Frame 1 (222 bytes on wire, 222 bytes captured) Arrival Time: Aug 17, 2006 13:27:21.852253000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 222 bytes Capture Length: 222 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa), Dst: 00:0c:29:dc:a7:b2 (00:0c:29:dc:a7:b2) Destination: 00:0c:29:dc:a7:b2 (00:0c:29:dc:a7:b2) Source: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.128 (165.227.249.128) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 208 Identification: 0x01a8 (424) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf996 [correct] Good: True Bad : False Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.128 (165.227.249.128) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 188 Checksum: 0xebfd [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x171FAD043EBEE7AD Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 180 Security Association payload Next payload: Vendor ID (13) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 40 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 32 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: unknown vendor ID: 0x4A131C81070358455C5728F20E95452F Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-03 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: RFC 3706 Detecting Dead IKE Peers (DPD) 0000 00 0c 29 dc a7 b2 00 0c 29 96 e1 fa 08 00 45 00 ..).....).....E. 0010 00 d0 01 a8 00 00 80 11 f9 96 a5 e3 f9 96 a5 e3 ................ 0020 f9 80 01 f4 01 f4 00 bc eb fd 17 1f ad 04 3e be ..............>. 0030 e7 ad 00 00 00 00 00 00 00 00 01 10 02 00 00 00 ................ 0040 00 00 00 00 00 b4 0d 00 00 34 00 00 00 01 00 00 .........4...... 0050 00 01 00 00 00 28 01 01 00 01 00 00 00 20 01 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 04 00 02 80 03 ................ 0070 00 01 80 0b 00 01 80 0c 70 80 0d 00 00 14 4a 13 ........p.....J. 0080 1c 81 07 03 58 45 5c 57 28 f2 0e 95 45 2f 0d 00 ....XE\W(...E/.. 0090 00 14 7d 94 19 a6 53 10 ca 6f 2c 17 9d 92 15 52 ..}...S..o,....R 00a0 9d 56 0d 00 00 14 90 cb 80 91 3e bb 69 6e 08 63 .V........>.in.c 00b0 81 b5 ec 42 7b 1f 0d 00 00 14 44 85 15 2d 18 b6 ...B{.....D..-.. 00c0 bb cd 0b e8 a8 46 95 79 dd cc 00 00 00 14 af ca .....F.y........ 00d0 d7 13 68 a1 f1 c9 6b 86 96 fc 77 57 01 00 ..h...k...wW.. Frame 2 (190 bytes on wire, 190 bytes captured) Arrival Time: Aug 17, 2006 13:27:21.868127000 Time delta from previous packet: 0.015874000 seconds Time since reference or first frame: 0.015874000 seconds Frame Number: 2 Packet Length: 190 bytes Capture Length: 190 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:dc:a7:b2 (00:0c:29:dc:a7:b2), Dst: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Destination: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Source: 00:0c:29:dc:a7:b2 (00:0c:29:dc:a7:b2) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.128 (165.227.249.128), Dst: 165.227.249.150 (165.227.249.150) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 176 Identification: 0x000d (13) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xfb51 [correct] Good: True Bad : False Source: 165.227.249.128 (165.227.249.128) Destination: 165.227.249.150 (165.227.249.150) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 156 Checksum: 0x8fc7 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x171FAD043EBEE7AD Responder cookie: 0x25B3376BEC2D72C6 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 148 