Frame 1 (174 bytes on wire, 174 bytes captured) Arrival Time: Jan 30, 2005 15:37:11.762210000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 174 bytes Capture Length: 174 bytes Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:e0:4c:69:0a:78 Destination: 00:e0:4c:69:0a:78 (00:e0:4c:69:0a:78) Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Type: IP (0x0800) Frame check sequence: 0x4a347033 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.102 (165.227.249.102) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 156 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfba8 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.102 (165.227.249.102) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 136 Checksum: 0x0e84 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x0023A8A4E2C348CC Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 128 Security Association payload Next payload: Vendor ID (13) Length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 44 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 36 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: NONE (0) Length: 44 Vendor ID: Check Point Check Point Product: VPN-1 Version: NG with Application Intelligence R55 0000 00 e0 4c 69 0a 78 00 0c 29 fc 0c 9f 08 00 45 00 ..Li.x..).....E. 0010 00 9c 00 00 40 00 40 11 fb a8 a5 e3 f9 7a a5 e3 ....@.@......z.. 0020 f9 66 01 f4 01 f4 00 88 0e 84 00 23 a8 a4 e2 c3 .f.........#.... 0030 48 cc 00 00 00 00 00 00 00 00 01 10 02 00 00 00 H............... 0040 00 00 00 00 00 80 0d 00 00 38 00 00 00 01 00 00 .........8...... 0050 00 01 00 00 00 2c 01 01 00 01 00 00 00 24 01 01 .....,.......$.. 0060 00 00 80 01 00 05 80 02 00 02 80 03 00 01 80 04 ................ 0070 00 02 80 0b 00 01 00 0c 00 04 00 00 70 80 00 00 ............p... 0080 00 2c f4 ed 19 e0 c1 14 eb 51 6f aa ac 0e e3 7d .,.......Qo....} 0090 af 28 07 b4 38 1f 00 00 00 01 00 00 13 8d 00 00 .(..8........... 00a0 00 00 00 00 00 00 18 80 00 00 4a 34 70 33 ..........J4p3 Frame 2 (170 bytes on wire, 170 bytes captured) Arrival Time: Jan 30, 2005 15:37:11.767383000 Time delta from previous packet: 0.005173000 seconds Time since reference or first frame: 0.005173000 seconds Frame Number: 2 Packet Length: 170 bytes Capture Length: 170 bytes Ethernet II, Src: 00:e0:4c:69:0a:78, Dst: 00:0c:29:fc:0c:9f Destination: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Source: 00:e0:4c:69:0a:78 (00:e0:4c:69:0a:78) Type: IP (0x0800) Frame check sequence: 0x4acba65b (correct) Internet Protocol, Src Addr: 165.227.249.102 (165.227.249.102), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 152 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfbac (correct) Source: 165.227.249.102 (165.227.249.102) Destination: 165.227.249.122 (165.227.249.122) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 132 Checksum: 0x943f (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x0023A8A4E2C348CC Responder cookie: 0xBF08DF61DFF8D7D8 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 124 Security Association payload Next payload: Vendor ID (13) Length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 44 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 36 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-dpd-00.txt Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: unknown vendor ID: 0x648982785BEDBDD66A6DD356F0E160FD 0000 00 0c 29 fc 0c 9f 00 e0 4c 69 0a 78 08 00 45 00 ..).....Li.x..E. 0010 00 98 00 00 40 00 40 11 fb ac a5 e3 f9 66 a5 e3 ....@.@......f.. 0020 f9 7a 01 f4 01 f4 00 84 94 3f 00 23 a8 a4 e2 c3 .z.......?.#.... 0030 48 cc bf 08 df 61 df f8 d7 d8 01 10 02 00 00 00 H....a.......... 0040 00 00 00 00 00 7c 0d 00 00 38 00 00 00 01 00 00 .....|...8...... 0050 00 01 00 00 00 2c 01 01 00 01 00 00 00 24 01 01 .....,.......$.. 0060 00 00 80 01 00 05 80 02 00 02 80 03 00 01 80 04 ................ 0070 00 02 80 0b 00 01 00 0c 00 04 00 00 70 80 0d 00 ............p... 0080 00 14 af ca d7 13 68 a1 f1 c9 6b 86 96 fc 77 57 ......h...k...wW 0090 01 00 00 00 00 14 64 89 82 78 5b ed bd d6 6a 6d ......d..x[...jm 00a0 d3 56 f0 e1 60 fd 4a cb a6 5b .V..`.J..[ Frame 3 (230 bytes on wire, 230 bytes captured) Arrival Time: Jan 30, 2005 15:37:11.782510000 Time delta from previous packet: 0.015127000 seconds Time since reference or first frame: 0.020300000 seconds Frame Number: 3 Packet Length: 230 bytes Capture Length: 230 bytes Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:e0:4c:69:0a:78 Destination: 00:e0:4c:69:0a:78 (00:e0:4c:69:0a:78) Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Type: IP (0x0800) Frame check sequence: 0x68b6a74f (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.102 (165.227.249.102) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 212 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb70 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.102 (165.227.249.102) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 192 Checksum: 0x9582 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x0023A8A4E2C348CC Responder cookie: 0xBF08DF61DFF8D7D8 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 184 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 24 Nonce Data 0000 00 e0 4c 69 0a 78 00 0c 29 fc 0c 9f 08 00 45 00 ..Li.x..).....E. 0010 00 d4 00 00 40 00 40 11 fb 70 a5 e3 f9 7a a5 e3 ....