Frame 1 (226 bytes on wire, 226 bytes captured) Arrival Time: May 27, 2009 15:45:32.702785000 [Time delta from previous captured frame: 0.000000000 seconds] [Time delta from previous displayed frame: 0.000000000 seconds] [Time since reference or first frame: 0.000000000 seconds] Frame Number: 1 Frame Length: 226 bytes Capture Length: 226 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00), Dst: 00:24:b2:31:e1:3d (00:24:b2:31:e1:3d) Destination: 00:24:b2:31:e1:3d (00:24:b2:31:e1:3d) Address: 00:24:b2:31:e1:3d (00:24:b2:31:e1:3d) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00) Address: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.138 (165.227.249.138) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 212 Identification: 0x0f52 (3922) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xebde [correct] [Good: True] [Bad : False] Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.138 (165.227.249.138) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 192 Checksum: 0xa0d1 [correct] [Good Checksum: True] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 517454561127FE17 Responder cookie: 0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags: 0x00 .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 184 Security Association payload Next payload: Vendor ID (13) Payload length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Payload length: 44 Proposal number: 1 Protocol ID: ISAKMP (1) SPI Size: 0 Proposal transforms: 1 Transform payload # 1 Next payload: NONE (0) Payload length: 36 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): AES-CBC (7) Key-Length (14): Key-Length (128) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID: RFC 3947 Negotiation of NAT-Traversal in the IKE Next payload: Vendor ID (13) Payload length: 20 Vendor ID: RFC 3947 Negotiation of NAT-Traversal in the IKE Vendor ID: draft-ietf-ipsec-nat-t-ike-03 Next payload: Vendor ID (13) Payload length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-03 Vendor ID: draft-ietf-ipsec-nat-t-ike-02\n Next payload: Vendor ID (13) Payload length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02\n Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Next payload: Vendor ID (13) Payload length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Vendor ID: RFC 3706 Detecting Dead IKE Peers (DPD) Next payload: NONE (0) Payload length: 20 Vendor ID: RFC 3706 Detecting Dead IKE Peers (DPD) 0000 00 24 b2 31 e1 3d 00 0c 29 93 b9 00 08 00 45 00 .$.1.=..).....E. 0010 00 d4 0f 52 00 00 80 11 eb de a5 e3 f9 96 a5 e3 ...R............ 0020 f9 8a 01 f4 01 f4 00 c0 a0 d1 51 74 54 56 11 27 ..........QtTV.' 0030 fe 17 00 00 00 00 00 00 00 00 01 10 02 00 00 00 ................ 0040 00 00 00 00 00 b8 0d 00 00 38 00 00 00 01 00 00 .........8...... 0050 00 01 00 00 00 2c 01 01 00 01 00 00 00 24 01 01 .....,.......$.. 0060 00 00 80 01 00 07 80 0e 00 80 80 02 00 02 80 04 ................ 0070 00 02 80 03 00 01 80 0b 00 01 80 0c 70 80 0d 00 ............p... 0080 00 14 4a 13 1c 81 07 03 58 45 5c 57 28 f2 0e 95 ..J.....XE\W(... 0090 45 2f 0d 00 00 14 7d 94 19 a6 53 10 ca 6f 2c 17 E/....}...S..o,. 00a0 9d 92 15 52 9d 56 0d 00 00 14 90 cb 80 91 3e bb ...R.V........>. 00b0 69 6e 08 63 81 b5 ec 42 7b 1f 0d 00 00 14 44 85 in.c...B{.....D. 00c0 15 2d 18 b6 bb cd 0b e8 a8 46 95 79 dd cc 00 00 .-.......F.y.... 00d0 00 14 af ca d7 13 68 a1 f1 c9 6b 86 96 fc 77 57 ......h...k...wW 00e0 01 00 .. Frame 2 (226 bytes on wire, 226 bytes captured) Arrival Time: May 27, 2009 15:45:32.702791000 [Time delta from previous captured frame: 0.000006000 seconds] [Time delta from previous displayed frame: 0.000006000 seconds] [Time since reference or first frame: 0.000006000 seconds] Frame Number: 2 Frame Length: 226 bytes Capture Length: 226 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00), Dst: 00:24:b2:31:e1:3d (00:24:b2:31:e1:3d) Destination: 00:24:b2:31:e1:3d (00:24:b2:31:e1:3d) Address: 00:24:b2:31:e1:3d (00:24:b2:31:e1:3d) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00) Address: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.138 (165.227.249.138) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 212 Identification: 0x0f52 (3922) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xebde [correct] [Good: True] [Bad : False] Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.138 (165.227.249.138) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 192 Checksum: 0xa0d1 [correct] [Good Checksum: True] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 517454561127FE17 Responder cookie: 0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags: 0x00 .