Frame 1 (166 bytes on wire, 166 bytes captured)
Arrival Time: Dec 9, 2003 18:19:13.032101000
Time delta from previous packet: 0.000000000 seconds
Time relative to first packet: 0.000000000 seconds
Frame Number: 1
Packet Length: 166 bytes
Capture Length: 166 bytes
Ethernet II, Src: 00:0c:29:b1:20:22, Dst: 00:0c:41:90:f1:c1
Destination: 00:0c:41:90:f1:c1 (00:0c:41:90:f1:c1)
Source: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22)
Type: IP (0x0800)
Trailer: 10CCDE58
Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.133 (165.227.249.133)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 148
Identification: 0x024f (591)
Flags: 0x00
.0.. = Don't fragment: Not set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 128
Protocol: UDP (0x11)
Header checksum: 0xf949 (correct)
Source: 165.227.249.115 (165.227.249.115)
Destination: 165.227.249.133 (165.227.249.133)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
Source port: 500 (500)
Destination port: 500 (500)
Length: 128
Checksum: 0xdbc6 (correct)
Internet Security Association and Key Management Protocol
Initiator cookie: 0x283D2735BF99A255
Responder cookie: 0x0000000000000000
Next payload: Security Association (1)
Version: 1.0
Exchange type: Identity Protection (Main Mode) (2)
Flags
.... ...0 = No encryption
.... ..0. = No commit
.... .0.. = No authentication
Message ID: 0x00000000
Length: 120
Security Association payload
Next payload: Vendor ID (13)
Length: 52
Domain of interpretation: IPSEC (1)
Situation: IDENTITY (1)
Proposal payload # 1
Next payload: NONE (0)
Length: 40
Proposal number: 1
Protocol ID: ISAKMP (1)
SPI size: 0
Number of transforms: 1
Transform payload # 1
Next payload: NONE (0)
Length: 32
Transform number: 1
Transform ID: KEY_IKE (1)
Encryption-Algorithm (1): 3DES-CBC (5)
Hash-Algorithm (2): SHA (2)
Group-Description (4): Alternate 1024-bit MODP group (2)
Authentication-Method (3): PSK (1)
Life-Type (11): Seconds (1)
Life-Duration (12): Duration-Value (3600)
Vendor ID payload
Next payload: Vendor ID (13)
Length: 20
Vendor ID: unknown vendor ID: 0x4485152D18B6BBCD0BE8A8469579DDCC
Vendor ID payload
Next payload: NONE (0)
Length: 20
Vendor ID: unknown vendor ID: 0x90CB80913EBB696E086381B5EC427B1F
0000 00 0c 41 90 f1 c1 00 0c 29 b1 20 22 08 00 45 00 ..A.....). "..E.
0010 00 94 02 4f 00 00 80 11 f9 49 a5 e3 f9 73 a5 e3 ...O.....I...s..
0020 f9 85 01 f4 01 f4 00 80 db c6 28 3d 27 35 bf 99 ..........(='5..
0030 a2 55 00 00 00 00 00 00 00 00 01 10 02 00 00 00 .U..............
0040 00 00 00 00 00 78 0d 00 00 34 00 00 00 01 00 00 .....x...4......
0050 00 01 00 00 00 28 01 01 00 01 00 00 00 20 01 01 .....(....... ..
0060 00 00 80 01 00 05 80 02 00 02 80 04 00 02 80 03 ................
0070 00 01 80 0b 00 01 80 0c 0e 10 0d 00 00 14 44 85 ..............D.
0080 15 2d 18 b6 bb cd 0b e8 a8 46 95 79 dd cc 00 00 .-.......F.y....
0090 00 14 90 cb 80 91 3e bb 69 6e 08 63 81 b5 ec 42 ......>.in.c...B
00a0 7b 1f 10 cc de 58 {....X
Frame 2 (126 bytes on wire, 126 bytes captured)
Arrival Time: Dec 9, 2003 18:19:13.036221000
Time delta from previous packet: 0.004120000 seconds
Time relative to first packet: 0.004120000 seconds
Frame Number: 2
Packet Length: 126 bytes
Capture Length: 126 bytes
Ethernet II, Src: 00:0c:41:90:f1:c1, Dst: 00:0c:29:b1:20:22
Destination: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22)
Source: 00:0c:41:90:f1:c1 (00:0c:41:90:f1:c1)
Type: IP (0x0800)
Trailer: CB32CAC1
Internet Protocol, Src Addr: 165.227.249.133 (165.227.249.133), Dst Addr: 165.227.249.115 (165.227.249.115)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 108
Identification: 0x0000 (0)
Flags: 0x04
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: UDP (0x11)
Header checksum: 0xfbc0 (correct)
Source: 165.227.249.133 (165.227.249.133)
Destination: 165.227.249.115 (165.227.249.115)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
Source port: 500 (500)
Destination port: 500 (500)
Length: 88
Checksum: 0xec48 (correct)
Internet Security Association and Key Management Protocol
Initiator cookie: 0x283D2735BF99A255
Responder cookie: 0xB88B3190A4157C99
Next payload: Security Association (1)
Version: 1.0
Exchange type: Identity Protection (Main Mode) (2)
Flags
.... ...0 = No encryption
.... ..0. = No commit
.... .0.. = No authentication
Message ID: 0x00000000
Length: 80
Security Association payload
Next payload: NONE (0)
Length: 52
Domain of interpretation: IPSEC (1)
Situation: IDENTITY (1)
Proposal payload # 1
Next payload: NONE (0)
Length: 40
Proposal number: 1
Protocol ID: ISAKMP (1)
SPI size: 0
Number of transforms: 1
Transform payload # 1
Next payload: NONE (0)
Length: 32
Transform number: 1
Transform ID: KEY_IKE (1)
Encryption-Algorithm (1): 3DES-CBC (5)
Hash-Algorithm (2): SHA (2)
Group-Description (4): Alternate 1024-bit MODP group (2)
Authentication-Method (3): PSK (1)
Life-Type (11): Seconds (1)
Life-Duration (12): Duration-Value (3600)
0000 00 0c 29 b1 20 22 00 0c 41 90 f1 c1 08 00 45 00 ..). "..A.....E.
0010 00 6c 00 00 40 00 40 11 fb c0 a5 e3 f9 85 a5 e3 .l..@.@.........
0020 f9 73 01 f4 01 f4 00 58 ec 48 28 3d 27 35 bf 99 .s.....X.H(='5..
0030 a2 55 b8 8b 31 90 a4 15 7c 99 01 10 02 00 00 00 .U..1...|.......
0040 00 00 00 00 00 50 00 00 00 34 00 00 00 01 00 00 .....P...4......
0050 00 01 00 00 00 28 01 01 00 01 00 00 00 20 01 01 .....(....... ..
0060 00 00 80 01 00 05 80 02 00 02 80 04 00 02 80 03 ................
0070 00 01 80 0b 00 01 80 0c 0e 10 cb 32 ca c1 ...........2..
