Frame 1 (166 bytes on wire, 166 bytes captured)
    Arrival Time: Jan 28, 2004 11:40:43.744749000
    Time delta from previous packet: 0.000000000 seconds
    Time since reference or first frame: 0.000000000 seconds
    Frame Number: 1
    Packet Length: 166 bytes
    Capture Length: 166 bytes
Ethernet II, Src: 00:0c:29:b1:20:22, Dst: 00:09:5b:b0:f5:3d
    Destination: 00:09:5b:b0:f5:3d (00:09:5b:b0:f5:3d)
    Source: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22)
    Type: IP (0x0800)
    Frame check sequence: 0xd5d920f4 (correct)
Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.136 (165.227.249.136)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 148
    Identification: 0x025b (603)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0xf93a (correct)
    Source: 165.227.249.115 (165.227.249.115)
    Destination: 165.227.249.136 (165.227.249.136)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 128
    Checksum: 0xfb54 (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0xEDEDAC7674598312
    Responder cookie: 0x0000000000000000
    Next payload: Security Association (1)
    Version: 1.0
    Exchange type: Identity Protection (Main Mode) (2)
    Flags
        .... ...0 = No encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x00000000
    Length: 120
    Security Association payload
        Next payload: Vendor ID (13)
        Length: 52
        Domain of interpretation: IPSEC (1)
        Situation: IDENTITY (1)
        Proposal payload # 1
            Next payload: NONE (0)
            Length: 40
            Proposal number: 1
            Protocol ID: ISAKMP (1)
            SPI size: 0
            Number of transforms: 1
            Transform payload # 1
                Next payload: NONE (0)
                Length: 32
                Transform number: 1
                Transform ID: KEY_IKE (1)
                Encryption-Algorithm (1): 3DES-CBC (5)
                Hash-Algorithm (2): SHA (2)
                Group-Description (4): Alternate 1024-bit MODP group (2)
                Authentication-Method (3): PSK (1)
                Life-Type (11): Seconds (1)
                Life-Duration (12): Duration-Value (3600)
    Vendor ID payload
        Next payload: Vendor ID (13)
        Length: 20
        Vendor ID: draft-ietf-ipsec-nat-t-ike-00
    Vendor ID payload
        Next payload: NONE (0)
        Length: 20
        Vendor ID: draft-ietf-ipsec-nat-t-ike-02

0000  00 09 5b b0 f5 3d 00 0c 29 b1 20 22 08 00 45 00   ..[..=..). "..E.
0010  00 94 02 5b 00 00 80 11 f9 3a a5 e3 f9 73 a5 e3   ...[.....:...s..
0020  f9 88 01 f4 01 f4 00 80 fb 54 ed ed ac 76 74 59   .........T...vtY
0030  83 12 00 00 00 00 00 00 00 00 01 10 02 00 00 00   ................
0040  00 00 00 00 00 78 0d 00 00 34 00 00 00 01 00 00   .....x...4......
0050  00 01 00 00 00 28 01 01 00 01 00 00 00 20 01 01   .....(....... ..
0060  00 00 80 01 00 05 80 02 00 02 80 04 00 02 80 03   ................
0070  00 01 80 0b 00 01 80 0c 0e 10 0d 00 00 14 44 85   ..............D.
0080  15 2d 18 b6 bb cd 0b e8 a8 46 95 79 dd cc 00 00   .-.......F.y....
0090  00 14 90 cb 80 91 3e bb 69 6e 08 63 81 b5 ec 42   ......>.in.c...B
00a0  7b 1f d5 d9 20 f4                                 {... .

Frame 2 (126 bytes on wire, 126 bytes captured)
    Arrival Time: Jan 28, 2004 11:40:43.747433000
    Time delta from previous packet: 0.002684000 seconds
    Time since reference or first frame: 0.002684000 seconds
    Frame Number: 2
    Packet Length: 126 bytes
    Capture Length: 126 bytes
Ethernet II, Src: 00:09:5b:b0:f5:3d, Dst: 00:0c:29:b1:20:22
    Destination: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22)
    Source: 00:09:5b:b0:f5:3d (00:09:5b:b0:f5:3d)
    Type: IP (0x0800)
    Frame check sequence: 0xa02ade55 (correct)
Internet Protocol, Src Addr: 165.227.249.136 (165.227.249.136), Dst Addr: 165.227.249.115 (165.227.249.115)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 108
    Identification: 0x0044 (68)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0x3b7a (correct)
    Source: 165.227.249.136 (165.227.249.136)
    Destination: 165.227.249.115 (165.227.249.115)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 88
    Checksum: 0x6e49 (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0xEDEDAC7674598312
    Responder cookie: 0x888B38FC0BE0DAF0
    Next payload: Security Association (1)
    Version: 1.0
    Exchange type: Identity Protection (Main Mode) (2)
    Flags
        .... ...0 = No encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x00000000
    Length: 80
    Security Association payload
        Next payload: NONE (0)
        Length: 52
        Domain of interpretation: IPSEC (1)
        Situation: IDENTITY (1)
        Proposal payload # 1
            Next payload: NONE (0)
            Length: 40
            Proposal number: 1
            Protocol ID: ISAKMP (1)
            SPI size: 0
            Number of transforms: 1
            Transform payload # 1
                Next payload: NONE (0)
                Length: 32
                Transform number: 1
                Transform ID: KEY_IKE (1)
                Encryption-Algorithm (1): 3DES-CBC (5)
                Hash-Algorithm (2): SHA (2)
                Group-Description (4): Alternate 1024-bit MODP group (2)
                Authentication-Method (3): PSK (1)
                Life-Type (11): Seconds (1)
                Life-Duration (12): Duration-Value (3600)

0000  00 0c 29 b1 20 22 00 09 5b b0 f5 3d 08 00 45 00   ..). "..[..=..E.
0010  00 6c 00 44 00 00 40 11 3b 7a a5 e3 f9 88 a5 e3   .l.D..@.;z......
0020  f9 73 01 f4 01 f4 00 58 6e 49 ed ed ac 76 74 59   .s.....XnI...vtY
0030  83 12 88 8b 38 fc 0b e0 da f0 01 10 02 00 00 00   ....8...........
0040  00 00 00 00 00 50 00 00 00 34 00 00 00 01 00 00   .....P...4......
0050  00 01 00 00 00 28 01 01 00 01 00 00 00 20 01 01   .....(....... ..
0060  00 00 80 01 00 05 80 02 00 02 80 04 00 02 80 03   ................
0070  00 01 80 0b 00 01 80 0c 0e 10 a0 2a de 55         ...........*.U

Frame 3 (302 bytes on wire, 302 bytes captured)
    Arrival Time: Jan 28, 2004 11:40:45.403858000
    Time delta from previous packet: 1.656425000 seconds
    Time since reference or first frame: 1.659109000 seconds
    Frame Number: 3
    Packet Length: 302 bytes
    Capture Length: 302 bytes
Ethernet II, Src: 00:0c:29:b1:20:22, Dst: 00:09:5b:b0:f5:3d
    Destination: 00:09:5b:b0:f5:3d (00:09:5b:b0:f5:3d)
    Source: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22)
    Type: IP (0x0800)
    Frame check sequence: 0x07d042bf (correct)
Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.136 (165.227.249.136)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 284
    Identification: 0x025c (604)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0xf8b1 (correct)
    Source: 165.227.249.115 (165.227.249.115)
    Destination: 165.227.249.136 (165.227.249.136)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 264
    Checksum: 0xbb95 (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0xEDEDAC7674598312
    Responder cookie: 0x888B38FC0BE0DAF0
    Next payload: Key Exchange (4)
    Version: 1.0
    Exchange type: Identity Protection (Main Mode) (2)
    Flags
        .... ...0 = No encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x00000000
    Length: 256
    Key Exchange payload
        Next payload: Nonce (10)
        Length: 132
        Key Exchange Data
    Nonce payload
        Next payload: Vendor ID (13)
        Length: 24
        Nonce Data
    Vendor ID payload
        Next payload: Vendor ID (13)
        Length: 48
        Vendor ID: unknown vendor ID: 0x47BBE7C993F1FC13B4E6D0DB565C68E5...
    Vendor ID payload
        Next payload: Vendor ID (13)
        Length: 12
        Vendor ID: unknown vendor ID: 0xDA8E937880010000
    Vendor ID payload
        Next payload: NONE (0)
        Length: 12
        Vendor ID: draft-beaulieu-ike-xauth-02.txt

