Frame 1 (166 bytes on wire, 166 bytes captured) Arrival Time: Sep 14, 2004 14:32:52.607793000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 166 bytes Capture Length: 166 bytes Ethernet II, Src: 00:0c:29:00:82:53, Dst: 00:00:d1:ed:e3:ad Destination: 00:00:d1:ed:e3:ad (00:00:d1:ed:e3:ad) Source: 00:0c:29:00:82:53 (00:0c:29:00:82:53) Type: IP (0x0800) Frame check sequence: 0x180a0cb1 (correct) Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.141 (165.227.249.141) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 148 Identification: 0x0082 (130) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xfb0e (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.141 (165.227.249.141) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 128 Checksum: 0xc865 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x52C8CC4AF24EB358 Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 120 Security Association payload Next payload: Vendor ID (13) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 40 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 32 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (3600) Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 0000 00 00 d1 ed e3 ad 00 0c 29 00 82 53 08 00 45 00 ........)..S..E. 0010 00 94 00 82 00 00 80 11 fb 0e a5 e3 f9 73 a5 e3 .............s.. 0020 f9 8d 01 f4 01 f4 00 80 c8 65 52 c8 cc 4a f2 4e .........eR..J.N 0030 b3 58 00 00 00 00 00 00 00 00 01 10 02 00 00 00 .X.............. 0040 00 00 00 00 00 78 0d 00 00 34 00 00 00 01 00 00 .....x...4...... 0050 00 01 00 00 00 28 01 01 00 01 00 00 00 20 01 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 04 00 02 80 03 ................ 0070 00 01 80 0b 00 01 80 0c 0e 10 0d 00 00 14 44 85 ..............D. 0080 15 2d 18 b6 bb cd 0b e8 a8 46 95 79 dd cc 00 00 .-.......F.y.... 0090 00 14 90 cb 80 91 3e bb 69 6e 08 63 81 b5 ec 42 ......>.in.c...B 00a0 7b 1f 18 0a 0c b1 {..... Frame 2 (266 bytes on wire, 266 bytes captured) Arrival Time: Sep 14, 2004 14:32:52.649298000 Time delta from previous packet: 0.041505000 seconds Time since reference or first frame: 0.041505000 seconds Frame Number: 2 Packet Length: 266 bytes Capture Length: 266 bytes Ethernet II, Src: 00:00:d1:ed:e3:ad, Dst: 00:0c:29:00:82:53 Destination: 00:0c:29:00:82:53 (00:0c:29:00:82:53) Source: 00:00:d1:ed:e3:ad (00:00:d1:ed:e3:ad) Type: IP (0x0800) Frame check sequence: 0xc49ba520 (correct) Internet Protocol, Src Addr: 165.227.249.141 (165.227.249.141), Dst Addr: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 248 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb2c (correct) Source: 165.227.249.141 (165.227.249.141) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 228 Checksum: 0xf104 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x52C8CC4AF24EB358 Responder cookie: 0x02E344E99A3112B5 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 220 Security