Frame 1 (174 bytes on wire, 174 bytes captured) Arrival Time: Oct 26, 2004 13:17:41.096210000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 174 bytes Capture Length: 174 bytes Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:05:30:01:80:af Destination: 00:05:30:01:80:af (00:05:30:01:80:af) Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Type: IP (0x0800) Frame check sequence: 0x0c8a97e6 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.144 (165.227.249.144) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 156 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb7e (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.144 (165.227.249.144) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 136 Checksum: 0x42e0 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xC7D6C120979F7F3A Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 128 Security Association payload Next payload: Vendor ID (13) Length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 44 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 36 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: NONE (0) Length: 44 Vendor ID: Check Point Check Point Product: VPN-1 Version: NG with Application Intelligence R55 0000 00 05 30 01 80 af 00 0c 29 fc 0c 9f 08 00 45 00 ..0.....).....E. 0010 00 9c 00 00 40 00 40 11 fb 7e a5 e3 f9 7a a5 e3 ....@.@..~...z.. 0020 f9 90 01 f4 01 f4 00 88 42 e0 c7 d6 c1 20 97 9f ........B.... .. 0030 7f 3a 00 00 00 00 00 00 00 00 01 10 02 00 00 00 .:.............. 0040 00 00 00 00 00 80 0d 00 00 38 00 00 00 01 00 00 .........8...... 0050 00 01 00 00 00 2c 01 01 00 01 00 00 00 24 01 01 .....,.......$.. 0060 00 00 80 01 00 05 80 02 00 02 80 03 00 01 80 04 ................ 0070 00 02 80 0b 00 01 00 0c 00 04 00 00 70 80 00 00 ............p... 0080 00 2c f4 ed 19 e0 c1 14 eb 51 6f aa ac 0e e3 7d .,.......Qo....} 0090 af 28 07 b4 38 1f 00 00 00 01 00 00 13 8d 00 00 .(..8........... 00a0 00 00 00 00 00 00 18 80 00 00 0c 8a 97 e6 .............. Frame 2 (130 bytes on wire, 130 bytes captured) Arrival Time: Oct 26, 2004 13:17:41.098478000 Time delta from previous packet: 0.002268000 seconds Time since reference or first frame: 0.002268000 seconds Frame Number: 2 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:05:30:01:80:af, Dst: 00:0c:29:fc:0c:9f Destination: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Source: 00:05:30:01:80:af (00:05:30:01:80:af) Type: IP (0x0800) Frame check sequence: 0xba6d52c7 (correct) Internet Protocol, Src Addr: 165.227.249.144 (165.227.249.144), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0000 (0) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3bab (correct) Source: 165.227.249.144 (165.227.249.144) Destination: 165.227.249.122 (165.227.249.122) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 92 Checksum: 0xeb15 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xC7D6C120979F7F3A Responder cookie: 0x940B3DEB4CE81C11 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 84 Security Association payload Next payload: NONE (0) Length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 44 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 36 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) 0000 00 0c 29 fc 0c 9f 00 05 30 01 80 af 08 00 45 00 ..).....0.....E. 0010 00 70 00 00 00 00 40 11 3b ab a5 e3 f9 90 a5 e3 .p....