Frame 1 (266 bytes on wire, 266 bytes captured) Arrival Time: May 16, 2005 17:21:27.814417000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 266 bytes Capture Length: 266 bytes Ethernet II, Src: 00:0c:29:f4:af:90, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Frame check sequence: 0xcec298de (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 248 Identification: 0x0007 (7) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3b40 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.106 (165.227.249.106) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 228 Checksum: 0xbe2a (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x081BAC0572B5651B Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 220 Security Association payload Next payload: Vendor ID (13) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 0 Next payload: NONE (0) Length: 40 Proposal number: 0 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 0 Next payload: NONE (0) Length: 32 Transform number: 0 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: unknown vendor ID: 0x8F9CC94E01248ECDF147594C284B213B Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-stenberg-ipsec-nat-traversal-01 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-stenberg-ipsec-nat-traversal-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-03 0000 00 a0 8e 72 1e 40 00 0c 29 f4 af 90 08 00 45 00 ...r.@..).....E. 0010 00 f8 00 07 00 00 40 11 3b 40 a5 e3 f9 7c a5 e3 ......@.;@...|.. 0020 f9 6a 01 f4 01 f4 00 e4 be 2a 08 1b ac 05 72 b5 .j.......*....r. 0030 65 1b 00 00 00 00 00 00 00 00 01 10 02 00 00 00 e............... 0040 00 00 00 00 00 dc 0d 00 00 34 00 00 00 01 00 00 .........4...... 0050 00 01 00 00 00 28 00 01 00 01 00 00 00 20 00 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 03 00 01 80 04 ................ 0070 00 02 80 0b 00 01 80 0c 70 80 0d 00 00 14 8f 9c ........p....... 0080 c9 4e 01 24 8e cd f1 47 59 4c 28 4b 21 3b 0d 00 .N.$...GYL(K!;.. 0090 00 14 27 ba b5 dc 01 ea 07 60 ea 4e 31 90 ac 27 ..'......`.N1..' 00a0 c0 d0 0d 00 00 14 61 05 c4 22 e7 68 47 e4 3f 96 ......a..".hG.?. 00b0 84 80 12 92 ae cd 0d 00 00 14 44 85 15 2d 18 b6 ..........D..-.. 00c0 bb cd 0b e8 a8 46 95 79 dd cc 0d 00 00 14 cd 60 .....F.y.......` 00d0 46 43 35 df 21 f8 7c fd b2 fc 68 b6 a4 48 0d 00 FC5.!.|...h..H.. 00e0 00 14 90 cb 80 91 3e bb 69 6e 08 63 81 b5 ec 42 ......>.in.c...B 00f0 7b 1f 00 00 00 14 7d 94 19 a6 53 10 ca 6f 2c 17 {.....}...S..o,. 0100 9d 92 15 52 9d 56 ce c2 98 de ...R.V.... Frame 2 (146 bytes on wire, 146 bytes captured) Arrival Time: May 16, 2005 17:21:27.939377000 Time delta from previous packet: 0.124960000 seconds Time since reference or first frame: 0.124960000 seconds Frame Number: 2 Packet Length: 146 bytes Capture Length: 146 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:0c:29:f4:af:90 Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0x8eccbf79 (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 128 Identification: 0xfa59 (64089) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x4165 (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 108 Checksum: 0x5bb7 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x081BAC0572B5651B Responder cookie: 0x969B5C15CD2B6034 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 100 Security Association payload Next payload: Vendor ID (13) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 40 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 32 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-03 0000 00 0c 29 f4 af 90 00 a0 8e 72 1e 40 08 00 45 00 ..)