Frame 1 (174 bytes on wire, 174 bytes captured)
    Arrival Time: Nov  9, 2005 08:56:07.357880000
    Time delta from previous packet: 0.000000000 seconds
    Time since reference or first frame: 0.000000000 seconds
    Frame Number: 1
    Packet Length: 174 bytes
    Capture Length: 174 bytes
Ethernet II, Src: 00:0c:29:89:f2:82, Dst: 00:0f:b5:ca:72:27
    Destination: 00:0f:b5:ca:72:27 (00:0f:b5:ca:72:27)
    Source: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82)
    Type: IP (0x0800)
    Frame check sequence: 0x7aa38234 (correct)
Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.109 (165.227.249.109)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 156
    Identification: 0x0027 (39)
    Flags: 0x04
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0xfb7a (correct)
    Source: 165.227.249.122 (165.227.249.122)
    Destination: 165.227.249.109 (165.227.249.109)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 136
    Checksum: 0x9ee9 (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x37A34358FEA0401D
    Responder cookie: 0x0000000000000000
    Next payload: Security Association (1)
    Version: 1.0
    Exchange type: Identity Protection (Main Mode) (2)
    Flags
        .... ...0 = No encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x00000000
    Length: 128
    Security Association payload
        Next payload: Vendor ID (13)
        Length: 56
        Domain of interpretation: IPSEC (1)
        Situation: IDENTITY (1)
        Proposal payload # 1
            Next payload: NONE (0)
            Length: 44
            Proposal number: 1
            Protocol ID: ISAKMP (1)
            SPI size: 0
            Number of transforms: 1
            Transform payload # 1
                Next payload: NONE (0)
                Length: 36
                Transform number: 1
                Transform ID: KEY_IKE (1)
                Encryption-Algorithm (1): 3DES-CBC (5)
                Hash-Algorithm (2): SHA (2)
                Authentication-Method (3): PSK (1)
                Group-Description (4): Alternate 1024-bit MODP group (2)
                Life-Type (11): Seconds (1)
                Life-Duration (12): Duration-Value (28800)
    Vendor ID payload
        Next payload: NONE (0)
        Length: 44
        Vendor ID: Check Point
            Check Point Product: VPN-1
            Version: NG with Application Intelligence R55

0000  00 0f b5 ca 72 27 00 0c 29 89 f2 82 08 00 45 00   ....r'..).....E.
0010  00 9c 00 27 40 00 40 11 fb 7a a5 e3 f9 7a a5 e3   ...'@.@..z...z..
0020  f9 6d 01 f4 01 f4 00 88 9e e9 37 a3 43 58 fe a0   .m........7.CX..
0030  40 1d 00 00 00 00 00 00 00 00 01 10 02 00 00 00   @...............
0040  00 00 00 00 00 80 0d 00 00 38 00 00 00 01 00 00   .........8......
0050  00 01 00 00 00 2c 01 01 00 01 00 00 00 24 01 01   .....,.......$..
0060  00 00 80 01 00 05 80 02 00 02 80 03 00 01 80 04   ................
0070  00 02 80 0b 00 01 00 0c 00 04 00 00 70 80 00 00   ............p...
0080  00 2c f4 ed 19 e0 c1 14 eb 51 6f aa ac 0e e3 7d   .,.......Qo....}
0090  af 28 07 b4 38 1f 00 00 00 01 00 00 13 8d 42 c2   .(..8.........B.
00a0  47 ef 00 00 00 00 18 00 00 00 7a a3 82 34         G.........z..4

Frame 2 (170 bytes on wire, 170 bytes captured)
    Arrival Time: Nov  9, 2005 08:56:07.361592000
    Time delta from previous packet: 0.003712000 seconds
    Time since reference or first frame: 0.003712000 seconds
    Frame Number: 2
    Packet Length: 170 bytes
    Capture Length: 170 bytes
Ethernet II, Src: 00:0f:b5:ca:72:27, Dst: 00:0c:29:89:f2:82
    Destination: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82)
    Source: 00:0f:b5:ca:72:27 (00:0f:b5:ca:72:27)
    Type: IP (0x0800)
    Frame check sequence: 0xa980ae76 (correct)
Internet Protocol, Src Addr: 165.227.249.109 (165.227.249.109), Dst Addr: 165.227.249.122 (165.227.249.122)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 152
    Identification: 0x0504 (1284)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0x36a2 (correct)
    Source: 165.227.249.109 (165.227.249.109)
    Destination: 165.227.249.122 (165.227.249.122)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 132
    Checksum: 0x6656 (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x37A34358FEA0401D
    Responder cookie: 0x05E7AD629E144D5E
    Next payload: Security Association (1)
    Version: 1.0
    Exchange type: Identity Protection (Main Mode) (2)
    Flags
        .... ...0 = No encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x00000000
    Length: 124
    Security Association payload
        Next payload: Vendor ID (13)
        Length: 56
        Domain of interpretation: IPSEC (1)
        Situation: IDENTITY (1)
        Proposal payload # 1
            Next payload: NONE (0)
            Length: 44
            Proposal number: 1
            Protocol ID: ISAKMP (1)
            SPI size: 0
            Number of transforms: 1
            Transform payload # 1
                Next payload: NONE (0)
                Length: 36
                Transform number: 1
                Transform ID: KEY_IKE (1)
                Encryption-Algorithm (1): 3DES-CBC (5)
                Hash-Algorithm (2): SHA (2)
                Authentication-Method (3): PSK (1)
                Group-Description (4): Alternate 1024-bit MODP group (2)
                Life-Type (11): Seconds (1)
                Life-Duration (12): Duration-Value (28800)
    Vendor ID payload
        Next payload: Vendor ID (13)
        Length: 20
        Vendor ID: draft-ietf-ipsec-dpd-00.txt
    Vendor ID payload
        Next payload: NONE (0)
        Length: 20
        Vendor ID: unknown vendor ID: 0x648982785BEDBDD66A6DD356F0E160FD

