 40 11 3b 7b a5 e3 f9 86 a5 e3 .p.&..@.;{...... 0020 f9 8e 01 f4 01 f4 00 5c 4f ab 60 7e b4 00 42 7b .......\O.`~..B{ 0030 1f 28 00 00 00 00 00 00 00 00 01 10 02 00 00 00 .(.............. 0040 00 00 00 00 00 54 00 00 00 38 00 00 00 01 00 00 .....T...8...... 0050 00 01 00 00 00 2c 01 01 00 01 00 00 00 24 01 01 .....,.......$.. 0060 00 00 80 01 00 05 80 02 00 02 80 03 00 01 80 04 ................ 0070 00 02 80 0b 00 01 00 0c 00 04 00 00 70 80 9c 96 ............p... 0080 25 a8 %. Frame 2 (270 bytes on wire, 270 bytes captured) Arrival Time: Dec 7, 2004 11:04:33.459568000 Time delta from previous packet: 0.175550000 seconds Time since reference or first frame: 0.175550000 seconds Frame Number: 2 Packet Length: 270 bytes Capture Length: 270 bytes Ethernet II, Src: 00:0f:3d:10:fc:2c, Dst: 00:01:02:46:6a:04 Destination: 00:01:02:46:6a:04 (00:01:02:46:6a:04) Source: 00:0f:3d:10:fc:2c (00:0f:3d:10:fc:2c) Type: IP (0x0800) Frame check sequence: 0x7cd988a9 (correct) Internet Protocol, Src Addr: 165.227.249.142 (165.227.249.142), Dst Addr: 165.227.249.134 (165.227.249.134) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 252 Identification: 0xab62 (43874) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: UDP (0x11) Header checksum: 0xd0b1 (correct) Source: 165.227.249.142 (165.227.249.142) Destination: 165.227.249.134 (165.227.249.134) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 232 Checksum: 0x2997 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x607EB400427B1F28 Responder cookie: 0x4DD99107F1E37827 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 224 Security Association payload Next payload: Vendor ID (13) Length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 44 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 36 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-dpd-00.txt Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-stenberg-ipsec-nat-traversal-01 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-stenberg-ipsec-nat-traversal-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-03 0000 00 01 02 46 6a 04 00 0f 3d 10 fc 2c 08 00 45 00 ...Fj...=..,..E. 0010 00 fc ab 62 00 00 ff 11 d0 b1 a5 e3 f9 8e a5 e3 ...b............ 0020 f9 86 01 f4 01 f4 00 e8 29 97 60 7e b4 00 42 7b ........).`~..B{ 0030 1f 28 4d d9 91 07 f1 e3 78 27 01 10 02 00 00 00 .(M.....x'...... 0040 00 00 00 00 00 e0 0d 00 00 38 00 00 00 01 00 00 .........8...... 0050 00 01 00 00 00 2c 01 01 00 01 00 00 00 24 01 01 .....,.......$.. 0060 00 00 80 01 00 05 80 02 00 02 80 03 00 01 80 04 ................ 0070 00 02 80 0b 00 01 00 0c 00 04 00 00 70 80 0d 00 ............p... 0080 00 14 af ca d7 13 68 a1 f1 c9 6b 86 96 fc 77 57 ......h...k...wW 0090 01 00 0d 00 00 14 27 ba b5 dc 01 ea 07 60 ea 4e ......'......`.N 00a0 31 90 ac 27 c0 d0 0d 00 00 14 61 05 c4 22 e7 68 1..'