Frame 1 (266 bytes on wire, 266 bytes captured) Arrival Time: Jan 30, 2005 15:38:35.569644000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 266 bytes Capture Length: 266 bytes Ethernet II, Src: 00:0c:29:e6:ad:b9, Dst: 00:e0:4c:69:0a:78 Destination: 00:e0:4c:69:0a:78 (00:e0:4c:69:0a:78) Source: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Type: IP (0x0800) Frame check sequence: 0x06cfd67b (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.102 (165.227.249.102) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 248 Identification: 0x76b3 (30387) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xc497 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.102 (165.227.249.102) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 228 Checksum: 0x0ca6 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x8A1229AF29916027 Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 220 Security Association payload Next payload: Vendor ID (13) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 0 Next payload: NONE (0) Length: 40 Proposal number: 0 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 0 Next payload: NONE (0) Length: 32 Transform number: 0 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: unknown vendor ID: 0x8F9CC94E01248ECDF147594C284B213B Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-stenberg-ipsec-nat-traversal-01 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-stenberg-ipsec-nat-traversal-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-03 0000 00 e0 4c 69 0a 78 00 0c 29 e6 ad b9 08 00 45 00 ..Li.x..).....E. 0010 00 f8 76 b3 00 00 40 11 c4 97 a5 e3 f9 7c a5 e3 ..v...@......|.. 0020 f9 66 01 f4 01 f4 00 e4 0c a6 8a 12 29 af 29 91 .f..........).). 0030 60 27 00 00 00 00 00 00 00 00 01 10 02 00 00 00 `'.............. 0040 00 00 00 00 00 dc 0d 00 00 34 00 00 00 01 00 00 .........4...... 0050 00 01 00 00 00 28 00 01 00 01 00 00 00 20 00 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 03 00 01 80 04 ................ 0070 00 02 80 0b 00 01 80 0c 70 80 0d 00 00 14 8f 9c ........p....... 0080 c9 4e 01 24 8e cd f1 47 59 4c 28 4b 21 3b 0d 00 .N.$...GYL(K!;.. 0090 00 14 27 ba b5 dc 01 ea 07 60 ea 4e 31 90 ac 27 ..'......`.N1..' 00a0 c0 d0 0d 00 00 14 61 05 c4 22 e7 68 47 e4 3f 96 ......a..".hG.?. 00b0 84 80 12 92 ae cd 0d 00 00 14 44 85 15 2d 18 b6 ..........D..-.. 00c0 bb cd 0b e8 a8 46 95 79 dd cc 0d 00 00 14 cd 60 .....F.y.......` 00d0 46 43 35 df 21 f8 7c fd b2 fc 68 b6 a4 48 0d 00 FC5.!.|...h..H.. 00e0 00 14 90 cb 80 91 3e bb 69 6e 08 63 81 b5 ec 42 ......>.in.c...B 00f0 7b 1f 00 00 00 14 7d 94 19 a6 53 10 ca 6f 2c 17 {.....}...S..o,. 0100 9d 92 15 52 9d 56 06 cf d6 7b ...R.V...{ Frame 2 (186 bytes on wire, 186 bytes captured) Arrival Time: Jan 30, 2005 15:38:35.572708000 Time delta from previous packet: 0.003064000 seconds Time since reference or first frame: 0.003064000 seconds Frame Number: 2 Packet Length: 186 bytes Capture Length: 186 bytes Ethernet II, Src: 00:e0:4c:69:0a:78, Dst: 00:0c:29:e6:ad:b9 Destination: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Source: 00:e0:4c:69:0a:78 (00:e0:4c:69:0a:78) Type: IP (0x0800) Frame check sequence: 0x82799d62 (correct) Internet Protocol, Src Addr: 165.227.249.102 (165.227.249.102), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 168 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb9a (correct) Source: 165.227.249.102 (165.227.249.102) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 148 Checksum: 0x5c90 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x8A1229AF29916027 Responder cookie: 0x81EF1E0BC757873E Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 140 Security Association payload Next payload: Vendor ID (13) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 0 Next payload: NONE (0) Length: 40 Proposal number: 0 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 0 Next payload: NONE (0) Length: 32 Transform number: 0 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-dpd-00.txt Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: unknown vendor ID: 0x648982785BEDBDD66A6DD356F0E160FD 0000 00 0c 29 e6 ad b9 00 e0 4c 69 0a 78 08 00 45 00 ..).....Li.x..E. 0010 00 a8 00 00 40 00 40 11 fb 9a a5 e3 f9 66 a5 e3 ....