Frame 1 (262 bytes on wire, 262 bytes captured) Arrival Time: Nov 25, 2006 16:35:46.171597000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 262 bytes Capture Length: 262 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90), Dst: 00:18:4d:09:98:ab (00:18:4d:09:98:ab) Destination: 00:18:4d:09:98:ab (00:18:4d:09:98:ab) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.105 (165.227.249.105) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 248 Identification: 0x00fb (251) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3a4d [correct] Good: True Bad : False Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.105 (165.227.249.105) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 228 Checksum: 0x8277 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xB8614C7ED169F15B Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 220 Security Association payload Next payload: Vendor ID (13) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 0 Next payload: NONE (0) Length: 40 Proposal number: 0 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 0 Next payload: NONE (0) Length: 32 Transform number: 0 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: unknown vendor ID: 0x8F9CC94E01248ECDF147594C284B213B Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-stenberg-ipsec-nat-traversal-01 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-stenberg-ipsec-nat-traversal-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-03 0000 00 18 4d 09 98 ab 00 0c 29 f4 af 90 08 00 45 00 ..M.....).....E. 0010 00 f8 00 fb 00 00 40 11 3a 4d a5 e3 f9 7c a5 e3 ......@.:M...|.. 0020 f9 69 01 f4 01 f4 00 e4 82 77 b8 61 4c 7e d1 69 .i.......w.aL~.i 0030 f1 5b 00 00 00 00 00 00 00 00 01 10 02 00 00 00 .[.............. 0040 00 00 00 00 00 dc 0d 00 00 34 00 00 00 01 00 00 .........4...... 0050 00 01 00 00 00 28 00 01 00 01 00 00 00 20 00 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 03 00 01 80 04 ................ 0070 00 02 80 0b 00 01 80 0c 70 80 0d 00 00 14 8f 9c ........p....... 0080 c9 4e 01 24 8e cd f1 47 59 4c 28 4b 21 3b 0d 00 .N.$...GYL(K!;.. 0090 00 14 27 ba b5 dc 01 ea 07 60 ea 4e 31 90 ac 27 ..'......`.N1..' 00a0 c0 d0 0d 00 00 14 61 05 c4 22 e7 68 47 e4 3f 96 ......a..".hG.?. 00b0 84 80 12 92 ae cd 0d 00 00 14 44 85 15 2d 18 b6 ..........D..-.. 00c0 bb cd 0b e8 a8 46 95 79 dd cc 0d 00 00 14 cd 60 .....F.y.......` 00d0 46 43 35 df 21 f8 7c fd b2 fc 68 b6 a4 48 0d 00 FC5.!.|...h..H.. 00e0 00 14 90 cb 80 91 3e bb 69 6e 08 63 81 b5 ec 42 ......>.in.c...B 00f0 7b 1f 00 00 00 14 7d 94 19 a6 53 10 ca 6f 2c 17 {.....}...S..o,. 0100 9d 92 15 52 9d 56 ...R.V Frame 2 (142 bytes on wire, 142 bytes captured) Arrival Time: Nov 25, 2006 16:35:46.380863000 Time delta from previous packet: 0.209266000 seconds Time since reference or first frame: 0.209266000 seconds Frame Number: 2 Packet Length: 142 bytes Capture Length: 142 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:18:4d:09:98:ab (00:18:4d:09:98:ab), Dst: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:18:4d:09:98:ab (00:18:4d:09:98:ab) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.105 (165.227.249.105), Dst: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 128 Identification: 0x0000 (0) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfbbf [correct] Good: True Bad : False Source: 165.227.249.105 (165.227.249.105) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 108 Checksum: 0xb270 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xB8614C7ED169F15B Responder cookie: 0x4DBE5DDA2BD38D21 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 100 Security Association payload Next payload: Vendor ID (13) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 0 Next payload: NONE (0) Length: 40 Proposal number: 0 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 0 Next payload: NONE (0) Length: 32 Transform number: 0 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: RFC 3706 Detecting Dead IKE Peers (DPD) 0000 00 0c 29 f4 af 90 00 18 4d 09 98 ab 08 00 45 00 ..).....M.....E. 0010 00 80 00 00 40 00 40 11 fb bf a5 e3 f9 69 a5 e3 ....