Frame 1 (166 bytes on wire, 166 bytes captured) Arrival Time: Oct 2, 2003 10:21:31.299097000 Time delta from previous packet: 0.000000000 seconds Time relative to first packet: 0.000000000 seconds Frame Number: 1 Packet Length: 166 bytes Capture Length: 166 bytes Ethernet II, Src: 00:0c:29:b1:20:22, Dst: 00:80:c8:b9:b1:b8 Destination: 00:80:c8:b9:b1:b8 (00:80:c8:b9:b1:b8) Source: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22) Type: IP (0x0800) Trailer: 21A25541 Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.111 (165.227.249.111) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 148 Identification: 0x00d6 (214) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xfad8 (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.111 (165.227.249.111) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 128 Checksum: 0x5ac3 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x1F422E65F147F38B Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 120 Security Association payload Next payload: Vendor ID (13) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 40 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 32 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (3600) Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: unknown vendor ID: 0x4485152D18B6BBCD0BE8A8469579DDCC Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: unknown vendor ID: 0x90CB80913EBB696E086381B5EC427B1F 0000 00 80 c8 b9 b1 b8 00 0c 29 b1 20 22 08 00 45 00 ........). "..E. 0010 00 94 00 d6 00 00 80 11 fa d8 a5 e3 f9 73 a5 e3 .............s.. 0020 f9 6f 01 f4 01 f4 00 80 5a c3 1f 42 2e 65 f1 47 .o......Z..B.e.G 0030 f3 8b 00 00 00 00 00 00 00 00 01 10 02 00 00 00 ................ 0040 00 00 00 00 00 78 0d 00 00 34 00 00 00 01 00 00 .....x...4...... 0050 00 01 00 00 00 28 01 01 00 01 00 00 00 20 01 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 04 00 02 80 03 ................ 0070 00 01 80 0b 00 01 80 0c 0e 10 0d 00 00 14 44 85 ..............D. 0080 15 2d 18 b6 bb cd 0b e8 a8 46 95 79 dd cc 00 00 .-.......F.y.... 0090 00 14 90 cb 80 91 3e bb 69 6e 08 63 81 b5 ec 42 ......>.in.c...B 00a0 7b 1f 21 a2 55 41 {.!.UA Frame 2 (146 bytes on wire, 146 bytes captured) Arrival Time: Oct 2, 2003 10:21:31.305451000 Time delta from previous packet: 0.006354000 seconds Time relative to first packet: 0.006354000 seconds Frame Number: 2 Packet Length: 146 bytes Capture Length: 146 bytes Ethernet II, Src: 00:80:c8:b9:b1:b8, Dst: 00:0c:29:b1:20:22 Destination: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22) Source: 00:80:c8:b9:b1:b8 (00:80:c8:b9:b1:b8) Type: IP (0x0800) Trailer: 9AE77090 Internet Protocol, Src Addr: 165.227.249.111 (165.227.249.111), Dst Addr: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 128 Identification: 0xc954 (51540) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x726e (correct) Source: 165.227.249.111 (165.227.249.111) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 108 Checksum: 0x0000 (none) Internet Security Association and Key Management Protocol Initiator cookie: 0x1F422E65F147F38B Responder cookie: 0xDFC2859BD7000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 100 Security Association payload Next payload: Vendor ID (13) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 40 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 32 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (3600) Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: unknown vendor ID: 0x327577146D85F7DEC11C6DD0548FCD94 0000 00 0c 29 b1 20 22 00 80 c8 b9 b1 b8 08 00 45 00 ..). "........E. 0010 00 80 c9 54 00 00 40 11 72 6e a5 e3 f9 6f a5 e3 ...T..@.rn...o.. 0020 f9 73 01 f4 01 f4 00 6c 00 00 1f 42 2e 65 f1 47 .s.....l...B.e.G 0030 f3 8b df c2 85 9b d7 00 00 00 01 10 02 00 00 00 ................ 0040 00 00 00 00 00 64 0d 00 00 34 00 00 00 01 00 00 .....d...4...... 0050 00 01 00 00 00 28 01 01 00 01 00 00 00 20 01 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 04 00 02 80 03 ................ 0070 00 01 80 0b 00 01 80 0c 0e 10 00 00 00 14 32 75 ..............2u 0080 77 14 6d 85 f7 de c1 1c 6d d0 54 8f cd 94 9a e7 w.m.....m.T..... 0090 70 90 p. Frame 3 (146 bytes on wire, 146 bytes captured) Arrival Time: Oct 2, 2003 10:21:31.802849000 Time delta from previous packet: 0.497398000 seconds Time relative to first packet: 0.503752000 seconds Frame Number: 3 Packet Length: 146 bytes Capture Length: 146 bytes Ethernet II, Src: 00:80:c8:b9:b1:b8, Dst: 00:0c:29:b1:20:22 Destination: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22) Source: 00:80:c8:b9:b1:b8 (00:80:c8:b9:b1:b8) Type: IP (0x0800) Trailer: 5180DDD6 Internet Protocol, Src Addr: 165.227.249.111 (165.227.249.111), Dst Addr: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 128 Identification: 0x8969 (35177) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xb259 (correct) Source: 165.227.249.111 (165.227.249.111) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 108 Checksum: 0x0000 (none) Internet Security Association and Key Management Protocol Initiator cookie: 0x1F422E65F147F38B Responder cookie: 0xDFC2859BD7000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 100 Security Association payload Next payload: Vendor ID (13) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 40 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 32 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (3600) Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: unknown vendor ID: 0x327577146D85F7DEC11C6DD0548FCD94 0000 00 0c 29 b1 20 22 00 80 c8 b9 b1 b8 08 00 45 00 ..). "........E. 0010 00 80 89 69 00 00 40 11 b2 59 a5 e3 f9 6f a5 e3 ...i..