Frame 1 (170 bytes on wire, 170 bytes captured)
    Arrival Time: Feb 19, 2004 14:58:48.283310000
    Time delta from previous packet: 0.000000000 seconds
    Time since reference or first frame: 0.000000000 seconds
    Frame Number: 1
    Packet Length: 170 bytes
    Capture Length: 170 bytes
Ethernet II, Src: 00:0c:29:b1:20:22, Dst: 00:10:db:16:db:f6
    Destination: 00:10:db:16:db:f6 (00:10:db:16:db:f6)
    Source: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22)
    Type: IP (0x0800)
    Frame check sequence: 0xa709c26b (correct)
Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.117 (165.227.249.117)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 152
    Identification: 0x025d (605)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0xf947 (correct)
    Source: 165.227.249.115 (165.227.249.115)
    Destination: 165.227.249.117 (165.227.249.117)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 132
    Checksum: 0xf62a (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0xF9C074408328C2CA
    Responder cookie: 0x0000000000000000
    Next payload: Security Association (1)
    Version: 1.0
    Exchange type: Identity Protection (Main Mode) (2)
    Flags
        .... ...0 = No encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x00000000
    Length: 124
    Security Association payload
        Next payload: Vendor ID (13)
        Length: 56
        Domain of interpretation: IPSEC (1)
        Situation: IDENTITY (1)
        Proposal payload # 1
            Next payload: NONE (0)
            Length: 44
            Proposal number: 1
            Protocol ID: ISAKMP (1)
            SPI size: 0
            Number of transforms: 1
            Transform payload # 1
                Next payload: NONE (0)
                Length: 36
                Transform number: 1
                Transform ID: KEY_IKE (1)
                Encryption-Algorithm (1): AES-CBC (7)
                Key-Length (14): Key-Length (128)
                Hash-Algorithm (2): SHA (2)
                Group-Description (4): Alternate 1024-bit MODP group (2)
                Authentication-Method (3): PSK (1)
                Life-Type (11): Seconds (1)
                Life-Duration (12): Duration-Value (28800)
    Vendor ID payload
        Next payload: Vendor ID (13)
        Length: 20
        Vendor ID: draft-ietf-ipsec-nat-t-ike-00
    Vendor ID payload
        Next payload: NONE (0)
        Length: 20
        Vendor ID: draft-ietf-ipsec-nat-t-ike-02

0000  00 10 db 16 db f6 00 0c 29 b1 20 22 08 00 45 00   ........). "..E.
0010  00 98 02 5d 00 00 80 11 f9 47 a5 e3 f9 73 a5 e3   ...].....G...s..
0020  f9 75 01 f4 01 f4 00 84 f6 2a f9 c0 74 40 83 28   .u.......*..t@.(
0030  c2 ca 00 00 00 00 00 00 00 00 01 10 02 00 00 00   ................
0040  00 00 00 00 00 7c 0d 00 00 38 00 00 00 01 00 00   .....|...8......
0050  00 01 00 00 00 2c 01 01 00 01 00 00 00 24 01 01   .....,.......$..
0060  00 00 80 01 00 07 80 0e 00 80 80 02 00 02 80 04   ................
0070  00 02 80 03 00 01 80 0b 00 01 80 0c 70 80 0d 00   ............p...
0080  00 14 44 85 15 2d 18 b6 bb cd 0b e8 a8 46 95 79   ..D..-.......F.y
0090  dd cc 00 00 00 14 90 cb 80 91 3e bb 69 6e 08 63   ..........>.in.c
00a0  81 b5 ec 42 7b 1f a7 09 c2 6b                     ...B{....k

Frame 2 (186 bytes on wire, 186 bytes captured)
    Arrival Time: Feb 19, 2004 14:58:48.285097000
    Time delta from previous packet: 0.001787000 seconds
    Time since reference or first frame: 0.001787000 seconds
    Frame Number: 2
    Packet Length: 186 bytes
    Capture Length: 186 bytes
Ethernet II, Src: 00:10:db:16:db:f6, Dst: 00:0c:29:b1:20:22
    Destination: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22)
    Source: 00:10:db:16:db:f6 (00:10:db:16:db:f6)
    Type: IP (0x0800)
    Frame check sequence: 0x59022a57 (correct)
Internet Protocol, Src Addr: 165.227.249.117 (165.227.249.117), Dst Addr: 165.227.249.115 (165.227.249.115)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 168
    Identification: 0x05f2 (1522)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0x35a3 (correct)
    Source: 165.227.249.117 (165.227.249.117)
    Destination: 165.227.249.115 (165.227.249.115)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 148
    Checksum: 0x9782 (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0xF9C074408328C2CA
    Responder cookie: 0x5640DBB6684B55E1
    Next payload: Security Association (1)
    Version: 1.0
    Exchange type: Identity Protection (Main Mode) (2)
    Flags
        .... ...0 = No encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x00000000
    Length: 140
    Security Association payload
        Next payload: Vendor ID (13)
        Length: 56
        Domain of interpretation: IPSEC (1)
        Situation: IDENTITY (1)
        Proposal payload # 1
            Next payload: NONE (0)
            Length: 44
            Proposal number: 1
            Protocol ID: ISAKMP (1)
            SPI size: 0
            Number of transforms: 1
            Transform payload # 1
                Next payload: NONE (0)
                Length: 36
                Transform number: 1
                Transform ID: KEY_IKE (1)
                Encryption-Algorithm (1): AES-CBC (7)
                Hash-Algorithm (2): SHA (2)
                Group-Description (4): Alternate 1024-bit MODP group (2)
                Authentication-Method (3): PSK (1)
                Key-Length (14): Key-Length (128)
                Life-Type (11): Seconds (1)
                Life-Duration (12): Duration-Value (28800)
    Vendor ID payload
        Next payload: Vendor ID (13)
        Length: 32
        Vendor ID: unknown vendor ID: 0x47D2B126BFCD83489760E2CF8C5D4D5A...
    Vendor ID payload
        Next payload: NONE (0)
        Length: 24
        Vendor ID: unknown vendor ID: 0x4865617274426561745F4E6F74696679...

