Frame 1 (166 bytes on wire, 166 bytes captured) Arrival Time: Oct 2, 2003 10:03:29.632513000 Time delta from previous packet: 0.000000000 seconds Time relative to first packet: 0.000000000 seconds Frame Number: 1 Packet Length: 166 bytes Capture Length: 166 bytes Ethernet II, Src: 00:0c:29:b1:20:22, Dst: 00:05:00:b8:00:e0 Destination: 00:05:00:b8:00:e0 (00:05:00:b8:00:e0) Source: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22) Type: IP (0x0800) Trailer: 731B3E35 Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.126 (165.227.249.126) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 148 Identification: 0x00b4 (180) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xfaeb (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.126 (165.227.249.126) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 128 Checksum: 0x348d (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x1A2B4925EEDA0677 Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 120 Security Association payload Next payload: Vendor ID (13) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 40 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 32 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (3600) Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: unknown vendor ID: 0x4485152D18B6BBCD0BE8A8469579DDCC Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: unknown vendor ID: 0x90CB80913EBB696E086381B5EC427B1F 0000 00 05 00 b8 00 e0 00 0c 29 b1 20 22 08 00 45 00 ........). "..E. 0010 00 94 00 b4 00 00 80 11 fa eb a5 e3 f9 73 a5 e3 .............s.. 0020 f9 7e 01 f4 01 f4 00 80 34 8d 1a 2b 49 25 ee da .~......4..+I%.. 0030 06 77 00 00 00 00 00 00 00 00 01 10 02 00 00 00 .w.............. 0040 00 00 00 00 00 78 0d 00 00 34 00 00 00 01 00 00 .....x...4...... 0050 00 01 00 00 00 28 01 01 00 01 00 00 00 20 01 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 04 00 02 80 03 ................ 0070 00 01 80 0b 00 01 80 0c 0e 10 0d 00 00 14 44 85 ..............D. 0080 15 2d 18 b6 bb cd 0b e8 a8 46 95 79 dd cc 00 00 .-.......F.y.... 0090 00 14 90 cb 80 91 3e bb 69 6e 08 63 81 b5 ec 42 ......>.in.c...B 00a0 7b 1f 73 1b 3e 35 {.s.>5 Frame 2 (150 bytes on wire, 150 bytes captured) Arrival Time: Oct 2, 2003 10:03:29.742367000 Time delta from previous packet: 0.109854000 seconds Time relative to first packet: 0.109854000 seconds Frame Number: 2 Packet Length: 150 bytes Capture Length: 150 bytes Ethernet II, Src: 00:05:00:b8:00:e0, Dst: 00:0c:29:b1:20:22 Destination: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22) Source: 00:05:00:b8:00:e0 (00:05:00:b8:00:e0) Type: IP (0x0800) Trailer: FB9D012E Internet Protocol, Src Addr: 165.227.249.126 (165.227.249.126), Dst Addr: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 132 Identification: 0x0004 (4) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xfbab (correct) Source: 165.227.249.126 (165.227.249.126) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 112 Checksum: 0x6354 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x1A2B4925EEDA0677 Responder cookie: 0x55D343C47AFDF31E Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 104 Security Association payload Next payload: Vendor ID (13) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 40 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 32 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (3600) Vendor ID payload Next payload: NONE (0) Length: 24 Vendor ID: unknown vendor ID: 0x4048B7D56EBCE88525E7DE7F00D6C2D3... 