Frame 1 (174 bytes on wire, 174 bytes captured) Arrival Time: Jul 15, 2004 13:21:43.976559000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 174 bytes Capture Length: 174 bytes Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:07:e9:0f:d4:32 Destination: 00:07:e9:0f:d4:32 (00:07:e9:0f:d4:32) Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Type: IP (0x0800) Frame check sequence: 0xf5016c6d (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.127 (165.227.249.127) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 156 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb8f (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.127 (165.227.249.127) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 136 Checksum: 0xc039 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xDC36DD78BCCFAC09 Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 128 Security Association payload Next payload: Vendor ID (13) Length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 44 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 36 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: NONE (0) Length: 44 Vendor ID: Check Point Check Point Product: VPN-1 Version: NG with Application Intelligence R55 0000 00 07 e9 0f d4 32 00 0c 29 fc 0c 9f 08 00 45 00 .....2..).....E. 0010 00 9c 00 00 40 00 40 11 fb 8f a5 e3 f9 7a a5 e3 ....@.@......z.. 0020 f9 7f 01 f4 01 f4 00 88 c0 39 dc 36 dd 78 bc cf .........9.6.x.. 0030 ac 09 00 00 00 00 00 00 00 00 01 10 02 00 00 00 ................ 0040 00 00 00 00 00 80 0d 00 00 38 00 00 00 01 00 00 .........8...... 0050 00 01 00 00 00 2c 01 01 00 01 00 00 00 24 01 01 .....,.......$.. 0060 00 00 80 01 00 05 80 02 00 02 80 03 00 01 80 04 ................ 0070 00 02 80 0b 00 01 00 0c 00 04 00 00 70 80 00 00 ............p... 0080 00 2c f4 ed 19 e0 c1 14 eb 51 6f aa ac 0e e3 7d .,.......Qo....} 0090 af 28 07 b4 38 1f 00 00 00 01 00 00 13 8d 00 00 .(..8........... 00a0 00 00 00 00 00 00 18 80 00 00 f5 01 6c 6d ............lm Frame 2 (162 bytes on wire, 162 bytes captured) Arrival Time: Jul 15, 2004 13:21:44.191097000 Time delta from previous packet: 0.214538000 seconds Time since reference or first frame: 0.214538000 seconds Frame Number: 2 Packet Length: 162 bytes Capture Length: 162 bytes Ethernet II, Src: 00:07:e9:0f:d4:32, Dst: 00:0c:29:fc:0c:9f Destination: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Source: 00:07:e9:0f:d4:32 (00:07:e9:0f:d4:32) Type: IP (0x0800) Frame check sequence: 0xa2e4cc78 (correct) Internet Protocol, Src Addr: 165.227.249.127 (165.227.249.127), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 144 Identification: 0x0017 (23) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3b85 (correct) Source: 165.227.249.127 (165.227.249.127) Destination: 165.227.249.122 (165.227.249.122) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 124 Checksum: 0xcb3d (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xDC36DD78BCCFAC09 Responder cookie: 0xF1981D15F2974F0E Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 116 Security Association payload Next payload: Vendor ID (13) Length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 44 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 36 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: unknown vendor ID: 0x402F7B247B5A5066C1FB9F53F480C9F5 Vendor ID payload Next payload: NONE (0) Length: 12 Vendor ID: draft-beaulieu-ike-xauth-02.txt 0000 00 0c 29 fc 0c 9f 00 07 e9 0f d4 32 08 00 45 00 ..)........2..E. 0010 00 90 00 17 00 00 40 11 3b 85 a5 e3 f9 7f a5 e3 ......@.;....... 0020 f9 7a 01 f4 01 f4 00 7c cb 3d dc 36 dd 78 bc cf .z.....|.=.6.x.. 0030 ac 09 f1 98 1d 15 f2 97 4f 0e 01 10 02 00 00 00 ........O....... 0040 00 00 00 00 00 74 0d 00 00 38 00 00 00 01 00 00 .....t...8...... 0050 00 01 00 00 00 2c 01 01 00 01 00 00 00 24 01 01 .....,.......$.. 0060 00 00 80 01 00 05 80 02 00 02 80 03 00 01 80 04 ................ 0070 00 02 80 0b 00 01 00 0c 00 04 00 00 70 80 0d 00 ............p... 0080 00 14 40 2f 7b 24 7b 5a 50 66 c1 fb 9f 53 f4 80 ..@/{${ZPf...S.. 0090 c9 f5 00 00 00 0c 09 00 26 89 df d6 b7 12 a2 e4 ........&....... 