Frame 1 (222 bytes on wire, 222 bytes captured) Arrival Time: Aug 10, 2006 14:54:20.484617000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 222 bytes Capture Length: 222 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa), Dst: 00:0f:b5:5f:1b:8f (00:0f:b5:5f:1b:8f) Destination: 00:0f:b5:5f:1b:8f (00:0f:b5:5f:1b:8f) Source: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.100 (165.227.249.100) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 208 Identification: 0x02a4 (676) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf8b6 [correct] Good: True Bad : False Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.100 (165.227.249.100) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 188 Checksum: 0xa667 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x35794DD84FDE5D12 Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 180 Security Association payload Next payload: Vendor ID (13) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 40 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 32 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: unknown vendor ID: 0x4A131C81070358455C5728F20E95452F Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-03 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: RFC 3706 Detecting Dead IKE Peers (DPD) 0000 00 0f b5 5f 1b 8f 00 0c 29 96 e1 fa 08 00 45 00 ..._....).....E. 0010 00 d0 02 a4 00 00 80 11 f8 b6 a5 e3 f9 96 a5 e3 ................ 0020 f9 64 01 f4 01 f4 00 bc a6 67 35 79 4d d8 4f de .d.......g5yM.O. 0030 5d 12 00 00 00 00 00 00 00 00 01 10 02 00 00 00 ]............... 0040 00 00 00 00 00 b4 0d 00 00 34 00 00 00 01 00 00 .........4...... 0050 00 01 00 00 00 28 01 01 00 01 00 00 00 20 01 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 04 00 02 80 03 ................ 0070 00 01 80 0b 00 01 80 0c 70 80 0d 00 00 14 4a 13 ........p.....J. 0080 1c 81 07 03 58 45 5c 57 28 f2 0e 95 45 2f 0d 00 ....XE\W(...E/.. 0090 00 14 7d 94 19 a6 53 10 ca 6f 2c 17 9d 92 15 52 ..}...S..o,....R 00a0 9d 56 0d 00 00 14 90 cb 80 91 3e bb 69 6e 08 63 .V........>.in.c 00b0 81 b5 ec 42 7b 1f 0d 00 00 14 44 85 15 2d 18 b6 ...B{.....D..-.. 00c0 bb cd 0b e8 a8 46 95 79 dd cc 00 00 00 14 af ca .....F.y........ 00d0 d7 13 68 a1 f1 c9 6b 86 96 fc 77 57 01 00 ..h...k...wW.. Frame 2 (122 bytes on wire, 122 bytes captured) Arrival Time: Aug 10, 2006 14:54:20.490964000 Time delta from previous packet: 0.006347000 seconds Time since reference or first frame: 0.006347000 seconds Frame Number: 2 Packet Length: 122 bytes Capture Length: 122 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0f:b5:5f:1b:8f (00:0f:b5:5f:1b:8f), Dst: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Destination: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Source: 00:0f:b5:5f:1b:8f (00:0f:b5:5f:1b:8f) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.100 (165.227.249.100), Dst: 165.227.249.150 (165.227.249.150) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 108 Identification: 0x018e (398) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3a31 [correct] Good: True Bad : False Source: 165.227.249.100 (165.227.249.100) Destination: 165.227.249.150 (165.227.249.150) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 88 Checksum: 0xba74 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x35794DD84FDE5D12 Responder cookie: 0x6805EA573A34CEBA Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 80 Security Association payload Next payload: NONE (0) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 40 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 32 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) 0000 00 0c 29 96 e1 fa 00 0f b5 5f 1b 8f 08 00 45 00 ..)......_....E. 0010 00 6c 01 8e 00 00 40 11 3a 31 a5 e3 f9 64 a5 e3 .l....@.:1...d.. 0020 f9 96 01 f4 01 f4 00 58 ba 74 35 79 4d d8 4f de .......X.t5yM.O. 0030 5d 12 68 05 ea 57 3a 34 ce ba 01 10 02 00 00 00 ].h..W:4........ 0040 00 00 00 00 00 50 00 00 00 34 00 00 00 01 00 00 .....P...4...... 