0000  00 09 5b b0 f5 3d 00 0c 29 b1 20 22 08 00 45 00   ..[..=..). "..E.
0010  01 1c 02 5c 00 00 80 11 f8 b1 a5 e3 f9 73 a5 e3   ...\.........s..
0020  f9 88 01 f4 01 f4 01 08 bb 95 ed ed ac 76 74 59   .............vtY
0030  83 12 88 8b 38 fc 0b e0 da f0 04 10 02 00 00 00   ....8...........
0040  00 00 00 00 01 00 0a 00 00 84 18 66 57 34 36 0f   ...........fW46.
0050  35 4d 3c c1 55 07 f0 c1 f4 f2 f2 6a 62 18 1e 6f   5M<.U......jb..o
0060  52 bc a7 e8 de 8b 48 a2 e5 df 54 82 b6 a1 2d 6a   R.....H...T...-j
0070  84 95 c9 e6 8d 3b 11 54 de 79 25 31 b1 5d 0c 47   .....;.T.y%1.].G
0080  e7 ef f7 5e 86 a9 5c 28 65 1e 54 bf ef df 02 3c   ...^..\(e.T....<
0090  90 16 60 06 b5 17 40 53 ba 09 18 df b4 45 15 04   ..`...@S.....E..
00a0  c7 68 5e ee a6 bb 5a a6 a2 9f 47 ec d0 0f 8f ba   .h^...Z...G.....
00b0  16 14 00 fc 26 c6 a5 3c ab 27 c1 bf 21 cf bc 62   ....&..<.'..!..b
00c0  ab 0f 6d 95 1c f0 80 57 09 81 0d 00 00 18 d5 a6   ..m....W........
00d0  3f 02 a4 0d d2 53 1d 7f be eb ad 82 38 eb 32 04   ?....S......8.2.
00e0  4c ec 0d 00 00 30 47 bb e7 c9 93 f1 fc 13 b4 e6   L....0G.........
00f0  d0 db 56 5c 68 e5 01 02 01 01 02 01 01 03 11 31   ..V\h..........1
0100  30 2e 31 2e 31 20 28 42 75 69 6c 64 20 31 30 29   0.1.1 (Build 10)
0110  00 00 0d 00 00 0c da 8e 93 78 80 01 00 00 00 00   .........x......
0120  00 0c 09 00 26 89 df d6 b7 12 07 d0 42 bf         ....&.......B.

Frame 4 (218 bytes on wire, 218 bytes captured)
    Arrival Time: Jan 28, 2004 11:40:45.857231000
    Time delta from previous packet: 0.453373000 seconds
    Time since reference or first frame: 2.112482000 seconds
    Frame Number: 4
    Packet Length: 218 bytes
    Capture Length: 218 bytes
Ethernet II, Src: 00:09:5b:b0:f5:3d, Dst: 00:0c:29:b1:20:22
    Destination: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22)
    Source: 00:09:5b:b0:f5:3d (00:09:5b:b0:f5:3d)
    Type: IP (0x0800)
    Frame check sequence: 0x03ce475a (correct)
Internet Protocol, Src Addr: 165.227.249.136 (165.227.249.136), Dst Addr: 165.227.249.115 (165.227.249.115)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 200
    Identification: 0x0045 (69)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0x3b1d (correct)
    Source: 165.227.249.136 (165.227.249.136)
    Destination: 165.227.249.115 (165.227.249.115)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 180
    Checksum: 0x5ad5 (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0xEDEDAC7674598312
    Responder cookie: 0x888B38FC0BE0DAF0
    Next payload: Key Exchange (4)
    Version: 1.0
    Exchange type: Identity Protection (Main Mode) (2)
    Flags
        .... ...0 = No encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x00000000
    Length: 172
    Key Exchange payload
        Next payload: Nonce (10)
        Length: 132
        Key Exchange Data
    Nonce payload
        Next payload: NONE (0)
        Length: 12
        Nonce Data

0000  00 0c 29 b1 20 22 00 09 5b b0 f5 3d 08 00 45 00   ..). "..[..=..E.
0010  00 c8 00 45 00 00 40 11 3b 1d a5 e3 f9 88 a5 e3   ...E..@.;.......
0020  f9 73 01 f4 01 f4 00 b4 5a d5 ed ed ac 76 74 59   .s......Z....vtY
0030  83 12 88 8b 38 fc 0b e0 da f0 04 10 02 00 00 00   ....8...........
0040  00 00 00 00 00 ac 0a 00 00 84 fa ca 76 8b df f7   ............v...
0050  f8 8d 6c 07 40 5b 2a 76 d6 50 81 04 98 15 9d ce   ..l.@[*v.P......
0060  2e c1 02 4d a0 d4 2b 71 28 b7 9d e9 8d 2e f8 97   ...M..+q(.......
0070  d9 a0 08 15 d7 0d db 53 2e d9 93 07 cd 3c 31 34   .......S.....<14
0080  68 cd 73 30 24 62 9b d6 90 f3 d1 f2 fd 50 40 55   h.s0$b.......P@U
0090  41 6c 6a 5f 34 5c 75 9e b7 9e af 30 35 49 50 52   Alj_4\u....05IPR
00a0  92 3f 94 85 29 a9 cc d0 a0 29 70 e4 fa 94 ab b1   .?..)....)p.....
00b0  be b6 90 61 99 56 02 5f 1e 49 52 ce 1e 3e d2 43   ...a.V._.IR..>.C
00c0  3f dd f8 8c 33 a4 ef 71 34 fa 00 00 00 0c ca 1b   ?...3..q4.......
00d0  e5 a1 73 a0 75 b4 03 ce 47 5a                     ..s.u...GZ

Frame 5 (138 bytes on wire, 138 bytes captured)
    Arrival Time: Jan 28, 2004 11:40:47.288482000
    Time delta from previous packet: 1.431251000 seconds
    Time since reference or first frame: 3.543733000 seconds
    Frame Number: 5
    Packet Length: 138 bytes
    Capture Length: 138 bytes
Ethernet II, Src: 00:0c:29:b1:20:22, Dst: 00:09:5b:b0:f5:3d
    Destination: 00:09:5b:b0:f5:3d (00:09:5b:b0:f5:3d)
    Source: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22)
    Type: IP (0x0800)
    Frame check sequence: 0x57610841 (correct)
Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.136 (165.227.249.136)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 120
    Identification: 0x025d (605)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0xf954 (correct)
    Source: 165.227.249.115 (165.227.249.115)
    Destination: 165.227.249.136 (165.227.249.136)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 100
    Checksum: 0x07bd (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0xEDEDAC7674598312
    Responder cookie: 0x888B38FC0BE0DAF0
    Next payload: Identification (5)
    Version: 1.0
    Exchange type: Identity Protection (Main Mode) (2)
    Flags
        .... ...1 = Encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x00000000
    Length: 92
    Encrypted payload (64 bytes)

