Frame 1 (222 bytes on wire, 222 bytes captured) Arrival Time: Nov 3, 2006 14:04:25.823183000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 222 bytes Capture Length: 222 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa), Dst: 00:14:6c:8c:6d:16 (00:14:6c:8c:6d:16) Destination: 00:14:6c:8c:6d:16 (00:14:6c:8c:6d:16) Source: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.123 (165.227.249.123) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 208 Identification: 0x314a (12618) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xc9f9 [correct] Good: True Bad : False Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.123 (165.227.249.123) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 188 Checksum: 0x9c40 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xBDD3E1B571562972 Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 180 Security Association payload Next payload: Vendor ID (13) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 40 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 32 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: unknown vendor ID: 0x4A131C81070358455C5728F20E95452F Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-03 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: RFC 3706 Detecting Dead IKE Peers (DPD) 0000 00 14 6c 8c 6d 16 00 0c 29 96 e1 fa 08 00 45 00 ..l.m...).....E. 0010 00 d0 31 4a 00 00 80 11 c9 f9 a5 e3 f9 96 a5 e3 ..1J............ 0020 f9 7b 01 f4 01 f4 00 bc 9c 40 bd d3 e1 b5 71 56 .{.......@....qV 0030 29 72 00 00 00 00 00 00 00 00 01 10 02 00 00 00 )r.............. 0040 00 00 00 00 00 b4 0d 00 00 34 00 00 00 01 00 00 .........4...... 0050 00 01 00 00 00 28 01 01 00 01 00 00 00 20 01 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 04 00 02 80 03 ................ 0070 00 01 80 0b 00 01 80 0c 70 80 0d 00 00 14 4a 13 ........p.....J. 0080 1c 81 07 03 58 45 5c 57 28 f2 0e 95 45 2f 0d 00 ....XE\W(...E/.. 0090 00 14 7d 94 19 a6 53 10 ca 6f 2c 17 9d 92 15 52 ..}...S..o,....R 00a0 9d 56 0d 00 00 14 90 cb 80 91 3e bb 69 6e 08 63 .V........>.in.c 00b0 81 b5 ec 42 7b 1f 0d 00 00 14 44 85 15 2d 18 b6 ...B{.....D..-.. 00c0 bb cd 0b e8 a8 46 95 79 dd cc 00 00 00 14 af ca .....F.y........ 00d0 d7 13 68 a1 f1 c9 6b 86 96 fc 77 57 01 00 ..h...k...wW.. Frame 2 (142 bytes on wire, 142 bytes captured) Arrival Time: Nov 3, 2006 14:04:26.024668000 Time delta from previous packet: 0.201485000 seconds Time since reference or first frame: 0.201485000 seconds Frame Number: 2 Packet Length: 142 bytes Capture Length: 142 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:14:6c:8c:6d:16 (00:14:6c:8c:6d:16), Dst: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Destination: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Source: 00:14:6c:8c:6d:16 (00:14:6c:8c:6d:16) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.123 (165.227.249.123), Dst: 165.227.249.150 (165.227.249.150) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 128 Identification: 0x00dd (221) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfab6 [correct] Good: True Bad : False Source: 165.227.249.123 (165.227.249.123) Destination: 165.227.249.150 (165.227.249.150) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 