IKE and IPsec packets sent/received: Frame 1 (418 bytes on wire, 418 bytes captured) Arrival Time: Sep 19, 2003 16:17:06.525639000 Time delta from previous packet: 0.000000000 seconds Time relative to first packet: 0.000000000 seconds Frame Number: 1 Packet Length: 418 bytes Capture Length: 418 bytes Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad) Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e) Type: IP (0x0800) Trailer: 6CE7B5C3 Internet Protocol, Src Addr: 65.220.69.71 (65.220.69.71), Dst Addr: 63.202.92.133 (63.202.92.133) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 400 Identification: 0x0007 (7) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 51 Protocol: UDP (0x11) Header checksum: 0x62e4 (correct) Source: 65.220.69.71 (65.220.69.71) Destination: 63.202.92.133 (63.202.92.133) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 380 Checksum: 0x7747 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xB964FC2E295D46A6 Responder cookie: 0x7042EFA5C82DF37E Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x72FFD628 Length: 372 Encrypted payload (344 bytes) 0000 00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00 .@c.... o.`...E. 0010 01 90 00 07 00 00 33 11 62 e4 41 dc 45 47 3f ca ......3.b.A.EG?. 0020 5c 85 01 f4 01 f4 01 7c 77 47 b9 64 fc 2e 29 5d \......|wG.d..)] 0030 46 a6 70 42 ef a5 c8 2d f3 7e 08 10 20 01 72 ff F.pB...-.~.. .r. 0040 d6 28 00 00 01 74 7b 9e 37 88 b1 86 98 1d fc a4 .(...t{.7....... 0050 90 6d 4c 2c 42 48 81 7c d4 4b 7b a7 c1 70 60 69 .mL,BH.|.K{..p`i 0060 e5 eb 7e ac 27 e5 89 4c ec d4 93 0f f7 d7 68 4f ..~.'..L......hO 0070 f2 bf 5c 00 33 8c f4 51 78 d1 3c 73 db 4d 46 76 ..\.3..Qx.j3.. 0140 95 6c 3f a4 be 4f bc d0 a4 5a f9 da 8d 44 ec 3b .l?..O...Z...D.; 0150 b6 4a 7f 47 f4 0a 6d 04 ba 55 4c 69 ce 89 83 f4 .J.G..m..ULi.... 0160 0f cf 96 8a 5c 60 42 ab 15 ec c6 5d 6a 8a 26 e8 ....\`B....]j.&. 0170 d5 55 75 35 c6 d3 e3 ad a3 30 1a 73 c0 d0 af 91 .Uu5.....0.s.... 0180 dd 43 31 a6 93 73 c7 06 9b ed 85 1d 77 33 9e 5a .C1..s......w3.Z 0190 12 5b bf 89 90 cd e5 5b 2f 5e 96 c4 1c 9a 6c e7 .[.....[/^....l. 01a0 b5 c3 .. Frame 2 (82 bytes on wire, 82 bytes captured) Arrival Time: Sep 19, 2003 16:17:06.531011000 Time delta from previous packet: 0.005372000 seconds Time relative to first packet: 0.005372000 seconds Frame Number: 2 Packet Length: 82 bytes Capture Length: 82 bytes Ethernet II, Src: 00:40:63:c1:11:ad, Dst: 00:20:6f:09:60:0e Destination: 00:20:6f:09:60:0e (00:20:6f:09:60:0e) Source: 00:40:63:c1:11:ad (00:40:63:c1:11:ad) Type: IP (0x0800) Internet Protocol, Src Addr: 63.202.92.133 (63.202.92.133), Dst Addr: 65.220.69.71 (65.220.69.71) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 68 Identification: 0x0206 (518) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x5531 (correct) Source: 63.202.92.133 (63.202.92.133) Destination: 65.220.69.71 (65.220.69.71) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 48 Checksum: 0x59a0 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xB964FC2E295D46A6 Responder cookie: 0x0CE37D52ADC1F4AC Next payload: Notification (11) Version: 1.0 Exchange type: Informational (5) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x246FF69F Length: 40 Notification payload Next payload: NONE (0) Length: 12 Domain of Interpretation: IPSEC (1) Protocol ID: ISAKMP (1) SPI size: 0 Message type: INVALID-COOKIE (4) 0000 00 20 6f 09 60 0e 00 40 63 c1 11 ad 08 00 45 00 . o.`..@c.....E. 0010 00 44 02 06 00 00 40 11 55 31 3f ca 5c 85 41 dc .D....@.U1?.\.A. 0020 45 47 01 f4 01 f4 00 30 59 a0 b9 64 fc 2e 29 5d EG.....0Y..d..)] 0030 46 a6 0c e3 7d 52 ad c1 f4 ac 0b 10 05 00 24 6f F...}R........$o 0040 f6 9f 00 00 00 28 00 00 00 0c 00 00 00 01 01 00 .....(.......... 0050 00 04 .. Frame 3 (418 bytes on wire, 418 bytes captured) Arrival Time: Sep 19, 2003 16:17:16.208747000 Time delta from previous packet: 9.677736000 seconds Time relative to first packet: 9.683108000 seconds Frame Number: 3 Packet Length: 418 bytes Capture Length: 418 bytes Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad) Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e) Type: IP (0x0800) Trailer: 6EB951A1 Internet Protocol, Src Addr: 65.220.69.71 (65.220.69.71), Dst Addr: 63.202.92.133 (63.202.92.133) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 400 Identification: 0x0008 (8) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 51 Protocol: UDP (0x11) Header checksum: 0x62e3 (correct) Source: 65.220.69.71 (65.220.69.71) Destination: 63.202.92.133 (63.202.92.133) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 380 Checksum: 0x7747 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xB964FC2E295D46A6 Responder cookie: 0x7042EFA5C82DF37E Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x72FFD628 Length: 372 Encrypted payload (344 bytes) 0000 00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00 .@c.... o.`...E. 0010 01 90 00 08 00 00 33 11 62 e3 41 dc 45 47 3f ca ......3.b.A.EG?. 0020 5c 85 01 f4 01 f4 01 7c 77 47 b9 64 fc 2e 29 5d \......|wG.d..)] 0030 46 a6 70 42 ef a5 c8 2d f3 7e 08 10 20 01 72 ff F.pB...-.~.. .r. 0040 d6 28 00 00 01 74 7b 9e 37 88 b1 86 98 1d fc a4 .(...t{.7....... 0050 90 6d 4c 2c 42 48 81 7c d4 4b 7b a7 c1 70 60 69 .mL,BH.|.K{..p`i 0060 e5 eb 7e ac 27 e5 89 4c ec d4 93 0f f7 d7 68 4f ..~.'..L......hO 0070 f2 bf 5c 00 33 8c f4 51 78 d1 3c 73 db 4d 46 76 ..\.3..Qx.j3.. 0140 95 6c 3f a4 be 4f bc d0 a4 5a f9 da 8d 44 ec 3b .l?..O...Z...D.; 0150 b6 4a 7f 47 f4 0a 6d 04 ba 55 4c 69 ce 89 83 f4 .J.G..m..ULi.... 0160 0f cf 96 8a 5c 60 42 ab 15 ec c6 5d 6a 8a 26 e8 ....\`B....]j.&. 0170 d5 55 75 35 c6 d3 e3 ad a3 30 1a 73 c0 d0 af 91 .Uu5.....0.s.... 0180 dd 43 31 a6 93 73 c7 06 9b ed 85 1d 77 33 9e 5a .C1..s......w3.Z 0190 12 5b bf 89 90 cd e5 5b 2f 5e 96 c4 1c 9a 6e b9 .[.....[/^....n. 01a0 51 a1 Q. Frame 4 (82 bytes on wire, 82 bytes captured) Arrival Time: Sep 19, 2003 16:17:16.211637000 Time delta from previous packet: 0.002890000 seconds Time relative to first packet: 9.685998000 seconds Frame Number: 4 Packet Length: 82 bytes Capture Length: 82 bytes Ethernet II, Src: 00:40:63:c1:11:ad, Dst: 00:20:6f:09:60:0e Destination: 00:20:6f:09:60:0e (00:20:6f:09:60:0e) Source: 00:40:63:c1:11:ad (00:40:63:c1:11:ad) Type: IP (0x0800) Internet Protocol, Src Addr: 63.202.92.133 (63.202.92.133), Dst Addr: 65.220.69.71 (65.220.69.71) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 68 Identification: 0x020a (522) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x552d (correct) Source: 63.202.92.133 (63.202.92.133) Destination: 65.220.69.71 (65.220.69.71) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 48 Checksum: 0x4e47 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xB964FC2E295D46A6 Responder cookie: 0x7E7AB18CB3CBE0BE Next payload: Notification (11) Version: 1.0 Exchange type: Informational (5) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x5EF42F86 Length: 40 Notification payload Next payload: NONE (0) Length: 12 Domain of Interpretation: IPSEC (1) Protocol ID: ISAKMP (1) SPI size: 0 Message type: INVALID-COOKIE (4) 0000 00 20 6f 09 60 0e 00 40 63 c1 11 ad 08 00 45 00 . o.`..@c.....E. 0010 00 44 02 0a 00 00 40 11 55 2d 3f ca 5c 85 41 dc .D....@.U-?.\.A. 0020 45 47 01 f4 01 f4 00 30 4e 47 b9 64 fc 2e 29 5d EG.....0NG.d..)] 0030 46 a6 7e 7a b1 8c b3 cb e0 be 0b 10 05 00 5e f4 F.~z..........^. 0040 2f 86 00 00 00 28 00 00 00 0c 00 00 00 01 01 00 /....(.......... 0050 00 04 .. Frame 5 (418 bytes on wire, 418 bytes captured) Arrival Time: Sep 19, 2003 16:17:26.216759000 Time delta from previous packet: 10.005122000 seconds Time relative to first packet: 19.691120000 seconds Frame Number: 5 Packet Length: 418 bytes Capture Length: 418 bytes Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad) Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e) Type: IP (0x0800) Trailer: 00747CD4 Internet Protocol, Src Addr: 65.220.69.71 (65.220.69.71), Dst Addr: 63.202.92.133 (63.202.92.133) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 400 Identification: 0x0009 (9) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 51 Protocol: UDP (0x11) Header checksum: 0x62e2 (correct) Source: 65.220.69.71 (65.220.69.71) Destination: 63.202.92.133 (63.202.92.133) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 380 Checksum: 0x7747 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xB964FC2E295D46A6 Responder cookie: 0x7042EFA5C82DF37E Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x72FFD628 Length: 372 Encrypted payload (344 bytes) 0000 00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00 .