IKE and IPsec packets sent/received: Frame 1 (266 bytes on wire, 266 bytes captured) Arrival Time: Sep 30, 2003 13:41:57.469382000 Time delta from previous packet: 0.000000000 seconds Time relative to first packet: 0.000000000 seconds Frame Number: 1 Packet Length: 266 bytes Capture Length: 266 bytes Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad) Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e) Type: IP (0x0800) Trailer: 485C2AA3 Internet Protocol, Src Addr: 64.94.50.108 (64.94.50.108), Dst Addr: 63.202.92.133 (63.202.92.133) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 248 Identification: 0xa6ae (42670) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 39 Protocol: UDP (0x11) Header checksum: 0xdd2d (correct) Source: 64.94.50.108 (64.94.50.108) Destination: 63.202.92.133 (63.202.92.133) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 228 Checksum: 0x0000 (none) Internet Security Association and Key Management Protocol Initiator cookie: 0x11D15F6B82900273 Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 220 Security Association payload Next payload: Vendor ID (13) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 0 Next payload: NONE (0) Length: 40 Proposal number: 0 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 0 Next payload: NONE (0) Length: 32 Transform number: 0 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Authentication-Method (3): RSA-SIG (3) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (10800) Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: unknown vendor ID: 0x5DE9BC4C3560AA16CB2DF25E7950F160 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: unknown vendor ID: 0x27BAB5DC01EA0760EA4E3190AC27C0D0 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: unknown vendor ID: 0x6105C422E76847E43F9684801292AECD Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: unknown vendor ID: 0x4485152D18B6BBCD0BE8A8469579DDCC Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: unknown vendor ID: 0xCD60464335DF21F87CFDB2FC68B6A448 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: unknown vendor ID: 0x90CB80913EBB696E086381B5EC427B1F Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-03 0000 00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00 .@c.... o.`...E. 0010 00 f8 a6 ae 00 00 27 11 dd 2d 40 5e 32 6c 3f ca ......'..-@^2l?. 0020 5c 85 01 f4 01 f4 00 e4 00 00 11 d1 5f 6b 82 90 \..........._k.. 0030 02 73 00 00 00 00 00 00 00 00 01 10 02 00 00 00 .s.............. 0040 00 00 00 00 00 dc 0d 00 00 34 00 00 00 01 00 00 .........4...... 0050 00 01 00 00 00 28 00 01 00 01 00 00 00 20 00 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 03 00 03 80 04 ................ 0070 00 02 80 0b 00 01 80 0c 2a 30 0d 00 00 14 5d e9 ........*0....]. 0080 bc 4c 35 60 aa 16 cb 2d f2 5e 79 50 f1 60 0d 00 .L5`...-.^yP.`.. 0090 00 14 27 ba b5 dc 01 ea 07 60 ea 4e 31 90 ac 27 ..'......`.N1..' 00a0 c0 d0 0d 00 00 14 61 05 c4 22 e7 68 47 e4 3f 96 ......a..".hG.?. 00b0 84 80 12 92 ae cd 0d 00 00 14 44 85 15 2d 18 b6 ..........D..-.. 00c0 bb cd 0b e8 a8 46 95 79 dd cc 0d 00 00 14 cd 60 .....F.y.......` 00d0 46 43 35 df 21 f8 7c fd b2 fc 68 b6 a4 48 0d 00 FC5.!.|...h..H.. 00e0 00 14 90 cb 80 91 3e bb 69 6e 08 63 81 b5 ec 42 ......>.in.c...B 00f0 7b 1f 00 00 00 14 7d 94 19 a6 53 10 ca 6f 2c 17 {.....}...S..o,. 0100 9d 92 15 52 9d 56 48 5c 2a a3 ...R.VH\*. Frame 2 (142 bytes on wire, 142 bytes captured) Arrival Time: Sep 30, 2003 13:41:57.483460000 Time delta from previous packet: 0.014078000 seconds Time relative to first packet: 0.014078000 seconds Frame Number: 2 Packet Length: 142 bytes Capture Length: 142 bytes Ethernet II, Src: 00:40:63:c1:11:ad, Dst: 00:20:6f:09:60:0e Destination: 00:20:6f:09:60:0e (00:20:6f:09:60:0e) Source: 00:40:63:c1:11:ad (00:40:63:c1:11:ad) Type: IP (0x0800) Internet Protocol, Src Addr: 63.202.92.133 (63.202.92.133), Dst Addr: 64.94.50.108 (64.94.50.108) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 128 Identification: 0xaa29 (43561) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xc12a (correct) Source: 63.202.92.133 (63.202.92.133) Destination: 64.94.50.108 (64.94.50.108) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 108 Checksum: 0xeb76 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x11D15F6B82900273 Responder cookie: 0xE075B16D236C2669 