Frame 1 (266 bytes on wire, 266 bytes captured) Arrival Time: Sep 9, 2004 12:05:48.508267000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 266 bytes Capture Length: 266 bytes Ethernet II, Src: 00:0c:29:e6:ad:b9, Dst: 00:0f:3d:10:fc:2c Destination: 00:0f:3d:10:fc:2c (00:0f:3d:10:fc:2c) Source: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Type: IP (0x0800) Frame check sequence: 0x0a32a520 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.142 (165.227.249.142) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 248 Identification: 0x0036 (54) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3aed (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.142 (165.227.249.142) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 228 Checksum: 0xa5a2 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x62F35BC4D6720F2B Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 220 Security Association payload Next payload: Vendor ID (13) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 0 Next payload: NONE (0) Length: 40 Proposal number: 0 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 0 Next payload: NONE (0) Length: 32 Transform number: 0 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: unknown vendor ID: 0x8F9CC94E01248ECDF147594C284B213B Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-stenberg-ipsec-nat-traversal-01 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-stenberg-ipsec-nat-traversal-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-03 0000 00 0f 3d 10 fc 2c 00 0c 29 e6 ad b9 08 00 45 00 ..=..,..).....E. 0010 00 f8 00 36 00 00 40 11 3a ed a5 e3 f9 7c a5 e3 ...6..@.:....|.. 0020 f9 8e 01 f4 01 f4 00 e4 a5 a2 62 f3 5b c4 d6 72 ..........b.[..r 0030 0f 2b 00 00 00 00 00 00 00 00 01 10 02 00 00 00 .+.............. 0040 00 00 00 00 00 dc 0d 00 00 34 00 00 00 01 00 00 .........4...... 0050 00 01 00 00 00 28 00 01 00 01 00 00 00 20 00 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 03 00 01 80 04 ................ 0070 00 02 80 0b 00 01 80 0c 70 80 0d 00 00 14 8f 9c ........p....... 0080 c9 4e 01 24 8e cd f1 47 59 4c 28 4b 21 3b 0d 00 .N.$...GYL(K!;.. 0090 00 14 27 ba b5 dc 01 ea 07 60 ea 4e 31 90 ac 27 ..'......`.N1..' 00a0 c0 d0 0d 00 00 14 61 05 c4 22 e7 68 47 e4 3f 96 ......a..".hG.?. 00b0 84 80 12 92 ae cd 0d 00 00 14 44 85 15 2d 18 b6 ..........D..-.. 00c0 bb cd 0b e8 a8 46 95 79 dd cc 0d 00 00 14 cd 60 .....F.y.......` 00d0 46 43 35 df 21 f8 7c fd b2 fc 68 b6 a4 48 0d 00 FC5.!.|...h..H.. 00e0 00 14 90 cb 80 91 3e bb 69 6e 08 63 81 b5 ec 42 ......>.in.c...B 00f0 7b 1f 00 00 00 14 7d 94 19 a6 53 10 ca 6f 2c 17 {.....}...S..o,. 0100 9d 92 15 52 9d 56 0a 32 a5 20 ...R.V.2. Frame 2 (266 bytes on wire, 266 bytes captured) Arrival Time: Sep 9, 2004 12:05:48.514394000 Time delta from previous packet: 0.006127000 seconds Time since reference or first frame: 0.006127000 seconds Frame Number: 2 Packet Length: 266 bytes Capture Length: 266 bytes Ethernet II, Src: 00:0f:3d:10:fc:2c, Dst: 00:0c:29:e6:ad:b9 Destination: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Source: 00:0f:3d:10:fc:2c (00:0f:3d:10:fc:2c) Type: IP (0x0800) Frame check sequence: 0xfc8c256c (correct) Internet Protocol, Src Addr: 165.227.249.142 (165.227.249.142), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 248 Identification: 0x4153 (16723) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: UDP (0x11) Header checksum: 0x3acf (correct) Source: 165.227.249.142 (165.227.249.142) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 228 Checksum: 0x6e18 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x62F35BC4D6720F2B Responder cookie: 0xD95D96F42F08B902 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 220 Security Association payload Next payload: Vendor ID (13) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 0 Next payload: NONE (0) Length: 40 Proposal number: 0 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 0 Next payload: NONE (0) Length: 32 Transform number: 0 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-dpd-00.txt Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-stenberg-ipsec-nat-traversal-01 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-stenberg-ipsec-nat-traversal-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-03 0000 00 0c 29 e6 ad b9 00 0f 3d 10 fc 2c 08 00 45 00 ..).....