Frame 1 (174 bytes on wire, 174 bytes captured) Arrival Time: Dec 6, 2004 11:15:02.026938000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 174 bytes Capture Length: 174 bytes Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:01:02:46:6a:04 Destination: 00:01:02:46:6a:04 (00:01:02:46:6a:04) Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Type: IP (0x0800) Frame check sequence: 0x03384831 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.134 (165.227.249.134) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 156 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb88 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.134 (165.227.249.134) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 136 Checksum: 0xc449 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xB011EFCF82B0FBDF Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 128 Security Association payload Next payload: Vendor ID (13) Length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 44 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 36 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: NONE (0) Length: 44 Vendor ID: Check Point Check Point Product: VPN-1 Version: NG with Application Intelligence R55 0000 00 01 02 46 6a 04 00 0c 29 fc 0c 9f 08 00 45 00 ...Fj...).....E. 0010 00 9c 00 00 40 00 40 11 fb 88 a5 e3 f9 7a a5 e3 ....@.@......z.. 0020 f9 86 01 f4 01 f4 00 88 c4 49 b0 11 ef cf 82 b0 .........I...... 0030 fb df 00 00 00 00 00 00 00 00 01 10 02 00 00 00 ................ 0040 00 00 00 00 00 80 0d 00 00 38 00 00 00 01 00 00 .........8...... 0050 00 01 00 00 00 2c 01 01 00 01 00 00 00 24 01 01 .....,.......$.. 0060 00 00 80 01 00 05 80 02 00 02 80 03 00 01 80 04 ................ 0070 00 02 80 0b 00 01 00 0c 00 04 00 00 70 80 00 00 ............p... 0080 00 2c f4 ed 19 e0 c1 14 eb 51 6f aa ac 0e e3 7d .,.......Qo....} 0090 af 28 07 b4 38 1f 00 00 00 01 00 00 13 8d 00 00 .(..8........... 00a0 00 00 00 00 00 00 18 80 00 00 03 38 48 31 ...........8H1 Frame 2 (130 bytes on wire, 130 bytes captured) Arrival Time: Dec 6, 2004 11:15:02.305030000 Time delta from previous packet: 0.278092000 seconds Time since reference or first frame: 0.278092000 seconds Frame Number: 2 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:01:02:46:6a:04, Dst: 00:0c:29:fc:0c:9f Destination: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Source: 00:01:02:46:6a:04 (00:01:02:46:6a:04) Type: IP (0x0800) Frame check sequence: 0x09bebf31 (correct) Internet Protocol, Src Addr: 165.227.249.134 (165.227.249.134), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0024 (36) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3b91 (correct) Source: 165.227.249.134 (165.227.249.134) Destination: 165.227.249.122 (165.227.249.122) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 92 Checksum: 0x2eb5 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xB011EFCF82B0FBDF Responder cookie: 0x94990D4BEAA8EC2C Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 84 Security Association payload Next payload: NONE (0) Length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 44 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 36 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) 0000 00 0c 29 fc 0c 9f 00 01 02 46 6a 04 08 00 45 00 ..)......Fj...E. 0010 00 70 00 24 00 00 40 11 3b 91 a5 e3 f9 86 a5 e3 .p.$..@.;....... 0020 f9 7a 01 f4 01 f4 00 5c 2e b5 b0 11 ef cf 82 b0 .z.....\........ 0030 fb df 94 99 0d 4b ea a8 ec 2c 01 10 02 00 00 00 .....K...,...... 0040 00 00 00 00 00 54 00 00 00 38 00 00 00 01 00 00 .....T...8...... 0050 00 01 00 00 00 2c 01 01 00 01 00 00 00 24 01 01 .....,.......$.. 0060 00 00 80 01 00 05 80 02 00 02 80 03 00 01 80 04 ................ 