Frame 1 (266 bytes on wire, 266 bytes captured) Arrival Time: Sep 14, 2004 14:18:37.380753000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 266 bytes Capture Length: 266 bytes Ethernet II, Src: 00:0c:29:e6:ad:b9, Dst: 00:00:d1:ed:e3:ad Destination: 00:00:d1:ed:e3:ad (00:00:d1:ed:e3:ad) Source: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Type: IP (0x0800) Frame check sequence: 0xe9883d4e (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.141 (165.227.249.141) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 248 Identification: 0x0036 (54) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3aee (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.141 (165.227.249.141) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 228 Checksum: 0x9f12 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x00EAAC6E98F1649C Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 220 Security Association payload Next payload: Vendor ID (13) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 0 Next payload: NONE (0) Length: 40 Proposal number: 0 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 0 Next payload: NONE (0) Length: 32 Transform number: 0 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: unknown vendor ID: 0x8F9CC94E01248ECDF147594C284B213B Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-stenberg-ipsec-nat-traversal-01 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-stenberg-ipsec-nat-traversal-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-03 0000 00 00 d1 ed e3 ad 00 0c 29 e6 ad b9 08 00 45 00 ........).....E. 0010 00 f8 00 36 00 00 40 11 3a ee a5 e3 f9 7c a5 e3 ...6..@.:....|.. 0020 f9 8d 01 f4 01 f4 00 e4 9f 12 00 ea ac 6e 98 f1 .............n.. 0030 64 9c 00 00 00 00 00 00 00 00 01 10 02 00 00 00 d............... 0040 00 00 00 00 00 dc 0d 00 00 34 00 00 00 01 00 00 .........4...... 0050 00 01 00 00 00 28 00 01 00 01 00 00 00 20 00 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 03 00 01 80 04 ................ 0070 00 02 80 0b 00 01 80 0c 70 80 0d 00 00 14 8f 9c ........p....... 0080 c9 4e 01 24 8e cd f1 47 59 4c 28 4b 21 3b 0d 00 .N.$...GYL(K!;.. 0090 00 14 27 ba b5 dc 01 ea 07 60 ea 4e 31 90 ac 27 ..'......`.N1..' 00a0 c0 d0 0d 00 00 14 61 05 c4 22 e7 68 47 e4 3f 96 ......a..".hG.?. 00b0 84 80 12 92 ae cd 0d 00 00 14 44 85 15 2d 18 b6 ..........D..-.. 00c0 bb cd 0b e8 a8 46 95 79 dd cc 0d 00 00 14 cd 60 .....F.y.......` 00d0 46 43 35 df 21 f8 7c fd b2 fc 68 b6 a4 48 0d 00 FC5.!.|...h..H.. 00e0 00 14 90 cb 80 91 3e bb 69 6e 08 63 81 b5 ec 42 ......>.in.c...B 00f0 7b 1f 00 00 00 14 7d 94 19 a6 53 10 ca 6f 2c 17 {.....}...S..o,. 0100 9d 92 15 52 9d 56 e9 88 3d 4e ...R.V..=N Frame 2 (266 bytes on wire, 266 bytes captured) Arrival Time: Sep 14, 2004 14:18:37.425640000 Time delta from previous packet: 0.044887000 seconds Time since reference or first frame: 0.044887000 seconds Frame Number: 2 Packet Length: 266 bytes Capture Length: 266 bytes Ethernet II, Src: 00:00:d1:ed:e3:ad, Dst: 00:0c:29:e6:ad:b9 Destination: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Source: 00:00:d1:ed:e3:ad (00:00:d1:ed:e3:ad) Type: IP (0x0800) Frame check sequence: 0x2e9b8ed9 (correct) Internet Protocol, Src Addr: 165.227.249.141 (165.227.249.141), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 248 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb23 (correct) Source: 165.227.249.141 (165.227.249.141) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 228 Checksum: 0x948f (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x00EAAC6E98F1649C Responder cookie: 0x4988905E152E1B6E Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 220 Security Association payload Next payload: Vendor ID (13) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 0 Next payload: NONE (0) Length: 40 Proposal number: 0 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 0 Next payload: NONE (0) Length: 32 Transform number: 0 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: unknown vendor ID: 0x8F9CC94E01248ECDF147594C284B213B Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-stenberg-ipsec-nat-traversal-01 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-stenberg-ipsec-nat-traversal-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-03 0000 00 0c 29 e6 ad b9 00 00 d1 ed e3 ad 08 00 45 00 ..)