Frame 1 (166 bytes on wire, 166 bytes captured) Arrival Time: Oct 28, 2003 18:10:17.885123000 Time delta from previous packet: 0.000000000 seconds Time relative to first packet: 0.000000000 seconds Frame Number: 1 Packet Length: 166 bytes Capture Length: 166 bytes Ethernet II, Src: 00:0c:29:b1:20:22, Dst: 00:e0:7b:00:0d:61 Destination: 00:e0:7b:00:0d:61 (00:e0:7b:00:0d:61) Source: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22) Type: IP (0x0800) Trailer: 16B6BF2A Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.132 (165.227.249.132) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 148 Identification: 0x0213 (531) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf986 (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.132 (165.227.249.132) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 128 Checksum: 0x5d4f (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x05DB7F0B5C994E5A Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 120 Security Association payload Next payload: Vendor ID (13) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 40 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 32 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (3600) Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: unknown vendor ID: 0x4485152D18B6BBCD0BE8A8469579DDCC Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: unknown vendor ID: 0x90CB80913EBB696E086381B5EC427B1F 0000 00 e0 7b 00 0d 61 00 0c 29 b1 20 22 08 00 45 00 ..{..a..). "..E. 0010 00 94 02 13 00 00 80 11 f9 86 a5 e3 f9 73 a5 e3 .............s.. 0020 f9 84 01 f4 01 f4 00 80 5d 4f 05 db 7f 0b 5c 99 ........]O....\. 0030 4e 5a 00 00 00 00 00 00 00 00 01 10 02 00 00 00 NZ.............. 0040 00 00 00 00 00 78 0d 00 00 34 00 00 00 01 00 00 .....x...4...... 0050 00 01 00 00 00 28 01 01 00 01 00 00 00 20 01 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 04 00 02 80 03 ................ 0070 00 01 80 0b 00 01 80 0c 0e 10 0d 00 00 14 44 85 ..............D. 0080 15 2d 18 b6 bb cd 0b e8 a8 46 95 79 dd cc 00 00 .-.......F.y.... 0090 00 14 90 cb 80 91 3e bb 69 6e 08 63 81 b5 ec 42 ......>.in.c...B 00a0 7b 1f 16 b6 bf 2a {....* Frame 2 (138 bytes on wire, 138 bytes captured) Arrival Time: Oct 28, 2003 18:10:17.936428000 Time delta from previous packet: 0.051305000 seconds Time relative to first packet: 0.051305000 seconds Frame Number: 2 Packet Length: 138 bytes Capture Length: 138 bytes Ethernet II, Src: 00:e0:7b:00:0d:61, Dst: 00:0c:29:b1:20:22 Destination: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22) Source: 00:e0:7b:00:0d:61 (00:e0:7b:00:0d:61) Type: IP (0x0800) Trailer: 60452CB6 Internet Protocol, Src Addr: 165.227.249.132 (165.227.249.132), Dst Addr: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0xe0 (DSCP 0x38: Class Selector 7; ECN: 0x00) 1110 00.. = Differentiated Services Codepoint: Class Selector 7 (0x38) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x1d43 (7491) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x1d93 (correct) Source: 165.227.249.132 (165.227.249.132) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 100 Checksum: 0xcafb (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x05DB7F0B5C994E5A Responder cookie: 0x3B2E39C8F208B1C8 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 92 Security Association payload Next payload: Vendor ID (13) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 40 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 32 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (3600) Vendor ID payload Next payload: NONE (0) Length: 12 Vendor ID: unknown vendor ID: 0x424E455300000007 0000 00 0c 29 b1 20 22 00 e0 7b 00 0d 61 08 00 45 e0 ..). "..{..a..E. 0010 00 78 1d 43 00 00 40 11 1d 93 a5 e3 f9 84 a5 e3 .x.C..@......... 0020 f9 73 01 f4 01 f4 00 64 ca fb 05 db 7f 0b 5c 99 .s.....d......\. 0030 4e 5a 3b 2e 39 c8 f2 08 b1 c8 01 10 02 00 00 00 NZ;.9........... 0040 00 00 00 00 00 5c 0d 00 00 34 00 00 00 01 00 00 .....\...4...... 0050 00 01 00 00 00 28 01 01 00 01 00 00 00 20 01 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 04 00 02 80 03 ................ 0070 00 01 80 0b 00 01 80 0c 0e 10 00 00 00 0c 42 4e ..............BN 0080 45 53 00 00 00 07 60 45 2c b6 ES....