Frame 1 (130 bytes on wire, 130 bytes captured) Arrival Time: Jan 28, 2004 14:24:48.983767000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:09:5b:b0:f5:3d, Dst: 00:09:5b:44:d0:d5 Destination: 00:09:5b:44:d0:d5 (00:09:5b:44:d0:d5) Source: 00:09:5b:b0:f5:3d (00:09:5b:b0:f5:3d) Type: IP (0x0800) Frame check sequence: 0x9e6b8790 (correct) Internet Protocol, Src Addr: 165.227.249.136 (165.227.249.136), Dst Addr: 165.227.249.120 (165.227.249.120) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x003c (60) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3b79 (correct) Source: 165.227.249.136 (165.227.249.136) Destination: 165.227.249.120 (165.227.249.120) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 92 Checksum: 0x2119 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x5E3F397FFF050E04 Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 84 Security Association payload Next payload: NONE (0) Length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 44 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 36 Transform number: 1 Transform ID: KEY_IKE (1) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) 0000 00 09 5b 44 d0 d5 00 09 5b b0 f5 3d 08 00 45 00 ..[D....[..=..E. 0010 00 70 00 3c 00 00 40 11 3b 79 a5 e3 f9 88 a5 e3 .p.<..@.;y...... 0020 f9 78 01 f4 01 f4 00 5c 21 19 5e 3f 39 7f ff 05 .x.....\!.^?9... 0030 0e 04 00 00 00 00 00 00 00 00 01 10 02 00 00 00 ................ 0040 00 00 00 00 00 54 00 00 00 38 00 00 00 01 00 00 .....T...8...... 0050 00 01 00 00 00 2c 01 01 00 01 00 00 00 24 01 01 .....,.......$.. 0060 00 00 80 04 00 02 80 03 00 01 80 01 00 05 80 02 ................ 0070 00 02 80 0b 00 01 00 0c 00 04 00 00 70 80 9e 6b ............p..k 0080 87 90 .. Frame 2 (130 bytes on wire, 130 bytes captured) Arrival Time: Jan 28, 2004 14:24:48.988146000 Time delta from previous packet: 0.004379000 seconds Time since reference or first frame: 0.004379000 seconds Frame Number: 2 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:09:5b:44:d0:d5, Dst: 00:09:5b:b0:f5:3d Destination: 00:09:5b:b0:f5:3d (00:09:5b:b0:f5:3d) Source: 00:09:5b:44:d0:d5 (00:09:5b:44:d0:d5) Type: IP (0x0800) Frame check sequence: 0x594a7772 (correct) Internet Protocol, Src Addr: 165.227.249.120 (165.227.249.120), Dst Addr: 165.227.249.136 (165.227.249.136) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x000d (13) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 32 Protocol: UDP (0x11) Header checksum: 0x5ba8 (correct) Source: 165.227.249.120 (165.227.249.120) Destination: 165.227.249.136 (165.227.249.136) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 92 Checksum: 0xc27f (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x5E3F397FFF050E04 Responder cookie: 0xCA9A295BB77FB323 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 84 Security Association payload Next payload: NONE (0) Length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 44 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 36 Transform number: 1 Transform ID: KEY_IKE (1) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) 0000 00 09 5b b0 f5 3d 00 09 5b 44 d0 d5 08 00 45 00 ..[..=..