Frame 1 (226 bytes on wire, 226 bytes captured) Arrival Time: Sep 26, 2006 12:43:23.076907000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 226 bytes Capture Length: 226 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa), Dst: 00:e0:4c:69:0a:78 (00:e0:4c:69:0a:78) Destination: 00:e0:4c:69:0a:78 (00:e0:4c:69:0a:78) Source: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.102 (165.227.249.102) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 212 Identification: 0x0250 (592) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf904 [correct] Good: True Bad : False Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.102 (165.227.249.102) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 192 Checksum: 0x4bc7 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x8CDC78C583EE80A7 Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 184 Security Association payload Next payload: Vendor ID (13) Length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 44 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 36 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): AES-CBC (7) Key-Length (14): Key-Length (128) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: unknown vendor ID: 0x4A131C81070358455C5728F20E95452F Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-03 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: RFC 3706 Detecting Dead IKE Peers (DPD) 0000 00 e0 4c 69 0a 78 00 0c 29 96 e1 fa 08 00 45 00 ..Li.x..).....E. 0010 00 d4 02 50 00 00 80 11 f9 04 a5 e3 f9 96 a5 e3 ...P............ 0020 f9 66 01 f4 01 f4 00 c0 4b c7 8c dc 78 c5 83 ee .f......K...x... 0030 80 a7 00 00 00 00 00 00 00 00 01 10 02 00 00 00 ................ 0040 00 00 00 00 00 b8 0d 00 00 38 00 00 00 01 00 00 .........8...... 0050 00 01 00 00 00 2c 01 01 00 01 00 00 00 24 01 01 .....,.......$.. 0060 00 00 80 01 00 07 80 0e 00 80 80 02 00 02 80 04 ................ 0070 00 02 80 03 00 01 80 0b 00 01 80 0c 70 80 0d 00 ............p... 0080 00 14 4a 13 1c 81 07 03 58 45 5c 57 28 f2 0e 95 ..J.....XE\W(... 0090 45 2f 0d 00 00 14 7d 94 19 a6 53 10 ca 6f 2c 17 E/....}...S..o,. 00a0 9d 92 15 52 9d 56 0d 00 00 14 90 cb 80 91 3e bb ...R.V........>. 00b0 69 6e 08 63 81 b5 ec 42 7b 1f 0d 00 00 14 44 85 in.c...B{.....D. 00c0 15 2d 18 b6 bb cd 0b e8 a8 46 95 79 dd cc 00 00 .-.......F.y.... 00d0 00 14 af ca d7 13 68 a1 f1 c9 6b 86 96 fc 77 57 ......h...k...wW 00e0 01 00 .. Frame 2 (146 bytes on wire, 146 bytes captured) Arrival Time: Sep 26, 2006 12:43:23.225318000 Time delta from previous packet: 0.148411000 seconds Time since reference or first frame: 0.148411000 seconds Frame Number: 2 Packet Length: 146 bytes Capture Length: 146 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:e0:4c:69:0a:78 (00:e0:4c:69:0a:78), Dst: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Destination: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Source: 00:e0:4c:69:0a:78 (00:e0:4c:69:0a:78) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.102 (165.227.249.102), Dst: 165.227.249.150 (165.227.249.150) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 132 Identification: 0x002d (45) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb77 [correct] Good: True Bad : False Source: 165.227.249.102 (165.227.249.102) Destination: 165.227.249.150 (165.227.249.150) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 112 Checksum: 0x5b86 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x8CDC78C583EE80A7 Responder cookie: 0x8532E8091AB8D71A Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 104 Security Association payload Next payload: Vendor ID (13) Length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 44 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 36 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): AES-CBC (7) Key-Length (14): Key-Length (128) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: unknown vendor ID: 0x7003CBC1097DBE9C2600BA6983BC8B35 0000 00 0c 29 96 e1 fa 00 e0 4c 69 0a 78 08 00 45 00 ..).....Li.x..E. 0010 00 84 00 2d 40 00 40 11 fb 77 a5 e3 f9 66 a5 e3 ...-@.@..w...f.. 0020 f9 96 01 f4 01 f4 00 70 5b 86 8c dc 78 c5 83 ee .......p[...x... 0030 80 a7 85 32 e8 09 1a b8 d7 1a 01 10 02 00 00 00 ...2............ 0040 00 00 00 00 00 68 0d 00 00 38 00 00 00 01 00 00 .....h...8...... 0050 00 01 00 00 00 2c 01 01 00 01 00 00 00 24 01 01 .....,.......$.. 0060 00 00 80 01 00 07 80 0e 00 80 80 02 00 02 80 04 ................ 0070 00 02 80 03 00 01 80 0b 00 01 80 0c 70 80 00 00 ............p... 0080 00 14 70 03 cb c1 09 7d be 9c 26 00 ba 69 83 bc ..p....}..&..i.. 0090 8b 35 .5 Frame 3 (222 bytes on wire, 222 bytes captured) Arrival Time: Sep 26, 2006 12:43:23.239056000 Time delta from previous packet: 0.013738000 seconds Time since reference or first frame: 0.162149000 seconds Frame Number: 3 Packet Length: 222 bytes Capture Length: 222 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa), Dst: 00:e0:4c:69:0a:78 (00:e0:4c:69:0a:78) Destination: 00:e0:4c:69:0a:78 (00:e0:4c:69:0a:78) Source: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.102 (165.227.249.102) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 208 Identification: 0x0251 (593) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf907 [correct] Good: True Bad : False Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.102 (165.227.249.102) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 188 Checksum: 0x34cb [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x8CDC78C583EE80A7 Responder cookie: 0x8532E8091AB8D71A Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 180 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 20 Nonce Data 0000 00 e0 4c 69 0a 78 00 0c 29 96 e1 fa 08 00 45 00 ..Li.x..).....E. 0010 00 d0 02 51 00 00 80 11 f9 07 a5 e3 f9 96 a5 e3 ...Q............ 0020 f9 66 01 f4 01 f4 00 bc 34 cb 8c dc 78 c5 83 ee .f......4...x... 0030 80 a7 85 32 e8 09 1a b8 d7 1a 04 10 02 00 00 00 ...2............ 0040 00 00 00 00 00 b4 0a 00 00 84 bc 9a 6d d4 38 c1 ............m.8. 0050 b0 00 1a 75 43 33 ae 3e 1c 5b b4 27 71 f5 6c 0d ...uC3.>.[.'q.l. 0060 91 ec ab b1 fc f2 f8 7d a6 5d 3f 4a ca 27 43 da .......}.]?J.'C. 0070 46 f1 ca 2f 27 ce d1 c5 4b 1e 60 59 84 8d 77 45 F../'...K.`Y..wE 0080 cd b1 7d 68 ef 28 b0 38 d1 35 74 d4 fc f4 ee 0e ..}h.(.8.5t..... 0090 70 b4 38 75 69 e2 f9 4d fe d7 e9 a0 1c f7 11 e6 p.8ui..M........ 00a0 2c 66 01 5f 43 6b 2c 3f c5 fc d1 90 f9 2a e1 c4 ,f._Ck,?.....*.. 00b0 97 1b ac 66 ea d5 18 a8 25 ef 88 e8 6b 09 0f 50 ...f....%...k..P 00c0 73 fc 9a 6c 8a 1b 9a 2c d1 0b 00 00 00 14 19 5c s..l...,.......