Frame 1 (174 bytes on wire, 174 bytes captured) Arrival Time: Jun 30, 2005 11:10:23.274401000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 174 bytes Capture Length: 174 bytes Ethernet II, Src: 00:0c:29:89:f2:82, Dst: 00:e0:7b:00:0d:61 Destination: 00:e0:7b:00:0d:61 (00:e0:7b:00:0d:61) Source: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Type: IP (0x0800) Frame check sequence: 0x268a985a (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.132 (165.227.249.132) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 156 Identification: 0x00c3 (195) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfac7 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.132 (165.227.249.132) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 136 Checksum: 0xaee4 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x15EAC933F4E405E3 Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 128 Security Association payload Next payload: Vendor ID (13) Length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 44 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 36 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: NONE (0) Length: 44 Vendor ID: Check Point Check Point Product: VPN-1 Version: NG with Application Intelligence R55 0000 00 e0 7b 00 0d 61 00 0c 29 89 f2 82 08 00 45 00 ..{..a..).....E. 0010 00 9c 00 c3 40 00 40 11 fa c7 a5 e3 f9 7a a5 e3 ....@.@......z.. 0020 f9 84 01 f4 01 f4 00 88 ae e4 15 ea c9 33 f4 e4 .............3.. 0030 05 e3 00 00 00 00 00 00 00 00 01 10 02 00 00 00 ................ 0040 00 00 00 00 00 80 0d 00 00 38 00 00 00 01 00 00 .........8...... 0050 00 01 00 00 00 2c 01 01 00 01 00 00 00 24 01 01 .....,.......$.. 0060 00 00 80 01 00 05 80 02 00 02 80 03 00 01 80 04 ................ 0070 00 02 80 0b 00 01 00 0c 00 04 00 00 70 80 00 00 ............p... 0080 00 2c f4 ed 19 e0 c1 14 eb 51 6f aa ac 0e e3 7d .,.......Qo....} 0090 af 28 07 b4 38 1f 00 00 00 01 00 00 13 8d 42 c2 .(..8.........B. 00a0 17 b1 00 00 00 00 18 00 00 00 26 8a 98 5a ..........&..Z Frame 2 (142 bytes on wire, 142 bytes captured) Arrival Time: Jun 30, 2005 11:10:23.312313000 Time delta from previous packet: 0.037912000 seconds Time since reference or first frame: 0.037912000 seconds Frame Number: 2 Packet Length: 142 bytes Capture Length: 142 bytes Ethernet II, Src: 00:e0:7b:00:0d:61, Dst: 00:0c:29:89:f2:82 Destination: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Source: 00:e0:7b:00:0d:61 (00:e0:7b:00:0d:61) Type: IP (0x0800) Frame check sequence: 0x1343b522 (correct) Internet Protocol, Src Addr: 165.227.249.132 (165.227.249.132), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0xe0 (DSCP 0x38: Class Selector 7; ECN: 0x00) 1110 00.. = Differentiated Services Codepoint: Class Selector 7 (0x38) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 124 Identification: 0x0d11 (3345) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x2dba (correct) Source: 165.227.249.132 (165.227.249.132) Destination: 165.227.249.122 (165.227.249.122) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 104 Checksum: 0x261a (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x15EAC933F4E405E3 Responder cookie: 0xCBD6E519B191CE88 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 96 Security Association payload Next payload: Vendor ID (13) Length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 44 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 36 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: NONE (0) Length: 12 Vendor ID: unknown vendor ID: 0x424E455300000007 0000 00 0c 29 89 f2 82 00 e0 7b 00 0d 61 08 00 45 e0 ..).....{..a..E. 0010 00 7c 0d 11 00 00 40 11 2d ba a5 e3 f9 84 a5 e3 .|....@.-....... 0020 f9 7a 01 f4 01 f4 00 68 26 1a 15 ea c9 33 f4 e4 .z.....h&....3.. 