Frame 1 (174 bytes on wire, 174 bytes captured) Arrival Time: May 24, 2005 10:36:18.009031000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 174 bytes Capture Length: 174 bytes Ethernet II, Src: 00:0c:29:f7:87:89, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:0c:29:f7:87:89 (00:0c:29:f7:87:89) Type: IP (0x0800) Frame check sequence: 0x605e5a30 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 156 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfba4 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.106 (165.227.249.106) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 136 Checksum: 0x8017 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x45773FFB60B77C96 Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 128 Security Association payload Next payload: Vendor ID (13) Length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 44 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 36 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: NONE (0) Length: 44 Vendor ID: Check Point Check Point Product: VPN-1 Version: NG with Application Intelligence R55 0000 00 a0 8e 72 1e 40 00 0c 29 f7 87 89 08 00 45 00 ...r.@..).....E. 0010 00 9c 00 00 40 00 40 11 fb a4 a5 e3 f9 7a a5 e3 ....@.@......z.. 0020 f9 6a 01 f4 01 f4 00 88 80 17 45 77 3f fb 60 b7 .j........Ew?.`. 0030 7c 96 00 00 00 00 00 00 00 00 01 10 02 00 00 00 |............... 0040 00 00 00 00 00 80 0d 00 00 38 00 00 00 01 00 00 .........8...... 0050 00 01 00 00 00 2c 01 01 00 01 00 00 00 24 01 01 .....,.......$.. 0060 00 00 80 01 00 05 80 02 00 02 80 03 00 01 80 04 ................ 0070 00 02 80 0b 00 01 00 0c 00 04 00 00 70 80 00 00 ............p... 0080 00 2c f4 ed 19 e0 c1 14 eb 51 6f aa ac 0e e3 7d .,.......Qo....} 0090 af 28 07 b4 38 1f 00 00 00 01 00 00 13 8d 00 00 .(..8........... 00a0 00 00 00 00 00 00 18 80 00 00 60 5e 5a 30 ..........`^Z0 Frame 2 (126 bytes on wire, 126 bytes captured) Arrival Time: May 24, 2005 10:36:18.132010000 Time delta from previous packet: 0.122979000 seconds Time since reference or first frame: 0.122979000 seconds Frame Number: 2 Packet Length: 126 bytes Capture Length: 126 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:0c:29:f7:87:89 Destination: 00:0c:29:f7:87:89 (00:0c:29:f7:87:89) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0x7c244ab8 (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 108 Identification: 0x7540 (30016) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xc694 (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.122 (165.227.249.122) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 88 Checksum: 0x56bd (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x45773FFB60B77C96 Responder cookie: 0xAEE4ECCA3051C09A Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 80 Security Association payload Next payload: NONE (0) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 40 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 32 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) 0000 00 0c 29 f7 87 89 00 a0 8e 72 1e 40 08 00 45 00 ..)......r.@..E. 0010 00 6c 75 40 00 00 40 11 c6 94 a5 e3 f9 6a a5 e3 .lu@..@......j.. 0020 f9 7a 01 f4 01 f4 00 58 56 bd 45 77 3f fb 60 b7 .z.....XV.Ew?.`. 0030 7c 96 ae e4 ec ca 30 51 c0 9a 01 10 02 00 00 00 |.....0Q........ 0040 00 00 00 00 00 50 00 00 00 34 00 00 00 01 00 00 .....P...4...... 0050 00 01 00 00 00 28 01 01 00 01 00 00 00 20 01 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 03 00 01 80 04 ................ 0070 00 02 80 0b 00 01 80 0c 70 80 7c 24 4a b8 ........p.|$J. Frame 3 (230 bytes on wire, 230 bytes captured) Arrival Time: May 24, 2005 10:36:18.141113000 Time delta from previous packet: 0.009103000 seconds Time since reference or first frame: 0.132082000 seconds Frame Number: 3 Packet Length: 230 bytes Capture Length: 230 bytes Ethernet II, Src: 00:0c:29:f7:87:89, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:0c:29:f7:87:89 (00:0c:29:f7:87:89) Type: IP (0x0800) Frame check sequence: 0xb587856b (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 212 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb6c (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.106 (165.227.249.106) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 192 Checksum: 0xe1d6 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x45773FFB60B77C96 Responder cookie: 0xAEE4ECCA3051C09A Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 184 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 24 Nonce Data 0000 00 a0 8e 72 1e 40 00 0c 29 f7 87 89 08 00 45 00 ...r.