Frame 1 (166 bytes on wire, 166 bytes captured) Arrival Time: May 27, 2005 13:41:17.643068000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 166 bytes Capture Length: 166 bytes Ethernet II, Src: 00:0c:29:1d:cf:fc, Dst: 00:c0:02:11:42:56 Destination: 00:c0:02:11:42:56 (00:c0:02:11:42:56) Source: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc) Type: IP (0x0800) Frame check sequence: 0x0cb75bfd (correct) Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.107 (165.227.249.107) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 148 Identification: 0x01e4 (484) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf9ce (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.107 (165.227.249.107) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 128 Checksum: 0x7cb6 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x6B77A0D4D98C2AB3 Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 120 Security Association payload Next payload: Vendor ID (13) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 40 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 32 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (3600) Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 0000 00 c0 02 11 42 56 00 0c 29 1d cf fc 08 00 45 00 ....BV..).....E. 0010 00 94 01 e4 00 00 80 11 f9 ce a5 e3 f9 73 a5 e3 .............s.. 0020 f9 6b 01 f4 01 f4 00 80 7c b6 6b 77 a0 d4 d9 8c .k......|.kw.... 0030 2a b3 00 00 00 00 00 00 00 00 01 10 02 00 00 00 *............... 0040 00 00 00 00 00 78 0d 00 00 34 00 00 00 01 00 00 .....x...4...... 0050 00 01 00 00 00 28 01 01 00 01 00 00 00 20 01 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 04 00 02 80 03 ................ 0070 00 01 80 0b 00 01 80 0c 0e 10 0d 00 00 14 44 85 ..............D. 0080 15 2d 18 b6 bb cd 0b e8 a8 46 95 79 dd cc 00 00 .-.......F.y.... 0090 00 14 90 cb 80 91 3e bb 69 6e 08 63 81 b5 ec 42 ......>.in.c...B 00a0 7b 1f 0c b7 5b fd {...[. Frame 2 (126 bytes on wire, 126 bytes captured) Arrival Time: May 27, 2005 13:41:17.657778000 Time delta from previous packet: 0.014710000 seconds Time since reference or first frame: 0.014710000 seconds Frame Number: 2 Packet Length: 126 bytes Capture Length: 126 bytes Ethernet II, Src: 00:c0:02:11:42:56, Dst: 00:0c:29:1d:cf:fc Destination: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc) Source: 00:c0:02:11:42:56 (00:c0:02:11:42:56) Type: IP (0x0800) Frame check sequence: 0xe1dc9d10 (correct) Internet Protocol, Src Addr: 165.227.249.107 (165.227.249.107), Dst Addr: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 108 Identification: 0x04ae (1198) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x372d (correct) Source: 165.227.249.107 (165.227.249.107) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 88 Checksum: 0xb48e (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x6B77A0D4D98C2AB3 Responder cookie: 0xE0CE4CBE589C5D4B Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 80 Security Association payload Next payload: NONE (0) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 40 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 32 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (3600) 0000 00 0c 29 1d cf fc 00 c0 02 11 42 56 08 00 45 00 ..).......BV..E. 0010 00 6c 04 ae 00 00 40 11 37 2d a5 e3 f9 6b a5 e3 .l....