Frame 1 (174 bytes on wire, 174 bytes captured) Arrival Time: Sep 14, 2004 14:14:43.590790000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 174 bytes Capture Length: 174 bytes Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:00:d1:ed:e3:ad Destination: 00:00:d1:ed:e3:ad (00:00:d1:ed:e3:ad) Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Type: IP (0x0800) Frame check sequence: 0x3963503e (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.141 (165.227.249.141) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 156 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb81 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.141 (165.227.249.141) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 136 Checksum: 0x46f4 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x8A9E8AAD7E720802 Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 128 Security Association payload Next payload: Vendor ID (13) Length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 44 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 36 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: NONE (0) Length: 44 Vendor ID: Check Point Check Point Product: VPN-1 Version: NG with Application Intelligence R55 0000 00 00 d1 ed e3 ad 00 0c 29 fc 0c 9f 08 00 45 00 ........).....E. 0010 00 9c 00 00 40 00 40 11 fb 81 a5 e3 f9 7a a5 e3 ....@.@......z.. 0020 f9 8d 01 f4 01 f4 00 88 46 f4 8a 9e 8a ad 7e 72 ........F.....~r 0030 08 02 00 00 00 00 00 00 00 00 01 10 02 00 00 00 ................ 0040 00 00 00 00 00 80 0d 00 00 38 00 00 00 01 00 00 .........8...... 0050 00 01 00 00 00 2c 01 01 00 01 00 00 00 24 01 01 .....,.......$.. 0060 00 00 80 01 00 05 80 02 00 02 80 03 00 01 80 04 ................ 0070 00 02 80 0b 00 01 00 0c 00 04 00 00 70 80 00 00 ............p... 0080 00 2c f4 ed 19 e0 c1 14 eb 51 6f aa ac 0e e3 7d .,.......Qo....} 0090 af 28 07 b4 38 1f 00 00 00 01 00 00 13 8d 00 00 .(..8........... 00a0 00 00 00 00 00 00 18 80 00 00 39 63 50 3e ..........9cP> Frame 2 (270 bytes on wire, 270 bytes captured) Arrival Time: Sep 14, 2004 14:14:43.698841000 Time delta from previous packet: 0.108051000 seconds Time since reference or first frame: 0.108051000 seconds Frame Number: 2 Packet Length: 270 bytes Capture Length: 270 bytes Ethernet II, Src: 00:00:d1:ed:e3:ad, Dst: 00:0c:29:fc:0c:9f Destination: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Source: 00:00:d1:ed:e3:ad (00:00:d1:ed:e3:ad) Type: IP (0x0800) Frame check sequence: 0x938cdab1 (correct) Internet Protocol, Src Addr: 165.227.249.141 (165.227.249.141), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 252 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb21 (correct) Source: 165.227.249.141 (165.227.249.141) Destination: 165.227.249.122 (165.227.249.122) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 232 Checksum: 0x08c6 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x8A9E8AAD7E720802 Responder cookie: 0xCC1F47C47E28914C Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 224 Security Association payload Next payload: Vendor ID (13) Length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 44 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 36 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: unknown vendor ID: 0x8F9CC94E01248ECDF147594C284B213B Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-stenberg-ipsec-nat-traversal-01 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-stenberg-ipsec-nat-traversal-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-03 0000 00 0c 29 fc 0c 9f 00 00 d1 ed e3 ad 08 00 45 00 ..)...........E. 0010 00 fc 00 00 40 00 40 11 fb 21 a5 e3 f9 8d a5 e3 ....@.@..!...... 0020 f9 7a 01 f4 01 f4 00 e8 08 c6 8a 9e 8a ad 7e 72 .z............~r 0030 08 02 cc 1f 47 c4 7e 28 91 4c 01 10 02 00 00 00 ....G.~(.L...... 0040 00 00 00 00 00 e0 0d 00 00 38 00 00 00 01 00 00 .........8...... 0050 00 01 00 00 00 2c 01 01 00 01 00 00 00 24 01 01 .....,.......$.. 0060 00 00 80 01 00 05 80 02 00 02 80 03 00 01 80 04 ................ 0070 00 02 80 0b 00 01 00 0c 00 04 00 00 70 80 0d 00 ............p... 0080 00 14 8f 9c c9 4e 01 24 8e cd f1 47 59 4c 28 4b .....N.$...GYL(K 0090 21 3b 0d 00 00 14 27 ba b5 dc 01 ea 07 60 ea 4e !;....'......`.N 00a0 31 90 ac 27 c0 d0 0d 00 00 14 61 05 c4 22 e7 68 1..'......a..".h 00b0 47 e4 3f 96 84 80 12 92 ae cd 0d 00 00 14 44 85 G.?...........D. 00c0 15 2d 18 b6 bb cd 0b e8 a8 46 95 79 dd cc 0d 00 .-.......F.y.... 00d0 00 14 cd 60 46 43 35 df 21 f8 7c fd b2 fc 68 b6 ...`FC5.!.|...h. 00e0 a4 48 0d 00 00 14 90 cb 80 91 3e bb 69 6e 08 63 .H........>.in.c 00f0 81 b5 ec 42 7b 1f 00 00 00 14 7d 94 19 a6 53 10 ...B{.....