@..).....E. 0010 00 d4 00 00 40 00 40 11 fb 6c a5 e3 f9 7a a5 e3 ....@.@..l...z.. 0020 f9 6a 01 f4 01 f4 00 c0 e1 d6 45 77 3f fb 60 b7 .j........Ew?.`. 0030 7c 96 ae e4 ec ca 30 51 c0 9a 04 10 02 00 00 00 |.....0Q........ 0040 00 00 00 00 00 b8 0a 00 00 84 e9 86 97 b3 a7 1e ................ 0050 53 61 c5 b1 bd b6 c4 14 6b d5 71 f5 01 e6 fc da Sa......k.q..... 0060 ca 6a 87 c0 d5 7a 78 cf 60 f1 67 c5 52 89 21 0f .j...zx.`.g.R.!. 0070 b0 3b 48 12 af f2 a5 3e 4c ba de 19 25 50 3c bd .;H....>L...%P<. 0080 99 9f ff 91 97 fc 0e 61 e1 74 33 04 5b 24 06 b7 .......a.t3.[$.. 0090 ed d5 e2 b8 af fa 94 49 c4 fd b6 de c2 ad 92 11 .......I........ 00a0 49 99 39 dc 22 b1 8b f0 d6 1c c3 9e 8d dd 31 8b I.9.".........1. 00b0 c3 b5 39 a5 79 a2 6f ff 82 c1 af b8 1b 5a fb 0c ..9.y.o......Z.. 00c0 b7 5b c7 27 cc 64 76 64 f2 b2 00 00 00 18 69 ef .[.'.dvd......i. 00d0 d6 d8 c8 30 c1 78 b9 e3 61 d5 48 0d 34 f7 10 a0 ...0.x..a.H.4... 00e0 04 1e b5 87 85 6b .....k Frame 4 (262 bytes on wire, 262 bytes captured) Arrival Time: May 24, 2005 10:36:18.293198000 Time delta from previous packet: 0.152085000 seconds Time since reference or first frame: 0.284167000 seconds Frame Number: 4 Packet Length: 262 bytes Capture Length: 262 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:0c:29:f7:87:89 Destination: 00:0c:29:f7:87:89 (00:0c:29:f7:87:89) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0xa11189f9 (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 244 Identification: 0x7541 (30017) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xc60b (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.122 (165.227.249.122) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 224 Checksum: 0x3055 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x45773FFB60B77C96 Responder cookie: 0xAEE4ECCA3051C09A Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 216 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: Vendor ID (13) Length: 24 Nonce Data Vendor ID payload Next payload: NONE (0) Length: 32 Vendor ID: unknown vendor ID: 0x03000014434ACBE8F11E6534F48544B6... 0000 00 0c 29 f7 87 89 00 a0 8e 72 1e 40 08 00 45 00 ..)......r.@..E. 0010 00 f4 75 41 00 00 40 11 c6 0b a5 e3 f9 6a a5 e3 ..uA..@......j.. 0020 f9 7a 01 f4 01 f4 00 e0 30 55 45 77 3f fb 60 b7 .z......0UEw?.`. 0030 7c 96 ae e4 ec ca 30 51 c0 9a 04 10 02 00 00 00 |.....0Q........ 0040 00 00 00 00 00 d8 0a 00 00 84 b9 ca a3 f8 3f 25 ..............?% 0050 19 03 18 7f a4 94 ea 6d e0 07 b5 6b 9d 6e b5 72 .......m...k.n.r 0060 60 00 9e 10 a9 fb a0 86 5b 38 8e ae 16 10 af 88 `.......[8...... 0070 cf af e9 d6 e4 96 44 99 7e 7f 00 5d 1b 22 75 4d ......D.~..]."uM 0080 51 7c 1d ff cb 2d bb 3e dd 2e e5 a6 99 74 1d e2 Q|...-.>.....t.. 0090 53 6e 03 c4 7c 5f b9 56 5e dc c5 b9 cd 75 96 b9 Sn..|_.V^....u.. 00a0 40 62 90 30 8b 15 75 71 03 df b9 fd f0 20 66 2f @b.0..uq..... f/ 00b0 d8 f9 e8 06 44 16 1c e1 e5 22 c1 fe d1 21 a7 ac ....D...."...!.. 00c0 07 c2 45 64 79 82 fd 24 7d aa 0d 00 00 18 96 f4 ..Edy..$}....... 00d0 fa 26 98 7b 37 e7 a1 4d 05 85 04 ff 5f f1 2d a6 .&.{7..M...._.-. 00e0 0d ab 00 00 00 20 03 00 00 14 43 4a cb e8 f1 1e ..... ....CJ.... 00f0 65 34 f4 85 44 b6 75 53 9f 35 00 00 00 08 00 06 e4..D.uS.5...... 0100 00 02 a1 11 89 f9 ...... Frame 5 (114 bytes on wire, 114 bytes captured) Arrival Time: May 24, 2005 10:36:18.301894000 Time delta from previous packet: 0.008696000 seconds Time since reference or first frame: 0.292863000 seconds Frame Number: 5 Packet Length: 114 bytes Capture Length: 114 bytes Ethernet II, Src: 00:0c:29:f7:87:89, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:0c:29:f7:87:89 (00:0c:29:f7:87:89) Type: IP (0x0800) Frame check sequence: 0x189e583a (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfbe0 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.106 (165.227.249.106) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 76 Checksum: 0x2f09 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x45773FFB60B77C96 Responder cookie: 0xAEE4ECCA3051C09A Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 68 Encrypted payload (40 bytes) 0000 00 a0 8e 72 1e 40 00 0c 29 f7 87 89 08 00 45 00 ...r.