Frame 1 (166 bytes on wire, 166 bytes captured) Arrival Time: Nov 9, 2005 10:46:16.947666000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 166 bytes Capture Length: 166 bytes Ethernet II, Src: 00:0c:29:1d:cf:fc, Dst: 00:0f:b5:ca:72:27 Destination: 00:0f:b5:ca:72:27 (00:0f:b5:ca:72:27) Source: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc) Type: IP (0x0800) Frame check sequence: 0x96518aca (correct) Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.109 (165.227.249.109) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 148 Identification: 0x0069 (105) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xfb47 (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.109 (165.227.249.109) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 128 Checksum: 0x9c6f (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x8CECE574CDE3B08B Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 120 Security Association payload Next payload: Vendor ID (13) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 40 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 32 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (3600) Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 0000 00 0f b5 ca 72 27 00 0c 29 1d cf fc 08 00 45 00 ....r'..).....E. 0010 00 94 00 69 00 00 80 11 fb 47 a5 e3 f9 73 a5 e3 ...i.....G...s.. 0020 f9 6d 01 f4 01 f4 00 80 9c 6f 8c ec e5 74 cd e3 .m.......o...t.. 0030 b0 8b 00 00 00 00 00 00 00 00 01 10 02 00 00 00 ................ 0040 00 00 00 00 00 78 0d 00 00 34 00 00 00 01 00 00 .....x...4...... 0050 00 01 00 00 00 28 01 01 00 01 00 00 00 20 01 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 04 00 02 80 03 ................ 0070 00 01 80 0b 00 01 80 0c 0e 10 0d 00 00 14 44 85 ..............D. 0080 15 2d 18 b6 bb cd 0b e8 a8 46 95 79 dd cc 00 00 .-.......F.y.... 0090 00 14 90 cb 80 91 3e bb 69 6e 08 63 81 b5 ec 42 ......>.in.c...B 00a0 7b 1f 96 51 8a ca {..Q.. Frame 2 (186 bytes on wire, 186 bytes captured) Arrival Time: Nov 9, 2005 10:46:16.951144000 Time delta from previous packet: 0.003478000 seconds Time since reference or first frame: 0.003478000 seconds Frame Number: 2 Packet Length: 186 bytes Capture Length: 186 bytes Ethernet II, Src: 00:0f:b5:ca:72:27, Dst: 00:0c:29:1d:cf:fc Destination: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc) Source: 00:0f:b5:ca:72:27 (00:0f:b5:ca:72:27) Type: IP (0x0800) Frame check sequence: 0x02b6ed3c (correct) Internet Protocol, Src Addr: 165.227.249.109 (165.227.249.109), Dst Addr: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 168 Identification: 0x0eb6 (3766) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x2ce7 (correct) Source: 165.227.249.109 (165.227.249.109) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 148 Checksum: 0xbafb (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x8CECE574CDE3B08B Responder cookie: 0x7D9B5FD49A8CC544 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 140 Security Association payload Next payload: Vendor ID (13) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 40 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 32 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (3600) Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-dpd-00.txt Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: unknown vendor ID: 0x648982785BEDBDD66A6DD356F0E160FD 0000 00 0c 29 1d cf fc 00 0f b5 ca 72 27 08 00 45 00 ..).......r'..E. 0010 00 a8 0e b6 00 00 40 11 2c e7 a5 e3 f9 6d a5 e3 ......