Frame 1 (178 bytes on wire, 178 bytes captured) Arrival Time: Mar 26, 2004 09:44:17.742330000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 178 bytes Capture Length: 178 bytes Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:80:c8:b9:b1:b8 Destination: 00:80:c8:b9:b1:b8 (00:80:c8:b9:b1:b8) Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Type: IP (0x0800) Frame check sequence: 0x8e4287c1 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.111 (165.227.249.111) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 160 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb9b (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.111 (165.227.249.111) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 140 Checksum: 0x9f99 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x2D8741AAC6008D5E Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 132 Security Association payload Next payload: Vendor ID (13) Length: 60 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 48 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 40 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): AES-CBC (7) Key-Length (14): Key-Length (128) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: NONE (0) Length: 44 Vendor ID: Check Point Check Point Product: VPN-1 Version: NG with Application Intelligence R55 0000 00 80 c8 b9 b1 b8 00 0c 29 fc 0c 9f 08 00 45 00 ........).....E. 0010 00 a0 00 00 40 00 40 11 fb 9b a5 e3 f9 7a a5 e3 ....@.@......z.. 0020 f9 6f 01 f4 01 f4 00 8c 9f 99 2d 87 41 aa c6 00 .o........-.A... 0030 8d 5e 00 00 00 00 00 00 00 00 01 10 02 00 00 00 .^.............. 0040 00 00 00 00 00 84 0d 00 00 3c 00 00 00 01 00 00 .........<...... 0050 00 01 00 00 00 30 01 01 00 01 00 00 00 28 01 01 .....0.......(.. 0060 00 00 80 01 00 07 80 0e 00 80 80 02 00 02 80 03 ................ 0070 00 01 80 04 00 02 80 0b 00 01 00 0c 00 04 00 00 ................ 0080 70 80 00 00 00 2c f4 ed 19 e0 c1 14 eb 51 6f aa p....,.......Qo. 0090 ac 0e e3 7d af 28 07 b4 38 1f 00 00 00 01 00 00 ...}.(..8....... 00a0 13 8d 00 00 00 00 00 00 00 00 18 80 00 00 8e 42 ...............B 00b0 87 c1 .. Frame 2 (274 bytes on wire, 274 bytes captured) Arrival Time: Mar 26, 2004 09:44:17.744502000 Time delta from previous packet: 0.002172000 seconds Time since reference or first frame: 0.002172000 seconds Frame Number: 2 Packet Length: 274 bytes Capture Length: 274 bytes Ethernet II, Src: 00:80:c8:b9:b1:b8, Dst: 00:0c:29:fc:0c:9f Destination: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Source: 00:80:c8:b9:b1:b8 (00:80:c8:b9:b1:b8) Type: IP (0x0800) Frame check sequence: 0x048a235a (correct) Internet Protocol, Src Addr: 165.227.249.111 (165.227.249.111), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 256 Identification: 0xeb50 (60240) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x4feb (correct) Source: 165.227.249.111 (165.227.249.111) Destination: 165.227.249.122 (165.227.249.122) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 236 Checksum: 0x0000 (none) Internet Security Association and Key Management Protocol Initiator cookie: 0x2D8741AAC6008D5E Responder cookie: 0xD945232371168FF7 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 228 Security Association payload Next payload: Vendor ID (13) Length: 60 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 48 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 40 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): AES-CBC (7) Key-Length (14): Key-Length (128) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: unknown vendor ID: 0x5DE9BC4C3560AA16CB2DF25E7950F160 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-stenberg-ipsec-nat-traversal-01 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-stenberg-ipsec-nat-traversal-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-03 0000 00 0c 29 fc 0c 9f 00 80 c8 b9 b1 b8 08 00 45 00 ..)...........E. 0010 01 00 eb 50 00 00 40 11 4f eb a5 e3 f9 6f a5 e3 ...P..@.O....o.. 0020 f9 7a 01 f4 01 f4 00 ec 00 00 2d 87 41 aa c6 00 .z........-.A... 0030 8d 5e d9 45 23 23 71 16 8f f7 01 10 02 00 00 00 .^.E##q......... 0040 00 00 00 00 00 e4 0d 00 00 3c 00 00 00 01 00 00 .........<...... 0050 00 01 00 00 00 30 01 01 00 01 00 00 00 28 01 01 .....0.......(.. 0060 00 00 80 01 00 07 80 0e 00 80 80 02 00 02 80 03 ................ 0070 00 01 80 04 00 02 80 0b 00 01 00 0c 00 04 00 00 ................ 0080 70 80 0d 00 00 14 5d e9 bc 4c 35 60 aa 16 cb 2d p.....]..L5`...- 0090 f2 5e 79 50 f1 60 0d 00 00 14 27 ba b5 dc 01 ea .^yP.`....'..... 00a0 07 60 ea 4e 31 90 ac 27 c0 d0 0d 00 00 14 61 05 .`.N1..'......a. 00b0 c4 22 e7 68 47 e4 3f 96 84 80 12 92 ae cd 0d 00 .".hG.?......... 00c0 00 14 44 85 15 2d 18 b6 bb cd 0b e8 a8 46 95 79 ..D..