Frame 1 (222 bytes on wire, 222 bytes captured) Arrival Time: Sep 20, 2007 15:38:25.471794000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 222 bytes Capture Length: 222 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa), Dst: 00:1b:2f:37:c7:b9 (00:1b:2f:37:c7:b9) Destination: 00:1b:2f:37:c7:b9 (00:1b:2f:37:c7:b9) Source: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.131 (165.227.249.131) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 208 Identification: 0x416a (16746) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xb9d1 [correct] Good: True Bad : False Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.131 (165.227.249.131) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 188 Checksum: 0xa496 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x240F13E296B7634B Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 180 Security Association payload Next payload: Vendor ID (13) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 40 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 32 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: unknown vendor ID: 0x4A131C81070358455C5728F20E95452F Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-03 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: RFC 3706 Detecting Dead IKE Peers (DPD) 0000 00 1b 2f 37 c7 b9 00 0c 29 96 e1 fa 08 00 45 00 ../7....).....E. 0010 00 d0 41 6a 00 00 80 11 b9 d1 a5 e3 f9 96 a5 e3 ..Aj............ 0020 f9 83 01 f4 01 f4 00 bc a4 96 24 0f 13 e2 96 b7 ..........$..... 0030 63 4b 00 00 00 00 00 00 00 00 01 10 02 00 00 00 cK.............. 0040 00 00 00 00 00 b4 0d 00 00 34 00 00 00 01 00 00 .........4...... 0050 00 01 00 00 00 28 01 01 00 01 00 00 00 20 01 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 04 00 02 80 03 ................ 0070 00 01 80 0b 00 01 80 0c 70 80 0d 00 00 14 4a 13 ........p.....J. 0080 1c 81 07 03 58 45 5c 57 28 f2 0e 95 45 2f 0d 00 ....XE\W(...E/.. 0090 00 14 7d 94 19 a6 53 10 ca 6f 2c 17 9d 92 15 52 ..}...S..o,....R 00a0 9d 56 0d 00 00 14 90 cb 80 91 3e bb 69 6e 08 63 .V........>.in.c 00b0 81 b5 ec 42 7b 1f 0d 00 00 14 44 85 15 2d 18 b6 ...B{.....D..-.. 00c0 bb cd 0b e8 a8 46 95 79 dd cc 00 00 00 14 af ca .....F.y........ 00d0 d7 13 68 a1 f1 c9 6b 86 96 fc 77 57 01 00 ..h...k...wW.. Frame 2 (142 bytes on wire, 142 bytes captured) Arrival Time: Sep 20, 2007 15:38:25.697279000 Time delta from previous packet: 0.225485000 seconds Time since reference or first frame: 0.225485000 seconds Frame Number: 2 Packet Length: 142 bytes Capture Length: 142 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:1b:2f:37:c7:b9 (00:1b:2f:37:c7:b9), Dst: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Destination: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Source: 00:1b:2f:37:c7:b9 (00:1b:2f:37:c7:b9) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.131 (165.227.249.131), Dst: 165.227.249.150 (165.227.249.150) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 128 Identification: 0x0000 (0) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb8b [correct] Good: True Bad : False Source: 165.227.249.131 (165.227.249.131) Destination: 165.227.249.150 (165.227.249.150) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 108 Checksum: 0xc844 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x240F13E296B7634B Responder cookie: 0x50B0F522E5A5B6BD Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 100 Security Association payload Next payload: Vendor ID (13) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 40 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 32 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: RFC 3706 Detecting Dead IKE Peers (DPD) 0000 00 0c 29 96 e1 fa 00 1b 2f 37 c7 b9 08 00 45 00 ..)