Frame 1 (174 bytes on wire, 174 bytes captured) Arrival Time: Jun 30, 2005 11:24:49.354024000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 174 bytes Capture Length: 174 bytes Ethernet II, Src: 00:0c:29:89:f2:82, Dst: 00:09:5b:2b:a8:d7 Destination: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Source: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Type: IP (0x0800) Frame check sequence: 0x7586c161 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.125 (165.227.249.125) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 156 Identification: 0x010b (267) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfa86 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.125 (165.227.249.125) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 136 Checksum: 0x76cb (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x56DB6B1ADF9D6D10 Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 128 Security Association payload Next payload: Vendor ID (13) Length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 44 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 36 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: NONE (0) Length: 44 Vendor ID: Check Point Check Point Product: VPN-1 Version: NG with Application Intelligence R55 0000 00 09 5b 2b a8 d7 00 0c 29 89 f2 82 08 00 45 00 ..[+....).....E. 0010 00 9c 01 0b 40 00 40 11 fa 86 a5 e3 f9 7a a5 e3 ....@.@......z.. 0020 f9 7d 01 f4 01 f4 00 88 76 cb 56 db 6b 1a df 9d .}......v.V.k... 0030 6d 10 00 00 00 00 00 00 00 00 01 10 02 00 00 00 m............... 0040 00 00 00 00 00 80 0d 00 00 38 00 00 00 01 00 00 .........8...... 0050 00 01 00 00 00 2c 01 01 00 01 00 00 00 24 01 01 .....,.......$.. 0060 00 00 80 01 00 05 80 02 00 02 80 03 00 01 80 04 ................ 0070 00 02 80 0b 00 01 00 0c 00 04 00 00 70 80 00 00 ............p... 0080 00 2c f4 ed 19 e0 c1 14 eb 51 6f aa ac 0e e3 7d .,.......Qo....} 0090 af 28 07 b4 38 1f 00 00 00 01 00 00 13 8d 42 c2 .(..8.........B. 00a0 1b 13 00 00 00 00 18 00 00 00 75 86 c1 61 ..........u..a Frame 2 (130 bytes on wire, 130 bytes captured) Arrival Time: Jun 30, 2005 11:24:49.356733000 Time delta from previous packet: 0.002709000 seconds Time since reference or first frame: 0.002709000 seconds Frame Number: 2 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:09:5b:2b:a8:d7, Dst: 00:0c:29:89:f2:82 Destination: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Source: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Type: IP (0x0800) Frame check sequence: 0x66174cb7 (correct) Internet Protocol, Src Addr: 165.227.249.125 (165.227.249.125), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0046 (70) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3b78 (correct) Source: 165.227.249.125 (165.227.249.125) Destination: 165.227.249.122 (165.227.249.122) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 92 Checksum: 0x842c (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x56DB6B1ADF9D6D10 Responder cookie: 0x74B9FAD5956A2E20 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 84 Security Association payload Next payload: NONE (0) Length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 44 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 36 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) 0000 00 0c 29 89 f2 82 00 09 5b 2b a8 d7 08 00 45 00 ..).....[+....E. 0010 00 70 00 46 00 00 40 11 3b 78 a5 e3 f9 7d a5 e3 .p.F..@.;x...}.. 0020 f9 7a 01 f4 01 f4 00 5c 84 2c 56 db 6b 1a df 9d .z.....\.,V.k... 0030 6d 10 74 b9 fa d5 95 6a 2e 20 01 10 02 00 00 00 m.t....j. ...... 0040 00 00 00 00 00 54 00 00 00 38 00 00 00 01 00 00 .....T...8...... 0050 00 01 00 00 00 2c 01 01 00 01 00 00 00 24 01 01 .....,.......$.. 0060 00 00 80 01 00 05 80 02 00 02 80 03 00 01 80 04 ................ 0070 00 02 80 0b 00 01 00 0c 00 04 00 00 70 80 66 17 ............p.f. 0080 4c b7 L. Frame 3 (230 bytes on wire, 230 bytes captured) Arrival Time: Jun 30, 2005 11:24:49.361135000 Time delta from previous packet: 0.004402000 seconds Time since reference or first frame: 0.007111000 seconds Frame Number: 3 Packet Length: 230 bytes Capture Length: 230 bytes Ethernet II, Src: 00:0c:29:89:f2:82, Dst: 00:09:5b:2b:a8:d7 Destination: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Source: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Type: IP (0x0800) Frame check sequence: 0xcfb42671 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.125 (165.227.249.125) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 212 Identification: 0x010c (268) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfa4d (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.125 (165.227.249.125) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 192 Checksum: 0xed2d (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x56DB6B1ADF9D6D10 Responder cookie: 0x74B9FAD5956A2E20 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 184 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 24 Nonce Data 0000 00 09 5b 2b a8 d7 00 0c 29 89 f2 82 08 00 45 00 ..