Frame 1 (222 bytes on wire, 222 bytes captured) Arrival Time: Apr 27, 2007 15:57:59.206408000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 222 bytes Capture Length: 222 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa), Dst: 00:0c:29:b3:76:0f (00:0c:29:b3:76:0f) Destination: 00:0c:29:b3:76:0f (00:0c:29:b3:76:0f) Source: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.140 (165.227.249.140) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 208 Identification: 0x4121 (16673) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xba06 [correct] Good: True Bad : False Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.140 (165.227.249.140) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 188 Checksum: 0xbcc0 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x75D00BD6B109E705 Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 180 Security Association payload Next payload: Vendor ID (13) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 40 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 32 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: unknown vendor ID: 0x4A131C81070358455C5728F20E95452F Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-03 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: RFC 3706 Detecting Dead IKE Peers (DPD) 0000 00 0c 29 b3 76 0f 00 0c 29 96 e1 fa 08 00 45 00 ..).v...).....E. 0010 00 d0 41 21 00 00 80 11 ba 06 a5 e3 f9 96 a5 e3 ..A!............ 0020 f9 97 01 f4 01 f4 00 bc bc c0 75 d0 0b d6 b1 09 ..........u..... 0030 e7 05 00 00 00 00 00 00 00 00 01 10 02 00 00 00 ................ 0040 00 00 00 00 00 b4 0d 00 00 34 00 00 00 01 00 00 .........4...... 0050 00 01 00 00 00 28 01 01 00 01 00 00 00 20 01 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 04 00 02 80 03 ................ 0070 00 01 80 0b 00 01 80 0c 70 80 0d 00 00 14 4a 13 ........p.....J. 0080 1c 81 07 03 58 45 5c 57 28 f2 0e 95 45 2f 0d 00 ....XE\W(...E/.. 0090 00 14 7d 94 19 a6 53 10 ca 6f 2c 17 9d 92 15 52 ..}...S..o,....R 00a0 9d 56 0d 00 00 14 90 cb 80 91 3e bb 69 6e 08 63 .V........>.in.c 00b0 81 b5 ec 42 7b 1f 0d 00 00 14 44 85 15 2d 18 b6 ...B{.....D..-.. 00c0 bb cd 0b e8 a8 46 95 79 dd cc 00 00 00 14 af ca .....F.y........ 00d0 d7 13 68 a1 f1 c9 6b 86 96 fc 77 57 01 00 ..h...k...wW.. Frame 2 (190 bytes on wire, 190 bytes captured) Arrival Time: Apr 27, 2007 15:57:59.206409000 Time delta from previous packet: 0.000001000 seconds Time since reference or first frame: 0.000001000 seconds Frame Number: 2 Packet Length: 190 bytes Capture Length: 190 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:b3:76:0f (00:0c:29:b3:76:0f), Dst: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Destination: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Source: 00:0c:29:b3:76:0f (00:0c:29:b3:76:0f) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.140 (165.227.249.140), Dst: 165.227.249.150 (165.227.249.150) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 176 Identification: 0x0478 (1144) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf6cf [correct] Good: True Bad : False Source: 165.227.249.140 (165.227.249.140) Destination: 165.227.249.150 (165.227.249.150) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 156 Checksum: 0xd8c4 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x75D00BD6B109E705 Responder cookie: 0x23AC3F7978A96809 