Frame 1 (222 bytes on wire, 222 bytes captured) Arrival Time: Aug 13, 2006 12:07:13.726915000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 222 bytes Capture Length: 222 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa), Dst: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 208 Identification: 0x01a1 (417) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf9b3 [correct] Good: True Bad : False Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.106 (165.227.249.106) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 188 Checksum: 0xf35f [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x582B9F90C548263F Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 180 Security Association payload Next payload: Vendor ID (13) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 40 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 32 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: unknown vendor ID: 0x4A131C81070358455C5728F20E95452F Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-03 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: RFC 3706 Detecting Dead IKE Peers (DPD) 0000 00 a0 8e 72 1e 40 00 0c 29 96 e1 fa 08 00 45 00 ...r.@..).....E. 0010 00 d0 01 a1 00 00 80 11 f9 b3 a5 e3 f9 96 a5 e3 ................ 0020 f9 6a 01 f4 01 f4 00 bc f3 5f 58 2b 9f 90 c5 48 .j......._X+...H 0030 26 3f 00 00 00 00 00 00 00 00 01 10 02 00 00 00 &?.............. 0040 00 00 00 00 00 b4 0d 00 00 34 00 00 00 01 00 00 .........4...... 0050 00 01 00 00 00 28 01 01 00 01 00 00 00 20 01 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 04 00 02 80 03 ................ 0070 00 01 80 0b 00 01 80 0c 70 80 0d 00 00 14 4a 13 ........p.....J. 0080 1c 81 07 03 58 45 5c 57 28 f2 0e 95 45 2f 0d 00 ....XE\W(...E/.. 0090 00 14 7d 94 19 a6 53 10 ca 6f 2c 17 9d 92 15 52 ..}...S..o,....R 00a0 9d 56 0d 00 00 14 90 cb 80 91 3e bb 69 6e 08 63 .V........>.in.c 00b0 81 b5 ec 42 7b 1f 0d 00 00 14 44 85 15 2d 18 b6 ...B{.....D..-.. 00c0 bb cd 0b e8 a8 46 95 79 dd cc 00 00 00 14 af ca .....F.y........ 00d0 d7 13 68 a1 f1 c9 6b 86 96 fc 77 57 01 00 ..h...k...wW.. Frame 2 (142 bytes on wire, 142 bytes captured) Arrival Time: Aug 13, 2006 12:07:13.917192000 Time delta from previous packet: 0.190277000 seconds Time since reference or first frame: 0.190277000 seconds Frame Number: 2 Packet Length: 142 bytes Capture Length: 142 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40), Dst: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Destination: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.106 (165.227.249.106), Dst: 165.227.249.150 (165.227.249.150) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 128 Identification: 0x79d8 (31192) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xc1cc [correct] Good: True Bad : False Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.150 (165.227.249.150) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 108 Checksum: 0x361e [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x582B9F90C548263F Responder cookie: 0x4D66421CCE7C6527 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 100 Security Association payload Next payload: Vendor ID (13) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 40 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 32 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: RFC 3706 Detecting Dead IKE Peers (DPD) 0000 00 0c 29 96 e1 fa 00 a0 8e 72 1e 40 08 00 45 00 ..)......r.@..E. 0010 00 80 79 d8 00 00 40 11 c1 cc a5 e3 f9 6a a5 e3 ..y...