\ 00d0 26 5e ce ad 9c 10 fe 5a ff a4 69 06 91 6f &^.....Z..i..o Frame 4 (242 bytes on wire, 242 bytes captured) Arrival Time: Sep 26, 2006 12:43:23.431334000 Time delta from previous packet: 0.192278000 seconds Time since reference or first frame: 0.354427000 seconds Frame Number: 4 Packet Length: 242 bytes Capture Length: 242 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:e0:4c:69:0a:78 (00:e0:4c:69:0a:78), Dst: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Destination: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Source: 00:e0:4c:69:0a:78 (00:e0:4c:69:0a:78) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.102 (165.227.249.102), Dst: 165.227.249.150 (165.227.249.150) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 228 Identification: 0x002e (46) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb16 [correct] Good: True Bad : False Source: 165.227.249.102 (165.227.249.102) Destination: 165.227.249.150 (165.227.249.150) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 208 Checksum: 0x359d [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x8CDC78C583EE80A7 Responder cookie: 0x8532E8091AB8D71A Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 200 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: Vendor ID (13) Length: 20 Nonce Data Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: unknown vendor ID: 0x7003CBC1097DBE9C2600BA6983BC8B35 0000 00 0c 29 96 e1 fa 00 e0 4c 69 0a 78 08 00 45 00 ..).....Li.x..E. 0010 00 e4 00 2e 40 00 40 11 fb 16 a5 e3 f9 66 a5 e3 ....@.@......f.. 0020 f9 96 01 f4 01 f4 00 d0 35 9d 8c dc 78 c5 83 ee ........5...x... 0030 80 a7 85 32 e8 09 1a b8 d7 1a 04 10 02 00 00 00 ...2............ 0040 00 00 00 00 00 c8 0a 00 00 84 09 ab 56 75 bf 4a ............Vu.J 0050 1e b7 8b c1 65 14 33 24 8a 80 7f 8a 74 47 96 b0 ....e.3$....tG.. 0060 a7 c0 50 bb aa af 3e 71 6d 2d ee b2 06 65 4c 33 ..P...>qm-...eL3 0070 70 49 12 32 f9 b1 55 c4 93 6b 0d bb 2c 4f 9d 59 pI.2..U..k..,O.Y 0080 49 0e 1f 1b b5 74 ec 29 b7 cc 58 c2 79 fe c7 a9 I....t.)..X.y... 0090 b0 b7 0e f8 b4 67 74 47 a2 b9 97 86 20 6c 51 20 .....gtG.... lQ 00a0 59 d1 e7 c4 df 4b fc 23 c2 a1 0b 96 80 71 a4 05 Y....K.#.....q.. 00b0 ac c2 1b 8f 44 54 ad 74 83 62 2e d7 95 b3 e1 f2 ....DT.t.b...... 00c0 85 57 55 3d 7d a6 81 3a 4e 3a 0d 00 00 14 af cf .WU=}..:N:...... 00d0 1f a2 59 90 89 41 1e bd b8 0e 23 a6 0e c7 00 00 ..Y..A....#..... 00e0 00 14 70 03 cb c1 09 7d be 9c 26 00 ba 69 83 bc ..p....}..&..i.. 00f0 8b 35 .5 Frame 5 (150 bytes on wire, 150 bytes captured) Arrival Time: Sep 26, 2006 12:43:23.483999000 Time delta from previous packet: 0.052665000 seconds Time since reference or first frame: 0.407092000 seconds Frame Number: 5 Packet Length: 150 bytes Capture Length: 150 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa), Dst: 00:e0:4c:69:0a:78 (00:e0:4c:69:0a:78) Destination: 00:e0:4c:69:0a:78 (00:e0:4c:69:0a:78) Source: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.102 (165.227.249.102) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 136 Identification: 0x0252 (594) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf94e [correct] Good: True Bad : False Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.102 (165.227.249.102) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 116 Checksum: 0x7b36 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x8CDC78C583EE80A7 Responder cookie: 0x8532E8091AB8D71A Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 108 Encrypted payload (80 bytes) 0000 00 e0 4c 69 0a 78 00 0c 29 96 e1 fa 08 00 45 00 ..Li.x..).....E. 0010 00 88 02 52 00 00 80 11 f9 4e a5 e3 f9 96 a5 e3 ...R.....N...... 0020 f9 66 01 f4 01 f4 00 74 7b 36 8c dc 78 c5 83 ee .f.....t{6..x... 0030 80 a7 85 32 e8 09 1a b8 d7 1a 05 10 02 01 00 00 ...2............ 