Frame 1 (266 bytes on wire, 266 bytes captured) Arrival Time: May 29, 2005 10:46:19.753630000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 266 bytes Capture Length: 266 bytes Ethernet II, Src: 00:0c:29:f4:af:90, Dst: 00:c0:02:11:42:56 Destination: 00:c0:02:11:42:56 (00:c0:02:11:42:56) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Frame check sequence: 0x19dec1ee (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.107 (165.227.249.107) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 248 Identification: 0x0000 (0) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3b46 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.107 (165.227.249.107) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 228 Checksum: 0x5123 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x9590ED97B8D2BCFC Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 220 Security Association payload Next payload: Vendor ID (13) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 0 Next payload: NONE (0) Length: 40 Proposal number: 0 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 0 Next payload: NONE (0) Length: 32 Transform number: 0 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: unknown vendor ID: 0x8F9CC94E01248ECDF147594C284B213B Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-stenberg-ipsec-nat-traversal-01 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-stenberg-ipsec-nat-traversal-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-03 0000 00 c0 02 11 42 56 00 0c 29 f4 af 90 08 00 45 00 ....BV..).....E. 0010 00 f8 00 00 00 00 40 11 3b 46 a5 e3 f9 7c a5 e3 ......@.;F...|.. 0020 f9 6b 01 f4 01 f4 00 e4 51 23 95 90 ed 97 b8 d2 .k......Q#...... 0030 bc fc 00 00 00 00 00 00 00 00 01 10 02 00 00 00 ................ 0040 00 00 00 00 00 dc 0d 00 00 34 00 00 00 01 00 00 .........4...... 0050 00 01 00 00 00 28 00 01 00 01 00 00 00 20 00 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 03 00 01 80 04 ................ 0070 00 02 80 0b 00 01 80 0c 70 80 0d 00 00 14 8f 9c ........p....... 0080 c9 4e 01 24 8e cd f1 47 59 4c 28 4b 21 3b 0d 00 .N.$...GYL(K!;.. 0090 00 14 27 ba b5 dc 01 ea 07 60 ea 4e 31 90 ac 27 ..'......`.N1..' 00a0 c0 d0 0d 00 00 14 61 05 c4 22 e7 68 47 e4 3f 96 ......a..".hG.?. 00b0 84 80 12 92 ae cd 0d 00 00 14 44 85 15 2d 18 b6 ..........D..-.. 00c0 bb cd 0b e8 a8 46 95 79 dd cc 0d 00 00 14 cd 60 .....F.y.......` 00d0 46 43 35 df 21 f8 7c fd b2 fc 68 b6 a4 48 0d 00 FC5.!.|...h..H.. 00e0 00 14 90 cb 80 91 3e bb 69 6e 08 63 81 b5 ec 42 ......>.in.c...B 00f0 7b 1f 00 00 00 14 7d 94 19 a6 53 10 ca 6f 2c 17 {.....}...S..o,. 0100 9d 92 15 52 9d 56 19 de c1 ee ...R.V.... Frame 2 (126 bytes on wire, 126 bytes captured) Arrival Time: May 29, 2005 10:46:19.765421000 Time delta from previous packet: 0.011791000 seconds Time since reference or first frame: 0.011791000 seconds Frame Number: 2 Packet Length: 126 bytes Capture Length: 126 bytes Ethernet II, Src: 00:c0:02:11:42:56, Dst: 00:0c:29:f4:af:90 Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:c0:02:11:42:56 (00:c0:02:11:42:56) Type: IP (0x0800) Frame check sequence: 0x67ffebc7 (correct) Internet Protocol, Src Addr: 165.227.249.107 (165.227.249.107), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 108 Identification: 0x12c1 (4801) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x2911 (correct) Source: 165.227.249.107 (165.227.249.107) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 88 Checksum: 0xee9e (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x9590ED97B8D2BCFC Responder cookie: 0x314231AA5491A901 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 80 Security Association payload Next payload: NONE (0) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 0 Next payload: NONE (0) Length: 40 Proposal number: 0 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 0 Next payload: NONE (0) Length: 32 Transform number: 0 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) 0000 00 0c 29 f4 af 90 00 c0 02 11 42 56 08 00 45 00 ..).......BV..E. 0010 00 6c 12 c1 00 00 40 11 29 11 a5 e3 f9 6b a5 e3 .l....