Frame 1 (166 bytes on wire, 166 bytes captured) Arrival Time: Oct 2, 2003 09:59:24.914339000 Time delta from previous packet: 0.000000000 seconds Time relative to first packet: 0.000000000 seconds Frame Number: 1 Packet Length: 166 bytes Capture Length: 166 bytes Ethernet II, Src: 00:0c:29:b1:20:22, Dst: 00:09:5b:2b:a8:d7 Destination: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Source: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22) Type: IP (0x0800) Trailer: 6A58828B Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.125 (165.227.249.125) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 148 Identification: 0x0052 (82) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xfb4e (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.125 (165.227.249.125) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 128 Checksum: 0xc074 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x427D185451D92011 Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 120 Security Association payload Next payload: Vendor ID (13) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 40 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 32 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (3600) Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: unknown vendor ID: 0x4485152D18B6BBCD0BE8A8469579DDCC Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: unknown vendor ID: 0x90CB80913EBB696E086381B5EC427B1F 0000 00 09 5b 2b a8 d7 00 0c 29 b1 20 22 08 00 45 00 ..[+....). "..E. 0010 00 94 00 52 00 00 80 11 fb 4e a5 e3 f9 73 a5 e3 ...R.....N...s.. 0020 f9 7d 01 f4 01 f4 00 80 c0 74 42 7d 18 54 51 d9 .}.......tB}.TQ. 0030 20 11 00 00 00 00 00 00 00 00 01 10 02 00 00 00 ............... 0040 00 00 00 00 00 78 0d 00 00 34 00 00 00 01 00 00 .....x...4...... 0050 00 01 00 00 00 28 01 01 00 01 00 00 00 20 01 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 04 00 02 80 03 ................ 0070 00 01 80 0b 00 01 80 0c 0e 10 0d 00 00 14 44 85 ..............D. 0080 15 2d 18 b6 bb cd 0b e8 a8 46 95 79 dd cc 00 00 .-.......F.y.... 0090 00 14 90 cb 80 91 3e bb 69 6e 08 63 81 b5 ec 42 ......>.in.c...B 00a0 7b 1f 6a 58 82 8b {.jX.. Frame 2 (126 bytes on wire, 126 bytes captured) Arrival Time: Oct 2, 2003 09:59:24.917113000 Time delta from previous packet: 0.002774000 seconds Time relative to first packet: 0.002774000 seconds Frame Number: 2 Packet Length: 126 bytes Capture Length: 126 bytes Ethernet II, Src: 00:09:5b:2b:a8:d7, Dst: 00:0c:29:b1:20:22 Destination: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22) Source: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Type: IP (0x0800) Trailer: CD4C8154 Internet Protocol, Src Addr: 165.227.249.125 (165.227.249.125), Dst Addr: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 108 Identification: 0x013b (315) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3a8e (correct) Source: 165.227.249.125 (165.227.249.125) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 88 Checksum: 0xf088 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x427D185451D92011 Responder cookie: 0xD8F7E2BCD1A35DE0 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 80 Security Association payload Next payload: NONE (0) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 40 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 32 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (3600) 0000 00 0c 29 b1 20 22 00 09 5b 2b a8 d7 08 00 45 00 ..). "..[+....E. 0010 00 6c 01 3b 00 00 40 11 3a 8e a5 e3 f9 7d a5 e3 .l.;..@.:....}.. 