......r.@..E. 0010 00 80 fa 59 00 00 40 11 41 65 a5 e3 f9 6a a5 e3 ...Y..@.Ae...j.. 0020 f9 7c 01 f4 01 f4 00 6c 5b b7 08 1b ac 05 72 b5 .|.....l[.....r. 0030 65 1b 96 9b 5c 15 cd 2b 60 34 01 10 02 00 00 00 e...\..+`4...... 0040 00 00 00 00 00 64 0d 00 00 34 00 00 00 01 00 00 .....d...4...... 0050 00 01 00 00 00 28 01 01 00 01 00 00 00 20 01 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 03 00 01 80 04 ................ 0070 00 02 80 0b 00 01 80 0c 70 80 00 00 00 14 7d 94 ........p.....}. 0080 19 a6 53 10 ca 6f 2c 17 9d 92 15 52 9d 56 8e cc ..S..o,....R.V.. 0090 bf 79 .y Frame 3 (274 bytes on wire, 274 bytes captured) Arrival Time: May 16, 2005 17:21:27.990301000 Time delta from previous packet: 0.050924000 seconds Time since reference or first frame: 0.175884000 seconds Frame Number: 3 Packet Length: 274 bytes Capture Length: 274 bytes Ethernet II, Src: 00:0c:29:f4:af:90, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Frame check sequence: 0x0bb5208b (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 256 Identification: 0x0008 (8) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3b37 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.106 (165.227.249.106) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 236 Checksum: 0x46c1 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x081BAC0572B5651B Responder cookie: 0x969B5C15CD2B6034 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 228 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: Private USE (130) Length: 20 Nonce Data Unknown payload type payload Next payload: Private USE (130) Length: 24 Payload Unknown payload type payload Next payload: NONE (0) Length: 24 Payload 0000 00 a0 8e 72 1e 40 00 0c 29 f4 af 90 08 00 45 00 ...r.@..).....E. 0010 01 00 00 08 00 00 40 11 3b 37 a5 e3 f9 7c a5 e3 ......@.;7...|.. 0020 f9 6a 01 f4 01 f4 00 ec 46 c1 08 1b ac 05 72 b5 .j......F.....r. 0030 65 1b 96 9b 5c 15 cd 2b 60 34 04 10 02 00 00 00 e...\..+`4...... 0040 00 00 00 00 00 e4 0a 00 00 84 7f 28 48 3f 74 2a ...........(H?t* 0050 5e 6e 9f 19 8e c9 b5 69 ae 84 f4 1a ab 50 00 db ^n.....i.....P.. 0060 ed 99 6b 5f 49 b5 9e 8b fc c1 16 d6 8a b9 c2 db ..k_I........... 0070 f8 51 58 bb 70 b7 86 93 82 57 75 a3 01 84 4a d3 .QX.p....Wu...J. 0080 4c 03 2d b9 d6 be 37 96 5e 1a 54 57 75 95 6b b0 L.-...7.^.TWu.k. 0090 de fb 44 44 82 ed 48 b5 62 d2 37 cc 44 ad 01 1e ..DD..H.b.7.D... 00a0 a6 2e 99 76 4b da 0d d6 2c 83 0c 82 26 72 97 43 ...vK...,...&r.C 00b0 9a 44 d8 ed ad 42 86 a4 1f 6b 98 a9 62 00 6c 5a .D...B...k..b.lZ 00c0 bc 26 d8 0e 13 91 b9 56 1c 26 82 00 00 14 6d 65 .&.....V.&....me 00d0 6f fa 5c cc 0d c9 69 4a 8b a5 e2 e0 8e 04 82 00 o.\...iJ........ 00e0 00 18 40 36 21 a7 9e 5f 80 14 39 a1 a1 00 13 03 ..@6!.._..9..... 00f0 5d 99 9e 7b 6a 6e 00 00 00 18 55 fb 69 da 78 82 ]..