Frame 1 (270 bytes on wire, 270 bytes captured) Arrival Time: Mar 19, 2004 16:29:35.759875000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 270 bytes Capture Length: 270 bytes Ethernet II, Src: 00:0a:e6:4b:41:10, Dst: 00:50:73:60:0d:41 Destination: 00:50:73:60:0d:41 (00:50:73:60:0d:41) Source: 00:0a:e6:4b:41:10 (00:0a:e6:4b:41:10) Type: IP (0x0800) Frame check sequence: 0x62ea66be (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.118 (165.227.249.118) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 252 Identification: 0x007f (127) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3ab8 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.118 (165.227.249.118) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 232 Checksum: 0x549f (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xFD98D083027FA42C Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 224 Security Association payload Next payload: Vendor ID (13) Length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 0 Next payload: NONE (0) Length: 44 Proposal number: 0 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 0 Next payload: NONE (0) Length: 36 Transform number: 0 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): AES-CBC (7) Key-Length (14): Key-Length (128) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: unknown vendor ID: 0x8F9CC94E01248ECDF147594C284B213B Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-stenberg-ipsec-nat-traversal-01 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-stenberg-ipsec-nat-traversal-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-03 0000 00 50 73 60 0d 41 00 0a e6 4b 41 10 08 00 45 00 .Ps`.A...KA...E. 0010 00 fc 00 7f 00 00 40 11 3a b8 a5 e3 f9 7c a5 e3 ......@.:....|.. 0020 f9 76 01 f4 01 f4 00 e8 54 9f fd 98 d0 83 02 7f .v......T....... 0030 a4 2c 00 00 00 00 00 00 00 00 01 10 02 00 00 00 .,.............. 0040 00 00 00 00 00 e0 0d 00 00 38 00 00 00 01 00 00 .........8...... 0050 00 01 00 00 00 2c 00 01 00 01 00 00 00 24 00 01 .....,.......$.. 0060 00 00 80 01 00 07 80 0e 00 80 80 02 00 02 80 03 ................ 0070 00 01 80 04 00 02 80 0b 00 01 80 0c 70 80 0d 00 ............p... 0080 00 14 8f 9c c9 4e 01 24 8e cd f1 47 59 4c 28 4b .....N.$...GYL(K 0090 21 3b 0d 00 00 14 27 ba b5 dc 01 ea 07 60 ea 4e !;....'......`.N 00a0 31 90 ac 27 c0 d0 0d 00 00 14 61 05 c4 22 e7 68 1..'......a..".h 00b0 47 e4 3f 96 84 80 12 92 ae cd 0d 00 00 14 44 85 G.?...........D. 00c0 15 2d 18 b6 bb cd 0b e8 a8 46 95 79 dd cc 0d 00 .-.......F.y.... 00d0 00 14 cd 60 46 43 35 df 21 f8 7c fd b2 fc 68 b6 ...`FC5.!.|...h. 00e0 a4 48 0d 00 00 14 90 cb 80 91 3e bb 69 6e 08 63 .H........>.in.c 00f0 81 b5 ec 42 7b 1f 00 00 00 14 7d 94 19 a6 53 10 ...B{.....}...S. 0100 ca 6f 2c 17 9d 92 15 52 9d 56 62 ea 66 be .o,....R.Vb.f. Frame 2 (150 bytes on wire, 150 bytes captured) Arrival Time: Mar 19, 2004 16:29:35.900978000 Time delta from previous packet: 0.141103000 seconds Time since reference or first frame: 0.141103000 seconds Frame Number: 2 Packet Length: 150 bytes Capture Length: 150 bytes Ethernet II, Src: 00:50:73:60:0d:41, Dst: 00:0a:e6:4b:41:10 Destination: 00:0a:e6:4b:41:10 (00:0a:e6:4b:41:10) Source: 00:50:73:60:0d:41 (00:50:73:60:0d:41) Type: IP (0x0800) Frame check sequence: 0xe248dc6e (correct) Internet Protocol, Src Addr: 165.227.249.118 (165.227.249.118), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 132 Identification: 0x004f (79) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: UDP (0x11) Header checksum: 0x7c5f (correct) Source: 165.227.249.118 (165.227.249.118) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 112 Checksum: 0x71d0 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xFD98D083027FA42C Responder cookie: 0x9C7C705A7FFE1397 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 104 Security Association payload Next payload: Vendor ID (13) Length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 44 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 36 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): AES-CBC (7) Key-Length (14): Key-Length (128) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-03 0000 00 0a e6 4b 41 10 00 50 73 60 0d 41 08 00 45 00 ...KA..Ps`.A..E. 0010 00 84 00 4f 00 00 ff 11 7c 5f a5 e3 f9 76 a5 e3 ...O....