Frame 1 (174 bytes on wire, 174 bytes captured) Arrival Time: Jun 30, 2005 11:23:22.762251000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 174 bytes Capture Length: 174 bytes Ethernet II, Src: 00:0c:29:89:f2:82, Dst: 00:09:5b:b0:f5:3d Destination: 00:09:5b:b0:f5:3d (00:09:5b:b0:f5:3d) Source: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Type: IP (0x0800) Frame check sequence: 0xc2bcce70 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.136 (165.227.249.136) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 156 Identification: 0x00fe (254) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfa88 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.136 (165.227.249.136) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 136 Checksum: 0xa5ed (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xA605E616CD0386AD Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 128 Security Association payload Next payload: Vendor ID (13) Length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 44 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 36 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: NONE (0) Length: 44 Vendor ID: Check Point Check Point Product: VPN-1 Version: NG with Application Intelligence R55 0000 00 09 5b b0 f5 3d 00 0c 29 89 f2 82 08 00 45 00 ..[..=..).....E. 0010 00 9c 00 fe 40 00 40 11 fa 88 a5 e3 f9 7a a5 e3 ....@.@......z.. 0020 f9 88 01 f4 01 f4 00 88 a5 ed a6 05 e6 16 cd 03 ................ 0030 86 ad 00 00 00 00 00 00 00 00 01 10 02 00 00 00 ................ 0040 00 00 00 00 00 80 0d 00 00 38 00 00 00 01 00 00 .........8...... 0050 00 01 00 00 00 2c 01 01 00 01 00 00 00 24 01 01 .....,.......$.. 0060 00 00 80 01 00 05 80 02 00 02 80 03 00 01 80 04 ................ 0070 00 02 80 0b 00 01 00 0c 00 04 00 00 70 80 00 00 ............p... 0080 00 2c f4 ed 19 e0 c1 14 eb 51 6f aa ac 0e e3 7d .,.......Qo....} 0090 af 28 07 b4 38 1f 00 00 00 01 00 00 13 8d 42 c2 .(..8.........B. 00a0 1a bc 00 00 00 00 18 00 00 00 c2 bc ce 70 .............p Frame 2 (130 bytes on wire, 130 bytes captured) Arrival Time: Jun 30, 2005 11:23:22.764965000 Time delta from previous packet: 0.002714000 seconds Time since reference or first frame: 0.002714000 seconds Frame Number: 2 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:09:5b:b0:f5:3d, Dst: 00:0c:29:89:f2:82 Destination: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Source: 00:09:5b:b0:f5:3d (00:09:5b:b0:f5:3d) Type: IP (0x0800) Frame check sequence: 0xfe245a60 (correct) Internet Protocol, Src Addr: 165.227.249.136 (165.227.249.136), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0046 (70) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3b6d (correct) Source: 165.227.249.136 (165.227.249.136) Destination: 165.227.249.122 (165.227.249.122) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 92 Checksum: 0xc5c5 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xA605E616CD0386AD Responder cookie: 0x959BAC26332FAB5A Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 84 Security Association payload Next payload: NONE (0) Length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 44 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 36 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) 0000 00 0c 29 89 f2 82 00 09 5b b0 f5 3d 08 00 45 00 ..).....[..=..E. 0010 00 70 00 46 00 00 40 11 3b 6d a5 e3 f9 88 a5 e3 .p.F..@.;m...... 0020 f9 7a 01 f4 01 f4 00 5c c5 c5 a6 05 e6 16 cd 03 .z.....\........ 0030 86 ad 95 9b ac 26 33 2f ab 5a 01 10 02 00 00 00 .....&3/.Z...... 0040 00 00 00 00 00 54 00 00 00 38 00 00 00 01 00 00 .....T...8...... 0050 00 01 00 00 00 2c 01 01 00 01 00 00 00 24 01 01 .....,.......$.. 0060 00 00 80 01 00 05 80 02 00 02 80 03 00 01 80 04 ................ 0070 00 02 80 0b 00 01 00 0c 00 04 00 00 70 80 fe 24 ............p..