Frame 1 (222 bytes on wire, 222 bytes captured) Arrival Time: Aug 10, 2006 14:51:54.714783000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 222 bytes Capture Length: 222 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa), Dst: 00:d0:c9:94:ef:f7 (00:d0:c9:94:ef:f7) Destination: 00:d0:c9:94:ef:f7 (00:d0:c9:94:ef:f7) Source: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.103 (165.227.249.103) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 208 Identification: 0x028c (652) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf8cb [correct] Good: True Bad : False Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.103 (165.227.249.103) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 188 Checksum: 0x141f [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xCCA848602F8E7DF0 Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 180 Security Association payload Next payload: Vendor ID (13) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 40 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 32 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: unknown vendor ID: 0x4A131C81070358455C5728F20E95452F Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-03 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: RFC 3706 Detecting Dead IKE Peers (DPD) 0000 00 d0 c9 94 ef f7 00 0c 29 96 e1 fa 08 00 45 00 ........).....E. 0010 00 d0 02 8c 00 00 80 11 f8 cb a5 e3 f9 96 a5 e3 ................ 0020 f9 67 01 f4 01 f4 00 bc 14 1f cc a8 48 60 2f 8e .g..........H`/. 0030 7d f0 00 00 00 00 00 00 00 00 01 10 02 00 00 00 }............... 0040 00 00 00 00 00 b4 0d 00 00 34 00 00 00 01 00 00 .........4...... 0050 00 01 00 00 00 28 01 01 00 01 00 00 00 20 01 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 04 00 02 80 03 ................ 0070 00 01 80 0b 00 01 80 0c 70 80 0d 00 00 14 4a 13 ........p.....J. 0080 1c 81 07 03 58 45 5c 57 28 f2 0e 95 45 2f 0d 00 ....XE\W(...E/.. 0090 00 14 7d 94 19 a6 53 10 ca 6f 2c 17 9d 92 15 52 ..}...S..o,....R 00a0 9d 56 0d 00 00 14 90 cb 80 91 3e bb 69 6e 08 63 .V........>.in.c 00b0 81 b5 ec 42 7b 1f 0d 00 00 14 44 85 15 2d 18 b6 ...B{.....D..-.. 00c0 bb cd 0b e8 a8 46 95 79 dd cc 00 00 00 14 af ca .....F.y........ 00d0 d7 13 68 a1 f1 c9 6b 86 96 fc 77 57 01 00 ..h...k...wW.. Frame 2 (182 bytes on wire, 182 bytes captured) Arrival Time: Aug 10, 2006 14:51:54.730974000 Time delta from previous packet: 0.016191000 seconds Time since reference or first frame: 0.016191000 seconds Frame Number: 2 Packet Length: 182 bytes Capture Length: 182 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:d0:c9:94:ef:f7 (00:d0:c9:94:ef:f7), Dst: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Destination: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Source: 00:d0:c9:94:ef:f7 (00:d0:c9:94:ef:f7) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.103 (165.227.249.103), Dst: 165.227.249.150 (165.227.249.150) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 168 Identification: 0x0000 (0) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb7f [correct] Good: True Bad : False Source: 165.227.249.103 (165.227.249.103) Destination: 165.227.249.150 (165.227.249.150) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 