IKE and IPsec packets sent/received:
Frame 1 (126 bytes on wire, 126 bytes captured)
    Arrival Time: Aug 14, 2003 18:01:12.248529000
    Time delta from previous packet: 0.000000000 seconds
    Time relative to first packet: 0.000000000 seconds
    Frame Number: 1
    Packet Length: 126 bytes
    Capture Length: 126 bytes
Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad
    Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad)
    Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e)
    Type: IP (0x0800)
    Trailer: F71AE48E
Internet Protocol, Src Addr: 211.20.96.195 (211.20.96.195), Dst Addr: 63.202.92.133 (63.202.92.133)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 108
    Identification: 0x0000 (0)
    Flags: 0x04
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 45
    Protocol: UDP (0x11)
    Header checksum: 0x7d5a (correct)
    Source: 211.20.96.195 (211.20.96.195)
    Destination: 63.202.92.133 (63.202.92.133)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 88
    Checksum: 0x378f (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x8C03B04B4B2EF791
    Responder cookie: 0x0000000000000000
    Next payload: Security Association (1)
    Version: 1.0
    Exchange type: Identity Protection (Main Mode) (2)
    Flags
        .... ...0 = No encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x00000000
    Length: 80
    Security Association payload
        Next payload: NONE (0)
        Length: 52
        Domain of interpretation: IPSEC (1)
        Situation: IDENTITY (1)
        Proposal payload # 0
            Next payload: NONE (0)
            Length: 40
            Proposal number: 0
            Protocol ID: ISAKMP (1)
            SPI size: 0
            Number of transforms: 1
            Transform payload # 0
                Next payload: NONE (0)
                Length: 32
                Transform number: 0
                Transform ID: KEY_IKE (1)
                Life-Type (11): Seconds (1)
                Life-Duration (12): Duration-Value (28800)
                Encryption-Algorithm (1): 3DES-CBC (5)
                Hash-Algorithm (2): SHA (2)
                Authentication-Method (3): PSK (1)
                Group-Description (4): Alternate 1024-bit MODP group (2)

0000  00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00   .@c.... o.`...E.
0010  00 6c 00 00 40 00 2d 11 7d 5a d3 14 60 c3 3f ca   .l..@.-.}Z..`.?.
0020  5c 85 01 f4 01 f4 00 58 37 8f 8c 03 b0 4b 4b 2e   \......X7....KK.
0030  f7 91 00 00 00 00 00 00 00 00 01 10 02 00 00 00   ................
0040  00 00 00 00 00 50 00 00 00 34 00 00 00 01 00 00   .....P...4......
0050  00 01 00 00 00 28 00 01 00 01 00 00 00 20 00 01   .....(....... ..
0060  00 00 80 0b 00 01 80 0c 70 80 80 01 00 05 80 02   ........p.......
0070  00 02 80 03 00 01 80 04 00 02 f7 1a e4 8e         ..............

Frame 2 (142 bytes on wire, 142 bytes captured)
    Arrival Time: Aug 14, 2003 18:01:12.285423000
    Time delta from previous packet: 0.036894000 seconds
    Time relative to first packet: 0.036894000 seconds
    Frame Number: 2
    Packet Length: 142 bytes
    Capture Length: 142 bytes
Ethernet II, Src: 00:40:63:c1:11:ad, Dst: 00:20:6f:09:60:0e
    Destination: 00:20:6f:09:60:0e (00:20:6f:09:60:0e)
    Source: 00:40:63:c1:11:ad (00:40:63:c1:11:ad)
    Type: IP (0x0800)
Internet Protocol, Src Addr: 63.202.92.133 (63.202.92.133), Dst Addr: 211.20.96.195 (211.20.96.195)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 128
    Identification: 0x008d (141)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0xa9b9 (correct)
    Source: 63.202.92.133 (63.202.92.133)
    Destination: 211.20.96.195 (211.20.96.195)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 108
    Checksum: 0xcf30 (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x8C03B04B4B2EF791
    Responder cookie: 0xE71B170929A1400D
    Next payload: Security Association (1)
    Version: 1.0
    Exchange type: Identity Protection (Main Mode) (2)
    Flags
        .... ...0 = No encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x00000000
    Length: 100
    Security Association payload
        Next payload: Vendor ID (13)
        Length: 52
        Domain of interpretation: IPSEC (1)
        Situation: IDENTITY (1)
        Proposal payload # 0
            Next payload: NONE (0)
            Length: 40
            Proposal number: 0
            Protocol ID: ISAKMP (1)
            SPI size: 0
            Number of transforms: 1
            Transform payload # 0
                Next payload: NONE (0)
                Length: 32
                Transform number: 0
                Transform ID: KEY_IKE (1)
                Life-Type (11): Seconds (1)
                Life-Duration (12): Duration-Value (28800)
                Encryption-Algorithm (1): 3DES-CBC (5)
                Hash-Algorithm (2): SHA (2)
                Authentication-Method (3): PSK (1)
                Group-Description (4): Alternate 1024-bit MODP group (2)
    Vendor ID payload
        Next payload: NONE (0)
        Length: 20
        Vendor ID: unknown vendor ID: 0x7003CBC1097DBE9C2600BA6983BC8B35

0000  00 20 6f 09 60 0e 00 40 63 c1 11 ad 08 00 45 00   . o.`..@c.....E.
0010  00 80 00 8d 00 00 40 11 a9 b9 3f ca 5c 85 d3 14   ......@...?.\...
0020  60 c3 01 f4 01 f4 00 6c cf 30 8c 03 b0 4b 4b 2e   `......l.0...KK.
0030  f7 91 e7 1b 17 09 29 a1 40 0d 01 10 02 00 00 00   ......).@.......
0040  00 00 00 00 00 64 0d 00 00 34 00 00 00 01 00 00   .....d...4......
0050  00 01 00 00 00 28 00 01 00 01 00 00 00 20 00 01   .....(....... ..
0060  00 00 80 0b 00 01 80 0c 70 80 80 01 00 05 80 02   ........p.......
0070  00 02 80 03 00 01 80 04 00 02 00 00 00 14 70 03   ..............p.
0080  cb c1 09 7d be 9c 26 00 ba 69 83 bc 8b 35         ...}..&..i...5

Frame 3 (226 bytes on wire, 226 bytes captured)
    Arrival Time: Aug 14, 2003 18:01:12.556008000
    Time delta from previous packet: 0.270585000 seconds
    Time relative to first packet: 0.307479000 seconds
    Frame Number: 3
    Packet Length: 226 bytes
    Capture Length: 226 bytes
Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad
    Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad)
    Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e)
    Type: IP (0x0800)
    Trailer: D3DD593D
Internet Protocol, Src Addr: 211.20.96.195 (211.20.96.195), Dst Addr: 63.202.92.133 (63.202.92.133)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 208
    Identification: 0x0000 (0)
    Flags: 0x04
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 45
    Protocol: UDP (0x11)
    Header checksum: 0x7cf6 (correct)
    Source: 211.20.96.195 (211.20.96.195)
    Destination: 63.202.92.133 (63.202.92.133)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 188
    Checksum: 0x91a6 (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x8C03B04B4B2EF791
    Responder cookie: 0xE71B170929A1400D
    Next payload: Key Exchange (4)
    Version: 1.0
    Exchange type: Identity Protection (Main Mode) (2)
    Flags
        .... ...0 = No encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x00000000
    Length: 180
    Key Exchange payload
        Next payload: Nonce (10)
        Length: 132
        Key Exchange Data
    Nonce payload
        Next payload: NONE (0)
        Length: 20
        Nonce Data

0000  00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00   .@c.... o.`...E.
0010  00 d0 00 00 40 00 2d 11 7c f6 d3 14 60 c3 3f ca   ....@.-.|...`.?.
0020  5c 85 01 f4 01 f4 00 bc 91 a6 8c 03 b0 4b 4b 2e   \............KK.
0030  f7 91 e7 1b 17 09 29 a1 40 0d 04 10 02 00 00 00   ......).@.......
0040  00 00 00 00 00 b4 0a 00 00 84 24 71 ac bb 52 a4   ..........$q..R.
0050  63 7c 27 6b 63 bb b9 81 2b aa e3 3d c4 d5 4e 28   c|'kc...+..=..N(
0060  fb 75 3c 88 82 4b d1 e6 ad 45 51 51 a8 f9 5b 9a   .u<..K...EQQ..[.
0070  ee 3b 2f 0e 49 ab 27 7c d4 36 63 44 b5 ba bc 07   .;/.I.'|.6cD....
0080  31 27 47 cb 05 b5 e0 dc 67 c6 ac 61 c0 d3 af a1   1'G.....g..a....
0090  45 71 b2 62 3e a5 2c 52 09 1b 2b 7c fd c7 37 3f   Eq.b>.,R..+|..7?
00a0  1e 7f 47 9e df f4 25 5b 56 67 9d a3 44 64 2a 21   ..G...%[Vg..Dd*!
00b0  32 a7 6e 66 2c 46 c3 da 82 5c dd 62 e0 b5 ec d7   2.nf,F...\.b....
00c0  c4 8e 5d 8e 74 9f 1c 96 e6 1d 00 00 00 14 4c f6   ..].t.........L.
00d0  0a e0 9e b7 c2 c6 a3 39 fa 0f db 6c e3 19 d3 dd   .......9...l....
00e0  59 3d                                             Y=

Frame 4 (242 bytes on wire, 242 bytes captured)
    Arrival Time: Aug 14, 2003 18:01:12.608344000
    Time delta from previous packet: 0.052336000 seconds
    Time relative to first packet: 0.359815000 seconds
    Frame Number: 4
    Packet Length: 242 bytes
    Capture Length: 242 bytes
Ethernet II, Src: 00:40:63:c1:11:ad, Dst: 00:20:6f:09:60:0e
    Destination: 00:20:6f:09:60:0e (00:20:6f:09:60:0e)
    Source: 00:40:63:c1:11:ad (00:40:63:c1:11:ad)
    Type: IP (0x0800)
Internet Protocol, Src Addr: 63.202.92.133 (63.202.92.133), Dst Addr: 211.20.96.195 (211.20.96.195)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 228
    Identification: 0x008e (142)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0xa954 (correct)
    Source: 63.202.92.133 (63.202.92.133)
    Destination: 211.20.96.195 (211.20.96.195)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 208
    Checksum: 0x3dfb (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x8C03B04B4B2EF791
    Responder cookie: 0xE71B170929A1400D
    Next payload: Key Exchange (4)
    Version: 1.0
    Exchange type: Identity Protection (Main Mode) (2)
    Flags
        .... ...0 = No encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x00000000
    Length: 200
    Key Exchange payload
        Next payload: Nonce (10)
        Length: 132
        Key Exchange Data
    Nonce payload
        Next payload: Vendor ID (13)
        Length: 20
        Nonce Data
    Vendor ID payload
        Next payload: NONE (0)
        Length: 20
        Vendor ID: unknown vendor ID: 0x7003CBC1097DBE9C2600BA6983BC8B35

0000  00 20 6f 09 60 0e 00 40 63 c1 11 ad 08 00 45 00   . o.`..@c.....E.
0010  00 e4 00 8e 00 00 40 11 a9 54 3f ca 5c 85 d3 14   ......@..T?.\...
0020  60 c3 01 f4 01 f4 00 d0 3d fb 8c 03 b0 4b 4b 2e   `.......=....KK.
0030  f7 91 e7 1b 17 09 29 a1 40 0d 04 10 02 00 00 00   ......).@.......
0040  00 00 00 00 00 c8 0a 00 00 84 fa 02 dc 38 c1 b0   .............8..
0050  56 fb 60 b4 80 4e f8 30 20 9d d2 b2 a9 a2 5a 6f   V.`..N.0 .....Zo
0060  5f 17 5d a9 aa ea 36 bc b7 b4 54 ec dd d0 28 c7   _.]...6...T...(.
0070  a5 01 1a c6 2d a3 9e 1e 09 57 57 60 ac 5c 0d 51   ....-....WW`.\.Q
0080  b2 cb 09 6a de c2 01 94 7a 5d f9 0c 99 1b 97 1d   ...j....z]......
0090  53 95 9b 3f b1 73 2a d7 90 e0 1a 29 e0 c3 d0 1a   S..?.s*....)....
00a0  46 f9 58 ae 8f 9b 25 33 69 a4 da 6b bf 26 48 35   F.X...%3i..k.&H5
00b0  9d 3c 55 65 de 6e 6a de 1a 7e 8f 7d 6d 87 44 b7   .<Ue.nj..~.}m.D.
00c0  20 4f 20 61 d0 5e 5a f5 00 0e 0d 00 00 14 9c 4e    O a.^Z........N
00d0  c4 0d 02 32 06 c1 57 9e a9 fd c1 31 a5 20 00 00   ...2..W....1. ..
00e0  00 14 70 03 cb c1 09 7d be 9c 26 00 ba 69 83 bc   ..p....}..&..i..
00f0  8b 35                                             .5

Frame 5 (114 bytes on wire, 114 bytes captured)
    Arrival Time: Aug 14, 2003 18:01:12.904001000
    Time delta from previous packet: 0.295657000 seconds
    Time relative to first packet: 0.655472000 seconds
    Frame Number: 5
    Packet Length: 114 bytes
    Capture Length: 114 bytes
Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad
    Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad)
    Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e)
    Type: IP (0x0800)
    Trailer: 69431408
Internet Protocol, Src Addr: 211.20.96.195 (211.20.96.195), Dst Addr: 63.202.92.133 (63.202.92.133)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 96
    Identification: 0x0000 (0)
    Flags: 0x04
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 45
    Protocol: UDP (0x11)
    Header checksum: 0x7d66 (correct)
    Source: 211.20.96.195 (211.20.96.195)
    Destination: 63.202.92.133 (63.202.92.133)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 76
    Checksum: 0xf844 (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x8C03B04B4B2EF791
    Responder cookie: 0xE71B170929A1400D
    Next payload: Identification (5)
    Version: 1.0
    Exchange type: Identity Protection (Main Mode) (2)
    Flags
        .... ...1 = Encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x00000000
    Length: 68
    Encrypted payload (40 bytes)

0000  00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00   .@c.... o.`...E.
0010  00 60 00 00 40 00 2d 11 7d 66 d3 14 60 c3 3f ca   .`..@.-.}f..`.?.
0020  5c 85 01 f4 01 f4 00 4c f8 44 8c 03 b0 4b 4b 2e   \......L.D...KK.
0030  f7 91 e7 1b 17 09 29 a1 40 0d 05 10 02 01 00 00   ......).@.......
0040  00 00 00 00 00 44 2c 33 7f 15 f2 19 98 d1 a7 c3   .....D,3........
0050  e7 60 eb 7c 18 73 06 da a4 d5 0b 43 f0 a8 55 2f   .`.|.s.....C..U/
0060  ce 77 5b 76 33 db dd 9b 66 e0 cb c1 10 af 69 43   .w[v3...f.....iC
0070  14 08                                             ..

Frame 6 (110 bytes on wire, 110 bytes captured)
    Arrival Time: Aug 14, 2003 18:01:12.915310000
    Time delta from previous packet: 0.011309000 seconds
    Time relative to first packet: 0.666781000 seconds
    Frame Number: 6
    Packet Length: 110 bytes
    Capture Length: 110 bytes
Ethernet II, Src: 00:40:63:c1:11:ad, Dst: 00:20:6f:09:60:0e
    Destination: 00:20:6f:09:60:0e (00:20:6f:09:60:0e)
    Source: 00:40:63:c1:11:ad (00:40:63:c1:11:ad)
    Type: IP (0x0800)
Internet Protocol, Src Addr: 63.202.92.133 (63.202.92.133), Dst Addr: 211.20.96.195 (211.20.96.195)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 96
    Identification: 0x008f (143)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0xa9d7 (correct)
    Source: 63.202.92.133 (63.202.92.133)
    Destination: 211.20.96.195 (211.20.96.195)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 76
    Checksum: 0xba8e (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x8C03B04B4B2EF791
    Responder cookie: 0xE71B170929A1400D
    Next payload: Identification (5)
    Version: 1.0
    Exchange type: Identity Protection (Main Mode) (2)
    Flags
        .... ...1 = Encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x00000000
    Length: 68
    Encrypted payload (40 bytes)

0000  00 20 6f 09 60 0e 00 40 63 c1 11 ad 08 00 45 00   . o.`..@c.....E.
0010  00 60 00 8f 00 00 40 11 a9 d7 3f ca 5c 85 d3 14   .`....@...?.\...
0020  60 c3 01 f4 01 f4 00 4c ba 8e 8c 03 b0 4b 4b 2e   `......L.....KK.
0030  f7 91 e7 1b 17 09 29 a1 40 0d 05 10 02 01 00 00   ......).@.......
0040  00 00 00 00 00 44 23 6c b0 2b 74 77 94 38 07 0b   .....D#l.+tw.8..
0050  85 ae 57 ec bb 0c 51 19 77 bd 02 74 fa f3 91 c9   ..W...Q.w..t....
0060  9d 62 53 50 1e 46 29 17 c3 68 dd 20 d5 e3         .bSP.F)..h. ..

Frame 7 (126 bytes on wire, 126 bytes captured)
    Arrival Time: Aug 14, 2003 18:01:12.919985000
    Time delta from previous packet: 0.004675000 seconds
    Time relative to first packet: 0.671456000 seconds
    Frame Number: 7
    Packet Length: 126 bytes
    Capture Length: 126 bytes
Ethernet II, Src: 00:40:63:c1:11:ad, Dst: 00:20:6f:09:60:0e
    Destination: 00:20:6f:09:60:0e (00:20:6f:09:60:0e)
    Source: 00:40:63:c1:11:ad (00:40:63:c1:11:ad)
    Type: IP (0x0800)
Internet Protocol, Src Addr: 63.202.92.133 (63.202.92.133), Dst Addr: 211.20.96.195 (211.20.96.195)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 112
    Identification: 0x0090 (144)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0xa9c6 (correct)
    Source: 63.202.92.133 (63.202.92.133)
    Destination: 211.20.96.195 (211.20.96.195)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 92
    Checksum: 0x71c8 (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x8C03B04B4B2EF791
    Responder cookie: 0xE71B170929A1400D
    Next payload: Hash (8)
    Version: 1.0
    Exchange type: Informational (5)
    Flags
        .... ...1 = Encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0xFFB38C56
    Length: 84
    Encrypted payload (56 bytes)

0000  00 20 6f 09 60 0e 00 40 63 c1 11 ad 08 00 45 00   . o.`..@c.....E.
0010  00 70 00 90 00 00 40 11 a9 c6 3f ca 5c 85 d3 14   .p....@...?.\...
0020  60 c3 01 f4 01 f4 00 5c 71 c8 8c 03 b0 4b 4b 2e   `......\q....KK.
0030  f7 91 e7 1b 17 09 29 a1 40 0d 08 10 05 01 ff b3   ......).@.......
0040  8c 56 00 00 00 54 f0 6d da 5a c1 8d a2 f9 bf e6   .V...T.m.Z......
0050  e5 4e 33 e4 8b c9 4d 68 7e 43 f4 95 6e e9 21 76   .N3...Mh~C..n.!v
0060  20 ca ee 5a c6 99 bd 17 78 b2 5e f3 c0 3b 51 a1    ..Z....x.^..;Q.
0070  4f 26 69 d6 a0 33 34 50 b3 b5 ae b1 e7 f5         O&i..34P......

Frame 8 (394 bytes on wire, 394 bytes captured)
    Arrival Time: Aug 14, 2003 18:01:13.203437000
    Time delta from previous packet: 0.283452000 seconds
    Time relative to first packet: 0.954908000 seconds
    Frame Number: 8
    Packet Length: 394 bytes
    Capture Length: 394 bytes
Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad
    Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad)
    Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e)
    Type: IP (0x0800)
    Trailer: E70AF7C2
Internet Protocol, Src Addr: 211.20.96.195 (211.20.96.195), Dst Addr: 63.202.92.133 (63.202.92.133)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 376
    Identification: 0x0000 (0)
    Flags: 0x04
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 45
    Protocol: UDP (0x11)
    Header checksum: 0x7c4e (correct)
    Source: 211.20.96.195 (211.20.96.195)
    Destination: 63.202.92.133 (63.202.92.133)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 356
    Checksum: 0xebc0 (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x8C03B04B4B2EF791
    Responder cookie: 0xE71B170929A1400D
    Next payload: Hash (8)
    Version: 1.0
    Exchange type: Quick Mode (32)
    Flags
        .... ...1 = Encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x973FBB90
    Length: 348
    Encrypted payload (320 bytes)

0000  00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00   .@c.... o.`...E.
0010  01 78 00 00 40 00 2d 11 7c 4e d3 14 60 c3 3f ca   .x..@.-.|N..`.?.
0020  5c 85 01 f4 01 f4 01 64 eb c0 8c 03 b0 4b 4b 2e   \......d.....KK.
0030  f7 91 e7 1b 17 09 29 a1 40 0d 08 10 20 01 97 3f   ......).@... ..?
0040  bb 90 00 00 01 5c c1 33 cc 17 16 16 e1 31 9d 8e   .....\.3.....1..
0050  2b 04 76 a6 67 31 ea fd 41 69 f8 42 cc b9 14 1c   +.v.g1..Ai.B....
0060  a7 8d 3b d4 d5 31 67 f2 f4 a8 c1 df 9a df 0f 74   ..;..1g........t
0070  9c 03 58 8f 3e d8 19 83 f3 c0 49 2a b6 12 4a 3d   ..X.>.....I*..J=
0080  26 de 3a b7 85 1e 38 ba f8 35 47 51 fd c6 42 ec   &.:...8..5GQ..B.
0090  53 a4 21 2e 49 60 55 cf 86 90 c1 9f ff 5f 34 e7   S.!.I`U......_4.
00a0  e0 45 f0 81 b6 4b eb ee 49 d2 3a 85 f0 08 4a 83   .E...K..I.:...J.
00b0  a0 d2 7c cd 3d d0 c3 c4 78 4b 55 15 f4 b8 c7 16   ..|.=...xKU.....
00c0  f2 b9 5b 86 af ad 10 5e 18 25 bd 52 7c 5e e8 45   ..[....^.%.R|^.E
00d0  80 eb 3f 6c da b0 32 23 95 89 0d 04 2c 44 f6 da   ..?l..2#....,D..
00e0  73 65 87 0b 6d e6 96 ab 01 ac d3 a9 da 7d ab 55   se..m........}.U
00f0  6a 74 d9 75 76 31 55 ce 77 23 f2 92 c8 7b 10 7a   jt.uv1U.w#...{.z
0100  ae 63 cd 28 e4 98 ef 8b 12 c2 c2 66 12 7e a6 02   .c.(.......f.~..
0110  25 30 0f 40 f6 76 29 19 e4 74 29 c7 50 9e 46 6c   %0.@.v)..t).P.Fl
0120  55 1a c7 49 43 48 9e b0 e1 f1 8b 4d 30 48 b6 eb   U..ICH.....M0H..
0130  23 5a ed 24 47 9d 3e e0 77 32 dd 13 83 16 f1 c2   #Z.$G.>.w2......
0140  2f 44 18 2f 9b 84 1d 17 d8 7a 06 e5 3f b7 13 94   /D./.....z..?...
0150  2b dc 29 1b 02 8b c4 b7 5d ed e2 44 9d 95 c2 57   +.).....]..D...W
0160  92 64 ab 41 92 a3 42 5b f7 14 8e 84 a2 73 2b 61   .d.A..B[.....s+a
0170  3f 03 9a b3 64 d0 8b 4a db e9 06 6e aa fe f8 b5   ?...d..J...n....
0180  c8 4d 3e 74 d6 63 e7 0a f7 c2                     .M>t.c....