@......j.. 0020 f9 96 01 f4 01 f4 00 6c 36 1e 58 2b 9f 90 c5 48 .......l6.X+...H 0030 26 3f 4d 66 42 1c ce 7c 65 27 01 10 02 00 00 00 &?MfB..|e'...... 0040 00 00 00 00 00 64 0d 00 00 34 00 00 00 01 00 00 .....d...4...... 0050 00 01 00 00 00 28 01 01 00 01 00 00 00 20 01 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 03 00 01 80 04 ................ 0070 00 02 80 0b 00 01 80 0c 70 80 00 00 00 14 af ca ........p....... 0080 d7 13 68 a1 f1 c9 6b 86 96 fc 77 57 01 00 ..h...k...wW.. Frame 3 (222 bytes on wire, 222 bytes captured) Arrival Time: Aug 13, 2006 12:07:13.953904000 Time delta from previous packet: 0.036712000 seconds Time since reference or first frame: 0.226989000 seconds Frame Number: 3 Packet Length: 222 bytes Capture Length: 222 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa), Dst: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 208 Identification: 0x01a2 (418) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf9b2 [correct] Good: True Bad : False Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.106 (165.227.249.106) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 188 Checksum: 0x94ea [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x582B9F90C548263F Responder cookie: 0x4D66421CCE7C6527 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 180 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 20 Nonce Data 0000 00 a0 8e 72 1e 40 00 0c 29 96 e1 fa 08 00 45 00 ...r.@..).....E. 0010 00 d0 01 a2 00 00 80 11 f9 b2 a5 e3 f9 96 a5 e3 ................ 0020 f9 6a 01 f4 01 f4 00 bc 94 ea 58 2b 9f 90 c5 48 .j........X+...H 0030 26 3f 4d 66 42 1c ce 7c 65 27 04 10 02 00 00 00 &?MfB..|e'...... 0040 00 00 00 00 00 b4 0a 00 00 84 ba fb 61 79 e3 7a ............ay.z 0050 ce 8d 62 c3 b2 a4 e4 5d 74 b9 5d 4b f2 26 f2 c9 ..b....]t.]K.&.. 0060 99 a7 aa a9 cd 61 00 44 d7 b6 f3 02 24 72 b0 6d .....a.D....$r.m 0070 4f 34 88 08 97 c3 40 91 99 cf 8a 15 fc 13 84 52 O4....@........R 0080 98 74 56 c4 65 1b f3 04 e7 c7 28 8f c2 96 34 e2 .tV.e.....(...4. 0090 4a c2 c1 2e d3 aa 14 32 52 de e7 9a 2a bb 1f 32 J......2R...*..2 00a0 4c 15 90 8e e6 04 75 2a bc 43 b2 ce c4 ec a7 85 L.....u*.C...... 00b0 b0 23 57 6d 22 9d ca d4 e0 17 de 43 4e 8f a7 5b .#Wm"......CN..[ 00c0 52 2d 30 9d a1 65 4e e5 39 99 00 00 00 14 0c c4 R-0..eN.9....... 00d0 c8 a8 e8 1b ab 9a 2c 31 00 41 01 d0 22 59 ......,1.A.."Y Frame 4 (258 bytes on wire, 258 bytes captured) Arrival Time: Aug 13, 2006 12:07:14.092839000 Time delta from previous packet: 0.138935000 seconds Time since reference or first frame: 0.365924000 seconds Frame Number: 4 Packet Length: 258 bytes Capture Length: 258 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40), Dst: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Destination: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.106 (165.227.249.106), Dst: 165.227.249.150 (165.227.249.150) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 244 Identification: 0x79d9 (31193) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xc157 [correct] Good: True Bad : False Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.150 (165.227.249.150) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 224 Checksum: 0x32e9 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x582B9F90C548263F Responder cookie: 0x4D66421CCE7C6527 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 216 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: Vendor ID (13) Length: 24 Nonce Data Vendor ID payload Next payload: NONE (0) Length: 32 Vendor ID: unknown vendor ID: 0x030000145E166B8354E13F9D1707EA608B7E3A8800000008... 