Frame 1 (266 bytes on wire, 266 bytes captured) Arrival Time: Dec 6, 2004 11:44:07.451567000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 266 bytes Capture Length: 266 bytes Ethernet II, Src: 00:0c:29:e6:ad:b9, Dst: 00:01:02:46:6a:04 Destination: 00:01:02:46:6a:04 (00:01:02:46:6a:04) Source: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Type: IP (0x0800) Frame check sequence: 0x94900510 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.134 (165.227.249.134) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 248 Identification: 0x006b (107) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3ac0 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.134 (165.227.249.134) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 228 Checksum: 0xabca (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x8D6FA167DF0C9051 Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 220 Security Association payload Next payload: Vendor ID (13) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 0 Next payload: NONE (0) Length: 40 Proposal number: 0 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 0 Next payload: NONE (0) Length: 32 Transform number: 0 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: unknown vendor ID: 0x8F9CC94E01248ECDF147594C284B213B Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-stenberg-ipsec-nat-traversal-01 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-stenberg-ipsec-nat-traversal-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-03 0000 00 01 02 46 6a 04 00 0c 29 e6 ad b9 08 00 45 00 ...Fj...).....E. 0010 00 f8 00 6b 00 00 40 11 3a c0 a5 e3 f9 7c a5 e3 ...k..@.:....|.. 0020 f9 86 01 f4 01 f4 00 e4 ab ca 8d 6f a1 67 df 0c ...........o.g.. 0030 90 51 00 00 00 00 00 00 00 00 01 10 02 00 00 00 .Q.............. 0040 00 00 00 00 00 dc 0d 00 00 34 00 00 00 01 00 00 .........4...... 0050 00 01 00 00 00 28 00 01 00 01 00 00 00 20 00 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 03 00 01 80 04 ................ 0070 00 02 80 0b 00 01 80 0c 70 80 0d 00 00 14 8f 9c ........p....... 0080 c9 4e 01 24 8e cd f1 47 59 4c 28 4b 21 3b 0d 00 .N.$...GYL(K!;.. 0090 00 14 27 ba b5 dc 01 ea 07 60 ea 4e 31 90 ac 27 ..'......`.N1..' 00a0 c0 d0 0d 00 00 14 61 05 c4 22 e7 68 47 e4 3f 96 ......a..".hG.?. 00b0 84 80 12 92 ae cd 0d 00 00 14 44 85 15 2d 18 b6 ..........D..-.. 00c0 bb cd 0b e8 a8 46 95 79 dd cc 0d 00 00 14 cd 60 .....F.y.......` 00d0 46 43 35 df 21 f8 7c fd b2 fc 68 b6 a4 48 0d 00 FC5.!.|...h..H.. 00e0 00 14 90 cb 80 91 3e bb 69 6e 08 63 81 b5 ec 42 ......>.in.c...B 00f0 7b 1f 00 00 00 14 7d 94 19 a6 53 10 ca 6f 2c 17 {.....}...S..o,. 0100 9d 92 15 52 9d 56 94 90 05 10 ...R.V.... Frame 2 (126 bytes on wire, 126 bytes captured) Arrival Time: Dec 6, 2004 11:44:07.735564000 Time delta from previous packet: 0.283997000 seconds Time since reference or first frame: 0.283997000 seconds Frame Number: 2 Packet Length: 126 bytes Capture Length: 126 bytes Ethernet II, Src: 00:01:02:46:6a:04, Dst: 00:0c:29:e6:ad:b9 Destination: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Source: 00:01:02:46:6a:04 (00:01:02:46:6a:04) Type: IP (0x0800) Frame check sequence: 0xd9b47214 (correct) Internet Protocol, Src Addr: 165.227.249.134 (165.227.249.134), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 108 Identification: 0x0031 (49) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3b86 (correct) Source: 165.227.249.134 (165.227.249.134) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 88 Checksum: 0x8323 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x8D6FA167DF0C9051 Responder cookie: 0x7367387F10126AA9 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 80 Security Association payload Next payload: NONE (0) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 0 Next payload: NONE (0) Length: 40 Proposal number: 0 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 0 Next payload: NONE (0) Length: 32 Transform number: 0 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) 0000 00 0c 29 e6 ad b9 00 01 02 46 6a 04 08 00 45 00 ..)......Fj...E. 0010 00 6c 00 31 00 00 40 11 3b 86 a5 e3 f9 86 a5 e3 .l.1..@.;....... 0020 f9 7c 01 f4 01 f4 00 58 83 23 8d 6f a1 67 df 0c .|.....X.#.o.g.. 0030 90 51 73 67 38 7f 10 12 6a a9 01 10 02 00 00 00 .Qsg8...j....... 0040 00 00 00 00 00 50 00 00 00 34 00 00 00 01 00 00 .....P...4...... 0050 00 01 00 00 00 28 00 01 00 01 00 00 00 20 00 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 03 00 01 80 04 ................ 0070 00 02 80 0b 00 01 80 0c 70 80 d9 b4 72 14 ........p...r. Frame 3 (226 bytes on wire, 226 bytes captured) Arrival Time: Dec 6, 2004 11:44:07.745868000 Time delta from previous packet: 0.010304000 seconds Time since reference or first frame: 0.294301000 seconds Frame Number: 3 Packet Length: 226 bytes Capture Length: 226 bytes Ethernet II, Src: 00:0c:29:e6:ad:b9, Dst: 00:01:02:46:6a:04 Destination: 00:01:02:46:6a:04 (00:01:02:46:6a:04) Source: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Type: IP (0x0800) Frame check sequence: 0x5ca05a26 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.134 (165.227.249.134) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 208 Identification: 0x006c (108) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3ae7 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.134 (165.227.249.134) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 188 Checksum: 0x1415 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x8D6FA167DF0C9051 Responder cookie: 0x7367387F10126AA9 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 180 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 20 Nonce Data 0000 00 01 02 46 6a 04 00 0c 29 e6 ad b9 08 00 45 00 ...Fj...).....E. 0010 00 d0 00 6c 00 00 40 11 3a e7 a5 e3 f9 7c a5 e3 ...l..@.:....|.. 0020 f9 86 01 f4 01 f4 00 bc 14 15 8d 6f a1 67 df 0c ...........o.g.. 0030 90 51 73 67 38 7f 10 12 6a a9 04 10 02 00 00 00 .Qsg8...j....... 0040 00 00 00 00 00 b4 0a 00 00 84 d4 01 ab 10 e5 d7 ................ 0050 7e b0 86 dd a5 d8 86 69 73 5c be 36 d7 62 7e 90 ~......is\.6.b~. 0060 40 f3 09 54 ff e0 c1 f9 3b ca 4f 2f 5f 7c f4 e7 @..T....;.O/_|.. 0070 7b 53 b1 0f d8 20 87 f0 e3 23 9f 6b e5 9e 32 13 {S... ...#.k..2. 0080 a0 57 a3 0b 3f 11 04 2e 4c 54 b1 39 9c 81 db 19 .W..?...LT.9.... 0090 a7 52 e4 92 0a 94 1f 29 7b 4f 87 17 0c 06 dc f5 .R.....){O...... 00a0 44 73 09 e6 61 27 b7 d1 54 ae 34 40 e3 80 d3 50 Ds..a'..T.4@...P 00b0 64 cf 55 89 8f a3 b7 42 4b ff ad 74 86 84 37 48 d.U....BK..t..7H 00c0 a9 db c2 3c a5 d3 34 39 16 7c 00 00 00 14 a9 99 ...