Frame 1 (174 bytes on wire, 174 bytes captured) Arrival Time: Jun 30, 2005 10:54:25.248586000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 174 bytes Capture Length: 174 bytes Ethernet II, Src: 00:0c:29:89:f2:82, Dst: 00:50:18:00:00:01 Destination: 00:50:18:00:00:01 (00:50:18:00:00:01) Source: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Type: IP (0x0800) Frame check sequence: 0x8595c585 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.143 (165.227.249.143) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 156 Identification: 0x0070 (112) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb0f (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.143 (165.227.249.143) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 136 Checksum: 0x1e50 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x585F479980B64D7E Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 128 Security Association payload Next payload: Vendor ID (13) Length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 44 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 36 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: NONE (0) Length: 44 Vendor ID: Check Point Check Point Product: VPN-1 Version: NG with Application Intelligence R55 0000 00 50 18 00 00 01 00 0c 29 89 f2 82 08 00 45 00 .P......).....E. 0010 00 9c 00 70 40 00 40 11 fb 0f a5 e3 f9 7a a5 e3 ...p@.@......z.. 0020 f9 8f 01 f4 01 f4 00 88 1e 50 58 5f 47 99 80 b6 .........PX_G... 0030 4d 7e 00 00 00 00 00 00 00 00 01 10 02 00 00 00 M~.............. 0040 00 00 00 00 00 80 0d 00 00 38 00 00 00 01 00 00 .........8...... 0050 00 01 00 00 00 2c 01 01 00 01 00 00 00 24 01 01 .....,.......$.. 0060 00 00 80 01 00 05 80 02 00 02 80 03 00 01 80 04 ................ 0070 00 02 80 0b 00 01 00 0c 00 04 00 00 70 80 00 00 ............p... 0080 00 2c f4 ed 19 e0 c1 14 eb 51 6f aa ac 0e e3 7d .,.......Qo....} 0090 af 28 07 b4 38 1f 00 00 00 01 00 00 13 8d 42 c2 .(..8.........B. 00a0 13 f3 00 00 00 00 18 00 00 00 85 95 c5 85 .............. Frame 2 (130 bytes on wire, 130 bytes captured) Arrival Time: Jun 30, 2005 10:54:25.407818000 Time delta from previous packet: 0.159232000 seconds Time since reference or first frame: 0.159232000 seconds Frame Number: 2 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:50:18:00:00:01, Dst: 00:0c:29:89:f2:82 Destination: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Source: 00:50:18:00:00:01 (00:50:18:00:00:01) Type: IP (0x0800) Frame check sequence: 0x02770b58 (correct) Internet Protocol, Src Addr: 165.227.249.143 (165.227.249.143), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x009b (155) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3b11 (correct) Source: 165.227.249.143 (165.227.249.143) Destination: 165.227.249.122 (165.227.249.122) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 92 Checksum: 0x9e6f (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x585F479980B64D7E Responder cookie: 0x63C08963FAD6D140 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 84 Security Association payload Next payload: NONE (0) Length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 44 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 36 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) 0000 00 0c 29 89 f2 82 00 50 18 00 00 01 08 00 45 00 ..)....P......E. 0010 00 70 00 9b 00 00 40 11 3b 11 a5 e3 f9 8f a5 e3 .p....@.;....... 