Frame 1 (266 bytes on wire, 266 bytes captured) Arrival Time: Sep 10, 2004 12:57:51.064371000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 266 bytes Capture Length: 266 bytes Ethernet II, Src: 00:0c:29:e6:ad:b9, Dst: 00:0f:3d:1a:7b:ca Destination: 00:0f:3d:1a:7b:ca (00:0f:3d:1a:7b:ca) Source: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Type: IP (0x0800) Frame check sequence: 0x83a07457 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.143 (165.227.249.143) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 248 Identification: 0x0036 (54) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3aec (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.143 (165.227.249.143) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 228 Checksum: 0xc7e2 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x2E9F4B519C696BBA Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 220 Security Association payload Next payload: Vendor ID (13) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 0 Next payload: NONE (0) Length: 40 Proposal number: 0 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 0 Next payload: NONE (0) Length: 32 Transform number: 0 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: unknown vendor ID: 0x8F9CC94E01248ECDF147594C284B213B Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-stenberg-ipsec-nat-traversal-01 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-stenberg-ipsec-nat-traversal-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-03 0000 00 0f 3d 1a 7b ca 00 0c 29 e6 ad b9 08 00 45 00 ..=.{...).....E. 0010 00 f8 00 36 00 00 40 11 3a ec a5 e3 f9 7c a5 e3 ...6..@.:....|.. 0020 f9 8f 01 f4 01 f4 00 e4 c7 e2 2e 9f 4b 51 9c 69 ............KQ.i 0030 6b ba 00 00 00 00 00 00 00 00 01 10 02 00 00 00 k............... 0040 00 00 00 00 00 dc 0d 00 00 34 00 00 00 01 00 00 .........4...... 0050 00 01 00 00 00 28 00 01 00 01 00 00 00 20 00 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 03 00 01 80 04 ................ 0070 00 02 80 0b 00 01 80 0c 70 80 0d 00 00 14 8f 9c ........p....... 0080 c9 4e 01 24 8e cd f1 47 59 4c 28 4b 21 3b 0d 00 .N.$...GYL(K!;.. 0090 00 14 27 ba b5 dc 01 ea 07 60 ea 4e 31 90 ac 27 ..'......`.N1..' 00a0 c0 d0 0d 00 00 14 61 05 c4 22 e7 68 47 e4 3f 96 ......a..".hG.?. 00b0 84 80 12 92 ae cd 0d 00 00 14 44 85 15 2d 18 b6 ..........D..-.. 00c0 bb cd 0b e8 a8 46 95 79 dd cc 0d 00 00 14 cd 60 .....F.y.......` 00d0 46 43 35 df 21 f8 7c fd b2 fc 68 b6 a4 48 0d 00 FC5.!.|...h..H.. 00e0 00 14 90 cb 80 91 3e bb 69 6e 08 63 81 b5 ec 42 ......>.in.c...B 00f0 7b 1f 00 00 00 14 7d 94 19 a6 53 10 ca 6f 2c 17 {.....}...S..o,. 0100 9d 92 15 52 9d 56 83 a0 74 57 ...R.V..tW Frame 2 (130 bytes on wire, 130 bytes captured) Arrival Time: Sep 10, 2004 12:57:51.221564000 Time delta from previous packet: 0.157193000 seconds Time since reference or first frame: 0.157193000 seconds Frame Number: 2 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:0f:3d:1a:7b:ca, Dst: 00:0c:29:e6:ad:b9 Destination: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Source: 00:0f:3d:1a:7b:ca (00:0f:3d:1a:7b:ca) Type: IP (0x0800) Frame check sequence: 0xa1de8717 (correct) Internet Protocol, Src Addr: 165.227.249.143 (165.227.249.143), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0055 (85) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3b55 (correct) Source: 165.227.249.143 (165.227.249.143) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 92 Checksum: 0x3919 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x2E9F4B519C696BBA Responder cookie: 0x32980E853AE48EA7 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 84 Security Association payload Next payload: NONE (0) Length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 44 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 36 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) 0000 00 0c 29 e6 ad b9 00 0f 3d 1a 7b ca 08 00 45 00 ..).....=.{...E. 0010 00 70 00 55 00 00 40 11 3b 55 a5 e3 f9 8f a5 e3 .p.U..@.;U...... 0020 f9 7c 01 f4 01 f4 00 5c 39 19 2e 9f 4b 51 9c 69 .|.....\9...KQ.i 0030 6b ba 32 98 0e 85 3a e4 8e a7 01 10 02 00 00 00 k.2...:......... 0040 00 00 00 00 00 54 00 00 00 38 00 00 00 01 00 00 .....T...8...... 0050 00 01 00 00 00 2c 01 01 00 01 00 00 00 24 01 01 .....,.......$.. 0060 00 00 80 01 00 05 80 02 00 02 80 03 00 01 80 04 ................ 0070 00 02 80 0b 00 01 00 0c 00 04 00 00 70 80 a1 de ............p... 0080 87 17 .. Frame 3 (226 bytes on wire, 226 bytes captured) Arrival Time: Sep 10, 2004 12:57:51.231535000 Time delta from previous packet: 0.009971000 seconds Time since reference or first frame: 0.167164000 seconds Frame Number: 3 Packet Length: 226 bytes Capture Length: 226 bytes Ethernet II, Src: 00:0c:29:e6:ad:b9, Dst: 00:0f:3d:1a:7b:ca Destination: 00:0f:3d:1a:7b:ca (00:0f:3d:1a:7b:ca) Source: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Type: IP (0x0800) Frame check sequence: 0xa78a28e1 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.143 (165.227.249.143) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 208 Identification: 0x0037 (55) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3b13 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.143 (165.227.249.143) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 188 Checksum: 0x0908 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x2E9F4B519C696BBA Responder cookie: 0x32980E853AE48EA7 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 180 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 20 Nonce Data 0000 00 0f 3d 1a 7b ca 00 0c 29 e6 ad b9 08 00 45 00 ..=.{...).....E. 0010 00 d0 00 37 00 00 40 11 3b 13 a5 e3 f9 7c a5 e3 ...7..@.;....|.. 0020 f9 8f 01 f4 01 f4 00 bc 09 08 2e 9f 4b 51 9c 69 ............KQ.i 0030 6b ba 32 98 0e 85 3a e4 8e a7 04 10 02 00 00 00 k.2...:......... 0040 00 00 00 00 00 b4 0a 00 00 84 52 67 d1 83 fc d3 ..........Rg.... 0050 f2 6d 69 37 32 94 3f 9f d4 a2 23 2a 8e ca 21 99 .mi72.?...#*..!. 0060 64 73 c6 67 6d 3f d6 64 d9 24 99 dc 03 dd 59 4b ds.gm?.d.$....YK 0070 8f 25 12 75 35 21 54 8c b4 bc 10 4a a3 ae 50 20 .%.u5!T....J..P 0080 fe d1 5a 5d b8 bf 92 9d 61 8d 70 0c ef f2 b0 bb ..Z]....a.p..... 0090 e4 a7 c5 06 7b 01 4e 8c 2f 51 c0 cd e1 fe 58 26 ....{.N./Q....X& 00a0 2c e6 82 41 9b 02 c1 81 54 40 e2 c8 2e 19 a0 c2 ,..A....T@...... 00b0 8d ed 67 45 6e cd ef eb 06 74 52 1c 60 08 a2 a3 ..gEn....tR.`... 