Frame 1 (222 bytes on wire, 222 bytes captured) Arrival Time: Aug 13, 2006 12:33:16.930433000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 222 bytes Capture Length: 222 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa), Dst: 00:a0:eb:00:f2:75 (00:a0:eb:00:f2:75) Destination: 00:a0:eb:00:f2:75 (00:a0:eb:00:f2:75) Source: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.129 (165.227.249.129) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 208 Identification: 0x023e (574) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf8ff [correct] Good: True Bad : False Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.129 (165.227.249.129) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 188 Checksum: 0xb58c [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x9477241B5A570E16 Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 180 Security Association payload Next payload: Vendor ID (13) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 40 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 32 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: unknown vendor ID: 0x4A131C81070358455C5728F20E95452F Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-03 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: RFC 3706 Detecting Dead IKE Peers (DPD) 0000 00 a0 eb 00 f2 75 00 0c 29 96 e1 fa 08 00 45 00 .....u..).....E. 0010 00 d0 02 3e 00 00 80 11 f8 ff a5 e3 f9 96 a5 e3 ...>............ 0020 f9 81 01 f4 01 f4 00 bc b5 8c 94 77 24 1b 5a 57 ...........w$.ZW 0030 0e 16 00 00 00 00 00 00 00 00 01 10 02 00 00 00 ................ 0040 00 00 00 00 00 b4 0d 00 00 34 00 00 00 01 00 00 .........4...... 0050 00 01 00 00 00 28 01 01 00 01 00 00 00 20 01 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 04 00 02 80 03 ................ 0070 00 01 80 0b 00 01 80 0c 70 80 0d 00 00 14 4a 13 ........p.....J. 0080 1c 81 07 03 58 45 5c 57 28 f2 0e 95 45 2f 0d 00 ....XE\W(...E/.. 0090 00 14 7d 94 19 a6 53 10 ca 6f 2c 17 9d 92 15 52 ..}...S..o,....R 00a0 9d 56 0d 00 00 14 90 cb 80 91 3e bb 69 6e 08 63 .V........>.in.c 00b0 81 b5 ec 42 7b 1f 0d 00 00 14 44 85 15 2d 18 b6 ...B{.....D..-.. 00c0 bb cd 0b e8 a8 46 95 79 dd cc 00 00 00 14 af ca .....F.y........ 00d0 d7 13 68 a1 f1 c9 6b 86 96 fc 77 57 01 00 ..h...k...wW.. Frame 2 (122 bytes on wire, 122 bytes captured) Arrival Time: Aug 13, 2006 12:33:16.941183000 Time delta from previous packet: 0.010750000 seconds Time since reference or first frame: 0.010750000 seconds Frame Number: 2 Packet Length: 122 bytes Capture Length: 122 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:a0:eb:00:f2:75 (00:a0:eb:00:f2:75), Dst: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Destination: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Source: 00:a0:eb:00:f2:75 (00:a0:eb:00:f2:75) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.129 (165.227.249.129), Dst: 165.227.249.150 (165.227.249.150) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 108 Identification: 0x0000 (0) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3ba2 [correct] Good: True Bad : False Source: 165.227.249.129 (165.227.249.129) Destination: 165.227.249.150 (165.227.249.150) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 88 Checksum: 0x22fd [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x9477241B5A570E16 Responder cookie: 0x6E885A04B20B8750 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 80 Security Association payload Next payload: NONE (0) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 40 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 32 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) 0000 00 0c 29 96 e1 fa 00 a0 eb 00 f2 75 08 00 45 00 ..)