[+....).....E. 0010 00 d4 01 0c 40 00 40 11 fa 4d a5 e3 f9 7a a5 e3 ....@.@..M...z.. 0020 f9 7d 01 f4 01 f4 00 c0 ed 2d 56 db 6b 1a df 9d .}.......-V.k... 0030 6d 10 74 b9 fa d5 95 6a 2e 20 04 10 02 00 00 00 m.t....j. ...... 0040 00 00 00 00 00 b8 0a 00 00 84 85 29 c8 f5 07 cf ...........).... 0050 35 41 26 9e 39 de b6 00 2b 7f df f9 67 2b 61 e9 5A&.9...+...g+a. 0060 bb 8c fd f3 5f 18 fe ae 27 3f 48 6f df 87 3e 1a ...._...'?Ho..>. 0070 db 37 4c 3b 4d bb 1d 0e 17 f6 d8 94 6f 88 a4 68 .7L;M.......o..h 0080 1a b5 34 dc d8 a0 fe e4 fe 42 dd 8c b6 d3 dd aa ..4......B...... 0090 f2 29 bb 24 c2 67 0a c2 53 9f 58 b3 f9 5e cc 2a .).$.g..S.X..^.* 00a0 82 5c 1d 32 8b cf 31 b2 d7 b9 ac 52 ce b2 d0 77 .\.2..1....R...w 00b0 7b e1 7d 1b 2e 01 2a d9 04 ca f3 75 a2 f1 c3 12 {.}...*....u.... 00c0 29 0a fc df eb 48 c1 f6 0f 4b 00 00 00 18 d9 83 )....H...K...... 00d0 f3 3f a4 06 75 14 3b 03 42 24 e3 26 cd 53 1c 95 .?..u.;.B$.&.S.. 00e0 03 42 cf b4 26 71 .B..&q Frame 4 (218 bytes on wire, 218 bytes captured) Arrival Time: Jun 30, 2005 11:24:49.761833000 Time delta from previous packet: 0.400698000 seconds Time since reference or first frame: 0.407809000 seconds Frame Number: 4 Packet Length: 218 bytes Capture Length: 218 bytes Ethernet II, Src: 00:09:5b:2b:a8:d7, Dst: 00:0c:29:89:f2:82 Destination: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Source: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Type: IP (0x0800) Frame check sequence: 0x93a13f46 (correct) Internet Protocol, Src Addr: 165.227.249.125 (165.227.249.125), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 200 Identification: 0x0047 (71) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3b1f (correct) Source: 165.227.249.125 (165.227.249.125) Destination: 165.227.249.122 (165.227.249.122) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 180 Checksum: 0xf8f4 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x56DB6B1ADF9D6D10 Responder cookie: 0x74B9FAD5956A2E20 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 172 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 12 Nonce Data 0000 00 0c 29 89 f2 82 00 09 5b 2b a8 d7 08 00 45 00 ..).....[+....E. 0010 00 c8 00 47 00 00 40 11 3b 1f a5 e3 f9 7d a5 e3 ...G..@.;....}.. 0020 f9 7a 01 f4 01 f4 00 b4 f8 f4 56 db 6b 1a df 9d .z........V.k... 0030 6d 10 74 b9 fa d5 95 6a 2e 20 04 10 02 00 00 00 m.t....j. ...... 0040 00 00 00 00 00 ac 0a 00 00 84 05 80 c7 0b b3 5c ...............\ 0050 d3 e4 ff ee ee 02 34 db cd 9e 76 59 92 f6 fe e3 ......4...vY.... 0060 9a ec cd 42 b3 61 ea ad dc 96 07 7c 1b db b6 58 ...B.a.....|...X 0070 84 04 9f f9 30 c3 d8 fd 00 e5 85 97 a8 29 64 70 ....0........)dp 0080 00 5e b2 ca 15 f9 1c 02 ca f9 47 cb 55 c7 2d 3e .^........G.U.-> 0090 1c ea 79 d8 93 0c bf e0 a9 3d 68 1e fd db 65 88 ..y......=h...e. 00a0 e7 c4 60 b2 e6 6e 2a 57 2f a6 7a 99 33 47 fc f0 ..`..n*W/.z.3G.. 00b0 a8 7d ab 3b 37 ff 4d 4c 32 76 9d b0 c8 a2 97 50 .}.;7.ML2v.....P 00c0 e1 8a 2e eb ff d9 05 79 51 7b 00 00 00 0c c4 aa .......yQ{...... 00d0 56 f2 6c f6 a0 0b 93 a1 3f 46 V.l.....?F Frame 5 (114 bytes on wire, 114 bytes captured) Arrival Time: Jun 30, 2005 11:24:49.769145000 Time delta from previous packet: 0.007312000 seconds Time since reference or first frame: 0.415121000 seconds Frame Number: 5 Packet Length: 114 bytes Capture Length: 114 bytes Ethernet II, Src: 00:0c:29:89:f2:82, Dst: 00:09:5b:2b:a8:d7 Destination: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Source: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Type: IP (0x0800) Frame check sequence: 0xcddc922f (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.125 (165.227.249.125) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0x010d (269) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfac0 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.125 (165.227.249.125) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 76 Checksum: 0x9bca (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x56DB6B1ADF9D6D10 Responder cookie: 0x74B9FAD5956A2E20 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 68 Encrypted payload (40 bytes) 0000 00 09 5b 2b a8 d7 00 0c 29 89 f2 82 08 00 45 00 ..