Frame 1 (266 bytes on wire, 266 bytes captured) Arrival Time: Apr 4, 2005 13:54:08.760046000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 266 bytes Capture Length: 266 bytes Ethernet II, Src: 00:0c:29:e6:ad:b9, Dst: 00:d0:c9:94:ef:f7 Destination: 00:d0:c9:94:ef:f7 (00:d0:c9:94:ef:f7) Source: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Type: IP (0x0800) Frame check sequence: 0xb65474fd (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.103 (165.227.249.103) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 248 Identification: 0x76bb (30395) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xc48e (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.103 (165.227.249.103) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 228 Checksum: 0x77a8 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xA8656074700E598E Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 220 Security Association payload Next payload: Vendor ID (13) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 0 Next payload: NONE (0) Length: 40 Proposal number: 0 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 0 Next payload: NONE (0) Length: 32 Transform number: 0 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: unknown vendor ID: 0x8F9CC94E01248ECDF147594C284B213B Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-stenberg-ipsec-nat-traversal-01 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-stenberg-ipsec-nat-traversal-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-03 0000 00 d0 c9 94 ef f7 00 0c 29 e6 ad b9 08 00 45 00 ........).....E. 0010 00 f8 76 bb 00 00 40 11 c4 8e a5 e3 f9 7c a5 e3 ..v...@......|.. 0020 f9 67 01 f4 01 f4 00 e4 77 a8 a8 65 60 74 70 0e .g......w..e`tp. 0030 59 8e 00 00 00 00 00 00 00 00 01 10 02 00 00 00 Y............... 0040 00 00 00 00 00 dc 0d 00 00 34 00 00 00 01 00 00 .........4...... 0050 00 01 00 00 00 28 00 01 00 01 00 00 00 20 00 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 03 00 01 80 04 ................ 0070 00 02 80 0b 00 01 80 0c 70 80 0d 00 00 14 8f 9c ........p....... 0080 c9 4e 01 24 8e cd f1 47 59 4c 28 4b 21 3b 0d 00 .N.$...GYL(K!;.. 0090 00 14 27 ba b5 dc 01 ea 07 60 ea 4e 31 90 ac 27 ..'......`.N1..' 00a0 c0 d0 0d 00 00 14 61 05 c4 22 e7 68 47 e4 3f 96 ......a..".hG.?. 00b0 84 80 12 92 ae cd 0d 00 00 14 44 85 15 2d 18 b6 ..........D..-.. 00c0 bb cd 0b e8 a8 46 95 79 dd cc 0d 00 00 14 cd 60 .....F.y.......` 00d0 46 43 35 df 21 f8 7c fd b2 fc 68 b6 a4 48 0d 00 FC5.!.|...h..H.. 00e0 00 14 90 cb 80 91 3e bb 69 6e 08 63 81 b5 ec 42 ......>.in.c...B 00f0 7b 1f 00 00 00 14 7d 94 19 a6 53 10 ca 6f 2c 17 {.....}...S..o,. 0100 9d 92 15 52 9d 56 b6 54 74 fd ...R.V.Tt. Frame 2 (186 bytes on wire, 186 bytes captured) Arrival Time: Apr 4, 2005 13:54:08.765096000 Time delta from previous packet: 0.005050000 seconds Time since reference or first frame: 0.005050000 seconds Frame Number: 2 Packet Length: 186 bytes Capture Length: 186 bytes Ethernet II, Src: 00:d0:c9:94:ef:f7, Dst: 00:0c:29:e6:ad:b9 Destination: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Source: 00:d0:c9:94:ef:f7 (00:d0:c9:94:ef:f7) Type: IP (0x0800) Frame check sequence: 0x13abf89c (correct) Internet Protocol, Src Addr: 165.227.249.103 (165.227.249.103), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 168 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb99 (correct) Source: 165.227.249.103 (165.227.249.103) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 148 Checksum: 0xf654 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xA8656074700E598E Responder cookie: 0xE798F6138CCB5556 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 140 Security Association payload Next payload: Vendor ID (13) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 0 Next payload: NONE (0) Length: 40 Proposal number: 0 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 0 Next payload: NONE (0) Length: 32 Transform number: 0 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-dpd-00.txt Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: unknown vendor ID: 0x648982785BEDBDD66A6DD356F0E160FD 0000 00 0c 29 e6 ad b9 00 d0 c9 94 ef f7 08 00 45 00 ..)