@.)....k.. 0020 f9 7c 01 f4 01 f4 00 58 ee 9e 95 90 ed 97 b8 d2 .|.....X........ 0030 bc fc 31 42 31 aa 54 91 a9 01 01 10 02 00 00 00 ..1B1.T......... 0040 00 00 00 00 00 50 00 00 00 34 00 00 00 01 00 00 .....P...4...... 0050 00 01 00 00 00 28 00 01 00 01 00 00 00 20 00 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 03 00 01 80 04 ................ 0070 00 02 80 0b 00 01 80 0c 70 80 67 ff eb c7 ........p.g... Frame 3 (226 bytes on wire, 226 bytes captured) Arrival Time: May 29, 2005 10:46:19.790987000 Time delta from previous packet: 0.025566000 seconds Time since reference or first frame: 0.037357000 seconds Frame Number: 3 Packet Length: 226 bytes Capture Length: 226 bytes Ethernet II, Src: 00:0c:29:f4:af:90, Dst: 00:c0:02:11:42:56 Destination: 00:c0:02:11:42:56 (00:c0:02:11:42:56) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Frame check sequence: 0x98cb738c (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.107 (165.227.249.107) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 208 Identification: 0x0001 (1) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3b6d (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.107 (165.227.249.107) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 188 Checksum: 0x5829 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x9590ED97B8D2BCFC Responder cookie: 0x314231AA5491A901 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 180 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 20 Nonce Data 0000 00 c0 02 11 42 56 00 0c 29 f4 af 90 08 00 45 00 ....BV..).....E. 0010 00 d0 00 01 00 00 40 11 3b 6d a5 e3 f9 7c a5 e3 ......@.;m...|.. 0020 f9 6b 01 f4 01 f4 00 bc 58 29 95 90 ed 97 b8 d2 .k......X)...... 0030 bc fc 31 42 31 aa 54 91 a9 01 04 10 02 00 00 00 ..1B1.T......... 0040 00 00 00 00 00 b4 0a 00 00 84 70 77 1b ea c5 5e ..........pw...^ 0050 97 e8 0e 6c fb 08 04 eb 60 2a f7 ff 86 9e c7 1a ...l....`*...... 0060 ce ce 4f 02 32 0f 80 c6 b9 a3 43 54 54 16 27 d2 ..O.2.....CTT.'. 0070 a1 c4 70 11 1e df 6e 07 5d 64 52 b0 3f b5 a1 6f ..p...n.]dR.?..o 0080 d6 5a e8 10 23 25 8d 71 c1 9d 17 ae d5 4d e4 36 .Z..#%.q.....M.6 0090 91 f3 db bd a2 a9 b7 2c 18 ab fb 7e d7 6f a8 04 .......,...~.o.. 00a0 5d d9 6c 99 23 d6 c9 9d 4b 2e b3 cb 2f 89 03 6c ].l.#...K.../..l 00b0 0c 9e 6a d5 c1 b5 a1 d1 a3 a7 1e fe 9c b1 53 f9 ..j...........S. 00c0 71 f0 f9 4d 0a 89 eb 68 bd b5 00 00 00 14 df c5 q..M...h........ 00d0 10 58 08 6c 00 70 8a f6 3b 29 95 03 99 59 98 cb .X.l.p..;)...Y.. 00e0 73 8c s. Frame 4 (226 bytes on wire, 226 bytes captured) Arrival Time: May 29, 2005 10:46:20.303715000 Time delta from previous packet: 0.512728000 seconds Time since reference or first frame: 0.550085000 seconds Frame Number: 4 Packet Length: 226 bytes Capture Length: 226 bytes Ethernet II, Src: 00:0c:29:f4:af:90, Dst: 00:c0:02:11:42:56 Destination: 00:c0:02:11:42:56 (00:c0:02:11:42:56) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Frame check sequence: 0xd0ff8dcb (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.107 (165.227.249.107) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 208 Identification: 0x0002 (2) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3b6c (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.107 (165.227.249.107) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 188 Checksum: 0x5829 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x9590ED97B8D2BCFC Responder cookie: 0x314231AA5491A901 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 180 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 20 Nonce Data 0000 00 c0 02 11 42 56 00 0c 29 f4 af 90 08 00 45 00 ....BV..).....E. 0010 00 d0 00 02 00 00 40 11 3b 6c a5 e3 f9 7c a5 e3 ......