0030 05 e3 cb d6 e5 19 b1 91 ce 88 01 10 02 00 00 00 ................ 0040 00 00 00 00 00 60 0d 00 00 38 00 00 00 01 00 00 .....`...8...... 0050 00 01 00 00 00 2c 01 01 00 01 00 00 00 24 01 01 .....,.......$.. 0060 00 00 80 01 00 05 80 02 00 02 80 03 00 01 80 04 ................ 0070 00 02 80 0b 00 01 00 0c 00 04 00 00 70 80 00 00 ............p... 0080 00 0c 42 4e 45 53 00 00 00 07 13 43 b5 22 ..BNES.....C." Frame 3 (230 bytes on wire, 230 bytes captured) Arrival Time: Jun 30, 2005 11:10:23.317048000 Time delta from previous packet: 0.004735000 seconds Time since reference or first frame: 0.042647000 seconds Frame Number: 3 Packet Length: 230 bytes Capture Length: 230 bytes Ethernet II, Src: 00:0c:29:89:f2:82, Dst: 00:e0:7b:00:0d:61 Destination: 00:e0:7b:00:0d:61 (00:e0:7b:00:0d:61) Source: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Type: IP (0x0800) Frame check sequence: 0x1226b2a9 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.132 (165.227.249.132) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 212 Identification: 0x00c4 (196) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfa8e (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.132 (165.227.249.132) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 192 Checksum: 0x4e03 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x15EAC933F4E405E3 Responder cookie: 0xCBD6E519B191CE88 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 184 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 24 Nonce Data 0000 00 e0 7b 00 0d 61 00 0c 29 89 f2 82 08 00 45 00 ..{..a..).....E. 0010 00 d4 00 c4 40 00 40 11 fa 8e a5 e3 f9 7a a5 e3 ....@.@......z.. 0020 f9 84 01 f4 01 f4 00 c0 4e 03 15 ea c9 33 f4 e4 ........N....3.. 0030 05 e3 cb d6 e5 19 b1 91 ce 88 04 10 02 00 00 00 ................ 0040 00 00 00 00 00 b8 0a 00 00 84 9c d4 0a 3c e2 74 .............<.t 0050 7e d6 6d a6 26 a3 64 62 07 41 34 16 86 3b 7b 49 ~.m.&.db.A4..;{I 0060 5b de 17 f7 21 90 bf 21 86 80 3b 3c 42 63 22 69 [...!..!..; 00d0 40 ef 64 64 b2 91 e6 10 f0 47 67 72 7a 4d c4 5b @.dd.....GgrzM.[ 00e0 d1 f8 1b 7d ef f2 ...}.. Frame 5 (114 bytes on wire, 114 bytes captured) Arrival Time: Jun 30, 2005 11:10:23.503497000 Time delta from previous packet: 0.006852000 seconds Time since reference or first frame: 0.229096000 seconds Frame Number: 5 Packet Length: 114 bytes Capture Length: 114 bytes Ethernet II, Src: 00:0c:29:89:f2:82, Dst: 00:e0:7b:00:0d:61 Destination: 00:e0:7b:00:0d:61 (00:e0:7b:00:0d:61) Source: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Type: IP (0x0800) Frame check sequence: 0xd835b1bf (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.132 (165.227.249.132) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0x00c5 (197) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb01 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.132 (165.227.249.132) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 76 Checksum: 0x2f8f (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x15EAC933F4E405E3 Responder cookie: 0xCBD6E519B191CE88 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 68 Encrypted payload (40 bytes) 0000 00 e0 7b 00 0d 61 00 0c 29 89 f2 82 08 00 45 00 ..{..a..).....E. 0010 00 60 00 c5 40 00 40 11 fb 01 a5 e3 f9 7a a5 e3 .`..@.@......z.. 0020 f9 84 01 f4 01 f4 00 4c 2f 8f 15 ea c9 33 f4 e4 .......L/....3.. 0030 05 e3 cb d6 e5 19 b1 91 ce 88 05 10 02 01 00 00 ................ 0040 00 00 00 00 00 44 09 7e c1 82 a9 0c ee 98 0b 46 .....D.~.......F 0050 be 0f 43 b5 ce ca 5a e6 ca 1a 24 b1 91 1d 38 d7 ..C...Z...$...8. 0060 c6 a8 94 08 88 4a fc 1d ab a4 60 99 3d 57 d8 35 .....J....`.