@c.... o.`...E. 0010 01 90 00 09 00 00 33 11 62 e2 41 dc 45 47 3f ca ......3.b.A.EG?. 0020 5c 85 01 f4 01 f4 01 7c 77 47 b9 64 fc 2e 29 5d \......|wG.d..)] 0030 46 a6 70 42 ef a5 c8 2d f3 7e 08 10 20 01 72 ff F.pB...-.~.. .r. 0040 d6 28 00 00 01 74 7b 9e 37 88 b1 86 98 1d fc a4 .(...t{.7....... 0050 90 6d 4c 2c 42 48 81 7c d4 4b 7b a7 c1 70 60 69 .mL,BH.|.K{..p`i 0060 e5 eb 7e ac 27 e5 89 4c ec d4 93 0f f7 d7 68 4f ..~.'..L......hO 0070 f2 bf 5c 00 33 8c f4 51 78 d1 3c 73 db 4d 46 76 ..\.3..Qx.j3.. 0140 95 6c 3f a4 be 4f bc d0 a4 5a f9 da 8d 44 ec 3b .l?..O...Z...D.; 0150 b6 4a 7f 47 f4 0a 6d 04 ba 55 4c 69 ce 89 83 f4 .J.G..m..ULi.... 0160 0f cf 96 8a 5c 60 42 ab 15 ec c6 5d 6a 8a 26 e8 ....\`B....]j.&. 0170 d5 55 75 35 c6 d3 e3 ad a3 30 1a 73 c0 d0 af 91 .Uu5.....0.s.... 0180 dd 43 31 a6 93 73 c7 06 9b ed 85 1d 77 33 9e 5a .C1..s......w3.Z 0190 12 5b bf 89 90 cd e5 5b 2f 5e 96 c4 1c 9a 00 74 .[.....[/^.....t 01a0 7c d4 |. Frame 6 (82 bytes on wire, 82 bytes captured) Arrival Time: Sep 19, 2003 16:17:26.219773000 Time delta from previous packet: 0.003014000 seconds Time relative to first packet: 19.694134000 seconds Frame Number: 6 Packet Length: 82 bytes Capture Length: 82 bytes Ethernet II, Src: 00:40:63:c1:11:ad, Dst: 00:20:6f:09:60:0e Destination: 00:20:6f:09:60:0e (00:20:6f:09:60:0e) Source: 00:40:63:c1:11:ad (00:40:63:c1:11:ad) Type: IP (0x0800) Internet Protocol, Src Addr: 63.202.92.133 (63.202.92.133), Dst Addr: 65.220.69.71 (65.220.69.71) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 68 Identification: 0x020b (523) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x552c (correct) Source: 63.202.92.133 (63.202.92.133) Destination: 65.220.69.71 (65.220.69.71) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 48 Checksum: 0x9a84 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xB964FC2E295D46A6 Responder cookie: 0xC63B6F1785D8B875 Next payload: Notification (11) Version: 1.0 Exchange type: Informational (5) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xEA9AA892 Length: 40 Notification payload Next payload: NONE (0) Length: 12 Domain of Interpretation: IPSEC (1) Protocol ID: ISAKMP (1) SPI size: 0 Message type: INVALID-COOKIE (4) 0000 00 20 6f 09 60 0e 00 40 63 c1 11 ad 08 00 45 00 . o.`..@c.....E. 0010 00 44 02 0b 00 00 40 11 55 2c 3f ca 5c 85 41 dc .D....@.U,?.\.A. 0020 45 47 01 f4 01 f4 00 30 9a 84 b9 64 fc 2e 29 5d EG.....0...d..)] 0030 46 a6 c6 3b 6f 17 85 d8 b8 75 0b 10 05 00 ea 9a F..;o....u...... 0040 a8 92 00 00 00 28 00 00 00 0c 00 00 00 01 01 00 .....(.......... 0050 00 04 .. Frame 7 (130 bytes on wire, 130 bytes captured) Arrival Time: Sep 19, 2003 16:17:36.221070000 Time delta from previous packet: 10.001297000 seconds Time relative to first packet: 29.695431000 seconds Frame Number: 7 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad) Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e) Type: IP (0x0800) Trailer: 4A9321C3 Internet Protocol, Src Addr: 65.220.69.71 (65.220.69.71), Dst Addr: 63.202.92.133 (63.202.92.133) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x000a (10) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 51 Protocol: UDP (0x11) Header checksum: 0x6401 (correct) Source: 65.220.69.71 (65.220.69.71) Destination: 63.202.92.133 (63.202.92.133) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 92 Checksum: 0xd18e (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xB964FC2E295D46A6 Responder cookie: 0x7042EFA5C82DF37E Next payload: Hash (8) Version: 1.0 Exchange type: Informational (5) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x777D5822 Length: 84 Encrypted payload (56 bytes) 0000 00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00 .@c.... o.`...E. 0010 00 70 00 0a 00 00 33 11 64 01 41 dc 45 47 3f ca .p....3.d.A.EG?. 0020 5c 85 01 f4 01 f4 00 5c d1 8e b9 64 fc 2e 29 5d \......\...d..)] 0030 46 a6 70 42 ef a5 c8 2d f3 7e 08 10 05 01 77 7d F.pB...-.~....w} 0040 58 22 00 00 00 54 d5 69 d4 b3 12 eb 96 2a 6c 55 X"...T.i.....*lU 0050 0d 13 0b 6b 26 fc 77 74 79 c9 43 40 40 9d c9 86 ...k&.wty.C@@... 0060 84 2f 58 00 8e 5e 06 a6 bd ac 6d 34 04 cf 9b 41 ./X..^....m4...A 0070 f4 61 d4 8b 37 9c 32 1e 8f 0c 60 9c 4b ff 4a 93 .a..7.2...`.K.J. 0080 21 c3 !. Frame 8 (238 bytes on wire, 238 bytes captured) Arrival Time: Sep 19, 2003 16:19:02.810862000 Time delta from previous packet: 86.589792000 seconds Time relative to first packet: 116.285223000 seconds Frame Number: 8 Packet Length: 238 bytes Capture Length: 238 bytes Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad) Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e) Type: IP (0x0800) Trailer: 428E33B3 Internet Protocol, Src Addr: 65.220.69.71 (65.220.69.71), Dst Addr: 63.202.92.133 (63.202.92.133) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 220 Identification: 0x0000 (0) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 51 Protocol: UDP (0x11) Header checksum: 0x639f (correct) Source: 65.220.69.71 (65.220.69.71) Destination: 63.202.92.133 (63.202.92.133) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 200 Checksum: 0x1dac (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xE4EB5E590B9B7F8B Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 192 Security Association payload Next payload: NONE (0) Length: 164 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 0 Next payload: NONE (0) Length: 152 Proposal number: 0 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 4 Transform payload # 0 Next payload: Transform (3) Length: 36 Transform number: 0 Transform ID: KEY_IKE (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (31536000) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Transform payload # 1 Next payload: Transform (3) Length: 36 Transform number: 1 Transform ID: KEY_IKE (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (31536000) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): MD5 (1) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Transform payload # 2 Next payload: Transform (3) Length: 36 Transform number: 2 Transform ID: KEY_IKE (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (31536000) Encryption-Algorithm (1): DES-CBC (1) Hash-Algorithm (2): MD5 (1) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Transform payload # 3 Next payload: NONE (0) Length: 36 Transform number: 3 Transform ID: KEY_IKE (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (31536000) Encryption-Algorithm (1): DES-CBC (1) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) 0000 00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00 .@c.... o.`...E. 0010 00 dc 00 00 00 00 33 11 63 9f 41 dc 45 47 3f ca ......3.c.A.EG?. 0020 5c 85 01 f4 01 f4 00 c8 1d ac e4 eb 5e 59 0b 9b \...........^Y.. 0030 7f 8b 00 00 00 00 00 00 00 00 01 10 02 00 00 00 ................ 0040 00 00 00 00 00 c0 00 00 00 a4 00 00 00 01 00 00 ................ 0050 00 01 00 00 00 98 00 01 00 04 03 00 00 24 00 01 .............$.. 0060 00 00 80 0b 00 01 00 0c 00 04 01 e1 33 80 80 01 ............3... 0070 00 05 80 02 00 02 80 03 00 01 80 04 00 02 03 00 ................ 0080 00 24 01 01 00 00 80 0b 00 01 00 0c 00 04 01 e1 .$.............. 0090 33 80 80 01 00 05 80 02 00 01 80 03 00 01 80 04 3............... 00a0 00 02 03 00 00 24 02 01 00 00 80 0b 00 01 00 0c .....$.......... 00b0 00 04 01 e1 33 80 80 01 00 01 80 02 00 01 80 03 ....3........... 00c0 00 01 80 04 00 02 00 00 00 24 03 01 00 00 80 0b .........$...... 00d0 00 01 00 0c 00 04 01 e1 33 80 80 01 00 01 80 02 ........3....... 