{jn....U.i.x. 0100 a6 ed a9 1c 09 ac 69 bc 2f 7a 72 0a 72 4c 0b b5 ......i./zr.rL.. 0110 20 8b . Frame 4 (310 bytes on wire, 310 bytes captured) Arrival Time: May 16, 2005 17:21:28.145335000 Time delta from previous packet: 0.155034000 seconds Time since reference or first frame: 0.330918000 seconds Frame Number: 4 Packet Length: 310 bytes Capture Length: 310 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:0c:29:f4:af:90 Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0xbaf7b314 (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 292 Identification: 0xfa5a (64090) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x40c0 (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 272 Checksum: 0x043d (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x081BAC0572B5651B Responder cookie: 0x969B5C15CD2B6034 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 264 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: Vendor ID (13) Length: 24 Nonce Data Vendor ID payload Next payload: Private USE (130) Length: 32 Vendor ID: unknown vendor ID: 0x030000140E265816E31C7CB9CCFAF469... Unknown payload type payload Next payload: Private USE (130) Length: 24 Payload Unknown payload type payload Next payload: NONE (0) Length: 24 Payload 0000 00 0c 29 f4 af 90 00 a0 8e 72 1e 40 08 00 45 00 ..)......r.@..E. 0010 01 24 fa 5a 00 00 40 11 40 c0 a5 e3 f9 6a a5 e3 .$.Z..@.@....j.. 0020 f9 7c 01 f4 01 f4 01 10 04 3d 08 1b ac 05 72 b5 .|.......=....r. 0030 65 1b 96 9b 5c 15 cd 2b 60 34 04 10 02 00 00 00 e...\..+`4...... 0040 00 00 00 00 01 08 0a 00 00 84 cc c3 70 83 4b 72 ............p.Kr 0050 a7 b4 f5 75 79 c4 4f 4d 61 39 b4 cd ea e2 f6 eb ...uy.OMa9...... 0060 e2 64 97 07 66 94 85 f7 d7 18 a8 70 a3 0f 16 31 .d..f......p...1 0070 fa a6 72 f1 02 1c a7 20 9b bb 6c f7 13 fc 99 e5 ..r.... ..l..... 0080 d5 39 fc 49 cb bc b7 59 0f 0f ca e5 0c 39 31 31 .9.I...Y.....911 0090 44 a7 d1 b4 9a 2c 59 1a 78 62 d8 81 18 ba 01 a7 D....,Y.xb...... 00a0 1e c2 12 53 ae 6e ce 56 1f f5 d9 bc cf d3 73 54 ...S.n.V......sT 00b0 d7 3b 0e b7 40 a0 ad f4 db ed 2f 32 68 b2 47 5b .;..@...../2h.G[ 00c0 ae da 60 1c ff 58 e1 a6 43 9b 0d 00 00 18 97 a6 ..`..X..C....... 00d0 ba f9 98 67 4d 7a 63 0a fb e8 63 0b df 7a 54 6b ...gMzc...c..zTk 00e0 a1 3e 82 00 00 20 03 00 00 14 0e 26 58 16 e3 1c .>... .....&X... 00f0 7c b9 cc fa f4 69 88 29 3f 9b 00 00 00 08 00 06 |....i.)?....... 0100 00 02 82 00 00 18 55 fb 69 da 78 82 a6 ed a9 1c ......U.i.x..... 0110 09 ac 69 bc 2f 7a 72 0a 72 4c 00 00 00 18 40 36 ..i./zr.rL....@6 0120 21 a7 9e 5f 80 14 39 a1 a1 00 13 03 5d 99 9e 7b !.._..9.....]..{ 0130 6a 6e ba f7 b3 14 jn.... Frame 5 (122 bytes on wire, 122 bytes captured) Arrival Time: May 16, 2005 17:21:28.170242000 Time delta from previous packet: 0.024907000 seconds Time since reference or first frame: 0.355825000 seconds Frame Number: 5 Packet Length: 122 bytes Capture Length: 122 bytes Ethernet II, Src: 00:0c:29:f4:af:90, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Frame check sequence: 0xd5fef316 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 104 Identification: 0x0009 (9) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3bce (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.106 (165.227.249.106) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 84 Checksum: 0xe116 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x081BAC0572B5651B Responder cookie: 0x969B5C15CD2B6034 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 76 Encrypted payload (48 bytes) 0000 00 a0 8e 72 1e 40 00 0c 29 f4 af 90 08 00 45 00 ...r.@..).....E. 0010 00 68 00 09 00 00 40 11 3b ce a5 e3 f9 7c a5 e3 .h....@.;....|.. 0020 f9 6a 01 f4 01 f4 00 54 e1 16 08 1b ac 05 72 b5 .j.....T......r. 0030 65 1b 96 9b 5c 15 cd 2b 60 34 05 10 02 01 00 00 e...\..+`4...... 