0000  00 0c 29 b1 20 22 00 10 db 16 db f6 08 00 45 00   ..). "........E.
0010  00 a8 05 f2 00 00 40 11 35 a3 a5 e3 f9 75 a5 e3   ......@.5....u..
0020  f9 73 01 f4 01 f4 00 94 97 82 f9 c0 74 40 83 28   .s..........t@.(
0030  c2 ca 56 40 db b6 68 4b 55 e1 01 10 02 00 00 00   ..V@..hKU.......
0040  00 00 00 00 00 8c 0d 00 00 38 00 00 00 01 00 00   .........8......
0050  00 01 00 00 00 2c 01 01 00 01 00 00 00 24 01 01   .....,.......$..
0060  00 00 80 01 00 07 80 02 00 02 80 04 00 02 80 03   ................
0070  00 01 80 0e 00 80 80 0b 00 01 80 0c 70 80 0d 00   ............p...
0080  00 20 47 d2 b1 26 bf cd 83 48 97 60 e2 cf 8c 5d   . G..&...H.`...]
0090  4d 5a 03 49 7c 15 00 00 00 03 00 00 05 00 00 00   MZ.I|...........
00a0  00 18 48 65 61 72 74 42 65 61 74 5f 4e 6f 74 69   ..HeartBeat_Noti
00b0  66 79 38 6b 01 00 59 02 2a 57                     fy8k..Y.*W

Frame 3 (302 bytes on wire, 302 bytes captured)
    Arrival Time: Feb 19, 2004 14:58:50.437035000
    Time delta from previous packet: 2.151938000 seconds
    Time since reference or first frame: 2.153725000 seconds
    Frame Number: 3
    Packet Length: 302 bytes
    Capture Length: 302 bytes
Ethernet II, Src: 00:0c:29:b1:20:22, Dst: 00:10:db:16:db:f6
    Destination: 00:10:db:16:db:f6 (00:10:db:16:db:f6)
    Source: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22)
    Type: IP (0x0800)
    Frame check sequence: 0xd6775ba2 (correct)
Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.117 (165.227.249.117)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 284
    Identification: 0x025e (606)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0xf8c2 (correct)
    Source: 165.227.249.115 (165.227.249.115)
    Destination: 165.227.249.117 (165.227.249.117)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 264
    Checksum: 0x98bd (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0xF9C074408328C2CA
    Responder cookie: 0x5640DBB6684B55E1
    Next payload: Key Exchange (4)
    Version: 1.0
    Exchange type: Identity Protection (Main Mode) (2)
    Flags
        .... ...0 = No encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x00000000
    Length: 256
    Key Exchange payload
        Next payload: Nonce (10)
        Length: 132
        Key Exchange Data
    Nonce payload
        Next payload: Vendor ID (13)
        Length: 24
        Nonce Data
    Vendor ID payload
        Next payload: Vendor ID (13)
        Length: 48
        Vendor ID: unknown vendor ID: 0x47BBE7C993F1FC13B4E6D0DB565C68E5...
    Vendor ID payload
        Next payload: Vendor ID (13)
        Length: 12
        Vendor ID: unknown vendor ID: 0xDA8E937880010000
    Vendor ID payload
        Next payload: NONE (0)
        Length: 12
        Vendor ID: draft-beaulieu-ike-xauth-02.txt

0000  00 10 db 16 db f6 00 0c 29 b1 20 22 08 00 45 00   ........). "..E.
0010  01 1c 02 5e 00 00 80 11 f8 c2 a5 e3 f9 73 a5 e3   ...^.........s..
0020  f9 75 01 f4 01 f4 01 08 98 bd f9 c0 74 40 83 28   .u..........t@.(
0030  c2 ca 56 40 db b6 68 4b 55 e1 04 10 02 00 00 00   ..V@..hKU.......
0040  00 00 00 00 01 00 0a 00 00 84 c6 60 05 bb cd b4   ...........`....
0050  af 85 aa 02 8d 97 6b 2d 9a 2e 50 ae d8 56 2a c9   ......k-..P..V*.
0060  a5 47 c0 fa 93 27 cd 1e d2 b4 76 a3 78 ff 7b 11   .G...'....v.x.{.
0070  e9 32 26 da 1b 02 0e ac fa 17 2c c4 63 c9 51 f4   .2&.......,.c.Q.
0080  0a 2a eb 9f 70 3a 21 ee da e9 e2 6d 71 0a 38 58   .*..p:!....mq.8X
0090  0c a7 c7 4d ea 42 66 37 e1 c6 4f 2b c8 f8 4b b8   ...M.Bf7..O+..K.
00a0  62 03 52 a6 b3 16 24 a3 10 84 7f 87 cf b5 28 9b   b.R...$.......(.
00b0  0a c3 f2 10 43 cd f3 fd fc f7 54 ce 7e ea b7 ef   ....C.....T.~...
00c0  40 8e 7a c6 0e 16 4f 87 58 f8 0d 00 00 18 5f ee   @.z...O.X....._.
00d0  0d ba a7 10 ae 98 41 82 53 05 2c 31 1c 27 38 4c   ......A.S.,1.'8L
00e0  1f c8 0d 00 00 30 47 bb e7 c9 93 f1 fc 13 b4 e6   .....0G.........
00f0  d0 db 56 5c 68 e5 01 02 01 01 02 01 01 03 11 31   ..V\h..........1
0100  30 2e 31 2e 31 20 28 42 75 69 6c 64 20 31 30 29   0.1.1 (Build 10)
0110  00 00 0d 00 00 0c da 8e 93 78 80 01 00 00 00 00   .........x......
0120  00 0c 09 00 26 89 df d6 b7 12 d6 77 5b a2         ....&......w[.

