Frame 1 (262 bytes on wire, 262 bytes captured) Arrival Time: Mar 6, 2007 15:52:28.930922000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 262 bytes Capture Length: 262 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90), Dst: 00:0c:29:af:74:f5 (00:0c:29:af:74:f5) Destination: 00:0c:29:af:74:f5 (00:0c:29:af:74:f5) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.146 (165.227.249.146) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 248 Identification: 0x0115 (277) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3a0a [correct] Good: True Bad : False Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.146 (165.227.249.146) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 228 Checksum: 0x3768 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x239A79904437312A Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 220 Security Association payload Next payload: Vendor ID (13) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 0 Next payload: NONE (0) Length: 40 Proposal number: 0 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 0 Next payload: NONE (0) Length: 32 Transform number: 0 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: unknown vendor ID: 0x8F9CC94E01248ECDF147594C284B213B Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-stenberg-ipsec-nat-traversal-01 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-stenberg-ipsec-nat-traversal-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-03 0000 00 0c 29 af 74 f5 00 0c 29 f4 af 90 08 00 45 00 ..).t...).....E. 0010 00 f8 01 15 00 00 40 11 3a 0a a5 e3 f9 7c a5 e3 ......@.:....|.. 0020 f9 92 01 f4 01 f4 00 e4 37 68 23 9a 79 90 44 37 ........7h#.y.D7 0030 31 2a 00 00 00 00 00 00 00 00 01 10 02 00 00 00 1*.............. 0040 00 00 00 00 00 dc 0d 00 00 34 00 00 00 01 00 00 .........4...... 0050 00 01 00 00 00 28 00 01 00 01 00 00 00 20 00 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 03 00 01 80 04 ................ 0070 00 02 80 0b 00 01 80 0c 70 80 0d 00 00 14 8f 9c ........p....... 0080 c9 4e 01 24 8e cd f1 47 59 4c 28 4b 21 3b 0d 00 .N.$...GYL(K!;.. 0090 00 14 27 ba b5 dc 01 ea 07 60 ea 4e 31 90 ac 27 ..'......`.N1..' 00a0 c0 d0 0d 00 00 14 61 05 c4 22 e7 68 47 e4 3f 96 ......a..".hG.?. 00b0 84 80 12 92 ae cd 0d 00 00 14 44 85 15 2d 18 b6 ..........D..-.. 00c0 bb cd 0b e8 a8 46 95 79 dd cc 0d 00 00 14 cd 60 .....F.y.......` 00d0 46 43 35 df 21 f8 7c fd b2 fc 68 b6 a4 48 0d 00 FC5.!.|...h..H.. 00e0 00 14 90 cb 80 91 3e bb 69 6e 08 63 81 b5 ec 42 ......>.in.c...B 00f0 7b 1f 00 00 00 14 7d 94 19 a6 53 10 ca 6f 2c 17 {.....}...S..o,. 0100 9d 92 15 52 9d 56 ...R.V Frame 2 (142 bytes on wire, 142 bytes captured) Arrival Time: Mar 6, 2007 15:52:28.970402000 Time delta from previous packet: 0.039480000 seconds Time since reference or first frame: 0.039480000 seconds Frame Number: 2 Packet Length: 142 bytes Capture Length: 142 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:af:74:f5 (00:0c:29:af:74:f5), Dst: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:0c:29:af:74:f5 (00:0c:29:af:74:f5) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.146 (165.227.249.146), Dst: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 128 Identification: 0x08a0 (2208) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf2f6 [correct] Good: True Bad : False Source: 165.227.249.146 (165.227.249.146) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 108 Checksum: 0x2740 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x239A79904437312A Responder cookie: 0x19EEF4AF57CC685B Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 100 Security Association payload Next payload: Vendor ID (13) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 40 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 0 Next payload: NONE (0) Length: 32 Transform number: 0 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-03 0000 00 0c 29 f4 af 90 00 0c 29 af 74 f5 08 00 45 00 ..).....).t...E. 0010 00 80 08 a0 00 00 80 11 f2 f6 a5 e3 f9 92 a5 e3 ................ 0020 f9 7c 01 f4 01 f4 00 6c 27 40 23 9a 79 90 44 37 .|.....l'@#.y.D7 0030 31 2a 19 ee f4 af 57 cc 68 5b 01 10 02 00 00 00 1*....W.h[...... 0040 00 00 00 00 00 64 0d 00 00 34 00 00 00 01 00 00 .....d...4...... 0050 00 01 00 00 00 28 01 01 00 01 00 00 00 20 00 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 03 00 01 80 04 ................ 0070 00 02 80 0b 00 01 80 0c 70 80 00 00 00 14 7d 94 ........p.....}. 0080 19 a6 53 10 ca 6f 2c 17 9d 92 15 52 9d 56 ..S..o,....R.V Frame 3 (270 bytes on wire, 270 bytes captured) Arrival Time: Mar 6, 2007 15:52:28.979021000 Time delta from previous packet: 0.008619000 seconds Time since reference or first frame: 0.048099000 seconds Frame Number: 3 Packet Length: 270 bytes Capture Length: 270 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90), Dst: 00:0c:29:af:74:f5 (00:0c:29:af:74:f5) Destination: 00:0c:29:af:74:f5 (00:0c:29:af:74:f5) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.146 (165.227.249.146) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 256 Identification: 0x0116 (278) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3a01 [correct] Good: True Bad : False Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.146 (165.227.249.146) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 236 Checksum: 0x3820 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x239A79904437312A Responder cookie: 0x19EEF4AF57CC685B Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 228 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NAT-D (draft-ietf-ipsec-nat-t-ike-01 to 03) (130) Length: 20 Nonce Data NAT-D (draft-ietf-ipsec-nat-t-ike-01 to 03) payload Next payload: NAT-D (draft-ietf-ipsec-nat-t-ike-01 to 03) (130) Length: 24 Hash of address and port: 942683C132508E2C9016EA71099BAC6A7242CEF7 NAT-D (draft-ietf-ipsec-nat-t-ike-01 to 03) payload Next payload: NONE (0) Length: 24 Hash of address and port: 0F72D6C15C88B05C22241A7C625DB1E98B2481D7 0000 00 0c 29 af 74 f5 00 0c 29 f4 af 90 08 00 45 00 ..).t...).....E. 0010 01 00 01 16 00 00 40 11 3a 01 a5 e3 f9 7c a5 e3 ......@.:....|.. 