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 100 Security Association payload Next payload: Vendor ID (13) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 0 Next payload: NONE (0) Length: 40 Proposal number: 0 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 0 Next payload: NONE (0) Length: 32 Transform number: 0 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Authentication-Method (3): RSA-SIG (3) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (10800) Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: unknown vendor ID: 0x7003CBC1097DBE9C2600BA6983BC8B35 0000 00 20 6f 09 60 0e 00 40 63 c1 11 ad 08 00 45 00 . o.`..@c.....E. 0010 00 80 aa 29 00 00 40 11 c1 2a 3f ca 5c 85 40 5e ...)..@..*?.\.@^ 0020 32 6c 01 f4 01 f4 00 6c eb 76 11 d1 5f 6b 82 90 2l.....l.v.._k.. 0030 02 73 e0 75 b1 6d 23 6c 26 69 01 10 02 00 00 00 .s.u.m#l&i...... 0040 00 00 00 00 00 64 0d 00 00 34 00 00 00 01 00 00 .....d...4...... 0050 00 01 00 00 00 28 00 01 00 01 00 00 00 20 00 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 03 00 03 80 04 ................ 0070 00 02 80 0b 00 01 80 0c 2a 30 00 00 00 14 70 03 ........*0....p. 0080 cb c1 09 7d be 9c 26 00 ba 69 83 bc 8b 35 ...}..&..i...5 Frame 3 (285 bytes on wire, 285 bytes captured) Arrival Time: Sep 30, 2003 13:41:57.632851000 Time delta from previous packet: 0.149391000 seconds Time relative to first packet: 0.163469000 seconds Frame Number: 3 Packet Length: 285 bytes Capture Length: 285 bytes Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad) Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e) Type: IP (0x0800) Trailer: 43E3B782 Internet Protocol, Src Addr: 64.94.50.108 (64.94.50.108), Dst Addr: 63.202.92.133 (63.202.92.133) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 267 Identification: 0xffdf (65503) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 39 Protocol: UDP (0x11) Header checksum: 0x83e9 (correct) Source: 64.94.50.108 (64.94.50.108) Destination: 63.202.92.133 (63.202.92.133) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 247 Checksum: 0x0000 (none) Internet Security Association and Key Management Protocol Initiator cookie: 0x11D15F6B82900273 Responder cookie: 0xE075B16D236C2669 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 239 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: Certificate Request (7) Length: 20 Nonce Data Certificate Request payload Next payload: NONE (0) Length: 59 Certificate type: 4 - X.509 Certificate - Signature Certificate Authority 0000 00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00 .@c.... o.`...E. 0010 01 0b ff df 00 00 27 11 83 e9 40 5e 32 6c 3f ca ......'...@^2l?. 0020 5c 85 01 f4 01 f4 00 f7 00 00 11 d1 5f 6b 82 90 \..........._k.. 0030 02 73 e0 75 b1 6d 23 6c 26 69 04 10 02 00 00 00 .s.u.m#l&i...... 0040 00 00 00 00 00 ef 0a 00 00 84 eb f3 98 27 57 92 .............'W. 0050 7d 69 4d db 7c 92 74 06 43 29 18 62 c1 1f 1a f4 }iM.|.t.C).b.... 0060 3a 5d fa 15 1b b0 73 6b 98 59 8b a3 76 0d 0f 6d :]....sk.Y..v..m 0070 b3 75 9b 9d 37 4b 9c 8b 80 c5 b0 bb 4c 91 65 09 .u..7K......L.e. 0080 8c fe 6a 75 f3 04 26 bf 9a 8b 10 e8 f4 b6 6a 99 ..ju..&.......j. 0090 f3 c9 3a 84 e7 85 21 a4 6e f1 67 c7 34 44 c3 6a ..:...!.n.g.4D.j 00a0 19 34 34 af 25 57 cf d5 43 52 6c 8c 63 3e 96 52 .44.%W..CRl.c>.R 00b0 cd e5 44 0f 38 ef b0 12 9f 5a c0 b5 12 aa 95 78 ..D.8....Z.....x 00c0 c0 c7 53 34 2e a8 c8 94 88 cd 07 00 00 14 72 56 ..S4..........rV 00d0 50 ae b5 08 c8 e1 27 d1 db 40 f5 23 87 be 00 00 P.....'..@.#.... 00e0 00 3b 04 30 34 31 0d 30 0b 06 03 55 04 0a 13 04 .;.041.0...U.... 00f0 56 50 4e 43 31 23 30 21 06 03 55 04 0b 13 1a 43 VPNC1#0!..U....C 0100 6f 6e 66 6f 72 6d 61 6e 63 65 20 74 65 73 74 69 onformance testi 0110 6e 67 20 72 6f 6f 74 20 31 43 e3 b7 82 ng root 1C... Frame 4 (247 bytes on wire, 247 bytes captured) Arrival Time: Sep 30, 2003 13:41:57.700778000 Time delta from previous packet: 0.067927000 seconds Time relative to first packet: 0.231396000 seconds Frame Number: 4 Packet Length: 247 bytes Capture Length: 247 bytes Ethernet II, Src: 00:40:63:c1:11:ad, Dst: 00:20:6f:09:60:0e Destination: 00:20:6f:09:60:0e (00:20:6f:09:60:0e) Source: 00:40:63:c1:11:ad (00:40:63:c1:11:ad) Type: IP (0x0800) Internet Protocol, Src Addr: 63.202.92.133 (63.202.92.133), Dst Addr: 64.94.50.108 (64.94.50.108) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 233 Identification: 0xaa2a (43562) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xc0c0 (correct) Source: 63.202.92.133 (63.202.92.133) Destination: 64.94.50.108 (64.94.50.108) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 213 Checksum: 0x484d (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x11D15F6B82900273 Responder cookie: 0xE075B16D236C2669 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 205 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: Vendor ID (13) Length: 20 Nonce Data Vendor ID payload Next payload: Certificate Request (7) Length: 20 Vendor ID: unknown vendor ID: 0x7003CBC1097DBE9C2600BA6983BC8B35 Certificate Request payload Next payload: NONE (0) Length: 5 Certificate type: 4 - X.509 Certificate - Signature Certificate Authority 0000 00 20 6f 09 60 0e 00 40 63 c1 11 ad 08 00 45 00 . o.`..@c.....E. 0010 00 e9 aa 2a 00 00 40 11 c0 c0 3f ca 5c 85 40 5e ...*..@...?.\.@^ 0020 32 6c 01 f4 01 f4 00 d5 48 4d 11 d1 5f 6b 82 90 2l......HM.._k.. 0030 02 73 e0 75 b1 6d 23 6c 26 69 04 10 02 00 00 00 .s.u.m#l&i...... 0040 00 00 00 00 00 cd 0a 00 00 84 36 06 65 89 18 16 ..........6.e... 0050 62 25 05 28 12 bb 2c c9 9e 71 7f 9d 34 cc cb 5b b%.(..,..q..4..[ 0060 7d 9a 1a c0 b2 d0 b9 04 f8 32 2e e2 f4 cf 82 51 }........2.....Q 0070 48 e9 3e 33 d0 94 3c fb 6d 23 bf 99 86 93 aa 98 H.>3..<.m#...... 0080 ed 45 28 7b 3b 7e 03 33 30 61 93 d1 dc f9 0e 56 .E({;~.30a.....V 0090 8a 66 52 40 0d 90 57 28 b3 46 cf d5 ab ee 78 1b .fR@..W(.F....x. 00a0 dd 83 cc 96 15 76 5c 70 26 c1 4d 37 24 40 32 c0 .....v\p&.M7$@2. 00b0 83 63 18 f8 1d ed b3 f4 d8 69 af 0b bd 25 6c 88 .c.......i...%l. 00c0 28 98 5b 18 9c e2 74 f4 c3 2e 0d 00 00 14 b0 cd (.[...t......... 00d0 66 ae 96 4d 2d 4a b0 4a 7c 7e e6 2b 6c f3 07 00 f..M-J.J|~.+l... 00e0 00 14 70 03 cb c1 09 7d be 9c 26 00 ba 69 83 bc ..p....}..&..i.. 00f0 8b 35 00 00 00 05 04 .5..... Frame 5 (802 bytes on wire, 802 bytes captured) Arrival Time: Sep 30, 2003 13:41:57.877113000 Time delta from previous packet: 0.176335000 seconds Time relative to first packet: 0.407731000 seconds Frame Number: 5 Packet Length: 802 bytes Capture Length: 802 bytes Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad) Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e) Type: IP (0x0800) Trailer: C296FC0E Internet Protocol, Src Addr: 64.94.50.108 (64.94.50.108), Dst Addr: 63.202.92.133 (63.202.92.133) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 784 Identification: 0xb6a0 (46752) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 39 Protocol: UDP (0x11) Header checksum: 0xcb23 (correct) Source: 64.94.50.108 (64.94.50.108) Destination: 63.202.92.133 (63.202.92.133) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 764 Checksum: 0x0000 (none) Internet Security Association and Key Management Protocol Initiator cookie: 0x11D15F6B82900273 Responder cookie: 0xE075B16D236C2669 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 756 Encrypted payload (728 bytes) 0000 00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00 .@c.... o.`...E. 0010 03 10 b6 a0 00 00 27 11 cb 23 40 5e 32 6c 3f ca ......'..#@^2l?. 0020 5c 85 01 f4 01 f4 02 fc 00 00 11 d1 5f 6b 82 90 \..........._k.. 0030 02 73 e0 75 b1 6d 23 6c 26 69 05 10 02 01 00 00 .s.u.m#l&i...... 0040 00 00 00 00 02 f4 50 2f a5 43 00 75 9b 52 40 92 ......P/.C.u.R@. 0050 6c 12 83 71 11 f6 63 55 e4 0b b2 fa 53 e9 37 37 l..q..cU....S.77 0060 6a ce a3 e5 9a ea 66 0d aa 8a 5b ca c9 ef 29 78 j.....f...[...)x 0070 5b a3 5b b9 a4 de e4 35 81 78 91 a1 89 48 c0 e4 [.[....5.x...H.. 0080 71 4c 0d 0b 84 ed 49 55 5d 4e 3a 0e c2 46 c7 52 qL....IU]N:..F.R 0090 00 dd 06 2a 30 5a 1d 90 bb 55 fe b0 a2 5a 27 0d ...*0Z...U...Z'. 00a0 d1 fb db 7a 6e 08 f4 4b db 1f fe 7a 4e e5 38 8c ...zn..K...zN.8. 00b0 45 b1 8b 6b 17 67 bf af 90 d1 5c 23 ba 66 9b b5 E..k.g....\#.f.. 00c0 ea da 05 a5 09 84 7c 39 14 02 1b 9a 44 28 aa 43 ......|9....D(.C 00d0 fb 1c 7f b3 59 82 ea d3 e4 59 ee e7 4b f1 30 d4 ....Y....Y..K.0. 00e0 d7 76 a6 23 60 cb 2b 6a fd 27 7b 35 f0 64 7a da .v.#`.+j.'{5.dz. 00f0 dd d2 f5 26 d0 25 ca 21 bf 19 17 ca ee 8f aa 13 ...&.%.!........ 0100 c9 0a 58 6c c9 f3 fb 6b 24 0f 4e 88 e1 b7 f7 ed ..Xl...k$.N..... 0110 28 54 7f b5 7c bc a8 bc 64 72 5b 68 a6 c6 4a ba (T..|...dr[h..J. 0120 f9 c4 94 04 ea 3e 7a 09 8b 2c ee 15 07 1b 50 0a .....