Frame 1 (222 bytes on wire, 222 bytes captured) Arrival Time: Aug 14, 2006 12:29:49.035567000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 222 bytes Capture Length: 222 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa), Dst: 00:09:5b:b0:f5:3d (00:09:5b:b0:f5:3d) Destination: 00:09:5b:b0:f5:3d (00:09:5b:b0:f5:3d) Source: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.136 (165.227.249.136) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 208 Identification: 0x01a1 (417) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf995 [correct] Good: True Bad : False Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.136 (165.227.249.136) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 188 Checksum: 0x28fb [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x5BD78FBB9DF52402 Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 180 Security Association payload Next payload: Vendor ID (13) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 40 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 32 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: unknown vendor ID: 0x4A131C81070358455C5728F20E95452F Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-03 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: RFC 3706 Detecting Dead IKE Peers (DPD) 0000 00 09 5b b0 f5 3d 00 0c 29 96 e1 fa 08 00 45 00 ..[..=..).....E. 0010 00 d0 01 a1 00 00 80 11 f9 95 a5 e3 f9 96 a5 e3 ................ 0020 f9 88 01 f4 01 f4 00 bc 28 fb 5b d7 8f bb 9d f5 ........(.[..... 0030 24 02 00 00 00 00 00 00 00 00 01 10 02 00 00 00 $............... 0040 00 00 00 00 00 b4 0d 00 00 34 00 00 00 01 00 00 .........4...... 0050 00 01 00 00 00 28 01 01 00 01 00 00 00 20 01 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 04 00 02 80 03 ................ 0070 00 01 80 0b 00 01 80 0c 70 80 0d 00 00 14 4a 13 ........p.....J. 0080 1c 81 07 03 58 45 5c 57 28 f2 0e 95 45 2f 0d 00 ....XE\W(...E/.. 0090 00 14 7d 94 19 a6 53 10 ca 6f 2c 17 9d 92 15 52 ..}...S..o,....R 00a0 9d 56 0d 00 00 14 90 cb 80 91 3e bb 69 6e 08 63 .V........>.in.c 00b0 81 b5 ec 42 7b 1f 0d 00 00 14 44 85 15 2d 18 b6 ...B{.....D..-.. 00c0 bb cd 0b e8 a8 46 95 79 dd cc 00 00 00 14 af ca .....F.y........ 00d0 d7 13 68 a1 f1 c9 6b 86 96 fc 77 57 01 00 ..h...k...wW.. Frame 2 (122 bytes on wire, 122 bytes captured) Arrival Time: Aug 14, 2006 12:29:49.035649000 Time delta from previous packet: 0.000082000 seconds Time since reference or first frame: 0.000082000 seconds Frame Number: 2 Packet Length: 122 bytes Capture Length: 122 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:09:5b:b0:f5:3d (00:09:5b:b0:f5:3d), Dst: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Destination: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Source: 00:09:5b:b0:f5:3d (00:09:5b:b0:f5:3d) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.136 (165.227.249.136), Dst: 165.227.249.150 (165.227.249.150) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 108 Identification: 0x01d5 (469) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x39c6 [correct] Good: True Bad : False Source: 165.227.249.136 (165.227.249.136) Destination: 165.227.249.150 (165.227.249.150) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 88 Checksum: 0xcd4f [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x5BD78FBB9DF52402 Responder cookie: 0xB4F6575C95FE28B3 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 80 Security Association payload Next payload: NONE (0) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 40 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 32 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) 0000 00 0c 29 96 e1 fa 00 09 5b b0 f5 3d 08 00 45 00 ..).....