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 184 Security Association payload Next payload: Vendor ID (13) Payload length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Payload length: 44 Proposal number: 1 Protocol ID: ISAKMP (1) SPI Size: 0 Proposal transforms: 1 Transform payload # 1 Next payload: NONE (0) Payload length: 36 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): AES-CBC (7) Key-Length (14): Key-Length (128) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID: RFC 3947 Negotiation of NAT-Traversal in the IKE Next payload: Vendor ID (13) Payload length: 20 Vendor ID: RFC 3947 Negotiation of NAT-Traversal in the IKE Vendor ID: draft-ietf-ipsec-nat-t-ike-03 Next payload: Vendor ID (13) Payload length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-03 Vendor ID: draft-ietf-ipsec-nat-t-ike-02\n Next payload: Vendor ID (13) Payload length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02\n Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Next payload: Vendor ID (13) Payload length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Vendor ID: RFC 3706 Detecting Dead IKE Peers (DPD) Next payload: NONE (0) Payload length: 20 Vendor ID: RFC 3706 Detecting Dead IKE Peers (DPD) 0000 00 24 b2 31 e1 3d 00 0c 29 93 b9 00 08 00 45 00 .$.1.=..).....E. 0010 00 d4 0f 52 00 00 80 11 eb de a5 e3 f9 96 a5 e3 ...R............ 0020 f9 8a 01 f4 01 f4 00 c0 a0 d1 51 74 54 56 11 27 ..........QtTV.' 0030 fe 17 00 00 00 00 00 00 00 00 01 10 02 00 00 00 ................ 0040 00 00 00 00 00 b8 0d 00 00 38 00 00 00 01 00 00 .........8...... 0050 00 01 00 00 00 2c 01 01 00 01 00 00 00 24 01 01 .....,.......$.. 0060 00 00 80 01 00 07 80 0e 00 80 80 02 00 02 80 04 ................ 0070 00 02 80 03 00 01 80 0b 00 01 80 0c 70 80 0d 00 ............p... 0080 00 14 4a 13 1c 81 07 03 58 45 5c 57 28 f2 0e 95 ..J.....XE\W(... 0090 45 2f 0d 00 00 14 7d 94 19 a6 53 10 ca 6f 2c 17 E/....}...S..o,. 00a0 9d 92 15 52 9d 56 0d 00 00 14 90 cb 80 91 3e bb ...R.V........>. 00b0 69 6e 08 63 81 b5 ec 42 7b 1f 0d 00 00 14 44 85 in.c...B{.....D. 00c0 15 2d 18 b6 bb cd 0b e8 a8 46 95 79 dd cc 00 00 .-.......F.y.... 00d0 00 14 af ca d7 13 68 a1 f1 c9 6b 86 96 fc 77 57 ......h...k...wW 00e0 01 00 .. Frame 3 (166 bytes on wire, 166 bytes captured) Arrival Time: May 27, 2009 15:45:32.932297000 [Time delta from previous captured frame: 0.229506000 seconds] [Time delta from previous displayed frame: 0.229506000 seconds] [Time since reference or first frame: 0.229512000 seconds] Frame Number: 3 Frame Length: 166 bytes Capture Length: 166 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:24:b2:31:e1:3d (00:24:b2:31:e1:3d), Dst: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00) Destination: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00) Address: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:24:b2:31:e1:3d (00:24:b2:31:e1:3d) Address: 00:24:b2:31:e1:3d (00:24:b2:31:e1:3d) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.138 (165.227.249.138), Dst: 165.227.249.150 (165.227.249.150) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 152 Identification: 0x0000 (0) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb6c [correct] [Good: True] [Bad : False] Source: 165.227.249.138 (165.227.249.138) Destination: 165.227.249.150 (165.227.249.150) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 132 Checksum: 0x9bc9 [correct] [Good Checksum: True] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 517454561127FE17 Responder cookie: E65F1C12ED27E0FC Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags: 0x00 .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 124 Security Association payload Next payload: Vendor ID (13) Payload length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Payload length: 44 Proposal number: 1 Protocol ID: ISAKMP (1) SPI Size: 0 Proposal transforms: 1 Transform payload # 1 Next payload: NONE (0) Payload length: 36 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): AES-CBC (7) Key-Length (14): Key-Length (128) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID: 3B9031DCE4FCF88B489A923963DD0C49 Next payload: Vendor ID (13) Payload length: 20 Vendor ID: 3B9031DCE4FCF88B489A923963DD0C49 Vendor ID: 7003CBC1097DBE9C2600BA6983BC8B35 Next payload: NONE (0) Payload length: 20 Vendor ID: 7003CBC1097DBE9C2600BA6983BC8B35 0000 00 0c 29 93 b9 00 00 24 b2 31 e1 3d 08 00 45 00 ..)....$.1.=..E. 0010 00 98 00 00 40 00 40 11 fb 6c a5 e3 f9 8a a5 e3 ....@.@..l...... 0020 f9 96 01 f4 01 f4 00 84 9b c9 51 74 54 56 11 27 ..........QtTV.' 0030 fe 17 e6 5f 1c 12 ed 27 e0 fc 01 10 02 00 00 00 ..._...'........ 0040 00 00 00 00 00 7c 0d 00 00 38 00 00 00 01 00 00 .....|...8...... 0050 00 01 00 00 00 2c 01 01 00 01 00 00 00 24 01 01 .....,.......$.. 0060 00 00 80 01 00 07 80 0e 00 80 80 02 00 02 80 04 ................ 0070 00 02 80 03 00 01 80 0b 00 01 80 0c 70 80 0d 00 ............p... 0080 00 14 3b 90 31 dc e4 fc f8 8b 48 9a 92 39 63 dd ..;.1.....H..9c. 0090 0c 49 00 00 00 14 70 03 cb c1 09 7d be 9c 26 00 .I....p....}..&. 