>z..,....P. 0130 96 20 f5 fa 21 cc 0b 97 ee ad 32 17 a3 cc cd df . ..!.....2..... 0140 45 7b 32 ac 64 08 dd fa 4b 03 bf d4 82 ad ae ea E{2.d...K....... 0150 5c 00 34 0e 8c 71 f7 31 18 3f bb b8 97 57 2a d4 \.4..q.1.?...W*. 0160 bc 34 13 63 16 e7 d6 9b 38 b6 fd 12 8e 9e fa 14 .4.c....8....... 0170 6f 9e 0b 8f 00 0b 47 bd de 48 fd 48 9a 7f 57 a7 o.....G..H.H..W. 0180 df ec 8d 0b 2d f9 40 f1 76 88 a5 29 fc 88 c8 d8 ....-.@.v..).... 0190 67 65 d9 ac 03 de f9 35 64 e4 dc 81 64 d4 52 de ge.....5d...d.R. 01a0 c6 df bc aa 0d 9b 3c 5b d0 89 f5 00 60 a2 f2 64 ......<[....`..d 01b0 31 ec e3 bf fc 69 da a9 96 77 7c e1 60 97 63 34 1....i...w|.`.c4 01c0 e8 6f e8 4f 62 3b 61 8e b2 e8 9c cc c0 5e 90 44 .o.Ob;a......^.D 01d0 a2 94 e0 1c 78 cd 8f 32 93 5c 60 a1 e7 8c c8 dc ....x..2.\`..... 01e0 ad 90 b9 c6 ad 58 c2 da 55 71 9b b2 9a 85 89 54 .....X..Uq.....T 01f0 4e 0f ba 86 46 90 b1 a1 82 63 5a 1f 64 23 fb 60 N...F....cZ.d#.` 0200 f7 81 fb fa 3d 17 03 13 e9 c4 1b 2b 0a 64 25 fb ....=......+.d%. 0210 42 f3 09 d5 21 0e df a0 7d bc ed 82 9d 0d 4e b2 B...!...}.....N. 0220 70 71 9f df 8f 80 5c 84 11 fd 5d f4 17 72 8c 98 pq....\...]..r.. 0230 c8 30 42 5a 12 50 0b de 08 1e c3 6e 0f d6 10 05 .0BZ.P.....n.... 0240 01 63 62 aa 72 5f bb 4e 90 dc a5 29 93 50 ec a9 .cb.r_.N...).P.. 0250 1e b0 b3 47 2c 6a d3 6e 28 21 16 04 af 97 36 78 ...G,j.n(!....6x 0260 5d 40 da 6a 6b cd 6c bc 8f d9 f5 b8 c2 3a 4e 88 ]@.jk.l......:N. 0270 0c 43 40 bd 30 73 c3 04 2e 42 15 ff 61 9e 72 10 .C@.0s...B..a.r. 0280 d1 01 98 6a a6 7d 2f 90 b6 64 9b a4 60 ac 96 9b ...j.}/..d..`... 0290 33 b6 a1 a5 d0 7b 70 91 86 b0 4a 1c bc b8 d5 17 3....{p...J..... 02a0 f5 65 d3 31 c4 28 6e 15 bf a7 fc d9 42 78 84 53 .e.1.(n.....Bx.S 02b0 ca e4 b4 cd a0 be d8 d4 3d f7 96 2d b2 04 40 e1 ........=..-..@. 02c0 17 6c 9c 7c 2c 0a 74 ab fe d9 30 21 65 6b 5a 80 .l.|,.t...0!ekZ. 02d0 ce 39 9f 53 77 7f 37 c0 b0 24 12 53 32 b4 31 d3 .9.Sw.7..$.S2.1. 02e0 37 60 7d 0e 0d ef f1 11 aa 0c 32 9c 25 33 b3 87 7`}.......2.%3.. 02f0 04 f0 e4 85 a9 98 90 27 1d d5 78 7e 0c 5f 84 71 .......'..x~._.q 0300 3f 48 9b e9 7a 72 81 ae ee a8 c5 0a 9d 2b 16 4c ?H..zr.......+.L 0310 ca 15 1a 5c dc c4 2c d5 dc e0 54 b1 2f 5d c2 96 ...\..,...T./].. 0320 fc 0e .. Frame 6 (686 bytes on wire, 686 bytes captured) Arrival Time: Sep 30, 2003 13:41:57.953313000 Time delta from previous packet: 0.076200000 seconds Time relative to first packet: 0.483931000 seconds Frame Number: 6 Packet Length: 686 bytes Capture Length: 686 bytes Ethernet II, Src: 00:40:63:c1:11:ad, Dst: 00:20:6f:09:60:0e Destination: 00:20:6f:09:60:0e (00:20:6f:09:60:0e) Source: 00:40:63:c1:11:ad (00:40:63:c1:11:ad) Type: IP (0x0800) Internet Protocol, Src Addr: 63.202.92.133 (63.202.92.133), Dst Addr: 64.94.50.108 (64.94.50.108) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 672 Identification: 0xaa2b (43563) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xbf08 (correct) Source: 63.202.92.133 (63.202.92.133) Destination: 64.94.50.108 (64.94.50.108) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 652 Checksum: 0x3eaf (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x11D15F6B82900273 Responder cookie: 0xE075B16D236C2669 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 644 Encrypted payload (616 bytes) 0000 00 20 6f 09 60 0e 00 40 63 c1 11 ad 08 00 45 00 . o.`..@c.....E. 0010 02 a0 aa 2b 00 00 40 11 bf 08 3f ca 5c 85 40 5e ...+..@...?.\.@^ 0020 32 6c 01 f4 01 f4 02 8c 3e af 11 d1 5f 6b 82 90 2l......>..._k.. 0030 02 73 e0 75 b1 6d 23 6c 26 69 05 10 02 01 00 00 .s.u.m#l&i...... 0040 00 00 00 00 02 84 0c ed 0f 47 72 16 24 23 48 31 .........Gr.$#H1 0050 b4 0e 38 9e a1 e7 73 19 97 97 7c 20 3a b0 1e 59 ..8...s...| :..Y 0060 14 a1 0a 51 f0 2f 1e b3 28 f6 5d 22 0c b9 5e 60 ...Q./..(.]"..^` 0070 92 a3 ce ce c4 01 d5 5a 5d 92 d5 f1 a3 22 0a 75 .......Z]....".u 0080 f6 b7 39 7a 30 11 05 2d 58 5c 60 4e 04 90 ab 15 ..9z0..-X\`N.... 0090 41 09 e3 1b 42 ee 59 16 03 93 71 81 71 48 b1 9f A...B.Y...q.qH.. 00a0 c5 40 34 e7 c3 3a 6a ee 13 c9 57 f4 a8 6c 2a 0a .@4..:j...W..l*. 00b0 ce 49 d7 1a 94 8c f0 36 45 8a c7 e8 f8 7a 9a 28 .I.....6E....z.( 00c0 76 09 b6 c3 62 72 bb 5a f2 00 42 cd e0 27 ed e1 v...br.Z..B..'.. 00d0 23 d2 92 3e 0a 47 88 e5 dc 01 f5 12 ee 45 9b a6 #..>.G.......E.. 00e0 f8 0e 44 3f a6 4a f6 ed a8 94 31 e8 13 37 e5 5c ..D?.J....1..7.