148 Checksum: 0x8b4a [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xCCA848602F8E7DF0 Responder cookie: 0xC90DACB7CEC7F420 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 140 Security Association payload Next payload: Vendor ID (13) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 40 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 32 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: RFC 3706 Detecting Dead IKE Peers (DPD) Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: unknown vendor ID: 0x648982785BEDBDD66A6DD356F0E160FD 0000 00 0c 29 96 e1 fa 00 d0 c9 94 ef f7 08 00 45 00 ..)...........E. 0010 00 a8 00 00 40 00 40 11 fb 7f a5 e3 f9 67 a5 e3 ....@.@......g.. 0020 f9 96 01 f4 01 f4 00 94 8b 4a cc a8 48 60 2f 8e .........J..H`/. 0030 7d f0 c9 0d ac b7 ce c7 f4 20 01 10 02 00 00 00 }........ ...... 0040 00 00 00 00 00 8c 0d 00 00 34 00 00 00 01 00 00 .........4...... 0050 00 01 00 00 00 28 01 01 00 01 00 00 00 20 01 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 04 00 02 80 03 ................ 0070 00 01 80 0b 00 01 80 0c 70 80 0d 00 00 14 90 cb ........p....... 0080 80 91 3e bb 69 6e 08 63 81 b5 ec 42 7b 1f 0d 00 ..>.in.c...B{... 0090 00 14 af ca d7 13 68 a1 f1 c9 6b 86 96 fc 77 57 ......h...k...wW 00a0 01 00 00 00 00 14 64 89 82 78 5b ed bd d6 6a 6d ......d..x[...jm 00b0 d3 56 f0 e1 60 fd .V..`. Frame 3 (270 bytes on wire, 270 bytes captured) Arrival Time: Aug 10, 2006 14:51:54.770511000 Time delta from previous packet: 0.039537000 seconds Time since reference or first frame: 0.055728000 seconds Frame Number: 3 Packet Length: 270 bytes Capture Length: 270 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa), Dst: 00:d0:c9:94:ef:f7 (00:d0:c9:94:ef:f7) Destination: 00:d0:c9:94:ef:f7 (00:d0:c9:94:ef:f7) Source: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.103 (165.227.249.103) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 256 Identification: 0x028d (653) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf89a [correct] Good: True Bad : False Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.103 (165.227.249.103) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 236 Checksum: 0x1cec [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xCCA848602F8E7DF0 Responder cookie: 0xC90DACB7CEC7F420 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 228 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NAT-D (draft-ietf-ipsec-nat-t-ike-01 to 03) (130) Length: 20 Nonce Data NAT-D (draft-ietf-ipsec-nat-t-ike-01 to 03) payload Next payload: NAT-D (draft-ietf-ipsec-nat-t-ike-01 to 03) (130) Length: 24 Hash of address and port: 4EA56B3C3B27DD95141A40594FC64CB1D2F1D4C1 NAT-D (draft-ietf-ipsec-nat-t-ike-01 to 03) payload Next payload: NONE (0) Length: 24 Hash of address and port: D5BE6BD8B770BFF6D49F385599CE5B21B3095ECE 0000 00 d0 c9 94 ef f7 00 0c 29 96 e1 fa 08 00 45 00 ........).....E. 0010 01 00 02 8d 00 00 80 11 f8 9a a5 e3 f9 96 a5 e3 ................ 0020 f9 67 01 f4 01 f4 00 ec 1c ec cc a8 48 60 2f 8e .g..........H`/. 0030 7d f0 c9 0d ac b7 ce c7 f4 20 04 10 02 00 00 00 }........ ...... 0040 00 00 00 00 00 e4 0a 00 00 84 89 4d ec d8 84 f8 ...........M.... 0050 32 78 f2 12 08 1c 03 32 7a 53 08 02 2b 2a c2 2e 2x.....2zS..