Frame 1 (142 bytes on wire, 142 bytes captured) Arrival Time: May 20, 2008 12:48:49.202697000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 142 bytes Capture Length: 142 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:14:6c:a6:ca:37 (00:14:6c:a6:ca:37), Dst: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00) Destination: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00) Source: 00:14:6c:a6:ca:37 (00:14:6c:a6:ca:37) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.157 (165.227.249.157), Dst: 165.227.249.150 (165.227.249.150) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 128 Identification: 0x0070 (112) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb01 [correct] Good: True Bad : False Source: 165.227.249.157 (165.227.249.157) Destination: 165.227.249.150 (165.227.249.150) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 108 Checksum: 0x6a99 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xE955E41F5A884BBE Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 100 Security Association payload Next payload: Vendor ID (13) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 0 Next payload: NONE (0) Length: 40 Proposal number: 0 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 0 Next payload: NONE (0) Length: 32 Transform number: 0 Transform ID: KEY_IKE (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: RFC 3706 Detecting Dead IKE Peers (DPD) 0000 00 0c 29 93 b9 00 00 14 6c a6 ca 37 08 00 45 00 ..).....l..7..E. 0010 00 80 00 70 40 00 40 11 fb 01 a5 e3 f9 9d a5 e3 ...p@.@......... 0020 f9 96 01 f4 01 f4 00 6c 6a 99 e9 55 e4 1f 5a 88 .......lj..U..Z. 0030 4b be 00 00 00 00 00 00 00 00 01 10 02 00 00 00 K............... 0040 00 00 00 00 00 64 0d 00 00 34 00 00 00 01 00 00 .....d...4...... 0050 00 01 00 00 00 28 00 01 00 01 00 00 00 20 00 01 .....(....... .. 0060 00 00 80 0b 00 01 80 0c 70 80 80 01 00 05 80 02 ........p....... 0070 00 02 80 03 00 01 80 04 00 02 00 00 00 14 af ca ................ 0080 d7 13 68 a1 f1 c9 6b 86 96 fc 77 57 01 00 ..h...k...wW.. Frame 2 (222 bytes on wire, 222 bytes captured) Arrival Time: May 20, 2008 12:48:56.134258000 Time delta from previous packet: 6.931561000 seconds Time since reference or first frame: 6.931561000 seconds Frame Number: 2 Packet Length: 222 bytes Capture Length: 222 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00), Dst: 00:14:6c:a6:ca:37 (00:14:6c:a6:ca:37) Destination: 00:14:6c:a6:ca:37 (00:14:6c:a6:ca:37) Source: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.157 (165.227.249.157) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 208 Identification: 0x050e (1294) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf613 [correct] Good: True Bad : False Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.157 (165.227.249.157) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 188 Checksum: 0x9a5e [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x27E68218B0A8E16A Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 180 Security Association payload Next payload: Vendor ID (13) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 40 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 32 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: unknown vendor ID: 0x4A131C81070358455C5728F20E95452F Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-03 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: RFC 3706 Detecting Dead IKE Peers (DPD) 0000 00 14 6c a6 ca 37 00 0c 29 93 b9 00 08 00 45 00 ..l..7..).....E. 0010 00 d0 05 0e 00 00 80 11 f6 13 a5 e3 f9 96 a5 e3 ................ 