00a0 ba 69 83 bc 8b 35 .i...5 Frame 4 (270 bytes on wire, 270 bytes captured) Arrival Time: May 27, 2009 15:45:32.939189000 [Time delta from previous captured frame: 0.006892000 seconds] [Time delta from previous displayed frame: 0.006892000 seconds] [Time since reference or first frame: 0.236404000 seconds] Frame Number: 4 Frame Length: 270 bytes Capture Length: 270 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00), Dst: 00:24:b2:31:e1:3d (00:24:b2:31:e1:3d) Destination: 00:24:b2:31:e1:3d (00:24:b2:31:e1:3d) Address: 00:24:b2:31:e1:3d (00:24:b2:31:e1:3d) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00) Address: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.138 (165.227.249.138) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 256 Identification: 0x0f53 (3923) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xebb1 [correct] [Good: True] [Bad : False] Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.138 (165.227.249.138) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 236 Checksum: 0x82ef [correct] [Good Checksum: True] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 517454561127FE17 Responder cookie: E65F1C12ED27E0FC Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags: 0x00 .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 228 Key Exchange payload Next payload: Nonce (10) Payload length: 132 Key Exchange Data (128 bytes / 1024 bits) Nonce payload Next payload: NONE (0) Payload length: 68 Nonce Data 0000 00 24 b2 31 e1 3d 00 0c 29 93 b9 00 08 00 45 00 .$.1.=..).....E. 0010 01 00 0f 53 00 00 80 11 eb b1 a5 e3 f9 96 a5 e3 ...S............ 0020 f9 8a 01 f4 01 f4 00 ec 82 ef 51 74 54 56 11 27 ..........QtTV.' 0030 fe 17 e6 5f 1c 12 ed 27 e0 fc 04 10 02 00 00 00 ..._...'........ 0040 00 00 00 00 00 e4 0a 00 00 84 bf 5d 45 96 86 61 ...........]E..a 0050 81 1b 66 70 7e 87 a5 2e 52 d8 d4 48 e9 c5 41 64 ..fp~...R..H..Ad 0060 ea ed aa dd 52 1d 4c e6 b5 da 03 9f 78 0f 99 4b ....R.L.....x..K 0070 d0 26 f7 18 45 80 06 79 06 d8 4a 6c da a8 5b d5 .&..E..y..Jl..[. 0080 db ee 8f f1 88 56 41 e2 d4 5a 8b 78 b1 f3 e7 f6 .....VA..Z.x.... 0090 52 e8 45 e0 dc 81 e5 16 4d 6d f9 37 9a 8f 26 14 R.E.....Mm.7..&. 00a0 be 73 46 f4 d5 24 47 1c 4f 93 82 7f 8c 37 bc 81 .sF..$G.O....7.. 00b0 ff 71 5d 7c 4c b5 15 8a 10 ba 08 15 3b db 6e 88 .q]|L.......;.n. 00c0 fb 35 cd f7 49 10 f4 f4 fa a0 00 00 00 44 89 21 .5..I........D.! 00d0 ab 38 ea 71 d4 46 7a 5f b7 12 ea 8e 24 72 25 9e .8.q.Fz_....$r%. 00e0 a9 ab 34 f8 e2 34 2b ca bc f1 e9 e6 c7 98 42 68 ..4..4+.......Bh 00f0 00 8e de fe 5b 52 29 f9 95 f3 80 8c a7 8d b9 96 ....[R)......... 0100 c0 39 bd 35 b8 aa 3c cd 42 28 98 a3 aa 7a .9.5..<.B(...z Frame 5 (270 bytes on wire, 270 bytes captured) Arrival Time: May 27, 2009 15:45:32.939203000 [Time delta from previous captured frame: 0.000014000 seconds] [Time delta from previous displayed frame: 0.000014000 seconds] [Time since reference or first frame: 0.236418000 seconds] Frame Number: 5 Frame Length: 270 bytes Capture Length: 270 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00), Dst: 00:24:b2:31:e1:3d (00:24:b2:31:e1:3d) Destination: 00:24:b2:31:e1:3d (00:24:b2:31:e1:3d) Address: 00:24:b2:31:e1:3d (00:24:b2:31:e1:3d) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00) Address: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.138 (165.227.249.138) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 256 Identification: 0x0f53 (3923) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xebb1 [correct] [Good: True] [Bad : False] Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.138 (165.227.249.138) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 236 Checksum: 0x82ef [correct] [Good Checksum: True] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 517454561127FE17 Responder cookie: E65F1C12ED27E0FC Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags: 0x00 .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 228 Key Exchange payload Next payload: Nonce (10) Payload length: 132 Key Exchange Data (128 bytes / 1024 bits) Nonce payload Next payload: NONE (0) Payload length: 68 Nonce Data 0000 00 24 b2 31 e1 3d 00 0c 29 93 b9 00 08 00 45 00 .$.1.=..).....E. 0010 01 00 0f 53 00 00 80 11 eb b1 a5 e3 f9 96 a5 e3 ...S............ 0020 f9 8a 01 f4 01 f4 00 ec 82 ef 51 74 54 56 11 27 ..........QtTV.' 0030 fe 17 e6 5f 1c 12 ed 27 e0 fc 04 10 02 00 00 00 ..._...'........ 0040 00 00 00 00 00 e4 0a 00 00 84 bf 5d 45 96 86 61 ...........]E..a 0050 81 1b 66 70 7e 87 a5 2e 52 d8 d4 48 e9 c5 41 64 ..fp~...R..H..Ad 0060 ea ed aa dd 52 1d 4c e6 b5 da 03 9f 78 0f 99 4b ....R.L.....x..K 0070 d0 26 f7 18 45 80 06 79 06 d8 4a 6c da a8 5b d5 .&..E..y..Jl..[. 0080 db ee 8f f1 88 56 41 e2 d4 5a 8b 78 b1 f3 e7 f6 .....VA..Z.x.... 0090 52 e8 45 e0 dc 81 e5 16 4d 6d f9 37 9a 8f 26 14 R.E.....Mm.7..&. 00a0 be 73 46 f4 d5 24 47 1c 4f 93 82 7f 8c 37 bc 81 .sF..$G.O....7.. 00b0 ff 71 5d 7c 4c b5 15 8a 10 ba 08 15 3b db 6e 88 .q]|L.......;.n. 00c0 fb 35 cd f7 49 10 f4 f4 fa a0 00 00 00 44 89 21 .5..I........D.! 00d0 ab 38 ea 71 d4 46 7a 5f b7 12 ea 8e 24 72 25 9e .8.q.Fz_....$r%. 00e0 a9 ab 34 f8 e2 34 2b ca bc f1 e9 e6 c7 98 42 68 ..4..4+.......Bh 00f0 00 8e de fe 5b 52 29 f9 95 f3 80 8c a7 8d b9 96 ....[R)......... 0100 c0 39 bd 35 b8 aa 3c cd 42 28 98 a3 aa 7a .9.5..