<..49.|...... 00d0 19 a0 ac 17 1f 0c e6 f4 b4 dc fc a8 21 26 5c a0 ............!&\. 00e0 5a 26 Z& Frame 4 (226 bytes on wire, 226 bytes captured) Arrival Time: Dec 6, 2004 11:44:08.069484000 Time delta from previous packet: 0.323616000 seconds Time since reference or first frame: 0.617917000 seconds Frame Number: 4 Packet Length: 226 bytes Capture Length: 226 bytes Ethernet II, Src: 00:01:02:46:6a:04, Dst: 00:0c:29:e6:ad:b9 Destination: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Source: 00:01:02:46:6a:04 (00:01:02:46:6a:04) Type: IP (0x0800) Frame check sequence: 0x520cac7a (correct) Internet Protocol, Src Addr: 165.227.249.134 (165.227.249.134), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 208 Identification: 0x0033 (51) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3b20 (correct) Source: 165.227.249.134 (165.227.249.134) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 188 Checksum: 0xde23 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x8D6FA167DF0C9051 Responder cookie: 0x7367387F10126AA9 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 180 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 20 Nonce Data 0000 00 0c 29 e6 ad b9 00 01 02 46 6a 04 08 00 45 00 ..)......Fj...E. 0010 00 d0 00 33 00 00 40 11 3b 20 a5 e3 f9 86 a5 e3 ...3..@.; ...... 0020 f9 7c 01 f4 01 f4 00 bc de 23 8d 6f a1 67 df 0c .|.......#.o.g.. 0030 90 51 73 67 38 7f 10 12 6a a9 04 10 02 00 00 00 .Qsg8...j....... 0040 00 00 00 00 00 b4 0a 00 00 84 b9 89 1a 1a 60 48 ..............`H 0050 e9 4d 9a c8 9a 96 81 cb 31 52 46 16 e7 39 cc d5 .M......1RF..9.. 0060 5b 22 10 cd cb 31 65 2f 65 a7 85 5c 67 af 96 96 ["...1e/e..\g... 0070 bc f8 07 9d 63 69 01 0d 0e c2 d5 8d fe 95 51 cf ....ci........Q. 0080 c1 ac 7a bf ef d4 10 48 b6 c1 c8 3b 25 a1 5a 2d ..z....H...;%.Z- 0090 3b 9e 91 0f 32 6c c7 30 75 77 70 87 b9 27 2d ca ;...2l.0uwp..'-. 00a0 05 e5 1d 5a e0 6a f1 4b e0 da 3b 30 66 80 e6 f5 ...Z.j.K..;0f... 00b0 dc e5 9b 1d 6e 9b ca e6 d2 0c 83 f9 b6 d8 0b 8c ....n........... 00c0 7f 36 8a 0b 98 74 e8 f9 04 50 00 00 00 14 f6 d9 .6...t...P...... 00d0 0f 2f 09 7d 23 31 b7 b6 e2 b2 b7 e1 19 37 52 0c ./.}#1.......7R. 00e0 ac 7a .z Frame 5 (122 bytes on wire, 122 bytes captured) Arrival Time: Dec 6, 2004 11:44:08.078162000 Time delta from previous packet: 0.008678000 seconds Time since reference or first frame: 0.626595000 seconds Frame Number: 5 Packet Length: 122 bytes Capture Length: 122 bytes Ethernet II, Src: 00:0c:29:e6:ad:b9, Dst: 00:01:02:46:6a:04 Destination: 00:01:02:46:6a:04 (00:01:02:46:6a:04) Source: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Type: IP (0x0800) Frame check sequence: 0xcadabd5e (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.134 (165.227.249.134) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 104 Identification: 0x006d (109) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3b4e (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.134 (165.227.249.134) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 84 Checksum: 0x9911 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x8D6FA167DF0C9051 Responder cookie: 0x7367387F10126AA9 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 76 Encrypted payload (48 bytes) 0000 00 01 02 46 6a 04 00 0c 29 e6 ad b9 08 00 45 00 ...Fj...).....E. 0010 00 68 00 6d 00 00 40 11 3b 4e a5 e3 f9 7c a5 e3 .h.m..