108 Checksum: 0xa1b0 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xBDD3E1B571562972 Responder cookie: 0x4B74D05674FDD895 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 100 Security Association payload Next payload: Vendor ID (13) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 40 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 32 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: unknown vendor ID: 0x7003CBC1097DBE9C2600BA6983BC8B35 0000 00 0c 29 96 e1 fa 00 14 6c 8c 6d 16 08 00 45 00 ..).....l.m...E. 0010 00 80 00 dd 40 00 40 11 fa b6 a5 e3 f9 7b a5 e3 ....@.@......{.. 0020 f9 96 01 f4 01 f4 00 6c a1 b0 bd d3 e1 b5 71 56 .......l......qV 0030 29 72 4b 74 d0 56 74 fd d8 95 01 10 02 00 00 00 )rKt.Vt......... 0040 00 00 00 00 00 64 0d 00 00 34 00 00 00 01 00 00 .....d...4...... 0050 00 01 00 00 00 28 01 01 00 01 00 00 00 20 01 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 04 00 02 80 03 ................ 0070 00 01 80 0b 00 01 80 0c 70 80 00 00 00 14 70 03 ........p.....p. 0080 cb c1 09 7d be 9c 26 00 ba 69 83 bc 8b 35 ...}..&..i...5 Frame 3 (222 bytes on wire, 222 bytes captured) Arrival Time: Nov 3, 2006 14:04:26.051884000 Time delta from previous packet: 0.027216000 seconds Time since reference or first frame: 0.228701000 seconds Frame Number: 3 Packet Length: 222 bytes Capture Length: 222 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa), Dst: 00:14:6c:8c:6d:16 (00:14:6c:8c:6d:16) Destination: 00:14:6c:8c:6d:16 (00:14:6c:8c:6d:16) Source: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.123 (165.227.249.123) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 208 Identification: 0x314b (12619) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xc9f8 [correct] Good: True Bad : False Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.123 (165.227.249.123) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 188 Checksum: 0xc6d7 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xBDD3E1B571562972 Responder cookie: 0x4B74D05674FDD895 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 180 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 20 Nonce Data 0000 00 14 6c 8c 6d 16 00 0c 29 96 e1 fa 08 00 45 00 ..l.m...).....E. 0010 00 d0 31 4b 00 00 80 11 c9 f8 a5 e3 f9 96 a5 e3 ..1K............ 0020 f9 7b 01 f4 01 f4 00 bc c6 d7 bd d3 e1 b5 71 56 .{............qV 0030 29 72 4b 74 d0 56 74 fd d8 95 04 10 02 00 00 00 )rKt.Vt......... 0040 00 00 00 00 00 b4 0a 00 00 84 b0 6d db 39 b8 e9 ...........m.9.. 0050 67 b7 44 6b 14 66 7e aa 94 39 31 d7 43 de 73 9d g.Dk.f~..91.C.s. 0060 28 07 32 c9 73 0c af e4 20 17 7c 4c 56 2f b5 e3 (.2.s... .|LV/.. 0070 a6 dc e4 87 5d 72 ad b2 7b de d2 0b c4 98 4b 26 ....]r..{.....K& 0080 76 38 e2 52 04 0e 2c 84 61 12 11 18 71 8e 3b 00 v8.R..,.a...q.;. 0090 f7 81 77 ba de f8 59 05 63 16 e9 8d c4 b4 3c 7b ..w...Y.c.....<{ 00a0 7d 7d d5 5d 1f 8c 85 5b 3b 79 41 58 1c 14 fd 94 }}.]...[;yAX.... 00b0 51 0b 84 0f 4a c2 90 bc 17 d6 3e 2a 5f e4 9b a2 Q...J.....>*_... 00c0 db c9 26 f1 b2 12 11 56 02 75 00 00 00 14 ac 52 ..