Frame 1 (166 bytes on wire, 166 bytes captured) Arrival Time: Sep 8, 2004 10:56:57.013761000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 166 bytes Capture Length: 166 bytes Ethernet II, Src: 00:0c:29:00:82:53, Dst: 00:0f:3d:10:fc:2c Destination: 00:0f:3d:10:fc:2c (00:0f:3d:10:fc:2c) Source: 00:0c:29:00:82:53 (00:0c:29:00:82:53) Type: IP (0x0800) Frame check sequence: 0xcd8cfdd4 (correct) Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.142 (165.227.249.142) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 148 Identification: 0x0082 (130) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xfb0d (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.142 (165.227.249.142) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 128 Checksum: 0xc59f (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x617E3D3DBF0469BF Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 120 Security Association payload Next payload: Vendor ID (13) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 40 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 32 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (3600) Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 0000 00 0f 3d 10 fc 2c 00 0c 29 00 82 53 08 00 45 00 ..=..,..)..S..E. 0010 00 94 00 82 00 00 80 11 fb 0d a5 e3 f9 73 a5 e3 .............s.. 0020 f9 8e 01 f4 01 f4 00 80 c5 9f 61 7e 3d 3d bf 04 ..........a~==.. 0030 69 bf 00 00 00 00 00 00 00 00 01 10 02 00 00 00 i............... 0040 00 00 00 00 00 78 0d 00 00 34 00 00 00 01 00 00 .....x...4...... 0050 00 01 00 00 00 28 01 01 00 01 00 00 00 20 01 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 04 00 02 80 03 ................ 0070 00 01 80 0b 00 01 80 0c 0e 10 0d 00 00 14 44 85 ..............D. 0080 15 2d 18 b6 bb cd 0b e8 a8 46 95 79 dd cc 00 00 .-.......F.y.... 0090 00 14 90 cb 80 91 3e bb 69 6e 08 63 81 b5 ec 42 ......>.in.c...B 00a0 7b 1f cd 8c fd d4 {..... Frame 2 (266 bytes on wire, 266 bytes captured) Arrival Time: Sep 8, 2004 10:56:57.019614000 Time delta from previous packet: 0.005853000 seconds Time since reference or first frame: 0.005853000 seconds Frame Number: 2 Packet Length: 266 bytes Capture Length: 266 bytes Ethernet II, Src: 00:0f:3d:10:fc:2c, Dst: 00:0c:29:00:82:53 Destination: 00:0c:29:00:82:53 (00:0c:29:00:82:53) Source: 00:0f:3d:10:fc:2c (00:0f:3d:10:fc:2c) Type: IP (0x0800) Frame check sequence: 0xf438f6d5 (correct) Internet Protocol, Src Addr: 165.227.249.142 (165.227.249.142), Dst Addr: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 248 Identification: 0xa96b (43371) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: UDP (0x11) Header checksum: 0xd2bf (correct) Source: 165.227.249.142 (165.227.249.142) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 228 Checksum: 0x4620 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x617E3D3DBF0469BF Responder cookie: 0x2304496F8706CA2A Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 220 Security Association payload Next payload: Vendor ID (13) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 40 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 32 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (3600) Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-dpd-00.txt Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-stenberg-ipsec-nat-traversal-01 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-stenberg-ipsec-nat-traversal-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-03 0000 00 0c 29 00 82 53 00 0f 3d 10 fc 2c 08 00 45 00 ..)..S..=..,..E. 0010 00 f8 a9 6b 00 00 ff 11 d2 bf a5 e3 f9 8e a5 e3 ...k............ 0020 f9 73 01 f4 01 f4 00 e4 46 20 61 7e 3d 3d bf 04 .s......F a~==.. 0030 69 bf 23 04 49 6f 87 06 ca 2a 01 10 02 00 00 00 i.#.Io...*...... 0040 00 00 00 00 00 dc 0d 00 00 34 00 00 00 01 00 00 .........4...... 0050 00 01 00 00 00 28 01 01 00 01 00 00 00 20 01 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 04 00 02 80 03 ................ 0070 00 01 80 0b 00 01 80 0c 0e 10 0d 00 00 14 af ca ................ 0080 d7 13 68 a1 f1 c9 6b 86 96 fc 77 57 01 00 0d 00 ..h...k...wW.... 0090 00 14 27 ba b5 dc 01 ea 07 60 ea 4e 31 90 ac 27 ..'......`.N1..' 00a0 c0 d0 0d 00 00 14 61 05 c4 22 e7 68 47 e4 3f 96 ......a..".hG.?. 00b0 84 80 12 92 ae cd 0d 00 00 14 44 85 15 2d 18 b6 ..........D..-.. 00c0 bb cd 0b e8 a8 46 95 79 dd cc 0d 00 00 14 cd 60 .....F.y.......` 00d0 46 43 35 df 21 f8 7c fd b2 fc 68 b6 a4 48 0d 00 FC5.!.|...h..H.. 00e0 00 14 90 cb 80 91 3e bb 69 6e 08 63 81 b5 ec 42 ......>.in.c...B 00f0 7b 1f 00 00 00 14 7d 94 19 a6 53 10 ca 6f 2c 17 {.....}...S..o,. 