Frame 1 (266 bytes on wire, 266 bytes captured) Arrival Time: Jan 28, 2005 14:53:11.928163000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 266 bytes Capture Length: 266 bytes Ethernet II, Src: 00:0c:29:e6:ad:b9, Dst: 00:0f:b5:5f:1b:8f Destination: 00:0f:b5:5f:1b:8f (00:0f:b5:5f:1b:8f) Source: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Type: IP (0x0800) Frame check sequence: 0xd928e357 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.100 (165.227.249.100) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 248 Identification: 0x76bc (30396) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xc490 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.100 (165.227.249.100) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 228 Checksum: 0x91d1 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xBA5B4F945A52540E Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 220 Security Association payload Next payload: Vendor ID (13) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 0 Next payload: NONE (0) Length: 40 Proposal number: 0 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 0 Next payload: NONE (0) Length: 32 Transform number: 0 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: unknown vendor ID: 0x8F9CC94E01248ECDF147594C284B213B Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-stenberg-ipsec-nat-traversal-01 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-stenberg-ipsec-nat-traversal-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-03 0000 00 0f b5 5f 1b 8f 00 0c 29 e6 ad b9 08 00 45 00 ..._....).....E. 0010 00 f8 76 bc 00 00 40 11 c4 90 a5 e3 f9 7c a5 e3 ..v...@......|.. 0020 f9 64 01 f4 01 f4 00 e4 91 d1 ba 5b 4f 94 5a 52 .d.........[O.ZR 0030 54 0e 00 00 00 00 00 00 00 00 01 10 02 00 00 00 T............... 0040 00 00 00 00 00 dc 0d 00 00 34 00 00 00 01 00 00 .........4...... 0050 00 01 00 00 00 28 00 01 00 01 00 00 00 20 00 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 03 00 01 80 04 ................ 0070 00 02 80 0b 00 01 80 0c 70 80 0d 00 00 14 8f 9c ........p....... 0080 c9 4e 01 24 8e cd f1 47 59 4c 28 4b 21 3b 0d 00 .N.$...GYL(K!;.. 0090 00 14 27 ba b5 dc 01 ea 07 60 ea 4e 31 90 ac 27 ..'......`.N1..' 00a0 c0 d0 0d 00 00 14 61 05 c4 22 e7 68 47 e4 3f 96 ......a..".hG.?. 00b0 84 80 12 92 ae cd 0d 00 00 14 44 85 15 2d 18 b6 ..........D..-.. 00c0 bb cd 0b e8 a8 46 95 79 dd cc 0d 00 00 14 cd 60 .....F.y.......` 00d0 46 43 35 df 21 f8 7c fd b2 fc 68 b6 a4 48 0d 00 FC5.!.|...h..H.. 00e0 00 14 90 cb 80 91 3e bb 69 6e 08 63 81 b5 ec 42 ......>.in.c...B 00f0 7b 1f 00 00 00 14 7d 94 19 a6 53 10 ca 6f 2c 17 {.....}...S..o,. 0100 9d 92 15 52 9d 56 d9 28 e3 57 ...R.V.(.W Frame 2 (146 bytes on wire, 146 bytes captured) Arrival Time: Jan 28, 2005 14:53:11.959327000 Time delta from previous packet: 0.031164000 seconds Time since reference or first frame: 0.031164000 seconds Frame Number: 2 Packet Length: 146 bytes Capture Length: 146 bytes Ethernet II, Src: 00:0f:b5:5f:1b:8f, Dst: 00:0c:29:e6:ad:b9 Destination: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Source: 00:0f:b5:5f:1b:8f (00:0f:b5:5f:1b:8f) Type: IP (0x0800) Frame check sequence: 0xc6a1e229 (correct) Internet Protocol, Src Addr: 165.227.249.100 (165.227.249.100), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 128 Identification: 0x002e (46) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3b97 (correct) Source: 165.227.249.100 (165.227.249.100) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 108 Checksum: 0x1e40 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xBA5B4F945A52540E Responder cookie: 0xBE9570CFCB4E13DD Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 100 Security Association payload Next payload: Vendor ID (13) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 0 Next payload: NONE (0) Length: 40 Proposal number: 0 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 0 Next payload: NONE (0) Length: 32 Transform number: 0 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-00 0000 00 0c 29 e6 ad b9 00 0f b5 5f 1b 8f 08 00 45 00 ..)......_....E. 0010 00 80 00 2e 00 00 40 11 3b 97 a5 e3 f9 64 a5 e3 ......@.;....d.. 0020 f9 7c 01 f4 01 f4 00 6c 1e 40 ba 5b 4f 94 5a 52 .|.....l.@.[O.ZR 0030 54 0e be 95 70 cf cb 4e 13 dd 01 10 02 00 00 00 T...p..N........ 0040 00 00 00 00 00 64 0d 00 00 34 00 00 00 01 00 00 .....d...4...... 0050 00 01 00 00 00 28 00 01 00 01 00 00 00 20 00 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 03 00 01 80 04 ................ 0070 00 02 80 0b 00 01 80 0c 70 80 00 00 00 14 44 85 ........p.....D. 0080 15 2d 18 b6 bb cd 0b e8 a8 46 95 79 dd cc c6 a1 .-.......F.y.... 0090 e2 29 .) Frame 3 (274 bytes on wire, 274 bytes captured) Arrival Time: Jan 28, 2005 14:53:11.978598000 Time delta from previous packet: 0.019271000 seconds Time since reference or first frame: 0.050435000 seconds Frame Number: 3 Packet Length: 274 bytes Capture Length: 274 bytes Ethernet II, Src: 00:0c:29:e6:ad:b9, Dst: 00:0f:b5:5f:1b:8f Destination: 00:0f:b5:5f:1b:8f (00:0f:b5:5f:1b:8f) Source: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Type: IP (0x0800) Frame check sequence: 0xde1ca155 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.100 (165.227.249.100) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 256 Identification: 0x76bd (30397) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xc487 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.100 (165.227.249.100) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 236 Checksum: 0x1fcb (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xBA5B4F945A52540E Responder cookie: 0xBE9570CFCB4E13DD Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 228 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: Private USE (130) Length: 20 Nonce Data Unknown payload type payload Next payload: Private USE (130) Length: 24 Payload Unknown payload type payload Next payload: NONE (0) Length: 24 Payload 0000 00 0f b5 5f 1b 8f 00 0c 29 e6 ad b9 08 00 45 00 ..._....).....E. 0010 01 00 76 bd 00 00 40 11 c4 87 a5 e3 f9 7c a5 e3 ..v...