Frame 1 (174 bytes on wire, 174 bytes captured) Arrival Time: Mar 2, 2005 13:52:11.910239000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 174 bytes Capture Length: 174 bytes Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:0f:b5:5f:1b:8f Destination: 00:0f:b5:5f:1b:8f (00:0f:b5:5f:1b:8f) Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Type: IP (0x0800) Frame check sequence: 0xd73bd22f (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.100 (165.227.249.100) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 156 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfbaa (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.100 (165.227.249.100) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 136 Checksum: 0x04dc (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xB0B506C7EFF6368E Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 128 Security Association payload Next payload: Vendor ID (13) Length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 44 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 36 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: NONE (0) Length: 44 Vendor ID: Check Point Check Point Product: VPN-1 Version: NG with Application Intelligence R55 0000 00 0f b5 5f 1b 8f 00 0c 29 fc 0c 9f 08 00 45 00 ..._....).....E. 0010 00 9c 00 00 40 00 40 11 fb aa a5 e3 f9 7a a5 e3 ....@.@......z.. 0020 f9 64 01 f4 01 f4 00 88 04 dc b0 b5 06 c7 ef f6 .d.............. 0030 36 8e 00 00 00 00 00 00 00 00 01 10 02 00 00 00 6............... 0040 00 00 00 00 00 80 0d 00 00 38 00 00 00 01 00 00 .........8...... 0050 00 01 00 00 00 2c 01 01 00 01 00 00 00 24 01 01 .....,.......$.. 0060 00 00 80 01 00 05 80 02 00 02 80 03 00 01 80 04 ................ 0070 00 02 80 0b 00 01 00 0c 00 04 00 00 70 80 00 00 ............p... 0080 00 2c f4 ed 19 e0 c1 14 eb 51 6f aa ac 0e e3 7d .,.......Qo....} 0090 af 28 07 b4 38 1f 00 00 00 01 00 00 13 8d 00 00 .(..8........... 00a0 00 00 00 00 00 00 18 80 00 00 d7 3b d2 2f ...........;./ Frame 2 (130 bytes on wire, 130 bytes captured) Arrival Time: Mar 2, 2005 13:52:11.913563000 Time delta from previous packet: 0.003324000 seconds Time since reference or first frame: 0.003324000 seconds Frame Number: 2 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:0f:b5:5f:1b:8f, Dst: 00:0c:29:fc:0c:9f Destination: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Source: 00:0f:b5:5f:1b:8f (00:0f:b5:5f:1b:8f) Type: IP (0x0800) Frame check sequence: 0x7a4315eb (correct) Internet Protocol, Src Addr: 165.227.249.100 (165.227.249.100), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0167 (359) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3a70 (correct) Source: 165.227.249.100 (165.227.249.100) Destination: 165.227.249.122 (165.227.249.122) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 92 Checksum: 0x7a5b (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xB0B506C7EFF6368E Responder cookie: 0x436ABECB7709F466 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 84 Security Association payload Next payload: NONE (0) Length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 44 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 36 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) 0000 00 0c 29 fc 0c 9f 00 0f b5 5f 1b 8f 08 00 45 00 ..)......_....E. 0010 00 70 01 67 00 00 40 11 3a 70 a5 e3 f9 64 a5 e3 .p.g..@.:p...d.. 0020 f9 7a 01 f4 01 f4 00 5c 7a 5b b0 b5 06 c7 ef f6 .z.....\z[...... 0030 36 8e 43 6a be cb 77 09 f4 66 01 10 02 00 00 00 6.Cj..w..f...... 0040 00 00 00 00 00 54 00 00 00 38 00 00 00 01 00 00 .....T...8...... 0050 00 01 00 00 00 2c 01 01 00 01 00 00 00 24 01 01 .....,.......$.. 0060 00 00 80 01 00 05 80 02 00 02 80 03 00 01 80 04 ................ 0070 00 02 80 0b 00 01 00 0c 00 04 00 00 70 80 7a 43 ............p.zC 0080 15 eb .. Frame 3 (230 bytes on wire, 230 bytes captured) Arrival Time: Mar 2, 2005 13:52:11.926420000 Time delta from previous packet: 0.012857000 seconds Time since reference or first frame: 0.016181000 seconds Frame Number: 3 Packet Length: 230 bytes Capture Length: 230 bytes Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:0f:b5:5f:1b:8f Destination: 00:0f:b5:5f:1b:8f (00:0f:b5:5f:1b:8f) Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Type: IP (0x0800) Frame check sequence: 0x616cb422 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.100 (165.227.249.100) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 212 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb72 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.100 (165.227.249.100) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 192 Checksum: 0x3b17 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xB0B506C7EFF6368E Responder cookie: 0x436ABECB7709F466 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 184 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 24 Nonce Data 0000 00 0f b5 5f 1b 8f 00 0c 29 fc 0c 9f 08 00 45 00 ..._....).....E. 0010 00 d4 00 00 40 00 40 11 fb 72 a5 e3 f9 7a a5 e3 ....