0000 00 0c 29 96 e1 fa 00 a0 8e 72 1e 40 08 00 45 00 ..)......r.@..E. 0010 00 f4 79 d9 00 00 40 11 c1 57 a5 e3 f9 6a a5 e3 ..y...@..W...j.. 0020 f9 96 01 f4 01 f4 00 e0 32 e9 58 2b 9f 90 c5 48 ........2.X+...H 0030 26 3f 4d 66 42 1c ce 7c 65 27 04 10 02 00 00 00 &?MfB..|e'...... 0040 00 00 00 00 00 d8 0a 00 00 84 c8 a5 38 c1 f6 11 ............8... 0050 8e 03 b2 95 0f 7d f1 a0 5a be cf a1 68 a6 d7 fe .....}..Z...h... 0060 fd d6 ee c6 cb f8 85 ee 30 ae 7b 30 12 11 05 f6 ........0.{0.... 0070 ad 50 f9 cb 61 74 fb d0 56 f2 f3 05 ee b3 31 0e .P..at..V.....1. 0080 07 5b 24 fd c1 bd 27 45 a8 0c 56 8d 6a 09 a0 60 .[$...'E..V.j..` 0090 63 23 8f 7a 23 4d da 7f 45 4d c6 6d a3 a0 c7 db c#.z#M..EM.m.... 00a0 f0 6d 2e c3 e0 73 89 36 ba fc 5f 58 62 2a 1f 20 .m...s.6.._Xb*. 00b0 7a 09 10 38 50 6f e9 9d 11 40 46 db 94 bd ac 8d z..8Po...@F..... 00c0 c3 7a be 8b 3f b4 69 d7 d1 77 0d 00 00 18 de 83 .z..?.i..w...... 00d0 95 af 1d 66 13 35 45 58 08 1b f6 49 80 df 88 5c ...f.5EX...I...\ 00e0 8f 18 00 00 00 20 03 00 00 14 5e 16 6b 83 54 e1 ..... ....^.k.T. 00f0 3f 9d 17 07 ea 60 8b 7e 3a 88 00 00 00 08 00 06 ?....`.~:....... 0100 00 03 .. Frame 5 (142 bytes on wire, 142 bytes captured) Arrival Time: Aug 13, 2006 12:07:14.151007000 Time delta from previous packet: 0.058168000 seconds Time since reference or first frame: 0.424092000 seconds Frame Number: 5 Packet Length: 142 bytes Capture Length: 142 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa), Dst: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 128 Identification: 0x01a3 (419) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xfa01 [correct] Good: True Bad : False Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.106 (165.227.249.106) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 108 Checksum: 0x257e [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x582B9F90C548263F Responder cookie: 0x4D66421CCE7C6527 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 100 Encrypted payload (72 bytes) 0000 00 a0 8e 72 1e 40 00 0c 29 96 e1 fa 08 00 45 00 ...r.@..).....E. 0010 00 80 01 a3 00 00 80 11 fa 01 a5 e3 f9 96 a5 e3 ................ 0020 f9 6a 01 f4 01 f4 00 6c 25 7e 58 2b 9f 90 c5 48 .j.....l%~X+...H 0030 26 3f 4d 66 42 1c ce 7c 65 27 05 10 02 01 00 00 &?MfB..|e'...... 0040 00 00 00 00 00 64 c9 b5 36 09 47 f9 31 9a d5 df .....d..6.G.1... 0050 dc 24 84 35 c3 5e 51 88 4c a3 27 6c 13 f7 51 94 .$.5.^Q.L.'l..Q. 0060 6b e5 51 df 00 57 8c 73 65 ca ce e9 2e bc eb fe k.Q..W.se....... 0070 32 c6 1f e1 91 93 c3 80 4c 84 b6 49 d9 86 6c 2e 2.......L..I..l. 0080 72 1d eb 85 06 27 b1 4d a0 7b f5 f9 15 2e r....'.M.{.... Frame 6 (134 bytes on wire, 134 bytes captured) Arrival Time: Aug 13, 2006 12:07:14.163824000 Time delta from previous packet: 0.012817000 seconds Time since reference or first frame: 0.436909000 seconds Frame Number: 6 Packet Length: 134 bytes Capture Length: 134 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40), Dst: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Destination: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.106 (165.227.249.106), Dst: 165.227.249.150 (165.227.249.150) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x79da (31194) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xc1d2 [correct] Good: True Bad : False Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.150 (165.227.249.150) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 100 Checksum: 0x0ca7 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x582B9F90C548263F Responder cookie: 0x4D66421CCE7C6527 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 92 Encrypted payload (64 bytes) 0000 00 0c 29 96 e1 fa 00 a0 8e 72 1e 40 08 00 45 00 ..)