+*.. 0060 5f 4a f6 0d 5e b3 0e e9 d2 dc 97 a7 f8 bc 5b 9b _J..^.........[. 0070 8c 21 eb cf 2d 19 46 9e f8 6f 8c 63 21 3b 6d a3 .!..-.F..o.c!;m. 0080 fa 47 d4 ec a4 c3 74 41 9a 74 1b d5 01 0d 2c 0d .G....tA.t....,. 0090 a7 bb d2 cf e2 ee 8e 2f 14 7c cc 3e 68 f0 d8 91 ......./.|.>h... 00a0 f5 e9 e8 74 c4 19 0e 60 48 88 02 65 7f c8 40 8f ...t...`H..e..@. 00b0 5b 26 60 2b bf 84 7f 54 3d 7b 5f 72 74 15 7a 27 [&`+...T={_rt.z' 00c0 89 93 bf 19 b9 46 92 ff 39 6e 82 00 00 14 c8 fa .....F..9n...... 00d0 7c a7 af b2 2d 7a ad 9b bb db 54 3b 6f e1 82 00 |...-z....T;o... 00e0 00 18 4e a5 6b 3c 3b 27 dd 95 14 1a 40 59 4f c6 ..N.k<;'....@YO. 00f0 4c b1 d2 f1 d4 c1 00 00 00 18 d5 be 6b d8 b7 70 L...........k..p 0100 bf f6 d4 9f 38 55 99 ce 5b 21 b3 09 5e ce ....8U..[!..^. Frame 4 (262 bytes on wire, 262 bytes captured) Arrival Time: Aug 10, 2006 14:51:55.033674000 Time delta from previous packet: 0.263163000 seconds Time since reference or first frame: 0.318891000 seconds Frame Number: 4 Packet Length: 262 bytes Capture Length: 262 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:d0:c9:94:ef:f7 (00:d0:c9:94:ef:f7), Dst: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Destination: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Source: 00:d0:c9:94:ef:f7 (00:d0:c9:94:ef:f7) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.103 (165.227.249.103), Dst: 165.227.249.150 (165.227.249.150) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 248 Identification: 0x0000 (0) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb2f [correct] Good: True Bad : False Source: 165.227.249.103 (165.227.249.103) Destination: 165.227.249.150 (165.227.249.150) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 228 Checksum: 0xf6c8 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xCCA848602F8E7DF0 Responder cookie: 0xC90DACB7CEC7F420 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 220 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NAT-D (draft-ietf-ipsec-nat-t-ike-01 to 03) (130) Length: 12 Nonce Data NAT-D (draft-ietf-ipsec-nat-t-ike-01 to 03) payload Next payload: NAT-D (draft-ietf-ipsec-nat-t-ike-01 to 03) (130) Length: 24 Hash of address and port: D5BE6BD8B770BFF6D49F385599CE5B21B3095ECE NAT-D (draft-ietf-ipsec-nat-t-ike-01 to 03) payload Next payload: NONE (0) Length: 24 Hash of address and port: 4EA56B3C3B27DD95141A40594FC64CB1D2F1D4C1 0000 00 0c 29 96 e1 fa 00 d0 c9 94 ef f7 08 00 45 00 ..)...........E. 0010 00 f8 00 00 40 00 40 11 fb 2f a5 e3 f9 67 a5 e3 ....@.@../...g.. 0020 f9 96 01 f4 01 f4 00 e4 f6 c8 cc a8 48 60 2f 8e ............H`/. 0030 7d f0 c9 0d ac b7 ce c7 f4 20 04 10 02 00 00 00 }........ ...... 0040 00 00 00 00 00 dc 0a 00 00 84 8c 53 1f f4 f4 c1 ...........S.... 0050 7d 64 20 d1 80 0d d0 32 f6 87 86 ff 58 ca d3 78 }d ....2....X..x 0060 26 eb 22 92 77 4a 8d 20 61 88 5f 1b 5b d4 21 5a &.".wJ. a._.[.!Z 0070 56 34 bd 3c 3e 71 3c 48 e9 e7 2f 36 d0 09 09 df V4.<>qT0,.a=. 00b0 b8 30 a5 b4 3b 2d ed e9 98 bc 59 6c 19 fb 0e d3 .0..;-....Yl.... 00c0 a5 07 bf 8a 68 c5 03 60 6b 35 fc 99 bd af f7 ea ....h..`k5...... 00d0 32 68 93 ae 52 60 67 71 49 fc 3d 5a 0c c8 b8 4a 2h..R`gqI.