0020 f9 7a 01 f4 01 f4 00 5c 9e 6f 58 5f 47 99 80 b6 .z.....\.oX_G... 0030 4d 7e 63 c0 89 63 fa d6 d1 40 01 10 02 00 00 00 M~c..c...@...... 0040 00 00 00 00 00 54 00 00 00 38 00 00 00 01 00 00 .....T...8...... 0050 00 01 00 00 00 2c 01 01 00 01 00 00 00 24 01 01 .....,.......$.. 0060 00 00 80 01 00 05 80 02 00 02 80 03 00 01 80 04 ................ 0070 00 02 80 0b 00 01 00 0c 00 04 00 00 70 80 02 77 ............p..w 0080 0b 58 .X Frame 3 (230 bytes on wire, 230 bytes captured) Arrival Time: Jun 30, 2005 10:54:25.412612000 Time delta from previous packet: 0.004794000 seconds Time since reference or first frame: 0.164026000 seconds Frame Number: 3 Packet Length: 230 bytes Capture Length: 230 bytes Ethernet II, Src: 00:0c:29:89:f2:82, Dst: 00:50:18:00:00:01 Destination: 00:50:18:00:00:01 (00:50:18:00:00:01) Source: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Type: IP (0x0800) Frame check sequence: 0x55498eaa (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.143 (165.227.249.143) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 212 Identification: 0x0071 (113) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfad6 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.143 (165.227.249.143) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 192 Checksum: 0x7b2c (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x585F479980B64D7E Responder cookie: 0x63C08963FAD6D140 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 184 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 24 Nonce Data 0000 00 50 18 00 00 01 00 0c 29 89 f2 82 08 00 45 00 .P......).....E. 0010 00 d4 00 71 40 00 40 11 fa d6 a5 e3 f9 7a a5 e3 ...q@.@......z.. 0020 f9 8f 01 f4 01 f4 00 c0 7b 2c 58 5f 47 99 80 b6 ........{,X_G... 0030 4d 7e 63 c0 89 63 fa d6 d1 40 04 10 02 00 00 00 M~c..c...@...... 0040 00 00 00 00 00 b8 0a 00 00 84 66 40 a1 e7 78 54 ..........f@..xT 0050 7d 3c 23 92 89 e9 24 03 22 31 89 93 32 23 93 bb }<#...$."1..2#.. 0060 90 44 1b 2c db 95 49 b0 1c 31 f1 dd e4 29 01 61 .D.,..I..1...).a 0070 f7 93 40 10 c0 ca a5 1f d8 99 be 10 93 20 ff 74 ..@.......... .t 0080 cc b9 da 58 e6 99 1d 75 b1 56 72 46 00 76 51 a2 ...X...u.VrF.vQ. 0090 b2 1f 11 82 ec 59 23 0e 01 22 8e 46 2a e1 7b 1d .....Y#..".F*.{. 00a0 60 ce b6 3d 2c 0b 32 62 b4 fb 8d 8c 52 a0 37 12 `..=,.2b....R.7. 00b0 81 14 57 2f dd a1 9c be 0e 96 69 d1 86 4f 47 19 ..W/......i..OG. 00c0 b7 70 ac 86 30 db 66 64 77 f5 00 00 00 18 37 0e .p..0.fdw.....7. 00d0 06 d9 88 65 7c 0a d5 bd 94 dc 96 7b cd ea c5 26 ...e|......{...& 00e0 ee a3 55 49 8e aa ..UI.. Frame 4 (230 bytes on wire, 230 bytes captured) Arrival Time: Jun 30, 2005 10:54:25.413511000 Time delta from previous packet: 0.000899000 seconds Time since reference or first frame: 0.164925000 seconds Frame Number: 4 Packet Length: 230 bytes Capture Length: 230 bytes Ethernet II, Src: 00:50:18:00:00:01, Dst: 00:0c:29:89:f2:82 Destination: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Source: 00:50:18:00:00:01 (00:50:18:00:00:01) Type: IP (0x0800) Frame check sequence: 0x93e3a448 (correct) Internet Protocol, Src Addr: 165.227.249.143 (165.227.249.143), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 212 Identification: 0x009c (156) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3aac (correct) Source: 165.227.249.143 (165.227.249.143) Destination: 165.227.249.122 (165.227.249.122) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 192 Checksum: 0x0301 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x585F479980B64D7E Responder cookie: 0x63C08963FAD6D140 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 184 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 24 Nonce Data 0000 00 0c 29 89 f2 82 00 50 18 00 00 01 08 00 45 00 ..)