Frame 1 (266 bytes on wire, 266 bytes captured) Arrival Time: Mar 23, 2004 13:56:47.493969000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 266 bytes Capture Length: 266 bytes Ethernet II, Src: 00:0c:29:e6:ad:b9, Dst: 00:0c:41:90:f1:c1 Destination: 00:0c:41:90:f1:c1 (00:0c:41:90:f1:c1) Source: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Type: IP (0x0800) Frame check sequence: 0xf41bb05d (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.133 (165.227.249.133) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 248 Identification: 0x0af8 (2808) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3034 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.133 (165.227.249.133) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 228 Checksum: 0xd773 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x276180E1BD8C0CBE Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 220 Security Association payload Next payload: Vendor ID (13) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 0 Next payload: NONE (0) Length: 40 Proposal number: 0 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 0 Next payload: NONE (0) Length: 32 Transform number: 0 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: unknown vendor ID: 0x8F9CC94E01248ECDF147594C284B213B Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-stenberg-ipsec-nat-traversal-01 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-stenberg-ipsec-nat-traversal-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-03 0000 00 0c 41 90 f1 c1 00 0c 29 e6 ad b9 08 00 45 00 ..A.....).....E. 0010 00 f8 0a f8 00 00 40 11 30 34 a5 e3 f9 7c a5 e3 ......@.04...|.. 0020 f9 85 01 f4 01 f4 00 e4 d7 73 27 61 80 e1 bd 8c .........s'a.... 0030 0c be 00 00 00 00 00 00 00 00 01 10 02 00 00 00 ................ 0040 00 00 00 00 00 dc 0d 00 00 34 00 00 00 01 00 00 .........4...... 0050 00 01 00 00 00 28 00 01 00 01 00 00 00 20 00 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 03 00 01 80 04 ................ 0070 00 02 80 0b 00 01 80 0c 70 80 0d 00 00 14 8f 9c ........p....... 0080 c9 4e 01 24 8e cd f1 47 59 4c 28 4b 21 3b 0d 00 .N.$...GYL(K!;.. 0090 00 14 27 ba b5 dc 01 ea 07 60 ea 4e 31 90 ac 27 ..'......`.N1..' 00a0 c0 d0 0d 00 00 14 61 05 c4 22 e7 68 47 e4 3f 96 ......a..".hG.?. 00b0 84 80 12 92 ae cd 0d 00 00 14 44 85 15 2d 18 b6 ..........D..-.. 00c0 bb cd 0b e8 a8 46 95 79 dd cc 0d 00 00 14 cd 60 .....F.y.......` 00d0 46 43 35 df 21 f8 7c fd b2 fc 68 b6 a4 48 0d 00 FC5.!.|...h..H.. 00e0 00 14 90 cb 80 91 3e bb 69 6e 08 63 81 b5 ec 42 ......>.in.c...B 00f0 7b 1f 00 00 00 14 7d 94 19 a6 53 10 ca 6f 2c 17 {.....}...S..o,. 0100 9d 92 15 52 9d 56 f4 1b b0 5d ...R.V...] Frame 2 (126 bytes on wire, 126 bytes captured) Arrival Time: Mar 23, 2004 13:56:47.498051000 Time delta from previous packet: 0.004082000 seconds Time since reference or first frame: 0.004082000 seconds Frame Number: 2 Packet Length: 126 bytes Capture Length: 126 bytes Ethernet II, Src: 00:0c:41:90:f1:c1, Dst: 00:0c:29:e6:ad:b9 Destination: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Source: 00:0c:41:90:f1:c1 (00:0c:41:90:f1:c1) Type: IP (0x0800) Frame check sequence: 0xd444948a (correct) Internet Protocol, Src Addr: 165.227.249.133 (165.227.249.133), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 108 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfbb7 (correct) Source: 165.227.249.133 (165.227.249.133) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 88 Checksum: 0x70c4 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x276180E1BD8C0CBE Responder cookie: 0xEE4CF363FB788780 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 80 Security Association payload Next payload: NONE (0) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 0 Next payload: NONE (0) Length: 40 Proposal number: 0 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 0 Next payload: NONE (0) Length: 32 Transform number: 0 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) 0000 00 0c 29 e6 ad b9 00 0c 41 90 f1 c1 08 00 45 00 ..).....A.....E. 0010 00 6c 00 00 40 00 40 11 fb b7 a5 e3 f9 85 a5 e3 .l..