=..,..E. 0010 00 f8 41 53 00 00 ff 11 3a cf a5 e3 f9 8e a5 e3 ..AS....:....... 0020 f9 7c 01 f4 01 f4 00 e4 6e 18 62 f3 5b c4 d6 72 .|......n.b.[..r 0030 0f 2b d9 5d 96 f4 2f 08 b9 02 01 10 02 00 00 00 .+.]../......... 0040 00 00 00 00 00 dc 0d 00 00 34 00 00 00 01 00 00 .........4...... 0050 00 01 00 00 00 28 00 01 00 01 00 00 00 20 00 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 03 00 01 80 04 ................ 0070 00 02 80 0b 00 01 80 0c 70 80 0d 00 00 14 af ca ........p....... 0080 d7 13 68 a1 f1 c9 6b 86 96 fc 77 57 01 00 0d 00 ..h...k...wW.... 0090 00 14 27 ba b5 dc 01 ea 07 60 ea 4e 31 90 ac 27 ..'......`.N1..' 00a0 c0 d0 0d 00 00 14 61 05 c4 22 e7 68 47 e4 3f 96 ......a..".hG.?. 00b0 84 80 12 92 ae cd 0d 00 00 14 44 85 15 2d 18 b6 ..........D..-.. 00c0 bb cd 0b e8 a8 46 95 79 dd cc 0d 00 00 14 cd 60 .....F.y.......` 00d0 46 43 35 df 21 f8 7c fd b2 fc 68 b6 a4 48 0d 00 FC5.!.|...h..H.. 00e0 00 14 90 cb 80 91 3e bb 69 6e 08 63 81 b5 ec 42 ......>.in.c...B 00f0 7b 1f 00 00 00 14 7d 94 19 a6 53 10 ca 6f 2c 17 {.....}...S..o,. 0100 9d 92 15 52 9d 56 fc 8c 25 6c ...R.V..%l Frame 3 (274 bytes on wire, 274 bytes captured) Arrival Time: Sep 9, 2004 12:05:48.524282000 Time delta from previous packet: 0.009888000 seconds Time since reference or first frame: 0.016015000 seconds Frame Number: 3 Packet Length: 274 bytes Capture Length: 274 bytes Ethernet II, Src: 00:0c:29:e6:ad:b9, Dst: 00:0f:3d:10:fc:2c Destination: 00:0f:3d:10:fc:2c (00:0f:3d:10:fc:2c) Source: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Type: IP (0x0800) Frame check sequence: 0x0b85607d (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.142 (165.227.249.142) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 256 Identification: 0x0037 (55) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3ae4 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.142 (165.227.249.142) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 236 Checksum: 0x1e66 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x62F35BC4D6720F2B Responder cookie: 0xD95D96F42F08B902 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 228 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: Private USE (130) Length: 20 Nonce Data Unknown payload type payload Next payload: Private USE (130) Length: 24 Payload Unknown payload type payload Next payload: NONE (0) Length: 24 Payload 0000 00 0f 3d 10 fc 2c 00 0c 29 e6 ad b9 08 00 45 00 ..=..,..).....E. 0010 01 00 00 37 00 00 40 11 3a e4 a5 e3 f9 7c a5 e3 ...7..@.:....|.. 0020 f9 8e 01 f4 01 f4 00 ec 1e 66 62 f3 5b c4 d6 72 .........fb.[..r 0030 0f 2b d9 5d 96 f4 2f 08 b9 02 04 10 02 00 00 00 .+.]../......... 0040 00 00 00 00 00 e4 0a 00 00 84 43 e7 c6 29 60 5c ..........C..)`\ 0050 6f e1 17 4b bc 88 7e 0b 89 6b e2 18 f2 de 8b d9 o..K..~..k...... 0060 7f d3 22 b1 87 85 47 e4 40 2c cb 7f 36 44 75 b5 .."...G.@,..6Du. 0070 63 dd dd 6b 22 fc 12 5c e2 dc ab fc 6b 4b 50 a1 c..k"..\....kKP. 0080 dd ad 80 ab 10 47 65 00 4b bb 99 66 0b 5e 5f f2 .....Ge.K..f.^_. 0090 8f 6c e6 d9 8b f1 7f d1 0b 3e 9c ca 80 0b 4f 48 .l.......>....OH 00a0 fb d8 72 3c c6 ea fa 7f e7 01 62 a9 8f a3 e5 86 ..r<......b..... 00b0 47 1b 1d 37 ee 03 df f4 1a e1 32 66 57 a0 6e 09 G..7......2fW.n. 00c0 2d a6 e3 d4 f9 68 2a f7 0d 74 82 00 00 14 13 84 -....h*..t...... 00d0 cc 83 c9 92 95 18 89 66 34 25 d9 b9 2f d9 82 00 .......f4%../... 00e0 00 18 d4 be a8 4b 6b d0 00 13 83 30 82 5d ca 38 .....Kk....0.].8 00f0 42 4e 16 5a a2 35 00 00 00 18 47 f5 bb 36 53 a2 BN.Z.5....G..6S. 0100 1c e4 5e aa da 13 11 31 d6 12 5d 6d 4a 3d 0b 85 ..