@.@......i.. 0020 f9 7c 01 f4 01 f4 00 6c b2 70 b8 61 4c 7e d1 69 .|.....l.p.aL~.i 0030 f1 5b 4d be 5d da 2b d3 8d 21 01 10 02 00 00 00 .[M.].+..!...... 0040 00 00 00 00 00 64 0d 00 00 34 00 00 00 01 00 00 .....d...4...... 0050 00 01 00 00 00 28 00 01 00 01 00 00 00 20 00 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 03 00 01 80 04 ................ 0070 00 02 80 0b 00 01 80 0c 70 80 00 00 00 14 af ca ........p....... 0080 d7 13 68 a1 f1 c9 6b 86 96 fc 77 57 01 00 ..h...k...wW.. Frame 3 (222 bytes on wire, 222 bytes captured) Arrival Time: Nov 25, 2006 16:35:46.380885000 Time delta from previous packet: 0.000022000 seconds Time since reference or first frame: 0.209288000 seconds Frame Number: 3 Packet Length: 222 bytes Capture Length: 222 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90), Dst: 00:18:4d:09:98:ab (00:18:4d:09:98:ab) Destination: 00:18:4d:09:98:ab (00:18:4d:09:98:ab) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.105 (165.227.249.105) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 208 Identification: 0x00fc (252) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3a74 [correct] Good: True Bad : False Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.105 (165.227.249.105) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 188 Checksum: 0xecf6 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xB8614C7ED169F15B Responder cookie: 0x4DBE5DDA2BD38D21 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 180 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 20 Nonce Data 0000 00 18 4d 09 98 ab 00 0c 29 f4 af 90 08 00 45 00 ..M.....).....E. 0010 00 d0 00 fc 00 00 40 11 3a 74 a5 e3 f9 7c a5 e3 ......@.:t...|.. 0020 f9 69 01 f4 01 f4 00 bc ec f6 b8 61 4c 7e d1 69 .i.........aL~.i 0030 f1 5b 4d be 5d da 2b d3 8d 21 04 10 02 00 00 00 .[M.].+..!...... 0040 00 00 00 00 00 b4 0a 00 00 84 41 5f da b3 ef f7 ..........A_.... 0050 69 c5 39 e9 c2 86 31 88 ec 77 36 6e 49 7b 4e df i.9...1..w6nI{N. 0060 b4 e6 87 46 88 73 b9 17 83 6a 62 9b a0 04 65 58 ...F.s...jb...eX 0070 7b b7 87 c9 cd 4d ac a1 e5 34 3a 8c 75 78 de 68 {....M...4:.ux.h 0080 b2 d4 11 18 d9 28 e0 17 4c d1 c9 2f 56 91 d7 93 .....(..L../V... 0090 f7 98 ec 98 a4 fd 88 7a f3 f2 bd 09 ee 27 50 ba .......z.....'P. 00a0 18 21 4c 94 6d 0a bc a7 15 0c f7 b6 fb 5b d4 04 .!L.m........[.. 00b0 6b 72 5f 88 15 ec 31 76 c4 a8 8e 86 69 0d 8b 7b kr_...1v....i..{ 00c0 2c 86 37 b8 07 a1 c3 7c 6e 9f 00 00 00 14 ff d7 ,.7....|n....... 00d0 b4 b6 5d d7 53 7d 50 6a 4a b4 8a 60 27 47 ..].S}PjJ..`'G Frame 4 (222 bytes on wire, 222 bytes captured) Arrival Time: Nov 25, 2006 16:35:46.633115000 Time delta from previous packet: 0.252230000 seconds Time since reference or first frame: 0.461518000 seconds Frame Number: 4 Packet Length: 222 bytes Capture Length: 222 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:18:4d:09:98:ab (00:18:4d:09:98:ab), Dst: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:18:4d:09:98:ab (00:18:4d:09:98:ab) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.105 (165.227.249.105), Dst: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 208 Identification: 0x0000 (0) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb6f [correct] Good: True Bad : False Source: 165.227.249.105 (165.227.249.105) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 188 Checksum: 0xe843 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xB8614C7ED169F15B Responder cookie: 0x4DBE5DDA2BD38D21 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 180 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 20 Nonce Data 0000 00 0c 29 f4 af 90 00 18 4d 09 98 ab 08 00 45 00 ..).....M.....E. 0010 00 d0 00 00 40 00 40 11 fb 6f a5 e3 f9 69 a5 e3 ....@.