Frame 1 (178 bytes on wire, 178 bytes captured) Arrival Time: Mar 25, 2004 14:38:33.546379000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 178 bytes Capture Length: 178 bytes Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:10:db:16:db:f6 Destination: 00:10:db:16:db:f6 (00:10:db:16:db:f6) Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Type: IP (0x0800) Frame check sequence: 0xb4837b4a (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.117 (165.227.249.117) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 160 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb95 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.117 (165.227.249.117) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 140 Checksum: 0x45cb (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xF880B6510F0C5E7A Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 132 Security Association payload Next payload: Vendor ID (13) Length: 60 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 48 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 40 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): AES-CBC (7) Key-Length (14): Key-Length (128) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: NONE (0) Length: 44 Vendor ID: Check Point Check Point Product: VPN-1 Version: NG with Application Intelligence R55 0000 00 10 db 16 db f6 00 0c 29 fc 0c 9f 08 00 45 00 ........).....E. 0010 00 a0 00 00 40 00 40 11 fb 95 a5 e3 f9 7a a5 e3 ....@.@......z.. 0020 f9 75 01 f4 01 f4 00 8c 45 cb f8 80 b6 51 0f 0c .u......E....Q.. 0030 5e 7a 00 00 00 00 00 00 00 00 01 10 02 00 00 00 ^z.............. 0040 00 00 00 00 00 84 0d 00 00 3c 00 00 00 01 00 00 .........<...... 0050 00 01 00 00 00 30 01 01 00 01 00 00 00 28 01 01 .....0.......(.. 0060 00 00 80 01 00 07 80 0e 00 80 80 02 00 02 80 03 ................ 0070 00 01 80 04 00 02 80 0b 00 01 00 0c 00 04 00 00 ................ 0080 70 80 00 00 00 2c f4 ed 19 e0 c1 14 eb 51 6f aa p....,.......Qo. 0090 ac 0e e3 7d af 28 07 b4 38 1f 00 00 00 01 00 00 ...}.(..8....... 00a0 13 8d 00 00 00 00 00 00 00 00 18 80 00 00 b4 83 ................ 00b0 7b 4a {J Frame 2 (186 bytes on wire, 186 bytes captured) Arrival Time: Mar 25, 2004 14:38:33.632145000 Time delta from previous packet: 0.085766000 seconds Time since reference or first frame: 0.085766000 seconds Frame Number: 2 Packet Length: 186 bytes Capture Length: 186 bytes Ethernet II, Src: 00:10:db:16:db:f6, Dst: 00:0c:29:fc:0c:9f Destination: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Source: 00:10:db:16:db:f6 (00:10:db:16:db:f6) Type: IP (0x0800) Frame check sequence: 0x4775d1d5 (correct) Internet Protocol, Src Addr: 165.227.249.117 (165.227.249.117), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 168 Identification: 0x04d3 (1235) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x36bb (correct) Source: 165.227.249.117 (165.227.249.117) Destination: 165.227.249.122 (165.227.249.122) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 148 Checksum: 0x1eb7 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xF880B6510F0C5E7A Responder cookie: 0xE79165AF6133520F Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 140 Security Association payload Next payload: Vendor ID (13) Length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 44 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 36 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): AES-CBC (7) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Key-Length (14): Key-Length (128) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: Vendor ID (13) Length: 32 Vendor ID: unknown vendor ID: 0x47D2B126BFCD83489760E2CF8C5D4D5A... Vendor ID payload Next payload: NONE (0) Length: 24 Vendor ID: unknown vendor ID: 0x4865617274426561745F4E6F74696679... 0000 00 0c 29 fc 0c 9f 00 10 db 16 db f6 08 00 45 00 ..)...........E. 0010 00 a8 04 d3 00 00 40 11 36 bb a5 e3 f9 75 a5 e3 ......@.6....u.. 0020 f9 7a 01 f4 01 f4 00 94 1e b7 f8 80 b6 51 0f 0c .z...........Q.. 0030 5e 7a e7 91 65 af 61 33 52 0f 01 10 02 00 00 00 ^z..e.a3R....... 0040 00 00 00 00 00 8c 0d 00 00 38 00 00 00 01 00 00 .........8...... 