00e0 00 02 80 03 00 01 80 04 00 02 42 8e 33 b3 ..........B.3. Frame 9 (146 bytes on wire, 146 bytes captured) Arrival Time: Sep 19, 2003 16:19:02.824146000 Time delta from previous packet: 0.013284000 seconds Time relative to first packet: 116.298507000 seconds Frame Number: 9 Packet Length: 146 bytes Capture Length: 146 bytes Ethernet II, Src: 00:40:63:c1:11:ad, Dst: 00:20:6f:09:60:0e Destination: 00:20:6f:09:60:0e (00:20:6f:09:60:0e) Source: 00:40:63:c1:11:ad (00:40:63:c1:11:ad) Type: IP (0x0800) Internet Protocol, Src Addr: 63.202.92.133 (63.202.92.133), Dst Addr: 65.220.69.71 (65.220.69.71) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 132 Identification: 0x021d (541) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x54da (correct) Source: 63.202.92.133 (63.202.92.133) Destination: 65.220.69.71 (65.220.69.71) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 112 Checksum: 0x9d36 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xE4EB5E590B9B7F8B Responder cookie: 0x397E4308C83F6D63 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 104 Security Association payload Next payload: Vendor ID (13) Length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 0 Next payload: NONE (0) Length: 44 Proposal number: 0 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 0 Next payload: NONE (0) Length: 36 Transform number: 0 Transform ID: KEY_IKE (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (31536000) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: unknown vendor ID: 0x7003CBC1097DBE9C2600BA6983BC8B35 0000 00 20 6f 09 60 0e 00 40 63 c1 11 ad 08 00 45 00 . o.`..@c.....E. 0010 00 84 02 1d 00 00 40 11 54 da 3f ca 5c 85 41 dc ......@.T.?.\.A. 0020 45 47 01 f4 01 f4 00 70 9d 36 e4 eb 5e 59 0b 9b EG.....p.6..^Y.. 0030 7f 8b 39 7e 43 08 c8 3f 6d 63 01 10 02 00 00 00 ..9~C..?mc...... 0040 00 00 00 00 00 68 0d 00 00 38 00 00 00 01 00 00 .....h...8...... 0050 00 01 00 00 00 2c 00 01 00 01 00 00 00 24 00 01 .....,.......$.. 0060 00 00 80 0b 00 01 00 0c 00 04 01 e1 33 80 80 01 ............3... 0070 00 05 80 02 00 02 80 03 00 01 80 04 00 02 00 00 ................ 0080 00 14 70 03 cb c1 09 7d be 9c 26 00 ba 69 83 bc ..p....}..&..i.. 0090 8b 35 .5 Frame 10 (226 bytes on wire, 226 bytes captured) Arrival Time: Sep 19, 2003 16:19:03.244222000 Time delta from previous packet: 0.420076000 seconds Time relative to first packet: 116.718583000 seconds Frame Number: 10 Packet Length: 226 bytes Capture Length: 226 bytes Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad) Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e) Type: IP (0x0800) Trailer: 646341D7 Internet Protocol, Src Addr: 65.220.69.71 (65.220.69.71), Dst Addr: 63.202.92.133 (63.202.92.133) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 208 Identification: 0x0001 (1) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 51 Protocol: UDP (0x11) Header checksum: 0x63aa (correct) Source: 65.220.69.71 (65.220.69.71) Destination: 63.202.92.133 (63.202.92.133) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 188 Checksum: 0x1843 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xE4EB5E590B9B7F8B Responder cookie: 0x397E4308C83F6D63 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 180 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 20 Nonce Data 0000 00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00 .@c.... o.`...E. 0010 00 d0 00 01 00 00 33 11 63 aa 41 dc 45 47 3f ca ......3.c.A.EG?. 0020 5c 85 01 f4 01 f4 00 bc 18 43 e4 eb 5e 59 0b 9b \........C..^Y.. 0030 7f 8b 39 7e 43 08 c8 3f 6d 63 04 10 02 00 00 00 ..9~C..?mc...... 0040 00 00 00 00 00 b4 0a 00 00 84 59 96 b2 65 f7 1e ..........Y..e.. 0050 db f4 d5 bb 62 35 f2 19 25 bf 47 32 bf b8 96 2f ....b5..%.G2.../ 0060 6f af 77 33 7c fe 21 09 5f 74 f9 b0 df 42 cc d1 o.w3|.!._t...B.. 0070 1e af c4 4a 77 9e c5 30 a8 87 b5 76 4d 89 f3 04 ...Jw..0...vM... 0080 bf 5a 06 68 bf 0b 2c 29 cc cb bf ac 90 97 1d 88 .Z.h..,)........ 0090 bc a5 f8 6c 77 cf f2 ab b6 8c 39 7e 70 91 cc ea ...lw.....9~p... 00a0 72 14 0b 0e 9d 09 0f 78 54 56 ef 1d dd 9b 89 51 r......xTV.....Q 00b0 35 60 f0 85 51 5b de d5 83 35 29 f8 a4 da a3 5d 5`..Q[...5)....] 00c0 23 40 4a c9 01 0c 67 e7 e2 68 00 00 00 14 d8 23 #@J...g..h.....# 00d0 38 77 95 af d5 50 f7 5f fa bb 5a ac 3e 86 64 63 8w...P._..Z.>.dc 00e0 41 d7 A. Frame 11 (242 bytes on wire, 242 bytes captured) Arrival Time: Sep 19, 2003 16:19:03.297227000 Time delta from previous packet: 0.053005000 seconds Time relative to first packet: 116.771588000 seconds Frame Number: 11 Packet Length: 242 bytes Capture Length: 242 bytes Ethernet II, Src: 00:40:63:c1:11:ad, Dst: 00:20:6f:09:60:0e Destination: 00:20:6f:09:60:0e (00:20:6f:09:60:0e) Source: 00:40:63:c1:11:ad (00:40:63:c1:11:ad) Type: IP (0x0800) Internet Protocol, Src Addr: 63.202.92.133 (63.202.92.133), Dst Addr: 65.220.69.71 (65.220.69.71) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 228 Identification: 0x021e (542) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x5479 (correct) Source: 63.202.92.133 (63.202.92.133) Destination: 65.220.69.71 (65.220.69.71) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 208 Checksum: 0x0af2 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xE4EB5E590B9B7F8B Responder cookie: 0x397E4308C83F6D63 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 200 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: Vendor ID (13) Length: 20 Nonce Data Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: unknown vendor ID: 0x7003CBC1097DBE9C2600BA6983BC8B35 0000 00 20 6f 09 60 0e 00 40 63 c1 11 ad 08 00 45 00 . o.`..@c.....E. 0010 00 e4 02 1e 00 00 40 11 54 79 3f ca 5c 85 41 dc ......@.Ty?.\.A. 0020 45 47 01 f4 01 f4 00 d0 0a f2 e4 eb 5e 59 0b 9b EG..........^Y.. 0030 7f 8b 39 7e 43 08 c8 3f 6d 63 04 10 02 00 00 00 ..9~C..?mc...... 0040 00 00 00 00 00 c8 0a 00 00 84 56 a6 ff fd 7d 03 ..........V...}. 0050 a8 9f 72 a9 5b 0c 4e 5d 31 7c 9b af a9 82 f6 b8 ..r.[.N]1|...... 0060 62 ed e2 42 16 31 36 de 16 f2 f2 2d 92 e9 b9 b1 b..B.16....-.... 0070 bc 0c 6e c0 5b b7 14 8f a2 00 3b fc 0b 39 9b d2 ..n.[.....;..9.. 0080 82 cf 01 14 24 d2 9e e3 e4 b7 bf 2e c5 c8 30 da ....$.........0. 0090 df 8e d8 8f be 0b 3b cc 04 c2 aa d5 0a 3b 6a 62 ......;......;jb 00a0 7e c5 50 f1 02 04 b0 80 af 7f 6a 21 dc d2 3e 2d ~.P.......j!..>- 00b0 38 64 1a fa d8 16 82 c1 d8 99 77 5a de 20 d8 ab 8d........wZ. .. 00c0 07 e3 6c 66 13 63 0c 89 79 7c 0d 00 00 14 c0 84 ..lf.c..y|...... 00d0 fc e1 71 61 ae 23 6c fb 86 86 e3 27 46 69 00 00 ..qa.#l....'Fi.. 00e0 00 14 70 03 cb c1 09 7d be 9c 26 00 ba 69 83 bc ..p....}..&..i.. 00f0 8b 35 .5 Frame 12 (114 bytes on wire, 114 bytes captured) Arrival Time: Sep 19, 2003 16:19:03.807506000 Time delta from previous packet: 0.510279000 seconds Time relative to first packet: 117.281867000 seconds Frame Number: 12 Packet Length: 114 bytes Capture Length: 114 bytes Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad) Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e) Type: IP (0x0800) Trailer: 99D9BDEF Internet Protocol, Src Addr: 65.220.69.71 (65.220.69.71), Dst Addr: 63.202.92.133 (63.202.92.133) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0x0002 (2) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 51 Protocol: UDP (0x11) Header checksum: 0x6419 (correct) Source: 65.220.69.71 (65.220.69.71) Destination: 63.202.92.133 (63.202.92.133) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 76 Checksum: 0x2c5c (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xE4EB5E590B9B7F8B Responder cookie: 0x397E4308C83F6D63 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 68 Encrypted payload (40 bytes) 0000 00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00 .@c.... o.`...E. 0010 00 60 00 02 00 00 33 11 64 19 41 dc 45 47 3f ca .`....3.d.A.EG?. 0020 5c 85 01 f4 01 f4 00 4c 2c 5c e4 eb 5e 59 0b 9b \......L,\..^Y.. 0030 7f 8b 39 7e 43 08 c8 3f 6d 63 05 10 02 01 00 00 ..9~C..?mc...... 0040 00 00 00 00 00 44 d3 e5 72 6f c0 4c ab 76 71 23 .....D..ro.L.vq# 0050 4f 19 4e ac 4f 7c 69 44 01 df 93 1c 00 d1 52 53 O.N.O|iD......RS 0060 85 0f 59 0b b5 8a ff a9 93 82 18 f0 82 10 99 d9 ..Y............. 0070 bd ef .. Frame 13 (110 bytes on wire, 110 bytes captured) Arrival Time: Sep 19, 2003 16:19:03.818725000 Time delta from previous packet: 0.011219000 seconds Time relative to first packet: 117.293086000 seconds Frame Number: 13 Packet Length: 110 bytes Capture Length: 110 bytes Ethernet II, Src: 00:40:63:c1:11:ad, Dst: 00:20:6f:09:60:0e Destination: 00:20:6f:09:60:0e (00:20:6f:09:60:0e) Source: 00:40:63:c1:11:ad (00:40:63:c1:11:ad) Type: IP (0x0800) Internet Protocol, Src Addr: 63.202.92.133 (63.202.92.133), Dst Addr: 65.220.69.71 (65.220.69.71) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0x021f (543) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x54fc (correct) Source: 63.202.92.133 (63.202.92.133) Destination: 65.220.69.71 (65.220.69.71) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 76 Checksum: 0x2954 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xE4EB5E590B9B7F8B Responder cookie: 0x397E4308C83F6D63 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 68 Encrypted payload (40 bytes) 0000 00 20 6f 09 60 0e 00 40 63 c1 11 ad 08 00 45 00 . o.