Frame 1 (270 bytes on wire, 270 bytes captured) Arrival Time: Mar 19, 2004 16:34:42.835820000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 270 bytes Capture Length: 270 bytes Ethernet II, Src: 00:0a:e6:4b:41:10, Dst: 00:09:5b:44:41:bf Destination: 00:09:5b:44:41:bf (00:09:5b:44:41:bf) Source: 00:0a:e6:4b:41:10 (00:0a:e6:4b:41:10) Type: IP (0x0800) Frame check sequence: 0x127b988e (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.120 (165.227.249.120) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 252 Identification: 0x00a0 (160) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3a95 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.120 (165.227.249.120) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 232 Checksum: 0xae95 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x2840501864BB3DBC Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 224 Security Association payload Next payload: Vendor ID (13) Length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 0 Next payload: NONE (0) Length: 44 Proposal number: 0 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 0 Next payload: NONE (0) Length: 36 Transform number: 0 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): AES-CBC (7) Key-Length (14): Key-Length (128) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: unknown vendor ID: 0x8F9CC94E01248ECDF147594C284B213B Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-stenberg-ipsec-nat-traversal-01 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-stenberg-ipsec-nat-traversal-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-03 0000 00 09 5b 44 41 bf 00 0a e6 4b 41 10 08 00 45 00 ..[DA....KA...E. 0010 00 fc 00 a0 00 00 40 11 3a 95 a5 e3 f9 7c a5 e3 ......@.:....|.. 0020 f9 78 01 f4 01 f4 00 e8 ae 95 28 40 50 18 64 bb .x........(@P.d. 0030 3d bc 00 00 00 00 00 00 00 00 01 10 02 00 00 00 =............... 0040 00 00 00 00 00 e0 0d 00 00 38 00 00 00 01 00 00 .........8...... 0050 00 01 00 00 00 2c 00 01 00 01 00 00 00 24 00 01 .....,.......$.. 0060 00 00 80 01 00 07 80 0e 00 80 80 02 00 02 80 03 ................ 0070 00 01 80 04 00 02 80 0b 00 01 80 0c 70 80 0d 00 ............p... 0080 00 14 8f 9c c9 4e 01 24 8e cd f1 47 59 4c 28 4b .....N.$...GYL(K 0090 21 3b 0d 00 00 14 27 ba b5 dc 01 ea 07 60 ea 4e !;....'......`.N 00a0 31 90 ac 27 c0 d0 0d 00 00 14 61 05 c4 22 e7 68 1..'......a..".h 00b0 47 e4 3f 96 84 80 12 92 ae cd 0d 00 00 14 44 85 G.?...........D. 00c0 15 2d 18 b6 bb cd 0b e8 a8 46 95 79 dd cc 0d 00 .-.......F.y.... 00d0 00 14 cd 60 46 43 35 df 21 f8 7c fd b2 fc 68 b6 ...`FC5.!.|...h. 00e0 a4 48 0d 00 00 14 90 cb 80 91 3e bb 69 6e 08 63 .H........>.in.c 00f0 81 b5 ec 42 7b 1f 00 00 00 14 7d 94 19 a6 53 10 ...B{.....}...S. 0100 ca 6f 2c 17 9d 92 15 52 9d 56 12 7b 98 8e .o,....R.V.{.. Frame 2 (270 bytes on wire, 270 bytes captured) Arrival Time: Mar 19, 2004 16:34:43.352390000 Time delta from previous packet: 0.516570000 seconds Time since reference or first frame: 0.516570000 seconds Frame Number: 2 Packet Length: 270 bytes Capture Length: 270 bytes Ethernet II, Src: 00:0a:e6:4b:41:10, Dst: 00:09:5b:44:41:bf Destination: 00:09:5b:44:41:bf (00:09:5b:44:41:bf) Source: 00:0a:e6:4b:41:10 (00:0a:e6:4b:41:10) Type: IP (0x0800) Frame check sequence: 0x59349ecf (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.120 (165.227.249.120) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 252 Identification: 0x00a1 (161) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3a94 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.120 (165.227.249.120) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 232 Checksum: 0xae95 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x2840501864BB3DBC Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 224 Security Association payload Next payload: Vendor ID (13) Length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 0 Next payload: NONE (0) Length: 44 Proposal number: 0 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 0 Next payload: NONE (0) Length: 36 Transform number: 0 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): AES-CBC (7) Key-Length (14): Key-Length (128) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: unknown vendor ID: 0x8F9CC94E01248ECDF147594C284B213B Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-stenberg-ipsec-nat-traversal-01 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-stenberg-ipsec-nat-traversal-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-03 0000 00 09 5b 44 41 bf 00 0a e6 4b 41 10 08 00 45 00 ..[DA....KA...E. 0010 00 fc 00 a1 00 00 40 11 3a 94 a5 e3 f9 7c a5 e3 ......@.:....|.. 0020 f9 78 01 f4 01 f4 00 e8 ae 95 28 40 50 18 64 bb .x........(@P.d. 0030 3d bc 00 00 00 00 00 00 00 00 01 10 02 00 00 00 =............... 0040 00 00 00 00 00 e0 0d 00 00 38 00 00 00 01 00 00 .........8...... 0050 00 01 00 00 00 2c 00 01 00 01 00 00 00 24 00 01 .....,.......$.. 0060 00 00 80 01 00 07 80 0e 00 80 80 02 00 02 80 03 ................ 