Frame 1 (166 bytes on wire, 166 bytes captured) Arrival Time: Jan 27, 2005 17:46:47.929065000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 166 bytes Capture Length: 166 bytes Ethernet II, Src: 00:0c:29:00:82:53, Dst: 00:0f:b5:5f:1b:8f Destination: 00:0f:b5:5f:1b:8f (00:0f:b5:5f:1b:8f) Source: 00:0c:29:00:82:53 (00:0c:29:00:82:53) Type: IP (0x0800) Frame check sequence: 0xaf444231 (correct) Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.100 (165.227.249.100) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 148 Identification: 0x00a7 (167) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xfb12 (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.100 (165.227.249.100) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 128 Checksum: 0x5dbd (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xD65136BD508AD1F2 Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 120 Security Association payload Next payload: Vendor ID (13) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 40 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 32 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (3600) Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 0000 00 0f b5 5f 1b 8f 00 0c 29 00 82 53 08 00 45 00 ..._....)..S..E. 0010 00 94 00 a7 00 00 80 11 fb 12 a5 e3 f9 73 a5 e3 .............s.. 0020 f9 64 01 f4 01 f4 00 80 5d bd d6 51 36 bd 50 8a .d......]..Q6.P. 0030 d1 f2 00 00 00 00 00 00 00 00 01 10 02 00 00 00 ................ 0040 00 00 00 00 00 78 0d 00 00 34 00 00 00 01 00 00 .....x...4...... 0050 00 01 00 00 00 28 01 01 00 01 00 00 00 20 01 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 04 00 02 80 03 ................ 0070 00 01 80 0b 00 01 80 0c 0e 10 0d 00 00 14 44 85 ..............D. 0080 15 2d 18 b6 bb cd 0b e8 a8 46 95 79 dd cc 00 00 .-.......F.y.... 0090 00 14 90 cb 80 91 3e bb 69 6e 08 63 81 b5 ec 42 ......>.in.c...B 00a0 7b 1f af 44 42 31 {..DB1 Frame 2 (146 bytes on wire, 146 bytes captured) Arrival Time: Jan 27, 2005 17:46:47.934055000 Time delta from previous packet: 0.004990000 seconds Time since reference or first frame: 0.004990000 seconds Frame Number: 2 Packet Length: 146 bytes Capture Length: 146 bytes Ethernet II, Src: 00:0f:b5:5f:1b:8f, Dst: 00:0c:29:00:82:53 Destination: 00:0c:29:00:82:53 (00:0c:29:00:82:53) Source: 00:0f:b5:5f:1b:8f (00:0f:b5:5f:1b:8f) Type: IP (0x0800) Frame check sequence: 0x97156f77 (correct) Internet Protocol, Src Addr: 165.227.249.100 (165.227.249.100), Dst Addr: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 128 Identification: 0x0277 (631) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3957 (correct) Source: 165.227.249.100 (165.227.249.100) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 108 Checksum: 0x90ea (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xD65136BD508AD1F2 Responder cookie: 0xC78204D4862C32A1 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 100 Security Association payload Next payload: Vendor ID (13) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 40 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 32 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (3600) Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-00 0000 00 0c 29 00 82 53 00 0f b5 5f 1b 8f 08 00 45 00 ..)