Frame 1 (266 bytes on wire, 266 bytes captured) Arrival Time: Apr 12, 2006 14:08:36.239878000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 266 bytes Capture Length: 266 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90), Dst: 00:50:c2:4b:ae:ec (00:50:c2:4b:ae:ec) Destination: 00:50:c2:4b:ae:ec (00:50:c2:4b:ae:ec) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Frame check sequence: 0xbadf87d3 [correct] Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.149 (165.227.249.149) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 248 Identification: 0x00e9 (233) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3a33 [correct] Good: True Bad : False Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.149 (165.227.249.149) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 228 Checksum: 0xa9f7 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x33B0DB16F85D98D4 Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 220 Security Association payload Next payload: Vendor ID (13) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 0 Next payload: NONE (0) Length: 40 Proposal number: 0 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 0 Next payload: NONE (0) Length: 32 Transform number: 0 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: unknown vendor ID: 0x8F9CC94E01248ECDF147594C284B213B Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-stenberg-ipsec-nat-traversal-01 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-stenberg-ipsec-nat-traversal-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-03 0000 00 50 c2 4b ae ec 00 0c 29 f4 af 90 08 00 45 00 .P.K....).....E. 0010 00 f8 00 e9 00 00 40 11 3a 33 a5 e3 f9 7c a5 e3 ......@.:3...|.. 0020 f9 95 01 f4 01 f4 00 e4 a9 f7 33 b0 db 16 f8 5d ..........3....] 0030 98 d4 00 00 00 00 00 00 00 00 01 10 02 00 00 00 ................ 0040 00 00 00 00 00 dc 0d 00 00 34 00 00 00 01 00 00 .........4...... 0050 00 01 00 00 00 28 00 01 00 01 00 00 00 20 00 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 03 00 01 80 04 ................ 0070 00 02 80 0b 00 01 80 0c 70 80 0d 00 00 14 8f 9c ........p....... 0080 c9 4e 01 24 8e cd f1 47 59 4c 28 4b 21 3b 0d 00 .N.$...GYL(K!;.. 0090 00 14 27 ba b5 dc 01 ea 07 60 ea 4e 31 90 ac 27 ..'......`.N1..' 00a0 c0 d0 0d 00 00 14 61 05 c4 22 e7 68 47 e4 3f 96 ......a..".hG.?. 00b0 84 80 12 92 ae cd 0d 00 00 14 44 85 15 2d 18 b6 ..........D..-.. 00c0 bb cd 0b e8 a8 46 95 79 dd cc 0d 00 00 14 cd 60 .....F.y.......` 00d0 46 43 35 df 21 f8 7c fd b2 fc 68 b6 a4 48 0d 00 FC5.!.|...h..H.. 00e0 00 14 90 cb 80 91 3e bb 69 6e 08 63 81 b5 ec 42 ......>.in.c...B 00f0 7b 1f 00 00 00 14 7d 94 19 a6 53 10 ca 6f 2c 17 {.....}...S..o,. 0100 9d 92 15 52 9d 56 ba df 87 d3 ...R.V.... Frame 2 (126 bytes on wire, 126 bytes captured) Arrival Time: Apr 12, 2006 14:08:36.262703000 Time delta from previous packet: 0.022825000 seconds Time since reference or first frame: 0.022825000 seconds Frame Number: 2 Packet Length: 126 bytes Capture Length: 126 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:50:c2:4b:ae:ec (00:50:c2:4b:ae:ec), Dst: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:50:c2:4b:ae:ec (00:50:c2:4b:ae:ec) Type: IP (0x0800) Frame check sequence: 0x374de12f [correct] Internet Protocol, Src: 165.227.249.149 (165.227.249.149), Dst: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 108 Identification: 0x0000 (0) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 63 Protocol: UDP (0x11) Header checksum: 0xfca7 [correct] Good: True Bad : False Source: 165.227.249.149 (165.227.249.149) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 88 Checksum: 0x8401 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x33B0DB16F85D98D4 Responder cookie: 0x247861CA129D8B11 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 80 Security Association payload Next payload: NONE (0) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 0 Next payload: NONE (0) Length: 40 Proposal number: 0 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 0 Next payload: NONE (0) Length: 32 Transform number: 0 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) 0000 00 0c 29 f4 af 90 00 50 c2 4b ae ec 08 00 45 00 ..)....P.K....E. 0010 00 6c 00 00 40 00 3f 11 fc a7 a5 e3 f9 95 a5 e3 .l..@.?......... 0020 f9 7c 01 f4 01 f4 00 58 84 01 33 b0 db 16 f8 5d .|.....X..3....] 0030 98 d4 24 78 61 ca 12 9d 8b 11 01 10 02 00 00 00 ..$xa........... 0040 00 00 00 00 00 50 00 00 00 34 00 00 00 01 00 00 .....P...4...... 0050 00 01 00 00 00 28 00 01 00 01 00 00 00 20 00 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 03 00 01 80 04 ................ 0070 00 02 80 0b 00 01 80 0c 70 80 37 4d e1 2f ........p.7M./ Frame 3 (226 bytes on wire, 226 bytes captured) Arrival Time: Apr 12, 2006 14:08:36.265009000 Time delta from previous packet: 0.002306000 seconds Time since reference or first frame: 0.025131000 seconds Frame Number: 3 Packet Length: 226 bytes Capture Length: 226 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90), Dst: 00:50:c2:4b:ae:ec (00:50:c2:4b:ae:ec) Destination: 00:50:c2:4b:ae:ec (00:50:c2:4b:ae:ec) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Frame check sequence: 0xc385513a [correct] Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.149 (165.227.249.149) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 208 Identification: 0x00ea (234) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3a5a [correct] Good: True Bad : False Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.149 (165.227.249.149) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 188 Checksum: 0x0299 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x33B0DB16F85D98D4 Responder cookie: 0x247861CA129D8B11 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 180 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 20 Nonce Data 0000 00 50 c2 4b ae ec 00 0c 29 f4 af 90 08 00 45 00 .P.K....).....E. 0010 00 d0 00 ea 00 00 40 11 3a 5a a5 e3 f9 7c a5 e3 ......@.:Z...|.. 0020 f9 95 01 f4 01 f4 00 bc 02 99 33 b0 db 16 f8 5d ..........3....] 0030 98 d4 24 78 61 ca 12 9d 8b 11 04 10 02 00 00 00 ..$xa........... 0040 00 00 00 00 00 b4 0a 00 00 84 57 38 02 a5 c7 f9 ..........W8.... 0050 f9 24 1a db ab f9 2e 75 85 b2 25 bb 3f e6 a6 3a .$.....u..%.?..: 0060 57 9e 14 18 ae a6 a4 12 e7 a8 e4 7d 69 4d f3 d7 W..........}iM.. 0070 20 7a 40 84 fc 7c e3 ba 0f b6 19 67 95 af 37 12 z@..|.....g..7. 0080 8d 9f ed 18 55 18 d2 ec 6a f2 42 1e 08 7d 14 fe ....U...j.B..}.. 0090 da d2 4f 40 5a 39 c1 b1 90 b3 0a 43 14 92 f8 c5 ..O@Z9.....C.... 00a0 b1 74 21 17 ad 10 43 ad 25 48 26 12 43 85 47 fd .t!...C.%H&.C.G. 00b0 ec a2 71 c3 ff 9e b1 7d 5c 1b 23 c5 11 67 1c 03 ..q....}\.#..g.. 00c0 02 60 7c 18 b3 86 4d 22 e5 26 00 00 00 14 80 e2 .`|...M".&...... 00d0 59 98 17 7d 3f 2d f3 77 f2 58 a1 f3 53 72 c3 85 Y..