Frame 1 (266 bytes on wire, 266 bytes captured) Arrival Time: Oct 26, 2004 11:10:23.996863000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 266 bytes Capture Length: 266 bytes Ethernet II, Src: 00:0c:29:e6:ad:b9, Dst: 00:05:30:01:80:af Destination: 00:05:30:01:80:af (00:05:30:01:80:af) Source: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Type: IP (0x0800) Frame check sequence: 0x2845628e (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.144 (165.227.249.144) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 248 Identification: 0x0054 (84) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3acd (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.144 (165.227.249.144) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 228 Checksum: 0x45e8 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x16179FF7B84C95B2 Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 220 Security Association payload Next payload: Vendor ID (13) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 0 Next payload: NONE (0) Length: 40 Proposal number: 0 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 0 Next payload: NONE (0) Length: 32 Transform number: 0 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: unknown vendor ID: 0x8F9CC94E01248ECDF147594C284B213B Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-stenberg-ipsec-nat-traversal-01 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-stenberg-ipsec-nat-traversal-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-03 0000 00 05 30 01 80 af 00 0c 29 e6 ad b9 08 00 45 00 ..0.....).....E. 0010 00 f8 00 54 00 00 40 11 3a cd a5 e3 f9 7c a5 e3 ...T..@.:....|.. 0020 f9 90 01 f4 01 f4 00 e4 45 e8 16 17 9f f7 b8 4c ........E......L 0030 95 b2 00 00 00 00 00 00 00 00 01 10 02 00 00 00 ................ 0040 00 00 00 00 00 dc 0d 00 00 34 00 00 00 01 00 00 .........4...... 0050 00 01 00 00 00 28 00 01 00 01 00 00 00 20 00 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 03 00 01 80 04 ................ 0070 00 02 80 0b 00 01 80 0c 70 80 0d 00 00 14 8f 9c ........p....... 0080 c9 4e 01 24 8e cd f1 47 59 4c 28 4b 21 3b 0d 00 .N.$...GYL(K!;.. 0090 00 14 27 ba b5 dc 01 ea 07 60 ea 4e 31 90 ac 27 ..'......`.N1..' 00a0 c0 d0 0d 00 00 14 61 05 c4 22 e7 68 47 e4 3f 96 ......a..".hG.?. 00b0 84 80 12 92 ae cd 0d 00 00 14 44 85 15 2d 18 b6 ..........D..-.. 00c0 bb cd 0b e8 a8 46 95 79 dd cc 0d 00 00 14 cd 60 .....F.y.......` 00d0 46 43 35 df 21 f8 7c fd b2 fc 68 b6 a4 48 0d 00 FC5.!.|...h..H.. 00e0 00 14 90 cb 80 91 3e bb 69 6e 08 63 81 b5 ec 42 ......>.in.c...B 00f0 7b 1f 00 00 00 14 7d 94 19 a6 53 10 ca 6f 2c 17 {.....}...S..o,. 0100 9d 92 15 52 9d 56 28 45 62 8e ...R.V(Eb. Frame 2 (126 bytes on wire, 126 bytes captured) Arrival Time: Oct 26, 2004 11:10:23.999504000 Time delta from previous packet: 0.002641000 seconds Time since reference or first frame: 0.002641000 seconds Frame Number: 2 Packet Length: 126 bytes Capture Length: 126 bytes Ethernet II, Src: 00:05:30:01:80:af, Dst: 00:0c:29:e6:ad:b9 Destination: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Source: 00:05:30:01:80:af (00:05:30:01:80:af) Type: IP (0x0800) Frame check sequence: 0xa36f1e0f (correct) Internet Protocol, Src Addr: 165.227.249.144 (165.227.249.144), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 108 Identification: 0x0000 (0) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3bad (correct) Source: 165.227.249.144 (165.227.249.144) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 88 Checksum: 0xd44a (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x16179FF7B84C95B2 Responder cookie: 0x736FC26115802447 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 80 Security Association payload Next payload: NONE (0) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 0 Next payload: NONE (0) Length: 40 Proposal number: 0 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 0 Next payload: NONE (0) Length: 32 Transform number: 0 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) 0000 00 0c 29 e6 ad b9 00 05 30 01 80 af 08 00 45 00 ..).....0.....E. 0010 00 6c 00 00 00 00 40 11 3b ad a5 e3 f9 90 a5 e3 .l....