Security Association payload Next payload: Vendor ID (13) Length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 44 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 36 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: Vendor ID (13) Length: 24 Vendor ID: MS NT5 ISAKMPOAKLEY Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: Microsoft L2TP/IPSec VPN Client Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 0000 00 0c 29 96 e1 fa 00 0c 29 dc a7 b2 08 00 45 00 ..).....).....E. 0010 00 b0 00 0d 00 00 80 11 fb 51 a5 e3 f9 80 a5 e3 .........Q...... 0020 f9 96 01 f4 01 f4 00 9c 8f c7 17 1f ad 04 3e be ..............>. 0030 e7 ad 25 b3 37 6b ec 2d 72 c6 01 10 02 00 00 00 ..%.7k.-r....... 0040 00 00 00 00 00 94 0d 00 00 38 00 00 00 01 00 00 .........8...... 0050 00 01 00 00 00 2c 01 01 00 01 00 00 00 24 01 01 .....,.......$.. 0060 00 00 80 01 00 05 80 02 00 02 80 04 00 02 80 03 ................ 0070 00 01 80 0b 00 01 00 0c 00 04 00 00 70 80 0d 00 ............p... 0080 00 18 1e 2b 51 69 05 99 1c 7d 7c 96 fc bf b5 87 ...+Qi...}|..... 0090 e4 61 00 00 00 04 0d 00 00 14 40 48 b7 d5 6e bc .a........@H..n. 00a0 e8 85 25 e7 de 7f 00 d6 c2 d3 00 00 00 14 90 cb ..%............. 00b0 80 91 3e bb 69 6e 08 63 81 b5 ec 42 7b 1f ..>.in.c...B{. Frame 3 (270 bytes on wire, 270 bytes captured) Arrival Time: Aug 17, 2006 13:27:21.898777000 Time delta from previous packet: 0.030650000 seconds Time since reference or first frame: 0.046524000 seconds Frame Number: 3 Packet Length: 270 bytes Capture Length: 270 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa), Dst: 00:0c:29:dc:a7:b2 (00:0c:29:dc:a7:b2) Destination: 00:0c:29:dc:a7:b2 (00:0c:29:dc:a7:b2) Source: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.128 (165.227.249.128) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 256 Identification: 0x01a9 (425) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf965 [correct] Good: True Bad : False Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.128 (165.227.249.128) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 236 Checksum: 0x8b26 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x171FAD043EBEE7AD Responder cookie: 0x25B3376BEC2D72C6 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 228 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NAT-D (draft-ietf-ipsec-nat-t-ike-01 to 03) (130) Length: 20 Nonce Data NAT-D (draft-ietf-ipsec-nat-t-ike-01 to 03) payload Next payload: NAT-D (draft-ietf-ipsec-nat-t-ike-01 to 03) (130) Length: 24 Hash of address and port: F372EC60DD5714AD4C732611FEF2E147D8796DE6 NAT-D (draft-ietf-ipsec-nat-t-ike-01 to 03) payload Next payload: NONE (0) Length: 24 Hash of address and port: 391C824480A954CA9F0E48EFD323619467025BE7 0000 00 0c 29 dc a7 b2 00 0c 29 96 e1 fa 08 00 45 00 ..).....).....E. 0010 01 00 01 a9 00 00 80 11 f9 65 a5 e3 f9 96 a5 e3 .........e...... 0020 f9 80 01 f4 01 f4 00 ec 8b 26 17 1f ad 04 3e be .........&....>. 0030 e7 ad 25 b3 37 6b ec 2d 72 c6 04 10 02 00 00 00 ..%.7k.-r....... 0040 00 00 00 00 00 e4 0a 00 00 84 ae cb 6f b2 03 c3 ............o... 0050 fc 18 9b 7c 20 5b ec 74 09 a3 2a 46 bc 07 80 4a ...| [.t..*F...J 0060 47 f4 7e 83 be cd 64 e4 f2 cf 29 bf f1 55 b9 88 G.~...d...)..U.. 0070 ca cd 92 c7 ba f8 c0 c1 07 e1 72 23 c9 ab 7c 7e ..........r#..|~ 0080 dd 84 e7 8c 78 e2 84 78 b3 17 a1 6d e2 ae 9c ec ....x..x...m.... 0090 3f 7a ae 5e 7a 60 cc 7d 03 69 be 5f 8d 29 30 9f ?z.