Frame 1 (166 bytes on wire, 166 bytes captured) Arrival Time: Oct 1, 2003 18:19:21.286786000 Time delta from previous packet: 0.000000000 seconds Time relative to first packet: 0.000000000 seconds Frame Number: 1 Packet Length: 166 bytes Capture Length: 166 bytes Ethernet II, Src: 00:0c:29:b1:20:22, Dst: 00:50:73:60:0d:41 Destination: 00:50:73:60:0d:41 (00:50:73:60:0d:41) Source: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22) Type: IP (0x0800) Trailer: 4337AE06 Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.118 (165.227.249.118) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 148 Identification: 0x00db (219) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xfacc (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.118 (165.227.249.118) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 128 Checksum: 0x7b66 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x1E0BEE5E72CB302B Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 120 Security Association payload Next payload: Vendor ID (13) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 40 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 32 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: unknown vendor ID: 0x4485152D18B6BBCD0BE8A8469579DDCC Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: unknown vendor ID: 0x90CB80913EBB696E086381B5EC427B1F 0000 00 50 73 60 0d 41 00 0c 29 b1 20 22 08 00 45 00 .Ps`.A..). "..E. 0010 00 94 00 db 00 00 80 11 fa cc a5 e3 f9 73 a5 e3 .............s.. 0020 f9 76 01 f4 01 f4 00 80 7b 66 1e 0b ee 5e 72 cb .v......{f...^r. 0030 30 2b 00 00 00 00 00 00 00 00 01 10 02 00 00 00 0+.............. 0040 00 00 00 00 00 78 0d 00 00 34 00 00 00 01 00 00 .....x...4...... 0050 00 01 00 00 00 28 01 01 00 01 00 00 00 20 01 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 04 00 02 80 03 ................ 0070 00 01 80 0b 00 01 80 0c 70 80 0d 00 00 14 44 85 ........p.....D. 0080 15 2d 18 b6 bb cd 0b e8 a8 46 95 79 dd cc 00 00 .-.......F.y.... 0090 00 14 90 cb 80 91 3e bb 69 6e 08 63 81 b5 ec 42 ......>.in.c...B 00a0 7b 1f 43 37 ae 06 {.C7.. Frame 2 (146 bytes on wire, 146 bytes captured) Arrival Time: Oct 1, 2003 18:19:21.427938000 Time delta from previous packet: 0.141152000 seconds Time relative to first packet: 0.141152000 seconds Frame Number: 2 Packet Length: 146 bytes Capture Length: 146 bytes Ethernet II, Src: 00:50:73:60:0d:41, Dst: 00:0c:29:b1:20:22 Destination: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22) Source: 00:50:73:60:0d:41 (00:50:73:60:0d:41) Type: IP (0x0800) Trailer: A8972A8A Internet Protocol, Src Addr: 165.227.249.118 (165.227.249.118), Dst Addr: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 128 Identification: 0x0090 (144) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: UDP (0x11) Header checksum: 0x7c2b (correct) Source: 165.227.249.118 (165.227.249.118) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 108 Checksum: 0xecfb (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x1E0BEE5E72CB302B Responder cookie: 0x6BD760B04AABDA32 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 100 Security Association payload Next payload: Vendor ID (13) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 40 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 32 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: unknown vendor ID: 0x90CB80913EBB696E086381B5EC427B1F 0000 00 0c 29 b1 20 22 00 50 73 60 0d 41 08 00 45 00 ..). ".Ps`.A..E. 0010 00 80 00 90 00 00 ff 11 7c 2b a5 e3 f9 76 a5 e3 ........