Association payload Next payload: Vendor ID (13) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 40 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 32 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (3600) Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: unknown vendor ID: 0x8F9CC94E01248ECDF147594C284B213B Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-stenberg-ipsec-nat-traversal-01 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-stenberg-ipsec-nat-traversal-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-03 0000 00 0c 29 00 82 53 00 00 d1 ed e3 ad 08 00 45 00 ..)..S........E. 0010 00 f8 00 00 40 00 40 11 fb 2c a5 e3 f9 8d a5 e3 ....@.@..,...... 0020 f9 73 01 f4 01 f4 00 e4 f1 04 52 c8 cc 4a f2 4e .s........R..J.N 0030 b3 58 02 e3 44 e9 9a 31 12 b5 01 10 02 00 00 00 .X..D..1........ 0040 00 00 00 00 00 dc 0d 00 00 34 00 00 00 01 00 00 .........4...... 0050 00 01 00 00 00 28 01 01 00 01 00 00 00 20 01 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 04 00 02 80 03 ................ 0070 00 01 80 0b 00 01 80 0c 0e 10 0d 00 00 14 8f 9c ................ 0080 c9 4e 01 24 8e cd f1 47 59 4c 28 4b 21 3b 0d 00 .N.$...GYL(K!;.. 0090 00 14 27 ba b5 dc 01 ea 07 60 ea 4e 31 90 ac 27 ..'......`.N1..' 00a0 c0 d0 0d 00 00 14 61 05 c4 22 e7 68 47 e4 3f 96 ......a..".hG.?. 00b0 84 80 12 92 ae cd 0d 00 00 14 44 85 15 2d 18 b6 ..........D..-.. 00c0 bb cd 0b e8 a8 46 95 79 dd cc 0d 00 00 14 cd 60 .....F.y.......` 00d0 46 43 35 df 21 f8 7c fd b2 fc 68 b6 a4 48 0d 00 FC5.!.|...h..H.. 00e0 00 14 90 cb 80 91 3e bb 69 6e 08 63 81 b5 ec 42 ......>.in.c...B 00f0 7b 1f 00 00 00 14 7d 94 19 a6 53 10 ca 6f 2c 17 {.....}...S..o,. 0100 9d 92 15 52 9d 56 c4 9b a5 20 ...R.V... Frame 3 (350 bytes on wire, 350 bytes captured) Arrival Time: Sep 14, 2004 14:32:54.651219000 Time delta from previous packet: 2.001921000 seconds Time since reference or first frame: 2.043426000 seconds Frame Number: 3 Packet Length: 350 bytes Capture Length: 350 bytes Ethernet II, Src: 00:0c:29:00:82:53, Dst: 00:00:d1:ed:e3:ad Destination: 00:00:d1:ed:e3:ad (00:00:d1:ed:e3:ad) Source: 00:0c:29:00:82:53 (00:0c:29:00:82:53) Type: IP (0x0800) Frame check sequence: 0xdc14995c (correct) Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.141 (165.227.249.141) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 332 Identification: 0x0083 (131) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xfa55 (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.141 (165.227.249.141) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 312 Checksum: 0xeeb5 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x52C8CC4AF24EB358 Responder cookie: 0x02E344E99A3112B5 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 304 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: Private USE (130) Length: 24 Nonce Data Unknown payload type payload Next payload: Private USE (130) Length: 24 Payload Unknown payload type payload Next payload: Vendor ID (13) Length: 24 Payload Vendor ID payload Next payload: Vendor ID (13) Length: 48 Vendor ID: unknown vendor ID: 0x47BBE7C993F1FC13B4E6D0DB565C68E5... Vendor ID payload Next payload: Vendor ID (13) Length: 12 Vendor ID: unknown vendor ID: 0xDA8E937880010000 Vendor ID payload Next payload: NONE (0) Length: 12 Vendor ID: draft-beaulieu-ike-xauth-02.txt 0000 00 00 d1 ed e3 ad 00 0c 29 00 82 53 08 00 45 00 ........)..S..E. 0010 01 4c 00 83 00 00 80 11 fa 55 a5 e3 f9 73 a5 e3 .L.......U...s.. 0020 f9 8d 01 f4 01 f4 01 38 ee b5 52 c8 cc 4a f2 4e .......8..R..J.N 0030 b3 58 02 e3 44 e9 9a 31 12 b5 04 10 02 00 00 00 .X..D..1........ 0040 00 00 00 00 01 30 0a 00 00 84 c0 fd fa f1 02 56 .....0.........V 0050 00 f4 8d a2 8d cc 62 1a 0d aa 84 be f2 18 84 4a ......b........J 0060 ba 96 c0 2c 00 49 66 e7 67 f0 29 0d 78 17 05 d4 ...,.If.g.).x... 0070 9a 2f 23 59 91 cb 17 2c 77 9e 4b 62 b1 b3 f8 9c ./#Y...,w.Kb.... 0080 49 8d 44 11 45 04 3c e2 f6 6c 69 10 91 61 ed c5 I.D.E.<..li..a.. 0090 fe 10 56 1d a4 de ff 0a e8 a7 2d 9e b9 52 a8 f7 ..V.......-..R.. 00a0 13 69 f2 78 34 28 90 b1 12 a9 77 05 b1 dd f0 9a .i.x4(....w..... 00b0 c9 0d 63 4e b0 a7 03 3f 0c 68 b9 d9 01 07 5b 85 ..cN...?.h....[. 00c0 be 68 f3 b0 b6 6d 56 70 63 06 82 00 00 18 03 9a .h...mVpc....... 00d0 b8 0d 67 48 a8 a5 2d 55 f7 74 f6 19 12 18 58 71 ..gH..-U.t....Xq 00e0 24 1f 82 00 00 18 93 9c 80 08 ef 6c 55 57 27 66 $..........lUW'f 00f0 ac 59 4f 13 d1 f2 97 a4 fc 7d 0d 00 00 18 bd de .YO......}...... 0100 c8 54 db 72 84 68 d8 73 47 c1 80 94 ef bf 16 f5 .T.r.h.sG....... 0110 b0 26 0d 00 00 30 47 bb e7 c9 93 f1 fc 13 b4 e6 .&...0G......... 0120 d0 db 56 5c 68 e5 01 02 01 01 02 01 01 03 11 31 ..V\h..........1 0130 30 2e 31 2e 31 20 28 42 75 69 6c 64 20 31 30 29 0.1.1 (Build 10) 0140 00 00 0d 00 00 0c da 8e 93 78 80 01 00 00 00 00 .........x...... 0150 00 0c 09 00 26 89 df d6 b7 12 dc 14 99 5c ....&........\ Frame 4 (274 bytes on wire, 274 bytes captured) Arrival Time: Sep 14, 2004 14:32:54.665023000 Time delta from previous packet: 0.013804000 seconds Time since reference or first frame: 2.057230000 seconds Frame Number: 4 Packet Length: 274 bytes Capture Length: 274 bytes Ethernet II, Src: 00:00:d1:ed:e3:ad, Dst: 00:0c:29:00:82:53 Destination: 00:0c:29:00:82:53 (00:0c:29:00:82:53) Source: 00:00:d1:ed:e3:ad (00:00:d1:ed:e3:ad) Type: IP (0x0800) Frame check sequence: 0x35b9ac87 (correct) Internet Protocol, Src Addr: 165.227.249.141 (165.227.249.141), Dst Addr: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 256 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb24 (correct) Source: 165.227.249.141 (165.227.249.141) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 236 Checksum: 0x3d07 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x52C8CC4AF24EB358 Responder cookie: 0x02E344E99A3112B5 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 228 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: Private USE (130) Length: 20 Nonce Data Unknown payload type payload Next payload: Private USE (130) Length: 24 Payload Unknown payload type payload Next payload: NONE (0) Length: 24 Payload 0000 00 0c 29 00 82 53 00 00 d1 ed e3 ad 08 00 45 00 ..)