0100 9d 92 15 52 9d 56 f4 38 f6 d5 ...R.V.8.. Frame 3 (266 bytes on wire, 266 bytes captured) Arrival Time: Sep 8, 2004 10:56:57.511128000 Time delta from previous packet: 0.491514000 seconds Time since reference or first frame: 0.497367000 seconds Frame Number: 3 Packet Length: 266 bytes Capture Length: 266 bytes Ethernet II, Src: 00:0f:3d:10:fc:2c, Dst: 00:0c:29:00:82:53 Destination: 00:0c:29:00:82:53 (00:0c:29:00:82:53) Source: 00:0f:3d:10:fc:2c (00:0f:3d:10:fc:2c) Type: IP (0x0800) Frame check sequence: 0x7f36a00c (correct) Internet Protocol, Src Addr: 165.227.249.142 (165.227.249.142), Dst Addr: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 248 Identification: 0xb66b (46699) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: UDP (0x11) Header checksum: 0xc5bf (correct) Source: 165.227.249.142 (165.227.249.142) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 228 Checksum: 0x4620 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x617E3D3DBF0469BF Responder cookie: 0x2304496F8706CA2A Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 220 Security Association payload Next payload: Vendor ID (13) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 40 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 32 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (3600) Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-dpd-00.txt Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-stenberg-ipsec-nat-traversal-01 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-stenberg-ipsec-nat-traversal-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-03 0000 00 0c 29 00 82 53 00 0f 3d 10 fc 2c 08 00 45 00 ..)..S..=..,..E. 0010 00 f8 b6 6b 00 00 ff 11 c5 bf a5 e3 f9 8e a5 e3 ...k............ 0020 f9 73 01 f4 01 f4 00 e4 46 20 61 7e 3d 3d bf 04 .s......F a~==.. 0030 69 bf 23 04 49 6f 87 06 ca 2a 01 10 02 00 00 00 i.#.Io...*...... 0040 00 00 00 00 00 dc 0d 00 00 34 00 00 00 01 00 00 .........4...... 0050 00 01 00 00 00 28 01 01 00 01 00 00 00 20 01 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 04 00 02 80 03 ................ 0070 00 01 80 0b 00 01 80 0c 0e 10 0d 00 00 14 af ca ................ 0080 d7 13 68 a1 f1 c9 6b 86 96 fc 77 57 01 00 0d 00 ..h...k...wW.... 0090 00 14 27 ba b5 dc 01 ea 07 60 ea 4e 31 90 ac 27 ..'......`.N1..' 00a0 c0 d0 0d 00 00 14 61 05 c4 22 e7 68 47 e4 3f 96 ......a..".hG.?. 00b0 84 80 12 92 ae cd 0d 00 00 14 44 85 15 2d 18 b6 ..........D..-.. 00c0 bb cd 0b e8 a8 46 95 79 dd cc 0d 00 00 14 cd 60 .....F.y.......` 00d0 46 43 35 df 21 f8 7c fd b2 fc 68 b6 a4 48 0d 00 FC5.!.|...h..H.. 00e0 00 14 90 cb 80 91 3e bb 69 6e 08 63 81 b5 ec 42 ......>.in.c...B 00f0 7b 1f 00 00 00 14 7d 94 19 a6 53 10 ca 6f 2c 17 {.....}...S..o,. 0100 9d 92 15 52 9d 56 7f 36 a0 0c ...R.V.6.. Frame 4 (266 bytes on wire, 266 bytes captured) Arrival Time: Sep 8, 2004 10:56:58.510939000 Time delta from previous packet: 0.999811000 seconds Time since reference or first frame: 1.497178000 seconds Frame Number: 4 Packet Length: 266 bytes Capture Length: 266 bytes Ethernet II, Src: 00:0f:3d:10:fc:2c, Dst: 00:0c:29:00:82:53 Destination: 00:0c:29:00:82:53 (00:0c:29:00:82:53) Source: 00:0f:3d:10:fc:2c (00:0f:3d:10:fc:2c) Type: IP (0x0800) Frame check sequence: 0x59610782 (correct) Internet Protocol, Src Addr: 165.227.249.142 (165.227.249.142), Dst Addr: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 248 Identification: 0x386b (14443) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: UDP (0x11) Header checksum: 0x43c0 (correct) Source: 165.227.249.142 (165.227.249.142) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 228 Checksum: 0x4620 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x617E3D3DBF0469BF Responder cookie: 0x2304496F8706CA2A Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 220 Security Association payload Next payload: Vendor ID (13) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 40 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 32 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (3600) Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-dpd-00.txt Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-stenberg-ipsec-nat-traversal-01 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-stenberg-ipsec-nat-traversal-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-03 0000 00 0c 29 00 82 53 00 0f 3d 10 fc 2c 08 00 45 00 ..)..S..=..,..E. 0010 00 f8 38 6b 00 00 ff 11 43 c0 a5 e3 f9 8e a5 e3 ..8k....C....... 0020 f9 73 01 f4 01 f4 00 e4 46 20 61 7e 3d 3d bf 04 .s......F a~==.. 0030 69 bf 23 04 49 6f 87 06 ca 2a 01 10 02 00 00 00 i.#.Io...*...... 0040 00 00 00 00 00 dc 0d 00 00 34 00 00 00 01 00 00 .........4...... 0050 00 01 00 00 00 28 01 01 00 01 00 00 00 20 01 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 04 00 02 80 03 ................ 0070 00 01 80 0b 00 01 80 0c 0e 10 0d 00 00 14 af ca ................ 0080 d7 13 68 a1 f1 c9 6b 86 96 fc 77 57 01 00 0d 00 ..h...k...wW.... 0090 00 14 27 ba b5 dc 01 ea 07 60 ea 4e 31 90 ac 27 ..'......`.N1..' 