0040 00 00 00 00 00 4c 60 39 7f 54 34 4a be 07 81 b5 .....L`9.T4J.... 0050 16 05 3e 97 0c ea d3 fe c7 da b2 aa d1 ec ab 63 ..>............c 0060 83 da 07 1d b4 50 d1 d1 55 74 cd f9 a3 c9 90 a2 .....P..Ut...... 0070 66 a3 e2 4a f5 65 d5 fe f3 16 f..J.e.... Frame 6 (138 bytes on wire, 138 bytes captured) Arrival Time: May 16, 2005 17:21:28.174703000 Time delta from previous packet: 0.004461000 seconds Time since reference or first frame: 0.360286000 seconds Frame Number: 6 Packet Length: 138 bytes Capture Length: 138 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:0c:29:f4:af:90 Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0x95da91ac (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0xfa5b (64091) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x416b (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 100 Checksum: 0x2659 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x081BAC0572B5651B Responder cookie: 0x969B5C15CD2B6034 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 92 Encrypted payload (64 bytes) 0000 00 0c 29 f4 af 90 00 a0 8e 72 1e 40 08 00 45 00 ..)......r.@..E. 0010 00 78 fa 5b 00 00 40 11 41 6b a5 e3 f9 6a a5 e3 .x.[..@.Ak...j.. 0020 f9 7c 01 f4 01 f4 00 64 26 59 08 1b ac 05 72 b5 .|.....d&Y....r. 0030 65 1b 96 9b 5c 15 cd 2b 60 34 05 10 02 01 00 00 e...\..+`4...... 0040 00 00 00 00 00 5c 99 7a 82 4b c6 ed 0a 8c c9 8a .....\.z.K...... 0050 2a 48 67 b8 4a 3f e4 eb 0a 9a 17 35 4e 06 05 01 *Hg.J?.....5N... 0060 2f 69 2f ab 7c 25 b0 a4 cb 9b d6 48 16 c7 3a 61 /i/.|%.....H..:a 0070 55 01 f3 a8 d7 55 c3 bf 4c 11 27 5f 3d 9f 49 6e U....U..L.'_=.In 0080 ee da 15 b7 94 3e 95 da 91 ac .....>.... Frame 7 (338 bytes on wire, 338 bytes captured) Arrival Time: May 16, 2005 17:21:28.184443000 Time delta from previous packet: 0.009740000 seconds Time since reference or first frame: 0.370026000 seconds Frame Number: 7 Packet Length: 338 bytes Capture Length: 338 bytes Ethernet II, Src: 00:0c:29:f4:af:90, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Frame check sequence: 0xd08206d0 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 320 Identification: 0x000a (10) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3af5 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.106 (165.227.249.106) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 300 Checksum: 0xd8ff (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x081BAC0572B5651B Responder cookie: 0x969B5C15CD2B6034 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xAE3372B5 Length: 292 Encrypted payload (264 bytes) 0000 00 a0 8e 72 1e 40 00 0c 29 f4 af 90 08 00 45 00 ...r.@..).....E. 0010 01 40 00 0a 00 00 40 11 3a f5 a5 e3 f9 7c a5 e3 .@....@.:....|.. 0020 f9 6a 01 f4 01 f4 01 2c d8 ff 08 1b ac 05 72 b5 .j.....,......r. 0030 65 1b 96 9b 5c 15 cd 2b 60 34 08 10 20 01 ae 33 e...\..+`4.. ..3 0040 72 b5 00 00 01 24 a6 c1 1f 1b af 73 38 c2 6e b7 r....$.....s8.n. 0050 ca f3 06 b4 29 24 41 9d 68 97 5b fb 7a d5 40 18 ....)$A.h.[.z.@. 0060 b3 3d fa 49 2b 34 68 ba a4 be 8b 5a c5 f0 60 c2 .=.I+4h....Z..`. 0070 69 8f 16 d4 19 2a 11 20 28 c5 07 b5 c7 a7 d0 62 i....*. (......b 0080 69 5b 23 70 00 5f a3 7b 81 40 bf db e6 12 1c 55 i[#p._.{.@.....U 0090 df 38 b8 67 88 6a 06 7b 4f ef f3 a3 ed ce e0 de .8.g.j.{O....... 00a0 70 e8 f1 34 64 41 b4 3d 54 d1 9d 50 dc 2a 2f b7 p..4dA.=T..P.*/. 00b0 e9 3e 32 5f 30 72 ef 71 08 a7 77 6c 5a 36 1a a4 .>2_0r.q..wlZ6.. 