@.;....... 0020 f9 7c 01 f4 01 f4 00 58 d4 4a 16 17 9f f7 b8 4c .|.....X.J.....L 0030 95 b2 73 6f c2 61 15 80 24 47 01 10 02 00 00 00 ..so.a..$G...... 0040 00 00 00 00 00 50 00 00 00 34 00 00 00 01 00 00 .....P...4...... 0050 00 01 00 00 00 28 00 01 00 01 00 00 00 20 00 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 03 00 01 80 04 ................ 0070 00 02 80 0b 00 01 80 0c 70 80 a3 6f 1e 0f ........p..o.. Frame 3 (226 bytes on wire, 226 bytes captured) Arrival Time: Oct 26, 2004 11:10:24.008334000 Time delta from previous packet: 0.008830000 seconds Time since reference or first frame: 0.011471000 seconds Frame Number: 3 Packet Length: 226 bytes Capture Length: 226 bytes Ethernet II, Src: 00:0c:29:e6:ad:b9, Dst: 00:05:30:01:80:af Destination: 00:05:30:01:80:af (00:05:30:01:80:af) Source: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Type: IP (0x0800) Frame check sequence: 0x324b78c2 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.144 (165.227.249.144) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 208 Identification: 0x0055 (85) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3af4 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.144 (165.227.249.144) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 188 Checksum: 0xb842 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x16179FF7B84C95B2 Responder cookie: 0x736FC26115802447 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 180 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 20 Nonce Data 0000 00 05 30 01 80 af 00 0c 29 e6 ad b9 08 00 45 00 ..0.....).....E. 0010 00 d0 00 55 00 00 40 11 3a f4 a5 e3 f9 7c a5 e3 ...U..@.:....|.. 0020 f9 90 01 f4 01 f4 00 bc b8 42 16 17 9f f7 b8 4c .........B.....L 0030 95 b2 73 6f c2 61 15 80 24 47 04 10 02 00 00 00 ..so.a..$G...... 0040 00 00 00 00 00 b4 0a 00 00 84 e6 53 7b 38 12 00 ...........S{8.. 0050 59 d2 7c 36 4d bb 83 40 83 cd 1b 20 e9 cb 8a 62 Y.|6M..@... ...b 0060 ee 22 27 80 f1 dc 48 f5 01 f9 c1 9f 33 c6 7e b5 ."'...H.....3.~. 0070 48 e8 f1 e8 e6 80 52 f7 a4 86 c8 8e a9 db 6b ce H.....R.......k. 0080 d7 45 5f a7 c1 7f a1 d3 4c c2 52 fe 1a ac 1f f7 .E_.....L.R..... 0090 27 d6 84 9d e5 91 34 ad ac a9 00 9c 1e cd 5d cd '.....4.......]. 00a0 96 11 37 69 ce 84 92 f0 fa f6 2a 0d 8b 07 e0 1f ..7i......*..... 00b0 f9 17 16 b0 26 bf 80 6d 32 72 5d 95 87 af 20 dc ....&..m2r]... . 00c0 09 64 a5 9d 2f 91 20 ba 5b 1d 00 00 00 14 9d 97 .d../. .[....... 00d0 10 c6 8b c1 35 29 cb 4e 2b ac 36 b3 87 f8 32 4b ....5).N+.6...2K 00e0 78 c2 x. Frame 4 (226 bytes on wire, 226 bytes captured) Arrival Time: Oct 26, 2004 11:10:24.031374000 Time delta from previous packet: 0.023040000 seconds Time since reference or first frame: 0.034511000 seconds Frame Number: 4 Packet Length: 226 bytes Capture Length: 226 bytes Ethernet II, Src: 00:05:30:01:80:af, Dst: 00:0c:29:e6:ad:b9 Destination: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Source: 00:05:30:01:80:af (00:05:30:01:80:af) Type: IP (0x0800) Frame check sequence: 0x0de332af (correct) Internet Protocol, Src Addr: 165.227.249.144 (165.227.249.144), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 208 Identification: 0x0000 (0) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3b49 (correct) Source: 165.227.249.144 (165.227.249.144) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 188 Checksum: 0xd08d (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x16179FF7B84C95B2 Responder cookie: 0x736FC26115802447 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 180 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 20 Nonce Data 0000 00 0c 29 e6 ad b9 00 05 30 01 80 af 08 00 45 00 ..).....0.....E. 0010 00 d0 00 00 00 00 40 11 3b 49 a5 e3 f9 90 a5 e3 ......