`E,. Frame 3 (302 bytes on wire, 302 bytes captured) Arrival Time: Oct 28, 2003 18:10:19.982624000 Time delta from previous packet: 2.046196000 seconds Time relative to first packet: 2.097501000 seconds Frame Number: 3 Packet Length: 302 bytes Capture Length: 302 bytes Ethernet II, Src: 00:0c:29:b1:20:22, Dst: 00:e0:7b:00:0d:61 Destination: 00:e0:7b:00:0d:61 (00:e0:7b:00:0d:61) Source: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22) Type: IP (0x0800) Trailer: 561EDFB5 Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.132 (165.227.249.132) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 284 Identification: 0x0214 (532) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf8fd (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.132 (165.227.249.132) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 264 Checksum: 0xf3ec (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x05DB7F0B5C994E5A Responder cookie: 0x3B2E39C8F208B1C8 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 256 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: Vendor ID (13) Length: 24 Nonce Data Vendor ID payload Next payload: Vendor ID (13) Length: 48 Vendor ID: unknown vendor ID: 0x47BBE7C993F1FC13B4E6D0DB565C68E5... Vendor ID payload Next payload: Vendor ID (13) Length: 12 Vendor ID: unknown vendor ID: 0xDA8E937880010000 Vendor ID payload Next payload: NONE (0) Length: 12 Vendor ID: unknown vendor ID: 0x09002689DFD6B712 0000 00 e0 7b 00 0d 61 00 0c 29 b1 20 22 08 00 45 00 ..{..a..). "..E. 0010 01 1c 02 14 00 00 80 11 f8 fd a5 e3 f9 73 a5 e3 .............s.. 0020 f9 84 01 f4 01 f4 01 08 f3 ec 05 db 7f 0b 5c 99 ..............\. 0030 4e 5a 3b 2e 39 c8 f2 08 b1 c8 04 10 02 00 00 00 NZ;.9........... 0040 00 00 00 00 01 00 0a 00 00 84 c7 42 cf 97 71 37 ...........B..q7 0050 b3 41 d2 24 36 ea 28 2a cf 64 ac b7 67 3d 4a 71 .A.$6.(*.d..g=Jq 0060 4a 77 6f 60 5d 9c bc 2e ae d3 a9 0e f0 e1 71 3c Jwo`].........q< 0070 52 a7 ca 97 8d 5c f1 9a 71 db e7 aa 05 2f 6e ed R....\..q..../n. 0080 8d 98 1c 7f 04 4d 28 c1 84 cd b5 c2 1e 67 cd ee .....M(......g.. 0090 24 ae 1c e1 93 67 63 a0 6f 5e e8 81 5e 1c 58 73 $....gc.o^..^.Xs 00a0 e7 01 f7 d3 f1 63 0d 1d e8 75 07 ec 46 a1 7f 74 .....c...u..F..t 00b0 f5 d2 05 a8 16 54 7d d7 7f a0 8c 59 72 0e 31 ea .....T}....Yr.1. 00c0 2d 46 7c a7 15 fe d1 c5 33 b6 0d 00 00 18 fb 02 -F|.....3....... 00d0 2a bc 83 9d 95 a2 5f 25 da de 83 68 fe bc 7e 71 *....._%...h..~q 00e0 20 37 0d 00 00 30 47 bb e7 c9 93 f1 fc 13 b4 e6 7...0G......... 00f0 d0 db 56 5c 68 e5 01 02 01 01 02 01 01 03 11 31 ..V\h..........1 0100 30 2e 31 2e 31 20 28 42 75 69 6c 64 20 31 30 29 0.1.1 (Build 10) 0110 00 00 0d 00 00 0c da 8e 93 78 80 01 00 00 00 00 .........x...... 0120 00 0c 09 00 26 89 df d6 b7 12 56 1e df b5 ....&.....V... Frame 4 (230 bytes on wire, 230 bytes captured) Arrival Time: Oct 28, 2003 18:10:20.159970000 Time delta from previous packet: 0.177346000 seconds Time relative to first packet: 2.274847000 seconds Frame Number: 4 Packet Length: 230 bytes Capture Length: 230 bytes Ethernet II, Src: 00:e0:7b:00:0d:61, Dst: 00:0c:29:b1:20:22 Destination: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22) Source: 00:e0:7b:00:0d:61 (00:e0:7b:00:0d:61) Type: IP (0x0800) Trailer: BB1FF6CD Internet Protocol, Src Addr: 165.227.249.132 (165.227.249.132), Dst Addr: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0xe0 (DSCP 0x38: Class Selector 7; ECN: 0x00) 1110 00.. = Differentiated Services Codepoint: Class Selector 7 (0x38) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 212 Identification: 0x1d45 (7493) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x1d35 (correct) Source: 165.227.249.132 (165.227.249.132) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 192 Checksum: 0x84e5 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x05DB7F0B5C994E5A Responder cookie: 0x3B2E39C8F208B1C8 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 184 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 24 Nonce Data 0000 00 0c 29 b1 20 22 00 e0 7b 00 0d 61 08 00 45 e0 ..). "..{..a..E. 0010 00 d4 1d 45 00 00 40 11 1d 35 a5 e3 f9 84 a5 e3 ...E..@..5...... 0020 f9 73 01 f4 01 f4 00 c0 84 e5 05 db 7f 0b 5c 99 .s............\. 0030 4e 5a 3b 2e 39 c8 f2 08 b1 c8 04 10 02 00 00 00 NZ;.9........... 0040 00 00 00 00 00 b8 0a 00 00 84 d9 6b ed cf 37 11 ...........k..7. 0050 bb ce 6b 41 ae b1 4b 0d d4 0f ff 0f 16 2e 25 01 ..kA..K.......%. 0060 76 91 89 59 e8 c8 7d f8 2c e9 bf 0f a2 54 d0 d0 v..Y..}.,....T.. 0070 02 e9 b2 51 4f 19 cd 48 4e 81 71 e6 19 93 15 d5 ...QO..HN.q..... 0080 e3 9b 52 cc ae 5d a5 e3 9d 8f c6 fb 6c 1c 3b 3e ..R..]......l.;> 0090 d1 cd c1 bb cc 5e 03 47 d5 09 fe 61 8e a1 84 93 .....^.G...a.... 00a0 e3 4d 8a 4d 4a 4b 9e 25 03 cb 96 38 db cb 75 30 .M.MJK.%...8..u0 00b0 47 00 03 02 d6 bc 3f bb 66 d8 66 3d 85 0e 20 85 G.....?.f.f=.. . 