|_...v.. 0020 f9 7c 01 f4 01 f4 00 70 71 d0 fd 98 d0 83 02 7f .|.....pq....... 0030 a4 2c 9c 7c 70 5a 7f fe 13 97 01 10 02 00 00 00 .,.|pZ.......... 0040 00 00 00 00 00 68 0d 00 00 38 00 00 00 01 00 00 .....h...8...... 0050 00 01 00 00 00 2c 01 01 00 01 00 00 00 24 01 01 .....,.......$.. 0060 00 00 80 01 00 07 80 0e 00 80 80 02 00 02 80 04 ................ 0070 00 02 80 03 00 01 80 0b 00 01 80 0c 70 80 00 00 ............p... 0080 00 14 7d 94 19 a6 53 10 ca 6f 2c 17 9d 92 15 52 ..}...S..o,....R 0090 9d 56 e2 48 dc 6e .V.H.n Frame 3 (274 bytes on wire, 274 bytes captured) Arrival Time: Mar 19, 2004 16:29:35.906442000 Time delta from previous packet: 0.005464000 seconds Time since reference or first frame: 0.146567000 seconds Frame Number: 3 Packet Length: 274 bytes Capture Length: 274 bytes Ethernet II, Src: 00:0a:e6:4b:41:10, Dst: 00:50:73:60:0d:41 Destination: 00:50:73:60:0d:41 (00:50:73:60:0d:41) Source: 00:0a:e6:4b:41:10 (00:0a:e6:4b:41:10) Type: IP (0x0800) Frame check sequence: 0xac786efd (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.118 (165.227.249.118) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 256 Identification: 0x0080 (128) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3ab3 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.118 (165.227.249.118) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 236 Checksum: 0x0832 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xFD98D083027FA42C Responder cookie: 0x9C7C705A7FFE1397 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 228 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: Private USE (130) Length: 20 Nonce Data Unknown payload type payload Next payload: Private USE (130) Length: 24 Payload Unknown payload type payload Next payload: NONE (0) Length: 24 Payload 0000 00 50 73 60 0d 41 00 0a e6 4b 41 10 08 00 45 00 .Ps`.A...KA...E. 0010 01 00 00 80 00 00 40 11 3a b3 a5 e3 f9 7c a5 e3 ......@.:....|.. 0020 f9 76 01 f4 01 f4 00 ec 08 32 fd 98 d0 83 02 7f .v.......2...... 0030 a4 2c 9c 7c 70 5a 7f fe 13 97 04 10 02 00 00 00 .,.|pZ.......... 0040 00 00 00 00 00 e4 0a 00 00 84 c4 5e 37 ce bd 96 ...........^7... 0050 fb 4b 69 1b 80 0b 51 b0 66 15 7c 6a ed 2d 5e ad .Ki...Q.f.|j.-^. 0060 2d 11 95 3f d5 77 a3 02 4f 5d f1 b5 21 cd 62 c7 -..?.w..O]..!.b. 0070 c1 98 28 83 69 a9 2b 2e dc 75 96 2d 6e f4 df 4a ..(.i.+..u.-n..J 0080 99 63 d8 af c0 41 80 8b e1 65 73 85 5e 19 93 95 .c...A...es.^... 0090 91 6a 7a 8e 88 da ad f2 05 8a 78 46 88 38 79 d5 .jz.......xF.8y. 00a0 f2 c8 1a 41 ef 17 e6 ec f1 8e f1 33 79 a6 28 24 ...A.......3y.($ 00b0 92 27 96 df c5 69 e7 1d d3 9b e7 f7 4a d0 c3 03 .'...i......J... 00c0 42 c6 69 09 a6 e6 92 9f ea c6 82 00 00 14 80 ae B.i............. 00d0 28 1d e5 82 b5 3b 3b b3 63 09 fd 57 39 4f 82 00 (....;;.c..W9O.. 00e0 00 18 a5 9f aa 6f 6e 87 06 e8 86 05 93 75 0d c2 .....on......u.. 00f0 53 a3 73 48 dc 7c 00 00 00 18 fa d5 bd 4a a7 21 S.sH.|.......J.! 0100 34 64 38 e4 72 3d 79 fb 14 94 24 b9 fb d0 ac 78 4d8.r=y...