...../7....E. 0010 00 80 00 00 40 00 40 11 fb 8b a5 e3 f9 83 a5 e3 ....@.@......... 0020 f9 96 01 f4 01 f4 00 6c c8 44 24 0f 13 e2 96 b7 .......l.D$..... 0030 63 4b 50 b0 f5 22 e5 a5 b6 bd 01 10 02 00 00 00 cKP..".......... 0040 00 00 00 00 00 64 0d 00 00 34 00 00 00 01 00 00 .....d...4...... 0050 00 01 00 00 00 28 01 01 00 01 00 00 00 20 01 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 04 00 02 80 03 ................ 0070 00 01 80 0b 00 01 80 0c 70 80 00 00 00 14 af ca ........p....... 0080 d7 13 68 a1 f1 c9 6b 86 96 fc 77 57 01 00 ..h...k...wW.. Frame 3 (222 bytes on wire, 222 bytes captured) Arrival Time: Sep 20, 2007 15:38:25.726055000 Time delta from previous packet: 0.028776000 seconds Time since reference or first frame: 0.254261000 seconds Frame Number: 3 Packet Length: 222 bytes Capture Length: 222 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa), Dst: 00:1b:2f:37:c7:b9 (00:1b:2f:37:c7:b9) Destination: 00:1b:2f:37:c7:b9 (00:1b:2f:37:c7:b9) Source: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.131 (165.227.249.131) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 208 Identification: 0x416b (16747) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xb9d0 [correct] Good: True Bad : False Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.131 (165.227.249.131) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 188 Checksum: 0x55a3 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x240F13E296B7634B Responder cookie: 0x50B0F522E5A5B6BD Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 180 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 20 Nonce Data 0000 00 1b 2f 37 c7 b9 00 0c 29 96 e1 fa 08 00 45 00 ../7....).....E. 0010 00 d0 41 6b 00 00 80 11 b9 d0 a5 e3 f9 96 a5 e3 ..Ak............ 0020 f9 83 01 f4 01 f4 00 bc 55 a3 24 0f 13 e2 96 b7 ........U.$..... 0030 63 4b 50 b0 f5 22 e5 a5 b6 bd 04 10 02 00 00 00 cKP..".......... 0040 00 00 00 00 00 b4 0a 00 00 84 22 ae 41 2e 65 f8 ..........".A.e. 0050 cb aa ec e9 b6 3d e9 e1 64 c3 c1 cd d1 08 12 63 .....=..d......c 0060 54 55 62 d3 0b 64 8e 07 7e 4c 23 8e 9f ea 13 d2 TUb..d..~L#..... 0070 72 24 8d d0 c5 0d 4e 94 0f 3d de 7f e9 23 64 d5 r$....N..=...#d. 0080 c0 14 a8 a6 85 d2 47 af 95 40 18 2b 5b 2e 7c 15 ......G..@.+[.|. 0090 cf 99 0f e9 1d a4 2c 36 6c 21 cd ce c3 7e 69 eb ......,6l!...~i. 00a0 d2 ed 8f 56 e7 7a df 1a 02 e5 d4 8c da 73 81 0a ...V.z.......s.. 00b0 92 ba e6 16 b0 f6 d8 db 9f f7 74 8f b5 e9 dc 6b ..........t....k 00c0 b7 de 8d 30 3e f8 59 e8 9e 37 00 00 00 14 1e 67 ...0>.Y..7.....g 00d0 3d 52 80 a2 cc e1 8c fb fb fc 43 01 dc 34 =R........C..4 Frame 4 (222 bytes on wire, 222 bytes captured) Arrival Time: Sep 20, 2007 15:38:26.055099000 Time delta from previous packet: 0.329044000 seconds Time since reference or first frame: 0.583305000 seconds Frame Number: 4 Packet Length: 222 bytes Capture Length: 222 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:1b:2f:37:c7:b9 (00:1b:2f:37:c7:b9), Dst: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Destination: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Source: 00:1b:2f:37:c7:b9 (00:1b:2f:37:c7:b9) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.131 (165.227.249.131), Dst: 165.227.249.150 (165.227.249.150) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 208 Identification: 0x0000 (0) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb3b [correct] Good: True Bad : False Source: 165.227.249.131 (165.227.249.131) Destination: 165.227.249.150 (165.227.249.150) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 188 Checksum: 0xf7f9 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x240F13E296B7634B Responder cookie: 0x50B0F522E5A5B6BD Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 180 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 20 Nonce Data 0000 00 0c 29 96 e1 fa 00 1b 2f 37 c7 b9 08 00 45 00 ..)...../7....E. 0010 00 d0 00 00 40 00 40 11 fb 3b a5 e3 f9 83 a5 e3 ....@.@..;...... 0020 f9 96 01 f4 01 f4 00 bc f7 f9 24 0f 13 e2 96 b7 ..........$..... 0030 63 4b 50 b0 f5 22 e5 a5 b6 bd 04 10 02 00 00 00 cKP..".......... 0040 00 00 00 00 00 b4 0a 00 00 84 05 75 25 39 3c 6d ...........u%9..G 0050 e5 eb b0 6d 56 b6 93 5c 82 f7 a2 b2 17 6f b2 81 ...mV..\.....o.. 0060 be da bf 82 cc e7 95 ea 8e d3 de 55 e9 d3 d9 2f ...........U.../ 0070 3f 5c d6 e3 9a 37 85 10 0c 8a cd 4f 0f cc 58 26 ?\...7.....O..X& 0080 af f1 f7 9c 31 d1 21 43 f9 52 98 93 0b 66 ....1.!C.R...f Frame 6 (110 bytes on wire, 110 bytes captured) Arrival Time: Sep 20, 2007 15:38:26.416977000 Time delta from previous packet: 0.313416000 seconds Time since reference or first frame: 0.945183000 seconds Frame Number: 6 Packet Length: 110 bytes Capture Length: 110 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:1b:2f:37:c7:b9 (00:1b:2f:37:c7:b9), Dst: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Destination: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Source: 00:1b:2f:37:c7:b9 (00:1b:2f:37:c7:b9) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.131 (165.227.249.131), Dst: 165.227.249.150 (165.227.249.150) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0x0000 (0) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfbab [correct] Good: True Bad : False Source: 165.227.249.131 (165.227.249.131) Destination: 165.227.249.150 (165.227.249.150) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 76 Checksum: 0x2280 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x240F13E296B7634B Responder cookie: 0x50B0F522E5A5B6BD Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 68 Encrypted payload (40 bytes) 0000 00 0c 29 96 e1 fa 00 1b 2f 37 c7 b9 08 00 45 00 ..)...../7....E. 0010 00 60 00 00 40 00 40 11 fb ab a5 e3 f9 83 a5 e3 .`..@.@......... 0020 f9 96 01 f4 01 f4 00 4c 22 80 24 0f 13 e2 96 b7 .......L".$..... 0030 63 4b 50 b0 f5 22 e5 a5 b6 bd 05 10 02 01 00 00 cKP..".......... 0040 00 00 00 00 00 44 24 97 c0 5f d4 5e cb 39 6d 29 .....D$.._.^.9m) 0050 37 63 dd 2b 63 79 61 9a 96 2c 73 3c f9 1e 2f b6 7c.+cya..,s<../. 0060 d6 ca 10 ce b3 29 14 ad 3a 13 6b f1 2b 7e .....)..:.k.