...........E. 0010 00 f8 00 00 40 00 40 11 fb 23 a5 e3 f9 8d a5 e3 ....@.@..#...... 0020 f9 7c 01 f4 01 f4 00 e4 94 8f 00 ea ac 6e 98 f1 .|...........n.. 0030 64 9c 49 88 90 5e 15 2e 1b 6e 01 10 02 00 00 00 d.I..^...n...... 0040 00 00 00 00 00 dc 0d 00 00 34 00 00 00 01 00 00 .........4...... 0050 00 01 00 00 00 28 00 01 00 01 00 00 00 20 00 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 03 00 01 80 04 ................ 0070 00 02 80 0b 00 01 80 0c 70 80 0d 00 00 14 8f 9c ........p....... 0080 c9 4e 01 24 8e cd f1 47 59 4c 28 4b 21 3b 0d 00 .N.$...GYL(K!;.. 0090 00 14 27 ba b5 dc 01 ea 07 60 ea 4e 31 90 ac 27 ..'......`.N1..' 00a0 c0 d0 0d 00 00 14 61 05 c4 22 e7 68 47 e4 3f 96 ......a..".hG.?. 00b0 84 80 12 92 ae cd 0d 00 00 14 44 85 15 2d 18 b6 ..........D..-.. 00c0 bb cd 0b e8 a8 46 95 79 dd cc 0d 00 00 14 cd 60 .....F.y.......` 00d0 46 43 35 df 21 f8 7c fd b2 fc 68 b6 a4 48 0d 00 FC5.!.|...h..H.. 00e0 00 14 90 cb 80 91 3e bb 69 6e 08 63 81 b5 ec 42 ......>.in.c...B 00f0 7b 1f 00 00 00 14 7d 94 19 a6 53 10 ca 6f 2c 17 {.....}...S..o,. 0100 9d 92 15 52 9d 56 2e 9b 8e d9 ...R.V.... Frame 3 (274 bytes on wire, 274 bytes captured) Arrival Time: Sep 14, 2004 14:18:37.435898000 Time delta from previous packet: 0.010258000 seconds Time since reference or first frame: 0.055145000 seconds Frame Number: 3 Packet Length: 274 bytes Capture Length: 274 bytes Ethernet II, Src: 00:0c:29:e6:ad:b9, Dst: 00:00:d1:ed:e3:ad Destination: 00:00:d1:ed:e3:ad (00:00:d1:ed:e3:ad) Source: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Type: IP (0x0800) Frame check sequence: 0xdb97b8e2 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.141 (165.227.249.141) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 256 Identification: 0x0037 (55) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3ae5 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.141 (165.227.249.141) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 236 Checksum: 0xfc02 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x00EAAC6E98F1649C Responder cookie: 0x4988905E152E1B6E Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 228 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: Private USE (130) Length: 20 Nonce Data Unknown payload type payload Next payload: Private USE (130) Length: 24 Payload Unknown payload type payload Next payload: NONE (0) Length: 24 Payload 0000 00 00 d1 ed e3 ad 00 0c 29 e6 ad b9 08 00 45 00 ........).....E. 0010 01 00 00 37 00 00 40 11 3a e5 a5 e3 f9 7c a5 e3 ...7..@.:....|.. 0020 f9 8d 01 f4 01 f4 00 ec fc 02 00 ea ac 6e 98 f1 .............n.. 0030 64 9c 49 88 90 5e 15 2e 1b 6e 04 10 02 00 00 00 d.I..^...n...... 0040 00 00 00 00 00 e4 0a 00 00 84 68 37 f9 65 53 9a ..........h7.eS. 0050 f9 a8 69 32 59 c3 22 d8 80 4d 7d 8f 1a 63 cc d0 ..i2Y."..M}..c.. 0060 2c 43 24 1e f5 5c 93 bc 0c 5d 6f b7 20 6c 89 80 ,C$..\...]o. l.. 0070 75 32 a5 c8 dc ba a7 08 c5 6f ef 49 d0 d1 88 89 u2.......o.I.... 0080 a3 a4 01 f0 3d 3a 15 30 b0 1e 88 56 72 52 d8 1c ....=:.0...VrR.. 0090 e9 cb a4 4d e3 6a 8b d3 39 d7 e9 ed 1f 1b 85 d6 ...M.j..9....... 00a0 3b de 6b bf e9 d8 bd 6f 02 fd 14 1f c5 24 36 8e ;.k....o.....$6. 00b0 a9 b1 f7 ad 62 d4 28 e6 7c a8 b8 12 d6 de 7f de ....b.(.|....... 00c0 c7 e0 56 da 72 3d 58 26 ca 65 82 00 00 14 b8 0f ..V.r=X&.e...... 00d0 59 0a 50 62 25 27 b4 11 c8 46 24 71 7e 21 82 00 Y.Pb%'...F$q~!.. 00e0 00 18 a4 c4 98 87 c3 8c 12 d1 91 37 2b 86 a9 fe ...........7+... 00f0 fb 3d 0d e1 9c 7e 00 00 00 18 b2 1b 6c d5 3d 69 .=...~......l.