IPsec packets received: Frame 1 (262 bytes on wire, 262 bytes captured) Arrival Time: Sep 30, 2003 13:32:35.158638000 Time delta from previous packet: 0.000000000 seconds Time relative to first packet: 0.000000000 seconds Frame Number: 1 Packet Length: 262 bytes Capture Length: 262 bytes Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:d0:09:1e:ab:d6 Destination: 00:d0:09:1e:ab:d6 (00:d0:09:1e:ab:d6) Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e) Type: IP (0x0800) Internet Protocol, Src Addr: 64.94.50.108 (64.94.50.108), Dst Addr: 63.202.92.134 (63.202.92.134) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 248 Identification: 0x9482 (38018) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 39 Protocol: UDP (0x11) Header checksum: 0xef58 (correct) Source: 64.94.50.108 (64.94.50.108) Destination: 63.202.92.134 (63.202.92.134) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 228 Checksum: 0x0000 (none) Internet Security Association and Key Management Protocol Initiator cookie: 0x34AFEFF0B438B69B Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 220 Security Association payload Next payload: Vendor ID (13) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 0 Next payload: NONE (0) Length: 40 Proposal number: 0 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 0 Next payload: NONE (0) Length: 32 Transform number: 0 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Authentication-Method (3): RSA-SIG (3) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (10800) Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: unknown vendor ID: 0x5DE9BC4C3560AA16CB2DF25E7950F160 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: unknown vendor ID: 0x27BAB5DC01EA0760EA4E3190AC27C0D0 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: unknown vendor ID: 0x6105C422E76847E43F9684801292AECD Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: unknown vendor ID: 0x4485152D18B6BBCD0BE8A8469579DDCC Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: unknown vendor ID: 0xCD60464335DF21F87CFDB2FC68B6A448 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: unknown vendor ID: 0x90CB80913EBB696E086381B5EC427B1F Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-03 0000 00 d0 09 1e ab d6 00 20 6f 09 60 0e 08 00 45 00 ....... o.`...E. 0010 00 f8 94 82 00 00 27 11 ef 58 40 5e 32 6c 3f ca ......'..X@^2l?. 0020 5c 86 01 f4 01 f4 00 e4 00 00 34 af ef f0 b4 38 \.........4....8 0030 b6 9b 00 00 00 00 00 00 00 00 01 10 02 00 00 00 ................ 0040 00 00 00 00 00 dc 0d 00 00 34 00 00 00 01 00 00 .........4...... 0050 00 01 00 00 00 28 00 01 00 01 00 00 00 20 00 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 03 00 03 80 04 ................ 0070 00 02 80 0b 00 01 80 0c 2a 30 0d 00 00 14 5d e9 ........*0....]. 0080 bc 4c 35 60 aa 16 cb 2d f2 5e 79 50 f1 60 0d 00 .L5`...-.^yP.`.. 0090 00 14 27 ba b5 dc 01 ea 07 60 ea 4e 31 90 ac 27 ..'......`.N1..' 00a0 c0 d0 0d 00 00 14 61 05 c4 22 e7 68 47 e4 3f 96 ......a..".hG.?. 00b0 84 80 12 92 ae cd 0d 00 00 14 44 85 15 2d 18 b6 ..........D..-.. 00c0 bb cd 0b e8 a8 46 95 79 dd cc 0d 00 00 14 cd 60 .....F.y.......` 00d0 46 43 35 df 21 f8 7c fd b2 fc 68 b6 a4 48 0d 00 FC5.!.