$....x 0110 6e fd n. Frame 4 (350 bytes on wire, 350 bytes captured) Arrival Time: Mar 19, 2004 16:29:36.052517000 Time delta from previous packet: 0.146075000 seconds Time since reference or first frame: 0.292642000 seconds Frame Number: 4 Packet Length: 350 bytes Capture Length: 350 bytes Ethernet II, Src: 00:50:73:60:0d:41, Dst: 00:0a:e6:4b:41:10 Destination: 00:0a:e6:4b:41:10 (00:0a:e6:4b:41:10) Source: 00:50:73:60:0d:41 (00:50:73:60:0d:41) Type: IP (0x0800) Frame check sequence: 0x56d3d3b1 (correct) Internet Protocol, Src Addr: 165.227.249.118 (165.227.249.118), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 332 Identification: 0x0050 (80) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: UDP (0x11) Header checksum: 0x7b96 (correct) Source: 165.227.249.118 (165.227.249.118) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 312 Checksum: 0xcc5a (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xFD98D083027FA42C Responder cookie: 0x9C7C705A7FFE1397 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 304 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: Vendor ID (13) Length: 24 Nonce Data Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: unknown vendor ID: 0x12F5F28C457168A9702D9FE274CC0100 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-dpd-00.txt Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: unknown vendor ID: 0x69BBD7477FFF1397FB880C422E13FAB2 Vendor ID payload Next payload: Private USE (130) Length: 12 Vendor ID: draft-beaulieu-ike-xauth-02.txt Unknown payload type payload Next payload: Private USE (130) Length: 24 Payload Unknown payload type payload Next payload: NONE (0) Length: 24 Payload 0000 00 0a e6 4b 41 10 00 50 73 60 0d 41 08 00 45 00 ...KA..Ps`.A..E. 0010 01 4c 00 50 00 00 ff 11 7b 96 a5 e3 f9 76 a5 e3 .L.P....{....v.. 0020 f9 7c 01 f4 01 f4 01 38 cc 5a fd 98 d0 83 02 7f .|.....8.Z...... 0030 a4 2c 9c 7c 70 5a 7f fe 13 97 04 10 02 00 00 00 .,.|pZ.......... 0040 00 00 00 00 01 30 0a 00 00 84 f4 0e a7 35 39 d5 .....0.......59. 0050 9b 52 17 4a 85 dc a4 a5 f6 2f 42 0c b4 4d e6 15 .R.J...../B..M.. 0060 4e b3 f5 8a 89 68 81 ee c9 d0 a2 1e fa 6d 3c 6c N....h.......m..."4/ 0070 39 de de 80 4e 0b 7f 5e 90 dc 9...N..^.. Frame 6 (122 bytes on wire, 122 bytes captured) Arrival Time: Mar 19, 2004 16:29:36.065558000 Time delta from previous packet: 0.007480000 seconds Time since reference or first frame: 0.305683000 seconds Frame Number: 6 Packet Length: 122 bytes Capture Length: 122 bytes Ethernet II, Src: 00:50:73:60:0d:41, Dst: 00:0a:e6:4b:41:10 Destination: 00:0a:e6:4b:41:10 (00:0a:e6:4b:41:10) Source: 00:50:73:60:0d:41 (00:50:73:60:0d:41) Type: IP (0x0800) Frame check sequence: 0x88cbe3fe (correct) Internet Protocol, Src Addr: 165.227.249.118 (165.227.249.118), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 104 Identification: 0x0051 (81) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: UDP (0x11) Header checksum: 0x7c79 (correct) Source: 165.227.249.118 (165.227.249.118) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 84 Checksum: 0xb009 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xFD98D083027FA42C Responder cookie: 0x9C7C705A7FFE1397 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 76 Encrypted payload (48 bytes) 0000 00 0a e6 4b 41 10 00 50 73 60 0d 41 08 00 45 00 ...KA..Ps`.A..E. 0010 00 68 00 51 00 00 ff 11 7c 79 a5 e3 f9 76 a5 e3 .h.Q....|y...v.. 0020 f9 7c 01 f4 01 f4 00 54 b0 09 fd 98 d0 83 02 7f .|.....T........ 0030 a4 2c 9c 7c 70 5a 7f fe 13 97 05 10 02 01 00 00 .,.|pZ.......... 0040 00 00 00 00 00 4c aa 62 28 0f d7 66 a0 52 32 3f .....L.b(..f.R2? 0050 71 00 0f 6f ab cd af cf 0d 71 1a 8f 0c 2d c5 83 q..o.....q...-.. 0060 bc 7e e6 28 7f 30 b1 1d bd 9b 1a b3 b4 6f c0 55 .~.