$ 0080 5a 60 Z` Frame 3 (230 bytes on wire, 230 bytes captured) Arrival Time: Jun 30, 2005 11:23:22.769570000 Time delta from previous packet: 0.004605000 seconds Time since reference or first frame: 0.007319000 seconds Frame Number: 3 Packet Length: 230 bytes Capture Length: 230 bytes Ethernet II, Src: 00:0c:29:89:f2:82, Dst: 00:09:5b:b0:f5:3d Destination: 00:09:5b:b0:f5:3d (00:09:5b:b0:f5:3d) Source: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Type: IP (0x0800) Frame check sequence: 0xc83e3567 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.136 (165.227.249.136) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 212 Identification: 0x00ff (255) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfa4f (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.136 (165.227.249.136) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 192 Checksum: 0x0fb9 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xA605E616CD0386AD Responder cookie: 0x959BAC26332FAB5A Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 184 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 24 Nonce Data 0000 00 09 5b b0 f5 3d 00 0c 29 89 f2 82 08 00 45 00 ..[..=..).....E. 0010 00 d4 00 ff 40 00 40 11 fa 4f a5 e3 f9 7a a5 e3 ....@.@..O...z.. 0020 f9 88 01 f4 01 f4 00 c0 0f b9 a6 05 e6 16 cd 03 ................ 0030 86 ad 95 9b ac 26 33 2f ab 5a 04 10 02 00 00 00 .....&3/.Z...... 0040 00 00 00 00 00 b8 0a 00 00 84 9e 6c 71 1c 38 01 ...........lq.8. 0050 74 a1 2e c2 99 1c 73 28 a3 97 a6 b9 31 1e 30 a5 t.....s(....1.0. 0060 df 42 bf 12 91 2e d5 99 9e 04 2d 3b 12 b3 7d 37 .B........-;..}7 0070 79 9b a3 d7 46 08 f9 91 e2 a1 4b 54 3b 05 50 6e y...F.....KT;.Pn 0080 61 9c bf 9f ed 56 0b 2e c2 fa c2 74 a9 d4 1e af a....V.....t.... 0090 37 eb c5 9a 14 e0 ad ad 58 5b e1 b1 f0 74 26 f9 7.......X[...t&. 00a0 a2 ec 53 6d 99 ec 8d d1 e4 45 e9 48 f9 36 6b 67 ..Sm.....E.H.6kg 00b0 0d be 55 7b 5b dc 55 19 c8 28 29 bf 0a f3 dd f4 ..U{[.U..()..... 00c0 ec 6d b3 25 a2 ec 9c 59 27 33 00 00 00 18 e5 c1 .m.%...Y'3...... 00d0 b0 69 2d f5 83 5a 03 dd c0 4b cc a9 2f 5a 3a 97 .i-..Z...K../Z:. 00e0 7f a9 c8 3e 35 67 ...>5g Frame 4 (218 bytes on wire, 218 bytes captured) Arrival Time: Jun 30, 2005 11:23:23.223090000 Time delta from previous packet: 0.453520000 seconds Time since reference or first frame: 0.460839000 seconds Frame Number: 4 Packet Length: 218 bytes Capture Length: 218 bytes Ethernet II, Src: 00:09:5b:b0:f5:3d, Dst: 00:0c:29:89:f2:82 Destination: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Source: 00:09:5b:b0:f5:3d (00:09:5b:b0:f5:3d) Type: IP (0x0800) Frame check sequence: 0x40e8e36b (correct) Internet Protocol, Src Addr: 165.227.249.136 (165.227.249.136), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 200 Identification: 0x0047 (71) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3b14 (correct) Source: 165.227.249.136 (165.227.249.136) Destination: 165.227.249.122 (165.227.249.122) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 180 Checksum: 0xd1a2 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xA605E616CD0386AD Responder cookie: 0x959BAC26332FAB5A Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 172 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 12 Nonce Data 0000 00 0c 29 89 f2 82 00 09 5b b0 f5 3d 08 00 45 00 ..).....[..=..E. 0010 00 c8 00 47 00 00 40 11 3b 14 a5 e3 f9 88 a5 e3 ...G..@.;....... 0020 f9 7a 01 f4 01 f4 00 b4 d1 a2 a6 05 e6 16 cd 03 .z.............. 0030 86 ad 95 9b ac 26 33 2f ab 5a 04 10 02 00 00 00 .....&3/.Z...... 0040 00 00 00 00 00 ac 0a 00 00 84 3e 77 05 a1 3a 44 ..........>w..:D 0050 3d c3 1f 7a b5 c7 48 88 65 04 5a 09 1a e6 52 c7 =..z..H.e.Z...R. 0060 e1 18 f7 5d 23 c4 74 20 7b e4 1c 40 6b 81 84 20 ...]#.t {..@k.. 0070 db 0e 81 89 08 bd 10 4d 59 5e 12 4c d8 fd 4b 87 .......MY^.L..K. 0080 a2 14 c0 3b 1d 46 2e 0e d9 e3 a5 bb 71 b8 40 8b ...;.F......q.@. 0090 30 04 02 ae d2 45 90 06 2c 9f de 81 ea 50 60 44 0....E..,....P`D 00a0 99 4d 41 d4 bf 0a df 27 af 25 14 74 e9 4f 5c b6 .MA....'.%.t.O\. 00b0 5b e9 e8 12 78 07 91 5d 20 70 1e 02 7a 32 0e 46 [...x..] p..z2.F 00c0 f9 bc a6 52 ea 7a c0 b4 ea 17 00 00 00 0c c2 0e ...R.z.......... 00d0 c8 3e bb 30 f7 de 40 e8 e3 6b .>.0..@..k Frame 5 (114 bytes on wire, 114 bytes captured) Arrival Time: Jun 30, 2005 11:23:23.230257000 Time delta from previous packet: 0.007167000 seconds Time since reference or first frame: 0.468006000 seconds Frame Number: 5 Packet Length: 114 bytes Capture Length: 114 bytes Ethernet II, Src: 00:0c:29:89:f2:82, Dst: 00:09:5b:b0:f5:3d Destination: 00:09:5b:b0:f5:3d (00:09:5b:b0:f5:3d) Source: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Type: IP (0x0800) Frame check sequence: 0xde7d6f65 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.136 (165.227.249.136) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0x0100 (256) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfac2 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.136 (165.227.249.136) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 76 Checksum: 0x391f (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xA605E616CD0386AD Responder cookie: 0x959BAC26332FAB5A Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 68 Encrypted payload (40 bytes) 0000 00 09 5b b0 f5 3d 00 0c 29 89 f2 82 08 00 45 00 ..