^....1..]mJ=.. 0110 60 7d `} Frame 4 (346 bytes on wire, 346 bytes captured) Arrival Time: Sep 9, 2004 12:05:48.830267000 Time delta from previous packet: 0.305985000 seconds Time since reference or first frame: 0.322000000 seconds Frame Number: 4 Packet Length: 346 bytes Capture Length: 346 bytes Ethernet II, Src: 00:0f:3d:10:fc:2c, Dst: 00:0c:29:e6:ad:b9 Destination: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Source: 00:0f:3d:10:fc:2c (00:0f:3d:10:fc:2c) Type: IP (0x0800) Frame check sequence: 0x550f71d1 (correct) Internet Protocol, Src Addr: 165.227.249.142 (165.227.249.142), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 328 Identification: 0x4653 (18003) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: UDP (0x11) Header checksum: 0x357f (correct) Source: 165.227.249.142 (165.227.249.142) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 308 Checksum: 0x017b (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x62F35BC4D6720F2B Responder cookie: 0xD95D96F42F08B902 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 300 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: Private USE (130) Length: 20 Nonce Data Unknown payload type payload Next payload: Private USE (130) Length: 24 Payload Unknown payload type payload Next payload: Private USE (130) Length: 24 Payload Unknown payload type payload Next payload: Private USE (130) Length: 24 Payload Unknown payload type payload Next payload: Private USE (130) Length: 24 Payload Unknown payload type payload Next payload: NONE (0) Length: 24 Payload 0000 00 0c 29 e6 ad b9 00 0f 3d 10 fc 2c 08 00 45 00 ..).....=..,..E. 0010 01 48 46 53 00 00 ff 11 35 7f a5 e3 f9 8e a5 e3 .HFS....5....... 0020 f9 7c 01 f4 01 f4 01 34 01 7b 62 f3 5b c4 d6 72 .|.....4.{b.[..r 0030 0f 2b d9 5d 96 f4 2f 08 b9 02 04 10 02 00 00 00 .+.]../......... 0040 00 00 00 00 01 2c 0a 00 00 84 16 9f 0c 4c ca 29 .....,.......L.) 0050 72 03 07 64 e6 69 ae 28 2f 75 27 f0 72 55 90 99 r..d.i.(/u'.rU.. 0060 9b 6c e6 ca 61 09 c3 ac 8e 4d 97 3a 8f 68 1e f7 .l..a....M.:.h.. 0070 b0 cb 5e 3f 92 b7 f5 fa fc 7b 6b e2 a9 72 86 53 ..^?.....{k..r.S 0080 03 ba 74 94 79 44 30 22 b5 5e bf fa 69 77 44 00 ..t.yD0".^..iwD. 0090 f1 1d d5 c9 28 a9 1d b3 e0 95 39 2b 47 96 6d d9 ....(.....9+G.m. 00a0 3d 25 57 b3 fe 50 88 31 27 eb 0a d9 ac 6e 73 0f =%W..P.1'....ns. 00b0 12 5a 53 01 3b d0 04 83 5b 6c 68 c8 c8 be 4d c8 .ZS.;...[lh...M. 00c0 db 69 2f 6f ab 60 00 c5 1f 21 82 00 00 14 4d 25 .i/o.`...!....M% 00d0 b1 ea 70 97 a3 62 49 c3 99 1d 0e cf f6 59 82 00 ..p..bI......Y.. 00e0 00 18 47 f5 bb 36 53 a2 1c e4 5e aa da 13 11 31 ..G..6S...^....1 00f0 d6 12 5d 6d 4a 3d 82 00 00 18 ad 24 1a fb 81 6b ..]mJ=.....$...k 0100 f6 2b b9 c0 96 b5 ea e0 09 bb 3f 01 84 50 82 00 .+........?..P.. 0110 00 18 ba 65 7c 8d 11 ef 92 bf a7 3c 2e e1 1a 07 ...e|......<.... 0120 2a f7 3b 14 8f 02 82 00 00 18 d4 be a8 4b 6b d0 *.;..........Kk. 0130 00 13 83 30 82 5d ca 38 42 4e 16 5a a2 35 00 00 ...0.].8BN.Z.5.. 0140 00 18 ad 24 1a fb 81 6b f6 2b b9 c0 96 b5 ea e0 ...$...k.+...... 0150 09 bb 3f 01 84 50 55 0f 71 d1 ..?..PU.q. Frame 5 (122 bytes on wire, 122 bytes captured) Arrival Time: Sep 9, 2004 12:05:48.836663000 Time delta from previous packet: 0.006396000 seconds Time since reference or first frame: 0.328396000 seconds Frame Number: 5 Packet Length: 122 bytes Capture Length: 122 bytes Ethernet II, Src: 00:0c:29:e6:ad:b9, Dst: 00:0f:3d:10:fc:2c Destination: 00:0f:3d:10:fc:2c (00:0f:3d:10:fc:2c) Source: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Type: IP (0x0800) Frame check sequence: 0x2c305934 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.142 (165.227.249.142) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 104 Identification: 0x0038 (56) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3b7b (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.142 (165.227.249.142) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 84 Checksum: 0xf2ab (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x62F35BC4D6720F2B Responder cookie: 0xD95D96F42F08B902 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 76 Encrypted payload (48 bytes) 0000 00 0f 3d 10 fc 2c 00 0c 29 e6 ad b9 08 00 45 00 ..