Frame 4 (230 bytes on wire, 230 bytes captured)
    Arrival Time: Feb 19, 2004 14:58:50.446507000
    Time delta from previous packet: 0.009472000 seconds
    Time since reference or first frame: 2.163197000 seconds
    Frame Number: 4
    Packet Length: 230 bytes
    Capture Length: 230 bytes
Ethernet II, Src: 00:10:db:16:db:f6, Dst: 00:0c:29:b1:20:22
    Destination: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22)
    Source: 00:10:db:16:db:f6 (00:10:db:16:db:f6)
    Type: IP (0x0800)
    Frame check sequence: 0x1abad0e1 (correct)
Internet Protocol, Src Addr: 165.227.249.117 (165.227.249.117), Dst Addr: 165.227.249.115 (165.227.249.115)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 212
    Identification: 0x05f3 (1523)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0x3576 (correct)
    Source: 165.227.249.117 (165.227.249.117)
    Destination: 165.227.249.115 (165.227.249.115)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 192
    Checksum: 0x8e26 (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0xF9C074408328C2CA
    Responder cookie: 0x5640DBB6684B55E1
    Next payload: Key Exchange (4)
    Version: 1.0
    Exchange type: Identity Protection (Main Mode) (2)
    Flags
        .... ...0 = No encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x00000000
    Length: 184
    Key Exchange payload
        Next payload: Nonce (10)
        Length: 132
        Key Exchange Data
    Nonce payload
        Next payload: NONE (0)
        Length: 24
        Nonce Data

0000  00 0c 29 b1 20 22 00 10 db 16 db f6 08 00 45 00   ..). "........E.
0010  00 d4 05 f3 00 00 40 11 35 76 a5 e3 f9 75 a5 e3   ......@.5v...u..
0020  f9 73 01 f4 01 f4 00 c0 8e 26 f9 c0 74 40 83 28   .s.......&..t@.(
0030  c2 ca 56 40 db b6 68 4b 55 e1 04 10 02 00 00 00   ..V@..hKU.......
0040  00 00 00 00 00 b8 0a 00 00 84 ef 1a a2 f9 60 0c   ..............`.
0050  3b ab cf fc 68 78 bd 8f 80 24 54 25 77 ed 9e a2   ;...hx...$T%w...
0060  da bb 6a 87 ea 6d 6b 0f df 06 ad ea e6 95 7a 07   ..j..mk.......z.
0070  45 4d 98 09 b8 e0 03 3a bb 40 0e 86 01 03 87 e7   EM.....:.@......
0080  61 bb 73 25 0d 6e 9e ce b0 ce 03 dc 25 70 e5 42   a.s%.n......%p.B
0090  69 e7 3a 7d f5 ae d6 59 ac 88 5a a1 89 45 90 e8   i.:}...Y..Z..E..
00a0  7b 88 ed 91 45 d9 b0 6b 55 95 99 74 8f 13 ef b2   {...E..kU..t....
00b0  30 ca ce 50 1b f4 fc 18 e0 35 76 b6 ba 1f a6 ed   0..P.....5v.....
00c0  6f 23 a6 dd d9 23 a8 c6 97 de 00 00 00 18 99 38   o#...#.........8
00d0  79 a9 63 fd a2 24 bc b9 8c 7e ac 9a b3 05 46 08   y.c..$...~....F.
00e0  4e d3 1a ba d0 e1                                 N.....

Frame 5 (138 bytes on wire, 138 bytes captured)
    Arrival Time: Feb 19, 2004 14:58:51.608622000
    Time delta from previous packet: 1.162115000 seconds
    Time since reference or first frame: 3.325312000 seconds
    Frame Number: 5
    Packet Length: 138 bytes
    Capture Length: 138 bytes
Ethernet II, Src: 00:0c:29:b1:20:22, Dst: 00:10:db:16:db:f6
    Destination: 00:10:db:16:db:f6 (00:10:db:16:db:f6)
    Source: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22)
    Type: IP (0x0800)
    Frame check sequence: 0x8c44d112 (correct)
Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.117 (165.227.249.117)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 120
    Identification: 0x025f (607)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0xf965 (correct)
    Source: 165.227.249.115 (165.227.249.115)
    Destination: 165.227.249.117 (165.227.249.117)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 100
    Checksum: 0x669a (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0xF9C074408328C2CA
    Responder cookie: 0x5640DBB6684B55E1
    Next payload: Identification (5)
    Version: 1.0
    Exchange type: Identity Protection (Main Mode) (2)
    Flags
        .... ...1 = Encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x00000000
    Length: 92
    Encrypted payload (64 bytes)