0040 00 00 00 00 00 6c ec 49 24 3d c8 b1 1e bb 7f 9f .....l.I$=...... 0050 ab 3b 89 b9 6a 8c 62 78 82 f5 e0 74 99 41 bf 55 .;..j.bx...t.A.U 0060 0e 5c 55 4b 07 53 91 ba 9e de 0c 8b e9 7e cd 04 .\UK.S.......~.. 0070 53 37 af 4e 04 dd 64 05 74 7d fd 03 0c 7b 22 b2 S7.N..d.t}...{". 0080 a9 31 c8 7a 16 ff b4 f5 bc f8 9c cc aa c8 51 b5 .1.z..........Q. 0090 31 a7 20 c3 49 c7 1. .I. Frame 6 (118 bytes on wire, 118 bytes captured) Arrival Time: Sep 26, 2006 12:43:23.532433000 Time delta from previous packet: 0.048434000 seconds Time since reference or first frame: 0.455526000 seconds Frame Number: 6 Packet Length: 118 bytes Capture Length: 118 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:e0:4c:69:0a:78 (00:e0:4c:69:0a:78), Dst: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Destination: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Source: 00:e0:4c:69:0a:78 (00:e0:4c:69:0a:78) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.102 (165.227.249.102), Dst: 165.227.249.150 (165.227.249.150) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 104 Identification: 0x002f (47) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb91 [correct] Good: True Bad : False Source: 165.227.249.102 (165.227.249.102) Destination: 165.227.249.150 (165.227.249.150) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 84 Checksum: 0xd7fd [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x8CDC78C583EE80A7 Responder cookie: 0x8532E8091AB8D71A Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 76 Encrypted payload (48 bytes) 0000 00 0c 29 96 e1 fa 00 e0 4c 69 0a 78 08 00 45 00 ..).....Li.x..E. 0010 00 68 00 2f 40 00 40 11 fb 91 a5 e3 f9 66 a5 e3 .h./@.@......f.. 0020 f9 96 01 f4 01 f4 00 54 d7 fd 8c dc 78 c5 83 ee .......T....x... 0030 80 a7 85 32 e8 09 1a b8 d7 1a 05 10 02 01 00 00 ...2............ 0040 00 00 00 00 00 4c 19 af b5 49 56 04 30 02 ec a3 .....L...IV.0... 0050 45 35 1f a8 67 13 98 9f 3b 80 dc 4a 3b 92 51 03 E5..g...;..J;.Q. 0060 4c aa c3 ba a6 ee da 71 d5 55 a8 85 c2 3a 61 de L......q.U...:a. 0070 11 a2 cf 0d 14 f9 ...... Frame 7 (134 bytes on wire, 134 bytes captured) Arrival Time: Sep 26, 2006 12:43:23.534568000 Time delta from previous packet: 0.002135000 seconds Time since reference or first frame: 0.457661000 seconds Frame Number: 7 Packet Length: 134 bytes Capture Length: 134 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:e0:4c:69:0a:78 (00:e0:4c:69:0a:78), Dst: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Destination: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Source: 00:e0:4c:69:0a:78 (00:e0:4c:69:0a:78) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.102 (165.227.249.102), Dst: 165.227.249.150 (165.227.249.150) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0030 (48) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb80 [correct] Good: True Bad : False Source: 165.227.249.102 (165.227.249.102) Destination: 165.227.249.150 (165.227.249.150) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 100 Checksum: 0xa902 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x8CDC78C583EE80A7 Responder cookie: 0x8532E8091AB8D71A Next payload: Hash (8) Version: 1.0 Exchange type: Informational (5) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0xED008054 Length: 92 Encrypted payload (64 bytes) 0000 00 0c 29 96 e1 fa 00 e0 4c 69 0a 78 08 00 45 00 ..).....Li.x..E. 0010 00 78 00 30 40 00 40 11 fb 80 a5 e3 f9 66 a5 e3 .x.0@.@......f.. 0020 f9 96 01 f4 01 f4 00 64 a9 02 8c dc 78 c5 83 ee .......d....x... 0030 80 a7 85 32 e8 09 1a b8 d7 1a 08 10 05 01 ed 00 ...2............ 0040 80 54 00 00 00 5c b1 5c fd 8c 80 30 45 d5 3f 65 .T...\.\...0E.?e 0050 01 e6 dc c6 90 e2 01 9c 80 2f 97 f5 e4 96 dd ac ........./...... 0060 b2 94 15 68 28 f5 61 bf 01 59 f5 2a d4 c8 63 d5 ...h(.a..Y.*..c. 0070 5f 8a a8 4b 22 f1 f5 49 6a d3 21 ec 6e f6 7c 16 _..K"..Ij.!.n.|. 0080 a0 2f bb b1 b9 f1 ./.... Frame 8 (342 bytes on wire, 342 bytes captured) Arrival Time: Sep 26, 2006 12:43:23.559168000 Time delta from previous packet: 0.024600000 seconds Time since reference or first frame: 0.482261000 seconds Frame Number: 8 Packet Length: 342 bytes Capture Length: 342 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa), Dst: 00:e0:4c:69:0a:78 (00:e0:4c:69:0a:78) Destination: 00:e0:4c:69:0a:78 (00:e0:4c:69:0a:78) Source: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.102 (165.227.249.102) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 328 Identification: 0x0253 (595) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf88d [correct] Good: True Bad : False Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.102 (165.227.249.102) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 308 Checksum: 0x1058 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x8CDC78C583EE80A7 Responder cookie: 0x8532E8091AB8D71A Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x1690AC69 Length: 300 Encrypted payload (272 bytes) 0000 00 e0 4c 69 0a 78 00 0c 29 96 e1 fa 08 00 45 00 ..Li.x..).....E. 0010 01 48 02 53 00 00 80 11 f8 8d a5 e3 f9 96 a5 e3 .H.S............ 0020 f9 66 01 f4 01 f4 01 34 10 58 8c dc 78 c5 83 ee .f.....4.X..x... 0030 80 a7 85 32 e8 09 1a b8 d7 1a 08 10 20 01 16 90 ...2........ ... 0040 ac 69 00 00 01 2c 07 dd 84 89 f2 fe 6f c1 b4 96 .i...,......o... 0050 3c 1e 5f 87 73 2b f0 49 b0 62 0d 11 41 be 0d 95 <._.s+.I.b..A... 0060 52 bf 47 d5 2e 98 df 27 da 08 d1 30 10 37 0f 94 R.G....'...0.7.. 0070 22 a1 f7 e0 7f 40 22 b0 d4 74 34 0c 81 a1 53 93 "....@"..t4...S. 0080 71 ec a0 59 78 57 b9 cb d9 c9 39 04 4b 09 41 3e q..YxW....9.K.A> 0090 8e 48 2b 21 1d 64 34 eb f3 12 c3 c0 be c4 7f 51 .H+!.d4........Q 00a0 b9 dc fd af 0f ed 87 e7 e0 3f 4d 74 f7 5c df c9 .........?Mt.\.. 00b0 3c 81 49 b9 6b 27 f5 bd ef 78 b3 79 45 de 8e 7b <.I.k'...x.yE..{ 00c0 41 96 39 ed f5 ca 1e f1 2a 76 9b 49 f7 71 81 cd A.9.....*v.I.q.. 00d0 19 d4 a6 de bb 51 5e cf e8 75 f0 75 ae e2 cb e3 .....Q^..u.u.... 00e0 ce 8f c4 11 f4 df 0a f6 60 31 81 a1 a7 4e 69 9c ........`1...Ni. 00f0 a9 a3 24 b8 23 10 00 e4 26 05 d4 ca 2f ab a7 64 ..$.#...&.../..d 0100 30 95 4b 8f 96 57 f5 74 41 d3 85 8a a3 3c 5d ef 0.K..W.tA....<]. 