0070 00 02 80 0b 00 01 00 0c 00 04 00 00 70 80 09 be ............p... 0080 bf 31 .1 Frame 3 (230 bytes on wire, 230 bytes captured) Arrival Time: Dec 6, 2004 11:15:02.314717000 Time delta from previous packet: 0.009687000 seconds Time since reference or first frame: 0.287779000 seconds Frame Number: 3 Packet Length: 230 bytes Capture Length: 230 bytes Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:01:02:46:6a:04 Destination: 00:01:02:46:6a:04 (00:01:02:46:6a:04) Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Type: IP (0x0800) Frame check sequence: 0x68e175f4 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.134 (165.227.249.134) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 212 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb50 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.134 (165.227.249.134) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 192 Checksum: 0xfca8 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xB011EFCF82B0FBDF Responder cookie: 0x94990D4BEAA8EC2C Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 184 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 24 Nonce Data 0000 00 01 02 46 6a 04 00 0c 29 fc 0c 9f 08 00 45 00 ...Fj...).....E. 0010 00 d4 00 00 40 00 40 11 fb 50 a5 e3 f9 7a a5 e3 ....@.@..P...z.. 0020 f9 86 01 f4 01 f4 00 c0 fc a8 b0 11 ef cf 82 b0 ................ 0030 fb df 94 99 0d 4b ea a8 ec 2c 04 10 02 00 00 00 .....K...,...... 0040 00 00 00 00 00 b8 0a 00 00 84 e9 29 24 cf e5 22 ...........)$.." 0050 02 36 b5 39 b5 a3 3f 35 cd 33 1f 20 9b 98 c9 33 .6.9..?5.3. ...3 0060 ed e5 0d 4f 56 8e bd 85 52 78 ba 0c 56 32 7a f6 ...OV...Rx..V2z. 0070 0d 5b 6e b0 38 1e 7a ff 1f 57 c8 f7 b4 67 a7 53 .[n.8.z..W...g.S 0080 dd 17 37 8e 10 78 53 c1 fb b5 63 db 9d 1f 38 1c ..7..xS...c...8. 0090 a8 b8 8e c3 bf 87 59 29 d6 54 87 a4 34 1b b7 31 ......Y).T..4..1 00a0 12 a6 40 c6 a5 27 3e 7f 2c a6 5b a5 fe a2 9b da ..@..'>.,.[..... 00b0 6d 75 82 f7 70 ea 68 f7 da a3 43 27 c9 b8 92 46 mu..p.h...C'...F 00c0 b2 18 8f c7 96 58 c7 83 ee 52 00 00 00 18 53 fc .....X...R....S. 00d0 fa e8 90 5d 81 ff 2e 16 9c a3 aa f4 54 93 d1 f5 ...]........T... 00e0 55 35 68 e1 75 f4 U5h.u. Frame 4 (226 bytes on wire, 226 bytes captured) Arrival Time: Dec 6, 2004 11:15:02.660775000 Time delta from previous packet: 0.346058000 seconds Time since reference or first frame: 0.633837000 seconds Frame Number: 4 Packet Length: 226 bytes Capture Length: 226 bytes Ethernet II, Src: 00:01:02:46:6a:04, Dst: 00:0c:29:fc:0c:9f Destination: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Source: 00:01:02:46:6a:04 (00:01:02:46:6a:04) Type: IP (0x0800) Frame check sequence: 0xb8c2d841 (correct) Internet Protocol, Src Addr: 165.227.249.134 (165.227.249.134), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 208 Identification: 0x0026 (38) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3b2f (correct) Source: 165.227.249.134 (165.227.249.134) Destination: 165.227.249.122 (165.227.249.122) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 188 Checksum: 0xe9e3 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xB011EFCF82B0FBDF Responder cookie: 0x94990D4BEAA8EC2C Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 180 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 20 Nonce Data 0000 00 0c 29 fc 0c 9f 00 01 02 46 6a 04 08 00 45 00 ..)......Fj...E. 0010 00 d0 00 26 00 00 40 11 3b 2f a5 e3 f9 86 a5 e3 ...&..@.;/...... 0020 f9 7a 01 f4 01 f4 00 bc e9 e3 b0 11 ef cf 82 b0 .z.............. 0030 fb df 94 99 0d 4b ea a8 ec 2c 04 10 02 00 00 00 .....K...,...... 0040 00 00 00 00 00 b4 0a 00 00 84 ee 50 3e 9f 3d b8 ...........P>.=. 0050 1b 17 a9 d7 ea bb 0f 01 9e f1 97 3a 5b 1c 52 e1 ...........:[.R. 0060 0a 70 d9 46 06 d6 0c 1d 18 4e 6e 53 de 5b 7f 25 .p.F.....NnS.[.% 0070 3f aa cb 38 66 ec 52 2e ee a5 ba 97 2f 75 b9 da ?..8f.R...../u.. 0080 a2 60 98 ae 5e 20 ef cf 94 4e 84 b2 a4 75 8a c7 .`..^ ...N...u.. 0090 6e ef f2 fe 9d ed 43 b7 fa af b8 19 8b 81 d9 3b n.....C........; 00a0 6a 6d ca 6a 1d 64 bf 8e b7 60 a8 77 18 c2 c4 3d jm.j.d...`.w...= 00b0 a6 f7 a9 ed 4e 9d af f7 90 b3 bf 69 55 7a 82 94 ....N......iUz.. 00c0 79 b9 a5 d4 44 67 86 13 a6 e6 00 00 00 14 a2 60 y...Dg.........` 00d0 a6 5c 68 b9 ca 2b 57 ac 5a bb 01 ba 37 2d b8 c2 .\h..+W.Z...7-.. 00e0 d8 41 .A Frame 5 (114 bytes on wire, 114 bytes captured) Arrival Time: Dec 6, 2004 11:15:02.669291000 Time delta from previous packet: 0.008516000 seconds Time since reference or first frame: 0.642353000 seconds Frame Number: 5 Packet Length: 114 bytes Capture Length: 114 bytes Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:01:02:46:6a:04 Destination: 00:01:02:46:6a:04 (00:01:02:46:6a:04) Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Type: IP (0x0800) Frame check sequence: 0x16b3ed4d (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.134 (165.227.249.134) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfbc4 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.134 (165.227.249.134) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 76 Checksum: 0x523f (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xB011EFCF82B0FBDF Responder cookie: 0x94990D4BEAA8EC2C Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 68 Encrypted payload (40 bytes) 0000 00 01 02 46 6a 04 00 0c 29 fc 0c 9f 08 00 45 00 ...Fj...).....E. 0010 00 60 00 00 40 00 40 11 fb c4 a5 e3 f9 7a a5 e3 .