|+...v.. 0020 f9 73 01 f4 01 f4 00 6c ec fb 1e 0b ee 5e 72 cb .s.....l.....^r. 0030 30 2b 6b d7 60 b0 4a ab da 32 01 10 02 00 00 00 0+k.`.J..2...... 0040 00 00 00 00 00 64 0d 00 00 34 00 00 00 01 00 00 .....d...4...... 0050 00 01 00 00 00 28 01 01 00 01 00 00 00 20 01 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 04 00 02 80 03 ................ 0070 00 01 80 0b 00 01 80 0c 70 80 00 00 00 14 90 cb ........p....... 0080 80 91 3e bb 69 6e 08 63 81 b5 ec 42 7b 1f a8 97 ..>.in.c...B{... 0090 2a 8a *. Frame 3 (350 bytes on wire, 350 bytes captured) Arrival Time: Oct 1, 2003 18:19:23.607150000 Time delta from previous packet: 2.179212000 seconds Time relative to first packet: 2.320364000 seconds Frame Number: 3 Packet Length: 350 bytes Capture Length: 350 bytes Ethernet II, Src: 00:0c:29:b1:20:22, Dst: 00:50:73:60:0d:41 Destination: 00:50:73:60:0d:41 (00:50:73:60:0d:41) Source: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22) Type: IP (0x0800) Trailer: 5D22E65B Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.118 (165.227.249.118) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 332 Identification: 0x00dc (220) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xfa13 (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.118 (165.227.249.118) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 312 Checksum: 0xa593 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x1E0BEE5E72CB302B Responder cookie: 0x6BD760B04AABDA32 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 304 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: Private USE (130) Length: 24 Nonce Data Unknown payload type payload Next payload: Private USE (130) Length: 24 Payload Unknown payload type payload Next payload: Vendor ID (13) Length: 24 Payload Vendor ID payload Next payload: Vendor ID (13) Length: 48 Vendor ID: unknown vendor ID: 0x47BBE7C993F1FC13B4E6D0DB565C68E5... Vendor ID payload Next payload: Vendor ID (13) Length: 12 Vendor ID: unknown vendor ID: 0xDA8E937880010000 Vendor ID payload Next payload: NONE (0) Length: 12 Vendor ID: unknown vendor ID: 0x09002689DFD6B712 0000 00 50 73 60 0d 41 00 0c 29 b1 20 22 08 00 45 00 .Ps`.A..). "..E. 0010 01 4c 00 dc 00 00 80 11 fa 13 a5 e3 f9 73 a5 e3 .L...........s.. 0020 f9 76 01 f4 01 f4 01 38 a5 93 1e 0b ee 5e 72 cb .v.....8.....^r. 0030 30 2b 6b d7 60 b0 4a ab da 32 04 10 02 00 00 00 0+k.`.J..2...... 0040 00 00 00 00 01 30 0a 00 00 84 80 af d5 84 fe c6 .....0.......... 0050 f0 b6 04 d6 00 76 7a 88 74 d9 cc a5 19 1d d8 65 .....vz.t......e 0060 c8 ed 95 00 17 eb 95 99 c5 26 bf bc 71 1f 59 0b .........&..q.Y. 0070 fb a1 06 f2 0f 13 75 4f 09 ec 0a 1b 75 e4 59 bd ......uO....u.Y. 0080 bb a0 9a e4 2f 9b f3 cd 60 f2 fa c9 4c f8 e9 be ..../...`...L... 0090 a3 a6 ca 62 4a 19 59 de 0b 0d e2 41 42 99 3b fc ...bJ.Y....AB.;. 00a0 24 34 a6 83 66 ec 21 39 3a 03 28 fe 3a cd 55 a3 $4..f.!9:.(.:.U. 00b0 b0 fe 86 65 4b 96 82 72 b1 80 fa 59 1c 28 65 ce ...eK..r...Y.