}...S. 0100 ca 6f 2c 17 9d 92 15 52 9d 56 93 8c da b1 .o,....R.V.... Frame 3 (230 bytes on wire, 230 bytes captured) Arrival Time: Sep 14, 2004 14:14:43.711102000 Time delta from previous packet: 0.012261000 seconds Time since reference or first frame: 0.120312000 seconds Frame Number: 3 Packet Length: 230 bytes Capture Length: 230 bytes Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:00:d1:ed:e3:ad Destination: 00:00:d1:ed:e3:ad (00:00:d1:ed:e3:ad) Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Type: IP (0x0800) Frame check sequence: 0x1a649145 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.141 (165.227.249.141) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 212 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb49 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.141 (165.227.249.141) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 192 Checksum: 0x3b4c (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x8A9E8AAD7E720802 Responder cookie: 0xCC1F47C47E28914C Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 184 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 24 Nonce Data 0000 00 00 d1 ed e3 ad 00 0c 29 fc 0c 9f 08 00 45 00 ........).....E. 0010 00 d4 00 00 40 00 40 11 fb 49 a5 e3 f9 7a a5 e3 ....@.@..I...z.. 0020 f9 8d 01 f4 01 f4 00 c0 3b 4c 8a 9e 8a ad 7e 72 ........;L....~r 0030 08 02 cc 1f 47 c4 7e 28 91 4c 04 10 02 00 00 00 ....G.~(.L...... 0040 00 00 00 00 00 b8 0a 00 00 84 e9 e4 da df 68 47 ..............hG 0050 ed 0e ef 38 00 3e 9d 12 45 17 a6 9f 92 4d e7 8b ...8.>..E....M.. 0060 9b b0 a1 b4 f4 56 9a f9 fb ee d1 fd 15 2c 42 2e .....V.......,B. 0070 aa d7 98 af 80 ca aa 37 1c 3f 86 2e 81 a2 9c 97 .......7.?...... 0080 36 7a d1 e5 e6 f9 29 9b a3 ef 4f 9c cf b9 8f 58 6z....)...O....X 0090 d8 ee d5 e4 bf 83 a3 14 25 72 c4 c8 ae 07 80 5f ........%r....._ 00a0 bc 1b 8c 5e 20 79 12 7b 2b 29 f5 e6 20 79 48 9c ...^ y.{+).. yH. 00b0 61 de ed 45 9a d2 08 40 76 34 2a 6b 4b 79 83 5f a..E...@v4*kKy._ 00c0 80 ab 59 39 7a 6e 24 64 7b da 00 00 00 18 b2 c6 ..Y9zn$d{....... 00d0 74 62 72 bc 18 83 5f 54 79 2c 71 66 ac 0c 37 ad tbr..._Ty,qf..7. 00e0 b1 08 1a 64 91 45 ...d.E Frame 4 (226 bytes on wire, 226 bytes captured) Arrival Time: Sep 14, 2004 14:14:43.724556000 Time delta from previous packet: 0.013454000 seconds Time since reference or first frame: 0.133766000 seconds Frame Number: 4 Packet Length: 226 bytes Capture Length: 226 bytes Ethernet II, Src: 00:00:d1:ed:e3:ad, Dst: 00:0c:29:fc:0c:9f Destination: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Source: 00:00:d1:ed:e3:ad (00:00:d1:ed:e3:ad) Type: IP (0x0800) Frame check sequence: 0x55b4d4f2 (correct) Internet Protocol, Src Addr: 165.227.249.141 (165.227.249.141), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 208 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb4d (correct) Source: 165.227.249.141 (165.227.249.141) Destination: 165.227.249.122 (165.227.249.122) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 188 Checksum: 0x20ec (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x8A9E8AAD7E720802 Responder cookie: 0xCC1F47C47E28914C Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 180 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 20 Nonce Data 0000 00 0c 29 fc 0c 9f 00 00 d1 ed e3 ad 08 00 45 00 ..)...........E. 0010 00 d0 00 00 40 00 40 11 fb 4d a5 e3 f9 8d a5 e3 ....@.@..M...... 0020 f9 7a 01 f4 01 f4 00 bc 20 ec 8a 9e 8a ad 7e 72 .z...... .....~r 0030 08 02 cc 1f 47 c4 7e 28 91 4c 04 10 02 00 00 00 ....G.~(.L...... 0040 00 00 00 00 00 b4 0a 00 00 84 e1 dd be 17 f2 10 ................ 0050 8b b7 35 0b b1 49 80 7c f0 39 d6 f4 13 3b db 28 ..5..I.|.9...;.( 0060 92 f0 5a 6d 19 e4 c0 2b 41 8a 12 8a ec a9 b5 9e ..Zm...+A....... 0070 2a a0 c3 22 b4 a1 92 98 78 3b 3b ac 29 20 5f 60 *.."....x;;.) _` 0080 17 fb 58 2d c3 cb ad e3 e8 54 da 77 56 83 c2 14 ..X-.....T.wV... 0090 a6 33 04 58 8a e6 c4 6b 78 61 ed 0f 0f b6 ce b0 .3.X...kxa...... 00a0 bb bd 1e f1 5f bb 80 7f b5 eb 64 07 37 b1 d2 71 ...._.....d.7..q 00b0 2b a9 a8 1d 88 dc 04 23 8c 4f 19 e1 a5 a8 1d d6 +......#.O...... 00c0 fc 43 4f bb 87 fa 96 4e 06 72 00 00 00 14 2f 6d .CO....N.r..../m 00d0 6d 07 9c a1 02 f4 58 82 f7 3b 95 7b 2a a3 55 b4 m.....X..;.{*.U. 00e0 d4 f2 .. Frame 5 (114 bytes on wire, 114 bytes captured) Arrival Time: Sep 14, 2004 14:14:43.739365000 Time delta from previous packet: 0.014809000 seconds Time since reference or first frame: 0.148575000 seconds Frame Number: 5 Packet Length: 114 bytes Capture Length: 114 bytes Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:00:d1:ed:e3:ad Destination: 00:00:d1:ed:e3:ad (00:00:d1:ed:e3:ad) Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Type: IP (0x0800) Frame check sequence: 0x15e1d37c (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.141 (165.227.249.141) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfbbd (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.141 (165.227.249.141) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 76 Checksum: 0xc57d (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x8A9E8AAD7E720802 Responder cookie: 0xCC1F47C47E28914C Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 68 Encrypted payload (40 bytes) 0000 00 00 d1 ed e3 ad 00 0c 29 fc 0c 9f 08 00 45 00 ........).....E. 0010 00 60 00 00 40 00 40 11 fb bd a5 e3 f9 7a a5 e3 .