Frame 1 (166 bytes on wire, 166 bytes captured) Arrival Time: Dec 6, 2004 14:39:42.180719000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 166 bytes Capture Length: 166 bytes Ethernet II, Src: 00:0c:29:00:82:53, Dst: 00:01:02:46:6a:04 Destination: 00:01:02:46:6a:04 (00:01:02:46:6a:04) Source: 00:0c:29:00:82:53 (00:0c:29:00:82:53) Type: IP (0x0800) Frame check sequence: 0xceb88fb9 (correct) Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.134 (165.227.249.134) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 148 Identification: 0x01c3 (451) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf9d4 (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.134 (165.227.249.134) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 128 Checksum: 0x3e07 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x55D39B127AE8E351 Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 120 Security Association payload Next payload: Vendor ID (13) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 40 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 32 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (3600) Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 0000 00 01 02 46 6a 04 00 0c 29 00 82 53 08 00 45 00 ...Fj...)..S..E. 0010 00 94 01 c3 00 00 80 11 f9 d4 a5 e3 f9 73 a5 e3 .............s.. 0020 f9 86 01 f4 01 f4 00 80 3e 07 55 d3 9b 12 7a e8 ........>.U...z. 0030 e3 51 00 00 00 00 00 00 00 00 01 10 02 00 00 00 .Q.............. 0040 00 00 00 00 00 78 0d 00 00 34 00 00 00 01 00 00 .....x...4...... 0050 00 01 00 00 00 28 01 01 00 01 00 00 00 20 01 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 04 00 02 80 03 ................ 0070 00 01 80 0b 00 01 80 0c 0e 10 0d 00 00 14 44 85 ..............D. 0080 15 2d 18 b6 bb cd 0b e8 a8 46 95 79 dd cc 00 00 .-.......F.y.... 0090 00 14 90 cb 80 91 3e bb 69 6e 08 63 81 b5 ec 42 ......>.in.c...B 00a0 7b 1f ce b8 8f b9 {..... Frame 2 (126 bytes on wire, 126 bytes captured) Arrival Time: Dec 6, 2004 14:39:42.475663000 Time delta from previous packet: 0.294944000 seconds Time since reference or first frame: 0.294944000 seconds Frame Number: 2 Packet Length: 126 bytes Capture Length: 126 bytes Ethernet II, Src: 00:01:02:46:6a:04, Dst: 00:0c:29:00:82:53 Destination: 00:0c:29:00:82:53 (00:0c:29:00:82:53) Source: 00:01:02:46:6a:04 (00:01:02:46:6a:04) Type: IP (0x0800) Frame check sequence: 0xc2c6663c (correct) Internet Protocol, Src Addr: 165.227.249.134 (165.227.249.134), Dst Addr: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 108 Identification: 0x003a (58) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3b86 (correct) Source: 165.227.249.134 (165.227.249.134) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 88 Checksum: 0x5cd7 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x55D39B127AE8E351 Responder cookie: 0xF58B46CAAFC9105D Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 80 Security Association payload Next payload: NONE (0) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 40 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 32 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (3600) 0000 00 0c 29 00 82 53 00 01 02 46 6a 04 08 00 45 00 ..)..S...Fj...E. 0010 00 6c 00 3a 00 00 40 11 3b 86 a5 e3 f9 86 a5 e3 .l.:..@.;....... 