<.B(...z Frame 6 (242 bytes on wire, 242 bytes captured) Arrival Time: May 27, 2009 15:45:33.287015000 [Time delta from previous captured frame: 0.347812000 seconds] [Time delta from previous displayed frame: 0.347812000 seconds] [Time since reference or first frame: 0.584230000 seconds] Frame Number: 6 Frame Length: 242 bytes Capture Length: 242 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:24:b2:31:e1:3d (00:24:b2:31:e1:3d), Dst: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00) Destination: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00) Address: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:24:b2:31:e1:3d (00:24:b2:31:e1:3d) Address: 00:24:b2:31:e1:3d (00:24:b2:31:e1:3d) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.138 (165.227.249.138), Dst: 165.227.249.150 (165.227.249.150) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 228 Identification: 0x0000 (0) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb20 [correct] [Good: True] [Bad : False] Source: 165.227.249.138 (165.227.249.138) Destination: 165.227.249.150 (165.227.249.150) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 208 Checksum: 0xb653 [correct] [Good Checksum: True] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 517454561127FE17 Responder cookie: E65F1C12ED27E0FC Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags: 0x00 .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 200 Key Exchange payload Next payload: Nonce (10) Payload length: 132 Key Exchange Data (128 bytes / 1024 bits) Nonce payload Next payload: Vendor ID (13) Payload length: 20 Nonce Data Vendor ID: 7003CBC1097DBE9C2600BA6983BC8B35 Next payload: NONE (0) Payload length: 20 Vendor ID: 7003CBC1097DBE9C2600BA6983BC8B35 0000 00 0c 29 93 b9 00 00 24 b2 31 e1 3d 08 00 45 00 ..)....$.1.=..E. 0010 00 e4 00 00 40 00 40 11 fb 20 a5 e3 f9 8a a5 e3 ....@.@.. ...... 0020 f9 96 01 f4 01 f4 00 d0 b6 53 51 74 54 56 11 27 .........SQtTV.' 0030 fe 17 e6 5f 1c 12 ed 27 e0 fc 04 10 02 00 00 00 ..._...'........ 0040 00 00 00 00 00 c8 0a 00 00 84 53 34 b7 cb 69 57 ..........S4..iW 0050 bd 33 e7 ee 81 ef 57 0d 19 d5 95 cc fe 7e ac d1 .3....W......~.. 0060 d1 60 74 80 5b bf d6 fb 7d 7d 8c d6 e2 e9 4c 48 .`t.[...}}....LH 0070 e4 8e 51 44 02 1d 69 54 ce 7b fc 0c 36 a4 8e 05 ..QD..iT.{..6... 0080 d2 3d 6b 68 6d 21 48 b7 a2 02 2a 2c 41 d8 c3 bb .=khm!H...*,A... 0090 0f 15 84 95 05 b6 39 00 83 32 4c 0f 5f 32 0c ec ......9..2L._2.. 00a0 76 79 38 7e 24 55 92 df c1 4a 2d e1 76 ee 00 4f vy8~$U...J-.v..O 00b0 67 08 07 b7 20 f5 94 76 34 56 26 0d 09 4c d2 c4 g... ..v4V&..L.. 00c0 de 08 da 89 0f 57 0d 84 e8 4f 0d 00 00 14 b4 39 .....W...O.....9 00d0 20 a6 e4 7a 56 a8 e3 dc 37 64 b3 3d a7 4f 00 00 ..zV...7d.=.O.. 00e0 00 14 70 03 cb c1 09 7d be 9c 26 00 ba 69 83 bc ..p....}..&..i.. 00f0 8b 35 .5 Frame 7 (150 bytes on wire, 150 bytes captured) Arrival Time: May 27, 2009 15:45:33.291142000 [Time delta from previous captured frame: 0.004127000 seconds] [Time delta from previous displayed frame: 0.004127000 seconds] [Time since reference or first frame: 0.588357000 seconds] Frame Number: 7 Frame Length: 150 bytes Capture Length: 150 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00), Dst: 00:24:b2:31:e1:3d (00:24:b2:31:e1:3d) Destination: 00:24:b2:31:e1:3d (00:24:b2:31:e1:3d) Address: 00:24:b2:31:e1:3d (00:24:b2:31:e1:3d) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00) Address: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.138 (165.227.249.138) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 136 Identification: 0x0f54 (3924) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xec28 [correct] [Good: True] [Bad : False] Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.138 (165.227.249.138) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 116 Checksum: 0x3bc5 [correct] [Good Checksum: True] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 517454561127FE17 Responder cookie: E65F1C12ED27E0FC Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags: 0x01 .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 108 Encrypted payload (80 bytes) 0000 00 24 b2 31 e1 3d 00 0c 29 93 b9 00 08 00 45 00 .$.1.=..).....E. 0010 00 88 0f 54 00 00 80 11 ec 28 a5 e3 f9 96 a5 e3 ...T.....(...... 0020 f9 8a 01 f4 01 f4 00 74 3b c5 51 74 54 56 11 27 .......t;.QtTV.' 0030 fe 17 e6 5f 1c 12 ed 27 e0 fc 05 10 02 01 00 00 ..._...'........ 0040 00 00 00 00 00 6c ca cd e9 86 ba 13 8d 5e 2f 89 .....l.......^/. 0050 4a 15 56 82 79 f4 9b 04 b9 61 ca 0c ac d6 b8 db J.V.y....a...... 0060 69 08 79 9a 3c 3f 65 cb 6e 7f 02 95 50 c1 92 91 i.y........~:.. 0080 50 bd 8b 9e cc 00 a2 b1 83 2c ea 5e ae fd e7 0e P........,.^.... 0090 55 49 0f 27 3e 74 40 8e 95 7d 73 5d 6b 20 44 10 UI.'>t@..}s]k D. 00a0 c5 10 fb fa 3b 2d 82 ef 4a 94 69 da 20 1c cc ee ....;-..J.i. ... 00b0 e3 27 65 da 48 19 18 7d 08 93 1c 5a 08 fb c6 67 .'e.H..}...Z...g 00c0 bc 79 c9 ff 82 29 0e 5e d8 d0 54 5c 7b c5 b7 3b .y...).^..T\{..; 00d0 65 33 93 12 1f 6a 08 42 e4 dd 56 90 dc 3f 34 11 e3...j.B..V..?4. 