@.;N...|.. 0020 f9 86 01 f4 01 f4 00 54 99 11 8d 6f a1 67 df 0c .......T...o.g.. 0030 90 51 73 67 38 7f 10 12 6a a9 05 10 02 01 00 00 .Qsg8...j....... 0040 00 00 00 00 00 4c b0 61 49 51 aa e4 4e a5 55 dd .....L.aIQ..N.U. 0050 df 34 d6 14 0e c9 15 18 b1 98 ab 02 b8 c1 8a b7 .4.............. 0060 35 4f 5d 9f f3 58 6c 8d 32 0b ef 67 64 59 3d 34 5O]..Xl.2..gdY=4 0070 46 68 6e 48 2a 6d ca da bd 5e FhnH*m...^ Frame 6 (114 bytes on wire, 114 bytes captured) Arrival Time: Dec 6, 2004 11:44:08.144108000 Time delta from previous packet: 0.065946000 seconds Time since reference or first frame: 0.692541000 seconds Frame Number: 6 Packet Length: 114 bytes Capture Length: 114 bytes Ethernet II, Src: 00:01:02:46:6a:04, Dst: 00:0c:29:e6:ad:b9 Destination: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Source: 00:01:02:46:6a:04 (00:01:02:46:6a:04) Type: IP (0x0800) Frame check sequence: 0x1ebf4358 (correct) Internet Protocol, Src Addr: 165.227.249.134 (165.227.249.134), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0x0035 (53) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3b8e (correct) Source: 165.227.249.134 (165.227.249.134) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 76 Checksum: 0x7410 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x8D6FA167DF0C9051 Responder cookie: 0x7367387F10126AA9 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 68 Encrypted payload (40 bytes) 0000 00 0c 29 e6 ad b9 00 01 02 46 6a 04 08 00 45 00 ..)......Fj...E. 0010 00 60 00 35 00 00 40 11 3b 8e a5 e3 f9 86 a5 e3 .`.5..@.;....... 0020 f9 7c 01 f4 01 f4 00 4c 74 10 8d 6f a1 67 df 0c .|.....Lt..o.g.. 0030 90 51 73 67 38 7f 10 12 6a a9 05 10 02 01 00 00 .Qsg8...j....... 0040 00 00 00 00 00 44 ea 12 91 b2 e4 91 1a ad 76 dc .....D........v. 0050 77 1f db d2 11 99 f9 e9 e5 15 2c 72 3a e5 93 68 w.........,r:..h 0060 d7 85 f9 81 aa 77 ed 39 f3 49 34 94 bb a2 1e bf .....w.9.I4..... 0070 43 58 CX Frame 7 (338 bytes on wire, 338 bytes captured) Arrival Time: Dec 6, 2004 11:44:08.153136000 Time delta from previous packet: 0.009028000 seconds Time since reference or first frame: 0.701569000 seconds Frame Number: 7 Packet Length: 338 bytes Capture Length: 338 bytes Ethernet II, Src: 00:0c:29:e6:ad:b9, Dst: 00:01:02:46:6a:04 Destination: 00:01:02:46:6a:04 (00:01:02:46:6a:04) Source: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Type: IP (0x0800) Frame check sequence: 0x6d814931 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.134 (165.227.249.134) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 320 Identification: 0x006e (110) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3a75 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.134 (165.227.249.134) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 300 Checksum: 0xbb91 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x8D6FA167DF0C9051 Responder cookie: 0x7367387F10126AA9 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xD72C05FB Length: 292 Encrypted payload (264 bytes) 0000 00 01 02 46 6a 04 00 0c 29 e6 ad b9 08 00 45 00 ...Fj...).....E. 0010 01 40 00 6e 00 00 40 11 3a 75 a5 e3 f9 7c a5 e3 .