Frame 1 (174 bytes on wire, 174 bytes captured) Arrival Time: Jun 30, 2005 11:21:07.621722000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 174 bytes Capture Length: 174 bytes Ethernet II, Src: 00:0c:29:89:f2:82, Dst: 00:a0:eb:00:cd:aa Destination: 00:a0:eb:00:cd:aa (00:a0:eb:00:cd:aa) Source: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Type: IP (0x0800) Frame check sequence: 0x7144c827 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.129 (165.227.249.129) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 156 Identification: 0x00f1 (241) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfa9c (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.129 (165.227.249.129) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 136 Checksum: 0xb09d (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x006C53AC44133D80 Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 128 Security Association payload Next payload: Vendor ID (13) Length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 44 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 36 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: NONE (0) Length: 44 Vendor ID: Check Point Check Point Product: VPN-1 Version: NG with Application Intelligence R55 0000 00 a0 eb 00 cd aa 00 0c 29 89 f2 82 08 00 45 00 ........).....E. 0010 00 9c 00 f1 40 00 40 11 fa 9c a5 e3 f9 7a a5 e3 ....@.@......z.. 0020 f9 81 01 f4 01 f4 00 88 b0 9d 00 6c 53 ac 44 13 ...........lS.D. 0030 3d 80 00 00 00 00 00 00 00 00 01 10 02 00 00 00 =............... 0040 00 00 00 00 00 80 0d 00 00 38 00 00 00 01 00 00 .........8...... 0050 00 01 00 00 00 2c 01 01 00 01 00 00 00 24 01 01 .....,.......$.. 0060 00 00 80 01 00 05 80 02 00 02 80 03 00 01 80 04 ................ 0070 00 02 80 0b 00 01 00 0c 00 04 00 00 70 80 00 00 ............p... 0080 00 2c f4 ed 19 e0 c1 14 eb 51 6f aa ac 0e e3 7d .,.......Qo....} 0090 af 28 07 b4 38 1f 00 00 00 01 00 00 13 8d 42 c2 .(..8.........B. 00a0 1a 35 00 00 00 00 18 00 00 00 71 44 c8 27 .5........qD.' Frame 2 (130 bytes on wire, 130 bytes captured) Arrival Time: Jun 30, 2005 11:21:07.624422000 Time delta from previous packet: 0.002700000 seconds Time since reference or first frame: 0.002700000 seconds Frame Number: 2 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:a0:eb:00:cd:aa, Dst: 00:0c:29:89:f2:82 Destination: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Source: 00:a0:eb:00:cd:aa (00:a0:eb:00:cd:aa) Type: IP (0x0800) Frame check sequence: 0x9da56ac4 (correct) Internet Protocol, Src Addr: 165.227.249.129 (165.227.249.129), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0005 (5) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3bb5 (correct) Source: 165.227.249.129 (165.227.249.129) Destination: 165.227.249.122 (165.227.249.122) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 92 Checksum: 0x0ebc (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x006C53AC44133D80 Responder cookie: 0x70432C3B945FB0A0 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 84 Security Association payload Next payload: NONE (0) Length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 44 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 36 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) 0000 00 0c 29 89 f2 82 00 a0 eb 00 cd aa 08 00 45 00 ..)...........E. 0010 00 70 00 05 00 00 40 11 3b b5 a5 e3 f9 81 a5 e3 .p....@.;....... 0020 f9 7a 01 f4 01 f4 00 5c 0e bc 00 6c 53 ac 44 13 .z.....\...lS.D. 0030 3d 80 70 43 2c 3b 94 5f b0 a0 01 10 02 00 00 00 =.pC,;._........ 0040 00 00 00 00 00 54 00 00 00 38 00 00 00 01 00 00 .....T...8...... 0050 00 01 00 00 00 2c 01 01 00 01 00 00 00 24 01 01 .....,.......$.. 0060 00 00 80 01 00 05 80 02 00 02 80 03 00 01 80 04 ................ 