Frame 1 (126 bytes on wire, 126 bytes captured)
    Arrival Time: Feb 12, 2010 14:20:28.463975000
    [Time delta from previous captured frame: 0.000000000 seconds]
    [Time delta from previous displayed frame: 0.000000000 seconds]
    [Time since reference or first frame: 0.000000000 seconds]
    Frame Number: 1
    Frame Length: 126 bytes
    Capture Length: 126 bytes
    [Frame is marked: False]
    [Protocols in frame: eth:ip:udp:isakmp]
Ethernet II, Src: 00:09:5b:b0:f5:3d (00:09:5b:b0:f5:3d), Dst: 00:00:00:00:00:12 (00:00:00:00:00:12)
    Destination: 00:00:00:00:00:12 (00:00:00:00:00:12)
        Address: 00:00:00:00:00:12 (00:00:00:00:00:12)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Source: 00:09:5b:b0:f5:3d (00:09:5b:b0:f5:3d)
        Address: 00:09:5b:b0:f5:3d (00:09:5b:b0:f5:3d)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.136 (165.227.249.136), Dst: 165.227.249.120 (165.227.249.120)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 112
    Identification: 0x01b3 (435)
    Flags: 0x00
        0... = Reserved bit: Not set
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0x3a02 [correct]
        [Good: True]
        [Bad : False]
    Source: 165.227.249.136 (165.227.249.136)
    Destination: 165.227.249.120 (165.227.249.120)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 92
    Checksum: 0xccba [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
Internet Security Association and Key Management Protocol
    Initiator cookie: 072B87A9ABF8BE59
    Responder cookie: 0000000000000000
    Next payload: Security Association (1)
    Version: 1.0
    Exchange type: Identity Protection (Main Mode) (2)
    Flags: 0x00
        .... ...0 = Not encrypted
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x00000000
    Length: 84
    Security Association payload
        Next payload: NONE (0)
        Payload length: 56
        Domain of interpretation: IPSEC (1)
        Situation: IDENTITY (1)
        Proposal payload # 1
            Next payload: NONE (0)
            Payload length: 44
            Proposal number: 1
            Protocol ID: ISAKMP (1)
            SPI Size: 0
            Proposal transforms: 1
            Transform payload # 1
                Next payload: NONE (0)
                Payload length: 36
                Transform number: 1
                Transform ID: KEY_IKE (1)
                Group-Description (4): Alternate 1024-bit MODP group (2)
                Authentication-Method (3): PSK (1)
                Encryption-Algorithm (1): 3DES-CBC (5)
                Hash-Algorithm (2): SHA (2)
                Life-Type (11): Seconds (1)
                Life-Duration (12): Duration-Value (28800)

0000  00 00 00 00 00 12 00 09 5b b0 f5 3d 08 00 45 00   ........[..=..E.
0010  00 70 01 b3 00 00 40 11 3a 02 a5 e3 f9 88 a5 e3   .p....@.:.......
0020  f9 78 01 f4 01 f4 00 5c cc ba 07 2b 87 a9 ab f8   .x.....\...+....
0030  be 59 00 00 00 00 00 00 00 00 01 10 02 00 00 00   .Y..............
0040  00 00 00 00 00 54 00 00 00 38 00 00 00 01 00 00   .....T...8......
0050  00 01 00 00 00 2c 01 01 00 01 00 00 00 24 01 01   .....,.......$..
0060  00 00 80 04 00 02 80 03 00 01 80 01 00 05 80 02   ................
0070  00 02 80 0b 00 01 00 0c 00 04 00 00 70 80         ............p.

Frame 2 (166 bytes on wire, 166 bytes captured)
    Arrival Time: Feb 12, 2010 14:20:28.486049000
    [Time delta from previous captured frame: 0.022074000 seconds]
    [Time delta from previous displayed frame: 0.022074000 seconds]
    [Time since reference or first frame: 0.022074000 seconds]
    Frame Number: 2
    Frame Length: 166 bytes
    Capture Length: 166 bytes
    [Frame is marked: False]
    [Protocols in frame: eth:ip:udp:isakmp]
Ethernet II, Src: 00:00:00:00:00:12 (00:00:00:00:00:12), Dst: 00:09:5b:b0:f5:3d (00:09:5b:b0:f5:3d)
    Destination: 00:09:5b:b0:f5:3d (00:09:5b:b0:f5:3d)
        Address: 00:09:5b:b0:f5:3d (00:09:5b:b0:f5:3d)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Source: 00:00:00:00:00:12 (00:00:00:00:00:12)
        Address: 00:00:00:00:00:12 (00:00:00:00:00:12)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.120 (165.227.249.120), Dst: 165.227.249.136 (165.227.249.136)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 152
    Identification: 0x0000 (0)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0xfb8c [correct]
        [Good: True]
        [Bad : False]
    Source: 165.227.249.120 (165.227.249.120)
    Destination: 165.227.249.136 (165.227.249.136)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 132
    Checksum: 0x3c8e [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
Internet Security Association and Key Management Protocol
    Initiator cookie: 072B87A9ABF8BE59
    Responder cookie: 2B881EE9FB8FE02B
    Next payload: Security Association (1)
    Version: 1.0
    Exchange type: Identity Protection (Main Mode) (2)
    Flags: 0x00
        .... ...0 = Not encrypted
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x00000000
    Length: 124
    Security Association payload
        Next payload: Vendor ID (13)
        Payload length: 56
        Domain of interpretation: IPSEC (1)
        Situation: IDENTITY (1)
        Proposal payload # 1
            Next payload: NONE (0)
            Payload length: 44
            Proposal number: 1
            Protocol ID: ISAKMP (1)
            SPI Size: 0
            Proposal transforms: 1
            Transform payload # 1
                Next payload: NONE (0)
                Payload length: 36
                Transform number: 1
                Transform ID: KEY_IKE (1)
                Group-Description (4): Alternate 1024-bit MODP group (2)
                Authentication-Method (3): PSK (1)
                Encryption-Algorithm (1): 3DES-CBC (5)
                Hash-Algorithm (2): SHA (2)
                Life-Type (11): Seconds (1)
                Life-Duration (12): Duration-Value (28800)
    Vendor ID: RFC 3706 Detecting Dead IKE Peers (DPD)
        Next payload: Vendor ID (13)
        Payload length: 20
        Vendor ID: RFC 3706 Detecting Dead IKE Peers (DPD)
    Vendor ID: 7003CBC1097DBE9C2600BA6983BC8B35
        Next payload: NONE (0)
        Payload length: 20
        Vendor ID: 7003CBC1097DBE9C2600BA6983BC8B35