-.......F.y 00d0 dd cc 0d 00 00 14 cd 60 46 43 35 df 21 f8 7c fd .......`FC5.!.|. 00e0 b2 fc 68 b6 a4 48 0d 00 00 14 90 cb 80 91 3e bb ..h..H........>. 00f0 69 6e 08 63 81 b5 ec 42 7b 1f 00 00 00 14 7d 94 in.c...B{.....}. 0100 19 a6 53 10 ca 6f 2c 17 9d 92 15 52 9d 56 04 8a ..S..o,....R.V.. 0110 23 5a #Z Frame 3 (230 bytes on wire, 230 bytes captured) Arrival Time: Mar 26, 2004 09:44:17.748219000 Time delta from previous packet: 0.003717000 seconds Time since reference or first frame: 0.005889000 seconds Frame Number: 3 Packet Length: 230 bytes Capture Length: 230 bytes Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:80:c8:b9:b1:b8 Destination: 00:80:c8:b9:b1:b8 (00:80:c8:b9:b1:b8) Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Type: IP (0x0800) Frame check sequence: 0xafe17302 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.111 (165.227.249.111) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 212 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb67 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.111 (165.227.249.111) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 192 Checksum: 0x077e (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x2D8741AAC6008D5E Responder cookie: 0xD945232371168FF7 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 184 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 24 Nonce Data 0000 00 80 c8 b9 b1 b8 00 0c 29 fc 0c 9f 08 00 45 00 ........).....E. 0010 00 d4 00 00 40 00 40 11 fb 67 a5 e3 f9 7a a5 e3 ....@.@..g...z.. 0020 f9 6f 01 f4 01 f4 00 c0 07 7e 2d 87 41 aa c6 00 .o.......~-.A... 0030 8d 5e d9 45 23 23 71 16 8f f7 04 10 02 00 00 00 .^.E##q......... 0040 00 00 00 00 00 b8 0a 00 00 84 7d 27 3f 73 76 8d ..........}'?sv. 0050 e3 75 50 9f ab 70 a7 c7 ac f3 18 a1 b0 e4 e4 38 .uP..p.........8 0060 2a 04 9b 84 ce ee 63 11 34 64 53 59 03 6c 82 e4 *.....c.4dSY.l.. 0070 99 a8 3d f5 21 20 1d 32 dc 34 b7 ee ca 11 2d 31 ..=.! .2.4....-1 0080 a5 48 34 48 99 c5 1c 26 36 83 b1 41 94 c3 db ca .H4H...&6..A.... 0090 17 8b 8f 9e df 7c e2 e9 3c 45 38 66 ef 81 6f 77 .....|..6..........D. 00a0 04 6e 0a 6e 0b cc 67 47 7e 40 24 c4 91 23 32 94 .n.n..gG~@$..#2. 00b0 8a 63 ce 44 ef 84 2b 7d 43 5a b5 5b a8 2e 65 d2 .c.D..+}CZ.[..e. 00c0 b7 a7 5e 1f 09 9f 12 d0 b3 e9 00 00 00 14 b6 fd ..^............. 00d0 78 77 ea 76 6d 78 6e 62 ee b1 e1 d2 da 32 24 ca xw.vmxnb.....2$. 00e0 ba bf .. Frame 5 (122 bytes on wire, 122 bytes captured) Arrival Time: Mar 26, 2004 09:44:17.808469000 Time delta from previous packet: 0.005825000 seconds Time since reference or first frame: 0.066139000 seconds Frame Number: 5 Packet Length: 122 bytes Capture Length: 122 bytes Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:80:c8:b9:b1:b8 Destination: 00:80:c8:b9:b1:b8 (00:80:c8:b9:b1:b8) Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Type: IP (0x0800) Frame check sequence: 0xd162cb89 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.111 (165.227.249.111) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 104 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfbd3 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.111 (165.227.249.111) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 84 Checksum: 0x361d (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x2D8741AAC6008D5E Responder cookie: 0xD945232371168FF7 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 76 Encrypted payload (48 bytes) 0000 00 80 c8 b9 b1 b8 00 0c 29 fc 0c 9f 08 00 45 00 ........).....E. 0010 00 68 00 00 40 00 40 11 fb d3 a5 e3 f9 7a a5 e3 .h..@.@......z.. 0020 f9 6f 01 f4 01 f4 00 54 36 1d 2d 87 41 aa c6 00 .o.....T6.-.A... 0030 8d 5e d9 45 23 23 71 16 8f f7 05 10 02 01 00 00 .^.E##q......... 0040 00 00 00 00 00 4c 05 96 e5 ed 5f eb 27 11 d1 85 .....L...._.'... 0050 f9 8e 7e 43 2e 7a 65 ff 2c 02 da 4e bc 1c 67 91 ..~C.ze.,..N..g. 0060 37 25 82 ca cb 13 d6 98 43 43 bb 38 c9 23 7b 9c 7%......CC.8.#{. 0070 0e 5c 0f f2 87 b2 d1 62 cb 89 .\.....b.. Frame 6 (122 bytes on wire, 122 bytes captured) Arrival Time: Mar 26, 2004 09:44:17.809238000 Time delta from previous packet: 0.000769000 seconds Time since reference or first frame: 0.066908000 seconds Frame Number: 6 Packet Length: 122 bytes Capture Length: 122 bytes Ethernet II, Src: 00:80:c8:b9:b1:b8, Dst: 00:0c:29:fc:0c:9f Destination: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Source: 00:80:c8:b9:b1:b8 (00:80:c8:b9:b1:b8) Type: IP (0x0800) Frame check sequence: 0x84c990d3 (correct) Internet Protocol, Src Addr: 165.227.249.111 (165.227.249.111), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 104 Identification: 0xfded (65005) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3de6 (correct) Source: 165.227.249.111 (165.227.249.111) Destination: 165.227.249.122 (165.227.249.122) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 84 Checksum: 0x0000 (none) Internet Security Association and Key Management Protocol Initiator cookie: 0x2D8741AAC6008D5E Responder cookie: 0xD945232371168FF7 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 76 Encrypted payload (48 bytes) 0000 00 0c 29 fc 0c 9f 00 80 c8 b9 b1 b8 08 00 45 00 ..)