00c0 26 5c 70 be 51 ba 5d e6 58 04 00 00 00 18 aa fc &\p.Q.].X....... 00d0 81 5d 8a b8 c0 1d 45 f6 24 03 e7 dd 9b ee 29 67 .]....E.$.....)g 00e0 06 8b bb 1f f6 cd ...... Frame 5 (138 bytes on wire, 138 bytes captured) Arrival Time: Oct 28, 2003 18:10:21.890517000 Time delta from previous packet: 1.730547000 seconds Time relative to first packet: 4.005394000 seconds Frame Number: 5 Packet Length: 138 bytes Capture Length: 138 bytes Ethernet II, Src: 00:0c:29:b1:20:22, Dst: 00:e0:7b:00:0d:61 Destination: 00:e0:7b:00:0d:61 (00:e0:7b:00:0d:61) Source: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22) Type: IP (0x0800) Trailer: 1F33F352 Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.132 (165.227.249.132) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0216 (534) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf99f (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.132 (165.227.249.132) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 100 Checksum: 0x5569 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x05DB7F0B5C994E5A Responder cookie: 0x3B2E39C8F208B1C8 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 92 Encrypted payload (64 bytes) 0000 00 e0 7b 00 0d 61 00 0c 29 b1 20 22 08 00 45 00 ..{..a..). "..E. 0010 00 78 02 16 00 00 80 11 f9 9f a5 e3 f9 73 a5 e3 .x...........s.. 0020 f9 84 01 f4 01 f4 00 64 55 69 05 db 7f 0b 5c 99 .......dUi....\. 0030 4e 5a 3b 2e 39 c8 f2 08 b1 c8 05 10 02 01 00 00 NZ;.9........... 0040 00 00 00 00 00 5c 7c 3d 8f 6e 0c 2f ab 40 93 ff .....\|=.n./.@.. 0050 b5 06 88 5a 1c 60 c6 3c 2d b8 2e ae d9 ea bc f5 ...Z.`.<-....... 0060 49 f5 17 ca 74 c8 52 ff e1 b7 97 42 3b c3 a7 26 I...t.R....B;..& 0070 15 28 d6 c9 60 87 25 0c d6 9f b8 bb 44 70 2a 9a .(..`.%.....Dp*. 0080 3b 10 93 8f e8 ae 1f 33 f3 52 ;......3.R Frame 6 (138 bytes on wire, 138 bytes captured) Arrival Time: Oct 28, 2003 18:10:21.953550000 Time delta from previous packet: 0.063033000 seconds Time relative to first packet: 4.068427000 seconds Frame Number: 6 Packet Length: 138 bytes Capture Length: 138 bytes Ethernet II, Src: 00:e0:7b:00:0d:61, Dst: 00:0c:29:b1:20:22 Destination: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22) Source: 00:e0:7b:00:0d:61 (00:e0:7b:00:0d:61) Type: IP (0x0800) Trailer: CC69638C Internet Protocol, Src Addr: 165.227.249.132 (165.227.249.132), Dst Addr: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0xe0 (DSCP 0x38: Class Selector 7; ECN: 0x00) 1110 00.. = Differentiated Services Codepoint: Class Selector 7 (0x38) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x1d5f (7519) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x1d77 (correct) Source: 165.227.249.132 (165.227.249.132) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 100 Checksum: 0xc196 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x05DB7F0B5C994E5A Responder cookie: 0x3B2E39C8F208B1C8 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 92 Encrypted payload (64 bytes) 0000 00 0c 29 b1 20 22 00 e0 7b 00 0d 61 08 00 45 e0 ..). "..{..a..E. 0010 00 78 1d 5f 00 00 40 11 1d 77 a5 e3 f9 84 a5 e3 .x._..@..w...... 0020 f9 73 01 f4 01 f4 00 64 c1 96 05 db 7f 0b 5c 99 .s.....d......\. 0030 4e 5a 3b 2e 39 c8 f2 08 b1 c8 05 10 02 01 00 00 NZ;.9........... 0040 00 00 00 00 00 5c 34 28 a4 04 a6 35 92 06 ed 55 .....\4(...5...U 0050 11 58 64 1a 25 93 92 d7 e2 2a fe 04 60 5d c7 92 .Xd.%....*..`].. 0060 64 69 cc af 39 f7 14 f9 d4 93 30 cc a3 36 b2 a9 di..9.....0..6.. 0070 28 91 92 62 4a 82 6b a1 c1 c5 83 8b b8 58 85 69 (..bJ.k......X.i 0080 1b 35 59 49 33 29 cc 69 63 8c .5YI3).ic. Frame 7 (338 bytes on wire, 338 bytes captured) Arrival Time: Oct 28, 2003 18:10:24.091441000 Time delta from previous packet: 2.137891000 seconds Time relative to first packet: 6.206318000 seconds Frame Number: 7 Packet Length: 338 bytes Capture Length: 338 bytes Ethernet II, Src: 00:0c:29:b1:20:22, Dst: 00:e0:7b:00:0d:61 Destination: 00:e0:7b:00:0d:61 (00:e0:7b:00:0d:61) Source: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22) Type: IP (0x0800) Trailer: 47EB5E27 Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.132 (165.227.249.132) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 320 Identification: 0x0218 (536) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf8d5 (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.132 (165.227.249.132) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 300 Checksum: 0x0d31 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x05DB7F0B5C994E5A Responder cookie: 0x3B2E39C8F208B1C8 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x286E0AFB Length: 292 Encrypted payload (264 bytes) 0000 00 e0 7b 00 0d 61 00 0c 29 b1 20 22 08 00 45 00 ..