0050 00 01 00 00 00 2c 01 01 00 01 00 00 00 24 01 01 .....,.......$.. 0060 00 00 80 01 00 07 80 02 00 02 80 04 00 02 80 03 ................ 0070 00 01 80 0e 00 80 80 0b 00 01 80 0c 70 80 0d 00 ............p... 0080 00 20 47 d2 b1 26 bf cd 83 48 97 60 e2 cf 8c 5d . G..&...H.`...] 0090 4d 5a 03 49 7c 15 00 00 00 03 00 00 05 00 00 00 MZ.I|........... 00a0 00 18 48 65 61 72 74 42 65 61 74 5f 4e 6f 74 69 ..HeartBeat_Noti 00b0 66 79 38 6b 01 00 47 75 d1 d5 fy8k..Gu.. Frame 3 (230 bytes on wire, 230 bytes captured) Arrival Time: Mar 25, 2004 14:38:33.638136000 Time delta from previous packet: 0.005991000 seconds Time since reference or first frame: 0.091757000 seconds Frame Number: 3 Packet Length: 230 bytes Capture Length: 230 bytes Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:10:db:16:db:f6 Destination: 00:10:db:16:db:f6 (00:10:db:16:db:f6) Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Type: IP (0x0800) Frame check sequence: 0xf228a7a5 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.117 (165.227.249.117) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 212 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb61 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.117 (165.227.249.117) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 192 Checksum: 0xad07 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xF880B6510F0C5E7A Responder cookie: 0xE79165AF6133520F Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 184 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 24 Nonce Data 0000 00 10 db 16 db f6 00 0c 29 fc 0c 9f 08 00 45 00 ........).....E. 0010 00 d4 00 00 40 00 40 11 fb 61 a5 e3 f9 7a a5 e3 ....@.@..a...z.. 0020 f9 75 01 f4 01 f4 00 c0 ad 07 f8 80 b6 51 0f 0c .u...........Q.. 0030 5e 7a e7 91 65 af 61 33 52 0f 04 10 02 00 00 00 ^z..e.a3R....... 0040 00 00 00 00 00 b8 0a 00 00 84 85 17 c7 ef 43 c2 ..............C. 0050 24 6b 67 69 09 2a 22 94 33 83 91 82 08 05 98 94 $kgi.*".3....... 0060 51 4f c0 db 81 99 72 cf 84 43 97 05 55 5b bb e4 QO....r..C..U[.. 0070 8f 17 03 d6 fb 4d 3e 14 f5 1d 29 f6 b2 f8 fc 26 .....M>...)....& 0080 02 26 38 92 3a a2 25 7c be 0d 6d 4c f9 88 b4 01 .&8.:.%|..mL.... 0090 4c b1 c2 64 95 ae b9 88 c1 73 7a 68 1e 7d 8b b6 L..d.....szh.}.. 00a0 ec 08 3e 11 b8 33 fe ce 5d 1d 01 31 a4 e0 50 64 ..>..3..]..1..Pd 00b0 7b 2d a7 ff 32 60 fd b2 8b 93 2f 35 f1 e9 a6 e0 {-..2`..../5.... 00c0 f5 ad 0e 13 20 93 19 46 11 0b 00 00 00 18 77 9b .... ..F......w. 00d0 8c 45 4e 88 96 13 9a 23 7a 8d 3e 1d 8a 97 0c d6 .EN....#z.>..... 00e0 af ee f2 28 a7 a5 ...(.. Frame 4 (230 bytes on wire, 230 bytes captured) Arrival Time: Mar 25, 2004 14:38:33.647663000 Time delta from previous packet: 0.009527000 seconds Time since reference or first frame: 0.101284000 seconds Frame Number: 4 Packet Length: 230 bytes Capture Length: 230 bytes Ethernet II, Src: 00:10:db:16:db:f6, Dst: 00:0c:29:fc:0c:9f Destination: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Source: 00:10:db:16:db:f6 (00:10:db:16:db:f6) Type: IP (0x0800) Frame check sequence: 0x73d2988b (correct) Internet Protocol, Src Addr: 165.227.249.117 (165.227.249.117), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 212 Identification: 0x04d4 (1236) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x368e (correct) Source: 165.227.249.117 (165.227.249.117) Destination: 165.227.249.122 (165.227.249.122) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 192 Checksum: 0xb723 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xF880B6510F0C5E7A Responder cookie: 0xE79165AF6133520F Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 184 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 24 Nonce Data 0000 00 0c 29 fc 0c 9f 00 10 db 16 db f6 08 00 45 00 ..)...........E. 0010 00 d4 04 d4 00 00 40 11 36 8e a5 e3 f9 75 a5 e3 ......@.6....u.. 0020 f9 7a 01 f4 01 f4 00 c0 b7 23 f8 80 b6 51 0f 0c .z.......#...Q.. 0030 5e 7a e7 91 65 af 61 33 52 0f 04 10 02 00 00 00 ^z..e.a3R....... 0040 00 00 00 00 00 b8 0a 00 00 84 26 a1 a0 0a 59 29 ..........&...Y) 0050 7f 9e f9 19 6d ed 12 cd 67 b3 2c da a4 0d f0 12 ....m...g.,..... 0060 fb b2 a6 2e 9d 0b 3e 65 d7 84 4c 0d 29 0a f8 b8 ......