Frame 1 (174 bytes on wire, 174 bytes captured) Arrival Time: Mar 17, 2004 12:54:18.633996000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 174 bytes Capture Length: 174 bytes Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:d0:cf:01:f5:33 Destination: 00:d0:cf:01:f5:33 (00:d0:cf:01:f5:33) Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Type: IP (0x0800) Frame check sequence: 0xce78271f (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.139 (165.227.249.139) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 156 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb83 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.139 (165.227.249.139) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 136 Checksum: 0xcbd6 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x3C13B623A7177D92 Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 128 Security Association payload Next payload: Vendor ID (13) Length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 44 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 36 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: NONE (0) Length: 44 Vendor ID: Check Point Check Point Product: VPN-1 Version: NG with Application Intelligence 0000 00 d0 cf 01 f5 33 00 0c 29 fc 0c 9f 08 00 45 00 .....3..).....E. 0010 00 9c 00 00 40 00 40 11 fb 83 a5 e3 f9 7a a5 e3 ....@.@......z.. 0020 f9 8b 01 f4 01 f4 00 88 cb d6 3c 13 b6 23 a7 17 ..........<..#.. 0030 7d 92 00 00 00 00 00 00 00 00 01 10 02 00 00 00 }............... 0040 00 00 00 00 00 80 0d 00 00 38 00 00 00 01 00 00 .........8...... 0050 00 01 00 00 00 2c 01 01 00 01 00 00 00 24 01 01 .....,.......$.. 0060 00 00 80 01 00 05 80 02 00 02 80 03 00 01 80 04 ................ 0070 00 02 80 0b 00 01 00 0c 00 04 00 00 70 80 00 00 ............p... 0080 00 2c f4 ed 19 e0 c1 14 eb 51 6f aa ac 0e e3 7d .,.......Qo....} 0090 af 28 07 b4 38 1f 00 00 00 01 00 00 13 8c 00 00 .(..8........... 00a0 00 00 00 00 00 00 18 80 00 00 ce 78 27 1f ...........x'. Frame 2 (150 bytes on wire, 150 bytes captured) Arrival Time: Mar 17, 2004 12:54:18.637831000 Time delta from previous packet: 0.003835000 seconds Time since reference or first frame: 0.003835000 seconds Frame Number: 2 Packet Length: 150 bytes Capture Length: 150 bytes Ethernet II, Src: 00:d0:cf:01:f5:33, Dst: 00:0c:29:fc:0c:9f Destination: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Source: 00:d0:cf:01:f5:33 (00:d0:cf:01:f5:33) Type: IP (0x0800) Frame check sequence: 0x5a6bf252 (correct) Internet Protocol, Src Addr: 165.227.249.139 (165.227.249.139), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 132 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb9b (correct) Source: 165.227.249.139 (165.227.249.139) Destination: 165.227.249.122 (165.227.249.122) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 112 Checksum: 0x7aee (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x3C13B623A7177D92 Responder cookie: 0xD16EC245DA805C63 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 104 Security Association payload Next payload: Vendor ID (13) Length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 44 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 36 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: draft-ietf-ipsec-dpd-00.txt 0000 00 0c 29 fc 0c 9f 00 d0 cf 01 f5 33 08 00 45 00 ..)........3..E. 0010 00 84 00 00 40 00 40 11 fb 9b a5 e3 f9 8b a5 e3 ....@.@......... 0020 f9 7a 01 f4 01 f4 00 70 7a ee 3c 13 b6 23 a7 17 .z.....pz.<..#.. 0030 7d 92 d1 6e c2 45 da 80 5c 63 01 10 02 00 00 00 }..n.E..\c...... 0040 00 00 00 00 00 68 0d 00 00 38 00 00 00 01 00 00 .....h...8...... 0050 00 01 00 00 00 2c 01 01 00 01 00 00 00 24 01 01 .....,.......$.. 0060 00 00 80 01 00 05 80 02 00 02 80 03 00 01 80 04 ................ 0070 00 02 80 0b 00 01 00 0c 00 04 00 00 70 80 00 00 ............p... 0080 00 14 af ca d7 13 68 a1 f1 c9 6b 86 96 fc 77 57 ......h...k...wW 0090 01 00 5a 6b f2 52 ..Zk.R Frame 3 (230 bytes on wire, 230 bytes captured) Arrival Time: Mar 17, 2004 12:54:18.655694000 Time delta from previous packet: 0.017863000 seconds Time since reference or first frame: 0.021698000 seconds Frame Number: 3 Packet Length: 230 bytes Capture Length: 230 bytes Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:d0:cf:01:f5:33 Destination: 00:d0:cf:01:f5:33 (00:d0:cf:01:f5:33) Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Type: IP (0x0800) Frame check sequence: 0x22c75b5f (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.139 (165.227.249.139) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 212 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb4b (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.139 (165.227.249.139) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 192 Checksum: 0x0041 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x3C13B623A7177D92 Responder cookie: 0xD16EC245DA805C63 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 184 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 24 Nonce Data 0000 00 d0 cf 01 f5 33 00 0c 29 fc 0c 9f 08 00 45 00 .....3..).....E. 0010 00 d4 00 00 40 00 40 11 fb 4b a5 e3 f9 7a a5 e3 ....