......a..".h 00b0 47 e4 3f 96 84 80 12 92 ae cd 0d 00 00 14 44 85 G.?...........D. 00c0 15 2d 18 b6 bb cd 0b e8 a8 46 95 79 dd cc 0d 00 .-.......F.y.... 00d0 00 14 cd 60 46 43 35 df 21 f8 7c fd b2 fc 68 b6 ...`FC5.!.|...h. 00e0 a4 48 0d 00 00 14 90 cb 80 91 3e bb 69 6e 08 63 .H........>.in.c 00f0 81 b5 ec 42 7b 1f 00 00 00 14 7d 94 19 a6 53 10 ...B{.....}...S. 0100 ca 6f 2c 17 9d 92 15 52 9d 56 7c d9 88 a9 .o,....R.V|... Frame 3 (226 bytes on wire, 226 bytes captured) Arrival Time: Dec 7, 2004 11:04:33.582959000 Time delta from previous packet: 0.123391000 seconds Time since reference or first frame: 0.298941000 seconds Frame Number: 3 Packet Length: 226 bytes Capture Length: 226 bytes Ethernet II, Src: 00:01:02:46:6a:04, Dst: 00:0f:3d:10:fc:2c Destination: 00:0f:3d:10:fc:2c (00:0f:3d:10:fc:2c) Source: 00:01:02:46:6a:04 (00:01:02:46:6a:04) Type: IP (0x0800) Frame check sequence: 0x7e638b43 (correct) Internet Protocol, Src Addr: 165.227.249.134 (165.227.249.134), Dst Addr: 165.227.249.142 (165.227.249.142) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 208 Identification: 0x0028 (40) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3b19 (correct) Source: 165.227.249.134 (165.227.249.134) Destination: 165.227.249.142 (165.227.249.142) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 188 Checksum: 0xdbb5 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x607EB400427B1F28 Responder cookie: 0x4DD99107F1E37827 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 180 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 20 Nonce Data 0000 00 0f 3d 10 fc 2c 00 01 02 46 6a 04 08 00 45 00 ..=..,...Fj...E. 0010 00 d0 00 28 00 00 40 11 3b 19 a5 e3 f9 86 a5 e3 ...(..@.;....... 0020 f9 8e 01 f4 01 f4 00 bc db b5 60 7e b4 00 42 7b ..........`~..B{ 0030 1f 28 4d d9 91 07 f1 e3 78 27 04 10 02 00 00 00 .(M.....x'...... 0040 00 00 00 00 00 b4 0a 00 00 84 a4 3d 8c 66 0e 49 ...........=.f.I 0050 77 9a 56 a0 82 fa bf 27 3f 4c 7c d8 54 ad b1 f1 w.V....'?L|.T... 0060 ee 24 8f b3 c6 a7 25 20 27 55 54 ab f6 06 56 56 .$....% 'UT...VV 0070 05 7d 02 77 6e 8d df 5b 58 b6 24 0c a8 9c d7 6c .}.wn..[X.$....l 0080 a2 ea f6 5a 34 bd 86 db 6a 78 fa b1 11 56 cd bd ...Z4...jx...V.. 0090 10 b7 6e 69 8e 5b 35 b1 6a 09 e9 48 4b 55 62 a4 ..ni.[5.j..HKUb. 00a0 a3 bc 2d b8 e9 26 d9 0e 4e b8 b7 98 e3 fa 9d 36 ..-..&..N......6 00b0 e5 59 3c 87 0a 55 2d 8c 30 6e f4 b2 f6 6a 78 4b .Y<..U-.0n...jxK 00c0 97 b6 73 b2 e7 89 2e 27 da cc 00 00 00 14 50 0f ..s....'......P. 00d0 29 75 14 83 c9 45 e1 85 3f e2 22 80 fb 61 7e 63 )u...E..?."