Frame 9 (326 bytes on wire, 326 bytes captured)
    Arrival Time: Aug 14, 2003 18:01:13.289116000
    Time delta from previous packet: 0.085679000 seconds
    Time relative to first packet: 1.040587000 seconds
    Frame Number: 9
    Packet Length: 326 bytes
    Capture Length: 326 bytes
Ethernet II, Src: 00:40:63:c1:11:ad, Dst: 00:20:6f:09:60:0e
    Destination: 00:20:6f:09:60:0e (00:20:6f:09:60:0e)
    Source: 00:40:63:c1:11:ad (00:40:63:c1:11:ad)
    Type: IP (0x0800)
Internet Protocol, Src Addr: 63.202.92.133 (63.202.92.133), Dst Addr: 211.20.96.195 (211.20.96.195)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 312
    Identification: 0x0091 (145)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0xa8fd (correct)
    Source: 63.202.92.133 (63.202.92.133)
    Destination: 211.20.96.195 (211.20.96.195)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 292
    Checksum: 0xf7bc (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x8C03B04B4B2EF791
    Responder cookie: 0xE71B170929A1400D
    Next payload: Hash (8)
    Version: 1.0
    Exchange type: Quick Mode (32)
    Flags
        .... ...1 = Encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x973FBB90
    Length: 284
    Encrypted payload (256 bytes)

0000  00 20 6f 09 60 0e 00 40 63 c1 11 ad 08 00 45 00   . o.`..@c.....E.
0010  01 38 00 91 00 00 40 11 a8 fd 3f ca 5c 85 d3 14   .8....@...?.\...
0020  60 c3 01 f4 01 f4 01 24 f7 bc 8c 03 b0 4b 4b 2e   `......$.....KK.
0030  f7 91 e7 1b 17 09 29 a1 40 0d 08 10 20 01 97 3f   ......).@... ..?
0040  bb 90 00 00 01 1c ad 21 ee ee c5 b6 d5 91 0f fa   .......!........
0050  c8 df 49 48 26 64 5c e1 ea d3 09 70 93 97 a6 01   ..IH&d\....p....
0060  56 06 e2 59 44 e6 51 e1 c1 be bc 20 ee bc 7a ab   V..YD.Q.... ..z.
0070  76 3b 61 f3 58 ec 65 c5 80 31 0c 58 65 0e e7 04   v;a.X.e..1.Xe...
0080  25 52 78 75 90 3e da be 7e 20 aa 4d c8 b6 21 f9   %Rxu.>..~ .M..!.
0090  58 f9 ea 4c d4 dc 2a d5 95 d6 e9 27 22 66 2a 2b   X..L..*....'"f*+
00a0  ba 23 22 b1 d9 d4 51 a4 fb a2 b1 f1 47 f7 18 a9   .#"...Q.....G...
00b0  4c 86 2a f1 84 6c 0f 07 f5 39 4d 8f 23 08 ad 54   L.*..l...9M.#..T
00c0  55 8b 47 f0 08 b9 6c a7 72 df 61 5b f4 ab b8 10   U.G...l.r.a[....
00d0  c4 67 b2 4d 19 08 eb c2 9a d4 5f 58 1e f2 17 ff   .g.M......_X....
00e0  96 9b fa 27 91 68 46 5a ef d4 d2 2b 39 71 8a 46   ...'.hFZ...+9q.F
00f0  83 0b 46 f1 8f 46 69 96 e1 de be f6 b6 c1 66 8a   ..F..Fi.......f.
0100  e3 94 2c 7b 18 52 05 68 c4 1c 18 64 7e 4d f6 f3   ..,{.R.h...d~M..
0110  8d 53 94 0a 39 b0 f9 07 86 08 a4 2d 1e 01 21 d2   .S..9......-..!.
0120  e0 5b 70 3c cd 2a f0 39 c9 fb a7 07 69 e7 65 81   .[p<.*.9....i.e.
0130  d0 ca 93 76 81 1b bd 05 da 93 3b 5c bf 6e 60 37   ...v......;\.n`7
0140  41 96 06 7e e3 9f                                 A..~..

Frame 10 (98 bytes on wire, 98 bytes captured)
    Arrival Time: Aug 14, 2003 18:01:14.070928000
    Time delta from previous packet: 0.781812000 seconds
    Time relative to first packet: 1.822399000 seconds
    Frame Number: 10
    Packet Length: 98 bytes
    Capture Length: 98 bytes
Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad
    Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad)
    Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e)
    Type: IP (0x0800)
    Trailer: 28E4668E
Internet Protocol, Src Addr: 211.20.96.195 (211.20.96.195), Dst Addr: 63.202.92.133 (63.202.92.133)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 80
    Identification: 0x0000 (0)
    Flags: 0x04
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 45
    Protocol: UDP (0x11)
    Header checksum: 0x7d76 (correct)
    Source: 211.20.96.195 (211.20.96.195)
    Destination: 63.202.92.133 (63.202.92.133)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 60
    Checksum: 0x2b44 (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x8C03B04B4B2EF791
    Responder cookie: 0xE71B170929A1400D
    Next payload: Hash (8)
    Version: 1.0
    Exchange type: Quick Mode (32)
    Flags
        .... ...1 = Encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x973FBB90
    Length: 52
    Encrypted payload (24 bytes)

0000  00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00   .@c.... o.`...E.
0010  00 50 00 00 40 00 2d 11 7d 76 d3 14 60 c3 3f ca   .P..@.-.}v..`.?.
0020  5c 85 01 f4 01 f4 00 3c 2b 44 8c 03 b0 4b 4b 2e   \......<+D...KK.
0030  f7 91 e7 1b 17 09 29 a1 40 0d 08 10 20 01 97 3f   ......).@... ..?
0040  bb 90 00 00 00 34 01 87 59 34 0c 7c 38 a5 b7 42   .....4..Y4.|8..B
0050  d7 19 c1 80 e2 ae c2 84 90 f9 6c 40 0c 03 28 e4   ..........l@..(.
0060  66 8e                                             f.

Frame 11 (122 bytes on wire, 122 bytes captured)
    Arrival Time: Aug 14, 2003 18:01:39.090484000
    Time delta from previous packet: 25.019556000 seconds
    Time relative to first packet: 26.841955000 seconds
    Frame Number: 11
    Packet Length: 122 bytes
    Capture Length: 122 bytes
Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad
    Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad)
    Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e)
    Type: IP (0x0800)
    Trailer: 40132AA8
Internet Protocol, Src Addr: 211.20.96.195 (211.20.96.195), Dst Addr: 63.202.92.133 (63.202.92.133)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 104
    Identification: 0xc47a (50298)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 45
    Protocol: ESP (0x32)
    Header checksum: 0xf8c2 (correct)
    Source: 211.20.96.195 (211.20.96.195)
    Destination: 63.202.92.133 (63.202.92.133)
Encapsulating Security Payload
    SPI: 0x096de0cf
    Sequence: 0x00000001
    Data (76 bytes)

0000  00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00   .@c.... o.`...E.
0010  00 68 c4 7a 00 00 2d 32 f8 c2 d3 14 60 c3 3f ca   .h.z..-2....`.?.
0020  5c 85 09 6d e0 cf 00 00 00 01 be bf c0 c1 c2 c3   \..m............
0030  c4 c5 02 1d 62 be 0a 48 b8 b4 d9 e7 2d 16 ce f7   ....b..H....-...
0040  f5 5a 7f af b6 71 69 71 bf c4 9c 0e 5b 4e db b4   .Z...qiq....[N..
0050  27 46 bb 97 a9 3b 17 01 c7 51 51 78 36 83 94 9e   'F...;...QQx6...
0060  3a 7a 23 22 b1 8e 40 6b 03 0e de c4 a0 1c bb a7   :z#"..@k........
0070  4e a3 25 61 e1 b8 40 13 2a a8                     N.%a..@.*.

Frame 12 (110 bytes on wire, 110 bytes captured)
    Arrival Time: Aug 14, 2003 18:01:39.091217000
    Time delta from previous packet: 0.000733000 seconds
    Time relative to first packet: 26.842688000 seconds
    Frame Number: 12
    Packet Length: 110 bytes
    Capture Length: 110 bytes
Ethernet II, Src: 00:40:63:c1:11:ad, Dst: 00:20:6f:09:60:0e
    Destination: 00:20:6f:09:60:0e (00:20:6f:09:60:0e)
    Source: 00:40:63:c1:11:ad (00:40:63:c1:11:ad)
    Type: IP (0x0800)
Internet Protocol, Src Addr: 63.202.92.133 (63.202.92.133), Dst Addr: 211.20.96.195 (211.20.96.195)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 96
    Identification: 0x0093 (147)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: ESP (0x32)
    Header checksum: 0xa9b2 (correct)
    Source: 63.202.92.133 (63.202.92.133)
    Destination: 211.20.96.195 (211.20.96.195)
Encapsulating Security Payload
    SPI: 0x9405eb2f
    Sequence: 0x00000001
    Data (68 bytes)

0000  00 20 6f 09 60 0e 00 40 63 c1 11 ad 08 00 45 00   . o.`..@c.....E.
0010  00 60 00 93 00 00 40 32 a9 b2 3f ca 5c 85 d3 14   .`....@2..?.\...
0020  60 c3 94 05 eb 2f 00 00 00 01 83 2e cd 1d 66 d0   `..../........f.
0030  58 a1 0f 2b 20 94 83 7a 71 9b c7 c4 8d 39 e9 3a   X..+ ..zq....9.:
0040  5f 77 de 9e 19 8f 09 3b c2 33 b1 e7 1e 60 8c 72   _w.....;.3...`.r
0050  24 5d a6 60 63 b9 89 0a 18 3d 77 51 07 1a 50 df   $].`c....=wQ..P.
0060  a2 64 ff 39 11 74 68 4e df 34 12 22 83 2a         .d.9.thN.4.".*

Frame 13 (114 bytes on wire, 114 bytes captured)
    Arrival Time: Aug 14, 2003 18:01:39.304693000
    Time delta from previous packet: 0.213476000 seconds
    Time relative to first packet: 27.056164000 seconds
    Frame Number: 13
    Packet Length: 114 bytes
    Capture Length: 114 bytes
Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad
    Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad)
    Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e)
    Type: IP (0x0800)
    Trailer: ED3794BF
Internet Protocol, Src Addr: 211.20.96.195 (211.20.96.195), Dst Addr: 63.202.92.133 (63.202.92.133)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 96
    Identification: 0xc47b (50299)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 45
    Protocol: ESP (0x32)
    Header checksum: 0xf8c9 (correct)
    Source: 211.20.96.195 (211.20.96.195)
    Destination: 63.202.92.133 (63.202.92.133)
Encapsulating Security Payload
    SPI: 0x096de0cf
    Sequence: 0x00000002
    Data (68 bytes)

0000  00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00   .@c.... o.`...E.
0010  00 60 c4 7b 00 00 2d 32 f8 c9 d3 14 60 c3 3f ca   .`.{..-2....`.?.
0020  5c 85 09 6d e0 cf 00 00 00 02 d4 d5 d6 d7 d8 d9   \..m............
0030  da db 12 bf c0 cf 18 33 ab 30 34 1f 58 88 7a 03   .......3.04.X.z.
0040  0f ba ca df 26 a1 7a 88 74 4d 21 10 e7 79 d3 66   ....&.z.tM!..y.f
0050  9a f7 80 ef c6 8c f3 7b 8b 37 de 25 2a f7 a6 40   .......{.7.%*..@
0060  af 1b d4 04 71 77 a6 99 9c 39 f4 0f f7 aa ed 37   ....qw...9.....7
0070  94 bf                                             ..

Frame 14 (354 bytes on wire, 354 bytes captured)
    Arrival Time: Aug 14, 2003 18:01:39.317795000
    Time delta from previous packet: 0.013102000 seconds
    Time relative to first packet: 27.069266000 seconds
    Frame Number: 14
    Packet Length: 354 bytes
    Capture Length: 354 bytes
Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad
    Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad)
    Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e)
    Type: IP (0x0800)
    Trailer: 15D264A3
Internet Protocol, Src Addr: 211.20.96.195 (211.20.96.195), Dst Addr: 63.202.92.133 (63.202.92.133)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 336
    Identification: 0xc47c (50300)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 45
    Protocol: ESP (0x32)
    Header checksum: 0xf7d8 (correct)
    Source: 211.20.96.195 (211.20.96.195)
    Destination: 63.202.92.133 (63.202.92.133)
Encapsulating Security Payload
    SPI: 0x096de0cf
    Sequence: 0x00000003
    Data (308 bytes)

0000  00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00   .@c.... o.`...E.
0010  01 50 c4 7c 00 00 2d 32 f7 d8 d3 14 60 c3 3f ca   .P.|..-2....`.?.
0020  5c 85 09 6d e0 cf 00 00 00 03 d4 d5 d6 d7 d8 d9   \..m............
0030  da db 7a c8 37 2c 00 20 38 04 49 8d 57 f2 a8 cb   ..z.7,. 8.I.W...
0040  54 03 2b 65 a4 0f ad 64 eb 52 48 7b 44 20 67 11   T.+e...d.RH{D g.
0050  13 f0 7b 13 d3 4a 39 d4 24 90 20 64 9b 28 3c be   ..{..J9.$. d.(<.
0060  b4 f3 1d f0 9c 80 20 8b 05 e6 8d 6f 30 e4 c1 cf   ...... ....o0...
0070  6a 58 57 9d 4e aa 68 77 c5 bc fb 20 97 48 40 eb   jXW.N.hw... .H@.
0080  8d e5 f9 ac 03 dd c1 2b 3d 7a fc 78 45 fa 6d 28   .......+=z.xE.m(
0090  43 ca ae ca 21 24 1b 2d 80 58 82 4f cd c3 ea a6   C...!$.-.X.O....
00a0  dc bc 57 3d e4 d4 0e 89 92 28 d8 d5 1f 03 d6 1a   ..W=.....(......
00b0  e6 e1 87 dd 03 7b 65 ab 05 63 3b c1 69 9f 33 32   .....{e..c;.i.32
00c0  42 bd 98 3a 1b d6 0a b4 95 17 59 43 11 b1 ca 59   B..:......YC...Y
00d0  af 79 f3 16 c8 64 a6 8d 56 4b db 93 0a 6c 71 4d   .y...d..VK...lqM
00e0  ab 0a aa e6 05 3c 2c 68 06 55 7c 89 06 ef 6b 83   .....<,h.U|...k.
00f0  7b 1f 60 97 de f4 a9 72 15 21 ea 6d 17 7a e6 55   {.`....r.!.m.z.U
0100  bd 09 8e 9c ac c9 71 c6 2b 88 75 03 fa 74 29 03   ......q.+.u..t).
0110  4c 70 71 68 ee dd 78 54 58 3b 9f eb 5a 11 bc 95   Lpqh..xTX;..Z...
0120  25 be f0 1b 46 e8 e6 bb 3a ed 8a 13 9e dc c5 82   %...F...:.......
0130  68 d0 df 18 09 7d 53 75 fb 1e 7c c7 10 76 9f b5   h....}Su..|..v..
0140  eb cd 7e 84 79 aa ae d8 e7 12 b5 43 b2 9c 9e 64   ..~.y......C...d
0150  03 4a a6 5d 4d 24 bc 8a 72 fb b2 77 7c 6d 15 d2   .J.]M$..r..w|m..
0160  64 a3                                             d.

Frame 15 (934 bytes on wire, 934 bytes captured)
    Arrival Time: Aug 14, 2003 18:01:39.356258000
    Time delta from previous packet: 0.038463000 seconds
    Time relative to first packet: 27.107729000 seconds
    Frame Number: 15
    Packet Length: 934 bytes
    Capture Length: 934 bytes
Ethernet II, Src: 00:40:63:c1:11:ad, Dst: 00:20:6f:09:60:0e
    Destination: 00:20:6f:09:60:0e (00:20:6f:09:60:0e)
    Source: 00:40:63:c1:11:ad (00:40:63:c1:11:ad)
    Type: IP (0x0800)
Internet Protocol, Src Addr: 63.202.92.133 (63.202.92.133), Dst Addr: 211.20.96.195 (211.20.96.195)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 920
    Identification: 0x0094 (148)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: ESP (0x32)
    Header checksum: 0xa679 (correct)
    Source: 63.202.92.133 (63.202.92.133)
    Destination: 211.20.96.195 (211.20.96.195)
Encapsulating Security Payload
    SPI: 0x9405eb2f
    Sequence: 0x00000002
    Data (892 bytes)

0000  00 20 6f 09 60 0e 00 40 63 c1 11 ad 08 00 45 00   . o.`..@c.....E.
0010  03 98 00 94 00 00 40 32 a6 79 3f ca 5c 85 d3 14   ......@2.y?.\...
0020  60 c3 94 05 eb 2f 00 00 00 02 c1 9c 40 d0 89 5a   `..../......@..Z
0030  80 4b 36 51 8f 19 25 33 6b ab 4a ab f5 f9 4e 5c   .K6Q..%3k.J...N\
0040  03 f6 88 e5 48 62 4e d7 3e 01 20 a0 2a f9 12 7f   ....HbN.>. .*...
0050  6d 6c b3 af 68 43 3f 71 3f 4a 9e 4c 01 5a 5a eb   ml..hC?q?J.L.ZZ.
0060  c8 e3 5e 8d 1b 93 3f 71 33 5b 60 ba 0f b1 b3 0e   ..^...?q3[`.....
0070  ce e6 74 c2 e5 b4 1f 2b db 56 ea ba cf 3c 49 c1   ..t....+.V...<I.
0080  03 62 5c 5b 78 52 d6 d3 d6 94 4d e0 68 f5 84 9e   .b\[xR....M.h...
0090  c8 6d 00 7e 81 9a dc f6 80 4f 70 b2 b5 a8 cc 13   .m.~.....Op.....
00a0  93 aa d7 d9 78 22 70 fc 4a e2 e2 6e 4e df 08 e1   ....x"p.J..nN...
00b0  6f c4 a7 7b 77 65 f4 ea e0 1d 34 a2 2f 95 ad a8   o..{we....4./...
00c0  8c 4b 28 43 03 1c 9a e2 f4 b8 e2 48 6b e2 d1 e8   .K(C.......Hk...
00d0  aa 8a f2 bf e6 9d 1d c5 d1 f4 38 6d 03 38 1f a3   ..........8m.8..
00e0  6a 0e 89 73 b0 05 47 da e0 40 6e 9f e6 66 1e 5b   j..s..G..@n..f.[
00f0  3b dd 12 6f a8 e0 0f ae ab aa 8e 84 a9 dc 4d 9a   ;..o..........M.
0100  a2 e4 08 25 63 85 e6 02 f2 83 6d 35 42 9a da a7   ...%c.....m5B...
0110  47 26 64 38 4b 95 b0 13 20 dc a7 86 a5 c4 b5 e1   G&d8K... .......
0120  d6 35 64 32 eb 88 9b 85 eb 4a c5 c2 a5 46 76 a5   .5d2.....J...Fv.
0130  19 b0 c7 0f a5 b0 5f 99 d1 17 98 80 81 21 cf 49   ......_......!.I
0140  f3 80 93 3d d8 0c 62 d4 67 1f 99 b2 df 3f 43 49   ...=..b.g....?CI
0150  20 27 c3 b2 76 00 f2 95 0a b1 2f b8 b0 d3 0d cd    '..v...../.....
0160  18 b6 2f 70 68 33 12 85 7e 37 cf 6d 02 6e 65 98   ../ph3..~7.m.ne.
0170  22 12 75 5e 4e 3d 2e ac d8 18 71 57 b8 55 9b d8   ".u^N=....qW.U..
0180  6f 64 46 16 8c ed a2 a5 e3 ec 21 ec 94 ec 94 33   odF.......!....3
0190  3b 39 22 36 a5 e7 05 6b 47 9c b9 68 07 36 a8 93   ;9"6...kG..h.6..
01a0  6b af b0 5e 5f 65 9e 05 d8 28 01 82 2c 37 d0 7f   k..^_e...(..,7..
01b0  e8 26 e9 29 6d 0c 34 d5 50 51 4f 26 a7 70 d3 6a   .&.)m.4.PQO&.p.j
01c0  16 25 cf 7d ab ac 50 bd 34 e7 82 90 3b 06 41 2c   .%.}..P.4...;.A,
01d0  2e a7 53 e7 f1 d0 cd 7f 6d c1 eb c3 86 f9 21 9d   ..S.....m.....!.
01e0  f0 f4 76 3c 75 84 54 08 26 7d 1c 2f f7 2d f8 f3   ..v<u.T.&}./.-..
01f0  f0 ab c4 6e 91 4b 70 4a 6d e3 fd e7 53 fc e3 11   ...n.KpJm...S...
0200  02 c2 85 e1 af 7d d1 3d b2 48 2e 36 03 1c 6c 48   .....}.=.H.6..lH
0210  df 58 92 73 11 d6 6e 73 c6 d9 2e cf 45 38 b1 4b   .X.s..ns....E8.K
0220  83 e7 c4 80 42 c4 82 da d4 04 f8 25 3b 04 55 86   ....B......%;.U.
0230  de 04 55 67 a1 e5 99 10 26 94 b8 ce 9e 55 46 a3   ..Ug....&....UF.
0240  31 14 93 05 46 6f ed 1b 3e 67 95 cf 95 26 9d 27   1...Fo..>g...&.'
0250  60 44 8b 06 df 9e 25 aa 68 53 60 b4 0a a8 6b 21   `D....%.hS`...k!
0260  1e 00 18 57 3e 85 1f 22 65 ba 61 a5 72 b1 f2 cf   ...W>.."e.a.r...
0270  cd 22 cd 90 32 8a 69 61 b9 72 ba 48 1e 07 30 1f   ."..2.ia.r.H..0.
0280  0f d5 f5 67 2d 86 13 5f 60 0c 68 0c 26 c0 ae 10   ...g-.._`.h.&...
0290  c9 28 60 36 54 bf 7c be 27 f2 c1 88 22 96 cc 55   .(`6T.|.'..."..U
02a0  17 e8 e5 91 55 01 83 1f cf 1e a2 fc b7 4f 61 59   ....U........OaY
02b0  9f 8f cd 18 2d 16 c6 fc 1b 5e e8 ed 32 37 94 f9   ....-....^..27..
02c0  0e a3 05 a7 5f 01 45 b5 cc ce 38 06 6e 07 ed 24   ...._.E...8.n..$
02d0  2b bd 60 ff 45 13 25 3b d7 4f 5f e6 0c fa 3e 0e   +.`.E.%;.O_...>.
02e0  da 97 31 75 f6 93 e8 c4 9b e8 c2 5f 4e ac 9e 39   ..1u......._N..9
02f0  da 8a 8b 72 1a 1f 07 a5 7d 7f 77 24 b0 d3 8c 72   ...r....}.w$...r
0300  de ea 77 ea 96 25 2b af d0 17 6b fc a2 11 39 78   ..w..%+...k...9x
0310  04 a2 bf ee e8 92 09 25 9c e7 4b 57 30 38 44 aa   .......%..KW08D.
0320  fc dc df 76 4c af 68 16 36 a1 20 74 cc fe 05 84   ...vL.h.6. t....
0330  80 14 dc e8 5e b9 44 d4 08 79 3b 62 0c 2b ba fe   ....^.D..y;b.+..
0340  db 90 11 df 06 7e 10 21 b9 64 41 ea 96 d1 a2 4b   .....~.!.dA....K
0350  3b 0b 4f 3a ae a1 a0 58 24 88 c5 36 0f f3 9f 16   ;.O:...X$..6....
0360  63 ac 45 22 18 38 8d ea fb 87 b3 f1 b6 ad 10 78   c.E".8.........x
0370  a4 99 1a 2b 4f b2 48 ba a0 44 d5 2a 52 5b fb 8d   ...+O.H..D.*R[..
0380  bf 64 96 ad 12 c1 64 0b c4 27 a4 7f 09 99 72 3b   .d....d..'....r;
0390  a7 37 c9 7c d7 03 93 2c f9 4e 44 ce 24 b5 95 a8   .7.|...,.ND.$...
03a0  67 92 61 9d 50 d4                                 g.a.P.

Frame 16 (110 bytes on wire, 110 bytes captured)
    Arrival Time: Aug 14, 2003 18:01:39.356527000
    Time delta from previous packet: 0.000269000 seconds
    Time relative to first packet: 27.107998000 seconds
    Frame Number: 16
    Packet Length: 110 bytes
    Capture Length: 110 bytes
Ethernet II, Src: 00:40:63:c1:11:ad, Dst: 00:20:6f:09:60:0e
    Destination: 00:20:6f:09:60:0e (00:20:6f:09:60:0e)
    Source: 00:40:63:c1:11:ad (00:40:63:c1:11:ad)
    Type: IP (0x0800)
Internet Protocol, Src Addr: 63.202.92.133 (63.202.92.133), Dst Addr: 211.20.96.195 (211.20.96.195)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 96
    Identification: 0x0095 (149)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: ESP (0x32)
    Header checksum: 0xa9b0 (correct)
    Source: 63.202.92.133 (63.202.92.133)
    Destination: 211.20.96.195 (211.20.96.195)
Encapsulating Security Payload
    SPI: 0x9405eb2f
    Sequence: 0x00000003
    Data (68 bytes)

0000  00 20 6f 09 60 0e 00 40 63 c1 11 ad 08 00 45 00   . o.`..@c.....E.
0010  00 60 00 95 00 00 40 32 a9 b0 3f ca 5c 85 d3 14   .`....@2..?.\...
0020  60 c3 94 05 eb 2f 00 00 00 03 d5 bf 02 0e 83 be   `..../..........
0030  b2 6a 78 73 bb ad 03 a4 21 c5 22 b9 18 e6 0b e2   .jxs....!.".....
0040  eb ff de af 18 89 b6 8f 94 12 d7 05 61 49 3a 4c   ............aI:L
0050  ca 24 b4 2c fc 43 1c a4 cd ad c4 ed f8 1a e5 ef   .$.,.C..........
0060  58 2b c3 e9 4d 13 2a 5e ca 73 15 07 9c 2c         X+..M.*^.s...,

Frame 17 (114 bytes on wire, 114 bytes captured)
    Arrival Time: Aug 14, 2003 18:01:39.628811000
    Time delta from previous packet: 0.272284000 seconds
    Time relative to first packet: 27.380282000 seconds
    Frame Number: 17
    Packet Length: 114 bytes
    Capture Length: 114 bytes
Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad
    Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad)
    Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e)
    Type: IP (0x0800)
    Trailer: A2108FB6
Internet Protocol, Src Addr: 211.20.96.195 (211.20.96.195), Dst Addr: 63.202.92.133 (63.202.92.133)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 96
    Identification: 0xc47d (50301)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 45
    Protocol: ESP (0x32)
    Header checksum: 0xf8c7 (correct)
    Source: 211.20.96.195 (211.20.96.195)
    Destination: 63.202.92.133 (63.202.92.133)
Encapsulating Security Payload
    SPI: 0x096de0cf
    Sequence: 0x00000004
    Data (68 bytes)

0000  00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00   .@c.... o.`...E.
0010  00 60 c4 7d 00 00 2d 32 f8 c7 d3 14 60 c3 3f ca   .`.}..-2....`.?.
0020  5c 85 09 6d e0 cf 00 00 00 04 f4 f5 f6 f7 f8 f9   \..m............
0030  fa fb 7f bf 88 4b 43 4f 73 c9 52 e0 11 47 44 b4   .....KCOs.R..GD.
0040  3c 4d 43 e1 5a 2f b5 4e 12 79 42 97 c1 5e 50 b1   <MC.Z/.N.yB..^P.
0050  3d 07 d8 5e 7d b6 04 45 ea 6c 24 c8 7e 92 8d 98   =..^}..E.l$.~...
0060  6a ef 85 c4 23 69 97 e8 ec b9 51 8e 75 56 a2 10   j...#i....Q.uV..
0070  8f b6                                             ..