@.,....m.. 0020 f9 73 01 f4 01 f4 00 94 ba fb 8c ec e5 74 cd e3 .s...........t.. 0030 b0 8b 7d 9b 5f d4 9a 8c c5 44 01 10 02 00 00 00 ..}._....D...... 0040 00 00 00 00 00 8c 0d 00 00 34 00 00 00 01 00 00 .........4...... 0050 00 01 00 00 00 28 01 01 00 01 00 00 00 20 01 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 04 00 02 80 03 ................ 0070 00 01 80 0b 00 01 80 0c 0e 10 0d 00 00 14 90 cb ................ 0080 80 91 3e bb 69 6e 08 63 81 b5 ec 42 7b 1f 0d 00 ..>.in.c...B{... 0090 00 14 af ca d7 13 68 a1 f1 c9 6b 86 96 fc 77 57 ......h...k...wW 00a0 01 00 00 00 00 14 64 89 82 78 5b ed bd d6 6a 6d ......d..x[...jm 00b0 d3 56 f0 e1 60 fd 02 b6 ed 3c .V..`....< Frame 3 (350 bytes on wire, 350 bytes captured) Arrival Time: Nov 9, 2005 10:46:19.134558000 Time delta from previous packet: 2.183414000 seconds Time since reference or first frame: 2.186892000 seconds Frame Number: 3 Packet Length: 350 bytes Capture Length: 350 bytes Ethernet II, Src: 00:0c:29:1d:cf:fc, Dst: 00:0f:b5:ca:72:27 Destination: 00:0f:b5:ca:72:27 (00:0f:b5:ca:72:27) Source: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc) Type: IP (0x0800) Frame check sequence: 0x16a879d5 (correct) Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.109 (165.227.249.109) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 332 Identification: 0x006a (106) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xfa8e (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.109 (165.227.249.109) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 312 Checksum: 0x714f (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x8CECE574CDE3B08B Responder cookie: 0x7D9B5FD49A8CC544 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 304 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: Private USE (130) Length: 24 Nonce Data Unknown payload type payload Next payload: Private USE (130) Length: 24 Payload Unknown payload type payload Next payload: Vendor ID (13) Length: 24 Payload Vendor ID payload Next payload: Vendor ID (13) Length: 48 Vendor ID: unknown vendor ID: 0x47BBE7C993F1FC13B4E6D0DB565C68E5... Vendor ID payload Next payload: Vendor ID (13) Length: 12 Vendor ID: unknown vendor ID: 0xDA8E937880010000 Vendor ID payload Next payload: NONE (0) Length: 12 Vendor ID: draft-beaulieu-ike-xauth-02.txt 0000 00 0f b5 ca 72 27 00 0c 29 1d cf fc 08 00 45 00 ....r'..).....E. 0010 01 4c 00 6a 00 00 80 11 fa 8e a5 e3 f9 73 a5 e3 .L.j.........s.. 0020 f9 6d 01 f4 01 f4 01 38 71 4f 8c ec e5 74 cd e3 .m.....8qO...t.. 0030 b0 8b 7d 9b 5f d4 9a 8c c5 44 04 10 02 00 00 00 ..}._....D...... 0040 00 00 00 00 01 30 0a 00 00 84 f0 6f 10 29 59 dc .....0.....o.)Y. 0050 01 fc c5 fc 9b 85 b4 27 02 e2 79 cd db 38 9d 9e .......'..y..8.. 0060 4c 07 6a 3e 02 25 db d8 f8 af fd ec 6e fe d5 7e L.j>.%......n..~ 0070 11 88 16 94 af ee 2b 59 f9 00 cd 47 e4 86 4b 19 ......+Y...G..K. 0080 31 3f 60 98 bb 0f 51 51 df c5 9e 4a 55 9b 4e b3 1?`...QQ...JU.N. 0090 82 fb 0e 48 39 e9 72 82 fb e5 43 7b 70 b7 cf 10 ...H9.r...C{p... 00a0 99 b8 75 2d af d0 f4 32 fb a6 33 f7 af e2 bd 07 ..u-...2..3..... 00b0 02 de ed 46 2f 5a 1f 38 99 3c d7 78 a8 bd 6b ed ...F/Z.8.