@.@......f.. 0020 f9 7c 01 f4 01 f4 00 94 5c 90 8a 12 29 af 29 91 .|......\...).). 0030 60 27 81 ef 1e 0b c7 57 87 3e 01 10 02 00 00 00 `'.....W.>...... 0040 00 00 00 00 00 8c 0d 00 00 34 00 00 00 01 00 00 .........4...... 0050 00 01 00 00 00 28 00 01 00 01 00 00 00 20 00 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 03 00 01 80 04 ................ 0070 00 02 80 0b 00 01 80 0c 70 80 0d 00 00 14 90 cb ........p....... 0080 80 91 3e bb 69 6e 08 63 81 b5 ec 42 7b 1f 0d 00 ..>.in.c...B{... 0090 00 14 af ca d7 13 68 a1 f1 c9 6b 86 96 fc 77 57 ......h...k...wW 00a0 01 00 00 00 00 14 64 89 82 78 5b ed bd d6 6a 6d ......d..x[...jm 00b0 d3 56 f0 e1 60 fd 82 79 9d 62 .V..`..y.b Frame 3 (274 bytes on wire, 274 bytes captured) Arrival Time: Jan 30, 2005 15:38:35.631283000 Time delta from previous packet: 0.058575000 seconds Time since reference or first frame: 0.061639000 seconds Frame Number: 3 Packet Length: 274 bytes Capture Length: 274 bytes Ethernet II, Src: 00:0c:29:e6:ad:b9, Dst: 00:e0:4c:69:0a:78 Destination: 00:e0:4c:69:0a:78 (00:e0:4c:69:0a:78) Source: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Type: IP (0x0800) Frame check sequence: 0xc4e4aeca (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.102 (165.227.249.102) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 256 Identification: 0x76b4 (30388) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xc48e (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.102 (165.227.249.102) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 236 Checksum: 0xfae3 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x8A1229AF29916027 Responder cookie: 0x81EF1E0BC757873E Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 228 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: Private USE (130) Length: 20 Nonce Data Unknown payload type payload Next payload: Private USE (130) Length: 24 Payload Unknown payload type payload Next payload: NONE (0) Length: 24 Payload 0000 00 e0 4c 69 0a 78 00 0c 29 e6 ad b9 08 00 45 00 ..Li.x..).....E. 0010 01 00 76 b4 00 00 40 11 c4 8e a5 e3 f9 7c a5 e3 ..v...@......|.. 0020 f9 66 01 f4 01 f4 00 ec fa e3 8a 12 29 af 29 91 .f..........).). 0030 60 27 81 ef 1e 0b c7 57 87 3e 04 10 02 00 00 00 `'.....W.>...... 0040 00 00 00 00 00 e4 0a 00 00 84 1d 8c 68 51 a6 f7 ............hQ.. 0050 cb cd 5e 41 e0 14 5b 0a 1a 5d c0 b8 f6 b7 49 60 ..^A..[..]....I` 0060 c9 37 87 dd 59 17 0b 63 17 e9 a5 03 10 c9 0c 14 .7..Y..c........ 0070 73 45 b7 81 a5 29 dd 30 1f 29 79 35 69 1b 81 e6 sE...).0.)y5i... 0080 11 c4 4f ad 5a 38 43 88 5a 7c 97 5c df b3 8f cc ..O.Z8C.Z|.\.... 0090 19 e5 04 04 24 94 42 e3 55 e6 80 65 0e 87 ad 3b ....$.B.U..e...; 00a0 43 24 9f fe d4 38 c9 24 b3 5b 51 51 e0 50 cf 89 C$...8.$.[QQ.P.. 00b0 92 88 e6 d7 ed bc 80 97 31 11 88 23 87 bd 85 a4 ........1..#.... 00c0 5a b1 c0 e6 d9 71 4a 11 1d 0b 82 00 00 14 77 53 Z....qJ.......wS 00d0 00 e9 36 a0 6e 02 44 e5 71 cb 7c 9b 82 6e 82 00 ..6.n.D.q.|..n.. 00e0 00 18 34 63 e9 7d 3a b9 17 3c 40 1a d2 a4 88 95 ..4c.}:..<@..... 00f0 02 50 1b ef b6 c3 00 00 00 18 3e 73 18 82 24 fe .P........>s..$. 0100 8a f2 b3 90 86 3c 20 b4 7e 0f 80 fc 47 1a c4 e4 .....< .~...G... 0110 ae ca .. Frame 4 (314 bytes on wire, 314 bytes captured) Arrival Time: Jan 30, 2005 15:38:35.640419000 Time delta from previous packet: 0.009136000 seconds Time since reference or first frame: 0.070775000 seconds Frame Number: 4 Packet Length: 314 bytes Capture Length: 314 bytes Ethernet II, Src: 00:e0:4c:69:0a:78, Dst: 00:0c:29:e6:ad:b9 Destination: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Source: 00:e0:4c:69:0a:78 (00:e0:4c:69:0a:78) Type: IP (0x0800) Frame check sequence: 0x4a89c3c0 (correct) Internet Protocol, Src Addr: 165.227.249.102 (165.227.249.102), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 296 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb1a (correct) Source: 165.227.249.102 (165.227.249.102) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 276 Checksum: 0xdfdb (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x8A1229AF29916027 Responder cookie: 0x81EF1E0BC757873E Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 268 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: Private USE (130) Length: 12 Nonce Data Unknown payload type payload Next payload: Private USE (130) Length: 24 Payload Unknown payload type payload Next payload: Private USE (130) Length: 24 Payload Unknown payload type payload Next payload: Private USE (130) Length: 24 Payload Unknown payload type payload Next payload: NONE (0) Length: 24 Payload 0000 00 0c 29 e6 ad b9 00 e0 4c 69 0a 78 08 00 45 00 ..).....Li.x..E. 0010 01 28 00 00 40 00 40 11 fb 1a a5 e3 f9 66 a5 e3 .(..@.@......f.. 0020 f9 7c 01 f4 01 f4 01 14 df db 8a 12 29 af 29 91 .|..........).). 0030 60 27 81 ef 1e 0b c7 57 87 3e 04 10 02 00 00 00 `'.....W.>...... 0040 00 00 00 00 01 0c 0a 00 00 84 23 dd 55 87 5c a0 ..........#.U.\. 0050 a9 95 ad 02 d4 d7 27 40 36 e8 65 d0 4d 9e f1 14 ......'@6.e.M... 0060 5d da 74 cb d9 07 6e 38 bd 93 7c 03 53 b0 d8 31 ].t...n8..|.S..1 0070 b3 3e 1f 49 a4 08 ab e1 73 a3 bc 9f 1c db 56 fb .>.I....s.....V. 0080 7a fb 69 fd 4c c2 e5 da 67 e0 c0 8e 25 38 f4 d6 z.i.L...g...%8.. 0090 f9 a6 29 f7 3e 25 89 41 2b e4 aa e3 21 08 ed c4 ..).>%.A+...!... 00a0 5f 22 2e 43 be 13 d2 94 e9 cd da cb a8 a8 a7 f6 _".C............ 00b0 2f b7 cb c1 35 ce 06 8b 8c ba 28 9a c4 c9 aa 78 /...5.....(....x 00c0 97 5f 74 2d 53 8c d0 46 90 f2 82 00 00 0c 9b 95 ._t-S..F........ 00d0 91 ee b3 2c e3 e9 82 00 00 18 3e 73 18 82 24 fe ...,......>s..$. 00e0 8a f2 b3 90 86 3c 20 b4 7e 0f 80 fc 47 1a 82 00 .....< .~...G... 00f0 00 18 0a 49 97 3f 76 e9 cd 1d 31 c2 b3 89 e2 ed ...I.?v...1..... 0100 68 29 f3 b6 ef 0f 82 00 00 18 34 63 e9 7d 3a b9 h)........4c.}:. 0110 17 3c 40 1a d2 a4 88 95 02 50 1b ef b6 c3 00 00 .<@......P...... 0120 00 18 89 d1 c9 b5 0a 15 e0 8c 03 90 bd 3d 54 a9 .............=T. 0130 d1 94 2b a1 3a 9a 4a 89 c3 c0 ..+.:.J... Frame 5 (122 bytes on wire, 122 bytes captured) Arrival Time: Jan 30, 2005 15:38:35.660272000 Time delta from previous packet: 0.019853000 seconds Time since reference or first frame: 0.090628000 seconds Frame Number: 5 Packet Length: 122 bytes Capture Length: 122 bytes Ethernet II, Src: 00:0c:29:e6:ad:b9, Dst: 00:e0:4c:69:0a:78 Destination: 00:e0:4c:69:0a:78 (00:e0:4c:69:0a:78) Source: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Type: IP (0x0800) Frame check sequence: 0x9dfeb505 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.102 (165.227.249.102) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 104 Identification: 0x76b5 (30389) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xc525 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.102 (165.227.249.102) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 84 Checksum: 0x92f1 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x8A1229AF29916027 Responder cookie: 0x81EF1E0BC757873E Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 76 Encrypted payload (48 bytes) 0000 00 e0 4c 69 0a 78 00 0c 29 e6 ad b9 08 00 45 00 ..Li.x..).....E. 0010 00 68 76 b5 00 00 40 11 c5 25 a5 e3 f9 7c a5 e3 .hv...@..%...|.. 0020 f9 66 01 f4 01 f4 00 54 92 f1 8a 12 29 af 29 91 .f.....T....).). 0030 60 27 81 ef 1e 0b c7 57 87 3e 05 10 02 01 00 00 `'.....W.>...... 0040 00 00 00 00 00 4c 23 f4 54 d8 cc 00 45 bc 5b 53 .....L#.T...E.[S 0050 bf 39 6a 69 be 10 9d a1 81 1c 65 fc 02 bc b9 11 .9ji......e..... 0060 4c dc 55 8d d4 cf 8b 22 64 28 ed ed ed 1c 4d 5f L.U...."d(....M_ 0070 c7 28 60 aa 31 7f 9d fe b5 05 .