@.@......... 0020 f9 7c 01 f4 01 f4 00 58 70 c4 27 61 80 e1 bd 8c .|.....Xp.'a.... 0030 0c be ee 4c f3 63 fb 78 87 80 01 10 02 00 00 00 ...L.c.x........ 0040 00 00 00 00 00 50 00 00 00 34 00 00 00 01 00 00 .....P...4...... 0050 00 01 00 00 00 28 00 01 00 01 00 00 00 20 00 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 03 00 01 80 04 ................ 0070 00 02 80 0b 00 01 80 0c 70 80 d4 44 94 8a ........p..D.. Frame 3 (226 bytes on wire, 226 bytes captured) Arrival Time: Mar 23, 2004 13:56:47.505365000 Time delta from previous packet: 0.007314000 seconds Time since reference or first frame: 0.011396000 seconds Frame Number: 3 Packet Length: 226 bytes Capture Length: 226 bytes Ethernet II, Src: 00:0c:29:e6:ad:b9, Dst: 00:0c:41:90:f1:c1 Destination: 00:0c:41:90:f1:c1 (00:0c:41:90:f1:c1) Source: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Type: IP (0x0800) Frame check sequence: 0x769429e3 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.133 (165.227.249.133) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 208 Identification: 0x0af9 (2809) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x305b (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.133 (165.227.249.133) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 188 Checksum: 0x1edc (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x276180E1BD8C0CBE Responder cookie: 0xEE4CF363FB788780 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 180 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 20 Nonce Data 0000 00 0c 41 90 f1 c1 00 0c 29 e6 ad b9 08 00 45 00 ..A.....).....E. 0010 00 d0 0a f9 00 00 40 11 30 5b a5 e3 f9 7c a5 e3 ......@.0[...|.. 0020 f9 85 01 f4 01 f4 00 bc 1e dc 27 61 80 e1 bd 8c ..........'a.... 0030 0c be ee 4c f3 63 fb 78 87 80 04 10 02 00 00 00 ...L.c.x........ 0040 00 00 00 00 00 b4 0a 00 00 84 7b b1 32 23 6f b8 ..........{.2#o. 0050 c7 6f a5 d1 43 57 57 d2 23 c9 7f 38 17 df 1f ba .o..CWW.#..8.... 0060 d3 48 46 13 3c 89 e7 fa 31 8c 56 68 d8 22 a8 98 .HF.<...1.Vh.".. 0070 28 04 c8 e2 d1 0d 15 25 0f e8 e3 c6 24 8a 83 cf (......%....$... 0080 6f a7 3a 79 c3 e3 3e b8 ab b0 d6 c0 2c dc f5 69 o.:y..>.....,..i 0090 a4 40 57 bd c9 31 53 bb 3e 97 a5 8e d1 6e 3f e5 .@W..1S.>....n?. 00a0 d6 7b 2c fc 6b 5c 63 d3 39 91 ba 54 17 e6 53 fc .{,.k\c.9..T..S. 00b0 e6 db 18 15 94 66 13 e6 71 e9 4a 48 43 a4 7b 61 .....f..q.JHC.{a 00c0 90 17 5c 98 c9 25 42 87 db 75 00 00 00 14 eb 29 ..\..%B..u.....) 00d0 c5 e5 f0 e3 11 46 f0 69 be 4b 83 05 8c 88 76 94 .....F.i.K....v. 00e0 29 e3 ). Frame 4 (226 bytes on wire, 226 bytes captured) Arrival Time: Mar 23, 2004 13:56:47.620987000 Time delta from previous packet: 0.115622000 seconds Time since reference or first frame: 0.127018000 seconds Frame Number: 4 Packet Length: 226 bytes Capture Length: 226 bytes Ethernet II, Src: 00:0c:41:90:f1:c1, Dst: 00:0c:29:e6:ad:b9 Destination: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Source: 00:0c:41:90:f1:c1 (00:0c:41:90:f1:c1) Type: IP (0x0800) Frame check sequence: 0x6287d828 (correct) Internet Protocol, Src Addr: 165.227.249.133 (165.227.249.133), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 208 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb53 (correct) Source: 165.227.249.133 (165.227.249.133) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 188 Checksum: 0x4768 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x276180E1BD8C0CBE Responder cookie: 0xEE4CF363FB788780 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 180 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 20 Nonce Data 0000 00 0c 29 e6 ad b9 00 0c 41 90 f1 c1 08 00 45 00 ..).....A.....E. 0010 00 d0 00 00 40 00 40 11 fb 53 a5 e3 f9 85 a5 e3 ....