@.@..p...z.. 0020 f9 66 01 f4 01 f4 00 c0 95 82 00 23 a8 a4 e2 c3 .f.........#.... 0030 48 cc bf 08 df 61 df f8 d7 d8 04 10 02 00 00 00 H....a.......... 0040 00 00 00 00 00 b8 0a 00 00 84 f1 bf db b8 07 5e ...............^ 0050 be 62 62 79 99 9d c5 33 20 02 4c 47 5d 20 2d fa .bby...3 .LG] -. 0060 13 76 b6 23 64 ea 71 88 5d 68 1b a6 8e 73 a6 74 .v.#d.q.]h...s.t 0070 4d 51 ed 2f fc 6c 0f f6 ee 73 ee 8f 07 5f 0a 3d MQ./.l...s..._.= 0080 49 42 37 3f cd 7a f6 2e ed 42 60 7b 40 68 03 30 IB7?.z...B`{@h.0 0090 55 8b e9 78 57 55 d8 87 08 89 a0 64 81 66 5d 6d U..xWU.....d.f]m 00a0 42 53 c3 d6 1e cf 0e 33 36 97 b9 d6 f1 17 f8 47 BS.....36......G 00b0 a6 6c 02 0b ad 61 4d d6 7e df c6 be ec fb 9c fa .l...aM.~....... 00c0 14 12 9e 2b 84 d2 f9 2e b0 eb 00 00 00 18 b9 0b ...+............ 00d0 4c c0 45 a5 15 40 ec f0 ea 59 af 93 97 d1 0f 05 L.E..@...Y...... 00e0 5e fe 68 b6 a7 4f ^.h..O Frame 4 (218 bytes on wire, 218 bytes captured) Arrival Time: Jan 30, 2005 15:37:11.790990000 Time delta from previous packet: 0.008480000 seconds Time since reference or first frame: 0.028780000 seconds Frame Number: 4 Packet Length: 218 bytes Capture Length: 218 bytes Ethernet II, Src: 00:e0:4c:69:0a:78, Dst: 00:0c:29:fc:0c:9f Destination: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Source: 00:e0:4c:69:0a:78 (00:e0:4c:69:0a:78) Type: IP (0x0800) Frame check sequence: 0xdd1a9d84 (correct) Internet Protocol, Src Addr: 165.227.249.102 (165.227.249.102), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 200 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb7c (correct) Source: 165.227.249.102 (165.227.249.102) Destination: 165.227.249.122 (165.227.249.122) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 180 Checksum: 0xa62b (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x0023A8A4E2C348CC Responder cookie: 0xBF08DF61DFF8D7D8 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 172 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 12 Nonce Data 0000 00 0c 29 fc 0c 9f 00 e0 4c 69 0a 78 08 00 45 00 ..).....Li.x..E. 0010 00 c8 00 00 40 00 40 11 fb 7c a5 e3 f9 66 a5 e3 ....@.@..|...f.. 0020 f9 7a 01 f4 01 f4 00 b4 a6 2b 00 23 a8 a4 e2 c3 .z.......+.#.... 0030 48 cc bf 08 df 61 df f8 d7 d8 04 10 02 00 00 00 H....a.......... 0040 00 00 00 00 00 ac 0a 00 00 84 5f 29 fb e3 ed 86 .........._).... 0050 35 74 fb 76 d3 18 f3 89 20 69 76 ad ca c4 52 dd 5t.v.... iv...R. 0060 0e 64 e3 3e 79 96 8d ae 36 08 22 e1 3d bf fc 9a .d.>y...6.".=... 0070 f1 65 01 ba 32 51 9e d5 0d 6e 5c 8a 96 e5 b9 59 .e..2Q...n\....Y 0080 9e ba 0d 73 40 88 2c f5 b7 9a 7a 7c 37 ec 80 1a ...s@.,...z|7... 0090 86 cc f0 32 94 58 d9 d4 91 8f 52 f9 9f 31 d2 1c ...2.X....R..1.. 00a0 a5 e7 48 f8 60 e5 46 3d a9 b8 27 32 5c 07 4f 4e ..H.`.F=..'2\.ON 00b0 74 c4 86 62 9d ce 2d 00 80 0d bc db 14 eb 9a 02 t..b..-......... 00c0 eb 01 a5 5c 06 41 64 78 85 d8 00 00 00 0c 8d a6 ...\.Adx........ 00d0 9f 86 8c 43 9d 26 dd 1a 9d 84 ...C.&.... Frame 5 (114 bytes on wire, 114 bytes captured) Arrival Time: Jan 30, 2005 15:37:11.802144000 Time delta from previous packet: 0.011154000 seconds Time since reference or first frame: 0.039934000 seconds Frame Number: 5 Packet Length: 114 bytes Capture Length: 114 bytes Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:e0:4c:69:0a:78 Destination: 00:e0:4c:69:0a:78 (00:e0:4c:69:0a:78) Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Type: IP (0x0800) Frame check sequence: 0x3d0d530c (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.102 (165.227.249.102) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfbe4 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.102 (165.227.249.102) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 76 Checksum: 0xff56 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x0023A8A4E2C348CC Responder cookie: 0xBF08DF61DFF8D7D8 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 68 Encrypted payload (40 bytes) 0000 00 e0 4c 69 0a 78 00 0c 29 fc 0c 9f 08 00 45 00 ..Li.x..).....E. 0010 00 60 00 00 40 00 40 11 fb e4 a5 e3 f9 7a a5 e3 .`..@.@......z.. 0020 f9 66 01 f4 01 f4 00 4c ff 56 00 23 a8 a4 e2 c3 .f.....L.V.#.... 