00e0 fa 57 3c 86 f9 6c f4 4c aa c8 59 1a 34 da 7f 2f .W<..l.L..Y.4../ 00f0 29 11 ae 1c f2 ee 4a dd ab 90 76 09 16 d4 b8 8d ).....J...v..... 0100 cb 5f 40 bc 76 d5 33 08 43 22 52 f3 1a d3 c9 57 ._@.v.3.C"R....W 0110 fb 3d 3f 6b b6 f6 d3 ed 0f 2b ef 25 36 59 bc 82 .=?k.....+.%6Y.. 0120 c4 51 ec ab bc 85 06 8c 18 3a 22 4e bf 5a 8d fa .Q.......:"N.Z.. 0130 2b ef af 2e 51 bd c7 75 10 23 d4 77 76 66 63 f8 +...Q..u.#.wvfc. 0140 61 da 7d 95 99 73 fd bc 39 ba 01 95 ad 5d 3d b8 a.}..s..9....]=. 0150 8d 8e ae a5 ff 6e f2 73 87 a0 a3 7c 3a d7 32 7b .....n.s...|:.2{ 0160 79 fc c3 ae 5e 99 91 89 9f 38 f8 4d 2b 8f 3d b4 y...^....8.M+.=. 0170 a9 5b 2b b8 99 e7 95 9f ee 20 b6 76 45 4e c0 11 .[+...... .vEN.. 0180 5f ca 40 0b 96 1f _.@... Frame 11 (390 bytes on wire, 390 bytes captured) Arrival Time: May 27, 2009 15:45:33.851045000 [Time delta from previous captured frame: 0.000013000 seconds] [Time delta from previous displayed frame: 0.000013000 seconds] [Time since reference or first frame: 1.148260000 seconds] Frame Number: 11 Frame Length: 390 bytes Capture Length: 390 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00), Dst: 00:24:b2:31:e1:3d (00:24:b2:31:e1:3d) Destination: 00:24:b2:31:e1:3d (00:24:b2:31:e1:3d) Address: 00:24:b2:31:e1:3d (00:24:b2:31:e1:3d) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00) Address: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.138 (165.227.249.138) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 376 Identification: 0x0f55 (3925) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xeb37 [correct] [Good: True] [Bad : False] Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.138 (165.227.249.138) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 356 Checksum: 0x114e [correct] [Good Checksum: True] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 517454561127FE17 Responder cookie: E65F1C12ED27E0FC Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags: 0x01 .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0xf9c146b0 Length: 348 Encrypted payload (320 bytes) 0000 00 24 b2 31 e1 3d 00 0c 29 93 b9 00 08 00 45 00 .$.1.=..).....E. 0010 01 78 0f 55 00 00 80 11 eb 37 a5 e3 f9 96 a5 e3 .x.U.....7...... 0020 f9 8a 01 f4 01 f4 01 64 11 4e 51 74 54 56 11 27 .......d.NQtTV.' 0030 fe 17 e6 5f 1c 12 ed 27 e0 fc 08 10 20 01 f9 c1 ..._...'.... ... 0040 46 b0 00 00 01 5c a5 c4 07 54 50 df 62 39 e4 c5 F....\...TP.b9.. 0050 bb d7 e7 4b c4 0f 56 ab 41 5c 04 f3 1c e9 c3 df ...K..V.A\...... 0060 9e 67 02 93 99 7d 36 7b 16 13 35 c1 9a 27 08 59 .g...}6{..5..'.Y 0070 1a 21 2b 4c 3e da aa ff eb 86 08 e5 7e 3a 13 7f .!+L>.......~:.. 0080 50 bd 8b 9e cc 00 a2 b1 83 2c ea 5e ae fd e7 0e P........,.^.... 0090 55 49 0f 27 3e 74 40 8e 95 7d 73 5d 6b 20 44 10 UI.'>t@..}s]k D. 00a0 c5 10 fb fa 3b 2d 82 ef 4a 94 69 da 20 1c cc ee ....;-..J.i. ... 00b0 e3 27 65 da 48 19 18 7d 08 93 1c 5a 08 fb c6 67 .'e.H..}...Z...g 00c0 bc 79 c9 ff 82 29 0e 5e d8 d0 54 5c 7b c5 b7 3b .y...).^..T\{..; 00d0 65 33 93 12 1f 6a 08 42 e4 dd 56 90 dc 3f 34 11 e3...j.B..V..?4. 00e0 fa 57 3c 86 f9 6c f4 4c aa c8 59 1a 34 da 7f 2f .W<..l.L..Y.4../ 00f0 29 11 ae 1c f2 ee 4a dd ab 90 76 09 16 d4 b8 8d ).....J...v..... 0100 cb 5f 40 bc 76 d5 33 08 43 22 52 f3 1a d3 c9 57 ._@.v.3.C"R....W 0110 fb 3d 3f 6b b6 f6 d3 ed 0f 2b ef 25 36 59 bc 82 .=?k.....+.%6Y.. 0120 c4 51 ec ab bc 85 06 8c 18 3a 22 4e bf 5a 8d fa .Q.......:"N.Z.. 0130 2b ef af 2e 51 bd c7 75 10 23 d4 77 76 66 63 f8 +...Q..u.#.wvfc. 0140 61 da 7d 95 99 73 fd bc 39 ba 01 95 ad 5d 3d b8 a.}..s..9....]=. 0150 8d 8e ae a5 ff 6e f2 73 87 a0 a3 7c 3a d7 32 7b .....n.s...|:.2{ 0160 79 fc c3 ae 5e 99 91 89 9f 38 f8 4d 2b 8f 3d b4 y...^....8.M+.=. 0170 a9 5b 2b b8 99 e7 95 9f ee 20 b6 76 45 4e c0 11 .[+...... .vEN.. 0180 5f ca 40 0b 96 1f _.@... Frame 12 (134 bytes on wire, 134 bytes captured) Arrival Time: May 27, 2009 15:45:33.924673000 [Time delta from previous captured frame: 0.073628000 seconds] [Time delta from previous displayed frame: 0.073628000 seconds] [Time since reference or first frame: 1.221888000 seconds] Frame Number: 12 Frame Length: 134 bytes Capture Length: 134 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:24:b2:31:e1:3d (00:24:b2:31:e1:3d), Dst: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00) Destination: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00) Address: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:24:b2:31:e1:3d (00:24:b2:31:e1:3d) Address: 00:24:b2:31:e1:3d (00:24:b2:31:e1:3d) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.138 (165.227.249.138), Dst: 165.227.249.150 (165.227.249.150) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0000 (0) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb8c [correct] [Good: True] [Bad : False] Source: 165.227.249.138 (165.227.249.138) Destination: 165.227.249.150 (165.227.249.150) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 100 Checksum: 0xc0c0 [correct] [Good Checksum: True] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 517454561127FE17 Responder cookie: E65F1C12ED27E0FC Next payload: Hash (8) Version: 1.0 Exchange type: Informational (5) Flags: 0x01 .