`..@c.....E. 0010 00 60 02 1f 00 00 40 11 54 fc 3f ca 5c 85 41 dc .`....@.T.?.\.A. 0020 45 47 01 f4 01 f4 00 4c 29 54 e4 eb 5e 59 0b 9b EG.....L)T..^Y.. 0030 7f 8b 39 7e 43 08 c8 3f 6d 63 05 10 02 01 00 00 ..9~C..?mc...... 0040 00 00 00 00 00 44 04 4b 2a 7f 83 57 8d 62 46 90 .....D.K*..W.bF. 0050 20 f7 a0 fd 79 8f 7a 95 b1 99 f8 c6 15 a1 fb bf ...y.z......... 0060 0e dd 68 8d 90 ea d6 a6 19 8b 29 d7 0c 6f ..h.......)..o Frame 14 (126 bytes on wire, 126 bytes captured) Arrival Time: Sep 19, 2003 16:19:03.823546000 Time delta from previous packet: 0.004821000 seconds Time relative to first packet: 117.297907000 seconds Frame Number: 14 Packet Length: 126 bytes Capture Length: 126 bytes Ethernet II, Src: 00:40:63:c1:11:ad, Dst: 00:20:6f:09:60:0e Destination: 00:20:6f:09:60:0e (00:20:6f:09:60:0e) Source: 00:40:63:c1:11:ad (00:40:63:c1:11:ad) Type: IP (0x0800) Internet Protocol, Src Addr: 63.202.92.133 (63.202.92.133), Dst Addr: 65.220.69.71 (65.220.69.71) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0220 (544) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x54eb (correct) Source: 63.202.92.133 (63.202.92.133) Destination: 65.220.69.71 (65.220.69.71) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 92 Checksum: 0xdc61 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xE4EB5E590B9B7F8B Responder cookie: 0x397E4308C83F6D63 Next payload: Hash (8) Version: 1.0 Exchange type: Informational (5) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xCA48C81A Length: 84 Encrypted payload (56 bytes) 0000 00 20 6f 09 60 0e 00 40 63 c1 11 ad 08 00 45 00 . o.`..@c.....E. 0010 00 70 02 20 00 00 40 11 54 eb 3f ca 5c 85 41 dc .p. ..@.T.?.\.A. 0020 45 47 01 f4 01 f4 00 5c dc 61 e4 eb 5e 59 0b 9b EG.....\.a..^Y.. 0030 7f 8b 39 7e 43 08 c8 3f 6d 63 08 10 05 01 ca 48 ..9~C..?mc.....H 0040 c8 1a 00 00 00 54 21 a3 15 d5 a6 05 7e 07 0f 5b .....T!.....~..[ 0050 86 e3 e3 6f 07 aa e7 44 db f4 0c c2 31 0f e9 9a ...o...D....1... 0060 2b 3f 8f 7c 50 ed 8c 92 8b 2f 00 4b ff bb 81 7a +?.|P..../.K...z 0070 63 46 9b 37 c1 06 26 26 46 df 07 ce 3a 53 cF.7..&&F...:S Frame 15 (418 bytes on wire, 418 bytes captured) Arrival Time: Sep 19, 2003 16:19:06.100405000 Time delta from previous packet: 2.276859000 seconds Time relative to first packet: 119.574766000 seconds Frame Number: 15 Packet Length: 418 bytes Capture Length: 418 bytes Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad) Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e) Type: IP (0x0800) Trailer: E074F03F Internet Protocol, Src Addr: 65.220.69.71 (65.220.69.71), Dst Addr: 63.202.92.133 (63.202.92.133) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 400 Identification: 0x0003 (3) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 51 Protocol: UDP (0x11) Header checksum: 0x62e8 (correct) Source: 65.220.69.71 (65.220.69.71) Destination: 63.202.92.133 (63.202.92.133) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 380 Checksum: 0xfbfc (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xE4EB5E590B9B7F8B Responder cookie: 0x397E4308C83F6D63 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x4983110D Length: 372 Encrypted payload (344 bytes) 0000 00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00 .@c.... o.`...E. 0010 01 90 00 03 00 00 33 11 62 e8 41 dc 45 47 3f ca ......3.b.A.EG?. 0020 5c 85 01 f4 01 f4 01 7c fb fc e4 eb 5e 59 0b 9b \......|....^Y.. 0030 7f 8b 39 7e 43 08 c8 3f 6d 63 08 10 20 01 49 83 ..9~C..?mc.. .I. 0040 11 0d 00 00 01 74 7a 1c ee 30 16 84 31 50 ec b6 .....tz..0..1P.. 0050 1e ec 1c 22 ef 5a 08 25 ca f3 14 08 ff 10 40 f1 ...".Z.%......@. 0060 96 55 53 d8 d0 04 81 4d 04 bf f8 f9 34 b6 be 62 .US....M....4..b 0070 49 a8 a6 5a f4 87 82 7f 43 5e a9 93 91 b3 90 26 I..Z....C^.....& 0080 5d a6 9a b9 7b 8d 0a 4b eb a7 33 4d 46 f1 05 55 ]...{..K..3MF..U 0090 3e 04 8c 8f f3 13 18 4e 68 c7 af 50 bc 4a be 5e >......Nh..P.J.^ 00a0 65 28 f1 79 7e a8 d0 ff b5 03 43 6a 01 d8 a2 7b e(.y~.....Cj...{ 00b0 13 9c b5 85 b6 ea 44 88 33 a6 eb e3 ea 4d ca 8f ......D.3....M.. 00c0 16 e9 26 2c d0 69 f2 6f ef 56 85 c8 74 97 ed fd ..&,.i.o.V..t... 00d0 8f ac ee fd 99 e8 a9 69 d0 b9 1a e8 c5 aa d0 0d .......i........ 00e0 45 14 5c c5 40 f8 c5 8f a2 27 78 23 02 91 02 a8 E.\.@....'x#.... 00f0 51 c7 9d f2 12 14 a6 e9 4a 67 24 e6 d5 c9 42 13 Q.......Jg$...B. 0100 ce e5 d4 74 d9 96 ad 84 d6 2e e2 88 c7 f6 26 ad ...t..........&. 0110 7e ca 27 e7 cc 06 73 e2 ff f7 4e 6f 95 d6 f4 8d ~.'...s...No.... 0120 3e f1 68 19 45 b7 19 1b 71 f1 b8 af 5b 35 e0 8c >.h.E...q...[5.. 0130 d9 72 06 28 9e 2b ca 3a 5a 56 11 97 c9 1a d9 80 .r.(.+.:ZV...... 0140 d4 94 95 33 96 3e 1e 53 6f 74 cb 3f 56 01 c7 36 ...3.>.Sot.?V..6 0150 b8 60 42 7c 66 f4 9f b8 bf 96 e0 6c ae 0c 79 68 .`B|f......l..yh 0160 bb 2f b4 9d 3a 9a 78 c5 61 01 6b a9 0c 3a cb 5a ./..:.x.a.k..:.Z 0170 eb e3 87 78 39 5d af 2e 3a 9a bc 58 70 0f 72 cf ...x9]..:..Xp.r. 0180 20 a2 2b 26 86 b3 13 58 c8 58 39 4b 93 ed 63 5f .+&...X.X9K..c_ 0190 03 01 67 63 9a 09 e2 f4 a1 f3 ec 3a 1e a5 e0 74 ..gc.......:...t 01a0 f0 3f .? Frame 16 (334 bytes on wire, 334 bytes captured) Arrival Time: Sep 19, 2003 16:19:06.182699000 Time delta from previous packet: 0.082294000 seconds Time relative to first packet: 119.657060000 seconds Frame Number: 16 Packet Length: 334 bytes Capture Length: 334 bytes Ethernet II, Src: 00:40:63:c1:11:ad, Dst: 00:20:6f:09:60:0e Destination: 00:20:6f:09:60:0e (00:20:6f:09:60:0e) Source: 00:40:63:c1:11:ad (00:40:63:c1:11:ad) Type: IP (0x0800) Internet Protocol, Src Addr: 63.202.92.133 (63.202.92.133), Dst Addr: 65.220.69.71 (65.220.69.71) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 320 Identification: 0x0221 (545) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x541a (correct) Source: 63.202.92.133 (63.202.92.133) Destination: 65.220.69.71 (65.220.69.71) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 300 Checksum: 0xeb0d (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xE4EB5E590B9B7F8B Responder cookie: 0x397E4308C83F6D63 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x4983110D Length: 292 Encrypted payload (264 bytes) 0000 00 20 6f 09 60 0e 00 40 63 c1 11 ad 08 00 45 00 . o.`..@c.....E. 0010 01 40 02 21 00 00 40 11 54 1a 3f ca 5c 85 41 dc .@.!..@.T.?.\.A. 0020 45 47 01 f4 01 f4 01 2c eb 0d e4 eb 5e 59 0b 9b EG.....,....^Y.. 0030 7f 8b 39 7e 43 08 c8 3f 6d 63 08 10 20 01 49 83 ..9~C..?mc.. .I. 0040 11 0d 00 00 01 24 57 e3 8d 66 44 bc e3 d3 7c ea .....$W..fD...|. 0050 c2 9f af 8d e6 0a c2 8e a1 13 df 5c 8f 21 23 d9 ...........\.!#. 0060 ab d7 21 8e 07 c6 3b d7 1a 23 40 f7 27 11 6b 48 ..!...;..#@.'.kH 0070 9a c8 fa 73 b6 51 79 42 90 68 81 ac dc 98 67 5f ...s.QyB.h....g_ 0080 67 eb 0b 1a c8 c2 9b 1f 1d 34 a1 18 95 b0 33 38 g........4....38 0090 fa b8 01 f8 23 46 7d 1b 16 03 e5 97 1f 85 60 e6 ....#F}.......`. 00a0 41 61 6c e0 ce ab 86 33 19 94 5e 8f f7 b6 b0 22 Aal....3..^...." 00b0 cc a3 f5 9b c4 68 34 f6 eb 69 14 39 62 13 90 c9 .....h4..i.9b... 00c0 60 a2 70 83 65 a2 02 0c 6f f7 a6 1c 8a 6c be df `.p.e...o....l.. 00d0 1f bf ab bb c5 0b 7a 46 92 58 f3 97 72 e6 5b e2 ......zF.X..r.[. 00e0 79 81 cc 65 75 87 68 72 7e 6a c6 90 a8 0c cd f8 y..eu.hr~j...... 00f0 9f 09 a8 a4 1d 15 cf 83 dd fc 68 c2 1b 3d 6c 96 ..........h..=l. 0100 1c dd db 8e 23 83 d4 e1 2a c8 a3 39 83 b5 e0 9a ....#...*..9.... 0110 b6 f6 97 ee eb 59 31 53 8e ef 39 0f 6b 9d e9 b1 .....Y1S..9.k... 0120 93 65 7a 23 77 52 26 0b ad 76 33 6a 46 79 97 25 .ez#wR&..v3jFy.% 0130 31 c8 c8 30 a0 42 ec 64 27 c3 67 07 76 53 52 21 1..0.B.d'.g.vSR! 0140 35 5e 66 95 76 c4 79 73 55 cf 74 d7 88 80 5^f.v.ysU.t... Frame 17 (98 bytes on wire, 98 bytes captured) Arrival Time: Sep 19, 2003 16:19:06.706031000 Time delta from previous packet: 0.523332000 seconds Time relative to first packet: 120.180392000 seconds Frame Number: 17 Packet Length: 98 bytes Capture Length: 98 bytes Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad) Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e) Type: IP (0x0800) Trailer: 358A86ED Internet Protocol, Src Addr: 65.220.69.71 (65.220.69.71), Dst Addr: 63.202.92.133 (63.202.92.133) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 80 Identification: 0x0004 (4) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 51 Protocol: UDP (0x11) Header checksum: 0x6427 (correct) Source: 65.220.69.71 (65.220.69.71) Destination: 63.202.92.133 (63.202.92.133) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 60 Checksum: 0xe723 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xE4EB5E590B9B7F8B Responder cookie: 0x397E4308C83F6D63 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x4983110D Length: 52 Encrypted payload (24 bytes) 0000 00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00 .