0030 48 cc bf 08 df 61 df f8 d7 d8 05 10 02 01 00 00 H....a.......... 0040 00 00 00 00 00 44 f2 1a 71 26 0d 17 be d5 72 4b .....D..q&....rK 0050 22 ba ed 57 3f d9 f9 4e ef 46 11 7f 06 3d ab bd "..W?..N.F...=.. 0060 81 04 da 26 3f 08 8e a9 69 8f 7b e5 df be 3d 0d ...&?...i.{...=. 0070 53 0c S. Frame 6 (138 bytes on wire, 138 bytes captured) Arrival Time: Jan 30, 2005 15:37:11.809444000 Time delta from previous packet: 0.007300000 seconds Time since reference or first frame: 0.047234000 seconds Frame Number: 6 Packet Length: 138 bytes Capture Length: 138 bytes Ethernet II, Src: 00:e0:4c:69:0a:78, Dst: 00:0c:29:fc:0c:9f Destination: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Source: 00:e0:4c:69:0a:78 (00:e0:4c:69:0a:78) Type: IP (0x0800) Frame check sequence: 0xb0793896 (correct) Internet Protocol, Src Addr: 165.227.249.102 (165.227.249.102), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfbcc (correct) Source: 165.227.249.102 (165.227.249.102) Destination: 165.227.249.122 (165.227.249.122) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 100 Checksum: 0x4107 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x0023A8A4E2C348CC Responder cookie: 0xBF08DF61DFF8D7D8 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 92 Encrypted payload (64 bytes) 0000 00 0c 29 fc 0c 9f 00 e0 4c 69 0a 78 08 00 45 00 ..).....Li.x..E. 0010 00 78 00 00 40 00 40 11 fb cc a5 e3 f9 66 a5 e3 .x..@.@......f.. 0020 f9 7a 01 f4 01 f4 00 64 41 07 00 23 a8 a4 e2 c3 .z.....dA..#.... 0030 48 cc bf 08 df 61 df f8 d7 d8 05 10 02 01 00 00 H....a.......... 0040 00 00 00 00 00 5c 13 e1 a7 d3 57 d8 bb 78 96 ad .....\....W..x.. 0050 53 be 8a 7f 1d 4a 0e f8 15 33 22 5e ea b3 4e 35 S....J...3"^..N5 0060 c7 f0 c3 e8 21 82 99 1e eb 89 8a b1 63 41 be 4a ....!.......cA.J 0070 32 cd cb ba de 07 d3 0d e8 f1 34 99 a2 06 e3 8c 2.........4..... 0080 04 f8 c1 03 71 e5 b0 79 38 96 ....q..y8. Frame 7 (346 bytes on wire, 346 bytes captured) Arrival Time: Jan 30, 2005 15:37:11.848564000 Time delta from previous packet: 0.039120000 seconds Time since reference or first frame: 0.086354000 seconds Frame Number: 7 Packet Length: 346 bytes Capture Length: 346 bytes Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:e0:4c:69:0a:78 Destination: 00:e0:4c:69:0a:78 (00:e0:4c:69:0a:78) Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Type: IP (0x0800) Frame check sequence: 0x3690f26b (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.102 (165.227.249.102) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 328 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfafc (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.102 (165.227.249.102) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 308 Checksum: 0x9980 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x0023A8A4E2C348CC Responder cookie: 0xBF08DF61DFF8D7D8 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x5B8202C1 Length: 300 Encrypted payload (272 bytes) 0000 00 e0 4c 69 0a 78 00 0c 29 fc 0c 9f 08 00 45 00 ..Li.x..).....E. 0010 01 48 00 00 40 00 40 11 fa fc a5 e3 f9 7a a5 e3 .H..@.@......z.. 0020 f9 66 01 f4 01 f4 01 34 99 80 00 23 a8 a4 e2 c3 .f.....4...#.... 0030 48 cc bf 08 df 61 df f8 d7 d8 08 10 20 01 5b 82 H....a...... .[. 0040 02 c1 00 00 01 2c 0e b0 f6 54 b0 e6 e3 d8 f4 18 .....,...T...... 0050 11 a8 0d f9 38 4b 55 c7 c7 c7 bb 80 42 37 db 0a ....8KU.....B7.. 0060 83 0f 4f 76 06 f6 70 5a 98 98 44 14 71 6b cf e0 ..Ov..pZ..D.qk.. 0070 1d c5 e8 a5 84 8a 65 0c 72 c4 b6 ea 05 50 85 ca ......e.r....P.. 0080 b8 05 58 9e 3e cb 9e 71 30 77 c7 ad 8a c3 f3 49 ..X.>..q0w.....I 0090 66 19 49 d7 8a 42 da 71 5d fa f2 4f 93 37 72 23 f.I..B.q]..O.7r# 00a0 fc 6f 6a 38 24 c2 1c 46 f0 2f 14 24 fb 0f db 00 .oj8$..F./.$.... 00b0 94 4c 80 2d d6 c9 72 c8 99 5b c6 a5 91 63 14 45 .L.-..r..[...c.E 00c0 58 8f 90 db 33 83 10 52 38 e4 f1 b2 e1 80 74 4c X...3..R8.....tL 00d0 5d 52 41 d1 0c 24 cf bf ff a1 72 0c dd 12 ac 1c ]RA..$....r..... 00e0 f5 e2 b0 5a 81 34 b0 25 f6 a1 e6 a3 ca 77 bb 49 ...Z.4.%.....w.I 00f0 65 23 05 dd b8 d8 9c 73 7d 60 fe 18 92 e9 5a a1 e#.....s}`....Z. 0100 d1 45 80 07 e6 b2 aa 37 42 c6 ce 51 9f 38 66 25 .E.....7B..Q.8f% 0110 fc 6d 71 c8 b1 f5 32 09 f0 19 c7 06 3e ca 05 3f .mq...2.....>..? 0120 74 b2 7d a2 29 43 cb a0 c1 15 9f b1 13 36 73 47 t.}.)C.......6sG 0130 0e f2 43 10 78 5a 97 43 1c 7c 00 9e ea 03 94 ea ..C.xZ.C.|...... 0140 f6 d2 e1 94 b3 a8 c4 96 8c 6a a8 cd 0d 23 1b f2 .........j...#.. 0150 f5 7b 43 15 51 4b 36 90 f2 6b .