0020 f9 92 01 f4 01 f4 00 ec 38 20 23 9a 79 90 44 37 ........8 #.y.D7 0030 31 2a 19 ee f4 af 57 cc 68 5b 04 10 02 00 00 00 1*....W.h[...... 0040 00 00 00 00 00 e4 0a 00 00 84 e0 8c f3 76 ad 3d .............v.= 0050 e9 4c 17 87 06 2e 82 f1 9b d0 dd 6e bd 8a fd 2b .L.........n...+ 0060 17 8d 41 d9 eb 35 fb cf 9f 33 7e 1a 6a f5 c7 34 ..A..5...3~.j..4 0070 dd 5b ad 84 20 8c ad a2 30 c7 6e b7 2d 1b 8e b2 .[.. ...0.n.-... 0080 5e 96 c7 75 54 12 5c 9a e0 5c 02 84 d3 6a 90 df ^..uT.\..\...j.. 0090 0e 7b a9 99 2f 96 71 2f 26 b2 44 4d 47 54 b8 20 .{../.q/&.DMGT. 00a0 f0 e6 ee ad a2 8c 2b 51 14 bc 5b a5 ab ca a2 36 ......+Q..[....6 00b0 b3 59 29 47 d8 63 a8 41 95 ac 20 f4 ee 7c b2 43 .Y)G.c.A.. ..|.C 00c0 a8 94 b7 41 f8 62 54 e9 3a 75 82 00 00 14 c3 27 ...A.bT.:u.....' 00d0 16 14 08 94 74 09 97 d4 bd 22 16 0a c3 70 82 00 ....t...."...p.. 00e0 00 18 94 26 83 c1 32 50 8e 2c 90 16 ea 71 09 9b ...&..2P.,...q.. 00f0 ac 6a 72 42 ce f7 00 00 00 18 0f 72 d6 c1 5c 88 .jrB.......r..\. 0100 b0 5c 22 24 1a 7c 62 5d b1 e9 8b 24 81 d7 .\"$.|b]...$.. Frame 4 (270 bytes on wire, 270 bytes captured) Arrival Time: Mar 6, 2007 15:52:29.045576000 Time delta from previous packet: 0.066555000 seconds Time since reference or first frame: 0.114654000 seconds Frame Number: 4 Packet Length: 270 bytes Capture Length: 270 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:af:74:f5 (00:0c:29:af:74:f5), Dst: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:0c:29:af:74:f5 (00:0c:29:af:74:f5) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.146 (165.227.249.146), Dst: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 256 Identification: 0x08a1 (2209) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf275 [correct] Good: True Bad : False Source: 165.227.249.146 (165.227.249.146) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 236 Checksum: 0x45b8 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x239A79904437312A Responder cookie: 0x19EEF4AF57CC685B Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 228 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NAT-D (draft-ietf-ipsec-nat-t-ike-01 to 03) (130) Length: 20 Nonce Data NAT-D (draft-ietf-ipsec-nat-t-ike-01 to 03) payload Next payload: NAT-D (draft-ietf-ipsec-nat-t-ike-01 to 03) (130) Length: 24 Hash of address and port: 0F72D6C15C88B05C22241A7C625DB1E98B2481D7 NAT-D (draft-ietf-ipsec-nat-t-ike-01 to 03) payload Next payload: NONE (0) Length: 24 Hash of address and port: 942683C132508E2C9016EA71099BAC6A7242CEF7 0000 00 0c 29 f4 af 90 00 0c 29 af 74 f5 08 00 45 00 ..).....).t...E. 0010 01 00 08 a1 00 00 80 11 f2 75 a5 e3 f9 92 a5 e3 .........u...... 0020 f9 7c 01 f4 01 f4 00 ec 45 b8 23 9a 79 90 44 37 .|......E.#.y.D7 0030 31 2a 19 ee f4 af 57 cc 68 5b 04 10 02 00 00 00 1*....W.h[...... 0040 00 00 00 00 00 e4 0a 00 00 84 c6 90 5f 80 c8 af ............_... 0050 cf 82 f6 cb b8 52 d9 aa 6b b3 e2 30 b4 90 61 7c .....R..k..0..a| 0060 ee ba df dc 61 88 48 c4 92 24 5b 31 06 18 5f 3b ....a.H..$[1.._; 0070 83 c6 90 05 ac f4 4b a9 16 0e 9f 78 9b 66 96 94 ......K....x.f.. 0080 c6 55 67 ef 59 c2 01 bf 6f de e4 42 3d 3d c3 f6 .Ug.Y...o..B==.. 