Frame 1 (226 bytes on wire, 226 bytes captured) Arrival Time: Jun 23, 2007 15:41:03.276387000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 226 bytes Capture Length: 226 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa), Dst: 00:19:e1:68:8e:01 (00:19:e1:68:8e:01) Destination: 00:19:e1:68:8e:01 (00:19:e1:68:8e:01) Source: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.127 (165.227.249.127) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 212 Identification: 0x4122 (16674) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xba19 [correct] Good: True Bad : False Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.127 (165.227.249.127) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 192 Checksum: 0xd5ce [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xD0B8807034D0FA1D Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 184 Security Association payload Next payload: Vendor ID (13) Length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 44 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 36 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): AES-CBC (7) Key-Length (14): Key-Length (128) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: unknown vendor ID: 0x4A131C81070358455C5728F20E95452F Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-03 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: RFC 3706 Detecting Dead IKE Peers (DPD) 0000 00 19 e1 68 8e 01 00 0c 29 96 e1 fa 08 00 45 00 ...h....).....E. 0010 00 d4 41 22 00 00 80 11 ba 19 a5 e3 f9 96 a5 e3 ..A"............ 0020 f9 7f 01 f4 01 f4 00 c0 d5 ce d0 b8 80 70 34 d0 .............p4. 0030 fa 1d 00 00 00 00 00 00 00 00 01 10 02 00 00 00 ................ 0040 00 00 00 00 00 b8 0d 00 00 38 00 00 00 01 00 00 .........8...... 0050 00 01 00 00 00 2c 01 01 00 01 00 00 00 24 01 01 .....,.......$.. 0060 00 00 80 01 00 07 80 0e 00 80 80 02 00 02 80 04 ................ 0070 00 02 80 03 00 01 80 0b 00 01 80 0c 70 80 0d 00 ............p... 0080 00 14 4a 13 1c 81 07 03 58 45 5c 57 28 f2 0e 95 ..J.....XE\W(... 0090 45 2f 0d 00 00 14 7d 94 19 a6 53 10 ca 6f 2c 17 E/....}...S..o,. 00a0 9d 92 15 52 9d 56 0d 00 00 14 90 cb 80 91 3e bb ...R.V........>. 00b0 69 6e 08 63 81 b5 ec 42 7b 1f 0d 00 00 14 44 85 in.c...B{.....D. 00c0 15 2d 18 b6 bb cd 0b e8 a8 46 95 79 dd cc 00 00 .-.......F.y.... 00d0 00 14 af ca d7 13 68 a1 f1 c9 6b 86 96 fc 77 57 ......h...k...wW 00e0 01 00 .. Frame 2 (166 bytes on wire, 166 bytes captured) Arrival Time: Jun 23, 2007 15:41:03.285261000 Time delta from previous packet: 0.008874000 seconds Time since reference or first frame: 0.008874000 seconds Frame Number: 2 Packet Length: 166 bytes Capture Length: 166 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:19:e1:68:8e:01 (00:19:e1:68:8e:01), Dst: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Destination: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Source: 00:19:e1:68:8e:01 (00:19:e1:68:8e:01) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.127 (165.227.249.127), Dst: 165.227.249.150 (165.227.249.150) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 152 Identification: 0x05df (1503) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3599 [correct] Good: True Bad : False Source: 165.227.249.127 (165.227.249.127) Destination: 165.227.249.150 (165.227.249.150) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 132 Checksum: 0xbe93 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xD0B8807034D0FA1D Responder cookie: 0xE2A9DBFB7B562AD2 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 124 Security Association payload Next payload: Vendor ID (13) Length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 44 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 36 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): AES-CBC (7) Key-Length (14): Key-Length (128) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: RFC 3706 Detecting Dead IKE Peers (DPD) 0000 00 0c 29 96 e1 fa 00 19 e1 68 8e 01 08 00 45 00 ..)......h....E. 0010 00 98 05 df 00 00 40 11 35 99 a5 e3 f9 7f a5 e3 ......@.5....... 0020 f9 96 01 f4 01 f4 00 84 be 93 d0 b8 80 70 34 d0 .............p4. 0030 fa 1d e2 a9 db fb 7b 56 2a d2 01 10 02 00 00 00 ......{V*....... 0040 00 00 00 00 00 7c 0d 00 00 38 00 00 00 01 00 00 .....|...8...... 0050 00 01 00 00 00 2c 01 01 00 01 00 00 00 24 01 01 .....,.......$.. 0060 00 00 80 01 00 07 80 0e 00 80 80 02 00 02 80 04 ................ 0070 00 02 80 03 00 01 80 0b 00 01 80 0c 70 80 0d 00 ............p... 0080 00 14 90 cb 80 91 3e bb 69 6e 08 63 81 b5 ec 42 ......>.in.c...B 0090 7b 1f 00 00 00 14 af ca d7 13 68 a1 f1 c9 6b 86 {.........h...k. 00a0 96 fc 77 57 01 00 ..wW.. Frame 3 (270 bytes on wire, 270 bytes captured) Arrival Time: Jun 23, 2007 15:41:03.319794000 Time delta from previous packet: 0.034533000 seconds Time since reference or first frame: 0.043407000 seconds Frame Number: 3 Packet Length: 270 bytes Capture Length: 270 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa), Dst: 00:19:e1:68:8e:01 (00:19:e1:68:8e:01) Destination: 00:19:e1:68:8e:01 (00:19:e1:68:8e:01) Source: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.127 (165.227.249.127) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 256 Identification: 0x4123 (16675) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xb9ec [correct] Good: True Bad : False Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.127 (165.227.249.127) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 236 Checksum: 0xa8b6 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xD0B8807034D0FA1D Responder cookie: 0xE2A9DBFB7B562AD2 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 228 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NAT-D (draft-ietf-ipsec-nat-t-ike-01 to 03) (130) Length: 20 Nonce Data NAT-D (draft-ietf-ipsec-nat-t-ike-01 to 03) payload Next payload: NAT-D (draft-ietf-ipsec-nat-t-ike-01 to 03) (130) Length: 24 Hash of address and port: 574531A447EF9E53A329F050A9D415B1589B2701 NAT-D (draft-ietf-ipsec-nat-t-ike-01 to 03) payload Next payload: NONE (0) Length: 24 Hash of address and port: AE0831B0A8EC76E548A5342C66B2BA0E749EE758 0000 00 19 e1 68 8e 01 00 0c 29 96 e1 fa 08 00 45 00 ...h....).....E. 0010 01 00 41 23 00 00 80 11 b9 ec a5 e3 f9 96 a5 e3 ..A#............ 