Frame 1 (174 bytes on wire, 174 bytes captured) Arrival Time: Sep 9, 2004 12:04:23.805198000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 174 bytes Capture Length: 174 bytes Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:0f:3d:10:fc:2c Destination: 00:0f:3d:10:fc:2c (00:0f:3d:10:fc:2c) Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Type: IP (0x0800) Frame check sequence: 0x0685d1f0 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.142 (165.227.249.142) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 156 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb80 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.142 (165.227.249.142) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 136 Checksum: 0x46f3 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x8A9E8AAD7E720802 Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 128 Security Association payload Next payload: Vendor ID (13) Length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 44 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 36 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: NONE (0) Length: 44 Vendor ID: Check Point Check Point Product: VPN-1 Version: NG with Application Intelligence R55 0000 00 0f 3d 10 fc 2c 00 0c 29 fc 0c 9f 08 00 45 00 ..=..,..).....E. 0010 00 9c 00 00 40 00 40 11 fb 80 a5 e3 f9 7a a5 e3 ....@.@......z.. 0020 f9 8e 01 f4 01 f4 00 88 46 f3 8a 9e 8a ad 7e 72 ........F.....~r 0030 08 02 00 00 00 00 00 00 00 00 01 10 02 00 00 00 ................ 0040 00 00 00 00 00 80 0d 00 00 38 00 00 00 01 00 00 .........8...... 0050 00 01 00 00 00 2c 01 01 00 01 00 00 00 24 01 01 .....,.......$.. 0060 00 00 80 01 00 05 80 02 00 02 80 03 00 01 80 04 ................ 0070 00 02 80 0b 00 01 00 0c 00 04 00 00 70 80 00 00 ............p... 0080 00 2c f4 ed 19 e0 c1 14 eb 51 6f aa ac 0e e3 7d .,.......Qo....} 0090 af 28 07 b4 38 1f 00 00 00 01 00 00 13 8d 00 00 .(..8........... 00a0 00 00 00 00 00 00 18 80 00 00 06 85 d1 f0 .............. Frame 2 (270 bytes on wire, 270 bytes captured) Arrival Time: Sep 9, 2004 12:04:23.811051000 Time delta from previous packet: 0.005853000 seconds Time since reference or first frame: 0.005853000 seconds Frame Number: 2 Packet Length: 270 bytes Capture Length: 270 bytes Ethernet II, Src: 00:0f:3d:10:fc:2c, Dst: 00:0c:29:fc:0c:9f Destination: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Source: 00:0f:3d:10:fc:2c (00:0f:3d:10:fc:2c) Type: IP (0x0800) Frame check sequence: 0x3d719573 (correct) Internet Protocol, Src Addr: 165.227.249.142 (165.227.249.142), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 252 Identification: 0x4952 (18770) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: UDP (0x11) Header checksum: 0x32ce (correct) Source: 165.227.249.142 (165.227.249.142) Destination: 165.227.249.122 (165.227.249.122) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 232 Checksum: 0x2153 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x8A9E8AAD7E720802 Responder cookie: 0xA136119BE4A89423 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 224 Security Association payload Next payload: Vendor ID (13) Length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 44 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 36 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-dpd-00.txt Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-stenberg-ipsec-nat-traversal-01 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-stenberg-ipsec-nat-traversal-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-03 0000 00 0c 29 fc 0c 9f 00 0f 3d 10 fc 2c 08 00 45 00 ..).....=..,..E. 0010 00 fc 49 52 00 00 ff 11 32 ce a5 e3 f9 8e a5 e3 ..IR....2....... 0020 f9 7a 01 f4 01 f4 00 e8 21 53 8a 9e 8a ad 7e 72 .z......!S....~r 0030 08 02 a1 36 11 9b e4 a8 94 23 01 10 02 00 00 00 ...6.....#...... 0040 00 00 00 00 00 e0 0d 00 00 38 00 00 00 01 00 00 .........8...... 0050 00 01 00 00 00 2c 01 01 00 01 00 00 00 24 01 01 .....,.......$.. 0060 00 00 80 01 00 05 80 02 00 02 80 03 00 01 80 04 ................ 0070 00 02 80 0b 00 01 00 0c 00 04 00 00 70 80 0d 00 ............p... 0080 00 14 af ca d7 13 68 a1 f1 c9 6b 86 96 fc 77 57 ......h...k...wW 0090 01 00 0d 00 00 14 27 ba b5 dc 01 ea 07 60 ea 4e ......'......`.N 00a0 31 90 ac 27 c0 d0 0d 00 00 14 61 05 c4 22 e7 68 1..'......a..".h 00b0 47 e4 3f 96 84 80 12 92 ae cd 0d 00 00 14 44 85 G.?...........D. 00c0 15 2d 18 b6 bb cd 0b e8 a8 46 95 79 dd cc 0d 00 .-.......F.y.... 00d0 00 14 cd 60 46 43 35 df 21 f8 7c fd b2 fc 68 b6 ...`FC5.!.|...h. 00e0 a4 48 0d 00 00 14 90 cb 80 91 3e bb 69 6e 08 63 .H........>.in.c 00f0 81 b5 ec 42 7b 1f 00 00 00 14 7d 94 19 a6 53 10 ...B{.....