Frame 1 (174 bytes on wire, 174 bytes captured) Arrival Time: Apr 4, 2005 13:50:28.135490000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 174 bytes Capture Length: 174 bytes Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:d0:c9:94:ef:f7 Destination: 00:d0:c9:94:ef:f7 (00:d0:c9:94:ef:f7) Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Type: IP (0x0800) Frame check sequence: 0xaa6b1a7e (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.103 (165.227.249.103) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 156 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfba7 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.103 (165.227.249.103) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 136 Checksum: 0xc2ed (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x6C57852278C7B5AB Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 128 Security Association payload Next payload: Vendor ID (13) Length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 44 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 36 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: NONE (0) Length: 44 Vendor ID: Check Point Check Point Product: VPN-1 Version: NG with Application Intelligence R55 0000 00 d0 c9 94 ef f7 00 0c 29 fc 0c 9f 08 00 45 00 ........).....E. 0010 00 9c 00 00 40 00 40 11 fb a7 a5 e3 f9 7a a5 e3 ....@.@......z.. 0020 f9 67 01 f4 01 f4 00 88 c2 ed 6c 57 85 22 78 c7 .g........lW."x. 0030 b5 ab 00 00 00 00 00 00 00 00 01 10 02 00 00 00 ................ 0040 00 00 00 00 00 80 0d 00 00 38 00 00 00 01 00 00 .........8...... 0050 00 01 00 00 00 2c 01 01 00 01 00 00 00 24 01 01 .....,.......$.. 0060 00 00 80 01 00 05 80 02 00 02 80 03 00 01 80 04 ................ 0070 00 02 80 0b 00 01 00 0c 00 04 00 00 70 80 00 00 ............p... 0080 00 2c f4 ed 19 e0 c1 14 eb 51 6f aa ac 0e e3 7d .,.......Qo....} 0090 af 28 07 b4 38 1f 00 00 00 01 00 00 13 8d 00 00 .(..8........... 00a0 00 00 00 00 00 00 18 80 00 00 aa 6b 1a 7e ...........k.~ Frame 2 (170 bytes on wire, 170 bytes captured) Arrival Time: Apr 4, 2005 13:50:28.140316000 Time delta from previous packet: 0.004826000 seconds Time since reference or first frame: 0.004826000 seconds Frame Number: 2 Packet Length: 170 bytes Capture Length: 170 bytes Ethernet II, Src: 00:d0:c9:94:ef:f7, Dst: 00:0c:29:fc:0c:9f Destination: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Source: 00:d0:c9:94:ef:f7 (00:d0:c9:94:ef:f7) Type: IP (0x0800) Frame check sequence: 0xbb5dd53b (correct) Internet Protocol, Src Addr: 165.227.249.103 (165.227.249.103), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 152 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfbab (correct) Source: 165.227.249.103 (165.227.249.103) Destination: 165.227.249.122 (165.227.249.122) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 132 Checksum: 0x2647 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x6C57852278C7B5AB Responder cookie: 0x2C2295600011B70A Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 124 Security Association payload Next payload: Vendor ID (13) Length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 44 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 36 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-dpd-00.txt Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: unknown vendor ID: 0x648982785BEDBDD66A6DD356F0E160FD 0000 00 0c 29 fc 0c 9f 00 d0 c9 94 ef f7 08 00 45 00 ..)...........E. 0010 00 98 00 00 40 00 40 11 fb ab a5 e3 f9 67 a5 e3 ....@.@......g.. 0020 f9 7a 01 f4 01 f4 00 84 26 47 6c 57 85 22 78 c7 .z......&GlW."x. 0030 b5 ab 2c 22 95 60 00 11 b7 0a 01 10 02 00 00 00 ..,".`.......... 0040 00 00 00 00 00 7c 0d 00 00 38 00 00 00 01 00 00 .....|...8...... 0050 00 01 00 00 00 2c 01 01 00 01 00 00 00 24 01 01 .....,.......$.. 0060 00 00 80 01 00 05 80 02 00 02 80 03 00 01 80 04 ................ 0070 00 02 80 0b 00 01 00 0c 00 04 00 00 70 80 0d 00 ............p... 0080 00 14 af ca d7 13 68 a1 f1 c9 6b 86 96 fc 77 57 ......h...k...wW 0090 01 00 00 00 00 14 64 89 82 78 5b ed bd d6 6a 6d ......d..x[...jm 00a0 d3 56 f0 e1 60 fd bb 5d d5 3b .V..