00a0 c0 d0 0d 00 00 14 61 05 c4 22 e7 68 47 e4 3f 96 ......a..".hG.?. 00b0 84 80 12 92 ae cd 0d 00 00 14 44 85 15 2d 18 b6 ..........D..-.. 00c0 bb cd 0b e8 a8 46 95 79 dd cc 0d 00 00 14 cd 60 .....F.y.......` 00d0 46 43 35 df 21 f8 7c fd b2 fc 68 b6 a4 48 0d 00 FC5.!.|...h..H.. 00e0 00 14 90 cb 80 91 3e bb 69 6e 08 63 81 b5 ec 42 ......>.in.c...B 00f0 7b 1f 00 00 00 14 7d 94 19 a6 53 10 ca 6f 2c 17 {.....}...S..o,. 0100 9d 92 15 52 9d 56 59 61 07 82 ...R.VYa.. Frame 5 (350 bytes on wire, 350 bytes captured) Arrival Time: Sep 8, 2004 10:56:59.073395000 Time delta from previous packet: 0.562456000 seconds Time since reference or first frame: 2.059634000 seconds Frame Number: 5 Packet Length: 350 bytes Capture Length: 350 bytes Ethernet II, Src: 00:0c:29:00:82:53, Dst: 00:0f:3d:10:fc:2c Destination: 00:0f:3d:10:fc:2c (00:0f:3d:10:fc:2c) Source: 00:0c:29:00:82:53 (00:0c:29:00:82:53) Type: IP (0x0800) Frame check sequence: 0x9ffa7d99 (correct) Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.142 (165.227.249.142) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 332 Identification: 0x0083 (131) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xfa54 (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.142 (165.227.249.142) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 312 Checksum: 0x36c1 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x617E3D3DBF0469BF Responder cookie: 0x2304496F8706CA2A Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 304 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: Private USE (130) Length: 24 Nonce Data Unknown payload type payload Next payload: Private USE (130) Length: 24 Payload Unknown payload type payload Next payload: Vendor ID (13) Length: 24 Payload Vendor ID payload Next payload: Vendor ID (13) Length: 48 Vendor ID: unknown vendor ID: 0x47BBE7C993F1FC13B4E6D0DB565C68E5... Vendor ID payload Next payload: Vendor ID (13) Length: 12 Vendor ID: unknown vendor ID: 0xDA8E937880010000 Vendor ID payload Next payload: NONE (0) Length: 12 Vendor ID: draft-beaulieu-ike-xauth-02.txt 0000 00 0f 3d 10 fc 2c 00 0c 29 00 82 53 08 00 45 00 ..=..,..)..S..E. 0010 01 4c 00 83 00 00 80 11 fa 54 a5 e3 f9 73 a5 e3 .L.......T...s.. 0020 f9 8e 01 f4 01 f4 01 38 36 c1 61 7e 3d 3d bf 04 .......86.a~==.. 0030 69 bf 23 04 49 6f 87 06 ca 2a 04 10 02 00 00 00 i.#.Io...*...... 0040 00 00 00 00 01 30 0a 00 00 84 c2 9f 59 e0 8c 8e .....0......Y... 0050 cf af 52 a0 24 77 f3 44 f5 7e 69 05 2f 92 8b 49 ..R.$w.D.~i./..I 0060 b6 b2 c2 c6 00 12 51 e7 41 b5 21 f9 58 58 e6 9f ......Q.A.!.XX.. 0070 21 4b cf 1e 90 ff 69 ce d8 26 79 a5 fb 37 88 ce !K....i..&y..7.. 0080 ab 7b e8 7c 70 db f0 99 34 88 2c 04 66 7b 10 09 .{.|p...4.,.f{.. 0090 c4 7c 9c 7a 4b 85 b2 d4 63 79 ec e2 4f d7 84 1d .|.zK...cy..O... 00a0 c0 9e 8e 53 d8 48 5b eb 59 51 9d 5f fb f5 70 3d ...S.H[.YQ._..p= 00b0 ba dc cb 43 ff dd 16 b2 e8 83 af a8 5a 4e e3 79 ...C........ZN.y 00c0 f9 da 78 8e 69 dd 14 97 fa 9f 82 00 00 18 ae 5c ..x.i..........\ 00d0 0e 81 f1 d8 45 31 72 12 f0 93 e2 f2 48 5f 4a 8c ....E1r.....H_J. 00e0 1f 4b 82 00 00 18 fa f5 8c 86 1a 0a c9 a2 c7 b3 .K.............. 00f0 98 fc 63 b1 62 47 17 0c 7c 52 0d 00 00 18 8b df ..c.bG..|R...... 0100 86 c4 a7 47 6d d9 99 08 39 8b 4c 72 0d aa 3e 74 ...Gm...9.Lr..>t 0110 a1 a6 0d 00 00 30 47 bb e7 c9 93 f1 fc 13 b4 e6 .....0G......... 0120 d0 db 56 5c 68 e5 01 02 01 01 02 01 01 03 11 31 ..V\h..........1 0130 30 2e 31 2e 31 20 28 42 75 69 6c 64 20 31 30 29 0.1.1 (Build 10) 0140 00 00 0d 00 00 0c da 8e 93 78 80 01 00 00 00 00 .........x...... 0150 00 0c 09 00 26 89 df d6 b7 12 9f fa 7d 99 ....&.......}. Frame 6 (350 bytes on wire, 350 bytes captured) Arrival Time: Sep 8, 2004 10:56:59.078849000 Time delta from previous packet: 0.005454000 seconds Time since reference or first frame: 2.065088000 seconds Frame Number: 6 Packet Length: 350 bytes Capture Length: 350 bytes Ethernet II, Src: 00:0c:29:00:82:53, Dst: 00:0f:3d:10:fc:2c Destination: 00:0f:3d:10:fc:2c (00:0f:3d:10:fc:2c) Source: 00:0c:29:00:82:53 (00:0c:29:00:82:53) Type: IP (0x0800) Frame check sequence: 0x5fdec562 (correct) Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.142 (165.227.249.142) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 332 Identification: 0x0085 (133) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xfa52 (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.142 (165.227.249.142) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 312 Checksum: 0x36c1 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x617E3D3DBF0469BF Responder cookie: 0x2304496F8706CA2A Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 304 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: Private USE (130) Length: 24 Nonce Data Unknown payload type payload Next payload: Private USE (130) Length: 24 Payload Unknown payload type payload Next payload: Vendor ID (13) Length: 24 Payload Vendor ID payload Next payload: Vendor ID (13) Length: 48 Vendor ID: unknown vendor ID: 0x47BBE7C993F1FC13B4E6D0DB565C68E5... Vendor ID payload Next payload: Vendor ID (13) Length: 12 Vendor ID: unknown vendor ID: 0xDA8E937880010000 Vendor ID payload Next payload: NONE (0) Length: 12 Vendor ID: draft-beaulieu-ike-xauth-02.txt 0000 00 0f 3d 10 fc 2c 00 0c 29 00 82 53 08 00 45 00 ..