&....V.u.....R 00d0 e5 d9 f9 21 2e 2c 2b 06 62 45 ff 05 e8 6a ...!.,+.bE...j Frame 4 (242 bytes on wire, 242 bytes captured) Arrival Time: Nov 3, 2006 14:04:26.323158000 Time delta from previous packet: 0.271274000 seconds Time since reference or first frame: 0.499975000 seconds Frame Number: 4 Packet Length: 242 bytes Capture Length: 242 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:14:6c:8c:6d:16 (00:14:6c:8c:6d:16), Dst: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Destination: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Source: 00:14:6c:8c:6d:16 (00:14:6c:8c:6d:16) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.123 (165.227.249.123), Dst: 165.227.249.150 (165.227.249.150) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 228 Identification: 0x00de (222) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfa51 [correct] Good: True Bad : False Source: 165.227.249.123 (165.227.249.123) Destination: 165.227.249.150 (165.227.249.150) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 208 Checksum: 0xef0b [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xBDD3E1B571562972 Responder cookie: 0x4B74D05674FDD895 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 200 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: Vendor ID (13) Length: 20 Nonce Data Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: unknown vendor ID: 0x7003CBC1097DBE9C2600BA6983BC8B35 0000 00 0c 29 96 e1 fa 00 14 6c 8c 6d 16 08 00 45 00 ..).....l.m...E. 0010 00 e4 00 de 40 00 40 11 fa 51 a5 e3 f9 7b a5 e3 ....@.@..Q...{.. 0020 f9 96 01 f4 01 f4 00 d0 ef 0b bd d3 e1 b5 71 56 ..............qV 0030 29 72 4b 74 d0 56 74 fd d8 95 04 10 02 00 00 00 )rKt.Vt......... 0040 00 00 00 00 00 c8 0a 00 00 84 ba 9d a7 75 f5 9d .............u.. 0050 94 2e 54 c2 b1 77 e5 99 4e b7 a8 0c f5 30 f7 26 ..T..w..N....0.& 0060 ba 81 33 f7 91 0d f5 84 0b 33 6d 5c 4c 50 12 33 ..3......3m\LP.3 0070 4f 72 b3 36 44 a3 65 c3 be 83 2e 6d d9 f9 c3 5a Or.6D.e....m...Z 0080 ec 8c 46 66 e1 98 23 6a 33 19 75 90 ae 89 d2 5c ..Ff..#j3.u....\ 0090 d9 23 56 b5 95 c9 13 fb ed d7 30 ac f0 65 5f cd .#V.......0..e_. 00a0 0d e2 3b ed 78 ec 47 de d7 83 8a 6d 4c 8c 9a 99 ..;.x.G....mL... 00b0 63 13 94 a0 56 93 95 cf 81 a3 63 e6 70 94 bc a4 c...V.....c.p... 00c0 10 64 a8 59 a2 c8 33 57 06 72 0d 00 00 14 98 75 .d.Y..3W.r.....u 00d0 0c a8 ba 6d 19 61 45 5d e6 a6 39 a9 70 7d 00 00 ...m.aE]..9.p}.. 00e0 00 14 70 03 cb c1 09 7d be 9c 26 00 ba 69 83 bc ..p....}..&..i.. 00f0 8b 35 .5 Frame 5 (142 bytes on wire, 142 bytes captured) Arrival Time: Nov 3, 2006 14:04:26.346037000 Time delta from previous packet: 0.022879000 seconds Time since reference or first frame: 0.522854000 seconds Frame Number: 5 Packet Length: 142 bytes Capture Length: 142 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa), Dst: 00:14:6c:8c:6d:16 (00:14:6c:8c:6d:16) Destination: 00:14:6c:8c:6d:16 (00:14:6c:8c:6d:16) Source: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.123 (165.227.249.123) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 128 Identification: 0x314c (12620) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xca47 [correct] Good: True Bad : False Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.123 (165.227.249.123) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 108 Checksum: 0xf784 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xBDD3E1B571562972 Responder cookie: 0x4B74D05674FDD895 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 100 Encrypted payload (72 bytes) 0000 00 14 6c 8c 6d 16 00 0c 29 96 e1 fa 08 00 45 00 ..l.m...).....E. 0010 00 80 31 4c 00 00 80 11 ca 47 a5 e3 f9 96 a5 e3 ..1L.....G...... 0020 f9 7b 01 f4 01 f4 00 6c f7 84 bd d3 e1 b5 71 56 .