@.7-...k.. 0020 f9 73 01 f4 01 f4 00 58 b4 8e 6b 77 a0 d4 d9 8c .s.....X..kw.... 0030 2a b3 e0 ce 4c be 58 9c 5d 4b 01 10 02 00 00 00 *...L.X.]K...... 0040 00 00 00 00 00 50 00 00 00 34 00 00 00 01 00 00 .....P...4...... 0050 00 01 00 00 00 28 01 01 00 01 00 00 00 20 01 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 04 00 02 80 03 ................ 0070 00 01 80 0b 00 01 80 0c 0e 10 e1 dc 9d 10 .............. Frame 3 (302 bytes on wire, 302 bytes captured) Arrival Time: May 27, 2005 13:41:19.849552000 Time delta from previous packet: 2.191774000 seconds Time since reference or first frame: 2.206484000 seconds Frame Number: 3 Packet Length: 302 bytes Capture Length: 302 bytes Ethernet II, Src: 00:0c:29:1d:cf:fc, Dst: 00:c0:02:11:42:56 Destination: 00:c0:02:11:42:56 (00:c0:02:11:42:56) Source: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc) Type: IP (0x0800) Frame check sequence: 0xd8a9687d (correct) Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.107 (165.227.249.107) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 284 Identification: 0x01e5 (485) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf945 (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.107 (165.227.249.107) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 264 Checksum: 0x1177 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x6B77A0D4D98C2AB3 Responder cookie: 0xE0CE4CBE589C5D4B Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 256 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: Vendor ID (13) Length: 24 Nonce Data Vendor ID payload Next payload: Vendor ID (13) Length: 48 Vendor ID: unknown vendor ID: 0x47BBE7C993F1FC13B4E6D0DB565C68E5... Vendor ID payload Next payload: Vendor ID (13) Length: 12 Vendor ID: unknown vendor ID: 0xDA8E937880010000 Vendor ID payload Next payload: NONE (0) Length: 12 Vendor ID: draft-beaulieu-ike-xauth-02.txt 0000 00 c0 02 11 42 56 00 0c 29 1d cf fc 08 00 45 00 ....BV..).....E. 0010 01 1c 01 e5 00 00 80 11 f9 45 a5 e3 f9 73 a5 e3 .........E...s.. 0020 f9 6b 01 f4 01 f4 01 08 11 77 6b 77 a0 d4 d9 8c .k.......wkw.... 0030 2a b3 e0 ce 4c be 58 9c 5d 4b 04 10 02 00 00 00 *...L.X.]K...... 0040 00 00 00 00 01 00 0a 00 00 84 c4 82 da 7a 43 32 .............zC2 0050 40 9b 4d 34 4e ae 94 27 5c b5 d1 c3 52 29 8f b9 @.M4N..'\...R).. 0060 7d 28 8d 71 5e bf af e5 76 71 ab b6 81 4e 76 97 }(.q^...vq...Nv. 0070 90 8b 2d 0f c9 3a 14 f2 5b 7a 1d 43 87 b4 16 f3 ..-..:..[z.C.... 0080 95 88 5e 20 d1 33 2c aa 77 47 e2 d1 de 25 6a 1e ..^ .3,.wG...%j. 0090 e3 b6 13 c5 ce ce 4f 02 2b 70 78 2b d1 2c 6e 59 ......O.+px+.,nY 00a0 4b b6 2b 9c 48 37 bd 9a ac 10 42 86 84 fa 66 79 K.+.H7....B...fy 00b0 34 b8 0e bc d7 ff f6 74 24 18 28 c6 10 24 ee 06 4......t$.(..$.. 00c0 17 cb 2a 25 47 52 77 28 04 0c 0d 00 00 18 88 c3 ..*%GRw(........ 00d0 3b 9e 98 70 37 67 6b a1 31 d8 0e 2c 9a 25 72 f3 ;..p7gk.1..,.%r. 00e0 e5 29 0d 00 00 30 47 bb e7 c9 93 f1 fc 13 b4 e6 .)