[..=..E. 0010 00 6c 01 d5 00 00 40 11 39 c6 a5 e3 f9 88 a5 e3 .l....@.9....... 0020 f9 96 01 f4 01 f4 00 58 cd 4f 5b d7 8f bb 9d f5 .......X.O[..... 0030 24 02 b4 f6 57 5c 95 fe 28 b3 01 10 02 00 00 00 $...W\..(....... 0040 00 00 00 00 00 50 00 00 00 34 00 00 00 01 00 00 .....P...4...... 0050 00 01 00 00 00 28 01 01 00 01 00 00 00 20 01 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 04 00 02 80 03 ................ 0070 00 01 80 0b 00 01 80 0c 70 80 ........p. Frame 3 (222 bytes on wire, 222 bytes captured) Arrival Time: Aug 14, 2006 12:29:49.056983000 Time delta from previous packet: 0.021334000 seconds Time since reference or first frame: 0.021416000 seconds Frame Number: 3 Packet Length: 222 bytes Capture Length: 222 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa), Dst: 00:09:5b:b0:f5:3d (00:09:5b:b0:f5:3d) Destination: 00:09:5b:b0:f5:3d (00:09:5b:b0:f5:3d) Source: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.136 (165.227.249.136) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 208 Identification: 0x01a2 (418) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf994 [correct] Good: True Bad : False Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.136 (165.227.249.136) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 188 Checksum: 0x7a36 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x5BD78FBB9DF52402 Responder cookie: 0xB4F6575C95FE28B3 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 180 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 20 Nonce Data 0000 00 09 5b b0 f5 3d 00 0c 29 96 e1 fa 08 00 45 00 ..[..=..).....E. 0010 00 d0 01 a2 00 00 80 11 f9 94 a5 e3 f9 96 a5 e3 ................ 0020 f9 88 01 f4 01 f4 00 bc 7a 36 5b d7 8f bb 9d f5 ........z6[..... 0030 24 02 b4 f6 57 5c 95 fe 28 b3 04 10 02 00 00 00 $...W\..(....... 0040 00 00 00 00 00 b4 0a 00 00 84 73 7c 20 7d 7a c6 ..........s| }z. 0050 67 d7 ba 96 af 5e 0e 61 06 3f b6 86 0c f9 6b 81 g....^.a.?....k. 0060 e2 f3 ee 06 3e 38 46 aa 67 68 1d 0f 68 9f d7 0c ....>8F.gh..h... 0070 9f 0b 01 6f b6 a9 ee 15 7f cd eb 18 e8 3c 81 11 ...o.........<.. 0080 f0 0c f1 22 68 7c 6e 93 d8 e0 23 3d 37 17 0b 9d ..."h|n...#=7... 0090 5f 2b c6 ef ed 04 42 a1 d1 92 e2 58 46 6b d7 c1 _+....B....XFk.. 00a0 c5 71 70 e9 8b cb 59 d1 dc 52 87 5d 43 7a 69 58 .qp...Y..R.]CziX 00b0 0f 00 57 e2 28 54 7a bd 14 3b d8 a7 04 8b ed 26 ..W.(Tz..;.....& 00c0 df 7f c3 74 54 74 7a 21 53 59 00 00 00 14 ea da ...tTtz!SY...... 00d0 2b 91 a3 91 55 7f 7e 5e 39 34 8d 66 12 9d +...U.~^94.f.. Frame 4 (214 bytes on wire, 214 bytes captured) Arrival Time: Aug 14, 2006 12:29:49.596525000 Time delta from previous packet: 0.539542000 seconds Time since reference or first frame: 0.560958000 seconds Frame Number: 4 Packet Length: 214 bytes Capture Length: 214 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:09:5b:b0:f5:3d (00:09:5b:b0:f5:3d), Dst: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Destination: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Source: 00:09:5b:b0:f5:3d (00:09:5b:b0:f5:3d) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.136 (165.227.249.136), Dst: 165.227.249.150 (165.227.249.150) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 200 Identification: 0x01d6 (470) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3969 [correct] Good: True Bad : False Source: 165.227.249.136 (165.227.249.136) Destination: 165.227.249.150 (165.227.249.150) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 180 Checksum: 0x13d3 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x5BD78FBB9DF52402 Responder cookie: 0xB4F6575C95FE28B3 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 172 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 12 Nonce Data 0000 00 0c 29 96 e1 fa 00 09 5b b0 f5 3d 08 00 45 00 ..).....