`..@.@......z.. 0020 f9 8d 01 f4 01 f4 00 4c c5 7d 8a 9e 8a ad 7e 72 .......L.}....~r 0030 08 02 cc 1f 47 c4 7e 28 91 4c 05 10 02 01 00 00 ....G.~(.L...... 0040 00 00 00 00 00 44 df 9b ca 5b 78 e7 d2 87 3a 90 .....D...[x...:. 0050 3c 3b a5 3d 55 23 5c c8 3b 75 67 3f 7c c0 39 df <;.=U#\.;ug?|.9. 0060 b5 36 98 c3 ea e4 36 2c 38 0a 45 4d 27 9f 15 e1 .6....6,8.EM'... 0070 d3 7c .| Frame 6 (114 bytes on wire, 114 bytes captured) Arrival Time: Sep 14, 2004 14:14:43.739892000 Time delta from previous packet: 0.000527000 seconds Time since reference or first frame: 0.149102000 seconds Frame Number: 6 Packet Length: 114 bytes Capture Length: 114 bytes Ethernet II, Src: 00:00:d1:ed:e3:ad, Dst: 00:0c:29:fc:0c:9f Destination: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Source: 00:00:d1:ed:e3:ad (00:00:d1:ed:e3:ad) Type: IP (0x0800) Frame check sequence: 0xef71b31d (correct) Internet Protocol, Src Addr: 165.227.249.141 (165.227.249.141), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfbbd (correct) Source: 165.227.249.141 (165.227.249.141) Destination: 165.227.249.122 (165.227.249.122) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 76 Checksum: 0xb27a (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x8A9E8AAD7E720802 Responder cookie: 0xCC1F47C47E28914C Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 68 Encrypted payload (40 bytes) 0000 00 0c 29 fc 0c 9f 00 00 d1 ed e3 ad 08 00 45 00 ..)...........E. 0010 00 60 00 00 40 00 40 11 fb bd a5 e3 f9 8d a5 e3 .`..@.@......... 0020 f9 7a 01 f4 01 f4 00 4c b2 7a 8a 9e 8a ad 7e 72 .z.....L.z....~r 0030 08 02 cc 1f 47 c4 7e 28 91 4c 05 10 02 01 00 00 ....G.~(.L...... 0040 00 00 00 00 00 44 b8 b7 62 7e c2 10 b7 ec 23 22 .....D..b~....#" 0050 d9 7b b7 23 5c b0 1a 47 77 83 18 5c 07 61 e3 ff .{.#\..Gw..\.a.. 0060 de d9 7a 82 2a ed b9 dc 16 76 ab 51 08 9a ef 71 ..z.*....v.Q...q 0070 b3 1d .. Frame 7 (346 bytes on wire, 346 bytes captured) Arrival Time: Sep 14, 2004 14:14:43.770633000 Time delta from previous packet: 0.030741000 seconds Time since reference or first frame: 0.179843000 seconds Frame Number: 7 Packet Length: 346 bytes Capture Length: 346 bytes Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:00:d1:ed:e3:ad Destination: 00:00:d1:ed:e3:ad (00:00:d1:ed:e3:ad) Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Type: IP (0x0800) Frame check sequence: 0x4575b770 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.141 (165.227.249.141) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 328 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfad5 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.141 (165.227.249.141) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 308 Checksum: 0xf8ce (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x8A9E8AAD7E720802 Responder cookie: 0xCC1F47C47E28914C Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x63CFC6BC Length: 300 Encrypted payload (272 bytes) 0000 00 00 d1 ed e3 ad 00 0c 29 fc 0c 9f 08 00 45 00 ........).....E. 0010 01 48 00 00 40 00 40 11 fa d5 a5 e3 f9 7a a5 e3 .H..@.@......z.. 0020 f9 8d 01 f4 01 f4 01 34 f8 ce 8a 9e 8a ad 7e 72 .......4......~r 0030 08 02 cc 1f 47 c4 7e 28 91 4c 08 10 20 01 63 cf ....G.~(.L.. .c. 0040 c6 bc 00 00 01 2c cb c3 8c 19 09 05 b0 3d e1 6e .....,.......=.n 0050 f8 1f 5f c6 39 d2 d7 9a 16 02 2e f7 b4 6a 9d 44 .._.9........j.D 0060 be b0 7d ed 3d 14 df 44 e6 c6 c3 b7 da 6a 37 ec ..}.=..D.....j7. 0070 fc fe b1 5a 6f 0a 10 eb a4 e5 89 f2 09 33 f2 98 ...Zo........3.. 0080 df 8d 41 86 ad 5e 23 d3 82 75 e0 17 d1 1a c9 84 ..A..^#..u...... 0090 d5 71 9d ad ad 65 17 50 53 7a 34 2b 91 33 68 bf .q...e.PSz4+.3h. 00a0 4b 53 5c 81 1a 68 08 3b 94 f0 3d bb 7f 8a f5 40 KS\..h.;..=....@ 00b0 12 b1 ed a1 82 0c b0 9d 91 4e 6d 2d 79 eb f2 ea .........Nm-y... 00c0 03 a4 ad a7 e5 94 c0 05 fd c7 79 93 cd 4e 35 9d ..........y..N5. 00d0 87 57 13 13 57 cb 04 a3 fb 2c 8a 80 4a 5f ed 03 .W..W....,..J_.. 00e0 71 13 d6 6f 5d 6d 98 9d c0 a8 00 ea 22 0a 51 2a q..o]m......".Q* 00f0 8a 59 1e 4b c1 f8 60 54 f3 e9 b9 61 46 ca 01 2d .Y.K..`T...aF..- 0100 cb e6 54 fa 70 19 4d 06 6e 36 d3 55 db 9c ee a6 ..T.p.M.n6.U.... 0110 ce de fd f0 12 ac 79 bb e4 31 06 db d7 f3 9a 61 ......y..1.....a 0120 6c d3 4a 9f 51 31 1c 16 9d d5 cc 21 94 78 97 3f l.J.Q1.....!.x.? 0130 f0 dc 18 59 6f 62 72 eb 3d 36 7f 4e f1 2e c6 0c ...Yobr.=6.N.... 0140 41 a2 a3 8e 8f f0 22 0d b5 92 76 67 c0 3a 19 2c A....."