Frame 1 (166 bytes on wire, 166 bytes captured) Arrival Time: Oct 2, 2003 10:14:56.122639000 Time delta from previous packet: 0.000000000 seconds Time relative to first packet: 0.000000000 seconds Frame Number: 1 Packet Length: 166 bytes Capture Length: 166 bytes Ethernet II, Src: 00:0c:29:b1:20:22, Dst: 00:a0:eb:00:cd:44 Destination: 00:a0:eb:00:cd:44 (00:a0:eb:00:cd:44) Source: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22) Type: IP (0x0800) Trailer: 723A56DF Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.129 (165.227.249.129) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 148 Identification: 0x0054 (84) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xfb48 (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.129 (165.227.249.129) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 128 Checksum: 0xae30 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x24CAD9CDF97DE6E5 Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 120 Security Association payload Next payload: Vendor ID (13) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 40 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 32 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (3600) Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: unknown vendor ID: 0x4485152D18B6BBCD0BE8A8469579DDCC Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: unknown vendor ID: 0x90CB80913EBB696E086381B5EC427B1F 0000 00 a0 eb 00 cd 44 00 0c 29 b1 20 22 08 00 45 00 .....D..). "..E. 0010 00 94 00 54 00 00 80 11 fb 48 a5 e3 f9 73 a5 e3 ...T.....H...s.. 0020 f9 81 01 f4 01 f4 00 80 ae 30 24 ca d9 cd f9 7d .........0$....} 0030 e6 e5 00 00 00 00 00 00 00 00 01 10 02 00 00 00 ................ 0040 00 00 00 00 00 78 0d 00 00 34 00 00 00 01 00 00 .....x...4...... 0050 00 01 00 00 00 28 01 01 00 01 00 00 00 20 01 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 04 00 02 80 03 ................ 0070 00 01 80 0b 00 01 80 0c 0e 10 0d 00 00 14 44 85 ..............D. 0080 15 2d 18 b6 bb cd 0b e8 a8 46 95 79 dd cc 00 00 .-.......F.y.... 0090 00 14 90 cb 80 91 3e bb 69 6e 08 63 81 b5 ec 42 ......>.in.c...B 00a0 7b 1f 72 3a 56 df {.r:V. Frame 2 (126 bytes on wire, 126 bytes captured) Arrival Time: Oct 2, 2003 10:14:56.124801000 Time delta from previous packet: 0.002162000 seconds Time relative to first packet: 0.002162000 seconds Frame Number: 2 Packet Length: 126 bytes Capture Length: 126 bytes Ethernet II, Src: 00:a0:eb:00:cd:44, Dst: 00:0c:29:b1:20:22 Destination: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22) Source: 00:a0:eb:00:cd:44 (00:a0:eb:00:cd:44) Type: IP (0x0800) Trailer: 9538D399 Internet Protocol, Src Addr: 165.227.249.129 (165.227.249.129), Dst Addr: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 108 Identification: 0x0000 (0) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3bc5 (correct) Source: 165.227.249.129 (165.227.249.129) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 88 Checksum: 0x80dc (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x24CAD9CDF97DE6E5 