........u..E. 0010 00 6c 00 00 00 00 40 11 3b a2 a5 e3 f9 81 a5 e3 .l....@.;....... 0020 f9 96 01 f4 01 f4 00 58 22 fd 94 77 24 1b 5a 57 .......X"..w$.ZW 0030 0e 16 6e 88 5a 04 b2 0b 87 50 01 10 02 00 00 00 ..n.Z....P...... 0040 00 00 00 00 00 50 00 00 00 34 00 00 00 01 00 00 .....P...4...... 0050 00 01 00 00 00 28 01 01 00 01 00 00 00 20 01 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 04 00 02 80 03 ................ 0070 00 01 80 0b 00 01 80 0c 70 80 ........p. Frame 3 (222 bytes on wire, 222 bytes captured) Arrival Time: Aug 13, 2006 12:33:16.967932000 Time delta from previous packet: 0.026749000 seconds Time since reference or first frame: 0.037499000 seconds Frame Number: 3 Packet Length: 222 bytes Capture Length: 222 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa), Dst: 00:a0:eb:00:f2:75 (00:a0:eb:00:f2:75) Destination: 00:a0:eb:00:f2:75 (00:a0:eb:00:f2:75) Source: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.129 (165.227.249.129) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 208 Identification: 0x023f (575) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf8fe [correct] Good: True Bad : False Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.129 (165.227.249.129) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 188 Checksum: 0x355e [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x9477241B5A570E16 Responder cookie: 0x6E885A04B20B8750 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 180 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 20 Nonce Data 0000 00 a0 eb 00 f2 75 00 0c 29 96 e1 fa 08 00 45 00 .....u..).....E. 0010 00 d0 02 3f 00 00 80 11 f8 fe a5 e3 f9 96 a5 e3 ...?............ 0020 f9 81 01 f4 01 f4 00 bc 35 5e 94 77 24 1b 5a 57 ........5^.w$.ZW 0030 0e 16 6e 88 5a 04 b2 0b 87 50 04 10 02 00 00 00 ..n.Z....P...... 0040 00 00 00 00 00 b4 0a 00 00 84 33 04 b3 04 27 84 ..........3...'. 0050 83 c3 41 7d 98 1a b7 43 e1 8c c2 b3 81 ba 24 d8 ..A}...C......$. 0060 fb 49 1b 92 d5 cd 78 6e 37 57 30 20 aa 3d e2 3f .I....xn7W0 .=.? 0070 e4 63 8a 14 cb 1b d9 36 69 32 29 8b 06 e8 ae 65 .c.....6i2)....e 0080 81 d4 cf e1 5c d6 b7 d8 34 f4 50 5d 78 fb 39 f1 ....\...4.P]x.9. 0090 9e 5e d9 93 2d 9f 1d 10 36 cf d7 19 40 e6 21 85 .^..-...6...@.!. 00a0 05 b1 57 2a 27 ed e8 5e af d9 8f 57 e2 ff 40 4a ..W*'..^...W..@J 00b0 eb 6e 8f fb 1f f6 07 86 8c 49 82 d5 0f c0 29 26 .n.......I....)& 00c0 ba a6 2a e0 f9 f6 b6 ad 91 1b 00 00 00 14 61 51 ..*...........aQ 00d0 8d 1f d8 09 94 1c 2a 83 e7 85 57 7c b9 9b ......