0070 00 02 80 0b 00 01 00 0c 00 04 00 00 70 80 9d a5 ............p... 0080 6a c4 j. Frame 3 (230 bytes on wire, 230 bytes captured) Arrival Time: Jun 30, 2005 11:21:07.629608000 Time delta from previous packet: 0.005186000 seconds Time since reference or first frame: 0.007886000 seconds Frame Number: 3 Packet Length: 230 bytes Capture Length: 230 bytes Ethernet II, Src: 00:0c:29:89:f2:82, Dst: 00:a0:eb:00:cd:aa Destination: 00:a0:eb:00:cd:aa (00:a0:eb:00:cd:aa) Source: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Type: IP (0x0800) Frame check sequence: 0x04696d54 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.129 (165.227.249.129) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 212 Identification: 0x00f2 (242) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfa63 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.129 (165.227.249.129) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 192 Checksum: 0x4398 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x006C53AC44133D80 Responder cookie: 0x70432C3B945FB0A0 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 184 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 24 Nonce Data 0000 00 a0 eb 00 cd aa 00 0c 29 89 f2 82 08 00 45 00 ........).....E. 0010 00 d4 00 f2 40 00 40 11 fa 63 a5 e3 f9 7a a5 e3 ....@.@..c...z.. 0020 f9 81 01 f4 01 f4 00 c0 43 98 00 6c 53 ac 44 13 ........C..lS.D. 0030 3d 80 70 43 2c 3b 94 5f b0 a0 04 10 02 00 00 00 =.pC,;._........ 0040 00 00 00 00 00 b8 0a 00 00 84 f1 48 d3 0b 13 bc ...........H.... 0050 09 90 94 8a 15 a0 08 66 b7 f1 c4 53 8f f6 aa 93 .......f...S.... 0060 a9 5a 8c 65 72 38 78 2a 9b a4 3e 8e 25 29 da a1 .Z.er8x*..>.%).. 0070 cb 0f dc 35 92 41 1e b0 7b 1e 4b 7c aa e1 73 ba ...5.A..{.K|..s. 0080 a0 7b 2c 7b 25 ac a0 86 86 9a 08 7d fb 41 5c d8 .{,{%......}.A\. 0090 9c 0e 85 33 f4 34 d4 d2 51 5f 6d 45 9d 69 f7 80 ...3.4..Q_mE.i.. 00a0 4b 59 46 01 5e 04 fd f1 ff 7b 94 7b a3 08 88 4b KYF.^....{.{...K 00b0 7a 80 5b 01 d4 a4 a5 42 52 7e 41 c0 c0 8f 74 80 z.[....BR~A...t. 00c0 d7 62 50 03 43 60 14 19 ff f4 00 00 00 18 1f ed .bP.C`.......... 00d0 72 a6 ba 4b a8 8f 3c 9b a5 a0 c0 86 cd 72 c2 78 r..K..<......r.x 00e0 08 90 04 69 6d 54 ...imT Frame 4 (226 bytes on wire, 226 bytes captured) Arrival Time: Jun 30, 2005 11:21:08.350890000 Time delta from previous packet: 0.721282000 seconds Time since reference or first frame: 0.729168000 seconds Frame Number: 4 Packet Length: 226 bytes Capture Length: 226 bytes Ethernet II, Src: 00:a0:eb:00:cd:aa, Dst: 00:0c:29:89:f2:82 Destination: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Source: 00:a0:eb:00:cd:aa (00:a0:eb:00:cd:aa) Type: IP (0x0800) Frame check sequence: 0x5e9e472c (correct) Internet Protocol, Src Addr: 165.227.249.129 (165.227.249.129), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 208 Identification: 0x0006 (6) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3b54 (correct) Source: 165.227.249.129 (165.227.249.129) Destination: 165.227.249.122 (165.227.249.122) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 188 Checksum: 0x909e (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x006C53AC44133D80 Responder cookie: 0x70432C3B945FB0A0 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 180 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 20 Nonce Data 0000 00 0c 29 89 f2 82 00 a0 eb 00 cd aa 08 00 45 00 ..)...........E. 0010 00 d0 00 06 00 00 40 11 3b 54 a5 e3 f9 81 a5 e3 ......@.;T...... 0020 f9 7a 01 f4 01 f4 00 bc 90 9e 00 6c 53 ac 44 13 .z.........lS.D. 0030 3d 80 70 43 2c 3b 94 5f b0 a0 04 10 02 00 00 00 =.pC,;._........ 0040 00 00 00 00 00 b4 0a 00 00 84 45 16 0d 50 b6 69 ..........E..P.i 0050 45 56 3f fd 4f de 35 a6 d4 0e dc cf 9a 80 94 41 EV?.O.5........A 0060 0c 10 f1 3d 6e 81 57 4d 55 8d a0 64 b0 12 c2 eb ...=n.WMU..d.... 0070 0c 26 5b e2 18 77 2d 80 5f b8 ec 1f d2 4e 96 00 .&[..w-._....N.. 0080 1c b6 c4 1f df 72 b1 99 ef d0 30 97 7b 53 6b 0f .....r....0.{Sk. 0090 66 7e 05 27 7c 18 05 2f 51 20 b0 5f d0 b0 cd 4a f~.'|../Q ._...J 00a0 91 61 c7 aa 80 05 91 7f 7f 61 ba b2 8b f5 68 27 .a.......a....h' 00b0 3b fd c4 3e 54 f0 67 7e 14 ea ec eb fe bc e8 a9 ;..>T.g~........ 00c0 49 ee 99 ce 24 8e bb 48 7d 20 00 00 00 14 b9 6e I...$..H} .....n 00d0 9b a3 13 1e 85 07 d1 3b 76 40 5a 62 cd 9c 5e 9e .......;v@Zb..^. 