Frame 1 (266 bytes on wire, 266 bytes captured) Arrival Time: Mar 23, 2004 15:04:19.930510000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 266 bytes Capture Length: 266 bytes Ethernet II, Src: 00:0c:29:e6:ad:b9, Dst: 00:e0:13:00:2c:4a Destination: 00:e0:13:00:2c:4a (00:e0:13:00:2c:4a) Source: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Type: IP (0x0800) Frame check sequence: 0xf28bf36a (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.137 (165.227.249.137) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 248 Identification: 0x0b5c (2908) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x2fcc (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.137 (165.227.249.137) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 228 Checksum: 0xb0f7 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xB91747F4324265B7 Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 220 Security Association payload Next payload: Vendor ID (13) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 0 Next payload: NONE (0) Length: 40 Proposal number: 0 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 0 Next payload: NONE (0) Length: 32 Transform number: 0 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: unknown vendor ID: 0x8F9CC94E01248ECDF147594C284B213B Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-stenberg-ipsec-nat-traversal-01 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-stenberg-ipsec-nat-traversal-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-03 0000 00 e0 13 00 2c 4a 00 0c 29 e6 ad b9 08 00 45 00 ....,J..).....E. 0010 00 f8 0b 5c 00 00 40 11 2f cc a5 e3 f9 7c a5 e3 ...\..@./....|.. 0020 f9 89 01 f4 01 f4 00 e4 b0 f7 b9 17 47 f4 32 42 ............G.2B 0030 65 b7 00 00 00 00 00 00 00 00 01 10 02 00 00 00 e............... 0040 00 00 00 00 00 dc 0d 00 00 34 00 00 00 01 00 00 .........4...... 0050 00 01 00 00 00 28 00 01 00 01 00 00 00 20 00 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 03 00 01 80 04 ................ 0070 00 02 80 0b 00 01 80 0c 70 80 0d 00 00 14 8f 9c ........p....... 0080 c9 4e 01 24 8e cd f1 47 59 4c 28 4b 21 3b 0d 00 .N.$...GYL(K!;.. 0090 00 14 27 ba b5 dc 01 ea 07 60 ea 4e 31 90 ac 27 ..'......`.N1..' 00a0 c0 d0 0d 00 00 14 61 05 c4 22 e7 68 47 e4 3f 96 ......a..".hG.?. 00b0 84 80 12 92 ae cd 0d 00 00 14 44 85 15 2d 18 b6 ..........D..-.. 00c0 bb cd 0b e8 a8 46 95 79 dd cc 0d 00 00 14 cd 60 .....F.y.......` 00d0 46 43 35 df 21 f8 7c fd b2 fc 68 b6 a4 48 0d 00 FC5.!.|...h..H.. 00e0 00 14 90 cb 80 91 3e bb 69 6e 08 63 81 b5 ec 42 ......>.in.c...B 00f0 7b 1f 00 00 00 14 7d 94 19 a6 53 10 ca 6f 2c 17 {.....}...S..o,. 