0050 00 01 00 00 00 28 01 01 00 01 00 00 00 20 01 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 04 00 02 80 03 ................ 0070 00 01 80 0b 00 01 80 0c 70 80 ........p. Frame 3 (222 bytes on wire, 222 bytes captured) Arrival Time: Aug 10, 2006 14:54:20.508789000 Time delta from previous packet: 0.017825000 seconds Time since reference or first frame: 0.024172000 seconds Frame Number: 3 Packet Length: 222 bytes Capture Length: 222 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa), Dst: 00:0f:b5:5f:1b:8f (00:0f:b5:5f:1b:8f) Destination: 00:0f:b5:5f:1b:8f (00:0f:b5:5f:1b:8f) Source: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.100 (165.227.249.100) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 208 Identification: 0x02a5 (677) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf8b5 [correct] Good: True Bad : False Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.100 (165.227.249.100) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 188 Checksum: 0x2cd9 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x35794DD84FDE5D12 Responder cookie: 0x6805EA573A34CEBA Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 180 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 20 Nonce Data 0000 00 0f b5 5f 1b 8f 00 0c 29 96 e1 fa 08 00 45 00 ..._....).....E. 0010 00 d0 02 a5 00 00 80 11 f8 b5 a5 e3 f9 96 a5 e3 ................ 0020 f9 64 01 f4 01 f4 00 bc 2c d9 35 79 4d d8 4f de .d......,.5yM.O. 0030 5d 12 68 05 ea 57 3a 34 ce ba 04 10 02 00 00 00 ].h..W:4........ 0040 00 00 00 00 00 b4 0a 00 00 84 1c 08 92 8f 2d 5d ..............-] 0050 9b ce a9 18 ff ca 82 0f 16 d8 18 33 5e 0e 03 e3 ...........3^... 0060 20 be 2c 23 54 ca 6a 88 85 ab 47 31 fa d2 ce e4 .,#T.j...G1.... 0070 92 46 d3 bf ae 38 e2 21 c0 54 73 73 a3 dd 53 40 .F...8.!.Tss..S@ 0080 d6 70 27 b7 75 15 ed de 7a 34 a4 5f 75 1a f3 8f .p'.u...z4._u... 0090 7a 75 cf 90 60 ae 6b 26 6a 8a 2c a1 09 d9 c9 2e zu..`.k&j.,..... 00a0 2b 52 07 e2 e2 6e f5 45 48 ec ca c6 e4 d0 46 3f +R...n.EH.....F? 00b0 20 d6 55 6c 86 da ab 91 dd 04 fc 94 80 c8 4c fa .Ul..........L. 00c0 9a 34 2f f0 1b b6 8c 4d 18 99 00 00 00 14 64 a7 .4/....M......d. 00d0 92 59 a2 6e 3a 4a a4 23 28 03 83 34 4a 4d .Y.n:J.#(..4JM Frame 4 (214 bytes on wire, 214 bytes captured) Arrival Time: Aug 10, 2006 14:54:21.879916000 Time delta from previous packet: 1.371127000 seconds Time since reference or first frame: 1.395299000 seconds Frame Number: 4 Packet Length: 214 bytes Capture Length: 214 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0f:b5:5f:1b:8f (00:0f:b5:5f:1b:8f), Dst: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Destination: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Source: 00:0f:b5:5f:1b:8f (00:0f:b5:5f:1b:8f) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.100 (165.227.249.100), Dst: 165.227.249.150 (165.227.249.150) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 200 Identification: 0x018f (399) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x39d4 [correct] Good: True Bad : False Source: 165.227.249.100 (165.227.249.100) Destination: 165.227.249.150 (165.227.249.150) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 180 Checksum: 0xc3cb [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x35794DD84FDE5D12 Responder cookie: 0x6805EA573A34CEBA Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 172 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 12 Nonce Data 0000 00 0c 29 96 e1 fa 00 0f b5 5f 1b 8f 08 00 45 00 ..)......_....E. 0010 00 c8 01 8f 00 00 40 11 39 d4 a5 e3 f9 64 a5 e3 ......@.9....d.. 0020 f9 96 01 f4 01 f4 00 b4 c3 cb 35 79 4d d8 4f de ..........5yM.O. 0030 5d 12 68 05 ea 57 3a 34 ce ba 04 10 02 00 00 00 ].h..W:4........ 0040 00 00 00 00 00 ac 0a 00 00 84 ba ff bb b3 9f 06 ................ 0050 63 c0 8e 38 bf 08 a2 8f 6f 1c 78 97 2c 60 47 7d c..8....o.x.,`G} 0060 6d c9 0f 16 63 e4 47 31 37 30 9f b4 16 13 02 61 m...c.G170.....a 0070 f2 29 70 f6 03 84 6f bd 18 c8 d0 8f c5 82 4e 40 .)p...o.......N@ 0080 f7 a3 07 18 79 60 da 74 97 32 35 18 a4 65 95 ea ....y`.t.25..e.. 0090 1c 11 ea 7c 16 bc be 0c 4d 7e b8 d3 50 28 70 94 ...