00e0 47 2c G, Frame 5 (114 bytes on wire, 114 bytes captured) Arrival Time: Jun 30, 2005 11:21:08.358662000 Time delta from previous packet: 0.007772000 seconds Time since reference or first frame: 0.736940000 seconds Frame Number: 5 Packet Length: 114 bytes Capture Length: 114 bytes Ethernet II, Src: 00:0c:29:89:f2:82, Dst: 00:a0:eb:00:cd:aa Destination: 00:a0:eb:00:cd:aa (00:a0:eb:00:cd:aa) Source: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Type: IP (0x0800) Frame check sequence: 0x9fee5d46 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.129 (165.227.249.129) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0x00f3 (243) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfad6 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.129 (165.227.249.129) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 76 Checksum: 0x1ea8 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x006C53AC44133D80 Responder cookie: 0x70432C3B945FB0A0 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 68 Encrypted payload (40 bytes) 0000 00 a0 eb 00 cd aa 00 0c 29 89 f2 82 08 00 45 00 ........).....E. 0010 00 60 00 f3 40 00 40 11 fa d6 a5 e3 f9 7a a5 e3 .`..@.@......z.. 0020 f9 81 01 f4 01 f4 00 4c 1e a8 00 6c 53 ac 44 13 .......L...lS.D. 0030 3d 80 70 43 2c 3b 94 5f b0 a0 05 10 02 01 00 00 =.pC,;._........ 0040 00 00 00 00 00 44 c9 52 9d 19 7c 73 ce e1 29 ea .....D.R..|s..). 0050 b0 a9 db 03 62 82 62 25 bb 7c c0 92 0b 54 92 2a ....b.b%.|...T.* 0060 04 91 c6 f2 61 1b 70 ac 8b a7 6c 6b 04 95 9f ee ....a.p...lk.... 0070 5d 46 ]F Frame 6 (114 bytes on wire, 114 bytes captured) Arrival Time: Jun 30, 2005 11:21:08.361968000 Time delta from previous packet: 0.003306000 seconds Time since reference or first frame: 0.740246000 seconds Frame Number: 6 Packet Length: 114 bytes Capture Length: 114 bytes Ethernet II, Src: 00:a0:eb:00:cd:aa, Dst: 00:0c:29:89:f2:82 Destination: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Source: 00:a0:eb:00:cd:aa (00:a0:eb:00:cd:aa) Type: IP (0x0800) Frame check sequence: 0x912ac244 (correct) Internet Protocol, Src Addr: 165.227.249.129 (165.227.249.129), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0x0007 (7) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3bc3 (correct) Source: 165.227.249.129 (165.227.249.129) Destination: 165.227.249.122 (165.227.249.122) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 76 Checksum: 0xf741 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x006C53AC44133D80 Responder cookie: 0x70432C3B945FB0A0 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 68 Encrypted payload (40 bytes) 0000 00 0c 29 89 f2 82 00 a0 eb 00 cd aa 08 00 45 00 ..)...........E. 0010 00 60 00 07 00 00 40 11 3b c3 a5 e3 f9 81 a5 e3 .`....@.;....... 0020 f9 7a 01 f4 01 f4 00 4c f7 41 00 6c 53 ac 44 13 .z.....L.A.lS.D. 0030 3d 80 70 43 2c 3b 94 5f b0 a0 05 10 02 01 00 00 =.pC,;._........ 0040 00 00 00 00 00 44 84 0c 85 8f 5e 41 68 4b f4 3a .....D....^AhK.: 0050 8f 9f 03 83 bd d1 32 78 cb 1b f1 0f 34 7b 4b 77 ......2x....4{Kw 0060 53 fb 71 c0 32 1a 75 3f 4b a9 21 fc a8 3f 91 2a S.q.2.u?K.!..?.* 0070 c2 44 .D Frame 7 (346 bytes on wire, 346 bytes captured) Arrival Time: Jun 30, 2005 11:21:08.368543000 Time delta from previous packet: 0.006575000 seconds Time since reference or first frame: 0.746821000 seconds Frame Number: 7 Packet Length: 346 bytes Capture Length: 346 bytes Ethernet II, Src: 00:0c:29:89:f2:82, Dst: 00:a0:eb:00:cd:aa Destination: 00:a0:eb:00:cd:aa (00:a0:eb:00:cd:aa) Source: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Type: IP (0x0800) Frame check sequence: 0x490b1c50 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.129 (165.227.249.129) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 328 Identification: 0x00f4 (244) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xf9ed (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.129 (165.227.249.129) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 308 Checksum: 0xe20a (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x006C53AC44133D80 Responder cookie: 0x70432C3B945FB0A0 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x5022AB6D Length: 300 Encrypted payload (272 bytes) 0000 00 a0 eb 00 cd aa 00 0c 29 89 f2 82 08 00 45 00 ........).....E. 0010 01 48 00 f4 40 00 40 11 f9 ed a5 e3 f9 7a a5 e3 .H..