Frame 1 (166 bytes on wire, 166 bytes captured) Arrival Time: Sep 10, 2004 10:40:25.093561000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 166 bytes Capture Length: 166 bytes Ethernet II, Src: 00:0c:29:00:82:53, Dst: 00:0f:3d:1a:7b:ca Destination: 00:0f:3d:1a:7b:ca (00:0f:3d:1a:7b:ca) Source: 00:0c:29:00:82:53 (00:0c:29:00:82:53) Type: IP (0x0800) Frame check sequence: 0x9b899ccf (correct) Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.143 (165.227.249.143) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 148 Identification: 0x0085 (133) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xfb09 (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.143 (165.227.249.143) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 128 Checksum: 0x5c0a (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x9F3CA02A72A27F0A Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 120 Security Association payload Next payload: Vendor ID (13) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 40 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 32 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (3600) Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 0000 00 0f 3d 1a 7b ca 00 0c 29 00 82 53 08 00 45 00 ..=.{...)..S..E. 0010 00 94 00 85 00 00 80 11 fb 09 a5 e3 f9 73 a5 e3 .............s.. 0020 f9 8f 01 f4 01 f4 00 80 5c 0a 9f 3c a0 2a 72 a2 ........\..<.*r. 0030 7f 0a 00 00 00 00 00 00 00 00 01 10 02 00 00 00 ................ 0040 00 00 00 00 00 78 0d 00 00 34 00 00 00 01 00 00 .....x...4...... 0050 00 01 00 00 00 28 01 01 00 01 00 00 00 20 01 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 04 00 02 80 03 ................ 0070 00 01 80 0b 00 01 80 0c 0e 10 0d 00 00 14 44 85 ..............D. 0080 15 2d 18 b6 bb cd 0b e8 a8 46 95 79 dd cc 00 00 .-.......F.y.... 0090 00 14 90 cb 80 91 3e bb 69 6e 08 63 81 b5 ec 42 ......>.in.c...B 00a0 7b 1f 9b 89 9c cf {..... Frame 2 (130 bytes on wire, 130 bytes captured) Arrival Time: Sep 10, 2004 10:40:25.252229000 Time delta from previous packet: 0.158668000 seconds Time since reference or first frame: 0.158668000 seconds Frame Number: 2 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:0f:3d:1a:7b:ca, Dst: 00:0c:29:00:82:53 Destination: 00:0c:29:00:82:53 (00:0c:29:00:82:53) Source: 00:0f:3d:1a:7b:ca (00:0f:3d:1a:7b:ca) Type: IP (0x0800) Frame check sequence: 0x28d667bc (correct) Internet Protocol, Src Addr: 165.227.249.143 (165.227.249.143), Dst Addr: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x01a3 (419) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3a10 (correct) Source: 165.227.249.143 (165.227.249.143) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 92 Checksum: 0x62ad (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x9F3CA02A72A27F0A Responder cookie: 0x8C25015AD46D32A1 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 84 Security Association payload Next payload: NONE (0) Length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 44 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 36 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (3600) 0000 00 0c 29 00 82 53 00 0f 3d 1a 7b ca 08 00 45 00 ..)