{..a..). "..E. 0010 01 40 02 18 00 00 80 11 f8 d5 a5 e3 f9 73 a5 e3 .@...........s.. 0020 f9 84 01 f4 01 f4 01 2c 0d 31 05 db 7f 0b 5c 99 .......,.1....\. 0030 4e 5a 3b 2e 39 c8 f2 08 b1 c8 08 10 20 01 28 6e NZ;.9....... .(n 0040 0a fb 00 00 01 24 ca 0e 9e e9 2e 27 f0 0b 44 26 .....$.....'..D& 0050 ac 66 0b 8c 8e 59 81 00 23 ba 0d 47 11 0c d4 f5 .f...Y..#..G.... 0060 7d 5c db 19 bc 3e d8 be b6 fd b1 30 0e 16 ae 1a }\...>.....0.... 0070 81 8a de de ce d5 26 0a 6e 8c 2e d3 cb 58 0b c9 ......&.n....X.. 0080 95 17 6b ff 18 b0 bc b5 e1 0f fa 8d 03 5d 43 15 ..k..........]C. 0090 23 41 ed d4 b7 0d 52 83 dc ca 15 ed 8b 85 b4 b9 #A....R......... 00a0 e3 35 9b 39 77 96 c7 0d 8d db 14 bf a1 25 45 e4 .5.9w........%E. 00b0 97 c0 09 ad 32 1c d6 65 bd 48 01 31 6c 0c fb fb ....2..e.H.1l... 00c0 af 8e 43 3d 33 0e f7 59 fa 34 d9 f5 bc 90 f9 63 ..C=3..Y.4.....c 00d0 1c f1 c3 ab bd d6 6d 62 e6 42 e7 1d f4 80 a5 53 ......mb.B.....S 00e0 e1 fc ca 96 29 11 26 3d ad cf 15 1a 93 e5 9d 89 ....).&=........ 00f0 18 fe 4c 80 e4 e0 88 d6 b0 5e 94 d5 36 48 00 34 ..L......^..6H.4 0100 aa 76 a4 05 52 56 12 ca 6c a9 b0 5a 6d 65 f8 01 .v..RV..l..Zme.. 0110 34 29 23 90 b2 f3 f4 d4 5f 21 61 03 d2 b6 74 2b 4)#....._!a...t+ 0120 bd 11 15 69 2c 64 83 46 75 b3 fe 04 dd 72 a2 73 ...i,d.Fu....r.s 0130 43 53 70 d8 df 9b 7e b8 44 6c 47 65 6e a5 3c 31 CSp...~.DlGen.<1 0140 a5 92 3d d4 82 ad c3 05 b0 8b 3d 86 b9 bd 47 eb ..=.......=...G. 0150 5e 27 ^' Frame 8 (338 bytes on wire, 338 bytes captured) Arrival Time: Oct 28, 2003 18:10:24.297433000 Time delta from previous packet: 0.205992000 seconds Time relative to first packet: 6.412310000 seconds Frame Number: 8 Packet Length: 338 bytes Capture Length: 338 bytes Ethernet II, Src: 00:e0:7b:00:0d:61, Dst: 00:0c:29:b1:20:22 Destination: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22) Source: 00:e0:7b:00:0d:61 (00:e0:7b:00:0d:61) Type: IP (0x0800) Trailer: 969428C8 Internet Protocol, Src Addr: 165.227.249.132 (165.227.249.132), Dst Addr: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0xe0 (DSCP 0x38: Class Selector 7; ECN: 0x00) 1110 00.. = Differentiated Services Codepoint: Class Selector 7 (0x38) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 320 Identification: 0x1d78 (7544) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x1c96 (correct) Source: 165.227.249.132 (165.227.249.132) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 300 Checksum: 0xbae7 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x05DB7F0B5C994E5A Responder cookie: 0x3B2E39C8F208B1C8 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x286E0AFB Length: 292 Encrypted payload (264 bytes) 0000 00 0c 29 b1 20 22 00 e0 7b 00 0d 61 08 00 45 e0 ..). "..{..a..E. 0010 01 40 1d 78 00 00 40 11 1c 96 a5 e3 f9 84 a5 e3 .@.x..@......... 0020 f9 73 01 f4 01 f4 01 2c ba e7 05 db 7f 0b 5c 99 .s.....,......\. 0030 4e 5a 3b 2e 39 c8 f2 08 b1 c8 08 10 20 01 28 6e NZ;.9....... .(n 0040 0a fb 00 00 01 24 72 53 dd cf d8 3b d6 80 d1 03 .....$rS...;.... 0050 48 9f f5 70 77 38 4b 0a 24 78 8c da a9 e2 51 48 H..pw8K.$x....QH 0060 7e b5 61 a4 94 74 cb 42 01 c7 93 52 a7 34 6d db ~.a..t.B...R.4m. 0070 05 b0 2a 2e 38 9e cb e4 26 c2 0c 85 f9 af 60 f9 ..*.8...&.....`. 0080 7b 6e 23 3f d3 9c 19 d9 d1 de 28 90 e7 30 37 f2 {n#?......(..07. 0090 09 e4 9c cf 51 74 32 d4 62 d1 04 6c 3d bd 33 36 ....Qt2.b..l=.36 00a0 27 ac e5 3e 47 e4 fa 01 07 be 33 3a f4 27 51 34 '..>G.....3:.'Q4 00b0 e7 c7 6d d5 3c 04 16 4d f9 a8 50 c5 d9 87 f1 d5 ..m.<..M..P..... 00c0 44 f2 fd 7e 4f 26 94 b2 7b 03 e3 4c f0 4d ef c0 D..~O&..{..L.M.. 00d0 86 2e f4 82 6a c0 ba 13 fd 1e 6d 5c ae 25 1c f2 ....j.....m\.%.. 00e0 5b 40 4d 12 8c 7c cd ca 8f 31 ae 27 52 78 4d db [@M..|...1.'RxM. 00f0 f9 e7 11 d3 ef a1 b4 6d 34 4c 4e 2f ce 6f 9f aa .......m4LN/.o.. 0100 03 cb 3b f9 9a ec 3a 3e 52 9d 11 85 61 ba 93 b8 ..;...:>R...a... 0110 d5 f8 bb 5d 83 a2 f5 b9 a7 4b 6c 67 4c 88 f8 36 ...].....KlgL..6 0120 76 5d 3f 44 75 32 f7 e1 b1 68 ec 39 e2 77 82 f4 v]?Du2...h.9.w.. 0130 1f cf cd b3 0b 2f fb 2e e1 21 82 31 8e af 29 ce ...../...!.1..). 0140 a2 2b d1 93 7d 38 ac 54 39 09 6e 4b f5 95 96 94 .+..