@.@..r...z.. 0020 f9 64 01 f4 01 f4 00 c0 3b 17 b0 b5 06 c7 ef f6 .d......;....... 0030 36 8e 43 6a be cb 77 09 f4 66 04 10 02 00 00 00 6.Cj..w..f...... 0040 00 00 00 00 00 b8 0a 00 00 84 76 84 be 9e e4 29 ..........v....) 0050 9f 19 4c d9 1c f2 20 4b 1e 0d 78 06 21 32 89 b4 ..L... K..x.!2.. 0060 38 90 42 50 f7 e6 4a c4 9f e8 1a 0c ce bc 7d 2d 8.BP..J.......}- 0070 43 d8 96 68 82 3f d3 2b eb 01 b1 86 f7 ab bf b5 C..h.?.+........ 0080 0a 77 8a 2c b9 4f 27 cb 41 94 3b 2b 56 59 09 1d .w.,.O'.A.;+VY.. 0090 cc 69 04 ed 3d 72 ad cc f7 4e a8 4c be 2a 64 ae .i..=r...N.L.*d. 00a0 74 5a 3a 22 70 01 4d 93 6b 75 fb f1 9a 30 1e 6b tZ:"p.M.ku...0.k 00b0 0a 53 6e 0c 15 ac fe 9f e1 1e 82 9f 18 84 93 cd .Sn............. 00c0 0e 68 29 1a 8a 21 37 34 13 6d 00 00 00 18 20 3c .h)..!74.m.... < 00d0 3c a6 9e c2 c3 4d bc 64 0d cf b2 b6 9e 95 87 bf <....M.d........ 00e0 f0 fc 61 6c b4 22 ..al." Frame 4 (218 bytes on wire, 218 bytes captured) Arrival Time: Mar 2, 2005 13:52:13.265671000 Time delta from previous packet: 1.339251000 seconds Time since reference or first frame: 1.355432000 seconds Frame Number: 4 Packet Length: 218 bytes Capture Length: 218 bytes Ethernet II, Src: 00:0f:b5:5f:1b:8f, Dst: 00:0c:29:fc:0c:9f Destination: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Source: 00:0f:b5:5f:1b:8f (00:0f:b5:5f:1b:8f) Type: IP (0x0800) Frame check sequence: 0x234d8cbe (correct) Internet Protocol, Src Addr: 165.227.249.100 (165.227.249.100), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 200 Identification: 0x0168 (360) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3a17 (correct) Source: 165.227.249.100 (165.227.249.100) Destination: 165.227.249.122 (165.227.249.122) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 180 Checksum: 0x1f80 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xB0B506C7EFF6368E Responder cookie: 0x436ABECB7709F466 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 172 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 12 Nonce Data 0000 00 0c 29 fc 0c 9f 00 0f b5 5f 1b 8f 08 00 45 00 ..)......_....E. 0010 00 c8 01 68 00 00 40 11 3a 17 a5 e3 f9 64 a5 e3 ...h..@.:....d.. 0020 f9 7a 01 f4 01 f4 00 b4 1f 80 b0 b5 06 c7 ef f6 .z.............. 0030 36 8e 43 6a be cb 77 09 f4 66 04 10 02 00 00 00 6.Cj..w..f...... 0040 00 00 00 00 00 ac 0a 00 00 84 60 9d 42 26 42 c3 ..........`.B&B. 0050 ad c4 5e 42 2b 1e 9d b2 ae ae 7f 78 fd 2f c9 6e ..^B+......x./.n 0060 fa 3d 4f 99 72 42 8f 39 f7 90 77 c5 c7 2d 21 72 .=O.rB.9..w..-!r 0070 f0 63 d7 95 18 35 c5 91 51 23 1f e6 07 d5 b4 cb .c...5..Q#...... 0080 5b e0 50 80 98 b4 21 2a a3 d7 e0 68 e7 82 c9 d2 [.P...!*...h.... 0090 ba 52 88 e5 9b ea ff e1 25 00 9d 75 80 34 2a 5b .R......%..u.4*[ 00a0 c8 40 65 be 71 b5 c8 7f 65 e4 3c 80 f5 84 64 e4 .@e.q...e.<...d. 00b0 ca 9a 87 26 15 37 12 f7 8e 25 3d b8 8d a9 0b 5c ...&.7...%=....\ 00c0 c6 d3 9b cc c1 37 61 02 f3 fe 00 00 00 0c da fe .....7a......... 00d0 26 af 41 58 32 15 23 4d 8c be &.AX2.#M.. Frame 5 (114 bytes on wire, 114 bytes captured) Arrival Time: Mar 2, 2005 13:52:13.273998000 Time delta from previous packet: 0.008327000 seconds Time since reference or first frame: 1.363759000 seconds Frame Number: 5 Packet Length: 114 bytes Capture Length: 114 bytes Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:0f:b5:5f:1b:8f Destination: 00:0f:b5:5f:1b:8f (00:0f:b5:5f:1b:8f) Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Type: IP (0x0800) Frame check sequence: 0xeb72eada (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.100 (165.227.249.100) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfbe6 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.100 (165.227.249.100) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 76 Checksum: 0x5b58 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xB0B506C7EFF6368E Responder cookie: 0x436ABECB7709F466 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 68 Encrypted payload (40 bytes) 0000 00 0f b5 5f 1b 8f 00 0c 29 fc 0c 9f 08 00 45 00 ..._....).....E. 0010 00 60 00 00 40 00 40 11 fb e6 a5 e3 f9 7a a5 e3 .