=..,..)..S..E. 0010 01 4c 00 85 00 00 80 11 fa 52 a5 e3 f9 73 a5 e3 .L.......R...s.. 0020 f9 8e 01 f4 01 f4 01 38 36 c1 61 7e 3d 3d bf 04 .......86.a~==.. 0030 69 bf 23 04 49 6f 87 06 ca 2a 04 10 02 00 00 00 i.#.Io...*...... 0040 00 00 00 00 01 30 0a 00 00 84 c2 9f 59 e0 8c 8e .....0......Y... 0050 cf af 52 a0 24 77 f3 44 f5 7e 69 05 2f 92 8b 49 ..R.$w.D.~i./..I 0060 b6 b2 c2 c6 00 12 51 e7 41 b5 21 f9 58 58 e6 9f ......Q.A.!.XX.. 0070 21 4b cf 1e 90 ff 69 ce d8 26 79 a5 fb 37 88 ce !K....i..&y..7.. 0080 ab 7b e8 7c 70 db f0 99 34 88 2c 04 66 7b 10 09 .{.|p...4.,.f{.. 0090 c4 7c 9c 7a 4b 85 b2 d4 63 79 ec e2 4f d7 84 1d .|.zK...cy..O... 00a0 c0 9e 8e 53 d8 48 5b eb 59 51 9d 5f fb f5 70 3d ...S.H[.YQ._..p= 00b0 ba dc cb 43 ff dd 16 b2 e8 83 af a8 5a 4e e3 79 ...C........ZN.y 00c0 f9 da 78 8e 69 dd 14 97 fa 9f 82 00 00 18 ae 5c ..x.i..........\ 00d0 0e 81 f1 d8 45 31 72 12 f0 93 e2 f2 48 5f 4a 8c ....E1r.....H_J. 00e0 1f 4b 82 00 00 18 fa f5 8c 86 1a 0a c9 a2 c7 b3 .K.............. 00f0 98 fc 63 b1 62 47 17 0c 7c 52 0d 00 00 18 8b df ..c.bG..|R...... 0100 86 c4 a7 47 6d d9 99 08 39 8b 4c 72 0d aa 3e 74 ...Gm...9.Lr..>t 0110 a1 a6 0d 00 00 30 47 bb e7 c9 93 f1 fc 13 b4 e6 .....0G......... 0120 d0 db 56 5c 68 e5 01 02 01 01 02 01 01 03 11 31 ..V\h..........1 0130 30 2e 31 2e 31 20 28 42 75 69 6c 64 20 31 30 29 0.1.1 (Build 10) 0140 00 00 0d 00 00 0c da 8e 93 78 80 01 00 00 00 00 .........x...... 0150 00 0c 09 00 26 89 df d6 b7 12 5f de c5 62 ....&....._..b Frame 7 (350 bytes on wire, 350 bytes captured) Arrival Time: Sep 8, 2004 10:56:59.079680000 Time delta from previous packet: 0.000831000 seconds Time since reference or first frame: 2.065919000 seconds Frame Number: 7 Packet Length: 350 bytes Capture Length: 350 bytes Ethernet II, Src: 00:0c:29:00:82:53, Dst: 00:0f:3d:10:fc:2c Destination: 00:0f:3d:10:fc:2c (00:0f:3d:10:fc:2c) Source: 00:0c:29:00:82:53 (00:0c:29:00:82:53) Type: IP (0x0800) Frame check sequence: 0x3fcc191f (correct) Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.142 (165.227.249.142) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 332 Identification: 0x0086 (134) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xfa51 (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.142 (165.227.249.142) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 312 Checksum: 0x36c1 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x617E3D3DBF0469BF Responder cookie: 0x2304496F8706CA2A Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 304 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: Private USE (130) Length: 24 Nonce Data Unknown payload type payload Next payload: Private USE (130) Length: 24 Payload Unknown payload type payload Next payload: Vendor ID (13) Length: 24 Payload Vendor ID payload Next payload: Vendor ID (13) Length: 48 Vendor ID: unknown vendor ID: 0x47BBE7C993F1FC13B4E6D0DB565C68E5... Vendor ID payload Next payload: Vendor ID (13) Length: 12 Vendor ID: unknown vendor ID: 0xDA8E937880010000 Vendor ID payload Next payload: NONE (0) Length: 12 Vendor ID: draft-beaulieu-ike-xauth-02.txt 0000 00 0f 3d 10 fc 2c 00 0c 29 00 82 53 08 00 45 00 ..=..,..)..S..E. 0010 01 4c 00 86 00 00 80 11 fa 51 a5 e3 f9 73 a5 e3 .L.......Q...s.. 0020 f9 8e 01 f4 01 f4 01 38 36 c1 61 7e 3d 3d bf 04 .......86.a~==.. 0030 69 bf 23 04 49 6f 87 06 ca 2a 04 10 02 00 00 00 i.#.Io...*...... 0040 00 00 00 00 01 30 0a 00 00 84 c2 9f 59 e0 8c 8e .....0......Y... 0050 cf af 52 a0 24 77 f3 44 f5 7e 69 05 2f 92 8b 49 ..R.$w.D.~i./..I 0060 b6 b2 c2 c6 00 12 51 e7 41 b5 21 f9 58 58 e6 9f ......Q.A.!.XX.. 0070 21 4b cf 1e 90 ff 69 ce d8 26 79 a5 fb 37 88 ce !K....i..&y..7.. 0080 ab 7b e8 7c 70 db f0 99 34 88 2c 04 66 7b 10 09 .{.|p...4.,.f{.. 0090 c4 7c 9c 7a 4b 85 b2 d4 63 79 ec e2 4f d7 84 1d .|.zK...cy..O... 00a0 c0 9e 8e 53 d8 48 5b eb 59 51 9d 5f fb f5 70 3d ...S.H[.YQ._..p= 00b0 ba dc cb 43 ff dd 16 b2 e8 83 af a8 5a 4e e3 79 ...C........ZN.y 00c0 f9 da 78 8e 69 dd 14 97 fa 9f 82 00 00 18 ae 5c ..x.i..........\ 00d0 0e 81 f1 d8 45 31 72 12 f0 93 e2 f2 48 5f 4a 8c ....E1r.....H_J. 00e0 1f 4b 82 00 00 18 fa f5 8c 86 1a 0a c9 a2 c7 b3 .K.............. 00f0 98 fc 63 b1 62 47 17 0c 7c 52 0d 00 00 18 8b df ..c.bG..|R...... 0100 86 c4 a7 47 6d d9 99 08 39 8b 4c 72 0d aa 3e 74 ...Gm...9.Lr..