0000 00 0c 29 b1 20 22 00 05 00 b8 00 e0 08 00 45 00 ..). "........E. 0010 00 84 00 04 00 00 80 11 fb ab a5 e3 f9 7e a5 e3 .............~.. 0020 f9 73 01 f4 01 f4 00 70 63 54 1a 2b 49 25 ee da .s.....pcT.+I%.. 0030 06 77 55 d3 43 c4 7a fd f3 1e 01 10 02 00 00 00 .wU.C.z......... 0040 00 00 00 00 00 68 0d 00 00 34 00 00 00 01 00 00 .....h...4...... 0050 00 01 00 00 00 28 01 01 00 01 00 00 00 20 01 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 04 00 02 80 03 ................ 0070 00 01 80 0b 00 01 80 0c 0e 10 00 00 00 18 40 48 ..............@H 0080 b7 d5 6e bc e8 85 25 e7 de 7f 00 d6 c2 d3 c0 00 ..n...%......... 0090 00 00 fb 9d 01 2e ...... Frame 3 (302 bytes on wire, 302 bytes captured) Arrival Time: Oct 2, 2003 10:03:31.639732000 Time delta from previous packet: 1.897365000 seconds Time relative to first packet: 2.007219000 seconds Frame Number: 3 Packet Length: 302 bytes Capture Length: 302 bytes Ethernet II, Src: 00:0c:29:b1:20:22, Dst: 00:05:00:b8:00:e0 Destination: 00:05:00:b8:00:e0 (00:05:00:b8:00:e0) Source: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22) Type: IP (0x0800) Trailer: 4BAB8571 Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.126 (165.227.249.126) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 284 Identification: 0x00b5 (181) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xfa62 (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.126 (165.227.249.126) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 264 Checksum: 0x875f (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x1A2B4925EEDA0677 Responder cookie: 0x55D343C47AFDF31E Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 256 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: Vendor ID (13) Length: 24 Nonce Data Vendor ID payload Next payload: Vendor ID (13) Length: 48 Vendor ID: unknown vendor ID: 0x47BBE7C993F1FC13B4E6D0DB565C68E5... Vendor ID payload Next payload: Vendor ID (13) Length: 12 Vendor ID: unknown vendor ID: 0xDA8E937880010000 Vendor ID payload Next payload: NONE (0) Length: 12 Vendor ID: unknown vendor ID: 0x09002689DFD6B712 0000 00 05 00 b8 00 e0 00 0c 29 b1 20 22 08 00 45 00 ........). "..E. 0010 01 1c 00 b5 00 00 80 11 fa 62 a5 e3 f9 73 a5 e3 .........b...s.. 0020 f9 7e 01 f4 01 f4 01 08 87 5f 1a 2b 49 25 ee da .~......._.+I%.. 0030 06 77 55 d3 43 c4 7a fd f3 1e 04 10 02 00 00 00 .wU.C.z......... 0040 00 00 00 00 01 00 0a 00 00 84 17 52 1b 28 06 90 ...........R.(.. 0050 5b 3c dc b5 44 be dc fe 1b 96 44 4d 69 46 7e 9d [<..D.....DMiF~. 0060 54 33 46 0e 64 7e d9 f6 8f 41 e2 55 c9 00 8d 93 T3F.d~...A.U.... 0070 21 58 2d c6 e3 1b f5 8c 1b bf ec d9 c3 72 37 7b !X-..........r7{ 0080 49 99 96 93 38 6f 6e ae e3 c0 d8 45 6a 0a c1 73 I...8on....Ej..s 0090 a8 19 1a 0f a1 bf 1f e0 c5 65 3a 04 d7 48 52 a3 .........e:..HR. 00a0 c0 7e c8 b3 f9 0f a2 3f fe de 1e 88 2c 43 10 e4 .