>e..L.)... 0070 fe 97 cf 37 b8 c0 f7 b0 e2 80 9b 31 2c 5b 92 81 ...7.......1,[.. 0080 6f ca 2c d2 b2 71 88 d2 74 5c cf f7 d8 18 17 f2 o.,..q..t\...... 0090 88 7f b9 03 89 da 87 67 6f 82 eb d9 8b 02 3f cf .......go.....?. 00a0 a7 00 5d 07 b8 85 b3 60 b1 27 7d 7e 8d 32 ad f4 ..]....`.'}~.2.. 00b0 da 1d f0 d5 d0 e0 8a 90 41 75 66 0d 46 2b 6b c7 ........Auf.F+k. 00c0 f9 0d 4e 2f 8e 3e 6f a6 aa 73 00 00 00 18 f4 e8 ..N/.>o..s...... 00d0 45 06 6f d5 3a e0 96 31 34 ec 3b de 11 20 e2 88 E.o.:..14.;.. .. 00e0 69 51 73 d2 98 8b iQs... Frame 5 (122 bytes on wire, 122 bytes captured) Arrival Time: Mar 25, 2004 14:38:33.654953000 Time delta from previous packet: 0.007290000 seconds Time since reference or first frame: 0.108574000 seconds Frame Number: 5 Packet Length: 122 bytes Capture Length: 122 bytes Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:10:db:16:db:f6 Destination: 00:10:db:16:db:f6 (00:10:db:16:db:f6) Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Type: IP (0x0800) Frame check sequence: 0x10d2febf (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.117 (165.227.249.117) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 104 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfbcd (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.117 (165.227.249.117) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 84 Checksum: 0x3c85 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xF880B6510F0C5E7A Responder cookie: 0xE79165AF6133520F Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 76 Encrypted payload (48 bytes) 0000 00 10 db 16 db f6 00 0c 29 fc 0c 9f 08 00 45 00 ........).....E. 0010 00 68 00 00 40 00 40 11 fb cd a5 e3 f9 7a a5 e3 .h..@.@......z.. 0020 f9 75 01 f4 01 f4 00 54 3c 85 f8 80 b6 51 0f 0c .u.....T<....Q.. 0030 5e 7a e7 91 65 af 61 33 52 0f 05 10 02 01 00 00 ^z..e.a3R....... 0040 00 00 00 00 00 4c 1f bc 29 1e bd a4 77 6e f4 b3 .....L..)...wn.. 0050 9a cc 2b 22 64 ec 2c f2 f1 b0 cf a8 3a 93 0a 61 ..+"d.,.....:..a 0060 ca 36 4c cd 42 72 a7 89 40 57 2e 3d 7f ce 21 6b .6L.Br..@W.=..!k 0070 23 13 f9 57 5d f1 10 d2 fe bf #..W]..... Frame 6 (122 bytes on wire, 122 bytes captured) Arrival Time: Mar 25, 2004 14:38:33.656897000 Time delta from previous packet: 0.001944000 seconds Time since reference or first frame: 0.110518000 seconds Frame Number: 6 Packet Length: 122 bytes Capture Length: 122 bytes Ethernet II, Src: 00:10:db:16:db:f6, Dst: 00:0c:29:fc:0c:9f Destination: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Source: 00:10:db:16:db:f6 (00:10:db:16:db:f6) Type: IP (0x0800) Frame check sequence: 0x151dd733 (correct) Internet Protocol, Src Addr: 165.227.249.117 (165.227.249.117), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 104 Identification: 0x04d5 (1237) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x36f9 (correct) Source: 165.227.249.117 (165.227.249.117) Destination: 165.227.249.122 (165.227.249.122) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 84 Checksum: 0x2f6e (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xF880B6510F0C5E7A Responder cookie: 0xE79165AF6133520F Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 76 Encrypted payload (48 bytes) 0000 00 0c 29 fc 0c 9f 00 10 db 16 db f6 08 00 45 00 ..)...........E. 0010 00 68 04 d5 00 00 40 11 36 f9 a5 e3 f9 75 a5 e3 .h....@.6....u.. 0020 f9 7a 01 f4 01 f4 00 54 2f 6e f8 80 b6 51 0f 0c .z.....T/n...Q.. 0030 5e 7a e7 91 65 af 61 33 52 0f 05 10 02 01 00 00 ^z..e.a3R....... 0040 00 00 00 00 00 4c a6 e3 f4 b6 e7 fd 4e 1b ed 8d .....L......N... 0050 ad 78 7f 43 49 0d 50 ef db 80 2c 44 d0 9d 48 20 .x.CI.P...,D..H 0060 3f 57 08 7c 73 d6 c2 10 32 3b 10 1b 5e d9 b8 ce ?W.|s...2;..^... 