Frame 1 (222 bytes on wire, 222 bytes captured) Arrival Time: Aug 14, 2006 12:49:38.638417000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 222 bytes Capture Length: 222 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa), Dst: 00:00:24:c0:92:d1 (00:00:24:c0:92:d1) Destination: 00:00:24:c0:92:d1 (00:00:24:c0:92:d1) Source: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.116 (165.227.249.116) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 208 Identification: 0x01ee (494) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf95c [correct] Good: True Bad : False Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.116 (165.227.249.116) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 188 Checksum: 0xed07 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x0F5A644C3D81386A Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 180 Security Association payload Next payload: Vendor ID (13) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 40 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 32 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: unknown vendor ID: 0x4A131C81070358455C5728F20E95452F Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-03 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: RFC 3706 Detecting Dead IKE Peers (DPD) 0000 00 00 24 c0 92 d1 00 0c 29 96 e1 fa 08 00 45 00 ..$.....).....E. 0010 00 d0 01 ee 00 00 80 11 f9 5c a5 e3 f9 96 a5 e3 .........\...... 0020 f9 74 01 f4 01 f4 00 bc ed 07 0f 5a 64 4c 3d 81 .t.........ZdL=. 0030 38 6a 00 00 00 00 00 00 00 00 01 10 02 00 00 00 8j.............. 0040 00 00 00 00 00 b4 0d 00 00 34 00 00 00 01 00 00 .........4...... 0050 00 01 00 00 00 28 01 01 00 01 00 00 00 20 01 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 04 00 02 80 03 ................ 0070 00 01 80 0b 00 01 80 0c 70 80 0d 00 00 14 4a 13 ........p.....J. 0080 1c 81 07 03 58 45 5c 57 28 f2 0e 95 45 2f 0d 00 ....XE\W(...E/.. 0090 00 14 7d 94 19 a6 53 10 ca 6f 2c 17 9d 92 15 52 ..}...S..o,....R 00a0 9d 56 0d 00 00 14 90 cb 80 91 3e bb 69 6e 08 63 .V........>.in.c 00b0 81 b5 ec 42 7b 1f 0d 00 00 14 44 85 15 2d 18 b6 ...B{.....D..-.. 00c0 bb cd 0b e8 a8 46 95 79 dd cc 00 00 00 14 af ca .....F.y........ 00d0 d7 13 68 a1 f1 c9 6b 86 96 fc 77 57 01 00 ..h...k...wW.. Frame 2 (142 bytes on wire, 142 bytes captured) Arrival Time: Aug 14, 2006 12:49:38.652926000 Time delta from previous packet: 0.014509000 seconds Time since reference or first frame: 0.014509000 seconds Frame Number: 2 Packet Length: 142 bytes Capture Length: 142 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:00:24:c0:92:d1 (00:00:24:c0:92:d1), Dst: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Destination: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Source: 00:00:24:c0:92:d1 (00:00:24:c0:92:d1) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.116 (165.227.249.116), Dst: 165.227.249.150 (165.227.249.150) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 128 Identification: 0x020e (526) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 30 Protocol: UDP (0x11) Header checksum: 0x5b8d [correct] Good: True Bad : False Source: 165.227.249.116 (165.227.249.116) Destination: 165.227.249.150 (165.227.249.150) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 108 Checksum: 0x0735 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x0F5A644C3D81386A Responder cookie: 0x3D8DB45095816AD1 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 100 Security Association payload Next payload: Vendor ID (13) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 40 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 32 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-00 0000 00 0c 29 96 e1 fa 00 00 24 c0 92 d1 08 00 45 00 ..).....