|...h..H.. 00e0 00 14 90 cb 80 91 3e bb 69 6e 08 63 81 b5 ec 42 ......>.in.c...B 00f0 7b 1f 00 00 00 14 7d 94 19 a6 53 10 ca 6f 2c 17 {.....}...S..o,. 0100 9d 92 15 52 9d 56 ...R.V Frame 2 (122 bytes on wire, 122 bytes captured) Arrival Time: Sep 30, 2003 13:32:35.171175000 Time delta from previous packet: 0.012537000 seconds Time relative to first packet: 0.012537000 seconds Frame Number: 2 Packet Length: 122 bytes Capture Length: 122 bytes Ethernet II, Src: 00:d0:09:1e:ab:d6, Dst: 00:20:6f:09:60:0e Destination: 00:20:6f:09:60:0e (00:20:6f:09:60:0e) Source: 00:d0:09:1e:ab:d6 (00:d0:09:1e:ab:d6) Type: IP (0x0800) Internet Protocol, Src Addr: 63.202.92.134 (63.202.92.134), Dst Addr: 64.94.50.108 (64.94.50.108) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 108 Identification: 0xa528 (42280) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xc63e (correct) Source: 63.202.92.134 (63.202.92.134) Destination: 64.94.50.108 (64.94.50.108) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 88 Checksum: 0xdcbd (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x34AFEFF0B438B69B Responder cookie: 0x2D6C8AF71708825B Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 80 Security Association payload Next payload: NONE (0) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 0 Next payload: NONE (0) Length: 40 Proposal number: 0 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 0 Next payload: NONE (0) Length: 32 Transform number: 0 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Authentication-Method (3): RSA-SIG (3) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (10800) 0000 00 20 6f 09 60 0e 00 d0 09 1e ab d6 08 00 45 00 . o.`.........E. 0010 00 6c a5 28 00 00 40 11 c6 3e 3f ca 5c 86 40 5e .l.(..@..>?.\.@^ 0020 32 6c 01 f4 01 f4 00 58 dc bd 34 af ef f0 b4 38 2l.....X..4....8 0030 b6 9b 2d 6c 8a f7 17 08 82 5b 01 10 02 00 00 00 ..-l.....[...... 0040 00 00 00 00 00 50 00 00 00 34 00 00 00 01 00 00 .....P...4...... 0050 00 01 00 00 00 28 00 01 00 01 00 00 00 20 00 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 03 00 03 80 04 ................ 0070 00 02 80 0b 00 01 80 0c 2a 30 ........*0 Frame 3 (281 bytes on wire, 281 bytes captured) Arrival Time: Sep 30, 2003 13:32:35.299078000 Time delta from previous packet: 0.127903000 seconds Time relative to first packet: 0.140440000 seconds Frame Number: 3 Packet Length: 281 bytes Capture Length: 281 bytes Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:d0:09:1e:ab:d6 Destination: 00:d0:09:1e:ab:d6 (00:d0:09:1e:ab:d6) Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e) Type: IP (0x0800) Internet Protocol, Src Addr: 64.94.50.108 (64.94.50.108), Dst Addr: 63.202.92.134 (63.202.92.134) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 267 Identification: 0xd036 (53302) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 39 Protocol: UDP (0x11) Header checksum: 0xb391 (correct) Source: 64.94.50.108 (64.94.50.108) Destination: 63.202.92.134 (63.202.92.134) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 247 Checksum: 0x0000 (none) Internet Security Association and Key Management Protocol Initiator cookie: 0x34AFEFF0B438B69B Responder cookie: 0x2D6C8AF71708825B Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 239 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: Certificate Request (7) Length: 20 Nonce Data Certificate Request payload Next payload: NONE (0) Length: 59 Certificate type: 4 - X.509 Certificate - Signature Certificate Authority 0000 00 d0 09 1e ab d6 00 20 6f 09 60 0e 08 00 45 00 ....... o.