Frame 1 (170 bytes on wire, 170 bytes captured)
    Arrival Time: Mar 19, 2004 15:57:24.636971000
    Time delta from previous packet: 0.000000000 seconds
    Time since reference or first frame: 0.000000000 seconds
    Frame Number: 1
    Packet Length: 170 bytes
    Capture Length: 170 bytes
Ethernet II, Src: 00:0c:29:b1:20:22, Dst: 00:0a:e6:4b:41:10
    Destination: 00:0a:e6:4b:41:10 (00:0a:e6:4b:41:10)
    Source: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22)
    Type: IP (0x0800)
    Frame check sequence: 0xe43ce827 (correct)
Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.124 (165.227.249.124)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 152
    Identification: 0x02c0 (704)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0xf8dd (correct)
    Source: 165.227.249.115 (165.227.249.115)
    Destination: 165.227.249.124 (165.227.249.124)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 132
    Checksum: 0x80bc (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0xEC78A91A0798EEA0
    Responder cookie: 0x0000000000000000
    Next payload: Security Association (1)
    Version: 1.0
    Exchange type: Identity Protection (Main Mode) (2)
    Flags
        .... ...0 = No encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x00000000
    Length: 124
    Security Association payload
        Next payload: Vendor ID (13)
        Length: 56
        Domain of interpretation: IPSEC (1)
        Situation: IDENTITY (1)
        Proposal payload # 1
            Next payload: NONE (0)
            Length: 44
            Proposal number: 1
            Protocol ID: ISAKMP (1)
            SPI size: 0
            Number of transforms: 1
            Transform payload # 1
                Next payload: NONE (0)
                Length: 36
                Transform number: 1
                Transform ID: KEY_IKE (1)
                Encryption-Algorithm (1): AES-CBC (7)
                Key-Length (14): Key-Length (128)
                Hash-Algorithm (2): SHA (2)
                Group-Description (4): Alternate 1024-bit MODP group (2)
                Authentication-Method (3): PSK (1)
                Life-Type (11): Seconds (1)
                Life-Duration (12): Duration-Value (3600)
    Vendor ID payload
        Next payload: Vendor ID (13)
        Length: 20
        Vendor ID: draft-ietf-ipsec-nat-t-ike-00
    Vendor ID payload
        Next payload: NONE (0)
        Length: 20
        Vendor ID: draft-ietf-ipsec-nat-t-ike-02

0000  00 0a e6 4b 41 10 00 0c 29 b1 20 22 08 00 45 00   ...KA...). "..E.
0010  00 98 02 c0 00 00 80 11 f8 dd a5 e3 f9 73 a5 e3   .............s..
0020  f9 7c 01 f4 01 f4 00 84 80 bc ec 78 a9 1a 07 98   .|.........x....
0030  ee a0 00 00 00 00 00 00 00 00 01 10 02 00 00 00   ................
0040  00 00 00 00 00 7c 0d 00 00 38 00 00 00 01 00 00   .....|...8......
0050  00 01 00 00 00 2c 01 01 00 01 00 00 00 24 01 01   .....,.......$..
0060  00 00 80 01 00 07 80 0e 00 80 80 02 00 02 80 04   ................
0070  00 02 80 03 00 01 80 0b 00 01 80 0c 0e 10 0d 00   ................
0080  00 14 44 85 15 2d 18 b6 bb cd 0b e8 a8 46 95 79   ..D..-.......F.y
0090  dd cc 00 00 00 14 90 cb 80 91 3e bb 69 6e 08 63   ..........>.in.c
00a0  81 b5 ec 42 7b 1f e4 3c e8 27                     ...B{..<.'

Frame 2 (270 bytes on wire, 270 bytes captured)
    Arrival Time: Mar 19, 2004 15:57:24.638882000
    Time delta from previous packet: 0.001911000 seconds
    Time since reference or first frame: 0.001911000 seconds
    Frame Number: 2
    Packet Length: 270 bytes
    Capture Length: 270 bytes
Ethernet II, Src: 00:0a:e6:4b:41:10, Dst: 00:0c:29:b1:20:22
    Destination: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22)
    Source: 00:0a:e6:4b:41:10 (00:0a:e6:4b:41:10)
    Type: IP (0x0800)
    Frame check sequence: 0x1d75a5ea (correct)
Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.115 (165.227.249.115)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 252
    Identification: 0x000d (13)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0x3b2d (correct)
    Source: 165.227.249.124 (165.227.249.124)
    Destination: 165.227.249.115 (165.227.249.115)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 232
    Checksum: 0x3d4b (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0xEC78A91A0798EEA0
    Responder cookie: 0x93C769486098031B
    Next payload: Security Association (1)
    Version: 1.0
    Exchange type: Identity Protection (Main Mode) (2)
    Flags
        .... ...0 = No encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x00000000
    Length: 224
    Security Association payload
        Next payload: Vendor ID (13)
        Length: 56
        Domain of interpretation: IPSEC (1)
        Situation: IDENTITY (1)
        Proposal payload # 1
            Next payload: NONE (0)
            Length: 44
            Proposal number: 1
            Protocol ID: ISAKMP (1)
            SPI size: 0
            Number of transforms: 1
            Transform payload # 1
                Next payload: NONE (0)
                Length: 36
                Transform number: 1
                Transform ID: KEY_IKE (1)
                Encryption-Algorithm (1): AES-CBC (7)
                Key-Length (14): Key-Length (128)
                Hash-Algorithm (2): SHA (2)
                Group-Description (4): Alternate 1024-bit MODP group (2)
                Authentication-Method (3): PSK (1)
                Life-Type (11): Seconds (1)
                Life-Duration (12): Duration-Value (3600)
    Vendor ID payload
        Next payload: Vendor ID (13)
        Length: 20
        Vendor ID: unknown vendor ID: 0x8F9CC94E01248ECDF147594C284B213B
    Vendor ID payload
        Next payload: Vendor ID (13)
        Length: 20
        Vendor ID: draft-stenberg-ipsec-nat-traversal-01
    Vendor ID payload
        Next payload: Vendor ID (13)
        Length: 20
        Vendor ID: draft-stenberg-ipsec-nat-traversal-02
    Vendor ID payload
        Next payload: Vendor ID (13)
        Length: 20
        Vendor ID: draft-ietf-ipsec-nat-t-ike-00
    Vendor ID payload
        Next payload: Vendor ID (13)
        Length: 20
        Vendor ID: draft-ietf-ipsec-nat-t-ike-02
    Vendor ID payload
        Next payload: Vendor ID (13)
        Length: 20
        Vendor ID: draft-ietf-ipsec-nat-t-ike-02
    Vendor ID payload
        Next payload: NONE (0)
        Length: 20
        Vendor ID: draft-ietf-ipsec-nat-t-ike-03

0000  00 0c 29 b1 20 22 00 0a e6 4b 41 10 08 00 45 00   ..). "...KA...E.
0010  00 fc 00 0d 00 00 40 11 3b 2d a5 e3 f9 7c a5 e3   ......@.;-...|..
0020  f9 73 01 f4 01 f4 00 e8 3d 4b ec 78 a9 1a 07 98   .s......=K.x....
0030  ee a0 93 c7 69 48 60 98 03 1b 01 10 02 00 00 00   ....iH`.........
0040  00 00 00 00 00 e0 0d 00 00 38 00 00 00 01 00 00   .........8......
0050  00 01 00 00 00 2c 01 01 00 01 00 00 00 24 01 01   .....,.......$..
0060  00 00 80 01 00 07 80 0e 00 80 80 02 00 02 80 04   ................
0070  00 02 80 03 00 01 80 0b 00 01 80 0c 0e 10 0d 00   ................
0080  00 14 8f 9c c9 4e 01 24 8e cd f1 47 59 4c 28 4b   .....N.$...GYL(K
0090  21 3b 0d 00 00 14 27 ba b5 dc 01 ea 07 60 ea 4e   !;....'......`.N
00a0  31 90 ac 27 c0 d0 0d 00 00 14 61 05 c4 22 e7 68   1..'......a..".h
00b0  47 e4 3f 96 84 80 12 92 ae cd 0d 00 00 14 44 85   G.?...........D.
00c0  15 2d 18 b6 bb cd 0b e8 a8 46 95 79 dd cc 0d 00   .-.......F.y....
00d0  00 14 cd 60 46 43 35 df 21 f8 7c fd b2 fc 68 b6   ...`FC5.!.|...h.
00e0  a4 48 0d 00 00 14 90 cb 80 91 3e bb 69 6e 08 63   .H........>.in.c
00f0  81 b5 ec 42 7b 1f 00 00 00 14 7d 94 19 a6 53 10   ...B{.....}...S.
0100  ca 6f 2c 17 9d 92 15 52 9d 56 1d 75 a5 ea         .o,....R.V.u..