[..=..E. 0010 00 c8 01 d6 00 00 40 11 39 69 a5 e3 f9 88 a5 e3 ......@.9i...... 0020 f9 96 01 f4 01 f4 00 b4 13 d3 5b d7 8f bb 9d f5 ..........[..... 0030 24 02 b4 f6 57 5c 95 fe 28 b3 04 10 02 00 00 00 $...W\..(....... 0040 00 00 00 00 00 ac 0a 00 00 84 f0 03 6b ab 83 5e ............k..^ 0050 2e b2 98 a4 bf f6 ab 07 c3 5c 97 3a 80 5f 64 86 .........\.:._d. 0060 dc 58 3b 9d bc e8 b8 56 77 6f f3 0e 89 d2 98 f3 .X;....Vwo...... 0070 c3 db 88 bf 33 ca e3 04 de c9 44 dd 42 dd c9 14 ....3.....D.B... 0080 62 59 26 73 82 c7 a5 10 70 1e df bf 4c 5f 70 91 bY&s....p...L_p. 0090 9d 6b 39 4b d3 6c c1 e3 57 7f 64 80 0d 0e 13 f6 .k9K.l..W.d..... 00a0 b5 1d bd 51 76 0a 4e 72 4f 5c df 68 a3 f7 9a 35 ...Qv.NrO\.h...5 00b0 cc 3b e3 44 cf 49 23 58 bb ee e2 a6 40 ec 8b c2 .;.D.I#X....@... 00c0 0d 1e 3d 38 36 0e 7e 4b b7 37 00 00 00 0c 84 f9 ..=86.~K.7...... 00d0 9a 02 24 a6 6e 5c ..$.n\ Frame 5 (142 bytes on wire, 142 bytes captured) Arrival Time: Aug 14, 2006 12:29:49.627105000 Time delta from previous packet: 0.030580000 seconds Time since reference or first frame: 0.591538000 seconds Frame Number: 5 Packet Length: 142 bytes Capture Length: 142 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa), Dst: 00:09:5b:b0:f5:3d (00:09:5b:b0:f5:3d) Destination: 00:09:5b:b0:f5:3d (00:09:5b:b0:f5:3d) Source: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.136 (165.227.249.136) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 128 Identification: 0x01a3 (419) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf9e3 [correct] Good: True Bad : False Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.136 (165.227.249.136) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 108 Checksum: 0xd270 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x5BD78FBB9DF52402 Responder cookie: 0xB4F6575C95FE28B3 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 100 Encrypted payload (72 bytes) 0000 00 09 5b b0 f5 3d 00 0c 29 96 e1 fa 08 00 45 00 ..[..=..).....E. 0010 00 80 01 a3 00 00 80 11 f9 e3 a5 e3 f9 96 a5 e3 ................ 0020 f9 88 01 f4 01 f4 00 6c d2 70 5b d7 8f bb 9d f5 .......l.p[..... 0030 24 02 b4 f6 57 5c 95 fe 28 b3 05 10 02 01 00 00 $...W\..(....... 0040 00 00 00 00 00 64 30 fb 4a d7 d6 cf 9a 5a 4f d1 .....d0.J....ZO. 0050 70 a3 d6 99 4b 60 3e 08 a8 c1 6f 5f ec 74 c4 0e p...K`>...o_.t.. 0060 c5 79 97 5b 21 61 99 e0 09 46 46 77 ba a6 2b 6e .y.[!a...FFw..+n 0070 56 05 ff 2b da 54 ea 0e a0 bf c7 f4 d7 81 6a 4e V..+.T........jN 0080 c9 36 21 28 b2 b6 f5 e2 4b 6c 3e e7 64 6a .6!(....Kl>.dj Frame 6 (110 bytes on wire, 110 bytes captured) Arrival Time: Aug 14, 2006 12:29:50.285281000 Time delta from previous packet: 0.658176000 seconds Time since reference or first frame: 1.249714000 seconds Frame Number: 6 Packet Length: 110 bytes Capture Length: 110 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:09:5b:b0:f5:3d (00:09:5b:b0:f5:3d), Dst: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Destination: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Source: 00:09:5b:b0:f5:3d (00:09:5b:b0:f5:3d) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.136 (165.227.249.136), Dst: 165.227.249.150 (165.227.249.150) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0x01d7 (471) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x39d0 [correct] Good: True Bad : False Source: 165.227.249.136 (165.227.249.136) Destination: 165.227.249.150 (165.227.249.150) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 76 Checksum: 0x2a8f [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x5BD78FBB9DF52402 Responder cookie: 0xB4F6575C95FE28B3 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 68 Encrypted payload (40 bytes) 0000 00 0c 29 96 e1 fa 00 09 5b b0 f5 3d 08 00 45 00 ..).....