=..,..).....E. 0010 00 68 00 38 00 00 40 11 3b 7b a5 e3 f9 7c a5 e3 .h.8..@.;{...|.. 0020 f9 8e 01 f4 01 f4 00 54 f2 ab 62 f3 5b c4 d6 72 .......T..b.[..r 0030 0f 2b d9 5d 96 f4 2f 08 b9 02 05 10 02 01 00 00 .+.]../......... 0040 00 00 00 00 00 4c d8 c9 e8 5a 3e 6c 98 51 8d d9 .....L...Z>l.Q.. 0050 8e b8 23 94 d8 e5 30 bf 35 87 e4 39 5a 7c 29 ee ..#...0.5..9Z|). 0060 af bc a7 6e 67 09 ed 7f bc c4 c7 ef 59 a3 d2 5b ...ng.......Y..[ 0070 f4 08 53 da a1 aa 2c 30 59 34 ..S...,0Y4 Frame 6 (114 bytes on wire, 114 bytes captured) Arrival Time: Sep 9, 2004 12:05:48.842708000 Time delta from previous packet: 0.006045000 seconds Time since reference or first frame: 0.334441000 seconds Frame Number: 6 Packet Length: 114 bytes Capture Length: 114 bytes Ethernet II, Src: 00:0f:3d:10:fc:2c, Dst: 00:0c:29:e6:ad:b9 Destination: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Source: 00:0f:3d:10:fc:2c (00:0f:3d:10:fc:2c) Type: IP (0x0800) Frame check sequence: 0x363fbb48 (correct) Internet Protocol, Src Addr: 165.227.249.142 (165.227.249.142), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0x9850 (38992) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: UDP (0x11) Header checksum: 0xe469 (correct) Source: 165.227.249.142 (165.227.249.142) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 76 Checksum: 0x8712 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x62F35BC4D6720F2B Responder cookie: 0xD95D96F42F08B902 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 68 Encrypted payload (40 bytes) 0000 00 0c 29 e6 ad b9 00 0f 3d 10 fc 2c 08 00 45 00 ..).....=..,..E. 0010 00 60 98 50 00 00 ff 11 e4 69 a5 e3 f9 8e a5 e3 .`.P.....i...... 0020 f9 7c 01 f4 01 f4 00 4c 87 12 62 f3 5b c4 d6 72 .|.....L..b.[..r 0030 0f 2b d9 5d 96 f4 2f 08 b9 02 05 10 02 01 00 00 .+.]../......... 0040 00 00 00 00 00 44 29 d1 28 b0 0c bc 08 ca 67 d2 .....D).(.....g. 0050 16 8e ed 31 a7 62 d7 85 33 46 44 91 90 9a bb 83 ...1.b..3FD..... 0060 1b 70 47 76 80 35 a7 2e bb 00 c4 9f 11 1e 36 3f .pGv.5........6? 0070 bb 48 .H Frame 7 (338 bytes on wire, 338 bytes captured) Arrival Time: Sep 9, 2004 12:05:48.851202000 Time delta from previous packet: 0.008494000 seconds Time since reference or first frame: 0.342935000 seconds Frame Number: 7 Packet Length: 338 bytes Capture Length: 338 bytes Ethernet II, Src: 00:0c:29:e6:ad:b9, Dst: 00:0f:3d:10:fc:2c Destination: 00:0f:3d:10:fc:2c (00:0f:3d:10:fc:2c) Source: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Type: IP (0x0800) Frame check sequence: 0x845f77c1 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.142 (165.227.249.142) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 320 Identification: 0x0039 (57) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3aa2 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.142 (165.227.249.142) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 300 Checksum: 0x44bc (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x62F35BC4D6720F2B Responder cookie: 0xD95D96F42F08B902 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xB57F98E3 Length: 292 Encrypted payload (264 bytes) 0000 00 0f 3d 10 fc 2c 00 0c 29 e6 ad b9 08 00 45 00 ..=..,..).....E. 0010 01 40 00 39 00 00 40 11 3a a2 a5 e3 f9 7c a5 e3 .@.9..@.:....|.. 0020 f9 8e 01 f4 01 f4 01 2c 44 bc 62 f3 5b c4 d6 72 .......,D.b.[..r 0030 0f 2b d9 5d 96 f4 2f 08 b9 02 08 10 20 01 b5 7f .+.]../..... ... 0040 98 e3 00 00 01 24 fe 92 82 c6 73 13 c0 54 49 47 .....$....s..TIG 0050 42 53 66 ae 4f bb fa a2 13 a9 33 8e 85 0c aa e6 BSf.O.....3..... 0060 11 34 0c 09 8a c0 48 7b a8 17 fa 5a f9 f5 c6 41 .4....H{...Z...A 0070 9e 44 fb d6 e9 23 87 f5 d8 27 5e 9f ac d4 4c a4 .D...#...'