..S........E. 0010 01 00 00 00 40 00 40 11 fb 24 a5 e3 f9 8d a5 e3 ....@.@..$...... 0020 f9 73 01 f4 01 f4 00 ec 3d 07 52 c8 cc 4a f2 4e .s......=.R..J.N 0030 b3 58 02 e3 44 e9 9a 31 12 b5 04 10 02 00 00 00 .X..D..1........ 0040 00 00 00 00 00 e4 0a 00 00 84 9d fe 0d 33 3c 3b .............3<; 0050 51 63 9f cc f0 29 10 35 ab 98 2f a1 af a8 fe 3c Qc...).5../....< 0060 54 76 93 4a b9 d8 56 38 6a 42 cd f9 44 47 f5 65 Tv.J..V8jB..DG.e 0070 c2 09 49 9e 84 c8 50 be d4 38 d3 f2 52 3c 57 f9 ..I...P..8..R.A.... 0060 e4 ae 71 61 57 83 f4 d6 a9 b8 88 8d d8 4a e4 dd ..qaW........J.. 0070 a4 b7 46 5d a7 f8 0b 18 89 a1 1f 6c 3a 53 46 34 ..F].......l:SF4 0080 66 a7 09 e5 4b 5a 24 54 d2 ce 7b 4a c4 f8 25 3d f...KZ$T..{J..%= 0090 51 74 c0 1e b0 cc a9 28 4f 46 82 4b ab b0 bf 72 Qt.....(OF.K...r 00a0 24 7d be e5 53 e2 eb c2 eb f6 1b e3 a2 2e 54 ab $}..S.........T. 00b0 78 73 f0 bf bf ac 46 db 5d 82 a7 fb 4f fa 54 f1 xs....F.]...O.T. 00c0 36 28 d7 d7 a1 6f d7 dd 3f 2e 74 42 71 db 49 2e 6(...o..?.tBq.I. 00d0 b6 4c d7 c5 73 9c 33 a7 8d 3a 2e a3 30 6b 3e 4d .L..s.3..:..0k>M 00e0 c1 b1 c0 05 d5 a8 20 4e b5 5b fd 1e cc a2 d6 91 ...... N.[...... 00f0 6f 63 a0 0f 33 dd 7c a0 bd ae 90 64 1f 87 14 f1 oc..3.|....d.... 0100 d3 02 85 47 00 4e ed cb e7 e7 11 6b 21 86 a9 3e ...G.N.....k!..> 0110 9b 9e 5d f7 e6 60 ed c2 83 56 98 0f 7b 1e 92 f7 ..]..`...V..{... 0120 df 74 65 ac 38 01 d8 cf 4a 44 5c 93 7f 72 32 07 .te.8...JD\..r2. 0130 0b 51 f2 a7 d0 e2 18 7c f3 b3 1f 64 77 1b ce e9 .Q.....|...dw... 0140 fa dc 63 1e 95 2d 8d c8 ff 37 14 1e 10 c0 d5 3b ..c..-...7.....; 0150 86 55 .U Frame 8 (330 bytes on wire, 330 bytes captured) Arrival Time: Sep 14, 2004 14:32:58.283332000 Time delta from previous packet: 0.007670000 seconds Time since reference or first frame: 5.675539000 seconds Frame Number: 8 Packet Length: 330 bytes Capture Length: 330 bytes Ethernet II, Src: 00:00:d1:ed:e3:ad, Dst: 00:0c:29:00:82:53 Destination: 00:0c:29:00:82:53 (00:0c:29:00:82:53) Source: 00:00:d1:ed:e3:ad (00:00:d1:ed:e3:ad) Type: IP (0x0800) Frame check sequence: 0x580a1851 (correct) Internet Protocol, Src Addr: 165.227.249.141 (165.227.249.141), Dst Addr: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 312 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfaec (correct) Source: 165.227.249.141 (165.227.249.141) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 292 Checksum: 0xc0f9 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x52C8CC4AF24EB358 Responder cookie: 0x02E344E99A3112B5 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xDBEEE156 Length: 284 Encrypted payload (256 bytes) 0000 00 0c 29 00 82 53 00 00 d1 ed e3 ad 08 00 45 00 ..)