Frame 1 (166 bytes on wire, 166 bytes captured) Arrival Time: Jul 15, 2004 13:58:19.061434000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 166 bytes Capture Length: 166 bytes Ethernet II, Src: 00:0c:29:00:82:53, Dst: 00:07:e9:0f:d4:32 Destination: 00:07:e9:0f:d4:32 (00:07:e9:0f:d4:32) Source: 00:0c:29:00:82:53 (00:0c:29:00:82:53) Type: IP (0x0800) Frame check sequence: 0xe2156fe5 (correct) Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.127 (165.227.249.127) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 148 Identification: 0x0070 (112) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xfb2e (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.127 (165.227.249.127) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 128 Checksum: 0x2f47 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x18EA530146D6AB25 Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 120 Security Association payload Next payload: Vendor ID (13) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 40 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 32 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (3600) Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 0000 00 07 e9 0f d4 32 00 0c 29 00 82 53 08 00 45 00 .....2..)..S..E. 0010 00 94 00 70 00 00 80 11 fb 2e a5 e3 f9 73 a5 e3 ...p.........s.. 0020 f9 7f 01 f4 01 f4 00 80 2f 47 18 ea 53 01 46 d6 ......../G..S.F. 0030 ab 25 00 00 00 00 00 00 00 00 01 10 02 00 00 00 .%.............. 0040 00 00 00 00 00 78 0d 00 00 34 00 00 00 01 00 00 .....x...4...... 0050 00 01 00 00 00 28 01 01 00 01 00 00 00 20 01 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 04 00 02 80 03 ................ 0070 00 01 80 0b 00 01 80 0c 0e 10 0d 00 00 14 44 85 ..............D. 0080 15 2d 18 b6 bb cd 0b e8 a8 46 95 79 dd cc 00 00 .-.......F.y.... 0090 00 14 90 cb 80 91 3e bb 69 6e 08 63 81 b5 ec 42 ......>.in.c...B 00a0 7b 1f e2 15 6f e5 {...o. Frame 2 (158 bytes on wire, 158 bytes captured) Arrival Time: Jul 15, 2004 13:58:19.062355000 Time delta from previous packet: 0.000921000 seconds Time since reference or first frame: 0.000921000 seconds Frame Number: 2 Packet Length: 158 bytes Capture Length: 158 bytes Ethernet II, Src: 00:07:e9:0f:d4:32, Dst: 00:0c:29:00:82:53 Destination: 00:0c:29:00:82:53 (00:0c:29:00:82:53) Source: 00:07:e9:0f:d4:32 (00:07:e9:0f:d4:32) Type: IP (0x0800) Frame check sequence: 0xc1d1002f (correct) Internet Protocol, Src Addr: 165.227.249.127 (165.227.249.127), Dst Addr: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 140 Identification: 0x006f (111) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3b38 (correct) Source: 165.227.249.127 (165.227.249.127) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 120 Checksum: 0xd846 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x18EA530146D6AB25 Responder cookie: 0x2B7A4ACF174A5CEC Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 112 Security Association payload Next payload: Vendor ID (13) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 40 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 32 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (3600) Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: unknown vendor ID: 0x402F7B247B5A5066C1FB9F53F480C9F5 Vendor ID payload Next payload: NONE (0) Length: 12 Vendor ID: draft-beaulieu-ike-xauth-02.txt 0000 00 0c 29 00 82 53 00 07 e9 0f d4 32 08 00 45 00 ..)..S.....2..E. 0010 00 8c 00 6f 00 00 40 11 3b 38 a5 e3 f9 7f a5 e3 ...o..@.;8...... 0020 f9 73 01 f4 01 f4 00 78 d8 46 18 ea 53 01 46 d6 .s.....x.F..S.F. 0030 ab 25 2b 7a 4a cf 17 4a 5c ec 01 10 02 00 00 00 .