>t 0110 a1 a6 0d 00 00 30 47 bb e7 c9 93 f1 fc 13 b4 e6 .....0G......... 0120 d0 db 56 5c 68 e5 01 02 01 01 02 01 01 03 11 31 ..V\h..........1 0130 30 2e 31 2e 31 20 28 42 75 69 6c 64 20 31 30 29 0.1.1 (Build 10) 0140 00 00 0d 00 00 0c da 8e 93 78 80 01 00 00 00 00 .........x...... 0150 00 0c 09 00 26 89 df d6 b7 12 3f cc 19 1f ....&.....?... Frame 8 (346 bytes on wire, 346 bytes captured) Arrival Time: Sep 8, 2004 10:56:59.370340000 Time delta from previous packet: 0.290660000 seconds Time since reference or first frame: 2.356579000 seconds Frame Number: 8 Packet Length: 346 bytes Capture Length: 346 bytes Ethernet II, Src: 00:0f:3d:10:fc:2c, Dst: 00:0c:29:00:82:53 Destination: 00:0c:29:00:82:53 (00:0c:29:00:82:53) Source: 00:0f:3d:10:fc:2c (00:0f:3d:10:fc:2c) Type: IP (0x0800) Frame check sequence: 0x3c65c006 (correct) Internet Protocol, Src Addr: 165.227.249.142 (165.227.249.142), Dst Addr: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 328 Identification: 0x366b (13931) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: UDP (0x11) Header checksum: 0x4570 (correct) Source: 165.227.249.142 (165.227.249.142) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 308 Checksum: 0x012f (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x617E3D3DBF0469BF Responder cookie: 0x2304496F8706CA2A Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 300 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: Private USE (130) Length: 20 Nonce Data Unknown payload type payload Next payload: Private USE (130) Length: 24 Payload Unknown payload type payload Next payload: Private USE (130) Length: 24 Payload Unknown payload type payload Next payload: Private USE (130) Length: 24 Payload Unknown payload type payload Next payload: Private USE (130) Length: 24 Payload Unknown payload type payload Next payload: NONE (0) Length: 24 Payload 0000 00 0c 29 00 82 53 00 0f 3d 10 fc 2c 08 00 45 00 ..)..S..=..,..E. 0010 01 48 36 6b 00 00 ff 11 45 70 a5 e3 f9 8e a5 e3 .H6k....Ep...... 0020 f9 73 01 f4 01 f4 01 34 01 2f 61 7e 3d 3d bf 04 .s.....4./a~==.. 0030 69 bf 23 04 49 6f 87 06 ca 2a 04 10 02 00 00 00 i.#.Io...*...... 0040 00 00 00 00 01 2c 0a 00 00 84 72 bc f1 b2 61 d7 .....,....r...a. 0050 a4 d0 a1 e2 e4 8c d1 f6 6d ca 12 f2 c4 38 d2 13 ........m....8.. 0060 4d df ee 1e 7a 3f 3b a8 d8 b0 ba 92 6b 20 e9 61 M...z?;.....k .a 0070 6b 14 70 db 0e 26 f9 6e ea 54 95 0f c2 df b7 99 k.p..&.n.T...... 0080 a0 20 af df 08 e6 f0 5c fa 82 06 84 8a 50 df a4 . .....\.....P.. 0090 d9 d0 bb 6b 5b 02 d2 ba 52 43 bf be 42 6f 4c e0 ...k[...RC..BoL. 00a0 a6 93 d2 ca 2d 0a 3e 56 bd 3c 2c c3 e7 81 97 04 ....-.>V.<,..... 00b0 6d 61 b5 52 8b b0 8b 3e 93 60 56 10 04 25 c9 5a ma.R...>.`V..%.Z 00c0 81 01 db ef b3 e7 bb e7 1a 76 82 00 00 14 36 68 .........v....6h 00d0 7a 94 ee 27 b2 f3 ec aa 9f 1a 08 34 66 0e 82 00 z..'.......4f... 00e0 00 18 8b df 86 c4 a7 47 6d d9 99 08 39 8b 4c 72 .......Gm...9.Lr 00f0 0d aa 3e 74 a1 a6 82 00 00 18 74 65 7b c8 64 dd ..>t......te{.d. 0100 d3 d0 da 4b e1 40 d3 54 c5 18 d8 b7 f3 2c 82 00 ...K.@.T.....,.. 0110 00 18 28 c9 f7 75 fd dc c1 46 d6 43 bd b9 40 5b ..(..u...F.C..@[ 0120 1d a0 9d b5 22 98 82 00 00 18 fa f5 8c 86 1a 0a ...."........... 0130 c9 a2 c7 b3 98 fc 63 b1 62 47 17 0c 7c 52 00 00 ......c.bG..|R.. 0140 00 18 74 65 7b c8 64 dd d3 d0 da 4b e1 40 d3 54 ..te{.d....K.@.T 0150 c5 18 d8 b7 f3 2c 3c 65 c0 06 .....,V.<,..... 00b0 6d 61 b5 52 8b b0 8b 3e 93 60 56 10 04 25 c9 5a ma.R...>.`V..%.Z 00c0 81 01 db ef b3 e7 bb e7 1a 76 82 00 00 14 36 68 .........v....6h 00d0 7a 94 ee 27 b2 f3 ec aa 9f 1a 08 34 66 0e 82 00 z..'.......4f... 00e0 00 18 8b df 86 c4 a7 47 6d d9 99 08 39 8b 4c 72 .......Gm...9.Lr 00f0 0d aa 3e 74 a1 a6 82 00 00 18 74 65 7b c8 64 dd ..>t......te{.d. 0100 d3 d0 da 4b e1 40 d3 54 c5 18 d8 b7 f3 2c 82 00 ...K.@.T.....,.. 0110 00 18 28 c9 f7 75 fd dc c1 46 d6 43 bd b9 40 5b ..(..u...F.C..@[ 0120 1d a0 9d b5 22 98 82 00 00 18 fa f5 8c 86 1a 0a ...."........... 0130 c9 a2 c7 b3 98 fc 63 b1 62 47 17 0c 7c 52 00 00 ......c.bG..|R.. 0140 00 18 74 65 7b c8 64 dd d3 d0 da 4b e1 40 d3 54 ..te{.d....K.@.T 0150 c5 18 d8 b7 f3 2c 49 2a 5b eb .....,I*[. Frame 10 (138 bytes on wire, 138 bytes captured) Arrival Time: Sep 8, 2004 10:57:00.736162000 Time delta from previous packet: 0.875355000 seconds Time since reference or first frame: 3.722401000 seconds Frame Number: 10 Packet Length: 138 bytes Capture Length: 138 bytes Ethernet II, Src: 00:0c:29:00:82:53, Dst: 00:0f:3d:10:fc:2c Destination: 00:0f:3d:10:fc:2c (00:0f:3d:10:fc:2c) Source: 00:0c:29:00:82:53 (00:0c:29:00:82:53) Type: IP (0x0800) Frame check sequence: 0xc7ed39f0 (correct) Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.142 (165.227.249.142) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0087 (135) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xfb24 (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.142 (165.227.249.142) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 100 Checksum: 0x0f0c (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x617E3D3DBF0469BF Responder cookie: 0x2304496F8706CA2A Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 92 Encrypted payload (64 bytes) 0000 00 0f 3d 10 fc 2c 00 0c 29 00 82 53 08 00 45 00 ..