Frame 1 (178 bytes on wire, 178 bytes captured) Arrival Time: Mar 26, 2004 09:40:14.030501000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 178 bytes Capture Length: 178 bytes Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:50:73:60:0d:41 Destination: 00:50:73:60:0d:41 (00:50:73:60:0d:41) Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Type: IP (0x0800) Frame check sequence: 0x59dbbe35 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.118 (165.227.249.118) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 160 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb94 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.118 (165.227.249.118) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 140 Checksum: 0xae33 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xA82CC8D3900CB2E2 Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 132 Security Association payload Next payload: Vendor ID (13) Length: 60 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 48 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 40 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): AES-CBC (7) Key-Length (14): Key-Length (128) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: NONE (0) Length: 44 Vendor ID: Check Point Check Point Product: VPN-1 Version: NG with Application Intelligence R55 0000 00 50 73 60 0d 41 00 0c 29 fc 0c 9f 08 00 45 00 .Ps`.A..).....E. 0010 00 a0 00 00 40 00 40 11 fb 94 a5 e3 f9 7a a5 e3 ....@.@......z.. 0020 f9 76 01 f4 01 f4 00 8c ae 33 a8 2c c8 d3 90 0c .v.......3.,.... 0030 b2 e2 00 00 00 00 00 00 00 00 01 10 02 00 00 00 ................ 0040 00 00 00 00 00 84 0d 00 00 3c 00 00 00 01 00 00 .........<...... 0050 00 01 00 00 00 30 01 01 00 01 00 00 00 28 01 01 .....0.......(.. 0060 00 00 80 01 00 07 80 0e 00 80 80 02 00 02 80 03 ................ 0070 00 01 80 04 00 02 80 0b 00 01 00 0c 00 04 00 00 ................ 0080 70 80 00 00 00 2c f4 ed 19 e0 c1 14 eb 51 6f aa p....,.......Qo. 0090 ac 0e e3 7d af 28 07 b4 38 1f 00 00 00 01 00 00 ...}.(..8....... 00a0 13 8d 00 00 00 00 00 00 00 00 18 80 00 00 59 db ..............Y. 00b0 be 35 .5 Frame 2 (130 bytes on wire, 130 bytes captured) Arrival Time: Mar 26, 2004 09:40:14.168114000 Time delta from previous packet: 0.137613000 seconds Time since reference or first frame: 0.137613000 seconds Frame Number: 2 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:50:73:60:0d:41, Dst: 00:0c:29:fc:0c:9f Destination: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Source: 00:50:73:60:0d:41 (00:50:73:60:0d:41) Type: IP (0x0800) Frame check sequence: 0x556c8667 (correct) Internet Protocol, Src Addr: 165.227.249.118 (165.227.249.118), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0011 (17) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: UDP (0x11) Header checksum: 0x7cb3 (correct) Source: 165.227.249.118 (165.227.249.118) Destination: 165.227.249.122 (165.227.249.122) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 92 Checksum: 0xb00d (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xA82CC8D3900CB2E2 Responder cookie: 0x1755301F5566C48C Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 84 Security Association payload Next payload: NONE (0) Length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 44 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 36 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): AES-CBC (7) Key-Length (14): Key-Length (128) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) 0000 00 0c 29 fc 0c 9f 00 50 73 60 0d 41 08 00 45 00 ..)....Ps`.A..E. 0010 00 70 00 11 00 00 ff 11 7c b3 a5 e3 f9 76 a5 e3 .p......|....v.. 0020 f9 7a 01 f4 01 f4 00 5c b0 0d a8 2c c8 d3 90 0c .z.....\...,.... 0030 b2 e2 17 55 30 1f 55 66 c4 8c 01 10 02 00 00 00 ...U0.Uf........ 0040 00 00 00 00 00 54 00 00 00 38 00 00 00 01 00 00 .....T...8...... 0050 00 01 00 00 00 2c 01 01 00 01 00 00 00 24 01 01 .....,.......$.. 0060 00 00 80 01 00 07 80 0e 00 80 80 02 00 02 80 04 ................ 