...........E. 0010 00 68 fd ed 00 00 40 11 3d e6 a5 e3 f9 6f a5 e3 .h....@.=....o.. 0020 f9 7a 01 f4 01 f4 00 54 00 00 2d 87 41 aa c6 00 .z.....T..-.A... 0030 8d 5e d9 45 23 23 71 16 8f f7 05 10 02 01 00 00 .^.E##q......... 0040 00 00 00 00 00 4c 42 03 a7 e8 9c ba 77 0e 5f 8a .....LB.....w._. 0050 bb 14 4b b5 0f b7 8c ae f0 08 95 76 05 80 92 09 ..K........v.... 0060 38 37 5f 2e 8d 16 07 2a 1a 83 37 9d d0 bc 7f 79 87_....*..7....y 0070 87 24 85 6e 3c 8f 84 c9 90 d3 .$.n<..... Frame 7 (362 bytes on wire, 362 bytes captured) Arrival Time: Mar 26, 2004 09:44:17.814278000 Time delta from previous packet: 0.005040000 seconds Time since reference or first frame: 0.071948000 seconds Frame Number: 7 Packet Length: 362 bytes Capture Length: 362 bytes Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:80:c8:b9:b1:b8 Destination: 00:80:c8:b9:b1:b8 (00:80:c8:b9:b1:b8) Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Type: IP (0x0800) Frame check sequence: 0x581c646f (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.111 (165.227.249.111) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 344 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfae3 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.111 (165.227.249.111) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 324 Checksum: 0xaa9f (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x2D8741AAC6008D5E Responder cookie: 0xD945232371168FF7 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x7C885476 Length: 316 Encrypted payload (288 bytes) 0000 00 80 c8 b9 b1 b8 00 0c 29 fc 0c 9f 08 00 45 00 ........).....E. 0010 01 58 00 00 40 00 40 11 fa e3 a5 e3 f9 7a a5 e3 .X..@.@......z.. 0020 f9 6f 01 f4 01 f4 01 44 aa 9f 2d 87 41 aa c6 00 .o.....D..-.A... 0030 8d 5e d9 45 23 23 71 16 8f f7 08 10 20 01 7c 88 .^.E##q..... .|. 0040 54 76 00 00 01 3c 1f bd c8 d9 11 82 e3 31 95 bb Tv...<.......1.. 0050 55 f1 d4 c8 32 82 e1 37 32 de 96 e9 d1 7b 20 96 U...2..72....{ . 0060 80 3c d9 15 d6 0d 02 29 7d 22 15 a0 ba 96 10 42 .<.....)}".....B 0070 f3 bf 36 58 51 eb 60 4e d1 25 4d a6 e2 03 37 a0 ..6XQ.`N.%M...7. 0080 d6 62 8a cb 3c d6 1e c4 86 e3 96 b7 b5 ca fd 21 .b..<..........! 0090 32 54 5f 64 f7 54 76 57 14 f8 fc 33 cd ee 82 e3 2T_d.TvW...3.... 00a0 3c 5d 3a 92 72 b9 50 a9 09 07 c0 19 f9 dd df 11 <]:.r.P......... 00b0 8b c7 c3 08 4f bc a0 73 25 50 81 da 7b f5 3f 50 ....O..s%P..{.?P 00c0 2f bd a4 81 87 c8 1e 8a da f0 63 5b 26 90 57 9c /.........c[&.W. 00d0 62 59 df f1 ba 9c 64 a4 f5 94 ee 5a df 38 62 2a bY....d....Z.8b* 00e0 2e 00 34 6a 7f 03 24 ae d1 1e 52 f4 22 51 0d d5 ..4j..$...R."Q.. 00f0 9b 24 e4 f1 a6 ce 0a 55 56 4c 5d 79 a8 d4 62 de .$.....UVL]y..b. 0100 98 7e dc b5 d9 31 74 81 04 14 fc 83 1b c1 32 90 .~...1t.......2. 0110 b1 72 7d 51 36 6e 57 29 7e fb ab 95 a2 02 1e c7 .r}Q6nW)~....... 0120 51 32 98 3d 7e 77 6b a3 14 30 8e 99 52 98 14 27 Q2.=~wk..0..R..' 0130 06 07 31 92 42 8b 9c f9 ac 3a 75 8b 4e 7d 76 02 ..1.B....:u.N}v. 0140 a3 ef a2 69 93 0d 1a 61 cf 88 85 eb ab f9 1d 50 ...i...a.......P 0150 a5 fc b5 04 c8 55 d5 1c 3d 54 97 db 40 7b b8 39 .....U..=T..@{.9 0160 b8 c6 5a c6 4e b9 58 1c 64 6f ..Z.N.X.do Frame 8 (346 bytes on wire, 346 bytes captured) Arrival Time: Mar 26, 2004 09:44:17.841980000 Time delta from previous packet: 0.027702000 seconds Time since reference or first frame: 0.099650000 seconds Frame Number: 8 Packet Length: 346 bytes Capture Length: 346 bytes Ethernet II, Src: 00:80:c8:b9:b1:b8, Dst: 00:0c:29:fc:0c:9f Destination: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Source: 00:80:c8:b9:b1:b8 (00:80:c8:b9:b1:b8) Type: IP (0x0800) Frame check sequence: 0x7ddc63ea (correct) Internet Protocol, Src Addr: 165.227.249.111 (165.227.249.111), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 328 Identification: 0xfd52 (64850) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3da1 (correct) Source: 165.227.249.111 (165.227.249.111) Destination: 165.227.249.122 (165.227.249.122) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 308 Checksum: 0x0000 (none) Internet Security Association and Key Management Protocol Initiator cookie: 0x2D8741AAC6008D5E Responder cookie: 0xD945232371168FF7 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x7C885476 Length: 300 Encrypted payload (272 bytes) 0000 00 0c 29 fc 0c 9f 00 80 c8 b9 b1 b8 08 00 45 00 ..)