@.@..K...z.. 0020 f9 8b 01 f4 01 f4 00 c0 00 41 3c 13 b6 23 a7 17 .........A<..#.. 0030 7d 92 d1 6e c2 45 da 80 5c 63 04 10 02 00 00 00 }..n.E..\c...... 0040 00 00 00 00 00 b8 0a 00 00 84 a8 60 9b e5 63 ba ...........`..c. 0050 0f 12 26 5c 84 ec 39 f2 48 c3 a3 63 af f6 9a 1c ..&\..9.H..c.... 0060 66 df 62 51 01 f6 60 f8 41 73 4b a7 e6 4e d1 96 f.bQ..`.AsK..N.. 0070 77 e3 36 87 4c 65 9b 0d df 88 57 d3 08 80 3b 84 w.6.Le....W...;. 0080 7f 2b 27 9b cf 81 7d 3e be 56 ab 3d a3 3b 29 8b .+'...}>.V.=.;). 0090 2f 41 41 d9 a6 8e 47 37 c9 5c 06 f9 c6 b1 3e 3c /AA...G7.\....>< 00a0 f9 06 77 24 af 30 a1 2f 9d 8c a8 fb fc 64 d0 1a ..w$.0./.....d.. 00b0 5f 5f 2f 3c a1 33 80 f3 04 2f 63 45 91 08 1c 15 __/<.3.../cE.... 00c0 6d f7 08 0f da 6f 64 fc 41 16 00 00 00 18 50 9a m....od.A.....P. 00d0 56 df b6 6f de 09 6d ff 5c 91 20 a5 77 e1 1a de V..o..m.\. .w... 00e0 cc 53 22 c7 5b 5f .S".[_ Frame 4 (226 bytes on wire, 226 bytes captured) Arrival Time: Mar 17, 2004 12:54:18.955440000 Time delta from previous packet: 0.299746000 seconds Time since reference or first frame: 0.321444000 seconds Frame Number: 4 Packet Length: 226 bytes Capture Length: 226 bytes Ethernet II, Src: 00:d0:cf:01:f5:33, Dst: 00:0c:29:fc:0c:9f Destination: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Source: 00:d0:cf:01:f5:33 (00:d0:cf:01:f5:33) Type: IP (0x0800) Frame check sequence: 0xb61b42bd (correct) Internet Protocol, Src Addr: 165.227.249.139 (165.227.249.139), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 208 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb4f (correct) Source: 165.227.249.139 (165.227.249.139) Destination: 165.227.249.122 (165.227.249.122) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 188 Checksum: 0xda64 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x3C13B623A7177D92 Responder cookie: 0xD16EC245DA805C63 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 180 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 20 Nonce Data 0000 00 0c 29 fc 0c 9f 00 d0 cf 01 f5 33 08 00 45 00 ..)........3..E. 0010 00 d0 00 00 40 00 40 11 fb 4f a5 e3 f9 8b a5 e3 ....@.@..O...... 0020 f9 7a 01 f4 01 f4 00 bc da 64 3c 13 b6 23 a7 17 .z.......d<..#.. 0030 7d 92 d1 6e c2 45 da 80 5c 63 04 10 02 00 00 00 }..n.E..\c...... 0040 00 00 00 00 00 b4 0a 00 00 84 75 7e d2 98 07 5c ..........u~...\ 0050 f3 78 b2 23 d4 f1 18 4f ed e2 de df 6d 26 37 bd .x.#...O....m&7. 0060 3e 7d 65 46 da 32 61 38 22 0d d5 2b f4 7f 21 c8 >}eF.2a8"..+..!. 0070 76 77 07 55 8f 73 17 7d 5d 37 d4 19 a3 1d 72 48 vw.U.s.}]7....rH 0080 95 a0 a5 a7 52 ea 9d f4 2a 16 e8 56 2b 9b 1f 6e ....R...*..V+..n 0090 c3 43 d7 cf a5 b8 c4 19 c9 09 31 ab 7e fa 87 e0 .C........1.~... 00a0 d6 09 50 35 64 1d 39 d7 0a f1 88 43 06 fd 21 10 ..P5d.9....C..!. 00b0 ba 6e de a9 94 49 e8 56 dc 3e 3f 8f 42 ae 4c 65 .n...I.V.>?.B.Le 00c0 0e ce a6 b8 d4 f8 d4 c3 f8 21 00 00 00 14 a9 ca .........!...... 00d0 bc 59 29 ee c0 71 9c ae db d9 bb 29 96 aa b6 1b .Y)..q.....).... 00e0 42 bd B. Frame 5 (114 bytes on wire, 114 bytes captured) Arrival Time: Mar 17, 2004 12:54:18.966370000 Time delta from previous packet: 0.010930000 seconds Time since reference or first frame: 0.332374000 seconds Frame Number: 5 Packet Length: 114 bytes Capture Length: 114 bytes Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:d0:cf:01:f5:33 Destination: 00:d0:cf:01:f5:33 (00:d0:cf:01:f5:33) Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Type: IP (0x0800) Frame check sequence: 0x2bb2a3e8 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.139 (165.227.249.139) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfbbf (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.139 (165.227.249.139) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 76 Checksum: 0x4029 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x3C13B623A7177D92 Responder cookie: 0xD16EC245DA805C63 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 68 Encrypted payload (40 bytes) 0000 00 d0 cf 01 f5 33 00 0c 29 fc 0c 9f 08 00 45 00 .....3..).....E. 0010 00 60 00 00 40 00 40 11 fb bf a5 e3 f9 7a a5 e3 .`..@.@......z.. 0020 f9 8b 01 f4 01 f4 00 4c 40 29 3c 13 b6 23 a7 17 .......L@)<..#.. 0030 7d 92 d1 6e c2 45 da 80 5c 63 05 10 02 01 00 00 }..n.E..