=W.5 0070 b1 bf .. Frame 6 (114 bytes on wire, 114 bytes captured) Arrival Time: Jun 30, 2005 11:10:23.567727000 Time delta from previous packet: 0.064230000 seconds Time since reference or first frame: 0.293326000 seconds Frame Number: 6 Packet Length: 114 bytes Capture Length: 114 bytes Ethernet II, Src: 00:e0:7b:00:0d:61, Dst: 00:0c:29:89:f2:82 Destination: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Source: 00:e0:7b:00:0d:61 (00:e0:7b:00:0d:61) Type: IP (0x0800) Frame check sequence: 0xda5c3903 (correct) Internet Protocol, Src Addr: 165.227.249.132 (165.227.249.132), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0xe0 (DSCP 0x38: Class Selector 7; ECN: 0x00) 1110 00.. = Differentiated Services Codepoint: Class Selector 7 (0x38) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0x0d2d (3373) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x2dba (correct) Source: 165.227.249.132 (165.227.249.132) Destination: 165.227.249.122 (165.227.249.122) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 76 Checksum: 0x76a9 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x15EAC933F4E405E3 Responder cookie: 0xCBD6E519B191CE88 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 68 Encrypted payload (40 bytes) 0000 00 0c 29 89 f2 82 00 e0 7b 00 0d 61 08 00 45 e0 ..).....{..a..E. 0010 00 60 0d 2d 00 00 40 11 2d ba a5 e3 f9 84 a5 e3 .`.-..@.-....... 0020 f9 7a 01 f4 01 f4 00 4c 76 a9 15 ea c9 33 f4 e4 .z.....Lv....3.. 0030 05 e3 cb d6 e5 19 b1 91 ce 88 05 10 02 01 00 00 ................ 0040 00 00 00 00 00 44 27 cd 0e 9f 42 7f 6b 18 4d 40 .....D'...B.k.M@ 0050 a2 ef d5 d2 68 02 97 93 d8 9d 5e 1a 29 72 30 d1 ....h.....^.)r0. 0060 02 15 f8 dd d8 c0 29 49 c3 4c a1 92 97 43 da 5c ......)I.L...C.\ 0070 39 03 9. Frame 7 (346 bytes on wire, 346 bytes captured) Arrival Time: Jun 30, 2005 11:10:23.588067000 Time delta from previous packet: 0.020340000 seconds Time since reference or first frame: 0.313666000 seconds Frame Number: 7 Packet Length: 346 bytes Capture Length: 346 bytes Ethernet II, Src: 00:0c:29:89:f2:82, Dst: 00:e0:7b:00:0d:61 Destination: 00:e0:7b:00:0d:61 (00:e0:7b:00:0d:61) Source: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Type: IP (0x0800) Frame check sequence: 0x811b789f (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.132 (165.227.249.132) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 328 Identification: 0x00c6 (198) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfa18 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.132 (165.227.249.132) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 308 Checksum: 0x573a (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x15EAC933F4E405E3 Responder cookie: 0xCBD6E519B191CE88 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xDE54C183 Length: 300 Encrypted payload (272 bytes) 0000 00 e0 7b 00 0d 61 00 0c 29 89 f2 82 08 00 45 00 ..{..a..).....E. 0010 01 48 00 c6 40 00 40 11 fa 18 a5 e3 f9 7a a5 e3 .H..@.@......z.. 0020 f9 84 01 f4 01 f4 01 34 57 3a 15 ea c9 33 f4 e4 .......4W:...3.. 0030 05 e3 cb d6 e5 19 b1 91 ce 88 08 10 20 01 de 54 ............ ..T 0040 c1 83 00 00 01 2c 59 83 cf 00 b5 4f e8 39 46 85 .....,Y....O.9F. 0050 b0 e7 54 db aa 6d 2d dc 24 97 9b 60 90 1b 85 08 ..T..m-.$..`.... 0060 e8 08 a3 79 44 7e 65 6d 74 99 8e 22 a4 49 63 7b ...yD~emt..".Ic{ 0070 14 00 79 cb a4 6a 3d be a5 c3 14 05 a1 f4 8d 88 ..y..j=......... 0080 26 48 86 d1 48 7a a6 85 09 a8 aa 92 03 0f 08 a2 &H..Hz.......... 0090 fc 0b fc de e7 08 42 de 9a 82 35 e3 74 6c bf 48 ......B...5.tl.H 00a0 2c 2c a0 85 df 1f 0f 42 8b ff bc ce 56 75 6a 17 ,,.....B....Vuj. 00b0 44 bb 7f a7 38 63 47 e7 26 85 bf 73 8d 5c a6 6f D...8cG.&..s.\.o 00c0 04 50 e2 74 6a 77 eb 3c 66 08 ea 38 21 d7 f3 cd .P.tjw...H..U0.. 0140 2c 25 4b f6 db 98 2a d2 9b fd 2e 3d 29 cf 27 79 ,%K...*....=).'y 0150 81 49 ba eb 80 3e 81 1b 78 9f .I...