^...L. 0080 5f 57 33 f0 df 93 e8 c2 ce 57 f9 44 ab ee 11 fe _W3......W.D.... 0090 fd 88 83 c5 94 8b 0a 45 67 98 0c 57 f5 89 e0 42 .......Eg..W...B 00a0 90 2c 46 7f 4c aa 7b f5 60 27 22 26 21 32 27 09 .,F.L.{.`'"&!2'. 00b0 04 5c 61 7d 6a 49 89 1f 64 72 9d f6 9c fd 48 50 .\a}jI..dr....HP 00c0 02 9c 1e 5c 29 11 28 13 8a 85 a6 93 43 bc 62 61 ...\).(.....C.ba 00d0 d2 21 e2 44 b0 46 c4 20 d8 40 43 cf 15 2e d0 56 .!.D.F. .@C....V 00e0 9c 47 4b 0e 9f 00 aa b8 57 b8 14 9e 64 e9 1a 23 .GK.....W...d..# 00f0 42 22 56 01 ac 1b 43 d0 c1 4b ee 72 c5 8f 39 6d B"V...C..K.r..9m 0100 07 d0 16 8c 4e 54 df b3 b7 3f 52 61 ab e3 37 7f ....NT...?Ra..7. 0110 68 65 35 2a fc 35 38 ed 24 a2 f0 a1 01 ad 8e 30 he5*.58.$......0 0120 06 6f 39 b6 0c 71 43 79 0e 77 bf 6d e1 1c ad 74 .o9..qCy.w.m...t 0130 52 c8 35 0d d4 97 91 ea 5e 83 c5 7d 11 f0 3f 3e R.5.....^..}..?> 0140 b1 c7 f1 21 6c e9 d6 bf 9f 85 7e 32 48 4e 84 5f ...!l.....~2HN._ 0150 77 c1 w. Frame 8 (338 bytes on wire, 338 bytes captured) Arrival Time: Sep 9, 2004 12:05:49.004219000 Time delta from previous packet: 0.153017000 seconds Time since reference or first frame: 0.495952000 seconds Frame Number: 8 Packet Length: 338 bytes Capture Length: 338 bytes Ethernet II, Src: 00:0f:3d:10:fc:2c, Dst: 00:0c:29:e6:ad:b9 Destination: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Source: 00:0f:3d:10:fc:2c (00:0f:3d:10:fc:2c) Type: IP (0x0800) Frame check sequence: 0x65144479 (correct) Internet Protocol, Src Addr: 165.227.249.142 (165.227.249.142), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 320 Identification: 0xe050 (57424) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: UDP (0x11) Header checksum: 0x9b89 (correct) Source: 165.227.249.142 (165.227.249.142) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 300 Checksum: 0x456b (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x62F35BC4D6720F2B Responder cookie: 0xD95D96F42F08B902 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xB57F98E3 Length: 292 Encrypted payload (264 bytes) 0000 00 0c 29 e6 ad b9 00 0f 3d 10 fc 2c 08 00 45 00 ..).....=..,..E. 0010 01 40 e0 50 00 00 ff 11 9b 89 a5 e3 f9 8e a5 e3 .@.P............ 0020 f9 7c 01 f4 01 f4 01 2c 45 6b 62 f3 5b c4 d6 72 .|.....,Ekb.[..r 0030 0f 2b d9 5d 96 f4 2f 08 b9 02 08 10 20 01 b5 7f .+.]../..... ... 0040 98 e3 00 00 01 24 fa 08 db f7 49 56 54 50 d5 d6 .....$....IVTP.. 0050 2e ae df c3 bf f3 b7 cb ae 4d 6f 67 72 b2 68 f9 .........Mogr.h. 0060 86 a8 6c bc d3 1b 66 ae e5 5e 46 e4 fe bb 69 94 ..l...f..^F...i. 0070 9f 27 ae 67 29 41 d6 c0 c4 f0 f2 89 ce 93 a3 17 .'.g)A.......... 0080 9f ac 74 de 55 05 12 79 28 bd 56 04 3f b5 fd 13 ..t.U..y(.V.?... 0090 0d 06 5b b6 9c ba 5c f3 33 fa bc 4b 0c db 76 aa ..[...\.3..K..v. 00a0 b8 36 50 8e 26 32 c4 76 89 38 2b 10 4b 70 42 d2 .6P.&2.v.8+.KpB. 00b0 73 f7 ae b5 7a ef 1b de d4 0d 88 52 29 16 80 37 s...z......R)..7 00c0 54 49 3b 4a 66 a5 52 94 3a e5 cf ec 75 4b f6 91 TI;Jf.R.:...uK.. 00d0 3e d4 9f 7b 57 eb 55 5a 51 b2 a2 7b 0e c1 dc 58 >..{W.UZQ..{...X 00e0 5a 1e c6 20 74 b8 62 49 78 b4 d7 ac 72 6c 99 7d Z.. t.bIx...rl.} 00f0 d8 2b 5d 0b c9 73 71 39 aa c4 de 38 e0 c5 e0 75 .+]..sq9...8...u 0100 76 d9 ff 90 21 65 f7 a7 8a 23 de 72 f4 ce 94 bf v...!e...#.r.... 0110 27 40 82 66 64 52 cf be 9f 53 3b 70 06 81 cc 67 '@.fdR...S;p...g 0120 b3 f4 66 8c 0f 6e fc 37 9f 0d a0 e0 bf 73 26 b6 ..f..n.7.....s&. 0130 02 22 07 6e 3f 78 e9 1d 56 e3 51 07 a1 63 78 92 .".n?x..V.Q..cx. 0140 45 84 67 56 0d 98 1a 62 bc 20 21 ee c4 7e 65 14 E.gV...b. !..