Frame 1 (178 bytes on wire, 178 bytes captured)
    Arrival Time: Mar 26, 2004 10:00:01.430260000
    Time delta from previous packet: 0.000000000 seconds
    Time since reference or first frame: 0.000000000 seconds
    Frame Number: 1
    Packet Length: 178 bytes
    Capture Length: 178 bytes
Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:05:00:b8:00:e0
    Destination: 00:05:00:b8:00:e0 (00:05:00:b8:00:e0)
    Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f)
    Type: IP (0x0800)
    Frame check sequence: 0x6c6fef28 (correct)
Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.126 (165.227.249.126)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 160
    Identification: 0x0000 (0)
    Flags: 0x04
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0xfb8c (correct)
    Source: 165.227.249.122 (165.227.249.122)
    Destination: 165.227.249.126 (165.227.249.126)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 140
    Checksum: 0xa821 (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0xF73C43490D2C7247
    Responder cookie: 0x0000000000000000
    Next payload: Security Association (1)
    Version: 1.0
    Exchange type: Identity Protection (Main Mode) (2)
    Flags
        .... ...0 = No encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x00000000
    Length: 132
    Security Association payload
        Next payload: Vendor ID (13)
        Length: 60
        Domain of interpretation: IPSEC (1)
        Situation: IDENTITY (1)
        Proposal payload # 1
            Next payload: NONE (0)
            Length: 48
            Proposal number: 1
            Protocol ID: ISAKMP (1)
            SPI size: 0
            Number of transforms: 1
            Transform payload # 1
                Next payload: NONE (0)
                Length: 40
                Transform number: 1
                Transform ID: KEY_IKE (1)
                Encryption-Algorithm (1): AES-CBC (7)
                Key-Length (14): Key-Length (128)
                Hash-Algorithm (2): SHA (2)
                Authentication-Method (3): PSK (1)
                Group-Description (4): Alternate 1024-bit MODP group (2)
                Life-Type (11): Seconds (1)
                Life-Duration (12): Duration-Value (28800)
    Vendor ID payload
        Next payload: NONE (0)
        Length: 44
        Vendor ID: Check Point
            Check Point Product: VPN-1
            Version: NG with Application Intelligence R55

0000  00 05 00 b8 00 e0 00 0c 29 fc 0c 9f 08 00 45 00   ........).....E.
0010  00 a0 00 00 40 00 40 11 fb 8c a5 e3 f9 7a a5 e3   ....@.@......z..
0020  f9 7e 01 f4 01 f4 00 8c a8 21 f7 3c 43 49 0d 2c   .~.......!.<CI.,
0030  72 47 00 00 00 00 00 00 00 00 01 10 02 00 00 00   rG..............
0040  00 00 00 00 00 84 0d 00 00 3c 00 00 00 01 00 00   .........<......
0050  00 01 00 00 00 30 01 01 00 01 00 00 00 28 01 01   .....0.......(..
0060  00 00 80 01 00 07 80 0e 00 80 80 02 00 02 80 03   ................
0070  00 01 80 04 00 02 80 0b 00 01 00 0c 00 04 00 00   ................
0080  70 80 00 00 00 2c f4 ed 19 e0 c1 14 eb 51 6f aa   p....,.......Qo.
0090  ac 0e e3 7d af 28 07 b4 38 1f 00 00 00 01 00 00   ...}.(..8.......
00a0  13 8d 00 00 00 00 00 00 00 00 18 80 00 00 6c 6f   ..............lo
00b0  ef 28                                             .(

Frame 2 (154 bytes on wire, 154 bytes captured)
    Arrival Time: Mar 26, 2004 10:00:01.540804000
    Time delta from previous packet: 0.110544000 seconds
    Time since reference or first frame: 0.110544000 seconds
    Frame Number: 2
    Packet Length: 154 bytes
    Capture Length: 154 bytes
Ethernet II, Src: 00:05:00:b8:00:e0, Dst: 00:0c:29:fc:0c:9f
    Destination: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f)
    Source: 00:05:00:b8:00:e0 (00:05:00:b8:00:e0)
    Type: IP (0x0800)
    Frame check sequence: 0xc8275df8 (correct)
Internet Protocol, Src Addr: 165.227.249.126 (165.227.249.126), Dst Addr: 165.227.249.122 (165.227.249.122)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 136
    Identification: 0x0001 (1)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0xfba3 (correct)
    Source: 165.227.249.126 (165.227.249.126)
    Destination: 165.227.249.122 (165.227.249.122)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 116
    Checksum: 0x0935 (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0xF73C43490D2C7247
    Responder cookie: 0xD430D0A8BDE1BAA0
    Next payload: Security Association (1)
    Version: 1.0
    Exchange type: Identity Protection (Main Mode) (2)
    Flags
        .... ...0 = No encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x00000000
    Length: 108
    Security Association payload
        Next payload: Vendor ID (13)
        Length: 56
        Domain of interpretation: IPSEC (1)
        Situation: IDENTITY (1)
        Proposal payload # 1
            Next payload: NONE (0)
            Length: 44
            Proposal number: 1
            Protocol ID: ISAKMP (1)
            SPI size: 0
            Number of transforms: 1
            Transform payload # 1
                Next payload: NONE (0)
                Length: 36
                Transform number: 1
                Transform ID: KEY_IKE (1)
                Encryption-Algorithm (1): AES-CBC (7)
                Key-Length (14): Key-Length (128)
                Hash-Algorithm (2): SHA (2)
                Group-Description (4): Alternate 1024-bit MODP group (2)
                Authentication-Method (3): PSK (1)
                Life-Type (11): Seconds (1)
                Life-Duration (12): Duration-Value (28800)
    Vendor ID payload
        Next payload: NONE (0)
        Length: 24
        Vendor ID: Microsoft L2TP/IPSec VPN Client

0000  00 0c 29 fc 0c 9f 00 05 00 b8 00 e0 08 00 45 00   ..)...........E.
0010  00 88 00 01 00 00 80 11 fb a3 a5 e3 f9 7e a5 e3   .............~..
0020  f9 7a 01 f4 01 f4 00 74 09 35 f7 3c 43 49 0d 2c   .z.....t.5.<CI.,
0030  72 47 d4 30 d0 a8 bd e1 ba a0 01 10 02 00 00 00   rG.0............
0040  00 00 00 00 00 6c 0d 00 00 38 00 00 00 01 00 00   .....l...8......
0050  00 01 00 00 00 2c 01 01 00 01 00 00 00 24 01 01   .....,.......$..
0060  00 00 80 01 00 07 80 0e 00 80 80 02 00 02 80 04   ................
0070  00 02 80 03 00 01 80 0b 00 01 80 0c 70 80 00 00   ............p...
0080  00 18 40 48 b7 d5 6e bc e8 85 25 e7 de 7f 00 d6   ..@H..n...%.....
0090  c2 d3 c0 00 00 00 c8 27 5d f8                     .......'].