Responder cookie: 0x526AD5495DB9C333 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 80 Security Association payload Next payload: NONE (0) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 40 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 32 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (3600) 0000 00 0c 29 b1 20 22 00 a0 eb 00 cd 44 08 00 45 00 ..). ".....D..E. 0010 00 6c 00 00 00 00 40 11 3b c5 a5 e3 f9 81 a5 e3 .l....@.;....... 0020 f9 73 01 f4 01 f4 00 58 80 dc 24 ca d9 cd f9 7d .s.....X..$....} 0030 e6 e5 52 6a d5 49 5d b9 c3 33 01 10 02 00 00 00 ..Rj.I]..3...... 0040 00 00 00 00 00 50 00 00 00 34 00 00 00 01 00 00 .....P...4...... 0050 00 01 00 00 00 28 01 01 00 01 00 00 00 20 01 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 04 00 02 80 03 ................ 0070 00 01 80 0b 00 01 80 0c 0e 10 95 38 d3 99 ...........8.. Frame 3 (302 bytes on wire, 302 bytes captured) Arrival Time: Oct 2, 2003 10:14:56.592275000 Time delta from previous packet: 0.467474000 seconds Time relative to first packet: 0.469636000 seconds Frame Number: 3 Packet Length: 302 bytes Capture Length: 302 bytes Ethernet II, Src: 00:0c:29:b1:20:22, Dst: 00:a0:eb:00:cd:44 Destination: 00:a0:eb:00:cd:44 (00:a0:eb:00:cd:44) Source: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22) Type: IP (0x0800) Trailer: 711858CD Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.129 (165.227.249.129) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 284 Identification: 0x0055 (85) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xfabf (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.129 (165.227.249.129) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 264 Checksum: 0x91f6 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x24CAD9CDF97DE6E5 Responder cookie: 0x526AD5495DB9C333 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 256 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: Vendor ID (13) Length: 24 Nonce Data Vendor ID payload Next payload: Vendor ID (13) Length: 48 Vendor ID: unknown vendor ID: 0x47BBE7C993F1FC13B4E6D0DB565C68E5... Vendor ID payload Next payload: Vendor ID (13) Length: 12 Vendor ID: unknown vendor ID: 0xDA8E937880010000 Vendor ID payload Next payload: NONE (0) Length: 12 Vendor ID: unknown vendor ID: 0x09002689DFD6B712 0000 00 a0 eb 00 cd 44 00 0c 29 b1 20 22 08 00 45 00 .....D..). "..E. 0010 01 1c 00 55 00 00 80 11 fa bf a5 e3 f9 73 a5 e3 ...U.........s.. 0020 f9 81 01 f4 01 f4 01 08 91 f6 24 ca d9 cd f9 7d ..........$....} 0030 e6 e5 52 6a d5 49 5d b9 c3 33 04 10 02 00 00 00 ..Rj.I]..3...... 0040 00 00 00 00 01 00 0a 00 00 84 64 27 2e 20 f7 fc ..........d'. .. 0050 fe 89 e5 c7 07 4c fc 30 cf 09 d0 20 ca 8e cd 59 .....L.0... ...Y 0060 33 1e b6 59 85 1d 7c 22 3c f7 33 cd 3f 3d 25 23 3..Y..|"<.3.?=%# 0070 09 0e 74 d6 4d 5b 0a e0 95 6e 32 59 0e 55 6c 46 ..t.M[...n2Y.UlF 0080 a1 38 a2 39 18 bc c9 a4 ea 30 ca 98 cf 5a ed b1 .8.9.....0...Z.. 0090 83 18 5d 1a ea b8 f6 ab fb 54 1f e1 2d ae 43 a9 ..]