^z`.}.i._.)0. 00a0 e8 77 18 c2 ff d1 26 cf d6 ca b3 3e fd 73 ad d7 .w....&....>.s.. 00b0 a3 4a d2 b6 5b 60 bf a6 d0 3f 83 9a 9d e0 51 34 .J..[`...?....Q4 00c0 67 90 26 79 94 73 4d 2f b3 bd 82 00 00 14 10 28 g.&y.sM/.......( 00d0 ee 15 8a 1e 4a bd db 96 15 7d 7d 7a 35 53 82 00 ....J....}}z5S.. 00e0 00 18 f3 72 ec 60 dd 57 14 ad 4c 73 26 11 fe f2 ...r.`.W..Ls&... 00f0 e1 47 d8 79 6d e6 00 00 00 18 39 1c 82 44 80 a9 .G.ym.....9..D.. 0100 54 ca 9f 0e 48 ef d3 23 61 94 67 02 5b e7 T...H..#a.g.[. Frame 4 (274 bytes on wire, 274 bytes captured) Arrival Time: Aug 17, 2006 13:27:21.911688000 Time delta from previous packet: 0.012911000 seconds Time since reference or first frame: 0.059435000 seconds Frame Number: 4 Packet Length: 274 bytes Capture Length: 274 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:dc:a7:b2 (00:0c:29:dc:a7:b2), Dst: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Destination: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Source: 00:0c:29:dc:a7:b2 (00:0c:29:dc:a7:b2) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.128 (165.227.249.128), Dst: 165.227.249.150 (165.227.249.150) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 260 Identification: 0x000e (14) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xfafc [correct] Good: True Bad : False Source: 165.227.249.128 (165.227.249.128) Destination: 165.227.249.150 (165.227.249.150) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 240 Checksum: 0x8bc3 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x171FAD043EBEE7AD Responder cookie: 0x25B3376BEC2D72C6 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 232 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NAT-D (draft-ietf-ipsec-nat-t-ike-01 to 03) (130) Length: 24 Nonce Data NAT-D (draft-ietf-ipsec-nat-t-ike-01 to 03) payload Next payload: NAT-D (draft-ietf-ipsec-nat-t-ike-01 to 03) (130) Length: 24 Hash of address and port: 391C824480A954CA9F0E48EFD323619467025BE7 NAT-D (draft-ietf-ipsec-nat-t-ike-01 to 03) payload Next payload: NONE (0) Length: 24 Hash of address and port: F372EC60DD5714AD4C732611FEF2E147D8796DE6 0000 00 0c 29 96 e1 fa 00 0c 29 dc a7 b2 08 00 45 00 ..).....).....E. 0010 01 04 00 0e 00 00 80 11 fa fc a5 e3 f9 80 a5 e3 ................ 0020 f9 96 01 f4 01 f4 00 f0 8b c3 17 1f ad 04 3e be ..............>. 0030 e7 ad 25 b3 37 6b ec 2d 72 c6 04 10 02 00 00 00 ..%.7k.-r....... 0040 00 00 00 00 00 e8 0a 00 00 84 25 41 8d 28 dd 0d ..........%A.(.. 0050 62 19 cb c9 66 e3 e1 c7 86 c6 12 9b e1 d4 c9 fb b...f........... 0060 5c 89 a1 77 e7 23 66 ab d2 6b 8c 95 4f 2a a1 0d \..w.#f..k..O*.. 0070 6f 87 cd 37 39 1e 71 04 6b 41 d4 e1 ee f5 f6 26 o..79.q.kA.....& 0080 75 3f eb 0e fc 56 d0 6c 5c 2c 69 3c f3 cd 4d b9 u?...V.l\,i<..M. 0090 66 2d 9f c2 cb af 96 54 4f 96 1b b5 ba cb d5 a0 f-.....TO....... 00a0 e3 c3 8f e6 9a 29 49 97 d4 e4 32 fe a0 63 c1 79 .....)I...2..c.y 00b0 c1 3c 32 3d 9f 51 b1 4f f1 5c a0 e2 1e ad 4c 4f .<2=.Q.O.\....LO 00c0 cf 98 2e a3 71 30 9e a1 d5 37 82 00 00 18 fa 71 ....q0...7.....q 00d0 ad 46 1c 6b a6 6e c5 4e 17 20 45 4f 33 90 d5 72 .F.k.n.N. EO3..r 00e0 92 80 82 00 00 18 39 1c 82 44 80 a9 54 ca 9f 0e ......9..D..T... 00f0 48 ef d3 23 61 94 67 02 5b e7 00 00 00 18 f3 72 H..#a.g.[......r 0100 ec 60 dd 57 14 ad 4c 73 26 11 fe f2 e1 47 d8 79 .