(e. 00c0 d0 4e cd b8 7f a2 e3 01 ee 83 82 00 00 18 48 66 .N............Hf 00d0 28 6b a2 3e 88 24 b5 cd 6b b9 37 b8 57 4b c0 41 (k.>.$..k.7.WK.A 00e0 a2 e2 82 00 00 18 e9 83 cc ea d9 88 fd ba 07 4f ...............O 00f0 b5 6b 3f bb b9 5d b2 85 4f aa 0d 00 00 18 0e 6b .k?..]..O......k 0100 cc 75 74 47 3c 5c cd ce 96 8a 6c 80 2e 23 b4 52 .utG<\....l..#.R 0110 96 ee 0d 00 00 30 47 bb e7 c9 93 f1 fc 13 b4 e6 .....0G......... 0120 d0 db 56 5c 68 e5 01 02 01 01 02 01 01 03 11 31 ..V\h..........1 0130 30 2e 31 2e 31 20 28 42 75 69 6c 64 20 31 30 29 0.1.1 (Build 10) 0140 00 00 0d 00 00 0c da 8e 93 78 80 01 00 00 00 00 .........x...... 0150 00 0c 09 00 26 89 df d6 b7 12 5d 22 e6 5b ....&.....]".[ Frame 4 (350 bytes on wire, 350 bytes captured) Arrival Time: Oct 1, 2003 18:19:23.754347000 Time delta from previous packet: 0.147197000 seconds Time relative to first packet: 2.467561000 seconds Frame Number: 4 Packet Length: 350 bytes Capture Length: 350 bytes Ethernet II, Src: 00:50:73:60:0d:41, Dst: 00:0c:29:b1:20:22 Destination: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22) Source: 00:50:73:60:0d:41 (00:50:73:60:0d:41) Type: IP (0x0800) Trailer: 3C50501A Internet Protocol, Src Addr: 165.227.249.118 (165.227.249.118), Dst Addr: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 332 Identification: 0x0091 (145) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: UDP (0x11) Header checksum: 0x7b5e (correct) Source: 165.227.249.118 (165.227.249.118) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 312 Checksum: 0x9758 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x1E0BEE5E72CB302B Responder cookie: 0x6BD760B04AABDA32 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 304 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: Vendor ID (13) Length: 24 Nonce Data Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: unknown vendor ID: 0x12F5F28C457168A9702D9FE274CC0100 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: unknown vendor ID: 0xAFCAD71368A1F1C96B8696FC77570100 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: unknown vendor ID: 0x9E10C7AD4AAADA321850797AB6A183C4 Vendor ID payload Next payload: Private USE (130) Length: 12 Vendor ID: unknown vendor ID: 0x09002689DFD6B712 Unknown payload type payload Next payload: Private USE (130) Length: 24 Payload Unknown payload type payload Next payload: NONE (0) Length: 24 Payload 0000 00 0c 29 b1 20 22 00 50 73 60 0d 41 08 00 45 00 ..). ".Ps`.A..E. 0010 01 4c 00 91 00 00 ff 11 7b 5e a5 e3 f9 76 a5 e3 .L......{^...v.. 0020 f9 73 01 f4 01 f4 01 38 97 58 1e 0b ee 5e 72 cb .s.....8.X...^r. 0030 30 2b 6b d7 60 b0 4a ab da 32 04 10 02 00 00 00 0+k.`.J..2...... 0040 00 00 00 00 01 30 0a 00 00 84 75 c8 62 3e 66 88 .....0....u.b>f. 0050 16 f9 39 f9 80 f0 af 09 05 64 9d 0e f3 b4 bc 49 ..9......d.....I 0060 c3 7d ba 10 1b 1a 5d 2a 75 24 a7 7c 95 4d 09 04 .}....]*u$.|.M.. 0070 8c 5a 5e 82 76 6d fb 44 07 4d 1b 8e d2 51 fa 36 .Z^.vm.D.M...Q.6 0080 99 99 c1 6c 94 26 2a 6e 46 37 0d 3c ce 1c 49 ef ...l.&*nF7.<..I. 0090 11 9c 2e 42 5e ec a7 57 72 c6 a5 c1 21 e5 f6 21 ...B^..Wr...!..! 00a0 07 27 f6 5e 86 0a 99 aa d2 fe 05 9d 75 97 76 e9 .'.