..S..=.{...E. 0010 00 70 01 a3 00 00 40 11 3a 10 a5 e3 f9 8f a5 e3 .p....@.:....... 0020 f9 73 01 f4 01 f4 00 5c 62 ad 9f 3c a0 2a 72 a2 .s.....\b..<.*r. 0030 7f 0a 8c 25 01 5a d4 6d 32 a1 01 10 02 00 00 00 ...%.Z.m2....... 0040 00 00 00 00 00 54 00 00 00 38 00 00 00 01 00 00 .....T...8...... 0050 00 01 00 00 00 2c 01 01 00 01 00 00 00 24 01 01 .....,.......$.. 0060 00 00 80 01 00 05 80 02 00 02 80 03 00 01 80 04 ................ 0070 00 02 80 0b 00 01 00 0c 00 04 00 00 0e 10 28 d6 ..............(. 0080 67 bc g. Frame 3 (302 bytes on wire, 302 bytes captured) Arrival Time: Sep 10, 2004 10:40:27.396406000 Time delta from previous packet: 2.144177000 seconds Time since reference or first frame: 2.302845000 seconds Frame Number: 3 Packet Length: 302 bytes Capture Length: 302 bytes Ethernet II, Src: 00:0c:29:00:82:53, Dst: 00:0f:3d:1a:7b:ca Destination: 00:0f:3d:1a:7b:ca (00:0f:3d:1a:7b:ca) Source: 00:0c:29:00:82:53 (00:0c:29:00:82:53) Type: IP (0x0800) Frame check sequence: 0xc6d229a2 (correct) Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.143 (165.227.249.143) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 284 Identification: 0x0087 (135) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xfa7f (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.143 (165.227.249.143) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 264 Checksum: 0x1f00 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x9F3CA02A72A27F0A Responder cookie: 0x8C25015AD46D32A1 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 256 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: Vendor ID (13) Length: 24 Nonce Data Vendor ID payload Next payload: Vendor ID (13) Length: 48 Vendor ID: unknown vendor ID: 0x47BBE7C993F1FC13B4E6D0DB565C68E5... Vendor ID payload Next payload: Vendor ID (13) Length: 12 Vendor ID: unknown vendor ID: 0xDA8E937880010000 Vendor ID payload Next payload: NONE (0) Length: 12 Vendor ID: draft-beaulieu-ike-xauth-02.txt 0000 00 0f 3d 1a 7b ca 00 0c 29 00 82 53 08 00 45 00 ..=.{...)..S..E. 0010 01 1c 00 87 00 00 80 11 fa 7f a5 e3 f9 73 a5 e3 .............s.. 0020 f9 8f 01 f4 01 f4 01 08 1f 00 9f 3c a0 2a 72 a2 ...........<.*r. 0030 7f 0a 8c 25 01 5a d4 6d 32 a1 04 10 02 00 00 00 ...%.Z.m2....... 0040 00 00 00 00 01 00 0a 00 00 84 37 b7 5f 92 1a cf ..........7._... 0050 ab 79 fe c6 84 4e a7 6b 6b 33 dc c0 84 b0 fe fc .y...N.kk3...... 0060 eb 6d 27 db 5b 55 bc 23 fb 8d 79 16 5f b6 18 fd .m'.[U.#..y._... 0070 a9 69 8d 18 6c 36 bf 3d 2b c2 c3 58 75 36 08 fe .i..l6.=+..Xu6.. 0080 2a 7d 9f f1 a1 59 22 e3 54 8d c1 60 22 2b 63 64 *}...Y".T..