>..x. Frame 8 (346 bytes on wire, 346 bytes captured) Arrival Time: Jun 30, 2005 11:10:23.794938000 Time delta from previous packet: 0.206871000 seconds Time since reference or first frame: 0.520537000 seconds Frame Number: 8 Packet Length: 346 bytes Capture Length: 346 bytes Ethernet II, Src: 00:e0:7b:00:0d:61, Dst: 00:0c:29:89:f2:82 Destination: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Source: 00:e0:7b:00:0d:61 (00:e0:7b:00:0d:61) Type: IP (0x0800) Frame check sequence: 0x06a75095 (correct) Internet Protocol, Src Addr: 165.227.249.132 (165.227.249.132), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0xe0 (DSCP 0x38: Class Selector 7; ECN: 0x00) 1110 00.. = Differentiated Services Codepoint: Class Selector 7 (0x38) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 328 Identification: 0x0d46 (3398) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x2cb9 (correct) Source: 165.227.249.132 (165.227.249.132) Destination: 165.227.249.122 (165.227.249.122) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 308 Checksum: 0x2312 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x15EAC933F4E405E3 Responder cookie: 0xCBD6E519B191CE88 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xDE54C183 Length: 300 Encrypted payload (272 bytes) 0000 00 0c 29 89 f2 82 00 e0 7b 00 0d 61 08 00 45 e0 ..).....{..a..E. 0010 01 48 0d 46 00 00 40 11 2c b9 a5 e3 f9 84 a5 e3 .H.F..@.,....... 0020 f9 7a 01 f4 01 f4 01 34 23 12 15 ea c9 33 f4 e4 .z.....4#....3.. 0030 05 e3 cb d6 e5 19 b1 91 ce 88 08 10 20 01 de 54 ............ ..T 0040 c1 83 00 00 01 2c df 32 8b c0 66 87 a3 61 ce 3b .....,.2..f..a.; 0050 cf 7b da d5 b0 d2 20 4f 90 04 7c 44 f6 75 c8 f5 .{.... O..|D.u.. 0060 57 a4 38 2d c8 4b 54 fa 95 41 3a 23 33 c1 67 b6 W.8-.KT..A:#3.g. 0070 19 e6 3c 8b 40 be 21 19 58 77 b6 96 17 ce 19 9f ..<.@.!.Xw...... 0080 ae 45 05 45 86 11 3d 39 26 ae 58 f8 7a 6f 91 93 .E.E..=9&.X.zo.. 0090 d5 5c 7f ba d0 9b 37 f9 1f 24 20 68 30 fe 55 31 .\....7..$ h0.U1 00a0 1b 22 70 88 7f 58 3d 81 1e 4e a5 88 5b 89 5d cb ."p..X=..N..[.]. 00b0 b2 d5 0e 8b c4 d4 df 16 4b 2b ed 71 0c 16 cd 35 ........K+.q...5 00c0 ab a6 a1 10 fc a1 e5 c3 db 2c a7 dd 6c 77 bc 16 .........,..lw.. 00d0 d0 a0 5f dc bb 21 a0 33 86 55 17 4c 59 74 be dc .._..!.3.U.LYt.. 00e0 96 73 a1 e6 b0 a2 ef e7 9c bb 1e 35 e6 5b d1 5d .s.........5.[.] 00f0 ea df 38 61 cd 02 86 ca 43 48 3b b4 fc e4 c0 0c ..8a....CH;..... 0100 17 05 d4 56 dd e8 24 f7 3c f6 66 c9 cf 58 71 76 ...V..$.<.f..Xqv 0110 ea 96 cb 23 a2 94 b2 68 bd a9 6e df d3 c5 74 34 ...#...h..n...t4 0120 3f 0e 03 07 ed 1a 80 52 3e bf 59 f5 8a 32 53 a3 ?......R>.Y..2S. 0130 fd f8 27 2e 82 59 25 d8 da e3 15 8a 47 89 bb ca ..'..Y%.....G... 0140 e9 55 ff df 79 22 9a fd d4 13 5a 9e f5 75 2d c9 .U..y"....Z..u-. 0150 43 9b fb 10 e3 d0 06 a7 50 95 C.......P. Frame 9 (106 bytes on wire, 106 bytes captured) Arrival Time: Jun 30, 2005 11:10:23.801708000 Time delta from previous packet: 0.006770000 seconds Time since reference or first frame: 0.527307000 seconds Frame Number: 9 Packet Length: 106 bytes Capture Length: 106 bytes Ethernet II, Src: 00:0c:29:89:f2:82, Dst: 00:e0:7b:00:0d:61 Destination: 00:e0:7b:00:0d:61 (00:e0:7b:00:0d:61) Source: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Type: IP (0x0800) Frame check sequence: 0xd1d69b4c (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.132 (165.227.249.132) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 88 Identification: 0x00c7 (199) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb07 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.132 (165.227.249.132) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 68 Checksum: 0xe1c2 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x15EAC933F4E405E3 Responder cookie: 0xCBD6E519B191CE88 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xDE54C183 Length: 60 Encrypted payload (32 bytes) 0000 00 e0 7b 00 0d 61 00 0c 29 89 f2 82 08 00 45 00 ..