%+zJ..J\....... 0040 00 00 00 00 00 70 0d 00 00 34 00 00 00 01 00 00 .....p...4...... 0050 00 01 00 00 00 28 01 01 00 01 00 00 00 20 01 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 04 00 02 80 03 ................ 0070 00 01 80 0b 00 01 80 0c 0e 10 0d 00 00 14 40 2f ..............@/ 0080 7b 24 7b 5a 50 66 c1 fb 9f 53 f4 80 c9 f5 00 00 {${ZPf...S...... 0090 00 0c 09 00 26 89 df d6 b7 12 c1 d1 00 2f ....&......../ Frame 3 (158 bytes on wire, 158 bytes captured) Arrival Time: Jul 15, 2004 13:58:19.563916000 Time delta from previous packet: 0.501561000 seconds Time since reference or first frame: 0.502482000 seconds Frame Number: 3 Packet Length: 158 bytes Capture Length: 158 bytes Ethernet II, Src: 00:07:e9:0f:d4:32, Dst: 00:0c:29:00:82:53 Destination: 00:0c:29:00:82:53 (00:0c:29:00:82:53) Source: 00:07:e9:0f:d4:32 (00:07:e9:0f:d4:32) Type: IP (0x0800) Frame check sequence: 0x99f7fb76 (correct) Internet Protocol, Src Addr: 165.227.249.127 (165.227.249.127), Dst Addr: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 140 Identification: 0x0070 (112) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3b37 (correct) Source: 165.227.249.127 (165.227.249.127) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 120 Checksum: 0xd846 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x18EA530146D6AB25 Responder cookie: 0x2B7A4ACF174A5CEC Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 112 Security Association payload Next payload: Vendor ID (13) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 40 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 32 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (3600) Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: unknown vendor ID: 0x402F7B247B5A5066C1FB9F53F480C9F5 Vendor ID payload Next payload: NONE (0) Length: 12 Vendor ID: draft-beaulieu-ike-xauth-02.txt 0000 00 0c 29 00 82 53 00 07 e9 0f d4 32 08 00 45 00 ..)..S.....2..E. 0010 00 8c 00 70 00 00 40 11 3b 37 a5 e3 f9 7f a5 e3 ...p..@.;7...... 0020 f9 73 01 f4 01 f4 00 78 d8 46 18 ea 53 01 46 d6 .s.....x.F..S.F. 0030 ab 25 2b 7a 4a cf 17 4a 5c ec 01 10 02 00 00 00 .%+zJ..J\....... 0040 00 00 00 00 00 70 0d 00 00 34 00 00 00 01 00 00 .....p...4...... 0050 00 01 00 00 00 28 01 01 00 01 00 00 00 20 01 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 04 00 02 80 03 ................ 0070 00 01 80 0b 00 01 80 0c 0e 10 0d 00 00 14 40 2f ..............@/ 0080 7b 24 7b 5a 50 66 c1 fb 9f 53 f4 80 c9 f5 00 00 {${ZPf...S...... 0090 00 0c 09 00 26 89 df d6 b7 12 99 f7 fb 76 ....&........v Frame 4 (158 bytes on wire, 158 bytes captured) Arrival Time: Jul 15, 2004 13:58:20.573955000 Time delta from previous packet: 1.010039000 seconds Time since reference or first frame: 1.512521000 seconds Frame Number: 4 Packet Length: 158 bytes Capture Length: 158 bytes Ethernet II, Src: 00:07:e9:0f:d4:32, Dst: 00:0c:29:00:82:53 Destination: 00:0c:29:00:82:53 (00:0c:29:00:82:53) Source: 00:07:e9:0f:d4:32 (00:07:e9:0f:d4:32) Type: IP (0x0800) Frame check sequence: 0xdcce363d (correct) Internet Protocol, Src Addr: 165.227.249.127 (165.227.249.127), Dst Addr: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 140 Identification: 0x0071 (113) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3b36 (correct) Source: 165.227.249.127 (165.227.249.127) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 120 Checksum: 0xd846 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x18EA530146D6AB25 Responder cookie: 0x2B7A4ACF174A5CEC Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 112 Security Association payload Next payload: Vendor ID (13) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 40 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 32 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (3600) Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: unknown vendor ID: 0x402F7B247B5A5066C1FB9F53F480C9F5 Vendor ID payload Next payload: NONE (0) Length: 12 Vendor ID: draft-beaulieu-ike-xauth-02.txt 0000 00 0c 29 00 82 53 00 07 e9 0f d4 32 08 00 45 00 ..)