}8.T9.nK.... 0150 28 c8 (. Frame 9 (98 bytes on wire, 98 bytes captured) Arrival Time: Oct 28, 2003 18:10:24.307052000 Time delta from previous packet: 0.009619000 seconds Time relative to first packet: 6.421929000 seconds Frame Number: 9 Packet Length: 98 bytes Capture Length: 98 bytes Ethernet II, Src: 00:0c:29:b1:20:22, Dst: 00:e0:7b:00:0d:61 Destination: 00:e0:7b:00:0d:61 (00:e0:7b:00:0d:61) Source: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22) Type: IP (0x0800) Trailer: EA383F4F Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.132 (165.227.249.132) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 80 Identification: 0x0219 (537) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf9c4 (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.132 (165.227.249.132) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 60 Checksum: 0x2ca4 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x05DB7F0B5C994E5A Responder cookie: 0x3B2E39C8F208B1C8 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x286E0AFB Length: 52 Encrypted payload (24 bytes) 0000 00 e0 7b 00 0d 61 00 0c 29 b1 20 22 08 00 45 00 ..{..a..). "..E. 0010 00 50 02 19 00 00 80 11 f9 c4 a5 e3 f9 73 a5 e3 .P...........s.. 0020 f9 84 01 f4 01 f4 00 3c 2c a4 05 db 7f 0b 5c 99 .......<,.....\. 0030 4e 5a 3b 2e 39 c8 f2 08 b1 c8 08 10 20 01 28 6e NZ;.9....... .(n 0040 0a fb 00 00 00 34 c3 df 1d ff 07 e4 f2 ae 6b de .....4........k. 0050 c2 c3 28 9a df 02 5e fe 5b 6e ec 22 32 99 ea 38 ..(...^.[n."2..8 0060 3f 4f ?O Frame 10 (130 bytes on wire, 130 bytes captured) Arrival Time: Oct 28, 2003 18:10:28.120718000 Time delta from previous packet: 3.813666000 seconds Time relative to first packet: 10.235595000 seconds Frame Number: 10 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:0c:29:b1:20:22, Dst: 00:e0:7b:00:0d:61 Destination: 00:e0:7b:00:0d:61 (00:e0:7b:00:0d:61) Source: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22) Type: IP (0x0800) Trailer: 938310D6 Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.132 (165.227.249.132) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0001 (1) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: ESP (0x32) Header checksum: 0xfb9b (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.132 (165.227.249.132) Encapsulating Security Payload SPI: 0x0002fb9c Sequence: 0x00000001 Data (84 bytes) 0000 00 e0 7b 00 0d 61 00 0c 29 b1 20 22 08 00 45 00 ..{..a..). "..E. 0010 00 70 00 01 00 00 80 32 fb 9b a5 e3 f9 73 a5 e3 .p.....2.....s.. 0020 f9 84 00 02 fb 9c 00 00 00 01 81 69 8a e2 bd f0 ...........i.... 0030 01 1f 8d 74 ad 58 63 9b 8b ed 91 7f 5b 1a e9 15 ...t.Xc.....[... 0040 d0 33 2c cb 4b 87 89 de a7 df e2 2b 53 ab 6f c9 .3,.K......+S.o. 0050 51 1b 8a 49 9e 43 d2 45 0b 7a 5a 15 83 db a4 b2 Q..I.C.E.zZ..... 0060 44 d3 4b 0c 9f df 9b 82 0f 7d 92 7e 2b 28 8d f9 D.K......}.~+(.. 0070 0e 1f e3 89 d3 23 27 ee 69 0f f8 cf 97 84 93 83 .....#'.i....... 0080 10 d6 .. Frame 11 (130 bytes on wire, 130 bytes captured) Arrival Time: Oct 28, 2003 18:10:28.121482000 Time delta from previous packet: 0.000764000 seconds Time relative to first packet: 10.236359000 seconds Frame Number: 11 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:e0:7b:00:0d:61, Dst: 00:0c:29:b1:20:22 Destination: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22) Source: 00:e0:7b:00:0d:61 (00:e0:7b:00:0d:61) Type: IP (0x0800) Trailer: 69FDFC61 Internet Protocol, Src Addr: 165.227.249.132 (165.227.249.132), Dst Addr: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x1d89 (7561) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x5f13 (correct) Source: 165.227.249.132 (165.227.249.132) Destination: 165.227.249.115 (165.227.249.115) Encapsulating Security Payload SPI: 0xa03b36f7 Sequence: 0x00000001 Data (84 bytes) 0000 00 0c 29 b1 20 22 00 e0 7b 00 0d 61 08 00 45 00 ..). "..{..a..E. 0010 00 70 1d 89 00 00 ff 32 5f 13 a5 e3 f9 84 a5 e3 .p.....2_....... 0020 f9 73 a0 3b 36 f7 00 00 00 01 55 ef 42 17 25 bc .s.;6.....U.B.%. 0030 12 c5 a5 54 15 86 4e ad 0e 58 3a 15 a4 aa 29 25 ...T..N..X:...)% 0040 65 18 1f 2b aa c6 68 9f d8 94 bc 8d f3 7a aa c5 e..+..h......z.. 0050 37 b3 99 45 87 a1 59 a4 3b dd b3 5f df 77 88 3b 7..E..Y.;.._.w.; 0060 b7 44 92 01 7e a7 41 49 a7 44 e7 71 a8 20 c3 87 .D..~.AI.D.q. .. 0070 9a 97 5d 48 93 1e ce 3b 23 91 ed 9f 9f 81 69 fd ..]H...;#.....i. 0080 fc 61 .a Frame 12 (130 bytes on wire, 130 bytes captured) Arrival Time: Oct 28, 2003 18:10:29.119630000 Time delta from previous packet: 0.998148000 seconds Time relative to first packet: 11.234507000 seconds Frame Number: 12 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:0c:29:b1:20:22, Dst: 00:e0:7b:00:0d:61 Destination: 00:e0:7b:00:0d:61 (00:e0:7b:00:0d:61) Source: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22) Type: IP (0x0800) Trailer: 3145EB1F Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.132 (165.227.249.132) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0002 (2) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: ESP (0x32) Header checksum: 0xfb9a (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.132 (165.227.249.132) Encapsulating Security Payload SPI: 0x0002fb9c Sequence: 0x00000002 Data (84 bytes) 0000 00 e0 7b 00 0d 61 00 0c 29 b1 20 22 08 00 45 00 ..