|....M~..P(p. 00a0 f5 cc 17 21 9e ef ef 4e 98 a8 01 b0 6a 2a d2 8d ...!...N....j*.. 00b0 ba d5 d2 a4 83 70 75 3c e1 8f 88 3e d4 a0 98 2c .....pu<...>..., 00c0 27 96 9f 77 79 01 c0 b5 1f 69 00 00 00 0c ac 17 '..wy....i...... 00d0 3c b7 cc 58 0b a5 <..X.. Frame 5 (142 bytes on wire, 142 bytes captured) Arrival Time: Aug 10, 2006 14:54:21.908020000 Time delta from previous packet: 0.028104000 seconds Time since reference or first frame: 1.423403000 seconds Frame Number: 5 Packet Length: 142 bytes Capture Length: 142 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa), Dst: 00:0f:b5:5f:1b:8f (00:0f:b5:5f:1b:8f) Destination: 00:0f:b5:5f:1b:8f (00:0f:b5:5f:1b:8f) Source: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.100 (165.227.249.100) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 128 Identification: 0x02a9 (681) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf901 [correct] Good: True Bad : False Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.100 (165.227.249.100) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 108 Checksum: 0x3fb3 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x35794DD84FDE5D12 Responder cookie: 0x6805EA573A34CEBA Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 100 Encrypted payload (72 bytes) 0000 00 0f b5 5f 1b 8f 00 0c 29 96 e1 fa 08 00 45 00 ..._....).....E. 0010 00 80 02 a9 00 00 80 11 f9 01 a5 e3 f9 96 a5 e3 ................ 0020 f9 64 01 f4 01 f4 00 6c 3f b3 35 79 4d d8 4f de .d.....l?.5yM.O. 0030 5d 12 68 05 ea 57 3a 34 ce ba 05 10 02 01 00 00 ].h..W:4........ 0040 00 00 00 00 00 64 4d a4 2c 65 60 e3 eb 1a 35 b5 .....dM.,e`...5. 0050 39 9f 09 8c e7 91 41 fe fa 8f 63 3a 11 c7 60 ec 9.....A...c:..`. 0060 0d 12 53 98 f8 ac 9d a9 5f c2 f0 87 06 72 66 8d ..S....._....rf. 0070 99 d5 c8 f5 ec c0 91 60 55 5d 16 7c 62 56 2f 64 .......`U].|bV/d 0080 a5 f5 df 42 d4 03 4a 57 5c 0e 28 87 f5 c9 ...B..JW\.(... Frame 6 (110 bytes on wire, 110 bytes captured) Arrival Time: Aug 10, 2006 14:54:23.631281000 Time delta from previous packet: 1.723261000 seconds Time since reference or first frame: 3.146664000 seconds Frame Number: 6 Packet Length: 110 bytes Capture Length: 110 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0f:b5:5f:1b:8f (00:0f:b5:5f:1b:8f), Dst: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Destination: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Source: 00:0f:b5:5f:1b:8f (00:0f:b5:5f:1b:8f) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.100 (165.227.249.100), Dst: 165.227.249.150 (165.227.249.150) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0x0191 (401) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3a3a [correct] Good: True Bad : False Source: 165.227.249.100 (165.227.249.100) Destination: 165.227.249.150 (165.227.249.150) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 76 Checksum: 0x23ac [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x35794DD84FDE5D12 Responder cookie: 0x6805EA573A34CEBA Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 68 Encrypted payload (40 bytes) 0000 00 0c 29 96 e1 fa 00 0f b5 5f 1b 8f 08 00 45 00 ..)......_....E. 0010 00 60 01 91 00 00 40 11 3a 3a a5 e3 f9 64 a5 e3 .`....@.::...d.. 0020 f9 96 01 f4 01 f4 00 4c 23 ac 35 79 4d d8 4f de .......L#.5yM.O. 0030 5d 12 68 05 ea 57 3a 34 ce ba 05 10 02 01 00 00 ].h..W:4........ 0040 00 00 00 00 00 44 bb e5 b0 48 bc 34 f1 4d 40 87 .....D...H.4.M@. 0050 4e 2e c6 89 da 6f 20 61 ec b1 07 cb 4f 86 8c 84 N....o a....O... 0060 37 a1 20 b2 c2 57 1c eb 1c ec 6a 45 0d 0b 7. ..W....jE.. Frame 7 (334 bytes on wire, 334 bytes captured) Arrival Time: Aug 10, 2006 14:54:23.658022000 Time delta from previous packet: 0.026741000 seconds Time since reference or first frame: 3.173405000 seconds Frame Number: 7 Packet Length: 334 bytes Capture Length: 334 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa), Dst: 00:0f:b5:5f:1b:8f (00:0f:b5:5f:1b:8f) Destination: 00:0f:b5:5f:1b:8f (00:0f:b5:5f:1b:8f) Source: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.100 (165.227.249.100) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 