[..=..).....E. 0010 00 60 01 00 40 00 40 11 fa c2 a5 e3 f9 7a a5 e3 .`..@.@......z.. 0020 f9 88 01 f4 01 f4 00 4c 39 1f a6 05 e6 16 cd 03 .......L9....... 0030 86 ad 95 9b ac 26 33 2f ab 5a 05 10 02 01 00 00 .....&3/.Z...... 0040 00 00 00 00 00 44 ec 4d 73 b3 09 20 68 35 bf d6 .....D.Ms.. h5.. 0050 c8 23 a9 e1 56 f8 10 38 38 cd 4b a8 5c 17 71 d7 .#..V..88.K.\.q. 0060 13 74 da c4 bd f9 ab 6f 1e 1c 8e 56 bb 38 de 7d .t.....o...V.8.} 0070 6f 65 oe Frame 6 (114 bytes on wire, 114 bytes captured) Arrival Time: Jun 30, 2005 11:23:23.781822000 Time delta from previous packet: 0.551565000 seconds Time since reference or first frame: 1.019571000 seconds Frame Number: 6 Packet Length: 114 bytes Capture Length: 114 bytes Ethernet II, Src: 00:09:5b:b0:f5:3d, Dst: 00:0c:29:89:f2:82 Destination: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Source: 00:09:5b:b0:f5:3d (00:09:5b:b0:f5:3d) Type: IP (0x0800) Frame check sequence: 0x16838a68 (correct) Internet Protocol, Src Addr: 165.227.249.136 (165.227.249.136), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0x0048 (72) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3b7b (correct) Source: 165.227.249.136 (165.227.249.136) Destination: 165.227.249.122 (165.227.249.122) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 76 Checksum: 0x974f (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xA605E616CD0386AD Responder cookie: 0x959BAC26332FAB5A Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 68 Encrypted payload (40 bytes) 0000 00 0c 29 89 f2 82 00 09 5b b0 f5 3d 08 00 45 00 ..).....[..=..E. 0010 00 60 00 48 00 00 40 11 3b 7b a5 e3 f9 88 a5 e3 .`.H..@.;{...... 0020 f9 7a 01 f4 01 f4 00 4c 97 4f a6 05 e6 16 cd 03 .z.....L.O...... 0030 86 ad 95 9b ac 26 33 2f ab 5a 05 10 02 01 00 00 .....&3/.Z...... 0040 00 00 00 00 00 44 75 b1 74 0c bb 1c b9 1f 11 45 .....Du.t......E 0050 f9 c5 a6 1a 83 77 f3 36 21 4b 93 77 f3 0b 0a a3 .....w.6!K.w.... 0060 4b 44 36 ac a3 a5 e4 3e 25 a6 1e f8 97 31 16 83 KD6....>%....1.. 0070 8a 68 .h Frame 7 (346 bytes on wire, 346 bytes captured) Arrival Time: Jun 30, 2005 11:23:23.788238000 Time delta from previous packet: 0.006416000 seconds Time since reference or first frame: 1.025987000 seconds Frame Number: 7 Packet Length: 346 bytes Capture Length: 346 bytes Ethernet II, Src: 00:0c:29:89:f2:82, Dst: 00:09:5b:b0:f5:3d Destination: 00:09:5b:b0:f5:3d (00:09:5b:b0:f5:3d) Source: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Type: IP (0x0800) Frame check sequence: 0x33535178 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.136 (165.227.249.136) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 328 Identification: 0x0101 (257) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xf9d9 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.136 (165.227.249.136) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 308 Checksum: 0x9944 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xA605E616CD0386AD Responder cookie: 0x959BAC26332FAB5A Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xAEE299FF Length: 300 Encrypted payload (272 bytes) 0000 00 09 5b b0 f5 3d 00 0c 29 89 f2 82 08 00 45 00 ..[..=..).....E. 0010 01 48 01 01 40 00 40 11 f9 d9 a5 e3 f9 7a a5 e3 .H..@.@......z.. 0020 f9 88 01 f4 01 f4 01 34 99 44 a6 05 e6 16 cd 03 .......4.D...... 0030 86 ad 95 9b ac 26 33 2f ab 5a 08 10 20 01 ae e2 .....&3/.Z.. ... 0040 99 ff 00 00 01 2c 99 16 04 29 fa 94 1d 52 2c e3 .....,...)...R,. 0050 69 ec e5 38 e4 28 36 22 93 4a 82 0a 1b d4 24 d2 i..8.(6".J....$. 0060 d3 9a 31 78 6b 24 f3 d0 f6 9d 9a 81 41 3b 8f 97 ..1xk$......A;.. 0070 19 41 06 d6 6d ef fa 3f fa f2 b8 89 71 83 40 79 .A..m..?....q.@y 0080 00 6f a5 29 b2 14 65 13 98 81 69 ee f8 ec 9d 3e .o.)..e...i....> 0090 11 5e 9a b8 08 50 22 69 1a 4d d5 16 fd 22 b5 89 .^...P"i.M...".. 00a0 11 8f 8f 26 83 6b 54 34 7d a2 8c a9 4c d3 fd fe ...&.kT4}...L... 00b0 d4 f0 db fa de 23 9b e0 9c 45 b8 c8 48 0c d0 c0 .....