[D....E. 0010 00 70 00 0d 00 00 20 11 5b a8 a5 e3 f9 78 a5 e3 .p.... .[....x.. 0020 f9 88 01 f4 01 f4 00 5c c2 7f 5e 3f 39 7f ff 05 .......\..^?9... 0030 0e 04 ca 9a 29 5b b7 7f b3 23 01 10 02 00 00 00 ....)[...#...... 0040 00 00 00 00 00 54 00 00 00 38 00 00 00 01 00 00 .....T...8...... 0050 00 01 00 00 00 2c 01 01 00 01 00 00 00 24 01 01 .....,.......$.. 0060 00 00 80 04 00 02 80 03 00 01 80 01 00 05 80 02 ................ 0070 00 02 80 0b 00 01 00 0c 00 04 00 00 70 80 59 4a ............p.YJ 0080 77 72 wr Frame 3 (218 bytes on wire, 218 bytes captured) Arrival Time: Jan 28, 2004 14:24:49.442211000 Time delta from previous packet: 0.454065000 seconds Time since reference or first frame: 0.458444000 seconds Frame Number: 3 Packet Length: 218 bytes Capture Length: 218 bytes Ethernet II, Src: 00:09:5b:b0:f5:3d, Dst: 00:09:5b:44:d0:d5 Destination: 00:09:5b:44:d0:d5 (00:09:5b:44:d0:d5) Source: 00:09:5b:b0:f5:3d (00:09:5b:b0:f5:3d) Type: IP (0x0800) Frame check sequence: 0xe037c49b (correct) Internet Protocol, Src Addr: 165.227.249.136 (165.227.249.136), Dst Addr: 165.227.249.120 (165.227.249.120) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 200 Identification: 0x003d (61) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3b20 (correct) Source: 165.227.249.136 (165.227.249.136) Destination: 165.227.249.120 (165.227.249.120) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 180 Checksum: 0xc5e2 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x5E3F397FFF050E04 Responder cookie: 0xCA9A295BB77FB323 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 172 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 12 Nonce Data 0000 00 09 5b 44 d0 d5 00 09 5b b0 f5 3d 08 00 45 00 ..[D....[..=..E. 0010 00 c8 00 3d 00 00 40 11 3b 20 a5 e3 f9 88 a5 e3 ...=..@.; ...... 0020 f9 78 01 f4 01 f4 00 b4 c5 e2 5e 3f 39 7f ff 05 .x........^?9... 0030 0e 04 ca 9a 29 5b b7 7f b3 23 04 10 02 00 00 00 ....)[...#...... 0040 00 00 00 00 00 ac 0a 00 00 84 3d b7 10 f5 98 59 ..........=....Y 0050 a4 06 33 fc 14 84 43 48 67 eb 84 c8 0d bb 90 49 ..3...CHg......I 0060 5d fe 33 3c e1 f6 97 7a ce 47 e5 d7 01 8e 3a 63 ].3<...z.G....:c 0070 d9 55 75 ce 15 68 c2 51 80 91 61 99 f0 34 81 dc .Uu..h.Q..a..4.. 0080 69 cb ed ea 78 79 19 3e 26 69 70 8e be 15 bd 0d i...xy.>&ip..... 0090 2d fb 9a 73 08 8f 43 e4 d3 b5 6b a4 81 d5 54 4d -..s..C...k...TM 00a0 38 c6 34 ba ec d8 8d 1f 95 d3 cf f7 61 13 bc fa 8.4.........a... 00b0 44 08 19 50 c1 ad 42 63 0a 65 8c 0c d7 8a ad 0a D..P..Bc.e...... 00c0 7d b5 b7 c4 12 0a 8c 63 3a fd 00 00 00 0c e5 38 }......c:......8 00d0 af 08 f3 4e 25 bf e0 37 c4 9b ...N%..7.. Frame 4 (226 bytes on wire, 226 bytes captured) Arrival Time: Jan 28, 2004 14:24:52.374590000 Time delta from previous packet: 2.932379000 seconds Time since reference or first frame: 3.390823000 seconds Frame Number: 4 Packet Length: 226 bytes Capture Length: 226 bytes Ethernet II, Src: 00:09:5b:44:d0:d5, Dst: 00:09:5b:b0:f5:3d Destination: 00:09:5b:b0:f5:3d (00:09:5b:b0:f5:3d) Source: 00:09:5b:44:d0:d5 (00:09:5b:44:d0:d5) Type: IP (0x0800) Frame check sequence: 0x4674bcd7 (correct) Internet Protocol, Src Addr: 