[..=..E. 0010 00 60 01 d7 00 00 40 11 39 d0 a5 e3 f9 88 a5 e3 .`....@.9....... 0020 f9 96 01 f4 01 f4 00 4c 2a 8f 5b d7 8f bb 9d f5 .......L*.[..... 0030 24 02 b4 f6 57 5c 95 fe 28 b3 05 10 02 01 00 00 $...W\..(....... 0040 00 00 00 00 00 44 58 f9 a9 44 30 b2 25 07 1a 69 .....DX..D0.%..i 0050 51 17 76 d6 48 bf c9 fa f0 62 bd 04 f8 da 57 7f Q.v.H....b....W. 0060 be 36 f8 84 48 bb 40 d6 77 51 54 24 bb 86 .6..H.@.wQT$.. Frame 7 (334 bytes on wire, 334 bytes captured) Arrival Time: Aug 14, 2006 12:29:50.315945000 Time delta from previous packet: 0.030664000 seconds Time since reference or first frame: 1.280378000 seconds Frame Number: 7 Packet Length: 334 bytes Capture Length: 334 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa), Dst: 00:09:5b:b0:f5:3d (00:09:5b:b0:f5:3d) Destination: 00:09:5b:b0:f5:3d (00:09:5b:b0:f5:3d) Source: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.136 (165.227.249.136) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 320 Identification: 0x01a4 (420) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf922 [correct] Good: True Bad : False Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.136 (165.227.249.136) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 300 Checksum: 0x08b1 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x5BD78FBB9DF52402 Responder cookie: 0xB4F6575C95FE28B3 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0xED62CDAD Length: 292 Encrypted payload (264 bytes) 0000 00 09 5b b0 f5 3d 00 0c 29 96 e1 fa 08 00 45 00 ..[..=..).....E. 0010 01 40 01 a4 00 00 80 11 f9 22 a5 e3 f9 96 a5 e3 .@......."...... 0020 f9 88 01 f4 01 f4 01 2c 08 b1 5b d7 8f bb 9d f5 .......,..[..... 0030 24 02 b4 f6 57 5c 95 fe 28 b3 08 10 20 01 ed 62 $...W\..(... ..b 0040 cd ad 00 00 01 24 0e 50 bf cb a9 30 40 6e 81 1e .....$.P...0@n.. 0050 bc e1 f4 d7 be 1f 09 7f e7 cd f8 43 ec d4 82 b4 ...........C.... 0060 3c ba 46 5d 14 de 97 86 76 b1 36 06 bc 68 49 d0 <.F]....v.6..hI. 0070 7d 41 a1 71 1f a9 88 fe d0 58 48 3b 40 b4 7d 6b }A.q.....XH;@.}k 0080 83 05 8e fe b2 65 0c 3f 44 3d 23 9a e5 c7 d8 e2 .....e.?D=#..... 0090 73 7f 23 19 8e e3 43 5f cd 86 d1 03 c1 6d 44 f8 s.#...C_.....mD. 00a0 a5 35 de 73 a1 44 ba 57 53 4f 0b 4f 92 95 3a c8 .5.s.D.WSO.O..:. 00b0 5e 1c d3 7b 0f 2b bc 30 28 ff 5b a7 46 b8 18 43 ^..{.+.0(.[.F..C 00c0 03 f0 7d b8 49 e1 5f 36 35 a4 5f 36 48 1e 30 97 ..}.I._65._6H.0. 00d0 73 35 76 5a 27 1f e7 89 e7 98 81 28 80 d8 23 b9 s5vZ'......(..#. 00e0 f6 ef cf d3 f3 a5 c6 4c 9f 8f 3c 13 46 d0 ef c5 .......L..<.F... 00f0 b9 96 50 96 b7 08 b5 8d 37 cd e3 a8 97 c9 b9 d0 ..P.....7....... 0100 8e 38 a4 26 e1 ea 61 0e e2 44 9d cc 18 2e 7f ce .8.&..a..D...... 0110 b4 66 8d fc eb 24 e5 4d f3 28 c1 75 60 0e 60 1f .f...$.M.(.u`.`. 0120 2b 15 a3 a8 f7 23 61 7c b2 41 a9 42 bc 59 47 7b +....#a|.A.B.YG{ 0130 62 08 24 97 60 e1 19 f7 31 22 29 98 79 56 b3 02 b.$.`...1").yV.. 0140 ab 06 5c 28 a3 d0 f1 b6 5f d2 ea 4f 22 65 ..