0100 9d 92 15 52 9d 56 f2 8b f3 6a ...R.V...j Frame 2 (166 bytes on wire, 166 bytes captured) Arrival Time: Mar 23, 2004 15:04:19.937923000 Time delta from previous packet: 0.007413000 seconds Time since reference or first frame: 0.007413000 seconds Frame Number: 2 Packet Length: 166 bytes Capture Length: 166 bytes Ethernet II, Src: 00:e0:13:00:2c:4a, Dst: 00:0c:29:e6:ad:b9 Destination: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Source: 00:e0:13:00:2c:4a (00:e0:13:00:2c:4a) Type: IP (0x0800) Frame check sequence: 0x5f32da81 (correct) Internet Protocol, Src Addr: 165.227.249.137 (165.227.249.137), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 148 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb8b (correct) Source: 165.227.249.137 (165.227.249.137) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 128 Checksum: 0x4702 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xB91747F4324265B7 Responder cookie: 0x16FFDA466F8B3AAF Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 120 Security Association payload Next payload: Vendor ID (13) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 0 Next payload: NONE (0) Length: 40 Proposal number: 0 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 0 Next payload: NONE (0) Length: 32 Transform number: 0 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: draft-ietf-ipsec-dpd-00.txt 0000 00 0c 29 e6 ad b9 00 e0 13 00 2c 4a 08 00 45 00 ..).......,J..E. 0010 00 94 00 00 40 00 40 11 fb 8b a5 e3 f9 89 a5 e3 ....@.@......... 0020 f9 7c 01 f4 01 f4 00 80 47 02 b9 17 47 f4 32 42 .|......G...G.2B 0030 65 b7 16 ff da 46 6f 8b 3a af 01 10 02 00 00 00 e....Fo.:....... 0040 00 00 00 00 00 78 0d 00 00 34 00 00 00 01 00 00 .....x...4...... 0050 00 01 00 00 00 28 00 01 00 01 00 00 00 20 00 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 03 00 01 80 04 ................ 0070 00 02 80 0b 00 01 80 0c 70 80 0d 00 00 14 44 85 ........p.....D. 0080 15 2d 18 b6 bb cd 0b e8 a8 46 95 79 dd cc 00 00 .-.......F.y.... 0090 00 14 af ca d7 13 68 a1 f1 c9 6b 86 96 fc 77 57 ......h...k...wW 00a0 01 00 5f 32 da 81 .._2.. Frame 3 (274 bytes on wire, 274 bytes captured) Arrival Time: Mar 23, 2004 15:04:19.945223000 Time delta from previous packet: 0.007300000 seconds Time since reference or first frame: 0.014713000 seconds Frame Number: 3 Packet Length: 274 bytes Capture Length: 274 bytes Ethernet II, Src: 00:0c:29:e6:ad:b9, Dst: 00:e0:13:00:2c:4a Destination: 00:e0:13:00:2c:4a (00:e0:13:00:2c:4a) Source: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Type: IP (0x0800) Frame check sequence: 0xe32c5080 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.137 (165.227.249.137) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 256 Identification: 0x0b5d (2909) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x2fc3 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.137 (165.227.249.137) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 236 Checksum: 0x79d7 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xB91747F4324265B7 Responder cookie: 0x16FFDA466F8B3AAF Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 228 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: Private USE (130) Length: 20 Nonce Data Unknown payload type payload Next payload: Private USE (130) Length: 24 Payload Unknown payload type payload Next payload: NONE (0) Length: 24 Payload 0000 00 e0 13 00 2c 4a 00 0c 29 e6 ad b9 08 00 45 00 ....,J..).....E. 0010 01 00 0b 5d 00 00 40 11 2f c3 a5 e3 f9 7c a5 e3 ...]..@./....