Frame 1 (266 bytes on wire, 266 bytes captured) Arrival Time: Mar 22, 2004 14:58:33.854373000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 266 bytes Capture Length: 266 bytes Ethernet II, Src: 00:0c:29:e6:ad:b9, Dst: 00:e0:7b:00:0d:61 Destination: 00:e0:7b:00:0d:61 (00:e0:7b:00:0d:61) Source: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Type: IP (0x0800) Frame check sequence: 0x1a0c8f54 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.132 (165.227.249.132) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 248 Identification: 0x0ae9 (2793) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3044 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.132 (165.227.249.132) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 228 Checksum: 0x27da (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xB65EF7BB45CB2E42 Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 220 Security Association payload Next payload: Vendor ID (13) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 0 Next payload: NONE (0) Length: 40 Proposal number: 0 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 0 Next payload: NONE (0) Length: 32 Transform number: 0 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: unknown vendor ID: 0x8F9CC94E01248ECDF147594C284B213B Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-stenberg-ipsec-nat-traversal-01 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-stenberg-ipsec-nat-traversal-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-03 0000 00 e0 7b 00 0d 61 00 0c 29 e6 ad b9 08 00 45 00 ..{..a..).....E. 0010 00 f8 0a e9 00 00 40 11 30 44 a5 e3 f9 7c a5 e3 ......@.0D...|.. 0020 f9 84 01 f4 01 f4 00 e4 27 da b6 5e f7 bb 45 cb ........'..^..E. 0030 2e 42 00 00 00 00 00 00 00 00 01 10 02 00 00 00 .B.............. 0040 00 00 00 00 00 dc 0d 00 00 34 00 00 00 01 00 00 .........4...... 0050 00 01 00 00 00 28 00 01 00 01 00 00 00 20 00 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 03 00 01 80 04 ................ 0070 00 02 80 0b 00 01 80 0c 70 80 0d 00 00 14 8f 9c ........p....... 0080 c9 4e 01 24 8e cd f1 47 59 4c 28 4b 21 3b 0d 00 .N.$...GYL(K!;.. 0090 00 14 27 ba b5 dc 01 ea 07 60 ea 4e 31 90 ac 27 ..'......`.N1..' 00a0 c0 d0 0d 00 00 14 61 05 c4 22 e7 68 47 e4 3f 96 ......a..".hG.?. 00b0 84 80 12 92 ae cd 0d 00 00 14 44 85 15 2d 18 b6 ..........D..-.. 00c0 bb cd 0b e8 a8 46 95 79 dd cc 0d 00 00 14 cd 60 .....F.y.......` 00d0 46 43 35 df 21 f8 7c fd b2 fc 68 b6 a4 48 0d 00 FC5.!.|...h..H.. 00e0 00 14 90 cb 80 91 3e bb 69 6e 08 63 81 b5 ec 42 ......>.in.c...B 00f0 7b 1f 00 00 00 14 7d 94 19 a6 53 10 ca 6f 2c 17 {.....}...S..o,. 