Frame 1 (266 bytes on wire, 266 bytes captured) Arrival Time: Mar 22, 2004 14:14:54.230151000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 266 bytes Capture Length: 266 bytes Ethernet II, Src: 00:0c:29:e6:ad:b9, Dst: 00:a0:eb:00:cd:aa Destination: 00:a0:eb:00:cd:aa (00:a0:eb:00:cd:aa) Source: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Type: IP (0x0800) Frame check sequence: 0xacabacc0 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.129 (165.227.249.129) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 248 Identification: 0x0aba (2746) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3076 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.129 (165.227.249.129) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 228 Checksum: 0xedfc (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x8E6152D164601675 Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 220 Security Association payload Next payload: Vendor ID (13) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 0 Next payload: NONE (0) Length: 40 Proposal number: 0 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 0 Next payload: NONE (0) Length: 32 Transform number: 0 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: unknown vendor ID: 0x8F9CC94E01248ECDF147594C284B213B Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-stenberg-ipsec-nat-traversal-01 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-stenberg-ipsec-nat-traversal-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-03 0000 00 a0 eb 00 cd aa 00 0c 29 e6 ad b9 08 00 45 00 ........).....E. 0010 00 f8 0a ba 00 00 40 11 30 76 a5 e3 f9 7c a5 e3 ......@.0v...|.. 0020 f9 81 01 f4 01 f4 00 e4 ed fc 8e 61 52 d1 64 60 ...........aR.d` 0030 16 75 00 00 00 00 00 00 00 00 01 10 02 00 00 00 .u.............. 0040 00 00 00 00 00 dc 0d 00 00 34 00 00 00 01 00 00 .........4...... 0050 00 01 00 00 00 28 00 01 00 01 00 00 00 20 00 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 03 00 01 80 04 ................ 0070 00 02 80 0b 00 01 80 0c 70 80 0d 00 00 14 8f 9c ........p....... 0080 c9 4e 01 24 8e cd f1 47 59 4c 28 4b 21 3b 0d 00 .N.$...GYL(K!;.. 0090 00 14 27 ba b5 dc 01 ea 07 60 ea 4e 31 90 ac 27 ..'......`.N1..' 00a0 c0 d0 0d 00 00 14 61 05 c4 22 e7 68 47 e4 3f 96 ......a..".hG.?. 00b0 84 80 12 92 ae cd 0d 00 00 14 44 85 15 2d 18 b6 ..........D..-.. 00c0 bb cd 0b e8 a8 46 95 79 dd cc 0d 00 00 14 cd 60 .....F.y.......` 00d0 46 43 35 df 21 f8 7c fd b2 fc 68 b6 a4 48 0d 00 FC5.!.|...h..H.. 00e0 00 14 90 cb 80 91 3e bb 69 6e 08 63 81 b5 ec 42 ......>.in.c...B 00f0 7b 1f 00 00 00 14 7d 94 19 a6 53 10 ca 6f 2c 17 {.....}...S..o,. 0100 9d 92 15 52 9d 56 ac ab ac c0 ...R.V.... Frame 2 (126 bytes on wire, 126 bytes captured) Arrival Time: Mar 22, 2004 14:14:54.233801000 Time delta from previous packet: 0.003650000 seconds Time since reference or first frame: 0.003650000 seconds Frame Number: 2 Packet Length: 126 bytes Capture Length: 126 bytes Ethernet II, Src: 00:a0:eb:00:cd:aa, Dst: 00:0c:29:e6:ad:b9 Destination: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Source: 00:a0:eb:00:cd:aa (00:a0:eb:00:cd:aa) Type: IP (0x0800) Frame check sequence: 0x9daacf6b (correct) Internet Protocol, Src Addr: 165.227.249.129 (165.227.249.129), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 108 Identification: 0x0000 (0) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3bbc (correct) Source: 165.227.249.129 (165.227.249.129) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 88 Checksum: 0xb98e (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x8E6152D164601675 Responder cookie: 0x29289113EE3589F7 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 80 Security Association payload Next payload: NONE (0) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 0 Next payload: NONE (0) Length: 40 Proposal number: 0 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 0 Next payload: NONE (0) Length: 32 Transform number: 0 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) 0000 00 0c 29 e6 ad b9 00 a0 eb 00 cd aa 08 00 45 00 ..)