0090 70 01 97 f9 f3 8a b2 7e 7e 93 2a e7 c9 09 4d 0b p......~~.*...M. 00a0 0d 99 1f 2e 59 bb a6 99 36 5d 42 55 b3 50 3c 43 ....Y...6]BU.P 0130 57 9a 31 e1 e2 db 85 3e 3c a0 17 5f 3c 13 a1 0c W.1....><.._<... 0140 35 44 8c a4 88 41 65 0d 05 b0 03 63 d5 b2 5D...Ae....c.. Frame 8 (334 bytes on wire, 334 bytes captured) Arrival Time: Mar 6, 2007 15:52:29.128544000 Time delta from previous packet: 0.043438000 seconds Time since reference or first frame: 0.197622000 seconds Frame Number: 8 Packet Length: 334 bytes Capture Length: 334 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:af:74:f5 (00:0c:29:af:74:f5), Dst: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:0c:29:af:74:f5 (00:0c:29:af:74:f5) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.146 (165.227.249.146), Dst: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 320 Identification: 0x08a3 (2211) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf233 [correct] Good: True Bad : False Source: 165.227.249.146 (165.227.249.146) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 300 Checksum: 0x4f44 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x239A79904437312A Responder cookie: 0x19EEF4AF57CC685B Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x3F9C6C76 Length: 292 Encrypted payload (264 bytes) 0000 00 0c 29 f4 af 90 00 0c 29 af 74 f5 08 00 45 00 ..).....).t...E. 0010 01 40 08 a3 00 00 80 11 f2 33 a5 e3 f9 92 a5 e3 .@.......3...... 0020 f9 7c 01 f4 01 f4 01 2c 4f 44 23 9a 79 90 44 37 .|.....,OD#.y.D7 0030 31 2a 19 ee f4 af 57 cc 68 5b 08 10 20 01 3f 9c 1*....W.h[.. .?. 0040 6c 76 00 00 01 24 9d 22 f4 0e 6d 88 b6 06 a2 cc lv...$."..m..... 0050 a0 6d fa 3e 9c 38 d9 cd 57 82 76 a4 e8 bf f3 3f .m.>.8..W.v....? 0060 eb 87 3d ad 3e 6d 2f e6 cd d6 56 14 46 39 af 21 ..=.>m/...V.F9.! 0070 ef 40 5a 56 f7 36 3b 15 f2 ff 6f 6c c8 77 f9 f9 .@ZV.6;...ol.w.. 0080 ae 7a e3 48 22 85 1d 49 4d 86 8e 6c a8 45 a7 cc .z.H"..IM..l.E.. 0090 02 11 17 0a d8 18 e9 a1 ec 86 62 b0 0f 73 e0 7b ..........b..s.{ 00a0 05 8b df 72 1a c6 9f a4 d9 5a aa 7f 70 53 6e ee ...r.....Z..pSn. 00b0 ca 83 2c 59 de 60 24 22 3a 86 b7 d2 5c ad e5 57 ..,Y.`$":...\..W 00c0 f8 9b ed df ce ff 82 83 9a a9 b0 53 a1 4f 0a ed ...........S.O.. 00d0 13 ed b4 2d 7b 2a be d8 08 d5 cc d2 c7 d2 e5 99 ...-{*.......... 00e0 c8 bb 5a c2 89 23 55 cd c1 9c 7d e5 b3 9b f6 c9 ..Z..#U...}..... 00f0 7f 4d 65 33 ff 2a a5 59 55 67 fa 0c 31 58 5a 2b .Me3.*.YUg..1XZ+ 0100 7a b6 00 bf a8 d4 dc 28 76 85 89 05 2a 4c ef 1e z......(v...*L.. 0110 c5 b5 f0 c7 c4 bb 59 56 33 8d 0b c4 33 9c ef 04 ......YV3...3... 0120 9d da b7 cb a5 51 42 b1 0d fc a9 66 7a 0b 19 e7 .....QB....fz... 0130 81 43 13 f6 35 06 46 0a ac c7 e1 f7 5a 7c 31 6a .C..5.F.....Z|1j 0140 25 ca 17 8b 4e 38 95 a6 6a 3a 54 c9 20 5a %...N8..j:T. Z Frame 9 (94 bytes on wire, 94 bytes captured) Arrival Time: Mar 6, 2007 15:52:29.137433000 Time delta from previous packet: 0.008889000 seconds Time since reference or first frame: 0.206511000 seconds Frame Number: 9 Packet Length: 94 bytes Capture Length: 94 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90), Dst: 