@c.... o.`...E. 0010 00 50 00 04 00 00 33 11 64 27 41 dc 45 47 3f ca .P....3.d'A.EG?. 0020 5c 85 01 f4 01 f4 00 3c e7 23 e4 eb 5e 59 0b 9b \......<.#..^Y.. 0030 7f 8b 39 7e 43 08 c8 3f 6d 63 08 10 20 01 49 83 ..9~C..?mc.. .I. 0040 11 0d 00 00 00 34 2a 9c 42 07 29 c8 58 f5 a9 dc .....4*.B.).X... 0050 06 99 37 8a e1 e4 26 43 17 7a 9c 02 5a 87 35 8a ..7...&C.z..Z.5. 0060 86 ed .. Frame 18 (122 bytes on wire, 122 bytes captured) Arrival Time: Sep 19, 2003 16:19:11.776782000 Time delta from previous packet: 5.070751000 seconds Time relative to first packet: 125.251143000 seconds Frame Number: 18 Packet Length: 122 bytes Capture Length: 122 bytes Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad) Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e) Type: IP (0x0800) Trailer: 3965C471 Internet Protocol, Src Addr: 65.220.69.71 (65.220.69.71), Dst Addr: 63.202.92.133 (63.202.92.133) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 104 Identification: 0x8f7a (36730) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 115 Protocol: ESP (0x32) Header checksum: 0x9477 (correct) Source: 65.220.69.71 (65.220.69.71) Destination: 63.202.92.133 (63.202.92.133) Encapsulating Security Payload SPI: 0x053a58b4 Sequence: 0x00000001 Data (76 bytes) 0000 00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00 .@c.... o.`...E. 0010 00 68 8f 7a 00 00 73 32 94 77 41 dc 45 47 3f ca .h.z..s2.wA.EG?. 0020 5c 85 05 3a 58 b4 00 00 00 01 00 00 00 00 00 00 \..:X........... 0030 00 00 a3 9c 60 17 b8 e9 1f b8 af 27 fa 33 53 ea ....`......'.3S. 0040 56 0d 00 f0 1b 06 d1 ef 1c 88 46 ed d0 ec 8e 03 V.........F..... 0050 7b 76 4a ae 17 9b aa 63 87 80 6d 06 ee 12 27 73 {vJ....c..m...'s 0060 9d ea ed 36 b6 33 c4 c0 4c 3d 65 58 44 45 ec 00 ...6.3..L=eXDE.. 0070 cf ab 40 cc 08 18 39 65 c4 71 ..@...9e.q Frame 19 (110 bytes on wire, 110 bytes captured) Arrival Time: Sep 19, 2003 16:19:11.777471000 Time delta from previous packet: 0.000689000 seconds Time relative to first packet: 125.251832000 seconds Frame Number: 19 Packet Length: 110 bytes Capture Length: 110 bytes Ethernet II, Src: 00:40:63:c1:11:ad, Dst: 00:20:6f:09:60:0e Destination: 00:20:6f:09:60:0e (00:20:6f:09:60:0e) Source: 00:40:63:c1:11:ad (00:40:63:c1:11:ad) Type: IP (0x0800) Internet Protocol, Src Addr: 63.202.92.133 (63.202.92.133), Dst Addr: 65.220.69.71 (65.220.69.71) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0x0222 (546) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x54d8 (correct) Source: 63.202.92.133 (63.202.92.133) Destination: 65.220.69.71 (65.220.69.71) Encapsulating Security Payload SPI: 0xf1d53579 Sequence: 0x00000001 Data (68 bytes) 0000 00 20 6f 09 60 0e 00 40 63 c1 11 ad 08 00 45 00 . o.`..@c.....E. 0010 00 60 02 22 00 00 40 32 54 d8 3f ca 5c 85 41 dc .`."..@2T.?.\.A. 0020 45 47 f1 d5 35 79 00 00 00 01 be 84 9f 9d a3 8e EG..5y.......... 0030 c2 f9 aa aa 4b 29 08 74 e3 47 55 46 90 d0 3d 98 ....K).t.GUF..=. 0040 95 a1 08 ae 0b 52 42 ce d8 b2 7f c6 ac e3 12 97 .....RB......... 0050 0e b9 7b f3 3a 3a 8e 16 f2 77 ef 73 17 30 b3 0d ..{.::...w.s.0.. 0060 a7 e9 85 fb 72 c7 f2 de d8 21 91 69 0e e4 ....r....!.i.. Frame 20 (114 bytes on wire, 114 bytes captured) Arrival Time: Sep 19, 2003 16:19:11.878545000 Time delta from previous packet: 0.101074000 seconds Time relative to first packet: 125.352906000 seconds Frame Number: 20 Packet Length: 114 bytes Capture Length: 114 bytes Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad) Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e) Type: IP (0x0800) Trailer: 5CFAE813 Internet Protocol, Src Addr: 65.220.69.71 (65.220.69.71), Dst Addr: 63.202.92.133 (63.202.92.133) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0x907a (36986) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 115 Protocol: ESP (0x32) Header checksum: 0x937f (correct) Source: 65.220.69.71 (65.220.69.71) Destination: 63.202.92.133 (63.202.92.133) Encapsulating Security Payload SPI: 0x053a58b4 Sequence: 0x00000002 Data (68 bytes) 0000 00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00 .@c.... o.`...E. 0010 00 60 90 7a 00 00 73 32 93 7f 41 dc 45 47 3f ca .`.z..s2..A.EG?. 0020 5c 85 05 3a 58 b4 00 00 00 02 ed 36 b6 33 c4 c0 \..:X......6.3.. 0030 4c 3d 02 a8 f9 65 ab 5b 49 41 c8 ca 5e 8e c1 21 L=...e.[IA..^..! 0040 01 7b 08 72 61 b9 cd 3f 21 d9 0b c1 33 b4 9a 36 .{.ra..?!...3..6 0050 10 83 8a 24 21 30 65 16 a3 53 93 81 d2 cd c5 c3 ...$!0e..S...... 0060 02 ed 90 1e 44 4c fb ba d4 b9 da 7f 81 d2 5c fa ....DL........\. 0070 e8 13 .. Frame 21 (474 bytes on wire, 474 bytes captured) Arrival Time: Sep 19, 2003 16:19:11.884657000 Time delta from previous packet: 0.006112000 seconds Time relative to first packet: 125.359018000 seconds Frame Number: 21 Packet Length: 474 bytes Capture Length: 474 bytes Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad) Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e) Type: IP (0x0800) Trailer: 9E9EBFFE Internet Protocol, Src Addr: 65.220.69.71 (65.220.69.71), Dst Addr: 63.202.92.133 (63.202.92.133) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 456 Identification: 0x917a (37242) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 115 Protocol: ESP (0x32) Header checksum: 0x9117 (correct) Source: 65.220.69.71 (65.220.69.71) Destination: 63.202.92.133 (63.202.92.133) Encapsulating Security Payload SPI: 0x053a58b4 Sequence: 0x00000003 Data (428 bytes) 0000 00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00 .@c.... o.`...E. 0010 01 c8 91 7a 00 00 73 32 91 17 41 dc 45 47 3f ca ...z..s2..A.EG?. 0020 5c 85 05 3a 58 b4 00 00 00 03 93 81 d2 cd c5 c3 \..:X........... 0030 02 ed ae a4 46 e2 e0 7f 0d 08 b8 ad d2 42 8b d3 ....F........B.. 0040 79 67 ff f5 bc 79 ae 2e 49 43 12 5a b3 50 9f cb yg...y..IC.Z.P.. 0050 79 e5 97 61 3e 41 74 07 6d c3 3b 03 d6 e2 52 30 y..a>At.m.;...R0 0060 95 28 8c 7c 5a 0d 01 79 a8 4c 0a 28 38 cb 6e 0c .(.|Z..y.L.(8.n. 0070 dd c0 c6 fa f9 2d 99 5f 67 fd 71 a9 4f 9d 3a 09 .....-._g.q.O.:. 0080 d8 26 a6 16 2a 9f e5 2e 77 80 95 93 85 bc c2 d3 .&..*...w....... 0090 74 64 b9 a8 e4 55 40 08 fe ff 24 d8 ee e2 04 59 td...U@...$....Y 00a0 4f 39 05 e6 72 a8 11 ec 13 20 71 28 65 5d 8e ca O9..r.... q(e].. 00b0 92 fa e7 1e d7 c9 cf 21 ba 6a b9 9f ef c9 50 15 .......!.j....P. 00c0 13 f2 b4 1c 00 a0 d6 a9 73 18 1a a0 21 8a 31 0e ........s...!.1. 00d0 8b 44 27 4f f0 d7 4a e5 19 3e da 68 fb c9 0a 8d .D'O..J..>.h.... 00e0 23 06 cb 09 b7 9b 7f f7 af 5c c5 c7 9c de f8 73 #........\.....s 00f0 db dc d6 ae 12 7e 27 38 62 cc 39 57 e9 47 24 7a .....~'8b.9W.G$z 0100 df 6b ff f8 33 cd a0 13 1d 58 fd dd 0d 4d 3e c4 .k..3....X...M>. 0110 fe 07 25 a9 ca 35 31 86 a0 43 81 bd 99 17 b0 53 ..%..51..C.....S 0120 9e 7b da c5 44 3a fc d6 bc c7 27 83 a9 45 fd 2c .{..D:....'..E., 0130 be 65 0c e7 35 42 9d da 75 6d 26 d3 8e 6a b3 59 .e..5B..um&..j.Y 0140 f9 5b ca c3 c3 af c8 4d 90 e1 55 44 c0 a4 35 ff .[.....M..UD..5. 0150 04 75 92 90 1e 30 11 e7 52 67 0a 77 a3 08 8b 1f .u...0..Rg.w.... 0160 15 bb 6b 6c ab 65 81 ff d2 1e 08 98 17 1a 58 49 ..kl.e........XI 0170 37 72 82 1a 0f 24 b6 44 aa d9 1a ae 2d e9 74 7f 7r...$.D....-.t. 0180 8a 74 93 32 80 c0 ae 2e b6 ad 7e 5f 48 33 a6 ef .t.2......~_H3.. 0190 cb 86 31 71 9a c4 56 6b ab 35 c2 79 02 1b 65 7a ..1q..Vk.5.y..ez 01a0 09 ec 8d 87 80 35 3d 45 a9 b7 1d ae 84 ae 89 e1 .....5=E........ 01b0 61 88 15 e9 9c ab f4 5c 67 9e e6 04 4d 1d 7a a2 a......\g...M.z. 01c0 c0 40 46 2c f5 72 d2 79 17 66 0e 1a 0b c5 23 0e .@F,.r.y.f....#. 01d0 4f 6d c6 4c c0 85 9e 9e bf fe Om.L...... Frame 22 (942 bytes on wire, 942 bytes captured) Arrival Time: Sep 19, 2003 16:19:11.896584000 Time delta from previous packet: 0.011927000 seconds Time relative to first packet: 125.370945000 seconds Frame Number: 22 Packet Length: 942 bytes Capture Length: 942 bytes Ethernet II, Src: 00:40:63:c1:11:ad, Dst: 00:20:6f:09:60:0e Destination: 00:20:6f:09:60:0e (00:20:6f:09:60:0e) Source: 00:40:63:c1:11:ad (00:40:63:c1:11:ad) Type: IP (0x0800) Internet Protocol, Src Addr: 63.202.92.133 (63.202.92.133), Dst Addr: 65.220.69.71 (65.220.69.71) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 928 Identification: 0x0223 (547) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x5197 (correct) Source: 63.202.92.133 (63.202.92.133) Destination: 65.220.69.71 (65.220.69.71) Encapsulating Security Payload SPI: 0xf1d53579 Sequence: 0x00000002 Data (900 bytes) 0000 00 20 6f 09 60 0e 00 40 63 c1 11 ad 08 00 45 00 . o.