{.....l......qV 0030 29 72 4b 74 d0 56 74 fd d8 95 05 10 02 01 00 00 )rKt.Vt......... 0040 00 00 00 00 00 64 a3 f1 25 9a a7 ae 74 5e e7 68 .....d..%...t^.h 0050 eb 3f b5 b9 8c ee 4d 63 31 9a e5 b6 af ba 04 6b .?....Mc1......k 0060 df 76 98 88 72 1d dd cf 7e 56 7d 0e b2 ea 57 39 .v..r...~V}...W9 0070 e1 99 59 b1 03 0c 57 2a 42 22 8f 7e b3 3b 9b 6e ..Y...W*B".~.;.n 0080 37 70 42 99 94 c2 c8 c8 48 ad f6 f9 6b 67 7pB.....H...kg Frame 6 (110 bytes on wire, 110 bytes captured) Arrival Time: Nov 3, 2006 14:04:26.673953000 Time delta from previous packet: 0.327916000 seconds Time since reference or first frame: 0.850770000 seconds Frame Number: 6 Packet Length: 110 bytes Capture Length: 110 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:14:6c:8c:6d:16 (00:14:6c:8c:6d:16), Dst: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Destination: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Source: 00:14:6c:8c:6d:16 (00:14:6c:8c:6d:16) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.123 (165.227.249.123), Dst: 165.227.249.150 (165.227.249.150) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0x00df (223) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfad4 [correct] Good: True Bad : False Source: 165.227.249.123 (165.227.249.123) Destination: 165.227.249.150 (165.227.249.150) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 76 Checksum: 0xa320 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xBDD3E1B571562972 Responder cookie: 0x4B74D05674FDD895 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 68 Encrypted payload (40 bytes) 0000 00 0c 29 96 e1 fa 00 14 6c 8c 6d 16 08 00 45 00 ..).....l.m...E. 0010 00 60 00 df 40 00 40 11 fa d4 a5 e3 f9 7b a5 e3 .`..@.@......{.. 0020 f9 96 01 f4 01 f4 00 4c a3 20 bd d3 e1 b5 71 56 .......L. ....qV 0030 29 72 4b 74 d0 56 74 fd d8 95 05 10 02 01 00 00 )rKt.Vt......... 0040 00 00 00 00 00 44 27 08 d2 2d 68 be 79 99 53 17 .....D'..-h.y.S. 0050 70 02 18 5b f3 1d 64 5f 87 ae 59 12 91 e7 ab 11 p..[..d_..Y..... 0060 cd fd 80 b1 af 87 e1 f9 61 75 bb 5e 45 2f ........au.^E/ Frame 7 (126 bytes on wire, 126 bytes captured) Arrival Time: Nov 3, 2006 14:04:26.682857000 Time delta from previous packet: 0.008904000 seconds Time since reference or first frame: 0.859674000 seconds Frame Number: 7 Packet Length: 126 bytes Capture Length: 126 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:14:6c:8c:6d:16 (00:14:6c:8c:6d:16), Dst: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Destination: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Source: 00:14:6c:8c:6d:16 (00:14:6c:8c:6d:16) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.123 (165.227.249.123), Dst: 165.227.249.150 (165.227.249.150) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x00e0 (224) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfac3 [correct] Good: True Bad : False Source: 165.227.249.123 (165.227.249.123) Destination: 