@.n..@.:u...|.. 0020 f9 86 01 f4 01 f4 01 2c bb 91 8d 6f a1 67 df 0c .......,...o.g.. 0030 90 51 73 67 38 7f 10 12 6a a9 08 10 20 01 d7 2c .Qsg8...j... .., 0040 05 fb 00 00 01 24 d3 c6 2a d0 18 64 7c 7d d0 f6 .....$..*..d|}.. 0050 27 f3 f0 3b 1d ce 37 e0 7b 3e 24 19 a3 c3 da 68 '..;..7.{>$....h 0060 cf d8 3b ad b3 89 00 90 cf de 99 c0 26 8d e6 df ..;.........&... 0070 9c 16 2f c6 24 86 29 d7 98 34 c4 be b8 00 8f d4 ../.$.)..4...... 0080 0b b0 6e b7 b0 52 96 04 c4 74 dc e7 e8 e6 91 a3 ..n..R...t...... 0090 9a ec f7 2c 06 58 83 13 e9 8f 41 99 ac 93 3a e8 ...,.X....A...:. 00a0 08 4c b9 dc fb 29 62 01 8c fa 07 a9 d7 98 ab 92 .L...)b......... 00b0 89 80 a4 2a 32 03 8c 07 3a 5e 35 d2 4d 17 7b 90 ...*2...:^5.M.{. 00c0 69 c5 d4 e0 0f 42 70 12 5a 25 25 dc 52 9b 84 34 i....Bp.Z%%.R..4 00d0 c6 50 d6 a8 19 9c 47 43 9b be 2c f6 92 0f 0c 8a .P....GC..,..... 00e0 52 fe 56 6a 70 31 36 b0 a2 f2 bf 49 a0 8e ab 18 R.Vjp16....I.... 00f0 dd 9a a6 94 aa 37 d6 e4 f3 26 ff 2f ca e6 31 e8 .....7...&./..1. 0100 15 a2 a9 0f 44 77 e0 54 1e d9 b6 06 ec 3c b8 b1 ....Dw.T.....<.. 0110 73 f5 bc 5b 77 a3 43 40 fc 5b d0 fa e4 bc 3f c5 s..[w.C@.[....?. 0120 6e d0 ee 93 33 87 9e 85 aa 85 08 37 dd 19 6c a1 n...3......7..l. 0130 a1 93 3e 78 02 d7 54 7d b9 3f e2 fa b9 9b f9 27 ..>x..T}.?.....' 0140 2c d9 a5 0e bb 3a 88 82 84 c4 12 d0 e1 ac 6d 81 ,....:........m. 0150 49 31 I1 Frame 8 (338 bytes on wire, 338 bytes captured) Arrival Time: Dec 6, 2004 11:44:08.664491000 Time delta from previous packet: 0.511355000 seconds Time since reference or first frame: 1.212924000 seconds Frame Number: 8 Packet Length: 338 bytes Capture Length: 338 bytes Ethernet II, Src: 00:0c:29:e6:ad:b9, Dst: 00:01:02:46:6a:04 Destination: 00:01:02:46:6a:04 (00:01:02:46:6a:04) Source: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Type: IP (0x0800) Frame check sequence: 0x2402beb4 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.134 (165.227.249.134) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 320 Identification: 0x006f (111) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3a74 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.134 (165.227.249.134) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 300 Checksum: 0xbb91 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x8D6FA167DF0C9051 Responder cookie: 0x7367387F10126AA9 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xD72C05FB Length: 292 Encrypted payload (264 bytes) 0000 00 01 02 46 6a 04 00 0c 29 e6 ad b9 08 00 45 00 ...Fj...).....E. 0010 01 40 00 6f 00 00 40 11 3a 74 a5 e3 f9 7c a5 e3 .@.o..@.:t...|.. 0020 f9 86 01 f4 01 f4 01 2c bb 91 8d 6f a1 67 df 0c .......,...o.g.. 0030 90 51 73 67 38 7f 10 12 6a a9 08 10 20 01 d7 2c .Qsg8...j... .., 0040 05 fb 00 00 01 24 d3 c6 2a d0 18 64 7c 7d d0 f6 .....$..*..d|}.. 0050 27 f3 f0 3b 1d ce 37 e0 7b 3e 24 19 a3 c3 da 68 '..;..7.{>$....h 0060 cf d8 3b ad b3 89 00 90 cf de 99 c0 26 8d e6 df ..;.........&... 0070 9c 16 2f c6 24 86 29 d7 98 34 c4 be b8 00 8f d4 ../.$.)..4...... 0080 0b b0 6e b7 b0 52 96 04 c4 74 dc e7 e8 e6 91 a3 ..n..R...t...... 0090 9a ec f7 2c 06 58 83 13 e9 8f 41 99 ac 93 3a e8 ...,.X....A...:. 