Frame 1 (178 bytes on wire, 178 bytes captured) Arrival Time: Oct 28, 2005 11:03:08.150153000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 178 bytes Capture Length: 178 bytes Ethernet II, Src: 00:0c:29:89:f2:82, Dst: 32:e6:b3:4b:ae:76 Destination: 32:e6:b3:4b:ae:76 (32:e6:b3:4b:ae:76) Source: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Type: IP (0x0800) Frame check sequence: 0x6764e2d6 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.138 (165.227.249.138) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 160 Identification: 0x001b (27) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb65 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.138 (165.227.249.138) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 140 Checksum: 0xd52b (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x8F804A40F6AE3297 Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 132 Security Association payload Next payload: Vendor ID (13) Length: 60 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 48 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 40 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): AES-CBC (7) Key-Length (14): Key-Length (128) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: NONE (0) Length: 44 Vendor ID: Check Point Check Point Product: VPN-1 Version: NG with Application Intelligence R55 0000 32 e6 b3 4b ae 76 00 0c 29 89 f2 82 08 00 45 00 2..K.v..).....E. 0010 00 a0 00 1b 40 00 40 11 fb 65 a5 e3 f9 7a a5 e3 ....@.@..e...z.. 0020 f9 8a 01 f4 01 f4 00 8c d5 2b 8f 80 4a 40 f6 ae .........+..J@.. 0030 32 97 00 00 00 00 00 00 00 00 01 10 02 00 00 00 2............... 0040 00 00 00 00 00 84 0d 00 00 3c 00 00 00 01 00 00 .........<...... 0050 00 01 00 00 00 30 01 01 00 01 00 00 00 28 01 01 .....0.......(.. 0060 00 00 80 01 00 07 80 0e 00 80 80 02 00 02 80 03 ................ 0070 00 01 80 04 00 02 80 0b 00 01 00 0c 00 04 00 00 ................ 0080 70 80 00 00 00 2c f4 ed 19 e0 c1 14 eb 51 6f aa p....,.......Qo. 0090 ac 0e e3 7d af 28 07 b4 38 1f 00 00 00 01 00 00 ...}.(..8....... 00a0 13 8d 42 c2 47 9a 00 00 00 00 18 00 00 00 67 64 ..B.G.........gd 00b0 e2 d6 .. Frame 2 (134 bytes on wire, 134 bytes captured) Arrival Time: Oct 28, 2005 11:03:08.151832000 Time delta from previous packet: 0.001679000 seconds Time since reference or first frame: 0.001679000 seconds Frame Number: 2 Packet Length: 134 bytes Capture Length: 134 bytes Ethernet II, Src: 32:e6:b3:4b:ae:76, Dst: 00:0c:29:89:f2:82 Destination: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Source: 32:e6:b3:4b:ae:76 (32:e6:b3:4b:ae:76) Type: IP (0x0800) Frame check sequence: 0xa034246d (correct) Internet Protocol, Src Addr: 165.227.249.138 (165.227.249.138), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 116 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfbac (correct) Source: 165.227.249.138 (165.227.249.138) Destination: 165.227.249.122 (165.227.249.122) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 96 Checksum: 0xba50 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x8F804A40F6AE3297 