...........E. 0010 00 6c 00 00 00 00 40 11 3b bc a5 e3 f9 81 a5 e3 .l....@.;....... 0020 f9 7c 01 f4 01 f4 00 58 b9 8e 8e 61 52 d1 64 60 .|.....X...aR.d` 0030 16 75 29 28 91 13 ee 35 89 f7 01 10 02 00 00 00 .u)(...5........ 0040 00 00 00 00 00 50 00 00 00 34 00 00 00 01 00 00 .....P...4...... 0050 00 01 00 00 00 28 00 01 00 01 00 00 00 20 00 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 03 00 01 80 04 ................ 0070 00 02 80 0b 00 01 80 0c 70 80 9d aa cf 6b ........p....k Frame 3 (226 bytes on wire, 226 bytes captured) Arrival Time: Mar 22, 2004 14:14:54.240954000 Time delta from previous packet: 0.007153000 seconds Time since reference or first frame: 0.010803000 seconds Frame Number: 3 Packet Length: 226 bytes Capture Length: 226 bytes Ethernet II, Src: 00:0c:29:e6:ad:b9, Dst: 00:a0:eb:00:cd:aa Destination: 00:a0:eb:00:cd:aa (00:a0:eb:00:cd:aa) Source: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Type: IP (0x0800) Frame check sequence: 0x77a0ce78 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.129 (165.227.249.129) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 208 Identification: 0x0abb (2747) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x309d (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.129 (165.227.249.129) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 188 Checksum: 0x320d (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x8E6152D164601675 Responder cookie: 0x29289113EE3589F7 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 180 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 20 Nonce Data 0000 00 a0 eb 00 cd aa 00 0c 29 e6 ad b9 08 00 45 00 ........).....E. 0010 00 d0 0a bb 00 00 40 11 30 9d a5 e3 f9 7c a5 e3 ......@.0....|.. 0020 f9 81 01 f4 01 f4 00 bc 32 0d 8e 61 52 d1 64 60 ........2..aR.d` 0030 16 75 29 28 91 13 ee 35 89 f7 04 10 02 00 00 00 .u)(...5........ 0040 00 00 00 00 00 b4 0a 00 00 84 5b bc fd c3 51 8a ..........[...Q. 0050 83 b6 b0 06 8e 4d 11 aa bb 7b f3 c9 20 db 72 35 .....M...{.. .r5 0060 6e b3 78 7b bb 33 eb 7d e3 e0 13 6e a5 0a 89 c0 n.x{.3.}...n.... 0070 f3 71 07 96 3e 31 7d ce 72 98 c2 d2 0b b8 58 41 .q..>1}.r.....XA 0080 2f e3 2a d9 37 2d c8 ef b4 5f 80 c7 b2 41 90 7a /.*.7-..._...A.z 0090 c6 92 51 2e 0f b9 03 ec 1f ff 84 a4 10 d7 4c 03 ..Q...........L. 00a0 7f 77 b1 95 64 c2 dd 74 fa 0c 15 92 6a 46 79 9d .w..d..t....jFy. 00b0 65 56 d7 33 67 17 86 82 6f 53 01 05 5d 07 8f fa eV.3g...oS..]... 00c0 ed ea 67 5b 3a 47 fe c0 47 56 00 00 00 14 1a 6d ..g[:G..GV.....m 00d0 a2 fd fd ee 6c 64 79 53 00 a5 30 c0 8e 6e 77 a0 ....ldyS..0..nw. 00e0 ce 78 .x Frame 4 (226 bytes on wire, 226 bytes captured) Arrival Time: Mar 22, 2004 14:14:54.761965000 Time delta from previous packet: 0.521011000 seconds Time since reference or first frame: 0.531814000 seconds Frame Number: 4 Packet Length: 226 bytes Capture Length: 226 bytes Ethernet II, Src: 00:0c:29:e6:ad:b9, Dst: 00:a0:eb:00:cd:aa Destination: 00:a0:eb:00:cd:aa (00:a0:eb:00:cd:aa) Source: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Type: IP (0x0800) Frame check sequence: 0xb258eab2 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.129 (165.227.249.129) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 208 Identification: 0x0abc (2748) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x309c (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.129 (165.227.249.129) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 188 Checksum: 0x320d (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x8E6152D164601675 Responder cookie: 0x29289113EE3589F7 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 180 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 20 Nonce Data 0000 00 a0 eb 00 cd aa 00 0c 29 e6 ad b9 08 00 45 00 ........).....E. 0010 00 d0 0a bc 00 00 40 11 30 9c a5 e3 f9 7c a5 e3 ......@.0....|.. 0020 f9 81 01 f4 01 f4 00 bc 32 0d 8e 61 52 d1 64 60 ........2..aR.d` 0030 16 75 29 28 91 13 ee 35 89 f7 04 10 02 00 00 00 .u)(...5........ 0040 00 00 00 00 00 b4 0a 00 00 84 5b bc fd c3 51 8a ..........[...Q. 0050 83 b6 b0 06 8e 4d 11 aa bb 7b f3 c9 20 db 72 35 .....M...{.. .r5 0060 6e b3 78 7b bb 33 eb 7d e3 e0 13 6e a5 0a 89 c0 n.x{.3.}...n.... 0070 f3 71 07 96 3e 31 7d ce 72 98 c2 d2 0b b8 58 41 .q..>1}.r.....XA 0080 2f e3 2a d9 37 2d c8 ef b4 5f 80 c7 b2 41 90 7a /.*.7-..._...A.z 0090 c6 92 51 2e 0f b9 03 ec 1f ff 84 a4 10 d7 4c 03 ..Q...........L. 00a0 7f 77 b1 95 64 c2 dd 74 fa 0c 15 92 6a 46 79 9d .w..d..t....jFy. 00b0 65 56 d7 33 67 17 86 82 6f 53 01 05 5d 07 8f fa eV.3g...oS..]... 00c0 ed ea 67 5b 3a 47 fe c0 47 56 00 00 00 14 1a 6d ..g[:G..GV.....m 00d0 a2 fd fd ee 6c 64 79 53 00 a5 30 c0 8e 6e b2 58 ....ldyS..0..n.X 00e0 ea b2 .. Frame 5 (226 bytes on wire, 226 bytes captured) Arrival Time: Mar 22, 2004 14:14:54.960371000 Time delta from previous packet: 0.198406000 seconds Time since reference or first frame: 0.730220000 seconds Frame Number: 5 Packet Length: 226 bytes Capture Length: 226 bytes Ethernet II, Src: 00:a0:eb:00:cd:aa, Dst: 00:0c:29:e6:ad:b9 Destination: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Source: 00:a0:eb:00:cd:aa (00:a0:eb:00:cd:aa) Type: IP (0x0800) Frame check sequence: 0x79259238 (correct) Internet Protocol, Src Addr: 165.227.249.129 (165.227.249.129), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 208 Identification: 0x0001 (1) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3b57 (correct) Source: 165.227.249.129 (165.227.249.129) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 188 Checksum: 0xddcf (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x8E6152D164601675 Responder cookie: 0x29289113EE3589F7 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 180 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 20 Nonce Data 0000 00 0c 29 e6 ad b9 00 a0 eb 00 cd aa 08 00 45 00 ..)...........E. 0010 00 d0 00 01 00 00 40 11 3b 57 a5 e3 f9 81 a5 e3 ......@.;W...... 0020 f9 7c 01 f4 01 f4 00 bc dd cf 8e 61 52 d1 64 60 .|.........aR.d` 0030 16 75 29 28 91 13 ee 35 89 f7 04 10 02 00 00 00 .u)(...5........ 0040 00 00 00 00 00 b4 0a 00 00 84 20 6e 4e 66 1c 2a .......... nNf.* 0050 21 1d 1b c6 3a 6b 3e 61 d8 f3 84 7d da b8 a2 f2 !...:k>a...}.... 0060 82 59 73 09 ef dc 69 b9 31 16 f6 8b 97 9f 2e c9 .Ys...i.1....... 0070 bd d6 2d ef 92 90 d2 d8 c1 19 48 31 d5 d9 da 48 ..-.......H1...H 0080 bf 54 d9 98 cd 3c 7a af 79 a7 ca 41 72 8d 5d 22 .T.....E.