00a0 08 4c b9 dc fb 29 62 01 8c fa 07 a9 d7 98 ab 92 .L...)b......... 00b0 89 80 a4 2a 32 03 8c 07 3a 5e 35 d2 4d 17 7b 90 ...*2...:^5.M.{. 00c0 69 c5 d4 e0 0f 42 70 12 5a 25 25 dc 52 9b 84 34 i....Bp.Z%%.R..4 00d0 c6 50 d6 a8 19 9c 47 43 9b be 2c f6 92 0f 0c 8a .P....GC..,..... 00e0 52 fe 56 6a 70 31 36 b0 a2 f2 bf 49 a0 8e ab 18 R.Vjp16....I.... 00f0 dd 9a a6 94 aa 37 d6 e4 f3 26 ff 2f ca e6 31 e8 .....7...&./..1. 0100 15 a2 a9 0f 44 77 e0 54 1e d9 b6 06 ec 3c b8 b1 ....Dw.T.....<.. 0110 73 f5 bc 5b 77 a3 43 40 fc 5b d0 fa e4 bc 3f c5 s..[w.C@.[....?. 0120 6e d0 ee 93 33 87 9e 85 aa 85 08 37 dd 19 6c a1 n...3......7..l. 0130 a1 93 3e 78 02 d7 54 7d b9 3f e2 fa b9 9b f9 27 ..>x..T}.?.....' 0140 2c d9 a5 0e bb 3a 88 82 84 c4 12 d0 e1 ac 24 02 ,....:........$. 0150 be b4 .. Frame 9 (338 bytes on wire, 338 bytes captured) Arrival Time: Dec 6, 2004 11:44:08.738307000 Time delta from previous packet: 0.073816000 seconds Time since reference or first frame: 1.286740000 seconds Frame Number: 9 Packet Length: 338 bytes Capture Length: 338 bytes Ethernet II, Src: 00:01:02:46:6a:04, Dst: 00:0c:29:e6:ad:b9 Destination: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Source: 00:01:02:46:6a:04 (00:01:02:46:6a:04) Type: IP (0x0800) Frame check sequence: 0xdf1719ff (correct) Internet Protocol, Src Addr: 165.227.249.134 (165.227.249.134), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 320 Identification: 0x0037 (55) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3aac (correct) Source: 165.227.249.134 (165.227.249.134) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 300 Checksum: 0x927b (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x8D6FA167DF0C9051 Responder cookie: 0x7367387F10126AA9 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xD72C05FB Length: 292 Encrypted payload (264 bytes) 0000 00 0c 29 e6 ad b9 00 01 02 46 6a 04 08 00 45 00 ..)......Fj...E. 0010 01 40 00 37 00 00 40 11 3a ac a5 e3 f9 86 a5 e3 .@.7..@.:....... 0020 f9 7c 01 f4 01 f4 01 2c 92 7b 8d 6f a1 67 df 0c .|.....,.{.o.g.. 0030 90 51 73 67 38 7f 10 12 6a a9 08 10 20 01 d7 2c .Qsg8...j... .., 0040 05 fb 00 00 01 24 05 95 5b 2c fe 2e 31 70 29 c4 .....$..[,..1p). 0050 2d 24 3e bb 0a be a6 77 f8 76 bb 57 57 d2 24 e4 -$>....w.v.WW.$. 0060 89 cd ef 98 07 f9 a0 82 81 b3 0e ac ea 71 f0 cc .............q.. 0070 ae 9f f7 ff 3a 11 18 29 6e dd 8f f8 55 ec e4 d7 ....:..)n...U... 0080 48 ef 58 88 c4 7e 73 d0 c4 f8 3c 09 df d2 74 9a H.X..~s...<...t. 0090 a1 bf d4 f7 27 e8 49 0a 93 4a 74 d7 99 93 b1 db ....'.I..Jt..... 00a0 66 bd 9e 6c a8 f8 30 36 04 23 cf f7 ec a3 a7 d6 f..l..06.#...... 00b0 d7 d3 d9 90 16 c5 d2 15 74 ff b0 ad 26 fd e3 01 ........t...&... 00c0 d3 85 36 de cf 01 96 e1 80 47 ce 6a 10 1c df 9c ..6......G.j.... 00d0 02 a2 09 1a b5 30 f8 4b 6f b7 89 6a 88 4b 28 70 .....0.Ko..j.K(p 00e0 08 66 31 63 4d 44 c8 0a 03 d8 bb 4c 47 b3 ee 7d .f1cMD.....LG..} 00f0 7b 76 f4 e1 2b 8f 49 93 8f da a1 91 9b 7f 14 8b {v..+.I......... 0100 25 cf 53 dc 15 51 7d 5a 65 22 6c a2 72 19 80 7f %.S..Q}Ze"l.r... 0110 e0 25 13 16 8f 22 68 5d 17 aa a8 fd b8 9c 66 74 .%..."h]......ft 0120 2b 69 d6 19 70 45 20 72 94 49 dc b5 79 5f ea 66 +i..pE r.I..y_.f 0130 47 cc d9 4f b3 48 4c 08 f4 1b 8c ef d4 5c a9 8b G..O.HL......