Frame 1 (166 bytes on wire, 166 bytes captured) Arrival Time: Sep 5, 2005 11:42:26.918202000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 166 bytes Capture Length: 166 bytes Ethernet II, Src: 00:0c:29:1d:cf:fc, Dst: 00:13:46:3d:7d:5e Destination: 00:13:46:3d:7d:5e (00:13:46:3d:7d:5e) Source: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc) Type: IP (0x0800) Frame check sequence: 0x61ccea4a (correct) Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.108 (165.227.249.108) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 148 Identification: 0x067a (1658) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf537 (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.108 (165.227.249.108) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 128 Checksum: 0xde0c (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x249ACBFFCCF8F1A1 Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 120 Security Association payload Next payload: Vendor ID (13) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 40 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 32 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (3600) Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 0000 00 13 46 3d 7d 5e 00 0c 29 1d cf fc 08 00 45 00 ..F=}^..).....E. 0010 00 94 06 7a 00 00 80 11 f5 37 a5 e3 f9 73 a5 e3 ...z.....7...s.. 0020 f9 6c 01 f4 01 f4 00 80 de 0c 24 9a cb ff cc f8 .l........$..... 0030 f1 a1 00 00 00 00 00 00 00 00 01 10 02 00 00 00 ................ 0040 00 00 00 00 00 78 0d 00 00 34 00 00 00 01 00 00 .....x...4...... 0050 00 01 00 00 00 28 01 01 00 01 00 00 00 20 01 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 04 00 02 80 03 ................ 0070 00 01 80 0b 00 01 80 0c 0e 10 0d 00 00 14 44 85 ..............D. 0080 15 2d 18 b6 bb cd 0b e8 a8 46 95 79 dd cc 00 00 .-.......F.y.... 0090 00 14 90 cb 80 91 3e bb 69 6e 08 63 81 b5 ec 42 ......>.in.c...B 00a0 7b 1f 61 cc ea 4a {.a..J Frame 2 (266 bytes on wire, 266 bytes captured) Arrival Time: Sep 5, 2005 11:42:26.927257000 Time delta from previous packet: 0.009055000 seconds Time since reference or first frame: 0.009055000 seconds Frame Number: 2 Packet Length: 266 bytes Capture Length: 266 bytes Ethernet II, Src: 00:13:46:3d:7d:5e, Dst: 00:0c:29:1d:cf:fc Destination: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc) Source: 00:13:46:3d:7d:5e (00:13:46:3d:7d:5e) Type: IP (0x0800) Frame check sequence: 0xdb68c20e (correct) Internet Protocol, Src Addr: 165.227.249.108 (165.227.249.108), Dst Addr: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 248 Identification: 0x0b5f (2911) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: UDP (0x11) Header checksum: 0x70ee (correct) Source: 165.227.249.108 (165.227.249.108) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 228 Checksum: 0x0274 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x249ACBFFCCF8F1A1 Responder cookie: 0x7117FEA678A2315D Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 220 Security Association payload Next payload: Vendor ID (13) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 40 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 32 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (3600) Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-dpd-00.txt Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-stenberg-ipsec-nat-traversal-01 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-stenberg-ipsec-nat-traversal-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-03 0000 00 0c 29 1d cf fc 00 13 46 3d 7d 5e 08 00 45 00 ..).....F=}^..E. 0010 00 f8 0b 5f 00 00 ff 11 70 ee a5 e3 f9 6c a5 e3 ..._....p....l.. 0020 f9 73 01 f4 01 f4 00 e4 02 74 24 9a cb ff cc f8 .s.......t$..... 