}...S. 0100 ca 6f 2c 17 9d 92 15 52 9d 56 3d 71 95 73 .o,....R.V=q.s Frame 3 (230 bytes on wire, 230 bytes captured) Arrival Time: Sep 9, 2004 12:04:23.822883000 Time delta from previous packet: 0.011832000 seconds Time since reference or first frame: 0.017685000 seconds Frame Number: 3 Packet Length: 230 bytes Capture Length: 230 bytes Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:0f:3d:10:fc:2c Destination: 00:0f:3d:10:fc:2c (00:0f:3d:10:fc:2c) Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Type: IP (0x0800) Frame check sequence: 0xe70c2121 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.142 (165.227.249.142) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 212 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb48 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.142 (165.227.249.142) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 192 Checksum: 0x3306 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x8A9E8AAD7E720802 Responder cookie: 0xA136119BE4A89423 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 184 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 24 Nonce Data 0000 00 0f 3d 10 fc 2c 00 0c 29 fc 0c 9f 08 00 45 00 ..=..,..).....E. 0010 00 d4 00 00 40 00 40 11 fb 48 a5 e3 f9 7a a5 e3 ....@.@..H...z.. 0020 f9 8e 01 f4 01 f4 00 c0 33 06 8a 9e 8a ad 7e 72 ........3.....~r 0030 08 02 a1 36 11 9b e4 a8 94 23 04 10 02 00 00 00 ...6.....#...... 0040 00 00 00 00 00 b8 0a 00 00 84 e9 e4 da df 68 47 ..............hG 0050 ed 0e ef 38 00 3e 9d 12 45 17 a6 9f 92 4d e7 8b ...8.>..E....M.. 0060 9b b0 a1 b4 f4 56 9a f9 fb ee d1 fd 15 2c 42 2e .....V.......,B. 0070 aa d7 98 af 80 ca aa 37 1c 3f 86 2e 81 a2 9c 97 .......7.?...... 0080 36 7a d1 e5 e6 f9 29 9b a3 ef 4f 9c cf b9 8f 58 6z....)...O....X 0090 d8 ee d5 e4 bf 83 a3 14 25 72 c4 c8 ae 07 80 5f ........%r....._ 00a0 bc 1b 8c 5e 20 79 12 7b 2b 29 f5 e6 20 79 48 9c ...^ y.{+).. yH. 00b0 61 de ed 45 9a d2 08 40 76 34 2a 6b 4b 79 83 5f a..E...@v4*kKy._ 00c0 80 ab 59 39 7a 6e 24 64 7b da 00 00 00 18 b2 c6 ..Y9zn$d{....... 00d0 74 62 72 bc 18 83 5f 54 79 2c 71 66 ac 0c 37 ad tbr..._Ty,qf..7. 00e0 b1 08 e7 0c 21 21 ....!! Frame 4 (226 bytes on wire, 226 bytes captured) Arrival Time: Sep 9, 2004 12:04:24.119211000 Time delta from previous packet: 0.296328000 seconds Time since reference or first frame: 0.314013000 seconds Frame Number: 4 Packet Length: 226 bytes Capture Length: 226 bytes Ethernet II, Src: 00:0f:3d:10:fc:2c, Dst: 00:0c:29:fc:0c:9f Destination: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Source: 00:0f:3d:10:fc:2c (00:0f:3d:10:fc:2c) Type: IP (0x0800) Frame check sequence: 0x9d37c3f8 (correct) Internet Protocol, Src Addr: 165.227.249.142 (165.227.249.142), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 208 Identification: 0x6a52 (27218) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: UDP (0x11) Header checksum: 0x11fa (correct) Source: 165.227.249.142 (165.227.249.142) Destination: 165.227.249.122 (165.227.249.122) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 188 Checksum: 0x11be (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x8A9E8AAD7E720802 Responder cookie: 0xA136119BE4A89423 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 180 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 20 Nonce Data 0000 00 0c 29 fc 0c 9f 00 0f 3d 10 fc 2c 08 00 45 00 ..).....=..,..E. 0010 00 d0 6a 52 00 00 ff 11 11 fa a5 e3 f9 8e a5 e3 ..jR............ 0020 f9 7a 01 f4 01 f4 00 bc 11 be 8a 9e 8a ad 7e 72 .z............~r 0030 08 02 a1 36 11 9b e4 a8 94 23 04 10 02 00 00 00 ...6.....#...... 0040 00 00 00 00 00 b4 0a 00 00 84 3a d0 73 1b 40 bb ..........:.s.@. 0050 82 30 93 d8 75 62 e7 20 f0 ae 01 2d b2 52 41 cc .0..ub. ...-.RA. 0060 dd ce 6c 0d 84 87 04 19 4a 16 83 73 18 e7 5e bc ..l.....J..s..^. 0070 ad ec 88 f6 cf f3 d4 be f0 23 0a 22 16 95 2e 3c .........#."...< 0080 7e c5 7f 25 f5 27 fa d8 28 99 9f b5 e9 49 c1 37 ~..%.'..(....I.7 0090 65 f0 e3 aa 55 8f 29 63 9e ab 4b cd 24 0f 8b c1 e...U.)c..K.$... 00a0 e9 80 86 79 7a 34 80 9a 76 5d 48 8d 41 57 c8 ab ...yz4..v]H.AW.. 00b0 e8 c8 12 c8 0e d9 f8 eb d1 bd 17 1f 47 7a 7e a5 ............Gz~. 00c0 da f6 53 43 da c2 1a dc 42 2c 00 00 00 14 f5 d8 ..SC....B,...... 00d0 e7 ae 22 4d ed 35 ea 40 c8 26 e9 57 bf 51 9d 37 .."M.5.@.