(.0.......o.U 0070 0a d6 85 8c ed 72 88 cb e3 fe .....r.... Frame 7 (346 bytes on wire, 346 bytes captured) Arrival Time: Mar 19, 2004 16:29:36.072145000 Time delta from previous packet: 0.006587000 seconds Time since reference or first frame: 0.312270000 seconds Frame Number: 7 Packet Length: 346 bytes Capture Length: 346 bytes Ethernet II, Src: 00:0a:e6:4b:41:10, Dst: 00:50:73:60:0d:41 Destination: 00:50:73:60:0d:41 (00:50:73:60:0d:41) Source: 00:0a:e6:4b:41:10 (00:0a:e6:4b:41:10) Type: IP (0x0800) Frame check sequence: 0x3c7732d1 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.118 (165.227.249.118) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 328 Identification: 0x0082 (130) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3a69 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.118 (165.227.249.118) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 308 Checksum: 0xc65a (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xFD98D083027FA42C Responder cookie: 0x9C7C705A7FFE1397 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xE0063510 Length: 300 Encrypted payload (272 bytes) 0000 00 50 73 60 0d 41 00 0a e6 4b 41 10 08 00 45 00 .Ps`.A...KA...E. 0010 01 48 00 82 00 00 40 11 3a 69 a5 e3 f9 7c a5 e3 .H....@.:i...|.. 0020 f9 76 01 f4 01 f4 01 34 c6 5a fd 98 d0 83 02 7f .v.....4.Z...... 0030 a4 2c 9c 7c 70 5a 7f fe 13 97 08 10 20 01 e0 06 .,.|pZ...... ... 0040 35 10 00 00 01 2c 26 db d8 98 b1 99 32 fb 11 6a 5....,&.....2..j 0050 f9 00 3a f4 7e bc 05 4f 8a 15 c0 78 f8 a7 8d 2e ..:.~..O...x.... 0060 37 79 25 3a b9 51 9b 67 e0 19 70 f4 85 1e 8f 5c 7y%:.Q.g..p....\ 0070 7a 68 91 26 ae e9 4c e7 32 75 f9 51 74 49 9a 80 zh.&..L.2u.QtI.. 0080 b9 d4 78 35 5e af 25 df 1a 1f 2e 5d 40 a2 c0 65 ..x5^.%....]@..e 0090 90 ea 51 cb 4f f6 6a ba d5 a5 d4 95 3b 97 85 e5 ..Q.O.j.....;... 00a0 89 85 e1 cc dd 5f 92 ac 32 02 47 0e 3e f2 09 f5 ....._..2.G.>... 00b0 33 60 3b 87 4d 2c ea 97 ae 87 9b cb 48 17 13 3e 3`;.M,......H..> 00c0 0f 50 4b f6 b5 a2 dc 1f 44 7e fd c1 01 64 12 17 .PK.....D~...d.. 00d0 0c d8 aa 6c 04 54 5b af 5f 6e 73 94 c0 a7 e4 b4 ...l.T[._ns..... 00e0 40 61 de de 18 f1 a3 31 7d 75 eb 4e 93 e7 bb 20 @a.....1}u.N... 00f0 34 5d 5a fe 8b 20 ad 6d f1 c3 54 02 04 bf 2f 53 4]Z.. .m..T.../S 0100 00 58 a1 7a 79 45 dd 90 d6 f0 87 df fd bd 37 45 .X.zyE........7E 0110 30 5a 1d 69 65 18 9e 3f f4 bb 81 3d 55 d4 02 c0 0Z.ie..?...=U... 0120 49 14 ec b3 41 fa 2d b1 30 a6 ee 03 01 5f dd 49 I...A.-.0...._.I 0130 d8 f3 53 5d a7 e1 e6 7a 52 64 da e0 f4 ff a7 da ..S]...zRd...... 0140 2f af 2d 35 9b 45 92 a0 33 d7 78 ae 97 7c 6e 64 /.-5.E..3.x..|nd 0150 d8 06 fc ed 4a 1b 3c 77 32 d1 ....J.... 00b0 33 60 3b 87 4d 2c ea 97 ae 87 9b cb 48 17 13 3e 3`;.M,......H..> 00c0 0f 50 4b f6 b5 a2 dc 1f 44 7e fd c1 01 64 12 17 .PK.....D~...d.. 00d0 0c d8 aa 6c 04 54 5b af 5f 6e 73 94 c0 a7 e4 b4 ...l.T[._ns..... 00e0 40 61 de de 18 f1 a3 31 7d 75 eb 4e 93 e7 bb 20 @a.....1}u.N... 00f0 34 5d 5a fe 8b 20 ad 6d f1 c3 54 02 04 bf 2f 53 4]Z.. .m..T.../S 0100 00 58 a1 7a 79 45 dd 90 d6 f0 87 df fd bd 37 45 .X.zyE........7E 0110 30 5a 1d 69 65 18 9e 3f f4 bb 81 3d 55 d4 02 c0 0Z.ie..?...=U... 0120 49 14 ec b3 41 fa 2d b1 30 a6 ee 03 01 5f dd 49 I...A.-.0...._.I 0130 d8 f3 53 5d a7 e1 e6 7a 52 64 da e0 f4 ff a7 da ..S]...zRd...... 0140 2f af 2d 35 9b 45 92 a0 33 d7 78 ae 97 7c 6e 64 /.-5.E..3.x..|nd 0150 d8 06 fc ed 4a 1b d6 48 8f 2f ....J..H./ Frame 9 (378 bytes on wire, 378 bytes captured) Arrival Time: Mar 19, 2004 16:29:36.599073000 Time delta from previous packet: 0.023504000 seconds Time since reference or first frame: 0.839198000 seconds Frame Number: 9 Packet Length: 378 bytes Capture Length: 378 bytes Ethernet II, Src: 00:50:73:60:0d:41, Dst: 00:0a:e6:4b:41:10 Destination: 00:0a:e6:4b:41:10 (00:0a:e6:4b:41:10) Source: 00:50:73:60:0d:41 (00:50:73:60:0d:41) Type: IP (0x0800) Frame check sequence: 0xff4508e8 (correct) Internet Protocol, Src Addr: 165.227.249.118 (165.227.249.118), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 360 Identification: 0x0052 (82) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: UDP (0x11) Header checksum: 0x7b78 (correct) Source: 165.227.249.118 (165.227.249.118) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 340 Checksum: 0x9d06 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xFD98D083027FA42C Responder cookie: 0x9C7C705A7FFE1397 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xE0063510 Length: 332 Encrypted payload (304 bytes) 0000 00 0a e6 4b 41 10 00 50 73 60 0d 41 08 00 45 00 ...KA..Ps`.A..E. 0010 01 68 00 52 00 00 ff 11 7b 78 a5 e3 f9 76 a5 e3 .h.R....