Frame 1 (166 bytes on wire, 166 bytes captured) Arrival Time: Oct 26, 2004 13:49:44.932959000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 166 bytes Capture Length: 166 bytes Ethernet II, Src: 00:0c:29:00:82:53, Dst: 00:05:30:01:80:af Destination: 00:05:30:01:80:af (00:05:30:01:80:af) Source: 00:0c:29:00:82:53 (00:0c:29:00:82:53) Type: IP (0x0800) Frame check sequence: 0x33d838f6 (correct) Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.144 (165.227.249.144) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 148 Identification: 0x0177 (375) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xfa16 (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.144 (165.227.249.144) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 128 Checksum: 0x3858 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x71C628ABA39E16B5 Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 120 Security Association payload Next payload: Vendor ID (13) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 40 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 32 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (3600) Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 0000 00 05 30 01 80 af 00 0c 29 00 82 53 08 00 45 00 ..0.....)..S..E. 0010 00 94 01 77 00 00 80 11 fa 16 a5 e3 f9 73 a5 e3 ...w.........s.. 0020 f9 90 01 f4 01 f4 00 80 38 58 71 c6 28 ab a3 9e ........8Xq.(... 0030 16 b5 00 00 00 00 00 00 00 00 01 10 02 00 00 00 ................ 0040 00 00 00 00 00 78 0d 00 00 34 00 00 00 01 00 00 .....x...4...... 0050 00 01 00 00 00 28 01 01 00 01 00 00 00 20 01 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 04 00 02 80 03 ................ 0070 00 01 80 0b 00 01 80 0c 0e 10 0d 00 00 14 44 85 ..............D. 0080 15 2d 18 b6 bb cd 0b e8 a8 46 95 79 dd cc 00 00 .-.......F.y.... 0090 00 14 90 cb 80 91 3e bb 69 6e 08 63 81 b5 ec 42 ......>.in.c...B 00a0 7b 1f 33 d8 38 f6 {.3.8. Frame 2 (126 bytes on wire, 126 bytes captured) Arrival Time: Oct 26, 2004 13:49:44.934696000 Time delta from previous packet: 0.001737000 seconds Time since reference or first frame: 0.001737000 seconds Frame Number: 2 Packet Length: 126 bytes Capture Length: 126 bytes Ethernet II, Src: 00:05:30:01:80:af, Dst: 00:0c:29:00:82:53 Destination: 00:0c:29:00:82:53 (00:0c:29:00:82:53) Source: 00:05:30:01:80:af (00:05:30:01:80:af) Type: IP (0x0800) Frame check sequence: 0x06538e0d (correct) Internet Protocol, Src Addr: 165.227.249.144 (165.227.249.144), Dst Addr: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 108 Identification: 0x0000 (0) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3bb6 (correct) Source: 165.227.249.144 (165.227.249.144) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 88 Checksum: 0x5018 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x71C628ABA39E16B5 Responder cookie: 0x5054551CEBEA7231 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 80 Security Association payload Next payload: NONE (0) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 40 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 32 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (3600) 0000 00 0c 29 00 82 53 00 05 30 01 80 af 08 00 45 00 ..)