Frame 3 (230 bytes on wire, 230 bytes captured)
    Arrival Time: Mar 26, 2004 10:00:01.546257000
    Time delta from previous packet: 0.005453000 seconds
    Time since reference or first frame: 0.115997000 seconds
    Frame Number: 3
    Packet Length: 230 bytes
    Capture Length: 230 bytes
Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:05:00:b8:00:e0
    Destination: 00:05:00:b8:00:e0 (00:05:00:b8:00:e0)
    Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f)
    Type: IP (0x0800)
    Frame check sequence: 0xd76f231a (correct)
Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.126 (165.227.249.126)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 212
    Identification: 0x0000 (0)
    Flags: 0x04
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0xfb58 (correct)
    Source: 165.227.249.122 (165.227.249.122)
    Destination: 165.227.249.126 (165.227.249.126)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 192
    Checksum: 0x1353 (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0xF73C43490D2C7247
    Responder cookie: 0xD430D0A8BDE1BAA0
    Next payload: Key Exchange (4)
    Version: 1.0
    Exchange type: Identity Protection (Main Mode) (2)
    Flags
        .... ...0 = No encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x00000000
    Length: 184
    Key Exchange payload
        Next payload: Nonce (10)
        Length: 132
        Key Exchange Data
    Nonce payload
        Next payload: NONE (0)
        Length: 24
        Nonce Data

0000  00 05 00 b8 00 e0 00 0c 29 fc 0c 9f 08 00 45 00   ........).....E.
0010  00 d4 00 00 40 00 40 11 fb 58 a5 e3 f9 7a a5 e3   ....@.@..X...z..
0020  f9 7e 01 f4 01 f4 00 c0 13 53 f7 3c 43 49 0d 2c   .~.......S.<CI.,
0030  72 47 d4 30 d0 a8 bd e1 ba a0 04 10 02 00 00 00   rG.0............
0040  00 00 00 00 00 b8 0a 00 00 84 29 58 4d 21 0e 03   ..........)XM!..
0050  d7 e9 4a a9 3d ea da 07 f2 e2 18 30 4a ad 94 e4   ..J.=......0J...
0060  40 cc 0e 5a b1 37 45 cb a5 49 ef e6 44 d1 02 12   @..Z.7E..I..D...
0070  2e 60 2d 2c d3 d6 2d 9d ad 21 36 05 f1 f1 ca b0   .`-,..-..!6.....
0080  b0 d5 19 3a bf 90 33 b6 2a 1a 02 6a 54 d9 7a ff   ...:..3.*..jT.z.
0090  15 dc f8 c1 5b 29 d6 c4 ac fb 54 59 7f 72 c2 d4   ....[)....TY.r..
00a0  7c ee 83 1d 97 11 ef 6d dd 51 23 bf e2 78 31 ac   |......m.Q#..x1.
00b0  0a 1c 22 28 75 4b a9 c2 c1 c6 ff d6 1a 9d 2c 54   .."(uK........,T
00c0  27 26 f4 ef 1b 26 78 46 52 36 00 00 00 18 b4 4a   '&...&xFR6.....J
00d0  b6 05 a7 31 8a 9c d8 55 27 8f 79 09 c6 7f 17 fa   ...1...U'.y.....
00e0  d4 4b d7 6f 23 1a                                 .K.o#.

Frame 4 (302 bytes on wire, 302 bytes captured)
    Arrival Time: Mar 26, 2004 10:00:01.669811000
    Time delta from previous packet: 0.123554000 seconds
    Time since reference or first frame: 0.239551000 seconds
    Frame Number: 4
    Packet Length: 302 bytes
    Capture Length: 302 bytes
Ethernet II, Src: 00:05:00:b8:00:e0, Dst: 00:0c:29:fc:0c:9f
    Destination: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f)
    Source: 00:05:00:b8:00:e0 (00:05:00:b8:00:e0)
    Type: IP (0x0800)
    Frame check sequence: 0x6681a15e (correct)
Internet Protocol, Src Addr: 165.227.249.126 (165.227.249.126), Dst Addr: 165.227.249.122 (165.227.249.122)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 284
    Identification: 0x0002 (2)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0xfb0e (correct)
    Source: 165.227.249.126 (165.227.249.126)
    Destination: 165.227.249.122 (165.227.249.122)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 264
    Checksum: 0x84ba (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0xF73C43490D2C7247
    Responder cookie: 0xD430D0A8BDE1BAA0
    Next payload: Key Exchange (4)
    Version: 1.0
    Exchange type: Identity Protection (Main Mode) (2)
    Flags
        .... ...0 = No encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x00000000
    Length: 256
    Key Exchange payload
        Next payload: Nonce (10)
        Length: 132
        Key Exchange Data
    Nonce payload
        Next payload: Vendor ID (13)
        Length: 24
        Nonce Data
    Vendor ID payload
        Next payload: Vendor ID (13)
        Length: 20
        Vendor ID: unknown vendor ID: 0x12F5F28C457168A9702D9FE274CC0100
    Vendor ID payload
        Next payload: Vendor ID (13)
        Length: 12
        Vendor ID: draft-beaulieu-ike-xauth-02.txt
    Vendor ID payload
        Next payload: Vendor ID (13)
        Length: 20
        Vendor ID: unknown vendor ID: 0x21F777B5BDE0BAA09EE0DBB03E502DEE
    Vendor ID payload
        Next payload: NONE (0)
        Length: 20
        Vendor ID: unknown vendor ID: 0x1F07F70EAA6514D3B0FA96542A500400

0000  00 0c 29 fc 0c 9f 00 05 00 b8 00 e0 08 00 45 00   ..)...........E.
0010  01 1c 00 02 00 00 80 11 fb 0e a5 e3 f9 7e a5 e3   .............~..
0020  f9 7a 01 f4 01 f4 01 08 84 ba f7 3c 43 49 0d 2c   .z.........<CI.,
0030  72 47 d4 30 d0 a8 bd e1 ba a0 04 10 02 00 00 00   rG.0............
0040  00 00 00 00 01 00 0a 00 00 84 46 51 c1 b5 3e c2   ..........FQ..>.
0050  2d 83 0b bc cd 22 e1 49 54 e3 20 2a bb f6 ed 80   -....".IT. *....
0060  b0 b6 15 e9 e4 c5 ae 2c 5e 38 10 88 a3 48 60 87   .......,^8...H`.
0070  42 e7 ea db 25 82 28 f8 22 29 82 a2 1a 1a 22 50   B...%.(.")...."P
0080  f8 90 10 4a 2b b8 e2 5b 31 41 12 23 58 fa b9 90   ...J+..[1A.#X...
0090  40 64 28 ff 7d f3 ed 1d ad 2f 6d 7a 6f 21 2e d2   @d(.}..../mzo!..
00a0  71 f8 d8 bf 57 86 2a 06 d3 0b 45 ec d6 9b e0 bd   q...W.*...E.....
00b0  f9 d8 e0 25 24 36 17 b4 56 75 fd 9b 64 9d fe 86   ...%$6..Vu..d...
00c0  9e 3a 37 89 55 d5 d3 2e e4 ba 0d 00 00 18 6d 4c   .:7.U.........mL
00d0  a4 46 27 2e 61 39 ad d7 4d cf 18 6e 2c f3 19 dd   .F'.a9..M..n,...
00e0  22 bf 0d 00 00 14 12 f5 f2 8c 45 71 68 a9 70 2d   ".........Eqh.p-
00f0  9f e2 74 cc 01 00 0d 00 00 0c 09 00 26 89 df d6   ..t.........&...
0100  b7 12 0d 00 00 14 21 f7 77 b5 bd e0 ba a0 9e e0   ......!.w.......
0110  db b0 3e 50 2d ee 00 00 00 14 1f 07 f7 0e aa 65   ..>P-..........e
0120  14 d3 b0 fa 96 54 2a 50 04 00 66 81 a1 5e         .....T*P..f..^