00a0 cc 78 .x Frame 3 (230 bytes on wire, 230 bytes captured) Arrival Time: Jul 15, 2004 13:21:44.200552000 Time delta from previous packet: 0.009455000 seconds Time since reference or first frame: 0.223993000 seconds Frame Number: 3 Packet Length: 230 bytes Capture Length: 230 bytes Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:07:e9:0f:d4:32 Destination: 00:07:e9:0f:d4:32 (00:07:e9:0f:d4:32) Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Type: IP (0x0800) Frame check sequence: 0x52cf73db (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.127 (165.227.249.127) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 212 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb57 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.127 (165.227.249.127) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 192 Checksum: 0xd724 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xDC36DD78BCCFAC09 Responder cookie: 0xF1981D15F2974F0E Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 184 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 24 Nonce Data 0000 00 07 e9 0f d4 32 00 0c 29 fc 0c 9f 08 00 45 00 .....2..).....E. 0010 00 d4 00 00 40 00 40 11 fb 57 a5 e3 f9 7a a5 e3 ....@.@..W...z.. 0020 f9 7f 01 f4 01 f4 00 c0 d7 24 dc 36 dd 78 bc cf .........$.6.x.. 0030 ac 09 f1 98 1d 15 f2 97 4f 0e 04 10 02 00 00 00 ........O....... 0040 00 00 00 00 00 b8 0a 00 00 84 5d f8 9f d9 7b b6 ..........]...{. 0050 c7 b9 60 46 67 ac 7a 12 22 98 8a 54 ec b3 84 00 ..`Fg.z."..T.... 0060 7d 09 63 c1 7b 37 85 f1 ad 17 e2 67 c0 e6 7c ec }.c.{7.....g..|. 0070 74 29 bc 1a c2 55 11 87 48 2d 61 5c e0 4c 5d 75 t)...U..H-a\.L]u 0080 ac 93 a5 58 74 da 9d a2 e9 f5 ac c8 f9 63 34 f9 ...Xt........c4. 0090 15 33 f8 a1 f4 ae 33 ba 77 98 f4 2e f9 50 07 3c .3....3.w....P.< 00a0 f6 be 68 54 f8 ed 1d 2a 4f 27 89 b0 f9 66 18 ee ..hT...*O'...f.. 00b0 a1 4c 58 92 fe 4c b5 c2 c9 49 8a 43 15 8c 54 67 .LX..L...I.C..Tg 00c0 c9 e3 aa 2d b3 94 a5 6d 16 a1 00 00 00 18 ce 52 ...-...m.......R 00d0 2a d5 82 31 3b 1d 41 a8 2b f9 f1 eb 77 5b 85 52 *..1;.A.+...w[.R 00e0 96 7b 52 cf 73 db .{R.s. Frame 4 (226 bytes on wire, 226 bytes captured) Arrival Time: Jul 15, 2004 13:21:44.236093000 Time delta from previous packet: 0.035541000 seconds Time since reference or first frame: 0.259534000 seconds Frame Number: 4 Packet Length: 226 bytes Capture Length: 226 bytes Ethernet II, Src: 00:07:e9:0f:d4:32, Dst: 00:0c:29:fc:0c:9f Destination: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Source: 00:07:e9:0f:d4:32 (00:07:e9:0f:d4:32) Type: IP (0x0800) Frame check sequence: 0xcecf3ade (correct) Internet Protocol, Src Addr: 165.227.249.127 (165.227.249.127), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 208 Identification: 0x0018 (24) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3b44 (correct) Source: 165.227.249.127 (165.227.249.127) Destination: 165.227.249.122 (165.227.249.122) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 188 Checksum: 0x197e (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xDC36DD78BCCFAC09 Responder cookie: 0xF1981D15F2974F0E Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 180 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 20 Nonce Data 0000 00 0c 29 fc 0c 9f 00 07 e9 0f d4 32 08 00 45 00 ..)........2..E. 0010 00 d0 00 18 00 00 40 11 3b 44 a5 e3 f9 7f a5 e3 ......@.;D...... 0020 f9 7a 01 f4 01 f4 00 bc 19 7e dc 36 dd 78 bc cf .z.......~.6.x.. 0030 ac 09 f1 98 1d 15 f2 97 4f 0e 04 10 02 00 00 00 ........O....... 0040 00 00 00 00 00 b4 0a 00 00 84 ea 4c 34 2f 4c 8e ...........L4/L. 0050 60 01 92 e2 f4 7b da ea 71 7a e4 66 1c a1 56 c8 `....{..qz.f..V. 0060 33 95 d7 7e 28 32 16 64 f3 c0 d7 72 24 b7 5a be 3..~(2.d...r$.Z. 0070 08 77 10 20 7f eb 3c 2f a2 c3 bb f1 72 d7 ee f0 .w. ...... 0060 e0 4e 61 04 7e 29 d6 fc d3 ac 38 87 c8 dd 59 c1 .Na.~)....8...Y. 0070 a7 9a .. Frame 6 (114 bytes on wire, 114 bytes captured) Arrival Time: Jul 15, 2004 13:21:44.247320000 Time delta from previous packet: 0.001368000 seconds Time since reference or first frame: 0.270761000 seconds Frame Number: 6 Packet Length: 114 bytes Capture Length: 114 bytes Ethernet II, Src: 00:07:e9:0f:d4:32, Dst: 00:0c:29:fc:0c:9f Destination: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Source: 00:07:e9:0f:d4:32 (00:07:e9:0f:d4:32) Type: IP (0x0800) Frame check sequence: 0x1885a2f0 (correct) Internet Protocol, Src Addr: 165.227.249.127 (165.227.249.127), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0x0019 (25) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3bb3 (correct) Source: 165.227.249.127 (165.227.249.127) Destination: 165.227.249.122 (165.227.249.122) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 76 Checksum: 0x1c2d (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xDC36DD78BCCFAC09 Responder cookie: 0xF1981D15F2974F0E Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 68 Encrypted payload (40 bytes) 0000 00 0c 29 fc 0c 9f 00 07 e9 0f d4 32 08 00 45 00 ..)