...........E. 0010 00 a8 00 00 40 00 40 11 fb 99 a5 e3 f9 67 a5 e3 ....@.@......g.. 0020 f9 7c 01 f4 01 f4 00 94 f6 54 a8 65 60 74 70 0e .|.......T.e`tp. 0030 59 8e e7 98 f6 13 8c cb 55 56 01 10 02 00 00 00 Y.......UV...... 0040 00 00 00 00 00 8c 0d 00 00 34 00 00 00 01 00 00 .........4...... 0050 00 01 00 00 00 28 00 01 00 01 00 00 00 20 00 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 03 00 01 80 04 ................ 0070 00 02 80 0b 00 01 80 0c 70 80 0d 00 00 14 90 cb ........p....... 0080 80 91 3e bb 69 6e 08 63 81 b5 ec 42 7b 1f 0d 00 ..>.in.c...B{... 0090 00 14 af ca d7 13 68 a1 f1 c9 6b 86 96 fc 77 57 ......h...k...wW 00a0 01 00 00 00 00 14 64 89 82 78 5b ed bd d6 6a 6d ......d..x[...jm 00b0 d3 56 f0 e1 60 fd 13 ab f8 9c .V..`..... Frame 3 (274 bytes on wire, 274 bytes captured) Arrival Time: Apr 4, 2005 13:54:08.775798000 Time delta from previous packet: 0.010702000 seconds Time since reference or first frame: 0.015752000 seconds Frame Number: 3 Packet Length: 274 bytes Capture Length: 274 bytes Ethernet II, Src: 00:0c:29:e6:ad:b9, Dst: 00:d0:c9:94:ef:f7 Destination: 00:d0:c9:94:ef:f7 (00:d0:c9:94:ef:f7) Source: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Type: IP (0x0800) Frame check sequence: 0xad4c200e (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.103 (165.227.249.103) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 256 Identification: 0x76bc (30396) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xc485 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.103 (165.227.249.103) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 236 Checksum: 0x7424 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xA8656074700E598E Responder cookie: 0xE798F6138CCB5556 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 228 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: Private USE (130) Length: 20 Nonce Data Unknown payload type payload Next payload: Private USE (130) Length: 24 Payload Unknown payload type payload Next payload: NONE (0) Length: 24 Payload 0000 00 d0 c9 94 ef f7 00 0c 29 e6 ad b9 08 00 45 00 ........).....E. 0010 01 00 76 bc 00 00 40 11 c4 85 a5 e3 f9 7c a5 e3 ..v...@......|.. 0020 f9 67 01 f4 01 f4 00 ec 74 24 a8 65 60 74 70 0e .g......t$.e`tp. 0030 59 8e e7 98 f6 13 8c cb 55 56 04 10 02 00 00 00 Y.......UV...... 0040 00 00 00 00 00 e4 0a 00 00 84 09 8f 5b 35 85 03 ............[5.. 0050 8b b9 89 6c aa dd e6 d4 fe ef 61 53 68 00 56 50 ...l......aSh.VP 0060 ab 2f 6a 71 be 06 51 15 fa 27 74 eb da 99 04 9c ./jq..Q..'t..... 0070 30 44 05 a4 88 f6 52 6d 34 e8 9a 3e 4b 8a eb 3e 0D....Rm4..>K..> 0080 b4 a7 64 8f a1 e9 de 14 8c 47 e1 1d 13 13 79 5a ..d......G....yZ 0090 6d a7 f4 f1 4f 8d 6b a2 2e 46 b2 10 9c 30 95 25 m...O.k..F...0.% 00a0 fb 3a 63 8a 09 1c 38 0e 8e 95 a2 85 7e 14 3f 48 .:c...8.....~.?H 00b0 c9 b8 84 39 ca 1b 7b 9d 37 53 c2 4e 59 43 60 55 ...9..{.7S.NYC`U 00c0 8e 00 79 81 35 ad c8 cd e4 fb 82 00 00 14 38 31 ..y.5.........81 00d0 34 18 8f 5d 8b ca 38 ae 3b 35 88 e0 ea e1 82 00 4..]..8.;5...... 00e0 00 18 65 22 56 58 53 27 39 59 cf f2 94 c6 af 47 ..e"VXS'9Y.....G 00f0 c7 c6 94 09 93 d2 00 00 00 18 a9 18 d5 55 7c 2a .............U|* 0100 10 85 53 73 f9 eb c6 08 9c 56 eb ed 81 9d ad 4c ..Ss.....V.....L 0110 20 0e . Frame 4 (290 bytes on wire, 290 bytes captured) Arrival Time: Apr 4, 2005 13:54:08.923782000 Time delta from previous packet: 0.147984000 seconds Time since reference or first frame: 0.163736000 seconds Frame Number: 4 Packet Length: 290 bytes Capture Length: 290 bytes Ethernet II, Src: 00:d0:c9:94:ef:f7, Dst: 00:0c:29:e6:ad:b9 Destination: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Source: 00:d0:c9:94:ef:f7 (00:d0:c9:94:ef:f7) Type: IP (0x0800) Frame check sequence: 0x78b939e7 (correct) Internet Protocol, Src Addr: 165.227.249.103 (165.227.249.103), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 272 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb31 (correct) Source: 165.227.249.103 (165.227.249.103) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 252 Checksum: 0x2049 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xA8656074700E598E Responder cookie: 0xE798F6138CCB5556 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 244 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: Private USE (130) Length: 12 Nonce Data Unknown payload type payload Next payload: Private USE (130) Length: 24 Payload Unknown payload type payload Next payload: Private USE (130) Length: 24 Payload Unknown payload type payload Next payload: NONE (0) Length: 24 Payload 0000 00 0c 29 e6 ad b9 00 d0 c9 94 ef f7 08 00 45 00 ..)...........E. 0010 01 10 00 00 40 00 40 11 fb 31 a5 e3 f9 67 a5 e3 ....@.@..1...g.. 0020 f9 7c 01 f4 01 f4 00 fc 20 49 a8 65 60 74 70 0e .|...... I.e`tp. 0030 59 8e e7 98 f6 13 8c cb 55 56 04 10 02 00 00 00 Y.......UV...... 0040 00 00 00 00 00 f4 0a 00 00 84 78 41 8e 7f e2 db ..........xA.... 0050 54 54 c9 a2 3d ea 84 63 59 28 66 9e bc a6 ea e2 TT..=..cY(f..... 0060 82 9f 39 df bf c4 36 e9 7a 40 70 48 ca 65 12 c4 ..9...6.z@pH.e.. 0070 52 56 68 ed cd 88 9c b1 65 76 0b 89 c5 1e 7e 24 RVh.....ev....~$ 0080 18 2b 42 db 6c b7 7a a8 fd 9a b7 42 c2 04 2e a6 .+B.l.z....B.... 0090 a5 8d e9 aa 49 e0 c0 13 f6 29 56 c0 f0 99 65 0b ....I....)V...e. 00a0 60 9c 20 3f f0 d7 f3 ce 58 96 15 63 cd 89 da df `. ?....X..c.... 00b0 03 ea 4f c8 6d 34 30 51 e5 ca b5 ad e0 ab 42 e1 ..O.m40Q......B. 00c0 58 de 2e 71 59 a4 28 41 4e fd 82 00 00 0c ab 05 X..qY.(AN....... 00d0 c6 59 c5 41 cd d8 82 00 00 18 a9 18 d5 55 7c 2a .Y.A.........U|* 00e0 10 85 53 73 f9 eb c6 08 9c 56 eb ed 81 9d 82 00 ..Ss.....V...... 00f0 00 18 91 53 2f 02 2f 40 98 55 13 cb 06 cf cd 19 ...S/./@.U...... 0100 ba f4 76 f0 29 1d 00 00 00 18 65 22 56 58 53 27 ..v.).....e"VXS' 0110 39 59 cf f2 94 c6 af 47 c7 c6 94 09 93 d2 78 b9 9Y.....G......x. 0120 39 e7 9. Frame 5 (122 bytes on wire, 122 bytes captured) Arrival Time: Apr 4, 2005 13:54:08.973425000 Time delta from previous packet: 0.049643000 seconds Time since reference or first frame: 0.213379000 seconds Frame Number: 5 Packet Length: 122 bytes Capture Length: 122 bytes Ethernet II, Src: 00:0c:29:e6:ad:b9, Dst: 00:d0:c9:94:ef:f7 Destination: 00:d0:c9:94:ef:f7 (00:d0:c9:94:ef:f7) Source: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Type: IP (0x0800) Frame check sequence: 0x5245ee9a (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.103 (165.227.249.103) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 104 Identification: 0x76bd (30397) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xc51c (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.103 (165.227.249.103) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 84 Checksum: 0xb52f (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xA8656074700E598E Responder cookie: 0xE798F6138CCB5556 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 76 Encrypted payload (48 bytes) 0000 00 d0 c9 94 ef f7 00 0c 29 e6 ad b9 08 00 45 00 ........).....E. 0010 00 68 76 bd 00 00 40 11 c5 1c a5 e3 f9 7c a5 e3 .hv...@......|.. 0020 f9 67 01 f4 01 f4 00 54 b5 2f a8 65 60 74 70 0e .g.....T./.e`tp. 0030 59 8e e7 98 f6 13 8c cb 55 56 05 10 02 01 00 00 Y.......UV...... 0040 00 00 00 00 00 4c 84 f3 5f c1 33 32 f7 76 ae d3 .....L.._.32.v.. 0050 8b 6d bf a8 2a 20 8a dc 1a 0b d4 ae f9 69 f3 be .m..* .......i.. 0060 46 35 ce 10 57 a8 d1 1e 38 1e 9b 0e 63 50 7f 0d F5..W...8...cP.. 0070 4e 08 43 e2 4f 36 52 45 ee 9a N.C.O6RE.. Frame 6 (138 bytes on wire, 138 bytes captured) Arrival Time: Apr 4, 2005 13:54:09.140502000 Time delta from previous packet: 0.167077000 seconds Time since reference or first frame: 0.380456000 seconds Frame Number: 6 Packet Length: 138 bytes Capture Length: 138 bytes Ethernet II, Src: 00:d0:c9:94:ef:f7, Dst: 00:0c:29:e6:ad:b9 Destination: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Source: 00:d0:c9:94:ef:f7 (00:d0:c9:94:ef:f7) Type: IP (0x0800) Frame check sequence: 0xeb0f07e6 (correct) Internet Protocol, Src Addr: 165.227.249.103 (165.227.249.103), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfbc9 (correct) Source: 165.227.249.103 (165.227.249.103) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 100 Checksum: 0x99fa (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xA8656074700E598E Responder cookie: 0xE798F6138CCB5556 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 92 Encrypted payload (64 bytes) 0000 00 0c 29 e6 ad b9 00 d0 c9 94 ef f7 08 00 45 00 ..)