`..].; Frame 3 (230 bytes on wire, 230 bytes captured) Arrival Time: Apr 4, 2005 13:50:28.155374000 Time delta from previous packet: 0.015058000 seconds Time since reference or first frame: 0.019884000 seconds Frame Number: 3 Packet Length: 230 bytes Capture Length: 230 bytes Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:d0:c9:94:ef:f7 Destination: 00:d0:c9:94:ef:f7 (00:d0:c9:94:ef:f7) Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Type: IP (0x0800) Frame check sequence: 0xfd70ee20 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.103 (165.227.249.103) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 212 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb6f (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.103 (165.227.249.103) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 192 Checksum: 0x5d5d (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x6C57852278C7B5AB Responder cookie: 0x2C2295600011B70A Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 184 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 24 Nonce Data 0000 00 d0 c9 94 ef f7 00 0c 29 fc 0c 9f 08 00 45 00 ........).....E. 0010 00 d4 00 00 40 00 40 11 fb 6f a5 e3 f9 7a a5 e3 ....@.@..o...z.. 0020 f9 67 01 f4 01 f4 00 c0 5d 5d 6c 57 85 22 78 c7 .g......]]lW."x. 0030 b5 ab 2c 22 95 60 00 11 b7 0a 04 10 02 00 00 00 ..,".`.......... 0040 00 00 00 00 00 b8 0a 00 00 84 c0 3e b1 f9 04 ac ...........>.... 0050 78 99 66 20 22 dc 11 3e 53 91 64 70 7b 60 c7 36 x.f "..>S.dp{`.6 0060 0a ee 94 19 d0 1e 29 d5 6a c3 a1 01 09 6e 05 a8 ......).j....n.. 0070 60 45 66 39 f1 15 b7 cc 9b 75 a6 20 97 b5 9a 45 `Ef9.....u. ...E 0080 3c 62 fb 38 43 9c 39 e1 fd a9 2e 54 fc 4b 41 7d 4...l 0070 61 2d b8 67 2d 32 a5 86 14 7c 5e d3 ce 5c 8c 85 a-.g-2...|^..\.. 0080 8e 98 9e c6 d8 23 ca 9c e1 7f 32 d5 33 f9 05 32 .....#....2.3..2 0090 9a a3 3e 3d e9 5a bd 21 36 89 6c e9 5c 9b ee 95 ..>=.Z.!6.l.\... 00a0 f7 4e cd 10 47 e6 45 e8 15 f2 39 0f 47 e9 a6 00 .N..G.E...9.G... 00b0 70 e3 04 54 b5 09 ba 36 49 1a ff 3f bc ad d9 f4 p..T...6I..?.... 00c0 e6 01 31 e7 b9 13 fe 6a b5 e8 00 00 00 0c c1 16 ..1....j........ 00d0 44 08 63 a4 43 ef b7 cf f3 c8 D.c.C..... Frame 5 (114 bytes on wire, 114 bytes captured) Arrival Time: Apr 4, 2005 13:50:28.313448000 Time delta from previous packet: 0.011566000 seconds Time since reference or first frame: 0.177958000 seconds Frame Number: 5 Packet Length: 114 bytes Capture Length: 114 bytes Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:d0:c9:94:ef:f7 Destination: 00:d0:c9:94:ef:f7 (00:d0:c9:94:ef:f7) Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Type: IP (0x0800) Frame check sequence: 0xb53359eb (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.103 (165.227.249.103) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfbe3 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.103 (165.227.249.103) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 76 Checksum: 0x6e5d (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x6C57852278C7B5AB Responder cookie: 0x2C2295600011B70A Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 68 Encrypted payload (40 bytes) 0000 00 d0 c9 94 ef f7 00 0c 29 fc 0c 9f 08 00 45 00 ........).....E. 0010 00 60 00 00 40 00 40 11 fb e3 a5 e3 f9 7a a5 e3 .`..@.@......z.. 0020 f9 67 01 f4 01 f4 00 4c 6e 5d 6c 57 85 22 78 c7 .g.....Ln]lW."x. 0030 b5 ab 2c 22 95 60 00 11 b7 0a 05 10 02 01 00 00 ..,".`.......... 0040 00 00 00 00 00 44 20 c0 0c 3d 06 ed 0f dd 58 f3 .....D ..=....X. 0050 21 1e 5c 50 aa 58 b5 f6 c0 d9 f0 ac ac 97 36 f4 !.\P.X........6. 0060 3c 71 3c 19 bf 88 4b ce 15 a4 90 05 75 70 b5 33 . 0070 a4 6a ec 63 a9 8d b9 50 a0 43 37 1e ba fa a7 bf .j.c...P.C7..... 