\(...._..O"e Frame 8 (318 bytes on wire, 318 bytes captured) Arrival Time: Aug 14, 2006 12:29:50.833719000 Time delta from previous packet: 0.517774000 seconds Time since reference or first frame: 1.798152000 seconds Frame Number: 8 Packet Length: 318 bytes Capture Length: 318 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:09:5b:b0:f5:3d (00:09:5b:b0:f5:3d), Dst: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Destination: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Source: 00:09:5b:b0:f5:3d (00:09:5b:b0:f5:3d) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.136 (165.227.249.136), Dst: 165.227.249.150 (165.227.249.150) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 304 Identification: 0x01d8 (472) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x38ff [correct] Good: True Bad : False Source: 165.227.249.136 (165.227.249.136) Destination: 165.227.249.150 (165.227.249.150) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 284 Checksum: 0x2630 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x5BD78FBB9DF52402 Responder cookie: 0xB4F6575C95FE28B3 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0xED62CDAD Length: 276 Encrypted payload (248 bytes) 0000 00 0c 29 96 e1 fa 00 09 5b b0 f5 3d 08 00 45 00 ..).....[..=..E. 0010 01 30 01 d8 00 00 40 11 38 ff a5 e3 f9 88 a5 e3 .0....@.8....... 0020 f9 96 01 f4 01 f4 01 1c 26 30 5b d7 8f bb 9d f5 ........&0[..... 0030 24 02 b4 f6 57 5c 95 fe 28 b3 08 10 20 01 ed 62 $...W\..(... ..b 0040 cd ad 00 00 01 14 1c 5b 3b d7 a7 a2 99 5f 95 50 .......[;...._.P 0050 dc e7 f4 76 0b a2 98 30 b5 a1 dd d9 49 87 eb 7d ...v...0....I..} 0060 e6 7b 5a 06 3c 0b d4 55 bf 06 66 a3 02 ce 65 51 .{Z.<..U..f...eQ 0070 18 90 15 8e 7c 36 81 2b f3 cc 0e 89 01 e9 2c 54 ....|6.+......,T 0080 60 cc 81 69 ca d9 b4 27 1f e1 d0 c5 b3 2b 12 03 `..i...'.....+.. 0090 f7 ef 10 8b 9c 53 a4 6f c4 8b c2 95 dc 65 6c ff .....S.o.....el. 00a0 58 c2 25 fe 8f bc 06 cc a5 be 19 3a 36 65 e3 3c X.%........:6e.< 00b0 7a 81 40 41 eb 77 7d db 8d a9 22 f1 8a 67 ca 36 z.@A.w}..."..g.6 00c0 0a b2 5e a5 4c c6 f0 e8 5d d0 7f 46 33 03 74 f0 ..^.L...]..F3.t. 00d0 0d cc b3 84 20 db 00 8d de 6b 3b d2 2f 9f ff 71 .... ....k;./..q 00e0 5b f0 fb 55 6a ea 61 3b 13 70 c8 03 2e 82 bd a0 [..Uj.a;.p...... 00f0 da 1f 1d a0 c8 2e 0e af 07 06 46 c8 28 f7 ea 29 ..........F.(..) 0100 00 a2 89 ee b1 b3 4b b0 83 cb e8 d2 f0 68 ba 9e ......K......h.. 0110 f0 77 5b ca 18 fe 38 5d ef 8e 0a 7c a9 fa 3f dd .w[...8]...|..?. 0120 e7 2f 17 cd ba 96 12 7f 72 ab ee b8 a7 2d f2 55 ./......r....-.U 0130 72 38 6d 56 2f e5 96 e9 e0 73 0b 99 5b cb r8mV/....s..[. Frame 9 (102 bytes on wire, 102 bytes captured) Arrival Time: Aug 14, 2006 12:29:50.916674000 Time delta from previous packet: 0.082955000 seconds Time since reference or first frame: 1.881107000 seconds Frame Number: 9 Packet Length: 102 bytes Capture Length: 102 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa), Dst: 00:09:5b:b0:f5:3d (00:09:5b:b0:f5:3d) Destination: 00:09:5b:b0:f5:3d (00:09:5b:b0:f5:3d) Source: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.136 (165.227.249.136) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 88 Identification: 0x01a5 (421) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xfa09 [correct] Good: True Bad : False Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.136 (165.227.249.136) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 68 Checksum: 0xb096 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x5BD78FBB9DF52402 Responder cookie: 0xB4F6575C95FE28B3 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0xED62CDAD Length: 60 Encrypted payload (32 bytes) 0000 00 09 5b b0 f5 3d 00 0c 29 96 e1 fa 08 00 45 00 ..[..=..).....E. 0010 00 58 01 a5 00 00 80 11 fa 09 a5 e3 f9 96 a5 e3 .X.............. 0020 f9 88 01 f4 01 f4 00 44 b0 96 5b d7 8f bb 9d f5 .......D..[..... 