*...W|.. Frame 4 (222 bytes on wire, 222 bytes captured) Arrival Time: Aug 13, 2006 12:33:17.099313000 Time delta from previous packet: 0.131381000 seconds Time since reference or first frame: 0.168880000 seconds Frame Number: 4 Packet Length: 222 bytes Capture Length: 222 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:a0:eb:00:f2:75 (00:a0:eb:00:f2:75), Dst: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Destination: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Source: 00:a0:eb:00:f2:75 (00:a0:eb:00:f2:75) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.129 (165.227.249.129), Dst: 165.227.249.150 (165.227.249.150) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 208 Identification: 0x0001 (1) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3b3d [correct] Good: True Bad : False Source: 165.227.249.129 (165.227.249.129) Destination: 165.227.249.150 (165.227.249.150) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 188 Checksum: 0x15e6 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x9477241B5A570E16 Responder cookie: 0x6E885A04B20B8750 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 180 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 20 Nonce Data 0000 00 0c 29 96 e1 fa 00 a0 eb 00 f2 75 08 00 45 00 ..)........u..E. 0010 00 d0 00 01 00 00 40 11 3b 3d a5 e3 f9 81 a5 e3 ......@.;=...... 0020 f9 96 01 f4 01 f4 00 bc 15 e6 94 77 24 1b 5a 57 ...........w$.ZW 0030 0e 16 6e 88 5a 04 b2 0b 87 50 04 10 02 00 00 00 ..n.Z....P...... 0040 00 00 00 00 00 b4 0a 00 00 84 19 37 db a4 8a 8d ...........7.... 0050 ed ed 41 b8 62 b9 a2 8f 5e cb af c1 a9 8c 40 8c ..A.b...^.....@. 0060 37 c7 76 1e 77 dd b2 cb 65 0e 16 02 3c bf 1d 0b 7.v.w...e...<... 0070 91 fb b9 14 f3 d1 b8 80 d6 cf 24 83 28 05 8e 44 ..........$.(..D 0080 49 62 5c 32 c5 f9 ee 54 9e bc 7e 56 2d 54 8e 46 Ib\2...T..~V-T.F 0090 89 9a 51 c6 4a 08 ed 40 80 ee d4 19 21 d4 ea 9a ..Q.J..@....!... 00a0 01 d6 36 2a ef de e0 73 84 f0 e5 d3 fb 42 12 ca ..6*...s.....B.. 00b0 f8 75 31 83 07 74 80 92 2b 72 e3 5b 7a fc 84 fd .u1..t..+r.[z... 00c0 5c 38 e6 21 7b a1 cb e5 b2 6e 00 00 00 14 c8 f1 \8.!{....n...... 00d0 38 22 6e c7 5f 11 db cc 53 cb b4 56 96 50 8"n._...S..V.P Frame 5 (142 bytes on wire, 142 bytes captured) Arrival Time: Aug 13, 2006 12:33:17.117135000 Time delta from previous packet: 0.017822000 seconds Time since reference or first frame: 0.186702000 seconds Frame Number: 5 Packet Length: 142 bytes Capture Length: 142 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa), Dst: 00:a0:eb:00:f2:75 (00:a0:eb:00:f2:75) Destination: 00:a0:eb:00:f2:75 (00:a0:eb:00:f2:75) Source: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.129 (165.227.249.129) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 128 Identification: 0x0240 (576) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf94d [correct] Good: True Bad : False Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.129 (165.227.249.129) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 108 Checksum: 0x14bc [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x9477241B5A570E16 Responder cookie: 0x6E885A04B20B8750 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 100 Encrypted payload (72 bytes) 0000 00 a0 eb 00 f2 75 00 0c 29 96 e1 fa 08 00 45 00 .....u..).....E. 0010 00 80 02 40 00 00 80 11 f9 4d a5 e3 f9 96 a5 e3 ...@.....M...... 0020 f9 81 01 f4 01 f4 00 6c 14 bc 94 77 24 1b 5a 57 .......l...w$.ZW 0030 0e 16 6e 88 5a 04 b2 0b 87 50 05 10 02 01 00 00 ..n.Z....P...... 0040 00 00 00 00 00 64 55 63 5e 85 81 8a 5b 6b 36 0f .....dUc^...[k6. 0050 ee 91 e2 c3 80 e5 63 8c d1 04 4f a9 ca b6 62 b5 ......c...O...b. 0060 2b 5f 7e d1 bd 01 4b ba 5a e1 da 52 f5 ba 6a 09 +_~...K.Z..R..j. 0070 87 1e d4 1f 5d 55 ad 47 37 b6 cc 21 27 84 9b 1f ....]U.G7..!'