0080 5d 5a 54 2d 65 77 f4 57 03 a6 ]ZT-ew.W.. Frame 7 (346 bytes on wire, 346 bytes captured) Arrival Time: Apr 4, 2005 13:50:28.506377000 Time delta from previous packet: 0.027527000 seconds Time since reference or first frame: 0.370887000 seconds Frame Number: 7 Packet Length: 346 bytes Capture Length: 346 bytes Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:d0:c9:94:ef:f7 Destination: 00:d0:c9:94:ef:f7 (00:d0:c9:94:ef:f7) Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Type: IP (0x0800) Frame check sequence: 0x569d8e90 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.103 (165.227.249.103) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 328 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfafb (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.103 (165.227.249.103) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 308 Checksum: 0x28e0 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x6C57852278C7B5AB Responder cookie: 0x2C2295600011B70A Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x7FC7B68F Length: 300 Encrypted payload (272 bytes) 0000 00 d0 c9 94 ef f7 00 0c 29 fc 0c 9f 08 00 45 00 ........).....E. 0010 01 48 00 00 40 00 40 11 fa fb a5 e3 f9 7a a5 e3 .H..@.@......z.. 0020 f9 67 01 f4 01 f4 01 34 28 e0 6c 57 85 22 78 c7 .g.....4(.lW."x. 0030 b5 ab 2c 22 95 60 00 11 b7 0a 08 10 20 01 7f c7 ..,".`...... ... 0040 b6 8f 00 00 01 2c c4 2a 85 8a 12 b1 5e ca 95 bb .....,.*....^... 0050 bb 53 e0 ea d6 f1 3f c5 ef 05 a9 fa 5e 82 d1 3a .S....?.....^..: 0060 1e 50 77 18 2c 74 aa 2f 8e ea 8e 83 fd 6b 62 72 .Pw.,t./.....kbr 0070 4f eb 18 77 48 96 b9 89 2b 54 22 8e 64 0f bc 79 O..wH...+T".d..y 0080 65 a0 a7 2c a2 db 38 41 7a b0 69 1d e2 8f 50 d9 e..,..8Az.i...P. 0090 4f 05 51 47 07 15 50 44 f2 6d ba be f1 80 db 30 O.QG..PD.m.....0 00a0 59 bc 2d 86 c6 8c 41 55 b7 dd 42 ce 49 69 13 16 Y.-...AU..B.Ii.. 00b0 0a 5f 5a f8 a3 43 6f 34 b5 d2 7c 87 a8 d9 b5 e8 ._Z..Co4..|..... 00c0 09 1f f7 f8 b4 15 94 4e 95 c4 b9 a1 05 f4 3a c0 .......N......:. 00d0 01 26 70 8e 66 f3 11 b7 7a b9 88 ed fd 31 64 d4 .&p.f...z....1d. 00e0 67 77 a7 80 24 24 ac f7 6b fe 4d 29 c5 1b 73 00 gw..$$..k.M)..s. 00f0 e2 7c 9d bf d8 0d a2 da 60 af 78 93 5a c0 c0 be .|......`.x.Z... 0100 51 41 75 05 50 ac 98 a2 9f 9a d9 d5 7a e8 c1 ec QAu.P.......z... 0110 9f 25 a8 a8 fd 58 96 ff e7 58 4a e6 4a da ec cf .%...X...XJ.J... 0120 1b f0 f2 4c 4b e8 44 55 81 b1 cc 22 66 d3 ce b5 ...LK.DU..."f... 0130 d7 36 45 d6 e9 ec 0b 05 61 0e 28 bb d6 4d f0 77 .6E.....a.(..M.w 0140 ad 70 bb 17 f6 a6 68 03 9d f5 10 68 67 88 b4 eb .p....h....hg... 0150 24 5a 35 58 a4 41 56 9d 8e 90 $Z5X.AV... Frame 8 (330 bytes on wire, 330 bytes captured) Arrival Time: Apr 4, 2005 13:50:28.652267000 Time delta from previous packet: 0.145890000 seconds Time since reference or first frame: 0.516777000 seconds Frame Number: 8 Packet Length: 330 bytes Capture Length: 330 bytes Ethernet II, Src: 00:d0:c9:94:ef:f7, Dst: 00:0c:29:fc:0c:9f Destination: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Source: 00:d0:c9:94:ef:f7 (00:d0:c9:94:ef:f7) Type: IP (0x0800) Frame check sequence: 0x06f8b5fa (correct) Internet Protocol, Src Addr: 165.227.249.103 (165.227.249.103), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 312 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb0b (correct) Source: 165.227.249.103 (165.227.249.103) Destination: 165.227.249.122 (165.227.249.122) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 292 Checksum: 0xa260 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x6C57852278C7B5AB Responder cookie: 0x2C2295600011B70A Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x7FC7B68F Length: 284 Encrypted payload (256 bytes) 0000 00 0c 29 fc 0c 9f 00 d0 c9 94 ef f7 08 00 45 00 ..)...........E. 0010 01 38 00 00 40 00 40 11 fb 0b a5 e3 f9 67 a5 e3 .8..@.@......g.. 0020 f9 7a 01 f4 01 f4 01 24 a2 60 6c 57 85 22 78 c7 .z.....$.`lW."x. 0030 b5 ab 2c 22 95 60 00 11 b7 0a 08 10 20 01 7f c7 ..,".`...... ... 0040 b6 8f 00 00 01 1c 4d 87 30 32 fe af 45 b7 5b 25 ......M.02..E.[% 0050 43 2d 90 71 7b 99 30 84 3d 9e d1 7c 8f 53 ae 73 C-.q{.0.=..|.S.s 0060 57 b8 04 02 de 06 ad b2 81 33 33 4c 07 ca f3 9a W........33L.... 0070 ef a0 c8 ea 36 42 98 a8 c5 0a cc e0 ad 25 0f ae ....6B.......%.. 0080 d9 be 8b f0 1c 42 9b db d1 f8 6a c6 c0 84 57 17 .....B....j...W. 0090 80 0d 34 8a 6b 62 4d 79 1d 5c 25 7f 59 74 26 21 ..4.kbMy.\%.Yt&! 00a0 7f a7 41 b0 d1 80 2c 62 2f b5 d9 51 32 26 89 94 ..A...,b/..Q2&.. 00b0 25 38 97 95 40 bb 2d 92 b0 ea 85 2c 80 fe 5c 7b %8..@.-....,..\{ 00c0 ff ff 51 75 31 03 55 9a cc 14 54 e2 59 fa f2 87 ..Qu1.U...T.Y... 00d0 d2 51 80 df c1 0c 19 bf e0 55 c1 fb b9 22 28 6e .Q.......U..."