=i 0100 e4 51 bc 9e 1a 3a 9b 88 92 b7 b3 a6 00 66 db 97 .Q...:.......f.. 0110 b8 e2 .. Frame 4 (274 bytes on wire, 274 bytes captured) Arrival Time: Sep 14, 2004 14:18:37.449270000 Time delta from previous packet: 0.013372000 seconds Time since reference or first frame: 0.068517000 seconds Frame Number: 4 Packet Length: 274 bytes Capture Length: 274 bytes Ethernet II, Src: 00:00:d1:ed:e3:ad, Dst: 00:0c:29:e6:ad:b9 Destination: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Source: 00:00:d1:ed:e3:ad (00:00:d1:ed:e3:ad) Type: IP (0x0800) Frame check sequence: 0x07f60ee2 (correct) Internet Protocol, Src Addr: 165.227.249.141 (165.227.249.141), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 256 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb1b (correct) Source: 165.227.249.141 (165.227.249.141) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 236 Checksum: 0xf720 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x00EAAC6E98F1649C Responder cookie: 0x4988905E152E1B6E Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 228 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: Private USE (130) Length: 20 Nonce Data Unknown payload type payload Next payload: Private USE (130) Length: 24 Payload Unknown payload type payload Next payload: NONE (0) Length: 24 Payload 0000 00 0c 29 e6 ad b9 00 00 d1 ed e3 ad 08 00 45 00 ..)...........E. 0010 01 00 00 00 40 00 40 11 fb 1b a5 e3 f9 8d a5 e3 ....@.@......... 0020 f9 7c 01 f4 01 f4 00 ec f7 20 00 ea ac 6e 98 f1 .|....... ...n.. 0030 64 9c 49 88 90 5e 15 2e 1b 6e 04 10 02 00 00 00 d.I..^...n...... 0040 00 00 00 00 00 e4 0a 00 00 84 7e c1 97 34 2b 53 ..........~..4+S 0050 58 e2 a4 6b e5 c9 4d cb 12 15 f7 d8 57 bc fa b1 X..k..M.....W... 0060 8b e8 18 9d a8 17 88 bf 90 b3 0a f1 55 dd 57 2f ............U.W/ 0070 40 30 d8 f4 9d 9d 1f df 6c 61 47 12 f1 50 58 4c @0......laG..PXL 0080 0b 35 36 49 52 68 d4 8a a2 99 a2 82 8c 11 5a 09 .56IRh........Z. 0090 e6 8a e8 75 fc 84 06 aa fd 40 be a4 37 06 f5 22 ...u.....@..7.." 00a0 c8 2c 98 42 fb 28 28 fd f6 85 94 b5 36 3a d2 ea .,.B.((.....6:.. 00b0 f4 9f f0 96 46 e8 b9 38 2f 0d ac 16 71 4f 57 c4 ....F..8/...qOW. 00c0 8d 6b 0f ee 3b 34 4a f2 94 8d 82 00 00 14 34 c9 .k..;4J.......4. 00d0 63 57 4e 11 f9 0f 2a 69 41 ef e7 e6 42 f9 82 00 cWN...*iA...B... 00e0 00 18 b2 1b 6c d5 3d 69 e4 51 bc 9e 1a 3a 9b 88 ....l.=i.Q...:.. 00f0 92 b7 b3 a6 00 66 00 00 00 18 a4 c4 98 87 c3 8c .....f.......... 0100 12 d1 91 37 2b 86 a9 fe fb 3d 0d e1 9c 7e 07 f6 ...7+....=...~.. 0110 0e e2 .. Frame 5 (122 bytes on wire, 122 bytes captured) Arrival Time: Sep 14, 2004 14:18:37.455769000 Time delta from previous packet: 0.006499000 seconds Time since reference or first frame: 0.075016000 seconds Frame Number: 5 Packet Length: 122 bytes Capture Length: 122 bytes Ethernet II, Src: 00:0c:29:e6:ad:b9, Dst: 00:00:d1:ed:e3:ad Destination: 00:00:d1:ed:e3:ad (00:00:d1:ed:e3:ad) Source: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Type: IP (0x0800) Frame check sequence: 0x629de4d3 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.141 (165.227.249.141) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 104 Identification: 0x0038 (56) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3b7c (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.141 (165.227.249.141) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 84 Checksum: 0xd92e (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x00EAAC6E98F1649C Responder cookie: 0x4988905E152E1B6E Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 76 Encrypted payload (48 bytes) 0000 00 00 d1 ed e3 ad 00 0c 29 e6 ad b9 08 00 45 00 ........).....E. 0010 00 68 00 38 00 00 40 11 3b 7c a5 e3 f9 7c a5 e3 .h.8..@.;|...|.. 0020 f9 8d 01 f4 01 f4 00 54 d9 2e 00 ea ac 6e 98 f1 .......T.....n.. 0030 64 9c 49 88 90 5e 15 2e 1b 6e 05 10 02 01 00 00 d.I..^...n...... 0040 00 00 00 00 00 4c ce 44 9e 26 e2 7f 42 b4 ff a1 .....L.D.&..B... 0050 70 65 34 4c 54 a7 23 db 5a 71 cd 35 cc 1a 1d 49 pe4LT.