@......|.. 0020 f9 64 01 f4 01 f4 00 ec 1f cb ba 5b 4f 94 5a 52 .d.........[O.ZR 0030 54 0e be 95 70 cf cb 4e 13 dd 04 10 02 00 00 00 T...p..N........ 0040 00 00 00 00 00 e4 0a 00 00 84 e6 13 db f2 55 c1 ..............U. 0050 a7 b5 1c 02 8a 05 b1 3a f9 61 a3 f2 f2 13 31 3c .......:.a....1< 0060 8b 56 5a 11 3c f2 d9 9f 88 4f 47 d1 3c 18 3e 9a .VZ.<....OG.<.>. 0070 11 0e ef 80 37 e8 e3 74 08 53 4e 87 11 c6 5a b6 ....7..t.SN...Z. 0080 a2 5c b1 34 aa 3c a4 6c 91 f6 91 de 6b 4e ca 70 .\.4.<.l....kN.p 0090 22 65 14 ed d1 90 45 e6 fb af 27 8b 45 88 36 67 "e....E...'.E.6g 00a0 dd bc ea 06 e4 eb 33 c3 c6 21 54 a2 08 7c f4 a5 ......3..!T..|.. 00b0 ce e3 81 d2 bd b1 f2 28 6d 75 4a a2 f6 89 2f 8d .......(muJ.../. 00c0 0c 01 f6 87 4c 0b 77 c5 cd af 82 00 00 14 56 20 ....L.w.......V 00d0 34 83 1a 45 5d b4 73 af 24 87 48 74 3b bf 82 00 4..E].s.$.Ht;... 00e0 00 18 2c 08 20 e6 bd 4d d1 3a 2a c2 d6 44 d2 79 ..,. ..M.:*..D.y 00f0 dd 53 2b 3d 18 c3 00 00 00 18 03 e0 bb c0 c8 80 .S+=............ 0100 ce 21 ae c6 59 e8 02 da 84 9e 9d 13 f9 ef de 1c .!..Y........... 0110 a1 55 .U Frame 4 (274 bytes on wire, 274 bytes captured) Arrival Time: Jan 28, 2005 14:53:12.488289000 Time delta from previous packet: 0.509691000 seconds Time since reference or first frame: 0.560126000 seconds Frame Number: 4 Packet Length: 274 bytes Capture Length: 274 bytes Ethernet II, Src: 00:0c:29:e6:ad:b9, Dst: 00:0f:b5:5f:1b:8f Destination: 00:0f:b5:5f:1b:8f (00:0f:b5:5f:1b:8f) Source: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Type: IP (0x0800) Frame check sequence: 0x9b00c7ab (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.100 (165.227.249.100) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 256 Identification: 0x76be (30398) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xc486 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.100 (165.227.249.100) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 236 Checksum: 0x1fcb (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xBA5B4F945A52540E Responder cookie: 0xBE9570CFCB4E13DD Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 228 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: Private USE (130) Length: 20 Nonce Data Unknown payload type payload Next payload: Private USE (130) Length: 24 Payload Unknown payload type payload Next payload: NONE (0) Length: 24 Payload 0000 00 0f b5 5f 1b 8f 00 0c 29 e6 ad b9 08 00 45 00 ..._....).....E. 0010 01 00 76 be 00 00 40 11 c4 86 a5 e3 f9 7c a5 e3 ..v...@......|.. 0020 f9 64 01 f4 01 f4 00 ec 1f cb ba 5b 4f 94 5a 52 .d.........[O.ZR 0030 54 0e be 95 70 cf cb 4e 13 dd 04 10 02 00 00 00 T...p..N........ 0040 00 00 00 00 00 e4 0a 00 00 84 e6 13 db f2 55 c1 ..............U. 0050 a7 b5 1c 02 8a 05 b1 3a f9 61 a3 f2 f2 13 31 3c .......:.a....1< 0060 8b 56 5a 11 3c f2 d9 9f 88 4f 47 d1 3c 18 3e 9a .VZ.<....OG.<.>. 0070 11 0e ef 80 37 e8 e3 74 08 53 4e 87 11 c6 5a b6 ....7..t.SN...Z. 0080 a2 5c b1 34 aa 3c a4 6c 91 f6 91 de 6b 4e ca 70 .\.4.<.l....kN.p 0090 22 65 14 ed d1 90 45 e6 fb af 27 8b 45 88 36 67 "e....E...'.E.6g 00a0 dd bc ea 06 e4 eb 33 c3 c6 21 54 a2 08 7c f4 a5 ......3..!T..|.. 00b0 ce e3 81 d2 bd b1 f2 28 6d 75 4a a2 f6 89 2f 8d .......(muJ.../. 00c0 0c 01 f6 87 4c 0b 77 c5 cd af 82 00 00 14 56 20 ....L.w.......V 00d0 34 83 1a 45 5d b4 73 af 24 87 48 74 3b bf 82 00 4..E].s.$.Ht;... 00e0 00 18 2c 08 20 e6 bd 4d d1 3a 2a c2 d6 44 d2 79 ..,. ..M.:*..D.y 00f0 dd 53 2b 3d 18 c3 00 00 00 18 03 e0 bb c0 c8 80 .S+=............ 0100 ce 21 ae c6 59 e8 02 da 84 9e 9d 13 f9 ef 9b 00 .!..Y........... 0110 c7 ab .. Frame 5 (290 bytes on wire, 290 bytes captured) Arrival Time: Jan 28, 2005 14:53:13.327730000 Time delta from previous packet: 0.839441000 seconds Time since reference or first frame: 1.399567000 seconds Frame Number: 5 Packet Length: 290 bytes Capture Length: 290 bytes Ethernet II, Src: 00:0f:b5:5f:1b:8f, Dst: 00:0c:29:e6:ad:b9 Destination: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Source: 00:0f:b5:5f:1b:8f (00:0f:b5:5f:1b:8f) Type: IP (0x0800) Frame check sequence: 0x3fbb7a15 (correct) Internet Protocol, Src Addr: 165.227.249.100 (165.227.249.100), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 272 Identification: 0x002f (47) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3b06 (correct) Source: 165.227.249.100 (165.227.249.100) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 252 Checksum: 0x4654 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xBA5B4F945A52540E Responder cookie: 0xBE9570CFCB4E13DD Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 244 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: Private USE (130) Length: 12 Nonce Data Unknown payload type payload Next payload: Private USE (130) Length: 24 Payload Unknown payload type payload Next payload: Private USE (130) Length: 24 Payload Unknown payload type payload Next payload: NONE (0) Length: 24 Payload 0000 00 0c 29 e6 ad b9 00 0f b5 5f 1b 8f 08 00 45 00 ..)......_....E. 0010 01 10 00 2f 00 00 40 11 3b 06 a5 e3 f9 64 a5 e3 .../..@.;....d.. 0020 f9 7c 01 f4 01 f4 00 fc 46 54 ba 5b 4f 94 5a 52 .|......FT.