Frame 1 (174 bytes on wire, 174 bytes captured) Arrival Time: Nov 3, 2005 11:23:05.231935000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 174 bytes Capture Length: 174 bytes Ethernet II, Src: 00:0c:29:89:f2:82, Dst: 00:0f:b5:59:12:87 Destination: 00:0f:b5:59:12:87 (00:0f:b5:59:12:87) Source: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Type: IP (0x0800) Frame check sequence: 0x148f700a (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.105 (165.227.249.105) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 156 Identification: 0x002f (47) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb76 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.105 (165.227.249.105) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 136 Checksum: 0x3d85 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x33947882270147DE Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 128 Security Association payload Next payload: Vendor ID (13) Length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 44 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 36 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: NONE (0) Length: 44 Vendor ID: Check Point Check Point Product: VPN-1 Version: NG with Application Intelligence R55 0000 00 0f b5 59 12 87 00 0c 29 89 f2 82 08 00 45 00 ...Y....).....E. 0010 00 9c 00 2f 40 00 40 11 fb 76 a5 e3 f9 7a a5 e3 .../@.@..v...z.. 0020 f9 69 01 f4 01 f4 00 88 3d 85 33 94 78 82 27 01 .i......=.3.x.'. 0030 47 de 00 00 00 00 00 00 00 00 01 10 02 00 00 00 G............... 0040 00 00 00 00 00 80 0d 00 00 38 00 00 00 01 00 00 .........8...... 0050 00 01 00 00 00 2c 01 01 00 01 00 00 00 24 01 01 .....,.......$.. 0060 00 00 80 01 00 05 80 02 00 02 80 03 00 01 80 04 ................ 0070 00 02 80 0b 00 01 00 0c 00 04 00 00 70 80 00 00 ............p... 0080 00 2c f4 ed 19 e0 c1 14 eb 51 6f aa ac 0e e3 7d .,.......Qo....} 0090 af 28 07 b4 38 1f 00 00 00 01 00 00 13 8d 42 c2 .(..8.........B. 00a0 48 1b 00 00 00 00 18 00 00 00 14 8f 70 0a H...........p. Frame 2 (150 bytes on wire, 150 bytes captured) Arrival Time: Nov 3, 2005 11:23:05.376913000 Time delta from previous packet: 0.144978000 seconds Time since reference or first frame: 0.144978000 seconds Frame Number: 2 Packet Length: 150 bytes Capture Length: 150 bytes Ethernet II, Src: 00:0f:b5:59:12:87, Dst: 00:0c:29:89:f2:82 Destination: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Source: 00:0f:b5:59:12:87 (00:0f:b5:59:12:87) Type: IP (0x0800) Frame check sequence: 0x9bdc2757 (correct) Internet Protocol, Src Addr: 165.227.249.105 (165.227.249.105), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 132 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfbbd (correct) Source: 165.227.249.105 (165.227.249.105) Destination: 165.227.249.122 (165.227.249.122) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 112 Checksum: 0xde01 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x33947882270147DE Responder cookie: 0x26B909234C6DE748 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 104 Security Association payload Next payload: Vendor ID (13) Length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 44 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 36 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: draft-ietf-ipsec-dpd-00.txt 0000 00 0c 29 89 f2 82 00 0f b5 59 12 87 08 00 45 00 ..)......Y....E. 0010 00 84 00 00 40 00 40 11 fb bd a5 e3 f9 69 a5 e3 ....@.@......i.. 0020 f9 7a 01 f4 01 f4 00 70 de 01 33 94 78 82 27 01 .z.....p..3.x.'. 0030 47 de 26 b9 09 23 4c 6d e7 48 01 10 02 00 00 00 G.&..#Lm.H...... 0040 00 00 00 00 00 68 0d 00 00 38 00 00 00 01 00 00 .....h...8...... 0050 00 01 00 00 00 2c 01 01 00 01 00 00 00 24 01 01 .....,.......$.. 0060 00 00 80 01 00 05 80 02 00 02 80 03 00 01 80 04 ................ 