@..o...i.. 0020 f9 7c 01 f4 01 f4 00 bc e8 43 b8 61 4c 7e d1 69 .|.......C.aL~.i 0030 f1 5b 4d be 5d da 2b d3 8d 21 04 10 02 00 00 00 .[M.].+..!...... 0040 00 00 00 00 00 b4 0a 00 00 84 62 13 b0 28 e6 a6 ..........b..(.. 0050 78 16 43 10 4c 22 f9 ac 1b 83 d0 04 8b 88 fa 79 x.C.L".........y 0060 97 7e 06 45 9b 1f 20 ae a3 12 3c a7 d4 36 71 59 .~.E.. ...<..6qY 0070 1e c7 46 a6 57 e5 f9 4d e5 b0 94 59 ac 9a b5 87 ..F.W..M...Y.... 0080 c8 fa 8d cd 9d fc bf 78 dd 04 1c f7 d0 a7 db 23 .......x.......# 0090 79 40 78 14 2a fa d3 eb 3c dc 43 db 67 bc 9d 9b y@x.*...<.C.g... 00a0 4a 95 e4 f7 3b 43 d9 95 16 df b1 99 a5 14 bc 1a J...;C.......... 00b0 00 bb 37 96 40 78 a6 51 f8 bd 65 9e 68 18 78 c2 ..7.@x.Q..e.h.x. 00c0 28 8e ec b9 09 42 c4 14 dd 99 00 00 00 14 9f 70 (....B.........p 00d0 2a 4d b2 60 67 65 b4 5c 0a 7c 10 64 09 57 *M.`ge.\.|.d.W Frame 5 (118 bytes on wire, 118 bytes captured) Arrival Time: Nov 25, 2006 16:35:46.633117000 Time delta from previous packet: 0.000002000 seconds Time since reference or first frame: 0.461520000 seconds Frame Number: 5 Packet Length: 118 bytes Capture Length: 118 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90), Dst: 00:18:4d:09:98:ab (00:18:4d:09:98:ab) Destination: 00:18:4d:09:98:ab (00:18:4d:09:98:ab) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.105 (165.227.249.105) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 104 Identification: 0x00fd (253) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3adb [correct] Good: True Bad : False Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.105 (165.227.249.105) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 84 Checksum: 0x5c18 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xB8614C7ED169F15B Responder cookie: 0x4DBE5DDA2BD38D21 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 76 Encrypted payload (48 bytes) 0000 00 18 4d 09 98 ab 00 0c 29 f4 af 90 08 00 45 00 ..M.....).....E. 0010 00 68 00 fd 00 00 40 11 3a db a5 e3 f9 7c a5 e3 .h....@.:....|.. 0020 f9 69 01 f4 01 f4 00 54 5c 18 b8 61 4c 7e d1 69 .i.....T\..aL~.i 0030 f1 5b 4d be 5d da 2b d3 8d 21 05 10 02 01 00 00 .[M.].+..!...... 0040 00 00 00 00 00 4c 8b db 44 59 17 c6 2a 91 8f bd .....L..DY..*... 0050 a2 d3 69 b2 c4 69 b1 62 d9 97 63 ce e8 0a 42 c1 ..i..i.b..c...B. 0060 2a 67 7a e6 48 9e 9b bc ea bf ab 35 51 c7 f7 bd *gz.H......5Q... 0070 97 a4 2c 66 73 0b ..,fs. Frame 6 (110 bytes on wire, 110 bytes captured) Arrival Time: Nov 25, 2006 16:35:46.746348000 Time delta from previous packet: 0.113231000 seconds Time since reference or first frame: 0.574751000 seconds Frame Number: 6 Packet Length: 110 bytes Capture Length: 110 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:18:4d:09:98:ab (00:18:4d:09:98:ab), Dst: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:18:4d:09:98:ab (00:18:4d:09:98:ab) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.105 (165.227.249.105), Dst: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0x0000 (0) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfbdf [correct] Good: True Bad : False Source: 165.227.249.105 (165.227.249.105) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 76 Checksum: 0x6280 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xB8614C7ED169F15B Responder cookie: 0x4DBE5DDA2BD38D21 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 68 Encrypted payload (40 bytes) 0000 00 0c 29 f4 af 90 00 18 4d 09 98 ab 08 00 45 00 ..).....M.....E. 0010 00 60 00 00 40 00 40 11 fb df a5 e3 f9 69 a5 e3 .`..@.@......i.. 0020 f9 7c 01 f4 01 f4 00 4c 62 80 b8 61 4c 7e d1 69 .|.....Lb..aL~.i 0030 f1 5b 4d be 5d da 2b d3 8d 21 05 10 02 01 00 00 .[M.].+..!...... 0040 00 00 00 00 00 44 08 a8 9a aa 3d 2d bb 10 6e 0a .....D....=-..n. 0050 82 4b f7 9c 2d 3b 9a 0c 7f 73 4b 8d c8 e5 c7 ef .K..-;...sK..... 0060 1e f3 bb c1 a5 e3 02 28 25 4d a2 84 35 84 .......