165.227.249.120 (165.227.249.120), Dst Addr: 165.227.249.136 (165.227.249.136) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 208 Identification: 0x000e (14) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 32 Protocol: UDP (0x11) Header checksum: 0x5b47 (correct) Source: 165.227.249.120 (165.227.249.120) Destination: 165.227.249.136 (165.227.249.136) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 188 Checksum: 0x8106 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x5E3F397FFF050E04 Responder cookie: 0xCA9A295BB77FB323 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 180 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 20 Nonce Data 0000 00 09 5b b0 f5 3d 00 09 5b 44 d0 d5 08 00 45 00 ..[..=..[D....E. 0010 00 d0 00 0e 00 00 20 11 5b 47 a5 e3 f9 78 a5 e3 ...... .[G...x.. 0020 f9 88 01 f4 01 f4 00 bc 81 06 5e 3f 39 7f ff 05 ..........^?9... 0030 0e 04 ca 9a 29 5b b7 7f b3 23 04 10 02 00 00 00 ....)[...#...... 0040 00 00 00 00 00 b4 0a 00 00 84 9b f5 fd cf c3 0b ................ 0050 75 35 6a 1a 7b d1 f4 8e 9e 5c 96 0f b2 f3 6f 51 u5j.{....\....oQ 0060 1c a2 c5 53 59 20 98 fe d5 4f 28 bc df 39 fa 22 ...SY ...O(..9." 0070 2b fb 15 1d 12 71 4e 8f 1b 73 ba 41 00 f5 53 37 +....qN..s.A..S7 0080 95 52 94 d1 dd 2d 11 9b 2e c0 50 19 80 36 1d b1 .R...-....P..6.. 0090 65 89 7c 32 24 cd cd 27 50 ab 8a 54 3f 72 ad dc e.|2$..'P..T?r.. 00a0 a9 d1 a0 01 33 c7 4e 35 fb c9 25 40 bc 2e 4c 30 ....3.N5..%@..L0 00b0 d7 45 1f 08 c7 91 c1 6f 87 a3 62 d4 15 1e 5b 2c .E.....o..b...[, 00c0 36 e1 03 9c e5 2f d7 dc 8c 84 00 00 00 14 05 03 6..../.......... 00d0 ea 3c 49 01 89 db 09 40 a6 b9 9f b5 74 83 46 74 ...@.;....... 0020 f9 78 01 f4 01 f4 00 4c f7 53 5e 3f 39 7f ff 05 .x.....L.S^?9... 0030 0e 04 ca 9a 29 5b b7 7f b3 23 05 10 02 01 00 00 ....)[...#...... 0040 00 00 00 00 00 44 da 77 b3 34 28 71 9c 58 ee b0 .....D.w.4(q.X.. 0050 e1 da b6 a5 5c cf f6 47 e9 f2 4e 9c 5a 40 ec df ....\..G..N.Z@.. 0060 53 d4 0c f9 5f 7a 2b 92 58 39 09 ae c0 6a ee fb S..._z+.X9...j.. 0070 00 40 .@ Frame 6 (114 bytes on wire, 114 bytes captured) Arrival Time: Jan 28, 2004 14:24:52.930315000 Time delta from previous packet: 0.005928000 seconds Time since reference or first frame: 3.946548000 seconds Frame Number: 6 Packet Length: 114 bytes Capture Length: 114 bytes Ethernet II, Src: 00:09:5b:44:d0:d5, Dst: 00:09:5b:b0:f5:3d Destination: 00:09:5b:b0:f5:3d (00:09:5b:b0:f5:3d) Source: 00:09:5b:44:d0:d5 (00:09:5b:44:d0:d5) Type: IP (0x0800) Frame check sequence: 0xf1d34e9e (correct) Internet Protocol, Src Addr: 165.227.249.120 (165.227.249.120), Dst Addr: 165.227.249.136 (165.227.249.136) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0x000f (15) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 32 Protocol: UDP (0x11) Header checksum: 0x5bb6 (correct) Source: 165.227.249.120 (165.227.249.120) Destination: 165.227.249.136 (165.227.249.136) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 76 Checksum: 0xca7f (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x5E3F397FFF050E04 Responder cookie: 0xCA9A295BB77FB323 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 68 Encrypted payload (40 bytes) 0000 00 09 5b b0 f5 3d 00 09 5b 44 d0 d5 08 00 45 00 ..