Frame 1 (222 bytes on wire, 222 bytes captured) Arrival Time: Aug 14, 2006 13:13:39.311963000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 222 bytes Capture Length: 222 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa), Dst: 00:09:5b:c0:82:f1 (00:09:5b:c0:82:f1) Destination: 00:09:5b:c0:82:f1 (00:09:5b:c0:82:f1) Source: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.120 (165.227.249.120) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 208 Identification: 0x02d7 (727) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf86f [correct] Good: True Bad : False Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.120 (165.227.249.120) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 188 Checksum: 0x57ee [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xA65AA8E29EB690B3 Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 180 Security Association payload Next payload: Vendor ID (13) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 40 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 32 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: unknown vendor ID: 0x4A131C81070358455C5728F20E95452F Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-03 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: RFC 3706 Detecting Dead IKE Peers (DPD) 0000 00 09 5b c0 82 f1 00 0c 29 96 e1 fa 08 00 45 00 ..[.....).....E. 0010 00 d0 02 d7 00 00 80 11 f8 6f a5 e3 f9 96 a5 e3 .........o...... 0020 f9 78 01 f4 01 f4 00 bc 57 ee a6 5a a8 e2 9e b6 .x......W..Z.... 0030 90 b3 00 00 00 00 00 00 00 00 01 10 02 00 00 00 ................ 0040 00 00 00 00 00 b4 0d 00 00 34 00 00 00 01 00 00 .........4...... 0050 00 01 00 00 00 28 01 01 00 01 00 00 00 20 01 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 04 00 02 80 03 ................ 0070 00 01 80 0b 00 01 80 0c 70 80 0d 00 00 14 4a 13 ........p.....J. 0080 1c 81 07 03 58 45 5c 57 28 f2 0e 95 45 2f 0d 00 ....XE\W(...E/.. 0090 00 14 7d 94 19 a6 53 10 ca 6f 2c 17 9d 92 15 52 ..}...S..o,....R 00a0 9d 56 0d 00 00 14 90 cb 80 91 3e bb 69 6e 08 63 .V........>.in.c 00b0 81 b5 ec 42 7b 1f 0d 00 00 14 44 85 15 2d 18 b6 ...B{.....D..-.. 00c0 bb cd 0b e8 a8 46 95 79 dd cc 00 00 00 14 af ca .....F.y........ 00d0 d7 13 68 a1 f1 c9 6b 86 96 fc 77 57 01 00 ..h...k...wW.. Frame 2 (122 bytes on wire, 122 bytes captured) Arrival Time: Aug 14, 2006 13:13:39.324659000 Time delta from previous packet: 0.012696000 seconds Time since reference or first frame: 0.012696000 seconds Frame Number: 2 Packet Length: 122 bytes Capture Length: 122 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:09:5b:c0:82:f1 (00:09:5b:c0:82:f1), Dst: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Destination: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Source: 00:09:5b:c0:82:f1 (00:09:5b:c0:82:f1) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.120 (165.227.249.120), Dst: 165.227.249.150 (165.227.249.150) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 108 Identification: 0x0006 (6) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 32 Protocol: UDP (0x11) Header checksum: 0x5ba5 [correct] Good: True Bad : False Source: 165.227.249.120 (165.227.249.120) Destination: 165.227.249.150 (165.227.249.150) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 88 Checksum: 0x27b0 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xA65AA8E29EB690B3 Responder cookie: 0x2ECAFA1845CE30E6 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 80 Security Association payload Next payload: NONE (0) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 40 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 32 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) 0000 00 0c 29 96 e1 fa 00 09 5b c0 82 f1 08 00 45 00 ..).....