0020 f9 9d 01 f4 01 f4 00 bc 9a 5e 27 e6 82 18 b0 a8 .........^'..... 0030 e1 6a 00 00 00 00 00 00 00 00 01 10 02 00 00 00 .j.............. 0040 00 00 00 00 00 b4 0d 00 00 34 00 00 00 01 00 00 .........4...... 0050 00 01 00 00 00 28 01 01 00 01 00 00 00 20 01 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 04 00 02 80 03 ................ 0070 00 01 80 0b 00 01 80 0c 70 80 0d 00 00 14 4a 13 ........p.....J. 0080 1c 81 07 03 58 45 5c 57 28 f2 0e 95 45 2f 0d 00 ....XE\W(...E/.. 0090 00 14 7d 94 19 a6 53 10 ca 6f 2c 17 9d 92 15 52 ..}...S..o,....R 00a0 9d 56 0d 00 00 14 90 cb 80 91 3e bb 69 6e 08 63 .V........>.in.c 00b0 81 b5 ec 42 7b 1f 0d 00 00 14 44 85 15 2d 18 b6 ...B{.....D..-.. 00c0 bb cd 0b e8 a8 46 95 79 dd cc 00 00 00 14 af ca .....F.y........ 00d0 d7 13 68 a1 f1 c9 6b 86 96 fc 77 57 01 00 ..h...k...wW.. Frame 3 (142 bytes on wire, 142 bytes captured) Arrival Time: May 20, 2008 12:48:56.380354000 Time delta from previous packet: 0.246096000 seconds Time since reference or first frame: 7.177657000 seconds Frame Number: 3 Packet Length: 142 bytes Capture Length: 142 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:14:6c:a6:ca:37 (00:14:6c:a6:ca:37), Dst: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00) Destination: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00) Source: 00:14:6c:a6:ca:37 (00:14:6c:a6:ca:37) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.157 (165.227.249.157), Dst: 165.227.249.150 (165.227.249.150) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 128 Identification: 0x0071 (113) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb00 [correct] Good: True Bad : False Source: 165.227.249.157 (165.227.249.157) Destination: 165.227.249.150 (165.227.249.150) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 108 Checksum: 0x8607 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x27E68218B0A8E16A Responder cookie: 0xBF499F4BD794E411 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 100 Security Association payload Next payload: Vendor ID (13) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 40 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 32 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: RFC 3706 Detecting Dead IKE Peers (DPD) 0000 00 0c 29 93 b9 00 00 14 6c a6 ca 37 08 00 45 00 ..).....l..7..E. 0010 00 80 00 71 40 00 40 11 fb 00 a5 e3 f9 9d a5 e3 ...q@.@......... 0020 f9 96 01 f4 01 f4 00 6c 86 07 27 e6 82 18 b0 a8 .......l..'..... 0030 e1 6a bf 49 9f 4b d7 94 e4 11 01 10 02 00 00 00 .j.I.K.......... 0040 00 00 00 00 00 64 0d 00 00 34 00 00 00 01 00 00 .....d...4...... 0050 00 01 00 00 00 28 01 01 00 01 00 00 00 20 01 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 04 00 02 80 03 ................ 