0000  00 09 5b b0 f5 3d 00 0c 29 b1 20 22 08 00 45 00   ..[..=..). "..E.
0010  00 78 02 5d 00 00 80 11 f9 54 a5 e3 f9 73 a5 e3   .x.].....T...s..
0020  f9 88 01 f4 01 f4 00 64 07 bd ed ed ac 76 74 59   .......d.....vtY
0030  83 12 88 8b 38 fc 0b e0 da f0 05 10 02 01 00 00   ....8...........
0040  00 00 00 00 00 5c e9 80 60 b8 9a ef 93 82 da fb   .....\..`.......
0050  67 9d bd 66 61 b7 6a 04 b3 e5 d3 9a a6 52 7e e9   g..fa.j......R~.
0060  8e 3e 30 f2 fd 6b b5 57 15 4b cd cd 77 3b 5d 88   .>0..k.W.K..w;].
0070  05 00 55 1c 71 df 1a 6d 69 b1 bc 4d 61 3a 1b 1d   ..U.q..mi..Ma:..
0080  c5 c1 d2 e2 36 ce 57 61 08 41                     ....6.Wa.A

Frame 6 (114 bytes on wire, 114 bytes captured)
    Arrival Time: Jan 28, 2004 11:40:47.837239000
    Time delta from previous packet: 0.548757000 seconds
    Time since reference or first frame: 4.092490000 seconds
    Frame Number: 6
    Packet Length: 114 bytes
    Capture Length: 114 bytes
Ethernet II, Src: 00:09:5b:b0:f5:3d, Dst: 00:0c:29:b1:20:22
    Destination: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22)
    Source: 00:09:5b:b0:f5:3d (00:09:5b:b0:f5:3d)
    Type: IP (0x0800)
    Frame check sequence: 0x2ac0e09a (correct)
Internet Protocol, Src Addr: 165.227.249.136 (165.227.249.136), Dst Addr: 165.227.249.115 (165.227.249.115)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 96
    Identification: 0x0046 (70)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0x3b84 (correct)
    Source: 165.227.249.136 (165.227.249.136)
    Destination: 165.227.249.115 (165.227.249.115)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 76
    Checksum: 0xf6c0 (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0xEDEDAC7674598312
    Responder cookie: 0x888B38FC0BE0DAF0
    Next payload: Identification (5)
    Version: 1.0
    Exchange type: Identity Protection (Main Mode) (2)
    Flags
        .... ...1 = Encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x00000000
    Length: 68
    Encrypted payload (40 bytes)

0000  00 0c 29 b1 20 22 00 09 5b b0 f5 3d 08 00 45 00   ..). "..[..=..E.
0010  00 60 00 46 00 00 40 11 3b 84 a5 e3 f9 88 a5 e3   .`.F..@.;.......
0020  f9 73 01 f4 01 f4 00 4c f6 c0 ed ed ac 76 74 59   .s.....L.....vtY
0030  83 12 88 8b 38 fc 0b e0 da f0 05 10 02 01 00 00   ....8...........
0040  00 00 00 00 00 44 d6 e8 26 28 01 37 86 0a e2 da   .....D..&(.7....
0050  35 b6 87 aa 4f bd 00 29 f4 58 de 4b 55 97 44 76   5...O..).X.KU.Dv
0060  21 42 19 e8 51 cd 62 2e a4 98 80 2c 8f 59 2a c0   !B..Q.b....,.Y*.
0070  e0 9a                                             ..

Frame 7 (338 bytes on wire, 338 bytes captured)
    Arrival Time: Jan 28, 2004 11:40:49.632747000
    Time delta from previous packet: 1.795508000 seconds
    Time since reference or first frame: 5.887998000 seconds
    Frame Number: 7
    Packet Length: 338 bytes
    Capture Length: 338 bytes
Ethernet II, Src: 00:0c:29:b1:20:22, Dst: 00:09:5b:b0:f5:3d
    Destination: 00:09:5b:b0:f5:3d (00:09:5b:b0:f5:3d)
    Source: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22)
    Type: IP (0x0800)
    Frame check sequence: 0x3491497a (correct)
Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.136 (165.227.249.136)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 320
    Identification: 0x0260 (608)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0xf889 (correct)
    Source: 165.227.249.115 (165.227.249.115)
    Destination: 165.227.249.136 (165.227.249.136)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 300
    Checksum: 0x5a9f (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0xEDEDAC7674598312
    Responder cookie: 0x888B38FC0BE0DAF0
    Next payload: Hash (8)
    Version: 1.0
    Exchange type: Quick Mode (32)
    Flags
        .... ...1 = Encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x9D6AFA44
    Length: 292
    Encrypted payload (264 bytes)

0000  00 09 5b b0 f5 3d 00 0c 29 b1 20 22 08 00 45 00   ..[..=..). "..E.
0010  01 40 02 60 00 00 80 11 f8 89 a5 e3 f9 73 a5 e3   .@.`.........s..
0020  f9 88 01 f4 01 f4 01 2c 5a 9f ed ed ac 76 74 59   .......,Z....vtY
0030  83 12 88 8b 38 fc 0b e0 da f0 08 10 20 01 9d 6a   ....8....... ..j
0040  fa 44 00 00 01 24 82 4a c4 c0 b2 f5 e5 5d 89 ff   .D...$.J.....]..
0050  3d 1c 6a 91 0e 86 36 1a ac 60 aa ae b4 d1 ae 1a   =.j...6..`......
0060  85 0a cb df 98 ae 18 e5 9f 30 57 1e 02 e3 84 f9   .........0W.....
0070  ac 3b 6d 40 28 54 84 f3 f2 6f da c5 b6 b7 25 a0   .;m@(T...o....%.
0080  f6 64 4c ae 48 96 3a be 1a e7 ed 0c 68 a1 85 10   .dL.H.:.....h...
0090  88 17 b9 e0 69 e0 5e 53 ff 7f e7 ea c7 cf 8a 65   ....i.^S.......e
00a0  0a 71 02 90 9e 60 a9 aa 76 2c ec 59 37 d7 1e 41   .q...`..v,.Y7..A
00b0  a3 e6 42 2d cb fe 17 6f fb ba 21 ea 9b 8c 5c 66   ..B-...o..!...\f
00c0  35 39 b6 5a 43 6c 47 b8 94 5f 49 1b 11 bf 72 5d   59.ZClG.._I...r]
00d0  44 ed 68 73 77 eb b9 ee a4 76 c8 11 53 08 84 3f   D.hsw....v..S..?
00e0  a9 03 25 c8 db fc 57 d3 e8 5d f1 86 d4 8a 08 62   ..%...W..].....b
00f0  05 47 99 94 20 05 8a 69 29 87 45 ac 9c a4 ae 85   .G.. ..i).E.....
0100  71 75 db e6 74 3e 68 5e b8 a3 6d f4 dd e7 a0 c4   qu..t>h^..m.....
0110  e4 e4 2a c6 9f 8b 52 d3 0d 69 cf 67 8a 4e a9 83   ..*...R..i.g.N..
0120  5f 12 4f f5 61 a9 03 c9 d1 c4 a7 36 33 e3 ea 87   _.O.a......63...
0130  88 26 b2 1e 9e 56 84 bd 88 38 72 d9 5a 9e fd a2   .&...V...8r.Z...
0140  1c 46 7a b8 e6 bb 10 20 84 9b 16 ef 57 ad 34 91   .Fz.... ....W.4.
0150  49 7a                                             Iz

Frame 8 (322 bytes on wire, 322 bytes captured)
    Arrival Time: Jan 28, 2004 11:40:50.087773000
    Time delta from previous packet: 0.455026000 seconds
    Time since reference or first frame: 6.343024000 seconds
    Frame Number: 8
    Packet Length: 322 bytes
    Capture Length: 322 bytes
Ethernet II, Src: 00:09:5b:b0:f5:3d, Dst: 00:0c:29:b1:20:22
    Destination: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22)
    Source: 00:09:5b:b0:f5:3d (00:09:5b:b0:f5:3d)
    Type: IP (0x0800)
    Frame check sequence: 0xe57e1b46 (correct)
Internet Protocol, Src Addr: 165.227.249.136 (165.227.249.136), Dst Addr: 165.227.249.115 (165.227.249.115)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 304
    Identification: 0x0047 (71)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0x3ab3 (correct)
    Source: 165.227.249.136 (165.227.249.136)
    Destination: 165.227.249.115 (165.227.249.115)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 284
    Checksum: 0x02ba (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0xEDEDAC7674598312
    Responder cookie: 0x888B38FC0BE0DAF0
    Next payload: Hash (8)
    Version: 1.0
    Exchange type: Quick Mode (32)
    Flags
        .... ...1 = Encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x9D6AFA44
    Length: 276
    Encrypted payload (248 bytes)