@.;l...|.. 0020 f9 6b 01 f4 01 f4 00 bc 58 29 95 90 ed 97 b8 d2 .k......X)...... 0030 bc fc 31 42 31 aa 54 91 a9 01 04 10 02 00 00 00 ..1B1.T......... 0040 00 00 00 00 00 b4 0a 00 00 84 70 77 1b ea c5 5e ..........pw...^ 0050 97 e8 0e 6c fb 08 04 eb 60 2a f7 ff 86 9e c7 1a ...l....`*...... 0060 ce ce 4f 02 32 0f 80 c6 b9 a3 43 54 54 16 27 d2 ..O.2.....CTT.'. 0070 a1 c4 70 11 1e df 6e 07 5d 64 52 b0 3f b5 a1 6f ..p...n.]dR.?..o 0080 d6 5a e8 10 23 25 8d 71 c1 9d 17 ae d5 4d e4 36 .Z..#%.q.....M.6 0090 91 f3 db bd a2 a9 b7 2c 18 ab fb 7e d7 6f a8 04 .......,...~.o.. 00a0 5d d9 6c 99 23 d6 c9 9d 4b 2e b3 cb 2f 89 03 6c ].l.#...K.../..l 00b0 0c 9e 6a d5 c1 b5 a1 d1 a3 a7 1e fe 9c b1 53 f9 ..j...........S. 00c0 71 f0 f9 4d 0a 89 eb 68 bd b5 00 00 00 14 df c5 q..M...h........ 00d0 10 58 08 6c 00 70 8a f6 3b 29 95 03 99 59 d0 ff .X.l.p..;)...Y.. 00e0 8d cb .. Frame 5 (218 bytes on wire, 218 bytes captured) Arrival Time: May 29, 2005 10:46:21.100309000 Time delta from previous packet: 0.796594000 seconds Time since reference or first frame: 1.346679000 seconds Frame Number: 5 Packet Length: 218 bytes Capture Length: 218 bytes Ethernet II, Src: 00:c0:02:11:42:56, Dst: 00:0c:29:f4:af:90 Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:c0:02:11:42:56 (00:c0:02:11:42:56) Type: IP (0x0800) Frame check sequence: 0x8a4fd892 (correct) Internet Protocol, Src Addr: 165.227.249.107 (165.227.249.107), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 200 Identification: 0x12c2 (4802) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x28b4 (correct) Source: 165.227.249.107 (165.227.249.107) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 180 Checksum: 0x500f (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x9590ED97B8D2BCFC Responder cookie: 0x314231AA5491A901 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 172 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 12 Nonce Data 0000 00 0c 29 f4 af 90 00 c0 02 11 42 56 08 00 45 00 ..).......BV..E. 0010 00 c8 12 c2 00 00 40 11 28 b4 a5 e3 f9 6b a5 e3 ......@.(....k.. 0020 f9 7c 01 f4 01 f4 00 b4 50 0f 95 90 ed 97 b8 d2 .|......P....... 0030 bc fc 31 42 31 aa 54 91 a9 01 04 10 02 00 00 00 ..1B1.T......... 0040 00 00 00 00 00 ac 0a 00 00 84 a3 86 7c ac aa 71 ............|..q 0050 0d 76 46 a1 46 49 61 b5 d2 3c 6e 82 7f ce 9b cf .vF.FIa.. 0070 11 63 ad be 74 f9 02 f6 89 ab a2 a3 b6 88 75 80 .c..t.........u. 0080 c1 20 1f a0 62 f7 92 09 8a fc 18 66 c6 0f 19 ff . ..b......f.... 0090 e1 ab a8 90 f9 ea 6a 2f 7b 9a e4 f3 da 87 79 98 ......j/{.....y. 00a0 f1 2e fe ed ca 82 b0 52 d5 38 ae a2 41 78 c4 d6 .......R.8..Ax.. 00b0 55 d9 10 a7 2b 5c ed d9 b2 a8 d1 1f 48 1f d4 5f U...+\......H.._ 00c0 4e bc 3c b4 e2 52 57 e0 cb c7 00 00 00 0c c3 4d N.<..RW........M 00d0 54 ab fa ee d8 85 8a 4f d8 92 T......O.. Frame 6 (122 bytes on wire, 122 bytes captured) Arrival Time: May 29, 2005 10:46:21.113378000 Time delta from previous packet: 0.013069000 seconds Time since reference or first frame: 1.359748000 seconds Frame Number: 6 Packet Length: 122 bytes Capture Length: 122 bytes Ethernet II, Src: 00:0c:29:f4:af:90, Dst: 00:c0:02:11:42:56 Destination: 00:c0:02:11:42:56 (00:c0:02:11:42:56) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Frame check sequence: 0x5bb6954a (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.107 (165.227.249.107) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 104 Identification: 0x0003 (3) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3bd3 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.107 (165.227.249.107) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 84 Checksum: 0xd346 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x9590ED97B8D2BCFC Responder cookie: 0x314231AA5491A901 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 76 Encrypted payload (48 bytes) 0000 00 c0 02 11 42 56 00 0c 29 f4 af 90 08 00 45 00 ....BV..).....E. 0010 00 68 00 03 00 00 40 11 3b d3 a5 e3 f9 7c a5 e3 .h....@.;....|.. 0020 f9 6b 01 f4 01 f4 00 54 d3 46 95 90 ed 97 b8 d2 .k.....T.F...... 0030 bc fc 31 42 31 aa 54 91 a9 01 05 10 02 01 00 00 ..1B1.T......... 0040 00 00 00 00 00 4c 55 37 ee 2f 11 7f c0 30 7e 6e .....LU7./...0~n 0050 eb 01 01 6b c1 78 5e fe f2 d9 42 39 ab 1e 80 72 ...k.x^...B9...r 0060 46 62 22 cd cb 48 b0 5a 01 9d 83 ef f0 79 0b bf Fb"..H.Z.....y.. 0070 19 f6 21 f0 e5 06 5b b6 95 4a ..!...[..J Frame 7 (122 bytes on wire, 122 bytes captured) Arrival Time: May 29, 2005 10:46:21.624446000 Time delta from previous packet: 0.511068000 seconds Time since reference or first frame: 1.870816000 seconds Frame Number: 7 Packet Length: 122 bytes Capture Length: 122 bytes Ethernet II, Src: 00:0c:29:f4:af:90, Dst: 00:c0:02:11:42:56 Destination: 00:c0:02:11:42:56 (00:c0:02:11:42:56) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Frame check sequence: 0xcfa3f3bc (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.107 (165.227.249.107) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 104 Identification: 0x0004 (4) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3bd2 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.107 (165.227.249.107) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 84 Checksum: 0xd346 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x9590ED97B8D2BCFC Responder cookie: 0x314231AA5491A901 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 76 Encrypted payload (48 bytes) 0000 00 c0 02 11 42 56 00 0c 29 f4 af 90 08 00 45 00 ....BV..).....E. 0010 00 68 00 04 00 00 40 11 3b d2 a5 e3 f9 7c a5 e3 .h....@.;....|.. 0020 f9 6b 01 f4 01 f4 00 54 d3 46 95 90 ed 97 b8 d2 .k.....T.F...... 0030 bc fc 31 42 31 aa 54 91 a9 01 05 10 02 01 00 00 ..1B1.T......... 0040 00 00 00 00 00 4c 55 37 ee 2f 11 7f c0 30 7e 6e .....LU7./...0~n 0050 eb 01 01 6b c1 78 5e fe f2 d9 42 39 ab 1e 80 72 ...k.x^...B9...r 0060 46 62 22 cd cb 48 b0 5a 01 9d 83 ef f0 79 0b bf Fb"..H.Z.....y.. 0070 19 f6 21 f0 e5 06 cf a3 f3 bc ..!....... Frame 8 (122 bytes on wire, 122 bytes captured) Arrival Time: May 29, 2005 10:46:22.635803000 Time delta from previous packet: 1.011357000 seconds Time since reference or first frame: 2.882173000 seconds Frame Number: 8 Packet Length: 122 bytes Capture Length: 122 bytes Ethernet II, Src: 00:0c:29:f4:af:90, Dst: 00:c0:02:11:42:56 Destination: 00:c0:02:11:42:56 (00:c0:02:11:42:56) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Frame check sequence: 0x268cc4bb (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.107 (165.227.249.107) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 104 Identification: 0x0005 (5) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3bd1 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.107 (165.227.249.107) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 84 Checksum: 0xd346 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x9590ED97B8D2BCFC Responder cookie: 0x314231AA5491A901 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 76 Encrypted payload (48 bytes) 0000 00 c0 02 11 42 56 00 0c 29 f4 af 90 08 00 45 00 ....BV..).....E. 0010 00 68 00 05 00 00 40 11 3b d1 a5 e3 f9 7c a5 e3 .h....