(%M..5. Frame 7 (334 bytes on wire, 334 bytes captured) Arrival Time: Nov 25, 2006 16:35:46.750050000 Time delta from previous packet: 0.003702000 seconds Time since reference or first frame: 0.578453000 seconds Frame Number: 7 Packet Length: 334 bytes Capture Length: 334 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90), Dst: 00:18:4d:09:98:ab (00:18:4d:09:98:ab) Destination: 00:18:4d:09:98:ab (00:18:4d:09:98:ab) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.105 (165.227.249.105) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 320 Identification: 0x00fe (254) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3a02 [correct] Good: True Bad : False Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.105 (165.227.249.105) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 300 Checksum: 0xeae7 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xB8614C7ED169F15B Responder cookie: 0x4DBE5DDA2BD38D21 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0xEEABF074 Length: 292 Encrypted payload (264 bytes) 0000 00 18 4d 09 98 ab 00 0c 29 f4 af 90 08 00 45 00 ..M.....).....E. 0010 01 40 00 fe 00 00 40 11 3a 02 a5 e3 f9 7c a5 e3 .@....@.:....|.. 0020 f9 69 01 f4 01 f4 01 2c ea e7 b8 61 4c 7e d1 69 .i.....,...aL~.i 0030 f1 5b 4d be 5d da 2b d3 8d 21 08 10 20 01 ee ab .[M.].+..!.. ... 0040 f0 74 00 00 01 24 dc f3 85 e8 b4 fd 21 a6 04 57 .t...$......!..W 0050 e8 f6 d6 a7 dd 35 98 b1 65 88 af b8 af ae e8 21 .....5..e......! 0060 d6 7c bd 57 00 1a 53 af 52 c2 62 36 88 1e 37 4f .|.W..S.R.b6..7O 0070 76 6a 2d 6f 6f 2f c4 7e e2 cc 9e a2 02 16 27 8d vj-oo/.~......'. 0080 cb e0 7a 80 31 7d 49 ac c3 49 6a a9 84 eb a0 1a ..z.1}I..Ij..... 0090 63 5e 8b 9c 43 87 30 4d d9 23 a6 76 5e 93 38 d9 c^..C.0M.#.v^.8. 00a0 25 d3 9b 54 50 83 4b e7 84 f4 0c 85 8b 8a 71 71 %..TP.K.......qq 00b0 84 da f9 06 82 9c f6 a6 87 c1 9b 45 49 28 26 6e ...........EI(&n 00c0 78 1f a9 13 f9 49 a9 e8 f8 99 5d 4d 7f 07 f9 f4 x....I....]M.... 00d0 85 db de 94 87 b5 fe fa 3a f4 66 53 71 27 e5 db ........:.fSq'.. 00e0 9c cb 93 a0 c7 6f 58 09 d6 8b 9d 29 28 ac 73 8d .....oX....)(.s. 00f0 71 9e 29 8a 46 5c e7 76 3c f4 f8 08 33 c7 3f 2d q.).F\.v<...3.?- 0100 13 2a 1e 0d 8b a4 ea 60 eb 53 83 cc 69 c4 c4 e6 .*.....`.S..i... 0110 50 00 97 07 fe c3 6d 10 c9 28 6a 1a fe 46 e5 5a P.....m..(j..F.Z 0120 76 52 be 3b 75 9e 19 6d 2a 4c 67 29 71 1b 90 56 vR.;u..m*Lg)q..V 0130 27 c3 6e d5 bf ff a0 59 7f 62 ec bb 88 ad 1e 65 '.n....Y.b.....e 0140 63 a2 61 52 3e 90 ec ed 6e e0 f2 f7 ef 2b c.aR>...n....+ Frame 8 (334 bytes on wire, 334 bytes captured) Arrival Time: Nov 25, 2006 16:35:47.284527000 Time delta from previous packet: 0.534477000 seconds Time since reference or first frame: 1.112930000 seconds Frame Number: 8 Packet Length: 334 bytes Capture Length: 334 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90), Dst: 00:18:4d:09:98:ab (00:18:4d:09:98:ab) Destination: 00:18:4d:09:98:ab (00:18:4d:09:98:ab) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.105 (165.227.249.105) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 320 Identification: 0x00ff (255) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3a01 [correct] Good: True Bad : False Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.105 (165.227.249.105) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 300 Checksum: 0xeae7 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xB8614C7ED169F15B Responder cookie: 0x4DBE5DDA2BD38D21 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0xEEABF074 Length: 292 Encrypted payload (264 bytes) 0000 00 18 4d 09 98 ab 00 0c 29 f4 af 90 08 00 45 00 ..M.....).....E. 0010 01 40 00 ff 00 00 40 11 3a 01 a5 e3 f9 7c a5 e3 .@....@.:....|.. 0020 f9 69 01 f4 01 f4 01 2c ea e7 b8 61 4c 7e d1 69 .i.....,...aL~.i 0030 f1 5b 4d be 5d da 2b d3 8d 21 08 10 20 01 ee ab .[M.].+..!.. ... 0040 f0 74 00 00 01 24 dc f3 85 e8 b4 fd 21 a6 04 57 .t...$......!..W 0050 e8 f6 d6 a7 dd 35 98 b1 65 88 af b8 af ae e8 21 .....5..e......! 0060 d6 7c bd 57 00 1a 53 af 52 c2 62 36 88 1e 37 4f .