......r.@..E. 0010 00 78 79 da 00 00 40 11 c1 d2 a5 e3 f9 6a a5 e3 .xy...@......j.. 0020 f9 96 01 f4 01 f4 00 64 0c a7 58 2b 9f 90 c5 48 .......d..X+...H 0030 26 3f 4d 66 42 1c ce 7c 65 27 05 10 02 01 00 00 &?MfB..|e'...... 0040 00 00 00 00 00 5c 57 ad 27 0f 4c 3b d5 c1 b9 8f .....\W.'.L;.... 0050 9b 28 ee 85 69 fd 6c 31 ab b0 9a e1 7d e8 6f da .(..i.l1....}.o. 0060 bb b5 d0 73 9d d9 5f f0 83 17 ad 3c 77 fb 7f eb ...s.._.....2 00e0 eb 84 82 ed 87 58 e0 a8 fd c1 dc d4 0c 62 45 c0 .....X.......bE. 00f0 59 b0 3a e6 76 b9 12 15 52 f3 5f be 68 d6 29 d6 Y.:.v...R._.h.). 0100 95 8b c2 52 a3 c5 a3 f6 dc 2c 7e 0f 0f 7e af 43 ...R.....,~..~.C 0110 86 58 62 44 91 5c bb ed 96 ae 39 e1 ee 8b 97 93 .XbD.\....9..... 0120 52 44 e4 02 1e 17 f1 03 15 21 b3 d2 80 f4 30 e1 RD.......!....0. 0130 c1 1f be c6 f4 09 18 5c bb 7e 41 78 6d f7 8e 8a .......\.~Axm... 0140 ba cd 90 df 87 93 77 49 65 f4 cf 78 82 2c ......wIe..x., Frame 8 (334 bytes on wire, 334 bytes captured) Arrival Time: Aug 13, 2006 12:07:14.681618000 Time delta from previous packet: 0.478245000 seconds Time since reference or first frame: 0.954703000 seconds Frame Number: 8 Packet Length: 334 bytes Capture Length: 334 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40), Dst: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Destination: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.106 (165.227.249.106), Dst: 165.227.249.150 (165.227.249.150) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 320 Identification: 0x79db (31195) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xc109 [correct] Good: True Bad : False Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.150 (165.227.249.150) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 300 Checksum: 0x1f95 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x582B9F90C548263F Responder cookie: 0x4D66421CCE7C6527 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x33C59022 Length: 292 Encrypted payload (264 bytes) 0000 00 0c 29 96 e1 fa 00 a0 8e 72 1e 40 08 00 45 00 ..)......r.@..E. 0010 01 40 79 db 00 00 40 11 c1 09 a5 e3 f9 6a a5 e3 .@y...@......j.. 0020 f9 96 01 f4 01 f4 01 2c 1f 95 58 2b 9f 90 c5 48 .......,..X+...H 0030 26 3f 4d 66 42 1c ce 7c 65 27 08 10 20 01 33 c5 &?MfB..|e'.. .3. 0040 90 22 00 00 01 24 3d 20 30 0d 7b e5 78 da 71 ef ."...$= 0.{.x.q. 0050 8e 0c 8b ad d5 73 e1 ff c5 73 c1 80 b5 a1 06 f9 .....s...s...... 0060 e8 39 94 78 42 92 e4 03 fe 34 4d 16 3a 60 16 49 .9.xB....4M.:`.I 0070 f1 25 ca d5 80 34 e5 39 5e cd 60 89 8c 57 ba d7 .%...4.9^.`..W.. 0080 23 0e b7 c2 3f 39 a2 cb 36 95 e9 8c 9c db dc 0c #...?9..6....... 0090 28 cf e8 c3 23 a6 99 3a 0a 72 7a fc c0 4d a8 e8 (...#..:.rz..M.. 00a0 9e e5 59 86 a9 8e a7 8c 12 67 28 7c b3 e1 7a cb ..Y......g(|..z. 00b0 4f 64 ed 75 69 e9 8d 20 97 4e 0f f4 47 0e 7b 83 Od.ui.. .N..G.{. 00c0 c5 f5 e0 50 0e 0c 27 76 33 63 fa 95 60 f3 23 12 ...P..'v3c..`.#. 00d0 a1 ed 9d fa 28 4d 90 b4 df 92 46 85 3f 06 19 28 ....(M....F.?..( 00e0 6c fb a2 a9 5a 63 48 26 27 06 66 81 65 3a c2 f8 l...ZcH&'.f.e:.. 00f0 4f 45 99 8e b2 0e 56 a8 c1 6a 0c e0 c0 e4 fb d7 OE....V..j...... 0100 0b b2 57 6e bb 39 02 26 43 06 3a 69 2c be 7b 1e ..Wn.9.&C.:i,.{. 0110 42 78 7e 98 38 38 37 54 81 74 2a 94 59 b9 1b 86 Bx~.887T.t*.Y... 0120 08 20 db e1 5d 81 83 ca aa 9c 12 ef 3e 21 34 d9 . ..].......>!4. 