0000  00 0c 29 b1 20 22 00 09 5b b0 f5 3d 08 00 45 00   ..). "..[..=..E.
0010  01 30 00 47 00 00 40 11 3a b3 a5 e3 f9 88 a5 e3   .0.G..@.:.......
0020  f9 73 01 f4 01 f4 01 1c 02 ba ed ed ac 76 74 59   .s...........vtY
0030  83 12 88 8b 38 fc 0b e0 da f0 08 10 20 01 9d 6a   ....8....... ..j
0040  fa 44 00 00 01 14 e3 63 65 74 49 cb 30 f8 cb 77   .D.....cetI.0..w
0050  d9 37 40 90 56 3e 54 03 fa ab 69 93 9c b5 c0 c6   .7@.V>T...i.....
0060  d2 ef 5f 2e 6e 1d 34 32 cf 2f 45 6c bc 37 19 da   .._.n.42./El.7..
0070  92 a0 bf 61 16 f4 1f 38 52 0d c3 ce d5 bb 22 67   ...a...8R....."g
0080  70 9a 9d 1b b9 9c c6 da 4c 13 7b 44 46 ee 82 15   p.......L.{DF...
0090  1a 56 e0 e4 25 06 f9 61 a8 96 55 48 d9 11 2b 1a   .V..%..a..UH..+.
00a0  d2 c2 2a 64 1d aa f2 fe 8a 89 b2 d3 6c ab ba e2   ..*d........l...
00b0  d4 ab 33 14 65 9f 37 67 42 85 e1 a6 99 88 73 f2   ..3.e.7gB.....s.
00c0  62 e3 c6 90 21 0d a9 fa 4a 9f a6 f0 cf 09 3c c1   b...!...J.....<.
00d0  ef 4a 58 5c 70 41 10 c8 af 9f d7 36 4a a8 d9 b0   .JX\pA.....6J...
00e0  37 d3 29 47 db 7f d6 02 47 a5 cd 50 80 17 78 76   7.)G....G..P..xv
00f0  eb 2e 74 5f 32 91 8c cd 09 3e f8 cd 3c be 4c f5   ..t_2....>..<.L.
0100  f6 18 98 41 56 49 d8 1f 81 6f d3 60 e3 ff 72 65   ...AVI...o.`..re
0110  ef 4e c4 a0 09 bd c2 62 d8 47 24 32 d3 61 33 24   .N.....b.G$2.a3$
0120  98 c8 ca ad ef eb 8b 40 34 97 3a d7 0c b6 1a c4   .......@4.:.....
0130  a0 30 4b 6d cb 0a 41 ea 9a 5f 6b 95 40 2e e5 7e   .0Km..A.._k.@..~
0140  1b 46                                             .F

Frame 9 (98 bytes on wire, 98 bytes captured)
    Arrival Time: Jan 28, 2004 11:40:50.092717000
    Time delta from previous packet: 0.004944000 seconds
    Time since reference or first frame: 6.347968000 seconds
    Frame Number: 9
    Packet Length: 98 bytes
    Capture Length: 98 bytes
Ethernet II, Src: 00:0c:29:b1:20:22, Dst: 00:09:5b:b0:f5:3d
    Destination: 00:09:5b:b0:f5:3d (00:09:5b:b0:f5:3d)
    Source: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22)
    Type: IP (0x0800)
    Frame check sequence: 0x7af83c33 (correct)
Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.136 (165.227.249.136)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 80
    Identification: 0x0261 (609)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0xf978 (correct)
    Source: 165.227.249.115 (165.227.249.115)
    Destination: 165.227.249.136 (165.227.249.136)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 60
    Checksum: 0xc6a1 (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0xEDEDAC7674598312
    Responder cookie: 0x888B38FC0BE0DAF0
    Next payload: Hash (8)
    Version: 1.0
    Exchange type: Quick Mode (32)
    Flags
        .... ...1 = Encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x9D6AFA44
    Length: 52
    Encrypted payload (24 bytes)

0000  00 09 5b b0 f5 3d 00 0c 29 b1 20 22 08 00 45 00   ..[..=..). "..E.
0010  00 50 02 61 00 00 80 11 f9 78 a5 e3 f9 73 a5 e3   .P.a.....x...s..
0020  f9 88 01 f4 01 f4 00 3c c6 a1 ed ed ac 76 74 59   .......<.....vtY
0030  83 12 88 8b 38 fc 0b e0 da f0 08 10 20 01 9d 6a   ....8....... ..j
0040  fa 44 00 00 00 34 76 47 8a ea 2b 01 19 c9 2b 5b   .D...4vG..+...+[
0050  96 07 1b 94 43 28 10 e6 db 15 c2 63 e7 8f 7a f8   ....C(.....c..z.
0060  3c 33                                             <3

Frame 10 (322 bytes on wire, 322 bytes captured)
    Arrival Time: Jan 28, 2004 11:40:54.499859000
    Time delta from previous packet: 4.407142000 seconds
    Time since reference or first frame: 10.755110000 seconds
    Frame Number: 10
    Packet Length: 322 bytes
    Capture Length: 322 bytes
Ethernet II, Src: 00:09:5b:b0:f5:3d, Dst: 00:0c:29:b1:20:22
    Destination: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22)
    Source: 00:09:5b:b0:f5:3d (00:09:5b:b0:f5:3d)
    Type: IP (0x0800)
    Frame check sequence: 0xd39a47b9 (correct)
Internet Protocol, Src Addr: 165.227.249.136 (165.227.249.136), Dst Addr: 165.227.249.115 (165.227.249.115)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 304
    Identification: 0x0048 (72)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0x3ab2 (correct)
    Source: 165.227.249.136 (165.227.249.136)
    Destination: 165.227.249.115 (165.227.249.115)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 284
    Checksum: 0x02ba (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0xEDEDAC7674598312
    Responder cookie: 0x888B38FC0BE0DAF0
    Next payload: Hash (8)
    Version: 1.0
    Exchange type: Quick Mode (32)
    Flags
        .... ...1 = Encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x9D6AFA44
    Length: 276
    Encrypted payload (248 bytes)