\ 00f0 4d 65 32 6c 3f b8 ea a7 86 91 9f ae d0 65 00 35 Me2l?........e.5 0100 cd cd d1 a2 a9 07 19 dd a2 ca da 2b 31 ac cd 23 ...........+1..# 0110 1f 32 24 7f 03 6b 8a 2f c2 4d 1b 50 7c 72 3f dd .2$..k./.M.P|r?. 0120 43 6d ef a8 67 6d ff b6 9b 00 8f 31 97 57 f6 a4 Cm..gm.....1.W.. 0130 c7 fd 7c ee a0 42 15 ea ca 78 fe 62 ca 66 14 dd ..|..B...x.b.f.. 0140 a9 2f 39 f0 33 00 41 5c b4 6d 94 d7 53 f2 8e b9 ./9.3.A\.m..S... 0150 c0 a2 7f 8d 1d 44 9a 4e 3d 87 2f 64 43 01 0a 32 .....D.N=./dC..2 0160 2c 2a 0c 9c f2 68 09 c9 51 6e 6b 9b 34 f2 fb 53 ,*...h..Qnk.4..S 0170 7f 0d 12 1e d1 95 61 ba 21 e1 f4 ac a7 df ea b5 ......a.!....... 0180 77 16 82 64 cd 82 a0 e8 c0 8b ca 69 d0 dc ea 28 w..d.......i...( 0190 30 10 9f 5c 8b 86 62 7c 86 b3 22 d4 96 e2 06 1b 0..\..b|.."..... 01a0 bc 45 e0 e0 c3 66 2a 9d 22 77 f3 9a 49 c5 71 46 .E...f*."w..I.qF 01b0 df 3d ca b3 a7 ad 24 dd de 46 a8 8a e3 51 80 0d .=....$..F...Q.. 01c0 9c da 70 c2 52 63 cb a2 e5 6d 01 33 59 38 2d ec ..p.Rc...m.3Y8-. 01d0 d4 89 20 99 f5 4e e7 96 81 b3 d6 aa 79 4d 3a 64 .. ..N......yM:d 01e0 f5 76 70 86 73 b4 f5 80 3d 0a a8 41 92 54 73 70 .vp.s...=..A.Tsp 01f0 6c 67 95 a6 69 17 96 63 3d 22 70 9c 2e 41 d7 e5 lg..i..c="p..A.. 0200 bf d4 67 e5 ae c1 a5 26 81 da 5b 4c 37 5c 72 f9 ..g....&..[L7\r. 0210 30 55 7d 79 95 a6 e6 ec b8 31 ef 55 df 7d a6 67 0U}y.....1.U.}.g 0220 52 3f f3 1d f6 5f cb 49 d7 bc 28 0e 07 51 b5 de R?..._.I..(..Q.. 0230 57 e1 b7 d1 37 20 a0 66 af 11 b6 97 15 7c 9a 85 W...7 .f.....|.. 0240 3e ee c2 7c 65 f0 06 f4 92 d5 a2 61 64 0e e3 c3 >..|e......ad... 0250 d3 3b fe 9b b4 a9 04 fa 25 93 cd 12 3d 48 5b d8 .;......%...=H[. 0260 0d 90 1a ad 7a 25 f5 26 e9 8f 0a 50 69 0a 46 cf ....z%.&...Pi.F. 0270 e5 a7 9b b3 82 ad 0a 5b 22 ea 19 1d 35 7d 9a de .......["...5}.. 0280 2b 81 b5 2a 65 0b 0c 46 b8 e7 04 76 39 d3 98 8c +..*e..F...v9... 0290 20 ac 76 f0 34 88 cb ac 75 5a d5 a2 16 b2 0f 47 .v.4...uZ.....G 02a0 97 3a 8d 26 9d 38 30 9a e0 b2 f8 8e 4e f5 .:.&.80.....N. Frame 7 (126 bytes on wire, 126 bytes captured) Arrival Time: Sep 30, 2003 13:41:57.959157000 Time delta from previous packet: 0.005844000 seconds Time relative to first packet: 0.489775000 seconds Frame Number: 7 Packet Length: 126 bytes Capture Length: 126 bytes Ethernet II, Src: 00:40:63:c1:11:ad, Dst: 00:20:6f:09:60:0e Destination: 00:20:6f:09:60:0e (00:20:6f:09:60:0e) Source: 00:40:63:c1:11:ad (00:40:63:c1:11:ad) Type: IP (0x0800) Internet Protocol, Src Addr: 63.202.92.133 (63.202.92.133), Dst Addr: 64.94.50.108 (64.94.50.108) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0xaa2c (43564) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xc137 (correct) Source: 63.202.92.133 (63.202.92.133) Destination: 64.94.50.108 (64.94.50.108) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 92 Checksum: 0xd16f (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x11D15F6B82900273 Responder cookie: 0xE075B16D236C2669 Next payload: Hash (8) Version: 1.0 Exchange type: Informational (5) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x7616C694 Length: 84 Encrypted payload (56 bytes) 0000 00 20 6f 09 60 0e 00 40 63 c1 11 ad 08 00 45 00 . o.`..@c.....E. 0010 00 70 aa 2c 00 00 40 11 c1 37 3f ca 5c 85 40 5e .p.,..@..7?.\.@^ 0020 32 6c 01 f4 01 f4 00 5c d1 6f 11 d1 5f 6b 82 90 2l.....\.o.._k.. 0030 02 73 e0 75 b1 6d 23 6c 26 69 08 10 05 01 76 16 .s.u.m#l&i....v. 0040 c6 94 00 00 00 54 0c d2 27 ef a0 75 b4 b4 c6 62 .....T..'..u...b 0050 5f 31 af e6 d8 81 2c fb d2 28 7d 4c 4e cb 1b b8 _1....,..(}LN... 0060 3c 1e c3 32 13 8e c9 47 40 08 c9 c0 95 a1 76 ab <..2...G@.....v. 0070 72 82 fe e7 06 b1 06 42 cd dc 82 52 1f 16 r......B...R.. Frame 8 (194 bytes on wire, 194 bytes captured) Arrival Time: Sep 30, 2003 13:41:58.105135000 Time delta from previous packet: 0.145978000 seconds Time relative to first packet: 0.635753000 seconds Frame Number: 8 Packet Length: 194 bytes Capture Length: 194 bytes Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad) Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e) Type: IP (0x0800) Trailer: 60CC20A7 Internet Protocol, Src Addr: 64.94.50.108 (64.94.50.108), Dst Addr: 63.202.92.133 (63.202.92.133) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 176 Identification: 0xdc09 (56329) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 39 Protocol: UDP (0x11) Header checksum: 0xa81a (correct) Source: 64.94.50.108 (64.94.50.108) Destination: 63.202.92.133 (63.202.92.133) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 156 Checksum: 0x0000 (none) Internet Security Association and Key Management Protocol Initiator cookie: 0x11D15F6B82900273 Responder cookie: 0xE075B16D236C2669 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x78959B22 Length: 148 Encrypted payload (120 bytes) 0000 00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00 .