0110 ac 6a 84 0a 74 4a bd fc 9e 16 f4 c6 2c 58 53 cf .j..tJ......,XS. 0120 05 ee 16 e6 93 55 94 b5 99 d2 eb 4d ed c4 d5 d5 .....U.....M.... 0130 8a b1 93 04 b2 4e ad 1b 29 46 92 74 b1 8e 40 5a .....N..)F.t..@Z 0140 f5 8e 85 be ec 13 92 cf 20 67 ba 34 79 0b 0a 14 ........ g.4y... 0150 9f 6c e7 56 dc a1 .l.V.. Frame 9 (342 bytes on wire, 342 bytes captured) Arrival Time: Sep 26, 2006 12:43:23.931335000 Time delta from previous packet: 0.372167000 seconds Time since reference or first frame: 0.854428000 seconds Frame Number: 9 Packet Length: 342 bytes Capture Length: 342 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:e0:4c:69:0a:78 (00:e0:4c:69:0a:78), Dst: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Destination: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Source: 00:e0:4c:69:0a:78 (00:e0:4c:69:0a:78) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.102 (165.227.249.102), Dst: 165.227.249.150 (165.227.249.150) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 328 Identification: 0x0031 (49) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfaaf [correct] Good: True Bad : False Source: 165.227.249.102 (165.227.249.102) Destination: 165.227.249.150 (165.227.249.150) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 308 Checksum: 0xe64c [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x8CDC78C583EE80A7 Responder cookie: 0x8532E8091AB8D71A Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x1690AC69 Length: 300 Encrypted payload (272 bytes) 0000 00 0c 29 96 e1 fa 00 e0 4c 69 0a 78 08 00 45 00 ..).....Li.x..E. 0010 01 48 00 31 40 00 40 11 fa af a5 e3 f9 66 a5 e3 .H.1@.@......f.. 0020 f9 96 01 f4 01 f4 01 34 e6 4c 8c dc 78 c5 83 ee .......4.L..x... 0030 80 a7 85 32 e8 09 1a b8 d7 1a 08 10 20 01 16 90 ...2........ ... 0040 ac 69 00 00 01 2c 9a 8c e7 5f 33 30 ac d7 7f ae .i...,..._30.... 0050 c8 9b ad 6b f1 91 c2 ce 34 bb 4b 9e 0e 0d d6 1f ...k....4.K..... 0060 ab 8a 79 45 d9 2f b2 cb 6a b2 76 15 eb 15 3f c2 ..yE./..j.v...?. 0070 26 2b 8f d0 1b f5 42 83 d3 be 2a 31 e2 a2 43 c5 &+....B...*1..C. 0080 49 dd 3a 43 4a fe 0a 70 1e 50 ba ea 8b a9 f5 47 I.:CJ..p.P.....G 0090 85 da d9 68 5c 31 b7 36 e0 b3 23 d5 49 a4 89 70 ...h\1.6..#.I..p 00a0 c0 05 bc e4 fc 5d ce 9f 39 55 24 64 ae 05 d6 42 .....]..9U$d...B 00b0 06 86 0a d6 51 7a c0 32 b5 d4 19 62 d1 a2 ea 74 ....Qz.2...b...t 00c0 66 cb 13 68 89 60 8a 5d 7d 37 6e 03 d0 bb 07 37 f..h.`.]}7n....7 00d0 8f ef 5e 9a e4 e1 5f 2f 30 9c 51 2a 2c ab c9 d1 ..^..._/0.Q*,... 00e0 39 78 44 77 5a a3 2a 86 1a 70 6d c6 91 64 6a 16 9xDwZ.*..pm..dj. 00f0 8e 89 b2 1f 5e 6f 98 10 ee 7e 99 53 ac cf fb 35 ....^o...~.S...5 0100 13 04 b2 4b d3 49 28 09 cc 3e 25 e7 90 df 02 af ...K.I(..>%..... 0110 18 da d3 64 ec 87 47 43 75 bf 9a e6 6f ac c3 31 ...d..GCu...o..1 0120 1d 62 d9 ad a5 0b ff 11 9b 19 0b 0f 49 39 bc 89 .b..........I9.. 