`"+cd 0090 4b 8e 95 3f dc 7f da 51 c3 a7 cb 92 0b ac 73 32 K..?...Q......s2 00a0 1f bb de e2 85 67 48 07 8b 70 d8 a0 2c 4b 36 28 .....gH..p..,K6( 00b0 9f 36 01 91 5a 39 7c 6c f7 9b f4 d4 fd 57 a6 a7 .6..Z9|l.....W.. 00c0 53 f0 6d 7d c0 97 bd 97 dd 4b 0d 00 00 18 0e 66 S.m}.....K.....f 00d0 ab b6 6c 45 7b ab f3 74 5c 21 5a dc 66 c6 a1 0e ..lE{..t\!Z.f... 00e0 ca c5 0d 00 00 30 47 bb e7 c9 93 f1 fc 13 b4 e6 .....0G......... 00f0 d0 db 56 5c 68 e5 01 02 01 01 02 01 01 03 11 31 ..V\h..........1 0100 30 2e 31 2e 31 20 28 42 75 69 6c 64 20 31 30 29 0.1.1 (Build 10) 0110 00 00 0d 00 00 0c da 8e 93 78 80 01 00 00 00 00 .........x...... 0120 00 0c 09 00 26 89 df d6 b7 12 c6 d2 29 a2 ....&.......). Frame 4 (230 bytes on wire, 230 bytes captured) Arrival Time: Sep 10, 2004 10:40:27.397260000 Time delta from previous packet: 0.000854000 seconds Time since reference or first frame: 2.303699000 seconds Frame Number: 4 Packet Length: 230 bytes Capture Length: 230 bytes Ethernet II, Src: 00:0f:3d:1a:7b:ca, Dst: 00:0c:29:00:82:53 Destination: 00:0c:29:00:82:53 (00:0c:29:00:82:53) Source: 00:0f:3d:1a:7b:ca (00:0f:3d:1a:7b:ca) Type: IP (0x0800) Frame check sequence: 0xd725c8cf (correct) Internet Protocol, Src Addr: 165.227.249.143 (165.227.249.143), Dst Addr: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 212 Identification: 0x01a4 (420) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x39ab (correct) Source: 165.227.249.143 (165.227.249.143) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 192 Checksum: 0x48f2 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x9F3CA02A72A27F0A Responder cookie: 0x8C25015AD46D32A1 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 184 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 24 Nonce Data 0000 00 0c 29 00 82 53 00 0f 3d 1a 7b ca 08 00 45 00 ..)..S..=.{...E. 0010 00 d4 01 a4 00 00 40 11 39 ab a5 e3 f9 8f a5 e3 ......@.9....... 0020 f9 73 01 f4 01 f4 00 c0 48 f2 9f 3c a0 2a 72 a2 .s......H..<.*r. 0030 7f 0a 8c 25 01 5a d4 6d 32 a1 04 10 02 00 00 00 ...%.Z.m2....... 0040 00 00 00 00 00 b8 0a 00 00 84 de 1d ad 8f ba 36 ...............6 0050 d4 c9 df 19 61 55 46 7a fe 61 7a fd db 87 a2 0b ....aUFz.az..... 0060 bb b9 9f 6f 05 3e 92 fb 73 62 9f 5f 5a 98 f2 4f ...o.>..sb._Z..O 0070 cd b8 09 29 4c 8e 45 ae 61 31 67 7f 2b 7c 8d a8 ...)L.E.a1g.+|.. 0080 ad 76 35 eb 0a 5e 40 a5 b1 6d b8 ff c0 df 03 4b .v5..^@..m.....K 0090 4e eb 45 10 0d e1 9c 31 39 ae c6 3b 48 34 d0 49 N.E....19..;H4.I 00a0 6d f6 45 fd 45 6f e4 91 03 98 f2 70 3c a3 58 29 m.E.Eo.....p<.X) 00b0 5f 8f b3 8c 3e 8a 1b b3 72 52 c5 53 7f 61 54 7d _...>...rR.S.aT} 00c0 29 e5 55 2a 94 d7 84 d2 6b 2d 00 00 00 18 9f 66 ).U*....k-.....f 00d0 fb c7 f0 52 1f c3 a8 70 98 0b 72 19 e2 f9 17 4a ...R...p..r....J 00e0 d4 14 d7 25 c8 cf ...%.. Frame 5 (138 bytes on wire, 138 bytes captured) Arrival Time: Sep 10, 2004 10:40:29.299877000 Time delta from previous packet: 1.902617000 seconds Time since reference or first frame: 4.206316000 seconds Frame Number: 5 Packet Length: 138 bytes Capture Length: 138 bytes Ethernet II, Src: 00:0c:29:00:82:53, Dst: 00:0f:3d:1a:7b:ca Destination: 00:0f:3d:1a:7b:ca (00:0f:3d:1a:7b:ca) Source: 00:0c:29:00:82:53 (00:0c:29:00:82:53) Type: IP (0x0800) Frame check sequence: 0xca1db49d (correct) Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.143 (165.227.249.143) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0088 (136) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xfb22 (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.143 (165.227.249.143) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 100 Checksum: 0x44b5 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x9F3CA02A72A27F0A Responder cookie: 0x8C25015AD46D32A1 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 92 Encrypted payload (64 bytes) 0000 00 0f 3d 1a 7b ca 00 0c 29 00 82 53 08 00 45 00 ..=.{...)..S..E. 0010 00 78 00 88 00 00 80 11 fb 22 a5 e3 f9 73 a5 e3 .x......."...s.. 0020 f9 8f 01 f4 01 f4 00 64 44 b5 9f 3c a0 2a 72 a2 .......dD..<.*r. 0030 7f 0a 8c 25 01 5a d4 6d 32 a1 05 10 02 01 00 00 ...%.Z.m2....... 0040 00 00 00 00 00 5c 85 18 98 04 56 b7 f9 37 0e 24 .....\....V..7.$ 0050 ef b0 05 e7 42 37 e3 14 b4 7e ab 32 99 9f 4d 5f ....B7...~.2..M_ 0060 81 e7 80 3f f9 bf 45 54 5e 31 03 6c 5b d0 d9 ae ...?..ET^1.l[... 0070 33 5f 77 54 04 92 a8 70 4e 97 c3 71 71 9e 89 d6 3_wT...pN..qq... 0080 8a fd d9 cd 2b 92 ca 1d b4 9d ....+..... Frame 6 (114 bytes on wire, 114 bytes captured) Arrival Time: Sep 10, 2004 10:40:29.301990000 Time delta from previous packet: 0.002113000 seconds Time since reference or first frame: 4.208429000 seconds Frame Number: 6 Packet Length: 114 bytes Capture Length: 114 bytes Ethernet II, Src: 00:0f:3d:1a:7b:ca, Dst: 00:0c:29:00:82:53 Destination: 00:0c:29:00:82:53 (00:0c:29:00:82:53) Source: 00:0f:3d:1a:7b:ca (00:0f:3d:1a:7b:ca) Type: IP (0x0800) Frame check sequence: 0xae1366d8 (correct) Internet Protocol, Src Addr: 165.227.249.143 (165.227.249.143), Dst Addr: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0x01a5 (421) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3a1e (correct) Source: 165.227.249.143 (165.227.249.143) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 76 Checksum: 0x282c (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x9F3CA02A72A27F0A Responder cookie: 0x8C25015AD46D32A1 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 68 Encrypted payload (40 bytes) 0000 00 0c 29 00 82 53 00 0f 3d 1a 7b ca 08 00 45 00 ..)..S..=.{...E. 0010 00 60 01 a5 00 00 40 11 3a 1e a5 e3 f9 8f a5 e3 .`....@.:....... 0020 f9 73 01 f4 01 f4 00 4c 28 2c 9f 3c a0 2a 72 a2 .s.....L(,.<.*r. 0030 7f 0a 8c 25 01 5a d4 6d 32 a1 05 10 02 01 00 00 ...%.Z.m2....... 0040 00 00 00 00 00 44 3a 4f 0f ca 56 80 2f d1 96 f4 .....D:O..V./... 0050 d4 5f cd 42 11 53 c2 85 b1 f6 85 dc 20 0a 47 aa ._.B.S...... .G. 0060 aa 5e c7 85 ed 95 3b 54 bc eb c5 8e 2d d4 ae 13 .^....;T....-... 