0030 f1 a1 71 17 fe a6 78 a2 31 5d 01 10 02 00 00 00 ..q...x.1]...... 0040 00 00 00 00 00 dc 0d 00 00 34 00 00 00 01 00 00 .........4...... 0050 00 01 00 00 00 28 01 01 00 01 00 00 00 20 01 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 04 00 02 80 03 ................ 0070 00 01 80 0b 00 01 80 0c 0e 10 0d 00 00 14 af ca ................ 0080 d7 13 68 a1 f1 c9 6b 86 96 fc 77 57 01 00 0d 00 ..h...k...wW.... 0090 00 14 27 ba b5 dc 01 ea 07 60 ea 4e 31 90 ac 27 ..'......`.N1..' 00a0 c0 d0 0d 00 00 14 61 05 c4 22 e7 68 47 e4 3f 96 ......a..".hG.?. 00b0 84 80 12 92 ae cd 0d 00 00 14 44 85 15 2d 18 b6 ..........D..-.. 00c0 bb cd 0b e8 a8 46 95 79 dd cc 0d 00 00 14 cd 60 .....F.y.......` 00d0 46 43 35 df 21 f8 7c fd b2 fc 68 b6 a4 48 0d 00 FC5.!.|...h..H.. 00e0 00 14 90 cb 80 91 3e bb 69 6e 08 63 81 b5 ec 42 ......>.in.c...B 00f0 7b 1f 00 00 00 14 7d 94 19 a6 53 10 ca 6f 2c 17 {.....}...S..o,. 0100 9d 92 15 52 9d 56 db 68 c2 0e ...R.V.h.. Frame 3 (266 bytes on wire, 266 bytes captured) Arrival Time: Sep 5, 2005 11:42:27.419916000 Time delta from previous packet: 0.492659000 seconds Time since reference or first frame: 0.501714000 seconds Frame Number: 3 Packet Length: 266 bytes Capture Length: 266 bytes Ethernet II, Src: 00:13:46:3d:7d:5e, Dst: 00:0c:29:1d:cf:fc Destination: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc) Source: 00:13:46:3d:7d:5e (00:13:46:3d:7d:5e) Type: IP (0x0800) Frame check sequence: 0xd27c5f5b (correct) Internet Protocol, Src Addr: 165.227.249.108 (165.227.249.108), Dst Addr: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 248 Identification: 0x0b2e (2862) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: UDP (0x11) Header checksum: 0x711f (correct) Source: 165.227.249.108 (165.227.249.108) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 228 Checksum: 0x0274 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x249ACBFFCCF8F1A1 Responder cookie: 0x7117FEA678A2315D Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 220 Security Association payload Next payload: Vendor ID (13) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 40 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 32 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (3600) Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-dpd-00.txt Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-stenberg-ipsec-nat-traversal-01 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-stenberg-ipsec-nat-traversal-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-03 0000 00 0c 29 1d cf fc 00 13 46 3d 7d 5e 08 00 45 00 ..).....F=}^..E. 0010 00 f8 0b 2e 00 00 ff 11 71 1f a5 e3 f9 6c a5 e3 ........q....l.. 0020 f9 73 01 f4 01 f4 00 e4 02 74 24 9a cb ff cc f8 .s.......t$..... 0030 f1 a1 71 17 fe a6 78 a2 31 5d 01 10 02 00 00 00 ..q...x.1]...... 