\c...... 0040 00 00 00 00 00 44 95 09 b5 47 be 46 5d 9a 90 71 .....D...G.F]..q 0050 c6 c8 92 ef a5 45 16 c3 e6 16 f7 f2 17 ff a8 87 .....E.......... 0060 0b 8e 92 41 28 a2 13 8d bc 2f 88 22 ca 61 2b b2 ...A(..../.".a+. 0070 a3 e8 .. Frame 6 (114 bytes on wire, 114 bytes captured) Arrival Time: Mar 17, 2004 12:54:18.968770000 Time delta from previous packet: 0.002400000 seconds Time since reference or first frame: 0.334774000 seconds Frame Number: 6 Packet Length: 114 bytes Capture Length: 114 bytes Ethernet II, Src: 00:d0:cf:01:f5:33, Dst: 00:0c:29:fc:0c:9f Destination: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Source: 00:d0:cf:01:f5:33 (00:d0:cf:01:f5:33) Type: IP (0x0800) Frame check sequence: 0xb297cda2 (correct) Internet Protocol, Src Addr: 165.227.249.139 (165.227.249.139), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfbbf (correct) Source: 165.227.249.139 (165.227.249.139) Destination: 165.227.249.122 (165.227.249.122) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 76 Checksum: 0x41f0 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x3C13B623A7177D92 Responder cookie: 0xD16EC245DA805C63 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 68 Encrypted payload (40 bytes) 0000 00 0c 29 fc 0c 9f 00 d0 cf 01 f5 33 08 00 45 00 ..)........3..E. 0010 00 60 00 00 40 00 40 11 fb bf a5 e3 f9 8b a5 e3 .`..@.@......... 0020 f9 7a 01 f4 01 f4 00 4c 41 f0 3c 13 b6 23 a7 17 .z.....LA.<..#.. 0030 7d 92 d1 6e c2 45 da 80 5c 63 05 10 02 01 00 00 }..n.E..\c...... 0040 00 00 00 00 00 44 a9 2d 32 6c 09 6e db da 85 0c .....D.-2l.n.... 0050 2e 1c e1 e8 2c 5d 09 0e 6b 90 e3 ba 9d e0 37 ab ....,]..k.....7. 0060 48 1c 7e f6 75 57 de 9a 11 04 3d 59 78 48 b2 97 H.~.uW....=YxH.. 0070 cd a2 .. Frame 7 (346 bytes on wire, 346 bytes captured) Arrival Time: Mar 17, 2004 12:54:18.990908000 Time delta from previous packet: 0.022138000 seconds Time since reference or first frame: 0.356912000 seconds Frame Number: 7 Packet Length: 346 bytes Capture Length: 346 bytes Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:d0:cf:01:f5:33 Destination: 00:d0:cf:01:f5:33 (00:d0:cf:01:f5:33) Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Type: IP (0x0800) Frame check sequence: 0xc6b6d612 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.139 (165.227.249.139) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 328 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfad7 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.139 (165.227.249.139) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 308 Checksum: 0x6b36 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x3C13B623A7177D92 Responder cookie: 0xD16EC245DA805C63 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x1E972BD3 Length: 300 Encrypted payload (272 bytes) 0000 00 d0 cf 01 f5 33 00 0c 29 fc 0c 9f 08 00 45 00 .....3..).....E. 0010 01 48 00 00 40 00 40 11 fa d7 a5 e3 f9 7a a5 e3 .H..@.@......z.. 0020 f9 8b 01 f4 01 f4 01 34 6b 36 3c 13 b6 23 a7 17 .......4k6<..#.. 0030 7d 92 d1 6e c2 45 da 80 5c 63 08 10 20 01 1e 97 }..n.E..\c.. ... 0040 2b d3 00 00 01 2c d5 0e c5 28 dc 6a 55 6a e1 50 +....,...(.jUj.P 0050 d1 e2 70 e1 a8 41 87 2f 5e dc 2e 12 d8 0c c4 9d ..p..A./^....... 0060 22 07 d9 fc 47 e4 bc f5 79 b6 f5 b0 1d 7d c5 51 "...G...y....}.Q 0070 0c d5 5a d2 f4 d5 41 fe 77 8c 3c 81 1f a4 f6 a1 ..Z...A.w.<..... 0080 3d 37 58 7e 86 b0 44 68 8c e8 83 7a 74 57 be 86 =7X~..Dh...ztW.. 0090 61 09 06 be a3 79 7b 1a a5 82 f5 88 a6 89 2c cb a....y{.......,. 00a0 8f b6 c8 9a c7 56 aa f4 71 75 0f e2 29 74 5c 49 .....V..qu..)t\I 00b0 b3 9f c3 86 c4 08 08 21 12 c9 3a 83 ff e6 06 cb .......!..:..... 00c0 6f ca a8 b9 4f 32 49 79 71 9d fc 32 af fb be c8 o...O2Iyq..2.... 00d0 15 ba 79 7e 0b 41 d3 1d 9d 74 dc 4a 69 4b 1c 15 ..y~.A...t.JiK.. 00e0 8f 9f 7b bc 2f 8c 8e 90 16 47 f6 52 e4 62 9b af ..{./....G.R.b.. 00f0 27 68 27 8e a4 35 fb d8 ab 23 94 78 bc 79 51 f4 'h'..5...#.x.yQ. 0100 17 b8 bb d6 22 cd d0 18 7e 36 05 84 9f 95 41 f8 ...."...~6....A. 0110 44 5b 38 12 8a d0 4a 79 c1 e0 eb 92 38 c1 1f 62 D[8...Jy....8..b 0120 89 f5 1b 12 85 13 8e bc 06 98 9e 03 86 c7 f1 9a ................ 0130 71 35 b9 6d 99 2b 52 37 36 00 34 6a cb 17 14 69 q5.m.