..a~c 00e0 8b 43 .C Frame 4 (226 bytes on wire, 226 bytes captured) Arrival Time: Dec 7, 2004 11:04:33.882933000 Time delta from previous packet: 0.299974000 seconds Time since reference or first frame: 0.598915000 seconds Frame Number: 4 Packet Length: 226 bytes Capture Length: 226 bytes Ethernet II, Src: 00:0f:3d:10:fc:2c, Dst: 00:01:02:46:6a:04 Destination: 00:01:02:46:6a:04 (00:01:02:46:6a:04) Source: 00:0f:3d:10:fc:2c (00:0f:3d:10:fc:2c) Type: IP (0x0800) Frame check sequence: 0x858c4b6b (correct) Internet Protocol, Src Addr: 165.227.249.142 (165.227.249.142), Dst Addr: 165.227.249.134 (165.227.249.134) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 208 Identification: 0x5860 (22624) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: UDP (0x11) Header checksum: 0x23e0 (correct) Source: 165.227.249.142 (165.227.249.142) Destination: 165.227.249.134 (165.227.249.134) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 188 Checksum: 0xc497 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x607EB400427B1F28 Responder cookie: 0x4DD99107F1E37827 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 180 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 20 Nonce Data 0000 00 01 02 46 6a 04 00 0f 3d 10 fc 2c 08 00 45 00 ...Fj...=..,..E. 0010 00 d0 58 60 00 00 ff 11 23 e0 a5 e3 f9 8e a5 e3 ..X`....#....... 0020 f9 86 01 f4 01 f4 00 bc c4 97 60 7e b4 00 42 7b ..........`~..B{ 0030 1f 28 4d d9 91 07 f1 e3 78 27 04 10 02 00 00 00 .(M.....x'...... 0040 00 00 00 00 00 b4 0a 00 00 84 4f f9 09 17 2d 00 ..........O...-. 0050 f1 3f 87 98 58 23 53 8f 8e 8d 2f 45 d4 a7 5f df .?..X#S.../E.._. 0060 9d cb 0b 0b c0 ed f4 ae 92 e7 f7 cc 28 e4 23 ca ............(.#. 0070 7d 0b db ad ed 28 af cd 59 cf cf fe 7c a2 21 62 }....(..Y...|.!b 0080 04 d0 c0 89 d6 5d 48 b8 9e 0c bc 15 64 f3 d7 e8 .....]H.....d... 0090 ba 22 bd 84 f8 d6 a7 a5 56 74 bd d6 81 d9 41 f0 ."......Vt....A. 00a0 26 4b 3e e7 c3 b3 8a e6 1e 7e 36 b0 e7 cb 9a 1c &K>......~6..... 00b0 97 2b d6 c3 14 e9 a1 c3 84 dc 7d da 81 5e f3 57 .+........}..^.W 00c0 8b 39 2b 56 81 44 45 2d dd b0 00 00 00 14 ba 4a .9+V.DE-.......J 00d0 df a5 a5 67 36 2a 4c 8e 40 0e fa 4f ac aa 85 8c ...g6*L.@..O.... 00e0 4b 6b Kk Frame 5 (114 bytes on wire, 114 bytes captured) Arrival Time: Dec 7, 2004 11:04:33.949869000 Time delta from previous packet: 0.066936000 seconds Time since reference or first frame: 0.665851000 seconds Frame Number: 5 Packet Length: 114 bytes Capture Length: 114 bytes Ethernet II, Src: 00:01:02:46:6a:04, Dst: 00:0f:3d:10:fc:2c Destination: 00:0f:3d:10:fc:2c (00:0f:3d:10:fc:2c) Source: 00:01:02:46:6a:04 (00:01:02:46:6a:04) Type: IP (0x0800) Frame check sequence: 0x5333635a (correct) Internet Protocol, Src Addr: 165.227.249.134 (165.227.249.134), Dst Addr: 165.227.249.142 (165.227.249.142) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0x002a (42) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3b87 (correct) Source: 165.227.249.134 (165.227.249.134) Destination: 165.227.249.142 (165.227.249.142) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 76 Checksum: 0x2aaf (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x607EB400427B1F28 Responder cookie: 0x4DD99107F1E37827 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 68 Encrypted payload (40 bytes) 0000 00 0f 3d 10 fc 2c 00 01 02 46 6a 04 08 00 45 00 ..