... 0080 61 16 a8 cf aa d7 a2 ef 83 61 26 30 3c e9 a........a&0<. Frame 6 (110 bytes on wire, 110 bytes captured) Arrival Time: Aug 13, 2006 12:33:17.129936000 Time delta from previous packet: 0.012801000 seconds Time since reference or first frame: 0.199503000 seconds Frame Number: 6 Packet Length: 110 bytes Capture Length: 110 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:a0:eb:00:f2:75 (00:a0:eb:00:f2:75), Dst: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Destination: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Source: 00:a0:eb:00:f2:75 (00:a0:eb:00:f2:75) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.129 (165.227.249.129), Dst: 165.227.249.150 (165.227.249.150) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0x0002 (2) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3bac [correct] Good: True Bad : False Source: 165.227.249.129 (165.227.249.129) Destination: 165.227.249.150 (165.227.249.150) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 76 Checksum: 0x4d8c [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x9477241B5A570E16 Responder cookie: 0x6E885A04B20B8750 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 68 Encrypted payload (40 bytes) 0000 00 0c 29 96 e1 fa 00 a0 eb 00 f2 75 08 00 45 00 ..)........u..E. 0010 00 60 00 02 00 00 40 11 3b ac a5 e3 f9 81 a5 e3 .`....@.;....... 0020 f9 96 01 f4 01 f4 00 4c 4d 8c 94 77 24 1b 5a 57 .......LM..w$.ZW 0030 0e 16 6e 88 5a 04 b2 0b 87 50 05 10 02 01 00 00 ..n.Z....P...... 0040 00 00 00 00 00 44 60 7c 67 0c 8c 60 75 6b 90 5c .....D`|g..`uk.\ 0050 41 73 29 76 ea cd 5f 59 89 3c 9c 87 cc 4e 82 99 As)v.._Y.<...N.. 0060 92 76 c0 a9 4b 19 77 eb ed c0 ce 62 ef 0c .v..K.w....b.. Frame 7 (334 bytes on wire, 334 bytes captured) Arrival Time: Aug 13, 2006 12:33:17.160627000 Time delta from previous packet: 0.030691000 seconds Time since reference or first frame: 0.230194000 seconds Frame Number: 7 Packet Length: 334 bytes Capture Length: 334 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa), Dst: 00:a0:eb:00:f2:75 (00:a0:eb:00:f2:75) Destination: 00:a0:eb:00:f2:75 (00:a0:eb:00:f2:75) Source: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.129 (165.227.249.129) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 320 Identification: 0x0241 (577) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf88c [correct] Good: True Bad : False Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.129 (165.227.249.129) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 300 Checksum: 0x6ab4 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x9477241B5A570E16 Responder cookie: 0x6E885A04B20B8750 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x5F8954C3 Length: 292 Encrypted payload (264 bytes) 0000 00 a0 eb 00 f2 75 00 0c 29 96 e1 fa 08 00 45 00 .....u..).....E. 0010 01 40 02 41 00 00 80 11 f8 8c a5 e3 f9 96 a5 e3 .@.A............ 0020 f9 81 01 f4 01 f4 01 2c 6a b4 94 77 24 1b 5a 57 .......,j..w$.ZW 0030 0e 16 6e 88 5a 04 b2 0b 87 50 08 10 20 01 5f 89 ..n.Z....P.. ._. 0040 54 c3 00 00 01 24 db 1d fd eb 41 6a 43 51 7c 41 T....$....AjCQ|A 0050 00 ca d8 6d af cb 47 55 fa ec c2 d7 94 09 c5 d4 ...m..GU........ 0060 b6 a1 7c ad 70 44 77 8f c8 62 a5 31 25 ee 2c 52 ..