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0xef9fbc6b Length: 92 Encrypted payload (64 bytes) 0000 00 0c 29 93 b9 00 00 24 b2 31 e1 3d 08 00 45 00 ..)....$.1.=..E. 0010 00 78 00 00 40 00 40 11 fb 8c a5 e3 f9 8a a5 e3 .x..@.@......... 0020 f9 96 01 f4 01 f4 00 64 c0 c0 51 74 54 56 11 27 .......d..QtTV.' 0030 fe 17 e6 5f 1c 12 ed 27 e0 fc 08 10 05 01 ef 9f ..._...'........ 0040 bc 6b 00 00 00 5c 0b df 35 70 e2 47 77 d2 80 f6 .k...\..5p.Gw... 0050 0f a7 d0 dc d5 1b 2b 56 7a 6a e3 68 da 7b f5 0e ......+Vzj.h.{.. 0060 81 4c 0e 9a 0f af a4 bd 43 a3 1a 01 4d bf da 57 .L......C...M..W 0070 dd 49 85 eb f1 b0 65 28 c7 8a 50 cb bd d0 f0 76 .I....e(..P....v 0080 f4 3d 87 6f cb 5e .=.o.^ Frame 13 (342 bytes on wire, 342 bytes captured) Arrival Time: May 27, 2009 15:45:34.792160000 [Time delta from previous captured frame: 0.867487000 seconds] [Time delta from previous displayed frame: 0.867487000 seconds] [Time since reference or first frame: 2.089375000 seconds] Frame Number: 13 Frame Length: 342 bytes Capture Length: 342 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:24:b2:31:e1:3d (00:24:b2:31:e1:3d), Dst: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00) Destination: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00) Address: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:24:b2:31:e1:3d (00:24:b2:31:e1:3d) Address: 00:24:b2:31:e1:3d (00:24:b2:31:e1:3d) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.138 (165.227.249.138), Dst: 165.227.249.150 (165.227.249.150) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 328 Identification: 0x0000 (0) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfabc [correct] [Good: True] [Bad : False] Source: 165.227.249.138 (165.227.249.138) Destination: 165.227.249.150 (165.227.249.150) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 308 Checksum: 0x27bc [correct] [Good Checksum: True] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 517454561127FE17 Responder cookie: E65F1C12ED27E0FC Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags: 0x01 .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0xf9c146b0 Length: 300 Encrypted payload (272 bytes) 0000 00 0c 29 93 b9 00 00 24 b2 31 e1 3d 08 00 45 00 ..)....$.1.=..E. 0010 01 48 00 00 40 00 40 11 fa bc a5 e3 f9 8a a5 e3 .H..@.@......... 0020 f9 96 01 f4 01 f4 01 34 27 bc 51 74 54 56 11 27 .......4'.QtTV.' 0030 fe 17 e6 5f 1c 12 ed 27 e0 fc 08 10 20 01 f9 c1 ..._...'.... ... 0040 46 b0 00 00 01 2c 08 de d0 a7 54 3b 1a ce 9e df F....,....T;.... 0050 49 b4 0a 12 39 cf 3c 67 19 47 c9 53 a6 af f3 78 I...9.;.&.9..8....o. 00b0 33 97 6c 25 b9 f4 b7 32 a0 82 60 36 31 00 a7 c9 3.l%...2..`61... 00c0 00 21 42 87 56 8a ff ae f8 10 45 65 89 ae cb 3d .!B.V.....Ee...= 00d0 ef e2 09 25 5a 3b a5 d4 e8 cb 13 e0 f8 f4 cd 51 ...%Z;.........Q 00e0 d9 9a b0 a7 4b f0 c6 b8 ef d3 4f cb f7 6a 27 bb ....K.....O..j'. 00f0 b3 9d 9d dc 33 a0 e3 61 01 fa 05 59 ce 27 b1 38 ....3..a...Y.'.8 0100 62 3d d2 7f 2f 5b 67 cd 01 e6 21 83 fd 07 35 79 b=../[g...!...5y 0110 80 a8 96 d1 c2 76 fa dd 27 99 7e e0 f0 32 9c 2c .....v..'.~..2., 0120 bb 28 1a 92 cb 37 61 ca 93 70 ca 67 57 a0 2d 03 .(...7a..p.gW.-. 0130 f1 6e 33 b6 63 6f 1f 28 7a e8 00 29 bc 5c 6a 2a .n3.co.(z..).\j* 0140 7a d5 bf a3 66 7c be 78 2b ca b7 1b 25 14 18 fc z...f|.x+...%... 0150 5e 5f 83 39 0e 7c ^_.9.| Frame 14 (102 bytes on wire, 102 bytes captured) Arrival Time: May 27, 2009 15:45:34.796369000 [Time delta from previous captured frame: 0.004209000 seconds] [Time delta from previous displayed frame: 0.004209000 seconds] [Time since reference or first frame: 2.093584000 seconds] Frame Number: 14 Frame Length: 102 bytes Capture Length: 102 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00), Dst: 00:24:b2:31:e1:3d (00:24:b2:31:e1:3d) Destination: 00:24:b2:31:e1:3d (00:24:b2:31:e1:3d) Address: 00:24:b2:31:e1:3d (00:24:b2:31:e1:3d) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00) Address: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.138 (165.227.249.138) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 88 Identification: 0x0f56 (3926) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xec56 [correct] [Good: True] [Bad : False] Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.138 (165.227.249.138) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 68 Checksum: 0x6f5d [correct] [Good Checksum: True] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 517454561127FE17 Responder cookie: E65F1C12ED27E0FC Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags: 0x01 .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0xf9c146b0 Length: 60 Encrypted payload (32 bytes) 0000 00 24 b2 31 e1 3d 00 0c 29 93 b9 00 08 00 45 00 .$.1.=..).....E. 0010 00 58 0f 56 00 00 80 11 ec 56 a5 e3 f9 96 a5 e3 .X.V.....V...... 0020 f9 8a 01 f4 01 f4 00 44 6f 5d 51 74 54 56 11 27 .......Do]QtTV.' 0030 fe 17 e6 5f 1c 12 ed 27 e0 fc 08 10 20 01 f9 c1 ..._...'.... ... 0040 46 b0 00 00 00 3c 80 9a 4b 43 25 c4 1c 6a a5 da F....