....P......E. 0010 00 d4 00 9c 00 00 40 11 3a ac a5 e3 f9 8f a5 e3 ......@.:....... 0020 f9 7a 01 f4 01 f4 00 c0 03 01 58 5f 47 99 80 b6 .z........X_G... 0030 4d 7e 63 c0 89 63 fa d6 d1 40 04 10 02 00 00 00 M~c..c...@...... 0040 00 00 00 00 00 b8 0a 00 00 84 3b 0b a6 ab 21 f1 ..........;...!. 0050 83 10 2d a6 65 a3 a7 a8 0f 61 2a 07 20 37 cc dd ..-.e....a*. 7.. 0060 51 f7 69 01 80 07 42 55 a7 de ca 38 41 77 86 11 Q.i...BU...8Aw.. 0070 be e9 37 55 2b 88 cd 7e 05 05 45 ef f8 e5 ef cd ..7U+..~..E..... 0080 b3 0a f9 d8 78 f9 78 a9 8f 50 e7 2e 27 92 02 06 ....x.x..P..'... 0090 38 65 d2 93 18 59 48 e4 59 cc 43 7a a2 77 4d a0 8e...YH.Y.Cz.wM. 00a0 0c 3a 72 69 3c d4 57 24 13 3b 16 9b 75 85 6e b7 .:ri<.W$.;..u.n. 00b0 09 2a d3 b5 15 db 62 82 b0 29 d1 31 79 05 45 84 .*....b..).1y.E. 00c0 fd fb 0f a5 64 3b 87 a3 18 b6 00 00 00 18 a1 b5 ....d;.......... 00d0 c5 f2 8a b6 fe 1a 92 d8 e1 6a e7 03 c1 84 91 ce .........j...... 00e0 1e 8b 93 e3 a4 48 .....H Frame 5 (114 bytes on wire, 114 bytes captured) Arrival Time: Jun 30, 2005 10:54:25.420597000 Time delta from previous packet: 0.007086000 seconds Time since reference or first frame: 0.172011000 seconds Frame Number: 5 Packet Length: 114 bytes Capture Length: 114 bytes Ethernet II, Src: 00:0c:29:89:f2:82, Dst: 00:50:18:00:00:01 Destination: 00:50:18:00:00:01 (00:50:18:00:00:01) Source: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Type: IP (0x0800) Frame check sequence: 0xb414bcc3 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.143 (165.227.249.143) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0x0072 (114) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb49 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.143 (165.227.249.143) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 76 Checksum: 0x7c4b (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x585F479980B64D7E Responder cookie: 0x63C08963FAD6D140 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 68 Encrypted payload (40 bytes) 0000 00 50 18 00 00 01 00 0c 29 89 f2 82 08 00 45 00 .P......).....E. 0010 00 60 00 72 40 00 40 11 fb 49 a5 e3 f9 7a a5 e3 .`.r@.@..I...z.. 0020 f9 8f 01 f4 01 f4 00 4c 7c 4b 58 5f 47 99 80 b6 .......L|KX_G... 0030 4d 7e 63 c0 89 63 fa d6 d1 40 05 10 02 01 00 00 M~c..c...@...... 0040 00 00 00 00 00 44 ed 2a 05 38 27 fb c2 16 1f c4 .....D.*.8'..... 0050 24 ad 5f eb a2 10 69 20 a1 0d 29 90 60 eb 24 46 $._...i ..).`.$F 0060 e8 75 92 44 9f 74 6b 00 2e b7 7a ae 07 2c b4 14 .u.D.tk...z..,.. 0070 bc c3 .. Frame 6 (114 bytes on wire, 114 bytes captured) Arrival Time: Jun 30, 2005 10:54:25.630452000 Time delta from previous packet: 0.209855000 seconds Time since reference or first frame: 0.381866000 seconds Frame Number: 6 Packet Length: 114 bytes Capture Length: 114 bytes Ethernet II, Src: 00:50:18:00:00:01, Dst: 00:0c:29:89:f2:82 Destination: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Source: 00:50:18:00:00:01 (00:50:18:00:00:01) Type: IP (0x0800) Frame check sequence: 0x085bbc8c (correct) Internet Protocol, Src Addr: 165.227.249.143 (165.227.249.143), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0x009d (157) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3b1f (correct) Source: 165.227.249.143 (165.227.249.143) Destination: 165.227.249.122 (165.227.249.122) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 76 Checksum: 0x9c16 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x585F479980B64D7E Responder cookie: 0x63C08963FAD6D140 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 68 Encrypted payload (40 bytes) 0000 00 0c 29 89 f2 82 00 50 18 00 00 01 08 00 45 00 ..)....P......E. 0010 00 60 00 9d 00 00 40 11 3b 1f a5 e3 f9 8f a5 e3 .`....@.;....... 0020 f9 7a 01 f4 01 f4 00 4c 9c 16 58 5f 47 99 80 b6 .z.....L..X_G... 0030 4d 7e 63 c0 89 63 fa d6 d1 40 05 10 02 01 00 00 M~c..c...@...... 0040 00 00 00 00 00 44 17 92 44 f0 b8 6b ee c1 17 d8 .....D..D..k.... 0050 cd 1b 69 d2 d4 42 aa 98 f9 8f ee ba 05 c7 86 5d ..i..B.........] 0060 00 00 03 2a a5 03 20 56 99 62 54 b7 f5 68 08 5b ...*.. V.bT..h.[ 0070 bc 8c .. Frame 7 (346 bytes on wire, 346 bytes captured) Arrival Time: Jun 30, 2005 10:54:25.637277000 Time delta from previous packet: 0.006825000 seconds Time since reference or first frame: 0.388691000 seconds Frame Number: 7 Packet Length: 346 bytes Capture Length: 346 bytes Ethernet II, Src: 00:0c:29:89:f2:82, Dst: 00:50:18:00:00:01 Destination: 00:50:18:00:00:01 (00:50:18:00:00:01) Source: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Type: IP (0x0800) Frame check sequence: 0x89f923b5 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.143 (165.227.249.143) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 328 Identification: 0x0073 (115) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfa60 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.143 (165.227.249.143) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 308 Checksum: 0xc72b (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x585F479980B64D7E Responder cookie: 0x63C08963FAD6D140 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xA3C03112 Length: 300 Encrypted payload (272 bytes) 0000 00 50 18 00 00 01 00 0c 29 89 f2 82 08 00 45 00 .P......).....E. 0010 01 48 00 73 40 00 40 11 fa 60 a5 e3 f9 7a a5 e3 .H.s@.@..`...z.. 0020 f9 8f 01 f4 01 f4 01 34 c7 2b 58 5f 47 99 80 b6 .......4.+X_G... 0030 4d 7e 63 c0 89 63 fa d6 d1 40 08 10 20 01 a3 c0 M~c..c...@.. ... 0040 31 12 00 00 01 2c 95 3a 17 69 66 75 4e 81 ab 03 1....,.:.ifuN... 0050 bb 2f 07 e5 0c 2b cb 70 98 39 0f d8 f7 61 ce 1c ./...+.p.9...a.. 0060 21 fc 71 f8 f9 98 49 9e 3a 72 da 1e 49 1e 83 5e !.q...I.:r..I..^ 0070 ff 7d 2e 94 7b e2 13 c0 c3 65 fa 3e 10 54 29 63 .}..{....e.>.T)c 0080 18 ad 67 7d ba 0d cd 41 d5 24 94 af 42 db e3 a5 ..g}...A.$..B... 0090 16 57 66 98 c6 e3 77 80 4f da 11 14 10 3a 05 f2 .Wf...w.O....:.. 00a0 1b e4 1f 4a f4 c6 90 60 7e a5 d2 4c 51 76 d6 03 ...J...`~..LQv.. 00b0 4a 95 30 e9 a1 89 ba ab eb 5d fa 01 5e 05 ec 44 J.0......]..^..D 00c0 f9 82 02 97 7c b4 ca 61 d5 01 0e 36 02 ed fb a0 ....|..a...6.... 00d0 39 2e 5c 6e 35 d2 30 45 f9 ea d8 0f 4f 06 b8 df 9.\n5.0E....O... 00e0 e1 db 6a 7f 6e fb a5 b4 28 03 32 02 58 b7 5b 8e ..j.n...(.2.X.[. 00f0 56 79 cf 7e d9 85 c7 0a 6d be ba 5c ec d8 1b d9 Vy.~....m..\.... 0100 50 82 87 50 fa e4 13 2d fa 74 5d 11 4d 35 7e dd P..P...-.t].M5~. 0110 13 f4 17 c5 ce ed 52 d2 78 ad f4 2d 6b 85 12 d7 ......R.x..