Frame 1 (166 bytes on wire, 166 bytes captured) Arrival Time: Oct 2, 2003 09:10:29.846774000 Time delta from previous packet: 0.000000000 seconds Time relative to first packet: 0.000000000 seconds Frame Number: 1 Packet Length: 166 bytes Capture Length: 166 bytes Ethernet II, Src: 00:0c:29:b1:20:22, Dst: 00:11:22:33:44:56 Destination: 00:11:22:33:44:56 (00:11:22:33:44:56) Source: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22) Type: IP (0x0800) Trailer: 9E5B7126 Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.120 (165.227.249.120) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 148 Identification: 0x03ed (1005) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf7b8 (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.120 (165.227.249.120) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 128 Checksum: 0x457f (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xDBDDB1F2065CB389 Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 120 Security Association payload Next payload: Vendor ID (13) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 40 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 32 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (3600) Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: unknown vendor ID: 0x4485152D18B6BBCD0BE8A8469579DDCC Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: unknown vendor ID: 0x90CB80913EBB696E086381B5EC427B1F 0000 00 11 22 33 44 56 00 0c 29 b1 20 22 08 00 45 00 .."3DV..). "..E. 0010 00 94 03 ed 00 00 80 11 f7 b8 a5 e3 f9 73 a5 e3 .............s.. 0020 f9 78 01 f4 01 f4 00 80 45 7f db dd b1 f2 06 5c .x......E......\ 0030 b3 89 00 00 00 00 00 00 00 00 01 10 02 00 00 00 ................ 0040 00 00 00 00 00 78 0d 00 00 34 00 00 00 01 00 00 .....x...4...... 0050 00 01 00 00 00 28 01 01 00 01 00 00 00 20 01 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 04 00 02 80 03 ................ 0070 00 01 80 0b 00 01 80 0c 0e 10 0d 00 00 14 44 85 ..............D. 0080 15 2d 18 b6 bb cd 0b e8 a8 46 95 79 dd cc 00 00 .-.......F.y.... 0090 00 14 90 cb 80 91 3e bb 69 6e 08 63 81 b5 ec 42 ......>.in.c...B 00a0 7b 1f 9e 5b 71 26 {..[q& Frame 2 (126 bytes on wire, 126 bytes captured) Arrival Time: Oct 2, 2003 09:10:29.852738000 Time delta from previous packet: 0.005964000 seconds Time relative to first packet: 0.005964000 seconds Frame Number: 2 Packet Length: 126 bytes Capture Length: 126 bytes Ethernet II, Src: 00:11:22:33:44:56, Dst: 00:0c:29:b1:20:22 Destination: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22) Source: 00:11:22:33:44:56 (00:11:22:33:44:56) Type: IP (0x0800) Trailer: 85B5CDC2 Internet Protocol, Src Addr: 165.227.249.120 (165.227.249.120), Dst Addr: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 108 Identification: 0x000f (15) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 32 Protocol: UDP (0x11) Header checksum: 0x5bbf (correct) Source: 165.227.249.120 (165.227.249.120) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 88 Checksum: 0x1c4b (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xDBDDB1F2065CB389 Responder cookie: 0xF8D4A5A61D7F8886 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 80 Security Association payload Next payload: NONE (0) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 40 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 32 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (3600) 0000 00 0c 29 b1 20 22 00 11 22 33 44 56 08 00 45 00 ..). ".."3DV..E. 0010 00 6c 00 0f 00 00 20 11 5b bf a5 e3 f9 78 a5 e3 .l.... .[....x.. 0020 f9 73 01 f4 01 f4 00 58 1c 4b db dd b1 f2 06 5c .s.....X.K.....\ 0030 b3 89 f8 d4 a5 a6 1d 7f 88 86 01 10 02 00 00 00 ................ 0040 00 00 00 00 00 50 00 00 00 34 00 00 00 01 00 00 .....P...4...... 