@.@......z.. 0020 f9 81 01 f4 01 f4 01 34 e2 0a 00 6c 53 ac 44 13 .......4...lS.D. 0030 3d 80 70 43 2c 3b 94 5f b0 a0 08 10 20 01 50 22 =.pC,;._.... .P" 0040 ab 6d 00 00 01 2c 68 c5 d8 46 5b f0 96 f7 34 53 .m...,h..F[...4S 0050 c7 2d 9d 0a f6 f8 97 30 3e 5c e0 6e 63 3c 3d 9c .-.....0>\.nc<=. 0060 73 cb b1 f9 56 69 64 0d 90 81 5c d3 e9 ba f5 11 s...Vid...\..... 0070 b7 51 b1 9a b2 66 4b 23 74 44 34 98 79 0f 90 f8 .Q...fK#tD4.y... 0080 42 14 94 c3 46 90 25 21 66 4f a8 12 5d f2 d6 83 B...F.%!fO..]... 0090 f8 a2 7a 43 60 b9 31 0d 7f 5b 30 2b 19 bf 4e b6 ..zC`.1..[0+..N. 00a0 e8 a8 b9 76 34 b0 16 c0 f8 02 f9 0f 36 13 27 c1 ...v4.......6.'. 00b0 8b 6b 4a f1 ab 80 34 36 90 64 a6 ce d7 b0 00 00 .kJ...46.d...... 00c0 d4 65 c0 8d ea f2 49 29 ca 79 8d 98 31 b9 39 1c .e....I).y..1.9. 00d0 dd 38 e0 4f 1e 63 6e 03 07 b0 4b f6 58 ff 7f c4 .8.O.cn...K.X... 00e0 a1 5f ca 85 27 05 ad 77 46 af ee 09 12 41 b2 1a ._..'..wF....A.. 00f0 2a f2 5e f7 8d 8a 93 66 63 b2 3a 3b c8 ac c6 97 *.^....fc.:;.... 0100 8f 5a 06 53 d6 46 d0 5c c7 78 59 44 55 7f 4b 34 .Z.S.F.\.xYDU.K4 0110 86 6d fc 4e 76 b2 ba e6 83 75 46 90 ef ef d1 ce .m.Nv....uF..... 0120 f0 1e 38 50 e2 54 45 15 b9 bf b1 9c f9 d6 39 b6 ..8P.TE.......9. 0130 3b 0b d6 49 92 65 0c 85 35 66 8f 3b 25 6f 14 31 ;..I.e..5f.;%o.1 0140 ae ed 26 39 fd 4a 37 f3 54 8b 46 80 54 79 ef ac ..&9.J7.T.F.Ty.. 0150 1f 18 61 1a 20 99 49 0b 1c 50 ..a. .I..P Frame 8 (338 bytes on wire, 338 bytes captured) Arrival Time: Jun 30, 2005 11:21:09.092557000 Time delta from previous packet: 0.724014000 seconds Time since reference or first frame: 1.470835000 seconds Frame Number: 8 Packet Length: 338 bytes Capture Length: 338 bytes Ethernet II, Src: 00:a0:eb:00:cd:aa, Dst: 00:0c:29:89:f2:82 Destination: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Source: 00:a0:eb:00:cd:aa (00:a0:eb:00:cd:aa) Type: IP (0x0800) Frame check sequence: 0xa7ceb54a (correct) Internet Protocol, Src Addr: 165.227.249.129 (165.227.249.129), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 320 Identification: 0x0008 (8) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3ae2 (correct) Source: 165.227.249.129 (165.227.249.129) Destination: 165.227.249.122 (165.227.249.122) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 300 Checksum: 0x3c1b (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x006C53AC44133D80 Responder cookie: 0x70432C3B945FB0A0 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x5022AB6D Length: 292 Encrypted payload (264 bytes) 0000 00 0c 29 89 f2 82 00 a0 eb 00 cd aa 08 00 45 00 ..)...........E. 0010 01 40 00 08 00 00 40 11 3a e2 a5 e3 f9 81 a5 e3 .@....@.:....... 0020 f9 7a 01 f4 01 f4 01 2c 3c 1b 00 6c 53 ac 44 13 .z.....,<..lS.D. 0030 3d 80 70 43 2c 3b 94 5f b0 a0 08 10 20 01 50 22 =.pC,;._.... .P" 0040 ab 6d 00 00 01 24 9e de f2 44 2a 29 67 aa 7c 1f .m...$...D*)g.|. 0050 4f 26 6d 69 54 52 4d 6f 89 4c 87 26 8c ab f4 84 O&miTRMo.L.&.... 0060 3a be e1 7b 3f e1 24 8f c7 c5 60 1d 5b 2a e2 fa :..{?.$...`.[*.. 0070 93 9c bf 47 78 75 0f de 77 30 27 40 39 3a de 03 ...Gxu..w0'@9:.. 0080 c5 9f 7d 3e b2 30 97 ae 9e 9a 26 d3 0a 5d 5c a7 ..}>.0....&..]\. 0090 5c 0a d2 a6 4f fa ab 2f bb 8f 1a 71 37 0c 13 73 \...O../...q7..s 00a0 5d 28 ac 27 fc 49 08 41 78 c8 8e c1 ed c3 94 75 ](.'.I.Ax......u 00b0 00 8f 1f 8c 46 2d ea 74 44 59 b2 39 55 d0 f4 3a ....F-.tDY.9U..: 00c0 29 ae 43 4b 60 fa 9a 13 ed 26 3d 26 54 9b 30 a9 ).CK`....&=&T.0. 00d0 b9 44 80 c6 0a f9 90 d4 d6 25 da a6 75 65 91 21 .D.......%..ue.! 00e0 21 ed 21 70 c1 e6 72 b0 01 c2 14 2f e9 6a 0e 5c !.!p..r..../.j.\ 00f0 f2 a4 76 9f b1 45 b3 c9 ca e5 a6 67 cc 4b a3 f9 ..v..E.....g.K.. 0100 59 81 d3 fe bf b8 da ef a7 5d b0 4a d1 d6 49 30 Y........].J..I0 0110 26 e9 98 70 61 4a 90 8b 87 3c da 6a 31 d5 b5 2c &..paJ...<.j1.., 0120 e6 8a ec c8 5a 80 1d da 7f ea ff 4b 9c 36 2f 92 ....Z......K.6/. 