#...E..H... 00c0 77 7b a7 ce b8 f2 ac 4e a6 d4 44 cd 52 0e 67 2a w{.....N..D.R.g* 00d0 ee ab e9 6b 90 ef 91 d6 57 a5 93 53 9e b9 77 82 ...k....W..S..w. 00e0 f2 3b 1b df 0e 2d 38 c8 82 09 d5 65 fb a7 1e 8f .;...-8....e.... 00f0 70 d0 af 09 98 06 ea c6 e2 dd 5b fe 5c 74 c2 25 p.........[.\t.% 0100 e2 5d 95 34 3f 27 94 fe d8 94 2a 9a d0 b1 5e 55 .].4?'....*...^U 0110 2e a7 8b f7 d9 7a 36 df 14 b7 2c 45 05 c5 5a 7d .....z6...,E..Z} 0120 bf 09 96 c4 0e b2 c5 9b 8d fb 6a 75 c8 c1 5d 49 ..........ju..]I 0130 25 d9 4a 12 2b fd 8f bf e8 43 b4 6d 21 cb 04 96 %.J.+....C.m!... 0140 f7 0c cc 18 fb 54 c4 32 ee 5d bd f3 d8 a5 f7 7a .....T.2.].....z 0150 c0 70 08 3a 50 17 33 53 51 78 .p.:P.3SQx Frame 8 (330 bytes on wire, 330 bytes captured) Arrival Time: Jun 30, 2005 11:23:24.243984000 Time delta from previous packet: 0.455746000 seconds Time since reference or first frame: 1.481733000 seconds Frame Number: 8 Packet Length: 330 bytes Capture Length: 330 bytes Ethernet II, Src: 00:09:5b:b0:f5:3d, Dst: 00:0c:29:89:f2:82 Destination: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Source: 00:09:5b:b0:f5:3d (00:09:5b:b0:f5:3d) Type: IP (0x0800) Frame check sequence: 0x7f09900d (correct) Internet Protocol, Src Addr: 165.227.249.136 (165.227.249.136), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 312 Identification: 0x0049 (73) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3aa2 (correct) Source: 165.227.249.136 (165.227.249.136) Destination: 165.227.249.122 (165.227.249.122) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 292 Checksum: 0x5c14 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xA605E616CD0386AD Responder cookie: 0x959BAC26332FAB5A Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xAEE299FF Length: 284 Encrypted payload (256 bytes) 0000 00 0c 29 89 f2 82 00 09 5b b0 f5 3d 08 00 45 00 ..).....[..=..E. 0010 01 38 00 49 00 00 40 11 3a a2 a5 e3 f9 88 a5 e3 .8.I..@.:....... 0020 f9 7a 01 f4 01 f4 01 24 5c 14 a6 05 e6 16 cd 03 .z.....$\....... 0030 86 ad 95 9b ac 26 33 2f ab 5a 08 10 20 01 ae e2 .....&3/.Z.. ... 0040 99 ff 00 00 01 1c 93 1b eb 87 d8 76 65 25 73 50 ...........ve%sP 0050 e7 91 3d 95 8d af 90 79 42 97 28 57 5f 41 10 c4 ..=....yB.(W_A.. 0060 a2 73 81 51 ea ae 49 48 00 21 77 9a c5 6c 4a be .s.Q..IH.!w..lJ. 0070 05 d2 f7 58 c1 d7 4c d9 fe 38 0e ef d6 f3 b8 26 ...X..L..8.....& 0080 2c 56 91 81 bb c1 e3 3e d1 3f 50 7e 50 e2 35 84 ,V.....>.?P~P.5. 0090 25 8b c2 f6 be 47 b7 af 03 24 ed 04 db c5 64 e2 %....G...$....d. 00a0 fa 08 0e 93 25 98 25 6a 88 f6 95 22 7e 60 1a 9b ....%.%j..."~`.. 00b0 bf fa 4b b8 51 29 7c 1e 1f bc ea 35 30 05 d0 e9 ..K.Q)|....50... 00c0 a8 16 1e f1 d7 df 45 2b 8f e0 1e 36 5a e0 66 b9 ......E+...6Z.f. 00d0 f5 f8 7f 18 e2 db b0 4d 71 5f 03 a4 83 ee 44 a6 .......Mq_....D. 00e0 82 38 4f 9d b0 d5 a7 3e ac d5 0b 50 e5 ae 7e fb .8O....>...P..~. 00f0 5a eb 51 4f 35 02 9c 58 e9 99 1c f9 23 02 8e f3 Z.QO5..X....#... 0100 42 aa b0 e4 66 32 bd 0d 59 05 11 17 48 17 b9 91 B...f2..Y...H... 0110 a0 d2 b1 83 45 87 aa a6 17 6f e3 df 8d f2 d8 29 ....E....o.....) 0120 c1 59 0e a2 10 75 66 74 42 dc 30 18 68 ec 03 d9 .Y...uftB.0.h... 0130 c2 06 7f 80 2e d6 17 05 ab 30 7f 48 a9 36 0d 73 .........0.H.6.s 0140 ed 8d af e0 2a c3 7f 09 90 0d ....*..... Frame 9 (106 bytes on wire, 106 bytes captured) Arrival Time: Jun 30, 2005 11:23:24.251010000 Time delta from previous packet: 0.007026000 seconds Time since reference or first frame: 1.488759000 seconds Frame Number: 9 Packet Length: 106 bytes Capture Length: 106 bytes Ethernet II, Src: 00:0c:29:89:f2:82, Dst: 00:09:5b:b0:f5:3d Destination: 00:09:5b:b0:f5:3d (00:09:5b:b0:f5:3d) Source: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Type: IP (0x0800) Frame check sequence: 0xf18585d9 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.136 (165.227.249.136) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 88 Identification: 0x0102 (258) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfac8 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.136 (165.227.249.136) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 68 Checksum: 0x4caf (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xA605E616CD0386AD Responder cookie: 0x959BAC26332FAB5A Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xAEE299FF Length: 60 Encrypted payload (32 bytes) 0000 00 09 5b b0 f5 3d 00 0c 29 89 f2 82 08 00 45 00 ..[..=..).....E. 0010 00 58 01 02 40 00 40 11 fa c8 a5 e3 f9 7a a5 e3 .X..@.