00c0 ab 92 15 6f 5a f1 a0 59 fb 3b 00 00 00 14 5a a4 ...oZ..Y.;....Z. 00d0 df a8 71 77 77 68 15 51 b2 9d 00 a1 42 b4 a7 8a ..qwwh.Q....B... 00e0 28 e1 (. Frame 4 (230 bytes on wire, 230 bytes captured) Arrival Time: Sep 10, 2004 12:57:51.232402000 Time delta from previous packet: 0.000867000 seconds Time since reference or first frame: 0.168031000 seconds Frame Number: 4 Packet Length: 230 bytes Capture Length: 230 bytes Ethernet II, Src: 00:0f:3d:1a:7b:ca, Dst: 00:0c:29:e6:ad:b9 Destination: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Source: 00:0f:3d:1a:7b:ca (00:0f:3d:1a:7b:ca) Type: IP (0x0800) Frame check sequence: 0x4bc0d376 (correct) Internet Protocol, Src Addr: 165.227.249.143 (165.227.249.143), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 212 Identification: 0x0056 (86) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3af0 (correct) Source: 165.227.249.143 (165.227.249.143) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 192 Checksum: 0x15b1 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x2E9F4B519C696BBA Responder cookie: 0x32980E853AE48EA7 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 184 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 24 Nonce Data 0000 00 0c 29 e6 ad b9 00 0f 3d 1a 7b ca 08 00 45 00 ..).....=.{...E. 0010 00 d4 00 56 00 00 40 11 3a f0 a5 e3 f9 8f a5 e3 ...V..@.:....... 0020 f9 7c 01 f4 01 f4 00 c0 15 b1 2e 9f 4b 51 9c 69 .|..........KQ.i 0030 6b ba 32 98 0e 85 3a e4 8e a7 04 10 02 00 00 00 k.2...:......... 0040 00 00 00 00 00 b8 0a 00 00 84 0c e4 e5 09 81 d8 ................ 0050 37 9b f3 a7 27 15 15 d5 75 27 53 bf 43 d5 08 a8 7...'...u'S.C... 0060 61 76 a8 05 93 9a b5 9d 04 31 c5 1f b5 59 1c 75 av.......1...Y.u 0070 f0 79 f7 f8 ce 74 57 cb bd 1a 58 f7 7d 13 9c 1a .y...tW...X.}... 0080 ca 7b 2a e1 83 4c d9 09 d2 b8 dd 8b dd 25 d5 7a .{*..L.......%.z 0090 76 3d 77 1e bf 06 87 18 11 55 da 74 d1 15 b9 46 v=w......U.t...F 00a0 c5 8d f9 5d e4 b7 7c 61 d8 a2 a2 4f a3 00 97 c0 ...]..|a...O.... 00b0 74 41 70 65 14 92 9a b8 99 08 a0 e9 09 23 4d 59 tApe.........#MY 00c0 a6 27 f7 be e4 37 e5 bc 1d b2 00 00 00 18 9b 1a .'...7.......... 00d0 f4 95 be 9c 7b d2 5c 46 3a b1 26 38 1e 02 0f 6d ....{.\F:.&8...m 00e0 58 21 4b c0 d3 76 X!K..v Frame 5 (122 bytes on wire, 122 bytes captured) Arrival Time: Sep 10, 2004 12:57:51.239249000 Time delta from previous packet: 0.006847000 seconds Time since reference or first frame: 0.174878000 seconds Frame Number: 5 Packet Length: 122 bytes Capture Length: 122 bytes Ethernet II, Src: 00:0c:29:e6:ad:b9, Dst: 00:0f:3d:1a:7b:ca Destination: 00:0f:3d:1a:7b:ca (00:0f:3d:1a:7b:ca) Source: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Type: IP (0x0800) Frame check sequence: 0x8cc1dd9a (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.143 (165.227.249.143) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 104 Identification: 0x0038 (56) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3b7a (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.143 (165.227.249.143) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 84 Checksum: 0x9ac2 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x2E9F4B519C696BBA Responder cookie: 0x32980E853AE48EA7 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 76 Encrypted payload (48 bytes) 0000 00 0f 3d 1a 7b ca 00 0c 29 e6 ad b9 08 00 45 00 ..