0030 24 02 b4 f6 57 5c 95 fe 28 b3 08 10 20 01 ed 62 $...W\..(... ..b 0040 cd ad 00 00 00 3c e5 38 f0 b8 06 a8 67 20 8b 17 .....<.8....g .. 0050 e0 53 57 79 7b ed 71 38 b6 f1 62 d4 b9 27 db 42 .SWy{.q8..b..'.B 0060 fb 7d 3a 8c d8 13 .}:... Frame 10 (318 bytes on wire, 318 bytes captured) Arrival Time: Aug 14, 2006 12:29:54.745734000 Time delta from previous packet: 3.829060000 seconds Time since reference or first frame: 5.710167000 seconds Frame Number: 10 Packet Length: 318 bytes Capture Length: 318 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:09:5b:b0:f5:3d (00:09:5b:b0:f5:3d), Dst: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Destination: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Source: 00:09:5b:b0:f5:3d (00:09:5b:b0:f5:3d) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.136 (165.227.249.136), Dst: 165.227.249.150 (165.227.249.150) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 304 Identification: 0x01d9 (473) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x38fe [correct] Good: True Bad : False Source: 165.227.249.136 (165.227.249.136) Destination: 165.227.249.150 (165.227.249.150) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 284 Checksum: 0x2630 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x5BD78FBB9DF52402 Responder cookie: 0xB4F6575C95FE28B3 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0xED62CDAD Length: 276 Encrypted payload (248 bytes) 0000 00 0c 29 96 e1 fa 00 09 5b b0 f5 3d 08 00 45 00 ..).....[..=..E. 0010 01 30 01 d9 00 00 40 11 38 fe a5 e3 f9 88 a5 e3 .0....@.8....... 0020 f9 96 01 f4 01 f4 01 1c 26 30 5b d7 8f bb 9d f5 ........&0[..... 0030 24 02 b4 f6 57 5c 95 fe 28 b3 08 10 20 01 ed 62 $...W\..(... ..b 0040 cd ad 00 00 01 14 1c 5b 3b d7 a7 a2 99 5f 95 50 .......[;...._.P 0050 dc e7 f4 76 0b a2 98 30 b5 a1 dd d9 49 87 eb 7d ...v...0....I..} 0060 e6 7b 5a 06 3c 0b d4 55 bf 06 66 a3 02 ce 65 51 .{Z.<..U..f...eQ 0070 18 90 15 8e 7c 36 81 2b f3 cc 0e 89 01 e9 2c 54 ....|6.+......,T 0080 60 cc 81 69 ca d9 b4 27 1f e1 d0 c5 b3 2b 12 03 `..i...'.....+.. 0090 f7 ef 10 8b 9c 53 a4 6f c4 8b c2 95 dc 65 6c ff .....S.o.....el. 00a0 58 c2 25 fe 8f bc 06 cc a5 be 19 3a 36 65 e3 3c X.%........:6e.< 00b0 7a 81 40 41 eb 77 7d db 8d a9 22 f1 8a 67 ca 36 z.@A.w}..."..g.6 00c0 0a b2 5e a5 4c c6 f0 e8 5d d0 7f 46 33 03 74 f0 ..^.L...]..F3.t. 00d0 0d cc b3 84 20 db 00 8d de 6b 3b d2 2f 9f ff 71 .... ....k;./..q 00e0 5b f0 fb 55 6a ea 61 3b 13 70 c8 03 2e 82 bd a0 [..Uj.a;.p...... 00f0 da 1f 1d a0 c8 2e 0e af 07 06 46 c8 28 f7 ea 29 ..........F.(..) 0100 00 a2 89 ee b1 b3 4b b0 83 cb e8 d2 f0 68 ba 9e ......K......h.. 0110 f0 77 5b ca 18 fe 38 5d ef 8e 0a 7c a9 fa 3f dd .w[...8]...|..?. 0120 e7 2f 17 cd ba 96 12 7f 72 ab ee b8 a7 2d f2 55 ./......r....-.U 0130 72 38 6d 56 2f e5 96 e9 e0 73 0b 99 5b cb r8mV/....s..[. Frame 11 (398 bytes on wire, 398 bytes captured) Arrival Time: Aug 14, 2006 12:29:57.916721000 Time delta from previous packet: 3.170987000 seconds Time since reference or first frame: 8.881154000 seconds Frame Number: 11 Packet Length: 398 bytes Capture Length: 398 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa), Dst: 00:09:5b:b0:f5:3d (00:09:5b:b0:f5:3d) Destination: 00:09:5b:b0:f5:3d (00:09:5b:b0:f5:3d) Source: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.136 (165.227.249.136) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 384 Identification: 0x01a7 (423) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: ESP (0x32) Header checksum: 0xf8be [correct] Good: True Bad : False Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.136 (165.227.249.136) Encapsulating Security Payload SPI: 0xde758c0e Sequence: 1 Data (356 bytes) 0000 00 09 5b b0 f5 3d 00 0c 29 96 e1 fa 08 00 45 00 ..