=..,..)..S..E. 0010 00 78 00 87 00 00 80 11 fb 24 a5 e3 f9 73 a5 e3 .x.......$...s.. 0020 f9 8e 01 f4 01 f4 00 64 0f 0c 61 7e 3d 3d bf 04 .......d..a~==.. 0030 69 bf 23 04 49 6f 87 06 ca 2a 05 10 02 01 00 00 i.#.Io...*...... 0040 00 00 00 00 00 5c 3b 98 83 71 e6 a7 c9 3f 2e 8b .....\;..q...?.. 0050 7d 15 0c 6c c2 80 a2 08 1d 3f 22 3b 3c 8e b8 2c }..l.....?";<.., 0060 db 15 db fa 78 d7 d0 7f 84 8b ce e2 00 9c b9 b7 ....x........... 0070 d9 45 b2 26 df c3 c6 16 03 d5 d7 40 53 70 29 b1 .E.&.......@Sp). 0080 a5 e8 f8 88 2b 00 c7 ed 39 f0 ....+...9. Frame 11 (138 bytes on wire, 138 bytes captured) Arrival Time: Sep 8, 2004 10:57:00.737196000 Time delta from previous packet: 0.001034000 seconds Time since reference or first frame: 3.723435000 seconds Frame Number: 11 Packet Length: 138 bytes Capture Length: 138 bytes Ethernet II, Src: 00:0c:29:00:82:53, Dst: 00:0f:3d:10:fc:2c Destination: 00:0f:3d:10:fc:2c (00:0f:3d:10:fc:2c) Source: 00:0c:29:00:82:53 (00:0c:29:00:82:53) Type: IP (0x0800) Frame check sequence: 0x3344e5a0 (correct) Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.142 (165.227.249.142) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0088 (136) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xfb23 (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.142 (165.227.249.142) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 100 Checksum: 0x0f0c (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x617E3D3DBF0469BF Responder cookie: 0x2304496F8706CA2A Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 92 Encrypted payload (64 bytes) 0000 00 0f 3d 10 fc 2c 00 0c 29 00 82 53 08 00 45 00 ..=..,..)..S..E. 0010 00 78 00 88 00 00 80 11 fb 23 a5 e3 f9 73 a5 e3 .x.......#...s.. 0020 f9 8e 01 f4 01 f4 00 64 0f 0c 61 7e 3d 3d bf 04 .......d..a~==.. 0030 69 bf 23 04 49 6f 87 06 ca 2a 05 10 02 01 00 00 i.#.Io...*...... 0040 00 00 00 00 00 5c 3b 98 83 71 e6 a7 c9 3f 2e 8b .....\;..q...?.. 0050 7d 15 0c 6c c2 80 a2 08 1d 3f 22 3b 3c 8e b8 2c }..l.....?";<.., 0060 db 15 db fa 78 d7 d0 7f 84 8b ce e2 00 9c b9 b7 ....x........... 0070 d9 45 b2 26 df c3 c6 16 03 d5 d7 40 53 70 29 b1 .E.&.......@Sp). 0080 a5 e8 f8 88 2b 00 33 44 e5 a0 ....+.3D.. Frame 12 (114 bytes on wire, 114 bytes captured) Arrival Time: Sep 8, 2004 10:57:00.742262000 Time delta from previous packet: 0.005066000 seconds Time since reference or first frame: 3.728501000 seconds Frame Number: 12 Packet Length: 114 bytes Capture Length: 114 bytes Ethernet II, Src: 00:0f:3d:10:fc:2c, Dst: 00:0c:29:00:82:53 Destination: 00:0c:29:00:82:53 (00:0c:29:00:82:53) Source: 00:0f:3d:10:fc:2c (00:0f:3d:10:fc:2c) Type: IP (0x0800) Frame check sequence: 0xedfd706e (correct) Internet Protocol, Src Addr: 165.227.249.142 (165.227.249.142), Dst Addr: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0x176a (5994) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: UDP (0x11) Header checksum: 0x6559 (correct) Source: 165.227.249.142 (165.227.249.142) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 76 Checksum: 0xcaae (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x617E3D3DBF0469BF Responder cookie: 0x2304496F8706CA2A Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 68 Encrypted payload (40 bytes) 0000 00 0c 29 00 82 53 00 0f 3d 10 fc 2c 08 00 45 00 ..)..S..=..,..E. 0010 00 60 17 6a 00 00 ff 11 65 59 a5 e3 f9 8e a5 e3 .`.j....eY...... 0020 f9 73 01 f4 01 f4 00 4c ca ae 61 7e 3d 3d bf 04 .s.....L..a~==.. 0030 69 bf 23 04 49 6f 87 06 ca 2a 05 10 02 01 00 00 i.#.Io...*...... 0040 00 00 00 00 00 44 10 54 7b 22 a9 94 ab bb b6 30 .....D.T{".....0 0050 b9 e4 59 9a 85 50 da a2 35 ba ba 07 88 37 b6 a7 ..Y..P..5....7.. 0060 41 7d 56 f8 9c 16 b5 c3 50 58 e9 b1 08 17 ed fd A}V.....PX...... 0070 70 6e pn Frame 13 (338 bytes on wire, 338 bytes captured) Arrival Time: Sep 8, 2004 10:57:02.851535000 Time delta from previous packet: 2.109273000 seconds Time since reference or first frame: 5.837774000 seconds Frame Number: 13 Packet Length: 338 bytes Capture Length: 338 bytes Ethernet II, Src: 00:0c:29:00:82:53, Dst: 00:0f:3d:10:fc:2c Destination: 00:0f:3d:10:fc:2c (00:0f:3d:10:fc:2c) Source: 00:0c:29:00:82:53 (00:0c:29:00:82:53) Type: IP (0x0800) Frame check sequence: 0x0862c67d (correct) Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.142 (165.227.249.142) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 320 Identification: 0x008a (138) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xfa59 (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.142 (165.227.249.142) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 300 Checksum: 0x437e (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x617E3D3DBF0469BF Responder cookie: 0x2304496F8706CA2A Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x6E597F3D Length: 292 Encrypted payload (264 bytes) 0000 00 0f 3d 10 fc 2c 00 0c 29 00 82 53 08 00 45 00 ..