@.;....|.. 0020 f9 6b 01 f4 01 f4 00 54 d3 46 95 90 ed 97 b8 d2 .k.....T.F...... 0030 bc fc 31 42 31 aa 54 91 a9 01 05 10 02 01 00 00 ..1B1.T......... 0040 00 00 00 00 00 4c 55 37 ee 2f 11 7f c0 30 7e 6e .....LU7./...0~n 0050 eb 01 01 6b c1 78 5e fe f2 d9 42 39 ab 1e 80 72 ...k.x^...B9...r 0060 46 62 22 cd cb 48 b0 5a 01 9d 83 ef f0 79 0b bf Fb"..H.Z.....y.. 0070 19 f6 21 f0 e5 06 26 8c c4 bb ..!...&... Frame 9 (114 bytes on wire, 114 bytes captured) Arrival Time: May 29, 2005 10:46:22.712835000 Time delta from previous packet: 0.077032000 seconds Time since reference or first frame: 2.959205000 seconds Frame Number: 9 Packet Length: 114 bytes Capture Length: 114 bytes Ethernet II, Src: 00:c0:02:11:42:56, Dst: 00:0c:29:f4:af:90 Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:c0:02:11:42:56 (00:c0:02:11:42:56) Type: IP (0x0800) Frame check sequence: 0xfed0aefd (correct) Internet Protocol, Src Addr: 165.227.249.107 (165.227.249.107), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0x12c3 (4803) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x291b (correct) Source: 165.227.249.107 (165.227.249.107) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 76 Checksum: 0xe690 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x9590ED97B8D2BCFC Responder cookie: 0x314231AA5491A901 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 68 Encrypted payload (40 bytes) 0000 00 0c 29 f4 af 90 00 c0 02 11 42 56 08 00 45 00 ..).......BV..E. 0010 00 60 12 c3 00 00 40 11 29 1b a5 e3 f9 6b a5 e3 .`....@.)....k.. 0020 f9 7c 01 f4 01 f4 00 4c e6 90 95 90 ed 97 b8 d2 .|.....L........ 0030 bc fc 31 42 31 aa 54 91 a9 01 05 10 02 01 00 00 ..1B1.T......... 0040 00 00 00 00 00 44 74 a6 78 9a e9 77 9a 05 ce ef .....Dt.x..w.... 0050 69 e2 c9 d1 30 72 10 6a aa e2 87 50 fd 84 88 17 i...0r.j...P.... 0060 2c d4 e2 45 24 3c 27 f4 a1 6e bb 82 51 17 fe d0 ,..E$<'..n..Q... 0070 ae fd .. Frame 10 (338 bytes on wire, 338 bytes captured) Arrival Time: May 29, 2005 10:46:22.739861000 Time delta from previous packet: 0.027026000 seconds Time since reference or first frame: 2.986231000 seconds Frame Number: 10 Packet Length: 338 bytes Capture Length: 338 bytes Ethernet II, Src: 00:0c:29:f4:af:90, Dst: 00:c0:02:11:42:56 Destination: 00:c0:02:11:42:56 (00:c0:02:11:42:56) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Frame check sequence: 0x65897c93 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.107 (165.227.249.107) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 320 Identification: 0x0006 (6) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3af8 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.107 (165.227.249.107) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 300 Checksum: 0xf1ec (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x9590ED97B8D2BCFC Responder cookie: 0x314231AA5491A901 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x60A59BB9 Length: 292 Encrypted payload (264 bytes) 0000 00 c0 02 11 42 56 00 0c 29 f4 af 90 08 00 45 00 ....BV..).....E. 0010 01 40 00 06 00 00 40 11 3a f8 a5 e3 f9 7c a5 e3 .@....@.:....|.. 0020 f9 6b 01 f4 01 f4 01 2c f1 ec 95 90 ed 97 b8 d2 .k.....,........ 0030 bc fc 31 42 31 aa 54 91 a9 01 08 10 20 01 60 a5 ..1B1.T..... .`. 0040 9b b9 00 00 01 24 b3 b0 58 2c 6f f5 d2 4b 91 22 .....$..X,o..K." 0050 b1 20 67 b8 de 96 c5 a0 6e 63 33 e3 3b b6 5f f6 . g.....nc3.;._. 0060 52 12 11 d0 d8 40 99 73 31 1f 6b 3a d9 ac bf d7 R....@.s1.k:.... 0070 1d 91 b0 33 07 a0 e5 d7 a6 29 ce 6a 9a 61 5f 20 ...3.....).j.a_ 0080 0a 56 63 88 20 d4 77 0d 8e 5f 0a 22 dc 3f 67 c9 .Vc. .w.._.".?g. 0090 09 a5 f7 99 a3 b9 2e 3d 3b 43 a3 d2 57 06 ae a5 .......=;C..W... 00a0 66 84 ca 8b b1 7f 84 84 23 ce 5c ef 03 c8 ba 75 f.......