#.Zq.5...I 0060 c5 46 6b 1e b4 b6 61 d0 a3 f8 e7 bb 32 8b 90 38 .Fk...a.....2..8 0070 7d f0 ad 5d a6 63 62 9d e4 d3 }..].cb... Frame 6 (114 bytes on wire, 114 bytes captured) Arrival Time: Sep 14, 2004 14:18:37.456309000 Time delta from previous packet: 0.000540000 seconds Time since reference or first frame: 0.075556000 seconds Frame Number: 6 Packet Length: 114 bytes Capture Length: 114 bytes Ethernet II, Src: 00:00:d1:ed:e3:ad, Dst: 00:0c:29:e6:ad:b9 Destination: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Source: 00:00:d1:ed:e3:ad (00:00:d1:ed:e3:ad) Type: IP (0x0800) Frame check sequence: 0x19a63995 (correct) Internet Protocol, Src Addr: 165.227.249.141 (165.227.249.141), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfbbb (correct) Source: 165.227.249.141 (165.227.249.141) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 76 Checksum: 0x79df (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x00EAAC6E98F1649C Responder cookie: 0x4988905E152E1B6E Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 68 Encrypted payload (40 bytes) 0000 00 0c 29 e6 ad b9 00 00 d1 ed e3 ad 08 00 45 00 ..)...........E. 0010 00 60 00 00 40 00 40 11 fb bb a5 e3 f9 8d a5 e3 .`..@.@......... 0020 f9 7c 01 f4 01 f4 00 4c 79 df 00 ea ac 6e 98 f1 .|.....Ly....n.. 0030 64 9c 49 88 90 5e 15 2e 1b 6e 05 10 02 01 00 00 d.I..^...n...... 0040 00 00 00 00 00 44 60 81 00 91 f0 e7 9a 58 57 ad .....D`......XW. 0050 64 78 37 92 f2 9d 4c ec a1 5b b6 ed d1 b6 35 35 dx7...L..[....55 0060 5d bf b2 88 0e a8 c1 6a a2 ec c6 68 bd 83 19 a6 ]......j...h.... 0070 39 95 9. Frame 7 (338 bytes on wire, 338 bytes captured) Arrival Time: Sep 14, 2004 14:18:37.464769000 Time delta from previous packet: 0.008460000 seconds Time since reference or first frame: 0.084016000 seconds Frame Number: 7 Packet Length: 338 bytes Capture Length: 338 bytes Ethernet II, Src: 00:0c:29:e6:ad:b9, Dst: 00:00:d1:ed:e3:ad Destination: 00:00:d1:ed:e3:ad (00:00:d1:ed:e3:ad) Source: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Type: IP (0x0800) Frame check sequence: 0x86a24b65 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.141 (165.227.249.141) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 320 Identification: 0x0039 (57) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3aa3 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.141 (165.227.249.141) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 300 Checksum: 0xe577 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x00EAAC6E98F1649C Responder cookie: 0x4988905E152E1B6E Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x72AFC7D9 Length: 292 Encrypted payload (264 bytes) 0000 00 00 d1 ed e3 ad 00 0c 29 e6 ad b9 08 00 45 00 ........).....E. 0010 01 40 00 39 00 00 40 11 3a a3 a5 e3 f9 7c a5 e3 .@.9..@.:....|.. 0020 f9 8d 01 f4 01 f4 01 2c e5 77 00 ea ac 6e 98 f1 .......,.w...n.. 0030 64 9c 49 88 90 5e 15 2e 1b 6e 08 10 20 01 72 af d.I..^...n.. .r. 0040 c7 d9 00 00 01 24 dd b7 98 be e4 73 f1 5e de 86 .....$.....s.^.. 0050 c9 70 7c 2f 47 c9 e3 21 7b 15 48 e5 1c a0 c6 c6 .p|/G..!{.H..... 0060 72 2a 46 9b 47 f9 cf b4 38 97 c3 bf e1 d7 44 e4 r*F.G...8.....D. 0070 11 35 6d fe 80 f5 82 7b 5f bd 7e 5f 25 46 30 00 .5m....{_.~_%F0. 0080 eb e6 33 b0 7a 58 1c 95 cf 7a fb 56 3e 0a 03 d9 ..3.zX...z.V>... 0090 9a fa b3 99 45 fc 2b e9 4f ed bd 65 45 98 00 f0 ....E.+.O..eE... 00a0 1d ac c4 3e dc 77 06 28 b5 f0 cd 43 57 0b e7 3d ...>.w.(...CW..= 00b0 4f 82 5d de a9 6d f7 9c a5 cd ab ba 4d 68 6b 35 O.]..m......Mhk5 00c0 07 b7 36 30 dc 93 21 22 90 89 6c 53 51 88 c1 ae ..60..!"..lSQ... 00d0 3b 44 41 71 e0 0f 3b bb 62 0a 64 ab 15 bc c6 63 ;DAq..;.b.d....c 00e0 67 c4 ed a8 6c 8e 2a 90 ff cc 72 f1 4f 86 3f f3 g...l.*...r.O.?. 00f0 5e 75 09 a2 0f 0b 67 61 9c 47 3e 09 e0 88 82 54 ^u....ga.G>....T 0100 ba a7 60 1c 26 d6 a0 1c 38 e2 95 57 d2 b0 39 7d ..`.&...8..W..9} 0110 09 a5 05 88 b0 b3 98 d3 00 96 28 a9 28 4b f0 af ..........(.(K.. 0120 a7 71 63 d7 cf f0 3e 03 e3 9f 8b 12 45 67 8b f7 .qc...>.....Eg.. 0130 cd ab 00 7c 11 9f 42 e5 69 41 a2 cb e3 85 e5 7d ...|..B.iA.....} 0140 80 96 d9 ae 1b 9f bc 5b 72 2b 8f 67 ac 5e 86 a2 .......[r+.g.^.. 