`..@c.....E. 0010 03 a0 02 23 00 00 40 32 51 97 3f ca 5c 85 41 dc ...#..@2Q.?.\.A. 0020 45 47 f1 d5 35 79 00 00 00 02 55 45 92 9f 9c 3b EG..5y....UE...; 0030 e6 46 cc f5 d8 3f 0c ec 7d b5 0e 5d ae 00 d7 68 .F...?..}..]...h 0040 cd 14 7d 80 5c 33 77 d2 5e fa 00 71 a5 f5 9f ec ..}.\3w.^..q.... 0050 ad 26 05 41 da 4d ff 06 89 df d9 ad 48 d6 72 3b .&.A.M......H.r; 0060 cf 10 c4 81 73 75 a7 14 1c 5f 4c 92 30 82 48 31 ....su..._L.0.H1 0070 97 f9 09 76 71 f9 b2 e8 6a 43 f9 05 36 54 df f5 ...vq...jC..6T.. 0080 f7 79 b1 05 cc 13 7b c6 8a 82 de fb 14 e1 6f 2b .y....{.......o+ 0090 cb e1 1a b4 dd ac 3f 31 6c 6b f6 c7 6d ac 97 2f ......?1lk..m../ 00a0 95 8b a6 67 46 aa d2 16 41 11 b2 c3 9e 58 67 ca ...gF...A....Xg. 00b0 3f a8 6f b6 39 7d 87 30 c9 f7 a3 df 7f a1 ff 75 ?.o.9}.0.......u 00c0 20 03 2a 18 f9 31 1d 22 a7 82 b6 e8 f0 94 ae 60 .*..1.".......` 00d0 13 4c 9b 88 3e 65 e6 55 81 17 81 f5 05 12 f6 f0 .L..>e.U........ 00e0 f0 3f 4b 58 e2 f3 24 60 8e 24 b2 f9 da 9a 02 51 .?KX..$`.$.....Q 00f0 87 db 4e d2 7b bc 78 33 04 c7 4a d5 54 fe e8 67 ..N.{.x3..J.T..g 0100 4f 30 f6 f6 24 c2 6d 39 73 70 d6 0d e1 88 a9 7f O0..$.m9sp...... 0110 aa 07 4e 02 e3 08 29 fb be 53 00 2d 12 ff 39 7b ..N...)..S.-..9{ 0120 c5 1d d3 a4 b6 4a 3e d4 8c c6 f0 47 bf 81 f9 a4 .....J>....G.... 0130 8e fa 61 71 43 80 6d 7b 96 95 62 78 22 78 66 91 ..aqC.m{..bx"xf. 0140 ee e3 4d 9d 19 54 72 c1 14 f1 bf 6b 29 18 7e 54 ..M..Tr....k).~T 0150 9c c0 b8 ed e6 6d 29 77 24 81 3e 75 f0 12 93 a7 .....m)w$.>u.... 0160 89 0f b5 c9 26 37 3e 19 cf a6 75 33 95 80 05 16 ....&7>...u3.... 0170 d1 2a db 46 e5 51 a7 f4 26 ed 35 02 67 fc cb 25 .*.F.Q..&.5.g..% 0180 c7 4d 25 11 fb 57 f9 04 04 8d c8 42 05 ff a3 2b .M%..W.....B...+ 0190 39 3d 32 d8 d5 51 4f df 1d db 24 79 e9 f0 25 be 9=2..QO...$y..%. 01a0 ed 0a d1 6c 90 46 19 bf a3 e6 c5 38 fa aa 7b 12 ...l.F.....8..{. 01b0 ec f5 e1 66 ac b2 fd af 16 a8 08 1d 76 8f e7 33 ...f........v..3 01c0 37 87 60 f3 8f 3f 96 b5 ad 0b 34 03 c3 59 29 b5 7.`..?....4..Y). 01d0 2a ec bf 3a 9d 27 ed c4 60 d0 14 a9 55 76 bf dd *..:.'..`...Uv.. 01e0 75 94 41 9b 66 4c 5e 1f c6 ae ad ce ca 44 32 90 u.A.fL^......D2. 01f0 2c 53 19 0f 3d 2e 1a a3 89 38 d5 f7 05 c1 aa 23 ,S..=....8.....# 0200 25 c7 8b b3 28 de c6 79 55 b2 5a bd 42 30 9b 09 %...(..yU.Z.B0.. 0210 d7 72 83 fc 12 9f e3 79 a1 39 9a 0a 7a 6e 96 48 .r.....y.9..zn.H 0220 cf 5a 14 d6 2d cf a7 60 e8 8b 42 b2 84 64 a5 c7 .Z..-..`..B..d.. 0230 2a 85 3c 58 d3 48 11 83 d1 11 61 99 76 3b e9 ea *..6.7r. 0310 6e 1e f4 28 15 9d 47 61 8c db de 80 3d 29 37 6d n..(..Ga....=)7m 0320 cd cc 0d fa f7 0c dc c9 50 5a ad d8 7d 1a 61 c4 ........PZ..}.a. 0330 19 b8 d1 d0 0e 69 08 a3 e5 39 5d fa b7 af a5 ce .....i...9]..... 0340 35 28 33 88 6d bd 5c 12 6b 95 d9 24 44 4e 35 d8 5(3.m.\.k..$DN5. 0350 a5 e8 d7 c4 75 47 1e 34 27 38 21 53 74 56 20 e1 ....uG.4'8!StV . 0360 cd 45 f0 8a f9 4b 14 b9 dc cb a9 0a cb ed 7c 8d .E...K........|. 0370 d7 d7 9a bc e5 11 17 07 cb 09 71 3c dc c8 d7 4c ..........q<...L 0380 55 5f d8 59 5f 89 52 19 40 ee 26 d0 7c 43 72 2a U_.Y_.R.@.&.|Cr* 0390 c1 75 a2 d5 35 fe 11 43 9e 56 46 b4 54 f3 ce a0 .u..5..C.VF.T... 03a0 04 12 78 58 db f5 e9 e1 50 8a 3f e7 29 68 ..xX....P.?.)h Frame 23 (110 bytes on wire, 110 bytes captured) Arrival Time: Sep 19, 2003 16:19:11.896772000 Time delta from previous packet: 0.000188000 seconds Time relative to first packet: 125.371133000 seconds Frame Number: 23 Packet Length: 110 bytes Capture Length: 110 bytes Ethernet II, Src: 00:40:63:c1:11:ad, Dst: 00:20:6f:09:60:0e Destination: 00:20:6f:09:60:0e (00:20:6f:09:60:0e) Source: 00:40:63:c1:11:ad (00:40:63:c1:11:ad) Type: IP (0x0800) Internet Protocol, Src Addr: 63.202.92.133 (63.202.92.133), Dst Addr: 65.220.69.71 (65.220.69.71) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0x0224 (548) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x54d6 (correct) Source: 63.202.92.133 (63.202.92.133) Destination: 65.220.69.71 (65.220.69.71) Encapsulating Security Payload SPI: 0xf1d53579 Sequence: 0x00000003 Data (68 bytes) 0000 00 20 6f 09 60 0e 00 40 63 c1 11 ad 08 00 45 00 . o.`..@c.....E. 0010 00 60 02 24 00 00 40 32 54 d6 3f ca 5c 85 41 dc .`.$..@2T.?.\.A. 0020 45 47 f1 d5 35 79 00 00 00 03 be b2 62 46 6c 15 EG..5y......bFl. 0030 ec 84 86 b2 30 d2 aa 23 2f a2 82 fa cd 4d f6 1e ....0..#/....M.. 0040 e1 20 be 84 b0 e0 3c e1 c3 29 fa 9d f9 3a 81 94 . ....<..)...:.. 0050 bd ab b0 02 d0 6a cc 60 30 3b 4e 61 76 77 4d 1d .....j.`0;NavwM. 0060 98 0f 8f 49 bc 8f 5b 5e 4b e8 6a 8f 60 74 ...I..[^K.j.`t Frame 24 (114 bytes on wire, 114 bytes captured) Arrival Time: Sep 19, 2003 16:19:12.052912000 Time delta from previous packet: 0.156140000 seconds Time relative to first packet: 125.527273000 seconds Frame Number: 24 Packet Length: 114 bytes Capture Length: 114 bytes Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad) Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e) Type: IP (0x0800) Trailer: 98E8206F Internet Protocol, Src Addr: 65.220.69.71 (65.220.69.71), Dst Addr: 63.202.92.133 (63.202.92.133) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0x947a (38010) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 115 Protocol: ESP (0x32) Header checksum: 0x8f7f (correct) Source: 65.220.69.71 (65.220.69.71) Destination: 63.202.92.133 (63.202.92.133) Encapsulating Security Payload SPI: 0x053a58b4 Sequence: 0x00000004 Data (68 bytes) 0000 00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00 .@c.... o.`...E. 0010 00 60 94 7a 00 00 73 32 8f 7f 41 dc 45 47 3f ca .`.z..s2..A.EG?. 0020 5c 85 05 3a 58 b4 00 00 00 04 46 2c f5 72 d2 79 \..:X.....F,.r.y 0030 17 66 14 7b 65 6f 9d 8f e0 6f ad ce 79 50 a1 e1 .f.{eo...o..yP.. 0040 44 70 b5 7f 3a d0 41 b9 a1 24 0f 17 99 a5 b8 84 Dp..:.A..$...... 0050 a8 bb 04 17 5d a3 d8 f4 e5 5f 0b bc 50 9c 4e bf ....]...._..P.N. 0060 c6 39 ac e2 0f 02 50 f0 0d a8 75 bd 97 63 98 e8 .9....P...u..c.. 0070 20 6f o Frame 25 (110 bytes on wire, 110 bytes captured) Arrival Time: Sep 19, 2003 16:19:26.899249000 Time delta from previous packet: 14.846337000 seconds Time relative to first packet: 140.373610000 seconds Frame Number: 25 Packet Length: 110 bytes Capture Length: 110 bytes Ethernet II, Src: 00:40:63:c1:11:ad, Dst: 00:20:6f:09:60:0e Destination: 00:20:6f:09:60:0e (00:20:6f:09:60:0e) Source: 00:40:63:c1:11:ad (00:40:63:c1:11:ad) Type: IP (0x0800) Internet Protocol, Src Addr: 63.202.92.133 (63.202.92.133), Dst Addr: 65.220.69.71 (65.220.69.71) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0x0225 (549) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x54d5 (correct) Source: 63.202.92.133 (63.202.92.133) Destination: 65.220.69.71 (65.220.69.71) Encapsulating Security Payload SPI: 0xf1d53579 Sequence: 0x00000004 Data (68 bytes) 0000 00 20 6f 09 60 0e 00 40 63 c1 11 ad 08 00 45 00 . o.`..@c.....E. 0010 00 60 02 25 00 00 40 32 54 d5 3f ca 5c 85 41 dc .`.%..@2T.?.\.A. 0020 45 47 f1 d5 35 79 00 00 00 04 fe 13 56 05 4a fd EG..5y......V.J. 0030 73 fa c2 5c 51 b5 ad e0 81 d2 dc 23 cb d2 c6 cb s..\Q......#.... 0040 7d 10 0b f4 ec a3 fa f5 65 08 7e 6f 4e 68 eb 5f }.......e.~oNh._ 0050 5b d4 d3 fe a2 39 d5 43 65 4c d1 71 ca f9 e8 f0 [....9.CeL.q.... 0060 77 b9 55 4c c7 a0 7f d7 86 ed 58 55 a2 fb w.UL......XU.. Frame 26 (114 bytes on wire, 114 bytes captured) Arrival Time: Sep 19, 2003 16:19:27.002144000 Time delta from previous packet: 0.102895000 seconds Time relative to first packet: 140.476505000 seconds Frame Number: 26 Packet Length: 114 bytes Capture Length: 114 bytes Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad) Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e) Type: IP (0x0800) Trailer: C5800B70 Internet Protocol, Src Addr: 65.220.69.71 (65.220.69.71), Dst Addr: 63.202.92.133 (63.202.92.133) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0x967a (38522) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 115 Protocol: ESP (0x32) Header checksum: 0x8d7f (correct) Source: 65.220.69.71 (65.220.69.71) Destination: 63.202.92.133 (63.202.92.133) Encapsulating Security Payload SPI: 0x053a58b4 Sequence: 0x00000005 Data (68 bytes) 0000 00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00 .@c.... o.`...E. 0010 00 60 96 7a 00 00 73 32 8d 7f 41 dc 45 47 3f ca .