..S..0.....E. 0010 00 6c 00 00 00 00 40 11 3b b6 a5 e3 f9 90 a5 e3 .l....@.;....... 0020 f9 73 01 f4 01 f4 00 58 50 18 71 c6 28 ab a3 9e .s.....XP.q.(... 0030 16 b5 50 54 55 1c eb ea 72 31 01 10 02 00 00 00 ..PTU...r1...... 0040 00 00 00 00 00 50 00 00 00 34 00 00 00 01 00 00 .....P...4...... 0050 00 01 00 00 00 28 01 01 00 01 00 00 00 20 01 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 04 00 02 80 03 ................ 0070 00 01 80 0b 00 01 80 0c 0e 10 06 53 8e 0d ...........S.. Frame 3 (302 bytes on wire, 302 bytes captured) Arrival Time: Oct 26, 2004 13:49:47.137881000 Time delta from previous packet: 2.203185000 seconds Time since reference or first frame: 2.204922000 seconds Frame Number: 3 Packet Length: 302 bytes Capture Length: 302 bytes Ethernet II, Src: 00:0c:29:00:82:53, Dst: 00:05:30:01:80:af Destination: 00:05:30:01:80:af (00:05:30:01:80:af) Source: 00:0c:29:00:82:53 (00:0c:29:00:82:53) Type: IP (0x0800) Frame check sequence: 0xe533aa13 (correct) Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.144 (165.227.249.144) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 284 Identification: 0x0178 (376) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf98d (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.144 (165.227.249.144) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 264 Checksum: 0xc2ce (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x71C628ABA39E16B5 Responder cookie: 0x5054551CEBEA7231 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 256 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: Vendor ID (13) Length: 24 Nonce Data Vendor ID payload Next payload: Vendor ID (13) Length: 48 Vendor ID: unknown vendor ID: 0x47BBE7C993F1FC13B4E6D0DB565C68E5... Vendor ID payload Next payload: Vendor ID (13) Length: 12 Vendor ID: unknown vendor ID: 0xDA8E937880010000 Vendor ID payload Next payload: NONE (0) Length: 12 Vendor ID: draft-beaulieu-ike-xauth-02.txt 0000 00 05 30 01 80 af 00 0c 29 00 82 53 08 00 45 00 ..0.....)..S..E. 0010 01 1c 01 78 00 00 80 11 f9 8d a5 e3 f9 73 a5 e3 ...x.........s.. 0020 f9 90 01 f4 01 f4 01 08 c2 ce 71 c6 28 ab a3 9e ..........q.(... 0030 16 b5 50 54 55 1c eb ea 72 31 04 10 02 00 00 00 ..PTU...r1...... 0040 00 00 00 00 01 00 0a 00 00 84 7c e3 ac 02 a2 71 ..........|....q 0050 37 ff b5 e6 20 cd be 57 45 8f 37 ed 91 9f b4 0d 7... ..WE.7..... 0060 b1 66 5d 21 75 67 27 12 7a 72 1f 6d 51 6c 14 ba .f]!ug'.zr.mQl.. 0070 1e 3f da 7a 0d 3b a6 d7 36 b2 46 03 0a 11 8d 00 .?.z.;..6.F..... 0080 50 f9 52 37 76 40 2a b3 83 3d 65 56 a5 04 53 af P.R7v@*..=eV..S. 0090 6b 96 32 e1 cf d8 7d cd 4d f8 be 35 d8 26 35 ab k.2...}.M..5.&5. 00a0 59 b7 04 5a 9d 84 fb 38 74 6d 7e 5c 7a 82 89 fd Y..Z...8tm~\z... 00b0 0c 4f 2a 21 37 d6 b9 fd 49 af 65 7f 69 8b eb 15 .O*!7...I.e.i... 00c0 08 16 18 50 80 f6 71 50 ee 57 0d 00 00 18 87 ad ...P..qP.W...... 00d0 25 2b 02 62 85 62 1e 4d 7c 02 e3 8b e5 6e 3e 2e %+.b.b.M|....n>. 00e0 c6 f1 0d 00 00 30 47 bb e7 c9 93 f1 fc 13 b4 e6 .....0G......... 00f0 d0 db 56 5c 68 e5 01 02 01 01 02 01 01 03 11 31 ..V\h..........1 0100 30 2e 31 2e 31 20 28 42 75 69 6c 64 20 31 30 29 0.1.1 (Build 10) 0110 00 00 0d 00 00 0c da 8e 93 78 80 01 00 00 00 00 .........x...... 0120 00 0c 09 00 26 89 df d6 b7 12 e5 33 aa 13 ....