Frame 1 (266 bytes on wire, 266 bytes captured) Arrival Time: Mar 23, 2004 14:24:46.501835000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 266 bytes Capture Length: 266 bytes Ethernet II, Src: 00:0c:29:e6:ad:b9, Dst: 00:09:5b:b0:f5:3d Destination: 00:09:5b:b0:f5:3d (00:09:5b:b0:f5:3d) Source: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Type: IP (0x0800) Frame check sequence: 0xb88f3083 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.136 (165.227.249.136) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 248 Identification: 0x0b4a (2890) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x2fdf (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.136 (165.227.249.136) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 228 Checksum: 0xf0eb (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xEDB126B411273385 Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 220 Security Association payload Next payload: Vendor ID (13) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 0 Next payload: NONE (0) Length: 40 Proposal number: 0 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 0 Next payload: NONE (0) Length: 32 Transform number: 0 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: unknown vendor ID: 0x8F9CC94E01248ECDF147594C284B213B Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-stenberg-ipsec-nat-traversal-01 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-stenberg-ipsec-nat-traversal-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-03 0000 00 09 5b b0 f5 3d 00 0c 29 e6 ad b9 08 00 45 00 ..[..=..).....E. 0010 00 f8 0b 4a 00 00 40 11 2f df a5 e3 f9 7c a5 e3 ...J..@./....|.. 0020 f9 88 01 f4 01 f4 00 e4 f0 eb ed b1 26 b4 11 27 ............&..' 0030 33 85 00 00 00 00 00 00 00 00 01 10 02 00 00 00 3............... 0040 00 00 00 00 00 dc 0d 00 00 34 00 00 00 01 00 00 .........4...... 0050 00 01 00 00 00 28 00 01 00 01 00 00 00 20 00 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 03 00 01 80 04 ................ 0070 00 02 80 0b 00 01 80 0c 70 80 0d 00 00 14 8f 9c ........p....... 0080 c9 4e 01 24 8e cd f1 47 59 4c 28 4b 21 3b 0d 00 .N.$...GYL(K!;.. 0090 00 14 27 ba b5 dc 01 ea 07 60 ea 4e 31 90 ac 27 ..'......`.N1..' 00a0 c0 d0 0d 00 00 14 61 05 c4 22 e7 68 47 e4 3f 96 ......a..".hG.?. 00b0 84 80 12 92 ae cd 0d 00 00 14 44 85 15 2d 18 b6 ..........D..-.. 00c0 bb cd 0b e8 a8 46 95 79 dd cc 0d 00 00 14 cd 60 .....F.y.......` 00d0 46 43 35 df 21 f8 7c fd b2 fc 68 b6 a4 48 0d 00 FC5.!.|...h..H.. 00e0 00 14 90 cb 80 91 3e bb 69 6e 08 63 81 b5 ec 42 ......>.in.c...B 00f0 7b 1f 00 00 00 14 7d 94 19 a6 53 10 ca 6f 2c 17 {.....}...S..o,. 0100 9d 92 15 52 9d 56 b8 8f 30 83 ...R.V..0. Frame 2 (126 bytes on wire, 126 bytes captured) Arrival Time: Mar 23, 2004 14:24:46.505371000 Time delta from previous packet: 0.003536000 seconds Time since reference or first frame: 0.003536000 seconds Frame Number: 2 Packet Length: 126 bytes Capture Length: 126 bytes Ethernet II, Src: 00:09:5b:b0:f5:3d, Dst: 00:0c:29:e6:ad:b9 Destination: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Source: 00:09:5b:b0:f5:3d (00:09:5b:b0:f5:3d) Type: IP (0x0800) Frame check sequence: 0x2b874a5c (correct) Internet Protocol, Src Addr: 165.227.249.136 (165.227.249.136), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 108 Identification: 0x003d (61) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3b78 (correct) Source: 165.227.249.136 (165.227.249.136) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 88 Checksum: 0xd394 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xEDB126B411273385 Responder cookie: 0xC9D47AD170DB65D0 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 80 Security Association payload Next payload: NONE (0) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 0 Next payload: NONE (0) Length: 40 Proposal number: 0 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 0 Next payload: NONE (0) Length: 32 Transform number: 0 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) 0000 00 0c 29 e6 ad b9 00 09 5b b0 f5 3d 08 00 45 00 ..).....