........2..E. 0010 00 60 00 19 00 00 40 11 3b b3 a5 e3 f9 7f a5 e3 .`....@.;....... 0020 f9 7a 01 f4 01 f4 00 4c 1c 2d dc 36 dd 78 bc cf .z.....L.-.6.x.. 0030 ac 09 f1 98 1d 15 f2 97 4f 0e 05 10 02 01 00 00 ........O....... 0040 00 00 00 00 00 44 a4 63 4b 8e ef 30 51 a1 b9 00 .....D.cK..0Q... 0050 95 5e 3c 29 dd 51 31 50 bc 81 27 79 78 67 59 8f .^<).Q1P..'yxgY. 0060 d0 f1 46 e4 9f 2e 61 52 c8 a5 8f 3b 36 34 18 85 ..F...aR...;64.. 0070 a2 f0 .. Frame 7 (346 bytes on wire, 346 bytes captured) Arrival Time: Jul 15, 2004 13:21:44.259370000 Time delta from previous packet: 0.012050000 seconds Time since reference or first frame: 0.282811000 seconds Frame Number: 7 Packet Length: 346 bytes Capture Length: 346 bytes Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:07:e9:0f:d4:32 Destination: 00:07:e9:0f:d4:32 (00:07:e9:0f:d4:32) Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Type: IP (0x0800) Frame check sequence: 0x3285829b (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.127 (165.227.249.127) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 328 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfae3 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.127 (165.227.249.127) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 308 Checksum: 0x89ca (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xDC36DD78BCCFAC09 Responder cookie: 0xF1981D15F2974F0E Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x83F3CC5A Length: 300 Encrypted payload (272 bytes) 0000 00 07 e9 0f d4 32 00 0c 29 fc 0c 9f 08 00 45 00 .....2..).....E. 0010 01 48 00 00 40 00 40 11 fa e3 a5 e3 f9 7a a5 e3 .H..@.@......z.. 0020 f9 7f 01 f4 01 f4 01 34 89 ca dc 36 dd 78 bc cf .......4...6.x.. 0030 ac 09 f1 98 1d 15 f2 97 4f 0e 08 10 20 01 83 f3 ........O... ... 0040 cc 5a 00 00 01 2c 10 bb 02 79 06 8f 1b ef 57 4f .Z...,...y....WO 0050 a8 35 60 1b 29 68 e0 1c ca ee 6a 1d 31 e0 bf f9 .5`.)h....j.1... 0060 63 3a 40 d4 b2 60 a5 8e e9 63 70 64 c9 d4 32 a4 c:@..`...cpd..2. 0070 3c f1 11 32 d5 8f 89 3a bf a2 e1 ae 5e 7a 8d 1f <..2...:....^z.. 0080 31 12 4e d1 08 61 ad 5d 2f f3 a3 01 b1 97 d5 39 1.N..a.]/......9 0090 d8 c7 23 d5 70 ca 1f 6e 90 bb 34 5c 60 6b 49 ed ..#.p..n..4\`kI. 00a0 63 19 e8 7c e0 ba 79 f5 8f bf d5 15 d4 ce c5 4c c..|..y........L 00b0 59 2e 32 49 2c 60 48 20 0b 57 eb b6 c7 2b 7c 2a Y.2I,`H .W...+|* 00c0 04 8c e2 c9 61 00 a1 56 d6 71 50 a3 24 17 54 d0 ....a..V.qP.$.T. 00d0 d5 c5 4d 52 95 6f 33 19 3c 3c 1c 43 06 18 bb fc ..MR.o3.<<.C.... 00e0 65 13 2d 9a d1 29 9e ac 0b 89 b7 3d 67 85 52 8c e.-..).....=g.R. 00f0 37 a6 a0 50 d7 ad 5c 6a d0 d1 a1 6f 64 6d 17 29 7..P..\j...odm.) 0100 2c 96 50 6c da ed 78 b9 5a c3 6b 5d a8 48 d8 ff ,.Pl..x.Z.k].H.. 0110 2b 87 c3 a2 68 e3 aa cb 06 d0 eb ab c2 e4 7c 58 +...h.........|X 0120 a3 8f e4 f4 a1 0e b8 23 08 c0 7e c7 8a be b6 b2 .......#..~..... 0130 6e c9 60 50 04 54 f3 e2 2f 65 e5 38 62 e1 6f 53 n.`P.T../e.8b.oS 0140 25 ef a3 58 b9 bc 88 f5 db 60 3c d2 d9 0b be b2 %..X.....`<..... 0150 07 d5 13 bc 01 79 32 85 82 9b .....y2... Frame 8 (338 bytes on wire, 338 bytes captured) Arrival Time: Jul 15, 2004 13:21:44.275717000 Time delta from previous packet: 0.016347000 seconds Time since reference or first frame: 0.299158000 seconds Frame Number: 8 Packet Length: 338 bytes Capture Length: 338 bytes Ethernet II, Src: 00:07:e9:0f:d4:32, Dst: 00:0c:29:fc:0c:9f Destination: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Source: 00:07:e9:0f:d4:32 (00:07:e9:0f:d4:32) Type: IP (0x0800) Frame check sequence: 0x6b7b920f (correct) Internet Protocol, Src Addr: 165.227.249.127 (165.227.249.127), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 320 Identification: 0x001a (26) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3ad2 (correct) Source: 165.227.249.127 (165.227.249.127) Destination: 165.227.249.122 (165.227.249.122) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 300 Checksum: 0x1fee (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xDC36DD78BCCFAC09 Responder cookie: 0xF1981D15F2974F0E Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x83F3CC5A Length: 292 Encrypted payload (264 bytes) 0000 00 0c 29 fc 0c 9f 00 07 e9 0f d4 32 08 00 45 00 ..)