0020 f9 73 01 f4 01 f4 00 58 5c d7 55 d3 9b 12 7a e8 .s.....X\.U...z. 0030 e3 51 f5 8b 46 ca af c9 10 5d 01 10 02 00 00 00 .Q..F....]...... 0040 00 00 00 00 00 50 00 00 00 34 00 00 00 01 00 00 .....P...4...... 0050 00 01 00 00 00 28 01 01 00 01 00 00 00 20 01 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 04 00 02 80 03 ................ 0070 00 01 80 0b 00 01 80 0c 0e 10 c2 c6 66 3c ............f< Frame 3 (302 bytes on wire, 302 bytes captured) Arrival Time: Dec 6, 2004 14:39:44.766652000 Time delta from previous packet: 2.290989000 seconds Time since reference or first frame: 2.585933000 seconds Frame Number: 3 Packet Length: 302 bytes Capture Length: 302 bytes Ethernet II, Src: 00:0c:29:00:82:53, Dst: 00:01:02:46:6a:04 Destination: 00:01:02:46:6a:04 (00:01:02:46:6a:04) Source: 00:0c:29:00:82:53 (00:0c:29:00:82:53) Type: IP (0x0800) Frame check sequence: 0xa78318d6 (correct) Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.134 (165.227.249.134) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 284 Identification: 0x01c4 (452) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf94b (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.134 (165.227.249.134) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 264 Checksum: 0x636e (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x55D39B127AE8E351 Responder cookie: 0xF58B46CAAFC9105D Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 256 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: Vendor ID (13) Length: 24 Nonce Data Vendor ID payload Next payload: Vendor ID (13) Length: 48 Vendor ID: unknown vendor ID: 0x47BBE7C993F1FC13B4E6D0DB565C68E5... Vendor ID payload Next payload: Vendor ID (13) Length: 12 Vendor ID: unknown vendor ID: 0xDA8E937880010000 Vendor ID payload Next payload: NONE (0) Length: 12 Vendor ID: draft-beaulieu-ike-xauth-02.txt 0000 00 01 02 46 6a 04 00 0c 29 00 82 53 08 00 45 00 ...Fj...)..S..E. 0010 01 1c 01 c4 00 00 80 11 f9 4b a5 e3 f9 73 a5 e3 .........K...s.. 0020 f9 86 01 f4 01 f4 01 08 63 6e 55 d3 9b 12 7a e8 ........cnU...z. 0030 e3 51 f5 8b 46 ca af c9 10 5d 04 10 02 00 00 00 .Q..F....]...... 0040 00 00 00 00 01 00 0a 00 00 84 9e 67 c1 3d 06 c0 ...........g.=.. 0050 c1 7a 88 c0 4f 26 a9 17 27 91 9f 2f 0d 00 11 b6 .z..O&..'../.... 0060 52 ec d1 13 69 87 07 e9 b4 ae cc 34 b2 ed d6 30 R...i......4...0 0070 d6 94 fe cc f5 da af bc 74 d7 76 f8 cb 89 44 3e ........t.v...D> 0080 19 77 77 ea aa 1e 90 fa a0 fb 9f 9f 8a 81 e3 98 .ww............. 0090 71 26 fc 06 c4 a7 e7 03 ab 4a 3c a6 92 20 a6 43 q&.......J<.. .C 00a0 b1 ff 13 dd fa 54 7f f4 6b ce 4e 54 fc 61 40 54 .....T..k.NT.a@T 00b0 c4 5d 3e bc d7 8e 80 48 eb 81 c6 b1 04 53 b6 49 .]>....H.....S.I 00c0 14 e5 c0 35 7a c4 cf cc 63 e5 0d 00 00 18 9a d5 ...5z...c....... 00d0 f6 4b 71 da b9 f8 f2 08 12 b9 d9 90 c8 76 68 ae .Kq..........vh. 00e0 6f 93 0d 00 00 30 47 bb e7 c9 93 f1 fc 13 b4 e6 o....0G......... 00f0 d0 db 56 5c 68 e5 01 02 01 01 02 01 01 03 11 31 ..V\h..........1 0100 30 2e 31 2e 31 20 28 42 75 69 6c 64 20 31 30 29 0.1.1 (Build 10) 0110 00 00 0d 00 00 0c da 8e 93 78 80 01 00 00 00 00 .........x...... 0120 00 0c 09 00 26 89 df d6 b7 12 a7 83 18 d6 ....