Frame 5 (122 bytes on wire, 122 bytes captured)
    Arrival Time: Mar 26, 2004 10:00:01.676609000
    Time delta from previous packet: 0.006798000 seconds
    Time since reference or first frame: 0.246349000 seconds
    Frame Number: 5
    Packet Length: 122 bytes
    Capture Length: 122 bytes
Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:05:00:b8:00:e0
    Destination: 00:05:00:b8:00:e0 (00:05:00:b8:00:e0)
    Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f)
    Type: IP (0x0800)
    Frame check sequence: 0xebbd10e1 (correct)
Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.126 (165.227.249.126)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 104
    Identification: 0x0000 (0)
    Flags: 0x04
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0xfbc4 (correct)
    Source: 165.227.249.122 (165.227.249.122)
    Destination: 165.227.249.126 (165.227.249.126)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 84
    Checksum: 0xd062 (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0xF73C43490D2C7247
    Responder cookie: 0xD430D0A8BDE1BAA0
    Next payload: Identification (5)
    Version: 1.0
    Exchange type: Identity Protection (Main Mode) (2)
    Flags
        .... ...1 = Encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x00000000
    Length: 76
    Encrypted payload (48 bytes)

0000  00 05 00 b8 00 e0 00 0c 29 fc 0c 9f 08 00 45 00   ........).....E.
0010  00 68 00 00 40 00 40 11 fb c4 a5 e3 f9 7a a5 e3   .h..@.@......z..
0020  f9 7e 01 f4 01 f4 00 54 d0 62 f7 3c 43 49 0d 2c   .~.....T.b.<CI.,
0030  72 47 d4 30 d0 a8 bd e1 ba a0 05 10 02 01 00 00   rG.0............
0040  00 00 00 00 00 4c 88 b7 0a 8a 60 2f 79 b7 37 9c   .....L....`/y.7.
0050  61 6e 2b 07 38 4e 70 c7 cf c6 90 61 68 73 b8 91   an+.8Np....ahs..
0060  82 4c 59 f0 42 c3 7c d6 26 84 2e a6 74 e2 ec 76   .LY.B.|.&...t..v
0070  f2 47 2c f2 40 76 eb bd 10 e1                     .G,.@v....

Frame 6 (138 bytes on wire, 138 bytes captured)
    Arrival Time: Mar 26, 2004 10:00:01.774569000
    Time delta from previous packet: 0.097960000 seconds
    Time since reference or first frame: 0.344309000 seconds
    Frame Number: 6
    Packet Length: 138 bytes
    Capture Length: 138 bytes
Ethernet II, Src: 00:05:00:b8:00:e0, Dst: 00:0c:29:fc:0c:9f
    Destination: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f)
    Source: 00:05:00:b8:00:e0 (00:05:00:b8:00:e0)
    Type: IP (0x0800)
    Frame check sequence: 0x122c26c0 (correct)
Internet Protocol, Src Addr: 165.227.249.126 (165.227.249.126), Dst Addr: 165.227.249.122 (165.227.249.122)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 120
    Identification: 0x0003 (3)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0xfbb1 (correct)
    Source: 165.227.249.126 (165.227.249.126)
    Destination: 165.227.249.122 (165.227.249.122)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 100
    Checksum: 0x1cc5 (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0xF73C43490D2C7247
    Responder cookie: 0xD430D0A8BDE1BAA0
    Next payload: Identification (5)
    Version: 1.0
    Exchange type: Identity Protection (Main Mode) (2)
    Flags
        .... ...1 = Encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x00000000
    Length: 92
    Encrypted payload (64 bytes)

0000  00 0c 29 fc 0c 9f 00 05 00 b8 00 e0 08 00 45 00   ..)...........E.
0010  00 78 00 03 00 00 80 11 fb b1 a5 e3 f9 7e a5 e3   .x...........~..
0020  f9 7a 01 f4 01 f4 00 64 1c c5 f7 3c 43 49 0d 2c   .z.....d...<CI.,
0030  72 47 d4 30 d0 a8 bd e1 ba a0 05 10 02 01 00 00   rG.0............
0040  00 00 00 00 00 5c ef 8c b3 e5 bd c0 70 17 3c 65   .....\......p.<e
0050  79 59 e7 05 f1 48 fb a9 51 a0 6b b5 0a c4 2d bd   yY...H..Q.k...-.
0060  cf 07 0e f8 a7 31 09 d4 4e ef 42 0e 04 2e a7 c3   .....1..N.B.....
0070  fc 98 75 22 59 4a a3 d0 9c 35 64 c0 2b cc fc 53   ..u"YJ...5d.+..S
0080  7b 2c e3 0d ae 00 12 2c 26 c0                     {,.....,&.

Frame 7 (362 bytes on wire, 362 bytes captured)
    Arrival Time: Mar 26, 2004 10:00:01.784734000
    Time delta from previous packet: 0.010165000 seconds
    Time since reference or first frame: 0.354474000 seconds
    Frame Number: 7
    Packet Length: 362 bytes
    Capture Length: 362 bytes
Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:05:00:b8:00:e0
    Destination: 00:05:00:b8:00:e0 (00:05:00:b8:00:e0)
    Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f)
    Type: IP (0x0800)
    Frame check sequence: 0xb2442e82 (correct)
Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.126 (165.227.249.126)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 344
    Identification: 0x0000 (0)
    Flags: 0x04
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0xfad4 (correct)
    Source: 165.227.249.122 (165.227.249.122)
    Destination: 165.227.249.126 (165.227.249.126)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 324
    Checksum: 0xbfd6 (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0xF73C43490D2C7247
    Responder cookie: 0xD430D0A8BDE1BAA0
    Next payload: Hash (8)
    Version: 1.0
    Exchange type: Quick Mode (32)
    Flags
        .... ...1 = Encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x9439447F
    Length: 316
    Encrypted payload (288 bytes)

0000  00 05 00 b8 00 e0 00 0c 29 fc 0c 9f 08 00 45 00   ........).....E.
0010  01 58 00 00 40 00 40 11 fa d4 a5 e3 f9 7a a5 e3   .X..@.@......z..
0020  f9 7e 01 f4 01 f4 01 44 bf d6 f7 3c 43 49 0d 2c   .~.....D...<CI.,
0030  72 47 d4 30 d0 a8 bd e1 ba a0 08 10 20 01 94 39   rG.0........ ..9
0040  44 7f 00 00 01 3c 28 b4 df 86 18 6b 28 8d ef df   D....<(....k(...
0050  ca fc 53 80 f5 87 71 ad e1 e4 f1 f4 85 d3 c2 99   ..S...q.........
0060  a1 f2 c1 c1 66 aa 2a 26 65 e6 70 86 a0 c7 0d 53   ....f.*&e.p....S
0070  74 2c 82 a2 81 b4 a8 5c 34 00 61 37 b2 83 bf a1   t,.....\4.a7....
0080  50 ff e7 2e e8 b0 a9 8c 8a 7e 60 0d af 5f a6 48   P........~`.._.H
0090  99 ca 66 f4 c9 ed d5 7e 4e 19 b3 30 62 17 72 56   ..f....~N..0b.rV
00a0  70 09 0e a7 36 27 5d 73 5c 7e 67 4e 2d cb 38 81   p...6']s\~gN-.8.
00b0  57 e9 f7 9e 7b e4 e6 0f c8 e5 63 64 e6 b9 c0 76   W...{.....cd...v
00c0  46 7d 8f 46 e1 c2 68 f3 f8 b8 e2 4a fd 94 1a 13   F}.F..h....J....
00d0  c6 52 66 ec 36 b1 33 75 0a 7d 21 b0 46 7e 04 5e   .Rf.6.3u.}!.F~.^
00e0  54 de 80 63 50 e0 47 0f 8d 66 df f0 72 c8 af 82   T..cP.G..f..r...
00f0  bc 63 d4 88 7c 4c 7a d8 c1 c7 82 bd 10 91 7a 9b   .c..|Lz.......z.
0100  e1 9d e1 f5 07 c6 0e 3e bd e9 3a ce e7 63 40 28   .......>..:..c@(
0110  3d 37 fc be f2 1b 36 5b bc e0 12 56 44 34 7d 2f   =7....6[...VD4}/
0120  4d 9f d8 92 d3 4e 15 6e 6e fb a3 6a b9 10 02 bc   M....N.nn..j....
0130  a1 ca 60 bf 0c ae 09 fb 08 ce 0f 76 e3 7d 03 7b   ..`........v.}.{
0140  22 0a 7f d5 79 0e b1 fa 7e d4 c3 e5 b3 66 f0 ea   "...y...~....f..
0150  8a db 01 d2 62 a2 76 a8 56 2f 87 0a 90 e8 ec ba   ....b.v.V/......
0160  91 aa 1d d5 e6 68 b2 44 2e 82                     .....h.D..