...vg.:., 0150 ff 4e 17 16 d0 02 45 75 b7 70 .N....Eu.p Frame 8 (338 bytes on wire, 338 bytes captured) Arrival Time: Sep 14, 2004 14:14:43.788319000 Time delta from previous packet: 0.017686000 seconds Time since reference or first frame: 0.197529000 seconds Frame Number: 8 Packet Length: 338 bytes Capture Length: 338 bytes Ethernet II, Src: 00:00:d1:ed:e3:ad, Dst: 00:0c:29:fc:0c:9f Destination: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Source: 00:00:d1:ed:e3:ad (00:00:d1:ed:e3:ad) Type: IP (0x0800) Frame check sequence: 0x698592ea (correct) Internet Protocol, Src Addr: 165.227.249.141 (165.227.249.141), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 320 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfadd (correct) Source: 165.227.249.141 (165.227.249.141) Destination: 165.227.249.122 (165.227.249.122) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 300 Checksum: 0x66f9 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x8A9E8AAD7E720802 Responder cookie: 0xCC1F47C47E28914C Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x63CFC6BC Length: 292 Encrypted payload (264 bytes) 0000 00 0c 29 fc 0c 9f 00 00 d1 ed e3 ad 08 00 45 00 ..)...........E. 0010 01 40 00 00 40 00 40 11 fa dd a5 e3 f9 8d a5 e3 .@..@.@......... 0020 f9 7a 01 f4 01 f4 01 2c 66 f9 8a 9e 8a ad 7e 72 .z.....,f.....~r 0030 08 02 cc 1f 47 c4 7e 28 91 4c 08 10 20 01 63 cf ....G.~(.L.. .c. 0040 c6 bc 00 00 01 24 26 0e 08 59 2a fe ad 8b 36 a5 .....$&..Y*...6. 0050 41 9a 7f 2d a4 ea 51 40 5d f2 02 7b d1 06 a0 f9 A..-..Q@]..{.... 0060 44 39 62 53 ee 80 dd 7d 23 2d 47 f0 66 59 18 30 D9bS...}#-G.fY.0 0070 18 db 1d 9d 08 7c d6 89 20 ab 6c 5c 70 c4 f9 50 .....|.. .l\p..P 0080 3c f3 c9 70 5e 39 51 2d 5e f8 22 45 18 cc f6 31 <..p^9Q-^."E...1 0090 09 4b 09 ad 83 41 d1 68 c7 44 79 b2 2f aa c8 16 .K...A.h.Dy./... 00a0 5d db 81 a9 f9 d3 42 ac 2a 8d c2 88 b4 77 a7 27 ].....B.*....w.' 00b0 5e 21 c8 75 a1 c8 d3 e2 d7 3f 7e 90 c1 08 39 19 ^!.u.....?~...9. 00c0 5b aa 46 d7 eb 49 cc 61 8e 18 6e f0 6e 02 96 72 [.F..I.a..n.n..r 00d0 1e 79 43 2a 5a 3e 68 1d 4d a6 5c 64 c0 70 ca 4d .yC*Z>h.M.\d.p.M 00e0 8f eb 29 b2 70 ad dd 27 4c fd e9 e6 8d 37 07 16 ..).p..'L....7.. 00f0 6f e6 aa 58 49 b4 81 41 d5 8a 14 99 86 25 6a 40 o..XI..A.....%j@ 0100 24 49 a7 ef ce f4 d1 8a 4c 12 a2 d4 01 41 dd a3 $I......L....A.. 0110 5b fc 65 7b 50 3b 2d be 28 f2 04 46 fe b0 d2 b7 [.e{P;-.(..F.... 0120 c8 e3 d0 69 73 2f 1d 10 ae 80 5e 0d 7b c3 4a 8d ...is/....^.{.J. 0130 ab 99 8a 67 54 80 dd 65 33 22 99 31 e2 9f 3a 0c ...gT..e3".1..:. 0140 5d 28 83 ef 94 1d e9 b2 0c 20 da e2 87 49 69 85 ](....... ...Ii. 0150 92 ea .. Frame 9 (106 bytes on wire, 106 bytes captured) Arrival Time: Sep 14, 2004 14:14:43.797806000 Time delta from previous packet: 0.009487000 seconds Time since reference or first frame: 0.207016000 seconds Frame Number: 9 Packet Length: 106 bytes Capture Length: 106 bytes Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:00:d1:ed:e3:ad Destination: 00:00:d1:ed:e3:ad (00:00:d1:ed:e3:ad) Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Type: IP (0x0800) Frame check sequence: 0x81a3ccff (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.141 (165.227.249.141) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 88 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfbc5 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.141 (165.227.249.141) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 68 Checksum: 0xd8c2 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x8A9E8AAD7E720802 Responder cookie: 0xCC1F47C47E28914C Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x63CFC6BC Length: 60 Encrypted payload (32 bytes) 0000 00 00 d1 ed e3 ad 00 0c 29 fc 0c 9f 08 00 45 00 ........).....E. 0010 00 58 00 00 40 00 40 11 fb c5 a5 e3 f9 7a a5 e3 .X..@.@......z.. 0020 f9 8d 01 f4 01 f4 00 44 d8 c2 8a 9e 8a ad 7e 72 .......D......~r 0030 08 02 cc 1f 47 c4 7e 28 91 4c 08 10 20 01 63 cf ....G.~(.L.. .c. 0040 c6 bc 00 00 00 3c a2 6a dd db ac aa d1 7c 52 51 .....<.j.....|RQ 0050 22 b0 8e 6d b3 14 ac 99 a9 84 5d 1b f7 34 6e 55 "..m......]..4nU 0060 e1 c1 c4 5d 5e 23 81 a3 cc ff ...]^#.... Frame 10 (106 bytes on wire, 106 bytes captured) Arrival Time: Sep 14, 2004 14:14:43.908629000 Time delta from previous packet: 0.110823000 seconds Time since reference or first frame: 0.317839000 seconds Frame Number: 10 Packet Length: 106 bytes Capture Length: 106 bytes Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:00:d1:ed:e3:ad Destination: 00:00:d1:ed:e3:ad (00:00:d1:ed:e3:ad) Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Type: IP (0x0800) Frame check sequence: 0x81a3ccff (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.141 (165.227.249.141) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 88 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfbc5 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.141 (165.227.249.141) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 68 Checksum: 0xd8c2 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x8A9E8AAD7E720802 Responder cookie: 0xCC1F47C47E28914C Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x63CFC6BC Length: 60 Encrypted payload (32 bytes) 0000 00 00 d1 ed e3 ad 00 0c 29 fc 0c 9f 08 00 45 00 ........).....E. 0010 00 58 00 00 40 00 40 11 fb c5 a5 e3 f9 7a a5 e3 .X..