320 Identification: 0x02be (702) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf82c [correct] Good: True Bad : False Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.100 (165.227.249.100) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 300 Checksum: 0xa2e4 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x35794DD84FDE5D12 Responder cookie: 0x6805EA573A34CEBA Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x6FA333E1 Length: 292 Encrypted payload (264 bytes) 0000 00 0f b5 5f 1b 8f 00 0c 29 96 e1 fa 08 00 45 00 ..._....).....E. 0010 01 40 02 be 00 00 80 11 f8 2c a5 e3 f9 96 a5 e3 .@.......,...... 0020 f9 64 01 f4 01 f4 01 2c a2 e4 35 79 4d d8 4f de .d.....,..5yM.O. 0030 5d 12 68 05 ea 57 3a 34 ce ba 08 10 20 01 6f a3 ].h..W:4.... .o. 0040 33 e1 00 00 01 24 f7 fc 02 fb 01 1e 8c 27 2c 70 3....$.......',p 0050 0a ce 41 c8 f8 65 59 34 1b 57 6f 35 b6 c9 51 4b ..A..eY4.Wo5..QK 0060 d6 3c de bf 27 c9 c2 f2 79 7f df 2d 9f 22 57 8d .<..'...y..-."W. 0070 34 30 1f dd 6a da 61 bd 97 ec ce 1a 25 c6 c3 fc 40..j.a.....%... 0080 59 96 c1 b9 ed b5 3a 76 49 dd 4f b0 18 63 d3 51 Y.....:vI.O..c.Q 0090 53 d1 b7 17 df 8c f3 50 ba 15 86 22 64 00 21 a8 S......P..."d.!. 00a0 0d 95 52 ff f3 9a 85 ea d3 30 94 1b d0 b8 a1 9a ..R......0...... 00b0 aa 7e 9f 7d cf 56 ac 6d f4 8e d1 f5 db 2c 54 8f .~.}.V.m.....,T. 00c0 32 8b 3b ab ad b3 38 c0 b4 c4 d4 b9 fe 63 23 36 2.;...8......c#6 00d0 b6 63 c8 bd a6 57 24 da 41 30 5e aa 54 e6 92 4a .c...W$.A0^.T..J 00e0 7b 12 71 8b 14 48 ea 01 46 a0 cf 06 73 e0 e6 28 {.q..H..F...s..( 00f0 27 fc 38 41 c1 ee c8 1e 49 6a 75 59 49 c1 ab 73 '.8A....IjuYI..s 0100 90 32 d2 17 04 ba 3b d7 28 74 10 85 f9 f7 de 69 .2....;.(t.....i 0110 5b 59 c7 54 27 ec f6 2b f5 05 35 a0 78 71 a8 fe [Y.T'..+..5.xq.. 0120 35 8e 6e 8f 30 ca 9e c1 ff bf 6d cd b2 63 e8 2f 5.n.0.....m..c./ 0130 45 74 44 46 76 b5 a0 9f c3 e9 f9 24 04 8c d5 71 EtDFv......$...q 0140 91 01 a6 8b 34 e3 1c 2e 9f f5 3f bd 77 4e ....4.....?.wN Frame 8 (318 bytes on wire, 318 bytes captured) Arrival Time: Aug 10, 2006 14:54:25.070062000 Time delta from previous packet: 1.412040000 seconds Time since reference or first frame: 4.585445000 seconds Frame Number: 8 Packet Length: 318 bytes Capture Length: 318 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0f:b5:5f:1b:8f (00:0f:b5:5f:1b:8f), Dst: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Destination: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Source: 00:0f:b5:5f:1b:8f (00:0f:b5:5f:1b:8f) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.100 (165.227.249.100), Dst: 165.227.249.150 (165.227.249.150) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 304 Identification: 0x0196 (406) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3965 [correct] Good: True Bad : False Source: 165.227.249.100 (165.227.249.100) Destination: 165.227.249.150 (165.227.249.150) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 284 Checksum: 0xaac7 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x35794DD84FDE5D12 Responder cookie: 0x6805EA573A34CEBA Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x6FA333E1 Length: 276 Encrypted payload (248 bytes) 0000 00 0c 29 96 e1 fa 00 0f b5 5f 1b 8f 08 00 45 00 ..)......_....E. 0010 01 30 01 96 00 00 40 11 39 65 a5 e3 f9 64 a5 e3 .0....@.9e...d.. 0020 f9 96 01 f4 01 f4 01 1c aa c7 35 79 4d d8 4f de ..........5yM.O. 0030 5d 12 68 05 ea 57 3a 34 ce ba 08 10 20 01 6f a3 ].h..W:4.... .o. 0040 33 e1 00 00 01 14 70 50 b8 1f 0a ea 71 67 82 4e 3.....pP....qg.N 0050 c1 6e 2f b5 5f ee ee 89 61 16 af 68 85 f8 4a db .n/._...a..h..J. 0060 87 ea 9b 7f e1 7a 56 7d 89 f2 b3 c1 57 cb 23 76 .....zV}....W.#v 0070 8f cb 27 ab 88 f1 d4 8a 22 9e 18 c6 f3 9b b7 35 ..'....."......5 0080 c5 97 88 39 76 1a ce 98 dd 22 0d 18 12 a5 f7 7d ...9v....".....} 0090 b2 5a b9 b4 77 fb 7d 6d 4c 67 fb ef 74 63 0e 17 .Z..w.}mLg..tc.. 00a0 ad 42 86 e8 81 de 3c 08 e4 09 94 3b f7 96 6b c7 .B....<....;..k. 00b0 da 64 52 5c c5 e7 f2 f1 9d c0 90 f3 66 a8 29 ef .dR\........f.). 00c0 7b 8a 51 84 ea d2 e4 5b 56 7f 86 23 3e 32 44 06 {.Q....