..S..._....E. 0010 00 80 02 77 00 00 40 11 39 57 a5 e3 f9 64 a5 e3 ...w..@.9W...d.. 0020 f9 73 01 f4 01 f4 00 6c 90 ea d6 51 36 bd 50 8a .s.....l...Q6.P. 0030 d1 f2 c7 82 04 d4 86 2c 32 a1 01 10 02 00 00 00 .......,2....... 0040 00 00 00 00 00 64 0d 00 00 34 00 00 00 01 00 00 .....d...4...... 0050 00 01 00 00 00 28 01 01 00 01 00 00 00 20 01 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 04 00 02 80 03 ................ 0070 00 01 80 0b 00 01 80 0c 0e 10 00 00 00 14 44 85 ..............D. 0080 15 2d 18 b6 bb cd 0b e8 a8 46 95 79 dd cc 97 15 .-.......F.y.... 0090 6f 77 ow Frame 3 (350 bytes on wire, 350 bytes captured) Arrival Time: Jan 27, 2005 17:46:50.105796000 Time delta from previous packet: 2.171741000 seconds Time since reference or first frame: 2.176731000 seconds Frame Number: 3 Packet Length: 350 bytes Capture Length: 350 bytes Ethernet II, Src: 00:0c:29:00:82:53, Dst: 00:0f:b5:5f:1b:8f Destination: 00:0f:b5:5f:1b:8f (00:0f:b5:5f:1b:8f) Source: 00:0c:29:00:82:53 (00:0c:29:00:82:53) Type: IP (0x0800) Frame check sequence: 0x0ea2f582 (correct) Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.100 (165.227.249.100) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 332 Identification: 0x00a8 (168) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xfa59 (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.100 (165.227.249.100) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 312 Checksum: 0x4e14 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xD65136BD508AD1F2 Responder cookie: 0xC78204D4862C32A1 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 304 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: Private USE (130) Length: 24 Nonce Data Unknown payload type payload Next payload: Private USE (130) Length: 24 Payload Unknown payload type payload Next payload: Vendor ID (13) Length: 24 Payload Vendor ID payload Next payload: Vendor ID (13) Length: 48 Vendor ID: unknown vendor ID: 0x47BBE7C993F1FC13B4E6D0DB565C68E5... Vendor ID payload Next payload: Vendor ID (13) Length: 12 Vendor ID: unknown vendor ID: 0xDA8E937880010000 Vendor ID payload Next payload: NONE (0) Length: 12 Vendor ID: draft-beaulieu-ike-xauth-02.txt 0000 00 0f b5 5f 1b 8f 00 0c 29 00 82 53 08 00 45 00 ..._....)..S..E. 0010 01 4c 00 a8 00 00 80 11 fa 59 a5 e3 f9 73 a5 e3 .L.......Y...s.. 0020 f9 64 01 f4 01 f4 01 38 4e 14 d6 51 36 bd 50 8a .d.....8N..Q6.P. 0030 d1 f2 c7 82 04 d4 86 2c 32 a1 04 10 02 00 00 00 .......,2....... 0040 00 00 00 00 01 30 0a 00 00 84 53 80 b0 50 fc a9 .....0....S..P.. 0050 9c c5 21 fb 5c 3e 64 23 a6 6b e1 db f2 3c cb ab ..!.\>d#.k...<.. 0060 cd 54 f5 27 ef d8 25 df 73 8a 4c 43 cb b6 79 8d .T.'..