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 148 Security Association payload Next payload: Vendor ID (13) Length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 44 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 36 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: Vendor ID (13) Length: 24 Vendor ID: MS NT5 ISAKMPOAKLEY Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: Microsoft L2TP/IPSec VPN Client Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 0000 00 0c 29 96 e1 fa 00 0c 29 b3 76 0f 08 00 45 00 ..).....).v...E. 0010 00 b0 04 78 00 00 80 11 f6 cf a5 e3 f9 97 a5 e3 ...x............ 0020 f9 96 01 f4 01 f4 00 9c d8 c4 75 d0 0b d6 b1 09 ..........u..... 0030 e7 05 23 ac 3f 79 78 a9 68 09 01 10 02 00 00 00 ..#.?yx.h....... 0040 00 00 00 00 00 94 0d 00 00 38 00 00 00 01 00 00 .........8...... 0050 00 01 00 00 00 2c 01 01 00 01 00 00 00 24 01 01 .....,.......$.. 0060 00 00 80 01 00 05 80 02 00 02 80 04 00 02 80 03 ................ 0070 00 01 80 0b 00 01 00 0c 00 04 00 00 70 80 0d 00 ............p... 0080 00 18 1e 2b 51 69 05 99 1c 7d 7c 96 fc bf b5 87 ...+Qi...}|..... 0090 e4 61 00 00 00 04 0d 00 00 14 40 48 b7 d5 6e bc .a........@H..n. 00a0 e8 85 25 e7 de 7f 00 d6 c2 d3 00 00 00 14 90 cb ..%............. 00b0 80 91 3e bb 69 6e 08 63 81 b5 ec 42 7b 1f ..>.in.c...B{. Frame 3 (270 bytes on wire, 270 bytes captured) Arrival Time: Apr 27, 2007 15:57:59.249850000 Time delta from previous packet: 0.043441000 seconds Time since reference or first frame: 0.043442000 seconds Frame Number: 3 Packet Length: 270 bytes Capture Length: 270 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa), Dst: 00:0c:29:b3:76:0f (00:0c:29:b3:76:0f) Destination: 00:0c:29:b3:76:0f (00:0c:29:b3:76:0f) Source: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.140 (165.227.249.140) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 256 Identification: 0x4122 (16674) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xb9d5 [correct] Good: True Bad : False Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.140 (165.227.249.140) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 236 Checksum: 0xeae1 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x75D00BD6B109E705 Responder cookie: 0x23AC3F7978A96809 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 228 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NAT-D (draft-ietf-ipsec-nat-t-ike-01 to 03) (130) Length: 20 Nonce Data NAT-D (draft-ietf-ipsec-nat-t-ike-01 to 03) payload Next payload: NAT-D (draft-ietf-ipsec-nat-t-ike-01 to 03) (130) Length: 24 Hash of address and port: 0D9B39E476052946378DF3D6C855534A9E269FD1 NAT-D (draft-ietf-ipsec-nat-t-ike-01 to 03) payload Next payload: NONE (0) Length: 24 Hash of address and port: 92CD40B3C8EF1C1DFE500DF2DF4E3078FA54DFAC 0000 00 0c 29 b3 76 0f 00 0c 29 96 e1 fa 08 00 45 00 ..).v...).....E. 0010 01 00 41 22 00 00 80 11 b9 d5 a5 e3 f9 96 a5 e3 ..A"............ 0020 f9 97 01 f4 01 f4 00 ec ea e1 75 d0 0b d6 b1 09 ..........u..... 0030 e7 05 23 ac 3f 79 78 a9 68 09 04 10 02 00 00 00 ..#.?yx.h....... 0040 00 00 00 00 00 e4 0a 00 00 84 f2 5c dd 16 37 c8 ...........\..7. 0050 c4 45 6d ae 36 ec 22 d4 cc 68 62 14 c0 69 bd 84 .Em.6."..hb..i.. 0060 b4 17 b0 e7 4b 1d ab 7a 12 2a 8f 84 70 7d 7f 72 ....K..z.*..p}.r 0070 a4 5a c1 f1 45 de 22 40 af 30 a2 b0 c3 c3 e6 53 .Z..E."@.0.....S 0080 5a 24 dd d1 22 41 1e 2b da 24 7e da 69 92 fe 2c Z$.."A.