...........E. 0010 00 78 00 00 40 00 40 11 fb c9 a5 e3 f9 67 a5 e3 .x..@.@......g.. 0020 f9 7c 01 f4 01 f4 00 64 99 fa a8 65 60 74 70 0e .|.....d...e`tp. 0030 59 8e e7 98 f6 13 8c cb 55 56 05 10 02 01 00 00 Y.......UV...... 0040 00 00 00 00 00 5c 12 9e 4b 60 91 06 ef ce 22 14 .....\..K`....". 0050 00 30 7b 6e 7c 63 db eb 7b 6a 73 4b 46 7d 02 db .0{n|c..{jsKF}.. 0060 83 bc 79 97 3f d2 7c e3 77 89 fb 70 7c c9 be 55 ..y.?.|.w..p|..U 0070 1d 0e 31 70 df 3c 1b 35 14 b3 e8 15 19 3d e1 12 ..1p.<.5.....=.. 0080 0c 58 79 7b 4e 01 eb 0f 07 e6 .Xy{N..... Frame 7 (338 bytes on wire, 338 bytes captured) Arrival Time: Apr 4, 2005 13:54:09.154674000 Time delta from previous packet: 0.014172000 seconds Time since reference or first frame: 0.394628000 seconds Frame Number: 7 Packet Length: 338 bytes Capture Length: 338 bytes Ethernet II, Src: 00:0c:29:e6:ad:b9, Dst: 00:d0:c9:94:ef:f7 Destination: 00:d0:c9:94:ef:f7 (00:d0:c9:94:ef:f7) Source: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Type: IP (0x0800) Frame check sequence: 0x22981c72 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.103 (165.227.249.103) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 320 Identification: 0x76be (30398) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xc443 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.103 (165.227.249.103) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 300 Checksum: 0xbf94 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xA8656074700E598E Responder cookie: 0xE798F6138CCB5556 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x5C94938A Length: 292 Encrypted payload (264 bytes) 0000 00 d0 c9 94 ef f7 00 0c 29 e6 ad b9 08 00 45 00 ........).....E. 0010 01 40 76 be 00 00 40 11 c4 43 a5 e3 f9 7c a5 e3 .@v...@..C...|.. 0020 f9 67 01 f4 01 f4 01 2c bf 94 a8 65 60 74 70 0e .g.....,...e`tp. 0030 59 8e e7 98 f6 13 8c cb 55 56 08 10 20 01 5c 94 Y.......UV.. .\. 0040 93 8a 00 00 01 24 66 42 b0 18 a3 a2 39 42 50 14 .....$fB....9BP. 0050 24 99 94 b5 4b 34 96 16 2e 05 0c 84 2e e6 40 dd $...K4........@. 0060 07 28 62 ed 13 b6 5e 4d 0e c7 71 f2 5f 93 fe 7b .(b...^M..q._..{ 0070 a3 17 d8 cf 21 a3 40 79 87 f9 5a 07 c1 f1 57 29 ....!.@y..Z...W) 0080 b8 54 ec d0 7f 40 e2 f9 06 84 79 30 79 0c 0f 78 .T...@....y0y..x 0090 68 dc 94 6e 3f a5 14 5e c0 66 6c a3 13 f9 97 9e h..n?..^.fl..... 00a0 91 55 49 29 ef c3 43 15 ee 2d 6d 20 30 6e 00 04 .UI)..C..-m 0n.. 00b0 34 4f 7f b5 5f 55 3d 68 32 68 0f 59 be 78 69 2a 4O.._U=h2h.Y.xi* 00c0 41 23 b2 2a 4f 12 a7 a8 e3 05 6e 46 fa d1 e5 e7 A#.*O.....nF.... 00d0 19 3e 46 d5 e0 c8 51 16 1a 91 94 ce cf 82 8f 7b .>F...Q........{ 00e0 b0 8d bf e0 f2 b7 b3 fb 3b 3e 23 a8 a7 28 d8 bd ........;>#..(.. 00f0 3a 71 b3 46 03 b9 0b f3 b5 57 f7 42 cb d1 c3 68 :q.F.....W.B...h 0100 d4 d8 38 ee be 7b 6f cc f5 fb 01 82 14 c5 30 67 ..8..{o.......0g 0110 42 66 04 59 6d 9b 8a 6c c4 e8 bd 81 23 95 00 ce Bf.Ym..l....#... 0120 ee 63 99 7e 8c ea 9c 0c 75 6e 5c 2f 68 d4 ed 00 .c.~....un\/h... 0130 9c ea 25 34 d8 87 b4 36 d4 c8 6e 06 7e e4 d1 d2 ..%4...6..n.~... 0140 08 1a 51 d5 75 57 13 cc a1 4a fb e5 22 05 22 98 ..Q.uW...J..".". 