00c0 f1 cd 46 41 30 9c 3a 47 90 db 88 9d 07 5d b5 0a ..FA0.:G.....].. 00d0 aa ac e5 94 d1 e4 9a bb af ae b6 0d 39 96 fb 8f ............9... 00e0 d8 dc 6f 57 b5 d9 c3 f5 a4 a5 c4 6c a2 38 92 0a ..oW.......l.8.. 00f0 5b ae 9b a9 de 24 e8 18 28 fe e8 36 81 ed f5 84 [....$..(..6.... 0100 83 28 0c 0e ab 7d 71 2b b1 ba 47 68 88 29 23 b9 .(...}q+..Gh.)#. 0110 20 e2 10 20 f8 c0 83 26 11 09 42 48 4b 1f 6e bb .. ...&..BHK.n. 0120 38 26 bd c1 db 0d 9f 5f e4 20 dc 0a 7f e9 1d 20 8&....._. ..... 0130 6d b3 ed ab 15 2c 46 e7 a3 64 89 f2 12 2f e9 41 m....,F..d.../.A 0140 4e 06 17 02 e8 b7 9d 6b c5 b3 51 f4 3f f0 d0 82 N......k..Q.?... 0150 06 d0 .. Frame 8 (338 bytes on wire, 338 bytes captured) Arrival Time: May 16, 2005 17:21:28.464107000 Time delta from previous packet: 0.279664000 seconds Time since reference or first frame: 0.649690000 seconds Frame Number: 8 Packet Length: 338 bytes Capture Length: 338 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:0c:29:f4:af:90 Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0xf9ef57a1 (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 320 Identification: 0xfa5c (64092) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x40a2 (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 300 Checksum: 0xb014 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x081BAC0572B5651B Responder cookie: 0x969B5C15CD2B6034 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xAE3372B5 Length: 292 Encrypted payload (264 bytes) 0000 00 0c 29 f4 af 90 00 a0 8e 72 1e 40 08 00 45 00 ..)......r.@..E. 0010 01 40 fa 5c 00 00 40 11 40 a2 a5 e3 f9 6a a5 e3 .@.\..@.@....j.. 0020 f9 7c 01 f4 01 f4 01 2c b0 14 08 1b ac 05 72 b5 .|.....,......r. 0030 65 1b 96 9b 5c 15 cd 2b 60 34 08 10 20 01 ae 33 e...\..+`4.. ..3 0040 72 b5 00 00 01 24 a4 1a dd c3 e3 92 ec 6d 44 41 r....$.......mDA 0050 90 36 c3 20 74 b2 7e 34 ae db 0d 18 1f 9d fe fb .6. t.~4........ 0060 86 1e fb 56 bd 10 20 1e e3 92 02 65 45 80 4b 62 ...V.. ....eE.Kb 0070 ce a3 ff e5 4e 2d 33 97 44 fd a9 56 5c 4c 76 c8 ....N-3.D..V\Lv. 0080 c8 1b ed aa 88 6a 6f a2 fc 07 54 f1 15 8a 83 0e .....jo...T..... 0090 19 b9 0c 10 95 06 6c be 21 b3 4c e6 9d d2 18 60 ......l.!.L....` 00a0 ce 4c db dc ae 70 9a 9a 12 33 fd b3 cd 7e df 98 .L...p...3...~.. 00b0 46 39 a2 ab 03 2e f1 dd 9f 60 aa d3 31 7e b4 1a F9.......`..1~.. 00c0 28 fb 1b bd 08 d7 53 01 0f 1a 00 26 c4 53 ae 8a (.....S....&.S.. 00d0 0b 40 3a e5 ec 29 37 1d 33 a1 e2 c4 c4 8b 59 0e .@:..)7.3.....Y. 00e0 dd c1 d9 d5 6d 9f e1 a0 97 f4 da 77 fd 97 a3 44 ....m......w...D 00f0 ea 5c b5 91 14 d6 4b f2 67 e5 4a 98 e9 da 65 82 .\....K.g.J...e. 0100 04 4b ae a7 2e 56 81 d2 5b 20 49 4a 4e 7c 83 c2 .K...V..[ IJN|.. 0110 f2 dd 16 61 2c eb 31 29 18 20 43 bc 20 fe a5 8c ...a,.1). C. ... 0120 5c 23 df 46 9d c5 1e fa 25 1f 19 10 26 f5 10 75 \#.F....%...&..u 0130 17 28 37 1f 70 59 a1 9e 53 8c fe 70 3b 88 8e a1 .(7.pY..S..p;... 0140 97 f0 8e 42 53 28 ba 82 ec 2b 5c 96 2d de f9 ef ...BS(...+\.-... 