`.W..Ls&....G.y 0110 6d e6 m. Frame 5 (142 bytes on wire, 142 bytes captured) Arrival Time: Aug 17, 2006 13:27:21.960006000 Time delta from previous packet: 0.048318000 seconds Time since reference or first frame: 0.107753000 seconds Frame Number: 5 Packet Length: 142 bytes Capture Length: 142 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa), Dst: 00:0c:29:dc:a7:b2 (00:0c:29:dc:a7:b2) Destination: 00:0c:29:dc:a7:b2 (00:0c:29:dc:a7:b2) Source: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.128 (165.227.249.128) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 128 Identification: 0x01aa (426) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf9e4 [correct] Good: True Bad : False Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.128 (165.227.249.128) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 108 Checksum: 0x2a70 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x171FAD043EBEE7AD Responder cookie: 0x25B3376BEC2D72C6 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 100 Encrypted payload (72 bytes) 0000 00 0c 29 dc a7 b2 00 0c 29 96 e1 fa 08 00 45 00 ..).....).....E. 0010 00 80 01 aa 00 00 80 11 f9 e4 a5 e3 f9 96 a5 e3 ................ 0020 f9 80 01 f4 01 f4 00 6c 2a 70 17 1f ad 04 3e be .......l*p....>. 0030 e7 ad 25 b3 37 6b ec 2d 72 c6 05 10 02 01 00 00 ..%.7k.-r....... 0040 00 00 00 00 00 64 21 47 5f 80 98 28 d3 04 40 14 .....d!G_..(..@. 0050 af 80 56 f0 a4 5f 56 80 61 35 88 a0 52 86 0f 50 ..V.._V.a5..R..P 0060 26 0d d7 0b 7b c9 b7 94 45 35 9c 04 1e 5a 60 10 &...{...E5...Z`. 0070 30 38 9d 3c 9f 05 aa 13 f2 83 f9 d6 83 93 3f 0d 08.<..........?. 0080 a5 af d1 e2 a9 f1 8d 87 67 38 66 19 98 be ........g8f... Frame 6 (110 bytes on wire, 110 bytes captured) Arrival Time: Aug 17, 2006 13:27:21.968919000 Time delta from previous packet: 0.008913000 seconds Time since reference or first frame: 0.116666000 seconds Frame Number: 6 Packet Length: 110 bytes Capture Length: 110 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:dc:a7:b2 (00:0c:29:dc:a7:b2), Dst: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Destination: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Source: 00:0c:29:dc:a7:b2 (00:0c:29:dc:a7:b2) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.128 (165.227.249.128), Dst: 165.227.249.150 (165.227.249.150) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0x000f (15) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xfb9f [correct] Good: True Bad : False Source: 165.227.249.128 (165.227.249.128) Destination: 165.227.249.150 (165.227.249.150) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 76 Checksum: 0xf944 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x171FAD043EBEE7AD Responder cookie: 0x25B3376BEC2D72C6 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 68 Encrypted payload (40 bytes) 0000 00 0c 29 96 e1 fa 00 0c 29 dc a7 b2 08 00 45 00 ..).....).....E. 0010 00 60 00 0f 00 00 80 11 fb 9f a5 e3 f9 80 a5 e3 .`.............. 0020 f9 96 01 f4 01 f4 00 4c f9 44 17 1f ad 04 3e be .......L.D....>. 0030 e7 ad 25 b3 37 6b ec 2d 72 c6 05 10 02 01 00 00 ..%.7k.-r....... 0040 00 00 00 00 00 44 67 7c 75 b5 49 6a b8 08 d0 9f .....Dg|u.Ij.... 0050 78 3f 6c 26 80 3d 42 e7 2c 7c 58 30 01 51 a3 8d x?l&.=B.,|X0.Q.. 0060 7c 9a e7 ab 7c 40 08 68 34 81 d9 73 9e 14 |...