=.{...).....E. 0010 00 68 00 38 00 00 40 11 3b 7a a5 e3 f9 7c a5 e3 .h.8..@.;z...|.. 0020 f9 8f 01 f4 01 f4 00 54 9a c2 2e 9f 4b 51 9c 69 .......T....KQ.i 0030 6b ba 32 98 0e 85 3a e4 8e a7 05 10 02 01 00 00 k.2...:......... 0040 00 00 00 00 00 4c 93 db 90 71 2a ab 0a 23 0e a8 .....L...q*..#.. 0050 e8 5a f6 ac 57 f2 f3 b8 c8 3a fe a1 32 12 6e 62 .Z..W....:..2.nb 0060 67 17 fb 1c b0 62 19 4a e4 ae 19 f8 5f 63 76 9b g....b.J...._cv. 0070 91 e4 7f a2 81 d7 8c c1 dd 9a .......... Frame 6 (114 bytes on wire, 114 bytes captured) Arrival Time: Sep 10, 2004 12:57:51.444535000 Time delta from previous packet: 0.205286000 seconds Time since reference or first frame: 0.380164000 seconds Frame Number: 6 Packet Length: 114 bytes Capture Length: 114 bytes Ethernet II, Src: 00:0f:3d:1a:7b:ca, Dst: 00:0c:29:e6:ad:b9 Destination: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Source: 00:0f:3d:1a:7b:ca (00:0f:3d:1a:7b:ca) Type: IP (0x0800) Frame check sequence: 0x31ad92b4 (correct) Internet Protocol, Src Addr: 165.227.249.143 (165.227.249.143), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0x0057 (87) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3b63 (correct) Source: 165.227.249.143 (165.227.249.143) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 76 Checksum: 0x8095 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x2E9F4B519C696BBA Responder cookie: 0x32980E853AE48EA7 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 68 Encrypted payload (40 bytes) 0000 00 0c 29 e6 ad b9 00 0f 3d 1a 7b ca 08 00 45 00 ..).....=.{...E. 0010 00 60 00 57 00 00 40 11 3b 63 a5 e3 f9 8f a5 e3 .`.W..@.;c...... 0020 f9 7c 01 f4 01 f4 00 4c 80 95 2e 9f 4b 51 9c 69 .|.....L....KQ.i 0030 6b ba 32 98 0e 85 3a e4 8e a7 05 10 02 01 00 00 k.2...:......... 0040 00 00 00 00 00 44 57 45 cc 1e d1 74 83 02 3f 3d .....DWE...t..?= 0050 bd 0f 1b 38 61 01 00 c6 67 10 ae c1 12 1d 24 cc ...8a...g.....$. 0060 cf 01 a9 a7 9a 65 f1 6e 12 c9 cb 6f 87 58 31 ad .....e.n...o.X1. 0070 92 b4 .. Frame 7 (338 bytes on wire, 338 bytes captured) Arrival Time: Sep 10, 2004 12:57:51.452868000 Time delta from previous packet: 0.008333000 seconds Time since reference or first frame: 0.388497000 seconds Frame Number: 7 Packet Length: 338 bytes Capture Length: 338 bytes Ethernet II, Src: 00:0c:29:e6:ad:b9, Dst: 00:0f:3d:1a:7b:ca Destination: 00:0f:3d:1a:7b:ca (00:0f:3d:1a:7b:ca) Source: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Type: IP (0x0800) Frame check sequence: 0x905858b5 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.143 (165.227.249.143) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 320 Identification: 0x0039 (57) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3aa1 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.143 (165.227.249.143) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 300 Checksum: 0x362f (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x2E9F4B519C696BBA Responder cookie: 0x32980E853AE48EA7 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xFF989217 Length: 292 Encrypted payload (264 bytes) 0000 00 0f 3d 1a 7b ca 00 0c 29 e6 ad b9 08 00 45 00 ..=.{...).....E. 0010 01 40 00 39 00 00 40 11 3a a1 a5 e3 f9 7c a5 e3 .@.9..@.:....|.. 