0150 1c 72 .r Frame 8 (330 bytes on wire, 330 bytes captured) Arrival Time: Apr 4, 2005 13:54:09.298742000 Time delta from previous packet: 0.144068000 seconds Time since reference or first frame: 0.538696000 seconds Frame Number: 8 Packet Length: 330 bytes Capture Length: 330 bytes Ethernet II, Src: 00:d0:c9:94:ef:f7, Dst: 00:0c:29:e6:ad:b9 Destination: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Source: 00:d0:c9:94:ef:f7 (00:d0:c9:94:ef:f7) Type: IP (0x0800) Frame check sequence: 0x732ba8a2 (correct) Internet Protocol, Src Addr: 165.227.249.103 (165.227.249.103), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 312 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb09 (correct) Source: 165.227.249.103 (165.227.249.103) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 292 Checksum: 0x26d6 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xA8656074700E598E Responder cookie: 0xE798F6138CCB5556 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x5C94938A Length: 284 Encrypted payload (256 bytes) 0000 00 0c 29 e6 ad b9 00 d0 c9 94 ef f7 08 00 45 00 ..)...........E. 0010 01 38 00 00 40 00 40 11 fb 09 a5 e3 f9 67 a5 e3 .8..@.@......g.. 0020 f9 7c 01 f4 01 f4 01 24 26 d6 a8 65 60 74 70 0e .|.....$&..e`tp. 0030 59 8e e7 98 f6 13 8c cb 55 56 08 10 20 01 5c 94 Y.......UV.. .\. 0040 93 8a 00 00 01 1c 8f 02 3a cc 55 b2 67 4e 46 04 ........:.U.gNF. 0050 1b 84 e0 f5 c8 cc cf 40 f4 c8 94 48 1c 27 b9 d1 .......@...H.'.. 0060 bc 25 ad a2 03 e6 a0 a0 a0 62 54 aa 76 8e c2 a8 .%.......bT.v... 0070 5e 2a 74 7b 7e 97 17 d2 3b 27 9f 4a 99 c9 47 30 ^*t{~...;'.J..G0 0080 86 d6 02 51 47 6b 83 64 e4 1c 9f 78 7f f7 39 09 ...QGk.d...x..9. 0090 bc 4e 02 5e 38 0b dc 8b 02 05 1c 64 2a a8 6b 61 .N.^8......d*.ka 00a0 42 2f cd b4 35 bf 98 8e 9b 8f e3 17 d9 be 4d 44 B/..5.........MD 00b0 f5 94 3c f8 a9 2f e1 10 1a c1 ed b5 e8 7b b0 6f ..<../.......{.o 00c0 4d 00 9e 02 23 c2 97 20 2c b2 82 b9 99 2e 05 b3 M...#.. ,....... 00d0 3d 06 23 41 1f 76 af 89 07 ce c0 8a 76 65 09 86 =.#A.v......ve.. 00e0 4f 78 b2 10 0d 05 04 09 ca f5 25 42 d6 b4 f5 6a Ox........%B...j 00f0 39 7b c3 58 e3 31 2a 24 13 7a 9e 6b 96 5d c5 78 9{.X.1*$.z.k.].x 0100 a9 d5 94 92 cc c3 9b a6 8f ef b9 b3 51 d2 02 28 ............Q..( 0110 81 20 20 03 50 7d fc f9 4f 0b cc 59 3e 9f 45 e1 . .P}..O..Y>.E. 0120 ba 40 b9 aa c8 8a db 90 56 e6 8f b6 9b 9d 64 45 .@......V.....dE 0130 b0 a4 ec 59 4c 37 6d 1f 96 e4 e2 8a 09 59 50 85 ...YL7m......YP. 0140 7b 63 3c 06 c7 cd 73 2b a8 a2 {c<...s+.. Frame 9 (98 bytes on wire, 98 bytes captured) Arrival Time: Apr 4, 2005 13:54:09.307650000 Time delta from previous packet: 0.008908000 seconds Time since reference or first frame: 0.547604000 seconds Frame Number: 9 Packet Length: 98 bytes Capture Length: 98 bytes Ethernet II, Src: 00:0c:29:e6:ad:b9, Dst: 00:d0:c9:94:ef:f7 Destination: 00:d0:c9:94:ef:f7 (00:d0:c9:94:ef:f7) Source: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Type: IP (0x0800) Frame check sequence: 0x631d99da (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.103 (165.227.249.103) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 80 Identification: 0x76bf (30399) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xc532 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.103 (165.227.249.103) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 60 Checksum: 0xe99e (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xA8656074700E598E Responder cookie: 0xE798F6138CCB5556 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x5C94938A Length: 52 Encrypted payload (24 bytes) 0000 00 d0 c9 94 ef f7 00 0c 29 e6 ad b9 08 00 45 00 ........).....E. 0010 00 50 76 bf 00 00 40 11 c5 32 a5 e3 f9 7c a5 e3 .Pv...@..2...|.. 0020 f9 67 01 f4 01 f4 00 3c e9 9e a8 65 60 74 70 0e .g.....<...e`tp. 0030 59 8e e7 98 f6 13 8c cb 55 56 08 10 20 01 5c 94 Y.......UV.. .\. 0040 93 8a 00 00 00 34 b0 78 6e e9 d9 35 03 98 c2 dd .....4.xn..5.... 0050 ba 65 73 01 e9 e3 ce df 60 70 08 7d 1a 74 63 1d .es.....`p.}.tc. 0060 99 da .. Frame 10 (154 bytes on wire, 154 bytes captured) Arrival Time: Apr 4, 2005 13:54:09.595853000 Time delta from previous packet: 0.288203000 seconds Time since reference or first frame: 0.835807000 seconds Frame Number: 10 Packet Length: 154 bytes Capture Length: 154 bytes Ethernet II, Src: 00:0c:29:e6:ad:b9, Dst: 00:d0:c9:94:ef:f7 Destination: 00:d0:c9:94:ef:f7 (00:d0:c9:94:ef:f7) Source: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Type: IP (0x0800) Frame check sequence: 0xb8c5a090 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.103 (165.227.249.103) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 136 Identification: 0x0003 (3) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b95 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.103 (165.227.249.103) Encapsulating Security Payload SPI: 0x8f22cbff Sequence: 2 Data (108 bytes) 0000 00 d0 c9 94 ef f7 00 0c 29 e6 ad b9 08 00 45 00 ........).....E. 0010 00 88 00 03 00 00 f0 32 8b 95 a5 e3 f9 7c a5 e3 .......2.....