=..,..)..S..E. 0010 01 40 00 8a 00 00 80 11 fa 59 a5 e3 f9 73 a5 e3 .@.......Y...s.. 0020 f9 8e 01 f4 01 f4 01 2c 43 7e 61 7e 3d 3d bf 04 .......,C~a~==.. 0030 69 bf 23 04 49 6f 87 06 ca 2a 08 10 20 01 6e 59 i.#.Io...*.. .nY 0040 7f 3d 00 00 01 24 b8 2b 4b 5a b1 90 25 b8 c5 86 .=...$.+KZ..%... 0050 d5 47 a2 c2 1a c5 38 93 09 c1 29 ad b1 99 79 21 .G....8...)...y! 0060 9b e1 f1 ec 75 09 b4 4a 0c f6 ca 09 25 68 92 a1 ....u..J....%h.. 0070 8a 51 ea fb 07 a2 d5 18 02 b0 2d 0c e9 57 f7 49 .Q........-..W.I 0080 37 f7 98 68 85 8c 6f 9f 35 00 26 e3 ad 54 fc f0 7..h..o.5.&..T.. 0090 73 41 eb 5d bb 35 f0 6a 8c 65 48 e2 b5 57 03 be sA.].5.j.eH..W.. 00a0 f6 8e 10 37 5d 27 e7 46 99 a5 61 a9 37 90 9b 3d ...7]'.F..a.7..= 00b0 06 75 e7 83 c8 79 ab bb 38 08 07 f7 fe 87 93 da .u...y..8....... 00c0 30 c7 fb 9f b8 ff 9e 6e 47 a6 5c 29 7d 41 36 27 0......nG.\)}A6' 00d0 df 97 87 76 67 b2 af d9 b3 4b 95 50 06 97 00 13 ...vg....K.P.... 00e0 6b bc 2f 07 57 1d 00 2a 88 16 44 e5 87 25 e9 38 k./.W..*..D..%.8 00f0 2f b5 94 d3 64 5d 9a e2 50 50 b9 36 78 4c f7 ff /...d]..PP.6xL.. 0100 ca f7 86 fd 93 47 67 b4 8f b8 a2 f7 26 e0 f7 a4 .....Gg.....&... 0110 bb f6 96 ad fd f6 88 03 86 7d e9 8d 7f f6 5b 2d .........}....[- 0120 4e fc aa b4 2d 64 15 78 16 fa e1 a4 6b ec 09 2b N...-d.x....k..+ 0130 77 cc 24 bd c8 ec 55 6c 30 6a 1d 28 16 04 cd c2 w.$...Ul0j.(.... 0140 c6 b6 4a 50 6a ad 5b b4 ef 4d c6 b1 bb 00 08 62 ..JPj.[..M.....b 0150 c6 7d .} Frame 14 (330 bytes on wire, 330 bytes captured) Arrival Time: Sep 8, 2004 10:57:03.006439000 Time delta from previous packet: 0.154904000 seconds Time since reference or first frame: 5.992678000 seconds Frame Number: 14 Packet Length: 330 bytes Capture Length: 330 bytes Ethernet II, Src: 00:0f:3d:10:fc:2c, Dst: 00:0c:29:00:82:53 Destination: 00:0c:29:00:82:53 (00:0c:29:00:82:53) Source: 00:0f:3d:10:fc:2c (00:0f:3d:10:fc:2c) Type: IP (0x0800) Frame check sequence: 0xd8d92d46 (correct) Internet Protocol, Src Addr: 165.227.249.142 (165.227.249.142), Dst Addr: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 312 Identification: 0x4d69 (19817) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: UDP (0x11) Header checksum: 0x2e82 (correct) Source: 165.227.249.142 (165.227.249.142) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 292 Checksum: 0x53d6 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x617E3D3DBF0469BF Responder cookie: 0x2304496F8706CA2A Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x6E597F3D Length: 284 Encrypted payload (256 bytes) 0000 00 0c 29 00 82 53 00 0f 3d 10 fc 2c 08 00 45 00 ..)..S..=..,..E. 0010 01 38 4d 69 00 00 ff 11 2e 82 a5 e3 f9 8e a5 e3 .8Mi............ 0020 f9 73 01 f4 01 f4 01 24 53 d6 61 7e 3d 3d bf 04 .s.....$S.a~==.. 0030 69 bf 23 04 49 6f 87 06 ca 2a 08 10 20 01 6e 59 i.#.Io...*.. .nY 0040 7f 3d 00 00 01 1c c7 02 25 49 aa d6 9a fd b0 eb .=......%I...... 0050 6d 2d d0 dd 5f bb 46 67 90 65 ed d6 8c eb b0 5e m-.._.Fg.e.....^ 0060 53 ba 1e 14 6c f1 62 af 74 db fe 87 dd 7a 80 96 S...l.b.t....z.. 0070 ca 91 90 ff 83 c6 ca 06 fb ab 92 58 bc 11 e3 f8 ...........X.... 0080 ff 8a 1f a3 52 ba 1f be a4 c2 53 3a cc c0 78 29 ....R.....S:..x) 0090 3d 96 09 c9 05 da 1f 3f fd 5d 52 5e 1c 86 21 9f =......?.]R^..!. 00a0 d5 8d b1 83 8f 99 17 a8 e8 ad 7b 40 88 aa 2a 90 ..........{@..*. 00b0 8e 05 95 dd 9c e7 6b 10 a6 99 d4 c6 bf 14 36 41 ......k.......6A 00c0 8c 7f 78 23 d8 15 ce 68 5e 17 a7 f6 d7 eb 07 f1 ..x#...h^....... 00d0 a9 75 b7 36 6c 4a a4 72 3c 4d 2a d1 62 8f a1 b1 .u.6lJ.r"..q 0130 d5 44 f5 b7 e4 85 e4 da f4 8c f1 dd 3e 82 5f ad .D..........>._. 0140 51 f3 3a 67 48 6e d8 d9 2d 46 Q.:gHn..-F Frame 15 (98 bytes on wire, 98 bytes captured) Arrival Time: Sep 8, 2004 10:57:03.011582000 Time delta from previous packet: 0.005143000 seconds Time since reference or first frame: 5.997821000 seconds Frame Number: 15 Packet Length: 98 bytes Capture Length: 98 bytes Ethernet II, Src: 00:0c:29:00:82:53, Dst: 00:0f:3d:10:fc:2c Destination: 00:0f:3d:10:fc:2c (00:0f:3d:10:fc:2c) Source: 00:0c:29:00:82:53 (00:0c:29:00:82:53) Type: IP (0x0800) Frame check sequence: 0xe0b2525a (correct) Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.142 (165.227.249.142) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 80 Identification: 0x008b (139) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xfb48 (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.142 (165.227.249.142) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 60 Checksum: 0x4e8e (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x617E3D3DBF0469BF Responder cookie: 0x2304496F8706CA2A Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x6E597F3D Length: 52 Encrypted payload (24 bytes) 0000 00 0f 3d 10 fc 2c 00 0c 29 00 82 53 08 00 45 00 ..