Frame 18 (110 bytes on wire, 110 bytes captured)
    Arrival Time: Aug 14, 2003 18:01:54.358507000
    Time delta from previous packet: 14.729696000 seconds
    Time relative to first packet: 42.109978000 seconds
    Frame Number: 18
    Packet Length: 110 bytes
    Capture Length: 110 bytes
Ethernet II, Src: 00:40:63:c1:11:ad, Dst: 00:20:6f:09:60:0e
    Destination: 00:20:6f:09:60:0e (00:20:6f:09:60:0e)
    Source: 00:40:63:c1:11:ad (00:40:63:c1:11:ad)
    Type: IP (0x0800)
Internet Protocol, Src Addr: 63.202.92.133 (63.202.92.133), Dst Addr: 211.20.96.195 (211.20.96.195)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 96
    Identification: 0x0096 (150)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: ESP (0x32)
    Header checksum: 0xa9af (correct)
    Source: 63.202.92.133 (63.202.92.133)
    Destination: 211.20.96.195 (211.20.96.195)
Encapsulating Security Payload
    SPI: 0x9405eb2f
    Sequence: 0x00000004
    Data (68 bytes)

0000  00 20 6f 09 60 0e 00 40 63 c1 11 ad 08 00 45 00   . o.`..@c.....E.
0010  00 60 00 96 00 00 40 32 a9 af 3f ca 5c 85 d3 14   .`....@2..?.\...
0020  60 c3 94 05 eb 2f 00 00 00 04 63 29 e8 47 50 b3   `..../....c).GP.
0030  1b 33 12 77 17 98 fb 45 4b af 84 6f bb fc 6b da   .3.w...EK..o..k.
0040  0d df 51 55 6c dd 35 c8 0d 0f a0 ae f3 99 40 df   ..QUl.5.......@.
0050  07 fa 0e 14 77 2c e9 c0 e0 d2 6f 3e ff 63 e7 b7   ....w,....o>.c..
0060  b4 53 a9 41 c7 09 7a ab a8 7b 74 66 57 f9         .S.A..z..{tfW.

Frame 19 (114 bytes on wire, 114 bytes captured)
    Arrival Time: Aug 14, 2003 18:01:54.580478000
    Time delta from previous packet: 0.221971000 seconds
    Time relative to first packet: 42.331949000 seconds
    Frame Number: 19
    Packet Length: 114 bytes
    Capture Length: 114 bytes
Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad
    Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad)
    Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e)
    Type: IP (0x0800)
    Trailer: FBF761E5
Internet Protocol, Src Addr: 211.20.96.195 (211.20.96.195), Dst Addr: 63.202.92.133 (63.202.92.133)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 96
    Identification: 0xc47e (50302)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 45
    Protocol: ESP (0x32)
    Header checksum: 0xf8c6 (correct)
    Source: 211.20.96.195 (211.20.96.195)
    Destination: 63.202.92.133 (63.202.92.133)
Encapsulating Security Payload
    SPI: 0x096de0cf
    Sequence: 0x00000005
    Data (68 bytes)

0000  00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00   .@c.... o.`...E.
0010  00 60 c4 7e 00 00 2d 32 f8 c6 d3 14 60 c3 3f ca   .`.~..-2....`.?.
0020  5c 85 09 6d e0 cf 00 00 00 05 d1 d2 d3 d4 d5 d6   \..m............
0030  d7 d8 4f 4b f0 d0 56 53 1c 7d 11 44 1f c0 3f 7e   ..OK..VS.}.D..?~
0040  69 b7 4c 07 f5 80 18 56 35 6b d8 41 02 fb 59 71   i.L....V5k.A..Yq
0050  56 ef d9 eb 59 47 4c a3 c1 b1 5f 5a cf 87 da 31   V...YGL..._Z...1
0060  f1 04 e0 9a 73 32 a7 e6 81 49 9a e3 be 44 fb f7   ....s2...I...D..
0070  61 e5                                             a.

Frame 20 (114 bytes on wire, 114 bytes captured)
    Arrival Time: Aug 14, 2003 18:01:54.631194000
    Time delta from previous packet: 0.050716000 seconds
    Time relative to first packet: 42.382665000 seconds
    Frame Number: 20
    Packet Length: 114 bytes
    Capture Length: 114 bytes
Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad
    Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad)
    Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e)
    Type: IP (0x0800)
    Trailer: 36F5035B
Internet Protocol, Src Addr: 211.20.96.195 (211.20.96.195), Dst Addr: 63.202.92.133 (63.202.92.133)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 96
    Identification: 0xc47f (50303)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 45
    Protocol: ESP (0x32)
    Header checksum: 0xf8c5 (correct)
    Source: 211.20.96.195 (211.20.96.195)
    Destination: 63.202.92.133 (63.202.92.133)
Encapsulating Security Payload
    SPI: 0x096de0cf
    Sequence: 0x00000006
    Data (68 bytes)

0000  00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00   .@c.... o.`...E.
0010  00 60 c4 7f 00 00 2d 32 f8 c5 d3 14 60 c3 3f ca   .`....-2....`.?.
0020  5c 85 09 6d e0 cf 00 00 00 06 d6 d7 d8 d9 da db   \..m............
0030  dc dd c9 27 88 e8 f7 bb 55 29 b9 3b 09 b6 7c 3a   ...'....U).;..|:
0040  b0 c0 eb 44 0c f3 9e a4 8b ce 48 45 a4 d5 a6 30   ...D......HE...0
0050  4e ac 7f ec 7d ea aa 4e ab ac 38 ae 55 56 74 65   N...}..N..8.UVte
0060  29 dd 11 4c 7a 34 27 52 46 70 93 b6 95 98 36 f5   )..Lz4'RFp....6.
0070  03 5b                                             .[

Frame 21 (394 bytes on wire, 394 bytes captured)
    Arrival Time: Aug 14, 2003 18:04:13.195159000
    Time delta from previous packet: 138.563965000 seconds
    Time relative to first packet: 180.946630000 seconds
    Frame Number: 21
    Packet Length: 394 bytes
    Capture Length: 394 bytes
Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad
    Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad)
    Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e)
    Type: IP (0x0800)
    Trailer: A826DDAC
Internet Protocol, Src Addr: 211.20.96.195 (211.20.96.195), Dst Addr: 63.202.92.133 (63.202.92.133)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 376
    Identification: 0x0000 (0)
    Flags: 0x04
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 45
    Protocol: UDP (0x11)
    Header checksum: 0x7c4e (correct)
    Source: 211.20.96.195 (211.20.96.195)
    Destination: 63.202.92.133 (63.202.92.133)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 356
    Checksum: 0x3d9e (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x8C03B04B4B2EF791
    Responder cookie: 0xE71B170929A1400D
    Next payload: Hash (8)
    Version: 1.0
    Exchange type: Quick Mode (32)
    Flags
        .... ...1 = Encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0xF080A10F
    Length: 348
    Encrypted payload (320 bytes)

0000  00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00   .@c.... o.`...E.
0010  01 78 00 00 40 00 2d 11 7c 4e d3 14 60 c3 3f ca   .x..@.-.|N..`.?.
0020  5c 85 01 f4 01 f4 01 64 3d 9e 8c 03 b0 4b 4b 2e   \......d=....KK.
0030  f7 91 e7 1b 17 09 29 a1 40 0d 08 10 20 01 f0 80   ......).@... ...
0040  a1 0f 00 00 01 5c 05 f0 73 dc de e5 0a d6 fa 1d   .....\..s.......
0050  3f a5 c1 42 01 46 6f 19 f8 8f 70 a8 53 a4 31 69   ?..B.Fo...p.S.1i
0060  40 4c 61 da c2 20 2b 2b 89 4a 5a 6d ad 64 bc 97   @La.. ++.JZm.d..
0070  5a ad b2 a7 ee 42 21 82 96 87 d4 f5 6f c6 21 cf   Z....B!.....o.!.
0080  ff da df 8d 58 c7 14 72 a0 bb 10 a1 e9 29 0a 35   ....X..r.....).5
0090  e8 17 b7 f8 52 e4 71 6d f6 1d 2e 8b 33 27 b9 3f   ....R.qm....3'.?
00a0  bd 42 41 75 61 65 dc 4b cf bb 91 38 33 e4 e5 32   .BAuae.K...83..2
00b0  5b 80 dc 92 ef db 69 28 42 fe df 92 0a 83 7f ce   [.....i(B.......
00c0  42 bc 63 66 a6 83 d0 57 c0 8e 1a d2 e5 9c d9 c0   B.cf...W........
00d0  d9 5c 65 4b e3 83 6b d1 3e 3c d0 f4 6f 1d 89 a9   .\eK..k.><..o...
00e0  4a 4f e6 9d f2 02 cd f2 71 b1 7d 1f f4 ef 82 86   JO......q.}.....
00f0  bd de 2a 59 46 e4 fe df 4d 5e f3 fa 7c 5b c0 c2   ..*YF...M^..|[..
0100  5d ea 4d 32 91 d3 2e 52 c7 8d 32 8a 86 08 d3 9a   ].M2...R..2.....
0110  3b 2f 53 9b 75 1f a3 e7 86 cb 8b f1 c6 2b b7 04   ;/S.u........+..
0120  dc b7 b6 3c 65 76 e4 32 8b 10 1d 73 fb 6c 9a 94   ...<ev.2...s.l..
0130  b2 de 7e bc d6 59 6e 00 9b 8a 72 13 4b 03 57 7d   ..~..Yn...r.K.W}
0140  5c a4 0b 20 4b f3 43 31 4a fb cd 92 df 92 b3 fc   \.. K.C1J.......
0150  5f d0 7e 4b a5 06 92 bb 83 f5 70 d6 8a 56 08 81   _.~K......p..V..
0160  10 1b 23 ae 42 16 d1 af d1 2b c9 96 17 08 0e a9   ..#.B....+......
0170  e6 13 65 cd 59 0e 18 ff a6 a0 a8 4f 8e b1 b7 09   ..e.Y......O....
0180  30 d0 04 a3 df f3 a8 26 dd ac                     0......&..

Frame 22 (326 bytes on wire, 326 bytes captured)
    Arrival Time: Aug 14, 2003 18:04:13.280574000
    Time delta from previous packet: 0.085415000 seconds
    Time relative to first packet: 181.032045000 seconds
    Frame Number: 22
    Packet Length: 326 bytes
    Capture Length: 326 bytes
Ethernet II, Src: 00:40:63:c1:11:ad, Dst: 00:20:6f:09:60:0e
    Destination: 00:20:6f:09:60:0e (00:20:6f:09:60:0e)
    Source: 00:40:63:c1:11:ad (00:40:63:c1:11:ad)
    Type: IP (0x0800)
Internet Protocol, Src Addr: 63.202.92.133 (63.202.92.133), Dst Addr: 211.20.96.195 (211.20.96.195)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 312
    Identification: 0x0099 (153)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0xa8f5 (correct)
    Source: 63.202.92.133 (63.202.92.133)
    Destination: 211.20.96.195 (211.20.96.195)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 292
    Checksum: 0x8820 (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x8C03B04B4B2EF791
    Responder cookie: 0xE71B170929A1400D
    Next payload: Hash (8)
    Version: 1.0
    Exchange type: Quick Mode (32)
    Flags
        .... ...1 = Encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0xF080A10F
    Length: 284
    Encrypted payload (256 bytes)

0000  00 20 6f 09 60 0e 00 40 63 c1 11 ad 08 00 45 00   . o.`..@c.....E.
0010  01 38 00 99 00 00 40 11 a8 f5 3f ca 5c 85 d3 14   .8....@...?.\...
0020  60 c3 01 f4 01 f4 01 24 88 20 8c 03 b0 4b 4b 2e   `......$. ...KK.
0030  f7 91 e7 1b 17 09 29 a1 40 0d 08 10 20 01 f0 80   ......).@... ...
0040  a1 0f 00 00 01 1c ab c0 f0 49 1b 3f d9 02 ae ec   .........I.?....
0050  26 d8 f2 ec 0b ed 64 b0 b8 71 55 14 6a a5 22 f8   &.....d..qU.j.".
0060  2d f1 09 cc 7e 4c 11 8d 85 b4 ff 62 90 d7 01 1d   -...~L.....b....
0070  31 0f 46 3c 5b e5 3e a5 94 b4 63 97 00 03 20 be   1.F<[.>...c... .
0080  fb 2c b7 3c 07 e2 d8 bd 84 76 87 d9 5c 70 36 c1   .,.<.....v..\p6.
0090  c8 38 aa 56 20 e5 8e b7 f2 b9 c1 d7 92 92 97 f8   .8.V ...........
00a0  6d 2f 1e e3 3e 83 01 35 4f e8 ac 0a 3e b3 c0 7a   m/..>..5O...>..z
00b0  58 b6 63 f4 5e 3a 95 9d 67 b9 a6 af 0a c9 2e 67   X.c.^:..g......g
00c0  87 bc cd ad 4c 9b 50 a6 df 44 67 25 c9 bb 8e e6   ....L.P..Dg%....
00d0  15 13 6f 59 0a 83 7e 87 63 2e bd b2 be 84 8d 9d   ..oY..~.c.......
00e0  5a 7f dc 53 bb 3e f1 a3 a9 65 af 88 0f 84 a3 ae   Z..S.>...e......
00f0  83 92 63 27 fb 20 9b 77 14 3b b6 38 b2 57 e0 97   ..c'. .w.;.8.W..
0100  e7 d6 98 31 4d 9d 89 c5 89 ad d0 59 59 67 5a ac   ...1M......YYgZ.
0110  a0 8b a8 ad 86 c3 81 39 ad 1c 38 0a f7 bc 60 68   .......9..8...`h
0120  63 e1 7c ca d1 9f bf 18 84 9d ae 24 14 ed 09 84   c.|........$....
0130  c0 2a 04 7e d6 7f d3 17 dc 9f c3 df f1 76 53 e6   .*.~.........vS.
0140  6d e4 ed f9 61 58                                 m...aX

Frame 23 (98 bytes on wire, 98 bytes captured)
    Arrival Time: Aug 14, 2003 18:04:13.583574000
    Time delta from previous packet: 0.303000000 seconds
    Time relative to first packet: 181.335045000 seconds
    Frame Number: 23
    Packet Length: 98 bytes
    Capture Length: 98 bytes
Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad
    Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad)
    Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e)
    Type: IP (0x0800)
    Trailer: 90B9BC03
Internet Protocol, Src Addr: 211.20.96.195 (211.20.96.195), Dst Addr: 63.202.92.133 (63.202.92.133)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 80
    Identification: 0x0000 (0)
    Flags: 0x04
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 45
    Protocol: UDP (0x11)
    Header checksum: 0x7d76 (correct)
    Source: 211.20.96.195 (211.20.96.195)
    Destination: 63.202.92.133 (63.202.92.133)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 60
    Checksum: 0x81d9 (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x8C03B04B4B2EF791
    Responder cookie: 0xE71B170929A1400D
    Next payload: Hash (8)
    Version: 1.0
    Exchange type: Quick Mode (32)
    Flags
        .... ...1 = Encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0xF080A10F
    Length: 52
    Encrypted payload (24 bytes)

0000  00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00   .@c.... o.`...E.
0010  00 50 00 00 40 00 2d 11 7d 76 d3 14 60 c3 3f ca   .P..@.-.}v..`.?.
0020  5c 85 01 f4 01 f4 00 3c 81 d9 8c 03 b0 4b 4b 2e   \......<.....KK.
0030  f7 91 e7 1b 17 09 29 a1 40 0d 08 10 20 01 f0 80   ......).@... ...
0040  a1 0f 00 00 00 34 e9 23 1a 0c 34 15 5c 12 39 82   .....4.#..4.\.9.
0050  4c fc ce 85 cf 35 38 09 87 a9 09 16 88 7a 90 b9   L....58......z..
0060  bc 03                                             ..

Frame 24 (114 bytes on wire, 114 bytes captured)
    Arrival Time: Aug 14, 2003 18:04:14.586370000
    Time delta from previous packet: 1.002796000 seconds
    Time relative to first packet: 182.337841000 seconds
    Frame Number: 24
    Packet Length: 114 bytes
    Capture Length: 114 bytes
Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad
    Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad)
    Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e)
    Type: IP (0x0800)
    Trailer: CBD6D4A3
Internet Protocol, Src Addr: 211.20.96.195 (211.20.96.195), Dst Addr: 63.202.92.133 (63.202.92.133)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 96
    Identification: 0x0000 (0)
    Flags: 0x04
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 45
    Protocol: UDP (0x11)
    Header checksum: 0x7d66 (correct)
    Source: 211.20.96.195 (211.20.96.195)
    Destination: 63.202.92.133 (63.202.92.133)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 76
    Checksum: 0xf95e (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x8C03B04B4B2EF791
    Responder cookie: 0xE71B170929A1400D
    Next payload: Hash (8)
    Version: 1.0
    Exchange type: Informational (5)
    Flags
        .... ...1 = Encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0xD9E7B55C
    Length: 68
    Encrypted payload (40 bytes)

0000  00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00   .@c.... o.`...E.
0010  00 60 00 00 40 00 2d 11 7d 66 d3 14 60 c3 3f ca   .`..@.-.}f..`.?.
0020  5c 85 01 f4 01 f4 00 4c f9 5e 8c 03 b0 4b 4b 2e   \......L.^...KK.
0030  f7 91 e7 1b 17 09 29 a1 40 0d 08 10 05 01 d9 e7   ......).@.......
0040  b5 5c 00 00 00 44 76 dc ab a9 c6 76 b7 1e 6d d4   .\...Dv....v..m.
0050  da 11 74 84 f2 d2 92 0d 0d 2a a4 58 1c 1c 3e c0   ..t......*.X..>.
0060  06 bc 6d 67 6e d0 27 53 d0 26 4e 9b 97 9c cb d6   ..mgn.'S.&N.....
0070  d4 a3                                             ..

Frame 25 (122 bytes on wire, 122 bytes captured)
    Arrival Time: Aug 14, 2003 18:04:24.922240000
    Time delta from previous packet: 10.335870000 seconds
    Time relative to first packet: 192.673711000 seconds
    Frame Number: 25
    Packet Length: 122 bytes
    Capture Length: 122 bytes
Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad
    Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad)
    Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e)
    Type: IP (0x0800)
    Trailer: 93CF410D
Internet Protocol, Src Addr: 211.20.96.195 (211.20.96.195), Dst Addr: 63.202.92.133 (63.202.92.133)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 104
    Identification: 0xc480 (50304)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 45
    Protocol: ESP (0x32)
    Header checksum: 0xf8bc (correct)
    Source: 211.20.96.195 (211.20.96.195)
    Destination: 63.202.92.133 (63.202.92.133)
Encapsulating Security Payload
    SPI: 0x0308d869
    Sequence: 0x00000001
    Data (76 bytes)

0000  00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00   .@c.... o.`...E.
0010  00 68 c4 80 00 00 2d 32 f8 bc d3 14 60 c3 3f ca   .h....-2....`.?.
0020  5c 85 03 08 d8 69 00 00 00 01 c6 c7 c8 c9 ca cb   \....i..........
0030  cc cd 88 99 04 6c 69 6e ea b4 12 bf 00 35 38 22   .....lin.....58"
0040  3d 51 61 ac 89 50 75 6e 98 6a d4 b7 be 2b ae 72   =Qa..Pun.j...+.r
0050  53 c6 e5 87 9c bd 1e 57 78 9c c0 d7 7f 42 04 d3   S......Wx....B..
0060  6d 3a 5e 72 5f 0a 8b 7c 0e 86 a0 aa 1e 7e 80 9e   m:^r_..|.....~..
0070  b3 95 cf fd 30 59 93 cf 41 0d                     ....0Y..A.

Frame 26 (110 bytes on wire, 110 bytes captured)
    Arrival Time: Aug 14, 2003 18:04:24.922824000
    Time delta from previous packet: 0.000584000 seconds
    Time relative to first packet: 192.674295000 seconds
    Frame Number: 26
    Packet Length: 110 bytes
    Capture Length: 110 bytes
Ethernet II, Src: 00:40:63:c1:11:ad, Dst: 00:20:6f:09:60:0e
    Destination: 00:20:6f:09:60:0e (00:20:6f:09:60:0e)
    Source: 00:40:63:c1:11:ad (00:40:63:c1:11:ad)
    Type: IP (0x0800)
Internet Protocol, Src Addr: 63.202.92.133 (63.202.92.133), Dst Addr: 211.20.96.195 (211.20.96.195)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 96
    Identification: 0x009a (154)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: ESP (0x32)
    Header checksum: 0xa9ab (correct)
    Source: 63.202.92.133 (63.202.92.133)
    Destination: 211.20.96.195 (211.20.96.195)
Encapsulating Security Payload
    SPI: 0x9405eb31
    Sequence: 0x00000001
    Data (68 bytes)

0000  00 20 6f 09 60 0e 00 40 63 c1 11 ad 08 00 45 00   . o.`..@c.....E.
0010  00 60 00 9a 00 00 40 32 a9 ab 3f ca 5c 85 d3 14   .`....@2..?.\...
0020  60 c3 94 05 eb 31 00 00 00 01 d3 81 53 8c 4c 84   `....1......S.L.
0030  5c a2 f0 fe 8b 8e dc 2e e3 d5 d5 79 e3 14 fd 8e   \..........y....
0040  4c fe 55 ca a8 84 48 af 9d bd c9 2d ca 37 e3 ea   L.U...H....-.7..
0050  f7 5e 72 74 b3 5c 9c 1b 0b 8c 43 55 57 ab 96 e1   .^rt.\....CUW...
0060  13 c1 a5 79 cb c5 e5 a0 84 af 9d 49 27 e6         ...y.......I'.