0000  00 10 db 16 db f6 00 0c 29 b1 20 22 08 00 45 00   ........). "..E.
0010  00 78 02 5f 00 00 80 11 f9 65 a5 e3 f9 73 a5 e3   .x._.....e...s..
0020  f9 75 01 f4 01 f4 00 64 66 9a f9 c0 74 40 83 28   .u.....df...t@.(
0030  c2 ca 56 40 db b6 68 4b 55 e1 05 10 02 01 00 00   ..V@..hKU.......
0040  00 00 00 00 00 5c e0 d1 79 a5 a0 e1 e1 36 ec b1   .....\..y....6..
0050  35 84 8d 9f 2b dc a7 af cf 16 a4 b4 ba 7b c7 27   5...+........{.'
0060  8a 4e 75 10 3b 16 ee dd 97 aa f0 89 b0 00 97 85   .Nu.;...........
0070  ca 34 2f e4 d5 01 5b 38 4c 89 a2 53 bb e7 88 37   .4/...[8L..S...7
0080  47 9f 18 93 9e 7d 8c 44 d1 12                     G....}.D..

Frame 6 (122 bytes on wire, 122 bytes captured)
    Arrival Time: Feb 19, 2004 14:58:51.610777000
    Time delta from previous packet: 0.002155000 seconds
    Time since reference or first frame: 3.327467000 seconds
    Frame Number: 6
    Packet Length: 122 bytes
    Capture Length: 122 bytes
Ethernet II, Src: 00:10:db:16:db:f6, Dst: 00:0c:29:b1:20:22
    Destination: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22)
    Source: 00:10:db:16:db:f6 (00:10:db:16:db:f6)
    Type: IP (0x0800)
    Frame check sequence: 0x8b9f1e1b (correct)
Internet Protocol, Src Addr: 165.227.249.117 (165.227.249.117), Dst Addr: 165.227.249.115 (165.227.249.115)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 104
    Identification: 0x05f4 (1524)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0x35e1 (correct)
    Source: 165.227.249.117 (165.227.249.117)
    Destination: 165.227.249.115 (165.227.249.115)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 84
    Checksum: 0xdd46 (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0xF9C074408328C2CA
    Responder cookie: 0x5640DBB6684B55E1
    Next payload: Identification (5)
    Version: 1.0
    Exchange type: Identity Protection (Main Mode) (2)
    Flags
        .... ...1 = Encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x00000000
    Length: 76
    Encrypted payload (48 bytes)

0000  00 0c 29 b1 20 22 00 10 db 16 db f6 08 00 45 00   ..). "........E.
0010  00 68 05 f4 00 00 40 11 35 e1 a5 e3 f9 75 a5 e3   .h....@.5....u..
0020  f9 73 01 f4 01 f4 00 54 dd 46 f9 c0 74 40 83 28   .s.....T.F..t@.(
0030  c2 ca 56 40 db b6 68 4b 55 e1 05 10 02 01 00 00   ..V@..hKU.......
0040  00 00 00 00 00 4c d0 7f 71 46 99 a5 fc 23 70 ba   .....L..qF...#p.
0050  c0 11 46 49 a2 4b b9 01 bd 31 f2 51 c8 b9 0a b6   ..FI.K...1.Q....
0060  ee fe 9c 77 8a 1e ec 0f c8 3c 40 cf c6 55 c4 2e   ...w.....<@..U..
0070  35 55 f3 2d 49 52 8b 9f 1e 1b                     5U.-IR....

Frame 7 (330 bytes on wire, 330 bytes captured)
    Arrival Time: Feb 19, 2004 14:58:53.838999000
    Time delta from previous packet: 2.228222000 seconds
    Time since reference or first frame: 5.555689000 seconds
    Frame Number: 7
    Packet Length: 330 bytes
    Capture Length: 330 bytes
Ethernet II, Src: 00:0c:29:b1:20:22, Dst: 00:10:db:16:db:f6
    Destination: 00:10:db:16:db:f6 (00:10:db:16:db:f6)
    Source: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22)
    Type: IP (0x0800)
    Frame check sequence: 0x4a72dd7f (correct)
Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.117 (165.227.249.117)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 312
    Identification: 0x0261 (609)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0xf8a3 (correct)
    Source: 165.227.249.115 (165.227.249.115)
    Destination: 165.227.249.117 (165.227.249.117)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 292
    Checksum: 0x50d0 (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0xF9C074408328C2CA
    Responder cookie: 0x5640DBB6684B55E1
    Next payload: Hash (8)
    Version: 1.0
    Exchange type: Quick Mode (32)
    Flags
        .... ...1 = Encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0xFDF19BCF
    Length: 284
    Encrypted payload (256 bytes)