0130 8d 15 d8 2e ed 02 26 58 e1 86 5a b1 0d d6 d8 38 ......&X..Z....8 0140 d2 6b 4a a1 f1 a5 05 54 1f d1 d8 26 23 18 a7 ce .kJ....T...&#... 0150 b5 4a .J Frame 9 (106 bytes on wire, 106 bytes captured) Arrival Time: Jun 30, 2005 11:21:09.101425000 Time delta from previous packet: 0.008868000 seconds Time since reference or first frame: 1.479703000 seconds Frame Number: 9 Packet Length: 106 bytes Capture Length: 106 bytes Ethernet II, Src: 00:0c:29:89:f2:82, Dst: 00:a0:eb:00:cd:aa Destination: 00:a0:eb:00:cd:aa (00:a0:eb:00:cd:aa) Source: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Type: IP (0x0800) Frame check sequence: 0xd6bc4d43 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.129 (165.227.249.129) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 88 Identification: 0x00f5 (245) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfadc (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.129 (165.227.249.129) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 68 Checksum: 0x3d60 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x006C53AC44133D80 Responder cookie: 0x70432C3B945FB0A0 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x5022AB6D Length: 60 Encrypted payload (32 bytes) 0000 00 a0 eb 00 cd aa 00 0c 29 89 f2 82 08 00 45 00 ........).....E. 0010 00 58 00 f5 40 00 40 11 fa dc a5 e3 f9 7a a5 e3 .X..@.@......z.. 0020 f9 81 01 f4 01 f4 00 44 3d 60 00 6c 53 ac 44 13 .......D=`.lS.D. 0030 3d 80 70 43 2c 3b 94 5f b0 a0 08 10 20 01 50 22 =.pC,;._.... .P" 0040 ab 6d 00 00 00 3c b8 04 f1 8c 7a 6b 1c 2c d4 c9 .m...<....zk.,.. 0050 ba 76 d9 84 3b 36 71 ac 07 61 29 39 76 03 1e 33 .v..;6q..a)9v..3 0060 fc db e7 4a a5 89 d6 bc 4d 43 ...J....MC Frame 10 (106 bytes on wire, 106 bytes captured) Arrival Time: Jun 30, 2005 11:21:09.202864000 Time delta from previous packet: 0.101439000 seconds Time since reference or first frame: 1.581142000 seconds Frame Number: 10 Packet Length: 106 bytes Capture Length: 106 bytes Ethernet II, Src: 00:0c:29:89:f2:82, Dst: 00:a0:eb:00:cd:aa Destination: 00:a0:eb:00:cd:aa (00:a0:eb:00:cd:aa) Source: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Type: IP (0x0800) Frame check sequence: 0x5156d261 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.129 (165.227.249.129) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 88 Identification: 0x00f6 (246) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfadb (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.129 (165.227.249.129) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 68 Checksum: 0x3d60 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x006C53AC44133D80 Responder cookie: 0x70432C3B945FB0A0 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x5022AB6D Length: 60 Encrypted payload (32 bytes) 0000 00 a0 eb 00 cd aa 00 0c 29 89 f2 82 08 00 45 00 ........).....E. 0010 00 58 00 f6 40 00 40 11 fa db a5 e3 f9 7a a5 e3 .X..@.@......z.. 0020 f9 81 01 f4 01 f4 00 44 3d 60 00 6c 53 ac 44 13 .......D=`.lS.D. 0030 3d 80 70 43 2c 3b 94 5f b0 a0 08 10 20 01 50 22 =.pC,;._.... .P" 0040 ab 6d 00 00 00 3c b8 04 f1 8c 7a 6b 1c 2c d4 c9 .m...<....zk.,.. 0050 ba 76 d9 84 3b 36 71 ac 07 61 29 39 76 03 1e 33 .v..;6q..a)9v..3 0060 fc db e7 4a a5 89 51 56 d2 61 ...J..QV.a Frame 11 (106 bytes on wire, 106 bytes captured) Arrival Time: Jun 30, 2005 11:21:09.304320000 Time delta from previous packet: 0.101456000 seconds Time since reference or first frame: 1.682598000 seconds Frame Number: 11 Packet Length: 106 bytes Capture Length: 106 bytes Ethernet II, Src: 00:0c:29:89:f2:82, Dst: 00:a0:eb:00:cd:aa Destination: 00:a0:eb:00:cd:aa (00:a0:eb:00:cd:aa) Source: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Type: IP (0x0800) Frame check sequence: 0xb5dd42a6 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.129 (165.227.249.129) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 88 Identification: 0x00f7 (247) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfada (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.129 (165.227.249.129) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 68 Checksum: 0x3d60 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x006C53AC44133D80 Responder cookie: 0x70432C3B945FB0A0 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x5022AB6D Length: 60 Encrypted payload (32 bytes) 0000 00 a0 eb 00 cd aa 00 0c 29 89 f2 82 08 00 45 00 ........).....E. 0010 00 58 00 f7 40 00 40 11 fa da a5 e3 f9 7a a5 e3 .X..