@.;....... 0020 f9 7a 01 f4 01 f4 00 5c eb 15 c7 d6 c1 20 97 9f .z.....\..... .. 0030 7f 3a 94 0b 3d eb 4c e8 1c 11 01 10 02 00 00 00 .:..=.L......... 0040 00 00 00 00 00 54 00 00 00 38 00 00 00 01 00 00 .....T...8...... 0050 00 01 00 00 00 2c 01 01 00 01 00 00 00 24 01 01 .....,.......$.. 0060 00 00 80 01 00 05 80 02 00 02 80 03 00 01 80 04 ................ 0070 00 02 80 0b 00 01 00 0c 00 04 00 00 70 80 ba 6d ............p..m 0080 52 c7 R. Frame 3 (230 bytes on wire, 230 bytes captured) Arrival Time: Oct 26, 2004 13:17:41.105952000 Time delta from previous packet: 0.007474000 seconds Time since reference or first frame: 0.009742000 seconds Frame Number: 3 Packet Length: 230 bytes Capture Length: 230 bytes Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:05:30:01:80:af Destination: 00:05:30:01:80:af (00:05:30:01:80:af) Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Type: IP (0x0800) Frame check sequence: 0xb565df2f (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.144 (165.227.249.144) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 212 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb46 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.144 (165.227.249.144) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 192 Checksum: 0xa893 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xC7D6C120979F7F3A Responder cookie: 0x940B3DEB4CE81C11 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 184 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 24 Nonce Data 0000 00 05 30 01 80 af 00 0c 29 fc 0c 9f 08 00 45 00 ..0.....).....E. 0010 00 d4 00 00 40 00 40 11 fb 46 a5 e3 f9 7a a5 e3 ....@.@..F...z.. 0020 f9 90 01 f4 01 f4 00 c0 a8 93 c7 d6 c1 20 97 9f ............. .. 0030 7f 3a 94 0b 3d eb 4c e8 1c 11 04 10 02 00 00 00 .:..=.L......... 0040 00 00 00 00 00 b8 0a 00 00 84 c1 f7 a4 ab 0f 1c ................ 0050 5f 86 b7 87 e2 7d 3d cf 75 64 df 86 56 8a f7 f4 _....}=.ud..V... 0060 22 ff 1d d0 a1 40 23 1b c1 53 fb 32 9f 23 e5 30 "....@#..S.2.#.0 0070 e1 d7 80 1c 70 3c de 9e a7 52 bd 3a de a2 a4 d9 ....p<...R.:.... 0080 19 dc 73 ef a8 4c be 52 88 18 f9 af f9 56 5f 7d ..s..L.R.....V_} 0090 03 12 46 04 9a 6e 9d 11 82 b9 05 35 50 72 12 67 ..F..n.....5Pr.g 00a0 23 d5 cd 88 99 fa 7a 3c a2 6b 9d ee 08 04 2e 1a #.....z<.k...... 00b0 03 e2 5c ff 12 a8 21 bd a6 1e ce 8e aa 1c 8d f1 ..\...!......... 00c0 8f 45 7a c7 e5 e7 ad 96 b5 7b 00 00 00 18 60 82 .Ez......{....`. 00d0 63 b8 e4 65 32 cc 27 f1 51 22 32 01 29 ff 6a 0f c..e2.'.Q"2.).j. 00e0 91 87 b5 65 df 2f ...e./ Frame 4 (226 bytes on wire, 226 bytes captured) Arrival Time: Oct 26, 2004 13:17:41.129277000 Time delta from previous packet: 0.023325000 seconds Time since reference or first frame: 0.033067000 seconds Frame Number: 4 Packet Length: 226 bytes Capture Length: 226 bytes Ethernet II, Src: 00:05:30:01:80:af, Dst: 00:0c:29:fc:0c:9f Destination: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Source: 00:05:30:01:80:af (00:05:30:01:80:af) Type: IP (0x0800) Frame check sequence: 0xf2753f71 (correct) Internet Protocol, Src Addr: 165.227.249.144 (165.227.249.144), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 208 