$.....E. 0010 00 80 02 0e 00 00 1e 11 5b 8d a5 e3 f9 74 a5 e3 ........[....t.. 0020 f9 96 01 f4 01 f4 00 6c 07 35 0f 5a 64 4c 3d 81 .......l.5.ZdL=. 0030 38 6a 3d 8d b4 50 95 81 6a d1 01 10 02 00 00 00 8j=..P..j....... 0040 00 00 00 00 00 64 0d 00 00 34 00 00 00 01 00 00 .....d...4...... 0050 00 01 00 00 00 28 01 01 00 01 00 00 00 20 01 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 04 00 02 80 03 ................ 0070 00 01 80 0b 00 01 80 0c 70 80 00 00 00 14 44 85 ........p.....D. 0080 15 2d 18 b6 bb cd 0b e8 a8 46 95 79 dd cc .-.......F.y.. Frame 3 (270 bytes on wire, 270 bytes captured) Arrival Time: Aug 14, 2006 12:49:38.701262000 Time delta from previous packet: 0.048336000 seconds Time since reference or first frame: 0.062845000 seconds Frame Number: 3 Packet Length: 270 bytes Capture Length: 270 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa), Dst: 00:00:24:c0:92:d1 (00:00:24:c0:92:d1) Destination: 00:00:24:c0:92:d1 (00:00:24:c0:92:d1) Source: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.116 (165.227.249.116) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 256 Identification: 0x01ef (495) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf92b [correct] Good: True Bad : False Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.116 (165.227.249.116) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 236 Checksum: 0x1c29 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x0F5A644C3D81386A Responder cookie: 0x3D8DB45095816AD1 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 228 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NAT-D (draft-ietf-ipsec-nat-t-ike-01 to 03) (130) Length: 20 Nonce Data NAT-D (draft-ietf-ipsec-nat-t-ike-01 to 03) payload Next payload: NAT-D (draft-ietf-ipsec-nat-t-ike-01 to 03) (130) Length: 24 Hash of address and port: 1F45B9ABC7177ED26F0A583B36DA9FB05F47491A NAT-D (draft-ietf-ipsec-nat-t-ike-01 to 03) payload Next payload: NONE (0) Length: 24 Hash of address and port: 408F43A44577C9257E644791C8E0EF206E8A0F0B 0000 00 00 24 c0 92 d1 00 0c 29 96 e1 fa 08 00 45 00 ..$.....).....E. 0010 01 00 01 ef 00 00 80 11 f9 2b a5 e3 f9 96 a5 e3 .........+...... 0020 f9 74 01 f4 01 f4 00 ec 1c 29 0f 5a 64 4c 3d 81 .t.......).ZdL=. 0030 38 6a 3d 8d b4 50 95 81 6a d1 04 10 02 00 00 00 8j=..P..j....... 0040 00 00 00 00 00 e4 0a 00 00 84 a7 3c b0 9d 69 a5 ...........<..i. 0050 d2 f5 9d 1b ab d9 c1 28 6c cc 82 6f 93 16 cd 7f .......(l..o.... 0060 94 95 64 1c 2e 7b 21 b7 2d 8d bd bc 02 57 b1 ee ..d..{!.-....W.. 0070 78 c2 bd 1c d6 25 1d b4 f1 71 fe 8c f0 d1 5c 94 x....%...q....\. 0080 25 78 26 d9 41 f0 a4 f8 af c3 5c cc 87 c2 5c 67 %x&.A.....\...\g 0090 63 dd da 2a 9f c4 13 20 1e 4e ee 15 1a a2 aa 0f c..*... .N...... 00a0 3c 99 74 cf fb d5 55 18 ca 75 d9 9c f5 99 2e 54 <.t...U..u.....T 00b0 49 5d c0 36 6c 62 f0 94 eb 4e d7 be 83 bf be 24 I].6lb...N.....$ 00c0 44 5e 86 e9 22 e5 0c 50 96 5f 82 00 00 14 64 6b D^.."..P._....dk 00d0 fd 01 9b 5a 5f 48 66 a6 92 71 5d 13 1d 6b 82 00 ...Z_Hf..q]..k.. 00e0 00 18 1f 45 b9 ab c7 17 7e d2 6f 0a 58 3b 36 da ...E....~.o.X;6. 00f0 9f b0 5f 47 49 1a 00 00 00 18 40 8f 43 a4 45 77 .._GI.....@.C.Ew 0100 c9 25 7e 64 47 91 c8 e0 ef 20 6e 8a 0f 0b .