+.$~.i.., 0090 0c 4f ea dc 3f cc 05 2a 27 15 aa f5 f8 ce fb b6 .O..?..*'....... 00a0 e5 54 04 3c e9 a0 54 f5 bd 17 c9 50 ac be c4 18 .T.<..T....P.... 00b0 2f 00 84 ce e8 1b 04 12 5f 80 50 61 bf 77 41 27 /......._.Pa.wA' 00c0 62 2b 4b 14 a8 06 c9 dd f3 f8 82 00 00 14 ad b6 b+K............. 00d0 36 dd 38 99 bb 06 53 d5 a5 ce 48 65 72 a1 82 00 6.8...S...Her... 00e0 00 18 0d 9b 39 e4 76 05 29 46 37 8d f3 d6 c8 55 ....9.v.)F7....U 00f0 53 4a 9e 26 9f d1 00 00 00 18 92 cd 40 b3 c8 ef SJ.&........@... 0100 1c 1d fe 50 0d f2 df 4e 30 78 fa 54 df ac ...P...N0x.T.. Frame 4 (274 bytes on wire, 274 bytes captured) Arrival Time: Apr 27, 2007 15:57:59.256036000 Time delta from previous packet: 0.006186000 seconds Time since reference or first frame: 0.049628000 seconds Frame Number: 4 Packet Length: 274 bytes Capture Length: 274 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:b3:76:0f (00:0c:29:b3:76:0f), Dst: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Destination: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Source: 00:0c:29:b3:76:0f (00:0c:29:b3:76:0f) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.140 (165.227.249.140), Dst: 165.227.249.150 (165.227.249.150) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 260 Identification: 0x0479 (1145) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf67a [correct] Good: True Bad : False Source: 165.227.249.140 (165.227.249.140) Destination: 165.227.249.150 (165.227.249.150) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 240 Checksum: 0x9ca7 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x75D00BD6B109E705 Responder cookie: 0x23AC3F7978A96809 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 232 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NAT-D (draft-ietf-ipsec-nat-t-ike-01 to 03) (130) Length: 24 Nonce Data NAT-D (draft-ietf-ipsec-nat-t-ike-01 to 03) payload Next payload: NAT-D (draft-ietf-ipsec-nat-t-ike-01 to 03) (130) Length: 24 Hash of address and port: 92CD40B3C8EF1C1DFE500DF2DF4E3078FA54DFAC NAT-D (draft-ietf-ipsec-nat-t-ike-01 to 03) payload Next payload: NONE (0) Length: 24 Hash of address and port: 0D9B39E476052946378DF3D6C855534A9E269FD1 0000 00 0c 29 96 e1 fa 00 0c 29 b3 76 0f 08 00 45 00 ..).....).v...E. 0010 01 04 04 79 00 00 80 11 f6 7a a5 e3 f9 97 a5 e3 ...y.....z...... 0020 f9 96 01 f4 01 f4 00 f0 9c a7 75 d0 0b d6 b1 09 ..........u..... 0030 e7 05 23 ac 3f 79 78 a9 68 09 04 10 02 00 00 00 ..#.?yx.h....... 0040 00 00 00 00 00 e8 0a 00 00 84 2c d2 fb f7 44 ad ..........,...D. 0050 99 44 51 77 8f 53 c8 23 72 2e ad 88 9f ad 2c 33 .DQw.S.#r.....,3 0060 ea 1b 7f 40 76 fa 22 cd 0e cb 12 ae 59 c2 c3 02 ...@v.".....Y... 0070 b0 5b 0e 86 35 2f 9c 1a 7a ce 4a e8 d4 54 e3 59 .[..5/..z.J..T.Y 0080 30 97 24 38 0a 80 00 ae fa e9 00 4f ca 76 a5 41 0.$8.......O.v.A 0090 65 ab 6c 42 1f b7 71 b1 eb b7 e0 b7 68 f7 97 22 e.lB..q.....h.." 00a0 f4 f8 2f 1b bf 34 f2 f7 4a 56 ba c9 82 b3 a1 78 ../..4..JV.....x 00b0 7b 11 a8 a4 cd f8 d7 ba 28 ed 18 d2 a1 87 16 dc {.......(....... 00c0 44 24 09 a1 bc bc 1b 4a 23 bc 82 00 00 18 a6 78 D$.....J#......x 00d0 ea 40 b6 09 ca c7 bb ef 12 57 8e 40 d4 2c 71 83 .@.......W.@.,q. 00e0 eb 6a 82 00 00 18 92 cd 40 b3 c8 ef 1c 1d fe 50 .j......@......P 00f0 0d f2 df 4e 30 78 fa 54 df ac 00 00 00 18 0d 9b ...N0x.T........ 0100 39 e4 76 05 29 46 37 8d f3 d6 c8 55 53 4a 9e 26 9.v.)F7....USJ.