%.s.LC..y. 0070 6f 87 e5 55 72 4b 2e 6f 3a 9d 48 b4 ee 27 99 26 o..UrK.o:.H..'.& 0080 44 e6 a9 e7 3f 9c 13 8d be 66 9d ba 76 72 63 e5 D...?....f..vrc. 0090 64 af cf f3 6e 0a 8d 5e ae a3 74 15 16 27 0d 8a d...n..^..t..'.. 00a0 2f 87 3c a6 42 1d b0 5f 9b b8 5d e6 b2 94 f7 85 /.<.B.._..]..... 00b0 06 a0 b3 d7 67 61 f4 2d f7 ce 8d 01 b7 bd dc cd ....ga.-........ 00c0 fc 37 0e f6 3e 00 6a 59 cd 01 82 00 00 18 0b 71 .7..>.jY.......q 00d0 18 66 c4 a5 01 1d 24 44 48 4d ef ad c7 fa 50 3b .f....$DHM....P; 00e0 9f 53 82 00 00 18 53 b1 fb f4 88 12 60 a9 ef a6 .S....S.....`... 00f0 c6 4d c8 f9 06 a4 81 98 bf 8a 0d 00 00 18 55 03 .M............U. 0100 36 bc 02 30 74 25 a5 49 5a b4 95 0a 68 3b e3 4e 6..0t%.IZ...h;.N 0110 9b 0b 0d 00 00 30 47 bb e7 c9 93 f1 fc 13 b4 e6 .....0G......... 0120 d0 db 56 5c 68 e5 01 02 01 01 02 01 01 03 11 31 ..V\h..........1 0130 30 2e 31 2e 31 20 28 42 75 69 6c 64 20 31 30 29 0.1.1 (Build 10) 0140 00 00 0d 00 00 0c da 8e 93 78 80 01 00 00 00 00 .........x...... 0150 00 0c 09 00 26 89 df d6 b7 12 0e a2 f5 82 ....&......... Frame 4 (290 bytes on wire, 290 bytes captured) Arrival Time: Jan 27, 2005 17:46:51.440816000 Time delta from previous packet: 1.335020000 seconds Time since reference or first frame: 3.511751000 seconds Frame Number: 4 Packet Length: 290 bytes Capture Length: 290 bytes Ethernet II, Src: 00:0f:b5:5f:1b:8f, Dst: 00:0c:29:00:82:53 Destination: 00:0c:29:00:82:53 (00:0c:29:00:82:53) Source: 00:0f:b5:5f:1b:8f (00:0f:b5:5f:1b:8f) Type: IP (0x0800) Frame check sequence: 0xfa5cc2c9 (correct) Internet Protocol, Src Addr: 165.227.249.100 (165.227.249.100), Dst Addr: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 272 Identification: 0x0278 (632) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x38c6 (correct) Source: 165.227.249.100 (165.227.249.100) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 252 Checksum: 0x9167 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xD65136BD508AD1F2 Responder cookie: 0xC78204D4862C32A1 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 244 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: Private USE (130) Length: 12 Nonce Data Unknown payload type payload Next payload: Private USE (130) Length: 24 Payload Unknown payload type payload Next payload: Private USE (130) Length: 24 Payload Unknown payload type payload Next payload: NONE (0) Length: 24 Payload 0000 00 0c 29 00 82 53 00 0f b5 5f 1b 8f 08 00 45 00 ..)..S..._....E. 0010 01 10 02 78 00 00 40 11 38 c6 a5 e3 f9 64 a5 e3 ...x..@.8....d.. 0020 f9 73 01 f4 01 f4 00 fc 91 67 d6 51 36 bd 50 8a .s.......g.Q6.P. 0030 d1 f2 c7 82 04 d4 86 2c 32 a1 04 10 02 00 00 00 .......,2....... 0040 00 00 00 00 00 f4 0a 00 00 84 8a ec 95 47 53 2f .............GS/ 0050 e0 f9 11 60 8f 4f 38 1e ba fc 78 b0 84 aa 34 14 ...`.O8...x...4. 0060 a4 66 c8 05 cb fb cc fc 15 21 9b 28 ae 08 57 29 .f.......!.(..W) 0070 ad 63 12 26 1a df 6e 1c c7 12 43 13 58 ca 11 14 .c.&..n...C.X... 0080 c4 0b e4 bb ad 2e 89 b0 95 17 97 00 c1 2b 28 b7 .............