(`.1..... Frame 6 (138 bytes on wire, 138 bytes captured) Arrival Time: Jan 30, 2005 15:38:35.668098000 Time delta from previous packet: 0.007826000 seconds Time since reference or first frame: 0.098454000 seconds Frame Number: 6 Packet Length: 138 bytes Capture Length: 138 bytes Ethernet II, Src: 00:e0:4c:69:0a:78, Dst: 00:0c:29:e6:ad:b9 Destination: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Source: 00:e0:4c:69:0a:78 (00:e0:4c:69:0a:78) Type: IP (0x0800) Frame check sequence: 0xcbea46be (correct) Internet Protocol, Src Addr: 165.227.249.102 (165.227.249.102), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfbca (correct) Source: 165.227.249.102 (165.227.249.102) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 100 Checksum: 0x7d0d (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x8A1229AF29916027 Responder cookie: 0x81EF1E0BC757873E Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 92 Encrypted payload (64 bytes) 0000 00 0c 29 e6 ad b9 00 e0 4c 69 0a 78 08 00 45 00 ..).....Li.x..E. 0010 00 78 00 00 40 00 40 11 fb ca a5 e3 f9 66 a5 e3 .x..@.@......f.. 0020 f9 7c 01 f4 01 f4 00 64 7d 0d 8a 12 29 af 29 91 .|.....d}...).). 0030 60 27 81 ef 1e 0b c7 57 87 3e 05 10 02 01 00 00 `'.....W.>...... 0040 00 00 00 00 00 5c 77 b5 be dc 65 7b 42 23 8c bd .....\w...e{B#.. 0050 0e 43 69 4f 84 6a 41 bc 0d d1 b8 bf fb 7a 30 c1 .CiO.jA......z0. 0060 3e a8 ec a1 ce c5 02 1c d9 2a 4c 2b 71 f8 ee bd >........*L+q... 0070 0b cf 6e 3f 3b 15 e4 ea 99 e2 e4 e4 65 1c 16 80 ..n?;.......e... 0080 85 23 aa b9 2a 11 cb ea 46 be .#..*...F. Frame 7 (338 bytes on wire, 338 bytes captured) Arrival Time: Jan 30, 2005 15:38:35.683247000 Time delta from previous packet: 0.015149000 seconds Time since reference or first frame: 0.113603000 seconds Frame Number: 7 Packet Length: 338 bytes Capture Length: 338 bytes Ethernet II, Src: 00:0c:29:e6:ad:b9, Dst: 00:e0:4c:69:0a:78 Destination: 00:e0:4c:69:0a:78 (00:e0:4c:69:0a:78) Source: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Type: IP (0x0800) Frame check sequence: 0x338414d0 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.102 (165.227.249.102) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 320 Identification: 0x76b6 (30390) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xc44c (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.102 (165.227.249.102) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 300 Checksum: 0xa112 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x8A1229AF29916027 Responder cookie: 0x81EF1E0BC757873E Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x8DCEB7D5 Length: 292 Encrypted payload (264 bytes) 0000 00 e0 4c 69 0a 78 00 0c 29 e6 ad b9 08 00 45 00 ..Li.x..).....E. 0010 01 40 76 b6 00 00 40 11 c4 4c a5 e3 f9 7c a5 e3 .@v...@..L...|.. 0020 f9 66 01 f4 01 f4 01 2c a1 12 8a 12 29 af 29 91 .f.....,....).). 0030 60 27 81 ef 1e 0b c7 57 87 3e 08 10 20 01 8d ce `'.....W.>.. ... 0040 b7 d5 00 00 01 24 06 cf e7 63 04 ee 21 ad dc 50 .....$...c..!..P 0050 16 32 9a 15 90 7b 67 1a 67 d4 f6 4a f4 ea d4 e7 .2...{g.g..J.... 0060 4f 00 ff c0 2e 75 af 26 17 35 10 a6 31 0f 29 29 O....u.&.5..1.)) 0070 d5 43 d8 b9 15 a6 03 f0 e4 d1 4a c9 c8 39 1c e8 .C........J..9.. 0080 7a fc b1 f2 e2 5b f2 a2 78 d0 38 72 9d 40 a0 8a z....[..x.8r.@.. 0090 40 c3 53 86 74 7c 4c b2 29 0b 33 81 10 16 f2 c8 @.S.t|L.).3..... 00a0 a2 57 ff a4 ca 68 ab fa bb ae 6b cd 24 67 e4 da .W...h....k.$g.. 00b0 43 47 0f 44 bd 04 10 63 08 2c ce cc e0 41 76 d4 CG.D...c.,...Av. 00c0 4b 0e 9a cf 88 6b d3 3a 55 86 15 a6 b8 87 96 9a K....k.:U....... 00d0 5b 47 49 b2 47 3a 6a 8d 41 9a 46 73 46 d7 5b ef [GI.G:j.A.FsF.[. 00e0 e2 88 5a 6e 96 6e ea 58 97 b6 4e 71 2a d7 76 52 ..Zn.n.X..Nq*.vR 00f0 38 0e ae 79 91 ab 75 c8 c2 45 91 0b 05 3c be 6f 8..y..u..E...<.o 0100 3e c0 14 4e c2 2b 95 7d 3c 23 d1 4a 22 29 77 94 >..N.+.}<#.J")w. 0110 2a c3 08 65 db 96 6c 97 38 d7 38 69 60 8b 14 05 *..e..l.8.8i`... 0120 99 f2 d8 62 6d cd 7c cf fd c0 71 0c b4 fb 57 96 ...bm.|...q...W. 0130 55 18 da 80 f8 6a c9 ce 69 b7 83 e7 28 f1 d4 1e U....j..i...(... 0140 05 75 b6 92 9a fa 26 1a b1 72 ff 9b 98 e0 33 84 .u....&..r....3. 