@.;I...... 0020 f9 7c 01 f4 01 f4 00 bc d0 8d 16 17 9f f7 b8 4c .|.............L 0030 95 b2 73 6f c2 61 15 80 24 47 04 10 02 00 00 00 ..so.a..$G...... 0040 00 00 00 00 00 b4 0a 00 00 84 d1 a7 41 52 65 dd ............ARe. 0050 bb b6 94 ad 3e 88 07 2f 52 50 c2 4e e3 8e 39 6e ....>../RP.N..9n 0060 0d 13 31 97 6a 42 17 35 e5 7f b4 82 37 77 be 5e ..1.jB.5....7w.^ 0070 22 8a a9 1c 34 14 be 46 dc 54 45 c1 38 aa ca a0 "...4..F.TE.8... 0080 b0 46 7c 1e 68 33 fb c2 50 a8 93 4b 92 03 9a 5b .F|.h3..P..K...[ 0090 07 32 a8 50 a0 3d be 5c 25 34 f9 ab cb a9 2c cc .2.P.=.\%4....,. 00a0 08 cf 10 b4 f7 42 22 51 02 ab 83 41 65 79 2f aa .....B"Q...Aey/. 00b0 87 de 03 55 86 ed 3e c0 59 fc 01 f2 c5 2b 83 d0 ...U..>.Y....+.. 00c0 ef 99 92 92 f5 37 56 ff 3e 3f 00 00 00 14 d2 a3 .....7V.>?...... 00d0 44 86 5b f3 39 ee 4b 7d 01 99 ea a8 f6 b9 0d e3 D.[.9.K}........ 00e0 32 af 2. Frame 5 (122 bytes on wire, 122 bytes captured) Arrival Time: Oct 26, 2004 11:10:24.044780000 Time delta from previous packet: 0.013406000 seconds Time since reference or first frame: 0.047917000 seconds Frame Number: 5 Packet Length: 122 bytes Capture Length: 122 bytes Ethernet II, Src: 00:0c:29:e6:ad:b9, Dst: 00:05:30:01:80:af Destination: 00:05:30:01:80:af (00:05:30:01:80:af) Source: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Type: IP (0x0800) Frame check sequence: 0x5824e79b (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.144 (165.227.249.144) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 104 Identification: 0x0056 (86) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3b5b (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.144 (165.227.249.144) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 84 Checksum: 0xb177 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x16179FF7B84C95B2 Responder cookie: 0x736FC26115802447 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 76 Encrypted payload (48 bytes) 0000 00 05 30 01 80 af 00 0c 29 e6 ad b9 08 00 45 00 ..0.....).....E. 0010 00 68 00 56 00 00 40 11 3b 5b a5 e3 f9 7c a5 e3 .h.V..@.;[...|.. 0020 f9 90 01 f4 01 f4 00 54 b1 77 16 17 9f f7 b8 4c .......T.w.....L 0030 95 b2 73 6f c2 61 15 80 24 47 05 10 02 01 00 00 ..so.a..$G...... 0040 00 00 00 00 00 4c 23 04 92 77 f5 17 17 ab 9d 18 .....L#..w...... 0050 e0 4f f7 79 46 56 23 a1 9e 7c 67 a0 6c 8f a3 6b .O.yFV#..|g.l..k 0060 0f 63 03 de a3 27 58 3a d7 62 5c d1 67 fe 49 29 .c...'X:.b\.g.I) 0070 cd ba 1b 73 fb b0 58 24 e7 9b ...s..X$.. Frame 6 (114 bytes on wire, 114 bytes captured) Arrival Time: Oct 26, 2004 11:10:24.060490000 Time delta from previous packet: 0.015710000 seconds Time since reference or first frame: 0.063627000 seconds Frame Number: 6 Packet Length: 114 bytes Capture Length: 114 bytes Ethernet II, Src: 00:05:30:01:80:af, Dst: 00:0c:29:e6:ad:b9 Destination: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Source: 00:05:30:01:80:af (00:05:30:01:80:af) Type: IP (0x0800) Frame check sequence: 0x38b4663e (correct) Internet Protocol, Src Addr: 165.227.249.144 (165.227.249.144), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0x0000 (0) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3bb9 (correct) Source: 165.227.249.144 (165.227.249.144) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 76 Checksum: 0xa78a (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x16179FF7B84C95B2 Responder cookie: 0x736FC26115802447 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 68 Encrypted payload (40 bytes) 0000 00 0c 29 e6 ad b9 00 05 30 01 80 af 08 00 45 00 ..).....0.....E. 0010 00 60 00 00 00 00 40 11 3b b9 a5 e3 f9 90 a5 e3 .`....@.;....... 0020 f9 7c 01 f4 01 f4 00 4c a7 8a 16 17 9f f7 b8 4c .