Frame 3 (270 bytes on wire, 270 bytes captured)
    Arrival Time: Mar 19, 2004 15:57:25.151216000
    Time delta from previous packet: 0.512334000 seconds
    Time since reference or first frame: 0.514245000 seconds
    Frame Number: 3
    Packet Length: 270 bytes
    Capture Length: 270 bytes
Ethernet II, Src: 00:0a:e6:4b:41:10, Dst: 00:0c:29:b1:20:22
    Destination: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22)
    Source: 00:0a:e6:4b:41:10 (00:0a:e6:4b:41:10)
    Type: IP (0x0800)
    Frame check sequence: 0x5ab2cdd4 (correct)
Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.115 (165.227.249.115)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 252
    Identification: 0x000e (14)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0x3b2c (correct)
    Source: 165.227.249.124 (165.227.249.124)
    Destination: 165.227.249.115 (165.227.249.115)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 232
    Checksum: 0x3d4b (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0xEC78A91A0798EEA0
    Responder cookie: 0x93C769486098031B
    Next payload: Security Association (1)
    Version: 1.0
    Exchange type: Identity Protection (Main Mode) (2)
    Flags
        .... ...0 = No encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x00000000
    Length: 224
    Security Association payload
        Next payload: Vendor ID (13)
        Length: 56
        Domain of interpretation: IPSEC (1)
        Situation: IDENTITY (1)
        Proposal payload # 1
            Next payload: NONE (0)
            Length: 44
            Proposal number: 1
            Protocol ID: ISAKMP (1)
            SPI size: 0
            Number of transforms: 1
            Transform payload # 1
                Next payload: NONE (0)
                Length: 36
                Transform number: 1
                Transform ID: KEY_IKE (1)
                Encryption-Algorithm (1): AES-CBC (7)
                Key-Length (14): Key-Length (128)
                Hash-Algorithm (2): SHA (2)
                Group-Description (4): Alternate 1024-bit MODP group (2)
                Authentication-Method (3): PSK (1)
                Life-Type (11): Seconds (1)
                Life-Duration (12): Duration-Value (3600)
    Vendor ID payload
        Next payload: Vendor ID (13)
        Length: 20
        Vendor ID: unknown vendor ID: 0x8F9CC94E01248ECDF147594C284B213B
    Vendor ID payload
        Next payload: Vendor ID (13)
        Length: 20
        Vendor ID: draft-stenberg-ipsec-nat-traversal-01
    Vendor ID payload
        Next payload: Vendor ID (13)
        Length: 20
        Vendor ID: draft-stenberg-ipsec-nat-traversal-02
    Vendor ID payload
        Next payload: Vendor ID (13)
        Length: 20
        Vendor ID: draft-ietf-ipsec-nat-t-ike-00
    Vendor ID payload
        Next payload: Vendor ID (13)
        Length: 20
        Vendor ID: draft-ietf-ipsec-nat-t-ike-02
    Vendor ID payload
        Next payload: Vendor ID (13)
        Length: 20
        Vendor ID: draft-ietf-ipsec-nat-t-ike-02
    Vendor ID payload
        Next payload: NONE (0)
        Length: 20
        Vendor ID: draft-ietf-ipsec-nat-t-ike-03

0000  00 0c 29 b1 20 22 00 0a e6 4b 41 10 08 00 45 00   ..). "...KA...E.
0010  00 fc 00 0e 00 00 40 11 3b 2c a5 e3 f9 7c a5 e3   ......@.;,...|..
0020  f9 73 01 f4 01 f4 00 e8 3d 4b ec 78 a9 1a 07 98   .s......=K.x....
0030  ee a0 93 c7 69 48 60 98 03 1b 01 10 02 00 00 00   ....iH`.........
0040  00 00 00 00 00 e0 0d 00 00 38 00 00 00 01 00 00   .........8......
0050  00 01 00 00 00 2c 01 01 00 01 00 00 00 24 01 01   .....,.......$..
0060  00 00 80 01 00 07 80 0e 00 80 80 02 00 02 80 04   ................
0070  00 02 80 03 00 01 80 0b 00 01 80 0c 0e 10 0d 00   ................
0080  00 14 8f 9c c9 4e 01 24 8e cd f1 47 59 4c 28 4b   .....N.$...GYL(K
0090  21 3b 0d 00 00 14 27 ba b5 dc 01 ea 07 60 ea 4e   !;....'......`.N
00a0  31 90 ac 27 c0 d0 0d 00 00 14 61 05 c4 22 e7 68   1..'......a..".h
00b0  47 e4 3f 96 84 80 12 92 ae cd 0d 00 00 14 44 85   G.?...........D.
00c0  15 2d 18 b6 bb cd 0b e8 a8 46 95 79 dd cc 0d 00   .-.......F.y....
00d0  00 14 cd 60 46 43 35 df 21 f8 7c fd b2 fc 68 b6   ...`FC5.!.|...h.
00e0  a4 48 0d 00 00 14 90 cb 80 91 3e bb 69 6e 08 63   .H........>.in.c
00f0  81 b5 ec 42 7b 1f 00 00 00 14 7d 94 19 a6 53 10   ...B{.....}...S.
0100  ca 6f 2c 17 9d 92 15 52 9d 56 5a b2 cd d4         .o,....R.VZ...

Frame 4 (270 bytes on wire, 270 bytes captured)
    Arrival Time: Mar 19, 2004 15:57:26.161336000
    Time delta from previous packet: 1.010120000 seconds
    Time since reference or first frame: 1.524365000 seconds
    Frame Number: 4
    Packet Length: 270 bytes
    Capture Length: 270 bytes
Ethernet II, Src: 00:0a:e6:4b:41:10, Dst: 00:0c:29:b1:20:22
    Destination: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22)
    Source: 00:0a:e6:4b:41:10 (00:0a:e6:4b:41:10)
    Type: IP (0x0800)
    Frame check sequence: 0xfec01c49 (correct)
Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.115 (165.227.249.115)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 252
    Identification: 0x000f (15)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0x3b2b (correct)
    Source: 165.227.249.124 (165.227.249.124)
    Destination: 165.227.249.115 (165.227.249.115)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 232
    Checksum: 0x3d4b (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0xEC78A91A0798EEA0
    Responder cookie: 0x93C769486098031B
    Next payload: Security Association (1)
    Version: 1.0
    Exchange type: Identity Protection (Main Mode) (2)
    Flags
        .... ...0 = No encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x00000000
    Length: 224
    Security Association payload
        Next payload: Vendor ID (13)
        Length: 56
        Domain of interpretation: IPSEC (1)
        Situation: IDENTITY (1)
        Proposal payload # 1
            Next payload: NONE (0)
            Length: 44
            Proposal number: 1
            Protocol ID: ISAKMP (1)
            SPI size: 0
            Number of transforms: 1
            Transform payload # 1
                Next payload: NONE (0)
                Length: 36
                Transform number: 1
                Transform ID: KEY_IKE (1)
                Encryption-Algorithm (1): AES-CBC (7)
                Key-Length (14): Key-Length (128)
                Hash-Algorithm (2): SHA (2)
                Group-Description (4): Alternate 1024-bit MODP group (2)
                Authentication-Method (3): PSK (1)
                Life-Type (11): Seconds (1)
                Life-Duration (12): Duration-Value (3600)
    Vendor ID payload
        Next payload: Vendor ID (13)
        Length: 20
        Vendor ID: unknown vendor ID: 0x8F9CC94E01248ECDF147594C284B213B
    Vendor ID payload
        Next payload: Vendor ID (13)
        Length: 20
        Vendor ID: draft-stenberg-ipsec-nat-traversal-01
    Vendor ID payload
        Next payload: Vendor ID (13)
        Length: 20
        Vendor ID: draft-stenberg-ipsec-nat-traversal-02
    Vendor ID payload
        Next payload: Vendor ID (13)
        Length: 20
        Vendor ID: draft-ietf-ipsec-nat-t-ike-00
    Vendor ID payload
        Next payload: Vendor ID (13)
        Length: 20
        Vendor ID: draft-ietf-ipsec-nat-t-ike-02
    Vendor ID payload
        Next payload: Vendor ID (13)
        Length: 20
        Vendor ID: draft-ietf-ipsec-nat-t-ike-02
    Vendor ID payload
        Next payload: NONE (0)
        Length: 20
        Vendor ID: draft-ietf-ipsec-nat-t-ike-03