[.....E. 0010 00 6c 00 06 00 00 20 11 5b a5 a5 e3 f9 78 a5 e3 .l.... .[....x.. 0020 f9 96 01 f4 01 f4 00 58 27 b0 a6 5a a8 e2 9e b6 .......X'..Z.... 0030 90 b3 2e ca fa 18 45 ce 30 e6 01 10 02 00 00 00 ......E.0....... 0040 00 00 00 00 00 50 00 00 00 34 00 00 00 01 00 00 .....P...4...... 0050 00 01 00 00 00 28 01 01 00 01 00 00 00 20 01 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 04 00 02 80 03 ................ 0070 00 01 80 0b 00 01 80 0c 70 80 ........p. Frame 3 (222 bytes on wire, 222 bytes captured) Arrival Time: Aug 14, 2006 13:13:39.337375000 Time delta from previous packet: 0.012716000 seconds Time since reference or first frame: 0.025412000 seconds Frame Number: 3 Packet Length: 222 bytes Capture Length: 222 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa), Dst: 00:09:5b:c0:82:f1 (00:09:5b:c0:82:f1) Destination: 00:09:5b:c0:82:f1 (00:09:5b:c0:82:f1) Source: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.120 (165.227.249.120) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 208 Identification: 0x02d8 (728) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf86e [correct] Good: True Bad : False Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.120 (165.227.249.120) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 188 Checksum: 0xd3c2 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xA65AA8E29EB690B3 Responder cookie: 0x2ECAFA1845CE30E6 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 180 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 20 Nonce Data 0000 00 09 5b c0 82 f1 00 0c 29 96 e1 fa 08 00 45 00 ..[.....).....E. 0010 00 d0 02 d8 00 00 80 11 f8 6e a5 e3 f9 96 a5 e3 .........n...... 0020 f9 78 01 f4 01 f4 00 bc d3 c2 a6 5a a8 e2 9e b6 .x.........Z.... 0030 90 b3 2e ca fa 18 45 ce 30 e6 04 10 02 00 00 00 ......E.0....... 0040 00 00 00 00 00 b4 0a 00 00 84 96 73 3d e6 9e b1 ...........s=... 0050 f4 a9 88 80 31 c9 89 e5 e7 71 60 9a cc ee 72 2e ....1....q`...r. 0060 e7 7e 92 87 13 da 84 e1 d3 e8 e6 ab e9 f8 d3 45 .~.............E 0070 3e e4 e2 0e ad a4 6b 16 c8 83 09 cc 40 47 1e e1 >.....k.....@G.. 0080 db d9 56 a1 3e a5 44 e3 be 4d 82 67 0e 76 fc 0c ..V.>.D..M.g.v.. 0090 0a c8 58 52 09 20 b4 97 61 80 95 86 0c c4 c3 2c ..XR. ..a......, 00a0 1a 85 2f d7 cc 88 96 39 8f 15 01 57 8f e3 b9 da ../....9...W.... 00b0 52 3f e4 a8 67 b9 40 d4 09 61 b1 84 35 25 dd 2e R?..g.@..a..5%.. 00c0 f2 7f 30 97 10 32 4b f0 b3 d3 00 00 00 14 e6 9d ..0..2K......... 00d0 50 2c 7c 36 72 7c ca db 86 85 31 b4 96 f0 P,|6r|....1... Frame 4 (222 bytes on wire, 222 bytes captured) Arrival Time: Aug 14, 2006 13:13:42.276470000 Time delta from previous packet: 2.939095000 seconds Time since reference or first frame: 2.964507000 seconds Frame Number: 4 Packet Length: 222 bytes Capture Length: 222 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:09:5b:c0:82:f1 (00:09:5b:c0:82:f1), Dst: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Destination: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Source: 00:09:5b:c0:82:f1 (00:09:5b:c0:82:f1) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.120 (165.227.249.120), Dst: 165.227.249.150 (165.227.249.150) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 208 Identification: 0x0007 (7) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 32 Protocol: UDP (0x11) Header checksum: 0x5b40 [correct] Good: True Bad : False Source: 165.227.249.120 (165.227.249.120) Destination: 165.227.249.150 (165.227.249.150) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 188 Checksum: 0x60bb [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xA65AA8E29EB690B3 Responder cookie: 0x2ECAFA1845CE30E6 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 180 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 20 Nonce Data 0000 00 0c 29 96 e1 fa 00 09 5b c0 82 f1 08 00 45 00 ..).....