0050 00 01 00 00 00 28 01 01 00 01 00 00 00 20 01 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 04 00 02 80 03 ................ 0070 00 01 80 0b 00 01 80 0c 0e 10 85 b5 cd c2 .............. Frame 3 (302 bytes on wire, 302 bytes captured) Arrival Time: Oct 2, 2003 09:10:32.015280000 Time delta from previous packet: 2.162542000 seconds Time relative to first packet: 2.168506000 seconds Frame Number: 3 Packet Length: 302 bytes Capture Length: 302 bytes Ethernet II, Src: 00:0c:29:b1:20:22, Dst: 00:11:22:33:44:56 Destination: 00:11:22:33:44:56 (00:11:22:33:44:56) Source: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22) Type: IP (0x0800) Trailer: 7F8C4C91 Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.120 (165.227.249.120) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 284 Identification: 0x03f0 (1008) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf72d (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.120 (165.227.249.120) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 264 Checksum: 0x0d5e (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xDBDDB1F2065CB389 Responder cookie: 0xF8D4A5A61D7F8886 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 256 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: Vendor ID (13) Length: 24 Nonce Data Vendor ID payload Next payload: Vendor ID (13) Length: 48 Vendor ID: unknown vendor ID: 0x47BBE7C993F1FC13B4E6D0DB565C68E5... Vendor ID payload Next payload: Vendor ID (13) Length: 12 Vendor ID: unknown vendor ID: 0xDA8E937880010000 Vendor ID payload Next payload: NONE (0) Length: 12 Vendor ID: unknown vendor ID: 0x09002689DFD6B712 0000 00 11 22 33 44 56 00 0c 29 b1 20 22 08 00 45 00 .."3DV..). "..E. 0010 01 1c 03 f0 00 00 80 11 f7 2d a5 e3 f9 73 a5 e3 .........-...s.. 0020 f9 78 01 f4 01 f4 01 08 0d 5e db dd b1 f2 06 5c .x.......^.....\ 0030 b3 89 f8 d4 a5 a6 1d 7f 88 86 04 10 02 00 00 00 ................ 0040 00 00 00 00 01 00 0a 00 00 84 3f 7f c6 b9 5c d8 ..........?...\. 0050 b1 fe e9 dc af e4 ae d8 98 0d 42 79 18 5a 15 e4 ..........By.Z.. 0060 70 84 ff c7 6c d3 83 98 d2 d7 f3 59 33 da 04 a8 p...l......Y3... 0070 a4 fe 4e cc 4d 85 64 f3 1a 54 74 dd 20 ab 0f ca ..N.M.d..Tt. ... 0080 f0 2a 8a 5f 37 06 1c 24 25 e7 4c 35 00 d9 16 fe .*._7..$%.L5.... 0090 46 39 7d e3 bb 53 98 21 62 93 f9 54 52 c7 76 75 F9}..S.!b..TR.vu 00a0 70 d8 5c 6a 0d 09 80 ec 66 f6 61 96 9b 7d 48 bf p.\j....f.a..}H. 00b0 6e e6 b4 32 82 65 91 9e a5 cf dc 5a 4d b9 1e 3c n..2.e.....ZM..< 00c0 fb 00 88 cd 84 4b 30 1c f0 d5 0d 00 00 18 c2 97 .....K0......... 00d0 ae 13 62 3c 1b 08 ca 31 be d7 fc 07 47 a9 5c 17 ..b<...1....G.\. 00e0 ff 5b 0d 00 00 30 47 bb e7 c9 93 f1 fc 13 b4 e6 .[...0G......... 00f0 d0 db 56 5c 68 e5 01 02 01 01 02 01 01 03 11 31 ..V\h..........1 0100 30 2e 31 2e 31 20 28 42 75 69 6c 64 20 31 30 29 0.1.1 (Build 10) 0110 00 00 0d 00 00 0c da 8e 93 78 80 01 00 00 00 00 .........x...... 0120 00 0c 09 00 26 89 df d6 b7 12 7f 8c 4c 91 ....&.......L. Frame 4 (226 bytes on wire, 226 bytes captured) Arrival Time: Oct 2, 2003 09:10:34.902526000 Time delta from previous packet: 2.887246000 seconds Time relative to first packet: 5.055752000 seconds Frame Number: 4 Packet Length: 226 bytes Capture Length: 226 bytes Ethernet II, Src: 00:11:22:33:44:56, Dst: 00:0c:29:b1:20:22 Destination: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22) Source: 00:11:22:33:44:56 (00:11:22:33:44:56) Type: IP (0x0800) Trailer: 2A3D6C81 Internet Protocol, Src Addr: 165.227.249.120 (165.227.249.120), Dst Addr: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 208 Identification: 0x0011 (17) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 32 Protocol: UDP (0x11) Header checksum: 0x5b59 (correct) Source: 165.227.249.120 (165.227.249.120) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 188 Checksum: 0x80e0 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xDBDDB1F2065CB389 Responder cookie: 0xF8D4A5A61D7F8886 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 180 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 20 Nonce Data 0000 00 0c 29 b1 20 22 00 11 22 33 44 56 08 00 45 00 ..). ".."3DV..E. 0010 00 d0 00 11 00 00 20 11 5b 59 a5 e3 f9 78 a5 e3 ...... .