[..=..E. 0010 00 6c 00 3d 00 00 40 11 3b 78 a5 e3 f9 88 a5 e3 .l.=..@.;x...... 0020 f9 7c 01 f4 01 f4 00 58 d3 94 ed b1 26 b4 11 27 .|.....X....&..' 0030 33 85 c9 d4 7a d1 70 db 65 d0 01 10 02 00 00 00 3...z.p.e....... 0040 00 00 00 00 00 50 00 00 00 34 00 00 00 01 00 00 .....P...4...... 0050 00 01 00 00 00 28 00 01 00 01 00 00 00 20 00 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 03 00 01 80 04 ................ 0070 00 02 80 0b 00 01 80 0c 70 80 2b 87 4a 5c ........p.+.J\ Frame 3 (226 bytes on wire, 226 bytes captured) Arrival Time: Mar 23, 2004 14:24:46.512277000 Time delta from previous packet: 0.006906000 seconds Time since reference or first frame: 0.010442000 seconds Frame Number: 3 Packet Length: 226 bytes Capture Length: 226 bytes Ethernet II, Src: 00:0c:29:e6:ad:b9, Dst: 00:09:5b:b0:f5:3d Destination: 00:09:5b:b0:f5:3d (00:09:5b:b0:f5:3d) Source: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Type: IP (0x0800) Frame check sequence: 0x7e535ede (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.136 (165.227.249.136) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 208 Identification: 0x0b4b (2891) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3006 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.136 (165.227.249.136) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 188 Checksum: 0x5f9d (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xEDB126B411273385 Responder cookie: 0xC9D47AD170DB65D0 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 180 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 20 Nonce Data 0000 00 09 5b b0 f5 3d 00 0c 29 e6 ad b9 08 00 45 00 ..[..=..).....E. 0010 00 d0 0b 4b 00 00 40 11 30 06 a5 e3 f9 7c a5 e3 ...K..@.0....|.. 0020 f9 88 01 f4 01 f4 00 bc 5f 9d ed b1 26 b4 11 27 ........_...&..' 0030 33 85 c9 d4 7a d1 70 db 65 d0 04 10 02 00 00 00 3...z.p.e....... 0040 00 00 00 00 00 b4 0a 00 00 84 2a 44 38 fa c2 bf ..........*D8... 0050 7a 2d 9d f8 a1 9b 4d d5 8c 10 9c 37 a9 77 ba a9 z-....M....7.w.. 0060 4e 7d c4 c3 0a 5e 2f be 79 f5 22 9b 21 5d 7d f1 N}...^/.y.".!]}. 0070 dd ac c9 c7 40 8c 40 9e 66 76 29 f7 29 c9 5e 54 ....@.@.fv).).^T 0080 0b 26 13 d4 0c 5b f6 86 2a 59 d7 89 94 a8 4a 62 .&...[..*Y....Jb 0090 25 8b 09 d1 90 a4 8b 7b 17 64 4b 82 a6 65 cc db %......{.dK..e.. 00a0 b0 6c b1 b6 77 a1 94 bd c9 e7 86 cb 5a b8 24 68 .l..w.......Z.$h 00b0 f7 61 89 48 3d 38 40 65 99 e4 cc 4d 79 66 2b b8 .a.H=8@e...Myf+. 00c0 bb 24 64 14 13 d5 c2 33 a9 a9 00 00 00 14 6e 3c .$d....3......n< 00d0 3c 03 7b 29 57 5e ce 90 a3 0d 59 ae fe a0 7e 53 <.{)W^....Y...~S 00e0 5e de ^. Frame 4 (218 bytes on wire, 218 bytes captured) Arrival Time: Mar 23, 2004 14:24:46.967380000 Time delta from previous packet: 0.455103000 seconds Time since reference or first frame: 0.465545000 seconds Frame Number: 4 Packet Length: 218 bytes Capture Length: 218 bytes Ethernet II, Src: 00:09:5b:b0:f5:3d, Dst: 00:0c:29:e6:ad:b9 Destination: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Source: 00:09:5b:b0:f5:3d (00:09:5b:b0:f5:3d) Type: IP (0x0800) Frame check sequence: 0x91a07152 (correct) Internet Protocol, Src Addr: 165.227.249.136 (165.227.249.136), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 200 Identification: 0x003e (62) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3b1b (correct) Source: 165.227.249.136 (165.227.249.136) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 180 Checksum: 0x2c38 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xEDB126B411273385 Responder cookie: 0xC9D47AD170DB65D0 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 172 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 12 Nonce Data 0000 00 0c 29 e6 ad b9 00 09 5b b0 f5 3d 08 00 45 00 ..).....[..=..E. 0010 00 c8 00 3e 00 00 40 11 3b 1b a5 e3 f9 88 a5 e3 ...>..@.;....... 0020 f9 7c 01 f4 01 f4 00 b4 2c 38 ed b1 26 b4 11 27 .