......T..-.C. 00a0 e4 3e 9b 06 a7 cc 38 db 47 ad d1 18 b5 be ce 87 .>....8.G....... 00b0 e1 18 36 1f e1 ef 85 13 a8 d0 9d e3 ae 26 e9 85 ..6..........&.. 00c0 91 96 51 5f 3a 24 7f 63 e1 58 0d 00 00 18 48 96 ..Q_:$.c.X....H. 00d0 ae e2 67 9b 84 59 2d fc ac 1b de 6d cb ec 44 d4 ..g..Y-....m..D. 00e0 21 11 0d 00 00 30 47 bb e7 c9 93 f1 fc 13 b4 e6 !....0G......... 00f0 d0 db 56 5c 68 e5 01 02 01 01 02 01 01 03 11 31 ..V\h..........1 0100 30 2e 31 2e 31 20 28 42 75 69 6c 64 20 31 30 29 0.1.1 (Build 10) 0110 00 00 0d 00 00 0c da 8e 93 78 80 01 00 00 00 00 .........x...... 0120 00 0c 09 00 26 89 df d6 b7 12 71 18 58 cd ....&.....q.X. Frame 4 (226 bytes on wire, 226 bytes captured) Arrival Time: Oct 2, 2003 10:14:57.309619000 Time delta from previous packet: 0.717344000 seconds Time relative to first packet: 1.186980000 seconds Frame Number: 4 Packet Length: 226 bytes Capture Length: 226 bytes Ethernet II, Src: 00:a0:eb:00:cd:44, Dst: 00:0c:29:b1:20:22 Destination: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22) Source: 00:a0:eb:00:cd:44 (00:a0:eb:00:cd:44) Type: IP (0x0800) Trailer: 7238E177 Internet Protocol, Src Addr: 165.227.249.129 (165.227.249.129), Dst Addr: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 208 Identification: 0x0001 (1) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3b60 (correct) Source: 165.227.249.129 (165.227.249.129) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 188 Checksum: 0x8947 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x24CAD9CDF97DE6E5 Responder cookie: 0x526AD5495DB9C333 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 180 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 20 Nonce Data 0000 00 0c 29 b1 20 22 00 a0 eb 00 cd 44 08 00 45 00 ..). ".....D..E. 0010 00 d0 00 01 00 00 40 11 3b 60 a5 e3 f9 81 a5 e3 ......@.;`...... 0020 f9 73 01 f4 01 f4 00 bc 89 47 24 ca d9 cd f9 7d .s.......G$....} 0030 e6 e5 52 6a d5 49 5d b9 c3 33 04 10 02 00 00 00 ..Rj.I]..3...... 0040 00 00 00 00 00 b4 0a 00 00 84 ac 16 55 41 6b ff ............UAk. 0050 db 79 e4 b6 bd 11 7e 80 9b 45 40 52 0e 8b 53 f8 .y....~..E@R..S. 0060 ba c6 48 82 f0 de d8 7d df e8 02 af b4 78 51 cc ..H....}.....xQ. 0070 fe 11 3b 69 2a b5 13 64 ff c0 22 62 b4 67 80 d9 ..;i*..d.."b.g.. 0080 27 e7 d6 4e 26 03 ca 17 b5 5c 39 07 6f 9f 96 d2 '..N&....\9.o... 0090 72 9d 05 67 43 a7 04 4c a1 cd bf 85 c9 05 35 e6 r..gC..L......5. 00a0 b0 1f 73 39 de 48 69 bd 90 36 a5 c1 62 04 f6 a6 ..s9.Hi..6..b... 00b0 9c 1b 5e 8a 5f 6e a1 50 61 f7 da 3f 99 df 1d 40 ..^._n.Pa..?...@ 00c0 ed 27 b5 e6 3a 43 e9 a9 d1 7d 00 00 00 14 af 9d .'..:C...}...... 00d0 b7 e7 46 ff 39 2e 09 2d 71 86 29 bf bd 23 72 38 ..F.9..-q.)..