@..).....E. 0010 00 60 00 00 40 00 40 11 fb e0 a5 e3 f9 7a a5 e3 .`..@.@......z.. 0020 f9 6a 01 f4 01 f4 00 4c 2f 09 45 77 3f fb 60 b7 .j.....L/.Ew?.`. 0030 7c 96 ae e4 ec ca 30 51 c0 9a 05 10 02 01 00 00 |.....0Q........ 0040 00 00 00 00 00 44 db a5 7e 8d fd 30 a5 d2 9c da .....D..~..0.... 0050 80 42 a1 d7 62 0d 7e 43 c1 c1 6f 2d 12 59 9f 20 .B..b.~C..o-.Y. 0060 d6 5d 1f 67 3d b6 3d 53 f0 11 df 53 d7 ed 18 9e .].g=.=S...S.... 0070 58 3a X: Frame 6 (138 bytes on wire, 138 bytes captured) Arrival Time: May 24, 2005 10:36:18.306159000 Time delta from previous packet: 0.004265000 seconds Time since reference or first frame: 0.297128000 seconds Frame Number: 6 Packet Length: 138 bytes Capture Length: 138 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:0c:29:f7:87:89 Destination: 00:0c:29:f7:87:89 (00:0c:29:f7:87:89) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0x956b8a76 (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x7542 (30018) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xc686 (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.122 (165.227.249.122) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 100 Checksum: 0x2cc6 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x45773FFB60B77C96 Responder cookie: 0xAEE4ECCA3051C09A Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 92 Encrypted payload (64 bytes) 0000 00 0c 29 f7 87 89 00 a0 8e 72 1e 40 08 00 45 00 ..)......r.@..E. 0010 00 78 75 42 00 00 40 11 c6 86 a5 e3 f9 6a a5 e3 .xuB..@......j.. 0020 f9 7a 01 f4 01 f4 00 64 2c c6 45 77 3f fb 60 b7 .z.....d,.Ew?.`. 0030 7c 96 ae e4 ec ca 30 51 c0 9a 05 10 02 01 00 00 |.....0Q........ 0040 00 00 00 00 00 5c 87 90 f1 37 97 03 38 21 b3 53 .....\...7..8!.S 0050 31 6c c3 0c c2 3e 1c ca ad 2d 0f b0 2d ba e9 69 1l...>...-..-..i 0060 da ad 3c 4e 8c da 97 4c 8a ed d8 05 3a 81 1a 18 ......../.._%. 00f0 4f 73 36 d5 4c f3 af d1 19 59 06 75 fc c9 23 6f Os6.L....Y.u..#o 0100 4c d2 2b 01 2b e8 5e ea d4 81 c2 46 32 b7 84 4f L.+.+.^....F2..O 0110 68 a7 ee e5 1d 4d 75 62 5f 1d e6 42 03 62 ed 13 h....Mub_..B.b.. 0120 42 46 17 2a 1b 5b 39 8e f3 5a fd e1 de 10 6e 24 BF.*.[9..Z....n$ 0130 0a df 32 41 76 10 dc 08 be 71 23 d2 bd d8 61 de ..2Av....q#...a. 0140 06 68 37 98 75 0f 50 56 b8 c6 49 6d 51 49 6f f3 .h7.u.PV..ImQIo. 0150 c5 53 da 89 a1 4d 5f 99 95 2e .S...M_... Frame 8 (338 bytes on wire, 338 bytes captured) Arrival Time: May 24, 2005 10:36:18.601472000 Time delta from previous packet: 0.280341000 seconds Time since reference or first frame: 0.592441000 seconds Frame Number: 8 Packet Length: 338 bytes Capture Length: 338 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:0c:29:f7:87:89 Destination: 00:0c:29:f7:87:89 (00:0c:29:f7:87:89) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0x6e9b7329 (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 320 Identification: 0x7543 (30019) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xc5bd (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.122 (165.227.249.122) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 300 Checksum: 0xc7a5 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x45773FFB60B77C96 Responder cookie: 0xAEE4ECCA3051C09A Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x0B235A73 Length: 292 Encrypted payload (264 bytes) 0000 00 0c 29 f7 87 89 00 a0 8e 72 1e 40 08 00 45 00 ..)......r.@..E. 0010 01 40 75 43 00 00 40 11 c5 bd a5 e3 f9 6a a5 e3 .@uC..@......j.. 0020 f9 7a 01 f4 01 f4 01 2c c7 a5 45 77 3f fb 60 b7 .z.....,..Ew?.`. 0030 7c 96 ae e4 ec ca 30 51 c0 9a 08 10 20 01 0b 23 |.....0Q.... ..# 0040 5a 73 00 00 01 24 5d ac dd 3e 71 a7 e1 e0 e6 08 Zs...$]..