@.@..S...... 0020 f9 7c 01 f4 01 f4 00 bc 47 68 27 61 80 e1 bd 8c .|......Gh'a.... 0030 0c be ee 4c f3 63 fb 78 87 80 04 10 02 00 00 00 ...L.c.x........ 0040 00 00 00 00 00 b4 0a 00 00 84 82 44 de 32 fb 1f ...........D.2.. 0050 ee d0 68 69 a2 1e 35 c1 3d 4c 6b 69 db 96 88 0a ..hi..5.=Lki.... 0060 d5 51 ac af b2 1e f2 09 e4 a2 77 d1 f8 d0 ca e7 .Q........w..... 0070 ed 12 3d 1d 0c 22 09 f9 93 01 67 8e 5c 19 70 4c ..=.."....g.\.pL 0080 ec f3 80 a8 eb f4 b0 04 5c b3 4b 00 76 ad 59 83 ........\.K.v.Y. 0090 04 1e c9 03 eb 75 7d fa 6d 82 8f 25 bb 0c e1 50 .....u}.m..%...P 00a0 91 85 9c f2 bc 9b 42 87 33 3c 99 9e 1b d6 f7 17 ......B.3<...... 00b0 49 83 56 ee 29 0d cd 60 dd 75 03 18 6e d7 f7 19 I.V.)..`.u..n... 00c0 e0 15 01 04 73 67 ce bb 38 b9 00 00 00 14 59 90 ....sg..8.....Y. 00d0 f2 dd 23 c0 20 00 e8 92 37 1d 6a 93 f4 e9 62 87 ..#. ...7.j...b. 00e0 d8 28 .( Frame 5 (122 bytes on wire, 122 bytes captured) Arrival Time: Mar 23, 2004 13:56:47.627862000 Time delta from previous packet: 0.006875000 seconds Time since reference or first frame: 0.133893000 seconds Frame Number: 5 Packet Length: 122 bytes Capture Length: 122 bytes Ethernet II, Src: 00:0c:29:e6:ad:b9, Dst: 00:0c:41:90:f1:c1 Destination: 00:0c:41:90:f1:c1 (00:0c:41:90:f1:c1) Source: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Type: IP (0x0800) Frame check sequence: 0x822c1ca0 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.133 (165.227.249.133) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 104 Identification: 0x0afa (2810) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x30c2 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.133 (165.227.249.133) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 84 Checksum: 0x3a36 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x276180E1BD8C0CBE Responder cookie: 0xEE4CF363FB788780 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 76 Encrypted payload (48 bytes) 0000 00 0c 41 90 f1 c1 00 0c 29 e6 ad b9 08 00 45 00 ..A.....).....E. 0010 00 68 0a fa 00 00 40 11 30 c2 a5 e3 f9 7c a5 e3 .h....@.0....|.. 0020 f9 85 01 f4 01 f4 00 54 3a 36 27 61 80 e1 bd 8c .......T:6'a.... 0030 0c be ee 4c f3 63 fb 78 87 80 05 10 02 01 00 00 ...L.c.x........ 0040 00 00 00 00 00 4c ae c3 59 63 e1 54 6a a9 31 b4 .....L..Yc.Tj.1. 0050 7f 1c c3 9d e7 cd 37 97 72 5d 3f 2b 09 1f fc de ......7.r]?+.... 0060 a8 90 fc 57 23 86 8a da f6 b7 06 c5 3e e2 da 86 ...W#.......>... 0070 ff 96 49 33 51 50 82 2c 1c a0 ..I3QP.,.. Frame 6 (114 bytes on wire, 114 bytes captured) Arrival Time: Mar 23, 2004 13:56:47.635567000 Time delta from previous packet: 0.007705000 seconds Time since reference or first frame: 0.141598000 seconds Frame Number: 6 Packet Length: 114 bytes Capture Length: 114 bytes Ethernet II, Src: 00:0c:41:90:f1:c1, Dst: 00:0c:29:e6:ad:b9 Destination: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Source: 00:0c:41:90:f1:c1 (00:0c:41:90:f1:c1) Type: IP (0x0800) Frame check sequence: 0x1c82469d (correct) Internet Protocol, Src Addr: 165.227.249.133 (165.227.249.133), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfbc3 (correct) Source: 165.227.249.133 (165.227.249.133) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 76 Checksum: 0xafea (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x276180E1BD8C0CBE Responder cookie: 0xEE4CF363FB788780 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 68 Encrypted payload (40 bytes) 0000 00 0c 29 e6 ad b9 00 0c 41 90 f1 c1 08 00 45 00 ..).....A.....E. 0010 00 60 00 00 40 00 40 11 fb c3 a5 e3 f9 85 a5 e3 .