..S.....2..E. 0010 00 8c 00 71 00 00 40 11 3b 36 a5 e3 f9 7f a5 e3 ...q..@.;6...... 0020 f9 73 01 f4 01 f4 00 78 d8 46 18 ea 53 01 46 d6 .s.....x.F..S.F. 0030 ab 25 2b 7a 4a cf 17 4a 5c ec 01 10 02 00 00 00 .%+zJ..J\....... 0040 00 00 00 00 00 70 0d 00 00 34 00 00 00 01 00 00 .....p...4...... 0050 00 01 00 00 00 28 01 01 00 01 00 00 00 20 01 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 04 00 02 80 03 ................ 0070 00 01 80 0b 00 01 80 0c 0e 10 0d 00 00 14 40 2f ..............@/ 0080 7b 24 7b 5a 50 66 c1 fb 9f 53 f4 80 c9 f5 00 00 {${ZPf...S...... 0090 00 0c 09 00 26 89 df d6 b7 12 dc ce 36 3d ....&.......6= Frame 5 (302 bytes on wire, 302 bytes captured) Arrival Time: Jul 15, 2004 13:58:20.945553000 Time delta from previous packet: 0.371598000 seconds Time since reference or first frame: 1.884119000 seconds Frame Number: 5 Packet Length: 302 bytes Capture Length: 302 bytes Ethernet II, Src: 00:0c:29:00:82:53, Dst: 00:07:e9:0f:d4:32 Destination: 00:07:e9:0f:d4:32 (00:07:e9:0f:d4:32) Source: 00:0c:29:00:82:53 (00:0c:29:00:82:53) Type: IP (0x0800) Frame check sequence: 0x7ae852aa (correct) Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.127 (165.227.249.127) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 284 Identification: 0x0071 (113) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xfaa5 (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.127 (165.227.249.127) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 264 Checksum: 0xc282 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x18EA530146D6AB25 Responder cookie: 0x2B7A4ACF174A5CEC Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 256 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: Vendor ID (13) Length: 24 Nonce Data Vendor ID payload Next payload: Vendor ID (13) Length: 48 Vendor ID: unknown vendor ID: 0x47BBE7C993F1FC13B4E6D0DB565C68E5... Vendor ID payload Next payload: Vendor ID (13) Length: 12 Vendor ID: unknown vendor ID: 0xDA8E937880010000 Vendor ID payload Next payload: NONE (0) Length: 12 Vendor ID: draft-beaulieu-ike-xauth-02.txt 0000 00 07 e9 0f d4 32 00 0c 29 00 82 53 08 00 45 00 .....2..)..S..E. 0010 01 1c 00 71 00 00 80 11 fa a5 a5 e3 f9 73 a5 e3 ...q.........s.. 0020 f9 7f 01 f4 01 f4 01 08 c2 82 18 ea 53 01 46 d6 ............S.F. 0030 ab 25 2b 7a 4a cf 17 4a 5c ec 04 10 02 00 00 00 .%+zJ..J\....... 0040 00 00 00 00 01 00 0a 00 00 84 70 90 62 99 08 13 ..........p.b... 0050 99 76 5d 55 5f f9 73 74 05 dc a6 8a 7f cc 78 c0 .v]U_.st......x. 0060 4f 83 e2 f1 df d9 dd 5c 17 de 99 14 77 b4 1e 08 O......\....w... 0070 0a e4 fa 6b ae c2 b2 47 b5 a0 85 0b ad 32 64 dc ...k...G.....2d. 0080 c1 17 44 9d 15 34 c1 da 6e bb d7 9e 63 89 54 66 ..D..4..n...c.Tf 0090 79 11 5d ad 03 c7 af 1d 71 79 d0 b0 5a 08 14 5c y.].....qy..Z..\ 00a0 c9 4e e3 d6 a1 a6 38 12 d3 54 00 8d f2 75 4a 63 .N....8..T...uJc 00b0 18 88 9b 84 cf 89 b2 0f 7f a8 73 0e 36 ff bc c1 ..........s.6... 00c0 65 95 e7 0c 6e 07 ad 26 30 01 0d 00 00 18 e5 22 e...n..&0......" 