>q..... 0050 09 61 ac 08 39 a0 da 5c 11 ca cc c4 67 26 ac 63 .a..9..\....g&.c 0060 47 45 f0 38 90 9b df 9b eb 67 6f d0 cd c6 ad 54 GE.8.....go....T 0070 93 ec ca 21 48 e9 3c 8f f8 10 51 18 75 c2 6b c8 ...!H.<...Q.u.k. 0080 ee 18 1b eb 4a cb 2a 6b 84 e6 2e 32 c1 64 21 9b ....J.*k...2.d!. 0090 32 3a 4d 67 44 02 30 71 e0 ba 54 f3 0f 5e e7 b0 2:MgD.0q..T..^.. 00a0 bd 4e 1c 16 62 a6 9d 00 43 46 dd 9a 6c 1b 39 0e .N..b...CF..l.9. 00b0 54 17 e2 6c e4 e2 ee 9a 61 19 c0 82 26 ef 2c 41 T..l....a...&.,A 00c0 6d 44 a6 3d 9f 52 eb 0c 54 3d bd 85 17 20 95 b3 mD.=.R..T=... .. 00d0 a7 6f d5 07 f2 16 4e 98 cd a3 2f 23 9d e7 19 31 .o....N.../#...1 00e0 4d 40 ca f5 1a fe c8 a8 b9 a5 8a cb 5c 6f 77 ec M@..........\ow. 00f0 6d e3 d6 f6 96 fb 26 fc 95 bf 37 b7 7d 5e 64 ca m.....&...7.}^d. 0100 62 7a b0 1a 89 3b ab 25 b4 94 91 ea df ed e0 6e bz...;.%.......n 0110 fc 1a 0f 6e 98 b1 7b 51 f9 74 86 ef 85 32 75 24 ...n..{Q.t...2u$ 0120 c6 dc 75 93 e1 e0 fb 42 f8 94 63 5a f2 69 33 8d ..u....B..cZ.i3. 0130 36 4a 4c 3d 67 35 fd ee 7c fc b4 39 d8 36 21 42 6JL=g5..|..9.6!B 0140 91 57 49 bf 3a 98 7f 9b 7f a7 5e 13 c7 59 6e 9b .WI.:.....^..Yn. 0150 73 29 s) Frame 9 (106 bytes on wire, 106 bytes captured) Arrival Time: May 24, 2005 10:36:18.610879000 Time delta from previous packet: 0.009407000 seconds Time since reference or first frame: 0.601848000 seconds Frame Number: 9 Packet Length: 106 bytes Capture Length: 106 bytes Ethernet II, Src: 00:0c:29:f7:87:89, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:0c:29:f7:87:89 (00:0c:29:f7:87:89) Type: IP (0x0800) Frame check sequence: 0x639d0425 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 88 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfbe8 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.106 (165.227.249.106) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 68 Checksum: 0x715e (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x45773FFB60B77C96 Responder cookie: 0xAEE4ECCA3051C09A Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x0B235A73 Length: 60 Encrypted payload (32 bytes) 0000 00 a0 8e 72 1e 40 00 0c 29 f7 87 89 08 00 45 00 ...r.@..).....E. 0010 00 58 00 00 40 00 40 11 fb e8 a5 e3 f9 7a a5 e3 .X..@.@......z.. 0020 f9 6a 01 f4 01 f4 00 44 71 5e 45 77 3f fb 60 b7 .j.....Dq^Ew?.`. 0030 7c 96 ae e4 ec ca 30 51 c0 9a 08 10 20 01 0b 23 |.....0Q.... ..# 0040 5a 73 00 00 00 3c 9c d3 bf 3b 5a dd fa b1 0a 22 Zs...<...;Z...." 0050 4e a3 35 59 2b ed 38 98 ca 2e ac 79 41 da 1d ec N.5Y+.8....yA... 0060 81 45 d5 b4 fc 87 63 9d 04 25 .E....c..% Frame 10 (106 bytes on wire, 106 bytes captured) Arrival Time: May 24, 2005 10:36:18.719824000 Time delta from previous packet: 0.108945000 seconds Time since reference or first frame: 0.710793000 seconds Frame Number: 10 Packet Length: 106 bytes Capture Length: 106 bytes Ethernet II, Src: 00:0c:29:f7:87:89, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:0c:29:f7:87:89 (00:0c:29:f7:87:89) Type: IP (0x0800) Frame check sequence: 0x639d0425 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 88 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfbe8 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.106 (165.227.249.106) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 68 Checksum: 0x715e (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x45773FFB60B77C96 Responder cookie: 0xAEE4ECCA3051C09A Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x0B235A73 Length: 60 Encrypted payload (32 bytes) 0000 00 a0 8e 72 1e 40 00 0c 29 f7 87 89 08 00 45 00 ...r.@..).....E. 0010 00 58 00 00 40 00 40 11 fb e8 a5 e3 f9 7a a5 e3 .X..@.@......z.. 0020 f9 6a 01 f4 01 f4 00 44 71 5e 45 77 3f fb 60 b7 .j.....Dq^Ew?.`. 0030 7c 96 ae e4 ec ca 30 51 c0 9a 08 10 20 01 0b 23 |.....0Q.... ..# 0040 5a 73 00 00 00 3c 9c d3 bf 3b 5a dd fa b1 0a 22 Zs...<...;Z...." 0050 4e a3 35 59 2b ed 38 98 ca 2e ac 79 41 da 1d ec N.5Y+.8....yA... 0060 81 45 d5 b4 fc 87 63 9d 04 25 .E....c..