=..,...Fj...E. 0010 00 60 00 2a 00 00 40 11 3b 87 a5 e3 f9 86 a5 e3 .`.*..@.;....... 0020 f9 8e 01 f4 01 f4 00 4c 2a af 60 7e b4 00 42 7b .......L*.`~..B{ 0030 1f 28 4d d9 91 07 f1 e3 78 27 05 10 02 01 00 00 .(M.....x'...... 0040 00 00 00 00 00 44 c4 f6 04 66 5d 29 80 f7 db 88 .....D...f]).... 0050 29 0a a3 85 10 32 7a 3c 0e fa f5 2f cf 89 68 71 )....2z<.../..hq 0060 3b 0c 4c 28 11 ae 2a ed 13 c7 64 be 78 ff 53 33 ;.L(..*...d.x.S3 0070 63 5a cZ Frame 6 (114 bytes on wire, 114 bytes captured) Arrival Time: Dec 7, 2004 11:04:33.955476000 Time delta from previous packet: 0.005607000 seconds Time since reference or first frame: 0.671458000 seconds Frame Number: 6 Packet Length: 114 bytes Capture Length: 114 bytes Ethernet II, Src: 00:0f:3d:10:fc:2c, Dst: 00:01:02:46:6a:04 Destination: 00:01:02:46:6a:04 (00:01:02:46:6a:04) Source: 00:0f:3d:10:fc:2c (00:0f:3d:10:fc:2c) Type: IP (0x0800) Frame check sequence: 0x82bb0e4b (correct) Internet Protocol, Src Addr: 165.227.249.142 (165.227.249.142), Dst Addr: 165.227.249.134 (165.227.249.134) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0x5c62 (23650) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: UDP (0x11) Header checksum: 0x204e (correct) Source: 165.227.249.142 (165.227.249.142) Destination: 165.227.249.134 (165.227.249.134) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 76 Checksum: 0xae41 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x607EB400427B1F28 Responder cookie: 0x4DD99107F1E37827 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 68 Encrypted payload (40 bytes) 0000 00 01 02 46 6a 04 00 0f 3d 10 fc 2c 08 00 45 00 ...Fj...=..,..E. 0010 00 60 5c 62 00 00 ff 11 20 4e a5 e3 f9 8e a5 e3 .`\b.... N...... 0020 f9 86 01 f4 01 f4 00 4c ae 41 60 7e b4 00 42 7b .......L.A`~..B{ 0030 1f 28 4d d9 91 07 f1 e3 78 27 05 10 02 01 00 00 .(M.....x'...... 0040 00 00 00 00 00 44 96 27 bf 35 a1 7b fa a4 cc 62 .....D.'.5.{...b 0050 1e f6 ee 40 99 5b e4 3f f3 42 a8 af 2b 0a 94 1d ...@.[.?.B..+... 0060 7e a1 b0 15 ec ee 9b 4f f4 a9 60 05 98 79 82 bb ~......O..`..y.. 0070 0e 4b .K Frame 7 (354 bytes on wire, 354 bytes captured) Arrival Time: Dec 7, 2004 11:04:34.086845000 Time delta from previous packet: 0.131369000 seconds Time since reference or first frame: 0.802827000 seconds Frame Number: 7 Packet Length: 354 bytes Capture Length: 354 bytes Ethernet II, Src: 00:01:02:46:6a:04, Dst: 00:0f:3d:10:fc:2c Destination: 00:0f:3d:10:fc:2c (00:0f:3d:10:fc:2c) Source: 00:01:02:46:6a:04 (00:01:02:46:6a:04) Type: IP (0x0800) Frame check sequence: 0x0cc7f5e7 (correct) Internet Protocol, Src Addr: 165.227.249.134 (165.227.249.134), Dst Addr: 165.227.249.142 (165.227.249.142) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 336 Identification: 0x002c (44) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3a95 (correct) Source: 165.227.249.134 (165.227.249.134) Destination: 165.227.249.142 (165.227.249.142) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 316 Checksum: 0x63af (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x607EB400427B1F28 Responder cookie: 0x4DD99107F1E37827 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x843770C5 Length: 308 Encrypted payload (280 bytes) 0000 00 0f 3d 10 fc 2c 00 01 02 46 6a 04 08 00 45 00 ..=..,...Fj...E. 0010 01 50 00 2c 00 00 40 11 3a 95 a5 e3 f9 86 a5 e3 .P.,..@.:....... 0020 f9 8e 01 f4 01 f4 01 3c 63 af 60 7e b4 00 42 7b .......O.!p9.z....je 00f0 17 82 20 87 5d b3 19 6f b4 93 37 98 e9 5c b7 ff .. .]..o..7..\.. 0100 61 be ca 55 29 ba 3c 74 09 c1 e0 ed ba a7 b9 3c a..U).. 0120 10 49 3d 29 bb c7 08 54 73 13 42 88 fe bb d2 3d .I=)...Ts.B....= 0130 ef 18 c8 b6 2e da 31 31 ee 75 05 5a b5 b0 fc f7 ......11.u.Z.... 0140 b8 59 28 fd c2 da 44 96 8f 21 81 84 88 51 bd 3b .Y(...D..!...Q.; 0150 7a 38 f9 e7 07 eb 44 61 d3 cd 86 93 2e 4a 0c c7 z8....Da.....J.. 0160 f5 e7 .. Frame 8 (354 bytes on wire, 354 bytes captured) Arrival Time: Dec 7, 2004 11:04:34.239806000 Time delta from previous packet: 0.152961000 seconds Time since reference or first frame: 0.955788000 seconds Frame Number: 8 Packet Length: 354 bytes Capture Length: 354 bytes Ethernet II, Src: 00:0f:3d:10:fc:2c, Dst: 00:01:02:46:6a:04 Destination: 00:01:02:46:6a:04 (00:01:02:46:6a:04) Source: 00:0f:3d:10:fc:2c (00:0f:3d:10:fc:2c) Type: IP (0x0800) Frame check sequence: 0x5981c5ff (correct) Internet Protocol, Src Addr: 165.227.249.142 (165.227.249.142), Dst Addr: 165.227.249.134 (165.227.249.134) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 336 Identification: 0xe962 (59746) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: UDP (0x11) Header checksum: 0x925d (correct) Source: 165.227.249.142 (165.227.249.142) Destination: 165.227.249.134 (165.227.249.134) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 316 Checksum: 0x94c8 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x607EB400427B1F28 Responder cookie: 0x4DD99107F1E37827 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x843770C5 Length: 308 Encrypted payload (280 bytes) 0000 00 01 02 46 6a 04 00 0f 3d 10 fc 2c 08 00 45 00 ...Fj...=..,..E. 0010 01 50 e9 62 00 00 ff 11 92 5d a5 e3 f9 8e a5 e3 .P.b.....]...... 0020 f9 86 01 f4 01 f4 01 3c 94 c8 60 7e b4 00 42 7b .......<..`~..B{ 0030 1f 28 4d d9 91 07 f1 e3 78 27 08 10 20 01 84 37 .