0070 66 d8 f. Frame 7 (338 bytes on wire, 338 bytes captured) Arrival Time: Sep 10, 2004 10:40:31.558307000 Time delta from previous packet: 2.256317000 seconds Time since reference or first frame: 6.464746000 seconds Frame Number: 7 Packet Length: 338 bytes Capture Length: 338 bytes Ethernet II, Src: 00:0c:29:00:82:53, Dst: 00:0f:3d:1a:7b:ca Destination: 00:0f:3d:1a:7b:ca (00:0f:3d:1a:7b:ca) Source: 00:0c:29:00:82:53 (00:0c:29:00:82:53) Type: IP (0x0800) Frame check sequence: 0x705d6d94 (correct) Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.143 (165.227.249.143) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 320 Identification: 0x008a (138) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xfa58 (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.143 (165.227.249.143) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 300 Checksum: 0x97bc (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x9F3CA02A72A27F0A Responder cookie: 0x8C25015AD46D32A1 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xF13DEC91 Length: 292 Encrypted payload (264 bytes) 0000 00 0f 3d 1a 7b ca 00 0c 29 00 82 53 08 00 45 00 ..=.{...)..S..E. 0010 01 40 00 8a 00 00 80 11 fa 58 a5 e3 f9 73 a5 e3 .@.......X...s.. 0020 f9 8f 01 f4 01 f4 01 2c 97 bc 9f 3c a0 2a 72 a2 .......,...<.*r. 0030 7f 0a 8c 25 01 5a d4 6d 32 a1 08 10 20 01 f1 3d ...%.Z.m2... ..= 0040 ec 91 00 00 01 24 5f ce 67 73 fc de e8 f3 82 ff .....$_.gs...... 0050 72 dd 3b c3 0a 8e 8d dc 49 a9 3e b2 7f 89 b0 0c r.;.....I.>..... 0060 5b b6 c8 46 a5 e9 d5 14 d1 9b 5f 19 30 41 0a ae [..F......_.0A.. 0070 d4 0b 61 75 5c 4d a0 f4 43 5d 9e c4 68 3b b5 78 ..au\M..C]..h;.x 0080 4d a0 fc bd 35 f2 e5 b8 4f fe d1 8e 3e 5a c8 31 M...5...O...>Z.1 0090 ab bb c1 96 1d f1 fe be 2c 02 bd 0f a2 0a e9 80 ........,....... 00a0 4b ba f0 6e 4b 79 20 01 0f 0e 07 d2 72 4c 59 23 K..nKy .....rLY# 00b0 91 bf 8e e7 ef 4a 82 25 aa 1c 4b 32 af 12 12 fb .....J.%..K2.... 00c0 59 a8 cb f6 e8 05 b3 7b 33 8a 18 8f 00 3a e5 56 Y......{3....:.V 00d0 5e 1b bb bb aa 03 8a 81 25 83 46 a3 b0 f4 c0 fa ^.......%.F..... 00e0 e2 13 7b a0 5a 02 21 d6 d2 c4 d9 59 bf c5 bb e2 ..{.Z.!....Y.... 00f0 f5 44 7f 22 06 ec 15 67 0a c9 93 e3 d0 50 4b b9 .D."...g.....PK. 0100 19 bc c7 16 8b 52 b3 9c 20 fb 14 5b ae bf 4b 76 .....R.. ..[..Kv 0110 72 1e b6 1c a4 2c 8c 89 3e 9d eb ff 29 8a 69 04 r....,..>...).i. 0120 0a 6d da 1f e3 77 31 d4 57 4d a6 ad dc 5f 1c 08 .m...w1.WM..._.. 0130 c7 b4 f1 94 25 b1 a5 85 91 d0 0b 83 71 40 95 df ....%.......q@.. 0140 db cb 01 d4 1a 0a a8 1b 8e 2b 0a 72 67 09 70 5d .........+.rg.p] 0150 6d 94 m. Frame 8 (338 bytes on wire, 338 bytes captured) Arrival Time: Sep 10, 2004 10:40:31.943890000 Time delta from previous packet: 0.385583000 seconds Time since reference or first frame: 6.850329000 seconds Frame Number: 8 Packet Length: 338 bytes Capture Length: 338 bytes Ethernet II, Src: 00:0f:3d:1a:7b:ca, Dst: 00:0c:29:00:82:53 Destination: 00:0c:29:00:82:53 (00:0c:29:00:82:53) Source: 00:0f:3d:1a:7b:ca (00:0f:3d:1a:7b:ca) Type: IP (0x0800) Frame check sequence: 0xe0beaf55 (correct) Internet Protocol, Src Addr: 165.227.249.143 (165.227.249.143), Dst Addr: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 320 Identification: 0x01a6 (422) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x393d (correct) Source: 165.227.249.143 (165.227.249.143) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 300 Checksum: 0x4fd4 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x9F3CA02A72A27F0A Responder cookie: 0x8C25015AD46D32A1 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xF13DEC91 Length: 292 Encrypted payload (264 bytes) 0000 00 0c 29 00 82 53 00 0f 3d 1a 7b ca 08 00 45 00 ..)