% Frame 11 (106 bytes on wire, 106 bytes captured) Arrival Time: May 24, 2005 10:36:18.821113000 Time delta from previous packet: 0.101289000 seconds Time since reference or first frame: 0.812082000 seconds Frame Number: 11 Packet Length: 106 bytes Capture Length: 106 bytes Ethernet II, Src: 00:0c:29:f7:87:89, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:0c:29:f7:87:89 (00:0c:29:f7:87:89) Type: IP (0x0800) Frame check sequence: 0x639d0425 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 88 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfbe8 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.106 (165.227.249.106) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 68 Checksum: 0x715e (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x45773FFB60B77C96 Responder cookie: 0xAEE4ECCA3051C09A Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x0B235A73 Length: 60 Encrypted payload (32 bytes) 0000 00 a0 8e 72 1e 40 00 0c 29 f7 87 89 08 00 45 00 ...r.@..).....E. 0010 00 58 00 00 40 00 40 11 fb e8 a5 e3 f9 7a a5 e3 .X..@.@......z.. 0020 f9 6a 01 f4 01 f4 00 44 71 5e 45 77 3f fb 60 b7 .j.....Dq^Ew?.`. 0030 7c 96 ae e4 ec ca 30 51 c0 9a 08 10 20 01 0b 23 |.....0Q.... ..# 0040 5a 73 00 00 00 3c 9c d3 bf 3b 5a dd fa b1 0a 22 Zs...<...;Z...." 0050 4e a3 35 59 2b ed 38 98 ca 2e ac 79 41 da 1d ec N.5Y+.8....yA... 0060 81 45 d5 b4 fc 87 63 9d 04 25 .E....c..% Frame 12 (130 bytes on wire, 130 bytes captured) Arrival Time: May 24, 2005 10:36:18.926257000 Time delta from previous packet: 0.105144000 seconds Time since reference or first frame: 0.917226000 seconds Frame Number: 12 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:0c:29:f7:87:89, Dst: 00:00:24:c3:5e:28 Destination: 00:00:24:c3:5e:28 (00:00:24:c3:5e:28) Source: 00:0c:29:f7:87:89 (00:0c:29:f7:87:89) Type: IP (0x0800) Frame check sequence: 0x1cf0ccdd (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0000 (0) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x7caf (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.106 (165.227.249.106) Encapsulating Security Payload SPI: 0x49159001 Sequence: 1 Data (84 bytes) 0000 00 00 24 c3 5e 28 00 0c 29 f7 87 89 08 00 45 00 ..$.^(..).....E. 0010 00 70 00 00 00 00 ff 32 7c af a5 e3 f9 7a a5 e3 .p.....2|....z.. 0020 f9 6a 49 15 90 01 00 00 00 01 00 00 00 00 00 00 .jI............. 0030 00 00 fc cd e2 9d 28 05 b5 11 93 ea 40 90 64 a7 ......(.....@.d. 0040 3b 80 25 46 de eb e7 35 55 43 65 7b 0e 6c 3f 14 ;.%F...5UCe{.l?. 0050 43 07 92 ad fe 8b 06 b2 be 85 55 d3 0b 22 c8 9f C.........U..".. 0060 dd c0 95 62 38 04 0a 2f 8d 5f e7 1d 18 14 45 15 ...b8../._....E. 0070 85 61 ea 30 51 d0 3f 9e 19 6c cd 56 fd a9 1c f0 .a.0Q.?..l.V.... 0080 cc dd .. Frame 13 (130 bytes on wire, 130 bytes captured) Arrival Time: May 24, 2005 10:36:18.926635000 Time delta from previous packet: 0.000378000 seconds Time since reference or first frame: 0.917604000 seconds Frame Number: 13 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:00:24:c3:5e:28, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:00:24:c3:5e:28 (00:00:24:c3:5e:28) Type: IP (0x0800) Frame check sequence: 0xd88afa3a (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0000 (0) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 254 Protocol: ESP (0x32) Header checksum: 0x7daf (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.106 (165.227.249.106) Encapsulating Security Payload SPI: 0x49159001 Sequence: 1 Data (84 bytes) 0000 00 a0 8e 72 1e 40 00 00 24 c3 5e 28 08 00 45 00 ...r.@..$.^(..E. 0010 00 70 00 00 00 00 fe 32 7d af a5 e3 f9 7a a5 e3 .p.....2}....z.. 0020 f9 6a 49 15 90 01 00 00 00 01 00 00 00 00 00 00 .jI............. 0030 00 00 fc cd e2 9d 28 05 b5 11 93 ea 40 90 64 a7 ......(.....@.d. 0040 3b 80 25 46 de eb e7 35 55 43 65 7b 0e 6c 3f 14 ;.%F...5UCe{.l?. 0050 43 07 92 ad fe 8b 06 b2 be 85 55 d3 0b 22 c8 9f C.........U..".. 0060 dd c0 95 62 38 04 0a 2f 8d 5f e7 1d 18 14 45 15 ...b8../._....E. 0070 85 61 ea 30 51 d0 3f 9e 19 6c cd 56 fd a9 d8 8a .a.0Q.?..l.V.... 0080 fa 3a .: Frame 14 (130 bytes on wire, 130 bytes captured) Arrival Time: May 24, 2005 10:36:18.928909000 Time delta from previous packet: 0.002274000 seconds Time since reference or first frame: 0.919878000 seconds Frame Number: 14 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:0c:29:f7:87:89 Destination: 00:0c:29:f7:87:89 (00:0c:29:f7:87:89) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0xa2490400 (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x7544 (30020) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0xc66b (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.122 (165.227.249.122) Encapsulating Security Payload SPI: 0xa06212e4 Sequence: 1 Data (84 bytes) 0000 00 0c 29 f7 87 89 00 a0 8e 72 1e 40 08 00 45 00 ..)