0150 14 d0 .. Frame 8 (330 bytes on wire, 330 bytes captured) Arrival Time: Jan 30, 2005 15:38:35.694446000 Time delta from previous packet: 0.011199000 seconds Time since reference or first frame: 0.124802000 seconds Frame Number: 8 Packet Length: 330 bytes Capture Length: 330 bytes Ethernet II, Src: 00:e0:4c:69:0a:78, Dst: 00:0c:29:e6:ad:b9 Destination: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Source: 00:e0:4c:69:0a:78 (00:e0:4c:69:0a:78) Type: IP (0x0800) Frame check sequence: 0xfb8d1ddc (correct) Internet Protocol, Src Addr: 165.227.249.102 (165.227.249.102), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 312 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb0a (correct) Source: 165.227.249.102 (165.227.249.102) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 292 Checksum: 0x8270 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x8A1229AF29916027 Responder cookie: 0x81EF1E0BC757873E Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x8DCEB7D5 Length: 284 Encrypted payload (256 bytes) 0000 00 0c 29 e6 ad b9 00 e0 4c 69 0a 78 08 00 45 00 ..).....Li.x..E. 0010 01 38 00 00 40 00 40 11 fb 0a a5 e3 f9 66 a5 e3 .8..@.@......f.. 0020 f9 7c 01 f4 01 f4 01 24 82 70 8a 12 29 af 29 91 .|.....$.p..).). 0030 60 27 81 ef 1e 0b c7 57 87 3e 08 10 20 01 8d ce `'.....W.>.. ... 0040 b7 d5 00 00 01 1c 4f 73 f8 c7 c2 ac db c0 8e 71 ......Os.......q 0050 24 fe 1a 68 6b 26 5b 10 8f 42 97 80 97 85 83 72 $..hk&[..B.....r 0060 d6 bd 27 27 c2 2c ec 29 84 8e d0 5b 28 ee 8e b1 ..''.,.)...[(... 0070 ee 69 73 18 d4 c4 e5 22 9e 4e 9c c4 a8 c1 96 76 .is....".N.....v 0080 ff 78 5f da 12 84 13 70 5c 39 93 c4 6f 24 7d 18 .x_....p\9..o$}. 0090 a7 e2 00 2a 4c 66 38 d1 8e 30 9a 9c bd ad f7 3c ...*Lf8..0.....< 00a0 59 6c c3 2f 8a 3e be af d6 66 5b b7 35 68 63 64 Yl./.>...f[.5hcd 00b0 67 9c d0 25 aa 0b 6a 0e e8 be 4e 7a 8e 57 13 46 g..%..j...Nz.W.F 00c0 81 ef f8 c9 73 f7 e1 8a db 61 3b a3 71 6b bf 62 ....s....a;.qk.b 00d0 80 93 25 c5 85 4a d6 e6 cf 4c ed 4a a6 e6 17 78 ..%..J...L.J...x 00e0 74 45 77 2b cb 5e 05 4e c6 9c f3 88 d0 1b 7a b9 tEw+.^.N......z. 00f0 8c 19 07 7c 59 c8 f3 b2 4a f2 bd 60 2a 8a be 24 ...|Y...J..`*..$ 0100 44 85 20 c0 97 da 12 1f db c8 8a 4d 86 db 6b a1 D. ........M..k. 0110 6b 89 d7 4c 48 c1 54 38 8c c1 b3 0a ab ea c9 69 k..LH.T8.......i 0120 9b 19 70 ea b3 f2 04 4f 0b 60 5f da a8 32 ec fb ..p....O.`_..2.. 0130 a6 c5 6e da db 81 35 1d f8 fc b6 ee 51 0d 54 e4 ..n...5.....Q.T. 0140 9f c4 38 51 92 d2 fb 8d 1d dc ..8Q...... Frame 9 (98 bytes on wire, 98 bytes captured) Arrival Time: Jan 30, 2005 15:38:35.703068000 Time delta from previous packet: 0.008622000 seconds Time since reference or first frame: 0.133424000 seconds Frame Number: 9 Packet Length: 98 bytes Capture Length: 98 bytes Ethernet II, Src: 00:0c:29:e6:ad:b9, Dst: 00:e0:4c:69:0a:78 Destination: 00:e0:4c:69:0a:78 (00:e0:4c:69:0a:78) Source: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Type: IP (0x0800) Frame check sequence: 0x45f7122a (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.102 (165.227.249.102) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 80 Identification: 0x76b7 (30391) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xc53b (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.102 (165.227.249.102) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 60 Checksum: 0x55dc (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x8A1229AF29916027 Responder cookie: 0x81EF1E0BC757873E Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x8DCEB7D5 Length: 52 Encrypted payload (24 bytes) 0000 00 e0 4c 69 0a 78 00 0c 29 e6 ad b9 08 00 45 00 ..Li.x..).....E. 0010 00 50 76 b7 00 00 40 11 c5 3b a5 e3 f9 7c a5 e3 .Pv...@..;...|.. 0020 f9 66 01 f4 01 f4 00 3c 55 dc 8a 12 29 af 29 91 .f....... ... 0040 b7 d5 00 00 00 34 2b 15 01 29 cb d9 9b ba 6e 3f .....4+..)....n? 0050 f2 2a 44 96 00 d6 1b 29 02 f4 4b 14 2a 38 45 f7 .*D....)..K.*8E. 0060 12 2a .