^........u.v. 00b0 99 94 69 23 62 d8 b2 75 e2 39 59 44 bc db db e1 ..i#b..u.9YD.... 00c0 77 04 d3 48 7b d7 70 0d 5b e9 0d 00 00 18 8a 85 w..H{.p.[....... 00d0 f0 dc df 2e 90 b1 ef 1d 62 05 01 9f 67 0e 05 ec ........b...g... 00e0 53 f3 0d 00 00 14 12 f5 f2 8c 45 71 68 a9 70 2d S.........Eqh.p- 00f0 9f e2 74 cc 01 00 0d 00 00 14 af ca d7 13 68 a1 ..t...........h. 0100 f1 c9 6b 86 96 fc 77 57 01 00 0d 00 00 14 9e 10 ..k...wW........ 0110 c7 ad 4a aa da 32 18 50 79 7a b6 a1 83 c4 82 00 ..J..2.Pyz...... 0120 00 0c 09 00 26 89 df d6 b7 12 82 00 00 18 0e 6b ....&..........k 0130 cc 75 74 47 3c 5c cd ce 96 8a 6c 80 2e 23 b4 52 .utG<\....l..#.R 0140 96 ee 00 00 00 18 e9 83 cc ea d9 88 fd ba 07 4f ...............O 0150 b5 6b 3f bb b9 5d b2 85 4f aa 3c 50 50 1a .k?..]..O... 00e0 8e 39 3b ab b6 a7 ae 0d 10 a1 50 47 2a 5a 72 47 .9;.......PG*ZrG 00f0 3f 6d 21 dd df 6f 3c 90 5f 46 8f 00 9c f1 e8 60 ?m!..o<._F.....` 0100 bf 64 22 9b 98 7e 1f 68 d3 38 8f 99 c5 2a 9d b9 .d"..~.h.8...*.. 0110 9b 25 e5 1e b4 43 7b e2 d9 1f 4b 24 93 48 a1 04 .%...C{...K$.H.. 0120 38 59 c8 ad cd 87 52 61 0a 42 e7 d0 64 87 61 85 8Y....Ra.B..d.a. 0130 15 bf 82 22 87 29 0f f6 75 e3 8f e4 05 e6 0a 3c ...".)..u......< 0140 8b 54 78 af 74 e1 b9 ef b3 2b .Tx.t....+ Frame 8 (370 bytes on wire, 370 bytes captured) Arrival Time: Oct 1, 2003 18:19:27.759020000 Time delta from previous packet: 0.530087000 seconds Time relative to first packet: 6.472234000 seconds Frame Number: 8 Packet Length: 370 bytes Capture Length: 370 bytes Ethernet II, Src: 00:50:73:60:0d:41, Dst: 00:0c:29:b1:20:22 Destination: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22) Source: 00:50:73:60:0d:41 (00:50:73:60:0d:41) Type: IP (0x0800) Trailer: 1F3B2A27 Internet Protocol, Src Addr: 165.227.249.118 (165.227.249.118), Dst Addr: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 352 Identification: 0x0093 (147) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: UDP (0x11) Header checksum: 0x7b48 (correct) Source: 165.227.249.118 (165.227.249.118) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 332 Checksum: 0x5e05 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x1E0BEE5E72CB302B Responder cookie: 0x6BD760B04AABDA32 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xA1D81848 Length: 324 Encrypted payload (296 bytes) 0000 00 0c 29 b1 20 22 00 50 73 60 0d 41 08 00 45 00 ..). ".Ps`.A..E. 0010 01 60 00 93 00 00 ff 11 7b 48 a5 e3 f9 76 a5 e3 .`......{H...v.. 0020 f9 73 01 f4 01 f4 01 4c 5e 05 1e 0b ee 5e 72 cb .s.....L^....^r. 0030 30 2b 6b d7 60 b0 4a ab da 32 08 10 20 01 a1 d8 0+k.`.J..2.. ... 0040 18 48 00 00 01 44 bc 1d fa c1 66 b4 d2 01 46 cf .H...D....f...F. 0050 52 04 d7 b1 1a bc c0 2e 6f c5 73 2c 8a 8f 08 a1 R.......o.s,.... 0060 12 b8 99 75 be 38 25 10 7f f1 c2 f4 08 2e 50 e2 ...u.8%.......P. 0070 a8 7a 81 e6 5a 76 80 b0 87 09 8d c3 c4 34 c1 e6 .z..Zv.......4.. 0080 88 50 dd af 13 4b d7 1b 86 4a 20 54 ed e0 d5 a5 .P...K...J T.... 0090 92 02 05 fd 8e f8 ea 7a 2d 3e 17 11 9d d7 2c 1f .......z->....,. 00a0 35 c9 2d 6d 94 85 48 9b 94 b1 c7 0e ec 11 11 fa 5.-m..H......... 00b0 23 60 be 97 5f 38 01 72 18 e5 92 df 9a f3 e3 b7 #`.._8.r........ 00c0 4a 86 5e e1 cb 18 b8 82 d7 8f 19 97 26 6e 9a e2 J.^.........&n.. 00d0 ff 98 e6 15 ed cd 9d 2b 96 62 7d 0a 00 4a f8 c5 .......