0150 4b 65 Ke Frame 8 (338 bytes on wire, 338 bytes captured) Arrival Time: Sep 14, 2004 14:18:37.533303000 Time delta from previous packet: 0.068534000 seconds Time since reference or first frame: 0.152550000 seconds Frame Number: 8 Packet Length: 338 bytes Capture Length: 338 bytes Ethernet II, Src: 00:00:d1:ed:e3:ad, Dst: 00:0c:29:e6:ad:b9 Destination: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Source: 00:00:d1:ed:e3:ad (00:00:d1:ed:e3:ad) Type: IP (0x0800) Frame check sequence: 0xe0661c2f (correct) Internet Protocol, Src Addr: 165.227.249.141 (165.227.249.141), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 320 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfadb (correct) Source: 165.227.249.141 (165.227.249.141) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 300 Checksum: 0xa458 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x00EAAC6E98F1649C Responder cookie: 0x4988905E152E1B6E Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x72AFC7D9 Length: 292 Encrypted payload (264 bytes) 0000 00 0c 29 e6 ad b9 00 00 d1 ed e3 ad 08 00 45 00 ..)...........E. 0010 01 40 00 00 40 00 40 11 fa db a5 e3 f9 8d a5 e3 .@..@.@......... 0020 f9 7c 01 f4 01 f4 01 2c a4 58 00 ea ac 6e 98 f1 .|.....,.X...n.. 0030 64 9c 49 88 90 5e 15 2e 1b 6e 08 10 20 01 72 af d.I..^...n.. .r. 0040 c7 d9 00 00 01 24 16 2c dd 09 18 01 04 bf 05 c0 .....$.,........ 0050 2f 61 1a dd d1 51 7e 0a 3c e8 4c ac 90 71 3a 86 /a...Q~.<.L..q:. 0060 05 54 6a 9b 97 c1 8e 93 9a 6b a5 99 b9 48 fb ca .Tj......k...H.. 0070 a1 93 68 35 09 88 7a cd 2c ac ee 07 85 d5 cb 48 ..h5..z.,......H 0080 9d b0 e9 cd 1e 0b 55 b6 f6 dd ca 4c 7b 16 4e eb ......U....L{.N. 0090 10 0a 5e 84 7c 81 21 1b f3 a3 de 21 92 47 a4 70 ..^.|.!....!.G.p 00a0 50 c3 3b 73 f4 03 65 df ea 49 fd 50 af cf 7b 9e P.;s..e..I.P..{. 00b0 3f c4 73 80 2c 6c d5 11 c1 ad 5d 01 00 20 97 f6 ?.s.,l....].. .. 00c0 39 fe b2 f6 73 7d 92 79 dc f2 aa 57 68 a4 8a c8 9...s}.y...Wh... 00d0 bb cd c3 39 bc 4a aa e4 b0 99 3d 0f f3 e5 f2 86 ...9.J....=..... 00e0 5f d4 b5 bd 9f fc d6 26 8e 4c f0 9c 93 87 2d a5 _......&.L....-. 00f0 10 07 6a 33 47 24 4b 81 87 0d c0 eb 99 30 d3 df ..j3G$K......0.. 0100 67 69 6e 1f 7c cf 4a 65 60 0f e5 6e 0f 33 5d b5 gin.|.Je`..n.3]. 0110 3b 2c 1d cc 5a 5b a2 c8 a3 04 2e 9d d6 53 c8 3b ;,..Z[.......S.; 0120 54 09 d8 bb 5a 2d db 80 5f 9e 15 c2 d1 a4 0c 69 T...Z-.._......i 0130 95 3a 34 a5 63 84 3f 54 79 c7 99 b3 75 84 3d 84 .:4.c.?Ty...u.=. 0140 ec dc 7e bc 4d 48 5f fc ea 00 13 c9 a9 91 e0 66 ..~.MH_........f 0150 1c 2f ./ Frame 9 (98 bytes on wire, 98 bytes captured) Arrival Time: Sep 14, 2004 14:18:37.541917000 Time delta from previous packet: 0.008614000 seconds Time since reference or first frame: 0.161164000 seconds Frame Number: 9 Packet Length: 98 bytes Capture Length: 98 bytes Ethernet II, Src: 00:0c:29:e6:ad:b9, Dst: 00:00:d1:ed:e3:ad Destination: 00:00:d1:ed:e3:ad (00:00:d1:ed:e3:ad) Source: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Type: IP (0x0800) Frame check sequence: 0xbb13b05a (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.141 (165.227.249.141) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 80 Identification: 0x003a (58) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3b92 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.141 (165.227.249.141) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 60 Checksum: 0xad76 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x00EAAC6E98F1649C Responder cookie: 0x4988905E152E1B6E Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x72AFC7D9 Length: 52 Encrypted payload (24 bytes) 0000 00 00 d1 ed e3 ad 00 0c 29 e6 ad b9 08 00 45 00 ........).....E. 0010 00 50 00 3a 00 00 40 11 3b 92 a5 e3 f9 7c a5 e3 .P.:..@.;....|.. 0020 f9 8d 01 f4 01 f4 00 3c ad 76 00 ea ac 6e 98 f1 .......<.v...n.. 0030 64 9c 49 88 90 5e 15 2e 1b 6e 08 10 20 01 72 af d.I..