........2..E. 0010 01 40 00 1a 00 00 40 11 3a d2 a5 e3 f9 7f a5 e3 .@....@.:....... 0020 f9 7a 01 f4 01 f4 01 2c 1f ee dc 36 dd 78 bc cf .z.....,...6.x.. 0030 ac 09 f1 98 1d 15 f2 97 4f 0e 08 10 20 01 83 f3 ........O... ... 0040 cc 5a 00 00 01 24 26 80 03 0c cd 98 e9 fb dd c9 .Z...$&......... 0050 0c d5 69 25 bb 7a 6b 30 5e 4c 9e a2 b9 7c b3 72 ..i%.zk0^L...|.r 0060 6c 28 1c 7d a4 0e 6d 69 44 7c b7 3d 45 8b ff 5b l(.}..miD|.=E..[ 0070 96 96 8a 18 96 d2 4b 8a 98 46 e4 e1 7d 19 24 e3 ......K..F..}.$. 0080 fd 99 02 39 09 12 41 0d 1c 0d c8 39 f7 ee dd cc ...9..A....9.... 0090 7e a7 18 fc 47 ce 05 cc b4 30 07 9b 58 3c c5 85 ~...G....0..X<.. 00a0 05 51 1a 46 e6 da 4d f5 b5 2e de d1 9a eb ed 85 .Q.F..M......... 00b0 55 76 50 f4 e8 57 cd 4c 6f 23 a2 39 f7 38 5b 00 UvP..W.Lo#.9.8[. 00c0 e3 fd 44 29 48 b2 89 37 1f 40 bd 6c 16 e6 23 28 ..D)H..7.@.l..#( 00d0 de 2b 73 06 a9 87 ce 07 b9 3c db d0 2b 20 1e f4 .+s......<..+ .. 00e0 57 cc e2 98 3c e0 c8 6f e8 db da 06 13 4e a8 bd W...<..o.....N.. 00f0 9c a3 7b e8 e2 15 9d 17 6b 40 2a 65 12 c3 f2 dc ..{.....k@*e.... 0100 b8 7d 1a ed 9f 06 48 6b 35 71 59 db 0f c2 58 26 .}....Hk5qY...X& 0110 c5 2f fb 34 f4 ce 69 eb f2 5a 27 a2 19 b1 bf f0 ./.4..i..Z'..... 0120 a7 6b d6 1e 15 3c 79 3a cc 5a 39 0e e5 0c 3a ec .k.....-.p..... 0060 67 36 41 3a 1a 49 62 32 6b 0d g6A:.Ib2k. Frame 10 (106 bytes on wire, 106 bytes captured) Arrival Time: Jul 15, 2004 13:21:44.387805000 Time delta from previous packet: 0.104177000 seconds Time since reference or first frame: 0.411246000 seconds Frame Number: 10 Packet Length: 106 bytes Capture Length: 106 bytes Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:07:e9:0f:d4:32 Destination: 00:07:e9:0f:d4:32 (00:07:e9:0f:d4:32) Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Type: IP (0x0800) Frame check sequence: 0x62326b0d (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.127 (165.227.249.127) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 88 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfbd3 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.127 (165.227.249.127) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 68 Checksum: 0x53d4 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xDC36DD78BCCFAC09 Responder cookie: 0xF1981D15F2974F0E Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x83F3CC5A Length: 60 Encrypted payload (32 bytes) 0000 00 07 e9 0f d4 32 00 0c 29 fc 0c 9f 08 00 45 00 .....2..).....E. 0010 00 58 00 00 40 00 40 11 fb d3 a5 e3 f9 7a a5 e3 .X..@.@......z.. 0020 f9 7f 01 f4 01 f4 00 44 53 d4 dc 36 dd 78 bc cf .......DS..6.x.. 0030 ac 09 f1 98 1d 15 f2 97 4f 0e 08 10 20 01 83 f3 ........O... ... 0040 cc 5a 00 00 00 3c 39 dc bd 8b 7b f8 d8 1a a3 35 .Z...<9...{....5 0050 65 9f 5a 54 b7 3e 0b bb 2d c1 70 18 ae 1d fd 1f e.ZT.>..-.p..... 0060 67 36 41 3a 1a 49 62 32 6b 0d g6A:.Ib2k. Frame 11 (106 bytes on wire, 106 bytes captured) Arrival Time: Jul 15, 2004 13:21:44.489382000 Time delta from previous packet: 0.101577000 seconds Time since reference or first frame: 0.512823000 seconds Frame Number: 11 Packet Length: 106 bytes Capture Length: 106 bytes Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:07:e9:0f:d4:32 Destination: 00:07:e9:0f:d4:32 (00:07:e9:0f:d4:32) Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Type: IP (0x0800) Frame check sequence: 0x62326b0d (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.127 (165.227.249.127) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 88 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfbd3 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.127 (165.227.249.127) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 68 Checksum: 0x53d4 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xDC36DD78BCCFAC09 Responder cookie: 0xF1981D15F2974F0E Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x83F3CC5A Length: 60 Encrypted payload (32 bytes) 0000 00 07 e9 0f d4 32 00 0c 29 fc 0c 9f 08 00 45 00 .....2..).....E. 0010 00 58 00 00 40 00 40 11 fb d3 a5 e3 f9 7a a5 e3 .X..@.