0130 bb cf a2 48 85 03 90 0e cf 64 5d 15 e6 69 ba d8 ...H.....d]..i.. 0140 dd 49 3a 6f 98 b7 c4 c6 47 2b 1c 36 c3 be .I:o....G+.6.. Frame 9 (102 bytes on wire, 102 bytes captured) Arrival Time: Aug 13, 2006 12:07:14.953352000 Time delta from previous packet: 0.271734000 seconds Time since reference or first frame: 1.226437000 seconds Frame Number: 9 Packet Length: 102 bytes Capture Length: 102 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa), Dst: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 88 Identification: 0x01a5 (421) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xfa27 [correct] Good: True Bad : False Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.106 (165.227.249.106) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 68 Checksum: 0x3f09 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x582B9F90C548263F Responder cookie: 0x4D66421CCE7C6527 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x33C59022 Length: 60 Encrypted payload (32 bytes) 0000 00 a0 8e 72 1e 40 00 0c 29 96 e1 fa 08 00 45 00 ...r.@..).....E. 0010 00 58 01 a5 00 00 80 11 fa 27 a5 e3 f9 96 a5 e3 .X.......'...... 0020 f9 6a 01 f4 01 f4 00 44 3f 09 58 2b 9f 90 c5 48 .j.....D?.X+...H 0030 26 3f 4d 66 42 1c ce 7c 65 27 08 10 20 01 33 c5 &?MfB..|e'.. .3. 0040 90 22 00 00 00 3c c5 ef 37 0f 8d 52 20 dc b7 c5 ."...<..7..R ... 0050 dc 34 7f 3a ff 45 8e 95 c1 55 97 86 f4 c9 08 23 .4.:.E...U.....# 0060 b9 b1 2a 89 64 ca ..*.d. Frame 10 (398 bytes on wire, 398 bytes captured) Arrival Time: Aug 13, 2006 12:07:20.976579000 Time delta from previous packet: 6.023227000 seconds Time since reference or first frame: 7.249664000 seconds Frame Number: 10 Packet Length: 398 bytes Capture Length: 398 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa), Dst: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 384 Identification: 0x01a6 (422) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: ESP (0x32) Header checksum: 0xf8dd [correct] Good: True Bad : False Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.106 (165.227.249.106) Encapsulating Security Payload SPI: 0xcfbd3000 Sequence: 1 Data (356 bytes) 0000 00 a0 8e 72 1e 40 00 0c 29 96 e1 fa 08 00 45 00 ...r.@..).....E. 0010 01 80 01 a6 00 00 80 32 f8 dd a5 e3 f9 96 a5 e3 .......2........ 0020 f9 6a cf bd 30 00 00 00 00 01 05 ba 1a 25 44 c1 .j..0........%D. 0030 5a e9 ef a9 d4 1f 91 14 33 2a d6 f0 9c fd 68 b1 Z.......3*....h. 0040 69 a8 db ce 57 08 7d fb b9 c6 ee fa d0 1e 7a 3a i...W.}.......z: 0050 27 ab 25 93 8f b5 90 d8 40 00 79 76 8d 76 d5 c8 '.%.....@.yv.v.. 0060 8d f5 b1 73 dc cc e7 e5 b5 bc 38 80 10 17 e5 54 ...s......8....T 0070 e5 29 b3 ac 21 69 66 2c 0c 57 af f0 1c 6b a5 8c .)..!if,.W...k.. 0080 ab 85 a1 60 1b 87 fb e5 86 d2 61 f0 35 5c 74 0c ...`......a.5\t. 0090 8b 83 d5 9f 43 5e 2b 17 a3 61 dc 26 42 c5 d7 22 ....C^+..a.&B.." 00a0 e0 79 63 ec 95 80 51 79 e3 4d 0e 38 5c 0a 17 32 .yc...Qy.M.8\..2 00b0 d1 25 fa 09 69 e7 97 3f c5 6b 2c 8f 0c 71 46 24 .%..i..?.k,..qF$ 00c0 40 04 63 4e 24 44 13 8c 2e 0d 78 f5 d3 16 e5 bf @.cN$D....x..... 00d0 c7 ad b7 20 94 9e 8b 70 78 bc 2f ed 95 39 9e c2 ... ...px./..9.. 00e0 a9 97 58 ae 5c 6b 17 66 b4 6e f1 f0 73 3e b4 23 ..X.\k.f.n..s>.# 00f0 b5 d4 b9 8a d2 62 4d f6 cd 5f 36 2d 6b 7c 80 50 .....bM.._6-k|.P 0100 14 4d af 36 8a fd 19 61 e5 d2 23 9e 5c ac 1c 71 .M.6...a..#.\..q 0110 76 c2 c5 f1 e5 98 a0 20 de 3c 3b ea 0c 52 f5 46 v...... .<;..R.F 0120 93 bf fa 85 b8 07 0c 60 cd 32 11 de c6 8a 1f 60 .......`.2.....` 0130 68 ea 10 25 25 bb cf 79 41 45 0c 55 b0 c1 ff 9d h..%%..yAE.U.... 0140 a1 53 a7 0d 12 99 0a e7 1e d8 e0 6b 99 2f 28 f9 .S.........k./(. 0150 50 0a 01 30 31 de 47 04 45 16 f8 29 df b6 b8 de P..01.G.E..).... 