[.....E. 0010 00 d0 00 07 00 00 20 11 5b 40 a5 e3 f9 78 a5 e3 ...... .[@...x.. 0020 f9 96 01 f4 01 f4 00 bc 60 bb a6 5a a8 e2 9e b6 ........`..Z.... 0030 90 b3 2e ca fa 18 45 ce 30 e6 04 10 02 00 00 00 ......E.0....... 0040 00 00 00 00 00 b4 0a 00 00 84 e0 87 c2 70 00 70 .............p.p 0050 3d 7d e1 25 40 2f 47 d9 1f 00 23 c9 63 9c 9f a2 =}.%@/G...#.c... 0060 6e e5 8a ac c6 c5 5d 48 13 13 3d 5b 28 47 8f 13 n.....]H..=[(G.. 0070 ff c8 91 17 3a 2c 41 0d ce 06 8e 88 b5 f4 3d 7e ....:,A.......=~ 0080 5b 8b 16 01 f5 3b e5 07 fb ff 41 f7 19 ed 60 a0 [....;....A...`. 0090 84 eb b0 7a 6e 71 e3 d6 2a be dc 31 ff c1 71 f5 ...znq..*..1..q. 00a0 22 e8 d0 2f e4 8e 64 b4 61 3a c6 06 0e fa 66 02 "../..d.a:....f. 00b0 7e 52 fd 6f eb 03 8b 06 01 df 90 9a 7d 45 34 2a ~R.o........}E4* 00c0 aa 1a 66 38 9a b3 95 36 c4 bd 00 00 00 14 70 c9 ..f8...6......p. 00d0 5f 9b 72 4d a7 e3 6c fe c1 67 d4 a9 14 24 _.rM..l..g...$ Frame 5 (142 bytes on wire, 142 bytes captured) Arrival Time: Aug 14, 2006 13:13:42.320586000 Time delta from previous packet: 0.044116000 seconds Time since reference or first frame: 3.008623000 seconds Frame Number: 5 Packet Length: 142 bytes Capture Length: 142 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa), Dst: 00:09:5b:c0:82:f1 (00:09:5b:c0:82:f1) Destination: 00:09:5b:c0:82:f1 (00:09:5b:c0:82:f1) Source: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.120 (165.227.249.120) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 128 Identification: 0x02d9 (729) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf8bd [correct] Good: True Bad : False Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.120 (165.227.249.120) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 108 Checksum: 0xc5ec [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xA65AA8E29EB690B3 Responder cookie: 0x2ECAFA1845CE30E6 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 100 Encrypted payload (72 bytes) 0000 00 09 5b c0 82 f1 00 0c 29 96 e1 fa 08 00 45 00 ..[.....).....E. 0010 00 80 02 d9 00 00 80 11 f8 bd a5 e3 f9 96 a5 e3 ................ 0020 f9 78 01 f4 01 f4 00 6c c5 ec a6 5a a8 e2 9e b6 .x.....l...Z.... 0030 90 b3 2e ca fa 18 45 ce 30 e6 05 10 02 01 00 00 ......E.0....... 0040 00 00 00 00 00 64 61 40 1e 2f 5a 03 58 75 02 70 .....da@./Z.Xu.p 0050 d9 77 ac 72 52 68 e6 cb 6a 49 96 ef 5d 7c 07 14 .w.rRh..jI..]|.. 0060 a7 43 37 cc 63 69 d6 7d ef 12 b8 a7 ec 0a 2c 70 .C7.ci.}......,p 0070 2f a0 b3 df d7 0d 02 9f bf 0b a3 47 ff fe ae 07 /..........G.... 0080 d7 0d a7 25 25 5f 04 cf 9c 6b 05 b1 86 44 ...