@..Y...o.. 0020 f9 73 01 f4 01 f4 00 6c 00 00 1f 42 2e 65 f1 47 .s.....l...B.e.G 0030 f3 8b df c2 85 9b d7 00 00 00 01 10 02 00 00 00 ................ 0040 00 00 00 00 00 64 0d 00 00 34 00 00 00 01 00 00 .....d...4...... 0050 00 01 00 00 00 28 01 01 00 01 00 00 00 20 01 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 04 00 02 80 03 ................ 0070 00 01 80 0b 00 01 80 0c 0e 10 00 00 00 14 32 75 ..............2u 0080 77 14 6d 85 f7 de c1 1c 6d d0 54 8f cd 94 51 80 w.m.....m.T...Q. 0090 dd d6 .. Frame 4 (146 bytes on wire, 146 bytes captured) Arrival Time: Oct 2, 2003 10:21:32.802841000 Time delta from previous packet: 0.999992000 seconds Time relative to first packet: 1.503744000 seconds Frame Number: 4 Packet Length: 146 bytes Capture Length: 146 bytes Ethernet II, Src: 00:80:c8:b9:b1:b8, Dst: 00:0c:29:b1:20:22 Destination: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22) Source: 00:80:c8:b9:b1:b8 (00:80:c8:b9:b1:b8) Type: IP (0x0800) Trailer: E0F46E7C Internet Protocol, Src Addr: 165.227.249.111 (165.227.249.111), Dst Addr: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 128 Identification: 0xd2b2 (53938) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x6910 (correct) Source: 165.227.249.111 (165.227.249.111) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 108 Checksum: 0x0000 (none) Internet Security Association and Key Management Protocol Initiator cookie: 0x1F422E65F147F38B Responder cookie: 0xDFC2859BD7000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 100 Security Association payload Next payload: Vendor ID (13) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 40 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 32 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (3600) Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: unknown vendor ID: 0x327577146D85F7DEC11C6DD0548FCD94 0000 00 0c 29 b1 20 22 00 80 c8 b9 b1 b8 08 00 45 00 ..). "........E. 0010 00 80 d2 b2 00 00 40 11 69 10 a5 e3 f9 6f a5 e3 ......@.i....o.. 0020 f9 73 01 f4 01 f4 00 6c 00 00 1f 42 2e 65 f1 47 .s.....l...B.e.G 0030 f3 8b df c2 85 9b d7 00 00 00 01 10 02 00 00 00 ................ 0040 00 00 00 00 00 64 0d 00 00 34 00 00 00 01 00 00 .....d...4...... 0050 00 01 00 00 00 28 01 01 00 01 00 00 00 20 01 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 04 00 02 80 03 ................ 0070 00 01 80 0b 00 01 80 0c 0e 10 00 00 00 14 32 75 ..............2u 0080 77 14 6d 85 f7 de c1 1c 6d d0 54 8f cd 94 e0 f4 w.m.....m.T..... 0090 6e 7c n| Frame 5 (302 bytes on wire, 302 bytes captured) Arrival Time: Oct 2, 2003 10:21:33.163606000 Time delta from previous packet: 0.360765000 seconds Time relative to first packet: 1.864509000 seconds Frame Number: 5 Packet Length: 302 bytes Capture Length: 302 bytes Ethernet II, Src: 00:0c:29:b1:20:22, Dst: 00:80:c8:b9:b1:b8 Destination: 00:80:c8:b9:b1:b8 (00:80:c8:b9:b1:b8) Source: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22) Type: IP (0x0800) Trailer: 2AD75574 Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.111 (165.227.249.111) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 284 Identification: 0x00d7 (215) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xfa4f (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.111 (165.227.249.111) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 264 Checksum: 0x4515 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x1F422E65F147F38B Responder cookie: 0xDFC2859BD7000000 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 256 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: Vendor ID (13) Length: 24 Nonce Data Vendor ID payload Next payload: Vendor ID (13) Length: 48 Vendor ID: unknown vendor ID: 0x47BBE7C993F1FC13B4E6D0DB565C68E5... Vendor ID payload Next payload: Vendor ID (13) Length: 12 Vendor ID: unknown vendor ID: 0xDA8E937880010000 Vendor ID payload Next payload: NONE (0) Length: 12 Vendor ID: unknown vendor ID: 0x09002689DFD6B712 0000 00 80 c8 b9 b1 b8 00 0c 29 b1 20 22 08 00 45 00 ........). "..E. 0010 01 1c 00 d7 00 00 80 11 fa 4f a5 e3 f9 73 a5 e3 .........O...s.. 0020 f9 6f 01 f4 01 f4 01 08 45 15 1f 42 2e 65 f1 47 .o......E..B.e.G 0030 f3 8b df c2 85 9b d7 00 00 00 04 10 02 00 00 00 ................ 0040 00 00 00 00 01 00 0a 00 00 84 9d 3e 51 a7 38 e9 ...........>Q.8. 0050 19 06 c6 ac 59 7c eb c9 b3 68 90 0c 3c 85 ae eb ....Y|...h..<... 0060 49 1b c7 b7 ae 7b d1 1e fe eb e0 dd a5 36 58 63 I....{.......6Xc 0070 9e 1a 29 26 04 a5 78 e8 fa bf 06 07 60 cf 57 42 ..)&..x.....`.WB 0080 bf 41 25 52 ff c2 c2 d7 b4 c1 93 73 e0 14 96 e3 .A%R.......s.... 0090 3d 39 2f 0d 35 59 73 bc 57 99 94 c5 5c 29 72 bd =9/.5Ys.W...\)r. 00a0 d6 57 38 7d bd ee 17 b9 2a 8f 4f 08 9d f1 42 0e .W8}....