{x...v.. 0020 f9 7c 01 f4 01 f4 01 54 9d 06 fd 98 d0 83 02 7f .|.....T........ 0030 a4 2c 9c 7c 70 5a 7f fe 13 97 08 10 20 01 e0 06 .,.|pZ...... ... 0040 35 10 00 00 01 4c ce 56 53 a7 41 11 ee 26 32 3e 5....L.VS.A..&2> 0050 68 20 44 34 bf 62 ab 11 3f 31 38 e2 e5 3d d6 53 h D4.b..?18..=.S 0060 7d ea 14 30 2d c4 4a 31 36 95 82 8f b3 22 32 48 }..0-.J16...."2H 0070 a3 d9 a1 51 31 b5 0a dd 1d 45 fb ad 25 61 5d 8a ...Q1....E..%a]. 0080 c0 47 eb a6 47 24 86 66 a1 ca a1 47 fc e9 88 f9 .G..G$.f...G.... 0090 7a 0a f0 00 11 d9 1c 03 93 96 d3 c5 61 35 d4 a5 z...........a5.. 00a0 a8 24 eb 6c f0 39 30 77 a1 09 0e 82 75 fb 75 e0 .$.l.90w....u.u. 00b0 2a 91 33 b5 14 6f c9 96 3b 74 65 75 d2 92 1b cc *.3..o..;teu.... 00c0 d1 cf 5d 50 40 20 7e 07 fd 6c 6b 03 ee 54 81 2e ..]P@ ~..lk..T.. 00d0 4d ac 0c de f6 25 14 f3 f8 d4 d5 0c 8d 9c dc 95 M....%.......... 00e0 11 37 9a b0 b4 e7 08 64 05 2c 01 6f ea d1 98 be .7.....d.,.o.... 00f0 83 af b7 33 0d 0e 1e 03 86 ed 6f 08 4f e5 d8 33 ...3......o.O..3 0100 dd 27 28 78 09 ed 79 55 40 bc 9e 76 f1 7c 6e ca .'(x..yU@..v.|n. 0110 92 9b c9 69 bf 5c d2 d2 83 70 ee fc 45 84 2e 04 ...i.\...p..E... 0120 dd aa 09 82 bd 98 9c 43 95 00 73 61 05 84 79 d7 .......C..sa..y. 0130 36 11 0c 38 cf ee e9 73 10 cf dd 75 40 64 26 ab 6..8...s...u@d&. 0140 71 a0 56 9d 7e cd 8e 7d ea 36 76 64 3f 53 c0 b9 q.V.~..}.6vd?S.. 0150 f3 0d 4d b1 84 23 2f 07 05 58 08 fd 04 39 df 13 ..M..#/..X...9.. 0160 71 68 73 0c a2 a7 97 f9 99 9e 7b 25 7a fd 41 61 qhs.......{%z.Aa 0170 d6 5a bc 2b 73 e6 ff 45 08 e8 .Z.+s..E.. Frame 10 (106 bytes on wire, 106 bytes captured) Arrival Time: Mar 19, 2004 16:29:36.606275000 Time delta from previous packet: 0.007202000 seconds Time since reference or first frame: 0.846400000 seconds Frame Number: 10 Packet Length: 106 bytes Capture Length: 106 bytes Ethernet II, Src: 00:0a:e6:4b:41:10, Dst: 00:50:73:60:0d:41 Destination: 00:50:73:60:0d:41 (00:50:73:60:0d:41) Source: 00:0a:e6:4b:41:10 (00:0a:e6:4b:41:10) Type: IP (0x0800) Frame check sequence: 0xeaf6bacf (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.118 (165.227.249.118) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 88 Identification: 0x0084 (132) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3b57 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.118 (165.227.249.118) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 68 Checksum: 0x83f4 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xFD98D083027FA42C Responder cookie: 0x9C7C705A7FFE1397 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xE0063510 Length: 60 Encrypted payload (32 bytes) 0000 00 50 73 60 0d 41 00 0a e6 4b 41 10 08 00 45 00 .Ps`.A...KA...E. 0010 00 58 00 84 00 00 40 11 3b 57 a5 e3 f9 7c a5 e3 .X....@.;W...|.. 0020 f9 76 01 f4 01 f4 00 44 83 f4 fd 98 d0 83 02 7f .v.....D........ 0030 a4 2c 9c 7c 70 5a 7f fe 13 97 08 10 20 01 e0 06 .,.|pZ...... ... 0040 35 10 00 00 00 3c 2d f0 80 37 5a 05 30 be ce a8 5....<-..7Z.0... 0050 ff d7 15 c1 c5 98 50 71 15 9d 91 a1 a0 de 92 a5 ......Pq........ 0060 db 6a 24 a5 d8 2b ea f6 ba cf .j$..