00:0c:29:af:74:f5 (00:0c:29:af:74:f5) Destination: 00:0c:29:af:74:f5 (00:0c:29:af:74:f5) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.146 (165.227.249.146) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 80 Identification: 0x0119 (281) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3aae [correct] Good: True Bad : False Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.146 (165.227.249.146) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 60 Checksum: 0x82fe [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x239A79904437312A Responder cookie: 0x19EEF4AF57CC685B Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x3F9C6C76 Length: 52 Encrypted payload (24 bytes) 0000 00 0c 29 af 74 f5 00 0c 29 f4 af 90 08 00 45 00 ..).t...).....E. 0010 00 50 01 19 00 00 40 11 3a ae a5 e3 f9 7c a5 e3 .P....@.:....|.. 0020 f9 92 01 f4 01 f4 00 3c 82 fe 23 9a 79 90 44 37 .......<..#.y.D7 0030 31 2a 19 ee f4 af 57 cc 68 5b 08 10 20 01 3f 9c 1*....W.h[.. .?. 0040 6c 76 00 00 00 34 f8 58 f9 c4 d7 2e 40 53 e2 64 lv...4.X....@S.d 0050 3b fc d1 7c 9f 9b 47 72 81 01 45 ad dc d4 ;..|..Gr..E... Frame 10 (126 bytes on wire, 126 bytes captured) Arrival Time: Mar 6, 2007 15:52:29.312261000 Time delta from previous packet: 0.174828000 seconds Time since reference or first frame: 0.381339000 seconds Frame Number: 10 Packet Length: 126 bytes Capture Length: 126 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90), Dst: 00:0c:29:af:74:f5 (00:0c:29:af:74:f5) Destination: 00:0c:29:af:74:f5 (00:0c:29:af:74:f5) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.146 (165.227.249.146) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0031 (49) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b54 [correct] Good: True Bad : False Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.146 (165.227.249.146) Encapsulating Security Payload SPI: 0x02e328b5 Sequence: 2 Data (84 bytes) 0000 00 0c 29 af 74 f5 00 0c 29 f4 af 90 08 00 45 00 ..).t...).....E. 0010 00 70 00 31 00 00 f0 32 8b 54 a5 e3 f9 7c a5 e3 .p.1...2.T...|.. 0020 f9 92 02 e3 28 b5 00 00 00 02 f7 65 8e b4 42 b5 ....(......e..B. 0030 1d 45 d3 58 36 56 c3 52 3a d2 32 c1 70 f4 60 92 .E.X6V.R:.2.p.`. 0040 69 10 db cc 41 3f ea 9d 22 a7 cd 80 05 44 23 82 i...A?.."....D#. 0050 29 ff 35 5d 05 e0 2c 8e 57 49 fe 13 02 ad 04 67 ).5]..,.WI.....g 0060 72 99 a0 2d 50 ee 0b 51 75 83 e8 0c 87 74 68 7e r..-P..Qu....th~ 0070 3b 35 92 a9 11 3e fe 16 10 08 73 4d 41 ca ;5...>....sMA. Frame 11 (126 bytes on wire, 126 bytes captured) Arrival Time: Mar 6, 2007 15:52:29.317305000 Time delta from previous packet: 0.005044000 seconds Time since reference or first frame: 0.386383000 seconds Frame Number: 11 Packet Length: 126 bytes Capture Length: 126 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:0c:29:af:74:f5 (00:0c:29:af:74:f5), Dst: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:0c:29:af:74:f5 (00:0c:29:af:74:f5) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.146 (165.227.249.146), Dst: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x3989 (14729) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 126 Protocol: ESP (0x32) Header checksum: 0xc3fc [correct] Good: True Bad : False Source: 165.227.249.146 (165.227.249.146) Destination: 165.227.249.124 (165.227.249.124) Encapsulating Security Payload SPI: 0xd99dbb55 Sequence: 1 Data (84 bytes) 0000 00 0c 29 f4 af 90 00 0c 29 af 74 f5 08 00 45 00 ..).....).t...E. 0010 00 70 39 89 00 00 7e 32 c3 fc a5 e3 f9 92 a5 e3 .p9...