@......z.. 0020 f9 88 01 f4 01 f4 00 44 4c af a6 05 e6 16 cd 03 .......DL....... 0030 86 ad 95 9b ac 26 33 2f ab 5a 08 10 20 01 ae e2 .....&3/.Z.. ... 0040 99 ff 00 00 00 3c 2e e0 07 e4 51 ba 2a b0 1d ff .....<....Q.*... 0050 44 56 97 44 f4 4d d0 d7 b8 d9 70 08 18 3b 92 4a DV.D.M....p..;.J 0060 55 9e 04 65 5f 61 f1 85 85 d9 U..e_a.... Frame 10 (106 bytes on wire, 106 bytes captured) Arrival Time: Jun 30, 2005 11:23:24.359531000 Time delta from previous packet: 0.108521000 seconds Time since reference or first frame: 1.597280000 seconds Frame Number: 10 Packet Length: 106 bytes Capture Length: 106 bytes Ethernet II, Src: 00:0c:29:89:f2:82, Dst: 00:09:5b:b0:f5:3d Destination: 00:09:5b:b0:f5:3d (00:09:5b:b0:f5:3d) Source: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Type: IP (0x0800) Frame check sequence: 0x1f212a4e (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.136 (165.227.249.136) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 88 Identification: 0x0103 (259) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfac7 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.136 (165.227.249.136) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 68 Checksum: 0x4caf (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xA605E616CD0386AD Responder cookie: 0x959BAC26332FAB5A Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xAEE299FF Length: 60 Encrypted payload (32 bytes) 0000 00 09 5b b0 f5 3d 00 0c 29 89 f2 82 08 00 45 00 ..[..=..).....E. 0010 00 58 01 03 40 00 40 11 fa c7 a5 e3 f9 7a a5 e3 .X..@.@......z.. 0020 f9 88 01 f4 01 f4 00 44 4c af a6 05 e6 16 cd 03 .......DL....... 0030 86 ad 95 9b ac 26 33 2f ab 5a 08 10 20 01 ae e2 .....&3/.Z.. ... 0040 99 ff 00 00 00 3c 2e e0 07 e4 51 ba 2a b0 1d ff .....<....Q.*... 0050 44 56 97 44 f4 4d d0 d7 b8 d9 70 08 18 3b 92 4a DV.D.M....p..;.J 0060 55 9e 04 65 5f 61 1f 21 2a 4e U..e_a.!*N Frame 11 (106 bytes on wire, 106 bytes captured) Arrival Time: Jun 30, 2005 11:23:24.461046000 Time delta from previous packet: 0.101515000 seconds Time since reference or first frame: 1.698795000 seconds Frame Number: 11 Packet Length: 106 bytes Capture Length: 106 bytes Ethernet II, Src: 00:0c:29:89:f2:82, Dst: 00:09:5b:b0:f5:3d Destination: 00:09:5b:b0:f5:3d (00:09:5b:b0:f5:3d) Source: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Type: IP (0x0800) Frame check sequence: 0xff50ba9c (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.136 (165.227.249.136) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 88 Identification: 0x0104 (260) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfac6 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.136 (165.227.249.136) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 68 Checksum: 0x4caf (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xA605E616CD0386AD Responder cookie: 0x959BAC26332FAB5A Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xAEE299FF Length: 60 Encrypted payload (32 bytes) 0000 00 09 5b b0 f5 3d 00 0c 29 89 f2 82 08 00 45 00 ..[..=..).....E. 0010 00 58 01 04 40 00 40 11 fa c6 a5 e3 f9 7a a5 e3 .X..@.@......z.. 0020 f9 88 01 f4 01 f4 00 44 4c af a6 05 e6 16 cd 03 .......DL....... 0030 86 ad 95 9b ac 26 33 2f ab 5a 08 10 20 01 ae e2 .....&3/.Z.. ... 0040 99 ff 00 00 00 3c 2e e0 07 e4 51 ba 2a b0 1d ff .....<....Q.*... 0050 44 56 97 44 f4 4d d0 d7 b8 d9 70 08 18 3b 92 4a DV.D.M....p..;.J 0060 55 9e 04 65 5f 61 ff 50 ba 9c U..e_a.P.. Frame 12 (130 bytes on wire, 130 bytes captured) Arrival Time: Jun 30, 2005 11:23:24.553320000 Time delta from previous packet: 0.092274000 seconds Time since reference or first frame: 1.791069000 seconds Frame Number: 12 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:0c:29:89:f2:82, Dst: 00:09:5b:b0:f5:3d Destination: 00:09:5b:b0:f5:3d (00:09:5b:b0:f5:3d) Source: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Type: IP (0x0800) Frame check sequence: 0xfbc36161 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.136 (165.227.249.136) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x008d (141) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x7c04 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.136 (165.227.249.136) Encapsulating Security Payload SPI: 0xd83d9bc8 Sequence: 1 Data (84 bytes) 0000 00 09 5b b0 f5 3d 00 0c 29 89 f2 82 08 00 45 00 ..[..