`..@.@......... 0020 f9 7c 01 f4 01 f4 00 4c af ea 27 61 80 e1 bd 8c .|.....L..'a.... 0030 0c be ee 4c f3 63 fb 78 87 80 05 10 02 01 00 00 ...L.c.x........ 0040 00 00 00 00 00 44 3e 37 6d 51 18 d4 26 0b 70 b2 .....D>7mQ..&.p. 0050 ed 78 94 f4 ee 2a 76 63 97 0d 1d cd 61 62 2d 50 .x...*vc....ab-P 0060 f5 b6 0b e0 a0 13 29 39 4f 17 3c 32 52 5c 1c 82 ......)9O.<2R\.. 0070 46 9d F. Frame 7 (338 bytes on wire, 338 bytes captured) Arrival Time: Mar 23, 2004 13:56:47.649425000 Time delta from previous packet: 0.013858000 seconds Time since reference or first frame: 0.155456000 seconds Frame Number: 7 Packet Length: 338 bytes Capture Length: 338 bytes Ethernet II, Src: 00:0c:29:e6:ad:b9, Dst: 00:0c:41:90:f1:c1 Destination: 00:0c:41:90:f1:c1 (00:0c:41:90:f1:c1) Source: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Type: IP (0x0800) Frame check sequence: 0x40fc80c1 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.133 (165.227.249.133) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 320 Identification: 0x0afb (2811) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x2fe9 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.133 (165.227.249.133) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 300 Checksum: 0x3f4b (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x276180E1BD8C0CBE Responder cookie: 0xEE4CF363FB788780 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xEA26E10A Length: 292 Encrypted payload (264 bytes) 0000 00 0c 41 90 f1 c1 00 0c 29 e6 ad b9 08 00 45 00 ..A.....).....E. 0010 01 40 0a fb 00 00 40 11 2f e9 a5 e3 f9 7c a5 e3 .@....@./....|.. 0020 f9 85 01 f4 01 f4 01 2c 3f 4b 27 61 80 e1 bd 8c .......,?K'a.... 0030 0c be ee 4c f3 63 fb 78 87 80 08 10 20 01 ea 26 ...L.c.x.... ..& 0040 e1 0a 00 00 01 24 93 7d e9 e3 bd d7 d1 fa 78 bb .....$.}......x. 0050 f2 f8 fa 0c 7c 4b 83 e5 fe 02 1f 15 7d 22 ad ae ....|K......}".. 0060 da 09 51 a6 de 11 78 9c 73 65 4b 17 85 2c b5 54 ..Q...x.seK..,.T 0070 21 cf ed 70 f8 f9 2d 45 25 d2 45 1c 37 cd a4 bf !..p..-E%.E.7... 0080 50 4b e5 5e ff ac f2 22 62 88 fe 0d 68 52 f7 55 PK.^..."b...hR.U 0090 50 8a e3 d8 5e 11 92 00 1c 3c c8 61 e1 84 f7 1a P...^....<.a.... 00a0 16 95 44 db b3 c9 93 60 3b ce f8 ad e5 04 74 83 ..D....`;.....t. 00b0 83 55 fe ca c3 03 ca 57 1e f6 73 34 d8 44 68 3f .U.....W..s4.Dh? 00c0 4d f0 a3 7a cd b1 ad 21 41 6b b2 e4 db 26 42 b8 M..z...!Ak...&B. 00d0 27 ca fa 69 f4 4a d5 f4 c0 c1 6f 03 4c 85 ca 93 '..i.J....o.L... 00e0 9d 14 c3 3b b7 01 7b 81 6a 79 ac f5 e1 1f be 9a ...;..{.jy...... 00f0 76 9a 8a b4 04 8d 4b 6a c4 03 17 e6 75 9a dd 1c v.....Kj....u... 0100 d5 ba c7 10 f8 03 48 04 44 61 5f 71 27 c5 c2 fb ......H.Da_q'... 0110 51 5e 72 f1 82 84 3e ff cf 7f 54 12 c1 ce f9 d5 Q^r...>...T..... 0120 a9 85 f3 b5 0a 05 0f ef 96 97 7b 0f f2 a5 db 1c ..........{..... 0130 97 78 9a c2 3d 07 94 38 90 a8 c5 0c 9f 91 ef 74 .x..=..8.......t 0140 7d 9a 2e 2f 0b cf fd fc cc d8 0f 76 c3 92 40 fc }../.......v..@. 