+~ Frame 7 (334 bytes on wire, 334 bytes captured) Arrival Time: Sep 20, 2007 15:38:26.445413000 Time delta from previous packet: 0.028436000 seconds Time since reference or first frame: 0.973619000 seconds Frame Number: 7 Packet Length: 334 bytes Capture Length: 334 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa), Dst: 00:1b:2f:37:c7:b9 (00:1b:2f:37:c7:b9) Destination: 00:1b:2f:37:c7:b9 (00:1b:2f:37:c7:b9) Source: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.131 (165.227.249.131) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 320 Identification: 0x416d (16749) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xb95e [correct] Good: True Bad : False Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.131 (165.227.249.131) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 300 Checksum: 0x35e7 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x240F13E296B7634B Responder cookie: 0x50B0F522E5A5B6BD Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0xC18F57E4 Length: 292 Encrypted payload (264 bytes) 0000 00 1b 2f 37 c7 b9 00 0c 29 96 e1 fa 08 00 45 00 ../7....).....E. 0010 01 40 41 6d 00 00 80 11 b9 5e a5 e3 f9 96 a5 e3 .@Am.....^...... 0020 f9 83 01 f4 01 f4 01 2c 35 e7 24 0f 13 e2 96 b7 .......,5.$..... 0030 63 4b 50 b0 f5 22 e5 a5 b6 bd 08 10 20 01 c1 8f cKP.."...... ... 0040 57 e4 00 00 01 24 28 06 3e 63 d4 a7 a9 7f 4c 3e W....$(.>c....L> 0050 45 46 1a ab 55 d1 db 66 2d 91 1f a5 4e ac 1b ea EF..U..f-...N... 0060 68 b1 3a 73 eb a4 b1 ad c1 cb 73 11 08 d7 ea e7 h.:s......s..... 0070 0e bb 6a 24 e9 32 90 63 63 3a 97 e4 55 81 71 ac ..j$.2.cc:..U.q. 0080 ee 2c cb 05 75 83 f5 e3 e7 a0 67 02 7e bf 47 9c .,..u.....g.~.G. 0090 52 e0 2a 06 4c 91 9b 25 13 da 64 6a 7b 57 b3 ef R.*.L..%..dj{W.. 00a0 d0 84 0f 04 a7 97 81 d9 ff b2 78 4e ef 97 18 7c ..........xN...| 00b0 12 bf 2f a3 18 70 05 19 6b 31 f0 8e 7a f7 3a f1 ../..p..k1..z.:. 00c0 4b 9b b6 15 83 69 1d ea 7d 62 43 b4 ce fe 4e d5 K....i..}bC...N. 00d0 b6 61 36 be 21 99 01 6f 58 15 c6 d5 c9 82 3b 9d .a6.!..oX.....;. 00e0 ff 55 a0 2b 51 22 5d 02 aa f2 78 34 3e 0b 9d ad .U.+Q"]...x4>... 00f0 cd 67 0e 1c ba 9a 9f 0e bb 44 fb 4e 53 f3 01 ff .g.......D.NS... 0100 3c b1 52 e8 fb d7 52 c7 69 02 37 e5 39 f3 60 a3 <.R...R.i.7.9.`. 0110 47 24 17 07 e6 95 45 f2 4c a1 3d 1b e0 0a f4 1b G$....E.L.=..... 0120 78 6a f2 d6 c9 6d 23 87 75 83 eb 47 4e f6 68 a1 xj...m#.u..GN.h. 0130 7f 67 7a 3f 9f fb 41 5c ea b9 bf 60 62 93 12 5b .gz?..A\...`b..[ 0140 64 0d 69 27 4c 2e df bb cf e7 79 a8 62 14 d.i'L.....y.b. Frame 8 (326 bytes on wire, 326 bytes captured) Arrival Time: Sep 20, 2007 15:38:27.015701000 Time delta from previous packet: 0.570288000 seconds Time since reference or first frame: 1.543907000 seconds Frame Number: 8 Packet Length: 326 bytes Capture Length: 326 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:1b:2f:37:c7:b9 (00:1b:2f:37:c7:b9), Dst: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Destination: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Source: 00:1b:2f:37:c7:b9 (00:1b:2f:37:c7:b9) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.131 (165.227.249.131), Dst: 165.227.249.150 (165.227.249.150) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 312 Identification: 0x0000 (0) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfad3 [correct] Good: True Bad : False Source: 165.227.249.131 (165.227.249.131) Destination: 165.227.249.150 (165.227.249.150) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 292 Checksum: 0x7cc5 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x240F13E296B7634B Responder cookie: 0x50B0F522E5A5B6BD Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0xC18F57E4 Length: 284 Encrypted payload (256 bytes) 0000 00 0c 29 96 e1 fa 00 1b 2f 37 c7 b9 08 00 45 00 ..)