#r8 00e0 e1 77 .w Frame 5 (138 bytes on wire, 138 bytes captured) Arrival Time: Oct 2, 2003 10:14:58.934918000 Time delta from previous packet: 1.625299000 seconds Time relative to first packet: 2.812279000 seconds Frame Number: 5 Packet Length: 138 bytes Capture Length: 138 bytes Ethernet II, Src: 00:0c:29:b1:20:22, Dst: 00:a0:eb:00:cd:44 Destination: 00:a0:eb:00:cd:44 (00:a0:eb:00:cd:44) Source: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22) Type: IP (0x0800) Trailer: DF47EC49 Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.129 (165.227.249.129) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0057 (87) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xfb61 (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.129 (165.227.249.129) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 100 Checksum: 0xa25e (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x24CAD9CDF97DE6E5 Responder cookie: 0x526AD5495DB9C333 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 92 Encrypted payload (64 bytes) 0000 00 a0 eb 00 cd 44 00 0c 29 b1 20 22 08 00 45 00 .....D..). "..E. 0010 00 78 00 57 00 00 80 11 fb 61 a5 e3 f9 73 a5 e3 .x.W.....a...s.. 0020 f9 81 01 f4 01 f4 00 64 a2 5e 24 ca d9 cd f9 7d .......d.^$....} 0030 e6 e5 52 6a d5 49 5d b9 c3 33 05 10 02 01 00 00 ..Rj.I]..3...... 0040 00 00 00 00 00 5c 7b 4f 03 5f 6d 4e c7 92 03 27 .....\{O._mN...' 0050 5a f6 3a 4b 62 4f af f8 13 ac fa dc b6 ec 2e 7a Z.:KbO.........z 0060 e6 36 de 13 62 43 e9 70 07 e6 11 aa 85 bc 56 c8 .6..bC.p......V. 0070 c5 ff a9 98 72 f9 b4 05 e7 1f 26 f2 dd 0d dd b5 ....r.....&..... 0080 b0 21 00 71 82 d4 df 47 ec 49 .!.q...G.I Frame 6 (114 bytes on wire, 114 bytes captured) Arrival Time: Oct 2, 2003 10:14:58.938545000 Time delta from previous packet: 0.003627000 seconds Time relative to first packet: 2.815906000 seconds Frame Number: 6 Packet Length: 114 bytes Capture Length: 114 bytes Ethernet II, Src: 00:a0:eb:00:cd:44, Dst: 00:0c:29:b1:20:22 Destination: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22) Source: 00:a0:eb:00:cd:44 (00:a0:eb:00:cd:44) Type: IP (0x0800) Trailer: 4D617452 Internet Protocol, Src Addr: 165.227.249.129 (165.227.249.129), Dst Addr: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0x0002 (2) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3bcf (correct) Source: 165.227.249.129 (165.227.249.129) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 76 Checksum: 0xc58e (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x24CAD9CDF97DE6E5 Responder cookie: 0x526AD5495DB9C333 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 68 Encrypted payload (40 bytes) 0000 00 0c 29 b1 20 22 00 a0 eb 00 cd 44 08 00 45 00 ..). ".....D..E. 0010 00 60 00 02 00 00 40 11 3b cf a5 e3 f9 81 a5 e3 .`....@.;....... 0020 f9 73 01 f4 01 f4 00 4c c5 8e 24 ca d9 cd f9 7d .s.....L..$....} 0030 e6 e5 52 6a d5 49 5d b9 c3 33 05 10 02 01 00 00 ..Rj.I]..3...... 