0000  00 09 5b b0 f5 3d 00 00 00 00 00 12 08 00 45 00   ..[..=........E.
0010  00 98 00 00 40 00 40 11 fb 8c a5 e3 f9 78 a5 e3   ....@.@......x..
0020  f9 88 01 f4 01 f4 00 84 3c 8e 07 2b 87 a9 ab f8   ........<..+....
0030  be 59 2b 88 1e e9 fb 8f e0 2b 01 10 02 00 00 00   .Y+......+......
0040  00 00 00 00 00 7c 0d 00 00 38 00 00 00 01 00 00   .....|...8......
0050  00 01 00 00 00 2c 01 01 00 01 00 00 00 24 01 01   .....,.......$..
0060  00 00 80 04 00 02 80 03 00 01 80 01 00 05 80 02   ................
0070  00 02 80 0b 00 01 00 0c 00 04 00 00 70 80 0d 00   ............p...
0080  00 14 af ca d7 13 68 a1 f1 c9 6b 86 96 fc 77 57   ......h...k...wW
0090  01 00 00 00 00 14 70 03 cb c1 09 7d be 9c 26 00   ......p....}..&.
00a0  ba 69 83 bc 8b 35                                 .i...5

Frame 3 (214 bytes on wire, 214 bytes captured)
    Arrival Time: Feb 12, 2010 14:20:28.941563000
    [Time delta from previous captured frame: 0.455514000 seconds]
    [Time delta from previous displayed frame: 0.455514000 seconds]
    [Time since reference or first frame: 0.477588000 seconds]
    Frame Number: 3
    Frame Length: 214 bytes
    Capture Length: 214 bytes
    [Frame is marked: False]
    [Protocols in frame: eth:ip:udp:isakmp]
Ethernet II, Src: 00:09:5b:b0:f5:3d (00:09:5b:b0:f5:3d), Dst: 00:00:00:00:00:12 (00:00:00:00:00:12)
    Destination: 00:00:00:00:00:12 (00:00:00:00:00:12)
        Address: 00:00:00:00:00:12 (00:00:00:00:00:12)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Source: 00:09:5b:b0:f5:3d (00:09:5b:b0:f5:3d)
        Address: 00:09:5b:b0:f5:3d (00:09:5b:b0:f5:3d)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.136 (165.227.249.136), Dst: 165.227.249.120 (165.227.249.120)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 200
    Identification: 0x01b4 (436)
    Flags: 0x00
        0... = Reserved bit: Not set
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0x39a9 [correct]
        [Good: True]
        [Bad : False]
    Source: 165.227.249.136 (165.227.249.136)
    Destination: 165.227.249.120 (165.227.249.120)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 180
    Checksum: 0x85ef [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
Internet Security Association and Key Management Protocol
    Initiator cookie: 072B87A9ABF8BE59
    Responder cookie: 2B881EE9FB8FE02B
    Next payload: Key Exchange (4)
    Version: 1.0
    Exchange type: Identity Protection (Main Mode) (2)
    Flags: 0x00
        .... ...0 = Not encrypted
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x00000000
    Length: 172
    Key Exchange payload
        Next payload: Nonce (10)
        Payload length: 132
        Key Exchange Data (128 bytes / 1024 bits)
    Nonce payload
        Next payload: NONE (0)
        Payload length: 12
        Nonce Data

0000  00 00 00 00 00 12 00 09 5b b0 f5 3d 08 00 45 00   ........[..=..E.
0010  00 c8 01 b4 00 00 40 11 39 a9 a5 e3 f9 88 a5 e3   ......@.9.......
0020  f9 78 01 f4 01 f4 00 b4 85 ef 07 2b 87 a9 ab f8   .x.........+....
0030  be 59 2b 88 1e e9 fb 8f e0 2b 04 10 02 00 00 00   .Y+......+......
0040  00 00 00 00 00 ac 0a 00 00 84 c6 8c d6 f6 47 38   ..............G8
0050  be 95 d4 2c 8c 23 a1 f9 b2 7a 46 70 b2 e4 cb 03   ...,.#...zFp....
0060  eb 66 64 14 95 94 d2 d6 c4 0c ff 79 a3 f5 63 f2   .fd........y..c.
0070  ad 08 bf 5c 42 a3 f9 f6 3a c6 ef 18 26 37 03 a3   ...\B...:...&7..
0080  83 13 e4 3a 43 33 07 38 f2 b5 d5 c9 97 62 37 5c   ...:C3.8.....b7\
0090  69 ca 2a cb c6 52 e5 d8 2b ac cc 16 f9 57 a8 3e   i.*..R..+....W.>
00a0  07 b0 26 20 e3 bb ee 77 37 97 05 32 d5 3e 70 b9   ..& ...w7..2.>p.
00b0  8c 5b dc 51 c5 b9 d8 81 31 98 11 1b 4e cc 55 e9   .[.Q....1...N.U.
00c0  cf 86 55 37 8f 0a 76 26 17 ac 00 00 00 0c d2 1a   ..U7..v&........
00d0  ac e0 fe 4f 15 b7                                 ...O..