Responder cookie: 0x77664A81697E5C77 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 88 Security Association payload Next payload: NONE (0) Length: 60 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 48 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 40 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): AES-CBC (7) Key-Length (14): Key-Length (128) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) 0000 00 0c 29 89 f2 82 32 e6 b3 4b ae 76 08 00 45 00 ..)...2..K.v..E. 0010 00 74 00 00 40 00 40 11 fb ac a5 e3 f9 8a a5 e3 .t..@.@......... 0020 f9 7a 01 f4 01 f4 00 60 ba 50 8f 80 4a 40 f6 ae .z.....`.P..J@.. 0030 32 97 77 66 4a 81 69 7e 5c 77 01 10 02 00 00 00 2.wfJ.i~\w...... 0040 00 00 00 00 00 58 00 00 00 3c 00 00 00 01 00 00 .....X...<...... 0050 00 01 00 00 00 30 01 01 00 01 00 00 00 28 01 01 .....0.......(.. 0060 00 00 80 01 00 07 80 0e 00 80 80 02 00 02 80 03 ................ 0070 00 01 80 04 00 02 80 0b 00 01 00 0c 00 04 00 00 ................ 0080 70 80 a0 34 24 6d p..4$m Frame 3 (230 bytes on wire, 230 bytes captured) Arrival Time: Oct 28, 2005 11:03:08.160346000 Time delta from previous packet: 0.008514000 seconds Time since reference or first frame: 0.010193000 seconds Frame Number: 3 Packet Length: 230 bytes Capture Length: 230 bytes Ethernet II, Src: 00:0c:29:89:f2:82, Dst: 32:e6:b3:4b:ae:76 Destination: 32:e6:b3:4b:ae:76 (32:e6:b3:4b:ae:76) Source: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Type: IP (0x0800) Frame check sequence: 0x803c04fd (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.138 (165.227.249.138) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 212 Identification: 0x001c (28) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb30 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.138 (165.227.249.138) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 192 Checksum: 0xd10f (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x8F804A40F6AE3297 Responder cookie: 0x77664A81697E5C77 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 184 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 24 Nonce Data 0000 32 e6 b3 4b ae 76 00 0c 29 89 f2 82 08 00 45 00 2..K.v..).....E. 0010 00 d4 00 1c 40 00 40 11 fb 30 a5 e3 f9 7a a5 e3 ....@.@..0...z.. 0020 f9 8a 01 f4 01 f4 00 c0 d1 0f 8f 80 4a 40 f6 ae ............J@.. 0030 32 97 77 66 4a 81 69 7e 5c 77 04 10 02 00 00 00 2.wfJ.i~\w...... 0040 00 00 00 00 00 b8 0a 00 00 84 21 80 c2 2e 60 be ..........!...`. 0050 71 5e 6e 62 f4 4d 90 2e 70 a2 2d 55 69 d2 a5 81 q^nb.M..p.-Ui... 0060 b6 4f b5 0c 4a 0e 2b 7c d4 39 3c 69 27 9b 30 cd .O..J.+|.9<.J{- 0090 68 d3 ce 9b 87 a9 c4 44 dd b5 c4 a3 09 d6 85 2e h......D........ 00a0 e3 0b 47 43 ff 74 d3 4b 32 a7 3b 9c 51 26 c8 d2 ..GC.t.K2.;.Q&.. 00b0 7c b8 90 07 56 bb 90 4e b4 a6 ba a8 f4 2e 18 3a |...V..N.......: 00c0 99 d3 8b 3c 1c 59 46 2d a1 df 00 00 00 18 5d 3d ...<.YF-......]= 00d0 c9 76 72 89 da e1 d2 3b e9 5d 5e 86 0d e3 23 bf .vr....;.]^...#. 00e0 dc 34 80 3c 04 fd .4.