+(. 0090 28 fa 22 c6 c2 c6 be 6d b5 40 4a 1f 34 9e 45 e6 (."....m.@J.4.E. 00a0 5f d3 0f 46 f7 5f bb 2b 8c ed bd a6 d7 22 0b e2 _..F._.+.....".. 00b0 5e fc de b3 b2 3b 85 aa 40 10 e9 a2 d8 87 75 3d ^....;..@.....u= 00c0 83 e7 2a d0 0c fe e0 6b 92 9d 82 00 00 0c 92 a2 ..*....k........ 00d0 1c ad ab 1c 26 41 82 00 00 18 55 03 36 bc 02 30 ....&A....U.6..0 00e0 74 25 a5 49 5a b4 95 0a 68 3b e3 4e 9b 0b 82 00 t%.IZ...h;.N.... 00f0 00 18 70 14 8f d2 24 a0 53 0a cf 11 be 86 42 a3 ..p...$.S.....B. 0100 45 17 fb b1 1e e0 00 00 00 18 53 b1 fb f4 88 12 E.........S..... 0110 60 a9 ef a6 c6 4d c8 f9 06 a4 81 98 bf 8a fa 5c `....M.........\ 0120 c2 c9 .. Frame 5 (138 bytes on wire, 138 bytes captured) Arrival Time: Jan 27, 2005 17:46:53.051480000 Time delta from previous packet: 1.610664000 seconds Time since reference or first frame: 5.122415000 seconds Frame Number: 5 Packet Length: 138 bytes Capture Length: 138 bytes Ethernet II, Src: 00:0c:29:00:82:53, Dst: 00:0f:b5:5f:1b:8f Destination: 00:0f:b5:5f:1b:8f (00:0f:b5:5f:1b:8f) Source: 00:0c:29:00:82:53 (00:0c:29:00:82:53) Type: IP (0x0800) Frame check sequence: 0xca6ddf91 (correct) Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.100 (165.227.249.100) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x00aa (170) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xfb2b (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.100 (165.227.249.100) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 100 Checksum: 0x3e74 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xD65136BD508AD1F2 Responder cookie: 0xC78204D4862C32A1 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 92 Encrypted payload (64 bytes) 0000 00 0f b5 5f 1b 8f 00 0c 29 00 82 53 08 00 45 00 ..._....)..S..E. 0010 00 78 00 aa 00 00 80 11 fb 2b a5 e3 f9 73 a5 e3 .x.......+...s.. 0020 f9 64 01 f4 01 f4 00 64 3e 74 d6 51 36 bd 50 8a .d.....d>t.Q6.P. 0030 d1 f2 c7 82 04 d4 86 2c 32 a1 05 10 02 01 00 00 .......,2....... 0040 00 00 00 00 00 5c 94 24 77 24 3e 28 f8 b4 b3 33 .....\.$w$>(...3 0050 ca b3 26 90 ac 68 42 bd d9 25 a1 ba 5e 88 98 69 ..&..hB..%..^..i 0060 ec a7 a5 ff b9 d8 14 f8 08 bd 40 ca 1a 33 70 52 ..........@..3pR 0070 a7 b2 da 1d d0 6c 1e 61 7f ca 34 f5 d6 31 21 40 .....l.a..4..1!@ 0080 0b e5 f4 03 28 38 ca 6d df 91 ....(8.m.. Frame 6 (114 bytes on wire, 114 bytes captured) Arrival Time: Jan 27, 2005 17:46:54.694395000 Time delta from previous packet: 1.642915000 seconds Time since reference or first frame: 6.765330000 seconds Frame Number: 6 Packet Length: 114 bytes Capture Length: 114 bytes Ethernet II, Src: 00:0f:b5:5f:1b:8f, Dst: 00:0c:29:00:82:53 Destination: 00:0c:29:00:82:53 (00:0c:29:00:82:53) Source: 00:0f:b5:5f:1b:8f (00:0f:b5:5f:1b:8f) Type: IP (0x0800) Frame check sequence: 0x6e119b3b (correct) Internet Protocol, Src Addr: 165.227.249.100 (165.227.249.100), Dst Addr: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0x0279 (633) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3975 (correct) Source: 165.227.249.100 (165.227.249.100) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 76 Checksum: 0xb9c2 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xD65136BD508AD1F2 Responder cookie: 0xC78204D4862C32A1 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 68 Encrypted payload (40 bytes) 0000 00 0c 29 00 82 53 00 0f b5 5f 1b 8f 08 00 45 00 ..)