`..@.@......z.. 0020 f9 64 01 f4 01 f4 00 4c 5b 58 b0 b5 06 c7 ef f6 .d.....L[X...... 0030 36 8e 43 6a be cb 77 09 f4 66 05 10 02 01 00 00 6.Cj..w..f...... 0040 00 00 00 00 00 44 51 bb 69 fc 50 16 5c 71 a2 c3 .....DQ.i.P.\q.. 0050 d9 05 f8 82 19 3e be 1c 69 9c cb 26 92 94 d5 bc .....>..i..&.... 0060 c5 88 35 3f a2 58 f0 93 43 98 78 03 74 26 eb 72 ..5?.X..C.x.t&.r 0070 ea da .. Frame 6 (114 bytes on wire, 114 bytes captured) Arrival Time: Mar 2, 2005 13:52:14.921345000 Time delta from previous packet: 1.647347000 seconds Time since reference or first frame: 3.011106000 seconds Frame Number: 6 Packet Length: 114 bytes Capture Length: 114 bytes Ethernet II, Src: 00:0f:b5:5f:1b:8f, Dst: 00:0c:29:fc:0c:9f Destination: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Source: 00:0f:b5:5f:1b:8f (00:0f:b5:5f:1b:8f) Type: IP (0x0800) Frame check sequence: 0x0e51e48b (correct) Internet Protocol, Src Addr: 165.227.249.100 (165.227.249.100), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0x0169 (361) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3a7e (correct) Source: 165.227.249.100 (165.227.249.100) Destination: 165.227.249.122 (165.227.249.122) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 76 Checksum: 0x4276 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xB0B506C7EFF6368E Responder cookie: 0x436ABECB7709F466 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 68 Encrypted payload (40 bytes) 0000 00 0c 29 fc 0c 9f 00 0f b5 5f 1b 8f 08 00 45 00 ..)......_....E. 0010 00 60 01 69 00 00 40 11 3a 7e a5 e3 f9 64 a5 e3 .`.i..@.:~...d.. 0020 f9 7a 01 f4 01 f4 00 4c 42 76 b0 b5 06 c7 ef f6 .z.....LBv...... 0030 36 8e 43 6a be cb 77 09 f4 66 05 10 02 01 00 00 6.Cj..w..f...... 0040 00 00 00 00 00 44 2c e8 05 bf 14 dd 46 fe bb dc .....D,.....F... 0050 2f 5a 6b 46 ed e5 32 e3 6f 10 3d 0c 39 d7 81 41 /ZkF..2.o.=.9..A 0060 3c 5c 7d 64 11 a3 31 5d dd 41 d5 ba 0a 98 0e 51 <\}d..1].A.....Q 0070 e4 8b .. Frame 7 (346 bytes on wire, 346 bytes captured) Arrival Time: Mar 2, 2005 13:52:14.933322000 Time delta from previous packet: 0.011977000 seconds Time since reference or first frame: 3.023083000 seconds Frame Number: 7 Packet Length: 346 bytes Capture Length: 346 bytes Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:0f:b5:5f:1b:8f Destination: 00:0f:b5:5f:1b:8f (00:0f:b5:5f:1b:8f) Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Type: IP (0x0800) Frame check sequence: 0x2a1a53dd (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.100 (165.227.249.100) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 328 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfafe (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.100 (165.227.249.100) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 308 Checksum: 0xc3a1 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xB0B506C7EFF6368E Responder cookie: 0x436ABECB7709F466 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xBEC46347 Length: 300 Encrypted payload (272 bytes) 0000 00 0f b5 5f 1b 8f 00 0c 29 fc 0c 9f 08 00 45 00 ..._....).....E. 0010 01 48 00 00 40 00 40 11 fa fe a5 e3 f9 7a a5 e3 .H..@.@......z.. 0020 f9 64 01 f4 01 f4 01 34 c3 a1 b0 b5 06 c7 ef f6 .d.....4........ 0030 36 8e 43 6a be cb 77 09 f4 66 08 10 20 01 be c4 6.Cj..w..f.. ... 0040 63 47 00 00 01 2c 94 f3 46 47 75 25 f6 cb 8f 53 cG...,..FGu%...S 0050 03 f6 ea de 2d cb b8 d7 29 51 99 86 a6 a9 7a 37 ....-...)Q....z7 0060 d3 4c a4 83 b5 0f 2b c9 ea 49 ca 8e 4b cd 83 4f .L....+..I..K..O 0070 63 d8 dc 2d 98 96 9e 79 7d db 70 a8 8f c3 d8 f4 c..-...y}.p..... 0080 70 a5 dc d2 e2 3b 62 eb b2 d1 7f 87 6c b6 ce 92 p....;b.....l... 0090 48 de 11 f2 43 70 72 d1 28 20 ef e7 8b 15 c5 2e H...Cpr.( ...... 00a0 60 47 7c 24 fe cf c2 92 8c c9 92 83 3b e0 04 a5 `G|$........;... 00b0 b6 36 b0 47 b1 2a ff 1b 26 68 00 57 fa 7a de c9 .6.G.*..&h.W.z.. 00c0 55 64 29 9c 95 29 bf 99 38 4e d6 7a a4 5d b5 fa Ud)..)..8N.z.].. 00d0 17 7b e6 43 09 bd 13 2b 0e 4f df 2c ab 83 f9 52 .{.C...+.O.,...R 00e0 93 b2 15 2b b1 ee 79 52 d7 77 d9 b5 59 b8 91 49 ...+..yR.w..Y..I 00f0 d7 c7 70 34 f5 57 59 0f 38 05 da e9 8e a5 65 8e ..p4.WY.8.....e. 0100 3a 7b 48 a0 a9 a1 24 3a d0 8a 64 cf 2f 2d 41 75 :{H...$:..d./-Au 0110 1e 77 87 c5 41 46 49 d1 6a 31 b8 97 83 b5 62 77 .w..AFI.j1....bw 0120 89 d7 7d a2 30 be 3a fe e0 f0 10 29 1e da 5d d0 ..}.0.:....)..]. 0130 b1 4b 78 38 75 f8 73 a3 a1 3f ca 2b 9a cb 73 e7 .Kx8u.s..?.+..s. 0140 67 b9 a4 06 62 a5 69 2a bd 61 d1 0a d9 1f e8 37 g...b.i*.a.....7 0150 e0 fd ab b9 4c 80 2a 1a 53 dd ....L.