\.. 0140 6f b4 d8 07 55 3b e0 69 a6 9c c8 4d ef 33 df 17 o...U;.i...M.3.. 0150 19 ff .. Frame 10 (98 bytes on wire, 98 bytes captured) Arrival Time: Dec 6, 2004 11:44:08.747855000 Time delta from previous packet: 0.009548000 seconds Time since reference or first frame: 1.296288000 seconds Frame Number: 10 Packet Length: 98 bytes Capture Length: 98 bytes Ethernet II, Src: 00:0c:29:e6:ad:b9, Dst: 00:01:02:46:6a:04 Destination: 00:01:02:46:6a:04 (00:01:02:46:6a:04) Source: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Type: IP (0x0800) Frame check sequence: 0xa2afc038 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.134 (165.227.249.134) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 80 Identification: 0x0070 (112) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3b63 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.134 (165.227.249.134) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 60 Checksum: 0x21b8 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x8D6FA167DF0C9051 Responder cookie: 0x7367387F10126AA9 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xD72C05FB Length: 52 Encrypted payload (24 bytes) 0000 00 01 02 46 6a 04 00 0c 29 e6 ad b9 08 00 45 00 ...Fj...).....E. 0010 00 50 00 70 00 00 40 11 3b 63 a5 e3 f9 7c a5 e3 .P.p..@.;c...|.. 0020 f9 86 01 f4 01 f4 00 3c 21 b8 8d 6f a1 67 df 0c ........j.*..Y$..D..D 0050 48 d1 71 27 6c 55 d4 8f c8 b6 c0 70 40 af bd e0 H.q'lU.....p@... 0060 68 5f 4c 7e 4f 61 25 d8 78 6b 3a de c5 47 33 8e h_L~Oa%.xk:..G3. 0070 75 35 1a 24 a9 34 44 0f 96 2b f1 62 ef a9 29 c9 u5.$.4D..+.b..). 0080 6f e1 ec bc 0a 63 d3 45 93 d4 b3 e4 57 4d 5f 9f o....c.E....WM_. 0090 cc bb d5 2d 31 bf 22 0e d2 c4 ...-1."... Frame 12 (154 bytes on wire, 154 bytes captured) Arrival Time: Dec 6, 2004 11:44:09.438409000 Time delta from previous packet: 0.401769000 seconds Time since reference or first frame: 1.986842000 seconds Frame Number: 12 Packet Length: 154 bytes Capture Length: 154 bytes Ethernet II, Src: 00:0c:29:e6:ad:b9, Dst: 00:01:02:46:6a:04 Destination: 00:01:02:46:6a:04 (00:01:02:46:6a:04) Source: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Type: IP (0x0800) Frame check sequence: 0x89f06c1e (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.134 (165.227.249.134) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 136 Identification: 0x002d (45) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b4c (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.134 (165.227.249.134) Encapsulating Security Payload SPI: 0x00002827 Sequence: 3 Data (108 bytes) 0000 00 01 02 46 6a 04 00 0c 29 e6 ad b9 08 00 45 00 ...Fj...).....E. 0010 00 88 00 2d 00 00 f0 32 8b 4c a5 e3 f9 7c a5 e3 ...-...2.L...|.. 0020 f9 86 00 00 28 27 00 00 00 03 07 f1 80 e3 b0 c1 ....('.......... 0030 4f 31 d0 3e e6 28 76 03 27 a3 31 c6 19 66 ca 2e O1.>.(v.'.1..f.. 0040 bb 9a 28 7f e2 d2 cf f7 c8 ba 12 3d 93 80 e2 62 ..(........=...b 0050 c5 f5 00 56 52 a4 57 ee f1 4d b1 67 e9 79 a5 47 ...VR.W..M.g.y.G 0060 36 f8 b4 c1 32 c3 fb bc e8 16 7d d2 0a cd 2e e7 6...2.....}..... 