^...n.. .r. 0040 c7 d9 00 00 00 34 51 49 c9 91 89 62 48 74 f1 06 .....4QI...bHt.. 0050 88 2f 93 ac 00 f8 55 19 88 58 53 8e cb 80 bb 13 ./....U..XS..... 0060 b0 5a .Z Frame 10 (154 bytes on wire, 154 bytes captured) Arrival Time: Sep 14, 2004 14:18:37.841148000 Time delta from previous packet: 0.299231000 seconds Time since reference or first frame: 0.460395000 seconds Frame Number: 10 Packet Length: 154 bytes Capture Length: 154 bytes Ethernet II, Src: 00:0c:29:e6:ad:b9, Dst: 00:00:d1:ed:e3:ad Destination: 00:00:d1:ed:e3:ad (00:00:d1:ed:e3:ad) Source: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Type: IP (0x0800) Frame check sequence: 0xa3fe9ec2 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.141 (165.227.249.141) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 136 Identification: 0x000b (11) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b67 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.141 (165.227.249.141) Encapsulating Security Payload SPI: 0x2de86b90 Sequence: 2 Data (108 bytes) 0000 00 00 d1 ed e3 ad 00 0c 29 e6 ad b9 08 00 45 00 ........).....E. 0010 00 88 00 0b 00 00 f0 32 8b 67 a5 e3 f9 7c a5 e3 .......2.g...|.. 0020 f9 8d 2d e8 6b 90 00 00 00 02 dd 9a eb 56 ce 58 ..-.k........V.X 0030 3a 2d 93 50 eb d4 c8 c9 03 8e 8e 3d 5a 48 84 e2 :-.P.......=ZH.. 0040 73 10 9f 5f 01 41 07 c7 dc 2e e9 68 2d a0 f3 4a s.._.A.....h-..J 0050 ed 8a 2d 60 cd 33 10 2b 06 12 83 0e 26 df 1b 2a ..-`.3.+....&..* 0060 2a 89 67 af 4e c6 15 06 85 4c 71 9f 42 95 da 8d *.g.N....Lq.B... 0070 fe 05 8a 96 e6 94 6f 74 5a 8d 23 c0 ad 0d 51 ef ......otZ.#...Q. 0080 e5 f7 41 ca 0b f2 cf 3e 6b e5 22 3e 76 9b 55 f4 ..A....>k.">v.U. 0090 9b bd d3 1c f5 6f a3 fe 9e c2 .....o.... Frame 11 (154 bytes on wire, 154 bytes captured) Arrival Time: Sep 14, 2004 14:18:37.845389000 Time delta from previous packet: 0.004241000 seconds Time since reference or first frame: 0.464636000 seconds Frame Number: 11 Packet Length: 154 bytes Capture Length: 154 bytes Ethernet II, Src: 00:00:d1:ed:e3:ad, Dst: 00:0c:29:e6:ad:b9 Destination: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Source: 00:00:d1:ed:e3:ad (00:00:d1:ed:e3:ad) Type: IP (0x0800) Frame check sequence: 0x6a479775 (correct) Internet Protocol, Src Addr: 165.227.249.141 (165.227.249.141), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 136 Identification: 0x0008 (8) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b6a (correct) Source: 165.227.249.141 (165.227.249.141) Destination: 165.227.249.124 (165.227.249.124) Encapsulating Security Payload SPI: 0xb9d6aad5 Sequence: 2 Data (108 bytes) 0000 00 0c 29 e6 ad b9 00 00 d1 ed e3 ad 08 00 45 00 ..)...........E. 0010 00 88 00 08 00 00 f0 32 8b 6a a5 e3 f9 8d a5 e3 .......2.j...... 0020 f9 7c b9 d6 aa d5 00 00 00 02 a6 71 8d 9e fd f3 .|.........q.... 0030 66 bb f6 c0 78 f0 06 30 3d 91 c6 bd d4 bc 2e c3 f...x..0=....... 0040 ef c0 40 83 71 b9 de b0 7b 40 92 26 8a f9 89 7d ..@.q...{@.&...} 0050 c5 d2 3f 58 9a c8 39 3a 4a ce 07 c8 e2 a9 eb 4f ..?X..9:J......O 0060 ac f3 18 36 44 6d 88 46 cc ca 19 b8 91 20 3b 9d ...6Dm.F..... ;. 0070 ca af 6d 3b d6 6e f8 44 c1 0e 32 0a d9 2b 95 95 ..m;.n.D..2..+.. 0080 66 8f ad 1b fe 5d 2d ea 89 e1 5f c0 a4 ea 26 5c f....]-..._...&\ 0090 7b ce f3 84 9a ff 6a 47 97 75 {.....jG.u Frame 12 (154 bytes on wire, 154 bytes captured) Arrival Time: Sep 14, 2004 14:18:38.302797000 Time delta from previous packet: 0.457408000 seconds Time since reference or first frame: 0.922044000 seconds Frame Number: 12 Packet Length: 154 bytes Capture Length: 154 bytes Ethernet II, Src: 00:0c:29:e6:ad:b9, Dst: 00:00:d1:ed:e3:ad Destination: 00:00:d1:ed:e3:ad (00:00:d1:ed:e3:ad) Source: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Type: IP (0x0800) Frame check sequence: 0x58ec621c (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.141 (165.227.249.141) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 136 Identification: 0x000c (12) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b66 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.141 (165.227.249.141) Encapsulating Security Payload SPI: 0x2de86b90 Sequence: 3 Data (108 bytes) 0000 00 00 d1 ed e3 ad 00 0c 29 e6 ad b9 08 00 45 00 ........).....E. 0010 00 88 00 0c 00 00 f0 32 8b 66 a5 e3 f9 7c a5 e3 .......2.f...|.. 0020 f9 8d 2d e8 6b 90 00 00 00 03 03 0d 49 37 e4 4d ..-.k.......I7.M 0030 c3 5c 13 21 f2 85 87 00 7a 03 c6 aa fe a1 c7 23 .\.!....z......# 0040 f5 89 65 59 57 72 6f f1 cc 72 7a 18 e6 ec c3 32 ..eYWro..rz....2 0050 d0 ee 2e 03 b7 96 1b b3 be e0 d4 0a cc d8 28 98 ..............