`..@.@......z.. 0020 f9 86 01 f4 01 f4 00 4c 52 3f b0 11 ef cf 82 b0 .......LR?...... 0030 fb df 94 99 0d 4b ea a8 ec 2c 05 10 02 01 00 00 .....K...,...... 0040 00 00 00 00 00 44 53 a7 d9 f0 d5 49 c6 a5 1f 38 .....DS....I...8 0050 db 52 e1 75 05 d9 27 31 fc 74 e6 ad 51 37 c4 f6 .R.u..'1.t..Q7.. 0060 e9 5d fc 05 dd 6c 72 27 9e 98 d9 43 53 2c 16 b3 .]...lr'...CS,.. 0070 ed 4d .M Frame 6 (114 bytes on wire, 114 bytes captured) Arrival Time: Dec 6, 2004 11:15:02.729933000 Time delta from previous packet: 0.060642000 seconds Time since reference or first frame: 0.702995000 seconds Frame Number: 6 Packet Length: 114 bytes Capture Length: 114 bytes Ethernet II, Src: 00:01:02:46:6a:04, Dst: 00:0c:29:fc:0c:9f Destination: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Source: 00:01:02:46:6a:04 (00:01:02:46:6a:04) Type: IP (0x0800) Frame check sequence: 0x1041a441 (correct) Internet Protocol, Src Addr: 165.227.249.134 (165.227.249.134), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0x0028 (40) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3b9d (correct) Source: 165.227.249.134 (165.227.249.134) Destination: 165.227.249.122 (165.227.249.122) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 76 Checksum: 0x33d9 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xB011EFCF82B0FBDF Responder cookie: 0x94990D4BEAA8EC2C Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 68 Encrypted payload (40 bytes) 0000 00 0c 29 fc 0c 9f 00 01 02 46 6a 04 08 00 45 00 ..)......Fj...E. 0010 00 60 00 28 00 00 40 11 3b 9d a5 e3 f9 86 a5 e3 .`.(..@.;....... 0020 f9 7a 01 f4 01 f4 00 4c 33 d9 b0 11 ef cf 82 b0 .z.....L3....... 0030 fb df 94 99 0d 4b ea a8 ec 2c 05 10 02 01 00 00 .....K...,...... 0040 00 00 00 00 00 44 63 e8 b9 07 96 be 66 0d 3d af .....Dc.....f.=. 0050 66 b6 1e 56 b3 15 af a6 92 ca e1 d6 81 d2 c6 45 f..V...........E 0060 34 62 ab b1 83 e6 55 c0 01 8a 9b 56 97 c1 10 41 4b....U....V...A 0070 a4 41 .A Frame 7 (346 bytes on wire, 346 bytes captured) Arrival Time: Dec 6, 2004 11:15:02.743190000 Time delta from previous packet: 0.013257000 seconds Time since reference or first frame: 0.716252000 seconds Frame Number: 7 Packet Length: 346 bytes Capture Length: 346 bytes Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:01:02:46:6a:04 Destination: 00:01:02:46:6a:04 (00:01:02:46:6a:04) Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Type: IP (0x0800) Frame check sequence: 0x419cfa8a (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.134 (165.227.249.134) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 328 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfadc (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.134 (165.227.249.134) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 308 Checksum: 0x9a24 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xB011EFCF82B0FBDF Responder cookie: 0x94990D4BEAA8EC2C Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x9BE37FB5 Length: 300 Encrypted payload (272 bytes) 0000 00 01 02 46 6a 04 00 0c 29 fc 0c 9f 08 00 45 00 ...Fj...).....E. 0010 01 48 00 00 40 00 40 11 fa dc a5 e3 f9 7a a5 e3 .H..@.@......z.. 0020 f9 86 01 f4 01 f4 01 34 9a 24 b0 11 ef cf 82 b0 .......4.$...... 0030 fb df 94 99 0d 4b ea a8 ec 2c 08 10 20 01 9b e3 .....K...,.. ... 0040 7f b5 00 00 01 2c cc 5e dc e4 33 fd 8f 23 86 d3 .....,.^..3..#.. 0050 59 6a e3 02 32 e8 0c 75 25 8e 1b 5e 4a b4 6c a7 Yj..2..u%..^J.l. 0060 25 da a8 14 28 6d 09 64 38 4a d0 82 b1 a6 e7 5a %...(m.d8J.....Z 0070 62 bc d1 b8 2e 32 4d 0b b1 13 e7 7f a6 78 5a 72 b....2M......xZr 0080 ae 09 dc 4c 79 42 78 8e d4 51 f8 68 ae 35 34 19 ...LyBx..Q.h.54. 0090 e5 fb f6 06 19 23 e8 a2 78 3e ca b6 df 6f 42 dc .....#..x>...oB. 00a0 99 d4 35 c8 bc b3 de e5 ed 51 2a 10 11 55 bd 39 ..5......Q*..U.9 00b0 71 22 90 0a 50 d2 00 23 7f f4 3d 05 3a e9 43 6f q"..P..#..=.:.Co 00c0 50 d9 1d 8c a9 ec 29 ed 2b b4 85 17 27 25 d6 84 P.....).+...'%.. 00d0 1e 14 31 31 73 cf 78 61 d3 7b 1a 48 62 d9 b1 09 ..11s.xa.