0020 f9 73 01 f4 01 f4 00 58 f0 88 42 7d 18 54 51 d9 .s.....X..B}.TQ. 0030 20 11 d8 f7 e2 bc d1 a3 5d e0 01 10 02 00 00 00 .......]....... 0040 00 00 00 00 00 50 00 00 00 34 00 00 00 01 00 00 .....P...4...... 0050 00 01 00 00 00 28 01 01 00 01 00 00 00 20 01 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 04 00 02 80 03 ................ 0070 00 01 80 0b 00 01 80 0c 0e 10 cd 4c 81 54 ...........L.T Frame 3 (302 bytes on wire, 302 bytes captured) Arrival Time: Oct 2, 2003 09:59:26.910961000 Time delta from previous packet: 1.993848000 seconds Time relative to first packet: 1.996622000 seconds Frame Number: 3 Packet Length: 302 bytes Capture Length: 302 bytes Ethernet II, Src: 00:0c:29:b1:20:22, Dst: 00:09:5b:2b:a8:d7 Destination: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Source: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22) Type: IP (0x0800) Trailer: E80F380E Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.125 (165.227.249.125) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 284 Identification: 0x0053 (83) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xfac5 (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.125 (165.227.249.125) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 264 Checksum: 0x3045 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x427D185451D92011 Responder cookie: 0xD8F7E2BCD1A35DE0 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 256 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: Vendor ID (13) Length: 24 Nonce Data Vendor ID payload Next payload: Vendor ID (13) Length: 48 Vendor ID: unknown vendor ID: 0x47BBE7C993F1FC13B4E6D0DB565C68E5... Vendor ID payload Next payload: Vendor ID (13) Length: 12 Vendor ID: unknown vendor ID: 0xDA8E937880010000 Vendor ID payload Next payload: NONE (0) Length: 12 Vendor ID: unknown vendor ID: 0x09002689DFD6B712 0000 00 09 5b 2b a8 d7 00 0c 29 b1 20 22 08 00 45 00 ..[+....). "..E. 0010 01 1c 00 53 00 00 80 11 fa c5 a5 e3 f9 73 a5 e3 ...S.........s.. 0020 f9 7d 01 f4 01 f4 01 08 30 45 42 7d 18 54 51 d9 .}......0EB}.TQ. 0030 20 11 d8 f7 e2 bc d1 a3 5d e0 04 10 02 00 00 00 .......]....... 0040 00 00 00 00 01 00 0a 00 00 84 7a 6d b0 57 7a dc ..........zm.Wz. 0050 a9 f0 90 71 47 16 46 aa 3d 3b e8 9b 01 1a 01 6f ...qG.F.=;.....o 0060 89 a0 95 0f 47 b5 79 a9 0f 5f 44 03 76 67 eb e0 ....G.y.._D.vg.. 0070 03 62 cb 44 c6 45 eb cd 6a 32 54 9c 62 7d 93 30 .b.D.E..j2T.b}.0 0080 7e 5c da 0f 9f eb cb 43 9f f2 46 23 b4 a4 e7 ae ~\.....C..F#.... 0090 a8 9f 60 46 9b 9d 85 7c b6 90 a6 71 9a a6 e9 1f ..`F...|...q.... 00a0 a9 4e 0e 0f 52 a5 c4 3a 6c 46 66 2d 37 9a 61 67 .N..R..:lFf-7.ag 00b0 70 f1 2d 7e 87 c1 c5 e1 ee cc 89 40 be 54 cb fb p.-~.......@.T.. 00c0 d2 79 76 4d f5 db 65 07 b7 85 0d 00 00 18 d0 1d .yvM..e......... 00d0 4e 2f 4f f9 45 5d 74 f5 1c 2e 6a ca d5 4d 3e fb N/O.E]t...j..M>. 00e0 e4 d2 0d 00 00 30 47 bb e7 c9 93 f1 fc 13 b4 e6 .....0G......... 00f0 d0 db 56 5c 68 e5 01 02 01 01 02 01 01 03 11 31 ..V\h..........1 0100 30 2e 31 2e 31 20 28 42 75 69 6c 64 20 31 30 29 0.1.1 (Build 10) 0110 00 00 0d 00 00 0c da 8e 93 78 80 01 00 00 00 00 .........x...... 0120 00 0c 09 00 26 89 df d6 b7 12 e8 0f 38 0e ....