-k... 0120 c4 ed bf 9c 6c 37 b9 1d 69 4a 1a c9 df 93 70 8d ....l7..iJ....p. 0130 29 7f 64 45 27 76 0e 6d 9c b7 0b 9e 57 31 a6 cb ).dE'v.m....W1.. 0140 55 47 34 7e 2b 6c d3 ad c4 e3 b3 e1 46 64 4c cb UG4~+l......FdL. 0150 c9 da 05 73 52 08 89 f9 23 b5 ...sR...#. Frame 8 (346 bytes on wire, 346 bytes captured) Arrival Time: Jun 30, 2005 10:54:26.029047000 Time delta from previous packet: 0.391770000 seconds Time since reference or first frame: 0.780461000 seconds Frame Number: 8 Packet Length: 346 bytes Capture Length: 346 bytes Ethernet II, Src: 00:50:18:00:00:01, Dst: 00:0c:29:89:f2:82 Destination: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Source: 00:50:18:00:00:01 (00:50:18:00:00:01) Type: IP (0x0800) Frame check sequence: 0x03a846d0 (correct) Internet Protocol, Src Addr: 165.227.249.143 (165.227.249.143), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 328 Identification: 0x009e (158) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3a36 (correct) Source: 165.227.249.143 (165.227.249.143) Destination: 165.227.249.122 (165.227.249.122) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 308 Checksum: 0xb4ec (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x585F479980B64D7E Responder cookie: 0x63C08963FAD6D140 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xA3C03112 Length: 300 Encrypted payload (272 bytes) 0000 00 0c 29 89 f2 82 00 50 18 00 00 01 08 00 45 00 ..)....P......E. 0010 01 48 00 9e 00 00 40 11 3a 36 a5 e3 f9 8f a5 e3 .H....@.:6...... 0020 f9 7a 01 f4 01 f4 01 34 b4 ec 58 5f 47 99 80 b6 .z.....4..X_G... 0030 4d 7e 63 c0 89 63 fa d6 d1 40 08 10 20 01 a3 c0 M~c..c...@.. ... 0040 31 12 00 00 01 2c 13 fd d4 96 bc d5 17 a5 64 8b 1....,........d. 0050 4d 3f 9c 59 11 e8 be 59 55 55 9f a8 f5 c9 97 7a M?.Y...YUU.....z 0060 a5 4e c3 49 41 5d da bf 21 5a 2f 33 c4 95 a4 b7 .N.IA]..!Z/3.... 0070 18 c4 62 8c 0d 75 67 82 4a 5b 24 c4 b2 1b 9d 95 ..b..ug.J[$..... 0080 52 d5 ce 7f 7f e0 35 1b ae 4b 73 64 04 c6 ef 3d R.....5..Ksd...= 0090 77 48 fe 80 c9 c7 72 ec 2f 0e d4 e6 1a 18 0b e5 wH....r./....... 00a0 8b 21 33 c7 b0 26 6a 39 e0 68 97 e3 81 0c 7c a2 .!3..&j9.h....|. 00b0 30 cb c2 71 53 be 83 e5 87 b3 86 95 3d 09 72 1f 0..qS.......=.r. 00c0 de a2 36 c8 d8 dd 90 71 ee aa 1f 10 cf d9 68 f9 ..6....q......h. 00d0 b8 1d 15 f3 6d 1a 7b 15 db 2b 8b 70 23 2e 39 52 ....m.{..+.p#.9R 00e0 29 5e c1 45 c7 4c 0d 29 5c e6 9b 8f c6 5e 93 e5 )^.E.L.)\....^.. 00f0 00 ee 48 bc f8 93 04 17 04 b8 8e f0 be 46 74 4c ..H..........FtL 0100 36 5b 69 65 07 95 48 af 06 dd 09 9e d5 e5 40 be 6[ie..H.......@. 0110 e6 d7 c6 01 74 7a 6f c8 ae 1a 2d 7a 66 a9 59 2e ....tzo...-zf.Y. 0120 65 c7 c5 08 32 18 18 67 e2 82 0c 00 21 b3 7d 82 e...2..g....!.}. 0130 e4 42 63 3e 99 1c 8f 66 cc 34 61 08 54 0d b5 a0 .Bc>...f.4a.T... 0140 4c 60 a2 c9 3b 08 a8 4e 93 1d b9 38 66 26 0f c5 L`..;..N...8f&.. 0150 7b 9b 84 38 15 b4 03 a8 46 d0 {..8....F. Frame 9 (106 bytes on wire, 106 bytes captured) Arrival Time: Jun 30, 2005 10:54:26.032343000 Time delta from previous packet: 0.003296000 seconds Time since reference or first frame: 0.783757000 seconds Frame Number: 9 Packet Length: 106 bytes Capture Length: 106 bytes Ethernet II, Src: 00:0c:29:89:f2:82, Dst: 00:50:18:00:00:01 Destination: 00:50:18:00:00:01 (00:50:18:00:00:01) Source: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Type: IP (0x0800) Frame check sequence: 0x6d07d4ad (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.143 (165.227.249.143) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 88 Identification: 0x0074 (116) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb4f (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.143 (165.227.249.143) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 68 Checksum: 0x1c7c (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x585F479980B64D7E Responder cookie: 0x63C08963FAD6D140 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xA3C03112 Length: 60 Encrypted payload (32 bytes) 0000 00 50 18 00 00 01 00 0c 29 89 f2 82 08 00 45 00 .P......).....E. 0010 00 58 00 74 40 00 40 11 fb 4f a5 e3 f9 7a a5 e3 .X.t@.@..O...z.. 0020 f9 8f 01 f4 01 f4 00 44 1c 7c 58 5f 47 99 80 b6 .......D.|X_G... 0030 4d 7e 63 c0 89 63 fa d6 d1 40 08 10 20 01 a3 c0 M~c..c...@.. ... 0040 31 12 00 00 00 3c f8 4d 41 c9 04 4b 63 22 e6 4b 1....<.MA..Kc".K 0050 54 63 a3 e8 e7 54 1f 7d 93 d4 6b 03 c9 f7 4a 49 Tc...T.}..k...JI 0060 69 b5 0a a1 6d 49 6d 07 d4 ad i...mIm... Frame 10 (106 bytes on wire, 106 bytes captured) Arrival Time: Jun 30, 2005 10:54:26.141187000 Time delta from previous packet: 0.108844000 seconds Time since reference or first frame: 0.892601000 seconds Frame Number: 10 Packet Length: 106 bytes Capture Length: 106 bytes Ethernet II, Src: 00:0c:29:89:f2:82, Dst: 00:50:18:00:00:01 Destination: 00:50:18:00:00:01 (00:50:18:00:00:01) Source: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Type: IP (0x0800) Frame check sequence: 0x898c446a (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.143 (165.227.249.143) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 88 Identification: 0x0075 (117) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb4e (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.143 (165.227.249.143) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 68 Checksum: 0x1c7c (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x585F479980B64D7E Responder cookie: 0x63C08963FAD6D140 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xA3C03112 Length: 60 Encrypted payload (32 bytes) 0000 00 50 18 00 00 01 00 0c 29 89 f2 82 08 00 45 00 .P......).....E. 0010 00 58 00 75 40 00 40 11 fb 4e a5 e3 f9 7a a5 e3 .X.u@.@..N...z.. 0020 f9 8f 01 f4 01 f4 00 44 1c 7c 58 5f 47 99 80 b6 .......D.|X_G... 0030 4d 7e 63 c0 89 63 fa d6 d1 40 08 10 20 01 a3 c0 M~c..c...@.. ... 0040 31 12 00 00 00 3c f8 4d 41 c9 04 4b 63 22 e6 4b 1....<.MA..Kc".K 0050 54 63 a3 e8 e7 54 1f 7d 93 d4 6b 03 c9 f7 4a 49 Tc...T.}..k...JI 0060 69 b5 0a a1 6d 49 89 8c 44 6a i...mI..Dj Frame 11 (106 bytes on wire, 106 bytes captured) Arrival Time: Jun 30, 2005 10:54:26.251730000 Time delta from previous packet: 0.110543000 seconds Time since reference or first frame: 1.003144000 seconds Frame Number: 11 Packet Length: 106 bytes Capture Length: 106 bytes Ethernet II, Src: 00:0c:29:89:f2:82, Dst: 00:50:18:00:00:01 Destination: 00:50:18:00:00:01 (00:50:18:00:00:01) Source: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Type: IP (0x0800) Frame check sequence: 0xe41684f9 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.143 (165.227.249.143) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 88 Identification: 0x0076 (118) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb4d (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.143 (165.227.249.143) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 68 Checksum: 0x1c7c (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x585F479980B64D7E Responder cookie: 0x63C08963FAD6D140 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xA3C03112 Length: 60 Encrypted payload (32 bytes) 0000 00 50 18 00 00 01 00 0c 29 89 f2 82 08 00 45 00 .P......).....E. 0010 00 58 00 76 40 00 40 11 fb 4d a5 e3 f9 7a a5 e3 .X.v@.