&......... Frame 4 (226 bytes on wire, 226 bytes captured) Arrival Time: Dec 6, 2004 14:39:44.846073000 Time delta from previous packet: 0.079421000 seconds Time since reference or first frame: 2.665354000 seconds Frame Number: 4 Packet Length: 226 bytes Capture Length: 226 bytes Ethernet II, Src: 00:01:02:46:6a:04, Dst: 00:0c:29:00:82:53 Destination: 00:0c:29:00:82:53 (00:0c:29:00:82:53) Source: 00:01:02:46:6a:04 (00:01:02:46:6a:04) Type: IP (0x0800) Frame check sequence: 0xb0b2f4cc (correct) Internet Protocol, Src Addr: 165.227.249.134 (165.227.249.134), Dst Addr: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 208 Identification: 0x003c (60) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3b20 (correct) Source: 165.227.249.134 (165.227.249.134) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 188 Checksum: 0x0bbc (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x55D39B127AE8E351 Responder cookie: 0xF58B46CAAFC9105D Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 180 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 20 Nonce Data 0000 00 0c 29 00 82 53 00 01 02 46 6a 04 08 00 45 00 ..)..S...Fj...E. 0010 00 d0 00 3c 00 00 40 11 3b 20 a5 e3 f9 86 a5 e3 ...<..@.; ...... 0020 f9 73 01 f4 01 f4 00 bc 0b bc 55 d3 9b 12 7a e8 .s........U...z. 0030 e3 51 f5 8b 46 ca af c9 10 5d 04 10 02 00 00 00 .Q..F....]...... 0040 00 00 00 00 00 b4 0a 00 00 84 2f 7b e2 0c 29 bd ........../{..). 0050 05 8b c8 3b 6c f5 b3 bf 1a 61 dd 57 27 08 9e ed ...;l....a.W'... 0060 bb b4 eb 1d 16 56 26 b4 9f 2f b0 fd 20 fe a0 79 .....V&../.. ..y 0070 7d d0 c7 dd de 79 f4 1f 03 ee 8a 48 f7 23 9a 96 }....y.....H.#.. 0080 40 bf 3a 49 56 cf 1e 04 4f 83 bc 76 9e 83 1c 48 @.:IV...O..v...H 0090 5d 5a b6 2f 70 b6 bc eb 26 65 68 3b 8f 18 f6 86 ]Z./p...&eh;.... 00a0 7f c6 13 ed 6e ca 1b 97 00 98 ed a6 c4 ef 08 2c ....n.........., 00b0 06 8d b3 fe 4f 65 62 e8 b0 aa 86 37 e6 20 9d d9 ....Oeb....7. .. 00c0 90 43 73 24 34 97 b2 fc 58 16 00 00 00 14 9e 4b .Cs$4...X......K 00d0 e7 db f5 d2 03 1c ea 1d 48 e1 de bb 5c d4 b0 b2 ........H...\... 00e0 f4 cc .. Frame 5 (138 bytes on wire, 138 bytes captured) Arrival Time: Dec 6, 2004 14:39:46.537770000 Time delta from previous packet: 1.691697000 seconds Time since reference or first frame: 4.357051000 seconds Frame Number: 5 Packet Length: 138 bytes Capture Length: 138 bytes Ethernet II, Src: 00:0c:29:00:82:53, Dst: 00:01:02:46:6a:04 Destination: 00:01:02:46:6a:04 (00:01:02:46:6a:04) Source: 00:0c:29:00:82:53 (00:0c:29:00:82:53) Type: IP (0x0800) Frame check sequence: 0x0fdb0a06 (correct) Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.134 (165.227.249.134) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x01c6 (454) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf9ed (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.134 (165.227.249.134) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 100 Checksum: 0xadb0 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x55D39B127AE8E351 Responder cookie: 0xF58B46CAAFC9105D Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 92 Encrypted payload (64 bytes) 0000 00 01 02 46 6a 04 00 0c 29 00 82 53 08 00 45 00 ...Fj...)..S..E. 0010 00 78 01 c6 00 00 80 11 f9 ed a5 e3 f9 73 a5 e3 .x...........s.. 0020 f9 86 01 f4 01 f4 00 64 ad b0 55 d3 9b 12 7a e8 .......d..U...z. 0030 e3 51 f5 8b 46 ca af c9 10 5d 05 10 02 01 00 00 .Q..F....]...... 0040 00 00 00 00 00 5c c0 5d f6 f2 cf 8d d7 b3 09 87 .....\.]........ 