& 0110 9f d1 .. Frame 5 (142 bytes on wire, 142 bytes captured) Arrival Time: Apr 27, 2007 15:57:59.280478000 Time delta from previous packet: 0.024442000 seconds Time since reference or first frame: 0.074070000 seconds Frame Number: 5 Packet Length: 142 bytes Capture Length: 142 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa), Dst: 00:0c:29:b3:76:0f (00:0c:29:b3:76:0f) Destination: 00:0c:29:b3:76:0f (00:0c:29:b3:76:0f) Source: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.140 (165.227.249.140) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 128 Identification: 0x4123 (16675) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xba54 [correct] Good: True Bad : False Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.140 (165.227.249.140) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 108 Checksum: 0x91ed [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x75D00BD6B109E705 Responder cookie: 0x23AC3F7978A96809 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 100 Encrypted payload (72 bytes) 0000 00 0c 29 b3 76 0f 00 0c 29 96 e1 fa 08 00 45 00 ..).v...).....E. 0010 00 80 41 23 00 00 80 11 ba 54 a5 e3 f9 96 a5 e3 ..A#.....T...... 0020 f9 97 01 f4 01 f4 00 6c 91 ed 75 d0 0b d6 b1 09 .......l..u..... 0030 e7 05 23 ac 3f 79 78 a9 68 09 05 10 02 01 00 00 ..#.?yx.h....... 0040 00 00 00 00 00 64 0a 4b ad fc d9 c2 26 23 ad 02 .....d.K....&#.. 0050 85 cd 10 9b e2 84 e2 63 70 96 53 00 d4 cf 0a 28 .......cp.S....( 0060 53 dc 36 e1 53 8f 75 ea 90 02 6f 5f 16 95 db 3d S.6.S.u...o_...= 0070 e8 8d ab 44 9b f0 20 d7 26 4f f3 91 6f dc 91 1a ...D.. .&O..o... 0080 bf d8 6b 00 38 4d 73 1d d2 40 ce 81 3a 52 ..k.8Ms..@..:R Frame 6 (110 bytes on wire, 110 bytes captured) Arrival Time: Apr 27, 2007 15:57:59.285474000 Time delta from previous packet: 0.004996000 seconds Time since reference or first frame: 0.079066000 seconds Frame Number: 6 Packet Length: 110 bytes Capture Length: 110 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:b3:76:0f (00:0c:29:b3:76:0f), Dst: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Destination: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Source: 00:0c:29:b3:76:0f (00:0c:29:b3:76:0f) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.140 (165.227.249.140), Dst: 165.227.249.150 (165.227.249.150) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0x047a (1146) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf71d [correct] Good: True Bad : False Source: 165.227.249.140 (165.227.249.140) Destination: 165.227.249.150 (165.227.249.150) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 76 Checksum: 0xb28c [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x75D00BD6B109E705 Responder cookie: 0x23AC3F7978A96809 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 68 Encrypted payload (40 bytes) 0000 00 0c 29 96 e1 fa 00 0c 29 b3 76 0f 08 00 45 00 ..).....).v...E. 0010 00 60 04 7a 00 00 80 11 f7 1d a5 e3 f9 97 a5 e3 .`.z............ 0020 f9 96 01 f4 01 f4 00 4c b2 8c 75 d0 0b d6 b1 09 .......L..u..... 0030 e7 05 23 ac 3f 79 78 a9 68 09 05 10 02 01 00 00 ..