%.ke Frame 7 (114 bytes on wire, 114 bytes captured) Arrival Time: Mar 22, 2004 14:14:54.970666000 Time delta from previous packet: 0.003660000 seconds Time since reference or first frame: 0.740515000 seconds Frame Number: 7 Packet Length: 114 bytes Capture Length: 114 bytes Ethernet II, Src: 00:a0:eb:00:cd:aa, Dst: 00:0c:29:e6:ad:b9 Destination: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Source: 00:a0:eb:00:cd:aa (00:a0:eb:00:cd:aa) Type: IP (0x0800) Frame check sequence: 0x8476985b (correct) Internet Protocol, Src Addr: 165.227.249.129 (165.227.249.129), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0x0002 (2) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3bc6 (correct) Source: 165.227.249.129 (165.227.249.129) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 76 Checksum: 0x6829 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x8E6152D164601675 Responder cookie: 0x29289113EE3589F7 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 68 Encrypted payload (40 bytes) 0000 00 0c 29 e6 ad b9 00 a0 eb 00 cd aa 08 00 45 00 ..)...........E. 0010 00 60 00 02 00 00 40 11 3b c6 a5 e3 f9 81 a5 e3 .`....@.;....... 0020 f9 7c 01 f4 01 f4 00 4c 68 29 8e 61 52 d1 64 60 .|.....Lh).aR.d` 0030 16 75 29 28 91 13 ee 35 89 f7 05 10 02 01 00 00 .u)(...5........ 0040 00 00 00 00 00 44 f8 6a 82 f7 e5 b2 a1 69 8f c9 .....D.j.....i.. 0050 35 30 f0 b4 f8 94 7e fe 9e b6 5e 91 60 1d c8 a0 50....~...^.`... 0060 e0 83 40 61 0c 3d 18 fe e5 a4 8d 0c b0 1f 84 76 ..@a.=.........v 0070 98 5b .[ Frame 8 (338 bytes on wire, 338 bytes captured) Arrival Time: Mar 22, 2004 14:14:54.980360000 Time delta from previous packet: 0.009694000 seconds Time since reference or first frame: 0.750209000 seconds Frame Number: 8 Packet Length: 338 bytes Capture Length: 338 bytes Ethernet II, Src: 00:0c:29:e6:ad:b9, Dst: 00:a0:eb:00:cd:aa Destination: 00:a0:eb:00:cd:aa (00:a0:eb:00:cd:aa) Source: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Type: IP (0x0800) Frame check sequence: 0x7ff79c23 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.129 (165.227.249.129) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 320 Identification: 0x0abe (2750) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x302a (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.129 (165.227.249.129) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 300 Checksum: 0x2f73 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x8E6152D164601675 Responder cookie: 0x29289113EE3589F7 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xB6FC0BC2 Length: 292 Encrypted payload (264 bytes) 0000 00 a0 eb 00 cd aa 00 0c 29 e6 ad b9 08 00 45 00 ........).....E. 0010 01 40 0a be 00 00 40 11 30 2a a5 e3 f9 7c a5 e3 .@....@.0*...|.. 0020 f9 81 01 f4 01 f4 01 2c 2f 73 8e 61 52 d1 64 60 .......,/s.aR.d` 0030 16 75 29 28 91 13 ee 35 89 f7 08 10 20 01 b6 fc .u)(...5.... ... 0040 0b c2 00 00 01 24 8c 2a f8 ad 28 6c 28 73 d6 56 .....$.*..(l(s.V 0050 70 96 cc 08 37 53 91 7f ab bc c0 22 13 ce 93 34 p...7S....."...4 0060 40 85 a1 04 a0 4b 0e 69 f2 41 7a 29 87 b8 6e 86 @....K.i.Az)..n. 0070 0c a3 dc 6a 3e 70 0b da 43 59 19 ad bd cb f9 b9 ...j>p..CY...... 0080 99 32 9e e6 5e a5 20 ff 9c 9e 99 cd 93 d7 b1 b9 .2..^. ......... 0090 7e 02 05 23 5f 62 32 e7 f6 77 ff 73 99 bb c8 0d ~..#_b2..w.s.... 00a0 04 2a 44 d6 d6 ad 7a ce 06 5f b0 a2 dd fa 41 0f .*D...z.._....A. 00b0 a8 9c 17 e7 7f 3e a2 79 c9 75 89 ba 2c f5 a3 33 .....>.y.u..,..3 00c0 0f 56 74 56 8c ae a2 1e 05 95 62 ee 1a 64 84 0c .VtV......b..d.. 00d0 e4 d4 13 e3 a3 80 1f fd 66 61 48 77 0f 69 9b f2 ........faHw.i.. 00e0 ed 5f 69 bd 0b ce 93 39 6b 43 55 35 b7 18 33 db ._i....9kCU5..3. 00f0 51 e8 dd 2c 11 3b b0 56 da ca d4 73 6c b9 f2 b4 Q..,.;.V...sl... 0100 5f a8 a2 7e 7f 48 26 20 45 f8 99 d2 30 69 e1 cf _..