[..=..[D....E. 0010 00 60 00 0f 00 00 20 11 5b b6 a5 e3 f9 78 a5 e3 .`.... .[....x.. 0020 f9 88 01 f4 01 f4 00 4c ca 7f 5e 3f 39 7f ff 05 .......L..^?9... 0030 0e 04 ca 9a 29 5b b7 7f b3 23 05 10 02 01 00 00 ....)[...#...... 0040 00 00 00 00 00 44 34 da 55 30 ac 39 53 26 52 03 .....D4.U0.9S&R. 0050 0e d4 63 5e c6 8a fc 29 72 b7 2d 07 18 51 a2 52 ..c^...)r.-..Q.R 0060 e9 63 fd 45 32 76 20 01 85 51 2c d6 91 6e f1 d3 .c.E2v ..Q,..n.. 0070 4e 9e N. Frame 7 (330 bytes on wire, 330 bytes captured) Arrival Time: Jan 28, 2004 14:24:53.386259000 Time delta from previous packet: 0.455944000 seconds Time since reference or first frame: 4.402492000 seconds Frame Number: 7 Packet Length: 330 bytes Capture Length: 330 bytes Ethernet II, Src: 00:09:5b:b0:f5:3d, Dst: 00:09:5b:44:d0:d5 Destination: 00:09:5b:44:d0:d5 (00:09:5b:44:d0:d5) Source: 00:09:5b:b0:f5:3d (00:09:5b:b0:f5:3d) Type: IP (0x0800) Frame check sequence: 0x5d7992a5 (correct) Internet Protocol, Src Addr: 165.227.249.136 (165.227.249.136), Dst Addr: 165.227.249.120 (165.227.249.120) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 312 Identification: 0x003f (63) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3aae (correct) Source: 165.227.249.136 (165.227.249.136) Destination: 165.227.249.120 (165.227.249.120) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 292 Checksum: 0x07e9 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x5E3F397FFF050E04 Responder cookie: 0xCA9A295BB77FB323 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xE9F38550 Length: 284 Encrypted payload (256 bytes) 0000 00 09 5b 44 d0 d5 00 09 5b b0 f5 3d 08 00 45 00 ..[D....[..=..E. 0010 01 38 00 3f 00 00 40 11 3a ae a5 e3 f9 88 a5 e3 .8.?..@.:....... 0020 f9 78 01 f4 01 f4 01 24 07 e9 5e 3f 39 7f ff 05 .x.....$..^?9... 0030 0e 04 ca 9a 29 5b b7 7f b3 23 08 10 20 01 e9 f3 ....)[...#.. ... 0040 85 50 00 00 01 1c a1 94 03 6a 8c aa ef 90 d5 14 .P.......j...... 0050 f0 2b 25 5e 34 29 11 6e c6 a6 8a 99 be 16 fe c1 .+%^4).n........ 0060 ae 56 b3 e3 09 aa 1e 63 cc 57 fb 25 83 92 59 a4 .V.....c.W.%..Y. 0070 41 0e 6f 6a 36 0a 42 7c f7 b6 7f 4a ab 6d af d3 A.oj6.B|...J.m.. 0080 0e 0b 12 44 aa 88 bb 16 1e 2b 91 0c 44 44 17 10 ...D.....+..DD.. 0090 ef fe de 49 f0 33 36 b7 2e 17 95 e0 1c 0c 2d b8 ...I.36.......-. 00a0 4e 89 dd 84 4b cd 51 9a 87 0d fc d2 e6 47 35 91 N...K.Q......G5. 00b0 19 29 8c 6e d6 14 ad ed 32 23 ce 50 47 25 40 b6 .).n....2#.PG%@. 00c0 53 f2 98 9b 75 c0 72 92 7f 3f 86 47 54 bc 65 ae S...u.r..?.GT.e. 00d0 8b 49 fa 0e 89 b5 67 ea 3a 1a f9 ac fd cf f2 a8 .I....g.:....... 00e0 be 01 14 9f 80 9d 46 29 b9 86 fd 36 a7 46 f1 78 ......F)...6.F.x 00f0 7a 4e fc 79 fe a1 27 88 2d 91 30 3d 8a cd 76 5c zN.y..'.-.0=..v\ 0100 0f 65 8a 35 1f e3 17 12 30 36 06 f2 57 a4 d9 22 .e.5....06..W.." 0110 5c 03 2b 78 b4 a6 f1 3c f4 e1 23 e4 9a 66 f4 f7 \.+x...<..#..f.. 0120 45 cf 59 d4 24 42 93 18 52 dd 58 4f c1 f3 5d 5b E.Y.$B..R.XO..][ 0130 34 bd 21 3a 44 22 b1 0b 7a cb 20 cd 2b cb 9f 00 4.!:D"..z. .+... 