0070 00 02 80 03 00 01 80 0b 00 01 80 0c 70 80 55 6c ............p.Ul 0080 86 67 .g Frame 3 (230 bytes on wire, 230 bytes captured) Arrival Time: Mar 26, 2004 09:40:14.177705000 Time delta from previous packet: 0.009591000 seconds Time since reference or first frame: 0.147204000 seconds Frame Number: 3 Packet Length: 230 bytes Capture Length: 230 bytes Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:50:73:60:0d:41 Destination: 00:50:73:60:0d:41 (00:50:73:60:0d:41) Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Type: IP (0x0800) Frame check sequence: 0x3a07dacf (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.118 (165.227.249.118) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 212 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb60 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.118 (165.227.249.118) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 192 Checksum: 0xf4eb (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xA82CC8D3900CB2E2 Responder cookie: 0x1755301F5566C48C Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 184 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 24 Nonce Data 0000 00 50 73 60 0d 41 00 0c 29 fc 0c 9f 08 00 45 00 .Ps`.A..).....E. 0010 00 d4 00 00 40 00 40 11 fb 60 a5 e3 f9 7a a5 e3 ....@.@..`...z.. 0020 f9 76 01 f4 01 f4 00 c0 f4 eb a8 2c c8 d3 90 0c .v.........,.... 0030 b2 e2 17 55 30 1f 55 66 c4 8c 04 10 02 00 00 00 ...U0.Uf........ 0040 00 00 00 00 00 b8 0a 00 00 84 e5 64 94 ca d6 04 ...........d.... 0050 e7 e4 39 25 1b fd 34 e9 ef 4d 49 6e 18 d1 f6 ad ..9%..4..MIn.... 0060 fb a7 fc e8 1a 19 73 f4 6a eb f5 99 2f 9f df 81 ......s.j.../... 0070 98 57 58 9d d6 48 f2 02 13 b3 7e 54 35 d6 9f 36 .WX..H....~T5..6 0080 94 db d5 86 b7 b2 ff 19 b0 d5 5a fe ba af 48 f9 ..........Z...H. 0090 e1 58 1a 3f 10 7d ce 27 96 24 c0 78 01 de 71 ce .X.?.}.'.$.x..q. 00a0 a7 58 ef 2f 24 2f 12 f3 94 10 36 2c 13 24 a1 c2 .X./$/....6,.$.. 00b0 34 f4 53 c7 54 a0 32 5a 96 9f bc 2a 43 f3 1c 55 4.S.T.2Z...*C..U 00c0 a9 95 01 ba 92 e7 5c 37 e9 db 00 00 00 18 5a fe ......\7......Z. 00d0 bc 58 b2 30 06 9a 2d f2 2c ec ee e3 f7 dc 2e 50 .X.0..-.,......P 00e0 d6 06 3a 07 da cf ..:... Frame 4 (302 bytes on wire, 302 bytes captured) Arrival Time: Mar 26, 2004 09:40:14.320218000 Time delta from previous packet: 0.142513000 seconds Time since reference or first frame: 0.289717000 seconds Frame Number: 4 Packet Length: 302 bytes Capture Length: 302 bytes Ethernet II, Src: 00:50:73:60:0d:41, Dst: 00:0c:29:fc:0c:9f Destination: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Source: 00:50:73:60:0d:41 (00:50:73:60:0d:41) Type: IP (0x0800) Frame check sequence: 0xec10234f (correct) Internet Protocol, Src Addr: 165.227.249.118 (165.227.249.118), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 284 Identification: 0x0012 (18) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: UDP (0x11) Header checksum: 0x7c06 (correct) Source: 165.227.249.118 (165.227.249.118) Destination: 165.227.249.122 (165.227.249.122) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 264 Checksum: 0x912b (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xA82CC8D3900CB2E2 Responder cookie: 0x1755301F5566C48C Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 256 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: Vendor ID (13) Length: 24 Nonce Data Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: unknown vendor ID: 0x12F5F28C457168A9702D9FE274CC0100 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-dpd-00.txt Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: unknown vendor ID: 0xE29297025567C48CEACB6802814E247B Vendor ID payload Next payload: NONE (0) Length: 12 Vendor ID: draft-beaulieu-ike-xauth-02.txt 0000 00 0c 29 fc 0c 9f 00 50 73 60 0d 41 08 00 45 00 ..)....Ps`.A..E. 0010 01 1c 00 12 00 00 ff 11 7c 06 a5 e3 f9 76 a5 e3 ........|....v.. 0020 f9 7a 01 f4 01 f4 01 08 91 2b a8 2c c8 d3 90 0c .z.......+.,.... 0030 b2 e2 17 55 30 1f 55 66 c4 8c 04 10 02 00 00 00 ...U0.Uf........ 0040 00 00 00 00 01 00 0a 00 00 84 02 55 4b 74 7e 4c ...........UKt~L 0050 6d 82 97 07 7b 09 f3 19 b0 02 af e1 02 ec a6 6c m...{..........l 0060 23 b4 31 97 fd d3 c1 7b 8a 76 6a 08 b3 8c b9 bf #.1....{.vj..... 0070 6c 64 d2 2a 11 51 58 07 17 79 db 82 e1 8b 5d ad ld.*.QX..y....]. 0080 95 e0 91 a1 f6 18 94 d7 3d 58 09 ef e4 99 ca 3f ........=X.....? 0090 a9 0b 2e 0f 20 9d e6 25 9a 25 e6 c7 7d be 3b 8e .... ..%.%..}.;. 