[Y...x.. 0020 f9 73 01 f4 01 f4 00 bc 80 e0 db dd b1 f2 06 5c .s.............\ 0030 b3 89 f8 d4 a5 a6 1d 7f 88 86 04 10 02 00 00 00 ................ 0040 00 00 00 00 00 b4 0a 00 00 84 20 de a2 12 cd eb .......... ..... 0050 60 43 be f2 fc f7 26 9d 16 c2 82 8a bc 36 65 99 `C....&......6e. 0060 59 5e e9 c5 c3 ec 8d 4f ca 68 f3 9c 71 85 20 08 Y^.....O.h..q. . 0070 e6 89 10 e2 4c 36 24 32 30 1d 22 bb 3f a0 c4 a1 ....L6$20.".?... 0080 79 3d 6c b5 d3 84 84 80 87 20 06 8c 0a e7 b1 4c y=l...... .....L 0090 2f 46 b6 2a 1d 62 51 4f 17 24 79 17 95 20 ef 10 /F.*.bQO.$y.. .. 00a0 6f 2c d5 41 5e 01 ed 46 f1 e9 26 31 d6 55 69 2e o,.A^..F..&1.Ui. 00b0 96 76 f3 4a f0 f2 15 05 b9 af 07 07 fa 67 7c d6 .v.J.........g|. 00c0 57 1c c8 d4 a7 17 20 96 3d 67 00 00 00 14 f9 46 W..... .=g.....F 00d0 0f 7a 41 57 a1 6a 29 9e 57 01 4d 6b ed be 2a 3d .zAW.j).W.Mk..*= 00e0 6c 81 l. Frame 5 (138 bytes on wire, 138 bytes captured) Arrival Time: Oct 2, 2003 09:10:36.281919000 Time delta from previous packet: 1.379393000 seconds Time relative to first packet: 6.435145000 seconds Frame Number: 5 Packet Length: 138 bytes Capture Length: 138 bytes Ethernet II, Src: 00:0c:29:b1:20:22, Dst: 00:11:22:33:44:56 Destination: 00:11:22:33:44:56 (00:11:22:33:44:56) Source: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22) Type: IP (0x0800) Trailer: 99FB0B13 Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.120 (165.227.249.120) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x03f5 (1013) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf7cc (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.120 (165.227.249.120) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 100 Checksum: 0xe005 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xDBDDB1F2065CB389 Responder cookie: 0xF8D4A5A61D7F8886 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 92 Encrypted payload (64 bytes) 0000 00 11 22 33 44 56 00 0c 29 b1 20 22 08 00 45 00 .."3DV..). "..E. 0010 00 78 03 f5 00 00 80 11 f7 cc a5 e3 f9 73 a5 e3 .x...........s.. 0020 f9 78 01 f4 01 f4 00 64 e0 05 db dd b1 f2 06 5c .x.....d.......\ 0030 b3 89 f8 d4 a5 a6 1d 7f 88 86 05 10 02 01 00 00 ................ 0040 00 00 00 00 00 5c b4 a8 6d 62 e1 a9 48 25 cb 07 .....\..mb..H%.. 0050 88 af eb e2 26 a0 db 66 fc a7 a9 1b e1 1d c0 cd ....&..f........ 0060 9e ca e3 90 46 dd 73 bc 43 1d a6 2f 73 a4 fc ce ....F.s.C../s... 0070 15 6e 69 ef ac e2 11 ea 90 85 fe cf a1 63 c1 54 .ni..........c.T 0080 20 03 87 59 05 6b 99 fb 0b 13 ..Y.k.... Frame 6 (114 bytes on wire, 114 bytes captured) Arrival Time: Oct 2, 2003 09:10:36.289282000 Time delta from previous packet: 0.007363000 seconds Time relative to first packet: 6.442508000 seconds Frame Number: 6 Packet Length: 114 bytes Capture Length: 114 bytes Ethernet II, Src: 00:11:22:33:44:56, Dst: 00:0c:29:b1:20:22 Destination: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22) Source: 00:11:22:33:44:56 (00:11:22:33:44:56) Type: IP (0x0800) Trailer: A5AAD254 Internet Protocol, Src Addr: 165.227.249.120 (165.227.249.120), Dst Addr: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0x0013 (19) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 32 Protocol: UDP (0x11) Header checksum: 0x5bc7 (correct) Source: 165.227.249.120 (165.227.249.120) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 76 Checksum: 0x54b7 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xDBDDB1F2065CB389 Responder cookie: 0xF8D4A5A61D7F8886 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 68 Encrypted payload (40 bytes) 0000 00 0c 29 b1 20 22 00 11 22 33 44 56 08 00 45 00 ..). ".."3DV..E. 0010 00 60 00 13 00 00 20 11 5b c7 a5 e3 f9 78 a5 e3 .