`...E. 0010 01 0b d0 36 00 00 27 11 b3 91 40 5e 32 6c 3f ca ...6..'...@^2l?. 0020 5c 86 01 f4 01 f4 00 f7 00 00 34 af ef f0 b4 38 \.........4....8 0030 b6 9b 2d 6c 8a f7 17 08 82 5b 04 10 02 00 00 00 ..-l.....[...... 0040 00 00 00 00 00 ef 0a 00 00 84 45 83 b3 64 f9 8c ..........E..d.. 0050 9d 31 2a ec 63 ed 17 fe 01 f1 23 b5 7a 4f f6 b0 .1*.c.....#.zO.. 0060 53 2b 23 56 30 49 52 f2 7f af c8 8e f3 8f 13 30 S+#V0IR........0 0070 e9 26 64 0f 0c d7 4e f3 b6 82 22 8b 23 b1 86 24 .&d...N...".#..$ 0080 b0 ca 51 12 22 0d 2c 8a d3 d0 0b 70 1e 97 1d 06 ..Q.".,....p.... 0090 bb 87 b1 1f 1d 43 ab 91 2d c8 38 76 ac 79 3f 6b .....C..-.8v.y?k 00a0 b8 69 33 18 c3 59 62 b8 8b 7e 64 4e 9d d7 d1 46 .i3..Yb..~dN...F 00b0 44 66 09 ce 61 09 d2 40 c1 5d 69 0c b6 f8 1e a1 Df..a..@.]i..... 00c0 09 72 cc de 6a 4d f0 06 9e 13 07 00 00 14 ed 5c .r..jM.........\ 00d0 24 a8 24 e8 b9 3c 50 62 fe d3 f4 38 8c d8 00 00 $.$...... 0050 8c 3e f1 18 23 95 ab 70 ba ed c9 72 2d 71 88 2f .>..#..p...r-q./ 0060 8f 9e 5f ba ef fa dd 49 5c 73 b4 cd 66 6b b7 4a .._....I\s..fk.J 0070 26 68 be 03 3e 65 d8 18 2b df 3e e3 30 c8 34 00 &h..>e..+.>.0.4. 0080 0d cf 86 32 cc 74 42 df 79 4d 0c d8 17 01 61 3f ...2.tB.yM....a? 0090 ad fd 91 31 38 87 df 9c 09 78 b0 fe 02 33 4c bc ...18....x...3L. 00a0 2b 64 df 70 88 9e 31 65 e8 0d f3 4b 8e c5 12 b0 +d.p..1e...K.... 00b0 28 e0 94 12 36 72 69 9c ad e3 13 27 4f 89 3b 88 (...6ri....'O.;. 00c0 ca 69 63 10 39 74 08 7f 9c 49 b3 db 98 91 78 de .ic.9t...I....x. 00d0 4f ba 57 3b c7 7d cd 95 ec 47 21 47 67 ed bc 56 O.W;.}...G!Gg..V 00e0 40 73 7b 0b 78 51 a1 74 82 44 39 63 87 5e 6f e7 @s{.xQ.t.D9c.^o. 00f0 f0 9d b6 a5 aa 07 05 bc c3 18 3e e0 be 12 72 14 ..........>...r. 0100 04 19 12 cc e3 7a 84 8f ed 38 00 e2 da 27 2c 4d .....z...8...',M 0110 55 d1 62 1e bd 00 97 c8 c5 59 b9 d2 e0 65 06 38 U.b......Y...e.8 0120 ef 87 b2 74 6b af 15 a8 4a 81 7e b2 57 9f 70 98 ...tk...J.~.W.p. 0130 04 cd a1 34 77 75 65 cb 09 4f d5 60 6a 5f 3b 45 ...4wue..O.`j_;E 0140 1f f5 c1 53 e1 11 7a 32 5c 9d e9 45 9d 54 a0 31 ...S..z2\..E.T.1 0150 92 b6 10 64 92 f6 e9 44 93 11 e8 67 00 76 c3 ce ...d...D...g.v.. 0160 de 52 fb a0 fe 18 cd 5f d3 0a 36 43 dc d2 b6 ef .R....._..6C.... 0170 06 c5 0e 1c 4d f7 7c f8 2e f5 dc a3 fd 42 e5 33 ....M.|......B.3 0180 40 ab 75 39 ec cc bd dd 1c 8c 3a 22 7a a1 68 5e @.u9......:"z.h^ 0190 bf 86 b9 df 97 38 65 4b df 9d 89 ec e9 37 2b ec .....8eK.....7+. 01a0 e8 7c a2 0c 13 77 e2 2e f8 53 2b 3a 6c 6a 22 25 .|...w...S+:lj"% 01b0 83 74 a1 1e 95 77 bc 95 4e 74 1d ba 84 61 59 88 .t...w..Nt...aY. 01c0 7c f0 d0 03 d0 20 41 df 3d dd d0 86 00 35 e4 b0 |.... A.=....5.. 01d0 17 73 e6 2a bd f6 26 f1 b1 b1 2f 34 d3 50 e9 67 .s.*..&.../4.P.g 01e0 55 48 93 e0 f9 e6 75 80 7c e5 f7 62 14 83 ef 5a UH....u.|..b...Z 01f0 7d 01 a8 d6 5b 9d b5 2d 1f 45 db dd d4 06 77 eb }...[..-.E....w. 0200 04 e9 8a c3 00 63 3b ac cf 5d 5f 8f c3 0b d0 81 .....c;..]_..... 0210 07 75 a9 fb db 9f a7 36 03 6c c1 ff b5 bf 5f 83 .u.....6.l...._. 