..S..._....E. 0010 00 60 02 79 00 00 40 11 39 75 a5 e3 f9 64 a5 e3 .`.y..@.9u...d.. 0020 f9 73 01 f4 01 f4 00 4c b9 c2 d6 51 36 bd 50 8a .s.....L...Q6.P. 0030 d1 f2 c7 82 04 d4 86 2c 32 a1 05 10 02 01 00 00 .......,2....... 0040 00 00 00 00 00 44 d9 9d ae 71 c7 40 04 14 db 1f .....D...q.@.... 0050 38 a5 44 11 69 c3 8c d5 60 9e 33 f4 2e 8b 00 fa 8.D.i...`.3..... 0060 17 4f cc 31 d6 03 98 13 29 99 15 bc 50 2d 6e 11 .O.1....)...P-n. 0070 9b 3b .; Frame 7 (338 bytes on wire, 338 bytes captured) Arrival Time: Jan 27, 2005 17:46:56.734777000 Time delta from previous packet: 2.040382000 seconds Time since reference or first frame: 8.805712000 seconds Frame Number: 7 Packet Length: 338 bytes Capture Length: 338 bytes Ethernet II, Src: 00:0c:29:00:82:53, Dst: 00:0f:b5:5f:1b:8f Destination: 00:0f:b5:5f:1b:8f (00:0f:b5:5f:1b:8f) Source: 00:0c:29:00:82:53 (00:0c:29:00:82:53) Type: IP (0x0800) Frame check sequence: 0xe418b414 (correct) Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.100 (165.227.249.100) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 320 Identification: 0x00ac (172) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xfa61 (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.100 (165.227.249.100) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 300 Checksum: 0x5d33 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xD65136BD508AD1F2 Responder cookie: 0xC78204D4862C32A1 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xD7D4FE13 Length: 292 Encrypted payload (264 bytes) 0000 00 0f b5 5f 1b 8f 00 0c 29 00 82 53 08 00 45 00 ..._....)..S..E. 0010 01 40 00 ac 00 00 80 11 fa 61 a5 e3 f9 73 a5 e3 .@.......a...s.. 0020 f9 64 01 f4 01 f4 01 2c 5d 33 d6 51 36 bd 50 8a .d.....,]3.Q6.P. 0030 d1 f2 c7 82 04 d4 86 2c 32 a1 08 10 20 01 d7 d4 .......,2... ... 0040 fe 13 00 00 01 24 2a 91 f1 13 81 8a 83 56 47 66 .....$*......VGf 0050 a1 18 0a ef e8 7c 98 a0 e5 ee b2 f8 ac 38 4f 79 .....|.......8Oy 0060 be df d8 ed 31 44 97 20 ba 1f 91 c9 5e 08 22 d5 ....1D. ....^.". 0070 f3 f5 cc 8a 6a 84 9f 2e 99 d8 fd 7a cb d3 97 30 ....j......z...0 0080 ce 6a 39 3b c2 89 0d 39 45 1c 81 f9 61 8d dd 40 .j9;...9E...a..@ 0090 d8 ca 72 1a f4 97 f7 d1 c9 d0 46 00 5c 4b 51 c3 ..r.......F.\KQ. 00a0 19 01 fa 35 d6 90 de 5c 29 a0 3f 15 12 84 3e 96 ...5...\).?...>. 00b0 77 5a 68 32 d8 6b d9 f6 84 aa 21 90 bc 96 fa eb wZh2.k....!..... 00c0 31 b6 4b 1e 76 0e b6 1f 0d 85 de ec d4 69 90 bd 1.K.v........i.. 00d0 14 3b 0e 9d 35 52 ec f2 ef 40 1f 2c be f0 20 cc .;..5R...@.,.. . 00e0 cf 1b 6c 63 41 b7 57 6c f6 b6 35 c1 b6 c5 08 61 ..lcA.Wl..5....a 00f0 49 fd 0e 0e ae 2d c6 fb b9 92 a0 a6 e0 b6 4d 3c I....