[V..#>2D. 00d0 0a 77 4b 32 38 41 e7 dd 12 f3 ac 66 03 4d 0d 05 .wK28A.....f.M.. 00e0 ed d7 c6 ba a2 8e 03 ab 4d 00 41 e6 66 3b ea 97 ........M.A.f;.. 00f0 a0 5b d0 25 ed 28 68 bf 06 c8 9c c1 db 10 14 0a .[.%.(h......... 0100 d2 66 94 e3 2a 21 ad 1f 01 b4 7b ec 96 ca 43 d0 .f..*!....{...C. 0110 98 07 f0 dc bd 5d 2c d6 5a c2 04 4b b9 f9 d9 b7 .....],.Z..K.... 0120 80 db 38 8a 7f f1 a4 05 7e 41 4f fa 65 ea d2 d0 ..8.....~AO.e... 0130 ab 1c b5 f4 8b fb 4a 39 79 0f 23 bb b1 9d ......J9y.#... Frame 9 (102 bytes on wire, 102 bytes captured) Arrival Time: Aug 10, 2006 14:54:25.170865000 Time delta from previous packet: 0.100803000 seconds Time since reference or first frame: 4.686248000 seconds Frame Number: 9 Packet Length: 102 bytes Capture Length: 102 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa), Dst: 00:0f:b5:5f:1b:8f (00:0f:b5:5f:1b:8f) Destination: 00:0f:b5:5f:1b:8f (00:0f:b5:5f:1b:8f) Source: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.100 (165.227.249.100) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 88 Identification: 0x02bf (703) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf913 [correct] Good: True Bad : False Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.100 (165.227.249.100) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 68 Checksum: 0x6165 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x35794DD84FDE5D12 Responder cookie: 0x6805EA573A34CEBA Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x6FA333E1 Length: 60 Encrypted payload (32 bytes) 0000 00 0f b5 5f 1b 8f 00 0c 29 96 e1 fa 08 00 45 00 ..._....).....E. 0010 00 58 02 bf 00 00 80 11 f9 13 a5 e3 f9 96 a5 e3 .X.............. 0020 f9 64 01 f4 01 f4 00 44 61 65 35 79 4d d8 4f de .d.....Dae5yM.O. 0030 5d 12 68 05 ea 57 3a 34 ce ba 08 10 20 01 6f a3 ].h..W:4.... .o. 0040 33 e1 00 00 00 3c 73 61 20 45 38 ac 0c 4d 19 51 3....\+.D.. 0050 92 da 9b 0c fd 90 88 8c 81 79 b0 b5 84 87 bc 6e .........y.....n 0060 a7 b4 b2 d6 3d 58 b4 88 fe b2 7f 8c 19 fe 62 03 ....=X........b. 0070 61 05 3c 12 a5 a4 5b 20 7c 5c 7e 7e f6 96 c6 1c a.<...[ |\~~.... 0080 1f 40 c6 40 c5 27 6b f7 4a a2 24 70 8d e1 4d e1 .@.@.'k.J.$p..M. 0090 29 b4 5d 9b 2c 0a e9 f5 7d d8 63 59 5e 1d e4 c7 ).].,...}.cY^... 00a0 93 5e f3 7e d3 f1 d4 2a 8c 24 c3 14 5c e7 69 09 .^.~...*.$..\.i. 00b0 ce ba b2 32 2d 4b 43 20 80 2f e0 a2 ae ee 5e ce ...2-KC ./....^. 00c0 c9 c1 e4 31 14 46 34 f2 5c 02 e4 4e d9 6b cf 7d ...1.F4.\..N.k.} 00d0 8c b8 56 00 a7 aa d1 81 8e a1 54 12 f7 ff a3 f3 ..V.......T..... 00e0 24 9c 6d c1 20 6a f7 58 25 d9 11 90 9f 72 ec b9 $.m. j.X%....r.. 00f0 8a dd 71 e7 f8 cf 00 fe 87 28 c6 78 8d 4e 09 3b ..q......(.x.N.; 0100 50 45 df a9 3f ed a7 7e 94 19 64 1c b9 20 93 59 PE..?..~..d.. .Y 0110 6d cc 6a 25 f0 0c 6f 76 e8 a0 13 7f 05 cb c1 9f m.j%..ov........ 0120 03 9d a2 df 24 d5 93 26 81 aa 11 ef 67 23 7f 99 ....$..&....g#.. 0130 15 93 a9 7d d1 0c 76 69 b9 72 05 b0 34 10 7c 39 ...}..vi.r..4.|9 0140 23 02 75 a0 5d e4 01 4f e6 35 30 85 ed 13 93 ad #.u.]..O.50..... 0150 62 36 a1 7d 65 ee 91 03 f3 85 1a 4e 67 ac d7 6f b6.}e......Ng..o 0160 f6 58 6a 1c bf c0 97 45 11 31 39 2f 4b d9 cc 58 .Xj....E.19/K..X 0170 5b 3a b2 52 95 70 89 e8 4c d7 a3 9f e7 c7 32 41 [:.R.p..L.....2A 0180 5b 08 cb 12 f8 cb 38 3b 3e 98 f8 ac 1b 67 [.....8;>....g Frame 11 (398 bytes on wire, 398 bytes captured) Arrival Time: Aug 10, 2006 14:54:31.811207000 Time delta from previous packet: 0.008888000 seconds Time since reference or first frame: 11.326590000 seconds Frame Number: 11 Packet Length: 398 bytes Capture Length: 398 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:0f:b5:5f:1b:8f (00:0f:b5:5f:1b:8f), Dst: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Destination: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Source: 00:0f:b5:5f:1b:8f (00:0f:b5:5f:1b:8f) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.100 (165.227.249.100), Dst: 165.227.249.150 (165.227.249.150) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 384 Identification: 0x6911 (26897) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 30 Protocol: ESP (0x32) Header checksum: 0xf378 [correct] Good: True Bad : False Source: 165.227.249.100 (165.227.249.100) Destination: 165.227.249.150 (165.227.249.150) Encapsulating Security Payload SPI: 0x7aa4dabf Sequence: 1 Data (356 bytes) 0000 00 0c 29 96 e1 fa 00 0f b5 5f 1b 8f 08 00 45 00 ..)