Frame 4 (242 bytes on wire, 242 bytes captured)
    Arrival Time: Feb 12, 2010 14:20:29.008487000
    [Time delta from previous captured frame: 0.066924000 seconds]
    [Time delta from previous displayed frame: 0.066924000 seconds]
    [Time since reference or first frame: 0.544512000 seconds]
    Frame Number: 4
    Frame Length: 242 bytes
    Capture Length: 242 bytes
    [Frame is marked: False]
    [Protocols in frame: eth:ip:udp:isakmp]
Ethernet II, Src: 00:00:00:00:00:12 (00:00:00:00:00:12), Dst: 00:09:5b:b0:f5:3d (00:09:5b:b0:f5:3d)
    Destination: 00:09:5b:b0:f5:3d (00:09:5b:b0:f5:3d)
        Address: 00:09:5b:b0:f5:3d (00:09:5b:b0:f5:3d)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Source: 00:00:00:00:00:12 (00:00:00:00:00:12)
        Address: 00:00:00:00:00:12 (00:00:00:00:00:12)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.120 (165.227.249.120), Dst: 165.227.249.136 (165.227.249.136)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 228
    Identification: 0x0000 (0)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0xfb40 [correct]
        [Good: True]
        [Bad : False]
    Source: 165.227.249.120 (165.227.249.120)
    Destination: 165.227.249.136 (165.227.249.136)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 208
    Checksum: 0x801c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
Internet Security Association and Key Management Protocol
    Initiator cookie: 072B87A9ABF8BE59
    Responder cookie: 2B881EE9FB8FE02B
    Next payload: Key Exchange (4)
    Version: 1.0
    Exchange type: Identity Protection (Main Mode) (2)
    Flags: 0x00
        .... ...0 = Not encrypted
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x00000000
    Length: 200
    Key Exchange payload
        Next payload: Nonce (10)
        Payload length: 132
        Key Exchange Data (128 bytes / 1024 bits)
    Nonce payload
        Next payload: Vendor ID (13)
        Payload length: 20
        Nonce Data
    Vendor ID: 7003CBC1097DBE9C2600BA6983BC8B35
        Next payload: NONE (0)
        Payload length: 20
        Vendor ID: 7003CBC1097DBE9C2600BA6983BC8B35

0000  00 09 5b b0 f5 3d 00 00 00 00 00 12 08 00 45 00   ..[..=........E.
0010  00 e4 00 00 40 00 40 11 fb 40 a5 e3 f9 78 a5 e3   ....@.@..@...x..
0020  f9 88 01 f4 01 f4 00 d0 80 1c 07 2b 87 a9 ab f8   ...........+....
0030  be 59 2b 88 1e e9 fb 8f e0 2b 04 10 02 00 00 00   .Y+......+......
0040  00 00 00 00 00 c8 0a 00 00 84 0a e2 42 3a 74 77   ............B:tw
0050  61 b3 96 28 60 f4 9a cb 60 5f 0e b8 b7 6f 13 85   a..(`...`_...o..
0060  d0 26 66 9c a8 3d 78 0b f0 46 29 51 fa 95 cf eb   .&f..=x..F)Q....
0070  3c 0a 73 16 11 2c 84 eb c9 2b e0 c2 36 ad 8c 96   <.s..,...+..6...
0080  5a 0f 21 d8 c9 2e 2b f7 00 44 a3 e7 77 c2 2b 36   Z.!...+..D..w.+6
0090  c2 70 14 af a7 e5 13 b0 65 20 ae 23 45 29 d0 8d   .p......e .#E)..
00a0  59 6d c4 66 49 b9 91 1e da 4a cb 2f fe 7a ef 5d   Ym.fI....J./.z.]
00b0  e8 ef 08 50 47 87 85 e2 db ae 8a 07 95 c3 f3 f7   ...PG...........
00c0  02 97 3f 24 5f a4 ee dd 64 88 0d 00 00 14 fe d2   ..?$_...d.......
00d0  e1 3b 2b 99 f7 9e e6 a6 1c 41 b1 99 d3 14 00 00   .;+......A......
00e0  00 14 70 03 cb c1 09 7d be 9c 26 00 ba 69 83 bc   ..p....}..&..i..
00f0  8b 35                                             .5