*.O...B. 00b0 4a d4 1f bb cd f2 e2 89 12 af 93 6f 4b d3 0c ff J..........oK... 00c0 7c 94 4a ee da 35 93 2f 65 44 0d 00 00 18 44 de |.J..5./eD....D. 00d0 84 a4 0e 8b 42 bd f1 f2 9f 71 f3 99 64 ee ab 82 ....B....q..d... 00e0 51 a0 0d 00 00 30 47 bb e7 c9 93 f1 fc 13 b4 e6 Q....0G......... 00f0 d0 db 56 5c 68 e5 01 02 01 01 02 01 01 03 11 31 ..V\h..........1 0100 30 2e 31 2e 31 20 28 42 75 69 6c 64 20 31 30 29 0.1.1 (Build 10) 0110 00 00 0d 00 00 0c da 8e 93 78 80 01 00 00 00 00 .........x...... 0120 00 0c 09 00 26 89 df d6 b7 12 2a d7 55 74 ....&.....*.Ut Frame 6 (302 bytes on wire, 302 bytes captured) Arrival Time: Oct 2, 2003 10:21:33.167463000 Time delta from previous packet: 0.003857000 seconds Time relative to first packet: 1.868366000 seconds Frame Number: 6 Packet Length: 302 bytes Capture Length: 302 bytes Ethernet II, Src: 00:0c:29:b1:20:22, Dst: 00:80:c8:b9:b1:b8 Destination: 00:80:c8:b9:b1:b8 (00:80:c8:b9:b1:b8) Source: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22) Type: IP (0x0800) Trailer: 7A85E351 Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.111 (165.227.249.111) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 284 Identification: 0x00d9 (217) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xfa4d (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.111 (165.227.249.111) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 264 Checksum: 0x4515 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x1F422E65F147F38B Responder cookie: 0xDFC2859BD7000000 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 256 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: Vendor ID (13) Length: 24 Nonce Data Vendor ID payload Next payload: Vendor ID (13) Length: 48 Vendor ID: unknown vendor ID: 0x47BBE7C993F1FC13B4E6D0DB565C68E5... Vendor ID payload Next payload: Vendor ID (13) Length: 12 Vendor ID: unknown vendor ID: 0xDA8E937880010000 Vendor ID payload Next payload: NONE (0) Length: 12 Vendor ID: unknown vendor ID: 0x09002689DFD6B712 0000 00 80 c8 b9 b1 b8 00 0c 29 b1 20 22 08 00 45 00 ........). "..E. 0010 01 1c 00 d9 00 00 80 11 fa 4d a5 e3 f9 73 a5 e3 .........M...s.. 0020 f9 6f 01 f4 01 f4 01 08 45 15 1f 42 2e 65 f1 47 .o......E..B.e.G 0030 f3 8b df c2 85 9b d7 00 00 00 04 10 02 00 00 00 ................ 0040 00 00 00 00 01 00 0a 00 00 84 9d 3e 51 a7 38 e9 ...........>Q.8. 0050 19 06 c6 ac 59 7c eb c9 b3 68 90 0c 3c 85 ae eb ....Y|...h..<... 0060 49 1b c7 b7 ae 7b d1 1e fe eb e0 dd a5 36 58 63 I....{.......6Xc 0070 9e 1a 29 26 04 a5 78 e8 fa bf 06 07 60 cf 57 42 ..)&..x.....`.WB 0080 bf 41 25 52 ff c2 c2 d7 b4 c1 93 73 e0 14 96 e3 .A%R.......s.... 0090 3d 39 2f 0d 35 59 73 bc 57 99 94 c5 5c 29 72 bd =9/.5Ys.W...\)r. 00a0 d6 57 38 7d bd ee 17 b9 2a 8f 4f 08 9d f1 42 0e .W8}....*.O...B. 00b0 4a d4 1f bb cd f2 e2 89 12 af 93 6f 4b d3 0c ff J..........oK... 00c0 7c 94 4a ee da 35 93 2f 65 44 0d 00 00 18 44 de |.J..5./eD....D. 00d0 84 a4 0e 8b 42 bd f1 f2 9f 71 f3 99 64 ee ab 82 ....B....q..d... 00e0 51 a0 0d 00 00 30 47 bb e7 c9 93 f1 fc 13 b4 e6 Q....0G......... 00f0 d0 db 56 5c 68 e5 01 02 01 01 02 01 01 03 11 31 ..V\h..........1 0100 30 2e 31 2e 31 20 28 42 75 69 6c 64 20 31 30 29 0.1.1 (Build 10) 0110 00 00 0d 00 00 0c da 8e 93 78 80 01 00 00 00 00 .........x...... 0120 00 0c 09 00 26 89 df d6 b7 12 7a 85 e3 51 ....&.....z..Q Frame 7 (302 bytes on wire, 302 bytes captured) Arrival Time: Oct 2, 2003 10:21:33.168053000 Time delta from previous packet: 0.000590000 seconds Time relative to first packet: 1.868956000 seconds Frame Number: 7 Packet Length: 302 bytes Capture Length: 302 bytes Ethernet II, Src: 00:0c:29:b1:20:22, Dst: 00:80:c8:b9:b1:b8 Destination: 00:80:c8:b9:b1:b8 (00:80:c8:b9:b1:b8) Source: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22) Type: IP (0x0800) Trailer: 03EB760B Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.111 (165.227.249.111) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 284 Identification: 0x00da (218) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xfa4c (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.111 (165.227.249.111) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 264 Checksum: 0x4515 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x1F422E65F147F38B Responder cookie: 0xDFC2859BD7000000 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 256 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: Vendor ID (13) Length: 24 Nonce Data Vendor ID payload Next payload: Vendor ID (13) Length: 48 Vendor ID: unknown vendor ID: 0x47BBE7C993F1FC13B4E6D0DB565C68E5... Vendor ID payload Next payload: Vendor ID (13) Length: 12 Vendor ID: unknown vendor ID: 0xDA8E937880010000 Vendor ID payload Next payload: NONE (0) Length: 12 Vendor ID: unknown vendor ID: 0x09002689DFD6B712 0000 00 80 c8 b9 b1 b8 00 0c 29 b1 20 22 08 00 45 00 ........). "..E. 0010 01 1c 00 da 00 00 80 11 fa 4c a5 e3 f9 73 a5 e3 .........L...s.. 0020 f9 6f 01 f4 01 f4 01 08 45 15 1f 42 2e 65 f1 47 .o......E..B.e.G 0030 f3 8b df c2 85 9b d7 00 00 00 04 10 02 00 00 00 ................ 0040 00 00 00 00 01 00 0a 00 00 84 9d 3e 51 a7 38 e9 ...........>Q.8. 0050 19 06 c6 ac 59 7c eb c9 b3 68 90 0c 3c 85 ae eb ....Y|...h..