0070 8c 71 08 46 56 10 15 1d d7 33 .q.FV....3 Frame 7 (362 bytes on wire, 362 bytes captured) Arrival Time: Mar 25, 2004 14:38:33.663960000 Time delta from previous packet: 0.007063000 seconds Time since reference or first frame: 0.117581000 seconds Frame Number: 7 Packet Length: 362 bytes Capture Length: 362 bytes Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:10:db:16:db:f6 Destination: 00:10:db:16:db:f6 (00:10:db:16:db:f6) Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Type: IP (0x0800) Frame check sequence: 0xbc50dc6e (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.117 (165.227.249.117) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 344 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfadd (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.117 (165.227.249.117) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 324 Checksum: 0x1e57 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xF880B6510F0C5E7A Responder cookie: 0xE79165AF6133520F Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xECB557D5 Length: 316 Encrypted payload (288 bytes) 0000 00 10 db 16 db f6 00 0c 29 fc 0c 9f 08 00 45 00 ........).....E. 0010 01 58 00 00 40 00 40 11 fa dd a5 e3 f9 7a a5 e3 .X..@.@......z.. 0020 f9 75 01 f4 01 f4 01 44 1e 57 f8 80 b6 51 0f 0c .u.....D.W...Q.. 0030 5e 7a e7 91 65 af 61 33 52 0f 08 10 20 01 ec b5 ^z..e.a3R... ... 0040 57 d5 00 00 01 3c 83 f4 af 1d 4c 3e 77 00 36 da W....<....L>w.6. 0050 01 f2 48 d5 6f 36 28 6d 6b ec 35 8c ee ca 25 c7 ..H.o6(mk.5...%. 0060 16 95 c2 e6 38 5a f3 c9 e9 bb 56 35 0c f9 21 e1 ....8Z....V5..!. 0070 1a 16 2b a1 b4 cf 1b e6 b2 e6 fc 76 50 e9 48 08 ..+........vP.H. 0080 3a 46 e6 5b 92 d7 80 ef 22 2f 51 77 d9 a7 37 c0 :F.[...."/Qw..7. 0090 90 01 47 ab 99 88 4c ef 4d fe 43 00 4b 1a ca 68 ..G...L.M.C.K..h 00a0 28 34 2a 88 df c6 3a ba 4c 8f 74 ca 2b 54 31 73 (4*...:.L.t.+T1s 00b0 8d f2 98 79 dd 4b 2d ff 2c 41 66 a4 f4 88 9f 38 ...y.K-.,Af....8 00c0 d0 9c b9 25 a7 ba 6e 3c 5f 11 7f 80 c9 58 e4 f3 ...%..n<_....X.. 00d0 7d 73 fa de 37 5e 8e 0b 94 28 f4 bc f6 38 18 6d }s..7^...(...8.m 00e0 8c 08 05 5e d5 77 2c ea 95 6c 22 40 1e 82 2e 11 ...^.w,..l"@.... 00f0 83 b1 40 89 4f 8a 9e 2b 8b a9 0a 53 48 9f 8a e9 ..@.O..+...SH... 0100 f6 bc ef 74 cd 1d 0f 50 f2 20 b5 2e 30 e8 11 ab ...t...P. ..0... 0110 6c df 91 4f 1a 09 54 6a 57 a6 ec 7d 3a 9d 00 bd l..O..TjW..}:... 0120 a6 6b 28 8c 91 71 80 69 db b2 31 83 cc 7e bc f8 .k(..q.i..1..~.. 0130 29 bf 30 a7 1d d0 af 7f 81 d8 8d 73 76 5b 98 cd ).0........sv[.. 0140 b8 64 c7 2e af 57 a6 b5 ee 85 5b 58 83 96 eb 1e .d...W....[X.... 0150 6a b5 17 e8 d0 ac 51 f4 67 3b c6 a2 b4 85 cb d7 j.....Q.g;...... 0160 3d b3 50 95 fb 70 bc 50 dc 6e =.P..p.P.n Frame 8 (362 bytes on wire, 362 bytes captured) Arrival Time: Mar 25, 2004 14:38:33.674487000 Time delta from previous packet: 0.010527000 seconds Time since reference or first frame: 0.128108000 seconds Frame Number: 8 Packet Length: 362 bytes Capture Length: 362 bytes Ethernet II, Src: 00:10:db:16:db:f6, Dst: 00:0c:29:fc:0c:9f Destination: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Source: 00:10:db:16:db:f6 (00:10:db:16:db:f6) Type: IP (0x0800) Frame check sequence: 0x27af6fb1 (correct) Internet Protocol, Src Addr: 165.227.249.117 (165.227.249.117), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 344 Identification: 0x04d6 (1238) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3608 (correct) Source: 165.227.249.117 (165.227.249.117) Destination: 165.227.249.122 (165.227.249.122) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 324 Checksum: 0xba03 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xF880B6510F0C5E7A Responder cookie: 0xE79165AF6133520F Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xECB557D5 Length: 316 Encrypted payload (288 bytes) 0000 00 0c 29 fc 0c 9f 00 10 db 16 db f6 08 00 45 00 ..)...........E. 0010 01 58 04 d6 00 00 40 11 36 08 a5 e3 f9 75 a5 e3 .X....@.6....u.. 0020 f9 7a 01 f4 01 f4 01 44 ba 03 f8 80 b6 51 0f 0c .z.....D.....Q.. 0030 5e 7a e7 91 65 af 61 33 52 0f 08 10 20 01 ec b5 ^z..e.a3R... ... 0040 57 d5 00 00 01 3c 75 85 ce 8f 75 28 fa 61 71 2a W.....q.%..QR. 0090 ca 1c a7 18 d2 a1 68 f7 d8 d2 d2 3c 38 fe 3b 3e ......h....<8.;> 00a0 2c 87 47 48 a3 7b 91 af 5e fa 86 fd f3 98 7c 0e ,.GH.{..^.....|. 00b0 a2 84 8c fc df da 40 ba 15 6e d3 3b f8 05 68 d0 ......@..n.;..h. 00c0 17 63 e5 d7 7a 42 4a 05 c8 4c 96 5d b1 61 85 e8 .c..zBJ..L.].a.. 00d0 8d 67 83 b8 b4 55 6d ef 00 e5 56 59 71 34 2e e1 .g...Um...VYq4.. 