*.S. Frame 8 (330 bytes on wire, 330 bytes captured) Arrival Time: Mar 2, 2005 13:52:16.275983000 Time delta from previous packet: 1.342661000 seconds Time since reference or first frame: 4.365744000 seconds Frame Number: 8 Packet Length: 330 bytes Capture Length: 330 bytes Ethernet II, Src: 00:0f:b5:5f:1b:8f, Dst: 00:0c:29:fc:0c:9f Destination: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Source: 00:0f:b5:5f:1b:8f (00:0f:b5:5f:1b:8f) Type: IP (0x0800) Frame check sequence: 0x1e4de3de (correct) Internet Protocol, Src Addr: 165.227.249.100 (165.227.249.100), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 312 Identification: 0x016e (366) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x39a1 (correct) Source: 165.227.249.100 (165.227.249.100) Destination: 165.227.249.122 (165.227.249.122) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 292 Checksum: 0xb046 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xB0B506C7EFF6368E Responder cookie: 0x436ABECB7709F466 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xBEC46347 Length: 284 Encrypted payload (256 bytes) 0000 00 0c 29 fc 0c 9f 00 0f b5 5f 1b 8f 08 00 45 00 ..)......_....E. 0010 01 38 01 6e 00 00 40 11 39 a1 a5 e3 f9 64 a5 e3 .8.n..@.9....d.. 0020 f9 7a 01 f4 01 f4 01 24 b0 46 b0 b5 06 c7 ef f6 .z.....$.F...... 0030 36 8e 43 6a be cb 77 09 f4 66 08 10 20 01 be c4 6.Cj..w..f.. ... 0040 63 47 00 00 01 1c 40 d7 e4 1a 8e ee 54 38 c3 78 cG....@.....T8.x 0050 34 24 ac 88 c0 d9 38 dc 0b e0 26 cf b4 d2 7a 5e 4$....8...&...z^ 0060 4a 0c e7 87 e9 cc 18 b8 b8 52 af 35 5c bd f4 f5 J........R.5\... 0070 1c 88 27 17 0c 97 7e 10 05 79 8c 4f 4c 90 8a e3 ..'...~..y.OL... 0080 dd 8b ac 62 37 c0 ae 6f c4 b8 33 04 3d 91 1b 56 ...b7..o..3.=..V 0090 dd a0 58 90 06 4f 4c 15 2c e7 ba 0b 2e f7 01 71 ..X..OL.,......q 00a0 da 49 fb 87 3a be bf c9 02 cf fe 91 bc 41 b2 0a .I..:........A.. 00b0 1c 33 be c2 f4 a0 75 b9 0d da d4 8d 0a b6 7e 5d .3....u.......~] 00c0 f1 51 50 cc a6 df ad fe 40 a8 cc 11 d8 a6 56 84 .QP.....@.....V. 00d0 5b 94 08 37 dd 87 b2 5c 0c 5a bd bc 49 8a e1 66 [..7...\.Z..I..f 00e0 0d b4 2e 87 7e 28 b2 de e9 a1 03 4e 85 3b fd 87 ....~(.....N.;.. 00f0 91 6a 11 be 77 b2 81 52 69 6a a0 62 58 78 31 ec .j..w..Rij.bXx1. 0100 3e cc ef 01 71 a0 76 c4 7f ea a3 93 0b 20 da 1e >...q.v...... .. 0110 c2 cf 79 ce c7 95 ac 31 06 ae bc 15 ff 48 56 5e ..y....1.....HV^ 0120 bd 41 0a 3e 09 09 d9 8f 57 69 46 64 3c 61 87 c9 .A.>....WiFd... Frame 10 (106 bytes on wire, 106 bytes captured) Arrival Time: Mar 2, 2005 13:52:16.393980000 Time delta from previous packet: 0.108153000 seconds Time since reference or first frame: 4.483741000 seconds Frame Number: 10 Packet Length: 106 bytes Capture Length: 106 bytes Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:0f:b5:5f:1b:8f Destination: 00:0f:b5:5f:1b:8f (00:0f:b5:5f:1b:8f) Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Type: IP (0x0800) Frame check sequence: 0x3ea904cc (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.100 (165.227.249.100) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 88 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfbee (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.100 (165.227.249.100) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 68 Checksum: 0x8f2b (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xB0B506C7EFF6368E Responder cookie: 0x436ABECB7709F466 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xBEC46347 Length: 60 Encrypted payload (32 bytes) 0000 00 0f b5 5f 1b 8f 00 0c 29 fc 0c 9f 08 00 45 00 ..._....).....E. 0010 00 58 00 00 40 00 40 11 fb ee a5 e3 f9 7a a5 e3 .X..@.@......z.. 0020 f9 64 01 f4 01 f4 00 44 8f 2b b0 b5 06 c7 ef f6 .d.....D.+...... 0030 36 8e 43 6a be cb 77 09 f4 66 08 10 20 01 be c4 6.Cj..w..f.. ... 0040 63 47 00 00 00 3c 23 39 5b 6e 82 dc 93 fb b3 9f cG...<#9[n...... 0050 d6 73 17 12 66 a6 6a 7c 97 12 2a 97 b4 d2 0e 47 .s..f.j|..*....G 0060 4b a3 ad ec 11 8f 3e a9 04 cc K.....