|.. 0020 f9 89 01 f4 01 f4 00 ec 79 d7 b9 17 47 f4 32 42 ........y...G.2B 0030 65 b7 16 ff da 46 6f 8b 3a af 04 10 02 00 00 00 e....Fo.:....... 0040 00 00 00 00 00 e4 0a 00 00 84 9b e6 e4 00 1d 85 ................ 0050 23 01 2f 6b 09 2a 2b ce 8e b6 e8 93 6b 18 00 8e #./k.*+.....k... 0060 44 1b ce 81 5d 02 4d 57 78 17 99 27 e2 78 29 ec D...].MWx..'.x). 0070 2a 4f 06 cb 8e d0 76 5c 81 5d ed a0 00 60 17 d0 *O....v\.]...`.. 0080 82 84 38 fe 35 56 69 c0 6a c7 a4 77 f7 ae ab 9f ..8.5Vi.j..w.... 0090 12 a9 90 5f 0f d9 d1 da 15 1c 35 b0 b4 50 bb 46 ..._......5..P.F 00a0 97 e1 9c 4e 63 fb d0 6c bb 96 65 fd 30 e6 5f 3d ...Nc..l..e.0._= 00b0 62 ac 6d 8c e6 fa 20 da 10 94 de 30 49 03 07 b3 b.m... ....0I... 00c0 0d cd 90 78 3e 19 f7 61 c0 c2 82 00 00 14 c4 95 ...x>..a........ 00d0 1a b5 05 74 79 8c 2b 06 db 0e f1 23 12 43 82 00 ...ty.+....#.C.. 00e0 00 18 9e 64 1d 5f 4f 20 0d b7 31 47 d4 09 e9 c3 ...d._O ..1G.... 00f0 c6 3a b9 4a 98 0c 00 00 00 18 8d 52 5f 37 16 11 .:.J.......R_7.. 0100 3f 02 2c 23 04 1f 67 ba 3a 52 ea 2e bf aa e3 2c ?.,#..g.:R....., 0110 50 80 P. Frame 4 (274 bytes on wire, 274 bytes captured) Arrival Time: Mar 23, 2004 15:04:19.962085000 Time delta from previous packet: 0.016862000 seconds Time since reference or first frame: 0.031575000 seconds Frame Number: 4 Packet Length: 274 bytes Capture Length: 274 bytes Ethernet II, Src: 00:e0:13:00:2c:4a, Dst: 00:0c:29:e6:ad:b9 Destination: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Source: 00:e0:13:00:2c:4a (00:e0:13:00:2c:4a) Type: IP (0x0800) Frame check sequence: 0x94669ce5 (correct) Internet Protocol, Src Addr: 165.227.249.137 (165.227.249.137), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 256 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb1f (correct) Source: 165.227.249.137 (165.227.249.137) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 236 Checksum: 0x7c19 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xB91747F4324265B7 Responder cookie: 0x16FFDA466F8B3AAF Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 228 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: Private USE (130) Length: 20 Nonce Data Unknown payload type payload Next payload: Private USE (130) Length: 24 Payload Unknown payload type payload Next payload: NONE (0) Length: 24 Payload 0000 00 0c 29 e6 ad b9 00 e0 13 00 2c 4a 08 00 45 00 ..).......,J..E. 0010 01 00 00 00 40 00 40 11 fb 1f a5 e3 f9 89 a5 e3 ....@.@......... 0020 f9 7c 01 f4 01 f4 00 ec 7c 19 b9 17 47 f4 32 42 .|......|...G.2B 0030 65 b7 16 ff da 46 6f 8b 3a af 04 10 02 00 00 00 e....Fo.:....... 0040 00 00 00 00 00 e4 0a 00 00 84 c7 5f be 07 32 01 ..........._..2. 0050 58 47 6a 91 05 3e 27 40 bc fc 79 a2 08 4a d9 01 XGj..>'@..y..J.. 0060 05 17 82 d9 d3 56 20 5d 33 f0 8d e0 ee 8d 3d 11 .....V ]3.....=. 0070 67 96 78 ab 6e a7 d8 57 c4 f6 c2 73 99 e4 85 0b g.x.n..W...s.... 0080 67 93 7b 5a ee 7b 8a b8 a0 d4 90 26 97 3f c8 ed g.{Z.{.....&.?.. 0090 7e 84 a2 fb 1b 49 a8 83 23 d0 a9 a5 4d ed d9 f7 ~....I..#...M... 00a0 69 8d b9 3b 58 da 7c e2 be be 44 8e 53 d2 59 e2 i..;X.