@......z.. 0020 f9 7f 01 f4 01 f4 00 44 53 d4 dc 36 dd 78 bc cf .......DS..6.x.. 0030 ac 09 f1 98 1d 15 f2 97 4f 0e 08 10 20 01 83 f3 ........O... ... 0040 cc 5a 00 00 00 3c 39 dc bd 8b 7b f8 d8 1a a3 35 .Z...<9...{....5 0050 65 9f 5a 54 b7 3e 0b bb 2d c1 70 18 ae 1d fd 1f e.ZT.>..-.p..... 0060 67 36 41 3a 1a 49 62 32 6b 0d g6A:.Ib2k. Frame 12 (130 bytes on wire, 130 bytes captured) Arrival Time: Jul 15, 2004 13:21:44.609001000 Time delta from previous packet: 0.119619000 seconds Time since reference or first frame: 0.632442000 seconds Frame Number: 12 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:50:fc:84:d2:ec Destination: 00:50:fc:84:d2:ec (00:50:fc:84:d2:ec) Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Type: IP (0x0800) Frame check sequence: 0xbd817115 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.127 (165.227.249.127) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0011 (17) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x7c89 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.127 (165.227.249.127) Encapsulating Security Payload SPI: 0x00001d4d Sequence: 1 Data (84 bytes) 0000 00 50 fc 84 d2 ec 00 0c 29 fc 0c 9f 08 00 45 00 .P......).....E. 0010 00 70 00 11 00 00 ff 32 7c 89 a5 e3 f9 7a a5 e3 .p.....2|....z.. 0020 f9 7f 00 00 1d 4d 00 00 00 01 48 77 16 f5 53 59 .....M....Hw..SY 0030 96 6b ce 01 e6 2f 67 9f af 30 5c f0 82 f4 78 21 .k.../g..0\...x! 0040 5a b4 82 39 9a 59 a9 27 62 98 89 b9 06 6b 8a e0 Z..9.Y.'b....k.. 0050 99 85 11 d7 07 12 1b b8 ae 30 59 68 59 cb fa e3 .........0YhY... 0060 a6 5a 3e 3d 0d 38 df 59 13 86 cb e7 9f dd 9b a2 .Z>=.8.Y........ 0070 c7 6b 5e 40 44 a7 68 8b 99 5f 8c 22 0d 04 bd 81 .k^@D.h.._.".... 0080 71 15 q. Frame 13 (130 bytes on wire, 130 bytes captured) Arrival Time: Jul 15, 2004 13:21:44.609335000 Time delta from previous packet: 0.000334000 seconds Time since reference or first frame: 0.632776000 seconds Frame Number: 13 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:50:fc:84:d2:ec, Dst: 00:07:e9:0f:d4:32 Destination: 00:07:e9:0f:d4:32 (00:07:e9:0f:d4:32) Source: 00:50:fc:84:d2:ec (00:50:fc:84:d2:ec) Type: IP (0x0800) Frame check sequence: 0xf5d34ce5 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.127 (165.227.249.127) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0011 (17) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 254 Protocol: ESP (0x32) Header checksum: 0x7d89 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.127 (165.227.249.127) Encapsulating Security Payload SPI: 0x00001d4d Sequence: 1 Data (84 bytes) 0000 00 07 e9 0f d4 32 00 50 fc 84 d2 ec 08 00 45 00 .....2.P......E. 0010 00 70 00 11 00 00 fe 32 7d 89 a5 e3 f9 7a a5 e3 .p.....2}....z.. 0020 f9 7f 00 00 1d 4d 00 00 00 01 48 77 16 f5 53 59 .....M....Hw..SY 0030 96 6b ce 01 e6 2f 67 9f af 30 5c f0 82 f4 78 21 .k.../g..0\...x! 0040 5a b4 82 39 9a 59 a9 27 62 98 89 b9 06 6b 8a e0 Z..9.Y.'b....k.. 0050 99 85 11 d7 07 12 1b b8 ae 30 59 68 59 cb fa e3 .........0YhY... 0060 a6 5a 3e 3d 0d 38 df 59 13 86 cb e7 9f dd 9b a2 .Z>=.8.Y........ 0070 c7 6b 5e 40 44 a7 68 8b 99 5f 8c 22 0d 04 f5 d3 .k^@D.h.._.".... 0080 4c e5 L. Frame 14 (130 bytes on wire, 130 bytes captured) Arrival Time: Jul 15, 2004 13:21:46.301907000 Time delta from previous packet: 1.692572000 seconds Time since reference or first frame: 2.325348000 seconds Frame Number: 14 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:07:e9:0f:d4:32, Dst: 00:0c:29:fc:0c:9f Destination: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Source: 00:07:e9:0f:d4:32 (00:07:e9:0f:d4:32) Type: IP (0x0800) Frame check sequence: 0x7d5d2717 (correct) Internet Protocol, Src Addr: 165.227.249.127 (165.227.249.127), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x001b (27) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x3b80 (correct) Source: 165.227.249.127 (165.227.249.127) Destination: 165.227.249.122 (165.227.249.122) Encapsulating Security Payload SPI: 0xca68f86e Sequence: 2 Data (84 bytes) 0000 00 0c 29 fc 0c 9f 00 07 e9 0f d4 32 08 00 45 00 ..)........2..E. 0010 00 70 00 1b 00 00 40 32 3b 80 a5 e3 f9 7f a5 e3 .p....@2;....... 0020 f9 7a ca 68 f8 6e 00 00 00 02 41 a0 11 2b 9a c4 .z.h.n....A..+.. 0030 49 50 ac fe 3b 8d 58 2d f8 bb b1 94 11 ef 28 9f IP..;.X-......(. 0040 37 74 ce 29 d8 a0 20 5a cb 5f d3 b2 28 4b 66 bf 7t.).. Z._..