+.b}..J.. 00e0 a5 b1 20 41 7d 41 11 32 74 cd ff 89 2d dd 7b ec .. A}A.2t...-.{. 00f0 4e 94 a3 5f 8a c8 a2 cb 04 58 1f ba 0e 36 27 76 N.._.....X...6'v 0100 c9 55 40 67 4d 64 6c 96 41 3d 6c a2 f8 4e 0e 83 .U@gMdl.A=l..N.. 0110 e8 70 a6 db 54 1e 78 74 78 f8 a8 18 cf 59 af 48 .p..T.xtx....Y.H 0120 f1 6d 7a 6d 74 cd 30 3e 76 42 16 15 af 66 89 d3 .mzmt.0>vB...f.. 0130 91 cf f8 15 86 46 92 8f 22 ba e1 a9 74 8f 49 97 .....F.."...t.I. 0140 17 5c 3d b9 89 c7 2f 3d 23 61 d0 66 40 e2 2d 3b .\=.../=#a.f@.-; 0150 25 c0 d3 6e 1c 59 35 bb ec a4 f1 9f 25 df 8b b2 %..n.Y5.....%... 0160 e9 67 74 9e 76 c9 74 e7 cc a4 71 a9 ae af 1f 3b .gt.v.t...q....; 0170 2a 27 *' Frame 9 (98 bytes on wire, 98 bytes captured) Arrival Time: Oct 1, 2003 18:19:27.763985000 Time delta from previous packet: 0.004965000 seconds Time relative to first packet: 6.477199000 seconds Frame Number: 9 Packet Length: 98 bytes Capture Length: 98 bytes Ethernet II, Src: 00:0c:29:b1:20:22, Dst: 00:50:73:60:0d:41 Destination: 00:50:73:60:0d:41 (00:50:73:60:0d:41) Source: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22) Type: IP (0x0800) Trailer: 26EDFF7E Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.118 (165.227.249.118) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 80 Identification: 0x00e1 (225) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xfb0a (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.118 (165.227.249.118) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 60 Checksum: 0x7447 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x1E0BEE5E72CB302B Responder cookie: 0x6BD760B04AABDA32 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xA1D81848 Length: 52 Encrypted payload (24 bytes) 0000 00 50 73 60 0d 41 00 0c 29 b1 20 22 08 00 45 00 .Ps`.A..). "..E. 0010 00 50 00 e1 00 00 80 11 fb 0a a5 e3 f9 73 a5 e3 .P...........s.. 0020 f9 76 01 f4 01 f4 00 3c 74 47 1e 0b ee 5e 72 cb .v.....e.. 0040 75 5b 0f f3 bb f0 51 28 5a 05 f4 e7 63 c3 da 76 u[....Q(Z...c..v 0050 30 ea 10 50 36 65 c9 8e c9 34 dd 20 59 90 34 2e 0..P6e...4. Y.4. 0060 99 63 39 64 6b a0 f5 70 89 9f e9 39 5b 60 63 78 .c9dk..p...9[`cx 0070 6e 5b fd 49 30 b6 d6 59 2a 98 ac 6f 65 7b 15 f6 n[.I0..Y*..oe{.. 0080 43 46 CF Frame 11 (130 bytes on wire, 130 bytes captured) Arrival Time: Oct 1, 2003 18:19:31.494754000 Time delta from previous packet: 0.004680000 seconds Time relative to first packet: 10.207968000 seconds Frame Number: 11 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:50:73:60:0d:41, Dst: 00:0c:29:b1:20:22 Destination: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22) Source: 00:50:73:60:0d:41 (00:50:73:60:0d:41) Type: IP (0x0800) Trailer: AE006A05 Internet Protocol, Src Addr: 165.227.249.118 (165.227.249.118), Dst Addr: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0095 (149) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x7c15 (correct) Source: 165.227.249.118 (165.227.249.118) Destination: 165.227.249.115 (165.227.249.115) Encapsulating Security Payload SPI: 0x0a68bd2d Sequence: 0x00000001 Data (84 bytes) 0000 00 0c 29 b1 20 22 00 50 73 60 0d 41 08 00 45 00 ..). ".Ps`.A..E. 0010 00 70 00 95 00 00 ff 32 7c 15 a5 e3 f9 76 a5 e3 .p.....2|....v.. 0020 f9 73 0a 68 bd 2d 00 00 00 01 67 ab 87 1f f6 e6 .s.h.