[+....).....E. 0010 00 60 01 0d 40 00 40 11 fa c0 a5 e3 f9 7a a5 e3 .`..@.@......z.. 0020 f9 7d 01 f4 01 f4 00 4c 9b ca 56 db 6b 1a df 9d .}.....L..V.k... 0030 6d 10 74 b9 fa d5 95 6a 2e 20 05 10 02 01 00 00 m.t....j. ...... 0040 00 00 00 00 00 44 13 f5 aa 6e ae b2 fb 9c 26 83 .....D...n....&. 0050 fc f2 4d 11 5d 4e 56 60 01 e9 9b e5 20 6c 96 32 ..M.]NV`.... l.2 0060 4c 95 a2 6b 45 d4 d0 40 49 cf c7 2d e0 66 cd dc L..kE..@I..-.f.. 0070 92 2f ./ Frame 6 (114 bytes on wire, 114 bytes captured) Arrival Time: Jun 30, 2005 11:24:50.257522000 Time delta from previous packet: 0.488377000 seconds Time since reference or first frame: 0.903498000 seconds Frame Number: 6 Packet Length: 114 bytes Capture Length: 114 bytes Ethernet II, Src: 00:09:5b:2b:a8:d7, Dst: 00:0c:29:89:f2:82 Destination: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Source: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Type: IP (0x0800) Frame check sequence: 0x06cdaf29 (correct) Internet Protocol, Src Addr: 165.227.249.125 (165.227.249.125), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0x0048 (72) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3b86 (correct) Source: 165.227.249.125 (165.227.249.125) Destination: 165.227.249.122 (165.227.249.122) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 76 Checksum: 0x78cc (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x56DB6B1ADF9D6D10 Responder cookie: 0x74B9FAD5956A2E20 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 68 Encrypted payload (40 bytes) 0000 00 0c 29 89 f2 82 00 09 5b 2b a8 d7 08 00 45 00 ..).....[+....E. 0010 00 60 00 48 00 00 40 11 3b 86 a5 e3 f9 7d a5 e3 .`.H..@.;....}.. 0020 f9 7a 01 f4 01 f4 00 4c 78 cc 56 db 6b 1a df 9d .z.....Lx.V.k... 0030 6d 10 74 b9 fa d5 95 6a 2e 20 05 10 02 01 00 00 m.t....j. ...... 0040 00 00 00 00 00 44 c2 e2 e2 4f d8 1b 11 1f 91 85 .....D...O...... 0050 a8 1d d1 ff 1c 92 c5 ae 83 f0 19 a3 33 b6 47 bc ............3.G. 0060 ab 8c ce e0 30 ff c6 b9 4c a4 73 64 33 48 06 cd ....0...L.sd3H.. 0070 af 29 .) Frame 7 (346 bytes on wire, 346 bytes captured) Arrival Time: Jun 30, 2005 11:24:50.264544000 Time delta from previous packet: 0.007022000 seconds Time since reference or first frame: 0.910520000 seconds Frame Number: 7 Packet Length: 346 bytes Capture Length: 346 bytes Ethernet II, Src: 00:0c:29:89:f2:82, Dst: 00:09:5b:2b:a8:d7 Destination: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Source: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Type: IP (0x0800) Frame check sequence: 0xe6f6127f (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.125 (165.227.249.125) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 328 Identification: 0x010e (270) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xf9d7 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.125 (165.227.249.125) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 308 Checksum: 0xe972 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x56DB6B1ADF9D6D10 Responder cookie: 0x74B9FAD5956A2E20 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x34385DCD Length: 300 Encrypted payload (272 bytes) 0000 00 09 5b 2b a8 d7 00 0c 29 89 f2 82 08 00 45 00 ..[+....).....E. 0010 01 48 01 0e 40 00 40 11 f9 d7 a5 e3 f9 7a a5 e3 .H..@.@......z.. 0020 f9 7d 01 f4 01 f4 01 34 e9 72 56 db 6b 1a df 9d .}.....4.rV.k... 0030 6d 10 74 b9 fa d5 95 6a 2e 20 08 10 20 01 34 38 m.t....j. .. .48 0040 5d cd 00 00 01 2c 21 b1 c3 0b 33 3d 7b d5 2e 5d ]....,!...3={..] 0050 ea 83 9a 2b e5 d3 83 6d 82 5a 70 ab 04 87 f0 5c ...+...m.Zp....\ 0060 24 77 16 13 71 74 d3 a9 7b de 27 44 a0 73 3c 14 $w..qt..{.'D.s<. 0070 04 13 45 7e 29 63 4e 8a 32 61 1b c7 b9 db 40 b4 ..E~)cN.2a....@. 0080 98 a7 34 10 1f 57 0d 0a e7 de bd 8f 17 24 c6 6b ..4..W.......$.k 0090 80 7b db 17 00 84 cd 48 20 26 29 1d 75 5c 93 5d .{.....H &).u\.] 00a0 72 ce 5a fe 07 cc 00 8b 15 c8 ff 5f c3 e2 06 e7 r.Z........_.... 00b0 07 37 4c 6b 82 c0 1a 99 c0 d2 b8 ce 27 02 f9 6e .7Lk........'..n 00c0 ca 69 bc 1d 59 06 a9 8d b7 54 67 96 53 39 a2 26 .i..Y....Tg.S9.