0070 00 01 80 0b 00 01 80 0c 70 80 00 00 00 14 af ca ........p....... 0080 d7 13 68 a1 f1 c9 6b 86 96 fc 77 57 01 00 ..h...k...wW.. Frame 4 (222 bytes on wire, 222 bytes captured) Arrival Time: May 20, 2008 12:48:56.419906000 Time delta from previous packet: 0.039552000 seconds Time since reference or first frame: 7.217209000 seconds Frame Number: 4 Packet Length: 222 bytes Capture Length: 222 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00), Dst: 00:14:6c:a6:ca:37 (00:14:6c:a6:ca:37) Destination: 00:14:6c:a6:ca:37 (00:14:6c:a6:ca:37) Source: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.157 (165.227.249.157) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 208 Identification: 0x050f (1295) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf612 [correct] Good: True Bad : False Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.157 (165.227.249.157) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 188 Checksum: 0x9b82 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x27E68218B0A8E16A Responder cookie: 0xBF499F4BD794E411 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 180 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 20 Nonce Data 0000 00 14 6c a6 ca 37 00 0c 29 93 b9 00 08 00 45 00 ..l..7..).....E. 0010 00 d0 05 0f 00 00 80 11 f6 12 a5 e3 f9 96 a5 e3 ................ 0020 f9 9d 01 f4 01 f4 00 bc 9b 82 27 e6 82 18 b0 a8 ..........'..... 0030 e1 6a bf 49 9f 4b d7 94 e4 11 04 10 02 00 00 00 .j.I.K.......... 0040 00 00 00 00 00 b4 0a 00 00 84 c5 27 ed ff d1 a3 ...........'.... 0050 a1 63 d7 f9 1a 49 1c 6e 68 c7 f8 15 7f bf 93 12 .c...I.nh....... 0060 85 93 0a 64 6a 4f f2 9c 86 d1 e9 0f a4 25 8c 83 ...djO.......%.. 0070 25 59 b5 20 66 6c a6 ec 36 76 e0 d5 3a bb c3 c5 %Y. fl..6v..:... 0080 e5 50 73 69 bb c7 b0 d7 48 ca 3f 08 9e b9 94 59 .Psi....H.?....Y 0090 a9 5e 2b 82 2e fe 12 9a 78 0f 1b 9d 83 b5 27 73 .^+.....x.....'s 00a0 dc c2 78 b6 79 ca ba 94 72 cc d6 86 03 24 36 50 ..x.y...r....$6P 00b0 5c 50 6c f6 95 7b 06 22 c9 43 e9 4f 84 d2 a3 ca \Pl..{.".C.O.... 00c0 48 f1 f0 d5 f7 94 78 d2 7a f8 00 00 00 14 ae 40 H.....x.z......@ 00d0 f0 c3 3f 60 50 71 d0 08 5d d2 94 ed 4b be ..?`Pq..]...K. Frame 5 (222 bytes on wire, 222 bytes captured) Arrival Time: May 20, 2008 12:48:56.709420000 Time delta from previous packet: 0.289514000 seconds Time since reference or first frame: 7.506723000 seconds Frame Number: 5 Packet Length: 222 bytes Capture Length: 222 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:14:6c:a6:ca:37 (00:14:6c:a6:ca:37), Dst: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00) Destination: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00) Source: 00:14:6c:a6:ca:37 (00:14:6c:a6:ca:37) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.157 (165.227.249.157), Dst: 165.227.249.150 (165.227.249.150) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 208 Identification: 0x0072 (114) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfaaf [correct] Good: True Bad : False Source: 165.227.249.157 (165.227.249.157) Destination: 165.227.249.150 (165.227.249.150) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 188 Checksum: 0xedaf [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x27E68218B0A8E16A Responder cookie: 0xBF499F4BD794E411 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 180 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 20 Nonce Data 0000 00 0c 29 93 b9 00 00 14 6c a6 ca 37 08 00 45 00 ..).....l..7..E. 0010 00 d0 00 72 40 00 40 11 fa af a5 e3 f9 9d a5 e3 ...r@.@......... 0020 f9 96 01 f4 01 f4 00 bc ed af 27 e6 82 18 b0 a8 ..........'..... 