Frame 3 (302 bytes on wire, 302 bytes captured)
Arrival Time: Dec 9, 2003 18:19:15.286596000
Time delta from previous packet: 2.250375000 seconds
Time relative to first packet: 2.254495000 seconds
Frame Number: 3
Packet Length: 302 bytes
Capture Length: 302 bytes
Ethernet II, Src: 00:0c:29:b1:20:22, Dst: 00:0c:41:90:f1:c1
Destination: 00:0c:41:90:f1:c1 (00:0c:41:90:f1:c1)
Source: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22)
Type: IP (0x0800)
Trailer: D7953C05
Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.133 (165.227.249.133)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 284
Identification: 0x0250 (592)
Flags: 0x00
.0.. = Don't fragment: Not set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 128
Protocol: UDP (0x11)
Header checksum: 0xf8c0 (correct)
Source: 165.227.249.115 (165.227.249.115)
Destination: 165.227.249.133 (165.227.249.133)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
Source port: 500 (500)
Destination port: 500 (500)
Length: 264
Checksum: 0x02e8 (correct)
Internet Security Association and Key Management Protocol
Initiator cookie: 0x283D2735BF99A255
Responder cookie: 0xB88B3190A4157C99
Next payload: Key Exchange (4)
Version: 1.0
Exchange type: Identity Protection (Main Mode) (2)
Flags
.... ...0 = No encryption
.... ..0. = No commit
.... .0.. = No authentication
Message ID: 0x00000000
Length: 256
Key Exchange payload
Next payload: Nonce (10)
Length: 132
Key Exchange Data
Nonce payload
Next payload: Vendor ID (13)
Length: 24
Nonce Data
Vendor ID payload
Next payload: Vendor ID (13)
Length: 48
Vendor ID: unknown vendor ID: 0x47BBE7C993F1FC13B4E6D0DB565C68E5...
Vendor ID payload
Next payload: Vendor ID (13)
Length: 12
Vendor ID: unknown vendor ID: 0xDA8E937880010000
Vendor ID payload
Next payload: NONE (0)
Length: 12
Vendor ID: unknown vendor ID: 0x09002689DFD6B712
0000 00 0c 41 90 f1 c1 00 0c 29 b1 20 22 08 00 45 00 ..A.....). "..E.
0010 01 1c 02 50 00 00 80 11 f8 c0 a5 e3 f9 73 a5 e3 ...P.........s..
0020 f9 85 01 f4 01 f4 01 08 02 e8 28 3d 27 35 bf 99 ..........(='5..
0030 a2 55 b8 8b 31 90 a4 15 7c 99 04 10 02 00 00 00 .U..1...|.......
0040 00 00 00 00 01 00 0a 00 00 84 82 49 53 36 f8 e4 ...........IS6..
0050 cb cf 54 c2 1d a2 bc ae 0d 63 6a 42 2c 49 08 37 ..T......cjB,I.7
0060 99 72 41 fe 86 23 69 09 79 41 95 c1 2b c2 1f 98 .rA..#i.yA..+...
0070 73 35 a6 98 3c d0 fc 1f 1a 9b 52 f5 89 15 bc 5a s5..<.....R....Z
0080 63 5c 98 ad 43 d2 c4 cd 41 58 d7 ec 81 6c e1 c1 c\..C...AX...l..
0090 fb 8f 93 65 56 84 23 bd 22 28 52 ce 86 b2 82 b4 ...eV.#."(R.....
00a0 07 68 84 63 9d 59 c2 12 59 b9 61 7a 03 f5 1d 72 .h.c.Y..Y.az...r
00b0 53 9b 92 ff 43 68 b4 33 9b 33 7a f9 f7 4f 99 fb S...Ch.3.3z..O..
00c0 33 e1 ed 71 42 d8 16 24 6a 20 0d 00 00 18 eb 6f 3..qB..$j .....o
00d0 50 7f 02 2a bb d5 1d 5b 8e 00 ef 65 54 30 1d 00 P..*...[...eT0..
00e0 26 56 0d 00 00 30 47 bb e7 c9 93 f1 fc 13 b4 e6 &V...0G.........
00f0 d0 db 56 5c 68 e5 01 02 01 01 02 01 01 03 11 31 ..V\h..........1
0100 30 2e 31 2e 31 20 28 42 75 69 6c 64 20 31 30 29 0.1.1 (Build 10)
0110 00 00 0d 00 00 0c da 8e 93 78 80 01 00 00 00 00 .........x......
0120 00 0c 09 00 26 89 df d6 b7 12 d7 95 3c 05 ....&.......<.
Frame 4 (226 bytes on wire, 226 bytes captured)
Arrival Time: Dec 9, 2003 18:19:15.404465000
Time delta from previous packet: 0.117869000 seconds
Time relative to first packet: 2.372364000 seconds
Frame Number: 4
Packet Length: 226 bytes
Capture Length: 226 bytes
Ethernet II, Src: 00:0c:41:90:f1:c1, Dst: 00:0c:29:b1:20:22
Destination: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22)
Source: 00:0c:41:90:f1:c1 (00:0c:41:90:f1:c1)
Type: IP (0x0800)
Trailer: 16893DDC
Internet Protocol, Src Addr: 165.227.249.133 (165.227.249.133), Dst Addr: 165.227.249.115 (165.227.249.115)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 208
Identification: 0x0000 (0)
Flags: 0x04
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: UDP (0x11)
Header checksum: 0xfb5c (correct)
Source: 165.227.249.133 (165.227.249.133)
Destination: 165.227.249.115 (165.227.249.115)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
Source port: 500 (500)
Destination port: 500 (500)
Length: 188
Checksum: 0x583e (correct)
Internet Security Association and Key Management Protocol
Initiator cookie: 0x283D2735BF99A255
Responder cookie: 0xB88B3190A4157C99
Next payload: Key Exchange (4)
Version: 1.0
Exchange type: Identity Protection (Main Mode) (2)
Flags
.... ...0 = No encryption
.... ..0. = No commit
.... .0.. = No authentication
Message ID: 0x00000000
Length: 180
Key Exchange payload
Next payload: Nonce (10)
Length: 132
Key Exchange Data
Nonce payload
Next payload: NONE (0)
Length: 20
Nonce Data
0000 00 0c 29 b1 20 22 00 0c 41 90 f1 c1 08 00 45 00 ..). "..A.....E.
0010 00 d0 00 00 40 00 40 11 fb 5c a5 e3 f9 85 a5 e3 ....@.@..\......
0020 f9 73 01 f4 01 f4 00 bc 58 3e 28 3d 27 35 bf 99 .s......X>(='5..
0030 a2 55 b8 8b 31 90 a4 15 7c 99 04 10 02 00 00 00 .U..1...|.......
0040 00 00 00 00 00 b4 0a 00 00 84 0b 5c cf a5 2c 9e ...........\..,.
0050 b5 ba b5 c4 c4 cb fa f1 7b 96 ac 43 2d 33 7f 68 ........{..C-3.h
0060 83 46 f1 9a d9 26 33 b5 1d 33 e6 87 4c a2 5f c8 .F...&3..3..L._.
0070 71 c9 4d 88 6a 0a ba b8 ba 42 b4 60 b3 61 ee 1d q.M.j....B.`.a..
0080 b9 e2 b5 4b 5e c0 d9 3b db 01 a6 8b a1 95 39 af ...K^..;......9.
0090 aa 72 4b 08 82 3c de d9 d1 b4 59 86 74 98 7c a7 .rK..<....Y.t.|.
00a0 d0 06 c6 ea 75 ec b9 fa bf 2f a3 be ab f3 5f ad ....u..../...._.
00b0 2b f0 42 2f 7d ad b7 53 04 78 45 d8 12 8c d0 72 +.B/}..S.xE....r
00c0 a3 df 29 30 df c5 ea 02 1c 67 00 00 00 14 87 e3 ..)0.....g......