@.@......z.. 0020 f9 8d 01 f4 01 f4 00 44 d8 c2 8a 9e 8a ad 7e 72 .......D......~r 0030 08 02 cc 1f 47 c4 7e 28 91 4c 08 10 20 01 63 cf ....G.~(.L.. .c. 0040 c6 bc 00 00 00 3c a2 6a dd db ac aa d1 7c 52 51 .....<.j.....|RQ 0050 22 b0 8e 6d b3 14 ac 99 a9 84 5d 1b f7 34 6e 55 "..m......]..4nU 0060 e1 c1 c4 5d 5e 23 81 a3 cc ff ...]^#.... Frame 11 (106 bytes on wire, 106 bytes captured) Arrival Time: Sep 14, 2004 14:14:44.017736000 Time delta from previous packet: 0.109107000 seconds Time since reference or first frame: 0.426946000 seconds Frame Number: 11 Packet Length: 106 bytes Capture Length: 106 bytes Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:00:d1:ed:e3:ad Destination: 00:00:d1:ed:e3:ad (00:00:d1:ed:e3:ad) Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Type: IP (0x0800) Frame check sequence: 0x81a3ccff (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.141 (165.227.249.141) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 88 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfbc5 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.141 (165.227.249.141) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 68 Checksum: 0xd8c2 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x8A9E8AAD7E720802 Responder cookie: 0xCC1F47C47E28914C Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x63CFC6BC Length: 60 Encrypted payload (32 bytes) 0000 00 00 d1 ed e3 ad 00 0c 29 fc 0c 9f 08 00 45 00 ........).....E. 0010 00 58 00 00 40 00 40 11 fb c5 a5 e3 f9 7a a5 e3 .X..@.@......z.. 0020 f9 8d 01 f4 01 f4 00 44 d8 c2 8a 9e 8a ad 7e 72 .......D......~r 0030 08 02 cc 1f 47 c4 7e 28 91 4c 08 10 20 01 63 cf ....G.~(.L.. .c. 0040 c6 bc 00 00 00 3c a2 6a dd db ac aa d1 7c 52 51 .....<.j.....|RQ 0050 22 b0 8e 6d b3 14 ac 99 a9 84 5d 1b f7 34 6e 55 "..m......]..4nU 0060 e1 c1 c4 5d 5e 23 81 a3 cc ff ...]^#.... Frame 12 (130 bytes on wire, 130 bytes captured) Arrival Time: Sep 14, 2004 14:14:44.117310000 Time delta from previous packet: 0.099574000 seconds Time since reference or first frame: 0.526520000 seconds Frame Number: 12 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:50:fc:84:d2:ec Destination: 00:50:fc:84:d2:ec (00:50:fc:84:d2:ec) Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Type: IP (0x0800) Frame check sequence: 0x198a21d7 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.141 (165.227.249.141) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0019 (25) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x7c73 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.141 (165.227.249.141) Encapsulating Security Payload SPI: 0x108a5e76 Sequence: 1 Data (84 bytes) 0000 00 50 fc 84 d2 ec 00 0c 29 fc 0c 9f 08 00 45 00 .P......).....E. 0010 00 70 00 19 00 00 ff 32 7c 73 a5 e3 f9 7a a5 e3 .p.....2|s...z.. 0020 f9 8d 10 8a 5e 76 00 00 00 01 af fb 00 81 6d 47 ....^v........mG 0030 40 ef b9 cd c3 c2 5a bb 87 bb 7f a2 37 99 6b 43 @.....Z.....7.kC 0040 aa 34 d6 43 ee 45 93 d2 76 3e de e6 fe 3f 5b fc .4.C.E..v>...?[. 0050 a9 f0 3f 1b b5 b6 fe 63 79 4b 09 b2 c7 25 82 66 ..?....cyK...%.f 0060 20 01 e3 04 b6 0c a6 c6 eb 69 4f 8b ed d3 76 6e ........iO...vn 0070 32 83 bc c5 4d d2 00 73 77 b2 e3 3a 9c 8e 19 8a 2...M..sw..:.... 0080 21 d7 !. Frame 13 (130 bytes on wire, 130 bytes captured) Arrival Time: Sep 14, 2004 14:14:44.117947000 Time delta from previous packet: 0.000637000 seconds Time since reference or first frame: 0.527157000 seconds Frame Number: 13 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:50:fc:84:d2:ec, Dst: 00:00:d1:ed:e3:ad Destination: 00:00:d1:ed:e3:ad (00:00:d1:ed:e3:ad) Source: 00:50:fc:84:d2:ec (00:50:fc:84:d2:ec) Type: IP (0x0800) Frame check sequence: 0xd0393e3d (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.141 (165.227.249.141) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0019 (25) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 254 Protocol: ESP (0x32) Header checksum: 0x7d73 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.141 (165.227.249.141) Encapsulating Security Payload SPI: 0x108a5e76 Sequence: 1 Data (84 bytes) 0000 00 00 d1 ed e3 ad 00 50 fc 84 d2 ec 08 00 45 00 .......P......E. 0010 00 70 00 19 00 00 fe 32 7d 73 a5 e3 f9 7a a5 e3 .p.....2}s...z.. 0020 f9 8d 10 8a 5e 76 00 00 00 01 af fb 00 81 6d 47 ....