...........E. 0010 01 48 fd 52 00 00 40 11 3d a1 a5 e3 f9 6f a5 e3 .H.R..@.=....o.. 0020 f9 7a 01 f4 01 f4 01 34 00 00 2d 87 41 aa c6 00 .z.....4..-.A... 0030 8d 5e d9 45 23 23 71 16 8f f7 08 10 20 01 7c 88 .^.E##q..... .|. 0040 54 76 00 00 01 2c 8e 5e 72 e1 a6 3f 95 13 c7 e5 Tv...,.^r..?.... 0050 c1 fc bf 32 8a 73 ae 41 70 b8 4c a4 40 df 56 84 ...2.s.Ap.L.@.V. 0060 a3 75 eb 14 a7 69 9e 7f 34 64 15 06 5d 67 17 47 .u...i..4d..]g.G 0070 31 3d 2c bf f7 0e 2b 0f f9 53 a8 fd c4 3e b4 62 1=,...+..S...>.b 0080 07 74 44 03 42 7e 73 59 92 70 17 35 de 03 43 0b .tD.B~sY.p.5..C. 0090 99 b1 ce 97 fd 82 ed 97 be 3a ec 0e 12 d3 08 ce .........:...... 00a0 3b 2a ad f0 57 1b d7 e6 07 5b 20 51 59 1f 86 c0 ;*..W....[ QY... 00b0 e3 7f 33 32 dd 20 5c b3 aa f9 ba 4b 7c ee 01 2a ..32. \....K|..* 00c0 c6 55 5b b3 16 db 12 23 04 c9 c3 b4 2d a3 f7 7f .U[....#....-... 00d0 b4 cf ac 09 f4 1f 38 e3 58 8a 27 59 af 50 25 42 ......8.X.'Y.P%B 00e0 94 8d 98 f4 ae fe f0 5e 0c 4c 56 f1 3a 12 77 57 .......^.LV.:.wW 00f0 1e a5 21 d0 44 b2 48 c2 49 43 60 07 fa 14 19 bb ..!.D.H.IC`..... 0100 e8 26 02 22 1c db 4d 28 54 26 1d 2e a9 76 be 95 .&."..M(T&...v.. 0110 07 ac 7b cf 31 7f 67 5a cf a6 2b 1e 4a 25 1e b7 ..{.1.gZ..+.J%.. 0120 e8 39 f6 42 ae df 4a b5 ef 74 bd d6 e2 45 59 ef .9.B..J..t...EY. 0130 7b 1b 27 92 90 19 87 2c b3 25 6b 61 86 f6 ac 35 {.'....,.%ka...5 0140 cd 81 14 ab b9 7a 41 cc c5 8d bd d9 f1 fe 24 79 .....zA.......$y 0150 06 8f 34 3d 33 25 7d dc 63 ea ..4=3%}.c. Frame 9 (106 bytes on wire, 106 bytes captured) Arrival Time: Mar 26, 2004 09:44:17.848251000 Time delta from previous packet: 0.006271000 seconds Time since reference or first frame: 0.105921000 seconds Frame Number: 9 Packet Length: 106 bytes Capture Length: 106 bytes Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:80:c8:b9:b1:b8 Destination: 00:80:c8:b9:b1:b8 (00:80:c8:b9:b1:b8) Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Type: IP (0x0800) Frame check sequence: 0x2034e0d2 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.111 (165.227.249.111) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 88 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfbe3 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.111 (165.227.249.111) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 68 Checksum: 0x3541 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x2D8741AAC6008D5E Responder cookie: 0xD945232371168FF7 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x7C885476 Length: 60 Encrypted payload (32 bytes) 0000 00 80 c8 b9 b1 b8 00 0c 29 fc 0c 9f 08 00 45 00 ........).....E. 0010 00 58 00 00 40 00 40 11 fb e3 a5 e3 f9 7a a5 e3 .X..@.@......z.. 0020 f9 6f 01 f4 01 f4 00 44 35 41 2d 87 41 aa c6 00 .o.....D5A-.A... 0030 8d 5e d9 45 23 23 71 16 8f f7 08 10 20 01 7c 88 .^.E##q..... .|. 0040 54 76 00 00 00 3c e3 48 f8 a9 34 34 41 8a fd b8 Tv...<.H..44A... 0050 6d b3 db 9a 47 bb c9 a9 33 1c aa b0 31 0c 0c 8d m...G...3...1... 0060 3e 46 2b de 9e 8f 20 34 e0 d2 >F+... 4.. Frame 10 (106 bytes on wire, 106 bytes captured) Arrival Time: Mar 26, 2004 09:44:17.950770000 Time delta from previous packet: 0.102519000 seconds Time since reference or first frame: 0.208440000 seconds Frame Number: 10 Packet Length: 106 bytes Capture Length: 106 bytes Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:80:c8:b9:b1:b8 Destination: 00:80:c8:b9:b1:b8 (00:80:c8:b9:b1:b8) Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Type: IP (0x0800) Frame check sequence: 0x2034e0d2 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.111 (165.227.249.111) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 88 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfbe3 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.111 (165.227.249.111) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 68 Checksum: 0x3541 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x2D8741AAC6008D5E Responder cookie: 0xD945232371168FF7 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x7C885476 Length: 60 Encrypted payload (32 bytes) 0000 00 80 c8 b9 b1 b8 00 0c 29 fc 0c 9f 08 00 45 00 ........).....E. 0010 00 58 00 00 40 00 40 11 fb e3 a5 e3 f9 7a a5 e3 .X..@.@......z.. 0020 f9 6f 01 f4 01 f4 00 44 35 41 2d 87 41 aa c6 00 .o.....D5A-.A... 0030 8d 5e d9 45 23 23 71 16 8f f7 08 10 20 01 7c 88 .^.E##q..... .|. 0040 54 76 00 00 00 3c e3 48 f8 a9 34 34 41 8a fd b8 Tv...<.H..44A... 0050 6d b3 db 9a 47 bb c9 a9 33 1c aa b0 31 0c 0c 8d m...G...3...1... 0060 3e 46 2b de 9e 8f 20 34 e0 d2 >F+... 