#.?yx.h....... 0040 00 00 00 00 00 44 04 ca 8d 94 af 6e 28 53 4b f9 .....D.....n(SK. 0050 df fa a7 cb 97 1e 9c 76 28 25 76 a0 65 d6 72 f3 .......v(%v.e.r. 0060 38 4f 2a 80 2e ec 69 a1 c6 47 78 a2 81 bc 8O*...i..Gx... Frame 7 (334 bytes on wire, 334 bytes captured) Arrival Time: Apr 27, 2007 15:57:59.325025000 Time delta from previous packet: 0.039551000 seconds Time since reference or first frame: 0.118617000 seconds Frame Number: 7 Packet Length: 334 bytes Capture Length: 334 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa), Dst: 00:0c:29:b3:76:0f (00:0c:29:b3:76:0f) Destination: 00:0c:29:b3:76:0f (00:0c:29:b3:76:0f) Source: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.140 (165.227.249.140) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 320 Identification: 0x4124 (16676) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xb993 [correct] Good: True Bad : False Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.140 (165.227.249.140) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 300 Checksum: 0x3b59 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x75D00BD6B109E705 Responder cookie: 0x23AC3F7978A96809 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x578A77E7 Length: 292 Encrypted payload (264 bytes) 0000 00 0c 29 b3 76 0f 00 0c 29 96 e1 fa 08 00 45 00 ..).v...).....E. 0010 01 40 41 24 00 00 80 11 b9 93 a5 e3 f9 96 a5 e3 .@A$............ 0020 f9 97 01 f4 01 f4 01 2c 3b 59 75 d0 0b d6 b1 09 .......,;Yu..... 0030 e7 05 23 ac 3f 79 78 a9 68 09 08 10 20 01 57 8a ..#.?yx.h... .W. 0040 77 e7 00 00 01 24 23 93 f5 25 a5 14 5d 62 1d c3 w....$#..%..]b.. 0050 e2 35 05 5f 38 f1 8a 48 3a c0 f6 6b 90 1a 5a 3c .5._8..H:..k..Z< 0060 70 67 30 2e c5 cf c1 a0 b7 29 ae de af af bd 73 pg0......).....s 0070 0e 42 72 f9 e8 b3 4e 7f 6f 42 86 2f c3 f7 eb 3d .Br...N.oB./...= 0080 c9 43 1b 35 20 6c 6b 5f a2 77 51 b1 a3 03 8a 21 .C.5 lk_.wQ....! 0090 1b 8d 6a f7 0c 36 7d fb a5 10 f5 fc 1b d3 11 e1 ..j..6}......... 00a0 8f 21 ad db 39 e9 db 49 84 ff 74 87 6f 36 41 9f .!..9..I..t.o6A. 00b0 8f ae f9 4a 9d 1a 95 e9 4d 5f 6d 83 3e b6 c4 1e ...J....M_m.>... 00c0 b8 87 34 54 fa bb 7c a1 10 5a d0 8e bc 28 96 3a ..4T..|..Z...(.: 00d0 27 c7 95 76 73 af fd be 14 a2 5e a2 67 0d 74 b0 '..vs.....^.g.t. 00e0 a2 7a 6a 9e 5c 55 4f 4a 69 15 b4 e5 f2 7b a7 fa .zj.\UOJi....{.. 00f0 81 c2 bd 0c 19 ea 7d 3c 06 73 0f 81 8d 6d e1 8f ......}<.s...m.. 0100 ff 46 b8 78 8a 3e 6f 43 aa a9 d0 1c d2 1d 98 a4 .F.x.>oC........ 0110 24 f6 c4 ed 88 70 56 33 2e 6e cf c9 89 a8 37 16 $....pV3.n....7. 0120 65 ee 3c 7d b3 82 79 08 18 9e 29 c4 ae 20 b4 24 e.<}..y...).. .$ 0130 73 75 ff 29 9c 6c b0 28 f9 8a 75 da 91 1e 5a 71 su.).l.(..u...Zq 0140 42 1c c7 cd 56 a7 8e 48 83 0f 15 2a db e4 B...V..H...*.. Frame 8 (334 bytes on wire, 334 bytes captured) Arrival Time: Apr 27, 2007 15:57:59.328936000 Time delta from previous packet: 0.003911000 seconds Time since reference or first frame: 0.122528000 seconds Frame Number: 8 Packet Length: 334 bytes Capture Length: 334 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:b3:76:0f (00:0c:29:b3:76:0f), Dst: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Destination: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Source: 00:0c:29:b3:76:0f (00:0c:29:b3:76:0f) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.140 (165.227.249.140), Dst: 165.227.249.150 (165.227.249.150) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 320 Identification: 0x047b (1147) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf63c [correct] Good: True Bad : False Source: 165.227.249.140 (165.227.249.140) Destination: 165.227.249.150 (165.227.249.150) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 300 Checksum: 0x1d12 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x75D00BD6B109E705 Responder cookie: 0x23AC3F7978A96809 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encrypted .... ..1. = Commit .... .0.. = No authentication Message ID: 0x578A77E7 Length: 292 Encrypted payload (264 bytes) 0000 00 0c 29 96 e1 fa 00 0c 29 b3 76 0f 08 00 45 00 ..).....).v...E. 0010 01 40 04 7b 00 00 80 11 f6 3c a5 e3 f9 97 a5 e3 .