+.... Frame 11 (138 bytes on wire, 138 bytes captured) Arrival Time: Mar 19, 2004 16:29:36.875821000 Time delta from previous packet: 0.269546000 seconds Time since reference or first frame: 1.115946000 seconds Frame Number: 11 Packet Length: 138 bytes Capture Length: 138 bytes Ethernet II, Src: 00:0a:e6:4b:41:10, Dst: 00:50:73:60:0d:41 Destination: 00:50:73:60:0d:41 (00:50:73:60:0d:41) Source: 00:0a:e6:4b:41:10 (00:0a:e6:4b:41:10) Type: IP (0x0800) Frame check sequence: 0x893756d2 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.118 (165.227.249.118) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x002b (43) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b6e (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.118 (165.227.249.118) Encapsulating Security Payload SPI: 0x62d8da1b Sequence: 2 Data (92 bytes) 0000 00 50 73 60 0d 41 00 0a e6 4b 41 10 08 00 45 00 .Ps`.A...KA...E. 0010 00 78 00 2b 00 00 f0 32 8b 6e a5 e3 f9 7c a5 e3 .x.+...2.n...|.. 0020 f9 76 62 d8 da 1b 00 00 00 02 07 aa 83 98 05 c1 .vb............. 0030 af 59 3c 73 17 40 8e 2a 31 cb 2f e3 84 83 a0 51 .Y.F.ps 0060 af 3e 16 58 14 4b b5 bd b8 74 06 0f ff 21 cb 77 .>.X.K...t...!.w 0070 f3 12 ea 07 a3 54 db 89 85 5f cd e1 9f ff 7d ba .....T..._....}. 0080 12 ff 20 6c 14 91 89 37 56 d2 .. l...7V. Frame 12 (138 bytes on wire, 138 bytes captured) Arrival Time: Mar 19, 2004 16:29:36.879585000 Time delta from previous packet: 0.003764000 seconds Time since reference or first frame: 1.119710000 seconds Frame Number: 12 Packet Length: 138 bytes Capture Length: 138 bytes Ethernet II, Src: 00:50:73:60:0d:41, Dst: 00:0a:e6:4b:41:10 Destination: 00:0a:e6:4b:41:10 (00:0a:e6:4b:41:10) Source: 00:50:73:60:0d:41 (00:50:73:60:0d:41) Type: IP (0x0800) Frame check sequence: 0x53af94ef (correct) Internet Protocol, Src Addr: 165.227.249.118 (165.227.249.118), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0054 (84) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x7c45 (correct) Source: 165.227.249.118 (165.227.249.118) Destination: 165.227.249.124 (165.227.249.124) Encapsulating Security Payload SPI: 0xf776c45d Sequence: 1 Data (92 bytes) 0000 00 0a e6 4b 41 10 00 50 73 60 0d 41 08 00 45 00 ...KA..Ps`.A..E. 0010 00 78 00 54 00 00 ff 32 7c 45 a5 e3 f9 76 a5 e3 .x.T...2|E...v.. 0020 f9 7c f7 76 c4 5d 00 00 00 01 1e f3 43 d6 3b 0b .|.v.]......C.;. 0030 65 a0 5f 70 b9 f9 c5 5d f8 63 58 21 ad cd 84 57 e._p...].cX!...W 0040 32 fa dc 3c f1 12 2c 2f 67 8d ad 36 f3 f2 5a b6 2..<..,/g..6..Z. 0050 78 92 e2 a6 89 58 90 c9 e2 cd e4 21 2b 8c 18 8f x....X.....!+... 0060 af f4 61 40 7f 9c 4f 69 55 71 75 bd 66 2e 7e 8f ..a@..OiUqu.f.~. 0070 8d d9 8f 0d c3 90 c7 f4 a0 b3 48 f7 b8 f1 19 e7 ..........H..... 0080 b1 db 95 b9 67 e2 53 af 94 ef ....g.S... Frame 13 (138 bytes on wire, 138 bytes captured) Arrival Time: Mar 19, 2004 16:29:36.884119000 Time delta from previous packet: 0.004534000 seconds Time since reference or first frame: 1.124244000 seconds Frame Number: 13 Packet Length: 138 bytes Capture Length: 138 bytes Ethernet II, Src: 00:0a:e6:4b:41:10, Dst: 00:50:73:60:0d:41 Destination: 00:50:73:60:0d:41 (00:50:73:60:0d:41) Source: 00:0a:e6:4b:41:10 (00:0a:e6:4b:41:10) Type: IP (0x0800) Frame check sequence: 0xd8169143 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.118 (165.227.249.118) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x002c (44) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b6d (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.118 (165.227.249.118) Encapsulating Security Payload SPI: 0x62d8da1b Sequence: 3 Data (92 bytes) 0000 00 50 73 60 0d 41 00 0a e6 4b 41 10 08 00 45 00 .Ps`.A...KA...E. 0010 00 78 00 2c 00 00 f0 32 8b 6d a5 e3 f9 7c a5 e3 .x.,...2.m...|.. 0020 f9 76 62 d8 da 1b 00 00 00 03 c4 b3 40 2e 1e 1c .vb.........@... 0030 7e 80 97 b3 ea 9a 8d 39 70 91 32 fa d5 c8 2b 91 ~......9p.2...+. 0040 92 da 99 31 4d d7 ee 28 71 b4 c9 0a 1a e7 c8 75 ...1M..