0220 09 88 cc ce 8d 39 62 93 40 37 6f d1 2f 9d cd ba .....9b.@7o./... 0230 3e cd 76 5e 24 d0 18 6e ca 3a 63 16 5f 7e 73 78 >.v^$..n.:c._~sx 0240 64 4b 5d 26 2a 80 af 7c f8 67 2c 02 af 54 75 95 dK]&*..|.g,..Tu. 0250 98 1d b9 76 af 75 ce a6 03 03 90 20 67 29 c1 e7 ...v.u..... g).. 0260 a0 16 cf 3d 23 02 b6 f3 69 fb ac 21 fa b5 59 35 ...=#...i..!..Y5 0270 83 6a d9 a9 ea 61 d9 c6 8e 92 64 d3 8b 02 8d 3a .j...a....d....: 0280 d2 3a be 45 81 a4 0e b4 fc 78 14 e4 34 b4 62 f4 .:.E.....x..4.b. 0290 1c 71 3d ea 4d 99 8b f5 9b 1a 0d fe d8 c7 d0 2d .q=.M..........- 02a0 62 bb 05 6a 85 44 77 97 99 96 8b c6 d1 c5 7e 6e b..j.Dw.......~n 02b0 e6 10 1d 3c 93 bf 01 81 d7 e5 db 8c 03 fe d0 87 ...<............ 02c0 9d 4c 83 fe e7 fe 88 48 e9 73 e0 8a 68 19 .L.....H.s..h. Frame 7 (190 bytes on wire, 190 bytes captured) Arrival Time: Sep 30, 2003 13:32:35.950053000 Time delta from previous packet: 0.151826000 seconds Time relative to first packet: 0.791415000 seconds Frame Number: 7 Packet Length: 190 bytes Capture Length: 190 bytes Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:d0:09:1e:ab:d6 Destination: 00:d0:09:1e:ab:d6 (00:d0:09:1e:ab:d6) Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e) Type: IP (0x0800) Internet Protocol, Src Addr: 64.94.50.108 (64.94.50.108), Dst Addr: 63.202.92.134 (63.202.92.134) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 176 Identification: 0xe1f5 (57845) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 39 Protocol: UDP (0x11) Header checksum: 0xa22d (correct) Source: 64.94.50.108 (64.94.50.108) Destination: 63.202.92.134 (63.202.92.134) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 156 Checksum: 0x0000 (none) Internet Security Association and Key Management Protocol Initiator cookie: 0x34AFEFF0B438B69B Responder cookie: 0x2D6C8AF71708825B Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x6DEB408D Length: 148 Encrypted payload (120 bytes) 0000 00 d0 09 1e ab d6 00 20 6f 09 60 0e 08 00 45 00 ....... o.`...E. 0010 00 b0 e1 f5 00 00 27 11 a2 2d 40 5e 32 6c 3f ca ......'..-@^2l?. 0020 5c 86 01 f4 01 f4 00 9c 00 00 34 af ef f0 b4 38 \.........4....8 0030 b6 9b 2d 6c 8a f7 17 08 82 5b 08 10 20 01 6d eb ..-l.....[.. .m. 0040 40 8d 00 00 00 94 5b 8a ff 75 a2 48 0b 85 2b 47 @.....[..u.H..+G 0050 e2 32 c7 cc 28 bd 26 b1 97 8b 72 62 7d 89 94 fc .2..(.&...rb}... 0060 28 69 a1 7f 12 54 97 c0 ba 80 10 30 37 b1 e9 97 (i...T.....07... 0070 4a 58 6e 06 c1 af 19 69 5b ff 2c 49 16 8e 01 21 JXn....i[.,I...! 0080 08 81 41 7c 47 d5 11 5c 2f 27 c6 ad c1 c5 46 db ..A|G..\/'....F. 0090 5a fa 7f d2 ea da 8a 4a dc 91 a4 23 7e 0a 0f 43 Z......J...#~..C 00a0 45 a9 67 3d f6 b9 57 59 f5 03 87 bd ff ed b7 c6 E.g=..WY........ 00b0 fe 43 b6 55 9e 1b cd 62 9c 32 e5 2f 91 cc .C.U...b.2./.. Frame 8 (190 bytes on wire, 190 bytes captured) Arrival Time: Sep 30, 2003 13:32:35.992479000 Time delta from previous packet: 0.042426000 seconds Time relative to first packet: 0.833841000 seconds Frame Number: 8 Packet Length: 190 bytes Capture Length: 190 bytes Ethernet II, Src: 00:d0:09:1e:ab:d6, Dst: 00:20:6f:09:60:0e Destination: 00:20:6f:09:60:0e (00:20:6f:09:60:0e) Source: 00:d0:09:1e:ab:d6 (00:d0:09:1e:ab:d6) Type: IP (0x0800) Internet