0000  00 0c 29 89 f2 82 00 0f b5 ca 72 27 08 00 45 00   ..).......r'..E.
0010  00 98 05 04 00 00 40 11 36 a2 a5 e3 f9 6d a5 e3   ......@.6....m..
0020  f9 7a 01 f4 01 f4 00 84 66 56 37 a3 43 58 fe a0   .z......fV7.CX..
0030  40 1d 05 e7 ad 62 9e 14 4d 5e 01 10 02 00 00 00   @....b..M^......
0040  00 00 00 00 00 7c 0d 00 00 38 00 00 00 01 00 00   .....|...8......
0050  00 01 00 00 00 2c 01 01 00 01 00 00 00 24 01 01   .....,.......$..
0060  00 00 80 01 00 05 80 02 00 02 80 03 00 01 80 04   ................
0070  00 02 80 0b 00 01 00 0c 00 04 00 00 70 80 0d 00   ............p...
0080  00 14 af ca d7 13 68 a1 f1 c9 6b 86 96 fc 77 57   ......h...k...wW
0090  01 00 00 00 00 14 64 89 82 78 5b ed bd d6 6a 6d   ......d..x[...jm
00a0  d3 56 f0 e1 60 fd a9 80 ae 76                     .V..`....v

Frame 3 (230 bytes on wire, 230 bytes captured)
    Arrival Time: Nov  9, 2005 08:56:07.374398000
    Time delta from previous packet: 0.012806000 seconds
    Time since reference or first frame: 0.016518000 seconds
    Frame Number: 3
    Packet Length: 230 bytes
    Capture Length: 230 bytes
Ethernet II, Src: 00:0c:29:89:f2:82, Dst: 00:0f:b5:ca:72:27
    Destination: 00:0f:b5:ca:72:27 (00:0f:b5:ca:72:27)
    Source: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82)
    Type: IP (0x0800)
    Frame check sequence: 0xd72c6d16 (correct)
Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.109 (165.227.249.109)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 212
    Identification: 0x0028 (40)
    Flags: 0x04
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0xfb41 (correct)
    Source: 165.227.249.122 (165.227.249.122)
    Destination: 165.227.249.109 (165.227.249.109)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 192
    Checksum: 0x27fe (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x37A34358FEA0401D
    Responder cookie: 0x05E7AD629E144D5E
    Next payload: Key Exchange (4)
    Version: 1.0
    Exchange type: Identity Protection (Main Mode) (2)
    Flags
        .... ...0 = No encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x00000000
    Length: 184
    Key Exchange payload
        Next payload: Nonce (10)
        Length: 132
        Key Exchange Data
    Nonce payload
        Next payload: NONE (0)
        Length: 24
        Nonce Data

0000  00 0f b5 ca 72 27 00 0c 29 89 f2 82 08 00 45 00   ....r'..).....E.
0010  00 d4 00 28 40 00 40 11 fb 41 a5 e3 f9 7a a5 e3   ...(@.@..A...z..
0020  f9 6d 01 f4 01 f4 00 c0 27 fe 37 a3 43 58 fe a0   .m......'.7.CX..
0030  40 1d 05 e7 ad 62 9e 14 4d 5e 04 10 02 00 00 00   @....b..M^......
0040  00 00 00 00 00 b8 0a 00 00 84 83 3a b5 cb eb b0   ...........:....
0050  2c 7d ac 10 83 8b ae 8f 66 4e ca 3e b9 ca 36 81   ,}......fN.>..6.
0060  3c 89 2c 3c 9d 2b fa 2c f7 46 ca 0b b1 52 47 09   <.,<.+.,.F...RG.
0070  40 bf ef 9f 3d 31 d2 cc 91 2f 4b bb 7f 3e 39 9b   @...=1.../K..>9.
0080  7e 7f 49 e2 e1 b6 8c 73 97 e0 22 bf 01 57 5e 5d   ~.I....s.."..W^]
0090  6d 5a e8 e1 5d d1 a6 26 a3 d5 b2 17 f4 97 9d 74   mZ..]..&.......t
00a0  64 5b 86 0f 9c 07 fe 33 a0 9a a8 51 92 8e c7 87   d[.....3...Q....
00b0  13 31 bf 54 47 df 48 1a be 7f 6c 9a c9 6c 4d d8   .1.TG.H...l..lM.
00c0  c1 f5 79 97 e2 c3 59 f4 c8 30 00 00 00 18 3f 4a   ..y...Y..0....?J
00d0  a2 b1 cd 62 75 87 4b 4c 30 f1 0a fd 2c fb 46 8d   ...bu.KL0...,.F.
00e0  8a 20 d7 2c 6d 16                                 . .,m.

Frame 4 (218 bytes on wire, 218 bytes captured)
    Arrival Time: Nov  9, 2005 08:56:07.754070000
    Time delta from previous packet: 0.379672000 seconds
    Time since reference or first frame: 0.396190000 seconds
    Frame Number: 4
    Packet Length: 218 bytes
    Capture Length: 218 bytes
Ethernet II, Src: 00:0f:b5:ca:72:27, Dst: 00:0c:29:89:f2:82
    Destination: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82)
    Source: 00:0f:b5:ca:72:27 (00:0f:b5:ca:72:27)
    Type: IP (0x0800)
    Frame check sequence: 0x8273d60d (correct)
Internet Protocol, Src Addr: 165.227.249.109 (165.227.249.109), Dst Addr: 165.227.249.122 (165.227.249.122)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 200
    Identification: 0x0505 (1285)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0x3671 (correct)
    Source: 165.227.249.109 (165.227.249.109)
    Destination: 165.227.249.122 (165.227.249.122)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 180
    Checksum: 0xd0b4 (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x37A34358FEA0401D
    Responder cookie: 0x05E7AD629E144D5E
    Next payload: Key Exchange (4)
    Version: 1.0
    Exchange type: Identity Protection (Main Mode) (2)
    Flags
        .... ...0 = No encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x00000000
    Length: 172
    Key Exchange payload
        Next payload: Nonce (10)
        Length: 132
        Key Exchange Data
    Nonce payload
        Next payload: NONE (0)
        Length: 12
        Nonce Data