{.Hb... 00e0 91 e9 a9 81 a7 ec 88 8c 94 6e c9 aa 60 a2 1a 6d .........n..`..m 00f0 5a 6d d2 4f 2c b8 90 27 ea 96 25 08 d5 d5 8c 0c Zm.O,..'..%..... 0100 af 28 25 4e 64 94 de b1 f3 24 77 22 a1 0d 24 af .(%Nd....$w"..$. 0110 5e c5 14 b5 3d f0 0c cd ee 0b ed 19 9a cc 90 d0 ^...=........... 0120 9e 0b da f1 92 3a 1f ac d5 0e fb d3 b0 db 9e 30 .....:.........0 0130 d9 80 85 c7 a9 1c 3d 03 a3 40 b6 da 70 66 2e b6 ......=..@..pf.. 0140 0d 3c 76 00 8a 81 66 43 64 91 f0 c4 11 2e f2 c5 ..$..VZ.#.. 0060 71 18 79 23 06 14 c4 5e 39 6b b5 00 97 c1 d2 0e q.y#...^9k...... 0070 1f d0 7b 0d 0a ea a9 ee ea 69 72 1a 87 d7 ca 92 ..{......ir..... 0080 d4 18 65 39 7f 65 56 8a c3 24 c8 98 a2 a0 59 78 ..e9.eV..$....Yx 0090 88 54 5b f0 dc 10 45 d0 7d 08 23 d2 e1 3f 5d 71 .T[...E.}.#..?]q 00a0 ef f3 a6 26 62 61 a9 6c e3 8b 83 f0 07 6e 92 df ...&ba.l.....n.. 00b0 83 dd 2d d3 27 36 b3 6d 2b ba 1a 9d fa 0c 21 2a ..-.'6.m+.....!* 00c0 3e 9c 64 07 76 7b ed a3 66 19 aa 5a e8 65 77 d1 >.d.v{..f..Z.ew. 00d0 1c 97 28 33 9b e4 d0 03 ac 20 0f 1e 74 b0 ac 1a ..(3..... ..t... 00e0 98 31 98 f0 7d 6a 22 fc 87 e1 71 f2 c1 35 61 2e .1..}j"...q..5a. 00f0 14 5f c2 0e c0 54 53 27 11 fc 99 f9 cf e0 aa 0a ._...TS'........ 0100 9a 73 62 94 cd 6f 15 68 cd ab e3 06 69 07 85 1b .sb..o.h....i... 0110 ee 10 60 da 35 5d 46 9c c7 d7 04 df c3 05 dd 85 ..`.5]F......... 0120 dc 42 4c 30 48 0d bf 0e 52 11 99 a0 e4 4e 68 d4 .BL0H...R....Nh. 0130 87 c8 da 5e 10 e3 c8 a7 bf 2d 65 88 1e 2c 58 cc ...^.....-e..,X. 0140 42 0c a7 60 22 f9 90 f3 9a 9f 74 ae b1 c1 21 e1 B..`".....t...!. 0150 1a 34 .4 Frame 9 (106 bytes on wire, 106 bytes captured) Arrival Time: Dec 6, 2004 11:15:03.357724000 Time delta from previous packet: 0.008818000 seconds Time since reference or first frame: 1.330786000 seconds Frame Number: 9 Packet Length: 106 bytes Capture Length: 106 bytes Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:01:02:46:6a:04 Destination: 00:01:02:46:6a:04 (00:01:02:46:6a:04) Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Type: IP (0x0800) Frame check sequence: 0x788e2bc2 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.134 (165.227.249.134) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 88 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfbcc (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.134 (165.227.249.134) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 68 Checksum: 0x84f0 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xB011EFCF82B0FBDF Responder cookie: 0x94990D4BEAA8EC2C Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x9BE37FB5 Length: 60 Encrypted payload (32 bytes) 0000 00 01 02 46 6a 04 00 0c 29 fc 0c 9f 08 00 45 00 ...Fj...).....E. 0010 00 58 00 00 40 00 40 11 fb cc a5 e3 f9 7a a5 e3 .X..@.@......z.. 0020 f9 86 01 f4 01 f4 00 44 84 f0 b0 11 ef cf 82 b0 .......D........ 0030 fb df 94 99 0d 4b ea a8 ec 2c 08 10 20 01 9b e3 .....K...,.. ... 0040 7f b5 00 00 00 3c 8b a9 73 46 b9 dc 33 e5 04 13 .....<..sF..3... 0050 dc 07 cf 64 00 79 4f be 39 68 95 eb 67 c9 06 45 ...d.yO.9h..g..E 0060 7d bb 1d 2b 98 00 78 8e 2b c2 }..+..x.+. Frame 10 (106 bytes on wire, 106 bytes captured) Arrival Time: Dec 6, 2004 11:15:03.461785000 Time delta from previous packet: 0.104061000 seconds Time since reference or first frame: 1.434847000 seconds Frame Number: 10 Packet Length: 106 bytes Capture Length: 106 bytes Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:01:02:46:6a:04 Destination: 00:01:02:46:6a:04 (00:01:02:46:6a:04) Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Type: IP (0x0800) Frame check sequence: 0x788e2bc2 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.134 (165.227.249.134) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 88 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfbcc (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.134 (165.227.249.134) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 68 Checksum: 0x84f0 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xB011EFCF82B0FBDF Responder cookie: 0x94990D4BEAA8EC2C Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x9BE37FB5 Length: 60 Encrypted payload (32 bytes) 0000 00 01 02 46 6a 04 00 0c 29 fc 0c 9f 08 00 45 00 ...Fj...).....E. 0010 00 58 00 00 40 00 40 11 fb cc a5 e3 f9 7a a5 e3 .X..@.@......z.. 0020 f9 86 01 f4 01 f4 00 44 84 f0 b0 11 ef cf 82 b0 .......D........ 0030 fb df 94 99 0d 4b ea a8 ec 2c 08 10 20 01 9b e3 .....K...,.. ... 