}?-.w.X..Sr.. 00e0 51 3a Q: Frame 4 (226 bytes on wire, 226 bytes captured) Arrival Time: Apr 12, 2006 14:08:36.539443000 Time delta from previous packet: 0.274434000 seconds Time since reference or first frame: 0.299565000 seconds Frame Number: 4 Packet Length: 226 bytes Capture Length: 226 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:50:c2:4b:ae:ec (00:50:c2:4b:ae:ec), Dst: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:50:c2:4b:ae:ec (00:50:c2:4b:ae:ec) Type: IP (0x0800) Frame check sequence: 0xc81c78ec [correct] Internet Protocol, Src: 165.227.249.149 (165.227.249.149), Dst: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 208 Identification: 0x0000 (0) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 63 Protocol: UDP (0x11) Header checksum: 0xfc43 [correct] Good: True Bad : False Source: 165.227.249.149 (165.227.249.149) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 188 Checksum: 0x8053 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x33B0DB16F85D98D4 Responder cookie: 0x247861CA129D8B11 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 180 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 20 Nonce Data 0000 00 0c 29 f4 af 90 00 50 c2 4b ae ec 08 00 45 00 ..)....P.K....E. 0010 00 d0 00 00 40 00 3f 11 fc 43 a5 e3 f9 95 a5 e3 ....@.?..C...... 0020 f9 7c 01 f4 01 f4 00 bc 80 53 33 b0 db 16 f8 5d .|.......S3....] 0030 98 d4 24 78 61 ca 12 9d 8b 11 04 10 02 00 00 00 ..$xa........... 0040 00 00 00 00 00 b4 0a 00 00 84 ee 1f 41 34 7b 77 ............A4{w 0050 59 84 ca 81 63 63 60 21 74 3e d3 eb fe a1 a6 85 Y...cc`!t>...... 0060 b9 df e5 71 ad 88 d9 4c 69 cd 5e b1 4c 88 2d 03 ...q...Li.^.L.-. 0070 95 b0 8a 34 16 23 7a 72 da a1 8a 6a 6d c0 27 3a ...4.#zr...jm.': 0080 9a db cd be 02 aa 2f 7d 82 8b 79 34 93 2a e2 f5 ....../}..y4.*.. 0090 78 e5 0f de 52 59 19 36 f7 23 d0 2f 74 c6 0a fd x...RY.6.#./t... 00a0 03 79 85 09 a9 0a 0f 1f 05 de f3 2d 0a 1a 89 53 .y.........-...S 00b0 1a e6 1a a4 21 50 58 d5 2f aa 35 3b 50 c6 43 7b ....!PX./.5;P.C{ 00c0 13 6c 77 fe 73 10 a3 58 a4 93 00 00 00 14 dc b6 .lw.s..X........ 00d0 5a 99 36 f7 b7 e2 71 bd 55 67 0a 33 d7 cc c8 1c Z.6...q.Ug.3.... 00e0 78 ec x. Frame 5 (122 bytes on wire, 122 bytes captured) Arrival Time: Apr 12, 2006 14:08:36.541697000 Time delta from previous packet: 0.002254000 seconds Time since reference or first frame: 0.301819000 seconds Frame Number: 5 Packet Length: 122 bytes Capture Length: 122 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90), Dst: 00:50:c2:4b:ae:ec (00:50:c2:4b:ae:ec) Destination: 00:50:c2:4b:ae:ec (00:50:c2:4b:ae:ec) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Frame check sequence: 0x7796277b [correct] Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.149 (165.227.249.149) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 104 Identification: 0x00eb (235) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3ac1 [correct] Good: True Bad : False Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.149 (165.227.249.149) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 84 Checksum: 0x515c [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x33B0DB16F85D98D4 Responder cookie: 0x247861CA129D8B11 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 76 Encrypted payload (48 bytes) 0000 00 50 c2 4b ae ec 00 0c 29 f4 af 90 08 00 45 00 .P.K....).....E. 0010 00 68 00 eb 00 00 40 11 3a c1 a5 e3 f9 7c a5 e3 .h....