0140 57 5b 80 13 11 9d 5d 79 92 a5 W[....]y.. Frame 8 (338 bytes on wire, 338 bytes captured) Arrival Time: Jan 28, 2004 14:24:56.399998000 Time delta from previous packet: 3.013739000 seconds Time since reference or first frame: 7.416231000 seconds Frame Number: 8 Packet Length: 338 bytes Capture Length: 338 bytes Ethernet II, Src: 00:09:5b:44:d0:d5, Dst: 00:09:5b:b0:f5:3d Destination: 00:09:5b:b0:f5:3d (00:09:5b:b0:f5:3d) Source: 00:09:5b:44:d0:d5 (00:09:5b:44:d0:d5) Type: IP (0x0800) Frame check sequence: 0x74314e94 (correct) Internet Protocol, Src Addr: 165.227.249.120 (165.227.249.120), Dst Addr: 165.227.249.136 (165.227.249.136) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 320 Identification: 0x0010 (16) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 32 Protocol: UDP (0x11) Header checksum: 0x5ad5 (correct) Source: 165.227.249.120 (165.227.249.120) Destination: 165.227.249.136 (165.227.249.136) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 300 Checksum: 0xcb96 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x5E3F397FFF050E04 Responder cookie: 0xCA9A295BB77FB323 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xE9F38550 Length: 292 Encrypted payload (264 bytes) 0000 00 09 5b b0 f5 3d 00 09 5b 44 d0 d5 08 00 45 00 ..[..=..[D....E. 0010 01 40 00 10 00 00 20 11 5a d5 a5 e3 f9 78 a5 e3 .@.... .Z....x.. 0020 f9 88 01 f4 01 f4 01 2c cb 96 5e 3f 39 7f ff 05 .......,..^?9... 0030 0e 04 ca 9a 29 5b b7 7f b3 23 08 10 20 01 e9 f3 ....)[...#.. ... 0040 85 50 00 00 01 24 3c fb f9 d2 2f 9a d3 2c 9e 32 .P...$<.../..,.2 0050 b8 ee 38 b4 fb 4f a1 e3 c1 12 f8 d7 b7 70 38 23 ..8..O.......p8# 0060 7d 9e 72 97 20 68 6f 24 f3 d6 ed b3 f3 f1 0a ee }.r. ho$........ 0070 70 8c 5d 75 c9 13 5d 2a e9 f3 76 9f a4 6e b9 a4 p.]u..]*..v..n.. 0080 39 a9 31 6a 6b cc ad bd c9 75 62 16 be 5b b2 81 9.1jk....ub..[.. 0090 8b 21 62 85 44 e2 fb 11 f0 14 3f 3b dc de 17 b3 .!b.D.....?;.... 00a0 04 72 97 56 56 63 ad c5 ee b0 d3 d7 84 6f 1f f1 .r.VVc.......o.. 00b0 a6 2e 84 53 22 5f 0d f8 f3 b7 e9 b3 0b ff 2b b6 ...S"_........+. 00c0 78 88 7d d0 cc b7 43 78 6c 37 7a e4 ea 88 fc 4a x.}...Cxl7z....J 00d0 06 06 39 6f c4 36 dc c8 ae c4 86 b0 e1 bf 0e c5 ..9o.6.......... 00e0 b1 5a 8d 2d 8d 07 87 e3 30 9c 29 cf e0 02 df 11 .Z.-....0.)..... 00f0 12 2e e9 f4 92 d0 f7 de ea be 95 8a a8 c5 2f 19 ............../. 0100 96 bc 92 fa 70 b0 cf 4a 51 9f 9e c3 b6 ab 84 2e ....p..JQ....... 0110 37 46 fd eb 1d 57 92 03 83 b4 1a 48 43 cc 37 8a 7F...W.....HC.7. 0120 5e 46 19 87 dc 77 49 88 73 5b b2 e5 49 63 35 88 ^F...wI.s[..Ic5. 0130 8d c2 25 bf a7 7e 87 59 69 94 ab 43 4e 05 a2 03 ..%..~.Yi..CN... 0140 0a d9 df 28 d7 b0 c9 c8 e1 05 86 26 70 65 74 31 ...(.......&pet1 0150 4e 94 N. Frame 9 (98 bytes on wire, 98 bytes captured) Arrival Time: Jan 28, 2004 14:24:56.402739000 Time delta from previous packet: 0.002741000 seconds Time since reference or first frame: 7.418972000 seconds Frame Number: 9 Packet Length: 98 bytes Capture Length: 98 bytes Ethernet II, Src: 00:09:5b:b0:f5:3d, Dst: 00:09:5b:44:d0:d5 Destination: 00:09:5b:44:d0:d5 (00:09:5b:44:d0:d5) Source: 00:09:5b:b0:f5:3d (00:09:5b:b0:f5:3d) Type: IP (0x0800) Frame check sequence: 0x2b85d245 (correct) Internet Protocol, Src Addr: 165.227.249.136 (165.227.249.136), Dst