Frame 8 (346 bytes on wire, 346 bytes captured)
    Arrival Time: Mar 26, 2004 10:00:02.009823000
    Time delta from previous packet: 0.225089000 seconds
    Time since reference or first frame: 0.579563000 seconds
    Frame Number: 8
    Packet Length: 346 bytes
    Capture Length: 346 bytes
Ethernet II, Src: 00:05:00:b8:00:e0, Dst: 00:0c:29:fc:0c:9f
    Destination: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f)
    Source: 00:05:00:b8:00:e0 (00:05:00:b8:00:e0)
    Type: IP (0x0800)
    Frame check sequence: 0x106c6ec0 (correct)
Internet Protocol, Src Addr: 165.227.249.126 (165.227.249.126), Dst Addr: 165.227.249.122 (165.227.249.122)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 328
    Identification: 0x0004 (4)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0xfae0 (correct)
    Source: 165.227.249.126 (165.227.249.126)
    Destination: 165.227.249.122 (165.227.249.122)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 308
    Checksum: 0x1ab3 (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0xF73C43490D2C7247
    Responder cookie: 0xD430D0A8BDE1BAA0
    Next payload: Hash (8)
    Version: 1.0
    Exchange type: Quick Mode (32)
    Flags
        .... ...1 = Encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x9439447F
    Length: 300
    Encrypted payload (272 bytes)

0000  00 0c 29 fc 0c 9f 00 05 00 b8 00 e0 08 00 45 00   ..)...........E.
0010  01 48 00 04 00 00 80 11 fa e0 a5 e3 f9 7e a5 e3   .H...........~..
0020  f9 7a 01 f4 01 f4 01 34 1a b3 f7 3c 43 49 0d 2c   .z.....4...<CI.,
0030  72 47 d4 30 d0 a8 bd e1 ba a0 08 10 20 01 94 39   rG.0........ ..9
0040  44 7f 00 00 01 2c c6 60 5a 6b 32 42 31 e5 6a cd   D....,.`Zk2B1.j.
0050  cb dd 98 8e 93 9c da fd eb 40 74 d9 4b 9e 54 8a   .........@t.K.T.
0060  c0 9c 1a a0 f9 72 2c c5 b7 07 c3 58 6e 5d 92 e6   .....r,....Xn]..
0070  a1 bb 28 6b c0 0c e5 97 d3 b9 90 b0 53 fc 20 00   ..(k........S. .
0080  08 44 b4 ca 45 7b 1a 82 58 b8 4f 27 41 72 8d 48   .D..E{..X.O'Ar.H
0090  8a 23 5c 55 2e 7c ca 29 c7 88 a5 c6 1e 7c 2f e7   .#\U.|.).....|/.
00a0  41 b4 ea 6f e2 0f df 4a 4e b9 61 a4 7f f0 f4 f4   A..o...JN.a.....
00b0  4e 87 94 44 89 66 d0 cd 0a 56 e3 10 f2 c3 d4 d6   N..D.f...V......
00c0  f4 d3 0e b0 54 f4 cd 62 8f e2 97 d8 31 c7 4d 7d   ....T..b....1.M}
00d0  93 7e a4 08 f4 3f df 6a 6a df 41 b2 57 b0 1f 8d   .~...?.jj.A.W...
00e0  58 43 39 72 79 0e 4c 9b 5b e6 4b e6 df 3e eb a9   XC9ry.L.[.K..>..
00f0  b2 e0 74 bc 8d cf b5 a5 da 10 09 b3 6f ae 7a 7b   ..t.........o.z{
0100  d6 a5 2c 2f f3 f1 24 97 f5 32 5d c6 21 21 d8 ee   ..,/..$..2].!!..
0110  d6 57 3f 21 15 74 e1 50 66 4d b3 3e 7a 0b b5 f0   .W?!.t.PfM.>z...
0120  27 46 f5 d4 29 d0 65 01 1f a6 c2 40 f9 e9 5f 41   'F..).e....@.._A
0130  02 6a c8 6e 14 7f ec 21 42 a0 58 c8 b1 04 01 79   .j.n...!B.X....y
0140  26 9b bc c0 8c 63 95 d7 0b 7d 65 89 9a 65 89 cc   &....c...}e..e..
0150  13 cc bd 42 e1 ef 10 6c 6e c0                     ...B...ln.

Frame 9 (106 bytes on wire, 106 bytes captured)
    Arrival Time: Mar 26, 2004 10:00:02.017421000
    Time delta from previous packet: 0.007598000 seconds
    Time since reference or first frame: 0.587161000 seconds
    Frame Number: 9
    Packet Length: 106 bytes
    Capture Length: 106 bytes
Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:05:00:b8:00:e0
    Destination: 00:05:00:b8:00:e0 (00:05:00:b8:00:e0)
    Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f)
    Type: IP (0x0800)
    Frame check sequence: 0x8797d241 (correct)
Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.126 (165.227.249.126)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 88
    Identification: 0x0000 (0)
    Flags: 0x04
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0xfbd4 (correct)
    Source: 165.227.249.122 (165.227.249.122)
    Destination: 165.227.249.126 (165.227.249.126)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 68
    Checksum: 0x38ad (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0xF73C43490D2C7247
    Responder cookie: 0xD430D0A8BDE1BAA0
    Next payload: Hash (8)
    Version: 1.0
    Exchange type: Quick Mode (32)
    Flags
        .... ...1 = Encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x9439447F
    Length: 60
    Encrypted payload (32 bytes)

0000  00 05 00 b8 00 e0 00 0c 29 fc 0c 9f 08 00 45 00   ........).....E.
0010  00 58 00 00 40 00 40 11 fb d4 a5 e3 f9 7a a5 e3   .X..@.@......z..
0020  f9 7e 01 f4 01 f4 00 44 38 ad f7 3c 43 49 0d 2c   .~.....D8..<CI.,
0030  72 47 d4 30 d0 a8 bd e1 ba a0 08 10 20 01 94 39   rG.0........ ..9
0040  44 7f 00 00 00 3c 17 9b 5e dc 92 ab 1c 2d 46 7b   D....<..^....-F{
0050  4b a2 b0 bf ca e5 59 e9 27 d3 57 c0 13 cb f3 f1   K.....Y.'.W.....
0060  89 da 3c d2 d0 ba 87 97 d2 41                     ..<......A