0000  00 0c 29 b1 20 22 00 0a e6 4b 41 10 08 00 45 00   ..). "...KA...E.
0010  00 fc 00 0f 00 00 40 11 3b 2b a5 e3 f9 7c a5 e3   ......@.;+...|..
0020  f9 73 01 f4 01 f4 00 e8 3d 4b ec 78 a9 1a 07 98   .s......=K.x....
0030  ee a0 93 c7 69 48 60 98 03 1b 01 10 02 00 00 00   ....iH`.........
0040  00 00 00 00 00 e0 0d 00 00 38 00 00 00 01 00 00   .........8......
0050  00 01 00 00 00 2c 01 01 00 01 00 00 00 24 01 01   .....,.......$..
0060  00 00 80 01 00 07 80 0e 00 80 80 02 00 02 80 04   ................
0070  00 02 80 03 00 01 80 0b 00 01 80 0c 0e 10 0d 00   ................
0080  00 14 8f 9c c9 4e 01 24 8e cd f1 47 59 4c 28 4b   .....N.$...GYL(K
0090  21 3b 0d 00 00 14 27 ba b5 dc 01 ea 07 60 ea 4e   !;....'......`.N
00a0  31 90 ac 27 c0 d0 0d 00 00 14 61 05 c4 22 e7 68   1..'......a..".h
00b0  47 e4 3f 96 84 80 12 92 ae cd 0d 00 00 14 44 85   G.?...........D.
00c0  15 2d 18 b6 bb cd 0b e8 a8 46 95 79 dd cc 0d 00   .-.......F.y....
00d0  00 14 cd 60 46 43 35 df 21 f8 7c fd b2 fc 68 b6   ...`FC5.!.|...h.
00e0  a4 48 0d 00 00 14 90 cb 80 91 3e bb 69 6e 08 63   .H........>.in.c
00f0  81 b5 ec 42 7b 1f 00 00 00 14 7d 94 19 a6 53 10   ...B{.....}...S.
0100  ca 6f 2c 17 9d 92 15 52 9d 56 fe c0 1c 49         .o,....R.V...I

Frame 5 (350 bytes on wire, 350 bytes captured)
    Arrival Time: Mar 19, 2004 15:57:26.731757000
    Time delta from previous packet: 0.570421000 seconds
    Time since reference or first frame: 2.094786000 seconds
    Frame Number: 5
    Packet Length: 350 bytes
    Capture Length: 350 bytes
Ethernet II, Src: 00:0c:29:b1:20:22, Dst: 00:0a:e6:4b:41:10
    Destination: 00:0a:e6:4b:41:10 (00:0a:e6:4b:41:10)
    Source: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22)
    Type: IP (0x0800)
    Frame check sequence: 0xdf6cb948 (correct)
Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.124 (165.227.249.124)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 332
    Identification: 0x02c1 (705)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0xf828 (correct)
    Source: 165.227.249.115 (165.227.249.115)
    Destination: 165.227.249.124 (165.227.249.124)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 312
    Checksum: 0xf6a0 (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0xEC78A91A0798EEA0
    Responder cookie: 0x93C769486098031B
    Next payload: Key Exchange (4)
    Version: 1.0
    Exchange type: Identity Protection (Main Mode) (2)
    Flags
        .... ...0 = No encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x00000000
    Length: 304
    Key Exchange payload
        Next payload: Nonce (10)
        Length: 132
        Key Exchange Data
    Nonce payload
        Next payload: Private USE (130)
        Length: 24
        Nonce Data
    Unknown payload type payload
        Next payload: Private USE (130)
        Length: 24
        Payload
    Unknown payload type payload
        Next payload: Vendor ID (13)
        Length: 24
        Payload
    Vendor ID payload
        Next payload: Vendor ID (13)
        Length: 48
        Vendor ID: unknown vendor ID: 0x47BBE7C993F1FC13B4E6D0DB565C68E5...
    Vendor ID payload
        Next payload: Vendor ID (13)
        Length: 12
        Vendor ID: unknown vendor ID: 0xDA8E937880010000
    Vendor ID payload
        Next payload: NONE (0)
        Length: 12
        Vendor ID: draft-beaulieu-ike-xauth-02.txt

0000  00 0a e6 4b 41 10 00 0c 29 b1 20 22 08 00 45 00   ...KA...). "..E.
0010  01 4c 02 c1 00 00 80 11 f8 28 a5 e3 f9 73 a5 e3   .L.......(...s..
0020  f9 7c 01 f4 01 f4 01 38 f6 a0 ec 78 a9 1a 07 98   .|.....8...x....
0030  ee a0 93 c7 69 48 60 98 03 1b 04 10 02 00 00 00   ....iH`.........
0040  00 00 00 00 01 30 0a 00 00 84 ed 09 f4 59 91 cd   .....0.......Y..
0050  5c 68 0b d2 28 2a 51 6d aa 24 c0 0e 5f bf 8c 17   \h..(*Qm.$.._...
0060  9f 68 bc 8b 54 4a c1 4d ae 23 0c 68 ab 7f 3c 80   .h..TJ.M.#.h..<.
0070  c7 2e b8 4b ce 96 e3 c4 50 b3 0c 3d 61 ff 34 0f   ...K....P..=a.4.
0080  5d fb 1f 9c aa 76 a0 aa c0 bf 61 bd 09 06 f5 75   ]....v....a....u
0090  18 05 37 40 e2 9f 0d 1f 45 0f 22 a1 00 d1 ac cb   ..7@....E.".....
00a0  3d 1f f9 09 74 7c 9b 30 7b a5 00 a5 fe 4e 4b e2   =...t|.0{....NK.
00b0  ca cf ad 4c c9 b3 80 2a c5 7b 84 78 38 3b 35 66   ...L...*.{.x8;5f
00c0  10 25 b3 1d cf 91 d2 0c da 44 82 00 00 18 66 90   .%.......D....f.
00d0  ef 5c 69 c8 83 d8 9d 50 a9 c2 b6 6b 39 f1 fd 23   .\i....P...k9..#
00e0  98 10 82 00 00 18 8f 54 4b c5 af 6c 3c 59 31 c2   .......TK..l<Y1.
00f0  74 a9 e3 59 16 31 1f 19 1d 34 0d 00 00 18 53 20   t..Y.1...4....S 
0100  89 a6 76 51 38 9d 55 7a 86 87 6c bf 19 86 42 07   ..vQ8.Uz..l...B.
0110  13 cd 0d 00 00 30 47 bb e7 c9 93 f1 fc 13 b4 e6   .....0G.........
0120  d0 db 56 5c 68 e5 01 02 01 01 02 01 01 03 11 31   ..V\h..........1
0130  30 2e 31 2e 31 20 28 42 75 69 6c 64 20 31 30 29   0.1.1 (Build 10)
0140  00 00 0d 00 00 0c da 8e 93 78 80 01 00 00 00 00   .........x......
0150  00 0c 09 00 26 89 df d6 b7 12 df 6c b9 48         ....&......l.H

Frame 6 (350 bytes on wire, 350 bytes captured)
    Arrival Time: Mar 19, 2004 15:57:26.737089000
    Time delta from previous packet: 0.005332000 seconds
    Time since reference or first frame: 2.100118000 seconds
    Frame Number: 6
    Packet Length: 350 bytes
    Capture Length: 350 bytes
Ethernet II, Src: 00:0c:29:b1:20:22, Dst: 00:0a:e6:4b:41:10
    Destination: 00:0a:e6:4b:41:10 (00:0a:e6:4b:41:10)
    Source: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22)
    Type: IP (0x0800)
    Frame check sequence: 0xad92dbc3 (correct)
Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.124 (165.227.249.124)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 332
    Identification: 0x02c3 (707)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0xf826 (correct)
    Source: 165.227.249.115 (165.227.249.115)
    Destination: 165.227.249.124 (165.227.249.124)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 312
    Checksum: 0xf6a0 (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0xEC78A91A0798EEA0
    Responder cookie: 0x93C769486098031B
    Next payload: Key Exchange (4)
    Version: 1.0
    Exchange type: Identity Protection (Main Mode) (2)
    Flags
        .... ...0 = No encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x00000000
    Length: 304
    Key Exchange payload
        Next payload: Nonce (10)
        Length: 132
        Key Exchange Data
    Nonce payload
        Next payload: Private USE (130)
        Length: 24
        Nonce Data
    Unknown payload type payload
        Next payload: Private USE (130)
        Length: 24
        Payload
    Unknown payload type payload
        Next payload: Vendor ID (13)
        Length: 24
        Payload
    Vendor ID payload
        Next payload: Vendor ID (13)
        Length: 48
        Vendor ID: unknown vendor ID: 0x47BBE7C993F1FC13B4E6D0DB565C68E5...
    Vendor ID payload
        Next payload: Vendor ID (13)
        Length: 12
        Vendor ID: unknown vendor ID: 0xDA8E937880010000
    Vendor ID payload
        Next payload: NONE (0)
        Length: 12
        Vendor ID: draft-beaulieu-ike-xauth-02.txt