(q......u 0050 3c 5c 48 33 18 1e 55 a5 4c 67 6b c7 1f 65 ec 65 <\H3..U.Lgk..e.e 0060 ad 85 10 74 f5 5f 50 d8 e4 8d e4 e5 28 45 c1 c5 ...t._P.....(E.. 0070 78 74 2e 2b 68 e5 b0 ff 32 3b f9 a9 1c e1 0c 6e xt.+h...2;.....n 0080 cf 53 d6 41 16 74 d8 16 91 43 .S.A.t...C Frame 14 (138 bytes on wire, 138 bytes captured) Arrival Time: Mar 19, 2004 16:29:36.886811000 Time delta from previous packet: 0.002692000 seconds Time since reference or first frame: 1.126936000 seconds Frame Number: 14 Packet Length: 138 bytes Capture Length: 138 bytes Ethernet II, Src: 00:50:73:60:0d:41, Dst: 00:0a:e6:4b:41:10 Destination: 00:0a:e6:4b:41:10 (00:0a:e6:4b:41:10) Source: 00:50:73:60:0d:41 (00:50:73:60:0d:41) Type: IP (0x0800) Frame check sequence: 0x27d9c18c (correct) Internet Protocol, Src Addr: 165.227.249.118 (165.227.249.118), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0055 (85) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x7c44 (correct) Source: 165.227.249.118 (165.227.249.118) Destination: 165.227.249.124 (165.227.249.124) Encapsulating Security Payload SPI: 0xf776c45d Sequence: 2 Data (92 bytes) 0000 00 0a e6 4b 41 10 00 50 73 60 0d 41 08 00 45 00 ...KA..Ps`.A..E. 0010 00 78 00 55 00 00 ff 32 7c 44 a5 e3 f9 76 a5 e3 .x.U...2|D...v.. 0020 f9 7c f7 76 c4 5d 00 00 00 02 c2 8f 24 f3 02 76 .|.v.]......$..v 0030 48 43 da cb f2 6c d7 3b ed 6e d1 95 13 5d 74 8f HC...l.;.n...]t. 0040 d0 af 8f 90 4b 37 7c 81 3f f6 43 65 5f e7 ec b6 ....K7|.?.Ce_... 0050 6a e9 c5 d1 1f ce 55 d9 62 56 79 5b c5 8e 7a 58 j.....U.bVy[..zX 0060 c6 8d ca 7d 38 49 a5 76 fd e6 a7 2b 7c 8d b8 33 ...}8I.v...+|..3 0070 64 07 fd 29 99 59 00 ed 45 6e 41 b9 1a fb c7 21 d..).Y..EnA....! 0080 db ad 38 60 60 73 27 d9 c1 8c ..8``s'... Frame 15 (138 bytes on wire, 138 bytes captured) Arrival Time: Mar 19, 2004 16:29:37.887488000 Time delta from previous packet: 1.000677000 seconds Time since reference or first frame: 2.127613000 seconds Frame Number: 15 Packet Length: 138 bytes Capture Length: 138 bytes Ethernet II, Src: 00:0a:e6:4b:41:10, Dst: 00:50:73:60:0d:41 Destination: 00:50:73:60:0d:41 (00:50:73:60:0d:41) Source: 00:0a:e6:4b:41:10 (00:0a:e6:4b:41:10) Type: IP (0x0800) Frame check sequence: 0x266bf3ea (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.118 (165.227.249.118) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x002d (45) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b6c (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.118 (165.227.249.118) Encapsulating Security Payload SPI: 0x62d8da1b Sequence: 4 Data (92 bytes) 0000 00 50 73 60 0d 41 00 0a e6 4b 41 10 08 00 45 00 .Ps`.A...KA...E. 0010 00 78 00 2d 00 00 f0 32 8b 6c a5 e3 f9 7c a5 e3 .x.-...2.l...|.. 0020 f9 76 62 d8 da 1b 00 00 00 04 d4 b2 52 6c 61 b8 .vb.........Rla. 0030 2a df 2d 3b c7 b6 d0 00 7e 07 d1 c3 10 7a 27 89 *.-;....~....z'. 0040 f5 64 ff 61 ee b3 ca c5 71 e6 aa 39 b5 bd 9b 36 .d.a....q..9...6 0050 6e 65 bf 2b 31 49 b5 4d 20 9c d8 c3 93 80 5e 14 ne.+1I.M .....^. 0060 bc d8 be 05 cf 78 25 24 94 14 18 d7 76 f6 98 9d .....x%$....v... 0070 f6 3d 60 29 e7 d0 0d 57 f2 e2 a8 a9 0c 92 af 3b .=`)...W.......; 0080 b1 8a 86 b5 1e 08 26 6b f3 ea ......&k.. Frame 16 (138 bytes on wire, 138 bytes captured) Arrival Time: Mar 19, 2004 16:29:37.890329000 Time delta from previous packet: 0.002841000 seconds Time since reference or first frame: 2.130454000 seconds Frame Number: 16 Packet Length: 138 bytes Capture Length: 138 bytes Ethernet II, Src: 00:50:73:60:0d:41, Dst: 00:0a:e6:4b:41:10 Destination: 00:0a:e6:4b:41:10 (00:0a:e6:4b:41:10) Source: 00:50:73:60:0d:41 (00:50:73:60:0d:41) Type: IP (0x0800) Frame check sequence: 0x22173f89 (correct) Internet Protocol, Src Addr: 165.227.249.118 (165.227.249.118), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0056 (86) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x7c43 (correct) Source: 165.227.249.118 (165.227.249.118) Destination: 165.227.249.124 (165.227.249.124) Encapsulating Security Payload SPI: 0xf776c45d Sequence: 3 Data (92 bytes) 0000 00 0a e6 4b 41 10 00 50 73 60 0d 41 08 00 45 00 ...KA..Ps`.A..E. 0010 00 78 00 56 00 00 ff 32 7c 43 a5 e3 f9 76 a5 e3 .x.V...2|C...v.. 0020 f9 7c f7 76 c4 5d 00 00 00 03 61 40 48 80 6d 70 .