...0G......... 00f0 d0 db 56 5c 68 e5 01 02 01 01 02 01 01 03 11 31 ..V\h..........1 0100 30 2e 31 2e 31 20 28 42 75 69 6c 64 20 31 30 29 0.1.1 (Build 10) 0110 00 00 0d 00 00 0c da 8e 93 78 80 01 00 00 00 00 .........x...... 0120 00 0c 09 00 26 89 df d6 b7 12 d8 a9 68 7d ....&.......h} Frame 4 (218 bytes on wire, 218 bytes captured) Arrival Time: May 27, 2005 13:41:21.157541000 Time delta from previous packet: 1.307989000 seconds Time since reference or first frame: 3.514473000 seconds Frame Number: 4 Packet Length: 218 bytes Capture Length: 218 bytes Ethernet II, Src: 00:c0:02:11:42:56, Dst: 00:0c:29:1d:cf:fc Destination: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc) Source: 00:c0:02:11:42:56 (00:c0:02:11:42:56) Type: IP (0x0800) Frame check sequence: 0x758bf310 (correct) Internet Protocol, Src Addr: 165.227.249.107 (165.227.249.107), Dst Addr: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 200 Identification: 0x04af (1199) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x36d0 (correct) Source: 165.227.249.107 (165.227.249.107) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 180 Checksum: 0xf653 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x6B77A0D4D98C2AB3 Responder cookie: 0xE0CE4CBE589C5D4B Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 172 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 12 Nonce Data 0000 00 0c 29 1d cf fc 00 c0 02 11 42 56 08 00 45 00 ..).......BV..E. 0010 00 c8 04 af 00 00 40 11 36 d0 a5 e3 f9 6b a5 e3 ......@.6....k.. 0020 f9 73 01 f4 01 f4 00 b4 f6 53 6b 77 a0 d4 d9 8c .s.......Skw.... 0030 2a b3 e0 ce 4c be 58 9c 5d 4b 04 10 02 00 00 00 *...L.X.]K...... 0040 00 00 00 00 00 ac 0a 00 00 84 4a 09 6d 89 76 61 ..........J.m.va 0050 07 78 24 7b 41 4b 14 b6 7a 89 4e 0c 99 1f c9 28 .x${AK..z.N....( 0060 a5 f7 85 0c 0d 1a 34 d1 c5 19 97 81 27 d0 d9 01 ......4.....'... 0070 84 ca 83 38 ed 26 f5 e6 01 4e d3 e8 3f 7a 7c a1 ...8.&...N..?z|. 0080 53 6c 34 d1 74 0f 99 b2 c9 57 26 17 82 04 24 1f Sl4.t....W&...$. 0090 f2 8d 99 29 0a 62 70 99 6a dd f8 58 46 fc 9a 87 ...).bp.j..XF... 00a0 fa bc cb 6f da 44 d8 11 15 53 4a 92 6c 8c 0f b9 ...o.D...SJ.l... 00b0 d9 75 a6 28 d2 fe 56 1c 82 ae 06 1d 2a 90 36 4f .u.(..V.....*.6O 00c0 6a 9b 70 03 89 18 58 33 76 ff 00 00 00 0c e0 fa j.p...X3v....... 00d0 13 f8 b2 40 66 9f 75 8b f3 10 ...@f.u... Frame 5 (138 bytes on wire, 138 bytes captured) Arrival Time: May 27, 2005 13:41:22.909829000 Time delta from previous packet: 1.752288000 seconds Time since reference or first frame: 5.266761000 seconds Frame Number: 5 Packet Length: 138 bytes Capture Length: 138 bytes Ethernet II, Src: 00:0c:29:1d:cf:fc, Dst: 00:c0:02:11:42:56 Destination: 00:c0:02:11:42:56 (00:c0:02:11:42:56) Source: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc) Type: IP (0x0800) Frame check sequence: 0x69be7891 (correct) Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.107 (165.227.249.107) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x01e8 (488) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf9e6 (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.107 (165.227.249.107) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 100 Checksum: 0xf39b (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x6B77A0D4D98C2AB3 Responder cookie: 0xE0CE4CBE589C5D4B Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 92 Encrypted payload (64 bytes) 0000 00 c0 02 11 42 56 00 0c 29 1d cf fc 08 00 45 00 ....BV..).....E. 0010 00 78 01 e8 00 00 80 11 f9 e6 a5 e3 f9 73 a5 e3 .x...........s.. 0020 f9 6b 01 f4 01 f4 00 64 f3 9b 6b 77 a0 d4 d9 8c .k.....d..kw.... 0030 2a b3 e0 ce 4c be 58 9c 5d 4b 05 10 02 01 00 00 *...L.X.]K...... 0040 00 00 00 00 00 5c 02 10 23 1d 6f 6a 7d d2 86 f0 .....