0000  00 0a e6 4b 41 10 00 0c 29 b1 20 22 08 00 45 00   ...KA...). "..E.
0010  01 4c 02 c3 00 00 80 11 f8 26 a5 e3 f9 73 a5 e3   .L.......&...s..
0020  f9 7c 01 f4 01 f4 01 38 f6 a0 ec 78 a9 1a 07 98   .|.....8...x....
0030  ee a0 93 c7 69 48 60 98 03 1b 04 10 02 00 00 00   ....iH`.........
0040  00 00 00 00 01 30 0a 00 00 84 ed 09 f4 59 91 cd   .....0.......Y..
0050  5c 68 0b d2 28 2a 51 6d aa 24 c0 0e 5f bf 8c 17   \h..(*Qm.$.._...
0060  9f 68 bc 8b 54 4a c1 4d ae 23 0c 68 ab 7f 3c 80   .h..TJ.M.#.h..<.
0070  c7 2e b8 4b ce 96 e3 c4 50 b3 0c 3d 61 ff 34 0f   ...K....P..=a.4.
0080  5d fb 1f 9c aa 76 a0 aa c0 bf 61 bd 09 06 f5 75   ]....v....a....u
0090  18 05 37 40 e2 9f 0d 1f 45 0f 22 a1 00 d1 ac cb   ..7@....E.".....
00a0  3d 1f f9 09 74 7c 9b 30 7b a5 00 a5 fe 4e 4b e2   =...t|.0{....NK.
00b0  ca cf ad 4c c9 b3 80 2a c5 7b 84 78 38 3b 35 66   ...L...*.{.x8;5f
00c0  10 25 b3 1d cf 91 d2 0c da 44 82 00 00 18 66 90   .%.......D....f.
00d0  ef 5c 69 c8 83 d8 9d 50 a9 c2 b6 6b 39 f1 fd 23   .\i....P...k9..#
00e0  98 10 82 00 00 18 8f 54 4b c5 af 6c 3c 59 31 c2   .......TK..l<Y1.
00f0  74 a9 e3 59 16 31 1f 19 1d 34 0d 00 00 18 53 20   t..Y.1...4....S 
0100  89 a6 76 51 38 9d 55 7a 86 87 6c bf 19 86 42 07   ..vQ8.Uz..l...B.
0110  13 cd 0d 00 00 30 47 bb e7 c9 93 f1 fc 13 b4 e6   .....0G.........
0120  d0 db 56 5c 68 e5 01 02 01 01 02 01 01 03 11 31   ..V\h..........1
0130  30 2e 31 2e 31 20 28 42 75 69 6c 64 20 31 30 29   0.1.1 (Build 10)
0140  00 00 0d 00 00 0c da 8e 93 78 80 01 00 00 00 00   .........x......
0150  00 0c 09 00 26 89 df d6 b7 12 ad 92 db c3         ....&.........

Frame 7 (350 bytes on wire, 350 bytes captured)
    Arrival Time: Mar 19, 2004 15:57:26.737743000
    Time delta from previous packet: 0.000654000 seconds
    Time since reference or first frame: 2.100772000 seconds
    Frame Number: 7
    Packet Length: 350 bytes
    Capture Length: 350 bytes
Ethernet II, Src: 00:0c:29:b1:20:22, Dst: 00:0a:e6:4b:41:10
    Destination: 00:0a:e6:4b:41:10 (00:0a:e6:4b:41:10)
    Source: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22)
    Type: IP (0x0800)
    Frame check sequence: 0x89e51b83 (correct)
Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.124 (165.227.249.124)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 332
    Identification: 0x02c4 (708)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0xf825 (correct)
    Source: 165.227.249.115 (165.227.249.115)
    Destination: 165.227.249.124 (165.227.249.124)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 312
    Checksum: 0xf6a0 (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0xEC78A91A0798EEA0
    Responder cookie: 0x93C769486098031B
    Next payload: Key Exchange (4)
    Version: 1.0
    Exchange type: Identity Protection (Main Mode) (2)
    Flags
        .... ...0 = No encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x00000000
    Length: 304
    Key Exchange payload
        Next payload: Nonce (10)
        Length: 132
        Key Exchange Data
    Nonce payload
        Next payload: Private USE (130)
        Length: 24
        Nonce Data
    Unknown payload type payload
        Next payload: Private USE (130)
        Length: 24
        Payload
    Unknown payload type payload
        Next payload: Vendor ID (13)
        Length: 24
        Payload
    Vendor ID payload
        Next payload: Vendor ID (13)
        Length: 48
        Vendor ID: unknown vendor ID: 0x47BBE7C993F1FC13B4E6D0DB565C68E5...
    Vendor ID payload
        Next payload: Vendor ID (13)
        Length: 12
        Vendor ID: unknown vendor ID: 0xDA8E937880010000
    Vendor ID payload
        Next payload: NONE (0)
        Length: 12
        Vendor ID: draft-beaulieu-ike-xauth-02.txt

0000  00 0a e6 4b 41 10 00 0c 29 b1 20 22 08 00 45 00   ...KA...). "..E.
0010  01 4c 02 c4 00 00 80 11 f8 25 a5 e3 f9 73 a5 e3   .L.......%...s..
0020  f9 7c 01 f4 01 f4 01 38 f6 a0 ec 78 a9 1a 07 98   .|.....8...x....
0030  ee a0 93 c7 69 48 60 98 03 1b 04 10 02 00 00 00   ....iH`.........
0040  00 00 00 00 01 30 0a 00 00 84 ed 09 f4 59 91 cd   .....0.......Y..
0050  5c 68 0b d2 28 2a 51 6d aa 24 c0 0e 5f bf 8c 17   \h..(*Qm.$.._...
0060  9f 68 bc 8b 54 4a c1 4d ae 23 0c 68 ab 7f 3c 80   .h..TJ.M.#.h..<.
0070  c7 2e b8 4b ce 96 e3 c4 50 b3 0c 3d 61 ff 34 0f   ...K....P..=a.4.
0080  5d fb 1f 9c aa 76 a0 aa c0 bf 61 bd 09 06 f5 75   ]....v....a....u
0090  18 05 37 40 e2 9f 0d 1f 45 0f 22 a1 00 d1 ac cb   ..7@....E.".....
00a0  3d 1f f9 09 74 7c 9b 30 7b a5 00 a5 fe 4e 4b e2   =...t|.0{....NK.
00b0  ca cf ad 4c c9 b3 80 2a c5 7b 84 78 38 3b 35 66   ...L...*.{.x8;5f
00c0  10 25 b3 1d cf 91 d2 0c da 44 82 00 00 18 66 90   .%.......D....f.
00d0  ef 5c 69 c8 83 d8 9d 50 a9 c2 b6 6b 39 f1 fd 23   .\i....P...k9..#
00e0  98 10 82 00 00 18 8f 54 4b c5 af 6c 3c 59 31 c2   .......TK..l<Y1.
00f0  74 a9 e3 59 16 31 1f 19 1d 34 0d 00 00 18 53 20   t..Y.1...4....S 
0100  89 a6 76 51 38 9d 55 7a 86 87 6c bf 19 86 42 07   ..vQ8.Uz..l...B.
0110  13 cd 0d 00 00 30 47 bb e7 c9 93 f1 fc 13 b4 e6   .....0G.........
0120  d0 db 56 5c 68 e5 01 02 01 01 02 01 01 03 11 31   ..V\h..........1
0130  30 2e 31 2e 31 20 28 42 75 69 6c 64 20 31 30 29   0.1.1 (Build 10)
0140  00 00 0d 00 00 0c da 8e 93 78 80 01 00 00 00 00   .........x......
0150  00 0c 09 00 26 89 df d6 b7 12 89 e5 1b 83         ....&.........