(n 00e0 be 6e 8e 3a 7c ae c3 6e 2c 50 96 08 f3 02 7e 39 .n.:|..n,P....~9 00f0 92 16 f8 c8 10 fe 6c 18 4e 1c f3 23 f8 48 28 11 ......l.N..#.H(. 0100 5a c2 78 e4 b7 66 06 1f 83 85 b7 16 4f ed 2a cc Z.x..f......O.*. 0110 47 d0 7a 57 29 17 4f 15 3f 8a 92 20 ae ee d7 1f G.zW).O.?.. .... 0120 82 2f ae f3 8f be a7 ee 27 50 8f 7f 16 32 50 04 ./......'P...2P. 0130 32 32 43 01 7f 77 9c 72 16 f3 e5 a3 6b 0f bc 66 22C..w.r....k..f 0140 e0 97 2d 60 21 9a 06 f8 b5 fa ..-`!..... Frame 9 (106 bytes on wire, 106 bytes captured) Arrival Time: Apr 4, 2005 13:50:28.660197000 Time delta from previous packet: 0.007930000 seconds Time since reference or first frame: 0.524707000 seconds Frame Number: 9 Packet Length: 106 bytes Capture Length: 106 bytes Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:d0:c9:94:ef:f7 Destination: 00:d0:c9:94:ef:f7 (00:d0:c9:94:ef:f7) Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Type: IP (0x0800) Frame check sequence: 0xfbd098ee (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.103 (165.227.249.103) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 88 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfbeb (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.103 (165.227.249.103) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 68 Checksum: 0xc4a9 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x6C57852278C7B5AB Responder cookie: 0x2C2295600011B70A Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x7FC7B68F Length: 60 Encrypted payload (32 bytes) 0000 00 d0 c9 94 ef f7 00 0c 29 fc 0c 9f 08 00 45 00 ........).....E. 0010 00 58 00 00 40 00 40 11 fb eb a5 e3 f9 7a a5 e3 .X..@.@......z.. 0020 f9 67 01 f4 01 f4 00 44 c4 a9 6c 57 85 22 78 c7 .g.....D..lW."x. 0030 b5 ab 2c 22 95 60 00 11 b7 0a 08 10 20 01 7f c7 ..,".`...... ... 0040 b6 8f 00 00 00 3c 7e 57 65 ed 64 1e 40 1e 3f 2c .....<~We.d.@.?, 0050 d2 3a f5 0f ef 53 1f 09 e4 ad 1a ca 63 84 13 c9 .:...S......c... 0060 ef 98 35 29 c8 1d fb d0 98 ee ..5)...... Frame 10 (106 bytes on wire, 106 bytes captured) Arrival Time: Apr 4, 2005 13:50:28.762255000 Time delta from previous packet: 0.102058000 seconds Time since reference or first frame: 0.626765000 seconds Frame Number: 10 Packet Length: 106 bytes Capture Length: 106 bytes Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:d0:c9:94:ef:f7 Destination: 00:d0:c9:94:ef:f7 (00:d0:c9:94:ef:f7) Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Type: IP (0x0800) Frame check sequence: 0xfbd098ee (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.103 (165.227.249.103) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 88 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfbeb (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.103 (165.227.249.103) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 68 Checksum: 0xc4a9 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x6C57852278C7B5AB Responder cookie: 0x2C2295600011B70A Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x7FC7B68F Length: 60 Encrypted payload (32 bytes) 0000 00 d0 c9 94 ef f7 00 0c 29 fc 0c 9f 08 00 45 00 ........).....E. 0010 00 58 00 00 40 00 40 11 fb eb a5 e3 f9 7a a5 e3 .X..@.@......z.. 0020 f9 67 01 f4 01 f4 00 44 c4 a9 6c 57 85 22 78 c7 .g.....D..lW."x. 0030 b5 ab 2c 22 95 60 00 11 b7 0a 08 10 20 01 7f c7 ..,".`...... ... 0040 b6 8f 00 00 00 3c 7e 57 65 ed 64 1e 40 1e 3f 2c .....<~We.d.@.?, 0050 d2 3a f5 0f ef 53 1f 09 e4 ad 1a ca 63 84 13 c9 .:...S......c... 0060 ef 98 35 29 c8 1d fb d0 98 ee ..5)...... Frame 11 (106 bytes on wire, 106 bytes captured) Arrival Time: Apr 4, 2005 13:50:28.864354000 Time delta from previous packet: 0.102099000 seconds Time since reference or first frame: 0.728864000 seconds Frame Number: 11 Packet Length: 106 bytes Capture Length: 106 bytes Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:d0:c9:94:ef:f7 Destination: 00:d0:c9:94:ef:f7 (00:d0:c9:94:ef:f7) Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Type: IP (0x0800) Frame check sequence: 0xfbd098ee (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.103 (165.227.249.103) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 88 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfbeb (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.103 (165.227.249.103) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 68 Checksum: 0xc4a9 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x6C57852278C7B5AB Responder cookie: 0x2C2295600011B70A Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x7FC7B68F Length: 60 Encrypted payload (32 bytes) 0000 00 d0 c9 94 ef f7 00 0c 29 fc 0c 9f 08 00 45 00 ........).....E. 0010 00 58 00 00 40 00 40 11 fb eb a5 e3 f9 7a a5 e3 .X..