0150 80 c1 .. Frame 8 (338 bytes on wire, 338 bytes captured) Arrival Time: Mar 23, 2004 13:56:47.773131000 Time delta from previous packet: 0.123706000 seconds Time since reference or first frame: 0.279162000 seconds Frame Number: 8 Packet Length: 338 bytes Capture Length: 338 bytes Ethernet II, Src: 00:0c:41:90:f1:c1, Dst: 00:0c:29:e6:ad:b9 Destination: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Source: 00:0c:41:90:f1:c1 (00:0c:41:90:f1:c1) Type: IP (0x0800) Frame check sequence: 0xc7502d90 (correct) Internet Protocol, Src Addr: 165.227.249.133 (165.227.249.133), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 320 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfae3 (correct) Source: 165.227.249.133 (165.227.249.133) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 300 Checksum: 0xa3be (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x276180E1BD8C0CBE Responder cookie: 0xEE4CF363FB788780 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xEA26E10A Length: 292 Encrypted payload (264 bytes) 0000 00 0c 29 e6 ad b9 00 0c 41 90 f1 c1 08 00 45 00 ..).....A.....E. 0010 01 40 00 00 40 00 40 11 fa e3 a5 e3 f9 85 a5 e3 .@..@.@......... 0020 f9 7c 01 f4 01 f4 01 2c a3 be 27 61 80 e1 bd 8c .|.....,..'a.... 0030 0c be ee 4c f3 63 fb 78 87 80 08 10 20 01 ea 26 ...L.c.x.... ..& 0040 e1 0a 00 00 01 24 30 da ed 4b bf 3d 03 4b 70 20 .....$0..K.=.Kp 0050 f7 3d e0 ca 7b 91 33 ac 82 4c d6 ab ca cf 7f 50 .=..{.3..L.....P 0060 87 d6 bc 1e 84 b5 d6 85 9e d2 56 49 5d ef 32 a3 ..........VI].2. 0070 51 0b e6 48 c3 9c 23 5a 51 74 f0 f9 e9 cd f6 a1 Q..H..#ZQt...... 0080 09 f5 6f b8 0a 2d dd 43 aa 74 2e 0e 8b 5f 99 f8 ..o..-.C.t..._.. 0090 07 c3 3f ec 51 28 4a e2 20 49 04 e0 08 c9 fe dc ..?.Q(J. I...... 00a0 2b df 3a 37 24 2c 98 06 3f 0c f3 46 56 7c 11 bc +.:7$,..?..FV|.. 00b0 37 1a 87 8e b5 75 f0 30 48 7f 31 89 65 89 f7 89 7....u.0H.1.e... 00c0 8f 4c 2a 8e e8 ed b0 74 dd ea 8a 91 03 a6 3b 6a .L*....t......;j 00d0 d6 8d a7 60 29 f3 26 9b cb 96 ec c7 db 31 39 e7 ...`).&......19. 00e0 02 40 72 ca e2 9b 7f e5 5e fe 7d 30 bc ff 4d 43 .@r.....^.}0..MC 00f0 30 67 a2 2c 65 32 68 09 0c e4 00 c4 a5 5e e4 d0 0g.,e2h......^.. 0100 71 98 5d 8f 0c 4b d4 24 57 34 65 d7 ca 46 bd ec q.]..K.$W4e..F.. 0110 26 d3 0c 5d 50 9f c1 e7 20 9a ba 16 26 e9 78 25 &..]P... ...&.x% 0120 b2 06 2d 90 31 75 31 e8 2a 67 99 fa 3a 26 ef 0b ..-.1u1.*g..:&.. 0130 34 01 3d 1f 70 24 16 34 5d 6a a4 c4 05 6f f2 81 4.=.p$.4]j...o.. 0140 31 8a f0 78 4a 0a 3c 31 fb 34 2d 62 ce e5 c7 50 1..xJ.<1.4-b...P 0150 2d 90 -. Frame 9 (98 bytes on wire, 98 bytes captured) Arrival Time: Mar 23, 2004 13:56:47.782155000 Time delta from previous packet: 0.009024000 seconds Time since reference or first frame: 0.288186000 seconds Frame Number: 9 Packet Length: 98 bytes Capture Length: 98 bytes Ethernet II, Src: 00:0c:29:e6:ad:b9, Dst: 00:0c:41:90:f1:c1 Destination: 00:0c:41:90:f1:c1 (00:0c:41:90:f1:c1) Source: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Type: IP (0x0800) Frame check sequence: 0x0866be7b (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.133 (165.227.249.133) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 80 Identification: 0x0afc (2812) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x30d8 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.133 (165.227.249.133) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 60 Checksum: 0x22eb (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x276180E1BD8C0CBE Responder cookie: 0xEE4CF363FB788780 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xEA26E10A Length: 52 Encrypted payload (24 bytes) 0000 00 0c 41 90 f1 c1 00 0c 29 e6 ad b9 08 00 45 00 ..A.....).....E. 0010 00 50 0a fc 00 00 40 11 30 d8 a5 e3 f9 7c a5 e3 .P....@.0....|.. 0020 f9 85 01 f4 01 f4 00 3c 22 eb 27 61 80 e1 bd 8c .......<".'a.... 0030 0c be ee 4c f3 63 fb 78 87 80 08 10 20 01 ea 26 ...L.c.x.... ..& 0040 e1 0a 00 00 00 34 41 bf cc b4 8d 90 c9 f1 65 98 .....4A.......e. 0050 d6 a2 81 49 14 28 6a 0d ff 04 5e 0e d0 66 08 66 ...I.