0150 57 a1 W. Frame 9 (98 bytes on wire, 98 bytes captured) Arrival Time: May 16, 2005 17:21:28.473462000 Time delta from previous packet: 0.009355000 seconds Time since reference or first frame: 0.659045000 seconds Frame Number: 9 Packet Length: 98 bytes Capture Length: 98 bytes Ethernet II, Src: 00:0c:29:f4:af:90, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Frame check sequence: 0xa74857e1 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 80 Identification: 0x000b (11) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3be4 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.106 (165.227.249.106) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 60 Checksum: 0x53c9 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x081BAC0572B5651B Responder cookie: 0x969B5C15CD2B6034 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xAE3372B5 Length: 52 Encrypted payload (24 bytes) 0000 00 a0 8e 72 1e 40 00 0c 29 f4 af 90 08 00 45 00 ...r.@..).....E. 0010 00 50 00 0b 00 00 40 11 3b e4 a5 e3 f9 7c a5 e3 .P....@.;....|.. 0020 f9 6a 01 f4 01 f4 00 3c 53 c9 08 1b ac 05 72 b5 .j.....J...... 0050 a0 a4 1b ca 7c ed 1c 6a 64 c0 82 da f9 73 ab b1 ....|..jd....s.. 0060 18 79 2d 75 88 71 f0 b8 e7 5c f4 47 ea 0e 94 02 .y-u.q...\.G.... 0070 be 4e 0c 56 65 e2 85 ec 3c 3e e8 87 09 3e d3 ca .N.Ve...<>...>.. 0080 90 4e 85 e5 db 7f b5 00 d1 e5 8f 0a 00 9b 71 4a .N............qJ 0090 a2 c6 2d 02 a1 1a d6 b0 4b 96 ..-.....K. Frame 11 (154 bytes on wire, 154 bytes captured) Arrival Time: May 16, 2005 17:21:28.788002000 Time delta from previous packet: 0.002129000 seconds Time since reference or first frame: 0.973585000 seconds Frame Number: 11 Packet Length: 154 bytes Capture Length: 154 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:0c:29:f4:af:90 Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0x0ad380f5 (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 136 Identification: 0xfa5d (64093) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x4138 (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.124 (165.227.249.124) Encapsulating Security Payload SPI: 0xeb245625 Sequence: 1 Data (108 bytes) 0000 00 0c 29 f4 af 90 00 a0 8e 72 1e 40 08 00 45 00 ..)......r.@..E. 0010 00 88 fa 5d 00 00 40 32 41 38 a5 e3 f9 6a a5 e3 ...]..@2A8...j.. 0020 f9 7c eb 24 56 25 00 00 00 01 7d 47 c1 91 d8 56 .|.$V%....}G...V 0030 f5 71 f1 b0 48 bb fd 29 9b 89 c7 7e 2d 32 93 d0 .q..H..)...~-2.. 0040 ba f2 cc 5e 89 16 95 02 1c e0 63 de 97 77 2c d0 ...^......c..w,. 0050 94 22 4b bd 79 a4 6b 3e ee 13 b2 26 5c 4e 21 9b ."K.y.k>...&\N!. 0060 2e 28 76 38 53 e1 1e 8a de 9e af 5c a4 07 41 55 .(v8S......\..AU 0070 ef 38 5c 16 03 83 43 97 ad 32 4e c8 7f 02 99 94 .8\...C..2N..... 0080 c4 fc c7 00 51 6d 6e 0a c6 0e 73 33 29 f1 07 71 ....Qmn...s3)..q 0090 27 1a c7 7a 31 d9 0a d3 80 f5 '..z1..... Frame 12 (154 bytes on wire, 154 bytes captured) Arrival Time: May 16, 2005 17:21:28.879927000 Time delta from previous packet: 0.091925000 seconds Time since reference or first frame: 1.065510000 seconds Frame Number: 12 Packet Length: 154 bytes Capture Length: 154 bytes Ethernet II, Src: 00:0c:29:f4:af:90, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Frame check sequence: 0x22bd5add (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 136 Identification: 0x0001 (1) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b94 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.106 (165.227.249.106) Encapsulating Security Payload SPI: 0xec2ff400 Sequence: 3 Data (108 bytes) 0000 00 a0 8e 72 1e 40 00 0c 29 f4 af 90 08 00 45 00 ...r.@..).....E. 0010 00 88 00 01 00 00 f0 32 8b 94 a5 e3 f9 7c a5 e3 .......2.....|.. 0020 f9 6a ec 2f f4 00 00 00 00 03 3d bb e8 bc 08 84 .j./......=..... 0030 33 cb ba ac 86 17 21 b6 1f 99 67 d4 92 12 92 2a 3.....!...g....* 0040 b0 23 d3 b4 18 ac fb 66 84 ca 9b 4a a3 c1 43 ef .