%%_...k...D Frame 6 (110 bytes on wire, 110 bytes captured) Arrival Time: Aug 14, 2006 13:13:42.333507000 Time delta from previous packet: 0.012921000 seconds Time since reference or first frame: 3.021544000 seconds Frame Number: 6 Packet Length: 110 bytes Capture Length: 110 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:09:5b:c0:82:f1 (00:09:5b:c0:82:f1), Dst: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Destination: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Source: 00:09:5b:c0:82:f1 (00:09:5b:c0:82:f1) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.120 (165.227.249.120), Dst: 165.227.249.150 (165.227.249.150) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0x0008 (8) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 32 Protocol: UDP (0x11) Header checksum: 0x5baf [correct] Good: True Bad : False Source: 165.227.249.120 (165.227.249.120) Destination: 165.227.249.150 (165.227.249.150) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 76 Checksum: 0x50be [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xA65AA8E29EB690B3 Responder cookie: 0x2ECAFA1845CE30E6 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 68 Encrypted payload (40 bytes) 0000 00 0c 29 96 e1 fa 00 09 5b c0 82 f1 08 00 45 00 ..).....[.....E. 0010 00 60 00 08 00 00 20 11 5b af a5 e3 f9 78 a5 e3 .`.... .[....x.. 0020 f9 96 01 f4 01 f4 00 4c 50 be a6 5a a8 e2 9e b6 .......LP..Z.... 0030 90 b3 2e ca fa 18 45 ce 30 e6 05 10 02 01 00 00 ......E.0....... 0040 00 00 00 00 00 44 5c 34 14 0a cf 91 0c 74 16 65 .....D\4.....t.e 0050 93 7c ca 08 08 a6 99 71 34 fc ea 2a f3 eb 1c 23 .|.....q4..*...# 0060 6a fd 45 c7 c1 a9 18 06 9a 71 13 33 7c af j.E......q.3|. Frame 7 (334 bytes on wire, 334 bytes captured) Arrival Time: Aug 14, 2006 13:13:42.348747000 Time delta from previous packet: 0.015240000 seconds Time since reference or first frame: 3.036784000 seconds Frame Number: 7 Packet Length: 334 bytes Capture Length: 334 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa), Dst: 00:09:5b:c0:82:f1 (00:09:5b:c0:82:f1) Destination: 00:09:5b:c0:82:f1 (00:09:5b:c0:82:f1) Source: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.120 (165.227.249.120) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 320 Identification: 0x02da (730) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf7fc [correct] Good: True Bad : False Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.120 (165.227.249.120) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 300 Checksum: 0x7b4e [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xA65AA8E29EB690B3 Responder cookie: 0x2ECAFA1845CE30E6 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x8C7C2545 Length: 292 Encrypted payload (264 bytes) 0000 00 09 5b c0 82 f1 00 0c 29 96 e1 fa 08 00 45 00 ..[.....).....E. 0010 01 40 02 da 00 00 80 11 f7 fc a5 e3 f9 96 a5 e3 .@.............. 0020 f9 78 01 f4 01 f4 01 2c 7b 4e a6 5a a8 e2 9e b6 .x.....,{N.Z.... 0030 90 b3 2e ca fa 18 45 ce 30 e6 08 10 20 01 8c 7c ......E.0... ..| 0040 25 45 00 00 01 24 b4 77 c1 01 51 48 9b 25 1a 47 %E...$.w..QH.%.G 0050 8f f9 34 8a 46 c7 7d e6 39 84 e2 7b b1 ef 43 a3 ..4.F.}.9..{..C. 0060 5f bb 73 6b 25 34 84 46 c8 8c f7 71 b7 43 31 d1 _.sk%4.F...q.C1. 0070 c3 24 f8 06 6d 32 d6 6c 2e 1c 99 7c 98 b1 a0 2a .$..m2.l...|...* 0080 85 04 5f c6 74 8f 3c 57 9c b9 55 c8 9c 9a b9 f1 .._.t.........*.. 0050 83 9f b6 11 d3 ac c1 cb 12 ca 58 69 0a 29 64 28 ..........Xi.)d( 0060 68 d0 d2 e4 b4 54 75 d8 24 5c ec 74 27 0c 02 23 h....Tu.$\.t'..# 0070 9d e0 d5 81 95 fb 7a 3d 31 13 cd b6 17 48 af 28 ......z=1....H.( 0080 48 9b e3 82 b8 2d 21 1d 89 9d 0a f5 55 70 e6 13 H....-!.....Up.. 0090 1f eb 22 4e 3f 22 b2 b7 14 29 f9 b9 23 46 96 3e .."N?"...)..#F.> 00a0 0d 29 96 e4 c7 43 02 16 57 9e 22 17 20 49 a0 76 .)...C..W.". I.v 00b0 e5 5f 99 fe f0 8d 00 e3 ee 04 8e f6 cc 9c 20 86 ._............ . 00c0 e5 b8 ac d8 b9 b1 bb 78 05 59 28 0c 08 99 36 5d .......x.Y(...6] 00d0 eb 1d d4 6a 2b 85 26 54 76 85 f1 fb 9f d4 42 5d ...j+.