<.x..k. 00c0 f1 c9 70 c3 6e 66 d7 3c 6a e2 82 00 00 18 ab ec ..p.nf..y.... Frame 7 (338 bytes on wire, 338 bytes captured) Arrival Time: Nov 9, 2005 10:46:24.151794000 Time delta from previous packet: 2.198556000 seconds Time since reference or first frame: 7.204128000 seconds Frame Number: 7 Packet Length: 338 bytes Capture Length: 338 bytes Ethernet II, Src: 00:0c:29:1d:cf:fc, Dst: 00:0f:b5:ca:72:27 Destination: 00:0f:b5:ca:72:27 (00:0f:b5:ca:72:27) Source: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc) Type: IP (0x0800) Frame check sequence: 0x5d8b513e (correct) Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.109 (165.227.249.109) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 320 Identification: 0x0074 (116) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xfa90 (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.109 (165.227.249.109) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 300 Checksum: 0xb2fe (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x8CECE574CDE3B08B Responder cookie: 0x7D9B5FD49A8CC544 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x4C57FACA Length: 292 Encrypted payload (264 bytes) 0000 00 0f b5 ca 72 27 00 0c 29 1d cf fc 08 00 45 00 ....r'..).....E. 0010 01 40 00 74 00 00 80 11 fa 90 a5 e3 f9 73 a5 e3 .@.t.........s.. 0020 f9 6d 01 f4 01 f4 01 2c b2 fe 8c ec e5 74 cd e3 .m.....,.....t.. 0030 b0 8b 7d 9b 5f d4 9a 8c c5 44 08 10 20 01 4c 57 ..}._....D.. .LW 0040 fa ca 00 00 01 24 14 e5 ee ab 61 26 45 74 80 a7 .....$....a&Et.. 0050 83 7e 4b 82 4f 86 e4 bf 7d aa 85 89 32 4c 4a 2e .~K.O...}...2LJ. 0060 db 58 5a 9f 61 fd d0 97 b4 51 5b ab 99 3c 9b e5 .XZ.a....Q[..<.. 0070 d0 5f 64 9b d1 ad 49 e1 67 3d 98 1c 18 68 20 5d ._d...I.g=...h ] 0080 fd 55 f2 46 ce ea 95 0c 50 fd 22 ee fb 92 62 15 .U.F....P."...b. 0090 5e 67 c9 a4 86 07 db 55 f0 a1 69 fc b6 a9 50 a0 ^g.....U..i...P. 00a0 fc b9 d0 d2 94 c3 aa 20 37 88 c1 b8 ff 3e 61 f1 ....... 7....>a. 00b0 74 8c 77 53 6d f0 77 dd 6e 93 68 69 e0 bd 91 25 t.wSm.w.n.hi...% 00c0 dd 0f 40 9c 75 a2 55 27 45 38 9a 16 71 b9 d5 ef ..@.u.U'E8..q... 00d0 14 83 04 19 ce 4f 7c 7a 60 e7 8b f4 40 e8 eb a0 .....O|z`...@... 00e0 0d 27 47 6c be a0 48 56 f0 32 da dc 65 93 6f 2f .'Gl..HV.2..e.o/ 00f0 dc 82 bb b1 ad 8d e6 56 9a 02 73 57 06 de 92 2f .......V..sW.../ 0100 c9 52 22 42 c4 39 ee 14 bf f0 6b ed 45 4d a8 81 .R"B.9....k.EM.. 0110 a1 0b 77 4f 5a 84 20 b3 dc e6 85 f7 8e c1 94 19 ..wOZ. ......... 0120 8c 25 72 26 7c 39 fc 44 e5 f8 14 2d 4a 3a 3d 87 .%r&|9.D...-J:=. 0130 dc 13 bd 35 ea 29 21 0b 39 d9 fc 5d f7 48 73 d4 ...5.)!.9..].Hs. 0140 e8 9a f8 94 a0 26 c8 0c fb eb 00 8a 44 41 5d 8b .....&......DA]. 0150 51 3e Q> Frame 8 (322 bytes on wire, 322 bytes captured) Arrival Time: Nov 9, 2005 10:46:24.546287000 Time delta from previous packet: 0.394493000 seconds Time since reference or first frame: 7.598621000 seconds Frame Number: 8 Packet Length: 322 bytes Capture Length: 322 bytes Ethernet II, Src: 00:0f:b5:ca:72:27, Dst: 00:0c:29:1d:cf:fc Destination: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc) Source: 00:0f:b5:ca:72:27 (00:0f:b5:ca:72:27) Type: IP (0x0800) Frame check sequence: 0x53fb06aa (correct) Internet Protocol, Src Addr: 165.227.249.109 (165.227.249.109), Dst Addr: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 304 Identification: 0x0edb (3803) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x2c3a (correct) Source: 165.227.249.109 (165.227.249.109) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 284 Checksum: 0x101f (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x8CECE574CDE3B08B Responder cookie: 0x7D9B5FD49A8CC544 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x4C57FACA Length: 276 Encrypted payload (248 bytes) 0000 00 0c 29 1d cf fc 00 0f b5 ca 72 27 08 00 45 00 ..).......r'..E. 0010 01 30 0e db 00 00 40 11 2c 3a a5 e3 f9 6d a5 e3 .0....