Frame 10 (106 bytes on wire, 106 bytes captured)
    Arrival Time: Mar 26, 2004 10:00:02.118972000
    Time delta from previous packet: 0.101551000 seconds
    Time since reference or first frame: 0.688712000 seconds
    Frame Number: 10
    Packet Length: 106 bytes
    Capture Length: 106 bytes
Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:05:00:b8:00:e0
    Destination: 00:05:00:b8:00:e0 (00:05:00:b8:00:e0)
    Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f)
    Type: IP (0x0800)
    Frame check sequence: 0x8797d241 (correct)
Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.126 (165.227.249.126)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 88
    Identification: 0x0000 (0)
    Flags: 0x04
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0xfbd4 (correct)
    Source: 165.227.249.122 (165.227.249.122)
    Destination: 165.227.249.126 (165.227.249.126)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 68
    Checksum: 0x38ad (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0xF73C43490D2C7247
    Responder cookie: 0xD430D0A8BDE1BAA0
    Next payload: Hash (8)
    Version: 1.0
    Exchange type: Quick Mode (32)
    Flags
        .... ...1 = Encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x9439447F
    Length: 60
    Encrypted payload (32 bytes)

0000  00 05 00 b8 00 e0 00 0c 29 fc 0c 9f 08 00 45 00   ........).....E.
0010  00 58 00 00 40 00 40 11 fb d4 a5 e3 f9 7a a5 e3   .X..@.@......z..
0020  f9 7e 01 f4 01 f4 00 44 38 ad f7 3c 43 49 0d 2c   .~.....D8..<CI.,
0030  72 47 d4 30 d0 a8 bd e1 ba a0 08 10 20 01 94 39   rG.0........ ..9
0040  44 7f 00 00 00 3c 17 9b 5e dc 92 ab 1c 2d 46 7b   D....<..^....-F{
0050  4b a2 b0 bf ca e5 59 e9 27 d3 57 c0 13 cb f3 f1   K.....Y.'.W.....
0060  89 da 3c d2 d0 ba 87 97 d2 41                     ..<......A

Frame 11 (106 bytes on wire, 106 bytes captured)
    Arrival Time: Mar 26, 2004 10:00:02.228124000
    Time delta from previous packet: 0.109152000 seconds
    Time since reference or first frame: 0.797864000 seconds
    Frame Number: 11
    Packet Length: 106 bytes
    Capture Length: 106 bytes
Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:05:00:b8:00:e0
    Destination: 00:05:00:b8:00:e0 (00:05:00:b8:00:e0)
    Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f)
    Type: IP (0x0800)
    Frame check sequence: 0x8797d241 (correct)
Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.126 (165.227.249.126)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 88
    Identification: 0x0000 (0)
    Flags: 0x04
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0xfbd4 (correct)
    Source: 165.227.249.122 (165.227.249.122)
    Destination: 165.227.249.126 (165.227.249.126)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 68
    Checksum: 0x38ad (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0xF73C43490D2C7247
    Responder cookie: 0xD430D0A8BDE1BAA0
    Next payload: Hash (8)
    Version: 1.0
    Exchange type: Quick Mode (32)
    Flags
        .... ...1 = Encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x9439447F
    Length: 60
    Encrypted payload (32 bytes)

0000  00 05 00 b8 00 e0 00 0c 29 fc 0c 9f 08 00 45 00   ........).....E.
0010  00 58 00 00 40 00 40 11 fb d4 a5 e3 f9 7a a5 e3   .X..@.@......z..
0020  f9 7e 01 f4 01 f4 00 44 38 ad f7 3c 43 49 0d 2c   .~.....D8..<CI.,
0030  72 47 d4 30 d0 a8 bd e1 ba a0 08 10 20 01 94 39   rG.0........ ..9
0040  44 7f 00 00 00 3c 17 9b 5e dc 92 ab 1c 2d 46 7b   D....<..^....-F{
0050  4b a2 b0 bf ca e5 59 e9 27 d3 57 c0 13 cb f3 f1   K.....Y.'.W.....
0060  89 da 3c d2 d0 ba 87 97 d2 41                     ..<......A

Frame 12 (138 bytes on wire, 138 bytes captured)
    Arrival Time: Mar 26, 2004 10:00:02.330848000
    Time delta from previous packet: 0.102724000 seconds
    Time since reference or first frame: 0.900588000 seconds
    Frame Number: 12
    Packet Length: 138 bytes
    Capture Length: 138 bytes
Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:50:fc:84:d2:ec
    Destination: 00:50:fc:84:d2:ec (00:50:fc:84:d2:ec)
    Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f)
    Type: IP (0x0800)
    Frame check sequence: 0x3587c4aa (correct)
Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.126 (165.227.249.126)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 120
    Identification: 0x0131 (305)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 255
    Protocol: ESP (0x32)
    Header checksum: 0x7b62 (correct)
    Source: 165.227.249.122 (165.227.249.122)
    Destination: 165.227.249.126 (165.227.249.126)
Encapsulating Security Payload
    SPI: 0x35f81780
    Sequence: 1
    Data (92 bytes)

0000  00 50 fc 84 d2 ec 00 0c 29 fc 0c 9f 08 00 45 00   .P......).....E.
0010  00 78 01 31 00 00 ff 32 7b 62 a5 e3 f9 7a a5 e3   .x.1...2{b...z..
0020  f9 7e 35 f8 17 80 00 00 00 01 53 01 ab 52 c6 d3   .~5.......S..R..
0030  43 67 32 b9 e6 b6 4b 21 5a c6 20 29 e4 46 09 7b   Cg2...K!Z. ).F.{
0040  cb 78 82 bb 36 8a 83 59 a0 ab e3 32 46 cd 75 5c   .x..6..Y...2F.u\
0050  17 a0 92 51 8b 3f b2 a7 6a a4 19 54 7e 1e 61 7a   ...Q.?..j..T~.az
0060  41 9d 43 88 21 4f 01 b3 9c 0c de e1 e0 60 00 ec   A.C.!O.......`..
0070  d5 b2 dd be 68 e8 21 67 64 ef 6a 61 0b a9 b7 93   ....h.!gd.ja....
0080  93 66 0c 7f 03 ec 35 87 c4 aa                     .f....5...

Frame 13 (138 bytes on wire, 138 bytes captured)
    Arrival Time: Mar 26, 2004 10:00:02.331123000
    Time delta from previous packet: 0.000275000 seconds
    Time since reference or first frame: 0.900863000 seconds
    Frame Number: 13
    Packet Length: 138 bytes
    Capture Length: 138 bytes
Ethernet II, Src: 00:50:fc:84:d2:ec, Dst: 00:05:00:b8:00:e0
    Destination: 00:05:00:b8:00:e0 (00:05:00:b8:00:e0)
    Source: 00:50:fc:84:d2:ec (00:50:fc:84:d2:ec)
    Type: IP (0x0800)
    Frame check sequence: 0xbafb424f (correct)
Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.126 (165.227.249.126)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 120
    Identification: 0x0131 (305)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 254
    Protocol: ESP (0x32)
    Header checksum: 0x7c62 (correct)
    Source: 165.227.249.122 (165.227.249.122)
    Destination: 165.227.249.126 (165.227.249.126)
Encapsulating Security Payload
    SPI: 0x35f81780
    Sequence: 1
    Data (92 bytes)

0000  00 05 00 b8 00 e0 00 50 fc 84 d2 ec 08 00 45 00   .......P......E.
0010  00 78 01 31 00 00 fe 32 7c 62 a5 e3 f9 7a a5 e3   .x.1...2|b...z..
0020  f9 7e 35 f8 17 80 00 00 00 01 53 01 ab 52 c6 d3   .~5.......S..R..
0030  43 67 32 b9 e6 b6 4b 21 5a c6 20 29 e4 46 09 7b   Cg2...K!Z. ).F.{
0040  cb 78 82 bb 36 8a 83 59 a0 ab e3 32 46 cd 75 5c   .x..6..Y...2F.u\
0050  17 a0 92 51 8b 3f b2 a7 6a a4 19 54 7e 1e 61 7a   ...Q.?..j..T~.az
0060  41 9d 43 88 21 4f 01 b3 9c 0c de e1 e0 60 00 ec   A.C.!O.......`..
0070  d5 b2 dd be 68 e8 21 67 64 ef 6a 61 0b a9 b7 93   ....h.!gd.ja....
0080  93 66 0c 7f 03 ec ba fb 42 4f                     .f......BO