<.. Frame 4 (226 bytes on wire, 226 bytes captured) Arrival Time: Oct 28, 2005 11:03:08.275853000 Time delta from previous packet: 0.115507000 seconds Time since reference or first frame: 0.125700000 seconds Frame Number: 4 Packet Length: 226 bytes Capture Length: 226 bytes Ethernet II, Src: 32:e6:b3:4b:ae:76, Dst: 00:0c:29:89:f2:82 Destination: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Source: 32:e6:b3:4b:ae:76 (32:e6:b3:4b:ae:76) Type: IP (0x0800) Frame check sequence: 0x326d944d (correct) Internet Protocol, Src Addr: 165.227.249.138 (165.227.249.138), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 208 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb50 (correct) Source: 165.227.249.138 (165.227.249.138) Destination: 165.227.249.122 (165.227.249.122) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 188 Checksum: 0x2d2c (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x8F804A40F6AE3297 Responder cookie: 0x77664A81697E5C77 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 180 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 20 Nonce Data 0000 00 0c 29 89 f2 82 32 e6 b3 4b ae 76 08 00 45 00 ..)...2..K.v..E. 0010 00 d0 00 00 40 00 40 11 fb 50 a5 e3 f9 8a a5 e3 ....@.@..P...... 0020 f9 7a 01 f4 01 f4 00 bc 2d 2c 8f 80 4a 40 f6 ae .z......-,..J@.. 0030 32 97 77 66 4a 81 69 7e 5c 77 04 10 02 00 00 00 2.wfJ.i~\w...... 0040 00 00 00 00 00 b4 0a 00 00 84 df 3e 1c ec 75 fd ...........>..u. 0050 aa b5 25 4c 54 e6 c5 97 b6 33 77 97 f9 f8 fb f7 ..%LT....3w..... 0060 52 72 af ea 72 8e 1d 72 cc cc 50 ce 46 d0 78 ba Rr..r..r..P.F.x. 0070 5a fe 35 65 54 0f 64 fe b5 2b a3 f1 5e cd 45 ce Z.5eT.d..+..^.E. 0080 7a a1 10 89 43 71 4d e3 b3 72 19 66 4d 88 20 d5 z...CqM..r.fM. . 0090 5c 3e 2f 73 cc 04 88 6f 29 7c 0d 64 9e e3 23 36 \>/s...o)|.d..#6 00a0 c2 b0 c2 b5 b3 8c f8 4b 3a fb f8 d1 bf 15 d5 5a .......K:......Z 00b0 6b 6b e9 a6 78 4e 23 97 08 49 96 8c 25 d5 a7 69 kk..xN#..I..%..i 00c0 f2 52 68 99 ab b4 2a 05 86 f5 00 00 00 14 18 7e .Rh...*........~ 00d0 f4 83 95 d6 0c 1e 3f 1d 32 a3 f8 3a 63 56 32 6d ......?.2..:cV2m 00e0 94 4d .M Frame 5 (122 bytes on wire, 122 bytes captured) Arrival Time: Oct 28, 2005 11:03:08.284708000 Time delta from previous packet: 0.008855000 seconds Time since reference or first frame: 0.134555000 seconds Frame Number: 5 Packet Length: 122 bytes Capture Length: 122 bytes Ethernet II, Src: 00:0c:29:89:f2:82, Dst: 32:e6:b3:4b:ae:76 Destination: 32:e6:b3:4b:ae:76 (32:e6:b3:4b:ae:76) Source: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Type: IP (0x0800) Frame check sequence: 0xb13a3e06 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.138 (165.227.249.138) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 104 Identification: 0x001d (29) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb9b (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.138 (165.227.249.138) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 84 Checksum: 0xd6e7 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x8F804A40F6AE3297 Responder cookie: 0x77664A81697E5C77 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 76 Encrypted payload (48 bytes) 0000 32 e6 b3 4b ae 76 00 0c 29 89 f2 82 08 00 45 00 2..K.v..).....E. 0010 00 68 00 1d 40 00 40 11 fb 9b a5 e3 f9 7a a5 e3 .h..