+R76.4j...i 0140 77 e7 80 c4 ca 57 bd 79 9b fb 88 bc 4a 4a d0 ce w....W.y....JJ.. 0150 c6 66 83 11 a3 52 c6 b6 d6 12 .f...R.... Frame 8 (338 bytes on wire, 338 bytes captured) Arrival Time: Mar 17, 2004 12:54:19.278845000 Time delta from previous packet: 0.287937000 seconds Time since reference or first frame: 0.644849000 seconds Frame Number: 8 Packet Length: 338 bytes Capture Length: 338 bytes Ethernet II, Src: 00:d0:cf:01:f5:33, Dst: 00:0c:29:fc:0c:9f Destination: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Source: 00:d0:cf:01:f5:33 (00:d0:cf:01:f5:33) Type: IP (0x0800) Frame check sequence: 0xbc3409bf (correct) Internet Protocol, Src Addr: 165.227.249.139 (165.227.249.139), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 320 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfadf (correct) Source: 165.227.249.139 (165.227.249.139) Destination: 165.227.249.122 (165.227.249.122) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 300 Checksum: 0x8738 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x3C13B623A7177D92 Responder cookie: 0xD16EC245DA805C63 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x1E972BD3 Length: 292 Encrypted payload (264 bytes) 0000 00 0c 29 fc 0c 9f 00 d0 cf 01 f5 33 08 00 45 00 ..)........3..E. 0010 01 40 00 00 40 00 40 11 fa df a5 e3 f9 8b a5 e3 .@..@.@......... 0020 f9 7a 01 f4 01 f4 01 2c 87 38 3c 13 b6 23 a7 17 .z.....,.8<..#.. 0030 7d 92 d1 6e c2 45 da 80 5c 63 08 10 20 01 1e 97 }..n.E..\c.. ... 0040 2b d3 00 00 01 24 f2 8d d5 36 65 21 4d f5 e2 62 +....$...6e!M..b 0050 d0 2c a1 92 58 eb f8 68 c1 8b 25 04 20 7e d1 35 .,..X..h..%. ~.5 0060 ba 7c 15 a9 68 9f 7b e2 b8 8e b5 ec 2f 7e cd b8 .|..h.{...../~.. 0070 a1 fa 07 67 04 fb ed 5c eb 6e b1 fe b7 c8 f8 5e ...g...\.n.....^ 0080 96 2b 80 3f cf 84 89 07 26 82 6c 39 28 99 a0 bc .+.?....&.l9(... 0090 66 cb 04 aa c6 51 b4 3a 96 cd 86 77 20 22 9e dd f....Q.:...w ".. 00a0 c9 8a b2 bc 7b e3 11 f3 a1 b7 ca 01 ac 32 92 16 ....{........2.. 00b0 fa 9f 37 94 86 d3 8e 22 ae be 88 83 b9 62 0d 77 ..7....".....b.w 00c0 ae e5 9f 02 b1 f4 f5 95 28 14 f7 7e 54 94 32 eb ........(..~T.2. 00d0 a9 65 37 e3 d4 b6 3e 39 fa 37 99 11 cd ab 41 77 .e7...>9.7....Aw 00e0 70 95 fc b8 c3 cc 51 eb ae 16 3d 63 11 c3 00 2c p.....Q...=c..., 00f0 2d 0a 86 6f 18 af fa 60 67 74 48 c7 77 00 8a 52 -..o...`gtH.w..R 0100 82 8f 69 87 6a 0e e0 b3 e1 31 d1 cf 6c 92 00 03 ..i.j....1..l... 0110 85 0d ad 31 2f 1c ae 09 c6 db f2 8c 6a 11 f1 1e ...1/.......j... 0120 f0 7e dc 4b 73 bf 73 c5 ec 5b 4c 5d 34 97 d5 8e .~.Ks.s..[L]4... 0130 8e 96 ef 6d a4 3b 72 e9 3b 98 72 f4 bb 4b c4 67 ...m.;r.;.r..K.g 0140 56 8f 28 0b c0 b7 1e c3 7a 68 21 6b fa f5 bc 34 V.(.....zh!k...4 0150 09 bf .. Frame 9 (106 bytes on wire, 106 bytes captured) Arrival Time: Mar 17, 2004 12:54:19.288568000 Time delta from previous packet: 0.009723000 seconds Time since reference or first frame: 0.654572000 seconds Frame Number: 9 Packet Length: 106 bytes Capture Length: 106 bytes Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:d0:cf:01:f5:33 Destination: 00:d0:cf:01:f5:33 (00:d0:cf:01:f5:33) Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Type: IP (0x0800) Frame check sequence: 0x30fb0356 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.139 (165.227.249.139) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 88 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfbc7 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.139 (165.227.249.139) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 68 Checksum: 0x6f73 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x3C13B623A7177D92 Responder cookie: 0xD16EC245DA805C63 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x1E972BD3 Length: 60 Encrypted payload (32 bytes) 0000 00 d0 cf 01 f5 33 00 0c 29 fc 0c 9f 08 00 45 00 .....3..).....E. 0010 00 58 00 00 40 00 40 11 fb c7 a5 e3 f9 7a a5 e3 .X..@.@......z.. 0020 f9 8b 01 f4 01 f4 00 44 6f 73 3c 13 b6 23 a7 17 .......Dos<..#.. 0030 7d 92 d1 6e c2 45 da 80 5c 63 08 10 20 01 1e 97 }..n.E..\c.. ... 0040 2b d3 00 00 00 3c 2b a9 04 4c 0b 3c 1b 99 1d c5 +....<+..L.<.... 0050 6a 74 68 9c bf 46 bf 47 80 8f 2f f0 59 33 3e 19 jth..F.G../.Y3>. 0060 14 d3 f3 a2 e2 9a 30 fb 03 56 ......0..V Frame 10 (106 bytes on wire, 106 bytes captured) Arrival Time: Mar 17, 2004 12:54:19.399230000 Time delta from previous packet: 0.110662000 seconds Time since reference or first frame: 0.765234000 seconds Frame Number: 10 Packet Length: 106 bytes Capture Length: 106 bytes Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:d0:cf:01:f5:33 Destination: 00:d0:cf:01:f5:33 (00:d0:cf:01:f5:33) Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Type: IP (0x0800) Frame check sequence: 0x30fb0356 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.139 (165.227.249.139) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 88 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfbc7 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.139 (165.227.249.139) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 68 Checksum: 0x6f73 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x3C13B623A7177D92 Responder cookie: 0xD16EC245DA805C63 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x1E972BD3 Length: 60 Encrypted payload (32 bytes) 0000 00 d0 cf 01 f5 33 00 0c 29 fc 0c 9f 08 00 45 00 .....3..).....E. 0010 00 58 00 00 40 00 40 11 fb c7 a5 e3 f9 7a a5 e3 .X..