{..a..).....E. 0010 00 58 00 c7 40 00 40 11 fb 07 a5 e3 f9 7a a5 e3 .X..@.@......z.. 0020 f9 84 01 f4 01 f4 00 44 e1 c2 15 ea c9 33 f4 e4 .......D.....3.. 0030 05 e3 cb d6 e5 19 b1 91 ce 88 08 10 20 01 de 54 ............ ..T 0040 c1 83 00 00 00 3c bb f6 ae b2 96 75 73 7b ff 28 .....<.....us{.( 0050 9b a8 34 0d 07 28 16 93 4a 70 3a 48 70 54 16 5c ..4..(..Jp:HpT.\ 0060 28 c7 9a 98 d7 e0 d1 d6 9b 4c (........L Frame 10 (106 bytes on wire, 106 bytes captured) Arrival Time: Jun 30, 2005 11:10:23.904671000 Time delta from previous packet: 0.102963000 seconds Time since reference or first frame: 0.630270000 seconds Frame Number: 10 Packet Length: 106 bytes Capture Length: 106 bytes Ethernet II, Src: 00:0c:29:89:f2:82, Dst: 00:e0:7b:00:0d:61 Destination: 00:e0:7b:00:0d:61 (00:e0:7b:00:0d:61) Source: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Type: IP (0x0800) Frame check sequence: 0xc100f5ad (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.132 (165.227.249.132) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 88 Identification: 0x00c8 (200) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb06 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.132 (165.227.249.132) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 68 Checksum: 0xe1c2 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x15EAC933F4E405E3 Responder cookie: 0xCBD6E519B191CE88 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xDE54C183 Length: 60 Encrypted payload (32 bytes) 0000 00 e0 7b 00 0d 61 00 0c 29 89 f2 82 08 00 45 00 ..{..a..).....E. 0010 00 58 00 c8 40 00 40 11 fb 06 a5 e3 f9 7a a5 e3 .X..@.@......z.. 0020 f9 84 01 f4 01 f4 00 44 e1 c2 15 ea c9 33 f4 e4 .......D.....3.. 0030 05 e3 cb d6 e5 19 b1 91 ce 88 08 10 20 01 de 54 ............ ..T 0040 c1 83 00 00 00 3c bb f6 ae b2 96 75 73 7b ff 28 .....<.....us{.( 0050 9b a8 34 0d 07 28 16 93 4a 70 3a 48 70 54 16 5c ..4..(..Jp:HpT.\ 0060 28 c7 9a 98 d7 e0 c1 00 f5 ad (......... Frame 11 (106 bytes on wire, 106 bytes captured) Arrival Time: Jun 30, 2005 11:10:24.006930000 Time delta from previous packet: 0.102259000 seconds Time since reference or first frame: 0.732529000 seconds Frame Number: 11 Packet Length: 106 bytes Capture Length: 106 bytes Ethernet II, Src: 00:0c:29:89:f2:82, Dst: 00:e0:7b:00:0d:61 Destination: 00:e0:7b:00:0d:61 (00:e0:7b:00:0d:61) Source: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Type: IP (0x0800) Frame check sequence: 0x5033ca32 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.132 (165.227.249.132) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 88 Identification: 0x00c9 (201) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb05 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.132 (165.227.249.132) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 68 Checksum: 0xe1c2 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x15EAC933F4E405E3 Responder cookie: 0xCBD6E519B191CE88 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xDE54C183 Length: 60 Encrypted payload (32 bytes) 0000 00 e0 7b 00 0d 61 00 0c 29 89 f2 82 08 00 45 00 ..{..a..).....E. 0010 00 58 00 c9 40 00 40 11 fb 05 a5 e3 f9 7a a5 e3 .X..@.@......z.. 0020 f9 84 01 f4 01 f4 00 44 e1 c2 15 ea c9 33 f4 e4 .......D.....3.. 0030 05 e3 cb d6 e5 19 b1 91 ce 88 08 10 20 01 de 54 ............ ..T 0040 c1 83 00 00 00 3c bb f6 ae b2 96 75 73 7b ff 28 .....<.....us{.( 0050 9b a8 34 0d 07 28 16 93 4a 70 3a 48 70 54 16 5c ..4..(..Jp:HpT.