* Frame 10 (154 bytes on wire, 154 bytes captured) Arrival Time: Jan 30, 2005 15:38:35.998225000 Time delta from previous packet: 0.295157000 seconds Time since reference or first frame: 0.428581000 seconds Frame Number: 10 Packet Length: 154 bytes Capture Length: 154 bytes Ethernet II, Src: 00:0c:29:e6:ad:b9, Dst: 00:e0:4c:69:0a:78 Destination: 00:e0:4c:69:0a:78 (00:e0:4c:69:0a:78) Source: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Type: IP (0x0800) Frame check sequence: 0xdce65f90 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.102 (165.227.249.102) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 136 Identification: 0x0000 (0) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b99 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.102 (165.227.249.102) Encapsulating Security Payload SPI: 0xca158b7f Sequence: 2 Data (108 bytes) 0000 00 e0 4c 69 0a 78 00 0c 29 e6 ad b9 08 00 45 00 ..Li.x..).....E. 0010 00 88 00 00 00 00 f0 32 8b 99 a5 e3 f9 7c a5 e3 .......2.....|.. 0020 f9 66 ca 15 8b 7f 00 00 00 02 9a 62 47 ae 11 1b .f.........bG... 0030 32 38 3d b9 c3 12 b7 a6 d0 e6 97 b9 06 a5 69 b9 28=...........i. 0040 a5 8c 31 b9 aa c2 d3 4b d7 af 36 cb f1 26 d3 41 ..1....K..6..&.A 0050 4a 8b 0c d5 3c 56 29 60 43 cf 70 95 e0 7e 3b 0d J..."..54..._.. 0080 d2 f1 b6 6f 3f d1 1e fc c6 30 91 bd 60 95 74 ff ...o?....0..`.t. 0090 23 5e 0e 40 83 ce dc e6 5f 90 #^.@...._. Frame 11 (154 bytes on wire, 154 bytes captured) Arrival Time: Jan 30, 2005 15:38:35.999714000 Time delta from previous packet: 0.001489000 seconds Time since reference or first frame: 0.430070000 seconds Frame Number: 11 Packet Length: 154 bytes Capture Length: 154 bytes Ethernet II, Src: 00:e0:4c:69:0a:78, Dst: 00:0c:29:e6:ad:b9 Destination: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Source: 00:e0:4c:69:0a:78 (00:e0:4c:69:0a:78) Type: IP (0x0800) Frame check sequence: 0x011c975e (correct) Internet Protocol, Src Addr: 165.227.249.102 (165.227.249.102), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 136 Identification: 0x000b (11) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 30 Protocol: ESP (0x32) Header checksum: 0x5d8f (correct) Source: 165.227.249.102 (165.227.249.102) Destination: 165.227.249.124 (165.227.249.124) Encapsulating Security Payload SPI: 0x7d3ffc2a Sequence: 1 Data (108 bytes) 0000 00 0c 29 e6 ad b9 00 e0 4c 69 0a 78 08 00 45 00 ..).....Li.x..E. 0010 00 88 00 0b 00 00 1e 32 5d 8f a5 e3 f9 66 a5 e3 .......2]....f.. 0020 f9 7c 7d 3f fc 2a 00 00 00 01 36 4e 4a 8c 37 99 .|}?.*....6NJ.7. 0030 d2 6d a9 5c 4a 72 ca da bc 54 62 d4 a2 2a 80 b6 .m.\Jr...Tb..*.. 0040 25 fd 16 e1 9a a3 77 39 73 a4 e5 1b 76 9f b7 9a %.....w9s...v... 0050 a2 e5 d5 bf c0 f1 a7 f1 d5 1e 7e 3a f8 0e 9c 75 ..........~:...u 0060 30 35 a6 54 d5 e7 d9 16 f9 bc dd 37 d4 c6 12 77 05.T.......7...w 0070 51 f1 bc 6f 99 72 e2 55 0f 30 1f 1e 20 e6 fc dc Q..o.r.U.0.. ... 0080 30 80 44 12 77 4b 06 05 11 92 f7 82 26 b7 b7 ac 0.D.wK......&... 0090 8e 08 81 e5 ad 5b 01 1c 97 5e .....[...^ Frame 12 (154 bytes on wire, 154 bytes captured) Arrival Time: Jan 30, 2005 15:38:36.384789000 Time delta from previous packet: 0.385075000 seconds Time since reference or first frame: 0.815145000 seconds Frame Number: 12 Packet Length: 154 bytes Capture Length: 154 bytes Ethernet II, Src: 00:0c:29:e6:ad:b9, Dst: 00:e0:4c:69:0a:78 Destination: 00:e0:4c:69:0a:78 (00:e0:4c:69:0a:78) Source: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Type: IP (0x0800) Frame check sequence: 0x56ed48f0 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.102 (165.227.249.102) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 136 Identification: 0x0001 (1) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b98 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.102 (165.227.249.102) Encapsulating Security Payload SPI: 0xca158b7f Sequence: 3 Data (108 bytes) 0000 00 e0 4c 69 0a 78 00 0c 29 e6 ad b9 08 00 45 00 ..Li.x..).....E. 0010 00 88 00 01 00 00 f0 32 8b 98 a5 e3 f9 7c a5 e3 .......2.....|.. 0020 f9 66 ca 15 8b 7f 00 00 00 03 88 50 bf 0d dd 42 .f.........P...B 0030 47 ed 7a 8a 0a a5 ae 51 1c c7 cf 92 77 e6 86 2f G.z....Q....w../ 0040 bb ae 14 32 a4 e2 13 d9 2c 35 f4 27 c5 c5 ea 87 ...2....,5.'.... 0050 84 3b 35 d3 e7 7b 01 0a 1f 29 42 7c a5 46 a5 df .;5..{...)B|.F.. 0060 8f 8f d9 dd 8d 15 3b 19 4c d9 37 8c a3 7c df 2b ......;.L.7..|.+ 0070 84 b3 95 42 2c ef 83 b0 39 ae 52 d3 18 4c 37 ad ...B,...9.R..L7. 