@.@......z.. 0020 f9 67 01 f4 01 f4 00 44 c4 a9 6c 57 85 22 78 c7 .g.....D..lW."x. 0030 b5 ab 2c 22 95 60 00 11 b7 0a 08 10 20 01 7f c7 ..,".`...... ... 0040 b6 8f 00 00 00 3c 7e 57 65 ed 64 1e 40 1e 3f 2c .....<~We.d.@.?, 0050 d2 3a f5 0f ef 53 1f 09 e4 ad 1a ca 63 84 13 c9 .:...S......c... 0060 ef 98 35 29 c8 1d fb d0 98 ee ..5)...... Frame 12 (130 bytes on wire, 130 bytes captured) Arrival Time: Apr 4, 2005 13:50:28.982939000 Time delta from previous packet: 0.118585000 seconds Time since reference or first frame: 0.847449000 seconds Frame Number: 12 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:00:24:c3:5e:28 Destination: 00:00:24:c3:5e:28 (00:00:24:c3:5e:28) Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Type: IP (0x0800) Frame check sequence: 0x8230f342 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.103 (165.227.249.103) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0077 (119) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x7c3b (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.103 (165.227.249.103) Encapsulating Security Payload SPI: 0x6e2babe2 Sequence: 1 Data (84 bytes) 0000 00 00 24 c3 5e 28 00 0c 29 fc 0c 9f 08 00 45 00 ..$.^(..).....E. 0010 00 70 00 77 00 00 ff 32 7c 3b a5 e3 f9 7a a5 e3 .p.w...2|;...z.. 0020 f9 67 6e 2b ab e2 00 00 00 01 fc 41 e5 ad a2 c0 .gn+.......A.... 0030 0d 41 8b bc fc 6b 68 36 77 b4 61 a8 8c 9b a3 f4 .A...kh6w.a..... 0040 be df 66 95 0c 6a 11 1d 47 5f ea 82 17 ed bb d9 ..f..j..G_...... 0050 d6 ba 97 e8 a2 b0 79 cd 52 20 82 7f ab 51 48 c9 ......y.R ...QH. 0060 e1 9c 9b ea e0 b4 ce 8a d0 52 ab 0c 4f 90 d2 66 .........R..O..f 0070 41 b9 72 7a d0 14 2d 28 ec 3b dd 3e 37 c7 82 30 A.rz..-(.;.>7..0 0080 f3 42 .B Frame 13 (130 bytes on wire, 130 bytes captured) Arrival Time: Apr 4, 2005 13:50:28.985291000 Time delta from previous packet: 0.002352000 seconds Time since reference or first frame: 0.849801000 seconds Frame Number: 13 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:00:24:c3:5e:28, Dst: 00:d0:c9:94:ef:f7 Destination: 00:d0:c9:94:ef:f7 (00:d0:c9:94:ef:f7) Source: 00:00:24:c3:5e:28 (00:00:24:c3:5e:28) Type: IP (0x0800) Frame check sequence: 0xdc958526 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.103 (165.227.249.103) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0077 (119) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 254 Protocol: ESP (0x32) Header checksum: 0x7d3b (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.103 (165.227.249.103) Encapsulating Security Payload SPI: 0x6e2babe2 Sequence: 1 Data (84 bytes) 0000 00 d0 c9 94 ef f7 00 00 24 c3 5e 28 08 00 45 00 ........$.^(..E. 0010 00 70 00 77 00 00 fe 32 7d 3b a5 e3 f9 7a a5 e3 .p.w...2};...z.. 0020 f9 67 6e 2b ab e2 00 00 00 01 fc 41 e5 ad a2 c0 .gn+.......A.... 0030 0d 41 8b bc fc 6b 68 36 77 b4 61 a8 8c 9b a3 f4 .A...kh6w.a..... 0040 be df 66 95 0c 6a 11 1d 47 5f ea 82 17 ed bb d9 ..f..j..G_...... 0050 d6 ba 97 e8 a2 b0 79 cd 52 20 82 7f ab 51 48 c9 ......y.R ...QH. 0060 e1 9c 9b ea e0 b4 ce 8a d0 52 ab 0c 4f 90 d2 66 .........R..O..f 0070 41 b9 72 7a d0 14 2d 28 ec 3b dd 3e 37 c7 dc 95 A.rz..-(.;.>7... 0080 85 26 .