0000  00 0c 29 89 f2 82 00 0f b5 ca 72 27 08 00 45 00   ..).......r'..E.
0010  00 c8 05 05 00 00 40 11 36 71 a5 e3 f9 6d a5 e3   ......@.6q...m..
0020  f9 7a 01 f4 01 f4 00 b4 d0 b4 37 a3 43 58 fe a0   .z........7.CX..
0030  40 1d 05 e7 ad 62 9e 14 4d 5e 04 10 02 00 00 00   @....b..M^......
0040  00 00 00 00 00 ac 0a 00 00 84 be 34 25 8b 14 6a   ...........4%..j
0050  b7 e7 a3 df 2b 3b d8 7e 1f e6 20 27 35 a4 3d dd   ....+;.~.. '5.=.
0060  d9 77 f9 4d e7 3e f3 01 ef cf db d4 5a 8e aa 72   .w.M.>......Z..r
0070  ed db 54 57 4b a4 b3 ee 4e 9d 9b a0 a9 ee 54 93   ..TWK...N.....T.
0080  d6 fc 02 ee 63 4b ea b8 55 7a a4 d0 48 ff d9 e2   ....cK..Uz..H...
0090  17 b0 9f cf 17 8c f1 c8 db d0 dc 8f b8 99 bc e9   ................
00a0  ed 6b 78 10 67 57 95 3b 9a 9a 7d 52 a6 71 90 c3   .kx.gW.;..}R.q..
00b0  c7 7b 4b a5 55 10 eb bf 50 57 c7 d3 50 ba 11 15   .{K.U...PW..P...
00c0  c8 64 e6 ae 88 ff 48 50 6a 8d 00 00 00 0c 8c 4b   .d....HPj......K
00d0  b2 3e 6e 46 83 56 82 73 d6 0d                     .>nF.V.s..

Frame 5 (114 bytes on wire, 114 bytes captured)
    Arrival Time: Nov  9, 2005 08:56:07.769929000
    Time delta from previous packet: 0.015859000 seconds
    Time since reference or first frame: 0.412049000 seconds
    Frame Number: 5
    Packet Length: 114 bytes
    Capture Length: 114 bytes
Ethernet II, Src: 00:0c:29:89:f2:82, Dst: 00:0f:b5:ca:72:27
    Destination: 00:0f:b5:ca:72:27 (00:0f:b5:ca:72:27)
    Source: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82)
    Type: IP (0x0800)
    Frame check sequence: 0xb9b95ed3 (correct)
Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.109 (165.227.249.109)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 96
    Identification: 0x0029 (41)
    Flags: 0x04
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0xfbb4 (correct)
    Source: 165.227.249.122 (165.227.249.122)
    Destination: 165.227.249.109 (165.227.249.109)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 76
    Checksum: 0xa97d (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x37A34358FEA0401D
    Responder cookie: 0x05E7AD629E144D5E
    Next payload: Identification (5)
    Version: 1.0
    Exchange type: Identity Protection (Main Mode) (2)
    Flags
        .... ...1 = Encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x00000000
    Length: 68
    Encrypted payload (40 bytes)

0000  00 0f b5 ca 72 27 00 0c 29 89 f2 82 08 00 45 00   ....r'..).....E.
0010  00 60 00 29 40 00 40 11 fb b4 a5 e3 f9 7a a5 e3   .`.)@.@......z..
0020  f9 6d 01 f4 01 f4 00 4c a9 7d 37 a3 43 58 fe a0   .m.....L.}7.CX..
0030  40 1d 05 e7 ad 62 9e 14 4d 5e 05 10 02 01 00 00   @....b..M^......
0040  00 00 00 00 00 44 8e 71 67 b7 36 41 52 f7 64 b0   .....D.qg.6AR.d.
0050  b2 34 de c5 94 4b 82 10 56 fb 5a 88 ed 98 28 23   .4...K..V.Z...(#
0060  02 27 dc 9a 8d 16 70 62 0b c1 fb b7 7d 19 b9 b9   .'....pb....}...
0070  5e d3                                             ^.

Frame 6 (138 bytes on wire, 138 bytes captured)
    Arrival Time: Nov  9, 2005 08:56:08.224505000
    Time delta from previous packet: 0.454576000 seconds
    Time since reference or first frame: 0.866625000 seconds
    Frame Number: 6
    Packet Length: 138 bytes
    Capture Length: 138 bytes
Ethernet II, Src: 00:0f:b5:ca:72:27, Dst: 00:0c:29:89:f2:82
    Destination: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82)
    Source: 00:0f:b5:ca:72:27 (00:0f:b5:ca:72:27)
    Type: IP (0x0800)
    Frame check sequence: 0x05334a82 (correct)
Internet Protocol, Src Addr: 165.227.249.109 (165.227.249.109), Dst Addr: 165.227.249.122 (165.227.249.122)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 120
    Identification: 0x0506 (1286)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0x36c0 (correct)
    Source: 165.227.249.109 (165.227.249.109)
    Destination: 165.227.249.122 (165.227.249.122)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 100
    Checksum: 0xec4b (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x37A34358FEA0401D
    Responder cookie: 0x05E7AD629E144D5E
    Next payload: Identification (5)
    Version: 1.0
    Exchange type: Identity Protection (Main Mode) (2)
    Flags
        .... ...1 = Encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x00000000
    Length: 92
    Encrypted payload (64 bytes)

0000  00 0c 29 89 f2 82 00 0f b5 ca 72 27 08 00 45 00   ..).......r'..E.
0010  00 78 05 06 00 00 40 11 36 c0 a5 e3 f9 6d a5 e3   .x....@.6....m..
0020  f9 7a 01 f4 01 f4 00 64 ec 4b 37 a3 43 58 fe a0   .z.....d.K7.CX..
0030  40 1d 05 e7 ad 62 9e 14 4d 5e 05 10 02 01 00 00   @....b..M^......
0040  00 00 00 00 00 5c 5e 18 fa fd 90 77 d0 07 b1 d4   .....\^....w....
0050  47 3f da 99 13 c2 49 8f 2d 73 d8 dc b4 be c7 2c   G?....I.-s.....,
0060  fa d1 e9 9d 6d 36 6a cb 1d b6 6b be da a0 11 e1   ....m6j...k.....
0070  f9 4d 2e 3c aa af b5 1a 61 de f0 d1 8e fa 2b e7   .M.<....a.....+.
0080  3c 69 f5 4d 0a 89 05 33 4a 82                     <i.M...3J.