& 00d0 8d 1a e8 cc 92 e5 d3 2d 7e 37 54 37 e8 ba 6f 68 .......-~7T7..oh 00e0 a7 a2 fa d4 8f b1 52 44 40 ac 52 f3 4e e1 0c eb ......RD@.R.N... 00f0 32 b3 63 0c 0a d0 34 e6 8c e9 2e 27 0b a5 d3 be 2.c...4....'.... 0100 74 a8 2c 99 c7 d6 e2 e2 89 4a 82 28 0f 12 28 a9 t.,......J.(..(. 0110 22 0a 0f d2 d9 28 1b cb 43 91 b9 a8 92 0b d1 37 "....(..C......7 0120 6c 0d cd d8 68 5f 89 61 21 f8 5f f5 39 c3 6d c7 l...h_.a!._.9.m. 0130 21 4c 0f c1 f8 f5 a7 05 9c bd 2a 1a 8e 45 0a 05 !L........*..E.. 0140 b5 39 02 02 5f 0c 38 27 19 43 eb 5f 52 7b 38 af .9.._.8'.C._R{8. 0150 01 ee 0d 9f e8 fc e6 f6 12 7f .......... Frame 8 (330 bytes on wire, 330 bytes captured) Arrival Time: Jun 30, 2005 11:24:50.671183000 Time delta from previous packet: 0.406639000 seconds Time since reference or first frame: 1.317159000 seconds Frame Number: 8 Packet Length: 330 bytes Capture Length: 330 bytes Ethernet II, Src: 00:09:5b:2b:a8:d7, Dst: 00:0c:29:89:f2:82 Destination: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Source: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Type: IP (0x0800) Frame check sequence: 0xec6d9f12 (correct) Internet Protocol, Src Addr: 165.227.249.125 (165.227.249.125), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 312 Identification: 0x0049 (73) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3aad (correct) Source: 165.227.249.125 (165.227.249.125) Destination: 165.227.249.122 (165.227.249.122) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 292 Checksum: 0xef72 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x56DB6B1ADF9D6D10 Responder cookie: 0x74B9FAD5956A2E20 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x34385DCD Length: 284 Encrypted payload (256 bytes) 0000 00 0c 29 89 f2 82 00 09 5b 2b a8 d7 08 00 45 00 ..).....[+....E. 0010 01 38 00 49 00 00 40 11 3a ad a5 e3 f9 7d a5 e3 .8.I..@.:....}.. 0020 f9 7a 01 f4 01 f4 01 24 ef 72 56 db 6b 1a df 9d .z.....$.rV.k... 0030 6d 10 74 b9 fa d5 95 6a 2e 20 08 10 20 01 34 38 m.t....j. .. .48 0040 5d cd 00 00 01 1c 54 51 a9 4e d5 fa fc c4 b0 f6 ].....TQ.N...... 0050 e7 5e 39 e1 65 68 ad 98 a2 8d fd 4c 7c 4e 70 fe .^9.eh.....L|Np. 0060 80 ba 8f 17 ba 95 3f 36 e7 4d e3 43 52 7f 20 24 ......?6.M.CR. $ 0070 b6 3b 81 0d cf 5f cc 64 1e dd a1 ac d1 0d 95 ed .;..._.d........ 0080 c8 8f 1c 06 05 38 24 57 8e 17 65 42 57 fe 49 5e .....8$W..eBW.I^ 0090 77 52 19 53 d7 99 9f b6 f5 a3 1e f5 ec 79 1e 3f wR.S.........y.? 00a0 55 e3 8f 7b e0 e6 71 9d a3 40 5c 20 4c 9b bc f7 U..{..q..@\ L... 00b0 10 37 ed 38 71 b4 b5 26 32 1c d2 a2 13 49 29 69 .7.8q..&2....I)i 00c0 fc d2 81 e6 8f 4c 31 bd b5 86 a1 a0 2b bf 38 37 .....L1.....+.87 00d0 db c2 0b e8 3e 6a 24 a6 a3 24 69 26 0b cb ee 81 ....>j$..$i&.... 00e0 10 3d 8b 62 08 f6 b0 b1 64 04 86 7a cd 03 9a 76 .=.b....d..z...v 00f0 b0 b6 fb 01 1f 5b 94 8f a8 50 07 a2 5a b9 4c 5a .....[...P..Z.LZ 0100 33 9d b7 cb 5e 1e 5f 22 62 1b 48 5d c5 4e bf cd 3...^._"b.H].N.. 0110 fa a2 70 10 b8 1a 93 d4 52 24 6c 66 a5 b0 fa e3 ..p.....R$lf.... 0120 be ea 8b 44 ac 8f 21 c2 d7 51 cf ce 63 81 c0 6a ...D..!..Q..c..j 0130 0b 90 2d fb 63 da 98 32 62 fe 5d f1 b5 00 1f 3a ..-.c..2b.]....: 0140 ac 9e 7b b4 6a fa ec 6d 9f 12 ..{.j..m.. Frame 9 (106 bytes on wire, 106 bytes captured) Arrival Time: Jun 30, 2005 11:24:50.677766000 Time delta from previous packet: 0.006583000 seconds Time since reference or first frame: 1.323742000 seconds Frame Number: 9 Packet Length: 106 bytes Capture Length: 106 bytes Ethernet II, Src: 00:0c:29:89:f2:82, Dst: 00:09:5b:2b:a8:d7 Destination: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Source: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Type: IP (0x0800) Frame check sequence: 0xabd55d44 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.125 (165.227.249.125) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 88 Identification: 0x010f (271) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfac6 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.125 (165.227.249.125) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 68 Checksum: 0x2556 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x56DB6B1ADF9D6D10 Responder cookie: 0x74B9FAD5956A2E20 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x34385DCD Length: 60 Encrypted payload (32 bytes) 0000 00 09 5b 2b a8 d7 00 0c 29 89 f2 82 08 00 45 00 ..[+....).....E. 0010 00 58 01 0f 40 00 40 11 fa c6 a5 e3 f9 7a a5 e3 .X..@.