0020 f9 7f 01 f4 01 f4 00 ec a8 b6 d0 b8 80 70 34 d0 .............p4. 0030 fa 1d e2 a9 db fb 7b 56 2a d2 04 10 02 00 00 00 ......{V*....... 0040 00 00 00 00 00 e4 0a 00 00 84 99 58 60 c5 01 b2 ...........X`... 0050 d5 80 b2 f6 b4 bf 70 d2 61 f4 9d 2e 40 1a 0a 03 ......p.a...@... 0060 f5 94 7c 34 4a b5 ba d4 5b 17 69 40 b7 64 93 08 ..|4J...[.i@.d.. 0070 9a 2e 03 d4 bd 53 8a 37 0e ae 14 5c 2d 0c 6e 9d .....S.7...\-.n. 0080 65 9a 0e a2 b6 c4 41 34 62 ce d9 46 85 39 2d 89 e.....A4b..F.9-. 0090 76 a7 a0 c1 56 53 d3 21 85 84 de 6e db 76 b0 cd v...VS.!...n.v.. 00a0 4b 33 50 2c e5 68 48 7c 80 37 71 29 db 97 36 16 K3P,.hH|.7q)..6. 00b0 48 bb b4 ae 74 32 c2 ed 18 04 1e 33 14 49 c1 ed H...t2.....3.I.. 00c0 08 18 ad f4 69 64 6b b0 e7 6b 82 00 00 14 26 3c ....idk..k....&< 00d0 27 98 53 db f7 36 21 19 f4 29 e3 e6 21 97 82 00 '.S..6!..)..!... 00e0 00 18 57 45 31 a4 47 ef 9e 53 a3 29 f0 50 a9 d4 ..WE1.G..S.).P.. 00f0 15 b1 58 9b 27 01 00 00 00 18 ae 08 31 b0 a8 ec ..X.'.......1... 0100 76 e5 48 a5 34 2c 66 b2 ba 0e 74 9e e7 58 v.H.4,f...t..X Frame 4 (262 bytes on wire, 262 bytes captured) Arrival Time: Jun 23, 2007 15:41:03.806983000 Time delta from previous packet: 0.487189000 seconds Time since reference or first frame: 0.530596000 seconds Frame Number: 4 Packet Length: 262 bytes Capture Length: 262 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:19:e1:68:8e:01 (00:19:e1:68:8e:01), Dst: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Destination: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Source: 00:19:e1:68:8e:01 (00:19:e1:68:8e:01) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.127 (165.227.249.127), Dst: 165.227.249.150 (165.227.249.150) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 248 Identification: 0x05e0 (1504) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3538 [correct] Good: True Bad : False Source: 165.227.249.127 (165.227.249.127) Destination: 165.227.249.150 (165.227.249.150) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 228 Checksum: 0xda98 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xD0B8807034D0FA1D Responder cookie: 0xE2A9DBFB7B562AD2 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 220 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NAT-D (draft-ietf-ipsec-nat-t-ike-01 to 03) (130) Length: 12 Nonce Data NAT-D (draft-ietf-ipsec-nat-t-ike-01 to 03) payload Next payload: NAT-D (draft-ietf-ipsec-nat-t-ike-01 to 03) (130) Length: 24 Hash of address and port: AE0831B0A8EC76E548A5342C66B2BA0E749EE758 NAT-D (draft-ietf-ipsec-nat-t-ike-01 to 03) payload Next payload: NONE (0) Length: 24 Hash of address and port: 574531A447EF9E53A329F050A9D415B1589B2701 0000 00 0c 29 96 e1 fa 00 19 e1 68 8e 01 08 00 45 00 ..)