4.. Frame 11 (106 bytes on wire, 106 bytes captured) Arrival Time: Mar 26, 2004 09:44:18.059875000 Time delta from previous packet: 0.109105000 seconds Time since reference or first frame: 0.317545000 seconds Frame Number: 11 Packet Length: 106 bytes Capture Length: 106 bytes Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:80:c8:b9:b1:b8 Destination: 00:80:c8:b9:b1:b8 (00:80:c8:b9:b1:b8) Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Type: IP (0x0800) Frame check sequence: 0x2034e0d2 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.111 (165.227.249.111) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 88 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfbe3 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.111 (165.227.249.111) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 68 Checksum: 0x3541 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x2D8741AAC6008D5E Responder cookie: 0xD945232371168FF7 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x7C885476 Length: 60 Encrypted payload (32 bytes) 0000 00 80 c8 b9 b1 b8 00 0c 29 fc 0c 9f 08 00 45 00 ........).....E. 0010 00 58 00 00 40 00 40 11 fb e3 a5 e3 f9 7a a5 e3 .X..@.@......z.. 0020 f9 6f 01 f4 01 f4 00 44 35 41 2d 87 41 aa c6 00 .o.....D5A-.A... 0030 8d 5e d9 45 23 23 71 16 8f f7 08 10 20 01 7c 88 .^.E##q..... .|. 0040 54 76 00 00 00 3c e3 48 f8 a9 34 34 41 8a fd b8 Tv...<.H..44A... 0050 6d b3 db 9a 47 bb c9 a9 33 1c aa b0 31 0c 0c 8d m...G...3...1... 0060 3e 46 2b de 9e 8f 20 34 e0 d2 >F+... 4.. Frame 12 (138 bytes on wire, 138 bytes captured) Arrival Time: Mar 26, 2004 09:44:18.150087000 Time delta from previous packet: 0.090212000 seconds Time since reference or first frame: 0.407757000 seconds Frame Number: 12 Packet Length: 138 bytes Capture Length: 138 bytes Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:50:fc:84:d2:ec Destination: 00:50:fc:84:d2:ec (00:50:fc:84:d2:ec) Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Type: IP (0x0800) Frame check sequence: 0xfcc9b576 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.111 (165.227.249.111) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x011c (284) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x7b86 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.111 (165.227.249.111) Encapsulating Security Payload SPI: 0x56bf67e1 Sequence: 1 Data (92 bytes) 0000 00 50 fc 84 d2 ec 00 0c 29 fc 0c 9f 08 00 45 00 .P......).....E. 0010 00 78 01 1c 00 00 ff 32 7b 86 a5 e3 f9 7a a5 e3 .x.....2{....z.. 0020 f9 6f 56 bf 67 e1 00 00 00 01 e3 8f 26 71 1d 58 .oV.g.......&q.X 0030 cf 64 bb 19 88 23 be 2b 97 26 97 d3 5f 14 b8 5f .d...#.+.&.._.._ 0040 c2 f7 04 1a e3 28 7f aa b5 43 da 92 c2 72 31 67 .....(...C...r1g 0050 50 bf 41 89 21 c4 45 14 4a e7 52 29 18 d0 91 36 P.A.!.E.J.R)...6 0060 15 f9 12 46 7b 85 cc 73 e9 ad 9d 45 a9 86 c9 de ...F{..s...E.... 0070 87 a0 8c fb f9 a1 38 73 7c 87 0a ec 84 f6 ef 3e ......8s|......> 0080 1a a9 7d 99 5e 9b fc c9 b5 76 ..}.^....v Frame 13 (138 bytes on wire, 138 bytes captured) Arrival Time: Mar 26, 2004 09:44:18.150303000 Time delta from previous packet: 0.000216000 seconds Time since reference or first frame: 0.407973000 seconds Frame Number: 13 Packet Length: 138 bytes Capture Length: 138 bytes Ethernet II, Src: 00:50:fc:84:d2:ec, Dst: 00:80:c8:b9:b1:b8 Destination: 00:80:c8:b9:b1:b8 (00:80:c8:b9:b1:b8) Source: 00:50:fc:84:d2:ec (00:50:fc:84:d2:ec) Type: IP (0x0800) Frame check sequence: 0xb3fef216 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.111 (165.227.249.111) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x011c (284) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 254 Protocol: ESP (0x32) Header checksum: 0x7c86 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.111 (165.227.249.111) Encapsulating Security Payload SPI: 0x56bf67e1 Sequence: 1 Data (92 bytes) 0000 00 80 c8 b9 b1 b8 00 50 fc 84 d2 ec 08 00 45 00 .......P......E. 0010 00 78 01 1c 00 00 fe 32 7c 86 a5 e3 f9 7a a5 e3 .x.....2|....z.. 0020 f9 6f 56 bf 67 e1 00 00 00 01 e3 8f 26 71 1d 58 .oV.g.......&q.X 0030 cf 64 bb 19 88 23 be 2b 97 26 97 d3 5f 14 b8 5f .d...#.+.&.._.._ 0040 c2 f7 04 1a e3 28 7f aa b5 43 da 92 c2 72 31 67 .....(...C...r1g 0050 50 bf 41 89 21 c4 45 14 4a e7 52 29 18 d0 91 36 P.A.!.E.J.R)...6 0060 15 f9 12 46 7b 85 cc 73 e9 ad 9d 45 a9 86 c9 de ...F{..s...E.... 0070 87 a0 8c fb f9 a1 38 73 7c 87 0a ec 84 f6 ef 3e ......8s|......> 0080 1a a9 7d 99 5e 9b b3 fe f2 16 ..}.^..... Frame 14 (138 bytes on wire, 138 bytes captured) Arrival Time: Mar 26, 2004 09:44:18.151183000 Time delta from previous packet: 0.000880000 seconds Time since reference or first frame: 0.408853000 seconds Frame Number: 14 Packet Length: 138 bytes Capture Length: 138 bytes Ethernet II, Src: 00:80:c8:b9:b1:b8, Dst: 00:0c:29:fc:0c:9f Destination: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Source: 00:80:c8:b9:b1:b8 (00:80:c8:b9:b1:b8) Type: IP (0x0800) Frame check sequence: 0x7ba74f89 (correct) Internet Protocol, Src Addr: 165.227.249.111 (165.227.249.111), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0000 (0) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8ba2 (correct) Source: 165.227.249.111 (165.227.249.111) Destination: 165.227.249.122 (165.227.249.122) Encapsulating Security Payload SPI: 0xa918fbbe Sequence: 1 Data (92 bytes) 0000 00 0c 29 fc 0c 9f 00 80 c8 b9 b1 b8 08 00 45 00 ..)