|.W..S.R.b6..7O 0070 76 6a 2d 6f 6f 2f c4 7e e2 cc 9e a2 02 16 27 8d vj-oo/.~......'. 0080 cb e0 7a 80 31 7d 49 ac c3 49 6a a9 84 eb a0 1a ..z.1}I..Ij..... 0090 63 5e 8b 9c 43 87 30 4d d9 23 a6 76 5e 93 38 d9 c^..C.0M.#.v^.8. 00a0 25 d3 9b 54 50 83 4b e7 84 f4 0c 85 8b 8a 71 71 %..TP.K.......qq 00b0 84 da f9 06 82 9c f6 a6 87 c1 9b 45 49 28 26 6e ...........EI(&n 00c0 78 1f a9 13 f9 49 a9 e8 f8 99 5d 4d 7f 07 f9 f4 x....I....]M.... 00d0 85 db de 94 87 b5 fe fa 3a f4 66 53 71 27 e5 db ........:.fSq'.. 00e0 9c cb 93 a0 c7 6f 58 09 d6 8b 9d 29 28 ac 73 8d .....oX....)(.s. 00f0 71 9e 29 8a 46 5c e7 76 3c f4 f8 08 33 c7 3f 2d q.).F\.v<...3.?- 0100 13 2a 1e 0d 8b a4 ea 60 eb 53 83 cc 69 c4 c4 e6 .*.....`.S..i... 0110 50 00 97 07 fe c3 6d 10 c9 28 6a 1a fe 46 e5 5a P.....m..(j..F.Z 0120 76 52 be 3b 75 9e 19 6d 2a 4c 67 29 71 1b 90 56 vR.;u..m*Lg)q..V 0130 27 c3 6e d5 bf ff a0 59 7f 62 ec bb 88 ad 1e 65 '.n....Y.b.....e 0140 63 a2 61 52 3e 90 ec ed 6e e0 f2 f7 ef 2b c.aR>...n....+ Frame 9 (334 bytes on wire, 334 bytes captured) Arrival Time: Nov 25, 2006 16:35:47.304127000 Time delta from previous packet: 0.019600000 seconds Time since reference or first frame: 1.132530000 seconds Frame Number: 9 Packet Length: 334 bytes Capture Length: 334 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:18:4d:09:98:ab (00:18:4d:09:98:ab), Dst: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:18:4d:09:98:ab (00:18:4d:09:98:ab) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.105 (165.227.249.105), Dst: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 320 Identification: 0x0000 (0) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfaff [correct] Good: True Bad : False Source: 165.227.249.105 (165.227.249.105) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 300 Checksum: 0x4383 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xB8614C7ED169F15B Responder cookie: 0x4DBE5DDA2BD38D21 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0xEEABF074 Length: 292 Encrypted payload (264 bytes) 0000 00 0c 29 f4 af 90 00 18 4d 09 98 ab 08 00 45 00 ..).....M.....E. 0010 01 40 00 00 40 00 40 11 fa ff a5 e3 f9 69 a5 e3 .@..@.@......i.. 0020 f9 7c 01 f4 01 f4 01 2c 43 83 b8 61 4c 7e d1 69 .|.....,C..aL~.i 0030 f1 5b 4d be 5d da 2b d3 8d 21 08 10 20 01 ee ab .[M.].+..!.. ... 0040 f0 74 00 00 01 24 0e 39 00 b1 7e cf e5 f0 98 d2 .t...$.9..~..... 0050 71 b5 42 68 4e 8d 56 a2 5f 38 af eb 67 cb c3 a0 q.BhN.V._8..g... 0060 77 d4 31 db cd c7 2f 12 20 7b af 54 e5 f5 53 19 w.1.../. {.T..S. 0070 f6 12 5f d8 04 9e 45 87 b2 4b 7e 84 e0 d5 29 72 .._...E..K~...)r 0080 e1 b4 84 56 2f 42 7e d1 e7 1b 34 6f d5 0e 4a fc ...V/B~...4o..J. 0090 40 c8 84 79 d0 58 85 0e d3 cf 0c 52 80 97 24 8e @..y.X.....R..$. 00a0 ff e8 dd 81 20 02 15 b5 b4 c8 83 b7 fc c1 56 6f .... .........Vo 00b0 56 5d fe ed 98 87 4f 1b 29 8f fc 15 a1 e8 21 34 V]....O.).....!4 00c0 30 e4 02 ee 3a c5 fe bb 98 4a e7 60 d5 36 28 b6 0...:....J.`.6(. 00d0 54 5b 0a 09 a5 fc 09 9b 48 36 96 bf 72 eb b2 11 T[......H6..r... 00e0 42 f8 44 a8 6b 63 c8 66 d1 4d 45 9e e3 14 3e 14 B.D.kc.f.ME...>. 00f0 dd ae a8 71 b0 59 42 35 fe b0 f8 c9 9f 63 e5 0d ...q.YB5.....c.. 0100 c8 48 89 b8 45 5e 3f e9 5d 47 e1 9c 22 17 7f aa .H..E^?.]G.."... 0110 e8 6d eb 0a c8 c5 11 ea 7e 31 1a 32 ba 18 95 40 .m......~1.2...@ 0120 91 92 ea 1a 65 74 f8 4e ec 6d d8 d4 c2 0e ce 0a ....et.N.m...... 0130 71 42 5b c2 87 81 82 e8 98 dc c2 fa f9 a3 11 2c qB[............, 0140 2b 29 4e 5e a8 92 b1 cd 33 c6 bc d4 ff ac +)N^....3..... Frame 10 (94 bytes on wire, 94 bytes captured) Arrival Time: Nov 25, 2006 16:35:47.304129000 Time delta from previous packet: 0.000002000 seconds Time since reference or first frame: 1.132532000 seconds Frame Number: 10 Packet Length: 94 bytes Capture Length: 94 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90), Dst: 00:18:4d:09:98:ab (00:18:4d:09:98:ab) Destination: 00:18:4d:09:98:ab (00:18:4d:09:98:ab) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.105 (165.227.249.105) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 80 Identification: 0x0100 (256) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3af0 [correct] Good: True Bad : False Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.105 (165.227.249.105) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 60 Checksum: 0xf4b0 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xB8614C7ED169F15B Responder cookie: 0x4DBE5DDA2BD38D21 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0xEEABF074 Length: 52 Encrypted payload (24 bytes) 0000 00 18 4d 09 98 ab 00 0c 29 f4 af 90 08 00 45 00 ..M.....).....E. 0010 00 50 01 00 00 00 40 11 3a f0 a5 e3 f9 7c a5 e3 .P....@.:....|.. 0020 f9 69 01 f4 01 f4 00 3c f4 b0 b8 61 4c 7e d1 69 .i.....<...aL~.i 0030 f1 5b 4d be 5d da 2b d3 8d 21 08 10 20 01 ee ab .[M.].+..!.. ... 0040 f0 74 00 00 00 34 2e a0 48 21 aa 3b a6 b7 38 7d .t...4..H!.;..8} 0050 dd d8 dc e0 29 af 56 03 b2 ef d6 ad d0 5a ....).V......Z Frame 11 (126 bytes on wire, 126 bytes captured) Arrival Time: Nov 25, 2006 16:35:47.559546000 Time delta from previous packet: 0.255417000 seconds Time since reference or first frame: 1.387949000 seconds Frame Number: 11 Packet Length: 126 bytes Capture Length: 126 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90), Dst: 00:18:4d:09:98:ab (00:18:4d:09:98:ab) Destination: 00:18:4d:09:98:ab (00:18:4d:09:98:ab) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.105 (165.227.249.105) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0025 (37) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b89 [correct] Good: True Bad : False Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.105 (165.227.249.105) Encapsulating Security Payload SPI: 0xd6f4d458 Sequence: 2 Data (84 bytes) 0000 00 18 4d 09 98 ab 00 0c 29 f4 af 90 08 00 45 00 ..M.....).....E. 0010 00 70 00 25 00 00 f0 32 8b 89 a5 e3 f9 7c a5 e3 .p.%...2.....|.. 0020 f9 69 d6 f4 d4 58 00 00 00 02 f1 dc 86 a0 2f 75 .i...X......../u 0030 04 e5 dd 86 7a ed 8e 50 6b 7c 32 50 f9 2b da 7d ....z..Pk|2P.+.} 0040 a0 6f 36 a8 be 2d bf 87 ad 59 5f 74 8d 29 c5 6b .o6..-...Y_t.).k 0050 29 1e a0 98 9b 52 0a bb 97 42 a1 1f 42 10 69 68 )....R...B..B.ih 0060 e5 ea 84 cd 4c 9e ec 2a b5 33 60 4e 08 fb fb 91 ....L..*.3`N.... 0070 e1 db 6d 96 35 b6 0c db 2b 15 73 fa 49 c0 ..m.5...+.s.I. Frame 12 (334 bytes on wire, 334 bytes captured) Arrival Time: Nov 25, 2006 16:35:48.316948000 Time delta from previous packet: 0.757402000 seconds Time since reference or first frame: 2.145351000 seconds Frame Number: 12 Packet Length: 334 bytes Capture Length: 334 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:18:4d:09:98:ab (00:18:4d:09:98:ab), Dst: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:18:4d:09:98:ab (00:18:4d:09:98:ab) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.105 (165.227.249.105), Dst: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 320 Identification: 0x0000 (0) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfaff [correct] Good: True Bad : False Source: 165.227.249.105 (165.227.249.105) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 300 Checksum: 0xc808 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xB8614C7ED169F15B Responder cookie: 0x4DBE5DDA2BD38D21 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x9A0A1462 Length: 292 Encrypted payload (264 bytes) 0000 00 0c 29 f4 af 90 00 18 4d 09 98 ab 08 00 45 00 ..).....M.....E. 0010 01 40 00 00 40 00 40 11 fa ff a5 e3 f9 69 a5 e3 .@..@.@......i.. 0020 f9 7c 01 f4 01 f4 01 2c c8 08 b8 61 4c 7e d1 69 .|.....,...aL~.i 0030 f1 5b 4d be 5d da 2b d3 8d 21 08 10 20 01 9a 0a .[M.].+..!.. ... 0040 14 62 00 00 01 24 f3 3a 0d ba ed d5 7a d0 a2 5d .b...$.:....z..] 0050 61 d7 41 ca 0f e9 9e 42 7a 96 90 2f 12 a6 90 19 a.A....Bz../.... 0060 f4 9f b2 99 35 3e 04 56 1f 17 51 60 99 d9 f2 48 ....5>.V..Q`...H 0070 d7 26 b7 f3 ac 8a 0f 4f e4 18 5f 7e 0d d2 7c 4b .