=Z...J 00e0 fa b2 88 7f 69 52 4d 89 6d 41 41 10 c5 79 cb 12 ....iRM.mAA..y.. 00f0 4e 69 c6 93 f3 6e 0c 93 80 9c 45 1a a6 01 bf 20 Ni...n....E.... 0100 e6 db 19 eb 72 c1 d7 85 01 4f 8f fb c8 b5 e3 f7 ....r....O...... 0110 9b 6f ff 0a 55 1e 61 49 82 51 ac 17 75 88 ca b9 .o..U.aI.Q..u... 0120 0b d5 6a b8 f0 fa 6e 93 69 38 43 27 ea 05 71 57 ..j...n.i8C'..qW 0130 ae f2 4c c0 08 b3 e1 95 81 0b 41 fb aa 35 97 92 ..L.......A..5.. 0140 51 48 a4 cf d0 01 ae 50 f7 05 a4 e0 53 c4 QH.....P....S. Frame 8 (318 bytes on wire, 318 bytes captured) Arrival Time: Aug 10, 2006 14:51:55.701929000 Time delta from previous packet: 0.233746000 seconds Time since reference or first frame: 0.987146000 seconds Frame Number: 8 Packet Length: 318 bytes Capture Length: 318 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:d0:c9:94:ef:f7 (00:d0:c9:94:ef:f7), Dst: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Destination: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Source: 00:d0:c9:94:ef:f7 (00:d0:c9:94:ef:f7) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.103 (165.227.249.103), Dst: 165.227.249.150 (165.227.249.150) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 304 Identification: 0x0000 (0) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfaf7 [correct] Good: True Bad : False Source: 165.227.249.103 (165.227.249.103) Destination: 165.227.249.150 (165.227.249.150) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 284 Checksum: 0x3899 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xCCA848602F8E7DF0 Responder cookie: 0xC90DACB7CEC7F420 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0xDD597172 Length: 276 Encrypted payload (248 bytes) 0000 00 0c 29 96 e1 fa 00 d0 c9 94 ef f7 08 00 45 00 ..)...........E. 0010 01 30 00 00 40 00 40 11 fa f7 a5 e3 f9 67 a5 e3 .0..@.@......g.. 0020 f9 96 01 f4 01 f4 01 1c 38 99 cc a8 48 60 2f 8e ........8...H`/. 0030 7d f0 c9 0d ac b7 ce c7 f4 20 08 10 20 01 dd 59 }........ .. ..Y 0040 71 72 00 00 01 14 18 75 b0 91 eb 82 a3 f0 9f 8a qr.....u........ 0050 ef 36 52 d0 77 d7 8c 84 8d ba 16 54 52 4e 09 20 .6R.w......TRN. 0060 b8 8e 95 54 3b f1 5c 88 8b 5d b4 1d 50 ac fb f3 ...T;.\..]..P... 0070 83 a5 54 59 1b 10 ed 01 c0 36 f2 37 8a 7b 77 a0 ..TY.....6.7.{w. 0080 e4 d5 03 70 96 f1 0d ec 23 c3 d0 44 c6 6f 2a ad ...p....#..D.o*. 0090 7d b2 f7 c0 93 c5 aa 2b 5b 0d 5d 05 8a 0a 41 d1 }......+[.]...A. 00a0 56 29 77 42 5f 78 8a 52 be c9 dc 35 05 a7 5a dd V)wB_x.R...5..Z. 00b0 7a 40 03 51 e2 2e 79 c5 0f 2a 09 55 fa 0e 55 c6 z@.Q..y..*.U..U. 00c0 b4 fd 74 c1 69 d1 e4 5e 7c a4 6e 2c a9 32 0d a6 ..t.i..^|.n,.2.. 00d0 28 58 f7 71 55 94 2f 24 09 55 6e 52 67 dc 87 7d (X.qU./$.UnRg..} 00e0 03 38 b5 5a 2e 7a 98 1d 92 5f e7 75 9c bb 94 b6 .8.Z.z..._.u.... 00f0 ef 2a e9 bd d0 bf 76 7f 5c d4 b7 02 62 10 95 2f .*....v.\...b../ 0100 e7 c2 2f 1c dd b0 85 78 67 56 16 80 1b 34 a4 07 ../....xgV...4.. 0110 57 c5 a7 77 d6 ce 10 90 06 7d 1c b4 4b 38 a4 86 W..w.....}..K8.. 0120 e2 ad 5b df 14 91 cf 21 f1 12 2b 0c 37 ea 8b 4d ..[....!..