......h....E. 0010 00 f8 05 e0 00 00 40 11 35 38 a5 e3 f9 7f a5 e3 ......@.58...... 0020 f9 96 01 f4 01 f4 00 e4 da 98 d0 b8 80 70 34 d0 .............p4. 0030 fa 1d e2 a9 db fb 7b 56 2a d2 04 10 02 00 00 00 ......{V*....... 0040 00 00 00 00 00 dc 0a 00 00 84 f6 2b 60 a8 d1 62 ...........+`..b 0050 60 bd 4d 45 32 2e 52 ff 01 f0 e4 83 5d 4d e2 3d `.ME2.R.....]M.= 0060 b1 ec c7 42 59 6b 92 18 f4 b0 3d 41 58 ff a4 28 ...BYk....=AX..( 0070 72 30 2f 94 07 7f d3 04 b5 ac e0 38 17 f8 f2 e3 r0/........8.... 0080 c6 59 ec e7 63 35 a3 d6 24 92 43 3e 47 0f 62 76 .Y..c5..$.C>G.bv 0090 86 d4 59 ad 74 74 52 fe 0a a6 33 94 ac c3 34 b0 ..Y.ttR...3...4. 00a0 64 a0 be 92 ac ac fe a2 54 35 a8 5c 3a 35 56 b4 d.......T5.\:5V. 00b0 7a b8 46 22 13 64 56 2f b2 8f c4 53 1e cf 1e d6 z.F".dV/...S.... 00c0 34 ce 44 02 ac 5d 49 41 1a cc 82 00 00 0c 92 cb 4.D..]IA........ 00d0 6e 3c 4e 1e d2 7a 82 00 00 18 ae 08 31 b0 a8 ec nT3 0060 21 1f 91 3c 56 0f ed 78 e4 4c cb a4 2e 49 ef 4f !..0..]..Y..w. 0080 42 92 6c de cf fd ae 05 9e 10 1d 6b 17 e0 f2 3a B.l........k...: 0090 0b d1 79 6a 06 d4 ..yj.. Frame 6 (134 bytes on wire, 134 bytes captured) Arrival Time: Jun 23, 2007 15:41:04.389935000 Time delta from previous packet: 0.543399000 seconds Time since reference or first frame: 1.113548000 seconds Frame Number: 6 Packet Length: 134 bytes Capture Length: 134 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:19:e1:68:8e:01 (00:19:e1:68:8e:01), Dst: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Destination: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Source: 00:19:e1:68:8e:01 (00:19:e1:68:8e:01) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.127 (165.227.249.127), Dst: 165.227.249.150 (165.227.249.150) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x05e1 (1505) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x35b7 [correct] Good: True Bad : False Source: 165.227.249.127 (165.227.249.127) Destination: 165.227.249.150 (165.227.249.150) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 100 Checksum: 0x65d7 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xD0B8807034D0FA1D Responder cookie: 0xE2A9DBFB7B562AD2 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 92 Encrypted payload (64 bytes) 0000 00 0c 29 96 e1 fa 00 19 e1 68 8e 01 08 00 45 00 ..)......h....E. 0010 00 78 05 e1 00 00 40 11 35 b7 a5 e3 f9 7f a5 e3 .x....@.5....... 0020 f9 96 01 f4 01 f4 00 64 65 d7 d0 b8 80 70 34 d0 .......de....p4. 0030 fa 1d e2 a9 db fb 7b 56 2a d2 05 10 02 01 00 00 ......{V*....... 0040 00 00 00 00 00 5c 67 af 26 70 55 31 0c b3 7b 9b .....\g.&pU1..{. 0050 df 5f e6 c7 43 ea 45 dd 92 b9 ee ed d7 9f 37 28 ._..C.E.......7( 0060 41 bc 3f 0b 18 57 7c f1 6e a0 6d b3 76 50 e4 1b A.?..W|.n.m.vP.. 0070 02 0c cc 3a a7 f7 a7 a4 31 1d 62 b6 42 93 0c 2d ...:....1.b.B..