......_....E. 0010 01 80 69 11 00 00 1e 32 f3 78 a5 e3 f9 64 a5 e3 ..i....2.x...d.. 0020 f9 96 7a a4 da bf 00 00 00 01 62 5c f8 4f 2c b3 ..z.......b\.O,. 0030 89 5c 56 0b cf 05 9d 19 54 ec 3f 70 69 56 6c a6 .\V.....T.?piVl. 0040 08 96 b5 0b f1 c3 94 99 da 66 21 d3 78 c5 ad 8e .........f!.x... 0050 f7 74 97 cb e8 79 02 f4 58 e6 59 cb 0e 55 fb d7 .t...y..X.Y..U.. 0060 d9 c7 ce 65 17 c6 ac 24 db 1e 66 05 df e7 f0 b1 ...e...$..f..... 0070 75 8f 04 43 31 3a 5f 98 46 68 21 46 af 9a 85 7c u..C1:_.Fh!F...| 0080 3d c4 ca 3c ff 6e 71 b9 72 d3 f5 d3 15 d4 c6 d8 =..<.nq.r....... 0090 3f a5 35 97 d4 da 6c 3a 36 2d 43 b5 c8 86 51 13 ?.5...l:6-C...Q. 00a0 a0 78 3a fb 8e bd 52 cc 27 ca a1 a0 14 70 1c 21 .x:...R.'....p.! 00b0 61 aa 32 57 7f 9f 57 3a f8 92 cf 99 86 b0 ab 6d a.2W..W:.......m 00c0 0f cb 9f b5 2c 67 31 a0 20 88 6c 8a 46 ae 97 01 ....,g1. .l.F... 00d0 76 df 18 87 7e 9c 8e 4b 2f 12 97 a1 27 56 f9 1d v...~..K/...'V.. 00e0 3c 81 5b 3f 91 38 ef f5 50 c9 ba 9d 67 d9 b5 44 <.[?.8..P...g..D 00f0 ab 6f 76 21 2e 59 21 1c 52 37 88 ac df 4d f0 a9 .ov!.Y!.R7...M.. 0100 98 0c 3c 6b da c2 54 5c c4 cf a5 fa 0c d0 d7 95 ... 0120 46 43 48 3a af cf 97 b1 c8 37 51 e6 b7 f0 06 2f FCH:.....7Q..../ 0130 71 b8 25 01 42 01 73 c5 6f cc 71 9a c3 b1 5c 45 q.%.B.s.o.q...\E 0140 f1 66 b7 a5 dd 94 5e 4a 7e d8 42 43 6c 20 55 1d .f....^J~.BCl U. 0150 e4 fe e2 6c 13 c7 8c 17 af b3 e4 df 71 f1 25 3c ...l........q.%< 0160 f2 e4 a0 b3 b6 21 54 03 3e c7 30 2e 91 7b 9d fd .....!T.>.0..{.. 0170 ca ad 69 bb 77 17 40 be 56 25 07 7f 9e 75 17 9b ..i.w.@.V%...u.. 0180 c6 3d 75 71 5b 09 40 10 9d a4 a6 11 c9 ff .=uq[.@....... Frame 12 (318 bytes on wire, 318 bytes captured) Arrival Time: Aug 10, 2006 14:54:32.071428000 Time delta from previous packet: 0.260221000 seconds Time since reference or first frame: 11.586811000 seconds Frame Number: 12 Packet Length: 318 bytes Capture Length: 318 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0f:b5:5f:1b:8f (00:0f:b5:5f:1b:8f), Dst: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Destination: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Source: 00:0f:b5:5f:1b:8f (00:0f:b5:5f:1b:8f) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.100 (165.227.249.100), Dst: 165.227.249.150 (165.227.249.150) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 304 Identification: 0x0198 (408) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3963 [correct] Good: True Bad : False Source: 165.227.249.100 (165.227.249.100) Destination: 165.227.249.150 (165.227.249.150) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 284 Checksum: 0xaac7 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x35794DD84FDE5D12 Responder cookie: 0x6805EA573A34CEBA Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x6FA333E1 Length: 276 Encrypted payload (248 bytes) 0000 00 0c 29 96 e1 fa 00 0f b5 5f 1b 8f 08 00 45 00 ..)......_....E. 0010 01 30 01 98 00 00 40 11 39 63 a5 e3 f9 64 a5 e3 .0....@.9c...d.. 0020 f9 96 01 f4 01 f4 01 1c aa c7 35 79 4d d8 4f de ..........5yM.O. 0030 5d 12 68 05 ea 57 3a 34 ce ba 08 10 20 01 6f a3 ].h..W:4.... .o. 0040 33 e1 00 00 01 14 70 50 b8 1f 0a ea 71 67 82 4e 3.....pP....qg.N 0050 c1 6e 2f b5 5f ee ee 89 61 16 af 68 85 f8 4a db .n/._...a..h..J. 0060 87 ea 9b 7f e1 7a 56 7d 89 f2 b3 c1 57 cb 23 76 .....zV}....W.#v 0070 8f cb 27 ab 88 f1 d4 8a 22 9e 18 c6 f3 9b b7 35 ..'....."......5 0080 c5 97 88 39 76 1a ce 98 dd 22 0d 18 12 a5 f7 7d ...9v....".....} 0090 b2 5a b9 b4 77 fb 7d 6d 4c 67 fb ef 74 63 0e 17 .Z..w.}mLg..tc.. 00a0 ad 42 86 e8 81 de 3c 08 e4 09 94 3b f7 96 6b c7 .B....<....;..k. 00b0 da 64 52 5c c5 e7 f2 f1 9d c0 90 f3 66 a8 29 ef .dR\........f.). 00c0 7b 8a 51 84 ea d2 e4 5b 56 7f 86 23 3e 32 44 06 {.Q....[V..