@.@......z.. 0020 f9 8b 01 f4 01 f4 00 44 6f 73 3c 13 b6 23 a7 17 .......Dos<..#.. 0030 7d 92 d1 6e c2 45 da 80 5c 63 08 10 20 01 1e 97 }..n.E..\c.. ... 0040 2b d3 00 00 00 3c 2b a9 04 4c 0b 3c 1b 99 1d c5 +....<+..L.<.... 0050 6a 74 68 9c bf 46 bf 47 80 8f 2f f0 59 33 3e 19 jth..F.G../.Y3>. 0060 14 d3 f3 a2 e2 9a 30 fb 03 56 ......0..V Frame 11 (106 bytes on wire, 106 bytes captured) Arrival Time: Mar 17, 2004 12:54:19.508499000 Time delta from previous packet: 0.109269000 seconds Time since reference or first frame: 0.874503000 seconds Frame Number: 11 Packet Length: 106 bytes Capture Length: 106 bytes Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:d0:cf:01:f5:33 Destination: 00:d0:cf:01:f5:33 (00:d0:cf:01:f5:33) Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Type: IP (0x0800) Frame check sequence: 0x30fb0356 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.139 (165.227.249.139) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 88 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfbc7 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.139 (165.227.249.139) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 68 Checksum: 0x6f73 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x3C13B623A7177D92 Responder cookie: 0xD16EC245DA805C63 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x1E972BD3 Length: 60 Encrypted payload (32 bytes) 0000 00 d0 cf 01 f5 33 00 0c 29 fc 0c 9f 08 00 45 00 .....3..).....E. 0010 00 58 00 00 40 00 40 11 fb c7 a5 e3 f9 7a a5 e3 .X..@.@......z.. 0020 f9 8b 01 f4 01 f4 00 44 6f 73 3c 13 b6 23 a7 17 .......Dos<..#.. 0030 7d 92 d1 6e c2 45 da 80 5c 63 08 10 20 01 1e 97 }..n.E..\c.. ... 0040 2b d3 00 00 00 3c 2b a9 04 4c 0b 3c 1b 99 1d c5 +....<+..L.<.... 0050 6a 74 68 9c bf 46 bf 47 80 8f 2f f0 59 33 3e 19 jth..F.G../.Y3>. 0060 14 d3 f3 a2 e2 9a 30 fb 03 56 ......0..V Frame 12 (130 bytes on wire, 130 bytes captured) Arrival Time: Mar 17, 2004 12:54:19.607115000 Time delta from previous packet: 0.098616000 seconds Time since reference or first frame: 0.973119000 seconds Frame Number: 12 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:50:fc:84:d2:ec Destination: 00:50:fc:84:d2:ec (00:50:fc:84:d2:ec) Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Type: IP (0x0800) Frame check sequence: 0xf57f5c11 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.139 (165.227.249.139) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0000 (0) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x7c8e (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.139 (165.227.249.139) Encapsulating Security Payload SPI: 0xf4be7e61 Sequence: 1 Data (84 bytes) 0000 00 50 fc 84 d2 ec 00 0c 29 fc 0c 9f 08 00 45 00 .P......).....E. 0010 00 70 00 00 00 00 ff 32 7c 8e a5 e3 f9 7a a5 e3 .p.....2|....z.. 0020 f9 8b f4 be 7e 61 00 00 00 01 00 00 00 00 00 00 ....~a.......... 0030 00 00 73 c3 f8 5d 42 b1 87 06 4a 9d 61 34 cb 5c ..s..]B...J.a4.\ 0040 19 21 eb 0f 6b 0f db fa 06 a1 72 a2 99 1c 32 5b .!..k.....r...2[ 0050 7a b3 d6 90 44 d9 fc d2 dd 10 e2 c7 09 7a 1c 24 z...D........z.$ 0060 32 b9 91 74 ba 3f b1 c7 eb 92 d2 51 16 05 16 fe 2..t.?.....Q.... 0070 b7 f8 e8 23 a0 2e 39 9e 6d 81 f4 27 20 d0 f5 7f ...#..9.m..' ... 0080 5c 11 \. Frame 13 (130 bytes on wire, 130 bytes captured) Arrival Time: Mar 17, 2004 12:54:19.607338000 Time delta from previous packet: 0.000223000 seconds Time since reference or first frame: 0.973342000 seconds Frame Number: 13 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:50:fc:84:d2:ec, Dst: 00:d0:cf:01:f5:33 Destination: 00:d0:cf:01:f5:33 (00:d0:cf:01:f5:33) Source: 00:50:fc:84:d2:ec (00:50:fc:84:d2:ec) Type: IP (0x0800) Frame check sequence: 0x4519b266 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.139 (165.227.249.139) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0000 (0) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 254 Protocol: ESP (0x32) Header checksum: 0x7d8e (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.139 (165.227.249.139) Encapsulating Security Payload SPI: 0xf4be7e61 Sequence: 1 Data (84 bytes) 0000 00 d0 cf 01 f5 33 00 50 fc 84 d2 ec 08 00 45 00 .....3.P......E. 0010 00 70 00 00 00 00 fe 32 7d 8e a5 e3 f9 7a a5 e3 .p.....2}....z.. 0020 f9 8b f4 be 7e 61 00 00 00 01 00 00 00 00 00 00 ....~a.......... 0030 00 00 73 c3 f8 5d 42 b1 87 06 4a 9d 61 34 cb 5c ..s..]B...J.a4.\ 0040 19 21 eb 0f 6b 0f db fa 06 a1 72 a2 99 1c 32 5b .!..k.....r...2[ 0050 7a b3 d6 90 44 d9 fc d2 dd 10 e2 c7 09 7a 1c 24 z...D........z.$ 0060 32 b9 91 74 ba 3f b1 c7 eb 92 d2 51 16 05 16 fe 2..t.?.....Q.... 0070 b7 f8 e8 23 a0 2e 39 9e 6d 81 f4 27 20 d0 45 19 ...