Identification: 0x0000 (0) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3b4b (correct) Source: 165.227.249.144 (165.227.249.144) Destination: 165.227.249.122 (165.227.249.122) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 188 Checksum: 0xeee2 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xC7D6C120979F7F3A Responder cookie: 0x940B3DEB4CE81C11 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 180 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 20 Nonce Data 0000 00 0c 29 fc 0c 9f 00 05 30 01 80 af 08 00 45 00 ..).....0.....E. 0010 00 d0 00 00 00 00 40 11 3b 4b a5 e3 f9 90 a5 e3 ......@.;K...... 0020 f9 7a 01 f4 01 f4 00 bc ee e2 c7 d6 c1 20 97 9f .z........... .. 0030 7f 3a 94 0b 3d eb 4c e8 1c 11 04 10 02 00 00 00 .:..=.L......... 0040 00 00 00 00 00 b4 0a 00 00 84 37 f6 e2 60 3c 10 ..........7..`<. 0050 95 95 72 2e 3d ba d3 59 aa 8f 03 7c 29 d1 32 40 ..r.=..Y...|).2@ 0060 f4 87 bf e4 86 ea 9f 21 e3 c7 d1 5a 40 33 94 7f .......!...Z@3.. 0070 ca e7 68 cb c6 8d fc c7 da 1e b2 dc 5d 48 c6 f1 ..h.........]H.. 0080 ce 96 c8 c1 5e 13 f3 90 19 ec 9e 40 e2 00 60 03 ....^......@..`. 0090 b7 d8 4b b0 70 b5 d8 00 ce 06 dd 43 2b 9c 18 b6 ..K.p......C+... 00a0 b9 78 20 49 5d 01 72 ef 1e 47 10 0f 03 c5 3b dd .x I].r..G....;. 00b0 e4 83 e3 e2 6f 82 53 a3 f7 72 59 26 94 bd b5 be ....o.S..rY&.... 00c0 ce 90 fa 93 99 0d c2 e4 e1 c2 00 00 00 14 b8 29 ...............) 00d0 f2 b4 3c 0d 6e 78 8e 2c b6 bb 80 cc db 86 f2 75 ..<.nx.,.......u 00e0 3f 71 ?q Frame 5 (114 bytes on wire, 114 bytes captured) Arrival Time: Oct 26, 2004 13:17:41.137045000 Time delta from previous packet: 0.007768000 seconds Time since reference or first frame: 0.040835000 seconds Frame Number: 5 Packet Length: 114 bytes Capture Length: 114 bytes Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:05:30:01:80:af Destination: 00:05:30:01:80:af (00:05:30:01:80:af) Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Type: IP (0x0800) Frame check sequence: 0x32618c01 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.144 (165.227.249.144) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfbba (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.144 (165.227.249.144) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 76 Checksum: 0xb735 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xC7D6C120979F7F3A Responder cookie: 0x940B3DEB4CE81C11 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 68 Encrypted payload (40 bytes) 0000 00 05 30 01 80 af 00 0c 29 fc 0c 9f 08 00 45 00 ..0.....).....E. 0010 00 60 00 00 40 00 40 11 fb ba a5 e3 f9 7a a5 e3 .`..@.@......z.. 0020 f9 90 01 f4 01 f4 00 4c b7 35 c7 d6 c1 20 97 9f .......L.5... .. 0030 7f 3a 94 0b 3d eb 4c e8 1c 11 05 10 02 01 00 00 .:..=.L......... 0040 00 00 00 00 00 44 71 e8 01 41 dd 41 2d 6b 3a a5 .....Dq..A.A-k:. 0050 4d 59 36 d8 a3 9a b2 ce 8c 4f af b8 4e cc 16 75 MY6......O..N..u 0060 a1 76 a3 28 3d 2f c0 78 13 8c c4 16 d5 04 32 61 .v.