~.H& E...0i.. 0110 b5 19 a9 68 95 d1 be 86 cb d7 10 2c cc 70 26 23 ...h.......,.p&# 0120 f4 ac 72 37 c1 6f a0 cb dd 12 16 f2 33 ac 79 3a ..r7.o......3.y: 0130 0c 2b d8 fd 8d 05 39 44 f1 66 79 e2 c8 06 ef a6 .+....9D.fy..... 0140 1a a4 cc e2 f4 42 be b4 05 f1 82 a7 13 93 7f f7 .....B.......... 0150 9c 23 .# Frame 9 (338 bytes on wire, 338 bytes captured) Arrival Time: Mar 22, 2004 14:14:55.492119000 Time delta from previous packet: 0.511759000 seconds Time since reference or first frame: 1.261968000 seconds Frame Number: 9 Packet Length: 338 bytes Capture Length: 338 bytes Ethernet II, Src: 00:0c:29:e6:ad:b9, Dst: 00:a0:eb:00:cd:aa Destination: 00:a0:eb:00:cd:aa (00:a0:eb:00:cd:aa) Source: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Type: IP (0x0800) Frame check sequence: 0x1e9580cc (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.129 (165.227.249.129) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 320 Identification: 0x0abf (2751) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3029 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.129 (165.227.249.129) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 300 Checksum: 0x2f73 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x8E6152D164601675 Responder cookie: 0x29289113EE3589F7 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xB6FC0BC2 Length: 292 Encrypted payload (264 bytes) 0000 00 a0 eb 00 cd aa 00 0c 29 e6 ad b9 08 00 45 00 ........).....E. 0010 01 40 0a bf 00 00 40 11 30 29 a5 e3 f9 7c a5 e3 .@....@.0)...|.. 0020 f9 81 01 f4 01 f4 01 2c 2f 73 8e 61 52 d1 64 60 .......,/s.aR.d` 0030 16 75 29 28 91 13 ee 35 89 f7 08 10 20 01 b6 fc .u)(...5.... ... 0040 0b c2 00 00 01 24 8c 2a f8 ad 28 6c 28 73 d6 56 .....$.*..(l(s.V 0050 70 96 cc 08 37 53 91 7f ab bc c0 22 13 ce 93 34 p...7S....."...4 0060 40 85 a1 04 a0 4b 0e 69 f2 41 7a 29 87 b8 6e 86 @....K.i.Az)..n. 0070 0c a3 dc 6a 3e 70 0b da 43 59 19 ad bd cb f9 b9 ...j>p..CY...... 0080 99 32 9e e6 5e a5 20 ff 9c 9e 99 cd 93 d7 b1 b9 .2..^. ......... 0090 7e 02 05 23 5f 62 32 e7 f6 77 ff 73 99 bb c8 0d ~..#_b2..w.s.... 00a0 04 2a 44 d6 d6 ad 7a ce 06 5f b0 a2 dd fa 41 0f .*D...z.._....A. 00b0 a8 9c 17 e7 7f 3e a2 79 c9 75 89 ba 2c f5 a3 33 .....>.y.u..,..3 00c0 0f 56 74 56 8c ae a2 1e 05 95 62 ee 1a 64 84 0c .VtV......b..d.. 00d0 e4 d4 13 e3 a3 80 1f fd 66 61 48 77 0f 69 9b f2 ........faHw.i.. 00e0 ed 5f 69 bd 0b ce 93 39 6b 43 55 35 b7 18 33 db ._i....9kCU5..3. 00f0 51 e8 dd 2c 11 3b b0 56 da ca d4 73 6c b9 f2 b4 Q..,.;.V...sl... 0100 5f a8 a2 7e 7f 48 26 20 45 f8 99 d2 30 69 e1 cf _..~.H& E...0i.. 0110 b5 19 a9 68 95 d1 be 86 cb d7 10 2c cc 70 26 23 ...h.......,.p&# 0120 f4 ac 72 37 c1 6f a0 cb dd 12 16 f2 33 ac 79 3a ..r7.o......3.y: 0130 0c 2b d8 fd 8d 05 39 44 f1 66 79 e2 c8 06 ef a6 .+....9D.fy..... 0140 1a a4 cc e2 f4 42 be b4 05 f1 82 a7 13 93 1e 95 .....B.......... 0150 80 cc .. Frame 10 (338 bytes on wire, 338 bytes captured) Arrival Time: Mar 22, 2004 14:14:55.703400000 Time delta from previous packet: 0.211281000 seconds Time since reference or first frame: 1.473249000 seconds Frame Number: 10 Packet Length: 338 bytes Capture Length: 338 bytes Ethernet II, Src: 00:a0:eb:00:cd:aa, Dst: 00:0c:29:e6:ad:b9 Destination: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Source: 00:a0:eb:00:cd:aa (00:a0:eb:00:cd:aa) Type: IP (0x0800) Frame check sequence: 0x77b68bea (correct) Internet Protocol, Src Addr: 165.227.249.129 (165.227.249.129), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 320 Identification: 0x0003 (3) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3ae5 (correct) Source: 165.227.249.129 (165.227.249.129) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 300 Checksum: 0x7a02 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x8E6152D164601675 Responder cookie: 0x29289113EE3589F7 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xB6FC0BC2 Length: 292 Encrypted payload (264 bytes) 0000 00 0c 29 e6 ad b9 00 a0 eb 00 cd aa 08 00 45 00 ..)