#..9.m..' .E. 0080 b2 66 .f Frame 14 (130 bytes on wire, 130 bytes captured) Arrival Time: Mar 17, 2004 12:54:19.609897000 Time delta from previous packet: 0.002559000 seconds Time since reference or first frame: 0.975901000 seconds Frame Number: 14 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:d0:cf:01:f5:33, Dst: 00:0c:29:fc:0c:9f Destination: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Source: 00:d0:cf:01:f5:33 (00:d0:cf:01:f5:33) Type: IP (0x0800) Frame check sequence: 0x6ef0ea01 (correct) Internet Protocol, Src Addr: 165.227.249.139 (165.227.249.139), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0xd50a (54538) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x6684 (correct) Source: 165.227.249.139 (165.227.249.139) Destination: 165.227.249.122 (165.227.249.122) Encapsulating Security Payload SPI: 0x60824d98 Sequence: 1 Data (84 bytes) 0000 00 0c 29 fc 0c 9f 00 d0 cf 01 f5 33 08 00 45 00 ..)........3..E. 0010 00 70 d5 0a 00 00 40 32 66 84 a5 e3 f9 8b a5 e3 .p....@2f....... 0020 f9 7a 60 82 4d 98 00 00 00 01 df bb 7a 6e e8 eb .z`.M.......zn.. 0030 b8 b9 fb c2 b5 80 c0 c4 76 47 6b b0 15 81 18 ed ........vGk..... 0040 27 9a f4 32 43 be f7 df 5c 12 f1 63 1f c4 ac 48 '..2C...\..c...H 0050 f9 7b 77 2c 99 df c0 df 32 ab 20 67 bf ae 6d 63 .{w,....2. g..mc 0060 70 b1 18 36 f0 e2 08 42 bc c7 cd cd 9a 82 d7 06 p..6...B........ 0070 dd 1c 4c 82 9e e0 b9 e6 c9 84 b9 61 dc 31 6e f0 ..L........a.1n. 0080 ea 01 .. Frame 15 (130 bytes on wire, 130 bytes captured) Arrival Time: Mar 17, 2004 12:54:19.637736000 Time delta from previous packet: 0.027839000 seconds Time since reference or first frame: 1.003740000 seconds Frame Number: 15 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:50:fc:84:d2:ec Destination: 00:50:fc:84:d2:ec (00:50:fc:84:d2:ec) Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Type: IP (0x0800) Frame check sequence: 0xb89ea8f9 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.139 (165.227.249.139) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0001 (1) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x7c8d (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.139 (165.227.249.139) Encapsulating Security Payload SPI: 0xf4be7e61 Sequence: 2 Data (84 bytes) 0000 00 50 fc 84 d2 ec 00 0c 29 fc 0c 9f 08 00 45 00 .P......).....E. 0010 00 70 00 01 00 00 ff 32 7c 8d a5 e3 f9 7a a5 e3 .p.....2|....z.. 0020 f9 8b f4 be 7e 61 00 00 00 02 d2 51 16 05 16 fe ....~a.....Q.... 0030 b7 f8 3d c1 6f 0b a3 ec 8c 65 7d 89 9a bc 94 e9 ..=.o....e}..... 0040 c9 ed 0b 84 a1 9b 1b 4e 62 1c c1 b6 18 2d f0 0f .......Nb....-.. 0050 5c 9c a3 3c 9f 4c d5 5c 39 56 55 8d d9 e3 36 85 \..<.L.\9VU...6. 0060 50 a2 c0 2d e8 a0 17 62 5d 84 7e 8e ed 8c cd 60 P..-...b].~....` 0070 b1 53 e9 3f c0 8b c1 98 7d 11 7b 9a 41 79 b8 9e .S.?....}.{.Ay.. 0080 a8 f9 .. Frame 16 (130 bytes on wire, 130 bytes captured) Arrival Time: Mar 17, 2004 12:54:19.637938000 Time delta from previous packet: 0.000202000 seconds Time since reference or first frame: 1.003942000 seconds Frame Number: 16 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:50:fc:84:d2:ec, Dst: 00:d0:cf:01:f5:33 Destination: 00:d0:cf:01:f5:33 (00:d0:cf:01:f5:33) Source: 00:50:fc:84:d2:ec (00:50:fc:84:d2:ec) Type: IP (0x0800) Frame check sequence: 0x08f8468e (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.139 (165.227.249.139) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0001 (1) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 254 Protocol: ESP (0x32) Header checksum: 0x7d8d (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.139 (165.227.249.139) Encapsulating Security Payload SPI: 0xf4be7e61 Sequence: 2 Data (84 bytes) 0000 00 d0 cf 01 f5 33 00 50 fc 84 d2 ec 08 00 45 00 .....3.P......E. 0010 00 70 00 01 00 00 fe 32 7d 8d a5 e3 f9 7a a5 e3 .p.....2}....z.. 0020 f9 8b f4 be 7e 61 00 00 00 02 d2 51 16 05 16 fe ....~a.....Q.... 0030 b7 f8 3d c1 6f 0b a3 ec 8c 65 7d 89 9a bc 94 e9 ..=.o....e}..... 0040 c9 ed 0b 84 a1 9b 1b 4e 62 1c c1 b6 18 2d f0 0f .......Nb....-.. 0050 5c 9c a3 3c 9f 4c d5 5c 39 56 55 8d d9 e3 36 85 \..<.L.\9VU...6. 0060 50 a2 c0 2d e8 a0 17 62 5d 84 7e 8e ed 8c cd 60 P..-...b].~....` 0070 b1 53 e9 3f c0 8b c1 98 7d 11 7b 9a 41 79 08 f8 .S.?....}.{.Ay.. 0080 46 8e F. Frame 17 (130 bytes on wire, 130 bytes captured) Arrival Time: Mar 17, 2004 12:54:19.639642000 Time delta from previous packet: 0.001704000 seconds Time since reference or first frame: 1.005646000 seconds Frame Number: 17 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:d0:cf:01:f5:33, Dst: 00:0c:29:fc:0c:9f Destination: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Source: 00:d0:cf:01:f5:33 (00:d0:cf:01:f5:33) Type: IP (0x0800) Frame check sequence: 0xee876563 (correct) Internet Protocol, Src Addr: 165.227.249.139 (165.227.249.139), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0xd50b (54539) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x6683 (correct) Source: 165.227.249.139 (165.227.249.139) Destination: 165.227.249.122 (165.227.249.122) Encapsulating Security Payload SPI: 0x60824d98 Sequence: 2 Data (84 bytes) 0000 00 0c 29 fc 0c 9f 00 d0 cf 01 f5 33 08 00 45 00 ..)