......r.@..E. 0010 00 70 75 44 00 00 40 32 c6 6b a5 e3 f9 6a a5 e3 .puD..@2.k...j.. 0020 f9 7a a0 62 12 e4 00 00 00 01 30 01 04 86 09 12 .z.b......0..... 0030 d0 12 be 11 8e 4c 9c 05 57 aa 28 e8 f6 b2 23 ec .....L..W.(...#. 0040 ea 28 82 90 d5 63 b3 a9 9a 12 d6 64 bc bf 7a 4d .(...c.....d..zM 0050 56 4f 28 49 d4 48 9e 66 fb 08 dc f7 c8 5f 11 30 VO(I.H.f....._.0 0060 41 14 5d 63 3f 2f 5b 2c ca 97 b1 65 61 8c b9 98 A.]c?/[,...ea... 0070 a1 48 aa 9f 2c 20 29 a4 4d ae c0 bd 4b 1b a2 49 .H.., ).M...K..I 0080 04 00 .. Frame 15 (130 bytes on wire, 130 bytes captured) Arrival Time: May 24, 2005 10:36:18.948378000 Time delta from previous packet: 0.019469000 seconds Time since reference or first frame: 0.939347000 seconds Frame Number: 15 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:0c:29:f7:87:89, Dst: 00:00:24:c3:5e:28 Destination: 00:00:24:c3:5e:28 (00:00:24:c3:5e:28) Source: 00:0c:29:f7:87:89 (00:0c:29:f7:87:89) Type: IP (0x0800) Frame check sequence: 0x9628d0ab (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0001 (1) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x7cae (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.106 (165.227.249.106) Encapsulating Security Payload SPI: 0x49159001 Sequence: 2 Data (84 bytes) 0000 00 00 24 c3 5e 28 00 0c 29 f7 87 89 08 00 45 00 ..$.^(..).....E. 0010 00 70 00 01 00 00 ff 32 7c ae a5 e3 f9 7a a5 e3 .p.....2|....z.. 0020 f9 6a 49 15 90 01 00 00 00 02 e7 1d 18 14 45 15 .jI...........E. 0030 85 61 07 22 13 6f 9e b2 d1 db 95 ab 49 68 cb 0b .a.".o......Ih.. 0040 17 39 be 96 45 5f 5d fb 35 c7 66 f8 83 64 a7 6b .9..E_].5.f..d.k 0050 27 75 8a fe 20 14 e2 41 2e f6 2e 3d 9c 83 4d eb 'u.. ..A...=..M. 0060 e0 77 3b 68 de 53 48 00 29 c3 78 df bb 83 89 d5 .w;h.SH.).x..... 0070 85 ff a7 b6 17 1a 89 58 be 0f 9b 0e d1 db 96 28 .......X.......( 0080 d0 ab .. Frame 16 (130 bytes on wire, 130 bytes captured) Arrival Time: May 24, 2005 10:36:18.948385000 Time delta from previous packet: 0.000007000 seconds Time since reference or first frame: 0.939354000 seconds Frame Number: 16 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:00:24:c3:5e:28, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:00:24:c3:5e:28 (00:00:24:c3:5e:28) Type: IP (0x0800) Frame check sequence: 0x5252e64c (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0001 (1) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 254 Protocol: ESP (0x32) Header checksum: 0x7dae (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.106 (165.227.249.106) Encapsulating Security Payload SPI: 0x49159001 Sequence: 2 Data (84 bytes) 0000 00 a0 8e 72 1e 40 00 00 24 c3 5e 28 08 00 45 00 ...r.@..$.^(..E. 0010 00 70 00 01 00 00 fe 32 7d ae a5 e3 f9 7a a5 e3 .p.....2}....z.. 0020 f9 6a 49 15 90 01 00 00 00 02 e7 1d 18 14 45 15 .jI...........E. 0030 85 61 07 22 13 6f 9e b2 d1 db 95 ab 49 68 cb 0b .a.".o......Ih.. 0040 17 39 be 96 45 5f 5d fb 35 c7 66 f8 83 64 a7 6b .9..E_].5.f..d.k 0050 27 75 8a fe 20 14 e2 41 2e f6 2e 3d 9c 83 4d eb 'u.. ..A...=..M. 0060 e0 77 3b 68 de 53 48 00 29 c3 78 df bb 83 89 d5 .w;h.SH.).x..... 0070 85 ff a7 b6 17 1a 89 58 be 0f 9b 0e d1 db 52 52 .......X......RR 0080 e6 4c .L Frame 17 (130 bytes on wire, 130 bytes captured) Arrival Time: May 24, 2005 10:36:18.948393000 Time delta from previous packet: 0.000008000 seconds Time since reference or first frame: 0.939362000 seconds Frame Number: 17 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:0c:29:f7:87:89 Destination: 00:0c:29:f7:87:89 (00:0c:29:f7:87:89) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0x28a93ff1 (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x7545 (30021) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0xc66a (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.122 (165.227.249.122) Encapsulating Security Payload SPI: 0xa06212e4 Sequence: 2 Data (84 bytes) 0000 00 0c 29 f7 87 89 00 a0 8e 72 1e 40 08 00 45 00 ..)