#.\....u 00b0 26 86 6a e3 b1 ec 0a 0b 9c fa 61 9a b0 49 3e 58 &.j.......a..I>X 00c0 86 d6 aa fb 96 74 d7 05 f1 7d f3 26 4a 93 84 7d .....t...}.&J..} 00d0 7f f4 d3 89 40 89 69 a2 14 cd ba 73 cf 7c 02 16 ....@.i....s.|.. 00e0 e6 c1 e6 47 dc c1 95 05 fa 1c 4d c9 26 eb e4 82 ...G......M.&... 00f0 57 75 8e 0e ea 26 a8 82 b9 b3 3b c5 52 e7 00 8c Wu...&....;.R... 0100 38 3e 93 ac c9 4d 39 7b eb f1 15 d2 3d 73 fb ab 8>...M9{....=s.. 0110 e4 bc d2 85 47 07 05 73 c1 e0 bb 79 19 70 ba 7f ....G..s...y.p.. 0120 03 97 bf cb 69 ae 1c 2f a9 8a b5 b7 3b 01 b4 18 ....i../....;... 0130 f6 c6 ec 12 8c d9 7c c8 d7 6e a4 42 c9 43 20 43 ......|..n.B.C C 0140 f2 a7 06 69 6f 64 77 de 4c 0f 55 ec b1 10 65 89 ...iodw.L.U...e. 0150 7c 93 |. Frame 11 (338 bytes on wire, 338 bytes captured) Arrival Time: May 29, 2005 10:46:23.253119000 Time delta from previous packet: 0.513258000 seconds Time since reference or first frame: 3.499489000 seconds Frame Number: 11 Packet Length: 338 bytes Capture Length: 338 bytes Ethernet II, Src: 00:0c:29:f4:af:90, Dst: 00:c0:02:11:42:56 Destination: 00:c0:02:11:42:56 (00:c0:02:11:42:56) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Frame check sequence: 0xb5ab69d9 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.107 (165.227.249.107) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 320 Identification: 0x0007 (7) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3af7 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.107 (165.227.249.107) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 300 Checksum: 0xf1ec (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x9590ED97B8D2BCFC Responder cookie: 0x314231AA5491A901 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x60A59BB9 Length: 292 Encrypted payload (264 bytes) 0000 00 c0 02 11 42 56 00 0c 29 f4 af 90 08 00 45 00 ....BV..).....E. 0010 01 40 00 07 00 00 40 11 3a f7 a5 e3 f9 7c a5 e3 .@....@.:....|.. 0020 f9 6b 01 f4 01 f4 01 2c f1 ec 95 90 ed 97 b8 d2 .k.....,........ 0030 bc fc 31 42 31 aa 54 91 a9 01 08 10 20 01 60 a5 ..1B1.T..... .`. 0040 9b b9 00 00 01 24 b3 b0 58 2c 6f f5 d2 4b 91 22 .....$..X,o..K." 0050 b1 20 67 b8 de 96 c5 a0 6e 63 33 e3 3b b6 5f f6 . g.....nc3.;._. 0060 52 12 11 d0 d8 40 99 73 31 1f 6b 3a d9 ac bf d7 R....@.s1.k:.... 0070 1d 91 b0 33 07 a0 e5 d7 a6 29 ce 6a 9a 61 5f 20 ...3.....).j.a_ 0080 0a 56 63 88 20 d4 77 0d 8e 5f 0a 22 dc 3f 67 c9 .Vc. .w.._.".?g. 0090 09 a5 f7 99 a3 b9 2e 3d 3b 43 a3 d2 57 06 ae a5 .......=;C..W... 00a0 66 84 ca 8b b1 7f 84 84 23 ce 5c ef 03 c8 ba 75 f.......#.\....u 00b0 26 86 6a e3 b1 ec 0a 0b 9c fa 61 9a b0 49 3e 58 &.j.......a..I>X 00c0 86 d6 aa fb 96 74 d7 05 f1 7d f3 26 4a 93 84 7d .....t...}.&J..} 00d0 7f f4 d3 89 40 89 69 a2 14 cd ba 73 cf 7c 02 16 ....@.i....s.|.. 00e0 e6 c1 e6 47 dc c1 95 05 fa 1c 4d c9 26 eb e4 82 ...G......M.&... 00f0 57 75 8e 0e ea 26 a8 82 b9 b3 3b c5 52 e7 00 8c Wu...&....;.R... 0100 38 3e 93 ac c9 4d 39 7b eb f1 15 d2 3d 73 fb ab 8>...M9{....=s.. 0110 e4 bc d2 85 47 07 05 73 c1 e0 bb 79 19 70 ba 7f ....G..s...y.p.. 0120 03 97 bf cb 69 ae 1c 2f a9 8a b5 b7 3b 01 b4 18 ....i../....;... 0130 f6 c6 ec 12 8c d9 7c c8 d7 6e a4 42 c9 43 20 43 ......