0100 9d 92 15 52 9d 56 1a 0c 8f 54 ...R.V...T Frame 2 (138 bytes on wire, 138 bytes captured) Arrival Time: Mar 22, 2004 14:58:33.953639000 Time delta from previous packet: 0.099266000 seconds Time since reference or first frame: 0.099266000 seconds Frame Number: 2 Packet Length: 138 bytes Capture Length: 138 bytes Ethernet II, Src: 00:e0:7b:00:0d:61, Dst: 00:0c:29:e6:ad:b9 Destination: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Source: 00:e0:7b:00:0d:61 (00:e0:7b:00:0d:61) Type: IP (0x0800) Frame check sequence: 0x85ae63b2 (correct) Internet Protocol, Src Addr: 165.227.249.132 (165.227.249.132), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0xe0 (DSCP 0x38: Class Selector 7; ECN: 0x00) 1110 00.. = Differentiated Services Codepoint: Class Selector 7 (0x38) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x08e1 (2273) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x31ec (correct) Source: 165.227.249.132 (165.227.249.132) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 100 Checksum: 0xb28d (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xB65EF7BB45CB2E42 Responder cookie: 0x4417A661CE68258D Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 92 Security Association payload Next payload: Vendor ID (13) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 0 Next payload: NONE (0) Length: 40 Proposal number: 0 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 0 Next payload: NONE (0) Length: 32 Transform number: 0 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: NONE (0) Length: 12 Vendor ID: unknown vendor ID: 0x424E455300000007 0000 00 0c 29 e6 ad b9 00 e0 7b 00 0d 61 08 00 45 e0 ..).....{..a..E. 0010 00 78 08 e1 00 00 40 11 31 ec a5 e3 f9 84 a5 e3 .x....@.1....... 0020 f9 7c 01 f4 01 f4 00 64 b2 8d b6 5e f7 bb 45 cb .|.....d...^..E. 0030 2e 42 44 17 a6 61 ce 68 25 8d 01 10 02 00 00 00 .BD..a.h%....... 0040 00 00 00 00 00 5c 0d 00 00 34 00 00 00 01 00 00 .....\...4...... 0050 00 01 00 00 00 28 00 01 00 01 00 00 00 20 00 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 03 00 01 80 04 ................ 0070 00 02 80 0b 00 01 80 0c 70 80 00 00 00 0c 42 4e ........p.....BN 0080 45 53 00 00 00 07 85 ae 63 b2 ES......c. Frame 3 (226 bytes on wire, 226 bytes captured) Arrival Time: Mar 22, 2004 14:58:33.961117000 Time delta from previous packet: 0.007478000 seconds Time since reference or first frame: 0.106744000 seconds Frame Number: 3 Packet Length: 226 bytes Capture Length: 226 bytes Ethernet II, Src: 00:0c:29:e6:ad:b9, Dst: 00:e0:7b:00:0d:61 Destination: 00:e0:7b:00:0d:61 (00:e0:7b:00:0d:61) Source: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Type: IP (0x0800) Frame check sequence: 0x7ece74d2 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.132 (165.227.249.132) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 208 Identification: 0x0aea (2794) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x306b (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.132 (165.227.249.132) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 188 Checksum: 0xb305 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xB65EF7BB45CB2E42 Responder cookie: 0x4417A661CE68258D Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 180 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 20 Nonce Data 0000 00 e0 7b 00 0d 61 00 0c 29 e6 ad b9 08 00 45 00 ..