......r.@..E. 0010 00 70 75 45 00 00 40 32 c6 6a a5 e3 f9 6a a5 e3 .puE..@2.j...j.. 0020 f9 7a a0 62 12 e4 00 00 00 02 1a 50 16 85 41 83 .z.b.......P..A. 0030 f6 7f da 1f 13 9d d2 74 24 c4 75 b3 43 94 fa 41 .......t$.u.C..A 0040 f1 5c 84 32 0a ad 18 50 b6 e8 0d d2 66 20 47 dc .\.2...P....f G. 0050 68 bb e4 7e 53 e6 4d 09 f2 12 1d 33 a8 18 e6 d7 h..~S.M....3.... 0060 2f 58 5e b3 fd 5f 72 1f 12 5d 18 44 3b b8 3a 30 /X^.._r..].D;.:0 0070 de a1 95 54 d9 e7 56 44 a5 3e b2 e9 7f fe 28 a9 ...T..VD.>....(. 0080 3f f1 ?. Frame 18 (130 bytes on wire, 130 bytes captured) Arrival Time: May 24, 2005 10:36:19.954805000 Time delta from previous packet: 1.006412000 seconds Time since reference or first frame: 1.945774000 seconds Frame Number: 18 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:0c:29:f7:87:89, Dst: 00:00:24:c3:5e:28 Destination: 00:00:24:c3:5e:28 (00:00:24:c3:5e:28) Source: 00:0c:29:f7:87:89 (00:0c:29:f7:87:89) Type: IP (0x0800) Frame check sequence: 0xaa0b2af3 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0002 (2) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x7cad (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.106 (165.227.249.106) Encapsulating Security Payload SPI: 0x49159001 Sequence: 3 Data (84 bytes) 0000 00 00 24 c3 5e 28 00 0c 29 f7 87 89 08 00 45 00 ..$.^(..).....E. 0010 00 70 00 02 00 00 ff 32 7c ad a5 e3 f9 7a a5 e3 .p.....2|....z.. 0020 f9 6a 49 15 90 01 00 00 00 03 78 df bb 83 89 d5 .jI.......x..... 0030 85 ff a0 e7 e1 f5 11 95 62 6c 20 41 65 c8 be 1e ........bl Ae... 0040 5a 91 34 bd f1 47 b3 22 6c c9 90 f6 3d a5 22 de Z.4..G."l...=.". 0050 dd f7 ba fa 45 56 79 b6 86 4b be 17 b0 49 70 b3 ....EVy..K...Ip. 0060 d2 a8 0e 0c 44 41 b9 45 99 ac 0a d8 ba 0b 57 ae ....DA.E......W. 0070 5f 9e 6f e3 83 59 ab d1 d6 d8 c8 b6 35 28 aa 0b _.o..Y......5(.. 0080 2a f3 *. Frame 19 (130 bytes on wire, 130 bytes captured) Arrival Time: May 24, 2005 10:36:19.955152000 Time delta from previous packet: 0.000347000 seconds Time since reference or first frame: 1.946121000 seconds Frame Number: 19 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:00:24:c3:5e:28, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:00:24:c3:5e:28 (00:00:24:c3:5e:28) Type: IP (0x0800) Frame check sequence: 0x6e711c14 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0002 (2) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 254 Protocol: ESP (0x32) Header checksum: 0x7dad (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.106 (165.227.249.106) Encapsulating Security Payload SPI: 0x49159001 Sequence: 3 Data (84 bytes) 0000 00 a0 8e 72 1e 40 00 00 24 c3 5e 28 08 00 45 00 ...r.@..$.^(..E. 0010 00 70 00 02 00 00 fe 32 7d ad a5 e3 f9 7a a5 e3 .p.....2}....z.. 0020 f9 6a 49 15 90 01 00 00 00 03 78 df bb 83 89 d5 .jI.......x..... 0030 85 ff a0 e7 e1 f5 11 95 62 6c 20 41 65 c8 be 1e ........bl Ae... 0040 5a 91 34 bd f1 47 b3 22 6c c9 90 f6 3d a5 22 de Z.4..G."l...=.". 0050 dd f7 ba fa 45 56 79 b6 86 4b be 17 b0 49 70 b3 ....EVy..K...Ip. 0060 d2 a8 0e 0c 44 41 b9 45 99 ac 0a d8 ba 0b 57 ae ....DA.E......W. 0070 5f 9e 6f e3 83 59 ab d1 d6 d8 c8 b6 35 28 6e 71 _.o..Y......5(nq 0080 1c 14 .. Frame 20 (130 bytes on wire, 130 bytes captured) Arrival Time: May 24, 2005 10:36:19.956125000 Time delta from previous packet: 0.000973000 seconds Time since reference or first frame: 1.947094000 seconds Frame Number: 20 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:0c:29:f7:87:89 Destination: 00:0c:29:f7:87:89 (00:0c:29:f7:87:89) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0xb4e77885 (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x7546 (30022) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0xc669 (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.122 (165.227.249.122) Encapsulating Security Payload SPI: 0xa06212e4 Sequence: 3 Data (84 bytes) 0000 00 0c 29 f7 87 89 00 a0 8e 72 1e 40 08 00 45 00 ..)