@.{.....<...... 0020 f9 96 01 f4 01 f4 01 2c 1d 12 75 d0 0b d6 b1 09 .......,..u..... 0030 e7 05 23 ac 3f 79 78 a9 68 09 08 10 20 03 57 8a ..#.?yx.h... .W. 0040 77 e7 00 00 01 24 7d 9b 46 47 43 b1 53 57 47 02 w....$}.FGC.SWG. 0050 1e de c0 2b 0a 8d fa a0 46 88 62 ab c3 4f 18 1d ...+....F.b..O.. 0060 4a 8f 19 57 c8 66 27 5f 76 19 4c b7 00 45 c8 af J..W.f'_v.L..E.. 0070 25 94 3d bc 9f 19 1b d9 b2 75 fa 3d 27 84 b5 3f %.=......u.='..? 0080 6b 16 10 a3 6e 5b 3c c8 41 a9 a5 3a 55 35 21 48 k...n[<.A..:U5!H 0090 6c f6 4b 94 d2 43 3b 0e 3a 36 b4 c4 2a 19 0c 21 l.K..C;.:6..*..! 00a0 80 09 8a 40 78 9d 31 d2 c8 ee 61 33 81 e5 d2 fa ...@x.1...a3.... 00b0 f2 4d e8 84 59 3b d5 0e 17 f4 40 6b 52 7d 22 84 .M..Y;....@kR}". 00c0 89 ef 7e 6d 8e 38 58 a0 9a 13 71 46 51 09 9c ea ..~m.8X...qFQ... 00d0 e5 c0 62 91 0d e5 19 a1 0b da b6 54 63 0a 59 a4 ..b........Tc.Y. 00e0 cd 95 87 25 bc 96 21 86 59 65 16 1b 8a b5 85 95 ...%..!.Ye...... 00f0 42 5d 6c 2a 24 d2 f0 f5 53 92 6c e4 1a 4b 72 1a B]l*$...S.l..Kr. 0100 bf ee 71 e5 e2 35 a7 43 0e bb 70 68 f5 80 39 f6 ..q..5.C..ph..9. 0110 29 a2 65 eb c6 21 10 c5 e1 0f 26 d4 2d 4f 1d a8 ).e..!....&.-O.. 0120 5d fb d3 20 69 fd a7 bd 0f 0d 7a 95 1e 14 ec 18 ].. i.....z..... 0130 5c 1d 21 2c 4b 91 c6 9d 97 7f 92 e5 68 06 5b 7a \.!,K.......h.[z 0140 aa 72 0a 90 27 7f 66 c9 e7 f9 fb 26 03 3f .r..'.f....&.? Frame 9 (102 bytes on wire, 102 bytes captured) Arrival Time: Apr 27, 2007 15:57:59.425792000 Time delta from previous packet: 0.096856000 seconds Time since reference or first frame: 0.219384000 seconds Frame Number: 9 Packet Length: 102 bytes Capture Length: 102 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa), Dst: 00:0c:29:b3:76:0f (00:0c:29:b3:76:0f) Destination: 00:0c:29:b3:76:0f (00:0c:29:b3:76:0f) Source: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.140 (165.227.249.140) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 88 Identification: 0x4125 (16677) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xba7a [correct] Good: True Bad : False Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.140 (165.227.249.140) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 68 Checksum: 0x6dcc [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x75D00BD6B109E705 Responder cookie: 0x23AC3F7978A96809 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x578A77E7 Length: 60 Encrypted payload (32 bytes) 0000 00 0c 29 b3 76 0f 00 0c 29 96 e1 fa 08 00 45 00 ..).v...).....E. 0010 00 58 41 25 00 00 80 11 ba 7a a5 e3 f9 96 a5 e3 .XA%.....z...... 0020 f9 97 01 f4 01 f4 00 44 6d cc 75 d0 0b d6 b1 09 .......Dm.u..... 0030 e7 05 23 ac 3f 79 78 a9 68 09 08 10 20 01 57 8a ..#.?yx.h... .W. 0040 77 e7 00 00 00 3c 8a 82 96 ec 9a 01 56 f1 00 02 w....<......V... 0050 bc 6e 60 91 8a fa 60 0a 1f b1 7f d6 80 66 85 50 .n`...