@.@......z.. 0020 f9 8a 01 f4 01 f4 00 54 d6 e7 8f 80 4a 40 f6 ae .......T....J@.. 0030 32 97 77 66 4a 81 69 7e 5c 77 05 10 02 01 00 00 2.wfJ.i~\w...... 0040 00 00 00 00 00 4c 91 21 c4 d2 18 df 51 e8 5a 85 .....L.!....Q.Z. 0050 ed 12 36 bd 0f 0a f0 ef db e5 11 01 b8 39 84 82 ..6..........9.. 0060 fd be 9c cc 54 9f e8 9f 08 dd b9 1d 12 e0 60 00 ....T.........`. 0070 51 1d ea cf a2 26 b1 3a 3e 06 Q....&.:>. Frame 6 (122 bytes on wire, 122 bytes captured) Arrival Time: Oct 28, 2005 11:03:08.285972000 Time delta from previous packet: 0.001264000 seconds Time since reference or first frame: 0.135819000 seconds Frame Number: 6 Packet Length: 122 bytes Capture Length: 122 bytes Ethernet II, Src: 32:e6:b3:4b:ae:76, Dst: 00:0c:29:89:f2:82 Destination: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Source: 32:e6:b3:4b:ae:76 (32:e6:b3:4b:ae:76) Type: IP (0x0800) Frame check sequence: 0x6690fd2e (correct) Internet Protocol, Src Addr: 165.227.249.138 (165.227.249.138), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 104 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfbb8 (correct) Source: 165.227.249.138 (165.227.249.138) Destination: 165.227.249.122 (165.227.249.122) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 84 Checksum: 0xf26e (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x8F804A40F6AE3297 Responder cookie: 0x77664A81697E5C77 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 76 Encrypted payload (48 bytes) 0000 00 0c 29 89 f2 82 32 e6 b3 4b ae 76 08 00 45 00 ..)...2..K.v..E. 0010 00 68 00 00 40 00 40 11 fb b8 a5 e3 f9 8a a5 e3 .h..@.@......... 0020 f9 7a 01 f4 01 f4 00 54 f2 6e 8f 80 4a 40 f6 ae .z.....T.n..J@.. 0030 32 97 77 66 4a 81 69 7e 5c 77 05 10 02 01 00 00 2.wfJ.i~\w...... 0040 00 00 00 00 00 4c c0 7b 9e e2 14 de 28 4b bf 67 .....L.{....(K.g 0050 2a b7 93 fe 35 69 95 9d 69 66 d6 34 c1 88 04 49 *...5i..if.4...I 0060 7a 76 90 7a 97 40 20 3e 48 33 50 33 5d 54 5e 82 zv.z.@ >H3P3]T^. 0070 bd c6 9b 5b dc f8 66 90 fd 2e ...[..f... Frame 7 (362 bytes on wire, 362 bytes captured) Arrival Time: Oct 28, 2005 11:03:08.297861000 Time delta from previous packet: 0.011889000 seconds Time since reference or first frame: 0.147708000 seconds Frame Number: 7 Packet Length: 362 bytes Capture Length: 362 bytes Ethernet II, Src: 00:0c:29:89:f2:82, Dst: 32:e6:b3:4b:ae:76 Destination: 32:e6:b3:4b:ae:76 (32:e6:b3:4b:ae:76) Source: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Type: IP (0x0800) Frame check sequence: 0x61fc1eb8 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.138 (165.227.249.138) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 344 Identification: 0x001e (30) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfaaa (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.138 (165.227.249.138) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 324 Checksum: 0xb45f (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x8F804A40F6AE3297 Responder cookie: 0x77664A81697E5C77 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xB3979FD3 Length: 316 Encrypted payload (288 bytes) 0000 32 e6 b3 4b ae 76 00 0c 29 89 f2 82 08 00 45 00 2..K.v..).....E. 0010 01 58 00 1e 40 00 40 11 fa aa a5 e3 f9 7a a5 e3 .X..