Addr: 165.227.249.120 (165.227.249.120) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 80 Identification: 0x0040 (64) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3b95 (correct) Source: 165.227.249.136 (165.227.249.136) Destination: 165.227.249.120 (165.227.249.120) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 60 Checksum: 0xfd4f (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x5E3F397FFF050E04 Responder cookie: 0xCA9A295BB77FB323 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xE9F38550 Length: 52 Encrypted payload (24 bytes) 0000 00 09 5b 44 d0 d5 00 09 5b b0 f5 3d 08 00 45 00 ..[D....[..=..E. 0010 00 50 00 40 00 00 40 11 3b 95 a5 e3 f9 88 a5 e3 .P.@..@.;....... 0020 f9 78 01 f4 01 f4 00 3c fd 4f 5e 3f 39 7f ff 05 .x.....<.O^?9... 0030 0e 04 ca 9a 29 5b b7 7f b3 23 08 10 20 01 e9 f3 ....)[...#.. ... 0040 85 50 00 00 00 34 55 d7 8a 5d 37 95 f4 33 e7 dd .P...4U..]7..3.. 0050 0b 21 a6 c9 69 77 11 56 a5 a7 21 ec 3c 62 2b 85 .!..iw.V..!. 0060 89 6c .l Frame 12 (130 bytes on wire, 130 bytes captured) Arrival Time: Jan 28, 2004 14:25:05.452256000 Time delta from previous packet: 4.571395000 seconds Time since reference or first frame: 16.468489000 seconds Frame Number: 12 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:09:5b:b0:f5:3d, Dst: 00:09:5b:44:d0:d5 Destination: 00:09:5b:44:d0:d5 (00:09:5b:44:d0:d5) Source: 00:09:5b:b0:f5:3d (00:09:5b:b0:f5:3d) Type: IP (0x0800) Frame check sequence: 0x2a9bb7e1 (correct) Internet Protocol, Src Addr: 165.227.249.136 (165.227.249.136), Dst Addr: 165.227.249.120 (165.227.249.120) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x5db4 (23988) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 30 Protocol: ESP (0x32) Header checksum: 0xffdf (correct) Source: 165.227.249.136 (165.227.249.136) Destination: 165.227.249.120 (165.227.249.120) Encapsulating Security Payload SPI: 0x49bd21b2 Sequence: 2 Data (84 bytes) 0000 00 09 5b 44 d0 d5 00 09 5b b0 f5 3d 08 00 45 00 ..[D....[..=..E. 0010 00 70 5d b4 00 00 1e 32 ff df a5 e3 f9 88 a5 e3 .p]....2........ 0020 f9 78 49 bd 21 b2 00 00 00 02 78 10 73 d1 21 04 .xI.!.....x.s.!. 0030 55 d3 6d cb 7e 4f 56 8b 49 a7 3f 0d 3c 79 82 bf U.m.~OV.I.?.....2.....x.. 0020 f9 88 b0 81 e5 bd 00 00 00 02 01 02 03 04 05 06 ................ 0030 07 08 b8 bd e0 09 bd 38 9e 4a 10 d1 89 7b 6b 50 .......8.J...{kP 0040 16 19 8e 10 c6 47 75 bd 9f f4 ec b3 86 64 e1 54 .....Gu......d.T 0050 fa f5 af ef ab 45 cf 45 b0 35 d5 cc 58 18 78 27 .....E.E.5..X.x' 0060 64 30 b2 11 b0 78 c3 79 63 99 aa 4a ce ff f0 e6 d0...x.yc..J.... 0070 55 5f 5c 27 b1 63 c7 ac 8f 1a 04 59 b8 f7 99 70 U_\'.c.....Y...p 0080 9e 23 .# Frame 14 (98 bytes on wire, 98 bytes captured) Arrival Time: Jan 28, 2004 14:25:05.888101000 Time delta from previous packet: 0.432613000 seconds Time since reference or first frame: 16.904334000 seconds Frame Number: 14 Packet Length: 98 bytes Capture Length: 98 bytes Ethernet II, Src: 00:09:5b:b0:f5:3d, Dst: 00:09:5b:44:d0:d5 Destination: 00:09:5b:44:d0:d5 (00:09:5b:44:d0:d5) Source: 00:09:5b:b0:f5:3d (00:09:5b:b0:f5:3d) Type: IP (0x0800) Frame check sequence: 0x9b0f92f5 (correct)