+.7..M 0130 7f 3b 9e 1d 6d 02 57 fd f0 7f be a5 6d 93 .;..m.W.....m. Frame 9 (102 bytes on wire, 102 bytes captured) Arrival Time: Aug 10, 2006 14:51:55.815023000 Time delta from previous packet: 0.113094000 seconds Time since reference or first frame: 1.100240000 seconds Frame Number: 9 Packet Length: 102 bytes Capture Length: 102 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa), Dst: 00:d0:c9:94:ef:f7 (00:d0:c9:94:ef:f7) Destination: 00:d0:c9:94:ef:f7 (00:d0:c9:94:ef:f7) Source: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.103 (165.227.249.103) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 88 Identification: 0x0290 (656) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf93f [correct] Good: True Bad : False Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.103 (165.227.249.103) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 68 Checksum: 0x333e [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xCCA848602F8E7DF0 Responder cookie: 0xC90DACB7CEC7F420 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0xDD597172 Length: 60 Encrypted payload (32 bytes) 0000 00 d0 c9 94 ef f7 00 0c 29 96 e1 fa 08 00 45 00 ........).....E. 0010 00 58 02 90 00 00 80 11 f9 3f a5 e3 f9 96 a5 e3 .X.......?...... 0020 f9 67 01 f4 01 f4 00 44 33 3e cc a8 48 60 2f 8e .g.....D3>..H`/. 0030 7d f0 c9 0d ac b7 ce c7 f4 20 08 10 20 01 dd 59 }........ .. ..Y 0040 71 72 00 00 00 3c b1 e8 ba 0c 42 34 af f0 14 1b qr...<....B4.... 0050 6b 71 22 72 f2 09 8d 6e d8 31 c7 52 6c cc 67 fe kq"r...n.1.Rl.g. 0060 51 36 0d 00 c5 13 Q6.... Frame 10 (398 bytes on wire, 398 bytes captured) Arrival Time: Aug 10, 2006 14:52:01.385224000 Time delta from previous packet: 5.570201000 seconds Time since reference or first frame: 6.670441000 seconds Frame Number: 10 Packet Length: 398 bytes Capture Length: 398 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa), Dst: 00:d0:c9:94:ef:f7 (00:d0:c9:94:ef:f7) Destination: 00:d0:c9:94:ef:f7 (00:d0:c9:94:ef:f7) Source: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.103 (165.227.249.103) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 384 Identification: 0x0291 (657) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: ESP (0x32) Header checksum: 0xf7f5 [correct] Good: True Bad : False Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.103 (165.227.249.103) Encapsulating Security Payload SPI: 0xeb839988 Sequence: 1 Data (356 bytes) 0000 00 d0 c9 94 ef f7 00 0c 29 96 e1 fa 08 00 45 00 ........).....E. 0010 01 80 02 91 00 00 80 32 f7 f5 a5 e3 f9 96 a5 e3 .......2........ 0020 f9 67 eb 83 99 88 00 00 00 01 22 a9 22 12 77 a2 .g........".".w. 0030 aa 23 ad bf 84 db b8 2b a1 55 12 26 23 c8 35 90 .#.....+.U.&#.5. 0040 e4 46 67 2c 03 30 4d b4 91 de 6e 20 51 e8 24 15 .Fg,.0M...n Q.$. 0050 60 d9 d0 ba 75 01 a4 48 59 a1 27 e6 11 15 2a 02 `...u..HY.'...*. 0060 26 77 07 83 c8 e7 6e dc ab a4 53 a4 32 99 de 78 &w....n...S.2..x 0070 89 dc 43 96 5d 8a 77 01 b7 b1 9e d2 f5 93 14 ed ..C.].w......... 0080 85 13 a1 93 d4 b2 82 be 8f 4c 6a e2 13 4b 54 bc .........Lj..KT. 0090 d1 41 5f c3 c4 25 04 a9 ef 35 5a 59 31 92 3a 56 .A_..%...5ZY1.:V 00a0 45 3e 47 f1 b4 8b 32 e4 6d aa 20 09 41 75 0e 9e E>G...2.m. .Au.. 00b0 76 f5 6d fb 8d 84 f3 ce 00 bb 35 7b ea f8 1f 4f v.m.......5{...O 00c0 21 2e cc 2d cc f3 2b 8e 2a 9d 04 4f 6d 4a 77 2f !..-..+.*..OmJw/ 00d0 81 1f 9f 55 86 40 ad c8 cd c4 dd 7e 18 91 1c e8 ...U.@.....~.... 00e0 7c 98 ec ac 5a 48 24 94 9d 14 0f 15 6c 4a e1 25 |...ZH$.....lJ.