...........E. 0010 01 40 00 03 00 00 40 11 3a e5 a5 e3 f9 81 a5 e3 .@....@.:....... 0020 f9 7c 01 f4 01 f4 01 2c 7a 02 8e 61 52 d1 64 60 .|.....,z..aR.d` 0030 16 75 29 28 91 13 ee 35 89 f7 08 10 20 01 b6 fc .u)(...5.... ... 0040 0b c2 00 00 01 24 0d d3 6e 31 65 c0 57 3e 36 df .....$..n1e.W>6. 0050 68 0f 9b 2a cc a1 db 13 46 9f a5 53 9f 0c be 46 h..*....F..S...F 0060 48 51 76 a1 dd 88 57 da c9 86 02 72 19 69 39 5c HQv...W....r.i9\ 0070 1e 0e 46 7f f8 63 f5 7a 22 9d 03 04 55 d7 a8 ee ..F..c.z"...U... 0080 46 6e 00 32 0b 25 fa 77 09 10 e6 e5 2b 9b c0 5c Fn.2.%.w....+..\ 0090 f8 36 6c 11 5b 77 4e b2 20 28 dc b2 61 fb 66 30 .6l.[wN. (..a.f0 00a0 7b 20 4e 87 a7 85 2c 66 80 af 55 6d ee 6d 99 9b { N...,f..Um.m.. 00b0 26 0f 64 4a 7b 1f cc 0a bb e3 34 86 f1 35 3d 50 &.dJ{.....4..5=P 00c0 69 98 59 a5 ca cb fd 57 d6 1a 08 3b d6 ca ea da i.Y....W...;.... 00d0 19 4f 4e a4 2e 58 60 6e ba a0 c5 3d 82 75 e0 af .ON..X`n...=.u.. 00e0 ea 65 f7 22 ad f3 61 3a 49 41 e7 d4 0d ef 59 d4 .e."..a:IA....Y. 00f0 38 48 aa 71 b4 f0 3a d8 61 ec 46 54 c3 6c 7c a2 8H.q..:.a.FT.l|. 0100 76 4b 42 15 96 a2 75 e1 d0 47 d1 d9 d6 55 e5 8a vKB...u..G...U.. 0110 1d 11 4f 20 53 2a f9 2e e2 26 a6 7a 52 ae ba 10 ..O S*...&.zR... 0120 30 c0 4f 0e 83 06 93 ed 50 e2 f6 4a cb 2c f7 71 0.O.....P..J.,.q 0130 0e 3c e0 e3 40 af 11 ca 1b 76 84 83 ae 36 37 ac .<..@....v...67. 0140 87 48 55 ad 71 b2 17 cc 04 bc b4 ce ae 5a 77 b6 .HU.q........Zw. 0150 8b ea .. Frame 11 (338 bytes on wire, 338 bytes captured) Arrival Time: Mar 22, 2004 14:14:55.704759000 Time delta from previous packet: 0.001359000 seconds Time since reference or first frame: 1.474608000 seconds Frame Number: 11 Packet Length: 338 bytes Capture Length: 338 bytes Ethernet II, Src: 00:a0:eb:00:cd:aa, Dst: 00:0c:29:e6:ad:b9 Destination: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Source: 00:a0:eb:00:cd:aa (00:a0:eb:00:cd:aa) Type: IP (0x0800) Frame check sequence: 0x7211937a (correct) Internet Protocol, Src Addr: 165.227.249.129 (165.227.249.129), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 320 Identification: 0x0004 (4) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3ae4 (correct) Source: 165.227.249.129 (165.227.249.129) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 300 Checksum: 0x7a02 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x8E6152D164601675 Responder cookie: 0x29289113EE3589F7 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xB6FC0BC2 Length: 292 Encrypted payload (264 bytes) 0000 00 0c 29 e6 ad b9 00 a0 eb 00 cd aa 08 00 45 00 ..)...........E. 0010 01 40 00 04 00 00 40 11 3a e4 a5 e3 f9 81 a5 e3 .@....@.:....... 0020 f9 7c 01 f4 01 f4 01 2c 7a 02 8e 61 52 d1 64 60 .|.....,z..aR.d` 0030 16 75 29 28 91 13 ee 35 89 f7 08 10 20 01 b6 fc .u)(...5.... ... 0040 0b c2 00 00 01 24 0d d3 6e 31 65 c0 57 3e 36 df .....$..n1e.W>6. 0050 68 0f 9b 2a cc a1 db 13 46 9f a5 53 9f 0c be 46 h..*....F..S...F 0060 48 51 76 a1 dd 88 57 da c9 86 02 72 19 69 39 5c HQv...W....r.i9\ 0070 1e 0e 46 7f f8 63 f5 7a 22 9d 03 04 55 d7 a8 ee ..F..c.z"...U... 0080 46 6e 00 32 0b 25 fa 77 09 10 e6 e5 2b 9b c0 5c Fn.2.%.w....+..