@.@......z.. 0020 f9 81 01 f4 01 f4 00 44 3d 60 00 6c 53 ac 44 13 .......D=`.lS.D. 0030 3d 80 70 43 2c 3b 94 5f b0 a0 08 10 20 01 50 22 =.pC,;._.... .P" 0040 ab 6d 00 00 00 3c b8 04 f1 8c 7a 6b 1c 2c d4 c9 .m...<....zk.,.. 0050 ba 76 d9 84 3b 36 71 ac 07 61 29 39 76 03 1e 33 .v..;6q..a)9v..3 0060 fc db e7 4a a5 89 b5 dd 42 a6 ...J....B. Frame 12 (130 bytes on wire, 130 bytes captured) Arrival Time: Jun 30, 2005 11:21:09.415122000 Time delta from previous packet: 0.110802000 seconds Time since reference or first frame: 1.793400000 seconds Frame Number: 12 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:0c:29:89:f2:82, Dst: 00:a0:eb:00:cd:aa Destination: 00:a0:eb:00:cd:aa (00:a0:eb:00:cd:aa) Source: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Type: IP (0x0800) Frame check sequence: 0x5da1dfeb (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.129 (165.227.249.129) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0086 (134) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x7c12 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.129 (165.227.249.129) Encapsulating Security Payload SPI: 0x65a66baf Sequence: 1 Data (84 bytes) 0000 00 a0 eb 00 cd aa 00 0c 29 89 f2 82 08 00 45 00 ........).....E. 0010 00 70 00 86 00 00 ff 32 7c 12 a5 e3 f9 7a a5 e3 .p.....2|....z.. 0020 f9 81 65 a6 6b af 00 00 00 01 b0 77 9f 63 6f b8 ..e.k......w.co. 0030 b6 4b d5 87 95 79 1c 41 02 2b 7b 75 de 7d 75 bf .K...y.A.+{u.}u. 0040 98 52 be aa 5b 7e 27 fa 30 c3 a9 75 b1 86 67 ef .R..[~'.0..u..g. 0050 cb 26 32 0d 1a c0 44 a2 4c 5d e3 aa 9e 32 4e a1 .&2...D.L]...2N. 0060 f2 89 ba 1a 9c 2c 86 b6 a0 ad c4 af ed 3b 01 bf .....,.......;.. 0070 ec 16 2c 7e d9 e6 95 55 55 32 c8 42 06 7f 5d a1 ..,~...UU2.B..]. 0080 df eb .. Frame 13 (130 bytes on wire, 130 bytes captured) Arrival Time: Jun 30, 2005 11:21:09.416383000 Time delta from previous packet: 0.001261000 seconds Time since reference or first frame: 1.794661000 seconds Frame Number: 13 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:a0:eb:00:cd:aa, Dst: 00:0c:29:89:f2:82 Destination: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Source: 00:a0:eb:00:cd:aa (00:a0:eb:00:cd:aa) Type: IP (0x0800) Frame check sequence: 0x632edf5d (correct) Internet Protocol, Src Addr: 165.227.249.129 (165.227.249.129), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x5e8a (24202) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: ESP (0x32) Header checksum: 0x9d0e (correct) Source: 165.227.249.129 (165.227.249.129) Destination: 165.227.249.122 (165.227.249.122) Encapsulating Security Payload SPI: 0xea78d908 Sequence: 3 Data (84 bytes) 0000 00 0c 29 89 f2 82 00 a0 eb 00 cd aa 08 00 45 00 ..)...........E. 0010 00 70 5e 8a 00 00 80 32 9d 0e a5 e3 f9 81 a5 e3 .p^....2........ 0020 f9 7a ea 78 d9 08 00 00 00 03 00 00 00 00 00 00 .z.x............ 0030 00 00 98 42 52 31 92 ff c2 97 42 12 d3 b5 52 83 ...BR1....B...R. 0040 63 8a 28 ef c1 63 f8 ce 88 df 4d 78 99 ab eb 83 c.(..c....Mx.... 0050 e9 51 67 b3 a4 8b c9 f7 54 0c 09 7e ef 0e 80 9e .Qg.....T..~.... 0060 4e b7 03 c3 16 74 86 72 12 29 96 37 a1 19 71 59 N....t.r.).7..qY 0070 31 21 58 ca 0a a4 02 46 33 7e 3f 84 89 ec 63 2e 1!X....F3~?...c. 0080 df 5d .] Frame 14 (130 bytes on wire, 130 bytes captured) Arrival Time: Jun 30, 2005 11:21:09.434824000 Time delta from previous packet: 0.018441000 seconds Time since reference or first frame: 1.813102000 seconds Frame Number: 14 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:0c:29:89:f2:82, Dst: 00:a0:eb:00:cd:aa Destination: 00:a0:eb:00:cd:aa (00:a0:eb:00:cd:aa) Source: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Type: IP (0x0800) Frame check sequence: 0x7b98b854 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.129 (165.227.249.129) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0087 (135) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x7c11 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.129 (165.227.249.129) Encapsulating Security Payload SPI: 0x65a66baf Sequence: 2 Data (84 bytes) 0000 00 a0 eb 00 cd aa 00 0c 29 89 f2 82 08 00 45 00 ........).....E. 0010 00 70 00 87 00 00 ff 32 7c 11 a5 e3 f9 7a a5 e3 .p.....2|....z.. 0020 f9 81 65 a6 6b af 00 00 00 02 d8 2b 09 aa 26 74 ..e.k......