0030 e1 6a bf 49 9f 4b d7 94 e4 11 04 10 02 00 00 00 .j.I.K.......... 0040 00 00 00 00 00 b4 0a 00 00 84 20 fd a3 80 48 0f .......... ...H. 0050 37 a6 5c e4 22 2c 7e 38 79 16 a4 36 0b d4 fd c3 7.\.",~8y..6.... 0060 e5 6e 3c 9a 13 2f e8 80 89 b3 cd 82 af 43 9f 88 .n<../.......C.. 0070 66 a9 cf ac 1b f7 8e 88 45 70 59 ee 4a 87 b5 c9 f.......EpY.J... 0080 82 fb 53 19 47 53 70 40 ce fe e0 a3 c6 e4 89 55 ..S.GSp@.......U 0090 c6 6e b3 4a b0 c8 94 3c dd 3a 88 c8 48 44 29 db .n.J...<.:..HD). 00a0 bf 8a a4 d0 26 7e 12 72 ed 6a 35 1c c9 a5 0a 03 ....&~.r.j5..... 00b0 38 75 c0 aa d0 4c e5 b0 ae fe 47 44 cb 84 f8 2b 8u...L....GD...+ 00c0 50 20 d6 79 68 17 54 7b 2a ee 00 00 00 14 67 f9 P .yh.T{*.....g. 00d0 b2 1a 8d fc cd a7 3e ff 42 34 4b e8 47 b2 ......>.B4K.G. Frame 6 (142 bytes on wire, 142 bytes captured) Arrival Time: May 20, 2008 12:48:56.823979000 Time delta from previous packet: 0.114559000 seconds Time since reference or first frame: 7.621282000 seconds Frame Number: 6 Packet Length: 142 bytes Capture Length: 142 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00), Dst: 00:14:6c:a6:ca:37 (00:14:6c:a6:ca:37) Destination: 00:14:6c:a6:ca:37 (00:14:6c:a6:ca:37) Source: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.157 (165.227.249.157) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 128 Identification: 0x0510 (1296) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf661 [correct] Good: True Bad : False Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.157 (165.227.249.157) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 108 Checksum: 0xa222 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x27E68218B0A8E16A Responder cookie: 0xBF499F4BD794E411 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 100 Encrypted payload (72 bytes) 0000 00 14 6c a6 ca 37 00 0c 29 93 b9 00 08 00 45 00 ..l..7..).....E. 0010 00 80 05 10 00 00 80 11 f6 61 a5 e3 f9 96 a5 e3 .........a...... 0020 f9 9d 01 f4 01 f4 00 6c a2 22 27 e6 82 18 b0 a8 .......l."'..... 0030 e1 6a bf 49 9f 4b d7 94 e4 11 05 10 02 01 00 00 .j.I.K.......... 0040 00 00 00 00 00 64 8b 3b 39 09 28 9a f9 74 05 98 .....d.;9.(..t.. 0050 2e 97 78 cc 83 ce f6 34 75 ed 7c bb 57 6f 66 b9 ..x....4u.|.Wof. 0060 2d cc 46 d8 36 24 e2 4a 2d 9d 7e de 14 59 e4 bf -.F.6$.J-.~..Y.. 0070 1c 5c eb 5b c3 58 d1 0d 11 28 7a 07 8f a6 aa f6 .\.[.X...(z..... 0080 2e 37 2b ad a3 c3 fb 12 c8 59 be d1 e9 ad .7+......Y.... Frame 7 (110 bytes on wire, 110 bytes captured) Arrival Time: May 20, 2008 12:48:57.052191000 Time delta from previous packet: 0.228212000 seconds Time since reference or first frame: 7.849494000 seconds Frame Number: 7 Packet Length: 110 bytes Capture Length: 110 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:14:6c:a6:ca:37 (00:14:6c:a6:ca:37), Dst: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00) Destination: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00) Source: 00:14:6c:a6:ca:37 (00:14:6c:a6:ca:37) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.157 (165.227.249.157), Dst: 165.227.249.150 (165.227.249.150) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0x0073 (115) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb1e [correct] Good: True Bad : False Source: 165.227.249.157 (165.227.249.157) Destination: 165.227.249.150 (165.227.249.150) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 76 Checksum: 0x949b [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x27E68218B0A8E16A Responder cookie: 0xBF499F4BD794E411 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 68 Encrypted payload (40 bytes) 0000 00 0c 29 93 b9 00 00 14 6c a6 ca 37 08 00 45 00 ..).....l..7..E. 0010 00 60 00 73 40 00 40 11 fb 1e a5 e3 f9 9d a5 e3 .