..S........E. 0010 01 38 00 00 40 00 40 11 fa ec a5 e3 f9 8d a5 e3 .8..@.@......... 0020 f9 73 01 f4 01 f4 01 24 c0 f9 52 c8 cc 4a f2 4e .s.....$..R..J.N 0030 b3 58 02 e3 44 e9 9a 31 12 b5 08 10 20 01 db ee .X..D..1.... ... 0040 e1 56 00 00 01 1c 55 e4 09 be 7b c0 24 96 63 1d .V....U...{.$.c. 0050 4a 8b aa 1f c2 5e b7 4d cf d2 39 b5 e3 72 71 ae J....^.M..9..rq. 0060 13 d0 1b 15 19 fd 44 56 30 4a bc 39 79 02 21 f0 ......DV0J.9y.!. 0070 72 cc c1 0d df e3 2c 21 a4 7d b3 28 35 b8 ba 6b r.....,!.}.(5..k 0080 f8 5c 7f 71 17 9f 58 09 40 a7 7a 87 d2 25 10 76 .\.q..X.@.z..%.v 0090 a3 2b d0 f1 0d a0 97 a8 3c a5 10 0f 27 96 3c bb .+......<...'.<. 00a0 37 66 8d c2 f9 4b 5b 7a 73 b5 cd d8 b0 42 50 45 7f...K[zs....BPE 00b0 7d 79 0c 67 1e e7 9e 6e 50 57 d4 24 37 04 96 24 }y.g...nPW.$7..$ 00c0 a4 02 54 07 72 db 2f 51 15 e3 7b 3d f5 92 c7 95 ..T.r./Q..{=.... 00d0 5d 62 0c 7f e7 8d 0d 29 27 e8 3c ab 8a 79 41 f8 ]b.....)'.<..yA. 00e0 4b ab 75 62 d8 bb a3 af 94 02 6b 96 55 b2 81 e2 K.ub......k.U... 00f0 a4 0e af 0a 4f c9 c9 f6 fa 56 45 7d b7 7c 74 74 ....O....VE}.|tt 0100 87 d0 a4 45 d7 36 89 4a 4b 23 a0 bd cc be d9 dd ...E.6.JK#...... 0110 3b 1c bd 40 16 34 9b 18 96 87 bc 36 7e 0f 9f 02 ;..@.4.....6~... 0120 d8 ba 65 a3 14 ce f1 e8 99 ff 08 69 a5 d5 60 8d ..e........i..`. 0130 3f 3e a9 c8 5f ef a3 3a 2c 12 c2 4b c1 75 de 85 ?>.._..:,..K.u.. 0140 cd 16 cb 4b 0a 5d 58 0a 18 51 ...K.]X..Q Frame 9 (98 bytes on wire, 98 bytes captured) Arrival Time: Sep 14, 2004 14:32:58.288965000 Time delta from previous packet: 0.005633000 seconds Time since reference or first frame: 5.681172000 seconds Frame Number: 9 Packet Length: 98 bytes Capture Length: 98 bytes Ethernet II, Src: 00:0c:29:00:82:53, Dst: 00:00:d1:ed:e3:ad Destination: 00:00:d1:ed:e3:ad (00:00:d1:ed:e3:ad) Source: 00:0c:29:00:82:53 (00:0c:29:00:82:53) Type: IP (0x0800) Frame check sequence: 0xb5f9414c (correct) Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.141 (165.227.249.141) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 80 Identification: 0x0088 (136) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xfb4c (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.141 (165.227.249.141) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 60 Checksum: 0xe666 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x52C8CC4AF24EB358 Responder cookie: 0x02E344E99A3112B5 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xDBEEE156 Length: 52 Encrypted payload (24 bytes) 0000 00 00 d1 ed e3 ad 00 0c 29 00 82 53 08 00 45 00 ........)..S..E. 0010 00 50 00 88 00 00 80 11 fb 4c a5 e3 f9 73 a5 e3 .P.......L...s.. 0020 f9 8d 01 f4 01 f4 00 3c e6 66 52 c8 cc 4a f2 4e .......<.fR..J.N 0030 b3 58 02 e3 44 e9 9a 31 12 b5 08 10 20 01 db ee .X..D..1.... ... 