0040 00 00 00 00 00 dc 0d 00 00 34 00 00 00 01 00 00 .........4...... 0050 00 01 00 00 00 28 01 01 00 01 00 00 00 20 01 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 04 00 02 80 03 ................ 0070 00 01 80 0b 00 01 80 0c 0e 10 0d 00 00 14 af ca ................ 0080 d7 13 68 a1 f1 c9 6b 86 96 fc 77 57 01 00 0d 00 ..h...k...wW.... 0090 00 14 27 ba b5 dc 01 ea 07 60 ea 4e 31 90 ac 27 ..'......`.N1..' 00a0 c0 d0 0d 00 00 14 61 05 c4 22 e7 68 47 e4 3f 96 ......a..".hG.?. 00b0 84 80 12 92 ae cd 0d 00 00 14 44 85 15 2d 18 b6 ..........D..-.. 00c0 bb cd 0b e8 a8 46 95 79 dd cc 0d 00 00 14 cd 60 .....F.y.......` 00d0 46 43 35 df 21 f8 7c fd b2 fc 68 b6 a4 48 0d 00 FC5.!.|...h..H.. 00e0 00 14 90 cb 80 91 3e bb 69 6e 08 63 81 b5 ec 42 ......>.in.c...B 00f0 7b 1f 00 00 00 14 7d 94 19 a6 53 10 ca 6f 2c 17 {.....}...S..o,. 0100 9d 92 15 52 9d 56 d2 7c 5f 5b ...R.V.|_[ Frame 4 (350 bytes on wire, 350 bytes captured) Arrival Time: Sep 5, 2005 11:42:27.906711000 Time delta from previous packet: 0.486795000 seconds Time since reference or first frame: 0.988509000 seconds Frame Number: 4 Packet Length: 350 bytes Capture Length: 350 bytes Ethernet II, Src: 00:0c:29:1d:cf:fc, Dst: 00:13:46:3d:7d:5e Destination: 00:13:46:3d:7d:5e (00:13:46:3d:7d:5e) Source: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc) Type: IP (0x0800) Frame check sequence: 0x913562c4 (correct) Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.108 (165.227.249.108) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 332 Identification: 0x067b (1659) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf47e (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.108 (165.227.249.108) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 312 Checksum: 0xf759 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x249ACBFFCCF8F1A1 Responder cookie: 0x7117FEA678A2315D Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 304 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: Private USE (130) Length: 24 Nonce Data Unknown payload type payload Next payload: Private USE (130) Length: 24 Payload Unknown payload type payload Next payload: Vendor ID (13) Length: 24 Payload Vendor ID payload Next payload: Vendor ID (13) Length: 48 Vendor ID: unknown vendor ID: 0x47BBE7C993F1FC13B4E6D0DB565C68E5... Vendor ID payload Next payload: Vendor ID (13) Length: 12 Vendor ID: unknown vendor ID: 0xDA8E937880010000 Vendor ID payload Next payload: NONE (0) Length: 12 Vendor ID: draft-beaulieu-ike-xauth-02.txt 0000 00 13 46 3d 7d 5e 00 0c 29 1d cf fc 08 00 45 00 ..F=}^..).....E. 0010 01 4c 06 7b 00 00 80 11 f4 7e a5 e3 f9 73 a5 e3 .L.{.....~...s.. 0020 f9 6c 01 f4 01 f4 01 38 f7 59 24 9a cb ff cc f8 .l.....8.Y$..... 0030 f1 a1 71 17 fe a6 78 a2 31 5d 04 10 02 00 00 00 ..q...x.1]...... 0040 00 00 00 00 01 30 0a 00 00 84 c0 74 29 b8 c2 60 .....0.....t)..` 0050 df ea 59 ba c6 88 c3 70 2a ba a3 23 85 24 96 72 ..Y....p*..#.$.r 0060 cc 66 50 aa ed bb 7e 78 8d 95 62 02 a9 21 98 83 .fP...~x..b..!.. 0070 14 a0 13 fd 3e af 54 00 a1 42 63 9e 1f b9 db 8e ....>.T..Bc..... 0080 46 26 3f bd 66 59 f1 2a e3 b1 18 23 aa 04 5e 59 F&?.fY.*...#..^Y 0090 fc f3 de 60 da 91 00 a5 93 b6 3f 44 c1 7d c5 e4 ...`......?D.}.. 