&.......8. Frame 4 (218 bytes on wire, 218 bytes captured) Arrival Time: Oct 2, 2003 09:59:27.314430000 Time delta from previous packet: 0.403469000 seconds Time relative to first packet: 2.400091000 seconds Frame Number: 4 Packet Length: 218 bytes Capture Length: 218 bytes Ethernet II, Src: 00:09:5b:2b:a8:d7, Dst: 00:0c:29:b1:20:22 Destination: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22) Source: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Type: IP (0x0800) Trailer: 45F70909 Internet Protocol, Src Addr: 165.227.249.125 (165.227.249.125), Dst Addr: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 200 Identification: 0x013c (316) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3a31 (correct) Source: 165.227.249.125 (165.227.249.125) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 180 Checksum: 0x10c1 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x427D185451D92011 Responder cookie: 0xD8F7E2BCD1A35DE0 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 172 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 12 Nonce Data 0000 00 0c 29 b1 20 22 00 09 5b 2b a8 d7 08 00 45 00 ..). "..[+....E. 0010 00 c8 01 3c 00 00 40 11 3a 31 a5 e3 f9 7d a5 e3 ...<..@.:1...}.. 0020 f9 73 01 f4 01 f4 00 b4 10 c1 42 7d 18 54 51 d9 .s........B}.TQ. 0030 20 11 d8 f7 e2 bc d1 a3 5d e0 04 10 02 00 00 00 .......]....... 0040 00 00 00 00 00 ac 0a 00 00 84 dc 17 2d c8 c6 59 ............-..Y 0050 2a 34 77 8a ae 59 69 33 50 b3 bf 52 96 a5 b0 04 *4w..Yi3P..R.... 0060 44 01 ad 4b fa b8 9e 61 93 0c d2 0d ca 45 06 85 D..K...a.....E.. 0070 e2 73 97 55 44 4a 79 04 2c 30 86 35 5c 0e 17 11 .s.UDJy.,0.5\... 0080 b1 fd 0a dc a2 8a 70 20 ad df 62 ca d3 47 0b 1c ......p ..b..G.. 0090 fb c3 73 cf c2 d3 a7 0e d4 32 e4 10 9e 7f a1 c9 ..s......2...... 00a0 fa 52 81 ad 8e 26 3e 60 23 c0 bc 2a fe 35 3f a5 .R...&>`#..*.5?. 00b0 cf 8e 4c 37 80 c4 12 e0 60 69 4c f0 a2 42 a0 ec ..L7....`iL..B.. 00c0 96 48 d6 31 06 33 32 02 2c 05 00 00 00 0c bf c3 .H.1.32.,....... 00d0 c3 5e 84 0d 76 08 45 f7 09 09 .^..v.E... Frame 5 (138 bytes on wire, 138 bytes captured) Arrival Time: Oct 2, 2003 09:59:29.072276000 Time delta from previous packet: 1.757846000 seconds Time relative to first packet: 4.157937000 seconds Frame Number: 5 Packet Length: 138 bytes Capture Length: 138 bytes Ethernet II, Src: 00:0c:29:b1:20:22, Dst: 00:09:5b:2b:a8:d7 Destination: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Source: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22) Type: IP (0x0800) Trailer: EFC863B2 Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.125 (165.227.249.125) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0055 (85) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xfb67 (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.125 (165.227.249.125) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 100 Checksum: 0x0af6 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x427D185451D92011 Responder cookie: 0xD8F7E2BCD1A35DE0 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 92 Encrypted payload (64 bytes) 0000 00 09 5b 2b a8 d7 00 0c 29 b1 20 22 08 00 45 00 ..[+....). "..E. 0010 00 78 00 55 00 00 80 11 fb 67 a5 e3 f9 73 a5 e3 .x.U.....g...s.. 0020 f9 7d 01 f4 01 f4 00 64 0a f6 42 7d 18 54 51 d9 .}.....d..B}.TQ. 0030 20 11 d8 f7 e2 bc d1 a3 5d e0 05 10 02 01 00 00 .......]....... 0040 00 00 00 00 00 5c 0c 11 d9 bc 84 07 c7 d3 40 c3 .....\........@. 0050 c1 c0 c0 3f eb 51 de 73 68 a4 fe 19 91 1e c5 4d ...?.Q.sh......M 0060 24 f8 ff dd 59 62 61 e2 7d d2 b3 70 76 35 70 de $...Yba.}..pv5p. 0070 f5 8d 6a 66 89 f5 6e 3c bc fe 33 65 33 c3 a8 01 ..jf..n<..3e3... 0080 db 2b f9 28 85 ba ef c8 63 b2 .+.