0040 00 00 00 00 00 44 d9 65 6d bf 29 7b 75 73 af 32 .....D.em.){us.2 0050 50 4d fe 3a 3a fd 66 9c 74 71 00 b3 d1 cf 70 0b PM.::.f.tq....p. 0060 e6 ee 93 fb 73 8f b2 e1 a1 52 aa 74 9e a5 4d 61 ....s....R.t..Ma 0070 74 52 tR Frame 7 (338 bytes on wire, 338 bytes captured) Arrival Time: Oct 2, 2003 10:15:00.752092000 Time delta from previous packet: 1.813547000 seconds Time relative to first packet: 4.629453000 seconds Frame Number: 7 Packet Length: 338 bytes Capture Length: 338 bytes Ethernet II, Src: 00:0c:29:b1:20:22, Dst: 00:a0:eb:00:cd:44 Destination: 00:a0:eb:00:cd:44 (00:a0:eb:00:cd:44) Source: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22) Type: IP (0x0800) Trailer: 1A8F8E89 Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.129 (165.227.249.129) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 320 Identification: 0x0058 (88) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xfa98 (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.129 (165.227.249.129) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 300 Checksum: 0x8826 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x24CAD9CDF97DE6E5 Responder cookie: 0x526AD5495DB9C333 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xBF52E1B2 Length: 292 Encrypted payload (264 bytes) 0000 00 a0 eb 00 cd 44 00 0c 29 b1 20 22 08 00 45 00 .....D..). "..E. 0010 01 40 00 58 00 00 80 11 fa 98 a5 e3 f9 73 a5 e3 .@.X.........s.. 0020 f9 81 01 f4 01 f4 01 2c 88 26 24 ca d9 cd f9 7d .......,.&$....} 0030 e6 e5 52 6a d5 49 5d b9 c3 33 08 10 20 01 bf 52 ..Rj.I]..3.. ..R 0040 e1 b2 00 00 01 24 b0 61 0c 7f e4 b2 b8 8e d4 1e .....$.a........ 0050 f1 46 fd 18 08 c2 74 e9 39 48 10 ba 63 9f 64 d6 .F....t.9H..c.d. 0060 7f b4 44 90 fb ec e9 27 b5 52 e6 bf ef 8f 96 76 ..D....'.R.....v 0070 b3 e2 cb ac 67 26 98 f9 8f 7c 44 4c 74 cf 6b c8 ....g&...|DLt.k. 0080 bb 80 03 1d e0 17 d4 c5 c1 b0 d7 3e cd 34 e2 f8 ...........>.4.. 0090 2c 56 a9 0a 15 1b 8f da 10 c4 2b 5d f2 24 56 ff ,V........+].$V. 00a0 c4 6c b4 11 88 e1 d0 00 ff 6b 01 89 d6 09 58 94 .l.......k....X. 00b0 7b bf 2e 88 6b 7a e0 1a b3 ca 6e 13 61 b0 d3 2b {...kz....n.a..+ 00c0 12 8c b3 4d 5b a3 c6 04 74 13 9f b8 ec f1 3c 87 ...M[...t.....<. 00d0 77 0a 96 c9 33 d7 83 73 ad 80 10 2a 48 61 2f 3a w...3..s...*Ha/: 00e0 20 af 4e 88 6b 24 d8 3b 05 cb 62 e2 bc cf 58 2a .N.k$.;..b...X* 00f0 27 a9 8f 9e 73 73 20 46 e5 85 76 62 76 3c f2 40 '...ss F..vbv<.@ 0100 74 ea 69 88 11 4c b7 35 8d 7e 11 5f 65 f7 be 03 t.i..L.5.~._e... 0110 cd f2 3a da 6b e3 9c f0 c1 7a a7 94 33 2c ce 82 ..:.k....z..3,.. 0120 76 a7 4a ae 16 27 54 c2 d6 77 7f 87 cb 18 00 33 v.J..'T..w.....3 0130 71 88 7d 5b be 67 40 e0 b8 df d9 a6 0b d9 2c 44 q.}[.g@.......,D 0140 19 ee 5a ca c7 4d 47 a3 49 5b 81 e7 f0 a5 1a 8f ..Z..MG.I[...... 0150 8e 89 .. Frame 8 (330 bytes on wire, 330 bytes captured) Arrival Time: Oct 2, 2003 10:15:01.482448000 Time delta from previous packet: 0.730356000 seconds Time relative to first packet: 5.359809000 seconds Frame Number: 8 Packet Length: 330 bytes Capture Length: 330 bytes Ethernet II, Src: 00:a0:eb:00:cd:44, Dst: 00:0c:29:b1:20:22 Destination: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22) Source: 00:a0:eb:00:cd:44 (00:a0:eb:00:cd:44) Type: IP (0x0800) Trailer: 8A7920E4 Internet Protocol, Src Addr: 165.227.249.129 (165.227.249.129), Dst Addr: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 312 Identification: 0x0003 (3) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3af6 (correct) Source: 165.227.249.129 (165.227.249.129) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 292 Checksum: 0x5dd0 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x24CAD9CDF97DE6E5 Responder cookie: 0x526AD5495DB9C333 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xBF52E1B2 Length: 284 Encrypted payload (256 bytes) 0000 00 0c 29 b1 20 22 00 a0 eb 00 cd 44 08 00 45 00 ..). ".....D..E. 0010 01 38 00 03 00 00 40 11 3a f6 a5 e3 f9 81 a5 e3 .8....@.:....... 0020 f9 73 01 f4 01 f4 01 24 5d d0 24 ca d9 cd f9 7d .s.....$].$....} 0030 e6 e5 52 6a d5 49 5d b9 c3 33 08 10 20 01 bf 52 ..Rj.I]..3.. ..R 0040 e1 b2 00 00 01 1c c6 c1 3b 36 d6 7d 99 5d e9 22 ........;6.}.]." 0050 14 a7 a7 a6 6d 3d 76 1e a5 ca c3 d1 00 48 ad 5c ....m=v......H.\ 0060 b2 36 32 5f 29 cf 26 99 48 d1 ae 1b e6 b1 37 63 .62_).&.H.....7c 0070 27 5f 96 e9 97 b8 b4 b2 d8 cc b8 be 71 01 80 c1 '_..........q... 0080 22 bf 3a e0 28 33 cc 80 f8 17 fa 62 37 aa d2 01 ".:.(3.....b7... 0090 5e 27 74 53 da 77 32 47 b6 ae ba 16 0c 26 56 73 ^'tS.w2G.....&Vs 00a0 f6 21 12 6f 6a f2 5e f8 9d 57 d2 58 aa d6 ab a0 .!.oj.^..W.X.... 00b0 ed 56 3a 7a 29 4b de 46 a5 4f be a8 18 40 24 cc .V:z)K.F.O...@$. 00c0 63 9e 4b 5d 84 cd 02 50 e6 7c 21 04 14 a3 8c 60 c.K]...P.|!....` 00d0 fc e5 6b 87 48 b6 57 6a 48 d7 b3 45 cf 72 4b 27 ..k.H.WjH..E.rK' 00e0 af 09 18 f2 fa 3b 62 c0 78 4b 88 00 f6 3e a9 a0 .....;b.xK...>.. 00f0 8a 31 6b 1e 50 fa 51 b9 03 6f 3e 8c 7d e2 8f 3d .1k.P.Q..o>.}..= 0100 f1 5d c2 c7 57 0d d2 3f 25 ca a8 35 57 9e 85 01 .]..W..?%..5W... 0110 be 6d db b2 a7 01 59 90 66 99 fb d4 70 b6 05 c5 .m....Y.f...p... 0120 4e 34 ae 6d 12 0a 06 00 16 df 4f 8e 2a 6a ac 42 N4.m......O.*j.B 0130 96 b1 8e 13 23 ba 3d 5e 4c 68 c6 e0 c1 f3 cb a6 ....#.=^Lh...... 0140 18 f8 66 00 7a 0a 8a 79 20 e4 ..f.z..y . Frame 9 (98 bytes on wire, 98 bytes captured) Arrival Time: Oct 2, 2003 10:15:01.491241000 Time delta from previous packet: 0.008793000 seconds Time relative to first packet: 5.368602000 seconds Frame Number: 9 Packet Length: 98 bytes Capture Length: 98 bytes Ethernet II, Src: 00:0c:29:b1:20:22, Dst: 00:a0:eb:00:cd:44 Destination: 00:a0:eb:00:cd:44 (00:a0:eb:00:cd:44) Source: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22) Type: IP (0x0800) Trailer: 8E160E74 Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.129 (165.227.249.129) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 80 Identification: 0x005a (90) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xfb86 (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.129 (165.227.249.129) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 60 Checksum: 0xde68 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x24CAD9CDF97DE6E5 Responder cookie: 0x526AD5495DB9C333 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xBF52E1B2 Length: 52 Encrypted payload (24 bytes) 0000 00 a0 eb 00 cd 44 00 0c 29 b1 20 22 08 00 45 00 .....D..). "..E. 0010 00 50 00 5a 00 00 80 11 fb 86 a5 e3 f9 73 a5 e3 .P.Z.........s.. 0020 f9 81 01 f4 01 f4 00 3c de 68 24 ca d9 cd f9 7d .......