|..n.B.C C 0140 f2 a7 06 69 6f 64 77 de 4c 0f 55 ec b1 10 b5 ab ...iodw.L.U..... 0150 69 d9 i. Frame 12 (330 bytes on wire, 330 bytes captured) Arrival Time: May 29, 2005 10:46:24.050336000 Time delta from previous packet: 0.797217000 seconds Time since reference or first frame: 4.296706000 seconds Frame Number: 12 Packet Length: 330 bytes Capture Length: 330 bytes Ethernet II, Src: 00:c0:02:11:42:56, Dst: 00:0c:29:f4:af:90 Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:c0:02:11:42:56 (00:c0:02:11:42:56) Type: IP (0x0800) Frame check sequence: 0x2496cdff (correct) Internet Protocol, Src Addr: 165.227.249.107 (165.227.249.107), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 312 Identification: 0x12c4 (4804) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x2842 (correct) Source: 165.227.249.107 (165.227.249.107) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 292 Checksum: 0x24d0 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x9590ED97B8D2BCFC Responder cookie: 0x314231AA5491A901 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x60A59BB9 Length: 284 Encrypted payload (256 bytes) 0000 00 0c 29 f4 af 90 00 c0 02 11 42 56 08 00 45 00 ..).......BV..E. 0010 01 38 12 c4 00 00 40 11 28 42 a5 e3 f9 6b a5 e3 .8....@.(B...k.. 0020 f9 7c 01 f4 01 f4 01 24 24 d0 95 90 ed 97 b8 d2 .|.....$$....... 0030 bc fc 31 42 31 aa 54 91 a9 01 08 10 20 01 60 a5 ..1B1.T..... .`. 0040 9b b9 00 00 01 1c b9 9f ef ef 22 aa 50 d5 5f 52 ..........".P._R 0050 08 ae cf 93 a1 09 c2 f8 59 0a 5a 6c f3 f3 77 ff ........Y.Zl..w. 0060 b3 c4 56 35 50 e4 1d c1 0b 0f 5d 5c 59 70 6b 97 ..V5P.....]\Ypk. 0070 0c 38 97 b2 55 0d 00 94 a1 89 8a a4 00 fc 45 4c .8..U.........EL 0080 69 f9 22 17 f6 bd 1b 02 9d be 68 27 4b 9e aa e3 i.".......h'K... 0090 9b d5 39 96 33 70 b3 75 95 dd 85 32 62 18 9f 7c ..9.3p.u...2b..| 00a0 05 bc 84 c5 4d 4a af 9f ba 21 69 9d 11 2e 2e a3 ....MJ...!i..... 00b0 3e 35 5e 5a 83 68 17 f8 21 b0 0c 5e 82 32 53 ac >5^Z.h..!..^.2S. 00c0 76 1c eb 56 12 f9 d0 26 e6 d3 5d e9 c3 ca 33 0b v..V...&..]...3. 00d0 3f 75 76 c9 ec b8 88 8e ca ac 91 19 8a 72 5f 0f ?uv..........r_. 00e0 60 f6 7e ba 18 bd c1 c5 23 5c 66 4d f7 42 86 38 `.~.....#\fM.B.8 00f0 e0 88 06 e0 75 9b 0e 86 b8 7a ee 3b 92 73 8d fe ....u....z.;.s.. 0100 fe d9 17 a1 1d 45 a9 34 f5 ea a0 55 8a e3 97 fe .....E.4...U.... 0110 71 9e 2e f7 d2 21 d4 52 35 87 9f e0 25 ac 78 f3 q....!.R5...%.x. 0120 aa a4 d3 2f 71 7f f8 71 7f 9c 89 84 37 6e b5 93 .../q..q....7n.. 0130 07 75 6b 1c 98 4f bb a3 2e db 72 e7 d1 32 2e d5 .uk..O....r..2.. 0140 3a f4 14 1f c7 97 24 96 cd ff :.....$... Frame 13 (98 bytes on wire, 98 bytes captured) Arrival Time: May 29, 2005 10:46:24.063588000 Time delta from previous packet: 0.013252000 seconds Time since reference or first frame: 4.309958000 seconds Frame Number: 13 Packet Length: 98 bytes Capture Length: 98 bytes Ethernet II, Src: 00:0c:29:f4:af:90, Dst: 00:c0:02:11:42:56 Destination: 00:c0:02:11:42:56 (00:c0:02:11:42:56) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Frame check sequence: 0x6f1e3cfd (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.107 (165.227.249.107) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 80 Identification: 0x0008 (8) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3be6 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.107 (165.227.249.107) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 60 Checksum: 0x7410 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x9590ED97B8D2BCFC Responder cookie: 0x314231AA5491A901 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x60A59BB9 Length: 52 Encrypted payload (24 bytes) 0000 00 c0 02 11 42 56 00 0c 29 f4 af 90 08 00 45 00 ....BV..).....E. 0010 00 50 00 08 00 00 40 11 3b e6 a5 e3 f9 7c a5 e3 .P....@.;....|.. 0020 f9 6b 01 f4 01 f4 00 3c 74 10 95 90 ed 97 b8 d2 .k..........N.M 0040 e9 6f 2a c0 7c da 3b 7f 0c 04 bd 96 b0 92 a5 10 .o*.|.;......... 0050 6a 55 88 6a 7d 81 67 a5 39 c0 73 b7 ec 32 af 45 jU.j}.g.9.s..2.E 0060 17 48 1a ac 9b 71 9c 5a f7 72 56 65 25 eb f6 c9 .H...q.Z.rVe%... 0070 ea 5f 2b 94 a8 ba a7 09 9d fd 66 75 11 c2 cb 7c ._+.......fu...| 0080 05 45 f3 14 26 14 9a 59 d7 39 5f 39 c5 6d 75 e1 .E..