|......,8..&..' 0030 33 85 c9 d4 7a d1 70 db 65 d0 04 10 02 00 00 00 3...z.p.e....... 0040 00 00 00 00 00 ac 0a 00 00 84 f4 ca 66 ae a0 16 ............f... 0050 bc 6b 18 63 b3 2d b8 cc e1 ba 88 40 ce 4b 4c b3 .k.c.-.....@.KL. 0060 e1 a3 00 e0 01 a1 a2 be 4a ae 6d 50 20 c0 55 92 ........J.mP .U. 0070 73 a2 80 b7 c0 02 e7 fe 0e ec 7e 17 ea 20 37 21 s.........~.. 7! 0080 ec d1 cf 07 45 50 e0 61 3d 39 5d 01 58 9d ce c3 ....EP.a=9].X... 0090 ac 78 35 bf 61 c7 76 a5 6d f8 88 75 8d 3c 2e b3 .x5.a.v.m..u.<.. 00a0 5c 51 7a b8 1c 88 76 71 70 d6 dc b4 06 02 e4 cf \Qz...vqp....... 00b0 39 b3 1f 78 36 f0 30 d9 6e be e4 42 06 e7 85 70 9..x6.0.n..B...p 00c0 dd 1b 81 51 82 14 a5 36 84 70 00 00 00 0c 9a 4b ...Q...6.p.....K 00d0 6d 6c f8 49 eb bb 91 a0 71 52 ml.I....qR Frame 5 (122 bytes on wire, 122 bytes captured) Arrival Time: Mar 23, 2004 14:24:46.974032000 Time delta from previous packet: 0.006652000 seconds Time since reference or first frame: 0.472197000 seconds Frame Number: 5 Packet Length: 122 bytes Capture Length: 122 bytes Ethernet II, Src: 00:0c:29:e6:ad:b9, Dst: 00:09:5b:b0:f5:3d Destination: 00:09:5b:b0:f5:3d (00:09:5b:b0:f5:3d) Source: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Type: IP (0x0800) Frame check sequence: 0x5c8ed7a7 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.136 (165.227.249.136) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 104 Identification: 0x0b4c (2892) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x306d (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.136 (165.227.249.136) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 84 Checksum: 0x43b3 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xEDB126B411273385 Responder cookie: 0xC9D47AD170DB65D0 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 76 Encrypted payload (48 bytes) 0000 00 09 5b b0 f5 3d 00 0c 29 e6 ad b9 08 00 45 00 ..[..=..).....E. 0010 00 68 0b 4c 00 00 40 11 30 6d a5 e3 f9 7c a5 e3 .h.L..@.0m...|.. 0020 f9 88 01 f4 01 f4 00 54 43 b3 ed b1 26 b4 11 27 .......TC...&..' 0030 33 85 c9 d4 7a d1 70 db 65 d0 05 10 02 01 00 00 3...z.p.e....... 0040 00 00 00 00 00 4c 38 30 5a 23 0e ec 76 f8 30 a4 .....L80Z#..v.0. 0050 60 0a 01 98 d9 84 56 3a 9b c1 d2 bd c7 f1 72 ad `.....V:......r. 0060 9b 59 5c 59 52 94 f1 5f 90 bb 48 27 69 09 a2 c3 .Y\YR.._..H'i... 0070 5a e3 05 a3 f8 e2 5c 8e d7 a7 Z.....\... Frame 6 (122 bytes on wire, 122 bytes captured) Arrival Time: Mar 23, 2004 14:24:47.480029000 Time delta from previous packet: 0.505997000 seconds Time since reference or first frame: 0.978194000 seconds Frame Number: 6 Packet Length: 122 bytes Capture Length: 122 bytes Ethernet II, Src: 00:0c:29:e6:ad:b9, Dst: 00:09:5b:b0:f5:3d Destination: 00:09:5b:b0:f5:3d (00:09:5b:b0:f5:3d) Source: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Type: IP (0x0800) Frame check sequence: 0x87957c03 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.136 (165.227.249.136) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 104 Identification: 0x0b4d (2893) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x306c (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.136 (165.227.249.136) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 84 Checksum: 0x43b3 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xEDB126B411273385 Responder cookie: 0xC9D47AD170DB65D0 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 76 Encrypted payload (48 bytes) 0000 00 09 5b b0 f5 3d 00 0c 29 e6 ad b9 08 00 45 00 ..[..=..).....E. 0010 00 68 0b 4d 00 00 40 11 30 6c a5 e3 f9 7c a5 e3 .h.M..@.0l...|.. 0020 f9 88 01 f4 01 f4 00 54 43 b3 ed b1 26 b4 11 27 .......TC...&..' 0030 33 85 c9 d4 7a d1 70 db 65 d0 05 10 02 01 00 00 3...z.p.e....... 0040 00 00 00 00 00 4c 38 30 5a 23 0e ec 76 f8 30 a4 .....L80Z#..v.0. 0050 60 0a 01 98 d9 84 56 3a 9b c1 d2 bd c7 f1 72 ad `.....V:......r. 0060 9b 59 5c 59 52 94 f1 5f 90 bb 48 27 69 09 a2 c3 .Y\YR.._..H'i... 0070 5a e3 05 a3 f8 e2 87 95 7c 03 Z.......