0040 7f b5 00 00 00 3c 8b a9 73 46 b9 dc 33 e5 04 13 .....<..sF..3... 0050 dc 07 cf 64 00 79 4f be 39 68 95 eb 67 c9 06 45 ...d.yO.9h..g..E 0060 7d bb 1d 2b 98 00 78 8e 2b c2 }..+..x.+. Frame 11 (106 bytes on wire, 106 bytes captured) Arrival Time: Dec 6, 2004 11:15:03.571608000 Time delta from previous packet: 0.109823000 seconds Time since reference or first frame: 1.544670000 seconds Frame Number: 11 Packet Length: 106 bytes Capture Length: 106 bytes Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:01:02:46:6a:04 Destination: 00:01:02:46:6a:04 (00:01:02:46:6a:04) Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Type: IP (0x0800) Frame check sequence: 0x788e2bc2 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.134 (165.227.249.134) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 88 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfbcc (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.134 (165.227.249.134) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 68 Checksum: 0x84f0 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xB011EFCF82B0FBDF Responder cookie: 0x94990D4BEAA8EC2C Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x9BE37FB5 Length: 60 Encrypted payload (32 bytes) 0000 00 01 02 46 6a 04 00 0c 29 fc 0c 9f 08 00 45 00 ...Fj...).....E. 0010 00 58 00 00 40 00 40 11 fb cc a5 e3 f9 7a a5 e3 .X..@.@......z.. 0020 f9 86 01 f4 01 f4 00 44 84 f0 b0 11 ef cf 82 b0 .......D........ 0030 fb df 94 99 0d 4b ea a8 ec 2c 08 10 20 01 9b e3 .....K...,.. ... 0040 7f b5 00 00 00 3c 8b a9 73 46 b9 dc 33 e5 04 13 .....<..sF..3... 0050 dc 07 cf 64 00 79 4f be 39 68 95 eb 67 c9 06 45 ...d.yO.9h..g..E 0060 7d bb 1d 2b 98 00 78 8e 2b c2 }..+..x.+. Frame 12 (130 bytes on wire, 130 bytes captured) Arrival Time: Dec 6, 2004 11:15:03.677720000 Time delta from previous packet: 0.106112000 seconds Time since reference or first frame: 1.650782000 seconds Frame Number: 12 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:50:fc:84:d2:ec Destination: 00:50:fc:84:d2:ec (00:50:fc:84:d2:ec) Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Type: IP (0x0800) Frame check sequence: 0xe895bd82 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.134 (165.227.249.134) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x003a (58) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x7c59 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.134 (165.227.249.134) Encapsulating Security Payload SPI: 0x00002754 Sequence: 1 Data (84 bytes) 0000 00 50 fc 84 d2 ec 00 0c 29 fc 0c 9f 08 00 45 00 .P......).....E. 0010 00 70 00 3a 00 00 ff 32 7c 59 a5 e3 f9 7a a5 e3 .p.:...2|Y...z.. 0020 f9 86 00 00 27 54 00 00 00 01 80 24 92 6e 8f c6 ....'T.....$.n.. 0030 1b 21 e7 0d b8 f0 65 55 2a 90 92 a1 ea 61 52 96 .!....eU*....aR. 0040 49 76 b8 01 0f ba e6 95 3d d6 bc aa 56 c4 35 82 Iv......=...V.5. 0050 ab 60 92 88 dc 58 62 c6 50 61 a9 18 1d 18 f9 ae .`...Xb.Pa...... 0060 32 12 64 5e 9c d4 e6 36 20 52 fd b6 4c be ea 5e 2.d^...6 R..L..^ 0070 67 3c b9 79 5c ca 6b 06 a5 dc a7 75 58 e5 e8 95 g<.y\.k....uX... 0080 bd 82 .. Frame 13 (130 bytes on wire, 130 bytes captured) Arrival Time: Dec 6, 2004 11:15:03.678010000 Time delta from previous packet: 0.000290000 seconds Time since reference or first frame: 1.651072000 seconds Frame Number: 13 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:50:fc:84:d2:ec, Dst: 00:01:02:46:6a:04 Destination: 00:01:02:46:6a:04 (00:01:02:46:6a:04) Source: 00:50:fc:84:d2:ec (00:50:fc:84:d2:ec) Type: IP (0x0800) Frame check sequence: 0x61b7a8d9 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.134 (165.227.249.134) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x003a (58) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 254 Protocol: ESP (0x32) Header checksum: 0x7d59 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.134 (165.227.249.134) Encapsulating Security Payload SPI: 0x00002754 Sequence: 1 Data (84 bytes) 0000 00 01 02 46 6a 04 00 50 fc 84 d2 ec 08 00 45 00 ...Fj..P......E. 0010 00 70 00 3a 00 00 fe 32 7d 59 a5 e3 f9 7a a5 e3 .p.:...2}Y...z.. 0020 f9 86 00 00 27 54 00 00 00 01 80 24 92 6e 8f c6 ....'T.....$.n.. 0030 1b 21 e7 0d b8 f0 65 55 2a 90 92 a1 ea 61 52 96 .!....eU*....aR. 0040 49 76 b8 01 0f ba e6 95 3d d6 bc aa 56 c4 35 82 Iv......