Frame 27 (114 bytes on wire, 114 bytes captured)
    Arrival Time: Aug 14, 2003 18:04:25.136484000
    Time delta from previous packet: 0.213660000 seconds
    Time relative to first packet: 192.887955000 seconds
    Frame Number: 27
    Packet Length: 114 bytes
    Capture Length: 114 bytes
Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad
    Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad)
    Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e)
    Type: IP (0x0800)
    Trailer: 4DA08040
Internet Protocol, Src Addr: 211.20.96.195 (211.20.96.195), Dst Addr: 63.202.92.133 (63.202.92.133)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 96
    Identification: 0xc481 (50305)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 45
    Protocol: ESP (0x32)
    Header checksum: 0xf8c3 (correct)
    Source: 211.20.96.195 (211.20.96.195)
    Destination: 63.202.92.133 (63.202.92.133)
Encapsulating Security Payload
    SPI: 0x0308d869
    Sequence: 0x00000002
    Data (68 bytes)

0000  00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00   .@c.... o.`...E.
0010  00 60 c4 81 00 00 2d 32 f8 c3 d3 14 60 c3 3f ca   .`....-2....`.?.
0020  5c 85 03 08 d8 69 00 00 00 02 dc dd de df e0 e1   \....i..........
0030  e2 e3 6e 4d ae 31 b5 62 a2 c0 54 8f b6 5f d9 a6   ..nM.1.b..T.._..
0040  4f c6 b5 00 2a 4d 52 74 f4 2c b3 19 22 76 80 4b   O...*MRt.,.."v.K
0050  48 63 bd 10 23 5d 28 21 f9 c2 fb f7 74 7b b6 95   Hc..#](!....t{..
0060  7f 06 f2 fa 12 12 22 bd 98 f5 26 ce 4b 37 4d a0   ......"...&.K7M.
0070  80 40                                             .@

Frame 28 (306 bytes on wire, 306 bytes captured)
    Arrival Time: Aug 14, 2003 18:04:25.146478000
    Time delta from previous packet: 0.009994000 seconds
    Time relative to first packet: 192.897949000 seconds
    Frame Number: 28
    Packet Length: 306 bytes
    Capture Length: 306 bytes
Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad
    Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad)
    Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e)
    Type: IP (0x0800)
    Trailer: 397A9A8E
Internet Protocol, Src Addr: 211.20.96.195 (211.20.96.195), Dst Addr: 63.202.92.133 (63.202.92.133)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 288
    Identification: 0xc482 (50306)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 45
    Protocol: ESP (0x32)
    Header checksum: 0xf802 (correct)
    Source: 211.20.96.195 (211.20.96.195)
    Destination: 63.202.92.133 (63.202.92.133)
Encapsulating Security Payload
    SPI: 0x0308d869
    Sequence: 0x00000003
    Data (260 bytes)

0000  00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00   .@c.... o.`...E.
0010  01 20 c4 82 00 00 2d 32 f8 02 d3 14 60 c3 3f ca   . ....-2....`.?.
0020  5c 85 03 08 d8 69 00 00 00 03 dc dd de df e0 e1   \....i..........
0030  e2 e3 1c 7b 83 2c 5c 87 2d f0 32 d7 35 80 96 13   ...{.,\.-.2.5...
0040  6a 0e 9c 34 26 78 78 bf 17 6a 2f e7 b4 b7 75 e1   j..4&xx..j/...u.
0050  b0 0f ff 88 e5 b6 1f e6 29 16 8b 03 2c eb e4 0f   ........)...,...
0060  06 a3 83 f9 a1 3c 41 e9 a5 42 82 76 75 c9 d2 1f   .....<A..B.vu...
0070  ac a4 72 62 ca b5 dc 12 e7 4e f7 8d 9e 15 4c 08   ..rb.....N....L.
0080  0d a4 67 c0 14 7b 06 56 4a 9a 34 61 64 81 fb 2d   ..g..{.VJ.4ad..-
0090  a2 9f 6f 9e d1 ff 71 fc fa 2f d1 57 a6 95 18 4d   ..o...q../.W...M
00a0  20 7d e2 88 1d b6 ae 72 24 0f 58 83 57 c2 6c 14    }.....r$.X.W.l.
00b0  1b ea f1 5c 88 7f a5 81 aa 83 71 98 6a 28 f1 1c   ...\......q.j(..
00c0  98 86 4d a2 91 bd f8 bb e1 c0 91 6a 23 0e ba 3d   ..M........j#..=
00d0  dd ad 4b 61 de 41 b8 5e 3e 6f b4 23 dd 0a f8 d0   ..Ka.A.^>o.#....
00e0  88 54 df 87 a1 24 06 c1 fd f9 51 aa 46 f7 3d a8   .T...$....Q.F.=.
00f0  74 ed 5b fe 13 d4 78 31 19 60 20 1f 54 de 63 87   t.[...x1.` .T.c.
0100  24 de 8c 0e 0e 6a da ba 20 19 f7 d7 f3 ff 23 d6   $....j.. .....#.
0110  85 1b 86 01 50 89 1a 9a 79 27 25 b5 fa fc 1b 33   ....P...y'%....3
0120  4e c9 a1 aa ea 22 60 29 05 1b 0c fa 83 6c 39 7a   N...."`).....l9z
0130  9a 8e                                             ..

Frame 29 (934 bytes on wire, 934 bytes captured)
    Arrival Time: Aug 14, 2003 18:04:25.159930000
    Time delta from previous packet: 0.013452000 seconds
    Time relative to first packet: 192.911401000 seconds
    Frame Number: 29
    Packet Length: 934 bytes
    Capture Length: 934 bytes
Ethernet II, Src: 00:40:63:c1:11:ad, Dst: 00:20:6f:09:60:0e
    Destination: 00:20:6f:09:60:0e (00:20:6f:09:60:0e)
    Source: 00:40:63:c1:11:ad (00:40:63:c1:11:ad)
    Type: IP (0x0800)
Internet Protocol, Src Addr: 63.202.92.133 (63.202.92.133), Dst Addr: 211.20.96.195 (211.20.96.195)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 920
    Identification: 0x009b (155)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: ESP (0x32)
    Header checksum: 0xa672 (correct)
    Source: 63.202.92.133 (63.202.92.133)
    Destination: 211.20.96.195 (211.20.96.195)
Encapsulating Security Payload
    SPI: 0x9405eb31
    Sequence: 0x00000002
    Data (892 bytes)

0000  00 20 6f 09 60 0e 00 40 63 c1 11 ad 08 00 45 00   . o.`..@c.....E.
0010  03 98 00 9b 00 00 40 32 a6 72 3f ca 5c 85 d3 14   ......@2.r?.\...
0020  60 c3 94 05 eb 31 00 00 00 02 62 1c 13 86 1b 60   `....1....b....`
0030  0e 8a 9a f1 ea 9c 37 bf 18 a4 63 5c f5 c7 10 e7   ......7...c\....
0040  e0 7e e4 c7 2b fc 11 6f e0 4c 62 e2 46 b7 bd 2e   .~..+..o.Lb.F...
0050  71 b1 08 10 94 b3 b4 65 55 27 2e f5 b4 f9 af 15   q......eU'......
0060  21 de 00 ea 82 c9 7f fb 1c 32 92 0d c8 7b c8 48   !........2...{.H
0070  a1 7d 5b 6b 79 61 5d 33 5a 7f 51 7d 89 2e 3e 1d   .}[kya]3Z.Q}..>.
0080  02 ab 54 3a 94 c5 e8 05 5d 7d 24 2b bd 79 d8 88   ..T:....]}$+.y..
0090  b7 bd a8 c0 25 9f 0c 88 8f e8 7a 39 6f 86 c3 74   ....%.....z9o..t
00a0  c7 85 8d 84 27 11 f8 44 cd f4 82 d2 f5 35 ec 76   ....'..D.....5.v
00b0  79 db e0 3d f0 8f 94 32 16 e4 25 ad 99 49 22 8c   y..=...2..%..I".
00c0  76 3e 4a b6 05 e0 a4 0c 9b 78 e3 22 ea 54 c8 06   v>J......x.".T..
00d0  af 9c ca 04 a8 bd 0e 53 a5 77 ec ab 7c 19 1b 14   .......S.w..|...
00e0  e1 e0 e0 ee 72 a5 30 ed 59 69 0c 87 f1 37 99 68   ....r.0.Yi...7.h
00f0  45 fe 46 32 f4 c4 00 fa 53 e6 fe 8b bd 56 c5 da   E.F2....S....V..
0100  8c 22 4f e9 7e e7 ae 28 4f 03 ff 65 db 93 0b eb   ."O.~..(O..e....
0110  5e bc 91 af 2f ca 30 2e b3 f7 d7 6a 9c cf 50 3e   ^.../.0....j..P>
0120  e4 a6 9b 07 cf 79 44 2e 8e 24 38 5c fd 4c 3e 40   .....yD..$8\.L>@
0130  36 c6 90 99 fa 8e c3 80 d1 26 9a 60 2f f3 90 d8   6........&.`/...
0140  fc 43 27 4d 3d 3c 38 71 af 72 a0 41 79 bd 29 1b   .C'M=<8q.r.Ay.).
0150  5d 80 73 d3 31 f6 b8 bf 3e d6 e0 50 4f ed 52 1d   ].s.1...>..PO.R.
0160  ec 4f c0 4a 26 49 6a fc 0b 87 29 bd 6a e0 58 64   .O.J&Ij...).j.Xd
0170  44 74 4f e8 db 1c 88 3f 47 97 9e 6f 0b 6e cd e7   DtO....?G..o.n..
0180  f9 05 88 28 18 c2 7d 82 44 16 6a 12 4c 35 66 b0   ...(..}.D.j.L5f.
0190  c6 1f a0 a8 49 ca 47 0d d4 ba 8a 25 6d ad 2c 61   ....I.G....%m.,a
01a0  cf 55 73 6a 1b d8 d5 64 61 7d 85 40 45 55 c2 94   .Usj...da}.@EU..
01b0  e3 e4 a2 bc 0f c3 ad 28 4f e2 91 18 11 b7 c7 e3   .......(O.......
01c0  5a 7c 77 2d 3f a5 52 80 76 a3 8d bb b8 86 24 32   Z|w-?.R.v.....$2
01d0  6b 02 56 c6 e6 c5 dc 41 eb 10 00 9a b9 02 a2 0f   k.V....A........
01e0  db 3e 73 84 8d 58 81 21 b1 36 88 66 03 b5 61 2e   .>s..X.!.6.f..a.
01f0  a4 52 2d c2 5d 40 ef f1 c8 36 47 5b cd 3c 12 4a   .R-.]@...6G[.<.J
0200  a4 aa ba 4c bc ef 7e 02 9f a7 93 d1 68 7b 3e 61   ...L..~.....h{>a
0210  46 cd 3a 76 9b 24 38 cc 09 3d 7f 6f 92 79 72 1b   F.:v.$8..=.o.yr.
0220  40 91 d2 b2 b0 e3 d6 a5 df 53 24 24 9c bc d2 0b   @........S$$....
0230  30 5b 4b 04 a9 5a 02 b6 0e ac 80 4b 90 df 3c 9e   0[K..Z.....K..<.
0240  25 11 47 23 20 7e b1 47 b7 ab f3 fd c4 a5 60 04   %.G# ~.G......`.
0250  c7 4d 09 ce e1 d0 5f b0 ea d9 da 63 9c 2a 67 fc   .M...._....c.*g.
0260  ee bb de 47 a6 d1 75 e4 1d 57 5c 81 77 ed 53 71   ...G..u..W\.w.Sq
0270  c9 66 73 6c 5c c4 81 3a 1f 16 8e db 8f e1 b7 d0   .fsl\..:........
0280  09 58 1e 8b 78 63 12 c6 40 7a c4 f8 95 ac 96 36   .X..xc..@z.....6
0290  34 6b 21 f1 7b 8e cf ef 12 a1 d8 3f c8 2d 13 4a   4k!.{......?.-.J
02a0  57 a8 02 6f 7e dc 2b 3a 7f e0 c0 4e 80 e0 e4 85   W..o~.+:...N....
02b0  11 c3 09 8e 99 54 02 fe a0 a8 ef f2 d7 57 e8 50   .....T.......W.P
02c0  23 f9 72 8d e4 5a 5f e2 d8 27 4b 52 39 1a f5 22   #.r..Z_..'KR9.."
02d0  fb 49 e6 b1 a5 94 c8 67 c9 7e 25 52 ae 64 27 a0   .I.....g.~%R.d'.
02e0  1f f3 49 ad 66 1a 86 b9 78 22 57 c2 a4 75 f4 97   ..I.f...x"W..u..
02f0  30 65 20 c8 8e 67 80 3d cd 2f 0f c2 2e 79 09 11   0e ..g.=./...y..
0300  90 66 98 14 ef f5 bc 29 0a f2 c7 a6 06 0c 94 d7   .f.....)........
0310  af 7a c7 dd 1c 75 68 95 c1 07 72 15 01 7f aa 4b   .z...uh...r....K
0320  bf 31 1e fb a2 58 e8 a5 af e6 90 7e a5 cf 68 f7   .1...X.....~..h.
0330  a9 53 31 09 05 01 3d 51 2e f3 11 14 ed 25 ff f5   .S1...=Q.....%..
0340  0b 58 38 87 ec 5c 0f d8 e3 aa ce 85 b9 2b f1 24   .X8..\.......+.$
0350  d4 15 92 7a e3 cd b6 5b 3a 20 dd 75 be 6a 12 27   ...z...[: .u.j.'
0360  9e 7c 3c e8 a2 0a a1 29 5d be 91 98 85 16 df 9f   .|<....)].......
0370  c3 01 db 4b f0 08 50 39 55 a0 62 46 f5 b8 d6 78   ...K..P9U.bF...x
0380  bb ae e8 f1 f5 9f f3 54 d9 de 7f de 76 38 7c c9   .......T....v8|.
0390  15 16 ad ed fe 99 8e d4 39 fb ac e5 40 ed b4 99   ........9...@...
03a0  10 7d 6f 84 f7 c9                                 .}o...

Frame 30 (110 bytes on wire, 110 bytes captured)
    Arrival Time: Aug 14, 2003 18:04:25.160190000
    Time delta from previous packet: 0.000260000 seconds
    Time relative to first packet: 192.911661000 seconds
    Frame Number: 30
    Packet Length: 110 bytes
    Capture Length: 110 bytes
Ethernet II, Src: 00:40:63:c1:11:ad, Dst: 00:20:6f:09:60:0e
    Destination: 00:20:6f:09:60:0e (00:20:6f:09:60:0e)
    Source: 00:40:63:c1:11:ad (00:40:63:c1:11:ad)
    Type: IP (0x0800)
Internet Protocol, Src Addr: 63.202.92.133 (63.202.92.133), Dst Addr: 211.20.96.195 (211.20.96.195)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 96
    Identification: 0x009c (156)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: ESP (0x32)
    Header checksum: 0xa9a9 (correct)
    Source: 63.202.92.133 (63.202.92.133)
    Destination: 211.20.96.195 (211.20.96.195)
Encapsulating Security Payload
    SPI: 0x9405eb31
    Sequence: 0x00000003
    Data (68 bytes)

0000  00 20 6f 09 60 0e 00 40 63 c1 11 ad 08 00 45 00   . o.`..@c.....E.
0010  00 60 00 9c 00 00 40 32 a9 a9 3f ca 5c 85 d3 14   .`....@2..?.\...
0020  60 c3 94 05 eb 31 00 00 00 03 51 ea cb d5 cb 7d   `....1....Q....}
0030  67 0f a6 fe eb 9a c5 83 7c ce 06 8d 88 44 b3 32   g.......|....D.2
0040  85 98 35 b6 25 36 39 b7 fc 36 a9 18 16 a4 ef 4d   ..5.%69..6.....M
0050  27 ea 83 04 5a cb a6 b2 4f e2 75 c8 76 a6 a5 b8   '...Z...O.u.v...
0060  67 fd ec 7a 59 64 2c d7 08 1f fd 2d 0b b4         g..zYd,....-..

Frame 31 (114 bytes on wire, 114 bytes captured)
    Arrival Time: Aug 14, 2003 18:04:25.430935000
    Time delta from previous packet: 0.270745000 seconds
    Time relative to first packet: 193.182406000 seconds
    Frame Number: 31
    Packet Length: 114 bytes
    Capture Length: 114 bytes
Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad
    Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad)
    Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e)
    Type: IP (0x0800)
    Trailer: 1D49B92F
Internet Protocol, Src Addr: 211.20.96.195 (211.20.96.195), Dst Addr: 63.202.92.133 (63.202.92.133)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 96
    Identification: 0xc483 (50307)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 45
    Protocol: ESP (0x32)
    Header checksum: 0xf8c1 (correct)
    Source: 211.20.96.195 (211.20.96.195)
    Destination: 63.202.92.133 (63.202.92.133)
Encapsulating Security Payload
    SPI: 0x0308d869
    Sequence: 0x00000004
    Data (68 bytes)

0000  00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00   .@c.... o.`...E.
0010  00 60 c4 83 00 00 2d 32 f8 c1 d3 14 60 c3 3f ca   .`....-2....`.?.
0020  5c 85 03 08 d8 69 00 00 00 04 f9 fa fb fc fd fe   \....i..........
0030  ff 00 18 86 e0 30 97 46 83 ae b7 97 f1 48 11 8a   .....0.F.....H..
0040  98 6d 21 19 30 11 f9 11 20 4a b9 15 78 ac 1f 6a   .m!.0... J..x..j
0050  ff a8 ab f0 2f 41 39 89 eb d9 68 58 d3 b5 56 fc   ..../A9...hX..V.
0060  3d 82 1a 7d 06 ab a7 d5 34 70 e5 a1 8a 10 1d 49   =..}....4p.....I
0070  b9 2f                                             ./

Frame 32 (110 bytes on wire, 110 bytes captured)
    Arrival Time: Aug 14, 2003 18:04:40.166871000
    Time delta from previous packet: 14.735936000 seconds
    Time relative to first packet: 207.918342000 seconds
    Frame Number: 32
    Packet Length: 110 bytes
    Capture Length: 110 bytes
Ethernet II, Src: 00:40:63:c1:11:ad, Dst: 00:20:6f:09:60:0e
    Destination: 00:20:6f:09:60:0e (00:20:6f:09:60:0e)
    Source: 00:40:63:c1:11:ad (00:40:63:c1:11:ad)
    Type: IP (0x0800)
Internet Protocol, Src Addr: 63.202.92.133 (63.202.92.133), Dst Addr: 211.20.96.195 (211.20.96.195)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 96
    Identification: 0x009d (157)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: ESP (0x32)
    Header checksum: 0xa9a8 (correct)
    Source: 63.202.92.133 (63.202.92.133)
    Destination: 211.20.96.195 (211.20.96.195)
Encapsulating Security Payload
    SPI: 0x9405eb31
    Sequence: 0x00000004
    Data (68 bytes)

0000  00 20 6f 09 60 0e 00 40 63 c1 11 ad 08 00 45 00   . o.`..@c.....E.
0010  00 60 00 9d 00 00 40 32 a9 a8 3f ca 5c 85 d3 14   .`....@2..?.\...
0020  60 c3 94 05 eb 31 00 00 00 04 65 e8 bf 8c 04 8b   `....1....e.....
0030  d4 df 0e b4 3d 09 93 fc 9e 4b 0d 6d 68 04 85 77   ....=....K.mh..w
0040  d5 3c ea 96 45 33 86 92 57 22 7a f9 92 18 df 48   .<..E3..W"z....H
0050  f3 ce e2 4f 82 25 8e cb 93 3c f6 e5 ab 7a 9a 01   ...O.%...<...z..
0060  55 04 05 b2 f2 04 9c b5 f0 cd 49 5b 02 c4         U.........I[..

Frame 33 (114 bytes on wire, 114 bytes captured)
    Arrival Time: Aug 14, 2003 18:04:40.380951000
    Time delta from previous packet: 0.214080000 seconds
    Time relative to first packet: 208.132422000 seconds
    Frame Number: 33
    Packet Length: 114 bytes
    Capture Length: 114 bytes
Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad
    Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad)
    Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e)
    Type: IP (0x0800)
    Trailer: FA5C9C9F
Internet Protocol, Src Addr: 211.20.96.195 (211.20.96.195), Dst Addr: 63.202.92.133 (63.202.92.133)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 96
    Identification: 0xc484 (50308)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 45
    Protocol: ESP (0x32)
    Header checksum: 0xf8c0 (correct)
    Source: 211.20.96.195 (211.20.96.195)
    Destination: 63.202.92.133 (63.202.92.133)
Encapsulating Security Payload
    SPI: 0x0308d869
    Sequence: 0x00000005
    Data (68 bytes)

0000  00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00   .@c.... o.`...E.
0010  00 60 c4 84 00 00 2d 32 f8 c0 d3 14 60 c3 3f ca   .`....-2....`.?.
0020  5c 85 03 08 d8 69 00 00 00 05 d7 d8 d9 da db dc   \....i..........
0030  dd de 78 22 c1 f5 47 bb 37 f5 af 5c d0 99 cb 79   ..x"..G.7..\...y
0040  b5 e8 3f 92 51 af 3c c5 fa d9 a2 a9 2f f2 3f 99   ..?.Q.<...../.?.
0050  56 8a c4 ea 40 07 b1 98 fb 91 1c 2b 19 a7 ed 57   V...@......+...W
0060  17 7b 6d c7 f6 a1 45 80 f8 21 c3 5b 08 6b fa 5c   .{m...E..!.[.k.\
0070  9c 9f                                             ..

Frame 34 (114 bytes on wire, 114 bytes captured)
    Arrival Time: Aug 14, 2003 18:04:40.412359000
    Time delta from previous packet: 0.031408000 seconds
    Time relative to first packet: 208.163830000 seconds
    Frame Number: 34
    Packet Length: 114 bytes
    Capture Length: 114 bytes
Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad
    Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad)
    Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e)
    Type: IP (0x0800)
    Trailer: 3E284D10
Internet Protocol, Src Addr: 211.20.96.195 (211.20.96.195), Dst Addr: 63.202.92.133 (63.202.92.133)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 96
    Identification: 0xc485 (50309)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 45
    Protocol: ESP (0x32)
    Header checksum: 0xf8bf (correct)
    Source: 211.20.96.195 (211.20.96.195)
    Destination: 63.202.92.133 (63.202.92.133)
Encapsulating Security Payload
    SPI: 0x0308d869
    Sequence: 0x00000006
    Data (68 bytes)

0000  00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00   .@c.... o.`...E.
0010  00 60 c4 85 00 00 2d 32 f8 bf d3 14 60 c3 3f ca   .`....-2....`.?.
0020  5c 85 03 08 d8 69 00 00 00 06 da db dc dd de df   \....i..........
0030  e0 e1 d5 96 5a fd 73 10 c3 1c 3d 4f a1 a9 43 d1   ....Z.s...=O..C.
0040  f4 d3 f0 3e e6 0a 8f 34 d3 71 22 ce 3f e4 29 7b   ...>...4.q".?.){
0050  31 94 68 b2 91 2b 55 67 b9 30 7b 2d 70 d3 f8 54   1.h..+Ug.0{-p..T
0060  90 1a 84 32 fd cb 82 5f 28 e8 f8 73 a6 5c 3e 28   ...2..._(..s.\>(
0070  4d 10                                             M.

Frame 35 (394 bytes on wire, 394 bytes captured)
    Arrival Time: Aug 14, 2003 18:07:12.193827000
    Time delta from previous packet: 151.781468000 seconds
    Time relative to first packet: 359.945298000 seconds
    Frame Number: 35
    Packet Length: 394 bytes
    Capture Length: 394 bytes
Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad
    Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad)
    Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e)
    Type: IP (0x0800)
    Trailer: 616D300C
Internet Protocol, Src Addr: 211.20.96.195 (211.20.96.195), Dst Addr: 63.202.92.133 (63.202.92.133)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 376
    Identification: 0x0000 (0)
    Flags: 0x04
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 45
    Protocol: UDP (0x11)
    Header checksum: 0x7c4e (correct)
    Source: 211.20.96.195 (211.20.96.195)
    Destination: 63.202.92.133 (63.202.92.133)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 356
    Checksum: 0xc0a3 (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x8C03B04B4B2EF791
    Responder cookie: 0xE71B170929A1400D
    Next payload: Hash (8)
    Version: 1.0
    Exchange type: Quick Mode (32)
    Flags
        .... ...1 = Encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x59AD4433
    Length: 348
    Encrypted payload (320 bytes)

0000  00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00   .@c.... o.`...E.
0010  01 78 00 00 40 00 2d 11 7c 4e d3 14 60 c3 3f ca   .x..@.-.|N..`.?.
0020  5c 85 01 f4 01 f4 01 64 c0 a3 8c 03 b0 4b 4b 2e   \......d.....KK.
0030  f7 91 e7 1b 17 09 29 a1 40 0d 08 10 20 01 59 ad   ......).@... .Y.
0040  44 33 00 00 01 5c 76 07 34 00 22 7d 71 f5 8c 77   D3...\v.4."}q..w
0050  96 ed 0a a0 03 5c d6 6a 86 14 33 7d 01 86 13 24   .....\.j..3}...$
0060  74 4b 4f c6 ac 8d 77 2e 97 8b 69 b4 4e ab 6c 20   tKO...w...i.N.l 
0070  7c d7 30 ae 30 22 f8 bc 21 52 a3 57 fe 3e b3 11   |.0.0"..!R.W.>..
0080  3f 97 60 4a 62 1d ec 6a e9 52 43 46 a9 5b 1d ae   ?.`Jb..j.RCF.[..
0090  fb a5 2e 7e ff 51 5e 44 e4 c9 8c c9 e9 17 82 0e   ...~.Q^D........
00a0  53 5e fa 37 a1 7f 3d 19 c7 4d 86 fa c1 ce 29 18   S^.7..=..M....).
00b0  67 b9 c2 83 c5 2d 7a bc 42 e8 d2 39 e5 72 4e 1f   g....-z.B..9.rN.
00c0  00 d1 c6 17 4d f6 89 e7 18 de 4a 03 1b 7f 3d d0   ....M.....J...=.
00d0  9b 9c 93 81 f1 97 99 ed 6a 34 ca 83 ff f9 65 a3   ........j4....e.
00e0  e6 60 ed 54 e8 b6 9b 01 4f 58 a8 65 0b ab 18 66   .`.T....OX.e...f
00f0  ab da 10 e2 14 07 35 2c 98 47 8f a2 8d ae 8b 7e   ......5,.G.....~
0100  c4 c2 95 a0 5b 81 76 8a 2f 56 97 c3 16 a1 e2 54   ....[.v./V.....T
0110  44 e9 6d f0 7e f1 67 57 06 4a a8 8d f8 fa e4 93   D.m.~.gW.J......
0120  ab bc a5 61 a7 a5 54 9f e1 e3 ff a6 9e 74 d4 14   ...a..T......t..
0130  ca cb 93 c3 60 86 2e 60 52 27 eb e7 da 87 f7 88   ....`..`R'......
0140  ec 0f 2f 3b 79 e1 5b 37 c0 f8 7b ae 27 23 4a 72   ../;y.[7..{.'#Jr
0150  91 cf 13 47 e1 2b 21 c7 6f 7c ba 5a 3d 67 86 8d   ...G.+!.o|.Z=g..
0160  8f ab bc 16 a9 ca 30 11 fa fd bf 95 ee 80 77 cd   ......0.......w.
0170  eb bf 20 bc 16 ee 74 99 06 f8 25 69 16 73 2d ea   .. ...t...%i.s-.
0180  ee 00 91 a8 38 1f 61 6d 30 0c                     ....8.am0.