[O.ZR 0030 54 0e be 95 70 cf cb 4e 13 dd 04 10 02 00 00 00 T...p..N........ 0040 00 00 00 00 00 f4 0a 00 00 84 b4 c2 d8 75 7e 28 .............u~( 0050 c4 d2 e2 13 67 e6 07 0b 34 79 19 0b 5d a0 7a 6e ....g...4y..].zn 0060 f9 dd 2f 2f ee 17 b6 b7 7e 36 9c 5d 19 de ae 74 ..//....~6.]...t 0070 f6 b8 7b bf 72 54 fc 5b 2d 5c 1f b4 19 40 32 8a ..{.rT.[-\...@2. 0080 00 15 a3 36 43 1c 6c 6a fc b3 6b 05 0e fa 6d aa ...6C.lj..k...m. 0090 70 25 4d 1a 09 af 5b 74 0f 1d 63 e7 4b 37 1f f7 p%M...[t..c.K7.. 00a0 b1 5f e5 39 98 de e3 ca a3 73 82 fa ae c5 ed 81 ._.9.....s...... 00b0 07 93 e7 ad 57 67 04 8b 26 22 6b 32 37 c0 ba 71 ....Wg..&"k27..q 00c0 46 6a 81 f4 68 8e 97 08 24 06 82 00 00 0c 94 37 Fj..h...$......7 00d0 97 c8 c4 e3 05 1c 82 00 00 18 03 e0 bb c0 c8 80 ................ 00e0 ce 21 ae c6 59 e8 02 da 84 9e 9d 13 f9 ef 82 00 .!..Y........... 00f0 00 18 75 43 c3 55 bb f0 2d 11 17 e1 61 d4 49 5d ..uC.U..-...a.I] 0100 09 00 93 fc 16 e5 00 00 00 18 2c 08 20 e6 bd 4d ..........,. ..M 0110 d1 3a 2a c2 d6 44 d2 79 dd 53 2b 3d 18 c3 3f bb .:*..D.y.S+=..?. 0120 7a 15 z. Frame 6 (122 bytes on wire, 122 bytes captured) Arrival Time: Jan 28, 2005 14:53:13.333882000 Time delta from previous packet: 0.006152000 seconds Time since reference or first frame: 1.405719000 seconds Frame Number: 6 Packet Length: 122 bytes Capture Length: 122 bytes Ethernet II, Src: 00:0c:29:e6:ad:b9, Dst: 00:0f:b5:5f:1b:8f Destination: 00:0f:b5:5f:1b:8f (00:0f:b5:5f:1b:8f) Source: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Type: IP (0x0800) Frame check sequence: 0x311c8c36 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.100 (165.227.249.100) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 104 Identification: 0x76bf (30399) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xc51d (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.100 (165.227.249.100) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 84 Checksum: 0x14bc (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xBA5B4F945A52540E Responder cookie: 0xBE9570CFCB4E13DD Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 76 Encrypted payload (48 bytes) 0000 00 0f b5 5f 1b 8f 00 0c 29 e6 ad b9 08 00 45 00 ..._....).....E. 0010 00 68 76 bf 00 00 40 11 c5 1d a5 e3 f9 7c a5 e3 .hv...@......|.. 0020 f9 64 01 f4 01 f4 00 54 14 bc ba 5b 4f 94 5a 52 .d.....T...[O.ZR 0030 54 0e be 95 70 cf cb 4e 13 dd 05 10 02 01 00 00 T...p..N........ 0040 00 00 00 00 00 4c d6 d1 e0 77 fa 37 e4 a1 15 bb .....L...w.7.... 0050 dd df 9c 0a 3d 9f 4d 27 49 cb ee e7 8b 23 0c 66 ....=.M'I....#.f 0060 26 1f eb ec 4c 05 46 48 03 a3 fd 9f ff 87 0d b5 &...L.FH........ 0070 e5 d4 dd bd e2 81 31 1c 8c 36 ......1..6 Frame 7 (122 bytes on wire, 122 bytes captured) Arrival Time: Jan 28, 2005 14:53:13.851174000 Time delta from previous packet: 0.517292000 seconds Time since reference or first frame: 1.923011000 seconds Frame Number: 7 Packet Length: 122 bytes Capture Length: 122 bytes Ethernet II, Src: 00:0c:29:e6:ad:b9, Dst: 00:0f:b5:5f:1b:8f Destination: 00:0f:b5:5f:1b:8f (00:0f:b5:5f:1b:8f) Source: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Type: IP (0x0800) Frame check sequence: 0xefc1287c (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.100 (165.227.249.100) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 104 Identification: 0x76c0 (30400) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xc51c (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.100 (165.227.249.100) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 84 Checksum: 0x14bc (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xBA5B4F945A52540E Responder cookie: 0xBE9570CFCB4E13DD Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 76 Encrypted payload (48 bytes) 0000 00 0f b5 5f 1b 8f 00 0c 29 e6 ad b9 08 00 45 00 ..._....).....E. 0010 00 68 76 c0 00 00 40 11 c5 1c a5 e3 f9 7c a5 e3 .hv...@......|.. 0020 f9 64 01 f4 01 f4 00 54 14 bc ba 5b 4f 94 5a 52 .d.....T...[O.ZR 0030 54 0e be 95 70 cf cb 4e 13 dd 05 10 02 01 00 00 T...p..N........ 0040 00 00 00 00 00 4c d6 d1 e0 77 fa 37 e4 a1 15 bb .....L...w.7.... 0050 dd df 9c 0a 3d 9f 4d 27 49 cb ee e7 8b 23 0c 66 ....=.M'I....#.f 0060 26 1f eb ec 4c 05 46 48 03 a3 fd 9f ff 87 0d b5 &...L.FH........ 0070 e5 d4 dd bd e2 81 ef c1 28 7c ........(| Frame 8 (122 bytes on wire, 122 bytes captured) Arrival Time: Jan 28, 2005 14:53:14.870679000 Time delta from previous packet: 1.019505000 seconds Time since reference or first frame: 2.942516000 seconds Frame Number: 8 Packet Length: 122 bytes Capture Length: 122 bytes Ethernet II, Src: 00:0c:29:e6:ad:b9, Dst: 00:0f:b5:5f:1b:8f Destination: 00:0f:b5:5f:1b:8f (00:0f:b5:5f:1b:8f) Source: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Type: IP (0x0800) Frame check sequence: 0x238056e7 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.100 (165.227.249.100) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 104 Identification: 0x76c1 (30401) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xc51b (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.100 (165.227.249.100) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 84 Checksum: 0x14bc (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xBA5B4F945A52540E Responder cookie: 0xBE9570CFCB4E13DD Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 76 Encrypted payload (48 bytes) 0000 00 0f b5 5f 1b 8f 00 0c 29 e6 ad b9 08 00 45 00 ..._....).....E. 0010 00 68 76 c1 00 00 40 11 c5 1b a5 e3 f9 7c a5 e3 .hv...@......|.. 0020 f9 64 01 f4 01 f4 00 54 14 bc ba 5b 4f 94 5a 52 .d.....T...[O.ZR 0030 54 0e be 95 70 cf cb 4e 13 dd 05 10 02 01 00 00 T...p..N........ 0040 00 00 00 00 00 4c d6 d1 e0 77 fa 37 e4 a1 15 bb .....L...w.7.... 0050 dd df 9c 0a 3d 9f 4d 27 49 cb ee e7 8b 23 0c 66 ....=.M'I....