00d0 bb 5b 23 26 b8 a2 46 e7 c2 a0 9c d2 73 14 16 89 .[#&..F.....s...
00e0 3d dc =.
Frame 5 (138 bytes on wire, 138 bytes captured)
Arrival Time: Dec 9, 2003 18:19:16.917980000
Time delta from previous packet: 1.513515000 seconds
Time relative to first packet: 3.885879000 seconds
Frame Number: 5
Packet Length: 138 bytes
Capture Length: 138 bytes
Ethernet II, Src: 00:0c:29:b1:20:22, Dst: 00:0c:41:90:f1:c1
Destination: 00:0c:41:90:f1:c1 (00:0c:41:90:f1:c1)
Source: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22)
Type: IP (0x0800)
Trailer: 65EA8E7B
Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.133 (165.227.249.133)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 120
Identification: 0x0251 (593)
Flags: 0x00
.0.. = Don't fragment: Not set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 128
Protocol: UDP (0x11)
Header checksum: 0xf963 (correct)
Source: 165.227.249.115 (165.227.249.115)
Destination: 165.227.249.133 (165.227.249.133)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
Source port: 500 (500)
Destination port: 500 (500)
Length: 100
Checksum: 0x8ebb (correct)
Internet Security Association and Key Management Protocol
Initiator cookie: 0x283D2735BF99A255
Responder cookie: 0xB88B3190A4157C99
Next payload: Identification (5)
Version: 1.0
Exchange type: Identity Protection (Main Mode) (2)
Flags
.... ...1 = Encryption
.... ..0. = No commit
.... .0.. = No authentication
Message ID: 0x00000000
Length: 92
Encrypted payload (64 bytes)
0000 00 0c 41 90 f1 c1 00 0c 29 b1 20 22 08 00 45 00 ..A.....). "..E.
0010 00 78 02 51 00 00 80 11 f9 63 a5 e3 f9 73 a5 e3 .x.Q.....c...s..
0020 f9 85 01 f4 01 f4 00 64 8e bb 28 3d 27 35 bf 99 .......d..(='5..
0030 a2 55 b8 8b 31 90 a4 15 7c 99 05 10 02 01 00 00 .U..1...|.......
0040 00 00 00 00 00 5c 36 68 ca ec 37 23 f6 10 34 e4 .....\6h..7#..4.
0050 b5 05 a9 0d ba 89 ef f2 57 96 c6 08 0e 4c 07 1c ........W....L..
0060 f0 95 7f 5f c6 a0 8a 23 e3 7c 29 83 e1 56 12 6e ..._...#.|)..V.n
0070 31 f5 62 7b 1c f3 13 1b 54 6b ad ec bd 06 69 eb 1.b{....Tk....i.
0080 04 ad cd 4e 49 e0 65 ea 8e 7b ...NI.e..{
Frame 6 (114 bytes on wire, 114 bytes captured)
Arrival Time: Dec 9, 2003 18:19:16.926478000
Time delta from previous packet: 0.008498000 seconds
Time relative to first packet: 3.894377000 seconds
Frame Number: 6
Packet Length: 114 bytes
Capture Length: 114 bytes
Ethernet II, Src: 00:0c:41:90:f1:c1, Dst: 00:0c:29:b1:20:22
Destination: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22)
Source: 00:0c:41:90:f1:c1 (00:0c:41:90:f1:c1)
Type: IP (0x0800)
Trailer: BF3C4178
Internet Protocol, Src Addr: 165.227.249.133 (165.227.249.133), Dst Addr: 165.227.249.115 (165.227.249.115)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 96
Identification: 0x0000 (0)
Flags: 0x04
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: UDP (0x11)
Header checksum: 0xfbcc (correct)
Source: 165.227.249.133 (165.227.249.133)
Destination: 165.227.249.115 (165.227.249.115)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
Source port: 500 (500)
Destination port: 500 (500)
Length: 76
Checksum: 0x9ca5 (correct)
Internet Security Association and Key Management Protocol
Initiator cookie: 0x283D2735BF99A255
Responder cookie: 0xB88B3190A4157C99
Next payload: Identification (5)
Version: 1.0
Exchange type: Identity Protection (Main Mode) (2)
Flags
.... ...1 = Encryption
.... ..0. = No commit
.... .0.. = No authentication
Message ID: 0x00000000
Length: 68
Encrypted payload (40 bytes)
0000 00 0c 29 b1 20 22 00 0c 41 90 f1 c1 08 00 45 00 ..). "..A.....E.
0010 00 60 00 00 40 00 40 11 fb cc a5 e3 f9 85 a5 e3 .`..@.@.........
0020 f9 73 01 f4 01 f4 00 4c 9c a5 28 3d 27 35 bf 99 .s.....L..(='5..
0030 a2 55 b8 8b 31 90 a4 15 7c 99 05 10 02 01 00 00 .U..1...|.......
0040 00 00 00 00 00 44 9d 8a 2c 9b 4c cf 21 a6 a6 f6 .....D..,.L.!...
0050 ec 04 69 6b bd 33 d3 2f a4 8f 7a 7d ca 24 fc 59 ..ik.3./..z}.$.Y
0060 51 da 75 c4 b4 a7 d2 4e c8 41 df 83 bb 39 bf 3c Q.u....N.A...9.<
0070 41 78 Ax
Frame 7 (330 bytes on wire, 330 bytes captured)
Arrival Time: Dec 9, 2003 18:19:16.977302000
Time delta from previous packet: 0.050824000 seconds
Time relative to first packet: 3.945201000 seconds
Frame Number: 7
Packet Length: 330 bytes
Capture Length: 330 bytes
Ethernet II, Src: 00:0c:41:90:f1:c1, Dst: 00:0c:29:b1:20:22
Destination: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22)
Source: 00:0c:41:90:f1:c1 (00:0c:41:90:f1:c1)
Type: IP (0x0800)
Trailer: 0AD5CF04
Internet Protocol, Src Addr: 165.227.249.133 (165.227.249.133), Dst Addr: 165.227.249.115 (165.227.249.115)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 312
Identification: 0x0000 (0)
Flags: 0x04
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: UDP (0x11)
Header checksum: 0xfaf4 (correct)
Source: 165.227.249.133 (165.227.249.133)
Destination: 165.227.249.115 (165.227.249.115)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
Source port: 500 (500)
Destination port: 500 (500)
Length: 292
Checksum: 0x7633 (correct)
Internet Security Association and Key Management Protocol
Initiator cookie: 0x283D2735BF99A255
Responder cookie: 0xB88B3190A4157C99
Next payload: Hash (8)
Version: 1.0
Exchange type: Quick Mode (32)
Flags
.... ...1 = Encryption
.... ..0. = No commit
.... .0.. = No authentication
Message ID: 0x8D09989A
Length: 284
Encrypted payload (256 bytes)
0000 00 0c 29 b1 20 22 00 0c 41 90 f1 c1 08 00 45 00 ..). "..A.....E.
0010 01 38 00 00 40 00 40 11 fa f4 a5 e3 f9 85 a5 e3 .8..@.@.........
0020 f9 73 01 f4 01 f4 01 24 76 33 28 3d 27 35 bf 99 .s.....$v3(='5..
0030 a2 55 b8 8b 31 90 a4 15 7c 99 08 10 20 01 8d 09 .U..1...|... ...
0040 98 9a 00 00 01 1c 4f 4e 83 be 59 e5 62 41 1a fb ......ON..Y.bA..