[..=..).....E. 0010 01 80 01 a7 00 00 80 32 f8 be a5 e3 f9 96 a5 e3 .......2........ 0020 f9 88 de 75 8c 0e 00 00 00 01 15 90 5a da 46 fb ...u........Z.F. 0030 d3 83 1d 4b af ac 32 24 43 5e d2 1a 24 22 30 3b ...K..2$C^..$"0; 0040 25 5c 89 a6 13 8a a1 ea af 0a 0a 45 f7 ab 03 c6 %\.........E.... 0050 8f 45 15 1d 5d 94 ad d2 10 ca 92 cd 56 28 2e c0 .E..].......V(.. 0060 57 ee 0d 62 5d c8 18 c9 80 f1 91 f5 2e 93 7b fd W..b].........{. 0070 9e 6e 31 6b 4e 41 46 af 11 01 20 40 da 77 0f b3 .n1kNAF... @.w.. 0080 ae 61 cb cd ba 0b 04 32 57 08 0b ce 2f c2 ea c1 .a.....2W.../... 0090 df 40 2d 12 58 93 2f f7 20 b5 c7 09 3a e0 c6 39 .@-.X./. ...:..9 00a0 04 57 07 7e 49 bd 1d 2f 3b 96 3d 1b ad 99 7a 29 .W.~I../;.=...z) 00b0 49 1a 05 45 a2 92 32 09 8a 25 46 0a a9 30 07 72 I..E..2..%F..0.r 00c0 45 3b a6 fb 85 81 eb f2 be 39 bf 12 a4 60 4c 6f E;.......9...`Lo 00d0 a4 d2 64 e9 57 3c 40 9c 7f 9a e2 b3 a1 0e 01 6b ..d.W<@........k 00e0 b7 7e 1e ea e7 30 75 16 b4 e3 fb 83 34 f5 a3 21 .~...0u.....4..! 00f0 93 2c 9c 47 ec 5d ad 84 a7 d6 8d 06 35 0a 3e 57 .,.G.]......5.>W 0100 2e d5 d4 71 1b e2 66 56 bf 76 c9 4c 47 74 c6 3b ...q..fV.v.LGt.; 0110 48 01 b6 50 b6 d0 30 65 22 a0 0c ce ef 97 f2 4e H..P..0e"......N 0120 a1 fd a4 dd 1c fe 6c f9 85 cd c8 6b a3 c1 dc 67 ......l....k...g 0130 84 06 5d 0f 4c c6 bc 54 c0 87 e2 1b 35 e4 28 68 ..].L..T....5.(h 0140 b9 56 35 ce be 30 d1 42 c0 1b 50 0c 1b 65 fa 22 .V5..0.B..P..e." 0150 f9 5a 23 f3 db b7 cd c7 0e 83 26 da 37 a8 80 d4 .Z#.......&.7... 0160 c9 3e b5 1f 5d 37 ed 3b 81 ca dd 22 06 7c 35 b6 .>..]7.;...".|5. 0170 91 3e 73 b1 08 4f 46 8d 91 21 64 d2 8c ab 56 36 .>s..OF..!d...V6 0180 b1 6e 42 1b 46 ba 19 23 cb 05 0d 2b 3b 20 .nB.F..#...+; Frame 12 (398 bytes on wire, 398 bytes captured) Arrival Time: Aug 14, 2006 12:29:57.925651000 Time delta from previous packet: 0.008930000 seconds Time since reference or first frame: 8.890084000 seconds Frame Number: 12 Packet Length: 398 bytes Capture Length: 398 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:09:5b:b0:f5:3d (00:09:5b:b0:f5:3d), Dst: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Destination: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Source: 00:09:5b:b0:f5:3d (00:09:5b:b0:f5:3d) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.136 (165.227.249.136), Dst: 165.227.249.150 (165.227.249.150) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 384 Identification: 0x5b04 (23300) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 30 Protocol: ESP (0x32) Header checksum: 0x0162 [correct] Good: True Bad : False Source: 165.227.249.136 (165.227.249.136) Destination: 165.227.249.150 (165.227.249.150) Encapsulating Security Payload SPI: 0x9e25baf4 Sequence: 1 Data (356 bytes) 0000 00 0c 29 96 e1 fa 00 09 5b b0 f5 3d 08 00 45 00 ..).....[..=..E. 0010 01 80 5b 04 00 00 1e 32 01 62 a5 e3 f9 88 a5 e3 ..[....2.b...... 0020 f9 96 9e 25 ba f4 00 00 00 01 34 6d 35 da fb fd ...%......4m5... 0030 4d bd 7e c9 05 0a 72 72 55 d3 d6 b0 03 fd 82 d7 M.~...rrU....... 0040 70 75 24 7d 7b 2e 10 c1 2b 72 5c 6e 35 fe bb 84 pu$}{...+r\n5... 0050 52 6b 97 58 72 44 a7 95 1e f9 f4 0c 3e 14 af 68 Rk.XrD......>..h 0060 fc 31 3d ee 12 5a 52 06 b4 6f 72 e9 eb 3b 8c 56 .1=..ZR..or..;.V 0070 0f d3 00 df 3a f4 91 ed 35 c0 c9 81 12 50 6c 6b ....:...5....Plk 0080 1a 82 d7 90 d6 a1 18 e0 f9 63 05 1d bc cf cd d8 .........c...... 0090 85 52 00 3d 73 60 c0 50 e0 2f dc e7 8d 5a 65 bf .R.