- 0080 ab 47 72 06 b3 a2 .Gr... Frame 7 (342 bytes on wire, 342 bytes captured) Arrival Time: Jun 23, 2007 15:41:04.420314000 Time delta from previous packet: 0.030379000 seconds Time since reference or first frame: 1.143927000 seconds Frame Number: 7 Packet Length: 342 bytes Capture Length: 342 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa), Dst: 00:19:e1:68:8e:01 (00:19:e1:68:8e:01) Destination: 00:19:e1:68:8e:01 (00:19:e1:68:8e:01) Source: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.127 (165.227.249.127) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 328 Identification: 0x4125 (16677) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xb9a2 [correct] Good: True Bad : False Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.127 (165.227.249.127) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 308 Checksum: 0xfeaf [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xD0B8807034D0FA1D Responder cookie: 0xE2A9DBFB7B562AD2 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x73C457C2 Length: 300 Encrypted payload (272 bytes) 0000 00 19 e1 68 8e 01 00 0c 29 96 e1 fa 08 00 45 00 ...h....).....E. 0010 01 48 41 25 00 00 80 11 b9 a2 a5 e3 f9 96 a5 e3 .HA%............ 0020 f9 7f 01 f4 01 f4 01 34 fe af d0 b8 80 70 34 d0 .......4.....p4. 0030 fa 1d e2 a9 db fb 7b 56 2a d2 08 10 20 01 73 c4 ......{V*... .s. 0040 57 c2 00 00 01 2c 7f ec 7e 08 9a e7 5a c8 cf 85 W....,..~...Z... 0050 c1 66 a8 5f ff a7 a2 57 ad d0 46 a8 b1 07 b4 05 .f._...W..F..... 0060 ab 6d cc e4 70 05 7c f2 78 36 46 3b 3b 73 43 58 .m..p.|.x6F;;sCX 0070 e9 a6 eb 08 bd 20 34 93 80 dd 04 a6 cb 7e a8 74 ..... 4......~.t 0080 31 d7 17 2f c6 89 cc 25 2a b2 99 54 0f 5c 88 67 1../...%*..T.\.g 0090 b0 1f 0b d2 93 3c 8c c9 64 4e c7 ff b1 93 bc a3 .....<..dN...... 00a0 13 d9 ec 31 3e 9f 13 d4 15 17 cf 01 1a a4 7c f2 ...1>.........|. 00b0 5b 32 8e da 69 14 0b fd d7 b2 fa cd 18 4c 16 dd [2..i........L.. 00c0 af f9 f9 6a 6f 27 96 50 f6 22 be 66 d7 23 9a 06 ...jo'.P.".f.#.. 00d0 fe a4 5e 14 5a 37 fb 83 19 f9 18 a4 6b 4f 24 7a ..^.Z7......kO$z 00e0 d2 3d cc bd f8 d3 ac c3 a1 6f 52 4e 64 c6 f5 24 .=.......oRNd..$ 00f0 a8 b8 3a d6 36 8d dc 7e fe 0d 9b dd d7 9e 1e d8 ..:.6..~........ 0100 88 41 d2 98 f3 f6 53 0e d6 48 f3 d0 30 5e a9 9c .A....S..H..0^.. 0110 33 c2 f8 b5 3e ec 0c 54 72 a4 18 39 61 89 07 88 3...>..Tr..9a... 0120 ee 94 00 76 d0 b1 08 d0 27 da 1c 0a df bf d0 14 ...v....'....... 0130 87 f3 f7 69 d1 9a 0c f1 dd b5 81 f1 56 e0 0d 77 ...i........V..w 0140 92 32 b3 08 11 31 55 09 1f 83 fd 0c c1 89 e1 dc .2...1U......... 0150 c5 bb 3f 78 17 89 ..?x.. Frame 8 (326 bytes on wire, 326 bytes captured) Arrival Time: Jun 23, 2007 15:41:04.868276000 Time delta from previous packet: 0.447962000 seconds Time since reference or first frame: 1.591889000 seconds Frame Number: 8 Packet Length: 326 bytes Capture Length: 326 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:19:e1:68:8e:01 (00:19:e1:68:8e:01), Dst: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Destination: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Source: 00:19:e1:68:8e:01 (00:19:e1:68:8e:01) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.127 (165.227.249.127), Dst: 