&.W.Q.7 00e0 c3 f8 .. Frame 5 (114 bytes on wire, 114 bytes captured) Arrival Time: Sep 9, 2004 12:04:24.133750000 Time delta from previous packet: 0.014539000 seconds Time since reference or first frame: 0.328552000 seconds Frame Number: 5 Packet Length: 114 bytes Capture Length: 114 bytes Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:0f:3d:10:fc:2c Destination: 00:0f:3d:10:fc:2c (00:0f:3d:10:fc:2c) Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Type: IP (0x0800) Frame check sequence: 0x6f28e895 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.142 (165.227.249.142) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfbbc (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.142 (165.227.249.142) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 76 Checksum: 0xc37a (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x8A9E8AAD7E720802 Responder cookie: 0xA136119BE4A89423 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 68 Encrypted payload (40 bytes) 0000 00 0f 3d 10 fc 2c 00 0c 29 fc 0c 9f 08 00 45 00 ..=..,..).....E. 0010 00 60 00 00 40 00 40 11 fb bc a5 e3 f9 7a a5 e3 .`..@.@......z.. 0020 f9 8e 01 f4 01 f4 00 4c c3 7a 8a 9e 8a ad 7e 72 .......L.z....~r 0030 08 02 a1 36 11 9b e4 a8 94 23 05 10 02 01 00 00 ...6.....#...... 0040 00 00 00 00 00 44 62 6b 12 f5 bb 43 66 1a 0c 7b .....Dbk...Cf..{ 0050 c9 77 cc 38 d0 88 3e 7a e5 03 4e 3c 7d 8e 6f 34 .w.8..>z..N<}.o4 0060 b7 fc 71 8e 25 f9 74 3b 0d ac c9 78 27 9a 6f 28 ..q.%.t;...x'.o( 0070 e8 95 .. Frame 6 (114 bytes on wire, 114 bytes captured) Arrival Time: Sep 9, 2004 12:04:24.140232000 Time delta from previous packet: 0.006482000 seconds Time since reference or first frame: 0.335034000 seconds Frame Number: 6 Packet Length: 114 bytes Capture Length: 114 bytes Ethernet II, Src: 00:0f:3d:10:fc:2c, Dst: 00:0c:29:fc:0c:9f Destination: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Source: 00:0f:3d:10:fc:2c (00:0f:3d:10:fc:2c) Type: IP (0x0800) Frame check sequence: 0xe972c189 (correct) Internet Protocol, Src Addr: 165.227.249.142 (165.227.249.142), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0x7c51 (31825) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: UDP (0x11) Header checksum: 0x006b (correct) Source: 165.227.249.142 (165.227.249.142) Destination: 165.227.249.122 (165.227.249.122) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 76 Checksum: 0xb624 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x8A9E8AAD7E720802 Responder cookie: 0xA136119BE4A89423 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 68 Encrypted payload (40 bytes) 0000 00 0c 29 fc 0c 9f 00 0f 3d 10 fc 2c 08 00 45 00 ..).....=..,..E. 0010 00 60 7c 51 00 00 ff 11 00 6b a5 e3 f9 8e a5 e3 .`|Q.....k...... 0020 f9 7a 01 f4 01 f4 00 4c b6 24 8a 9e 8a ad 7e 72 .z.....L.$....~r 0030 08 02 a1 36 11 9b e4 a8 94 23 05 10 02 01 00 00 ...6.....#...... 0040 00 00 00 00 00 44 92 d2 25 e0 45 4f d4 ed 3d 81 .....D..%.EO..=. 0050 d5 7b 6d b1 34 2c 19 aa a5 7f a7 e9 67 34 1b 2b .{m.4,......g4.+ 0060 91 47 08 71 4a 25 6c 15 90 dc 38 de ac d9 e9 72 .G.qJ%l...8....r 0070 c1 89 .. Frame 7 (346 bytes on wire, 346 bytes captured) Arrival Time: Sep 9, 2004 12:04:24.170908000 Time delta from previous packet: 0.030676000 seconds Time since reference or first frame: 0.365710000 seconds Frame Number: 7 Packet Length: 346 bytes Capture Length: 346 bytes Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:0f:3d:10:fc:2c Destination: 00:0f:3d:10:fc:2c (00:0f:3d:10:fc:2c) Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Type: IP (0x0800) Frame check sequence: 0xa51ec8e6 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.142 (165.227.249.142) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 328 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfad4 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.142 (165.227.249.142) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 308 Checksum: 0x9c8f (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x8A9E8AAD7E720802 Responder cookie: 0xA136119BE4A89423 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x63CFC6BC Length: 300 Encrypted payload (272 bytes) 0000 00 0f 3d 10 fc 2c 00 0c 29 fc 0c 9f 08 00 45 00 ..=..,..).....E. 0010 01 48 00 00 40 00 40 11 fa d4 a5 e3 f9 7a a5 e3 .H..@.@......z.. 0020 f9 8e 01 f4 01 f4 01 34 9c 8f 8a 9e 8a ad 7e 72 .......4......~r 0030 08 02 a1 36 11 9b e4 a8 94 23 08 10 20 01 63 cf ...6.....#.. .c. 0040 c6 bc 00 00 01 2c b9 36 b5 39 c1 14 40 87 0c 1b .....,.6.9..@... 0050 65 dc 15 17 ff 49 9f e9 0e 13 2d 88 0f 79 5d 67 e....I....-..y]g 0060 b0 d7 1b 53 ba bd 3a a4 09 b0 7a 5d cd bd c0 96 ...S..:...z].... 0070 da 92 7f 32 f6 b0 48 3c e3 7f 91 2e 0a f2 e4 b2 ...2..H<........ 0080 51 a6 ce e9 65 c2 b2 84 53 85 c8 9d f2 12 58 73 Q...e...S.....Xs 0090 a3 e2 6a ce 25 aa 18 4c 6a 37 bc 58 96 3f e8 b3 ..j.%..Lj7.X.?.. 00a0 7f a3 12 00 17 72 17 a3 d7 8d a9 51 cc bb e5 10 .....r.....Q.... 00b0 3b dd 78 6c 01 26 45 77 29 67 83 48 91 e7 d7 b7 ;.xl.&Ew)g.H.... 00c0 8f ce 89 7d 4b 31 08 d6 38 3a f8 14 87 3a 9a 5e ...