Frame 5 (110 bytes on wire, 110 bytes captured)
    Arrival Time: Feb 12, 2010 14:20:29.558743000
    [Time delta from previous captured frame: 0.550256000 seconds]
    [Time delta from previous displayed frame: 0.550256000 seconds]
    [Time since reference or first frame: 1.094768000 seconds]
    Frame Number: 5
    Frame Length: 110 bytes
    Capture Length: 110 bytes
    [Frame is marked: False]
    [Protocols in frame: eth:ip:udp:isakmp]
Ethernet II, Src: 00:09:5b:b0:f5:3d (00:09:5b:b0:f5:3d), Dst: 00:00:00:00:00:12 (00:00:00:00:00:12)
    Destination: 00:00:00:00:00:12 (00:00:00:00:00:12)
        Address: 00:00:00:00:00:12 (00:00:00:00:00:12)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Source: 00:09:5b:b0:f5:3d (00:09:5b:b0:f5:3d)
        Address: 00:09:5b:b0:f5:3d (00:09:5b:b0:f5:3d)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.136 (165.227.249.136), Dst: 165.227.249.120 (165.227.249.120)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 96
    Identification: 0x01b5 (437)
    Flags: 0x00
        0... = Reserved bit: Not set
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0x3a10 [correct]
        [Good: True]
        [Bad : False]
    Source: 165.227.249.136 (165.227.249.136)
    Destination: 165.227.249.120 (165.227.249.120)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 76
    Checksum: 0x7b7b [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
Internet Security Association and Key Management Protocol
    Initiator cookie: 072B87A9ABF8BE59
    Responder cookie: 2B881EE9FB8FE02B
    Next payload: Identification (5)
    Version: 1.0
    Exchange type: Identity Protection (Main Mode) (2)
    Flags: 0x01
        .... ...1 = Encrypted
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x00000000
    Length: 68
    Encrypted payload (40 bytes)

0000  00 00 00 00 00 12 00 09 5b b0 f5 3d 08 00 45 00   ........[..=..E.
0010  00 60 01 b5 00 00 40 11 3a 10 a5 e3 f9 88 a5 e3   .`....@.:.......
0020  f9 78 01 f4 01 f4 00 4c 7b 7b 07 2b 87 a9 ab f8   .x.....L{{.+....
0030  be 59 2b 88 1e e9 fb 8f e0 2b 05 10 02 01 00 00   .Y+......+......
0040  00 00 00 00 00 44 c7 b1 10 37 a7 7b 73 9e 82 ea   .....D...7.{s...
0050  89 bf d6 dc 46 f6 1e 66 67 b1 d6 95 81 42 51 a3   ....F..fg....BQ.
0060  d7 84 0c 84 7e 83 a1 3f ce b7 bc f0 3d f9         ....~..?....=.

Frame 6 (110 bytes on wire, 110 bytes captured)
    Arrival Time: Feb 12, 2010 14:20:29.572089000
    [Time delta from previous captured frame: 0.013346000 seconds]
    [Time delta from previous displayed frame: 0.013346000 seconds]
    [Time since reference or first frame: 1.108114000 seconds]
    Frame Number: 6
    Frame Length: 110 bytes
    Capture Length: 110 bytes
    [Frame is marked: False]
    [Protocols in frame: eth:ip:udp:isakmp]
Ethernet II, Src: 00:00:00:00:00:12 (00:00:00:00:00:12), Dst: 00:09:5b:b0:f5:3d (00:09:5b:b0:f5:3d)
    Destination: 00:09:5b:b0:f5:3d (00:09:5b:b0:f5:3d)
        Address: 00:09:5b:b0:f5:3d (00:09:5b:b0:f5:3d)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Source: 00:00:00:00:00:12 (00:00:00:00:00:12)
        Address: 00:00:00:00:00:12 (00:00:00:00:00:12)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.120 (165.227.249.120), Dst: 165.227.249.136 (165.227.249.136)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 96
    Identification: 0x0000 (0)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0xfbc4 [correct]
        [Good: True]
        [Bad : False]
    Source: 165.227.249.120 (165.227.249.120)
    Destination: 165.227.249.136 (165.227.249.136)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 76
    Checksum: 0xa70b [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
Internet Security Association and Key Management Protocol
    Initiator cookie: 072B87A9ABF8BE59
    Responder cookie: 2B881EE9FB8FE02B
    Next payload: Identification (5)
    Version: 1.0
    Exchange type: Identity Protection (Main Mode) (2)
    Flags: 0x01
        .... ...1 = Encrypted
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x00000000
    Length: 68
    Encrypted payload (40 bytes)

0000  00 09 5b b0 f5 3d 00 00 00 00 00 12 08 00 45 00   ..[..=........E.
0010  00 60 00 00 40 00 40 11 fb c4 a5 e3 f9 78 a5 e3   .`..@.@......x..
0020  f9 88 01 f4 01 f4 00 4c a7 0b 07 2b 87 a9 ab f8   .......L...+....
0030  be 59 2b 88 1e e9 fb 8f e0 2b 05 10 02 01 00 00   .Y+......+......
0040  00 00 00 00 00 44 a6 3d 53 0c da 4e 97 b6 e9 d9   .....D.=S..N....
0050  4d 88 8f 28 5d c3 06 6f 07 88 00 11 d8 49 b8 b5   M..(]..o.....I..
0060  e5 73 17 9d a3 b3 e6 d9 22 4a 8f 36 87 2c         .s......"J.6.,