`.... .[....x.. 0020 f9 73 01 f4 01 f4 00 4c 54 b7 db dd b1 f2 06 5c .s.....LT......\ 0030 b3 89 f8 d4 a5 a6 1d 7f 88 86 05 10 02 01 00 00 ................ 0040 00 00 00 00 00 44 f3 29 ea e7 fc fb 09 b7 ac ce .....D.)........ 0050 2f db 21 b3 10 ab 4e 19 6c 07 2f e7 56 b6 2c fc /.!...N.l./.V.,. 0060 95 e6 02 6f ff 9e 1a 9b df dd 2b 45 b5 3c a5 aa ...o......+E.<.. 0070 d2 54 .T Frame 7 (338 bytes on wire, 338 bytes captured) Arrival Time: Oct 2, 2003 09:10:38.239628000 Time delta from previous packet: 1.950346000 seconds Time relative to first packet: 8.392854000 seconds Frame Number: 7 Packet Length: 338 bytes Capture Length: 338 bytes Ethernet II, Src: 00:0c:29:b1:20:22, Dst: 00:11:22:33:44:56 Destination: 00:11:22:33:44:56 (00:11:22:33:44:56) Source: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22) Type: IP (0x0800) Trailer: A015B312 Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.120 (165.227.249.120) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 320 Identification: 0x03fe (1022) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf6fb (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.120 (165.227.249.120) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 300 Checksum: 0x1080 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xDBDDB1F2065CB389 Responder cookie: 0xF8D4A5A61D7F8886 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xB8E50B20 Length: 292 Encrypted payload (264 bytes) 0000 00 11 22 33 44 56 00 0c 29 b1 20 22 08 00 45 00 .."3DV..). "..E. 0010 01 40 03 fe 00 00 80 11 f6 fb a5 e3 f9 73 a5 e3 .@...........s.. 0020 f9 78 01 f4 01 f4 01 2c 10 80 db dd b1 f2 06 5c .x.....,.......\ 0030 b3 89 f8 d4 a5 a6 1d 7f 88 86 08 10 20 01 b8 e5 ............ ... 0040 0b 20 00 00 01 24 57 eb 77 ae fa 85 d0 b4 65 c6 . ...$W.w.....e. 0050 c7 c8 d3 4e 07 3a dc df 80 35 a2 bd 9f 30 3d 82 ...N.:...5...0=. 0060 58 86 0d dc ed f8 b1 04 92 c6 7f 73 67 2b a5 79 X..........sg+.y 0070 2c 7d 45 a9 b7 85 39 6d e6 24 b8 90 92 55 24 f0 ,}E...9m.$...U$. 0080 b7 67 7f 9b a3 c1 e6 3a bc f5 3f 43 bd aa b1 4a .g.....:..?C...J 0090 56 52 58 36 e8 f9 07 14 d0 fc 09 75 d8 0c ea 63 VRX6.......u...c 00a0 6e dc 71 63 86 3e c2 c3 24 8b e1 ec 2e 2f 5c 78 n.qc.>..$..../\x 00b0 1e 4c 88 42 db fb 9c 84 8c a2 fd 1c 7e da 69 df .L.B........~.i. 00c0 45 d6 de 40 a5 21 f8 05 65 fe c4 d5 6a ae 88 86 E..@.!..e...j... 00d0 fc 53 15 8d 19 03 22 c6 17 49 fd dc 87 9d 94 ab .S...."..I...... 00e0 f3 74 ae 7d 11 d9 77 45 87 64 36 43 79 34 bb 43 .t.}..wE.d6Cy4.C 00f0 37 49 47 22 74 4b a1 7a f8 bf 85 b0 1b cf b9 ff 7IG"tK.z........ 0100 13 86 4a ee e8 42 ae 70 94 6e 46 02 42 97 00 44 ..J..B.p.nF.B..D 0110 d4 dc 8f 1e 6e 16 94 df 2c 85 39 e9 04 fb c7 7a ....n...,.9....z 0120 2a a4 ac 14 e8 5c 37 76 86 60 80 49 3a 79 87 e2 *....\7v.`.I:y.. 0130 76 c4 b4 c3 38 f8 58 84 60 73 98 f7 ea ef 28 a6 v...8.X.`s....(. 0140 d7 40 bc 25 a4 1a 0b 2e 54 7a d9 e9 15 b8 a0 15 .@.