`.s@.@......... 0020 f9 96 01 f4 01 f4 00 4c 94 9b 27 e6 82 18 b0 a8 .......L..'..... 0030 e1 6a bf 49 9f 4b d7 94 e4 11 05 10 02 01 00 00 .j.I.K.......... 0040 00 00 00 00 00 44 ae ba 14 70 33 db 35 8a 55 41 .....D...p3.5.UA 0050 3a e6 f2 39 e2 0c c4 25 e3 87 30 07 84 b0 99 5d :..9...%..0....] 0060 8f 04 5f b2 e9 f8 e4 41 af c9 83 d5 52 e1 .._....A....R. Frame 8 (334 bytes on wire, 334 bytes captured) Arrival Time: May 20, 2008 12:48:57.103660000 Time delta from previous packet: 0.051469000 seconds Time since reference or first frame: 7.900963000 seconds Frame Number: 8 Packet Length: 334 bytes Capture Length: 334 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00), Dst: 00:14:6c:a6:ca:37 (00:14:6c:a6:ca:37) Destination: 00:14:6c:a6:ca:37 (00:14:6c:a6:ca:37) Source: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.157 (165.227.249.157) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 320 Identification: 0x0511 (1297) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf5a0 [correct] Good: True Bad : False Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.157 (165.227.249.157) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 300 Checksum: 0x0cca [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x27E68218B0A8E16A Responder cookie: 0xBF499F4BD794E411 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0xBF8C1FE9 Length: 292 Encrypted payload (264 bytes) 0000 00 14 6c a6 ca 37 00 0c 29 93 b9 00 08 00 45 00 ..l..7..).....E. 0010 01 40 05 11 00 00 80 11 f5 a0 a5 e3 f9 96 a5 e3 .@.............. 0020 f9 9d 01 f4 01 f4 01 2c 0c ca 27 e6 82 18 b0 a8 .......,..'..... 0030 e1 6a bf 49 9f 4b d7 94 e4 11 08 10 20 01 bf 8c .j.I.K...... ... 0040 1f e9 00 00 01 24 08 2f 8b 75 cf 77 11 0f c0 b5 .....$./.u.w.... 0050 72 7c 9e cd f6 47 33 47 e4 4a c6 3c 8a 97 f5 1e r|...G3G.J.<.... 0060 53 47 e0 19 a3 72 8c 43 72 43 fe 85 40 b8 27 33 SG...r.CrC..@.'3 0070 03 95 d8 60 61 58 f7 69 11 7a 81 14 6f bf 55 c8 ...`aX.i.z..o.U. 0080 d8 d1 7c 57 0c d1 ed 23 68 e2 91 88 88 39 0d e0 ..|W...#h....9.. 0090 9f 04 9a 9c dd 7f 8e 5b 88 e1 b0 fb b2 76 ed 02 .......[.....v.. 00a0 a9 87 90 64 fa ed f4 84 4a a6 5b 52 17 6f be fd ...d....J.[R.o.. 00b0 00 43 df 80 02 8f f1 ec e4 9a ce 6f 4e 81 7f e9 .C.........oN... 00c0 ce f4 ac 0d 72 30 17 ac ab 77 bd ab 2a c4 26 2c ....r0...w..*.&, 00d0 ad 99 30 09 53 c6 00 d9 d0 73 60 2d 64 79 15 87 ..0.S....s`-dy.. 00e0 d1 1b 9b 27 72 36 f2 c8 b3 e0 85 35 05 1b 7e ad ...'r6.....5..~. 00f0 cc f5 0e 22 06 f8 8a 08 61 a0 53 bb aa 51 4a cf ..."....a.S..QJ. 0100 c5 74 0b 41 70 75 b3 91 0f be a7 aa 6b 4b 73 ca .t.Apu......kKs. 0110 b2 b7 ca b7 c5 29 22 e2 f4 89 71 76 a4 ca df 0e .....)"...qv.... 0120 64 9a 67 c0 e9 83 4f 76 68 f3 30 1a 7a 71 6c 74 d.g...Ovh.0.zqlt 0130 94 89 8f 64 2d f6 0d db 53 e3 24 02 58 ab f3 2b ...d-...S.$.X..