(M.....x'.. ..7 0040 70 c5 00 00 01 34 2a 21 b2 5f 30 46 ff 13 2f 77 p....4*!._0F../w 0050 dd 92 c5 4b 15 bf 9d 3f d9 c2 0a ee e9 8a af 76 ...K...?.......v 0060 7d 09 b0 1a 5b f7 2d 94 0a 65 fd 73 1e 2c b9 73 }...[.-..e.s.,.s 0070 59 db c8 0c 7b 06 ec 03 27 17 78 26 cd 35 b0 63 Y...{...'.x&.5.c 0080 2e bb 57 ce 4d f0 00 af 60 6c 8a b3 eb c0 42 14 ..W.M...`l....B. 0090 f7 7b b1 df 2f 27 7b c9 3b 1d fe 9c a5 1e 08 75 .{../'{.;......u 00a0 7e 86 c0 d4 f5 f7 bf 31 db 08 b9 93 21 5b 0f df ~......1....![.. 00b0 35 2a 00 c2 b9 c1 48 0c 51 b3 65 39 d4 18 78 2c 5*....H.Q.e9..x, 00c0 b7 1d 6b 70 6d b8 3c 73 15 ff 76 b3 90 51 2e e3 ..kpm...m...?. 00f0 41 ce e0 76 4f 9b dd 8c 4f 18 5e 65 df c6 77 fb A..vO...O.^e..w. 0100 30 49 ff a0 e9 02 0d 06 4e e2 1a 0e ef eb 20 03 0I......N..... . 0110 f7 c1 b3 d1 a6 9e 33 1d 00 8f 57 9c 5c aa 83 e4 ......3...W.\... 0120 02 74 6a e8 ae 66 fa 47 d8 cf 4f bc 6b 6b eb d9 .tj..f.G..O.kk.. 0130 bb a5 a7 a2 cb 6d d4 67 0b c0 70 a5 5c 47 ff bb .....m.g..p.\G.. 0140 26 33 32 73 e3 94 be 10 a5 b3 e5 7c b2 fc e4 db &32s.......|.... 0150 77 03 b4 f3 5a 9e a4 64 b8 0b ed 41 f1 2f 59 81 w...Z..d...A./Y. 0160 c5 ff .. Frame 9 (98 bytes on wire, 98 bytes captured) Arrival Time: Dec 7, 2004 11:04:34.332320000 Time delta from previous packet: 0.092514000 seconds Time since reference or first frame: 1.048302000 seconds Frame Number: 9 Packet Length: 98 bytes Capture Length: 98 bytes Ethernet II, Src: 00:01:02:46:6a:04, Dst: 00:0f:3d:10:fc:2c Destination: 00:0f:3d:10:fc:2c (00:0f:3d:10:fc:2c) Source: 00:01:02:46:6a:04 (00:01:02:46:6a:04) Type: IP (0x0800) Frame check sequence: 0xc63612a1 (correct) Internet Protocol, Src Addr: 165.227.249.134 (165.227.249.134), Dst Addr: 165.227.249.142 (165.227.249.142) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 80 Identification: 0x002e (46) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3b93 (correct) Source: 165.227.249.134 (165.227.249.134) Destination: 165.227.249.142 (165.227.249.142) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 60 Checksum: 0x20be (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x607EB400427B1F28 Responder cookie: 0x4DD99107F1E37827 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x843770C5 Length: 52 Encrypted payload (24 bytes) 0000 00 0f 3d 10 fc 2c 00 01 02 46 6a 04 08 00 45 00 ..=..,...Fj...E. 0010 00 50 00 2e 00 00 40 11 3b 93 a5 e3 f9 86 a5 e3 .P....@.;....... 0020 f9 8e 01 f4 01 f4 00 3c 20 be 60 7e b4 00 42 7b .......< .`~..B{ 0030 1f 28 4d d9 91 07 f1 e3 78 27 08 10 20 01 84 37 .(M.....x'.. ..7 0040 70 c5 00 00 00 34 fc 80 19 93 aa a0 cc 00 fb 0d p....4.......... 0050 0c e8 22 5c fc 78 15 70 17 20 51 8e 8e 03 c6 36 .."