0070 00 01 80 04 00 02 80 0b 00 01 80 0c 70 80 0d 00 ............p... 0080 00 14 8f 9c c9 4e 01 24 8e cd f1 47 59 4c 28 4b .....N.$...GYL(K 0090 21 3b 0d 00 00 14 27 ba b5 dc 01 ea 07 60 ea 4e !;....'......`.N 00a0 31 90 ac 27 c0 d0 0d 00 00 14 61 05 c4 22 e7 68 1..'......a..".h 00b0 47 e4 3f 96 84 80 12 92 ae cd 0d 00 00 14 44 85 G.?...........D. 00c0 15 2d 18 b6 bb cd 0b e8 a8 46 95 79 dd cc 0d 00 .-.......F.y.... 00d0 00 14 cd 60 46 43 35 df 21 f8 7c fd b2 fc 68 b6 ...`FC5.!.|...h. 00e0 a4 48 0d 00 00 14 90 cb 80 91 3e bb 69 6e 08 63 .H........>.in.c 00f0 81 b5 ec 42 7b 1f 00 00 00 14 7d 94 19 a6 53 10 ...B{.....}...S. 0100 ca 6f 2c 17 9d 92 15 52 9d 56 59 34 9e cf .o,....R.VY4.. Frame 3 (130 bytes on wire, 130 bytes captured) Arrival Time: Mar 19, 2004 16:34:43.356423000 Time delta from previous packet: 0.004033000 seconds Time since reference or first frame: 0.520603000 seconds Frame Number: 3 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:09:5b:44:41:bf, Dst: 00:0a:e6:4b:41:10 Destination: 00:0a:e6:4b:41:10 (00:0a:e6:4b:41:10) Source: 00:09:5b:44:41:bf (00:09:5b:44:41:bf) Type: IP (0x0800) Frame check sequence: 0xcb333d59 (correct) Internet Protocol, Src Addr: 165.227.249.120 (165.227.249.120), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0009 (9) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 32 Protocol: UDP (0x11) Header checksum: 0x5bb8 (correct) Source: 165.227.249.120 (165.227.249.120) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 92 Checksum: 0x190c (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x2840501864BB3DBC Responder cookie: 0x8C5A9A4D46CC2610 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 84 Security Association payload Next payload: NONE (0) Length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 0 Next payload: NONE (0) Length: 44 Proposal number: 0 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 0 Next payload: NONE (0) Length: 36 Transform number: 0 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): AES-CBC (7) Key-Length (14): Key-Length (128) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) 0000 00 0a e6 4b 41 10 00 09 5b 44 41 bf 08 00 45 00 ...KA...[DA...E. 0010 00 70 00 09 00 00 20 11 5b b8 a5 e3 f9 78 a5 e3 .p.... .[....x.. 0020 f9 7c 01 f4 01 f4 00 5c 19 0c 28 40 50 18 64 bb .|.....\..(@P.d. 0030 3d bc 8c 5a 9a 4d 46 cc 26 10 01 10 02 00 00 00 =..Z.MF.&....... 0040 00 00 00 00 00 54 00 00 00 38 00 00 00 01 00 00 .....T...8...... 0050 00 01 00 00 00 2c 00 01 00 01 00 00 00 24 00 01 .....,.......$.. 0060 00 00 80 01 00 07 80 0e 00 80 80 02 00 02 80 03 ................ 0070 00 01 80 04 00 02 80 0b 00 01 80 0c 70 80 cb 33 ............p..3 0080 3d 59 =Y Frame 4 (226 bytes on wire, 226 bytes captured) Arrival Time: Mar 19, 2004 16:34:43.361589000 Time delta from previous packet: 0.005166000 seconds Time since reference or first frame: 0.525769000 seconds Frame Number: 4 Packet Length: 226 bytes Capture Length: 226 bytes Ethernet II, Src: 00:0a:e6:4b:41:10, Dst: 00:09:5b:44:41:bf Destination: 00:09:5b:44:41:bf (00:09:5b:44:41:bf) Source: 00:0a:e6:4b:41:10 (00:0a:e6:4b:41:10) Type: IP (0x0800) Frame check sequence: 0x299bfee6 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.120 (165.227.249.120) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 208 Identification: 0x00a2 (162) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3abf (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.120 (165.227.249.120) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 188 Checksum: 0x5db5 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x2840501864BB3DBC Responder cookie: 0x8C5A9A4D46CC2610 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 180 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 20 Nonce Data 0000 00 09 5b 44 41 bf 00 0a e6 4b 41 10 08 00 45 00 ..[DA....KA...E. 0010 00 d0 00 a2 00 00 40 11 3a bf a5 e3 f9 7c a5 e3 ......@.:....|.. 0020 f9 78 01 f4 01 f4 00 bc 5d b5 28 40 50 18 64 bb .x......].(@P.d. 0030 3d bc 8c 5a 9a 4d 46 cc 26 10 04 10 02 00 00 00 =..Z.MF.&....... 0040 00 00 00 00 00 b4 0a 00 00 84 fd 97 28 5c b4 a7 ............(\.. 0050 12 bc 89 12 a8 81 d4 bf 85 3f 65 75 c4 36 35 4d .........?eu.65M 0060 c0 b4 3b c4 96 d6 f4 27 9d f8 00 4f 38 0d a9 4a ..;....'...O8..J 0070 2a 18 27 b4 f8 fe b4 16 2f 9b 13 60 1f b0 d3 58 *.'...../..`...X 0080 35 c6 b8 1c 8b a0 7e f8 70 55 9c 05 8d a9 42 2f 5.....~.pU....B/ 0090 4f 02 79 4e e7 4c c3 ff 5d e2 9c bb 00 cf cf c2 O.yN.L..]....... 00a0 4e 06 e6 c6 97 2d 90 74 87 a2 38 25 85 52 64 1b N....-.t..8%.Rd. 00b0 0c e3 05 8b 59 74 62 ff c7 e2 e5 61 01 13 35 53 ....Ytb....a..5S 00c0 b8 64 69 fa 1a fb c0 74 47 68 00 00 00 14 04 22 .di....tGh....." 00d0 54 36 ee d2 9d 36 25 e5 77 65 bf 69 38 8d 29 9b T6...6%.we.i8.). 