0070 00 02 80 0b 00 01 00 0c 00 04 00 00 70 80 00 00 ............p... 0080 00 14 af ca d7 13 68 a1 f1 c9 6b 86 96 fc 77 57 ......h...k...wW 0090 01 00 9b dc 27 57 ....'W Frame 3 (230 bytes on wire, 230 bytes captured) Arrival Time: Nov 3, 2005 11:23:05.382096000 Time delta from previous packet: 0.005183000 seconds Time since reference or first frame: 0.150161000 seconds Frame Number: 3 Packet Length: 230 bytes Capture Length: 230 bytes Ethernet II, Src: 00:0c:29:89:f2:82, Dst: 00:0f:b5:59:12:87 Destination: 00:0f:b5:59:12:87 (00:0f:b5:59:12:87) Source: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Type: IP (0x0800) Frame check sequence: 0x3c9d4667 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.105 (165.227.249.105) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 212 Identification: 0x0030 (48) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb3d (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.105 (165.227.249.105) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 192 Checksum: 0x5e1e (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x33947882270147DE Responder cookie: 0x26B909234C6DE748 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 184 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 24 Nonce Data 0000 00 0f b5 59 12 87 00 0c 29 89 f2 82 08 00 45 00 ...Y....).....E. 0010 00 d4 00 30 40 00 40 11 fb 3d a5 e3 f9 7a a5 e3 ...0@.@..=...z.. 0020 f9 69 01 f4 01 f4 00 c0 5e 1e 33 94 78 82 27 01 .i......^.3.x.'. 0030 47 de 26 b9 09 23 4c 6d e7 48 04 10 02 00 00 00 G.&..#Lm.H...... 0040 00 00 00 00 00 b8 0a 00 00 84 b9 2c 38 c9 6f 5e ...........,8.o^ 0050 3b 7a 69 5c 79 5b 14 d0 fa fd 47 fb 51 c1 82 38 ;zi\y[....G.Q..8 0060 2e 49 f7 67 90 64 e5 a4 ed 38 ce 8f c2 1f d1 99 .I.g.d...8...... 0070 da f6 8c c6 dc 3e 11 c9 67 9c 68 c6 90 c0 7a 99 .....>..g.h...z. 0080 aa cc 27 7a 10 39 16 6a 7f 5e 9b 05 14 5d 93 13 ..'z.9.j.^...].. 0090 6c 19 51 0f 96 44 a2 27 9d 81 d6 8b 2c 6d e3 20 l.Q..D.'....,m. 00a0 b8 a0 4f 7d 90 86 83 f9 98 be 23 9c c5 b1 fd a2 ..O}......#..... 00b0 bd c4 1d 9e ab 99 a9 02 c4 b3 0e c2 eb b2 01 ed ................ 00c0 72 74 ca 5a 53 c3 c1 7d ab 96 00 00 00 18 72 d3 rt.ZS..}......r. 00d0 99 8b 4a 65 af b6 bc 14 d5 59 36 1e 47 5e 4b b9 ..Je.....Y6.G^K. 00e0 e5 ae 3c 9d 46 67 ..<.Fg Frame 4 (226 bytes on wire, 226 bytes captured) Arrival Time: Nov 3, 2005 11:23:05.708190000 Time delta from previous packet: 0.326094000 seconds Time since reference or first frame: 0.476255000 seconds Frame Number: 4 Packet Length: 226 bytes Capture Length: 226 bytes Ethernet II, Src: 00:0f:b5:59:12:87, Dst: 00:0c:29:89:f2:82 Destination: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Source: 00:0f:b5:59:12:87 (00:0f:b5:59:12:87) Type: IP (0x0800) Frame check sequence: 0x22b40a25 (correct) Internet Protocol, Src Addr: 165.227.249.105 (165.227.249.105), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 208 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb71 (correct) Source: 165.227.249.105 (165.227.249.105) Destination: 165.227.249.122 (165.227.249.122) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 188 Checksum: 0x8e48 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x33947882270147DE Responder cookie: 0x26B909234C6DE748 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 180 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 20 Nonce Data 0000 00 0c 29 89 f2 82 00 0f b5 59 12 87 08 00 45 00 ..)......Y....E. 0010 00 d0 00 00 40 00 40 11 fb 71 a5 e3 f9 69 a5 e3 ....@.@..q...i.. 0020 f9 7a 01 f4 01 f4 00 bc 8e 48 33 94 78 82 27 01 .z.......H3.x.'. 0030 47 de 26 b9 09 23 4c 6d e7 48 04 10 02 00 00 00 G.&..#Lm.H...... 0040 00 00 00 00 00 b4 0a 00 00 84 d0 73 5d 85 dc 2e ...........s]... 0050 5d 51 42 90 c3 92 80 0f 17 3b b1 65 3c 9b 04 ed ]QB......;.e<... 0060 c0 bc 5e 84 0d a9 d4 6a 5f fe 53 c7 1f 39 6a a5 ..^....j_.S..9j. 0070 ef 22 ae 8d 6b 35 85 c3 24 c6 3a 52 19 c2 de 08 ."..k5..$.:R.... 0080 ef cc be 29 39 af ca 98 71 61 03 0b 3f 6c c2 de ...)9...qa..?l.. 0090 35 d9 bf 45 6a 23 64 4c d9 65 52 71 a6 1c 47 ae 5..Ej#dL.eRq..G. 00a0 f6 c3 61 f8 c5 4a 23 26 1b a2 f5 e5 9e bb 6e 84 ..a..J#&......n. 00b0 5c 83 80 33 42 fc f4 23 b9 5f 27 b2 2c 31 11 6c \..3B..