Protocol, Src Addr: 63.202.92.134 (63.202.92.134), Dst Addr: 64.94.50.108 (64.94.50.108) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 176 Identification: 0xc081 (49281) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xaaa1 (correct) Source: 63.202.92.134 (63.202.92.134) Destination: 64.94.50.108 (64.94.50.108) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 156 Checksum: 0xd6df (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x34AFEFF0B438B69B Responder cookie: 0x2D6C8AF71708825B Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x6DEB408D Length: 148 Encrypted payload (120 bytes) 0000 00 20 6f 09 60 0e 00 d0 09 1e ab d6 08 00 45 00 . o.`.........E. 0010 00 b0 c0 81 00 00 40 11 aa a1 3f ca 5c 86 40 5e ......@...?.\.@^ 0020 32 6c 01 f4 01 f4 00 9c d6 df 34 af ef f0 b4 38 2l........4....8 0030 b6 9b 2d 6c 8a f7 17 08 82 5b 08 10 20 01 6d eb ..-l.....[.. .m. 0040 40 8d 00 00 00 94 09 7f e8 c6 1f 88 5a e3 99 07 @...........Z... 0050 0a 70 2a 57 82 d9 b2 d4 fe 29 04 7f ee 0a 5c 5b .p*W.....)....\[ 0060 45 ec 33 71 0f 60 4a e2 3b 75 c2 88 f0 3e 33 d4 E.3q.`J.;u...>3. 0070 f7 2a 7b f7 c4 64 ff 0c 90 c4 d3 9b 52 2e 8f c2 .*{..d......R... 0080 4e a0 5a e5 c2 9f 9e 53 68 ad af f7 a7 34 f4 2b N.Z....Sh....4.+ 0090 e4 f3 af 43 d0 89 b7 29 08 a6 6a 08 98 62 c0 75 ...C...)..j..b.u 00a0 e4 5b ae 8f d0 c8 b2 4b a4 70 19 80 4d 57 1b 2b .[.....K.p..MW.+ 00b0 e1 21 a2 68 ff 0c d7 f9 22 da 74 a1 58 35 .!.h....".t.X5 Frame 9 (94 bytes on wire, 94 bytes captured) Arrival Time: Sep 30, 2003 13:32:36.107316000 Time delta from previous packet: 0.114837000 seconds Time relative to first packet: 0.948678000 seconds Frame Number: 9 Packet Length: 94 bytes Capture Length: 94 bytes Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:d0:09:1e:ab:d6 Destination: 00:d0:09:1e:ab:d6 (00:d0:09:1e:ab:d6) Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e) Type: IP (0x0800) Internet Protocol, Src Addr: 64.94.50.108 (64.94.50.108), Dst Addr: 63.202.92.134 (63.202.92.134) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 80 Identification: 0x9c79 (40057) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 39 Protocol: UDP (0x11) Header checksum: 0xe809 (correct) Source: 64.94.50.108 (64.94.50.108) Destination: 63.202.92.134 (63.202.92.134) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 60 Checksum: 0x0000 (none) Internet Security Association and Key Management Protocol Initiator cookie: 0x34AFEFF0B438B69B Responder cookie: 0x2D6C8AF71708825B Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x6DEB408D Length: 52 Encrypted payload (24 bytes) 0000 00 d0 09 1e ab d6 00 20 6f 09 60 0e 08 00 45 00 ....... o.`...E. 0010 00 50 9c 79 00 00 27 11 e8 09 40 5e 32 6c 3f ca .P.y..'...@^2l?. 0020 5c 86 01 f4 01 f4 00 3c 00 00 34 af ef f0 b4 38 \......<..4....8 0030 b6 9b 2d 6c 8a f7 17 08 82 5b 08 10 20 01 6d eb ..-l.....[.. .m. 0040 40 8d 00 00 00 34 97 f7 c1 da 4a 78 17 45 1d 19 @....4....Jx.E.. 0050 32 81 48 d8 af b6 0f 5d 1f f4 2a bb d6 13 2.H....]..