-........M< 0100 0b 80 b9 2c 61 24 bb 43 1b 24 c1 ba 1b d1 1f 6c ...,a$.C.$.....l 0110 24 6b 8a fb 9f 1a 27 6a c3 de b2 dc a6 93 17 36 $k....'j.......6 0120 0a dd 84 75 6f 0d d9 28 71 9b b0 89 42 b7 32 74 ...uo..(q...B.2t 0130 9b 46 28 a0 66 8b 0b 18 98 da 5a ae b7 04 ea c8 .F(.f.....Z..... 0140 9b 76 0a 2b 5c a6 b2 a3 f0 56 d7 cd ac cc e4 18 .v.+\....V...... 0150 b4 14 .. Frame 8 (322 bytes on wire, 322 bytes captured) Arrival Time: Jan 27, 2005 17:46:58.070833000 Time delta from previous packet: 1.336056000 seconds Time since reference or first frame: 10.141768000 seconds Frame Number: 8 Packet Length: 322 bytes Capture Length: 322 bytes Ethernet II, Src: 00:0f:b5:5f:1b:8f, Dst: 00:0c:29:00:82:53 Destination: 00:0c:29:00:82:53 (00:0c:29:00:82:53) Source: 00:0f:b5:5f:1b:8f (00:0f:b5:5f:1b:8f) Type: IP (0x0800) Frame check sequence: 0x66f50ef3 (correct) Internet Protocol, Src Addr: 165.227.249.100 (165.227.249.100), Dst Addr: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 304 Identification: 0x027e (638) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x38a0 (correct) Source: 165.227.249.100 (165.227.249.100) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 284 Checksum: 0xf1e0 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xD65136BD508AD1F2 Responder cookie: 0xC78204D4862C32A1 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xD7D4FE13 Length: 276 Encrypted payload (248 bytes) 0000 00 0c 29 00 82 53 00 0f b5 5f 1b 8f 08 00 45 00 ..)..S..._....E. 0010 01 30 02 7e 00 00 40 11 38 a0 a5 e3 f9 64 a5 e3 .0.~..@.8....d.. 0020 f9 73 01 f4 01 f4 01 1c f1 e0 d6 51 36 bd 50 8a .s.........Q6.P. 0030 d1 f2 c7 82 04 d4 86 2c 32 a1 08 10 20 01 d7 d4 .......,2... ... 0040 fe 13 00 00 01 14 b6 36 bd 72 1d 49 e1 72 b8 9b .......6.r.I.r.. 0050 03 b1 27 e1 e9 53 29 07 b1 2a a0 a7 ca 7c 3a 54 ..'..S)..*...|:T 0060 7a 63 87 6d 50 67 25 35 5a 05 7e 4b 0e 4f f7 7d zc.mPg%5Z.~K.O.} 0070 98 0a cd 65 af 2b dd b1 5f 18 db fa 38 7a 25 33 ...e.+.._...8z%3 0080 7d b0 ef 56 20 b7 22 db f5 63 39 27 03 07 a1 78 }..V ."..c9'...x 0090 8c c9 7a da bd 07 0f db 68 e7 2c f9 3f d5 05 d5 ..z.....h.,.?... 00a0 97 b7 c5 de 8e d3 df cb 86 f2 50 90 63 15 5d 96 ..........P.c.]. 00b0 94 2a 20 f3 98 48 ed 0b d2 a8 fc 15 b5 8c 1f e7 .* ..H.......... 00c0 0c 9b 55 26 e3 43 eb 0c ae 78 31 3f dc de 6c 7c ..U&.C...x1?..l| 00d0 9d 62 da 57 54 a5 ef 3e ca 85 2c d0 c3 71 e5 ef .b.WT..>..,..q.. 00e0 74 b3 0a 29 c6 51 50 26 60 11 9a 07 c2 3a d5 5d t..).QP&`....:.] 00f0 18 ae f5 8b 5a a6 63 b9 6a 53 45 5c fb 13 44 0b ....Z.c.jSE\..D. 0100 eb 9a ab 0f 19 b3 8d f6 a5 19 a4 a2 7d 9d e2 77 ............}..w 0110 9c 9f 5a bf 90 2d b0 8f 65 a0 d3 4e f5 12 cc ef ..Z..-..e..N.... 0120 50 a5 0c 85 60 04 52 bd eb 7c 5d 07 d2 a9 49 aa P...`.R..|]...I. 0130 7d 83 7d dd ea 64 6c 7d e5 48 3b e6 63 4e 66 f5 }.