#.f 0060 26 1f eb ec 4c 05 46 48 03 a3 fd 9f ff 87 0d b5 &...L.FH........ 0070 e5 d4 dd bd e2 81 23 80 56 e7 ......#.V. Frame 9 (114 bytes on wire, 114 bytes captured) Arrival Time: Jan 28, 2005 14:53:14.978290000 Time delta from previous packet: 0.107611000 seconds Time since reference or first frame: 3.050127000 seconds Frame Number: 9 Packet Length: 114 bytes Capture Length: 114 bytes Ethernet II, Src: 00:0f:b5:5f:1b:8f, Dst: 00:0c:29:e6:ad:b9 Destination: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Source: 00:0f:b5:5f:1b:8f (00:0f:b5:5f:1b:8f) Type: IP (0x0800) Frame check sequence: 0x920d2bfa (correct) Internet Protocol, Src Addr: 165.227.249.100 (165.227.249.100), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0x0030 (48) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3bb5 (correct) Source: 165.227.249.100 (165.227.249.100) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 76 Checksum: 0x6a1c (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xBA5B4F945A52540E Responder cookie: 0xBE9570CFCB4E13DD Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 68 Encrypted payload (40 bytes) 0000 00 0c 29 e6 ad b9 00 0f b5 5f 1b 8f 08 00 45 00 ..)......_....E. 0010 00 60 00 30 00 00 40 11 3b b5 a5 e3 f9 64 a5 e3 .`.0..@.;....d.. 0020 f9 7c 01 f4 01 f4 00 4c 6a 1c ba 5b 4f 94 5a 52 .|.....Lj..[O.ZR 0030 54 0e be 95 70 cf cb 4e 13 dd 05 10 02 01 00 00 T...p..N........ 0040 00 00 00 00 00 44 ae 1f fd 23 a6 4f b6 b8 fc d8 .....D...#.O.... 0050 c7 5f a0 43 f2 75 f7 6a 42 e6 1e 06 61 4f 59 c2 ._.C.u.jB...aOY. 0060 bc c9 62 22 f6 f4 e5 1f 32 40 a4 c8 3f c1 92 0d ..b"....2@..?... 0070 2b fa +. Frame 10 (338 bytes on wire, 338 bytes captured) Arrival Time: Jan 28, 2005 14:53:14.987020000 Time delta from previous packet: 0.008730000 seconds Time since reference or first frame: 3.058857000 seconds Frame Number: 10 Packet Length: 338 bytes Capture Length: 338 bytes Ethernet II, Src: 00:0c:29:e6:ad:b9, Dst: 00:0f:b5:5f:1b:8f Destination: 00:0f:b5:5f:1b:8f (00:0f:b5:5f:1b:8f) Source: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Type: IP (0x0800) Frame check sequence: 0xddb02486 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.100 (165.227.249.100) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 320 Identification: 0x76c2 (30402) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xc442 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.100 (165.227.249.100) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 300 Checksum: 0x957f (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xBA5B4F945A52540E Responder cookie: 0xBE9570CFCB4E13DD Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xAF3ED2E3 Length: 292 Encrypted payload (264 bytes) 0000 00 0f b5 5f 1b 8f 00 0c 29 e6 ad b9 08 00 45 00 ..._....).....E. 0010 01 40 76 c2 00 00 40 11 c4 42 a5 e3 f9 7c a5 e3 .@v...@..B...|.. 0020 f9 64 01 f4 01 f4 01 2c 95 7f ba 5b 4f 94 5a 52 .d.....,...[O.ZR 0030 54 0e be 95 70 cf cb 4e 13 dd 08 10 20 01 af 3e T...p..N.... ..> 0040 d2 e3 00 00 01 24 dd bf b3 17 21 32 ab 4d 9e a6 .....$....!2.M.. 0050 ec cf a2 7f 9d 6d a4 f8 5b 58 f9 5a ef 0c 29 52 .....m..[X.Z..)R 0060 53 68 d2 38 b6 2a b8 50 b9 e1 91 e8 3a af 23 fa Sh.8.*.P....:.#. 0070 4d 97 00 a1 bd 1a ee 69 81 5e 82 dc e9 46 86 61 M......i.^...F.a 0080 25 7d e5 8e 41 87 5c 9d eb 64 62 33 88 57 6f d6 %}..A.\..db3.Wo. 0090 c3 91 9d 3a c4 60 ca 3a 1a 65 8b 86 32 e4 1a e3 ...:.`.:.e..2... 00a0 0e 26 26 08 91 31 22 bb 30 f3 56 83 00 25 cc ba .&&..1".0.V..%.. 00b0 fb 84 b3 ab 84 ed 41 63 59 7f d4 25 60 a4 dc 29 ......AcY..%`..) 00c0 51 aa aa 81 3c 5d c1 96 44 79 4c 60 6b f4 0a eb Q...<]..DyL`k... 00d0 fe db 10 af 96 3d e1 82 ee f1 b5 e7 0a c1 d4 72 .....=.........r 00e0 67 b5 fc c5 69 94 84 d2 b6 e1 cf 43 b3 bd b4 63 g...i......C...c 00f0 b3 25 f2 5d 9b f1 16 d3 0f 30 53 28 0e 34 d2 76 .%.].....0S(.4.v 0100 a2 f9 22 df 3e 4a 51 04 c0 7b 73 b7 2b 25 72 ce ..".>JQ..{s.+%r. 0110 72 d3 fe f2 9a dd 85 77 75 9b ce 00 d5 a7 6e f4 r......wu.....n. 0120 b5 14 8f 63 f1 d3 c7 51 0a 11 70 cb 4a de 88 f6 ...c...Q..p.J... 0130 d5 c7 1a 50 08 72 65 44 dd 7d d5 b5 fe 8f 9f 35 ...P.reD.}.....5 0140 04 41 90 63 ce 0c 49 43 3c d7 b7 16 17 9b dd b0 .A.c..IC<....... 0150 24 86 $. Frame 11 (338 bytes on wire, 338 bytes captured) Arrival Time: Jan 28, 2005 14:53:15.499866000 Time delta from previous packet: 0.512846000 seconds Time since reference or first frame: 3.571703000 seconds Frame Number: 11 Packet Length: 338 bytes Capture Length: 338 bytes Ethernet II, Src: 00:0c:29:e6:ad:b9, Dst: 00:0f:b5:5f:1b:8f Destination: 00:0f:b5:5f:1b:8f (00:0f:b5:5f:1b:8f) Source: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Type: IP (0x0800) Frame check sequence: 0xbcd23869 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.100 (165.227.249.100) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 320 Identification: 0x76c3 (30403) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xc441 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.100 (165.227.249.100) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 300 Checksum: 0x957f (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xBA5B4F945A52540E Responder cookie: 0xBE9570CFCB4E13DD Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xAF3ED2E3 Length: 292 Encrypted payload (264 bytes) 0000 00 0f b5 5f 1b 8f 00 0c 29 e6 ad b9 08 00 45 00 ..._....).....E. 0010 01 40 76 c3 00 00 40 11 c4 41 a5 e3 f9 7c a5 e3 .@v...@..A...|.. 0020 f9 64 01 f4 01 f4 01 2c 95 7f ba 5b 4f 94 5a 52 .d.....,...[O.ZR 0030 54 0e be 95 70 cf cb 4e 13 dd 08 10 20 01 af 3e T...p..N.... ..> 0040 d2 e3 00 00 01 24 dd bf b3 17 21 32 ab 4d 9e a6 .....