~.....?....,C.. 00b0 78 e9 96 51 c6 d3 2c 29 04 4c 93 1f d7 46 ba 3b x..Q..,).L...F.; 00c0 d2 51 f9 e2 7f de f0 96 b0 71 0d 00 00 18 6e 5d .Q.......q....n] 00d0 8d 20 5b 37 12 bd 29 4e fd f4 8d e2 6e 9b 78 49 . [7..)N....n.xI 00e0 7e f9 0d 00 00 30 47 bb e7 c9 93 f1 fc 13 b4 e6 ~....0G......... 00f0 d0 db 56 5c 68 e5 01 02 01 01 02 01 01 03 11 31 ..V\h..........1 0100 30 2e 31 2e 31 20 28 42 75 69 6c 64 20 31 30 29 0.1.1 (Build 10) 0110 00 00 0d 00 00 0c da 8e 93 78 80 01 00 00 00 00 .........x...... 0120 00 0c 09 00 26 89 df d6 b7 12 4b ab 85 71 ....&.....K..q Frame 4 (302 bytes on wire, 302 bytes captured) Arrival Time: Oct 2, 2003 10:03:31.771149000 Time delta from previous packet: 0.131417000 seconds Time relative to first packet: 2.138636000 seconds Frame Number: 4 Packet Length: 302 bytes Capture Length: 302 bytes Ethernet II, Src: 00:05:00:b8:00:e0, Dst: 00:0c:29:b1:20:22 Destination: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22) Source: 00:05:00:b8:00:e0 (00:05:00:b8:00:e0) Type: IP (0x0800) Trailer: DD091444 Internet Protocol, Src Addr: 165.227.249.126 (165.227.249.126), Dst Addr: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 284 Identification: 0x0005 (5) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xfb12 (correct) Source: 165.227.249.126 (165.227.249.126) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 264 Checksum: 0x9aa6 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x1A2B4925EEDA0677 Responder cookie: 0x55D343C47AFDF31E Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 256 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: Vendor ID (13) Length: 24 Nonce Data Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: unknown vendor ID: 0x12F5F28C457168A9702D9FE274CC0100 Vendor ID payload Next payload: Vendor ID (13) Length: 12 Vendor ID: unknown vendor ID: 0x09002689DFD6B712 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: unknown vendor ID: 0xA014E4D97AFCF31E9F4EC663B2DD7875 Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: unknown vendor ID: 0x1F07F70EAA6514D3B0FA96542A500400 0000 00 0c 29 b1 20 22 00 05 00 b8 00 e0 08 00 45 00 ..). "........E. 0010 01 1c 00 05 00 00 80 11 fb 12 a5 e3 f9 7e a5 e3 .............~.. 0020 f9 73 01 f4 01 f4 01 08 9a a6 1a 2b 49 25 ee da .s.........+I%.. 0030 06 77 55 d3 43 c4 7a fd f3 1e 04 10 02 00 00 00 .wU.C.z......... 0040 00 00 00 00 01 00 0a 00 00 84 20 8f ef 07 3f cf .......... ...?. 0050 f9 73 25 cc e8 e1 16 a6 58 e3 06 18 2a 32 8c 95 .s%.....X...*2.. 0060 f6 fc f6 29 98 92 33 69 4a de 17 5f 85 9f 8e 98 ...)..3iJ.._.... 0070 e9 67 97 0d 12 55 21 8e b5 d0 8b bd b4 8b 8d 0f .g...U!......... 0080 9d 9e 5b e0 a9 74 b6 3b 09 a4 76 e3 b5 d9 b6 23 ..[..t.;..v....# 0090 99 e5 83 56 95 c6 27 6e cf ae 8e 8a 64 f1 3d dd ...V..'n....d.=. 00a0 ab 83 17 eb a7 c2 8d 0a a3 f2 c5 88 7c 0a a5 53 ............|..S 00b0 d2 82 be c9 e6 e4 81 54 40 df 68 66 27 a1 3c 11 .......T@.hf'.<. 00c0 0d 79 0b 09 95 31 09 61 c3 14 0d 00 00 18 b4 fd .y...1.a........ 00d0 4e 3c 38 1f 12 24 8d a0 3d d6 32 01 20 92 d4 92 N<8..$..=.2. ... 00e0 5b 51 0d 00 00 14 12 f5 f2 8c 45 71 68 a9 70 2d [Q........Eqh.p- 00f0 9f e2 74 cc 01 00 0d 00 00 0c 09 00 26 89 df d6 ..t.........&... 