~e. 0150 44 79 Dy Frame 9 (98 bytes on wire, 98 bytes captured) Arrival Time: Sep 9, 2004 12:05:49.012812000 Time delta from previous packet: 0.008593000 seconds Time since reference or first frame: 0.504545000 seconds Frame Number: 9 Packet Length: 98 bytes Capture Length: 98 bytes Ethernet II, Src: 00:0c:29:e6:ad:b9, Dst: 00:0f:3d:10:fc:2c Destination: 00:0f:3d:10:fc:2c (00:0f:3d:10:fc:2c) Source: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Type: IP (0x0800) Frame check sequence: 0xcedc471a (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.142 (165.227.249.142) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 80 Identification: 0x003a (58) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3b91 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.142 (165.227.249.142) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 60 Checksum: 0x7c69 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x62F35BC4D6720F2B Responder cookie: 0xD95D96F42F08B902 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xB57F98E3 Length: 52 Encrypted payload (24 bytes) 0000 00 0f 3d 10 fc 2c 00 0c 29 e6 ad b9 08 00 45 00 ..=..,..).....E. 0010 00 50 00 3a 00 00 40 11 3b 91 a5 e3 f9 7c a5 e3 .P.:..@.;....|.. 0020 f9 8e 01 f4 01 f4 00 3c 7c 69 62 f3 5b c4 d6 72 .......<|ib.[..r 0030 0f 2b d9 5d 96 f4 2f 08 b9 02 08 10 20 01 b5 7f .+.]../..... ... 0040 98 e3 00 00 00 34 5f 11 7d 13 b5 57 31 86 21 88 .....4_.}..W1.!. 0050 3c 03 67 87 2d 3f fa b3 12 67 c0 7e 4a 08 ce dc <.g.-?...g.~J... 0060 47 1a G. Frame 10 (154 bytes on wire, 154 bytes captured) Arrival Time: Sep 9, 2004 12:05:49.302569000 Time delta from previous packet: 0.289757000 seconds Time since reference or first frame: 0.794302000 seconds Frame Number: 10 Packet Length: 154 bytes Capture Length: 154 bytes Ethernet II, Src: 00:0c:29:e6:ad:b9, Dst: 00:0f:3d:10:fc:2c Destination: 00:0f:3d:10:fc:2c (00:0f:3d:10:fc:2c) Source: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Type: IP (0x0800) Frame check sequence: 0x0df6a7f7 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.142 (165.227.249.142) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 136 Identification: 0x000b (11) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b66 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.142 (165.227.249.142) Encapsulating Security Payload SPI: 0x26d0f247 Sequence: 2 Data (108 bytes) 0000 00 0f 3d 10 fc 2c 00 0c 29 e6 ad b9 08 00 45 00 ..=..,..).....E. 0010 00 88 00 0b 00 00 f0 32 8b 66 a5 e3 f9 7c a5 e3 .......2.f...|.. 0020 f9 8e 26 d0 f2 47 00 00 00 02 5a 47 f7 0a 4c 8a ..&..G....ZG..L. 0030 9c a2 3b 5f 3c ea b1 c5 1c d0 fa 14 6e e3 78 37 ..;_<.......n.x7 0040 06 c7 17 f1 ff 5b 77 e5 0a 40 03 0d 97 6b 73 5d .....[w..@...ks] 0050 74 f6 fa 07 43 f3 b1 81 5e bf a7 0f 17 63 1c 1e t...C...^....c.. 0060 7e 4f 85 96 28 16 f6 09 06 1e 77 62 0a 3b a4 86 ~O..(.....wb.;.. 0070 85 fb 11 d6 67 70 b4 47 0a eb c1 b0 15 13 0b 95 ....gp.G........ 0080 d4 17 d9 48 fa c4 ff e6 fd 91 30 77 37 4e 4e 8c ...H......0w7NN. 0090 3a 93 36 0d 80 8f 0d f6 a7 f7 :.6....... Frame 11 (154 bytes on wire, 154 bytes captured) Arrival Time: Sep 9, 2004 12:05:49.476332000 Time delta from previous packet: 0.173763000 seconds Time since reference or first frame: 0.968065000 seconds Frame Number: 11 Packet Length: 154 bytes Capture Length: 154 bytes Ethernet II, Src: 00:0c:29:e6:ad:b9, Dst: 00:0f:3d:10:fc:2c Destination: 00:0f:3d:10:fc:2c (00:0f:3d:10:fc:2c) Source: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Type: IP (0x0800) Frame check sequence: 0x6b196b78 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.142 (165.227.249.142) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 136 Identification: 0x000c (12) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b65 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.142 (165.227.249.142) Encapsulating Security Payload SPI: 0x26d0f247 Sequence: 3 Data (108 bytes) 0000 00 0f 3d 10 fc 2c 00 0c 29 e6 ad b9 08 00 45 00 ..=..,..).....E. 0010 00 88 00 0c 00 00 f0 32 8b 65 a5 e3 f9 7c a5 e3 .......2.e...|.. 0020 f9 8e 26 d0 f2 47 00 00 00 03 ec 1a 91 9b 42 56 ..&..G........BV 0030 e6 3c d8 12 d0 b5 5f 48 3c 39 e3 f8 c5 84 e5 e7 .<...._H<9...... 0040 56 38 db 3b 0e 60 9b ab 9e 62 d2 04 07 13 58 5a V8.;.`...b....XZ 0050 ac d4 35 17 c0 48 37 91 c1 f3 b1 87 96 90 2c ab ..5..H7.......,. 0060 5e 28 62 65 0e 16 62 f6 4a 23 ca 5e 90 32 8c 8e ^(be..b.J#.^.2.. 0070 13 07 f8 dd 35 db eb 73 4e d7 32 ab b5 52 51 17 ....5..sN.2..RQ. 0080 96 1f 9a b8 25 86 ed 01 49 32 51 16 0f ef 4b ee ....