0160 cc 82 da 2f aa 95 e8 07 74 d4 4b 5f 46 99 58 71 .../....t.K_F.Xq 0170 03 96 e5 40 2b 1b c9 fa 7c fb 54 a7 6a 12 6a 74 ...@+...|.T.j.jt 0180 11 7a 0a ca 22 9f 4f 97 62 89 af ea 05 86 .z..".O.b..... Frame 11 (398 bytes on wire, 398 bytes captured) Arrival Time: Aug 13, 2006 12:07:29.045354000 Time delta from previous packet: 8.068775000 seconds Time since reference or first frame: 15.318439000 seconds Frame Number: 11 Packet Length: 398 bytes Capture Length: 398 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa), Dst: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 384 Identification: 0x01a7 (423) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: ESP (0x32) Header checksum: 0xf8dc [correct] Good: True Bad : False Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.106 (165.227.249.106) Encapsulating Security Payload SPI: 0xcfbd3000 Sequence: 2 Data (356 bytes) 0000 00 a0 8e 72 1e 40 00 0c 29 96 e1 fa 08 00 45 00 ...r.@..).....E. 0010 01 80 01 a7 00 00 80 32 f8 dc a5 e3 f9 96 a5 e3 .......2........ 0020 f9 6a cf bd 30 00 00 00 00 02 d6 cf e9 02 ff 15 .j..0........... 0030 08 38 f3 47 90 9b 6a ce cc 4b 0f 9b 89 6e 84 2a .8.G..j..K...n.* 0040 e5 93 b7 1b 6f 2f 41 b8 d3 7a 37 f0 8f 5b 2c 30 ....o/A..z7..[,0 0050 17 53 48 b9 be d6 34 47 7b 63 b7 04 4d e2 c2 2e .SH...4G{c..M... 0060 b7 15 c2 59 f5 05 1c 1f 53 86 ea 42 c9 6b 3a b2 ...Y....S..B.k:. 0070 2a 50 83 06 48 d6 e8 2f 35 85 a6 fa 83 7f 63 77 *P..H../5.....cw 0080 69 66 99 09 82 17 4a 9f 6c 10 62 c1 66 ef ff 05 if....J.l.b.f... 0090 84 ef 49 ff 48 a9 ec 7b a3 34 bb 1f f9 5d ff 48 ..I.H..{.4...].H 00a0 12 a7 7a 79 71 83 26 44 92 e7 e0 50 6f 7b 34 bb ..zyq.&D...Po{4. 00b0 eb de fc 80 3a d9 57 8e a6 c4 fd ce af 28 ec ec ....:.W......(.. 00c0 b2 2e 2a 96 ae 26 e6 70 95 da 29 df ee c3 6e a5 ..*..&.p..)...n. 00d0 d0 43 ca b6 2a 5e 69 8d 3b e6 af 94 b8 77 86 53 .C..*^i.;....w.S 00e0 76 5f 20 64 c4 b2 2e d5 9b 80 a1 c0 60 c9 33 35 v_ d........`.35 00f0 a3 3d 13 ca d5 ca 77 06 15 82 72 a8 68 a2 b8 26 .=....w...r.h..& 0100 2c 1a 71 43 02 ed 14 a4 8c 8d fd cc 02 01 1e 1e ,.qC............ 0110 fd 30 55 e8 b3 6c 29 1e 23 29 e1 90 e5 86 c6 54 .0U..l).#).....T 0120 98 31 19 5c d1 50 b7 3a 19 1c 19 d1 e9 aa 8d c0 .1.\.P.:........ 0130 26 69 2a eb e1 c7 cb 1f bf ba c2 77 76 0a e1 03 &i*........wv... 0140 24 78 90 43 7b aa f5 87 a2 c3 71 33 6e d5 e9 fc $x.C{.....q3n... 0150 bb 33 51 36 04 8f 63 f6 83 70 79 d3 77 8e 5f 7e .3Q6..c..py.w._~ 0160 76 67 ce c4 b0 4a 6f c8 f2 37 52 f0 8d a6 3f a3 vg...Jo..7R...?. 0170 bf ce a7 2e f2 34 73 d0 8c c6 49 98 bc 9a 0c b2 .....4s...I..... 0180 fa f0 29 b0 3d f1 a9 c3 41 ee 77 b7 05 45 ..).=...A.w..E Frame 12 (398 bytes on wire, 398 bytes captured) Arrival Time: Aug 13, 2006 12:07:38.221998000 Time delta from previous packet: 9.176644000 seconds Time since reference or first frame: 24.495083000 seconds Frame Number: 12 Packet Length: 398 bytes Capture Length: 398 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa), Dst: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 384 Identification: 0x01a8 (424) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: ESP (0x32) Header checksum: 0xf8db [correct] Good: True Bad : False Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.106 (165.227.249.106) Encapsulating Security Payload SPI: 0xcfbd3000 Sequence: 3 Data (356 bytes) 0000 00 a0 8e 72 1e 40 00 0c 29 96 e1 fa 08 00 45 00 ...r.@..).....E. 0010 01 80 01 a8 00 00 80 32 f8 db a5 e3 f9 96 a5 e3 .......2........ 0020 f9 6a cf bd 30 00 00 00 00 03 95 8c 27 29 8a 84 .j..0.......').. 