Frame 7 (346 bytes on wire, 346 bytes captured)
    Arrival Time: Nov  9, 2005 08:56:08.246609000
    Time delta from previous packet: 0.022104000 seconds
    Time since reference or first frame: 0.888729000 seconds
    Frame Number: 7
    Packet Length: 346 bytes
    Capture Length: 346 bytes
Ethernet II, Src: 00:0c:29:89:f2:82, Dst: 00:0f:b5:ca:72:27
    Destination: 00:0f:b5:ca:72:27 (00:0f:b5:ca:72:27)
    Source: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82)
    Type: IP (0x0800)
    Frame check sequence: 0x783e805f (correct)
Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.109 (165.227.249.109)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 328
    Identification: 0x002a (42)
    Flags: 0x04
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0xfacb (correct)
    Source: 165.227.249.122 (165.227.249.122)
    Destination: 165.227.249.109 (165.227.249.109)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 308
    Checksum: 0xec41 (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x37A34358FEA0401D
    Responder cookie: 0x05E7AD629E144D5E
    Next payload: Hash (8)
    Version: 1.0
    Exchange type: Quick Mode (32)
    Flags
        .... ...1 = Encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x2A0FEDAA
    Length: 300
    Encrypted payload (272 bytes)

0000  00 0f b5 ca 72 27 00 0c 29 89 f2 82 08 00 45 00   ....r'..).....E.
0010  01 48 00 2a 40 00 40 11 fa cb a5 e3 f9 7a a5 e3   .H.*@.@......z..
0020  f9 6d 01 f4 01 f4 01 34 ec 41 37 a3 43 58 fe a0   .m.....4.A7.CX..
0030  40 1d 05 e7 ad 62 9e 14 4d 5e 08 10 20 01 2a 0f   @....b..M^.. .*.
0040  ed aa 00 00 01 2c 87 90 58 e2 6a 96 8e 27 19 e1   .....,..X.j..'..
0050  5c 17 74 af 06 3c 27 64 33 13 4a 27 f7 02 d4 d4   \.t..<'d3.J'....
0060  35 5d f1 35 4d e5 b0 6a fa d8 7f 44 3c c5 e3 55   5].5M..j...D<..U
0070  55 0f 29 b5 24 8b 8d 2b df 90 7a ad a8 df 2c 20   U.).$..+..z..., 
0080  81 9e af fa f3 e5 91 4d 12 1a d7 8c 8e 1f e7 52   .......M.......R
0090  e8 5a d8 ba 1c 70 18 1a fa c1 3f b7 60 f1 ed ab   .Z...p....?.`...
00a0  8d 05 a0 4a c7 8a b6 44 60 51 b7 c4 b0 cc cb ba   ...J...D`Q......
00b0  c7 7a 2f 99 0b bc fc ff a8 03 c2 19 c7 03 73 b3   .z/...........s.
00c0  3e b9 e2 09 c5 50 33 f9 96 1e e0 dc 6d 39 98 00   >....P3.....m9..
00d0  8b 48 f1 2a a4 30 eb 90 9b e3 f4 9c a0 74 91 fd   .H.*.0.......t..
00e0  88 9d ed 81 a3 4f 14 ed 87 94 78 5b 89 7e 09 b3   .....O....x[.~..
00f0  2c 4d d5 a8 42 d4 85 f1 3f 0d 95 55 36 1f 0c 4a   ,M..B...?..U6..J
0100  f1 01 9e 71 98 47 94 9e 91 97 2d 54 c4 04 28 38   ...q.G....-T..(8
0110  89 ad cc 62 d9 ba e4 d1 e4 95 c6 de 7f 33 f5 e7   ...b.........3..
0120  17 83 ca c6 c3 7b e4 d0 b6 f5 98 3b 3a a6 20 50   .....{.....;:. P
0130  3c 9c b2 64 ce 35 fb 1b 4e 66 7f 4a 05 6f ee f5   <..d.5..Nf.J.o..
0140  2c bc a2 1d 49 39 69 35 54 20 37 4c 2d ce 64 16   ,...I9i5T 7L-.d.
0150  46 05 43 4f e6 ab 78 3e 80 5f                     F.CO..x>._

Frame 8 (330 bytes on wire, 330 bytes captured)
    Arrival Time: Nov  9, 2005 08:56:08.637834000
    Time delta from previous packet: 0.391225000 seconds
    Time since reference or first frame: 1.279954000 seconds
    Frame Number: 8
    Packet Length: 330 bytes
    Capture Length: 330 bytes
Ethernet II, Src: 00:0f:b5:ca:72:27, Dst: 00:0c:29:89:f2:82
    Destination: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82)
    Source: 00:0f:b5:ca:72:27 (00:0f:b5:ca:72:27)
    Type: IP (0x0800)
    Frame check sequence: 0x1d4c91c7 (correct)
Internet Protocol, Src Addr: 165.227.249.109 (165.227.249.109), Dst Addr: 165.227.249.122 (165.227.249.122)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 312
    Identification: 0x050b (1291)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0x35fb (correct)
    Source: 165.227.249.109 (165.227.249.109)
    Destination: 165.227.249.122 (165.227.249.122)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 292
    Checksum: 0x6797 (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x37A34358FEA0401D
    Responder cookie: 0x05E7AD629E144D5E
    Next payload: Hash (8)
    Version: 1.0
    Exchange type: Quick Mode (32)
    Flags
        .... ...1 = Encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x2A0FEDAA
    Length: 284
    Encrypted payload (256 bytes)