<... 0060 49 1b c7 b7 ae 7b d1 1e fe eb e0 dd a5 36 58 63 I....{.......6Xc 0070 9e 1a 29 26 04 a5 78 e8 fa bf 06 07 60 cf 57 42 ..)&..x.....`.WB 0080 bf 41 25 52 ff c2 c2 d7 b4 c1 93 73 e0 14 96 e3 .A%R.......s.... 0090 3d 39 2f 0d 35 59 73 bc 57 99 94 c5 5c 29 72 bd =9/.5Ys.W...\)r. 00a0 d6 57 38 7d bd ee 17 b9 2a 8f 4f 08 9d f1 42 0e .W8}....*.O...B. 00b0 4a d4 1f bb cd f2 e2 89 12 af 93 6f 4b d3 0c ff J..........oK... 00c0 7c 94 4a ee da 35 93 2f 65 44 0d 00 00 18 44 de |.J..5./eD....D. 00d0 84 a4 0e 8b 42 bd f1 f2 9f 71 f3 99 64 ee ab 82 ....B....q..d... 00e0 51 a0 0d 00 00 30 47 bb e7 c9 93 f1 fc 13 b4 e6 Q....0G......... 00f0 d0 db 56 5c 68 e5 01 02 01 01 02 01 01 03 11 31 ..V\h..........1 0100 30 2e 31 2e 31 20 28 42 75 69 6c 64 20 31 30 29 0.1.1 (Build 10) 0110 00 00 0d 00 00 0c da 8e 93 78 80 01 00 00 00 00 .........x...... 0120 00 0c 09 00 26 89 df d6 b7 12 03 eb 76 0b ....&.......v. Frame 8 (226 bytes on wire, 226 bytes captured) Arrival Time: Oct 2, 2003 10:21:33.217283000 Time delta from previous packet: 0.049230000 seconds Time relative to first packet: 1.918186000 seconds Frame Number: 8 Packet Length: 226 bytes Capture Length: 226 bytes Ethernet II, Src: 00:80:c8:b9:b1:b8, Dst: 00:0c:29:b1:20:22 Destination: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22) Source: 00:80:c8:b9:b1:b8 (00:80:c8:b9:b1:b8) Type: IP (0x0800) Trailer: 45B69B76 Internet Protocol, Src Addr: 165.227.249.111 (165.227.249.111), Dst Addr: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 208 Identification: 0xd9e7 (55783) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x618b (correct) Source: 165.227.249.111 (165.227.249.111) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 188 Checksum: 0x0000 (none) Internet Security Association and Key Management Protocol Initiator cookie: 0x1F422E65F147F38B Responder cookie: 0xDFC2859BD7000000 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 180 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 20 Nonce Data 0000 00 0c 29 b1 20 22 00 80 c8 b9 b1 b8 08 00 45 00 ..). "........E. 0010 00 d0 d9 e7 00 00 40 11 61 8b a5 e3 f9 6f a5 e3 ......@.a....o.. 0020 f9 73 01 f4 01 f4 00 bc 00 00 1f 42 2e 65 f1 47 .s.........B.e.G 0030 f3 8b df c2 85 9b d7 00 00 00 04 10 02 00 00 00 ................ 0040 00 00 00 00 00 b4 0a 00 00 84 e4 3e f7 33 43 13 ...........>.3C. 0050 55 cc 29 60 3b 09 96 20 5e 4d 93 dc b9 35 4c 75 U.)`;.. ^M...5Lu 0060 19 59 01 3d f0 96 24 7f f5 e1 54 15 74 3a c8 b3 .Y.=..$...T.t:.. 0070 58 c7 a9 bd 6b 8f 6b a4 0a 69 2b 20 92 ed 3a d2 X...k.k..i+ ..:. 0080 3d 45 18 85 e6 fb ae 39 f5 d8 b8 2b 69 ce a6 86 =E.....9...+i... 0090 6d 45 39 c5 3b 33 76 ba 9e 5b d2 43 5a 21 77 f1 mE9.;3v..[.CZ!w. 00a0 44 b5 6c 5d b5 b3 c9 02 73 e5 6a 05 22 c5 f2 b2 D.l]....s.j."... 00b0 ef 01 8a 6c a2 11 30 ca 6d 71 f5 a4 64 e2 0a bf ...l..0.mq..d... 00c0 13 ff 72 4d f1 ab ab 0d 35 a2 00 00 00 14 ac aa ..rM....5....... 00d0 83 d7 93 cf 94 68 94 5d 0e d2 36 9c 9d 3d 45 b6 .....h.]..6..=E. 00e0 9b 76 .v Frame 9 (226 bytes on wire, 226 bytes captured) Arrival Time: Oct 2, 2003 10:21:33.712953000 Time delta from previous packet: 0.495670000 seconds Time relative to first packet: 2.413856000 seconds Frame Number: 9 Packet Length: 226 bytes Capture Length: 226 bytes Ethernet II, Src: 00:80:c8:b9:b1:b8, Dst: 00:0c:29:b1:20:22 Destination: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22) Source: 00:80:c8:b9:b1:b8 (00:80:c8:b9:b1:b8) Type: IP (0x0800) Trailer: BF778AC9 Internet Protocol, Src Addr: 165.227.249.111 (165.227.249.111), Dst Addr: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 208 Identification: 0xa63d (42557) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x9535 (correct) Source: 165.227.249.111 (165.227.249.111) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 188 Checksum: 0x0000 (none) Internet Security Association and Key Management Protocol Initiator cookie: 0x1F422E65F147F38B Responder cookie: 0xDFC2859BD7000000 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 180 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 20 Nonce Data 0000 00 0c 29 b1 20 22 00 80 c8 b9 b1 b8 08 00 45 00 ..). "........E. 0010 00 d0 a6 3d 00 00 40 11 95 35 a5 e3 f9 6f a5 e3 ...=..@..5...o.. 0020 f9 73 01 f4 01 f4 00 bc 00 00 1f 42 2e 65 f1 47 .s.........B.e.G 0030 f3 8b df c2 85 9b d7 00 00 00 04 10 02 00 00 00 ................ 0040 00 00 00 00 00 b4 0a 00 00 84 e4 3e f7 33 43 13 ...........>.3C. 0050 55 cc 29 60 3b 09 96 20 5e 4d 93 dc b9 35 4c 75 U.)`;.. ^M...5Lu 0060 19 59 01 3d f0 96 24 7f f5 e1 54 15 74 3a c8 b3 .Y.=..$...T.t:.. 0070 58 c7 a9 bd 6b 8f 6b a4 0a 69 2b 20 92 ed 3a d2 X...k.k..i+ ..:. 0080 3d 45 18 85 e6 fb ae 39 f5 d8 b8 2b 69 ce a6 86 =E.....9...+i... 0090 6d 45 39 c5 3b 33 76 ba 9e 5b d2 43 5a 21 77 f1 mE9.;3v..[.CZ!w. 00a0 44 b5 6c 5d b5 b3 c9 02 73 e5 6a 05 22 c5 f2 b2 D.l]....s.j."... 00b0 ef 01 8a 6c a2 11 30 ca 6d 71 f5 a4 64 e2 0a bf ...l..0.mq..d... 00c0 13 ff 72 4d f1 ab ab 0d 35 a2 00 00 00 14 ac aa ..rM....5....... 00d0 83 d7 93 cf 94 68 94 5d 0e d2 36 9c 9d 3d bf 77 .....h.]..6..