{..a..).....E. 0010 00 d0 0a ea 00 00 40 11 30 6b a5 e3 f9 7c a5 e3 ......@.0k...|.. 0020 f9 84 01 f4 01 f4 00 bc b3 05 b6 5e f7 bb 45 cb ...........^..E. 0030 2e 42 44 17 a6 61 ce 68 25 8d 04 10 02 00 00 00 .BD..a.h%....... 0040 00 00 00 00 00 b4 0a 00 00 84 2c 69 1d 43 65 68 ..........,i.Ceh 0050 14 18 0f ba 07 a1 e8 cb 8c df a8 a4 f7 86 74 d1 ..............t. 0060 c1 94 12 4f ab 57 98 a8 a6 35 c7 17 d8 40 5e 50 ...O.W...5...@^P 0070 b3 21 df 3d 51 c0 20 49 8e c7 59 38 b7 c8 e6 85 .!.=Q. I..Y8.... 0080 ba 8d 40 d1 61 cb df c8 66 74 89 26 5d 59 a9 e7 ..@.a...ft.&]Y.. 0090 0e 38 f2 15 f7 5a ee d1 ff f4 e8 80 f2 5a 9a 18 .8...Z.......Z.. 00a0 7c a7 ba 93 5a 72 2f 44 2f 22 9d c8 65 2b bb 35 |...Zr/D/"..e+.5 00b0 67 91 86 0b 91 52 a6 3c d0 e4 19 82 cf 14 c2 c4 g....R.<........ 00c0 39 3a c3 f9 f4 db 79 52 e3 c1 00 00 00 14 a2 c5 9:....yR........ 00d0 f0 05 92 5e 1d 86 de 62 df 4f ab 68 71 54 7e ce ...^...b.O.hqT~. 00e0 74 d2 t. Frame 4 (230 bytes on wire, 230 bytes captured) Arrival Time: Mar 22, 2004 14:58:34.142891000 Time delta from previous packet: 0.181774000 seconds Time since reference or first frame: 0.288518000 seconds Frame Number: 4 Packet Length: 230 bytes Capture Length: 230 bytes Ethernet II, Src: 00:e0:7b:00:0d:61, Dst: 00:0c:29:e6:ad:b9 Destination: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Source: 00:e0:7b:00:0d:61 (00:e0:7b:00:0d:61) Type: IP (0x0800) Frame check sequence: 0xe7509716 (correct) Internet Protocol, Src Addr: 165.227.249.132 (165.227.249.132), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0xe0 (DSCP 0x38: Class Selector 7; ECN: 0x00) 1110 00.. = Differentiated Services Codepoint: Class Selector 7 (0x38) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 212 Identification: 0x08e3 (2275) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x318e (correct) Source: 165.227.249.132 (165.227.249.132) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 192 Checksum: 0x3bbb (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xB65EF7BB45CB2E42 Responder cookie: 0x4417A661CE68258D Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 184 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 24 Nonce Data 0000 00 0c 29 e6 ad b9 00 e0 7b 00 0d 61 08 00 45 e0 ..).....{..a..E. 0010 00 d4 08 e3 00 00 40 11 31 8e a5 e3 f9 84 a5 e3 ......@.1....... 0020 f9 7c 01 f4 01 f4 00 c0 3b bb b6 5e f7 bb 45 cb .|......;..^..E. 0030 2e 42 44 17 a6 61 ce 68 25 8d 04 10 02 00 00 00 .BD..a.h%....... 0040 00 00 00 00 00 b8 0a 00 00 84 09 92 72 92 ee 31 ............r..1 0050 53 bd 31 59 b7 bc 93 16 9e b0 70 77 bd 52 4d 3d S.1Y......pw.RM= 0060 72 c9 43 6e aa bb 14 03 c4 87 af b1 3d d0 ad a0 r.Cn........=... 0070 6a ef 6b 7a 03 26 ca d9 e1 a9 13 68 a3 48 63 e6 j.kz.&.....h.Hc. 0080 2a 4d 1d bd cc 58 c9 ef 46 89 45 43 8b c4 8b 65 *M...X..F.EC...e 0090 f1 fd 5a 62 2b f2 68 82 52 db 6b f5 a7 d5 9b 7b ..Zb+.h.R.k....