(=/.x......2a 0070 8c 01 .. Frame 6 (114 bytes on wire, 114 bytes captured) Arrival Time: Oct 26, 2004 13:17:41.158536000 Time delta from previous packet: 0.021491000 seconds Time since reference or first frame: 0.062326000 seconds Frame Number: 6 Packet Length: 114 bytes Capture Length: 114 bytes Ethernet II, Src: 00:05:30:01:80:af, Dst: 00:0c:29:fc:0c:9f Destination: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Source: 00:05:30:01:80:af (00:05:30:01:80:af) Type: IP (0x0800) Frame check sequence: 0xa90f04f2 (correct) Internet Protocol, Src Addr: 165.227.249.144 (165.227.249.144), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0x0000 (0) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3bbb (correct) Source: 165.227.249.144 (165.227.249.144) Destination: 165.227.249.122 (165.227.249.122) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 76 Checksum: 0x56c5 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xC7D6C120979F7F3A Responder cookie: 0x940B3DEB4CE81C11 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 68 Encrypted payload (40 bytes) 0000 00 0c 29 fc 0c 9f 00 05 30 01 80 af 08 00 45 00 ..).....0.....E. 0010 00 60 00 00 00 00 40 11 3b bb a5 e3 f9 90 a5 e3 .`....@.;....... 0020 f9 7a 01 f4 01 f4 00 4c 56 c5 c7 d6 c1 20 97 9f .z.....LV.... .. 0030 7f 3a 94 0b 3d eb 4c e8 1c 11 05 10 02 01 00 00 .:..=.L......... 0040 00 00 00 00 00 44 b8 6a b9 c9 42 3e 35 79 4c f5 .....D.j..B>5yL. 0050 da 0b cd 6a 8e 8d cd 4a 6a a9 56 5e 18 9c 04 e8 ...j...Jj.V^.... 0060 f6 53 f1 6e 48 6b cb 32 b8 56 b2 1f 05 2c a9 0f .S.nHk.2.V...,.. 0070 04 f2 .. Frame 7 (130 bytes on wire, 130 bytes captured) Arrival Time: Oct 26, 2004 13:17:41.159633000 Time delta from previous packet: 0.001097000 seconds Time since reference or first frame: 0.063423000 seconds Frame Number: 7 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:05:30:01:80:af, Dst: 00:0c:29:fc:0c:9f Destination: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Source: 00:05:30:01:80:af (00:05:30:01:80:af) Type: IP (0x0800) Frame check sequence: 0x3c5b0eae (correct) Internet Protocol, Src Addr: 165.227.249.144 (165.227.249.144), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0000 (0) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3bab (correct) Source: 165.227.249.144 (165.227.249.144) Destination: 165.227.249.122 (165.227.249.122) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 92 Checksum: 0xa4dd (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xC7D6C120979F7F3A Responder cookie: 0x940B3DEB4CE81C11 Next payload: Hash (8) Version: 1.0 Exchange type: Informational (5) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xB391D0C4 Length: 84 Encrypted payload (56 bytes) 0000 00 0c 29 fc 0c 9f 00 05 30 01 80 af 08 00 45 00 ..).....0.....E. 0010 00 70 00 00 00 00 40 11 3b ab a5 e3 f9 90 a5 e3 .p....@.;....... 0020 f9 7a 01 f4 01 f4 00 5c a4 dd c7 d6 c1 20 97 9f .z.....\..... .. 0030 7f 3a 94 0b 3d eb 4c e8 1c 11 08 10 05 01 b3 91 .:..=.L......... 0040 d0 c4 00 00 00 54 a6 f7 8b a8 9c ef bd 30 3e 9a .....T.......0>. 0050 65 75 0d 87 4b 53 28 69 f8 96 37 ac 0c 23 a1 e6 eu..KS(i..7..#.. 0060 b8 bd a6 5d 7b 67 8e 68 1d e6 01 b5 e2 8a 2d c3 ...]{g.h......-. 0070 7d a2 31 a4 ce 9c 4f 30 25 67 cd 25 c2 4a 3c 5b }.1...O0%g.