\ 0060 28 c7 9a 98 d7 e0 50 33 ca 32 (.....P3.2 Frame 12 (130 bytes on wire, 130 bytes captured) Arrival Time: Jun 30, 2005 11:10:24.111267000 Time delta from previous packet: 0.104337000 seconds Time since reference or first frame: 0.836866000 seconds Frame Number: 12 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:0c:29:89:f2:82, Dst: 00:e0:7b:00:0d:61 Destination: 00:e0:7b:00:0d:61 (00:e0:7b:00:0d:61) Source: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Type: IP (0x0800) Frame check sequence: 0x40422a2a (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.132 (165.227.249.132) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0069 (105) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x7c2c (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.132 (165.227.249.132) Encapsulating Security Payload SPI: 0x000ee049 Sequence: 1 Data (84 bytes) 0000 00 e0 7b 00 0d 61 00 0c 29 89 f2 82 08 00 45 00 ..{..a..).....E. 0010 00 70 00 69 00 00 ff 32 7c 2c a5 e3 f9 7a a5 e3 .p.i...2|,...z.. 0020 f9 84 00 0e e0 49 00 00 00 01 fb 62 0b 54 be 67 .....I.....b.T.g 0030 24 96 48 9c 82 48 c8 de 00 1b e6 93 2a ce a2 c9 $.H..H......*... 0040 d9 6f 06 3b 24 21 82 5a 2f 24 5f 4b 58 b9 e2 18 .o.;$!.Z/$_KX... 0050 a9 c2 ac ea 4c ef 85 d9 e8 0d fb eb bd dd 18 a5 ....L........... 0060 c2 fc 5f f3 e3 49 23 ac 7b b1 79 0f f1 82 1b 16 .._..I#.{.y..... 0070 c5 10 f8 a1 6e c3 65 73 77 b0 00 9b d6 cc 40 42 ....n.esw.....@B 0080 2a 2a ** Frame 13 (130 bytes on wire, 130 bytes captured) Arrival Time: Jun 30, 2005 11:10:24.111842000 Time delta from previous packet: 0.000575000 seconds Time since reference or first frame: 0.837441000 seconds Frame Number: 13 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:e0:7b:00:0d:61, Dst: 00:0c:29:89:f2:82 Destination: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Source: 00:e0:7b:00:0d:61 (00:e0:7b:00:0d:61) Type: IP (0x0800) Frame check sequence: 0xa8097c2f (correct) Internet Protocol, Src Addr: 165.227.249.132 (165.227.249.132), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0d57 (3415) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x6f3e (correct) Source: 165.227.249.132 (165.227.249.132) Destination: 165.227.249.122 (165.227.249.122) Encapsulating Security Payload SPI: 0xeea1bfe9 Sequence: 1 Data (84 bytes) 0000 00 0c 29 89 f2 82 00 e0 7b 00 0d 61 08 00 45 00 ..).....{..a..E. 0010 00 70 0d 57 00 00 ff 32 6f 3e a5 e3 f9 84 a5 e3 .p.W...2o>...... 0020 f9 7a ee a1 bf e9 00 00 00 01 82 00 43 b4 0e 99 .z..........C... 0030 c1 a9 a4 89 10 71 1a ac 72 b8 a5 df db df 86 4f .....q..r......O 0040 c2 7d 2f 87 30 55 ab a1 a0 62 93 d0 4c 2e b9 50 .}/.0U...b..L..P 0050 4c 4d ba 6b dd fc af 60 82 01 7c d1 e5 85 a0 01 LM.k...`..|..... 0060 f4 53 02 0d fe 47 f5 5f 2d 51 d5 07 46 3b d5 4f .S...G._-Q..F;.O 0070 46 fe 6e 23 19 fa 39 33 ea c8 6d 7f 85 c3 a8 09 F.n#..93..m..... 0080 7c 2f |/ Frame 14 (130 bytes on wire, 130 bytes captured) Arrival Time: Jun 30, 2005 11:10:24.320209000 Time delta from previous packet: 0.208367000 seconds Time since reference or first frame: 1.045808000 seconds Frame Number: 14 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:0c:29:89:f2:82, Dst: 00:e0:7b:00:0d:61 Destination: 00:e0:7b:00:0d:61 (00:e0:7b:00:0d:61) Source: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Type: IP (0x0800) Frame check sequence: 0xe32ccc64 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.132 (165.227.249.132) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x006a (106) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x7c2b (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.132 (165.227.249.132) Encapsulating Security Payload SPI: 0x000ee049 Sequence: 2 Data (84 bytes) 0000 00 e0 7b 00 0d 61 00 0c 29 89 f2 82 08 00 45 00 ..{..a..).....E. 0010 00 70 00 6a 00 00 ff 32 7c 2b a5 e3 f9 7a a5 e3 .p.j...2|+...z.. 0020 f9 84 00 0e e0 49 00 00 00 02 f2 36 60 50 ef d8 .....I.....6`P.. 0030 a8 ac 9c ec 3d 18 33 57 42 0c 64 ee 2f 59 0a b7 ....