0050 ed 56 eb c3 e9 f8 3d 5f 84 65 ba fc 18 3f 50 e0 .V....=_.e...?P.
0060 88 c0 76 9e b5 58 66 5b 62 61 30 f4 e0 1b 3e 52 ..v..Xf[ba0...>R
0070 69 69 b4 3c 3c 70 f6 b7 6d 56 cd ea 28 ce 95 15 ii.<
..F
00c0 11 5a ca 30 d0 04 98 90 e4 c1 9d c0 7f cb b6 60 .Z.0...........`
00d0 89 4f 9e 2b 1e b5 04 58 ca 19 33 cc cc 96 43 ab .O.+...X..3...C.
00e0 4a 81 a5 2c 2c d8 64 34 6d 9b 07 54 24 79 50 6d J..,,.d4m..T$yPm
00f0 ad 30 e3 3b 0a c9 84 3a 3b d1 5e 3d f0 ae 47 1b .0.;...:;.^=..G.
0100 70 a9 e4 11 32 cb 0c 6a a7 a2 7e 87 66 3f 88 7d p...2..j..~.f?.}
0110 de a0 c6 28 c0 e6 c8 ff c5 73 6e cb 0b f2 29 e2 ...(.....sn...).
0120 62 6e 13 8c ae f3 b9 eb e4 90 23 62 17 20 38 e7 bn........#b. 8.
0130 11 cf 04 9f bc 3a 76 b7 1b 8d 68 fb bc 26 86 5e .....:v...h..&.^
0140 b2 80 b2 c4 b6 c0 28 8a c7 cc ......(...
Frame 10 (338 bytes on wire, 338 bytes captured)
Arrival Time: Dec 9, 2003 18:19:21.549521000
Time delta from previous packet: 2.158931000 seconds
Time relative to first packet: 8.517420000 seconds
Frame Number: 10
Packet Length: 338 bytes
Capture Length: 338 bytes
Ethernet II, Src: 00:0c:29:b1:20:22, Dst: 00:0c:41:90:f1:c1
Destination: 00:0c:41:90:f1:c1 (00:0c:41:90:f1:c1)
Source: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22)
Type: IP (0x0800)
Trailer: 3109573A
Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.133 (165.227.249.133)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 320
Identification: 0x0255 (597)
Flags: 0x00
.0.. = Don't fragment: Not set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 128
Protocol: UDP (0x11)
Header checksum: 0xf897 (correct)
Source: 165.227.249.115 (165.227.249.115)
Destination: 165.227.249.133 (165.227.249.133)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
Source port: 500 (500)
Destination port: 500 (500)
Length: 300
Checksum: 0xe059 (correct)
Internet Security Association and Key Management Protocol
Initiator cookie: 0x283D2735BF99A255
Responder cookie: 0xB88B3190A4157C99
Next payload: Hash (8)
Version: 1.0
Exchange type: Quick Mode (32)
Flags
.... ...1 = Encryption
.... ..1. = Commit
.... .0.. = No authentication
Message ID: 0x8D09989A
Length: 292
Encrypted payload (264 bytes)
0000 00 0c 41 90 f1 c1 00 0c 29 b1 20 22 08 00 45 00 ..A.....). "..E.
0010 01 40 02 55 00 00 80 11 f8 97 a5 e3 f9 73 a5 e3 .@.U.........s..
0020 f9 85 01 f4 01 f4 01 2c e0 59 28 3d 27 35 bf 99 .......,.Y(='5..
0030 a2 55 b8 8b 31 90 a4 15 7c 99 08 10 20 03 8d 09 .U..1...|... ...
0040 98 9a 00 00 01 24 d6 f2 44 45 a3 06 14 c7 1a 32 .....$..DE.....2
0050 4f 1c 6c ca 25 16 ac ef 82 52 ee 77 ae 48 a2 96 O.l.%....R.w.H..
0060 1a 6f ec 34 36 d3 19 6a 3f f6 e9 10 38 bd 5c f8 .o.46..j?...8.\.
0070 1d 69 75 9b bb 29 07 8f 1c 5d 1d 71 2e 10 a4 a1 .iu..)...].q....
0080 4c f1 bf f3 58 87 75 95 db 2d e4 32 dc 18 99 ef L...X.u..-.2....
0090 cb 06 b6 74 50 58 ce 8a 80 bf e4 3e ee 4a 42 30 ...tPX.....>.JB0
00a0 c0 c7 cd 82 f7 df b3 26 b8 68 e2 df 6a 1c 5e 19 .......&.h..j.^.
00b0 d1 33 56 c1 2d 87 5d ea 6f 1f bd cd 02 1c 43 b2 .3V.-.].o.....C.
00c0 b2 28 61 78 b3 c3 8c 08 9a 0c 73 da 1e 63 11 44 .(ax......s..c.D
00d0 20 e6 4f ef 8f 30 b0 2b 17 c5 ae 65 14 c3 6a ba .O..0.+...e..j.
00e0 98 e2 78 d7 2e d8 5e 4a 8d ba df 47 d6 d8 f2 64 ..x...^J...G...d
00f0 37 63 76 c1 08 72 7a 5e 83 4d cc b9 c5 0a 3b dd 7cv..rz^.M....;.
0100 08 f3 75 52 2e a2 a4 c7 c8 27 14 3b 84 23 85 f0 ..uR.....'.;.#..
0110 39 c7 41 d4 b0 16 7f 99 0a ee bb eb b5 fd c5 86 9.A.............
0120 3a 32 91 85 b4 da 0d 66 8b 9f 9a f7 8d d0 bd 73 :2.....f.......s
0130 8c 31 f5 36 b6 fe db cc a4 c7 15 f2 af 2c d0 67 .1.6.........,.g
0140 66 b8 0e 91 9a 68 c7 ae 7c c7 ba 73 b1 13 31 09 f....h..|..s..1.
0150 57 3a W:
Frame 11 (98 bytes on wire, 98 bytes captured)
Arrival Time: Dec 9, 2003 18:19:22.225930000
Time delta from previous packet: 0.676409000 seconds
Time relative to first packet: 9.193829000 seconds
Frame Number: 11
Packet Length: 98 bytes
Capture Length: 98 bytes
Ethernet II, Src: 00:0c:41:90:f1:c1, Dst: 00:0c:29:b1:20:22
Destination: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22)
Source: 00:0c:41:90:f1:c1 (00:0c:41:90:f1:c1)
Type: IP (0x0800)
Trailer: D45A602A
Internet Protocol, Src Addr: 165.227.249.133 (165.227.249.133), Dst Addr: 165.227.249.115 (165.227.249.115)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 80
Identification: 0x0000 (0)
Flags: 0x04
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: UDP (0x11)
Header checksum: 0xfbdc (correct)
Source: 165.227.249.133 (165.227.249.133)
Destination: 165.227.249.115 (165.227.249.115)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
Source port: 500 (500)
Destination port: 500 (500)
Length: 60
Checksum: 0xc649 (correct)
Internet Security Association and Key Management Protocol
Initiator cookie: 0x283D2735BF99A255
Responder cookie: 0xB88B3190A4157C99
Next payload: Hash (8)
Version: 1.0
Exchange type: Quick Mode (32)
Flags
.... ...1 = Encryption
.... ..0. = No commit
.... .0.. = No authentication
Message ID: 0x8D09989A
Length: 52
Encrypted payload (24 bytes)
0000 00 0c 29 b1 20 22 00 0c 41 90 f1 c1 08 00 45 00 ..). "..A.....E.