|.pDw..b.1%.,R 0070 5e 81 5c 6b b2 d8 b5 32 cf 9b 37 13 ba 7c c4 0d ^.\k...2..7..|.. 0080 94 b8 16 98 34 38 a3 94 e1 d6 a5 37 5c ad a9 1d ....48.....7\... 0090 fd 62 e7 55 2f 1a 1d c0 3d de 9f 19 84 9c a6 35 .b.U/...=......5 00a0 88 c2 45 64 a8 30 ab ea 36 7c cb 44 65 ad f3 77 ..Ed.0..6|.De..w 00b0 74 7d aa 7f 38 ba 20 33 fb ec 32 2d 13 b8 59 7b t}..8. 3..2-..Y{ 00c0 ea ea 76 e8 c1 d2 34 85 17 d2 df 62 9c 97 64 44 ..v...4....b..dD 00d0 fa 57 0a a6 d5 29 73 50 ef ae ee fe b9 9b f2 6e .W...)sP.......n 00e0 2f db 35 43 ff 91 ea 89 7f d3 83 2c b6 91 a2 fb /.5C.......,.... 00f0 0c 27 5b f5 18 4c b6 40 ee 34 8b 8a ad 4d c7 0b .'[..L.@.4...M.. 0100 87 ff ed 98 1c b1 d8 48 4b 50 e6 c9 85 4f e2 03 .......HKP...O.. 0110 68 72 49 e6 6f 91 97 85 03 3b 05 73 a7 f7 71 95 hrI.o....;.s..q. 0120 a3 32 77 a1 c7 4e f9 c1 c4 e8 85 9a 02 ce c1 ef .2w..N.......... 0130 82 a1 54 88 e2 c7 d3 ba a5 3e 86 ed f6 93 cc d3 ..T......>...... 0140 b9 a4 c8 1c 37 a8 53 71 7a 69 e0 4c 88 34 ....7.Sqzi.L.4 Frame 8 (326 bytes on wire, 326 bytes captured) Arrival Time: Aug 13, 2006 12:33:17.318698000 Time delta from previous packet: 0.158071000 seconds Time since reference or first frame: 0.388265000 seconds Frame Number: 8 Packet Length: 326 bytes Capture Length: 326 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:a0:eb:00:f2:75 (00:a0:eb:00:f2:75), Dst: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Destination: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Source: 00:a0:eb:00:f2:75 (00:a0:eb:00:f2:75) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.129 (165.227.249.129), Dst: 165.227.249.150 (165.227.249.150) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 312 Identification: 0x0003 (3) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3ad3 [correct] Good: True Bad : False Source: 165.227.249.129 (165.227.249.129) Destination: 165.227.249.150 (165.227.249.150) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 292 Checksum: 0x1450 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x9477241B5A570E16 Responder cookie: 0x6E885A04B20B8750 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x5F8954C3 Length: 284 Encrypted payload (256 bytes) 0000 00 0c 29 96 e1 fa 00 a0 eb 00 f2 75 08 00 45 00 ..)........u..E. 0010 01 38 00 03 00 00 40 11 3a d3 a5 e3 f9 81 a5 e3 .8....@.:....... 0020 f9 96 01 f4 01 f4 01 24 14 50 94 77 24 1b 5a 57 .......$.P.w$.ZW 0030 0e 16 6e 88 5a 04 b2 0b 87 50 08 10 20 01 5f 89 ..n.Z....P.. ._. 0040 54 c3 00 00 01 1c a9 05 aa fe 2c a9 1b 30 1d 2b T.........,..0.+ 0050 76 ad 71 f0 c3 97 74 43 b6 77 2a 03 9e 9f 5d 23 v.q...tC.w*...]# 0060 02 c7 6b d6 5a 1b a2 40 f6 2d 4d fc 80 ca ad c5 ..k.Z..@.-M..... 0070 a6 dc ca 09 44 0c a8 cf 56 70 63 3d e9 bf d0 34 ....D...Vpc=...4 0080 a8 7e 14 aa a5 33 2d ed 0f 55 d0 39 d2 31 40 11 .~...3-..U.9.1@. 0090 32 a4 55 86 88 c3 27 2a 42 7d 27 4a a9 47 74 af 2.U...'*B}'J.Gt. 00a0 de 5a 96 eb bc d3 43 a5 2a b9 c0 b1 fd 9c 3d 48 .Z....C.*.....=H 00b0 74 e5 3f d5 ad 85 aa bb 47 1f f8 06 06 00 8d bb t.?.....G....... 00c0 8f 61 60 3f f9 3a a0 6e ad b3 e7 07 da 79 78 54 .a`?.:.n.....yxT 00d0 be 1b 32 16 1a 16 b9 5e 78 5a 03 ad 5c df 15 f4 ..2....^xZ..\... 00e0 1b 4f 65 f7 89 ab 23 f2 88 af 8d eb 22 2e 34 1f .Oe...#.....".4. 00f0 4d 53 cc c6 68 c7 80 35 ae e3 0d 78 b1 cf ca d3 MS..h..5...x.... 0100 b7 54 17 bd 5d ee db 9c 2a 48 fd d7 e1 4a cb 88 .T..]