Frame 7 (126 bytes on wire, 126 bytes captured)
    Arrival Time: Feb 12, 2010 14:20:29.584980000
    [Time delta from previous captured frame: 0.012891000 seconds]
    [Time delta from previous displayed frame: 0.012891000 seconds]
    [Time since reference or first frame: 1.121005000 seconds]
    Frame Number: 7
    Frame Length: 126 bytes
    Capture Length: 126 bytes
    [Frame is marked: False]
    [Protocols in frame: eth:ip:udp:isakmp]
Ethernet II, Src: 00:00:00:00:00:12 (00:00:00:00:00:12), Dst: 00:09:5b:b0:f5:3d (00:09:5b:b0:f5:3d)
    Destination: 00:09:5b:b0:f5:3d (00:09:5b:b0:f5:3d)
        Address: 00:09:5b:b0:f5:3d (00:09:5b:b0:f5:3d)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Source: 00:00:00:00:00:12 (00:00:00:00:00:12)
        Address: 00:00:00:00:00:12 (00:00:00:00:00:12)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.120 (165.227.249.120), Dst: 165.227.249.136 (165.227.249.136)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 112
    Identification: 0x0000 (0)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0xfbb4 [correct]
        [Good: True]
        [Bad : False]
    Source: 165.227.249.120 (165.227.249.120)
    Destination: 165.227.249.136 (165.227.249.136)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 92
    Checksum: 0x6ff8 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
Internet Security Association and Key Management Protocol
    Initiator cookie: 072B87A9ABF8BE59
    Responder cookie: 2B881EE9FB8FE02B
    Next payload: Hash (8)
    Version: 1.0
    Exchange type: Informational (5)
    Flags: 0x01
        .... ...1 = Encrypted
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0xca1bdc80
    Length: 84
    Encrypted payload (56 bytes)

0000  00 09 5b b0 f5 3d 00 00 00 00 00 12 08 00 45 00   ..[..=........E.
0010  00 70 00 00 40 00 40 11 fb b4 a5 e3 f9 78 a5 e3   .p..@.@......x..
0020  f9 88 01 f4 01 f4 00 5c 6f f8 07 2b 87 a9 ab f8   .......\o..+....
0030  be 59 2b 88 1e e9 fb 8f e0 2b 08 10 05 01 ca 1b   .Y+......+......
0040  dc 80 00 00 00 54 0e 5e 05 40 ee ab cb 66 c3 2a   .....T.^.@...f.*
0050  72 d3 cf cd f5 88 be a8 88 78 b5 2e 80 9c 6d 94   r........x....m.
0060  31 2d 04 e3 4d 50 ca 31 94 79 e6 15 f6 fc db 81   1-..MP.1.y......
0070  ee cf 9b 83 9d 96 93 21 30 cd 08 ea 36 4d         .......!0...6M

Frame 8 (326 bytes on wire, 326 bytes captured)
    Arrival Time: Feb 12, 2010 14:20:30.026754000
    [Time delta from previous captured frame: 0.441774000 seconds]
    [Time delta from previous displayed frame: 0.441774000 seconds]
    [Time since reference or first frame: 1.562779000 seconds]
    Frame Number: 8
    Frame Length: 326 bytes
    Capture Length: 326 bytes
    [Frame is marked: False]
    [Protocols in frame: eth:ip:udp:isakmp]
Ethernet II, Src: 00:09:5b:b0:f5:3d (00:09:5b:b0:f5:3d), Dst: 00:00:00:00:00:12 (00:00:00:00:00:12)
    Destination: 00:00:00:00:00:12 (00:00:00:00:00:12)
        Address: 00:00:00:00:00:12 (00:00:00:00:00:12)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Source: 00:09:5b:b0:f5:3d (00:09:5b:b0:f5:3d)
        Address: 00:09:5b:b0:f5:3d (00:09:5b:b0:f5:3d)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.136 (165.227.249.136), Dst: 165.227.249.120 (165.227.249.120)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 312
    Identification: 0x01b6 (438)
    Flags: 0x00
        0... = Reserved bit: Not set
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0x3937 [correct]
        [Good: True]
        [Bad : False]
    Source: 165.227.249.136 (165.227.249.136)
    Destination: 165.227.249.120 (165.227.249.120)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 292
    Checksum: 0xc907 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
Internet Security Association and Key Management Protocol
    Initiator cookie: 072B87A9ABF8BE59
    Responder cookie: 2B881EE9FB8FE02B
    Next payload: Hash (8)
    Version: 1.0
    Exchange type: Quick Mode (32)
    Flags: 0x01
        .... ...1 = Encrypted
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0xb1f94f66
    Length: 284
    Encrypted payload (256 bytes)

0000  00 00 00 00 00 12 00 09 5b b0 f5 3d 08 00 45 00   ........[..=..E.
0010  01 38 01 b6 00 00 40 11 39 37 a5 e3 f9 88 a5 e3   .8....@.97......
0020  f9 78 01 f4 01 f4 01 24 c9 07 07 2b 87 a9 ab f8   .x.....$...+....
0030  be 59 2b 88 1e e9 fb 8f e0 2b 08 10 20 01 b1 f9   .Y+......+.. ...
0040  4f 66 00 00 01 1c c1 3b ea 09 36 2a 9a 92 a2 26   Of.....;..6*...&
0050  ed a7 b8 6c 01 c0 ae 25 3f 36 5a 29 89 1b d8 ef   ...l...%?6Z)....
0060  81 cb c2 9e d5 66 3a 77 c4 93 e9 03 3d 00 19 f7   .....f:w....=...
0070  3f 17 eb ae cb a2 70 45 cb c6 e9 9f 1b 55 bb f9   ?.....pE.....U..
0080  2d 29 c0 f1 86 aa ba fa 1f f2 d4 24 84 65 d7 23   -).........$.e.#
0090  99 74 77 cc e7 41 fe a0 fa 3f 1e 30 f5 be 4b 16   .tw..A...?.0..K.
00a0  f1 e9 a9 ee d9 cb 0c bd 4b 7a 9b 8f 7e 10 d8 66   ........Kz..~..f
00b0  1a ad 25 77 f5 f1 d8 90 ee 3a ae 09 a7 f5 7f 28   ..%w.....:.....(
00c0  ab 87 20 cc 9a da 15 57 fc ef 86 97 73 98 7b 50   .. ....W....s.{P
00d0  99 c4 83 6d 5f 97 69 67 4d 44 a0 53 55 ec 17 18   ...m_.igMD.SU...
00e0  7a e3 b3 58 8c f7 e4 3c 6e 4b b9 45 d5 bf 5b e1   z..X...<nK.E..[.
00f0  17 5c 61 09 a0 e5 96 b2 dd 1e 6c 0e 5d 23 43 be   .\a.......l.]#C.
0100  f1 fd e4 94 a1 4b 60 24 3e 28 dc 94 5a 2e be 54   .....K`$>(..Z..T
0110  b8 53 24 c2 b6 09 c3 64 12 49 5c 26 38 3d 02 9b   .S$....d.I\&8=..
0120  b5 67 fc be 35 70 f9 f2 09 a8 83 ff 70 61 0a 1c   .g..5p......pa..
0130  45 be 0f 70 6d bc b6 03 52 ef 62 76 04 ae c9 02   E..pm...R.bv....
0140  64 e2 b4 67 be 0c                                 d..g..