00d0 07 de 05 6d a3 d1 14 6f 15 c7 c8 ac 77 ca 8e b1 ...m...o....w... 00e0 96 f0 0d 00 00 30 47 bb e7 c9 93 f1 fc 13 b4 e6 .....0G......... 00f0 d0 db 56 5c 68 e5 01 02 01 01 02 01 01 03 11 31 ..V\h..........1 0100 30 2e 31 2e 31 20 28 42 75 69 6c 64 20 31 30 29 0.1.1 (Build 10) 0110 00 00 0d 00 00 0c da 8e 93 78 80 01 00 00 00 00 .........x...... 0120 00 0c 09 00 26 89 df d6 b7 12 7a e8 52 aa ....&.....z.R. Frame 6 (302 bytes on wire, 302 bytes captured) Arrival Time: Jul 15, 2004 13:58:20.947082000 Time delta from previous packet: 0.001529000 seconds Time since reference or first frame: 1.885648000 seconds Frame Number: 6 Packet Length: 302 bytes Capture Length: 302 bytes Ethernet II, Src: 00:0c:29:00:82:53, Dst: 00:07:e9:0f:d4:32 Destination: 00:07:e9:0f:d4:32 (00:07:e9:0f:d4:32) Source: 00:0c:29:00:82:53 (00:0c:29:00:82:53) Type: IP (0x0800) Frame check sequence: 0x0386c7f0 (correct) Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.127 (165.227.249.127) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 284 Identification: 0x0072 (114) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xfaa4 (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.127 (165.227.249.127) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 264 Checksum: 0xc282 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x18EA530146D6AB25 Responder cookie: 0x2B7A4ACF174A5CEC Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 256 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: Vendor ID (13) Length: 24 Nonce Data Vendor ID payload Next payload: Vendor ID (13) Length: 48 Vendor ID: unknown vendor ID: 0x47BBE7C993F1FC13B4E6D0DB565C68E5... Vendor ID payload Next payload: Vendor ID (13) Length: 12 Vendor ID: unknown vendor ID: 0xDA8E937880010000 Vendor ID payload Next payload: NONE (0) Length: 12 Vendor ID: draft-beaulieu-ike-xauth-02.txt 0000 00 07 e9 0f d4 32 00 0c 29 00 82 53 08 00 45 00 .....2..)..S..E. 0010 01 1c 00 72 00 00 80 11 fa a4 a5 e3 f9 73 a5 e3 ...r.........s.. 0020 f9 7f 01 f4 01 f4 01 08 c2 82 18 ea 53 01 46 d6 ............S.F. 0030 ab 25 2b 7a 4a cf 17 4a 5c ec 04 10 02 00 00 00 .%+zJ..J\....... 0040 00 00 00 00 01 00 0a 00 00 84 70 90 62 99 08 13 ..........p.b... 0050 99 76 5d 55 5f f9 73 74 05 dc a6 8a 7f cc 78 c0 .v]U_.st......x. 0060 4f 83 e2 f1 df d9 dd 5c 17 de 99 14 77 b4 1e 08 O......\....w... 0070 0a e4 fa 6b ae c2 b2 47 b5 a0 85 0b ad 32 64 dc ...k...G.....2d. 0080 c1 17 44 9d 15 34 c1 da 6e bb d7 9e 63 89 54 66 ..D..4..n...c.Tf 0090 79 11 5d ad 03 c7 af 1d 71 79 d0 b0 5a 08 14 5c y.].....qy..Z..\ 00a0 c9 4e e3 d6 a1 a6 38 12 d3 54 00 8d f2 75 4a 63 .N....8..T...uJc 00b0 18 88 9b 84 cf 89 b2 0f 7f a8 73 0e 36 ff bc c1 ..........s.6... 00c0 65 95 e7 0c 6e 07 ad 26 30 01 0d 00 00 18 e5 22 e...n..&0......" 00d0 07 de 05 6d a3 d1 14 6f 15 c7 c8 ac 77 ca 8e b1 ...m...o....w... 00e0 96 f0 0d 00 00 30 47 bb e7 c9 93 f1 fc 13 b4 e6 .....0G......... 00f0 d0 db 56 5c 68 e5 01 02 01 01 02 01 01 03 11 31 ..V\h..........1 0100 30 2e 31 2e 31 20 28 42 75 69 6c 64 20 31 30 29 0.1.1 (Build 10) 0110 00 00 0d 00 00 0c da 8e 93 78 80 01 00 00 00 00 .........x...... 0120 00 0c 09 00 26 89 df d6 b7 12 03 86 c7 f0 ....&......... Frame 7 (302 bytes on wire, 302 bytes captured) Arrival Time: Jul 15, 2004 13:58:20.947773000 Time delta from previous packet: 0.000691000 seconds Time since reference or first frame: 1.886339000 seconds Frame Number: 7 Packet Length: 302 bytes Capture Length: 302 bytes Ethernet II, Src: 00:0c:29:00:82:53, Dst: 00:07:e9:0f:d4:32 Destination: 00:07:e9:0f:d4:32 (00:07:e9:0f:d4:32) Source: 00:0c:29:00:82:53 (00:0c:29:00:82:53) Type: IP (0x0800) Frame check sequence: 0x8f05c03e (correct) Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.127 (165.227.249.127) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 284 Identification: 0x0073 (115) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xfaa3 (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.127 (165.227.249.127) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 264 Checksum: 0xc282 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x18EA530146D6AB25 Responder cookie: 0x2B7A4ACF174A5CEC Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 256 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: Vendor ID (13) Length: 24 Nonce Data Vendor ID payload Next payload: Vendor ID (13) Length: 48 Vendor ID: unknown vendor ID: 0x47BBE7C993F1FC13B4E6D0DB565C68E5... Vendor ID payload Next payload: Vendor ID (13) Length: 12 Vendor ID: unknown vendor ID: 0xDA8E937880010000 Vendor ID payload Next payload: NONE (0) Length: 12 Vendor ID: draft-beaulieu-ike-xauth-02.txt 0000 00 07 e9 0f d4 32 00 0c 29 00 82 53 08 00 45 00 .....2..)..S..E. 0010 01 1c 00 73 00 00 80 11 fa a3 a5 e3 f9 73 a5 e3 ...s.........s.. 0020 f9 7f 01 f4 01 f4 01 08 c2 82 18 ea 53 01 46 d6 ............S.F. 0030 ab 25 2b 7a 4a cf 17 4a 5c ec 04 10 02 00 00 00 .%+zJ..J\....... 0040 00 00 00 00 01 00 0a 00 00 84 70 90 62 99 08 13 ..........p.b... 0050 99 76 5d 55 5f f9 73 74 05 dc a6 8a 7f cc 78 c0 .v]U_.st......x. 0060 4f 83 e2 f1 df d9 dd 5c 17 de 99 14 77 b4 1e 08 O......\....w... 0070 0a e4 fa 6b ae c2 b2 47 b5 a0 85 0b ad 32 64 dc ...k...G.....2d. 0080 c1 17 44 9d 15 34 c1 da 6e bb d7 9e 63 89 54 66 ..D..4..n...c.Tf 0090 79 11 5d ad 03 c7 af 1d 71 79 d0 b0 5a 08 14 5c y.].....qy..Z..\ 00a0 c9 4e e3 d6 a1 a6 38 12 d3 54 00 8d f2 75 4a 63 .N....8..T...uJc 00b0 18 88 9b 84 cf 89 b2 0f 7f a8 73 0e 36 ff bc c1 ..........s.6... 00c0 65 95 e7 0c 6e 07 ad 26 30 01 0d 00 00 18 e5 22 e...n..&0......" 00d0 07 de 05 6d a3 d1 14 6f 15 c7 c8 ac 77 ca 8e b1 ...m...o....w... 00e0 96 f0 0d 00 00 30 47 bb e7 c9 93 f1 fc 13 b4 e6 .....0G......... 00f0 d0 db 56 5c 68 e5 01 02 01 01 02 01 01 03 11 31 ..V\h..........1 0100 30 2e 31 2e 31 20 28 42 75 69 6c 64 20 31 30 29 0.1.1 (Build 10) 0110 00 00 0d 00 00 0c da 8e 93 78 80 01 00 00 00 00 .........x...... 0120 00 0c 09 00 26 89 df d6 b7 12 8f 05 c0 3e ....&........> Frame 8 (226 bytes on wire, 226 bytes captured) Arrival Time: Jul 15, 2004 13:58:20.984267000 Time delta from previous packet: 0.036494000 seconds Time since reference or first frame: 1.922833000 seconds Frame Number: 8 Packet Length: 226 bytes Capture Length: 226 bytes Ethernet II, Src: 00:07:e9:0f:d4:32, Dst: 00:0c:29:00:82:53 Destination: 00:0c:29:00:82:53 (00:0c:29:00:82:53) Source: 00:07:e9:0f:d4:32 (00:07:e9:0f:d4:32) Type: IP (0x0800) Frame check sequence: 0x9b22faec (correct) Internet Protocol, Src Addr: 165.227.249.127 (165.227.249.127), Dst Addr: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 208 Identification: 0x0072 (114) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3af1 (correct) Source: 165.227.249.127 (165.227.249.127) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 188 Checksum: 0x4b7d (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x18EA530146D6AB25 Responder cookie: 0x2B7A4ACF174A5CEC Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 180 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 20 Nonce Data 0000 00 0c 29 00 82 53 00 07 e9 0f d4 32 08 00 45 00 ..)..S.....2..E. 0010 00 d0 00 72 00 00 40 11 3a f1 a5 e3 f9 7f a5 e3 ...r..@.:....... 0020 f9 73 01 f4 01 f4 00 bc 4b 7d 18 ea 53 01 46 d6 .s......K}..S.F. 0030 ab 25 2b 7a 4a cf 17 4a 5c ec 04 10 02 00 00 00 .%+zJ..J\....... 0040 00 00 00 00 00 b4 0a 00 00 84 00 82 c0 fd fb 98 ................ 