165.227.249.150 (165.227.249.150) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 92 Checksum: 0x5cf8 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xBDD3E1B571562972 Responder cookie: 0x4B74D05674FDD895 Next payload: Hash (8) Version: 1.0 Exchange type: Informational (5) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0xACF958D3 Length: 84 Encrypted payload (56 bytes) 0000 00 0c 29 96 e1 fa 00 14 6c 8c 6d 16 08 00 45 00 ..).....l.m...E. 0010 00 70 00 e0 40 00 40 11 fa c3 a5 e3 f9 7b a5 e3 .p..@.@......{.. 0020 f9 96 01 f4 01 f4 00 5c 5c f8 bd d3 e1 b5 71 56 .......\\.....qV 0030 29 72 4b 74 d0 56 74 fd d8 95 08 10 05 01 ac f9 )rKt.Vt......... 0040 58 d3 00 00 00 54 fb cb b3 e5 14 38 ca 22 79 ad X....T.....8."y. 0050 7b fd 03 e8 bb ab fd 31 ad d1 fc 34 dc 6e a3 8a {......1...4.n.. 0060 0c 84 d0 56 58 79 bb 97 c7 c4 28 8f 2e b0 5a cd ...VXy....(...Z. 0070 60 12 32 d3 a4 65 c0 91 70 2f 75 19 f6 38 `.2..e..p/u..8 Frame 8 (334 bytes on wire, 334 bytes captured) Arrival Time: Nov 3, 2006 14:04:26.704665000 Time delta from previous packet: 0.021808000 seconds Time since reference or first frame: 0.881482000 seconds Frame Number: 8 Packet Length: 334 bytes Capture Length: 334 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa), Dst: 00:14:6c:8c:6d:16 (00:14:6c:8c:6d:16) Destination: 00:14:6c:8c:6d:16 (00:14:6c:8c:6d:16) Source: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.123 (165.227.249.123) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 320 Identification: 0x314d (12621) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xc986 [correct] Good: True Bad : False Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.123 (165.227.249.123) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 300 Checksum: 0x2222 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xBDD3E1B571562972 Responder cookie: 0x4B74D05674FDD895 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x18948641 Length: 292 Encrypted payload (264 bytes) 0000 00 14 6c 8c 6d 16 00 0c 29 96 e1 fa 08 00 45 00 ..l.m...).....E. 0010 01 40 31 4d 00 00 80 11 c9 86 a5 e3 f9 96 a5 e3 .@1M............ 0020 f9 7b 01 f4 01 f4 01 2c 22 22 bd d3 e1 b5 71 56 .{.....,""....qV 0030 29 72 4b 74 d0 56 74 fd d8 95 08 10 20 01 18 94 )rKt.Vt..... ... 0040 86 41 00 00 01 24 1b 7d 4a d5 b4 4d e9 fd 17 85 .A...$.}J..M.... 0050 44 37 b6 13 8a 3a 16 9e 13 62 15 c3 e7 0c 2e c1 D7...:...b...... 0060 c6 28 d5 24 96 d1 be 9f ef ae c4 4e cd 35 9b d6 .(.$.......N.5.. 0070 6e 04 0b b6 eb 17 19 a6 51 0e 64 f9 18 fe 64 0c n.......Q.d...d. 0080 48 cb de 31 d7 e3 cb 79 7d a9 a9 22 6c a8 e4 1c H..1...y}.."l... 0090 47 ee 42 69 04 65 1e ae 32 98 70 7d 63 ee e2 74 G.Bi.e..2.p}c..t 00a0 5d 57 41 d8 d2 da 35 c5 4d 0e 9c 86 06 07 b3 5c ]WA...5.M......\ 00b0 81 8f 81 7f 2b 64 86 80 5c c1 7b ac 40 af 14 c7 ....+d..\.{.@... 00c0 c3 4e 77 60 de 56 6c 2e aa da 14 a6 8f 05 21 b2 .Nw`.Vl.......!. 00d0 1d 90 fe ae bc 80 0f 0d 52 ba a2 d3 d6 30 42 3f ........R....0B? 00e0 8e 5e f7 9a de d9 b4 1a ea e4 64 2e 78 8b 50 b6 .^........d.x.P. 00f0 aa 17 a8 55 bc ba a0 8b 64 5e 4d 97 fa 19 56 b7 ...U....d^M...V. 0100 ff 1f ee 20 1b 41 ce 4c a5 b2 91 0f 8c a9 9f 99 ... .A.L........ 0110 90 08 78 e8 99 e5 ac 78 95 a7 00 2b 9e 1a bd be ..x....x...