&.....O.._~..|K 0080 d7 15 1e c6 5b 4e c4 ea ef 0a 7d 81 9d 4d ee eb ....[N....}..M.. 0090 a2 68 7a df f3 b0 94 c1 79 ce 05 b3 2d ad f0 02 .hz.....y...-... 00a0 70 e5 d1 44 2b 90 86 53 00 2c 4e f0 bc 69 19 2e p..D+..S.,N..i.. 00b0 11 ac 86 f9 4f 83 a4 a2 77 04 08 7d dc c2 14 9d ....O...w..}.... 00c0 22 5e 9b e7 32 14 46 63 36 ad 52 97 48 74 87 6d "^..2.Fc6.R.Ht.m 00d0 03 f3 4c 6b 85 3d 37 5f f9 88 ad 5b fe 08 39 f0 ..Lk.=7_...[..9. 00e0 2f ca 24 2e e5 ab 78 fb 57 6c 05 16 31 16 87 fe /.$...x.Wl..1... 00f0 b1 d4 6d 59 16 88 52 23 2c 39 e5 87 e4 74 f3 c9 ..mY..R#,9...t.. 0100 1f 06 22 f6 75 8f 0c 4a 6f 27 c1 4d de 9f 8f f1 ..".u..Jo'.M.... 0110 ac 2c f8 14 b8 7f 78 c0 04 19 d9 ef cf 5a 20 21 .,....x......Z ! 0120 c7 cb 1e f4 59 5f c7 c6 56 65 35 1e d0 b2 40 2b ....Y_..Ve5...@+ 0130 56 37 ac 44 69 04 de 0f 61 20 81 30 99 45 1b c5 V7.Di...a .0.E.. 0140 52 df 63 cf 50 31 4e 9c 21 5b 40 e9 8c eb R.c.P1N.![@... Frame 13 (358 bytes on wire, 358 bytes captured) Arrival Time: Nov 25, 2006 16:35:48.316950000 Time delta from previous packet: 0.000002000 seconds Time since reference or first frame: 2.145353000 seconds Frame Number: 13 Packet Length: 358 bytes Capture Length: 358 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90), Dst: 00:18:4d:09:98:ab (00:18:4d:09:98:ab) Destination: 00:18:4d:09:98:ab (00:18:4d:09:98:ab) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.105 (165.227.249.105) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 344 Identification: 0x0101 (257) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x39e7 [correct] Good: True Bad : False Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.105 (165.227.249.105) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 324 Checksum: 0xdfaf [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xB8614C7ED169F15B Responder cookie: 0x4DBE5DDA2BD38D21 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x9A0A1462 Length: 316 Encrypted payload (288 bytes) 0000 00 18 4d 09 98 ab 00 0c 29 f4 af 90 08 00 45 00 ..M.....).....E. 0010 01 58 01 01 00 00 40 11 39 e7 a5 e3 f9 7c a5 e3 .X....@.9....|.. 0020 f9 69 01 f4 01 f4 01 44 df af b8 61 4c 7e d1 69 .i.....D...aL~.i 0030 f1 5b 4d be 5d da 2b d3 8d 21 08 10 20 01 9a 0a .[M.].+..!.. ... 0040 14 62 00 00 01 3c 62 b1 0d 33 51 cb 4e 50 07 5e .b.......KsGN. Frame 17 (126 bytes on wire, 126 bytes captured) Arrival Time: Nov 25, 2006 16:35:52.116187000 Time delta from previous packet: 0.878268000 seconds Time since reference or first frame: 5.944590000 seconds Frame Number: 17 Packet Length: 126 bytes Capture Length: 126 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90), Dst: 00:18:4d:09:98:ab (00:18:4d:09:98:ab) Destination: 00:18:4d:09:98:ab (00:18:4d:09:98:ab) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.105 (165.227.249.105) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0027 (39) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b87 [correct] Good: True Bad : False Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.105 (165.227.249.105) Encapsulating Security Payload SPI: 0xd6f4d459 Sequence: 3 Data (84 bytes) 0000 00 18 4d 09 98 ab 00 0c 29 f4 af 90 08 00 45 00 ..M.....).....E. 0010 00 70 00 27 00 00 f0 32 8b 87 a5 e3 f9 7c a5 e3 .p.'...2.....|.. 0020 f9 69 d6 f4 d4 59 00 00 00 03 e9 02 e0 3a 4c 35 .i...Y.......:L5 0030 c7 16 72 ef 06 02 2d 5b ca d3 12 e5 15 dc d7 d9 ..r...-[........ 0040 43 45 ce 52 7c e1 81 3f fb 6b 9d a1 b5 ae c8 c5 CE.R|..?.k...... 0050 d1 e1 e6 db f6 18 ef 52 54 58 67 ef 82 56 90 ac .......RTXg..V.. 0060 3d d2 97 8b f7 c1 d9 25 16 5e 5a 73 57 25 f6 0b =......%.^ZsW%.. 0070 5b 89 6a 09 7e 99 29 7b e5 d9 ed 17 a8 7e [.j.~.){.....