...../7....E. 0010 01 38 00 00 40 00 40 11 fa d3 a5 e3 f9 83 a5 e3 .8..@.@......... 0020 f9 96 01 f4 01 f4 01 24 7c c5 24 0f 13 e2 96 b7 .......$|.$..... 0030 63 4b 50 b0 f5 22 e5 a5 b6 bd 08 10 20 01 c1 8f cKP.."...... ... 0040 57 e4 00 00 01 1c 8b b2 b0 75 f0 84 ee 39 6d c4 W........u...9m. 0050 0b 53 bc cf d8 6e a2 c1 38 db 10 80 d6 5b 8a 88 .S...n..8....[.. 0060 23 1d f4 a1 05 92 40 fe ec 1f 04 ad 69 82 72 97 #.....@.....i.r. 0070 e2 4c a5 19 fb 6e 8c 03 43 ff d7 2e 3f d3 35 40 .L...n..C...?.5@ 0080 92 4c 28 70 a7 65 6b 3e bc 7d 3f e5 28 83 9e 0e .L(p.ek>.}?.(... 0090 ea 71 3c 41 90 76 b4 dd 71 89 f5 93 cd 85 d3 52 .q.J.,p.".%..... 00c0 b6 99 93 8d 28 fa a4 eb f3 90 75 3b da 4a ab a8 ....(.....u;.J.. 00d0 80 8e 0e 97 a5 e3 65 7f 9a c0 e7 14 08 36 2e 71 ......e......6.q 00e0 1e df ae c5 0c db 68 e5 49 dc a4 fd 2f 0a ae 00 ......h.I.../... 00f0 f9 2d d4 00 9c d9 ba e6 14 35 58 7a 79 9d 97 bc .-.......5Xzy... 0100 9b 70 be 1c 3f 35 59 47 47 81 ca 3b 38 d2 d3 20 .p..?5YGG..;8.. 0110 2b b9 af 6e 56 75 9b 8d 0e 6c 13 35 10 8b 37 6c +..nVu...l.5..7l 0120 6f 49 19 99 b3 a2 94 ce af 3a 80 17 47 da 93 4a oI.......:..G..J 0130 fe 7b a6 b2 89 60 a2 dd 1d c8 13 84 74 07 93 88 .{...`......t... 0140 24 4d fd fb f1 a5 $M.... Frame 9 (102 bytes on wire, 102 bytes captured) Arrival Time: Sep 20, 2007 15:38:27.138100000 Time delta from previous packet: 0.122399000 seconds Time since reference or first frame: 1.666306000 seconds Frame Number: 9 Packet Length: 102 bytes Capture Length: 102 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa), Dst: 00:1b:2f:37:c7:b9 (00:1b:2f:37:c7:b9) Destination: 00:1b:2f:37:c7:b9 (00:1b:2f:37:c7:b9) Source: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.131 (165.227.249.131) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 88 Identification: 0x416e (16750) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xba45 [correct] Good: True Bad : False Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.131 (165.227.249.131) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 68 Checksum: 0x8522 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x240F13E296B7634B Responder cookie: 0x50B0F522E5A5B6BD Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0xC18F57E4 Length: 60 Encrypted payload (32 bytes) 0000 00 1b 2f 37 c7 b9 00 0c 29 96 e1 fa 08 00 45 00 ../7....).....E. 0010 00 58 41 6e 00 00 80 11 ba 45 a5 e3 f9 96 a5 e3 .XAn.....E...... 0020 f9 83 01 f4 01 f4 00 44 85 22 24 0f 13 e2 96 b7 .......D."$..... 0030 63 4b 50 b0 f5 22 e5 a5 b6 bd 08 10 20 01 c1 8f cKP.."...... ... 0040 57 e4 00 00 00 3c 52 7e e3 b9 d6 ba fc 58 bd a3 W..... 0080 35 ba fa 0d 62 f5 d9 5f 89 2f fa 51 ab ad 24 ff 5...b.._./.Q..$. 0090 32 f2 f3 0d 32 3f 70 d2 a0 1d 53 59 2c a8 6a 2f 2...2?p...SY,.j/ 00a0 83 cd 5a 41 c5 06 cc 90 15 78 29 fb 8b cb 55 b3 ..ZA.....x)...U. 00b0 4a a7 58 b8 2e cb a3 11 f3 89 10 c7 52 9c a0 2c J.X.........R.., 00c0 c7 00 fb 28 a6 7b f8 b9 6d b2 85 e4 52 a8 5c d1 ...(.{..m...R.\. 00d0 86 47 ba 39 0e d5 c1 d0 8b b8 34 26 8c ec 39 95 .G.9......4&..9. 00e0 23 b5 bf c3 53 64 2f cb 1d a2 d6 bc 22 d4 e1 c6 #...Sd/....."... 00f0 40 87 a4 fd 69 aa 4a 7d 68 d6 20 e3 ad 5b c4 70 @...i.J}h. ..