(Kf. 0050 b8 02 14 59 a3 2f 8e 0b 6f 22 ce c1 0d 61 42 40 ...Y./..o"...aB@ 0060 99 d9 8d 52 1d 3f ed 38 8d 17 bb 5a 6d e2 a8 3c ...R.?.8...Zm..< 0070 2c fa 50 bb 03 fc 78 2b 95 a8 34 c2 c0 9e 7d 5d ,.P...x+..4...}] 0080 27 17 '. Frame 15 (130 bytes on wire, 130 bytes captured) Arrival Time: Jul 15, 2004 13:21:46.312851000 Time delta from previous packet: 0.010944000 seconds Time since reference or first frame: 2.336292000 seconds Frame Number: 15 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:50:fc:84:d2:ec Destination: 00:50:fc:84:d2:ec (00:50:fc:84:d2:ec) Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Type: IP (0x0800) Frame check sequence: 0x99083f2f (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.127 (165.227.249.127) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0012 (18) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x7c88 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.127 (165.227.249.127) Encapsulating Security Payload SPI: 0x00001d4d Sequence: 2 Data (84 bytes) 0000 00 50 fc 84 d2 ec 00 0c 29 fc 0c 9f 08 00 45 00 .P......).....E. 0010 00 70 00 12 00 00 ff 32 7c 88 a5 e3 f9 7a a5 e3 .p.....2|....z.. 0020 f9 7f 00 00 1d 4d 00 00 00 02 cb e7 9f dd 9b a2 .....M.......... 0030 c7 6b e5 0a 00 5d d7 2b 76 d2 39 f1 c2 60 f3 e6 .k...].+v.9..`.. 0040 19 1f aa f4 f4 56 ae cb 22 a5 ec b1 24 94 3a f4 .....V.."...$.:. 0050 0f d7 d9 02 5c 83 d7 cc b7 0e 8a 67 f1 38 13 63 ....\......g.8.c 0060 d9 12 3b 7e a5 60 5e c8 96 9e d5 f2 39 ce 24 e7 ..;~.`^.....9.$. 0070 e1 37 ca 28 94 95 63 e6 9d be 1d 37 d5 f2 99 08 .7.(..c....7.... 0080 3f 2f ?/ Frame 16 (130 bytes on wire, 130 bytes captured) Arrival Time: Jul 15, 2004 13:21:46.313043000 Time delta from previous packet: 0.000192000 seconds Time since reference or first frame: 2.336484000 seconds Frame Number: 16 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:50:fc:84:d2:ec, Dst: 00:07:e9:0f:d4:32 Destination: 00:07:e9:0f:d4:32 (00:07:e9:0f:d4:32) Source: 00:50:fc:84:d2:ec (00:50:fc:84:d2:ec) Type: IP (0x0800) Frame check sequence: 0xd15a02df (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.127 (165.227.249.127) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0012 (18) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 254 Protocol: ESP (0x32) Header checksum: 0x7d88 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.127 (165.227.249.127) Encapsulating Security Payload SPI: 0x00001d4d Sequence: 2 Data (84 bytes) 0000 00 07 e9 0f d4 32 00 50 fc 84 d2 ec 08 00 45 00 .....2.P......E. 0010 00 70 00 12 00 00 fe 32 7d 88 a5 e3 f9 7a a5 e3 .p.....2}....z.. 0020 f9 7f 00 00 1d 4d 00 00 00 02 cb e7 9f dd 9b a2 .....M.......... 0030 c7 6b e5 0a 00 5d d7 2b 76 d2 39 f1 c2 60 f3 e6 .k...].+v.9..`.. 0040 19 1f aa f4 f4 56 ae cb 22 a5 ec b1 24 94 3a f4 .....V.."...$.:. 0050 0f d7 d9 02 5c 83 d7 cc b7 0e 8a 67 f1 38 13 63 ....\......g.8.c 0060 d9 12 3b 7e a5 60 5e c8 96 9e d5 f2 39 ce 24 e7 ..;~.`^.....9.$. 0070 e1 37 ca 28 94 95 63 e6 9d be 1d 37 d5 f2 d1 5a .7.(..c....7...Z 0080 02 df .. Frame 17 (130 bytes on wire, 130 bytes captured) Arrival Time: Jul 15, 2004 13:21:46.314210000 Time delta from previous packet: 0.001167000 seconds Time since reference or first frame: 2.337651000 seconds Frame Number: 17 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:07:e9:0f:d4:32, Dst: 00:0c:29:fc:0c:9f Destination: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Source: 00:07:e9:0f:d4:32 (00:07:e9:0f:d4:32) Type: IP (0x0800) Frame check sequence: 0x583ea471 (correct) Internet Protocol, Src Addr: 165.227.249.127 (165.227.249.127), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x001c (28) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 63 Protocol: ESP (0x32) Header checksum: 0x3c7f (correct) Source: 165.227.249.127 (165.227.249.127) Destination: 165.227.249.122 (165.227.249.122) Encapsulating Security Payload SPI: 0xca68f86e Sequence: 3 Data (84 bytes) 0000 00 0c 29 fc 0c 9f 00 07 e9 0f d4 32 08 00 45 00 ..)........2..E. 0010 00 70 00 1c 00 00 3f 32 3c 7f a5 e3 f9 7f a5 e3 .p....?2<....... 0020 f9 7a ca 68 f8 6e 00 00 00 03 1d 4f 78 88 ad 38 .z.h.n.....Ox..8 0030 91 a2 2c 2a a9 dd 1a de 66 24 80 82 3b 15 a3 2a ..,*....f$..;..* 0040 1e 0d d7 de f8 93 76 20 e9 40 0f f5 84 83 3f 15 ......v .@....?. 0050 bb a8 dc 0d 29 4b 9c 2a 4e 0e 4f 73 fe 4b c4 d4 ....)K.*N.Os.K.. 0060 1f e3 b5 f0 6c 86 d2 9a 7d 67 73 9c fd 2a d8 db ....l...