Frame 1 (122 bytes on wire, 122 bytes captured) Arrival Time: Mar 26, 2004 09:53:59.678525000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 122 bytes Capture Length: 122 bytes Ethernet II, Src: 00:01:4e:00:1c:aa, Dst: 00:0c:29:fc:0c:9f Destination: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Source: 00:01:4e:00:1c:aa (00:01:4e:00:1c:aa) Type: IP (0x0800) Frame check sequence: 0x56cbdf21 (correct) Internet Protocol, Src Addr: 165.227.249.114 (165.227.249.114), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 104 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfbd0 (correct) Source: 165.227.249.114 (165.227.249.114) Destination: 165.227.249.122 (165.227.249.122) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 84 Checksum: 0x79b5 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xB6341273C024304C Responder cookie: 0xA0FA50AE1E87D6CF Next payload: Hash (8) Version: 1.0 Exchange type: Informational (5) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x9AFBE5BE Length: 76 Encrypted payload (48 bytes) 0000 00 0c 29 fc 0c 9f 00 01 4e 00 1c aa 08 00 45 00 ..).....N.....E. 0010 00 68 00 00 40 00 40 11 fb d0 a5 e3 f9 72 a5 e3 .h..@.@......r.. 0020 f9 7a 01 f4 01 f4 00 54 79 b5 b6 34 12 73 c0 24 .z.....Ty..4.s.$ 0030 30 4c a0 fa 50 ae 1e 87 d6 cf 08 10 05 01 9a fb 0L..P........... 0040 e5 be 00 00 00 4c 8f aa da bb 7a d7 4c 9d b8 d9 .....L....z.L... 0050 f0 13 0f f2 9d d0 42 bd 08 fa 42 53 72 cc 0b 2f ......B...BSr../ 0060 6b 7b 8e 42 d5 53 bc 52 de 40 2d 72 b4 3c 33 0a k{.B.S.R.@-r.<3. 0070 3e 14 43 1d 80 a2 56 cb df 21 >.C...V..! Frame 2 (138 bytes on wire, 138 bytes captured) Arrival Time: Mar 26, 2004 09:53:59.678601000 Time delta from previous packet: 0.000076000 seconds Time since reference or first frame: 0.000076000 seconds Frame Number: 2 Packet Length: 138 bytes Capture Length: 138 bytes Ethernet II, Src: 00:01:4e:00:1c:aa, Dst: 00:0c:29:fc:0c:9f Destination: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Source: 00:01:4e:00:1c:aa (00:01:4e:00:1c:aa) Type: IP (0x0800) Frame check sequence: 0x10073315 (correct) Internet Protocol, Src Addr: 165.227.249.114 (165.227.249.114), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfbc0 (correct) Source: 165.227.249.114 (165.227.249.114) Destination: 165.227.249.122 (165.227.249.122) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 100 Checksum: 0xc708 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xB6341273C024304C Responder cookie: 0xA0FA50AE1E87D6CF Next payload: Hash (8) Version: 1.0 Exchange type: Informational (5) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xF11F99D6 Length: 92 Encrypted payload (64 bytes) 0000 00 0c 29 fc 0c 9f 00 01 4e 00 1c aa 08 00 45 00 ..).....N.....E. 0010 00 78 00 00 40 00 40 11 fb c0 a5 e3 f9 72 a5 e3 .x..@.@......r.. 0020 f9 7a 01 f4 01 f4 00 64 c7 08 b6 34 12 73 c0 24 .z.....d...4.s.$ 0030 30 4c a0 fa 50 ae 1e 87 d6 cf 08 10 05 01 f1 1f 0L..P........... 0040 99 d6 00 00 00 5c f1 d3 74 1f 84 53 02 e9 4b 76 .....\..t..S..Kv 0050 a3 f1 01 da 0b b6 0b da 50 fb 14 d3 7b 3a 27 16 ........P...{:'. 0060 9f f7 ad 57 05 09 b2 84 ec 8a 66 89 13 64 bb c9 ...W......f..d.. 0070 02 40 4d c4 a7 c7 69 d6 68 19 72 33 8d f6 a8 bd .@M...i.h.r3.... 0080 de 1c 76 f2 d0 11 10 07 33 15 ..v.....3. Frame 3 (178 bytes on wire, 178 bytes captured) Arrival Time: Mar 26, 2004 09:54:19.368998000 Time delta from previous packet: 19.690397000 seconds Time since reference or first frame: 19.690473000 seconds Frame Number: 3 Packet Length: 178 bytes Capture Length: 178 bytes Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:01:4e:00:1c:aa Destination: 00:01:4e:00:1c:aa (00:01:4e:00:1c:aa) Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Type: IP (0x0800) Frame check sequence: 0x0495163e (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.114 (165.227.249.114) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 160 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb98 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.114 (165.227.249.114) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 140 Checksum: 0x2d5e (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xBFA89A326BE36F0A Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 132 Security Association payload Next payload: Vendor ID (13) Length: 60 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 48 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 40 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): AES-CBC (7) Key-Length (14): Key-Length (128) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: NONE (0) Length: 44 Vendor ID: Check Point Check Point Product: VPN-1 Version: NG with Application Intelligence R55 0000 00 01 4e 00 1c aa 00 0c 29 fc 0c 9f 08 00 45 00 ..N.....).....E. 0010 00 a0 00 00 40 00 40 11 fb 98 a5 e3 f9 7a a5 e3 ....@.@......z.. 0020 f9 72 01 f4 01 f4 00 8c 2d 5e bf a8 9a 32 6b e3 .r......-^...2k. 0030 6f 0a 00 00 00 00 00 00 00 00 01 10 02 00 00 00 o............... 0040 00 00 00 00 00 84 0d 00 00 3c 00 00 00 01 00 00 .........<...... 0050 00 01 00 00 00 30 01 01 00 01 00 00 00 28 01 01 .....0.......(.. 0060 00 00 80 01 00 07 80 0e 00 80 80 02 00 02 80 03 ................ 0070 00 01 80 04 00 02 80 0b 00 01 00 0c 00 04 00 00 ................ 0080 70 80 00 00 00 2c f4 ed 19 e0 c1 14 eb 51 6f aa p....,.......Qo. 0090 ac 0e e3 7d af 28 07 b4 38 1f 00 00 00 01 00 00 ...}.(..8....... 