0050 1d bb be 9e 63 dd 54 bb dc d1 7f bf 8c 3a a0 2b ....c.T......:.+ 0060 b8 95 ce f4 29 cb 27 39 5b 8b 69 88 ad 88 8e 07 ....).'9[.i..... 0070 68 67 fa 89 c2 0d ab 16 f6 07 09 32 00 25 cb e8 hg.........2.%.. 0080 11 a3 93 4e 1c 3c 0f db 0a 06 ...N.<.... Frame 6 (114 bytes on wire, 114 bytes captured) Arrival Time: Dec 6, 2004 14:39:46.579546000 Time delta from previous packet: 0.041776000 seconds Time since reference or first frame: 4.398827000 seconds Frame Number: 6 Packet Length: 114 bytes Capture Length: 114 bytes Ethernet II, Src: 00:01:02:46:6a:04, Dst: 00:0c:29:00:82:53 Destination: 00:0c:29:00:82:53 (00:0c:29:00:82:53) Source: 00:01:02:46:6a:04 (00:01:02:46:6a:04) Type: IP (0x0800) Frame check sequence: 0x97263119 (correct) Internet Protocol, Src Addr: 165.227.249.134 (165.227.249.134), Dst Addr: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0x003e (62) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3b8e (correct) Source: 165.227.249.134 (165.227.249.134) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 76 Checksum: 0xbd0d (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x55D39B127AE8E351 Responder cookie: 0xF58B46CAAFC9105D Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 68 Encrypted payload (40 bytes) 0000 00 0c 29 00 82 53 00 01 02 46 6a 04 08 00 45 00 ..)..S...Fj...E. 0010 00 60 00 3e 00 00 40 11 3b 8e a5 e3 f9 86 a5 e3 .`.>..@.;....... 0020 f9 73 01 f4 01 f4 00 4c bd 0d 55 d3 9b 12 7a e8 .s.....L..U...z. 0030 e3 51 f5 8b 46 ca af c9 10 5d 05 10 02 01 00 00 .Q..F....]...... 0040 00 00 00 00 00 44 b5 ac c9 8f 87 0b e7 db 75 3c .....D........u< 0050 ae 2f 5a 30 bc 58 f6 4e 32 7f d5 78 cc 34 e4 da ./Z0.X.N2..x.4.. 0060 d7 0d 26 99 22 dd 66 f7 c3 f7 08 5c 81 6d 97 26 ..&.".f....\.m.& 0070 31 19 1. Frame 7 (338 bytes on wire, 338 bytes captured) Arrival Time: Dec 6, 2004 14:39:48.756044000 Time delta from previous packet: 2.176498000 seconds Time since reference or first frame: 6.575325000 seconds Frame Number: 7 Packet Length: 338 bytes Capture Length: 338 bytes Ethernet II, Src: 00:0c:29:00:82:53, Dst: 00:01:02:46:6a:04 Destination: 00:01:02:46:6a:04 (00:01:02:46:6a:04) Source: 00:0c:29:00:82:53 (00:0c:29:00:82:53) Type: IP (0x0800) Frame check sequence: 0x972d6e48 (correct) Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.134 (165.227.249.134) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 320 Identification: 0x01c8 (456) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf923 (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.134 (165.227.249.134) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 300 Checksum: 0x9c0d (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x55D39B127AE8E351 Responder cookie: 0xF58B46CAAFC9105D Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x1FCB2582 Length: 292 Encrypted payload (264 bytes) 0000 00 01 02 46 6a 04 00 0c 29 00 82 53 08 00 45 00 ...Fj...)..S..E. 0010 01 40 01 c8 00 00 80 11 f9 23 a5 e3 f9 73 a5 e3 .@.......#...s.. 0020 f9 86 01 f4 01 f4 01 2c 9c 0d 55 d3 9b 12 7a e8 .......,..U...z. 0030 e3 51 f5 8b 46 ca af c9 10 5d 08 10 20 01 1f cb .Q..F....].. ... 0040 25 82 00 00 01 24 0a cf 95 0a 67 a1 68 9a 3b b7 %....$....g.h.;. 0050 54 2c c0 df 63 e2 cf 14 30 33 37 25 e9 ea 64 c0 T,..c...037%..d. 0060 d4 9d ec e6 aa 87 6c 55 6c ef 52 e2 dd 75 cf e5 ......lUl.R..u.. 0070 e1 cc 27 f7 71 9b 79 ae 51 46 8e 4b c7 cf 5c 32 ..'