|.....L.......L 0030 95 b2 73 6f c2 61 15 80 24 47 05 10 02 01 00 00 ..so.a..$G...... 0040 00 00 00 00 00 44 2b 4c 86 6b 22 c9 22 b5 e6 29 .....D+L.k"."..) 0050 4c 23 e2 8d d6 38 af 30 45 5a 58 1a ff ca dd 51 L#...8.0EZX....Q 0060 36 1e bb d7 8f f0 ed 71 16 da d1 ce 36 06 38 b4 6......q....6.8. 0070 66 3e f> Frame 7 (130 bytes on wire, 130 bytes captured) Arrival Time: Oct 26, 2004 11:10:24.061587000 Time delta from previous packet: 0.001097000 seconds Time since reference or first frame: 0.064724000 seconds Frame Number: 7 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:05:30:01:80:af, Dst: 00:0c:29:e6:ad:b9 Destination: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Source: 00:05:30:01:80:af (00:05:30:01:80:af) Type: IP (0x0800) Frame check sequence: 0x4aa843a8 (correct) Internet Protocol, Src Addr: 165.227.249.144 (165.227.249.144), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0000 (0) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3ba9 (correct) Source: 165.227.249.144 (165.227.249.144) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 92 Checksum: 0x0004 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x16179FF7B84C95B2 Responder cookie: 0x736FC26115802447 Next payload: Hash (8) Version: 1.0 Exchange type: Informational (5) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xF2AEE149 Length: 84 Encrypted payload (56 bytes) 0000 00 0c 29 e6 ad b9 00 05 30 01 80 af 08 00 45 00 ..).....0.....E. 0010 00 70 00 00 00 00 40 11 3b a9 a5 e3 f9 90 a5 e3 .p....@.;....... 0020 f9 7c 01 f4 01 f4 00 5c 00 04 16 17 9f f7 b8 4c .|.....\.......L 0030 95 b2 73 6f c2 61 15 80 24 47 08 10 05 01 f2 ae ..so.a..$G...... 0040 e1 49 00 00 00 54 52 74 0d 1e 77 e1 4e f3 55 4a .I...TRt..w.N.UJ 0050 fd 0d 8e 63 f5 03 32 12 10 e2 f6 56 2b 1c 04 aa ...c..2....V+... 0060 3a 61 48 16 72 c6 9b e6 09 d5 c3 a8 cd 79 a8 5d :aH.r........y.] 0070 d3 49 2f c6 ef 80 0f e5 65 25 b1 2d 14 f6 4a a8 .I/.....e%.-..J. 0080 43 a8 C. Frame 8 (330 bytes on wire, 330 bytes captured) Arrival Time: Oct 26, 2004 11:10:24.069787000 Time delta from previous packet: 0.008200000 seconds Time since reference or first frame: 0.072924000 seconds Frame Number: 8 Packet Length: 330 bytes Capture Length: 330 bytes Ethernet II, Src: 00:0c:29:e6:ad:b9, Dst: 00:05:30:01:80:af Destination: 00:05:30:01:80:af (00:05:30:01:80:af) Source: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Type: IP (0x0800) Frame check sequence: 0x982d1197 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.144 (165.227.249.144) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 312 Identification: 0x0057 (87) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3a8a (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.144 (165.227.249.144) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 292 Checksum: 0xa784 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x16179FF7B84C95B2 Responder cookie: 0x736FC26115802447 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x4514A51C Length: 284 Encrypted payload (256 bytes) 0000 00 05 30 01 80 af 00 0c 29 e6 ad b9 08 00 45 00 ..0.....).....E. 0010 01 38 00 57 00 00 40 11 3a 8a a5 e3 f9 7c a5 e3 .8.W..@.:....|.. 0020 f9 90 01 f4 01 f4 01 24 a7 84 16 17 9f f7 b8 4c .......$.......L 0030 95 b2 73 6f c2 61 15 80 24 47 08 10 20 01 45 14 ..so.a..$G.. .E. 0040 a5 1c 00 00 01 1c 5f c8 b1 45 85 e0 b0 14 94 9e ......_..E...... 0050 10 19 e3 67 40 e7 21 ec e0 1b 61 4a ea b5 08 3a ...g@.!...aJ...: 0060 c3 3d c5 3c be 3d 68 c5 36 e3 f0 02 00 59 c9 14 .=.<.=h.6....Y.. 0070 92 29 67 13 74 38 c6 d5 c3 09 6c 24 bf 09 ca df .)g.t8....l$.... 0080 9e f7 89 4c f7 c4 d5 62 16 56 2a fe 8f 9e 7a ee ...L...b.V*...z. 0090 9f 19 db 2b 0d ad c2 c3 7c e7 6e 4d ba 7d f2 04 ...+....|.nM.}.. 00a0 a9 1d 5a dd c3 94 ff ec d7 57 ff 3d a4 fb fd e3 ..Z......W.=.... 00b0 53 d0 be ac 82 3c 40 12 54 7b 18 38 99 74 84 20 S....