00e0 b8 42 be 70 0b 5f a4 b1 2e 3b af f1 1a 5f 65 c3 .B.p._...;..._e. 00f0 7f 4a ea ce 31 74 4b 6b 65 ee ec dc c0 1d 85 67 .J..1tKke......g 0100 20 4f 82 23 67 ff f2 b6 56 6c 1b be fa 20 2d a0 O.#g...Vl... -. 0110 db 53 af 46 73 5a 7b ae a7 aa e2 63 52 d8 3c cf .S.FsZ{....cR.<. 0120 30 3c 06 a4 a3 1e f8 a6 82 f9 b7 f3 e4 f0 e7 8f 0<.............. 0130 61 e0 2c 1d 60 82 3b 84 e2 d4 62 80 70 9f 24 2d a.,.`.;...b.p.$- 0140 71 6c b8 b8 c0 d2 93 8a 9e f5 9e e6 22 db 40 e2 ql..........".@. 0150 38 c3 b9 b0 30 b4 24 97 a6 f9 c6 2e 03 c4 17 bd 8...0.$......... 0160 74 28 0d 4c 8c 07 27 af 6f b1 t(.L..'.o. Frame 9 (106 bytes on wire, 106 bytes captured) Arrival Time: Mar 25, 2004 14:38:33.681611000 Time delta from previous packet: 0.007124000 seconds Time since reference or first frame: 0.135232000 seconds Frame Number: 9 Packet Length: 106 bytes Capture Length: 106 bytes Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:10:db:16:db:f6 Destination: 00:10:db:16:db:f6 (00:10:db:16:db:f6) Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Type: IP (0x0800) Frame check sequence: 0xc623a7a2 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.117 (165.227.249.117) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 88 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfbdd (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.117 (165.227.249.117) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 68 Checksum: 0x500c (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xF880B6510F0C5E7A Responder cookie: 0xE79165AF6133520F Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xECB557D5 Length: 60 Encrypted payload (32 bytes) 0000 00 10 db 16 db f6 00 0c 29 fc 0c 9f 08 00 45 00 ........).....E. 0010 00 58 00 00 40 00 40 11 fb dd a5 e3 f9 7a a5 e3 .X..@.@......z.. 0020 f9 75 01 f4 01 f4 00 44 50 0c f8 80 b6 51 0f 0c .u.....DP....Q.. 0030 5e 7a e7 91 65 af 61 33 52 0f 08 10 20 01 ec b5 ^z..e.a3R... ... 0040 57 d5 00 00 00 3c fe 51 e3 4b b6 e1 a4 16 60 b6 W....<.Q.K....`. 0050 16 a7 84 85 55 11 0e ff 75 28 49 e8 3a 02 27 79 ....U...u(I.:.'y 0060 28 8d 32 a4 ca bd c6 23 a7 a2 (.2....#.. Frame 10 (106 bytes on wire, 106 bytes captured) Arrival Time: Mar 25, 2004 14:38:33.759400000 Time delta from previous packet: 0.077789000 seconds Time since reference or first frame: 0.213021000 seconds Frame Number: 10 Packet Length: 106 bytes Capture Length: 106 bytes Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:10:db:16:db:f6 Destination: 00:10:db:16:db:f6 (00:10:db:16:db:f6) Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Type: IP (0x0800) Frame check sequence: 0xc623a7a2 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.117 (165.227.249.117) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 88 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfbdd (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.117 (165.227.249.117) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 68 Checksum: 0x500c (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xF880B6510F0C5E7A Responder cookie: 0xE79165AF6133520F Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xECB557D5 Length: 60 Encrypted payload (32 bytes) 0000 00 10 db 16 db f6 00 0c 29 fc 0c 9f 08 00 45 00 ........).....E. 0010 00 58 00 00 40 00 40 11 fb dd a5 e3 f9 7a a5 e3 .X..@.@......z.. 0020 f9 75 01 f4 01 f4 00 44 50 0c f8 80 b6 51 0f 0c .u.....DP....Q.. 0030 5e 7a e7 91 65 af 61 33 52 0f 08 10 20 01 ec b5 ^z..e.a3R... ... 0040 57 d5 00 00 00 3c fe 51 e3 4b b6 e1 a4 16 60 b6 W....<.Q.K....`. 0050 16 a7 84 85 55 11 0e ff 75 28 49 e8 3a 02 27 79 ....U...u(I.:.'y 0060 28 8d 32 a4 ca bd c6 23 a7 a2 (.2....