@..M...z.. 0020 f9 8f 01 f4 01 f4 00 44 1c 7c 58 5f 47 99 80 b6 .......D.|X_G... 0030 4d 7e 63 c0 89 63 fa d6 d1 40 08 10 20 01 a3 c0 M~c..c...@.. ... 0040 31 12 00 00 00 3c f8 4d 41 c9 04 4b 63 22 e6 4b 1....<.MA..Kc".K 0050 54 63 a3 e8 e7 54 1f 7d 93 d4 6b 03 c9 f7 4a 49 Tc...T.}..k...JI 0060 69 b5 0a a1 6d 49 e4 16 84 f9 i...mI.... Frame 12 (130 bytes on wire, 130 bytes captured) Arrival Time: Jun 30, 2005 10:54:26.344620000 Time delta from previous packet: 0.092890000 seconds Time since reference or first frame: 1.096034000 seconds Frame Number: 12 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:0c:29:89:f2:82, Dst: 00:50:18:00:00:01 Destination: 00:50:18:00:00:01 (00:50:18:00:00:01) Source: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Type: IP (0x0800) Frame check sequence: 0x7efddd88 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.143 (165.227.249.143) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0046 (70) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x7c44 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.143 (165.227.249.143) Encapsulating Security Payload SPI: 0x04000010 Sequence: 1 Data (84 bytes) 0000 00 50 18 00 00 01 00 0c 29 89 f2 82 08 00 45 00 .P......).....E. 0010 00 70 00 46 00 00 ff 32 7c 44 a5 e3 f9 7a a5 e3 .p.F...2|D...z.. 0020 f9 8f 04 00 00 10 00 00 00 01 cf d1 30 99 10 97 ............0... 0030 70 eb 64 d0 e5 78 5e a7 01 0f 6c 08 f5 ba c7 e1 p.d..x^...l..... 0040 df ca d2 b9 29 36 c2 74 94 83 45 de e7 1a 19 d0 ....)6.t..E..... 0050 69 1e 3c 55 4a 80 44 a7 f6 d6 e9 24 77 35 0a eb i.p...a...9...r08 0050 7c 2c d9 79 ed 27 85 56 2d 86 9f bc d8 fc 1f 22 |,.y.'.V-......" 0060 17 3b f8 1c 75 0b 53 72 10 02 ea 1e ca 58 27 65 .;..u.Sr.....X'e 0070 35 a7 9e 4b 6c 02 81 fd d3 9a 93 6f f8 c2 00 66 5..Kl......o...f 0080 e6 a9 .. Frame 20 (130 bytes on wire, 130 bytes captured) Arrival Time: Jun 30, 2005 10:54:28.412851000 Time delta from previous packet: 0.001604000 seconds Time since reference or first frame: 3.164265000 seconds Frame Number: 20 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:50:18:00:00:01, Dst: 00:0c:29:89:f2:82 Destination: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Source: 00:50:18:00:00:01 (00:50:18:00:00:01) Type: IP (0x0800) Frame check sequence: 0x84e0ead7 (correct) Internet Protocol, Src Addr: 165.227.249.143 (165.227.249.143), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x00a3 (163) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 254 Protocol: ESP (0x32) Header checksum: 0x7ce7 (correct) Source: 165.227.249.143 (165.227.249.143) Destination: 165.227.249.122 (165.227.249.122) Encapsulating Security Payload SPI: 0xd7db04fa Sequence: 4 Data (84 bytes) 0000 00 0c 29 89 f2 82 00 50 18 00 00 01 08 00 45 00 ..)....P......E. 0010 00 70 00 a3 00 00 fe 32 7c e7 a5 e3 f9 8f a5 e3 .p.....2|....... 0020 f9 7a d7 db 04 fa 00 00 00 04 00 6d e0 f7 89 f9 .z.........m.... 0030 73 3c 67 97 c6 e9 8a d1 07 65 76 d0 0d 6b ee eb s... 0070 0d fe 8e 41 6e 97 06 5e ca fb 49 29 7a 82 84 e0 ...An..^..I)z... 0080 ea d7 ..