}K1..8:...:.^ 00d0 40 74 ab 85 75 56 e1 15 25 2d cc c6 d6 fc 1d 5c @t..uV..%-.....\ 00e0 fb 1b 71 ba ae c3 ec 67 9c 27 62 13 13 07 b9 c8 ..q....g.'b..... 00f0 2c 24 98 85 4e 21 6e ef 82 7c 66 e2 fb 7c 80 7d ,$..N!n..|f..|.} 0100 98 7d 7b 0c 8e 5d 2c 21 ba fe 2d b9 db a5 e2 c9 .}{..],!..-..... 0110 46 a8 fc ef a6 11 e3 72 cb 5e 5f 99 a7 45 dc 18 F......r.^_..E.. 0120 d7 54 95 f9 b2 bc c7 80 15 b2 1d 2e ce 20 ed 2b .T........... .+ 0130 9f e9 14 80 fc 10 21 a9 9e bb 7a 6b 9a 73 10 e2 ......!...zk.s.. 0140 dd 38 34 3e 3c 81 17 d5 21 83 75 cb e1 aa fe f7 .84><...!.u..... 0150 84 a3 de ba 1c e6 a5 1e c8 e6 .......... Frame 8 (338 bytes on wire, 338 bytes captured) Arrival Time: Sep 9, 2004 12:04:24.324455000 Time delta from previous packet: 0.153547000 seconds Time since reference or first frame: 0.519257000 seconds Frame Number: 8 Packet Length: 338 bytes Capture Length: 338 bytes Ethernet II, Src: 00:0f:3d:10:fc:2c, Dst: 00:0c:29:fc:0c:9f Destination: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Source: 00:0f:3d:10:fc:2c (00:0f:3d:10:fc:2c) Type: IP (0x0800) Frame check sequence: 0x8d3d102e (correct) Internet Protocol, Src Addr: 165.227.249.142 (165.227.249.142), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 320 Identification: 0x1251 (4689) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: UDP (0x11) Header checksum: 0x698b (correct) Source: 165.227.249.142 (165.227.249.142) Destination: 165.227.249.122 (165.227.249.122) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 300 Checksum: 0x81de (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x8A9E8AAD7E720802 Responder cookie: 0xA136119BE4A89423 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x63CFC6BC Length: 292 Encrypted payload (264 bytes) 0000 00 0c 29 fc 0c 9f 00 0f 3d 10 fc 2c 08 00 45 00 ..).....=..,..E. 0010 01 40 12 51 00 00 ff 11 69 8b a5 e3 f9 8e a5 e3 .@.Q....i....... 0020 f9 7a 01 f4 01 f4 01 2c 81 de 8a 9e 8a ad 7e 72 .z.....,......~r 0030 08 02 a1 36 11 9b e4 a8 94 23 08 10 20 01 63 cf ...6.....#.. .c. 0040 c6 bc 00 00 01 24 50 1c 6b 2d 5c 34 74 ac 3b ce .....$P.k-\4t.;. 0050 e2 d3 f5 0e 8c 08 af 0c e3 17 3f f8 76 3b 92 24 ..........?.v;.$ 0060 55 43 fa 2e fc 67 6b 93 91 ad 4f 2d cf 87 04 a5 UC...gk...O-.... 0070 64 8c 92 c8 02 1f 53 96 81 16 43 20 63 86 69 f3 d.....S...C c.i. 0080 26 bb 45 65 b4 47 53 81 c2 b4 8b dc d2 70 e0 0a &.Ee.GS......p.. 0090 27 30 92 8d 2f 6f d4 70 35 3b e5 09 2b fd 56 2f '0../o.p5;..+.V/ 00a0 cd 50 ee 26 4d bc 14 9a a7 6f a0 95 f4 95 86 14 .P.&M....o...... 00b0 52 2a 7f 5d 1a 48 b7 85 5b 35 fb 10 ea 30 b7 32 R*.].H..[5...0.2 00c0 fb 75 20 41 9f 73 9d 68 83 56 77 f0 f0 4a b4 e7 .u A.s.h.Vw..J.. 00d0 30 c1 52 82 37 bd f5 40 e1 b2 62 98 20 77 45 a3 0.R.7..@..b. wE. 00e0 ae 1c 9f b3 2a 3d 50 79 62 3f 8e 96 eb b6 2d 00 ....*=Pyb?....-. 00f0 82 ac 52 5e 2f 02 ae 23 e4 76 e6 bd 9d c4 3f 8d ..R^/..#.v....?. 0100 3b a0 42 07 da 2f ff aa f5 6c cc 09 af c1 0b 2c ;.B../...l....., 0110 b0 c6 ab c3 44 89 cb 2f 61 5c 2a 3f bb 04 be c7 ....D../a\*?.... 0120 82 e4 7e 12 32 ad 54 84 1a 13 68 38 bc 49 e3 47 ..~.2.T...h8.I.G 0130 75 0c fc 6c 14 21 a7 02 4b 0e 41 6a ea c4 74 10 u..l.!..K.Aj..t. 0140 93 b7 18 af a8 1e 0e 85 ae 07 06 08 e2 ad 8d 3d ...............= 0150 10 2e .. Frame 9 (106 bytes on wire, 106 bytes captured) Arrival Time: Sep 9, 2004 12:04:24.335034000 Time delta from previous packet: 0.010579000 seconds Time since reference or first frame: 0.529836000 seconds Frame Number: 9 Packet Length: 106 bytes Capture Length: 106 bytes Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:0f:3d:10:fc:2c Destination: 00:0f:3d:10:fc:2c (00:0f:3d:10:fc:2c) Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Type: IP (0x0800) Frame check sequence: 0x8dcf7256 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.142 (165.227.249.142) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 88 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfbc4 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.142 (165.227.249.142) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 68 Checksum: 0x6efd (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x8A9E8AAD7E720802 Responder cookie: 0xA136119BE4A89423 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x63CFC6BC Length: 60 Encrypted payload (32 bytes) 0000 00 0f 3d 10 fc 2c 00 0c 29 fc 0c 9f 08 00 45 00 ..=..,..).....E. 0010 00 58 00 00 40 00 40 11 fb c4 a5 e3 f9 7a a5 e3 .X..@.@......z.. 0020 f9 8e 01 f4 01 f4 00 44 6e fd 8a 9e 8a ad 7e 72 .......Dn.....~r 0030 08 02 a1 36 11 9b e4 a8 94 23 08 10 20 01 63 cf ...6.....#.. .c. 0040 c6 bc 00 00 00 3c 17 14 c4 39 a8 0e c9 2c b3 dc .....<...9...,.. 