...*H...J.. 0110 4a a7 cb bf 11 62 3c b3 28 76 36 56 65 67 95 74 J....b<.(v6Veg.t 0120 d2 c0 8b 79 02 2f 29 c0 61 a8 cf 37 cb 95 9b a1 ...y./).a..7.... 0130 82 16 91 d3 5f 65 83 f8 93 43 7f 94 ce 5e 0e a0 ...._e...C...^.. 0140 e4 b3 de 6d 20 03 ...m . Frame 9 (102 bytes on wire, 102 bytes captured) Arrival Time: Aug 13, 2006 12:33:17.494710000 Time delta from previous packet: 0.176012000 seconds Time since reference or first frame: 0.564277000 seconds Frame Number: 9 Packet Length: 102 bytes Capture Length: 102 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa), Dst: 00:a0:eb:00:f2:75 (00:a0:eb:00:f2:75) Destination: 00:a0:eb:00:f2:75 (00:a0:eb:00:f2:75) Source: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.129 (165.227.249.129) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 88 Identification: 0x0242 (578) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf973 [correct] Good: True Bad : False Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.129 (165.227.249.129) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 68 Checksum: 0x4d94 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x9477241B5A570E16 Responder cookie: 0x6E885A04B20B8750 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x5F8954C3 Length: 60 Encrypted payload (32 bytes) 0000 00 a0 eb 00 f2 75 00 0c 29 96 e1 fa 08 00 45 00 .....u..).....E. 0010 00 58 02 42 00 00 80 11 f9 73 a5 e3 f9 96 a5 e3 .X.B.....s...... 0020 f9 81 01 f4 01 f4 00 44 4d 94 94 77 24 1b 5a 57 .......DM..w$.ZW 0030 0e 16 6e 88 5a 04 b2 0b 87 50 08 10 20 01 5f 89 ..n.Z....P.. ._. 0040 54 c3 00 00 00 3c 30 11 13 a3 3f 44 53 54 a5 53 T....<0...?DST.S 0050 ea 12 b6 d2 a3 66 a4 3f 93 e1 30 e3 63 12 41 d8 .....f.?..0.c.A. 0060 e2 c0 a4 e3 1a 07 ...... Frame 10 (398 bytes on wire, 398 bytes captured) Arrival Time: Aug 13, 2006 12:33:23.467968000 Time delta from previous packet: 5.973258000 seconds Time since reference or first frame: 6.537535000 seconds Frame Number: 10 Packet Length: 398 bytes Capture Length: 398 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa), Dst: 00:a0:eb:00:f2:75 (00:a0:eb:00:f2:75) Destination: 00:a0:eb:00:f2:75 (00:a0:eb:00:f2:75) Source: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.129 (165.227.249.129) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 384 Identification: 0x0243 (579) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: ESP (0x32) Header checksum: 0xf829 [correct] Good: True Bad : False Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.129 (165.227.249.129) Encapsulating Security Payload SPI: 0xe4719dc0 Sequence: 1 Data (356 bytes) 0000 00 a0 eb 00 f2 75 00 0c 29 96 e1 fa 08 00 45 00 .....u..).....E. 0010 01 80 02 43 00 00 80 32 f8 29 a5 e3 f9 96 a5 e3 ...C...2.)...... 0020 f9 81 e4 71 9d c0 00 00 00 01 69 3a 7a aa b7 bc ...q......i:z... 0030 22 40 95 95 42 99 93 36 e5 4f 0e 7a cc a7 9e f8 "@..B..6.O.z.... 0040 31 77 87 fd 8b fd 4a 5d e3 42 29 08 e3 b4 96 ba 1w....J].B)..... 0050 1d 68 65 7a 82 4a 02 bb d2 3e 63 1c 2d 82 e1 0d .hez.J...>c.-... 0060 05 c0 2a ee 26 26 ec 7a 85 49 da 2b dc 43 e1 a3 ..*.&&.z.I.+.C.. 0070 8c d7 5e 7e c7 9e 40 7c 05 93 be ae 04 20 37 4d ..^~..@|..... 7M 0080 a0 b2 8d ec 9c 2d 63 d8 8c 6c f0 80 26 2e 5f 4d .....-c..l..