00a0 d0 73 17 62 29 b3 e2 79 ef 7c a9 84 f7 b7 cd 6e .s.b)..y.|.....n 00b0 5c ab d3 8f 73 66 b2 b4 1b 6c c8 42 04 82 47 a1 \...sf...l.B..G. 00c0 a9 24 eb 72 56 d7 8f de 76 47 82 00 00 18 d9 22 .$.rV...vG....." 00d0 88 e1 f0 20 1d c1 0b e7 74 4f 23 c3 f9 3f fe 27 ... ....tO#..?.' 00e0 ad 60 82 00 00 18 4c 1d e3 74 fc 9c be dc fe cf .`....L..t...... 00f0 ab 1e 49 99 e5 f7 7b ea 2e 2b 0d 00 00 18 2c 9b ..I...{..+....,. 0100 ee 25 29 aa 9f df 2d 37 2d 54 37 a1 cb ce 48 2a .%)...-7-T7...H* 0110 c3 61 0d 00 00 30 47 bb e7 c9 93 f1 fc 13 b4 e6 .a...0G......... 0120 d0 db 56 5c 68 e5 01 02 01 01 02 01 01 03 11 31 ..V\h..........1 0130 30 2e 31 2e 31 20 28 42 75 69 6c 64 20 31 30 29 0.1.1 (Build 10) 0140 00 00 0d 00 00 0c da 8e 93 78 80 01 00 00 00 00 .........x...... 0150 00 0c 09 00 26 89 df d6 b7 12 91 35 62 c4 ....&......5b. Frame 5 (350 bytes on wire, 350 bytes captured) Arrival Time: Sep 5, 2005 11:42:27.909107000 Time delta from previous packet: 0.002396000 seconds Time since reference or first frame: 0.990905000 seconds Frame Number: 5 Packet Length: 350 bytes Capture Length: 350 bytes Ethernet II, Src: 00:0c:29:1d:cf:fc, Dst: 00:13:46:3d:7d:5e Destination: 00:13:46:3d:7d:5e (00:13:46:3d:7d:5e) Source: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc) Type: IP (0x0800) Frame check sequence: 0xb542a284 (correct) Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.108 (165.227.249.108) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 332 Identification: 0x067c (1660) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf47d (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.108 (165.227.249.108) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 312 Checksum: 0xf759 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x249ACBFFCCF8F1A1 Responder cookie: 0x7117FEA678A2315D Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 304 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: Private USE (130) Length: 24 Nonce Data Unknown payload type payload Next payload: Private USE (130) Length: 24 Payload Unknown payload type payload Next payload: Vendor ID (13) Length: 24 Payload Vendor ID payload Next payload: Vendor ID (13) Length: 48 Vendor ID: unknown vendor ID: 0x47BBE7C993F1FC13B4E6D0DB565C68E5... Vendor ID payload Next payload: Vendor ID (13) Length: 12 Vendor ID: unknown vendor ID: 0xDA8E937880010000 Vendor ID payload Next payload: NONE (0) Length: 12 Vendor ID: draft-beaulieu-ike-xauth-02.txt 0000 00 13 46 3d 7d 5e 00 0c 29 1d cf fc 08 00 45 00 ..F=}^..).....E. 0010 01 4c 06 7c 00 00 80 11 f4 7d a5 e3 f9 73 a5 e3 .L.|.....}...s.. 0020 f9 6c 01 f4 01 f4 01 38 f7 59 24 9a cb ff cc f8 .l.....8.Y$..... 0030 f1 a1 71 17 fe a6 78 a2 31 5d 04 10 02 00 00 00 ..q...x.1]...... 0040 00 00 00 00 01 30 0a 00 00 84 c0 74 29 b8 c2 60 .....0.....t)..` 0050 df ea 59 ba c6 88 c3 70 2a ba a3 23 85 24 96 72 ..Y....p*..#.$.r 0060 cc 66 50 aa ed bb 7e 78 8d 95 62 02 a9 21 98 83 .fP...~x..b..!.. 0070 14 a0 13 fd 3e af 54 00 a1 42 63 9e 1f b9 db 8e ....>.T..Bc..... 0080 46 26 3f bd 66 59 f1 2a e3 b1 18 23 aa 04 5e 59 F&?.fY.*...#..^Y 0090 fc f3 de 60 da 91 00 a5 93 b6 3f 44 c1 7d c5 e4 ...`......?D.}.. 00a0 d0 73 17 62 29 b3 e2 79 ef 7c a9 84 f7 b7 cd 6e .s.b)..y.