#.....f...J..C. 0050 1d 52 e8 3c 0b 40 9f af 25 da f5 f6 30 03 b3 02 .R.<.@..%...0... 0060 8b e8 e3 93 20 a9 99 eb 05 5c 85 3f 4f 5b f8 0b .... ....\.?O[.. 0070 93 2f 42 d9 0e d5 a8 c3 2b a3 ff 76 4f 9d d4 6c ./B.....+..vO..l 0080 53 14 56 e2 3f ba 68 11 22 9e 9e 3a aa 19 f7 fc S.V.?.h."..:.... 0090 df 27 9f 26 f3 e4 22 bd 5a dd .'.&..".Z. Frame 13 (154 bytes on wire, 154 bytes captured) Arrival Time: May 16, 2005 17:21:28.881059000 Time delta from previous packet: 0.001132000 seconds Time since reference or first frame: 1.066642000 seconds Frame Number: 13 Packet Length: 154 bytes Capture Length: 154 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:0c:29:f4:af:90 Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0x6d5d265c (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 136 Identification: 0xfa5e (64094) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x4137 (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.124 (165.227.249.124) Encapsulating Security Payload SPI: 0xeb245625 Sequence: 2 Data (108 bytes) 0000 00 0c 29 f4 af 90 00 a0 8e 72 1e 40 08 00 45 00 ..)......r.@..E. 0010 00 88 fa 5e 00 00 40 32 41 37 a5 e3 f9 6a a5 e3 ...^..@2A7...j.. 0020 f9 7c eb 24 56 25 00 00 00 02 22 18 b9 5b da 16 .|.$V%...."..[.. 0030 31 05 ca 3d 41 31 a0 8c ab 69 06 c9 48 37 18 6f 1..=A1...i..H7.o 0040 d0 0a 56 32 f6 b8 30 fc 12 b3 95 d5 1e 9c 55 47 ..V2..0.......UG 0050 bd bb e7 b1 c6 4f 1e ec 65 82 21 87 88 1b 0b 21 .....O..e.!....! 0060 74 d6 b2 fb 08 4f 33 cc f0 ce eb a7 22 f4 01 46 t....O3....."..F 0070 97 bc c2 7c 52 6c 95 98 dd 07 07 03 72 e0 48 3b ...|Rl......r.H; 0080 9d fc ec 55 ee 61 e8 96 05 40 4b 81 69 05 fc 12 ...U.a...@K.i... 0090 b3 fa dd 9d f4 12 6d 5d 26 5c ......m]&\ Frame 14 (154 bytes on wire, 154 bytes captured) Arrival Time: May 16, 2005 17:21:29.832649000 Time delta from previous packet: 0.951590000 seconds Time since reference or first frame: 2.018232000 seconds Frame Number: 14 Packet Length: 154 bytes Capture Length: 154 bytes Ethernet II, Src: 00:0c:29:f4:af:90, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Frame check sequence: 0x18ee8e09 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 136 Identification: 0x0002 (2) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b93 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.106 (165.227.249.106) Encapsulating Security Payload SPI: 0xec2ff400 Sequence: 4 Data (108 bytes) 0000 00 a0 8e 72 1e 40 00 0c 29 f4 af 90 08 00 45 00 ...r.@..).....E. 0010 00 88 00 02 00 00 f0 32 8b 93 a5 e3 f9 7c a5 e3 .......2.....|.. 0020 f9 6a ec 2f f4 00 00 00 00 04 b5 fa 52 07 9a 3a .j./........R..: 0030 7b 54 1a fa ce 3b 21 5c 9c d7 e9 ec 9f a4 f0 8e {T...;!\........ 0040 23 6d d4 b3 81 ba 03 0a 10 ec 53 29 70 78 8e 3b #m........S)px.; 0050 81 0d 02 a5 b8 b4 12 69 94 50 3e c5 86 0d bf 05 .......i.P>..... 0060 e4 d2 f2 30 5b 4f 6c f2 d0 81 68 56 4c 8d 59 be ...0[Ol...hVL.Y. 0070 04 33 7c cf 1d 8b b5 97 f6 dd 16 8f 5f 6d d0 dc .3|........._m.. 0080 95 1e 2e ba b7 67 87 03 97 9a e7 8f c4 3d 63 97 .....g.......