0010 00 50 00 00 40 00 40 11 fb dc a5 e3 f9 85 a5 e3 .P..@.@.........
0020 f9 73 01 f4 01 f4 00 3c c6 49 28 3d 27 35 bf 99 .s.....<.I(='5..
0030 a2 55 b8 8b 31 90 a4 15 7c 99 08 10 20 01 8d 09 .U..1...|... ...
0040 98 9a 00 00 00 34 d4 ab 46 c9 6c 09 dd 77 b9 e0 .....4..F.l..w..
0050 d6 08 14 38 01 1c fe 7b c4 e7 dc 42 42 93 d4 5a ...8...{...BB..Z
0060 60 2a `*
Frame 12 (130 bytes on wire, 130 bytes captured)
Arrival Time: Dec 9, 2003 18:19:28.432475000
Time delta from previous packet: 6.206545000 seconds
Time relative to first packet: 15.400374000 seconds
Frame Number: 12
Packet Length: 130 bytes
Capture Length: 130 bytes
Ethernet II, Src: 00:0c:29:b1:20:22, Dst: 00:0c:41:90:f1:c1
Destination: 00:0c:41:90:f1:c1 (00:0c:41:90:f1:c1)
Source: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22)
Type: IP (0x0800)
Trailer: 22C3B07C
Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.133 (165.227.249.133)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 112
Identification: 0x0001 (1)
Flags: 0x00
.0.. = Don't fragment: Not set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 128
Protocol: ESP (0x32)
Header checksum: 0xfb9a (correct)
Source: 165.227.249.115 (165.227.249.115)
Destination: 165.227.249.133 (165.227.249.133)
Encapsulating Security Payload
SPI: 0x7f718e89
Sequence: 0x00000001
Data (84 bytes)
0000 00 0c 41 90 f1 c1 00 0c 29 b1 20 22 08 00 45 00 ..A.....). "..E.
0010 00 70 00 01 00 00 80 32 fb 9a a5 e3 f9 73 a5 e3 .p.....2.....s..
0020 f9 85 7f 71 8e 89 00 00 00 01 3b 66 d9 7f 7d 2b ...q......;f..}+
0030 f8 37 37 1e ef 44 5b 61 0a 90 4c d7 9f 55 29 da .77..D[a..L..U).
0040 83 d5 fa 08 30 5a 3e 61 d2 1d 51 c8 fc 27 47 a3 ....0Z>a..Q..'G.
0050 2b 7f b1 72 28 63 e9 b6 d7 13 b6 61 94 f5 23 9e +..r(c.....a..#.
0060 f0 66 37 32 54 d4 88 75 b7 30 f3 c5 34 97 de 57 .f72T..u.0..4..W
0070 1f 31 cc f7 e1 18 a4 7a 58 fb 54 ff ef c8 22 c3 .1.....zX.T...".
0080 b0 7c .|
Frame 13 (130 bytes on wire, 130 bytes captured)
Arrival Time: Dec 9, 2003 18:19:28.434305000
Time delta from previous packet: 0.001830000 seconds
Time relative to first packet: 15.402204000 seconds
Frame Number: 13
Packet Length: 130 bytes
Capture Length: 130 bytes
Ethernet II, Src: 00:0c:41:90:f1:c1, Dst: 00:0c:29:b1:20:22
Destination: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22)
Source: 00:0c:41:90:f1:c1 (00:0c:41:90:f1:c1)
Type: IP (0x0800)
Trailer: ADE8372D
Internet Protocol, Src Addr: 165.227.249.133 (165.227.249.133), Dst Addr: 165.227.249.115 (165.227.249.115)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 112
Identification: 0x2a01 (10753)
Flags: 0x00
.0.. = Don't fragment: Not set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: ESP (0x32)
Header checksum: 0x119b (correct)
Source: 165.227.249.133 (165.227.249.133)
Destination: 165.227.249.115 (165.227.249.115)
Encapsulating Security Payload
SPI: 0x7664aa3e
Sequence: 0x00000001
Data (84 bytes)
0000 00 0c 29 b1 20 22 00 0c 41 90 f1 c1 08 00 45 00 ..). "..A.....E.
0010 00 70 2a 01 00 00 40 32 11 9b a5 e3 f9 85 a5 e3 .p*...@2........
0020 f9 73 76 64 aa 3e 00 00 00 01 69 6a 6b 6c 6d 6e .svd.>....ijklmn
0030 6f 70 d0 ea 75 34 65 72 86 49 8a e3 e6 21 ba bf op..u4er.I...!..
0040 b7 de 11 f1 cb 27 33 66 40 a9 18 06 3c b8 40 66 .....'3f@...<.@f
0050 f3 f2 04 5d c1 58 71 2b d1 5d a1 ac ad c9 ff 52 ...].Xq+.].....R
0060 82 70 08 39 8d f0 32 2f 63 f2 4a 8d 8a 0d 21 3d .p.9..2/c.J...!=
0070 21 8f 2e a5 ce 9a 94 1d 09 b5 0b ab 85 17 ad e8 !...............
0080 37 2d 7-
Frame 14 (130 bytes on wire, 130 bytes captured)
Arrival Time: Dec 9, 2003 18:19:29.863239000
Time delta from previous packet: 1.428934000 seconds
Time relative to first packet: 16.831138000 seconds
Frame Number: 14
Packet Length: 130 bytes
Capture Length: 130 bytes
Ethernet II, Src: 00:0c:29:b1:20:22, Dst: 00:0c:41:90:f1:c1
Destination: 00:0c:41:90:f1:c1 (00:0c:41:90:f1:c1)
Source: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22)
Type: IP (0x0800)
Trailer: 48D71001
Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.133 (165.227.249.133)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 112
Identification: 0x0002 (2)
Flags: 0x00
.0.. = Don't fragment: Not set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 128
Protocol: ESP (0x32)
Header checksum: 0xfb99 (correct)
Source: 165.227.249.115 (165.227.249.115)
Destination: 165.227.249.133 (165.227.249.133)
Encapsulating Security Payload
SPI: 0x7f718e89
Sequence: 0x00000002
Data (84 bytes)
0000 00 0c 41 90 f1 c1 00 0c 29 b1 20 22 08 00 45 00 ..A.....). "..E.
0010 00 70 00 02 00 00 80 32 fb 99 a5 e3 f9 73 a5 e3 .p.....2.....s..
0020 f9 85 7f 71 8e 89 00 00 00 02 f3 c5 34 97 de 57 ...q........4..W
0030 1f 31 c8 96 40 a8 74 e7 ed a3 60 c6 49 fb 9d b5 .1..@.t...`.I...
0040 59 22 16 78 b9 ea e8 19 bb d3 e4 8a d9 9c 33 2f Y".x..........3/
0050 9d 13 22 16 3c e3 a6 5d 2c b1 43 80 52 35 10 9f ..".<..],.C.R5..
0060 1d 05 d9 ed c8 ae 52 52 2c ab f6 b4 c4 3f 47 c4 ......RR,....?G.
0070 14 43 19 41 15 2e 5a 65 5a 75 ba 48 32 a4 48 d7 .C.A..ZeZu.H2.H.
0080 10 01 ..