00a0 13 8d 00 00 00 00 00 00 00 00 18 80 00 00 04 95 ................ 00b0 16 3e .> Frame 4 (134 bytes on wire, 134 bytes captured) Arrival Time: Mar 26, 2004 09:54:19.372173000 Time delta from previous packet: 0.003175000 seconds Time since reference or first frame: 19.693648000 seconds Frame Number: 4 Packet Length: 134 bytes Capture Length: 134 bytes Ethernet II, Src: 00:01:4e:00:1c:aa, Dst: 00:0c:29:fc:0c:9f Destination: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Source: 00:01:4e:00:1c:aa (00:01:4e:00:1c:aa) Type: IP (0x0800) Frame check sequence: 0xc3cab459 (correct) Internet Protocol, Src Addr: 165.227.249.114 (165.227.249.114), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 116 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfbc4 (correct) Source: 165.227.249.114 (165.227.249.114) Destination: 165.227.249.122 (165.227.249.122) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 96 Checksum: 0x6b9a (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xBFA89A326BE36F0A Responder cookie: 0x39CBBC4FF886B647 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 88 Security Association payload Next payload: NONE (0) Length: 60 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 48 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 40 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): AES-CBC (7) Key-Length (14): Key-Length (128) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) 0000 00 0c 29 fc 0c 9f 00 01 4e 00 1c aa 08 00 45 00 ..).....N.....E. 0010 00 74 00 00 40 00 40 11 fb c4 a5 e3 f9 72 a5 e3 .t..@.@......r.. 0020 f9 7a 01 f4 01 f4 00 60 6b 9a bf a8 9a 32 6b e3 .z.....`k....2k. 0030 6f 0a 39 cb bc 4f f8 86 b6 47 01 10 02 00 00 00 o.9..O...G...... 0040 00 00 00 00 00 58 00 00 00 3c 00 00 00 01 00 00 .....X...<...... 0050 00 01 00 00 00 30 01 01 00 01 00 00 00 28 01 01 .....0.......(.. 0060 00 00 80 01 00 07 80 0e 00 80 80 02 00 02 80 03 ................ 0070 00 01 80 04 00 02 80 0b 00 01 00 0c 00 04 00 00 ................ 0080 70 80 c3 ca b4 59 p....Y Frame 5 (230 bytes on wire, 230 bytes captured) Arrival Time: Mar 26, 2004 09:54:19.397100000 Time delta from previous packet: 0.024927000 seconds Time since reference or first frame: 19.718575000 seconds Frame Number: 5 Packet Length: 230 bytes Capture Length: 230 bytes Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:01:4e:00:1c:aa Destination: 00:01:4e:00:1c:aa (00:01:4e:00:1c:aa) Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Type: IP (0x0800) Frame check sequence: 0x09f32bca (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.114 (165.227.249.114) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 212 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb64 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.114 (165.227.249.114) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 192 Checksum: 0x7d09 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xBFA89A326BE36F0A Responder cookie: 0x39CBBC4FF886B647 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 184 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 24 Nonce Data 0000 00 01 4e 00 1c aa 00 0c 29 fc 0c 9f 08 00 45 00 ..N.....).....E. 0010 00 d4 00 00 40 00 40 11 fb 64 a5 e3 f9 7a a5 e3 ....@.@..d...z.. 0020 f9 72 01 f4 01 f4 00 c0 7d 09 bf a8 9a 32 6b e3 .r......}....2k. 0030 6f 0a 39 cb bc 4f f8 86 b6 47 04 10 02 00 00 00 o.9..O...G...... 0040 00 00 00 00 00 b8 0a 00 00 84 d6 a9 fe a1 60 48 ..............`H 0050 60 9b 21 f8 51 fa 3e 7b 03 09 cc 7a 77 be 2f 4f `.!.Q.>{...zw./O 0060 12 ff c1 bc 96 29 d6 84 e4 74 63 0c 86 a3 09 d4 .....)...tc..... 0070 60 bb 96 50 b9 3f d0 be ca 5c 64 77 09 b4 5b 50 `..P.?...\dw..[P 0080 73 82 aa a7 f0 1b ad f5 ef 51 bf 55 67 6d 46 88 s........Q.UgmF. 0090 63 ee e1 7b f1 5e dd 43 d4 a8 fd 3a 2d eb 7b b1 c..{.^.C...:-.{. 00a0 a2 71 ec 1e a0 1c ce be 72 eb 39 66 93 5c 69 f6 .q......r.9f.\i. 00b0 ab 14 80 19 d7 54 c9 f5 bc 20 46 ac 42 57 35 0f .....T... F.BW5. 00c0 bb f1 86 5a c7 0f 60 35 36 c0 00 00 00 18 8a 10 ...Z..`56....... 00d0 2a 63 66 d6 dd 79 4d 58 f6 f6 7b 25 90 3a 9e 8a *cf..yMX..{%.:.. 00e0 48 c9 09 f3 2b ca H...+. Frame 6 (218 bytes on wire, 218 bytes captured) Arrival Time: Mar 26, 2004 09:54:19.538143000 Time delta from previous packet: 0.141043000 seconds Time since reference or first frame: 19.859618000 seconds Frame Number: 6 Packet Length: 218 bytes Capture Length: 218 bytes Ethernet II, Src: 00:01:4e:00:1c:aa, Dst: 00:0c:29:fc:0c:9f Destination: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Source: 00:01:4e:00:1c:aa (00:01:4e:00:1c:aa) Type: IP (0x0800) Frame check sequence: 0x3a6776d0 (correct) Internet Protocol, Src Addr: 165.227.249.114 (165.227.249.114), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 200 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb70 (correct) Source: 165.227.249.114 (165.227.249.114) Destination: 165.227.249.122 (165.227.249.122) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 180 Checksum: 0x3868 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xBFA89A326BE36F0A Responder cookie: 0x39CBBC4FF886B647 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 172 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 12 Nonce Data 0000 00 0c 29 fc 0c 9f 00 01 4e 00 1c aa 08 00 45 00 ..).....N.....E. 0010 00 c8 00 00 40 00 40 11 fb 70 a5 e3 f9 72 a5 e3 ....@.