165.227.249.150 (165.227.249.150) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 312 Identification: 0x05e6 (1510) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x34f2 [correct] Good: True Bad : False Source: 165.227.249.127 (165.227.249.127) Destination: 165.227.249.150 (165.227.249.150) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 292 Checksum: 0x7788 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xD0B8807034D0FA1D Responder cookie: 0xE2A9DBFB7B562AD2 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x73C457C2 Length: 284 Encrypted payload (256 bytes) 0000 00 0c 29 96 e1 fa 00 19 e1 68 8e 01 08 00 45 00 ..)......h....E. 0010 01 38 05 e6 00 00 40 11 34 f2 a5 e3 f9 7f a5 e3 .8....@.4....... 0020 f9 96 01 f4 01 f4 01 24 77 88 d0 b8 80 70 34 d0 .......$w....p4. 0030 fa 1d e2 a9 db fb 7b 56 2a d2 08 10 20 01 73 c4 ......{V*... .s. 0040 57 c2 00 00 01 1c fa 08 08 f8 f0 e6 95 2c 42 90 W............,B. 0050 5d 1b d1 0e ba 49 19 60 99 35 81 db 43 06 ed c3 ]....I.`.5..C... 0060 de c2 c9 8a 17 66 d7 20 34 5e 05 12 db e1 62 f3 .....f. 4^....b. 0070 ce 3a a8 25 a4 df 57 e7 c7 c0 ed 0b 09 d2 ad ec .:.%..W......... 0080 31 64 69 18 13 a7 cd 62 7e e1 46 ba 01 33 a2 9b 1di....b~.F..3.. 0090 d6 08 6d d3 ad 79 ce 28 dd c5 71 da ef 8c 8d ab ..m..y.(..q..... 00a0 7a a7 c0 fd 9f ea 15 08 31 0c 6a ec 3a cd d2 af z.......1.j.:... 00b0 2e eb 2b ce 85 8c bd cf 51 f3 2e 99 0a d7 18 76 ..+.....Q......v 00c0 1e af eb fd 29 76 f5 95 34 6f ee f7 a3 ce 31 4a ....)v..4o....1J 00d0 c6 70 3b 30 76 eb 5c a3 c4 36 d5 31 60 7e 94 0a .p;0v.\..6.1`~.. 00e0 86 56 23 e2 03 c4 b1 93 9c 8f 00 92 82 a7 e0 a6 .V#............. 00f0 21 0d 27 4d 76 b3 5d 26 4e 57 1a dc 19 ca 94 64 !.'Mv.]&NW.....d 0100 aa c7 af f2 7a e2 d8 64 8f 2b 2f 5e 60 38 84 5b ....z..d.+/^`8.[ 0110 a0 d6 5d 2b 3f 2f e5 17 13 ca f5 fe c5 6b 4e 43 ..]+?/.......kNC 0120 42 5a ea 32 75 cb 5b 8e cd bb 1b d5 a9 b3 33 06 BZ.2u.[.......3. 0130 c4 e9 45 aa 77 48 91 f5 8e 0e ae d9 71 6e 53 da ..E.wH......qnS. 0140 bd 17 ed 16 e6 22 ....." Frame 9 (102 bytes on wire, 102 bytes captured) Arrival Time: Jun 23, 2007 15:41:04.934414000 Time delta from previous packet: 0.066138000 seconds Time since reference or first frame: 1.658027000 seconds Frame Number: 9 Packet Length: 102 bytes Capture Length: 102 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa), Dst: 00:19:e1:68:8e:01 (00:19:e1:68:8e:01) Destination: 00:19:e1:68:8e:01 (00:19:e1:68:8e:01) Source: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.127 (165.227.249.127) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 88 Identification: 0x4126 (16678) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xba91 [correct] Good: True Bad : False Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.127 (165.227.249.127) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 68 Checksum: 0xc809 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xD0B8807034D0FA1D Responder cookie: 0xE2A9DBFB7B562AD2 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x73C457C2 Length: 60 Encrypted payload (32 bytes) 0000 00 19 e1 68 8e 01 00 0c 29 96 e1 fa 08 00 45 00 ...h....).....E. 0010 00 58 41 26 00 00 80 11 ba 91 a5 e3 f9 96 a5 e3 .XA&............ 