|. Frame 7 (114 bytes on wire, 114 bytes captured) Arrival Time: Mar 23, 2004 14:24:47.525012000 Time delta from previous packet: 0.044983000 seconds Time since reference or first frame: 1.023177000 seconds Frame Number: 7 Packet Length: 114 bytes Capture Length: 114 bytes Ethernet II, Src: 00:09:5b:b0:f5:3d, Dst: 00:0c:29:e6:ad:b9 Destination: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Source: 00:09:5b:b0:f5:3d (00:09:5b:b0:f5:3d) Type: IP (0x0800) Frame check sequence: 0x30db96c0 (correct) Internet Protocol, Src Addr: 165.227.249.136 (165.227.249.136), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0x003f (63) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3b82 (correct) Source: 165.227.249.136 (165.227.249.136) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 76 Checksum: 0xc85d (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xEDB126B411273385 Responder cookie: 0xC9D47AD170DB65D0 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 68 Encrypted payload (40 bytes) 0000 00 0c 29 e6 ad b9 00 09 5b b0 f5 3d 08 00 45 00 ..).....[..=..E. 0010 00 60 00 3f 00 00 40 11 3b 82 a5 e3 f9 88 a5 e3 .`.?..@.;....... 0020 f9 7c 01 f4 01 f4 00 4c c8 5d ed b1 26 b4 11 27 .|.....L.]..&..' 0030 33 85 c9 d4 7a d1 70 db 65 d0 05 10 02 01 00 00 3...z.p.e....... 0040 00 00 00 00 00 44 a3 d2 65 77 11 ea 7c 7e ab 3f .....D..ew..|~.? 0050 ee 68 32 d0 52 6e 5d d6 6b f0 4a 37 b5 40 5e f1 .h2.Rn].k.J7.@^. 0060 bd 98 37 b6 07 40 61 73 6f 3f f5 18 d7 65 30 db ..7..@aso?...e0. 0070 96 c0 .. Frame 8 (338 bytes on wire, 338 bytes captured) Arrival Time: Mar 23, 2004 14:24:47.534533000 Time delta from previous packet: 0.009521000 seconds Time since reference or first frame: 1.032698000 seconds Frame Number: 8 Packet Length: 338 bytes Capture Length: 338 bytes Ethernet II, Src: 00:0c:29:e6:ad:b9, Dst: 00:09:5b:b0:f5:3d Destination: 00:09:5b:b0:f5:3d (00:09:5b:b0:f5:3d) Source: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Type: IP (0x0800) Frame check sequence: 0x4527cd67 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.136 (165.227.249.136) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 320 Identification: 0x0b4e (2894) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x2f93 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.136 (165.227.249.136) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 300 Checksum: 0x5949 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xEDB126B411273385 Responder cookie: 0xC9D47AD170DB65D0 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xB3651C6B Length: 292 Encrypted payload (264 bytes) 0000 00 09 5b b0 f5 3d 00 0c 29 e6 ad b9 08 00 45 00 ..[..=..).....E. 0010 01 40 0b 4e 00 00 40 11 2f 93 a5 e3 f9 7c a5 e3 .@.N..@./....|.. 0020 f9 88 01 f4 01 f4 01 2c 59 49 ed b1 26 b4 11 27 .......,YI..&..' 0030 33 85 c9 d4 7a d1 70 db 65 d0 08 10 20 01 b3 65 3...z.p.e... ..e 0040 1c 6b 00 00 01 24 61 3f 3f 88 ff 52 96 d9 b4 78 .k...$a??..R...x 0050 d5 d1 e5 60 18 c0 a6 01 88 c5 e0 9b c8 e3 5d d5 ...`..........]. 0060 47 bb 5e 28 4f a4 e0 d0 7b 3a 9c d5 29 8d 9c 5c G.^(O...{:..)..\ 0070 4c df 6f 5c 99 d2 b9 99 ac d2 1b ac fe 87 94 71 L.o\...........q 0080 e0 2a 27 e7 46 a7 7b 8e 27 65 d0 af 1e 59 11 4b .*'.F.{.'e...Y.K 0090 13 65 7c 80 18 4f b3 07 24 bf 3b 74 3d 9a b6 74 .e|..O..$.;t=..t 00a0 b9 28 32 04 1c 8c 25 89 ae 4e 7e c8 80 80 93 23 .(2...%..N~....# 00b0 2c c0 dd 45 a7 a3 cf b2 94 65 c7 f6 6b a2 42 32 ,..E.....e..k.B2 00c0 9e 35 89 85 0a e1 b5 72 63 2f e2 97 bd 76 4d 6b .5.....rc/...vMk 00d0 4f 88 25 51 b4 47 6f d0 8b d6 95 8d 5a 87 d3 8a O.%Q.Go.....Z... 00e0 8a 28 de b3 08 ca 1d 59 52 5c 75 d8 df 31 f9 ba .(.....YR\u..1.. 00f0 fe dd 1d de 8a 99 46 6a e2 85 0d 08 24 1a 05 d5 ......Fj....$... 0100 02 da e2 82 0b 4f ce 73 4f 44 af 52 3f 89 8d fe .....O.sOD.R?... 0110 ad d2 ac 64 85 f6 09 b4 7c 59 3f 99 d8 d3 8d ec ...d....|Y?..... 0120 1e 08 75 d5 75 34 d5 dd 14 1d f8 28 14 2b db 13 ..u.u4.....(.+.. 