0030 e4 b2 b6 40 e1 00 a9 d8 a6 c3 0e ff 36 95 2f 98 ...@........6./. 0040 7b e2 3f 44 5d 63 dd 4a e1 b0 a5 7b 97 c1 5f f7 {.?D]c.J...{.._. 0050 a4 82 41 2a 23 bd d8 07 32 f2 5b aa 64 de 91 10 ..A*#...2.[.d... 0060 0b f8 6e 53 a1 08 f5 6b 9a be dd d2 64 b8 df b2 ..nS...k....d... 0070 02 33 1f 59 e6 2b 6d 7a 05 26 a7 04 61 55 f9 a9 .3.Y.+mz.&..aU.. 0080 2f fc c6 c7 93 21 4c db 02 6a d5 db af 58 29 3f /....!L..j...X)? 0090 8e ff 60 63 09 8b f6 ac 5a d3 3b 68 12 77 cf 86 ..`c....Z.;h.w.. 00a0 a9 70 2e 6a 9b 4e 8e 6d 45 a0 3f a5 16 f9 65 19 .p.j.N.mE.?...e. 00b0 d8 ed 75 6c b6 98 93 6e 67 1a c7 d5 33 ce d3 2b ..ul...ng...3..+ 00c0 4c 1d 95 e2 b8 51 fd 36 5e 18 dc ee ec f8 8c ab L....Q.6^....... 00d0 5d 62 38 65 1b af 12 0b e2 21 9e 0e c9 4e 1e 21 ]b8e.....!...N.! 00e0 57 d9 f1 1f bf bf 83 6a 76 37 52 e8 69 9b bf 7f W......jv7R.i... 00f0 d6 6b b3 53 be 91 ad 3d d1 c2 7b fe 59 fc c7 0b .k.S...=..{.Y... 0100 24 ab 4a 39 5b 38 0f 1d 19 e5 a0 43 dc be 19 bc $.J9[8.....C.... 0110 7b b3 5d f6 14 91 7d 31 bb 64 01 30 d1 22 04 85 {.]...}1.d.0.".. 0120 bc 42 14 66 8a 15 ad f3 6d f9 ed 00 e8 f1 cc 31 .B.f....m......1 0130 2d db 2d 99 19 d7 b0 92 f4 92 33 1f 9b 8e 28 a8 -.-.......3...(. 0140 91 b3 de 8a db fd 2b 04 c5 52 fe 1f fd fd 60 ea ......+..R....`. 0150 ba e9 b6 28 90 13 89 70 75 79 7f 48 88 a0 45 cd ...(...puy.H..E. 0160 32 99 cf 07 e7 ab 88 95 45 db 4d 88 b3 b0 e2 07 2.......E.M..... 0170 88 1d c1 07 8b 88 35 4f 16 1b 5b d0 f5 72 2b bf ......5O..[..r+. 0180 d8 d3 aa 9d ae 0a 08 6c 3d b8 6c 66 0e a7 .......l=.lf.. Frame 13 (398 bytes on wire, 398 bytes captured) Arrival Time: Aug 13, 2006 12:07:38.234179000 Time delta from previous packet: 0.012181000 seconds Time since reference or first frame: 24.507264000 seconds Frame Number: 13 Packet Length: 398 bytes Capture Length: 398 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40), Dst: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Destination: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.106 (165.227.249.106), Dst: 165.227.249.150 (165.227.249.150) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 384 Identification: 0x79dc (31196) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0xc0a7 [correct] Good: True Bad : False Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.150 (165.227.249.150) Encapsulating Security Payload SPI: 0x2e370e07 Sequence: 1 Data (356 bytes) 0000 00 0c 29 96 e1 fa 00 a0 8e 72 1e 40 08 00 45 00 ..)......r.@..E. 0010 01 80 79 dc 00 00 40 32 c0 a7 a5 e3 f9 6a a5 e3 ..y...@2.....j.. 0020 f9 96 2e 37 0e 07 00 00 00 01 31 e7 86 21 1f fa ...7......1..!.. 0030 16 57 1c a7 4b 58 30 93 44 ce 5e bd 84 46 f2 d7 .W..KX0.D.^..F.. 0040 e4 3f 48 a6 f7 45 bb 09 33 9e 16 62 78 8a c5 aa .?H..E..3..bx... 0050 bd b0 00 01 dc c6 f5 db ff fe 75 46 7e 8b c5 25 ..........uF~..% 0060 60 de 09 f1 aa 25 4a b6 a5 c6 b8 4e 24 1d dc 02 `....%J....N$... 0070 c8 b3 ce eb d1 67 ab 28 2c 15 97 dd 4c 89 dc 34 .....g.(,...L..4 0080 8f 33 7e b7 1f 21 f4 e0 a8 8d 01 e4 25 7a 62 32 .3~..!......%zb2 0090 1f 75 64 74 63 08 ac 8a 85 29 2c 9a 6f 58 6d 2a .udtc....),.oXm* 00a0 16 5d d0 2b 9f 11 df e4 0a 4d 96 44 4d 4b 13 79 .].+.....M.DMK.y 00b0 c4 70 9e cd 25 7c 79 6a 2b 36 eb 02 73 72 4c 0c .p..%|yj+6..srL. 00c0 10 97 c5 ed 82 2e a8 5b 12 7a 64 c9 13 9c fb 6f .......[.zd....o 00d0 75 78 51 91 a0 e3 8a 52 3e 5c 49 dd 54 6f 52 61 uxQ....R>\I.ToRa 00e0 7b 37 ec c4 bf fd d6 23 5f 62 06 a4 11 13 a5 dd {7.....#_b...... 00f0 63 46 a2 f5 f3 53 51 22 d1 a8 db 5f f4 4d 8a c0 cF...SQ"..._.M.. 0100 17 35 b5 98 5a 88 b4 09 8a a9 2d 38 6b 76 52 c9 .5..Z.....