(j...^..f.f 0060 be 7b .{ Frame 10 (154 bytes on wire, 154 bytes captured) Arrival Time: Mar 23, 2004 13:56:48.054639000 Time delta from previous packet: 0.272484000 seconds Time since reference or first frame: 0.560670000 seconds Frame Number: 10 Packet Length: 154 bytes Capture Length: 154 bytes Ethernet II, Src: 00:0c:29:e6:ad:b9, Dst: 00:0c:41:90:f1:c1 Destination: 00:0c:41:90:f1:c1 (00:0c:41:90:f1:c1) Source: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Type: IP (0x0800) Frame check sequence: 0x0924ecae (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.133 (165.227.249.133) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 136 Identification: 0x003c (60) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b3e (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.133 (165.227.249.133) Encapsulating Security Payload SPI: 0x2983ae4d Sequence: 2 Data (108 bytes) 0000 00 0c 41 90 f1 c1 00 0c 29 e6 ad b9 08 00 45 00 ..A.....).....E. 0010 00 88 00 3c 00 00 f0 32 8b 3e a5 e3 f9 7c a5 e3 ...<...2.>...|.. 0020 f9 85 29 83 ae 4d 00 00 00 02 21 43 ef 1f 5f 97 ..)..M....!C.._. 0030 fc e1 13 14 36 59 1d d3 d1 a7 a5 9e a6 9a d4 e0 ....6Y.......... 0040 94 28 ff 15 03 66 a7 51 84 43 78 e7 f1 5f f6 67 .(...f.Q.Cx.._.g 0050 d5 90 ba 35 b7 d4 f4 ad 08 d4 8e 06 a1 76 64 32 ...5.........vd2 0060 33 a2 78 29 2a c4 b2 06 aa cf 9e 03 45 e6 75 14 3.x)*.......E.u. 0070 37 64 b5 92 34 39 d1 04 aa c6 fd e4 28 9c 4b 47 7d..49......(.KG 0080 84 43 f5 76 9a a4 fb 32 91 1c 7f f7 ba f7 b9 14 .C.v...2........ 0090 c9 a8 67 8e 8e 1e 09 24 ec ae ..g....$.. Frame 11 (154 bytes on wire, 154 bytes captured) Arrival Time: Mar 23, 2004 13:56:48.457895000 Time delta from previous packet: 0.403256000 seconds Time since reference or first frame: 0.963926000 seconds Frame Number: 11 Packet Length: 154 bytes Capture Length: 154 bytes Ethernet II, Src: 00:0c:29:e6:ad:b9, Dst: 00:0c:41:90:f1:c1 Destination: 00:0c:41:90:f1:c1 (00:0c:41:90:f1:c1) Source: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Type: IP (0x0800) Frame check sequence: 0xbc52c0b6 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.133 (165.227.249.133) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 136 Identification: 0x003d (61) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b3d (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.133 (165.227.249.133) Encapsulating Security Payload SPI: 0x2983ae4d Sequence: 3 Data (108 bytes) 0000 00 0c 41 90 f1 c1 00 0c 29 e6 ad b9 08 00 45 00 ..A.....).....E. 0010 00 88 00 3d 00 00 f0 32 8b 3d a5 e3 f9 7c a5 e3 ...=...2.=...|.. 0020 f9 85 29 83 ae 4d 00 00 00 03 24 6b dc 60 cc 85 ..)..M....$k.`.. 0030 7d 46 2b c4 62 85 6f cf e2 0e 16 f9 eb bb db ca }F+.b.o......... 0040 fc 7b 27 09 d6 7c a8 cc d8 1b ae 35 8a 4e 27 0f .{'..|.....5.N'. 0050 6e 3d d0 65 75 fc 4d 0c 5b 17 4e a6 ca c0 3d f6 n=.eu.M.[.N...=. 0060 e6 e8 8d ad 51 ee 55 79 e2 38 6d 6a ec ac f5 5d ....Q.Uy.8mj...] 0070 b8 19 55 9b df 67 cc 4a 23 fa 90 99 ea 22 d9 dd ..U..g.J#....".. 0080 d6 7d 04 7b 3b 5b 7f 50 f5 5f d9 f7 99 c3 ab cf .}.{;[.P._...... 0090 af 20 2a 46 f6 dc bc 52 c0 b6 . *F...R.. Frame 12 (154 bytes on wire, 154 bytes captured) Arrival Time: Mar 23, 2004 13:56:48.460184000 Time delta from previous packet: 0.002289000 seconds Time since reference or first frame: 0.966215000 seconds Frame Number: 12 Packet Length: 154 bytes Capture Length: 154 bytes Ethernet II, Src: 00:0c:41:90:f1:c1, Dst: 00:0c:29:e6:ad:b9 Destination: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Source: 00:0c:41:90:f1:c1 (00:0c:41:90:f1:c1) Type: IP (0x0800) Frame check sequence: 0x53a7cd7b (correct) Internet Protocol, Src Addr: 165.227.249.133 (165.227.249.133), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 136 Identification: 0x6b8e (27534) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0xcfec (correct) Source: 165.227.249.133 (165.227.249.133) Destination: 165.227.249.124 (165.227.249.124) Encapsulating Security Payload SPI: 0x9ca16553 Sequence: 1 Data (108 bytes) 0000 00 0c 29 e6 ad b9 00 0c 41 90 f1 c1 08 00 45 00 ..).....A.....E. 0010 00 88 6b 8e 00 00 40 32 cf ec a5 e3 f9 85 a5 e3 ..k...