$....!2.M.. 0050 ec cf a2 7f 9d 6d a4 f8 5b 58 f9 5a ef 0c 29 52 .....m..[X.Z..)R 0060 53 68 d2 38 b6 2a b8 50 b9 e1 91 e8 3a af 23 fa Sh.8.*.P....:.#. 0070 4d 97 00 a1 bd 1a ee 69 81 5e 82 dc e9 46 86 61 M......i.^...F.a 0080 25 7d e5 8e 41 87 5c 9d eb 64 62 33 88 57 6f d6 %}..A.\..db3.Wo. 0090 c3 91 9d 3a c4 60 ca 3a 1a 65 8b 86 32 e4 1a e3 ...:.`.:.e..2... 00a0 0e 26 26 08 91 31 22 bb 30 f3 56 83 00 25 cc ba .&&..1".0.V..%.. 00b0 fb 84 b3 ab 84 ed 41 63 59 7f d4 25 60 a4 dc 29 ......AcY..%`..) 00c0 51 aa aa 81 3c 5d c1 96 44 79 4c 60 6b f4 0a eb Q...<]..DyL`k... 00d0 fe db 10 af 96 3d e1 82 ee f1 b5 e7 0a c1 d4 72 .....=.........r 00e0 67 b5 fc c5 69 94 84 d2 b6 e1 cf 43 b3 bd b4 63 g...i......C...c 00f0 b3 25 f2 5d 9b f1 16 d3 0f 30 53 28 0e 34 d2 76 .%.].....0S(.4.v 0100 a2 f9 22 df 3e 4a 51 04 c0 7b 73 b7 2b 25 72 ce ..".>JQ..{s.+%r. 0110 72 d3 fe f2 9a dd 85 77 75 9b ce 00 d5 a7 6e f4 r......wu.....n. 0120 b5 14 8f 63 f1 d3 c7 51 0a 11 70 cb 4a de 88 f6 ...c...Q..p.J... 0130 d5 c7 1a 50 08 72 65 44 dd 7d d5 b5 fe 8f 9f 35 ...P.reD.}.....5 0140 04 41 90 63 ce 0c 49 43 3c d7 b7 16 17 9b bc d2 .A.c..IC<....... 0150 38 69 8i Frame 12 (330 bytes on wire, 330 bytes captured) Arrival Time: Jan 28, 2005 14:53:16.323506000 Time delta from previous packet: 0.823640000 seconds Time since reference or first frame: 4.395343000 seconds Frame Number: 12 Packet Length: 330 bytes Capture Length: 330 bytes Ethernet II, Src: 00:0f:b5:5f:1b:8f, Dst: 00:0c:29:e6:ad:b9 Destination: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Source: 00:0f:b5:5f:1b:8f (00:0f:b5:5f:1b:8f) Type: IP (0x0800) Frame check sequence: 0x348bf757 (correct) Internet Protocol, Src Addr: 165.227.249.100 (165.227.249.100), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 312 Identification: 0x0035 (53) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3ad8 (correct) Source: 165.227.249.100 (165.227.249.100) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 292 Checksum: 0xfb3b (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xBA5B4F945A52540E Responder cookie: 0xBE9570CFCB4E13DD Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xAF3ED2E3 Length: 284 Encrypted payload (256 bytes) 0000 00 0c 29 e6 ad b9 00 0f b5 5f 1b 8f 08 00 45 00 ..)......_....E. 0010 01 38 00 35 00 00 40 11 3a d8 a5 e3 f9 64 a5 e3 .8.5..@.:....d.. 0020 f9 7c 01 f4 01 f4 01 24 fb 3b ba 5b 4f 94 5a 52 .|.....$.;.[O.ZR 0030 54 0e be 95 70 cf cb 4e 13 dd 08 10 20 01 af 3e T...p..N.... ..> 0040 d2 e3 00 00 01 1c 34 7d e2 dc 06 e2 88 b4 3b 4f ......4}......;O 0050 0f a7 52 94 15 46 e5 e8 d5 b4 fe 8e 10 3c 33 fa ..R..F.......<3. 0060 c3 20 4a 1a d1 d7 7d 73 cf a0 79 15 18 62 a6 d8 . J...}s..y..b.. 0070 e1 b7 27 10 bf 58 7f 40 54 eb d7 2a e3 e5 b6 17 ..'..X.@T..*.... 0080 c5 c9 12 4c 68 6e d8 31 50 34 01 00 d3 e2 f0 93 ...Lhn.1P4...... 0090 18 b2 7e 5b 6f b7 e4 01 0b fe 40 43 7c 04 e4 0f ..~[o.....@C|... 00a0 ac d5 e9 67 67 25 ad 40 e9 7e 25 76 18 a3 3e 76 ...gg%.@.~%v..>v 00b0 1f 57 6d 73 66 7c 1f 8c ef f0 f7 53 01 17 3d bc .Wmsf|.....S..=. 00c0 e8 a0 23 6a 0c e7 97 cf 71 bc 8b b6 48 d4 90 df ..#j....q...H... 00d0 7b 7f ba 3b f2 e4 9b 56 59 3d 74 a0 f2 c7 db 88 {..;...VY=t..... 00e0 34 af 7d 6e d3 68 f0 36 77 f0 4e 65 07 9b 1d f7 4.}n.h.6w.Ne.... 00f0 b5 23 72 07 81 55 5f 50 ea ed f1 9f 18 9a 26 de .#r..U_P......&. 0100 18 01 e9 2c bf 41 da 79 f0 32 a7 f4 06 cd 95 8b ...,.A.y.2...... 0110 17 23 b2 06 49 22 98 7d b0 de 42 60 be bf 6a 00 .#..I".}..B`..j. 0120 15 c8 b4 2d 7e a0 a9 b6 79 1f 84 48 06 13 41 05 ...-~...y..H..A. 0130 94 de 33 53 db a7 f6 f5 c3 9c 72 b8 db 5e 07 72 ..3S......r..^.r 0140 1d d1 52 10 16 1b 34 8b f7 57 ..R...4..W Frame 13 (98 bytes on wire, 98 bytes captured) Arrival Time: Jan 28, 2005 14:53:16.332138000 Time delta from previous packet: 0.008632000 seconds Time since reference or first frame: 4.403975000 seconds Frame Number: 13 Packet Length: 98 bytes Capture Length: 98 bytes Ethernet II, Src: 00:0c:29:e6:ad:b9, Dst: 00:0f:b5:5f:1b:8f Destination: 00:0f:b5:5f:1b:8f (00:0f:b5:5f:1b:8f) Source: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Type: IP (0x0800) Frame check sequence: 0x1dd0fc67 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.100 (165.227.249.100) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 80 Identification: 0x76c4 (30404) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xc530 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.100 (165.227.249.100) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 60 Checksum: 0x908d (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xBA5B4F945A52540E Responder cookie: 0xBE9570CFCB4E13DD Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xAF3ED2E3 Length: 52 Encrypted payload (24 bytes) 0000 00 0f b5 5f 1b 8f 00 0c 29 e6 ad b9 08 00 45 00 ..._....).....E. 0010 00 50 76 c4 00 00 40 11 c5 30 a5 e3 f9 7c a5 e3 .Pv...@..0...|.. 0020 f9 64 01 f4 01 f4 00 3c 90 8d ba 5b 4f 94 5a 52 .d.....<...[O.ZR 0030 54 0e be 95 70 cf cb 4e 13 dd 08 10 20 01 af 3e T...p..N.... ..> 0040 d2 e3 00 00 00 34 45 47 8c 05 e7 bc d1 8d d0 3e .....4EG.......> 0050 8b b2 21 a9 26 3b bd 09 2a e0 bd c4 e6 f2 1d d0 ..!.&;..*....... 0060 fc 67 .g Frame 14 (154 bytes on wire, 154 bytes captured) Arrival Time: Jan 28, 2005 14:53:16.602406000 Time delta from previous packet: 0.270268000 seconds Time since reference or first frame: 4.674243000 seconds Frame Number: 14 Packet Length: 154 bytes Capture Length: 154 bytes Ethernet II, Src: 00:0c:29:e6:ad:b9, Dst: 00:0f:b5:5f:1b:8f Destination: 00:0f:b5:5f:1b:8f (00:0f:b5:5f:1b:8f) Source: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Type: IP (0x0800) Frame check sequence: 0xd70708f9 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.100 (165.227.249.100) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 136 Identification: 0x0003 (3) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b98 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.100 (165.227.249.100) Encapsulating Security Payload SPI: 0xa7eb1a89 Sequence: 2 Data (108 bytes) 0000 00 0f b5 5f 1b 8f 00 0c 29 e6 ad b9 08 00 45 00 ..._....).....E. 0010 00 88 00 03 00 00 f0 32 8b 98 a5 e3 f9 7c a5 e3 .......2.....