#._'.,1.l 00c0 ad 88 2b 97 8b da da 1f fc d6 00 00 00 14 73 64 ..+...........sd 00d0 f5 6e a6 ea 32 ba 37 0b 12 5a a5 46 7b a2 22 b4 .n..2.7..Z.F{.". 00e0 0a 25 .% Frame 5 (114 bytes on wire, 114 bytes captured) Arrival Time: Nov 3, 2005 11:23:05.714540000 Time delta from previous packet: 0.006350000 seconds Time since reference or first frame: 0.482605000 seconds Frame Number: 5 Packet Length: 114 bytes Capture Length: 114 bytes Ethernet II, Src: 00:0c:29:89:f2:82, Dst: 00:0f:b5:59:12:87 Destination: 00:0f:b5:59:12:87 (00:0f:b5:59:12:87) Source: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Type: IP (0x0800) Frame check sequence: 0xca94c922 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.105 (165.227.249.105) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0x0031 (49) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfbb0 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.105 (165.227.249.105) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 76 Checksum: 0x640b (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x33947882270147DE Responder cookie: 0x26B909234C6DE748 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 68 Encrypted payload (40 bytes) 0000 00 0f b5 59 12 87 00 0c 29 89 f2 82 08 00 45 00 ...Y....).....E. 0010 00 60 00 31 40 00 40 11 fb b0 a5 e3 f9 7a a5 e3 .`.1@.@......z.. 0020 f9 69 01 f4 01 f4 00 4c 64 0b 33 94 78 82 27 01 .i.....Ld.3.x.'. 0030 47 de 26 b9 09 23 4c 6d e7 48 05 10 02 01 00 00 G.&..#Lm.H...... 0040 00 00 00 00 00 44 f4 2c ef df 92 57 1c bf f5 bb .....D.,...W.... 0050 29 be a4 83 66 02 e3 ea 21 c0 cf 60 3a 95 c5 50 )...f...!..`:..P 0060 9a 2d f5 97 61 9a be de 41 02 3d ac 11 d7 ca 94 .-..a...A.=..... 0070 c9 22 ." Frame 6 (114 bytes on wire, 114 bytes captured) Arrival Time: Nov 3, 2005 11:23:05.840670000 Time delta from previous packet: 0.126130000 seconds Time since reference or first frame: 0.608735000 seconds Frame Number: 6 Packet Length: 114 bytes Capture Length: 114 bytes Ethernet II, Src: 00:0f:b5:59:12:87, Dst: 00:0c:29:89:f2:82 Destination: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Source: 00:0f:b5:59:12:87 (00:0f:b5:59:12:87) Type: IP (0x0800) Frame check sequence: 0xe8d11834 (correct) Internet Protocol, Src Addr: 165.227.249.105 (165.227.249.105), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfbe1 (correct) Source: 165.227.249.105 (165.227.249.105) Destination: 165.227.249.122 (165.227.249.122) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 76 Checksum: 0x99d2 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x33947882270147DE Responder cookie: 0x26B909234C6DE748 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 68 Encrypted payload (40 bytes) 0000 00 0c 29 89 f2 82 00 0f b5 59 12 87 08 00 45 00 ..)......Y....E. 0010 00 60 00 00 40 00 40 11 fb e1 a5 e3 f9 69 a5 e3 .`..@.@......i.. 0020 f9 7a 01 f4 01 f4 00 4c 99 d2 33 94 78 82 27 01 .z.....L..3.x.'. 0030 47 de 26 b9 09 23 4c 6d e7 48 05 10 02 01 00 00 G.&..#Lm.H...... 0040 00 00 00 00 00 44 8a cd 15 e6 c3 87 c5 db 03 b1 .....D.......... 0050 45 9f d2 ce b7 3a ce 86 c9 32 ea 28 13 ca 1a 32 E....:...2.(...2 0060 4e f7 a9 5f 2b c0 7a f9 84 31 6c d1 5f af e8 d1 N.._+.z..1l._... 0070 18 34 .4 Frame 7 (346 bytes on wire, 346 bytes captured) Arrival Time: Nov 3, 2005 11:23:05.847188000 Time delta from previous packet: 0.006518000 seconds Time since reference or first frame: 0.615253000 seconds Frame Number: 7 Packet Length: 346 bytes Capture Length: 346 bytes Ethernet II, Src: 00:0c:29:89:f2:82, Dst: 00:0f:b5:59:12:87 Destination: 00:0f:b5:59:12:87 (00:0f:b5:59:12:87) Source: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Type: IP (0x0800) Frame check sequence: 0xe771707c (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.105 (165.227.249.105) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 328 Identification: 0x0032 (50) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfac7 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.105 (165.227.249.105) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 308 Checksum: 0x44ff (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x33947882270147DE Responder cookie: 0x26B909234C6DE748 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xEB76A523 Length: 300 Encrypted payload (272 bytes) 0000 00 0f b5 59 12 87 00 0c 29 89 f2 82 08 00 45 00 ...Y....).....E. 0010 01 48 00 32 40 00 40 11 fa c7 a5 e3 f9 7a a5 e3 .H.2@.