{ 00a0 14 3d b2 dc ce 02 19 5b 34 df d8 64 13 22 05 9f .=.....[4..d.".. 00b0 02 25 e1 fd f9 0f 48 9c 9b fc b1 ff 91 e2 16 d5 .%....H......... 00c0 08 ea d0 dc 9f 18 4d 27 cb 67 00 00 00 18 ab 5f ......M'.g....._ 00d0 55 6a dd 54 73 e2 7d 5e 0a 8c 6f 14 3c 6a 11 67 Uj.Ts.}^..o.., 0070 7f 43 8b a6 bc cd 26 15 14 c0 9a fc 5a 70 d1 4b .C....&.....Zp.K 0080 d1 38 59 8a c5 fd f3 8e c3 1d ad 5d 75 7c 5a 1c .8Y........]u|Z. 0090 d3 a4 c2 af 09 d2 c7 e1 c2 ec 69 80 a4 4b b3 a6 ..........i..K.. 00a0 50 62 c3 b1 a6 11 1d 96 7c 56 a6 58 61 31 92 76 Pb......|V.Xa1.v 00b0 d2 6e 79 4f a8 45 a0 23 4f 6f 92 9f 9f 7a 18 ad .nyO.E.#Oo...z.. 00c0 34 f4 b2 fb 8f ea 73 98 6d e8 30 d1 3b 43 7f 4e 4.....s.m.0.;C.N 00d0 7e 56 fc 29 57 0c f4 e7 19 aa 58 f8 4e e6 d9 a8 ~V.)W.....X.N... 00e0 e6 a9 2f 9d 4d 60 5f e7 fa 17 96 5e 61 4b c0 e5 ../.M`_....^aK.. 00f0 b3 8d 4c b5 a4 30 72 99 7f a3 8d 3c 07 92 91 11 ..L..0r....<.... 0100 d0 2f 0c 90 78 4e 67 d4 71 cd d7 e7 45 21 b6 94 ./..xNg.q...E!.. 0110 33 e7 e0 f6 2d c0 cb 0c d3 ec 75 5c b3 73 39 55 3...-.....u\.s9U 0120 e9 67 c8 23 84 43 50 14 2f b6 6b 03 f0 8d b5 97 .g.#.CP./.k..... 0130 b6 74 27 83 ac 62 4c d7 32 a0 31 33 6c 33 7f a4 .t'..bL.2.13l3.. 0140 ce 65 bc 0d ed dd 0d ac aa 6b 5e 72 42 f1 e1 f1 .e.......k^rB... 0150 34 9a 4. Frame 8 (338 bytes on wire, 338 bytes captured) Arrival Time: Mar 22, 2004 14:58:34.440135000 Time delta from previous packet: 0.214809000 seconds Time since reference or first frame: 0.585762000 seconds Frame Number: 8 Packet Length: 338 bytes Capture Length: 338 bytes Ethernet II, Src: 00:e0:7b:00:0d:61, Dst: 00:0c:29:e6:ad:b9 Destination: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Source: 00:e0:7b:00:0d:61 (00:e0:7b:00:0d:61) Type: IP (0x0800) Frame check sequence: 0xbd6b145a (correct) Internet Protocol, Src Addr: 165.227.249.132 (165.227.249.132), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0xe0 (DSCP 0x38: Class Selector 7; ECN: 0x00) 1110 00.. = Differentiated Services Codepoint: Class Selector 7 (0x38) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 320 Identification: 0x0921 (2337) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x30e4 (correct) Source: 165.227.249.132 (165.227.249.132) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 300 Checksum: 0x7345 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xB65EF7BB45CB2E42 Responder cookie: 0x4417A661CE68258D Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xAB7B4944 Length: 292 Encrypted payload (264 bytes) 0000 00 0c 29 e6 ad b9 00 e0 7b 00 0d 61 08 00 45 e0 ..).....{..a..E. 0010 01 40 09 21 00 00 40 11 30 e4 a5 e3 f9 84 a5 e3 .@.!..@.0....... 0020 f9 7c 01 f4 01 f4 01 2c 73 45 b6 5e f7 bb 45 cb .|.....,sE.^..E. 0030 2e 42 44 17 a6 61 ce 68 25 8d 08 10 20 01 ab 7b .BD..a.h%... ..{ 0040 49 44 00 00 01 24 01 60 1a 19 2e f8 1a de 8f 9f ID...$.`........ 