&..Y.9_9.mu. 0090 4f ad fe 46 d8 52 ae eb b3 3b O..F.R...; Frame 16 (330 bytes on wire, 330 bytes captured) Arrival Time: May 29, 2005 10:46:29.680960000 Time delta from previous packet: 4.009904000 seconds Time since reference or first frame: 9.927330000 seconds Frame Number: 16 Packet Length: 330 bytes Capture Length: 330 bytes Ethernet II, Src: 00:c0:02:11:42:56, Dst: 00:0c:29:f4:af:90 Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:c0:02:11:42:56 (00:c0:02:11:42:56) Type: IP (0x0800) Frame check sequence: 0x41992434 (correct) Internet Protocol, Src Addr: 165.227.249.107 (165.227.249.107), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 312 Identification: 0x12e1 (4833) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x2825 (correct) Source: 165.227.249.107 (165.227.249.107) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 292 Checksum: 0x24d0 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x9590ED97B8D2BCFC Responder cookie: 0x314231AA5491A901 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x60A59BB9 Length: 284 Encrypted payload (256 bytes) 0000 00 0c 29 f4 af 90 00 c0 02 11 42 56 08 00 45 00 ..).......BV..E. 0010 01 38 12 e1 00 00 40 11 28 25 a5 e3 f9 6b a5 e3 .8....@.(%...k.. 0020 f9 7c 01 f4 01 f4 01 24 24 d0 95 90 ed 97 b8 d2 .|.....$$....... 0030 bc fc 31 42 31 aa 54 91 a9 01 08 10 20 01 60 a5 ..1B1.T..... .`. 0040 9b b9 00 00 01 1c b9 9f ef ef 22 aa 50 d5 5f 52 ..........".P._R 0050 08 ae cf 93 a1 09 c2 f8 59 0a 5a 6c f3 f3 77 ff ........Y.Zl..w. 0060 b3 c4 56 35 50 e4 1d c1 0b 0f 5d 5c 59 70 6b 97 ..V5P.....]\Ypk. 0070 0c 38 97 b2 55 0d 00 94 a1 89 8a a4 00 fc 45 4c .8..U.........EL 0080 69 f9 22 17 f6 bd 1b 02 9d be 68 27 4b 9e aa e3 i.".......h'K... 0090 9b d5 39 96 33 70 b3 75 95 dd 85 32 62 18 9f 7c ..9.3p.u...2b..| 00a0 05 bc 84 c5 4d 4a af 9f ba 21 69 9d 11 2e 2e a3 ....MJ...!i..... 00b0 3e 35 5e 5a 83 68 17 f8 21 b0 0c 5e 82 32 53 ac >5^Z.h..!..^.2S. 00c0 76 1c eb 56 12 f9 d0 26 e6 d3 5d e9 c3 ca 33 0b v..V...&..]...3. 00d0 3f 75 76 c9 ec b8 88 8e ca ac 91 19 8a 72 5f 0f ?uv..........r_. 00e0 60 f6 7e ba 18 bd c1 c5 23 5c 66 4d f7 42 86 38 `.~.....#\fM.B.8 00f0 e0 88 06 e0 75 9b 0e 86 b8 7a ee 3b 92 73 8d fe ....u....z.;.s.. 0100 fe d9 17 a1 1d 45 a9 34 f5 ea a0 55 8a e3 97 fe .....E.4...U.... 0110 71 9e 2e f7 d2 21 d4 52 35 87 9f e0 25 ac 78 f3 q....!.R5...%.x. 0120 aa a4 d3 2f 71 7f f8 71 7f 9c 89 84 37 6e b5 93 .../q..q....7n.. 0130 07 75 6b 1c 98 4f bb a3 2e db 72 e7 d1 32 2e d5 .uk..O....r..2.. 0140 3a f4 14 1f c7 97 41 99 24 34 :.....A.$4 Frame 17 (98 bytes on wire, 98 bytes captured) Arrival Time: May 29, 2005 10:46:29.682462000 Time delta from previous packet: 0.001502000 seconds Time since reference or first frame: 9.928832000 seconds Frame Number: 17 Packet Length: 98 bytes Capture Length: 98 bytes Ethernet II, Src: 00:0c:29:f4:af:90, Dst: 00:c0:02:11:42:56 Destination: 00:c0:02:11:42:56 (00:c0:02:11:42:56) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Frame check sequence: 0x375b1ca5 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.107 (165.227.249.107) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 80 Identification: 0x0009 (9) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3be5 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.107 (165.227.249.107) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 60 Checksum: 0x7410 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x9590ED97B8D2BCFC Responder cookie: 0x314231AA5491A901 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x60A59BB9 Length: 52 Encrypted payload (24 bytes) 0000 00 c0 02 11 42 56 00 0c 29 f4 af 90 08 00 45 00 ....BV..).....E. 0010 00 50 00 09 00 00 40 11 3b e5 a5 e3 f9 7c a5 e3 .P....@.;....|.. 0020 f9 6b 01 f4 01 f4 00 3c 74 10 95 90 ed 97 b8 d2 .k.....