@.:....|.. 0020 f9 95 01 f4 01 f4 00 54 51 5c 33 b0 db 16 f8 5d .......TQ\3....] 0030 98 d4 24 78 61 ca 12 9d 8b 11 05 10 02 01 00 00 ..$xa........... 0040 00 00 00 00 00 4c 20 db e5 3f f8 87 34 d7 3a c7 .....L ..?..4.:. 0050 d5 dc 04 5a 95 8c 99 73 af b0 b8 1d 50 68 ac 01 ...Z...s....Ph.. 0060 c5 f2 e3 da 01 63 e3 7a c3 e1 32 00 1b 85 f7 64 .....c.z..2....d 0070 6b 6c bd 40 04 0b 77 96 27 7b kl.@..w.'{ Frame 6 (114 bytes on wire, 114 bytes captured) Arrival Time: Apr 12, 2006 14:08:36.889155000 Time delta from previous packet: 0.347458000 seconds Time since reference or first frame: 0.649277000 seconds Frame Number: 6 Packet Length: 114 bytes Capture Length: 114 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:50:c2:4b:ae:ec (00:50:c2:4b:ae:ec), Dst: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:50:c2:4b:ae:ec (00:50:c2:4b:ae:ec) Type: IP (0x0800) Frame check sequence: 0xae7a0391 [correct] Internet Protocol, Src: 165.227.249.149 (165.227.249.149), Dst: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0x0000 (0) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 63 Protocol: UDP (0x11) Header checksum: 0xfcb3 [correct] Good: True Bad : False Source: 165.227.249.149 (165.227.249.149) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 76 Checksum: 0xd38b [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x33B0DB16F85D98D4 Responder cookie: 0x247861CA129D8B11 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 68 Encrypted payload (40 bytes) 0000 00 0c 29 f4 af 90 00 50 c2 4b ae ec 08 00 45 00 ..)....P.K....E. 0010 00 60 00 00 40 00 3f 11 fc b3 a5 e3 f9 95 a5 e3 .`..@.?......... 0020 f9 7c 01 f4 01 f4 00 4c d3 8b 33 b0 db 16 f8 5d .|.....L..3....] 0030 98 d4 24 78 61 ca 12 9d 8b 11 05 10 02 01 00 00 ..$xa........... 0040 00 00 00 00 00 44 91 c4 36 14 6c 4d 99 f7 e0 9a .....D..6.lM.... 0050 70 10 a9 fb 54 28 a6 b1 0e 9b 5b 1f be 8a b5 34 p...T(....[....4 0060 89 5f 52 3b a1 54 4c bc 54 7c 26 2e 38 5a ae 7a ._R;.TL.T|&.8Z.z 0070 03 91 .. Frame 7 (338 bytes on wire, 338 bytes captured) Arrival Time: Apr 12, 2006 14:08:36.892440000 Time delta from previous packet: 0.003285000 seconds Time since reference or first frame: 0.652562000 seconds Frame Number: 7 Packet Length: 338 bytes Capture Length: 338 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90), Dst: 00:50:c2:4b:ae:ec (00:50:c2:4b:ae:ec) Destination: 00:50:c2:4b:ae:ec (00:50:c2:4b:ae:ec) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Frame check sequence: 0x1307a646 [correct] Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.149 (165.227.249.149) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 320 Identification: 0x00ec (236) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x39e8 [correct] Good: True Bad : False Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.149 (165.227.249.149) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 300 Checksum: 0xbb24 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x33B0DB16F85D98D4 Responder cookie: 0x247861CA129D8B11 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x21570F86 Length: 292 Encrypted payload (264 bytes) 0000 00 50 c2 4b ae ec 00 0c 29 f4 af 90 08 00 45 00 .P.K....).....E. 0010 01 40 00 ec 00 00 40 11 39 e8 a5 e3 f9 7c a5 e3 .@....@.9....|.. 0020 f9 95 01 f4 01 f4 01 2c bb 24 33 b0 db 16 f8 5d .......,.$3....] 0030 98 d4 24 78 61 ca 12 9d 8b 11 08 10 20 01 21 57 ..