+ 0140 a9 8e 45 47 dc 94 73 f5 37 41 d1 0c 86 da ..EG..s.7A.... Frame 9 (326 bytes on wire, 326 bytes captured) Arrival Time: May 20, 2008 12:48:57.700523000 Time delta from previous packet: 0.596863000 seconds Time since reference or first frame: 8.497826000 seconds Frame Number: 9 Packet Length: 326 bytes Capture Length: 326 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:14:6c:a6:ca:37 (00:14:6c:a6:ca:37), Dst: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00) Destination: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00) Source: 00:14:6c:a6:ca:37 (00:14:6c:a6:ca:37) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.157 (165.227.249.157), Dst: 165.227.249.150 (165.227.249.150) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 312 Identification: 0x0074 (116) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfa45 [correct] Good: True Bad : False Source: 165.227.249.157 (165.227.249.157) Destination: 165.227.249.150 (165.227.249.150) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 292 Checksum: 0xb41a [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x27E68218B0A8E16A Responder cookie: 0xBF499F4BD794E411 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0xBF8C1FE9 Length: 284 Encrypted payload (256 bytes) 0000 00 0c 29 93 b9 00 00 14 6c a6 ca 37 08 00 45 00 ..).....l..7..E. 0010 01 38 00 74 40 00 40 11 fa 45 a5 e3 f9 9d a5 e3 .8.t@.@..E...... 0020 f9 96 01 f4 01 f4 01 24 b4 1a 27 e6 82 18 b0 a8 .......$..'..... 0030 e1 6a bf 49 9f 4b d7 94 e4 11 08 10 20 01 bf 8c .j.I.K...... ... 0040 1f e9 00 00 01 1c 07 50 7f 48 05 c2 bf 0d 97 85 .......P.H...... 0050 a9 f5 34 7d be b5 19 9e 9d 44 33 90 85 e2 27 cd ..4}.....D3...'. 0060 c9 ec fa 3e 43 32 6c eb 54 13 5a 5e a1 33 62 2f ...>C2l.T.Z^.3b/ 0070 89 7e f7 39 43 60 b1 70 61 6f 1e 81 ad 0e 1d dd .~.9C`.pao...... 0080 fd cb da 3b e2 55 cf e5 7a 1f 34 35 bb 7b 4b d3 ...;.U..z.45.{K. 0090 ec c9 65 d9 d6 a2 c4 e6 8d a5 b6 df ed 8f 79 81 ..e...........y. 00a0 d7 e2 bc af 01 e5 3f 3b ee 05 4d 58 f1 db 92 b5 ......?;..MX.... 00b0 83 17 c0 5b 25 86 25 4c 97 37 6b d8 a3 98 89 80 ...[%.%L.7k..... 00c0 b9 76 c2 eb d0 0f 35 f8 16 ad 73 14 cf c7 4b 1a .v....5...s...K. 00d0 56 10 3f d4 08 02 a9 95 b3 2d 33 9b 7a 48 dc b0 V.?......-3.zH.. 00e0 58 7b 2c aa e6 ca 20 6e 66 81 f2 91 5b ff cd 05 X{,... nf...[... 00f0 ae e6 56 9e a5 fc 38 9a 18 99 4a fe 75 f9 e5 73 ..V...8...J.u..s 0100 6d e5 a4 71 92 a6 8d 81 ee df 15 14 5f ee 31 1d m..q........_.1. 0110 6b dc 60 21 14 fd 19 df 01 1b 41 4f bb c4 45 f2 k.`!......AO..E. 0120 84 d9 92 9a 68 86 06 95 6f 98 bb 70 2b 67 0c 72 ....h...o..p+g.r 0130 6f d6 f9 36 c6 5d 8f b9 10 81 0e 11 55 ea 11 42 o..6.]......U..B 0140 e5 64 a6 65 5c bf .d.e\. Frame 10 (102 bytes on wire, 102 bytes captured) Arrival Time: May 20, 2008 12:48:57.779580000 Time delta from previous packet: 0.079057000 seconds Time since reference or first frame: 8.576883000 seconds Frame Number: 10 Packet Length: 102 bytes Capture Length: 102 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00), Dst: 00:14:6c:a6:ca:37 (00:14:6c:a6:ca:37) Destination: 00:14:6c:a6:ca:37 (00:14:6c:a6:ca:37) Source: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.157 (165.227.249.157) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 88 Identification: 0x0512 (1298) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf687 [correct] Good: True Bad : False Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.157 (165.227.249.157) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 68 Checksum: 0x556a [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x27E68218B0A8E16A Responder cookie: 0xBF499F4BD794E411 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0xBF8C1FE9 Length: 60 Encrypted payload (32 bytes) 0000 00 14 6c a6 ca 37 00 0c 29 93 b9 00 08 00 45 00 ..l..7..).....E. 0010 00 58 05 12 00 00 80 11 f6 87 a5 e3 f9 96 a5 e3 .X.............. 0020 f9 9d 01 f4 01 f4 00 44 55 6a 27 e6 82 18 b0 a8 .......DUj'..... 