=c. 0090 42 a9 52 6a bb 85 18 ee 8e 09 B.Rj...... Frame 15 (154 bytes on wire, 154 bytes captured) Arrival Time: May 16, 2005 17:21:29.834034000 Time delta from previous packet: 0.001385000 seconds Time since reference or first frame: 2.019617000 seconds Frame Number: 15 Packet Length: 154 bytes Capture Length: 154 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:0c:29:f4:af:90 Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0xffef896f (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 136 Identification: 0xfa5f (64095) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x4136 (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.124 (165.227.249.124) Encapsulating Security Payload SPI: 0xeb245625 Sequence: 3 Data (108 bytes) 0000 00 0c 29 f4 af 90 00 a0 8e 72 1e 40 08 00 45 00 ..)......r.@..E. 0010 00 88 fa 5f 00 00 40 32 41 36 a5 e3 f9 6a a5 e3 ..._..@2A6...j.. 0020 f9 7c eb 24 56 25 00 00 00 03 15 9c 90 95 48 31 .|.$V%........H1 0030 d8 59 75 cc 97 28 38 c0 0f ba f4 fd 22 74 98 f3 .Yu..(8....."t.. 0040 57 ef 6a 2f b8 76 5e fa 80 0f d0 86 18 ed 21 30 W.j/.v^.......!0 0050 11 94 56 0d 37 94 ef af 0b a0 8e 64 73 3c fa 1e ..V.7......ds<.. 0060 41 9a 12 88 60 b8 0b 53 04 fd 8a 80 80 89 c4 02 A...`..S........ 0070 e3 22 a8 fb da a2 55 06 e0 0e 51 2e 56 04 dc 6b ."....U...Q.V..k 0080 74 51 74 70 52 be 92 58 c3 5f b8 fb fb ba fe c1 tQtpR..X._...... 0090 b1 55 74 60 ec 75 ff ef 89 6f .Ut`.u...o Frame 16 (154 bytes on wire, 154 bytes captured) Arrival Time: May 16, 2005 17:21:30.856457000 Time delta from previous packet: 1.022423000 seconds Time since reference or first frame: 3.042040000 seconds Frame Number: 16 Packet Length: 154 bytes Capture Length: 154 bytes Ethernet II, Src: 00:0c:29:f4:af:90, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Frame check sequence: 0x12fbe5b0 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 136 Identification: 0x0003 (3) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b92 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.106 (165.227.249.106) Encapsulating Security Payload SPI: 0xec2ff400 Sequence: 5 Data (108 bytes) 0000 00 a0 8e 72 1e 40 00 0c 29 f4 af 90 08 00 45 00 ...r.@..).....E. 0010 00 88 00 03 00 00 f0 32 8b 92 a5 e3 f9 7c a5 e3 .......2.....|.. 0020 f9 6a ec 2f f4 00 00 00 00 05 4a 01 02 c8 34 54 .j./......J...4T 0030 57 21 e0 57 02 1f e7 7b bd 9f bf 02 5c 19 e1 9b W!.W...{....\... 0040 cd c6 88 76 d7 87 98 74 ba b1 b2 7d c2 6d 19 f5 ...v...t...}.m.. 0050 3b cd 2f d1 ce 9d 84 7f 6c ca 96 8c 19 58 f7 6f ;./.....l....X.o 0060 1b a4 8b 32 78 63 bb 28 9c cd 6c 19 4e 41 42 e6 ...2xc.(..l.NAB. 0070 37 5d 31 ed b6 08 a7 83 05 bb f1 97 d1 40 61 71 7]1..........@aq 0080 43 17 9c 2c dd e6 a3 4d 6c 74 30 a2 fe f3 aa 26 C..,...Mlt0....& 0090 76 14 8c 17 56 bb 12 fb e5 b0 v...V..... Frame 17 (154 bytes on wire, 154 bytes captured) Arrival Time: May 16, 2005 17:21:30.857440000 Time delta from previous packet: 0.000983000 seconds Time since reference or first frame: 3.043023000 seconds Frame Number: 17 Packet Length: 154 bytes Capture Length: 154 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:0c:29:f4:af:90 Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0x6361a72b (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 136 Identification: 0xfa60 (64096) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x4135 (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.124 (165.227.249.124) Encapsulating Security Payload SPI: 0xeb245625 Sequence: 4 Data (108 bytes) 0000 00 0c 29 f4 af 90 00 a0 8e 72 1e 40 08 00 45 00 ..)......r.@..E. 0010 00 88 fa 60 00 00 40 32 41 35 a5 e3 f9 6a a5 e3 ...`..@2A5...j.. 0020 f9 7c eb 24 56 25 00 00 00 04 73 3f b6 15 cf 57 .|.$V%....s?...W 0030 cb 5b fc 3c 71 a2 7e c0 dc 58 40 13 c9 f8 cb 41 .[.