Frame 36 (326 bytes on wire, 326 bytes captured)
    Arrival Time: Aug 14, 2003 18:07:12.279348000
    Time delta from previous packet: 0.085521000 seconds
    Time relative to first packet: 360.030819000 seconds
    Frame Number: 36
    Packet Length: 326 bytes
    Capture Length: 326 bytes
Ethernet II, Src: 00:40:63:c1:11:ad, Dst: 00:20:6f:09:60:0e
    Destination: 00:20:6f:09:60:0e (00:20:6f:09:60:0e)
    Source: 00:40:63:c1:11:ad (00:40:63:c1:11:ad)
    Type: IP (0x0800)
Internet Protocol, Src Addr: 63.202.92.133 (63.202.92.133), Dst Addr: 211.20.96.195 (211.20.96.195)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 312
    Identification: 0x00a0 (160)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0xa8ee (correct)
    Source: 63.202.92.133 (63.202.92.133)
    Destination: 211.20.96.195 (211.20.96.195)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 292
    Checksum: 0x965f (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x8C03B04B4B2EF791
    Responder cookie: 0xE71B170929A1400D
    Next payload: Hash (8)
    Version: 1.0
    Exchange type: Quick Mode (32)
    Flags
        .... ...1 = Encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x59AD4433
    Length: 284
    Encrypted payload (256 bytes)

0000  00 20 6f 09 60 0e 00 40 63 c1 11 ad 08 00 45 00   . o.`..@c.....E.
0010  01 38 00 a0 00 00 40 11 a8 ee 3f ca 5c 85 d3 14   .8....@...?.\...
0020  60 c3 01 f4 01 f4 01 24 96 5f 8c 03 b0 4b 4b 2e   `......$._...KK.
0030  f7 91 e7 1b 17 09 29 a1 40 0d 08 10 20 01 59 ad   ......).@... .Y.
0040  44 33 00 00 01 1c 80 85 ee 83 21 af 14 75 46 d8   D3........!..uF.
0050  50 f3 7d e8 32 64 01 6a 97 7e 16 d0 15 15 9d 59   P.}.2d.j.~.....Y
0060  f1 79 0e cf 7b aa 85 b1 15 5a 7e a3 a3 72 8a 71   .y..{....Z~..r.q
0070  40 95 03 6d 69 63 ac 7b f8 d4 48 18 6f d8 c4 6d   @..mic.{..H.o..m
0080  c1 75 ec db ff 55 54 72 dc de 40 ce 82 9f 47 83   .u...UTr..@...G.
0090  18 a4 a5 f2 c7 b5 c6 8d 48 14 c0 4c 77 c7 47 e7   ........H..Lw.G.
00a0  9c 8f aa 38 f0 44 1d 5b c5 76 60 4c 72 a1 81 4a   ...8.D.[.v`Lr..J
00b0  25 f6 96 e5 8a 90 bd 93 fb 03 c7 d7 11 e9 c4 76   %..............v
00c0  60 d8 33 50 9b 25 bf de e3 8e 4d df b4 3f 54 16   `.3P.%....M..?T.
00d0  fe 96 9e d6 f0 b4 6d be 87 7a 83 07 ab 85 53 88   ......m..z....S.
00e0  55 d2 4c 7d a8 f9 aa fc 2a 37 f4 02 7d 08 49 c1   U.L}....*7..}.I.
00f0  b4 01 6b 2d 80 c4 20 72 e7 05 a2 aa eb c1 08 7a   ..k-.. r.......z
0100  cf aa 8c 2f 92 37 05 0d 60 6c 88 5c 12 bf 09 fb   .../.7..`l.\....
0110  b4 68 9a 83 2f 4f 26 ba a6 13 02 11 66 cf 58 15   .h../O&.....f.X.
0120  e8 23 a8 2b 2a ce 4e 2a f9 c8 06 db 33 14 70 51   .#.+*.N*....3.pQ
0130  66 eb 2b 50 65 7e a6 94 4d 08 9e 98 29 99 54 46   f.+Pe~..M...).TF
0140  8a 5c 26 59 45 a1                                 .\&YE.

Frame 37 (98 bytes on wire, 98 bytes captured)
    Arrival Time: Aug 14, 2003 18:07:12.575074000
    Time delta from previous packet: 0.295726000 seconds
    Time relative to first packet: 360.326545000 seconds
    Frame Number: 37
    Packet Length: 98 bytes
    Capture Length: 98 bytes
Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad
    Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad)
    Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e)
    Type: IP (0x0800)
    Trailer: 822998B2
Internet Protocol, Src Addr: 211.20.96.195 (211.20.96.195), Dst Addr: 63.202.92.133 (63.202.92.133)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 80
    Identification: 0x0000 (0)
    Flags: 0x04
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 45
    Protocol: UDP (0x11)
    Header checksum: 0x7d76 (correct)
    Source: 211.20.96.195 (211.20.96.195)
    Destination: 63.202.92.133 (63.202.92.133)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 60
    Checksum: 0x3c2f (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x8C03B04B4B2EF791
    Responder cookie: 0xE71B170929A1400D
    Next payload: Hash (8)
    Version: 1.0
    Exchange type: Quick Mode (32)
    Flags
        .... ...1 = Encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x59AD4433
    Length: 52
    Encrypted payload (24 bytes)

0000  00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00   .@c.... o.`...E.
0010  00 50 00 00 40 00 2d 11 7d 76 d3 14 60 c3 3f ca   .P..@.-.}v..`.?.
0020  5c 85 01 f4 01 f4 00 3c 3c 2f 8c 03 b0 4b 4b 2e   \......<</...KK.
0030  f7 91 e7 1b 17 09 29 a1 40 0d 08 10 20 01 59 ad   ......).@... .Y.
0040  44 33 00 00 00 34 6e 45 f3 22 7e ce 5b e3 a4 9a   D3...4nE."~.[...
0050  48 c9 56 88 43 da 8b 5f 35 0c 05 61 b8 81 82 29   H.V.C.._5..a...)
0060  98 b2                                             ..

Frame 38 (114 bytes on wire, 114 bytes captured)
    Arrival Time: Aug 14, 2003 18:07:13.569797000
    Time delta from previous packet: 0.994723000 seconds
    Time relative to first packet: 361.321268000 seconds
    Frame Number: 38
    Packet Length: 114 bytes
    Capture Length: 114 bytes
Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad
    Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad)
    Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e)
    Type: IP (0x0800)
    Trailer: D377323E
Internet Protocol, Src Addr: 211.20.96.195 (211.20.96.195), Dst Addr: 63.202.92.133 (63.202.92.133)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 96
    Identification: 0x0000 (0)
    Flags: 0x04
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 45
    Protocol: UDP (0x11)
    Header checksum: 0x7d66 (correct)
    Source: 211.20.96.195 (211.20.96.195)
    Destination: 63.202.92.133 (63.202.92.133)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 76
    Checksum: 0xd540 (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x8C03B04B4B2EF791
    Responder cookie: 0xE71B170929A1400D
    Next payload: Hash (8)
    Version: 1.0
    Exchange type: Informational (5)
    Flags
        .... ...1 = Encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0xC6B2BAA3
    Length: 68
    Encrypted payload (40 bytes)

0000  00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00   .@c.... o.`...E.
0010  00 60 00 00 40 00 2d 11 7d 66 d3 14 60 c3 3f ca   .`..@.-.}f..`.?.
0020  5c 85 01 f4 01 f4 00 4c d5 40 8c 03 b0 4b 4b 2e   \......L.@...KK.
0030  f7 91 e7 1b 17 09 29 a1 40 0d 08 10 05 01 c6 b2   ......).@.......
0040  ba a3 00 00 00 44 38 d6 a4 41 d8 56 7f 90 4a e8   .....D8..A.V..J.
0050  c9 3a d3 13 05 be 48 4e e4 fd f3 b3 e3 c8 be 45   .:....HN.......E
0060  c4 0a 6e 40 b0 0a c4 e0 a8 fc 67 c8 43 79 d3 77   ..n@......g.Cy.w
0070  32 3e                                             2>

Frame 39 (122 bytes on wire, 122 bytes captured)
    Arrival Time: Aug 14, 2003 18:07:24.452720000
    Time delta from previous packet: 10.882923000 seconds
    Time relative to first packet: 372.204191000 seconds
    Frame Number: 39
    Packet Length: 122 bytes
    Capture Length: 122 bytes
Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad
    Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad)
    Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e)
    Type: IP (0x0800)
    Trailer: 9C137084
Internet Protocol, Src Addr: 211.20.96.195 (211.20.96.195), Dst Addr: 63.202.92.133 (63.202.92.133)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 104
    Identification: 0xc486 (50310)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 45
    Protocol: ESP (0x32)
    Header checksum: 0xf8b6 (correct)
    Source: 211.20.96.195 (211.20.96.195)
    Destination: 63.202.92.133 (63.202.92.133)
Encapsulating Security Payload
    SPI: 0x0b04e73b
    Sequence: 0x00000001
    Data (76 bytes)

0000  00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00   .@c.... o.`...E.
0010  00 68 c4 86 00 00 2d 32 f8 b6 d3 14 60 c3 3f ca   .h....-2....`.?.
0020  5c 85 0b 04 e7 3b 00 00 00 01 2f 30 31 32 33 34   \....;..../01234
0030  35 36 07 f6 ef 1f ca ac 5e 3a 1e cb 7d 3f d4 cd   56......^:..}?..
0040  01 15 f5 2f 6e 36 ad a9 d6 4e d7 a4 89 ee 22 09   .../n6...N....".
0050  59 6a d4 6a c9 64 b0 4e 5b 70 e4 e6 02 88 21 39   Yj.j.d.N[p....!9
0060  ef 21 49 d4 59 98 0f 0c d7 6f 08 f5 86 63 eb e7   .!I.Y....o...c..
0070  4c 43 4f 5d f6 44 9c 13 70 84                     LCO].D..p.

Frame 40 (110 bytes on wire, 110 bytes captured)
    Arrival Time: Aug 14, 2003 18:07:24.453305000
    Time delta from previous packet: 0.000585000 seconds
    Time relative to first packet: 372.204776000 seconds
    Frame Number: 40
    Packet Length: 110 bytes
    Capture Length: 110 bytes
Ethernet II, Src: 00:40:63:c1:11:ad, Dst: 00:20:6f:09:60:0e
    Destination: 00:20:6f:09:60:0e (00:20:6f:09:60:0e)
    Source: 00:40:63:c1:11:ad (00:40:63:c1:11:ad)
    Type: IP (0x0800)
Internet Protocol, Src Addr: 63.202.92.133 (63.202.92.133), Dst Addr: 211.20.96.195 (211.20.96.195)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 96
    Identification: 0x00a1 (161)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: ESP (0x32)
    Header checksum: 0xa9a4 (correct)
    Source: 63.202.92.133 (63.202.92.133)
    Destination: 211.20.96.195 (211.20.96.195)
Encapsulating Security Payload
    SPI: 0x9405eb33
    Sequence: 0x00000001
    Data (68 bytes)

0000  00 20 6f 09 60 0e 00 40 63 c1 11 ad 08 00 45 00   . o.`..@c.....E.
0010  00 60 00 a1 00 00 40 32 a9 a4 3f ca 5c 85 d3 14   .`....@2..?.\...
0020  60 c3 94 05 eb 33 00 00 00 01 6f 89 3d ac c6 57   `....3....o.=..W
0030  30 2b 24 15 45 21 83 4b e0 11 44 72 2c 59 18 a3   0+$.E!.K..Dr,Y..
0040  5f 2a 81 3a bc 31 e5 6a ad 17 78 63 28 20 08 f2   _*.:.1.j..xc( ..
0050  64 b4 79 61 a4 74 47 ac 10 cf 5a 4f 8f b8 81 48   d.ya.tG...ZO...H
0060  7d 94 c5 17 43 0e 54 57 ef 32 71 8a 19 c9         }...C.TW.2q...

Frame 41 (114 bytes on wire, 114 bytes captured)
    Arrival Time: Aug 14, 2003 18:07:24.670495000
    Time delta from previous packet: 0.217190000 seconds
    Time relative to first packet: 372.421966000 seconds
    Frame Number: 41
    Packet Length: 114 bytes
    Capture Length: 114 bytes
Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad
    Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad)
    Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e)
    Type: IP (0x0800)
    Trailer: 041833EC
Internet Protocol, Src Addr: 211.20.96.195 (211.20.96.195), Dst Addr: 63.202.92.133 (63.202.92.133)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 96
    Identification: 0xc487 (50311)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 45
    Protocol: ESP (0x32)
    Header checksum: 0xf8bd (correct)
    Source: 211.20.96.195 (211.20.96.195)
    Destination: 63.202.92.133 (63.202.92.133)
Encapsulating Security Payload
    SPI: 0x0b04e73b
    Sequence: 0x00000002
    Data (68 bytes)

0000  00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00   .@c.... o.`...E.
0010  00 60 c4 87 00 00 2d 32 f8 bd d3 14 60 c3 3f ca   .`....-2....`.?.
0020  5c 85 0b 04 e7 3b 00 00 00 02 45 46 47 48 49 4a   \....;....EFGHIJ
0030  4b 4c 6b fa bb 5c 2d 85 af 65 f2 b5 dd d4 26 27   KLk..\-..e....&'
0040  cc 94 a1 e3 1e ca 96 a6 10 b1 12 78 3d 86 17 20   ...........x=.. 
0050  b1 26 a5 7b f6 ba e1 0b 9f 63 25 fe 4b d4 46 46   .&.{.....c%.K.FF
0060  e5 d5 5f 06 53 09 15 70 d7 5d 8c b7 4b a9 04 18   .._.S..p.]..K...
0070  33 ec                                             3.

Frame 42 (306 bytes on wire, 306 bytes captured)
    Arrival Time: Aug 14, 2003 18:07:24.679659000
    Time delta from previous packet: 0.009164000 seconds
    Time relative to first packet: 372.431130000 seconds
    Frame Number: 42
    Packet Length: 306 bytes
    Capture Length: 306 bytes
Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad
    Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad)
    Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e)
    Type: IP (0x0800)
    Trailer: D00AF6DC
Internet Protocol, Src Addr: 211.20.96.195 (211.20.96.195), Dst Addr: 63.202.92.133 (63.202.92.133)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 288
    Identification: 0xc488 (50312)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 45
    Protocol: ESP (0x32)
    Header checksum: 0xf7fc (correct)
    Source: 211.20.96.195 (211.20.96.195)
    Destination: 63.202.92.133 (63.202.92.133)
Encapsulating Security Payload
    SPI: 0x0b04e73b
    Sequence: 0x00000003
    Data (260 bytes)

0000  00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00   .@c.... o.`...E.
0010  01 20 c4 88 00 00 2d 32 f7 fc d3 14 60 c3 3f ca   . ....-2....`.?.
0020  5c 85 0b 04 e7 3b 00 00 00 03 45 46 47 48 49 4a   \....;....EFGHIJ
0030  4b 4c db ce b4 51 9a 00 82 d2 db 08 c5 d1 42 42   KL...Q........BB
0040  02 54 3c 29 99 c8 0c 22 6c ee 83 53 9d df e6 3f   .T<)..."l..S...?
0050  c8 db 3d 43 71 89 8e ac d5 4e ec 05 43 3f dc 88   ..=Cq....N..C?..
0060  14 65 c1 b9 12 52 a3 c7 68 71 31 34 01 91 7d 4f   .e...R..hq14..}O
0070  ac 80 51 46 6a f6 d2 0f e3 a9 eb 0e bb 68 e2 21   ..QFj........h.!
0080  15 1f 9e 88 26 52 dd 1e 9b 98 71 64 15 12 05 f5   ....&R....qd....
0090  56 1e 47 e7 f9 ac 11 43 0d 49 ff af 55 f2 91 6f   V.G....C.I..U..o
00a0  b6 e8 11 f8 6a 58 9f cd 51 83 73 bf 56 d5 10 4e   ....jX..Q.s.V..N
00b0  75 d1 8f 8d 4e 0f 24 da d2 d3 d1 42 5d a0 43 ba   u...N.$....B].C.
00c0  90 46 43 9e 7b 4c b1 3c 88 6c 65 d2 68 db 33 e2   .FC.{L.<.le.h.3.
00d0  69 68 f8 f0 2d a1 07 e3 7e e8 3f 6f 2f 10 bd bd   ih..-...~.?o/...
00e0  9b 01 85 dd 70 ae a4 28 6f e3 93 56 8e 0c 98 65   ....p..(o..V...e
00f0  e2 6b 4a 2b 73 ab c2 63 ab 3a ce 72 d0 34 b2 cb   .kJ+s..c.:.r.4..
0100  f2 9d 52 3b da 15 be 6c 1a a3 2c d8 2b 69 e4 a2   ..R;...l..,.+i..
0110  88 b1 5f 6a cd 71 cf 18 d2 65 b9 b1 cb f1 bf bb   .._j.q...e......
0120  42 1b 8a 1e b6 44 cf 07 b7 53 84 18 2f aa d0 0a   B....D...S../...
0130  f6 dc                                             ..

Frame 43 (934 bytes on wire, 934 bytes captured)
    Arrival Time: Aug 14, 2003 18:07:24.691572000
    Time delta from previous packet: 0.011913000 seconds
    Time relative to first packet: 372.443043000 seconds
    Frame Number: 43
    Packet Length: 934 bytes
    Capture Length: 934 bytes
Ethernet II, Src: 00:40:63:c1:11:ad, Dst: 00:20:6f:09:60:0e
    Destination: 00:20:6f:09:60:0e (00:20:6f:09:60:0e)
    Source: 00:40:63:c1:11:ad (00:40:63:c1:11:ad)
    Type: IP (0x0800)
Internet Protocol, Src Addr: 63.202.92.133 (63.202.92.133), Dst Addr: 211.20.96.195 (211.20.96.195)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 920
    Identification: 0x00a2 (162)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: ESP (0x32)
    Header checksum: 0xa66b (correct)
    Source: 63.202.92.133 (63.202.92.133)
    Destination: 211.20.96.195 (211.20.96.195)
Encapsulating Security Payload
    SPI: 0x9405eb33
    Sequence: 0x00000002
    Data (892 bytes)

0000  00 20 6f 09 60 0e 00 40 63 c1 11 ad 08 00 45 00   . o.`..@c.....E.
0010  03 98 00 a2 00 00 40 32 a6 6b 3f ca 5c 85 d3 14   ......@2.k?.\...
0020  60 c3 94 05 eb 33 00 00 00 02 34 0e 34 69 6e b1   `....3....4.4in.
0030  00 72 0a dc 20 01 71 e3 70 ea 55 2e 62 f0 a8 e3   .r.. .q.p.U.b...
0040  e1 bd db f4 06 05 4d 74 8b de d7 22 31 ee 7f c9   ......Mt..."1...
0050  3b cb 9c e8 3a 79 71 72 c2 75 8b 5f 8c 55 e2 6c   ;...:yqr.u._.U.l
0060  fb 2a ee 4d 24 10 1a cc 92 85 49 18 6f 09 6a 71   .*.M$.....I.o.jq
0070  58 74 2d 7c bf c8 77 ec 2d de 4b 00 60 fd f6 89   Xt-|..w.-.K.`...
0080  b1 b2 a3 9d 43 08 49 7c fa 31 a2 f1 e4 de ab b7   ....C.I|.1......
0090  f6 83 f2 9b 5a 74 53 99 0e 19 1c ac 3e 94 b0 87   ....ZtS.....>...
00a0  e9 b9 a0 31 ee cd e3 b5 86 11 a7 2f b3 a5 66 65   ...1......./..fe
00b0  b7 6f 1f f6 11 ed 37 ed f1 ee e1 6f 53 0a 9b de   .o....7....oS...
00c0  a3 4e 57 02 ab c5 fb 9f 08 82 b9 2c d8 57 83 cf   .NW........,.W..
00d0  53 4c 5a 8e cf a8 05 ef fd 61 03 89 12 41 c9 4f   SLZ......a...A.O
00e0  3b 79 a6 61 bb f7 ba ed 9c 0e ff f5 db 44 7c 9f   ;y.a.........D|.
00f0  f4 76 2b 9a 8c bb c1 23 b9 ae 23 dd db 04 95 9c   .v+....#..#.....
0100  53 72 a8 fb 7d 13 58 91 d9 4a 66 01 e5 5c 07 f1   Sr..}.X..Jf..\..
0110  4a 84 c1 e1 da f1 dc 8c 0f fc 06 34 7b f8 29 de   J..........4{.).
0120  a1 ce ca 34 35 01 13 5b 9f 21 01 d5 93 50 20 69   ...45..[.!...P i
0130  53 0a ad 66 a9 c0 57 f1 76 dd 5c a7 02 21 89 0c   S..f..W.v.\..!..
0140  6e c5 ee 61 26 9c bd fd ed ec b6 ab 60 17 02 9e   n..a&.......`...
0150  78 4d a8 6e ec 02 d2 89 b6 8a c5 e1 83 9a 94 9f   xM.n............
0160  4f c2 36 ad 7b 61 40 26 96 5d 15 c5 e7 a3 09 aa   O.6.{a@&.]......
0170  c1 70 fc a0 a2 c3 0d 79 2d 8c d8 f2 4a 6f f9 c0   .p.....y-...Jo..
0180  f8 86 96 01 ca e6 14 dc 4a f0 49 65 11 f7 74 ad   ........J.Ie..t.
0190  77 db 7b 67 f0 2f 8d 41 7e fc 4d 0e 69 fa c3 aa   w.{g./.A~.M.i...
01a0  79 7a af 74 b6 67 37 5b ee f9 e5 b9 9b 81 27 0a   yz.t.g7[......'.
01b0  46 ed 90 e9 7c 52 11 92 66 72 e6 79 4d 8e 11 5e   F...|R..fr.yM..^
01c0  96 a3 75 86 73 1a 36 3b c2 96 0a 69 89 b9 4a 4e   ..u.s.6;...i..JN
01d0  7c 5f ec 5a 0e f8 7c fb 4f 97 de 8c 31 3c 6c af   |_.Z..|.O...1<l.
01e0  1d 1f 8a 05 7b 53 32 cb 92 7d e3 18 41 21 b2 ed   ....{S2..}..A!..
01f0  a1 04 f6 65 16 10 3d 1c c7 b4 68 af c3 b9 9b c5   ...e..=...h.....
0200  d3 0c ef 4b 35 5d c8 f0 fe 69 b8 42 0f 49 9b 27   ...K5]...i.B.I.'
0210  08 2f 4e 9c dc 18 32 ef d7 a6 c9 c4 87 1c 55 d2   ./N...2.......U.
0220  98 6d bf d3 57 ab 8b cf 26 ae aa 31 4f aa ad 2b   .m..W...&..1O..+
0230  63 8a 88 2e 5b bb 91 3b 2f 71 37 94 d6 9c 36 e3   c...[..;/q7...6.
0240  c8 a9 b1 73 ff 91 0b 45 9b c0 7f 5a b1 55 25 b5   ...s...E...Z.U%.
0250  23 2d 74 66 dc 38 b7 4a ce b6 2d 8b 23 b0 bf be   #-tf.8.J..-.#...
0260  2a b1 65 9a ce 12 ca e5 ac b5 d3 2b b2 59 0a 9f   *.e........+.Y..
0270  7f 91 95 1a d8 44 27 48 45 e9 87 40 82 41 8f 6e   .....D'HE..@.A.n
0280  67 74 90 e2 81 10 24 24 6a 3b 07 fa 62 24 49 0a   gt....$$j;..b$I.
0290  38 d6 32 0a a1 e5 fc ed b0 c1 3b eb 15 c6 25 76   8.2.......;...%v
02a0  e6 71 2a 07 59 03 07 7f d2 66 0b f0 53 11 a3 1f   .q*.Y....f..S...
02b0  04 e0 5d ef e1 7d fa 9e 8c 3e df 46 02 6f 42 81   ..]..}...>.F.oB.
02c0  a1 53 aa 0b 80 f7 ce 72 c5 13 eb 44 f9 58 a7 94   .S.....r...D.X..
02d0  15 55 f3 c5 a7 34 55 d1 37 29 f4 28 dd 57 3b c8   .U...4U.7).(.W;.
02e0  1a ba 5e dc ea 0a 89 bf e7 88 ee 29 a7 ef bd a8   ..^........)....
02f0  40 68 0e 87 76 27 2a b5 c5 a3 af 9f 75 1b 0d 35   @h..v'*.....u..5
0300  23 0e c4 89 9a fc 5b d7 99 f7 77 87 d0 44 b8 04   #.....[...w..D..
0310  ba 25 6d a8 62 fa 7b 9b 70 02 d2 1f 52 3a b1 e9   .%m.b.{.p...R:..
0320  d5 cc 14 38 22 b1 be bf 52 ee 3c 6c ae be 29 aa   ...8"...R.<l..).
0330  d2 2a 28 13 90 c8 3a df 89 c2 57 68 c8 67 52 29   .*(...:...Wh.gR)
0340  25 f1 21 55 f9 d9 41 29 11 6e 23 f5 7f 5f 86 da   %.!U..A).n#.._..
0350  d3 c1 cb e1 9a c3 40 af 2d 9a 84 ce 67 53 3b cd   ......@.-...gS;.
0360  b5 f8 d9 6e 0f f7 82 3c 76 00 7c 04 e8 df c9 5d   ...n...<v.|....]
0370  ec 43 85 87 69 bc 4c ea a4 6f 6d f7 8b e6 84 4b   .C..i.L..om....K
0380  d2 91 d6 fc 15 9a da dc 21 f5 f4 9f 94 8e f5 1f   ........!.......
0390  cf 24 ab 19 dc 49 92 a7 6b 23 8f bf 4c 5b 14 11   .$...I..k#..L[..
03a0  16 d2 d6 84 65 d9                                 ....e.