%.J<[ 0080 0e ae .. Frame 8 (346 bytes on wire, 346 bytes captured) Arrival Time: Oct 26, 2004 13:17:41.174420000 Time delta from previous packet: 0.014787000 seconds Time since reference or first frame: 0.078210000 seconds Frame Number: 8 Packet Length: 346 bytes Capture Length: 346 bytes Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:05:30:01:80:af Destination: 00:05:30:01:80:af (00:05:30:01:80:af) Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Type: IP (0x0800) Frame check sequence: 0xb095e15c (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.144 (165.227.249.144) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 328 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfad2 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.144 (165.227.249.144) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 308 Checksum: 0xa725 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xC7D6C120979F7F3A Responder cookie: 0x940B3DEB4CE81C11 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xC83B4BBE Length: 300 Encrypted payload (272 bytes) 0000 00 05 30 01 80 af 00 0c 29 fc 0c 9f 08 00 45 00 ..0.....).....E. 0010 01 48 00 00 40 00 40 11 fa d2 a5 e3 f9 7a a5 e3 .H..@.@......z.. 0020 f9 90 01 f4 01 f4 01 34 a7 25 c7 d6 c1 20 97 9f .......4.%... .. 0030 7f 3a 94 0b 3d eb 4c e8 1c 11 08 10 20 01 c8 3b .:..=.L..... ..; 0040 4b be 00 00 01 2c b3 c2 cc 23 b6 2a c4 9e 0a 37 K....,...#.*...7 0050 b7 0f 8a 8f fb f6 f9 4a ff b4 f0 f5 84 56 5c a9 .......J.....V\. 0060 3b a8 1f 53 e9 6c 23 10 49 92 6b f1 ad 16 a3 b4 ;..S.l#.I.k..... 0070 67 78 87 07 d2 99 a3 07 7f 50 ac 25 c7 b2 fc 81 gx.......P.%.... 0080 95 5d b2 73 f1 11 c7 2f c9 8b 57 70 62 a7 54 22 .].s.../..Wpb.T" 0090 b3 df a0 32 de ec df 7c a5 84 78 55 96 01 e3 40 ...2...|..xU...@ 00a0 b3 35 e3 a3 2d 2e 0f 08 e6 f6 d6 bc 58 5c 59 07 .5..-.......X\Y. 00b0 1b 11 c2 95 e1 4c 05 eb f3 54 6e 2b 7a 84 c3 92 .....L...Tn+z... 00c0 95 14 8b d0 6a db 12 fe 5b 83 c4 0d 40 be 06 43 ....j...[...@..C 00d0 f3 ae 3b fb a2 05 7d 54 61 9b ab a3 a6 95 c2 75 ..;...}Ta......u 00e0 86 2a 4c 33 7f 1f 86 27 a5 a6 f8 40 19 b4 dd a8 .*L3...'...@.... 00f0 53 2c 38 21 e0 2e 01 d7 6d 7b 03 51 1d fc 13 0b S,8!....m{.Q.... 0100 24 20 7b 5e 5e 16 33 17 b6 da a9 53 eb 0d b4 2e $ {^^.3....S.... 0110 89 c4 55 1a 28 de cf 3a cc 11 cc de 77 34 94 22 ..U.(..:....w4." 0120 a2 85 47 96 81 0c 42 47 0e fb 6b 91 ab 96 d4 ff ..G...BG..k..... 0130 ec e3 46 97 5d c9 6e 90 66 2c fa 64 86 00 cc 5c ..F.].n.f,.d...\ 0140 6b d5 e9 53 11 df 04 94 b8 42 f0 57 21 2b 2e d0 k..S.....B.W!+.. 0150 31 49 0e 1e 13 a0 b0 95 e1 5c 1I.......\ Frame 9 (338 bytes on wire, 338 bytes captured) Arrival Time: Oct 26, 2004 13:17:41.259391000 Time delta from previous packet: 0.084971000 seconds Time since reference or first frame: 0.163181000 seconds Frame Number: 9 Packet Length: 338 bytes Capture Length: 338 bytes Ethernet II, Src: 00:05:30:01:80:af, Dst: 00:0c:29:fc:0c:9f Destination: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Source: 00:05:30:01:80:af (00:05:30:01:80:af) Type: IP (0x0800) Frame check sequence: 0xf03b912b (correct) Internet Protocol, Src Addr: 165.227.249.144 (165.227.249.144), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 320 Identification: 0x0000 (0) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3adb (correct) Source: 165.227.249.144 (165.227.249.144) Destination: 165.227.249.122 (165.227.249.122) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 300 Checksum: 0xe622 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xC7D6C120979F7F3A Responder cookie: 0x940B3DEB4CE81C11 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xC83B4BBE Length: 292 Encrypted payload (264 bytes) 0000 00 0c 29 fc 0c 9f 00 05 30 01 80 af 08 00 45 00 ..).....0.....E. 0010 01 40 00 00 00 00 40 11 3a db a5 e3 f9 90 a5 e3 .