<.h$....} 0030 e6 e5 52 6a d5 49 5d b9 c3 33 08 10 20 01 bf 52 ..Rj.I]..3.. ..R 0040 e1 b2 00 00 00 34 b8 9f 8f 90 18 7a 3b e2 1a ce .....4.....z;... 0050 c6 6b bc c0 3a 44 e0 b6 0f 80 d3 db b4 a2 8e 16 .k..:D.......... 0060 0e 74 .t Frame 10 (130 bytes on wire, 130 bytes captured) Arrival Time: Oct 2, 2003 10:15:05.929543000 Time delta from previous packet: 4.438302000 seconds Time relative to first packet: 9.806904000 seconds Frame Number: 10 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:0c:29:b1:20:22, Dst: 00:a0:eb:00:cd:44 Destination: 00:a0:eb:00:cd:44 (00:a0:eb:00:cd:44) Source: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22) Type: IP (0x0800) Trailer: 383DC370 Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.129 (165.227.249.129) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0001 (1) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: ESP (0x32) Header checksum: 0xfb9e (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.129 (165.227.249.129) Encapsulating Security Payload SPI: 0x75d05f0f Sequence: 0x00000001 Data (84 bytes) 0000 00 a0 eb 00 cd 44 00 0c 29 b1 20 22 08 00 45 00 .....D..). "..E. 0010 00 70 00 01 00 00 80 32 fb 9e a5 e3 f9 73 a5 e3 .p.....2.....s.. 0020 f9 81 75 d0 5f 0f 00 00 00 01 e7 b5 24 25 26 00 ..u._.......$%&. 0030 12 4a c5 8e 95 6d ae ed 65 76 17 3f 24 a2 f7 cc .J...m..ev.?$... 0040 2d 80 dd f2 59 4a 21 98 9e 5c cc dd e9 41 85 4d -...YJ!..\...A.M 0050 5c 8e 90 08 79 91 5e d4 51 29 86 ec 57 fc 97 dd \...y.^.Q)..W... 0060 a6 2a f2 93 46 c2 a9 2d 99 c8 90 b2 4a 05 c3 56 .*..F..-....J..V 0070 9d 0e 88 b9 80 ec d4 a0 d0 fb 46 bf bb 6f 38 3d ..........F..o8= 0080 c3 70 .p Frame 11 (130 bytes on wire, 130 bytes captured) Arrival Time: Oct 2, 2003 10:15:05.932521000 Time delta from previous packet: 0.002978000 seconds Time relative to first packet: 9.809882000 seconds Frame Number: 11 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:a0:eb:00:cd:44, Dst: 00:0c:29:b1:20:22 Destination: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22) Source: 00:a0:eb:00:cd:44 (00:a0:eb:00:cd:44) Type: IP (0x0800) Trailer: F60D800A Internet Protocol, Src Addr: 165.227.249.129 (165.227.249.129), Dst Addr: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0640 (1600) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: ESP (0x32) Header checksum: 0xf55f (correct) Source: 165.227.249.129 (165.227.249.129) Destination: 165.227.249.115 (165.227.249.115) Encapsulating Security Payload SPI: 0x98e58ed0 Sequence: 0x00000001 Data (84 bytes) 0000 00 0c 29 b1 20 22 00 a0 eb 00 cd 44 08 00 45 00 ..). ".....D..E. 0010 00 70 06 40 00 00 80 32 f5 5f a5 e3 f9 81 a5 e3 .p.@...2._...... 0020 f9 73 98 e5 8e d0 00 00 00 01 00 00 00 00 00 00 .s.............. 0030 00 00 3d de 6c 7a c7 b5 8c e4 c7 8a cf f5 d6 c3 ..=.lz.......... 0040 52 e3 26 06 86 90 24 66 78 82 0e d2 8e 8d 9d 97 R.&...$fx....... 0050 e0 f7 0c e8 7a d4 28 98 cc 32 73 eb b4 f2 a9 e1 ....z.