Frame 44 (110 bytes on wire, 110 bytes captured)
    Arrival Time: Aug 14, 2003 18:07:24.691824000
    Time delta from previous packet: 0.000252000 seconds
    Time relative to first packet: 372.443295000 seconds
    Frame Number: 44
    Packet Length: 110 bytes
    Capture Length: 110 bytes
Ethernet II, Src: 00:40:63:c1:11:ad, Dst: 00:20:6f:09:60:0e
    Destination: 00:20:6f:09:60:0e (00:20:6f:09:60:0e)
    Source: 00:40:63:c1:11:ad (00:40:63:c1:11:ad)
    Type: IP (0x0800)
Internet Protocol, Src Addr: 63.202.92.133 (63.202.92.133), Dst Addr: 211.20.96.195 (211.20.96.195)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 96
    Identification: 0x00a3 (163)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: ESP (0x32)
    Header checksum: 0xa9a2 (correct)
    Source: 63.202.92.133 (63.202.92.133)
    Destination: 211.20.96.195 (211.20.96.195)
Encapsulating Security Payload
    SPI: 0x9405eb33
    Sequence: 0x00000003
    Data (68 bytes)

0000  00 20 6f 09 60 0e 00 40 63 c1 11 ad 08 00 45 00   . o.`..@c.....E.
0010  00 60 00 a3 00 00 40 32 a9 a2 3f ca 5c 85 d3 14   .`....@2..?.\...
0020  60 c3 94 05 eb 33 00 00 00 03 a0 cf 34 07 a5 6e   `....3......4..n
0030  bd 8b 6b f7 71 c5 0d 4c 26 6f e6 d4 e6 4f 1b c7   ..k.q..L&o...O..
0040  05 8d 33 16 32 22 89 2f 28 34 e8 25 fa 2a dc 24   ..3.2"./(4.%.*.$
0050  22 85 4b df 2e 88 5e 2a 4e fb 7f c6 d5 35 55 9e   ".K...^*N....5U.
0060  fb 0b 95 ff 76 94 fb 40 a4 35 4d f2 f7 f3         ....v..@.5M...

Frame 45 (114 bytes on wire, 114 bytes captured)
    Arrival Time: Aug 14, 2003 18:07:24.960748000
    Time delta from previous packet: 0.268924000 seconds
    Time relative to first packet: 372.712219000 seconds
    Frame Number: 45
    Packet Length: 114 bytes
    Capture Length: 114 bytes
Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad
    Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad)
    Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e)
    Type: IP (0x0800)
    Trailer: EE13F1CA
Internet Protocol, Src Addr: 211.20.96.195 (211.20.96.195), Dst Addr: 63.202.92.133 (63.202.92.133)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 96
    Identification: 0xc489 (50313)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 45
    Protocol: ESP (0x32)
    Header checksum: 0xf8bb (correct)
    Source: 211.20.96.195 (211.20.96.195)
    Destination: 63.202.92.133 (63.202.92.133)
Encapsulating Security Payload
    SPI: 0x0b04e73b
    Sequence: 0x00000004
    Data (68 bytes)

0000  00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00   .@c.... o.`...E.
0010  00 60 c4 89 00 00 2d 32 f8 bb d3 14 60 c3 3f ca   .`....-2....`.?.
0020  5c 85 0b 04 e7 3b 00 00 00 04 62 63 64 65 66 67   \....;....bcdefg
0030  68 69 1e 75 67 7b a3 36 26 05 d6 d7 df ec 54 7e   hi.ug{.6&.....T~
0040  c9 19 85 41 b9 9e fe 3a eb 20 f5 03 43 eb 82 5d   ...A...:. ..C..]
0050  c6 63 14 5c 4e 2b d0 b4 c9 d4 f6 78 77 7e 5c e4   .c.\N+.....xw~\.
0060  2f 78 30 58 7e 29 90 cf 4d ac b9 88 1f 66 ee 13   /x0X~)..M....f..
0070  f1 ca                                             ..

Frame 46 (110 bytes on wire, 110 bytes captured)
    Arrival Time: Aug 14, 2003 18:07:39.694249000
    Time delta from previous packet: 14.733501000 seconds
    Time relative to first packet: 387.445720000 seconds
    Frame Number: 46
    Packet Length: 110 bytes
    Capture Length: 110 bytes
Ethernet II, Src: 00:40:63:c1:11:ad, Dst: 00:20:6f:09:60:0e
    Destination: 00:20:6f:09:60:0e (00:20:6f:09:60:0e)
    Source: 00:40:63:c1:11:ad (00:40:63:c1:11:ad)
    Type: IP (0x0800)
Internet Protocol, Src Addr: 63.202.92.133 (63.202.92.133), Dst Addr: 211.20.96.195 (211.20.96.195)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 96
    Identification: 0x00a4 (164)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: ESP (0x32)
    Header checksum: 0xa9a1 (correct)
    Source: 63.202.92.133 (63.202.92.133)
    Destination: 211.20.96.195 (211.20.96.195)
Encapsulating Security Payload
    SPI: 0x9405eb33
    Sequence: 0x00000004
    Data (68 bytes)

0000  00 20 6f 09 60 0e 00 40 63 c1 11 ad 08 00 45 00   . o.`..@c.....E.
0010  00 60 00 a4 00 00 40 32 a9 a1 3f ca 5c 85 d3 14   .`....@2..?.\...
0020  60 c3 94 05 eb 33 00 00 00 04 62 9c 5b ba c1 9b   `....3....b.[...
0030  87 40 15 a1 1c 0a ca ea 95 68 a9 ae 28 3d 0c bd   .@.......h..(=..
0040  e5 d8 9d 57 10 ba d8 ca 5c 13 36 4e b6 05 eb 67   ...W....\.6N...g
0050  80 0f 82 6e b7 5a 55 6b 2e f4 c5 26 01 01 70 66   ...n.ZUk...&..pf
0060  64 7b 91 da ec b6 0e 11 56 60 39 9d 4e a5         d{......V`9.N.

Frame 47 (114 bytes on wire, 114 bytes captured)
    Arrival Time: Aug 14, 2003 18:07:39.909188000
    Time delta from previous packet: 0.214939000 seconds
    Time relative to first packet: 387.660659000 seconds
    Frame Number: 47
    Packet Length: 114 bytes
    Capture Length: 114 bytes
Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad
    Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad)
    Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e)
    Type: IP (0x0800)
    Trailer: 2A0DC143
Internet Protocol, Src Addr: 211.20.96.195 (211.20.96.195), Dst Addr: 63.202.92.133 (63.202.92.133)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 96
    Identification: 0xc48a (50314)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 45
    Protocol: ESP (0x32)
    Header checksum: 0xf8ba (correct)
    Source: 211.20.96.195 (211.20.96.195)
    Destination: 63.202.92.133 (63.202.92.133)
Encapsulating Security Payload
    SPI: 0x0b04e73b
    Sequence: 0x00000005
    Data (68 bytes)

0000  00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00   .@c.... o.`...E.
0010  00 60 c4 8a 00 00 2d 32 f8 ba d3 14 60 c3 3f ca   .`....-2....`.?.
0020  5c 85 0b 04 e7 3b 00 00 00 05 3f 40 41 42 43 44   \....;....?@ABCD
0030  45 46 42 06 ee 0c 78 52 5e 99 cd 78 37 11 ce 87   EFB...xR^..x7...
0040  6a 08 de c8 6f 69 8b 25 25 6a 3f 45 78 29 38 96   j...oi.%%j?Ex)8.
0050  76 35 44 11 9e 67 25 f5 89 f9 d9 f8 e6 bb 01 03   v5D..g%.........
0060  21 0d 0a a7 fa 0b dc 15 00 24 22 c6 4a 17 2a 0d   !........$".J.*.
0070  c1 43                                             .C

Frame 48 (114 bytes on wire, 114 bytes captured)
    Arrival Time: Aug 14, 2003 18:07:39.949273000
    Time delta from previous packet: 0.040085000 seconds
    Time relative to first packet: 387.700744000 seconds
    Frame Number: 48
    Packet Length: 114 bytes
    Capture Length: 114 bytes
Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad
    Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad)
    Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e)
    Type: IP (0x0800)
    Trailer: 006382E5
Internet Protocol, Src Addr: 211.20.96.195 (211.20.96.195), Dst Addr: 63.202.92.133 (63.202.92.133)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 96
    Identification: 0xc48b (50315)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 45
    Protocol: ESP (0x32)
    Header checksum: 0xf8b9 (correct)
    Source: 211.20.96.195 (211.20.96.195)
    Destination: 63.202.92.133 (63.202.92.133)
Encapsulating Security Payload
    SPI: 0x0b04e73b
    Sequence: 0x00000006
    Data (68 bytes)

0000  00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00   .@c.... o.`...E.
0010  00 60 c4 8b 00 00 2d 32 f8 b9 d3 14 60 c3 3f ca   .`....-2....`.?.
0020  5c 85 0b 04 e7 3b 00 00 00 06 42 43 44 45 46 47   \....;....BCDEFG
0030  48 49 87 dc 7c e8 62 0e 44 48 79 42 83 24 51 99   HI..|.b.DHyB.$Q.
0040  77 8f e4 c8 e1 35 1a 71 e4 2d 32 f3 ff 54 bc eb   w....5.q.-2..T..
0050  e9 d3 ab 16 d9 5c 22 73 94 36 c2 3a 34 57 55 56   .....\"s.6.:4WUV
0060  7a 8c 35 5c c9 2a 94 77 45 b7 23 26 b1 18 00 63   z.5\.*.wE.#&...c
0070  82 e5                                             ..

Frame 49 (394 bytes on wire, 394 bytes captured)
    Arrival Time: Aug 14, 2003 18:10:11.201626000
    Time delta from previous packet: 151.252353000 seconds
    Time relative to first packet: 538.953097000 seconds
    Frame Number: 49
    Packet Length: 394 bytes
    Capture Length: 394 bytes
Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad
    Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad)
    Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e)
    Type: IP (0x0800)
    Trailer: 347F5222
Internet Protocol, Src Addr: 211.20.96.195 (211.20.96.195), Dst Addr: 63.202.92.133 (63.202.92.133)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 376
    Identification: 0x0000 (0)
    Flags: 0x04
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 45
    Protocol: UDP (0x11)
    Header checksum: 0x7c4e (correct)
    Source: 211.20.96.195 (211.20.96.195)
    Destination: 63.202.92.133 (63.202.92.133)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 356
    Checksum: 0x22ab (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x8C03B04B4B2EF791
    Responder cookie: 0xE71B170929A1400D
    Next payload: Hash (8)
    Version: 1.0
    Exchange type: Quick Mode (32)
    Flags
        .... ...1 = Encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x170CAC4F
    Length: 348
    Encrypted payload (320 bytes)

0000  00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00   .@c.... o.`...E.
0010  01 78 00 00 40 00 2d 11 7c 4e d3 14 60 c3 3f ca   .x..@.-.|N..`.?.
0020  5c 85 01 f4 01 f4 01 64 22 ab 8c 03 b0 4b 4b 2e   \......d"....KK.
0030  f7 91 e7 1b 17 09 29 a1 40 0d 08 10 20 01 17 0c   ......).@... ...
0040  ac 4f 00 00 01 5c fe 84 c8 17 84 1f 34 b9 d8 18   .O...\......4...
0050  8e ed 28 bf 64 43 45 dd 1b 27 cc d0 63 79 6d 75   ..(.dCE..'..cymu
0060  89 af ea 59 7e 91 9d 70 51 93 db 3f a6 13 41 4b   ...Y~..pQ..?..AK
0070  c3 e8 57 83 f2 e7 26 4e b3 93 f0 df 95 78 ff 20   ..W...&N.....x. 
0080  fe c3 d6 ad c6 17 8c d1 38 46 03 f4 51 93 11 83   ........8F..Q...
0090  18 b8 a4 e7 0a f9 f9 37 6b fc a9 fc c7 2b 0f f5   .......7k....+..
00a0  00 c3 0a fc 30 2e 0f 11 26 66 42 51 85 a0 87 e1   ....0...&fBQ....
00b0  7c 7b 69 00 78 41 0a de 42 b0 ed c8 23 45 ea 79   |{i.xA..B...#E.y
00c0  f3 5e 27 29 a6 2d 06 39 27 36 2d e1 ae 04 23 61   .^').-.9'6-...#a
00d0  0c cb 85 59 9a f9 f7 ff b4 38 2e b9 07 c4 7f b0   ...Y.....8......
00e0  9a 98 bf 47 82 5b 0c d7 59 bd ba 40 4e 8d cb 09   ...G.[..Y..@N...
00f0  60 db 1a 17 4c 18 9c e1 60 9e 39 a4 d6 04 b4 70   `...L...`.9....p
0100  68 65 7d 9f 09 7c 47 4c 6d e7 60 cd e3 7b e6 28   he}..|GLm.`..{.(
0110  ca 37 22 6b d0 c2 1e 01 af 84 0a 3c e6 ac b5 ac   .7"k.......<....
0120  f4 99 af 15 57 ed 75 83 5c 59 81 8c 34 d9 99 0f   ....W.u.\Y..4...
0130  64 97 4c 11 1b a2 e2 0e 93 dd 8b 13 07 1a 4a bb   d.L...........J.
0140  fc 35 17 d8 ea 6b c8 fb 26 ec 4f 0b 9b 61 9d 9f   .5...k..&.O..a..
0150  d5 df 1e 80 db bb 17 20 31 4a 6f 2a d8 a3 20 d9   ....... 1Jo*.. .
0160  da 2e 2c 5e 6a 3d 33 13 6f 73 06 35 f5 38 96 71   ..,^j=3.os.5.8.q
0170  ce 45 d9 54 b0 30 9c 6a cd 3e 4b e3 82 27 18 24   .E.T.0.j.>K..'.$
0180  88 e4 85 97 24 0e 34 7f 52 22                     ....$.4.R"

Frame 50 (326 bytes on wire, 326 bytes captured)
    Arrival Time: Aug 14, 2003 18:10:11.287371000
    Time delta from previous packet: 0.085745000 seconds
    Time relative to first packet: 539.038842000 seconds
    Frame Number: 50
    Packet Length: 326 bytes
    Capture Length: 326 bytes
Ethernet II, Src: 00:40:63:c1:11:ad, Dst: 00:20:6f:09:60:0e
    Destination: 00:20:6f:09:60:0e (00:20:6f:09:60:0e)
    Source: 00:40:63:c1:11:ad (00:40:63:c1:11:ad)
    Type: IP (0x0800)
Internet Protocol, Src Addr: 63.202.92.133 (63.202.92.133), Dst Addr: 211.20.96.195 (211.20.96.195)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 312
    Identification: 0x00a5 (165)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0xa8e9 (correct)
    Source: 63.202.92.133 (63.202.92.133)
    Destination: 211.20.96.195 (211.20.96.195)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 292
    Checksum: 0x95ba (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x8C03B04B4B2EF791
    Responder cookie: 0xE71B170929A1400D
    Next payload: Hash (8)
    Version: 1.0
    Exchange type: Quick Mode (32)
    Flags
        .... ...1 = Encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x170CAC4F
    Length: 284
    Encrypted payload (256 bytes)

0000  00 20 6f 09 60 0e 00 40 63 c1 11 ad 08 00 45 00   . o.`..@c.....E.
0010  01 38 00 a5 00 00 40 11 a8 e9 3f ca 5c 85 d3 14   .8....@...?.\...
0020  60 c3 01 f4 01 f4 01 24 95 ba 8c 03 b0 4b 4b 2e   `......$.....KK.
0030  f7 91 e7 1b 17 09 29 a1 40 0d 08 10 20 01 17 0c   ......).@... ...
0040  ac 4f 00 00 01 1c da a4 00 fa 07 c8 97 17 5d 48   .O............]H
0050  97 73 90 81 46 6b 50 c7 49 1b 22 0d 20 12 67 b7   .s..FkP.I.". .g.
0060  ba 82 e8 1f a8 c1 09 72 4c d1 68 f8 1a 35 81 18   .......rL.h..5..
0070  03 26 f5 74 81 b8 cf 99 59 d7 0b 57 37 99 88 ae   .&.t....Y..W7...
0080  58 40 70 f8 2c 1d a6 02 1a 45 63 c6 50 1c 33 ef   X@p.,....Ec.P.3.
0090  09 0f 22 24 74 11 5c da 75 fe e3 f8 55 07 61 1f   .."$t.\.u...U.a.
00a0  f2 22 55 81 97 4b 3f c4 a4 f1 d6 5f 9f 38 a0 2e   ."U..K?...._.8..
00b0  21 da 8e ec d3 a7 7a d9 aa 91 96 59 75 3e 3d 80   !.....z....Yu>=.
00c0  2e b6 6d a8 f0 07 2f 68 b3 fd b0 f2 71 d9 9c e9   ..m.../h....q...
00d0  9f 4b f5 82 29 1f d6 90 42 a9 2e ee e8 13 2a 51   .K..)...B.....*Q
00e0  ef 97 f4 5a fe fb ed 7e 21 6c ab 05 7e d4 36 2d   ...Z...~!l..~.6-
00f0  7d d4 93 ff 3d 53 eb 67 62 7e 03 3a 66 68 d2 04   }...=S.gb~.:fh..
0100  3d 5f 14 af a3 86 e8 ba 4a 77 f7 83 92 8f 2f c3   =_......Jw..../.
0110  6e e6 e9 06 3b 80 d4 c9 08 f7 6f 61 43 9a ef 2c   n...;.....oaC..,
0120  99 ca cd 66 87 c1 4d e1 17 45 9f ca 24 cf 87 30   ...f..M..E..$..0
0130  bc a0 04 e4 79 38 13 ce be e6 af 9c d2 f6 b5 65   ....y8.........e
0140  6e b7 fd e8 f0 bb                                 n.....

Frame 51 (98 bytes on wire, 98 bytes captured)
    Arrival Time: Aug 14, 2003 18:10:11.586738000
    Time delta from previous packet: 0.299367000 seconds
    Time relative to first packet: 539.338209000 seconds
    Frame Number: 51
    Packet Length: 98 bytes
    Capture Length: 98 bytes
Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad
    Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad)
    Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e)
    Type: IP (0x0800)
    Trailer: 3326ABBA
Internet Protocol, Src Addr: 211.20.96.195 (211.20.96.195), Dst Addr: 63.202.92.133 (63.202.92.133)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 80
    Identification: 0x0000 (0)
    Flags: 0x04
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 45
    Protocol: UDP (0x11)
    Header checksum: 0x7d76 (correct)
    Source: 211.20.96.195 (211.20.96.195)
    Destination: 63.202.92.133 (63.202.92.133)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 60
    Checksum: 0x504a (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x8C03B04B4B2EF791
    Responder cookie: 0xE71B170929A1400D
    Next payload: Hash (8)
    Version: 1.0
    Exchange type: Quick Mode (32)
    Flags
        .... ...1 = Encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x170CAC4F
    Length: 52
    Encrypted payload (24 bytes)

0000  00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00   .@c.... o.`...E.
0010  00 50 00 00 40 00 2d 11 7d 76 d3 14 60 c3 3f ca   .P..@.-.}v..`.?.
0020  5c 85 01 f4 01 f4 00 3c 50 4a 8c 03 b0 4b 4b 2e   \......<PJ...KK.
0030  f7 91 e7 1b 17 09 29 a1 40 0d 08 10 20 01 17 0c   ......).@... ...
0040  ac 4f 00 00 00 34 0e 2e f8 9d b4 0d ef 8d 8d e0   .O...4..........
0050  d9 c8 74 b6 ac 4a c5 b5 ec 0f 45 43 de 7d 33 26   ..t..J....EC.}3&
0060  ab ba                                             ..

Frame 52 (114 bytes on wire, 114 bytes captured)
    Arrival Time: Aug 14, 2003 18:10:12.589879000
    Time delta from previous packet: 1.003141000 seconds
    Time relative to first packet: 540.341350000 seconds
    Frame Number: 52
    Packet Length: 114 bytes
    Capture Length: 114 bytes
Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad
    Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad)
    Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e)
    Type: IP (0x0800)
    Trailer: 54B1B008
Internet Protocol, Src Addr: 211.20.96.195 (211.20.96.195), Dst Addr: 63.202.92.133 (63.202.92.133)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 96
    Identification: 0x0000 (0)
    Flags: 0x04
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 45
    Protocol: UDP (0x11)
    Header checksum: 0x7d66 (correct)
    Source: 211.20.96.195 (211.20.96.195)
    Destination: 63.202.92.133 (63.202.92.133)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 76
    Checksum: 0x1b25 (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x8C03B04B4B2EF791
    Responder cookie: 0xE71B170929A1400D
    Next payload: Hash (8)
    Version: 1.0
    Exchange type: Informational (5)
    Flags
        .... ...1 = Encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0xD8BDF286
    Length: 68
    Encrypted payload (40 bytes)

0000  00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00   .@c.... o.`...E.
0010  00 60 00 00 40 00 2d 11 7d 66 d3 14 60 c3 3f ca   .`..@.-.}f..`.?.
0020  5c 85 01 f4 01 f4 00 4c 1b 25 8c 03 b0 4b 4b 2e   \......L.%...KK.
0030  f7 91 e7 1b 17 09 29 a1 40 0d 08 10 05 01 d8 bd   ......).@.......
0040  f2 86 00 00 00 44 62 42 13 f8 30 a0 2a ee 3f f3   .....DbB..0.*.?.
0050  74 a4 2a 5b 71 bf cf ed 09 0a 48 14 d7 a7 ad 75   t.*[q.....H....u
0060  31 7e 8a 9d 6d 4d f2 ba fb ab 12 7c 5d b4 54 b1   1~..mM.....|].T.
0070  b0 08                                             ..

Frame 53 (122 bytes on wire, 122 bytes captured)
    Arrival Time: Aug 14, 2003 18:10:38.814578000
    Time delta from previous packet: 26.224699000 seconds
    Time relative to first packet: 566.566049000 seconds
    Frame Number: 53
    Packet Length: 122 bytes
    Capture Length: 122 bytes
Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad
    Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad)
    Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e)
    Type: IP (0x0800)
    Trailer: E04AD313
Internet Protocol, Src Addr: 211.20.96.195 (211.20.96.195), Dst Addr: 63.202.92.133 (63.202.92.133)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 104
    Identification: 0xc48c (50316)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 45
    Protocol: ESP (0x32)
    Header checksum: 0xf8b0 (correct)
    Source: 211.20.96.195 (211.20.96.195)
    Destination: 63.202.92.133 (63.202.92.133)
Encapsulating Security Payload
    SPI: 0x018c0667
    Sequence: 0x00000001
    Data (76 bytes)

0000  00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00   .@c.... o.`...E.
0010  00 68 c4 8c 00 00 2d 32 f8 b0 d3 14 60 c3 3f ca   .h....-2....`.?.
0020  5c 85 01 8c 06 67 00 00 00 01 67 68 69 6a 6b 6c   \....g....ghijkl
0030  6d 6e 0c 2f 54 84 c7 6c 36 d8 62 bb bf 81 a6 77   mn./T..l6.b....w
0040  1f 8d 6f 94 38 3e 8f 93 de e9 1b 2f 25 c4 1c 08   ..o.8>...../%...
0050  6d 33 07 6a ab a6 51 18 3f 8a a2 c4 44 4c 1e e3   m3.j..Q.?...DL..
0060  2b 4b 96 44 0b 49 79 2c 94 e2 30 1d 32 8e 07 89   +K.D.Iy,..0.2...
0070  89 05 de 48 4a 6e e0 4a d3 13                     ...HJn.J..