........3..E. 0010 00 70 d5 0b 00 00 40 32 66 83 a5 e3 f9 8b a5 e3 .p....@2f....... 0020 f9 7a 60 82 4d 98 00 00 00 02 cd cd 9a 82 d7 06 .z`.M........... 0030 dd 1c 11 ee 58 9f 06 43 44 7b 08 62 98 57 74 87 ....X..CD{.b.Wt. 0040 35 71 37 d4 13 95 67 71 4d db f2 f1 a7 a6 02 94 5q7...gqM....... 0050 da 38 2d 6a d3 67 db 21 04 27 55 d7 01 70 b8 f9 .8-j.g.!.'U..p.. 0060 2a 70 7e 96 fe ca 82 fb 3e 7d e0 18 6a 96 f8 b1 *p~.....>}..j... 0070 d1 90 a8 f2 02 d4 93 56 30 d1 82 70 3f d5 ee 87 .......V0..p?... 0080 65 63 ec Frame 18 (130 bytes on wire, 130 bytes captured) Arrival Time: Mar 17, 2004 12:54:20.638399000 Time delta from previous packet: 0.998757000 seconds Time since reference or first frame: 2.004403000 seconds Frame Number: 18 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:50:fc:84:d2:ec Destination: 00:50:fc:84:d2:ec (00:50:fc:84:d2:ec) Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Type: IP (0x0800) Frame check sequence: 0x370d1a6b (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.139 (165.227.249.139) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0002 (2) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x7c8c (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.139 (165.227.249.139) Encapsulating Security Payload SPI: 0xf4be7e61 Sequence: 3 Data (84 bytes) 0000 00 50 fc 84 d2 ec 00 0c 29 fc 0c 9f 08 00 45 00 .P......).....E. 0010 00 70 00 02 00 00 ff 32 7c 8c a5 e3 f9 7a a5 e3 .p.....2|....z.. 0020 f9 8b f4 be 7e 61 00 00 00 03 7e 8e ed 8c cd 60 ....~a....~....` 0030 b1 53 b2 62 01 b4 4d e5 a1 a6 f3 0f b9 21 83 e9 .S.b..M......!.. 0040 16 9e f3 d4 94 ac dd 14 62 88 e4 a9 75 ef 92 6e ........b...u..n 0050 dd 68 55 07 43 bf f3 c3 cb 0d ce 67 15 bd 2c eb .hU.C......g..,. 0060 e2 5b 13 13 96 98 98 7c 76 98 23 5a 3e 04 73 e4 .[.....|v.#Z>.s. 0070 9c d6 58 9d 3e 9e b9 29 60 e0 39 b1 f9 5e 37 0d ..X.>..)`.9..^7. 0080 1a 6b .k Frame 19 (130 bytes on wire, 130 bytes captured) Arrival Time: Mar 17, 2004 12:54:20.638590000 Time delta from previous packet: 0.000191000 seconds Time since reference or first frame: 2.004594000 seconds Frame Number: 19 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:50:fc:84:d2:ec, Dst: 00:d0:cf:01:f5:33 Destination: 00:d0:cf:01:f5:33 (00:d0:cf:01:f5:33) Source: 00:50:fc:84:d2:ec (00:50:fc:84:d2:ec) Type: IP (0x0800) Frame check sequence: 0x876bf41c (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.139 (165.227.249.139) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0002 (2) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 254 Protocol: ESP (0x32) Header checksum: 0x7d8c (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.139 (165.227.249.139) Encapsulating Security Payload SPI: 0xf4be7e61 Sequence: 3 Data (84 bytes) 0000 00 d0 cf 01 f5 33 00 50 fc 84 d2 ec 08 00 45 00 .....3.P......E. 0010 00 70 00 02 00 00 fe 32 7d 8c a5 e3 f9 7a a5 e3 .p.....2}....z.. 0020 f9 8b f4 be 7e 61 00 00 00 03 7e 8e ed 8c cd 60 ....~a....~....` 0030 b1 53 b2 62 01 b4 4d e5 a1 a6 f3 0f b9 21 83 e9 .S.b..M......!.. 0040 16 9e f3 d4 94 ac dd 14 62 88 e4 a9 75 ef 92 6e ........b...u..n 0050 dd 68 55 07 43 bf f3 c3 cb 0d ce 67 15 bd 2c eb .hU.C......g..,. 0060 e2 5b 13 13 96 98 98 7c 76 98 23 5a 3e 04 73 e4 .[.....|v.#Z>.s. 0070 9c d6 58 9d 3e 9e b9 29 60 e0 39 b1 f9 5e 87 6b ..X.>..)`.9..^.k 0080 f4 1c .. Frame 20 (130 bytes on wire, 130 bytes captured) Arrival Time: Mar 17, 2004 12:54:20.640269000 Time delta from previous packet: 0.001679000 seconds Time since reference or first frame: 2.006273000 seconds Frame Number: 20 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:d0:cf:01:f5:33, Dst: 00:0c:29:fc:0c:9f Destination: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Source: 00:d0:cf:01:f5:33 (00:d0:cf:01:f5:33) Type: IP (0x0800) Frame check sequence: 0x014d3598 (correct) Internet Protocol, Src Addr: 165.227.249.139 (165.227.249.139), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0xd50c (54540) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x6682 (correct) Source: 165.227.249.139 (165.227.249.139) Destination: 165.227.249.122 (165.227.249.122) Encapsulating Security Payload SPI: 0x60824d98 Sequence: 3 Data (84 bytes) 0000 00 0c 29 fc 0c 9f 00 d0 cf 01 f5 33 08 00 45 00 ..)........3..E. 0010 00 70 d5 0c 00 00 40 32 66 82 a5 e3 f9 8b a5 e3 .p....