..S..=.{...E. 0010 01 40 01 a6 00 00 40 11 39 3d a5 e3 f9 8f a5 e3 .@....@.9=...... 0020 f9 73 01 f4 01 f4 01 2c 4f d4 9f 3c a0 2a 72 a2 .s.....,O..<.*r. 0030 7f 0a 8c 25 01 5a d4 6d 32 a1 08 10 20 01 f1 3d ...%.Z.m2... ..= 0040 ec 91 00 00 01 24 fc 86 89 d9 3d a1 d9 a0 05 e6 .....$....=..... 0050 19 ce 34 67 8e 5b d3 dc 21 45 11 64 3b 84 cf 29 ..4g.[..!E.d;..) 0060 d3 52 b5 ed 11 df fd 26 a3 42 a2 64 d4 1e 42 69 .R.....&.B.d..Bi 0070 be 80 92 be a6 47 10 70 e0 5a 6c 0a 5e 84 3b 76 .....G.p.Zl.^.;v 0080 ce 40 f3 5b b4 67 95 b6 0f 9e e6 0b 54 92 68 80 .@.[.g......T.h. 0090 a4 79 35 cc 61 2d c5 8e 7b fc 36 8f 9d 3c 99 8c .y5.a-..{.6..<.. 00a0 ad d9 9b 93 a0 f0 bc 96 5c 1d a6 97 48 a1 00 c2 ........\...H... 00b0 34 3d ee a6 d9 3f 4b cd 8f b7 0e d6 7d 71 f1 81 4=...?K.....}q.. 00c0 c1 15 ed 6a 8f f1 b1 53 54 15 4b 5c f7 db 12 2d ...j...ST.K\...- 00d0 bc 78 56 e5 41 2f fd 23 f5 aa 35 62 4b 4a 5a 8d .xV.A/.#..5bKJZ. 00e0 4d 37 1c 10 20 15 78 b2 16 cc 1d 78 18 27 4b e7 M7.. .x....x.'K. 00f0 51 28 21 39 7b 92 54 ac 3d 9e c2 e0 18 20 a7 2e Q(!9{.T.=.... .. 0100 fc 0c 76 19 c9 f6 c1 80 bc ae 91 23 ad ac 11 c6 ..v........#.... 0110 f9 ad b7 cb 6a 83 01 fa aa 54 0e a0 31 07 c0 5e ....j....T..1..^ 0120 c1 bd 81 0b 75 e3 22 cf 8f 8f 2a 98 05 43 5b 6e ....u."...*..C[n 0130 64 72 db 42 5b 49 35 fa a1 35 eb 44 22 b4 ed 5f dr.B[I5..5.D".._ 0140 cb 1e 23 a3 4a bb a0 55 90 f8 76 95 c7 e6 e0 be ..#.J..U..v..... 0150 af 55 .U Frame 9 (98 bytes on wire, 98 bytes captured) Arrival Time: Sep 10, 2004 10:40:31.950355000 Time delta from previous packet: 0.006465000 seconds Time since reference or first frame: 6.856794000 seconds Frame Number: 9 Packet Length: 98 bytes Capture Length: 98 bytes Ethernet II, Src: 00:0c:29:00:82:53, Dst: 00:0f:3d:1a:7b:ca Destination: 00:0f:3d:1a:7b:ca (00:0f:3d:1a:7b:ca) Source: 00:0c:29:00:82:53 (00:0c:29:00:82:53) Type: IP (0x0800) Frame check sequence: 0xf089e8f8 (correct) Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.143 (165.227.249.143) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 80 Identification: 0x008c (140) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xfb46 (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.143 (165.227.249.143) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 60 Checksum: 0x8580 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x9F3CA02A72A27F0A Responder cookie: 0x8C25015AD46D32A1 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xF13DEC91 Length: 52 Encrypted payload (24 bytes) 0000 00 0f 3d 1a 7b ca 00 0c 29 00 82 53 08 00 45 00 ..=.{...)..S..E. 0010 00 50 00 8c 00 00 80 11 fb 46 a5 e3 f9 73 a5 e3 .P.......F...s.. 0020 f9 8f 01 f4 01 f4 00 3c 85 80 9f 3c a0 2a 72 a2 .......