$xa....... .!W 0040 0f 86 00 00 01 24 e5 4a ad 12 df 82 a2 3a c2 2a .....$.J.....:.* 0050 55 82 59 27 3c 42 e1 d0 10 86 11 53 3e 9d e0 77 U.Y'..w 0060 e4 88 70 fb e8 c5 07 97 63 d9 2a 02 4a d6 58 f0 ..p.....c.*.J.X. 0070 d8 ca 8d e5 ef c3 90 b9 74 7d ba 32 3e 82 f9 cb ........t}.2>... 0080 96 a0 df d4 2f b8 7b 24 8a 24 4d 77 2a dc f9 3c ..../.{$.$Mw*..< 0090 7a 24 09 2d 74 12 43 a3 48 66 83 be bd 62 e9 a0 z$.-t.C.Hf...b.. 00a0 28 e9 df ec 89 9c f3 4f f1 71 39 a7 54 a8 31 b8 (......O.q9.T.1. 00b0 35 85 61 d2 a8 6a af 7a 70 cd ec 55 dc a7 b6 b1 5.a..j.zp..U.... 00c0 87 e5 5f 2e b2 09 c4 e3 9a dd e9 25 0d b3 cf 4a .._........%...J 00d0 13 b8 00 62 85 f2 79 ec f8 8b 6e bf e3 d3 d1 3b ...b..y...n....; 00e0 43 fd d6 2a cb 43 0e ab 62 27 72 4d 83 7f 9e 55 C..*.C..b'rM...U 00f0 6c f4 58 37 cd 3e d8 a1 90 58 38 9e 2d 94 aa cf l.X7.>...X8.-... 0100 b5 2b 8d 15 d9 af 53 85 2f ab d4 8f 58 68 81 d6 .+....S./...Xh.. 0110 94 ac 85 9c 1c 7d cd 41 05 87 c5 88 6a 7c 28 ca .....}.A....j|(. 0120 ae 5a 83 f9 33 3e fc 3c e7 0c e1 98 3c 92 fd 2d .Z..3>.<....<..- 0130 78 49 dc e4 55 8c 09 69 1a 08 66 41 e2 a7 0e 4e xI..U..i..fA...N 0140 a9 0e c6 4d 1f 9e db b0 9b 8d 58 c0 d6 e5 13 07 ...M......X..... 0150 a6 46 .F Frame 8 (338 bytes on wire, 338 bytes captured) Arrival Time: Apr 12, 2006 14:08:37.238084000 Time delta from previous packet: 0.345644000 seconds Time since reference or first frame: 0.998206000 seconds Frame Number: 8 Packet Length: 338 bytes Capture Length: 338 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:50:c2:4b:ae:ec (00:50:c2:4b:ae:ec), Dst: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:50:c2:4b:ae:ec (00:50:c2:4b:ae:ec) Type: IP (0x0800) Frame check sequence: 0x2b109bd1 [correct] Internet Protocol, Src: 165.227.249.149 (165.227.249.149), Dst: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 320 Identification: 0x0000 (0) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 63 Protocol: UDP (0x11) Header checksum: 0xfbd3 [correct] Good: True Bad : False Source: 165.227.249.149 (165.227.249.149) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 300 Checksum: 0x411c [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x33B0DB16F85D98D4 Responder cookie: 0x247861CA129D8B11 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x21570F86 Length: 292 Encrypted payload (264 bytes) 0000 00 0c 29 f4 af 90 00 50 c2 4b ae ec 08 00 45 00 ..)....P.K....E. 0010 01 40 00 00 40 00 3f 11 fb d3 a5 e3 f9 95 a5 e3 .@..@.?......... 0020 f9 7c 01 f4 01 f4 01 2c 41 1c 33 b0 db 16 f8 5d .|.....,A.3....] 0030 98 d4 24 78 61 ca 12 9d 8b 11 08 10 20 01 21 57 ..$xa....... .!W 0040 0f 86 00 00 01 24 6a 72 5b 1b cb 5b 61 2f f8 63 .....$jr[..[a/.c 0050 81 8c 99 80 9b 0b 5f 1d f6 d0 13 ab b2 18 8a 19 ......_......... 0060 d3 3d 05 55 36 50 eb 0b 58 c4 4a 41 16 57 e5 c3 .=.U6P..X.JA.W.. 0070 74 a7 cd e3 7c 18 9a ca 34 6c 34 e5 5f 2f 2e 2c t...|...4l4._/., 0080 17 61 4b 09 b7 70 10 1b 10 94 f0 f8 4d 6c 8b 31 .aK..p......Ml.1 0090 c2 5a e0 02 b1 05 2b 6f eb 64 a1 93 17 9e bf 60 .Z....+o.d.....` 00a0 0e c8 59 69 9b 05 ab f6 d0 9c d9 7b 7b f1 ff 6e ..Yi.......{{..n 00b0 4e 9d d1 da 73 44 a2 ca 94 e3 d1 bd 3e 62 fe cd N...sD......>b.. 00c0 49 19 81 3f e2 ed 4d 36 1c a1 c7 1d 6d 4d ea 47 I..?..M6....mM.G 00d0 e2 e9 f5 ff 8a a6 e2 56 a6 0e fb 2c 1b bf 1e 96 .......V...,.... 00e0 bb 45 25 76 9e 3c 45 95 32 e3 9a 67 b3 54 99 49 .E%v.