+.... 0120 8a cf dc 3e 71 78 71 8d 3d 78 48 0d f8 a6 81 80 ...>qxq.=xH..... 0130 43 5e 2a d0 22 92 2e ab 1b 90 b5 32 78 2a 11 46 C^*."......2x*.F 0140 60 ff d3 cf 08 72 31 d7 69 e0 58 98 92 42 `....r1.i.X..B Frame 9 (334 bytes on wire, 334 bytes captured) Arrival Time: Nov 3, 2006 14:04:27.213478000 Time delta from previous packet: 0.508813000 seconds Time since reference or first frame: 1.390295000 seconds Frame Number: 9 Packet Length: 334 bytes Capture Length: 334 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:14:6c:8c:6d:16 (00:14:6c:8c:6d:16), Dst: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Destination: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Source: 00:14:6c:8c:6d:16 (00:14:6c:8c:6d:16) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.123 (165.227.249.123), Dst: 165.227.249.150 (165.227.249.150) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 320 Identification: 0x00e1 (225) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xf9f2 [correct] Good: True Bad : False Source: 165.227.249.123 (165.227.249.123) Destination: 165.227.249.150 (165.227.249.150) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 300 Checksum: 0x3c93 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xBDD3E1B571562972 Responder cookie: 0x4B74D05674FDD895 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x18948641 Length: 292 Encrypted payload (264 bytes) 0000 00 0c 29 96 e1 fa 00 14 6c 8c 6d 16 08 00 45 00 ..).....l.m...E. 0010 01 40 00 e1 40 00 40 11 f9 f2 a5 e3 f9 7b a5 e3 .@..@.@......{.. 0020 f9 96 01 f4 01 f4 01 2c 3c 93 bd d3 e1 b5 71 56 .......,<.....qV 0030 29 72 4b 74 d0 56 74 fd d8 95 08 10 20 01 18 94 )rKt.Vt..... ... 0040 86 41 00 00 01 24 9b a5 20 80 95 59 7b 3c 4c 71 .A...$.. ..Y{......u..3(7..Z 0060 a8 f0 ee 11 aa da 94 77 7f 8c dd 0c 02 7d e5 03 .......w.....}.. 0070 c5 de 51 fe 61 7b cb 24 04 f4 a8 8d 93 26 f4 4d ..Q.a{.$.....&.M 0080 76 8b 59 2b 2e 84 a7 d3 58 62 08 41 9a 6b 1b a2 v.Y+....Xb.A.k.. 0090 d4 4d 77 96 70 5e 1b 6a ef cb 2e 09 e6 c9 b5 d7 .Mw.p^.j........ 00a0 7e 7b eb f5 b0 fb 07 c7 90 77 84 86 41 cc fb 6d ~{.......w..A..m 00b0 4d a3 53 3a 68 08 32 2c 58 2b f9 42 6c e3 51 57 M.S:h.2,X+.Bl.QW 00c0 1e 87 57 5a 43 29 b8 72 7d 27 c8 b1 5c 77 82 fe ..WZC).r}'..\w.. 00d0 a5 be bd aa 3f ff 5e 76 86 57 6f e7 02 89 8b 57 ....?.^v.Wo....W 00e0 a2 c3 a1 61 68 af db 41 db f2 c3 a0 d9 48 06 66 ...ah..A.....H.f 00f0 1e 12 09 32 b6 4a 6a cb 50 e3 dd f7 c3 a9 e6 e5 ...2.Jj.P....... 0100 40 cb 15 a5 af d8 a0 1c 9d 5e 32 4f a2 6d 05 81 @........^2O.m.. 0110 35 f4 81 b9 7b 13 4e e4 e9 11 47 6e d3 17 ec a1 5...{.N...Gn.... 0120 c8 1c 7b 8a 48 44 de 26 cc f7 6c a6 17 c9 55 d6 ..{.HD.&..l...U. 0130 83 5e 24 3f a8 19 f0 fa a5 ab 88 62 c4 1d cb 4f .