=.w 00e0 8a c9 .. Frame 10 (226 bytes on wire, 226 bytes captured) Arrival Time: Oct 2, 2003 10:21:34.713031000 Time delta from previous packet: 1.000078000 seconds Time relative to first packet: 3.413934000 seconds Frame Number: 10 Packet Length: 226 bytes Capture Length: 226 bytes Ethernet II, Src: 00:80:c8:b9:b1:b8, Dst: 00:0c:29:b1:20:22 Destination: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22) Source: 00:80:c8:b9:b1:b8 (00:80:c8:b9:b1:b8) Type: IP (0x0800) Trailer: F9BBA604 Internet Protocol, Src Addr: 165.227.249.111 (165.227.249.111), Dst Addr: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 208 Identification: 0xa89c (43164) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x92d6 (correct) Source: 165.227.249.111 (165.227.249.111) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 188 Checksum: 0x0000 (none) Internet Security Association and Key Management Protocol Initiator cookie: 0x1F422E65F147F38B Responder cookie: 0xDFC2859BD7000000 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 180 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 20 Nonce Data 0000 00 0c 29 b1 20 22 00 80 c8 b9 b1 b8 08 00 45 00 ..). "........E. 0010 00 d0 a8 9c 00 00 40 11 92 d6 a5 e3 f9 6f a5 e3 ......@......o.. 0020 f9 73 01 f4 01 f4 00 bc 00 00 1f 42 2e 65 f1 47 .s.........B.e.G 0030 f3 8b df c2 85 9b d7 00 00 00 04 10 02 00 00 00 ................ 0040 00 00 00 00 00 b4 0a 00 00 84 e4 3e f7 33 43 13 ...........>.3C. 0050 55 cc 29 60 3b 09 96 20 5e 4d 93 dc b9 35 4c 75 U.)`;.. ^M...5Lu 0060 19 59 01 3d f0 96 24 7f f5 e1 54 15 74 3a c8 b3 .Y.=..$...T.t:.. 0070 58 c7 a9 bd 6b 8f 6b a4 0a 69 2b 20 92 ed 3a d2 X...k.k..i+ ..:. 0080 3d 45 18 85 e6 fb ae 39 f5 d8 b8 2b 69 ce a6 86 =E.....9...+i... 0090 6d 45 39 c5 3b 33 76 ba 9e 5b d2 43 5a 21 77 f1 mE9.;3v..[.CZ!w. 00a0 44 b5 6c 5d b5 b3 c9 02 73 e5 6a 05 22 c5 f2 b2 D.l]....s.j."... 00b0 ef 01 8a 6c a2 11 30 ca 6d 71 f5 a4 64 e2 0a bf ...l..0.mq..d... 00c0 13 ff 72 4d f1 ab ab 0d 35 a2 00 00 00 14 ac aa ..rM....5....... 00d0 83 d7 93 cf 94 68 94 5d 0e d2 36 9c 9d 3d f9 bb .....h.]..6..=.. 00e0 a6 04 .. Frame 11 (138 bytes on wire, 138 bytes captured) Arrival Time: Oct 2, 2003 10:21:34.937518000 Time delta from previous packet: 0.224487000 seconds Time relative to first packet: 3.638421000 seconds Frame Number: 11 Packet Length: 138 bytes Capture Length: 138 bytes Ethernet II, Src: 00:0c:29:b1:20:22, Dst: 00:80:c8:b9:b1:b8 Destination: 00:80:c8:b9:b1:b8 (00:80:c8:b9:b1:b8) Source: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22) Type: IP (0x0800) Trailer: 2AF502F1 Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.111 (165.227.249.111) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x00db (219) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xfaef (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.111 (165.227.249.111) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 100 Checksum: 0x0867 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x1F422E65F147F38B Responder cookie: 0xDFC2859BD7000000 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 92 Encrypted payload (64 bytes) 0000 00 80 c8 b9 b1 b8 00 0c 29 b1 20 22 08 00 45 00 ........). "..E. 0010 00 78 00 db 00 00 80 11 fa ef a5 e3 f9 73 a5 e3 .x...........s.. 0020 f9 6f 01 f4 01 f4 00 64 08 67 1f 42 2e 65 f1 47 .o.....d.g.B.e.G 0030 f3 8b df c2 85 9b d7 00 00 00 05 10 02 01 00 00 ................ 0040 00 00 00 00 00 5c f2 ac a9 a0 29 56 ba 0d 71 fe .....\....)V..q. 0050 7f 6e 93 7d f7 02 0a 3c f3 0c 2d d7 7f 76 d9 d7 .n.}...<..-..v.. 0060 00 28 93 87 4f c8 e6 8f c4 b6 77 a1 6f 7f a0 b0 .(..O.....w.o... 0070 11 d6 3b 3e 50 0f ab 42 c9 02 81 48 dd 2c 2f 4a ..;>P..B...H.,/J 0080 c8 ad c3 ee 7b 82 2a f5 02 f1 ....{.*... Frame 12 (138 bytes on wire, 138 bytes captured) Arrival Time: Oct 2, 2003 10:21:34.938283000 Time delta from previous packet: 0.000765000 seconds Time relative to first packet: 3.639186000 seconds Frame Number: 12 Packet Length: 138 bytes Capture Length: 138 bytes Ethernet II, Src: 00:0c:29:b1:20:22, Dst: 00:80:c8:b9:b1:b8 Destination: 00:80:c8:b9:b1:b8 (00:80:c8:b9:b1:b8) Source: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22) Type: IP (0x0800) Trailer: D2096826 Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.111 (165.227.249.111) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x00dc (220) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xfaee (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.111 (165.227.249.111) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 100 Checksum: 0x0867 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x1F422E65F147F38B Responder cookie: 0xDFC2859BD7000000 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 92 Encrypted payload (64 bytes) 0000 00 80 c8 b9 b1 b8 00 0c 29 b1 20 22 08 00 45 00 ........). "..E. 0010 00 78 00 dc 00 00 80 11 fa ee a5 e3 f9 73 a5 e3 .x...........s.. 0020 f9 6f 01 f4 01 f4 00 64 08 67 1f 42 2e 65 f1 47 .o.....d.g.B.e.G 0030 f3 8b df c2 85 9b d7 00 00 00 05 10 02 01 00 00 ................ 0040 00 00 00 00 00 5c f2 ac a9 a0 29 56 ba 0d 71 fe .....\....)V..q. 0050 7f 6e 93 7d f7 02 0a 3c f3 0c 2d d7 7f 76 d9 d7 .n.}...<..-..v.. 0060 00 28 93 87 4f c8 e6 8f c4 b6 77 a1 6f 7f a0 b0 .