0130 32 28 53 f4 45 e6 45 a3 10 0f 13 ee ed ef 6d 42 2(S.E.E.......mB 0140 ae 1b ec a4 65 1e 85 a2 f7 b3 1e 64 da 07 4a 7e ....e......d..J~ 0150 8a ac c7 ff 44 94 ....D. Frame 10 (102 bytes on wire, 102 bytes captured) Arrival Time: Sep 26, 2006 12:43:24.059157000 Time delta from previous packet: 0.127822000 seconds Time since reference or first frame: 0.982250000 seconds Frame Number: 10 Packet Length: 102 bytes Capture Length: 102 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa), Dst: 00:e0:4c:69:0a:78 (00:e0:4c:69:0a:78) Destination: 00:e0:4c:69:0a:78 (00:e0:4c:69:0a:78) Source: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.102 (165.227.249.102) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 88 Identification: 0x0254 (596) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf97c [correct] Good: True Bad : False Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.102 (165.227.249.102) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 68 Checksum: 0xc3e7 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x8CDC78C583EE80A7 Responder cookie: 0x8532E8091AB8D71A Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x1690AC69 Length: 60 Encrypted payload (32 bytes) 0000 00 e0 4c 69 0a 78 00 0c 29 96 e1 fa 08 00 45 00 ..Li.x..).....E. 0010 00 58 02 54 00 00 80 11 f9 7c a5 e3 f9 96 a5 e3 .X.T.....|...... 0020 f9 66 01 f4 01 f4 00 44 c3 e7 8c dc 78 c5 83 ee .f.....D....x... 0030 80 a7 85 32 e8 09 1a b8 d7 1a 08 10 20 01 16 90 ...2........ ... 0040 ac 69 00 00 00 3c 82 b1 cb 08 17 17 eb cb c9 be .i...<.......... 0050 8e 9b 3e 68 2b 9c 66 07 08 3a 41 bc 0e 44 d2 f1 ..>h+.f..:A..D.. 0060 63 0c b6 ad e6 59 c....Y Frame 11 (406 bytes on wire, 406 bytes captured) Arrival Time: Sep 26, 2006 12:43:28.795647000 Time delta from previous packet: 4.736490000 seconds Time since reference or first frame: 5.718740000 seconds Frame Number: 11 Packet Length: 406 bytes Capture Length: 406 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa), Dst: 00:e0:4c:69:0a:78 (00:e0:4c:69:0a:78) Destination: 00:e0:4c:69:0a:78 (00:e0:4c:69:0a:78) Source: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.102 (165.227.249.102) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 392 Identification: 0x0255 (597) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: ESP (0x32) Header checksum: 0xf82a [correct] Good: True Bad : False Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.102 (165.227.249.102) Encapsulating Security Payload SPI: 0x064f53eb Sequence: 1 Data (364 bytes) 0000 00 e0 4c 69 0a 78 00 0c 29 96 e1 fa 08 00 45 00 ..Li.x..).....E. 0010 01 88 02 55 00 00 80 32 f8 2a a5 e3 f9 96 a5 e3 ...U...2.*...... 0020 f9 66 06 4f 53 eb 00 00 00 01 ac f5 c7 ba 89 f1 .f.OS........... 0030 62 f0 a2 b5 ce 60 15 3e 46 71 15 01 34 d5 86 d1 b....`.>Fq..4... 0040 15 58 8f 18 e9 5e 61 0e 27 c5 f6 a1 80 04 34 2b .X...^a.'.....4+ 0050 b4 49 01 33 db c8 f1 a8 78 d9 70 89 b7 db e5 e6 .I.3....x.p..... 0060 a1 3f fb 70 17 f6 47 f6 3e 04 d9 f9 ab 3e 48 26 .?.p..G.>....>H& 0070 d7 19 e8 c5 e9 b7 e2 83 f1 3e 50 4b dd 6a 45 b5 .........>PK.jE. 0080 90 1f c8 72 e4 4f 5c cf e2 50 20 f5 96 bb 7f ec ...r.O\..P ..... 0090 ec ce 25 a0 d8 29 31 0f 39 27 c7 95 56 50 5d f1 ..%..)1.9'..VP]. 00a0 c8 f3 29 a3 61 70 88 b8 df d3 7b 40 43 e2 50 cc ..).ap....{@C.P. 00b0 7b d4 78 2e 7e 13 d1 e0 71 48 7b a4 fb c5 48 1e {.x.~...qH{...H. 00c0 9b 11 2b 2d 9b 9f 8c dd bc e0 f0 7f 15 87 91 f5 ..+-............ 00d0 33 06 88 cb 6c 6f eb a5 1f 5d 2d 64 47 ca 96 87 3...lo...]-dG... 00e0 ed e5 cb 19 1e d9 24 d8 f7 c0 39 4e 43 0e b8 e2 ......$...9NC... 00f0 78 df ce 71 bb 12 3a a5 45 c7 17 87 87 c1 b3 95 x..q..:.E....... 0100 93 16 f1 f5 de 55 80 9f 86 e6 1c d6 af e0 c3 2b .....U.........+ 0110 0e 36 9a 55 0f 58 66 21 3e 06 0b 2c ab a6 55 57 .6.U.Xf!