%....Tz...... 0150 b3 12 .. Frame 8 (330 bytes on wire, 330 bytes captured) Arrival Time: Oct 2, 2003 09:10:41.199016000 Time delta from previous packet: 2.959388000 seconds Time relative to first packet: 11.352242000 seconds Frame Number: 8 Packet Length: 330 bytes Capture Length: 330 bytes Ethernet II, Src: 00:11:22:33:44:56, Dst: 00:0c:29:b1:20:22 Destination: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22) Source: 00:11:22:33:44:56 (00:11:22:33:44:56) Type: IP (0x0800) Trailer: 229C5BAD Internet Protocol, Src Addr: 165.227.249.120 (165.227.249.120), Dst Addr: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 312 Identification: 0x0014 (20) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 32 Protocol: UDP (0x11) Header checksum: 0x5aee (correct) Source: 165.227.249.120 (165.227.249.120) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 292 Checksum: 0x8eb8 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xDBDDB1F2065CB389 Responder cookie: 0xF8D4A5A61D7F8886 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xB8E50B20 Length: 284 Encrypted payload (256 bytes) 0000 00 0c 29 b1 20 22 00 11 22 33 44 56 08 00 45 00 ..). ".."3DV..E. 0010 01 38 00 14 00 00 20 11 5a ee a5 e3 f9 78 a5 e3 .8.... .Z....x.. 0020 f9 73 01 f4 01 f4 01 24 8e b8 db dd b1 f2 06 5c .s.....$.......\ 0030 b3 89 f8 d4 a5 a6 1d 7f 88 86 08 10 20 01 b8 e5 ............ ... 0040 0b 20 00 00 01 1c bb 57 75 1e 4d fc a3 38 7c ff . .....Wu.M..8|. 0050 a3 ad d7 f1 d0 c4 04 ad 15 b3 d9 2e 11 5a 57 bf .............ZW. 0060 6d 44 e2 4f 51 dc 85 3c 87 5e 76 8e fe 44 65 42 mD.OQ..<.^v..DeB 0070 b7 35 73 06 60 a6 68 ba c9 05 2d dd da 07 95 50 .5s.`.h...-....P 0080 1a ec 87 d8 ff db 4e 64 a2 d1 1f b9 4f 6c 83 37 ......Nd....Ol.7 0090 31 6f 61 0b c5 bb af a3 cf 5e b0 ed 8c e7 10 78 1oa......^.....x 00a0 d9 5e d6 6d d2 57 75 25 77 06 ac 9a 80 3d 15 fc .^.m.Wu%w....=.. 00b0 43 ba 79 83 ad f5 42 3a 7e a3 26 54 55 ae cc 32 C.y...B:~.&TU..2 00c0 f3 f9 b7 21 13 0d 5c b9 c9 24 f8 27 dd 66 ec 57 ...!..\..$.'.f.W 00d0 f5 21 28 fa 9f 29 cc 82 2a 19 8c 0d 98 f9 62 49 .!(..)..*.....bI 00e0 8e 5a 4b 46 8d 85 c7 02 6c ae 9b 2f 00 5b b2 76 .ZKF....l../.[.v 00f0 59 d1 24 6c 64 d2 cc ad 5c a4 63 f9 e4 30 a9 07 Y.$ld...\.c..0.. 0100 4c 1d 2b ef bb ea ef da 8b 89 59 fd ff bf aa 91 L.+.......Y..... 0110 a7 54 7f 97 dd 5b 98 c1 bb 34 7c 24 32 9b 03 6d .T...[...4|$2..m 0120 75 89 80 db 17 47 cb 51 ce 54 f8 e1 e6 75 d9 24 u....G.Q.T...u.$ 0130 ec 39 9d 81 57 9f ce ab 89 09 4c 2f ad 45 34 22 .9..W.....L/.E4" 0140 8a 45 4b 0a 96 a8 22 9c 5b ad .EK...".[. Frame 9 (98 bytes on wire, 98 bytes captured) Arrival Time: Oct 2, 2003 09:10:41.204824000 Time delta from previous packet: 0.005808000 seconds Time relative to first packet: 11.358050000 seconds Frame Number: 9 Packet Length: 98 bytes Capture Length: 98 bytes Ethernet II, Src: 00:0c:29:b1:20:22, Dst: 00:11:22:33:44:56 Destination: 00:11:22:33:44:56 (00:11:22:33:44:56) Source: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22) Type: IP (0x0800) Trailer: A1DF5E5F Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.120 (165.227.249.120) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 80 Identification: 0x0403 (1027) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf7e6 (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.120 (165.227.249.120) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 60 Checksum: 0x6e53 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xDBDDB1F2065CB389 Responder cookie: 0xF8D4A5A61D7F8886 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xB8E50B20 Length: 52 Encrypted payload (24 bytes) 0000 00 11 22 33 44 56 00 0c 29 b1 20 22 08 00 45 00 .."3DV..). "..E. 0010 00 50 04 03 00 00 80 11 f7 e6 a5 e3 f9 73 a5 e3 .P...........s.. 0020 f9 78 01 f4 01 f4 00 3c 6e 53 db dd b1 f2 06 5c .x.....I...a.. 0060 05 b5 07 7d 5e 9a d4 0a 49 db 88 c8 e5 e9 67 a0 ...}^...I.....g. 0070 6f cc b2 a9 61 a5 73 21 11 e1 a4 0f 7e 17 33 2d o...a.s!....