%~dG.... n... Frame 4 (310 bytes on wire, 310 bytes captured) Arrival Time: Aug 14, 2006 12:49:40.626403000 Time delta from previous packet: 1.925141000 seconds Time since reference or first frame: 1.987986000 seconds Frame Number: 4 Packet Length: 310 bytes Capture Length: 310 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:00:24:c0:92:d1 (00:00:24:c0:92:d1), Dst: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Destination: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Source: 00:00:24:c0:92:d1 (00:00:24:c0:92:d1) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.116 (165.227.249.116), Dst: 165.227.249.150 (165.227.249.150) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 296 Identification: 0x020f (527) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 30 Protocol: UDP (0x11) Header checksum: 0x5ae4 [correct] Good: True Bad : False Source: 165.227.249.116 (165.227.249.116) Destination: 165.227.249.150 (165.227.249.150) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 276 Checksum: 0x9568 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x0F5A644C3D81386A Responder cookie: 0x3D8DB45095816AD1 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 268 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NAT-D (draft-ietf-ipsec-nat-t-ike-01 to 03) (130) Length: 12 Nonce Data NAT-D (draft-ietf-ipsec-nat-t-ike-01 to 03) payload Next payload: NAT-D (draft-ietf-ipsec-nat-t-ike-01 to 03) (130) Length: 24 Hash of address and port: 408F43A44577C9257E644791C8E0EF206E8A0F0B NAT-D (draft-ietf-ipsec-nat-t-ike-01 to 03) payload Next payload: NAT-D (draft-ietf-ipsec-nat-t-ike-01 to 03) (130) Length: 24 Hash of address and port: 65CC62BE90BB801F3393F00C3A25D4DB624AFEFD NAT-D (draft-ietf-ipsec-nat-t-ike-01 to 03) payload Next payload: NAT-D (draft-ietf-ipsec-nat-t-ike-01 to 03) (130) Length: 24 Hash of address and port: 1F45B9ABC7177ED26F0A583B36DA9FB05F47491A NAT-D (draft-ietf-ipsec-nat-t-ike-01 to 03) payload Next payload: NONE (0) Length: 24 Hash of address and port: 6E7044A8A379DE4F96F08AB511150E6CA8922E1C 0000 00 0c 29 96 e1 fa 00 00 24 c0 92 d1 08 00 45 00 ..).....$.....E. 0010 01 28 02 0f 00 00 1e 11 5a e4 a5 e3 f9 74 a5 e3 .(......Z....t.. 0020 f9 96 01 f4 01 f4 01 14 95 68 0f 5a 64 4c 3d 81 .........h.ZdL=. 0030 38 6a 3d 8d b4 50 95 81 6a d1 04 10 02 00 00 00 8j=..P..j....... 0040 00 00 00 00 01 0c 0a 00 00 84 42 71 50 03 a9 ca ..........BqP... 0050 56 7c 17 c6 7f 30 38 9f b0 67 21 08 e7 3c 37 97 V|...08..g!..<7. 0060 81 fc 34 f5 ac d6 d0 fd a8 59 6f 9c ce 09 6a 3a ..4......Yo...j: 0070 2a 76 28 43 6a bc 97 88 ff b9 3c d8 99 ed da 39 *v(Cj.....<....9 0080 ef 97 61 e0 3c 06 42 fa 41 10 32 f6 5f 55 2f 13 ..a.<.B.A.2._U/. 0090 b8 a4 1f 32 23 cd 68 0c 30 62 7e bd 3d 07 37 70 ...2#.h.0b~.=.7p 00a0 e6 40 38 1a 5e 76 25 ad 31 6f 97 d3 49 11 9d ab .@8.^v%.1o..I... 00b0 e8 f9 f2 a1 19 88 cf b6 2e 6f af 80 9f f9 c9 10 .........o...... 00c0 d8 b7 6d a7 6b 9f 3d 86 aa 15 82 00 00 0c fa ff ..m.k.=......... 00d0 a8 03 f4 1b bb d4 82 00 00 18 40 8f 43 a4 45 77 ..........@.C.Ew 00e0 c9 25 7e 64 47 91 c8 e0 ef 20 6e 8a 0f 0b 82 00 .%~dG.... n..... 00f0 00 18 65 cc 62 be 90 bb 80 1f 33 93 f0 0c 3a 25 ..e.b.....3...:% 0100 d4 db 62 4a fe fd 82 00 00 18 1f 45 b9 ab c7 17 ..bJ.......E.... 0110 7e d2 6f 0a 58 3b 36 da 9f b0 5f 47 49 1a 00 00 ~.o.X;6..._GI... 0120 00 18 6e 70 44 a8 a3 79 de 4f 96 f0 8a b5 11 15 ..npD..y.O...... 0130 0e 6c a8 92 2e 1c .l.... Frame 5 (142 bytes on wire, 142 bytes captured) Arrival Time: Aug 14, 2006 12:49:40.674499000 Time delta from previous packet: 0.048096000 seconds Time since reference or first frame: 2.036082000 seconds Frame Number: 5 Packet Length: 142 bytes Capture Length: 142 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa), Dst: 00:00:24:c0:92:d1 (00:00:24:c0:92:d1) Destination: 00:00:24:c0:92:d1 (00:00:24:c0:92:d1) Source: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.116 (165.227.249.116) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 128 Identification: 0x01f0 (496) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf9aa [correct] Good: True Bad : False Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.116 (165.227.249.116) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 108 Checksum: 0xb095 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x0F5A644C3D81386A Responder cookie: 0x3D8DB45095816AD1 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 100 Encrypted payload (72 bytes) 0000 00 00 24 c0 92 d1 00 0c 29 96 e1 fa 08 00 45 00 ..