Frame 14 (138 bytes on wire, 138 bytes captured)
    Arrival Time: Mar 26, 2004 10:00:02.332794000
    Time delta from previous packet: 0.001671000 seconds
    Time since reference or first frame: 0.902534000 seconds
    Frame Number: 14
    Packet Length: 138 bytes
    Capture Length: 138 bytes
Ethernet II, Src: 00:05:00:b8:00:e0, Dst: 00:0c:29:fc:0c:9f
    Destination: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f)
    Source: 00:05:00:b8:00:e0 (00:05:00:b8:00:e0)
    Type: IP (0x0800)
    Frame check sequence: 0x5ba38c9b (correct)
Internet Protocol, Src Addr: 165.227.249.126 (165.227.249.126), Dst Addr: 165.227.249.122 (165.227.249.122)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 120
    Identification: 0x0001 (1)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: ESP (0x32)
    Header checksum: 0x3b93 (correct)
    Source: 165.227.249.126 (165.227.249.126)
    Destination: 165.227.249.122 (165.227.249.122)
Encapsulating Security Payload
    SPI: 0xcccab141
    Sequence: 1
    Data (92 bytes)

0000  00 0c 29 fc 0c 9f 00 05 00 b8 00 e0 08 00 45 00   ..)...........E.
0010  00 78 00 01 00 00 40 32 3b 93 a5 e3 f9 7e a5 e3   .x....@2;....~..
0020  f9 7a cc ca b1 41 00 00 00 01 77 80 6b 3f 91 a5   .z...A....w.k?..
0030  fc e5 0d 2c 7b 4e 7b 77 c6 cc a4 4c 05 59 46 96   ...,{N{w...L.YF.
0040  44 46 1c c0 bb f2 77 27 3f d9 79 27 e3 2e 2e 55   DF....w'?.y'...U
0050  66 b9 cd 51 9d d4 22 f7 cf b1 a8 37 27 9f 4b 71   f..Q.."....7'.Kq
0060  df 54 6f fa c1 6c 6c a0 9d 42 c3 03 2c 11 e3 a6   .To..ll..B..,...
0070  1f e7 b6 c0 0f be 1d f3 82 e3 2a 77 d4 da 7c 39   ..........*w..|9
0080  ce d2 08 19 37 7b 5b a3 8c 9b                     ....7{[...

Frame 15 (138 bytes on wire, 138 bytes captured)
    Arrival Time: Mar 26, 2004 10:00:02.401082000
    Time delta from previous packet: 0.068288000 seconds
    Time since reference or first frame: 0.970822000 seconds
    Frame Number: 15
    Packet Length: 138 bytes
    Capture Length: 138 bytes
Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:50:fc:84:d2:ec
    Destination: 00:50:fc:84:d2:ec (00:50:fc:84:d2:ec)
    Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f)
    Type: IP (0x0800)
    Frame check sequence: 0x7b7d11be (correct)
Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.126 (165.227.249.126)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 120
    Identification: 0x0132 (306)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 255
    Protocol: ESP (0x32)
    Header checksum: 0x7b61 (correct)
    Source: 165.227.249.122 (165.227.249.122)
    Destination: 165.227.249.126 (165.227.249.126)
Encapsulating Security Payload
    SPI: 0x35f81780
    Sequence: 2
    Data (92 bytes)

0000  00 50 fc 84 d2 ec 00 0c 29 fc 0c 9f 08 00 45 00   .P......).....E.
0010  00 78 01 32 00 00 ff 32 7b 61 a5 e3 f9 7a a5 e3   .x.2...2{a...z..
0020  f9 7e 35 f8 17 80 00 00 00 02 de e1 e0 60 00 ec   .~5..........`..
0030  d5 b2 dd be 68 e8 21 67 64 ef f7 73 d3 4c 65 25   ....h.!gd..s.Le%
0040  29 7b f2 6c b4 3d e0 6a de 4e bd 74 ad 42 c0 6b   ){.l.=.j.N.t.B.k
0050  56 ff b2 eb 2d 79 e0 81 fa d8 bd 95 d3 73 88 3e   V...-y.......s.>
0060  b5 2e cd 62 59 2a 18 ad db d4 0d 69 77 f6 f6 1a   ...bY*.....iw...
0070  69 37 d3 af 8a 10 a9 6b 61 69 8d 9e 6b f9 1b 6a   i7.....kai..k..j
0080  2e a9 1e b9 83 f7 7b 7d 11 be                     ......{}..

Frame 16 (138 bytes on wire, 138 bytes captured)
    Arrival Time: Mar 26, 2004 10:00:02.401259000
    Time delta from previous packet: 0.000177000 seconds
    Time since reference or first frame: 0.970999000 seconds
    Frame Number: 16
    Packet Length: 138 bytes
    Capture Length: 138 bytes
Ethernet II, Src: 00:50:fc:84:d2:ec, Dst: 00:05:00:b8:00:e0
    Destination: 00:05:00:b8:00:e0 (00:05:00:b8:00:e0)
    Source: 00:50:fc:84:d2:ec (00:50:fc:84:d2:ec)
    Type: IP (0x0800)
    Frame check sequence: 0xf401975b (correct)
Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.126 (165.227.249.126)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 120
    Identification: 0x0132 (306)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 254
    Protocol: ESP (0x32)
    Header checksum: 0x7c61 (correct)
    Source: 165.227.249.122 (165.227.249.122)
    Destination: 165.227.249.126 (165.227.249.126)
Encapsulating Security Payload
    SPI: 0x35f81780
    Sequence: 2
    Data (92 bytes)

0000  00 05 00 b8 00 e0 00 50 fc 84 d2 ec 08 00 45 00   .......P......E.
0010  00 78 01 32 00 00 fe 32 7c 61 a5 e3 f9 7a a5 e3   .x.2...2|a...z..
0020  f9 7e 35 f8 17 80 00 00 00 02 de e1 e0 60 00 ec   .~5..........`..
0030  d5 b2 dd be 68 e8 21 67 64 ef f7 73 d3 4c 65 25   ....h.!gd..s.Le%
0040  29 7b f2 6c b4 3d e0 6a de 4e bd 74 ad 42 c0 6b   ){.l.=.j.N.t.B.k
0050  56 ff b2 eb 2d 79 e0 81 fa d8 bd 95 d3 73 88 3e   V...-y.......s.>
0060  b5 2e cd 62 59 2a 18 ad db d4 0d 69 77 f6 f6 1a   ...bY*.....iw...
0070  69 37 d3 af 8a 10 a9 6b 61 69 8d 9e 6b f9 1b 6a   i7.....kai..k..j
0080  2e a9 1e b9 83 f7 f4 01 97 5b                     .........[