&Tv.....B] 00e0 ca 25 bc 53 1c 5c 43 14 17 26 29 f1 41 eb f1 12 .%.S.\C..&).A... 00f0 33 f5 95 e4 ba 04 91 6f 8d 1e 1f c3 ad e9 32 82 3......o......2. 0100 4e c1 a2 77 90 22 1c 61 a0 86 3e fd dd 04 95 35 N..w.".a..>....5 0110 ee b2 66 f6 05 1b d3 6c 8c ee 4f 3f 38 1c 37 dc ..f....l..O?8.7. 0120 09 17 d4 1f eb bf 22 44 fb 67 ae ee fc 0c 3f 4c ......"D.g....?L 0130 01 b1 15 39 5c a4 fd 87 60 eb b1 0a 5b a8 ec 32 ...9\...`...[..2 0140 23 21 1e 26 86 87 b9 ee 4c 58 45 6a 7c b5 f7 c3 #!.&....LXEj|... 0150 91 49 ee 49 9f a0 fb 02 a3 bb c5 57 90 81 2c ba .I.I.......W..,. 0160 62 98 bc 44 26 cd 02 1d 65 f3 ed f1 73 59 00 5b b..D&...e...sY.[ 0170 29 65 ce 1e 87 bf 58 da dd 4b 17 12 f7 a6 83 3b )e....X..K.....; 0180 c0 dd 1d 97 f5 8f b5 39 28 a7 63 de 09 64 .......9(.c..d Frame 11 (398 bytes on wire, 398 bytes captured) Arrival Time: Aug 14, 2006 13:13:52.097287000 Time delta from previous packet: 0.018676000 seconds Time since reference or first frame: 12.785324000 seconds Frame Number: 11 Packet Length: 398 bytes Capture Length: 398 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:09:5b:c0:82:f1 (00:09:5b:c0:82:f1), Dst: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Destination: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Source: 00:09:5b:c0:82:f1 (00:09:5b:c0:82:f1) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.120 (165.227.249.120), Dst: 165.227.249.150 (165.227.249.150) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 384 Identification: 0xb3c7 (46023) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 127 Protocol: ESP (0x32) Header checksum: 0x47ae [correct] Good: True Bad : False Source: 165.227.249.120 (165.227.249.120) Destination: 165.227.249.150 (165.227.249.150) Encapsulating Security Payload SPI: 0xfedd240e Sequence: 2 Data (356 bytes) 0000 00 0c 29 96 e1 fa 00 09 5b c0 82 f1 08 00 45 00 ..).....[.....E. 0010 01 80 b3 c7 00 00 7f 32 47 ae a5 e3 f9 78 a5 e3 .......2G....x.. 0020 f9 96 fe dd 24 0e 00 00 00 02 01 02 03 04 05 06 ....$........... 0030 07 08 09 94 3b 3e 9a 04 e3 81 37 52 ca 95 bd 40 ....;>....7R...@ 0040 f4 81 8e 3b 71 90 8d 7e 37 a8 56 8e 28 cf 03 6e ...;q..~7.V.(..n 0050 79 10 23 7e f8 37 75 3d 4a 95 b7 77 e6 fb 27 2f y.#~.7u=J..w..'/ 0060 93 67 dd 98 f4 1f 56 a0 92 24 bd 0b 54 35 61 2d .g....V..$..T5a- 0070 c8 07 31 97 38 3f 58 8e 02 d3 08 3a ec fb 67 0d ..1.8?X....:..g. 0080 0e 65 3c 37 d3 44 1d 32 5a 1e 1e c3 aa 28 cf cb .e<7.D.2Z....(.. 0090 40 11 e8 83 d5 34 0b e6 05 71 f6 9f 02 64 31 c3 @....4...q...d1. 00a0 92 39 d7 8d ec 58 12 d3 19 c2 9e b6 34 0a 31 c4 .9...X......4.1. 00b0 e6 d8 4f 02 e1 a0 ab e4 ea 5e 06 74 6b 81 d3 44 ..O......^.tk..D 00c0 bb 29 ec 6f e7 b6 40 6f 73 25 19 a4 7b 9d a4 c5 .).o..@os%..{... 00d0 f5 80 00 31 40 91 1c ec 97 a3 49 91 8d 08 e3 2e ...1@.....I..... 00e0 99 49 f9 4b 2d 2c 86 83 b4 38 1f 36 8c a6 af d7 .I.K-,...8.6.... 00f0 8c 97 e6 8e c9 f8 e3 c6 0f 4f 7b a3 c1 cf 90 e9 .........O{..... 0100 65 72 57 be 91 01 4f 55 55 c8 e9 96 46 1f 6c f0 erW...OUU...F.l. 0110 e8 16 2a 6b 9a 4e fe cc 1d d2 ec 54 7f 3f 1e d6 ..*k.N.....T.?.. 0120 a3 4d af 09 8d e8 72 ce cb 81 d7 3f d7 02 3f d2 .M....r....?..?. 0130 c6 18 fa 0d 37 31 83 73 9c e0 ca bf 9b c4 a2 d6 ....71.s........ 0140 a1 d4 1c 96 4b bd d4 27 aa 91 37 77 84 b9 5a 9f ....K..'..7w..Z. 0150 4d 05 69 79 30 d9 ff 45 ed bb 74 05 37 0c 4a 71 M.iy0..E..t.7.Jq 0160 dc 95 31 09 bb 2c 4e 52 ca 88 24 4f e6 13 2a 51 ..1..,NR..$O..*Q 0170 16 87 51 19 78 c4 2f 10 7e 54 b4 a9 5b 0a b2 5f ..Q.x./.~T..[.._ 0180 dc 7d 37 75 ce bd c6 74 63 e2 ab aa 5b 55 .}7u...tc...[U