Frame 54 (110 bytes on wire, 110 bytes captured)
    Arrival Time: Aug 14, 2003 18:10:38.815123000
    Time delta from previous packet: 0.000545000 seconds
    Time relative to first packet: 566.566594000 seconds
    Frame Number: 54
    Packet Length: 110 bytes
    Capture Length: 110 bytes
Ethernet II, Src: 00:40:63:c1:11:ad, Dst: 00:20:6f:09:60:0e
    Destination: 00:20:6f:09:60:0e (00:20:6f:09:60:0e)
    Source: 00:40:63:c1:11:ad (00:40:63:c1:11:ad)
    Type: IP (0x0800)
Internet Protocol, Src Addr: 63.202.92.133 (63.202.92.133), Dst Addr: 211.20.96.195 (211.20.96.195)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 96
    Identification: 0x00a8 (168)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: ESP (0x32)
    Header checksum: 0xa99d (correct)
    Source: 63.202.92.133 (63.202.92.133)
    Destination: 211.20.96.195 (211.20.96.195)
Encapsulating Security Payload
    SPI: 0x9405eb35
    Sequence: 0x00000001
    Data (68 bytes)

0000  00 20 6f 09 60 0e 00 40 63 c1 11 ad 08 00 45 00   . o.`..@c.....E.
0010  00 60 00 a8 00 00 40 32 a9 9d 3f ca 5c 85 d3 14   .`....@2..?.\...
0020  60 c3 94 05 eb 35 00 00 00 01 fc b2 5e e6 fc 9f   `....5......^...
0030  2d 93 aa 84 8a cf 41 13 50 f9 e5 87 b7 63 88 d6   -.....A.P....c..
0040  c1 fb b2 0f f2 29 6e 42 bc 08 fa c2 c3 0d bf ee   .....)nB........
0050  73 a5 40 f1 5a df 6c f6 11 fd 59 40 b1 48 44 fe   s.@.Z.l...Y@.HD.
0060  d0 86 ab 8a 80 74 d6 b6 62 3b a9 6b f3 f5         .....t..b;.k..

Frame 55 (114 bytes on wire, 114 bytes captured)
    Arrival Time: Aug 14, 2003 18:10:39.028683000
    Time delta from previous packet: 0.213560000 seconds
    Time relative to first packet: 566.780154000 seconds
    Frame Number: 55
    Packet Length: 114 bytes
    Capture Length: 114 bytes
Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad
    Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad)
    Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e)
    Type: IP (0x0800)
    Trailer: C2524502
Internet Protocol, Src Addr: 211.20.96.195 (211.20.96.195), Dst Addr: 63.202.92.133 (63.202.92.133)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 96
    Identification: 0xc48d (50317)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 45
    Protocol: ESP (0x32)
    Header checksum: 0xf8b7 (correct)
    Source: 211.20.96.195 (211.20.96.195)
    Destination: 63.202.92.133 (63.202.92.133)
Encapsulating Security Payload
    SPI: 0x018c0667
    Sequence: 0x00000002
    Data (68 bytes)

0000  00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00   .@c.... o.`...E.
0010  00 60 c4 8d 00 00 2d 32 f8 b7 d3 14 60 c3 3f ca   .`....-2....`.?.
0020  5c 85 01 8c 06 67 00 00 00 02 7d 7e 7f 80 81 82   \....g....}~....
0030  83 84 4c a0 97 f9 31 2f 32 79 38 eb d3 69 57 d8   ..L...1/2y8..iW.
0040  cc 35 c8 d8 57 d7 89 b2 8b 21 4f a2 ad a3 44 e0   .5..W....!O...D.
0050  71 33 b7 45 a3 f9 c4 4b 3b e0 0a a5 71 0d 21 6f   q3.E...K;...q.!o
0060  38 c8 8b e3 a0 dc 25 13 76 fe c5 8e 39 75 c2 52   8.....%.v...9u.R
0070  45 02                                             E.

Frame 56 (306 bytes on wire, 306 bytes captured)
    Arrival Time: Aug 14, 2003 18:10:39.040212000
    Time delta from previous packet: 0.011529000 seconds
    Time relative to first packet: 566.791683000 seconds
    Frame Number: 56
    Packet Length: 306 bytes
    Capture Length: 306 bytes
Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad
    Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad)
    Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e)
    Type: IP (0x0800)
    Trailer: 570D2FD4
Internet Protocol, Src Addr: 211.20.96.195 (211.20.96.195), Dst Addr: 63.202.92.133 (63.202.92.133)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 288
    Identification: 0xc48e (50318)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 45
    Protocol: ESP (0x32)
    Header checksum: 0xf7f6 (correct)
    Source: 211.20.96.195 (211.20.96.195)
    Destination: 63.202.92.133 (63.202.92.133)
Encapsulating Security Payload
    SPI: 0x018c0667
    Sequence: 0x00000003
    Data (260 bytes)

0000  00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00   .@c.... o.`...E.
0010  01 20 c4 8e 00 00 2d 32 f7 f6 d3 14 60 c3 3f ca   . ....-2....`.?.
0020  5c 85 01 8c 06 67 00 00 00 03 7d 7e 7f 80 81 82   \....g....}~....
0030  83 84 18 c1 c6 c7 19 a7 b9 16 00 b5 c7 fe de 18   ................
0040  4f 16 53 b1 fc 96 18 71 11 06 90 10 b6 ea 5d a3   O.S....q......].
0050  42 19 c3 39 92 5e 43 69 f1 6f 5c de d8 c9 20 39   B..9.^Ci.o\... 9
0060  5a 08 db 2d 78 49 cc e6 4e 2a 62 f9 a3 0e bb 87   Z..-xI..N*b.....
0070  87 59 2b 0f e6 6f 02 1d c8 53 a4 14 e7 94 70 a5   .Y+..o...S....p.
0080  26 3f 37 24 62 25 a7 6e 5b bc 29 59 92 93 86 12   &?7$b%.n[.)Y....
0090  0a e7 4f 52 f0 e7 89 74 75 97 8b 2f 54 51 fa e5   ..OR...tu../TQ..
00a0  6a 61 2a f4 ef 41 44 ea 78 09 7e 58 52 5d 1f 67   ja*..AD.x.~XR].g
00b0  a2 6d d0 74 4b a0 a5 68 a2 5f 6e f2 42 3c 34 4f   .m.tK..h._n.B<4O
00c0  f2 f2 6f d9 85 4e 30 22 97 9b f8 69 b3 b6 3c 00   ..o..N0"...i..<.
00d0  5d c0 8c e4 7a 4e fb 74 6c 26 1b c5 15 16 9e 0d   ]...zN.tl&......
00e0  0c 25 0e f8 d5 f4 30 23 0c 26 63 a2 57 8d e7 d0   .%....0#.&c.W...
00f0  f0 9e 62 94 16 a9 57 d7 6a e0 9c b0 18 0c 2c 7c   ..b...W.j.....,|
0100  d7 0f 53 0c c8 7e dd b4 e2 db ec 50 15 76 0c 05   ..S..~.....P.v..
0110  84 f4 c3 fe e1 0c 7e 84 1e 2b ab 27 55 a4 c7 4d   ......~..+.'U..M
0120  ed 6a 33 1e 84 84 f4 67 59 d0 9e 92 a3 27 57 0d   .j3....gY....'W.
0130  2f d4                                             /.

Frame 57 (934 bytes on wire, 934 bytes captured)
    Arrival Time: Aug 14, 2003 18:10:39.052027000
    Time delta from previous packet: 0.011815000 seconds
    Time relative to first packet: 566.803498000 seconds
    Frame Number: 57
    Packet Length: 934 bytes
    Capture Length: 934 bytes
Ethernet II, Src: 00:40:63:c1:11:ad, Dst: 00:20:6f:09:60:0e
    Destination: 00:20:6f:09:60:0e (00:20:6f:09:60:0e)
    Source: 00:40:63:c1:11:ad (00:40:63:c1:11:ad)
    Type: IP (0x0800)
Internet Protocol, Src Addr: 63.202.92.133 (63.202.92.133), Dst Addr: 211.20.96.195 (211.20.96.195)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 920
    Identification: 0x00a9 (169)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: ESP (0x32)
    Header checksum: 0xa664 (correct)
    Source: 63.202.92.133 (63.202.92.133)
    Destination: 211.20.96.195 (211.20.96.195)
Encapsulating Security Payload
    SPI: 0x9405eb35
    Sequence: 0x00000002
    Data (892 bytes)

0000  00 20 6f 09 60 0e 00 40 63 c1 11 ad 08 00 45 00   . o.`..@c.....E.
0010  03 98 00 a9 00 00 40 32 a6 64 3f ca 5c 85 d3 14   ......@2.d?.\...
0020  60 c3 94 05 eb 35 00 00 00 02 9e 54 51 2d c8 0f   `....5.....TQ-..
0030  2b 48 70 fb 1b 7d 80 0e cd 6f d9 05 19 0d 7e f4   +Hp..}...o....~.
0040  22 e1 76 37 a2 83 1a 1f 1e 9c a6 08 a8 77 49 08   ".v7.........wI.
0050  a4 cc 5e 01 64 9b 9a 72 a6 29 c3 ff 9c a2 6d 2e   ..^.d..r.)....m.
0060  2c ca 50 46 23 92 1a 12 57 61 a4 6e ca 62 57 2f   ,.PF#...Wa.n.bW/
0070  64 68 94 de 21 a8 e6 d5 d2 8b e1 5c 9a 14 77 58   dh..!......\..wX
0080  c0 10 3f c4 bb 4e 28 18 cd 7a 8d 9a 8b a6 95 02   ..?..N(..z......
0090  f6 a8 03 b3 29 e8 9b 67 c7 77 c4 51 64 e4 f0 71   ....)..g.w.Qd..q
00a0  1c 2d a5 a8 cc 77 f4 99 d9 a8 ed 65 42 98 a3 a6   .-...w.....eB...
00b0  1e 12 87 20 fc ce 57 41 11 fb 3f ca 8d 22 a0 86   ... ..WA..?.."..
00c0  e5 51 be e2 0b c7 2c f2 71 a0 36 31 71 7a 33 96   .Q....,.q.61qz3.
00d0  69 dd ba f7 28 84 ef 4c 23 dc 7f 3d d2 c3 8d 85   i...(..L#..=....
00e0  42 1d 6a 3a c0 4b 91 a6 36 ab ba 58 d4 64 76 15   B.j:.K..6..X.dv.
00f0  76 07 ac 5b 86 4b bc 70 68 ac dc 30 1b 67 42 0c   v..[.K.ph..0.gB.
0100  43 fb 49 fd c8 0e 59 ac 17 2c 2c ca 54 17 dc 40   C.I...Y..,,.T..@
0110  3b fb 73 0d 9e e3 9e 8f 8b 2f bc e4 0c 22 c6 83   ;.s....../..."..
0120  fb b2 49 df c9 1d 9c 41 7f 14 ac 84 4c 41 f4 4b   ..I....A....LA.K
0130  26 44 b3 16 ad 17 15 8b e7 26 15 c9 63 88 83 9a   &D.......&..c...
0140  88 f2 4f 1c c1 58 a5 9e cc 83 7b bc b7 f4 36 f2   ..O..X....{...6.
0150  bd 56 f1 75 21 92 a1 09 27 91 59 ab 9f 8b 67 61   .V.u!...'.Y...ga
0160  55 8b 03 42 e6 27 0f 00 af 91 a0 24 14 9b 76 5c   U..B.'.....$..v\
0170  75 3a d7 2e 61 4f b2 52 87 5c 1f ec af 9b 36 7e   u:..aO.R.\....6~
0180  e1 a2 1a 7b 9c 9f cf 7d b7 3b 3f de c2 9b 0a 2d   ...{...}.;?....-
0190  3c b7 cf b5 7c 1c 1b f9 93 72 10 29 4d 9c 36 73   <...|....r.)M.6s
01a0  b5 4f 76 b4 79 ce c1 ae 56 c7 50 cc 22 2f c1 6e   .Ov.y...V.P."/.n
01b0  80 3d b6 f1 38 e4 38 b8 60 59 c7 9d b6 eb 2e da   .=..8.8.`Y......
01c0  56 51 5b fc 8a ed 1f 72 66 d2 18 51 1b e0 3d 1a   VQ[....rf..Q..=.
01d0  f3 29 4e 73 24 4d 0d 96 ef 01 6b 62 12 05 96 49   .)Ns$M....kb...I
01e0  b5 ba 8c 19 56 57 fb 5f 62 08 24 75 20 aa 00 53   ....VW._b.$u ..S
01f0  dc 31 35 88 d7 00 22 00 0d c9 8e 90 60 19 f7 6b   .15...".....`..k
0200  38 c7 bb 4b 94 76 cc 86 be 0b eb dc 27 0d 7d d7   8..K.v......'.}.
0210  de 9f 43 18 fa b6 41 ca 47 d9 93 aa 27 e5 b6 4b   ..C...A.G...'..K
0220  ac 7c 59 f8 96 ff 58 7c c8 da ad 4f d3 10 1c 2b   .|Y...X|...O...+
0230  68 89 06 c2 eb bf 0c e2 5d be 3c a3 fd 58 fb 1d   h.......].<..X..
0240  dc 64 3e d6 51 d3 d6 dd f0 9a a4 31 f5 59 f1 fa   .d>.Q......1.Y..
0250  bc 72 7a ae a9 44 1b 62 87 ac ae 75 76 c2 44 c8   .rz..D.b...uv.D.
0260  1a fc 9e 33 a9 f3 40 b7 36 ec 55 6a c9 41 5c 3f   ...3..@.6.Uj.A\?
0270  e1 ce ce 9e 70 d4 d6 e9 ed ee bd ff 89 69 7e c8   ....p........i~.
0280  7f 39 e5 44 ba 0d 79 3e 3c 55 42 a4 9e 5b 78 3b   .9.D..y><UB..[x;
0290  3c f6 7e 97 70 3d 60 22 70 48 5f f2 fd 00 77 6a   <.~.p=`"pH_...wj
02a0  99 4b c6 3f 7c 3a c4 2f d9 3e 2a 5c cf 31 30 9e   .K.?|:./.>*\.10.
02b0  99 9e a8 b0 f4 4a 67 e9 a2 c4 c5 b7 30 4a 1d 28   .....Jg.....0J.(
02c0  85 a4 5e 12 95 42 32 e0 5f a4 95 b9 1b 51 20 01   ..^..B2._....Q .
02d0  c3 e4 e4 38 05 78 9f d6 c0 c0 9a b7 88 f0 9c 2a   ...8.x.........*
02e0  f5 06 c3 8d 83 8e 47 a4 ee 90 fd f9 62 88 7d a3   ......G.....b.}.
02f0  22 04 8a 60 36 fa 9e 53 f7 b3 3b 7a c2 b5 4e 87   "..`6..S..;z..N.
0300  0b 09 ce b9 00 4c ec 77 91 62 e9 d5 dc 55 67 4d   .....L.w.b...UgM
0310  5e d0 e8 94 a3 7f 75 16 29 08 1e 80 78 88 52 75   ^.....u.)...x.Ru
0320  5f c2 e0 34 db d1 5a 7b 2b 11 f5 67 c7 cf 1a 3c   _..4..Z{+..g...<
0330  43 16 d8 b0 59 dd b9 1b e0 08 67 4a 49 eb 1c 2c   C...Y.....gJI..,
0340  e7 5a dc b8 53 56 68 36 4a b3 f7 cf 8d e1 7c ea   .Z..SVh6J.....|.
0350  84 24 c3 8e 44 0f 27 1a 15 65 93 a6 af a5 dc fe   .$..D.'..e......
0360  46 09 e0 f3 39 fc df 61 67 09 de 44 a7 2a 6f fd   F...9..ag..D.*o.
0370  77 df b2 4a 6d 7b ae 60 b1 34 be 5c 64 46 de 94   w..Jm{.`.4.\dF..
0380  ba 5d 0e 5a 48 b6 23 df 69 05 4e f0 a2 b3 2a c8   .].ZH.#.i.N...*.
0390  9b 5b a3 d5 a4 67 eb 5d 01 9c 69 e8 2e 00 21 2d   .[...g.]..i...!-
03a0  eb 4b bf 8e 84 67                                 .K...g

Frame 58 (110 bytes on wire, 110 bytes captured)
    Arrival Time: Aug 14, 2003 18:10:39.052256000
    Time delta from previous packet: 0.000229000 seconds
    Time relative to first packet: 566.803727000 seconds
    Frame Number: 58
    Packet Length: 110 bytes
    Capture Length: 110 bytes
Ethernet II, Src: 00:40:63:c1:11:ad, Dst: 00:20:6f:09:60:0e
    Destination: 00:20:6f:09:60:0e (00:20:6f:09:60:0e)
    Source: 00:40:63:c1:11:ad (00:40:63:c1:11:ad)
    Type: IP (0x0800)
Internet Protocol, Src Addr: 63.202.92.133 (63.202.92.133), Dst Addr: 211.20.96.195 (211.20.96.195)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 96
    Identification: 0x00aa (170)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: ESP (0x32)
    Header checksum: 0xa99b (correct)
    Source: 63.202.92.133 (63.202.92.133)
    Destination: 211.20.96.195 (211.20.96.195)
Encapsulating Security Payload
    SPI: 0x9405eb35
    Sequence: 0x00000003
    Data (68 bytes)

0000  00 20 6f 09 60 0e 00 40 63 c1 11 ad 08 00 45 00   . o.`..@c.....E.
0010  00 60 00 aa 00 00 40 32 a9 9b 3f ca 5c 85 d3 14   .`....@2..?.\...
0020  60 c3 94 05 eb 35 00 00 00 03 a4 c6 47 c3 08 3b   `....5......G..;
0030  25 29 0b 22 3e 1e b4 54 d1 bd f4 d4 8f 40 2b ed   %).">..T.....@+.
0040  00 1b bb 92 17 8b 0f 04 38 27 5b ae d6 b4 7d a7   ........8'[...}.
0050  c0 34 14 ce 97 f7 15 f6 89 0e 39 d3 fb 48 2f 1d   .4........9..H/.
0060  09 f7 2f 07 35 6a 54 f1 bc 43 53 6e cf f8         ../.5jT..CSn..

Frame 59 (114 bytes on wire, 114 bytes captured)
    Arrival Time: Aug 14, 2003 18:10:39.325766000
    Time delta from previous packet: 0.273510000 seconds
    Time relative to first packet: 567.077237000 seconds
    Frame Number: 59
    Packet Length: 114 bytes
    Capture Length: 114 bytes
Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad
    Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad)
    Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e)
    Type: IP (0x0800)
    Trailer: E5B44F45
Internet Protocol, Src Addr: 211.20.96.195 (211.20.96.195), Dst Addr: 63.202.92.133 (63.202.92.133)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 96
    Identification: 0xc48f (50319)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 45
    Protocol: ESP (0x32)
    Header checksum: 0xf8b5 (correct)
    Source: 211.20.96.195 (211.20.96.195)
    Destination: 63.202.92.133 (63.202.92.133)
Encapsulating Security Payload
    SPI: 0x018c0667
    Sequence: 0x00000004
    Data (68 bytes)

0000  00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00   .@c.... o.`...E.
0010  00 60 c4 8f 00 00 2d 32 f8 b5 d3 14 60 c3 3f ca   .`....-2....`.?.
0020  5c 85 01 8c 06 67 00 00 00 04 9a 9b 9c 9d 9e 9f   \....g..........
0030  a0 a1 c2 3c 50 3f 49 3c 73 36 72 2e 94 65 20 ce   ...<P?I<s6r..e .
0040  31 7d 39 ae e7 aa e9 47 29 da 4f 02 c5 87 5c 4c   1}9....G).O...\L
0050  e4 1b c9 1f 8f ee 4e cb b8 9c aa 77 d6 a9 b4 b5   ......N....w....
0060  0d d3 95 89 b4 c8 8e a5 09 03 9a 1c bc 37 e5 b4   .............7..
0070  4f 45                                             OE

Frame 60 (110 bytes on wire, 110 bytes captured)
    Arrival Time: Aug 14, 2003 18:10:54.060689000
    Time delta from previous packet: 14.734923000 seconds
    Time relative to first packet: 581.812160000 seconds
    Frame Number: 60
    Packet Length: 110 bytes
    Capture Length: 110 bytes
Ethernet II, Src: 00:40:63:c1:11:ad, Dst: 00:20:6f:09:60:0e
    Destination: 00:20:6f:09:60:0e (00:20:6f:09:60:0e)
    Source: 00:40:63:c1:11:ad (00:40:63:c1:11:ad)
    Type: IP (0x0800)
Internet Protocol, Src Addr: 63.202.92.133 (63.202.92.133), Dst Addr: 211.20.96.195 (211.20.96.195)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 96
    Identification: 0x00ab (171)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: ESP (0x32)
    Header checksum: 0xa99a (correct)
    Source: 63.202.92.133 (63.202.92.133)
    Destination: 211.20.96.195 (211.20.96.195)
Encapsulating Security Payload
    SPI: 0x9405eb35
    Sequence: 0x00000004
    Data (68 bytes)

0000  00 20 6f 09 60 0e 00 40 63 c1 11 ad 08 00 45 00   . o.`..@c.....E.
0010  00 60 00 ab 00 00 40 32 a9 9a 3f ca 5c 85 d3 14   .`....@2..?.\...
0020  60 c3 94 05 eb 35 00 00 00 04 f2 25 1d 21 c3 db   `....5.....%.!..
0030  e1 8a b3 0d 78 cb 3a 73 67 1e a7 4d 3e cf 47 82   ....x.:sg..M>.G.
0040  11 bd 1f 8d 51 56 5c 2c 4f 88 64 cd 1f 9d a6 a3   ....QV\,O.d.....
0050  2f 24 7d 36 94 57 f3 a6 05 11 37 c2 0e bd 56 50   /$}6.W....7...VP
0060  4f 49 af 54 b6 b0 bc a4 6c 54 91 b5 31 92         OI.T....lT..1.

Frame 61 (114 bytes on wire, 114 bytes captured)
    Arrival Time: Aug 14, 2003 18:10:54.278962000
    Time delta from previous packet: 0.218273000 seconds
    Time relative to first packet: 582.030433000 seconds
    Frame Number: 61
    Packet Length: 114 bytes
    Capture Length: 114 bytes
Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad
    Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad)
    Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e)
    Type: IP (0x0800)
    Trailer: B49F8392
Internet Protocol, Src Addr: 211.20.96.195 (211.20.96.195), Dst Addr: 63.202.92.133 (63.202.92.133)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 96
    Identification: 0xc490 (50320)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 45
    Protocol: ESP (0x32)
    Header checksum: 0xf8b4 (correct)
    Source: 211.20.96.195 (211.20.96.195)
    Destination: 63.202.92.133 (63.202.92.133)
Encapsulating Security Payload
    SPI: 0x018c0667
    Sequence: 0x00000005
    Data (68 bytes)

0000  00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00   .@c.... o.`...E.
0010  00 60 c4 90 00 00 2d 32 f8 b4 d3 14 60 c3 3f ca   .`....-2....`.?.
0020  5c 85 01 8c 06 67 00 00 00 05 78 79 7a 7b 7c 7d   \....g....xyz{|}
0030  7e 7f 3d e4 1a 12 58 33 23 68 0b ed e0 dd 5a 8c   ~.=...X3#h....Z.
0040  33 1c 1b a4 89 7b f0 1e b6 b2 d6 8f 89 a8 3c 17   3....{........<.
0050  d1 1a 83 c3 f5 e5 d4 11 2d f1 69 d6 e3 1d 8b cb   ........-.i.....
0060  d3 b0 23 c6 c2 45 ac 7f 3d 1b 3a ca 05 4d b4 9f   ..#..E..=.:..M..
0070  83 92                                             ..

Frame 62 (114 bytes on wire, 114 bytes captured)
    Arrival Time: Aug 14, 2003 18:10:54.311522000
    Time delta from previous packet: 0.032560000 seconds
    Time relative to first packet: 582.062993000 seconds
    Frame Number: 62
    Packet Length: 114 bytes
    Capture Length: 114 bytes
Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad
    Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad)
    Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e)
    Type: IP (0x0800)
    Trailer: 89565F10
Internet Protocol, Src Addr: 211.20.96.195 (211.20.96.195), Dst Addr: 63.202.92.133 (63.202.92.133)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 96
    Identification: 0xc491 (50321)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 45
    Protocol: ESP (0x32)
    Header checksum: 0xf8b3 (correct)
    Source: 211.20.96.195 (211.20.96.195)
    Destination: 63.202.92.133 (63.202.92.133)
Encapsulating Security Payload
    SPI: 0x018c0667
    Sequence: 0x00000006
    Data (68 bytes)

0000  00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00   .@c.... o.`...E.
0010  00 60 c4 91 00 00 2d 32 f8 b3 d3 14 60 c3 3f ca   .`....-2....`.?.
0020  5c 85 01 8c 06 67 00 00 00 06 7b 7c 7d 7e 7f 80   \....g....{|}~..
0030  81 82 2a 7e ae cd 7f 97 fd 20 cc 5e 36 d3 d6 e7   ..*~..... .^6...
0040  59 a8 30 44 24 36 cc 1e 4f 19 f4 30 61 99 7a f6   Y.0D$6..O..0a.z.
0050  7b 12 15 09 89 c1 3b dd 37 1d e4 cb 7c a4 17 c1   {.....;.7...|...
0060  de 29 f8 d1 8c e8 9e b1 72 94 76 48 7e 89 89 56   .)......r.vH~..V
0070  5f 10                                             _.