~.3- 0080 c6 db .. Frame 11 (130 bytes on wire, 130 bytes captured) Arrival Time: Oct 2, 2003 09:10:50.655161000 Time delta from previous packet: 5.052338000 seconds Time relative to first packet: 20.808387000 seconds Frame Number: 11 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:0c:29:b1:20:22, Dst: 00:11:22:33:44:56 Destination: 00:11:22:33:44:56 (00:11:22:33:44:56) Source: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22) Type: IP (0x0800) Trailer: 47A6464C Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.120 (165.227.249.120) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0002 (2) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: ESP (0x32) Header checksum: 0xfba6 (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.120 (165.227.249.120) Encapsulating Security Payload SPI: 0x86e7f0c3 Sequence: 0x00000002 Data (84 bytes) 0000 00 11 22 33 44 56 00 0c 29 b1 20 22 08 00 45 00 .."3DV..). "..E. 0010 00 70 00 02 00 00 80 32 fb a6 a5 e3 f9 73 a5 e3 .p.....2.....s.. 0020 f9 78 86 e7 f0 c3 00 00 00 02 88 c8 e5 e9 67 a0 .x............g. 0030 6f cc 1f 3b 0c 09 42 f7 c2 0f 17 d8 de 7d 88 9d o..;..B......}.. 0040 58 b8 ed 5f 56 9f 1a b2 c3 6f c6 45 3b c7 34 fd X.._V....o.E;.4. 0050 54 3f c5 45 c7 50 05 b5 6c df 3b 88 49 c2 50 a9 T?.E.P..l.;.I.P. 0060 36 9e fc 92 5c 82 e8 c1 2a 08 66 74 2f 9d ff 25 6...\...*.ft/..% 0070 9e 0f f5 d1 48 b9 de 65 64 4c 27 dc 44 2f 47 a6 ....H..edL'.D/G. 0080 46 4c FL Frame 12 (130 bytes on wire, 130 bytes captured) Arrival Time: Oct 2, 2003 09:10:50.658535000 Time delta from previous packet: 0.003374000 seconds Time relative to first packet: 20.811761000 seconds Frame Number: 12 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:11:22:33:44:56, Dst: 00:0c:29:b1:20:22 Destination: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22) Source: 00:11:22:33:44:56 (00:11:22:33:44:56) Type: IP (0x0800) Trailer: A110DDA0 Internet Protocol, Src Addr: 165.227.249.120 (165.227.249.120), Dst Addr: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x00e4 (228) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 127 Protocol: ESP (0x32) Header checksum: 0xfbc4 (correct) Source: 165.227.249.120 (165.227.249.120) Destination: 165.227.249.115 (165.227.249.115) Encapsulating Security Payload SPI: 0xaa3d03e3 Sequence: 0x00000002 Data (84 bytes) 0000 00 0c 29 b1 20 22 00 11 22 33 44 56 08 00 45 00 ..). ".."3DV..E. 0010 00 70 00 e4 00 00 7f 32 fb c4 a5 e3 f9 78 a5 e3 .p.....2.....x.. 0020 f9 73 aa 3d 03 e3 00 00 00 02 01 02 03 04 05 06 .s.=............ 0030 07 08 ba b4 ff 88 2b a6 42 2a 45 b4 50 f4 e0 60 ......+.B*E.P..` 0040 94 96 1f 5c db b0 59 b7 4b 07 39 41 19 db 53 a7 ...\..Y.K.9A..S. 0050 02 c5 27 e3 6c 9c c7 a0 13 58 48 50 38 a5 bb 46 ..'.l....XHP8..F 0060 88 8b 76 dc 4a b6 ce 00 11 50 6e 3b 72 4d ba 04 ..v.J....Pn;rM.. 0070 24 0e 1c 53 07 66 4b ab ba 72 db 31 b6 b9 a1 10 $..S.fK..r.1.... 0080 dd a0 .. Frame 13 (130 bytes on wire, 130 bytes captured) Arrival Time: Oct 2, 2003 09:10:51.648866000 Time delta from previous packet: 0.990331000 seconds Time relative to first packet: 21.802092000 seconds Frame Number: 13 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:0c:29:b1:20:22, Dst: 00:11:22:33:44:56 Destination: 00:11:22:33:44:56 (00:11:22:33:44:56) Source: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22) Type: IP (0x0800) Trailer: 54CDD6F1 Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.120 (165.227.249.120) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0003 (3) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: ESP (0x32) Header checksum: 0xfba5 (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.120 (165.227.249.120) Encapsulating Security Payload SPI: 0x86e7f0c3 Sequence: 0x00000003 Data (84 bytes) 0000 00 11 22 33 44 56 00 0c 29 b1 20 22 08 00 45 00 .."3DV..). "..E. 0010 00 70 00 03 00 00 80 32 fb a5 a5 e3 f9 73 a5 e3 .p.....2.....s.. 0020 f9 78 86 e7 f0 c3 00 00 00 03 66 74 2f 9d ff 25 .x........ft/..% 0030 9e 0f 59 64 a6 4d 2d d0 ec ca 0c 5d 41 f8 7e 1a ..Yd.M-....]A.~. 