=...V.5. 0050 ab 60 92 88 dc 58 62 c6 50 61 a9 18 1d 18 f9 ae .`...Xb.Pa...... 0060 32 12 64 5e 9c d4 e6 36 20 52 fd b6 4c be ea 5e 2.d^...6 R..L..^ 0070 67 3c b9 79 5c ca 6b 06 a5 dc a7 75 58 e5 61 b7 g<.y\.k....uX.a. 0080 a8 d9 .. Frame 14 (130 bytes on wire, 130 bytes captured) Arrival Time: Dec 6, 2004 11:15:07.397300000 Time delta from previous packet: 3.719290000 seconds Time since reference or first frame: 5.370362000 seconds Frame Number: 14 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:50:fc:84:d2:ec Destination: 00:50:fc:84:d2:ec (00:50:fc:84:d2:ec) Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Type: IP (0x0800) Frame check sequence: 0x1f9d6e69 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.134 (165.227.249.134) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x003b (59) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x7c58 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.134 (165.227.249.134) Encapsulating Security Payload SPI: 0x00002754 Sequence: 2 Data (84 bytes) 0000 00 50 fc 84 d2 ec 00 0c 29 fc 0c 9f 08 00 45 00 .P......).....E. 0010 00 70 00 3b 00 00 ff 32 7c 58 a5 e3 f9 7a a5 e3 .p.;...2|X...z.. 0020 f9 86 00 00 27 54 00 00 00 02 fd b6 4c be ea 5e ....'T......L..^ 0030 67 3c fc 35 0a ff b6 86 01 ba e2 81 e3 68 5b 91 g<.5.........h[. 0040 cf 7c 56 95 a1 1d 12 f5 ac bd 4b 15 df 8a 36 6e .|V.......K...6n 0050 af da 0a 34 7c f2 f9 e9 c8 e6 80 ef ea f5 57 d1 ...4|.........W. 0060 11 e9 88 d5 1f d5 fb 40 f6 cb 2b 41 dc ed 74 ca .......@..+A..t. 0070 29 9b a1 5f 38 42 d7 37 1c 1e ad f1 75 68 1f 9d ).._8B.7....uh.. 0080 6e 69 ni Frame 15 (130 bytes on wire, 130 bytes captured) Arrival Time: Dec 6, 2004 11:15:07.397534000 Time delta from previous packet: 0.000234000 seconds Time since reference or first frame: 5.370596000 seconds Frame Number: 15 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:50:fc:84:d2:ec, Dst: 00:01:02:46:6a:04 Destination: 00:01:02:46:6a:04 (00:01:02:46:6a:04) Source: 00:50:fc:84:d2:ec (00:50:fc:84:d2:ec) Type: IP (0x0800) Frame check sequence: 0x96bf7b32 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.134 (165.227.249.134) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x003b (59) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 254 Protocol: ESP (0x32) Header checksum: 0x7d58 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.134 (165.227.249.134) Encapsulating Security Payload SPI: 0x00002754 Sequence: 2 Data (84 bytes) 0000 00 01 02 46 6a 04 00 50 fc 84 d2 ec 08 00 45 00 ...Fj..P......E. 0010 00 70 00 3b 00 00 fe 32 7d 58 a5 e3 f9 7a a5 e3 .p.;...2}X...z.. 0020 f9 86 00 00 27 54 00 00 00 02 fd b6 4c be ea 5e ....'T......L..^ 0030 67 3c fc 35 0a ff b6 86 01 ba e2 81 e3 68 5b 91 g<.5.........h[. 0040 cf 7c 56 95 a1 1d 12 f5 ac bd 4b 15 df 8a 36 6e .|V.......K...6n 0050 af da 0a 34 7c f2 f9 e9 c8 e6 80 ef ea f5 57 d1 ...4|.........W. 0060 11 e9 88 d5 1f d5 fb 40 f6 cb 2b 41 dc ed 74 ca .......@..+A..t. 0070 29 9b a1 5f 38 42 d7 37 1c 1e ad f1 75 68 96 bf ).._8B.7....uh.. 0080 7b 32 {2 Frame 16 (130 bytes on wire, 130 bytes captured) Arrival Time: Dec 6, 2004 11:15:07.405035000 Time delta from previous packet: 0.007501000 seconds Time since reference or first frame: 5.378097000 seconds Frame Number: 16 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:01:02:46:6a:04, Dst: 00:0c:29:fc:0c:9f Destination: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Source: 00:01:02:46:6a:04 (00:01:02:46:6a:04) Type: IP (0x0800) Frame check sequence: 0x314d26f7 (correct) Internet Protocol, Src Addr: 165.227.249.134 (165.227.249.134), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x002c (44) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 32 Protocol: ESP (0x32) Header checksum: 0x5b68 (correct) Source: 165.227.249.134 (165.227.249.134) Destination: 165.227.249.122 (165.227.249.122) Encapsulating Security Payload SPI: 0xfa58055f Sequence: 1 Data (84 bytes) 0000 00 0c 29 fc 0c 9f 00 01 02 46 6a 04 08 00 45 00 ..)......Fj...E. 0010 00 70 00 2c 00 00 20 32 5b 68 a5 e3 f9 86 a5 e3 .p.,.. 2[h...... 0020 f9 7a fa 58 05 5f 00 00 00 01 6c 1c ff 0d 89 04 .z.X._....l..... 0030 59 84 21 2a 45 ab 5f 11 4b 1d 99 fd bb fe 19 24 Y.!*E._.K......$ 0040 df 07 5b 01 0a c6 8c da 73 01 01 5a e3 0e af fc ..[.....s..Z.... 0050 39 22 0a af af 70 8e e8 9a a7 f1 f1 52 fd 9c aa 9"...p......R... 0060 35 59 b7 d3 f2 da 5e 77 70 65 ff e1 39 ba ad 57 5Y....