#>2D. 00d0 0a 77 4b 32 38 41 e7 dd 12 f3 ac 66 03 4d 0d 05 .wK28A.....f.M.. 00e0 ed d7 c6 ba a2 8e 03 ab 4d 00 41 e6 66 3b ea 97 ........M.A.f;.. 00f0 a0 5b d0 25 ed 28 68 bf 06 c8 9c c1 db 10 14 0a .[.%.(h......... 0100 d2 66 94 e3 2a 21 ad 1f 01 b4 7b ec 96 ca 43 d0 .f..*!....{...C. 0110 98 07 f0 dc bd 5d 2c d6 5a c2 04 4b b9 f9 d9 b7 .....],.Z..K.... 0120 80 db 38 8a 7f f1 a4 05 7e 41 4f fa 65 ea d2 d0 ..8.....~AO.e... 0130 ab 1c b5 f4 8b fb 4a 39 79 0f 23 bb b1 9d ......J9y.#... Frame 13 (398 bytes on wire, 398 bytes captured) Arrival Time: Aug 10, 2006 14:54:34.938756000 Time delta from previous packet: 2.867328000 seconds Time since reference or first frame: 14.454139000 seconds Frame Number: 13 Packet Length: 398 bytes Capture Length: 398 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa), Dst: 00:0f:b5:5f:1b:8f (00:0f:b5:5f:1b:8f) Destination: 00:0f:b5:5f:1b:8f (00:0f:b5:5f:1b:8f) Source: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.100 (165.227.249.100) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 384 Identification: 0x02c2 (706) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: ESP (0x32) Header checksum: 0xf7c7 [correct] Good: True Bad : False Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.100 (165.227.249.100) Encapsulating Security Payload SPI: 0x852a4408 Sequence: 2 Data (356 bytes) 0000 00 0f b5 5f 1b 8f 00 0c 29 96 e1 fa 08 00 45 00 ..._....).....E. 0010 01 80 02 c2 00 00 80 32 f7 c7 a5 e3 f9 96 a5 e3 .......2........ 0020 f9 64 85 2a 44 08 00 00 00 02 e5 ab de b8 db d5 .d.*D........... 0030 cb 75 6b c2 61 17 cb 54 bd 92 71 5e 96 9e 46 e4 .uk.a..T..q^..F. 0040 01 46 26 3b 83 82 18 89 d7 06 06 89 fc 30 f4 43 .F&;.........0.C 0050 a7 79 df 9e fd 5b 64 a2 13 1a 40 62 79 f9 00 b1 .y...[d...@by... 0060 01 ff 65 1c 15 18 e1 99 45 9d 74 00 69 5c 2b f0 ..e.....E.t.i\+. 0070 a4 e3 ee 02 78 bd bf 55 98 8c ae a3 b0 2f bb 7d ....x..U...../.} 0080 cd 95 d1 34 3d 5e 9f 5e f3 a8 f4 5e d9 85 77 f9 ...4=^.^...^..w. 0090 d3 59 a8 d7 58 3f b9 64 34 9f da fc c5 d4 a9 fc .Y..X?.d4....... 00a0 5a b7 af db b0 02 83 c9 b6 c9 4c f8 da f9 e6 9c Z.........L..... 00b0 f6 cb 1d 22 c8 09 91 ab 3c 9f d4 dc 13 e2 10 a6 ..."....<....... 00c0 4e d0 d1 ec 6a d1 0d af b3 76 20 c3 89 d7 fc 85 N...j....v ..... 00d0 c8 3c 6a 93 12 74 33 fc 49 71 31 68 cc 88 82 6e ......-.L..ApMz 0130 bb 7d 8a 3f f3 09 a2 37 85 15 2f de 87 8d 6a 39 .}.?...7../...j9 0140 21 c4 8d 34 19 35 01 ba bb f0 35 49 60 76 56 41 !..4.5....5I`vVA 0150 e3 a0 b5 ec 1d d2 c7 e4 03 49 49 c1 58 17 db 68 .........II.X..h 0160 30 9e 57 ec 92 01 0b af 97 72 a3 e1 de 4b f6 86 0.W......r...K.. 0170 79 04 70 ea cc a5 04 e6 f6 36 b1 6f 75 0f f0 c5 y.p......6.ou... 0180 5d 8f 27 f6 c7 58 8f ed c8 3d f0 52 53 cf ].'..X...=.RS. Frame 14 (398 bytes on wire, 398 bytes captured) Arrival Time: Aug 10, 2006 14:54:34.951599000 Time delta from previous packet: 0.012843000 seconds Time since reference or first frame: 14.466982000 seconds Frame Number: 14 Packet Length: 398 bytes Capture Length: 398 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:0f:b5:5f:1b:8f (00:0f:b5:5f:1b:8f), Dst: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Destination: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Source: 00:0f:b5:5f:1b:8f (00:0f:b5:5f:1b:8f) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.100 (165.227.249.100), Dst: 165.227.249.150 (165.227.249.150) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 384 Identification: 0x0ee3 (3811) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 30 Protocol: ESP (0x32) Header checksum: 0x4da7 [correct] Good: True Bad : False Source: 165.227.249.100 (165.227.249.100) Destination: 165.227.249.150 (165.227.249.150) Encapsulating Security Payload SPI: 0x7aa4dabf Sequence: 2 Data (356 bytes) 0000 00 0c 29 96 e1 fa 00 0f b5 5f 1b 8f 08 00 45 00 ..)......_....E. 0010 01 80 0e e3 00 00 1e 32 4d a7 a5 e3 f9 64 a5 e3 .......2M....d.. 0020 f9 96 7a a4 da bf 00 00 00 02 07 7f 9e 75 17 9b ..z..........u.. 0030 c6 3d 49 1b 67 2a 4d 04 a8 d8 ed ec 0c 33 86 f3 .=I.g*M......3.. 