(....c. Frame 6 (114 bytes on wire, 114 bytes captured) Arrival Time: Oct 2, 2003 09:59:29.564837000 Time delta from previous packet: 0.492561000 seconds Time relative to first packet: 4.650498000 seconds Frame Number: 6 Packet Length: 114 bytes Capture Length: 114 bytes Ethernet II, Src: 00:09:5b:2b:a8:d7, Dst: 00:0c:29:b1:20:22 Destination: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22) Source: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Type: IP (0x0800) Trailer: B8875989 Internet Protocol, Src Addr: 165.227.249.125 (165.227.249.125), Dst Addr: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0x013d (317) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3a98 (correct) Source: 165.227.249.125 (165.227.249.125) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 76 Checksum: 0xf969 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x427D185451D92011 Responder cookie: 0xD8F7E2BCD1A35DE0 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 68 Encrypted payload (40 bytes) 0000 00 0c 29 b1 20 22 00 09 5b 2b a8 d7 08 00 45 00 ..). "..[+....E. 0010 00 60 01 3d 00 00 40 11 3a 98 a5 e3 f9 7d a5 e3 .`.=..@.:....}.. 0020 f9 73 01 f4 01 f4 00 4c f9 69 42 7d 18 54 51 d9 .s.....L.iB}.TQ. 0030 20 11 d8 f7 e2 bc d1 a3 5d e0 05 10 02 01 00 00 .......]....... 0040 00 00 00 00 00 44 3d ae 66 97 9f 30 b2 f4 3d 4f .....D=.f..0..=O 0050 c3 28 51 43 a4 73 f9 c8 1b 0f 57 fc bc b6 c8 b1 .(QC.s....W..... 0060 47 69 3a 72 69 29 61 8d 8f 5e f8 af 50 8a b8 87 Gi:ri)a..^..P... 0070 59 89 Y. Frame 7 (338 bytes on wire, 338 bytes captured) Arrival Time: Oct 2, 2003 09:59:31.599655000 Time delta from previous packet: 2.034818000 seconds Time relative to first packet: 6.685316000 seconds Frame Number: 7 Packet Length: 338 bytes Capture Length: 338 bytes Ethernet II, Src: 00:0c:29:b1:20:22, Dst: 00:09:5b:2b:a8:d7 Destination: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Source: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22) Type: IP (0x0800) Trailer: 8F839C67 Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.125 (165.227.249.125) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 320 Identification: 0x0057 (87) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xfa9d (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.125 (165.227.249.125) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 300 Checksum: 0xe4d4 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x427D185451D92011 Responder cookie: 0xD8F7E2BCD1A35DE0 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xD2181340 Length: 292 Encrypted payload (264 bytes) 0000 00 09 5b 2b a8 d7 00 0c 29 b1 20 22 08 00 45 00 ..[+....). "..E. 0010 01 40 00 57 00 00 80 11 fa 9d a5 e3 f9 73 a5 e3 .@.W.........s.. 0020 f9 7d 01 f4 01 f4 01 2c e4 d4 42 7d 18 54 51 d9 .}.....,..B}.TQ. 0030 20 11 d8 f7 e2 bc d1 a3 5d e0 08 10 20 01 d2 18 .......]... ... 0040 13 40 00 00 01 24 aa 53 2f c2 d7 95 fb 47 5b a9 .@...$.S/....G[. 0050 92 b4 a2 1c ca fe b9 bd b9 3f 49 36 d5 a9 54 66 .........?I6..Tf 0060 ea fc 0f 00 af e2 82 59 0f 9c 95 bd 44 10 40 6a .......Y....D.@j 0070 6c 38 25 07 2c 32 95 bb a8 5b a8 fe 78 52 ca 79 l8%.,2...[..xR.y 0080 88 2d 82 fd 6b 51 71 d3 7c b6 59 16 ec d1 94 48 .-..kQq.|.Y....H 0090 e0 7d 0b 24 15 2b b4 2f 48 7c b8 23 b2 c8 6d 37 .}.$.+./H|.#..m7 00a0 b0 a5 31 62 87 54 9d 46 3b 29 b7 3a 79 0e 1a 4b ..1b.T.F;).:y..K 00b0 fa 2e 49 9e f9 6d 02 7b e4 a7 6f b5 a3 9f 9f 29 ..I..m.{..o....) 00c0 25 e4 49 32 0b 5c 53 8b 8c 40 52 03 5b c1 dc 57 %.I2.\S..@R.[..W 00d0 4b 00 b4 94 43 6a 9e 37 ac 67 d3 6e 46 ba a4 66 K...Cj.7.g.nF..f 00e0 96 c3 ed b5 8a 73 b3 97 b6 29 cb 96 69 b6 f7 3d .....s...)..i..= 00f0 03 6f ca db ed e3 3d d3 a7 58 10 96 a3 fe 82 2b .o....=..X.....