{..a..). "..E. 0010 00 70 00 02 00 00 80 32 fb 9a a5 e3 f9 73 a5 e3 .p.....2.....s.. 0020 f9 84 00 02 fb 9c 00 00 00 02 92 7e 2b 28 8d f9 ...........~+(.. 0030 0e 1f fc 5a 47 1e 08 ef 6f 8e 3d 4b 40 76 0d a7 ...ZG...o.=K@v.. 0040 4a bb c6 1e 6c e8 7e cc 58 a7 62 67 81 4f 7b 4d J...l.~.X.bg.O{M 0050 fe d0 9b 29 88 9a cc 72 3f 70 ac c5 54 4e 44 ec ...)...r?p..TND. 0060 3b 29 38 a5 f4 20 e9 a7 22 ee 62 7a b7 ce c7 67 ;)8.. ..".bz...g 0070 83 40 77 08 ae 96 75 97 82 2d cf d5 c2 06 31 45 .@w...u..-....1E 0080 eb 1f .. Frame 13 (130 bytes on wire, 130 bytes captured) Arrival Time: Oct 28, 2003 18:10:29.120027000 Time delta from previous packet: 0.000397000 seconds Time relative to first packet: 11.234904000 seconds Frame Number: 13 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:e0:7b:00:0d:61, Dst: 00:0c:29:b1:20:22 Destination: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22) Source: 00:e0:7b:00:0d:61 (00:e0:7b:00:0d:61) Type: IP (0x0800) Trailer: BAF9DAF8 Internet Protocol, Src Addr: 165.227.249.132 (165.227.249.132), Dst Addr: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x1d8a (7562) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x5f12 (correct) Source: 165.227.249.132 (165.227.249.132) Destination: 165.227.249.115 (165.227.249.115) Encapsulating Security Payload SPI: 0xa03b36f7 Sequence: 0x00000002 Data (84 bytes) 0000 00 0c 29 b1 20 22 00 e0 7b 00 0d 61 08 00 45 00 ..). "..{..a..E. 0010 00 70 1d 8a 00 00 ff 32 5f 12 a5 e3 f9 84 a5 e3 .p.....2_....... 0020 f9 73 a0 3b 36 f7 00 00 00 02 e7 71 a8 20 c3 87 .s.;6......q. .. 0030 9a 97 d9 db e8 48 16 39 f9 e2 27 6d 58 19 aa e7 .....H.9..'mX... 0040 13 18 a2 ec ea 72 86 15 ba 6e c5 61 c8 79 6c 77 .....r...n.a.ylw 0050 39 c7 b1 22 60 cf 5b 37 d6 ab 1e dc 4d 6f 49 27 9.."`.[7....MoI' 0060 28 f0 4a 4b 23 4b 90 37 f3 64 20 04 0d ee 52 95 (.JK#K.7.d ...R. 0070 96 3e 7a 09 51 c0 96 be bd c2 38 41 26 9a ba f9 .>z.Q.....8A&... 0080 da f8 .. Frame 14 (130 bytes on wire, 130 bytes captured) Arrival Time: Oct 28, 2003 18:10:31.383964000 Time delta from previous packet: 2.263937000 seconds Time relative to first packet: 13.498841000 seconds Frame Number: 14 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:0c:29:b1:20:22, Dst: 00:e0:7b:00:0d:61 Destination: 00:e0:7b:00:0d:61 (00:e0:7b:00:0d:61) Source: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22) Type: IP (0x0800) Trailer: E112CEBE Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.132 (165.227.249.132) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0003 (3) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: ESP (0x32) Header checksum: 0xfb99 (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.132 (165.227.249.132) Encapsulating Security Payload SPI: 0x0002fb9c Sequence: 0x00000003 Data (84 bytes) 0000 00 e0 7b 00 0d 61 00 0c 29 b1 20 22 08 00 45 00 ..{..a..). "..E. 0010 00 70 00 03 00 00 80 32 fb 99 a5 e3 f9 73 a5 e3 .p.....2.....s.. 0020 f9 84 00 02 fb 9c 00 00 00 03 62 7a b7 ce c7 67 ..........bz...g 0030 83 40 48 a6 86 1a 0c cf b5 76 b9 6d 48 4b 78 24 .@H......v.mHKx$ 0040 82 49 8d a5 8b 94 28 bf 04 b0 47 1b 45 6c 1d 8b .I....(...G.El.. 0050 5a f3 52 a5 45 45 72 6e 60 6f e3 13 c8 a1 26 8e Z.R.EErn`o....&. 0060 be a3 d2 ac c0 6e 2b 51 16 71 2c 97 68 08 b9 39 .....n+Q.q,.h..9 0070 91 85 38 23 c3 54 fa 8e 76 60 57 45 8e 23 e1 12 ..8#.T..v`WE.#.. 0080 ce be .. Frame 15 (130 bytes on wire, 130 bytes captured) Arrival Time: Oct 28, 2003 18:10:31.384428000 Time delta from previous packet: 0.000464000 seconds Time relative to first packet: 13.499305000 seconds Frame Number: 15 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:e0:7b:00:0d:61, Dst: 00:0c:29:b1:20:22 Destination: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22) Source: 00:e0:7b:00:0d:61 (00:e0:7b:00:0d:61) Type: IP (0x0800) Trailer: 09B02D75 Internet Protocol, Src Addr: 165.227.249.132 (165.227.249.132), Dst Addr: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x1d8b (7563) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x5f11 (correct) Source: 165.227.249.132 (165.227.249.132) Destination: 165.227.249.115 (165.227.249.115) Encapsulating Security Payload SPI: 0xa03b36f7 Sequence: 0x00000003 Data (84 bytes) 0000 00 0c 29 b1 20 22 00 e0 7b 00 0d 61 08 00 45 00 ..). "..