0000  00 10 db 16 db f6 00 0c 29 b1 20 22 08 00 45 00   ........). "..E.
0010  01 38 02 61 00 00 80 11 f8 a3 a5 e3 f9 73 a5 e3   .8.a.........s..
0020  f9 75 01 f4 01 f4 01 24 50 d0 f9 c0 74 40 83 28   .u.....$P...t@.(
0030  c2 ca 56 40 db b6 68 4b 55 e1 08 10 20 01 fd f1   ..V@..hKU... ...
0040  9b cf 00 00 01 1c d7 d4 22 87 3d df b1 46 4f 2f   ........".=..FO/
0050  66 0d 47 59 8a 3f 0b 41 2c 85 25 5e a2 77 5e d4   f.GY.?.A,.%^.w^.
0060  e8 e8 e9 44 26 31 de c7 8d 49 3a a0 f4 b2 d9 4f   ...D&1...I:....O
0070  ff a5 b3 ed 6f cf d2 ec 89 49 9f e7 13 45 8f ae   ....o....I...E..
0080  f6 8a 29 b4 6f bf 28 fa 6a 8b 11 a1 03 b3 ff e4   ..).o.(.j.......
0090  84 61 20 64 d8 03 06 c7 a7 21 27 51 d6 d6 5f 4e   .a d.....!'Q.._N
00a0  3d f9 28 e5 af c0 85 5d 90 56 95 f9 2a d1 9e 3a   =.(....].V..*..:
00b0  85 68 70 a0 1f f3 b3 46 58 35 7a 06 bf 53 0b 91   .hp....FX5z..S..
00c0  50 e7 0f 8e 14 82 e0 fb eb a7 6f 16 3a 24 2d dd   P.........o.:$-.
00d0  d8 b4 13 f2 5e f6 f7 83 a7 a6 4c f4 63 17 b5 66   ....^.....L.c..f
00e0  da 5d a7 37 7e 19 e5 ee 88 4d 00 9e 5e ab 95 ad   .].7~....M..^...
00f0  a8 b0 e4 bb f8 18 bd 2b 82 cf 15 b6 0c 15 1a 9e   .......+........
0100  19 76 43 f8 ae 1d 73 b7 f2 6d f3 f3 de 13 4c f4   .vC...s..m....L.
0110  1a 9e 01 03 bd c6 36 3d b3 f2 d0 27 e1 3c 57 38   ......6=...'.<W8
0120  ed ad ef a0 49 1a 27 27 a6 9b 41 99 c0 2c b5 f2   ....I.''..A..,..
0130  6e 96 f6 9e 39 8a 90 26 3c bf a6 1a 45 11 10 db   n...9..&<...E...
0140  09 ac fb fa 0e 70 4a 72 dd 7f                     .....pJr..

Frame 8 (362 bytes on wire, 362 bytes captured)
    Arrival Time: Feb 19, 2004 14:58:53.849483000
    Time delta from previous packet: 0.010484000 seconds
    Time since reference or first frame: 5.566173000 seconds
    Frame Number: 8
    Packet Length: 362 bytes
    Capture Length: 362 bytes
Ethernet II, Src: 00:10:db:16:db:f6, Dst: 00:0c:29:b1:20:22
    Destination: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22)
    Source: 00:10:db:16:db:f6 (00:10:db:16:db:f6)
    Type: IP (0x0800)
    Frame check sequence: 0xe5e5b444 (correct)
Internet Protocol, Src Addr: 165.227.249.117 (165.227.249.117), Dst Addr: 165.227.249.115 (165.227.249.115)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 344
    Identification: 0x05f5 (1525)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0x34f0 (correct)
    Source: 165.227.249.117 (165.227.249.117)
    Destination: 165.227.249.115 (165.227.249.115)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 324
    Checksum: 0xd734 (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0xF9C074408328C2CA
    Responder cookie: 0x5640DBB6684B55E1
    Next payload: Hash (8)
    Version: 1.0
    Exchange type: Quick Mode (32)
    Flags
        .... ...1 = Encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0xFDF19BCF
    Length: 316
    Encrypted payload (288 bytes)

0000  00 0c 29 b1 20 22 00 10 db 16 db f6 08 00 45 00   ..). "........E.
0010  01 58 05 f5 00 00 40 11 34 f0 a5 e3 f9 75 a5 e3   .X....@.4....u..
0020  f9 73 01 f4 01 f4 01 44 d7 34 f9 c0 74 40 83 28   .s.....D.4..t@.(
0030  c2 ca 56 40 db b6 68 4b 55 e1 08 10 20 01 fd f1   ..V@..hKU... ...
0040  9b cf 00 00 01 3c 04 38 e0 e9 52 63 ff 0b 31 ad   .....<.8..Rc..1.
0050  2b 00 25 01 2f 18 dc f5 62 ec c0 b2 9a 6f 66 6c   +.%./...b....ofl
0060  92 6a 2a e9 31 50 8f 96 72 48 29 ac 9d 11 3b 32   .j*.1P..rH)...;2
0070  73 3a d3 07 91 c2 60 5d 4f 8f 0d 75 37 55 ce b9   s:....`]O..u7U..
0080  ba be 73 88 d7 7e 60 0e 16 c7 5e 16 c4 23 2e a8   ..s..~`...^..#..
0090  b3 9f 01 9b 66 7b b4 e7 77 36 11 79 38 8e 07 9f   ....f{..w6.y8...
00a0  40 08 fc fb c1 b9 c2 ad f5 7e b9 7d 24 3c ec d1   @........~.}$<..
00b0  b4 1d e1 4c 79 43 ed ca 17 df 7f 62 3f 96 f1 2b   ...LyC.....b?..+
00c0  95 e6 7b cb 2d d1 1c 46 f9 46 7d 12 67 16 51 20   ..{.-..F.F}.g.Q 
00d0  bc b7 d1 88 4a 5d b0 8f 85 fc 07 01 38 34 4a 42   ....J]......84JB
00e0  0c cd 80 2b 9e 05 be 46 bb d0 90 ab 54 78 a8 df   ...+...F....Tx..
00f0  d1 ec f5 31 f3 b2 45 62 d0 1a 1e d2 4b 5c f7 a4   ...1..Eb....K\..
0100  7e 8a a8 3b 17 a5 0d 9c e0 dd 11 92 90 39 16 a4   ~..;.........9..
0110  d1 44 40 a8 3f 12 fb 96 6e 1c 5c 84 c4 c0 7f f5   .D@.?...n.\.....
0120  14 b8 9c 1f 45 3e ed c5 25 5a 62 4f c2 9d e6 a0   ....E>..%ZbO....
0130  07 02 a4 c5 a2 c5 ed a4 49 58 79 29 a0 7f c9 c5   ........IXy)....
0140  17 eb 9a 64 47 e9 6e f7 bd 0f d6 d6 43 7f 9f b0   ...dG.n.....C...
0150  93 e4 cb 4e 74 3e f3 39 56 71 24 e6 41 55 e8 fb   ...Nt>.9Vq$.AU..
0160  51 2b 22 f7 50 e0 e5 e5 b4 44                     Q+".P....D