@..p...r.. 0020 f9 7a 01 f4 01 f4 00 b4 38 68 bf a8 9a 32 6b e3 .z......8h...2k. 0030 6f 0a 39 cb bc 4f f8 86 b6 47 04 10 02 00 00 00 o.9..O...G...... 0040 00 00 00 00 00 ac 0a 00 00 84 02 d4 24 93 f1 04 ............$... 0050 0e 60 6a a3 66 92 a7 a7 ff 9d 7f 95 e0 9f 1d e6 .`j.f........... 0060 78 1b 18 14 ea f9 c8 6d 57 bb 4f 4b dc db 49 71 x......mW.OK..Iq 0070 0c ab fe b3 49 10 36 1a ea 44 39 aa 18 e7 ed 60 ....I.6..D9....` 0080 52 72 2f cb 9d 11 d8 de 5f 89 6e 27 b4 a9 fd 6c Rr/....._.n'...l 0090 49 e3 bb 9c 3c 7f ac 35 d0 77 9c bc 98 45 b8 c6 I...<..5.w...E.. 00a0 d2 8b 20 58 7f 35 9d 05 af 68 fa d2 2a a7 72 bd .. X.5...h..*.r. 00b0 ea a7 93 69 fe e5 7a f3 45 cb 64 81 cb be 92 45 ...i..z.E.d....E 00c0 83 36 fd a1 be 07 62 64 4d fb 00 00 00 0c f7 be .6....bdM....... 00d0 9a 28 8d f9 2a ec 3a 67 76 d0 .(..*.:gv. Frame 7 (122 bytes on wire, 122 bytes captured) Arrival Time: Mar 26, 2004 09:54:19.544980000 Time delta from previous packet: 0.006837000 seconds Time since reference or first frame: 19.866455000 seconds Frame Number: 7 Packet Length: 122 bytes Capture Length: 122 bytes Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:01:4e:00:1c:aa Destination: 00:01:4e:00:1c:aa (00:01:4e:00:1c:aa) Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Type: IP (0x0800) Frame check sequence: 0x75cae5c8 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.114 (165.227.249.114) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 104 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfbd0 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.114 (165.227.249.114) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 84 Checksum: 0x0245 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xBFA89A326BE36F0A Responder cookie: 0x39CBBC4FF886B647 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 76 Encrypted payload (48 bytes) 0000 00 01 4e 00 1c aa 00 0c 29 fc 0c 9f 08 00 45 00 ..N.....).....E. 0010 00 68 00 00 40 00 40 11 fb d0 a5 e3 f9 7a a5 e3 .h..@.@......z.. 0020 f9 72 01 f4 01 f4 00 54 02 45 bf a8 9a 32 6b e3 .r.....T.E...2k. 0030 6f 0a 39 cb bc 4f f8 86 b6 47 05 10 02 01 00 00 o.9..O...G...... 0040 00 00 00 00 00 4c 0b 24 9e 99 f8 9f 59 bf c9 4b .....L.$....Y..K 0050 1c 95 97 8c 0a 84 0e e5 a8 af 81 fc 54 92 1e 00 ............T... 0060 16 f9 7f 2e 2f d2 fa c5 81 c3 c1 08 10 cb 23 ae ..../.........#. 0070 6e 89 11 af f0 e4 75 ca e5 c8 n.....u... Frame 8 (122 bytes on wire, 122 bytes captured) Arrival Time: Mar 26, 2004 09:54:19.716672000 Time delta from previous packet: 0.171692000 seconds Time since reference or first frame: 20.038147000 seconds Frame Number: 8 Packet Length: 122 bytes Capture Length: 122 bytes Ethernet II, Src: 00:01:4e:00:1c:aa, Dst: 00:0c:29:fc:0c:9f Destination: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Source: 00:01:4e:00:1c:aa (00:01:4e:00:1c:aa) Type: IP (0x0800) Frame check sequence: 0x3969d16e (correct) Internet Protocol, Src Addr: 165.227.249.114 (165.227.249.114), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 104 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfbd0 (correct) Source: 165.227.249.114 (165.227.249.114) Destination: 165.227.249.122 (165.227.249.122) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 84 Checksum: 0x93d6 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xBFA89A326BE36F0A Responder cookie: 0x39CBBC4FF886B647 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 76 Encrypted payload (48 bytes) 0000 00 0c 29 fc 0c 9f 00 01 4e 00 1c aa 08 00 45 00 ..).....N.....E. 0010 00 68 00 00 40 00 40 11 fb d0 a5 e3 f9 72 a5 e3 .h..@.@......r.. 0020 f9 7a 01 f4 01 f4 00 54 93 d6 bf a8 9a 32 6b e3 .z.....T.....2k. 0030 6f 0a 39 cb bc 4f f8 86 b6 47 05 10 02 01 00 00 o.9..O...G...... 0040 00 00 00 00 00 4c a8 bf 0b 4b 7d 0a 3f 07 49 c1 .....L...K}.?.I. 0050 ba 38 9e 38 6d e1 ea a9 0f e5 65 6c 43 1e 1a 51 .8.8m.....elC..Q 0060 ea 5f 7d 07 f9 d3 8e 5e f6 b3 74 b6 b0 ed a3 56 ._}....^..t....V 0070 58 d0 f6 f1 0b 1d 39 69 d1 6e X.....9i.n Frame 9 (362 bytes on wire, 362 bytes captured) Arrival Time: Mar 26, 2004 09:54:19.723083000 Time delta from previous packet: 0.006411000 seconds Time since reference or first frame: 20.044558000 seconds Frame Number: 9 Packet Length: 362 bytes Capture Length: 362 bytes Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:01:4e:00:1c:aa Destination: 00:01:4e:00:1c:aa (00:01:4e:00:1c:aa) Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Type: IP (0x0800) Frame check sequence: 0x9ee0e6ab (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.114 (165.227.249.114) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 344 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfae0 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.114 (165.227.249.114) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 324 Checksum: 0x2a1e (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xBFA89A326BE36F0A Responder cookie: 0x39CBBC4FF886B647 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xBA883199 Length: 316 Encrypted payload (288 bytes) 0000 00 01 4e 00 1c aa 00 0c 29 fc 0c 9f 08 00 45 00 ..N.....).....E. 0010 01 58 00 00 40 00 40 11 fa e0 a5 e3 f9 7a a5 e3 .X..@.@......z.. 0020 f9 72 01 f4 01 f4 01 44 2a 1e bf a8 9a 32 6b e3 .r.....D*....2k. 0030 6f 0a 39 cb bc 4f f8 86 b6 47 08 10 20 01 ba 88 o.9..O...G.. ... 0040 31 99 00 00 01 3c d3 80 28 6f 28 99 a4 8a d0 4b 1....<..(o(....K 0050 3f dd 86 24 61 f2 ee f5 b5 24 83 71 0c 48 04 57 ?..$a....$.q.H.W 0060 b7 eb d5 2a d0 0a c6 e1 5b 7a e0 59 be 95 49 31 ...