...........E. 0010 00 78 00 00 00 00 f0 32 8b a2 a5 e3 f9 6f a5 e3 .x.....2.....o.. 0020 f9 7a a9 18 fb be 00 00 00 01 9b 18 5a 42 2c 6c .z..........ZB,l 0030 b9 ec 52 50 c4 30 2b f7 fb d9 d1 a4 f3 f2 4a b7 ..RP.0+.......J. 0040 58 5a 3a 6a 39 a1 d2 88 ea 43 ad 79 b4 19 af 5e XZ:j9....C.y...^ 0050 f9 6f 27 73 ca 92 af d5 b2 b5 3b d3 41 82 70 f2 .o's......;.A.p. 0060 b3 9e 75 0e 77 15 94 f1 a8 36 f6 fb b9 3b b7 08 ..u.w....6...;.. 0070 7c f1 12 f4 43 d5 58 c9 86 77 c9 38 5b ea 6a 10 |...C.X..w.8[.j. 0080 bc 2c b7 b3 b7 c6 7b a7 4f 89 .,....{.O. Frame 15 (138 bytes on wire, 138 bytes captured) Arrival Time: Mar 26, 2004 09:44:18.799534000 Time delta from previous packet: 0.648351000 seconds Time since reference or first frame: 1.057204000 seconds Frame Number: 15 Packet Length: 138 bytes Capture Length: 138 bytes Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:50:fc:84:d2:ec Destination: 00:50:fc:84:d2:ec (00:50:fc:84:d2:ec) Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Type: IP (0x0800) Frame check sequence: 0x9c506afc (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.111 (165.227.249.111) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x011d (285) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x7b85 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.111 (165.227.249.111) Encapsulating Security Payload SPI: 0x56bf67e1 Sequence: 2 Data (92 bytes) 0000 00 50 fc 84 d2 ec 00 0c 29 fc 0c 9f 08 00 45 00 .P......).....E. 0010 00 78 01 1d 00 00 ff 32 7b 85 a5 e3 f9 7a a5 e3 .x.....2{....z.. 0020 f9 6f 56 bf 67 e1 00 00 00 02 9d 45 a9 86 c9 de .oV.g......E.... 0030 87 a0 8c fb f9 a1 38 73 7c 87 31 7a b2 45 5a 7b ......8s|.1z.EZ{ 0040 3d fb 1f ff c0 ba a9 91 29 c4 e8 69 d1 0d 6b 5f =.......)..i..k_ 0050 43 bc 4b 1e 0d 0c d4 cc 3d a1 b9 c4 97 c4 b8 e6 C.K.....=....... 0060 d6 6b fe 12 53 4a e7 5d 45 2b 4c 3a 09 98 13 eb .k..SJ.]E+L:.... 0070 bc b2 f8 19 eb 92 59 ad 56 a1 78 77 62 ec 5c 61 ......Y.V.xwb.\a 0080 8c 51 5d bd 90 01 9c 50 6a fc .Q]....Pj. Frame 16 (138 bytes on wire, 138 bytes captured) Arrival Time: Mar 26, 2004 09:44:18.799723000 Time delta from previous packet: 0.000189000 seconds Time since reference or first frame: 1.057393000 seconds Frame Number: 16 Packet Length: 138 bytes Capture Length: 138 bytes Ethernet II, Src: 00:50:fc:84:d2:ec, Dst: 00:80:c8:b9:b1:b8 Destination: 00:80:c8:b9:b1:b8 (00:80:c8:b9:b1:b8) Source: 00:50:fc:84:d2:ec (00:50:fc:84:d2:ec) Type: IP (0x0800) Frame check sequence: 0xd3672d9c (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.111 (165.227.249.111) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x011d (285) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 254 Protocol: ESP (0x32) Header checksum: 0x7c85 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.111 (165.227.249.111) Encapsulating Security Payload SPI: 0x56bf67e1 Sequence: 2 Data (92 bytes) 0000 00 80 c8 b9 b1 b8 00 50 fc 84 d2 ec 08 00 45 00 .......P......E. 0010 00 78 01 1d 00 00 fe 32 7c 85 a5 e3 f9 7a a5 e3 .x.....2|....z.. 0020 f9 6f 56 bf 67 e1 00 00 00 02 9d 45 a9 86 c9 de .oV.g......E.... 0030 87 a0 8c fb f9 a1 38 73 7c 87 31 7a b2 45 5a 7b ......8s|.1z.EZ{ 0040 3d fb 1f ff c0 ba a9 91 29 c4 e8 69 d1 0d 6b 5f =.......)..i..k_ 0050 43 bc 4b 1e 0d 0c d4 cc 3d a1 b9 c4 97 c4 b8 e6 C.K.....=....... 0060 d6 6b fe 12 53 4a e7 5d 45 2b 4c 3a 09 98 13 eb .k..SJ.]E+L:.... 0070 bc b2 f8 19 eb 92 59 ad 56 a1 78 77 62 ec 5c 61 ......Y.V.xwb.\a 0080 8c 51 5d bd 90 01 d3 67 2d 9c .Q]....g-. Frame 17 (138 bytes on wire, 138 bytes captured) Arrival Time: Mar 26, 2004 09:44:18.800323000 Time delta from previous packet: 0.000600000 seconds Time since reference or first frame: 1.057993000 seconds Frame Number: 17 Packet Length: 138 bytes Capture Length: 138 bytes Ethernet II, Src: 00:80:c8:b9:b1:b8, Dst: 00:0c:29:fc:0c:9f Destination: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Source: 00:80:c8:b9:b1:b8 (00:80:c8:b9:b1:b8) Type: IP (0x0800) Frame check sequence: 0xd1bcda0d (correct) Internet Protocol, Src Addr: 165.227.249.111 (165.227.249.111), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0001 (1) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8ba1 (correct) Source: 165.227.249.111 (165.227.249.111) Destination: 165.227.249.122 (165.227.249.122) Encapsulating Security Payload SPI: 0xa918fbbe Sequence: 2 Data (92 bytes) 0000 00 0c 29 fc 0c 9f 00 80 c8 b9 b1 b8 08 00 45 00 ..)