0050 e6 5f a0 6b f2 c4 92 13 d5 cd 77 b6 85 85 fd 70 ._.k......w....p 0060 31 94 0e 9f 1a e7 54 1d 7a 56 0f d5 20 8f 8f 7e 1.....T.zV.. ..~ 0070 92 b5 d5 d8 60 e8 99 1f 7d 33 73 01 72 16 46 01 ....`...}3s.r.F. 0080 9b 49 b0 7e 99 b6 28 a5 65 96 12 da 7f 7f 0c 6c .I.~..(.e......l 0090 fd df a7 64 e9 97 47 1f c0 8e 64 ba f5 c6 38 38 ...d..G...d...88 00a0 c9 d2 f3 1a ed 42 6f 8f 11 89 ab aa 49 ab 50 56 .....Bo.....I.PV 00b0 34 ec 32 1d 07 5c a2 b4 56 1d 22 88 d4 5f 0b f1 4.2..\..V.".._.. 00c0 d8 5e f7 b5 b9 03 a4 20 ec 79 a7 87 86 0f 77 53 .^..... .y....wS 00d0 5f ed 23 f9 37 e1 c0 8e 1c 4a 3e 6e dd d0 a9 10 _.#.7....J>n.... 00e0 64 7e 31 0b df c7 56 aa 05 87 6b 3c e6 fe da 1d d~1...V...k<.... 00f0 e4 80 97 c7 64 cf b3 dc a2 cc f4 10 b8 e1 4b db ....d.........K. 0100 7c d7 be a5 df ed 0b f2 da 42 bd 03 fe db 0b ee |........B...... 0110 19 22 c4 65 d4 05 26 00 81 ee fc 69 d5 cc 92 1c .".e..&....i.... 0120 d9 6f 52 af 16 fe ba e0 3a 85 ff 1d f9 bd de 64 .oR.....:......d 0130 0b f2 3e 31 5a 52 45 ea 19 d2 e6 1c 1e 1b 08 40 ..>1ZRE........@ 0140 87 a5 f4 9a d8 6c f2 65 93 e9 de e3 a0 62 bd 6b .....l.e.....b.k 0150 14 5a .Z Frame 9 (98 bytes on wire, 98 bytes captured) Arrival Time: Mar 22, 2004 14:58:34.449335000 Time delta from previous packet: 0.009200000 seconds Time since reference or first frame: 0.594962000 seconds Frame Number: 9 Packet Length: 98 bytes Capture Length: 98 bytes Ethernet II, Src: 00:0c:29:e6:ad:b9, Dst: 00:e0:7b:00:0d:61 Destination: 00:e0:7b:00:0d:61 (00:e0:7b:00:0d:61) Source: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Type: IP (0x0800) Frame check sequence: 0x04c75b73 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.132 (165.227.249.132) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 80 Identification: 0x0aed (2797) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x30e8 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.132 (165.227.249.132) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 60 Checksum: 0x4f4a (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xB65EF7BB45CB2E42 Responder cookie: 0x4417A661CE68258D Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xAB7B4944 Length: 52 Encrypted payload (24 bytes) 0000 00 e0 7b 00 0d 61 00 0c 29 e6 ad b9 08 00 45 00 ..{..a..).....E. 0010 00 50 0a ed 00 00 40 11 30 e8 a5 e3 f9 7c a5 e3 .P....@.0....|.. 0020 f9 84 01 f4 01 f4 00 3c 4f 4a b6 5e f7 bb 45 cb ........ 0090 37 6b e5 b1 1d e8 22 1d 6a 7b 7k....".j{ Frame 12 (154 bytes on wire, 154 bytes captured) Arrival Time: Mar 22, 2004 14:58:34.822036000 Time delta from previous packet: 0.110182000 seconds Time since reference or first frame: 0.967663000 seconds Frame Number: 12 Packet Length: 154 bytes Capture Length: 154 bytes Ethernet II, Src: 00:0c:29:e6:ad:b9, Dst: 00:e0:7b:00:0d:61 Destination: 00:e0:7b:00:0d:61 (00:e0:7b:00:0d:61) Source: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Type: IP (0x0800) Frame check sequence: 0xb98ee4c6 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.132 (165.227.249.132) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 136 Identification: 0x0036 (54) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b45 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.132 (165.227.249.132) Encapsulating Security Payload SPI: 0x00036557 Sequence: 3 Data (108 bytes) 0000 00 e0 7b 00 0d 61 00 0c 29 e6 ad b9 08 00 45 00 ..