{..a..E. 0010 00 70 1d 8b 00 00 ff 32 5f 11 a5 e3 f9 84 a5 e3 .p.....2_....... 0020 f9 73 a0 3b 36 f7 00 00 00 03 20 04 0d ee 52 95 .s.;6..... ...R. 0030 96 3e cd 1c f6 9c bd d7 7d f0 49 39 20 4d a2 e9 .>......}.I9 M.. 0040 ce 84 3d f9 b8 b0 7a 14 59 cd 3f 5c 07 28 53 aa ..=...z.Y.?\.(S. 0050 c2 90 83 d6 28 31 a7 52 c7 4d ef 50 6d 9a 8e 4b ....(1.R.M.Pm..K 0060 f0 af 37 16 79 b7 23 01 2b 26 b6 5b 9d a9 02 ac ..7.y.#.+&.[.... 0070 8c a3 4b 2d f6 73 73 70 af 1f be 72 98 e8 09 b0 ..K-.ssp...r.... 0080 2d 75 -u Frame 16 (130 bytes on wire, 130 bytes captured) Arrival Time: Oct 28, 2003 18:10:32.381797000 Time delta from previous packet: 0.997369000 seconds Time relative to first packet: 14.496674000 seconds Frame Number: 16 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:0c:29:b1:20:22, Dst: 00:e0:7b:00:0d:61 Destination: 00:e0:7b:00:0d:61 (00:e0:7b:00:0d:61) Source: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22) Type: IP (0x0800) Trailer: 78794A9E Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.132 (165.227.249.132) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0004 (4) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: ESP (0x32) Header checksum: 0xfb98 (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.132 (165.227.249.132) Encapsulating Security Payload SPI: 0x0002fb9c Sequence: 0x00000004 Data (84 bytes) 0000 00 e0 7b 00 0d 61 00 0c 29 b1 20 22 08 00 45 00 ..{..a..). "..E. 0010 00 70 00 04 00 00 80 32 fb 98 a5 e3 f9 73 a5 e3 .p.....2.....s.. 0020 f9 84 00 02 fb 9c 00 00 00 04 2c 97 68 08 b9 39 ..........,.h..9 0030 91 85 20 d0 ab 80 e5 eb 98 0d 9c a2 b1 07 85 6a .. ............j 0040 32 9c 17 77 32 f3 7d d9 78 77 b1 17 c7 31 c4 35 2..w2.}.xw...1.5 0050 21 71 49 1d 2a a4 b2 b4 9b d3 5a e8 00 c6 b5 87 !qI.*.....Z..... 0060 a8 b2 81 64 37 58 b8 f3 59 8b 9f 54 b2 15 e8 0f ...d7X..Y..T.... 0070 cb dd 8e 85 2e 11 8d 73 c7 fd 01 c1 0b e7 78 79 .......s......xy 0080 4a 9e J. Frame 17 (130 bytes on wire, 130 bytes captured) Arrival Time: Oct 28, 2003 18:10:32.382247000 Time delta from previous packet: 0.000450000 seconds Time relative to first packet: 14.497124000 seconds Frame Number: 17 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:e0:7b:00:0d:61, Dst: 00:0c:29:b1:20:22 Destination: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22) Source: 00:e0:7b:00:0d:61 (00:e0:7b:00:0d:61) Type: IP (0x0800) Trailer: 0609C5F9 Internet Protocol, Src Addr: 165.227.249.132 (165.227.249.132), Dst Addr: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x1d8c (7564) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x5f10 (correct) Source: 165.227.249.132 (165.227.249.132) Destination: 165.227.249.115 (165.227.249.115) Encapsulating Security Payload SPI: 0xa03b36f7 Sequence: 0x00000004 Data (84 bytes) 0000 00 0c 29 b1 20 22 00 e0 7b 00 0d 61 08 00 45 00 ..). "..{..a..E. 0010 00 70 1d 8c 00 00 ff 32 5f 10 a5 e3 f9 84 a5 e3 .p.....2_....... 0020 f9 73 a0 3b 36 f7 00 00 00 04 b6 5b 9d a9 02 ac .s.;6......[.... 0030 8c a3 d9 93 c2 88 61 1d e8 de d2 b6 c7 95 d8 0b ......a......... 0040 09 d8 46 02 df 56 d5 e3 23 7e a9 c5 93 e8 b5 48 ..F..V..#~.....H 0050 f9 21 e6 86 6e 88 dd ba 23 61 cf 81 ce e3 19 8f .!..n...#a...... 0060 78 1d d8 e3 12 0e d6 17 ab 61 0a 26 74 67 cc aa x........a.&tg.. 0070 9b 50 0b 16 f7 cc a8 28 9e 76 d2 99 6a 85 06 09 .P.....(.v..j... 0080 c5 f9 .. Frame 18 (130 bytes on wire, 130 bytes captured) Arrival Time: Oct 28, 2003 18:10:33.385527000 Time delta from previous packet: 1.003280000 seconds Time relative to first packet: 15.500404000 seconds Frame Number: 18 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:0c:29:b1:20:22, Dst: 00:e0:7b:00:0d:61 Destination: 00:e0:7b:00:0d:61 (00:e0:7b:00:0d:61) Source: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22) Type: IP (0x0800) Trailer: 21BABADD Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.132 (165.227.249.132) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0005 (5) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: ESP (0x32) Header checksum: 0xfb97 (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.132 (165.227.249.132) Encapsulating Security Payload SPI: 0x0002fb9c Sequence: 0x00000005 Data (84 bytes) 0000 00 e0 7b 00 0d 61 00 0c 29 b1 20 22 08 00 45 00 ..{..a..). "..E. 0010 00 70 00 05 00 00 80 32 fb 97 a5 e3 f9 73 a5 e3 .p.....2.....s.. 0020 f9 84 00 02 fb 9c 00 00 00 05 9f 54 b2 15 e8 0f ...........T.... 0030 cb dd 49 64 8a 40 92 e9 dc a8 b5 7d 19 b3 d1 cb ..Id.@.....}.... 