Frame 8 (274 bytes on wire, 274 bytes captured)
    Arrival Time: Mar 19, 2004 15:57:26.762907000
    Time delta from previous packet: 0.025164000 seconds
    Time since reference or first frame: 2.125936000 seconds
    Frame Number: 8
    Packet Length: 274 bytes
    Capture Length: 274 bytes
Ethernet II, Src: 00:0a:e6:4b:41:10, Dst: 00:0c:29:b1:20:22
    Destination: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22)
    Source: 00:0a:e6:4b:41:10 (00:0a:e6:4b:41:10)
    Type: IP (0x0800)
    Frame check sequence: 0xfdb5d670 (correct)
Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.115 (165.227.249.115)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 256
    Identification: 0x0010 (16)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0x3b26 (correct)
    Source: 165.227.249.124 (165.227.249.124)
    Destination: 165.227.249.115 (165.227.249.115)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 236
    Checksum: 0xb8ed (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0xEC78A91A0798EEA0
    Responder cookie: 0x93C769486098031B
    Next payload: Key Exchange (4)
    Version: 1.0
    Exchange type: Identity Protection (Main Mode) (2)
    Flags
        .... ...0 = No encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x00000000
    Length: 228
    Key Exchange payload
        Next payload: Nonce (10)
        Length: 132
        Key Exchange Data
    Nonce payload
        Next payload: Private USE (130)
        Length: 20
        Nonce Data
    Unknown payload type payload
        Next payload: Private USE (130)
        Length: 24
        Payload
    Unknown payload type payload
        Next payload: NONE (0)
        Length: 24
        Payload

0000  00 0c 29 b1 20 22 00 0a e6 4b 41 10 08 00 45 00   ..). "...KA...E.
0010  01 00 00 10 00 00 40 11 3b 26 a5 e3 f9 7c a5 e3   ......@.;&...|..
0020  f9 73 01 f4 01 f4 00 ec b8 ed ec 78 a9 1a 07 98   .s.........x....
0030  ee a0 93 c7 69 48 60 98 03 1b 04 10 02 00 00 00   ....iH`.........
0040  00 00 00 00 00 e4 0a 00 00 84 57 00 f2 3e ae db   ..........W..>..
0050  b1 60 47 3f 35 4a 29 67 cf 7f 78 2a 31 66 73 f6   .`G?5J)g..x*1fs.
0060  1e 15 da f0 1c e0 3e 66 5f ba 37 3b 6f 9c 5c 93   ......>f_.7;o.\.
0070  69 ed 0b 38 9b 4b 4f f6 b3 b6 58 a5 d3 13 e5 e6   i..8.KO...X.....
0080  21 4f e7 20 ed bf ab 7e f0 cd 59 46 18 e9 0d 44   !O. ...~..YF...D
0090  f1 02 c8 db c2 15 56 16 0e 98 90 ce 34 cb 2f 8f   ......V.....4./.
00a0  65 7a 09 71 1e 82 d9 3f 0a 16 18 b4 a0 fa b0 3d   ez.q...?.......=
00b0  e4 84 71 13 80 74 56 72 4c 0b 30 9e 1b ee 57 76   ..q..tVrL.0...Wv
00c0  61 fd e7 ac 81 a2 59 da b5 58 82 00 00 14 a6 4a   a.....Y..X.....J
00d0  85 c5 42 70 97 e2 50 bf 5e 8f f4 b0 9b c8 82 00   ..Bp..P.^.......
00e0  00 18 53 20 89 a6 76 51 38 9d 55 7a 86 87 6c bf   ..S ..vQ8.Uz..l.
00f0  19 86 42 07 13 cd 00 00 00 18 8f 54 4b c5 af 6c   ..B........TK..l
0100  3c 59 31 c2 74 a9 e3 59 16 31 1f 19 1d 34 fd b5   <Y1.t..Y.1...4..
0110  d6 70                                             .p

Frame 9 (274 bytes on wire, 274 bytes captured)
    Arrival Time: Mar 19, 2004 15:57:27.281056000
    Time delta from previous packet: 0.518149000 seconds
    Time since reference or first frame: 2.644085000 seconds
    Frame Number: 9
    Packet Length: 274 bytes
    Capture Length: 274 bytes
Ethernet II, Src: 00:0a:e6:4b:41:10, Dst: 00:0c:29:b1:20:22
    Destination: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22)
    Source: 00:0a:e6:4b:41:10 (00:0a:e6:4b:41:10)
    Type: IP (0x0800)
    Frame check sequence: 0x3a2f154e (correct)
Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.115 (165.227.249.115)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 256
    Identification: 0x0011 (17)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0x3b25 (correct)
    Source: 165.227.249.124 (165.227.249.124)
    Destination: 165.227.249.115 (165.227.249.115)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 236
    Checksum: 0xb8ed (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0xEC78A91A0798EEA0
    Responder cookie: 0x93C769486098031B
    Next payload: Key Exchange (4)
    Version: 1.0
    Exchange type: Identity Protection (Main Mode) (2)
    Flags
        .... ...0 = No encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x00000000
    Length: 228
    Key Exchange payload
        Next payload: Nonce (10)
        Length: 132
        Key Exchange Data
    Nonce payload
        Next payload: Private USE (130)
        Length: 20
        Nonce Data
    Unknown payload type payload
        Next payload: Private USE (130)
        Length: 24
        Payload
    Unknown payload type payload
        Next payload: NONE (0)
        Length: 24
        Payload

0000  00 0c 29 b1 20 22 00 0a e6 4b 41 10 08 00 45 00   ..). "...KA...E.
0010  01 00 00 11 00 00 40 11 3b 25 a5 e3 f9 7c a5 e3   ......@.;%...|..
0020  f9 73 01 f4 01 f4 00 ec b8 ed ec 78 a9 1a 07 98   .s.........x....
0030  ee a0 93 c7 69 48 60 98 03 1b 04 10 02 00 00 00   ....iH`.........
0040  00 00 00 00 00 e4 0a 00 00 84 57 00 f2 3e ae db   ..........W..>..
0050  b1 60 47 3f 35 4a 29 67 cf 7f 78 2a 31 66 73 f6   .`G?5J)g..x*1fs.
0060  1e 15 da f0 1c e0 3e 66 5f ba 37 3b 6f 9c 5c 93   ......>f_.7;o.\.
0070  69 ed 0b 38 9b 4b 4f f6 b3 b6 58 a5 d3 13 e5 e6   i..8.KO...X.....
0080  21 4f e7 20 ed bf ab 7e f0 cd 59 46 18 e9 0d 44   !O. ...~..YF...D
0090  f1 02 c8 db c2 15 56 16 0e 98 90 ce 34 cb 2f 8f   ......V.....4./.
00a0  65 7a 09 71 1e 82 d9 3f 0a 16 18 b4 a0 fa b0 3d   ez.q...?.......=
00b0  e4 84 71 13 80 74 56 72 4c 0b 30 9e 1b ee 57 76   ..q..tVrL.0...Wv
00c0  61 fd e7 ac 81 a2 59 da b5 58 82 00 00 14 a6 4a   a.....Y..X.....J
00d0  85 c5 42 70 97 e2 50 bf 5e 8f f4 b0 9b c8 82 00   ..Bp..P.^.......
00e0  00 18 53 20 89 a6 76 51 38 9d 55 7a 86 87 6c bf   ..S ..vQ8.Uz..l.
00f0  19 86 42 07 13 cd 00 00 00 18 8f 54 4b c5 af 6c   ..B........TK..l
0100  3c 59 31 c2 74 a9 e3 59 16 31 1f 19 1d 34 3a 2f   <Y1.t..Y.1...4:/
0110  15 4e                                             .N