00e0 fe e6 .. Frame 5 (226 bytes on wire, 226 bytes captured) Arrival Time: Mar 19, 2004 16:34:43.862371000 Time delta from previous packet: 0.500782000 seconds Time since reference or first frame: 1.026551000 seconds Frame Number: 5 Packet Length: 226 bytes Capture Length: 226 bytes Ethernet II, Src: 00:0a:e6:4b:41:10, Dst: 00:09:5b:44:41:bf Destination: 00:09:5b:44:41:bf (00:09:5b:44:41:bf) Source: 00:0a:e6:4b:41:10 (00:0a:e6:4b:41:10) Type: IP (0x0800) Frame check sequence: 0x074a550a (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.120 (165.227.249.120) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 208 Identification: 0x00a3 (163) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3abe (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.120 (165.227.249.120) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 188 Checksum: 0x5db5 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x2840501864BB3DBC Responder cookie: 0x8C5A9A4D46CC2610 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 180 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 20 Nonce Data 0000 00 09 5b 44 41 bf 00 0a e6 4b 41 10 08 00 45 00 ..[DA....KA...E. 0010 00 d0 00 a3 00 00 40 11 3a be a5 e3 f9 7c a5 e3 ......@.:....|.. 0020 f9 78 01 f4 01 f4 00 bc 5d b5 28 40 50 18 64 bb .x......].(@P.d. 0030 3d bc 8c 5a 9a 4d 46 cc 26 10 04 10 02 00 00 00 =..Z.MF.&....... 0040 00 00 00 00 00 b4 0a 00 00 84 fd 97 28 5c b4 a7 ............(\.. 0050 12 bc 89 12 a8 81 d4 bf 85 3f 65 75 c4 36 35 4d .........?eu.65M 0060 c0 b4 3b c4 96 d6 f4 27 9d f8 00 4f 38 0d a9 4a ..;....'...O8..J 0070 2a 18 27 b4 f8 fe b4 16 2f 9b 13 60 1f b0 d3 58 *.'...../..`...X 0080 35 c6 b8 1c 8b a0 7e f8 70 55 9c 05 8d a9 42 2f 5.....~.pU....B/ 0090 4f 02 79 4e e7 4c c3 ff 5d e2 9c bb 00 cf cf c2 O.yN.L..]....... 00a0 4e 06 e6 c6 97 2d 90 74 87 a2 38 25 85 52 64 1b N....-.t..8%.Rd. 00b0 0c e3 05 8b 59 74 62 ff c7 e2 e5 61 01 13 35 53 ....Ytb....a..5S 00c0 b8 64 69 fa 1a fb c0 74 47 68 00 00 00 14 04 22 .di....tGh....." 00d0 54 36 ee d2 9d 36 25 e5 77 65 bf 69 38 8d 07 4a T6...6%.we.i8..J 00e0 55 0a U. Frame 6 (226 bytes on wire, 226 bytes captured) Arrival Time: Mar 19, 2004 16:34:44.872228000 Time delta from previous packet: 1.009857000 seconds Time since reference or first frame: 2.036408000 seconds Frame Number: 6 Packet Length: 226 bytes Capture Length: 226 bytes Ethernet II, Src: 00:0a:e6:4b:41:10, Dst: 00:09:5b:44:41:bf Destination: 00:09:5b:44:41:bf (00:09:5b:44:41:bf) Source: 00:0a:e6:4b:41:10 (00:0a:e6:4b:41:10) Type: IP (0x0800) Frame check sequence: 0xb9f30269 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.120 (165.227.249.120) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 208 Identification: 0x00a4 (164) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3abd (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.120 (165.227.249.120) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 188 Checksum: 0x5db5 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x2840501864BB3DBC Responder cookie: 0x8C5A9A4D46CC2610 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 180 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 20 Nonce Data 0000 00 09 5b 44 41 bf 00 0a e6 4b 41 10 08 00 45 00 ..[DA....KA...E. 0010 00 d0 00 a4 00 00 40 11 3a bd a5 e3 f9 7c a5 e3 ......@.:....|.. 0020 f9 78 01 f4 01 f4 00 bc 5d b5 28 40 50 18 64 bb .x......].(@P.d. 0030 3d bc 8c 5a 9a 4d 46 cc 26 10 04 10 02 00 00 00 =..Z.MF.&....... 0040 00 00 00 00 00 b4 0a 00 00 84 fd 97 28 5c b4 a7 ............(\.. 0050 12 bc 89 12 a8 81 d4 bf 85 3f 65 75 c4 36 35 4d .........?eu.65M 0060 c0 b4 3b c4 96 d6 f4 27 9d f8 00 4f 38 0d a9 4a ..;....'...O8..J 0070 2a 18 27 b4 f8 fe b4 16 2f 9b 13 60 1f b0 d3 58 *.'...../..`...X 0080 35 c6 b8 1c 8b a0 7e f8 70 55 9c 05 8d a9 42 2f 5.....~.pU....B/ 0090 4f 02 79 4e e7 4c c3 ff 5d e2 9c bb 00 cf cf c2 O.yN.L..]....... 00a0 4e 06 e6 c6 97 2d 90 74 87 a2 38 25 85 52 64 1b N....-.t..8%.Rd. 00b0 0c e3 05 8b 59 74 62 ff c7 e2 e5 61 01 13 35 53 ....Ytb....a..5S 00c0 b8 64 69 fa 1a fb c0 74 47 68 00 00 00 14 04 22 .di....tGh....." 00d0 54 36 ee d2 9d 36 25 e5 77 65 bf 69 38 8d b9 f3 T6...6%.we.i8... 00e0 02 69 .i Frame 7 (226 bytes on wire, 226 bytes captured) Arrival Time: Mar 19, 2004 16:34:46.271602000 Time delta from previous packet: 1.399374000 seconds Time since reference or first frame: 3.435782000 seconds Frame Number: 7 Packet Length: 226 bytes Capture Length: 226 bytes Ethernet II, Src: 00:09:5b:44:41:bf, Dst: 00:0a:e6:4b:41:10 Destination: 00:0a:e6:4b:41:10 (00:0a:e6:4b:41:10) Source: 00:09:5b:44:41:bf (00:09:5b:44:41:bf) Type: IP (0x0800) Frame check sequence: 0x981a9765 (correct) Internet Protocol, Src Addr: 165.227.249.120 (165.227.249.120), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 208 Identification: 0x000a (10) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 32 Protocol: UDP (0x11) Header checksum: 0x5b57 (correct) Source: 165.227.249.120 (165.227.249.120) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 188 Checksum: 0xc124 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x2840501864BB3DBC Responder cookie: 0x8C5A9A4D46CC2610 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 180 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 20 Nonce Data 0000 00 0a e6 4b 41 10 00 09 5b 44 41 bf 08 00 45 00 ...KA...