0000  00 0c 29 89 f2 82 00 0f b5 ca 72 27 08 00 45 00   ..).......r'..E.
0010  01 38 05 0b 00 00 40 11 35 fb a5 e3 f9 6d a5 e3   .8....@.5....m..
0020  f9 7a 01 f4 01 f4 01 24 67 97 37 a3 43 58 fe a0   .z.....$g.7.CX..
0030  40 1d 05 e7 ad 62 9e 14 4d 5e 08 10 20 01 2a 0f   @....b..M^.. .*.
0040  ed aa 00 00 01 1c 6a 1a c9 f0 4d 83 88 37 e0 02   ......j...M..7..
0050  2f 3e c8 99 a1 b2 99 ef 75 17 53 ed 7a 40 08 24   />......u.S.z@.$
0060  e4 5c 1a c0 9b cd 08 50 a8 43 c2 22 5d 3e 2c a5   .\.....P.C."]>,.
0070  10 14 2a 9a 72 4b 37 7a d2 74 f5 8a a1 a6 3a 72   ..*.rK7z.t....:r
0080  1d 66 2e 2f ce 1e a4 cc 6e 25 d3 57 1a a2 71 b4   .f./....n%.W..q.
0090  8f 34 aa 5b 19 2b cc e4 d7 83 c4 5a 6f 42 36 1e   .4.[.+.....ZoB6.
00a0  c0 46 3c 89 f0 d9 e2 ff da c4 6f d6 40 70 62 31   .F<.......o.@pb1
00b0  0a 99 ab 3a 78 bd 91 5f e2 02 2b e1 20 b4 e2 6d   ...:x.._..+. ..m
00c0  88 d0 29 1d af 7d 87 ae d1 29 5a d6 59 34 8f 2f   ..)..}...)Z.Y4./
00d0  0f 80 79 6a 68 0d b1 67 c1 8a 51 fb f8 47 08 76   ..yjh..g..Q..G.v
00e0  04 49 88 c7 6b ca d3 7d 4d 0c 62 e9 17 ba 57 90   .I..k..}M.b...W.
00f0  49 51 56 8c 5a a8 7d 16 77 a4 e1 dc 14 32 81 a3   IQV.Z.}.w....2..
0100  46 10 da d0 c9 1a 63 6b d7 23 bf 81 72 3b 66 5a   F.....ck.#..r;fZ
0110  00 bc 14 c7 00 73 dc d4 e7 aa 48 db ac fd bc 4a   .....s....H....J
0120  68 db 47 2e 22 c0 51 84 0a e2 99 1a a1 58 a6 9a   h.G.".Q......X..
0130  aa 5c 7f 27 c4 8a 75 5c 4c 65 6d 21 7c 6e 44 2b   .\.'..u\Lem!|nD+
0140  a0 84 4f fe 87 13 1d 4c 91 c7                     ..O....L..

Frame 9 (106 bytes on wire, 106 bytes captured)
    Arrival Time: Nov  9, 2005 08:56:08.646049000
    Time delta from previous packet: 0.008215000 seconds
    Time since reference or first frame: 1.288169000 seconds
    Frame Number: 9
    Packet Length: 106 bytes
    Capture Length: 106 bytes
Ethernet II, Src: 00:0c:29:89:f2:82, Dst: 00:0f:b5:ca:72:27
    Destination: 00:0f:b5:ca:72:27 (00:0f:b5:ca:72:27)
    Source: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82)
    Type: IP (0x0800)
    Frame check sequence: 0x5030bdfb (correct)
Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.109 (165.227.249.109)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 88
    Identification: 0x002b (43)
    Flags: 0x04
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0xfbba (correct)
    Source: 165.227.249.122 (165.227.249.122)
    Destination: 165.227.249.109 (165.227.249.109)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 68
    Checksum: 0x02c0 (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x37A34358FEA0401D
    Responder cookie: 0x05E7AD629E144D5E
    Next payload: Hash (8)
    Version: 1.0
    Exchange type: Quick Mode (32)
    Flags
        .... ...1 = Encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x2A0FEDAA
    Length: 60
    Encrypted payload (32 bytes)

0000  00 0f b5 ca 72 27 00 0c 29 89 f2 82 08 00 45 00   ....r'..).....E.
0010  00 58 00 2b 40 00 40 11 fb ba a5 e3 f9 7a a5 e3   .X.+@.@......z..
0020  f9 6d 01 f4 01 f4 00 44 02 c0 37 a3 43 58 fe a0   .m.....D..7.CX..
0030  40 1d 05 e7 ad 62 9e 14 4d 5e 08 10 20 01 2a 0f   @....b..M^.. .*.
0040  ed aa 00 00 00 3c 13 30 93 85 0b e1 75 ff 79 0e   .....<.0....u.y.
0050  87 39 34 38 c1 b6 a9 0e 12 3e 70 29 18 99 f9 42   .948.....>p)...B
0060  4e d8 ee a1 87 f7 50 30 bd fb                     N.....P0..

Frame 10 (106 bytes on wire, 106 bytes captured)
    Arrival Time: Nov  9, 2005 08:56:08.752687000
    Time delta from previous packet: 0.106638000 seconds
    Time since reference or first frame: 1.394807000 seconds
    Frame Number: 10
    Packet Length: 106 bytes
    Capture Length: 106 bytes
Ethernet II, Src: 00:0c:29:89:f2:82, Dst: 00:0f:b5:ca:72:27
    Destination: 00:0f:b5:ca:72:27 (00:0f:b5:ca:72:27)
    Source: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82)
    Type: IP (0x0800)
    Frame check sequence: 0xc5f98271 (correct)
Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.109 (165.227.249.109)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 88
    Identification: 0x002c (44)
    Flags: 0x04
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0xfbb9 (correct)
    Source: 165.227.249.122 (165.227.249.122)
    Destination: 165.227.249.109 (165.227.249.109)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 68
    Checksum: 0x02c0 (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x37A34358FEA0401D
    Responder cookie: 0x05E7AD629E144D5E
    Next payload: Hash (8)
    Version: 1.0
    Exchange type: Quick Mode (32)
    Flags
        .... ...1 = Encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x2A0FEDAA
    Length: 60
    Encrypted payload (32 bytes)