=..).....E. 0010 00 70 00 8d 00 00 ff 32 7c 04 a5 e3 f9 7a a5 e3 .p.....2|....z.. 0020 f9 88 d8 3d 9b c8 00 00 00 01 f6 ad 38 9f 16 81 ...=........8... 0030 ba 6e e7 89 77 fa 29 0e dc a8 34 5b 89 9b 68 e3 .n..w.)...4[..h. 0040 71 67 99 99 b2 24 e1 d7 03 43 d8 3d 2d b8 e7 df qg...$...C.=-... 0050 bd e4 3d 24 00 05 ff 61 fd f1 9e f9 b2 23 4e ec ..=$...a.....#N. 0060 85 9f 5f 54 17 92 69 9b 14 20 0f a8 b2 bf d0 24 .._T..i.. .....$ 0070 94 df 50 0d 16 0c b4 29 ef 29 28 af e5 45 fb c3 ..P....).)(..E.. 0080 61 61 aa Frame 13 (130 bytes on wire, 130 bytes captured) Arrival Time: Jun 30, 2005 11:23:24.807176000 Time delta from previous packet: 0.253856000 seconds Time since reference or first frame: 2.044925000 seconds Frame Number: 13 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:09:5b:b0:f5:3d, Dst: 00:0c:29:89:f2:82 Destination: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Source: 00:09:5b:b0:f5:3d (00:09:5b:b0:f5:3d) Type: IP (0x0800) Frame check sequence: 0xdd5f827a (correct) Internet Protocol, Src Addr: 165.227.249.136 (165.227.249.136), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0xd43f (54335) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 30 Protocol: ESP (0x32) Header checksum: 0x8952 (correct) Source: 165.227.249.136 (165.227.249.136) Destination: 165.227.249.122 (165.227.249.122) Encapsulating Security Payload SPI: 0xd5773d39 Sequence: 1 Data (84 bytes) 0000 00 0c 29 89 f2 82 00 09 5b b0 f5 3d 08 00 45 00 ..).....[..=..E. 0010 00 70 d4 3f 00 00 1e 32 89 52 a5 e3 f9 88 a5 e3 .p.?...2.R...... 0020 f9 7a d5 77 3d 39 00 00 00 01 d2 ad 94 18 b2 b8 .z.w=9.......... 0030 e9 f8 80 77 53 e9 0d 4c c2 5d 79 c7 53 d5 f0 b3 ...wS..L.]y.S... 0040 12 f2 8b f0 6c e5 38 1f 1a bd 36 08 ad 3e da 52 ....l.8...6..>.R 0050 32 83 7f 6d 9b aa ac 01 e4 76 56 90 df 99 e2 51 2..m.....vV....Q 0060 a9 cc fb c3 c9 60 97 b9 64 48 21 0d 3a fb 98 33 .....`..dH!.:..3 0070 9b 34 28 58 8f dd 7d 6d 93 32 30 14 f4 b1 dd 5f .4(X..}m.20...._ 0080 82 7a .z Frame 14 (130 bytes on wire, 130 bytes captured) Arrival Time: Jun 30, 2005 11:23:24.825591000 Time delta from previous packet: 0.018415000 seconds Time since reference or first frame: 2.063340000 seconds Frame Number: 14 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:0c:29:89:f2:82, Dst: 00:09:5b:b0:f5:3d Destination: 00:09:5b:b0:f5:3d (00:09:5b:b0:f5:3d) Source: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Type: IP (0x0800) Frame check sequence: 0x2224f0ff (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.136 (165.227.249.136) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x008e (142) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x7c03 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.136 (165.227.249.136) Encapsulating Security Payload SPI: 0xd83d9bc8 Sequence: 2 Data (84 bytes) 0000 00 09 5b b0 f5 3d 00 0c 29 89 f2 82 08 00 45 00 ..[..=..).....E. 0010 00 70 00 8e 00 00 ff 32 7c 03 a5 e3 f9 7a a5 e3 .p.....2|....z.. 0020 f9 88 d8 3d 9b c8 00 00 00 02 63 4a 31 b8 cd 3f ...=......cJ1..? 0030 55 b9 4c 67 36 56 69 b4 39 75 cc 54 70 7f 5b 4d U.Lg6Vi.9u.Tp.[M 0040 43 0c fb 78 9f 6a 09 02 f3 80 55 44 fd b3 a8 93 C..x.j....UD.... 0050 4e d1 63 dc 7b 63 63 89 1d 85 fb 57 ca 69 62 03 N.c.{cc....W.ib. 0060 83 ea c1 b3 33 80 5c c4 00 aa 36 73 77 37 cc 79 ....3.\...6sw7.y 0070 83 64 b7 d5 74 fd 96 3a 83 ec a4 ef 66 6c 22 24 .d..t..:....fl"$ 0080 f0 ff .. Frame 15 (130 bytes on wire, 130 bytes captured) Arrival Time: Jun 30, 2005 11:23:24.826953000 Time delta from previous packet: 0.001362000 seconds Time since reference or first frame: 2.064702000 seconds Frame Number: 15 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:09:5b:b0:f5:3d, Dst: 00:0c:29:89:f2:82 Destination: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Source: 00:09:5b:b0:f5:3d (00:09:5b:b0:f5:3d) Type: IP (0x0800) Frame check sequence: 0xc1073fa6 (correct) Internet Protocol, Src Addr: 165.227.249.136 (165.227.249.136), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0xa52b (42283) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 30 Protocol: ESP (0x32) Header checksum: 0xb866 (correct) Source: 165.227.249.136 (165.227.249.136) Destination: 165.227.249.122 (165.227.249.122) Encapsulating Security Payload SPI: 0xd5773d39 Sequence: 2 Data (84 bytes) 0000 00 0c 29 89 f2 82 00 09 5b b0 f5 3d 08 00 45 00 ..).....[..=..E. 0010 00 70 a5 2b 00 00 1e 32 b8 66 a5 e3 f9 88 a5 e3 .p.