=.3WB.d./Y.. 0040 3d ba c1 ac 52 b5 37 3c 0e a1 4f a3 74 72 38 c8 =...R.7<..O.tr8. 0050 d4 4a e8 ff fa 16 87 6d fd 3c ba 43 0f 1a 55 f9 .J.....m.<.C..U. 0060 ac 72 e4 56 b2 d8 d2 67 83 5e c0 af 78 29 63 d5 .r.V...g.^..x)c. 0070 4a 89 d0 4d aa dd 60 f0 70 c4 e5 61 77 99 e3 2c J..M..`.p..aw.., 0080 cc 64 .d Frame 15 (130 bytes on wire, 130 bytes captured) Arrival Time: Jun 30, 2005 11:10:24.320553000 Time delta from previous packet: 0.000344000 seconds Time since reference or first frame: 1.046152000 seconds Frame Number: 15 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:e0:7b:00:0d:61, Dst: 00:0c:29:89:f2:82 Destination: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Source: 00:e0:7b:00:0d:61 (00:e0:7b:00:0d:61) Type: IP (0x0800) Frame check sequence: 0xaa171c50 (correct) Internet Protocol, Src Addr: 165.227.249.132 (165.227.249.132), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0d58 (3416) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x6f3d (correct) Source: 165.227.249.132 (165.227.249.132) Destination: 165.227.249.122 (165.227.249.122) Encapsulating Security Payload SPI: 0xeea1bfe9 Sequence: 2 Data (84 bytes) 0000 00 0c 29 89 f2 82 00 e0 7b 00 0d 61 08 00 45 00 ..).....{..a..E. 0010 00 70 0d 58 00 00 ff 32 6f 3d a5 e3 f9 84 a5 e3 .p.X...2o=...... 0020 f9 7a ee a1 bf e9 00 00 00 02 d5 07 46 3b d5 4f .z..........F;.O 0030 46 fe e2 27 7d 77 88 4a 08 7a 7c b1 e8 b7 a5 ca F..'}w.J.z|..... 0040 1c d8 55 80 5b c0 9a 2e e8 ee 8c b4 50 0c d7 af ..U.[.......P... 0050 93 94 b8 ec 31 80 59 48 38 8a 76 8e 9a 44 57 41 ....1.YH8.v..DWA 0060 38 f1 7e 79 84 23 c3 2a 0a ce b3 93 42 43 b2 a5 8.~y.#.*....BC.. 0070 d4 83 98 98 5d d7 62 3a 50 5e 41 a6 5e 42 aa 17 ....].b:P^A.^B.. 0080 1c 50 .P Frame 16 (130 bytes on wire, 130 bytes captured) Arrival Time: Jun 30, 2005 11:10:25.327907000 Time delta from previous packet: 1.007354000 seconds Time since reference or first frame: 2.053506000 seconds Frame Number: 16 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:0c:29:89:f2:82, Dst: 00:e0:7b:00:0d:61 Destination: 00:e0:7b:00:0d:61 (00:e0:7b:00:0d:61) Source: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Type: IP (0x0800) Frame check sequence: 0x000ed597 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.132 (165.227.249.132) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x006b (107) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x7c2a (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.132 (165.227.249.132) Encapsulating Security Payload SPI: 0x000ee049 Sequence: 3 Data (84 bytes) 0000 00 e0 7b 00 0d 61 00 0c 29 89 f2 82 08 00 45 00 ..{..a..).....E. 0010 00 70 00 6b 00 00 ff 32 7c 2a a5 e3 f9 7a a5 e3 .p.k...2|*...z.. 0020 f9 84 00 0e e0 49 00 00 00 03 4f 8a 1b 88 2f d6 .....I....O.../. 0030 1e 69 6e 95 9a c3 1d 42 5c 55 c2 5a 7e 87 9b 3f .in....B\U.Z~..? 0040 ba 05 d4 57 cf 6a 49 a8 4a 61 2d 99 e3 53 03 4b ...W.jI.Ja-..S.K 0050 15 44 ce a6 fc 94 12 0c 5e 2a bd 8a 81 e7 d2 b7 .D......^*...... 0060 c1 26 3d af 8a 75 fc f0 1d 7c d1 8e 91 f1 35 11 .&=..u...|....5. 0070 0a a1 d4 47 3e 88 ca fb 53 6d 26 66 e7 d8 00 0e ...G>...Sm&f.... 0080 d5 97 .. Frame 17 (130 bytes on wire, 130 bytes captured) Arrival Time: Jun 30, 2005 11:10:25.328483000 Time delta from previous packet: 0.000576000 seconds Time since reference or first frame: 2.054082000 seconds Frame Number: 17 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:e0:7b:00:0d:61, Dst: 00:0c:29:89:f2:82 Destination: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Source: 00:e0:7b:00:0d:61 (00:e0:7b:00:0d:61) Type: IP (0x0800) Frame check sequence: 0x4652131a (correct) Internet Protocol, Src Addr: 165.227.249.132 (165.227.249.132), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0d59 (3417) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x6f3c (correct) Source: 165.227.249.132 (165.227.249.132) Destination: 165.227.249.122 (165.227.249.122) Encapsulating Security Payload SPI: 0xeea1bfe9 Sequence: 3 Data (84 bytes) 0000 00 0c 29 89 f2 82 00 e0 7b 00 0d 61 08 00 45 00 ..).....