%...I2Q...K. 0090 1c 5c cf 5b a4 9d 6b 19 6b 78 .\.[..k.kx Frame 12 (154 bytes on wire, 154 bytes captured) Arrival Time: Sep 9, 2004 12:05:49.477575000 Time delta from previous packet: 0.001243000 seconds Time since reference or first frame: 0.969308000 seconds Frame Number: 12 Packet Length: 154 bytes Capture Length: 154 bytes Ethernet II, Src: 00:0f:3d:10:fc:2c, Dst: 00:0c:29:e6:ad:b9 Destination: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Source: 00:0f:3d:10:fc:2c (00:0f:3d:10:fc:2c) Type: IP (0x0800) Frame check sequence: 0x03cad64a (correct) Internet Protocol, Src Addr: 165.227.249.142 (165.227.249.142), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 136 Identification: 0x2352 (9042) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x681f (correct) Source: 165.227.249.142 (165.227.249.142) Destination: 165.227.249.124 (165.227.249.124) Encapsulating Security Payload SPI: 0x55bef764 Sequence: 1 Data (108 bytes) 0000 00 0c 29 e6 ad b9 00 0f 3d 10 fc 2c 08 00 45 00 ..).....=..,..E. 0010 00 88 23 52 00 00 f0 32 68 1f a5 e3 f9 8e a5 e3 ..#R...2h....... 0020 f9 7c 55 be f7 64 00 00 00 01 91 c9 5b e3 0c c2 .|U..d......[... 0030 10 9c 88 03 3e 22 9b 1b c9 03 8b 6f a5 4e 52 fb ....>".....o.NR. 0040 a6 33 da ba 89 96 5f 11 35 a9 f7 0e 4c 10 ad 13 .3...._.5...L... 0050 e8 c2 cd 20 a3 6f 96 b2 d8 f0 38 12 67 ab 3a 0f ... .o....8.g.:. 0060 e1 80 0e fa 7b 10 0d 69 62 7e b4 7b 06 b8 85 57 ....{..ib~.{...W 0070 c4 8c b1 8f 11 b6 d5 05 67 42 09 1e bf 82 54 b2 ........gB....T. 0080 d2 66 dd 0e b7 0c d6 94 0e 09 d9 d4 28 ed 32 f1 .f..........(.2. 0090 12 39 88 d4 cf fc 03 ca d6 4a .9.......J Frame 13 (154 bytes on wire, 154 bytes captured) Arrival Time: Sep 9, 2004 12:05:50.503194000 Time delta from previous packet: 1.025619000 seconds Time since reference or first frame: 1.994927000 seconds Frame Number: 13 Packet Length: 154 bytes Capture Length: 154 bytes Ethernet II, Src: 00:0c:29:e6:ad:b9, Dst: 00:0f:3d:10:fc:2c Destination: 00:0f:3d:10:fc:2c (00:0f:3d:10:fc:2c) Source: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Type: IP (0x0800) Frame check sequence: 0x17efb241 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.142 (165.227.249.142) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 136 Identification: 0x000d (13) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b64 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.142 (165.227.249.142) Encapsulating Security Payload SPI: 0x26d0f247 Sequence: 4 Data (108 bytes) 0000 00 0f 3d 10 fc 2c 00 0c 29 e6 ad b9 08 00 45 00 ..=..,..).....E. 0010 00 88 00 0d 00 00 f0 32 8b 64 a5 e3 f9 7c a5 e3 .......2.d...|.. 0020 f9 8e 26 d0 f2 47 00 00 00 04 78 1a e0 69 a3 72 ..&..G....x..i.r 0030 51 d5 a6 d8 4d 6a f2 d8 ef 08 59 7b 3f fb 44 42 Q...Mj....Y{?.DB 0040 39 db 8b 63 6d d5 fa 62 25 e0 7f 67 81 73 8e 77 9..cm..b%..g.s.w 0050 0b 47 3b f9 7f 69 bb b2 9a b8 6f 8a de 15 1e dc .G;..i....o..... 0060 13 f5 60 15 cb 80 18 9d f7 2a 0d 51 e9 b6 ed 62 ..`......*.Q...b 0070 fe dd bb 4a 69 e1 ff 2c b2 bc 91 bd e7 1d 34 67 ...Ji..,......4g 0080 b0 7f 21 0d 0e 14 ed 7b e4 82 0e 49 ad cd 3c ad ..!....{...I..<. 0090 b2 a7 79 97 23 86 17 ef b2 41 ..y.#....A Frame 14 (154 bytes on wire, 154 bytes captured) Arrival Time: Sep 9, 2004 12:05:50.504233000 Time delta from previous packet: 0.001039000 seconds Time since reference or first frame: 1.995966000 seconds Frame Number: 14 Packet Length: 154 bytes Capture Length: 154 bytes Ethernet II, Src: 00:0f:3d:10:fc:2c, Dst: 00:0c:29:e6:ad:b9 Destination: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Source: 00:0f:3d:10:fc:2c (00:0f:3d:10:fc:2c) Type: IP (0x0800) Frame check sequence: 0x9b215f01 (correct) Internet Protocol, Src Addr: 165.227.249.142 (165.227.249.142), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 136 Identification: 0x7f53 (32595) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x0c1e (correct) Source: 165.227.249.142 (165.227.249.142) Destination: 165.227.249.124 (165.227.249.124) Encapsulating Security Payload SPI: 0x55bef764 Sequence: 2 Data (108 bytes) 0000 00 0c 29 e6 ad b9 00 0f 3d 10 fc 2c 08 00 45 00 ..).....