(..O.....w.o... 0070 11 d6 3b 3e 50 0f ab 42 c9 02 81 48 dd 2c 2f 4a ..;>P..B...H.,/J 0080 c8 ad c3 ee 7b 82 d2 09 68 26 ....{...h& Frame 13 (114 bytes on wire, 114 bytes captured) Arrival Time: Oct 2, 2003 10:21:34.938395000 Time delta from previous packet: 0.000112000 seconds Time relative to first packet: 3.639298000 seconds Frame Number: 13 Packet Length: 114 bytes Capture Length: 114 bytes Ethernet II, Src: 00:80:c8:b9:b1:b8, Dst: 00:0c:29:b1:20:22 Destination: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22) Source: 00:80:c8:b9:b1:b8 (00:80:c8:b9:b1:b8) Type: IP (0x0800) Trailer: BA4AAE20 Internet Protocol, Src Addr: 165.227.249.111 (165.227.249.111), Dst Addr: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0x8272 (33394) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xb970 (correct) Source: 165.227.249.111 (165.227.249.111) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 76 Checksum: 0x0000 (none) Internet Security Association and Key Management Protocol Initiator cookie: 0x1F422E65F147F38B Responder cookie: 0xDFC2859BD7000000 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 68 Encrypted payload (40 bytes) 0000 00 0c 29 b1 20 22 00 80 c8 b9 b1 b8 08 00 45 00 ..). "........E. 0010 00 60 82 72 00 00 40 11 b9 70 a5 e3 f9 6f a5 e3 .`.r..@..p...o.. 0020 f9 73 01 f4 01 f4 00 4c 00 00 1f 42 2e 65 f1 47 .s.....L...B.e.G 0030 f3 8b df c2 85 9b d7 00 00 00 05 10 02 01 00 00 ................ 0040 00 00 00 00 00 44 a4 b4 14 47 1a f2 ea 4a 08 23 .....D...G...J.# 0050 e5 cd 39 c1 b2 8a 98 ad 94 c1 74 4f 88 45 ef ff ..9.......tO.E.. 0060 3b 81 79 ce 18 78 f7 14 c3 75 90 c0 6a c1 ba 4a ;.y..x...u..j..J 0070 ae 20 . Frame 14 (138 bytes on wire, 138 bytes captured) Arrival Time: Oct 2, 2003 10:21:34.939490000 Time delta from previous packet: 0.001095000 seconds Time relative to first packet: 3.640393000 seconds Frame Number: 14 Packet Length: 138 bytes Capture Length: 138 bytes Ethernet II, Src: 00:0c:29:b1:20:22, Dst: 00:80:c8:b9:b1:b8 Destination: 00:80:c8:b9:b1:b8 (00:80:c8:b9:b1:b8) Source: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22) Type: IP (0x0800) Trailer: 50728AF1 Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.111 (165.227.249.111) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x00dd (221) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xfaed (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.111 (165.227.249.111) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 100 Checksum: 0x0867 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x1F422E65F147F38B Responder cookie: 0xDFC2859BD7000000 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 92 Encrypted payload (64 bytes) 0000 00 80 c8 b9 b1 b8 00 0c 29 b1 20 22 08 00 45 00 ........). "..E. 0010 00 78 00 dd 00 00 80 11 fa ed a5 e3 f9 73 a5 e3 .x...........s.. 0020 f9 6f 01 f4 01 f4 00 64 08 67 1f 42 2e 65 f1 47 .o.....d.g.B.e.G 0030 f3 8b df c2 85 9b d7 00 00 00 05 10 02 01 00 00 ................ 0040 00 00 00 00 00 5c f2 ac a9 a0 29 56 ba 0d 71 fe .....\....)V..q. 0050 7f 6e 93 7d f7 02 0a 3c f3 0c 2d d7 7f 76 d9 d7 .n.}...<..-..v.. 0060 00 28 93 87 4f c8 e6 8f c4 b6 77 a1 6f 7f a0 b0 .(..O.....w.o... 0070 11 d6 3b 3e 50 0f ab 42 c9 02 81 48 dd 2c 2f 4a ..;>P..B...H.,/J 0080 c8 ad c3 ee 7b 82 50 72 8a f1 ....{.Pr.. Frame 15 (338 bytes on wire, 338 bytes captured) Arrival Time: Oct 2, 2003 10:21:36.907679000 Time delta from previous packet: 1.968189000 seconds Time relative to first packet: 5.608582000 seconds Frame Number: 15 Packet Length: 338 bytes Capture Length: 338 bytes Ethernet II, Src: 00:0c:29:b1:20:22, Dst: 00:80:c8:b9:b1:b8 Destination: 00:80:c8:b9:b1:b8 (00:80:c8:b9:b1:b8) Source: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22) Type: IP (0x0800) Trailer: 7FD0D40F Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.111 (165.227.249.111) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 320 Identification: 0x00df (223) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xfa23 (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.111 (165.227.249.111) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 300 Checksum: 0x7864 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x1F422E65F147F38B Responder cookie: 0xDFC2859BD7000000 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x222BC12A Length: 292 Encrypted payload (264 bytes) 0000 00 80 c8 b9 b1 b8 00 0c 29 b1 20 22 08 00 45 00 ........). "..E. 0010 01 40 00 df 00 00 80 11 fa 23 a5 e3 f9 73 a5 e3 .@.......#...s.. 0020 f9 6f 01 f4 01 f4 01 2c 78 64 1f 42 2e 65 f1 47 .o.....,xd.B.e.G 0030 f3 8b df c2 85 9b d7 00 00 00 08 10 20 01 22 2b ............ ."+ 0040 c1 2a 00 00 01 24 4b 5f 8e b3 06 1f 28 c2 2e bf .*...$K_....(... 0050 ab b2 f9 a7 d2 aa b2 0f 5a 1a d0 45 42 5a 7d 47 ........Z..EBZ}G 0060 65 6f 82 b0 ac 72 f1 dd de f8 00 59 83 9d ef 14 eo...r.....Y.... 0070 7f e2 1f c5 a1 af 83 0f 6a ad ce f4 76 22 98 66 ........j...v".f 0080 93 43 7e cc 79 07 13 18 db 13 4d e0 8c 04 a9 94 .C~.y.....M..... 0090 12 3c 00 34 e9 1b cc 3b 70 2a 55 f5 ec 66 2e 7c .<.4...;p*U..f.| 00a0 b1 44 53 7c 6a 95 a6 e8 e6 df c2 05 79 8c 31 b8 .DS|j.......y.1. 00b0 bb c8 53 3f c8 f2 9b ec 4e 33 5a 4d 45 2b c6 b9 ..S?....N3ZME+.. 