0130 40 2d 10 22 88 40 32 20 a8 e9 7c 9d 13 fa 5d 9c @-.".@2 ..|...]. 0140 da c2 3b 57 10 10 ac 88 40 d1 1c c6 a7 55 45 27 ..;W....@....UE' 0150 cd 67 .g Frame 9 (330 bytes on wire, 330 bytes captured) Arrival Time: Mar 23, 2004 14:24:47.989645000 Time delta from previous packet: 0.455112000 seconds Time since reference or first frame: 1.487810000 seconds Frame Number: 9 Packet Length: 330 bytes Capture Length: 330 bytes Ethernet II, Src: 00:09:5b:b0:f5:3d, Dst: 00:0c:29:e6:ad:b9 Destination: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Source: 00:09:5b:b0:f5:3d (00:09:5b:b0:f5:3d) Type: IP (0x0800) Frame check sequence: 0x4e4582ab (correct) Internet Protocol, Src Addr: 165.227.249.136 (165.227.249.136), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 312 Identification: 0x0040 (64) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3aa9 (correct) Source: 165.227.249.136 (165.227.249.136) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 292 Checksum: 0x1136 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xEDB126B411273385 Responder cookie: 0xC9D47AD170DB65D0 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xB3651C6B Length: 284 Encrypted payload (256 bytes) 0000 00 0c 29 e6 ad b9 00 09 5b b0 f5 3d 08 00 45 00 ..).....[..=..E. 0010 01 38 00 40 00 00 40 11 3a a9 a5 e3 f9 88 a5 e3 .8.@..@.:....... 0020 f9 7c 01 f4 01 f4 01 24 11 36 ed b1 26 b4 11 27 .|.....$.6..&..' 0030 33 85 c9 d4 7a d1 70 db 65 d0 08 10 20 01 b3 65 3...z.p.e... ..e 0040 1c 6b 00 00 01 1c b2 ea 3a 34 28 42 ed 2d 72 a0 .k......:4(B.-r. 0050 eb 92 78 c6 eb a9 41 01 99 1a d0 36 fb b7 98 75 ..x...A....6...u 0060 7c 4c ab 4a e8 88 64 11 fb 13 33 35 87 a1 02 0f |L.J..d...35.... 0070 25 05 ac a5 ab d8 cd 0c c6 19 31 67 90 a7 bb 9a %.........1g.... 0080 c9 2c 84 3f 60 e1 86 d4 5f 90 c2 9f 62 14 11 9d .,.?`..._...b... 0090 4b bc 39 61 b2 17 23 0a 06 d6 3c a7 01 d1 b8 64 K.9a..#...<....d 00a0 8d 87 78 1d d9 f5 8a 7e 33 a7 31 5c 05 77 62 cc ..x....~3.1\.wb. 00b0 8f 21 59 79 8a b6 f1 a9 6c ee fe 11 bd 48 00 47 .!Yy....l....H.G 00c0 8f 7e 85 e5 e5 88 2e 06 27 32 c2 5e db a8 b5 95 .~......'2.^.... 00d0 e4 62 bb a9 e7 0b 86 5b 30 41 b3 67 1a 83 35 9e .b.....[0A.g..5. 00e0 7c 17 b8 58 78 17 fa 11 82 2e cb ee 59 f3 05 f7 |..Xx.......Y... 00f0 30 70 b0 a9 b5 6e 58 85 ed 90 d7 d0 a7 c8 6f 1a 0p...nX.......o. 0100 d9 68 1a 6e df 5a 61 c5 01 7f db 01 1f 91 32 26 .h.n.Za.......2& 0110 86 bf 05 61 61 8a 17 64 e1 4e d9 d6 e6 61 90 62 ...aa..d.N...a.b 0120 07 c3 23 cb 5f 00 fe 68 0e 5c 17 04 61 09 2d 16 ..#._..h.\..a.-. 0130 a9 e2 66 65 90 cd 9e c2 5f ec 49 54 ed 6c 05 6b ..fe...._.IT.l.k 0140 5c dd 43 82 3e 60 4e 45 82 ab \.C.>`NE.. Frame 10 (98 bytes on wire, 98 bytes captured) Arrival Time: Mar 23, 2004 14:24:47.998702000 Time delta from previous packet: 0.009057000 seconds Time since reference or first frame: 1.496867000 seconds Frame Number: 10 Packet Length: 98 bytes Capture Length: 98 bytes Ethernet II, Src: 00:0c:29:e6:ad:b9, Dst: 00:09:5b:b0:f5:3d Destination: 00:09:5b:b0:f5:3d (00:09:5b:b0:f5:3d) Source: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Type: IP (0x0800) Frame check sequence: 0xecfcadc7 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.136 (165.227.249.136) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 80 Identification: 0x0b4f (2895) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3082 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.136 (165.227.249.136) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 60 Checksum: 0x36b9 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xEDB126B411273385 Responder cookie: 0xC9D47AD170DB65D0 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xB3651C6B Length: 52 Encrypted payload (24 bytes) 0000 00 09 5b b0 f5 3d 00 0c 29 e6 ad b9 08 00 45 00 ..[..=..).....E. 0010 00 50 0b 4f 00 00 40 11 30 82 a5 e3 f9 7c a5 e3 .P.O..@.0....|.. 0020 f9 88 01 f4 01 f4 00 3c 36 b9 ed b1 26 b4 11 27 .......<6...&..' 