0050 d5 0d 65 50 58 f4 62 28 d9 d2 fd ba 9c 05 47 92 ..ePX.b(......G. 0060 2a b5 42 88 15 34 8d cf 72 56 *.B..4..rV Frame 10 (106 bytes on wire, 106 bytes captured) Arrival Time: Sep 9, 2004 12:04:24.438894000 Time delta from previous packet: 0.103860000 seconds Time since reference or first frame: 0.633696000 seconds Frame Number: 10 Packet Length: 106 bytes Capture Length: 106 bytes Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:0f:3d:10:fc:2c Destination: 00:0f:3d:10:fc:2c (00:0f:3d:10:fc:2c) Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Type: IP (0x0800) Frame check sequence: 0x8dcf7256 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.142 (165.227.249.142) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 88 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfbc4 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.142 (165.227.249.142) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 68 Checksum: 0x6efd (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x8A9E8AAD7E720802 Responder cookie: 0xA136119BE4A89423 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x63CFC6BC Length: 60 Encrypted payload (32 bytes) 0000 00 0f 3d 10 fc 2c 00 0c 29 fc 0c 9f 08 00 45 00 ..=..,..).....E. 0010 00 58 00 00 40 00 40 11 fb c4 a5 e3 f9 7a a5 e3 .X..@.@......z.. 0020 f9 8e 01 f4 01 f4 00 44 6e fd 8a 9e 8a ad 7e 72 .......Dn.....~r 0030 08 02 a1 36 11 9b e4 a8 94 23 08 10 20 01 63 cf ...6.....#.. .c. 0040 c6 bc 00 00 00 3c 17 14 c4 39 a8 0e c9 2c b3 dc .....<...9...,.. 0050 d5 0d 65 50 58 f4 62 28 d9 d2 fd ba 9c 05 47 92 ..ePX.b(......G. 0060 2a b5 42 88 15 34 8d cf 72 56 *.B..4..rV Frame 11 (106 bytes on wire, 106 bytes captured) Arrival Time: Sep 9, 2004 12:04:24.539647000 Time delta from previous packet: 0.100753000 seconds Time since reference or first frame: 0.734449000 seconds Frame Number: 11 Packet Length: 106 bytes Capture Length: 106 bytes Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:0f:3d:10:fc:2c Destination: 00:0f:3d:10:fc:2c (00:0f:3d:10:fc:2c) Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Type: IP (0x0800) Frame check sequence: 0x8dcf7256 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.142 (165.227.249.142) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 88 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfbc4 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.142 (165.227.249.142) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 68 Checksum: 0x6efd (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x8A9E8AAD7E720802 Responder cookie: 0xA136119BE4A89423 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x63CFC6BC Length: 60 Encrypted payload (32 bytes) 0000 00 0f 3d 10 fc 2c 00 0c 29 fc 0c 9f 08 00 45 00 ..=..,..).....E. 0010 00 58 00 00 40 00 40 11 fb c4 a5 e3 f9 7a a5 e3 .X..@.@......z.. 0020 f9 8e 01 f4 01 f4 00 44 6e fd 8a 9e 8a ad 7e 72 .......Dn.....~r 0030 08 02 a1 36 11 9b e4 a8 94 23 08 10 20 01 63 cf ...6.....#.. .c. 0040 c6 bc 00 00 00 3c 17 14 c4 39 a8 0e c9 2c b3 dc .....<...9...,.. 0050 d5 0d 65 50 58 f4 62 28 d9 d2 fd ba 9c 05 47 92 ..ePX.b(......G. 0060 2a b5 42 88 15 34 8d cf 72 56 *.B..4..rV Frame 12 (130 bytes on wire, 130 bytes captured) Arrival Time: Sep 9, 2004 12:04:24.659503000 Time delta from previous packet: 0.119856000 seconds Time since reference or first frame: 0.854305000 seconds Frame Number: 12 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:50:fc:84:d2:ec Destination: 00:50:fc:84:d2:ec (00:50:fc:84:d2:ec) Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Type: IP (0x0800) Frame check sequence: 0x1cb46116 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.142 (165.227.249.142) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0019 (25) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x7c72 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.142 (165.227.249.142) Encapsulating Security Payload SPI: 0x373e2fa0 Sequence: 1 Data (84 bytes) 0000 00 50 fc 84 d2 ec 00 0c 29 fc 0c 9f 08 00 45 00 .P......).....E. 0010 00 70 00 19 00 00 ff 32 7c 72 a5 e3 f9 7a a5 e3 .p.....2|r...z.. 0020 f9 8e 37 3e 2f a0 00 00 00 01 af fb 00 81 6d 47 ..7>/.........mG 0030 40 ef 66 73 77 b7 22 46 35 38 74 9c d0 43 8f 52 @.fsw."F58t..C.R 0040 2b f3 04 6c 4f d3 c9 ad e7 de 8e a5 e6 64 fa 14 +..lO........d.. 0050 7b 2a 56 a6 95 c0 7a 6a f5 c0 71 7f a3 fc c3 6e {*V...zj..q....n 0060 e6 46 e8 e1 21 2e 2d 9a 4f 78 3b 11 7d 85 7d 1e .F..!.-.Ox;.}.}. 0070 4b 2c 24 1d 0d e0 9b c6 7e 97 21 b0 98 56 1c b4 K,$.....