{..a..E. 0010 00 70 0d 59 00 00 ff 32 6f 3c a5 e3 f9 84 a5 e3 .p.Y...2o<...... 0020 f9 7a ee a1 bf e9 00 00 00 03 b3 93 42 43 b2 a5 .z..........BC.. 0030 d4 83 4c 7a 34 cd 40 22 dc 6e 5e 9f ed c7 e9 c8 ..Lz4.@".n^..... 0040 10 6a 6b 6d f8 59 03 e1 7a 2c d6 39 d2 89 ef 8d .jkm.Y..z,.9.... 0050 f0 6f e3 bc 53 f3 ae c9 29 ef 0c b3 56 6c 93 f0 .o..S...)...Vl.. 0060 b4 69 27 63 be 71 fb cf 99 a1 e1 c0 ec 5d 68 ab .i'c.q.......]h. 0070 bd 05 2c 34 03 3d 35 52 9e 34 a5 ca 9a 9a 46 52 ..,4.=5R.4....FR 0080 13 1a .. Frame 18 (130 bytes on wire, 130 bytes captured) Arrival Time: Jun 30, 2005 11:10:26.328274000 Time delta from previous packet: 0.999791000 seconds Time since reference or first frame: 3.053873000 seconds Frame Number: 18 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:0c:29:89:f2:82, Dst: 00:e0:7b:00:0d:61 Destination: 00:e0:7b:00:0d:61 (00:e0:7b:00:0d:61) Source: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Type: IP (0x0800) Frame check sequence: 0x4f454960 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.132 (165.227.249.132) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x006c (108) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x7c29 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.132 (165.227.249.132) Encapsulating Security Payload SPI: 0x000ee049 Sequence: 4 Data (84 bytes) 0000 00 e0 7b 00 0d 61 00 0c 29 89 f2 82 08 00 45 00 ..{..a..).....E. 0010 00 70 00 6c 00 00 ff 32 7c 29 a5 e3 f9 7a a5 e3 .p.l...2|)...z.. 0020 f9 84 00 0e e0 49 00 00 00 04 e1 9e ca b0 a4 99 .....I.......... 0030 85 7e b6 f5 a7 4f 77 72 e8 58 74 6b 06 05 d5 a7 .~...Owr.Xtk.... 0040 52 59 14 f2 70 fb 35 72 bb 25 a7 3c 7f 4f fe 44 RY..p.5r.%.<.O.D 0050 5a 97 2c 4f 93 96 22 63 be c3 07 93 b4 ed f6 56 Z.,O.."c.......V 0060 77 17 c1 9d 55 52 76 33 e2 a1 f4 53 5a ca bc 38 w...URv3...SZ..8 0070 54 86 24 46 85 1f d0 63 a0 23 78 60 3f fd 4f 45 T.$F...c.#x`?.OE 0080 49 60 I` Frame 19 (130 bytes on wire, 130 bytes captured) Arrival Time: Jun 30, 2005 11:10:26.328719000 Time delta from previous packet: 0.000445000 seconds Time since reference or first frame: 3.054318000 seconds Frame Number: 19 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:e0:7b:00:0d:61, Dst: 00:0c:29:89:f2:82 Destination: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Source: 00:e0:7b:00:0d:61 (00:e0:7b:00:0d:61) Type: IP (0x0800) Frame check sequence: 0xa1dd7229 (correct) Internet Protocol, Src Addr: 165.227.249.132 (165.227.249.132), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0d5a (3418) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x6f3b (correct) Source: 165.227.249.132 (165.227.249.132) Destination: 165.227.249.122 (165.227.249.122) Encapsulating Security Payload SPI: 0xeea1bfe9 Sequence: 4 Data (84 bytes) 0000 00 0c 29 89 f2 82 00 e0 7b 00 0d 61 08 00 45 00 ..).....{..a..E. 0010 00 70 0d 5a 00 00 ff 32 6f 3b a5 e3 f9 84 a5 e3 .p.Z...2o;...... 0020 f9 7a ee a1 bf e9 00 00 00 04 e1 c0 ec 5d 68 ab .z...........]h. 0030 bd 05 e1 58 8d b5 ae 66 62 54 a6 69 b6 ea 24 04 ...X...fbT.i..$. 0040 a3 71 12 14 6f 15 eb 7d 5a 25 aa 23 97 c0 ca 17 .q..o..}Z%.#.... 0050 b3 41 93 18 f9 63 38 89 3e 20 53 69 a7 21 bb 0e .A...c8.> Si.!.. 0060 b2 95 20 c9 04 3b b1 2c ac 32 8d 8a 12 8a 05 d4 .. ..;.,.2...... 0070 68 1d c6 27 47 20 41 90 b2 8c fc ec dd 35 a1 dd h..'G A......5.. 0080 72 29 r)