Frame 9 (342 bytes on wire, 342 bytes captured)
    Arrival Time: Feb 12, 2010 14:20:30.161955000
    [Time delta from previous captured frame: 0.135201000 seconds]
    [Time delta from previous displayed frame: 0.135201000 seconds]
    [Time since reference or first frame: 1.697980000 seconds]
    Frame Number: 9
    Frame Length: 342 bytes
    Capture Length: 342 bytes
    [Frame is marked: False]
    [Protocols in frame: eth:ip:udp:isakmp]
Ethernet II, Src: 00:00:00:00:00:12 (00:00:00:00:00:12), Dst: 00:09:5b:b0:f5:3d (00:09:5b:b0:f5:3d)
    Destination: 00:09:5b:b0:f5:3d (00:09:5b:b0:f5:3d)
        Address: 00:09:5b:b0:f5:3d (00:09:5b:b0:f5:3d)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Source: 00:00:00:00:00:12 (00:00:00:00:00:12)
        Address: 00:00:00:00:00:12 (00:00:00:00:00:12)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.120 (165.227.249.120), Dst: 165.227.249.136 (165.227.249.136)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 328
    Identification: 0x0000 (0)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0xfadc [correct]
        [Good: True]
        [Bad : False]
    Source: 165.227.249.120 (165.227.249.120)
    Destination: 165.227.249.136 (165.227.249.136)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 308
    Checksum: 0x8d93 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
Internet Security Association and Key Management Protocol
    Initiator cookie: 072B87A9ABF8BE59
    Responder cookie: 2B881EE9FB8FE02B
    Next payload: Hash (8)
    Version: 1.0
    Exchange type: Quick Mode (32)
    Flags: 0x01
        .... ...1 = Encrypted
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0xb1f94f66
    Length: 300
    Encrypted payload (272 bytes)

0000  00 09 5b b0 f5 3d 00 00 00 00 00 12 08 00 45 00   ..[..=........E.
0010  01 48 00 00 40 00 40 11 fa dc a5 e3 f9 78 a5 e3   .H..@.@......x..
0020  f9 88 01 f4 01 f4 01 34 8d 93 07 2b 87 a9 ab f8   .......4...+....
0030  be 59 2b 88 1e e9 fb 8f e0 2b 08 10 20 01 b1 f9   .Y+......+.. ...
0040  4f 66 00 00 01 2c fc 55 8e 0c 91 ca 0a 60 cf 4c   Of...,.U.....`.L
0050  30 d9 d9 9d 9e ca ed 0c b5 4e 95 f9 3a b9 6d 88   0........N..:.m.
0060  34 6e d5 ce ad 9d d0 c9 78 69 8f 5a da 52 e5 f3   4n......xi.Z.R..
0070  2f 64 c6 7b a1 7a 05 dd da 5a fc 22 3d fc 01 24   /d.{.z...Z."=..$
0080  a8 07 ae 34 d7 3b bb a7 7e fa d5 23 c9 66 bf 72   ...4.;..~..#.f.r
0090  b3 cd b2 c5 e2 e6 a0 a2 c8 be a2 5e d1 8a 2e d8   ...........^....
00a0  3c c3 88 c1 9d c7 9e 5c 9a 5e 79 b0 a4 71 75 b6   <......\.^y..qu.
00b0  c2 f1 2c 29 c1 d6 91 51 98 57 85 ce e3 9c b3 8b   ..,)...Q.W......
00c0  50 24 85 a0 70 8b ef ef e8 3a 7c 55 bc 3d 9a 4c   P$..p....:|U.=.L
00d0  b5 99 ee f8 8e c9 df 4c ee 12 cc 8f 55 62 d1 96   .......L....Ub..
00e0  de 7b 29 10 dc fe 2c 46 67 da 04 c6 c0 b7 3b cb   .{)...,Fg.....;.
00f0  c6 cf e4 63 76 b2 a0 ee aa 01 cd 34 a1 4f 96 90   ...cv......4.O..
0100  d1 95 93 b3 ef 5f 32 dd 0d 92 17 08 ca fc 04 bc   ....._2.........
0110  0e f9 cf 0d 78 bf 9e 54 8d 68 e1 98 94 bc 97 05   ....x..T.h......
0120  28 2f a2 72 ed 6a 8e 8c 6c f1 9d 03 de e1 54 1b   (/.r.j..l.....T.
0130  15 dc c2 b4 47 eb 1b 10 01 6b 12 0a 39 09 de 8c   ....G....k..9...
0140  aa 05 21 09 89 75 6d 83 ed cf 24 4d 97 c1 98 08   ..!..um...$M....
0150  f0 51 33 05 2e 51                                 .Q3..Q