[DA...E. 0010 00 d0 00 0a 00 00 20 11 5b 57 a5 e3 f9 78 a5 e3 ...... .[W...x.. 0020 f9 7c 01 f4 01 f4 00 bc c1 24 28 40 50 18 64 bb .|.......$(@P.d. 0030 3d bc 8c 5a 9a 4d 46 cc 26 10 04 10 02 00 00 00 =..Z.MF.&....... 0040 00 00 00 00 00 b4 0a 00 00 84 08 da 10 90 e5 44 ...............D 0050 6b 02 ea b0 aa f2 86 37 32 fd 32 59 49 66 41 39 k......72.2YIfA9 0060 dd db 1d 18 84 84 48 e7 d1 34 3a 9a 42 30 29 b6 ......H..4:.B0). 0070 ff 21 3f 26 49 2c 71 39 51 a3 72 41 39 24 c4 87 .!?&I,q9Q.rA9$.. 0080 27 8a 79 e8 6c 51 77 28 57 db b6 c5 3c c4 28 37 '.y.lQw(W...<.(7 0090 9c 3e 33 e0 6c 4b 10 a5 fb 5b 5c c1 b4 2e c9 e5 .>3.lK...[\..... 00a0 24 b3 3e c3 2c 4f 6b c8 05 56 dc fc 9d ce 52 85 $.>.,Ok..V....R. 00b0 e7 ed 22 c5 8e ec 52 48 b6 4f 19 02 4e 20 f4 ae .."...RH.O..N .. 00c0 ae 50 49 1d f6 75 22 91 89 d2 00 00 00 14 54 48 .PI..u".......TH 00d0 c3 ff b3 96 6e ea f2 19 da 2c 91 9b b0 2a 98 1a ....n....,...*.. 00e0 97 65 .e Frame 8 (122 bytes on wire, 122 bytes captured) Arrival Time: Mar 19, 2004 16:34:46.277207000 Time delta from previous packet: 0.005605000 seconds Time since reference or first frame: 3.441387000 seconds Frame Number: 8 Packet Length: 122 bytes Capture Length: 122 bytes Ethernet II, Src: 00:0a:e6:4b:41:10, Dst: 00:09:5b:44:41:bf Destination: 00:09:5b:44:41:bf (00:09:5b:44:41:bf) Source: 00:0a:e6:4b:41:10 (00:0a:e6:4b:41:10) Type: IP (0x0800) Frame check sequence: 0x5632660e (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.120 (165.227.249.120) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 104 Identification: 0x00a5 (165) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3b24 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.120 (165.227.249.120) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 84 Checksum: 0x77df (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x2840501864BB3DBC Responder cookie: 0x8C5A9A4D46CC2610 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 76 Encrypted payload (48 bytes) 0000 00 09 5b 44 41 bf 00 0a e6 4b 41 10 08 00 45 00 ..[DA....KA...E. 0010 00 68 00 a5 00 00 40 11 3b 24 a5 e3 f9 7c a5 e3 .h....@.;$...|.. 0020 f9 78 01 f4 01 f4 00 54 77 df 28 40 50 18 64 bb .x.....Tw.(@P.d. 0030 3d bc 8c 5a 9a 4d 46 cc 26 10 05 10 02 01 00 00 =..Z.MF.&....... 0040 00 00 00 00 00 4c 45 1f d9 81 50 ad f0 71 a4 d4 .....LE...P..q.. 0050 30 22 92 80 88 40 f4 3a 2d 79 56 cd 47 b4 22 2b 0"...@.:-yV.G."+ 0060 8d 57 6a 7f c9 cd 45 ea 91 a6 6c 53 bb 52 ff 88 .Wj...E...lS.R.. 0070 50 56 70 c8 db b3 56 32 66 0e PVp...V2f. Frame 9 (122 bytes on wire, 122 bytes captured) Arrival Time: Mar 19, 2004 16:34:46.282899000 Time delta from previous packet: 0.005692000 seconds Time since reference or first frame: 3.447079000 seconds Frame Number: 9 Packet Length: 122 bytes Capture Length: 122 bytes Ethernet II, Src: 00:09:5b:44:41:bf, Dst: 00:0a:e6:4b:41:10 Destination: 00:0a:e6:4b:41:10 (00:0a:e6:4b:41:10) Source: 00:09:5b:44:41:bf (00:09:5b:44:41:bf) Type: IP (0x0800) Frame check sequence: 0xc46e8327 (correct) Internet Protocol, Src Addr: 165.227.249.120 (165.227.249.120), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 104 Identification: 0x000b (11) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 32 Protocol: UDP (0x11) Header checksum: 0x5bbe (correct) Source: 165.227.249.120 (165.227.249.120) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 84 Checksum: 0x4276 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x2840501864BB3DBC Responder cookie: 0x8C5A9A4D46CC2610 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 76 Encrypted payload (48 bytes) 0000 00 0a e6 4b 41 10 00 09 5b 44 41 bf 08 00 45 00 ...KA...[DA...E. 0010 00 68 00 0b 00 00 20 11 5b be a5 e3 f9 78 a5 e3 .h.... .[....x.. 0020 f9 7c 01 f4 01 f4 00 54 42 76 28 40 50 18 64 bb .|.....TBv(@P.d. 0030 3d bc 8c 5a 9a 4d 46 cc 26 10 05 10 02 01 00 00 =..Z.MF.&....... 0040 00 00 00 00 00 4c 8b 4e d8 c9 13 20 34 66 68 22 .....L.N... 4fh" 0050 b2 23 b2 00 10 31 1b a5 5e 56 07 bf ea 23 b9 53 .#...1..^V...#.S 0060 5b 13 99 7c 55 7d ae 52 17 9d 0d d7 c4 3a 7d 18 [..|U}.R.....:}. 0070 d3 1b f3 04 f1 e8 c4 6e 83 27 .......n.' Frame 10 (346 bytes on wire, 346 bytes captured) Arrival Time: Mar 19, 2004 16:34:46.289430000 Time delta from previous packet: 0.006531000 seconds Time since reference or first frame: 3.453610000 seconds Frame Number: 10 Packet Length: 346 bytes Capture Length: 346 bytes Ethernet II, Src: 00:0a:e6:4b:41:10, Dst: 00:09:5b:44:41:bf Destination: 00:09:5b:44:41:bf (00:09:5b:44:41:bf) Source: 00:0a:e6:4b:41:10 (00:0a:e6:4b:41:10) Type: IP (0x0800) Frame check sequence: 0x82a8d105 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.120 (165.227.249.120) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 328 Identification: 0x00a6 (166) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3a43 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.120 (165.227.249.120) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 308 Checksum: 0x3664 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x2840501864BB3DBC Responder cookie: 0x8C5A9A4D46CC2610 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xEFBABE43 Length: 300 Encrypted payload (272 bytes) 0000 00 09 5b 44 41 bf 00 0a e6 4b 41 10 08 00 45 00 ..