(. 0060 1f e4 b1 6e d6 5e 49 be 28 0f cb 14 35 91 f0 85 ...n.^I.(...5... 0070 bc 17 00 b8 cc c0 ff d8 b0 30 5a ad 2d 29 22 65 .........0Z.-)"e 0080 09 17 1b 8c 88 68 fd 10 34 48 4f df 16 b8 94 bb .....h..4HO..... 0090 47 e9 94 47 a6 f9 58 ec 62 1c G..G..X.b. Frame 13 (154 bytes on wire, 154 bytes captured) Arrival Time: Sep 14, 2004 14:18:38.303282000 Time delta from previous packet: 0.000485000 seconds Time since reference or first frame: 0.922529000 seconds Frame Number: 13 Packet Length: 154 bytes Capture Length: 154 bytes Ethernet II, Src: 00:00:d1:ed:e3:ad, Dst: 00:0c:29:e6:ad:b9 Destination: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Source: 00:00:d1:ed:e3:ad (00:00:d1:ed:e3:ad) Type: IP (0x0800) Frame check sequence: 0x8d4f3193 (correct) Internet Protocol, Src Addr: 165.227.249.141 (165.227.249.141), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 136 Identification: 0x0009 (9) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b69 (correct) Source: 165.227.249.141 (165.227.249.141) Destination: 165.227.249.124 (165.227.249.124) Encapsulating Security Payload SPI: 0xb9d6aad5 Sequence: 3 Data (108 bytes) 0000 00 0c 29 e6 ad b9 00 00 d1 ed e3 ad 08 00 45 00 ..)...........E. 0010 00 88 00 09 00 00 f0 32 8b 69 a5 e3 f9 8d a5 e3 .......2.i...... 0020 f9 7c b9 d6 aa d5 00 00 00 03 9d 69 fb 5e 70 12 .|.........i.^p. 0030 53 7d 2e d6 46 58 1a da 52 ef 4c b8 46 a5 33 1f S}..FX..R.L.F.3. 0040 77 ec 66 10 da b9 a2 ba 51 dc b0 17 03 20 a1 29 w.f.....Q.... .) 0050 29 ad 4d 39 9f f4 60 dd 88 95 0d 85 16 89 62 fa ).M9..`.......b. 0060 91 05 34 35 2c e7 c1 29 99 4e 27 84 63 de be ae ..45,..).N'.c... 0070 dc 40 4e a6 53 56 af 05 f2 49 56 cf 04 e3 05 4a .@N.SV...IV....J 0080 26 a7 93 f3 8d ea 74 1d 17 74 f6 31 de 55 d7 42 &.....t..t.1.U.B 0090 a4 66 1a ae bb 71 8d 4f 31 93 .f...q.O1. Frame 14 (154 bytes on wire, 154 bytes captured) Arrival Time: Sep 14, 2004 14:18:39.333653000 Time delta from previous packet: 1.030371000 seconds Time since reference or first frame: 1.952900000 seconds Frame Number: 14 Packet Length: 154 bytes Capture Length: 154 bytes Ethernet II, Src: 00:0c:29:e6:ad:b9, Dst: 00:00:d1:ed:e3:ad Destination: 00:00:d1:ed:e3:ad (00:00:d1:ed:e3:ad) Source: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Type: IP (0x0800) Frame check sequence: 0x8a3c1fa1 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.141 (165.227.249.141) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 136 Identification: 0x000d (13) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b65 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.141 (165.227.249.141) Encapsulating Security Payload SPI: 0x2de86b90 Sequence: 4 Data (108 bytes) 0000 00 00 d1 ed e3 ad 00 0c 29 e6 ad b9 08 00 45 00 ........).....E. 0010 00 88 00 0d 00 00 f0 32 8b 65 a5 e3 f9 7c a5 e3 .......2.e...|.. 0020 f9 8d 2d e8 6b 90 00 00 00 04 29 0a 4d 28 2c ef ..-.k.....).M(,. 0030 d0 a0 e7 4c 61 f3 59 74 d6 26 fc bd 1e c6 57 fb ...La.Yt.&....W. 0040 8f 20 25 28 24 60 4f dd 1f 10 01 4d 89 3b 50 61 . %($`O....M.;Pa 0050 f4 15 3c 9a b7 d7 2b 25 f6 73 cd 3b 6e 3a 49 bd ..<...+%.s.;n:I. 0060 29 54 39 d6 3f 8c c9 81 26 7d 94 4a 27 f3 6c 7e )T9.?...&}.J'.l~ 0070 84 51 f7 b6 a4 af 57 20 b3 d6 34 e4 7c 5f a7 78 .Q....W ..4.|_.x 0080 e6 13 34 74 ef 16 bf 12 bd 89 66 c2 ad 50 00 84 ..4t......f..P.. 0090 a3 a6 ac 1b 98 28 8a 3c 1f a1 .....(.<.. Frame 15 (154 bytes on wire, 154 bytes captured) Arrival Time: Sep 14, 2004 14:18:39.334178000 Time delta from previous packet: 0.000525000 seconds Time since reference or first frame: 1.953425000 seconds Frame Number: 15 Packet Length: 154 bytes Capture Length: 154 bytes Ethernet II, Src: 00:00:d1:ed:e3:ad, Dst: 00:0c:29:e6:ad:b9 Destination: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Source: 00:00:d1:ed:e3:ad (00:00:d1:ed:e3:ad) Type: IP (0x0800) Frame check sequence: 0x637e8675 (correct) Internet Protocol, Src Addr: 165.227.249.141 (165.227.249.141), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 136 Identification: 0x000a (10) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b68 (correct) Source: 165.227.249.141 (165.227.249.141) Destination: 165.227.249.124 (165.227.249.124) Encapsulating Security Payload SPI: 0xb9d6aad5 Sequence: 4 Data (108 bytes) 0000 00 0c 29 e6 ad b9 00 00 d1 ed e3 ad 08 00 45 00 ..)