Frame 10 (94 bytes on wire, 94 bytes captured)
    Arrival Time: Feb 12, 2010 14:20:30.165030000
    [Time delta from previous captured frame: 0.003075000 seconds]
    [Time delta from previous displayed frame: 0.003075000 seconds]
    [Time since reference or first frame: 1.701055000 seconds]
    Frame Number: 10
    Frame Length: 94 bytes
    Capture Length: 94 bytes
    [Frame is marked: False]
    [Protocols in frame: eth:ip:udp:isakmp]
Ethernet II, Src: 00:09:5b:b0:f5:3d (00:09:5b:b0:f5:3d), Dst: 00:00:00:00:00:12 (00:00:00:00:00:12)
    Destination: 00:00:00:00:00:12 (00:00:00:00:00:12)
        Address: 00:00:00:00:00:12 (00:00:00:00:00:12)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Source: 00:09:5b:b0:f5:3d (00:09:5b:b0:f5:3d)
        Address: 00:09:5b:b0:f5:3d (00:09:5b:b0:f5:3d)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.136 (165.227.249.136), Dst: 165.227.249.120 (165.227.249.120)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 80
    Identification: 0x01b7 (439)
    Flags: 0x00
        0... = Reserved bit: Not set
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0x3a1e [correct]
        [Good: True]
        [Bad : False]
    Source: 165.227.249.136 (165.227.249.136)
    Destination: 165.227.249.120 (165.227.249.120)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 60
    Checksum: 0xc645 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
Internet Security Association and Key Management Protocol
    Initiator cookie: 072B87A9ABF8BE59
    Responder cookie: 2B881EE9FB8FE02B
    Next payload: Hash (8)
    Version: 1.0
    Exchange type: Quick Mode (32)
    Flags: 0x01
        .... ...1 = Encrypted
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0xb1f94f66
    Length: 52
    Encrypted payload (24 bytes)

0000  00 00 00 00 00 12 00 09 5b b0 f5 3d 08 00 45 00   ........[..=..E.
0010  00 50 01 b7 00 00 40 11 3a 1e a5 e3 f9 88 a5 e3   .P....@.:.......
0020  f9 78 01 f4 01 f4 00 3c c6 45 07 2b 87 a9 ab f8   .x.....<.E.+....
0030  be 59 2b 88 1e e9 fb 8f e0 2b 08 10 20 01 b1 f9   .Y+......+.. ...
0040  4f 66 00 00 00 34 c0 f1 9c 68 22 23 76 6d 99 4a   Of...4...h"#vm.J
0050  d1 30 d8 45 a8 e5 90 11 3d 8a 16 c6 e7 92         .0.E....=.....

Frame 11 (126 bytes on wire, 126 bytes captured)
    Arrival Time: Feb 12, 2010 14:20:33.694968000
    [Time delta from previous captured frame: 3.529938000 seconds]
    [Time delta from previous displayed frame: 3.529938000 seconds]
    [Time since reference or first frame: 5.230993000 seconds]
    Frame Number: 11
    Frame Length: 126 bytes
    Capture Length: 126 bytes
    [Frame is marked: False]
    [Protocols in frame: eth:ip:esp]
Ethernet II, Src: 00:09:5b:b0:f5:3d (00:09:5b:b0:f5:3d), Dst: 00:00:00:00:00:12 (00:00:00:00:00:12)
    Destination: 00:00:00:00:00:12 (00:00:00:00:00:12)
        Address: 00:00:00:00:00:12 (00:00:00:00:00:12)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Source: 00:09:5b:b0:f5:3d (00:09:5b:b0:f5:3d)
        Address: 00:09:5b:b0:f5:3d (00:09:5b:b0:f5:3d)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.136 (165.227.249.136), Dst: 165.227.249.120 (165.227.249.120)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 112
    Identification: 0x5b04 (23300)
    Flags: 0x00
        0... = Reserved bit: Not set
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 30
    Protocol: ESP (0x32)
    Header checksum: 0x0290 [correct]
        [Good: True]
        [Bad : False]
    Source: 165.227.249.136 (165.227.249.136)
    Destination: 165.227.249.120 (165.227.249.120)
Encapsulating Security Payload
    ESP SPI: 0x0694e67b
    ESP Sequence: 1

0000  00 00 00 00 00 12 00 09 5b b0 f5 3d 08 00 45 00   ........[..=..E.
0010  00 70 5b 04 00 00 1e 32 02 90 a5 e3 f9 88 a5 e3   .p[....2........
0020  f9 78 06 94 e6 7b 00 00 00 01 37 ca 17 7d c7 a3   .x...{....7..}..
0030  f3 4d 4b 42 73 1d cb 76 68 78 4e 27 56 1b bc 72   .MKBs..vhxN'V..r
0040  92 32 b8 e0 45 d8 3e 38 59 7a 05 42 7f fb 9e 2d   .2..E.>8Yz.B...-
0050  e6 2b e5 ab 5c 02 1f ec d5 99 c7 1d 2d ec 6b 5c   .+..\.......-.k\
0060  9c 99 f4 16 73 41 68 c2 7b d8 03 04 97 2b 25 13   ....sAh.{....+%.
0070  03 2d b5 8d 11 47 04 f7 98 33 55 bc 86 23         .-...G...3U..#