0020 f9 7f 01 f4 01 f4 00 44 c8 09 d0 b8 80 70 34 d0 .......D.....p4. 0030 fa 1d e2 a9 db fb 7b 56 2a d2 08 10 20 01 73 c4 ......{V*... .s. 0040 57 c2 00 00 00 3c 7c 6a c4 e7 7d 6c 1a b6 07 8f W....<|j..}l.... 0050 8b 43 4e 74 29 df 97 cd 79 dc 19 c6 4b 32 7f 39 .CNt)...y...K2.9 0060 68 b8 f7 bf e0 ed h..... Frame 10 (406 bytes on wire, 406 bytes captured) Arrival Time: Jun 23, 2007 15:41:10.521453000 Time delta from previous packet: 5.587039000 seconds Time since reference or first frame: 7.245066000 seconds Frame Number: 10 Packet Length: 406 bytes Capture Length: 406 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa), Dst: 00:19:e1:68:8e:01 (00:19:e1:68:8e:01) Destination: 00:19:e1:68:8e:01 (00:19:e1:68:8e:01) Source: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.127 (165.227.249.127) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 392 Identification: 0x4127 (16679) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: ESP (0x32) Header checksum: 0xb93f [correct] Good: True Bad : False Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.127 (165.227.249.127) Encapsulating Security Payload SPI: 0x804f0e9a Sequence: 1 Data (364 bytes) 0000 00 19 e1 68 8e 01 00 0c 29 96 e1 fa 08 00 45 00 ...h....).....E. 0010 01 88 41 27 00 00 80 32 b9 3f a5 e3 f9 96 a5 e3 ..A'...2.?...... 0020 f9 7f 80 4f 0e 9a 00 00 00 01 9e b7 dd 68 a0 d3 ...O.........h.. 0030 9a 96 00 92 b9 00 46 33 94 7f dc ca 98 71 12 51 ......F3.....q.Q 0040 e6 6c 58 2b 87 ce 7e 59 48 7d 69 4c db af e8 82 .lX+..~YH}iL.... 0050 e1 03 ad 14 05 ce 73 8a e1 48 c8 ec 48 01 a1 65 ......s..H..H..e 0060 9c d7 6f 65 3c 17 3f 24 9b 2e 54 c0 a6 9d 41 ed ..oe<.?$..T...A. 0070 f6 ee 1f 9a 73 1c 86 27 f3 a7 c8 26 41 3b 7d 80 ....s..'...&A;}. 0080 28 99 51 a1 a1 dd 8b e5 a3 f9 1a d5 22 41 3a b6 (.Q........."A:. 0090 35 f2 71 f8 ce 25 d6 6a 98 4c 8d 04 e0 f8 93 db 5.q..%.j.L...... 00a0 74 91 b4 50 4c 70 f1 c4 56 13 c0 ef ce eb d9 f7 t..PLp..V....... 00b0 72 af 81 e7 16 59 8b 0d a9 de e1 73 c7 47 50 ac r....Y.....s.GP. 00c0 95 2e 4f b9 cb d9 43 56 43 bf 32 07 df 0f 56 5d ..O...CVC.2...V] 00d0 d4 23 6c 35 45 ee d5 15 f0 e4 6d b7 e8 5a 41 62 .#l5E.....m..ZAb 00e0 60 db 3c a4 cf cd e7 66 0c 52 d7 1f 07 d3 bc c3 `.<....f.R...... 00f0 92 38 35 64 c5 09 00 64 05 35 d6 21 5c 41 4a 38 .85d...d.5.!\AJ8 0100 7f 38 ac ba 8e e2 16 80 ae d3 db 09 1a 85 23 8c .8............#. 0110 79 70 f8 22 f5 85 84 e9 1a c1 69 05 8f 0b 37 12 yp."......i...7. 0120 0e 5a fb 9f 79 36 4e de 02 6e 9f 33 17 49 62 51 .Z..y6N..n.3.IbQ 0130 7e 94 e7 93 0d f3 e1 78 66 60 37 92 a7 7a 34 6a ~......xf`7..z4j 0140 92 0b dc c0 d1 47 d6 0e 74 da f2 56 73 ad f2 52 .....G..t..Vs..R 0150 5e 37 58 72 ee 7a 2a 37 e5 75 96 70 94 f9 17 af ^7Xr.z*7.u.p.... 0160 d6 04 d2 6c d7 bf 32 bd 17 af 74 ba 2a af a4 e5 ...l..2...t.