[.p 0100 0a 5c 4b b4 c8 c9 06 f6 f5 33 6e 8a f2 57 e0 c3 .\K......3n..W.. 0110 cd 8f 89 c5 1b 32 b0 d7 50 18 0b 23 38 12 1b 33 .....2..P..#8..3 0120 84 fa 70 4a f3 b2 50 29 5a b0 f7 7e d7 b7 a8 68 ..pJ..P)Z..~...h 0130 2d ef d7 03 6f af eb dd eb 4e 50 cb 48 bd cd 3a -...o....NP.H..: 0140 8d c1 1a 3c b0 3a 49 25 9f 6a 8c 56 23 7d 72 c7 ...<.:I%.j.V#}r. 0150 24 11 a5 23 8b 50 ce 18 25 33 7d c5 e7 c5 56 37 $..#.P..%3}...V7 0160 f9 e5 a6 f5 e6 7a d1 4a fa 3f cb 70 0f 94 6a ef .....z.J.?.p..j. 0170 89 7f a5 4e 17 66 64 59 47 dc 17 8b 62 a5 5d b3 ...N.fdYG...b.]. 0180 71 51 c4 67 31 a6 46 43 32 13 4a bf 06 65 qQ.g1.FC2.J..e Frame 11 (398 bytes on wire, 398 bytes captured) Arrival Time: Sep 20, 2007 15:38:33.817970000 Time delta from previous packet: 0.446527000 seconds Time since reference or first frame: 8.346176000 seconds Frame Number: 11 Packet Length: 398 bytes Capture Length: 398 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:1b:2f:37:c7:b9 (00:1b:2f:37:c7:b9), Dst: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Destination: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Source: 00:1b:2f:37:c7:b9 (00:1b:2f:37:c7:b9) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.131 (165.227.249.131), Dst: 165.227.249.150 (165.227.249.150) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 384 Identification: 0x1bcd (7117) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x1e9e [correct] Good: True Bad : False Source: 165.227.249.131 (165.227.249.131) Destination: 165.227.249.150 (165.227.249.150) Encapsulating Security Payload SPI: 0x339aabea Sequence: 1 Data (356 bytes) 0000 00 0c 29 96 e1 fa 00 1b 2f 37 c7 b9 08 00 45 00 ..)...../7....E. 0010 01 80 1b cd 00 00 40 32 1e 9e a5 e3 f9 83 a5 e3 ......@2........ 0020 f9 96 33 9a ab ea 00 00 00 01 7d 38 4d e4 1d 8e ..3.......}8M... 0030 9f 6f b2 27 93 a1 3e 2b db a5 62 79 67 30 33 3e .o.'..>+..byg03> 0040 4d 77 30 d3 11 78 1a 57 35 5b 45 6f 50 4b a0 0b Mw0..x.W5[EoPK.. 0050 4b 23 ea 49 bb aa 3d 52 e6 90 91 f0 9f b6 cc 45 K#.I..=R.......E 0060 a1 bd dc 17 01 37 6a 7c ce eb 08 26 06 4a 4b 60 .....7j|...&.JK` 0070 fd e5 d4 52 9f ac cc 39 a7 ac 87 61 45 33 f6 5a ...R...9...aE3.Z 0080 34 89 cc ae d0 91 71 ef 50 1d be 31 ba 35 61 3b 4.....q.P..1.5a; 0090 9c 05 3b 84 36 16 6f 93 3e 73 28 ce 40 1c 22 ff ..;.6.o.>s(.@.". 00a0 f3 17 5d bb 02 7a 24 76 38 98 69 1a 97 b2 fb 47 ..]..z$v8.i....G 00b0 dd e9 83 5c 43 92 5a 00 c9 02 87 5e 40 af dc c9 ...\C.Z....^@... 00c0 6f e8 a8 00 fd 03 52 6b ca 04 51 58 27 c2 bf 08 o.....Rk..QX'... 00d0 c5 7d 8c b9 a6 62 fc cf 27 ea 2e 35 a0 31 21 d6 .}...b..'..5.1!. 00e0 90 6c 86 c5 81 f3 2f a5 0b 1b c9 f3 97 74 39 75 .l..../......t9u 00f0 20 8b 00 f6 16 bf 69 4c 69 a6 14 e6 1c 99 a8 31 .....iLi......1 0100 0a 3c e0 21 3a 23 94 42 60 07 b5 f9 90 6a 21 07 .<.!:#.B`....j!. 0110 af 94 4f f6 c9 b6 a7 af 89 e0 49 06 17 40 f8 8d ..O.......I..@.. 0120 2f 45 8d b3 b6 64 ad b1 d8 40 0d c9 c5 c1 17 d0 /E...d...@...... 0130 97 0e 16 dd 83 c5 fa f2 35 39 e4 19 29 67 af fe ........59..)g.. 0140 2b 61 6c de 29 37 59 6b 14 52 0e 16 d4 30 b8 75 +al.)7Yk.R...0.u 0150 0f f2 f6 da 3b 30 71 a3 c1 ac 86 59 3e 52 a6 de ....;0q....Y>R.. 0160 c5 81 ff 13 f0 c6 0e 5d c6 58 76 02 02 55 8e 39 .......].Xv..U.9 0170 07 06 d1 e5 2c b4 d0 3b bd 89 63 52 54 72 e7 08 ....,..;..cRTr.. 0180 6f 60 30 22 00 7d 84 d0 0b bc 7d d3 c0 59 o`0".}....}..Y