0020 f9 8f 01 f4 01 f4 01 2c 36 2f 2e 9f 4b 51 9c 69 .......,6/..KQ.i 0030 6b ba 32 98 0e 85 3a e4 8e a7 08 10 20 01 ff 98 k.2...:..... ... 0040 92 17 00 00 01 24 dd 0c e6 02 d2 52 6e 6f 49 46 .....$.....RnoIF 0050 ff ff 74 f1 d2 c8 92 65 68 9d 1c 18 08 a9 a2 8d ..t....eh....... 0060 58 45 6e 61 b0 85 a9 48 fd 95 16 f8 9d 60 d0 41 XEna...H.....`.A 0070 ac 3c eb 4e 0a 6e c7 05 e1 04 c6 51 3f fd af 45 .<.N.n.....Q?..E 0080 f6 d1 68 ee 98 9c 56 ec ac 1a 7e a6 bd 4f 4b 06 ..h...V...~..OK. 0090 b4 4c 95 1e 59 14 65 9b 82 d4 46 6a 88 f1 1f 37 .L..Y.e...Fj...7 00a0 b4 ab 78 de e2 11 7e b7 7c a7 a0 d6 14 ed c7 1d ..x...~.|....... 00b0 0e 63 94 ff 7a 78 94 91 07 22 c1 60 eb 18 9d e1 .c..zx...".`.... 00c0 52 0c 7b dc 93 eb 7c 40 6a fc db d8 7a 79 eb 27 R.{...|@j...zy.' 00d0 34 8c 81 94 50 25 79 87 30 8e d1 86 f5 30 a0 fb 4...P%y.0....0.. 00e0 29 37 d4 7a 95 38 de 30 29 55 81 bd 11 e3 c3 aa )7.z.8.0)U...... 00f0 a2 38 be c9 8d 73 81 90 b3 f4 e6 42 4a 2e 71 8c .8...s.....BJ.q. 0100 9a 17 a1 50 4b 8b 77 0c eb c6 1c d2 20 5d 94 06 ...PK.w..... ].. 0110 19 f8 09 87 78 a5 d7 2c d1 ff de 88 b4 3b f1 70 ....x..,.....;.p 0120 4a 9b 87 f0 41 45 02 3a 20 7f 8b 4b e3 df ff 85 J...AE.: ..K.... 0130 80 92 d5 9f ff ce cd 93 c8 6d 6b 5a 08 74 eb 91 .........mkZ.t.. 0140 bc c6 c2 3e 82 9f b3 d6 63 d8 36 cd 9c 68 90 58 ...>....c.6..h.X 0150 58 b5 X. Frame 8 (346 bytes on wire, 346 bytes captured) Arrival Time: Sep 10, 2004 12:57:51.834290000 Time delta from previous packet: 0.381422000 seconds Time since reference or first frame: 0.769919000 seconds Frame Number: 8 Packet Length: 346 bytes Capture Length: 346 bytes Ethernet II, Src: 00:0f:3d:1a:7b:ca, Dst: 00:0c:29:e6:ad:b9 Destination: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Source: 00:0f:3d:1a:7b:ca (00:0f:3d:1a:7b:ca) Type: IP (0x0800) Frame check sequence: 0xad9f6900 (correct) Internet Protocol, Src Addr: 165.227.249.143 (165.227.249.143), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 328 Identification: 0x0058 (88) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3a7a (correct) Source: 165.227.249.143 (165.227.249.143) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 308 Checksum: 0xdb9d (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x2E9F4B519C696BBA Responder cookie: 0x32980E853AE48EA7 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xFF989217 Length: 300 Encrypted payload (272 bytes) 0000 00 0c 29 e6 ad b9 00 0f 3d 1a 7b ca 08 00 45 00 ..).....=.{...E. 0010 01 48 00 58 00 00 40 11 3a 7a a5 e3 f9 8f a5 e3 .H.X..@.:z...... 0020 f9 7c 01 f4 01 f4 01 34 db 9d 2e 9f 4b 51 9c 69 .|.....4....KQ.i 0030 6b ba 32 98 0e 85 3a e4 8e a7 08 10 20 01 ff 98 k.2...:..... ... 0040 92 17 00 00 01 2c 86 f4 89 df 7c c8 75 b4 a7 b5 .....,....|.u... 0050 9b ea 08 bc 97 59 9f 08 20 a6 d0 74 80 32 07 57 .....Y.. ..t.2.W 0060 16 90 f6 46 30 36 f6 e8 94 47 79 c5 98 a2 72 a2 ...F06...Gy...r. 0070 93 60 50 b9 d5 22 93 82 53 71 95 e9 72 2e 5f 8c .`P.."..Sq..r._. 0080 89 d7 07 b9 1b 20 eb ac fc 47 c0 9c a0 20 13 cd ..... ...G... .. 0090 8c 83 34 e2 21 e5 ec b8 b4 79 dc bb 97 fb 3b de ..4.!....y....;. 00a0 22 81 3b b9 a4 09 2c b7 37 8b 52 6b 33 cc 7d 29 ".;...,.7.Rk3.}) 00b0 2c fc 4e 94 30 92 2d 0c 77 be c2 e9 90 78 84 73 ,.N.0.