@.@......z.. 0020 f9 8a 01 f4 01 f4 01 44 b4 5f 8f 80 4a 40 f6 ae .......D._..J@.. 0030 32 97 77 66 4a 81 69 7e 5c 77 08 10 20 01 b3 97 2.wfJ.i~\w.. ... 0040 9f d3 00 00 01 3c e3 bb 19 51 b4 e8 73 93 e9 0b .....<...Q..s... 0050 98 7e 81 a0 42 7e 42 e0 ea 60 7e ff 7f 00 34 59 .~..B~B..`~...4Y 0060 f9 1e df 3b 55 af 37 5f 3f b2 c6 dc b5 af 59 1b ...;U.7_?.....Y. 0070 26 c3 a3 fe 0e 8b ae e5 85 ac e4 14 8d 22 b7 ee &............".. 0080 72 16 ba e2 bf 14 1c 79 d7 38 cf f2 ba 8d 09 dd r......y.8...... 0090 a0 46 f4 d8 43 78 af 3d c4 9b 25 37 de d3 fa d1 .F..Cx.=..%7.... 00a0 4e f4 b9 e7 ba 17 3d cf 2c 4d a4 a7 a6 78 df a9 N.....=.,M...x.. 00b0 55 3f 43 3b 5b ec be c4 54 88 df d0 98 00 5f d3 U?C;[...T....._. 00c0 b5 40 68 f7 f6 90 a6 e1 f3 c5 52 7f 01 5c cc 64 .@h.......R..\.d 00d0 fa 3a 39 91 fb 43 14 3f 56 21 a6 e3 d0 8b 5a c0 .:9..C.?V!....Z. 00e0 cf 5e 32 04 3d ca fc 94 24 3f 23 2a c1 0c cd 7c .^2.=...$?#*...| 00f0 1a 90 c4 73 66 e2 2f ae 98 d9 da 28 24 89 a2 ee ...sf./....($... 0100 f8 64 88 0b b1 fe 02 ef 88 05 9f 50 cf 51 56 34 .d.........P.QV4 0110 f2 3e d6 90 6c a2 46 95 07 47 56 e3 26 3c 5a 72 .>..l.F..GV.& Frame 10 (106 bytes on wire, 106 bytes captured) Arrival Time: Oct 28, 2005 11:03:08.525570000 Time delta from previous packet: 0.100687000 seconds Time since reference or first frame: 0.375417000 seconds Frame Number: 10 Packet Length: 106 bytes Capture Length: 106 bytes Ethernet II, Src: 00:0c:29:89:f2:82, Dst: 32:e6:b3:4b:ae:76 Destination: 32:e6:b3:4b:ae:76 (32:e6:b3:4b:ae:76) Source: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Type: IP (0x0800) Frame check sequence: 0x7b0ed177 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.138 (165.227.249.138) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 88 Identification: 0x0020 (32) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfba8 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.138 (165.227.249.138) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 68 Checksum: 0x8580 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x8F804A40F6AE3297 Responder cookie: 0x77664A81697E5C77 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xB3979FD3 Length: 60 Encrypted payload (32 bytes) 0000 32 e6 b3 4b ae 76 00 0c 29 89 f2 82 08 00 45 00 2..K.v..).....E. 0010 00 58 00 20 40 00 40 11 fb a8 a5 e3 f9 7a a5 e3 .X. @.@......z.. 0020 f9 8a 01 f4 01 f4 00 44 85 80 8f 80 4a 40 f6 ae .......D....J@.. 0030 32 97 77 66 4a 81 69 7e 5c 77 08 10 20 01 b3 97 2.wfJ.i~\w.. ... 0040 9f d3 00 00 00 3c 52 bf a9 45 4b bc 9b cf 33 4e ..... 0050 f1 02 82 f9 9a d3 07 42 44 42 c2 d7 fc 0f 26 f6 .......BDB....&. 0060 d7 85 83 dc 74 d0 99 86 7b fb 98 72 07 60 4e 3b ....t...{..r.`N; 0070 07 66 2b 08 95 7c e0 35 44 a9 45 59 61 d0 7d a4 .f+..|.5D.EYa.}. 