{C.QK6..k Frame 8 (330 bytes on wire, 330 bytes captured) Arrival Time: Jan 30, 2005 15:37:11.860286000 Time delta from previous packet: 0.011722000 seconds Time since reference or first frame: 0.098076000 seconds Frame Number: 8 Packet Length: 330 bytes Capture Length: 330 bytes Ethernet II, Src: 00:e0:4c:69:0a:78, Dst: 00:0c:29:fc:0c:9f Destination: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Source: 00:e0:4c:69:0a:78 (00:e0:4c:69:0a:78) Type: IP (0x0800) Frame check sequence: 0x0c509158 (correct) Internet Protocol, Src Addr: 165.227.249.102 (165.227.249.102), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 312 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb0c (correct) Source: 165.227.249.102 (165.227.249.102) Destination: 165.227.249.122 (165.227.249.122) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 292 Checksum: 0xcbb3 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x0023A8A4E2C348CC Responder cookie: 0xBF08DF61DFF8D7D8 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x5B8202C1 Length: 284 Encrypted payload (256 bytes) 0000 00 0c 29 fc 0c 9f 00 e0 4c 69 0a 78 08 00 45 00 ..).....Li.x..E. 0010 01 38 00 00 40 00 40 11 fb 0c a5 e3 f9 66 a5 e3 .8..@.@......f.. 0020 f9 7a 01 f4 01 f4 01 24 cb b3 00 23 a8 a4 e2 c3 .z.....$...#.... 0030 48 cc bf 08 df 61 df f8 d7 d8 08 10 20 01 5b 82 H....a...... .[. 0040 02 c1 00 00 01 1c 06 d2 ce f2 19 d8 51 e8 43 a0 ............Q.C. 0050 2c 7c aa a6 2f 08 f3 f0 c1 da 68 dc 59 1c 8b 89 ,|../.....h.Y... 0060 1d d3 15 ab 3a 7f 06 09 84 4f c5 3a ad 1c 86 58 ....:....O.:...X 0070 34 34 7e b0 52 77 fb 28 68 fa 0b f9 31 04 6c 2a 44~.Rw.(h...1.l* 0080 78 26 f9 f1 49 55 8c 64 b3 0f 5d 08 df 79 3d 29 x&..IU.d..]..y=) 0090 b4 8f 8b 85 26 80 ca 69 83 a3 2f a8 06 85 fa b4 ....&..i../..... 00a0 c2 cb d1 80 db 9d 11 c8 8c fe f2 da 59 25 e1 c8 ............Y%.. 00b0 fc 71 64 22 7e 6a 11 59 2f 53 30 b7 aa 4a 4a b4 .qd"~j.Y/S0..JJ. 00c0 72 99 7c 05 fe fc 09 4a 9e fb 05 0b 88 e0 f4 95 r.|....J........ 00d0 40 22 a7 64 83 43 48 e6 cb 0a 7b 23 e6 ae 46 e7 @".d.CH...{#..F. 00e0 c4 04 1b fa e7 cc e8 99 3d 91 45 02 4c c1 bc de ........=.E.L... 00f0 04 03 33 9b bc 22 6c 3c 43 bf a2 90 28 f2 f4 d9 ..3.."l......|.]h 0120 4a b6 fa 86 e9 fd b0 af b8 be 4a 57 e2 6d c9 b1 J.........JW.m.. 0130 8f fb 85 32 3e 10 db 2f e5 f9 b2 87 f0 5c f2 7a ...2>../.....\.z 0140 c5 4f 5e 0b 51 b6 0c 50 91 58 .O^.Q..P.X Frame 9 (106 bytes on wire, 106 bytes captured) Arrival Time: Jan 30, 2005 15:37:11.870140000 Time delta from previous packet: 0.009854000 seconds Time since reference or first frame: 0.107930000 seconds Frame Number: 9 Packet Length: 106 bytes Capture Length: 106 bytes Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:e0:4c:69:0a:78 Destination: 00:e0:4c:69:0a:78 (00:e0:4c:69:0a:78) Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Type: IP (0x0800) Frame check sequence: 0xe9c55ee6 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.102 (165.227.249.102) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 88 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfbec (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.102 (165.227.249.102) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 68 Checksum: 0x71ef (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x0023A8A4E2C348CC Responder cookie: 0xBF08DF61DFF8D7D8 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x5B8202C1 Length: 60 Encrypted payload (32 bytes) 0000 00 e0 4c 69 0a 78 00 0c 29 fc 0c 9f 08 00 45 00 ..Li.x..).....E. 0010 00 58 00 00 40 00 40 11 fb ec a5 e3 f9 7a a5 e3 .X..@.@......z.. 0020 f9 66 01 f4 01 f4 00 44 71 ef 00 23 a8 a4 e2 c3 .f.....Dq..#.... 0030 48 cc bf 08 df 61 df f8 d7 d8 08 10 20 01 5b 82 H....a...... .[. 0040 02 c1 00 00 00 3c ab 32 39 49 6a 1f a4 29 39 7c .....<.29Ij..)9| 0050 5f 1b f9 4d 1e a7 f5 b3 3d b2 6c b3 75 37 41 4c _..M....=.l.u7AL 0060 96 3a 34 f0 d4 a7 e9 c5 5e e6 .:4.....^. Frame 10 (106 bytes on wire, 106 bytes captured) Arrival Time: Jan 30, 2005 15:37:11.972018000 Time delta from previous packet: 0.101878000 seconds Time since reference or first frame: 0.209808000 seconds Frame Number: 10 Packet Length: 106 bytes Capture Length: 106 bytes Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:e0:4c:69:0a:78 Destination: 00:e0:4c:69:0a:78 (00:e0:4c:69:0a:78) Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Type: IP (0x0800) Frame check sequence: 0xe9c55ee6 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.102 (165.227.249.102) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 88 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfbec (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.102 (165.227.249.102) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 68 Checksum: 0x71ef (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x0023A8A4E2C348CC Responder cookie: 0xBF08DF61DFF8D7D8 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x5B8202C1 Length: 60 Encrypted payload (32 bytes) 0000 00 e0 4c 69 0a 78 00 0c 29 fc 0c 9f 08 00 45 00 ..Li.x..).....E. 0010 00 58 00 00 40 00 40 11 fb ec a5 e3 f9 7a a5 e3 .X..