>..,..UW 0120 32 e5 8b ab 86 a6 8b 26 b3 b8 d5 c3 10 bd 94 14 2......&........ 0130 62 bb 54 f2 4a e5 1a 9e 56 e3 67 c7 a5 03 f5 77 b.T.J...V.g....w 0140 9a 3e b1 bd ea a4 06 b3 16 d7 a2 a0 fa 47 45 33 .>...........GE3 0150 42 13 d3 9f f9 f0 09 49 6f e2 ec bc 52 27 f0 ab B......Io...R'.. 0160 be e4 6e 14 b1 52 88 d3 39 95 30 42 10 a4 ad b7 ..n..R..9.0B.... 0170 b4 9e 5f 1a 39 b3 6e 10 b3 41 2f 4d 4b 3b 8e 87 .._.9.n..A/MK;.. 0180 46 a4 93 7b 4c 64 b1 66 be ed 3a 3f 0d c6 7c 87 F..{Ld.f..:?..|. 0190 81 42 6c 34 61 14 .Bl4a. Frame 12 (406 bytes on wire, 406 bytes captured) Arrival Time: Sep 26, 2006 12:43:28.840309000 Time delta from previous packet: 0.044662000 seconds Time since reference or first frame: 5.763402000 seconds Frame Number: 12 Packet Length: 406 bytes Capture Length: 406 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:e0:4c:69:0a:78 (00:e0:4c:69:0a:78), Dst: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Destination: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Source: 00:e0:4c:69:0a:78 (00:e0:4c:69:0a:78) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.102 (165.227.249.102), Dst: 165.227.249.150 (165.227.249.150) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 392 Identification: 0x0001 (1) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x3a7f [correct] Good: True Bad : False Source: 165.227.249.102 (165.227.249.102) Destination: 165.227.249.150 (165.227.249.150) Encapsulating Security Payload SPI: 0xaa24678d Sequence: 1 Data (364 bytes) 0000 00 0c 29 96 e1 fa 00 e0 4c 69 0a 78 08 00 45 00 ..).....Li.x..E. 0010 01 88 00 01 00 00 40 32 3a 7f a5 e3 f9 66 a5 e3 ......@2:....f.. 0020 f9 96 aa 24 67 8d 00 00 00 01 e0 6a c0 9b cb d7 ...$g......j.... 0030 e8 76 14 43 ae 1e 30 2f b1 26 dc 0c 28 6a 73 2c .v.C..0/.&..(js, 0040 75 a7 58 58 df 96 ea 53 32 d8 bd 75 23 a5 70 7c u.XX...S2..u#.p| 0050 1d 4f eb 3a e1 e3 c4 41 36 46 b0 ec ef 57 14 20 .O.:...A6F...W. 0060 a9 92 24 b0 4e 7b 69 35 b1 2b a6 60 21 3c 8b 1f ..$.N{i5.+.`!<.. 0070 f0 54 5e f3 bb d4 7b 30 76 cc 57 2e 14 e7 62 e9 .T^...{0v.W...b. 0080 b2 66 d8 4a 04 55 2f cc e0 70 57 44 94 ff 5d 10 .f.J.U/..pWD..]. 0090 50 54 ac 59 b0 cd 9b 70 77 b1 43 62 08 23 72 92 PT.Y...pw.Cb.#r. 00a0 96 0a d3 cd bb f0 ea 13 91 3e 3e 44 56 9a e3 f2 .........>>DV... 00b0 80 15 05 cc 9e 96 6b 63 36 41 78 e3 d6 2f d2 4b ......kc6Ax../.K 00c0 44 e2 02 3d 0c 71 98 86 a0 b6 e4 42 0f c2 65 0a D..=.q.....B..e. 00d0 04 03 d6 4f ca bc 40 af 29 d4 95 c4 5d 5b 4e 55 ...O..@.)...][NU 00e0 af 43 31 b8 01 76 e8 ce 3f 0c 67 ea 27 61 e7 07 .C1..v..?.g.'a.. 00f0 10 6d ed c5 f2 12 16 ce c0 cb b5 ca e8 f0 ab 1e .m.............. 0100 b5 69 59 33 47 df aa a9 3f eb 95 46 e0 a7 e6 58 .iY3G...?..F...X 0110 9a 32 1b 9e 39 22 f6 45 de b8 4e ae 99 5f 54 3b .2..9".E..N.._T; 0120 c2 5d 37 4c c5 ba 29 e3 31 80 80 77 a9 28 c2 b0 .]7L..).1..w.(.. 0130 1f 50 4b a5 4d b7 b6 9e 5d 64 66 35 e4 b1 e5 ce .PK.M...]df5.... 0140 1c 22 74 c6 00 ea 27 52 5f cf c4 56 df c6 f1 af ."t...'R_..V.... 0150 6d 22 1d 1b f4 31 13 3d 16 f7 63 dd 90 43 a1 ff m"...1.=..c..C.. 0160 6a 3d 9e 21 4c 28 bc c4 24 9b f7 f6 a7 db 0d 36 j=.!L(..$......6 0170 8c 32 4a 5c 28 01 ae 8c 97 77 0a 90 0b 71 82 2b .2J\(....w...q.+ 0180 2a b3 c7 21 0d 5b 31 4b cf 21 3b dd 89 0e f8 cd *..!.[1K.!;..... 0190 9b b8 bd b4 1e fe ......