&......3.. Frame 4 (226 bytes on wire, 226 bytes captured) Arrival Time: Oct 26, 2004 13:49:47.160882000 Time delta from previous packet: 0.023001000 seconds Time since reference or first frame: 2.227923000 seconds Frame Number: 4 Packet Length: 226 bytes Capture Length: 226 bytes Ethernet II, Src: 00:05:30:01:80:af, Dst: 00:0c:29:00:82:53 Destination: 00:0c:29:00:82:53 (00:0c:29:00:82:53) Source: 00:05:30:01:80:af (00:05:30:01:80:af) Type: IP (0x0800) Frame check sequence: 0x1d7929e6 (correct) Internet Protocol, Src Addr: 165.227.249.144 (165.227.249.144), Dst Addr: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 208 Identification: 0x0000 (0) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3b52 (correct) Source: 165.227.249.144 (165.227.249.144) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 188 Checksum: 0xa99b (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x71C628ABA39E16B5 Responder cookie: 0x5054551CEBEA7231 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 180 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 20 Nonce Data 0000 00 0c 29 00 82 53 00 05 30 01 80 af 08 00 45 00 ..)..S..0.....E. 0010 00 d0 00 00 00 00 40 11 3b 52 a5 e3 f9 90 a5 e3 ......@.;R...... 0020 f9 73 01 f4 01 f4 00 bc a9 9b 71 c6 28 ab a3 9e .s........q.(... 0030 16 b5 50 54 55 1c eb ea 72 31 04 10 02 00 00 00 ..PTU...r1...... 0040 00 00 00 00 00 b4 0a 00 00 84 ae c7 9c f4 be 9c ................ 0050 14 05 0c 1c cd f5 21 3c 26 a2 7a 0a 6e 1a 90 ff ......!<&.z.n... 0060 e9 69 52 0a 13 d8 dd 70 8c a3 05 76 1e 61 e7 a9 .iR....p...v.a.. 0070 c6 27 73 a9 f8 fb 40 a7 f2 f2 c9 75 69 ff 66 a9 .'s...@....ui.f. 0080 c4 51 39 d9 ab 5b 46 d6 53 50 29 13 21 24 fb 86 .Q9..[F.SP).!$.. 0090 ab fe f4 6e 37 f4 82 56 ea 54 d9 ac d3 c4 b4 78 ...n7..V.T.....x 00a0 8d 90 00 98 f9 08 49 3d 44 9d e6 7d 96 43 bf e4 ......I=D..}.C.. 00b0 b7 29 42 e8 72 d8 24 ab 6c 8f e6 63 3c d9 a8 33 .)B.r.$.l..c<..3 00c0 cb d8 72 88 39 c6 68 1f ed 26 00 00 00 14 e2 44 ..r.9.h..&.....D 00d0 e0 6c 10 a9 fd f3 ca 87 83 21 2c b5 c4 d7 1d 79 .l.......!,....y 00e0 29 e6 ). Frame 5 (138 bytes on wire, 138 bytes captured) Arrival Time: Oct 26, 2004 13:49:48.997562000 Time delta from previous packet: 1.836680000 seconds Time since reference or first frame: 4.064603000 seconds Frame Number: 5 Packet Length: 138 bytes Capture Length: 138 bytes Ethernet II, Src: 00:0c:29:00:82:53, Dst: 00:05:30:01:80:af Destination: 00:05:30:01:80:af (00:05:30:01:80:af) Source: 00:0c:29:00:82:53 (00:0c:29:00:82:53) Type: IP (0x0800) Frame check sequence: 0xba576843 (correct) Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.144 (165.227.249.144) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0179 (377) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xfa30 (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.144 (165.227.249.144) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 100 Checksum: 0xf5da (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x71C628ABA39E16B5 Responder cookie: 0x5054551CEBEA7231 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 92 Encrypted payload (64 bytes) 0000 00 05 30 01 80 af 00 0c 29 00 82 53 08 00 45 00 ..0.....)