0080 7c 0c 92 7a 6b ee 62 f1 25 82 19 ac 15 18 98 5d |..zk.b.%......] 0090 1b 5d d7 34 16 bf 56 ed 48 f0 .].4..V.H. Frame 13 (154 bytes on wire, 154 bytes captured) Arrival Time: Jan 30, 2005 15:38:36.385658000 Time delta from previous packet: 0.000869000 seconds Time since reference or first frame: 0.816014000 seconds Frame Number: 13 Packet Length: 154 bytes Capture Length: 154 bytes Ethernet II, Src: 00:e0:4c:69:0a:78, Dst: 00:0c:29:e6:ad:b9 Destination: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Source: 00:e0:4c:69:0a:78 (00:e0:4c:69:0a:78) Type: IP (0x0800) Frame check sequence: 0x90423452 (correct) Internet Protocol, Src Addr: 165.227.249.102 (165.227.249.102), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 136 Identification: 0x000c (12) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 30 Protocol: ESP (0x32) Header checksum: 0x5d8e (correct) Source: 165.227.249.102 (165.227.249.102) Destination: 165.227.249.124 (165.227.249.124) Encapsulating Security Payload SPI: 0x7d3ffc2a Sequence: 2 Data (108 bytes) 0000 00 0c 29 e6 ad b9 00 e0 4c 69 0a 78 08 00 45 00 ..).....Li.x..E. 0010 00 88 00 0c 00 00 1e 32 5d 8e a5 e3 f9 66 a5 e3 .......2]....f.. 0020 f9 7c 7d 3f fc 2a 00 00 00 02 5c 57 5f 73 cc b7 .|}?.*....\W_s.. 0030 61 98 85 80 1e b2 4b b3 94 75 e6 60 ef 2c 36 68 a.....K..u.`.,6h 0040 64 fc 2b 3a c4 52 23 39 45 58 e8 63 4c 97 f0 ee d.+:.R#9EX.cL... 0050 7d 89 fc f0 70 65 00 fb f3 5c f0 80 4f 1d b7 93 }...pe...\..O... 0060 c7 ec a1 ad ef c6 0d 6a 8d a4 56 26 70 b3 7d 17 .......j..V&p.}. 0070 82 64 03 a4 3d c6 c8 79 48 ce 3d ad f5 85 0d 1b .d..=..yH.=..... 0080 a3 63 40 eb f4 4d 1f 04 e6 f7 d4 81 78 d7 a3 5f .c@..M......x.._ 0090 af 2d 84 f6 8d 69 90 42 34 52 .-...i.B4R Frame 14 (154 bytes on wire, 154 bytes captured) Arrival Time: Jan 30, 2005 15:38:37.395775000 Time delta from previous packet: 1.010117000 seconds Time since reference or first frame: 1.826131000 seconds Frame Number: 14 Packet Length: 154 bytes Capture Length: 154 bytes Ethernet II, Src: 00:0c:29:e6:ad:b9, Dst: 00:e0:4c:69:0a:78 Destination: 00:e0:4c:69:0a:78 (00:e0:4c:69:0a:78) Source: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Type: IP (0x0800) Frame check sequence: 0x5f6796b3 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.102 (165.227.249.102) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 136 Identification: 0x0002 (2) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b97 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.102 (165.227.249.102) Encapsulating Security Payload SPI: 0xca158b7f Sequence: 4 Data (108 bytes) 0000 00 e0 4c 69 0a 78 00 0c 29 e6 ad b9 08 00 45 00 ..Li.x..).....E. 0010 00 88 00 02 00 00 f0 32 8b 97 a5 e3 f9 7c a5 e3 .......2.....|.. 0020 f9 66 ca 15 8b 7f 00 00 00 04 e2 69 44 fe 02 0c .f.........iD... 0030 a0 40 3b c9 d4 2b 3a ff 12 c7 f3 60 7a 49 26 a2 .@;..+:....`zI&. 0040 63 d7 31 e0 f0 4c 3f fd dc ef 35 35 ed ad cb 45 c.1..L?...55...E 0050 ae 34 67 70 d9 c5 d1 a8 a5 b3 4b 66 b0 1a df 88 .4gp......Kf.... 0060 4a b4 bb 91 c8 82 b3 0a 54 03 5a 9e c6 00 e4 55 J.......T.Z....U 0070 3b b8 5b 1f f2 52 3a 8d 1e e0 1c 8e 5f 4b 68 c5 ;.[..R:....._Kh. 0080 84 a5 8e 65 ff 30 bf df 1f ec 95 17 22 af 3a 39 ...e.0......".:9 0090 16 ef c0 89 64 35 5f 67 96 b3 ....d5_g.. Frame 15 (154 bytes on wire, 154 bytes captured) Arrival Time: Jan 30, 2005 15:38:37.396641000 Time delta from previous packet: 0.000866000 seconds Time since reference or first frame: 1.826997000 seconds Frame Number: 15 Packet Length: 154 bytes Capture Length: 154 bytes Ethernet II, Src: 00:e0:4c:69:0a:78, Dst: 00:0c:29:e6:ad:b9 Destination: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Source: 00:e0:4c:69:0a:78 (00:e0:4c:69:0a:78) Type: IP (0x0800) Frame check sequence: 0xf78cc47b (correct) Internet Protocol, Src Addr: 165.227.249.102 (165.227.249.102), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 136 Identification: 0x000d (13) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 30 Protocol: ESP (0x32) Header checksum: 0x5d8d (correct) Source: 165.227.249.102 (165.227.249.102) Destination: 165.227.249.124 (165.227.249.124) Encapsulating Security Payload SPI: 0x7d3ffc2a Sequence: 3 Data (108 bytes) 0000 00 0c 29 e6 ad b9 00 e0 4c 69 0a 78 08 00 45 00 ..).....Li.x..E. 0010 00 88 00 0d 00 00 1e 32 5d 8d a5 e3 f9 66 a5 e3 .......2]....f.. 0020 f9 7c 7d 3f fc 2a 00 00 00 03 eb 3d 4d 16 80 bf .