=..,..E. 0010 00 88 7f 53 00 00 f0 32 0c 1e a5 e3 f9 8e a5 e3 ...S...2........ 0020 f9 7c 55 be f7 64 00 00 00 02 91 c9 5b e3 0c c2 .|U..d......[... 0030 10 9c 1f e8 09 d9 82 30 79 6b 5f dc 64 67 cd 36 .......0yk_.dg.6 0040 77 9e 34 aa 17 30 32 dc 1b 5c e5 58 ea 21 c4 79 w.4..02..\.X.!.y 0050 f2 79 bf 67 da 7f e5 96 67 d1 fa 04 b1 9f 27 be .y.g....g.....'. 0060 1c 19 13 38 ab 13 86 b6 2a 93 e5 fc d6 f4 93 77 ...8....*......w 0070 c0 a4 b8 7a f0 5d d4 7d dc 85 74 58 f8 26 bb 4f ...z.].}..tX.&.O 0080 16 9f db 80 f1 8a fd 47 bb 38 b0 95 d7 8d bf 89 .......G.8...... 0090 2d 05 f1 69 a9 61 9b 21 5f 01 -..i.a.!_. Frame 15 (154 bytes on wire, 154 bytes captured) Arrival Time: Sep 9, 2004 12:05:51.558003000 Time delta from previous packet: 1.053770000 seconds Time since reference or first frame: 3.049736000 seconds Frame Number: 15 Packet Length: 154 bytes Capture Length: 154 bytes Ethernet II, Src: 00:0c:29:e6:ad:b9, Dst: 00:0f:3d:10:fc:2c Destination: 00:0f:3d:10:fc:2c (00:0f:3d:10:fc:2c) Source: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Type: IP (0x0800) Frame check sequence: 0x87c03b03 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.142 (165.227.249.142) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 136 Identification: 0x000e (14) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b63 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.142 (165.227.249.142) Encapsulating Security Payload SPI: 0x26d0f247 Sequence: 5 Data (108 bytes) 0000 00 0f 3d 10 fc 2c 00 0c 29 e6 ad b9 08 00 45 00 ..=..,..).....E. 0010 00 88 00 0e 00 00 f0 32 8b 63 a5 e3 f9 7c a5 e3 .......2.c...|.. 0020 f9 8e 26 d0 f2 47 00 00 00 05 52 b0 8b 98 3b 99 ..&..G....R...;. 0030 fe 3d 61 0a a9 03 df 07 d7 55 6c 66 ac 88 4b e7 .=a......Ulf..K. 0040 7b e1 0c a8 9d 23 56 f9 4a bf ff ff b7 35 4e c1 {....#V.J....5N. 0050 df 4d 8e 73 35 52 b8 49 fd 3a 0e 42 82 70 01 49 .M.s5R.I.:.B.p.I 0060 fe bc 2c 30 14 20 ff fb a3 30 ec 93 6b d6 c1 b6 ..,0. ...0..k... 0070 ca cd 80 9e b9 f6 b9 64 d5 8e 9e f0 e7 18 8a f5 .......d........ 0080 36 dd 60 b6 fe d0 dc f9 97 07 34 3c e0 bc 02 a5 6.`.......4<.... 0090 f6 55 d1 81 ed 7a 87 c0 3b 03 .U...z..;. Frame 16 (154 bytes on wire, 154 bytes captured) Arrival Time: Sep 9, 2004 12:05:51.559009000 Time delta from previous packet: 0.001006000 seconds Time since reference or first frame: 3.050742000 seconds Frame Number: 16 Packet Length: 154 bytes Capture Length: 154 bytes Ethernet II, Src: 00:0f:3d:10:fc:2c, Dst: 00:0c:29:e6:ad:b9 Destination: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Source: 00:0f:3d:10:fc:2c (00:0f:3d:10:fc:2c) Type: IP (0x0800) Frame check sequence: 0x69b7d11e (correct) Internet Protocol, Src Addr: 165.227.249.142 (165.227.249.142), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 136 Identification: 0xd951 (55633) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0xb21f (correct) Source: 165.227.249.142 (165.227.249.142) Destination: 165.227.249.124 (165.227.249.124) Encapsulating Security Payload SPI: 0x55bef764 Sequence: 3 Data (108 bytes) 0000 00 0c 29 e6 ad b9 00 0f 3d 10 fc 2c 08 00 45 00 ..).....=..,..E. 0010 00 88 d9 51 00 00 f0 32 b2 1f a5 e3 f9 8e a5 e3 ...Q...2........ 0020 f9 7c 55 be f7 64 00 00 00 03 91 c9 5b e3 0c c2 .|U..d......[... 0030 10 9c 27 87 6c 02 43 90 71 49 cb 1f 46 cb 54 68 ..'.l.C.qI..F.Th 0040 78 13 c3 be 19 02 9f 3e 98 a7 1b 2c aa 9e 14 95 x......>...,.... 0050 05 f7 7f 37 b4 86 75 52 94 b9 a2 56 5a d0 5d 7a ...7..uR...VZ.]z 0060 de 3d 5c 7f c0 55 0e d1 77 ca 10 ec b6 a2 ba 27 .=\..U..w......' 0070 5e 0f cf 16 ee 02 e5 e6 27 bb 48 21 ba bc 30 e8 ^.......'.H!..0. 0080 26 ba 72 db 74 dc f0 92 ab 1c b2 95 49 d1 26 04 &.r.t.......I.&. 0090 da 3c b1 17 52 e0 69 b7 d1 1e .<..R.i...