0050 5d 59 4c 75 5e 7f 1e 5a 37 29 4e 40 73 c6 31 8b ]YLu^..Z7)N@s.1. 0060 a1 72 02 ff 14 80 b3 8f 10 c0 fc ac 63 44 2e 1c .r..........cD.. 0070 2b 0c 5a da 4a 04 3f e4 47 6a 6b fc 12 f5 69 e9 +.Z.J.?.Gjk...i. 0080 a2 65 9b 31 25 a8 94 3c d7 fa 48 4a 98 8f b5 b5 .e.1%..<..HJ.... 0090 50 d5 db b5 8d 1c 84 14 5e 12 3c bd 90 5e 38 05 P.......^.<..^8. 00a0 68 2c d9 ef 41 26 72 47 30 59 51 7a f9 d7 dd c8 h,..A&rG0YQz.... 00b0 13 0d b1 ac 1f ed 74 24 f8 74 d6 3f 8b 53 24 3e ......t$.t.?.S$> 00c0 e8 b9 54 78 ca 50 b6 ac 07 b0 00 00 00 14 d1 f5 ..Tx.P.......... 00d0 dc ca 61 6b 18 c7 30 27 9a b6 6a 67 6b 95 9b 22 ..ak..0'..jgk.." 00e0 fa ec .. Frame 9 (226 bytes on wire, 226 bytes captured) Arrival Time: Jul 15, 2004 13:58:21.493809000 Time delta from previous packet: 0.509542000 seconds Time since reference or first frame: 2.432375000 seconds Frame Number: 9 Packet Length: 226 bytes Capture Length: 226 bytes Ethernet II, Src: 00:07:e9:0f:d4:32, Dst: 00:0c:29:00:82:53 Destination: 00:0c:29:00:82:53 (00:0c:29:00:82:53) Source: 00:07:e9:0f:d4:32 (00:07:e9:0f:d4:32) Type: IP (0x0800) Frame check sequence: 0xb5f35100 (correct) Internet Protocol, Src Addr: 165.227.249.127 (165.227.249.127), Dst Addr: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 208 Identification: 0x0073 (115) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3af0 (correct) Source: 165.227.249.127 (165.227.249.127) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 188 Checksum: 0x4b7d (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x18EA530146D6AB25 Responder cookie: 0x2B7A4ACF174A5CEC Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 180 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 20 Nonce Data 0000 00 0c 29 00 82 53 00 07 e9 0f d4 32 08 00 45 00 ..)..S.....2..E. 0010 00 d0 00 73 00 00 40 11 3a f0 a5 e3 f9 7f a5 e3 ...s..@.:....... 0020 f9 73 01 f4 01 f4 00 bc 4b 7d 18 ea 53 01 46 d6 .s......K}..S.F. 0030 ab 25 2b 7a 4a cf 17 4a 5c ec 04 10 02 00 00 00 .%+zJ..J\....... 0040 00 00 00 00 00 b4 0a 00 00 84 00 82 c0 fd fb 98 ................ 0050 5d 59 4c 75 5e 7f 1e 5a 37 29 4e 40 73 c6 31 8b ]YLu^..Z7)N@s.1. 0060 a1 72 02 ff 14 80 b3 8f 10 c0 fc ac 63 44 2e 1c .r..........cD.. 0070 2b 0c 5a da 4a 04 3f e4 47 6a 6b fc 12 f5 69 e9 +.Z.J.?.Gjk...i. 0080 a2 65 9b 31 25 a8 94 3c d7 fa 48 4a 98 8f b5 b5 .e.1%..<..HJ.... 0090 50 d5 db b5 8d 1c 84 14 5e 12 3c bd 90 5e 38 05 P.......^.<..^8. 00a0 68 2c d9 ef 41 26 72 47 30 59 51 7a f9 d7 dd c8 h,..A&rG0YQz.... 00b0 13 0d b1 ac 1f ed 74 24 f8 74 d6 3f 8b 53 24 3e ......t$.t.?.S$> 00c0 e8 b9 54 78 ca 50 b6 ac 07 b0 00 00 00 14 d1 f5 ..Tx.P.......... 00d0 dc ca 61 6b 18 c7 30 27 9a b6 6a 67 6b 95 b5 f3 ..ak..0'..jgk... 00e0 51 00 Q. Frame 10 (226 bytes on wire, 226 bytes captured) Arrival Time: Jul 15, 2004 13:58:22.503707000 Time delta from previous packet: 1.009898000 seconds Time since reference or first frame: 3.442273000 seconds Frame Number: 10 Packet Length: 226 bytes Capture Length: 226 bytes Ethernet II, Src: 00:07:e9:0f:d4:32, Dst: 00:0c:29:00:82:53 Destination: 00:0c:29:00:82:53 (00:0c:29:00:82:53) Source: 00:07:e9:0f:d4:32 (00:07:e9:0f:d4:32) Type: IP (0x0800) Frame check sequence: 0x8cd90269 (correct) Internet Protocol, Src Addr: 165.227.249.127 (165.227.249.127), Dst Addr: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 208 Identification: 0x0074 (116) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3aef (correct) Source: 165.227.249.127 (165.227.249.127) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 188 Checksum: 0x4b7d (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x18EA530146D6AB25 Responder cookie: 0x2B7A4ACF174A5CEC Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 180 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 20 Nonce Data 0000 00 0c 29 00 82 53 00 07 e9 0f d4 32 08 00 45 00 ..)