(..2s..... 0060 0b cd 9b 53 0d 7f 84 06 89 cd b8 b5 b9 f2 6b 21 ...S..........k! 0070 4b 17 e1 b9 0c 73 ad f4 70 76 80 6e 38 d1 f6 0d K....s..pv.n8... 0080 80 0a .. Frame 12 (130 bytes on wire, 130 bytes captured) Arrival Time: Oct 2, 2003 10:15:06.937237000 Time delta from previous packet: 1.004716000 seconds Time relative to first packet: 10.814598000 seconds Frame Number: 12 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:0c:29:b1:20:22, Dst: 00:a0:eb:00:cd:44 Destination: 00:a0:eb:00:cd:44 (00:a0:eb:00:cd:44) Source: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22) Type: IP (0x0800) Trailer: 1729547C Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.129 (165.227.249.129) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0002 (2) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: ESP (0x32) Header checksum: 0xfb9d (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.129 (165.227.249.129) Encapsulating Security Payload SPI: 0x75d05f0f Sequence: 0x00000002 Data (84 bytes) 0000 00 a0 eb 00 cd 44 00 0c 29 b1 20 22 08 00 45 00 .....D..). "..E. 0010 00 70 00 02 00 00 80 32 fb 9d a5 e3 f9 73 a5 e3 .p.....2.....s.. 0020 f9 81 75 d0 5f 0f 00 00 00 02 90 b2 4a 05 c3 56 ..u._.......J..V 0030 9d 0e d4 b2 49 8c 48 30 a7 95 72 f5 89 df e7 6d ....I.H0..r....m 0040 74 54 67 a8 b0 2c 0f 21 ac 94 80 66 e9 6b 73 c7 tTg..,.!...f.ks. 0050 a3 0c 5c 6b 46 30 15 c0 d6 24 44 b9 01 45 33 64 ..\kF0...$D..E3d 0060 de 1c 55 3f 92 39 25 14 72 f0 91 be 7a b3 4c 98 ..U?.9%.r...z.L. 0070 18 9c ca 42 79 84 80 f3 91 77 e3 9c 05 a3 17 29 ...By....w.....) 0080 54 7c T| Frame 13 (130 bytes on wire, 130 bytes captured) Arrival Time: Oct 2, 2003 10:15:06.938775000 Time delta from previous packet: 0.001538000 seconds Time relative to first packet: 10.816136000 seconds Frame Number: 13 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:a0:eb:00:cd:44, Dst: 00:0c:29:b1:20:22 Destination: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22) Source: 00:a0:eb:00:cd:44 (00:a0:eb:00:cd:44) Type: IP (0x0800) Trailer: F085B30F Internet Protocol, Src Addr: 165.227.249.129 (165.227.249.129), Dst Addr: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0641 (1601) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: ESP (0x32) Header checksum: 0xf55e (correct) Source: 165.227.249.129 (165.227.249.129) Destination: 165.227.249.115 (165.227.249.115) Encapsulating Security Payload SPI: 0x98e58ed0 Sequence: 0x00000002 Data (84 bytes) 0000 00 0c 29 b1 20 22 00 a0 eb 00 cd 44 08 00 45 00 ..). ".....D..E. 0010 00 70 06 41 00 00 80 32 f5 5e a5 e3 f9 81 a5 e3 .p.A...2.^...... 0020 f9 73 98 e5 8e d0 00 00 00 02 b8 b5 b9 f2 6b 21 .s............k! 0030 4b 17 08 72 e6 60 7c 94 a3 8c 04 2d 54 7a 13 88 K..r.`|....-Tz.. 0040 f0 0c 8b 47 d9 7c 15 55 a6 15 0c 8b 92 3b 4f d5 ...G.|.U.....;O. 0050 4a 2e 7f 04 e7 31 77 95 e8 e5 4a ce c5 5e 5a 0b J....1w...J..^Z. 0060 03 9e 9e 85 e0 6d 45 1e 3b e0 b8 01 18 62 99 eb .....mE.;....b.. 0070 b8 b7 62 38 ab 76 4f 59 70 fe 36 2d fc be f0 85 ..b8.vOYp.6-.... 0080 b3 0f ..