0030 e1 6a bf 49 9f 4b d7 94 e4 11 08 10 20 01 bf 8c .j.I.K...... ... 0040 1f e9 00 00 00 3c d0 ba 2a 5e e4 24 a4 fd b1 ad .....<..*^.$.... 0050 dd 8f 1a 98 d5 4f c5 d6 f2 ee 79 8e c7 1c c5 9a .....O....y..... 0060 71 fe 96 bb 3d e0 q...=. Frame 11 (142 bytes on wire, 142 bytes captured) Arrival Time: May 20, 2008 12:48:57.922415000 Time delta from previous packet: 0.142835000 seconds Time since reference or first frame: 8.719718000 seconds Frame Number: 11 Packet Length: 142 bytes Capture Length: 142 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:14:6c:a6:ca:37 (00:14:6c:a6:ca:37), Dst: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00) Destination: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00) Source: 00:14:6c:a6:ca:37 (00:14:6c:a6:ca:37) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.157 (165.227.249.157), Dst: 165.227.249.150 (165.227.249.150) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 128 Identification: 0x0075 (117) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfafc [correct] Good: True Bad : False Source: 165.227.249.157 (165.227.249.157) Destination: 165.227.249.150 (165.227.249.150) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 108 Checksum: 0x6a99 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xE955E41F5A884BBE Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 100 Security Association payload Next payload: Vendor ID (13) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 0 Next payload: NONE (0) Length: 40 Proposal number: 0 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 0 Next payload: NONE (0) Length: 32 Transform number: 0 Transform ID: KEY_IKE (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: RFC 3706 Detecting Dead IKE Peers (DPD) 0000 00 0c 29 93 b9 00 00 14 6c a6 ca 37 08 00 45 00 ..).....l..7..E. 0010 00 80 00 75 40 00 40 11 fa fc a5 e3 f9 9d a5 e3 ...u@.@......... 0020 f9 96 01 f4 01 f4 00 6c 6a 99 e9 55 e4 1f 5a 88 .......lj..U..Z. 0030 4b be 00 00 00 00 00 00 00 00 01 10 02 00 00 00 K............... 0040 00 00 00 00 00 64 0d 00 00 34 00 00 00 01 00 00 .....d...4...... 0050 00 01 00 00 00 28 00 01 00 01 00 00 00 20 00 01 .....(....... .. 0060 00 00 80 0b 00 01 80 0c 70 80 80 01 00 05 80 02 ........p....... 0070 00 02 80 03 00 01 80 04 00 02 00 00 00 14 af ca ................ 0080 d7 13 68 a1 f1 c9 6b 86 96 fc 77 57 01 00 ..h...k...wW.. Frame 12 (398 bytes on wire, 398 bytes captured) Arrival Time: May 20, 2008 12:49:03.441193000 Time delta from previous packet: 5.518778000 seconds Time since reference or first frame: 14.238496000 seconds Frame Number: 12 Packet Length: 398 bytes Capture Length: 398 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00), Dst: 00:14:6c:a6:ca:37 (00:14:6c:a6:ca:37) Destination: 00:14:6c:a6:ca:37 (00:14:6c:a6:ca:37) Source: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.157 (165.227.249.157) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 384 Identification: 0x0514 (1300) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: ESP (0x32) Header checksum: 0xf53c [correct] Good: True Bad : False Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.157 (165.227.249.157) Encapsulating Security Payload SPI: 0x3bdee4c0 Sequence: 1 Data (356 bytes) 0000 00 14 6c a6 ca 37 00 0c 29 93 b9 00 08 00 45 00 ..l..7..).....E. 0010 01 80 05 14 00 00 80 32 f5 3c a5 e3 f9 96 a5 e3 .......2.