*... 0170 9d b3 17 b1 e9 c3 1e 13 57 5c f5 16 d4 1e ac 58 ........W\.....X 0180 70 6a 88 d3 44 61 30 e6 a9 b2 9a 07 bd 75 c0 8b pj..Da0......u.. 0190 c5 05 0a 3f 47 df ...?G. Frame 11 (406 bytes on wire, 406 bytes captured) Arrival Time: Jun 23, 2007 15:41:10.530332000 Time delta from previous packet: 0.008879000 seconds Time since reference or first frame: 7.253945000 seconds Frame Number: 11 Packet Length: 406 bytes Capture Length: 406 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:19:e1:68:8e:01 (00:19:e1:68:8e:01), Dst: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Destination: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Source: 00:19:e1:68:8e:01 (00:19:e1:68:8e:01) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.127 (165.227.249.127), Dst: 165.227.249.150 (165.227.249.150) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 392 Identification: 0x5038 (20536) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 29 Protocol: ESP (0x32) Header checksum: 0x0d2f [correct] Good: True Bad : False Source: 165.227.249.127 (165.227.249.127) Destination: 165.227.249.150 (165.227.249.150) Encapsulating Security Payload SPI: 0x8daec6d9 Sequence: 1 Data (364 bytes) 0000 00 0c 29 96 e1 fa 00 19 e1 68 8e 01 08 00 45 00 ..)......h....E. 0010 01 88 50 38 00 00 1d 32 0d 2f a5 e3 f9 7f a5 e3 ..P8...2./...... 0020 f9 96 8d ae c6 d9 00 00 00 01 5c 32 f6 45 27 c7 ..........\2.E'. 0030 af b5 fb 52 f8 a5 e2 b9 c8 4b 15 02 53 1c eb 65 ...R.....K..S..e 0040 ed 89 ba 21 01 1d 02 88 21 d4 3e a9 3d f1 b2 83 ...!....!.>.=... 0050 79 97 25 5f 4b ab c4 8a 2f 48 91 03 75 5b d5 20 y.%_K.../H..u[. 0060 cb 7e cc f6 5d cf 3f cf 07 75 17 47 de a9 31 75 .~..].?..u.G..1u 0070 bf ea c6 36 75 c5 d8 da cf 61 9e 44 e7 e5 d8 97 ...6u....a.D.... 0080 65 e1 51 d5 b3 17 1c a2 b2 91 27 a7 e2 48 3d a4 e.Q.......'..H=. 0090 74 cc 37 b5 2d 20 ce 9b bc d6 c0 29 5d 4c c6 e1 t.7.- .....)]L.. 00a0 a7 56 04 53 7f 08 08 95 24 b9 e1 58 fa 74 4f 23 .V.S....$..X.tO# 00b0 df 8f f8 b5 65 5b 07 d8 66 f2 a5 7d 18 b2 73 d7 ....e[..f..}..s. 00c0 54 01 69 f4 d2 b5 6d 2c cb f9 a5 49 dc 70 35 1d T.i...m,...I.p5. 00d0 fd c7 1b 5e d3 b9 0e c4 c9 40 e1 d3 ea 59 fb 72 ...^.....@...Y.r 00e0 0a 0f 01 22 a1 0f f6 81 45 35 54 ab 79 7e a3 92 ..."....E5T.y~.. 00f0 d7 bd 58 ac 2e 40 75 67 c8 fe 74 85 92 eb cd ad ..X..@ug..t..... 0100 72 6d 1b 9c a6 95 8e 63 3e 7a c2 ec 91 b4 43 c2 rm.....c>z....C. 0110 b7 41 be 68 e8 ff 3a e3 b5 aa 37 44 14 d4 6f 9c .A.h..:...7D..o. 0120 b4 5e d1 cf e7 19 eb 0a c8 49 f4 a1 f9 c5 3a a0 .^.......I....:. 0130 c8 27 58 29 31 5d fd 57 47 c4 ec 67 5b dc b9 e4 .'X)1].WG..g[... 0140 1f dd 8b c3 f3 ae 79 80 0e 59 be ed 1b 11 56 d5 ......y..Y....V. 0150 10 a1 da 34 4f fa e8 88 44 a4 41 6a 78 79 d1 0b ...4O...D.Ajxy.. 0160 45 d0 9d 15 61 82 03 d2 8c d0 84 9c d8 d4 4b fb E...a.........K. 0170 00 de 0a 6a 30 4e d8 ef 4e 48 25 d6 9e a1 16 7b ...j0N..NH%....{ 0180 55 70 56 06 ec 53 68 18 71 1a 93 d4 8b 6f 52 e6 UpV..Sh.q....oR. 0190 0f a0 a5 d9 ad e7 ......