..S..E. 0010 00 78 01 79 00 00 80 11 fa 30 a5 e3 f9 73 a5 e3 .x.y.....0...s.. 0020 f9 90 01 f4 01 f4 00 64 f5 da 71 c6 28 ab a3 9e .......d..q.(... 0030 16 b5 50 54 55 1c eb ea 72 31 05 10 02 01 00 00 ..PTU...r1...... 0040 00 00 00 00 00 5c 4a a7 90 03 da 01 25 5b 00 ba .....\J.....%[.. 0050 41 e1 b4 38 f3 80 c2 15 16 25 96 61 58 9d f4 df A..8.....%.aX... 0060 5b a5 0d 02 7d 1b f6 12 bd e4 0f fc 0c 4b ef 49 [...}........K.I 0070 2b 61 d7 13 bc c5 10 cc 8e f1 68 5b cd 86 77 0c +a........h[..w. 0080 ba 46 dd 54 9d 93 ba 57 68 43 .F.T...WhC Frame 6 (114 bytes on wire, 114 bytes captured) Arrival Time: Oct 26, 2004 13:49:49.000206000 Time delta from previous packet: 0.002644000 seconds Time since reference or first frame: 4.067247000 seconds Frame Number: 6 Packet Length: 114 bytes Capture Length: 114 bytes Ethernet II, Src: 00:05:30:01:80:af, Dst: 00:0c:29:00:82:53 Destination: 00:0c:29:00:82:53 (00:0c:29:00:82:53) Source: 00:05:30:01:80:af (00:05:30:01:80:af) Type: IP (0x0800) Frame check sequence: 0xbd1bf9eb (correct) Internet Protocol, Src Addr: 165.227.249.144 (165.227.249.144), Dst Addr: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0x0000 (0) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3bc2 (correct) Source: 165.227.249.144 (165.227.249.144) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 76 Checksum: 0xec00 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x71C628ABA39E16B5 Responder cookie: 0x5054551CEBEA7231 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 68 Encrypted payload (40 bytes) 0000 00 0c 29 00 82 53 00 05 30 01 80 af 08 00 45 00 ..)..S..0.....E. 0010 00 60 00 00 00 00 40 11 3b c2 a5 e3 f9 90 a5 e3 .`....@.;....... 0020 f9 73 01 f4 01 f4 00 4c ec 00 71 c6 28 ab a3 9e .s.....L..q.(... 0030 16 b5 50 54 55 1c eb ea 72 31 05 10 02 01 00 00 ..PTU...r1...... 0040 00 00 00 00 00 44 f2 2c d2 30 a7 2f 9d be 1e a1 .....D.,.0./.... 0050 4f 5d 1e 99 00 d9 b3 32 c5 6f 07 28 6d 6a 58 a3 O].....2.o.(mjX. 0060 77 2f ff bb d5 6d 99 1c c7 04 56 ed 90 fd bd 1b w/...m....V..... 0070 f9 eb .. Frame 7 (130 bytes on wire, 130 bytes captured) Arrival Time: Oct 26, 2004 13:49:49.001271000 Time delta from previous packet: 0.001065000 seconds Time since reference or first frame: 4.068312000 seconds Frame Number: 7 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:05:30:01:80:af, Dst: 00:0c:29:00:82:53 Destination: 00:0c:29:00:82:53 (00:0c:29:00:82:53) Source: 00:05:30:01:80:af (00:05:30:01:80:af) Type: IP (0x0800) Frame check sequence: 0xd448e48e (correct) Internet Protocol, Src Addr: 165.227.249.144 (165.227.249.144), Dst Addr: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0000 (0) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3bb2 (correct) Source: 165.227.249.144 (165.227.249.144) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 92 Checksum: 0x0542 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x71C628ABA39E16B5 Responder cookie: 0x5054551CEBEA7231 Next payload: Hash (8) Version: 1.0 Exchange type: Informational (5) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x38255A64 Length: 84 Encrypted payload (56 bytes) 0000 00 0c 29 00 82 53 00 05 30 01 80 af 08 00 45 00 ..)