*....[z.Y..I1 0070 27 f0 f0 7e 74 c5 1b 3f 81 cd 4d 16 83 48 a4 a7 '..~t..?..M..H.. 0080 9e a2 e9 5c 2a cc c5 8d 0f 17 b1 11 d7 38 ba 6c ...\*........8.l 0090 c6 7c e7 df 86 8e 35 55 39 ac 5a 76 0b 78 29 01 .|....5U9.Zv.x). 00a0 a7 f8 dd a9 fc 32 d0 ca 72 ff 73 4a 76 52 bf 0e .....2..r.sJvR.. 00b0 75 91 0c 26 fe c9 31 8e f8 d0 75 2f fe 40 3c cc u..&..1...u/.@<. 00c0 68 6a af 33 15 75 25 aa ee 5e 08 a2 9c 74 9f 3e hj.3.u%..^...t.> 00d0 06 4a f1 28 68 d3 8e 94 a6 ea e0 c6 e2 93 35 72 .J.(h.........5r 00e0 92 f5 0e db 86 ab e2 de d4 9a a7 63 78 a4 22 be ...........cx.". 00f0 85 67 f6 76 0d 6f 81 99 e0 95 4b bd 42 ce ca e3 .g.v.o....K.B... 0100 2e 7e 17 1a 4a 03 9a ba 73 ce d9 ab 0e 84 49 be .~..J...s.....I. 0110 f5 2f 24 39 4c 1c 35 c4 3b 9c 1c 90 c9 d7 8c da ./$9L.5.;....... 0120 06 92 81 2c 66 f1 5e 73 57 c7 08 8f b5 ea 1f c0 ...,f.^sW....... 0130 d4 58 38 5b 05 8f 98 63 30 61 bb 10 7d 49 de 9f .X8[...c0a..}I.. 0140 18 f1 b6 ef 6c d1 3e 4d fc 6e a2 3d 59 1d 3d 07 ....l.>M.n.=Y.=. 0150 51 9d 62 37 05 52 0b 82 71 ec f9 90 3b 30 8d c3 Q.b7.R..q...;0.. 0160 7a a7 8f 1f 1c f8 9e e0 e6 ab z......... Frame 10 (346 bytes on wire, 346 bytes captured) Arrival Time: Mar 26, 2004 09:54:19.870843000 Time delta from previous packet: 0.147760000 seconds Time since reference or first frame: 20.192318000 seconds Frame Number: 10 Packet Length: 346 bytes Capture Length: 346 bytes Ethernet II, Src: 00:01:4e:00:1c:aa, Dst: 00:0c:29:fc:0c:9f Destination: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Source: 00:01:4e:00:1c:aa (00:01:4e:00:1c:aa) Type: IP (0x0800) Frame check sequence: 0xc53e4e42 (correct) Internet Protocol, Src Addr: 165.227.249.114 (165.227.249.114), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 328 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfaf0 (correct) Source: 165.227.249.114 (165.227.249.114) Destination: 165.227.249.122 (165.227.249.122) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 308 Checksum: 0x6f1d (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xBFA89A326BE36F0A Responder cookie: 0x39CBBC4FF886B647 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xBA883199 Length: 300 Encrypted payload (272 bytes) 0000 00 0c 29 fc 0c 9f 00 01 4e 00 1c aa 08 00 45 00 ..).....N.....E. 0010 01 48 00 00 40 00 40 11 fa f0 a5 e3 f9 72 a5 e3 .H..@.@......r.. 0020 f9 7a 01 f4 01 f4 01 34 6f 1d bf a8 9a 32 6b e3 .z.....4o....2k. 0030 6f 0a 39 cb bc 4f f8 86 b6 47 08 10 20 01 ba 88 o.9..O...G.. ... 0040 31 99 00 00 01 2c 47 94 f6 61 33 69 a7 98 c3 31 1....,G..a3i...1 0050 fe 18 dd fa df a1 cf 20 54 06 b7 81 d2 77 5a 59 ....... T....wZY 0060 18 22 ab 65 a2 ac 5d 8f 4e 2c a6 f3 53 97 df 25 .".e..].N,..S..% 0070 8e c4 08 93 9f f2 2f 33 fe 7b f6 f0 a2 9b 09 37 ....../3.{.....7 0080 94 95 56 8d df f7 13 6d 9a fe cc a6 cd c8 73 84 ..V....m......s. 0090 ee 9d 38 c5 97 33 6d 1d ad 9e ac b2 47 af 29 74 ..8..3m.....G.)t 00a0 f0 44 87 7f 37 8d ba dd 7d 4f e2 80 72 4f 99 1f .D..7...}O..rO.. 00b0 97 94 38 94 c8 47 8f bc c3 b8 15 84 26 2f b8 e7 ..8..G......&/.. 00c0 82 a5 26 08 8a 95 d5 6c e0 b7 75 12 d1 06 b2 eb ..&....l..u..... 00d0 d4 d1 7b e9 77 87 1f d2 05 20 d6 60 d0 1d b0 5c ..{.w.... .`...\ 00e0 d5 f1 1e bf b6 e8 1f 8b 46 dc 89 0c 44 91 96 e8 ........F...D... 00f0 54 9a ae db f0 8e fe 66 76 dd 68 26 09 47 7d 0b T......fv.h&.G}. 0100 90 17 8f a3 76 23 74 f4 73 60 7d 18 b0 b3 0e e9 ....v#t.s`}..... 0110 58 15 9e 61 9d 72 8b 76 ae 1d b4 9d 3d 27 b8 2c X..a.r.v....='., 0120 7c 5f 66 a4 b8 c3 c8 35 c5 87 a3 43 c9 f4 fe 5f |_f....5...C..._ 0130 b6 1c de 0c 26 6f 21 56 ed bf d3 6b 19 b5 4a 20 ....&o!V...k..J 0140 e2 36 7d 5e 66 93 52 5b 15 30 58 e5 2a 0c 84 01 .6}^f.R[.0X.*... 0150 68 d2 47 31 f3 97 c5 3e 4e 42 h.G1...>NB Frame 11 (106 bytes on wire, 106 bytes captured) Arrival Time: Mar 26, 2004 09:54:19.877401000 Time delta from previous packet: 0.006558000 seconds Time since reference or first frame: 20.198876000 seconds Frame Number: 11 Packet Length: 106 bytes Capture Length: 106 bytes Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:01:4e:00:1c:aa Destination: 00:01:4e:00:1c:aa (00:01:4e:00:1c:aa) Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Type: IP (0x0800) Frame check sequence: 0xac778960 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.114 (165.227.249.114) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 88 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfbe0 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.114 (165.227.249.114) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 68 Checksum: 0xeda5 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xBFA89A326BE36F0A Responder cookie: 0x39CBBC4FF886B647 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xBA883199 Length: 60 Encrypted payload (32 bytes) 0000 00 01 4e 00 1c aa 00 0c 29 fc 0c 9f 08 00 45 00 ..N.....).....E. 0010 00 58 00 00 40 00 40 11 fb e0 a5 e3 f9 7a a5 e3 .X..@.@......z.. 0020 f9 72 01 f4 01 f4 00 44 ed a5 bf a8 9a 32 6b e3 .r.....D.....2k. 0030 6f 0a 39 cb bc 4f f8 86 b6 47 08 10 20 01 ba 88 o.9..O...G.. ... 0040 31 99 00 00 00 3c 26 59 3d 17 78 8c d1 9e c0 4d 1....<&Y=.x....M 0050 3b d9 c1 79 03 26 02 ad 48 26 6f 34 e8 ba 44 b3 ;..y.&..H&o4..D. 0060 8a 1f aa 9d 56 6c ac 77 89 60 ....Vl.w.