>... Frame 11 (106 bytes on wire, 106 bytes captured) Arrival Time: Mar 2, 2005 13:52:16.495722000 Time delta from previous packet: 0.101742000 seconds Time since reference or first frame: 4.585483000 seconds Frame Number: 11 Packet Length: 106 bytes Capture Length: 106 bytes Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:0f:b5:5f:1b:8f Destination: 00:0f:b5:5f:1b:8f (00:0f:b5:5f:1b:8f) Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Type: IP (0x0800) Frame check sequence: 0x3ea904cc (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.100 (165.227.249.100) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 88 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfbee (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.100 (165.227.249.100) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 68 Checksum: 0x8f2b (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xB0B506C7EFF6368E Responder cookie: 0x436ABECB7709F466 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xBEC46347 Length: 60 Encrypted payload (32 bytes) 0000 00 0f b5 5f 1b 8f 00 0c 29 fc 0c 9f 08 00 45 00 ..._....).....E. 0010 00 58 00 00 40 00 40 11 fb ee a5 e3 f9 7a a5 e3 .X..@.@......z.. 0020 f9 64 01 f4 01 f4 00 44 8f 2b b0 b5 06 c7 ef f6 .d.....D.+...... 0030 36 8e 43 6a be cb 77 09 f4 66 08 10 20 01 be c4 6.Cj..w..f.. ... 0040 63 47 00 00 00 3c 23 39 5b 6e 82 dc 93 fb b3 9f cG...<#9[n...... 0050 d6 73 17 12 66 a6 6a 7c 97 12 2a 97 b4 d2 0e 47 .s..f.j|..*....G 0060 4b a3 ad ec 11 8f 3e a9 04 cc K.....>... Frame 12 (130 bytes on wire, 130 bytes captured) Arrival Time: Mar 2, 2005 13:52:16.607683000 Time delta from previous packet: 0.111961000 seconds Time since reference or first frame: 4.697444000 seconds Frame Number: 12 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:50:fc:84:d2:ec Destination: 00:50:fc:84:d2:ec (00:50:fc:84:d2:ec) Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Type: IP (0x0800) Frame check sequence: 0x4c4ffb79 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.100 (165.227.249.100) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x006c (108) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x7c49 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.100 (165.227.249.100) Encapsulating Security Payload SPI: 0xc3df7ef5 Sequence: 1 Data (84 bytes) 0000 00 50 fc 84 d2 ec 00 0c 29 fc 0c 9f 08 00 45 00 .P......).....E. 0010 00 70 00 6c 00 00 ff 32 7c 49 a5 e3 f9 7a a5 e3 .p.l...2|I...z.. 0020 f9 64 c3 df 7e f5 00 00 00 01 2d a5 63 f7 a6 0d .d..~.....-.c... 0030 dd 7f d8 c7 25 59 ed fc ef 9b ca 00 40 3e da 05 ....%Y......@>.. 0040 eb aa 33 20 4b ba 96 4a e0 05 80 d5 ba a4 92 c4 ..3 K..J........ 0050 d6 23 e2 76 80 bc 52 10 c6 ac 8b 6f 78 f7 81 ec .#.v..R....ox... 0060 4c ce 92 6b df 39 84 d9 e2 5b 88 cf e5 03 b1 50 L..k.9...[.....P 0070 2a 82 d7 31 6b 25 8f 48 96 0d 5b 99 54 2e 4c 4f *..1k%.H..[.T.LO 0080 fb 79 .y Frame 13 (130 bytes on wire, 130 bytes captured) Arrival Time: Mar 2, 2005 13:52:16.608000000 Time delta from previous packet: 0.000317000 seconds Time since reference or first frame: 4.697761000 seconds Frame Number: 13 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:50:fc:84:d2:ec, Dst: 00:0f:b5:5f:1b:8f Destination: 00:0f:b5:5f:1b:8f (00:0f:b5:5f:1b:8f) Source: 00:50:fc:84:d2:ec (00:50:fc:84:d2:ec) Type: IP (0x0800) Frame check sequence: 0xdfc99bae (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.100 (165.227.249.100) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x006c (108) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 254 Protocol: ESP (0x32) Header checksum: 0x7d49 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.100 (165.227.249.100) Encapsulating Security Payload SPI: 0xc3df7ef5 Sequence: 1 Data (84 bytes) 0000 00 0f b5 5f 1b 8f 00 50 fc 84 d2 ec 08 00 45 00 ..._...P......E. 0010 00 70 00 6c 00 00 fe 32 7d 49 a5 e3 f9 7a a5 e3 .p.l...2}I...z.. 0020 f9 64 c3 df 7e f5 00 00 00 01 2d a5 63 f7 a6 0d .d..~.....-.c... 0030 dd 7f d8 c7 25 59 ed fc ef 9b ca 00 40 3e da 05 ....%Y......@>.. 0040 eb aa 33 20 4b ba 96 4a e0 05 80 d5 ba a4 92 c4 ..3 K..J........ 0050 d6 23 e2 76 80 bc 52 10 c6 ac 8b 6f 78 f7 81 ec .#.v..R....ox... 0060 4c ce 92 6b df 39 84 d9 e2 5b 88 cf e5 03 b1 50 L..k.9...[.....P 0070 2a 82 d7 31 6b 25 8f 48 96 0d 5b 99 54 2e df c9 *..1k%.H..[.T... 0080 9b ae .. Frame 14 (130 bytes on wire, 130 bytes captured) Arrival Time: Mar 2, 2005 13:52:17.060242000 Time delta from previous packet: 0.452242000 seconds Time since reference or first frame: 5.150003000 seconds Frame Number: 14 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:50:fc:84:d2:ec Destination: 00:50:fc:84:d2:ec (00:50:fc:84:d2:ec) Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Type: IP (0x0800) Frame check sequence: 0x0615c7ce (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.100 (165.227.249.100) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x006d (109) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x7c48 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.100 (165.227.249.100) Encapsulating Security Payload SPI: 0xc3df7ef5 Sequence: 2 Data (84 bytes) 0000 00 50 fc 84 d2 ec 00 0c 29 fc 0c 9f 08 00 45 00 .P......).....E. 0010 00 70 00 6d 00 00 ff 32 7c 48 a5 e3 f9 7a a5 e3 .p.m...2|H...z.. 0020 f9 64 c3 df 7e f5 00 00 00 02 88 cf e5 03 b1 50 .d..