00a0 7e 3e 03 b0 b4 de aa c4 7d 39 38 c3 fd 72 fb fa ~>......}98..r.. 00b0 45 62 06 38 5a 23 1c 9c ac 26 af 9e 93 f5 67 4f Eb.8Z#...&....gO 00c0 7c 27 ba 4e ba 4f b9 e2 23 e3 0d 00 00 18 09 7f |'.N.O..#....... 00d0 22 b9 77 30 a1 a9 c3 72 75 04 3b 6d 58 87 aa 26 ".w0...ru.;mX..& 00e0 58 d4 0d 00 00 14 12 f5 f2 8c 45 71 68 a9 70 2d X.........Eqh.p- 00f0 9f e2 74 cc 01 00 0d 00 00 14 af ca d7 13 68 a1 ..t...........h. 0100 f1 c9 6b 86 96 fc 77 57 01 00 0d 00 00 14 e2 92 ..k...wW........ 0110 97 02 55 67 c4 8c ea cb 68 02 81 4e 24 7b 00 00 ..Ug....h..N${.. 0120 00 0c 09 00 26 89 df d6 b7 12 ec 10 23 4f ....&.......#O Frame 5 (122 bytes on wire, 122 bytes captured) Arrival Time: Mar 26, 2004 09:40:14.327507000 Time delta from previous packet: 0.007289000 seconds Time since reference or first frame: 0.297006000 seconds Frame Number: 5 Packet Length: 122 bytes Capture Length: 122 bytes Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:50:73:60:0d:41 Destination: 00:50:73:60:0d:41 (00:50:73:60:0d:41) Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Type: IP (0x0800) Frame check sequence: 0x24cca1f9 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.118 (165.227.249.118) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 104 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfbcc (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.118 (165.227.249.118) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 84 Checksum: 0x3996 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xA82CC8D3900CB2E2 Responder cookie: 0x1755301F5566C48C Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 76 Encrypted payload (48 bytes) 0000 00 50 73 60 0d 41 00 0c 29 fc 0c 9f 08 00 45 00 .Ps`.A..).....E. 0010 00 68 00 00 40 00 40 11 fb cc a5 e3 f9 7a a5 e3 .h..@.@......z.. 0020 f9 76 01 f4 01 f4 00 54 39 96 a8 2c c8 d3 90 0c .v.....T9..,.... 0030 b2 e2 17 55 30 1f 55 66 c4 8c 05 10 02 01 00 00 ...U0.Uf........ 0040 00 00 00 00 00 4c 63 fb 90 97 99 63 99 f0 85 c5 .....Lc....c.... 0050 5a 26 bc 2e 76 66 d9 74 9d 90 47 e8 50 69 54 66 Z&..vf.t..G.PiTf 0060 46 69 cb 6a 4b a5 8a 57 ab 66 a6 c0 7d 4f 72 da Fi.jK..W.f..}Or. 0070 cb a1 32 b4 9f bd 24 cc a1 f9 ..2...$... Frame 6 (122 bytes on wire, 122 bytes captured) Arrival Time: Mar 26, 2004 09:40:14.333903000 Time delta from previous packet: 0.006396000 seconds Time since reference or first frame: 0.303402000 seconds Frame Number: 6 Packet Length: 122 bytes Capture Length: 122 bytes Ethernet II, Src: 00:50:73:60:0d:41, Dst: 00:0c:29:fc:0c:9f Destination: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Source: 00:50:73:60:0d:41 (00:50:73:60:0d:41) Type: IP (0x0800) Frame check sequence: 0x183fd3c5 (correct) Internet Protocol, Src Addr: 165.227.249.118 (165.227.249.118), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 104 Identification: 0x0013 (19) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: UDP (0x11) Header checksum: 0x7cb9 (correct) Source: 165.227.249.118 (165.227.249.118) Destination: 165.227.249.122 (165.227.249.122) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 84 Checksum: 0x1ff3 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xA82CC8D3900CB2E2 Responder cookie: 0x1755301F5566C48C Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 76 Encrypted payload (48 bytes) 0000 00 0c 29 fc 0c 9f 00 50 73 60 0d 41 08 00 45 00 ..)....Ps`.A..E. 0010 00 68 00 13 00 00 ff 11 7c b9 a5 e3 f9 76 a5 e3 .h......|....v.. 0020 f9 7a 01 f4 01 f4 00 54 1f f3 a8 2c c8 d3 90 0c .z.....T...,.... 0030 b2 e2 17 55 30 1f 55 66 c4 8c 05 10 02 01 00 00 ...U0.Uf........ 0040 00 00 00 00 00 4c 93 d7 77 ec c6 38 c0 b4 ff 7d .....L..w..8...} 0050 44 2b 3b 69 95 e5 09 7b d5 ae 1b 08 6d 64 db 74 D+;i...{....md.t 0060 ee 13 19 4b b7 04 8f c9 4d 76 35 1b 87 aa 5c 99 ...K....Mv5...\. 