@2........ 0020 f9 7c 9c a1 65 53 00 00 00 01 57 58 59 5a 5b 5c .|..eS....WXYZ[\ 0030 5d 5e 72 bc 7b df c6 fb cd ee 54 87 3e 28 39 a1 ]^r.{.....T.>(9. 0040 00 ef cd 08 96 02 4d 8d 5f 2b 78 9f 47 49 48 7e ......M._+x.GIH~ 0050 f6 14 44 5b 15 42 2e f0 7c 58 6f 85 04 86 57 f7 ..D[.B..|Xo...W. 0060 0f 2c 03 6a 63 1b 02 4b dd 49 c0 f1 33 97 95 8c .,.jc..K.I..3... 0070 cf 6c c6 ad 1c 72 a6 58 61 10 84 56 89 7e 72 d7 .l...r.Xa..V.~r. 0080 56 cc 80 1d cf b6 7b 68 eb 89 c5 53 4f 29 84 c3 V.....{h...SO).. 0090 8b 33 d4 a1 38 56 53 a7 cd 7b .3..8VS..{ Frame 13 (154 bytes on wire, 154 bytes captured) Arrival Time: Mar 23, 2004 13:56:49.463742000 Time delta from previous packet: 1.003558000 seconds Time since reference or first frame: 1.969773000 seconds Frame Number: 13 Packet Length: 154 bytes Capture Length: 154 bytes Ethernet II, Src: 00:0c:29:e6:ad:b9, Dst: 00:0c:41:90:f1:c1 Destination: 00:0c:41:90:f1:c1 (00:0c:41:90:f1:c1) Source: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Type: IP (0x0800) Frame check sequence: 0xdb8b2cec (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.133 (165.227.249.133) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 136 Identification: 0x003e (62) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b3c (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.133 (165.227.249.133) Encapsulating Security Payload SPI: 0x2983ae4d Sequence: 4 Data (108 bytes) 0000 00 0c 41 90 f1 c1 00 0c 29 e6 ad b9 08 00 45 00 ..A.....).....E. 0010 00 88 00 3e 00 00 f0 32 8b 3c a5 e3 f9 7c a5 e3 ...>...2.<...|.. 0020 f9 85 29 83 ae 4d 00 00 00 04 7f c9 13 0e fe 2c ..)..M........., 0030 4d 52 dd 8a 86 b5 86 90 73 e6 07 88 0f 53 5a 8b MR......s....SZ. 0040 66 f4 7b 3d 4c e5 0a 7c f3 e6 c8 33 bc 6c 16 42 f.{=L..|...3.l.B 0050 e1 55 74 46 99 32 6e f6 25 b5 93 e1 7a 6a 79 f9 .UtF.2n.%...zjy. 0060 91 a4 10 21 60 05 9b f4 5b f0 e1 ca 5d 3a 80 6f ...!`...[...]:.o 0070 90 4a 05 d9 da 63 26 ba 5f 6f 82 f9 5a 55 9e 10 .J...c&._o..ZU.. 0080 8a 13 63 69 2a fc c5 3d 57 02 99 83 85 cd ab 4d ..ci*..=W......M 0090 70 af ff 32 8f 80 db 8b 2c ec p..2....,. Frame 14 (154 bytes on wire, 154 bytes captured) Arrival Time: Mar 23, 2004 13:56:49.464693000 Time delta from previous packet: 0.000951000 seconds Time since reference or first frame: 1.970724000 seconds Frame Number: 14 Packet Length: 154 bytes Capture Length: 154 bytes Ethernet II, Src: 00:0c:41:90:f1:c1, Dst: 00:0c:29:e6:ad:b9 Destination: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Source: 00:0c:41:90:f1:c1 (00:0c:41:90:f1:c1) Type: IP (0x0800) Frame check sequence: 0xfe2da706 (correct) Internet Protocol, Src Addr: 165.227.249.133 (165.227.249.133), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 136 Identification: 0x6b8f (27535) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0xcfeb (correct) Source: 165.227.249.133 (165.227.249.133) Destination: 165.227.249.124 (165.227.249.124) Encapsulating Security Payload SPI: 0x9ca16553 Sequence: 2 Data (108 bytes) 0000 00 0c 29 e6 ad b9 00 0c 41 90 f1 c1 08 00 45 00 ..).....A.....E. 0010 00 88 6b 8f 00 00 40 32 cf eb a5 e3 f9 85 a5 e3 ..k...@2........ 