` Frame 12 (106 bytes on wire, 106 bytes captured) Arrival Time: Mar 26, 2004 09:54:19.978539000 Time delta from previous packet: 0.101138000 seconds Time since reference or first frame: 20.300014000 seconds Frame Number: 12 Packet Length: 106 bytes Capture Length: 106 bytes Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:01:4e:00:1c:aa Destination: 00:01:4e:00:1c:aa (00:01:4e:00:1c:aa) Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Type: IP (0x0800) Frame check sequence: 0xac778960 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.114 (165.227.249.114) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 88 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfbe0 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.114 (165.227.249.114) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 68 Checksum: 0xeda5 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xBFA89A326BE36F0A Responder cookie: 0x39CBBC4FF886B647 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xBA883199 Length: 60 Encrypted payload (32 bytes) 0000 00 01 4e 00 1c aa 00 0c 29 fc 0c 9f 08 00 45 00 ..N.....).....E. 0010 00 58 00 00 40 00 40 11 fb e0 a5 e3 f9 7a a5 e3 .X..@.@......z.. 0020 f9 72 01 f4 01 f4 00 44 ed a5 bf a8 9a 32 6b e3 .r.....D.....2k. 0030 6f 0a 39 cb bc 4f f8 86 b6 47 08 10 20 01 ba 88 o.9..O...G.. ... 0040 31 99 00 00 00 3c 26 59 3d 17 78 8c d1 9e c0 4d 1....<&Y=.x....M 0050 3b d9 c1 79 03 26 02 ad 48 26 6f 34 e8 ba 44 b3 ;..y.&..H&o4..D. 0060 8a 1f aa 9d 56 6c ac 77 89 60 ....Vl.w.` Frame 13 (106 bytes on wire, 106 bytes captured) Arrival Time: Mar 26, 2004 09:54:20.087848000 Time delta from previous packet: 0.109309000 seconds Time since reference or first frame: 20.409323000 seconds Frame Number: 13 Packet Length: 106 bytes Capture Length: 106 bytes Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:01:4e:00:1c:aa Destination: 00:01:4e:00:1c:aa (00:01:4e:00:1c:aa) Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Type: IP (0x0800) Frame check sequence: 0xac778960 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.114 (165.227.249.114) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 88 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfbe0 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.114 (165.227.249.114) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 68 Checksum: 0xeda5 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xBFA89A326BE36F0A Responder cookie: 0x39CBBC4FF886B647 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xBA883199 Length: 60 Encrypted payload (32 bytes) 0000 00 01 4e 00 1c aa 00 0c 29 fc 0c 9f 08 00 45 00 ..N.....).....E. 0010 00 58 00 00 40 00 40 11 fb e0 a5 e3 f9 7a a5 e3 .X..@.@......z.. 0020 f9 72 01 f4 01 f4 00 44 ed a5 bf a8 9a 32 6b e3 .r.....D.....2k. 0030 6f 0a 39 cb bc 4f f8 86 b6 47 08 10 20 01 ba 88 o.9..O...G.. ... 0040 31 99 00 00 00 3c 26 59 3d 17 78 8c d1 9e c0 4d 1....<&Y=.x....M 0050 3b d9 c1 79 03 26 02 ad 48 26 6f 34 e8 ba 44 b3 ;..y.&..H&o4..D. 0060 8a 1f aa 9d 56 6c ac 77 89 60 ....Vl.w.` Frame 14 (138 bytes on wire, 138 bytes captured) Arrival Time: Mar 26, 2004 09:54:20.181568000 Time delta from previous packet: 0.093720000 seconds Time since reference or first frame: 20.503043000 seconds Frame Number: 14 Packet Length: 138 bytes Capture Length: 138 bytes Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:50:fc:84:d2:ec Destination: 00:50:fc:84:d2:ec (00:50:fc:84:d2:ec) Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Type: IP (0x0800) Frame check sequence: 0x1302f6b9 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.114 (165.227.249.114) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0123 (291) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x7b7c (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.114 (165.227.249.114) Encapsulating Security Payload SPI: 0x640971f7 Sequence: 1 Data (92 bytes) 0000 00 50 fc 84 d2 ec 00 0c 29 fc 0c 9f 08 00 45 00 .P......).....E. 0010 00 78 01 23 00 00 ff 32 7b 7c a5 e3 f9 7a a5 e3 .x.#...2{|...z.. 0020 f9 72 64 09 71 f7 00 00 00 01 8a 55 01 64 07 e8 .rd.q......U.d.. 0030 85 4c 92 33 a8 06 90 c7 da 83 48 ac b7 88 47 f7 .L.3......H...G. 0040 02 46 d8 69 26 37 ea e3 de 26 f7 17 cd fb 06 28 .F.i&7...&.....( 0050 7a b1 67 18 b1 47 15 57 57 6e 71 92 c9 72 d6 be z.g..G.WWnq..r.. 0060 e1 f7 43 51 51 2b 2f ae 68 9f 57 6b 65 73 ca b3 ..CQQ+/.h.Wkes.. 0070 48 54 94 b6 58 57 db c0 5c e0 1d 7f 8c c7 22 40 HT..XW..\....."@ 0080 19 e4 2f c0 08 63 13 02 f6 b9 ../..c.... Frame 15 (138 bytes on wire, 138 bytes captured) Arrival Time: Mar 26, 2004 09:54:20.181830000 Time delta from previous packet: 0.000262000 seconds Time since reference or first frame: 20.503305000 seconds Frame Number: 15 Packet Length: 138 bytes Capture Length: 138 bytes Ethernet II, Src: 00:50:fc:84:d2:ec, Dst: 00:01:4e:00:1c:aa Destination: 00:01:4e:00:1c:aa (00:01:4e:00:1c:aa) Source: 00:50:fc:84:d2:ec (00:50:fc:84:d2:ec) Type: IP (0x0800) Frame check sequence: 0x698c29ff (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.114 (165.227.249.114) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0123 (291) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 254 Protocol: ESP (0x32) Header checksum: 0x7c7c (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.114 (165.227.249.114) Encapsulating Security Payload SPI: 0x640971f7 Sequence: 1 Data (92 bytes) 0000 00 01 4e 00 1c aa 00 50 fc 84 d2 ec 08 00 45 00 ..N....P......E. 0010 00 78 01 23 00 00 fe 32 7c 7c a5 e3 f9 7a a5 e3 .x.#...2||...z.. 0020 f9 72 64 09 71 f7 00 00 00 01 8a 55 01 64 07 e8 .rd.q......U.d.. 0030 85 4c 92 33 a8 06 90 c7 da 83 48 ac b7 88 47 f7 .L.3......H...G. 0040 02 46 d8 69 26 37 ea e3 de 26 f7 17 cd fb 06 28 .F.i&7...