+ 0100 46 77 1f 90 c1 a6 d6 9b 7a ba 84 d5 84 96 58 68 Fw......z.....Xh 0110 fe 1b 21 f2 cf 27 a1 53 41 8c 36 e6 22 3f a4 ec ..!..'.SA.6."?.. 0120 fa cc bc 27 6f 61 30 3c 9e 2b 76 10 6f 42 c9 af ...'oa0<.+v.oB.. 0130 9d 22 5e 69 37 2f 1a e0 94 24 97 c3 06 5e 40 8e ."^i7/...$...^@. 0140 db 55 f4 62 7f 51 88 ef e6 61 b9 68 36 a7 8f 83 .U.b.Q...a.h6... 0150 9c 67 .g Frame 8 (322 bytes on wire, 322 bytes captured) Arrival Time: Oct 2, 2003 09:59:32.005658000 Time delta from previous packet: 0.406003000 seconds Time relative to first packet: 7.091319000 seconds Frame Number: 8 Packet Length: 322 bytes Capture Length: 322 bytes Ethernet II, Src: 00:09:5b:2b:a8:d7, Dst: 00:0c:29:b1:20:22 Destination: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22) Source: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Type: IP (0x0800) Trailer: 05D7E942 Internet Protocol, Src Addr: 165.227.249.125 (165.227.249.125), Dst Addr: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 304 Identification: 0x013e (318) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x39c7 (correct) Source: 165.227.249.125 (165.227.249.125) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 284 Checksum: 0xa3fb (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x427D185451D92011 Responder cookie: 0xD8F7E2BCD1A35DE0 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xD2181340 Length: 276 Encrypted payload (248 bytes) 0000 00 0c 29 b1 20 22 00 09 5b 2b a8 d7 08 00 45 00 ..). "..[+....E. 0010 01 30 01 3e 00 00 40 11 39 c7 a5 e3 f9 7d a5 e3 .0.>..@.9....}.. 0020 f9 73 01 f4 01 f4 01 1c a3 fb 42 7d 18 54 51 d9 .s........B}.TQ. 0030 20 11 d8 f7 e2 bc d1 a3 5d e0 08 10 20 01 d2 18 .......]... ... 0040 13 40 00 00 01 14 d7 d5 9f 11 cc 76 11 27 a1 bb .@.........v.'.. 0050 a4 72 55 e3 68 0e 01 d8 97 4b 95 e7 14 0a 2b fe .rU.h....K....+. 0060 80 81 a6 6b 2b aa ec 1a 3e 7d e5 14 ea 85 b5 1c ...k+...>}...... 0070 bf d4 6d 71 0b 61 0d 72 04 50 c0 af 96 fa 4c 81 ..mq.a.r.P....L. 0080 ef 36 78 5d b9 fc 34 8e 54 af 36 2b f8 3f 4e 97 .6x]..4.T.6+.?N. 0090 95 87 20 ea df 98 86 4d 83 31 88 93 40 82 1b 94 .. ....M.1..@... 00a0 9c de 2c e7 df 61 57 c7 d3 55 f3 03 76 e0 e3 b0 ..,..aW..U..v... 00b0 38 2e e4 28 67 a6 6e cb b1 73 e4 ec ce 7e 92 92 8..(g.n..s...~.. 00c0 f6 e4 4c e3 80 82 09 27 b6 64 0b 21 ba c5 1d 38 ..L....'.d.!...8 00d0 60 52 c5 fa f9 60 a9 31 7b 27 0d 0d da 1f ad 47 `R...`.1{'.....G 00e0 25 d6 dc 45 d1 06 6f 9c b0 b3 34 57 f1 ef 57 f7 %..E..o...4W..W. 00f0 0c 3f df 99 c8 65 cc c2 85 4d c6 04 d1 89 cf e4 .?...e...M...... 0100 f8 3f 0e 8b 3b 41 36 78 97 aa 14 81 fa e2 d5 56 .?..;A6x.......V 0110 7f 5e a9 b1 ef 31 76 f5 c3 8d df 79 52 c1 22 7a .^...1v....yR."z 0120 dc 07 14 a4 58 cb e1 35 70 91 d7 0a eb c5 02 8b ....X..5p....... 0130 cf 37 e4 9e 7a bd 0e 0f 84 e2 9f 72 63 7c 05 d7 .7..z......rc|.. 0140 e9 42 .B Frame 9 (98 bytes on wire, 98 bytes captured) Arrival Time: Oct 2, 2003 09:59:32.011023000 Time delta from previous packet: 0.005365000 seconds Time relative to first packet: 7.096684000 seconds Frame Number: 9 Packet Length: 98 bytes Capture Length: 98 bytes Ethernet II, Src: 00:0c:29:b1:20:22, Dst: 00:09:5b:2b:a8:d7 Destination: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Source: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22) Type: IP (0x0800) Trailer: 8758564F Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.125 (165.227.249.125) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 80 Identification: 0x0059 (89) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xfb8b (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.125 (165.227.249.125) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 60 Checksum: 0x805a (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x427D185451D92011 Responder cookie: 0xD8F7E2BCD1A35DE0 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xD2181340 Length: 52 Encrypted payload (24 bytes) 0000 00 09 5b 2b a8 d7 00 0c 29 b1 20 22 08 00 45 00 ..