\ 0090 f8 36 6c 11 5b 77 4e b2 20 28 dc b2 61 fb 66 30 .6l.[wN. (..a.f0 00a0 7b 20 4e 87 a7 85 2c 66 80 af 55 6d ee 6d 99 9b { N...,f..Um.m.. 00b0 26 0f 64 4a 7b 1f cc 0a bb e3 34 86 f1 35 3d 50 &.dJ{.....4..5=P 00c0 69 98 59 a5 ca cb fd 57 d6 1a 08 3b d6 ca ea da i.Y....W...;.... 00d0 19 4f 4e a4 2e 58 60 6e ba a0 c5 3d 82 75 e0 af .ON..X`n...=.u.. 00e0 ea 65 f7 22 ad f3 61 3a 49 41 e7 d4 0d ef 59 d4 .e."..a:IA....Y. 00f0 38 48 aa 71 b4 f0 3a d8 61 ec 46 54 c3 6c 7c a2 8H.q..:.a.FT.l|. 0100 76 4b 42 15 96 a2 75 e1 d0 47 d1 d9 d6 55 e5 8a vKB...u..G...U.. 0110 1d 11 4f 20 53 2a f9 2e e2 26 a6 7a 52 ae ba 10 ..O S*...&.zR... 0120 30 c0 4f 0e 83 06 93 ed 50 e2 f6 4a cb 2c f7 71 0.O.....P..J.,.q 0130 0e 3c e0 e3 40 af 11 ca 1b 76 84 83 ae 36 37 ac .<..@....v...67. 0140 87 48 55 ad 71 b2 17 cc 04 bc b4 ce ae 5a 72 11 .HU.q........Zr. 0150 93 7a .z Frame 12 (98 bytes on wire, 98 bytes captured) Arrival Time: Mar 22, 2004 14:14:55.713143000 Time delta from previous packet: 0.008384000 seconds Time since reference or first frame: 1.482992000 seconds Frame Number: 12 Packet Length: 98 bytes Capture Length: 98 bytes Ethernet II, Src: 00:0c:29:e6:ad:b9, Dst: 00:a0:eb:00:cd:aa Destination: 00:a0:eb:00:cd:aa (00:a0:eb:00:cd:aa) Source: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Type: IP (0x0800) Frame check sequence: 0x008413ba (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.129 (165.227.249.129) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 80 Identification: 0x0ac0 (2752) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3118 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.129 (165.227.249.129) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 60 Checksum: 0xde61 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x8E6152D164601675 Responder cookie: 0x29289113EE3589F7 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xB6FC0BC2 Length: 52 Encrypted payload (24 bytes) 0000 00 a0 eb 00 cd aa 00 0c 29 e6 ad b9 08 00 45 00 ........).....E. 0010 00 50 0a c0 00 00 40 11 31 18 a5 e3 f9 7c a5 e3 .P....@.1....|.. 0020 f9 81 01 f4 01 f4 00 3c de 61 8e 61 52 d1 64 60 .......<.a.aR.d` 0030 16 75 29 28 91 13 ee 35 89 f7 08 10 20 01 b6 fc .u)(...5.... ... 0040 0b c2 00 00 00 34 65 41 28 4f 0a 46 10 32 0b d8 .....4eA(O.F.2.. 0050 c9 84 b7 89 16 20 1f 88 c5 0c 8e b1 a6 9b 00 84 ..... .......... 0060 13 ba .. Frame 13 (154 bytes on wire, 154 bytes captured) Arrival Time: Mar 22, 2004 14:14:55.981030000 Time delta from previous packet: 0.267887000 seconds Time since reference or first frame: 1.750879000 seconds Frame Number: 13 Packet Length: 154 bytes Capture Length: 154 bytes Ethernet II, Src: 00:0c:29:e6:ad:b9, Dst: 00:a0:eb:00:cd:aa Destination: 00:a0:eb:00:cd:aa (00:a0:eb:00:cd:aa) Source: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Type: IP (0x0800) Frame check sequence: 0xe0684956 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.129 (165.227.249.129) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 136 Identification: 0x001e (30) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b60 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.129 (165.227.249.129) Encapsulating Security Payload SPI: 0x68ba63de Sequence: 2 Data (108 bytes) 0000 00 a0 eb 00 cd aa 00 0c 29 e6 ad b9 08 00 45 00 ........).....E. 0010 00 88 00 1e 00 00 f0 32 8b 60 a5 e3 f9 7c a5 e3 .......2.`...|.. 0020 f9 81 68 ba 63 de 00 00 00 02 2e 4c 6e 52 a3 21 ..h.c......LnR.! 0030 26 0b d6 13 22 f9 83 95 2e 84 22 65 fb 86 ca c4 &..."....."e.... 0040 34 fa 04 46 7c 96 19 eb e3 78 bb 67 f0 af dc 14 4..F|....x.g.... 0050 19 39 6f 3f 21 ba 6c 50 e2 b3 3d 21 ec ac 2b 7b .9o?!.lP..