0070 a7 73 7e ef b9 e3 18 3f d3 c5 .s~....?.. Frame 7 (362 bytes on wire, 362 bytes captured) Arrival Time: Mar 26, 2004 09:40:14.343952000 Time delta from previous packet: 0.010049000 seconds Time since reference or first frame: 0.313451000 seconds Frame Number: 7 Packet Length: 362 bytes Capture Length: 362 bytes Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:50:73:60:0d:41 Destination: 00:50:73:60:0d:41 (00:50:73:60:0d:41) Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Type: IP (0x0800) Frame check sequence: 0x251be000 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.118 (165.227.249.118) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 344 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfadc (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.118 (165.227.249.118) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 324 Checksum: 0xde37 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xA82CC8D3900CB2E2 Responder cookie: 0x1755301F5566C48C Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x7CADB01A Length: 316 Encrypted payload (288 bytes) 0000 00 50 73 60 0d 41 00 0c 29 fc 0c 9f 08 00 45 00 .Ps`.A..).....E. 0010 01 58 00 00 40 00 40 11 fa dc a5 e3 f9 7a a5 e3 .X..@.@......z.. 0020 f9 76 01 f4 01 f4 01 44 de 37 a8 2c c8 d3 90 0c .v.....D.7.,.... 0030 b2 e2 17 55 30 1f 55 66 c4 8c 08 10 20 01 7c ad ...U0.Uf.... .|. 0040 b0 1a 00 00 01 3c 5e d3 2f a0 5c e8 c1 cb 38 b2 .....<^./.\...8. 0050 0d 46 74 86 7b ff 84 50 17 71 b6 06 b7 4c 55 85 .Ft.{..P.q...LU. 0060 df 79 78 ee a7 18 4c a0 28 90 fd 56 b9 35 52 ad .yx...L.(..V.5R. 0070 96 63 16 b2 71 f4 cb 05 bd 80 aa c2 9e 63 5f d3 .c..q........c_. 0080 b0 0a b4 7c a2 a2 5c d9 25 24 ff b4 ca 34 22 6b ...|..\.%$...4"k 0090 de 23 2c e6 ca a7 7e b8 72 23 35 f1 e5 dc 28 df .#,...~.r#5...(. 00a0 a8 94 d6 af a5 f5 e6 8d 5c e5 a4 6c 90 99 2e 96 ........\..l.... 00b0 5c f9 bf c9 7a 8a b4 2f b5 a2 e1 d3 96 5d d5 c7 \...z../.....].. 00c0 80 25 50 2a 9a 2e bf 32 c4 83 3d 97 91 e9 43 52 .%P*...2..=...CR 00d0 4e 68 67 85 db 5f 4b ac 06 f2 75 64 b9 e8 40 a8 Nhg.._K...ud..@. 00e0 fb 98 e9 e0 f4 05 16 49 dc 20 cd f3 13 72 eb bb .......I. ...r.. 00f0 0e 9b 27 54 a7 e7 3b 70 20 cb 54 77 64 cd ed 8e ..'T..;p .Twd... 0100 68 af 16 7d fd 9e e6 e8 7d fa 30 ed fe 69 98 46 h..}....}.0..i.F 0110 b9 c5 ad 9c ec 89 8a f8 8d a6 2b bb 84 0a 76 09 ..........+...v. 0120 4c 3e 2d e0 72 5d d0 84 39 24 55 e5 67 9a a3 5d L>-.r]..9$U.g..] 0130 a5 d4 4a 80 72 4d 88 aa f3 c3 28 55 f3 cd 63 f5 ..J.rM....(U..c. 0140 0f 62 d2 24 de 9f 39 29 27 af b2 d1 9e 6a 31 bf .b.$..9)'....j1. 0150 f2 d5 68 67 40 a6 2a cb 0c 65 94 ee 6a c2 86 4a ..hg@.*..e..j..J 0160 4a fb c6 0b f5 91 25 1b e0 00 J.....%... Frame 8 (378 bytes on wire, 378 bytes captured) Arrival Time: Mar 26, 2004 09:40:14.874008000 Time delta from previous packet: 0.530056000 seconds Time since reference or first frame: 0.843507000 seconds Frame Number: 8 Packet Length: 378 bytes Capture Length: 378 bytes Ethernet II, Src: 00:50:73:60:0d:41, Dst: 00:0c:29:fc:0c:9f Destination: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Source: 00:50:73:60:0d:41 (00:50:73:60:0d:41) Type: IP (0x0800) Frame check sequence: 0x336165b8 (correct) Internet Protocol, Src Addr: 165.227.249.118 (165.227.249.118), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 360 Identification: 0x0014 (20) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: UDP (0x11) Header checksum: 0x7bb8 (correct) Source: 165.227.249.118 (165.227.249.118) Destination: 165.227.249.122 (165.227.249.122) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 340 Checksum: 0xdb91 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xA82CC8D3900CB2E2 Responder cookie: 0x1755301F5566C48C Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x7CADB01A Length: 332 Encrypted payload (304 bytes) 0000 00 0c 29 fc 0c 9f 00 50 73 60 0d 41 08 00 45 00 ..)....Ps`.A..E. 0010 01 68 00 14 00 00 ff 11 7b b8 a5 e3 f9 76 a5 e3 .h......{....v.. 0020 f9 7a 01 f4 01 f4 01 54 db 91 a8 2c c8 d3 90 0c .z.....T...,.... 0030 b2 e2 17 55 30 1f 55 66 c4 8c 08 10 20 01 7c ad ...U0.Uf.... .|. 0040 b0 1a 00 00 01 4c b8 3f 4c ac df 1c 30 9b ea de .....L.?L...0... 0050 eb 51 44 9f ca fa 99 4b 78 bb e2 5d 24 8c a9 4e .QD....Kx..]$..N 0060 ca 91 d7 c1 85 bb 80 3e 80 78 09 8e d8 a1 e7 ef .......>.x...... 0070 0b 95 72 c1 81 56 63 f2 16 6d e6 e6 96 5f 34 88 ..r..Vc..m..._4. 0080 e8 86 0e db 35 9c ad f8 77 92 e6 ae 10 a0 55 81 ....5...w.....U. 0090 f6 1f 26 da b0 b9 8a 9f 34 5b 02 1b dc f7 d8 4d ..&.....4[.....M 00a0 86 7e ef fa c4 73 22 07 de 99 d9 ac 72 4a a4 ec .~...s".....rJ.. 00b0 86 21 09 56 18 f3 36 ff 3a 8a 3e 92 3e ae 37 5b .!.V..6.:.