|.. 0020 f9 64 a7 eb 1a 89 00 00 00 02 d8 8f 81 64 db 85 .d...........d.. 0030 d3 13 3e 9a d4 48 74 e1 ab bd 78 d5 59 02 7f 37 ..>..Ht...x.Y..7 0040 18 6a 51 00 90 3c 8f e8 1f f8 67 76 f6 82 2b e7 .jQ..<....gv..+. 0050 99 10 f9 a2 9e af fa 98 89 d5 0c d2 57 22 8e 5f ............W"._ 0060 f9 5a 1a 13 f8 b5 28 a2 46 9a 62 a9 d1 6c 36 22 .Z....(.F.b..l6" 0070 d5 32 fe c4 95 9b b8 63 23 49 6f 32 1c 90 01 5c .2.....c#Io2...\ 0080 39 f2 3f b3 1a 19 22 05 d5 e0 4a 32 7c 83 ee 65 9.?..."...J2|..e 0090 23 96 98 67 33 a7 d7 07 08 f9 #..g3..... Frame 15 (130 bytes on wire, 130 bytes captured) Arrival Time: Jan 28, 2005 14:53:17.980076000 Time delta from previous packet: 1.377670000 seconds Time since reference or first frame: 6.051913000 seconds Frame Number: 15 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:0f:b5:5f:1b:8f, Dst: 00:0c:29:e6:ad:b9 Destination: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Source: 00:0f:b5:5f:1b:8f (00:0f:b5:5f:1b:8f) Type: IP (0x0800) Frame check sequence: 0xc621c124 (correct) Internet Protocol, Src Addr: 165.227.249.100 (165.227.249.100), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0037 (55) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3b9e (correct) Source: 165.227.249.100 (165.227.249.100) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 92 Checksum: 0x9449 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xBA5B4F945A52540E Responder cookie: 0xBE9570CFCB4E13DD Next payload: Hash (8) Version: 1.0 Exchange type: Informational (5) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xA4CC7D63 Length: 84 Encrypted payload (56 bytes) 0000 00 0c 29 e6 ad b9 00 0f b5 5f 1b 8f 08 00 45 00 ..)......_....E. 0010 00 70 00 37 00 00 40 11 3b 9e a5 e3 f9 64 a5 e3 .p.7..@.;....d.. 0020 f9 7c 01 f4 01 f4 00 5c 94 49 ba 5b 4f 94 5a 52 .|.....\.I.[O.ZR 0030 54 0e be 95 70 cf cb 4e 13 dd 08 10 05 01 a4 cc T...p..N........ 0040 7d 63 00 00 00 54 f5 6a 31 da 96 72 d1 b1 73 b5 }c...T.j1..r..s. 0050 3f 97 78 d0 a3 ef ac ce ad 66 8e 13 e8 c5 4f 0b ?.x......f....O. 0060 53 0b 16 bc a4 b8 88 fe ad 08 0c 56 6f a8 7d f7 S..........Vo.}. 0070 1b 5a fb 9c 36 ca 27 e0 e5 74 d2 c1 45 ff c6 21 .Z..6.'..t..E..! 0080 c1 24 .$ Frame 16 (154 bytes on wire, 154 bytes captured) Arrival Time: Jan 28, 2005 14:53:18.020121000 Time delta from previous packet: 0.040045000 seconds Time since reference or first frame: 6.091958000 seconds Frame Number: 16 Packet Length: 154 bytes Capture Length: 154 bytes Ethernet II, Src: 00:0f:b5:5f:1b:8f, Dst: 00:0c:29:e6:ad:b9 Destination: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Source: 00:0f:b5:5f:1b:8f (00:0f:b5:5f:1b:8f) Type: IP (0x0800) Frame check sequence: 0xdab1ad77 (correct) Internet Protocol, Src Addr: 165.227.249.100 (165.227.249.100), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 136 Identification: 0x1d7b (7547) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 30 Protocol: ESP (0x32) Header checksum: 0x4021 (correct) Source: 165.227.249.100 (165.227.249.100) Destination: 165.227.249.124 (165.227.249.124) Encapsulating Security Payload SPI: 0x84ec8061 Sequence: 1 Data (108 bytes) 0000 00 0c 29 e6 ad b9 00 0f b5 5f 1b 8f 08 00 45 00 ..)......_....E. 0010 00 88 1d 7b 00 00 1e 32 40 21 a5 e3 f9 64 a5 e3 ...{...2@!...d.. 0020 f9 7c 84 ec 80 61 00 00 00 01 af be d6 6d 17 e2 .|...a.......m.. 0030 fe 53 35 d2 be 7b 8a 50 aa bc 7c 38 b4 1c 45 b4 .S5..{.P..|8..E. 0040 13 79 89 15 e4 1e b1 3b 07 00 a9 e7 8f 63 8b c8 .y.....;.....c.. 0050 dc 44 c1 b7 b9 8e a1 78 b0 7d c8 c9 04 c1 da 4f .D.....x.}.....O 0060 78 8e 03 d6 6e f5 f5 c3 05 8d a1 2a 32 82 44 e2 x...n......*2.D. 0070 6b d5 0c ea a1 2d a0 b3 9d 70 5f df 0e 4c 4d 5b k....-...p_..LM[ 0080 af 6b 64 54 1b 54 0d 2e dc ca b2 cb fe ea bd 6e .kdT.T.........n 0090 5b 63 da a1 f7 a7 da b1 ad 77 [c.......w Frame 17 (154 bytes on wire, 154 bytes captured) Arrival Time: Jan 28, 2005 14:53:29.077699000 Time delta from previous packet: 11.057578000 seconds Time since reference or first frame: 17.149536000 seconds Frame Number: 17 Packet Length: 154 bytes Capture Length: 154 bytes Ethernet II, Src: 00:0c:29:e6:ad:b9, Dst: 00:0f:b5:5f:1b:8f Destination: 00:0f:b5:5f:1b:8f (00:0f:b5:5f:1b:8f) Source: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Type: IP (0x0800) Frame check sequence: 0xe74d83d4 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.100 (165.227.249.100) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 136 Identification: 0x0004 (4) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b97 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.100 (165.227.249.100) Encapsulating Security Payload SPI: 0xa7eb1a89 Sequence: 3 Data (108 bytes) 0000 00 0f b5 5f 1b 8f 00 0c 29 e6 ad b9 08 00 45 00 ..._....).....E. 0010 00 88 00 04 00 00 f0 32 8b 97 a5 e3 f9 7c a5 e3 .......2.....|.. 0020 f9 64 a7 eb 1a 89 00 00 00 03 44 05 5c 9b 00 bc .d........D.\... 0030 e2 81 cf ff d8 7c 04 f1 9c 9d e2 9c 4a 68 01 40 .....|......Jh.@ 0040 85 e2 71 cb ff 8e 49 5a c6 5c 8a d5 53 8f 7a e5 ..q...IZ.\..S.z. 0050 90 26 5a 23 60 c3 2e 64 d2 3b 8d 23 29 ae ce 19 .&Z#`..d.;.#)... 0060 4e b3 63 d6 17 15 5c cc ac ef 0f a3 74 3a 7e d5 N.c...