<...... 0020 f9 9d 3b de e4 c0 00 00 00 01 4e ce 41 7a 27 71 ..;.......N.Az'q 0030 21 88 f6 80 41 0c ae 44 90 ac a6 95 66 eb 5d d5 !...A..D....f.]. 0040 96 f3 55 7b ef 86 c6 df 60 94 59 8f ce b1 db 1e ..U{....`.Y..... 0050 d2 74 be ed 74 8c f9 e7 97 60 0f 9c a3 53 88 fc .t..t....`...S.. 0060 51 48 74 49 8a 88 8d 34 11 57 fb b4 be c8 76 3b QHtI...4.W....v; 0070 2a a7 1d dd 32 33 30 ba 9b 77 86 b7 2a f9 63 ab *...230..w..*.c. 0080 2b 23 23 56 71 be 2d d3 33 2e c5 66 01 05 76 ac +##Vq.-.3..f..v. 0090 73 ad ef 11 98 9e 75 9a 5a 29 ee 94 44 fd f2 e5 s.....u.Z)..D... 00a0 41 73 a3 d6 25 8c 06 4d fa 4a 59 36 bf e9 87 e6 As..%..M.JY6.... 00b0 ff 92 32 5d 84 51 44 61 2e 96 97 c1 78 05 d2 69 ..2].QDa....x..i 00c0 9f ca 7a b1 e5 c6 03 ef 89 67 16 d6 32 a0 67 04 ..z......g..2.g. 00d0 fd c7 f0 f3 03 a9 05 88 62 8e 5e a2 47 b8 1a 58 ........b.^.G..X 00e0 50 8d 00 dd 08 e8 0a 46 77 58 b2 4f 40 31 45 65 P......FwX.O@1Ee 00f0 d2 af d9 08 ef 06 07 48 a2 a3 0f 29 f3 c6 e4 70 .......H...)...p 0100 79 eb 52 5a 98 02 8c 35 da ce 03 d8 23 99 95 a3 y.RZ...5....#... 0110 41 eb 2e c0 71 04 c6 40 d8 be be 48 f3 64 b3 8a A...q..@...H.d.. 0120 62 ba 1f 3e b4 1d af 5a 2e 40 12 d8 df a2 de 0a b..>...Z.@...... 0130 53 3b 05 28 a7 f6 c4 2d a4 1e ec f0 44 29 8f b2 S;.(...-....D).. 0140 95 f6 c9 11 07 62 41 43 de 62 5f 3f df 04 8a b4 .....bAC.b_?.... 0150 0f 5f 1e fd dd f5 59 f3 17 97 74 d3 4e 6f bc 50 ._....Y...t.No.P 0160 a1 ed 2c ba 86 3c 3f bd 41 64 48 63 ca 41 a7 15 ..,..i.i.iB...R.r 0040 43 9e 23 b9 7e b4 2f 06 5b 8f b9 73 84 59 e4 81 C.#.~./.[..s.Y.. 0050 c5 51 ac 3f e3 cf 61 d2 07 ac 5f 0c 2c e9 5d dc .Q.?..a..._.,.]. 0060 c9 81 87 9b 00 b3 eb e6 bd 75 05 a3 b0 24 a7 8c .........u...$.. 0070 24 4c 19 2a 3b 11 a3 f6 28 81 45 38 3c 07 23 7c $L.*;...(.E8<.#| 0080 29 fb 3f d5 76 f3 d2 4c bb 81 6f 7d ed af 6e c5 ).?.v..L..o}..n. 0090 42 ef 62 f9 39 d4 e4 b7 c0 2a 88 16 24 f3 55 84 B.b.9....*..$.U. 00a0 70 9e 47 ab 37 1b 8b 7a a8 3c 48 3e 65 29 f9 f4 p.G.7..z.e).. 00b0 2b 9b c2 e0 85 18 17 66 46 58 ff 8c 20 24 38 d4 +......fFX.. $8. 00c0 c7 4b 0a 56 a3 a9 c1 f3 c8 31 de 52 0b a9 8a 80 .K.V.....1.R.... 00d0 0d be 4b 3f a6 db 50 62 83 50 f2 ea 04 8f 7d 12 ..K?..Pb.P....}. 00e0 db 75 da 9b c6 40 1b 6f f5 c4 89 f4 ac 27 8e c7 .u...@.o.....'.. 00f0 29 e0 c0 ad d7 e1 2e e0 91 73 fa 19 32 a7 e4 9f )........s..2... 0100 1c 55 fc ab ec 16 4c 02 f8 28 3a cb 12 f1 22 2e .U....L..(:...". 0110 c2 90 d3 35 95 9e 97 cf 14 f1 83 08 c6 0f 15 a5 ...5............ 0120 69 5c 64 c1 79 2f 1a da ac 32 84 2e 37 68 d6 21 i\d.y/...2..7h.! 0130 cb a2 4d 69 23 3b 9c 95 0a 6c 10 bb 90 ec 23 d6 ..Mi#;...l....#. 0140 33 62 4f ee a9 58 d9 2e b3 da 97 d4 30 93 4e 24 3bO..X......0.N$ 0150 5a ea 13 de 3c 30 01 4f cc b9 0a 82 53 8e 54 89 Z...<0.O....S.T. 0160 81 1f 69 93 7d 07 20 f6 a1 f7 e4 d7 30 4b 45 04 ..i.}. .....0KE. 0170 44 38 7d fa e6 e6 1b 40 c8 c4 e9 83 34 23 a5 ab D8}....@....4#.. 0180 59 66 68 a9 30 62 9d fb 68 1e 7a 27 21 a3 Yfh.0b..h.z'!.