>.>.7[ 00c0 37 8c 90 18 8d 34 90 cf 56 90 48 54 57 80 22 a9 7....4..V.HTW.". 00d0 8b c6 ba b8 b8 d0 52 e3 e7 c7 39 74 f8 79 d4 d9 ......R...9t.y.. 00e0 61 7e 56 2f 36 fb 12 ec 04 8e 6e 02 a1 f3 e6 e6 a~V/6.....n..... 00f0 3c fd 67 3e 57 a8 e4 14 20 d2 f6 2e 12 1c 4f 33 <.g>W... .....O3 0100 d8 f8 ec 9c 5d 56 2e c5 80 04 24 fc c1 3d 12 9c ....]V....$..=.. 0110 26 b2 69 d8 57 50 43 7f 9b f9 d8 8a 49 76 86 5e &.i.WPC.....Iv.^ 0120 29 60 21 0a 00 fe fb b7 9f 65 46 a9 97 7d 52 05 )`!......eF..}R. 0130 05 74 aa 61 e2 d1 99 7b d1 1e 63 3d 32 a3 64 64 .t.a...{..c=2.dd 0140 52 12 17 84 cb 00 30 e1 95 97 53 85 e4 18 1b 92 R.....0...S..... 0150 58 26 6d 84 fe 37 8e f8 c3 bc 92 81 df 4f 78 c9 X&m..7.......Ox. 0160 64 2a 4d 13 38 ad 5e 4e df 07 69 2f 62 79 3d bf d*M.8.^N..i/by=. 0170 93 e6 de 99 e9 e3 33 61 65 b8 ......3ae. Frame 9 (106 bytes on wire, 106 bytes captured) Arrival Time: Mar 26, 2004 09:40:14.880712000 Time delta from previous packet: 0.006704000 seconds Time since reference or first frame: 0.850211000 seconds Frame Number: 9 Packet Length: 106 bytes Capture Length: 106 bytes Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:50:73:60:0d:41 Destination: 00:50:73:60:0d:41 (00:50:73:60:0d:41) Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Type: IP (0x0800) Frame check sequence: 0xfbc97189 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.118 (165.227.249.118) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 88 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfbdc (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.118 (165.227.249.118) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 68 Checksum: 0xaa8a (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xA82CC8D3900CB2E2 Responder cookie: 0x1755301F5566C48C Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x7CADB01A Length: 60 Encrypted payload (32 bytes) 0000 00 50 73 60 0d 41 00 0c 29 fc 0c 9f 08 00 45 00 .Ps`.A..).....E. 0010 00 58 00 00 40 00 40 11 fb dc a5 e3 f9 7a a5 e3 .X..@.@......z.. 0020 f9 76 01 f4 01 f4 00 44 aa 8a a8 2c c8 d3 90 0c .v.....D...,.... 0030 b2 e2 17 55 30 1f 55 66 c4 8c 08 10 20 01 7c ad ...U0.Uf.... .|. 0040 b0 1a 00 00 00 3c 4c d3 25 5d 0e fe b5 20 5c 69 ......R=.z..v..>..S. 0070 2f e4 ed ba d5 43 74 3d 19 40 6b 09 a6 ac 83 87 /....Ct=.@k..... 0080 3c 34 4e a2 73 1e bd 46 90 d7 <4N.s..F.. Frame 13 (138 bytes on wire, 138 bytes captured) Arrival Time: Mar 26, 2004 09:40:15.202746000 Time delta from previous packet: 0.000237000 seconds Time since reference or first frame: 1.172245000 seconds Frame Number: 13 Packet Length: 138 bytes Capture Length: 138 bytes Ethernet II, Src: 00:50:fc:84:d2:ec, Dst: 00:50:73:60:0d:41 Destination: 00:50:73:60:0d:41 (00:50:73:60:0d:41) Source: 00:50:fc:84:d2:ec (00:50:fc:84:d2:ec) Type: IP (0x0800) Frame check sequence: 0x80eef3b1 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.118 (165.227.249.118) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0111 (273) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 254 Protocol: ESP (0x32) Header checksum: 0x7c8a (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.118 (165.227.249.118) Encapsulating Security Payload SPI: 0x667a3781 Sequence: 1 Data (92 bytes) 0000 00 50 73 60 0d 41 00 50 fc 84 d2 ec 08 00 45 00 .Ps`.A.P......E. 0010 00 78 01 11 00 00 fe 32 7c 8a a5 e3 f9 7a a5 e3 .x.....2|....z.. 0020 f9 76 66 7a 37 81 00 00 00 01 86 36 df b4 01 60 .vfz7......6...` 0030 f4 42 71 47 32 21 10 ed 29 2b 81 e0 29 34 33 e7 .BqG2!..)+..)43. 0040 53 0a 87 e5 d6 91 79 6c 0d 1e 0e 48 aa a5 d9 d9 S.....yl...H.... 0050 72 e1 aa 0c 9a 3a 02 5c 80 65 e7 3c 03 69 0c 1b r....:.\.e.<.i.. 0060 3e 05 52 3d 17 7a ca 7f 76 01 1a 3e 05 c4 53 85 >.R=.z..v..>..S. 0070 2f e4 ed ba d5 43 74 3d 19 40 6b 09 a6 ac 83 87 /....Ct=.