\.....t:~. 0070 61 99 7a db 9a 64 fb f6 df c9 2e 35 1c 98 09 9d a.z..d.....5.... 0080 32 14 45 66 0a 8f 3a c8 87 e6 f9 52 65 9c 47 4b 2.Ef..:....Re.GK 0090 84 53 d7 49 bc 9e e7 4d 83 d4 .S.I...M.. Frame 18 (154 bytes on wire, 154 bytes captured) Arrival Time: Jan 28, 2005 14:53:29.083019000 Time delta from previous packet: 0.005320000 seconds Time since reference or first frame: 17.154856000 seconds Frame Number: 18 Packet Length: 154 bytes Capture Length: 154 bytes Ethernet II, Src: 00:0f:b5:5f:1b:8f, Dst: 00:0c:29:e6:ad:b9 Destination: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Source: 00:0f:b5:5f:1b:8f (00:0f:b5:5f:1b:8f) Type: IP (0x0800) Frame check sequence: 0x98a8beb1 (correct) Internet Protocol, Src Addr: 165.227.249.100 (165.227.249.100), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 136 Identification: 0x6ef7 (28407) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 30 Protocol: ESP (0x32) Header checksum: 0xeea4 (correct) Source: 165.227.249.100 (165.227.249.100) Destination: 165.227.249.124 (165.227.249.124) Encapsulating Security Payload SPI: 0x84ec8061 Sequence: 2 Data (108 bytes) 0000 00 0c 29 e6 ad b9 00 0f b5 5f 1b 8f 08 00 45 00 ..)......_....E. 0010 00 88 6e f7 00 00 1e 32 ee a4 a5 e3 f9 64 a5 e3 ..n....2.....d.. 0020 f9 7c 84 ec 80 61 00 00 00 02 64 54 1b 54 0d 2e .|...a....dT.T.. 0030 dc ca ea a5 63 75 29 41 02 47 db 33 1b 44 ee 4a ....cu)A.G.3.D.J 0040 c5 e9 10 8f 10 fd dc d2 12 2d 93 51 f7 a4 45 d2 .........-.Q..E. 0050 8f 25 07 8d 2b ed b8 90 0a 51 0e b3 7b 9e 7d 97 .%..+....Q..{.}. 0060 41 b0 a8 3d aa f0 b6 02 cf 9e dc e4 ab 90 90 46 A..=...........F 0070 f1 39 69 23 98 c2 93 ab bd d5 c0 c0 b9 73 cd 34 .9i#.........s.4 0080 af fb d4 b2 d5 5f b1 f1 11 d7 9f 03 b2 f5 ab a3 ....._.......... 0090 05 eb 31 4c 48 03 98 a8 be b1 ..1LH..... Frame 19 (154 bytes on wire, 154 bytes captured) Arrival Time: Jan 28, 2005 14:53:30.115399000 Time delta from previous packet: 1.032380000 seconds Time since reference or first frame: 18.187236000 seconds Frame Number: 19 Packet Length: 154 bytes Capture Length: 154 bytes Ethernet II, Src: 00:0c:29:e6:ad:b9, Dst: 00:0f:b5:5f:1b:8f Destination: 00:0f:b5:5f:1b:8f (00:0f:b5:5f:1b:8f) Source: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Type: IP (0x0800) Frame check sequence: 0xc871a21d (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.100 (165.227.249.100) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 136 Identification: 0x0005 (5) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b96 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.100 (165.227.249.100) Encapsulating Security Payload SPI: 0xa7eb1a89 Sequence: 4 Data (108 bytes) 0000 00 0f b5 5f 1b 8f 00 0c 29 e6 ad b9 08 00 45 00 ..._....).....E. 0010 00 88 00 05 00 00 f0 32 8b 96 a5 e3 f9 7c a5 e3 .......2.....|.. 0020 f9 64 a7 eb 1a 89 00 00 00 04 8f 53 c1 e3 fe 27 .d.........S...' 0030 42 9d 4a 20 cf fd b0 f3 55 07 b1 dd 79 84 bc 1f B.J ....U...y... 0040 e4 f8 6c d1 f8 43 81 9d b8 40 fb 25 dc b5 5a a9 ..l..C...@.%..Z. 0050 7a d3 e0 0e 53 ad 3a d9 90 c1 79 14 be 2d 09 4a z...S.:...y..-.J 0060 18 eb ef 1f b4 08 c6 69 e9 9f da 67 ad 70 2a 0d .......i...g.p*. 0070 51 ec 34 d3 63 d9 5c 66 91 c1 17 79 86 45 a3 0e Q.4.c.\f...y.E.. 0080 72 ee 8f 8c 71 61 9d 65 cf f4 87 4c 20 a7 a0 fd r...qa.e...L ... 0090 d7 16 07 ad 07 db c8 71 a2 1d .......q.. Frame 20 (154 bytes on wire, 154 bytes captured) Arrival Time: Jan 28, 2005 14:53:30.119302000 Time delta from previous packet: 0.003903000 seconds Time since reference or first frame: 18.191139000 seconds Frame Number: 20 Packet Length: 154 bytes Capture Length: 154 bytes Ethernet II, Src: 00:0f:b5:5f:1b:8f, Dst: 00:0c:29:e6:ad:b9 Destination: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Source: 00:0f:b5:5f:1b:8f (00:0f:b5:5f:1b:8f) Type: IP (0x0800) Frame check sequence: 0x8b8e7391 (correct) Internet Protocol, Src Addr: 165.227.249.100 (165.227.249.100), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 136 Identification: 0x6169 (24937) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 30 Protocol: ESP (0x32) Header checksum: 0xfc32 (correct) Source: 165.227.249.100 (165.227.249.100) Destination: 165.227.249.124 (165.227.249.124) Encapsulating Security Payload SPI: 0x84ec8061 Sequence: 3 Data (108 bytes) 0000 00 0c 29 e6 ad b9 00 0f b5 5f 1b 8f 08 00 45 00 ..)......_....E. 0010 00 88 61 69 00 00 1e 32 fc 32 a5 e3 f9 64 a5 e3 ..ai...2.2...d.. 0020 f9 7c 84 ec 80 61 00 00 00 03 d4 b2 d5 5f b1 f1 .|...a......._.. 0030 11 d7 33 90 9b e8 37 ce 3f c1 cf 21 ec e7 e0 e2 ..3...7.?..!.... 0040 73 e5 70 97 96 51 20 c3 64 4b d9 ff f2 d1 4b 5f s.p..Q .dK....K_ 0050 4f 6b 34 6e 10 23 4e d7 ce 5c c6 f1 b6 e7 4f 58 Ok4n.#N..\....OX 0060 10 68 62 0b 20 11 12 a9 cb 03 f6 ab 64 a1 dd 19 .hb. .......d... 0070 35 2e 91 cd 21 38 c4 bd 92 7e 7a dc 6a 2d 00 7d 5...!8...~z.j-.} 0080 af 72 43 c7 50 50 95 2f 48 c7 b0 83 9f 95 30 b0 .rC.PP./H.....0. 0090 94 ce dd 6f e7 c4 8b 8e 73 91 ...o....s. Frame 21 (154 bytes on wire, 154 bytes captured) Arrival Time: Jan 28, 2005 14:53:31.111361000 Time delta from previous packet: 0.992059000 seconds Time since reference or first frame: 19.183198000 seconds Frame Number: 21 Packet Length: 154 bytes Capture Length: 154 bytes Ethernet II, Src: 00:0c:29:e6:ad:b9, Dst: 00:0f:b5:5f:1b:8f Destination: 00:0f:b5:5f:1b:8f (00:0f:b5:5f:1b:8f) Source: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Type: IP (0x0800) Frame check sequence: 0xa72aec76 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.100 (165.227.249.100) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 136 Identification: 0x0006 (6) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b95 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.100 (165.227.249.100) Encapsulating Security Payload SPI: 0xa7eb1a89 Sequence: 5 Data (108 bytes) 0000 00 0f b5 5f 1b 8f 00 0c 29 e6 ad b9 08 00 45 00 ..._....).....E. 0010 00 88 00 06 00 00 f0 32 8b 95 a5 e3 f9 7c a5 e3 .......2.....