~.!..V.. 0080 61 16 a. Frame 13 (130 bytes on wire, 130 bytes captured) Arrival Time: Sep 9, 2004 12:04:24.659728000 Time delta from previous packet: 0.000225000 seconds Time since reference or first frame: 0.854530000 seconds Frame Number: 13 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:50:fc:84:d2:ec, Dst: 00:0f:3d:10:fc:2c Destination: 00:0f:3d:10:fc:2c (00:0f:3d:10:fc:2c) Source: 00:50:fc:84:d2:ec (00:50:fc:84:d2:ec) Type: IP (0x0800) Frame check sequence: 0xd1ffaccd (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.142 (165.227.249.142) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0019 (25) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 254 Protocol: ESP (0x32) Header checksum: 0x7d72 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.142 (165.227.249.142) Encapsulating Security Payload SPI: 0x373e2fa0 Sequence: 1 Data (84 bytes) 0000 00 0f 3d 10 fc 2c 00 50 fc 84 d2 ec 08 00 45 00 ..=..,.P......E. 0010 00 70 00 19 00 00 fe 32 7d 72 a5 e3 f9 7a a5 e3 .p.....2}r...z.. 0020 f9 8e 37 3e 2f a0 00 00 00 01 af fb 00 81 6d 47 ..7>/.........mG 0030 40 ef 66 73 77 b7 22 46 35 38 74 9c d0 43 8f 52 @.fsw."F58t..C.R 0040 2b f3 04 6c 4f d3 c9 ad e7 de 8e a5 e6 64 fa 14 +..lO........d.. 0050 7b 2a 56 a6 95 c0 7a 6a f5 c0 71 7f a3 fc c3 6e {*V...zj..q....n 0060 e6 46 e8 e1 21 2e 2d 9a 4f 78 3b 11 7d 85 7d 1e .F..!.-.Ox;.}.}. 0070 4b 2c 24 1d 0d e0 9b c6 7e 97 21 b0 98 56 d1 ff K,$.....~.!..V.. 0080 ac cd .. Frame 14 (130 bytes on wire, 130 bytes captured) Arrival Time: Sep 9, 2004 12:04:29.205892000 Time delta from previous packet: 4.546164000 seconds Time since reference or first frame: 5.400694000 seconds Frame Number: 14 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:50:fc:84:d2:ec Destination: 00:50:fc:84:d2:ec (00:50:fc:84:d2:ec) Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Type: IP (0x0800) Frame check sequence: 0xa2d82f0d (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.142 (165.227.249.142) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x001a (26) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x7c71 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.142 (165.227.249.142) Encapsulating Security Payload SPI: 0x373e2fa0 Sequence: 2 Data (84 bytes) 0000 00 50 fc 84 d2 ec 00 0c 29 fc 0c 9f 08 00 45 00 .P......).....E. 0010 00 70 00 1a 00 00 ff 32 7c 71 a5 e3 f9 7a a5 e3 .p.....2|q...z.. 0020 f9 8e 37 3e 2f a0 00 00 00 02 3b 11 7d 85 7d 1e ..7>/.....;.}.}. 0030 4b 2c 0d df c9 c9 bf 95 02 22 e4 ad c0 55 0d e5 K,......."...U.. 0040 75 5f 0f 4c 35 b7 ba 76 58 c7 4c 5d 39 0b fd 6a u_.L5..vX.L]9..j 0050 d9 ca 5b 7a df bf 95 77 7e da 80 cf 60 70 f4 b7 ..[z...w~...`p.. 0060 c2 4b b9 19 e1 35 38 b3 68 a5 88 d0 8f 18 b2 06 .K...58.h....... 0070 fd a3 d9 52 9d cc 78 3b 80 79 87 42 08 98 a2 d8 ...R..x;.y.B.... 0080 2f 0d /. Frame 15 (130 bytes on wire, 130 bytes captured) Arrival Time: Sep 9, 2004 12:04:29.206163000 Time delta from previous packet: 0.000271000 seconds Time since reference or first frame: 5.400965000 seconds Frame Number: 15 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:50:fc:84:d2:ec, Dst: 00:0f:3d:10:fc:2c Destination: 00:0f:3d:10:fc:2c (00:0f:3d:10:fc:2c) Source: 00:50:fc:84:d2:ec (00:50:fc:84:d2:ec) Type: IP (0x0800) Frame check sequence: 0x6f93e2d6 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.142 (165.227.249.142) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x001a (26) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 254 Protocol: ESP (0x32) Header checksum: 0x7d71 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.142 (165.227.249.142) Encapsulating Security Payload SPI: 0x373e2fa0 Sequence: 2 Data (84 bytes) 0000 00 0f 3d 10 fc 2c 00 50 fc 84 d2 ec 08 00 45 00 ..=..,.P......E. 0010 00 70 00 1a 00 00 fe 32 7d 71 a5 e3 f9 7a a5 e3 .p.....2}q...z.. 0020 f9 8e 37 3e 2f a0 00 00 00 02 3b 11 7d 85 7d 1e ..7>/.....;.}.}. 0030 4b 2c 0d df c9 c9 bf 95 02 22 e4 ad c0 55 0d e5 K,......."...U.. 0040 75 5f 0f 4c 35 b7 ba 76 58 c7 4c 5d 39 0b fd 6a u_.L5..vX.L]9..j 0050 d9 ca 5b 7a df bf 95 77 7e da 80 cf 60 70 f4 b7 ..[z...w~...`p.. 0060 c2 4b b9 19 e1 35 38 b3 68 a5 88 d0 8f 18 b2 06 .K...58.h....... 0070 fd a3 d9 52 9d cc 78 3b 80 79 87 42 08 98 6f 93 ...R..x;.y.B..o. 0080 e2 d6 .. Frame 16 (130 bytes on wire, 130 bytes captured) Arrival Time: Sep 9, 2004 12:04:29.215296000 Time delta from previous packet: 0.009133000 seconds Time since reference or first frame: 5.410098000 seconds Frame Number: 16 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:0f:3d:10:fc:2c, Dst: 00:0c:29:fc:0c:9f Destination: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Source: 00:0f:3d:10:fc:2c (00:0f:3d:10:fc:2c) Type: IP (0x0800) Frame check sequence: 0x3eaab8b1 (correct) Internet Protocol, Src Addr: 165.227.249.142 (165.227.249.142), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x4252 (16978) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x4939 (correct) Source: 165.227.249.142 (165.227.249.142) Destination: 165.227.249.122 (165.227.249.122) Encapsulating Security Payload SPI: 0x35a1f249 Sequence: 1 Data (84 bytes) 0000 00 0c 29 fc 0c 9f 00 0f 3d 10 fc 2c 08 00 45 00 ..).....