Frame 17 (138 bytes on wire, 138 bytes captured)
    Arrival Time: Mar 26, 2004 10:00:02.402406000
    Time delta from previous packet: 0.001147000 seconds
    Time since reference or first frame: 0.972146000 seconds
    Frame Number: 17
    Packet Length: 138 bytes
    Capture Length: 138 bytes
Ethernet II, Src: 00:05:00:b8:00:e0, Dst: 00:0c:29:fc:0c:9f
    Destination: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f)
    Source: 00:05:00:b8:00:e0 (00:05:00:b8:00:e0)
    Type: IP (0x0800)
    Frame check sequence: 0x474541f3 (correct)
Internet Protocol, Src Addr: 165.227.249.126 (165.227.249.126), Dst Addr: 165.227.249.122 (165.227.249.122)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 120
    Identification: 0x0002 (2)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: ESP (0x32)
    Header checksum: 0x3b92 (correct)
    Source: 165.227.249.126 (165.227.249.126)
    Destination: 165.227.249.122 (165.227.249.122)
Encapsulating Security Payload
    SPI: 0xcccab141
    Sequence: 2
    Data (92 bytes)

0000  00 0c 29 fc 0c 9f 00 05 00 b8 00 e0 08 00 45 00   ..)...........E.
0010  00 78 00 02 00 00 40 32 3b 92 a5 e3 f9 7e a5 e3   .x....@2;....~..
0020  f9 7a cc ca b1 41 00 00 00 02 c3 03 2c 11 e3 a6   .z...A......,...
0030  1f e7 b6 c0 0f be 1d f3 82 e3 b4 1b 03 f9 fb 28   ...............(
0040  e7 47 90 7a ed 58 6e 30 5f 2f c5 94 33 5f 2c fd   .G.z.Xn0_/..3_,.
0050  e4 3b 81 a4 9b 84 86 b5 0c 02 42 7e c2 cb d8 89   .;........B~....
0060  29 b9 ee 25 cc fe 43 1b 73 d5 c3 53 c2 31 98 39   )..%..C.s..S.1.9
0070  b3 23 ec d3 64 4f da c7 68 01 44 f8 42 8c 25 98   .#..dO..h.D.B.%.
0080  b5 26 9d 77 60 47 47 45 41 f3                     .&.w`GGEA.

Frame 18 (138 bytes on wire, 138 bytes captured)
    Arrival Time: Mar 26, 2004 10:00:03.417555000
    Time delta from previous packet: 1.015149000 seconds
    Time since reference or first frame: 1.987295000 seconds
    Frame Number: 18
    Packet Length: 138 bytes
    Capture Length: 138 bytes
Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:50:fc:84:d2:ec
    Destination: 00:50:fc:84:d2:ec (00:50:fc:84:d2:ec)
    Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f)
    Type: IP (0x0800)
    Frame check sequence: 0x1a609d21 (correct)
Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.126 (165.227.249.126)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 120
    Identification: 0x0133 (307)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 255
    Protocol: ESP (0x32)
    Header checksum: 0x7b60 (correct)
    Source: 165.227.249.122 (165.227.249.122)
    Destination: 165.227.249.126 (165.227.249.126)
Encapsulating Security Payload
    SPI: 0x35f81780
    Sequence: 3
    Data (92 bytes)

0000  00 50 fc 84 d2 ec 00 0c 29 fc 0c 9f 08 00 45 00   .P......).....E.
0010  00 78 01 33 00 00 ff 32 7b 60 a5 e3 f9 7a a5 e3   .x.3...2{`...z..
0020  f9 7e 35 f8 17 80 00 00 00 03 0d 69 77 f6 f6 1a   .~5........iw...
0030  69 37 d3 af 8a 10 a9 6b 61 69 ca fb 3b 01 c8 74   i7.....kai..;..t
0040  e2 bc fb a6 0f f9 14 30 68 d5 a5 ee c9 af e9 9d   .......0h.......
0050  b4 e0 2b 88 51 6c d9 52 cf 04 ba d9 ac 04 1c e3   ..+.Ql.R........
0060  d9 15 75 53 e5 81 f9 dc 6b 67 78 0e 0a 07 cd 81   ..uS....kgx.....
0070  cf 0a c4 da 3b 66 d5 ec 41 63 1e eb 29 06 f3 4b   ....;f..Ac..)..K
0080  d5 94 1b d0 2a 62 1a 60 9d 21                     ....*b.`.!

Frame 19 (138 bytes on wire, 138 bytes captured)
    Arrival Time: Mar 26, 2004 10:00:03.417739000
    Time delta from previous packet: 0.000184000 seconds
    Time since reference or first frame: 1.987479000 seconds
    Frame Number: 19
    Packet Length: 138 bytes
    Capture Length: 138 bytes
Ethernet II, Src: 00:50:fc:84:d2:ec, Dst: 00:05:00:b8:00:e0
    Destination: 00:05:00:b8:00:e0 (00:05:00:b8:00:e0)
    Source: 00:50:fc:84:d2:ec (00:50:fc:84:d2:ec)
    Type: IP (0x0800)
    Frame check sequence: 0x951c1bc4 (correct)
Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.126 (165.227.249.126)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 120
    Identification: 0x0133 (307)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 254
    Protocol: ESP (0x32)
    Header checksum: 0x7c60 (correct)
    Source: 165.227.249.122 (165.227.249.122)
    Destination: 165.227.249.126 (165.227.249.126)
Encapsulating Security Payload
    SPI: 0x35f81780
    Sequence: 3
    Data (92 bytes)

0000  00 05 00 b8 00 e0 00 50 fc 84 d2 ec 08 00 45 00   .......P......E.
0010  00 78 01 33 00 00 fe 32 7c 60 a5 e3 f9 7a a5 e3   .x.3...2|`...z..
0020  f9 7e 35 f8 17 80 00 00 00 03 0d 69 77 f6 f6 1a   .~5........iw...
0030  69 37 d3 af 8a 10 a9 6b 61 69 ca fb 3b 01 c8 74   i7.....kai..;..t
0040  e2 bc fb a6 0f f9 14 30 68 d5 a5 ee c9 af e9 9d   .......0h.......
0050  b4 e0 2b 88 51 6c d9 52 cf 04 ba d9 ac 04 1c e3   ..+.Ql.R........
0060  d9 15 75 53 e5 81 f9 dc 6b 67 78 0e 0a 07 cd 81   ..uS....kgx.....
0070  cf 0a c4 da 3b 66 d5 ec 41 63 1e eb 29 06 f3 4b   ....;f..Ac..)..K
0080  d5 94 1b d0 2a 62 95 1c 1b c4                     ....*b....

Frame 20 (138 bytes on wire, 138 bytes captured)
    Arrival Time: Mar 26, 2004 10:00:03.418535000
    Time delta from previous packet: 0.000796000 seconds
    Time since reference or first frame: 1.988275000 seconds
    Frame Number: 20
    Packet Length: 138 bytes
    Capture Length: 138 bytes
Ethernet II, Src: 00:05:00:b8:00:e0, Dst: 00:0c:29:fc:0c:9f
    Destination: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f)
    Source: 00:05:00:b8:00:e0 (00:05:00:b8:00:e0)
    Type: IP (0x0800)
    Frame check sequence: 0x86c74a57 (correct)
Internet Protocol, Src Addr: 165.227.249.126 (165.227.249.126), Dst Addr: 165.227.249.122 (165.227.249.122)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 120
    Identification: 0x0003 (3)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: ESP (0x32)
    Header checksum: 0x3b91 (correct)
    Source: 165.227.249.126 (165.227.249.126)
    Destination: 165.227.249.122 (165.227.249.122)
Encapsulating Security Payload
    SPI: 0xcccab141
    Sequence: 3
    Data (92 bytes)