@....@.:....... 0020 f9 7a 01 f4 01 f4 01 2c e6 22 c7 d6 c1 20 97 9f .z.....,."... .. 0030 7f 3a 94 0b 3d eb 4c e8 1c 11 08 10 20 01 c8 3b .:..=.L..... ..; 0040 4b be 00 00 01 24 b9 d9 2a f0 72 86 5f d3 d1 13 K....$..*.r._... 0050 fe a9 3b 03 cb 9f 73 8e a4 19 83 7f 1a d3 9e aa ..;...s......... 0060 01 f4 6d 02 6a 15 48 a2 8a 5e e0 7f 5a 76 c2 36 ..m.j.H..^..Zv.6 0070 df be 7b 8b 74 d1 a3 31 81 16 58 fb 15 40 5f 4c ..{.t..1..X..@_L 0080 37 ed 06 1d d4 73 a4 da e9 76 b0 ce d4 70 33 e9 7....s...v...p3. 0090 89 15 43 67 2a ad 77 9e 7b ce 0d d7 27 97 55 4e ..Cg*.w.{...'.UN 00a0 b8 d0 10 84 81 c1 e7 05 ec c3 bc e8 c3 38 dd 85 .............8.. 00b0 88 93 8b b0 49 29 53 cc 2b 85 13 2d 41 f3 8f f7 ....I)S.+..-A... 00c0 be ea b3 8b a2 7e d1 6c 68 81 1b dd 7f 36 e9 dc .....~.lh....6.. 00d0 7e f2 16 93 01 77 9a 9e f3 3f 0c ec d4 42 95 1b ~....w...?...B.. 00e0 75 e7 5c d4 2e 45 24 92 f4 67 a9 d5 b9 90 f6 c8 u.\..E$..g...... 00f0 68 3e 47 e9 fd 2a bb 08 c5 50 1f 90 7c 3b 13 df h>G..*...P..|;.. 0100 c2 85 4c 04 4f 3c 4d 7f c9 5b c2 86 47 f3 a9 b8 ..L.O.i. 0070 2b 79 03 cc fc 77 e9 20 db 7a a6 7f 08 dc f5 a7 +y...w. .z...... 0080 a1 9c .. Frame 14 (130 bytes on wire, 130 bytes captured) Arrival Time: Oct 26, 2004 13:17:46.366927000 Time delta from previous packet: 4.785541000 seconds Time since reference or first frame: 5.270717000 seconds Frame Number: 14 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:05:30:01:80:af Destination: 00:05:30:01:80:af (00:05:30:01:80:af) Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Type: IP (0x0800) Frame check sequence: 0x3a20427b (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.144 (165.227.249.144) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x002d (45) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x7c5c (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.144 (165.227.249.144) Encapsulating Security Payload SPI: 0x08267201 Sequence: 2 Data (84 bytes) 0000 00 05 30 01 80 af 00 0c 29 fc 0c 9f 08 00 45 00 ..0.....).....E. 0010 00 70 00 2d 00 00 ff 32 7c 5c a5 e3 f9 7a a5 e3 .p.-...2|\...z.. 0020 f9 90 08 26 72 01 00 00 00 02 f3 ad 3e e4 69 0b ...&r.......>.i. 0030 2b 79 80 11 c5 29 19 ea 63 64 19 28 8a a2 b0 2e +y...)..cd.(.... 0040 68 1e 3f 6a c5 a2 80 2c cb ac 9f f2 91 b0 a6 d0 h.?j...,........ 0050 81 d4 e4 80 20 16 70 3e 6e d7 45 70 3f ea 21 5f .... .p>n.Ep?.!_ 0060 65 d9 eb 4f bb 59 66 30 44 87 c6 c6 8c 2f a8 e6 e..O.Yf0D..../.. 0070 e7 a9 fe 7b dc 0c a9 5a b2 e0 e2 65 e4 77 3a 20 ...{...Z...e.w: 0080 42 7b B{ Frame 15 (130 bytes on wire, 130 bytes captured) Arrival Time: Oct 26, 2004 13:17:46.367041000 Time delta from previous packet: 0.000114000 seconds Time since reference or first frame: 5.270831000 seconds Frame Number: 15 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:05:30:01:80:af, Dst: 00:0c:29:fc:0c:9f Destination: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Source: 00:05:30:01:80:af (00:05:30:01:80:af) Type: IP (0x0800) Frame check sequence: 0x77f9eee8 (correct) Internet Protocol, Src Addr: 165.227.249.144 (165.227.249.144), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0000 (0) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x3b8a (correct) Source: 165.227.249.144 (165.227.249.144) Destination: 165.227.249.122 (165.227.249.122) Encapsulating Security Payload SPI: 0x7e8fa999 Sequence: 2 Data (84 bytes) 0000 00 0c 29 fc 0c 9f 00 05 30 01 80 af 08 00 45 00 ..).....0.....E. 0010 00 70 00 00 00 00 40 32 3b 8a a5 e3 f9 90 a5 e3 .p....