0000  00 0f b5 ca 72 27 00 0c 29 89 f2 82 08 00 45 00   ....r'..).....E.
0010  00 58 00 2c 40 00 40 11 fb b9 a5 e3 f9 7a a5 e3   .X.,@.@......z..
0020  f9 6d 01 f4 01 f4 00 44 02 c0 37 a3 43 58 fe a0   .m.....D..7.CX..
0030  40 1d 05 e7 ad 62 9e 14 4d 5e 08 10 20 01 2a 0f   @....b..M^.. .*.
0040  ed aa 00 00 00 3c 13 30 93 85 0b e1 75 ff 79 0e   .....<.0....u.y.
0050  87 39 34 38 c1 b6 a9 0e 12 3e 70 29 18 99 f9 42   .948.....>p)...B
0060  4e d8 ee a1 87 f7 c5 f9 82 71                     N........q

Frame 11 (106 bytes on wire, 106 bytes captured)
    Arrival Time: Nov  9, 2005 08:56:08.853351000
    Time delta from previous packet: 0.100664000 seconds
    Time since reference or first frame: 1.495471000 seconds
    Frame Number: 11
    Packet Length: 106 bytes
    Capture Length: 106 bytes
Ethernet II, Src: 00:0c:29:89:f2:82, Dst: 00:0f:b5:ca:72:27
    Destination: 00:0f:b5:ca:72:27 (00:0f:b5:ca:72:27)
    Source: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82)
    Type: IP (0x0800)
    Frame check sequence: 0x217212b6 (correct)
Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.109 (165.227.249.109)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 88
    Identification: 0x002d (45)
    Flags: 0x04
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0xfbb8 (correct)
    Source: 165.227.249.122 (165.227.249.122)
    Destination: 165.227.249.109 (165.227.249.109)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 68
    Checksum: 0x02c0 (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x37A34358FEA0401D
    Responder cookie: 0x05E7AD629E144D5E
    Next payload: Hash (8)
    Version: 1.0
    Exchange type: Quick Mode (32)
    Flags
        .... ...1 = Encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x2A0FEDAA
    Length: 60
    Encrypted payload (32 bytes)

0000  00 0f b5 ca 72 27 00 0c 29 89 f2 82 08 00 45 00   ....r'..).....E.
0010  00 58 00 2d 40 00 40 11 fb b8 a5 e3 f9 7a a5 e3   .X.-@.@......z..
0020  f9 6d 01 f4 01 f4 00 44 02 c0 37 a3 43 58 fe a0   .m.....D..7.CX..
0030  40 1d 05 e7 ad 62 9e 14 4d 5e 08 10 20 01 2a 0f   @....b..M^.. .*.
0040  ed aa 00 00 00 3c 13 30 93 85 0b e1 75 ff 79 0e   .....<.0....u.y.
0050  87 39 34 38 c1 b6 a9 0e 12 3e 70 29 18 99 f9 42   .948.....>p)...B
0060  4e d8 ee a1 87 f7 21 72 12 b6                     N.....!r..

Frame 12 (130 bytes on wire, 130 bytes captured)
    Arrival Time: Nov  9, 2005 08:56:08.976349000
    Time delta from previous packet: 0.122998000 seconds
    Time since reference or first frame: 1.618469000 seconds
    Frame Number: 12
    Packet Length: 130 bytes
    Capture Length: 130 bytes
Ethernet II, Src: 00:0c:29:89:f2:82, Dst: 00:0f:b5:ca:72:27
    Destination: 00:0f:b5:ca:72:27 (00:0f:b5:ca:72:27)
    Source: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82)
    Type: IP (0x0800)
    Frame check sequence: 0x5a32f74a (correct)
Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.109 (165.227.249.109)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 112
    Identification: 0x0016 (22)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 255
    Protocol: ESP (0x32)
    Header checksum: 0x7c96 (correct)
    Source: 165.227.249.122 (165.227.249.122)
    Destination: 165.227.249.109 (165.227.249.109)
Encapsulating Security Payload
    SPI: 0xb61f48f7
    Sequence: 1
    Data (84 bytes)

0000  00 0f b5 ca 72 27 00 0c 29 89 f2 82 08 00 45 00   ....r'..).....E.
0010  00 70 00 16 00 00 ff 32 7c 96 a5 e3 f9 7a a5 e3   .p.....2|....z..
0020  f9 6d b6 1f 48 f7 00 00 00 01 3e fd e6 eb df 1a   .m..H.....>.....
0030  a1 c5 82 70 e6 45 00 b6 5d 4a 4e 78 4f f7 13 43   ...p.E..]JNxO..C
0040  1d aa 72 10 3a b3 58 83 5d 38 76 93 1d cc 0f 74   ..r.:.X.]8v....t
0050  60 a1 c0 f6 27 c3 a3 c6 22 13 de 24 8b b4 48 0e   `...'..."..$..H.
0060  d7 9b ff 72 55 a3 5c 58 fb 86 95 a4 b5 ee 8a 87   ...rU.\X........
0070  64 89 f2 ba ae 55 bd 80 25 d8 51 2a b2 be 5a 32   d....U..%.Q*..Z2
0080  f7 4a                                             .J

Frame 13 (130 bytes on wire, 130 bytes captured)
    Arrival Time: Nov  9, 2005 08:56:12.484523000
    Time delta from previous packet: 3.508174000 seconds
    Time since reference or first frame: 5.126643000 seconds
    Frame Number: 13
    Packet Length: 130 bytes
    Capture Length: 130 bytes
Ethernet II, Src: 00:0c:29:89:f2:82, Dst: 00:0f:b5:ca:72:27
    Destination: 00:0f:b5:ca:72:27 (00:0f:b5:ca:72:27)
    Source: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82)
    Type: IP (0x0800)
    Frame check sequence: 0x67893db0 (correct)
Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.109 (165.227.249.109)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 112
    Identification: 0x0017 (23)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 255
    Protocol: ESP (0x32)
    Header checksum: 0x7c95 (correct)
    Source: 165.227.249.122 (165.227.249.122)
    Destination: 165.227.249.109 (165.227.249.109)
Encapsulating Security Payload
    SPI: 0xb61f48f7
    Sequence: 2
    Data (84 bytes)