0040 e1 56 00 00 00 34 7c dd 83 98 8e 69 f5 07 ca 70 .V...4|....i...p 0050 76 cb 28 ea fd 95 7f e8 c0 84 5e dd ac 77 b5 f9 v.(.......^..w.. 0060 41 4c AL Frame 10 (130 bytes on wire, 130 bytes captured) Arrival Time: Sep 14, 2004 14:33:02.763067000 Time delta from previous packet: 4.474102000 seconds Time since reference or first frame: 10.155274000 seconds Frame Number: 10 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:0c:29:00:82:53, Dst: 00:00:d1:ed:e3:ad Destination: 00:00:d1:ed:e3:ad (00:00:d1:ed:e3:ad) Source: 00:0c:29:00:82:53 (00:0c:29:00:82:53) Type: IP (0x0800) Frame check sequence: 0xd8ccb4d9 (correct) Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.141 (165.227.249.141) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0001 (1) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: ESP (0x32) Header checksum: 0xfb92 (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.141 (165.227.249.141) Encapsulating Security Payload SPI: 0xb36f0530 Sequence: 1 Data (84 bytes) 0000 00 00 d1 ed e3 ad 00 0c 29 00 82 53 08 00 45 00 ........)..S..E. 0010 00 70 00 01 00 00 80 32 fb 92 a5 e3 f9 73 a5 e3 .p.....2.....s.. 0020 f9 8d b3 6f 05 30 00 00 00 01 d2 d9 f3 a5 d9 5e ...o.0.........^ 0030 40 b8 69 2e e7 60 59 db 67 15 1d d0 c8 dd aa 78 @.i..`Y.g......x 0040 46 b7 5c b9 35 6d 86 e0 0a 08 9d 28 20 2c 2e 30 F.\.5m.....( ,.0 0050 87 27 d6 38 bc 61 01 53 0d 91 89 bf bc f2 68 f6 .'.8.a.S......h. 0060 78 ec 34 26 16 a8 e3 f2 f3 62 c7 a6 0e 6e 3c e0 x.4&.....b...n<. 0070 68 0b 0d d1 36 fa 83 38 d4 eb dc 7d b5 96 d8 cc h...6..8...}.... 0080 b4 d9 .. Frame 11 (130 bytes on wire, 130 bytes captured) Arrival Time: Sep 14, 2004 14:33:02.763786000 Time delta from previous packet: 0.000719000 seconds Time since reference or first frame: 10.155993000 seconds Frame Number: 11 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:00:d1:ed:e3:ad, Dst: 00:0c:29:00:82:53 Destination: 00:0c:29:00:82:53 (00:0c:29:00:82:53) Source: 00:00:d1:ed:e3:ad (00:00:d1:ed:e3:ad) Type: IP (0x0800) Frame check sequence: 0x55144139 (correct) Internet Protocol, Src Addr: 165.227.249.141 (165.227.249.141), Dst Addr: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0022 (34) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b71 (correct) Source: 165.227.249.141 (165.227.249.141) Destination: 165.227.249.115 (165.227.249.115) Encapsulating Security Payload SPI: 0xff099495 Sequence: 2 Data (84 bytes) 0000 00 0c 29 00 82 53 00 00 d1 ed e3 ad 08 00 45 00 ..)..S........E. 0010 00 70 00 22 00 00 f0 32 8b 71 a5 e3 f9 8d a5 e3 .p."...2.q...... 0020 f9 73 ff 09 94 95 00 00 00 02 b7 44 9f c9 80 2d .s.........D...- 0030 db 6f ec 78 00 f6 cd 95 14 e8 22 20 0c 84 81 51 .o.x......" ...Q 0040 60 33 7e b2 75 db a2 b6 92 7b 98 3e b7 27 74 97 `3~.u....{.>.'t. 0050 31 a6 53 cd 90 7f f3 31 58 dc ab 9d 26 4a 7e 77 1.S....1X...&J~w 0060 20 f3 52 64 7c 07 ce 14 e3 df 91 83 36 46 65 3d .Rd|.......6Fe= 0070 b1 22 a7 a4 fa 6a 6a 40 9c ed c6 46 d8 43 55 14 ."