00c0 44 bd e2 44 c7 4c 70 ed d1 25 cd 83 3f 86 cb b8 D..D.Lp..%..?... 00d0 fc 00 4b 3e e4 8f 77 3d ec 73 e8 52 a7 7f ab fe ..K>..w=.s.R.... 00e0 c0 20 28 be d7 92 0e d6 78 06 7e 35 d0 63 d6 e9 . (.....x.~5.c.. 00f0 35 0e 01 58 5e 0a 6e bd 4e 51 31 7c e6 3a c2 53 5..X^.n.NQ1|.:.S 0100 3f f0 9a 1d 45 28 09 89 c6 a0 f5 32 e8 4b 0d af ?...E(.....2.K.. 0110 da 7d d8 5e d9 00 7d d9 8a 8b bf 40 a3 f9 c2 a4 .}.^..}....@.... 0120 fd 94 86 45 65 33 08 b2 37 d3 25 4e e5 19 c0 b9 ...Ee3..7.%N.... 0130 7b 3c 04 11 c1 03 32 84 60 86 a3 82 4c 85 43 fc {<....2.`...L.C. 0140 62 3c 04 69 bf 8e de 3b d1 b0 f0 27 9a 4a 7f d0 b<.i...;...'.J.. 0150 d4 0f .. Frame 16 (330 bytes on wire, 330 bytes captured) Arrival Time: Oct 2, 2003 10:21:36.935326000 Time delta from previous packet: 0.027647000 seconds Time relative to first packet: 5.636229000 seconds Frame Number: 16 Packet Length: 330 bytes Capture Length: 330 bytes Ethernet II, Src: 00:80:c8:b9:b1:b8, Dst: 00:0c:29:b1:20:22 Destination: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22) Source: 00:80:c8:b9:b1:b8 (00:80:c8:b9:b1:b8) Type: IP (0x0800) Trailer: E683BA97 Internet Protocol, Src Addr: 165.227.249.111 (165.227.249.111), Dst Addr: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 312 Identification: 0xb6e1 (46817) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x8429 (correct) Source: 165.227.249.111 (165.227.249.111) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 292 Checksum: 0x0000 (none) Internet Security Association and Key Management Protocol Initiator cookie: 0x1F422E65F147F38B Responder cookie: 0xDFC2859BD7000000 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x222BC12A Length: 284 Encrypted payload (256 bytes) 0000 00 0c 29 b1 20 22 00 80 c8 b9 b1 b8 08 00 45 00 ..). "........E. 0010 01 38 b6 e1 00 00 40 11 84 29 a5 e3 f9 6f a5 e3 .8....@..)...o.. 0020 f9 73 01 f4 01 f4 01 24 00 00 1f 42 2e 65 f1 47 .s.....$...B.e.G 0030 f3 8b df c2 85 9b d7 00 00 00 08 10 20 01 22 2b ............ ."+ 0040 c1 2a 00 00 01 1c 32 59 a8 32 10 68 39 dd 2b a6 .*....2Y.2.h9.+. 0050 04 21 ec d6 4b 01 b2 f0 d6 e6 d9 4d 91 48 45 bd .!..K......M.HE. 0060 6d c8 4e 25 08 b7 2b 06 65 07 a4 db f6 8c 02 20 m.N%..+.e...... 0070 9f f9 dd 8f d7 bb 6c f9 e3 5f 59 ce 44 6d 5f d2 ......l.._Y.Dm_. 0080 0a 58 5d ba ad ea a2 8b 24 0e 9c 91 38 06 3d 7b .X].....$...8.={ 0090 98 9a 55 31 c8 45 aa 7f a9 3f 7c 10 55 85 13 e6 ..U1.E...?|.U... 00a0 7e 1b ee 35 d6 76 64 d3 b2 e8 76 1d e5 d3 ee 28 ~..5.vd...v....( 00b0 80 c3 69 ea 78 31 43 f2 6d d2 cb 7a 16 69 72 1b ..i.x1C.m..z.ir. 00c0 d9 e3 63 60 ba 83 3e dd 3d e2 db 88 83 26 cb 09 ..c`..>.=....&.. 00d0 18 b5 65 14 bd 15 fb 0a b2 d6 ba d5 f6 9a 30 0f ..e...........0. 00e0 2c ae 5b 3f c3 74 63 85 3c 3d f9 56 0c df 4a 39 ,.[?.tc.<=.V..J9 00f0 4b 4d 08 00 f2 f8 c8 fa 53 35 ff ed cd 41 3e c1 KM......S5...A>. 0100 61 ca 16 cc 4d 91 a8 f5 19 67 cf 92 3a 76 16 76 a...M....g..:v.v 0110 ce 1b 2b c4 69 a9 9c 8c f0 62 92 51 c6 3a e6 6e ..+.i....b.Q.:.n 0120 6c b0 09 2e 3d 30 21 49 08 13 dc 8c 29 fe e5 5f l...=0!I....).._ 0130 c2 3e 5a 86 c7 63 12 25 90 41 08 c0 65 c4 a6 2a .>Z..c.%.A..e..* 0140 a6 8b 22 e8 70 b8 e6 83 ba 97 ..".p..... Frame 17 (98 bytes on wire, 98 bytes captured) Arrival Time: Oct 2, 2003 10:21:36.939998000 Time delta from previous packet: 0.004672000 seconds Time relative to first packet: 5.640901000 seconds Frame Number: 17 Packet Length: 98 bytes Capture Length: 98 bytes Ethernet II, Src: 00:0c:29:b1:20:22, Dst: 00:80:c8:b9:b1:b8 Destination: 00:80:c8:b9:b1:b8 (00:80:c8:b9:b1:b8) Source: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22) Type: IP (0x0800) Trailer: 23061E3C Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.111 (165.227.249.111) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 80 Identification: 0x00e0 (224) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xfb12 (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.111 (165.227.249.111) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 60 Checksum: 0x5db5 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x1F422E65F147F38B Responder cookie: 0xDFC2859BD7000000 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x222BC12A Length: 52 Encrypted payload (24 bytes) 0000 00 80 c8 b9 b1 b8 00 0c 29 b1 20 22 08 00 45 00 ........). "..E. 0010 00 50 00 e0 00 00 80 11 fb 12 a5 e3 f9 73 a5 e3 .P...........s.. 0020 f9 6f 01 f4 01 f4 00 3c 5d b5 1f 42 2e 65 f1 47 .o.....<]..B.e.G 0030 f3 8b df c2 85 9b d7 00 00 00 08 10 20 01 22 2b ............ ."+ 0040 c1 2a 00 00 00 34 4c a3 5c 80 28 ac f1 96 6f 46 .*...4L.\.(...oF 0050 9f 17 e1 be b6 15 0b 4a d6 f1 bb 49 dd 99 23 06 .......J...I..#. 0060 1e 3c .