..S.....2..E. 0010 00 d0 00 74 00 00 40 11 3a ef a5 e3 f9 7f a5 e3 ...t..@.:....... 0020 f9 73 01 f4 01 f4 00 bc 4b 7d 18 ea 53 01 46 d6 .s......K}..S.F. 0030 ab 25 2b 7a 4a cf 17 4a 5c ec 04 10 02 00 00 00 .%+zJ..J\....... 0040 00 00 00 00 00 b4 0a 00 00 84 00 82 c0 fd fb 98 ................ 0050 5d 59 4c 75 5e 7f 1e 5a 37 29 4e 40 73 c6 31 8b ]YLu^..Z7)N@s.1. 0060 a1 72 02 ff 14 80 b3 8f 10 c0 fc ac 63 44 2e 1c .r..........cD.. 0070 2b 0c 5a da 4a 04 3f e4 47 6a 6b fc 12 f5 69 e9 +.Z.J.?.Gjk...i. 0080 a2 65 9b 31 25 a8 94 3c d7 fa 48 4a 98 8f b5 b5 .e.1%..<..HJ.... 0090 50 d5 db b5 8d 1c 84 14 5e 12 3c bd 90 5e 38 05 P.......^.<..^8. 00a0 68 2c d9 ef 41 26 72 47 30 59 51 7a f9 d7 dd c8 h,..A&rG0YQz.... 00b0 13 0d b1 ac 1f ed 74 24 f8 74 d6 3f 8b 53 24 3e ......t$.t.?.S$> 00c0 e8 b9 54 78 ca 50 b6 ac 07 b0 00 00 00 14 d1 f5 ..Tx.P.......... 00d0 dc ca 61 6b 18 c7 30 27 9a b6 6a 67 6b 95 8c d9 ..ak..0'..jgk... 00e0 02 69 .i Frame 11 (138 bytes on wire, 138 bytes captured) Arrival Time: Jul 15, 2004 13:58:22.763845000 Time delta from previous packet: 0.260138000 seconds Time since reference or first frame: 3.702411000 seconds Frame Number: 11 Packet Length: 138 bytes Capture Length: 138 bytes Ethernet II, Src: 00:0c:29:00:82:53, Dst: 00:07:e9:0f:d4:32 Destination: 00:07:e9:0f:d4:32 (00:07:e9:0f:d4:32) Source: 00:0c:29:00:82:53 (00:0c:29:00:82:53) Type: IP (0x0800) Frame check sequence: 0xfc29cf62 (correct) Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.127 (165.227.249.127) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0074 (116) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xfb46 (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.127 (165.227.249.127) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 100 Checksum: 0xd4f6 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x18EA530146D6AB25 Responder cookie: 0x2B7A4ACF174A5CEC Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 92 Encrypted payload (64 bytes) 0000 00 07 e9 0f d4 32 00 0c 29 00 82 53 08 00 45 00 .....2..)..S..E. 0010 00 78 00 74 00 00 80 11 fb 46 a5 e3 f9 73 a5 e3 .x.t.....F...s.. 0020 f9 7f 01 f4 01 f4 00 64 d4 f6 18 ea 53 01 46 d6 .......d....S.F. 0030 ab 25 2b 7a 4a cf 17 4a 5c ec 05 10 02 01 00 00 .%+zJ..J\....... 0040 00 00 00 00 00 5c 18 64 9e 6e 84 94 06 03 40 a7 .....\.d.n....@. 0050 0a 38 50 67 be 62 b5 28 62 0e 13 46 42 45 45 ff .8Pg.b.(b..FBEE. 0060 f3 1b d4 a9 78 2c 8e a5 8b 11 a6 84 34 fc 57 cd ....x,......4.W. 0070 eb 7b c6 64 b2 ac 5f 3c 47 cc 69 59 42 51 ea fe .{.d.._ 00f0 d9 61 50 4e 93 22 39 ec 76 2c 2b b8 4d 7c 19 58 .aPN."9.v,+.M|.X 0100 ed a8 28 9f 9e 2c 3a c3 5d 4a e5 55 69 26 82 f0 ..(..,:.]J.Ui&.. 0110 10 40 47 90 4f 04 cc 9c 6f da 98 29 f7 04 16 f5 .@G.O...o..).... 0120 6b 76 39 fc eb 8c 8a dd 70 c4 b7 75 3f cc 0d bf kv9.....p..u?... 0130 93 6d 2d d6 57 b1 df bf c6 70 17 a3 5a 3f 5b 2c .m-.W....p..Z?