Frame 9 (106 bytes on wire, 106 bytes captured)
    Arrival Time: Feb 19, 2004 14:58:53.867076000
    Time delta from previous packet: 0.017593000 seconds
    Time since reference or first frame: 5.583766000 seconds
    Frame Number: 9
    Packet Length: 106 bytes
    Capture Length: 106 bytes
Ethernet II, Src: 00:0c:29:b1:20:22, Dst: 00:10:db:16:db:f6
    Destination: 00:10:db:16:db:f6 (00:10:db:16:db:f6)
    Source: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22)
    Type: IP (0x0800)
    Frame check sequence: 0xeb5eabfa (correct)
Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.117 (165.227.249.117)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 88
    Identification: 0x0263 (611)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0xf981 (correct)
    Source: 165.227.249.115 (165.227.249.115)
    Destination: 165.227.249.117 (165.227.249.117)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 68
    Checksum: 0xb431 (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0xF9C074408328C2CA
    Responder cookie: 0x5640DBB6684B55E1
    Next payload: Hash (8)
    Version: 1.0
    Exchange type: Quick Mode (32)
    Flags
        .... ...1 = Encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0xFDF19BCF
    Length: 60
    Encrypted payload (32 bytes)

0000  00 10 db 16 db f6 00 0c 29 b1 20 22 08 00 45 00   ........). "..E.
0010  00 58 02 63 00 00 80 11 f9 81 a5 e3 f9 73 a5 e3   .X.c.........s..
0020  f9 75 01 f4 01 f4 00 44 b4 31 f9 c0 74 40 83 28   .u.....D.1..t@.(
0030  c2 ca 56 40 db b6 68 4b 55 e1 08 10 20 01 fd f1   ..V@..hKU... ...
0040  9b cf 00 00 00 3c 61 d7 7d e4 0f 93 e3 a6 76 7a   .....<a.}.....vz
0050  e0 84 9c f3 98 2c 39 b0 98 29 39 83 6f 41 63 11   .....,9..)9.oAc.
0060  1a 3d 01 f6 49 7c eb 5e ab fa                     .=..I|.^..

Frame 10 (122 bytes on wire, 122 bytes captured)
    Arrival Time: Feb 19, 2004 14:58:53.994643000
    Time delta from previous packet: 0.127567000 seconds
    Time since reference or first frame: 5.711333000 seconds
    Frame Number: 10
    Packet Length: 122 bytes
    Capture Length: 122 bytes
Ethernet II, Src: 00:10:db:16:db:f6, Dst: 00:0c:29:b1:20:22
    Destination: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22)
    Source: 00:10:db:16:db:f6 (00:10:db:16:db:f6)
    Type: IP (0x0800)
    Frame check sequence: 0x235bcf68 (correct)
Internet Protocol, Src Addr: 165.227.249.117 (165.227.249.117), Dst Addr: 165.227.249.115 (165.227.249.115)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 104
    Identification: 0x05f8 (1528)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: ESP (0x32)
    Header checksum: 0x35bc (correct)
    Source: 165.227.249.117 (165.227.249.117)
    Destination: 165.227.249.115 (165.227.249.115)
Encapsulating Security Payload
    SPI: 0xe5bff777
    Sequence: 1
    Data (76 bytes)

0000  00 0c 29 b1 20 22 00 10 db 16 db f6 08 00 45 00   ..). "........E.
0010  00 68 05 f8 00 00 40 32 35 bc a5 e3 f9 75 a5 e3   .h....@25....u..
0020  f9 73 e5 bf f7 77 00 00 00 01 b0 87 94 47 6f 4f   .s...w.......GoO
0030  b0 e4 2b a0 ab 22 46 09 89 a4 ad 25 85 ed 98 03   ..+.."F....%....
0040  b9 29 5a e0 10 c9 fe 2d 40 5d 15 4b a8 5d 53 40   .)Z....-@].K.]S@
0050  c8 52 57 09 61 44 b3 e9 99 48 08 d1 72 d2 9d 42   .RW.aD...H..r..B
0060  98 ec 70 48 89 94 2c 24 ef de 5f b5 e8 cc 47 bc   ..pH..,$.._...G.
0070  4c c7 8c 69 3f cf 23 5b cf 68                     L..i?.#[.h