#.. Frame 11 (106 bytes on wire, 106 bytes captured) Arrival Time: Mar 25, 2004 14:38:33.859928000 Time delta from previous packet: 0.100528000 seconds Time since reference or first frame: 0.313549000 seconds Frame Number: 11 Packet Length: 106 bytes Capture Length: 106 bytes Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:10:db:16:db:f6 Destination: 00:10:db:16:db:f6 (00:10:db:16:db:f6) Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Type: IP (0x0800) Frame check sequence: 0xc623a7a2 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.117 (165.227.249.117) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 88 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfbdd (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.117 (165.227.249.117) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 68 Checksum: 0x500c (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xF880B6510F0C5E7A Responder cookie: 0xE79165AF6133520F Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xECB557D5 Length: 60 Encrypted payload (32 bytes) 0000 00 10 db 16 db f6 00 0c 29 fc 0c 9f 08 00 45 00 ........).....E. 0010 00 58 00 00 40 00 40 11 fb dd a5 e3 f9 7a a5 e3 .X..@.@......z.. 0020 f9 75 01 f4 01 f4 00 44 50 0c f8 80 b6 51 0f 0c .u.....DP....Q.. 0030 5e 7a e7 91 65 af 61 33 52 0f 08 10 20 01 ec b5 ^z..e.a3R... ... 0040 57 d5 00 00 00 3c fe 51 e3 4b b6 e1 a4 16 60 b6 W....<.Q.K....`. 0050 16 a7 84 85 55 11 0e ff 75 28 49 e8 3a 02 27 79 ....U...u(I.:.'y 0060 28 8d 32 a4 ca bd c6 23 a7 a2 (.2....#.. Frame 12 (138 bytes on wire, 138 bytes captured) Arrival Time: Mar 25, 2004 14:38:33.959758000 Time delta from previous packet: 0.099830000 seconds Time since reference or first frame: 0.413379000 seconds Frame Number: 12 Packet Length: 138 bytes Capture Length: 138 bytes Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:50:fc:84:d2:ec Destination: 00:50:fc:84:d2:ec (00:50:fc:84:d2:ec) Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Type: IP (0x0800) Frame check sequence: 0x2c9a3cca (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.117 (165.227.249.117) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x00cd (205) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x7bcf (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.117 (165.227.249.117) Encapsulating Security Payload SPI: 0x278293ab Sequence: 1 Data (92 bytes) 0000 00 50 fc 84 d2 ec 00 0c 29 fc 0c 9f 08 00 45 00 .P......).....E. 0010 00 78 00 cd 00 00 ff 32 7b cf a5 e3 f9 7a a5 e3 .x.....2{....z.. 0020 f9 75 27 82 93 ab 00 00 00 01 62 c8 04 6c 9c c2 .u'.......b..l.. 0030 e6 3c 72 bd 28 25 d4 a4 d4 3a f2 9b 76 39 35 43 ..R... 0070 17 30 d7 8b d8 a7 85 e5 d6 8a ae 6b 5d 3f 96 0a .0.........k]?.. 0080 0c 48 00 bb 5a dc b1 50 dd 07 .H..Z..P.. Frame 21 (138 bytes on wire, 138 bytes captured) Arrival Time: Mar 25, 2004 14:38:35.534059000 Time delta from previous packet: 0.000199000 seconds Time since reference or first frame: 1.987680000 seconds Frame Number: 21 Packet Length: 138 bytes Capture Length: 138 bytes Ethernet II, Src: 00:50:fc:84:d2:ec, Dst: 00:10:db:16:db:f6 Destination: 00:10:db:16:db:f6 (00:10:db:16:db:f6) Source: 00:50:fc:84:d2:ec (00:50:fc:84:d2:ec) Type: IP (0x0800) Frame check sequence: 0x0e7ad817 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.117 (165.227.249.117) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x00d0 (208) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 254 Protocol: ESP (0x32) Header checksum: 0x7ccc (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.117 (165.227.249.117) Encapsulating Security Payload SPI: 0x278293ab Sequence: 4 Data (92 bytes) 0000 00 10 db 16 db f6 00 50 fc 84 d2 ec 08 00 45 00 .......P......E. 0010 00 78 00 d0 00 00 fe 32 7c cc a5 e3 f9 7a a5 e3 .x.....2|....z.. 0020 f9 75 27 82 93 ab 00 00 00 04 56 63 60 f6 7b 78 .u'.......Vc`.{x 0030 f6 b6 c0 ce f1 98 91 bf ef c9 38 10 67 2d 93 20 ..........8.g-. 0040 bb f1 b4 c4 34 da 2e bb bb c4 4e 3a 3c 83 b6 e1 ....4.....N:<... 0050 35 4b 4d 94 49 14 15 33 76 46 c1 09 de f1 a3 bb 5KM.I..3vF...... 0060 1d 27 8b ad 12 b1 df b4 a7 1b 3e 1e 52 c9 09 07 .'........>.R... 0070 17 30 d7 8b d8 a7 85 e5 d6 8a ae 6b 5d 3f 96 0a .0.........k]?.. 0080 0c 48 00 bb 5a dc 0e 7a d8 17 .H..Z..z.. Frame 22 (138 bytes on wire, 138 bytes captured) Arrival Time: Mar 25, 2004 14:38:35.534674000 Time delta from previous packet: 0.000615000 seconds Time since reference or first frame: 1.988295000 seconds Frame Number: 22 Packet Length: 138 bytes Capture Length: 138 bytes Ethernet II, Src: 00:10:db:16:db:f6, Dst: 00:0c:29:fc:0c:9f Destination: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Source: 00:10:db:16:db:f6 (00:10:db:16:db:f6) Type: IP (0x0800) Frame check sequence: 0x5c7d980c (correct) Internet Protocol, Src Addr: 165.227.249.117 (165.227.249.117), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x04dc (1244) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x36c1 (correct) Source: 165.227.249.117 (165.227.249.117) Destination: 165.227.249.122 (165.227.249.122) Encapsulating Security Payload SPI: 0x10386d26 Sequence: 4 Data (92 bytes) 0000 00 0c 29 fc 0c 9f 00 10 db 16 db f6 08 00 45 00 ..)