^wpe..9..W 0070 6b f0 83 71 90 6a 66 21 09 8c d0 e0 28 90 31 4d k..q.jf!....(.1M 0080 26 f7 &. Frame 17 (130 bytes on wire, 130 bytes captured) Arrival Time: Dec 6, 2004 11:15:08.372407000 Time delta from previous packet: 0.967372000 seconds Time since reference or first frame: 6.345469000 seconds Frame Number: 17 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:50:fc:84:d2:ec Destination: 00:50:fc:84:d2:ec (00:50:fc:84:d2:ec) Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Type: IP (0x0800) Frame check sequence: 0x091a897e (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.134 (165.227.249.134) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x003c (60) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x7c57 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.134 (165.227.249.134) Encapsulating Security Payload SPI: 0x00002754 Sequence: 3 Data (84 bytes) 0000 00 50 fc 84 d2 ec 00 0c 29 fc 0c 9f 08 00 45 00 .P......).....E. 0010 00 70 00 3c 00 00 ff 32 7c 57 a5 e3 f9 7a a5 e3 .p.<...2|W...z.. 0020 f9 86 00 00 27 54 00 00 00 03 2b 41 dc ed 74 ca ....'T....+A..t. 0030 29 9b 9a 4d e4 e4 31 b2 92 49 36 4e aa 3d 86 e5 )..M..1..I6N.=.. 0040 ee 03 e4 5f 4a 0d 14 77 f9 f8 6b a5 85 15 13 2d ..._J..w..k....- 0050 7c 38 20 a4 a0 05 b7 fe ad 36 56 72 e5 5c 5f bf |8 ......6Vr.\_. 0060 bc 79 14 05 45 8b e6 81 00 60 46 57 d7 d0 76 36 .y..E....`FW..v6 0070 55 d0 9a 48 87 1d d8 28 f1 0e a7 99 b4 0e 09 1a U..H...(........ 0080 89 7e .~ Frame 18 (130 bytes on wire, 130 bytes captured) Arrival Time: Dec 6, 2004 11:15:08.372636000 Time delta from previous packet: 0.000229000 seconds Time since reference or first frame: 6.345698000 seconds Frame Number: 18 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:50:fc:84:d2:ec, Dst: 00:01:02:46:6a:04 Destination: 00:01:02:46:6a:04 (00:01:02:46:6a:04) Source: 00:50:fc:84:d2:ec (00:50:fc:84:d2:ec) Type: IP (0x0800) Frame check sequence: 0x80389c25 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.134 (165.227.249.134) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x003c (60) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 254 Protocol: ESP (0x32) Header checksum: 0x7d57 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.134 (165.227.249.134) Encapsulating Security Payload SPI: 0x00002754 Sequence: 3 Data (84 bytes) 0000 00 01 02 46 6a 04 00 50 fc 84 d2 ec 08 00 45 00 ...Fj..P......E. 0010 00 70 00 3c 00 00 fe 32 7d 57 a5 e3 f9 7a a5 e3 .p.<...2}W...z.. 0020 f9 86 00 00 27 54 00 00 00 03 2b 41 dc ed 74 ca ....'T....+A..t. 0030 29 9b 9a 4d e4 e4 31 b2 92 49 36 4e aa 3d 86 e5 )..M..1..I6N.=.. 0040 ee 03 e4 5f 4a 0d 14 77 f9 f8 6b a5 85 15 13 2d ..._J..w..k....- 0050 7c 38 20 a4 a0 05 b7 fe ad 36 56 72 e5 5c 5f bf |8 ......6Vr.\_. 0060 bc 79 14 05 45 8b e6 81 00 60 46 57 d7 d0 76 36 .y..E....`FW..v6 0070 55 d0 9a 48 87 1d d8 28 f1 0e a7 99 b4 0e 80 38 U..H...(.......8 0080 9c 25 .% Frame 19 (130 bytes on wire, 130 bytes captured) Arrival Time: Dec 6, 2004 11:15:08.373552000 Time delta from previous packet: 0.000916000 seconds Time since reference or first frame: 6.346614000 seconds Frame Number: 19 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:01:02:46:6a:04, Dst: 00:0c:29:fc:0c:9f Destination: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Source: 00:01:02:46:6a:04 (00:01:02:46:6a:04) Type: IP (0x0800) Frame check sequence: 0xaf473598 (correct) Internet Protocol, Src Addr: 165.227.249.134 (165.227.249.134), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x002d (45) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 32 Protocol: ESP (0x32) Header checksum: 0x5b67 (correct) Source: 165.227.249.134 (165.227.249.134) Destination: 165.227.249.122 (165.227.249.122) Encapsulating Security Payload SPI: 0xfa58055f Sequence: 2 Data (84 bytes) 0000 00 0c 29 fc 0c 9f 00 01 02 46 6a 04 08 00 45 00 ..)......Fj...E. 0010 00 70 00 2d 00 00 20 32 5b 67 a5 e3 f9 86 a5 e3 .p.-.. 2[g...... 0020 f9 7a fa 58 05 5f 00 00 00 02 6c 1c ff 0d 89 04 .z.X._....l..... 0030 59 84 b7 06 40 de 5f 08 e9 8b cd 2f f4 e3 b6 02 Y...@._..../.... 0040 46 51 53 08 d6 f9 eb df ba 4c 61 68 4c b2 e1 e5 FQS......LahL... 0050 48 28 05 91 57 00 71 df d4 1a f7 34 8a d2 9c f9 H(..W.q....4.... 0060 59 a2 4d 9e 49 1a d2 e6 25 62 b5 c3 74 ca e1 e2 Y.M.I...