Frame 11 (122 bytes on wire, 122 bytes captured)
    Arrival Time: Feb 19, 2004 14:58:54.991830000
    Time delta from previous packet: 0.997187000 seconds
    Time since reference or first frame: 6.708520000 seconds
    Frame Number: 11
    Packet Length: 122 bytes
    Capture Length: 122 bytes
Ethernet II, Src: 00:10:db:16:db:f6, Dst: 00:0c:29:b1:20:22
    Destination: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22)
    Source: 00:10:db:16:db:f6 (00:10:db:16:db:f6)
    Type: IP (0x0800)
    Frame check sequence: 0xb8f9ac7c (correct)
Internet Protocol, Src Addr: 165.227.249.117 (165.227.249.117), Dst Addr: 165.227.249.115 (165.227.249.115)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 104
    Identification: 0x05fa (1530)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: ESP (0x32)
    Header checksum: 0x35ba (correct)
    Source: 165.227.249.117 (165.227.249.117)
    Destination: 165.227.249.115 (165.227.249.115)
Encapsulating Security Payload
    SPI: 0xe5bff777
    Sequence: 2
    Data (76 bytes)

0000  00 0c 29 b1 20 22 00 10 db 16 db f6 08 00 45 00   ..). "........E.
0010  00 68 05 fa 00 00 40 32 35 ba a5 e3 f9 75 a5 e3   .h....@25....u..
0020  f9 73 e5 bf f7 77 00 00 00 02 15 4b a8 5d 53 40   .s...w.....K.]S@
0030  c8 52 57 09 61 44 b3 e9 99 48 54 06 88 66 04 73   .RW.aD...HT..f.s
0040  e2 4a 44 f3 dc ec b5 b4 3d 62 e1 4e 4d 46 6a c5   .JD.....=b.NMFj.
0050  56 02 ba 5d 6d 5d f2 da 37 27 35 29 60 ed 7b 7b   V..]m]..7'5)`.{{
0060  ad 36 9c 5c 91 df 6d 54 ca 0a a7 45 7f 84 37 6c   .6.\..mT...E..7l
0070  94 d0 93 a9 7a 48 b8 f9 ac 7c                     ....zH...|

Frame 12 (138 bytes on wire, 138 bytes captured)
    Arrival Time: Feb 19, 2004 14:58:59.024790000
    Time delta from previous packet: 4.032960000 seconds
    Time since reference or first frame: 10.741480000 seconds
    Frame Number: 12
    Packet Length: 138 bytes
    Capture Length: 138 bytes
Ethernet II, Src: 00:0c:29:b1:20:22, Dst: 00:10:db:16:db:f6
    Destination: 00:10:db:16:db:f6 (00:10:db:16:db:f6)
    Source: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22)
    Type: IP (0x0800)
    Frame check sequence: 0x3c9205ae (correct)
Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.117 (165.227.249.117)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 120
    Identification: 0x0001 (1)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 128
    Protocol: ESP (0x32)
    Header checksum: 0xfba2 (correct)
    Source: 165.227.249.115 (165.227.249.115)
    Destination: 165.227.249.117 (165.227.249.117)
Encapsulating Security Payload
    SPI: 0x4b69b6f2
    Sequence: 1
    Data (92 bytes)

0000  00 10 db 16 db f6 00 0c 29 b1 20 22 08 00 45 00   ........). "..E.
0010  00 78 00 01 00 00 80 32 fb a2 a5 e3 f9 73 a5 e3   .x.....2.....s..
0020  f9 75 4b 69 b6 f2 00 00 00 01 2d 6c c8 35 89 89   .uKi......-l.5..
0030  93 a0 e6 9b ff db 64 86 1a 3d 8a ef 08 1e f2 ae   ......d..=......
0040  e0 32 e0 01 85 8d 8c c0 bf 68 27 53 0d 83 8c 2e   .2.......h'S....
0050  59 2f 68 de 99 20 d2 ae 29 72 cc ed e2 c1 ea a6   Y/h.. ..)r......
0060  4b ca 91 f7 cc 0b d5 21 bc 0c bb 72 63 d8 6b cd   K......!...rc.k.
0070  f0 ee 69 1a 34 a1 02 94 8b 7e 3f 73 1b 25 c6 5d   ..i.4....~?s.%.]
0080  59 30 b5 9f 22 5c 3c 92 05 ae                     Y0.."\<...

Frame 13 (138 bytes on wire, 138 bytes captured)
    Arrival Time: Feb 19, 2004 14:58:59.026130000
    Time delta from previous packet: 0.001340000 seconds
    Time since reference or first frame: 10.742820000 seconds
    Frame Number: 13
    Packet Length: 138 bytes
    Capture Length: 138 bytes
Ethernet II, Src: 00:10:db:16:db:f6, Dst: 00:0c:29:b1:20:22
    Destination: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22)
    Source: 00:10:db:16:db:f6 (00:10:db:16:db:f6)
    Type: IP (0x0800)
    Frame check sequence: 0x5bf2026e (correct)
Internet Protocol, Src Addr: 165.227.249.117 (165.227.249.117), Dst Addr: 165.227.249.115 (165.227.249.115)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 120
    Identification: 0x05fb (1531)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: ESP (0x32)
    Header checksum: 0x35a9 (correct)
    Source: 165.227.249.117 (165.227.249.117)
    Destination: 165.227.249.115 (165.227.249.115)
Encapsulating Security Payload
    SPI: 0xe5bff777
    Sequence: 3
    Data (92 bytes)