0040 0d 41 fc 9d 93 24 64 13 cb 3c 33 03 18 b4 0c a5 .A...$d..<3..... 0050 d4 93 8b 67 c7 2f d8 88 c4 77 4d 34 63 a7 f2 52 ...g./...wM4c..R 0060 2c 76 ed e9 bd a4 4f 22 90 12 18 06 d2 6f 2f d5 ,v....O".....o/. 0070 49 dc 70 d1 c3 2f 7e 1b 26 e1 e3 bb cd 03 54 cd I.p../~.&.....T. 0080 d6 f1 .. Frame 14 (130 bytes on wire, 130 bytes captured) Arrival Time: Oct 2, 2003 09:10:51.652218000 Time delta from previous packet: 0.003352000 seconds Time relative to first packet: 21.805444000 seconds Frame Number: 14 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:11:22:33:44:56, Dst: 00:0c:29:b1:20:22 Destination: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22) Source: 00:11:22:33:44:56 (00:11:22:33:44:56) Type: IP (0x0800) Trailer: 46261997 Internet Protocol, Src Addr: 165.227.249.120 (165.227.249.120), Dst Addr: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x00e5 (229) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 127 Protocol: ESP (0x32) Header checksum: 0xfbc3 (correct) Source: 165.227.249.120 (165.227.249.120) Destination: 165.227.249.115 (165.227.249.115) Encapsulating Security Payload SPI: 0xaa3d03e3 Sequence: 0x00000004 Data (84 bytes) 0000 00 0c 29 b1 20 22 00 11 22 33 44 56 08 00 45 00 ..). ".."3DV..E. 0010 00 70 00 e5 00 00 7f 32 fb c3 a5 e3 f9 78 a5 e3 .p.....2.....x.. 0020 f9 73 aa 3d 03 e3 00 00 00 04 6e 3b 72 4d ba 04 .s.=......n;rM.. 0030 24 0e 55 e7 0e 38 5c 2f 49 cc 5f 18 73 98 75 14 $.U..8\/I._.s.u. 0040 e6 f8 40 9a 93 79 e6 9b be 37 4c 11 2d ce 1b 49 ..@..y...7L.-..I 0050 16 67 05 42 6a ef 5d 41 d3 f4 50 d4 f3 55 e8 50 .g.Bj.]A..P..U.P 0060 f8 3d fb b1 58 16 34 72 59 b9 e7 5e 73 ae f9 ff .=..X.4rY..^s... 0070 60 d7 bf b8 fb d2 2d a6 23 b7 8a f8 64 8f 46 26 `.....-.#...d.F& 0080 19 97 .. Frame 15 (130 bytes on wire, 130 bytes captured) Arrival Time: Oct 2, 2003 09:10:52.652599000 Time delta from previous packet: 1.000381000 seconds Time relative to first packet: 22.805825000 seconds Frame Number: 15 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:0c:29:b1:20:22, Dst: 00:11:22:33:44:56 Destination: 00:11:22:33:44:56 (00:11:22:33:44:56) Source: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22) Type: IP (0x0800) Trailer: C2953AC4 Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.120 (165.227.249.120) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0004 (4) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: ESP (0x32) Header checksum: 0xfba4 (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.120 (165.227.249.120) Encapsulating Security Payload SPI: 0x86e7f0c3 Sequence: 0x00000004 Data (84 bytes) 0000 00 11 22 33 44 56 00 0c 29 b1 20 22 08 00 45 00 .."3DV..). "..E. 0010 00 70 00 04 00 00 80 32 fb a4 a5 e3 f9 73 a5 e3 .p.....2.....s.. 0020 f9 78 86 e7 f0 c3 00 00 00 04 18 06 d2 6f 2f d5 .x...........o/. 0030 49 dc ab 34 fa 85 03 2a 69 55 04 4e e9 9a 37 e5 I..4...*iU.N..7. 0040 6d 15 5d ce 46 cf c5 5a c2 08 73 f1 be a8 5f ee m.].F..Z..s..._. 0050 80 63 6a 6f 9d b4 42 e6 6c a3 ca 98 c6 e5 2b 98 .cjo..B.l.....+. 0060 e2 21 cb 11 0c d2 20 99 4f 75 ee 7a f2 e0 a7 c3 .!.... .Ou.z.... 0070 ec 02 c2 48 b8 a9 98 69 5f 07 9a 80 98 71 c2 95 ...H...i_....q.. 0080 3a c4 :. Frame 16 (130 bytes on wire, 130 bytes captured) Arrival Time: Oct 2, 2003 09:10:52.655864000 Time delta from previous packet: 0.003265000 seconds Time relative to first packet: 22.809090000 seconds Frame Number: 16 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:11:22:33:44:56, Dst: 00:0c:29:b1:20:22 Destination: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22) Source: 00:11:22:33:44:56 (00:11:22:33:44:56) Type: IP (0x0800) Trailer: 7388BDF3 Internet Protocol, Src Addr: 165.227.249.120 (165.227.249.120), Dst Addr: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x00e6 (230) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 127 Protocol: ESP (0x32) Header checksum: 0xfbc2 (correct) Source: 165.227.249.120 (165.227.249.120) Destination: 165.227.249.115 (165.227.249.115) Encapsulating Security Payload SPI: 0xaa3d03e3 Sequence: 0x00000006 Data (84 bytes) 0000 00 0c 29 b1 20 22 00 11 22 33 44 56 08 00 45 00 ..). ".."3DV..E. 0010 00 70 00 e6 00 00 7f 32 fb c2 a5 e3 f9 78 a5 e3 .p.....2.....x.. 0020 f9 73 aa 3d 03 e3 00 00 00 06 e7 5e 73 ae f9 ff .s.