|.. 0020 f9 67 8f 22 cb ff 00 00 00 02 87 ae 96 73 6f be .g.".........so. 0030 d8 40 db 80 fa ea 63 5b 1b 24 c8 ae 8f c6 ff e9 .@....c[.$...... 0040 d6 3d cd ce bd 45 b9 e9 86 b5 15 0a c1 6b b4 69 .=...E.......k.i 0050 cb 82 8d ea 78 4c a1 8b a9 2e da c3 fa ad ac 4d ....xL.........M 0060 06 4b f8 1f b3 2c 5b a8 db 13 96 ca ce ea 55 c0 .K...,[.......U. 0070 ec 4d 3e 30 b2 24 1c 7b d9 07 0d 6d ca 47 04 26 .M>0.$.{...m.G.& 0080 25 51 87 f8 d6 3a 7b 9a 65 ce aa 99 a7 54 79 83 %Q...:{.e....Ty. 0090 0e d1 86 59 79 6b b8 c5 a0 90 ...Yyk.... Frame 11 (154 bytes on wire, 154 bytes captured) Arrival Time: Apr 4, 2005 13:54:09.598790000 Time delta from previous packet: 0.002937000 seconds Time since reference or first frame: 0.838744000 seconds Frame Number: 11 Packet Length: 154 bytes Capture Length: 154 bytes Ethernet II, Src: 00:d0:c9:94:ef:f7, Dst: 00:0c:29:e6:ad:b9 Destination: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Source: 00:d0:c9:94:ef:f7 (00:d0:c9:94:ef:f7) Type: IP (0x0800) Frame check sequence: 0xf10a8812 (correct) Internet Protocol, Src Addr: 165.227.249.103 (165.227.249.103), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 136 Identification: 0x002b (43) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 30 Protocol: ESP (0x32) Header checksum: 0x5d6e (correct) Source: 165.227.249.103 (165.227.249.103) Destination: 165.227.249.124 (165.227.249.124) Encapsulating Security Payload SPI: 0x778dfae9 Sequence: 1 Data (108 bytes) 0000 00 0c 29 e6 ad b9 00 d0 c9 94 ef f7 08 00 45 00 ..)...........E. 0010 00 88 00 2b 00 00 1e 32 5d 6e a5 e3 f9 67 a5 e3 ...+...2]n...g.. 0020 f9 7c 77 8d fa e9 00 00 00 01 b0 42 3f 4f ba e7 .|w........B?O.. 0030 75 aa c3 0f 9e 96 89 d9 09 21 64 45 75 d3 46 de u........!dEu.F. 0040 72 47 e0 09 d4 62 bf 5f 82 dd 30 b1 7f 95 9a 5a rG...b._..0....Z 0050 b7 62 8d bc 4b 07 d6 9e 3e fe 9e 24 1a ef 47 4c .b..K...>..$..GL 0060 61 3a 20 d3 c2 16 63 bd 5e ec da 14 d4 c7 48 56 a: ...c.^.....HV 0070 7a a1 7a a6 c3 9e c2 5c 51 79 8a b5 f1 38 ba 37 z.z....\Qy...8.7 0080 5f 00 7f 0c 04 37 e2 75 a9 22 68 63 41 56 b1 71 _....7.u."hcAV.q 0090 64 25 61 f0 1e 61 f1 0a 88 12 d%a..a.... Frame 12 (154 bytes on wire, 154 bytes captured) Arrival Time: Apr 4, 2005 13:54:09.770056000 Time delta from previous packet: 0.171266000 seconds Time since reference or first frame: 1.010010000 seconds Frame Number: 12 Packet Length: 154 bytes Capture Length: 154 bytes Ethernet II, Src: 00:0c:29:e6:ad:b9, Dst: 00:d0:c9:94:ef:f7 Destination: 00:d0:c9:94:ef:f7 (00:d0:c9:94:ef:f7) Source: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Type: IP (0x0800) Frame check sequence: 0x2a05a92d (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.103 (165.227.249.103) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 136 Identification: 0x0004 (4) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b94 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.103 (165.227.249.103) Encapsulating Security Payload SPI: 0x8f22cbff Sequence: 3 Data (108 bytes) 0000 00 d0 c9 94 ef f7 00 0c 29 e6 ad b9 08 00 45 00 ........).....E. 0010 00 88 00 04 00 00 f0 32 8b 94 a5 e3 f9 7c a5 e3 .......2.....|.. 0020 f9 67 8f 22 cb ff 00 00 00 03 1a 38 23 8c e0 14 .g.".......8#... 0030 d3 07 9d 96 0d 30 6e 93 3e 2b fe b1 f2 1c c2 c1 .....0n.>+...... 0040 a0 9c c3 89 e6 7c 53 9f 8f 46 61 d5 f6 aa d4 dd .....|S..Fa..... 0050 1e 05 b8 66 d5 0f 89 b4 35 5f 5b 2a 4e 54 11 4e ...f....5_[*NT.N 0060 73 74 44 14 79 e1 e3 ff 5a 91 8b 69 14 e0 c5 02 stD.y...Z..i.... 0070 da 1b ea e8 4f b7 9b dc fb bd 9f cb b6 2e 33 a8 ....O.........3. 