[+....). "..E. 0010 00 50 00 59 00 00 80 11 fb 8b a5 e3 f9 73 a5 e3 .P.Y.........s.. 0020 f9 7d 01 f4 01 f4 00 3c 80 5a 42 7d 18 54 51 d9 .}.....<.ZB}.TQ. 0030 20 11 d8 f7 e2 bc d1 a3 5d e0 08 10 20 01 d2 18 .......]... ... 0040 13 40 00 00 00 34 00 07 ea 00 35 e4 4e 6b aa b9 .@...4....5.Nk.. 0050 1b b1 b2 de ff 1b 6a 7e 6a e4 af de 0a ea 87 58 ......j~j......X 0060 56 4f VO Frame 10 (130 bytes on wire, 130 bytes captured) Arrival Time: Oct 2, 2003 09:59:34.935448000 Time delta from previous packet: 2.924425000 seconds Time relative to first packet: 10.021109000 seconds Frame Number: 10 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:0c:29:b1:20:22, Dst: 00:09:5b:2b:a8:d7 Destination: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Source: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22) Type: IP (0x0800) Trailer: 8B8CF831 Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.125 (165.227.249.125) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0001 (1) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: ESP (0x32) Header checksum: 0xfba2 (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.125 (165.227.249.125) Encapsulating Security Payload SPI: 0xc8835a21 Sequence: 0x00000001 Data (84 bytes) 0000 00 09 5b 2b a8 d7 00 0c 29 b1 20 22 08 00 45 00 ..[+....). "..E. 0010 00 70 00 01 00 00 80 32 fb a2 a5 e3 f9 73 a5 e3 .p.....2.....s.. 0020 f9 7d c8 83 5a 21 00 00 00 01 2c 88 62 a0 6a 0e .}..Z!....,.b.j. 0030 57 42 26 41 e5 9f 4d c8 6f be 82 ef 1c 2c 8d 21 WB&A..M.o....,.! 0040 b0 c4 ca 1d 8f ed b2 10 52 67 ed 98 97 73 fa 01 ........Rg...s.. 0050 03 a1 cd f9 86 fb 2c 61 32 06 3b 8b e1 d3 53 a4 ......,a2.;...S. 0060 d9 04 bd 9a c0 04 3a b1 55 f6 4d 04 2a a8 e1 e6 ......:.U.M.*... 0070 1b c3 4f 4e b4 2c 66 fa 2d 48 61 5a 48 71 8b 8c ..ON.,f.-HaZHq.. 0080 f8 31 .1 Frame 11 (130 bytes on wire, 130 bytes captured) Arrival Time: Oct 2, 2003 09:59:34.937038000 Time delta from previous packet: 0.001590000 seconds Time relative to first packet: 10.022699000 seconds Frame Number: 11 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:09:5b:2b:a8:d7, Dst: 00:0c:29:b1:20:22 Destination: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22) Source: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Type: IP (0x0800) Trailer: 11225A1E Internet Protocol, Src Addr: 165.227.249.125 (165.227.249.125), Dst Addr: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x2ca5 (11429) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 30 Protocol: ESP (0x32) Header checksum: 0x30ff (correct) Source: 165.227.249.125 (165.227.249.125) Destination: 165.227.249.115 (165.227.249.115) Encapsulating Security Payload SPI: 0x3f9185aa Sequence: 0x00000001 Data (84 bytes) 0000 00 0c 29 b1 20 22 00 09 5b 2b a8 d7 08 00 45 00 ..). "..[+....E. 0010 00 70 2c a5 00 00 1e 32 30 ff a5 e3 f9 7d a5 e3 .p,....20....}.. 0020 f9 73 3f 91 85 aa 00 00 00 01 b5 2b d5 26 03 34 .s?........+.&.4 0030 20 4c 7b 8c 46 4d a9 b0 6e af b1 09 e0 62 82 3a L{.FM..n....b.: 0040 7d f1 8c 23 5b 7b 7f 80 a8 b1 4c 24 b8 22 31 ad }..#[{....L$."1. 0050 40 e0 0d 28 5a a0 ff b3 cc e1 01 4d c6 0b c9 5a @..