@c.... o.`...E. 0010 00 b0 dc 09 00 00 27 11 a8 1a 40 5e 32 6c 3f ca ......'...@^2l?. 0020 5c 85 01 f4 01 f4 00 9c 00 00 11 d1 5f 6b 82 90 \..........._k.. 0030 02 73 e0 75 b1 6d 23 6c 26 69 08 10 20 01 78 95 .s.u.m#l&i.. .x. 0040 9b 22 00 00 00 94 7a 64 1e 69 c5 10 87 4c 94 94 ."....zd.i...L.. 0050 d5 e8 be e4 6f f0 56 23 08 8a c6 c4 38 5e 3d c0 ....o.V#....8^=. 0060 01 32 d2 53 4d 3b 7d 9b 0d 01 41 0a 98 f8 1b 06 .2.SM;}...A..... 0070 d8 50 5e 8c d1 44 8c af 1f 6e cc 6e e4 75 32 c2 .P^..D...n.n.u2. 0080 21 4a 47 92 d8 39 60 50 29 bd ac 4b c4 ec e0 77 !JG..9`P)..K...w 0090 de 59 5f 53 51 4b 22 3c 72 46 7e 58 60 02 bf 13 .Y_SQK"}....1.B.P7k.. 0060 43 63 00 f8 4d 5c d4 e1 57 a9 22 f2 d8 76 8e 6c Cc..M\..W."..v.l 0070 3a b5 85 1f 0a fa 91 19 79 ac :.......y. Frame 12 (110 bytes on wire, 110 bytes captured) Arrival Time: Sep 30, 2003 13:41:58.599523000 Time delta from previous packet: 0.000665000 seconds Time relative to first packet: 1.130141000 seconds Frame Number: 12 Packet Length: 110 bytes Capture Length: 110 bytes Ethernet II, Src: 00:40:63:c1:11:ad, Dst: 00:20:6f:09:60:0e Destination: 00:20:6f:09:60:0e (00:20:6f:09:60:0e) Source: 00:40:63:c1:11:ad (00:40:63:c1:11:ad) Type: IP (0x0800) Internet Protocol, Src Addr: 63.202.92.133 (63.202.92.133), Dst Addr: 64.94.50.108 (64.94.50.108) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0xaa2e (43566) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0xc124 (correct) Source: 63.202.92.133 (63.202.92.133) Destination: 64.94.50.108 (64.94.50.108) Encapsulating Security Payload SPI: 0x754229e2 Sequence: 0x00000001 Data (68 bytes) 0000 00 20 6f 09 60 0e 00 40 63 c1 11 ad 08 00 45 00 . o.`..@c.....E. 0010 00 60 aa 2e 00 00 40 32 c1 24 3f ca 5c 85 40 5e .`....@2.$?.\.@^ 0020 32 6c 75 42 29 e2 00 00 00 01 8e 79 f1 58 42 46 2luB)......y.XBF 0030 95 cf 7e 27 56 5e 83 66 b2 e3 52 99 da a7 20 03 ..~'V^.f..R... . 0040 b7 7c 8f cf d5 b8 b1 96 e5 87 11 d0 02 44 79 17 .|...........Dy. 0050 ca 33 e2 18 9c 5e df 15 b8 e2 11 69 c6 32 26 9e .3...^.....i.2&. 0060 a3 e0 f8 b2 46 ab 21 c7 bf a4 3a 35 2b bc ....F.!...:5+. Frame 13 (114 bytes on wire, 114 bytes captured) Arrival Time: Sep 30, 2003 13:41:58.710373000 Time delta from previous packet: 0.110850000 seconds Time relative to first packet: 1.240991000 seconds Frame Number: 13 Packet Length: 114 bytes Capture Length: 114 bytes Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad) Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e) Type: IP (0x0800) Trailer: 43EA9C75 Internet Protocol, Src Addr: 64.94.50.108 (64.94.50.108), Dst Addr: 63.202.92.133 (63.202.92.133) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0x002b (43) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 215 Protocol: ESP (0x32) Header checksum: 0x9427 (correct) Source: 64.94.50.108 (64.94.50.108) Destination: 63.202.92.133 (63.202.92.133) Encapsulating Security Payload SPI: 0x01b400c4 Sequence: 0x00000002 Data (68 bytes) 0000 00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00 .@c.... o.`...E. 0010 00 60 00 2b 40 00 d7 32 94 27 40 5e 32 6c 3f ca .`.+@..2.'@^2l?. 0020 5c 85 01 b4 00 c4 00 00 00 02 b7 2e 85 fa c5 91 \............... 0030 61 28 ba 88 68 31 d6 93 ae 4f 63 98 5b 3d 28 e5 a(..h1...Oc.[=(. 0040 5f 3a 6f c7 25 2f ea 6d 79 91 be 74 69 31 8b 45 _:o.%/.my..ti1.E 0050 f4 02 9c 3c c4 e5 dd 8d 0e 99 e4 46 2e ef 29 90 ...<.......F..). 0060 47 c8 ce 4c a2 6d f6 f7 09 97 57 93 37 b8 43 ea G..L.m....W.7.C. 0070 9c 75 .u Frame 14 (466 bytes on wire, 466 bytes captured) Arrival Time: Sep 30, 2003 13:41:58.716229000 Time delta from previous packet: 0.005856000 seconds Time relative to first packet: 1.246847000 seconds Frame Number: 14 Packet Length: 466 bytes Capture Length: 466 bytes Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad) Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e) Type: IP (0x0800) Trailer: 234026BE Internet Protocol, Src Addr: 64.94.50.108 (64.94.50.108), Dst Addr: 63.202.92.133 (63.202.92.133) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 448 Identification: 0x002c (44) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 215 Protocol: ESP (0x32) Header checksum: 0x92c6 (correct) Source: 64.94.50.108 (64.94.50.108) Destination: 63.202.92.133 (63.202.92.133) Encapsulating Security Payload SPI: 0x01b400c4 Sequence: 0x00000003 Data (420 bytes) 0000 00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00 .