|@.h4..s.. Frame 7 (334 bytes on wire, 334 bytes captured) Arrival Time: Aug 17, 2006 13:27:22.008450000 Time delta from previous packet: 0.039531000 seconds Time since reference or first frame: 0.156197000 seconds Frame Number: 7 Packet Length: 334 bytes Capture Length: 334 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa), Dst: 00:0c:29:dc:a7:b2 (00:0c:29:dc:a7:b2) Destination: 00:0c:29:dc:a7:b2 (00:0c:29:dc:a7:b2) Source: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.128 (165.227.249.128) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 320 Identification: 0x01ab (427) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf923 [correct] Good: True Bad : False Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.128 (165.227.249.128) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 300 Checksum: 0x1d94 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x171FAD043EBEE7AD Responder cookie: 0x25B3376BEC2D72C6 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0xF1F921E2 Length: 292 Encrypted payload (264 bytes) 0000 00 0c 29 dc a7 b2 00 0c 29 96 e1 fa 08 00 45 00 ..).....).....E. 0010 01 40 01 ab 00 00 80 11 f9 23 a5 e3 f9 96 a5 e3 .@.......#...... 0020 f9 80 01 f4 01 f4 01 2c 1d 94 17 1f ad 04 3e be .......,......>. 0030 e7 ad 25 b3 37 6b ec 2d 72 c6 08 10 20 01 f1 f9 ..%.7k.-r... ... 0040 21 e2 00 00 01 24 38 7f c6 2f 70 8f cb c7 3e 4a !....$8../p...>J 0050 82 b4 27 0b 74 09 5b a4 35 2a c0 27 ee 7d 6d 32 ..'.t.[.5*.'.}m2 0060 1e 65 4a f2 9b e9 4d 2e 0a 7c 95 e6 fa 73 9d 22 .eJ...M..|...s." 0070 a6 59 13 18 dc 1e 1b 6e 07 f4 ab d7 81 ad c0 f7 .Y.....n........ 0080 45 05 3d 55 1e 40 05 e4 51 6b 35 4e c6 3e 4f b2 E.=U.@..Qk5N.>O. 0090 71 59 df 4c 44 b9 4a aa 01 c4 53 9c fb 52 1b 75 qY.LD.J...S..R.u 00a0 33 d1 2e c6 0c b0 33 4e 8e 3b aa f0 08 95 be a2 3.....3N.;...... 00b0 b0 e1 c9 d7 c6 34 f4 8c 0f fa 38 be 3a 01 f3 e9 .....4....8.:... 00c0 96 ea b6 e9 75 33 34 93 76 35 83 23 2d b7 79 17 ....u34.v5.#-.y. 00d0 2e 85 01 9e 9e c5 ed b5 73 fb 4d c2 ab e0 23 c4 ........s.M...#. 00e0 f5 8d 2c 1b 5f 89 06 36 be dc cc 63 ee e8 cd 65 ..,._..6...c...e 00f0 7b 44 b5 9d 0d 05 82 a4 df 28 9e e6 29 70 9f d4 {D.......(..)p.. 0100 17 51 cf 58 7d 60 4e 5b 85 04 36 84 c0 84 20 19 .Q.X}`N[..6... . 0110 3c b1 b6 7e 89 23 6f 98 d2 41 0a 91 c8 13 fe 00 <..~.#o..A...... 0120 5b fc 01 c7 5a 7a 37 e0 1e c0 04 9e 3e 8e c1 9b [...Zz7.....>... 0130 83 81 b6 5d a1 ed 60 7e e6 4a ff 10 af 9d b8 1d ...]..`~.J...... 0140 74 1b 04 d3 d9 a0 04 68 9a 35 2e 80 0e ca t......h.5.... Frame 8 (334 bytes on wire, 334 bytes captured) Arrival Time: Aug 17, 2006 13:27:22.030183000 Time delta from previous packet: 0.021733000 seconds Time since reference or first frame: 0.177930000 seconds Frame Number: 8 Packet Length: 334 bytes Capture Length: 334 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:dc:a7:b2 (00:0c:29:dc:a7:b2), Dst: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Destination: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Source: 00:0c:29:dc:a7:b2 (00:0c:29:dc:a7:b2) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.128 (165.227.249.128), Dst: 165.227.249.150 (165.227.249.150) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 320 Identification: 0x0010 (16) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xfabe [correct] Good: True Bad : False Source: 165.227.249.128 (165.227.249.128) Destination: 165.227.249.150 (165.227.249.150) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 300 Checksum: 0xf9a1 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x171FAD043EBEE7AD Responder cookie: 0x25B3376BEC2D72C6 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encrypted .... ..1. = Commit .... .0.. = No authentication Message ID: 0xF1F921E2 Length: 292 Encrypted payload (264 bytes) 0000 00 0c 29 96 e1 fa 00 0c 29 dc a7 b2 08 00 45 00 ..).....).....E. 0010 01 40 00 10 00 00 80 11 fa be a5 e3 f9 80 a5 e3 .