0100 b7 12 0d 00 00 14 a0 14 e4 d9 7a fc f3 1e 9f 4e ..........z....N 0110 c6 63 b2 dd 78 75 00 00 00 14 1f 07 f7 0e aa 65 .c..xu.........e 0120 14 d3 b0 fa 96 54 2a 50 04 00 dd 09 14 44 .....T*P.....D Frame 5 (138 bytes on wire, 138 bytes captured) Arrival Time: Oct 2, 2003 10:03:33.489014000 Time delta from previous packet: 1.717865000 seconds Time relative to first packet: 3.856501000 seconds Frame Number: 5 Packet Length: 138 bytes Capture Length: 138 bytes Ethernet II, Src: 00:0c:29:b1:20:22, Dst: 00:05:00:b8:00:e0 Destination: 00:05:00:b8:00:e0 (00:05:00:b8:00:e0) Source: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22) Type: IP (0x0800) Trailer: 0CC9F35B Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.126 (165.227.249.126) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x00b7 (183) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xfb04 (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.126 (165.227.249.126) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 100 Checksum: 0x7d52 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x1A2B4925EEDA0677 Responder cookie: 0x55D343C47AFDF31E Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 92 Encrypted payload (64 bytes) 0000 00 05 00 b8 00 e0 00 0c 29 b1 20 22 08 00 45 00 ........). "..E. 0010 00 78 00 b7 00 00 80 11 fb 04 a5 e3 f9 73 a5 e3 .x...........s.. 0020 f9 7e 01 f4 01 f4 00 64 7d 52 1a 2b 49 25 ee da .~.....d}R.+I%.. 0030 06 77 55 d3 43 c4 7a fd f3 1e 05 10 02 01 00 00 .wU.C.z......... 0040 00 00 00 00 00 5c 49 88 60 e0 d1 e6 85 31 d9 14 .....\I.`....1.. 0050 74 34 d7 02 a5 47 22 49 80 3b 2c 0e f0 a9 be 89 t4...G"I.;,..... 0060 38 35 e5 80 8d 29 2c af 40 91 0c ec 11 3d e8 5a 85...),.@....=.Z 0070 61 20 7c da 6b 87 49 2f 71 95 92 f9 85 49 4f 49 a |.k.I/q....IOI 0080 d6 ac 3e 2d ef 41 0c c9 f3 5b ..>-.A...[ Frame 6 (130 bytes on wire, 130 bytes captured) Arrival Time: Oct 2, 2003 10:03:33.588021000 Time delta from previous packet: 0.099007000 seconds Time relative to first packet: 3.955508000 seconds Frame Number: 6 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:05:00:b8:00:e0, Dst: 00:0c:29:b1:20:22 Destination: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22) Source: 00:05:00:b8:00:e0 (00:05:00:b8:00:e0) Type: IP (0x0800) Trailer: D70215E0 Internet Protocol, Src Addr: 165.227.249.126 (165.227.249.126), Dst Addr: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0006 (6) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xfbbd (correct) Source: 165.227.249.126 (165.227.249.126) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 92 Checksum: 0x14d5 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x1A2B4925EEDA0677 Responder cookie: 0x55D343C47AFDF31E Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 84 Encrypted payload (56 bytes) 0000 00 0c 29 b1 20 22 00 05 00 b8 00 e0 08 00 45 00 ..). "........E. 0010 00 70 00 06 00 00 80 11 fb bd a5 e3 f9 7e a5 e3 .p...........~.. 0020 f9 73 01 f4 01 f4 00 5c 14 d5 1a 2b 49 25 ee da .s.....\...+I%.. 0030 06 77 55 d3 43 c4 7a fd f3 1e 05 10 02 01 00 00 .wU.C.z......... 0040 00 00 00 00 00 54 18 4c 44 73 29 45 44 7d c5 a8 .....T.LDs)ED}.. 0050 45 9c b9 80 0f 1a 74 ab 56 95 a2 f6 93 bf 38 f2 E.....t.V.....8. 0060 bd b6 da 00 9b 38 c2 6f a3 49 b9 82 de 71 d0 cb .....8.o.I...q.. 0070 70 f0 90 37 0e ef 1e 0c d7 02 3a 1f 26 0a d7 02 p..7......:.&... 