0070 14 fa eb a5 e3 39 d2 31 20 0b ab a1 51 9b cf 79 .....9.1 ...Q..y 0080 9b 64 19 8f b3 ed e4 f2 4c 98 56 d8 b1 57 da 8e .d......L.V..W.. 0090 17 d9 2f 66 60 de 89 f0 6c 1e ../f`...l. Frame 13 (154 bytes on wire, 154 bytes captured) Arrival Time: Dec 6, 2004 11:44:10.429992000 Time delta from previous packet: 0.991583000 seconds Time since reference or first frame: 2.978425000 seconds Frame Number: 13 Packet Length: 154 bytes Capture Length: 154 bytes Ethernet II, Src: 00:0c:29:e6:ad:b9, Dst: 00:01:02:46:6a:04 Destination: 00:01:02:46:6a:04 (00:01:02:46:6a:04) Source: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Type: IP (0x0800) Frame check sequence: 0x9b2d8c88 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.134 (165.227.249.134) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 136 Identification: 0x002e (46) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b4b (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.134 (165.227.249.134) Encapsulating Security Payload SPI: 0x00002827 Sequence: 4 Data (108 bytes) 0000 00 01 02 46 6a 04 00 0c 29 e6 ad b9 08 00 45 00 ...Fj...).....E. 0010 00 88 00 2e 00 00 f0 32 8b 4b a5 e3 f9 7c a5 e3 .......2.K...|.. 0020 f9 86 00 00 28 27 00 00 00 04 1e 1c e9 56 df d5 ....('.......V.. 0030 86 55 2f b7 7a 89 55 69 da 43 76 d0 94 32 2b 0b .U/.z.Ui.Cv..2+. 0040 4a f2 bb 34 c6 56 15 e4 60 a8 03 e0 db 20 a2 d6 J..4.V..`.... .. 0050 fd 31 ec 93 28 23 58 7d f4 18 d6 2a 4c 55 b0 fc .1..(#X}...*LU.. 0060 ad 5e df 56 04 a4 30 a0 6d 66 81 90 3d e3 71 c1 .^.V..0.mf..=.q. 0070 69 91 79 69 70 12 e6 62 0e 1f 4b 33 56 2a 0c 80 i.yip..b..K3V*.. 0080 99 e0 89 2c cd 72 11 01 8c fe f4 02 0e d6 f3 b2 ...,.r.......... 0090 12 4b c1 b5 b1 78 9b 2d 8c 88 .K...x.-.. Frame 14 (154 bytes on wire, 154 bytes captured) Arrival Time: Dec 6, 2004 11:44:10.431116000 Time delta from previous packet: 0.001124000 seconds Time since reference or first frame: 2.979549000 seconds Frame Number: 14 Packet Length: 154 bytes Capture Length: 154 bytes Ethernet II, Src: 00:01:02:46:6a:04, Dst: 00:0c:29:e6:ad:b9 Destination: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Source: 00:01:02:46:6a:04 (00:01:02:46:6a:04) Type: IP (0x0800) Frame check sequence: 0x25021e81 (correct) Internet Protocol, Src Addr: 165.227.249.134 (165.227.249.134), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 136 Identification: 0x0039 (57) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 32 Protocol: ESP (0x32) Header checksum: 0x5b41 (correct) Source: 165.227.249.134 (165.227.249.134) Destination: 165.227.249.124 (165.227.249.124) Encapsulating Security Payload SPI: 0x558ec245 Sequence: 1 Data (108 bytes) 0000 00 0c 29 e6 ad b9 00 01 02 46 6a 04 08 00 45 00 ..)......Fj...E. 0010 00 88 00 39 00 00 20 32 5b 41 a5 e3 f9 86 a5 e3 ...9.. 2[A...... 0020 f9 7c 55 8e c2 45 00 00 00 01 6f 8f 30 60 64 a5 .|U..E....o.0`d. 0030 77 3f f8 bd 4e de 2c e9 4e 24 b8 8a 5b a8 32 2d w?..N.,.N$..[.2- 0040 ec ea 13 de 2b 63 b2 05 8f 13 23 68 1b 36 b2 94 ....+c....#h.6.. 0050 a9 0c 72 5b 02 d5 3b f4 7f 4f 73 cf a0 21 33 79 ..r[..;..Os..!3y 0060 69 3b 34 0a 93 25 4c ca 36 ff c0 9d cc e3 04 20 i;4..%L.6...... 0070 91 15 0a a0 cb 55 1c cf fb 40 e0 03 15 11 8f d1 .....U...@...... 0080 3c 1d 9a 08 6d b6 05 17 38 29 83 e4 30 dd a6 84 <...m...8)..0... 0090 81 38 27 54 36 46 25 02 1e 81 .8'T6F%...