Frame 10 (138 bytes on wire, 138 bytes captured)
    Arrival Time: Mar 19, 2004 15:57:27.759059000
    Time delta from previous packet: 0.478003000 seconds
    Time since reference or first frame: 3.122088000 seconds
    Frame Number: 10
    Packet Length: 138 bytes
    Capture Length: 138 bytes
Ethernet II, Src: 00:0c:29:b1:20:22, Dst: 00:0a:e6:4b:41:10
    Destination: 00:0a:e6:4b:41:10 (00:0a:e6:4b:41:10)
    Source: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22)
    Type: IP (0x0800)
    Frame check sequence: 0x4d43cf3a (correct)
Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.124 (165.227.249.124)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 120
    Identification: 0x02c5 (709)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0xf8f8 (correct)
    Source: 165.227.249.115 (165.227.249.115)
    Destination: 165.227.249.124 (165.227.249.124)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 100
    Checksum: 0xb03a (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0xEC78A91A0798EEA0
    Responder cookie: 0x93C769486098031B
    Next payload: Identification (5)
    Version: 1.0
    Exchange type: Identity Protection (Main Mode) (2)
    Flags
        .... ...1 = Encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x00000000
    Length: 92
    Encrypted payload (64 bytes)

0000  00 0a e6 4b 41 10 00 0c 29 b1 20 22 08 00 45 00   ...KA...). "..E.
0010  00 78 02 c5 00 00 80 11 f8 f8 a5 e3 f9 73 a5 e3   .x...........s..
0020  f9 7c 01 f4 01 f4 00 64 b0 3a ec 78 a9 1a 07 98   .|.....d.:.x....
0030  ee a0 93 c7 69 48 60 98 03 1b 05 10 02 01 00 00   ....iH`.........
0040  00 00 00 00 00 5c 0b fb 4e c6 ca a6 09 88 22 54   .....\..N....."T
0050  4d 7d 7f ae df b5 28 e6 68 2b e5 99 2e 82 23 19   M}....(.h+....#.
0060  a7 f4 e2 86 c2 37 41 59 ef b3 46 65 79 32 c8 79   .....7AY..Fey2.y
0070  fc 6e 1a 6d 13 cd a9 aa d5 4d c0 40 3b 69 d5 a9   .n.m.....M.@;i..
0080  d8 b3 fa 8c fd d9 4d 43 cf 3a                     ......MC.:

Frame 11 (138 bytes on wire, 138 bytes captured)
    Arrival Time: Mar 19, 2004 15:57:27.760278000
    Time delta from previous packet: 0.001219000 seconds
    Time since reference or first frame: 3.123307000 seconds
    Frame Number: 11
    Packet Length: 138 bytes
    Capture Length: 138 bytes
Ethernet II, Src: 00:0c:29:b1:20:22, Dst: 00:0a:e6:4b:41:10
    Destination: 00:0a:e6:4b:41:10 (00:0a:e6:4b:41:10)
    Source: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22)
    Type: IP (0x0800)
    Frame check sequence: 0x82b94755 (correct)
Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.124 (165.227.249.124)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 120
    Identification: 0x02c6 (710)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0xf8f7 (correct)
    Source: 165.227.249.115 (165.227.249.115)
    Destination: 165.227.249.124 (165.227.249.124)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 100
    Checksum: 0xb03a (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0xEC78A91A0798EEA0
    Responder cookie: 0x93C769486098031B
    Next payload: Identification (5)
    Version: 1.0
    Exchange type: Identity Protection (Main Mode) (2)
    Flags
        .... ...1 = Encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x00000000
    Length: 92
    Encrypted payload (64 bytes)

0000  00 0a e6 4b 41 10 00 0c 29 b1 20 22 08 00 45 00   ...KA...). "..E.
0010  00 78 02 c6 00 00 80 11 f8 f7 a5 e3 f9 73 a5 e3   .x...........s..
0020  f9 7c 01 f4 01 f4 00 64 b0 3a ec 78 a9 1a 07 98   .|.....d.:.x....
0030  ee a0 93 c7 69 48 60 98 03 1b 05 10 02 01 00 00   ....iH`.........
0040  00 00 00 00 00 5c 0b fb 4e c6 ca a6 09 88 22 54   .....\..N....."T
0050  4d 7d 7f ae df b5 28 e6 68 2b e5 99 2e 82 23 19   M}....(.h+....#.
0060  a7 f4 e2 86 c2 37 41 59 ef b3 46 65 79 32 c8 79   .....7AY..Fey2.y
0070  fc 6e 1a 6d 13 cd a9 aa d5 4d c0 40 3b 69 d5 a9   .n.m.....M.@;i..
0080  d8 b3 fa 8c fd d9 82 b9 47 55                     ........GU

Frame 12 (122 bytes on wire, 122 bytes captured)
    Arrival Time: Mar 19, 2004 15:57:27.761076000
    Time delta from previous packet: 0.000798000 seconds
    Time since reference or first frame: 3.124105000 seconds
    Frame Number: 12
    Packet Length: 122 bytes
    Capture Length: 122 bytes
Ethernet II, Src: 00:0a:e6:4b:41:10, Dst: 00:0c:29:b1:20:22
    Destination: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22)
    Source: 00:0a:e6:4b:41:10 (00:0a:e6:4b:41:10)
    Type: IP (0x0800)
    Frame check sequence: 0x78a2f81e (correct)
Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.115 (165.227.249.115)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 104
    Identification: 0x0012 (18)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0x3bbc (correct)
    Source: 165.227.249.124 (165.227.249.124)
    Destination: 165.227.249.115 (165.227.249.115)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 84
    Checksum: 0xbac7 (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0xEC78A91A0798EEA0
    Responder cookie: 0x93C769486098031B
    Next payload: Identification (5)
    Version: 1.0
    Exchange type: Identity Protection (Main Mode) (2)
    Flags
        .... ...1 = Encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x00000000
    Length: 76
    Encrypted payload (48 bytes)

0000  00 0c 29 b1 20 22 00 0a e6 4b 41 10 08 00 45 00   ..). "...KA...E.
0010  00 68 00 12 00 00 40 11 3b bc a5 e3 f9 7c a5 e3   .h....@.;....|..
0020  f9 73 01 f4 01 f4 00 54 ba c7 ec 78 a9 1a 07 98   .s.....T...x....
0030  ee a0 93 c7 69 48 60 98 03 1b 05 10 02 01 00 00   ....iH`.........
0040  00 00 00 00 00 4c 85 3a 88 fb 85 f2 03 8c ab ec   .....L.:........
0050  10 de d9 e5 90 8c 70 9b e1 8a 3e 37 83 8e 3e 54   ......p...>7..>T
0060  5b 8e ed ca 6d 40 28 53 aa de b7 84 97 02 fe ba   [...m@(S........
0070  a8 51 af b2 cd ad 78 a2 f8 1e                     .Q....x...

Frame 13 (346 bytes on wire, 346 bytes captured)
    Arrival Time: Mar 19, 2004 15:57:29.886649000
    Time delta from previous packet: 2.125573000 seconds
    Time since reference or first frame: 5.249678000 seconds
    Frame Number: 13
    Packet Length: 346 bytes
    Capture Length: 346 bytes
Ethernet II, Src: 00:0c:29:b1:20:22, Dst: 00:0a:e6:4b:41:10
    Destination: 00:0a:e6:4b:41:10 (00:0a:e6:4b:41:10)
    Source: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22)
    Type: IP (0x0800)
    Frame check sequence: 0xc9b08f68 (correct)
Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.124 (165.227.249.124)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 328
    Identification: 0x02c8 (712)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0xf825 (correct)
    Source: 165.227.249.115 (165.227.249.115)
    Destination: 165.227.249.124 (165.227.249.124)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 308
    Checksum: 0xda67 (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0xEC78A91A0798EEA0
    Responder cookie: 0x93C769486098031B
    Next payload: Hash (8)
    Version: 1.0
    Exchange type: Quick Mode (32)
    Flags
        .... ...1 = Encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0xF0CE5972
    Length: 300
    Encrypted payload (272 bytes)