}gs..*.. 0070 01 3a 20 b7 32 a5 69 f7 51 e3 16 eb 57 8d 58 3e .: .2.i.Q...W.X> 0080 a4 71 .q Frame 18 (130 bytes on wire, 130 bytes captured) Arrival Time: Jul 15, 2004 13:21:47.314765000 Time delta from previous packet: 1.000555000 seconds Time since reference or first frame: 3.338206000 seconds Frame Number: 18 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:50:fc:84:d2:ec Destination: 00:50:fc:84:d2:ec (00:50:fc:84:d2:ec) Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Type: IP (0x0800) Frame check sequence: 0xa85b452e (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.127 (165.227.249.127) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0013 (19) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x7c87 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.127 (165.227.249.127) Encapsulating Security Payload SPI: 0x00001d4d Sequence: 3 Data (84 bytes) 0000 00 50 fc 84 d2 ec 00 0c 29 fc 0c 9f 08 00 45 00 .P......).....E. 0010 00 70 00 13 00 00 ff 32 7c 87 a5 e3 f9 7a a5 e3 .p.....2|....z.. 0020 f9 7f 00 00 1d 4d 00 00 00 03 d5 f2 39 ce 24 e7 .....M......9.$. 0030 e1 37 6e 05 99 e6 2d 5a a9 ed 56 51 e9 d2 8f 2f .7n...-Z..VQ.../ 0040 8c 27 9f ce 6d 0c 1d e2 49 47 be 1e d1 2d af fe .'..m...IG...-.. 0050 af 4c 8b e8 99 06 ac 99 c9 81 10 2d 8c 4e 49 27 .L.........-.NI' 0060 a7 ad c1 4c 0f c5 83 4e 61 09 77 00 90 3d 83 de ...L...Na.w..=.. 0070 39 1f dd 2b 74 f1 c2 0e c5 0b be 81 cf 03 a8 5b 9..+t..........[ 0080 45 2e E. Frame 19 (130 bytes on wire, 130 bytes captured) Arrival Time: Jul 15, 2004 13:21:47.314897000 Time delta from previous packet: 0.000132000 seconds Time since reference or first frame: 3.338338000 seconds Frame Number: 19 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:50:fc:84:d2:ec, Dst: 00:07:e9:0f:d4:32 Destination: 00:07:e9:0f:d4:32 (00:07:e9:0f:d4:32) Source: 00:50:fc:84:d2:ec (00:50:fc:84:d2:ec) Type: IP (0x0800) Frame check sequence: 0xe00978de (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.127 (165.227.249.127) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0013 (19) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 254 Protocol: ESP (0x32) Header checksum: 0x7d87 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.127 (165.227.249.127) Encapsulating Security Payload SPI: 0x00001d4d Sequence: 3 Data (84 bytes) 0000 00 07 e9 0f d4 32 00 50 fc 84 d2 ec 08 00 45 00 .....2.P......E. 0010 00 70 00 13 00 00 fe 32 7d 87 a5 e3 f9 7a a5 e3 .p.....2}....z.. 0020 f9 7f 00 00 1d 4d 00 00 00 03 d5 f2 39 ce 24 e7 .....M......9.$. 0030 e1 37 6e 05 99 e6 2d 5a a9 ed 56 51 e9 d2 8f 2f .7n...-Z..VQ.../ 0040 8c 27 9f ce 6d 0c 1d e2 49 47 be 1e d1 2d af fe .'..m...IG...-.. 0050 af 4c 8b e8 99 06 ac 99 c9 81 10 2d 8c 4e 49 27 .L.........-.NI' 0060 a7 ad c1 4c 0f c5 83 4e 61 09 77 00 90 3d 83 de ...L...Na.w..=.. 0070 39 1f dd 2b 74 f1 c2 0e c5 0b be 81 cf 03 e0 09 9..+t........... 0080 78 de x. Frame 20 (130 bytes on wire, 130 bytes captured) Arrival Time: Jul 15, 2004 13:21:47.316104000 Time delta from previous packet: 0.001207000 seconds Time since reference or first frame: 3.339545000 seconds Frame Number: 20 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:07:e9:0f:d4:32, Dst: 00:0c:29:fc:0c:9f Destination: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Source: 00:07:e9:0f:d4:32 (00:07:e9:0f:d4:32) Type: IP (0x0800) Frame check sequence: 0x130a04a1 (correct) Internet Protocol, Src Addr: 165.227.249.127 (165.227.249.127), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x001d (29) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 63 Protocol: ESP (0x32) Header checksum: 0x3c7e (correct) Source: 165.227.249.127 (165.227.249.127) Destination: 165.227.249.122 (165.227.249.122) Encapsulating Security Payload SPI: 0xca68f86e Sequence: 4 Data (84 bytes) 0000 00 0c 29 fc 0c 9f 00 07 e9 0f d4 32 08 00 45 00 ..)........2..E. 0010 00 70 00 1d 00 00 3f 32 3c 7e a5 e3 f9 7f a5 e3 .p....?2<~...... 0020 f9 7a ca 68 f8 6e 00 00 00 04 ad ea 71 61 3a 05 .z.h.n......qa:. 0030 fa e8 78 fa 94 82 40 ad 0c a9 c1 ad d8 18 db 8f ..x...@......... 0040 a4 af 7c 47 49 fd ae 20 32 75 8e 3e 68 9d 5f 4f ..|GI.. 2u.>h._O 0050 55 cb 11 01 f3 10 1e 8e a1 fc ba aa f6 3c b5 07 U............<.. 0060 8b 9b 4b 50 75 e3 9e b8 62 a2 cf 3a c5 eb ea 90 ..KPu...b..:.... 