^v........mG 0030 40 ef b9 cd c3 c2 5a bb 87 bb 7f a2 37 99 6b 43 @.....Z.....7.kC 0040 aa 34 d6 43 ee 45 93 d2 76 3e de e6 fe 3f 5b fc .4.C.E..v>...?[. 0050 a9 f0 3f 1b b5 b6 fe 63 79 4b 09 b2 c7 25 82 66 ..?....cyK...%.f 0060 20 01 e3 04 b6 0c a6 c6 eb 69 4f 8b ed d3 76 6e ........iO...vn 0070 32 83 bc c5 4d d2 00 73 77 b2 e3 3a 9c 8e d0 39 2...M..sw..:...9 0080 3e 3d >= Frame 14 (130 bytes on wire, 130 bytes captured) Arrival Time: Sep 14, 2004 14:14:44.122128000 Time delta from previous packet: 0.004181000 seconds Time since reference or first frame: 0.531338000 seconds Frame Number: 14 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:00:d1:ed:e3:ad, Dst: 00:0c:29:fc:0c:9f Destination: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Source: 00:00:d1:ed:e3:ad (00:00:d1:ed:e3:ad) Type: IP (0x0800) Frame check sequence: 0x726a451f (correct) Internet Protocol, Src Addr: 165.227.249.141 (165.227.249.141), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0000 (0) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b8c (correct) Source: 165.227.249.141 (165.227.249.141) Destination: 165.227.249.122 (165.227.249.122) Encapsulating Security Payload SPI: 0x35a1f249 Sequence: 2 Data (84 bytes) 0000 00 0c 29 fc 0c 9f 00 00 d1 ed e3 ad 08 00 45 00 ..)...........E. 0010 00 70 00 00 00 00 f0 32 8b 8c a5 e3 f9 8d a5 e3 .p.....2........ 0020 f9 7a 35 a1 f2 49 00 00 00 02 bb a1 ee 8a 79 eb .z5..I........y. 0030 b6 64 40 c2 6a 09 73 fc 3a 26 8c 65 93 2d 3b 8a .d@.j.s.:&.e.-;. 0040 b9 f5 bb 5e 6f 1d dc b7 55 9f 53 41 f9 64 33 93 ...^o...U.SA.d3. 0050 4a 39 b1 91 f9 28 ad 4a 94 a3 71 6e 0b 05 83 cc J9...(.J..qn.... 0060 70 a7 2e e1 72 cb 76 3d 22 04 40 f9 f2 22 72 3f p...r.v=".@.."r? 0070 c2 6a 51 cc 0d ea d2 2a a1 d8 c2 90 bd 87 72 6a .jQ....*......rj 0080 45 1f E. Frame 15 (130 bytes on wire, 130 bytes captured) Arrival Time: Sep 14, 2004 14:14:44.531023000 Time delta from previous packet: 0.408895000 seconds Time since reference or first frame: 0.940233000 seconds Frame Number: 15 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:50:fc:84:d2:ec Destination: 00:50:fc:84:d2:ec (00:50:fc:84:d2:ec) Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Type: IP (0x0800) Frame check sequence: 0xb897dcc7 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.141 (165.227.249.141) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x001a (26) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x7c72 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.141 (165.227.249.141) Encapsulating Security Payload SPI: 0x108a5e76 Sequence: 2 Data (84 bytes) 0000 00 50 fc 84 d2 ec 00 0c 29 fc 0c 9f 08 00 45 00 .P......).....E. 0010 00 70 00 1a 00 00 ff 32 7c 72 a5 e3 f9 7a a5 e3 .p.....2|r...z.. 0020 f9 8d 10 8a 5e 76 00 00 00 02 4f 8b ed d3 76 6e ....^v....O...vn 0030 32 83 71 fc 1b 2f a9 51 3d 5a 12 a7 5f 8c f2 40 2.q../.Q=Z.._..@ 0040 ed 53 b7 8e b9 08 92 72 db a3 06 b4 5f f7 ed fc .S.....r...._... 0050 26 1e 83 fc ee 70 af dd 50 ce bb 97 eb 31 51 4a &....p..P....1QJ 0060 a5 31 ba e0 66 e5 57 d7 d7 a4 00 34 f4 8f 4d 32 .1..f.W....4..M2 0070 c7 4f 49 37 5c 4b 3d 77 c4 15 69 2f be 4b b8 97 .OI7\K=w..i/.K.. 0080 dc c7 .. Frame 16 (130 bytes on wire, 130 bytes captured) Arrival Time: Sep 14, 2004 14:14:44.531240000 Time delta from previous packet: 0.000217000 seconds Time since reference or first frame: 0.940450000 seconds Frame Number: 16 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:50:fc:84:d2:ec, Dst: 00:00:d1:ed:e3:ad Destination: 00:00:d1:ed:e3:ad (00:00:d1:ed:e3:ad) Source: 00:50:fc:84:d2:ec (00:50:fc:84:d2:ec) Type: IP (0x0800) Frame check sequence: 0x7124c32d (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.141 (165.227.249.141) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x001a (26) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 254 Protocol: ESP (0x32) Header checksum: 0x7d72 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.141 (165.227.249.141) Encapsulating Security Payload SPI: 0x108a5e76 Sequence: 2 Data (84 bytes) 0000 00 00 d1 ed e3 ad 00 50 fc 84 d2 ec 08 00 45 00 .......P......E. 0010 00 70 00 1a 00 00 fe 32 7d 72 a5 e3 f9 7a a5 e3 .p.....2}r...z.. 0020 f9 8d 10 8a 5e 76 00 00 00 02 4f 8b ed d3 76 6e ....^v....O...vn 0030 32 83 71 fc 1b 2f a9 51 3d 5a 12 a7 5f 8c f2 40 2.q../.Q=Z.._..@ 0040 ed 53 b7 8e b9 08 92 72 db a3 06 b4 5f f7 ed fc .S.....r...._... 0050 26 1e 83 fc ee 70 af dd 50 ce bb 97 eb 31 51 4a &....p..P....1QJ 0060 a5 31 ba e0 66 e5 57 d7 d7 a4 00 34 f4 8f 4d 32 .1..f.W....4..M2 0070 c7 4f 49 37 5c 4b 3d 77 c4 15 69 2f be 4b 71 24 .OI7\K=w..i/.Kq$ 0080 c3 2d .