~2........ 0020 f9 7c d9 9d bb 55 00 00 00 01 6b 9b 70 41 21 02 .|...U....k.pA!. 0030 2c 96 48 40 e5 d4 07 cb a8 b1 bc cf 7b 8e 2e 4e ,.H@........{..N 0040 1a ea 55 34 10 73 1c 79 76 9b 21 67 0a 00 3c b9 ..U4.s.yv.!g..<. 0050 2d 5b 26 a5 6a 77 d2 a4 5f 15 c4 d4 1c 22 4f 4c -[&.jw.._...."OL 0060 f4 3e 3e aa fe a0 9d f5 94 3b e6 bb 17 d5 1c 1c .>>......;...... 0070 7a 56 48 e3 89 d1 2b fe 30 6a e6 39 ba 16 zVH...+.0j.9.. Frame 12 (126 bytes on wire, 126 bytes captured) Arrival Time: Mar 6, 2007 15:52:29.570627000 Time delta from previous packet: 0.253322000 seconds Time since reference or first frame: 0.639705000 seconds Frame Number: 12 Packet Length: 126 bytes Capture Length: 126 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90), Dst: 00:0c:29:af:74:f5 (00:0c:29:af:74:f5) Destination: 00:0c:29:af:74:f5 (00:0c:29:af:74:f5) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.146 (165.227.249.146) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0032 (50) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b53 [correct] Good: True Bad : False Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.146 (165.227.249.146) Encapsulating Security Payload SPI: 0x02e328b5 Sequence: 3 Data (84 bytes) 0000 00 0c 29 af 74 f5 00 0c 29 f4 af 90 08 00 45 00 ..).t...).....E. 0010 00 70 00 32 00 00 f0 32 8b 53 a5 e3 f9 7c a5 e3 .p.2...2.S...|.. 0020 f9 92 02 e3 28 b5 00 00 00 03 59 ff 69 10 95 94 ....(.....Y.i... 0030 1c 02 2a b3 81 f3 20 00 25 6a 21 86 69 07 2f 62 ..*... .%j!.i./b 0040 89 39 57 b7 1f 81 e2 fc 07 06 42 f1 5e b1 20 94 .9W.......B.^. . 0050 a5 cc a2 92 bc 3b e3 5b 39 dd da 93 92 45 04 a6 .....;.[9....E.. 0060 8b 23 11 e7 8c 8b a2 69 44 47 ee fa f7 b5 d6 48 .#.....iDG.....H 0070 45 b9 68 18 58 db 00 1e 13 cb 58 93 df 40 E.h.X.....X..@ Frame 13 (126 bytes on wire, 126 bytes captured) Arrival Time: Mar 6, 2007 15:52:29.576211000 Time delta from previous packet: 0.005584000 seconds Time since reference or first frame: 0.645289000 seconds Frame Number: 13 Packet Length: 126 bytes Capture Length: 126 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:0c:29:af:74:f5 (00:0c:29:af:74:f5), Dst: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:0c:29:af:74:f5 (00:0c:29:af:74:f5) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.146 (165.227.249.146), Dst: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x398a (14730) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 126 Protocol: ESP (0x32) Header checksum: 0xc3fb [correct] Good: True Bad : False Source: 165.227.249.146 (165.227.249.146) Destination: 165.227.249.124 (165.227.249.124) Encapsulating Security Payload SPI: 0xd99dbb55 Sequence: 2 Data (84 bytes) 0000 00 0c 29 f4 af 90 00 0c 29 af 74 f5 08 00 45 00 ..).....).t...E. 0010 00 70 39 8a 00 00 7e 32 c3 fb a5 e3 f9 92 a5 e3 .p9...