$.....).....E. 0010 00 80 01 f0 00 00 80 11 f9 aa a5 e3 f9 96 a5 e3 ................ 0020 f9 74 01 f4 01 f4 00 6c b0 95 0f 5a 64 4c 3d 81 .t.....l...ZdL=. 0030 38 6a 3d 8d b4 50 95 81 6a d1 05 10 02 01 00 00 8j=..P..j....... 0040 00 00 00 00 00 64 55 e9 4f 59 c3 ce d1 92 3f db .....dU.OY....?. 0050 0f 09 3b b3 1a 38 27 49 e5 72 75 47 a1 6f 87 2d ..;..8'I.ruG.o.- 0060 88 0c ff 15 da 83 97 1e 3e f8 4d 72 77 23 ab 1c ........>.Mrw#.. 0070 09 9e 79 81 ef fa 06 62 87 5b 5e f7 43 32 25 59 ..y....b.[^.C2%Y 0080 b6 bb 12 9a 8f de 28 0c 4d c3 19 4a 46 61 ......(.M..JFa Frame 6 (110 bytes on wire, 110 bytes captured) Arrival Time: Aug 14, 2006 12:49:42.942373000 Time delta from previous packet: 2.267874000 seconds Time since reference or first frame: 4.303956000 seconds Frame Number: 6 Packet Length: 110 bytes Capture Length: 110 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:00:24:c0:92:d1 (00:00:24:c0:92:d1), Dst: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Destination: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Source: 00:00:24:c0:92:d1 (00:00:24:c0:92:d1) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.116 (165.227.249.116), Dst: 165.227.249.150 (165.227.249.150) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0x0210 (528) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 30 Protocol: UDP (0x11) Header checksum: 0x5bab [correct] Good: True Bad : False Source: 165.227.249.116 (165.227.249.116) Destination: 165.227.249.150 (165.227.249.150) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 76 Checksum: 0x5351 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x0F5A644C3D81386A Responder cookie: 0x3D8DB45095816AD1 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 68 Encrypted payload (40 bytes) 0000 00 0c 29 96 e1 fa 00 00 24 c0 92 d1 08 00 45 00 ..).....$.....E. 0010 00 60 02 10 00 00 1e 11 5b ab a5 e3 f9 74 a5 e3 .`......[....t.. 0020 f9 96 01 f4 01 f4 00 4c 53 51 0f 5a 64 4c 3d 81 .......LSQ.ZdL=. 0030 38 6a 3d 8d b4 50 95 81 6a d1 05 10 02 01 00 00 8j=..P..j....... 0040 00 00 00 00 00 44 75 02 f2 cc 5d 6e 57 0e 23 3c .....Du...]nW.#< 0050 44 8e 56 95 1a b8 bc 06 b7 cf e5 51 01 94 3a a2 D.V........Q..:. 0060 25 ff 56 cc f9 fa 2f ab c5 9a d7 c6 b7 9c %.V.../....... Frame 7 (334 bytes on wire, 334 bytes captured) Arrival Time: Aug 14, 2006 12:49:42.981943000 Time delta from previous packet: 0.039570000 seconds Time since reference or first frame: 4.343526000 seconds Frame Number: 7 Packet Length: 334 bytes Capture Length: 334 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa), Dst: 00:00:24:c0:92:d1 (00:00:24:c0:92:d1) Destination: 00:00:24:c0:92:d1 (00:00:24:c0:92:d1) Source: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.116 (165.227.249.116) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 320 Identification: 0x01f1 (497) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf8e9 [correct] Good: True Bad : False Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.116 (165.227.249.116) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 300 Checksum: 0xc673 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x0F5A644C3D81386A Responder cookie: 0x3D8DB45095816AD1 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0xA97D6279 Length: 292 Encrypted payload (264 bytes) 0000 00 00 24 c0 92 d1 00 0c 29 96 e1 fa 08 00 45 00 ..$.....).....E. 0010 01 40 01 f1 00 00 80 11 f8 e9 a5 e3 f9 96 a5 e3 .