< Frame 18 (130 bytes on wire, 130 bytes captured) Arrival Time: Oct 2, 2003 10:21:41.663479000 Time delta from previous packet: 4.723481000 seconds Time relative to first packet: 10.364382000 seconds Frame Number: 18 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:0c:29:b1:20:22, Dst: 00:80:c8:b9:b1:b8 Destination: 00:80:c8:b9:b1:b8 (00:80:c8:b9:b1:b8) Source: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22) Type: IP (0x0800) Trailer: 1F26C347 Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.111 (165.227.249.111) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0001 (1) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: ESP (0x32) Header checksum: 0xfbb0 (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.111 (165.227.249.111) Encapsulating Security Payload SPI: 0xd30a7d1e Sequence: 0x00000001 Data (84 bytes) 0000 00 80 c8 b9 b1 b8 00 0c 29 b1 20 22 08 00 45 00 ........). "..E. 0010 00 70 00 01 00 00 80 32 fb b0 a5 e3 f9 73 a5 e3 .p.....2.....s.. 0020 f9 6f d3 0a 7d 1e 00 00 00 01 dd 72 0e 98 4e 0b .o..}......r..N. 0030 46 f7 f6 0a 2a 1f e3 2b 47 c0 bf 01 bc 7b 5b ee F...*..+G....{[. 0040 72 1e 99 85 0e ba 59 2c b7 b8 88 69 a7 48 df 02 r.....Y,...i.H.. 0050 b2 99 8a 95 88 a7 be dd 46 8d 8b 32 e6 2d 4d 1a ........F..2.-M. 0060 a5 bf 93 f1 e1 3f 22 ae d5 a8 1a 5c dc e0 da 05 .....?"....\.... 0070 61 11 71 c3 a8 fe b1 11 ba cd 21 a9 65 91 1f 26 a.q.......!.e..& 0080 c3 47 .G Frame 19 (130 bytes on wire, 130 bytes captured) Arrival Time: Oct 2, 2003 10:21:41.664309000 Time delta from previous packet: 0.000830000 seconds Time relative to first packet: 10.365212000 seconds Frame Number: 19 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:80:c8:b9:b1:b8, Dst: 00:0c:29:b1:20:22 Destination: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22) Source: 00:80:c8:b9:b1:b8 (00:80:c8:b9:b1:b8) Type: IP (0x0800) Trailer: 45B6AD97 Internet Protocol, Src Addr: 165.227.249.111 (165.227.249.111), Dst Addr: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0000 (0) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8bb1 (correct) Source: 165.227.249.111 (165.227.249.111) Destination: 165.227.249.115 (165.227.249.115) Encapsulating Security Payload SPI: 0x7cce038d Sequence: 0x00000001 Data (84 bytes) 0000 00 0c 29 b1 20 22 00 80 c8 b9 b1 b8 08 00 45 00 ..). "........E. 0010 00 70 00 00 00 00 f0 32 8b b1 a5 e3 f9 6f a5 e3 .p.....2.....o.. 0020 f9 73 7c ce 03 8d 00 00 00 01 12 95 ab 29 ef 6c .s|..........).l 0030 0f 90 4c 2a 17 d7 39 66 0c 5f f4 97 6f fb 8d cc ..L*..9f._..o... 0040 67 6f 29 d9 7a 17 5a 0d 7d 15 56 91 fd 5e 96 60 go).z.Z.}.V..^.` 0050 76 61 5b 08 05 1e d2 9c ab 9d 08 aa dc 00 dd 1f va[............. 0060 ee 0b 71 61 c3 ec 54 50 56 bc e3 a9 1f 5e 13 53 ..qa..TPV....^.S 0070 14 30 5d 5c a2 32 62 fd 45 ea ff 17 99 c1 45 b6 .0]\.2b.E.....E. 0080 ad 97 .. Frame 20 (130 bytes on wire, 130 bytes captured) Arrival Time: Oct 2, 2003 10:21:42.674697000 Time delta from previous packet: 1.010388000 seconds Time relative to first packet: 11.375600000 seconds Frame Number: 20 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:0c:29:b1:20:22, Dst: 00:80:c8:b9:b1:b8 Destination: 00:80:c8:b9:b1:b8 (00:80:c8:b9:b1:b8) Source: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22) Type: IP (0x0800) Trailer: BB1E2E37 Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.111 (165.227.249.111) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0002 (2) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: ESP (0x32) Header checksum: 0xfbaf (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.111 (165.227.249.111) Encapsulating Security Payload SPI: 0xd30a7d1e Sequence: 0x00000002 Data (84 bytes) 0000 00 80 c8 b9 b1 b8 00 0c 29 b1 20 22 08 00 45 00 ........). "..E. 0010 00 70 00 02 00 00 80 32 fb af a5 e3 f9 73 a5 e3 .p.....2.....s.. 0020 f9 6f d3 0a 7d 1e 00 00 00 02 1a 5c dc e0 da 05 .o..}......\.... 0030 61 11 87 6b 78 d0 50 01 33 71 fd 21 15 6e 26 0e a..kx.P.3q.!.n&. 0040 5e d1 b6 57 68 81 aa 7a e0 69 4b f1 03 52 7c 27 ^..Wh..z.iK..R|' 0050 86 30 58 1a 85 16 3b ea 41 34 56 5d b4 89 a8 28 .0X...;.A4V]...( 0060 29 16 de 0d dd da 66 e8 f7 88 fc 4c 40 d4 1c 1e ).....f....L@... 0070 85 24 4c 4d d3 50 41 9e bf 6b 89 b6 8b 06 bb 1e .$LM.PA..k...... 0080 2e 37 .7 Frame 21 (130 bytes on wire, 130 bytes captured) Arrival Time: Oct 2, 2003 10:21:42.675137000 Time delta from previous packet: 0.000440000 seconds Time relative to first packet: 11.376040000 seconds Frame Number: 21 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:80:c8:b9:b1:b8, Dst: 00:0c:29:b1:20:22 Destination: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22) Source: 00:80:c8:b9:b1:b8 (00:80:c8:b9:b1:b8) Type: IP (0x0800) Trailer: CF1007D0 Internet Protocol, Src Addr: 165.227.249.111 (165.227.249.111), Dst Addr: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0001 (1) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8bb0 (correct) Source: 165.227.249.111 (165.227.249.111) Destination: 165.227.249.115 (165.227.249.115) Encapsulating Security Payload SPI: 0x7cce038d Sequence: 0x00000002 Data (84 bytes) 0000 00 0c 29 b1 20 22 00 80 c8 b9 b1 b8 08 00 45 00 ..). "........E. 0010 00 70 00 01 00 00 f0 32 8b b0 a5 e3 f9 6f a5 e3 .p.....2.....o.. 0020 f9 73 7c ce 03 8d 00 00 00 02 10 9c 4a 35 0b 5e .s|.........J5.^ 0030 30 e8 90 7d 9e 21 d0 31 b7 d0 93 94 fb ea d6 af 0..}.!.1........ 0040 5e 00 da e9 94 04 8f 87 de 52 e3 a5 8d dc fb 43 ^........R.....C 0050 6e a7 a8 5b da 43 1e a9 2e be 9c 43 8b c6 fc 26 n..[.C.....C...& 0060 1d 85 ea cb 06 96 24 c7 72 e4 04 95 01 58 8f 52 ......$.r....X.R 0070 1c 46 72 7d b4 55 61 c5 06 2c 2d a4 63 8b cf 10 .Fr}.Ua..,-.c... 0080 07 d0 ..