0000  00 0f b5 ca 72 27 00 0c 29 89 f2 82 08 00 45 00   ....r'..).....E.
0010  00 70 00 17 00 00 ff 32 7c 95 a5 e3 f9 7a a5 e3   .p.....2|....z..
0020  f9 6d b6 1f 48 f7 00 00 00 02 95 3d 8b 7f e4 de   .m..H......=....
0030  74 04 3e ab be 56 40 70 d6 93 01 44 fa ff 7a 33   t.>..V@p...D..z3
0040  92 d5 c8 05 60 39 db 0e a9 77 05 61 59 fe e6 a0   ....`9...w.aY...
0050  b5 04 0a 91 e9 38 3c 68 57 a9 a2 78 f0 4c bf ea   .....8<hW..x.L..
0060  e6 6c cc d3 d3 5a d5 74 ec 6f 25 f1 cb bf bd 2b   .l...Z.t.o%....+
0070  14 0d e4 f6 e9 17 4b e2 49 74 01 6b 2f 5b 67 89   ......K.It.k/[g.
0080  3d b0                                             =.

Frame 14 (130 bytes on wire, 130 bytes captured)
    Arrival Time: Nov  9, 2005 08:56:12.488190000
    Time delta from previous packet: 0.003667000 seconds
    Time since reference or first frame: 5.130310000 seconds
    Frame Number: 14
    Packet Length: 130 bytes
    Capture Length: 130 bytes
Ethernet II, Src: 00:0f:b5:ca:72:27, Dst: 00:0c:29:89:f2:82
    Destination: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82)
    Source: 00:0f:b5:ca:72:27 (00:0f:b5:ca:72:27)
    Type: IP (0x0800)
    Frame check sequence: 0x3a174289 (correct)
Internet Protocol, Src Addr: 165.227.249.109 (165.227.249.109), Dst Addr: 165.227.249.122 (165.227.249.122)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 112
    Identification: 0x0a31 (2609)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 29
    Protocol: ESP (0x32)
    Header checksum: 0x547c (correct)
    Source: 165.227.249.109 (165.227.249.109)
    Destination: 165.227.249.122 (165.227.249.122)
Encapsulating Security Payload
    SPI: 0x2b4e2ad1
    Sequence: 1
    Data (84 bytes)

0000  00 0c 29 89 f2 82 00 0f b5 ca 72 27 08 00 45 00   ..).......r'..E.
0010  00 70 0a 31 00 00 1d 32 54 7c a5 e3 f9 6d a5 e3   .p.1...2T|...m..
0020  f9 7a 2b 4e 2a d1 00 00 00 01 96 13 1a 21 2d 85   .z+N*........!-.
0030  aa 82 55 4d 32 0c f7 4e d3 12 e8 79 9d 7e 21 66   ..UM2..N...y.~!f
0040  d1 8d 73 13 80 c2 6d e8 13 65 a0 bb 0d 42 08 dd   ..s...m..e...B..
0050  7b 81 4f eb 66 f9 b2 04 76 aa 4e 6b 62 ac a5 ad   {.O.f...v.Nkb...
0060  76 c1 96 a9 ce 01 7b b6 cc 8f 7e 34 8c 53 b4 ca   v.....{...~4.S..
0070  e4 b2 ab 27 fc d2 4a fe fd 4f 59 5e 13 84 3a 17   ...'..J..OY^..:.
0080  42 89                                             B.

Frame 15 (130 bytes on wire, 130 bytes captured)
    Arrival Time: Nov  9, 2005 08:56:13.548295000
    Time delta from previous packet: 1.060105000 seconds
    Time since reference or first frame: 6.190415000 seconds
    Frame Number: 15
    Packet Length: 130 bytes
    Capture Length: 130 bytes
Ethernet II, Src: 00:0c:29:89:f2:82, Dst: 00:0f:b5:ca:72:27
    Destination: 00:0f:b5:ca:72:27 (00:0f:b5:ca:72:27)
    Source: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82)
    Type: IP (0x0800)
    Frame check sequence: 0xca6a4e88 (correct)
Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.109 (165.227.249.109)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 112
    Identification: 0x0018 (24)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 255
    Protocol: ESP (0x32)
    Header checksum: 0x7c94 (correct)
    Source: 165.227.249.122 (165.227.249.122)
    Destination: 165.227.249.109 (165.227.249.109)
Encapsulating Security Payload
    SPI: 0xb61f48f7
    Sequence: 3
    Data (84 bytes)

0000  00 0f b5 ca 72 27 00 0c 29 89 f2 82 08 00 45 00   ....r'..).....E.
0010  00 70 00 18 00 00 ff 32 7c 94 a5 e3 f9 7a a5 e3   .p.....2|....z..
0020  f9 6d b6 1f 48 f7 00 00 00 03 10 f4 95 a1 d6 bf   .m..H...........
0030  10 5d f8 28 bc 56 a8 db 32 90 65 b9 ba 95 af 1c   .].(.V..2.e.....
0040  05 ce 5e 92 df 4d 03 a3 60 c4 7f 93 e1 7a 0f 7e   ..^..M..`....z.~
0050  f8 8f 6b 83 e1 3b 33 1e f2 69 a8 7f db a4 a7 51   ..k..;3..i.....Q
0060  d7 e9 0a 4a 79 13 ad af 6b 9e e6 77 3a a4 fd e0   ...Jy...k..w:...
0070  b9 91 66 a0 7c 16 1c 41 fa 48 f1 37 50 7c ca 6a   ..f.|..A.H.7P|.j
0080  4e 88                                             N.