%b..t... 0070 d8 88 4c 06 5b a5 13 05 e6 bc a9 5d df a4 af 47 ..L.[......]...G 0080 35 98 5. Frame 20 (130 bytes on wire, 130 bytes captured) Arrival Time: Dec 6, 2004 11:15:09.376808000 Time delta from previous packet: 1.003256000 seconds Time since reference or first frame: 7.349870000 seconds Frame Number: 20 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:50:fc:84:d2:ec Destination: 00:50:fc:84:d2:ec (00:50:fc:84:d2:ec) Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Type: IP (0x0800) Frame check sequence: 0x105e25db (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.134 (165.227.249.134) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x003d (61) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x7c56 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.134 (165.227.249.134) Encapsulating Security Payload SPI: 0x00002754 Sequence: 4 Data (84 bytes) 0000 00 50 fc 84 d2 ec 00 0c 29 fc 0c 9f 08 00 45 00 .P......).....E. 0010 00 70 00 3d 00 00 ff 32 7c 56 a5 e3 f9 7a a5 e3 .p.=...2|V...z.. 0020 f9 86 00 00 27 54 00 00 00 04 46 57 d7 d0 76 36 ....'T....FW..v6 0030 55 d0 70 82 ba aa 56 1d 2d db 56 08 2f bf 04 2e U.p...V.-.V./... 0040 09 fa 69 f6 ce e2 38 4c 80 27 02 cc 81 f5 6f 6e ..i...8L.'....on 0050 2f e7 3f f3 94 f1 d5 70 22 27 fe 88 e2 ed 84 fd /.?....p"'...... 0060 3e 40 6f 24 6d d0 2e 3b c5 50 59 4b b6 19 41 37 >@o$m..;.PYK..A7 0070 77 c4 e0 8b 64 40 2a 91 e6 c2 8d 3c c3 ca 10 5e w...d@*....<...^ 0080 25 db %. Frame 21 (130 bytes on wire, 130 bytes captured) Arrival Time: Dec 6, 2004 11:15:09.377040000 Time delta from previous packet: 0.000232000 seconds Time since reference or first frame: 7.350102000 seconds Frame Number: 21 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:50:fc:84:d2:ec, Dst: 00:01:02:46:6a:04 Destination: 00:01:02:46:6a:04 (00:01:02:46:6a:04) Source: 00:50:fc:84:d2:ec (00:50:fc:84:d2:ec) Type: IP (0x0800) Frame check sequence: 0x997c3080 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.134 (165.227.249.134) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x003d (61) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 254 Protocol: ESP (0x32) Header checksum: 0x7d56 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.134 (165.227.249.134) Encapsulating Security Payload SPI: 0x00002754 Sequence: 4 Data (84 bytes) 0000 00 01 02 46 6a 04 00 50 fc 84 d2 ec 08 00 45 00 ...Fj..P......E. 0010 00 70 00 3d 00 00 fe 32 7d 56 a5 e3 f9 7a a5 e3 .p.=...2}V...z.. 0020 f9 86 00 00 27 54 00 00 00 04 46 57 d7 d0 76 36 ....'T....FW..v6 0030 55 d0 70 82 ba aa 56 1d 2d db 56 08 2f bf 04 2e U.p...V.-.V./... 0040 09 fa 69 f6 ce e2 38 4c 80 27 02 cc 81 f5 6f 6e ..i...8L.'....on 0050 2f e7 3f f3 94 f1 d5 70 22 27 fe 88 e2 ed 84 fd /.?....p"'...... 0060 3e 40 6f 24 6d d0 2e 3b c5 50 59 4b b6 19 41 37 >@o$m..;.PYK..A7 0070 77 c4 e0 8b 64 40 2a 91 e6 c2 8d 3c c3 ca 99 7c w...d@*....<...| 0080 30 80 0. Frame 22 (130 bytes on wire, 130 bytes captured) Arrival Time: Dec 6, 2004 11:15:09.377931000 Time delta from previous packet: 0.000891000 seconds Time since reference or first frame: 7.350993000 seconds Frame Number: 22 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:01:02:46:6a:04, Dst: 00:0c:29:fc:0c:9f Destination: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Source: 00:01:02:46:6a:04 (00:01:02:46:6a:04) Type: IP (0x0800) Frame check sequence: 0x35d3630a (correct) Internet Protocol, Src Addr: 165.227.249.134 (165.227.249.134), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x002e (46) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 32 Protocol: ESP (0x32) Header checksum: 0x5b66 (correct) Source: 165.227.249.134 (165.227.249.134) Destination: 165.227.249.122 (165.227.249.122) Encapsulating Security Payload SPI: 0xfa58055f Sequence: 3 Data (84 bytes) 0000 00 0c 29 fc 0c 9f 00 01 02 46 6a 04 08 00 45 00 ..)......Fj...E. 0010 00 70 00 2e 00 00 20 32 5b 66 a5 e3 f9 86 a5 e3 .p.... 2[f...... 0020 f9 7a fa 58 05 5f 00 00 00 03 55 c4 35 7a d8 e7 .z.X._....U.5z.. 0030 81 a3 fe e1 ae 72 21 82 b5 f9 63 92 3b ff d3 e2 .....r!...c.;... 0040 ce dd ef bb e2 ed e2 e4 6b d4 f5 78 f1 3b 05 93 ........k..x.;.. 0050 6d 99 e9 b1 a2 3e 62 b7 ac f9 c0 b8 00 3e f6 c7 m....>b......>.. 0060 34 9c 5d e9 d9 80 02 25 13 c7 f8 ad 57 39 5d 63 4.]....%....W9]c 0070 d8 d2 92 1f 4e a9 ef a8 1c e8 3a 0a 03 64 35 d3 ....N.....:..d5. 0080 63 0a c.