0080 15 e0 .. Frame 7 (338 bytes on wire, 338 bytes captured) Arrival Time: Oct 2, 2003 10:03:35.636822000 Time delta from previous packet: 2.048801000 seconds Time relative to first packet: 6.004309000 seconds Frame Number: 7 Packet Length: 338 bytes Capture Length: 338 bytes Ethernet II, Src: 00:0c:29:b1:20:22, Dst: 00:05:00:b8:00:e0 Destination: 00:05:00:b8:00:e0 (00:05:00:b8:00:e0) Source: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22) Type: IP (0x0800) Trailer: 2DE761C1 Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.126 (165.227.249.126) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 320 Identification: 0x00b9 (185) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xfa3a (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.126 (165.227.249.126) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 300 Checksum: 0x6a4c (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x1A2B4925EEDA0677 Responder cookie: 0x55D343C47AFDF31E Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xBC46E887 Length: 292 Encrypted payload (264 bytes) 0000 00 05 00 b8 00 e0 00 0c 29 b1 20 22 08 00 45 00 ........). "..E. 0010 01 40 00 b9 00 00 80 11 fa 3a a5 e3 f9 73 a5 e3 .@.......:...s.. 0020 f9 7e 01 f4 01 f4 01 2c 6a 4c 1a 2b 49 25 ee da .~.....,jL.+I%.. 0030 06 77 55 d3 43 c4 7a fd f3 1e 08 10 20 01 bc 46 .wU.C.z..... ..F 0040 e8 87 00 00 01 24 57 87 df f4 2d 74 0c 12 aa 0c .....$W...-t.... 0050 c4 81 9e b1 80 85 83 5f 16 04 a1 a4 9c 92 3e ec ......._......>. 0060 64 71 80 41 10 e0 e7 c0 52 da fc 81 36 cc 4d 54 dq.A....R...6.MT 0070 20 69 85 58 5e 2d 2e b1 c4 1e 51 34 98 c5 3d 35 i.X^-....Q4..=5 0080 44 1d 5e b5 0c 59 91 0b b0 0c 7b 32 ed 92 11 f6 D.^..Y....{2.... 0090 2a bd 66 9f 02 80 3d 60 c8 1f 5e 0e 70 cb 16 a9 *.f...=`..^.p... 00a0 9d 18 5d da e0 e7 b9 e7 88 0f 08 3d c6 00 6f 5d ..]........=..o] 00b0 fa 6e 9a e2 f6 cd a0 ad 8e 58 bb 96 eb ee 17 ed .n.......X...... 00c0 55 37 20 21 48 93 c6 ea 83 e9 22 01 ee 77 35 2e U7 !H....."..w5. 00d0 c2 91 f8 d6 9c 7b 0b e8 ca d8 59 86 9f 01 05 08 .....{....Y..... 00e0 82 c3 3e 38 ff 56 23 f1 6b cd 8c 24 b5 fc 37 20 ..>8.V#.k..$..7 00f0 ca 1f 1a a8 75 8a df 2c fe 21 0d 8c 6d 3b 70 2d ....u..,.!..m;p- 0100 38 8f fe 31 7b 46 b5 ca 63 c5 14 8f 43 40 b6 44 8..1{F..c...C@.D 0110 d7 01 5c e4 0f 3f 56 f6 64 91 e8 e5 a4 a3 9b 05 ..\..?V.d....... 0120 66 76 9e bf 1a b8 0b a4 82 b0 c1 f2 93 8a a1 66 fv.............f 0130 c8 a3 9d 68 1e b7 6c 8c f7 b9 ab ff 7f ec c6 b2 ...h..l......... 0140 b1 1a 92 dc 87 64 6a 2b 07 0b 3c 80 1d 0c 2d e7 .....dj+..<...-. 0150 61 c1 a. Frame 8 (338 bytes on wire, 338 bytes captured) Arrival Time: Oct 2, 2003 10:03:35.865811000 Time delta from previous packet: 0.228989000 seconds Time relative to first packet: 6.233298000 seconds Frame Number: 8 Packet Length: 338 bytes Capture Length: 338 bytes Ethernet II, Src: 00:05:00:b8:00:e0, Dst: 00:0c:29:b1:20:22 Destination: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22) Source: 00:05:00:b8:00:e0 (00:05:00:b8:00:e0) Type: IP (0x0800) Trailer: 71A92069 Internet Protocol, Src Addr: 165.227.249.126 (165.227.249.126), Dst Addr: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 320 Identification: 0x0007 (7) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xfaec (correct) Source: 165.227.249.126 (165.227.249.126) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 300 Checksum: 0x22e0 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x1A2B4925EEDA0677 Responder cookie: 0x55D343C47AFDF31E Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xBC46E887 Length: 292 Encrypted payload (264 bytes) 0000 00 0c 29 b1 20 22 00 05 00 b8 00 e0 08 00 45 00 ..). "........E. 0010 01 40 00 07 00 00 80 11 fa ec a5 e3 f9 7e a5 e3 .