\..#.oj}... 0050 8a 70 be 87 b5 76 b2 26 8e db ae 17 e7 00 c2 43 .p...v.&.......C 0060 61 8c 0c 12 d8 fe c1 68 ff 9b 6e fd db 5d 42 4d a......h..n..]BM 0070 35 dd 49 8b 88 cd ee 1a 05 d2 ba e5 a5 0c 1a 6b 5.I............k 0080 12 91 5b e6 24 23 69 be 78 91 ..[.$#i.x. Frame 6 (114 bytes on wire, 114 bytes captured) Arrival Time: May 27, 2005 13:41:24.520744000 Time delta from previous packet: 1.610915000 seconds Time since reference or first frame: 6.877676000 seconds Frame Number: 6 Packet Length: 114 bytes Capture Length: 114 bytes Ethernet II, Src: 00:c0:02:11:42:56, Dst: 00:0c:29:1d:cf:fc Destination: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc) Source: 00:c0:02:11:42:56 (00:c0:02:11:42:56) Type: IP (0x0800) Frame check sequence: 0x1c477ebe (correct) Internet Protocol, Src Addr: 165.227.249.107 (165.227.249.107), Dst Addr: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0x04b0 (1200) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3737 (correct) Source: 165.227.249.107 (165.227.249.107) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 76 Checksum: 0xff3f (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x6B77A0D4D98C2AB3 Responder cookie: 0xE0CE4CBE589C5D4B Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 68 Encrypted payload (40 bytes) 0000 00 0c 29 1d cf fc 00 c0 02 11 42 56 08 00 45 00 ..).......BV..E. 0010 00 60 04 b0 00 00 40 11 37 37 a5 e3 f9 6b a5 e3 .`....@.77...k.. 0020 f9 73 01 f4 01 f4 00 4c ff 3f 6b 77 a0 d4 d9 8c .s.....L.?kw.... 0030 2a b3 e0 ce 4c be 58 9c 5d 4b 05 10 02 01 00 00 *...L.X.]K...... 0040 00 00 00 00 00 44 18 36 e1 fc 0d 35 5c 2c 11 da .....D.6...5\,.. 0050 7b 52 7d d0 44 0c af 7c 6f aa f9 17 28 65 07 79 {R}.D..|o...(e.y 0060 0d 3f 8a 15 c8 8b c2 b3 4b 1d 31 b8 28 0d 1c 47 .?......K.1.(..G 0070 7e be ~. Frame 7 (338 bytes on wire, 338 bytes captured) Arrival Time: May 27, 2005 13:41:26.780970000 Time delta from previous packet: 2.260226000 seconds Time since reference or first frame: 9.137902000 seconds Frame Number: 7 Packet Length: 338 bytes Capture Length: 338 bytes Ethernet II, Src: 00:0c:29:1d:cf:fc, Dst: 00:c0:02:11:42:56 Destination: 00:c0:02:11:42:56 (00:c0:02:11:42:56) Source: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc) Type: IP (0x0800) Frame check sequence: 0xf100db81 (correct) Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.107 (165.227.249.107) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 320 Identification: 0x01e9 (489) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf91d (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.107 (165.227.249.107) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 300 Checksum: 0xec71 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x6B77A0D4D98C2AB3 Responder cookie: 0xE0CE4CBE589C5D4B Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x8D6A979C Length: 292 Encrypted payload (264 bytes) 0000 00 c0 02 11 42 56 00 0c 29 1d cf fc 08 00 45 00 ....BV..).....E. 0010 01 40 01 e9 00 00 80 11 f9 1d a5 e3 f9 73 a5 e3 .