@......z.. 0020 f9 69 01 f4 01 f4 01 34 44 ff 33 94 78 82 27 01 .i.....4D.3.x.'. 0030 47 de 26 b9 09 23 4c 6d e7 48 08 10 20 01 eb 76 G.&..#Lm.H.. ..v 0040 a5 23 00 00 01 2c 7e c6 28 e9 c8 1c 8c c0 10 d3 .#...,~.(....... 0050 75 6a 14 bc bc bc 1d f9 dd a3 fd 9d 85 23 60 40 uj...........#`@ 0060 44 5f 9c 02 32 ea 1b 6a e6 d7 f9 09 4d 26 db 38 D_..2..j....M&.8 0070 c8 af ed 0a e4 09 2c 04 f2 9f ec bb 26 ed 20 f5 ......,.....&. . 0080 10 ca 76 68 a2 c7 16 d2 d6 94 b7 d5 2c 8f 13 1c ..vh........,... 0090 52 a5 f7 6e 99 1d 2b 6c b6 d6 f4 4a 54 dc ae 08 R..n..+l...JT... 00a0 93 c6 57 72 db 0b c1 4a 05 5d 32 0c 5a 37 6d b5 ..Wr...J.]2.Z7m. 00b0 4e a6 89 da b5 46 65 4b c4 99 19 e2 9b 7f 0b b6 N....FeK........ 00c0 23 79 0a 36 6c 27 85 e7 c7 a4 a0 2c ed 95 2f f3 #y.6l'.....,../. 00d0 3b 8a 21 db 92 f8 24 27 e9 a1 9f e8 e2 29 01 f4 ;.!...$'.....).. 00e0 66 67 66 65 e2 c7 e0 93 7b ff a7 af 6b 48 cb 58 fgfe....{...kH.X 00f0 91 78 ad bc 80 28 df 03 e2 92 19 2f 10 b1 54 79 .x...(...../..Ty 0100 b0 c9 44 12 2d c6 d6 7d 54 c3 b9 29 cd dc a6 bf ..D.-..}T..).... 0110 f8 28 44 a5 ea 1a d3 04 19 f0 00 28 f3 2e 42 c4 .(D........(..B. 0120 dc 0e a8 ff 91 50 1c 76 3e 6e f9 80 f7 aa 93 ad .....P.v>n...... 0130 79 44 bc aa d8 d2 14 f3 bd da c1 bd 29 94 f3 0a yD..........)... 0140 4e 06 96 dd 9f 2e 1d b1 6a ec 0a b6 8d 2a 95 fa N.......j....*.. 0150 30 76 56 8e cd 38 e7 71 70 7c 0vV..8.qp| Frame 8 (338 bytes on wire, 338 bytes captured) Arrival Time: Nov 3, 2005 11:23:06.265005000 Time delta from previous packet: 0.417817000 seconds Time since reference or first frame: 1.033070000 seconds Frame Number: 8 Packet Length: 338 bytes Capture Length: 338 bytes Ethernet II, Src: 00:0f:b5:59:12:87, Dst: 00:0c:29:89:f2:82 Destination: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Source: 00:0f:b5:59:12:87 (00:0f:b5:59:12:87) Type: IP (0x0800) Frame check sequence: 0x49d873a7 (correct) Internet Protocol, Src Addr: 165.227.249.105 (165.227.249.105), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 320 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb01 (correct) Source: 165.227.249.105 (165.227.249.105) Destination: 165.227.249.122 (165.227.249.122) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 300 Checksum: 0x9ea5 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x33947882270147DE Responder cookie: 0x26B909234C6DE748 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xEB76A523 Length: 292 Encrypted payload (264 bytes) 0000 00 0c 29 89 f2 82 00 0f b5 59 12 87 08 00 45 00 ..)......Y....E. 0010 01 40 00 00 40 00 40 11 fb 01 a5 e3 f9 69 a5 e3 .@..@.@......i.. 0020 f9 7a 01 f4 01 f4 01 2c 9e a5 33 94 78 82 27 01 .z.....,..3.x.'. 0030 47 de 26 b9 09 23 4c 6d e7 48 08 10 20 01 eb 76 G.&..#Lm.H.. ..v 0040 a5 23 00 00 01 24 69 a7 90 8e c2 99 e9 7c e1 90 .#...$i......|.. 0050 9b fb 99 4e cd 16 87 41 39 5c 23 39 43 ea 7a 9b ...N...A9\#9C.z. 0060 c2 69 93 51 4b 8f 67 40 60 53 b1 0e 44 5a 92 41 .i.QK.g@`S..DZ.A 0070 93 de 39 f7 86 a4 c6 9a ef 63 82 ff 15 1f 9a 74 ..9......c.....t 0080 93 94 f7 48 42 63 3c 21 95 08 cc 28 d1 52 13 42 ...HBcGF.]... 00a0 ce b8 c1 bf ec 29 9a 9a 8a 12 ba 9c 6b 5f 34 be .....)......k_4. 00b0 7f b7 8c e5 00 46 bb ea 59 c4 fe e1 b9 da 6a 62 .....F..Y.....jb 00c0 94 f5 e3 72 7c a5 d8 b6 3a 33 37 da 3d c6 ad 77 ...r|...:37.=..w 00d0 05 26 aa eb f5 c4 ec f1 18 e7 6a ed 3a dc cc bc .&........j.:... 00e0 39 d4 22 b4 45 78 9d fb 63 0b 68 47 e4 d5 84 32 9.".Ex..c.hG...2 00f0 c2 fd 44 06 b7 c0 cc 24 98 0c 07 3c cf c9 d2 fc ..D....$...<.... 0100 be 08 b9 00 1b dd b1 fd 17 8f b9 db 1b 54 7b 5d .............T{] 0110 c0 65 15 3c e0 8a d1 62 4a 23 00 da d7 bc 79 8c .e.