@...........~.. 0020 f9 73 01 f4 01 f4 01 2c 22 e0 1a 2b 49 25 ee da .s.....,"..+I%.. 0030 06 77 55 d3 43 c4 7a fd f3 1e 08 10 20 01 bc 46 .wU.C.z..... ..F 0040 e8 87 00 00 01 24 a7 6c 37 03 fd 1b a1 6e 3e 0d .....$.l7....n>. 0050 d6 fe 3e 1b 2d 81 27 a7 5f c4 65 40 d8 bb 71 c2 ..>.-.'._.e@..q. 0060 96 aa 4f 12 12 66 2b 51 fe 0c 82 7e 50 61 09 a9 ..O..f+Q...~Pa.. 0070 65 43 ab 4a 28 6e c3 c1 2e f3 2e b0 74 f4 a8 9a eC.J(n......t... 0080 fd a9 42 0f df 06 81 b2 07 60 2f 98 30 5a 5f b5 ..B......`/.0Z_. 0090 c3 e2 33 73 5d c5 e6 fe 0e 1b 18 13 9d 29 9a 69 ..3s]........).i 00a0 89 7b 00 d8 a3 da 6d c8 6d a3 80 38 e3 39 f4 fb .{....m.m..8.9.. 00b0 41 9c cf a8 76 67 6f e1 1a 17 be 9f db f8 8e 68 A...vgo........h 00c0 a3 fd d1 df 86 be 0e a2 14 5a c9 0d 38 de af b2 .........Z..8... 00d0 92 e5 e1 f3 21 c2 7e c3 df 93 93 84 b4 83 e7 49 ....!.~........I 00e0 8f 1c 4a a1 59 ef e7 79 2a 34 8f f0 72 0b 90 14 ..J.Y..y*4..r... 00f0 e4 25 6c 52 7f 2e 67 32 29 58 41 49 5e 09 73 38 .%lR..g2)XAI^.s8 0100 1a 46 bd 81 a1 4d cd fb 0b 86 63 68 1f a1 35 89 .F...M....ch..5. 0110 82 99 91 b8 f3 23 91 22 ad e2 0f 47 81 c3 c2 a9 .....#."...G.... 0120 54 46 f5 5b 6c e3 76 e3 83 bd 73 41 17 fc 8b 59 TF.[l.v...sA...Y 0130 7c c1 2c c1 cd af 55 47 a3 11 22 22 05 96 5b 43 |.,...UG..""..[C 0140 f7 c1 3c bd d4 c6 bf 1f 5d e2 6c 31 ef 31 71 a9 ..<.....].l1.1q. 0150 20 69 i Frame 9 (98 bytes on wire, 98 bytes captured) Arrival Time: Oct 2, 2003 10:03:35.870437000 Time delta from previous packet: 0.004626000 seconds Time relative to first packet: 6.237924000 seconds Frame Number: 9 Packet Length: 98 bytes Capture Length: 98 bytes Ethernet II, Src: 00:0c:29:b1:20:22, Dst: 00:05:00:b8:00:e0 Destination: 00:05:00:b8:00:e0 (00:05:00:b8:00:e0) Source: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22) Type: IP (0x0800) Trailer: 9FEF33DB Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.126 (165.227.249.126) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 80 Identification: 0x00ba (186) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xfb29 (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.126 (165.227.249.126) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 60 Checksum: 0x9aca (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x1A2B4925EEDA0677 Responder cookie: 0x55D343C47AFDF31E Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xBC46E887 Length: 52 Encrypted payload (24 bytes) 0000 00 05 00 b8 00 e0 00 0c 29 b1 20 22 08 00 45 00 ........). "..E. 0010 00 50 00 ba 00 00 80 11 fb 29 a5 e3 f9 73 a5 e3 .P.......)...s.. 0020 f9 7e 01 f4 01 f4 00 3c 9a ca 1a 2b 49 25 ee da .~.....<...+I%.. 0030 06 77 55 d3 43 c4 7a fd f3 1e 08 10 20 01 bc 46 .wU.C.z..... ..F 0040 e8 87 00 00 00 34 25 41 6f 88 28 3c 45 d5 e1 e4 .....4%Ao.(