[DA....KA...E. 0010 01 48 00 a6 00 00 40 11 3a 43 a5 e3 f9 7c a5 e3 .H....@.:C...|.. 0020 f9 78 01 f4 01 f4 01 34 36 64 28 40 50 18 64 bb .x.....46d(@P.d. 0030 3d bc 8c 5a 9a 4d 46 cc 26 10 08 10 20 01 ef ba =..Z.MF.&... ... 0040 be 43 00 00 01 2c 75 71 76 08 66 b9 cb 7b 18 63 .C...,uqv.f..{.c 0050 b0 1d 36 e6 97 a1 f5 a7 ea 3a 49 22 db 05 d5 d8 ..6......:I".... 0060 13 57 72 fd ec 39 53 6a 96 3c e7 57 57 23 50 1c .Wr..9Sj.<.WW#P. 0070 4d e3 a0 d9 40 52 de 29 73 47 97 1d 73 55 29 75 M...@R.)sG..sU)u 0080 fe 92 9e d0 c1 5f fd 06 3d da b6 0f c7 bb c0 47 ....._..=......G 0090 75 fa df 8a d7 5b 57 cb 2d 0b 15 98 1a ea 16 fd u....[W.-....... 00a0 1a ba e2 7c 65 bf bc de ab a1 9e b9 30 6a 41 f1 ...|e.......0jA. 00b0 71 7f 57 2f b4 79 e8 e9 bd 44 15 7e 70 0a d5 45 q.W/.y...D.~p..E 00c0 d6 d6 da 4a 9a 9c 5e 49 6a 70 7a ee 7d e0 56 1b ...J..^Ijpz.}.V. 00d0 6e 03 1a 47 08 71 60 4c 65 68 4b a2 47 b2 59 96 n..G.q`LehK.G.Y. 00e0 60 df 5e 44 23 28 3a ab b3 e7 de f5 2f 87 99 8d `.^D#(:...../... 00f0 ed d3 77 e0 58 1f 88 5d 2a aa 55 5b 77 a8 0e 41 ..w.X..]*.U[w..A 0100 90 e6 19 ca 17 23 4f fe a9 e7 ab 68 0b 03 ee 93 .....#O....h.... 0110 72 12 0c cf ce b1 9d 77 ca 02 6c 03 2b 5f 2c 36 r......w..l.+_,6 0120 0f 80 d4 74 cf 11 33 1a fe 1a 05 33 54 a3 c9 74 ...t..3....3T..t 0130 da b0 db b2 91 1a a5 61 1b 4a be 2d 18 64 18 d5 .......a.J.-.d.. 0140 be ec d3 55 e9 e7 74 28 4a b2 17 8c 82 68 f3 98 ...U..t(J....h.. 0150 2d 7d b1 8b b9 a0 82 a8 d1 05 -}........ Frame 11 (346 bytes on wire, 346 bytes captured) Arrival Time: Mar 19, 2004 16:34:46.792281000 Time delta from previous packet: 0.502851000 seconds Time since reference or first frame: 3.956461000 seconds Frame Number: 11 Packet Length: 346 bytes Capture Length: 346 bytes Ethernet II, Src: 00:0a:e6:4b:41:10, Dst: 00:09:5b:44:41:bf Destination: 00:09:5b:44:41:bf (00:09:5b:44:41:bf) Source: 00:0a:e6:4b:41:10 (00:0a:e6:4b:41:10) Type: IP (0x0800) Frame check sequence: 0x68976cfb (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.120 (165.227.249.120) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 328 Identification: 0x00a7 (167) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3a42 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.120 (165.227.249.120) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 308 Checksum: 0x3664 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x2840501864BB3DBC Responder cookie: 0x8C5A9A4D46CC2610 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xEFBABE43 Length: 300 Encrypted payload (272 bytes) 0000 00 09 5b 44 41 bf 00 0a e6 4b 41 10 08 00 45 00 ..[DA....KA...E. 0010 01 48 00 a7 00 00 40 11 3a 42 a5 e3 f9 7c a5 e3 .H....@.:B...|.. 0020 f9 78 01 f4 01 f4 01 34 36 64 28 40 50 18 64 bb .x.....46d(@P.d. 0030 3d bc 8c 5a 9a 4d 46 cc 26 10 08 10 20 01 ef ba =..Z.MF.&... ... 0040 be 43 00 00 01 2c 75 71 76 08 66 b9 cb 7b 18 63 .C...,uqv.f..{.c 0050 b0 1d 36 e6 97 a1 f5 a7 ea 3a 49 22 db 05 d5 d8 ..6......:I".... 0060 13 57 72 fd ec 39 53 6a 96 3c e7 57 57 23 50 1c .Wr..9Sj.<.WW#P. 0070 4d e3 a0 d9 40 52 de 29 73 47 97 1d 73 55 29 75 M...@R.)sG..sU)u 0080 fe 92 9e d0 c1 5f fd 06 3d da b6 0f c7 bb c0 47 ....._..=......G 0090 75 fa df 8a d7 5b 57 cb 2d 0b 15 98 1a ea 16 fd u....[W.-....... 00a0 1a ba e2 7c 65 bf bc de ab a1 9e b9 30 6a 41 f1 ...|e.......0jA. 00b0 71 7f 57 2f b4 79 e8 e9 bd 44 15 7e 70 0a d5 45 q.W/.y...D.~p..E 00c0 d6 d6 da 4a 9a 9c 5e 49 6a 70 7a ee 7d e0 56 1b ...J..^Ijpz.}.V. 00d0 6e 03 1a 47 08 71 60 4c 65 68 4b a2 47 b2 59 96 n..G.q`LehK.G.Y. 00e0 60 df 5e 44 23 28 3a ab b3 e7 de f5 2f 87 99 8d `.^D#(:...../... 00f0 ed d3 77 e0 58 1f 88 5d 2a aa 55 5b 77 a8 0e 41 ..w.X..]*.U[w..A 0100 90 e6 19 ca 17 23 4f fe a9 e7 ab 68 0b 03 ee 93 .....#O....h.... 0110 72 12 0c cf ce b1 9d 77 ca 02 6c 03 2b 5f 2c 36 r......w..l.+_,6 0120 0f 80 d4 74 cf 11 33 1a fe 1a 05 33 54 a3 c9 74 ...t..3....3T..t 0130 da b0 db b2 91 1a a5 61 1b 4a be 2d 18 64 18 d5 .......a.J.-.d.. 0140 be ec d3 55 e9 e7 74 28 4a b2 17 8c 82 68 f3 98 ...U..t(J....h.. 0150 2d 7d b1 8b b9 a0 68 97 6c fb -}....h.l. Frame 12 (346 bytes on wire, 346 bytes captured) Arrival Time: Mar 19, 2004 16:34:47.802127000 Time delta from previous packet: 1.009846000 seconds Time since reference or first frame: 4.966307000 seconds Frame Number: 12 Packet Length: 346 bytes Capture Length: 346 bytes Ethernet II, Src: 00:0a:e6:4b:41:10, Dst: 00:09:5b:44:41:bf Destination: 00:09:5b:44:41:bf (00:09:5b:44:41:bf) Source: 00:0a:e6:4b:41:10 (00:0a:e6:4b:41:10) Type: IP (0x0800) Frame check sequence: 0x07267e36 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.120 (165.227.249.120) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 328 Identification: 0x00a8 (168) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3a41 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.120 (165.227.249.120) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 308 Checksum: 0x3664 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x2840501864BB3DBC Responder cookie: 0x8C5A9A4D46CC2610 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xEFBABE43 Length: 300 Encrypted payload (272 bytes) 0000 00 09 5b 44 41 bf 00 0a e6 4b 41 10 08 00 45 00 ..