...........E. 0010 00 78 04 dc 00 00 40 32 36 c1 a5 e3 f9 75 a5 e3 .x....@26....u.. 0020 f9 7a 10 38 6d 26 00 00 00 04 b7 b6 f9 77 b5 78 .z.8m&.......w.x 0030 82 89 aa 65 89 fb 14 68 4b a9 2e 3e 6f ff 82 e7 ...e...hK..>o... 0040 3d b3 cf 1d b1 32 64 95 0a 58 98 94 c5 51 be 34 =....2d..X...Q.4 0050 b6 9b 3f fd 2a 28 b6 e1 4e 25 ee f9 5e e9 f8 86 ..?.*(..N%..^... 0060 21 27 01 1c c4 55 8e d0 f6 ab 39 73 b8 21 01 3d !'...U....9s.!.= 0070 7c 70 6e e8 bb 61 bc 20 37 a6 4b ef a9 5b 35 f3 |pn..a. 7.K..[5. 0080 00 6f da 23 09 09 5c 7d 98 0c .o.#..\}.. Frame 23 (122 bytes on wire, 122 bytes captured) Arrival Time: Mar 25, 2004 14:38:36.429597000 Time delta from previous packet: 0.894923000 seconds Time since reference or first frame: 2.883218000 seconds Frame Number: 23 Packet Length: 122 bytes Capture Length: 122 bytes Ethernet II, Src: 00:10:db:16:db:f6, Dst: 00:0c:29:fc:0c:9f Destination: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Source: 00:10:db:16:db:f6 (00:10:db:16:db:f6) Type: IP (0x0800) Frame check sequence: 0xe96ed460 (correct) Internet Protocol, Src Addr: 165.227.249.117 (165.227.249.117), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 104 Identification: 0x04de (1246) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x36cf (correct) Source: 165.227.249.117 (165.227.249.117) Destination: 165.227.249.122 (165.227.249.122) Encapsulating Security Payload SPI: 0x10386d26 Sequence: 5 Data (76 bytes) 0000 00 0c 29 fc 0c 9f 00 10 db 16 db f6 08 00 45 00 ..)...........E. 0010 00 68 04 de 00 00 40 32 36 cf a5 e3 f9 75 a5 e3 .h....@26....u.. 0020 f9 7a 10 38 6d 26 00 00 00 05 39 73 b8 21 01 3d .z.8m&....9s.!.= 0030 7c 70 6e e8 bb 61 bc 20 37 a6 a8 eb 27 00 c7 6a |pn..a. 7...'..j 0040 cf 05 d6 9a b2 c6 1c bc a4 5d 3b 32 2c 32 ed aa .........];2,2.. 0050 f2 cc 56 be 68 00 9e 52 e8 60 8a c2 7b 9d 6b 0e ..V.h..R.`..{.k. 0060 07 e6 50 37 a8 9f 1b 85 ff 05 ab 61 b0 76 86 8f ..P7.......a.v.. 0070 35 3b 2e 44 a0 7f e9 6e d4 60 5;.D...n.` Frame 24 (122 bytes on wire, 122 bytes captured) Arrival Time: Mar 25, 2004 14:38:36.430402000 Time delta from previous packet: 0.000805000 seconds Time since reference or first frame: 2.884023000 seconds Frame Number: 24 Packet Length: 122 bytes Capture Length: 122 bytes Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:10:db:16:db:f6 Destination: 00:10:db:16:db:f6 (00:10:db:16:db:f6) Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Type: IP (0x0800) Frame check sequence: 0xcadb33fd (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.117 (165.227.249.117) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 104 Identification: 0x00d1 (209) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x7bdb (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.117 (165.227.249.117) Encapsulating Security Payload SPI: 0x278293ab Sequence: 5 Data (76 bytes) 0000 00 10 db 16 db f6 00 0c 29 fc 0c 9f 08 00 45 00 ........).....E. 0010 00 68 00 d1 00 00 ff 32 7b db a5 e3 f9 7a a5 e3 .h.....2{....z.. 0020 f9 75 27 82 93 ab 00 00 00 05 3e 1e 52 c9 09 07 .u'.......>.R... 0030 17 30 d7 8b d8 a7 85 e5 d6 8a f0 6c 31 db bb 18 .0.........l1... 0040 9e eb d7 64 90 a2 05 00 e8 81 a0 eb d1 ed cd 12 ...d............ 0050 46 aa b9 87 91 fd 0f 6b 02 bc 63 db 66 52 9e 35 F......k..c.fR.5 0060 e2 81 2e 50 9d e6 06 e3 dc 6b e4 c1 68 a1 72 e9 ...P.....k..h.r. 0070 2e 40 0d 1f d6 6e ca db 33 fd .