<@.T{.8.t. 00c0 d1 71 bc 07 90 6d ff 55 8b b5 6d 52 a0 f7 74 21 .q...m.U..mR..t! 00d0 32 91 36 97 74 b9 f0 78 9e 4f 4a 2e 39 27 e6 1e 2.6.t..x.OJ.9'.. 00e0 0e c6 31 91 31 06 29 bf e7 36 2f a8 4f 9b bd 5e ..1.1.)..6/.O..^ 00f0 95 65 04 8e 28 4e d1 dc 37 be c5 0a 9d 8e df d4 .e..(N..7....... 0100 c0 65 bf 0a e3 28 55 78 93 a7 c4 f7 ea 97 a1 b0 .e...(Ux........ 0110 dc 8b 8b ea 58 10 c3 ff b5 c8 3e a2 f7 83 4c a1 ....X.....>...L. 0120 ec 38 50 d1 92 a9 eb a3 e2 d2 95 a0 28 f8 05 b6 .8P.........(... 0130 4a 21 4f c4 2d 25 62 d3 05 05 59 80 5a 6b b6 d8 J!O.-%b...Y.Zk.. 0140 5c e5 91 a4 c1 a4 98 2d 11 97 \......-.. Frame 9 (338 bytes on wire, 338 bytes captured) Arrival Time: Oct 26, 2004 11:10:24.153809000 Time delta from previous packet: 0.084022000 seconds Time since reference or first frame: 0.156946000 seconds Frame Number: 9 Packet Length: 338 bytes Capture Length: 338 bytes Ethernet II, Src: 00:05:30:01:80:af, Dst: 00:0c:29:e6:ad:b9 Destination: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Source: 00:05:30:01:80:af (00:05:30:01:80:af) Type: IP (0x0800) Frame check sequence: 0xc5ab1a91 (correct) Internet Protocol, Src Addr: 165.227.249.144 (165.227.249.144), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 320 Identification: 0x0000 (0) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3ad9 (correct) Source: 165.227.249.144 (165.227.249.144) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 300 Checksum: 0x901e (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x16179FF7B84C95B2 Responder cookie: 0x736FC26115802447 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x4514A51C Length: 292 Encrypted payload (264 bytes) 0000 00 0c 29 e6 ad b9 00 05 30 01 80 af 08 00 45 00 ..).....0.....E. 0010 01 40 00 00 00 00 40 11 3a d9 a5 e3 f9 90 a5 e3 .@....@.:....... 0020 f9 7c 01 f4 01 f4 01 2c 90 1e 16 17 9f f7 b8 4c .|.....,.......L 0030 95 b2 73 6f c2 61 15 80 24 47 08 10 20 01 45 14 ..so.a..$G.. .E. 0040 a5 1c 00 00 01 24 6d 0f 06 c8 be 51 3f ed 13 a4 .....$m....Q?... 0050 98 28 80 f0 d0 92 a8 ce 49 db f3 3d b0 62 1e dd .(......I..=.b.. 0060 cf e6 be fe 98 94 24 21 f7 02 6c 47 41 4f 4d e8 ......$!..lGAOM. 0070 46 2e 38 93 4d 65 6b 0a 5e 9d 8a 9c e1 4a 44 2f F.8.Mek.^....JD/ 0080 e1 22 7c a0 31 56 fe e0 f4 8c 75 30 4a 9c e0 b3 ."|.1V....u0J... 0090 d7 0d 1e c4 35 b2 9e f4 b2 56 a8 50 0f 78 33 6c ....5....V.P.x3l 00a0 4c bb 00 d4 f3 e8 ac 48 4b 9f 72 91 9f fa 03 e3 L......HK.r..... 00b0 95 5d d4 bd 22 39 4c b7 1d bf a2 60 57 5f 0e 0f .].."9L....`W_.. 00c0 b6 b1 8f 93 f1 94 87 cd da 08 ff 0b 62 77 11 7a ............bw.z 00d0 2f 1a 30 de a7 15 b5 8f e5 7b 7a f2 aa 47 4f 87 /.0......{z..GO. 00e0 ff d8 d3 e1 e6 67 41 e7 9d 42 25 88 f5 5f c4 98 .....gA..B%.._.. 00f0 ff 94 20 3e 1a a6 1f 12 87 dd e4 85 69 21 59 ec .. >........i!Y. 0100 35 5f 5b fb c6 41 ff 72 61 f4 28 8b 8f e2 4e d2 5_[..A.ra.(...N. 0110 de b4 b9 d6 74 f4 d9 47 57 73 32 49 84 ed c6 a8 ....t..GWs2I.... 0120 96 f0 10 c5 7c 38 61 de 9a 6c 29 87 ec 66 35 74 ....|8a..l)..f5t 0130 8e a4 e0 f4 6b 1f 21 1b 3d ff 2c 18 6a f0 56 d9 ....k.!.=.,.j.V. 0140 d5 29 0c eb 34 2d 0d 3b 72 29 81 1d d5 e1 c5 ab .)..4-.;r)...... 0150 1a 91 .. Frame 10 (98 bytes on wire, 98 bytes captured) Arrival Time: Oct 26, 2004 11:10:24.161978000 Time delta from previous packet: 0.008169000 seconds Time since reference or first frame: 0.165115000 seconds Frame Number: 10 Packet Length: 98 bytes Capture Length: 98 bytes Ethernet II, Src: 00:0c:29:e6:ad:b9, Dst: 00:05:30:01:80:af Destination: 00:05:30:01:80:af (00:05:30:01:80:af) Source: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Type: IP (0x0800) Frame check sequence: 0x25129014 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.144 (165.227.249.144) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 80 Identification: 0x0058 (88) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3b71 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.144 (165.227.249.144) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 60 Checksum: 0xdaf2 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x16179FF7B84C95B2 Responder cookie: 0x736FC26115802447 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x4514A51C Length: 52 Encrypted payload (24 bytes) 0000 00 05 30 01 80 af 00 0c 29 e6 ad b9 08 00 45 00 ..0.....).....E. 0010 00 50 00 58 00 00 40 11 3b 71 a5 e3 f9 7c a5 e3 .P.X..