0080 d5 36 ea 0b b2 5b 87 89 3e 14 c8 ba 7e a2 12 80 .6...[..>...~... 0090 ac c7 c5 2d 12 99 2a 05 a9 2d ...-..*..- Frame 13 (154 bytes on wire, 154 bytes captured) Arrival Time: Apr 4, 2005 13:54:09.770846000 Time delta from previous packet: 0.000790000 seconds Time since reference or first frame: 1.010800000 seconds Frame Number: 13 Packet Length: 154 bytes Capture Length: 154 bytes Ethernet II, Src: 00:d0:c9:94:ef:f7, Dst: 00:0c:29:e6:ad:b9 Destination: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Source: 00:d0:c9:94:ef:f7 (00:d0:c9:94:ef:f7) Type: IP (0x0800) Frame check sequence: 0xd3b66590 (correct) Internet Protocol, Src Addr: 165.227.249.103 (165.227.249.103), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 136 Identification: 0x002c (44) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 30 Protocol: ESP (0x32) Header checksum: 0x5d6d (correct) Source: 165.227.249.103 (165.227.249.103) Destination: 165.227.249.124 (165.227.249.124) Encapsulating Security Payload SPI: 0x778dfae9 Sequence: 2 Data (108 bytes) 0000 00 0c 29 e6 ad b9 00 d0 c9 94 ef f7 08 00 45 00 ..)...........E. 0010 00 88 00 2c 00 00 1e 32 5d 6d a5 e3 f9 67 a5 e3 ...,...2]m...g.. 0020 f9 7c 77 8d fa e9 00 00 00 02 c3 dd 63 82 82 e7 .|w.........c... 0030 5e 70 55 8c 45 ee a8 13 d1 92 d6 99 b6 af 11 9d ^pU.E........... 0040 0e 39 33 5e a0 0c 7e f3 91 62 23 29 0b 98 8b 17 .93^..~..b#).... 0050 a6 f1 2d 89 07 3a 38 ce 6b b5 59 1b 0e 0d 5f f3 ..-..:8.k.Y..._. 0060 99 4e af 39 2a 02 91 74 d0 21 a1 f3 32 b7 4c ce .N.9*..t.!..2.L. 0070 de 23 8a 8f d5 4b 3f 25 c9 eb d3 d9 7c a3 76 c9 .#...K?%....|.v. 0080 50 cb 03 ed e1 b1 83 e8 c4 74 65 1d 28 b3 c3 10 P........te.(... 0090 8e 75 92 6e 87 9a d3 b6 65 90 .u.n....e. Frame 14 (154 bytes on wire, 154 bytes captured) Arrival Time: Apr 4, 2005 13:54:10.777655000 Time delta from previous packet: 1.006809000 seconds Time since reference or first frame: 2.017609000 seconds Frame Number: 14 Packet Length: 154 bytes Capture Length: 154 bytes Ethernet II, Src: 00:0c:29:e6:ad:b9, Dst: 00:d0:c9:94:ef:f7 Destination: 00:d0:c9:94:ef:f7 (00:d0:c9:94:ef:f7) Source: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Type: IP (0x0800) Frame check sequence: 0x2d627b08 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.103 (165.227.249.103) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 136 Identification: 0x0005 (5) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b93 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.103 (165.227.249.103) Encapsulating Security Payload SPI: 0x8f22cbff Sequence: 4 Data (108 bytes) 0000 00 d0 c9 94 ef f7 00 0c 29 e6 ad b9 08 00 45 00 ........).....E. 0010 00 88 00 05 00 00 f0 32 8b 93 a5 e3 f9 7c a5 e3 .......2.....|.. 0020 f9 67 8f 22 cb ff 00 00 00 04 33 e7 ba 9d f7 3c .g."......3....< 0030 13 ba 66 40 1b 6c ad 55 db 58 c7 7c df 0d b7 36 ..f@.l.U.X.|...6 0040 32 1e 56 5b af d6 71 ea f7 09 7c 49 cb 78 29 ee 2.V[..q...|I.x). 0050 93 05 6a 88 ba d2 9e 22 23 26 36 9d 33 d0 96 87 ..j...."#&6.3... 0060 03 83 61 d7 48 eb 0a a1 75 ab 5b a2 d8 78 2e 3f ..a.H...u.[..x.? 0070 6f 35 e3 df be 09 8e fc dc 01 19 30 c7 a5 49 2b o5.........0..I+ 0080 87 6d bc 7c e1 59 de 48 51 41 f6 45 87 6e d3 89 .m.|.Y.HQA.E.n.. 0090 96 bd dc 49 b4 b1 2d 62 7b 08 ...I..-b{. Frame 15 (154 bytes on wire, 154 bytes captured) Arrival Time: Apr 4, 2005 13:54:10.779885000 Time delta from previous packet: 0.002230000 seconds Time since reference or first frame: 2.019839000 seconds Frame Number: 15 Packet Length: 154 bytes Capture Length: 154 bytes Ethernet II, Src: 00:d0:c9:94:ef:f7, Dst: 00:0c:29:e6:ad:b9 Destination: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Source: 00:d0:c9:94:ef:f7 (00:d0:c9:94:ef:f7) Type: IP (0x0800) Frame check sequence: 0x31a9c2f7 (correct) Internet Protocol, Src Addr: 165.227.249.103 (165.227.249.103), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 136 Identification: 0x002d (45) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 30 Protocol: ESP (0x32) Header checksum: 0x5d6c (correct) Source: 165.227.249.103 (165.227.249.103) Destination: 165.227.249.124 (165.227.249.124) Encapsulating Security Payload SPI: 0x778dfae9 Sequence: 3 Data (108 bytes) 0000 00 0c 29 e6 ad b9 00 d0 c9 94 ef f7 08 00 45 00 ..)