-8kvR. 0110 cf 05 64 07 b9 4f 03 50 5e 4a 4e 87 9a dc 09 42 ..d..O.P^JN....B 0120 9d 01 6a 94 06 30 1c 6a 5b 17 55 8e e8 6f a7 87 ..j..0.j[.U..o.. 0130 44 18 18 5f fe 69 dd ec 43 d0 7a 91 07 40 d9 65 D.._.i..C.z..@.e 0140 1c 5c 4c 00 ba 45 98 44 38 19 9a 8c d2 8b 0c c4 .\L..E.D8....... 0150 cc 3e 3d 25 e4 34 6b 07 e6 3b cd 8c 62 4f 6d c8 .>=%.4k..;..bOm. 0160 fa 16 68 ac 09 4a 49 7c 34 0b 87 d7 60 43 3c 6a ..h..JI|4...`Cr. 0120 3e fd c9 66 61 29 9e 35 04 0f cf 04 74 d6 35 34 >..fa).5....t.54 0130 be 12 ca 4f 5c a2 8a 18 b6 c3 bd 3a 01 4b 7e a8 ...O\......:.K~. 0140 cf 46 9b 30 9e 87 14 15 5c 3f 0e 30 eb 66 54 13 .F.0....\?.0.fT. 0150 21 08 7b 36 ab bf 28 3b 70 c2 1f e6 24 88 b7 bf !.{6..(;p...$... 0160 b5 ec c1 20 22 d2 0f 5d bd 05 f8 ed 0e b2 4f fd ... "..]......O. 0170 a7 20 3e 82 0b cb 85 44 ab f5 fd 1a ef 62 74 49 . >....D.....btI 0180 18 23 10 0d ad 65 ca e5 da d6 33 ea df 22 .#...e....3.." Frame 15 (398 bytes on wire, 398 bytes captured) Arrival Time: Aug 13, 2006 12:07:46.298949000 Time delta from previous packet: 0.003475000 seconds Time since reference or first frame: 32.572034000 seconds Frame Number: 15 Packet Length: 398 bytes Capture Length: 398 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40), Dst: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Destination: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.106 (165.227.249.106), Dst: 165.227.249.150 (165.227.249.150) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 384 Identification: 0x79dd (31197) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0xc0a6 [correct] Good: True Bad : False Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.150 (165.227.249.150) Encapsulating Security Payload SPI: 0x2e370e07 Sequence: 2 Data (356 bytes) 0000 00 0c 29 96 e1 fa 00 a0 8e 72 1e 40 08 00 45 00 ..)......r.@..E. 0010 01 80 79 dd 00 00 40 32 c0 a6 a5 e3 f9 6a a5 e3 ..y...@2.....j.. 0020 f9 96 2e 37 0e 07 00 00 00 02 36 1f a7 00 c2 0c ...7......6..... 0030 0d 58 a4 71 4d fe 7c ab 3e de 04 74 ca 01 2e 93 .X.qM.|.>..t.... 0040 74 c3 50 6b d7 67 ab ad 65 aa 47 90 9d 8c 81 4c t.Pk.g..e.G....L 0050 d3 b8 b7 68 a6 0e 75 66 11 ef 5b a9 bd 40 fc 69 ...h..uf..[..@.i 0060 c9 39 b9 5b 64 f0 f5 13 2c 95 2d 87 52 a3 ac 3b .9.[d...,.-.R..; 0070 f9 19 32 46 b0 08 6b e9 db 57 49 08 88 c3 25 18 ..2F..k..WI...%. 0080 2a ef dc d0 9f 59 87 5d e0 d5 a1 11 f1 43 42 3a *....Y.].....CB: 0090 ee 3a c0 6f af e2 78 91 b9 d8 4c 8c 2a b6 f6 24 .:.o..x...L.*..$ 00a0 05 c2 3e 85 8f 44 a1 b0 f4 67 cd 15 99 64 16 78 ..>..D...g...d.x 00b0 b9 d9 66 44 b3 fb 1e 1b ad c8 7c 80 25 66 b2 84 ..fD......|.%f.. 00c0 7c 37 c6 fe 3e df 95 11 02 4a 80 1d b7 bb 2e 47 |7..>....J.....G 00d0 3e 7e 7c 9b 82 32 59 99 98 ea 00 f8 79 63 df e8 >~|..2Y.....yc.. 00e0 df d1 2d 03 77 e6 ae 94 da 69 bf 32 1b e1 33 96 ..-.w....i.2..3. 00f0 e4 05 24 35 32 83 23 98 9a 7e 5b 1c 68 24 8f a6 ..$52.#..~[.h$.. 0100 60 ac 62 f3 bf 24 14 d6 93 91 fd a8 30 4b 0b b2 `.b..$......0K.. 0110 b8 95 6e 95 2e fd a4 e2 c6 89 85 3b 90 d5 b9 41 ..n........;...A 0120 4f 8a 4b 1f b8 a4 4b 9b 4e 00 44 87 76 77 f8 0f O.K...K.N.D.vw.. 0130 68 dd f4 1b b5 23 f4 d0 7a 3c f1 a0 cd c1 b8 46 h....#..z<.....F 0140 22 c2 4f 6b fc 27 a4 4a 7a 7d c1 74 f4 b4 d9 8c ".Ok.'.Jz}.t.... 0150 6e ba 3b 9d 07 ea e6 59 16 b2 35 3e b3 45 7b d6 n.;....Y..5>.E{. 0160 18 85 1d 61 1c a1 ad d8 31 9a e1 ae 1b fb 37 29 ...a....1.....7) 0170 78 41 9c 7f db 02 8e e5 b8 39 e9 ee ae 62 12 f1 xA.......9...b.. 0180 f3 f2 2b 31 df a1 e6 c6 53 01 1c b6 06 89 ..+1....S.....