0020 f9 7c 9c a1 65 53 00 00 00 02 bc bd be bf c0 c1 .|..eS.......... 0030 c2 c3 2e a0 92 dd 9e fe a1 82 22 cb 63 8c ae f3 ..........".c... 0040 41 e1 f1 95 69 7a d7 7a c6 7c 18 a7 ba 4f 65 00 A...iz.z.|...Oe. 0050 4f 11 d9 f4 a7 84 48 86 e0 c5 18 fc b3 bc 21 d1 O.....H.......!. 0060 91 3e a4 b9 f3 ee 9d 93 30 fb bf ac b5 eb 5a b4 .>......0.....Z. 0070 6f 31 81 45 c5 a0 ea 24 89 62 97 39 ba e2 e0 59 o1.E...$.b.9...Y 0080 7d 0e ab c4 24 e6 75 ca d8 82 e3 f1 53 c1 08 85 }...$.u.....S... 0090 74 95 2a 71 e4 26 fe 2d a7 06 t.*q.&.-.. Frame 15 (154 bytes on wire, 154 bytes captured) Arrival Time: Mar 23, 2004 13:56:50.457650000 Time delta from previous packet: 0.992957000 seconds Time since reference or first frame: 2.963681000 seconds Frame Number: 15 Packet Length: 154 bytes Capture Length: 154 bytes Ethernet II, Src: 00:0c:29:e6:ad:b9, Dst: 00:0c:41:90:f1:c1 Destination: 00:0c:41:90:f1:c1 (00:0c:41:90:f1:c1) Source: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Type: IP (0x0800) Frame check sequence: 0x86e34550 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.133 (165.227.249.133) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 136 Identification: 0x003f (63) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b3b (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.133 (165.227.249.133) Encapsulating Security Payload SPI: 0x2983ae4d Sequence: 5 Data (108 bytes) 0000 00 0c 41 90 f1 c1 00 0c 29 e6 ad b9 08 00 45 00 ..A.....).....E. 0010 00 88 00 3f 00 00 f0 32 8b 3b a5 e3 f9 7c a5 e3 ...?...2.;...|.. 0020 f9 85 29 83 ae 4d 00 00 00 05 be ef 8c 0d 34 c3 ..)..M........4. 0030 fc c5 cd da 68 fe 5c e4 fa 66 83 79 61 66 6b bc ....h.\..f.yafk. 0040 b2 6c 4a 6a 5e ed 03 6b fb 05 13 a9 1e 5a 4c d6 .lJj^..k.....ZL. 0050 75 e2 c9 bd a8 ba ed 72 8b 0f b9 77 2d 87 06 17 u......r...w-... 0060 ad 10 98 6a 2b 99 8b d1 78 7e b1 e2 4b 4f 5e 38 ...j+...x~..KO^8 0070 34 60 3b 86 44 21 0b b6 21 2c d9 84 2f cd f7 e7 4`;.D!..!,../... 0080 4c f7 5b 19 26 40 97 b6 f3 b5 ae 16 c3 92 c7 fc L.[.&@.......... 0090 c7 ce 08 80 32 56 86 e3 45 50 ....2V..EP Frame 16 (154 bytes on wire, 154 bytes captured) Arrival Time: Mar 23, 2004 13:56:50.458668000 Time delta from previous packet: 0.001018000 seconds Time since reference or first frame: 2.964699000 seconds Frame Number: 16 Packet Length: 154 bytes Capture Length: 154 bytes Ethernet II, Src: 00:0c:41:90:f1:c1, Dst: 00:0c:29:e6:ad:b9 Destination: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Source: 00:0c:41:90:f1:c1 (00:0c:41:90:f1:c1) Type: IP (0x0800) Frame check sequence: 0x4a628031 (correct) Internet Protocol, Src Addr: 165.227.249.133 (165.227.249.133), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 136 Identification: 0x6b90 (27536) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0xcfea (correct) Source: 165.227.249.133 (165.227.249.133) Destination: 165.227.249.124 (165.227.249.124) Encapsulating Security Payload SPI: 0x9ca16553 Sequence: 3 Data (108 bytes) 0000 00 0c 29 e6 ad b9 00 0c 41 90 f1 c1 08 00 45 00 ..).....A.....E. 0010 00 88 6b 90 00 00 40 32 cf ea a5 e3 f9 85 a5 e3 ..k...@2........ 0020 f9 7c 9c a1 65 53 00 00 00 03 20 21 22 23 24 25 .|..eS.... !"#$% 0030 26 27 6f 4a c8 4f 1c 47 c2 27 8e f9 f2 b2 d7 31 &'oJ.O.G.'.....1 0040 71 20 87 85 c9 48 ee 70 ca 6d 4f c5 39 80 3f 6a q ...H.p.mO.9.?j 0050 65 1c 28 47 a9 46 c0 b0 f7 9b 76 51 64 7d 9a 8f e.(G.F....vQd}.. 0060 3b ac 63 7b c6 0a de a2 dc a7 bc 38 85 5f 7e b6 ;.c{.......8._~. 0070 4b 40 c9 bd b6 b0 35 e2 9e 45 6d 61 c0 f3 0b a7 K@....5..Ema.... 0080 e0 e0 42 80 9d 24 e7 c8 98 02 60 9c 33 83 d9 e8 ..B..$....`.3... 0090 20 de 54 a7 65 f0 4a 62 80 31 .T.e.Jb.1