0000  00 0c 29 b1 20 22 00 09 5b b0 f5 3d 08 00 45 00   ..). "..[..=..E.
0010  01 30 00 48 00 00 40 11 3a b2 a5 e3 f9 88 a5 e3   .0.H..@.:.......
0020  f9 73 01 f4 01 f4 01 1c 02 ba ed ed ac 76 74 59   .s...........vtY
0030  83 12 88 8b 38 fc 0b e0 da f0 08 10 20 01 9d 6a   ....8....... ..j
0040  fa 44 00 00 01 14 e3 63 65 74 49 cb 30 f8 cb 77   .D.....cetI.0..w
0050  d9 37 40 90 56 3e 54 03 fa ab 69 93 9c b5 c0 c6   .7@.V>T...i.....
0060  d2 ef 5f 2e 6e 1d 34 32 cf 2f 45 6c bc 37 19 da   .._.n.42./El.7..
0070  92 a0 bf 61 16 f4 1f 38 52 0d c3 ce d5 bb 22 67   ...a...8R....."g
0080  70 9a 9d 1b b9 9c c6 da 4c 13 7b 44 46 ee 82 15   p.......L.{DF...
0090  1a 56 e0 e4 25 06 f9 61 a8 96 55 48 d9 11 2b 1a   .V..%..a..UH..+.
00a0  d2 c2 2a 64 1d aa f2 fe 8a 89 b2 d3 6c ab ba e2   ..*d........l...
00b0  d4 ab 33 14 65 9f 37 67 42 85 e1 a6 99 88 73 f2   ..3.e.7gB.....s.
00c0  62 e3 c6 90 21 0d a9 fa 4a 9f a6 f0 cf 09 3c c1   b...!...J.....<.
00d0  ef 4a 58 5c 70 41 10 c8 af 9f d7 36 4a a8 d9 b0   .JX\pA.....6J...
00e0  37 d3 29 47 db 7f d6 02 47 a5 cd 50 80 17 78 76   7.)G....G..P..xv
00f0  eb 2e 74 5f 32 91 8c cd 09 3e f8 cd 3c be 4c f5   ..t_2....>..<.L.
0100  f6 18 98 41 56 49 d8 1f 81 6f d3 60 e3 ff 72 65   ...AVI...o.`..re
0110  ef 4e c4 a0 09 bd c2 62 d8 47 24 32 d3 61 33 24   .N.....b.G$2.a3$
0120  98 c8 ca ad ef eb 8b 40 34 97 3a d7 0c b6 1a c4   .......@4.:.....
0130  a0 30 4b 6d cb 0a 41 ea 9a 5f 6b 95 40 2e d3 9a   .0Km..A.._k.@...
0140  47 b9                                             G.

Frame 11 (98 bytes on wire, 98 bytes captured)
    Arrival Time: Jan 28, 2004 11:40:54.501444000
    Time delta from previous packet: 0.001585000 seconds
    Time since reference or first frame: 10.756695000 seconds
    Frame Number: 11
    Packet Length: 98 bytes
    Capture Length: 98 bytes
Ethernet II, Src: 00:0c:29:b1:20:22, Dst: 00:09:5b:b0:f5:3d
    Destination: 00:09:5b:b0:f5:3d (00:09:5b:b0:f5:3d)
    Source: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22)
    Type: IP (0x0800)
    Frame check sequence: 0x5bebcc88 (correct)
Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.136 (165.227.249.136)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 80
    Identification: 0x0265 (613)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0xf974 (correct)
    Source: 165.227.249.115 (165.227.249.115)
    Destination: 165.227.249.136 (165.227.249.136)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 60
    Checksum: 0xc6a1 (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0xEDEDAC7674598312
    Responder cookie: 0x888B38FC0BE0DAF0
    Next payload: Hash (8)
    Version: 1.0
    Exchange type: Quick Mode (32)
    Flags
        .... ...1 = Encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x9D6AFA44
    Length: 52
    Encrypted payload (24 bytes)

0000  00 09 5b b0 f5 3d 00 0c 29 b1 20 22 08 00 45 00   ..[..=..). "..E.
0010  00 50 02 65 00 00 80 11 f9 74 a5 e3 f9 73 a5 e3   .P.e.....t...s..
0020  f9 88 01 f4 01 f4 00 3c c6 a1 ed ed ac 76 74 59   .......<.....vtY
0030  83 12 88 8b 38 fc 0b e0 da f0 08 10 20 01 9d 6a   ....8....... ..j
0040  fa 44 00 00 00 34 76 47 8a ea 2b 01 19 c9 2b 5b   .D...4vG..+...+[
0050  96 07 1b 94 43 28 10 e6 db 15 c2 63 e7 8f 5b eb   ....C(.....c..[.
0060  cc 88                                             ..

Frame 12 (130 bytes on wire, 130 bytes captured)
    Arrival Time: Jan 28, 2004 11:40:55.333247000
    Time delta from previous packet: 0.831803000 seconds
    Time since reference or first frame: 11.588498000 seconds
    Frame Number: 12
    Packet Length: 130 bytes
    Capture Length: 130 bytes
Ethernet II, Src: 00:0c:29:b1:20:22, Dst: 00:09:5b:b0:f5:3d
    Destination: 00:09:5b:b0:f5:3d (00:09:5b:b0:f5:3d)
    Source: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22)
    Type: IP (0x0800)
    Frame check sequence: 0x8db510e3 (correct)
Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.136 (165.227.249.136)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 112
    Identification: 0x0001 (1)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 128
    Protocol: ESP (0x32)
    Header checksum: 0xfb97 (correct)
    Source: 165.227.249.115 (165.227.249.115)
    Destination: 165.227.249.136 (165.227.249.136)
Encapsulating Security Payload
    SPI: 0x87b3314f
    Sequence: 1
    Data (84 bytes)

0000  00 09 5b b0 f5 3d 00 0c 29 b1 20 22 08 00 45 00   ..[..=..). "..E.
0010  00 70 00 01 00 00 80 32 fb 97 a5 e3 f9 73 a5 e3   .p.....2.....s..
0020  f9 88 87 b3 31 4f 00 00 00 01 ac 2a 2a 0f 29 9b   ....1O.....**.).
0030  e6 05 9c 4c c4 a8 35 b6 f7 24 a3 ce d7 d2 e8 6f   ...L..5..$.....o
0040  1b bb 9c d8 d7 e4 97 df d6 be fe d9 34 d2 ad a9   ............4...
0050  a9 8b 80 3d 8a 7a 0a 96 8d 1b 93 32 e4 f4 ee 22   ...=.z.....2..."
0060  6a 3a 56 08 12 38 2b 24 45 3c 1e 82 5e 73 78 c9   j:V..8+$E<..^sx.
0070  be ad a7 15 76 8a 47 ff e2 66 1a 48 c9 8e 8d b5   ....v.G..f.H....
0080  10 e3                                             ..

Frame 13 (130 bytes on wire, 130 bytes captured)
    Arrival Time: Jan 28, 2004 11:40:55.334840000
    Time delta from previous packet: 0.001593000 seconds
    Time since reference or first frame: 11.590091000 seconds
    Frame Number: 13
    Packet Length: 130 bytes
    Capture Length: 130 bytes
Ethernet II, Src: 00:09:5b:b0:f5:3d, Dst: 00:0c:29:b1:20:22
    Destination: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22)
    Source: 00:09:5b:b0:f5:3d (00:09:5b:b0:f5:3d)
    Type: IP (0x0800)
    Frame check sequence: 0xa45919c2 (correct)
Internet Protocol, Src Addr: 165.227.249.136 (165.227.249.136), Dst Addr: 165.227.249.115 (165.227.249.115)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 112
    Identification: 0xb7ff (47103)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 30
    Protocol: ESP (0x32)
    Header checksum: 0xa599 (correct)
    Source: 165.227.249.136 (165.227.249.136)
    Destination: 165.227.249.115 (165.227.249.115)
Encapsulating Security Payload
    SPI: 0x42ece3e9
    Sequence: 1
    Data (84 bytes)

0000  00 0c 29 b1 20 22 00 09 5b b0 f5 3d 08 00 45 00   ..). "..[..=..E.
0010  00 70 b7 ff 00 00 1e 32 a5 99 a5 e3 f9 88 a5 e3   .p.....2........
0020  f9 73 42 ec e3 e9 00 00 00 01 46 7a 14 27 84 43   .sB.......Fz.'.C
0030  98 c9 ce 72 d3 df 22 fd d8 5a 6d 16 06 41 a1 c2   ...r.."..Zm..A..
0040  c8 33 88 2b 2b 4d b0 d6 be 93 f0 ae c0 4f 65 c8   .3.++M.......Oe.
0050  52 70 ca e7 f2 0f 0c d8 3c fe a6 be 9c e0 3b a1   Rp......<.....;.
0060  ad 59 fd e9 88 83 ab b2 49 92 1d f4 e0 b2 b2 ea   .Y......I.......
0070  b7 f2 d3 46 8f a6 b1 04 37 ed 73 13 09 66 a4 59   ...F....7.s..f.Y
0080  19 c2                                             ..