0000  00 0c 29 b1 20 22 00 10 db 16 db f6 08 00 45 00   ..). "........E.
0010  00 78 05 fb 00 00 40 32 35 a9 a5 e3 f9 75 a5 e3   .x....@25....u..
0020  f9 73 e5 bf f7 77 00 00 00 03 e1 4e 4d 46 6a c5   .s...w.....NMFj.
0030  56 02 ba 5d 6d 5d f2 da 37 27 dd bb c2 60 54 cb   V..]m]..7'...`T.
0040  64 f6 5c fa e1 15 03 82 cf b8 41 bb bf 75 21 db   d.\.......A..u!.
0050  42 fb 90 90 e9 81 f3 1e 71 e6 b4 6d 42 d9 f6 04   B.......q..mB...
0060  c5 71 05 23 11 07 d7 d5 06 9b 17 62 ca 89 ea 72   .q.#.......b...r
0070  a5 fa 72 0e 07 06 ab 18 90 07 b2 39 ef be 6a 1a   ..r........9..j.
0080  30 dc 8f bc 06 e1 5b f2 02 6e                     0.....[..n

Frame 14 (138 bytes on wire, 138 bytes captured)
    Arrival Time: Feb 19, 2004 14:59:00.028363000
    Time delta from previous packet: 1.002233000 seconds
    Time since reference or first frame: 11.745053000 seconds
    Frame Number: 14
    Packet Length: 138 bytes
    Capture Length: 138 bytes
Ethernet II, Src: 00:0c:29:b1:20:22, Dst: 00:10:db:16:db:f6
    Destination: 00:10:db:16:db:f6 (00:10:db:16:db:f6)
    Source: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22)
    Type: IP (0x0800)
    Frame check sequence: 0xba2d2339 (correct)
Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.117 (165.227.249.117)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 120
    Identification: 0x0002 (2)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 128
    Protocol: ESP (0x32)
    Header checksum: 0xfba1 (correct)
    Source: 165.227.249.115 (165.227.249.115)
    Destination: 165.227.249.117 (165.227.249.117)
Encapsulating Security Payload
    SPI: 0x4b69b6f2
    Sequence: 2
    Data (92 bytes)

0000  00 10 db 16 db f6 00 0c 29 b1 20 22 08 00 45 00   ........). "..E.
0010  00 78 00 02 00 00 80 32 fb a1 a5 e3 f9 73 a5 e3   .x.....2.....s..
0020  f9 75 4b 69 b6 f2 00 00 00 02 bb 72 63 d8 6b cd   .uKi.......rc.k.
0030  f0 ee 69 1a 34 a1 02 94 8b 7e 1e 39 89 7e 22 67   ..i.4....~.9.~"g
0040  39 61 b6 b3 95 ee d1 c4 ee 6a a9 3b dd 59 a2 a1   9a.......j.;.Y..
0050  23 1f 04 5a 30 1e 54 59 da 88 77 74 74 e0 6b b8   #..Z0.TY..wtt.k.
0060  4b 24 d8 a6 4e b0 82 3f 5e f9 4b bc dd 96 31 44   K$..N..?^.K...1D
0070  12 0f a1 98 61 30 1a 11 ed 0e 1c dc cd 90 89 03   ....a0..........
0080  84 f9 f8 24 52 f6 ba 2d 23 39                     ...$R..-#9

Frame 15 (138 bytes on wire, 138 bytes captured)
    Arrival Time: Feb 19, 2004 14:59:00.028968000
    Time delta from previous packet: 0.000605000 seconds
    Time since reference or first frame: 11.745658000 seconds
    Frame Number: 15
    Packet Length: 138 bytes
    Capture Length: 138 bytes
Ethernet II, Src: 00:10:db:16:db:f6, Dst: 00:0c:29:b1:20:22
    Destination: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22)
    Source: 00:10:db:16:db:f6 (00:10:db:16:db:f6)
    Type: IP (0x0800)
    Frame check sequence: 0x2e6a3c98 (correct)
Internet Protocol, Src Addr: 165.227.249.117 (165.227.249.117), Dst Addr: 165.227.249.115 (165.227.249.115)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 120
    Identification: 0x05fc (1532)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: ESP (0x32)
    Header checksum: 0x35a8 (correct)
    Source: 165.227.249.117 (165.227.249.117)
    Destination: 165.227.249.115 (165.227.249.115)
Encapsulating Security Payload
    SPI: 0xe5bff777
    Sequence: 4
    Data (92 bytes)

0000  00 0c 29 b1 20 22 00 10 db 16 db f6 08 00 45 00   ..). "........E.
0010  00 78 05 fc 00 00 40 32 35 a8 a5 e3 f9 75 a5 e3   .x....@25....u..
0020  f9 73 e5 bf f7 77 00 00 00 04 17 62 ca 89 ea 72   .s...w.....b...r
0030  a5 fa 72 0e 07 06 ab 18 90 07 a3 a3 44 2a f1 cf   ..r.........D*..
0040  e9 76 65 5b 17 4c 95 ef af f7 af a5 19 d5 33 ed   .ve[.L........3.
0050  f3 75 4b 56 c9 c4 48 e4 09 05 0f 65 6c ff c1 1f   .uKV..H....el...
0060  e5 29 8d a4 2f 9f 42 3f 17 28 2a bf f7 bc 3b 17   .)../.B?.(*...;.
0070  b5 c7 9e d4 4a c1 c2 3a 76 18 ec 80 77 5b 90 61   ....J..:v...w[.a
0080  7d 90 80 5f 80 3c 2e 6a 3c 98                     }.._.<.j<.