@......z.. 0020 f9 7d 01 f4 01 f4 00 44 25 56 56 db 6b 1a df 9d .}.....D%VV.k... 0030 6d 10 74 b9 fa d5 95 6a 2e 20 08 10 20 01 34 38 m.t....j. .. .48 0040 5d cd 00 00 00 3c a6 73 53 d5 84 07 5a f5 40 da ]....<.sS...Z.@. 0050 2c a7 fc 96 cb 05 a1 d6 88 9a 63 50 8e e8 e5 d3 ,.........cP.... 0060 da 02 77 d2 38 a0 ab d5 5d 44 ..w.8...]D Frame 10 (106 bytes on wire, 106 bytes captured) Arrival Time: Jun 30, 2005 11:24:50.791291000 Time delta from previous packet: 0.113525000 seconds Time since reference or first frame: 1.437267000 seconds Frame Number: 10 Packet Length: 106 bytes Capture Length: 106 bytes Ethernet II, Src: 00:0c:29:89:f2:82, Dst: 00:09:5b:2b:a8:d7 Destination: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Source: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Type: IP (0x0800) Frame check sequence: 0x2ef4619a (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.125 (165.227.249.125) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 88 Identification: 0x0110 (272) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfac5 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.125 (165.227.249.125) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 68 Checksum: 0x2556 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x56DB6B1ADF9D6D10 Responder cookie: 0x74B9FAD5956A2E20 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x34385DCD Length: 60 Encrypted payload (32 bytes) 0000 00 09 5b 2b a8 d7 00 0c 29 89 f2 82 08 00 45 00 ..[+....).....E. 0010 00 58 01 10 40 00 40 11 fa c5 a5 e3 f9 7a a5 e3 .X..@.@......z.. 0020 f9 7d 01 f4 01 f4 00 44 25 56 56 db 6b 1a df 9d .}.....D%VV.k... 0030 6d 10 74 b9 fa d5 95 6a 2e 20 08 10 20 01 34 38 m.t....j. .. .48 0040 5d cd 00 00 00 3c a6 73 53 d5 84 07 5a f5 40 da ]....<.sS...Z.@. 0050 2c a7 fc 96 cb 05 a1 d6 88 9a 63 50 8e e8 e5 d3 ,.........cP.... 0060 da 02 77 d2 38 a0 2e f4 61 9a ..w.8...a. Frame 11 (106 bytes on wire, 106 bytes captured) Arrival Time: Jun 30, 2005 11:24:50.892723000 Time delta from previous packet: 0.101432000 seconds Time since reference or first frame: 1.538699000 seconds Frame Number: 11 Packet Length: 106 bytes Capture Length: 106 bytes Ethernet II, Src: 00:0c:29:89:f2:82, Dst: 00:09:5b:2b:a8:d7 Destination: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Source: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Type: IP (0x0800) Frame check sequence: 0xca7ff15d (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.125 (165.227.249.125) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 88 Identification: 0x0111 (273) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfac4 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.125 (165.227.249.125) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 68 Checksum: 0x2556 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x56DB6B1ADF9D6D10 Responder cookie: 0x74B9FAD5956A2E20 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x34385DCD Length: 60 Encrypted payload (32 bytes) 0000 00 09 5b 2b a8 d7 00 0c 29 89 f2 82 08 00 45 00 ..[+....).....E. 0010 00 58 01 11 40 00 40 11 fa c4 a5 e3 f9 7a a5 e3 .X..@.@......z.. 0020 f9 7d 01 f4 01 f4 00 44 25 56 56 db 6b 1a df 9d .}.....D%VV.k... 0030 6d 10 74 b9 fa d5 95 6a 2e 20 08 10 20 01 34 38 m.t....j. .. .48 0040 5d cd 00 00 00 3c a6 73 53 d5 84 07 5a f5 40 da ]....<.sS...Z.@. 0050 2c a7 fc 96 cb 05 a1 d6 88 9a 63 50 8e e8 e5 d3 ,.........cP.... 0060 da 02 77 d2 38 a0 ca 7f f1 5d ..w.8....] Frame 12 (130 bytes on wire, 130 bytes captured) Arrival Time: Jun 30, 2005 11:24:50.991654000 Time delta from previous packet: 0.098931000 seconds Time since reference or first frame: 1.637630000 seconds Frame Number: 12 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:0c:29:89:f2:82, Dst: 00:09:5b:2b:a8:d7 Destination: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Source: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Type: IP (0x0800) Frame check sequence: 0xc8d78fc1 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.125 (165.227.249.125) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0094 (148) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x7c08 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.125 (165.227.249.125) Encapsulating Security Payload SPI: 0xb3d1f8f9 Sequence: 1 Data (84 bytes) 0000 00 09 5b 2b a8 d7 00 0c 29 89 f2 82 08 00 45 00 ..