~..........P 0030 2a 82 43 48 7f 71 7c b1 42 04 79 15 55 2d d6 7c *.CH.q|.B.y.U-.| 0040 87 ee 10 d8 51 b5 44 5f 46 c0 dd 15 24 83 ea 54 ....Q.D_F...$..T 0050 d3 ed 97 47 c3 ef d3 c0 bd 80 87 f1 6d 5a c1 bb ...G........mZ.. 0060 d0 9a 40 dc ad 94 ca c3 b9 9b ff 68 bf 3f 4c 92 ..@........h.?L. 0070 f1 2d d2 82 de d1 be b3 75 bb d0 74 d7 3e 06 15 .-......u..t.>.. 0080 c7 ce .. Frame 15 (130 bytes on wire, 130 bytes captured) Arrival Time: Mar 2, 2005 13:52:17.060536000 Time delta from previous packet: 0.000294000 seconds Time since reference or first frame: 5.150297000 seconds Frame Number: 15 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:50:fc:84:d2:ec, Dst: 00:0f:b5:5f:1b:8f Destination: 00:0f:b5:5f:1b:8f (00:0f:b5:5f:1b:8f) Source: 00:50:fc:84:d2:ec (00:50:fc:84:d2:ec) Type: IP (0x0800) Frame check sequence: 0x9593a719 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.100 (165.227.249.100) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x006d (109) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 254 Protocol: ESP (0x32) Header checksum: 0x7d48 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.100 (165.227.249.100) Encapsulating Security Payload SPI: 0xc3df7ef5 Sequence: 2 Data (84 bytes) 0000 00 0f b5 5f 1b 8f 00 50 fc 84 d2 ec 08 00 45 00 ..._...P......E. 0010 00 70 00 6d 00 00 fe 32 7d 48 a5 e3 f9 7a a5 e3 .p.m...2}H...z.. 0020 f9 64 c3 df 7e f5 00 00 00 02 88 cf e5 03 b1 50 .d..~..........P 0030 2a 82 43 48 7f 71 7c b1 42 04 79 15 55 2d d6 7c *.CH.q|.B.y.U-.| 0040 87 ee 10 d8 51 b5 44 5f 46 c0 dd 15 24 83 ea 54 ....Q.D_F...$..T 0050 d3 ed 97 47 c3 ef d3 c0 bd 80 87 f1 6d 5a c1 bb ...G........mZ.. 0060 d0 9a 40 dc ad 94 ca c3 b9 9b ff 68 bf 3f 4c 92 ..@........h.?L. 0070 f1 2d d2 82 de d1 be b3 75 bb d0 74 d7 3e 95 93 .-......u..t.>.. 0080 a7 19 .. Frame 16 (130 bytes on wire, 130 bytes captured) Arrival Time: Mar 2, 2005 13:52:17.953963000 Time delta from previous packet: 0.893427000 seconds Time since reference or first frame: 6.043724000 seconds Frame Number: 16 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:0f:b5:5f:1b:8f, Dst: 00:0c:29:fc:0c:9f Destination: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Source: 00:0f:b5:5f:1b:8f (00:0f:b5:5f:1b:8f) Type: IP (0x0800) Frame check sequence: 0x96015529 (correct) Internet Protocol, Src Addr: 165.227.249.100 (165.227.249.100), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x2abc (10940) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 30 Protocol: ESP (0x32) Header checksum: 0x32fa (correct) Source: 165.227.249.100 (165.227.249.100) Destination: 165.227.249.122 (165.227.249.122) Encapsulating Security Payload SPI: 0xc0644e5a Sequence: 1 Data (84 bytes) 0000 00 0c 29 fc 0c 9f 00 0f b5 5f 1b 8f 08 00 45 00 ..)......_....E. 0010 00 70 2a bc 00 00 1e 32 32 fa a5 e3 f9 64 a5 e3 .p*....22....d.. 0020 f9 7a c0 64 4e 5a 00 00 00 01 37 a1 91 8f 77 ac .z.dNZ....7...w. 0030 31 e7 4b 53 1d 50 da 22 b5 c3 30 e9 c0 03 20 a8 1.KS.P."..0... . 0040 83 70 9e 94 64 c9 7f 6d cb f3 ea 61 4e da 2e 0e .p..d..m...aN... 0050 f5 b9 af de 0a b3 2a bc 9d f2 79 28 5f 92 e7 2f ......*...y(_../ 0060 f1 04 a2 34 57 c5 81 f9 df 0d 57 cf e2 55 e1 9d ...4W.....W..U.. 0070 f1 14 7f a8 78 7c 41 d2 ac ec ee 05 2b b4 96 01 ....x|A.....+... 0080 55 29 U) Frame 17 (130 bytes on wire, 130 bytes captured) Arrival Time: Mar 2, 2005 13:52:17.955096000 Time delta from previous packet: 0.001133000 seconds Time since reference or first frame: 6.044857000 seconds Frame Number: 17 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:0f:b5:5f:1b:8f, Dst: 00:0c:29:fc:0c:9f Destination: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Source: 00:0f:b5:5f:1b:8f (00:0f:b5:5f:1b:8f) Type: IP (0x0800) Frame check sequence: 0xb9910b9f (correct) Internet Protocol, Src Addr: 165.227.249.100 (165.227.249.100), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x7a18 (31256) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 30 Protocol: ESP (0x32) Header checksum: 0xe39d (correct) Source: 165.227.249.100 (165.227.249.100) Destination: 165.227.249.122 (165.227.249.122) Encapsulating Security Payload SPI: 0xc0644e5a Sequence: 2 Data (84 bytes) 0000 00 0c 29 fc 0c 9f 00 0f b5 5f 1b 8f 08 00 45 00 ..)......