<...<.*r. 0030 7f 0a 8c 25 01 5a d4 6d 32 a1 08 10 20 01 f1 3d ...%.Z.m2... ..= 0040 ec 91 00 00 00 34 47 d7 45 eb db 84 b4 10 51 63 .....4G.E.....Qc 0050 45 4d 98 6c b3 33 e7 0c 46 2b 77 59 c7 50 f0 89 EM.l.3..F+wY.P.. 0060 e8 f8 .. Frame 10 (130 bytes on wire, 130 bytes captured) Arrival Time: Sep 10, 2004 10:40:35.631201000 Time delta from previous packet: 3.680846000 seconds Time since reference or first frame: 10.537640000 seconds Frame Number: 10 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:0c:29:00:82:53, Dst: 00:0f:3d:1a:7b:ca Destination: 00:0f:3d:1a:7b:ca (00:0f:3d:1a:7b:ca) Source: 00:0c:29:00:82:53 (00:0c:29:00:82:53) Type: IP (0x0800) Frame check sequence: 0x598dcf82 (correct) Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.143 (165.227.249.143) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0001 (1) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: ESP (0x32) Header checksum: 0xfb90 (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.143 (165.227.249.143) Encapsulating Security Payload SPI: 0x04000010 Sequence: 1 Data (84 bytes) 0000 00 0f 3d 1a 7b ca 00 0c 29 00 82 53 08 00 45 00 ..=.{...)..S..E. 0010 00 70 00 01 00 00 80 32 fb 90 a5 e3 f9 73 a5 e3 .p.....2.....s.. 0020 f9 8f 04 00 00 10 00 00 00 01 59 4f d1 7c 2d d5 ..........YO.|-. 0030 b7 23 99 09 fb e2 2c 8f fb e7 a0 6d 18 2d 11 e9 .#....,....m.-.. 0040 d1 f4 2f d1 5d b2 87 05 e4 92 69 4e 13 8f 5f 17 ../.].....iN.._. 0050 a3 a1 8e 53 97 2e 73 43 9b 28 b7 c6 22 80 86 59 ...S..sC.(.."..Y 0060 c0 4f da 0c d2 f1 f4 e2 1c 81 2e 6f db b9 9f bd .O.........o.... 0070 fd 00 41 8e 91 f0 40 9a 6d 6e 97 d9 01 61 59 8d ..A...@.mn...aY. 0080 cf 82 .. Frame 11 (130 bytes on wire, 130 bytes captured) Arrival Time: Sep 10, 2004 10:40:35.632764000 Time delta from previous packet: 0.001563000 seconds Time since reference or first frame: 10.539203000 seconds Frame Number: 11 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:0f:3d:1a:7b:ca, Dst: 00:0c:29:00:82:53 Destination: 00:0c:29:00:82:53 (00:0c:29:00:82:53) Source: 00:0f:3d:1a:7b:ca (00:0f:3d:1a:7b:ca) Type: IP (0x0800) Frame check sequence: 0x3828a3bd (correct) Internet Protocol, Src Addr: 165.227.249.143 (165.227.249.143), Dst Addr: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x01a7 (423) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 254 Protocol: ESP (0x32) Header checksum: 0x7bea (correct) Source: 165.227.249.143 (165.227.249.143) Destination: 165.227.249.115 (165.227.249.115) Encapsulating Security Payload SPI: 0x47e96835 Sequence: 1 Data (84 bytes) 0000 00 0c 29 00 82 53 00 0f 3d 1a 7b ca 08 00 45 00 ..)..S..=.{...E. 0010 00 70 01 a7 00 00 fe 32 7b ea a5 e3 f9 8f a5 e3 .p.....2{....... 0020 f9 73 47 e9 68 35 00 00 00 01 00 4c c0 1a 58 6e .sG.h5.....L..Xn 0030 5b 9a 9e e3 7b 21 70 fa 93 3f 43 aa 5f 77 34 e0 [...{!p..?C._w4. 0040 fc 86 8a 05 e9 db 9c 28 5c 21 12 8b 93 41 a8 b4 .......(\!...A.. 0050 0d 0b b0 94 b7 78 33 28 eb 25 56 02 e2 fe 72 02 .....x3(.