- Frame 17 (130 bytes on wire, 130 bytes captured) Arrival Time: Sep 14, 2004 14:14:44.531813000 Time delta from previous packet: 0.000573000 seconds Time since reference or first frame: 0.941023000 seconds Frame Number: 17 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:00:d1:ed:e3:ad, Dst: 00:0c:29:fc:0c:9f Destination: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Source: 00:00:d1:ed:e3:ad (00:00:d1:ed:e3:ad) Type: IP (0x0800) Frame check sequence: 0xd67d17f9 (correct) Internet Protocol, Src Addr: 165.227.249.141 (165.227.249.141), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0001 (1) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b8b (correct) Source: 165.227.249.141 (165.227.249.141) Destination: 165.227.249.122 (165.227.249.122) Encapsulating Security Payload SPI: 0x35a1f249 Sequence: 3 Data (84 bytes) 0000 00 0c 29 fc 0c 9f 00 00 d1 ed e3 ad 08 00 45 00 ..)...........E. 0010 00 70 00 01 00 00 f0 32 8b 8b a5 e3 f9 8d a5 e3 .p.....2........ 0020 f9 7a 35 a1 f2 49 00 00 00 03 8c 6f 04 79 10 87 .z5..I.....o.y.. 0030 8e ab 14 c0 b9 f4 3b c0 87 46 59 c8 f4 57 1c 08 ......;..FY..W.. 0040 9b 71 bb 46 c6 08 a0 2f 37 ff fe 3b 6b 35 5f 17 .q.F.../7..;k5_. 0050 cb 84 92 37 f6 6b 21 a5 48 7e 18 2c c7 03 de f3 ...7.k!.H~.,.... 0060 9c 87 3e 14 6e cd 93 15 c5 c7 ec 5c 7f 37 fb 2b ..>.n......\.7.+ 0070 49 87 22 8b 9a fc 11 75 7f 70 f7 74 d4 0b d6 7d I."....u.p.t...} 0080 17 f9 .. Frame 18 (130 bytes on wire, 130 bytes captured) Arrival Time: Sep 14, 2004 14:14:45.538913000 Time delta from previous packet: 1.007100000 seconds Time since reference or first frame: 1.948123000 seconds Frame Number: 18 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:50:fc:84:d2:ec Destination: 00:50:fc:84:d2:ec (00:50:fc:84:d2:ec) Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Type: IP (0x0800) Frame check sequence: 0x5df71c39 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.141 (165.227.249.141) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x001b (27) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x7c71 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.141 (165.227.249.141) Encapsulating Security Payload SPI: 0x108a5e76 Sequence: 3 Data (84 bytes) 0000 00 50 fc 84 d2 ec 00 0c 29 fc 0c 9f 08 00 45 00 .P......).....E. 0010 00 70 00 1b 00 00 ff 32 7c 71 a5 e3 f9 7a a5 e3 .p.....2|q...z.. 0020 f9 8d 10 8a 5e 76 00 00 00 03 00 34 f4 8f 4d 32 ....^v.....4..M2 0030 c7 4f 44 30 46 6e 9b 5d b9 47 3c 3c 28 c4 91 6d .OD0Fn.].G<<(..m 0040 7a 5b 83 c8 9d 0c 1e 88 d9 83 dc c5 37 18 3d dd z[..........7.=. 0050 44 7a a3 f2 2c de ea 83 b0 a6 08 25 9e de 20 75 Dz..,......%.. u 0060 84 4f 9a d5 d4 3d 9e 9d 76 18 e3 2b dc 8c 3c 17 .O...=..v..+..<. 0070 c2 ba 9a 83 f4 a5 86 bd 39 a3 63 3d fb 70 5d f7 ........9.c=.p]. 0080 1c 39 .9 Frame 19 (130 bytes on wire, 130 bytes captured) Arrival Time: Sep 14, 2004 14:14:45.539165000 Time delta from previous packet: 0.000252000 seconds Time since reference or first frame: 1.948375000 seconds Frame Number: 19 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:50:fc:84:d2:ec, Dst: 00:00:d1:ed:e3:ad Destination: 00:00:d1:ed:e3:ad (00:00:d1:ed:e3:ad) Source: 00:50:fc:84:d2:ec (00:50:fc:84:d2:ec) Type: IP (0x0800) Frame check sequence: 0x944403d3 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.141 (165.227.249.141) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x001b (27) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 254 Protocol: ESP (0x32) Header checksum: 0x7d71 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.141 (165.227.249.141) Encapsulating Security Payload SPI: 0x108a5e76 Sequence: 3 Data (84 bytes) 0000 00 00 d1 ed e3 ad 00 50 fc 84 d2 ec 08 00 45 00 .......P......E. 0010 00 70 00 1b 00 00 fe 32 7d 71 a5 e3 f9 7a a5 e3 .p.....2}q...z.. 0020 f9 8d 10 8a 5e 76 00 00 00 03 00 34 f4 8f 4d 32 ....^v.....4..M2 0030 c7 4f 44 30 46 6e 9b 5d b9 47 3c 3c 28 c4 91 6d .OD0Fn.].G<<(..m 0040 7a 5b 83 c8 9d 0c 1e 88 d9 83 dc c5 37 18 3d dd z[..........7.=. 0050 44 7a a3 f2 2c de ea 83 b0 a6 08 25 9e de 20 75 Dz..,......%.. u 0060 84 4f 9a d5 d4 3d 9e 9d 76 18 e3 2b dc 8c 3c 17 .O...=..v..+..<. 0070 c2 ba 9a 83 f4 a5 86 bd 39 a3 63 3d fb 70 94 44 ........9.c=.p.D 0080 03 d3 .. Frame 20 (130 bytes on wire, 130 bytes captured) Arrival Time: Sep 14, 2004 14:14:45.539741000 Time delta from previous packet: 0.000576000 seconds Time since reference or first frame: 1.948951000 seconds Frame Number: 20 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:00:d1:ed:e3:ad, Dst: 00:0c:29:fc:0c:9f Destination: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Source: 00:00:d1:ed:e3:ad (00:00:d1:ed:e3:ad) Type: IP (0x0800) Frame check sequence: 0x552c2240 (correct) Internet Protocol, Src Addr: 165.227.249.141 (165.227.249.141), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0002 (2) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b8a (correct) Source: 165.227.249.141 (165.227.249.141) Destination: 165.227.249.122 (165.227.249.122) Encapsulating Security Payload SPI: 0x35a1f249 Sequence: 4 Data (84 bytes) 0000 00 0c 29 fc 0c 9f 00 00 d1 ed e3 ad 08 00 45 00 ..)