{..a..).....E. 0010 00 88 00 36 00 00 f0 32 8b 45 a5 e3 f9 7c a5 e3 ...6...2.E...|.. 0020 f9 84 00 03 65 57 00 00 00 03 c9 86 a1 8d 9c 19 ....eW.......... 0030 54 b7 63 01 ba f5 54 ba bf 80 d3 b5 63 1c 1a 92 T.c...T.....c... 0040 24 0c 83 ef ee 85 fd 86 0b 7a c1 d7 94 1a 83 fe $........z...... 0050 6a 7e c4 27 11 e5 c8 4f 58 91 14 66 d7 63 bb 78 j~.'...OX..f.c.x 0060 3e 83 f7 72 96 76 85 23 94 44 7c a3 a7 07 89 1a >..r.v.#.D|..... 0070 fb 57 e3 65 7f 14 5a 4c 5a 44 af 9f ab e5 20 f3 .W.e..ZLZD.... . 0080 86 a4 69 d6 18 cc a2 78 4a 8a ba b0 8b 3d da 20 ..i....xJ....=. 0090 8f b6 ab 7f ef eb b9 8e e4 c6 .......... Frame 13 (154 bytes on wire, 154 bytes captured) Arrival Time: Mar 22, 2004 14:58:34.822414000 Time delta from previous packet: 0.000378000 seconds Time since reference or first frame: 0.968041000 seconds Frame Number: 13 Packet Length: 154 bytes Capture Length: 154 bytes Ethernet II, Src: 00:e0:7b:00:0d:61, Dst: 00:0c:29:e6:ad:b9 Destination: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Source: 00:e0:7b:00:0d:61 (00:e0:7b:00:0d:61) Type: IP (0x0800) Frame check sequence: 0xb9de1812 (correct) Internet Protocol, Src Addr: 165.227.249.132 (165.227.249.132), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 136 Identification: 0x0932 (2354) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x7349 (correct) Source: 165.227.249.132 (165.227.249.132) Destination: 165.227.249.124 (165.227.249.124) Encapsulating Security Payload SPI: 0xfa312d30 Sequence: 2 Data (108 bytes) 0000 00 0c 29 e6 ad b9 00 e0 7b 00 0d 61 08 00 45 00 ..).....{..a..E. 0010 00 88 09 32 00 00 ff 32 73 49 a5 e3 f9 84 a5 e3 ...2...2sI...... 0020 f9 7c fa 31 2d 30 00 00 00 02 85 eb 88 71 41 14 .|.1-0.......qA. 0030 69 62 5f 6b d0 83 59 1c ee 42 34 10 d1 d3 9c 1f ib_k..Y..B4..... 0040 5e 7f e4 59 e1 b1 53 5b 76 5c 0a 5b 91 fc de f8 ^..Y..S[v\.[.... 0050 8b f4 d1 df 1f 0d 2c ce 58 7e 65 2f 2a cc 1e 9f ......,.X~e/*... 0060 36 dd a2 69 4c 82 7d d4 ec e8 88 d9 c7 88 aa cb 6..iL.}......... 0070 1f 90 95 3b 73 11 1d 04 2d 58 f6 03 32 42 00 47 ...;s...-X..2B.G 0080 e2 ab 9f 55 3e d5 a3 d8 0d 54 31 b4 78 15 63 46 ...U>....T1.x.cF 0090 52 21 3d f6 21 13 b9 de 18 12 R!