^$?.......b...O 0140 57 f8 c7 d8 13 18 12 d1 5d d0 43 e5 13 c1 W.......].C... Frame 10 (102 bytes on wire, 102 bytes captured) Arrival Time: Nov 3, 2006 14:04:27.357696000 Time delta from previous packet: 0.144218000 seconds Time since reference or first frame: 1.534513000 seconds Frame Number: 10 Packet Length: 102 bytes Capture Length: 102 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa), Dst: 00:14:6c:8c:6d:16 (00:14:6c:8c:6d:16) Destination: 00:14:6c:8c:6d:16 (00:14:6c:8c:6d:16) Source: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.123 (165.227.249.123) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 88 Identification: 0x314e (12622) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xca6d [correct] Good: True Bad : False Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.123 (165.227.249.123) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 68 Checksum: 0x61de [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xBDD3E1B571562972 Responder cookie: 0x4B74D05674FDD895 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x18948641 Length: 60 Encrypted payload (32 bytes) 0000 00 14 6c 8c 6d 16 00 0c 29 96 e1 fa 08 00 45 00 ..l.m...).....E. 0010 00 58 31 4e 00 00 80 11 ca 6d a5 e3 f9 96 a5 e3 .X1N.....m...... 0020 f9 7b 01 f4 01 f4 00 44 61 de bd d3 e1 b5 71 56 .{.....Da.....qV 0030 29 72 4b 74 d0 56 74 fd d8 95 08 10 20 01 18 94 )rKt.Vt..... ... 0040 86 41 00 00 00 3c 17 05 bd ec ee a7 6f 8b 81 27 .A...<......o..' 0050 04 20 a7 ae ab 7b 3f 28 ff 40 0f dc 58 eb 70 4c . ...{?(.@..X.pL 0060 da c2 0b 43 e6 d8 ...C.. Frame 11 (398 bytes on wire, 398 bytes captured) Arrival Time: Nov 3, 2006 14:04:31.880466000 Time delta from previous packet: 4.522770000 seconds Time since reference or first frame: 6.057283000 seconds Frame Number: 11 Packet Length: 398 bytes Capture Length: 398 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa), Dst: 00:14:6c:8c:6d:16 (00:14:6c:8c:6d:16) Destination: 00:14:6c:8c:6d:16 (00:14:6c:8c:6d:16) Source: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.123 (165.227.249.123) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 384 Identification: 0x314f (12623) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: ESP (0x32) Header checksum: 0xc923 [correct] Good: True Bad : False Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.123 (165.227.249.123) Encapsulating Security Payload SPI: 0x0736cf9f Sequence: 1 Data (356 bytes) 0000 00 14 6c 8c 6d 16 00 0c 29 96 e1 fa 08 00 45 00 ..l.m...).....E. 0010 01 80 31 4f 00 00 80 32 c9 23 a5 e3 f9 96 a5 e3 ..1O...2.#...... 0020 f9 7b 07 36 cf 9f 00 00 00 01 a5 77 7c 7a e4 2a .{.6.......w|z.* 0030 04 3d 97 74 21 31 47 56 c1 9c 6b 8c e6 12 65 67 .=.t!1GV..k...eg 0040 7d eb a3 1f 00 cb d6 a3 5e cc 8e ea 12 a1 ee 08 }.......^....... 0050 e4 44 fd 99 e5 57 cb 4b e7 7a c5 39 6d ea 80 28 .D...W.K.z.9m..( 0060 9c 27 2a 26 5d 39 3a 1a ea b2 21 fd 83 fc 89 de .'*&]9:...!..... 0070 a9 2c ac e4 80 57 21 14 65 44 2d 27 f0 e9 bd ba .,...W!.eD-'.... 0080 b3 f7 9a 63 b0 53 c9 9c 1d 79 ad 12 9f 72 0f 49 ...c.S...y...r.I 0090 06 09 75 90 8c cb cd cf 3a d9 ab ac e0 ce cc 23 ..u.....:......# 00a0 1e eb 38 99 7a ed b1 55 b3 4d 21 27 67 50 65 c7 ..8.z..U.M!'gPe. 00b0 b1 ae f4 9d c5 4d 49 e2 7c d3 4e 4f 7a d4 35 53 .....MI.|.NOz.5S 00c0 cc 4a 8c 84 54 99 eb 23 6d 2f 73 b9 de 83 19 59 .J..T..#m/s....Y 00d0 a8 5f b5 fd c0 6d cf 02 ff e4 2a fc 62 e8 81 59 ._...m....*.b..Y 00e0 c3 78 75 12 e8 69 45 86 43 d1 c5 3a 93 94 65 33 .xu..iE.C..:..e3 00f0 57 24 c7 2b 93 31 19 53 40 ec 69 b7 dd 89 49 52 W$.+.1.S@.i...IR 0100 a0 7d 01 70 10 07 29 05 16 70 7d 1a 06 83 4e bb .}.p..)..p}...N. 0110 54 12 5a c5 50 8a 0d 6b 9e 70 b0 6a c4 61 33 be T.Z.P..k.p.j.a3. 