[DA....KA...E. 0010 01 48 00 a8 00 00 40 11 3a 41 a5 e3 f9 7c a5 e3 .H....@.:A...|.. 0020 f9 78 01 f4 01 f4 01 34 36 64 28 40 50 18 64 bb .x.....46d(@P.d. 0030 3d bc 8c 5a 9a 4d 46 cc 26 10 08 10 20 01 ef ba =..Z.MF.&... ... 0040 be 43 00 00 01 2c 75 71 76 08 66 b9 cb 7b 18 63 .C...,uqv.f..{.c 0050 b0 1d 36 e6 97 a1 f5 a7 ea 3a 49 22 db 05 d5 d8 ..6......:I".... 0060 13 57 72 fd ec 39 53 6a 96 3c e7 57 57 23 50 1c .Wr..9Sj.<.WW#P. 0070 4d e3 a0 d9 40 52 de 29 73 47 97 1d 73 55 29 75 M...@R.)sG..sU)u 0080 fe 92 9e d0 c1 5f fd 06 3d da b6 0f c7 bb c0 47 ....._..=......G 0090 75 fa df 8a d7 5b 57 cb 2d 0b 15 98 1a ea 16 fd u....[W.-....... 00a0 1a ba e2 7c 65 bf bc de ab a1 9e b9 30 6a 41 f1 ...|e.......0jA. 00b0 71 7f 57 2f b4 79 e8 e9 bd 44 15 7e 70 0a d5 45 q.W/.y...D.~p..E 00c0 d6 d6 da 4a 9a 9c 5e 49 6a 70 7a ee 7d e0 56 1b ...J..^Ijpz.}.V. 00d0 6e 03 1a 47 08 71 60 4c 65 68 4b a2 47 b2 59 96 n..G.q`LehK.G.Y. 00e0 60 df 5e 44 23 28 3a ab b3 e7 de f5 2f 87 99 8d `.^D#(:...../... 00f0 ed d3 77 e0 58 1f 88 5d 2a aa 55 5b 77 a8 0e 41 ..w.X..]*.U[w..A 0100 90 e6 19 ca 17 23 4f fe a9 e7 ab 68 0b 03 ee 93 .....#O....h.... 0110 72 12 0c cf ce b1 9d 77 ca 02 6c 03 2b 5f 2c 36 r......w..l.+_,6 0120 0f 80 d4 74 cf 11 33 1a fe 1a 05 33 54 a3 c9 74 ...t..3....3T..t 0130 da b0 db b2 91 1a a5 61 1b 4a be 2d 18 64 18 d5 .......a.J.-.d.. 0140 be ec d3 55 e9 e7 74 28 4a b2 17 8c 82 68 f3 98 ...U..t(J....h.. 0150 2d 7d b1 8b b9 a0 07 26 7e 36 -}.....&~6 Frame 13 (346 bytes on wire, 346 bytes captured) Arrival Time: Mar 19, 2004 16:34:49.320403000 Time delta from previous packet: 1.518276000 seconds Time since reference or first frame: 6.484583000 seconds Frame Number: 13 Packet Length: 346 bytes Capture Length: 346 bytes Ethernet II, Src: 00:09:5b:44:41:bf, Dst: 00:0a:e6:4b:41:10 Destination: 00:0a:e6:4b:41:10 (00:0a:e6:4b:41:10) Source: 00:09:5b:44:41:bf (00:09:5b:44:41:bf) Type: IP (0x0800) Frame check sequence: 0xbab225cf (correct) Internet Protocol, Src Addr: 165.227.249.120 (165.227.249.120), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 328 Identification: 0x000c (12) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 32 Protocol: UDP (0x11) Header checksum: 0x5add (correct) Source: 165.227.249.120 (165.227.249.120) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 308 Checksum: 0x73a0 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x2840501864BB3DBC Responder cookie: 0x8C5A9A4D46CC2610 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xEFBABE43 Length: 300 Encrypted payload (272 bytes) 0000 00 0a e6 4b 41 10 00 09 5b 44 41 bf 08 00 45 00 ...KA...[DA...E. 0010 01 48 00 0c 00 00 20 11 5a dd a5 e3 f9 78 a5 e3 .H.... .Z....x.. 0020 f9 7c 01 f4 01 f4 01 34 73 a0 28 40 50 18 64 bb .|.....4s.(@P.d. 0030 3d bc 8c 5a 9a 4d 46 cc 26 10 08 10 20 01 ef ba =..Z.MF.&... ... 0040 be 43 00 00 01 2c b5 28 b1 b0 7b 77 ca 1b ef 07 .C...,.(..{w.... 0050 21 d8 de c4 62 00 e8 ac 52 d9 69 7c 57 35 6e 5d !...b...R.i|W5n] 0060 15 e2 e3 23 72 89 be 38 55 a6 58 23 01 b6 08 44 ...#r..8U.X#...D 0070 b0 c6 6c 70 e0 d8 54 ca d3 83 fb d9 13 21 4c 8c ..lp..T......!L. 0080 76 1c 6b 01 49 60 f3 f2 e2 d1 54 34 76 ec 9f 65 v.k.I`....T4v..e 0090 d0 f3 b7 c5 b2 eb 87 d9 22 78 b6 32 45 a7 be 6c ........"x.2E..l 00a0 f7 5c 62 2d 16 dc 6c cc ed 1e 91 f4 b2 c4 01 eb .\b-..l......... 00b0 4c 98 ec 7c 2c 65 30 d1 a8 bf 67 7d 50 69 b6 f2 L..|,e0...g}Pi.. 00c0 b2 e1 48 ff a4 b8 49 5a b6 b5 92 31 04 b9 d1 b8 ..H...IZ...1.... 00d0 8f 7b 2f 5e e7 25 41 25 34 90 3b 90 0f 81 75 d8 .{/^.%A%4.;...u. 00e0 00 aa 79 51 18 49 51 3a 1e 23 7c be 5a 6d f3 e2 ..yQ.IQ:.#|.Zm.. 00f0 a3 87 bf a7 96 a2 66 d3 75 c0 e7 18 2a 03 41 42 ......f.u...*.AB 0100 37 20 2b 6d 33 34 af d5 f8 41 9a 4d a9 51 49 db 7 +m34...A.M.QI. 0110 fc 36 6d 46 3a 3e 04 1e d0 bf 17 6f 61 42 f1 42 .6mF:>.....oaB.B 0120 b5 b2 8f 17 ec 80 f3 fd 6d 8d e1 32 aa ea 84 14 ........m..2.... 0130 c7 6e 0c 48 5b 84 29 53 1a dd dc 01 30 29 02 3f .n.H[.)S....0).? 0140 91 02 fb 5e 3f 54 2f 0e 4d c3 61 94 90 c5 ad 0b ...^?T/.M.a..... 0150 b1 43 7d 47 66 1d ba b2 25 cf .C}Gf...