|...D.S.Y. 00b0 f0 ce 0f c3 84 b0 59 54 5a 23 46 c2 68 38 b3 db ......YTZ#F.h8.. 00c0 a6 44 07 a0 27 92 c0 b4 79 23 82 00 00 14 e8 cf .D..'...y#...... 00d0 fa a5 f8 88 4d f9 1f 77 dc 96 6b f6 74 4a 82 00 ....M..w..k.tJ.. 00e0 00 18 8d 52 5f 37 16 11 3f 02 2c 23 04 1f 67 ba ...R_7..?.,#..g. 00f0 3a 52 ea 2e bf aa 00 00 00 18 9e 64 1d 5f 4f 20 :R.........d._O 0100 0d b7 31 47 d4 09 e9 c3 c6 3a b9 4a 98 0c 94 66 ..1G.....:.J...f 0110 9c e5 .. Frame 5 (122 bytes on wire, 122 bytes captured) Arrival Time: Mar 23, 2004 15:04:19.977839000 Time delta from previous packet: 0.015754000 seconds Time since reference or first frame: 0.047329000 seconds Frame Number: 5 Packet Length: 122 bytes Capture Length: 122 bytes Ethernet II, Src: 00:0c:29:e6:ad:b9, Dst: 00:e0:13:00:2c:4a Destination: 00:e0:13:00:2c:4a (00:e0:13:00:2c:4a) Source: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Type: IP (0x0800) Frame check sequence: 0xe2af4fd1 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.137 (165.227.249.137) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 104 Identification: 0x0b5e (2910) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x305a (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.137 (165.227.249.137) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 84 Checksum: 0xb76c (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xB91747F4324265B7 Responder cookie: 0x16FFDA466F8B3AAF Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 76 Encrypted payload (48 bytes) 0000 00 e0 13 00 2c 4a 00 0c 29 e6 ad b9 08 00 45 00 ....,J..).....E. 0010 00 68 0b 5e 00 00 40 11 30 5a a5 e3 f9 7c a5 e3 .h.^..@.0Z...|.. 0020 f9 89 01 f4 01 f4 00 54 b7 6c b9 17 47 f4 32 42 .......T.l..G.2B 0030 65 b7 16 ff da 46 6f 8b 3a af 05 10 02 01 00 00 e....Fo.:....... 0040 00 00 00 00 00 4c 21 f8 5a c3 7a 8c e8 82 51 e7 .....L!.Z.z...Q. 0050 83 08 e6 43 7b a9 aa e6 ff 04 33 bb 61 4d 65 e9 ...C{.....3.aMe. 0060 75 0a 44 2c 67 b5 3f 3c de 96 6f 20 f8 b8 0b 03 u.D,g.?<..o .... 0070 4b 85 54 ed bb ac e2 af 4f d1 K.T.....O. Frame 6 (114 bytes on wire, 114 bytes captured) Arrival Time: Mar 23, 2004 15:04:19.980899000 Time delta from previous packet: 0.003060000 seconds Time since reference or first frame: 0.050389000 seconds Frame Number: 6 Packet Length: 114 bytes Capture Length: 114 bytes Ethernet II, Src: 00:e0:13:00:2c:4a, Dst: 00:0c:29:e6:ad:b9 Destination: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Source: 00:e0:13:00:2c:4a (00:e0:13:00:2c:4a) Type: IP (0x0800) Frame check sequence: 0xaac7af9a (correct) Internet Protocol, Src Addr: 165.227.249.137 (165.227.249.137), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfbbf (correct) Source: 165.227.249.137 (165.227.249.137) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 76 Checksum: 0x0b02 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xB91747F4324265B7 Responder cookie: 0x16FFDA466F8B3AAF Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 68 Encrypted payload (40 bytes) 0000 00 0c 29 e6 ad b9 00 e0 13 00 2c 4a 08 00 45 00 ..).......,J..E. 0010 00 60 00 00 40 00 40 11 fb bf a5 e3 f9 89 a5 e3 .