~2........ 0020 f9 7c d9 9d bb 55 00 00 00 02 49 97 32 8e c1 71 .|...U....I.2..q 0030 92 b4 a7 31 6b d5 73 1b 29 5e 7a d9 1f 67 10 60 ...1k.s.)^z..g.` 0040 89 98 31 34 b8 34 89 e2 e7 43 d6 6f d1 d1 fa 1c ..14.4...C.o.... 0050 0a fc a3 04 ec fc 80 91 79 a3 00 f2 11 f6 7f 8e ........y....... 0060 fe 7c 15 16 a0 7c b4 d3 3c 8a 66 01 68 c9 c7 20 .|...|..<.f.h.. 0070 7c a0 6c a7 ba 3e a1 7f 5a c4 b8 64 fd 2a |.l..>..Z..d.* Frame 14 (126 bytes on wire, 126 bytes captured) Arrival Time: Mar 6, 2007 15:52:30.951471000 Time delta from previous packet: 1.375260000 seconds Time since reference or first frame: 2.020549000 seconds Frame Number: 14 Packet Length: 126 bytes Capture Length: 126 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90), Dst: 00:0c:29:af:74:f5 (00:0c:29:af:74:f5) Destination: 00:0c:29:af:74:f5 (00:0c:29:af:74:f5) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.146 (165.227.249.146) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0033 (51) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b52 [correct] Good: True Bad : False Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.146 (165.227.249.146) Encapsulating Security Payload SPI: 0x02e328b5 Sequence: 4 Data (84 bytes) 0000 00 0c 29 af 74 f5 00 0c 29 f4 af 90 08 00 45 00 ..).t...).....E. 0010 00 70 00 33 00 00 f0 32 8b 52 a5 e3 f9 7c a5 e3 .p.3...2.R...|.. 0020 f9 92 02 e3 28 b5 00 00 00 04 b7 4b c5 a6 90 75 ....(......K...u 0030 96 77 55 da b0 ca 9a 05 37 25 c9 d7 a8 21 28 5d .wU.....7%...!(] 0040 1e 32 13 b5 7c 98 01 6e 84 49 4f 26 7e b1 2b 3d .2..|..n.IO&~.+= 0050 b1 74 44 25 41 6d 36 0c e9 59 c2 bd 13 fb c2 3a .tD%Am6..Y.....: 0060 77 1c e1 92 ac d5 77 87 09 0e cf 06 da dd d4 5d w.....w........] 0070 75 bb d1 ab 3f 98 d3 cd d6 cb df a7 49 93 u...?.......I. Frame 15 (126 bytes on wire, 126 bytes captured) Arrival Time: Mar 6, 2007 15:52:30.955146000 Time delta from previous packet: 0.003675000 seconds Time since reference or first frame: 2.024224000 seconds Frame Number: 15 Packet Length: 126 bytes Capture Length: 126 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:0c:29:af:74:f5 (00:0c:29:af:74:f5), Dst: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:0c:29:af:74:f5 (00:0c:29:af:74:f5) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.146 (165.227.249.146), Dst: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x398b (14731) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 126 Protocol: ESP (0x32) Header checksum: 0xc3fa [correct] Good: True Bad : False Source: 165.227.249.146 (165.227.249.146) Destination: 165.227.249.124 (165.227.249.124) Encapsulating Security Payload SPI: 0xd99dbb55 Sequence: 3 Data (84 bytes) 0000 00 0c 29 f4 af 90 00 0c 29 af 74 f5 08 00 45 00 ..).....).t...E. 0010 00 70 39 8b 00 00 7e 32 c3 fa a5 e3 f9 92 a5 e3 .p9...~2........ 0020 f9 7c d9 9d bb 55 00 00 00 03 c5 b9 69 20 5f 69 .|...U......i _i 0030 ba b0 87 8d de 7d 26 c4 38 42 dd 25 77 ee ff 6d .....}&.8B.