@.............. 0020 f9 74 01 f4 01 f4 01 2c c6 73 0f 5a 64 4c 3d 81 .t.....,.s.ZdL=. 0030 38 6a 3d 8d b4 50 95 81 6a d1 08 10 20 01 a9 7d 8j=..P..j... ..} 0040 62 79 00 00 01 24 12 4e bb 7a c2 a9 da a5 b6 7a by...$.N.z.....z 0050 d0 62 b8 37 c8 98 ba b6 30 07 e8 ff 74 4c 62 8e .b.7....0...tLb. 0060 3e ac 6e d4 73 bb 7d ff 9a a4 91 f1 fa b0 d2 b4 >.n.s.}......... 0070 5d 14 6b 9b f4 80 7c ac b9 8e d9 51 23 90 c5 af ].k...|....Q#... 0080 7a 6a 9a c6 ac 9b 35 e6 f3 55 2c f6 d7 46 4c 6e zj....5..U,..FLn 0090 2c 25 13 3f e4 98 89 3c 0b 5b 76 c0 7a e4 3d c2 ,%.?...<.[v.z.=. 00a0 a8 c4 99 25 a6 60 9e 0b fa 43 ee d0 3c a4 fe cb ...%.`...C..<... 00b0 e2 84 73 a8 db e6 50 cf b7 c4 d3 25 c6 04 28 2e ..s...P....%..(. 00c0 e6 02 3c 35 6b c6 e4 ac 93 a5 25 e7 d8 d1 de 09 ..<5k.....%..... 00d0 1f c9 c6 85 ec a9 60 01 c4 b9 16 c9 f0 fc e3 8d ......`......... 00e0 b4 ad 03 62 5c df 40 f9 ab a1 78 99 ea 60 f5 83 ...b\.@...x..`.. 00f0 1c 86 20 d3 7f 31 da 28 7a 45 62 7a 5e 44 60 7b .. ..1.(zEbz^D`{ 0100 45 2f 90 65 46 15 73 8a fe bc 90 83 13 ce 68 5c E/.eF.s.......h\ 0110 05 37 21 db 65 5c 76 4f 78 78 1b e6 09 76 63 4e .7!.e\vOxx...vcN 0120 57 ab 0f b5 88 3c 42 6d cc 65 83 46 ee 56 4f 55 W.......J 0070 66 4f 7f 74 a1 da e6 65 65 e7 91 51 5a 76 0c a4 fO.t...ee..QZv.. 0080 e6 43 59 94 51 f8 13 cb 7b 41 84 2f eb a3 07 c6 .CY.Q...{A./.... 0090 7b 34 ac 66 24 30 a2 a1 d2 19 18 1e 64 26 b1 7c {4.f$0......d&.| 00a0 cc 9d 96 88 11 9f c7 3e ea ed 18 cf 3b e0 29 a2 .......>....;.). 00b0 21 91 be 02 f0 4f b4 69 cc d4 cd b5 9d 23 28 8e !....O.i.....#(. 00c0 d2 f6 9d 2e 12 b7 1a b9 5a 9f 44 d6 e7 af 64 2d ........Z.D...d- 00d0 05 30 90 37 86 1f 69 be a7 b7 ce 02 ec 91 13 b7 .0.7..i......... 00e0 6a 27 95 69 c2 ae 9f 43 8b 71 80 71 9d 84 5d 74 j'.i...C.q.q..]t 00f0 b8 f3 e3 b0 13 cd 2f 08 ba 9a df b4 7f da fc 73 ....../........s 0100 8b 7b af 32 97 78 3f 4b 92 35 a8 fa e3 79 74 88 .{.2.x?K.5...yt. 0110 37 df b4 3f 24 ff d5 f2 c1 bc 28 bc 44 b0 a9 03 7..?$.....(.D... 0120 20 05 46 5a b4 9f 51 95 ab 50 57 71 5c 16 8e 20 .FZ..Q..PWq\.. 0130 4d f4 7d b5 69 0a 1d 29 d6 d7 d2 d6 54 fc M.}.i..)....T. Frame 9 (102 bytes on wire, 102 bytes captured) Arrival Time: Aug 14, 2006 12:49:44.951294000 Time delta from previous packet: 0.087966000 seconds Time since reference or first frame: 6.312877000 seconds Frame Number: 9 Packet Length: 102 bytes Capture Length: 102 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa), Dst: 00:00:24:c0:92:d1 (00:00:24:c0:92:d1) Destination: 00:00:24:c0:92:d1 (00:00:24:c0:92:d1) Source: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.116 (165.227.249.116) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 88 Identification: 0x01f2 (498) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf9d0 [correct] Good: True Bad : False Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.116 (165.227.249.116) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 68 Checksum: 0xbac8 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x0F5A644C3D81386A Responder cookie: 0x3D8DB45095816AD1 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0xA97D6279 Length: 60 Encrypted payload (32 bytes) 0000 00 00 24 c0 92 d1 00 0c 29 96 e1 fa 08 00 45 00 ..$.....).....E. 0010 00 58 01 f2 00 00 80 11 f9 d0 a5 e3 f9 96 a5 e3 .X.............. 0020 f9 74 01 f4 01 f4 00 44 ba c8 0f 5a 64 4c 3d 81 .t.....D...ZdL=. 0030 38 6a 3d 8d b4 50 95 81 6a d1 08 10 20 01 a9 7d 8j=..P..j... ..} 0040 62 79 00 00 00 3c b5 2d bd ac b4 6d cc 01 d8 fa by...<.