<..KC%..j.. 0050 59 06 b3 e0 cb 97 26 4f b9 dc b0 45 3f 72 2c 49 Y.....&O...E?r,I 0060 82 2c ac 36 a7 e2 .,.6.. Frame 15 (102 bytes on wire, 102 bytes captured) Arrival Time: May 27, 2009 15:45:34.796382000 [Time delta from previous captured frame: 0.000013000 seconds] [Time delta from previous displayed frame: 0.000013000 seconds] [Time since reference or first frame: 2.093597000 seconds] Frame Number: 15 Frame Length: 102 bytes Capture Length: 102 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00), Dst: 00:24:b2:31:e1:3d (00:24:b2:31:e1:3d) Destination: 00:24:b2:31:e1:3d (00:24:b2:31:e1:3d) Address: 00:24:b2:31:e1:3d (00:24:b2:31:e1:3d) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00) Address: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.138 (165.227.249.138) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 88 Identification: 0x0f56 (3926) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xec56 [correct] [Good: True] [Bad : False] Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.138 (165.227.249.138) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 68 Checksum: 0x6f5d [correct] [Good Checksum: True] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 517454561127FE17 Responder cookie: E65F1C12ED27E0FC Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags: 0x01 .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0xf9c146b0 Length: 60 Encrypted payload (32 bytes) 0000 00 24 b2 31 e1 3d 00 0c 29 93 b9 00 08 00 45 00 .$.1.=..).....E. 0010 00 58 0f 56 00 00 80 11 ec 56 a5 e3 f9 96 a5 e3 .X.V.....V...... 0020 f9 8a 01 f4 01 f4 00 44 6f 5d 51 74 54 56 11 27 .......Do]QtTV.' 0030 fe 17 e6 5f 1c 12 ed 27 e0 fc 08 10 20 01 f9 c1 ..._...'.... ... 0040 46 b0 00 00 00 3c 80 9a 4b 43 25 c4 1c 6a a5 da F....<..KC%..j.. 0050 59 06 b3 e0 cb 97 26 4f b9 dc b0 45 3f 72 2c 49 Y.....&O...E?r,I 0060 82 2c ac 36 a7 e2 .,.6.. Frame 16 (406 bytes on wire, 406 bytes captured) Arrival Time: May 27, 2009 15:45:39.129344000 [Time delta from previous captured frame: 4.332962000 seconds] [Time delta from previous displayed frame: 4.332962000 seconds] [Time since reference or first frame: 6.426559000 seconds] Frame Number: 16 Frame Length: 406 bytes Capture Length: 406 bytes [Frame is marked: False] [Protocols in frame: eth:ip:esp] Ethernet II, Src: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00), Dst: 00:24:b2:31:e1:3d (00:24:b2:31:e1:3d) Destination: 00:24:b2:31:e1:3d (00:24:b2:31:e1:3d) Address: 00:24:b2:31:e1:3d (00:24:b2:31:e1:3d) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00) Address: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.138 (165.227.249.138) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 392 Identification: 0x0f57 (3927) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: ESP (0x32) Header checksum: 0xeb04 [correct] [Good: True] [Bad : False] Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.138 (165.227.249.138) Encapsulating Security Payload ESP SPI: 0x09a4bad1 ESP Sequence: 1 0000 00 24 b2 31 e1 3d 00 0c 29 93 b9 00 08 00 45 00 .$.1.=..).....E. 0010 01 88 0f 57 00 00 80 32 eb 04 a5 e3 f9 96 a5 e3 ...W...2........ 0020 f9 8a 09 a4 ba d1 00 00 00 01 cf b8 ef 82 4d 5f ..............M_ 0030 be 73 73 7b 94 28 c8 27 99 74 41 7c b7 f6 5c d9 .ss{.(.'.tA|..\. 0040 f9 f6 70 1b 8d c5 80 c7 07 28 06 5e 30 a3 5c 4b ..p......(.^0.\K 0050 5c 96 58 14 64 03 c1 7b 90 62 f9 c2 81 ed af bd \.X.d..{.b...... 0060 41 e0 23 2a 43 70 da 8d e5 e2 87 80 b0 97 2b 21 A.#*Cp........+! 0070 1e aa 75 2e 58 e3 25 1a 06 a0 f3 e9 04 c9 40 65 ..u.X.%.......@e 0080 76 38 f2 76 fa 4b 2b e7 87 26 14 85 1b 67 33 28 v8.v.K+..&...g3( 0090 84 d0 26 1d db 94 a8 42 8e 45 92 44 38 4e 4c 0a ..&....B.E.D8NL. 00a0 d1 a5 7b b8 23 20 b8 e3 13 90 8f c3 6c 91 7c 72 ..{.# ......l.|r 00b0 b3 a7 b9 b9 ec 21 d5 7b 0d 06 fd 8c 4e 6e 96 fd .....!.{....Nn.. 00c0 6d af 0d ad 06 e1 dc 18 c7 a3 99 6e bf 11 bb dd m..........n.... 00d0 30 a0 d0 03 fd a9 af 7f 23 8a f1 ad e2 1f a7 53 0.......#......S 00e0 2e 7e 17 17 b7 1b 3e a2 06 f1 1c 5f 68 a9 3d b5 .~....>...._h.=. 00f0 52 f2 dc 23 51 db 98 e8 09 08 89 59 96 79 56 e6 R..#Q......Y.yV. 0100 95 f2 22 34 9d 10 b3 9b 13 d4 9b 7b b8 0d d0 50 .."4.......{...P 0110 f1 05 24 26 38 81 a6 99 fb 0f e1 ba b9 32 1b 29 ..$&8........2.) 0120 4b 97 97 d3 ed eb 45 a2 14 d6 be 85 02 64 74 89 K.....E......dt. 0130 94 cf 82 0d 98 0b 6b 4e d0 ab 4d 32 67 6a 29 b1 ......kN..M2gj). 0140 47 12 1d 64 04 82 6f 5f a1 27 a5 f8 78 e1 32 28 G..d..o_.'..x.2( 0150 0e 73 34 8c 04 b4 c7 3b fd 8e 3e a7 20 72 65 e4 .s4....;..>. re. 0160 68 bb 70 75 d4 ed 0e 16 ba 3f ae 6f bd 91 01 83 h.pu.....?.o.... 0170 3f 23 92 44 c3 76 ec d7 7c 47 51 38 e4 87 f8 6b ?#.D.v..|GQ8...k 0180 d1 b7 fc cf 3d cb 92 45 86 ff d3 63 10 8c 1f 07 ....