`.z..s2..A.EG?. 0020 5c 85 05 3a 58 b4 00 00 00 05 0b bc 50 9c 4e bf \..:X.......P.N. 0030 c6 39 1c 71 88 0f 76 5a e1 ae a9 7e 68 a7 a1 e9 .9.q..vZ...~h... 0040 e8 b7 fe 72 3f 48 3b 93 73 2a 22 de 6a 78 36 b4 ...r?H;.s*".jx6. 0050 fe 62 7e 38 1b 24 a6 94 b0 6e b1 71 31 93 22 06 .b~8.$...n.q1.". 0060 a0 90 b1 b5 de d3 8e 15 a2 f0 3b d9 e1 d4 c5 80 ..........;..... 0070 0b 70 .p Frame 27 (114 bytes on wire, 114 bytes captured) Arrival Time: Sep 19, 2003 16:19:28.574592000 Time delta from previous packet: 1.572448000 seconds Time relative to first packet: 142.048953000 seconds Frame Number: 27 Packet Length: 114 bytes Capture Length: 114 bytes Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad) Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e) Type: IP (0x0800) Trailer: 1383D831 Internet Protocol, Src Addr: 65.220.69.71 (65.220.69.71), Dst Addr: 63.202.92.133 (63.202.92.133) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0x987a (39034) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 115 Protocol: ESP (0x32) Header checksum: 0x8b7f (correct) Source: 65.220.69.71 (65.220.69.71) Destination: 63.202.92.133 (63.202.92.133) Encapsulating Security Payload SPI: 0x053a58b4 Sequence: 0x00000006 Data (68 bytes) 0000 00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00 .@c.... o.`...E. 0010 00 60 98 7a 00 00 73 32 8b 7f 41 dc 45 47 3f ca .`.z..s2..A.EG?. 0020 5c 85 05 3a 58 b4 00 00 00 06 b1 71 31 93 22 06 \..:X......q1.". 0030 a0 90 9d 0c fe 2e 91 ab 04 24 a5 f0 cb 26 d0 15 .........$...&.. 0040 a4 5e b3 ba 9a 92 b1 eb 39 ff 61 6e c8 a3 c0 5d .^......9.an...] 0050 fe 09 4e cd f9 a5 35 85 a3 20 c0 ba c9 53 8f 02 ..N...5.. ...S.. 0060 18 6c e4 8f 1e 34 31 7c 7c ad 8d c8 72 26 13 83 .l...41||...r&.. 0070 d8 31 .1 Frame 28 (418 bytes on wire, 418 bytes captured) Arrival Time: Sep 19, 2003 16:22:44.330696000 Time delta from previous packet: 195.756104000 seconds Time relative to first packet: 337.805057000 seconds Frame Number: 28 Packet Length: 418 bytes Capture Length: 418 bytes Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad) Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e) Type: IP (0x0800) Trailer: 70798D1F Internet Protocol, Src Addr: 65.220.69.71 (65.220.69.71), Dst Addr: 63.202.92.133 (63.202.92.133) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 400 Identification: 0x0005 (5) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 51 Protocol: UDP (0x11) Header checksum: 0x62e6 (correct) Source: 65.220.69.71 (65.220.69.71) Destination: 63.202.92.133 (63.202.92.133) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 380 Checksum: 0x47b6 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xE4EB5E590B9B7F8B Responder cookie: 0x397E4308C83F6D63 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xE463DC65 Length: 372 Encrypted payload (344 bytes) 0000 00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00 .@c.... o.`...E. 0010 01 90 00 05 00 00 33 11 62 e6 41 dc 45 47 3f ca ......3.b.A.EG?. 0020 5c 85 01 f4 01 f4 01 7c 47 b6 e4 eb 5e 59 0b 9b \......|G...^Y.. 0030 7f 8b 39 7e 43 08 c8 3f 6d 63 08 10 20 01 e4 63 ..9~C..?mc.. ..c 0040 dc 65 00 00 01 74 4b 9c 65 38 39 3c 1e f4 63 4c .e...tK.e89<..cL 0050 59 73 d7 86 73 e8 85 64 0b c8 b0 a3 46 cc af c9 Ys..s..d....F... 0060 3b 62 02 bc c3 c3 b5 eb 32 ff 0b cf 2a 44 51 94 ;b......2...*DQ. 0070 99 f1 38 28 08 37 d1 62 3f 7b 45 2b 0b 5e 25 07 ..8(.7.b?{E+.^%. 0080 ca 1e 53 16 20 90 c1 81 90 69 18 ff 9b 53 ae 72 ..S. ....i...S.r 0090 89 5d 23 64 b7 38 f1 6f 63 4c f6 f3 4a 43 5b e5 .]#d.8.ocL..JC[. 00a0 68 14 d6 ec 8b 26 23 58 dd 0b 5c 59 f1 dd 51 48 h....&#X..\Y..QH 00b0 46 5e d8 93 1b 33 f0 0d 23 3a 96 dd 94 02 d6 74 F^...3..#:.....t 00c0 b7 36 c9 f0 e9 02 d3 18 66 ea 27 57 d0 40 7d 09 .6......f.'W.@}. 00d0 2c 89 b7 37 05 ce 3a 18 64 b1 87 94 25 d6 2b 11 ,..7..:.d...%.+. 00e0 14 18 2d ab d1 9f ae 75 1a cf 05 34 01 59 77 83 ..-....u...4.Yw. 00f0 07 0a 8d 46 9f 7e 7c fb cf 06 af eb 78 00 96 60 ...F.~|.....x..` 0100 c7 03 c9 74 3e 9d 38 07 ea c1 5e 4d 3e 1f 41 47 ...t>.8...^M>.AG 0110 91 24 27 33 98 c2 40 3f 46 dd 67 ad fc 23 bf 4b .$'3..@?F.g..#.K 0120 fb 52 59 8e 68 01 af aa 73 2d ae 68 92 3f 08 60 .RY.h...s-.h.?.` 0130 ab 34 9f 28 2b 79 95 8b aa 7a 17 3b 42 b8 eb 07 .4.(+y...z.;B... 0140 87 83 c1 ac 75 6b 3e 59 e0 d9 a0 71 7b 5b 55 61 ....uk>Y...q{[Ua 0150 5a e8 e0 56 e4 a0 2b 3f 99 06 32 1a 92 a0 7d a0 Z..V..+?..2...}. 0160 4e b1 d2 63 21 19 51 8a b9 bc df 10 db a3 a8 fc N..c!.Q......... 0170 5c 31 6d b2 22 cf b9 b1 8f b5 da 7d 48 70 20 64 \1m."......}Hp d 0180 39 b8 9a 54 a3 eb cf dc 56 fc aa 57 26 62 2f c4 9..T....V..W&b/. 0190 aa 1d 7f 36 ae 85 9f 27 c2 22 71 77 1a 23 70 79 ...6...'."qw.#py 01a0 8d 1f .. Frame 29 (334 bytes on wire, 334 bytes captured) Arrival Time: Sep 19, 2003 16:22:44.413404000 Time delta from previous packet: 0.082708000 seconds Time relative to first packet: 337.887765000 seconds Frame Number: 29 Packet Length: 334 bytes Capture Length: 334 bytes Ethernet II, Src: 00:40:63:c1:11:ad, Dst: 00:20:6f:09:60:0e Destination: 00:20:6f:09:60:0e (00:20:6f:09:60:0e) Source: 00:40:63:c1:11:ad (00:40:63:c1:11:ad) Type: IP (0x0800) Internet Protocol, Src Addr: 63.202.92.133 (63.202.92.133), Dst Addr: 65.220.69.71 (65.220.69.71) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 320 Identification: 0x026c (620) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x53cf (correct) Source: 63.202.92.133 (63.202.92.133) Destination: 65.220.69.71 (65.220.69.71) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 300 Checksum: 0x8894 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xE4EB5E590B9B7F8B Responder cookie: 0x397E4308C83F6D63 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xE463DC65 Length: 292 Encrypted payload (264 bytes) 0000 00 20 6f 09 60 0e 00 40 63 c1 11 ad 08 00 45 00 . o.`..@c.....E. 0010 01 40 02 6c 00 00 40 11 53 cf 3f ca 5c 85 41 dc .@.l..@.S.?.\.A. 0020 45 47 01 f4 01 f4 01 2c 88 94 e4 eb 5e 59 0b 9b EG.....,....^Y.. 0030 7f 8b 39 7e 43 08 c8 3f 6d 63 08 10 20 01 e4 63 ..9~C..?mc.. ..c 0040 dc 65 00 00 01 24 7a d8 52 ec 84 e8 50 26 2c 3d .e...$z.R...P&,= 0050 e1 8b b9 2e 18 cc ec 06 1d f8 8d 0d f3 53 8b bd .............S.. 0060 46 b8 15 f0 29 6f 6a 15 8a 2d d2 b5 d2 24 c4 73 F...)oj..-...$.s 0070 66 b4 25 b7 55 c5 23 7e cb a9 45 6a d2 2e 1d 52 f.%.U.#~..Ej...R 0080 9d b6 67 a5 e6 8b 43 70 51 ef ae 58 15 b4 b2 07 ..g...CpQ..X.... 0090 71 63 d3 2d 22 a8 aa 10 34 ae 66 2b 30 00 1d ce qc.-"...4.f+0... 00a0 3d 01 76 b5 8a 9c cc 8d bc 70 cf d4 8b 18 cb 7c =.v......p.....| 00b0 fd b5 b1 d6 87 ca a8 48 d3 29 a0 d5 4f cf db af .......H.)..O... 00c0 fe 62 c2 13 df 47 63 f7 0c cd 51 5d 3b 61 3f 3c .b...Gc...Q];a?< 00d0 c8 ae 4c cf 6e df 1a 07 e8 99 4e 30 8b ad 41 69 ..L.n.....N0..Ai 00e0 50 da 96 26 f0 f7 b8 b3 49 3c 47 bc 2b c6 36 ff P..&....I 00b0 6e 31 76 87 ab 5f 4c b8 5c 94 d3 22 3f 4f aa 9f n1v.._L.\.."?O.. 00c0 86 b4 a6 a5 9f b1 d6 77 35 d4 c9 54 b8 bf 89 87 .......w5..T.... 00d0 5c 59 1c 46 ae 45 73 35 ab fe 5a b9 0b 3c cc a6 \Y.F.Es5..Z..<.. 00e0 c3 4e da 41 80 53 af be 90 9a 2e dc 66 78 cd 28 .N.A.S......fx.( 00f0 3a c5 e7 5f 3f ca 7c 45 e3 66 ac 9a 12 d4 9b 0f :.._?.|E.f...... 0100 4c e4 87 32 5a 4e 6b fb 7c 5c 7c 22 0f 06 04 e7 L..2ZNk.|\|".... 0110 23 c9 2b fc 59 3d a3 63 e7 87 fd eb 2b a1 e3 b0 #.+.Y=.c....+... 0120 e6 fa ac 2b f8 bd fd be 53 32 ce d1 6b 93 72 b2 ...+....S2..k.r. 0130 fe 60 30 2f be 8d f6 10 63 f2 51 19 aa 69 39 b0 .`0/....c.Q..i9. 0140 1e 30 b2 3b 94 2a 8b 8d bb a7 9a 4a 3c 82 1e bd .0.;.*.....J<... 0150 3c 26 8b e8 8d c6 06 23 aa dc 44 54 2a 81 af cb <&.....#..DT*... 0160 a3 ea 1d bf 52 cc e2 93 c4 23 9a 05 2b e0 73 ac ....R....#..+.s. 0170 c5 08 1e ed b0 6e 9b 1f 7c 70 75 4e 5f 61 d9 b1 .....n..|puN_a.. 0180 94 10 7a 73 57 35 73 46 27 7a 2f 82 99 95 2a 34 ..zsW5sF'z/...*4 0190 00 c4 5a 0f 1b 0c cd 11 9e d0 cc 94 6d 28 6d f2 ..Z.........m(m. 01a0 4e 9d 46 49 d9 0e d9 d7 31 1e f1 d3 1f d6 8e 24 N.FI....1......$ 01b0 5f 17 75 64 ca cb a7 c2 22 61 3a 50 05 7e ab c6 _.ud...."a:P.~.. 01c0 40 59 32 b4 f1 0b 76 82 f1 80 e7 14 ed 75 17 68 @Y2...v......u.h 01d0 c9 8d 13 0f dd 98 a2 99 f4 05 c6 e1 0e 73 dc 00 .............s.. 01e0 bb 81 fd d2 e1 13 b4 49 a3 04 86 36 c3 96 2d 0f .......I...6..-. 01f0 bf dd 82 43 53 11 0d a6 fd 49 18 6e 65 61 0e 69 ...CS....I.nea.i 0200 59 02 db d1 9a e4 9a 0f 02 c2 aa 0c a9 7b 1c 30 Y............{.0 0210 2b 04 cc d4 25 95 88 ce 5d 75 e7 24 cc 6c 4a 18 +...%...]u.$.lJ. 0220 49 b4 33 43 d3 f8 44 70 7b 85 94 e4 73 67 0f ad I.3C..Dp{...sg.. 0230 15 35 88 e8 d3 79 ba 5e 71 b6 05 21 52 53 ab ce .5...y.