[+....).....E. 0010 00 70 00 94 00 00 ff 32 7c 08 a5 e3 f9 7a a5 e3 .p.....2|....z.. 0020 f9 7d b3 d1 f8 f9 00 00 00 01 8a 1e f9 75 b2 de .}...........u.. 0030 40 2b 12 29 79 35 69 07 4f 9e c4 b0 51 0b a5 ad @+.)y5i.O...Q... 0040 f5 e6 a2 bb 12 54 7c cd 2d 2e e4 72 b0 b4 2b 28 .....T|.-..r..+( 0050 f7 1c bd 9c 0e 65 73 1c 1a e6 56 76 b7 83 50 e8 .....es...Vv..P. 0060 aa e8 6a 01 8d c5 c5 9a ef 8f 35 b3 30 6c cf 2b ..j.......5.0l.+ 0070 77 c3 8b da cc 05 1c 1d dd 5f a2 10 1b 54 c8 d7 w........_...T.. 0080 8f c1 .. Frame 13 (130 bytes on wire, 130 bytes captured) Arrival Time: Jun 30, 2005 11:24:51.174894000 Time delta from previous packet: 0.183240000 seconds Time since reference or first frame: 1.820870000 seconds Frame Number: 13 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:09:5b:2b:a8:d7, Dst: 00:0c:29:89:f2:82 Destination: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Source: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Type: IP (0x0800) Frame check sequence: 0xf6abe22a (correct) Internet Protocol, Src Addr: 165.227.249.125 (165.227.249.125), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0xb115 (45333) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 30 Protocol: ESP (0x32) Header checksum: 0xac87 (correct) Source: 165.227.249.125 (165.227.249.125) Destination: 165.227.249.122 (165.227.249.122) Encapsulating Security Payload SPI: 0xbe8bde9a Sequence: 1 Data (84 bytes) 0000 00 0c 29 89 f2 82 00 09 5b 2b a8 d7 08 00 45 00 ..).....[+....E. 0010 00 70 b1 15 00 00 1e 32 ac 87 a5 e3 f9 7d a5 e3 .p.....2.....}.. 0020 f9 7a be 8b de 9a 00 00 00 01 a0 59 ab 04 0d ac .z.........Y.... 0030 3b 8b b0 43 99 b3 58 50 ef f7 bf 69 17 7e c6 60 ;..C..XP...i.~.` 0040 a5 12 10 f9 4a 0e f7 68 3d 9d 7e 35 c1 8a e5 0b ....J..h=.~5.... 0050 e3 d2 24 4a cd 48 0b 7d 84 c4 4e d1 ce 0c d6 2a ..$J.H.}..N....* 0060 62 77 0d 0e c0 37 bc 76 aa 16 1c e8 a4 de 23 49 bw...7.v......#I 0070 4e 11 07 8b 07 1d 1e 5e 20 41 04 30 4a 96 f6 ab N......^ A.0J... 0080 e2 2a .* Frame 14 (130 bytes on wire, 130 bytes captured) Arrival Time: Jun 30, 2005 11:24:51.191397000 Time delta from previous packet: 0.016503000 seconds Time since reference or first frame: 1.837373000 seconds Frame Number: 14 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:0c:29:89:f2:82, Dst: 00:09:5b:2b:a8:d7 Destination: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Source: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Type: IP (0x0800) Frame check sequence: 0x23fa851c (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.125 (165.227.249.125) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0095 (149) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x7c07 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.125 (165.227.249.125) Encapsulating Security Payload SPI: 0xb3d1f8f9 Sequence: 2 Data (84 bytes) 0000 00 09 5b 2b a8 d7 00 0c 29 89 f2 82 08 00 45 00 ..[+....).....E. 0010 00 70 00 95 00 00 ff 32 7c 07 a5 e3 f9 7a a5 e3 .p.....2|....z.. 0020 f9 7d b3 d1 f8 f9 00 00 00 02 3f 17 a7 86 5e 4f .}........?...^O 0030 f1 0e 73 41 0e 86 95 56 e8 30 1c db ec ae 32 9d ..sA...V.0....2. 0040 04 52 42 69 88 8b e5 9e 6a 80 90 34 cd 1c 11 86 .RBi....j..4.... 0050 4e 49 06 fb a3 e5 4e 20 7e cb 6f aa b7 15 c2 bf NI....N ~.o..... 0060 25 d9 25 62 c9 b7 cf 38 68 72 c4 4e f2 6a 84 91 %.%b...8hr.N.j.. 0070 fe e9 d8 a0 24 2d 19 63 0d 4b 46 6b f7 cd 23 fa ....$-.c.KFk..#. 0080 85 1c .. Frame 15 (130 bytes on wire, 130 bytes captured) Arrival Time: Jun 30, 2005 11:24:51.193003000 Time delta from previous packet: 0.001606000 seconds Time since reference or first frame: 1.838979000 seconds Frame Number: 15 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:09:5b:2b:a8:d7, Dst: 00:0c:29:89:f2:82 Destination: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Source: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Type: IP (0x0800) Frame check sequence: 0x471dec7b (correct) Internet Protocol, Src Addr: 165.227.249.125 (165.227.249.125), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x421a (16922) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 30 Protocol: ESP (0x32) Header checksum: 0x1b83 (correct) Source: 165.227.249.125 (165.227.249.125) Destination: 165.227.249.122 (165.227.249.122) Encapsulating Security Payload SPI: 0xbe8bde9a Sequence: 2 Data (84 bytes) 0000 00 0c 29 89 f2 82 00 09 5b 2b a8 d7 08 00 45 00 ..).....[+....E. 0010 00 70 42 1a 00 00 1e 32 1b 83 a5 e3 f9 7d a5 e3 .pB....2.....