..S..0.....E. 0010 00 70 00 00 00 00 40 11 3b b2 a5 e3 f9 90 a5 e3 .p....@.;....... 0020 f9 73 01 f4 01 f4 00 5c 05 42 71 c6 28 ab a3 9e .s.....\.Bq.(... 0030 16 b5 50 54 55 1c eb ea 72 31 08 10 05 01 38 25 ..PTU...r1....8% 0040 5a 64 00 00 00 54 03 1c 65 0c 29 ed 06 fc 44 17 Zd...T..e.)...D. 0050 05 02 57 02 08 d9 00 cc 27 21 1d 4e a3 1c 2e 99 ..W.....'!.N.... 0060 91 99 cc b7 07 8f 65 78 54 49 5c 3e c5 f7 c9 d6 ......exTI\>.... 0070 90 03 3d 3a 90 e1 71 6f 3b 63 48 b1 06 b6 d4 48 ..=:..qo;cH....H 0080 e4 8e .. Frame 8 (330 bytes on wire, 330 bytes captured) Arrival Time: Oct 26, 2004 13:49:51.244169000 Time delta from previous packet: 2.242898000 seconds Time since reference or first frame: 6.311210000 seconds Frame Number: 8 Packet Length: 330 bytes Capture Length: 330 bytes Ethernet II, Src: 00:0c:29:00:82:53, Dst: 00:05:30:01:80:af Destination: 00:05:30:01:80:af (00:05:30:01:80:af) Source: 00:0c:29:00:82:53 (00:0c:29:00:82:53) Type: IP (0x0800) Frame check sequence: 0xdc620d6d (correct) Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.144 (165.227.249.144) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 312 Identification: 0x017c (380) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf96d (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.144 (165.227.249.144) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 292 Checksum: 0x00eb (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x71C628ABA39E16B5 Responder cookie: 0x5054551CEBEA7231 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xDFBCC464 Length: 284 Encrypted payload (256 bytes) 0000 00 05 30 01 80 af 00 0c 29 00 82 53 08 00 45 00 ..0.....)..S..E. 0010 01 38 01 7c 00 00 80 11 f9 6d a5 e3 f9 73 a5 e3 .8.|.....m...s.. 0020 f9 90 01 f4 01 f4 01 24 00 eb 71 c6 28 ab a3 9e .......$..q.(... 0030 16 b5 50 54 55 1c eb ea 72 31 08 10 20 01 df bc ..PTU...r1.. ... 0040 c4 64 00 00 01 1c 55 fb e0 df ed 31 59 d2 fa 15 .d....U....1Y... 0050 df 5f 6d 00 77 9d c7 b4 86 94 34 f7 63 a0 46 dd ._m.w.....4.c.F. 0060 60 16 2d 21 0e 47 b9 5f e6 1b 29 33 c7 72 65 c2 `.-!.G._..)3.re. 0070 78 5c 2b a7 f5 09 51 ae 23 54 9f 71 f6 13 d0 6e x\+...Q.#T.q...n 0080 9f e2 50 55 ab d5 be 16 8a 6f 9f 94 61 7d 70 ee ..PU.....o..a}p. 0090 85 08 61 09 39 1b 10 86 3f 68 0b 23 90 5a a1 b4 ..a.9...?h.#.Z.. 00a0 a7 59 4e 69 68 15 e4 b9 39 39 fe 85 2a 2a f5 8c .YNih...99..**.. 00b0 f2 2d 73 92 13 57 56 33 b3 83 58 c6 f1 1c 9d 69 .-s..WV3..X....i 00c0 1b 6c 54 a1 1a b5 a0 c2 e3 b0 ec 4c 39 1f 75 0c .lT........L9.u. 00d0 24 db 71 82 8f ac 47 cc e8 f9 15 c3 7f d3 51 aa $.q...G.......Q. 00e0 52 1a 78 e4 7d a9 0e d0 77 d0 27 fb fb 68 0b de R.x.}...w.'..h.. 00f0 88 90 2b 18 f6 ed 89 89 6c 7e a9 aa e6 6e 3c 32 ..+.....l~...n<2 0100 44 0c 4f 46 b1 f4 f2 9e 8e 2b 06 a1 80 df 19 58 D.OF.....+.....X 0110 44 a0 3e 3b 3c 21 df 38 b0 b5 02 c0 9e 03 ac fd D.>;%.y..^ 00a0 7b 8a f0 da f5 b5 bf 9a b8 50 29 e4 0f 8e 42 87 {........P)...B. 00b0 46 c6 24 c7 35 8d 18 f0 5e 2a 52 d8 1c fa e9 15 F.$.5...^*R..... 00c0 9b 28 f1 3c b7 3f 59 88 3c 42 d1 5b a1 fb 82 b9 .(.<.?Y.