`..@.@......... 0020 f9 7c 01 f4 01 f4 00 4c 0b 02 b9 17 47 f4 32 42 .|.....L....G.2B 0030 65 b7 16 ff da 46 6f 8b 3a af 05 10 02 01 00 00 e....Fo.:....... 0040 00 00 00 00 00 44 eb 1b 3e ed 3c 43 6c 1f fc 9a .....D..>.%..... 0070 4e f9 59 eb ab e1 9c 7d 90 f4 72 3d a6 af 2b 9f N.Y....}..r=..+. 0080 5a cf 92 65 a0 d3 61 1b 30 6a 52 b4 78 ac 7f 68 Z..e..a.0jR.x..h 0090 c6 d6 d9 27 dd 71 84 f9 8a f5 ba c7 ef e7 98 7d ...'.q.........} 00a0 30 71 58 1a ce da da bd 45 97 01 01 6c c0 f0 ff 0qX.....E...l... 00b0 46 0b 8d 96 2f 8f d4 c5 04 e5 26 45 10 22 2c 42 F.../.....&E.",B 00c0 82 46 46 2f 67 ed 3b 54 f0 66 e9 53 ec 26 b2 4a .FF/g.;T.f.S.&.J 00d0 b2 13 24 2c ce 3f 5d 88 d0 74 e4 29 47 af 05 bd ..$,.?]..t.)G... 00e0 79 a7 d9 01 25 3c 42 a4 5f f7 cd 32 57 d2 62 90 y...%gFD...a 0090 ff 99 9b da 53 4e 94 b1 44 b1 48 12 a6 4a 06 27 ....SN..D.H..J.' 00a0 4d b4 c4 ff 78 f2 b1 0b ef ef 22 2d 46 9d 39 30 M...x....."-F.90 00b0 d4 41 2e 0c 62 fb a9 cb 86 25 eb 62 ae 86 d5 9d .A..b....%.b.... 00c0 77 20 38 c0 7b c6 0f 08 8a 9f 84 53 59 ba f4 ac w 8.{......SY... 00d0 78 4f 08 89 9c 84 ba 72 5c f2 c5 bd d5 da ae a2 xO.....r\....... 00e0 77 17 75 85 f9 e9 a3 e9 21 b9 97 e3 4c 4f e9 20 w.u.....!...LO. 00f0 d6 9e 4b 4c 97 e6 3a 3c 69 aa 7f 6d 76 52 c4 32 ..KL..:..... 0120 83 5d f6 c5 8c 29 95 98 ff c2 33 a7 c7 90 55 28 .]...)....3...U( 0130 77 f3 67 9c 19 6a 73 a6 f7 af ea 9a a4 95 c5 31 w.g..js........1 0140 26 a0 96 12 f3 33 01 cc 8c cf 29 00 6b 0c 84 b9 &....3....).k... 0150 9e c3 .. Frame 9 (98 bytes on wire, 98 bytes captured) Arrival Time: Mar 23, 2004 15:04:20.021068000 Time delta from previous packet: 0.009036000 seconds Time since reference or first frame: 0.090558000 seconds Frame Number: 9 Packet Length: 98 bytes Capture Length: 98 bytes Ethernet II, Src: 00:0c:29:e6:ad:b9, Dst: 00:e0:13:00:2c:4a Destination: 00:e0:13:00:2c:4a (00:e0:13:00:2c:4a) Source: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Type: IP (0x0800) Frame check sequence: 0xcc5b3999 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.137 (165.227.249.137) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 80 Identification: 0x0b60 (2912) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3070 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.137 (165.227.249.137) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 60 Checksum: 0x2540 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xB91747F4324265B7 Responder cookie: 0x16FFDA466F8B3AAF Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xD4805E02 Length: 52 Encrypted payload (24 bytes) 0000 00 e0 13 00 2c 4a 00 0c 29 e6 ad b9 08 00 45 00 ....,J..).....E. 0010 00 50 0b 60 00 00 40 11 30 70 a5 e3 f9 7c a5 e3 .P.`..@.0p...|.. 0020 f9 89 01 f4 01 f4 00 3c 25 40 b9 17 47 f4 32 42 .......<%@..G.2B 0030 65 b7 16 ff da 46 6f 8b 3a af 08 10 20 01 d4 80 e....Fo.:... ... 0040 5e 02 00 00 00 34 67 f4 97 13 a8 2e 34 b9 28 1d ^....4g.....4.(. 0050 a7 09 c2 3a 44 0c 7c c0 4e ed a5 90 e5 95 cc 5b ...:D.|.N......