-...m.... 0050 2d 5a 96 9a 1c ca ae cb 30 4a 1d 10 90 10 dd f8 -Z......0J...... 0060 97 a9 33 f6 0f 09 ..3... Frame 10 (398 bytes on wire, 398 bytes captured) Arrival Time: Aug 14, 2006 12:49:50.661873000 Time delta from previous packet: 5.710579000 seconds Time since reference or first frame: 12.023456000 seconds Frame Number: 10 Packet Length: 398 bytes Capture Length: 398 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa), Dst: 00:00:24:c0:92:d1 (00:00:24:c0:92:d1) Destination: 00:00:24:c0:92:d1 (00:00:24:c0:92:d1) Source: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.116 (165.227.249.116) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 384 Identification: 0x01f3 (499) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: ESP (0x32) Header checksum: 0xf886 [correct] Good: True Bad : False Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.116 (165.227.249.116) Encapsulating Security Payload SPI: 0x429ef4b3 Sequence: 1 Data (356 bytes) 0000 00 00 24 c0 92 d1 00 0c 29 96 e1 fa 08 00 45 00 ..$.....).....E. 0010 01 80 01 f3 00 00 80 32 f8 86 a5 e3 f9 96 a5 e3 .......2........ 0020 f9 74 42 9e f4 b3 00 00 00 01 9c 07 dd ec b4 72 .tB............r 0030 2e 01 e6 ab 42 74 55 e6 dc 2a 42 44 97 0e 20 39 ....BtU..*BD.. 9 0040 0a 30 b3 e6 fb 89 74 c8 fb 3f eb fd 79 d3 53 8f .0....t..?..y.S. 0050 75 b3 f5 ca 6d 79 3a 33 93 c8 c3 5b e4 57 8c 65 u...my:3...[.W.e 0060 40 12 c3 23 d7 35 78 bf 3b b3 b4 b6 f0 b1 1f 06 @..#.5x.;....... 0070 94 45 8f ba 2c 94 06 43 2c 91 ca 92 09 4b 87 2d .E..,..C,....K.- 0080 da 3a e6 61 25 5a 09 be 6e 5d 33 d2 6c 34 ed 9f .:.a%Z..n]3.l4.. 0090 48 78 ad 2a 8c 1c 4f 5e 1e 17 3b 83 93 6c 99 61 Hx.*..O^..;..l.a 00a0 fd e6 90 b3 3c 7e 77 a1 18 12 b2 38 48 f9 af 72 ....<~w....8H..r 00b0 52 5f 97 fe 1e 3f 41 91 04 61 d7 fd 07 86 0c 32 R_...?A..a.....2 00c0 20 14 5a 14 aa 67 e5 fa 55 5e 4c b4 50 7c e9 8c .Z..g..U^L.P|.. 00d0 0b 51 eb f6 03 53 0d 0b b1 4a fb 30 28 d8 52 f6 .Q...S...J.0(.R. 00e0 8d fc 11 f4 42 ca 7d 7d 54 82 59 98 a3 c3 b5 71 ....B.}}T.Y....q 00f0 77 29 e5 61 7d 45 cf 72 13 00 d5 e4 ff 25 22 8b w).a}E.r.....%". 0100 b5 4a bd 03 70 e2 ff 8f 00 6f c5 82 d1 6c af d9 .J..p....o...l.. 0110 70 6f 51 ae 7c e4 de d7 6a 0f 2e d4 51 fb 43 8c poQ.|...j...Q.C. 0120 7c a5 d0 c3 01 5a 0a 63 37 d7 80 10 a5 1c e3 c8 |....Z.c7....... 0130 0f b5 3a d2 b8 17 00 17 59 1d 62 fd 2b b7 14 e7 ..:.....Y.b.+... 0140 e2 bf 01 09 bc 7c 5d 99 de e5 9d 2a ec 8f bb 57 .....|]....*...W 0150 40 50 5b 20 a0 79 32 23 49 64 57 35 44 75 5b d2 @P[ .y2#IdW5Du[. 0160 2b dd 92 12 31 79 b9 95 8b 5b 0d 93 8c a9 99 8c +...1y...[...... 0170 e0 fd 49 b3 a3 4a 07 5a 06 db f2 2a 79 61 8b 78 ..I..J.Z...*ya.x 0180 08 95 fd ff 8e cd 78 90 de 34 45 80 56 b2 ......x..4E.V. Frame 11 (398 bytes on wire, 398 bytes captured) Arrival Time: Aug 14, 2006 12:49:50.674620000 Time delta from previous packet: 0.012747000 seconds Time since reference or first frame: 12.036203000 seconds Frame Number: 11 Packet Length: 398 bytes Capture Length: 398 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:00:24:c0:92:d1 (00:00:24:c0:92:d1), Dst: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Destination: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Source: 00:00:24:c0:92:d1 (00:00:24:c0:92:d1) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.116 (165.227.249.116), Dst: 165.227.249.150 (165.227.249.150) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 384 Identification: 0x0212 (530) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 30 Protocol: ESP (0x32) Header checksum: 0x5a68 [correct] Good: True Bad : False Source: 165.227.249.116 (165.227.249.116) Destination: 165.227.249.150 (165.227.249.150) Encapsulating Security Payload SPI: 0x0b09a6d1 Sequence: 1 Data (356 bytes) 0000 00 0c 29 96 e1 fa 00 00 24 c0 92 d1 08 00 45 00 ..).....$.....E. 0010 01 80 02 12 00 00 1e 32 5a 68 a5 e3 f9 74 a5 e3 .......2Zh...t.. 0020 f9 96 0b 09 a6 d1 00 00 00 01 8a e3 17 ac c1 d4 ................ 