0070 14 43 68 9a 28 44 fc 08 fb f8 b5 b6 2d bd 13 0a .Ch.(D......-... 0080 04 a1 .. Frame 21 (130 bytes on wire, 130 bytes captured) Arrival Time: Jul 15, 2004 13:21:48.322722000 Time delta from previous packet: 1.006618000 seconds Time since reference or first frame: 4.346163000 seconds Frame Number: 21 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:50:fc:84:d2:ec Destination: 00:50:fc:84:d2:ec (00:50:fc:84:d2:ec) Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Type: IP (0x0800) Frame check sequence: 0xff1a201f (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.127 (165.227.249.127) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0014 (20) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x7c86 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.127 (165.227.249.127) Encapsulating Security Payload SPI: 0x00001d4d Sequence: 4 Data (84 bytes) 0000 00 50 fc 84 d2 ec 00 0c 29 fc 0c 9f 08 00 45 00 .P......).....E. 0010 00 70 00 14 00 00 ff 32 7c 86 a5 e3 f9 7a a5 e3 .p.....2|....z.. 0020 f9 7f 00 00 1d 4d 00 00 00 04 77 00 90 3d 83 de .....M....w..=.. 0030 39 1f 22 6b 07 e5 e0 dc 58 c6 88 06 2b 37 65 85 9."k....X...+7e. 0040 c1 2e ba 6f 28 83 44 c9 87 03 72 5a 73 7e 5b f3 ...o(.D...rZs~[. 0050 12 12 fb 1b 53 14 d2 c8 20 ac e2 62 8d 7a 9c 52 ....S... ..b.z.R 0060 69 0e ec 45 25 13 97 35 8d 8a 17 65 67 0f b5 ca i..E%..5...eg... 0070 ce 43 78 8a e0 00 be 19 d4 b0 10 38 fc 29 ff 1a .Cx........8.).. 0080 20 1f . Frame 22 (130 bytes on wire, 130 bytes captured) Arrival Time: Jul 15, 2004 13:21:48.322947000 Time delta from previous packet: 0.000225000 seconds Time since reference or first frame: 4.346388000 seconds Frame Number: 22 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:50:fc:84:d2:ec, Dst: 00:07:e9:0f:d4:32 Destination: 00:07:e9:0f:d4:32 (00:07:e9:0f:d4:32) Source: 00:50:fc:84:d2:ec (00:50:fc:84:d2:ec) Type: IP (0x0800) Frame check sequence: 0xb7481def (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.127 (165.227.249.127) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0014 (20) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 254 Protocol: ESP (0x32) Header checksum: 0x7d86 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.127 (165.227.249.127) Encapsulating Security Payload SPI: 0x00001d4d Sequence: 4 Data (84 bytes) 0000 00 07 e9 0f d4 32 00 50 fc 84 d2 ec 08 00 45 00 .....2.P......E. 0010 00 70 00 14 00 00 fe 32 7d 86 a5 e3 f9 7a a5 e3 .p.....2}....z.. 0020 f9 7f 00 00 1d 4d 00 00 00 04 77 00 90 3d 83 de .....M....w..=.. 0030 39 1f 22 6b 07 e5 e0 dc 58 c6 88 06 2b 37 65 85 9."k....X...+7e. 0040 c1 2e ba 6f 28 83 44 c9 87 03 72 5a 73 7e 5b f3 ...o(.D...rZs~[. 0050 12 12 fb 1b 53 14 d2 c8 20 ac e2 62 8d 7a 9c 52 ....S... ..b.z.R 0060 69 0e ec 45 25 13 97 35 8d 8a 17 65 67 0f b5 ca i..E%..5...eg... 0070 ce 43 78 8a e0 00 be 19 d4 b0 10 38 fc 29 b7 48 .Cx........8.).H 0080 1d ef .. Frame 23 (130 bytes on wire, 130 bytes captured) Arrival Time: Jul 15, 2004 13:21:48.324030000 Time delta from previous packet: 0.001083000 seconds Time since reference or first frame: 4.347471000 seconds Frame Number: 23 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:07:e9:0f:d4:32, Dst: 00:0c:29:fc:0c:9f Destination: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Source: 00:07:e9:0f:d4:32 (00:07:e9:0f:d4:32) Type: IP (0x0800) Frame check sequence: 0xb5297db3 (correct) Internet Protocol, Src Addr: 165.227.249.127 (165.227.249.127), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x001e (30) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 63 Protocol: ESP (0x32) Header checksum: 0x3c7d (correct) Source: 165.227.249.127 (165.227.249.127) Destination: 165.227.249.122 (165.227.249.122) Encapsulating Security Payload SPI: 0xca68f86e Sequence: 5 Data (84 bytes) 0000 00 0c 29 fc 0c 9f 00 07 e9 0f d4 32 08 00 45 00 ..)........2..E. 0010 00 70 00 1e 00 00 3f 32 3c 7d a5 e3 f9 7f a5 e3 .p....?2<}...... 0020 f9 7a ca 68 f8 6e 00 00 00 05 66 06 78 70 db 4e .z.h.n....f.xp.N 0030 0d 65 ac e2 73 01 e7 82 02 4a 8c b5 7c 1f 59 65 .e..s....J..|.Ye 0040 82 c2 00 88 9d cd 74 be fc b9 fe b2 fa 92 0f c1 ......t......... 0050 7f 63 74 21 9e 45 84 bf 53 b0 21 77 cb 23 46 bc .ct!.E..S.!w.#F. 0060 11 9e 89 9e 16 69 61 57 f7 11 ae 2c 2b 60 59 66 .....iaW...,+`Yf 0070 7e 53 d4 0b b6 bc 0a 23 77 bd 7b ad 97 83 b5 29 ~S.....#w.{....) 0080 7d b3 }.