0000  00 0c 29 fc 0c 9f 00 05 00 b8 00 e0 08 00 45 00   ..)...........E.
0010  00 78 00 03 00 00 40 32 3b 91 a5 e3 f9 7e a5 e3   .x....@2;....~..
0020  f9 7a cc ca b1 41 00 00 00 03 c3 53 c2 31 98 39   .z...A.....S.1.9
0030  b3 23 ec d3 64 4f da c7 68 01 a0 93 c3 02 89 72   .#..dO..h......r
0040  8c c1 bd 4a aa ca 7c 21 c7 b6 a3 68 34 34 95 b5   ...J..|!...h44..
0050  2a c4 86 ef ae 52 89 4f 44 5c 1e 59 aa 82 14 1c   *....R.OD\.Y....
0060  9f 0a 72 73 fb 26 2c 32 44 6e 8a 4a 45 58 08 5d   ..rs.&,2Dn.JEX.]
0070  79 67 d2 02 21 16 4f 80 fd e6 69 12 10 bd 64 7f   yg..!.O...i...d.
0080  c5 f1 37 10 08 71 86 c7 4a 57                     ..7..q..JW

Frame 21 (138 bytes on wire, 138 bytes captured)
    Arrival Time: Mar 26, 2004 10:00:04.397202000
    Time delta from previous packet: 0.978667000 seconds
    Time since reference or first frame: 2.966942000 seconds
    Frame Number: 21
    Packet Length: 138 bytes
    Capture Length: 138 bytes
Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:50:fc:84:d2:ec
    Destination: 00:50:fc:84:d2:ec (00:50:fc:84:d2:ec)
    Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f)
    Type: IP (0x0800)
    Frame check sequence: 0x2a6e345e (correct)
Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.126 (165.227.249.126)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 120
    Identification: 0x0134 (308)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 255
    Protocol: ESP (0x32)
    Header checksum: 0x7b5f (correct)
    Source: 165.227.249.122 (165.227.249.122)
    Destination: 165.227.249.126 (165.227.249.126)
Encapsulating Security Payload
    SPI: 0x35f81780
    Sequence: 4
    Data (92 bytes)

0000  00 50 fc 84 d2 ec 00 0c 29 fc 0c 9f 08 00 45 00   .P......).....E.
0010  00 78 01 34 00 00 ff 32 7b 5f a5 e3 f9 7a a5 e3   .x.4...2{_...z..
0020  f9 7e 35 f8 17 80 00 00 00 04 78 0e 0a 07 cd 81   .~5.......x.....
0030  cf 0a c4 da 3b 66 d5 ec 41 63 15 4e 8e 34 f2 57   ....;f..Ac.N.4.W
0040  e5 64 58 de 62 98 5d 59 17 b0 1c ea 56 95 ec 53   .dX.b.]Y....V..S
0050  94 0a ac 28 30 1d 3f d2 f4 a6 e1 5c 9c 20 73 2a   ...(0.?....\. s*
0060  6c 32 98 dc d4 2b d6 c6 66 57 7d 18 d6 39 de c1   l2...+..fW}..9..
0070  8d 09 be 1b 8f 3d b1 c1 88 61 7f 60 99 93 cb 80   .....=...a.`....
0080  6f 96 17 d2 e5 1c 2a 6e 34 5e                     o.....*n4^

Frame 22 (138 bytes on wire, 138 bytes captured)
    Arrival Time: Mar 26, 2004 10:00:04.397400000
    Time delta from previous packet: 0.000198000 seconds
    Time since reference or first frame: 2.967140000 seconds
    Frame Number: 22
    Packet Length: 138 bytes
    Capture Length: 138 bytes
Ethernet II, Src: 00:50:fc:84:d2:ec, Dst: 00:05:00:b8:00:e0
    Destination: 00:05:00:b8:00:e0 (00:05:00:b8:00:e0)
    Source: 00:50:fc:84:d2:ec (00:50:fc:84:d2:ec)
    Type: IP (0x0800)
    Frame check sequence: 0xa512b2bb (correct)
Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.126 (165.227.249.126)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 120
    Identification: 0x0134 (308)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 254
    Protocol: ESP (0x32)
    Header checksum: 0x7c5f (correct)
    Source: 165.227.249.122 (165.227.249.122)
    Destination: 165.227.249.126 (165.227.249.126)
Encapsulating Security Payload
    SPI: 0x35f81780
    Sequence: 4
    Data (92 bytes)

0000  00 05 00 b8 00 e0 00 50 fc 84 d2 ec 08 00 45 00   .......P......E.
0010  00 78 01 34 00 00 fe 32 7c 5f a5 e3 f9 7a a5 e3   .x.4...2|_...z..
0020  f9 7e 35 f8 17 80 00 00 00 04 78 0e 0a 07 cd 81   .~5.......x.....
0030  cf 0a c4 da 3b 66 d5 ec 41 63 15 4e 8e 34 f2 57   ....;f..Ac.N.4.W
0040  e5 64 58 de 62 98 5d 59 17 b0 1c ea 56 95 ec 53   .dX.b.]Y....V..S
0050  94 0a ac 28 30 1d 3f d2 f4 a6 e1 5c 9c 20 73 2a   ...(0.?....\. s*
0060  6c 32 98 dc d4 2b d6 c6 66 57 7d 18 d6 39 de c1   l2...+..fW}..9..
0070  8d 09 be 1b 8f 3d b1 c1 88 61 7f 60 99 93 cb 80   .....=...a.`....
0080  6f 96 17 d2 e5 1c a5 12 b2 bb                     o.........

Frame 23 (138 bytes on wire, 138 bytes captured)
    Arrival Time: Mar 26, 2004 10:00:04.398211000
    Time delta from previous packet: 0.000811000 seconds
    Time since reference or first frame: 2.967951000 seconds
    Frame Number: 23
    Packet Length: 138 bytes
    Capture Length: 138 bytes
Ethernet II, Src: 00:05:00:b8:00:e0, Dst: 00:0c:29:fc:0c:9f
    Destination: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f)
    Source: 00:05:00:b8:00:e0 (00:05:00:b8:00:e0)
    Type: IP (0x0800)
    Frame check sequence: 0x4ab48820 (correct)
Internet Protocol, Src Addr: 165.227.249.126 (165.227.249.126), Dst Addr: 165.227.249.122 (165.227.249.122)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 120
    Identification: 0x0004 (4)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: ESP (0x32)
    Header checksum: 0x3b90 (correct)
    Source: 165.227.249.126 (165.227.249.126)
    Destination: 165.227.249.122 (165.227.249.122)
Encapsulating Security Payload
    SPI: 0xcccab141
    Sequence: 4
    Data (92 bytes)

0000  00 0c 29 fc 0c 9f 00 05 00 b8 00 e0 08 00 45 00   ..)...........E.
0010  00 78 00 04 00 00 40 32 3b 90 a5 e3 f9 7e a5 e3   .x....@2;....~..
0020  f9 7a cc ca b1 41 00 00 00 04 8a 4a 45 58 08 5d   .z...A.....JEX.]
0030  79 67 d2 02 21 16 4f 80 fd e6 04 83 cf 01 1b 98   yg..!.O.........
0040  70 c5 a5 0a 54 a7 ae 4f cb 92 a8 41 c9 25 98 bb   p...T..O...A.%..
0050  93 5d e6 73 e5 df f8 31 72 37 bc 17 e2 d6 fd cf   .].s...1r7......
0060  8f a0 2e ff 79 47 eb 39 d7 71 bf 5f 9f 71 c3 d2   ....yG.9.q._.q..
0070  e9 34 0c 8e 0a 7d 0b 36 39 cd 50 35 5b 2a 57 1c   .4...}.69.P5[*W.
0080  e8 61 d1 02 9f b6 4a b4 88 20                     .a....J..