@.,:...m.. 0020 f9 73 01 f4 01 f4 01 1c 10 1f 8c ec e5 74 cd e3 .s...........t.. 0030 b0 8b 7d 9b 5f d4 9a 8c c5 44 08 10 20 01 4c 57 ..}._....D.. .LW 0040 fa ca 00 00 01 14 03 25 86 29 f7 3c 17 ef 23 b7 .......%.).<..#. 0050 3a d4 c7 7f d5 4d d4 d3 3f 8b a4 d6 83 c9 34 a0 :....M..?.....4. 0060 ce d3 38 f2 ee 13 97 3b fd 46 76 1f a7 4f d6 d8 ..8....;.Fv..O.. 0070 39 27 02 a6 c7 1e 6c 1a 35 a4 40 0a 06 88 1d ec 9'....l.5.@..... 0080 f4 63 08 8e 8b fe 9f 2f 46 a6 28 68 ce 41 9f c3 .c...../F.(h.A.. 0090 df be aa 05 7e 6e 08 34 77 1e f0 7f 7b 1b 9b 13 ....~n.4w...{... 00a0 f7 0b d6 1b 27 2c f9 6f da de 04 bd 49 92 2e af ....',.o....I... 00b0 c8 d6 e6 ee cd 50 f6 6d f5 3d a6 45 b1 ad f4 10 .....P.m.=.E.... 00c0 d6 53 f9 40 8f 60 b0 5b 30 15 c3 34 dc 97 29 5d .S.@.`.[0..4..)] 00d0 0d 03 e7 60 93 f4 50 e1 20 2c ee 29 83 03 5f a9 ...`..P. ,.).._. 00e0 dc 62 82 d7 5e 88 9c d7 7b 55 cf 42 ea 8b 34 fc .b..^...{U.B..4. 00f0 cd 19 77 5d f2 0d 4a 6c 46 3f 8d ca 21 dc c1 e6 ..w]..JlF?..!... 0100 57 a5 be 48 94 35 8b 6f 6b 20 d7 bb 42 2c 76 8d W..H.5.ok ..B,v. 0110 42 32 8c f1 63 e7 04 7e bc e3 20 8e 2a 7c 4d 38 B2..c..~.. .*|M8 0120 e3 51 f0 f2 f2 75 07 ce 40 67 3b 09 cc c7 e1 c5 .Q...u..@g;..... 0130 2c 65 58 3b 06 03 1c 83 b2 7e 2f 8e e1 c2 53 fb ,eX;.....~/...S. 0140 06 aa .. Frame 9 (98 bytes on wire, 98 bytes captured) Arrival Time: Nov 9, 2005 10:46:24.553686000 Time delta from previous packet: 0.007399000 seconds Time since reference or first frame: 7.606020000 seconds Frame Number: 9 Packet Length: 98 bytes Capture Length: 98 bytes Ethernet II, Src: 00:0c:29:1d:cf:fc, Dst: 00:0f:b5:ca:72:27 Destination: 00:0f:b5:ca:72:27 (00:0f:b5:ca:72:27) Source: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc) Type: IP (0x0800) Frame check sequence: 0xa0330427 (correct) Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.109 (165.227.249.109) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 80 Identification: 0x0076 (118) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xfb7e (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.109 (165.227.249.109) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 60 Checksum: 0x946d (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x8CECE574CDE3B08B Responder cookie: 0x7D9B5FD49A8CC544 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x4C57FACA Length: 52 Encrypted payload (24 bytes) 0000 00 0f b5 ca 72 27 00 0c 29 1d cf fc 08 00 45 00 ....r'..).....E. 0010 00 50 00 76 00 00 80 11 fb 7e a5 e3 f9 73 a5 e3 .P.v.....~...s.. 0020 f9 6d 01 f4 01 f4 00 3c 94 6d 8c ec e5 74 cd e3 .m.....<.m...t.. 0030 b0 8b 7d 9b 5f d4 9a 8c c5 44 08 10 20 01 4c 57 ..}._....D.. .LW 0040 fa ca 00 00 00 34 af bd ed 0a cf 1a e8 a0 a2 6a .....4.........j 0050 c0 ec f7 cc 62 6e fc 6c d3 b4 43 6c 65 59 a0 33 ....bn.l..CleY.3 0060 04 27 .' Frame 10 (130 bytes on wire, 130 bytes captured) Arrival Time: Nov 9, 2005 10:46:27.666359000 Time delta from previous packet: 3.112673000 seconds Time since reference or first frame: 10.718693000 seconds Frame Number: 10 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:0c:29:1d:cf:fc, Dst: 00:0f:b5:ca:72:27 Destination: 00:0f:b5:ca:72:27 (00:0f:b5:ca:72:27) Source: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc) Type: IP (0x0800) Frame check sequence: 0x3e3af28a (correct) Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.109 (165.227.249.109) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0001 (1) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: ESP (0x32) Header checksum: 0xfbb2 (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.109 (165.227.249.109) Encapsulating Security Payload SPI: 0xe1e058a9 Sequence: 1 Data (84 bytes) 0000 00 0f b5 ca 72 27 00 0c 29 1d cf fc 08 00 45 00 ....r'..).....E. 0010 00 70 00 01 00 00 80 32 fb b2 a5 e3 f9 73 a5 e3 .p.....2.....s.. 0020 f9 6d e1 e0 58 a9 00 00 00 01 81 82 cf c3 1c e4 .m..X........... 0030 13 d0 ce 29 38 a5 3e 4f c1 f9 dc 99 6d 13 7f f8 ...)8.