@.;q...|.. 0020 f9 90 01 f4 01 f4 00 3c da f2 16 17 9f f7 b8 4c .......<.......L 0030 95 b2 73 6f c2 61 15 80 24 47 08 10 20 01 45 14 ..so.a..$G.. .E. 0040 a5 1c 00 00 00 34 63 06 42 3c 20 f4 3d 76 a9 1d .....4c.B< .=v.. 0050 26 7c 61 64 d9 cf d9 b1 9c ac 44 86 92 4a 25 12 &|ad......D..J%. 0060 90 14 .. Frame 11 (154 bytes on wire, 154 bytes captured) Arrival Time: Oct 26, 2004 11:10:24.453213000 Time delta from previous packet: 0.291235000 seconds Time since reference or first frame: 0.456350000 seconds Frame Number: 11 Packet Length: 154 bytes Capture Length: 154 bytes Ethernet II, Src: 00:0c:29:e6:ad:b9, Dst: 00:05:30:01:80:af Destination: 00:05:30:01:80:af (00:05:30:01:80:af) Source: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Type: IP (0x0800) Frame check sequence: 0x0512d952 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.144 (165.227.249.144) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 136 Identification: 0x001f (31) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b50 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.144 (165.227.249.144) Encapsulating Security Payload SPI: 0x08267201 Sequence: 2 Data (108 bytes) 0000 00 05 30 01 80 af 00 0c 29 e6 ad b9 08 00 45 00 ..0.....).....E. 0010 00 88 00 1f 00 00 f0 32 8b 50 a5 e3 f9 7c a5 e3 .......2.P...|.. 0020 f9 90 08 26 72 01 00 00 00 02 7e a2 5a 20 86 a1 ...&r.....~.Z .. 0030 ac fe da b0 dc 2d 90 f3 0f 0b e0 8b 58 cb 36 b1 .....-......X.6. 0040 da 2a 32 75 6a 0f 44 fd 2e 43 1c ec 37 cb 2c c3 .*2uj.D..C..7.,. 0050 78 1f 79 b7 11 57 16 46 4e dc 76 40 71 85 9e 95 x.y..W.FN.v@q... 0060 95 1f 65 1b d5 e3 74 8e 4b 98 a2 a5 5b 06 c9 7c ..e...t.K...[..| 0070 1e 1d 0c 4a 95 c6 61 44 13 7b 15 c1 97 f2 11 44 ...J..aD.{.....D 0080 18 3e 8c 27 27 c3 d1 5b 10 c7 7e b0 ac 09 54 71 .>.''..[..~...Tq 0090 3e 20 dc f6 b9 6f 05 12 d9 52 > ...o...R Frame 12 (154 bytes on wire, 154 bytes captured) Arrival Time: Oct 26, 2004 11:10:25.012302000 Time delta from previous packet: 0.559089000 seconds Time since reference or first frame: 1.015439000 seconds Frame Number: 12 Packet Length: 154 bytes Capture Length: 154 bytes Ethernet II, Src: 00:0c:29:e6:ad:b9, Dst: 00:05:30:01:80:af Destination: 00:05:30:01:80:af (00:05:30:01:80:af) Source: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Type: IP (0x0800) Frame check sequence: 0x848b311c (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.144 (165.227.249.144) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 136 Identification: 0x0020 (32) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b4f (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.144 (165.227.249.144) Encapsulating Security Payload SPI: 0x08267201 Sequence: 3 Data (108 bytes) 0000 00 05 30 01 80 af 00 0c 29 e6 ad b9 08 00 45 00 ..0.....).....E. 0010 00 88 00 20 00 00 f0 32 8b 4f a5 e3 f9 7c a5 e3 ... ...2.O...|.. 0020 f9 90 08 26 72 01 00 00 00 03 b9 4a 41 b6 27 16 ...&r......JA.'. 0030 37 5a e0 5c 22 40 46 e5 9e 3c 16 42 4a de 7a 6c 7Z.\"@F..<.BJ.zl 0040 be 48 08 6a 0b d6 86 58 62 d0 ac d0 09 62 d5 75 .H.j...Xb....b.u 0050 6d 39 fa 18 26 e9 cb 9f a1 f0 02 b0 f6 e2 5d 37 m9..&.........]7 0060 97 6f 37 dc 76 fc 6a d2 4c f1 8c f3 55 92 d9 ba .o7.v.j.L...U... 0070 0e c6 5a 1f c1 60 df fa ea bd 14 66 e2 a1 6d 20 ..Z..`.....f..m 0080 73 38 32 fe c0 bf 9a fd 89 17 61 4b e9 ba 7c e8 s82.......aK..|. 