|.v.]....a@H.mp 0030 9a 83 4b 7f ab 4c b1 93 1a 69 4b de e4 b5 49 8b ..K..L...iK...I. 0040 29 17 63 dc 89 c3 08 b3 0c 6f 29 84 c1 9e af d8 ).c......o)..... 0050 39 f2 ff ab 71 ed b5 9c 55 71 0d 2b f4 93 51 3c 9...q...Uq.+..Q< 0060 43 f9 62 db 9c f3 60 c3 97 33 01 89 df 65 1d 92 C.b...`..3...e.. 0070 1d 2b 18 09 fa b4 19 ff cf 33 6b 0f 8a 1f 61 bf .+.......3k...a. 0080 85 f1 d0 b6 45 3e 22 17 3f 89 ....E>".?. Frame 17 (138 bytes on wire, 138 bytes captured) Arrival Time: Mar 19, 2004 16:29:38.887457000 Time delta from previous packet: 0.997128000 seconds Time since reference or first frame: 3.127582000 seconds Frame Number: 17 Packet Length: 138 bytes Capture Length: 138 bytes Ethernet II, Src: 00:0a:e6:4b:41:10, Dst: 00:50:73:60:0d:41 Destination: 00:50:73:60:0d:41 (00:50:73:60:0d:41) Source: 00:0a:e6:4b:41:10 (00:0a:e6:4b:41:10) Type: IP (0x0800) Frame check sequence: 0xcbe0ed5b (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.118 (165.227.249.118) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x002e (46) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b6b (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.118 (165.227.249.118) Encapsulating Security Payload SPI: 0x62d8da1b Sequence: 5 Data (92 bytes) 0000 00 50 73 60 0d 41 00 0a e6 4b 41 10 08 00 45 00 .Ps`.A...KA...E. 0010 00 78 00 2e 00 00 f0 32 8b 6b a5 e3 f9 7c a5 e3 .x.....2.k...|.. 0020 f9 76 62 d8 da 1b 00 00 00 05 7e a9 36 e5 1d 07 .vb.......~.6... 0030 c0 fe 8b bf 9d 96 68 69 7c 9d e1 ef b0 75 c5 5f ......hi|....u._ 0040 72 80 98 4a d2 36 0b 05 03 3d 00 b4 d4 0e 67 39 r..J.6...=....g9 0050 ac 8b 6c 2b ad b7 c5 59 c9 56 6f 8d ab c3 c1 eb ..l+...Y.Vo..... 0060 39 c3 e3 bc d1 7e 2c a6 58 30 17 3a 44 48 ca d3 9....~,.X0.:DH.. 0070 11 d0 0b fa 89 dd 05 49 b1 6e a4 6f bc 95 25 8e .......I.n.o..%. 0080 01 4f b3 c7 22 2f cb e0 ed 5b .O.."/...[ Frame 18 (138 bytes on wire, 138 bytes captured) Arrival Time: Mar 19, 2004 16:29:38.890326000 Time delta from previous packet: 0.002869000 seconds Time since reference or first frame: 3.130451000 seconds Frame Number: 18 Packet Length: 138 bytes Capture Length: 138 bytes Ethernet II, Src: 00:50:73:60:0d:41, Dst: 00:0a:e6:4b:41:10 Destination: 00:0a:e6:4b:41:10 (00:0a:e6:4b:41:10) Source: 00:50:73:60:0d:41 (00:50:73:60:0d:41) Type: IP (0x0800) Frame check sequence: 0xb4145ef4 (correct) Internet Protocol, Src Addr: 165.227.249.118 (165.227.249.118), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0057 (87) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x7c42 (correct) Source: 165.227.249.118 (165.227.249.118) Destination: 165.227.249.124 (165.227.249.124) Encapsulating Security Payload SPI: 0xf776c45d Sequence: 4 Data (92 bytes) 0000 00 0a e6 4b 41 10 00 50 73 60 0d 41 08 00 45 00 ...KA..Ps`.A..E. 0010 00 78 00 57 00 00 ff 32 7c 42 a5 e3 f9 76 a5 e3 .x.W...2|B...v.. 0020 f9 7c f7 76 c4 5d 00 00 00 04 bf af ec a0 06 1c .|.v.].......... 0030 aa 94 55 1b d1 cc c6 fb 57 c5 e6 8a 98 6f cf 47 ..U.....W....o.G 0040 a9 39 c2 76 96 5d 6b 27 5e a4 71 cc ea 1c 82 16 .9.v.]k'^.q..... 0050 82 8e ab f4 f7 14 29 d3 a0 b3 89 bd 1e 0e b7 2a ......)........* 0060 43 79 95 26 f3 75 fd 01 8a df b1 45 65 35 18 f5 Cy.&.u.....Ee5.. 0070 2f a3 19 a6 fd 03 34 9f f8 b3 4c fc 05 ea 8b e8 /.....4...L..... 0080 2d a8 27 90 d2 4b b4 14 5e f4 -.'..K..^.