}.. 0020 f9 7a be 8b de 9a 00 00 00 02 1c e8 a4 de 23 49 .z............#I 0030 4e 11 f4 dd 19 46 eb b9 e4 6f f7 1c 61 3a 91 c4 N....F...o..a:.. 0040 59 43 e5 ae 59 49 b1 d4 11 48 18 65 14 d7 28 35 YC..YI...H.e..(5 0050 17 8b 06 78 2a 6e a4 41 02 e8 8b b9 4d 5c 65 1c ...x*n.A....M\e. 0060 13 93 ef a5 b0 10 8a a5 4b 16 77 42 b1 46 4f 02 ........K.wB.FO. 0070 ec 03 ea 59 a8 63 e2 15 16 21 ec b9 24 7f 47 1d ...Y.c...!..$.G. 0080 ec 7b .{ Frame 16 (130 bytes on wire, 130 bytes captured) Arrival Time: Jun 30, 2005 11:24:52.199031000 Time delta from previous packet: 1.006028000 seconds Time since reference or first frame: 2.845007000 seconds Frame Number: 16 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:0c:29:89:f2:82, Dst: 00:09:5b:2b:a8:d7 Destination: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Source: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Type: IP (0x0800) Frame check sequence: 0x0f7c7001 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.125 (165.227.249.125) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0096 (150) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x7c06 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.125 (165.227.249.125) Encapsulating Security Payload SPI: 0xb3d1f8f9 Sequence: 3 Data (84 bytes) 0000 00 09 5b 2b a8 d7 00 0c 29 89 f2 82 08 00 45 00 ..[+....).....E. 0010 00 70 00 96 00 00 ff 32 7c 06 a5 e3 f9 7a a5 e3 .p.....2|....z.. 0020 f9 7d b3 d1 f8 f9 00 00 00 03 71 f2 9c e9 72 4c .}........q...rL 0030 5d 9a d2 1e ff d0 19 9d ad e9 a7 c1 75 0b 22 6e ]...........u."n 0040 fb eb 06 c1 3a 37 7b 86 d3 ae 1c a8 05 1b 45 58 ....:7{.......EX 0050 72 fc 8a 4f 15 a8 a6 3d ba a9 61 ea 59 5f fe 9a r..O...=..a.Y_.. 0060 4a bc 7d 45 88 ba e5 7f 64 67 d2 9c 84 95 8a a6 J.}E....dg...... 0070 a5 6f 28 7c cb e6 5c af f6 c5 c3 af ca f9 0f 7c .o(|..\........| 0080 70 01 p. Frame 17 (130 bytes on wire, 130 bytes captured) Arrival Time: Jun 30, 2005 11:24:52.200742000 Time delta from previous packet: 0.001711000 seconds Time since reference or first frame: 2.846718000 seconds Frame Number: 17 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:09:5b:2b:a8:d7, Dst: 00:0c:29:89:f2:82 Destination: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Source: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Type: IP (0x0800) Frame check sequence: 0x8ab2b438 (correct) Internet Protocol, Src Addr: 165.227.249.125 (165.227.249.125), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x8bfd (35837) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 30 Protocol: ESP (0x32) Header checksum: 0xd19f (correct) Source: 165.227.249.125 (165.227.249.125) Destination: 165.227.249.122 (165.227.249.122) Encapsulating Security Payload SPI: 0xbe8bde9a Sequence: 3 Data (84 bytes) 0000 00 0c 29 89 f2 82 00 09 5b 2b a8 d7 08 00 45 00 ..).....[+....E. 0010 00 70 8b fd 00 00 1e 32 d1 9f a5 e3 f9 7d a5 e3 .p.....2.....}.. 0020 f9 7a be 8b de 9a 00 00 00 03 77 42 b1 46 4f 02 .z........wB.FO. 0030 ec 03 ba 81 ca f3 b4 40 c6 18 aa 66 64 3c d9 3d .......@...fd<.= 0040 ea 2c e8 61 74 9f c7 98 92 23 62 43 6d cc 0e 9e .,.at....#bCm... 0050 a0 6c d9 13 c9 83 8c 62 f0 88 34 a4 81 30 f3 66 .l.....b..4..0.f 0060 61 12 ed fb fc b6 f2 82 c3 fe 90 b6 46 8e 24 f5 a...........F.$. 0070 1d 40 6d e4 7c cf 2b 61 a3 4e bd 8a 61 a8 8a b2 .@m.|.+a.N..a... 0080 b4 38 .8 Frame 18 (130 bytes on wire, 130 bytes captured) Arrival Time: Jun 30, 2005 11:24:53.261872000 Time delta from previous packet: 1.061130000 seconds Time since reference or first frame: 3.907848000 seconds Frame Number: 18 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:0c:29:89:f2:82, Dst: 00:09:5b:2b:a8:d7 Destination: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Source: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Type: IP (0x0800) Frame check sequence: 0x3405f0ef (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.125 (165.227.249.125) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0097 (151) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x7c05 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.125 (165.227.249.125) Encapsulating Security Payload SPI: 0xb3d1f8f9 Sequence: 4 Data (84 bytes) 0000 00 09 5b 2b a8 d7 00 0c 29 89 f2 82 08 00 45 00 ..[+....).....E. 0010 00 70 00 97 00 00 ff 32 7c 05 a5 e3 f9 7a a5 e3 .p.....2|....z.. 0020 f9 7d b3 d1 f8 f9 00 00 00 04 4e 81 5b 9e fa 28 .}........N.[..