...........E. 0010 00 70 00 02 00 00 f0 32 8b 8a a5 e3 f9 8d a5 e3 .p.....2........ 0020 f9 7a 35 a1 f2 49 00 00 00 04 02 d4 5b b7 2a 3c .z5..I......[.*< 0030 18 ed 09 54 6d b2 b0 12 c2 76 73 88 49 aa c1 3f ...Tm....vs.I..? 0040 66 36 d0 48 12 e3 cf 2a c7 d3 e3 bb a0 6b 6e a9 f6.H...*.....kn. 0050 2b e7 2b 52 0e d9 00 4e e4 09 a9 0d 56 fc 96 80 +.+R...N....V... 0060 d3 c1 9a 34 52 a3 35 61 4a a9 32 79 c3 a9 75 80 ...4R.5aJ.2y..u. 0070 3e 22 e0 92 8f b1 c6 eb c8 d0 1a 97 a6 32 55 2c >"...........2U, 0080 22 40 "@ Frame 21 (130 bytes on wire, 130 bytes captured) Arrival Time: Sep 14, 2004 14:14:46.546467000 Time delta from previous packet: 1.006726000 seconds Time since reference or first frame: 2.955677000 seconds Frame Number: 21 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:50:fc:84:d2:ec Destination: 00:50:fc:84:d2:ec (00:50:fc:84:d2:ec) Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Type: IP (0x0800) Frame check sequence: 0xdffd5c5c (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.141 (165.227.249.141) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x001c (28) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x7c70 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.141 (165.227.249.141) Encapsulating Security Payload SPI: 0x108a5e76 Sequence: 4 Data (84 bytes) 0000 00 50 fc 84 d2 ec 00 0c 29 fc 0c 9f 08 00 45 00 .P......).....E. 0010 00 70 00 1c 00 00 ff 32 7c 70 a5 e3 f9 7a a5 e3 .p.....2|p...z.. 0020 f9 8d 10 8a 5e 76 00 00 00 04 e3 2b dc 8c 3c 17 ....^v.....+..<. 0030 c2 ba 71 35 76 c8 e9 d5 d6 4b 43 06 37 6c 3d 6a ..q5v....KC.7l=j 0040 2f 2f 52 07 0a d2 16 53 00 f6 01 a4 1e 0d 78 91 //R....S......x. 0050 8c 56 85 c0 ff 9d b3 a8 0f 17 89 b9 30 ae c8 9e .V..........0... 0060 94 cb cd 48 65 9a d9 6d e9 3e 3f 96 73 14 0a dc ...He..m.>?.s... 0070 da fb 5c 07 e6 b6 d5 ab aa 3a 79 80 8b 3d df fd ..\......:y..=.. 0080 5c 5c \\ Frame 22 (130 bytes on wire, 130 bytes captured) Arrival Time: Sep 14, 2004 14:14:46.546686000 Time delta from previous packet: 0.000219000 seconds Time since reference or first frame: 2.955896000 seconds Frame Number: 22 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:50:fc:84:d2:ec, Dst: 00:00:d1:ed:e3:ad Destination: 00:00:d1:ed:e3:ad (00:00:d1:ed:e3:ad) Source: 00:50:fc:84:d2:ec (00:50:fc:84:d2:ec) Type: IP (0x0800) Frame check sequence: 0x164e43b6 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.141 (165.227.249.141) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x001c (28) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 254 Protocol: ESP (0x32) Header checksum: 0x7d70 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.141 (165.227.249.141) Encapsulating Security Payload SPI: 0x108a5e76 Sequence: 4 Data (84 bytes) 0000 00 00 d1 ed e3 ad 00 50 fc 84 d2 ec 08 00 45 00 .......P......E. 0010 00 70 00 1c 00 00 fe 32 7d 70 a5 e3 f9 7a a5 e3 .p.....2}p...z.. 0020 f9 8d 10 8a 5e 76 00 00 00 04 e3 2b dc 8c 3c 17 ....^v.....+..<. 0030 c2 ba 71 35 76 c8 e9 d5 d6 4b 43 06 37 6c 3d 6a ..q5v....KC.7l=j 0040 2f 2f 52 07 0a d2 16 53 00 f6 01 a4 1e 0d 78 91 //R....S......x. 0050 8c 56 85 c0 ff 9d b3 a8 0f 17 89 b9 30 ae c8 9e .V..........0... 0060 94 cb cd 48 65 9a d9 6d e9 3e 3f 96 73 14 0a dc ...He..m.>?.s... 0070 da fb 5c 07 e6 b6 d5 ab aa 3a 79 80 8b 3d 16 4e ..\......:y..=.N 0080 43 b6 C. Frame 23 (130 bytes on wire, 130 bytes captured) Arrival Time: Sep 14, 2004 14:14:46.547163000 Time delta from previous packet: 0.000477000 seconds Time since reference or first frame: 2.956373000 seconds Frame Number: 23 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:00:d1:ed:e3:ad, Dst: 00:0c:29:fc:0c:9f Destination: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Source: 00:00:d1:ed:e3:ad (00:00:d1:ed:e3:ad) Type: IP (0x0800) Frame check sequence: 0x341a283c (correct) Internet Protocol, Src Addr: 165.227.249.141 (165.227.249.141), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0003 (3) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b89 (correct) Source: 165.227.249.141 (165.227.249.141) Destination: 165.227.249.122 (165.227.249.122) Encapsulating Security Payload SPI: 0x35a1f249 Sequence: 5 Data (84 bytes) 0000 00 0c 29 fc 0c 9f 00 00 d1 ed e3 ad 08 00 45 00 ..)...........E. 0010 00 70 00 03 00 00 f0 32 8b 89 a5 e3 f9 8d a5 e3 .p.....2........ 0020 f9 7a 35 a1 f2 49 00 00 00 05 c8 6d a5 d9 79 d9 .z5..I.....m..y. 0030 45 33 bd cb 78 f0 3d e2 b3 64 84 c5 32 55 01 58 E3..x.=..d..2U.X 0040 5a 42 37 6f 63 38 52 60 fe c7 47 39 55 5a 38 6c ZB7oc8R`..G9UZ8l 0050 82 f1 5f 57 df d1 ea 13 01 08 e1 1c 28 24 ea 4d .._W........($.M 0060 a1 ef b1 d7 0f 9d 53 ff c6 a0 2b 45 58 e7 0d 8d ......S...+EX... 0070 3c d0 64 a8 e8 6a 63 a7 22 8a 23 13 1c b7 34 1a <.d..jc.".#...4. 0080 28 3c (<