@c.... o.`...E. 0010 01 c0 00 2c 40 00 d7 32 92 c6 40 5e 32 6c 3f ca ...,@..2..@^2l?. 0020 5c 85 01 b4 00 c4 00 00 00 03 f3 f7 e7 38 39 95 \............89. 0030 38 f4 cf 8e 19 fa b7 17 6f 26 6e 96 d5 d1 ee 02 8.......o&n..... 0040 57 ab 02 1f c8 b6 df c7 b5 ea 97 61 4d 2c 99 d4 W..........aM,.. 0050 f0 d6 0c f9 d6 8f 5c 1e e2 5b 64 a0 c2 ed 43 cb ......\..[d...C. 0060 43 e1 54 7f ab 6b 79 7b 20 ce 70 33 71 0f 13 89 C.T..ky{ .p3q... 0070 26 95 f0 f1 53 d0 db 02 6e 00 fe 7e 67 d2 7e 96 &...S...n..~g.~. 0080 aa 67 3a 61 0a 47 97 b4 55 21 29 14 60 a4 6a c5 .g:a.G..U!).`.j. 0090 19 6b 12 75 b1 b5 b6 11 c9 6c 2c bd 56 15 10 36 .k.u.....l,.V..6 00a0 1b 60 b6 1b 3a a1 97 f8 59 4e 36 31 da eb ab e3 .`..:...YN61.... 00b0 13 69 9c 90 aa ce 38 c5 15 42 05 fe 4d c7 9a 6d .i....8..B..M..m 00c0 d2 84 1f a8 5e c6 b5 46 a5 02 91 0f 42 fe 22 72 ....^..F....B."r 00d0 15 ba 1d 13 ea fd 03 db ac 50 bc f9 81 27 1b c5 .........P...'.. 00e0 0d 92 f8 84 73 c0 3d 5c d7 d5 8e 65 9f a4 f0 ea ....s.=\...e.... 00f0 70 0b e6 36 81 8a 12 99 56 8e b8 7c e1 ea b9 2d p..6....V..|...- 0100 74 66 61 98 d7 47 1f 5e 13 b1 07 3d 53 0e d9 c8 tfa..G.^...=S... 0110 ed 48 3f b2 b2 25 4b b2 25 f0 20 2d 4e 71 27 49 .H?..%K.%. -Nq'I 0120 80 ae a6 7a 9e 9a a3 c1 86 7e c1 42 fb 07 1e 35 ...z.....~.B...5 0130 83 22 02 07 fd 1e e6 0c e8 37 fb 1c 26 c4 0e 19 .".......7..&... 0140 89 3d f1 f1 68 49 e1 1e 42 97 02 ff 45 15 4b 96 .=..hI..B...E.K. 0150 73 42 01 b1 d8 3b 77 e4 72 4e 92 00 18 7b 54 85 sB...;w.rN...{T. 0160 54 00 37 97 ea 95 31 3c c2 1d 20 51 59 48 86 ee T.7...1<.. QYH.. 0170 cd 25 26 60 96 d4 1e aa c5 29 44 64 fd 9e 2f 75 .%&`.....)Dd../u 0180 47 b8 a6 13 27 35 21 72 5b 05 85 36 bd c9 56 e6 G...'5!r[..6..V. 0190 cc 66 c0 19 fb 60 db 92 b9 eb e1 25 1d 37 2e 20 .f...`.....%.7. 01a0 ad 69 ef de e8 9f 00 57 b3 c5 71 89 b6 93 b2 04 .i.....W..q..... 01b0 dd 12 e3 4e 04 04 98 39 1b 25 83 64 e5 22 0c af ...N...9.%.d.".. 01c0 00 83 dd 19 8b a6 f2 d6 ea 28 17 02 9a db 23 40 .........(....#@ 01d0 26 be &. Frame 15 (934 bytes on wire, 934 bytes captured) Arrival Time: Sep 30, 2003 13:41:58.750962000 Time delta from previous packet: 0.034733000 seconds Time relative to first packet: 1.281580000 seconds Frame Number: 15 Packet Length: 934 bytes Capture Length: 934 bytes Ethernet II, Src: 00:40:63:c1:11:ad, Dst: 00:20:6f:09:60:0e Destination: 00:20:6f:09:60:0e (00:20:6f:09:60:0e) Source: 00:40:63:c1:11:ad (00:40:63:c1:11:ad) Type: IP (0x0800) Internet Protocol, Src Addr: 63.202.92.133 (63.202.92.133), Dst Addr: 64.94.50.108 (64.94.50.108) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 920 Identification: 0xaa2f (43567) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0xbdeb (correct) Source: 63.202.92.133 (63.202.92.133) Destination: 64.94.50.108 (64.94.50.108) Encapsulating Security Payload SPI: 0x754229e2 Sequence: 0x00000002 Data (892 bytes) 0000 00 20 6f 09 60 0e 00 40 63 c1 11 ad 08 00 45 00 . o.`..@c.....E. 0010 03 98 aa 2f 00 00 40 32 bd eb 3f ca 5c 85 40 5e .../..@2..?.\.@^ 0020 32 6c 75 42 29 e2 00 00 00 02 f7 93 14 13 15 e2 2luB)........... 0030 1c f0 9c bf af 7a 88 8e 7a 32 bb a8 50 d7 ab 38 .....z..z2..P..8 0040 bb 68 c4 3b 7a 34 76 19 84 01 34 38 ea e8 ba ae .h.;z4v...48.... 0050 c0 fe f2 50 b1 ea d6 c1 12 07 06 e1 6f 94 da 20 ...P........o.. 0060 62 e5 8a 9d 55 80 f9 a1 bc 87 b9 43 06 ff e9 24 b...U......C...$ 0070 f1 7c 56 dd 3b e2 f4 dd 32 b9 47 01 e1 df 30 40 .|V.;...2.G...0@ 0080 ab 81 ed 78 8b d8 7e d6 20 f2 bd 87 96 f3 99 5b ...x..~. ......[ 0090 a3 48 28 90 a4 77 96 80 6f 87 b1 0a 2b 8c aa 84 .H(..w..o...+... 00a0 0a 8b c3 dd d5 d2 bd 5b 81 28 96 fd 0f 1a 83 8d .......[.(...... 00b0 a7 83 7b 3d b7 64 4c 2c cc 62 06 7b c9 97 e3 30 ..{=.dL,.b.{...0 00c0 48 b2 f3 bb 55 cd 7c 76 e3 48 b8 23 f5 3d ac d8 H...U.|v.H.#.=.. 00d0 72 bc 94 7e 79 34 05 ed 10 48 d8 36 4f b0 e2 1c r..