0030 76 34 ac ab d4 17 73 09 7f d7 30 e0 4a e6 bd cc v4....s...0.J... 0040 ec 84 eb e7 66 41 96 33 1b 07 12 0d 41 1c f6 20 ....fA.3....A.. 0050 1b be c7 d1 92 56 27 81 41 11 ff c3 85 39 cc a2 .....V'.A....9.. 0060 40 06 cc 79 4a bd 89 f0 b5 b0 49 7a a4 99 27 6f @..yJ.....Iz..'o 0070 07 31 8a ed 16 17 40 df b8 da 6a b6 1b bc 87 fb .1....@...j..... 0080 4d 1b 52 58 42 23 94 d8 a2 81 0f fe 0d 86 99 a9 M.RXB#.......... 0090 28 33 87 38 02 cd 9d fe 38 85 07 d0 81 cf fd 56 (3.8....8......V 00a0 86 c8 d6 7b 7a 63 52 0e 8b 33 7a 4e 3b 6d b6 ce ...{zcR..3zN;m.. 00b0 74 44 b4 09 ce 8b 28 cf 06 3f 81 f7 7f 5d 81 03 tD....(..?...].. 00c0 30 92 8a 47 6a df 70 9a d8 4d 61 80 29 62 4a 00 0..Gj.p..Ma.)bJ. 00d0 94 c5 c6 24 2e c8 1e 3b 3e 76 a7 04 27 31 62 c5 ...$...;>v..'1b. 00e0 95 fb 6c b8 3a 23 55 0c db da 93 4e c3 52 c9 69 ..l.:#U....N.R.i 00f0 16 c5 e5 a8 63 8e 48 c7 2c 58 1d 9d 1d dd 47 5e ....c.H.,X....G^ 0100 92 fa 58 09 bf 6b ab 0b 6b 60 cd 52 e4 93 a7 a8 ..X..k..k`.R.... 0110 01 ec 0d cb 88 5e d5 fc c2 bc 01 b5 c7 1f 66 3a .....^........f: 0120 81 ef 72 bb fc 4c e2 80 8d e9 6d 46 08 42 5e 0c ..r..L....mF.B^. 0130 d6 70 b5 f4 f7 86 66 bf 83 63 92 4c b3 88 c7 4a .p....f..c.L...J 0140 4b f0 03 5c 3e 03 c7 71 21 93 21 28 6c 25 50 c0 K..\>..q!.!(l%P. 0150 b0 6f af e2 31 d8 49 da 41 c5 27 47 9c c0 93 98 .o..1.I.A.'G.... 0160 57 60 66 e0 f2 cf 24 00 d9 dc 54 0e 00 dd be 73 W`f...$...T....s 0170 5f 7b d3 80 e2 b7 61 ea 57 db a0 93 e0 6d 0f 96 _{....a.W....m.. 0180 90 f3 f6 4a 8e 78 ff 5b 82 67 f6 00 32 67 ...J.x.[.g..2g Frame 12 (318 bytes on wire, 318 bytes captured) Arrival Time: Aug 14, 2006 12:49:51.117401000 Time delta from previous packet: 0.442781000 seconds Time since reference or first frame: 12.478984000 seconds Frame Number: 12 Packet Length: 318 bytes Capture Length: 318 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:00:24:c0:92:d1 (00:00:24:c0:92:d1), Dst: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Destination: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Source: 00:00:24:c0:92:d1 (00:00:24:c0:92:d1) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.116 (165.227.249.116), Dst: 165.227.249.150 (165.227.249.150) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 304 Identification: 0x0213 (531) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 30 Protocol: UDP (0x11) Header checksum: 0x5ad8 [correct] Good: True Bad : False Source: 165.227.249.116 (165.227.249.116) Destination: 165.227.249.150 (165.227.249.150) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 284 Checksum: 0x9eba [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x0F5A644C3D81386A Responder cookie: 0x3D8DB45095816AD1 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0xA97D6279 Length: 276 Encrypted payload (248 bytes) 0000 00 0c 29 96 e1 fa 00 00 24 c0 92 d1 08 00 45 00 ..).....$.....E. 0010 01 30 02 13 00 00 1e 11 5a d8 a5 e3 f9 74 a5 e3 .0......Z....t.. 0020 f9 96 01 f4 01 f4 01 1c 9e ba 0f 5a 64 4c 3d 81 ...........ZdL=. 0030 38 6a 3d 8d b4 50 95 81 6a d1 08 10 20 01 a9 7d 8j=..P..j... ..} 0040 62 79 00 00 01 14 a4 2c 48 d3 4b c2 3a 6a 29 61 by.....,H.K.:j)a 0050 dc e0 ee f9 ce e3 36 8e a9 26 b7 cd af a0 84 99 ......6..&...... 0060 f4 f1 cc e4 3d d5 37 ab 04 d6 17 3e cb 1e 1c 4a ....=.7....>...J 0070 66 4f 7f 74 a1 da e6 65 65 e7 91 51 5a 76 0c a4 fO.t...ee..QZv.. 0080 e6 43 59 94 51 f8 13 cb 7b 41 84 2f eb a3 07 c6 .CY.Q...{A./.... 0090 7b 34 ac 66 24 30 a2 a1 d2 19 18 1e 64 26 b1 7c {4.f$0......d&.| 00a0 cc 9d 96 88 11 9f c7 3e ea ed 18 cf 3b e0 29 a2 .......>....;.). 00b0 21 91 be 02 f0 4f b4 69 cc d4 cd b5 9d 23 28 8e !....O.i.....#(. 