=.!..... Frame 14 (154 bytes on wire, 154 bytes captured) Arrival Time: Mar 22, 2004 14:58:35.830133000 Time delta from previous packet: 1.007719000 seconds Time since reference or first frame: 1.975760000 seconds Frame Number: 14 Packet Length: 154 bytes Capture Length: 154 bytes Ethernet II, Src: 00:0c:29:e6:ad:b9, Dst: 00:e0:7b:00:0d:61 Destination: 00:e0:7b:00:0d:61 (00:e0:7b:00:0d:61) Source: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Type: IP (0x0800) Frame check sequence: 0x3b971fa1 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.132 (165.227.249.132) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 136 Identification: 0x0037 (55) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b44 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.132 (165.227.249.132) Encapsulating Security Payload SPI: 0x00036557 Sequence: 4 Data (108 bytes) 0000 00 e0 7b 00 0d 61 00 0c 29 e6 ad b9 08 00 45 00 ..{..a..).....E. 0010 00 88 00 37 00 00 f0 32 8b 44 a5 e3 f9 7c a5 e3 ...7...2.D...|.. 0020 f9 84 00 03 65 57 00 00 00 04 20 05 ef c4 92 7e ....eW.... ....~ 0030 f8 15 d7 a4 f6 18 36 4c 1a a0 64 b8 7d de 46 02 ......6L..d.}.F. 0040 c0 c3 9d 08 f7 b8 2d b5 54 03 1d 03 a5 a3 30 aa ......-.T.....0. 0050 79 ba 26 bb 1f 42 11 bf f2 3e 04 d3 c1 bf 25 1b y.&..B...>....%. 0060 cb af ea 06 18 bb 37 13 e8 fd ba 15 97 b4 65 40 ......7.......e@ 0070 42 e4 2d 30 22 3a 74 a2 2d 21 0b 54 ac 7a 50 21 B.-0":t.-!.T.zP! 0080 30 32 a8 32 62 35 07 89 5c f8 38 06 5d 82 67 45 02.2b5..\.8.].gE 0090 63 cc 0b d3 f5 11 3b 97 1f a1 c.....;... Frame 15 (154 bytes on wire, 154 bytes captured) Arrival Time: Mar 22, 2004 14:58:35.830666000 Time delta from previous packet: 0.000533000 seconds Time since reference or first frame: 1.976293000 seconds Frame Number: 15 Packet Length: 154 bytes Capture Length: 154 bytes Ethernet II, Src: 00:e0:7b:00:0d:61, Dst: 00:0c:29:e6:ad:b9 Destination: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Source: 00:e0:7b:00:0d:61 (00:e0:7b:00:0d:61) Type: IP (0x0800) Frame check sequence: 0x3307289b (correct) Internet Protocol, Src Addr: 165.227.249.132 (165.227.249.132), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 136 Identification: 0x0933 (2355) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x7348 (correct) Source: 165.227.249.132 (165.227.249.132) Destination: 165.227.249.124 (165.227.249.124) Encapsulating Security Payload SPI: 0xfa312d30 Sequence: 3 Data (108 bytes) 0000 00 0c 29 e6 ad b9 00 e0 7b 00 0d 61 08 00 45 00 ..).....{..a..E. 0010 00 88 09 33 00 00 ff 32 73 48 a5 e3 f9 84 a5 e3 ...3...2sH...... 0020 f9 7c fa 31 2d 30 00 00 00 03 9f 55 3e d5 a3 d8 .|.1-0.....U>... 0030 0d 54 86 38 fd e3 6a 36 61 b9 c8 a3 50 bf 8c c5 .T.8..j6a...P... 0040 90 1d b8 d0 34 60 8d f1 41 85 a1 0b 64 b6 cd c6 ....4`..A...d... 0050 fd 3c 07 05 bb f9 56 f8 aa 79 b0 95 40 22 91 57 .<....V..y..@".W 0060 eb fb cb 8e 58 4b fd 8a f5 75 b5 da fe 14 bd ea ....XK...u...... 0070 87 f7 c1 a3 a8 a8 5c e0 3b 09 c7 f5 99 30 7a 96 ......\.;....0z. 0080 81 53 10 8f 21 9d cd 3d 39 71 c8 19 4e 85 f0 a7 .S..!..=9q..N... 0090 b9 9e 5a 83 d6 7f 33 07 28 9b ..Z...3.