0090 0a ac 87 0f 97 9b 84 8b 31 1c ........1. Frame 13 (154 bytes on wire, 154 bytes captured) Arrival Time: Oct 26, 2004 11:10:25.012394000 Time delta from previous packet: 0.000092000 seconds Time since reference or first frame: 1.015531000 seconds Frame Number: 13 Packet Length: 154 bytes Capture Length: 154 bytes Ethernet II, Src: 00:05:30:01:80:af, Dst: 00:0c:29:e6:ad:b9 Destination: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Source: 00:05:30:01:80:af (00:05:30:01:80:af) Type: IP (0x0800) Frame check sequence: 0x709a7921 (correct) Internet Protocol, Src Addr: 165.227.249.144 (165.227.249.144), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 136 Identification: 0x0000 (0) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x3b70 (correct) Source: 165.227.249.144 (165.227.249.144) Destination: 165.227.249.124 (165.227.249.124) Encapsulating Security Payload SPI: 0xf9620f78 Sequence: 2 Data (108 bytes) 0000 00 0c 29 e6 ad b9 00 05 30 01 80 af 08 00 45 00 ..).....0.....E. 0010 00 88 00 00 00 00 40 32 3b 70 a5 e3 f9 90 a5 e3 ......@2;p...... 0020 f9 7c f9 62 0f 78 00 00 00 02 41 10 4a 79 04 13 .|.b.x....A.Jy.. 0030 ac 96 0d 43 32 c3 3e 9b 7b ce 4d 0d 74 54 13 f9 ...C2.>.{.M.tT.. 0040 b9 ea 28 8d 39 a1 fa 72 72 63 66 05 c1 58 b7 df ..(.9..rrcf..X.. 0050 77 56 0a b7 45 44 d2 d9 f4 6a 96 02 0a 68 a0 3a wV..ED...j...h.: 0060 39 e4 5e 0d 1f 8c fc c1 49 a2 72 18 87 aa 7a 59 9.^.....I.r...zY 0070 dc b8 7b 65 e3 62 d7 c9 55 49 42 bd 22 fe bf c7 ..{e.b..UIB."... 0080 e4 0d d4 15 6a d1 93 c2 90 b9 d4 d0 4e 17 5a 25 ....j.......N.Z% 0090 c2 8d 0b ee bf bf 70 9a 79 21 ......p.y! Frame 14 (154 bytes on wire, 154 bytes captured) Arrival Time: Oct 26, 2004 11:10:25.988167000 Time delta from previous packet: 0.975773000 seconds Time since reference or first frame: 1.991304000 seconds Frame Number: 14 Packet Length: 154 bytes Capture Length: 154 bytes Ethernet II, Src: 00:0c:29:e6:ad:b9, Dst: 00:05:30:01:80:af Destination: 00:05:30:01:80:af (00:05:30:01:80:af) Source: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Type: IP (0x0800) Frame check sequence: 0xcd37a084 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.144 (165.227.249.144) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 136 Identification: 0x0021 (33) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b4e (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.144 (165.227.249.144) Encapsulating Security Payload SPI: 0x08267201 Sequence: 4 Data (108 bytes) 0000 00 05 30 01 80 af 00 0c 29 e6 ad b9 08 00 45 00 ..0.....).....E. 0010 00 88 00 21 00 00 f0 32 8b 4e a5 e3 f9 7c a5 e3 ...!...2.N...|.. 0020 f9 90 08 26 72 01 00 00 00 04 28 dd 4a 35 d7 dc ...&r.....(.J5.. 0030 d4 de 9f 76 aa 9a 0c c3 1e 51 bf bb 79 de 92 9b ...v.....Q..y... 0040 da 73 c8 63 8b e4 d8 bf 24 55 d0 83 85 20 6d c7 .s.c....$U... m. 0050 7d 1c e2 5c d6 37 08 d9 ab ed 80 6e 86 f9 31 f7 }..\.7.....n..1. 0060 8c 15 cf 6c 67 c4 2f 5a 10 3e b6 9e d6 43 0a 0a ...lg./Z.>...C.. 0070 f3 a7 b6 db 1f c6 81 20 0c c4 2f 17 97 d8 15 6d ....... ../....m 0080 67 32 d2 cd 78 85 c7 c0 12 63 89 79 84 9a 2c 85 g2..x....c.y..,. 0090 e3 2a 14 1e 52 33 cd 37 a0 84 .*..R3.7.. Frame 15 (154 bytes on wire, 154 bytes captured) Arrival Time: Oct 26, 2004 11:10:25.988275000 Time delta from previous packet: 0.000108000 seconds Time since reference or first frame: 1.991412000 seconds Frame Number: 15 Packet Length: 154 bytes Capture Length: 154 bytes Ethernet II, Src: 00:05:30:01:80:af, Dst: 00:0c:29:e6:ad:b9 Destination: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Source: 00:05:30:01:80:af (00:05:30:01:80:af) Type: IP (0x0800) Frame check sequence: 0xce3e2f51 (correct) Internet Protocol, Src Addr: 165.227.249.144 (165.227.249.144), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 136 Identification: 0x0001 (1) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x3b6f (correct) Source: 165.227.249.144 (165.227.249.144) Destination: 165.227.249.124 (165.227.249.124) Encapsulating Security Payload SPI: 0xf9620f78 Sequence: 3 Data (108 bytes) 0000 00 0c 29 e6 ad b9 00 05 30 01 80 af 08 00 45 00 ..).....0.....E. 0010 00 88 00 01 00 00 40 32 3b 6f a5 e3 f9 90 a5 e3 ......