@...........s.. 0020 f9 6b 01 f4 01 f4 01 2c ec 71 6b 77 a0 d4 d9 8c .k.....,.qkw.... 0030 2a b3 e0 ce 4c be 58 9c 5d 4b 08 10 20 01 8d 6a *...L.X.]K.. ..j 0040 97 9c 00 00 01 24 b2 22 cd d5 02 39 bf db 9e f8 .....$."...9.... 0050 c9 39 a5 84 89 b6 c2 6d 1b db 2f 6d 4e f6 da 06 .9.....m../mN... 0060 66 43 91 3e 29 47 07 9e 1f 54 ad ec c5 8b a7 53 fC.>)G...T.....S 0070 67 c5 a1 e0 bb c3 3a 84 58 63 fa 28 0a f9 8f 75 g.....:.Xc.(...u 0080 b3 dc b0 56 0f 52 6c 57 68 23 42 18 36 78 d1 d1 ...V.RlWh#B.6x.. 0090 f3 2f 90 b9 74 13 d0 c1 c2 a2 30 8a 40 96 a4 a4 ./..t.....0.@... 00a0 f3 2b cb 6f 93 60 f2 8b 5d 67 a8 48 d6 c6 0b b7 .+.o.`..]g.H.... 00b0 00 e0 1b 05 7a bf e7 f4 4e d6 b0 96 c5 ae e8 25 ....z...N......% 00c0 d5 a3 78 03 bd 7e d3 b8 52 a3 b7 bd 79 f5 b7 10 ..x..~..R...y... 00d0 e8 9f 53 9b 8f 63 55 90 7b bd b3 6c c0 25 07 9e ..S..cU.{..l.%.. 00e0 ab b0 4e 5f 39 39 3f d1 a6 56 2c d8 bc 13 c7 1c ..N_99?..V,..... 00f0 4e b4 96 35 1b 96 32 c6 61 74 49 dc cb a6 7a 02 N..5..2.atI...z. 0100 85 cd 33 e6 6d c1 ba a0 4d de 4d df 38 7a 1d 7b ..3.m...M.M.8z.{ 0110 5c 41 64 fb 70 62 e9 1d 23 c0 ac d0 d5 2a 8f 03 \Ad.pb..#....*.. 0120 a5 98 fc d2 c9 86 33 ff a6 57 34 f7 63 5c 53 47 ......3..W4.c\SG 0130 c7 0b 4f b9 da dc 2f 2a 95 ae 50 0b 58 2b 11 1b ..O.../*..P.X+.. 0140 ea 05 f2 0d 7e ac 28 6e c6 e0 67 ce 09 af f1 00 ....~.(n..g..... 0150 db 81 .. Frame 8 (324 bytes on wire, 324 bytes captured) Arrival Time: May 27, 2005 13:41:28.095231000 Time delta from previous packet: 1.314261000 seconds Time since reference or first frame: 10.452163000 seconds Frame Number: 8 Packet Length: 324 bytes Capture Length: 324 bytes Ethernet II, Src: 00:c0:02:11:42:56, Dst: 00:0c:29:1d:cf:fc Destination: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc) Source: 00:c0:02:11:42:56 (00:c0:02:11:42:56) Type: IP (0x0800) Trailer: 111B Frame check sequence: 0x9dd0d1d9 (correct) Internet Protocol, Src Addr: 165.227.249.107 (165.227.249.107), Dst Addr: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 304 Identification: 0x04b1 (1201) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3666 (correct) Source: 165.227.249.107 (165.227.249.107) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 284 Checksum: 0xc354 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x6B77A0D4D98C2AB3 Responder cookie: 0xE0CE4CBE589C5D4B Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x8D6A979C Length: 276 Encrypted payload (248 bytes) 0000 00 0c 29 1d cf fc 00 c0 02 11 42 56 08 00 45 00 ..).......BV..E. 0010 01 30 04 b1 00 00 40 11 36 66 a5 e3 f9 6b a5 e3 .0....@.6f...k.. 0020 f9 73 01 f4 01 f4 01 1c c3 54 6b 77 a0 d4 d9 8c .s.......Tkw.... 0030 2a b3 e0 ce 4c be 58 9c 5d 4b 08 10 20 01 8d 6a *...L.X.]K.. ..j 0040 97 9c 00 00 01 14 4c 34 d2 da a2 97 a8 eb 07 09 ......L4........ 0050 dc 13 84 a3 c8 c4 c1 bf 89 14 81 cf e2 ad 2f 99 ............../. 