}..dl}.H;.cNf. 0140 0e f3 .. Frame 9 (98 bytes on wire, 98 bytes captured) Arrival Time: Jan 27, 2005 17:46:58.077366000 Time delta from previous packet: 0.006533000 seconds Time since reference or first frame: 10.148301000 seconds Frame Number: 9 Packet Length: 98 bytes Capture Length: 98 bytes Ethernet II, Src: 00:0c:29:00:82:53, Dst: 00:0f:b5:5f:1b:8f Destination: 00:0f:b5:5f:1b:8f (00:0f:b5:5f:1b:8f) Source: 00:0c:29:00:82:53 (00:0c:29:00:82:53) Type: IP (0x0800) Frame check sequence: 0x57f79cd4 (correct) Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.100 (165.227.249.100) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 80 Identification: 0x00ae (174) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xfb4f (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.100 (165.227.249.100) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 60 Checksum: 0xe307 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xD65136BD508AD1F2 Responder cookie: 0xC78204D4862C32A1 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xD7D4FE13 Length: 52 Encrypted payload (24 bytes) 0000 00 0f b5 5f 1b 8f 00 0c 29 00 82 53 08 00 45 00 ..._....)..S..E. 0010 00 50 00 ae 00 00 80 11 fb 4f a5 e3 f9 73 a5 e3 .P.......O...s.. 0020 f9 64 01 f4 01 f4 00 3c e3 07 d6 51 36 bd 50 8a .d.....<...Q6.P. 0030 d1 f2 c7 82 04 d4 86 2c 32 a1 08 10 20 01 d7 d4 .......,2... ... 0040 fe 13 00 00 00 34 73 dc 89 88 44 d6 9f 40 cd b2 .....4s...D..@.. 0050 e2 dd 95 71 2e e7 71 5a df 5e ac d3 d3 15 57 f7 ...q..qZ.^....W. 0060 9c d4 .. Frame 10 (130 bytes on wire, 130 bytes captured) Arrival Time: Jan 27, 2005 17:46:59.714690000 Time delta from previous packet: 1.637324000 seconds Time since reference or first frame: 11.785625000 seconds Frame Number: 10 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:0f:b5:5f:1b:8f, Dst: 00:0c:29:00:82:53 Destination: 00:0c:29:00:82:53 (00:0c:29:00:82:53) Source: 00:0f:b5:5f:1b:8f (00:0f:b5:5f:1b:8f) Type: IP (0x0800) Frame check sequence: 0x1ecd0028 (correct) Internet Protocol, Src Addr: 165.227.249.100 (165.227.249.100), Dst Addr: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0280 (640) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x395e (correct) Source: 165.227.249.100 (165.227.249.100) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 92 Checksum: 0x2ba9 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xD65136BD508AD1F2 Responder cookie: 0xC78204D4862C32A1 Next payload: Hash (8) Version: 1.0 Exchange type: Informational (5) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xE4B790B0 Length: 84 Encrypted payload (56 bytes) 0000 00 0c 29 00 82 53 00 0f b5 5f 1b 8f 08 00 45 00 ..)..S..._....E. 0010 00 70 02 80 00 00 40 11 39 5e a5 e3 f9 64 a5 e3 .p....@.9^...d.. 0020 f9 73 01 f4 01 f4 00 5c 2b a9 d6 51 36 bd 50 8a .s.....\+..Q6.P. 0030 d1 f2 c7 82 04 d4 86 2c 32 a1 08 10 05 01 e4 b7 .......,2....... 0040 90 b0 00 00 00 54 f6 80 56 1c 20 db 16 7b e1 4b .....T..V. ..{.K 0050 55 b9 9d 52 92 9d 50 d4 f1 e4 80 b1 ec b4 56 32 U..R..P.......V2 0060 35 42 fc d5 d6 70 51 d3 5b 74 80 37 9f df f8 9b 5B...pQ.[t.7.... 