=..,..)..S..E. 0010 00 50 00 8b 00 00 80 11 fb 48 a5 e3 f9 73 a5 e3 .P.......H...s.. 0020 f9 8e 01 f4 01 f4 00 3c 4e 8e 61 7e 3d 3d bf 04 ........6.KG..t.n..6 0070 60 3f e9 d3 fa 78 59 f3 a8 8f 50 d4 24 a3 92 47 `?...xY...P.$..G 0080 d8 2c ., Frame 17 (130 bytes on wire, 130 bytes captured) Arrival Time: Sep 8, 2004 10:57:07.365044000 Time delta from previous packet: 0.009118000 seconds Time since reference or first frame: 10.351283000 seconds Frame Number: 17 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:0f:3d:10:fc:2c, Dst: 00:0c:29:00:82:53 Destination: 00:0c:29:00:82:53 (00:0c:29:00:82:53) Source: 00:0f:3d:10:fc:2c (00:0f:3d:10:fc:2c) Type: IP (0x0800) Frame check sequence: 0x64d4722e (correct) Internet Protocol, Src Addr: 165.227.249.142 (165.227.249.142), Dst Addr: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0xa368 (41832) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0xe829 (correct) Source: 165.227.249.142 (165.227.249.142) Destination: 165.227.249.115 (165.227.249.115) Encapsulating Security Payload SPI: 0xc696b9ee Sequence: 1 Data (84 bytes) 0000 00 0c 29 00 82 53 00 0f 3d 10 fc 2c 08 00 45 00 ..)..S..=..,..E. 0010 00 70 a3 68 00 00 f0 32 e8 29 a5 e3 f9 8e a5 e3 .p.h...2.)...... 0020 f9 73 c6 96 b9 ee 00 00 00 01 aa 42 31 47 cf ca .s.........B1G.. 0030 af 3f c0 f3 31 02 04 a7 2c 90 2b d1 f6 b7 68 f1 .?..1...,.+...h. 0040 13 8a d6 de 2a e9 e5 c5 70 c0 ec d3 81 b2 f1 bf ....*...p....... 0050 d6 22 3b b4 e1 e0 53 82 84 44 d6 de a6 c4 2c d7 .";...S..D....,. 0060 82 01 10 87 6d 18 17 72 93 6f fd 88 dc 69 57 af ....m..r.o...iW. 0070 35 0b 81 47 44 ce 56 d4 df 95 f6 a2 9b 77 64 d4 5..GD.V......wd. 0080 72 2e r. Frame 18 (130 bytes on wire, 130 bytes captured) Arrival Time: Sep 8, 2004 10:57:08.364475000 Time delta from previous packet: 0.999431000 seconds Time since reference or first frame: 11.350714000 seconds Frame Number: 18 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:0c:29:00:82:53, Dst: 00:0f:3d:10:fc:2c Destination: 00:0f:3d:10:fc:2c (00:0f:3d:10:fc:2c) Source: 00:0c:29:00:82:53 (00:0c:29:00:82:53) Type: IP (0x0800) Frame check sequence: 0x700039e3 (correct) Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.142 (165.227.249.142) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0002 (2) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: ESP (0x32) Header checksum: 0xfb90 (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.142 (165.227.249.142) Encapsulating Security Payload SPI: 0x0fa016f7 Sequence: 2 Data (84 bytes) 0000 00 0f 3d 10 fc 2c 00 0c 29 00 82 53 08 00 45 00 ..=..,..)..S..E. 0010 00 70 00 02 00 00 80 32 fb 90 a5 e3 f9 73 a5 e3 .p.....2.....s.. 0020 f9 8e 0f a0 16 f7 00 00 00 02 74 ac 6e f2 f5 36 ..........t.n..6 0030 60 3f 9f 03 f9 cb ca f4 48 e8 43 a7 3e 2e 5d 5a `?......H.C.>.]Z 0040 6c 12 22 22 50 c8 13 d6 30 3e 74 c7 2b 07 59 04 l.""P...0>t.+.Y. 0050 63 fa 48 37 17 19 0c ed 0b 08 08 70 18 30 f7 f7 c.H7.......p.0.. 0060 62 af 3a 93 6b d6 e5 10 31 75 f6 64 a6 0b 35 d1 b.:.k...1u.d..5. 0070 8b 61 53 5c fb ef 30 08 27 7a 4c 40 a9 c1 70 00 .aS\..0.'zL@..p. 0080 39 e3 9. Frame 19 (130 bytes on wire, 130 bytes captured) Arrival Time: Sep 8, 2004 10:57:08.365507000 Time delta from previous packet: 0.001032000 seconds Time since reference or first frame: 11.351746000 seconds Frame Number: 19 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:0f:3d:10:fc:2c, Dst: 00:0c:29:00:82:53 Destination: 00:0c:29:00:82:53 (00:0c:29:00:82:53) Source: 00:0f:3d:10:fc:2c (00:0f:3d:10:fc:2c) Type: IP (0x0800) Frame check sequence: 0x0a1d176e (correct) Internet Protocol, Src Addr: 165.227.249.142 (165.227.249.142), Dst Addr: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x6c68 (27752) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x1f2a (correct) Source: 165.227.249.142 (165.227.249.142) Destination: 165.227.249.115 (165.227.249.115) Encapsulating Security Payload SPI: 0xc696b9ee Sequence: 2 Data (84 bytes) 0000 00 0c 29 00 82 53 00 0f 3d 10 fc 2c 08 00 45 00 ..)..S..=..,..E. 0010 00 70 6c 68 00 00 f0 32 1f 2a a5 e3 f9 8e a5 e3 .plh...2.*...... 0020 f9 73 c6 96 b9 ee 00 00 00 02 aa 42 31 47 cf ca .s.........B1G.. 0030 af 3f 8c 80 5b 1d 51 c3 03 69 dd 13 90 84 00 7e .?..[.Q..i.....~ 0040 77 6d ce 2c bf af 4b d6 ad 1d 00 18 b1 d6 7b 23 wm.,..K.......{# 0050 3b fb 4e f8 f4 9b c3 b5 ff 81 8b 9c 9d 1f 1d 6f ;.N............o 0060 83 ec 7f f8 fe 0c 93 f8 ce 7f 61 ff 01 08 9c 58 ..........a....X 0070 7b 05 9d 82 04 7f da 64 89 a6 08 9a a8 5d 0a 1d {......d.....].. 0080 17 6e .n