<...bJ#....y. 0120 6d 59 d6 92 f2 f0 28 d2 ca ba 1c 0b b9 d4 ee 64 mY....(........d 0130 cc c3 be 1c 5a 9f a9 d4 2e 1a 61 df 1d d1 87 d4 ....Z.....a..... 0140 4b 54 77 ee 80 5d f6 b2 84 17 c3 8b f1 15 49 d8 KTw..]........I. 0150 73 a7 s. Frame 9 (106 bytes on wire, 106 bytes captured) Arrival Time: Nov 3, 2005 11:23:06.272080000 Time delta from previous packet: 0.007075000 seconds Time since reference or first frame: 1.040145000 seconds Frame Number: 9 Packet Length: 106 bytes Capture Length: 106 bytes Ethernet II, Src: 00:0c:29:89:f2:82, Dst: 00:0f:b5:59:12:87 Destination: 00:0f:b5:59:12:87 (00:0f:b5:59:12:87) Source: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Type: IP (0x0800) Frame check sequence: 0x92a15d2f (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.105 (165.227.249.105) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 88 Identification: 0x0033 (51) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfbb6 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.105 (165.227.249.105) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 68 Checksum: 0xd7b1 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x33947882270147DE Responder cookie: 0x26B909234C6DE748 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xEB76A523 Length: 60 Encrypted payload (32 bytes) 0000 00 0f b5 59 12 87 00 0c 29 89 f2 82 08 00 45 00 ...Y....).....E. 0010 00 58 00 33 40 00 40 11 fb b6 a5 e3 f9 7a a5 e3 .X.3@.@......z.. 0020 f9 69 01 f4 01 f4 00 44 d7 b1 33 94 78 82 27 01 .i.....D..3.x.'. 0030 47 de 26 b9 09 23 4c 6d e7 48 08 10 20 01 eb 76 G.&..#Lm.H.. ..v 0040 a5 23 00 00 00 3c e9 22 32 be 2a 28 d5 af c8 6f .#...<."2.*(...o 0050 c0 05 7f 0c 6a 6a 7d 9a 5c b3 8a a8 64 42 c9 f4 ....jj}.\...dB.. 0060 7f 05 cc 59 41 7e 92 a1 5d 2f ...YA~..]/ Frame 10 (106 bytes on wire, 106 bytes captured) Arrival Time: Nov 3, 2005 11:23:06.373690000 Time delta from previous packet: 0.101610000 seconds Time since reference or first frame: 1.141755000 seconds Frame Number: 10 Packet Length: 106 bytes Capture Length: 106 bytes Ethernet II, Src: 00:0c:29:89:f2:82, Dst: 00:0f:b5:59:12:87 Destination: 00:0f:b5:59:12:87 (00:0f:b5:59:12:87) Source: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Type: IP (0x0800) Frame check sequence: 0x076862a5 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.105 (165.227.249.105) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 88 Identification: 0x0034 (52) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfbb5 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.105 (165.227.249.105) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 68 Checksum: 0xd7b1 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x33947882270147DE Responder cookie: 0x26B909234C6DE748 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xEB76A523 Length: 60 Encrypted payload (32 bytes) 0000 00 0f b5 59 12 87 00 0c 29 89 f2 82 08 00 45 00 ...Y....).....E. 0010 00 58 00 34 40 00 40 11 fb b5 a5 e3 f9 7a a5 e3 .X.4@.@......z.. 0020 f9 69 01 f4 01 f4 00 44 d7 b1 33 94 78 82 27 01 .i.....D..3.x.'. 0030 47 de 26 b9 09 23 4c 6d e7 48 08 10 20 01 eb 76 G.&..#Lm.H.. ..v 0040 a5 23 00 00 00 3c e9 22 32 be 2a 28 d5 af c8 6f .#...<."2.*(...o 0050 c0 05 7f 0c 6a 6a 7d 9a 5c b3 8a a8 64 42 c9 f4 ....jj}.\...dB.. 0060 7f 05 cc 59 41 7e 07 68 62 a5 ...YA~.hb. Frame 11 (106 bytes on wire, 106 bytes captured) Arrival Time: Nov 3, 2005 11:23:06.475466000 Time delta from previous packet: 0.101776000 seconds Time since reference or first frame: 1.243531000 seconds Frame Number: 11 Packet Length: 106 bytes Capture Length: 106 bytes Ethernet II, Src: 00:0c:29:89:f2:82, Dst: 00:0f:b5:59:12:87 Destination: 00:0f:b5:59:12:87 (00:0f:b5:59:12:87) Source: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Type: IP (0x0800) Frame check sequence: 0xe3e3f262 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.105 (165.227.249.105) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 88 Identification: 0x0035 (53) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfbb4 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.105 (165.227.249.105) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 68 Checksum: 0xd7b1 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x33947882270147DE Responder cookie: 0x26B909234C6DE748 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xEB76A523 Length: 60 Encrypted payload (32 bytes) 0000 00 0f b5 59 12 87 00 0c 29 89 f2 82 08 00 45 00 ...Y....).....E. 0010 00 58 00 35 40 00 40 11 fb b4 a5 e3 f9 7a a5 e3 .X.5@.