Frame 14 (130 bytes on wire, 130 bytes captured)
    Arrival Time: Jan 28, 2004 11:40:57.167107000
    Time delta from previous packet: 1.832267000 seconds
    Time since reference or first frame: 13.422358000 seconds
    Frame Number: 14
    Packet Length: 130 bytes
    Capture Length: 130 bytes
Ethernet II, Src: 00:0c:29:b1:20:22, Dst: 00:09:5b:b0:f5:3d
    Destination: 00:09:5b:b0:f5:3d (00:09:5b:b0:f5:3d)
    Source: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22)
    Type: IP (0x0800)
    Frame check sequence: 0x4f9c4df6 (correct)
Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.136 (165.227.249.136)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 112
    Identification: 0x0002 (2)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 128
    Protocol: ESP (0x32)
    Header checksum: 0xfb96 (correct)
    Source: 165.227.249.115 (165.227.249.115)
    Destination: 165.227.249.136 (165.227.249.136)
Encapsulating Security Payload
    SPI: 0x87b3314f
    Sequence: 2
    Data (84 bytes)

0000  00 09 5b b0 f5 3d 00 0c 29 b1 20 22 08 00 45 00   ..[..=..). "..E.
0010  00 70 00 02 00 00 80 32 fb 96 a5 e3 f9 73 a5 e3   .p.....2.....s..
0020  f9 88 87 b3 31 4f 00 00 00 02 1e 82 5e 73 78 c9   ....1O......^sx.
0030  be ad bc 81 56 f2 1c 8f f4 de 6f 57 24 d3 b6 1b   ....V.....oW$...
0040  33 61 f4 39 e7 80 c8 43 58 e8 b1 48 d6 a5 17 dd   3a.9...CX..H....
0050  9d 21 aa ed dc c4 fb 2b 3e b8 0a c8 72 eb ab 52   .!.....+>...r..R
0060  88 e7 37 dc f3 09 a8 8b 66 8b e7 13 5c df 8b bf   ..7.....f...\...
0070  c9 49 e3 02 9f 3f 56 da e2 2c e8 33 30 0a 4f 9c   .I...?V..,.30.O.
0080  4d f6                                             M.

Frame 15 (130 bytes on wire, 130 bytes captured)
    Arrival Time: Jan 28, 2004 11:40:57.168324000
    Time delta from previous packet: 0.001217000 seconds
    Time since reference or first frame: 13.423575000 seconds
    Frame Number: 15
    Packet Length: 130 bytes
    Capture Length: 130 bytes
Ethernet II, Src: 00:09:5b:b0:f5:3d, Dst: 00:0c:29:b1:20:22
    Destination: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22)
    Source: 00:09:5b:b0:f5:3d (00:09:5b:b0:f5:3d)
    Type: IP (0x0800)
    Frame check sequence: 0xe64e281d (correct)
Internet Protocol, Src Addr: 165.227.249.136 (165.227.249.136), Dst Addr: 165.227.249.115 (165.227.249.115)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 112
    Identification: 0xd43f (54335)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 30
    Protocol: ESP (0x32)
    Header checksum: 0x8959 (correct)
    Source: 165.227.249.136 (165.227.249.136)
    Destination: 165.227.249.115 (165.227.249.115)
Encapsulating Security Payload
    SPI: 0x42ece3e9
    Sequence: 2
    Data (84 bytes)

0000  00 0c 29 b1 20 22 00 09 5b b0 f5 3d 08 00 45 00   ..). "..[..=..E.
0010  00 70 d4 3f 00 00 1e 32 89 59 a5 e3 f9 88 a5 e3   .p.?...2.Y......
0020  f9 73 42 ec e3 e9 00 00 00 02 1d f4 e0 b2 b2 ea   .sB.............
0030  b7 f2 2d cb c2 4d e3 95 d9 9f 1d bd dc ff ab 2a   ..-..M.........*
0040  b0 0a a4 77 b3 76 42 02 61 ed d0 b6 ea 72 61 e1   ...w.vB.a....ra.
0050  16 9e e5 10 a4 43 4b 0e 22 14 08 1b 76 4b 21 89   .....CK."...vK!.
0060  7d 44 9c bb b9 82 26 8b fd d4 51 2c ee 6c 77 f2   }D....&...Q,.lw.
0070  8f e6 bd 5e 32 e4 dc 26 50 de ef 68 00 f9 e6 4e   ...^2..&P..h...N
0080  28 1d                                             (.

Frame 16 (130 bytes on wire, 130 bytes captured)
    Arrival Time: Jan 28, 2004 11:40:57.942201000
    Time delta from previous packet: 0.773877000 seconds
    Time since reference or first frame: 14.197452000 seconds
    Frame Number: 16
    Packet Length: 130 bytes
    Capture Length: 130 bytes
Ethernet II, Src: 00:0c:29:b1:20:22, Dst: 00:09:5b:b0:f5:3d
    Destination: 00:09:5b:b0:f5:3d (00:09:5b:b0:f5:3d)
    Source: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22)
    Type: IP (0x0800)
    Frame check sequence: 0xef115e1d (correct)
Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.136 (165.227.249.136)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 112
    Identification: 0x0003 (3)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 128
    Protocol: ESP (0x32)
    Header checksum: 0xfb95 (correct)
    Source: 165.227.249.115 (165.227.249.115)
    Destination: 165.227.249.136 (165.227.249.136)
Encapsulating Security Payload
    SPI: 0x87b3314f
    Sequence: 3
    Data (84 bytes)

0000  00 09 5b b0 f5 3d 00 0c 29 b1 20 22 08 00 45 00   ..[..=..). "..E.
0010  00 70 00 03 00 00 80 32 fb 95 a5 e3 f9 73 a5 e3   .p.....2.....s..
0020  f9 88 87 b3 31 4f 00 00 00 03 e7 13 5c df 8b bf   ....1O......\...
0030  c9 49 e0 af b6 a1 ed b7 5c 67 72 59 65 cc e4 de   .I......\grYe...
0040  9a 9f b0 57 34 b3 72 57 25 ea d2 49 5d 63 f4 a5   ...W4.rW%..I]c..
0050  4a aa 58 aa 58 3c 71 74 09 11 b9 ce ec 6d 41 23   J.X.X<qt.....mA#
0060  eb 36 8d 90 40 df c8 68 07 31 e2 f1 e4 b6 e9 22   .6..@..h.1....."
0070  19 7d 67 9a 1e ef f8 9a 7f cb 06 ef bf c5 ef 11   .}g.............
0080  5e 1d                                             ^.

Frame 17 (130 bytes on wire, 130 bytes captured)
    Arrival Time: Jan 28, 2004 11:40:57.943260000
    Time delta from previous packet: 0.001059000 seconds
    Time since reference or first frame: 14.198511000 seconds
    Frame Number: 17
    Packet Length: 130 bytes
    Capture Length: 130 bytes
Ethernet II, Src: 00:09:5b:b0:f5:3d, Dst: 00:0c:29:b1:20:22
    Destination: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22)
    Source: 00:09:5b:b0:f5:3d (00:09:5b:b0:f5:3d)
    Type: IP (0x0800)
    Frame check sequence: 0xeac9d926 (correct)
Internet Protocol, Src Addr: 165.227.249.136 (165.227.249.136), Dst Addr: 165.227.249.115 (165.227.249.115)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 112
    Identification: 0xa52b (42283)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 30
    Protocol: ESP (0x32)
    Header checksum: 0xb86d (correct)
    Source: 165.227.249.136 (165.227.249.136)
    Destination: 165.227.249.115 (165.227.249.115)
Encapsulating Security Payload
    SPI: 0x42ece3e9
    Sequence: 3
    Data (84 bytes)