(. Frame 16 (154 bytes on wire, 154 bytes captured) Arrival Time: Mar 22, 2004 14:58:36.820268000 Time delta from previous packet: 0.989602000 seconds Time since reference or first frame: 2.965895000 seconds Frame Number: 16 Packet Length: 154 bytes Capture Length: 154 bytes Ethernet II, Src: 00:0c:29:e6:ad:b9, Dst: 00:e0:7b:00:0d:61 Destination: 00:e0:7b:00:0d:61 (00:e0:7b:00:0d:61) Source: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Type: IP (0x0800) Frame check sequence: 0x3be1f82b (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.132 (165.227.249.132) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 136 Identification: 0x0038 (56) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b43 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.132 (165.227.249.132) Encapsulating Security Payload SPI: 0x00036557 Sequence: 5 Data (108 bytes) 0000 00 e0 7b 00 0d 61 00 0c 29 e6 ad b9 08 00 45 00 ..{..a..).....E. 0010 00 88 00 38 00 00 f0 32 8b 43 a5 e3 f9 7c a5 e3 ...8...2.C...|.. 0020 f9 84 00 03 65 57 00 00 00 05 63 47 e0 3e 7d cb ....eW....cG.>}. 0030 2f 1c 63 dd c8 98 44 42 4f 1f 1c f9 35 05 ed bc /.c...DBO...5... 0040 37 27 47 41 95 69 a5 e3 8a 2c f5 00 65 e8 1f 37 7'GA.i...,..e..7 0050 ad 1c 40 95 a7 41 a9 77 d7 f5 b8 5a a8 ee 7a ea ..@..A.w...Z..z. 0060 b3 f4 1f 5d e9 b9 b9 1a b5 11 ff 6c 69 90 27 07 ...].......li.'. 0070 a3 27 cf 68 fe c8 57 26 a8 bd f3 a8 19 84 9a b4 .'.h..W&........ 0080 8e 96 91 8a 8b 3e 12 da ae b1 3a f9 e6 a1 4c 52 .....>....:...LR 0090 bd a9 66 08 0a 43 3b e1 f8 2b ..f..C;..+ Frame 17 (154 bytes on wire, 154 bytes captured) Arrival Time: Mar 22, 2004 14:58:36.820774000 Time delta from previous packet: 0.000506000 seconds Time since reference or first frame: 2.966401000 seconds Frame Number: 17 Packet Length: 154 bytes Capture Length: 154 bytes Ethernet II, Src: 00:e0:7b:00:0d:61, Dst: 00:0c:29:e6:ad:b9 Destination: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Source: 00:e0:7b:00:0d:61 (00:e0:7b:00:0d:61) Type: IP (0x0800) Frame check sequence: 0xa0495938 (correct) Internet Protocol, Src Addr: 165.227.249.132 (165.227.249.132), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 136 Identification: 0x0934 (2356) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x7347 (correct) Source: 165.227.249.132 (165.227.249.132) Destination: 165.227.249.124 (165.227.249.124) Encapsulating Security Payload SPI: 0xfa312d30 Sequence: 4 Data (108 bytes) 0000 00 0c 29 e6 ad b9 00 e0 7b 00 0d 61 08 00 45 00 ..).....{..a..E. 0010 00 88 09 34 00 00 ff 32 73 47 a5 e3 f9 84 a5 e3 ...4...2sG...... 0020 f9 7c fa 31 2d 30 00 00 00 04 10 8f 21 9d cd 3d .|.1-0......!..= 0030 39 71 b7 c6 8f 06 35 76 2b 35 64 2b 97 c5 39 91 9q....5v+5d+..9. 0040 b0 60 9b 95 8e 6f 10 be e1 33 f9 f8 2d 6d 87 a9 .`...o...3..-m.. 0050 8a c5 47 3b a8 24 f3 29 1e 5f db 77 21 5b 7b 05 ..G;.$.)._.w![{. 0060 58 72 42 11 9c 68 44 ef 9d 3a 2e 33 bf 42 a7 55 XrB..hD..:.3.B.U 0070 ac 27 b0 00 94 3f 3f b4 5f a3 e1 9f fc fb 29 83 .'...??._.....). 0080 35 89 4f fb 39 bc 17 85 1b 20 73 9f d1 05 e5 c2 5.O.9.... s..... 0090 65 22 e6 13 44 12 a0 49 59 38 e"..D..IY8