& Frame 14 (130 bytes on wire, 130 bytes captured) Arrival Time: Apr 4, 2005 13:50:33.280530000 Time delta from previous packet: 4.295239000 seconds Time since reference or first frame: 5.145040000 seconds Frame Number: 14 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:00:24:c3:5e:28 Destination: 00:00:24:c3:5e:28 (00:00:24:c3:5e:28) Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Type: IP (0x0800) Frame check sequence: 0x2b0fcc4b (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.103 (165.227.249.103) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0078 (120) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x7c3a (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.103 (165.227.249.103) Encapsulating Security Payload SPI: 0x6e2babe2 Sequence: 2 Data (84 bytes) 0000 00 00 24 c3 5e 28 00 0c 29 fc 0c 9f 08 00 45 00 ..$.^(..).....E. 0010 00 70 00 78 00 00 ff 32 7c 3a a5 e3 f9 7a a5 e3 .p.x...2|:...z.. 0020 f9 67 6e 2b ab e2 00 00 00 02 ab 0c 4f 90 d2 66 .gn+........O..f 0030 41 b9 1a d8 bd 50 a8 2d db 63 95 0f 16 95 a1 68 A....P.-.c.....h 0040 8c 97 15 cc 5f a6 78 73 59 58 63 5e 07 f3 6d a3 ...._.xsYXc^..m. 0050 2f c6 9e 53 32 b5 97 42 06 80 de 61 7e 79 c1 27 /..S2..B...a~y.' 0060 2b fe 50 bb db c7 f8 fd 08 cb 87 de 9a b3 7b 41 +.P...........{A 0070 6c 04 19 91 7d 72 5b 03 bb 91 ca 8d b8 e0 2b 0f l...}r[.......+. 0080 cc 4b .K Frame 15 (130 bytes on wire, 130 bytes captured) Arrival Time: Apr 4, 2005 13:50:33.282097000 Time delta from previous packet: 0.001567000 seconds Time since reference or first frame: 5.146607000 seconds Frame Number: 15 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:00:24:c3:5e:28, Dst: 00:d0:c9:94:ef:f7 Destination: 00:d0:c9:94:ef:f7 (00:d0:c9:94:ef:f7) Source: 00:00:24:c3:5e:28 (00:00:24:c3:5e:28) Type: IP (0x0800) Frame check sequence: 0x75aaba2f (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.103 (165.227.249.103) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0078 (120) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 254 Protocol: ESP (0x32) Header checksum: 0x7d3a (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.103 (165.227.249.103) Encapsulating Security Payload SPI: 0x6e2babe2 Sequence: 2 Data (84 bytes) 0000 00 d0 c9 94 ef f7 00 00 24 c3 5e 28 08 00 45 00 ........$.^(..E. 0010 00 70 00 78 00 00 fe 32 7d 3a a5 e3 f9 7a a5 e3 .p.x...2}:...z.. 0020 f9 67 6e 2b ab e2 00 00 00 02 ab 0c 4f 90 d2 66 .gn+........O..f 0030 41 b9 1a d8 bd 50 a8 2d db 63 95 0f 16 95 a1 68 A....P.-.c.....h 0040 8c 97 15 cc 5f a6 78 73 59 58 63 5e 07 f3 6d a3 ...._.xsYXc^..m. 0050 2f c6 9e 53 32 b5 97 42 06 80 de 61 7e 79 c1 27 /..S2..B...a~y.' 0060 2b fe 50 bb db c7 f8 fd 08 cb 87 de 9a b3 7b 41 +.P...........{A 0070 6c 04 19 91 7d 72 5b 03 bb 91 ca 8d b8 e0 75 aa l...}r[.......u. 0080 ba 2f ./ Frame 16 (130 bytes on wire, 130 bytes captured) Arrival Time: Apr 4, 2005 13:50:33.283556000 Time delta from previous packet: 0.001459000 seconds Time since reference or first frame: 5.148066000 seconds Frame Number: 16 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:d0:c9:94:ef:f7, Dst: 00:0c:29:fc:0c:9f Destination: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Source: 00:d0:c9:94:ef:f7 (00:d0:c9:94:ef:f7) Type: IP (0x0800) Frame check sequence: 0x81ba6a20 (correct) Internet Protocol, Src Addr: 165.227.249.103 (165.227.249.103), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0025 (37) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 30 Protocol: ESP (0x32) Header checksum: 0x5d8e (correct) Source: 165.227.249.103 (165.227.249.103) Destination: 165.227.249.122 (165.227.249.122) Encapsulating Security Payload SPI: 0xee67a69f Sequence: 1 Data (84 bytes) 0000 00 0c 29 fc 0c 9f 00 d0 c9 94 ef f7 08 00 45 00 ..)...........E. 0010 00 70 00 25 00 00 1e 32 5d 8e a5 e3 f9 67 a5 e3 .p.%...2]....g.. 0020 f9 7a ee 67 a6 9f 00 00 00 01 c9 bd 06 78 12 38 .z.g.........x.8 0030 0c 88 ec 71 fa f8 ae 69 1a f7 36 5f 9a 59 db 2c ...q...i..6_.Y., 0040 54 f3 d4 f1 06 b6 32 95 f8 11 7b 6f 0f 36 d5 ad T.....2...{o.6.. 0050 6e 83 85 4e 3c af eb 21 f6 0d 97 84 15 5b 82 1d n..N<..!.....[.. 0060 6b f7 ef 37 f6 64 cd 3e c3 c3 97 fc 35 9a 0e 14 k..7.d.>....5... 