@2;....... 0020 f9 7a 7e 8f a9 99 00 00 00 02 36 01 28 62 70 e1 .z~.......6.(bp. 0030 12 32 45 02 60 61 92 ae f6 6b ac 5e b5 6d 51 00 .2E.`a...k.^.mQ. 0040 9e 6b aa 0b 4e bb b5 e6 9f 41 a1 52 27 d9 8b 85 .k..N....A.R'... 0050 95 b1 13 51 45 f7 a7 36 70 a2 5d 76 49 18 49 92 ...QE..6p.]vI.I. 0060 de 8f c3 8d 27 0c ae 16 8b 4f ab 01 b6 e8 17 a8 ....'....O...... 0070 22 5a 36 c3 bc 73 75 f4 2d 5f 89 ba 8b ef 77 f9 "Z6..su.-_....w. 0080 ee e8 .. Frame 16 (130 bytes on wire, 130 bytes captured) Arrival Time: Oct 26, 2004 13:17:47.370051000 Time delta from previous packet: 1.003010000 seconds Time since reference or first frame: 6.273841000 seconds Frame Number: 16 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:05:30:01:80:af Destination: 00:05:30:01:80:af (00:05:30:01:80:af) Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Type: IP (0x0800) Frame check sequence: 0x9ed6e146 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.144 (165.227.249.144) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x002e (46) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x7c5b (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.144 (165.227.249.144) Encapsulating Security Payload SPI: 0x08267201 Sequence: 3 Data (84 bytes) 0000 00 05 30 01 80 af 00 0c 29 fc 0c 9f 08 00 45 00 ..0.....).....E. 0010 00 70 00 2e 00 00 ff 32 7c 5b a5 e3 f9 7a a5 e3 .p.....2|[...z.. 0020 f9 90 08 26 72 01 00 00 00 03 c6 c6 8c 2f a8 e6 ...&r......../.. 0030 e7 a9 1c 13 4e 4f 09 ba 13 e8 6b 9e 16 ac 31 64 ....NO....k...1d 0040 f8 03 5b a4 88 bb 5c 3d 52 b8 52 cf 74 3b f5 9d ..[...\=R.R.t;.. 0050 e0 92 cd ba 9d f5 7e fb 95 46 4b b2 56 23 94 17 ......~..FK.V#.. 0060 35 71 f8 96 df 53 e3 61 d5 ea 28 65 ad fe 0c fb 5q...S.a..(e.... 0070 95 44 e0 c2 08 3f 5b b8 b3 b7 6f 19 e7 2a 9e d6 .D...?[...o..*.. 0080 e1 46 .F Frame 17 (130 bytes on wire, 130 bytes captured) Arrival Time: Oct 26, 2004 13:17:47.370130000 Time delta from previous packet: 0.000079000 seconds Time since reference or first frame: 6.273920000 seconds Frame Number: 17 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:05:30:01:80:af, Dst: 00:0c:29:fc:0c:9f Destination: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Source: 00:05:30:01:80:af (00:05:30:01:80:af) Type: IP (0x0800) Frame check sequence: 0xcdb5f527 (correct) Internet Protocol, Src Addr: 165.227.249.144 (165.227.249.144), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0001 (1) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x3b89 (correct) Source: 165.227.249.144 (165.227.249.144) Destination: 165.227.249.122 (165.227.249.122) Encapsulating Security Payload SPI: 0x7e8fa999 Sequence: 3 Data (84 bytes) 0000 00 0c 29 fc 0c 9f 00 05 30 01 80 af 08 00 45 00 ..).....0.....E. 0010 00 70 00 01 00 00 40 32 3b 89 a5 e3 f9 90 a5 e3 .p....