|.. 0020 f9 64 a7 eb 1a 89 00 00 00 05 ee ce cd 4e e4 2c .d...........N., 0030 c4 c4 0b f3 a4 6f 94 10 b9 bd c0 06 a4 58 54 cb .....o.......XT. 0040 67 de 73 3f c2 cb 4f 6d 65 b8 37 da fb f0 36 c2 g.s?..Ome.7...6. 0050 15 06 8e 75 a4 53 55 11 30 ba 5e 3a f2 33 40 fb ...u.SU.0.^:.3@. 0060 61 41 7e c7 6d ba 04 b4 cf 9d 80 41 79 61 ae b2 aA~.m......Aya.. 0070 0a 9e c8 f7 6e d9 4e 33 ec 24 0b 2d 47 df 93 0a ....n.N3.$.-G... 0080 84 05 18 6d 05 c2 78 8b 61 ed 16 e7 67 c2 ff fd ...m..x.a...g... 0090 cf f5 1e 8a 76 30 a7 2a ec 76 ....v0.*.v Frame 22 (154 bytes on wire, 154 bytes captured) Arrival Time: Jan 28, 2005 14:53:31.115188000 Time delta from previous packet: 0.003827000 seconds Time since reference or first frame: 19.187025000 seconds Frame Number: 22 Packet Length: 154 bytes Capture Length: 154 bytes Ethernet II, Src: 00:0f:b5:5f:1b:8f, Dst: 00:0c:29:e6:ad:b9 Destination: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Source: 00:0f:b5:5f:1b:8f (00:0f:b5:5f:1b:8f) Type: IP (0x0800) Frame check sequence: 0xca44cc28 (correct) Internet Protocol, Src Addr: 165.227.249.100 (165.227.249.100), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 136 Identification: 0x40f2 (16626) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 30 Protocol: ESP (0x32) Header checksum: 0x1caa (correct) Source: 165.227.249.100 (165.227.249.100) Destination: 165.227.249.124 (165.227.249.124) Encapsulating Security Payload SPI: 0x84ec8061 Sequence: 4 Data (108 bytes) 0000 00 0c 29 e6 ad b9 00 0f b5 5f 1b 8f 08 00 45 00 ..)......_....E. 0010 00 88 40 f2 00 00 1e 32 1c aa a5 e3 f9 64 a5 e3 ..@....2.....d.. 0020 f9 7c 84 ec 80 61 00 00 00 04 43 c7 50 50 95 2f .|...a....C.PP./ 0030 48 c7 92 ff 92 5d 6b 98 fc 36 fe b5 e1 86 f6 e5 H....]k..6...... 0040 0c 9a 4b b0 f2 e6 70 56 b9 ca 9f ca 11 53 25 d0 ..K...pV.....S%. 0050 81 8a c3 fa 5e 52 ec 71 f9 42 e7 6e 3c 0b b5 ab ....^R.q.B.n<... 0060 19 59 94 4a 03 3a c2 c5 c0 94 c1 95 d1 74 5e f8 .Y.J.:.......t^. 0070 5b 75 30 53 74 67 1a 1a 0f b7 4a f5 55 15 06 f9 [u0Stg....J.U... 0080 5a 3c 30 24 9b b4 f3 50 df 29 7a 9d fc 4b ae 0c Z<0$...P.)z..K.. 0090 ff 22 84 5e de cc ca 44 cc 28 .".^...D.( Frame 23 (154 bytes on wire, 154 bytes captured) Arrival Time: Jan 28, 2005 14:53:32.115288000 Time delta from previous packet: 1.000100000 seconds Time since reference or first frame: 20.187125000 seconds Frame Number: 23 Packet Length: 154 bytes Capture Length: 154 bytes Ethernet II, Src: 00:0c:29:e6:ad:b9, Dst: 00:0f:b5:5f:1b:8f Destination: 00:0f:b5:5f:1b:8f (00:0f:b5:5f:1b:8f) Source: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Type: IP (0x0800) Frame check sequence: 0xc02266eb (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.100 (165.227.249.100) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 136 Identification: 0x0007 (7) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b94 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.100 (165.227.249.100) Encapsulating Security Payload SPI: 0xa7eb1a89 Sequence: 6 Data (108 bytes) 0000 00 0f b5 5f 1b 8f 00 0c 29 e6 ad b9 08 00 45 00 ..._....).....E. 0010 00 88 00 07 00 00 f0 32 8b 94 a5 e3 f9 7c a5 e3 .......2.....|.. 0020 f9 64 a7 eb 1a 89 00 00 00 06 0c f1 88 45 c5 fb .d...........E.. 0030 79 99 f7 67 c2 84 05 b2 c9 e7 f4 86 b8 dc c6 8e y..g............ 0040 59 c9 fc 07 d5 88 91 84 e0 d2 2b 61 ee ac ab 2e Y.........+a.... 0050 38 1d ad 80 c2 9d 4e 7d c7 c5 0f b1 41 7b 7e ba 8.....N}....A{~. 0060 c2 b2 70 c4 a9 01 76 27 f6 e5 b7 77 e5 c3 4f 08 ..p...v'...w..O. 0070 71 68 b2 2c 80 1a 44 1a dd a6 3e e7 77 af 93 9b qh.,..D...>.w... 0080 ce 46 4c 19 e4 bf 93 5b 77 73 93 59 df a8 9d e1 .FL....[ws.Y.... 0090 44 b7 a1 2a b2 f0 c0 22 66 eb D..*..."f. Frame 24 (154 bytes on wire, 154 bytes captured) Arrival Time: Jan 28, 2005 14:53:32.119215000 Time delta from previous packet: 0.003927000 seconds Time since reference or first frame: 20.191052000 seconds Frame Number: 24 Packet Length: 154 bytes Capture Length: 154 bytes Ethernet II, Src: 00:0f:b5:5f:1b:8f, Dst: 00:0c:29:e6:ad:b9 Destination: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Source: 00:0f:b5:5f:1b:8f (00:0f:b5:5f:1b:8f) Type: IP (0x0800) Frame check sequence: 0x092a8440 (correct) Internet Protocol, Src Addr: 165.227.249.100 (165.227.249.100), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 136 Identification: 0x0a78 (2680) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 30 Protocol: ESP (0x32) Header checksum: 0x5324 (correct) Source: 165.227.249.100 (165.227.249.100) Destination: 165.227.249.124 (165.227.249.124) Encapsulating Security Payload SPI: 0x84ec8061 Sequence: 5 Data (108 bytes) 0000 00 0c 29 e6 ad b9 00 0f b5 5f 1b 8f 08 00 45 00 ..)......_....E. 0010 00 88 0a 78 00 00 1e 32 53 24 a5 e3 f9 64 a5 e3 ...x...2S$...d.. 0020 f9 7c 84 ec 80 61 00 00 00 05 30 24 9b b4 f3 50 .|...a....0$...P 0030 df 29 30 84 1e 2c 46 30 da 92 3f 12 da f3 33 e6 .)0..,F0..?...3. 0040 9c 91 99 51 23 dc c2 e3 51 69 d4 dc aa 84 8e e2 ...Q#...Qi...... 0050 4a 02 e6 57 b4 bc 90 03 30 19 59 47 45 2a bd c9 J..W....0.YGE*.. 0060 5d 80 50 1d a7 fd 33 3a ab 3a 4f a5 27 e8 3b 78 ].P...3:.:O.'.;x 0070 4e e1 35 90 b5 e4 d5 16 5c 5f c3 e9 45 24 25 6f N.5.....\_..E$%o 0080 1c 45 76 4c af 81 41 7b e7 12 d7 ef 7c d4 83 3a .EvL..A{....|..: 0090 ff 51 c1 6b b3 9e 09 2a 84 40 .Q.k...*.@