0070 c0 56 47 f8 45 f1 1d a4 e7 ce 0d b4 ef 1f 81 ba .VG.E........... 0080 6a 20 j Frame 17 (130 bytes on wire, 130 bytes captured) Arrival Time: Apr 4, 2005 13:50:34.318844000 Time delta from previous packet: 1.035288000 seconds Time since reference or first frame: 6.183354000 seconds Frame Number: 17 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:00:24:c3:5e:28 Destination: 00:00:24:c3:5e:28 (00:00:24:c3:5e:28) Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Type: IP (0x0800) Frame check sequence: 0xb12ce281 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.103 (165.227.249.103) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0079 (121) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x7c39 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.103 (165.227.249.103) Encapsulating Security Payload SPI: 0x6e2babe2 Sequence: 3 Data (84 bytes) 0000 00 00 24 c3 5e 28 00 0c 29 fc 0c 9f 08 00 45 00 ..$.^(..).....E. 0010 00 70 00 79 00 00 ff 32 7c 39 a5 e3 f9 7a a5 e3 .p.y...2|9...z.. 0020 f9 67 6e 2b ab e2 00 00 00 03 87 de 9a b3 7b 41 .gn+..........{A 0030 6c 04 89 88 75 4d c4 93 d5 f1 24 84 95 c7 4f ff l...uM....$...O. 0040 29 5c 21 25 69 6e 1c f1 44 b3 92 ff fe 98 c2 31 )\!%in..D......1 0050 14 24 9b 2b 79 c0 b1 a9 6a d5 e6 60 00 20 bb 5d .$.+y...j..`. .] 0060 1c 3f 51 02 46 28 45 cb ce c5 fc 1b 7b 83 6f b6 .?Q.F(E.....{.o. 0070 36 33 a5 63 de 09 fb 30 6e 7c f7 18 bf 29 b1 2c 63.c...0n|...)., 0080 e2 81 .. Frame 18 (130 bytes on wire, 130 bytes captured) Arrival Time: Apr 4, 2005 13:50:34.319161000 Time delta from previous packet: 0.000317000 seconds Time since reference or first frame: 6.183671000 seconds Frame Number: 18 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:00:24:c3:5e:28, Dst: 00:d0:c9:94:ef:f7 Destination: 00:d0:c9:94:ef:f7 (00:d0:c9:94:ef:f7) Source: 00:00:24:c3:5e:28 (00:00:24:c3:5e:28) Type: IP (0x0800) Frame check sequence: 0xef8994e5 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.103 (165.227.249.103) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0079 (121) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 254 Protocol: ESP (0x32) Header checksum: 0x7d39 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.103 (165.227.249.103) Encapsulating Security Payload SPI: 0x6e2babe2 Sequence: 3 Data (84 bytes) 0000 00 d0 c9 94 ef f7 00 00 24 c3 5e 28 08 00 45 00 ........$.^(..E. 0010 00 70 00 79 00 00 fe 32 7d 39 a5 e3 f9 7a a5 e3 .p.y...2}9...z.. 0020 f9 67 6e 2b ab e2 00 00 00 03 87 de 9a b3 7b 41 .gn+..........{A 0030 6c 04 89 88 75 4d c4 93 d5 f1 24 84 95 c7 4f ff l...uM....$...O. 0040 29 5c 21 25 69 6e 1c f1 44 b3 92 ff fe 98 c2 31 )\!%in..D......1 0050 14 24 9b 2b 79 c0 b1 a9 6a d5 e6 60 00 20 bb 5d .$.+y...j..`. .] 0060 1c 3f 51 02 46 28 45 cb ce c5 fc 1b 7b 83 6f b6 .?Q.F(E.....{.o. 0070 36 33 a5 63 de 09 fb 30 6e 7c f7 18 bf 29 ef 89 63.c...0n|...).. 0080 94 e5 .. Frame 19 (130 bytes on wire, 130 bytes captured) Arrival Time: Apr 4, 2005 13:50:34.320219000 Time delta from previous packet: 0.001058000 seconds Time since reference or first frame: 6.184729000 seconds Frame Number: 19 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:d0:c9:94:ef:f7, Dst: 00:0c:29:fc:0c:9f Destination: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Source: 00:d0:c9:94:ef:f7 (00:d0:c9:94:ef:f7) Type: IP (0x0800) Frame check sequence: 0x121643b1 (correct) Internet Protocol, Src Addr: 165.227.249.103 (165.227.249.103), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0026 (38) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 30 Protocol: ESP (0x32) Header checksum: 0x5d8d (correct) Source: 165.227.249.103 (165.227.249.103) Destination: 165.227.249.122 (165.227.249.122) Encapsulating Security Payload SPI: 0xee67a69f Sequence: 2 Data (84 bytes) 0000 00 0c 29 fc 0c 9f 00 d0 c9 94 ef f7 08 00 45 00 ..)...........E. 0010 00 70 00 26 00 00 1e 32 5d 8d a5 e3 f9 67 a5 e3 .p.&...2]....g.. 0020 f9 7a ee 67 a6 9f 00 00 00 02 f5 70 8a fc 32 56 .z.g.......p..2V 0030 5d ab 65 f2 92 55 de 7d 90 2a 15 73 f7 35 91 71 ].e..U.}.*.s.5.q 0040 95 bb ca 88 3f 09 d1 68 6b f6 4f b2 e9 3f af 4c ....?..hk.O..?.L 0050 0e d7 05 29 71 eb 55 d0 f2 64 68 18 54 de 4d b4 ...)q.U..dh.T.M. 0060 c8 18 57 b4 4b 0b 6b cc eb 42 08 c0 d0 d2 ba 61 ..W.K.k..B.....a 0070 79 2a 14 d4 c8 0e 94 33 86 ce d8 9d b5 0c 12 16 y*.....3........ 