Frame 15 (130 bytes on wire, 130 bytes captured)
Arrival Time: Dec 9, 2003 18:19:29.864128000
Time delta from previous packet: 0.000889000 seconds
Time relative to first packet: 16.832027000 seconds
Frame Number: 15
Packet Length: 130 bytes
Capture Length: 130 bytes
Ethernet II, Src: 00:0c:41:90:f1:c1, Dst: 00:0c:29:b1:20:22
Destination: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22)
Source: 00:0c:41:90:f1:c1 (00:0c:41:90:f1:c1)
Type: IP (0x0800)
Trailer: 5326F7EA
Internet Protocol, Src Addr: 165.227.249.133 (165.227.249.133), Dst Addr: 165.227.249.115 (165.227.249.115)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 112
Identification: 0x2a02 (10754)
Flags: 0x00
.0.. = Don't fragment: Not set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: ESP (0x32)
Header checksum: 0x119a (correct)
Source: 165.227.249.133 (165.227.249.133)
Destination: 165.227.249.115 (165.227.249.115)
Encapsulating Security Payload
SPI: 0x7664aa3e
Sequence: 0x00000002
Data (84 bytes)
0000 00 0c 29 b1 20 22 00 0c 41 90 f1 c1 08 00 45 00 ..). "..A.....E.
0010 00 70 2a 02 00 00 40 32 11 9a a5 e3 f9 85 a5 e3 .p*...@2........
0020 f9 73 76 64 aa 3e 00 00 00 02 f8 f9 fa fb fc fd .svd.>..........
0030 fe ff ab c3 eb 1b 04 25 b5 8a 02 f9 82 53 a2 6a .......%.....S.j
0040 b4 37 91 fc 96 93 55 a4 e9 1d 49 90 49 29 62 4c .7....U...I.I)bL
0050 b0 28 e0 25 3a 1a 81 ca 3e 9a 99 99 4e db d6 17 .(.%:...>...N...
0060 a3 70 da 0c 00 d4 f2 1b 4d 9e 9e 57 bb a1 72 3c .p......M..W..r<
0070 4d 63 2f ad 6c 8b 3c 8d b9 c0 2d 22 0a aa 53 26 Mc/.l.<...-"..S&
0080 f7 ea ..
Frame 16 (330 bytes on wire, 330 bytes captured)
Arrival Time: Dec 9, 2003 18:19:30.220217000
Time delta from previous packet: 0.356089000 seconds
Time relative to first packet: 17.188116000 seconds
Frame Number: 16
Packet Length: 330 bytes
Capture Length: 330 bytes
Ethernet II, Src: 00:0c:41:90:f1:c1, Dst: 00:50:fc:84:d2:ec
Destination: 00:50:fc:84:d2:ec (00:50:fc:84:d2:ec)
Source: 00:0c:41:90:f1:c1 (00:0c:41:90:f1:c1)
Type: IP (0x0800)
Trailer: 43E85A51
Internet Protocol, Src Addr: 165.227.249.133 (165.227.249.133), Dst Addr: 165.227.249.115 (165.227.249.115)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 312
Identification: 0x0000 (0)
Flags: 0x04
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: UDP (0x11)
Header checksum: 0xfaf4 (correct)
Source: 165.227.249.133 (165.227.249.133)
Destination: 165.227.249.115 (165.227.249.115)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
Source port: 500 (500)
Destination port: 500 (500)
Length: 292
Checksum: 0xd6fe (correct)
Internet Security Association and Key Management Protocol
Initiator cookie: 0x283D2735BF99A255
Responder cookie: 0xB88B3190A4157C99
Next payload: Hash (8)
Version: 1.0
Exchange type: Quick Mode (32)
Flags
.... ...1 = Encryption
.... ..0. = No commit
.... .0.. = No authentication
Message ID: 0x1BDA3087
Length: 284
Encrypted payload (256 bytes)
0000 00 50 fc 84 d2 ec 00 0c 41 90 f1 c1 08 00 45 00 .P......A.....E.
0010 01 38 00 00 40 00 40 11 fa f4 a5 e3 f9 85 a5 e3 .8..@.@.........
0020 f9 73 01 f4 01 f4 01 24 d6 fe 28 3d 27 35 bf 99 .s.....$..(='5..
0030 a2 55 b8 8b 31 90 a4 15 7c 99 08 10 20 01 1b da .U..1...|... ...
0040 30 87 00 00 01 1c f9 2b 6c 0a b0 79 09 55 2c a8 0......+l..y.U,.
0050 38 fc 70 94 dc 0e 4a c9 72 5c a1 b3 21 5d 2c 53 8.p...J.r\..!],S
0060 8d 6c 18 3b 4b b2 cc 35 60 8c c6 23 cb 88 02 fe .l.;K..5`..#....
0070 7f 74 d0 7b 65 d3 3d 7c 3b 4e fc ba 70 02 4d 5f .t.{e.=|;N..p.M_
0080 82 01 36 b0 fb 65 e0 44 24 77 97 ba 0f a4 24 2c ..6..e.D$w....$,
0090 94 7b a6 01 86 cb 2e 9f 17 a9 78 4e 8c 22 01 04 .{........xN."..
00a0 84 4f 5a 94 9e 13 e1 e1 fe 21 06 2c 47 03 8b 26 .OZ......!.,G..&
00b0 6e f3 ba 3a 49 73 88 6e 8b 13 05 c6 3e d9 b1 46 n..:Is.n....>..F
00c0 11 5a ca 30 d0 04 98 90 e4 c1 9d c0 7f cb b6 60 .Z.0...........`
00d0 89 4f 9e 2b 1e b5 04 58 ca 19 33 cc cc 96 43 ab .O.+...X..3...C.
00e0 4a 81 a5 2c 2c d8 64 34 6d 9b 07 54 24 79 50 6d J..,,.d4m..T$yPm
00f0 ad 30 e3 3b 0a c9 84 3a 3b d1 5e 3d f0 ae 47 1b .0.;...:;.^=..G.
0100 70 a9 e4 11 32 cb 0c 6a a7 a2 7e 87 66 3f 88 7d p...2..j..~.f?.}
0110 de a0 c6 28 c0 e6 c8 ff c5 73 6e cb 0b f2 29 e2 ...(.....sn...).
0120 62 6e 13 8c ae f3 b9 eb e4 90 23 62 17 20 38 e7 bn........#b. 8.
0130 11 cf 04 9f bc 3a 76 b7 1b 8d 68 fb bc 26 86 5e .....:v...h..&.^
0140 b2 80 b2 c4 b6 c0 43 e8 5a 51 ......C.ZQ
Frame 17 (330 bytes on wire, 330 bytes captured)
Arrival Time: Dec 9, 2003 18:19:30.221448000
Time delta from previous packet: 0.001231000 seconds
Time relative to first packet: 17.189347000 seconds
Frame Number: 17
Packet Length: 330 bytes
Capture Length: 330 bytes
Ethernet II, Src: 00:50:fc:84:d2:ec, Dst: 00:0c:29:b1:20:22
Destination: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22)
Source: 00:50:fc:84:d2:ec (00:50:fc:84:d2:ec)
Type: IP (0x0800)
Trailer: 235715E0
Internet Protocol, Src Addr: 165.227.249.133 (165.227.249.133), Dst Addr: 165.227.249.115 (165.227.249.115)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 312
Identification: 0x0000 (0)
Flags: 0x04
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 63
Protocol: UDP (0x11)
Header checksum: 0xfbf4 (correct)
Source: 165.227.249.133 (165.227.249.133)
Destination: 165.227.249.115 (165.227.249.115)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
Source port: 500 (500)
Destination port: 500 (500)
Length: 292
Checksum: 0xd6fe (correct)
Internet Security Association and Key Management Protocol
Initiator cookie: 0x283D2735BF99A255
Responder cookie: 0xB88B3190A4157C99
Next payload: Hash (8)
Version: 1.0
Exchange type: Quick Mode (32)
Flags
.... ...1 = Encryption
.... ..0. = No commit
.... .0.. = No authentication
Message ID: 0x1BDA3087
Length: 284
Encrypted payload (256 bytes)
0000 00 0c 29 b1 20 22 00 50 fc 84 d2 ec 08 00 45 00 ..). ".P......E.