@......z.. 0020 f9 69 01 f4 01 f4 00 44 d7 b1 33 94 78 82 27 01 .i.....D..3.x.'. 0030 47 de 26 b9 09 23 4c 6d e7 48 08 10 20 01 eb 76 G.&..#Lm.H.. ..v 0040 a5 23 00 00 00 3c e9 22 32 be 2a 28 d5 af c8 6f .#...<."2.*(...o 0050 c0 05 7f 0c 6a 6a 7d 9a 5c b3 8a a8 64 42 c9 f4 ....jj}.\...dB.. 0060 7f 05 cc 59 41 7e e3 e3 f2 62 ...YA~...b Frame 12 (130 bytes on wire, 130 bytes captured) Arrival Time: Nov 3, 2005 11:23:06.573530000 Time delta from previous packet: 0.098064000 seconds Time since reference or first frame: 1.341595000 seconds Frame Number: 12 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:0c:29:89:f2:82, Dst: 00:0f:b5:59:12:87 Destination: 00:0f:b5:59:12:87 (00:0f:b5:59:12:87) Source: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Type: IP (0x0800) Frame check sequence: 0x6f5fef28 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.105 (165.227.249.105) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x001a (26) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x7c96 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.105 (165.227.249.105) Encapsulating Security Payload SPI: 0x45f64803 Sequence: 1 Data (84 bytes) 0000 00 0f b5 59 12 87 00 0c 29 89 f2 82 08 00 45 00 ...Y....).....E. 0010 00 70 00 1a 00 00 ff 32 7c 96 a5 e3 f9 7a a5 e3 .p.....2|....z.. 0020 f9 69 45 f6 48 03 00 00 00 01 8c 73 08 3a ac be .iE.H......s.:.. 0030 58 dc f4 e4 07 69 30 7a bb 2a 3b 01 b1 d2 78 b0 X....i0z.*;...x. 0040 88 16 df 35 04 b1 a9 59 cb 55 3a 76 c4 cf 93 2b ...5...Y.U:v...+ 0050 5d 5e 6f bf ed ec 80 50 65 bb fd c7 00 ba 29 b2 ]^o....Pe.....). 0060 c0 fa ae 6d 96 de a3 4f ee 9c 47 45 96 a6 c2 f8 ...m...O..GE.... 0070 4a 53 39 2f 91 c9 7d 39 a0 76 b9 e2 b3 1a 6f 5f JS9/..}9.v....o_ 0080 ef 28 .( Frame 13 (130 bytes on wire, 130 bytes captured) Arrival Time: Nov 3, 2005 11:23:06.688694000 Time delta from previous packet: 0.115164000 seconds Time since reference or first frame: 1.456759000 seconds Frame Number: 13 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:0f:b5:59:12:87, Dst: 00:0c:29:89:f2:82 Destination: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Source: 00:0f:b5:59:12:87 (00:0f:b5:59:12:87) Type: IP (0x0800) Frame check sequence: 0xcb75458c (correct) Internet Protocol, Src Addr: 165.227.249.105 (165.227.249.105), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x7073 (28787) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0xcb3d (correct) Source: 165.227.249.105 (165.227.249.105) Destination: 165.227.249.122 (165.227.249.122) Encapsulating Security Payload SPI: 0xb386e643 Sequence: 1 Data (84 bytes) 0000 00 0c 29 89 f2 82 00 0f b5 59 12 87 08 00 45 00 ..)......Y....E. 0010 00 70 70 73 00 00 40 32 cb 3d a5 e3 f9 69 a5 e3 .pps..@2.=...i.. 0020 f9 7a b3 86 e6 43 00 00 00 01 1a c0 a9 3a a6 5d .z...C.......:.] 0030 06 b9 e6 ef 54 47 f6 79 46 b6 2b 37 eb 66 bf 02 ....TG.yF.+7.f.. 0040 a6 73 6d 6d 41 b1 9d f0 19 03 04 1f c7 26 11 f1 .smmA........&.. 0050 1f 4f 2d aa 18 f5 e7 62 b2 cf 04 0e 6a 1c 65 ef .O-....b....j.e. 0060 bb 6a 2f 67 48 57 b0 b9 58 d4 0b 92 24 6f 4a fe .j/gHW..X...$oJ. 0070 f8 06 5b 7e 92 59 eb 6e 6d 23 e2 f5 42 a9 cb 75 ..