...........E. 0010 00 88 00 0a 00 00 f0 32 8b 68 a5 e3 f9 8d a5 e3 .......2.h...... 0020 f9 7c b9 d6 aa d5 00 00 00 04 2a ca 8c 9d 7a c9 .|........*...z. 0030 d3 36 f5 cd 66 e9 06 62 45 49 e4 d1 2c eb d2 99 .6..f..bEI..,... 0040 f9 9e 97 3b e6 52 bf b8 0d d9 7c d4 18 da 68 1d ...;.R....|...h. 0050 db b7 2f d6 d8 01 6c 9f 0e b7 8c 25 db c9 54 8c ../...l....%..T. 0060 fa c1 e5 37 8c fc da 59 d0 43 f5 cb 9b 6d 03 a4 ...7...Y.C...m.. 0070 88 71 47 a3 59 52 31 96 9f cc 4f 56 93 eb 9a 03 .qG.YR1...OV.... 0080 88 0a bc 6b dd 06 24 71 9c 3e 21 fd 96 96 bb af ...k..$q.>!..... 0090 db 1f 2a a2 ba db 63 7e 86 75 ..*...c~.u Frame 16 (154 bytes on wire, 154 bytes captured) Arrival Time: Sep 14, 2004 14:18:40.361015000 Time delta from previous packet: 1.026837000 seconds Time since reference or first frame: 2.980262000 seconds Frame Number: 16 Packet Length: 154 bytes Capture Length: 154 bytes Ethernet II, Src: 00:0c:29:e6:ad:b9, Dst: 00:00:d1:ed:e3:ad Destination: 00:00:d1:ed:e3:ad (00:00:d1:ed:e3:ad) Source: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Type: IP (0x0800) Frame check sequence: 0x779c2f48 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.141 (165.227.249.141) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 136 Identification: 0x000e (14) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b64 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.141 (165.227.249.141) Encapsulating Security Payload SPI: 0x2de86b90 Sequence: 5 Data (108 bytes) 0000 00 00 d1 ed e3 ad 00 0c 29 e6 ad b9 08 00 45 00 ........).....E. 0010 00 88 00 0e 00 00 f0 32 8b 64 a5 e3 f9 7c a5 e3 .......2.d...|.. 0020 f9 8d 2d e8 6b 90 00 00 00 05 30 64 51 7a b0 f6 ..-.k.....0dQz.. 0030 7e 7d b4 ec f2 a6 cf 64 ce bc f7 75 ba 65 6d 7f ~}.....d...u.em. 0040 b6 08 d1 9d ec 58 cc 46 3d 12 48 a7 29 d8 32 f2 .....X.F=.H.).2. 0050 7e 77 f8 a5 a2 73 58 f9 6d 39 98 f0 a0 2e 7b 40 ~w...sX.m9....{@ 0060 fa 8a 5c 0b e2 94 20 ad 60 0c 4f b9 e1 84 f8 15 ..\... .`.O..... 0070 a5 52 b3 96 ae 97 20 4f c4 fa ce 11 9c d5 ab 91 .R.... O........ 0080 24 21 0c 46 c5 17 44 7a ec 55 14 a8 f9 e6 62 29 $!.F..Dz.U....b) 0090 96 85 bd 3a a5 ea 77 9c 2f 48 ...:..w./H Frame 17 (154 bytes on wire, 154 bytes captured) Arrival Time: Sep 14, 2004 14:18:40.361546000 Time delta from previous packet: 0.000531000 seconds Time since reference or first frame: 2.980793000 seconds Frame Number: 17 Packet Length: 154 bytes Capture Length: 154 bytes Ethernet II, Src: 00:00:d1:ed:e3:ad, Dst: 00:0c:29:e6:ad:b9 Destination: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Source: 00:00:d1:ed:e3:ad (00:00:d1:ed:e3:ad) Type: IP (0x0800) Frame check sequence: 0x6fc886f4 (correct) Internet Protocol, Src Addr: 165.227.249.141 (165.227.249.141), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 136 Identification: 0x000b (11) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b67 (correct) Source: 165.227.249.141 (165.227.249.141) Destination: 165.227.249.124 (165.227.249.124) Encapsulating Security Payload SPI: 0xb9d6aad5 Sequence: 5 Data (108 bytes) 0000 00 0c 29 e6 ad b9 00 00 d1 ed e3 ad 08 00 45 00 ..)...........E. 0010 00 88 00 0b 00 00 f0 32 8b 67 a5 e3 f9 8d a5 e3 .......2.g...... 0020 f9 7c b9 d6 aa d5 00 00 00 05 44 e2 e5 d4 6e d2 .|........D...n. 0030 32 e0 ea 86 0b 61 f9 09 fc 3a d8 5f 12 3e 96 c4 2....a...:._.>.. 0040 65 e6 71 d6 98 44 d0 cb ca 04 82 2c 99 e7 ba 59 e.q..D.....,...Y 0050 fe e8 03 a5 2f 3e 0a 2b a5 d3 bf 6c 05 59 90 d4 ..../>.+...l.Y.. 0060 da d4 90 d2 bb e7 8e 21 44 50 0a 0d 07 77 d5 cf .......!DP...w.. 0070 04 fe 62 2c 6e 5e 38 ff 4d 91 49 03 1f b9 11 32 ..b,n^8.M.I....2 0080 1f 9f a2 17 56 d6 4b 84 fe cd c3 d3 e2 f5 d1 87 ....V.K......... 0090 46 15 ea 40 a2 33 6f c8 86 f4 F..@.3o...