0070 f6 5d 6e a1 0b 17 26 3c 5e bd b9 48 eb 6f 1e cd .]n...&<^..H.o.. 0080 00 28 .( Frame 11 (130 bytes on wire, 130 bytes captured) Arrival Time: Jan 27, 2005 17:47:03.213020000 Time delta from previous packet: 3.498330000 seconds Time since reference or first frame: 15.283955000 seconds Frame Number: 11 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:0c:29:00:82:53, Dst: 00:0f:b5:5f:1b:8f Destination: 00:0f:b5:5f:1b:8f (00:0f:b5:5f:1b:8f) Source: 00:0c:29:00:82:53 (00:0c:29:00:82:53) Type: IP (0x0800) Frame check sequence: 0xfc585b2e (correct) Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.100 (165.227.249.100) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0001 (1) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: ESP (0x32) Header checksum: 0xfbbb (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.100 (165.227.249.100) Encapsulating Security Payload SPI: 0xdd324c28 Sequence: 1 Data (84 bytes) 0000 00 0f b5 5f 1b 8f 00 0c 29 00 82 53 08 00 45 00 ..._....)..S..E. 0010 00 70 00 01 00 00 80 32 fb bb a5 e3 f9 73 a5 e3 .p.....2.....s.. 0020 f9 64 dd 32 4c 28 00 00 00 01 93 4d e0 e0 63 d6 .d.2L(.....M..c. 0030 10 94 b3 d8 f7 aa fa 4c 9f 6e ab 2d 9d fa 7f 13 .......L.n.-.... 0040 dc 56 98 22 b1 19 9e c8 28 ba 5e 91 9b fb c6 0b .V."....(.^..... 0050 0f 56 52 49 b2 33 f1 27 66 13 71 cd 37 26 8e d1 .VRI.3.'f.q.7&.. 0060 51 64 21 eb d3 19 8f 01 ce b9 60 07 18 f6 08 30 Qd!.......`....0 0070 05 8c 28 c0 82 39 77 16 42 cb a1 b8 8c cc fc 58 ..(..9w.B......X 0080 5b 2e [. Frame 12 (130 bytes on wire, 130 bytes captured) Arrival Time: Jan 27, 2005 17:47:03.217945000 Time delta from previous packet: 0.004925000 seconds Time since reference or first frame: 15.288880000 seconds Frame Number: 12 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:0f:b5:5f:1b:8f, Dst: 00:0c:29:00:82:53 Destination: 00:0c:29:00:82:53 (00:0c:29:00:82:53) Source: 00:0f:b5:5f:1b:8f (00:0f:b5:5f:1b:8f) Type: IP (0x0800) Frame check sequence: 0x43f16af2 (correct) Internet Protocol, Src Addr: 165.227.249.100 (165.227.249.100), Dst Addr: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x3b3a (15162) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 30 Protocol: ESP (0x32) Header checksum: 0x2283 (correct) Source: 165.227.249.100 (165.227.249.100) Destination: 165.227.249.115 (165.227.249.115) Encapsulating Security Payload SPI: 0x845ec162 Sequence: 1 Data (84 bytes) 0000 00 0c 29 00 82 53 00 0f b5 5f 1b 8f 08 00 45 00 ..)..S..._....E. 0010 00 70 3b 3a 00 00 1e 32 22 83 a5 e3 f9 64 a5 e3 .p;:...2"....d.. 0020 f9 73 84 5e c1 62 00 00 00 01 73 6b 36 43 97 2e .s.^.b....sk6C.. 0030 e3 5d 50 9f e8 80 bf e7 ed 58 06 20 12 91 ff 58 .]P......X. ...X 0040 b6 f7 58 0e 42 de 5c 50 0e 1e 0d 59 8f 03 e8 33 ..X.B.\P...Y...3 0050 95 ff 89 25 6a 0b 38 8d cc f9 81 a3 13 0d d0 a3 ...%j.8......... 0060 b2 79 73 df 70 20 f4 c0 42 83 74 33 60 09 f1 48 .ys.p ..B.t3`..H 0070 fc 44 0d 8e bf 75 40 d0 fd 52 d1 df 6d 20 43 f1 .D...u@..R..m C. 0080 6a f2 j.