|.....n 00b0 5c ab d3 8f 73 66 b2 b4 1b 6c c8 42 04 82 47 a1 \...sf...l.B..G. 00c0 a9 24 eb 72 56 d7 8f de 76 47 82 00 00 18 d9 22 .$.rV...vG....." 00d0 88 e1 f0 20 1d c1 0b e7 74 4f 23 c3 f9 3f fe 27 ... ....tO#..?.' 00e0 ad 60 82 00 00 18 4c 1d e3 74 fc 9c be dc fe cf .`....L..t...... 00f0 ab 1e 49 99 e5 f7 7b ea 2e 2b 0d 00 00 18 2c 9b ..I...{..+....,. 0100 ee 25 29 aa 9f df 2d 37 2d 54 37 a1 cb ce 48 2a .%)...-7-T7...H* 0110 c3 61 0d 00 00 30 47 bb e7 c9 93 f1 fc 13 b4 e6 .a...0G......... 0120 d0 db 56 5c 68 e5 01 02 01 01 02 01 01 03 11 31 ..V\h..........1 0130 30 2e 31 2e 31 20 28 42 75 69 6c 64 20 31 30 29 0.1.1 (Build 10) 0140 00 00 0d 00 00 0c da 8e 93 78 80 01 00 00 00 00 .........x...... 0150 00 0c 09 00 26 89 df d6 b7 12 b5 42 a2 84 ....&......B.. Frame 6 (370 bytes on wire, 370 bytes captured) Arrival Time: Sep 5, 2005 11:42:28.229931000 Time delta from previous packet: 0.320824000 seconds Time since reference or first frame: 1.311729000 seconds Frame Number: 6 Packet Length: 370 bytes Capture Length: 370 bytes Ethernet II, Src: 00:13:46:3d:7d:5e, Dst: 00:0c:29:1d:cf:fc Destination: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc) Source: 00:13:46:3d:7d:5e (00:13:46:3d:7d:5e) Type: IP (0x0800) Frame check sequence: 0x56674b7f (correct) Internet Protocol, Src Addr: 165.227.249.108 (165.227.249.108), Dst Addr: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 352 Identification: 0x08f2 (2290) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: UDP (0x11) Header checksum: 0x72f3 (correct) Source: 165.227.249.108 (165.227.249.108) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 332 Checksum: 0xb1f7 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x249ACBFFCCF8F1A1 Responder cookie: 0x7117FEA678A2315D Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 324 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: Private USE (130) Length: 20 Nonce Data Unknown payload type payload Next payload: Private USE (130) Length: 24 Payload Unknown payload type payload Next payload: Private USE (130) Length: 24 Payload Unknown payload type payload Next payload: Private USE (130) Length: 24 Payload Unknown payload type payload Next payload: Private USE (130) Length: 24 Payload Unknown payload type payload Next payload: Private USE (130) Length: 24 Payload Unknown payload type payload Next payload: NONE (0) Length: 24 Payload 0000 00 0c 29 1d cf fc 00 13 46 3d 7d 5e 08 00 45 00 ..).....F=}^..E. 0010 01 60 08 f2 00 00 ff 11 72 f3 a5 e3 f9 6c a5 e3 .`......r....l.. 0020 f9 73 01 f4 01 f4 01 4c b1 f7 24 9a cb ff cc f8 .s.....L..$..... 0030 f1 a1 71 17 fe a6 78 a2 31 5d 04 10 02 00 00 00 ..q...x.1]...... 0040 00 00 00 00 01 44 0a 00 00 84 7d 8d ce 25 a1 67 .....D....}..%.g 0050 b0 14 aa 56 32 82 9b f0 ad 4b b2 fd 0d ad ba 46 ...V2....K.....F 0060 1c 2c d0 dc 3a 3c 2f e9 0e 3c bd 8c 55 8f f0 d4 .,..:.....K.]. 00a0 62 d1 bf ec 90 8e fa 1d 0b 09 50 5f a2 65 f9 ed b.........P_.e.. 00b0 f6 93 a1 4c 37 3a 9e 57 df 4f ff 1a e6 eb 6b a0 ...L7:.W.O....k. 00c0 f6 a6 66 ef c4 47 f2 de 91 b2 fb 4a 44 25 a4 65 ..f..G.....JD%.e 00d0 ff 0f ee 77 46 78 0b be 02 fd 12 00 ad 8a a1 f4 ...wFx.......... 00e0 24 64 0c 33 3b 21 3f ad 48 1c 3c f3 15 74 40 7b $d.3;!?.H.