(Z......M...Z 0060 d9 b6 93 98 33 30 32 a6 4a 81 db ef 3f e4 db 8d ....302.J...?... 0070 94 83 13 95 30 55 cf 20 06 64 b3 c6 33 be 11 22 ....0U. .d..3.." 0080 5a 1e Z. Frame 12 (130 bytes on wire, 130 bytes captured) Arrival Time: Oct 2, 2003 09:59:35.930623000 Time delta from previous packet: 0.993585000 seconds Time relative to first packet: 11.016284000 seconds Frame Number: 12 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:0c:29:b1:20:22, Dst: 00:09:5b:2b:a8:d7 Destination: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Source: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22) Type: IP (0x0800) Trailer: 90A9F041 Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.125 (165.227.249.125) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0002 (2) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: ESP (0x32) Header checksum: 0xfba1 (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.125 (165.227.249.125) Encapsulating Security Payload SPI: 0xc8835a21 Sequence: 0x00000002 Data (84 bytes) 0000 00 09 5b 2b a8 d7 00 0c 29 b1 20 22 08 00 45 00 ..[+....). "..E. 0010 00 70 00 02 00 00 80 32 fb a1 a5 e3 f9 73 a5 e3 .p.....2.....s.. 0020 f9 7d c8 83 5a 21 00 00 00 02 4d 04 2a a8 e1 e6 .}..Z!....M.*... 0030 1b c3 8f 46 88 72 b2 50 6b e2 a4 d4 bc a1 77 d9 ...F.r.Pk.....w. 0040 72 1b 51 c3 53 c2 c1 fe 31 79 b6 9a 67 61 d1 02 r.Q.S...1y..ga.. 0050 7c 4a cc 5b 7f 80 89 fe 51 da 8c 22 97 07 86 24 |J.[....Q.."...$ 0060 04 27 63 6d 45 fc 88 0b c0 c1 ed 26 a1 8e a8 ef .'cmE......&.... 0070 80 aa 67 ac d5 78 8b d6 4e 4f be 8c b6 62 90 a9 ..g..x..NO...b.. 0080 f0 41 .A Frame 13 (130 bytes on wire, 130 bytes captured) Arrival Time: Oct 2, 2003 09:59:35.931907000 Time delta from previous packet: 0.001284000 seconds Time relative to first packet: 11.017568000 seconds Frame Number: 13 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:09:5b:2b:a8:d7, Dst: 00:0c:29:b1:20:22 Destination: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22) Source: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Type: IP (0x0800) Trailer: 8F53448B Internet Protocol, Src Addr: 165.227.249.125 (165.227.249.125), Dst Addr: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x4157 (16727) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 30 Protocol: ESP (0x32) Header checksum: 0x1c4d (correct) Source: 165.227.249.125 (165.227.249.125) Destination: 165.227.249.115 (165.227.249.115) Encapsulating Security Payload SPI: 0x3f9185aa Sequence: 0x00000002 Data (84 bytes) 0000 00 0c 29 b1 20 22 00 09 5b 2b a8 d7 08 00 45 00 ..). "..[+....E. 0010 00 70 41 57 00 00 1e 32 1c 4d a5 e3 f9 7d a5 e3 .pAW...2.M...}.. 0020 f9 73 3f 91 85 aa 00 00 00 02 db ef 3f e4 db 8d .s?.........?... 0030 94 83 ce 15 a4 4e db 69 b0 0b a1 8d 82 98 07 c3 .....N.i........ 0040 57 91 96 78 57 67 96 09 34 02 e1 24 e1 93 1a 88 W..xWg..4..$.... 0050 80 3a 83 66 0e 0a 7e 95 b9 58 fe b9 54 10 42 80 .:.f..~..X..T.B. 0060 10 f4 f5 42 80 5c 37 57 cf 0f 8f 60 d5 aa 77 e7 ...B.\7W...`..w. 0070 38 15 d9 d2 f1 6b 56 46 b6 3f 26 06 84 14 8f 53 8....kVF.?