&.....( 0050 7a b1 67 18 b1 47 15 57 57 6e 71 92 c9 72 d6 be z.g..G.WWnq..r.. 0060 e1 f7 43 51 51 2b 2f ae 68 9f 57 6b 65 73 ca b3 ..CQQ+/.h.Wkes.. 0070 48 54 94 b6 58 57 db c0 5c e0 1d 7f 8c c7 22 40 HT..XW..\....."@ 0080 19 e4 2f c0 08 63 69 8c 29 ff ../..ci.). Frame 16 (138 bytes on wire, 138 bytes captured) Arrival Time: Mar 26, 2004 09:54:20.184575000 Time delta from previous packet: 0.002745000 seconds Time since reference or first frame: 20.506050000 seconds Frame Number: 16 Packet Length: 138 bytes Capture Length: 138 bytes Ethernet II, Src: 00:01:4e:00:1c:aa, Dst: 00:0c:29:fc:0c:9f Destination: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Source: 00:01:4e:00:1c:aa (00:01:4e:00:1c:aa) Type: IP (0x0800) Frame check sequence: 0x380ba12b (correct) Internet Protocol, Src Addr: 165.227.249.114 (165.227.249.114), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0003 (3) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 30 Protocol: ESP (0x32) Header checksum: 0x5d9d (correct) Source: 165.227.249.114 (165.227.249.114) Destination: 165.227.249.122 (165.227.249.122) Encapsulating Security Payload SPI: 0xb2084bdc Sequence: 1 Data (92 bytes) 0000 00 0c 29 fc 0c 9f 00 01 4e 00 1c aa 08 00 45 00 ..).....N.....E. 0010 00 78 00 03 00 00 1e 32 5d 9d a5 e3 f9 72 a5 e3 .x.....2]....r.. 0020 f9 7a b2 08 4b dc 00 00 00 01 3d 16 5a 3d 74 4a .z..K.....=.Z=tJ 0030 39 22 00 00 00 00 00 00 00 00 e7 8d ab 09 90 a4 9".............. 0040 a3 82 65 70 0f 70 7e 1f 3a 84 0d 35 de fa 88 e8 ..ep.p~.:..5.... 0050 7d 87 d1 a0 31 94 ff aa b3 80 7b af 26 5c 2b 9b }...1.....{.&\+. 0060 5b 74 38 2a fe 9a b3 7c 77 82 e6 c0 a9 3f 81 a3 [t8*...|w....?.. 0070 5d 63 68 54 60 f9 2a a8 ad a8 47 92 3e ec a1 52 ]chT`.*...G.>..R 0080 d7 aa 42 f3 de 42 38 0b a1 2b ..B..B8..+ Frame 17 (138 bytes on wire, 138 bytes captured) Arrival Time: Mar 26, 2004 09:54:20.413439000 Time delta from previous packet: 0.228864000 seconds Time since reference or first frame: 20.734914000 seconds Frame Number: 17 Packet Length: 138 bytes Capture Length: 138 bytes Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:50:fc:84:d2:ec Destination: 00:50:fc:84:d2:ec (00:50:fc:84:d2:ec) Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Type: IP (0x0800) Frame check sequence: 0xa29e7ce6 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.114 (165.227.249.114) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0124 (292) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x7b7b (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.114 (165.227.249.114) Encapsulating Security Payload SPI: 0x640971f7 Sequence: 2 Data (92 bytes) 0000 00 50 fc 84 d2 ec 00 0c 29 fc 0c 9f 08 00 45 00 .P......).....E. 0010 00 78 01 24 00 00 ff 32 7b 7b a5 e3 f9 7a a5 e3 .x.$...2{{...z.. 0020 f9 72 64 09 71 f7 00 00 00 02 57 6b 65 73 ca b3 .rd.q.....Wkes.. 0030 48 54 94 b6 58 57 db c0 5c e0 fe ef 6d 10 e5 fd HT..XW..\...m... 0040 32 a1 c4 5a 0a 97 26 88 8c ef 90 5f a6 d7 1c 90 2..Z..&...._.... 0050 9d 3d be cc 5f 20 53 fa b9 d6 6f bf 21 db b9 a8 .=.._ S...o.!... 0060 a5 ac 7f 50 27 68 93 a3 27 26 3f 4a b3 36 98 4d ...P'h..'&?J.6.M 0070 ed 27 15 68 bc 75 21 10 94 ca 1e a8 0c 7a d3 26 .'.h.u!......z.& 0080 7d cd d0 e5 8d 90 a2 9e 7c e6 }.......|. Frame 18 (138 bytes on wire, 138 bytes captured) Arrival Time: Mar 26, 2004 09:54:20.413624000 Time delta from previous packet: 0.000185000 seconds Time since reference or first frame: 20.735099000 seconds Frame Number: 18 Packet Length: 138 bytes Capture Length: 138 bytes Ethernet II, Src: 00:50:fc:84:d2:ec, Dst: 00:01:4e:00:1c:aa Destination: 00:01:4e:00:1c:aa (00:01:4e:00:1c:aa) Source: 00:50:fc:84:d2:ec (00:50:fc:84:d2:ec) Type: IP (0x0800) Frame check sequence: 0xd810a3a0 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.114 (165.227.249.114) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0124 (292) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 254 Protocol: ESP (0x32) Header checksum: 0x7c7b (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.114 (165.227.249.114) Encapsulating Security Payload SPI: 0x640971f7 Sequence: 2 Data (92 bytes) 0000 00 01 4e 00 1c aa 00 50 fc 84 d2 ec 08 00 45 00 ..N....P......E. 0010 00 78 01 24 00 00 fe 32 7c 7b a5 e3 f9 7a a5 e3 .x.$...2|{...z.. 0020 f9 72 64 09 71 f7 00 00 00 02 57 6b 65 73 ca b3 .rd.q.....Wkes.. 0030 48 54 94 b6 58 57 db c0 5c e0 fe ef 6d 10 e5 fd HT..XW..\...m... 0040 32 a1 c4 5a 0a 97 26 88 8c ef 90 5f a6 d7 1c 90 2..Z..&...._.... 0050 9d 3d be cc 5f 20 53 fa b9 d6 6f bf 21 db b9 a8 .=.._ S...o.!... 0060 a5 ac 7f 50 27 68 93 a3 27 26 3f 4a b3 36 98 4d ...P'h..'&?J.6.M 0070 ed 27 15 68 bc 75 21 10 94 ca 1e a8 0c 7a d3 26 .'.h.u!......z.& 0080 7d cd d0 e5 8d 90 d8 10 a3 a0 }......... Frame 19 (138 bytes on wire, 138 bytes captured) Arrival Time: Mar 26, 2004 09:54:20.414645000 Time delta from previous packet: 0.001021000 seconds Time since reference or first frame: 20.736120000 seconds Frame Number: 19 Packet Length: 138 bytes Capture Length: 138 bytes Ethernet II, Src: 00:01:4e:00:1c:aa, Dst: 00:0c:29:fc:0c:9f Destination: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Source: 00:01:4e:00:1c:aa (00:01:4e:00:1c:aa) Type: IP (0x0800) Frame check sequence: 0x1021c8d0 (correct) Internet Protocol, Src Addr: 165.227.249.114 (165.227.249.114), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0004 (4) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 30 Protocol: ESP (0x32) Header checksum: 0x5d9c (correct) Source: 165.227.249.114 (165.227.249.114) Destination: 165.227.249.122 (165.227.249.122) Encapsulating Security Payload SPI: 0xb2084bdc Sequence: 2 Data (92 bytes) 0000 00 0c 29 fc 0c 9f 00 01 4e 00 1c aa 08 00 45 00 ..).....N.....E. 0010 00 78 00 04 00 00 1e 32 5d 9c a5 e3 f9 72 a5 e3 .x.....2]....r.. 0020 f9 7a b2 08 4b dc 00 00 00 02 e6 c0 a9 3f 81 a3 .z..K........?.. 0030 5d 63 68 54 60 f9 2a a8 ad a8 44 e3 93 54 47 74 ]chT`.