@.............. 0020 f9 96 01 f4 01 f4 01 2c f9 a1 17 1f ad 04 3e be .......,......>. 0030 e7 ad 25 b3 37 6b ec 2d 72 c6 08 10 20 03 f1 f9 ..%.7k.-r... ... 0040 21 e2 00 00 01 24 9b d5 ab 05 e8 90 af 6c 2a 25 !....$.......l*% 0050 32 9c b0 13 d9 d8 d4 c3 49 f0 ab c7 68 58 2c a5 2.......I...hX,. 0060 8a 68 5a a2 82 9b a6 b7 0d 23 ec a1 2d 55 ea 90 .hZ......#..-U.. 0070 db 3e b8 0e 76 9a 1e f7 2b e8 ce 05 93 79 92 5e .>..v...+....y.^ 0080 54 c3 27 9c 81 55 e0 f3 30 fb fe 5e c3 f3 a5 36 T.'..U..0..^...6 0090 cb 4b bc bc 7c b8 a1 b1 c0 cd 6f 08 f5 80 d0 7f .K..|.....o..... 00a0 09 fe e8 a4 7a 93 14 b5 74 d5 8d 7c 89 66 da df ....z...t..|.f.. 00b0 9f 05 cb a4 fb ae ff 4a fb c4 2c ed 58 ba 52 8c .......J..,.X.R. 00c0 a8 54 87 13 62 93 68 d7 52 d1 14 cd a1 ab 1d bd .T..b.h.R....... 00d0 d2 f8 63 8b 93 a4 11 c8 86 a5 50 55 e8 46 79 73 ..c.......PU.Fys 00e0 f7 df df 84 bc ce 24 c8 d1 e6 04 6a b1 e2 08 1a ......$....j.... 00f0 fa 1b 04 4c 7a cf d6 51 cb 38 a0 6e 65 ad 7a fd ...Lz..Q.8.ne.z. 0100 63 f1 14 7f 00 04 9e a2 48 6d 94 4e f7 00 43 23 c.......Hm.N..C# 0110 97 ec b9 a6 b7 8a 37 5a 56 0e 95 24 e6 9d 8d e3 ......7ZV..$.... 0120 c9 42 bf 40 db eb 60 07 f7 37 84 71 5d 12 f4 78 .B.@..`..7.q]..x 0130 a3 65 ea e1 d4 d8 5e 08 a4 ca 2a 41 aa d5 40 3c .e....^...*A..@< 0140 e3 e3 0c 1d 50 4f 5b 72 d7 e7 15 66 9a 65 ....PO[r...f.e Frame 9 (102 bytes on wire, 102 bytes captured) Arrival Time: Aug 17, 2006 13:27:22.139878000 Time delta from previous packet: 0.109695000 seconds Time since reference or first frame: 0.287625000 seconds Frame Number: 9 Packet Length: 102 bytes Capture Length: 102 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa), Dst: 00:0c:29:dc:a7:b2 (00:0c:29:dc:a7:b2) Destination: 00:0c:29:dc:a7:b2 (00:0c:29:dc:a7:b2) Source: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.128 (165.227.249.128) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 88 Identification: 0x01ac (428) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xfa0a [correct] Good: True Bad : False Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.128 (165.227.249.128) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 68 Checksum: 0xf1de [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x171FAD043EBEE7AD Responder cookie: 0x25B3376BEC2D72C6 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0xF1F921E2 Length: 60 Encrypted payload (32 bytes) 0000 00 0c 29 dc a7 b2 00 0c 29 96 e1 fa 08 00 45 00 ..).....).....E. 0010 00 58 01 ac 00 00 80 11 fa 0a a5 e3 f9 96 a5 e3 .X.............. 0020 f9 80 01 f4 01 f4 00 44 f1 de 17 1f ad 04 3e be .......D......>. 0030 e7 ad 25 b3 37 6b ec 2d 72 c6 08 10 20 01 f1 f9 ..%.7k.-r... ... 0040 21 e2 00 00 00 3c ad eb f0 70 4d 6f 1f 37 ee d3 !....<...pMo.7.. 