&....S 0080 44 8b D. Frame 14 (322 bytes on wire, 322 bytes captured) Arrival Time: Oct 2, 2003 09:59:36.452695000 Time delta from previous packet: 0.520788000 seconds Time relative to first packet: 11.538356000 seconds Frame Number: 14 Packet Length: 322 bytes Capture Length: 322 bytes Ethernet II, Src: 00:09:5b:2b:a8:d7, Dst: 00:0c:29:b1:20:22 Destination: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22) Source: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Type: IP (0x0800) Trailer: 992881E2 Internet Protocol, Src Addr: 165.227.249.125 (165.227.249.125), Dst Addr: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 304 Identification: 0x0140 (320) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x39c5 (correct) Source: 165.227.249.125 (165.227.249.125) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 284 Checksum: 0xa3fb (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x427D185451D92011 Responder cookie: 0xD8F7E2BCD1A35DE0 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xD2181340 Length: 276 Encrypted payload (248 bytes) 0000 00 0c 29 b1 20 22 00 09 5b 2b a8 d7 08 00 45 00 ..). "..[+....E. 0010 01 30 01 40 00 00 40 11 39 c5 a5 e3 f9 7d a5 e3 .0.@..@.9....}.. 0020 f9 73 01 f4 01 f4 01 1c a3 fb 42 7d 18 54 51 d9 .s........B}.TQ. 0030 20 11 d8 f7 e2 bc d1 a3 5d e0 08 10 20 01 d2 18 .......]... ... 0040 13 40 00 00 01 14 d7 d5 9f 11 cc 76 11 27 a1 bb .@.........v.'.. 0050 a4 72 55 e3 68 0e 01 d8 97 4b 95 e7 14 0a 2b fe .rU.h....K....+. 0060 80 81 a6 6b 2b aa ec 1a 3e 7d e5 14 ea 85 b5 1c ...k+...>}...... 0070 bf d4 6d 71 0b 61 0d 72 04 50 c0 af 96 fa 4c 81 ..mq.a.r.P....L. 0080 ef 36 78 5d b9 fc 34 8e 54 af 36 2b f8 3f 4e 97 .6x]..4.T.6+.?N. 0090 95 87 20 ea df 98 86 4d 83 31 88 93 40 82 1b 94 .. ....M.1..@... 00a0 9c de 2c e7 df 61 57 c7 d3 55 f3 03 76 e0 e3 b0 ..,..aW..U..v... 00b0 38 2e e4 28 67 a6 6e cb b1 73 e4 ec ce 7e 92 92 8..(g.n..s...~.. 00c0 f6 e4 4c e3 80 82 09 27 b6 64 0b 21 ba c5 1d 38 ..L....'.d.!...8 00d0 60 52 c5 fa f9 60 a9 31 7b 27 0d 0d da 1f ad 47 `R...`.1{'.....G 00e0 25 d6 dc 45 d1 06 6f 9c b0 b3 34 57 f1 ef 57 f7 %..E..o...4W..W. 00f0 0c 3f df 99 c8 65 cc c2 85 4d c6 04 d1 89 cf e4 .?...e...M...... 0100 f8 3f 0e 8b 3b 41 36 78 97 aa 14 81 fa e2 d5 56 .?..;A6x.......V 0110 7f 5e a9 b1 ef 31 76 f5 c3 8d df 79 52 c1 22 7a .^...1v....yR."z 0120 dc 07 14 a4 58 cb e1 35 70 91 d7 0a eb c5 02 8b ....X..5p....... 0130 cf 37 e4 9e 7a bd 0e 0f 84 e2 9f 72 63 7c 99 28 .7..z......rc|.( 0140 81 e2 .. Frame 15 (98 bytes on wire, 98 bytes captured) Arrival Time: Oct 2, 2003 09:59:36.454311000 Time delta from previous packet: 0.001616000 seconds Time relative to first packet: 11.539972000 seconds Frame Number: 15 Packet Length: 98 bytes Capture Length: 98 bytes Ethernet II, Src: 00:0c:29:b1:20:22, Dst: 00:09:5b:2b:a8:d7 Destination: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Source: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22) Type: IP (0x0800) Trailer: A64BA6F4 Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.125 (165.227.249.125) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 80 Identification: 0x005d (93) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xfb87 (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.125 (165.227.249.125) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 60 Checksum: 0x805a (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x427D185451D92011 Responder cookie: 0xD8F7E2BCD1A35DE0 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xD2181340 Length: 52 Encrypted payload (24 bytes) 0000 00 09 5b 2b a8 d7 00 0c 29 b1 20 22 08 00 45 00 ..[+....). "..E. 0010 00 50 00 5d 00 00 80 11 fb 87 a5 e3 f9 73 a5 e3 .P.].........s.. 0020 f9 7d 01 f4 01 f4 00 3c 80 5a 42 7d 18 54 51 d9 .}.....<.ZB}.TQ. 0030 20 11 d8 f7 e2 bc d1 a3 5d e0 08 10 20 01 d2 18 .......]... ... 0040 13 40 00 00 00 34 00 07 ea 00 35 e4 4e 6b aa b9 .@...4....5.Nk.. 0050 1b b1 b2 de ff 1b 6a 7e 6a e4 af de 0a ea a6 4b ......j~j......K 0060 a6 f4 ..