@.@......z.. 0020 f9 66 01 f4 01 f4 00 44 71 ef 00 23 a8 a4 e2 c3 .f.....Dq..#.... 0030 48 cc bf 08 df 61 df f8 d7 d8 08 10 20 01 5b 82 H....a...... .[. 0040 02 c1 00 00 00 3c ab 32 39 49 6a 1f a4 29 39 7c .....<.29Ij..)9| 0050 5f 1b f9 4d 1e a7 f5 b3 3d b2 6c b3 75 37 41 4c _..M....=.l.u7AL 0060 96 3a 34 f0 d4 a7 e9 c5 5e e6 .:4.....^. Frame 11 (106 bytes on wire, 106 bytes captured) Arrival Time: Jan 30, 2005 15:37:12.073914000 Time delta from previous packet: 0.101896000 seconds Time since reference or first frame: 0.311704000 seconds Frame Number: 11 Packet Length: 106 bytes Capture Length: 106 bytes Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:e0:4c:69:0a:78 Destination: 00:e0:4c:69:0a:78 (00:e0:4c:69:0a:78) Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Type: IP (0x0800) Frame check sequence: 0xe9c55ee6 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.102 (165.227.249.102) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 88 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfbec (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.102 (165.227.249.102) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 68 Checksum: 0x71ef (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x0023A8A4E2C348CC Responder cookie: 0xBF08DF61DFF8D7D8 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x5B8202C1 Length: 60 Encrypted payload (32 bytes) 0000 00 e0 4c 69 0a 78 00 0c 29 fc 0c 9f 08 00 45 00 ..Li.x..).....E. 0010 00 58 00 00 40 00 40 11 fb ec a5 e3 f9 7a a5 e3 .X..@.@......z.. 0020 f9 66 01 f4 01 f4 00 44 71 ef 00 23 a8 a4 e2 c3 .f.....Dq..#.... 0030 48 cc bf 08 df 61 df f8 d7 d8 08 10 20 01 5b 82 H....a...... .[. 0040 02 c1 00 00 00 3c ab 32 39 49 6a 1f a4 29 39 7c .....<.29Ij..)9| 0050 5f 1b f9 4d 1e a7 f5 b3 3d b2 6c b3 75 37 41 4c _..M....=.l.u7AL 0060 96 3a 34 f0 d4 a7 e9 c5 5e e6 .:4.....^. Frame 12 (130 bytes on wire, 130 bytes captured) Arrival Time: Jan 30, 2005 15:37:12.193064000 Time delta from previous packet: 0.119150000 seconds Time since reference or first frame: 0.430854000 seconds Frame Number: 12 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:50:fc:84:d2:ec Destination: 00:50:fc:84:d2:ec (00:50:fc:84:d2:ec) Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Type: IP (0x0800) Frame check sequence: 0xe29aba3d (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.102 (165.227.249.102) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x006c (108) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x7c47 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.102 (165.227.249.102) Encapsulating Security Payload SPI: 0xfa17cac8 Sequence: 1 Data (84 bytes) 0000 00 50 fc 84 d2 ec 00 0c 29 fc 0c 9f 08 00 45 00 .P......).....E. 0010 00 70 00 6c 00 00 ff 32 7c 47 a5 e3 f9 7a a5 e3 .p.l...2|G...z.. 0020 f9 66 fa 17 ca c8 00 00 00 01 2d a5 63 f7 a6 0d .f........-.c... 0030 dd 7f 45 84 00 7e 7a 12 9c 36 7e c9 f3 f7 80 c5 ..E..~z..6~..... 0040 26 14 ff 0b 9a fd ea d0 b6 0e ff f4 09 70 9c f0 &............p.. 0050 3b af 17 a0 83 4c 12 b4 30 69 13 65 4c 43 6d 37 ;....L..0i.eLCm7 0060 a4 47 11 8d 55 9a ac 70 9e 72 28 b9 d3 94 17 24 .G..U..p.r(....$ 0070 76 4b 4b 62 17 e6 f4 06 cc c1 6d 17 15 ab e2 9a vKKb......m..... 0080 ba 3d .= Frame 13 (130 bytes on wire, 130 bytes captured) Arrival Time: Jan 30, 2005 15:37:12.193279000 Time delta from previous packet: 0.000215000 seconds Time since reference or first frame: 0.431069000 seconds Frame Number: 13 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:50:fc:84:d2:ec, Dst: 00:e0:4c:69:0a:78 Destination: 00:e0:4c:69:0a:78 (00:e0:4c:69:0a:78) Source: 00:50:fc:84:d2:ec (00:50:fc:84:d2:ec) Type: IP (0x0800) Frame check sequence: 0x6445de04 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.102 (165.227.249.102) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x006c (108) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 254 Protocol: ESP (0x32) Header checksum: 0x7d47 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.102 (165.227.249.102) Encapsulating Security Payload SPI: 0xfa17cac8 Sequence: 1 Data (84 bytes) 0000 00 e0 4c 69 0a 78 00 50 fc 84 d2 ec 08 00 45 00 ..Li.x.P......E. 0010 00 70 00 6c 00 00 fe 32 7d 47 a5 e3 f9 7a a5 e3 .p.l...2}G...z.. 0020 f9 66 fa 17 ca c8 00 00 00 01 2d a5 63 f7 a6 0d .f........-.c... 0030 dd 7f 45 84 00 7e 7a 12 9c 36 7e c9 f3 f7 80 c5 ..E..~z..6~..... 0040 26 14 ff 0b 9a fd ea d0 b6 0e ff f4 09 70 9c f0 &............p.. 0050 3b af 17 a0 83 4c 12 b4 30 69 13 65 4c 43 6d 37 ;....L..0i.eLCm7 0060 a4 47 11 8d 55 9a ac 70 9e 72 28 b9 d3 94 17 24 .G..U..p.r(....