0030 33 85 c9 d4 7a d1 70 db 65 d0 08 10 20 01 b3 65 3...z.p.e... ..e 0040 1c 6b 00 00 00 34 2a 1b 5f 61 3e 2e 71 d9 bd b0 .k...4*._a>.q... 0050 31 5f 0a 11 97 86 64 d9 0c ca d7 36 06 88 ec fc 1_....d....6.... 0060 ad c7 .. Frame 11 (154 bytes on wire, 154 bytes captured) Arrival Time: Mar 23, 2004 14:24:48.260187000 Time delta from previous packet: 0.261485000 seconds Time since reference or first frame: 1.758352000 seconds Frame Number: 11 Packet Length: 154 bytes Capture Length: 154 bytes Ethernet II, Src: 00:0c:29:e6:ad:b9, Dst: 00:09:5b:b0:f5:3d Destination: 00:09:5b:b0:f5:3d (00:09:5b:b0:f5:3d) Source: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Type: IP (0x0800) Frame check sequence: 0xbc4c7190 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.136 (165.227.249.136) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 136 Identification: 0x0056 (86) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b21 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.136 (165.227.249.136) Encapsulating Security Payload SPI: 0x9065011d Sequence: 2 Data (108 bytes) 0000 00 09 5b b0 f5 3d 00 0c 29 e6 ad b9 08 00 45 00 ..[..=..).....E. 0010 00 88 00 56 00 00 f0 32 8b 21 a5 e3 f9 7c a5 e3 ...V...2.!...|.. 0020 f9 88 90 65 01 1d 00 00 00 02 8f 00 f0 ff 79 2f ...e..........y/ 0030 e0 aa 6f 98 0c db e8 3c 0f c8 3d 06 cf 06 86 1c ..o....<..=..... 0040 89 ef ce c3 a5 a3 78 30 29 67 0e fb b9 da 6a ea ......x0)g....j. 0050 b7 40 38 f9 22 91 41 6a a8 df 20 b1 d3 43 3f 3c .@8.".Aj.. ..C?< 0060 45 d2 88 48 c1 f9 cf 37 95 27 9d d0 0f a3 9d d6 E..H...7.'...... 0070 1e 28 61 4a 42 7b 07 00 e9 5a a4 ef d5 09 13 87 .(aJB{...Z...... 0080 ae fa 43 44 47 0b a9 c8 80 17 43 b8 90 68 f2 97 ..CDG.....C..h.. 0090 73 13 19 75 69 78 bc 4c 71 90 s..uix.Lq. Frame 12 (154 bytes on wire, 154 bytes captured) Arrival Time: Mar 23, 2004 14:24:48.513936000 Time delta from previous packet: 0.253749000 seconds Time since reference or first frame: 2.012101000 seconds Frame Number: 12 Packet Length: 154 bytes Capture Length: 154 bytes Ethernet II, Src: 00:0c:29:e6:ad:b9, Dst: 00:09:5b:b0:f5:3d Destination: 00:09:5b:b0:f5:3d (00:09:5b:b0:f5:3d) Source: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Type: IP (0x0800) Frame check sequence: 0x16f07460 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.136 (165.227.249.136) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 136 Identification: 0x0057 (87) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b20 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.136 (165.227.249.136) Encapsulating Security Payload SPI: 0x9065011d Sequence: 3 Data (108 bytes) 0000 00 09 5b b0 f5 3d 00 0c 29 e6 ad b9 08 00 45 00 ..[..=..).....E. 0010 00 88 00 57 00 00 f0 32 8b 20 a5 e3 f9 7c a5 e3 ...W...2. ...|.. 0020 f9 88 90 65 01 1d 00 00 00 03 01 e9 5b 4e f7 d1 ...e........[N.. 0030 3e 5a c1 d0 9c 08 ad fe 8c 00 37 f4 2d a2 b7 89 >Z........7.-... 0040 de 8b b4 0e 85 3e 9b e5 da eb 83 34 95 c7 b1 cf .....>.....4.... 0050 b1 09 a5 ca bc c0 8f e7 45 8c db ed e7 0c 59 06 ........E.....Y. 0060 b8 10 f2 02 9d b7 e5 95 46 f3 dd 5b 18 bd 21 9a ........F..[..!. 0070 48 48 54 0a ed 2b c9 8a 31 c6 7b 6c 66 e3 fd 80 HHT..+..1.{lf... 0080 74 cb 38 0e f5 5c 12 3a bf 5b 2c bb 3b d7 f4 c5 t.8..\.:.[,.;... 0090 47 99 94 62 f9 5d 16 f0 74 60 G..b.]..t` Frame 13 (154 bytes on wire, 154 bytes captured) Arrival Time: Mar 23, 2004 14:24:48.550938000 Time delta from previous packet: 0.037002000 seconds Time since reference or first frame: 2.049103000 seconds Frame Number: 13 Packet Length: 154 bytes Capture Length: 154 bytes Ethernet II, Src: 00:09:5b:b0:f5:3d, Dst: 00:0c:29:e6:ad:b9 Destination: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Source: 00:09:5b:b0:f5:3d (00:09:5b:b0:f5:3d) Type: IP (0x0800) Frame check sequence: 0x774bd411 (correct) Internet Protocol, Src Addr: 165.227.249.136 (165.227.249.136), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 136 Identification: 0x5b04 (23300) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 30 Protocol: ESP (0x32) Header checksum: 0x0274 (correct) Source: 165.227.249.136 (165.227.249.136) Destination: 165.227.249.124 (165.227.249.124) Encapsulating Security Payload SPI: 0xc676107e Sequence: 1 Data (108 bytes) 0000 00 0c 29 e6 ad b9 00 09 5b b0 f5 3d 08 00 45 00 ..).....