@2;o...... 0020 f9 7c f9 62 0f 78 00 00 00 03 21 26 fc 3d 59 3a .|.b.x....!&.=Y: 0030 07 1b 7d d2 f7 46 38 5a 8e 5d 58 65 73 c8 a5 7d ..}..F8Z.]Xes..} 0040 a8 bb 47 7f 1c 62 dc 66 6b a9 66 f9 65 7d 4c 35 ..G..b.fk.f.e}L5 0050 4a 71 b8 56 1f 88 aa 74 1a 95 e3 ed e8 f4 31 12 Jq.V...t......1. 0060 3d 7e 7c 45 bb 69 17 f1 02 4f 32 c7 0a 8a 89 e0 =~|E.i...O2..... 0070 f7 ce 03 6f 67 f2 da 3c 42 d5 de 63 4e 72 e5 06 ...og../Q Frame 16 (154 bytes on wire, 154 bytes captured) Arrival Time: Oct 26, 2004 11:10:27.015419000 Time delta from previous packet: 1.027144000 seconds Time since reference or first frame: 3.018556000 seconds Frame Number: 16 Packet Length: 154 bytes Capture Length: 154 bytes Ethernet II, Src: 00:0c:29:e6:ad:b9, Dst: 00:05:30:01:80:af Destination: 00:05:30:01:80:af (00:05:30:01:80:af) Source: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Type: IP (0x0800) Frame check sequence: 0x99e7095e (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.144 (165.227.249.144) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 136 Identification: 0x0022 (34) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b4d (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.144 (165.227.249.144) Encapsulating Security Payload SPI: 0x08267201 Sequence: 5 Data (108 bytes) 0000 00 05 30 01 80 af 00 0c 29 e6 ad b9 08 00 45 00 ..0.....).....E. 0010 00 88 00 22 00 00 f0 32 8b 4d a5 e3 f9 7c a5 e3 ..."...2.M...|.. 0020 f9 90 08 26 72 01 00 00 00 05 00 93 be 20 e8 bd ...&r........ .. 0030 93 f3 bb 83 44 5e a4 16 ed ba 4d 90 e5 b3 33 8c ....D^....M...3. 0040 6c 27 e6 1e 28 c5 a5 f5 d8 52 22 a4 b9 43 35 ca l'..(....R"..C5. 0050 e2 3b fd 7d f5 5d 38 51 ea 66 26 68 18 06 e1 1a .;.}.]8Q.f&h.... 0060 51 27 23 a0 7a 69 6c d9 b3 45 b7 58 10 4a 15 3c Q'#.zil..E.X.J.< 0070 65 ad e5 24 68 a3 61 33 da 38 fd 7f bf ad af 79 e..$h.a3.8.....y 0080 a9 44 6e 3d d6 0b 44 ee 39 b2 87 66 ec 8e 7c 0f .Dn=..D.9..f..|. 0090 31 a1 ac 72 9d 17 99 e7 09 5e 1..r.....^ Frame 17 (154 bytes on wire, 154 bytes captured) Arrival Time: Oct 26, 2004 11:10:27.015501000 Time delta from previous packet: 0.000082000 seconds Time since reference or first frame: 3.018638000 seconds Frame Number: 17 Packet Length: 154 bytes Capture Length: 154 bytes Ethernet II, Src: 00:05:30:01:80:af, Dst: 00:0c:29:e6:ad:b9 Destination: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Source: 00:05:30:01:80:af (00:05:30:01:80:af) Type: IP (0x0800) Frame check sequence: 0x4f304fd5 (correct) Internet Protocol, Src Addr: 165.227.249.144 (165.227.249.144), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 136 Identification: 0x0002 (2) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x3b6e (correct) Source: 165.227.249.144 (165.227.249.144) Destination: 165.227.249.124 (165.227.249.124) Encapsulating Security Payload SPI: 0xf9620f78 Sequence: 4 Data (108 bytes) 0000 00 0c 29 e6 ad b9 00 05 30 01 80 af 08 00 45 00 ..).....0.....E. 0010 00 88 00 02 00 00 40 32 3b 6e a5 e3 f9 90 a5 e3 ......@2;n...... 0020 f9 7c f9 62 0f 78 00 00 00 04 40 21 56 b1 51 59 .|.b.x....@!V.QY 0030 61 53 50 34 0d 52 83 cf de eb f8 af 59 06 33 a2 aSP4.R......Y.3. 0040 0e 24 0b a0 b0 17 df d3 d0 ff 7c 19 d2 d6 fc 92 .$........|..... 0050 9b 9d 83 0b bb 43 c5 ca 8f 0c d1 81 31 4b e1 b0 .....C......1K.. 0060 67 43 33 72 ff 9b ea f9 84 97 01 eb 66 1a cb ab gC3r........f... 0070 6c 24 09 4b 2f 09 51 be ea 82 11 3f 4d 54 c4 0d l$.K/.Q....?MT.. 0080 f9 46 89 3f b9 d0 4c ec 8a b6 fe 3d f4 1c 57 86 .F.?..L....=..W. 0090 68 66 11 25 50 d0 4f 30 4f d5 hf.%P.O0O.