...........E. 0010 00 78 00 01 00 00 f0 32 8b a1 a5 e3 f9 6f a5 e3 .x.....2.....o.. 0020 f9 7a a9 18 fb be 00 00 00 02 fb e6 d3 36 9e f9 .z...........6.. 0030 2e af e2 ae b3 93 c8 ed ae 9d 86 91 5d cd de 58 ............]..X 0040 db 4c 66 7d e6 01 6b 67 cf ba ea 48 f9 52 b0 26 .Lf}..kg...H.R.& 0050 2a 1f e6 fe 76 40 9d 38 0b a8 59 29 23 6a 88 4a *...v@.8..Y)#j.J 0060 49 c1 4c 2d 42 1a bc 51 63 ae 50 5a 34 83 83 49 I.L-B..Qc.PZ4..I 0070 99 e8 e7 ad 0d 69 4e 26 99 a0 ae 1a b5 52 01 7a .....iN&.....R.z 0080 5a ab b4 77 ef 51 d1 bc da 0d Z..w.Q.... Frame 18 (138 bytes on wire, 138 bytes captured) Arrival Time: Mar 26, 2004 09:44:19.772194000 Time delta from previous packet: 0.971871000 seconds Time since reference or first frame: 2.029864000 seconds Frame Number: 18 Packet Length: 138 bytes Capture Length: 138 bytes Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:50:fc:84:d2:ec Destination: 00:50:fc:84:d2:ec (00:50:fc:84:d2:ec) Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Type: IP (0x0800) Frame check sequence: 0x22533122 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.111 (165.227.249.111) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x011e (286) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x7b84 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.111 (165.227.249.111) Encapsulating Security Payload SPI: 0x56bf67e1 Sequence: 3 Data (92 bytes) 0000 00 50 fc 84 d2 ec 00 0c 29 fc 0c 9f 08 00 45 00 .P......).....E. 0010 00 78 01 1e 00 00 ff 32 7b 84 a5 e3 f9 7a a5 e3 .x.....2{....z.. 0020 f9 6f 56 bf 67 e1 00 00 00 03 4c 3a 09 98 13 eb .oV.g.....L:.... 0030 bc b2 f8 19 eb 92 59 ad 56 a1 74 2e b1 55 51 03 ......Y.V.t..UQ. 0040 6d 06 da d4 47 0b e9 a2 68 f7 f9 a5 6b e7 69 4f m...G...h...k.iO 0050 ba 68 83 11 64 b0 5f 11 8d 6e 58 2e 38 c2 b3 75 .h..d._..nX.8..u 0060 0b a8 f9 f5 17 ee 10 a8 7e cd 7a a5 12 2c a2 be ........~.z..,.. 0070 08 9f 9e 2e 2f 6e 72 8b 15 19 a8 b1 b0 48 2b ce ..../nr......H+. 0080 fe 8e fc 54 e5 47 22 53 31 22 ...T.G"S1" Frame 19 (138 bytes on wire, 138 bytes captured) Arrival Time: Mar 26, 2004 09:44:19.772381000 Time delta from previous packet: 0.000187000 seconds Time since reference or first frame: 2.030051000 seconds Frame Number: 19 Packet Length: 138 bytes Capture Length: 138 bytes Ethernet II, Src: 00:50:fc:84:d2:ec, Dst: 00:80:c8:b9:b1:b8 Destination: 00:80:c8:b9:b1:b8 (00:80:c8:b9:b1:b8) Source: 00:50:fc:84:d2:ec (00:50:fc:84:d2:ec) Type: IP (0x0800) Frame check sequence: 0x6d647642 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.111 (165.227.249.111) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x011e (286) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 254 Protocol: ESP (0x32) Header checksum: 0x7c84 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.111 (165.227.249.111) Encapsulating Security Payload SPI: 0x56bf67e1 Sequence: 3 Data (92 bytes) 0000 00 80 c8 b9 b1 b8 00 50 fc 84 d2 ec 08 00 45 00 .......P......E. 0010 00 78 01 1e 00 00 fe 32 7c 84 a5 e3 f9 7a a5 e3 .x.....2|....z.. 0020 f9 6f 56 bf 67 e1 00 00 00 03 4c 3a 09 98 13 eb .oV.g.....L:.... 0030 bc b2 f8 19 eb 92 59 ad 56 a1 74 2e b1 55 51 03 ......Y.V.t..UQ. 0040 6d 06 da d4 47 0b e9 a2 68 f7 f9 a5 6b e7 69 4f m...G...h...k.iO 0050 ba 68 83 11 64 b0 5f 11 8d 6e 58 2e 38 c2 b3 75 .h..d._..nX.8..u 0060 0b a8 f9 f5 17 ee 10 a8 7e cd 7a a5 12 2c a2 be ........~.z..,.. 0070 08 9f 9e 2e 2f 6e 72 8b 15 19 a8 b1 b0 48 2b ce ..../nr......H+. 0080 fe 8e fc 54 e5 47 6d 64 76 42 ...T.GmdvB Frame 20 (138 bytes on wire, 138 bytes captured) Arrival Time: Mar 26, 2004 09:44:19.773001000 Time delta from previous packet: 0.000620000 seconds Time since reference or first frame: 2.030671000 seconds Frame Number: 20 Packet Length: 138 bytes Capture Length: 138 bytes Ethernet II, Src: 00:80:c8:b9:b1:b8, Dst: 00:0c:29:fc:0c:9f Destination: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Source: 00:80:c8:b9:b1:b8 (00:80:c8:b9:b1:b8) Type: IP (0x0800) Frame check sequence: 0x14333e84 (correct) Internet Protocol, Src Addr: 165.227.249.111 (165.227.249.111), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0002 (2) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8ba0 (correct) Source: 165.227.249.111 (165.227.249.111) Destination: 165.227.249.122 (165.227.249.122) Encapsulating Security Payload SPI: 0xa918fbbe Sequence: 3 Data (92 bytes) 0000 00 0c 29 fc 0c 9f 00 80 c8 b9 b1 b8 08 00 45 00 ..)...........E. 0010 00 78 00 02 00 00 f0 32 8b a0 a5 e3 f9 6f a5 e3 .x.....2.....o.. 0020 f9 7a a9 18 fb be 00 00 00 03 83 22 00 90 22 24 .z.........".."$ 0030 54 75 c1 61 a3 a4 f9 56 31 4c 39 07 82 01 b9 ed Tu.a...V1L9..... 