0000  00 0a e6 4b 41 10 00 0c 29 b1 20 22 08 00 45 00   ...KA...). "..E.
0010  01 48 02 c8 00 00 80 11 f8 25 a5 e3 f9 73 a5 e3   .H.......%...s..
0020  f9 7c 01 f4 01 f4 01 34 da 67 ec 78 a9 1a 07 98   .|.....4.g.x....
0030  ee a0 93 c7 69 48 60 98 03 1b 08 10 20 01 f0 ce   ....iH`..... ...
0040  59 72 00 00 01 2c 3b b1 c6 66 ee 16 09 d8 72 4c   Yr...,;..f....rL
0050  9c 3f 0f 19 ea 92 a8 ea a6 a1 f7 1e 6f d9 c2 17   .?..........o...
0060  21 2b 1c 8d 82 41 67 bd db 31 75 03 07 18 aa 55   !+...Ag..1u....U
0070  8a ca ab 37 16 6a f1 41 9a 2d b8 e9 65 a3 c4 b3   ...7.j.A.-..e...
0080  dc 4f ec a0 d4 a9 e5 52 a3 a7 8a 80 e0 5d 98 4a   .O.....R.....].J
0090  38 5b 39 c1 f7 96 bb a3 1a ec 70 55 69 fe 7f 23   8[9.......pUi..#
00a0  91 10 58 2c a8 8f 2e c8 b8 78 d7 ce 1a 56 f6 41   ..X,.....x...V.A
00b0  b6 f4 95 2e 1f 82 5a 00 76 1e 11 bb f7 fc 95 60   ......Z.v......`
00c0  fd 93 6d 15 f9 a1 73 5a e4 11 e3 97 8e bb 36 0a   ..m...sZ......6.
00d0  0c 3f a3 4b 0a 93 35 42 e7 a4 2e 38 22 8c b2 2f   .?.K..5B...8"../
00e0  37 55 88 f6 97 79 02 41 68 11 27 92 d4 0e 98 da   7U...y.Ah.'.....
00f0  12 f1 fd aa 6b 9e 5c e9 1e b1 cb be db 67 ad e8   ....k.\......g..
0100  fc cf d9 0c ba 9f a3 ba 9d 96 5b 6e ea f5 52 2d   ..........[n..R-
0110  f0 25 5c c1 7f 0c 97 a7 42 26 11 0c 0d 0c 59 f7   .%\.....B&....Y.
0120  52 23 91 a3 26 05 1e 8c 71 4d 33 53 80 6a 9e 8e   R#..&...qM3S.j..
0130  41 5d 38 31 92 27 ee 64 39 14 09 cf 9f 45 ed c3   A]81.'.d9....E..
0140  e6 bf ae e4 e3 4b 68 9a bf b3 82 81 ef 42 e1 e8   .....Kh......B..
0150  08 b7 56 2c ad d4 c9 b0 8f 68                     ..V,.....h

Frame 14 (346 bytes on wire, 346 bytes captured)
    Arrival Time: Mar 19, 2004 15:57:29.893252000
    Time delta from previous packet: 0.006603000 seconds
    Time since reference or first frame: 5.256281000 seconds
    Frame Number: 14
    Packet Length: 346 bytes
    Capture Length: 346 bytes
Ethernet II, Src: 00:0a:e6:4b:41:10, Dst: 00:0c:29:b1:20:22
    Destination: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22)
    Source: 00:0a:e6:4b:41:10 (00:0a:e6:4b:41:10)
    Type: IP (0x0800)
    Frame check sequence: 0xae6a07f0 (correct)
Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.115 (165.227.249.115)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 328
    Identification: 0x0013 (19)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0x3adb (correct)
    Source: 165.227.249.124 (165.227.249.124)
    Destination: 165.227.249.115 (165.227.249.115)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 308
    Checksum: 0x4b2b (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0xEC78A91A0798EEA0
    Responder cookie: 0x93C769486098031B
    Next payload: Hash (8)
    Version: 1.0
    Exchange type: Quick Mode (32)
    Flags
        .... ...1 = Encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0xF0CE5972
    Length: 300
    Encrypted payload (272 bytes)

0000  00 0c 29 b1 20 22 00 0a e6 4b 41 10 08 00 45 00   ..). "...KA...E.
0010  01 48 00 13 00 00 40 11 3a db a5 e3 f9 7c a5 e3   .H....@.:....|..
0020  f9 73 01 f4 01 f4 01 34 4b 2b ec 78 a9 1a 07 98   .s.....4K+.x....
0030  ee a0 93 c7 69 48 60 98 03 1b 08 10 20 01 f0 ce   ....iH`..... ...
0040  59 72 00 00 01 2c 6e 2f 5c 34 af ce ca 8e 01 fd   Yr...,n/\4......
0050  16 f5 e2 24 c9 f8 92 d9 5a ca 4e aa 5b bc 2a 81   ...$....Z.N.[.*.
0060  2b 67 8b ed 26 a2 d5 9d 58 9a ca 32 86 4c bf a6   +g..&...X..2.L..
0070  54 db 7b fd 7a 34 6a e0 aa 8d 86 04 bb 19 91 e9   T.{.z4j.........
0080  ae fe ca 65 5f 48 86 76 c1 c3 f2 5c d0 9b ee 19   ...e_H.v...\....
0090  af 34 59 e0 ec 7d 6f 52 6a 7b fe 9e 5c 85 66 94   .4Y..}oRj{..\.f.
00a0  81 62 b8 72 8e 11 15 19 bd 9a 1e f6 23 f2 71 98   .b.r........#.q.
00b0  6e 01 73 b8 e4 f5 a5 16 cf 0b c3 54 c1 a3 33 4a   n.s........T..3J
00c0  04 f9 48 07 c8 8b 9c db e2 a3 aa 00 6f 3f 2f 49   ..H.........o?/I
00d0  80 e4 96 cb ff ef 69 66 ec 9d 96 e3 11 c7 26 0d   ......if......&.
00e0  7f 1f 1d 50 76 71 8f a8 5a 19 70 8c d3 7a bd 70   ...Pvq..Z.p..z.p
00f0  2f dc c6 c4 1d 50 63 a5 79 ab e7 6f 3b 20 41 88   /....Pc.y..o; A.
0100  53 2c 7a 85 dd 5c 60 02 7a e0 5c 01 17 e2 06 30   S,z..\`.z.\....0
0110  f6 37 c0 e2 23 bd c9 db f0 ea 21 3a d1 a5 b6 d1   .7..#.....!:....
0120  91 b4 7f f8 25 0f c7 c1 ba 65 c9 7d 81 70 1b 8f   ....%....e.}.p..
0130  85 01 ec 6a 5f 00 e5 69 f1 03 e1 72 29 95 e7 a7   ...j_..i...r)...
0140  91 e0 0e 0d d5 96 2b e4 ac b8 d0 ad 50 a3 9d 44   ......+.....P..D
0150  f4 e8 13 29 d3 c3 ae 6a 07 f0                     ...)...j..

Frame 15 (106 bytes on wire, 106 bytes captured)
    Arrival Time: Mar 19, 2004 15:57:29.898915000
    Time delta from previous packet: 0.005663000 seconds
    Time since reference or first frame: 5.261944000 seconds
    Frame Number: 15
    Packet Length: 106 bytes
    Capture Length: 106 bytes
Ethernet II, Src: 00:0c:29:b1:20:22, Dst: 00:0a:e6:4b:41:10
    Destination: 00:0a:e6:4b:41:10 (00:0a:e6:4b:41:10)
    Source: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22)
    Type: IP (0x0800)
    Frame check sequence: 0x603188af (correct)
Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.124 (165.227.249.124)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 88
    Identification: 0x02c9 (713)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0xf914 (correct)
    Source: 165.227.249.115 (165.227.249.115)
    Destination: 165.227.249.124 (165.227.249.124)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 68
    Checksum: 0xa16c (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0xEC78A91A0798EEA0
    Responder cookie: 0x93C769486098031B
    Next payload: Hash (8)
    Version: 1.0
    Exchange type: Quick Mode (32)
    Flags
        .... ...1 = Encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0xF0CE5972
    Length: 60
    Encrypted payload (32 bytes)

0000  00 0a e6 4b 41 10 00 0c 29 b1 20 22 08 00 45 00   ...KA...). "..E.
0010  00 58 02 c9 00 00 80 11 f9 14 a5 e3 f9 73 a5 e3   .X...........s..
0020  f9 7c 01 f4 01 f4 00 44 a1 6c ec 78 a9 1a 07 98   .|.....D.l.x....
0030  ee a0 93 c7 69 48 60 98 03 1b 08 10 20 01 f0 ce   ....iH`..... ...
0040  59 72 00 00 00 3c 2f c4 62 28 01 cd e9 58 db 97   Yr...</.b(...X..
0050  f3 0c 5c c3 06 f2 9a 3b 16 c0 9f fd f9 49 f8 ce   ..\....;.....I..
0060  04 e9 11 88 b3 4b 60 31 88 af                     .....K`1..