.q.y.QF.K..\2 0080 44 9d 3b 3b fb 2e ee e4 ed ad d8 b7 03 2c 7e 50 D.;;.........,~P 0090 fc 46 32 81 9b 62 a8 01 85 ad ef ba 94 76 d7 c6 .F2..b.......v.. 00a0 97 2b 1c da ee 2f 61 0a 5d 18 46 10 4c f7 b5 5d .+.../a.].F.L..] 00b0 96 bc cb 4c 0a 56 ed 37 d6 dc 6f 56 e9 5c 33 50 ...L.V.7..oV.\3P 00c0 40 ad 9a b2 b2 d4 44 76 66 ec 0a 31 77 19 37 3a @.....Dvf..1w.7: 00d0 8e 17 c8 9c de 7b b4 84 43 54 85 3b 5a b1 ab af .....{..CT.;Z... 00e0 90 ee 08 01 d9 44 df c6 c3 6a 98 bf f4 31 c9 02 .....D...j...1.. 00f0 6c 26 91 de 0b 2c 57 a9 96 61 ca 97 f7 26 4b 48 l&...,W..a...&KH 0100 85 47 4e b3 ad 27 08 11 5c 64 c7 02 7a 61 27 09 .GN..'..\d..za'. 0110 6d 42 ec b3 19 e1 d5 9d c7 3a d9 41 fe 7a da 17 mB.......:.A.z.. 0120 ab 7b 68 0d 0d 0a 97 6f f6 5a 34 a7 c4 08 2a 44 .{h....o.Z4...*D 0130 3f 9c b9 aa f3 c7 b5 5a d9 4f 89 3b da 19 b0 c0 ?......Z.O.;.... 0140 99 7e 7a 92 09 7b 03 b1 7a 5b 92 fb 57 45 97 2d .~z..{..z[..WE.- 0150 6e 48 nH Frame 8 (330 bytes on wire, 330 bytes captured) Arrival Time: Dec 6, 2004 14:39:48.923388000 Time delta from previous packet: 0.167344000 seconds Time since reference or first frame: 6.742669000 seconds Frame Number: 8 Packet Length: 330 bytes Capture Length: 330 bytes Ethernet II, Src: 00:01:02:46:6a:04, Dst: 00:0c:29:00:82:53 Destination: 00:0c:29:00:82:53 (00:0c:29:00:82:53) Source: 00:01:02:46:6a:04 (00:01:02:46:6a:04) Type: IP (0x0800) Frame check sequence: 0x75b03ef5 (correct) Internet Protocol, Src Addr: 165.227.249.134 (165.227.249.134), Dst Addr: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 312 Identification: 0x0040 (64) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3ab4 (correct) Source: 165.227.249.134 (165.227.249.134) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 292 Checksum: 0xd2f5 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x55D39B127AE8E351 Responder cookie: 0xF58B46CAAFC9105D Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x1FCB2582 Length: 284 Encrypted payload (256 bytes) 0000 00 0c 29 00 82 53 00 01 02 46 6a 04 08 00 45 00 ..)..S...Fj...E. 0010 01 38 00 40 00 00 40 11 3a b4 a5 e3 f9 86 a5 e3 .8.@..@.:....... 0020 f9 73 01 f4 01 f4 01 24 d2 f5 55 d3 9b 12 7a e8 .s.....$..U...z. 0030 e3 51 f5 8b 46 ca af c9 10 5d 08 10 20 01 1f cb .Q..F....].. ... 0040 25 82 00 00 01 1c 17 9e a7 56 bf 07 e6 b4 00 84 %........V...... 0050 f3 36 d5 d1 42 91 a0 0d 75 9b fc b3 7d 7c 08 3d .6..B...u...}|.= 0060 df 0b 0f b0 60 ad e9 36 f2 ca 1e 56 66 53 fd fe ....`..6...VfS.. 0070 f4 c6 8c ca 1b 3f 4e 2a f6 ba ee 57 6d 24 c6 c6 .....?N*...Wm$.. 0080 48 2f e7 4e 67 89 2c a0 fe 97 f0 26 a0 8d 7e 5c H/.Ng.,....&..~\ 0090 05 76 a0 83 26 ed 5b f3 8a 1d 9d 1a 7d 57 71 8d .v..&.[.....}Wq. 00a0 f2 d5 c1 f2 12 21 d3 8a a5 5d b8 b0 ef b2 68 8b .....!...]....h. 00b0 2b 2e ef e1 a0 68 4b 78 b7 2e 79 1d 99 4c d5 94 +....hKx..y..L.. 00c0 93 4e 9a fc 7b fe d8 e2 a5 a3 9b 31 2a f4 ec fe .N..{......1*... 00d0 f0 d3 a2 dc 32 23 76 08 1d c6 0f 5d a5 c1 ae 81 ....2#v....].... 00e0 71 a4 20 9d be 35 9e e4 4a a6 de c6 4d 07 a6 2f q. ..5..J...M../ 00f0 ed 7c 11 7f c3 0b ae 4a 84 6d b1 29 a4 f8 4d 40 .|.....J.m.)..M@ 0100 5a c6 ac 66 51 55 0c 74 5e 65 43 96 be f3 63 83 Z..fQU.t^eC...c. 0110 74 b3 2d 5e 31 09 08 7f be 4b 4f 57 10 16 2c 4c t.