0010 01 38 00 00 40 00 3f 11 fb f4 a5 e3 f9 85 a5 e3 .8..@.?.........
0020 f9 73 01 f4 01 f4 01 24 d6 fe 28 3d 27 35 bf 99 .s.....$..(='5..
0030 a2 55 b8 8b 31 90 a4 15 7c 99 08 10 20 01 1b da .U..1...|... ...
0040 30 87 00 00 01 1c f9 2b 6c 0a b0 79 09 55 2c a8 0......+l..y.U,.
0050 38 fc 70 94 dc 0e 4a c9 72 5c a1 b3 21 5d 2c 53 8.p...J.r\..!],S
0060 8d 6c 18 3b 4b b2 cc 35 60 8c c6 23 cb 88 02 fe .l.;K..5`..#....
0070 7f 74 d0 7b 65 d3 3d 7c 3b 4e fc ba 70 02 4d 5f .t.{e.=|;N..p.M_
0080 82 01 36 b0 fb 65 e0 44 24 77 97 ba 0f a4 24 2c ..6..e.D$w....$,
0090 94 7b a6 01 86 cb 2e 9f 17 a9 78 4e 8c 22 01 04 .{........xN."..
00a0 84 4f 5a 94 9e 13 e1 e1 fe 21 06 2c 47 03 8b 26 .OZ......!.,G..&
00b0 6e f3 ba 3a 49 73 88 6e 8b 13 05 c6 3e d9 b1 46 n..:Is.n....>..F
00c0 11 5a ca 30 d0 04 98 90 e4 c1 9d c0 7f cb b6 60 .Z.0...........`
00d0 89 4f 9e 2b 1e b5 04 58 ca 19 33 cc cc 96 43 ab .O.+...X..3...C.
00e0 4a 81 a5 2c 2c d8 64 34 6d 9b 07 54 24 79 50 6d J..,,.d4m..T$yPm
00f0 ad 30 e3 3b 0a c9 84 3a 3b d1 5e 3d f0 ae 47 1b .0.;...:;.^=..G.
0100 70 a9 e4 11 32 cb 0c 6a a7 a2 7e 87 66 3f 88 7d p...2..j..~.f?.}
0110 de a0 c6 28 c0 e6 c8 ff c5 73 6e cb 0b f2 29 e2 ...(.....sn...).
0120 62 6e 13 8c ae f3 b9 eb e4 90 23 62 17 20 38 e7 bn........#b. 8.
0130 11 cf 04 9f bc 3a 76 b7 1b 8d 68 fb bc 26 86 5e .....:v...h..&.^
0140 b2 80 b2 c4 b6 c0 23 57 15 e0 ......#W..
Frame 18 (130 bytes on wire, 130 bytes captured)
Arrival Time: Dec 9, 2003 18:19:30.868867000
Time delta from previous packet: 0.647419000 seconds
Time relative to first packet: 17.836766000 seconds
Frame Number: 18
Packet Length: 130 bytes
Capture Length: 130 bytes
Ethernet II, Src: 00:0c:29:b1:20:22, Dst: 00:0c:41:90:f1:c1
Destination: 00:0c:41:90:f1:c1 (00:0c:41:90:f1:c1)
Source: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22)
Type: IP (0x0800)
Trailer: 332D500B
Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.133 (165.227.249.133)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 112
Identification: 0x0003 (3)
Flags: 0x00
.0.. = Don't fragment: Not set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 128
Protocol: ESP (0x32)
Header checksum: 0xfb98 (correct)
Source: 165.227.249.115 (165.227.249.115)
Destination: 165.227.249.133 (165.227.249.133)
Encapsulating Security Payload
SPI: 0x7f718e89
Sequence: 0x00000003
Data (84 bytes)
0000 00 0c 41 90 f1 c1 00 0c 29 b1 20 22 08 00 45 00 ..A.....). "..E.
0010 00 70 00 03 00 00 80 32 fb 98 a5 e3 f9 73 a5 e3 .p.....2.....s..
0020 f9 85 7f 71 8e 89 00 00 00 03 f6 b4 c4 3f 47 c4 ...q.........?G.
0030 14 43 0d 0f 71 b4 6c a1 36 03 56 fa c2 fe 9d c8 .C..q.l.6.V.....
0040 e1 e1 7f 07 ed 3f ed a6 63 34 fb 31 cf 1e 5d 34 .....?..c4.1..]4
0050 8d 81 bc 23 58 58 af 8b 4e 79 8d 1b 62 8d 0c 14 ...#XX..Ny..b...
0060 37 74 07 71 55 2d 12 a2 aa 14 6a 60 41 79 b4 7a 7t.qU-....j`Ay.z
0070 a5 8d b3 ca 64 d6 25 db 4d 80 00 0a f5 f3 33 2d ....d.%.M.....3-
0080 50 0b P.
Frame 19 (130 bytes on wire, 130 bytes captured)
Arrival Time: Dec 9, 2003 18:19:30.869756000
Time delta from previous packet: 0.000889000 seconds
Time relative to first packet: 17.837655000 seconds
Frame Number: 19
Packet Length: 130 bytes
Capture Length: 130 bytes
Ethernet II, Src: 00:0c:41:90:f1:c1, Dst: 00:0c:29:b1:20:22
Destination: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22)
Source: 00:0c:41:90:f1:c1 (00:0c:41:90:f1:c1)
Type: IP (0x0800)
Trailer: 6C86C15A
Internet Protocol, Src Addr: 165.227.249.133 (165.227.249.133), Dst Addr: 165.227.249.115 (165.227.249.115)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 112
Identification: 0x2a03 (10755)
Flags: 0x00
.0.. = Don't fragment: Not set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: ESP (0x32)
Header checksum: 0x1199 (correct)
Source: 165.227.249.133 (165.227.249.133)
Destination: 165.227.249.115 (165.227.249.115)
Encapsulating Security Payload
SPI: 0x7664aa3e
Sequence: 0x00000003
Data (84 bytes)
0000 00 0c 29 b1 20 22 00 0c 41 90 f1 c1 08 00 45 00 ..). "..A.....E.
0010 00 70 2a 03 00 00 40 32 11 99 a5 e3 f9 85 a5 e3 .p*...@2........
0020 f9 73 76 64 aa 3e 00 00 00 03 5d 5e 5f 60 61 62 .svd.>....]^_`ab
0030 63 64 29 5d 82 d5 92 45 c3 75 55 fc 9a 81 72 d3 cd)]...E.uU...r.