00c0 d2 f6 9d 2e 12 b7 1a b9 5a 9f 44 d6 e7 af 64 2d ........Z.D...d- 00d0 05 30 90 37 86 1f 69 be a7 b7 ce 02 ec 91 13 b7 .0.7..i......... 00e0 6a 27 95 69 c2 ae 9f 43 8b 71 80 71 9d 84 5d 74 j'.i...C.q.q..]t 00f0 b8 f3 e3 b0 13 cd 2f 08 ba 9a df b4 7f da fc 73 ....../........s 0100 8b 7b af 32 97 78 3f 4b 92 35 a8 fa e3 79 74 88 .{.2.x?K.5...yt. 0110 37 df b4 3f 24 ff d5 f2 c1 bc 28 bc 44 b0 a9 03 7..?$.....(.D... 0120 20 05 46 5a b4 9f 51 95 ab 50 57 71 5c 16 8e 20 .FZ..Q..PWq\.. 0130 4d f4 7d b5 69 0a 1d 29 d6 d7 d2 d6 54 fc M.}.i..)....T. Frame 13 (398 bytes on wire, 398 bytes captured) Arrival Time: Aug 14, 2006 12:49:54.990914000 Time delta from previous packet: 3.873513000 seconds Time since reference or first frame: 16.352497000 seconds Frame Number: 13 Packet Length: 398 bytes Capture Length: 398 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa), Dst: 00:00:24:c0:92:d1 (00:00:24:c0:92:d1) Destination: 00:00:24:c0:92:d1 (00:00:24:c0:92:d1) Source: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.116 (165.227.249.116) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 384 Identification: 0x01f5 (501) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: ESP (0x32) Header checksum: 0xf884 [correct] Good: True Bad : False Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.116 (165.227.249.116) Encapsulating Security Payload SPI: 0x429ef4b3 Sequence: 2 Data (356 bytes) 0000 00 00 24 c0 92 d1 00 0c 29 96 e1 fa 08 00 45 00 ..$.....).....E. 0010 01 80 01 f5 00 00 80 32 f8 84 a5 e3 f9 96 a5 e3 .......2........ 0020 f9 74 42 9e f4 b3 00 00 00 02 44 1a 48 ed 43 97 .tB.......D.H.C. 0030 73 6d 75 ad f2 f5 f4 68 56 53 64 15 ca 02 77 58 smu....hVSd...wX 0040 93 b2 80 b6 05 8f 85 3c 5d 04 39 61 74 56 b0 b7 .......<].9atV.. 0050 aa 21 c0 bb cc 15 70 59 27 c6 83 c4 1b f3 86 8b .!....pY'....... 0060 f0 64 1c 92 54 96 ed 61 9f 97 a2 7b f1 55 91 41 .d..T..a...{.U.A 0070 f6 45 17 0d 2d fc 05 f9 b4 21 b0 2a 0c a5 54 ea .E..-....!.*..T. 0080 3f 4c f9 ff 31 b6 92 61 62 6a a0 4d 6d f0 48 1e ?L..1..abj.Mm.H. 0090 da 47 53 b4 d5 54 4f de 9b 80 6e a3 e5 ba ef 67 .GS..TO...n....g 00a0 66 19 51 9f d4 8b 8a 51 89 f7 33 7d 02 da 1f 9e f.Q....Q..3}.... 00b0 15 0a 87 52 9e a1 b4 65 e9 10 d8 ed d3 92 59 e6 ...R...e......Y. 00c0 79 d7 3b de ff 81 ed 54 1b e3 e7 b6 12 c9 dd 72 y.;....T.......r 00d0 e7 b1 a9 14 75 3e 9c d6 a3 70 d5 c1 1d 5b 8c 55 ....u>...p...[.U 00e0 1a 69 77 7d e1 88 f8 1d 20 fa f8 ea 77 71 05 97 .iw}.... ...wq.. 00f0 72 d0 df ad 97 06 57 b8 2e a9 5f d5 a1 9d 0f 55 r.....W..._....U 0100 a9 ba 0f 54 e4 1e c8 f0 47 76 69 bd 4b 8f e7 21 ...T....Gvi.K..! 0110 66 99 c9 9d e6 cc b2 23 20 cf 23 22 55 ae 86 50 f......# .#"U..P 0120 36 44 8c f7 43 a4 6f 1a 66 14 cc 05 fc 1c 51 3a 6D..C.o.f.....Q: 0130 ea c3 c8 13 10 e0 0a 86 81 fa 6e 47 da 16 66 18 ..........nG..f. 0140 18 50 a4 bd 2f 3c 6f aa 0f c5 ed df 7a 20 db 74 .P../...J 0070 66 4f 7f 74 a1 da e6 65 65 e7 91 51 5a 76 0c a4 fO.t...ee..QZv.. 0080 e6 43 59 94 51 f8 13 cb 7b 41 84 2f eb a3 07 c6 .CY.Q...{A./.... 0090 7b 34 ac 66 24 30 a2 a1 d2 19 18 1e 64 26 b1 7c {4.f$0......d&.| 00a0 cc 9d 96 88 11 9f c7 3e ea ed 18 cf 3b e0 29 a2 .......>....;.). 00b0 21 91 be 02 f0 4f b4 69 cc d4 cd b5 9d 23 28 8e !....O.i.....#(. 00c0 d2 f6 9d 2e 12 b7 1a b9 5a 9f 44 d6 e7 af 64 2d ........Z.D...d- 00d0 05 30 90 37 86 1f 69 be a7 b7 ce 02 ec 91 13 b7 .0.7..i......... 00e0 6a 27 95 69 c2 ae 9f 43 8b 71 80 71 9d 84 5d 74 j'.i...C.q.q..]t 00f0 b8 f3 e3 b0 13 cd 2f 08 ba 9a df b4 7f da fc 73 ....../........s 0100 8b 7b af 32 97 78 3f 4b 92 35 a8 fa e3 79 74 88 .{.2.x?K.5...yt. 0110 37 df b4 3f 24 ff d5 f2 c1 bc 28 bc 44 b0 a9 03 7..?$.....(.D... 0120 20 05 46 5a b4 9f 51 95 ab 50 57 71 5c 16 8e 20 .FZ..Q..PWq\.. 0130 4d f4 7d b5 69 0a 1d 29 d6 d7 d2 d6 54 fc M.}.i..)....T.