%. Frame 14 (106 bytes on wire, 106 bytes captured) Arrival Time: Mar 19, 2004 16:34:49.326897000 Time delta from previous packet: 0.006494000 seconds Time since reference or first frame: 6.491077000 seconds Frame Number: 14 Packet Length: 106 bytes Capture Length: 106 bytes Ethernet II, Src: 00:0a:e6:4b:41:10, Dst: 00:09:5b:44:41:bf Destination: 00:09:5b:44:41:bf (00:09:5b:44:41:bf) Source: 00:0a:e6:4b:41:10 (00:0a:e6:4b:41:10) Type: IP (0x0800) Frame check sequence: 0x39c84279 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.120 (165.227.249.120) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 88 Identification: 0x00a9 (169) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3b30 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.120 (165.227.249.120) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 68 Checksum: 0x7236 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x2840501864BB3DBC Responder cookie: 0x8C5A9A4D46CC2610 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xEFBABE43 Length: 60 Encrypted payload (32 bytes) 0000 00 09 5b 44 41 bf 00 0a e6 4b 41 10 08 00 45 00 ..[DA....KA...E. 0010 00 58 00 a9 00 00 40 11 3b 30 a5 e3 f9 7c a5 e3 .X....@.;0...|.. 0020 f9 78 01 f4 01 f4 00 44 72 36 28 40 50 18 64 bb .x.....Dr6(@P.d. 0030 3d bc 8c 5a 9a 4d 46 cc 26 10 08 10 20 01 ef ba =..Z.MF.&... ... 0040 be 43 00 00 00 3c 22 20 6e 7e 81 8c da cf b5 5e .C...<" n~.....^ 0050 c0 fe 74 bb bc 64 46 20 63 a9 8e 22 b8 fe 1e b0 ..t..dF c..".... 0060 d4 39 cb 37 82 65 39 c8 42 79 .9.7.e9.By Frame 15 (138 bytes on wire, 138 bytes captured) Arrival Time: Mar 19, 2004 16:34:49.582190000 Time delta from previous packet: 0.255293000 seconds Time since reference or first frame: 6.746370000 seconds Frame Number: 15 Packet Length: 138 bytes Capture Length: 138 bytes Ethernet II, Src: 00:0a:e6:4b:41:10, Dst: 00:09:5b:44:41:bf Destination: 00:09:5b:44:41:bf (00:09:5b:44:41:bf) Source: 00:0a:e6:4b:41:10 (00:0a:e6:4b:41:10) Type: IP (0x0800) Frame check sequence: 0x26a5e305 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.120 (165.227.249.120) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0039 (57) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b5e (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.120 (165.227.249.120) Encapsulating Security Payload SPI: 0x61fa7ee4 Sequence: 2 Data (92 bytes) 0000 00 09 5b 44 41 bf 00 0a e6 4b 41 10 08 00 45 00 ..[DA....KA...E. 0010 00 78 00 39 00 00 f0 32 8b 5e a5 e3 f9 7c a5 e3 .x.9...2.^...|.. 0020 f9 78 61 fa 7e e4 00 00 00 02 9b 97 cc 0c fd 0b .xa.~........... 0030 49 0d 61 1b b6 ee 0b c6 d2 e5 d7 a0 b7 cb 2a 47 I.a...........*G 0040 23 99 4b 1c 84 70 f5 49 3f 69 cf 59 d0 ed 23 13 #.K..p.I?i.Y..#. 0050 a3 87 2b 95 7d 7f 6d 37 d0 7a 41 8b e7 fc 1a 9b ..+.}.m7.zA..... 0060 30 54 3b e6 79 60 2a 50 98 e7 3c 92 78 09 68 ff 0T;.y`*P..<.x.h. 0070 42 38 c8 08 f4 db db 9a 38 5e 82 16 66 da 2a 11 B8......8^..f.*. 0080 b5 3f bc 26 27 b4 26 a5 e3 05 .?.&'.&... Frame 16 (138 bytes on wire, 138 bytes captured) Arrival Time: Mar 19, 2004 16:34:53.391016000 Time delta from previous packet: 3.808826000 seconds Time since reference or first frame: 10.555196000 seconds Frame Number: 16 Packet Length: 138 bytes Capture Length: 138 bytes Ethernet II, Src: 00:0a:e6:4b:41:10, Dst: 00:09:5b:44:41:bf Destination: 00:09:5b:44:41:bf (00:09:5b:44:41:bf) Source: 00:0a:e6:4b:41:10 (00:0a:e6:4b:41:10) Type: IP (0x0800) Frame check sequence: 0xc4446b44 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.120 (165.227.249.120) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x003a (58) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b5d (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.120 (165.227.249.120) Encapsulating Security Payload SPI: 0x61fa7ee4 Sequence: 3 Data (92 bytes) 0000 00 09 5b 44 41 bf 00 0a e6 4b 41 10 08 00 45 00 ..[DA....KA...E. 0010 00 78 00 3a 00 00 f0 32 8b 5d a5 e3 f9 7c a5 e3 .x.:...2.]...|.. 0020 f9 78 61 fa 7e e4 00 00 00 03 59 f5 81 ff 3c d9 .xa.~.....Y...<. 0030 b4 5b 46 22 9a 91 6c da 24 7b 87 ec 71 32 00 3a .[F"..l.${..q2.: 0040 39 cf 91 65 2e e3 4c a3 04 02 a6 b1 85 3d 9a d0 9..e..L......=.. 0050 1f 14 66 b9 b5 19 6c 23 75 68 32 bb 16 60 5d 38 ..f...l#uh2..`]8 0060 65 70 25 a9 5b 52 b3 22 4c 3f ce 79 e1 96 56 22 ep%.[R."L?.y..V" 0070 e9 ad 02 ce 10 0a 09 ff 79 59 f0 09 9a a4 e4 d7 ........yY...... 0080 64 fb d8 72 28 55 c4 44 6b 44 d..r(U.DkD Frame 17 (138 bytes on wire, 138 bytes captured) Arrival Time: Mar 19, 2004 16:34:53.393777000 Time delta from previous packet: 0.002761000 seconds Time since reference or first frame: 10.557957000 seconds Frame Number: 17 Packet Length: 138 bytes Capture Length: 138 bytes Ethernet II, Src: 00:09:5b:44:41:bf, Dst: 00:0a:e6:4b:41:10 Destination: 00:0a:e6:4b:41:10 (00:0a:e6:4b:41:10) Source: 00:09:5b:44:41:bf (00:09:5b:44:41:bf) Type: IP (0x0800) Frame check sequence: 0xff8c8be9 (correct) Internet Protocol, Src Addr: 165.227.249.120 (165.227.249.120), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x1fb4 (8116) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 127 Protocol: ESP (0x32) Header checksum: 0xdce3 (correct) Source: 165.227.249.120 (165.227.249.120) Destination: 165.227.249.124 (165.227.249.124) Encapsulating Security Payload SPI: 0x11ea8f9c Sequence: 2 Data (92 bytes) 0000 00 0a e6 4b 41 10 00 09 5b 44 41 bf 08 00 45 00 ...KA...