......r.@..E. 0010 00 70 75 46 00 00 40 32 c6 69 a5 e3 f9 6a a5 e3 .puF..@2.i...j.. 0020 f9 7a a0 62 12 e4 00 00 00 03 41 f5 7b c2 62 1f .z.b......A.{.b. 0030 90 5b c1 21 1b 1b 20 74 ce d6 c3 99 0f fc 9a 44 .[.!.. t.......D 0040 c5 8a be 8c f5 54 39 7a 39 ed 94 ad 9e 01 d6 a9 .....T9z9....... 0050 ad f8 0b 91 9e 15 af 3a fd 31 fb c6 79 51 b5 7b .......:.1..yQ.{ 0060 60 8a c4 05 27 c6 18 c7 38 9b 88 d1 83 d7 9c cd `...'...8....... 0070 e7 0f cc ca 8b 92 a9 57 18 31 62 8a 38 30 b4 e7 .......W.1b.80.. 0080 78 85 x. Frame 21 (130 bytes on wire, 130 bytes captured) Arrival Time: May 24, 2005 10:36:20.982338000 Time delta from previous packet: 1.026213000 seconds Time since reference or first frame: 2.973307000 seconds Frame Number: 21 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:0c:29:f7:87:89, Dst: 00:00:24:c3:5e:28 Destination: 00:00:24:c3:5e:28 (00:00:24:c3:5e:28) Source: 00:0c:29:f7:87:89 (00:0c:29:f7:87:89) Type: IP (0x0800) Frame check sequence: 0xb16deb1a (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0003 (3) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x7cac (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.106 (165.227.249.106) Encapsulating Security Payload SPI: 0x49159001 Sequence: 4 Data (84 bytes) 0000 00 00 24 c3 5e 28 00 0c 29 f7 87 89 08 00 45 00 ..$.^(..).....E. 0010 00 70 00 03 00 00 ff 32 7c ac a5 e3 f9 7a a5 e3 .p.....2|....z.. 0020 f9 6a 49 15 90 01 00 00 00 04 0a d8 ba 0b 57 ae .jI...........W. 0030 5f 9e 83 f9 86 fe 70 94 26 e2 e4 ec a5 dd b5 f0 _.....p.&....... 0040 22 68 9a 6e 34 7d d8 72 03 e4 36 a1 d0 4e 47 54 "h.n4}.r..6..NGT 0050 c0 a8 cf 91 9f 64 6a b9 7a d8 81 fb 19 49 1f dc .....dj.z....I.. 0060 4f 90 ca 0a e2 a3 a0 ca 46 18 18 41 9d 6b 67 2c O.......F..A.kg, 0070 30 d6 68 55 94 38 56 19 b9 a5 a0 59 3f 2b b1 6d 0.hU.8V....Y?+.m 0080 eb 1a .. Frame 22 (130 bytes on wire, 130 bytes captured) Arrival Time: May 24, 2005 10:36:20.982755000 Time delta from previous packet: 0.000417000 seconds Time since reference or first frame: 2.973724000 seconds Frame Number: 22 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:00:24:c3:5e:28, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:00:24:c3:5e:28 (00:00:24:c3:5e:28) Type: IP (0x0800) Frame check sequence: 0x7517ddfd (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0003 (3) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 254 Protocol: ESP (0x32) Header checksum: 0x7dac (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.106 (165.227.249.106) Encapsulating Security Payload SPI: 0x49159001 Sequence: 4 Data (84 bytes) 0000 00 a0 8e 72 1e 40 00 00 24 c3 5e 28 08 00 45 00 ...r.@..$.^(..E. 0010 00 70 00 03 00 00 fe 32 7d ac a5 e3 f9 7a a5 e3 .p.....2}....z.. 0020 f9 6a 49 15 90 01 00 00 00 04 0a d8 ba 0b 57 ae .jI...........W. 0030 5f 9e 83 f9 86 fe 70 94 26 e2 e4 ec a5 dd b5 f0 _.....p.&....... 0040 22 68 9a 6e 34 7d d8 72 03 e4 36 a1 d0 4e 47 54 "h.n4}.r..6..NGT 0050 c0 a8 cf 91 9f 64 6a b9 7a d8 81 fb 19 49 1f dc .....dj.z....I.. 0060 4f 90 ca 0a e2 a3 a0 ca 46 18 18 41 9d 6b 67 2c O.......F..A.kg, 0070 30 d6 68 55 94 38 56 19 b9 a5 a0 59 3f 2b 75 17 0.hU.8V....Y?+u. 0080 dd fd .. Frame 23 (130 bytes on wire, 130 bytes captured) Arrival Time: May 24, 2005 10:36:20.983648000 Time delta from previous packet: 0.000893000 seconds Time since reference or first frame: 2.974617000 seconds Frame Number: 23 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:0c:29:f7:87:89 Destination: 00:0c:29:f7:87:89 (00:0c:29:f7:87:89) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0xcfb6d6c3 (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x7547 (30023) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0xc668 (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.122 (165.227.249.122) Encapsulating Security Payload SPI: 0xa06212e4 Sequence: 4 Data (84 bytes) 0000 00 0c 29 f7 87 89 00 a0 8e 72 1e 40 08 00 45 00 ..)......r.@..E. 0010 00 70 75 47 00 00 40 32 c6 68 a5 e3 f9 6a a5 e3 .puG..@2.h...j.. 0020 f9 7a a0 62 12 e4 00 00 00 04 07 be 28 21 7f 92 .z.b........(!.. 0030 3c 55 81 de 75 33 68 9c 50 30 b5 a4 f7 a0 93 12