0040 3d f0 a2 64 aa 45 ab 90 c1 e5 d7 4a 42 a7 3b 97 =..d.E.....JB.;. 0050 57 53 2e db 42 f0 56 16 eb 60 cc 68 e4 38 c9 68 WS..B.V..`.h.8.h 0060 8b e3 29 0d 61 9b 39 05 98 34 95 01 30 eb 43 a7 ..).a.9..4..0.C. 0070 d4 05 bd 1a 4e 2a e6 e6 5e 20 c4 f0 28 c1 04 fe ....N*..^ ..(... 0080 44 a0 d3 83 a8 ef 14 33 3e 84 D......3>. Frame 21 (138 bytes on wire, 138 bytes captured) Arrival Time: Mar 26, 2004 09:44:20.803314000 Time delta from previous packet: 1.030313000 seconds Time since reference or first frame: 3.060984000 seconds Frame Number: 21 Packet Length: 138 bytes Capture Length: 138 bytes Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:50:fc:84:d2:ec Destination: 00:50:fc:84:d2:ec (00:50:fc:84:d2:ec) Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Type: IP (0x0800) Frame check sequence: 0x781e16b0 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.111 (165.227.249.111) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x011f (287) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x7b83 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.111 (165.227.249.111) Encapsulating Security Payload SPI: 0x56bf67e1 Sequence: 4 Data (92 bytes) 0000 00 50 fc 84 d2 ec 00 0c 29 fc 0c 9f 08 00 45 00 .P......).....E. 0010 00 78 01 1f 00 00 ff 32 7b 83 a5 e3 f9 7a a5 e3 .x.....2{....z.. 0020 f9 6f 56 bf 67 e1 00 00 00 04 7a a5 12 2c a2 be .oV.g.....z..,.. 0030 08 9f 9e 2e 2f 6e 72 8b 15 19 e9 2e 52 9c 6e ac ..../nr.....R.n. 0040 29 75 b4 a7 c1 36 64 a4 c3 7d be d5 b3 fd ed 52 )u...6d..}.....R 0050 e4 f6 a8 b4 6c 69 b3 c9 c6 6a d7 b6 57 77 c6 d8 ....li...j..Ww.. 0060 a1 e0 be 54 1b ac 7b 35 54 e3 7e 6c 79 5b 7d 58 ...T..{5T.~ly[}X 0070 fa 8d 2a 99 7e 69 12 7e d4 43 5b 47 1a a8 5b b7 ..*.~i.~.C[G..[. 0080 6e 6b 7b 7a 8d 2e 78 1e 16 b0 nk{z..x... Frame 22 (138 bytes on wire, 138 bytes captured) Arrival Time: Mar 26, 2004 09:44:20.803453000 Time delta from previous packet: 0.000139000 seconds Time since reference or first frame: 3.061123000 seconds Frame Number: 22 Packet Length: 138 bytes Capture Length: 138 bytes Ethernet II, Src: 00:50:fc:84:d2:ec, Dst: 00:80:c8:b9:b1:b8 Destination: 00:80:c8:b9:b1:b8 (00:80:c8:b9:b1:b8) Source: 00:50:fc:84:d2:ec (00:50:fc:84:d2:ec) Type: IP (0x0800) Frame check sequence: 0x372951d0 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.111 (165.227.249.111) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x011f (287) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 254 Protocol: ESP (0x32) Header checksum: 0x7c83 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.111 (165.227.249.111) Encapsulating Security Payload SPI: 0x56bf67e1 Sequence: 4 Data (92 bytes) 0000 00 80 c8 b9 b1 b8 00 50 fc 84 d2 ec 08 00 45 00 .......P......E. 0010 00 78 01 1f 00 00 fe 32 7c 83 a5 e3 f9 7a a5 e3 .x.....2|....z.. 0020 f9 6f 56 bf 67 e1 00 00 00 04 7a a5 12 2c a2 be .oV.g.....z..,.. 0030 08 9f 9e 2e 2f 6e 72 8b 15 19 e9 2e 52 9c 6e ac ..../nr.....R.n. 0040 29 75 b4 a7 c1 36 64 a4 c3 7d be d5 b3 fd ed 52 )u...6d..}.....R 0050 e4 f6 a8 b4 6c 69 b3 c9 c6 6a d7 b6 57 77 c6 d8 ....li...j..Ww.. 0060 a1 e0 be 54 1b ac 7b 35 54 e3 7e 6c 79 5b 7d 58 ...T..{5T.~ly[}X 0070 fa 8d 2a 99 7e 69 12 7e d4 43 5b 47 1a a8 5b b7 ..*.~i.~.C[G..[. 0080 6e 6b 7b 7a 8d 2e 37 29 51 d0 nk{z..7)Q. Frame 23 (138 bytes on wire, 138 bytes captured) Arrival Time: Mar 26, 2004 09:44:20.804014000 Time delta from previous packet: 0.000561000 seconds Time since reference or first frame: 3.061684000 seconds Frame Number: 23 Packet Length: 138 bytes Capture Length: 138 bytes Ethernet II, Src: 00:80:c8:b9:b1:b8, Dst: 00:0c:29:fc:0c:9f Destination: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Source: 00:80:c8:b9:b1:b8 (00:80:c8:b9:b1:b8) Type: IP (0x0800) Frame check sequence: 0x15ecffe5 (correct) Internet Protocol, Src Addr: 165.227.249.111 (165.227.249.111), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0003 (3) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b9f (correct) Source: 165.227.249.111 (165.227.249.111) Destination: 165.227.249.122 (165.227.249.122) Encapsulating Security Payload SPI: 0xa918fbbe Sequence: 4 Data (92 bytes) 0000 00 0c 29 fc 0c 9f 00 80 c8 b9 b1 b8 08 00 45 00 ..)...........E. 0010 00 78 00 03 00 00 f0 32 8b 9f a5 e3 f9 6f a5 e3 .x.....2.....o.. 0020 f9 7a a9 18 fb be 00 00 00 04 87 84 7d c1 46 7f .z..........}.F. 0030 36 14 d3 56 77 1b 2a 98 7b f5 e0 1c 54 90 62 60 6..Vw.*.{...T.b` 0040 7a b7 70 ee f0 6c 95 ba cd 3b f1 ee 18 d7 cf a2 z.p..l...;...... 0050 93 d2 8a 2c a0 0b 04 71 7d 0e 86 e5 f4 20 c5 ff ...,...q}.... .. 0060 87 fb ab 55 c2 cf bd 52 10 40 14 b4 42 ba f9 47 ...U...R.@..B..G 0070 ae 10 8e 71 6f 5d 1d 19 b7 56 35 9b 0e a5 aa ce ...qo]...V5..... 0080 34 0c 20 f5 ab ce 15 ec ff e5 4. .......