*... Frame 10 (110 bytes on wire, 110 bytes captured) Arrival Time: Sep 30, 2003 13:33:54.122512000 Time delta from previous packet: 78.015196000 seconds Time relative to first packet: 78.963874000 seconds Frame Number: 10 Packet Length: 110 bytes Capture Length: 110 bytes Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:d0:09:1e:ab:d6 Destination: 00:d0:09:1e:ab:d6 (00:d0:09:1e:ab:d6) Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e) Type: IP (0x0800) Internet Protocol, Src Addr: 64.94.50.108 (64.94.50.108), Dst Addr: 63.202.92.134 (63.202.92.134) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0xe712 (59154) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 39 Protocol: UDP (0x11) Header checksum: 0x9d60 (correct) Source: 64.94.50.108 (64.94.50.108) Destination: 63.202.92.134 (63.202.92.134) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 76 Checksum: 0x0000 (none) Internet Security Association and Key Management Protocol Initiator cookie: 0x34AFEFF0B438B69B Responder cookie: 0x2D6C8AF71708825B Next payload: Hash (8) Version: 1.0 Exchange type: Informational (5) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x3D456A09 Length: 68 Encrypted payload (40 bytes) 0000 00 d0 09 1e ab d6 00 20 6f 09 60 0e 08 00 45 00 ....... o.`...E. 0010 00 60 e7 12 00 00 27 11 9d 60 40 5e 32 6c 3f ca .`....'..`@^2l?. 0020 5c 86 01 f4 01 f4 00 4c 00 00 34 af ef f0 b4 38 \......L..4....8 0030 b6 9b 2d 6c 8a f7 17 08 82 5b 08 10 05 01 3d 45 ..-l.....[....=E 0040 6a 09 00 00 00 44 97 23 0c 2a 30 ad 28 14 64 1f j....D.#.*0.(.d. 0050 de 59 fd aa ff ee ca 62 75 62 7f b4 91 58 ae 21 .Y.....bub...X.! 0060 1f 2f 5e 77 57 94 41 47 80 e0 6f b4 67 64 ./^wW.AG..o.gd Frame 11 (126 bytes on wire, 126 bytes captured) Arrival Time: Sep 30, 2003 13:33:54.123359000 Time delta from previous packet: 0.000847000 seconds Time relative to first packet: 78.964721000 seconds Frame Number: 11 Packet Length: 126 bytes Capture Length: 126 bytes Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:d0:09:1e:ab:d6 Destination: 00:d0:09:1e:ab:d6 (00:d0:09:1e:ab:d6) Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e) Type: IP (0x0800) Internet Protocol, Src Addr: 64.94.50.108 (64.94.50.108), Dst Addr: 63.202.92.134 (63.202.92.134) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0xac26 (44070) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 39 Protocol: UDP (0x11) Header checksum: 0xd83c (correct) Source: 64.94.50.108 (64.94.50.108) Destination: 63.202.92.134 (63.202.92.134) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 92 Checksum: 0x0000 (none) Internet Security Association and Key Management Protocol Initiator cookie: 0x34AFEFF0B438B69B Responder cookie: 0x2D6C8AF71708825B Next payload: Hash (8) Version: 1.0 Exchange type: Informational (5) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x6126A8D9 Length: 84 Encrypted payload (56 bytes) 0000 00 d0 09 1e ab d6 00 20 6f 09 60 0e 08 00 45 00 ....... o.`...E. 0010 00 70 ac 26 00 00 27 11 d8 3c 40 5e 32 6c 3f ca .p.&..'..<@^2l?. 0020 5c 86 01 f4 01 f4 00 5c 00 00 34 af ef f0 b4 38 \......\..4....8 0030 b6 9b 2d 6c 8a f7 17 08 82 5b 08 10 05 01 61 26 ..-l.....[....a& 0040 a8 d9 00 00 00 54 4d 73 5f e9 8a 10 06 35 dc b1 .....TMs_....5.. 0050 b3 4d 60 26 11 7b 6a 59 8e 92 49 ef 2f 3e a7 e6 .M`&.{jY..I./>.. 0060 bc 50 f6 d1 a6 b9 da 98 a7 70 94 6c ce 1d 40 4c .P.......p.l..@L 0070 44 f9 c9 3f b2 a2 3e 18 7d 17 9d 7a 51 bf D..?..>.}..zQ.