Frame 16 (130 bytes on wire, 130 bytes captured)
    Arrival Time: Nov  9, 2005 08:56:13.551240000
    Time delta from previous packet: 0.002945000 seconds
    Time since reference or first frame: 6.193360000 seconds
    Frame Number: 16
    Packet Length: 130 bytes
    Capture Length: 130 bytes
Ethernet II, Src: 00:0f:b5:ca:72:27, Dst: 00:0c:29:89:f2:82
    Destination: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82)
    Source: 00:0f:b5:ca:72:27 (00:0f:b5:ca:72:27)
    Type: IP (0x0800)
    Frame check sequence: 0x7a69aab5 (correct)
Internet Protocol, Src Addr: 165.227.249.109 (165.227.249.109), Dst Addr: 165.227.249.122 (165.227.249.122)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 112
    Identification: 0x1d0c (7436)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 29
    Protocol: ESP (0x32)
    Header checksum: 0x41a1 (correct)
    Source: 165.227.249.109 (165.227.249.109)
    Destination: 165.227.249.122 (165.227.249.122)
Encapsulating Security Payload
    SPI: 0x2b4e2ad1
    Sequence: 2
    Data (84 bytes)

0000  00 0c 29 89 f2 82 00 0f b5 ca 72 27 08 00 45 00   ..).......r'..E.
0010  00 70 1d 0c 00 00 1d 32 41 a1 a5 e3 f9 6d a5 e3   .p.....2A....m..
0020  f9 7a 2b 4e 2a d1 00 00 00 02 49 83 13 27 17 2d   .z+N*.....I..'.-
0030  c3 a9 11 4b 63 32 ff 9c fe a8 ea 08 1f e7 cb 69   ...Kc2.........i
0040  b4 05 59 cb 9e 93 0b 33 ee 94 67 3f eb 9e 85 97   ..Y....3..g?....
0050  3f 98 80 95 6b 13 df 40 60 a0 36 1d fc 2b c9 09   ?...k..@`.6..+..
0060  05 3b 38 ea d9 bd 65 d6 f7 cf 27 17 70 21 4e d1   .;8...e...'.p!N.
0070  5f d7 58 77 08 99 48 83 e1 67 09 7b 52 59 7a 69   _.Xw..H..g.{RYzi
0080  aa b5                                             ..

Frame 17 (130 bytes on wire, 130 bytes captured)
    Arrival Time: Nov  9, 2005 08:56:14.596264000
    Time delta from previous packet: 1.045024000 seconds
    Time since reference or first frame: 7.238384000 seconds
    Frame Number: 17
    Packet Length: 130 bytes
    Capture Length: 130 bytes
Ethernet II, Src: 00:0c:29:89:f2:82, Dst: 00:0f:b5:ca:72:27
    Destination: 00:0f:b5:ca:72:27 (00:0f:b5:ca:72:27)
    Source: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82)
    Type: IP (0x0800)
    Frame check sequence: 0xd3c2f4a6 (correct)
Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.109 (165.227.249.109)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 112
    Identification: 0x0019 (25)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 255
    Protocol: ESP (0x32)
    Header checksum: 0x7c93 (correct)
    Source: 165.227.249.122 (165.227.249.122)
    Destination: 165.227.249.109 (165.227.249.109)
Encapsulating Security Payload
    SPI: 0xb61f48f7
    Sequence: 4
    Data (84 bytes)

0000  00 0f b5 ca 72 27 00 0c 29 89 f2 82 08 00 45 00   ....r'..).....E.
0010  00 70 00 19 00 00 ff 32 7c 93 a5 e3 f9 7a a5 e3   .p.....2|....z..
0020  f9 6d b6 1f 48 f7 00 00 00 04 9c 03 50 67 50 b7   .m..H.......PgP.
0030  09 c4 c5 22 a8 f8 13 fb bb 28 e1 4e 41 6d c4 7c   ...".....(.NAm.|
0040  28 b2 86 87 23 60 b3 ff a2 46 d3 60 44 3e 5c 16   (...#`...F.`D>\.
0050  ab 9b f1 67 6b 6f 18 5c 27 be c8 59 10 95 c0 29   ...gko.\'..Y...)
0060  96 87 c3 f8 15 36 c7 99 9d 72 89 12 16 7a 50 5e   .....6...r...zP^
0070  5a 8a 10 20 fb 08 13 3f 05 e5 44 8f 2b d7 d3 c2   Z.. ...?..D.+...
0080  f4 a6                                             ..

Frame 18 (130 bytes on wire, 130 bytes captured)
    Arrival Time: Nov  9, 2005 08:56:14.599262000
    Time delta from previous packet: 0.002998000 seconds
    Time since reference or first frame: 7.241382000 seconds
    Frame Number: 18
    Packet Length: 130 bytes
    Capture Length: 130 bytes
Ethernet II, Src: 00:0f:b5:ca:72:27, Dst: 00:0c:29:89:f2:82
    Destination: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82)
    Source: 00:0f:b5:ca:72:27 (00:0f:b5:ca:72:27)
    Type: IP (0x0800)
    Frame check sequence: 0x809efef7 (correct)
Internet Protocol, Src Addr: 165.227.249.109 (165.227.249.109), Dst Addr: 165.227.249.122 (165.227.249.122)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 112
    Identification: 0x0f67 (3943)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 29
    Protocol: ESP (0x32)
    Header checksum: 0x4f46 (correct)
    Source: 165.227.249.109 (165.227.249.109)
    Destination: 165.227.249.122 (165.227.249.122)
Encapsulating Security Payload
    SPI: 0x2b4e2ad1
    Sequence: 3
    Data (84 bytes)

0000  00 0c 29 89 f2 82 00 0f b5 ca 72 27 08 00 45 00   ..).......r'..E.
0010  00 70 0f 67 00 00 1d 32 4f 46 a5 e3 f9 6d a5 e3   .p.g...2OF...m..
0020  f9 7a 2b 4e 2a d1 00 00 00 03 52 17 0c e9 3e d2   .z+N*.....R...>.