( 0030 19 5b 57 bb 98 1a c7 04 4c d5 b7 9f 8e 12 6b 9e .[W.....L.....k. 0040 28 7f 37 4f d8 74 c4 1c 2d 62 4f 31 67 97 2b 73 (.7O.t..-bO1g.+s 0050 19 7b 76 e2 99 ff a1 af bc a8 30 0f 25 83 09 fc .{v.......0.%... 0060 f2 8a 35 47 aa 47 74 c0 c1 ae 55 a5 71 ce 25 4e ..5G.Gt...U.q.%N 0070 f6 37 47 cd b3 6d 53 2d 39 42 7c 4b 72 28 34 05 .7G..mS-9B|Kr(4. 0080 f0 ef .. Frame 19 (130 bytes on wire, 130 bytes captured) Arrival Time: Jun 30, 2005 11:24:53.263563000 Time delta from previous packet: 0.001691000 seconds Time since reference or first frame: 3.909539000 seconds Frame Number: 19 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:09:5b:2b:a8:d7, Dst: 00:0c:29:89:f2:82 Destination: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Source: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Type: IP (0x0800) Frame check sequence: 0x788f504c (correct) Internet Protocol, Src Addr: 165.227.249.125 (165.227.249.125), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x14d8 (5336) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 30 Protocol: ESP (0x32) Header checksum: 0x48c5 (correct) Source: 165.227.249.125 (165.227.249.125) Destination: 165.227.249.122 (165.227.249.122) Encapsulating Security Payload SPI: 0xbe8bde9a Sequence: 4 Data (84 bytes) 0000 00 0c 29 89 f2 82 00 09 5b 2b a8 d7 08 00 45 00 ..).....[+....E. 0010 00 70 14 d8 00 00 1e 32 48 c5 a5 e3 f9 7d a5 e3 .p.....2H....}.. 0020 f9 7a be 8b de 9a 00 00 00 04 90 b6 46 8e 24 f5 .z..........F.$. 0030 1d 40 1a 00 87 6d a9 e3 4e c8 da 1e 5a 5b 1d 84 .@...m..N...Z[.. 0040 3a 9c 5b ff 7d 5b 06 e4 f4 9f 5b ff 89 31 6c 59 :.[.}[....[..1lY 0050 d3 0f 5b 6a 66 f4 c6 67 ea 84 37 24 b5 c0 94 45 ..[jf..g..7$...E 0060 06 3f eb 6f 3a a7 2e 6f 38 fa b5 2f 13 10 96 6e .?.o:..o8../...n 0070 b6 c6 5e 9e 36 1a b8 50 2c cd 7d b2 fa c9 78 8f ..^.6..P,.}...x. 0080 50 4c PL Frame 20 (330 bytes on wire, 330 bytes captured) Arrival Time: Jun 30, 2005 11:24:54.365933000 Time delta from previous packet: 1.102370000 seconds Time since reference or first frame: 5.011909000 seconds Frame Number: 20 Packet Length: 330 bytes Capture Length: 330 bytes Ethernet II, Src: 00:09:5b:2b:a8:d7, Dst: 00:0c:29:89:f2:82 Destination: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Source: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Type: IP (0x0800) Frame check sequence: 0x9091c254 (correct) Internet Protocol, Src Addr: 165.227.249.125 (165.227.249.125), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 312 Identification: 0x004a (74) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3aac (correct) Source: 165.227.249.125 (165.227.249.125) Destination: 165.227.249.122 (165.227.249.122) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 292 Checksum: 0xef72 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x56DB6B1ADF9D6D10 Responder cookie: 0x74B9FAD5956A2E20 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x34385DCD Length: 284 Encrypted payload (256 bytes) 0000 00 0c 29 89 f2 82 00 09 5b 2b a8 d7 08 00 45 00 ..).....[+....E. 0010 01 38 00 4a 00 00 40 11 3a ac a5 e3 f9 7d a5 e3 .8.J..@.:....}.. 0020 f9 7a 01 f4 01 f4 01 24 ef 72 56 db 6b 1a df 9d .z.....$.rV.k... 0030 6d 10 74 b9 fa d5 95 6a 2e 20 08 10 20 01 34 38 m.t....j. .. .48 0040 5d cd 00 00 01 1c 54 51 a9 4e d5 fa fc c4 b0 f6 ].....TQ.N...... 0050 e7 5e 39 e1 65 68 ad 98 a2 8d fd 4c 7c 4e 70 fe .^9.eh.....L|Np. 0060 80 ba 8f 17 ba 95 3f 36 e7 4d e3 43 52 7f 20 24 ......?6.M.CR. $ 0070 b6 3b 81 0d cf 5f cc 64 1e dd a1 ac d1 0d 95 ed .;..._.d........ 0080 c8 8f 1c 06 05 38 24 57 8e 17 65 42 57 fe 49 5e .....8$W..eBW.I^ 0090 77 52 19 53 d7 99 9f b6 f5 a3 1e f5 ec 79 1e 3f wR.S.........y.? 00a0 55 e3 8f 7b e0 e6 71 9d a3 40 5c 20 4c 9b bc f7 U..{..q..@\ L... 00b0 10 37 ed 38 71 b4 b5 26 32 1c d2 a2 13 49 29 69 .7.8q..&2....I)i 00c0 fc d2 81 e6 8f 4c 31 bd b5 86 a1 a0 2b bf 38 37 .....L1.....+.87 00d0 db c2 0b e8 3e 6a 24 a6 a3 24 69 26 0b cb ee 81 ....>j$..$i&.... 00e0 10 3d 8b 62 08 f6 b0 b1 64 04 86 7a cd 03 9a 76 .=.b....d..z...v 00f0 b0 b6 fb 01 1f 5b 94 8f a8 50 07 a2 5a b9 4c 5a .....[...P..Z.LZ 0100 33 9d b7 cb 5e 1e 5f 22 62 1b 48 5d c5 4e bf cd 3...^._"b.H].N.. 0110 fa a2 70 10 b8 1a 93 d4 52 24 6c 66 a5 b0 fa e3 ..p.....R$lf.... 0120 be ea 8b 44 ac 8f 21 c2 d7 51 cf ce 63 81 c0 6a ...D..!..Q..c..j 0130 0b 90 2d fb 63 da 98 32 62 fe 5d f1 b5 00 1f 3a ..-.c..2b.]....: 0140 ac 9e 7b b4 6a fa 90 91 c2 54 ..{.j....T