<..t@{ 00f0 a5 6b 5c 70 12 1d 4c 05 48 07 ff 47 f0 8d f0 e8 .k\p..L.H..G.... 0100 a4 9d 68 e6 27 d7 ac d8 57 e7 fb d6 48 b5 46 76 ..h.'...W...H.Fv 0110 cd 7b 5b 33 74 b4 af 29 0f db 25 8f f6 9e e9 65 .{[3t..)..%....e 0120 94 c7 35 ee 2b 0e ec 03 73 0d 50 a9 b5 f5 dc 5c ..5.+...s.P....\ 0130 e7 cf 7a 33 a5 ff 0f 72 1f 6f 9f 41 55 a9 d5 23 ..z3...r.o.AU..# 0140 8b 7a 3b 9c 63 32 e3 7e 28 84 85 88 36 0c 99 bf .z;.c2.~(...6... 0150 b3 f8 .. Frame 14 (330 bytes on wire, 330 bytes captured) Arrival Time: Sep 5, 2005 11:42:30.006493000 Time delta from previous packet: 0.171508000 seconds Time since reference or first frame: 3.088291000 seconds Frame Number: 14 Packet Length: 330 bytes Capture Length: 330 bytes Ethernet II, Src: 00:13:46:3d:7d:5e, Dst: 00:0c:29:1d:cf:fc Destination: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc) Source: 00:13:46:3d:7d:5e (00:13:46:3d:7d:5e) Type: IP (0x0800) Frame check sequence: 0x58cb9ab8 (correct) Internet Protocol, Src Addr: 165.227.249.108 (165.227.249.108), Dst Addr: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 312 Identification: 0x0a07 (2567) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: UDP (0x11) Header checksum: 0x7206 (correct) Source: 165.227.249.108 (165.227.249.108) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 292 Checksum: 0x8728 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x249ACBFFCCF8F1A1 Responder cookie: 0x7117FEA678A2315D Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xA0159DE3 Length: 284 Encrypted payload (256 bytes) 0000 00 0c 29 1d cf fc 00 13 46 3d 7d 5e 08 00 45 00 ..).....F=}^..E. 0010 01 38 0a 07 00 00 ff 11 72 06 a5 e3 f9 6c a5 e3 .8......r....l.. 0020 f9 73 01 f4 01 f4 01 24 87 28 24 9a cb ff cc f8 .s.....$.($..... 0030 f1 a1 71 17 fe a6 78 a2 31 5d 08 10 20 01 a0 15 ..q...x.1].. ... 0040 9d e3 00 00 01 1c ed 53 17 91 81 b5 e3 63 c4 38 .......S.....c.8 0050 97 e2 9b af 5c 46 0d ef 79 a9 af a4 7c 6f ca bc ....\F..y...|o.. 0060 72 3d 32 7f 7a 3c 49 71 7b b7 ba 77 12 dc 3b 7a r=2.z.. 00e0 87 06 3a db 7f 9e 19 02 05 b1 4b 8b f9 cc 6e 4b ..:.......K...nK 00f0 f4 6c 63 04 ba e6 89 6e 0c 8d 7f 97 3c d6 19 16 .lc....n....<... 0100 2e ce 06 2c 2e 08 4c db 76 1d e2 d2 4e d3 5f 10 ...,..L.v...N._. 0110 6d d6 b4 9c 20 c7 16 0b b4 a1 ff d8 60 01 e8 db m... .......`... 0120 2a aa c4 c4 85 55 c0 cf c5 a0 d5 a1 08 54 09 59 *....U.......T.Y 0130 29 2c e2 f9 db 8f 96 69 a3 f8 e2 79 b6 57 28 df ),.....i...y.W(. 0140 33 48 0f 42 67 6a 58 cb 9a b8 3H.BgjX... Frame 15 (98 bytes on wire, 98 bytes captured) Arrival Time: Sep 5, 2005 11:42:30.012838000 Time delta from previous packet: 0.006345000 seconds Time since reference or first frame: 3.094636000 seconds Frame Number: 15 Packet Length: 98 bytes Capture Length: 98 bytes Ethernet II, Src: 00:0c:29:1d:cf:fc, Dst: 00:13:46:3d:7d:5e Destination: 00:13:46:3d:7d:5e (00:13:46:3d:7d:5e) Source: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc) Type: IP (0x0800) Frame check sequence: 0x97eb6320 (correct) Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.108 (165.227.249.108) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 80 Identification: 0x0683 (1667) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf572 (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.108 (165.227.249.108) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 60 Checksum: 0x5f4b (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x249ACBFFCCF8F1A1 Responder cookie: 0x7117FEA678A2315D Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xA0159DE3 Length: 52 Encrypted payload (24 bytes) 0000 00 13 46 3d 7d 5e 00 0c 29 1d cf fc 08 00 45 00 ..F=}^..).....E. 0010 00 50 06 83 00 00 80 11 f5 72 a5 e3 f9 73 a5 e3 .P.......r...s.. 0020 f9 6c 01 f4 01 f4 00 3c 5f 4b 24 9a cb ff cc f8 .l.....<_K$..... 0030 f1 a1 71 17 fe a6 78 a2 31 5d 08 10 20 01 a0 15 ..q...x.1].. ... 0040 9d e3 00 00 00 34 a6 cc f6 08 32 d3 e8 8d cf db .....4....2..... 0050 2b bc 62 e4 82 69 62 91 3d 53 49 eb ab 7d 97 eb +.b..ib.=SI..}.. 0060 63 20 c Frame 16 (130 bytes on wire, 130 bytes captured) Arrival Time: Sep 5, 2005 11:42:31.365664000 Time delta from previous packet: 1.352826000 seconds Time since reference or first frame: 4.447462000 seconds Frame Number: 16 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:0c:29:1d:cf:fc, Dst: 00:13:46:3d:7d:5e Destination: 00:13:46:3d:7d:5e (00:13:46:3d:7d:5e) Source: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc) Type: IP (0x0800) Frame check sequence: 0x9b0342f5 (correct) Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.108 (165.227.249.108) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0001 (1) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: ESP (0x32) Header checksum: 0xfbb3 (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.108 (165.227.249.108) Encapsulating Security Payload SPI: 0x08609672 Sequence: 1 Data (84 bytes) 0000 00 13 46 3d 7d 5e 00 0c 29 1d cf fc 08 00 45 00 ..F=}^..).....E. 0010 00 70 00 01 00 00 80 32 fb b3 a5 e3 f9 73 a5 e3 .p.....2.....s.. 0020 f9 6c 08 60 96 72 00 00 00 01 61 47 64 03 a4 4a .l.`.r....aGd..J 0030 b0 41 cd d0 58 c2 f0 14 a2 f0 be 69 13 cc 86 0b .A..X......i.... 0040 52 a1 f8 7a 64 4b 38 25 8b 5c c2 f4 d0 33 f8 23 R..zdK8%.\...3.# 0050 cd a4 5f d8 de c4 1c ea 91 22 c9 63 43 b1 33 80 .._......".cC.3. 0060 c7 bb ce a2 7b 0b b5 38 03 52 6a c1 34 42 7b 91 ....{..8.Rj.4B{. 0070 ac 45 47 16 7d 74 21 7a e1 09 48 dd bd 47 9b 03 .EG.}t!z..H..G.. 0080 42 f5 B. Frame 17 (130 bytes on wire, 130 bytes captured) Arrival Time: Sep 5, 2005 11:42:31.376493000 Time delta from previous packet: 0.010829000 seconds Time since reference or first frame: 4.458291000 seconds Frame Number: 17 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:13:46:3d:7d:5e, Dst: 00:0c:29:1d:cf:fc Destination: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc) Source: 00:13:46:3d:7d:5e (00:13:46:3d:7d:5e) Type: IP (0x0800) Frame check sequence: 0x795e6031 (correct) Internet Protocol, Src Addr: 165.227.249.108 (165.227.249.108), Dst Addr: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0c06 (3078) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x7fae (correct) Source: 165.227.249.108 (165.227.249.108) Destination: 165.227.249.115 (165.227.249.115) Encapsulating Security Payload SPI: 0xe3334f95 Sequence: 1 Data (84 bytes) 0000 00 0c 29 1d cf fc 00 13 46 3d 7d 5e 08 00 45 00 ..).....F=}^..E. 0010 00 70 0c 06 00 00 f0 32 7f ae a5 e3 f9 6c a5 e3 .p.....2.....l.. 0020 f9 73 e3 33 4f 95 00 00 00 01 a5 e3 f9 6c a5 e3 .s.3O........l.. 0030 f9 73 30 68 4d 56 1f db 04 23 6a 2b 3a f3 14 6c .s0hMV...