*...D..TGt 0040 6c bb 0a 94 93 2f f8 de 61 4b 1f 48 83 83 50 63 l..../..aK.H..Pc 0050 ab 59 f5 b3 9a 27 20 69 6e ab 11 07 e7 a3 56 55 .Y...' in.....VU 0060 80 d1 dc 0d de 90 07 cc e4 a7 99 a9 7d 76 e0 b4 ............}v.. 0070 26 78 ab 37 37 c0 b8 23 99 8d 6d 66 ca c3 bf ba &x.77..#..mf.... 0080 aa 7b 58 0f 5c b5 10 21 c8 d0 .{X.\..!.. Frame 20 (138 bytes on wire, 138 bytes captured) Arrival Time: Mar 26, 2004 09:54:21.405212000 Time delta from previous packet: 0.990567000 seconds Time since reference or first frame: 21.726687000 seconds Frame Number: 20 Packet Length: 138 bytes Capture Length: 138 bytes Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:50:fc:84:d2:ec Destination: 00:50:fc:84:d2:ec (00:50:fc:84:d2:ec) Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Type: IP (0x0800) Frame check sequence: 0x313664ee (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.114 (165.227.249.114) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0125 (293) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x7b7a (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.114 (165.227.249.114) Encapsulating Security Payload SPI: 0x640971f7 Sequence: 3 Data (92 bytes) 0000 00 50 fc 84 d2 ec 00 0c 29 fc 0c 9f 08 00 45 00 .P......).....E. 0010 00 78 01 25 00 00 ff 32 7b 7a a5 e3 f9 7a a5 e3 .x.%...2{z...z.. 0020 f9 72 64 09 71 f7 00 00 00 03 3f 4a b3 36 98 4d .rd.q.....?J.6.M 0030 ed 27 15 68 bc 75 21 10 94 ca 69 80 84 f9 41 42 .'.h.u!...i...AB 0040 48 6e 92 2b 88 3c 96 8c 03 9e 21 85 7f e5 af c6 Hn.+.<....!..... 0050 60 c1 3e ac 02 39 30 cd 46 a6 c9 c1 8e 5a ef ba `.>..90.F....Z.. 0060 24 bb 9e 0a f1 e0 4f 1e a2 27 44 2a c2 78 1e 03 $.....O..'D*.x.. 0070 86 13 76 6e c8 7b 3a 06 4d 21 d6 48 28 b1 6f f0 ..vn.{:.M!.H(.o. 0080 10 17 0b d4 ee d8 31 36 64 ee ......16d. Frame 21 (138 bytes on wire, 138 bytes captured) Arrival Time: Mar 26, 2004 09:54:21.405403000 Time delta from previous packet: 0.000191000 seconds Time since reference or first frame: 21.726878000 seconds Frame Number: 21 Packet Length: 138 bytes Capture Length: 138 bytes Ethernet II, Src: 00:50:fc:84:d2:ec, Dst: 00:01:4e:00:1c:aa Destination: 00:01:4e:00:1c:aa (00:01:4e:00:1c:aa) Source: 00:50:fc:84:d2:ec (00:50:fc:84:d2:ec) Type: IP (0x0800) Frame check sequence: 0x4bb8bba8 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.114 (165.227.249.114) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0125 (293) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 254 Protocol: ESP (0x32) Header checksum: 0x7c7a (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.114 (165.227.249.114) Encapsulating Security Payload SPI: 0x640971f7 Sequence: 3 Data (92 bytes) 0000 00 01 4e 00 1c aa 00 50 fc 84 d2 ec 08 00 45 00 ..N....P......E. 0010 00 78 01 25 00 00 fe 32 7c 7a a5 e3 f9 7a a5 e3 .x.%...2|z...z.. 0020 f9 72 64 09 71 f7 00 00 00 03 3f 4a b3 36 98 4d .rd.q.....?J.6.M 0030 ed 27 15 68 bc 75 21 10 94 ca 69 80 84 f9 41 42 .'.h.u!...i...AB 0040 48 6e 92 2b 88 3c 96 8c 03 9e 21 85 7f e5 af c6 Hn.+.<....!..... 0050 60 c1 3e ac 02 39 30 cd 46 a6 c9 c1 8e 5a ef ba `.>..90.F....Z.. 0060 24 bb 9e 0a f1 e0 4f 1e a2 27 44 2a c2 78 1e 03 $.....O..'D*.x.. 0070 86 13 76 6e c8 7b 3a 06 4d 21 d6 48 28 b1 6f f0 ..vn.{:.M!.H(.o. 0080 10 17 0b d4 ee d8 4b b8 bb a8 ......K... Frame 22 (138 bytes on wire, 138 bytes captured) Arrival Time: Mar 26, 2004 09:54:21.407712000 Time delta from previous packet: 0.002309000 seconds Time since reference or first frame: 21.729187000 seconds Frame Number: 22 Packet Length: 138 bytes Capture Length: 138 bytes Ethernet II, Src: 00:01:4e:00:1c:aa, Dst: 00:0c:29:fc:0c:9f Destination: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Source: 00:01:4e:00:1c:aa (00:01:4e:00:1c:aa) Type: IP (0x0800) Frame check sequence: 0xb494db85 (correct) Internet Protocol, Src Addr: 165.227.249.114 (165.227.249.114), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0005 (5) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 30 Protocol: ESP (0x32) Header checksum: 0x5d9b (correct) Source: 165.227.249.114 (165.227.249.114) Destination: 165.227.249.122 (165.227.249.122) Encapsulating Security Payload SPI: 0xb2084bdc Sequence: 3 Data (92 bytes) 0000 00 0c 29 fc 0c 9f 00 01 4e 00 1c aa 08 00 45 00 ..).....N.....E. 0010 00 78 00 05 00 00 1e 32 5d 9b a5 e3 f9 72 a5 e3 .x.....2]....r.. 0020 f9 7a b2 08 4b dc 00 00 00 03 99 a9 7d 76 e0 b4 .z..K.......}v.. 0030 26 78 ab 37 37 c0 b8 23 99 8d 04 28 93 5a c9 c6 &x.77..#...(.Z.. 0040 fa 38 28 16 ce af 49 34 e5 78 5a 0b 9a 8f 0d d4 .8(...I4.xZ..... 0050 ed 68 d3 e7 8a 79 e8 dc f2 d2 9c 02 33 cb b9 d1 .h...y......3... 0060 ee 18 b5 dc 9d 37 81 60 83 29 b8 9a d6 2a 6a 09 .....7.`.)...*j. 0070 35 f1 96 d4 7a 50 5b 0b c6 10 bd d1 c9 8b 0c 7c 5...zP[........