@k..... 0080 3c 34 4e a2 73 1e 80 ee f3 b1 <4N.s..... Frame 14 (138 bytes on wire, 138 bytes captured) Arrival Time: Mar 26, 2004 09:40:19.159266000 Time delta from previous packet: 3.956520000 seconds Time since reference or first frame: 5.128765000 seconds Frame Number: 14 Packet Length: 138 bytes Capture Length: 138 bytes Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:50:fc:84:d2:ec Destination: 00:50:fc:84:d2:ec (00:50:fc:84:d2:ec) Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Type: IP (0x0800) Frame check sequence: 0x5c7c42ee (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.118 (165.227.249.118) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0112 (274) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x7b89 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.118 (165.227.249.118) Encapsulating Security Payload SPI: 0x667a3781 Sequence: 2 Data (92 bytes) 0000 00 50 fc 84 d2 ec 00 0c 29 fc 0c 9f 08 00 45 00 .P......).....E. 0010 00 78 01 12 00 00 ff 32 7b 89 a5 e3 f9 7a a5 e3 .x.....2{....z.. 0020 f9 76 66 7a 37 81 00 00 00 02 1a 3e 05 c4 53 85 .vfz7......>..S. 0030 2f e4 ed ba d5 43 74 3d 19 40 fc 94 ad 1d 6d e6 /....Ct=.@....m. 0040 27 29 bc 1f c9 c2 6d 3f 16 f0 4d 84 7c 0e 28 b6 ')....m?..M.|.(. 0050 69 91 b3 58 b8 34 da a6 f4 97 53 3c 56 71 97 16 i..X.4....S..!...<1...h 0080 a4 e1 4c 69 97 af 5c 7c 42 ee ..Li..\|B. Frame 15 (138 bytes on wire, 138 bytes captured) Arrival Time: Mar 26, 2004 09:40:19.159478000 Time delta from previous packet: 0.000212000 seconds Time since reference or first frame: 5.128977000 seconds Frame Number: 15 Packet Length: 138 bytes Capture Length: 138 bytes Ethernet II, Src: 00:50:fc:84:d2:ec, Dst: 00:50:73:60:0d:41 Destination: 00:50:73:60:0d:41 (00:50:73:60:0d:41) Source: 00:50:fc:84:d2:ec (00:50:fc:84:d2:ec) Type: IP (0x0800) Frame check sequence: 0x61d42188 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.118 (165.227.249.118) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0112 (274) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 254 Protocol: ESP (0x32) Header checksum: 0x7c89 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.118 (165.227.249.118) Encapsulating Security Payload SPI: 0x667a3781 Sequence: 2 Data (92 bytes) 0000 00 50 73 60 0d 41 00 50 fc 84 d2 ec 08 00 45 00 .Ps`.A.P......E. 0010 00 78 01 12 00 00 fe 32 7c 89 a5 e3 f9 7a a5 e3 .x.....2|....z.. 0020 f9 76 66 7a 37 81 00 00 00 02 1a 3e 05 c4 53 85 .vfz7......>..S. 0030 2f e4 ed ba d5 43 74 3d 19 40 fc 94 ad 1d 6d e6 /....Ct=.@....m. 0040 27 29 bc 1f c9 c2 6d 3f 16 f0 4d 84 7c 0e 28 b6 ')....m?..M.|.(. 0050 69 91 b3 58 b8 34 da a6 f4 97 53 3c 56 71 97 16 i..X.4....S..!...<1...h 0080 a4 e1 4c 69 97 af 61 d4 21 88 ..Li..a.!. Frame 16 (138 bytes on wire, 138 bytes captured) Arrival Time: Mar 26, 2004 09:40:19.164287000 Time delta from previous packet: 0.004809000 seconds Time since reference or first frame: 5.133786000 seconds Frame Number: 16 Packet Length: 138 bytes Capture Length: 138 bytes Ethernet II, Src: 00:50:73:60:0d:41, Dst: 00:0c:29:fc:0c:9f Destination: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Source: 00:50:73:60:0d:41 (00:50:73:60:0d:41) Type: IP (0x0800) Frame check sequence: 0x3f58108f (correct) Internet Protocol, Src Addr: 165.227.249.118 (165.227.249.118), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0016 (22) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x7c85 (correct) Source: 165.227.249.118 (165.227.249.118) Destination: 165.227.249.122 (165.227.249.122) Encapsulating Security Payload SPI: 0x3ae900a3 Sequence: 1 Data (92 bytes) 0000 00 0c 29 fc 0c 9f 00 50 73 60 0d 41 08 00 45 00 ..)....Ps`.A..E. 0010 00 78 00 16 00 00 ff 32 7c 85 a5 e3 f9 76 a5 e3 .x.....2|....v.. 0020 f9 7a 3a e9 00 a3 00 00 00 01 83 6e 4e 44 b4 05 .z:........nND.. 0030 64 4f d0 b5 73 3d 33 1f be 07 64 9c 31 b3 5e 1d dO..s=3...d.1.^. 0040 0d 51 2c 41 00 28 67 e0 88 20 4c 83 60 5b e3 65 .Q,A.(g.. L.`[.e 0050 f3 e9 ad e1 b5 bd fa 3a ed 62 39 c2 2d ec 67 cb .......:.b9.-.g. 0060 ff 54 66 03 e3 7c 48 c3 19 03 7e c0 db 40 12 77 .Tf..|H...~..@.w 0070 57 0b a5 c8 6b fd 0a ff 7f 3e b3 3d 17 26 1d 0c W...k....>.=.&.. 