0040 a4 6a e2 14 6d c5 6b 1a 15 0f 0d 39 8f 60 20 ba .j..m.k....9.` . 0050 2b 2f 12 31 b6 64 ce ce 57 0e c5 5c 13 ff 29 90 +/.1.d..W..\..). 0060 32 f3 1a 2f aa 20 63 cb a5 aa 9c 96 15 c7 b2 12 2../. c......... 0070 5d 0d 4b 95 18 c2 1d dd c0 6e 6c 79 6b 99 21 ba ].K......nlyk.!. 0080 ba dd .. Frame 19 (130 bytes on wire, 130 bytes captured) Arrival Time: Oct 28, 2003 18:10:33.385974000 Time delta from previous packet: 0.000447000 seconds Time relative to first packet: 15.500851000 seconds Frame Number: 19 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:e0:7b:00:0d:61, Dst: 00:0c:29:b1:20:22 Destination: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22) Source: 00:e0:7b:00:0d:61 (00:e0:7b:00:0d:61) Type: IP (0x0800) Trailer: B7FDB9BB Internet Protocol, Src Addr: 165.227.249.132 (165.227.249.132), Dst Addr: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x1d8d (7565) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x5f0f (correct) Source: 165.227.249.132 (165.227.249.132) Destination: 165.227.249.115 (165.227.249.115) Encapsulating Security Payload SPI: 0xa03b36f7 Sequence: 0x00000005 Data (84 bytes) 0000 00 0c 29 b1 20 22 00 e0 7b 00 0d 61 08 00 45 00 ..). "..{..a..E. 0010 00 70 1d 8d 00 00 ff 32 5f 0f a5 e3 f9 84 a5 e3 .p.....2_....... 0020 f9 73 a0 3b 36 f7 00 00 00 05 0a 26 74 67 cc aa .s.;6......&tg.. 0030 9b 50 b0 c8 cf 7f eb dd d0 95 5f a5 71 dc 0f 0c .P........_.q... 0040 d0 fa fd 8e 05 72 dc ab 89 8e af 29 38 2d 91 e9 .....r.....)8-.. 0050 c6 a7 d3 da fc 6d 7d 5e 1c 02 48 f4 53 14 e0 5f .....m}^..H.S.._ 0060 91 b1 a4 08 9d d9 a3 a3 81 65 1c 53 d6 1f a2 6a .........e.S...j 0070 e3 c0 a9 76 66 91 24 2e 18 50 48 6f a5 8d b7 fd ...vf.$..PHo.... 0080 b9 bb .. Frame 20 (130 bytes on wire, 130 bytes captured) Arrival Time: Oct 28, 2003 18:10:34.385519000 Time delta from previous packet: 0.999545000 seconds Time relative to first packet: 16.500396000 seconds Frame Number: 20 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:0c:29:b1:20:22, Dst: 00:e0:7b:00:0d:61 Destination: 00:e0:7b:00:0d:61 (00:e0:7b:00:0d:61) Source: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22) Type: IP (0x0800) Trailer: 4748A5B2 Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.132 (165.227.249.132) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0006 (6) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: ESP (0x32) Header checksum: 0xfb96 (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.132 (165.227.249.132) Encapsulating Security Payload SPI: 0x0002fb9c Sequence: 0x00000006 Data (84 bytes) 0000 00 e0 7b 00 0d 61 00 0c 29 b1 20 22 08 00 45 00 ..{..a..). "..E. 0010 00 70 00 06 00 00 80 32 fb 96 a5 e3 f9 73 a5 e3 .p.....2.....s.. 0020 f9 84 00 02 fb 9c 00 00 00 06 9c 96 15 c7 b2 12 ................ 0030 5d 0d e9 a2 09 e5 1b f2 6c 22 29 96 08 8e a0 d3 ].......l")..... 0040 6c bd 96 d2 9b b0 a2 1b ff cd 09 bb e1 39 39 9d l............99. 0050 47 e2 4a fe b0 2f a2 f3 fc 35 48 b0 1c c8 f8 51 G.J../...5H....Q 0060 6b 79 83 fc 63 77 b5 e8 35 c2 70 f4 e9 a5 70 2e ky..cw..5.p...p. 0070 d6 b0 dc 1d c4 b6 22 d8 57 63 68 ca e2 62 47 48 ......".Wch..bGH 0080 a5 b2 .. Frame 21 (130 bytes on wire, 130 bytes captured) Arrival Time: Oct 28, 2003 18:10:34.385929000 Time delta from previous packet: 0.000410000 seconds Time relative to first packet: 16.500806000 seconds Frame Number: 21 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:e0:7b:00:0d:61, Dst: 00:0c:29:b1:20:22 Destination: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22) Source: 00:e0:7b:00:0d:61 (00:e0:7b:00:0d:61) Type: IP (0x0800) Trailer: 4ADA5783 Internet Protocol, Src Addr: 165.227.249.132 (165.227.249.132), Dst Addr: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x1d8e (7566) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x5f0e (correct) Source: 165.227.249.132 (165.227.249.132) Destination: 165.227.249.115 (165.227.249.115) Encapsulating Security Payload SPI: 0xa03b36f7 Sequence: 0x00000006 Data (84 bytes) 0000 00 0c 29 b1 20 22 00 e0 7b 00 0d 61 08 00 45 00 ..). "..{..a..E. 0010 00 70 1d 8e 00 00 ff 32 5f 0e a5 e3 f9 84 a5 e3 .p.....2_....... 0020 f9 73 a0 3b 36 f7 00 00 00 06 1c 53 d6 1f a2 6a .s.;6......S...j 0030 e3 c0 e8 bc a3 a3 33 da ba b9 8f 67 94 9b 5d db ......3....g..]. 0040 b5 33 75 68 15 da 65 9b 6f d9 0a 6a a9 6b 64 ac .3uh..e.o..j.kd. 0050 2a 20 46 5e d1 22 31 f3 65 34 a9 f8 c6 b3 8e 7f * F^."1.e4...... 0060 92 81 6c 8a 49 79 57 ca e1 7d 29 da 14 4a 15 df ..l.IyW..})..J.. 0070 17 64 ad 84 6d 1c 35 a1 13 fe b4 05 1a a6 4a da .d..m.5.......J. 0080 57 83 W.