~ Frame 18 (126 bytes on wire, 126 bytes captured) Arrival Time: Nov 25, 2006 16:35:52.243426000 Time delta from previous packet: 0.127239000 seconds Time since reference or first frame: 6.071829000 seconds Frame Number: 18 Packet Length: 126 bytes Capture Length: 126 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:18:4d:09:98:ab (00:18:4d:09:98:ab), Dst: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:18:4d:09:98:ab (00:18:4d:09:98:ab) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.105 (165.227.249.105), Dst: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x8b95 (35733) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0xb019 [correct] Good: True Bad : False Source: 165.227.249.105 (165.227.249.105) Destination: 165.227.249.124 (165.227.249.124) Encapsulating Security Payload SPI: 0x664bf36a Sequence: 2 Data (84 bytes) 0000 00 0c 29 f4 af 90 00 18 4d 09 98 ab 08 00 45 00 ..).....M.....E. 0010 00 70 8b 95 00 00 40 32 b0 19 a5 e3 f9 69 a5 e3 .p....@2.....i.. 0020 f9 7c 66 4b f3 6a 00 00 00 02 8e 82 86 63 5c 1a .|fK.j.......c\. 0030 b0 49 ef 66 88 d7 00 98 a4 f3 a6 62 15 4e 4a 0f .I.f.......b.NJ. 0040 e6 8b 05 4f 35 77 7b ea 45 90 bd 08 c7 96 e4 f5 ...O5w{.E....... 0050 1b 75 db ee 64 1e 54 b2 0f a1 af 30 47 f9 47 15 .u..d.T....0G.G. 0060 7a ce c7 bd 02 c6 93 71 3a 2b 92 f0 fb 65 1c a4 z......q:+...e.. 0070 6c 66 2e b7 7f 80 64 c5 7c f7 51 07 17 80 lf....d.|.Q... Frame 19 (126 bytes on wire, 126 bytes captured) Arrival Time: Nov 25, 2006 16:35:53.119720000 Time delta from previous packet: 0.876294000 seconds Time since reference or first frame: 6.948123000 seconds Frame Number: 19 Packet Length: 126 bytes Capture Length: 126 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90), Dst: 00:18:4d:09:98:ab (00:18:4d:09:98:ab) Destination: 00:18:4d:09:98:ab (00:18:4d:09:98:ab) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.105 (165.227.249.105) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0028 (40) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b86 [correct] Good: True Bad : False Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.105 (165.227.249.105) Encapsulating Security Payload SPI: 0xd6f4d459 Sequence: 4 Data (84 bytes) 0000 00 18 4d 09 98 ab 00 0c 29 f4 af 90 08 00 45 00 ..M.....).....E. 0010 00 70 00 28 00 00 f0 32 8b 86 a5 e3 f9 7c a5 e3 .p.(...2.....|.. 0020 f9 69 d6 f4 d4 59 00 00 00 04 46 9b 92 ed a0 aa .i...Y....F..... 0030 60 29 7e 74 85 1a 8e fb 7a 38 bf 7c 76 bd a7 be `)~t....z8.|v... 0040 5d 74 78 8e c1 39 f4 d6 ea 4d 53 82 80 b3 be cd ]tx..9...MS..... 0050 4d 4f db 1a c0 01 61 62 a3 ca 3d d2 35 bf d2 45 MO....ab..=.5..E 0060 8e 8c 94 f6 ee 97 ca 7a 5f 8f bb 0a 6f 4b 1b 8a .......z_...oK.. 0070 45 2c 1a 9f 52 b2 7f 92 54 f1 46 37 18 14 E,..R...T.F7.. Frame 20 (126 bytes on wire, 126 bytes captured) Arrival Time: Nov 25, 2006 16:35:53.228994000 Time delta from previous packet: 0.109274000 seconds Time since reference or first frame: 7.057397000 seconds Frame Number: 20 Packet Length: 126 bytes Capture Length: 126 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:18:4d:09:98:ab (00:18:4d:09:98:ab), Dst: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:18:4d:09:98:ab (00:18:4d:09:98:ab) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.105 (165.227.249.105), Dst: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x8b96 (35734) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0xb018 [correct] Good: True Bad : False Source: 165.227.249.105 (165.227.249.105) Destination: 165.227.249.124 (165.227.249.124) Encapsulating Security Payload SPI: 0x664bf36a Sequence: 3 Data (84 bytes) 0000 00 0c 29 f4 af 90 00 18 4d 09 98 ab 08 00 45 00 ..).....M.....E. 0010 00 70 8b 96 00 00 40 32 b0 18 a5 e3 f9 69 a5 e3 .p....@2.....i.. 0020 f9 7c 66 4b f3 6a 00 00 00 03 92 f0 fb 65 1c a4 .|fK.j.......e.. 0030 6c 66 0e c1 d2 05 5d b7 e5 6d 16 bb 5b 07 2c e7 lf....]..m..[.,. 0040 2c 6e e3 ef 9d 72 f8 0a 8d 4a 3b de 6e c6 36 5e ,n...r...J;.n.6^ 0050 56 db 1a 98 2c bb 9a 0b a4 84 c8 06 a2 80 ce 89 V...,........... 0060 86 77 a9 1a 4e f7 36 f7 b9 59 c3 5b 6b af 2b 62 .w..N.6..Y.[k.+b 0070 f5 4c 59 2a 56 83 19 99 05 d4 fc d4 43 dc .LY*V.......C.