Frame 12 (126 bytes on wire, 126 bytes captured)
    Arrival Time: Feb 12, 2010 14:20:33.696071000
    [Time delta from previous captured frame: 0.001103000 seconds]
    [Time delta from previous displayed frame: 0.001103000 seconds]
    [Time since reference or first frame: 5.232096000 seconds]
    Frame Number: 12
    Frame Length: 126 bytes
    Capture Length: 126 bytes
    [Frame is marked: False]
    [Protocols in frame: eth:ip:esp]
Ethernet II, Src: 00:00:00:00:00:12 (00:00:00:00:00:12), Dst: 00:09:5b:b0:f5:3d (00:09:5b:b0:f5:3d)
    Destination: 00:09:5b:b0:f5:3d (00:09:5b:b0:f5:3d)
        Address: 00:09:5b:b0:f5:3d (00:09:5b:b0:f5:3d)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Source: 00:00:00:00:00:12 (00:00:00:00:00:12)
        Address: 00:00:00:00:00:12 (00:00:00:00:00:12)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.120 (165.227.249.120), Dst: 165.227.249.136 (165.227.249.136)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 112
    Identification: 0x4111 (16657)
    Flags: 0x00
        0... = Reserved bit: Not set
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: ESP (0x32)
    Header checksum: 0xfa82 [correct]
        [Good: True]
        [Bad : False]
    Source: 165.227.249.120 (165.227.249.120)
    Destination: 165.227.249.136 (165.227.249.136)
Encapsulating Security Payload
    ESP SPI: 0xc0570906
    ESP Sequence: 1

0000  00 09 5b b0 f5 3d 00 00 00 00 00 12 08 00 45 00   ..[..=........E.
0010  00 70 41 11 00 00 40 32 fa 82 a5 e3 f9 78 a5 e3   .pA...@2.....x..
0020  f9 88 c0 57 09 06 00 00 00 01 bf e2 69 6e c5 f6   ...W........in..
0030  ce 19 97 29 2e 16 6e 10 5c 23 5f 4d e7 08 11 f3   ...)..n.\#_M....
0040  a1 dd 8e 7c aa 65 a0 05 70 b0 57 26 27 28 7b d2   ...|.e..p.W&'({.
0050  b2 72 1b be da d6 24 28 f9 06 5f c9 95 63 f3 55   .r....$(.._..c.U
0060  b9 f3 66 f3 06 45 6d 4e 69 74 14 7c f6 88 f2 cf   ..f..EmNit.|....
0070  ee 9e 2a f6 49 1c 86 ee 15 ce ac d2 6f e8         ..*.I.......o.

Frame 13 (94 bytes on wire, 94 bytes captured)
    Arrival Time: Feb 12, 2010 14:20:34.394986000
    [Time delta from previous captured frame: 0.698915000 seconds]
    [Time delta from previous displayed frame: 0.698915000 seconds]
    [Time since reference or first frame: 5.931011000 seconds]
    Frame Number: 13
    Frame Length: 94 bytes
    Capture Length: 94 bytes
    [Frame is marked: False]
    [Protocols in frame: eth:ip:udp:isakmp]
Ethernet II, Src: 00:09:5b:b0:f5:3d (00:09:5b:b0:f5:3d), Dst: 00:00:00:00:00:12 (00:00:00:00:00:12)
    Destination: 00:00:00:00:00:12 (00:00:00:00:00:12)
        Address: 00:00:00:00:00:12 (00:00:00:00:00:12)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Source: 00:09:5b:b0:f5:3d (00:09:5b:b0:f5:3d)
        Address: 00:09:5b:b0:f5:3d (00:09:5b:b0:f5:3d)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.136 (165.227.249.136), Dst: 165.227.249.120 (165.227.249.120)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 80
    Identification: 0x01b8 (440)
    Flags: 0x00
        0... = Reserved bit: Not set
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0x3a1d [correct]
        [Good: True]
        [Bad : False]
    Source: 165.227.249.136 (165.227.249.136)
    Destination: 165.227.249.120 (165.227.249.120)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 60
    Checksum: 0xc645 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
Internet Security Association and Key Management Protocol
    Initiator cookie: 072B87A9ABF8BE59
    Responder cookie: 2B881EE9FB8FE02B
    Next payload: Hash (8)
    Version: 1.0
    Exchange type: Quick Mode (32)
    Flags: 0x01
        .... ...1 = Encrypted
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0xb1f94f66
    Length: 52
    Encrypted payload (24 bytes)

0000  00 00 00 00 00 12 00 09 5b b0 f5 3d 08 00 45 00   ........[..=..E.
0010  00 50 01 b8 00 00 40 11 3a 1d a5 e3 f9 88 a5 e3   .P....@.:.......
0020  f9 78 01 f4 01 f4 00 3c c6 45 07 2b 87 a9 ab f8   .x.....<.E.+....
0030  be 59 2b 88 1e e9 fb 8f e0 2b 08 10 20 01 b1 f9   .Y+......+.. ...
0040  4f 66 00 00 00 34 c0 f1 9c 68 22 23 76 6d 99 4a   Of...4...h"#vm.J
0050  d1 30 d8 45 a8 e5 90 11 3d 8a 16 c6 e7 92         .0.E....=.....