=..,..E. 0010 00 70 42 52 00 00 f0 32 49 39 a5 e3 f9 8e a5 e3 .pBR...2I9...... 0020 f9 7a 35 a1 f2 49 00 00 00 01 f5 05 6e cb 70 de .z5..I......n.p. 0030 8a 9b a6 43 a7 b6 c8 22 32 11 3d 3f 66 89 bd c1 ...C..."2.=?f... 0040 72 2b ab ca 2e 7b 4c 43 e3 43 a9 7d f0 6e 92 f3 r+...{LC.C.}.n.. 0050 cb 16 7b f2 f7 8e 03 d5 06 fe 51 ef 8a d2 d2 2b ..{.......Q....+ 0060 dc 99 fa 81 0e 6f 28 6c d8 b2 a8 b3 5b ab 71 96 .....o(l....[.q. 0070 c2 fc d9 90 f9 72 02 d6 78 36 08 9a 21 69 3e aa .....r..x6..!i>. 0080 b8 b1 .. Frame 17 (130 bytes on wire, 130 bytes captured) Arrival Time: Sep 9, 2004 12:04:30.212811000 Time delta from previous packet: 0.997515000 seconds Time since reference or first frame: 6.407613000 seconds Frame Number: 17 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:50:fc:84:d2:ec Destination: 00:50:fc:84:d2:ec (00:50:fc:84:d2:ec) Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Type: IP (0x0800) Frame check sequence: 0x26a86ca2 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.142 (165.227.249.142) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x001b (27) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x7c70 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.142 (165.227.249.142) Encapsulating Security Payload SPI: 0x373e2fa0 Sequence: 3 Data (84 bytes) 0000 00 50 fc 84 d2 ec 00 0c 29 fc 0c 9f 08 00 45 00 .P......).....E. 0010 00 70 00 1b 00 00 ff 32 7c 70 a5 e3 f9 7a a5 e3 .p.....2|p...z.. 0020 f9 8e 37 3e 2f a0 00 00 00 03 88 d0 8f 18 b2 06 ..7>/........... 0030 fd a3 96 5a df c1 cc c7 0c ea f3 f5 98 ed 5f 3f ...Z.........._? 0040 34 b0 80 54 a3 41 71 1c fc 5d 7a 15 00 88 fc 34 4..T.Aq..]z....4 0050 03 d8 b6 c8 85 2e 17 fc 75 b9 40 3a 92 d1 61 31 ........u.@:..a1 0060 e3 dc 20 ee bf c1 db df 74 34 1e e8 aa fc 6a 15 .. .....t4....j. 0070 78 84 57 3e da 63 fc f7 5d 91 a4 51 e1 f1 26 a8 x.W>.c..]..Q..&. 0080 6c a2 l. Frame 18 (130 bytes on wire, 130 bytes captured) Arrival Time: Sep 9, 2004 12:04:30.213022000 Time delta from previous packet: 0.000211000 seconds Time since reference or first frame: 6.407824000 seconds Frame Number: 18 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:50:fc:84:d2:ec, Dst: 00:0f:3d:10:fc:2c Destination: 00:0f:3d:10:fc:2c (00:0f:3d:10:fc:2c) Source: 00:50:fc:84:d2:ec (00:50:fc:84:d2:ec) Type: IP (0x0800) Frame check sequence: 0xebe3a179 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.142 (165.227.249.142) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x001b (27) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 254 Protocol: ESP (0x32) Header checksum: 0x7d70 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.142 (165.227.249.142) Encapsulating Security Payload SPI: 0x373e2fa0 Sequence: 3 Data (84 bytes) 0000 00 0f 3d 10 fc 2c 00 50 fc 84 d2 ec 08 00 45 00 ..=..,.P......E. 0010 00 70 00 1b 00 00 fe 32 7d 70 a5 e3 f9 7a a5 e3 .p.....2}p...z.. 0020 f9 8e 37 3e 2f a0 00 00 00 03 88 d0 8f 18 b2 06 ..7>/........... 0030 fd a3 96 5a df c1 cc c7 0c ea f3 f5 98 ed 5f 3f ...Z.........._? 0040 34 b0 80 54 a3 41 71 1c fc 5d 7a 15 00 88 fc 34 4..T.Aq..]z....4 0050 03 d8 b6 c8 85 2e 17 fc 75 b9 40 3a 92 d1 61 31 ........u.@:..a1 0060 e3 dc 20 ee bf c1 db df 74 34 1e e8 aa fc 6a 15 .. .....t4....j. 0070 78 84 57 3e da 63 fc f7 5d 91 a4 51 e1 f1 eb e3 x.W>.c..]..Q.... 0080 a1 79 .y Frame 19 (130 bytes on wire, 130 bytes captured) Arrival Time: Sep 9, 2004 12:04:30.214105000 Time delta from previous packet: 0.001083000 seconds Time since reference or first frame: 6.408907000 seconds Frame Number: 19 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:0f:3d:10:fc:2c, Dst: 00:0c:29:fc:0c:9f Destination: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Source: 00:0f:3d:10:fc:2c (00:0f:3d:10:fc:2c) Type: IP (0x0800) Frame check sequence: 0x2673da2a (correct) Internet Protocol, Src Addr: 165.227.249.142 (165.227.249.142), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0xbd52 (48466) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0xce38 (correct) Source: 165.227.249.142 (165.227.249.142) Destination: 165.227.249.122 (165.227.249.122) Encapsulating Security Payload SPI: 0x35a1f249 Sequence: 2 Data (84 bytes) 0000 00 0c 29 fc 0c 9f 00 0f 3d 10 fc 2c 08 00 45 00 ..).....=..,..E. 0010 00 70 bd 52 00 00 f0 32 ce 38 a5 e3 f9 8e a5 e3 .p.R...2.8...... 