...........E. 0010 00 88 00 2d 00 00 1e 32 5d 6c a5 e3 f9 67 a5 e3 ...-...2]l...g.. 0020 f9 7c 77 8d fa e9 00 00 00 03 d5 07 75 6f 2c 92 .|w.........uo,. 0030 42 db b0 e4 4a a7 da 43 42 a7 29 86 c6 23 bc 4b B...J..CB.)..#.K 0040 18 ad 0b 37 2c fc c7 2a 88 2e b6 b4 ee c1 cd f5 ...7,..*........ 0050 d4 54 a9 58 ef ec 83 9d 6a ab 90 ef fd c4 9f f7 .T.X....j....... 0060 83 8e 05 14 8c 9b c8 e5 91 73 e9 82 3d 25 6d 3f .........s..=%m? 0070 a4 47 7a e5 c4 3b 5c f3 0a 36 92 17 06 f0 13 30 .Gz..;\..6.....0 0080 a0 f3 89 c5 2b 97 99 c8 5a 46 d7 e7 51 0e b4 86 ....+...ZF..Q... 0090 46 5b 2f ee 7d 45 31 a9 c2 f7 F[/.}E1... Frame 16 (154 bytes on wire, 154 bytes captured) Arrival Time: Apr 4, 2005 13:54:11.769806000 Time delta from previous packet: 0.989921000 seconds Time since reference or first frame: 3.009760000 seconds Frame Number: 16 Packet Length: 154 bytes Capture Length: 154 bytes Ethernet II, Src: 00:0c:29:e6:ad:b9, Dst: 00:d0:c9:94:ef:f7 Destination: 00:d0:c9:94:ef:f7 (00:d0:c9:94:ef:f7) Source: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Type: IP (0x0800) Frame check sequence: 0x71c10b6e (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.103 (165.227.249.103) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 136 Identification: 0x0006 (6) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b92 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.103 (165.227.249.103) Encapsulating Security Payload SPI: 0x8f22cbff Sequence: 5 Data (108 bytes) 0000 00 d0 c9 94 ef f7 00 0c 29 e6 ad b9 08 00 45 00 ........).....E. 0010 00 88 00 06 00 00 f0 32 8b 92 a5 e3 f9 7c a5 e3 .......2.....|.. 0020 f9 67 8f 22 cb ff 00 00 00 05 be ab 33 f9 45 1b .g."........3.E. 0030 58 11 7b 89 13 c5 8a d6 45 4b 7d 95 51 ea 8b 06 X.{.....EK}.Q... 0040 88 ce dc 53 40 f8 c2 04 01 27 c8 16 2e b6 ed a5 ...S@....'...... 0050 20 57 57 06 9c bd 1f 68 86 ee 8f d6 f5 74 03 64 WW....h.....t.d 0060 d5 16 93 ce cc 4c 56 4e 64 0b 45 12 04 86 46 1d .....LVNd.E...F. 0070 0d c4 eb 90 f9 79 96 d7 6a 92 f1 0c 68 f0 8b c7 .....y..j...h... 0080 70 ad 73 22 9d d0 b2 da fb 9a d5 cd 0b b1 3a 40 p.s"..........:@ 0090 39 2e 14 b8 b0 e5 71 c1 0b 6e 9.....q..n Frame 17 (154 bytes on wire, 154 bytes captured) Arrival Time: Apr 4, 2005 13:54:11.770728000 Time delta from previous packet: 0.000922000 seconds Time since reference or first frame: 3.010682000 seconds Frame Number: 17 Packet Length: 154 bytes Capture Length: 154 bytes Ethernet II, Src: 00:d0:c9:94:ef:f7, Dst: 00:0c:29:e6:ad:b9 Destination: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Source: 00:d0:c9:94:ef:f7 (00:d0:c9:94:ef:f7) Type: IP (0x0800) Frame check sequence: 0x9382b7a1 (correct) Internet Protocol, Src Addr: 165.227.249.103 (165.227.249.103), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 136 Identification: 0x002e (46) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 30 Protocol: ESP (0x32) Header checksum: 0x5d6b (correct) Source: 165.227.249.103 (165.227.249.103) Destination: 165.227.249.124 (165.227.249.124) Encapsulating Security Payload SPI: 0x778dfae9 Sequence: 4 Data (108 bytes) 0000 00 0c 29 e6 ad b9 00 d0 c9 94 ef f7 08 00 45 00 ..)...........E. 0010 00 88 00 2e 00 00 1e 32 5d 6b a5 e3 f9 67 a5 e3 .......2]k...g.. 0020 f9 7c 77 8d fa e9 00 00 00 04 99 af 29 e9 e3 b2 .|w.........)... 0030 33 f8 4f da cb b5 8d cc 72 cd 04 04 18 11 40 b1 3.O.....r.....@. 0040 8d 71 c7 b0 98 af b4 4b cf 93 f6 1b 49 f8 f6 77 .q.....K....I..w 0050 d2 91 d6 65 54 f8 2c 5c 21 b2 26 b8 4c 05 71 c4 ...eT.,\!.&.L.q. 0060 e2 1c d8 63 c9 21 ed fc 88 cb ca ef 9b e4 62 e8 ...c.!........b. 0070 6c 42 82 cd 44 5f 3b 4e 24 cc b1 77 19 0b 0a e5 lB..D_;N$..w.... 0080 c1 12 b3 74 3f 74 59 78 20 7c 44 c2 3d 68 a7 49 ...t?tYx |D.=h.I 0090 09 cf ed 34 75 5c 93 82 b7 a1 ...4u\....