[, 0140 be 71 f3 4a 21 cf 05 98 fa 03 d9 10 2f 88 11 42 .q.J!......./..B 0150 cd a4 .. Frame 16 (330 bytes on wire, 330 bytes captured) Arrival Time: Jul 15, 2004 13:58:24.883752000 Time delta from previous packet: 0.015073000 seconds Time since reference or first frame: 5.822318000 seconds Frame Number: 16 Packet Length: 330 bytes Capture Length: 330 bytes Ethernet II, Src: 00:07:e9:0f:d4:32, Dst: 00:0c:29:00:82:53 Destination: 00:0c:29:00:82:53 (00:0c:29:00:82:53) Source: 00:07:e9:0f:d4:32 (00:07:e9:0f:d4:32) Type: IP (0x0800) Frame check sequence: 0xaff3b8e7 (correct) Internet Protocol, Src Addr: 165.227.249.127 (165.227.249.127), Dst Addr: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 312 Identification: 0x0076 (118) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3a85 (correct) Source: 165.227.249.127 (165.227.249.127) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 292 Checksum: 0x8ef6 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x18EA530146D6AB25 Responder cookie: 0x2B7A4ACF174A5CEC Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00B76637 Length: 284 Encrypted payload (256 bytes) 0000 00 0c 29 00 82 53 00 07 e9 0f d4 32 08 00 45 00 ..)..S.....2..E. 0010 01 38 00 76 00 00 40 11 3a 85 a5 e3 f9 7f a5 e3 .8.v..@.:....... 0020 f9 73 01 f4 01 f4 01 24 8e f6 18 ea 53 01 46 d6 .s.....$....S.F. 0030 ab 25 2b 7a 4a cf 17 4a 5c ec 08 10 20 01 00 b7 .%+zJ..J\... ... 0040 66 37 00 00 01 1c 29 1b 5a 09 f7 cc 00 05 5b 34 f7....).Z.....[4 0050 a4 94 aa 1f 5f 5e 6c 9e 16 10 ce 89 ab 2b b0 33 ...._^l......+.3 0060 76 ba 35 a2 4a c9 27 54 4d cb 15 41 c9 7f 87 d6 v.5.J.'TM..A.... 0070 2a cd cf 62 89 3a 10 aa 5a 7f b3 3f 67 4d b4 2f *..b.:..Z..?gM./ 0080 1e 6d 8a 30 24 51 38 5b f3 4e 33 07 54 ab 98 1b .m.0$Q8[.N3.T... 0090 ed f1 18 a0 c3 c8 13 71 1c 28 c9 ba b7 ca 33 6d .......q.(....3m 00a0 bd 65 8e ff 07 29 b5 12 92 83 73 5e ee ca 6b dc .e...)....s^..k. 00b0 ac d1 a8 e2 42 dc 34 63 75 99 48 79 4c 1d 40 60 ....B.4cu.HyL.@` 00c0 14 7a 3a 44 0d a5 99 0b 46 3d 49 4b 19 dc ec ec .z:D....F=IK.... 00d0 bc 93 29 83 b9 16 15 6e 17 d4 bb b1 49 9f 6a e8 ..)....n....I.j. 00e0 7f d5 48 0e 7e ec cf 7a 5c a9 c8 15 dc 23 b1 fc ..H.~..z\....#.. 00f0 51 5d 0a 68 d3 16 88 2d 88 c5 c8 45 5f f0 06 c8 Q].h...-...E_... 0100 4f 74 ff 7a 1b df ad 32 45 55 cc 86 7a ef e0 20 Ot.z...2EU..z.. 0110 0e f2 6e bd 95 83 0d 3c 6e 8b 6e b1 ce 5a 91 2f ..n......i.....#|^. 0050 e1 74 1b 32 69 8f 19 87 e8 94 99 72 6b 03 6e a4 .t.2i......rk.n. 0060 3d aa d9 23 a9 07 8b 45 ea 15 e1 d2 1e b5 71 70 =..#...E......qp 0070 55 62 4c c6 37 2e ea 8d 18 37 da 63 b8 10 19 14 UbL.7....7.c.... 0080 b6 15 .. Frame 21 (130 bytes on wire, 130 bytes captured) Arrival Time: Jul 15, 2004 13:58:30.485824000 Time delta from previous packet: 0.000980000 seconds Time since reference or first frame: 11.424390000 seconds Frame Number: 21 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:07:e9:0f:d4:32, Dst: 00:0c:29:00:82:53 Destination: 00:0c:29:00:82:53 (00:0c:29:00:82:53) Source: 00:07:e9:0f:d4:32 (00:07:e9:0f:d4:32) Type: IP (0x0800) Frame check sequence: 0x2d848a7f (correct) Internet Protocol, Src Addr: 165.227.249.127 (165.227.249.127), Dst Addr: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0078 (120) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 63 Protocol: ESP (0x32) Header checksum: 0x3c2a (correct) Source: 165.227.249.127 (165.227.249.127) Destination: 165.227.249.115 (165.227.249.115) Encapsulating Security Payload SPI: 0xf9cf1877 Sequence: 3 Data (84 bytes) 0000 00 0c 29 00 82 53 00 07 e9 0f d4 32 08 00 45 00 ..)..S.....2..E. 0010 00 70 00 78 00 00 3f 32 3c 2a a5 e3 f9 7f a5 e3 .p.x..?2<*...... 0020 f9 73 f9 cf 18 77 00 00 00 03 9d a8 7e c0 9b ed .s...w......~... 0030 d1 81 34 19 96 f1 1e 7b 6d bf e9 54 e9 65 61 e0 ..4....{m..T.ea. 0040 ad 63 98 6b 76 e7 91 a8 0c a8 c6 d8 91 c0 bb c0 .c.kv........... 0050 82 92 4f 94 b5 c7 4d d2 e6 1d 4b f6 a8 14 75 ac ..O...M...K...u. 0060 49 b9 28 51 9c f7 14 47 26 70 2e 80 03 14 0b a8 I.(Q...G&p...... 0070 2a 0c f0 44 62 8b a5 e0 15 0e 27 c4 35 58 2d 84 *..Db.....'.5X-. 0080 8a 7f ..