0020 f9 7a 35 a1 f2 49 00 00 00 02 f5 05 6e cb 70 de .z5..I......n.p. 0030 8a 9b 0c f6 1f 01 de 14 9e 9e 46 28 a5 b8 c6 51 ..........F(...Q 0040 7f ed 45 3d e9 c2 85 7e 56 23 cc 32 92 f3 78 53 ..E=...~V#.2..xS 0050 11 f5 63 03 28 1e 69 08 a2 53 07 bc 9b c5 b1 6e ..c.(.i..S.....n 0060 e9 0c 7f b1 d0 6a a7 eb 84 83 d7 98 2a 7a 72 59 .....j......*zrY 0070 c4 6d f5 22 eb 9b 94 08 8b 47 cd da 81 09 26 73 .m.".....G....&s 0080 da 2a .* Frame 20 (130 bytes on wire, 130 bytes captured) Arrival Time: Sep 9, 2004 12:04:31.216664000 Time delta from previous packet: 1.002559000 seconds Time since reference or first frame: 7.411466000 seconds Frame Number: 20 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:50:fc:84:d2:ec Destination: 00:50:fc:84:d2:ec (00:50:fc:84:d2:ec) Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Type: IP (0x0800) Frame check sequence: 0xb1eaa0c6 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.142 (165.227.249.142) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x001c (28) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x7c6f (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.142 (165.227.249.142) Encapsulating Security Payload SPI: 0x373e2fa0 Sequence: 4 Data (84 bytes) 0000 00 50 fc 84 d2 ec 00 0c 29 fc 0c 9f 08 00 45 00 .P......).....E. 0010 00 70 00 1c 00 00 ff 32 7c 6f a5 e3 f9 7a a5 e3 .p.....2|o...z.. 0020 f9 8e 37 3e 2f a0 00 00 00 04 1e e8 aa fc 6a 15 ..7>/.........j. 0030 78 84 94 db 80 dc e9 b4 8e ec d5 77 55 a1 32 be x..........wU.2. 0040 f8 93 5b be cc fe 4e a4 15 41 0a 1f c0 f7 4e 4d ..[...N..A....NM 0050 35 6c a2 db 3f f4 76 55 d7 8f 34 13 a7 c3 33 9f 5l..?.vU..4...3. 0060 9d 11 3d 15 a1 9e 3d 00 bd e8 f6 76 18 83 0c 40 ..=...=....v...@ 0070 53 9f df 72 19 8d f1 c2 a5 89 fb 72 ae b2 b1 ea S..r.......r.... 0080 a0 c6 .. Frame 21 (130 bytes on wire, 130 bytes captured) Arrival Time: Sep 9, 2004 12:04:31.216913000 Time delta from previous packet: 0.000249000 seconds Time since reference or first frame: 7.411715000 seconds Frame Number: 21 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:50:fc:84:d2:ec, Dst: 00:0f:3d:10:fc:2c Destination: 00:0f:3d:10:fc:2c (00:0f:3d:10:fc:2c) Source: 00:50:fc:84:d2:ec (00:50:fc:84:d2:ec) Type: IP (0x0800) Frame check sequence: 0x7ca16d1d (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.142 (165.227.249.142) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x001c (28) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 254 Protocol: ESP (0x32) Header checksum: 0x7d6f (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.142 (165.227.249.142) Encapsulating Security Payload SPI: 0x373e2fa0 Sequence: 4 Data (84 bytes) 0000 00 0f 3d 10 fc 2c 00 50 fc 84 d2 ec 08 00 45 00 ..=..,.P......E. 0010 00 70 00 1c 00 00 fe 32 7d 6f a5 e3 f9 7a a5 e3 .p.....2}o...z.. 0020 f9 8e 37 3e 2f a0 00 00 00 04 1e e8 aa fc 6a 15 ..7>/.........j. 0030 78 84 94 db 80 dc e9 b4 8e ec d5 77 55 a1 32 be x..........wU.2. 0040 f8 93 5b be cc fe 4e a4 15 41 0a 1f c0 f7 4e 4d ..[...N..A....NM 0050 35 6c a2 db 3f f4 76 55 d7 8f 34 13 a7 c3 33 9f 5l..?.vU..4...3. 0060 9d 11 3d 15 a1 9e 3d 00 bd e8 f6 76 18 83 0c 40 ..=...=....v...@ 0070 53 9f df 72 19 8d f1 c2 a5 89 fb 72 ae b2 7c a1 S..r.......r..|. 0080 6d 1d m. Frame 22 (130 bytes on wire, 130 bytes captured) Arrival Time: Sep 9, 2004 12:04:31.218030000 Time delta from previous packet: 0.001117000 seconds Time since reference or first frame: 7.412832000 seconds Frame Number: 22 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:0f:3d:10:fc:2c, Dst: 00:0c:29:fc:0c:9f Destination: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Source: 00:0f:3d:10:fc:2c (00:0f:3d:10:fc:2c) Type: IP (0x0800) Frame check sequence: 0x1ec7920a (correct) Internet Protocol, Src Addr: 165.227.249.142 (165.227.249.142), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x3250 (12880) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x593b (correct) Source: 165.227.249.142 (165.227.249.142) Destination: 165.227.249.122 (165.227.249.122) Encapsulating Security Payload SPI: 0x35a1f249 Sequence: 3 Data (84 bytes) 0000 00 0c 29 fc 0c 9f 00 0f 3d 10 fc 2c 08 00 45 00 ..).....=..,..E. 0010 00 70 32 50 00 00 f0 32 59 3b a5 e3 f9 8e a5 e3 .p2P...2Y;...... 0020 f9 7a 35 a1 f2 49 00 00 00 03 f5 05 6e cb 70 de .z5..I......n.p. 0030 8a 9b cf e7 00 fe f7 e5 41 0c cc e1 dd a5 79 3b ........A.....y; 0040 a6 7d d0 dd 36 ec 33 c7 e3 2b fd 84 d4 15 f9 f6 .}..6.3..+...... 0050 de 75 64 35 da 73 e7 c9 42 f0 1b ea 75 f6 26 4c .ud5.s..B...u.&L 0060 90 3c 36 2a 18 99 1f 13 47 50 bc 9c 1d 26 3d b2 .<6*....GP...&=. 0070 68 ef 74 98 11 f7 6f 20 9f a2 bf 92 fa 90 1e c7 h.t...o ........ 0080 92 0a ..