+..&t 0030 c4 99 89 29 84 23 40 9b b9 71 df c8 16 c2 5a a5 ...).#@..q....Z. 0040 5a f3 eb b5 e4 6a 31 b7 24 79 78 50 82 44 b8 68 Z....j1.$yxP.D.h 0050 f9 6d e6 0d f7 5b c7 0a fd d2 c9 6c c7 3a 1c 6c .m...[.....l.:.l 0060 07 c4 82 24 88 22 0c 72 e3 41 a0 bc e4 09 1c c9 ...$.".r.A...... 0070 c9 9a 7e b3 92 f6 9f 7d 49 51 82 4f 62 91 7b 98 ..~....}IQ.Ob.{. 0080 b8 54 .T Frame 15 (130 bytes on wire, 130 bytes captured) Arrival Time: Jun 30, 2005 11:21:09.436805000 Time delta from previous packet: 0.001981000 seconds Time since reference or first frame: 1.815083000 seconds Frame Number: 15 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:a0:eb:00:cd:aa, Dst: 00:0c:29:89:f2:82 Destination: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Source: 00:a0:eb:00:cd:aa (00:a0:eb:00:cd:aa) Type: IP (0x0800) Frame check sequence: 0x605caadf (correct) Internet Protocol, Src Addr: 165.227.249.129 (165.227.249.129), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x5e8b (24203) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: ESP (0x32) Header checksum: 0x9d0d (correct) Source: 165.227.249.129 (165.227.249.129) Destination: 165.227.249.122 (165.227.249.122) Encapsulating Security Payload SPI: 0xea78d908 Sequence: 4 Data (84 bytes) 0000 00 0c 29 89 f2 82 00 a0 eb 00 cd aa 08 00 45 00 ..)...........E. 0010 00 70 5e 8b 00 00 80 32 9d 0d a5 e3 f9 81 a5 e3 .p^....2........ 0020 f9 7a ea 78 d9 08 00 00 00 04 96 37 a1 19 71 59 .z.x.......7..qY 0030 31 21 b7 50 12 f2 74 99 ed 6c b7 05 6c 21 0f 61 1!.P..t..l..l!.a 0040 08 b2 01 e3 63 31 c9 a3 07 1c c8 cc 8e 9f e1 a0 ....c1.......... 0050 71 43 42 f8 e6 30 de 1d ee f8 ee 30 91 20 0f 45 qCB..0.....0. .E 0060 b3 d0 cc 98 eb ca 57 26 39 2e 5a f9 8e 4f 16 8d ......W&9.Z..O.. 0070 b9 fc 53 84 9e d8 8b 8b 0b 81 57 a6 1c 31 60 5c ..S.......W..1`\ 0080 aa df .. Frame 16 (130 bytes on wire, 130 bytes captured) Arrival Time: Jun 30, 2005 11:21:10.419400000 Time delta from previous packet: 0.982595000 seconds Time since reference or first frame: 2.797678000 seconds Frame Number: 16 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:0c:29:89:f2:82, Dst: 00:a0:eb:00:cd:aa Destination: 00:a0:eb:00:cd:aa (00:a0:eb:00:cd:aa) Source: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Type: IP (0x0800) Frame check sequence: 0x5b756be2 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.129 (165.227.249.129) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0088 (136) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x7c10 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.129 (165.227.249.129) Encapsulating Security Payload SPI: 0x65a66baf Sequence: 3 Data (84 bytes) 0000 00 a0 eb 00 cd aa 00 0c 29 89 f2 82 08 00 45 00 ........).....E. 0010 00 70 00 88 00 00 ff 32 7c 10 a5 e3 f9 7a a5 e3 .p.....2|....z.. 0020 f9 81 65 a6 6b af 00 00 00 03 0c 41 46 a6 ab 72 ..e.k......AF..r 0030 1d 91 9e 97 78 8b 99 53 f7 79 20 cf 87 51 18 3c ....x..S.y ..Q.< 0040 10 54 03 27 47 6e 2b 72 73 e9 c7 28 26 d7 2b c8 .T.'Gn+rs..(&.+. 0050 32 5d bc 58 f2 df 08 24 f9 f1 fe 23 db 9a a9 cb 2].X...$...#.... 0060 f3 2a 45 1a 15 07 39 6f 9e 05 d0 d0 4c ac b3 82 .*E...9o....L... 0070 74 41 0c f8 73 e1 a2 78 d0 a8 98 1f a3 16 5b 75 tA..s..x......