\.x.p. Q....6 0060 12 a1 .. Frame 10 (130 bytes on wire, 130 bytes captured) Arrival Time: Dec 7, 2004 11:04:36.463235000 Time delta from previous packet: 2.130915000 seconds Time since reference or first frame: 3.179217000 seconds Frame Number: 10 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:01:02:46:6a:04, Dst: 00:0f:3d:10:fc:2c Destination: 00:0f:3d:10:fc:2c (00:0f:3d:10:fc:2c) Source: 00:01:02:46:6a:04 (00:01:02:46:6a:04) Type: IP (0x0800) Frame check sequence: 0x9a6e3c32 (correct) Internet Protocol, Src Addr: 165.227.249.134 (165.227.249.134), Dst Addr: 165.227.249.142 (165.227.249.142) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0030 (48) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 32 Protocol: ESP (0x32) Header checksum: 0x5b50 (correct) Source: 165.227.249.134 (165.227.249.134) Destination: 165.227.249.142 (165.227.249.142) Encapsulating Security Payload SPI: 0x68ec6fd6 Sequence: 1 Data (84 bytes) 0000 00 0f 3d 10 fc 2c 00 01 02 46 6a 04 08 00 45 00 ..=..,...Fj...E. 0010 00 70 00 30 00 00 20 32 5b 50 a5 e3 f9 86 a5 e3 .p.0.. 2[P...... 0020 f9 8e 68 ec 6f d6 00 00 00 01 90 22 fa 5b 90 bd ..h.o......".[.. 0030 1a 5f 9a 06 f0 d0 05 4f f2 91 b7 96 a2 cf e0 22 ._.....O......." 0040 f1 2a b9 18 80 e0 e4 6b 50 fc e1 41 c3 fd d2 8c .*.....kP..A.... 0050 d8 c7 64 bb d8 46 a0 10 5b 60 82 12 f8 0f 89 be ..d..F..[`...... 0060 5c 86 e1 9c ef 34 0b 13 28 58 6d 9f 82 c0 11 37 \....4..(Xm....7 0070 f1 56 c3 62 b5 6e 94 25 7f cf 41 9c a2 8c 9a 6e .V.b.n.%..A....n 0080 3c 32 <2 Frame 11 (130 bytes on wire, 130 bytes captured) Arrival Time: Dec 7, 2004 11:04:36.464716000 Time delta from previous packet: 0.001481000 seconds Time since reference or first frame: 3.180698000 seconds Frame Number: 11 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:0f:3d:10:fc:2c, Dst: 00:01:02:46:6a:04 Destination: 00:01:02:46:6a:04 (00:01:02:46:6a:04) Source: 00:0f:3d:10:fc:2c (00:0f:3d:10:fc:2c) Type: IP (0x0800) Frame check sequence: 0x4430e6a8 (correct) Internet Protocol, Src Addr: 165.227.249.142 (165.227.249.142), Dst Addr: 165.227.249.134 (165.227.249.134) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x1c61 (7265) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x6f1e (correct) Source: 165.227.249.142 (165.227.249.142) Destination: 165.227.249.134 (165.227.249.134) Encapsulating Security Payload SPI: 0x00002527 Sequence: 1 Data (84 bytes) 0000 00 01 02 46 6a 04 00 0f 3d 10 fc 2c 08 00 45 00 ...Fj...=..,..E. 0010 00 70 1c 61 00 00 f0 32 6f 1e a5 e3 f9 8e a5 e3 .p.a...2o....... 0020 f9 86 00 00 25 27 00 00 00 01 3d 97 47 17 18 82 ....%'....=.G... 0030 db 1e 70 e8 4d 70 42 0c fc 4e df 38 3b f3 16 d8 ..p.MpB..N.8;... 0040 ac 40 c5 36 96 dd 3f 8e b8 2f 67 c1 12 95 13 c7 .@.6..?../g..... 0050 e2 d3 2c dc 5f 04 6a eb e4 2f 1d fe 9e 20 8d 2f ..,._.j../... ./ 0060 4c d8 e4 84 f4 a7 ba 68 07 d3 f4 71 0c bd d0 d4 L......h...q.... 0070 64 88 b8 d2 96 20 20 29 c1 a2 81 0a 61 60 44 30 d.... )....a`D0 0080 e6 a8 ..