~y4...H.6O... 00e0 f1 9f f4 2b 96 b5 52 13 fd d8 a9 f8 34 08 3c a4 ...+..R.....4.<. 00f0 93 42 bd b8 d2 6d 1c 89 d9 5a 86 68 f8 35 8d 19 .B...m...Z.h.5.. 0100 81 1d af 52 e8 4f c5 a5 fb 03 85 12 10 c3 79 28 ...R.O........y( 0110 9d 67 49 6a b8 79 08 ff 87 ed 9d cc 8f 75 69 7a .gIj.y.......uiz 0120 5f ab 05 19 39 9a a6 72 3a ec 90 d7 43 9f 22 3b _...9..r:...C."; 0130 68 5a 4f 07 f2 e7 1c de 3c c6 18 ba f6 68 ca 62 hZO.....<....h.b 0140 8b ac ea 67 7f 2a 73 78 47 cd 32 e8 da 28 cb 71 ...g.*sxG.2..(.q 0150 ed 9b 09 06 68 15 ab a8 e8 64 e8 0a 3f f0 d8 d8 ....h....d..?... 0160 56 5e 2b 34 02 b7 f3 51 3d 3a 53 b8 47 5e 5f 13 V^+4...Q=:S.G^_. 0170 99 50 2a 15 47 63 0e 75 ef a0 21 f4 69 01 5e 01 .P*.Gc.u..!.i.^. 0180 23 6e 8d 4f d7 ce 94 30 f7 0a 31 6d 82 fd a6 6f #n.O...0..1m...o 0190 61 96 b1 e5 dc 1c 0b a9 38 bc b9 41 d2 2d db e5 a.......8..A.-.. 01a0 00 a8 26 38 8f cf d5 54 3a bb f2 25 38 86 cd 98 ..&8...T:..%8... 01b0 7e 0d 6d 46 35 ed b4 e8 39 22 10 7d 33 3c fd 40 ~.mF5...9".}3<.@ 01c0 93 c2 39 98 fd d3 0f 78 04 ba ff bf a4 bd 6b 08 ..9....x......k. 01d0 ce dd 77 34 e9 3a 44 2d 27 53 1e f7 ea 64 d1 da ..w4.:D-'S...d.. 01e0 40 60 fc a7 88 28 39 37 b9 c5 92 78 b0 c7 f5 ae @`...(97...x.... 01f0 f2 ae ea eb fc 0e c8 e3 70 ae 66 34 51 d3 c2 a6 ........p.f4Q... 0200 f7 b9 e7 cf 8a b3 38 e9 2b 0e 42 b4 b1 41 b0 21 ......8.+.B..A.! 0210 67 a1 e3 d5 85 72 d2 4d e5 ba 7c 3e dd 19 6f 12 g....r.M..|>..o. 0220 e2 fb ec fa 25 98 46 3f 19 ed 39 4b 7b 14 8e bd ....%.F?..9K{... 0230 f2 a1 e0 90 bf 16 8c 8c 08 64 ad 70 0d b4 20 16 .........d.p.. . 0240 0e c3 87 3b c0 53 74 b1 0b 2d 98 4d 6d 0d 8b 32 ...;.St..-.Mm..2 0250 03 3d 3c b4 c6 63 3f 32 59 8c 99 da 38 79 00 06 .=<..c?2Y...8y.. 0260 18 3f cb 5c 27 21 98 a5 42 3c 28 43 ec 22 a2 c1 .?.\'!..B<(C.".. 0270 3a 78 dd 4f e2 90 18 a0 8d 06 ae 55 09 73 f0 1f :x.O.......U.s.. 0280 04 56 42 ca 20 e4 01 1b 61 13 88 4b cd 2e 9f d7 .VB. ...a..K.... 0290 0c 76 9a a6 d9 b0 56 04 e4 9a ba 51 c0 f3 ae 81 .v....V....Q.... 02a0 16 76 4a 10 d7 c7 3b 67 e8 39 e8 79 b0 82 23 9f .vJ...;g.9.y..#. 02b0 e7 97 3d 15 a6 58 f5 ed 62 48 ab 95 88 6b 2a c5 ..=..X..bH...k*. 02c0 38 7a 09 f5 72 a3 50 7b c7 7a 8c f6 e3 9a 8d e7 8z..r.P{.z...... 02d0 a0 d0 d7 0e 33 ae 51 ec e2 57 60 63 df b9 c9 18 ....3.Q..W`c.... 02e0 cf b5 b6 09 15 78 64 fc 47 c5 53 ab 7a 97 93 0a .....xd.G.S.z... 02f0 49 5b b7 04 e6 67 de 33 43 e8 4b ed 8c a4 ce b3 I[...g.3C.K..... 0300 ad 77 c2 30 bc 82 ae 2b 51 27 46 ed e7 f7 14 dd .w.0...+Q'F..... 0310 48 f7 23 85 af 55 a1 f1 e7 32 1b ef b2 2c c0 a2 H.#..U...2...,.. 0320 87 55 cf 87 b6 0c 27 4c 77 17 2c 3e 1b 56 fc 1c .U....'Lw.,>.V.. 0330 e2 73 b6 51 ce 30 d6 47 c9 62 bb a1 d5 38 b5 ba .s.Q.0.G.b...8.. 0340 2e be a7 73 0b f5 83 f8 cf 7a 76 12 62 ec 16 ba ...s.....zv.b... 0350 62 47 9e 74 4d 09 66 b9 0d b0 8c 57 27 e0 8a 4c bG.tM.f....W'..L 0360 e5 d1 0d 05 03 9a be be df 99 06 99 e8 a6 bd 25 ...............% 0370 44 16 68 8e 6a d4 fc 47 78 43 2c a6 f6 ac 14 c0 D.h.j..GxC,..... 0380 4b 2d 8d 27 e6 48 23 85 4e d4 2a 99 6f c6 d6 c0 K-.'.H#.N.*.o... 0390 01 f0 70 ad 12 1f 7b 38 c4 60 97 4f d4 23 77 2e ..p...{8.`.O.#w. 03a0 d7 f6 56 7b d4 7d ..V{.} Frame 16 (110 bytes on wire, 110 bytes captured) Arrival Time: Sep 30, 2003 13:41:58.751153000 Time delta from previous packet: 0.000191000 seconds Time relative to first packet: 1.281771000 seconds Frame Number: 16 Packet Length: 110 bytes Capture Length: 110 bytes Ethernet II, Src: 00:40:63:c1:11:ad, Dst: 00:20:6f:09:60:0e Destination: 00:20:6f:09:60:0e (00:20:6f:09:60:0e) Source: 00:40:63:c1:11:ad (00:40:63:c1:11:ad) Type: IP (0x0800) Internet Protocol, Src Addr: 63.202.92.133 (63.202.92.133), Dst Addr: 64.94.50.108 (64.94.50.108) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0xaa30 (43568) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0xc122 (correct) Source: 63.202.92.133 (63.202.92.133) Destination: 64.94.50.108 (64.94.50.108) Encapsulating Security Payload SPI: 0x754229e2 Sequence: 0x00000003 Data (68 bytes) 0000 00 20 6f 09 60 0e 00 40 63 c1 11 ad 08 00 45 00 . o.`..@c.....E. 0010 00 60 aa 30 00 00 40 32 c1 22 3f ca 5c 85 40 5e .`.0..@2."?.\.@^ 0020 32 6c 75 42 29 e2 00 00 00 03 49 de 7d 57 5c f1 2luB).....I.}W\. 0030 fe 96 4e 4e 31 ba 45 c8 f2 7a b4 0b 87 69 3b fb ..NN1.E..z...i;. 0040 8f fa 61 ed 3c 53 ea a1 14 e0 10 b8 a4 b7 6f 83 ..a.a%...5 0080 cf 7c .|