[u 0080 6b e2 k. Frame 17 (130 bytes on wire, 130 bytes captured) Arrival Time: Jun 30, 2005 11:21:10.421194000 Time delta from previous packet: 0.001794000 seconds Time since reference or first frame: 2.799472000 seconds Frame Number: 17 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:a0:eb:00:cd:aa, Dst: 00:0c:29:89:f2:82 Destination: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Source: 00:a0:eb:00:cd:aa (00:a0:eb:00:cd:aa) Type: IP (0x0800) Frame check sequence: 0x82fd0f4e (correct) Internet Protocol, Src Addr: 165.227.249.129 (165.227.249.129), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x5e8c (24204) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: ESP (0x32) Header checksum: 0x9d0c (correct) Source: 165.227.249.129 (165.227.249.129) Destination: 165.227.249.122 (165.227.249.122) Encapsulating Security Payload SPI: 0xea78d908 Sequence: 5 Data (84 bytes) 0000 00 0c 29 89 f2 82 00 a0 eb 00 cd aa 08 00 45 00 ..)...........E. 0010 00 70 5e 8c 00 00 80 32 9d 0c a5 e3 f9 81 a5 e3 .p^....2........ 0020 f9 7a ea 78 d9 08 00 00 00 05 5a f9 8e 4f 16 8d .z.x......Z..O.. 0030 b9 fc 8c d7 0c 76 27 30 94 ad b5 07 ab e9 82 f1 .....v'0........ 0040 bc 88 64 ba b6 99 21 b0 ee 55 60 2a 90 b0 10 1f ..d...!..U`*.... 0050 bb b0 06 d4 b4 1d 99 30 5d 09 24 97 ff 27 ea 43 .......0].$..'.C 0060 95 bd ac bb 2b de c1 1d 78 3c d5 c8 63 ea ab 50 ....+...x<..c..P 0070 0e 2d 64 a3 d7 7d 59 6b 52 9d c6 d3 08 f0 82 fd .-d..}YkR....... 0080 0f 4e .N Frame 18 (130 bytes on wire, 130 bytes captured) Arrival Time: Jun 30, 2005 11:21:11.481630000 Time delta from previous packet: 1.060436000 seconds Time since reference or first frame: 3.859908000 seconds Frame Number: 18 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:0c:29:89:f2:82, Dst: 00:a0:eb:00:cd:aa Destination: 00:a0:eb:00:cd:aa (00:a0:eb:00:cd:aa) Source: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Type: IP (0x0800) Frame check sequence: 0x4be9f47d (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.129 (165.227.249.129) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0089 (137) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x7c0f (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.129 (165.227.249.129) Encapsulating Security Payload SPI: 0x65a66baf Sequence: 4 Data (84 bytes) 0000 00 a0 eb 00 cd aa 00 0c 29 89 f2 82 08 00 45 00 ........).....E. 0010 00 70 00 89 00 00 ff 32 7c 0f a5 e3 f9 7a a5 e3 .p.....2|....z.. 0020 f9 81 65 a6 6b af 00 00 00 04 be bb a5 eb 11 7d ..e.k..........} 0030 85 8e 52 c4 d2 48 57 df 9b e6 3c 93 35 ca b3 65 ..R..HW...<.5..e 0040 04 bc f4 05 49 cb d3 b1 0a 32 3a 2e 6d 16 0c 61 ....I....2:.m..a 0050 8b b5 6f 79 b7 83 3f b5 16 0f fc 4c c9 7e c2 29 ..oy..?....L.~.) 0060 46 35 bc db 5a 66 4a 1b ce 8c ef 84 89 07 62 3f F5..ZfJ.......b? 0070 91 4a 94 19 57 13 d4 8a 7b 4e 22 f8 dc d3 4b e9 .J..W...{N"...K. 0080 f4 7d .} Frame 19 (130 bytes on wire, 130 bytes captured) Arrival Time: Jun 30, 2005 11:21:11.483528000 Time delta from previous packet: 0.001898000 seconds Time since reference or first frame: 3.861806000 seconds Frame Number: 19 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:a0:eb:00:cd:aa, Dst: 00:0c:29:89:f2:82 Destination: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Source: 00:a0:eb:00:cd:aa (00:a0:eb:00:cd:aa) Type: IP (0x0800) Frame check sequence: 0x16af6af3 (correct) Internet Protocol, Src Addr: 165.227.249.129 (165.227.249.129), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x5e8d (24205) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: ESP (0x32) Header checksum: 0x9d0b (correct) Source: 165.227.249.129 (165.227.249.129) Destination: 165.227.249.122 (165.227.249.122) Encapsulating Security Payload SPI: 0xea78d908 Sequence: 6 Data (84 bytes) 0000 00 0c 29 89 f2 82 00 a0 eb 00 cd aa 08 00 45 00 ..)...........E. 0010 00 70 5e 8d 00 00 80 32 9d 0b a5 e3 f9 81 a5 e3 .p^....2........ 0020 f9 7a ea 78 d9 08 00 00 00 06 d5 c8 63 ea ab 50 .z.x........c..P 0030 0e 2d 03 2f 6e ca 16 ec ef ac db cd 40 47 2d 12 .-./n.......@G-. 0040 1a 40 65 5e ab 00 4c 46 21 8e 03 03 4a fc 2d 1f .@e^..LF!...J.-. 0050 23 65 66 2a 65 05 f8 5a 43 96 be 3e 72 ce 64 ba #ef*e..ZC..>r.d. 0060 e4 cd b1 68 52 97 d7 82 b1 d8 11 52 32 49 40 e0 ...hR......R2I@. 0070 bd e7 7e d5 89 51 75 1e d2 f7 6f 91 75 24 16 af ..~..Qu...o.u$.. 0080 6a f3 j.