-^1....KOW..,L 0120 cd 11 24 be 24 28 d0 06 24 61 82 e8 27 3a bc 56 ..$.$(..$a..':.V 0130 33 9b 2a 39 3b 06 d9 a6 72 93 41 19 93 33 92 15 3.*9;...r.A..3.. 0140 fc 09 ca 74 5c a2 75 b0 3e f5 ...t\.u.>. Frame 9 (98 bytes on wire, 98 bytes captured) Arrival Time: Dec 6, 2004 14:39:48.929811000 Time delta from previous packet: 0.006423000 seconds Time since reference or first frame: 6.749092000 seconds Frame Number: 9 Packet Length: 98 bytes Capture Length: 98 bytes Ethernet II, Src: 00:0c:29:00:82:53, Dst: 00:01:02:46:6a:04 Destination: 00:01:02:46:6a:04 (00:01:02:46:6a:04) Source: 00:0c:29:00:82:53 (00:0c:29:00:82:53) Type: IP (0x0800) Frame check sequence: 0x8e80d1ed (correct) Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.134 (165.227.249.134) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 80 Identification: 0x01c9 (457) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xfa12 (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.134 (165.227.249.134) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 60 Checksum: 0x8502 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x55D39B127AE8E351 Responder cookie: 0xF58B46CAAFC9105D Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x1FCB2582 Length: 52 Encrypted payload (24 bytes) 0000 00 01 02 46 6a 04 00 0c 29 00 82 53 08 00 45 00 ...Fj...)..S..E. 0010 00 50 01 c9 00 00 80 11 fa 12 a5 e3 f9 73 a5 e3 .P...........s.. 0020 f9 86 01 f4 01 f4 00 3c 85 02 55 d3 9b 12 7a e8 .......<..U...z. 0030 e3 51 f5 8b 46 ca af c9 10 5d 08 10 20 01 1f cb .Q..F....].. ... 0040 25 82 00 00 00 34 8d 87 42 51 70 f7 0f a6 a1 cd %....4..BQp..... 0050 f2 18 0a e9 5d 6a 5b 0b ca dc 4b 7f c0 82 8e 80 ....]j[...K..... 0060 d1 ed .. Frame 10 (130 bytes on wire, 130 bytes captured) Arrival Time: Dec 6, 2004 14:39:52.626131000 Time delta from previous packet: 3.696320000 seconds Time since reference or first frame: 10.445412000 seconds Frame Number: 10 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:0c:29:00:82:53, Dst: 00:01:02:46:6a:04 Destination: 00:01:02:46:6a:04 (00:01:02:46:6a:04) Source: 00:0c:29:00:82:53 (00:0c:29:00:82:53) Type: IP (0x0800) Frame check sequence: 0xbe58934f (correct) Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.134 (165.227.249.134) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0001 (1) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: ESP (0x32) Header checksum: 0xfb99 (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.134 (165.227.249.134) Encapsulating Security Payload SPI: 0x00003313 Sequence: 1 Data (84 bytes) 0000 00 01 02 46 6a 04 00 0c 29 00 82 53 08 00 45 00 ...Fj...)..S..E. 0010 00 70 00 01 00 00 80 32 fb 99 a5 e3 f9 73 a5 e3 .p.....2.....s.. 0020 f9 86 00 00 33 13 00 00 00 01 a8 fe 98 15 ac 82 ....3........... 0030 e7 20 10 0d 7c 9b 94 ce f3 8a 0c 2d 6b e4 9d c5 . ..|......-k... 0040 e7 37 c3 1b 44 ac 7c 14 99 9d 4f f8 3a e9 19 5d .7..D.|...O.:..] 0050 69 7e ab 6f 93 c6 ff 09 6c da 39 c5 54 5c 17 a1 i~.o....l.9.T\.. 0060 20 b7 b2 ec 0b 3c 44 0a 43 39 a9 e1 d6 b1 e6 07 .....y....=.... 0040 cb 73 21 fc 67 71 d2 82 b8 42 a0 a4 ce c1 0d 16 .s!.gq...B...... 0050 d1 06 ae dd 50 d9 8c 75 ff 9c 99 41 9a 26 23 19 ....P..u...A.&#. 0060 67 1f ed 76 b0 6f 69 b5 3b cf 0d 25 a5 74 11 56 g..v.oi.;..%.t.V 0070 b5 9f 06 1a 58 c2 83 fa e9 cd 10 2a 8a a3 d9 60 ....X......*...` 0080 a9 0b ..