$ 0070 76 4b 4b 62 17 e6 f4 06 cc c1 6d 17 15 ab 64 45 vKKb......m...dE 0080 de 04 .. Frame 14 (130 bytes on wire, 130 bytes captured) Arrival Time: Jan 30, 2005 15:37:12.194948000 Time delta from previous packet: 0.001669000 seconds Time since reference or first frame: 0.432738000 seconds Frame Number: 14 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:e0:4c:69:0a:78, Dst: 00:0c:29:fc:0c:9f Destination: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Source: 00:e0:4c:69:0a:78 (00:e0:4c:69:0a:78) Type: IP (0x0800) Frame check sequence: 0xb7ce4811 (correct) Internet Protocol, Src Addr: 165.227.249.102 (165.227.249.102), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0007 (7) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 30 Protocol: ESP (0x32) Header checksum: 0x5dad (correct) Source: 165.227.249.102 (165.227.249.102) Destination: 165.227.249.122 (165.227.249.122) Encapsulating Security Payload SPI: 0xee058d29 Sequence: 1 Data (84 bytes) 0000 00 0c 29 fc 0c 9f 00 e0 4c 69 0a 78 08 00 45 00 ..).....Li.x..E. 0010 00 70 00 07 00 00 1e 32 5d ad a5 e3 f9 66 a5 e3 .p.....2]....f.. 0020 f9 7a ee 05 8d 29 00 00 00 01 ea 21 8c 99 de 66 .z...).....!...f 0030 fc 46 28 70 55 af 32 2b 50 84 d5 94 29 55 3b d9 .F(pU.2+P...)U;. 0040 41 6f ab 82 a6 c5 91 f1 d1 41 11 f0 26 09 0a a5 Ao.......A..&... 0050 b0 71 b2 5f a0 ec 78 0e a7 89 52 28 8c 2b 5e e1 .q._..x...R(.+^. 0060 d1 8d b3 14 0b e3 b2 f1 5f 70 30 d3 27 0b af 28 ........_p0.'..( 0070 af 6f 57 30 a1 73 fe d0 78 08 22 c0 ee d9 b7 ce .oW0.s..x."..... 0080 48 11 H. Frame 15 (130 bytes on wire, 130 bytes captured) Arrival Time: Jan 30, 2005 15:37:12.599778000 Time delta from previous packet: 0.404830000 seconds Time since reference or first frame: 0.837568000 seconds Frame Number: 15 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:50:fc:84:d2:ec Destination: 00:50:fc:84:d2:ec (00:50:fc:84:d2:ec) Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Type: IP (0x0800) Frame check sequence: 0xb3daeffc (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.102 (165.227.249.102) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x006d (109) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x7c46 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.102 (165.227.249.102) Encapsulating Security Payload SPI: 0xfa17cac8 Sequence: 2 Data (84 bytes) 0000 00 50 fc 84 d2 ec 00 0c 29 fc 0c 9f 08 00 45 00 .P......).....E. 0010 00 70 00 6d 00 00 ff 32 7c 46 a5 e3 f9 7a a5 e3 .p.m...2|F...z.. 0020 f9 66 fa 17 ca c8 00 00 00 02 28 b9 d3 94 17 24 .f........(....$ 0030 76 4b aa 97 82 62 da 4b 16 c8 eb 67 bd 14 10 a6 vK...b.K...g.... 0040 3a 4e 85 26 fb 2e fc d4 da 02 d7 c4 c6 23 a9 5f :N.&.........#._ 0050 8a ff 36 f1 0b ca 67 57 b6 08 8d 11 52 d5 14 19 ..6...gW....R... 0060 7f d9 bf 41 6c dc ba bb 53 4d bc 82 fa 29 18 6d ...Al...SM...).m 0070 3f f6 a1 f4 2e 8b 7f 40 06 c5 ee 2b ac c5 b3 da ?......@...+.... 0080 ef fc .. Frame 16 (130 bytes on wire, 130 bytes captured) Arrival Time: Jan 30, 2005 15:37:12.599971000 Time delta from previous packet: 0.000193000 seconds Time since reference or first frame: 0.837761000 seconds Frame Number: 16 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:50:fc:84:d2:ec, Dst: 00:e0:4c:69:0a:78 Destination: 00:e0:4c:69:0a:78 (00:e0:4c:69:0a:78) Source: 00:50:fc:84:d2:ec (00:50:fc:84:d2:ec) Type: IP (0x0800) Frame check sequence: 0x35058bc5 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.102 (165.227.249.102) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x006d (109) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 254 Protocol: ESP (0x32) Header checksum: 0x7d46 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.102 (165.227.249.102) Encapsulating Security Payload SPI: 0xfa17cac8 Sequence: 2 Data (84 bytes) 0000 00 e0 4c 69 0a 78 00 50 fc 84 d2 ec 08 00 45 00 ..Li.x.P......E. 0010 00 70 00 6d 00 00 fe 32 7d 46 a5 e3 f9 7a a5 e3 .p.m...2}F...z.. 0020 f9 66 fa 17 ca c8 00 00 00 02 28 b9 d3 94 17 24 .f........(....$ 0030 76 4b aa 97 82 62 da 4b 16 c8 eb 67 bd 14 10 a6 vK...b.K...g.... 0040 3a 4e 85 26 fb 2e fc d4 da 02 d7 c4 c6 23 a9 5f :N.&.........#._ 0050 8a ff 36 f1 0b ca 67 57 b6 08 8d 11 52 d5 14 19 ..6...gW....R... 0060 7f d9 bf 41 6c dc ba bb 53 4d bc 82 fa 29 18 6d ...Al...SM...).m 0070 3f f6 a1 f4 2e 8b 7f 40 06 c5 ee 2b ac c5 35 05 ?......@...+..5. 