@2;....... 0020 f9 7a 7e 8f a9 99 00 00 00 03 7f 04 d6 06 7c ca .z~...........|. 0030 a7 e0 26 e6 0c 6e 0d 55 c2 a3 8c ad ad 48 a2 2b ..&..n.U.....H.+ 0040 e0 2c 52 24 c8 57 73 80 f0 8e 4d 47 65 4a 20 be .,R$.Ws...MGeJ . 0050 5a dd 0e 20 9f 05 5c 3a 78 da 22 65 b8 b8 b8 1d Z.. ..\:x."e.... 0060 85 a7 31 86 05 df 83 4c 9f 76 62 2c 55 d0 dd a5 ..1....L.vb,U... 0070 80 18 73 76 97 c7 dd 4e 28 3f cf 9d bc 89 cd b5 ..sv...N(?...... 0080 f5 27 .' Frame 18 (130 bytes on wire, 130 bytes captured) Arrival Time: Oct 26, 2004 13:17:48.381733000 Time delta from previous packet: 1.011603000 seconds Time since reference or first frame: 7.285523000 seconds Frame Number: 18 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:05:30:01:80:af Destination: 00:05:30:01:80:af (00:05:30:01:80:af) Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Type: IP (0x0800) Frame check sequence: 0xbbeb5d1b (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.144 (165.227.249.144) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x002f (47) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x7c5a (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.144 (165.227.249.144) Encapsulating Security Payload SPI: 0x08267201 Sequence: 4 Data (84 bytes) 0000 00 05 30 01 80 af 00 0c 29 fc 0c 9f 08 00 45 00 ..0.....).....E. 0010 00 70 00 2f 00 00 ff 32 7c 5a a5 e3 f9 7a a5 e3 .p./...2|Z...z.. 0020 f9 90 08 26 72 01 00 00 00 04 28 65 ad fe 0c fb ...&r.....(e.... 0030 95 44 31 30 5d 9e ca a4 d3 cd f6 31 6e e6 53 73 .D10]......1n.Ss 0040 bd d1 fa 43 21 8f 47 df 57 20 b9 e6 1e 63 60 ad ...C!.G.W ...c`. 0050 0b 80 85 fb ac 2b 90 c1 ad 7c c3 bb 27 ae 51 aa .....+...|..'.Q. 0060 e5 44 72 a3 da 42 49 a8 c1 c7 db b2 96 17 ad 23 .Dr..BI........# 0070 ad e3 90 c0 16 85 19 2c 67 2b 6e 13 f9 30 bb eb .......,g+n..0.. 0080 5d 1b ]. Frame 19 (130 bytes on wire, 130 bytes captured) Arrival Time: Oct 26, 2004 13:17:48.381823000 Time delta from previous packet: 0.000090000 seconds Time since reference or first frame: 7.285613000 seconds Frame Number: 19 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:05:30:01:80:af, Dst: 00:0c:29:fc:0c:9f Destination: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Source: 00:05:30:01:80:af (00:05:30:01:80:af) Type: IP (0x0800) Frame check sequence: 0xbed103f6 (correct) Internet Protocol, Src Addr: 165.227.249.144 (165.227.249.144), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0002 (2) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x3b88 (correct) Source: 165.227.249.144 (165.227.249.144) Destination: 165.227.249.122 (165.227.249.122) Encapsulating Security Payload SPI: 0x7e8fa999 Sequence: 4 Data (84 bytes) 0000 00 0c 29 fc 0c 9f 00 05 30 01 80 af 08 00 45 00 ..).....0.....E. 0010 00 70 00 02 00 00 40 32 3b 88 a5 e3 f9 90 a5 e3 .p....@2;....... 0020 f9 7a 7e 8f a9 99 00 00 00 04 fe c0 37 5a 2d ce .z~.........7Z-. 0030 22 ff f8 ca e9 e5 b1 44 23 4a 43 f1 4f a6 e1 4c "......D#JC.O..L 0040 6c 77 aa f3 8f 76 32 4e e8 3d 0f 4d 8d c7 96 4c lw...v2N.=.M...L 0050 c0 0b b7 8f 94 c3 56 5f dd 4e 5b 97 9d c0 10 b7 ......V_.N[..... 0060 26 9f cd ed 93 46 72 dd 4c b2 b3 83 4e 10 ae f0 &....Fr.L...N... 0070 38 98 d4 71 8c bc 11 f4 a6 4d 40 7a ca 4d be d1 8..q.....M@z.M.. 0080 03 f6 ..