@2f....... 0020 f9 7a 60 82 4d 98 00 00 00 03 e0 18 6a 96 f8 b1 .z`.M.......j... 0030 d1 90 25 ca e9 84 37 b2 42 98 61 13 f9 20 5e ef ..%...7.B.a.. ^. 0040 94 a6 3e 1b f1 c0 17 67 74 5f af fa 3a 18 e2 1d ..>....gt_..:... 0050 78 e3 5a 9a 52 8d f9 2f cf be 26 ab 61 83 22 f3 x.Z.R../..&.a.". 0060 de a2 da 32 26 76 f5 e4 fc 66 a0 af 7f 71 6f e1 ...2&v...f...qo. 0070 ec 99 2d 18 75 8d 99 d6 b4 4d e9 a2 5a 69 01 4d ..-.u....M..Zi.M 0080 35 98 5. Frame 21 (130 bytes on wire, 130 bytes captured) Arrival Time: Mar 17, 2004 12:54:21.647255000 Time delta from previous packet: 1.006986000 seconds Time since reference or first frame: 3.013259000 seconds Frame Number: 21 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:50:fc:84:d2:ec Destination: 00:50:fc:84:d2:ec (00:50:fc:84:d2:ec) Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Type: IP (0x0800) Frame check sequence: 0x41d23c99 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.139 (165.227.249.139) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0003 (3) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x7c8b (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.139 (165.227.249.139) Encapsulating Security Payload SPI: 0xf4be7e61 Sequence: 4 Data (84 bytes) 0000 00 50 fc 84 d2 ec 00 0c 29 fc 0c 9f 08 00 45 00 .P......).....E. 0010 00 70 00 03 00 00 ff 32 7c 8b a5 e3 f9 7a a5 e3 .p.....2|....z.. 0020 f9 8b f4 be 7e 61 00 00 00 04 23 5a 3e 04 73 e4 ....~a....#Z>.s. 0030 9c d6 b1 51 3d 39 ec 22 83 1e 81 cd d6 11 8f 2c ...Q=9."......., 0040 cb d2 9d e8 80 0d 3b b9 4b 43 3a 8f 92 45 6f c8 ......;.KC:..Eo. 0050 78 b1 27 db 44 ad ee 82 4d e1 69 1e ec d2 e6 b5 x.'.D...M.i..... 0060 ac 12 87 94 06 ec 84 61 45 f2 9a 1c 7e 15 f9 b6 .......aE...~... 0070 4f 16 6c db 65 c6 37 cd d6 bc d8 8d f3 cf 41 d2 O.l.e.7.......A. 0080 3c 99 <. Frame 22 (130 bytes on wire, 130 bytes captured) Arrival Time: Mar 17, 2004 12:54:21.647413000 Time delta from previous packet: 0.000158000 seconds Time since reference or first frame: 3.013417000 seconds Frame Number: 22 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:50:fc:84:d2:ec, Dst: 00:d0:cf:01:f5:33 Destination: 00:d0:cf:01:f5:33 (00:d0:cf:01:f5:33) Source: 00:50:fc:84:d2:ec (00:50:fc:84:d2:ec) Type: IP (0x0800) Frame check sequence: 0xf1b4d2ee (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.139 (165.227.249.139) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0003 (3) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 254 Protocol: ESP (0x32) Header checksum: 0x7d8b (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.139 (165.227.249.139) Encapsulating Security Payload SPI: 0xf4be7e61 Sequence: 4 Data (84 bytes) 0000 00 d0 cf 01 f5 33 00 50 fc 84 d2 ec 08 00 45 00 .....3.P......E. 0010 00 70 00 03 00 00 fe 32 7d 8b a5 e3 f9 7a a5 e3 .p.....2}....z.. 0020 f9 8b f4 be 7e 61 00 00 00 04 23 5a 3e 04 73 e4 ....~a....#Z>.s. 0030 9c d6 b1 51 3d 39 ec 22 83 1e 81 cd d6 11 8f 2c ...Q=9."......., 0040 cb d2 9d e8 80 0d 3b b9 4b 43 3a 8f 92 45 6f c8 ......;.KC:..Eo. 0050 78 b1 27 db 44 ad ee 82 4d e1 69 1e ec d2 e6 b5 x.'.D...M.i..... 0060 ac 12 87 94 06 ec 84 61 45 f2 9a 1c 7e 15 f9 b6 .......aE...~... 0070 4f 16 6c db 65 c6 37 cd d6 bc d8 8d f3 cf f1 b4 O.l.e.7......... 0080 d2 ee .. Frame 23 (130 bytes on wire, 130 bytes captured) Arrival Time: Mar 17, 2004 12:54:21.649351000 Time delta from previous packet: 0.001938000 seconds Time since reference or first frame: 3.015355000 seconds Frame Number: 23 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:d0:cf:01:f5:33, Dst: 00:0c:29:fc:0c:9f Destination: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Source: 00:d0:cf:01:f5:33 (00:d0:cf:01:f5:33) Type: IP (0x0800) Frame check sequence: 0x4f8abc40 (correct) Internet Protocol, Src Addr: 165.227.249.139 (165.227.249.139), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0xd50d (54541) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x6681 (correct) Source: 165.227.249.139 (165.227.249.139) Destination: 165.227.249.122 (165.227.249.122) Encapsulating Security Payload SPI: 0x60824d98 Sequence: 4 Data (84 bytes) 0000 00 0c 29 fc 0c 9f 00 d0 cf 01 f5 33 08 00 45 00 ..)........3..E. 0010 00 70 d5 0d 00 00 40 32 66 81 a5 e3 f9 8b a5 e3 .p....@2f....... 0020 f9 7a 60 82 4d 98 00 00 00 04 a0 af 7f 71 6f e1 .z`.M........qo. 0030 ec 99 9b c3 2d 3c 02 be 8a e8 62 23 4d 6a bc 7b ....-<....b#Mj.{ 0040 f7 c6 83 f4 c7 46 24 86 30 cb 1f 94 db 5e 57 c6 .....F$.0....^W. 0050 37 75 c1 17 23 d9 ab a3 e8 12 45 6c eb 6f 1b 0b 7u..#.....El.o.. 0060 1e dd f6 6f 82 fa db f2 40 fa 49 93 87 e6 64 a4 ...o....@.I...d. 0070 7b 77 e9 f1 69 0d 77 47 ca 5f b2 06 be 01 4f 8a {w..i.wG._....O. 0080 bc 40 .@