`......f.P 0060 28 44 2b f9 e5 89 (D+... Frame 10 (118 bytes on wire, 118 bytes captured) Arrival Time: Apr 27, 2007 15:57:59.430254000 Time delta from previous packet: 0.004462000 seconds Time since reference or first frame: 0.223846000 seconds Frame Number: 10 Packet Length: 118 bytes Capture Length: 118 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:b3:76:0f (00:0c:29:b3:76:0f), Dst: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Destination: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Source: 00:0c:29:b3:76:0f (00:0c:29:b3:76:0f) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.140 (165.227.249.140), Dst: 165.227.249.150 (165.227.249.150) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 104 Identification: 0x047c (1148) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf713 [correct] Good: True Bad : False Source: 165.227.249.140 (165.227.249.140) Destination: 165.227.249.150 (165.227.249.150) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 84 Checksum: 0x40a8 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x75D00BD6B109E705 Responder cookie: 0x23AC3F7978A96809 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encrypted .... ..1. = Commit .... .0.. = No authentication Message ID: 0x578A77E7 Length: 76 Encrypted payload (48 bytes) 0000 00 0c 29 96 e1 fa 00 0c 29 b3 76 0f 08 00 45 00 ..).....).v...E. 0010 00 68 04 7c 00 00 80 11 f7 13 a5 e3 f9 97 a5 e3 .h.|............ 0020 f9 96 01 f4 01 f4 00 54 40 a8 75 d0 0b d6 b1 09 .......T@.u..... 0030 e7 05 23 ac 3f 79 78 a9 68 09 08 10 20 03 57 8a ..#.?yx.h... .W. 0040 77 e7 00 00 00 4c e3 98 26 e3 61 ee 09 47 36 ad w....L..&.a..G6. 0050 2e e2 3c 01 d5 2b 61 3c 7c a5 fc df 34 39 37 77 ..<..+a<|...497w 0060 b4 e5 e2 50 03 0a 3d 77 75 bf e2 29 2b 95 56 ec ...P..=wu..)+.V. 0070 34 20 d6 4c 36 f1 4 .L6. Frame 11 (398 bytes on wire, 398 bytes captured) Arrival Time: Apr 27, 2007 15:58:07.925874000 Time delta from previous packet: 8.495620000 seconds Time since reference or first frame: 8.719466000 seconds Frame Number: 11 Packet Length: 398 bytes Capture Length: 398 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa), Dst: 00:0c:29:b3:76:0f (00:0c:29:b3:76:0f) Destination: 00:0c:29:b3:76:0f (00:0c:29:b3:76:0f) Source: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.140 (165.227.249.140) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 384 Identification: 0x4127 (16679) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: ESP (0x32) Header checksum: 0xb92f [correct] Good: True Bad : False Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.140 (165.227.249.140) Encapsulating Security Payload SPI: 0xbb857fea Sequence: 1 Data (356 bytes) 0000 00 0c 29 b3 76 0f 00 0c 29 96 e1 fa 08 00 45 00 ..).v...).....E. 0010 01 80 41 27 00 00 80 32 b9 2f a5 e3 f9 96 a5 e3 ..A'...2./...... 0020 f9 97 bb 85 7f ea 00 00 00 01 5f cd 30 ad 4b f6 .........._.0.K. 0030 31 c4 65 47 cc 40 ff ea 2d 0e 30 a5 51 21 75 1a 1.eG.@..-.0.Q!u. 0040 43 3c 98 07 c7 10 6b 9a ba 32 eb 93 e2 4c bc dc C<....k..2...L.. 0050 02 b3 04 03 6a a1 b0 6b 9b ae 1c 53 17 9b c9 42 ....j..k...S...B 0060 d1 ae 33 44 22 c9 bf 4b ff e3 ce d7 63 e5 a9 d9 ..3D"..K....c... 0070 b6 78 78 30 4b 9d a6 50 69 08 dd 53 4b 2b 1a d5 .xx0K..Pi..SK+.. 0080 73 a7 81 85 a7 d2 bd b7 aa 03 a9 e1 da eb 8f ad s............... 0090 d6 86 02 4c bb db 27 9d b2 b3 c8 4b 44 96 84 c0 ...L..'....KD... 00a0 70 0c 7a 8b 7f 01 90 3b a6 6d 25 75 e7 0f a4 89 p.z....;.m%u.... 00b0 98 e6 66 fb b0 b1 32 07 f6 0d 53 ef 85 d5 a0 09 ..f...2...S..... 00c0 bb fa 41 3a c9 38 e2 b2 5b a4 60 e3 a5 dc 2f 25 ..A:.8..