=..E...c.... 0190 38 86 89 c1 4b cd 8...K. Frame 17 (406 bytes on wire, 406 bytes captured) Arrival Time: May 27, 2009 15:45:39.129358000 [Time delta from previous captured frame: 0.000014000 seconds] [Time delta from previous displayed frame: 0.000014000 seconds] [Time since reference or first frame: 6.426573000 seconds] Frame Number: 17 Frame Length: 406 bytes Capture Length: 406 bytes [Frame is marked: False] [Protocols in frame: eth:ip:esp] Ethernet II, Src: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00), Dst: 00:24:b2:31:e1:3d (00:24:b2:31:e1:3d) Destination: 00:24:b2:31:e1:3d (00:24:b2:31:e1:3d) Address: 00:24:b2:31:e1:3d (00:24:b2:31:e1:3d) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00) Address: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.138 (165.227.249.138) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 392 Identification: 0x0f57 (3927) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: ESP (0x32) Header checksum: 0xeb04 [correct] [Good: True] [Bad : False] Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.138 (165.227.249.138) Encapsulating Security Payload ESP SPI: 0x09a4bad1 ESP Sequence: 1 0000 00 24 b2 31 e1 3d 00 0c 29 93 b9 00 08 00 45 00 .$.1.=..).....E. 0010 01 88 0f 57 00 00 80 32 eb 04 a5 e3 f9 96 a5 e3 ...W...2........ 0020 f9 8a 09 a4 ba d1 00 00 00 01 cf b8 ef 82 4d 5f ..............M_ 0030 be 73 73 7b 94 28 c8 27 99 74 41 7c b7 f6 5c d9 .ss{.(.'.tA|..\. 0040 f9 f6 70 1b 8d c5 80 c7 07 28 06 5e 30 a3 5c 4b ..p......(.^0.\K 0050 5c 96 58 14 64 03 c1 7b 90 62 f9 c2 81 ed af bd \.X.d..{.b...... 0060 41 e0 23 2a 43 70 da 8d e5 e2 87 80 b0 97 2b 21 A.#*Cp........+! 0070 1e aa 75 2e 58 e3 25 1a 06 a0 f3 e9 04 c9 40 65 ..u.X.%.......@e 0080 76 38 f2 76 fa 4b 2b e7 87 26 14 85 1b 67 33 28 v8.v.K+..&...g3( 0090 84 d0 26 1d db 94 a8 42 8e 45 92 44 38 4e 4c 0a ..&....B.E.D8NL. 00a0 d1 a5 7b b8 23 20 b8 e3 13 90 8f c3 6c 91 7c 72 ..{.# ......l.|r 00b0 b3 a7 b9 b9 ec 21 d5 7b 0d 06 fd 8c 4e 6e 96 fd .....!.{....Nn.. 00c0 6d af 0d ad 06 e1 dc 18 c7 a3 99 6e bf 11 bb dd m..........n.... 00d0 30 a0 d0 03 fd a9 af 7f 23 8a f1 ad e2 1f a7 53 0.......#......S 00e0 2e 7e 17 17 b7 1b 3e a2 06 f1 1c 5f 68 a9 3d b5 .~....>...._h.=. 00f0 52 f2 dc 23 51 db 98 e8 09 08 89 59 96 79 56 e6 R..#Q......Y.yV. 0100 95 f2 22 34 9d 10 b3 9b 13 d4 9b 7b b8 0d d0 50 .."4.......{...P 0110 f1 05 24 26 38 81 a6 99 fb 0f e1 ba b9 32 1b 29 ..$&8........2.) 0120 4b 97 97 d3 ed eb 45 a2 14 d6 be 85 02 64 74 89 K.....E......dt. 0130 94 cf 82 0d 98 0b 6b 4e d0 ab 4d 32 67 6a 29 b1 ......kN..M2gj). 0140 47 12 1d 64 04 82 6f 5f a1 27 a5 f8 78 e1 32 28 G..d..o_.'..x.2( 0150 0e 73 34 8c 04 b4 c7 3b fd 8e 3e a7 20 72 65 e4 .s4....;..>. re. 0160 68 bb 70 75 d4 ed 0e 16 ba 3f ae 6f bd 91 01 83 h.pu.....?.o.... 0170 3f 23 92 44 c3 76 ec d7 7c 47 51 38 e4 87 f8 6b ?#.D.v..|GQ8...k 0180 d1 b7 fc cf 3d cb 92 45 86 ff d3 63 10 8c 1f 07 ....=..E...c.... 0190 38 86 89 c1 4b cd 8...K. Frame 18 (406 bytes on wire, 406 bytes captured) Arrival Time: May 27, 2009 15:45:39.135195000 [Time delta from previous captured frame: 0.005837000 seconds] [Time delta from previous displayed frame: 0.005837000 seconds] [Time since reference or first frame: 6.432410000 seconds] Frame Number: 18 Frame Length: 406 bytes Capture Length: 406 bytes [Frame is marked: False] [Protocols in frame: eth:ip:esp] Ethernet II, Src: 00:24:b2:31:e1:3d (00:24:b2:31:e1:3d), Dst: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00) Destination: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00) Address: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:24:b2:31:e1:3d (00:24:b2:31:e1:3d) Address: 00:24:b2:31:e1:3d (00:24:b2:31:e1:3d) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.138 (165.227.249.138), Dst: 165.227.249.150 (165.227.249.150) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 392 Identification: 0x128c (4748) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x27d0 [correct] [Good: True] [Bad : False] Source: 165.227.249.138 (165.227.249.138) Destination: 165.227.249.150 (165.227.249.150) Encapsulating Security Payload ESP SPI: 0xf66814b1 ESP Sequence: 1 0000 00 0c 29 93 b9 00 00 24 b2 31 e1 3d 08 00 45 00 ..)....$.1.=..E. 0010 01 88 12 8c 00 00 40 32 27 d0 a5 e3 f9 8a a5 e3 ......@2'....... 0020 f9 96 f6 68 14 b1 00 00 00 01 74 6c 24 ea 10 58 ...h......tl$..X 0030 41 49 b3 3d 8d 74 51 1f 93 29 9b 99 38 af db e2 AI.=.tQ..)..8... 0040 b3 dc 2b 90 1c 3b 93 1b 1d 51 9b 31 fa 6c cf 02 ..+..;...Q.1.l.. 0050 90 73 ee 22 99 d1 16 c9 7c e6 f5 62 53 f0 d1 d3 .s."....|..bS... 0060 b6 74 e5 ac f5 85 3b a4 e0 6e 04 fe 54 fc d4 d7 .t....;..n..T... 0070 b3 b9 f2 07 1f 19 2d e6 fe ce 76 24 35 0a 0b 99 ......-...v$5... 0080 85 ee 4a 22 ed e4 35 87 2b 2a 75 99 98 30 75 02 ..J"..5.+*u..0u. 0090 43 02 d9 20 10 ac bb 1b 0a 1a 20 20 8f 00 72 d9 C.. ...... ..r. 00a0 1c de 9d 80 90 50 78 13 70 0b ef d2 46 74 d2 a3 .....Px.p...Ft.. 00b0 1e 31 e7 40 32 f4 c8 48 61 8f c3 3a 75 a6 01 47 .1.@2..Ha..:u..G 00c0 07 a6 5e c5 11 68 80 b9 69 c5 fb 0b 23 21 a1 c4 ..^..h..i...#!.. 00d0 e4 79 f2 24 55 2b f6 cc 0d 11 29 5e 91 8d 8e ad .y.$U+....)^.... 00e0 a1 12 42 18 25 d4 f8 87 32 d1 38 5d 62 fe 94 dc ..B.%...2.8]b... 00f0 b7 83 ac 9e f8 61 7d 2d 4f c0 46 28 28 d0 52 9d .....a}-O.F((.R. 0100 fa b8 1a 8b 7c 24 c1 6f 08 7f 3c 78 7b f9 48 29 ....|$.o..