_....E. 0010 00 70 7a 18 00 00 1e 32 e3 9d a5 e3 f9 64 a5 e3 .pz....2.....d.. 0020 f9 7a c0 64 4e 5a 00 00 00 02 57 cf e2 55 e1 9d .z.dNZ....W..U.. 0030 f1 14 7b 20 1a 19 cc f6 65 de 45 12 8c 28 a3 89 ..{ ....e.E..(.. 0040 a3 b4 1f d8 df e0 0a 8b 4b 04 39 29 2e 90 c4 f8 ........K.9).... 0050 7e 4c 50 a5 b2 b5 f8 c3 40 f1 60 f0 6c 54 22 d6 ~LP.....@.`.lT". 0060 7d c3 6d dd 08 90 22 62 2b 5d f5 7b c0 8a 4d 8c }.m..."b+].{..M. 0070 f3 cd 7f 5f 30 de 7e 42 26 a3 6c 0e e3 6b b9 91 ..._0.~B&.l..k.. 0080 0b 9f .. Frame 18 (130 bytes on wire, 130 bytes captured) Arrival Time: Mar 2, 2005 13:52:18.082810000 Time delta from previous packet: 0.127714000 seconds Time since reference or first frame: 6.172571000 seconds Frame Number: 18 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:50:fc:84:d2:ec Destination: 00:50:fc:84:d2:ec (00:50:fc:84:d2:ec) Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Type: IP (0x0800) Frame check sequence: 0xbb08d9b4 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.100 (165.227.249.100) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x006e (110) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x7c47 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.100 (165.227.249.100) Encapsulating Security Payload SPI: 0xc3df7ef5 Sequence: 3 Data (84 bytes) 0000 00 50 fc 84 d2 ec 00 0c 29 fc 0c 9f 08 00 45 00 .P......).....E. 0010 00 70 00 6e 00 00 ff 32 7c 47 a5 e3 f9 7a a5 e3 .p.n...2|G...z.. 0020 f9 64 c3 df 7e f5 00 00 00 03 ff 68 bf 3f 4c 92 .d..~......h.?L. 0030 f1 2d dd 69 34 cd e8 23 54 9f 40 4b ea 10 da 6c .-.i4..#T.@K...l 0040 6d 63 27 03 86 22 9e 03 76 c7 d3 cd ef 19 04 48 mc'.."..v......H 0050 a0 aa 8a d6 fd 87 1a 8f ec 38 20 15 51 ef d9 07 .........8 .Q... 0060 82 ec 52 1a cb bf a0 37 39 16 65 b3 33 68 72 ab ..R....79.e.3hr. 0070 b0 f5 79 b5 11 35 cb c5 e8 9f 07 e3 db 9c bb 08 ..y..5.......... 0080 d9 b4 .. Frame 19 (130 bytes on wire, 130 bytes captured) Arrival Time: Mar 2, 2005 13:52:18.083046000 Time delta from previous packet: 0.000236000 seconds Time since reference or first frame: 6.172807000 seconds Frame Number: 19 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:50:fc:84:d2:ec, Dst: 00:0f:b5:5f:1b:8f Destination: 00:0f:b5:5f:1b:8f (00:0f:b5:5f:1b:8f) Source: 00:50:fc:84:d2:ec (00:50:fc:84:d2:ec) Type: IP (0x0800) Frame check sequence: 0x288eb963 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.100 (165.227.249.100) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x006e (110) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 254 Protocol: ESP (0x32) Header checksum: 0x7d47 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.100 (165.227.249.100) Encapsulating Security Payload SPI: 0xc3df7ef5 Sequence: 3 Data (84 bytes) 0000 00 0f b5 5f 1b 8f 00 50 fc 84 d2 ec 08 00 45 00 ..._...P......E. 0010 00 70 00 6e 00 00 fe 32 7d 47 a5 e3 f9 7a a5 e3 .p.n...2}G...z.. 0020 f9 64 c3 df 7e f5 00 00 00 03 ff 68 bf 3f 4c 92 .d..~......h.?L. 0030 f1 2d dd 69 34 cd e8 23 54 9f 40 4b ea 10 da 6c .-.i4..#T.@K...l 0040 6d 63 27 03 86 22 9e 03 76 c7 d3 cd ef 19 04 48 mc'.."..v......H 0050 a0 aa 8a d6 fd 87 1a 8f ec 38 20 15 51 ef d9 07 .........8 .Q... 0060 82 ec 52 1a cb bf a0 37 39 16 65 b3 33 68 72 ab ..R....79.e.3hr. 0070 b0 f5 79 b5 11 35 cb c5 e8 9f 07 e3 db 9c 28 8e ..y..5........(. 0080 b9 63 .c Frame 20 (130 bytes on wire, 130 bytes captured) Arrival Time: Mar 2, 2005 13:52:18.086709000 Time delta from previous packet: 0.003663000 seconds Time since reference or first frame: 6.176470000 seconds Frame Number: 20 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:0f:b5:5f:1b:8f, Dst: 00:0c:29:fc:0c:9f Destination: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Source: 00:0f:b5:5f:1b:8f (00:0f:b5:5f:1b:8f) Type: IP (0x0800) Frame check sequence: 0x3683a07a (correct) Internet Protocol, Src Addr: 165.227.249.100 (165.227.249.100), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x129c (4764) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 30 Protocol: ESP (0x32) Header checksum: 0x4b1a (correct) Source: 165.227.249.100 (165.227.249.100) Destination: 165.227.249.122 (165.227.249.122) Encapsulating Security Payload SPI: 0xc0644e5a Sequence: 3 Data (84 bytes) 0000 00 0c 29 fc 0c 9f 00 0f b5 5f 1b 8f 08 00 45 00 ..)......_....E. 0010 00 70 12 9c 00 00 1e 32 4b 1a a5 e3 f9 64 a5 e3 .p.....2K....d.. 0020 f9 7a c0 64 4e 5a 00 00 00 03 f5 7b c0 8a 4d 8c .z.dNZ.....{..M. 0030 f3 cd 70 5d bc df 1f ca 8f b4 3b 07 ab 4a c6 18 ..p]......;..J.. 0040 35 5c 68 f8 69 5b 40 ee bd a1 bd 83 4b a1 1a 9d 5\h.i[@.....K... 0050 08 89 dc 30 13 f2 ea cf ca a5 0d c5 a3 d6 f1 06 ...0............ 