-....g..... 0030 4a e0 2c 08 2d d9 1e 66 31 fa d4 d8 96 7e ec 82 J.,.-..f1....~.. 0040 7a fd bf 7a b9 1d 0e 91 69 32 20 04 23 f6 e0 87 z..z....i2 .#... 0050 81 5b a9 cb 9b 19 05 d3 ae 1e 51 06 e0 04 f7 89 .[........Q..... 0060 d4 2d 0f a9 c8 0c 6e 8e c0 3a ff 29 5b 70 c7 db .-....n..:.)[p.. 0070 85 9b a9 2d 75 90 7b 2a 51 41 5f 73 37 70 ae 00 ...-u.{*QA_s7p.. 0080 6a 05 j. Frame 12 (130 bytes on wire, 130 bytes captured) Arrival Time: Oct 1, 2003 18:19:32.501553000 Time delta from previous packet: 1.006799000 seconds Time relative to first packet: 11.214767000 seconds Frame Number: 12 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:0c:29:b1:20:22, Dst: 00:50:73:60:0d:41 Destination: 00:50:73:60:0d:41 (00:50:73:60:0d:41) Source: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22) Type: IP (0x0800) Trailer: BB48BDEF Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.118 (165.227.249.118) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0002 (2) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: ESP (0x32) Header checksum: 0xfba8 (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.118 (165.227.249.118) Encapsulating Security Payload SPI: 0x49ed2886 Sequence: 0x00000002 Data (84 bytes) 0000 00 50 73 60 0d 41 00 0c 29 b1 20 22 08 00 45 00 .Ps`.A..). "..E. 0010 00 70 00 02 00 00 80 32 fb a8 a5 e3 f9 73 a5 e3 .p.....2.....s.. 0020 f9 76 49 ed 28 86 00 00 00 02 e9 39 5b 60 63 78 .vI.(......9[`cx 0030 6e 5b 08 f0 57 61 3e 1d 98 47 bf 4f f2 0e d4 15 n[..Wa>..G.O.... 0040 0f 87 e4 ef 24 9a 5b 98 a9 e9 18 83 83 98 8c 20 ....$.[........ 0050 0e ff 5d 0c 4c 1b fc 22 f4 eb 11 9a c6 50 c0 ef ..].L..".....P.. 0060 bf d7 a2 af 5d 6c 65 f8 a1 57 57 ae 0f 9a eb d6 ....]le..WW..... 0070 0b f6 ca ec cd da 18 42 f9 5e 60 c4 05 51 bb 48 .......B.^`..Q.H 0080 bd ef .. Frame 13 (130 bytes on wire, 130 bytes captured) Arrival Time: Oct 1, 2003 18:19:32.504482000 Time delta from previous packet: 0.002929000 seconds Time relative to first packet: 11.217696000 seconds Frame Number: 13 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:50:73:60:0d:41, Dst: 00:0c:29:b1:20:22 Destination: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22) Source: 00:50:73:60:0d:41 (00:50:73:60:0d:41) Type: IP (0x0800) Trailer: 1EEB6D95 Internet Protocol, Src Addr: 165.227.249.118 (165.227.249.118), Dst Addr: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0096 (150) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x7c14 (correct) Source: 165.227.249.118 (165.227.249.118) Destination: 165.227.249.115 (165.227.249.115) Encapsulating Security Payload SPI: 0x0a68bd2d Sequence: 0x00000002 Data (84 bytes) 0000 00 0c 29 b1 20 22 00 50 73 60 0d 41 08 00 45 00 ..). ".Ps`.A..E. 0010 00 70 00 96 00 00 ff 32 7c 14 a5 e3 f9 76 a5 e3 .p.....2|....v.. 0020 f9 73 0a 68 bd 2d 00 00 00 02 be 95 a9 e7 d5 f4 .s.h.-.......... 0030 f4 9f 34 a0 bb 68 35 1f 2b ba 2d f3 bb 3e 82 9e ..4..h5.+.-..>.. 0040 f9 90 37 72 c8 27 8d 9a 98 5e c1 08 74 f0 9f 27 ..7r.'...^..t..' 0050 d3 19 3c 8f f9 0c fb e3 ca 76 5e 07 c2 3f 39 ee ..<......v^..?9. 0060 55 92 13 f9 ea 1f 47 4c b5 db d6 d2 24 eb 29 f1 U.....GL....$.). 0070 27 a9 b5 4c 24 da 39 f9 a4 b3 32 38 f1 54 1e eb '..L$.9...28.T.. 0080 6d 95 m.