+...2.f...... 0020 f9 7a d5 77 3d 39 00 00 00 02 21 0d 3a fb 98 33 .z.w=9....!.:..3 0030 9b 34 4d 07 e5 71 82 1d b1 29 ec b7 dc a6 de be .4M..q...)...... 0040 65 db e8 a8 38 38 4b b6 ee ab 8c 0f 27 d6 37 2a e...88K.....'.7* 0050 d7 89 42 c9 6a b0 3a 33 12 9b 4c 17 ee e7 13 2d ..B.j.:3..L....- 0060 e0 55 53 c1 67 e8 03 49 88 ae 82 2e 40 72 46 d7 .US.g..I....@rF. 0070 3d 0f 43 b0 81 ef 56 e8 29 32 07 91 f6 c2 c1 07 =.C...V.)2...... 0080 3f a6 ?. Frame 16 (130 bytes on wire, 130 bytes captured) Arrival Time: Jun 30, 2005 11:23:25.806382000 Time delta from previous packet: 0.979429000 seconds Time since reference or first frame: 3.044131000 seconds Frame Number: 16 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:0c:29:89:f2:82, Dst: 00:09:5b:b0:f5:3d Destination: 00:09:5b:b0:f5:3d (00:09:5b:b0:f5:3d) Source: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Type: IP (0x0800) Frame check sequence: 0x69dbc2e9 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.136 (165.227.249.136) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x008f (143) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x7c02 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.136 (165.227.249.136) Encapsulating Security Payload SPI: 0xd83d9bc8 Sequence: 3 Data (84 bytes) 0000 00 09 5b b0 f5 3d 00 0c 29 89 f2 82 08 00 45 00 ..[..=..).....E. 0010 00 70 00 8f 00 00 ff 32 7c 02 a5 e3 f9 7a a5 e3 .p.....2|....z.. 0020 f9 88 d8 3d 9b c8 00 00 00 03 26 ef f6 69 5c 0d ...=......&..i\. 0030 fa 25 87 15 76 b8 5b 3a da 20 47 b2 44 7c b0 a0 .%..v.[:. G.D|.. 0040 cd aa 34 25 80 2d 8c ee 03 3d eb 37 5b 3c 94 78 ..4%.-...=.7[<.x 0050 00 e7 53 71 18 ee 68 36 12 29 18 d0 dd f4 5f b4 ..Sq..h6.)...._. 0060 6e d2 3c 15 cd 99 d3 af 9f c7 44 ec a4 d8 85 31 n.<.......D....1 0070 a5 1b 2c 65 3a 0d f2 9d 8a a1 d2 65 74 77 69 db ..,e:......etwi. 0080 c2 e9 .. Frame 17 (130 bytes on wire, 130 bytes captured) Arrival Time: Jun 30, 2005 11:23:25.807680000 Time delta from previous packet: 0.001298000 seconds Time since reference or first frame: 3.045429000 seconds Frame Number: 17 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:09:5b:b0:f5:3d, Dst: 00:0c:29:89:f2:82 Destination: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Source: 00:09:5b:b0:f5:3d (00:09:5b:b0:f5:3d) Type: IP (0x0800) Frame check sequence: 0xe29a8bfc (correct) Internet Protocol, Src Addr: 165.227.249.136 (165.227.249.136), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0xbaf1 (47857) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 30 Protocol: ESP (0x32) Header checksum: 0xa2a0 (correct) Source: 165.227.249.136 (165.227.249.136) Destination: 165.227.249.122 (165.227.249.122) Encapsulating Security Payload SPI: 0xd5773d39 Sequence: 3 Data (84 bytes) 0000 00 0c 29 89 f2 82 00 09 5b b0 f5 3d 08 00 45 00 ..).....[..=..E. 0010 00 70 ba f1 00 00 1e 32 a2 a0 a5 e3 f9 88 a5 e3 .p.....2........ 0020 f9 7a d5 77 3d 39 00 00 00 03 82 2e 40 72 46 d7 .z.w=9......@rF. 0030 3d 0f c7 78 78 82 28 5c af 37 c6 16 aa d7 ba ad =..xx.(\.7...... 0040 c5 d6 d7 b6 7e 36 fe 24 35 ec e6 46 d6 00 2f 09 ....~6.$5..F../. 0050 7f 13 84 ed 18 50 71 08 b0 a2 10 6c 4c 0b e2 d4 .....Pq....lL... 0060 84 78 c5 ac 76 e1 fa dc c8 a8 1f a6 d5 7e 82 26 .x..v........~.& 0070 63 75 d2 90 1f 4d ec cb 02 2a fa b2 a0 0d e2 9a cu...M...*...... 0080 8b fc .. Frame 18 (130 bytes on wire, 130 bytes captured) Arrival Time: Jun 30, 2005 11:23:26.857660000 Time delta from previous packet: 1.049980000 seconds Time since reference or first frame: 4.095409000 seconds Frame Number: 18 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:0c:29:89:f2:82, Dst: 00:09:5b:b0:f5:3d Destination: 00:09:5b:b0:f5:3d (00:09:5b:b0:f5:3d) Source: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Type: IP (0x0800) Frame check sequence: 0xcb01bc04 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.136 (165.227.249.136) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0090 (144) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x7c01 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.136 (165.227.249.136) Encapsulating Security Payload SPI: 0xd83d9bc8 Sequence: 4 Data (84 bytes) 0000 00 09 5b b0 f5 3d 00 0c 29 89 f2 82 08 00 45 00 ..[..=..).....E. 0010 00 70 00 90 00 00 ff 32 7c 01 a5 e3 f9 7a a5 e3 .p.....2|....z.. 0020 f9 88 d8 3d 9b c8 00 00 00 04 8d a9 5c a4 ae cb ...=........\... 