...jj@...F.CU. 0080 41 39 A9 Frame 12 (130 bytes on wire, 130 bytes captured) Arrival Time: Sep 14, 2004 14:33:03.719805000 Time delta from previous packet: 0.956019000 seconds Time since reference or first frame: 11.112012000 seconds Frame Number: 12 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:0c:29:00:82:53, Dst: 00:00:d1:ed:e3:ad Destination: 00:00:d1:ed:e3:ad (00:00:d1:ed:e3:ad) Source: 00:0c:29:00:82:53 (00:0c:29:00:82:53) Type: IP (0x0800) Frame check sequence: 0xb18fd5d3 (correct) Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.141 (165.227.249.141) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0002 (2) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: ESP (0x32) Header checksum: 0xfb91 (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.141 (165.227.249.141) Encapsulating Security Payload SPI: 0xb36f0530 Sequence: 2 Data (84 bytes) 0000 00 00 d1 ed e3 ad 00 0c 29 00 82 53 08 00 45 00 ........)..S..E. 0010 00 70 00 02 00 00 80 32 fb 91 a5 e3 f9 73 a5 e3 .p.....2.....s.. 0020 f9 8d b3 6f 05 30 00 00 00 02 c7 a6 0e 6e 3c e0 ...o.0.......n<. 0030 68 0b 74 3a 96 ac 11 61 0c f9 a4 2d 33 ca 8e cf h.t:...a...-3... 0040 96 1e 7a 98 02 39 56 16 25 32 16 04 f3 4a 55 f9 ..z..9V.%2...JU. 0050 21 a4 4d 82 04 3a 43 db 71 2b c4 bd 80 68 b6 48 !.M..:C.q+...h.H 0060 b4 6b 0e d2 45 bd 31 c2 d9 0f 88 b0 bb 1e 15 38 .k..E.1........8 0070 a3 ef 8f e7 25 8b d8 e3 00 0e 97 35 7c af b1 8f ....%......5|... 0080 d5 d3 .. Frame 13 (130 bytes on wire, 130 bytes captured) Arrival Time: Sep 14, 2004 14:33:03.720304000 Time delta from previous packet: 0.000499000 seconds Time since reference or first frame: 11.112511000 seconds Frame Number: 13 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:00:d1:ed:e3:ad, Dst: 00:0c:29:00:82:53 Destination: 00:0c:29:00:82:53 (00:0c:29:00:82:53) Source: 00:00:d1:ed:e3:ad (00:00:d1:ed:e3:ad) Type: IP (0x0800) Frame check sequence: 0x350154a3 (correct) Internet Protocol, Src Addr: 165.227.249.141 (165.227.249.141), Dst Addr: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0023 (35) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b70 (correct) Source: 165.227.249.141 (165.227.249.141) Destination: 165.227.249.115 (165.227.249.115) Encapsulating Security Payload SPI: 0xff099495 Sequence: 3 Data (84 bytes) 0000 00 0c 29 00 82 53 00 00 d1 ed e3 ad 08 00 45 00 ..)..S........E. 0010 00 70 00 23 00 00 f0 32 8b 70 a5 e3 f9 8d a5 e3 .p.#...2.p...... 0020 f9 73 ff 09 94 95 00 00 00 03 7a 29 6a fb 4c 7e .s........z)j.L~ 0030 73 8c 2b 11 ab 2d 0b 8f 72 4a 79 c2 0b 45 bf 98 s.+..-..rJy..E.. 0040 f8 f7 c4 cd fd 6e 6e 62 55 7a cd 20 2b 0b 81 d2 .....nnbUz. +... 0050 ea 90 27 3a 04 2c 94 8d 4c ff a5 36 2b fc 83 ed ..':.,..L..6+... 0060 47 7d 2e 3b ea 4f e5 7f ca 8c 0a 17 d1 00 cb 0e G}.;.O.......... 0070 c3 66 bf d4 0a 90 8b 57 46 90 6c 1f 79 8e 35 01 .f.....WF.l.y.5. 0080 54 a3 T.