[DA...E. 0010 00 78 1f b4 00 00 7f 32 dc e3 a5 e3 f9 78 a5 e3 .x.....2.....x.. 0020 f9 7c 11 ea 8f 9c 00 00 00 02 01 02 03 04 05 06 .|.............. 0030 07 08 01 02 03 04 05 06 07 08 bb 29 0c 09 98 b2 ...........).... 0040 86 07 9c 75 88 29 10 43 cc 6e c8 7f 2b 71 93 93 ...u.).C.n..+q.. 0050 c5 37 fd 96 22 63 8d c0 88 ec e3 d8 88 62 30 a5 .7.."c.......b0. 0060 ad 5b 22 5a 1d 08 1e fd 3f 0c bc c0 16 63 e3 37 .["Z....?....c.7 0070 6d 7b 9f 0e bd 2e d6 5e 8c 60 6c 08 ca e8 b3 94 m{.....^.`l..... 0080 3f 6e 92 f2 ce 24 ff 8c 8b e9 ?n...$.... Frame 18 (138 bytes on wire, 138 bytes captured) Arrival Time: Mar 19, 2004 16:34:54.391048000 Time delta from previous packet: 0.997271000 seconds Time since reference or first frame: 11.555228000 seconds Frame Number: 18 Packet Length: 138 bytes Capture Length: 138 bytes Ethernet II, Src: 00:0a:e6:4b:41:10, Dst: 00:09:5b:44:41:bf Destination: 00:09:5b:44:41:bf (00:09:5b:44:41:bf) Source: 00:0a:e6:4b:41:10 (00:0a:e6:4b:41:10) Type: IP (0x0800) Frame check sequence: 0x6e4528f7 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.120 (165.227.249.120) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x003b (59) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b5c (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.120 (165.227.249.120) Encapsulating Security Payload SPI: 0x61fa7ee4 Sequence: 4 Data (92 bytes) 0000 00 09 5b 44 41 bf 00 0a e6 4b 41 10 08 00 45 00 ..[DA....KA...E. 0010 00 78 00 3b 00 00 f0 32 8b 5c a5 e3 f9 7c a5 e3 .x.;...2.\...|.. 0020 f9 78 61 fa 7e e4 00 00 00 04 9d fe 5d e1 75 ac .xa.~.......].u. 0030 56 24 bd a2 32 65 6f a0 95 99 66 a1 05 dc 61 0a V$..2eo...f...a. 0040 e0 da 32 e9 be 61 2f 4f 0d 5a 01 a6 a1 ed c7 21 ..2..a/O.Z.....! 0050 e3 8c cc c5 27 2b fd a9 26 b3 ee 8f da ef 41 55 ....'+..&.....AU 0060 1c 2b 7f 55 9c d5 3a 8f bb 7e ac 1d bc a0 dd 33 .+.U..:..~.....3 0070 8c 0e 0e 80 46 fb c7 1d d1 b5 4b 55 96 17 89 38 ....F.....KU...8 0080 89 23 1e 21 32 90 6e 45 28 f7 .#.!2.nE(. Frame 19 (138 bytes on wire, 138 bytes captured) Arrival Time: Mar 19, 2004 16:34:54.393857000 Time delta from previous packet: 0.002809000 seconds Time since reference or first frame: 11.558037000 seconds Frame Number: 19 Packet Length: 138 bytes Capture Length: 138 bytes Ethernet II, Src: 00:09:5b:44:41:bf, Dst: 00:0a:e6:4b:41:10 Destination: 00:0a:e6:4b:41:10 (00:0a:e6:4b:41:10) Source: 00:09:5b:44:41:bf (00:09:5b:44:41:bf) Type: IP (0x0800) Frame check sequence: 0x8a341ab5 (correct) Internet Protocol, Src Addr: 165.227.249.120 (165.227.249.120), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x1fb5 (8117) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 127 Protocol: ESP (0x32) Header checksum: 0xdce2 (correct) Source: 165.227.249.120 (165.227.249.120) Destination: 165.227.249.124 (165.227.249.124) Encapsulating Security Payload SPI: 0x11ea8f9c Sequence: 4 Data (92 bytes) 0000 00 0a e6 4b 41 10 00 09 5b 44 41 bf 08 00 45 00 ...KA...[DA...E. 0010 00 78 1f b5 00 00 7f 32 dc e2 a5 e3 f9 78 a5 e3 .x.....2.....x.. 0020 f9 7c 11 ea 8f 9c 00 00 00 04 01 02 03 04 05 06 .|.............. 0030 07 08 01 02 03 04 05 06 07 08 48 6d a0 03 0f cc ..........Hm.... 0040 8c 71 63 9f ec a6 4c 0d b1 2c 5c 17 80 26 de d0 .qc...L..,\..&.. 0050 c0 6b da 51 be 73 4a 67 a4 dd e6 2f 61 e7 0d b4 .k.Q.sJg.../a... 0060 c8 0f 5f ed 6a d7 ca ce f2 a2 5b 22 3f b6 e8 e1 .._.j.....["?... 0070 63 1c 81 12 f4 fd 71 74 d6 f4 7c 4f 97 32 84 95 c.....qt..|O.2.. 0080 72 b4 73 5a bc e2 8a 34 1a b5 r.sZ...4.. Frame 20 (130 bytes on wire, 130 bytes captured) Arrival Time: Mar 19, 2004 16:34:55.311146000 Time delta from previous packet: 0.917289000 seconds Time since reference or first frame: 12.475326000 seconds Frame Number: 20 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:09:5b:44:41:bf, Dst: 00:0a:e6:4b:41:10 Destination: 00:0a:e6:4b:41:10 (00:0a:e6:4b:41:10) Source: 00:09:5b:44:41:bf (00:09:5b:44:41:bf) Type: IP (0x0800) Frame check sequence: 0xbcb6f2f7 (correct) Internet Protocol, Src Addr: 165.227.249.120 (165.227.249.120), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x000e (14) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 32 Protocol: UDP (0x11) Header checksum: 0x5bb3 (correct) Source: 165.227.249.120 (165.227.249.120) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 92 Checksum: 0xc897 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x2840501864BB3DBC Responder cookie: 0x5E929D760F2AD8C5 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 84 Security Association payload Next payload: NONE (0) Length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 0 Next payload: NONE (0) Length: 44 Proposal number: 0 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 0 Next payload: NONE (0) Length: 36 Transform number: 0 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): AES-CBC (7) Key-Length (14): Key-Length (128) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1)