#j+:..l 0040 73 b4 3b c5 e1 40 97 e5 2f d0 78 af e8 31 f1 2a s.;..@../.x..1.* 0050 ff 17 96 b9 4a fe 09 ba f4 8d 3d 47 6c 49 78 b1 ....J.....=GlIx. 0060 2a f9 f1 cf a5 33 61 bb a1 e9 82 c9 45 56 c8 9c *....3a.....EV.. 0070 eb f3 8c de 83 9a ac 29 05 3b 66 32 85 89 79 5e .......).;f2..y^ 0080 60 31 `1 Frame 18 (130 bytes on wire, 130 bytes captured) Arrival Time: Sep 5, 2005 11:42:31.791124000 Time delta from previous packet: 0.414631000 seconds Time since reference or first frame: 4.872922000 seconds Frame Number: 18 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:0c:29:1d:cf:fc, Dst: 00:13:46:3d:7d:5e Destination: 00:13:46:3d:7d:5e (00:13:46:3d:7d:5e) Source: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc) Type: IP (0x0800) Frame check sequence: 0x2c1ded83 (correct) Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.108 (165.227.249.108) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0002 (2) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: ESP (0x32) Header checksum: 0xfbb2 (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.108 (165.227.249.108) Encapsulating Security Payload SPI: 0x08609672 Sequence: 2 Data (84 bytes) 0000 00 13 46 3d 7d 5e 00 0c 29 1d cf fc 08 00 45 00 ..F=}^..).....E. 0010 00 70 00 02 00 00 80 32 fb b2 a5 e3 f9 73 a5 e3 .p.....2.....s.. 0020 f9 6c 08 60 96 72 00 00 00 02 6a c1 34 42 7b 91 .l.`.r....j.4B{. 0030 ac 45 61 32 c5 68 ac 9a e9 9d 9e 8c 6d 5b a4 74 .Ea2.h......m[.t 0040 0d 7c d6 1b ef d4 ab 4a ce 27 04 ae 94 9f fa 78 .|.....J.'.....x 0050 c8 83 df f5 45 f9 37 97 66 8e 7b 01 92 ea 3f 0c ....E.7.f.{...?. 0060 0f ae 17 fe 9b 46 02 06 29 09 a9 2f 2a cc de 44 .....F..)../*..D 0070 0e 17 ef 6c 43 26 e6 4e 8c c1 43 69 ee 82 2c 1d ...lC&.N..Ci..,. 0080 ed 83 .. Frame 19 (130 bytes on wire, 130 bytes captured) Arrival Time: Sep 5, 2005 11:42:31.792559000 Time delta from previous packet: 0.001435000 seconds Time since reference or first frame: 4.874357000 seconds Frame Number: 19 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:13:46:3d:7d:5e, Dst: 00:0c:29:1d:cf:fc Destination: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc) Source: 00:13:46:3d:7d:5e (00:13:46:3d:7d:5e) Type: IP (0x0800) Frame check sequence: 0x578240c4 (correct) Internet Protocol, Src Addr: 165.227.249.108 (165.227.249.108), Dst Addr: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0baf (2991) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8005 (correct) Source: 165.227.249.108 (165.227.249.108) Destination: 165.227.249.115 (165.227.249.115) Encapsulating Security Payload SPI: 0xe3334f95 Sequence: 2 Data (84 bytes) 0000 00 0c 29 1d cf fc 00 13 46 3d 7d 5e 08 00 45 00 ..).....F=}^..E. 0010 00 70 0b af 00 00 f0 32 80 05 a5 e3 f9 6c a5 e3 .p.....2.....l.. 0020 f9 73 e3 33 4f 95 00 00 00 02 a5 e3 f9 6c a5 e3 .s.3O........l.. 0030 f9 73 17 79 4c 74 c6 1e c8 f9 f1 41 7a 0a 78 2f .s.yLt.....Az.x/ 0040 0a f1 17 1f 2d 9a 69 b7 b0 7e b4 a6 8b d8 b0 6d ....-.i..~.....m 0050 7d 70 5e 5e d3 26 a3 87 e0 df 40 6f 4a b6 68 a2 }p^^.&....@oJ.h. 0060 6b 33 a6 37 50 72 58 49 61 8f a3 c1 cb 55 c5 ce k3.7PrXIa....U.. 0070 76 39 39 8c 8f 48 4f c1 92 40 d0 c1 b7 d1 57 82 v99..HO..@....W. 0080 40 c4 @.