0080 4e 0e 85 12 d7 3a 3f 58 10 8f N....:?X.. Frame 17 (138 bytes on wire, 138 bytes captured) Arrival Time: Mar 26, 2004 09:40:20.208891000 Time delta from previous packet: 1.044604000 seconds Time since reference or first frame: 6.178390000 seconds Frame Number: 17 Packet Length: 138 bytes Capture Length: 138 bytes Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:50:fc:84:d2:ec Destination: 00:50:fc:84:d2:ec (00:50:fc:84:d2:ec) Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Type: IP (0x0800) Frame check sequence: 0xb521232c (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.118 (165.227.249.118) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0113 (275) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x7b88 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.118 (165.227.249.118) Encapsulating Security Payload SPI: 0x667a3781 Sequence: 3 Data (92 bytes) 0000 00 50 fc 84 d2 ec 00 0c 29 fc 0c 9f 08 00 45 00 .P......).....E. 0010 00 78 01 13 00 00 ff 32 7b 88 a5 e3 f9 7a a5 e3 .x.....2{....z.. 0020 f9 76 66 7a 37 81 00 00 00 03 03 39 99 e7 2e 3f .vfz7......9...? 0030 76 4e e3 3e 90 eb 21 ac d0 1b cb 3d 14 6a 14 0c vN.>..!....=.j.. 0040 a1 ff 72 5a 42 05 0b 54 c8 65 f8 02 4e 51 5f 11 ..rZB..T.e..NQ_. 0050 13 75 6a 74 c3 1e b4 39 51 37 5d 62 fc 9d 00 a0 .ujt...9Q7]b.... 0060 02 ab 03 a9 33 33 3c c5 6c be 2c f1 17 2e ad 19 ....33<.l.,..... 0070 20 94 c9 42 55 8a a7 3a 44 9f d7 6e b3 eb 71 96 ..BU..:D..n..q. 0080 c6 26 d6 27 62 09 b5 21 23 2c .&.'b..!#, Frame 18 (138 bytes on wire, 138 bytes captured) Arrival Time: Mar 26, 2004 09:40:20.209071000 Time delta from previous packet: 0.000180000 seconds Time since reference or first frame: 6.178570000 seconds Frame Number: 18 Packet Length: 138 bytes Capture Length: 138 bytes Ethernet II, Src: 00:50:fc:84:d2:ec, Dst: 00:50:73:60:0d:41 Destination: 00:50:73:60:0d:41 (00:50:73:60:0d:41) Source: 00:50:fc:84:d2:ec (00:50:fc:84:d2:ec) Type: IP (0x0800) Frame check sequence: 0x8889404a (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.118 (165.227.249.118) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0113 (275) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 254 Protocol: ESP (0x32) Header checksum: 0x7c88 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.118 (165.227.249.118) Encapsulating Security Payload SPI: 0x667a3781 Sequence: 3 Data (92 bytes) 0000 00 50 73 60 0d 41 00 50 fc 84 d2 ec 08 00 45 00 .Ps`.A.P......E. 0010 00 78 01 13 00 00 fe 32 7c 88 a5 e3 f9 7a a5 e3 .x.....2|....z.. 0020 f9 76 66 7a 37 81 00 00 00 03 03 39 99 e7 2e 3f .vfz7......9...? 0030 76 4e e3 3e 90 eb 21 ac d0 1b cb 3d 14 6a 14 0c vN.>..!....=.j.. 0040 a1 ff 72 5a 42 05 0b 54 c8 65 f8 02 4e 51 5f 11 ..rZB..T.e..NQ_. 0050 13 75 6a 74 c3 1e b4 39 51 37 5d 62 fc 9d 00 a0 .ujt...9Q7]b.... 0060 02 ab 03 a9 33 33 3c c5 6c be 2c f1 17 2e ad 19 ....33<.l.,..... 0070 20 94 c9 42 55 8a a7 3a 44 9f d7 6e b3 eb 71 96 ..BU..:D..n..q. 0080 c6 26 d6 27 62 09 88 89 40 4a .&.'b...@J Frame 19 (138 bytes on wire, 138 bytes captured) Arrival Time: Mar 26, 2004 09:40:20.211965000 Time delta from previous packet: 0.002894000 seconds Time since reference or first frame: 6.181464000 seconds Frame Number: 19 Packet Length: 138 bytes Capture Length: 138 bytes Ethernet II, Src: 00:50:73:60:0d:41, Dst: 00:0c:29:fc:0c:9f Destination: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Source: 00:50:73:60:0d:41 (00:50:73:60:0d:41) Type: IP (0x0800) Frame check sequence: 0x10adbc3d (correct) Internet Protocol, Src Addr: 165.227.249.118 (165.227.249.118), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0017 (23) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x7c84 (correct) Source: 165.227.249.118 (165.227.249.118) Destination: 165.227.249.122 (165.227.249.122) Encapsulating Security Payload SPI: 0x3ae900a3 Sequence: 2 Data (92 bytes) 0000 00 0c 29 fc 0c 9f 00 50 73 60 0d 41 08 00 45 00 ..)....Ps`.A..E. 0010 00 78 00 17 00 00 ff 32 7c 84 a5 e3 f9 76 a5 e3 .x.....2|....v.. 0020 f9 7a 3a e9 00 a3 00 00 00 02 63 e4 aa b6 8e 64 .z:.......c....d 0030 bf a5 56 a9 9f 2f 78 ea 5e 75 95 a4 04 77 28 de ..V../x.^u...w(. 0040 00 29 4c 14 14 cd 3a 10 5e 11 82 2a b9 de 8d 14 .)L...:.^..*.... 0050 47 e7 cd 77 d8 cc 73 64 20 3c 1d f1 64 81 47 65 G..w..sd <..d.Ge 0060 24 17 eb a5 dc 56 49 13 04 c2 ac 7f 23 75 37 66 $....VI.....#u7f 0070 3d e3 f7 c7 1f 43 d5 5e 33 64 a5 d2 42 51 69 11 =....C.^3d..BQi. 0080 87 bb 5f a9 db 15 10 ad bc 3d .._......