@...n..3. Frame 25 (138 bytes on wire, 138 bytes captured) Arrival Time: Mar 25, 2004 14:38:36.546415000 Time delta from previous packet: 0.116013000 seconds Time since reference or first frame: 3.000036000 seconds Frame Number: 25 Packet Length: 138 bytes Capture Length: 138 bytes Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:50:fc:84:d2:ec Destination: 00:50:fc:84:d2:ec (00:50:fc:84:d2:ec) Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Type: IP (0x0800) Frame check sequence: 0xc0122195 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.117 (165.227.249.117) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x00d2 (210) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x7bca (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.117 (165.227.249.117) Encapsulating Security Payload SPI: 0x278293ab Sequence: 6 Data (92 bytes) 0000 00 50 fc 84 d2 ec 00 0c 29 fc 0c 9f 08 00 45 00 .P......).....E. 0010 00 78 00 d2 00 00 ff 32 7b ca a5 e3 f9 7a a5 e3 .x.....2{....z.. 0020 f9 75 27 82 93 ab 00 00 00 06 63 db 66 52 9e 35 .u'.......c.fR.5 0030 e2 81 2e 50 9d e6 06 e3 dc 6b 56 cd 64 68 0e fd ...P.....kV.dh.. 0040 d7 48 e9 2a d4 d1 aa db 1b 98 36 58 46 92 d3 ea .H.*......6XF... 0050 92 ce 6c 51 f7 f1 4e 93 11 2c 03 b7 a5 e4 69 f4 ..lQ..N..,....i. 0060 5b 2d 59 d4 db c3 d7 be 4a a2 dd 10 39 34 90 fe [-Y.....J...94.. 0070 9a f7 06 71 2e b7 e0 02 a6 70 99 9a 71 07 c6 41 ...q.....p..q..A 0080 42 df 27 aa 9f b3 c0 12 21 95 B.'.....!. Frame 26 (138 bytes on wire, 138 bytes captured) Arrival Time: Mar 25, 2004 14:38:36.546609000 Time delta from previous packet: 0.000194000 seconds Time since reference or first frame: 3.000230000 seconds Frame Number: 26 Packet Length: 138 bytes Capture Length: 138 bytes Ethernet II, Src: 00:50:fc:84:d2:ec, Dst: 00:10:db:16:db:f6 Destination: 00:10:db:16:db:f6 (00:10:db:16:db:f6) Source: 00:50:fc:84:d2:ec (00:50:fc:84:d2:ec) Type: IP (0x0800) Frame check sequence: 0x7f382485 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.117 (165.227.249.117) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x00d2 (210) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 254 Protocol: ESP (0x32) Header checksum: 0x7cca (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.117 (165.227.249.117) Encapsulating Security Payload SPI: 0x278293ab Sequence: 6 Data (92 bytes) 0000 00 10 db 16 db f6 00 50 fc 84 d2 ec 08 00 45 00 .......P......E. 0010 00 78 00 d2 00 00 fe 32 7c ca a5 e3 f9 7a a5 e3 .x.....2|....z.. 0020 f9 75 27 82 93 ab 00 00 00 06 63 db 66 52 9e 35 .u'.......c.fR.5 0030 e2 81 2e 50 9d e6 06 e3 dc 6b 56 cd 64 68 0e fd ...P.....kV.dh.. 0040 d7 48 e9 2a d4 d1 aa db 1b 98 36 58 46 92 d3 ea .H.*......6XF... 0050 92 ce 6c 51 f7 f1 4e 93 11 2c 03 b7 a5 e4 69 f4 ..lQ..N..,....i. 0060 5b 2d 59 d4 db c3 d7 be 4a a2 dd 10 39 34 90 fe [-Y.....J...94.. 0070 9a f7 06 71 2e b7 e0 02 a6 70 99 9a 71 07 c6 41 ...q.....p..q..A 0080 42 df 27 aa 9f b3 7f 38 24 85 B.'....8$. Frame 27 (138 bytes on wire, 138 bytes captured) Arrival Time: Mar 25, 2004 14:38:36.547244000 Time delta from previous packet: 0.000635000 seconds Time since reference or first frame: 3.000865000 seconds Frame Number: 27 Packet Length: 138 bytes Capture Length: 138 bytes Ethernet II, Src: 00:10:db:16:db:f6, Dst: 00:0c:29:fc:0c:9f Destination: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Source: 00:10:db:16:db:f6 (00:10:db:16:db:f6) Type: IP (0x0800) Frame check sequence: 0xca8eeeed (correct) Internet Protocol, Src Addr: 165.227.249.117 (165.227.249.117), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x04df (1247) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x36be (correct) Source: 165.227.249.117 (165.227.249.117) Destination: 165.227.249.122 (165.227.249.122) Encapsulating Security Payload SPI: 0x10386d26 Sequence: 6 Data (92 bytes) 0000 00 0c 29 fc 0c 9f 00 10 db 16 db f6 08 00 45 00 ..)...........E. 0010 00 78 04 df 00 00 40 32 36 be a5 e3 f9 75 a5 e3 .x....@26....u.. 0020 f9 7a 10 38 6d 26 00 00 00 06 3b 32 2c 32 ed aa .z.8m&....;2,2.. 0030 f2 cc 56 be 68 00 9e 52 e8 60 98 f4 73 78 ac fc ..V.h..R.`..sx.. 0040 c1 2f d6 c6 c0 b2 fc 19 76 70 52 18 68 99 f3 48 ./......vpR.h..H 0050 9f cd 88 0b 9b 43 1c 4f 20 95 87 5d c2 46 63 75 .....C.O ..].Fcu 0060 e7 41 35 ec ea 50 05 7d 59 fd df ce 43 ba fe 7a .A5..P.}Y...C..z 0070 1e 6c 2e 01 20 12 3c 13 98 a8 e2 e6 39 99 0f a0 .l.. .<.....9... 0080 03 b8 34 f4 8f 6b ca 8e ee ed ..4..k....