[.`.../% 00d0 f4 68 90 f3 06 9a 79 12 30 56 28 1d 92 e2 51 7c .h....y.0V(...Q| 00e0 ea 0d 25 b7 ed 82 b4 bd 13 bd 4c 83 42 cc e4 cd ..%.......L.B... 00f0 ef 65 ed a5 67 67 cb 3a e3 21 e9 d3 54 50 03 53 .e..gg.:.!..TP.S 0100 62 38 7a 41 ed 3f 17 61 d8 70 48 89 81 ec 4e ee b8zA.?.a.pH...N. 0110 13 f1 26 96 71 73 ac a3 61 03 a7 3e a7 43 ef 17 ..&.qs..a..>.C.. 0120 27 6a a6 55 0a 44 4e ec be fc b8 14 ba 80 b8 0d 'j.U.DN......... 0130 ef 3b 2e 45 92 97 0b 95 2b 2a ed 05 d8 51 8b c6 .;.E....+*...Q.. 0140 93 5b c8 09 57 bd ca c6 bf 3f fc 2d 54 72 7c a1 .[..W....?.-Tr|. 0150 d1 2e dd 01 f0 51 b6 7f 6d 63 29 f6 b1 26 86 ed .....Q..mc)..&.. 0160 a7 65 5b cb 09 30 71 3b 4a 9a 12 df aa dd 62 10 .e[..0q;J.....b. 0170 15 66 e4 09 85 ee 7a d2 d8 ae c4 7b 97 e4 62 90 .f....z....{..b. 0180 3c ed d3 95 50 e1 df ea b8 8b 77 39 62 aa <...P.....w9b. Frame 12 (398 bytes on wire, 398 bytes captured) Arrival Time: Apr 27, 2007 15:58:07.929763000 Time delta from previous packet: 0.003889000 seconds Time since reference or first frame: 8.723355000 seconds Frame Number: 12 Packet Length: 398 bytes Capture Length: 398 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:0c:29:b3:76:0f (00:0c:29:b3:76:0f), Dst: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Destination: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Source: 00:0c:29:b3:76:0f (00:0c:29:b3:76:0f) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.140 (165.227.249.140), Dst: 165.227.249.150 (165.227.249.150) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 384 Identification: 0x7e04 (32260) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 127 Protocol: ESP (0x32) Header checksum: 0x7d52 [correct] Good: True Bad : False Source: 165.227.249.140 (165.227.249.140) Destination: 165.227.249.150 (165.227.249.150) Encapsulating Security Payload SPI: 0x5f3889c6 Sequence: 1 Data (356 bytes) 0000 00 0c 29 96 e1 fa 00 0c 29 b3 76 0f 08 00 45 00 ..).....).v...E. 0010 01 80 7e 04 00 00 7f 32 7d 52 a5 e3 f9 97 a5 e3 ..~....2}R...... 0020 f9 96 5f 38 89 c6 00 00 00 01 da 12 72 c8 a7 f2 .._8........r... 0030 0c 1d f1 0e 81 33 9d 73 e8 82 de a8 93 6c 7f 80 .....3.s.....l.. 0040 54 c8 fc 9e 9a 07 65 80 35 20 21 3a 18 ad 06 f7 T.....e.5 !:.... 0050 45 35 ac 1d 74 07 8b ba 66 19 47 4b 98 6c fb 99 E5..t...f.GK.l.. 0060 0a 1e 15 29 a4 37 b0 f9 c5 6d 2d 98 79 50 b9 ca ...).7...m-.yP.. 0070 fa c9 c3 1c 03 e0 1e 9e 14 a5 65 d2 af 8d 41 ec ..........e...A. 0080 92 ac 21 48 60 83 4c 42 ba 32 54 5d 6b f5 cd 72 ..!H`.LB.2T]k..r 0090 02 f6 bd 1c 90 ca cf e7 7a 55 87 35 0f 21 88 fa ........zU.5.!.. 00a0 9a 13 d5 e9 44 8b aa 35 d5 53 d4 12 e3 a8 67 42 ....D..5.S....gB 00b0 df 96 fa fe 35 5b c2 2f fc 6b fa c0 c1 97 01 ee ....5[./.k...... 00c0 4e 02 25 35 20 cf d3 5e 8f ce 64 62 53 f9 b9 80 N.%5 ..^..dbS... 00d0 99 41 b0 ce 40 df 0b 8b db 0b 63 5d b2 a4 3b 16 .A..@.....c]..;. 00e0 76 c9 d8 8e 56 f4 a6 16 39 e5 16 37 c0 5f 22 c5 v...V...9..7._". 00f0 c1 2e 20 20 c7 fb c5 bf 35 4e af c6 96 e8 61 bf .. ....5N....a. 0100 eb 12 71 66 f2 35 5c 12 03 81 d3 aa 49 98 44 45 ..qf.5\.....I.DE 0110 6c 12 80 71 2a 58 dd 2c 9d 29 e8 c5 f3 ad 74 23 l..q*X.,.)....t# 0120 a2 04 bf 69 15 4d 27 d6 07 fc 08 e0 57 58 68 f0 ...i.M'.....WXh. 0130 21 02 d7 44 46 ba 5c 31 01 80 ea 64 22 38 d7 60 !..DF.\1...d"8.` 0140 1c 03 7d 3c 4a 87 4b 3a 9a 25 dc 23 5a e4 20 ab ..}