&._M 0090 15 16 81 29 63 7a 86 c1 f9 d7 1c 27 43 ae bf 01 ...)cz.....'C... 00a0 b3 9c 0c 81 23 5b 9c 7c 61 7a 37 3e e1 e9 02 cb ....#[.|az7>.... 00b0 ab 9e b4 ee 6f fa c0 a6 81 c3 0a b4 3e 18 67 47 ....o.......>.gG 00c0 1a e8 60 35 f5 73 e4 54 43 fd e1 28 47 40 e0 51 ..`5.s.TC..(G@.Q 00d0 a9 99 09 27 d2 6e 50 5f ea 78 41 d1 46 41 66 7d ...'.nP_.xA.FAf} 00e0 d3 a4 96 80 46 68 80 68 2b 21 93 38 7b 87 a1 1f ....Fh.h+!.8{... 00f0 62 44 d3 4b f0 75 bc b0 33 1d 6c 18 9a 3a 34 a2 bD.K.u..3.l..:4. 0100 1d f3 64 ef c3 64 5e d7 d1 22 96 45 d3 46 4c 02 ..d..d^..".E.FL. 0110 a7 38 cb 5b aa 9d 60 fd 2b 00 47 d7 bc aa 88 c2 .8.[..`.+.G..... 0120 45 8a c8 7c 9e a8 25 69 99 00 18 27 ad 0d 27 d7 E..|..%i...'..'. 0130 e8 56 f7 9d f7 c2 85 dd 50 f5 4c 8e 75 87 87 c3 .V......P.L.u... 0140 55 aa ba 0f ce a9 a8 a1 42 d2 ce 6c 85 92 90 47 U.......B..l...G 0150 6a d1 74 f5 95 47 1e f7 09 f1 af 5a f1 cb 44 4e j.t..G.....Z..DN 0160 1b 71 6f 90 ca 06 1f cc 3d 3c c2 ec c3 bf 1e 7f .qo.....=<...... 0170 26 50 07 12 9b 0e 70 09 d9 39 1d 61 ad 35 0c 69 &P....p..9.a.5.i 0180 22 65 58 35 88 a9 17 91 0b a7 03 67 b4 c7 "eX5.......g.. Frame 11 (398 bytes on wire, 398 bytes captured) Arrival Time: Aug 13, 2006 12:33:23.476720000 Time delta from previous packet: 0.008752000 seconds Time since reference or first frame: 6.546287000 seconds Frame Number: 11 Packet Length: 398 bytes Capture Length: 398 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:a0:eb:00:f2:75 (00:a0:eb:00:f2:75), Dst: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Destination: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Source: 00:a0:eb:00:f2:75 (00:a0:eb:00:f2:75) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.129 (165.227.249.129), Dst: 165.227.249.150 (165.227.249.150) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 384 Identification: 0x5ab9 (23225) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0xdfb3 [correct] Good: True Bad : False Source: 165.227.249.129 (165.227.249.129) Destination: 165.227.249.150 (165.227.249.150) Encapsulating Security Payload SPI: 0x5ebda0a4 Sequence: 1 Data (356 bytes) 0000 00 0c 29 96 e1 fa 00 a0 eb 00 f2 75 08 00 45 00 ..)........u..E. 0010 01 80 5a b9 00 00 40 32 df b3 a5 e3 f9 81 a5 e3 ..Z...@2........ 0020 f9 96 5e bd a0 a4 00 00 00 01 00 00 00 00 00 00 ..^............. 0030 00 00 9e a6 2f 5b f3 b0 6f 03 ea e3 f0 f4 76 f5 ..../[..o.....v. 0040 37 3b 68 16 9b bd a5 b8 09 9c 03 fc 46 d4 ce 67 7;h.........F..g 0050 11 e8 07 5a a8 80 c3 88 18 23 51 00 36 ba 94 8d ...Z.....#Q.6... 0060 21 5b bb 85 f4 9b f4 39 38 a0 89 63 f7 1f 63 83 ![.....98..c..c. 0070 e1 b1 24 02 19 9a e3 c6 00 0d 7a f9 82 d3 14 63 ..$.......z....c 0080 9f 51 ec 02 8d 65 63 d3 cd a0 c3 6a 5c 4b e7 23 .Q...ec....j\K.# 0090 b5 49 9b e2 d0 91 56 dc e3 13 ad 3a 0e bd 76 c4 .I....V....:..v. 00a0 71 da 42 c3 ea a2 75 89 61 31 2f 6b 17 c7 a9 29 q.B...u.a1/k...) 00b0 90 96 30 a8 45 b3 97 af 3f 5e 32 af 62 7a 5d c4 ..0.E...?^2.bz]. 00c0 7d 3c 75 65 27 96 76 e7 2e a3 3a 8e 2b 17 f2 9f }..F 0140 db b1 7f 80 c2 44 44 62 00 2f 34 5e 67 ff 0b a2 .....DDb./4^g... 0150 fb ae e4 85 b4 56 05 5f 3a 36 39 5e 9b 44 03 f1 .....V._:69^.D.. 0160 92 d4 76 d3 c1 d7 e4 fa 33 ac 4a a1 4d df bb 0c ..v.....3.J.M... 0170 51 45 ac 46 ba 8f d1 68 82 b5 fe ca 3e d4 bb 59 QE.F...h....>..Y 0180 15 a2 ca ce 18 44 16 07 fb 2c be 6c d0 be .....D...,.l..