=s`.P./...Ze. 00a0 13 44 63 40 15 f9 3b 1f 71 09 73 74 e6 b5 d1 c6 .Dc@..;.q.st.... 00b0 28 02 04 88 6f 90 6a 33 56 c0 d1 d4 da 68 90 70 (...o.j3V....h.p 00c0 04 ab 25 9d 36 26 2b 3c bc db fb 29 6a a7 17 25 ..%.6&+<...)j..% 00d0 03 0a d0 ec f9 87 2f bb cc 1f d1 a1 03 3e 95 d8 ....../......>.. 00e0 05 6a b8 41 b9 fc 19 30 45 ba 30 1d 97 f4 56 48 .j.A...0E.0...VH 00f0 d8 13 af b9 73 4f 30 d4 2f 74 9e 1d fe 10 0c 1e ....sO0./t...... 0100 44 d1 99 fc 54 a2 fd 7c d3 42 1d 24 56 31 c1 b4 D...T..|.B.$V1.. 0110 dd fd 15 e1 0f 15 81 fa 02 c7 9e fd df 8b 58 06 ..............X. 0120 9f 6a ae e9 ea 45 45 35 ad 14 8b 86 61 54 6f 02 .j...EE5....aTo. 0130 18 3d 62 4e 26 a0 c9 4d 4c 19 e7 34 10 8f 64 a0 .=bN&..ML..4..d. 0140 e2 88 05 57 48 5d 99 11 73 44 3b ad f1 04 46 c7 ...WH]..sD;...F. 0150 8e 25 82 67 3b 8d 8c b5 f7 66 c1 a8 38 ce 32 6d .%.g;....f..8.2m 0160 03 65 67 75 c0 1e bb 64 38 36 f8 75 53 68 19 00 .egu...d86.uSh.. 0170 6e 62 6b 55 04 a0 b9 97 1e 36 e5 a3 e1 5e f8 cc nbkU.....6...^.. 0180 f1 a1 99 64 38 9d 5d ee b0 92 d4 79 81 c7 ...d8.]....y.. Frame 13 (318 bytes on wire, 318 bytes captured) Arrival Time: Aug 14, 2006 12:29:59.780291000 Time delta from previous packet: 1.854640000 seconds Time since reference or first frame: 10.744724000 seconds Frame Number: 13 Packet Length: 318 bytes Capture Length: 318 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:09:5b:b0:f5:3d (00:09:5b:b0:f5:3d), Dst: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Destination: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Source: 00:09:5b:b0:f5:3d (00:09:5b:b0:f5:3d) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.136 (165.227.249.136), Dst: 165.227.249.150 (165.227.249.150) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 304 Identification: 0x01da (474) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x38fd [correct] Good: True Bad : False Source: 165.227.249.136 (165.227.249.136) Destination: 165.227.249.150 (165.227.249.150) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 284 Checksum: 0x2630 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x5BD78FBB9DF52402 Responder cookie: 0xB4F6575C95FE28B3 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0xED62CDAD Length: 276 Encrypted payload (248 bytes) 0000 00 0c 29 96 e1 fa 00 09 5b b0 f5 3d 08 00 45 00 ..).....[..=..E. 0010 01 30 01 da 00 00 40 11 38 fd a5 e3 f9 88 a5 e3 .0....@.8....... 0020 f9 96 01 f4 01 f4 01 1c 26 30 5b d7 8f bb 9d f5 ........&0[..... 0030 24 02 b4 f6 57 5c 95 fe 28 b3 08 10 20 01 ed 62 $...W\..(... ..b 0040 cd ad 00 00 01 14 1c 5b 3b d7 a7 a2 99 5f 95 50 .......[;...._.P 0050 dc e7 f4 76 0b a2 98 30 b5 a1 dd d9 49 87 eb 7d ...v...0....I..} 0060 e6 7b 5a 06 3c 0b d4 55 bf 06 66 a3 02 ce 65 51 .{Z.<..U..f...eQ 0070 18 90 15 8e 7c 36 81 2b f3 cc 0e 89 01 e9 2c 54 ....|6.+......,T 0080 60 cc 81 69 ca d9 b4 27 1f e1 d0 c5 b3 2b 12 03 `..i...'.....+.. 0090 f7 ef 10 8b 9c 53 a4 6f c4 8b c2 95 dc 65 6c ff .....S.o.....el. 00a0 58 c2 25 fe 8f bc 06 cc a5 be 19 3a 36 65 e3 3c X.%........:6e.< 00b0 7a 81 40 41 eb 77 7d db 8d a9 22 f1 8a 67 ca 36 z.@A.w}..."..g.6 00c0 0a b2 5e a5 4c c6 f0 e8 5d d0 7f 46 33 03 74 f0 ..^.L...]..F3.t. 00d0 0d cc b3 84 20 db 00 8d de 6b 3b d2 2f 9f ff 71 .... ....k;./..q 00e0 5b f0 fb 55 6a ea 61 3b 13 70 c8 03 2e 82 bd a0 [..Uj.a;.p...... 00f0 da 1f 1d a0 c8 2e 0e af 07 06 46 c8 28 f7 ea 29 ..........F.(..) 0100 00 a2 89 ee b1 b3 4b b0 83 cb e8 d2 f0 68 ba 9e ......K......h.. 0110 f0 77 5b ca 18 fe 38 5d ef 8e 0a 7c a9 fa 3f dd .w[...8]...|..?. 0120 e7 2f 17 cd ba 96 12 7f 72 ab ee b8 a7 2d f2 55 ./......r....-.U 0130 72 38 6d 56 2f e5 96 e9 e0 73 0b 99 5b cb r8mV/....s..[.