0080 8b c5 .. Frame 17 (130 bytes on wire, 130 bytes captured) Arrival Time: Jan 30, 2005 15:37:12.600861000 Time delta from previous packet: 0.000890000 seconds Time since reference or first frame: 0.838651000 seconds Frame Number: 17 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:e0:4c:69:0a:78, Dst: 00:0c:29:fc:0c:9f Destination: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Source: 00:e0:4c:69:0a:78 (00:e0:4c:69:0a:78) Type: IP (0x0800) Frame check sequence: 0x4094a8a4 (correct) Internet Protocol, Src Addr: 165.227.249.102 (165.227.249.102), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0008 (8) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 30 Protocol: ESP (0x32) Header checksum: 0x5dac (correct) Source: 165.227.249.102 (165.227.249.102) Destination: 165.227.249.122 (165.227.249.122) Encapsulating Security Payload SPI: 0xee058d29 Sequence: 2 Data (84 bytes) 0000 00 0c 29 fc 0c 9f 00 e0 4c 69 0a 78 08 00 45 00 ..).....Li.x..E. 0010 00 70 00 08 00 00 1e 32 5d ac a5 e3 f9 66 a5 e3 .p.....2]....f.. 0020 f9 7a ee 05 8d 29 00 00 00 02 10 e0 24 b1 d4 aa .z...)......$... 0030 18 b8 62 37 63 7c bc 0e 7b 90 1f ff 39 3d 6d f9 ..b7c|..{...9=m. 0040 eb 24 d0 a8 15 c6 35 27 48 5a b3 81 d0 37 3f c0 .$....5'HZ...7?. 0050 78 52 ba 0a c6 a1 68 dc 3d c8 2c ba c6 82 df aa xR....h.=.,..... 0060 b9 53 0c 9e 40 71 2c c1 d2 ff 8f c5 81 12 71 7f .S..@q,.......q. 0070 66 47 bf aa 7c e7 4b 70 fa 96 ad 73 75 f9 40 94 fG..|.Kp...su.@. 0080 a8 a4 .. Frame 18 (130 bytes on wire, 130 bytes captured) Arrival Time: Jan 30, 2005 15:37:13.622119000 Time delta from previous packet: 1.021258000 seconds Time since reference or first frame: 1.859909000 seconds Frame Number: 18 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:50:fc:84:d2:ec Destination: 00:50:fc:84:d2:ec (00:50:fc:84:d2:ec) Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Type: IP (0x0800) Frame check sequence: 0x9bca42aa (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.102 (165.227.249.102) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x006e (110) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x7c45 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.102 (165.227.249.102) Encapsulating Security Payload SPI: 0xfa17cac8 Sequence: 3 Data (84 bytes) 0000 00 50 fc 84 d2 ec 00 0c 29 fc 0c 9f 08 00 45 00 .P......).....E. 0010 00 70 00 6e 00 00 ff 32 7c 45 a5 e3 f9 7a a5 e3 .p.n...2|E...z.. 0020 f9 66 fa 17 ca c8 00 00 00 03 bc 82 fa 29 18 6d .f...........).m 0030 3f f6 d5 99 a1 23 84 92 34 d5 29 7c 49 92 86 dd ?....#..4.)|I... 0040 f6 54 44 ea 00 de 3d 60 e9 40 a6 c4 25 d8 ec f3 .TD...=`.@..%... 0050 90 72 3c 62 23 2d 15 92 3e 7d da 58 54 ea 9a 63 .r}.XT..c 0060 9f 2a e8 37 1d 86 d2 c4 af 92 00 9c d3 aa 29 40 .*.7..........)@ 0070 f4 c8 3b 7c 0d 80 00 9a fa 40 3f 2d da cd 9b ca ..;|.....@?-.... 0080 42 aa B. Frame 19 (130 bytes on wire, 130 bytes captured) Arrival Time: Jan 30, 2005 15:37:13.622338000 Time delta from previous packet: 0.000219000 seconds Time since reference or first frame: 1.860128000 seconds Frame Number: 19 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:50:fc:84:d2:ec, Dst: 00:e0:4c:69:0a:78 Destination: 00:e0:4c:69:0a:78 (00:e0:4c:69:0a:78) Source: 00:50:fc:84:d2:ec (00:50:fc:84:d2:ec) Type: IP (0x0800) Frame check sequence: 0x1d152693 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.102 (165.227.249.102) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x006e (110) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 254 Protocol: ESP (0x32) Header checksum: 0x7d45 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.102 (165.227.249.102) Encapsulating Security Payload SPI: 0xfa17cac8 Sequence: 3 Data (84 bytes) 0000 00 e0 4c 69 0a 78 00 50 fc 84 d2 ec 08 00 45 00 ..Li.x.P......E. 0010 00 70 00 6e 00 00 fe 32 7d 45 a5 e3 f9 7a a5 e3 .p.n...2}E...z.. 0020 f9 66 fa 17 ca c8 00 00 00 03 bc 82 fa 29 18 6d .f...........).m 0030 3f f6 d5 99 a1 23 84 92 34 d5 29 7c 49 92 86 dd ?....#..4.)|I... 0040 f6 54 44 ea 00 de 3d 60 e9 40 a6 c4 25 d8 ec f3 .TD...=`.@..%... 0050 90 72 3c 62 23 2d 15 92 3e 7d da 58 54 ea 9a 63 .r}.XT..c 0060 9f 2a e8 37 1d 86 d2 c4 af 92 00 9c d3 aa 29 40 .*.7..........)@ 0070 f4 c8 3b 7c 0d 80 00 9a fa 40 3f 2d da cd 1d 15 ..;|.....@?-.... 0080 26 93 &. Frame 20 (130 bytes on wire, 130 bytes captured) Arrival Time: Jan 30, 2005 15:37:13.623239000 Time delta from previous packet: 0.000901000 seconds Time since reference or first frame: 1.861029000 seconds Frame Number: 20 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:e0:4c:69:0a:78, Dst: 00:0c:29:fc:0c:9f Destination: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Source: 00:e0:4c:69:0a:78 (00:e0:4c:69:0a:78) Type: IP (0x0800) Frame check sequence: 0x8e534ed3 (correct) Internet Protocol, Src Addr: 165.227.249.102 (165.227.249.102), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0009 (9) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 30 Protocol: ESP (0x32) Header checksum: 0x5dab (correct) Source: 165.227.249.102 (165.227.249.102) Destination: 165.227.249.122 (165.227.249.122) Encapsulating Security Payload SPI: 0xee058d29 Sequence: 3 Data (84 bytes) 0000 00 0c 29 fc 0c 9f 00 e0 4c 69 0a 78 08 00 45 00 ..).....Li.x..E. 0010 00 70 00 09 00 00 1e 32 5d ab a5 e3 f9 66 a5 e3 .p.....2]....f.. 0020 f9 7a ee 05 8d 29 00 00 00 03 08 6b 7f 00 b4 d8 .z...).....k.... 0030 22 ce c1 c1 4d 41 5a 9a bd c4 e6 3a 37 65 53 c4 "...MAZ....:7eS. 0040 ec c6 a7 e3 08 aa 4f 0e a3 5c 5e 0f fe f1 8e 66 ......O..