| 0080 ad 37 02 d7 a1 42 b4 94 db 85 .7...B.... Frame 23 (138 bytes on wire, 138 bytes captured) Arrival Time: Mar 26, 2004 09:54:22.420707000 Time delta from previous packet: 1.012995000 seconds Time since reference or first frame: 22.742182000 seconds Frame Number: 23 Packet Length: 138 bytes Capture Length: 138 bytes Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:50:fc:84:d2:ec Destination: 00:50:fc:84:d2:ec (00:50:fc:84:d2:ec) Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Type: IP (0x0800) Frame check sequence: 0x4445ebb8 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.114 (165.227.249.114) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0126 (294) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x7b79 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.114 (165.227.249.114) Encapsulating Security Payload SPI: 0x640971f7 Sequence: 4 Data (92 bytes) 0000 00 50 fc 84 d2 ec 00 0c 29 fc 0c 9f 08 00 45 00 .P......).....E. 0010 00 78 01 26 00 00 ff 32 7b 79 a5 e3 f9 7a a5 e3 .x.&...2{y...z.. 0020 f9 72 64 09 71 f7 00 00 00 04 44 2a c2 78 1e 03 .rd.q.....D*.x.. 0030 86 13 76 6e c8 7b 3a 06 4d 21 78 cf ed b9 19 25 ..vn.{:.M!x....% 0040 72 5b 4d 8f 3d fe e4 cb 22 66 8f 5a 23 8d 8a 4f r[M.=..."f.Z#..O 0050 59 6a 76 65 79 2a f7 af aa 72 63 e3 ea f6 48 fc Yjvey*...rc...H. 0060 1d 26 04 bc fc c2 9f 25 6b aa c7 ef e4 5b b8 08 .&.....%k....[.. 0070 7c 35 b5 2b 9b ce fa 00 b7 ae 2a 90 18 4a 53 d6 |5.+......*..JS. 0080 88 a5 2d 31 fd 5c 44 45 eb b8 ..-1.\DE.. Frame 24 (138 bytes on wire, 138 bytes captured) Arrival Time: Mar 26, 2004 09:54:22.420899000 Time delta from previous packet: 0.000192000 seconds Time since reference or first frame: 22.742374000 seconds Frame Number: 24 Packet Length: 138 bytes Capture Length: 138 bytes Ethernet II, Src: 00:50:fc:84:d2:ec, Dst: 00:01:4e:00:1c:aa Destination: 00:01:4e:00:1c:aa (00:01:4e:00:1c:aa) Source: 00:50:fc:84:d2:ec (00:50:fc:84:d2:ec) Type: IP (0x0800) Frame check sequence: 0x3ecb34fe (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.114 (165.227.249.114) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0126 (294) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 254 Protocol: ESP (0x32) Header checksum: 0x7c79 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.114 (165.227.249.114) Encapsulating Security Payload SPI: 0x640971f7 Sequence: 4 Data (92 bytes) 0000 00 01 4e 00 1c aa 00 50 fc 84 d2 ec 08 00 45 00 ..N....P......E. 0010 00 78 01 26 00 00 fe 32 7c 79 a5 e3 f9 7a a5 e3 .x.&...2|y...z.. 0020 f9 72 64 09 71 f7 00 00 00 04 44 2a c2 78 1e 03 .rd.q.....D*.x.. 0030 86 13 76 6e c8 7b 3a 06 4d 21 78 cf ed b9 19 25 ..vn.{:.M!x....% 0040 72 5b 4d 8f 3d fe e4 cb 22 66 8f 5a 23 8d 8a 4f r[M.=..."f.Z#..O 0050 59 6a 76 65 79 2a f7 af aa 72 63 e3 ea f6 48 fc Yjvey*...rc...H. 0060 1d 26 04 bc fc c2 9f 25 6b aa c7 ef e4 5b b8 08 .&.....%k....[.. 0070 7c 35 b5 2b 9b ce fa 00 b7 ae 2a 90 18 4a 53 d6 |5.+......*..JS. 0080 88 a5 2d 31 fd 5c 3e cb 34 fe ..-1.\>.4. Frame 25 (138 bytes on wire, 138 bytes captured) Arrival Time: Mar 26, 2004 09:54:22.421948000 Time delta from previous packet: 0.001049000 seconds Time since reference or first frame: 22.743423000 seconds Frame Number: 25 Packet Length: 138 bytes Capture Length: 138 bytes Ethernet II, Src: 00:01:4e:00:1c:aa, Dst: 00:0c:29:fc:0c:9f Destination: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Source: 00:01:4e:00:1c:aa (00:01:4e:00:1c:aa) Type: IP (0x0800) Frame check sequence: 0x57c37fbd (correct) Internet Protocol, Src Addr: 165.227.249.114 (165.227.249.114), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0006 (6) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 30 Protocol: ESP (0x32) Header checksum: 0x5d9a (correct) Source: 165.227.249.114 (165.227.249.114) Destination: 165.227.249.122 (165.227.249.122) Encapsulating Security Payload SPI: 0xb2084bdc Sequence: 4 Data (92 bytes) 0000 00 0c 29 fc 0c 9f 00 01 4e 00 1c aa 08 00 45 00 ..).....N.....E. 0010 00 78 00 06 00 00 1e 32 5d 9a a5 e3 f9 72 a5 e3 .x.....2]....r.. 0020 f9 7a b2 08 4b dc 00 00 00 04 b8 9a d6 2a 6a 09 .z..K........*j. 0030 35 f1 96 d4 7a 50 5b 0b c6 10 28 10 b7 12 28 48 5...zP[...(...(H 0040 3b 45 31 15 6b 74 ee 7a 69 af 45 1e b6 09 1a b4 ;E1.kt.zi.E..... 0050 9e 65 51 7e b9 4b 9d ed 32 57 cb fc 26 30 84 a6 .eQ~.K..2W..&0.. 0060 18 a8 7a 6c b9 4f d2 40 f4 be 44 5f 5f dc 5a 79 ..zl.O.@..D__.Zy 0070 bd 37 be 29 56 c3 2d da 79 07 83 86 ab 8e 6b a9 .7.)V.-.y.....k. 0080 da c5 48 38 8e da 57 c3 7f bd ..H8..W... Frame 26 (346 bytes on wire, 346 bytes captured) Arrival Time: Mar 26, 2004 09:54:24.099006000 Time delta from previous packet: 1.677058000 seconds Time since reference or first frame: 24.420481000 seconds Frame Number: 26 Packet Length: 346 bytes Capture Length: 346 bytes Ethernet II, Src: 00:01:4e:00:1c:aa, Dst: 00:0c:29:fc:0c:9f Destination: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Source: 00:01:4e:00:1c:aa (00:01:4e:00:1c:aa) Type: IP (0x0800) Frame check sequence: 0xc53e4e42 (correct) Internet Protocol, Src Addr: 165.227.249.114 (165.227.249.114), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 328 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfaf0 (correct) Source: 165.227.249.114 (165.227.249.114) Destination: 165.227.249.122 (165.227.249.122) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 308 Checksum: 0x6f1d (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xBFA89A326BE36F0A Responder cookie: 0x39CBBC4FF886B647 Next payload: Hash (8)