[ 0060 39 99 9. Frame 10 (154 bytes on wire, 154 bytes captured) Arrival Time: Mar 23, 2004 15:04:20.288304000 Time delta from previous packet: 0.267236000 seconds Time since reference or first frame: 0.357794000 seconds Frame Number: 10 Packet Length: 154 bytes Capture Length: 154 bytes Ethernet II, Src: 00:0c:29:e6:ad:b9, Dst: 00:e0:13:00:2c:4a Destination: 00:e0:13:00:2c:4a (00:e0:13:00:2c:4a) Source: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Type: IP (0x0800) Frame check sequence: 0x65f37676 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.137 (165.227.249.137) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 136 Identification: 0x005d (93) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b19 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.137 (165.227.249.137) Encapsulating Security Payload SPI: 0xcb27210a Sequence: 2 Data (108 bytes) 0000 00 e0 13 00 2c 4a 00 0c 29 e6 ad b9 08 00 45 00 ....,J..).....E. 0010 00 88 00 5d 00 00 f0 32 8b 19 a5 e3 f9 7c a5 e3 ...]...2.....|.. 0020 f9 89 cb 27 21 0a 00 00 00 02 5b c2 ee fc 33 0c ...'!.....[...3. 0030 1d c9 8f 4d 73 d7 61 7f 45 55 77 9e 6b ea 17 49 ...Ms.a.EUw.k..I 0040 ab ba 76 35 03 62 c8 58 09 76 ba f6 33 f9 b1 02 ..v5.b.X.v..3... 0050 d5 5a 7c 55 da 9b 1c bc 2e e1 44 10 28 77 38 a0 .Z|U......D.(w8. 0060 ec dc 58 2a f5 06 b5 eb 2d e5 c0 4f e5 a1 65 00 ..X*....-..O..e. 0070 24 43 ec f2 44 5d fe b1 8d ce 85 ca c0 04 d2 d6 $C..D].......... 0080 5f be 1a ab e5 fa 63 7f 80 2b e2 db c7 ff fd 38 _.....c..+.....8 0090 79 98 c2 32 a1 00 65 f3 76 76 y..2..e.vv Frame 11 (154 bytes on wire, 154 bytes captured) Arrival Time: Mar 23, 2004 15:04:20.878216000 Time delta from previous packet: 0.589912000 seconds Time since reference or first frame: 0.947706000 seconds Frame Number: 11 Packet Length: 154 bytes Capture Length: 154 bytes Ethernet II, Src: 00:0c:29:e6:ad:b9, Dst: 00:e0:13:00:2c:4a Destination: 00:e0:13:00:2c:4a (00:e0:13:00:2c:4a) Source: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Type: IP (0x0800) Frame check sequence: 0x983e0b07 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.137 (165.227.249.137) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 136 Identification: 0x005e (94) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b18 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.137 (165.227.249.137) Encapsulating Security Payload SPI: 0xcb27210a Sequence: 3 Data (108 bytes) 0000 00 e0 13 00 2c 4a 00 0c 29 e6 ad b9 08 00 45 00 ....,J..).....E. 0010 00 88 00 5e 00 00 f0 32 8b 18 a5 e3 f9 7c a5 e3 ...^...2.....|.. 0020 f9 89 cb 27 21 0a 00 00 00 03 95 be 51 79 0c 5c ...'!.......Qy.\ 0030 db ed d4 28 ed b7 a7 b7 3b 79 53 c8 44 1b 72 53 ...(....;yS.D.rS 0040 dd 7d 0d 9d 7f 68 94 ff 2a dd e7 e8 dd 70 fe 1a .}...h..*....p.. 0050 2b ca 7a 16 3f e5 9c 44 d1 e3 8f b4 75 d3 a3 b2 +.z.?..D....u... 0060 4a bc 6c 3a f2 d6 74 2c 32 50 e2 e2 09 6b 9f a4 J.l:..t,2P...k.. 0070 cc ed 8b 66 06 9f dd 79 e4 4d 21 19 5e 96 13 01 ...f...y.M!.^... 0080 de c0 64 c9 14 9b c8 e1 61 a9 bf 65 34 25 c7 a7 ..d.....a..e4%.. 0090 cc e5 b8 f6 8d 80 98 3e 0b 07 .......