% 00f0 59 fa ca f8 5e 59 2f d2 d9 43 80 40 df d5 67 0a Y...^Y/..C.@..g. 0100 48 91 f7 80 fb 47 8d 0a 45 fb 0d 23 23 a2 57 aa H....G..E..##.W. 0110 2d 0e 81 ab 08 38 30 5e 8f 32 3c 65 a6 60 1a 80 -....80^.2ig.H.|.. 0150 81 fc 82 8a e7 e7 1f bc 69 5b 2b 49 94 b7 7a fe ........i[+I..z. 0160 87 8e 25 b1 29 aa b4 c8 fd 8e 70 e6 47 1b 2d e9 ..%.).....p.G.-. 0170 a0 96 d8 52 e4 17 d8 75 0a f2 2a 87 58 31 3e dc ...R...u..*.X1>. 0180 1d 0e 88 56 e2 65 0a 8c 07 c6 3a 96 d8 a4 ...V.e....:... Frame 11 (398 bytes on wire, 398 bytes captured) Arrival Time: Aug 10, 2006 14:52:01.398043000 Time delta from previous packet: 0.012819000 seconds Time since reference or first frame: 6.683260000 seconds Frame Number: 11 Packet Length: 398 bytes Capture Length: 398 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:d0:c9:94:ef:f7 (00:d0:c9:94:ef:f7), Dst: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Destination: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Source: 00:d0:c9:94:ef:f7 (00:d0:c9:94:ef:f7) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.103 (165.227.249.103), Dst: 165.227.249.150 (165.227.249.150) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 384 Identification: 0x0000 (0) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x3a87 [correct] Good: True Bad : False Source: 165.227.249.103 (165.227.249.103) Destination: 165.227.249.150 (165.227.249.150) Encapsulating Security Payload SPI: 0x0d5bd81f Sequence: 1 Data (356 bytes) 0000 00 0c 29 96 e1 fa 00 d0 c9 94 ef f7 08 00 45 00 ..)...........E. 0010 01 80 00 00 00 00 40 32 3a 87 a5 e3 f9 67 a5 e3 ......@2:....g.. 0020 f9 96 0d 5b d8 1f 00 00 00 01 8a fe a3 b6 d6 bc ...[............ 0030 73 64 38 5b 9a 37 a5 06 c0 3e 0c 1c d3 4d 71 5d sd8[.7...>...Mq] 0040 4e b5 01 c8 e7 d6 64 05 05 b1 0d 95 94 ca 24 3d N.....d.......$= 0050 fa a1 2e 56 b6 38 e7 cb 96 e7 dc 81 c7 5f df d4 ...V.8......._.. 0060 7b b7 20 39 da bf 12 8f a7 58 16 29 bb 6c fa 7d {. 9.....X.).l.} 0070 28 f2 9d fc 7a e2 a8 5b af da d7 4d ec 88 01 26 (...z..[...M...& 0080 07 e3 eb 9c d3 27 2a 62 27 a2 29 fc 02 db 91 62 .....'*b'.)....b 0090 94 78 c1 92 e5 ce 1e 5d e5 a2 68 5a 6f a0 79 c2 .x.....]..hZo.y. 00a0 1d af da 45 52 a0 db 83 50 ea 8d b0 75 d8 68 c8 ...ER...P...u.h. 00b0 db be bc 20 0a bf 76 4a 1f 23 f8 42 f5 a4 41 14 ... ..vJ.#.B..A. 00c0 0a d5 cb 2c 83 48 28 68 a8 b8 67 91 68 9f 8c 87 ...,.H(h..g.h... 00d0 64 ed f7 83 c0 2b b4 f4 7a ec 4d ff 36 52 7c 56 d....+..z.M.6R|V 00e0 19 bb ba 4f 8e ab 4b 99 23 f9 cf 6a 39 14 cf 40 ...O..K.#..j9..@ 00f0 23 31 7c c7 75 f5 ce 0f 4c d9 da 0e 95 95 e9 93 #1|.u...L....... 0100 34 b4 4d a9 6e 5d 04 ba c6 b9 20 1a b3 68 be 54 4.M.n].... ..h.T 0110 be 66 e0 c4 c0 72 37 b7 82 81 0b d5 61 5e 30 a3 .f...r7.....a^0. 0120 11 2f cb 7a bb 90 bd 5b e9 b8 74 19 71 d6 38 39 ./.z...[..t.q.89 0130 f8 23 b7 5f dd 3d 7e 09 13 84 67 c9 ee 4c 58 45 .#._.=~...g..LXE 0140 46 92 f1 d6 68 ac 59 ca d0 58 da f9 fe 99 51 86 F...h.Y..X....Q. 0150 b7 4e 0a 7a 80 82 f9 d3 4c a0 a2 cd ef 75 44 90 .N.z....L....uD. 0160 3a 3d 9b 0d 3a fe aa b4 a9 24 a5 f0 e6 42 ef b6 :=..:....$...B.. 0170 bb 46 dc 5e c9 6c ec db f0 fd e9 df 62 fc 54 bd .F.^.l......b.T. 0180 4c 7e 4a fb 66 fc 9a 00 78 83 74 8b ed 8e L~J.f...x.t...