-.w....x.s 00c0 2f d3 3b 1c e6 bb 13 81 3a bf 22 75 29 75 49 5a /.;.....:."u)uIZ 00d0 53 91 71 66 87 14 c9 4c ea 84 2f 05 fc e1 aa 47 S.qf...L../....G 00e0 1d d7 cd c1 17 88 e3 fc 56 fd cc 05 75 de 6e 9a ........V...u.n. 00f0 70 bc 6d bd 78 f5 5d 10 9b f5 e7 6b aa 83 3c c3 p.m.x.]....k..<. 0100 a3 17 be e1 72 8f f8 32 26 f2 dc be d7 bc 00 3f ....r..2&......? 0110 00 c0 26 40 c0 dc 70 a8 87 d0 08 aa ab f1 42 a8 ..&@..p.......B. 0120 6a 60 28 87 3c 42 4c a7 5c 35 03 e4 43 93 02 87 j`(.W.!. 0140 8c a4 8a be 25 ba 7f dd 73 ef 70 72 84 57 25 2e ....%...s.pr.W%. 0150 ce 6a df 0a 86 69 ad 9f 69 00 .j...i..i. Frame 9 (98 bytes on wire, 98 bytes captured) Arrival Time: Sep 10, 2004 12:57:51.843290000 Time delta from previous packet: 0.009000000 seconds Time since reference or first frame: 0.778919000 seconds Frame Number: 9 Packet Length: 98 bytes Capture Length: 98 bytes Ethernet II, Src: 00:0c:29:e6:ad:b9, Dst: 00:0f:3d:1a:7b:ca Destination: 00:0f:3d:1a:7b:ca (00:0f:3d:1a:7b:ca) Source: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Type: IP (0x0800) Frame check sequence: 0x2badff0c (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.143 (165.227.249.143) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 80 Identification: 0x003a (58) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3b90 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.143 (165.227.249.143) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 60 Checksum: 0x3d0a (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x2E9F4B519C696BBA Responder cookie: 0x32980E853AE48EA7 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xFF989217 Length: 52 Encrypted payload (24 bytes) 0000 00 0f 3d 1a 7b ca 00 0c 29 e6 ad b9 08 00 45 00 ..=.{...).....E. 0010 00 50 00 3a 00 00 40 11 3b 90 a5 e3 f9 7c a5 e3 .P.:..@.;....|.. 0020 f9 8f 01 f4 01 f4 00 3c 3d 0a 2e 9f 4b 51 9c 69 .......<=...KQ.i 0030 6b ba 32 98 0e 85 3a e4 8e a7 08 10 20 01 ff 98 k.2...:..... ... 0040 92 17 00 00 00 34 e7 95 50 c0 35 42 19 24 8f 7c .....4..P.5B.$.| 0050 74 cd e1 eb 55 d7 92 bb 53 cc 40 7b 4f 30 2b ad t...U...S.@{O0+. 0060 ff 0c .. Frame 10 (154 bytes on wire, 154 bytes captured) Arrival Time: Sep 10, 2004 12:57:52.044066000 Time delta from previous packet: 0.200776000 seconds Time since reference or first frame: 0.979695000 seconds Frame Number: 10 Packet Length: 154 bytes Capture Length: 154 bytes Ethernet II, Src: 00:0c:29:e6:ad:b9, Dst: 00:0f:3d:1a:7b:ca Destination: 00:0f:3d:1a:7b:ca (00:0f:3d:1a:7b:ca) Source: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Type: IP (0x0800) Frame check sequence: 0xd90da916 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.143 (165.227.249.143) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 136 Identification: 0x000b (11) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b65 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.143 (165.227.249.143) Encapsulating Security Payload SPI: 0x04000010 Sequence: 2 Data (108 bytes) 0000 00 0f 3d 1a 7b ca 00 0c 29 e6 ad b9 08 00 45 00 ..=.{...).....E. 0010 00 88 00 0b 00 00 f0 32 8b 65 a5 e3 f9 7c a5 e3 .......2.e...|.. 0020 f9 8f 04 00 00 10 00 00 00 02 66 88 80 a6 d4 62 ..........f....b 0030 a1 ee c5 4d 2e cb 2f 0a 43 7c 06 44 5c 03 b2 6e ...M../.C|.D\..n 0040 42 8c 60 14 c9 87 c9 05 e0 2f 9f 9b 18 22 16 50 B.