0000  00 0c 29 b1 20 22 00 09 5b b0 f5 3d 08 00 45 00   ..). "..[..=..E.
0010  00 70 a5 2b 00 00 1e 32 b8 6d a5 e3 f9 88 a5 e3   .p.+...2.m......
0020  f9 73 42 ec e3 e9 00 00 00 03 51 2c ee 6c 77 f2   .sB.......Q,.lw.
0030  8f e6 64 2a 97 f0 92 ff 95 86 5b c5 c2 90 b1 f6   ..d*......[.....
0040  9d 19 c2 1c 75 a3 f8 47 3c 9a 53 46 e1 ee 01 d1   ....u..G<.SF....
0050  97 1e 54 5c 1f c3 cb fd cd 0e 90 87 65 eb 91 10   ..T\........e...
0060  37 4b 74 2b 8c a9 b0 ab 05 5a c4 80 c2 cb b0 db   7Kt+.....Z......
0070  10 8d 6d 32 0a 65 f5 3e 2f b1 17 b4 9e 62 ea c9   ..m2.e.>/....b..
0080  d9 26                                             .&

Frame 18 (130 bytes on wire, 130 bytes captured)
    Arrival Time: Jan 28, 2004 11:40:58.723277000
    Time delta from previous packet: 0.780017000 seconds
    Time since reference or first frame: 14.978528000 seconds
    Frame Number: 18
    Packet Length: 130 bytes
    Capture Length: 130 bytes
Ethernet II, Src: 00:0c:29:b1:20:22, Dst: 00:09:5b:b0:f5:3d
    Destination: 00:09:5b:b0:f5:3d (00:09:5b:b0:f5:3d)
    Source: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22)
    Type: IP (0x0800)
    Frame check sequence: 0x9b1aa7e1 (correct)
Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.136 (165.227.249.136)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 112
    Identification: 0x0004 (4)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 128
    Protocol: ESP (0x32)
    Header checksum: 0xfb94 (correct)
    Source: 165.227.249.115 (165.227.249.115)
    Destination: 165.227.249.136 (165.227.249.136)
Encapsulating Security Payload
    SPI: 0x87b3314f
    Sequence: 4
    Data (84 bytes)

0000  00 09 5b b0 f5 3d 00 0c 29 b1 20 22 08 00 45 00   ..[..=..). "..E.
0010  00 70 00 04 00 00 80 32 fb 94 a5 e3 f9 73 a5 e3   .p.....2.....s..
0020  f9 88 87 b3 31 4f 00 00 00 04 e2 f1 e4 b6 e9 22   ....1O........."
0030  19 7d 87 ab 6a 68 2d 00 ae bc 38 1d d4 82 6f 83   .}..jh-...8...o.
0040  80 6b f9 9d 24 60 7f 89 f5 5e 88 3c 6b c7 af bc   .k..$`...^.<k...
0050  93 e4 ad da 64 ce 86 08 05 7a 5d 2f 91 c6 7d 00   ....d....z]/..}.
0060  26 41 de 10 41 49 3f 04 0f d9 9b d6 40 12 99 6f   &A..AI?.....@..o
0070  84 a6 23 2c f4 83 1c f9 3a fc 92 eb 03 ea 9b 1a   ..#,....:.......
0080  a7 e1                                             ..

Frame 19 (130 bytes on wire, 130 bytes captured)
    Arrival Time: Jan 28, 2004 11:40:58.724499000
    Time delta from previous packet: 0.001222000 seconds
    Time since reference or first frame: 14.979750000 seconds
    Frame Number: 19
    Packet Length: 130 bytes
    Capture Length: 130 bytes
Ethernet II, Src: 00:09:5b:b0:f5:3d, Dst: 00:0c:29:b1:20:22
    Destination: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22)
    Source: 00:09:5b:b0:f5:3d (00:09:5b:b0:f5:3d)
    Type: IP (0x0800)
    Frame check sequence: 0x623735c0 (correct)
Internet Protocol, Src Addr: 165.227.249.136 (165.227.249.136), Dst Addr: 165.227.249.115 (165.227.249.115)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 112
    Identification: 0xbaf1 (47857)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 30
    Protocol: ESP (0x32)
    Header checksum: 0xa2a7 (correct)
    Source: 165.227.249.136 (165.227.249.136)
    Destination: 165.227.249.115 (165.227.249.115)
Encapsulating Security Payload
    SPI: 0x42ece3e9
    Sequence: 4
    Data (84 bytes)

0000  00 0c 29 b1 20 22 00 09 5b b0 f5 3d 08 00 45 00   ..). "..[..=..E.
0010  00 70 ba f1 00 00 1e 32 a2 a7 a5 e3 f9 88 a5 e3   .p.....2........
0020  f9 73 42 ec e3 e9 00 00 00 04 c4 80 c2 cb b0 db   .sB.............
0030  10 8d 52 a1 3b f5 0c ef 5f 1d c9 61 de 6e e2 e3   ..R.;..._..a.n..
0040  de 10 9e c6 7c d7 6b c7 66 32 66 90 7c 09 d8 50   ....|.k.f2f.|..P
0050  13 36 2b d4 90 bb e3 e0 ba 38 58 26 d2 ec 30 3f   .6+......8X&..0?
0060  ba 21 34 96 69 a1 24 78 15 26 82 dc e6 a5 da fa   .!4.i.$x.&......
0070  94 d8 d4 17 cd f2 69 1c 89 01 bc 50 86 33 62 37   ......i....P.3b7
0080  35 c0                                             5.

Frame 20 (130 bytes on wire, 130 bytes captured)
    Arrival Time: Jan 28, 2004 11:40:59.504425000
    Time delta from previous packet: 0.779926000 seconds
    Time since reference or first frame: 15.759676000 seconds
    Frame Number: 20
    Packet Length: 130 bytes
    Capture Length: 130 bytes
Ethernet II, Src: 00:0c:29:b1:20:22, Dst: 00:09:5b:b0:f5:3d
    Destination: 00:09:5b:b0:f5:3d (00:09:5b:b0:f5:3d)
    Source: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22)
    Type: IP (0x0800)
    Frame check sequence: 0xfd39eb1b (correct)
Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.136 (165.227.249.136)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 112
    Identification: 0x0005 (5)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 128
    Protocol: ESP (0x32)
    Header checksum: 0xfb93 (correct)
    Source: 165.227.249.115 (165.227.249.115)
    Destination: 165.227.249.136 (165.227.249.136)
Encapsulating Security Payload
    SPI: 0x87b3314f
    Sequence: 5
    Data (84 bytes)

0000  00 09 5b b0 f5 3d 00 0c 29 b1 20 22 08 00 45 00   ..[..=..). "..E.
0010  00 70 00 05 00 00 80 32 fb 93 a5 e3 f9 73 a5 e3   .p.....2.....s..
0020  f9 88 87 b3 31 4f 00 00 00 05 9b d6 40 12 99 6f   ....1O......@..o
0030  84 a6 50 6b d1 eb 31 ae 11 38 9a 1a ac 11 69 16   ..Pk..1..8....i.
0040  bb e1 3f 3d dd c4 7d b0 a5 0d e2 65 b9 e7 2c 3a   ..?=..}....e..,:
0050  ed 6c 54 ff 49 03 20 56 a9 3a 85 51 24 3c 05 3b   .lT.I. V.:.Q$<.;
0060  4b 2c e2 46 96 14 07 8c 83 af 68 92 ca ea 0b 84   K,.F......h.....
0070  04 54 17 7b ff be 84 91 d4 6e b4 fd 4f c0 fd 39   .T.{.....n..O..9
0080  eb 1b                                             ..