%V...r. 0060 51 23 c3 e0 72 33 37 b8 d0 67 40 a4 0c 42 dc c1 Q#..r37..g@..B.. 0070 b7 98 37 e1 29 29 b7 f3 8a 2a bc b4 85 fc 38 28 ..7.))...*....8( 0080 a3 bd .. Frame 12 (130 bytes on wire, 130 bytes captured) Arrival Time: Sep 10, 2004 10:40:36.630099000 Time delta from previous packet: 0.997335000 seconds Time since reference or first frame: 11.536538000 seconds Frame Number: 12 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:0c:29:00:82:53, Dst: 00:0f:3d:1a:7b:ca Destination: 00:0f:3d:1a:7b:ca (00:0f:3d:1a:7b:ca) Source: 00:0c:29:00:82:53 (00:0c:29:00:82:53) Type: IP (0x0800) Frame check sequence: 0x47040d76 (correct) Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.143 (165.227.249.143) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0002 (2) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: ESP (0x32) Header checksum: 0xfb8f (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.143 (165.227.249.143) Encapsulating Security Payload SPI: 0x04000010 Sequence: 2 Data (84 bytes) 0000 00 0f 3d 1a 7b ca 00 0c 29 00 82 53 08 00 45 00 ..=.{...)..S..E. 0010 00 70 00 02 00 00 80 32 fb 8f a5 e3 f9 73 a5 e3 .p.....2.....s.. 0020 f9 8f 04 00 00 10 00 00 00 02 2e 6f db b9 9f bd ...........o.... 0030 fd 00 ee c0 41 30 8a 9f c9 7e 52 7d bd e3 cc b3 ....A0...~R}.... 0040 c9 a4 3c fa 53 0f 9f 09 10 84 64 cc 9d 52 df 96 ..<.S.....d..R.. 0050 ed ef dc 5f 1a e7 2c 7c 06 54 9d 39 82 db 92 33 ..._..,|.T.9...3 0060 78 cb 74 b7 f2 8a 0c 8a cb fa 08 78 05 b1 63 ff x.t........x..c. 0070 17 d0 3e be 04 a5 66 fd 7a 0e e0 56 ed a7 47 04 ..>...f.z..V..G. 0080 0d 76 .v Frame 13 (130 bytes on wire, 130 bytes captured) Arrival Time: Sep 10, 2004 10:40:36.631591000 Time delta from previous packet: 0.001492000 seconds Time since reference or first frame: 11.538030000 seconds Frame Number: 13 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:0f:3d:1a:7b:ca, Dst: 00:0c:29:00:82:53 Destination: 00:0c:29:00:82:53 (00:0c:29:00:82:53) Source: 00:0f:3d:1a:7b:ca (00:0f:3d:1a:7b:ca) Type: IP (0x0800) Frame check sequence: 0x97577670 (correct) Internet Protocol, Src Addr: 165.227.249.143 (165.227.249.143), Dst Addr: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x01a8 (424) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 254 Protocol: ESP (0x32) Header checksum: 0x7be9 (correct) Source: 165.227.249.143 (165.227.249.143) Destination: 165.227.249.115 (165.227.249.115) Encapsulating Security Payload SPI: 0x47e96835 Sequence: 2 Data (84 bytes) 0000 00 0c 29 00 82 53 00 0f 3d 1a 7b ca 08 00 45 00 ..)..S..=.{...E. 0010 00 70 01 a8 00 00 fe 32 7b e9 a5 e3 f9 8f a5 e3 .p.....2{....... 0020 f9 73 47 e9 68 35 00 00 00 02 00 4c c0 1a 58 6e .sG.h5.....L..Xn 0030 5b 9a 2e 33 a8 32 28 b3 fc 09 bc 8a 92 bd 24 cb [..3.2(.......$. 0040 86 cf 1e 4a b4 2a cb 13 e8 e4 f6 72 b6 7c f5 30 ...J.*.....r.|.0 0050 2d ac b9 42 86 56 e8 51 e6 af 37 66 71 25 6a f2 -..B.V.Q..7fq%j. 0060 5a b0 a4 19 74 48 b2 88 8e 4e b6 0b 77 5a 83 cd Z...tH...N..wZ.. 0070 1b fe 9c 07 29 f2 72 2d a7 02 8a bf 0e 92 97 57 ....).r-.......W 0080 76 70 vp