= Frame 20 (138 bytes on wire, 138 bytes captured) Arrival Time: Mar 26, 2004 09:40:21.232177000 Time delta from previous packet: 1.020212000 seconds Time since reference or first frame: 7.201676000 seconds Frame Number: 20 Packet Length: 138 bytes Capture Length: 138 bytes Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:50:fc:84:d2:ec Destination: 00:50:fc:84:d2:ec (00:50:fc:84:d2:ec) Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Type: IP (0x0800) Frame check sequence: 0xa7fa5563 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.118 (165.227.249.118) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0114 (276) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x7b87 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.118 (165.227.249.118) Encapsulating Security Payload SPI: 0x667a3781 Sequence: 4 Data (92 bytes) 0000 00 50 fc 84 d2 ec 00 0c 29 fc 0c 9f 08 00 45 00 .P......).....E. 0010 00 78 01 14 00 00 ff 32 7b 87 a5 e3 f9 7a a5 e3 .x.....2{....z.. 0020 f9 76 66 7a 37 81 00 00 00 04 2c f1 17 2e ad 19 .vfz7.....,..... 0030 20 94 c9 42 55 8a a7 3a 44 9f 6e e4 87 f8 6b f2 ..BU..:D.n...k. 0040 1e 8b 97 56 5d 8c f6 a1 6c 95 d5 4f aa 1a 88 02 ...V]...l..O.... 0050 be 6a b9 0b d5 69 6d 1e a9 a9 72 03 74 c3 33 19 .j...im...r.t.3. 0060 08 bf 62 14 e4 26 85 b6 6f 14 86 1d 79 74 63 d7 ..b..&..o...ytc. 0070 7f 9b 9a 63 28 3e ca 2e 6c c6 23 e2 77 c7 23 1f ...c(>..l.#.w.#. 0080 57 0a f7 b0 55 cc a7 fa 55 63 W...U...Uc Frame 21 (138 bytes on wire, 138 bytes captured) Arrival Time: Mar 26, 2004 09:40:21.232386000 Time delta from previous packet: 0.000209000 seconds Time since reference or first frame: 7.201885000 seconds Frame Number: 21 Packet Length: 138 bytes Capture Length: 138 bytes Ethernet II, Src: 00:50:fc:84:d2:ec, Dst: 00:50:73:60:0d:41 Destination: 00:50:73:60:0d:41 (00:50:73:60:0d:41) Source: 00:50:fc:84:d2:ec (00:50:fc:84:d2:ec) Type: IP (0x0800) Frame check sequence: 0x9a523605 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.118 (165.227.249.118) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0114 (276) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 254 Protocol: ESP (0x32) Header checksum: 0x7c87 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.118 (165.227.249.118) Encapsulating Security Payload SPI: 0x667a3781 Sequence: 4 Data (92 bytes) 0000 00 50 73 60 0d 41 00 50 fc 84 d2 ec 08 00 45 00 .Ps`.A.P......E. 0010 00 78 01 14 00 00 fe 32 7c 87 a5 e3 f9 7a a5 e3 .x.....2|....z.. 0020 f9 76 66 7a 37 81 00 00 00 04 2c f1 17 2e ad 19 .vfz7.....,..... 0030 20 94 c9 42 55 8a a7 3a 44 9f 6e e4 87 f8 6b f2 ..BU..:D.n...k. 0040 1e 8b 97 56 5d 8c f6 a1 6c 95 d5 4f aa 1a 88 02 ...V]...l..O.... 0050 be 6a b9 0b d5 69 6d 1e a9 a9 72 03 74 c3 33 19 .j...im...r.t.3. 0060 08 bf 62 14 e4 26 85 b6 6f 14 86 1d 79 74 63 d7 ..b..&..o...ytc. 0070 7f 9b 9a 63 28 3e ca 2e 6c c6 23 e2 77 c7 23 1f ...c(>..l.#.w.#. 0080 57 0a f7 b0 55 cc 9a 52 36 05 W...U..R6. Frame 22 (138 bytes on wire, 138 bytes captured) Arrival Time: Mar 26, 2004 09:40:21.235257000 Time delta from previous packet: 0.002871000 seconds Time since reference or first frame: 7.204756000 seconds Frame Number: 22 Packet Length: 138 bytes Capture Length: 138 bytes Ethernet II, Src: 00:50:73:60:0d:41, Dst: 00:0c:29:fc:0c:9f Destination: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Source: 00:50:73:60:0d:41 (00:50:73:60:0d:41) Type: IP (0x0800) Frame check sequence: 0x603fa9b5 (correct) Internet Protocol, Src Addr: 165.227.249.118 (165.227.249.118), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0018 (24) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x7c83 (correct) Source: 165.227.249.118 (165.227.249.118) Destination: 165.227.249.122 (165.227.249.122) Encapsulating Security Payload SPI: 0x3ae900a3 Sequence: 3 Data (92 bytes) 0000 00 0c 29 fc 0c 9f 00 50 73 60 0d 41 08 00 45 00 ..)....Ps`.A..E. 0010 00 78 00 18 00 00 ff 32 7c 83 a5 e3 f9 76 a5 e3 .x.....2|....v.. 0020 f9 7a 3a e9 00 a3 00 00 00 03 77 db 0a 10 8a bc .z:.......w..... 0030 ad ed e4 14 bf b1 11 47 74 7a 65 d2 4c 2c 4a dd .......Gtze.L,J. 0040 2a bb 94 7f 67 14 8e d2 9d cc 0c a9 84 54 c4 13 *...g........T.. 0050 2b 7b 13 f2 6d 08 1a f9 13 ac 3a 8f bc 49 35 c6 +{..m.....:..I5. 0060 ca c9 37 3b 0c af 5f 8e 6d 97 cf d6 b8 2e 98 b7 ..7;.._.m....... 0070 7f 55 f2 1f 31 23 f9 82 2a da 73 93 eb bb dd e4 .U..1#..*.s..... 0080 50 5b 73 f4 45 38 60 3f a9 b5 P[s.E8`?..