[~.Y.nm#..B..u 0080 45 8c E. Frame 14 (130 bytes on wire, 130 bytes captured) Arrival Time: Nov 3, 2005 11:23:06.703211000 Time delta from previous packet: 0.014517000 seconds Time since reference or first frame: 1.471276000 seconds Frame Number: 14 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:0c:29:89:f2:82, Dst: 00:0f:b5:59:12:87 Destination: 00:0f:b5:59:12:87 (00:0f:b5:59:12:87) Source: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Type: IP (0x0800) Frame check sequence: 0x2bbd0bb3 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.105 (165.227.249.105) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x001b (27) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x7c95 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.105 (165.227.249.105) Encapsulating Security Payload SPI: 0x45f64803 Sequence: 2 Data (84 bytes) 0000 00 0f b5 59 12 87 00 0c 29 89 f2 82 08 00 45 00 ...Y....).....E. 0010 00 70 00 1b 00 00 ff 32 7c 95 a5 e3 f9 7a a5 e3 .p.....2|....z.. 0020 f9 69 45 f6 48 03 00 00 00 02 1a 32 35 e3 cf 51 .iE.H......25..Q 0030 2e cf 70 e0 67 30 c2 bb cc 71 e8 9a a1 65 09 30 ..p.g0...q...e.0 0040 82 2e d4 4c 92 87 53 2d 11 ea a4 96 77 31 ef 88 ...L..S-....w1.. 0050 13 f2 eb 55 31 59 56 99 29 d8 f5 16 8d dd d6 dc ...U1YV.)....... 0060 9e 40 49 05 24 a5 84 c6 c5 88 d5 ab 63 8b 24 b3 .@I.$.......c.$. 0070 94 fc da 9a 8d 87 c2 e6 7c e3 46 9f 2b db 2b bd ........|.F.+.+. 0080 0b b3 .. Frame 15 (130 bytes on wire, 130 bytes captured) Arrival Time: Nov 3, 2005 11:23:06.821316000 Time delta from previous packet: 0.118105000 seconds Time since reference or first frame: 1.589381000 seconds Frame Number: 15 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:0f:b5:59:12:87, Dst: 00:0c:29:89:f2:82 Destination: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Source: 00:0f:b5:59:12:87 (00:0f:b5:59:12:87) Type: IP (0x0800) Frame check sequence: 0x6ecae661 (correct) Internet Protocol, Src Addr: 165.227.249.105 (165.227.249.105), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x7074 (28788) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0xcb3c (correct) Source: 165.227.249.105 (165.227.249.105) Destination: 165.227.249.122 (165.227.249.122) Encapsulating Security Payload SPI: 0xb386e643 Sequence: 2 Data (84 bytes) 0000 00 0c 29 89 f2 82 00 0f b5 59 12 87 08 00 45 00 ..)......Y....E. 0010 00 70 70 74 00 00 40 32 cb 3c a5 e3 f9 69 a5 e3 .ppt..@2.<...i.. 0020 f9 7a b3 86 e6 43 00 00 00 02 0b 92 24 6f 4a fe .z...C......$oJ. 0030 f8 06 67 60 13 5c 1a 5c a1 e5 68 be e3 9f 98 e0 ..g`.\.\..h..... 0040 37 5f e2 66 34 45 23 c7 d0 3f d2 93 fe c9 77 e0 7_.f4E#..?....w. 0050 80 e4 07 ee 87 62 8f 01 20 79 0d c5 59 26 76 6e .....b.. y..Y&vn 0060 e0 cb df 55 1d 5e 43 90 0c 5d e6 28 b8 19 55 d5 ...U.^C..].(..U. 0070 06 b1 fd 30 c2 2c 8a a1 17 19 59 8a 89 2b 6e ca ...0.,....Y..+n. 0080 e6 61 .a Frame 16 (130 bytes on wire, 130 bytes captured) Arrival Time: Nov 3, 2005 11:23:07.769572000 Time delta from previous packet: 0.948256000 seconds Time since reference or first frame: 2.537637000 seconds Frame Number: 16 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:0c:29:89:f2:82, Dst: 00:0f:b5:59:12:87 Destination: 00:0f:b5:59:12:87 (00:0f:b5:59:12:87) Source: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Type: IP (0x0800) Frame check sequence: 0xb680216f (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.105 (165.227.249.105) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x001c (28) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x7c94 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.105 (165.227.249.105) Encapsulating Security Payload SPI: 0x45f64803 Sequence: 3 Data (84 bytes) 0000 00 0f b5 59 12 87 00 0c 29 89 f2 82 08 00 45 00 ...Y....).....E. 0010 00 70 00 1c 00 00 ff 32 7c 94 a5 e3 f9 7a a5 e3 .p.....2|....z.. 0020 f9 69 45 f6 48 03 00 00 00 03 07 34 1d 09 7e 4a .iE.H......4..~J 0030 8b 1c 4e 5d 63 a7 69 2e 27 21 37 98 67 eb 9e 8b ..N]c.i.'!7.g... 0040 09 7a f3 35 08 0a 66 7d af 88 48 6c ed 62 2e e3 .z.5..f}..Hl.b.. 0050 55 e7 35 94 cd c9 64 bd 9b fa f2 98 48 0c 94 56 U.5...d.....H..V 0060 b5 b7 51 0c 0f 5d 7b 6f cc 07 f3 58 6a e0 73 af ..Q..]