[..=..E. 0010 00 88 5b 04 00 00 1e 32 02 74 a5 e3 f9 88 a5 e3 ..[....2.t...... 0020 f9 7c c6 76 10 7e 00 00 00 01 b4 af 7f da 59 69 .|.v.~........Yi 0030 01 64 b2 ea 3c 4a f7 5e bd 4b b3 8a 89 42 82 76 .d..5.n.$i....L. 0070 d4 d0 c4 40 16 7d 33 df 45 60 0c 80 0f 93 8d 2b ...@.}3.E`.....+ 0080 51 a7 27 cd b3 0f f4 0a 04 b9 f9 2c ab fd dd d3 Q.'........,.... 0090 bb 4c 55 a3 4b 3d ef f8 13 44 .LU.K=...D Frame 15 (154 bytes on wire, 154 bytes captured) Arrival Time: Mar 23, 2004 14:24:49.525760000 Time delta from previous packet: 0.974439000 seconds Time since reference or first frame: 3.023925000 seconds Frame Number: 15 Packet Length: 154 bytes Capture Length: 154 bytes Ethernet II, Src: 00:0c:29:e6:ad:b9, Dst: 00:09:5b:b0:f5:3d Destination: 00:09:5b:b0:f5:3d (00:09:5b:b0:f5:3d) Source: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Type: IP (0x0800) Frame check sequence: 0x496aa70f (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.136 (165.227.249.136) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 136 Identification: 0x0058 (88) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b1f (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.136 (165.227.249.136) Encapsulating Security Payload SPI: 0x9065011d Sequence: 4 Data (108 bytes) 0000 00 09 5b b0 f5 3d 00 0c 29 e6 ad b9 08 00 45 00 ..[..=..).....E. 0010 00 88 00 58 00 00 f0 32 8b 1f a5 e3 f9 7c a5 e3 ...X...2.....|.. 0020 f9 88 90 65 01 1d 00 00 00 04 1d d5 38 b8 aa ae ...e........8... 0030 1a 4a fc fd 21 46 8b 8c c3 a3 ab c5 3c d1 ae 45 .J..!F......<..E 0040 65 81 20 ab 65 98 0d c5 30 ab db dd 02 6a 55 8e e. .e...0....jU. 0050 be 6a c9 71 3b a7 d0 eb 0a e6 45 12 d6 d2 1f 8c .j.q;.....E..... 0060 b1 ed 7f ce 55 d9 51 b1 85 fb 1d a8 26 3d c1 f8 ....U.Q.....&=.. 0070 d5 05 64 78 fe 03 82 86 b2 bc 81 1d 9e 4a 91 96 ..dx.........J.. 0080 2b 27 51 bf f9 fe 1e 90 d7 44 0e 4e 86 e6 6f 32 +'Q......D.N..o2 0090 88 bd e4 99 1e 0b 49 6a a7 0f ......Ij.. Frame 16 (154 bytes on wire, 154 bytes captured) Arrival Time: Mar 23, 2004 14:24:49.527054000 Time delta from previous packet: 0.001294000 seconds Time since reference or first frame: 3.025219000 seconds Frame Number: 16 Packet Length: 154 bytes Capture Length: 154 bytes Ethernet II, Src: 00:09:5b:b0:f5:3d, Dst: 00:0c:29:e6:ad:b9 Destination: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Source: 00:09:5b:b0:f5:3d (00:09:5b:b0:f5:3d) Type: IP (0x0800) Frame check sequence: 0x7d3f8c7b (correct) Internet Protocol, Src Addr: 165.227.249.136 (165.227.249.136), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 136 Identification: 0x7f78 (32632) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 30 Protocol: ESP (0x32) Header checksum: 0xddff (correct) Source: 165.227.249.136 (165.227.249.136) Destination: 165.227.249.124 (165.227.249.124) Encapsulating Security Payload SPI: 0xc676107e Sequence: 3 Data (108 bytes) 0000 00 0c 29 e6 ad b9 00 09 5b b0 f5 3d 08 00 45 00 ..).....[..=..E. 0010 00 88 7f 78 00 00 1e 32 dd ff a5 e3 f9 88 a5 e3 ...x...2........ 0020 f9 7c c6 76 10 7e 00 00 00 03 27 cd b3 0f f4 0a .|.v.~....'..... 0030 04 b9 88 c5 a2 c1 05 44 53 b3 c0 bb 14 e4 b9 42 .......DS......B 0040 60 c7 20 bb 4a 62 40 bf eb 75 ad b4 d7 e7 83 29 `. .Jb@..u.....) 0050 84 92 2d 0a 8c 6e 23 4b 32 b7 cc da 34 4f 86 4d ..-..n#K2...4O.M 0060 7c 3d 63 1e 0f 2f ed 18 c8 dc 72 70 63 cc 69 5e |=c../....rpc.i^ 0070 34 c7 50 f7 94 3a 92 3b 88 0c 35 34 95 a8 3a cf 4.P..:.;..54..:. 0080 e3 36 21 d0 c7 3e 99 39 2b 00 8f 3d eb af f6 24 .6!..>.9+..=...$ 0090 47 9a 27 8e 5e 95 7d 3f 8c 7b G.'.^.}?.