0030 b3 49 b4 8b 88 13 74 34 63 cb 63 e4 ae 22 ab 04 .I....t4c.c..".. 0040 1d e6 40 a0 6e e5 46 33 36 ac 7d 84 ff 61 4a cc ..@.n.F36.}..aJ. 0050 f2 cd b7 42 73 0e d3 ab 9a 29 a5 8f 46 a7 6f 64 ...Bs....)..F.od 0060 80 a8 a3 c3 8c 01 5b f7 3e 24 72 8d 4c f4 08 b7 ......[.>$r.L... 0070 a3 69 0d f9 05 37 40 7f c6 b2 6d 88 f2 35 cb 01 .i...7@...m..5.. 0080 bc 04 .. Frame 19 (130 bytes on wire, 130 bytes captured) Arrival Time: Jun 30, 2005 11:23:26.858901000 Time delta from previous packet: 0.001241000 seconds Time since reference or first frame: 4.096650000 seconds Frame Number: 19 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:09:5b:b0:f5:3d, Dst: 00:0c:29:89:f2:82 Destination: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Source: 00:09:5b:b0:f5:3d (00:09:5b:b0:f5:3d) Type: IP (0x0800) Frame check sequence: 0x2e909b9d (correct) Internet Protocol, Src Addr: 165.227.249.136 (165.227.249.136), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x41fc (16892) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 30 Protocol: ESP (0x32) Header checksum: 0x1b96 (correct) Source: 165.227.249.136 (165.227.249.136) Destination: 165.227.249.122 (165.227.249.122) Encapsulating Security Payload SPI: 0xd5773d39 Sequence: 4 Data (84 bytes) 0000 00 0c 29 89 f2 82 00 09 5b b0 f5 3d 08 00 45 00 ..).....[..=..E. 0010 00 70 41 fc 00 00 1e 32 1b 96 a5 e3 f9 88 a5 e3 .pA....2........ 0020 f9 7a d5 77 3d 39 00 00 00 04 1f a6 d5 7e 82 26 .z.w=9.......~.& 0030 63 75 b3 b3 22 c5 aa 63 f5 e0 85 61 e1 6b 67 da cu.."..c...a.kg. 0040 8c ec 65 5c 2b b0 09 3c a3 d0 e8 e4 74 1d db 84 ..e\+..<....t... 0050 4d f5 61 d8 31 da 77 a4 1b f8 e5 bd e8 fe bf 17 M.a.1.w......... 0060 0f f1 61 96 76 f4 4f 57 77 fc b4 4d 91 63 db 7d ..a.v.OWw..M.c.} 0070 20 ab fa 83 be ae a2 c8 81 08 74 97 4a 88 2e 90 .........t.J... 0080 9b 9d .. Frame 20 (330 bytes on wire, 330 bytes captured) Arrival Time: Jun 30, 2005 11:23:28.609921000 Time delta from previous packet: 1.751020000 seconds Time since reference or first frame: 5.847670000 seconds Frame Number: 20 Packet Length: 330 bytes Capture Length: 330 bytes Ethernet II, Src: 00:09:5b:b0:f5:3d, Dst: 00:0c:29:89:f2:82 Destination: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Source: 00:09:5b:b0:f5:3d (00:09:5b:b0:f5:3d) Type: IP (0x0800) Frame check sequence: 0x3a18eae6 (correct) Internet Protocol, Src Addr: 165.227.249.136 (165.227.249.136), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 312 Identification: 0x004a (74) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3aa1 (correct) Source: 165.227.249.136 (165.227.249.136) Destination: 165.227.249.122 (165.227.249.122) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 292 Checksum: 0x5c14 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xA605E616CD0386AD Responder cookie: 0x959BAC26332FAB5A Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xAEE299FF Length: 284 Encrypted payload (256 bytes) 0000 00 0c 29 89 f2 82 00 09 5b b0 f5 3d 08 00 45 00 ..).....[..=..E. 0010 01 38 00 4a 00 00 40 11 3a a1 a5 e3 f9 88 a5 e3 .8.J..@.:....... 0020 f9 7a 01 f4 01 f4 01 24 5c 14 a6 05 e6 16 cd 03 .z.....$\....... 0030 86 ad 95 9b ac 26 33 2f ab 5a 08 10 20 01 ae e2 .....&3/.Z.. ... 0040 99 ff 00 00 01 1c 93 1b eb 87 d8 76 65 25 73 50 ...........ve%sP 0050 e7 91 3d 95 8d af 90 79 42 97 28 57 5f 41 10 c4 ..=....yB.(W_A.. 0060 a2 73 81 51 ea ae 49 48 00 21 77 9a c5 6c 4a be .s.Q..IH.!w..lJ. 0070 05 d2 f7 58 c1 d7 4c d9 fe 38 0e ef d6 f3 b8 26 ...X..L..8.....& 0080 2c 56 91 81 bb c1 e3 3e d1 3f 50 7e 50 e2 35 84 ,V.....>.?P~P.5. 0090 25 8b c2 f6 be 47 b7 af 03 24 ed 04 db c5 64 e2 %....G...$....d. 00a0 fa 08 0e 93 25 98 25 6a 88 f6 95 22 7e 60 1a 9b ....%.%j..."~`.. 00b0 bf fa 4b b8 51 29 7c 1e 1f bc ea 35 30 05 d0 e9 ..K.Q)|....50... 00c0 a8 16 1e f1 d7 df 45 2b 8f e0 1e 36 5a e0 66 b9 ......E+...6Z.f. 00d0 f5 f8 7f 18 e2 db b0 4d 71 5f 03 a4 83 ee 44 a6 .......Mq_....D. 00e0 82 38 4f 9d b0 d5 a7 3e ac d5 0b 50 e5 ae 7e fb .8O....>...P..~. 00f0 5a eb 51 4f 35 02 9c 58 e9 99 1c f9 23 02 8e f3 Z.QO5..X....#... 0100 42 aa b0 e4 66 32 bd 0d 59 05 11 17 48 17 b9 91 B...f2..Y...H... 0110 a0 d2 b1 83 45 87 aa a6 17 6f e3 df 8d f2 d8 29 ....E....o.....) 0120 c1 59 0e a2 10 75 66 74 42 dc 30 18 68 ec 03 d9 .Y...uftB.0.h... 0130 c2 06 7f 80 2e d6 17 05 ab 30 7f 48 a9 36 0d 73 .........0.H.6.s 0140 ed 8d af e0 2a c3 3a 18 ea e6 ....*.:...