0060 ff d1 eb d9 db ca b0 af ac 18 6b cb 9e 42 24 af ..........k..B$. 0070 ad b7 8a cf 35 68 b3 0c 1c 2b d2 ed 95 97 22 10 ....5h...+....". 0080 e9 a9 92 84 21 0f 15 9d 68 f6 c9 f1 a1 0c 41 52 ....!...h.....AR 0090 fd 71 92 9c 1d fc ec 6c 5f 4f a1 cd 89 1f ca 34 .q.....l_O.....4 00a0 88 c1 d5 4e c1 fc 5e 33 27 d1 f5 34 97 0e 88 8d ...N..^3'..4.... 00b0 f8 23 51 5a a9 b4 c2 9b af f1 63 eb 5f c4 6f c1 .#QZ......c._.o. 00c0 b6 c2 e0 7a 59 d6 bb 73 61 9e 48 cc 8e a8 fa 76 ...zY..sa.H....v 00d0 3b 07 46 8a 74 6a 26 da ea df f7 9c e6 4d 7a 3f ;.F.tj&......Mz? 00e0 49 e0 9d 6d f9 00 f1 5e 96 65 4a ec 6f 48 46 be I..m...^.eJ.oHF. 00f0 15 00 c7 45 4d 0a a6 70 aa 32 3b 90 3f 01 2a b8 ...EM..p.2;.?.*. 0100 56 a5 10 c7 46 cd d8 9d 61 95 4d 2e 27 84 03 b8 V...F...a.M.'... 0110 ea bd 7f bf 22 bc dc 68 61 2e 7b b0 e4 55 29 9b ...."..ha.{..U). 0120 87 9b 1e 64 d0 43 c4 a1 5e f3 1f ab 9e a0 ea 0c ...d.C..^....... 0130 a8 88 50 70 8a 13 eb 63 c5 bc d5 e8 4c 04 11 1b ..Pp...c....L... 0140 9d d0 d1 d9 .... Frame 9 (98 bytes on wire, 98 bytes captured) Arrival Time: May 27, 2005 13:41:28.101661000 Time delta from previous packet: 0.006430000 seconds Time since reference or first frame: 10.458593000 seconds Frame Number: 9 Packet Length: 98 bytes Capture Length: 98 bytes Ethernet II, Src: 00:0c:29:1d:cf:fc, Dst: 00:c0:02:11:42:56 Destination: 00:c0:02:11:42:56 (00:c0:02:11:42:56) Source: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc) Type: IP (0x0800) Frame check sequence: 0x52677709 (correct) Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.107 (165.227.249.107) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 80 Identification: 0x01ec (492) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xfa0a (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.107 (165.227.249.107) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 60 Checksum: 0x7ea0 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x6B77A0D4D98C2AB3 Responder cookie: 0xE0CE4CBE589C5D4B Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x8D6A979C Length: 52 Encrypted payload (24 bytes) 0000 00 c0 02 11 42 56 00 0c 29 1d cf fc 08 00 45 00 ....BV..).....E. 0010 00 50 01 ec 00 00 80 11 fa 0a a5 e3 f9 73 a5 e3 .P...........s.. 0020 f9 6b 01 f4 01 f4 00 3c 7e a0 6b 77 a0 d4 d9 8c .k.....<~.kw.... 0030 2a b3 e0 ce 4c be 58 9c 5d 4b 08 10 20 01 8d 6a *...L.X.]K.. ..j 0040 97 9c 00 00 00 34 f3 86 3e 1a f0 66 76 ac b3 17 .....4..>..fv... 0050 66 55 5f c4 9a 7a d8 ae 35 9e 7f ce c2 7d 52 67 fU_..z..5....}Rg 0060 77 09 w. Frame 10 (130 bytes on wire, 130 bytes captured) Arrival Time: May 27, 2005 13:41:32.686045000 Time delta from previous packet: 4.584384000 seconds Time since reference or first frame: 15.042977000 seconds Frame Number: 10 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:0c:29:1d:cf:fc, Dst: 00:c0:02:11:42:56 Destination: 00:c0:02:11:42:56 (00:c0:02:11:42:56) Source: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc) Type: IP (0x0800) Frame check sequence: 0x668beb17 (correct) Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.107 (165.227.249.107) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0001 (1) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: ESP (0x32) Header checksum: 0xfbb4 (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.107 (165.227.249.107) Encapsulating Security Payload SPI: 0xf846b4b8 Sequence: 1 Data (84 bytes) 0000 00 c0 02 11 42 56 00 0c 29 1d cf fc 08 00 45 00 ....BV..).....E. 0010 00 70 00 01 00 00 80 32 fb b4 a5 e3 f9 73 a5 e3 .p.....2.....s.. 0020 f9 6b f8 46 b4 b8 00 00 00 01 cc 50 4d e2 0e d4 .k.F.......PM... 0030 a0 70 0a b6 1b 1a 54 42 73 5e 61 3a 47 40 8f 41 .p....TBs^a:G@.A 0040 71 18 c2 92 18 89 84 6d cd e9 13 f8 18 b7 52 15 q......m......R. 0050 d2 10 69 b7 81 9f c8 27 a2 06 7d 4d 91 3a a6 78 ..i....'..}M.:.x 0060 9f 1e cb 5c 6b 5d 8f 6a 1f 99 0a 2d 30 6f f5 54 ...\k].j...-0o.T 0070 59 eb 26 96 9b bf 95 74 83 92 83 17 c5 ae 66 8b Y.&....t......f. 0080 eb 17 .. Frame 11 (132 bytes on wire, 132 bytes captured) Arrival Time: May 27, 2005 13:41:32.688006000 Time delta from previous packet: 0.001961000 seconds Time since reference or first frame: 15.044938000 seconds Frame Number: 11 Packet Length: 132 bytes Capture Length: 132 bytes Ethernet II, Src: 00:c0:02:11:42:56, Dst: 00:0c:29:1d:cf:fc Destination: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc) Source: 00:c0:02:11:42:56 (00:c0:02:11:42:56) Type: IP (0x0800) Trailer: 4865 Frame check sequence: 0xcfd5403e (correct) Internet Protocol, Src Addr: 165.227.249.107 (165.227.249.107), Dst Addr: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x22b3 (8883) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 30 Protocol: ESP (0x32) Header checksum: 0x3b03 (correct) Source: 165.227.249.107 (165.227.249.107) Destination: 165.227.249.115 (165.227.249.115) Encapsulating Security Payload SPI: 0xa91b801c Sequence: 1 Data (84 bytes) 0000 00 0c 29 1d cf fc 00 c0 02 11 42 56 08 00 45 00 ..).......BV..E. 0010 00 70 22 b3 00 00 1e 32 3b 03 a5 e3 f9 6b a5 e3 .p"....2;....k.. 0020 f9 73 a9 1b 80 1c 00 00 00 01 87 29 bc 80 67 3d .s.........)..g= 0030 98 eb d7 14 0b 4d c7 f1 ac a9 1f 31 80 0c 17 ae .....M.....1.... 0040 ed 91 63 62 11 69 02 fc a3 fc 4c d4 6c 6f 67 d4 ..cb.i....L.log. 0050 5b e8 25 d2 9c 65 fd e4 f9 d9 01 0f 39 49 f7 50 [.%..e......9I.P 0060 36 ae d8 c5 2c 71 db 22 13 0d 5f 80 12 01 4f ce 6...,q.".._...O. 0070 84 bc e3 61 85 f9 b0 fb 68 a7 1a fd fb 57 48 65 ...a....h....WHe 0080 cf d5 40 3e ..@> Frame 12 (324 bytes on wire, 324 bytes captured) Arrival Time: May 27, 2005 13:41:33.973427000 Time delta from previous packet: 1.285421000 seconds Time since reference or first frame: 16.330359000 seconds Frame Number: 12 Packet Length: 324 bytes Capture Length: 324 bytes Ethernet II, Src: 00:c0:02:11:42:56, Dst: 00:0c:29:1d:cf:fc Destination: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc) Source: 00:c0:02:11:42:56 (00:c0:02:11:42:56) Type: IP (0x0800) Trailer: 6361 Frame check sequence: 0x251ccac2 (correct) Internet Protocol, Src Addr: 165.227.249.107 (165.227.249.107), Dst Addr: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 304 Identification: 0x04b2 (1202) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3665 (correct) Source: 165.227.249.107 (165.227.249.107) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 284 Checksum: 0xc354 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x6B77A0D4D98C2AB3 Responder cookie: 0xE0CE4CBE589C5D4B Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x8D6A979C Length: 276 Encrypted payload (248 bytes) 0000 00 0c 29 1d cf fc 00 c0 02 11 42 56 08 00 45 00 ..).......BV..E. 0010 01 30 04 b2 00 00 40 11 36 65 a5 e3 f9 6b a5 e3 .0....