>.. Frame 12 (154 bytes on wire, 154 bytes captured) Arrival Time: Mar 23, 2004 15:04:21.920659000 Time delta from previous packet: 1.042443000 seconds Time since reference or first frame: 1.990149000 seconds Frame Number: 12 Packet Length: 154 bytes Capture Length: 154 bytes Ethernet II, Src: 00:0c:29:e6:ad:b9, Dst: 00:e0:13:00:2c:4a Destination: 00:e0:13:00:2c:4a (00:e0:13:00:2c:4a) Source: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Type: IP (0x0800) Frame check sequence: 0xbe8f6262 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.137 (165.227.249.137) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 136 Identification: 0x005f (95) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b17 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.137 (165.227.249.137) Encapsulating Security Payload SPI: 0xcb27210a Sequence: 4 Data (108 bytes) 0000 00 e0 13 00 2c 4a 00 0c 29 e6 ad b9 08 00 45 00 ....,J..).....E. 0010 00 88 00 5f 00 00 f0 32 8b 17 a5 e3 f9 7c a5 e3 ..._...2.....|.. 0020 f9 89 cb 27 21 0a 00 00 00 04 68 26 13 20 be 49 ...'!.....h&. .I 0030 a1 19 be ab b7 44 48 bb c2 53 76 fd 33 01 a8 4e .....DH..Sv.3..N 0040 fc fc d0 e2 d0 8c 57 24 8d 80 78 04 29 59 12 e5 ......W$..x.)Y.. 0050 66 09 12 5f 42 43 85 e4 18 57 a4 23 8e 1f 16 86 f.._BC...W.#.... 0060 43 61 87 a9 73 1b 5d a1 11 51 c3 91 65 e3 8e c9 Ca..s.]..Q..e... 0070 d8 9e c9 fd fe 66 cc 45 fa fd c2 16 ae 7b 72 b6 .....f.E.....{r. 0080 3c 51 41 a5 a3 52 bd 35 04 21 bf c7 c6 de 38 72 ..... 0080 d8 96 d1 d8 ec 3f 80 b6 12 4e 38 c3 32 e5 14 eb .....?...N8.2... 0090 f7 53 ce 77 79 2a 62 7e f6 37 .S.wy*b~.7 Frame 17 (154 bytes on wire, 154 bytes captured) Arrival Time: Mar 23, 2004 15:04:40.046400000 Time delta from previous packet: 0.992155000 seconds Time since reference or first frame: 20.115890000 seconds Frame Number: 17 Packet Length: 154 bytes Capture Length: 154 bytes Ethernet II, Src: 00:0c:29:e6:ad:b9, Dst: 00:e0:13:00:2c:4a Destination: 00:e0:13:00:2c:4a (00:e0:13:00:2c:4a) Source: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Type: IP (0x0800) Frame check sequence: 0x1adbde93 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.137 (165.227.249.137) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 136 Identification: 0x0064 (100) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b12 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.137 (165.227.249.137) Encapsulating Security Payload SPI: 0xcb27210a Sequence: 9 Data (108 bytes) 0000 00 e0 13 00 2c 4a 00 0c 29 e6 ad b9 08 00 45 00 ....,J..).....E. 0010 00 88 00 64 00 00 f0 32 8b 12 a5 e3 f9 7c a5 e3 ...d...2.....|.. 0020 f9 89 cb 27 21 0a 00 00 00 09 f3 07 47 41 3c 26 ...'!.......GA<& 0030 6f 19 11 13 3e bc cc f0 60 ab 3b 98 db 04 34 59 o...>...`.;...4Y 0040 cc 1b c9 9e 62 41 f8 1c 62 68 7e c9 91 c3 ca 0f ....bA..bh~..... 0050 0f d5 f3 a6 74 e3 b2 df 60 45 b2 f0 5d 58 ea 06 ....t...`E..]X.. 0060 a1 3e 6e 4e 97 5b 1e 04 2e 94 87 ea db 51 ec 23 .>nN.[.......Q.# 0070 5f c6 02 f1 8d 80 78 d8 2a 37 1b 27 8d ed 6d 29 _.....x.*7.'..m) 0080 89 2c 2e 6c ec 29 88 7d f2 6a 66 e1 d6 21 6e 6c .,.l.).}.jf..!nl 0090 02 3f d7 a5 2b 3f 1a db de 93 .?..+?....