{o...Xj.s. 0070 30 15 34 60 2b 0a 38 e7 84 81 ab bb 8d 47 b6 80 0.4`+.8......G.. 0080 21 6f !o Frame 17 (130 bytes on wire, 130 bytes captured) Arrival Time: Nov 3, 2005 11:23:07.881260000 Time delta from previous packet: 0.111688000 seconds Time since reference or first frame: 2.649325000 seconds Frame Number: 17 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:0f:b5:59:12:87, Dst: 00:0c:29:89:f2:82 Destination: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Source: 00:0f:b5:59:12:87 (00:0f:b5:59:12:87) Type: IP (0x0800) Frame check sequence: 0x50fea07c (correct) Internet Protocol, Src Addr: 165.227.249.105 (165.227.249.105), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x7075 (28789) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0xcb3b (correct) Source: 165.227.249.105 (165.227.249.105) Destination: 165.227.249.122 (165.227.249.122) Encapsulating Security Payload SPI: 0xb386e643 Sequence: 3 Data (84 bytes) 0000 00 0c 29 89 f2 82 00 0f b5 59 12 87 08 00 45 00 ..)......Y....E. 0010 00 70 70 75 00 00 40 32 cb 3b a5 e3 f9 69 a5 e3 .ppu..@2.;...i.. 0020 f9 7a b3 86 e6 43 00 00 00 03 e6 28 b8 19 55 d5 .z...C.....(..U. 0030 06 b1 e9 e4 98 12 3d 7b b9 70 f7 9f 1c 1f f8 da ......={.p...... 0040 d6 74 1d 90 72 e2 da be 64 3d b3 ac 3c 74 f7 a1 .t..r...d=..n....,.D...P. 0080 a0 7c .| Frame 18 (130 bytes on wire, 130 bytes captured) Arrival Time: Nov 3, 2005 11:23:08.771710000 Time delta from previous packet: 0.890450000 seconds Time since reference or first frame: 3.539775000 seconds Frame Number: 18 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:0c:29:89:f2:82, Dst: 00:0f:b5:59:12:87 Destination: 00:0f:b5:59:12:87 (00:0f:b5:59:12:87) Source: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Type: IP (0x0800) Frame check sequence: 0x43dc30c7 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.105 (165.227.249.105) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x001d (29) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x7c93 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.105 (165.227.249.105) Encapsulating Security Payload SPI: 0x45f64803 Sequence: 4 Data (84 bytes) 0000 00 0f b5 59 12 87 00 0c 29 89 f2 82 08 00 45 00 ...Y....).....E. 0010 00 70 00 1d 00 00 ff 32 7c 93 a5 e3 f9 7a a5 e3 .p.....2|....z.. 0020 f9 69 45 f6 48 03 00 00 00 04 1f 17 af 80 e8 74 .iE.H..........t 0030 bf 3c 1c b8 25 49 08 6f d2 10 c6 b9 62 5a 7f 56 .<..%I.o....bZ.V 0040 4f df 25 78 cc 87 4c 92 61 09 5a 27 11 d5 7d 19 O.%x..L.a.Z'..}. 0050 26 b2 b8 25 e6 be 60 ed ad 9f 10 52 9c 97 58 60 &..%..`....R..X` 0060 38 22 37 8a 38 e9 f5 b8 05 42 19 4d 7d ab 32 9d 8"7.8....B.M}.2. 0070 6d bb 60 04 31 63 89 db 1d 81 a7 16 06 5c 43 dc m.`.1c.......\C. 0080 30 c7 0. Frame 19 (130 bytes on wire, 130 bytes captured) Arrival Time: Nov 3, 2005 11:23:08.888096000 Time delta from previous packet: 0.116386000 seconds Time since reference or first frame: 3.656161000 seconds Frame Number: 19 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:0f:b5:59:12:87, Dst: 00:0c:29:89:f2:82 Destination: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Source: 00:0f:b5:59:12:87 (00:0f:b5:59:12:87) Type: IP (0x0800) Frame check sequence: 0xedab9dda (correct) Internet Protocol, Src Addr: 165.227.249.105 (165.227.249.105), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x7076 (28790) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0xcb3a (correct) Source: 165.227.249.105 (165.227.249.105) Destination: 165.227.249.122 (165.227.249.122) Encapsulating Security Payload SPI: 0xb386e643 Sequence: 4 Data (84 bytes) 0000 00 0c 29 89 f2 82 00 0f b5 59 12 87 08 00 45 00 ..)......Y....E. 0010 00 70 70 76 00 00 40 32 cb 3a a5 e3 f9 69 a5 e3 .ppv..@2.:...i.. 0020 f9 7a b3 86 e6 43 00 00 00 04 f2 e6 ec 36 98 4b .z...C.......6.K 0030 64 d7 4c 31 4b ba 31 76 1c a4 e6 2b 4c 71 10 53 d.L1K.1v...+Lq.S 0040 4c 47 1c 08 5f a1 da 3b 7e ee 9f b0 9b 7b 3f 23 LG.._..;~....{?# 0050 30 6c 1d 32 76 5e 8b 01 8f 49 8a 43 46 19 25 52 0l.2v^...I.CF.%R 0060 60 0c 2c 91 8c d0 e6 7f 79 2e f7 25 23 bd fa 03 `.,.....y..%#... 0070 79 fd b4 aa fc 59 17 72 0a 2b 18 35 30 7d ed ab y....Y.r.+.50}.. 0080 9d da ..