{ Frame 17 (330 bytes on wire, 330 bytes captured) Arrival Time: Mar 23, 2004 14:24:52.330204000 Time delta from previous packet: 2.803150000 seconds Time since reference or first frame: 5.828369000 seconds Frame Number: 17 Packet Length: 330 bytes Capture Length: 330 bytes Ethernet II, Src: 00:09:5b:b0:f5:3d, Dst: 00:0c:29:e6:ad:b9 Destination: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Source: 00:09:5b:b0:f5:3d (00:09:5b:b0:f5:3d) Type: IP (0x0800) Frame check sequence: 0x1f36ca18 (correct) Internet Protocol, Src Addr: 165.227.249.136 (165.227.249.136), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 312 Identification: 0x0043 (67) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3aa6 (correct) Source: 165.227.249.136 (165.227.249.136) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 292 Checksum: 0x1136 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xEDB126B411273385 Responder cookie: 0xC9D47AD170DB65D0 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xB3651C6B Length: 284 Encrypted payload (256 bytes) 0000 00 0c 29 e6 ad b9 00 09 5b b0 f5 3d 08 00 45 00 ..).....[..=..E. 0010 01 38 00 43 00 00 40 11 3a a6 a5 e3 f9 88 a5 e3 .8.C..@.:....... 0020 f9 7c 01 f4 01 f4 01 24 11 36 ed b1 26 b4 11 27 .|.....$.6..&..' 0030 33 85 c9 d4 7a d1 70 db 65 d0 08 10 20 01 b3 65 3...z.p.e... ..e 0040 1c 6b 00 00 01 1c b2 ea 3a 34 28 42 ed 2d 72 a0 .k......:4(B.-r. 0050 eb 92 78 c6 eb a9 41 01 99 1a d0 36 fb b7 98 75 ..x...A....6...u 0060 7c 4c ab 4a e8 88 64 11 fb 13 33 35 87 a1 02 0f |L.J..d...35.... 0070 25 05 ac a5 ab d8 cd 0c c6 19 31 67 90 a7 bb 9a %.........1g.... 0080 c9 2c 84 3f 60 e1 86 d4 5f 90 c2 9f 62 14 11 9d .,.?`..._...b... 0090 4b bc 39 61 b2 17 23 0a 06 d6 3c a7 01 d1 b8 64 K.9a..#...<....d 00a0 8d 87 78 1d d9 f5 8a 7e 33 a7 31 5c 05 77 62 cc ..x....~3.1\.wb. 00b0 8f 21 59 79 8a b6 f1 a9 6c ee fe 11 bd 48 00 47 .!Yy....l....H.G 00c0 8f 7e 85 e5 e5 88 2e 06 27 32 c2 5e db a8 b5 95 .~......'2.^.... 00d0 e4 62 bb a9 e7 0b 86 5b 30 41 b3 67 1a 83 35 9e .b.....[0A.g..5. 00e0 7c 17 b8 58 78 17 fa 11 82 2e cb ee 59 f3 05 f7 |..Xx.......Y... 00f0 30 70 b0 a9 b5 6e 58 85 ed 90 d7 d0 a7 c8 6f 1a 0p...nX.......o. 0100 d9 68 1a 6e df 5a 61 c5 01 7f db 01 1f 91 32 26 .h.n.Za.......2& 0110 86 bf 05 61 61 8a 17 64 e1 4e d9 d6 e6 61 90 62 ...aa..d.N...a.b 0120 07 c3 23 cb 5f 00 fe 68 0e 5c 17 04 61 09 2d 16 ..#._..h.\..a.-. 0130 a9 e2 66 65 90 cd 9e c2 5f ec 49 54 ed 6c 05 6b ..fe...._.IT.l.k 0140 5c dd 43 82 3e 60 1f 36 ca 18 \.C.>`.6.. Frame 18 (98 bytes on wire, 98 bytes captured) Arrival Time: Mar 23, 2004 14:24:52.331233000 Time delta from previous packet: 0.001029000 seconds Time since reference or first frame: 5.829398000 seconds Frame Number: 18 Packet Length: 98 bytes Capture Length: 98 bytes Ethernet II, Src: 00:0c:29:e6:ad:b9, Dst: 00:09:5b:b0:f5:3d Destination: 00:09:5b:b0:f5:3d (00:09:5b:b0:f5:3d) Source: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Type: IP (0x0800) Frame check sequence: 0x4c4affb1 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.136 (165.227.249.136) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 80 Identification: 0x0b50 (2896) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3081 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.136 (165.227.249.136) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 60 Checksum: 0x36b9 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xEDB126B411273385 Responder cookie: 0xC9D47AD170DB65D0 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xB3651C6B Length: 52 Encrypted payload (24 bytes) 0000 00 09 5b b0 f5 3d 00 0c 29 e6 ad b9 08 00 45 00 ..[..=..).....E. 0010 00 50 0b 50 00 00 40 11 30 81 a5 e3 f9 7c a5 e3 .P.P..@.0....|.. 0020 f9 88 01 f4 01 f4 00 3c 36 b9 ed b1 26 b4 11 27 .......<6...&..' 0030 33 85 c9 d4 7a d1 70 db 65 d0 08 10 20 01 b3 65 3...z.p.e... ..e 0040 1c 6b 00 00 00 34 2a 1b 5f 61 3e 2e 71 d9 bd b0 .k...4*._a>.q... 0050 31 5f 0a 11 97 86 64 d9 0c ca d7 36 06 88 4c 4a 1_....d....6..LJ 0060 ff b1 ..