%w..m 0040 ee 18 0b 3b 8d 8c 01 a2 03 91 d5 a6 46 64 ad a6 ...;........Fd.. 0050 94 42 6f d8 51 68 13 db 8e a0 e1 e6 69 c1 61 96 .Bo.Qh......i.a. 0060 3f 37 bb f7 f4 e1 49 ee 35 a5 a9 89 f1 0f cc ae ?7....I.5....... 0070 37 68 ff 24 62 58 fe 31 7c 24 75 09 06 90 7h.$bX.1|$u... Frame 16 (126 bytes on wire, 126 bytes captured) Arrival Time: Mar 6, 2007 15:52:31.961525000 Time delta from previous packet: 1.006379000 seconds Time since reference or first frame: 3.030603000 seconds Frame Number: 16 Packet Length: 126 bytes Capture Length: 126 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90), Dst: 00:0c:29:af:74:f5 (00:0c:29:af:74:f5) Destination: 00:0c:29:af:74:f5 (00:0c:29:af:74:f5) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.146 (165.227.249.146) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0034 (52) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b51 [correct] Good: True Bad : False Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.146 (165.227.249.146) Encapsulating Security Payload SPI: 0x02e328b5 Sequence: 5 Data (84 bytes) 0000 00 0c 29 af 74 f5 00 0c 29 f4 af 90 08 00 45 00 ..).t...).....E. 0010 00 70 00 34 00 00 f0 32 8b 51 a5 e3 f9 7c a5 e3 .p.4...2.Q...|.. 0020 f9 92 02 e3 28 b5 00 00 00 05 a3 9b 9d 78 4f a5 ....(........xO. 0030 c9 46 95 6a 95 f0 0b de 80 27 24 a5 e6 38 41 fd .F.j.....'$..8A. 0040 c3 a5 ea af 0c 11 d1 d8 12 a8 7c 45 2b 4a f9 4e ..........|E+J.N 0050 88 f7 b2 16 4b 4d 06 5e ab c7 a1 ab 14 f2 45 94 ....KM.^......E. 0060 b4 e1 d8 44 4f 3d 99 d3 11 0c 31 bb 4b a8 ff e2 ...DO=....1.K... 0070 98 67 cf 00 75 15 da 62 e2 16 75 b5 10 21 .g..u..b..u..! Frame 17 (126 bytes on wire, 126 bytes captured) Arrival Time: Mar 6, 2007 15:52:31.961527000 Time delta from previous packet: 0.000002000 seconds Time since reference or first frame: 3.030605000 seconds Frame Number: 17 Packet Length: 126 bytes Capture Length: 126 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:0c:29:af:74:f5 (00:0c:29:af:74:f5), Dst: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:0c:29:af:74:f5 (00:0c:29:af:74:f5) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.146 (165.227.249.146), Dst: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x398c (14732) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 126 Protocol: ESP (0x32) Header checksum: 0xc3f9 [correct] Good: True Bad : False Source: 165.227.249.146 (165.227.249.146) Destination: 165.227.249.124 (165.227.249.124) Encapsulating Security Payload SPI: 0xd99dbb55 Sequence: 4 Data (84 bytes) 0000 00 0c 29 f4 af 90 00 0c 29 af 74 f5 08 00 45 00 ..).....).t...E. 0010 00 70 39 8c 00 00 7e 32 c3 f9 a5 e3 f9 92 a5 e3 .p9...~2........ 0020 f9 7c d9 9d bb 55 00 00 00 04 ea 4d 78 9f f9 93 .|...U.....Mx... 0030 95 c3 f2 80 e0 8e c3 49 22 91 d0 b7 47 55 eb 0d .......I"...GU.. 0040 c5 39 8a ad 61 5b 45 8b cb cc 83 34 65 cc 91 b7 .9..a[E....4e... 0050 d2 80 3d 45 15 99 a9 0d 8b 4d 2a 90 b6 75 3a b1 ..=E.....M*..u:. 0060 4c c8 70 2a 96 1f 08 4c df f4 98 ea 76 f9 bf ae L.p*...L....v... 0070 91 07 40 5d c8 ef e9 f1 15 4c dd ca ed 8a ..@].....L....