0040 46 89 56 14 43 23 fb 77 6b e0 aa 6c 6c 6f 3e 57 F.V.C#.wk..llo>W 0050 ac fc 69 75 ac b1 19 d8 2d 52 85 85 0f 6b a5 31 ..iu....-R...k.1 0060 c0 96 fa 9a 43 d2 f1 0a b8 ea 6a e6 84 11 59 29 ....C.....j...Y) 0070 30 11 42 e7 85 c2 cb b4 b5 d3 32 ed a0 ba 1c 7b 0.B.......2....{ 0080 9d 49 89 0b da 0e 06 75 33 c9 22 25 58 7d df ba .I.....u3."%X}.. 0090 89 4f 0b aa f5 16 47 a1 cc 87 c6 99 8c c3 8c 15 .O....G......... 00a0 3c 5d 02 61 cb 4d 37 97 61 af 48 8e 29 86 1a 1d <].a.M7.a.H.)... 00b0 82 bc dd 89 63 53 fa 66 49 10 5d 53 eb 9f f0 eb ....cS.fI.]S.... 00c0 ef 0d da a2 99 66 3e 55 b4 6d ad 13 8a a4 f7 cf .....f>U.m...... 00d0 95 45 e2 be ae 84 aa 81 7d 43 49 ac e5 df c5 dc .E......}CI..... 00e0 52 99 54 01 27 01 dd f6 6b 53 d6 5a b4 5d 3e 1d R.T.'...kS.Z.]>. 00f0 ab 90 00 96 e1 76 cc 74 8c cd 73 11 d3 36 4c 1f .....v.t..s..6L. 0100 5f e1 cf a1 ea 6e 53 ec 80 b6 9f 37 97 ee b1 de _....nS....7.... 0110 73 dd 58 09 3e 4f 58 7e 9b 59 ef 31 74 8b f8 b2 s.X.>OX~.Y.1t... 0120 fe 22 b0 1b 4a 2a 6a d2 67 8f f4 c9 05 52 cb b2 ."..J*j.g....R.. 0130 1f 64 af bb ef 98 f5 b1 0d 0a ea 9d 52 4e 75 d2 .d..........RNu. 0140 42 fa e8 84 60 d5 0e 8b bf 0d 9d 20 c2 c3 04 5f B...`...... ..._ 0150 31 bd 72 6b 0f f8 2e 6b d9 3e 9a 7c a2 ee 30 3e 1.rk...k.>.|..0> 0160 e2 09 b9 23 0c 91 d4 58 d2 50 3d c0 75 1b 59 8b ...#...X.P=.u.Y. 0170 a4 61 de f6 72 f6 9a 3f 27 61 e0 40 79 ca 0c 15 .a..r..?'a.@y... 0180 ac b8 78 46 49 33 2a 18 1c be 79 9e 00 2f ..xFI3*...y../ Frame 15 (318 bytes on wire, 318 bytes captured) Arrival Time: Aug 10, 2006 14:54:37.136975000 Time delta from previous packet: 2.185376000 seconds Time since reference or first frame: 16.652358000 seconds Frame Number: 15 Packet Length: 318 bytes Capture Length: 318 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0f:b5:5f:1b:8f (00:0f:b5:5f:1b:8f), Dst: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Destination: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Source: 00:0f:b5:5f:1b:8f (00:0f:b5:5f:1b:8f) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.100 (165.227.249.100), Dst: 165.227.249.150 (165.227.249.150) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 304 Identification: 0x0199 (409) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3962 [correct] Good: True Bad : False Source: 165.227.249.100 (165.227.249.100) Destination: 165.227.249.150 (165.227.249.150) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 284 Checksum: 0xaac7 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x35794DD84FDE5D12 Responder cookie: 0x6805EA573A34CEBA Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x6FA333E1 Length: 276 Encrypted payload (248 bytes) 0000 00 0c 29 96 e1 fa 00 0f b5 5f 1b 8f 08 00 45 00 ..)......_....E. 0010 01 30 01 99 00 00 40 11 39 62 a5 e3 f9 64 a5 e3 .0....@.9b...d.. 0020 f9 96 01 f4 01 f4 01 1c aa c7 35 79 4d d8 4f de ..........5yM.O. 0030 5d 12 68 05 ea 57 3a 34 ce ba 08 10 20 01 6f a3 ].h..W:4.... .o. 0040 33 e1 00 00 01 14 70 50 b8 1f 0a ea 71 67 82 4e 3.....pP....qg.N 0050 c1 6e 2f b5 5f ee ee 89 61 16 af 68 85 f8 4a db .n/._...a..h..J. 0060 87 ea 9b 7f e1 7a 56 7d 89 f2 b3 c1 57 cb 23 76 .....zV}....W.#v 0070 8f cb 27 ab 88 f1 d4 8a 22 9e 18 c6 f3 9b b7 35 ..'....."......5 0080 c5 97 88 39 76 1a ce 98 dd 22 0d 18 12 a5 f7 7d ...9v....".....} 0090 b2 5a b9 b4 77 fb 7d 6d 4c 67 fb ef 74 63 0e 17 .Z..w.}mLg..tc.. 00a0 ad 42 86 e8 81 de 3c 08 e4 09 94 3b f7 96 6b c7 .B....<....;..k. 00b0 da 64 52 5c c5 e7 f2 f1 9d c0 90 f3 66 a8 29 ef .dR\........f.). 00c0 7b 8a 51 84 ea d2 e4 5b 56 7f 86 23 3e 32 44 06 {.Q....[V..#>2D. 00d0 0a 77 4b 32 38 41 e7 dd 12 f3 ac 66 03 4d 0d 05 .wK28A.....f.M.. 00e0 ed d7 c6 ba a2 8e 03 ab 4d 00 41 e6 66 3b ea 97 ........M.A.f;.. 00f0 a0 5b d0 25 ed 28 68 bf 06 c8 9c c1 db 10 14 0a .[.%.(h......... 0100 d2 66 94 e3 2a 21 ad 1f 01 b4 7b ec 96 ca 43 d0 .f..*!....{...C. 0110 98 07 f0 dc bd 5d 2c d6 5a c2 04 4b b9 f9 d9 b7 .....],.Z..K.... 0120 80 db 38 8a 7f f1 a4 05 7e 41 4f fa 65 ea d2 d0 ..8.....~AO.e... 0130 ab 1c b5 f4 8b fb 4a 39 79 0f 23 bb b1 9d ......J9y.#...