=.......^s... 0030 60 d7 3e f7 d2 cd a1 d6 cd 8c 5f d0 15 47 51 b4 `.>......._..GQ. 0040 98 36 82 da e3 b3 36 ad b7 11 1f 5c 4f d1 ad b9 .6....6....\O... 0050 9a 41 0b d5 73 c3 98 a2 b3 c9 04 9e ba d1 2a 99 .A..s.........*. 0060 88 00 71 59 f1 66 ff e1 38 38 6e f4 19 60 b6 29 ..qY.f..88n..`.) 0070 87 d2 4d 07 5c 01 31 01 31 32 da 02 c8 98 73 88 ..M.\.1.12....s. 0080 bd f3 .. Frame 17 (130 bytes on wire, 130 bytes captured) Arrival Time: Oct 2, 2003 09:10:53.664539000 Time delta from previous packet: 1.008675000 seconds Time relative to first packet: 23.817765000 seconds Frame Number: 17 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:0c:29:b1:20:22, Dst: 00:11:22:33:44:56 Destination: 00:11:22:33:44:56 (00:11:22:33:44:56) Source: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22) Type: IP (0x0800) Trailer: 45581B86 Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.120 (165.227.249.120) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0005 (5) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: ESP (0x32) Header checksum: 0xfba3 (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.120 (165.227.249.120) Encapsulating Security Payload SPI: 0x86e7f0c3 Sequence: 0x00000005 Data (84 bytes) 0000 00 11 22 33 44 56 00 0c 29 b1 20 22 08 00 45 00 .."3DV..). "..E. 0010 00 70 00 05 00 00 80 32 fb a3 a5 e3 f9 73 a5 e3 .p.....2.....s.. 0020 f9 78 86 e7 f0 c3 00 00 00 05 ee 7a f2 e0 a7 c3 .x.........z.... 0030 ec 02 00 28 c3 1d 19 1d 5b cc 9a b4 5a 04 d9 c9 ...(....[...Z... 0040 1e 82 c9 55 85 a7 38 ef 1f 36 7c dd ca c1 02 1d ...U..8..6|..... 0050 47 9e 73 5d 64 ac e9 e1 d5 d9 ad a6 c2 00 e0 6a G.s]d..........j 0060 80 27 e4 bd 42 f2 1c 5a 7c 21 53 6f f6 5b b1 05 .'..B..Z|!So.[.. 0070 e5 b3 ce 8e cc fd ca 95 1c f3 61 ec f2 a8 45 58 ..........a...EX 0080 1b 86 .. Frame 18 (130 bytes on wire, 130 bytes captured) Arrival Time: Oct 2, 2003 09:10:53.667820000 Time delta from previous packet: 0.003281000 seconds Time relative to first packet: 23.821046000 seconds Frame Number: 18 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:11:22:33:44:56, Dst: 00:0c:29:b1:20:22 Destination: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22) Source: 00:11:22:33:44:56 (00:11:22:33:44:56) Type: IP (0x0800) Trailer: C97AA883 Internet Protocol, Src Addr: 165.227.249.120 (165.227.249.120), Dst Addr: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x00e7 (231) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 127 Protocol: ESP (0x32) Header checksum: 0xfbc1 (correct) Source: 165.227.249.120 (165.227.249.120) Destination: 165.227.249.115 (165.227.249.115) Encapsulating Security Payload SPI: 0xaa3d03e3 Sequence: 0x00000008 Data (84 bytes) 0000 00 0c 29 b1 20 22 00 11 22 33 44 56 08 00 45 00 ..). ".."3DV..E. 0010 00 70 00 e7 00 00 7f 32 fb c1 a5 e3 f9 78 a5 e3 .p.....2.....x.. 0020 f9 73 aa 3d 03 e3 00 00 00 08 6e f4 19 60 b6 29 .s.=......n..`.) 0030 87 d2 43 5b 66 cb d0 d2 cb af 41 a8 5a df 62 df ..C[f.....A.Z.b. 0040 41 0b 53 31 59 8d db ae de 23 f9 84 76 fc be f8 A.S1Y....#..v... 0050 74 46 89 a0 04 5c c8 e9 ff f0 93 06 a4 bc 72 37 tF...\........r7 0060 1a 93 3f ca f6 06 5d 7a fc ab 1b 92 af d5 88 be ..?...]z........ 0070 b8 56 b7 ca dd 3b 3e 57 5b ef cd 51 f7 d8 c9 7a .V...;>W[..Q...z 0080 a8 83 ..