0050 56 e4 6f 21 e8 e0 44 3f 76 02 ae 89 41 2e b9 6b V.o!..D?v...A..k 0060 97 04 b3 d6 90 f6 ...... Frame 10 (118 bytes on wire, 118 bytes captured) Arrival Time: Aug 17, 2006 13:27:22.179383000 Time delta from previous packet: 0.039505000 seconds Time since reference or first frame: 0.327130000 seconds Frame Number: 10 Packet Length: 118 bytes Capture Length: 118 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:dc:a7:b2 (00:0c:29:dc:a7:b2), Dst: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Destination: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Source: 00:0c:29:dc:a7:b2 (00:0c:29:dc:a7:b2) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.128 (165.227.249.128), Dst: 165.227.249.150 (165.227.249.150) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 104 Identification: 0x0011 (17) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xfb95 [correct] Good: True Bad : False Source: 165.227.249.128 (165.227.249.128) Destination: 165.227.249.150 (165.227.249.150) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 84 Checksum: 0x5626 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x171FAD043EBEE7AD Responder cookie: 0x25B3376BEC2D72C6 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encrypted .... ..1. = Commit .... .0.. = No authentication Message ID: 0xF1F921E2 Length: 76 Encrypted payload (48 bytes) 0000 00 0c 29 96 e1 fa 00 0c 29 dc a7 b2 08 00 45 00 ..).....).....E. 0010 00 68 00 11 00 00 80 11 fb 95 a5 e3 f9 80 a5 e3 .h.............. 0020 f9 96 01 f4 01 f4 00 54 56 26 17 1f ad 04 3e be .......TV&....>. 0030 e7 ad 25 b3 37 6b ec 2d 72 c6 08 10 20 03 f1 f9 ..%.7k.-r... ... 0040 21 e2 00 00 00 4c 66 f4 c3 e0 c3 d3 68 85 fd d9 !....Lf.....h... 0050 0c 8f bf a9 0e a1 0b 67 27 b6 2e 9b 56 42 5e 82 .......g'...VB^. 0060 95 d6 1a 8a 4f 72 1f e2 94 f4 a0 2f 03 2e fd 85 ....Or...../.... 0070 09 c2 2a a8 b3 24 ..*..$ Frame 11 (398 bytes on wire, 398 bytes captured) Arrival Time: Aug 17, 2006 13:27:27.463982000 Time delta from previous packet: 5.284599000 seconds Time since reference or first frame: 5.611729000 seconds Frame Number: 11 Packet Length: 398 bytes Capture Length: 398 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa), Dst: 00:0c:29:dc:a7:b2 (00:0c:29:dc:a7:b2) Destination: 00:0c:29:dc:a7:b2 (00:0c:29:dc:a7:b2) Source: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.128 (165.227.249.128) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 384 Identification: 0x01ae (430) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: ESP (0x32) Header checksum: 0xf8bf [correct] Good: True Bad : False Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.128 (165.227.249.128) Encapsulating Security Payload SPI: 0x3a4fd293 Sequence: 1 Data (356 bytes) 0000 00 0c 29 dc a7 b2 00 0c 29 96 e1 fa 08 00 45 00 ..).....).....E. 0010 01 80 01 ae 00 00 80 32 f8 bf a5 e3 f9 96 a5 e3 .......2........ 0020 f9 80 3a 4f d2 93 00 00 00 01 04 58 7d a4 a2 cf ..:O.......X}... 0030 b3 73 8a bc f5 df 79 ad 48 e7 dc d8 d5 d9 69 c2 .s....y.H.....i. 0040 3d d9 ef c3 21 69 94 90 ee 6e 97 89 95 f0 d2 30 =...!i...n.....0 0050 08 ef 60 a1 e7 a5 6b 68 51 64 69 6a 62 de 14 f7 ..`...khQdijb... 0060 d4 71 b6 18 fe 43 17 8e e1 a4 45 ed d4 f2 29 81 .q...C....E...). 0070 93 95 9f 44 63 a5 9e d4 3b bd 4b 76 62 3b d4 4a ...Dc...;.Kvb;.J 0080 35 8b 18 ae d2 ad 4e fc d5 ba 70 66 49 54 de 36 5.....N...pfIT.6 0090 ac 42 00 60 ea 2d 91 2d c8 d8 cb 5b 83 eb c6 f8 .B.`.-.-...[.... 00a0 30 dc 76 12 df 85 4e ab 30 d7 a5 7e 6b c1 c2 01 0.v...N.0..~k... 00b0 65 b2 99 0b 07 5b c8 00 5f 0f 9a 05 19 1f 28 e6 e....[.._.....(. 00c0 ed 22 72 98 29 cb 68 6b d2 40 ba 31 2c 6a 40 c3 ."r.).hk.@.1,j@. 00d0 ce b2 57 fe 12 b0 6a 18 a7 ad 17 42 37 c1 ee 7b ..W...j....B7..{ 00e0 8e 07 e4 a6 36 fb 8b b6 50 c4 ed 48 ba 8e d2 8f ....6...P..H.... 00f0 2d 65 a7 22 41 8c 10 fc 15 b8 07 6e 86 d9 f8 e9 -e."A......n.... 0100 65 66 ea ef 55 12 bc 3a 7a 74 20 1b 7d f3 61 5f ef..U..:zt .