Frame 16 (138 bytes on wire, 138 bytes captured)
    Arrival Time: Mar 19, 2004 15:57:34.878894000
    Time delta from previous packet: 4.979979000 seconds
    Time since reference or first frame: 10.241923000 seconds
    Frame Number: 16
    Packet Length: 138 bytes
    Capture Length: 138 bytes
Ethernet II, Src: 00:0c:29:b1:20:22, Dst: 00:0a:e6:4b:41:10
    Destination: 00:0a:e6:4b:41:10 (00:0a:e6:4b:41:10)
    Source: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22)
    Type: IP (0x0800)
    Frame check sequence: 0x169b1004 (correct)
Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.124 (165.227.249.124)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 120
    Identification: 0x0001 (1)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 128
    Protocol: ESP (0x32)
    Header checksum: 0xfb9b (correct)
    Source: 165.227.249.115 (165.227.249.115)
    Destination: 165.227.249.124 (165.227.249.124)
Encapsulating Security Payload
    SPI: 0xb708d9f2
    Sequence: 1
    Data (92 bytes)

0000  00 0a e6 4b 41 10 00 0c 29 b1 20 22 08 00 45 00   ...KA...). "..E.
0010  00 78 00 01 00 00 80 32 fb 9b a5 e3 f9 73 a5 e3   .x.....2.....s..
0020  f9 7c b7 08 d9 f2 00 00 00 01 d7 45 7b 4b 3c 58   .|.........E{K<X
0030  dd 17 62 ca 91 15 b2 12 83 33 2b 1c a4 3a 14 e2   ..b......3+..:..
0040  10 d5 a1 96 83 7d e2 a0 8f b3 a3 1b 66 74 59 84   .....}......ftY.
0050  b4 b5 6d 1e 16 f3 69 8a 95 40 34 a1 da 90 9b bb   ..m...i..@4.....
0060  8d 66 31 32 75 23 3e f6 20 f5 41 d9 fa 61 2c 6d   .f12u#>. .A..a,m
0070  57 6c d2 97 90 88 f4 d2 07 36 9c dc 93 97 02 3e   Wl.......6.....>
0080  de 63 a3 41 f6 73 16 9b 10 04                     .c.A.s....

Frame 17 (138 bytes on wire, 138 bytes captured)
    Arrival Time: Mar 19, 2004 15:57:34.879980000
    Time delta from previous packet: 0.001086000 seconds
    Time since reference or first frame: 10.243009000 seconds
    Frame Number: 17
    Packet Length: 138 bytes
    Capture Length: 138 bytes
Ethernet II, Src: 00:0a:e6:4b:41:10, Dst: 00:0c:29:b1:20:22
    Destination: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22)
    Source: 00:0a:e6:4b:41:10 (00:0a:e6:4b:41:10)
    Type: IP (0x0800)
    Frame check sequence: 0xeb0225f3 (correct)
Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.115 (165.227.249.115)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 120
    Identification: 0x0003 (3)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 240
    Protocol: ESP (0x32)
    Header checksum: 0x8b99 (correct)
    Source: 165.227.249.124 (165.227.249.124)
    Destination: 165.227.249.115 (165.227.249.115)
Encapsulating Security Payload
    SPI: 0x98ec5c3f
    Sequence: 2
    Data (92 bytes)

0000  00 0c 29 b1 20 22 00 0a e6 4b 41 10 08 00 45 00   ..). "...KA...E.
0010  00 78 00 03 00 00 f0 32 8b 99 a5 e3 f9 7c a5 e3   .x.....2.....|..
0020  f9 73 98 ec 5c 3f 00 00 00 02 71 1f 53 40 6d 67   .s..\?....q.S@mg
0030  89 e7 70 4e 87 a0 3e d2 9d 98 9a 4a 24 b5 4e 79   ..pN..>....J$.Ny
0040  d2 7d 2e f6 cd 44 de d2 c1 fa 02 51 f9 cf f7 89   .}...D.....Q....
0050  5a 72 a8 08 a0 d3 af ed 63 e5 94 01 bf b0 d7 e7   Zr......c.......
0060  a3 cf da 0c b6 87 e0 b3 4d a6 e1 bb f1 fc a4 ad   ........M.......
0070  3c 7d ff 5a 50 c6 2b 79 81 ca a2 26 68 e1 5e c8   <}.ZP.+y...&h.^.
0080  9c ff 38 5d d1 af eb 02 25 f3                     ..8]....%.

Frame 18 (138 bytes on wire, 138 bytes captured)
    Arrival Time: Mar 19, 2004 15:57:35.877714000
    Time delta from previous packet: 0.997734000 seconds
    Time since reference or first frame: 11.240743000 seconds
    Frame Number: 18
    Packet Length: 138 bytes
    Capture Length: 138 bytes
Ethernet II, Src: 00:0c:29:b1:20:22, Dst: 00:0a:e6:4b:41:10
    Destination: 00:0a:e6:4b:41:10 (00:0a:e6:4b:41:10)
    Source: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22)
    Type: IP (0x0800)
    Frame check sequence: 0xc7a9adfe (correct)
Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.124 (165.227.249.124)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 120
    Identification: 0x0002 (2)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 128
    Protocol: ESP (0x32)
    Header checksum: 0xfb9a (correct)
    Source: 165.227.249.115 (165.227.249.115)
    Destination: 165.227.249.124 (165.227.249.124)
Encapsulating Security Payload
    SPI: 0xb708d9f2
    Sequence: 2
    Data (92 bytes)

0000  00 0a e6 4b 41 10 00 0c 29 b1 20 22 08 00 45 00   ...KA...). "..E.
0010  00 78 00 02 00 00 80 32 fb 9a a5 e3 f9 73 a5 e3   .x.....2.....s..
0020  f9 7c b7 08 d9 f2 00 00 00 02 41 d9 fa 61 2c 6d   .|........A..a,m
0030  57 6c d2 97 90 88 f4 d2 07 36 8f a0 f8 1e 1a 4c   Wl.......6.....L
0040  1a db 4f 54 2a 05 83 cc 7d f0 13 98 71 c2 b0 44   ..OT*...}...q..D
0050  5d af 38 83 47 46 9e a9 74 bb 43 15 1a 01 17 f0   ].8.GF..t.C.....
0060  39 56 b8 73 1b 26 9f c2 03 81 45 df 6d 99 bc 00   9V.s.&....E.m...
0070  01 f3 d0 c6 d8 2a 30 fe d1 77 f6 a3 6d 2c 5c cd   .....*0..w..m,\.
0080  7a 01 fb 92 57 43 c7 a9 ad fe                     z...WC....

Frame 19 (138 bytes on wire, 138 bytes captured)
    Arrival Time: Mar 19, 2004 15:57:35.878347000
    Time delta from previous packet: 0.000633000 seconds
    Time since reference or first frame: 11.241376000 seconds
    Frame Number: 19
    Packet Length: 138 bytes
    Capture Length: 138 bytes
Ethernet II, Src: 00:0a:e6:4b:41:10, Dst: 00:0c:29:b1:20:22
    Destination: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22)
    Source: 00:0a:e6:4b:41:10 (00:0a:e6:4b:41:10)
    Type: IP (0x0800)
    Frame check sequence: 0xf4017699 (correct)
Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.115 (165.227.249.115)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 120
    Identification: 0x0004 (4)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 240
    Protocol: ESP (0x32)
    Header checksum: 0x8b98 (correct)
    Source: 165.227.249.124 (165.227.249.124)
    Destination: 165.227.249.115 (165.227.249.115)
Encapsulating Security Payload
    SPI: 0x98ec5c3f
    Sequence: 3
    Data (92 bytes)

0000  00 0c 29 b1 20 22 00 0a e6 4b 41 10 08 00 45 00   ..). "...KA...E.
0010  00 78 00 04 00 00 f0 32 8b 98 a5 e3 f9 7c a5 e3   .x.....2.....|..
0020  f9 73 98 ec 5c 3f 00 00 00 03 95 41 65 92 aa 35   .s..\?.....Ae..5
0030  30 06 06 61 8f ca cd f4 2a ed 88 3b 62 ae c5 89   0..a....*..;b...
0040  79 4d 31 c0 d3 59 b3 f2 8d 03 b9 dd 92 01 80 b9   yM1..Y..........
0050  e7 22 45 03 50 7c 38 ea 5d f9 07 13 14 21 07 89   ."E.P|8.]....!..
0060  f8 e5 37 60 a9 ce c5 5d e7 7d 9b fa 19 d0 d4 2c   ..7`...].}.....,
0070  76 5e 59 6f cd a1 96 75 60 dd 40 4a d2 e6 93 47   v^Yo...u`.@J...G
0080  2a 2c ec 47 c0 aa f4 01 76 99                     *,.G....v.