0080 43 b1 C. Frame 20 (130 bytes on wire, 130 bytes captured) Arrival Time: Apr 4, 2005 13:50:35.341960000 Time delta from previous packet: 1.021741000 seconds Time since reference or first frame: 7.206470000 seconds Frame Number: 20 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:00:24:c3:5e:28 Destination: 00:00:24:c3:5e:28 (00:00:24:c3:5e:28) Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Type: IP (0x0800) Frame check sequence: 0xc17b2198 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.103 (165.227.249.103) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x007a (122) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x7c38 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.103 (165.227.249.103) Encapsulating Security Payload SPI: 0x6e2babe2 Sequence: 4 Data (84 bytes) 0000 00 00 24 c3 5e 28 00 0c 29 fc 0c 9f 08 00 45 00 ..$.^(..).....E. 0010 00 70 00 7a 00 00 ff 32 7c 38 a5 e3 f9 7a a5 e3 .p.z...2|8...z.. 0020 f9 67 6e 2b ab e2 00 00 00 04 fc 1b 7b 83 6f b6 .gn+........{.o. 0030 36 33 5b 35 be 32 77 91 8b cd ab 0c ad 02 2d d9 63[5.2w.......-. 0040 a2 c1 8e 71 ee 34 e0 86 87 30 2c 76 26 63 cb 7c ...q.4...0,v&c.| 0050 23 e6 25 a4 a2 c6 ca bf 81 44 57 0c 27 63 d2 be #.%......DW.'c.. 0060 99 3f 37 4f ea 14 9a c6 08 82 93 d5 67 d9 b9 d6 .?7O........g... 0070 08 fb 46 37 0c 0c 8d 86 61 31 10 d4 4c f6 c1 7b ..F7....a1..L..{ 0080 21 98 !. Frame 21 (130 bytes on wire, 130 bytes captured) Arrival Time: Apr 4, 2005 13:50:35.342295000 Time delta from previous packet: 0.000335000 seconds Time since reference or first frame: 7.206805000 seconds Frame Number: 21 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:00:24:c3:5e:28, Dst: 00:d0:c9:94:ef:f7 Destination: 00:d0:c9:94:ef:f7 (00:d0:c9:94:ef:f7) Source: 00:00:24:c3:5e:28 (00:00:24:c3:5e:28) Type: IP (0x0800) Frame check sequence: 0x9fde57fc (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.103 (165.227.249.103) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x007a (122) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 254 Protocol: ESP (0x32) Header checksum: 0x7d38 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.103 (165.227.249.103) Encapsulating Security Payload SPI: 0x6e2babe2 Sequence: 4 Data (84 bytes) 0000 00 d0 c9 94 ef f7 00 00 24 c3 5e 28 08 00 45 00 ........$.^(..E. 0010 00 70 00 7a 00 00 fe 32 7d 38 a5 e3 f9 7a a5 e3 .p.z...2}8...z.. 0020 f9 67 6e 2b ab e2 00 00 00 04 fc 1b 7b 83 6f b6 .gn+........{.o. 0030 36 33 5b 35 be 32 77 91 8b cd ab 0c ad 02 2d d9 63[5.2w.......-. 0040 a2 c1 8e 71 ee 34 e0 86 87 30 2c 76 26 63 cb 7c ...q.4...0,v&c.| 0050 23 e6 25 a4 a2 c6 ca bf 81 44 57 0c 27 63 d2 be #.%......DW.'c.. 0060 99 3f 37 4f ea 14 9a c6 08 82 93 d5 67 d9 b9 d6 .?7O........g... 0070 08 fb 46 37 0c 0c 8d 86 61 31 10 d4 4c f6 9f de ..F7....a1..L... 0080 57 fc W. Frame 22 (130 bytes on wire, 130 bytes captured) Arrival Time: Apr 4, 2005 13:50:35.343331000 Time delta from previous packet: 0.001036000 seconds Time since reference or first frame: 7.207841000 seconds Frame Number: 22 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:d0:c9:94:ef:f7, Dst: 00:0c:29:fc:0c:9f Destination: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Source: 00:d0:c9:94:ef:f7 (00:d0:c9:94:ef:f7) Type: IP (0x0800) Frame check sequence: 0x36b660ca (correct) Internet Protocol, Src Addr: 165.227.249.103 (165.227.249.103), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0027 (39) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 30 Protocol: ESP (0x32) Header checksum: 0x5d8c (correct) Source: 165.227.249.103 (165.227.249.103) Destination: 165.227.249.122 (165.227.249.122) Encapsulating Security Payload SPI: 0xee67a69f Sequence: 3 Data (84 bytes) 0000 00 0c 29 fc 0c 9f 00 d0 c9 94 ef f7 08 00 45 00 ..)...........E. 0010 00 70 00 27 00 00 1e 32 5d 8c a5 e3 f9 67 a5 e3 .p.'...2]....g.. 0020 f9 7a ee 67 a6 9f 00 00 00 03 b5 77 a6 b0 69 62 .z.g.......w..ib 0030 cb fc 3a f9 83 c8 31 f3 39 d2 cd a2 e2 01 fa de ..:...1.9....... 0040 ba 52 a1 a9 ed 9b 6c 91 85 d7 90 30 6a 5e 68 4a .R....l....0j^hJ 0050 c6 e7 eb 27 be 85 39 1c a0 bf 1f 18 9a 36 81 51 ...'..9......6.Q 0060 c3 b7 88 41 d4 49 b2 53 40 57 df 82 66 bc 51 1a ...A.I.S@W..f.Q. 0070 cf f8 20 69 8e 52 fc a3 cc 59 6d 6f c2 92 36 b6 .. i.R...Ymo..6. 0080 60 ca `.