}.a_ 0110 97 e0 93 a5 31 13 c9 66 b7 53 d2 d1 0b 72 43 71 ....1..f.S...rCq 0120 d9 01 d1 5e 8d c6 ed 8d fc 11 d9 00 4b 47 39 26 ...^........KG9& 0130 54 cd 2a 7f 5d 46 c8 ad 4a 5d 69 87 bf ba c2 d2 T.*.]F..J]i..... 0140 a6 18 da 3d 42 78 45 f0 8b 1f 0b 5f 20 42 91 08 ...=BxE...._ B.. 0150 b2 69 1b b7 c4 5f 9e cf 6b bd d7 18 b2 d3 1c bd .i..._..k....... 0160 d0 75 cb a2 1c ef 6e 65 b0 67 b0 bf 72 e3 42 81 .u....ne.g..r.B. 0170 cb 0c c3 ec 40 34 4f c5 c9 2e 8a 7c 6e 98 13 9c ....@4O....|n... 0180 7d 03 b1 f9 9d d9 9a 89 f1 6c 01 8e f4 ec }........l.... Frame 12 (398 bytes on wire, 398 bytes captured) Arrival Time: Aug 17, 2006 13:27:27.472860000 Time delta from previous packet: 0.008878000 seconds Time since reference or first frame: 5.620607000 seconds Frame Number: 12 Packet Length: 398 bytes Capture Length: 398 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:0c:29:dc:a7:b2 (00:0c:29:dc:a7:b2), Dst: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Destination: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Source: 00:0c:29:dc:a7:b2 (00:0c:29:dc:a7:b2) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.128 (165.227.249.128), Dst: 165.227.249.150 (165.227.249.150) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 384 Identification: 0x1200 (4608) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 63 Protocol: ESP (0x32) Header checksum: 0x296e [correct] Good: True Bad : False Source: 165.227.249.128 (165.227.249.128) Destination: 165.227.249.150 (165.227.249.150) Encapsulating Security Payload SPI: 0x3a44e9e8 Sequence: 1 Data (356 bytes) 0000 00 0c 29 96 e1 fa 00 0c 29 dc a7 b2 08 00 45 00 ..).....).....E. 0010 01 80 12 00 00 00 3f 32 29 6e a5 e3 f9 80 a5 e3 ......?2)n...... 0020 f9 96 3a 44 e9 e8 00 00 00 01 62 d4 ca bb 06 7c ..:D......b....| 0030 88 b9 fb 7f 85 09 f3 23 e7 01 33 f0 ef 58 f8 32 .......#..3..X.2 0040 f5 59 3c f8 d5 46 12 da 83 f2 db cb 55 67 57 bb .Y<..F......UgW. 0050 21 9b 34 b7 1c d6 0f b3 49 cf ea 5e 97 df 2a bd !.4.....I..^..*. 0060 c5 48 df e2 e2 5f 81 b9 cb 8c ab 26 d4 a9 0b 0b .H..._.....&.... 0070 64 7c 04 40 1f e4 a0 f4 fb 68 ef 41 ac b8 3e 61 d|.@.....h.A..>a 0080 bb 9d a1 1e 2b f3 08 b7 9a 9f c4 99 27 b9 c6 87 ....+.......'... 0090 d4 68 9d 0e 59 70 1d 5d c6 76 ca ec a2 e1 19 bd .h..Yp.].v...... 00a0 94 22 d4 31 23 7d 4e ef 7f 80 03 a5 9c 35 26 c0 .".1#}N......5&. 00b0 ab f5 60 c0 b7 5f 76 30 06 c3 10 e5 5a 8b 05 1f ..`.._v0....Z... 00c0 68 32 f0 17 e6 31 4b a1 ea d1 ec 5d 77 8f 44 ca h2...1K....]w.D. 00d0 dd d3 79 e4 2f 0e 0d 74 d2 69 2c 0e 79 ad 78 4e ..y./..t.i,.y.xN 00e0 15 24 bf 49 be 58 01 4e cb aa bc 7f 6a 77 e4 20 .$.I.X.N....jw. 00f0 fb 2d fe bb e1 8c a7 c9 58 fa 47 72 f4 25 c4 64 .-......X.Gr.%.d 0100 6a a1 68 36 63 a6 f6 40 ca b7 4d d9 96 34 1a 04 j.h6c..@..M..4.. 0110 64 61 21 ef b6 b4 6a a5 e3 d9 25 48 57 a9 b9 a9 da!...j...%HW... 0120 26 f0 13 e6 29 84 1b 93 fa 88 ae c0 6d 89 4f 92 &...).......m.O. 0130 f5 a2 5f 73 67 c2 03 80 86 ec 88 63 c0 7b 14 b3 .._sg......c.{.. 0140 2b 2d 58 38 84 ab fc d0 0d 52 ff dd 60 63 2d 7a +-X8.....R..`c-z 0150 0b c3 73 ec ec dc d0 67 2b 47 9c 15 b5 96 c5 1c ..s....g+G...... 0160 57 69 ab dc 3e bc 04 af bb bb e8 be 16 cb df 8e Wi..>........... 0170 f3 ed c2 36 40 d2 a5 8a 7a 80 a7 d9 54 fa 21 53 ...6@...z...T.!S 0180 2d 4a c4 fa f9 b2 5a a9 f1 09 2a 1b 64 93 -J....Z...*.d.