=!..+{ 0060 2c 86 4e 30 17 e4 19 a6 c5 d1 27 38 13 70 ac f0 ,.N0......'8.p.. 0070 62 60 4d d5 fd ae 8d 17 82 7a c9 b0 df 18 80 d7 b`M......z...... 0080 ad 6a 40 9d b0 df dd dd e1 58 93 81 f6 12 a1 c5 .j@......X...... 0090 d2 d8 5a 91 e8 45 e0 68 49 56 ..Z..E.hIV Frame 14 (154 bytes on wire, 154 bytes captured) Arrival Time: Mar 22, 2004 14:14:55.984413000 Time delta from previous packet: 0.003383000 seconds Time since reference or first frame: 1.754262000 seconds Frame Number: 14 Packet Length: 154 bytes Capture Length: 154 bytes Ethernet II, Src: 00:a0:eb:00:cd:aa, Dst: 00:0c:29:e6:ad:b9 Destination: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Source: 00:a0:eb:00:cd:aa (00:a0:eb:00:cd:aa) Type: IP (0x0800) Frame check sequence: 0x1c4a8da5 (correct) Internet Protocol, Src Addr: 165.227.249.129 (165.227.249.129), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 136 Identification: 0x0203 (515) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: ESP (0x32) Header checksum: 0xf97b (correct) Source: 165.227.249.129 (165.227.249.129) Destination: 165.227.249.124 (165.227.249.124) Encapsulating Security Payload SPI: 0x9693db0b Sequence: 1 Data (108 bytes) 0000 00 0c 29 e6 ad b9 00 a0 eb 00 cd aa 08 00 45 00 ..)...........E. 0010 00 88 02 03 00 00 80 32 f9 7b a5 e3 f9 81 a5 e3 .......2.{...... 0020 f9 7c 96 93 db 0b 00 00 00 01 00 00 00 00 00 00 .|.............. 0030 00 00 46 60 90 ff a8 be 49 71 18 b9 f6 90 8d 32 ..F`....Iq.....2 0040 8d 9b aa 83 3c e9 0b 96 59 a1 5c 01 5c 5a 57 9e ....<...Y.\.\ZW. 0050 c3 dc 9a f8 81 00 3a 00 10 af c6 02 fc 11 48 c4 ......:.......H. 0060 3c 11 dd a0 95 41 6c 04 d5 ec 5b 8d 40 2f cc 8a <....Al...[.@/.. 0070 dc 97 45 29 5d 66 cc 2e 3e 54 ef af ce 33 8c f7 ..E)]f..>T...3.. 0080 72 6a 66 67 2e e7 98 17 44 a0 6a ff c2 e4 b2 97 rjfg....D.j..... 0090 06 57 01 e4 03 99 1c 4a 8d a5 .W.....J.. Frame 15 (154 bytes on wire, 154 bytes captured) Arrival Time: Mar 22, 2004 14:14:56.230629000 Time delta from previous packet: 0.246216000 seconds Time since reference or first frame: 2.000478000 seconds Frame Number: 15 Packet Length: 154 bytes Capture Length: 154 bytes Ethernet II, Src: 00:0c:29:e6:ad:b9, Dst: 00:a0:eb:00:cd:aa Destination: 00:a0:eb:00:cd:aa (00:a0:eb:00:cd:aa) Source: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Type: IP (0x0800) Frame check sequence: 0xfe2f91f2 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.129 (165.227.249.129) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 136 Identification: 0x001f (31) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b5f (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.129 (165.227.249.129) Encapsulating Security Payload SPI: 0x68ba63de Sequence: 3 Data (108 bytes) 0000 00 a0 eb 00 cd aa 00 0c 29 e6 ad b9 08 00 45 00 ........).....E. 0010 00 88 00 1f 00 00 f0 32 8b 5f a5 e3 f9 7c a5 e3 .......2._...|.. 0020 f9 81 68 ba 63 de 00 00 00 03 8a cf 3a 00 fd 0d ..h.c.......:... 0030 e1 91 2d e7 88 ce 59 2f 56 70 98 33 ce 28 ab 7f ..-...Y/Vp.3.(.. 0040 fd 84 90 28 19 7b aa 78 d1 2e 3a 4c 1c 15 c5 39 ...(.{.x..:L...9 0050 24 9e 6e 17 28 05 87 01 07 b3 93 0b 73 52 8e 25 $.n.(.......sR.% 0060 03 a8 63 6c 69 53 3c 76 9f 88 0d fb 51 28 d8 ca ..cliS.......J| 0050 c1 29 c5 7d 08 c6 49 d7 90 44 db cd 3d b1 75 83 .).}..I..D..=.u. 0060 b2 52 89 69 80 d1 87 ed de 03 9f 37 3b 96 44 68 .R.i.......7;.Dh 0070 c9 c9 b9 aa 74 67 45 89 da f3 78 16 78 71 b3 67 ....tgE...x.xq.g 0080 45 17 bb 34 6d 4a b7 ec 28 3c 71 5c b4 a0 8e f8 E..4mJ..(