@.6e...k.. 0020 f9 73 01 f4 01 f4 01 1c c3 54 6b 77 a0 d4 d9 8c .s.......Tkw.... 0030 2a b3 e0 ce 4c be 58 9c 5d 4b 08 10 20 01 8d 6a *...L.X.]K.. ..j 0040 97 9c 00 00 01 14 4c 34 d2 da a2 97 a8 eb 07 09 ......L4........ 0050 dc 13 84 a3 c8 c4 c1 bf 89 14 81 cf e2 ad 2f 99 ............../. 0060 ff d1 eb d9 db ca b0 af ac 18 6b cb 9e 42 24 af ..........k..B$. 0070 ad b7 8a cf 35 68 b3 0c 1c 2b d2 ed 95 97 22 10 ....5h...+....". 0080 e9 a9 92 84 21 0f 15 9d 68 f6 c9 f1 a1 0c 41 52 ....!...h.....AR 0090 fd 71 92 9c 1d fc ec 6c 5f 4f a1 cd 89 1f ca 34 .q.....l_O.....4 00a0 88 c1 d5 4e c1 fc 5e 33 27 d1 f5 34 97 0e 88 8d ...N..^3'..4.... 00b0 f8 23 51 5a a9 b4 c2 9b af f1 63 eb 5f c4 6f c1 .#QZ......c._.o. 00c0 b6 c2 e0 7a 59 d6 bb 73 61 9e 48 cc 8e a8 fa 76 ...zY..sa.H....v 00d0 3b 07 46 8a 74 6a 26 da ea df f7 9c e6 4d 7a 3f ;.F.tj&......Mz? 00e0 49 e0 9d 6d f9 00 f1 5e 96 65 4a ec 6f 48 46 be I..m...^.eJ.oHF. 00f0 15 00 c7 45 4d 0a a6 70 aa 32 3b 90 3f 01 2a b8 ...EM..p.2;.?.*. 0100 56 a5 10 c7 46 cd d8 9d 61 95 4d 2e 27 84 03 b8 V...F...a.M.'... 0110 ea bd 7f bf 22 bc dc 68 61 2e 7b b0 e4 55 29 9b ...."..ha.{..U). 0120 87 9b 1e 64 d0 43 c4 a1 5e f3 1f ab 9e a0 ea 0c ...d.C..^....... 0130 a8 88 50 70 8a 13 eb 63 c5 bc d5 e8 4c 04 63 61 ..Pp...c....L.ca 0140 25 1c ca c2 %... Frame 13 (98 bytes on wire, 98 bytes captured) Arrival Time: May 27, 2005 13:41:33.975233000 Time delta from previous packet: 0.001806000 seconds Time since reference or first frame: 16.332165000 seconds Frame Number: 13 Packet Length: 98 bytes Capture Length: 98 bytes Ethernet II, Src: 00:0c:29:1d:cf:fc, Dst: 00:c0:02:11:42:56 Destination: 00:c0:02:11:42:56 (00:c0:02:11:42:56) Source: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc) Type: IP (0x0800) Frame check sequence: 0x061ca0f8 (correct) Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.107 (165.227.249.107) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 80 Identification: 0x01f0 (496) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xfa06 (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.107 (165.227.249.107) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 60 Checksum: 0x7ea0 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x6B77A0D4D98C2AB3 Responder cookie: 0xE0CE4CBE589C5D4B Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x8D6A979C Length: 52 Encrypted payload (24 bytes) 0000 00 c0 02 11 42 56 00 0c 29 1d cf fc 08 00 45 00 ....BV..).....E. 0010 00 50 01 f0 00 00 80 11 fa 06 a5 e3 f9 73 a5 e3 .P...........s.. 0020 f9 6b 01 f4 01 f4 00 3c 7e a0 6b 77 a0 d4 d9 8c .k.....<~.kw.... 0030 2a b3 e0 ce 4c be 58 9c 5d 4b 08 10 20 01 8d 6a *...L.X.]K.. ..j 0040 97 9c 00 00 00 34 f3 86 3e 1a f0 66 76 ac b3 17 .....4..>..fv... 0050 66 55 5f c4 9a 7a d8 ae 35 9e 7f ce c2 7d 06 1c fU_..z..5....}.. 0060 a0 f8 ..