0040 0e f4 39 46 98 a7 cf 4b e6 0b 65 68 57 59 2f 6f ..9F...K..ehWY/o
0050 bf 79 96 df db 8b 9b 94 87 1f f7 3a 73 1a 7b 43 .y.........:s.{C
0060 c8 c4 14 09 66 83 b4 e0 ae 82 3b 4f b2 c2 ed 78 ....f.....;O...x
0070 92 2d 6b 29 b0 76 ec 8e 53 a0 f0 2b cc e6 6c 86 .-k).v..S..+..l.
0080 c1 5a .Z
Frame 20 (130 bytes on wire, 130 bytes captured)
Arrival Time: Dec 9, 2003 18:19:31.872693000
Time delta from previous packet: 1.002937000 seconds
Time relative to first packet: 18.840592000 seconds
Frame Number: 20
Packet Length: 130 bytes
Capture Length: 130 bytes
Ethernet II, Src: 00:0c:29:b1:20:22, Dst: 00:0c:41:90:f1:c1
Destination: 00:0c:41:90:f1:c1 (00:0c:41:90:f1:c1)
Source: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22)
Type: IP (0x0800)
Trailer: 725DD55C
Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.133 (165.227.249.133)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 112
Identification: 0x0004 (4)
Flags: 0x00
.0.. = Don't fragment: Not set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 128
Protocol: ESP (0x32)
Header checksum: 0xfb97 (correct)
Source: 165.227.249.115 (165.227.249.115)
Destination: 165.227.249.133 (165.227.249.133)
Encapsulating Security Payload
SPI: 0x7f718e89
Sequence: 0x00000004
Data (84 bytes)
0000 00 0c 41 90 f1 c1 00 0c 29 b1 20 22 08 00 45 00 ..A.....). "..E.
0010 00 70 00 04 00 00 80 32 fb 97 a5 e3 f9 73 a5 e3 .p.....2.....s..
0020 f9 85 7f 71 8e 89 00 00 00 04 6a 60 41 79 b4 7a ...q......j`Ay.z
0030 a5 8d 94 0a 95 3f 3e cb 9b 27 03 48 1b d9 c1 de .....?>..'.H....
0040 20 1d 02 52 ea 10 fb 9b 2b de ab 00 a5 da 04 83 ..R....+.......
0050 7a cf 36 0d 95 a4 52 75 cc 2c af 3e fe 69 b6 d0 z.6...Ru.,.>.i..
0060 c1 44 02 82 73 d2 4e 6f 37 34 5d d8 27 66 6c aa .D..s.No74].'fl.
0070 59 95 30 6e 3c 64 f6 8c 23 be d3 44 1b de 72 5d Y.0n..........
0030 c8 c9 75 07 ac ac 6c b0 88 e8 43 26 93 4b 59 b1 ..u...l...C&.KY.
0040 ba d8 10 f1 ad 85 c0 3e dd 42 e3 81 83 69 1b 91 .......>.B...i..
0050 6c f4 05 a1 d8 dc 6f d6 22 52 9a 68 d8 8c 1c 41 l.....o."R.h...A
0060 a6 40 48 b0 98 f6 e0 ee 07 b0 69 56 9c 68 1c 18 .@H.......iV.h..
0070 59 00 3a 34 11 04 f5 e2 57 7f 8a 80 c0 03 ec 9c Y.:4....W.......
0080 31 2e 1.
Frame 22 (130 bytes on wire, 130 bytes captured)
Arrival Time: Dec 9, 2003 18:19:32.876608000
Time delta from previous packet: 1.003088000 seconds
Time relative to first packet: 19.844507000 seconds
Frame Number: 22
Packet Length: 130 bytes
Capture Length: 130 bytes
Ethernet II, Src: 00:0c:29:b1:20:22, Dst: 00:0c:41:90:f1:c1
Destination: 00:0c:41:90:f1:c1 (00:0c:41:90:f1:c1)
Source: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22)
Type: IP (0x0800)
Trailer: 49634497
Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.133 (165.227.249.133)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 112
Identification: 0x0005 (5)
Flags: 0x00
.0.. = Don't fragment: Not set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 128
Protocol: ESP (0x32)
Header checksum: 0xfb96 (correct)
Source: 165.227.249.115 (165.227.249.115)
Destination: 165.227.249.133 (165.227.249.133)
Encapsulating Security Payload
SPI: 0x7f718e89
Sequence: 0x00000005
Data (84 bytes)
0000 00 0c 41 90 f1 c1 00 0c 29 b1 20 22 08 00 45 00 ..A.....). "..E.
0010 00 70 00 05 00 00 80 32 fb 96 a5 e3 f9 73 a5 e3 .p.....2.....s..
0020 f9 85 7f 71 8e 89 00 00 00 05 5d d8 27 66 6c aa ...q......].'fl.
0030 59 95 4b ab 69 f3 c4 c7 80 2d 6b 41 11 48 ba bf Y.K.i....-kA.H..
0040 00 71 14 0c 71 d3 26 12 eb ad 50 75 90 17 df ab .q..q.&...Pu....
0050 37 0b b0 04 35 ef 09 cc b3 d2 63 2e 0b 9c 82 67 7...5.....c....g
0060 f4 75 e1 0d fc 60 f3 0e af de 6c 33 0d ce 24 8f .u...`....l3..$.
0070 08 51 2d 1a 7a 65 91 54 f4 03 41 d9 e9 d0 49 63 .Q-.ze.T..A...Ic
0080 44 97 D.
Frame 23 (130 bytes on wire, 130 bytes captured)
Arrival Time: Dec 9, 2003 18:19:32.877426000
Time delta from previous packet: 0.000818000 seconds
Time relative to first packet: 19.845325000 seconds
Frame Number: 23
Packet Length: 130 bytes
Capture Length: 130 bytes
Ethernet II, Src: 00:0c:41:90:f1:c1, Dst: 00:0c:29:b1:20:22
Destination: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22)
Source: 00:0c:41:90:f1:c1 (00:0c:41:90:f1:c1)
Type: IP (0x0800)
Trailer: DE3AB996
Internet Protocol, Src Addr: 165.227.249.133 (165.227.249.133), Dst Addr: 165.227.249.115 (165.227.249.115)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 112
Identification: 0x2a05 (10757)
Flags: 0x00
.0.. = Don't fragment: Not set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: ESP (0x32)
Header checksum: 0x1197 (correct)
Source: 165.227.249.133 (165.227.249.133)
Destination: 165.227.249.115 (165.227.249.115)
Encapsulating Security Payload
SPI: 0x7664aa3e
Sequence: 0x00000005
Data (84 bytes)
0000 00 0c 29 b1 20 22 00 0c 41 90 f1 c1 08 00 45 00 ..). "..A.....E.
0010 00 70 2a 05 00 00 40 32 11 97 a5 e3 f9 85 a5 e3 .p*...@2........
0020 f9 73 76 64 aa 3e 00 00 00 05 27 28 29 2a 2b 2c .svd.>....'()*+,
0030 2d 2e 05 4e f2 d6 b6 d6 c6 8f cd ae 2f 01 99 23 -..N......../..#
0040 6d 1b 2c b5 66 30 7f 70 be c5 9d 88 42 b6 1e 03 m.,.f0.p....B...
0050 0f 65 af 93 32 dc f9 47 c1 1d ae e6 89 0a 6b 25 .e..2..G......k%
0060 b1 de f2 58 2a e1 d5 42 90 e5 ff 4e 76 08 71 f8 ...X*..B...Nv.q.
0070 41 16 ff fc 8e 14 32 c8 d2 9f e0 9f 14 3b de 3a A.....2......;.:
0080 b9 96 ..