0060 51 47 7a d5 6a 47 c5 bf ca 5e 2b 71 74 95 9d ef QGz.jG...^+qt... 0070 47 3c b8 7d a1 c8 9a d6 32 81 19 8f 54 3f 36 83 G<.}....2...T?6. 0080 a0 7a .z Frame 21 (130 bytes on wire, 130 bytes captured) Arrival Time: Mar 2, 2005 13:52:19.059266000 Time delta from previous packet: 0.972557000 seconds Time since reference or first frame: 7.149027000 seconds Frame Number: 21 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:50:fc:84:d2:ec Destination: 00:50:fc:84:d2:ec (00:50:fc:84:d2:ec) Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Type: IP (0x0800) Frame check sequence: 0x9e2f0a41 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.100 (165.227.249.100) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x006f (111) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x7c46 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.100 (165.227.249.100) Encapsulating Security Payload SPI: 0xc3df7ef5 Sequence: 4 Data (84 bytes) 0000 00 50 fc 84 d2 ec 00 0c 29 fc 0c 9f 08 00 45 00 .P......).....E. 0010 00 70 00 6f 00 00 ff 32 7c 46 a5 e3 f9 7a a5 e3 .p.o...2|F...z.. 0020 f9 64 c3 df 7e f5 00 00 00 04 65 b3 33 68 72 ab .d..~.....e.3hr. 0030 b0 f5 fa 84 f1 9b 62 4a 25 97 c8 e8 bb 0e 87 ce ......bJ%....... 0040 f6 d8 0b 6e 16 33 4a 1d 7f 6a 14 0d a7 c1 28 7a ...n.3J..j....(z 0050 65 82 c7 47 f7 be d1 5b bc 85 40 c5 9e b3 75 7f e..G...[..@...u. 0060 6d 4f de 48 94 e4 c9 59 da 41 2f c9 60 54 6a ae mO.H...Y.A/.`Tj. 0070 35 01 59 21 c3 37 16 80 1f 01 fc ec f7 19 9e 2f 5.Y!.7........./ 0080 0a 41 .A Frame 22 (130 bytes on wire, 130 bytes captured) Arrival Time: Mar 2, 2005 13:52:19.059463000 Time delta from previous packet: 0.000197000 seconds Time since reference or first frame: 7.149224000 seconds Frame Number: 22 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:50:fc:84:d2:ec, Dst: 00:0f:b5:5f:1b:8f Destination: 00:0f:b5:5f:1b:8f (00:0f:b5:5f:1b:8f) Source: 00:50:fc:84:d2:ec (00:50:fc:84:d2:ec) Type: IP (0x0800) Frame check sequence: 0x0da96a96 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.100 (165.227.249.100) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x006f (111) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 254 Protocol: ESP (0x32) Header checksum: 0x7d46 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.100 (165.227.249.100) Encapsulating Security Payload SPI: 0xc3df7ef5 Sequence: 4 Data (84 bytes) 0000 00 0f b5 5f 1b 8f 00 50 fc 84 d2 ec 08 00 45 00 ..._...P......E. 0010 00 70 00 6f 00 00 fe 32 7d 46 a5 e3 f9 7a a5 e3 .p.o...2}F...z.. 0020 f9 64 c3 df 7e f5 00 00 00 04 65 b3 33 68 72 ab .d..~.....e.3hr. 0030 b0 f5 fa 84 f1 9b 62 4a 25 97 c8 e8 bb 0e 87 ce ......bJ%....... 0040 f6 d8 0b 6e 16 33 4a 1d 7f 6a 14 0d a7 c1 28 7a ...n.3J..j....(z 0050 65 82 c7 47 f7 be d1 5b bc 85 40 c5 9e b3 75 7f e..G...[..@...u. 0060 6d 4f de 48 94 e4 c9 59 da 41 2f c9 60 54 6a ae mO.H...Y.A/.`Tj. 0070 35 01 59 21 c3 37 16 80 1f 01 fc ec f7 19 0d a9 5.Y!.7.......... 0080 6a 96 j. Frame 23 (130 bytes on wire, 130 bytes captured) Arrival Time: Mar 2, 2005 13:52:19.063131000 Time delta from previous packet: 0.003668000 seconds Time since reference or first frame: 7.152892000 seconds Frame Number: 23 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:0f:b5:5f:1b:8f, Dst: 00:0c:29:fc:0c:9f Destination: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Source: 00:0f:b5:5f:1b:8f (00:0f:b5:5f:1b:8f) Type: IP (0x0800) Frame check sequence: 0xf032efe9 (correct) Internet Protocol, Src Addr: 165.227.249.100 (165.227.249.100), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x3127 (12583) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 30 Protocol: ESP (0x32) Header checksum: 0x2c8f (correct) Source: 165.227.249.100 (165.227.249.100) Destination: 165.227.249.122 (165.227.249.122) Encapsulating Security Payload SPI: 0xc0644e5a Sequence: 4 Data (84 bytes) 0000 00 0c 29 fc 0c 9f 00 0f b5 5f 1b 8f 08 00 45 00 ..)......_....E. 0010 00 70 31 27 00 00 1e 32 2c 8f a5 e3 f9 64 a5 e3 .p1'...2,....d.. 0020 f9 7a c0 64 4e 5a 00 00 00 04 2b 71 74 95 9d ef .z.dNZ....+qt... 0030 47 3c e1 9a 24 9a 7a 52 ad 69 c3 76 10 48 f3 5a G<..$.zR.i.v.H.Z 0040 a7 bb 8b b9 9c c7 4c 8e 8b 02 4b 44 b9 2b 49 e1 ......L...KD.+I. 0050 06 e9 1d a7 1a a5 ac 80 7f 45 77 40 5f 7e d7 77 .........Ew@_~.w 0060 05 24 4e a0 60 7d 0b 80 01 e4 99 2a 8b 90 e5 29 .$N.`}.....*...) 0070 73 e0 f9 8d 33 78 64 7e b1 ab 09 42 e7 60 f0 32 s...3xd~...B.`.2 0080 ef e9 ..