Frame 21 (130 bytes on wire, 130 bytes captured)
    Arrival Time: Jan 28, 2004 11:40:59.505737000
    Time delta from previous packet: 0.001312000 seconds
    Time since reference or first frame: 15.760988000 seconds
    Frame Number: 21
    Packet Length: 130 bytes
    Capture Length: 130 bytes
Ethernet II, Src: 00:09:5b:b0:f5:3d, Dst: 00:0c:29:b1:20:22
    Destination: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22)
    Source: 00:09:5b:b0:f5:3d (00:09:5b:b0:f5:3d)
    Type: IP (0x0800)
    Frame check sequence: 0x5ad118f0 (correct)
Internet Protocol, Src Addr: 165.227.249.136 (165.227.249.136), Dst Addr: 165.227.249.115 (165.227.249.115)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 112
    Identification: 0x41fc (16892)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 30
    Protocol: ESP (0x32)
    Header checksum: 0x1b9d (correct)
    Source: 165.227.249.136 (165.227.249.136)
    Destination: 165.227.249.115 (165.227.249.115)
Encapsulating Security Payload
    SPI: 0x42ece3e9
    Sequence: 5
    Data (84 bytes)

0000  00 0c 29 b1 20 22 00 09 5b b0 f5 3d 08 00 45 00   ..). "..[..=..E.
0010  00 70 41 fc 00 00 1e 32 1b 9d a5 e3 f9 88 a5 e3   .pA....2........
0020  f9 73 42 ec e3 e9 00 00 00 05 82 dc e6 a5 da fa   .sB.............
0030  94 d8 38 c4 22 9c 82 ba ab a0 da 19 c6 3e b4 4c   ..8."........>.L
0040  75 35 09 30 d7 f4 6e b9 6f b5 ce 24 4e 5e 6f f3   u5.0..n.o..$N^o.
0050  70 41 ac 07 5b f4 46 6d 35 e8 64 54 ba 83 23 f9   pA..[.Fm5.dT..#.
0060  a8 ec 01 3d 49 02 91 5e 13 fc 8c ad 8c da 1c ae   ...=I..^........
0070  eb e2 bb f3 b2 72 96 84 7b 3b fd 03 99 77 5a d1   .....r..{;...wZ.
0080  18 f0                                             ..

Frame 22 (322 bytes on wire, 322 bytes captured)
    Arrival Time: Jan 28, 2004 11:40:59.506956000
    Time delta from previous packet: 0.001219000 seconds
    Time since reference or first frame: 15.762207000 seconds
    Frame Number: 22
    Packet Length: 322 bytes
    Capture Length: 322 bytes
Ethernet II, Src: 00:09:5b:b0:f5:3d, Dst: 00:0c:29:b1:20:22
    Destination: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22)
    Source: 00:09:5b:b0:f5:3d (00:09:5b:b0:f5:3d)
    Type: IP (0x0800)
    Frame check sequence: 0x5fc424b0 (correct)
Internet Protocol, Src Addr: 165.227.249.136 (165.227.249.136), Dst Addr: 165.227.249.115 (165.227.249.115)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 304
    Identification: 0x0049 (73)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0x3ab1 (correct)
    Source: 165.227.249.136 (165.227.249.136)
    Destination: 165.227.249.115 (165.227.249.115)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 284
    Checksum: 0x02ba (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0xEDEDAC7674598312
    Responder cookie: 0x888B38FC0BE0DAF0
    Next payload: Hash (8)
    Version: 1.0
    Exchange type: Quick Mode (32)
    Flags
        .... ...1 = Encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x9D6AFA44
    Length: 276
    Encrypted payload (248 bytes)

0000  00 0c 29 b1 20 22 00 09 5b b0 f5 3d 08 00 45 00   ..). "..[..=..E.
0010  01 30 00 49 00 00 40 11 3a b1 a5 e3 f9 88 a5 e3   .0.I..@.:.......
0020  f9 73 01 f4 01 f4 01 1c 02 ba ed ed ac 76 74 59   .s...........vtY
0030  83 12 88 8b 38 fc 0b e0 da f0 08 10 20 01 9d 6a   ....8....... ..j
0040  fa 44 00 00 01 14 e3 63 65 74 49 cb 30 f8 cb 77   .D.....cetI.0..w
0050  d9 37 40 90 56 3e 54 03 fa ab 69 93 9c b5 c0 c6   .7@.V>T...i.....
0060  d2 ef 5f 2e 6e 1d 34 32 cf 2f 45 6c bc 37 19 da   .._.n.42./El.7..
0070  92 a0 bf 61 16 f4 1f 38 52 0d c3 ce d5 bb 22 67   ...a...8R....."g
0080  70 9a 9d 1b b9 9c c6 da 4c 13 7b 44 46 ee 82 15   p.......L.{DF...
0090  1a 56 e0 e4 25 06 f9 61 a8 96 55 48 d9 11 2b 1a   .V..%..a..UH..+.
00a0  d2 c2 2a 64 1d aa f2 fe 8a 89 b2 d3 6c ab ba e2   ..*d........l...
00b0  d4 ab 33 14 65 9f 37 67 42 85 e1 a6 99 88 73 f2   ..3.e.7gB.....s.
00c0  62 e3 c6 90 21 0d a9 fa 4a 9f a6 f0 cf 09 3c c1   b...!...J.....<.
00d0  ef 4a 58 5c 70 41 10 c8 af 9f d7 36 4a a8 d9 b0   .JX\pA.....6J...
00e0  37 d3 29 47 db 7f d6 02 47 a5 cd 50 80 17 78 76   7.)G....G..P..xv
00f0  eb 2e 74 5f 32 91 8c cd 09 3e f8 cd 3c be 4c f5   ..t_2....>..<.L.
0100  f6 18 98 41 56 49 d8 1f 81 6f d3 60 e3 ff 72 65   ...AVI...o.`..re
0110  ef 4e c4 a0 09 bd c2 62 d8 47 24 32 d3 61 33 24   .N.....b.G$2.a3$
0120  98 c8 ca ad ef eb 8b 40 34 97 3a d7 0c b6 1a c4   .......@4.:.....
0130  a0 30 4b 6d cb 0a 41 ea 9a 5f 6b 95 40 2e 5f c4   .0Km..A.._k.@._.
0140  24 b0                                             $.

Frame 23 (98 bytes on wire, 98 bytes captured)
    Arrival Time: Jan 28, 2004 11:40:59.558134000
    Time delta from previous packet: 0.051178000 seconds
    Time since reference or first frame: 15.813385000 seconds
    Frame Number: 23
    Packet Length: 98 bytes
    Capture Length: 98 bytes
Ethernet II, Src: 00:0c:29:b1:20:22, Dst: 00:09:5b:b0:f5:3d
    Destination: 00:09:5b:b0:f5:3d (00:09:5b:b0:f5:3d)
    Source: 00:0c:29:b1:20:22 (00:0c:29:b1:20:22)
    Type: IP (0x0800)
    Frame check sequence: 0xb970060d (correct)
Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.136 (165.227.249.136)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 80
    Identification: 0x026c (620)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0xf96d (correct)
    Source: 165.227.249.115 (165.227.249.115)
    Destination: 165.227.249.136 (165.227.249.136)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 60
    Checksum: 0xc6a1 (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0xEDEDAC7674598312
    Responder cookie: 0x888B38FC0BE0DAF0
    Next payload: Hash (8)
    Version: 1.0
    Exchange type: Quick Mode (32)
    Flags
        .... ...1 = Encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x9D6AFA44
    Length: 52
    Encrypted payload (24 bytes)

0000  00 09 5b b0 f5 3d 00 0c 29 b1 20 22 08 00 45 00   ..[..=..). "..E.
0010  00 50 02 6c 00 00 80 11 f9 6d a5 e3 f9 73 a5 e3   .P.l.....m...s..
0020  f9 88 01 f4 01 f4 00 3c c6 a1 ed ed ac 76 74 59   .......<.....vtY
0030  83 12 88 8b 38 fc 0b e0 da f0 08 10 20 01 9d 6a   ....8....... ..j
0040  fa 44 00 00 00 34 76 47 8a ea 2b 01 19 c9 2b 5b   .D...4vG..+...+[
0050  96 07 1b 94 43 28 10 e6 db 15 c2 63 e7 8f b9 70   ....C(.....c...p
0060  06 0d                                             ..