0120 18 e0 1c bd 87 51 60 8c 3c 7f b6 ec 64 fa 85 6f .....Q`.<...d..o 0130 d6 f0 56 b6 a3 a3 c0 be ea 05 db c0 0a 91 8e 67 ..V............g 0140 b6 2c e4 ee d3 8c 2a 90 bb 0d 2c b6 a2 48 8f 62 .,....*...,..H.b 0150 15 07 59 ed 30 02 bf fc 78 8e 8c 95 05 6d db e8 ..Y.0...x....m.. 0160 36 2d 09 1a 6e a6 35 fe 44 8d c2 0d fd ae 54 af 6-..n.5.D.....T. 0170 21 31 10 aa 14 f8 11 84 35 0f 8b c4 16 0e 7d 3d !1......5.....}= 0180 30 bc f8 1c d1 08 d9 63 80 8b 56 c3 2c 5a 0......c..V.,Z Frame 12 (398 bytes on wire, 398 bytes captured) Arrival Time: Nov 3, 2006 14:04:31.893356000 Time delta from previous packet: 0.012890000 seconds Time since reference or first frame: 6.070173000 seconds Frame Number: 12 Packet Length: 398 bytes Capture Length: 398 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:14:6c:8c:6d:16 (00:14:6c:8c:6d:16), Dst: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Destination: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Source: 00:14:6c:8c:6d:16 (00:14:6c:8c:6d:16) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.123 (165.227.249.123), Dst: 165.227.249.150 (165.227.249.150) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 384 Identification: 0x606d (24685) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0xda05 [correct] Good: True Bad : False Source: 165.227.249.123 (165.227.249.123) Destination: 165.227.249.150 (165.227.249.150) Encapsulating Security Payload SPI: 0xabfdbb55 Sequence: 1 Data (356 bytes) 0000 00 0c 29 96 e1 fa 00 14 6c 8c 6d 16 08 00 45 00 ..).....l.m...E. 0010 01 80 60 6d 00 00 40 32 da 05 a5 e3 f9 7b a5 e3 ..`m..@2.....{.. 0020 f9 96 ab fd bb 55 00 00 00 01 73 55 6a 54 3e 23 .....U....sUjT># 0030 21 9d 89 6c d2 1e 5e a3 b0 7a e7 f8 8f cc b1 d0 !..l..^..z...... 0040 5f ac ee be d7 84 54 59 d0 a6 d7 ec 7c 40 9f bb _.....TY....|@.. 0050 f7 f7 42 00 a2 b0 bb 41 34 a6 e0 fa 7a f7 68 e6 ..B....A4...z.h. 0060 b7 18 0e 2e 49 ec ee 54 44 ae ba f5 c1 b7 92 d0 ....I..TD....... 0070 9d 1b e6 5b 1d ec 54 b9 25 6b fb 15 e0 92 49 ec ...[..T.%k....I. 0080 e9 37 15 f2 c6 16 ab d1 25 c5 63 35 1f 53 56 23 .7......%.c5.SV# 0090 a1 14 32 f1 0d 29 e1 db 5b dc 42 d7 f9 2f 15 f0 ..2..)..[.B../.. 00a0 2e 5d 7c 2f b5 a6 e4 3c d6 cb 87 9b a8 aa 7a ae .]|/...<......z. 00b0 c6 3d 6c 33 52 9c 29 e1 09 9d 54 c1 df 15 63 f2 .=l3R.)...T...c. 00c0 0e e7 c3 2e 38 48 59 d4 e1 21 ed 30 ab e4 77 74 ....8HY..!.0..wt 00d0 54 4d 1d b0 a5 68 df 57 fe 38 2b 06 fa 60 d6 56 TM...h.W.8+..`.V 00e0 93 13 57 bc 90 12 d3 2f a6 f3 61 9c 78 62 b1 39 ..W..../..a.xb.9 00f0 23 43 6b a8 cd f6 a2 c9 e5 4c 14 be 2d 8b 81 1a #Ck......L..-... 0100 65 d5 c9 2e 5d 18 6f 44 a5 4a a2 80 c8 70 c0 39 e...].oD.J...p.9 0110 3d f1 b1 f3 a7 0f 12 01 8e 16 8e 66 09 d3 a5 ec =..........f.... 0120 b3 ed 19 79 a6 53 b9 ab 8e 39 eb 2f fa 50 3a 93 ...y.S...9./.P:. 0130 c9 83 20 df 34 38 ef e3 80 c5 1f 63 13 6f c4 21 .. .48.....c.o.! 0140 50 4f d8 42 0f 6b f8 68 4c ff 4d 35 07 52 ed c2 PO.B.k.hL.M5.R.. 0150 f9 38 6b c4 2c be 9e a9 a2 65 27 f4 cb 8b f9 8d .8k.,....e'..... 0160 e2 ff 6e 09 f1 e6 38 d3 b1 4b 18 50 83 f5 3e 07 ..n...8..K.P..>. 0170 ec 87 43 45 56 08 8d 8f d3 55 a8 a0 e4 f3 a4 b3 ..CEV....U...... 0180 94 c6 69 a6 2a d8 e6 f3 aa 7b f0 53 3d 23 ..i.*....{.S=#