0080 af 91 4e 63 e9 bb e5 63 81 d6 ..Nc...c.. Frame 13 (138 bytes on wire, 138 bytes captured) Arrival Time: Oct 28, 2005 11:03:08.813109000 Time delta from previous packet: 0.052959000 seconds Time since reference or first frame: 0.662956000 seconds Frame Number: 13 Packet Length: 138 bytes Capture Length: 138 bytes Ethernet II, Src: 32:e6:b3:4b:ae:76, Dst: 00:0c:29:89:f2:82 Destination: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Source: 32:e6:b3:4b:ae:76 (32:e6:b3:4b:ae:76) Type: IP (0x0800) Frame check sequence: 0x617536db (correct) Internet Protocol, Src Addr: 165.227.249.138 (165.227.249.138), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0xa61e (42526) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x9569 (correct) Source: 165.227.249.138 (165.227.249.138) Destination: 165.227.249.122 (165.227.249.122) Encapsulating Security Payload SPI: 0x6906f044 Sequence: 1 Data (92 bytes) 0000 00 0c 29 89 f2 82 32 e6 b3 4b ae 76 08 00 45 00 ..)...2..K.v..E. 0010 00 78 a6 1e 00 00 40 32 95 69 a5 e3 f9 8a a5 e3 .x....@2.i...... 0020 f9 7a 69 06 f0 44 00 00 00 01 2a 2b 2c 2d 2e 2f .zi..D....*+,-./ 0030 30 31 32 33 34 35 36 37 38 39 0f d3 0e 59 71 de 0123456789...Yq. 0040 80 6c 88 16 ef 6d c5 31 5c ed ba 79 c7 9d 49 dc .l...m.1\..y..I. 0050 4d eb 4d d2 69 b9 47 27 08 34 9b fa 74 59 4c 50 M.M.i.G'.4..tYLP 0060 c4 ff 5d 48 a8 0f 3f eb eb 68 e0 ec 0b ce fa fb ..]H..?..h...... 0070 8d f9 ac cb b1 5e 02 3a 17 c6 5c 72 c3 23 59 a6 .....^.:..\r.#Y. 0080 bf 14 e5 d9 3c 4a 61 75 36 db ....FQ.*....Qu.9s 0070 cc 4a 79 2b b7 30 d4 a6 e9 4b 0d 48 23 8f f7 d6 .Jy+.0...K.H#... 0080 2b ee 46 40 12 f0 d0 95 ab 87 +.F@...... Frame 19 (138 bytes on wire, 138 bytes captured) Arrival Time: Oct 28, 2005 11:03:11.093930000 Time delta from previous packet: 0.000895000 seconds Time since reference or first frame: 2.943777000 seconds Frame Number: 19 Packet Length: 138 bytes Capture Length: 138 bytes Ethernet II, Src: 32:e6:b3:4b:ae:76, Dst: 00:0c:29:89:f2:82 Destination: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Source: 32:e6:b3:4b:ae:76 (32:e6:b3:4b:ae:76) Type: IP (0x0800) Frame check sequence: 0xf27a687c (correct) Internet Protocol, Src Addr: 165.227.249.138 (165.227.249.138), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0xa621 (42529) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x9566 (correct) Source: 165.227.249.138 (165.227.249.138) Destination: 165.227.249.122 (165.227.249.122) Encapsulating Security Payload SPI: 0x6906f044 Sequence: 4 Data (92 bytes) 0000 00 0c 29 89 f2 82 32 e6 b3 4b ae 76 08 00 45 00 ..)...2..K.v..E. 0010 00 78 a6 21 00 00 40 32 95 66 a5 e3 f9 8a a5 e3 .x.!..@2.f...... 0020 f9 7a 69 06 f0 44 00 00 00 04 0f 10 11 12 13 14 .zi..D.......... 0030 15 16 17 18 19 1a 1b 1c 1d 1e 80 03 1d e5 16 45 ...............E 0040 b5 67 7d 11 7c b4 f5 ed 31 6f 57 df 7a b3 e1 6d .g}.|...1oW.z..m 0050 55 14 5a 8d ef 60 4e 35 76 85 1f 25 bc 9b b8 05 U.Z..`N5v..%.... 0060 1a c4 c7 fa 19 49 94 0c 5c 2b b3 1c af 5e 20 aa .....I..\+...^ . 0070 16 dc c7 70 54 04 9f 10 f6 59 96 60 90 14 0a 0f ...pT....Y.`.... 0080 e4 98 d4 e4 43 98 f2 7a 68 7c ....C..zh|