|}?.*.....=M... 0030 17 df ab 7a e6 65 cb 4e ec fc 52 81 2f 8a 69 64 ...z.e.N..R./.id 0040 c4 65 6f 7c fc a7 10 c7 04 25 f5 76 29 6c b4 1c .eo|.....%.v)l.. 0050 90 ee 2a 74 42 1e f0 ab a9 f1 1e 01 0f 42 98 9e ..*tB........B.. 0060 e8 43 04 f3 29 68 fa ab be 88 cf 09 2e c9 66 9e .C..)h........f. 0070 fa 9d 61 92 f5 77 04 05 b3 4f 8a 1c 97 36 f9 48 ..a..w...O...6.H 0080 62 84 74 45 7b c3 9d 2a 4d 65 b6 d0 58 76 a8 c2 b.tE{..*Me..Xv.. 0090 7d 22 b4 d2 71 8f f7 8c c4 7b }"..q....{ Frame 16 (154 bytes on wire, 154 bytes captured) Arrival Time: Jan 30, 2005 15:38:38.427142000 Time delta from previous packet: 1.030501000 seconds Time since reference or first frame: 2.857498000 seconds Frame Number: 16 Packet Length: 154 bytes Capture Length: 154 bytes Ethernet II, Src: 00:0c:29:e6:ad:b9, Dst: 00:e0:4c:69:0a:78 Destination: 00:e0:4c:69:0a:78 (00:e0:4c:69:0a:78) Source: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Type: IP (0x0800) Frame check sequence: 0x7774ad5f (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.102 (165.227.249.102) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 136 Identification: 0x0003 (3) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b96 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.102 (165.227.249.102) Encapsulating Security Payload SPI: 0xca158b7f Sequence: 5 Data (108 bytes) 0000 00 e0 4c 69 0a 78 00 0c 29 e6 ad b9 08 00 45 00 ..Li.x..).....E. 0010 00 88 00 03 00 00 f0 32 8b 96 a5 e3 f9 7c a5 e3 .......2.....|.. 0020 f9 66 ca 15 8b 7f 00 00 00 05 df 8d f5 7d 66 88 .f...........}f. 0030 e2 85 d5 78 2e f4 25 57 34 b5 c9 ee c8 48 e4 58 ...x..%W4....H.X 0040 d0 f9 1e d8 7f 2f 31 42 9d ad d2 d7 b2 69 d5 32 ...../1B.....i.2 0050 1e 03 fd f4 5b 0c 9d 31 39 56 3b 63 71 82 08 9a ....[..19V;cq... 0060 7e f1 99 d7 27 67 b5 58 2d 7c 24 04 bb a8 ec ed ~...'g.X-|$..... 0070 7f 2c 0b ab c7 09 29 c6 99 e7 56 03 35 ec 18 84 .,....)...V.5... 0080 9d 1f 39 cb 47 35 ed 7e 71 07 10 36 5a 5e f4 83 ..9.G5.~q..6Z^.. 0090 36 0a 56 9c 15 3f 77 74 ad 5f 6.V..?wt._ Frame 17 (154 bytes on wire, 154 bytes captured) Arrival Time: Jan 30, 2005 15:38:38.428042000 Time delta from previous packet: 0.000900000 seconds Time since reference or first frame: 2.858398000 seconds Frame Number: 17 Packet Length: 154 bytes Capture Length: 154 bytes Ethernet II, Src: 00:e0:4c:69:0a:78, Dst: 00:0c:29:e6:ad:b9 Destination: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Source: 00:e0:4c:69:0a:78 (00:e0:4c:69:0a:78) Type: IP (0x0800) Frame check sequence: 0xb4ef93ed (correct) Internet Protocol, Src Addr: 165.227.249.102 (165.227.249.102), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 136 Identification: 0x000e (14) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 30 Protocol: ESP (0x32) Header checksum: 0x5d8c (correct) Source: 165.227.249.102 (165.227.249.102) Destination: 165.227.249.124 (165.227.249.124) Encapsulating Security Payload SPI: 0x7d3ffc2a Sequence: 4 Data (108 bytes) 0000 00 0c 29 e6 ad b9 00 e0 4c 69 0a 78 08 00 45 00 ..).....Li.x..E. 0010 00 88 00 0e 00 00 1e 32 5d 8c a5 e3 f9 66 a5 e3 .......2]....f.. 0020 f9 7c 7d 3f fc 2a 00 00 00 04 ac 48 2e 92 cc f1 .|}?.*.....H.... 0030 89 80 1e 23 32 d6 51 23 95 db d8 1c 81 a5 8b 64 ...#2.Q#.......d 0040 a2 48 52 c2 d6 0a 41 2f 7f 61 21 49 bd d0 26 9e .HR...A/.a!I..&. 0050 b8 50 66 50 43 5c 4d d8 20 41 b9 e5 f4 20 7e eb .PfPC\M. A... ~. 0060 51 1e 54 57 a4 be 6b 4f 9f db d6 4e bf 9a 59 96 Q.TW..kO...N..Y. 0070 f9 51 c3 11 c2 05 d6 e8 4f 11 00 db 81 b1 3b 4c .Q......O.....;L 0080 bb e1 9a d1 2f 6a 5d 62 b2 cc f6 b6 ef ef 99 d5 ..../j]b........ 0090 d6 3b 0b ea 76 40 b4 ef 93 ed .;..v@....