`....../...".P 0050 bf fe c6 8d f3 3f c1 50 57 a9 ce ab dc 0a 3c 62 .....?.PW...... 0090 83 8d 0d a3 bf d9 c2 e3 1c 39 .........9 Frame 14 (154 bytes on wire, 154 bytes captured) Arrival Time: Sep 10, 2004 12:57:53.039429000 Time delta from previous packet: 0.920258000 seconds Time since reference or first frame: 1.975058000 seconds Frame Number: 14 Packet Length: 154 bytes Capture Length: 154 bytes Ethernet II, Src: 00:0c:29:e6:ad:b9, Dst: 00:0f:3d:1a:7b:ca Destination: 00:0f:3d:1a:7b:ca (00:0f:3d:1a:7b:ca) Source: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Type: IP (0x0800) Frame check sequence: 0x9bf4cb30 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.143 (165.227.249.143) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 136 Identification: 0x000d (13) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b63 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.143 (165.227.249.143) Encapsulating Security Payload SPI: 0x04000010 Sequence: 4 Data (108 bytes) 0000 00 0f 3d 1a 7b ca 00 0c 29 e6 ad b9 08 00 45 00 ..=.{...).....E. 0010 00 88 00 0d 00 00 f0 32 8b 63 a5 e3 f9 7c a5 e3 .......2.c...|.. 0020 f9 8f 04 00 00 10 00 00 00 04 39 37 b4 4d 9e e5 ..........97.M.. 0030 00 28 44 3a 18 ce ff 4f 29 18 e6 91 19 d1 0e 92 .(D:...O)....... 0040 a1 b7 53 ca b9 74 e6 a8 95 ff 24 52 c7 84 37 2c ..S..t....$R..7, 0050 a0 34 64 3b 0f ed 4a cb 4c 38 b5 43 5f 7d 1d 9b .4d;..J.L8.C_}.. 0060 5d d5 e8 ee 29 08 85 88 48 75 44 81 d2 b0 31 12 ]...)...HuD...1. 0070 88 fc 66 a2 d3 06 72 80 dc c2 69 14 61 47 b3 fe ..f...r...i.aG.. 0080 3c 63 d7 4f fc 42 66 2a e5 e8 5f 67 e7 bf 99 90 ...}...OO.e. 0080 77 3a e5 57 19 d6 7e 9f 83 0b 31 18 ac e0 f1 a2 w:.W..~...1..... 0090 01 49 3a da c2 30 db 3c 90 04 .I:..0.<.. Frame 17 (154 bytes on wire, 154 bytes captured) Arrival Time: Sep 10, 2004 12:57:54.032998000 Time delta from previous packet: 0.001624000 seconds Time since reference or first frame: 2.968627000 seconds Frame Number: 17 Packet Length: 154 bytes Capture Length: 154 bytes Ethernet II, Src: 00:0f:3d:1a:7b:ca, Dst: 00:0c:29:e6:ad:b9 Destination: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Source: 00:0f:3d:1a:7b:ca (00:0f:3d:1a:7b:ca) Type: IP (0x0800) Frame check sequence: 0xc952e269 (correct) Internet Protocol, Src Addr: 165.227.249.143 (165.227.249.143), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 136 Identification: 0x005c (92) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 254 Protocol: ESP (0x32) Header checksum: 0x7d14 (correct) Source: 165.227.249.143 (165.227.249.143) Destination: 165.227.249.124 (165.227.249.124) Encapsulating Security Payload SPI: 0x56d90266 Sequence: 4 Data (108 bytes) 0000 00 0c 29 e6 ad b9 00 0f 3d 1a 7b ca 08 00 45 00 ..).....=.{...E. 0010 00 88 00 5c 00 00 fe 32 7d 14 a5 e3 f9 8f a5 e3 ...\...2}....... 0020 f9 7c 56 d9 02 66 00 00 00 04 00 04 5d c1 63 ee .|V..f......].c. 0030 47 5d 07 e7 d6 4b eb b3 68 e3 ee d5 c5 bb d2 47 G]...K..h......G 0040 d9 cb b2 12 04 f7 51 79 36 44 98 07 d7 f5 a0 a7 ......Qy6D...... 0050 84 01 de 25 15 86 1e c5 9e b4 db 59 5c 58 90 69 ...%.......Y\X.i 0060 d8 8b b7 ea 4d da 24 09 1e fe d4 b6 d3 e2 b2 07 ....M.$......... 0070 3c 6f 8b be 95 ba d2 f5 46 74 1d ac 8d 0b 4f fe