>O....m... 0040 ce 79 58 cb 84 49 08 a3 8e c9 1b a8 fd 38 4a 08 .yX..I.......8J. 0050 fc cb 2e 1d cd 75 e8 e4 26 e6 19 93 1a be 45 d9 .....u..&.....E. 0060 73 44 07 05 55 3e fa 8b 07 73 5f f5 1a 99 d7 36 sD..U>...s_....6 0070 c0 f5 7b a4 0b 13 95 2b 97 cd 85 5a 5f e0 3e 3a ..{....+...Z_.>: 0080 f2 8a .. Frame 11 (130 bytes on wire, 130 bytes captured) Arrival Time: Nov 9, 2005 10:46:27.688191000 Time delta from previous packet: 0.021832000 seconds Time since reference or first frame: 10.740525000 seconds Frame Number: 11 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:0f:b5:ca:72:27, Dst: 00:0c:29:1d:cf:fc Destination: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc) Source: 00:0f:b5:ca:72:27 (00:0f:b5:ca:72:27) Type: IP (0x0800) Frame check sequence: 0xf331d78d (correct) Internet Protocol, Src Addr: 165.227.249.109 (165.227.249.109), Dst Addr: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x64ba (25786) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 29 Protocol: ESP (0x32) Header checksum: 0xf9f9 (correct) Source: 165.227.249.109 (165.227.249.109) Destination: 165.227.249.115 (165.227.249.115) Encapsulating Security Payload SPI: 0x2791c37e Sequence: 1 Data (84 bytes) 0000 00 0c 29 1d cf fc 00 0f b5 ca 72 27 08 00 45 00 ..).......r'..E. 0010 00 70 64 ba 00 00 1d 32 f9 f9 a5 e3 f9 6d a5 e3 .pd....2.....m.. 0020 f9 73 27 91 c3 7e 00 00 00 01 55 68 c9 62 7e 0f .s'..~....Uh.b~. 0030 df a5 8d f4 46 42 c0 ad 63 70 f3 86 da c9 3e 63 ....FB..cp....>c 0040 7d 79 a3 9e 52 bc a7 fb 27 76 47 06 bc d9 1e 14 }y..R...'vG..... 0050 3e d2 66 57 4c 79 db ea 2b d5 1a a4 a7 24 b6 bb >.fWLy..+....$.. 0060 f9 b4 c6 fa c9 73 3b df 25 b4 da e1 5d ad df 12 .....s;.%...]... 0070 e7 20 75 56 66 0e cf 0a 51 9a f5 6d 59 ca f3 31 . uVf...Q..mY..1 0080 d7 8d .. Frame 12 (130 bytes on wire, 130 bytes captured) Arrival Time: Nov 9, 2005 10:46:28.673278000 Time delta from previous packet: 0.985087000 seconds Time since reference or first frame: 11.725612000 seconds Frame Number: 12 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:0c:29:1d:cf:fc, Dst: 00:0f:b5:ca:72:27 Destination: 00:0f:b5:ca:72:27 (00:0f:b5:ca:72:27) Source: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc) Type: IP (0x0800) Frame check sequence: 0x81c27a48 (correct) Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.109 (165.227.249.109) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0002 (2) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: ESP (0x32) Header checksum: 0xfbb1 (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.109 (165.227.249.109) Encapsulating Security Payload SPI: 0xe1e058a9 Sequence: 2 Data (84 bytes) 0000 00 0f b5 ca 72 27 00 0c 29 1d cf fc 08 00 45 00 ....r'..).....E. 0010 00 70 00 02 00 00 80 32 fb b1 a5 e3 f9 73 a5 e3 .p.....2.....s.. 0020 f9 6d e1 e0 58 a9 00 00 00 02 5f f5 1a 99 d7 36 .m..X....._....6 0030 c0 f5 ac 4e 11 0f 9f f6 3e fe 69 47 56 be cf 4f ...N....>.iGV..O 0040 20 d0 44 c6 90 3a 32 05 b1 52 e8 b0 7d 3e 78 60 .D..:2..R..}>x` 0050 71 38 f8 01 c2 c9 cd b8 15 5b 53 8c ed e4 8a 79 q8.......[S....y 0060 e8 ae 23 6e 06 f9 19 6b 3c 47 4d e7 9c f7 f1 eb ..#n...k