^q..!RS.. 0240 e2 29 11 0d 0a 10 d0 ec df 88 9f 55 d5 72 55 b1 .).........U.rU. 0250 74 f3 97 60 b3 55 12 df 8f 5c cb e8 ca 95 de 0a t..`.U...\...... 0260 a9 81 63 9b a6 d2 c7 b3 f3 00 07 b2 ac e5 07 fb ..c............. 0270 75 5a 05 9f 80 4d 38 61 4e 28 2b 2a 7b 8f 2e a4 uZ...M8aN(+*{... 0280 8d b5 8d 25 f6 54 df 2a 78 6d 36 a3 9f f3 cd 5f ...%.T.*xm6...._ 0290 4a c1 1d 3a 4b 1f 0f ec 78 2e 5c 1d d9 8c 01 9d J..:K...x.\..... 02a0 06 87 d5 7a 1e 47 a7 98 93 4f 42 2d 55 21 28 ad ...z.G...OB-U!(. 02b0 ae 38 df 5e a1 26 d8 bb f2 c7 ff 36 85 53 eb 37 .8.^.&.....6.S.7 02c0 8f a1 96 be 8d 6f e6 55 be 49 ed 8b 35 cb 7e c3 .....o.U.I..5.~. 02d0 73 6b d8 5d ca 29 09 4d 39 d7 5d dc 55 0e 3e 3f sk.].).M9.].U.>? 02e0 8b 9e 4f e2 d5 c3 74 e9 fe 4a 52 cd b8 fb 78 92 ..O...t..JR...x. 02f0 d9 bc c9 e3 37 b5 72 2e a3 42 4c ef 0a fa e5 ae ....7.r..BL..... 0300 6b 0b 10 aa 20 0f 22 a7 51 f4 ca fb db 23 21 df k... .".Q....#!. 0310 30 64 6d ac cf 9e 42 07 1e df b4 69 22 77 9c 1c 0dm...B....i"w.. 0320 14 41 b1 97 f2 53 97 74 8b d1 16 74 a0 b9 b1 78 .A...S.t...t...x 0330 c6 d9 70 f7 66 95 24 ec 75 97 7b e3 8a c0 91 1f ..p.f.$.u.{..... 0340 65 51 05 b0 c0 75 2e b3 51 c4 f0 fc 07 65 3b a2 eQ...u..Q....e;. 0350 f5 f1 3a 1f cf d9 31 a1 d9 b2 79 16 c7 fb 27 1d ..:...1...y...'. 0360 30 97 3e 36 17 2e 8b 78 a3 8b bd c5 69 64 dd 0a 0.>6...x....id.. 0370 44 91 54 9a 3a 7d a9 e6 07 2b 61 8e d8 f7 7d 4b D.T.:}...+a...}K 0380 83 f7 4e 8e cd b7 2e d7 06 49 48 33 8f f0 ef 0c ..N......IH3.... 0390 81 e7 fa fe 4f 9c 8f 96 01 39 fe ff a8 73 ac 5f ....O....9...s._ 03a0 1c 69 80 db 0d d5 ec 2e 1b b0 ed 0e 18 db .i............ Frame 36 (110 bytes on wire, 110 bytes captured) Arrival Time: Sep 19, 2003 16:22:47.058629000 Time delta from previous packet: 0.000185000 seconds Time relative to first packet: 340.532990000 seconds Frame Number: 36 Packet Length: 110 bytes Capture Length: 110 bytes Ethernet II, Src: 00:40:63:c1:11:ad, Dst: 00:20:6f:09:60:0e Destination: 00:20:6f:09:60:0e (00:20:6f:09:60:0e) Source: 00:40:63:c1:11:ad (00:40:63:c1:11:ad) Type: IP (0x0800) Internet Protocol, Src Addr: 63.202.92.133 (63.202.92.133), Dst Addr: 65.220.69.71 (65.220.69.71) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0x0274 (628) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x5486 (correct) Source: 63.202.92.133 (63.202.92.133) Destination: 65.220.69.71 (65.220.69.71) Encapsulating Security Payload SPI: 0x26410969 Sequence: 0x00000003 Data (68 bytes) 0000 00 20 6f 09 60 0e 00 40 63 c1 11 ad 08 00 45 00 . o.`..@c.....E. 0010 00 60 02 74 00 00 40 32 54 86 3f ca 5c 85 41 dc .`.t..@2T.?.\.A. 0020 45 47 26 41 09 69 00 00 00 03 d2 91 4b c7 ba 95 EG&A.i......K... 0030 15 65 69 38 9c be 58 79 2c d0 b3 9d 4c 0e fe 72 .ei8..Xy,...L..r 0040 61 10 43 39 a7 2c 59 84 f3 1c fe 23 01 40 50 31 a.C9.,Y....#.@P1 0050 cf 60 35 03 a9 74 34 dd 17 c7 42 6d 57 18 e8 17 .`5..t4...BmW... 0060 90 4a db 44 88 0b 95 63 32 5c b4 59 ff ce .J.D...c2\.Y.. Frame 37 (114 bytes on wire, 114 bytes captured) Arrival Time: Sep 19, 2003 16:22:47.215766000 Time delta from previous packet: 0.157137000 seconds Time relative to first packet: 340.690127000 seconds Frame Number: 37 Packet Length: 114 bytes Capture Length: 114 bytes Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad) Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e) Type: IP (0x0800) Trailer: 59AF9E9B Internet Protocol, Src Addr: 65.220.69.71 (65.220.69.71), Dst Addr: 63.202.92.133 (63.202.92.133) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0xd37a (54138) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 115 Protocol: ESP (0x32) Header checksum: 0x507f (correct) Source: 65.220.69.71 (65.220.69.71) Destination: 63.202.92.133 (63.202.92.133) Encapsulating Security Payload SPI: 0x0dcd9ad1 Sequence: 0x0000000a Data (68 bytes) 0000 00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00 .@c.... o.`...E. 0010 00 60 d3 7a 00 00 73 32 50 7f 41 dc 45 47 3f ca .`.z..s2P.A.EG?. 0020 5c 85 0d cd 9a d1 00 00 00 0a 6c ff b9 d4 11 4c \.........l....L 0030 df 2d a0 50 41 fd 0d 80 4c 95 bc c9 42 d5 28 af .-.PA...L...B.(. 0040 7c 03 a7 74 35 86 59 6f c5 66 2c 11 ea ac 31 60 |..t5.Yo.f,...1` 0050 e3 ff b7 4f 1f 02 5c 30 7f 28 9b 34 40 38 78 cb ...O..\0.(.4@8x. 0060 9d 1e 62 10 09 d0 2f d7 ad 7d b6 da 4a 3e 59 af ..b.../..}..J>Y. 0070 9e 9b .. Frame 38 (110 bytes on wire, 110 bytes captured) Arrival Time: Sep 19, 2003 16:23:02.064218000 Time delta from previous packet: 14.848452000 seconds Time relative to first packet: 355.538579000 seconds Frame Number: 38 Packet Length: 110 bytes Capture Length: 110 bytes Ethernet II, Src: 00:40:63:c1:11:ad, Dst: 00:20:6f:09:60:0e Destination: 00:20:6f:09:60:0e (00:20:6f:09:60:0e) Source: 00:40:63:c1:11:ad (00:40:63:c1:11:ad) Type: IP (0x0800) Internet Protocol, Src Addr: 63.202.92.133 (63.202.92.133), Dst Addr: 65.220.69.71 (65.220.69.71) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0x028c (652) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x546e (correct) Source: 63.202.92.133 (63.202.92.133) Destination: 65.220.69.71 (65.220.69.71) Encapsulating Security Payload SPI: 0x26410969 Sequence: 0x00000004 Data (68 bytes) 0000 00 20 6f 09 60 0e 00 40 63 c1 11 ad 08 00 45 00 . o.`..@c.....E. 0010 00 60 02 8c 00 00 40 32 54 6e 3f ca 5c 85 41 dc .`....@2Tn?.\.A. 0020 45 47 26 41 09 69 00 00 00 04 14 c3 e5 37 bd ef EG&A.i.......7.. 0030 31 c6 e3 46 63 0d 36 94 90 03 e4 dd e1 a8 10 3f 1..Fc.6........? 0040 6a 0e 74 c1 22 ae 40 fa cf de 62 8c 3f 2b d4 5d j.t.".@...b.?+.] 0050 07 f0 cf dd cc d5 79 ed ec f7 d3 78 0c 4d a8 d5 ......y....x.M.. 0060 ab 48 8e 13 a0 35 cb dc 5a 64 9b 50 25 49 .H...5..Zd.P%I Frame 39 (114 bytes on wire, 114 bytes captured) Arrival Time: Sep 19, 2003 16:23:02.166959000 Time delta from previous packet: 0.102741000 seconds Time relative to first packet: 355.641320000 seconds Frame Number: 39 Packet Length: 114 bytes Capture Length: 114 bytes Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad) Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e) Type: IP (0x0800) Trailer: 07BAB738 Internet Protocol, Src Addr: 65.220.69.71 (65.220.69.71), Dst Addr: 63.202.92.133 (63.202.92.133) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0xd47a (54394) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 115 Protocol: ESP (0x32) Header checksum: 0x4f7f (correct) Source: 65.220.69.71 (65.220.69.71) Destination: 63.202.92.133 (63.202.92.133) Encapsulating Security Payload SPI: 0x0dcd9ad1 Sequence: 0x0000000b Data (68 bytes) 0000 00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00 .@c.... o.`...E. 0010 00 60 d4 7a 00 00 73 32 4f 7f 41 dc 45 47 3f ca .`.z..s2O.A.EG?. 0020 5c 85 0d cd 9a d1 00 00 00 0b 9b 34 40 38 78 cb \..........4@8x. 0030 9d 1e 05 65 77 7c fb 01 b9 cd a7 ff ce bb 8c 3b ...ew|.........; 0040 70 51 77 22 b5 06 73 56 f9 af 75 92 74 ba ea 71 pQw"..sV..u.t..q 0050 ed 30 9a 09 94 5e f2 e8 24 83 2a d4 20 ed 51 25 .0...^..$.*. .Q% 0060 c5 3f 78 40 32 b2 8c 90 61 49 4b b8 3e ae 07 ba .?x@2...aIK.>... 0070 b7 38 .8 Frame 40 (114 bytes on wire, 114 bytes captured) Arrival Time: Sep 19, 2003 16:23:03.713615000 Time delta from previous packet: 1.546656000 seconds Time relative to first packet: 357.187976000 seconds Frame Number: 40 Packet Length: 114 bytes Capture Length: 114 bytes Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad) Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e) Type: IP (0x0800) Trailer: 5F7086D9 Internet Protocol, Src Addr: 65.220.69.71 (65.220.69.71), Dst Addr: 63.202.92.133 (63.202.92.133) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0xd57a (54650) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 115 Protocol: ESP (0x32) Header checksum: 0x4e7f (correct) Source: 65.220.69.71 (65.220.69.71) Destination: 63.202.92.133 (63.202.92.133) Encapsulating Security Payload SPI: 0x0dcd9ad1 Sequence: 0x0000000c Data (68 bytes) 0000 00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00 .@c.... o.`...E. 0010 00 60 d5 7a 00 00 73 32 4e 7f 41 dc 45 47 3f ca .`.z..s2N.A.EG?. 0020 5c 85 0d cd 9a d1 00 00 00 0c 2a d4 20 ed 51 25 \.........*. .Q% 0030 c5 3f 6c a0 b2 96 62 6e 3e c9 9e 96 df 22 08 6f .?l...bn>....".o 0040 80 8c b6 32 1b 99 d6 6b 95 f4 65 39 d7 d8 75 5f ...2...k..e9..u_ 0050 5b e8 08 5a 0a c5 04 e9 a0 0f 2a 35 75 90 88 a1 [..Z......*5u... 0060 27 88 fe 03 6d 56 2f 15 53 80 1a 37 10 f9 5f 70 '...mV/.S..7.._p 0070 86 d9 ..