\^....f 0050 a6 12 8c a8 17 9d 50 10 a0 2c df ba d5 90 ff eb ......P..,...... 0060 a7 85 76 0a 23 97 ff 20 58 a1 b9 80 59 81 42 ec ..v.#.. X...Y.B. 0070 f4 ef 9d 58 7c 9c 5c 08 da a6 21 0b 97 4d 8e 53 ...X|.\...!..M.S 0080 4e d3 N. Frame 21 (130 bytes on wire, 130 bytes captured) Arrival Time: Jan 30, 2005 15:37:14.640729000 Time delta from previous packet: 1.017490000 seconds Time since reference or first frame: 2.878519000 seconds Frame Number: 21 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:50:fc:84:d2:ec Destination: 00:50:fc:84:d2:ec (00:50:fc:84:d2:ec) Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Type: IP (0x0800) Frame check sequence: 0xf51fc374 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.102 (165.227.249.102) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x006f (111) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x7c44 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.102 (165.227.249.102) Encapsulating Security Payload SPI: 0xfa17cac8 Sequence: 4 Data (84 bytes) 0000 00 50 fc 84 d2 ec 00 0c 29 fc 0c 9f 08 00 45 00 .P......).....E. 0010 00 70 00 6f 00 00 ff 32 7c 44 a5 e3 f9 7a a5 e3 .p.o...2|D...z.. 0020 f9 66 fa 17 ca c8 00 00 00 04 00 9c d3 aa 29 40 .f............)@ 0030 f4 c8 cf e3 ad 5b 84 71 af 5c 50 de 7e 90 1d 24 .....[.q.\P.~..$ 0040 8e a5 6f 39 52 f3 41 61 c4 14 0d 0b ff da 8b f3 ..o9R.Aa........ 0050 c5 16 0e 97 14 a4 b5 61 80 68 66 04 08 15 d3 01 .......a.hf..... 0060 f8 ad f1 85 3b 67 a6 ca 8a 51 09 cf 15 78 ae ee ....;g...Q...x.. 0070 4f 3f ae 33 6a df c2 07 2b fd a2 c4 56 63 f5 1f O?.3j...+...Vc.. 0080 c3 74 .t Frame 22 (130 bytes on wire, 130 bytes captured) Arrival Time: Jan 30, 2005 15:37:14.640936000 Time delta from previous packet: 0.000207000 seconds Time since reference or first frame: 2.878726000 seconds Frame Number: 22 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:50:fc:84:d2:ec, Dst: 00:e0:4c:69:0a:78 Destination: 00:e0:4c:69:0a:78 (00:e0:4c:69:0a:78) Source: 00:50:fc:84:d2:ec (00:50:fc:84:d2:ec) Type: IP (0x0800) Frame check sequence: 0x73c0a74d (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.102 (165.227.249.102) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x006f (111) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 254 Protocol: ESP (0x32) Header checksum: 0x7d44 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.102 (165.227.249.102) Encapsulating Security Payload SPI: 0xfa17cac8 Sequence: 4 Data (84 bytes) 0000 00 e0 4c 69 0a 78 00 50 fc 84 d2 ec 08 00 45 00 ..Li.x.P......E. 0010 00 70 00 6f 00 00 fe 32 7d 44 a5 e3 f9 7a a5 e3 .p.o...2}D...z.. 0020 f9 66 fa 17 ca c8 00 00 00 04 00 9c d3 aa 29 40 .f............)@ 0030 f4 c8 cf e3 ad 5b 84 71 af 5c 50 de 7e 90 1d 24 .....[.q.\P.~..$ 0040 8e a5 6f 39 52 f3 41 61 c4 14 0d 0b ff da 8b f3 ..o9R.Aa........ 0050 c5 16 0e 97 14 a4 b5 61 80 68 66 04 08 15 d3 01 .......a.hf..... 0060 f8 ad f1 85 3b 67 a6 ca 8a 51 09 cf 15 78 ae ee ....;g...Q...x.. 0070 4f 3f ae 33 6a df c2 07 2b fd a2 c4 56 63 73 c0 O?.3j...+...Vcs. 0080 a7 4d .M Frame 23 (130 bytes on wire, 130 bytes captured) Arrival Time: Jan 30, 2005 15:37:14.641873000 Time delta from previous packet: 0.000937000 seconds Time since reference or first frame: 2.879663000 seconds Frame Number: 23 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:e0:4c:69:0a:78, Dst: 00:0c:29:fc:0c:9f Destination: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Source: 00:e0:4c:69:0a:78 (00:e0:4c:69:0a:78) Type: IP (0x0800) Frame check sequence: 0x39bd97a5 (correct) Internet Protocol, Src Addr: 165.227.249.102 (165.227.249.102), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x000a (10) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 30 Protocol: ESP (0x32) Header checksum: 0x5daa (correct) Source: 165.227.249.102 (165.227.249.102) Destination: 165.227.249.122 (165.227.249.122) Encapsulating Security Payload SPI: 0xee058d29 Sequence: 4 Data (84 bytes) 0000 00 0c 29 fc 0c 9f 00 e0 4c 69 0a 78 08 00 45 00 ..).....Li.x..E. 0010 00 70 00 0a 00 00 1e 32 5d aa a5 e3 f9 66 a5 e3 .p.....2]....f.. 0020 f9 7a ee 05 8d 29 00 00 00 04 6e d9 fd 5a a5 29 .z...)....n..Z.) 0030 0c 10 28 a3 4b c6 a9 94 0b 82 8b 59 b6 ef 01 7c ..(.K......Y...| 0040 c4 3e b5 5d 73 34 6f 92 1a 06 54 4f 9d 2d 52 7e .>.]s4o...TO.-R~ 0050 b6 4d d6 33 5a d9 b2 d6 30 99 34 70 95 f8 69 cb .M.3Z...0.4p..i. 0060 83 b0 8f a5 cf 5e b5 25 6a a0 14 9b e4 57 be 38 .....^.%j....W.8 0070 93 e4 d5 2f 7f 0c b2 09 28 b6 ab 20 cc f4 39 bd .../....(.. ..9. 0080 97 a5 ..