Frame 63 (394 bytes on wire, 394 bytes captured)
    Arrival Time: Aug 14, 2003 18:13:10.198584000
    Time delta from previous packet: 135.887062000 seconds
    Time relative to first packet: 717.950055000 seconds
    Frame Number: 63
    Packet Length: 394 bytes
    Capture Length: 394 bytes
Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad
    Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad)
    Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e)
    Type: IP (0x0800)
    Trailer: 2C4799EF
Internet Protocol, Src Addr: 211.20.96.195 (211.20.96.195), Dst Addr: 63.202.92.133 (63.202.92.133)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 376
    Identification: 0x0000 (0)
    Flags: 0x04
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 45
    Protocol: UDP (0x11)
    Header checksum: 0x7c4e (correct)
    Source: 211.20.96.195 (211.20.96.195)
    Destination: 63.202.92.133 (63.202.92.133)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 356
    Checksum: 0xa82a (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x8C03B04B4B2EF791
    Responder cookie: 0xE71B170929A1400D
    Next payload: Hash (8)
    Version: 1.0
    Exchange type: Quick Mode (32)
    Flags
        .... ...1 = Encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x094EA5FF
    Length: 348
    Encrypted payload (320 bytes)

0000  00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00   .@c.... o.`...E.
0010  01 78 00 00 40 00 2d 11 7c 4e d3 14 60 c3 3f ca   .x..@.-.|N..`.?.
0020  5c 85 01 f4 01 f4 01 64 a8 2a 8c 03 b0 4b 4b 2e   \......d.*...KK.
0030  f7 91 e7 1b 17 09 29 a1 40 0d 08 10 20 01 09 4e   ......).@... ..N
0040  a5 ff 00 00 01 5c 2a f8 47 9f ac 45 bd 8b 93 a7   .....\*.G..E....
0050  b2 b0 5b 81 dd 84 29 33 05 bb 72 88 8c f5 fc ea   ..[...)3..r.....
0060  46 3b c3 00 e5 a8 eb 9a 14 8d 7c 1e e8 7f a6 3a   F;........|....:
0070  77 1d 27 29 83 3d ad 08 23 82 2a 21 6b 55 60 09   w.').=..#.*!kU`.
0080  d4 a5 b9 cd 8d f1 9c 21 0f 01 39 66 27 41 7e af   .......!..9f'A~.
0090  2e 52 58 3f 9a 68 66 7e 3e 7e 30 e3 30 2a 67 13   .RX?.hf~>~0.0*g.
00a0  10 14 71 6f b0 ca fa 64 e3 4c e0 ce d2 f0 8d ce   ..qo...d.L......
00b0  71 0a f9 c8 37 57 e2 1a b0 ab 7d d8 8c df c5 70   q...7W....}....p
00c0  05 17 12 67 6d 73 70 06 9d e1 4a 6d 8e 67 19 81   ...gmsp...Jm.g..
00d0  79 65 94 5e d1 c6 81 1d 43 52 3b 4a fe d7 85 9f   ye.^....CR;J....
00e0  cf ba 67 81 5f 1a 9e 4a 96 b8 ac 1b 2e d2 91 1c   ..g._..J........
00f0  10 55 a4 33 f8 3e f7 89 b4 1f 7a 84 86 8b 34 8c   .U.3.>....z...4.
0100  60 ea 7c 6a 89 6c 82 74 18 6b b7 a7 a8 05 65 88   `.|j.l.t.k....e.
0110  18 59 9d 75 b5 42 c9 d4 72 d0 71 e9 87 d4 c1 a1   .Y.u.B..r.q.....
0120  96 4b b4 34 c6 ff 30 bc 01 d1 55 53 fc fa 53 22   .K.4..0...US..S"
0130  4b ef 17 12 f2 f7 5b 7f 7c 04 4e 1d 17 06 f1 01   K.....[.|.N.....
0140  4e 21 ce a8 aa 67 7e ff d6 e5 29 24 d3 23 8f 87   N!...g~...)$.#..
0150  f7 10 21 1b a2 d5 26 4f 80 a2 f5 26 15 94 27 40   ..!...&O...&..'@
0160  41 8f 8a a5 bc 73 eb 95 14 10 48 a3 78 86 b9 03   A....s....H.x...
0170  bc 1c bc f1 c9 63 73 76 de 8e 74 0b 80 da 07 33   .....csv..t....3
0180  80 21 f1 3c 46 71 2c 47 99 ef                     .!.<Fq,G..

Frame 64 (326 bytes on wire, 326 bytes captured)
    Arrival Time: Aug 14, 2003 18:13:10.284245000
    Time delta from previous packet: 0.085661000 seconds
    Time relative to first packet: 718.035716000 seconds
    Frame Number: 64
    Packet Length: 326 bytes
    Capture Length: 326 bytes
Ethernet II, Src: 00:40:63:c1:11:ad, Dst: 00:20:6f:09:60:0e
    Destination: 00:20:6f:09:60:0e (00:20:6f:09:60:0e)
    Source: 00:40:63:c1:11:ad (00:40:63:c1:11:ad)
    Type: IP (0x0800)
Internet Protocol, Src Addr: 63.202.92.133 (63.202.92.133), Dst Addr: 211.20.96.195 (211.20.96.195)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 312
    Identification: 0x00ac (172)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0xa8e2 (correct)
    Source: 63.202.92.133 (63.202.92.133)
    Destination: 211.20.96.195 (211.20.96.195)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 292
    Checksum: 0x17e8 (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x8C03B04B4B2EF791
    Responder cookie: 0xE71B170929A1400D
    Next payload: Hash (8)
    Version: 1.0
    Exchange type: Quick Mode (32)
    Flags
        .... ...1 = Encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x094EA5FF
    Length: 284
    Encrypted payload (256 bytes)

0000  00 20 6f 09 60 0e 00 40 63 c1 11 ad 08 00 45 00   . o.`..@c.....E.
0010  01 38 00 ac 00 00 40 11 a8 e2 3f ca 5c 85 d3 14   .8....@...?.\...
0020  60 c3 01 f4 01 f4 01 24 17 e8 8c 03 b0 4b 4b 2e   `......$.....KK.
0030  f7 91 e7 1b 17 09 29 a1 40 0d 08 10 20 01 09 4e   ......).@... ..N
0040  a5 ff 00 00 01 1c a3 a6 49 c2 39 e7 7e 3b a4 18   ........I.9.~;..
0050  e2 64 a1 fc b1 b3 2d 00 5d ef de 4f ff 2c a8 4c   .d....-.]..O.,.L
0060  65 0e bd 85 a8 f1 a4 d3 b2 82 dd 40 eb 50 66 cf   e..........@.Pf.
0070  94 14 21 e4 26 5d 0c 1d 58 22 63 64 7e 1d c0 8e   ..!.&]..X"cd~...
0080  1b 0a be 03 6c a1 b8 ec 97 6d 8d 1f 76 3e 5b ab   ....l....m..v>[.
0090  88 cc 37 3a 86 bc a6 96 2e 02 21 0d 34 25 09 ec   ..7:......!.4%..
00a0  2f 68 c2 c9 b9 08 b6 9e fc b9 3e e8 cb 74 1b b2   /h........>..t..
00b0  10 a3 51 92 9c 73 72 ba b7 78 37 ab 35 1f a8 c5   ..Q..sr..x7.5...
00c0  e4 4e 33 be 50 20 83 5c b5 cf 8a 1e bb 98 aa fc   .N3.P .\........
00d0  37 91 6f 72 bc d8 32 83 29 fb 43 cc b5 d8 23 f1   7.or..2.).C...#.
00e0  a0 ce d2 d4 0a 11 f6 3c 96 dd 82 57 5c d3 1e 11   .......<...W\...
00f0  a6 41 d4 d9 6e 9a 29 4e 55 94 8f 4f 1f 98 c8 7e   .A..n.)NU..O...~
0100  5a 7b cd 64 e0 db 87 cc af 86 2b 1a a5 84 90 0e   Z{.d......+.....
0110  b8 20 e8 6a 8b 20 35 a3 83 25 98 04 2b 4c 45 05   . .j. 5..%..+LE.
0120  46 26 2d 40 7a 70 35 12 9b 23 28 24 84 fc 70 04   F&-@zp5..#($..p.
0130  77 5b 37 d3 a4 eb e9 0c 24 b1 ab d0 6d d9 99 e5   w[7.....$...m...
0140  dc 6f cf 61 d8 63                                 .o.a.c

Frame 65 (98 bytes on wire, 98 bytes captured)
    Arrival Time: Aug 14, 2003 18:13:10.599751000
    Time delta from previous packet: 0.315506000 seconds
    Time relative to first packet: 718.351222000 seconds
    Frame Number: 65
    Packet Length: 98 bytes
    Capture Length: 98 bytes
Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad
    Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad)
    Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e)
    Type: IP (0x0800)
    Trailer: 3C444FC8
Internet Protocol, Src Addr: 211.20.96.195 (211.20.96.195), Dst Addr: 63.202.92.133 (63.202.92.133)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 80
    Identification: 0x0000 (0)
    Flags: 0x04
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 45
    Protocol: UDP (0x11)
    Header checksum: 0x7d76 (correct)
    Source: 211.20.96.195 (211.20.96.195)
    Destination: 63.202.92.133 (63.202.92.133)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 60
    Checksum: 0x5a30 (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x8C03B04B4B2EF791
    Responder cookie: 0xE71B170929A1400D
    Next payload: Hash (8)
    Version: 1.0
    Exchange type: Quick Mode (32)
    Flags
        .... ...1 = Encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x094EA5FF
    Length: 52
    Encrypted payload (24 bytes)

0000  00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00   .@c.... o.`...E.
0010  00 50 00 00 40 00 2d 11 7d 76 d3 14 60 c3 3f ca   .P..@.-.}v..`.?.
0020  5c 85 01 f4 01 f4 00 3c 5a 30 8c 03 b0 4b 4b 2e   \......<Z0...KK.
0030  f7 91 e7 1b 17 09 29 a1 40 0d 08 10 20 01 09 4e   ......).@... ..N
0040  a5 ff 00 00 00 34 ab 36 27 7f 86 cd e7 6a 0f 28   .....4.6'....j.(
0050  d8 c9 8c 17 af e7 41 7b b2 dc 55 ad 63 dc 3c 44   ......A{..U.c.<D
0060  4f c8                                             O.

Frame 66 (114 bytes on wire, 114 bytes captured)
    Arrival Time: Aug 14, 2003 18:13:11.594733000
    Time delta from previous packet: 0.994982000 seconds
    Time relative to first packet: 719.346204000 seconds
    Frame Number: 66
    Packet Length: 114 bytes
    Capture Length: 114 bytes
Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad
    Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad)
    Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e)
    Type: IP (0x0800)
    Trailer: DB6273C8
Internet Protocol, Src Addr: 211.20.96.195 (211.20.96.195), Dst Addr: 63.202.92.133 (63.202.92.133)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 96
    Identification: 0x0000 (0)
    Flags: 0x04
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 45
    Protocol: UDP (0x11)
    Header checksum: 0x7d66 (correct)
    Source: 211.20.96.195 (211.20.96.195)
    Destination: 63.202.92.133 (63.202.92.133)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 76
    Checksum: 0xef05 (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x8C03B04B4B2EF791
    Responder cookie: 0xE71B170929A1400D
    Next payload: Hash (8)
    Version: 1.0
    Exchange type: Informational (5)
    Flags
        .... ...1 = Encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x40E21627
    Length: 68
    Encrypted payload (40 bytes)

0000  00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00   .@c.... o.`...E.
0010  00 60 00 00 40 00 2d 11 7d 66 d3 14 60 c3 3f ca   .`..@.-.}f..`.?.
0020  5c 85 01 f4 01 f4 00 4c ef 05 8c 03 b0 4b 4b 2e   \......L.....KK.
0030  f7 91 e7 1b 17 09 29 a1 40 0d 08 10 05 01 40 e2   ......).@.....@.
0040  16 27 00 00 00 44 a2 e4 97 a8 9b d1 38 77 9b 2b   .'...D......8w.+
0050  96 68 f7 63 ce 60 1d 2b 8f d9 9c 3f b9 5a cd 69   .h.c.`.+...?.Z.i
0060  67 61 bf c9 11 52 95 4c bc 34 20 af 70 1a db 62   ga...R.L.4 .p..b
0070  73 c8                                             s.

Frame 67 (122 bytes on wire, 122 bytes captured)
    Arrival Time: Aug 14, 2003 18:13:16.218180000
    Time delta from previous packet: 4.623447000 seconds
    Time relative to first packet: 723.969651000 seconds
    Frame Number: 67
    Packet Length: 122 bytes
    Capture Length: 122 bytes
Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad
    Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad)
    Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e)
    Type: IP (0x0800)
    Trailer: 5C16A65E
Internet Protocol, Src Addr: 211.20.96.195 (211.20.96.195), Dst Addr: 63.202.92.133 (63.202.92.133)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 104
    Identification: 0xc492 (50322)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 45
    Protocol: ESP (0x32)
    Header checksum: 0xf8aa (correct)
    Source: 211.20.96.195 (211.20.96.195)
    Destination: 63.202.92.133 (63.202.92.133)
Encapsulating Security Payload
    SPI: 0x0126b695
    Sequence: 0x00000001
    Data (76 bytes)

0000  00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00   .@c.... o.`...E.
0010  00 68 c4 92 00 00 2d 32 f8 aa d3 14 60 c3 3f ca   .h....-2....`.?.
0020  5c 85 01 26 b6 95 00 00 00 01 22 23 24 25 26 27   \..&......"#$%&'
0030  28 29 70 06 dc 68 b1 9b 51 ac 0b be 87 3d d9 c4   ()p..h..Q....=..
0040  41 f1 2b 19 7d a1 34 7a 06 8c a1 57 31 97 c3 5b   A.+.}.4z...W1..[
0050  53 a0 10 14 15 2a eb 38 be 00 25 c4 08 f6 3f 1e   S....*.8..%...?.
0060  2f 08 2d c4 f9 6e 25 99 c6 ac 3a 65 d1 dd cc b4   /.-..n%...:e....
0070  08 6b 8a 9c 60 c2 5c 16 a6 5e                     .k..`.\..^

Frame 68 (110 bytes on wire, 110 bytes captured)
    Arrival Time: Aug 14, 2003 18:13:16.218766000
    Time delta from previous packet: 0.000586000 seconds
    Time relative to first packet: 723.970237000 seconds
    Frame Number: 68
    Packet Length: 110 bytes
    Capture Length: 110 bytes
Ethernet II, Src: 00:40:63:c1:11:ad, Dst: 00:20:6f:09:60:0e
    Destination: 00:20:6f:09:60:0e (00:20:6f:09:60:0e)
    Source: 00:40:63:c1:11:ad (00:40:63:c1:11:ad)
    Type: IP (0x0800)
Internet Protocol, Src Addr: 63.202.92.133 (63.202.92.133), Dst Addr: 211.20.96.195 (211.20.96.195)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 96
    Identification: 0x00ad (173)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: ESP (0x32)
    Header checksum: 0xa998 (correct)
    Source: 63.202.92.133 (63.202.92.133)
    Destination: 211.20.96.195 (211.20.96.195)
Encapsulating Security Payload
    SPI: 0x9405eb37
    Sequence: 0x00000001
    Data (68 bytes)

0000  00 20 6f 09 60 0e 00 40 63 c1 11 ad 08 00 45 00   . o.`..@c.....E.
0010  00 60 00 ad 00 00 40 32 a9 98 3f ca 5c 85 d3 14   .`....@2..?.\...
0020  60 c3 94 05 eb 37 00 00 00 01 26 da 2f 8c c9 db   `....7....&./...
0030  8b 5f da d9 5b da 6b a1 35 9e eb ea 46 a9 50 2e   ._..[.k.5...F.P.
0040  03 27 ad 60 b3 9e af b5 68 c8 cc 0e e7 53 e5 23   .'.`....h....S.#
0050  7a fc ca 59 a9 2c 02 02 80 fa 28 9b 07 93 97 e8   z..Y.,....(.....
0060  a6 bf 72 19 13 3e a6 9d 04 8d 04 38 43 ec         ..r..>.....8C.

Frame 69 (114 bytes on wire, 114 bytes captured)
    Arrival Time: Aug 14, 2003 18:13:16.438309000
    Time delta from previous packet: 0.219543000 seconds
    Time relative to first packet: 724.189780000 seconds
    Frame Number: 69
    Packet Length: 114 bytes
    Capture Length: 114 bytes
Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad
    Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad)
    Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e)
    Type: IP (0x0800)
    Trailer: 03A719B1
Internet Protocol, Src Addr: 211.20.96.195 (211.20.96.195), Dst Addr: 63.202.92.133 (63.202.92.133)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 96
    Identification: 0xc493 (50323)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 45
    Protocol: ESP (0x32)
    Header checksum: 0xf8b1 (correct)
    Source: 211.20.96.195 (211.20.96.195)
    Destination: 63.202.92.133 (63.202.92.133)
Encapsulating Security Payload
    SPI: 0x0126b695
    Sequence: 0x00000002
    Data (68 bytes)

0000  00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00   .@c.... o.`...E.
0010  00 60 c4 93 00 00 2d 32 f8 b1 d3 14 60 c3 3f ca   .`....-2....`.?.
0020  5c 85 01 26 b6 95 00 00 00 02 38 39 3a 3b 3c 3d   \..&......89:;<=
0030  3e 3f 55 e6 f8 89 2a a7 ef 99 9b c2 e2 01 2a fd   >?U...*.......*.
0040  29 8f 89 f8 67 38 3c 2e df de 7d c3 9d 0d c9 36   )...g8<...}....6
0050  d4 73 69 36 30 86 89 85 33 ad c2 9a c1 41 d1 32   .si60...3....A.2
0060  70 67 51 24 6f 87 e3 cf 23 44 a2 6a 8a 45 03 a7   pgQ$o...#D.j.E..
0070  19 b1                                             ..

Frame 70 (306 bytes on wire, 306 bytes captured)
    Arrival Time: Aug 14, 2003 18:13:16.447816000
    Time delta from previous packet: 0.009507000 seconds
    Time relative to first packet: 724.199287000 seconds
    Frame Number: 70
    Packet Length: 306 bytes
    Capture Length: 306 bytes
Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad
    Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad)
    Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e)
    Type: IP (0x0800)
    Trailer: 3D84964E
Internet Protocol, Src Addr: 211.20.96.195 (211.20.96.195), Dst Addr: 63.202.92.133 (63.202.92.133)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 288
    Identification: 0xc494 (50324)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 45
    Protocol: ESP (0x32)
    Header checksum: 0xf7f0 (correct)
    Source: 211.20.96.195 (211.20.96.195)
    Destination: 63.202.92.133 (63.202.92.133)
Encapsulating Security Payload
    SPI: 0x0126b695
    Sequence: 0x00000003
    Data (260 bytes)

0000  00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00   .@c.... o.`...E.
0010  01 20 c4 94 00 00 2d 32 f7 f0 d3 14 60 c3 3f ca   . ....-2....`.?.
0020  5c 85 01 26 b6 95 00 00 00 03 38 39 3a 3b 3c 3d   \..&......89:;<=
0030  3e 3f 8b eb 9b 19 e9 78 98 58 fb cf af 83 3c 24   >?.....x.X....<$
0040  9d d7 6a 71 37 67 c5 21 13 ce d9 89 d3 d1 dd 51   ..jq7g.!.......Q
0050  e6 83 31 8d 59 66 d7 e4 b2 55 de 4a 91 60 3a d5   ..1.Yf...U.J.`:.
0060  51 4b 00 b5 49 7d d5 00 2e c7 b9 bd 5c 09 e7 fe   QK..I}......\...
0070  12 68 be da 2b 6f 61 f1 ac f3 50 ab 0f c3 2c ce   .h..+oa...P...,.
0080  8e 4e 4c a8 82 4b 7b cb f5 80 93 05 e4 cc e4 5b   .NL..K{........[
0090  3c ee 04 ca 02 96 ed bd 1f 80 f0 7c 63 71 0b dc   <..........|cq..
00a0  3d f3 31 55 0f af db 15 47 f9 fc 69 69 b1 65 59   =.1U....G..ii.eY
00b0  16 d8 0e 63 f3 6e d9 ef bb 2e e9 20 6d c8 e8 8c   ...c.n..... m...
00c0  fc 62 bf 15 e2 d1 64 7b 9c 18 6b 8d 46 17 0b a4   .b....d{..k.F...
00d0  85 12 8a c6 18 0f 70 f0 b8 14 b5 0e d7 77 fb 14   ......p......w..
00e0  0b cb ce 3d 66 b9 e7 99 21 fc 0d 30 71 36 50 9d   ...=f...!..0q6P.
00f0  a5 4e 66 a9 83 54 7e 26 81 78 16 bb 9a d0 ef b6   .Nf..T~&.x......
0100  0c f6 d1 1a a3 3a f5 e1 2d 13 85 70 e4 79 c3 4d   .....:..-..p.y.M
0110  cc 67 fa 32 55 f3 74 f6 89 71 0f d1 ff cd 45 f7   .g.2U.t..q....E.
0120  ac ae b5 00 7b 1e f1 a6 d5 1f f5 ab 0a de 3d 84   ....{.........=.
0130  96 4e                                             .N

Frame 71 (934 bytes on wire, 934 bytes captured)
    Arrival Time: Aug 14, 2003 18:13:16.459577000
    Time delta from previous packet: 0.011761000 seconds
    Time relative to first packet: 724.211048000 seconds
    Frame Number: 71
    Packet Length: 934 bytes
    Capture Length: 934 bytes
Ethernet II, Src: 00:40:63:c1:11:ad, Dst: 00:20:6f:09:60:0e
    Destination: 00:20:6f:09:60:0e (00:20:6f:09:60:0e)
    Source: 00:40:63:c1:11:ad (00:40:63:c1:11:ad)
    Type: IP (0x0800)
Internet Protocol, Src Addr: 63.202.92.133 (63.202.92.133), Dst Addr: 211.20.96.195 (211.20.96.195)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 920
    Identification: 0x00ae (174)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: ESP (0x32)
    Header checksum: 0xa65f (correct)
    Source: 63.202.92.133 (63.202.92.133)
    Destination: 211.20.96.195 (211.20.96.195)
Encapsulating Security Payload
    SPI: 0x9405eb37
    Sequence: 0x00000002
    Data (892 bytes)

0000  00 20 6f 09 60 0e 00 40 63 c1 11 ad 08 00 45 00   . o.`..@c.....E.
0010  03 98 00 ae 00 00 40 32 a6 5f 3f ca 5c 85 d3 14   ......@2._?.\...
0020  60 c3 94 05 eb 37 00 00 00 02 f6 44 a3 43 59 96   `....7.....D.CY.
0030  38 92 0d 93 e4 f0 0e 85 54 9d 24 5b a3 46 d8 ff   8.......T.$[.F..
0040  10 b0 db fb ca 58 60 7f f4 97 eb aa 43 3a 33 12   .....X`.....C:3.
0050  87 13 cc 9c f9 e7 f5 ce 8c 78 39 85 07 bb fc a7   .........x9.....
0060  ad 21 88 a4 b6 ba 39 08 6c 0c 1b 0f 58 ae e7 fe   .!....9.l...X...
0070  0e 3b 4d 09 7a d2 5a 15 d8 3a 62 94 d0 00 c6 d7   .;M.z.Z..:b.....
0080  6f f0 dd 13 16 7e ce 84 d0 2b 67 b1 bb 99 0e e6   o....~...+g.....
0090  36 f6 57 46 9c 40 a1 90 09 b8 b9 9a 91 99 9f ac   6.WF.@..........
00a0  26 4c ba e2 69 e8 4d 25 93 20 48 62 de b9 6c 7b   &L..i.M%. Hb..l{
00b0  05 19 9e 6b 84 6c 5e 90 eb 5a 82 3b 84 f2 a5 f4   ...k.l^..Z.;....
00c0  83 8f 0e 22 f5 d0 ce 94 4c d1 93 4b 4e 3a 3c a0   ..."....L..KN:<.
00d0  27 44 f1 02 4a 7c db e3 2f 93 d2 43 c6 31 d1 b4   'D..J|../..C.1..
00e0  6d c6 8a 55 03 49 ba 98 df 0e 42 03 df f7 4e c8   m..U.I....B...N.
00f0  67 b7 8c b5 0b ea 0a 4e c8 11 22 5f f5 30 b4 2f   g......N.."_.0./
0100  89 3b 30 0f 68 3c 05 67 13 9b a3 68 b4 b7 c2 52   .;0.h<.g...h...R
0110  29 fb fb bb 25 cb 8a ee bf 71 a7 a0 eb f2 03 70   )...%....q.....p
0120  c0 61 14 c8 a9 62 5d b5 88 07 af 29 e3 a6 a7 08   .a...b]....)....
0130  52 a9 e5 00 81 cc 8e 8e cf bb 36 eb 6d 05 6c 41   R.........6.m.lA
0140  e0 e9 a1 ca 84 cb f2 9d f2 7f d1 c9 f1 2e fb 38   ...............8
0150  aa f6 b2 9a 87 df f2 46 a0 46 3e 82 84 17 7f 9b   .......F.F>.....
0160  3c 2f ce 6e 87 e8 cd b0 c3 25 6c c8 75 70 0d 6b   </.n.....%l.up.k
0170  bf a8 f8 df 90 8b 5f 71 4b a0 fa 28 ce c3 20 70   ......_qK..(.. p
0180  77 9e 57 5e bd 6c 93 23 91 9a 3e 8b 4c 39 41 2a   w.W^.l.#..>.L9A*
0190  bc 9d 95 98 b4 d2 7c 55 18 d0 b1 30 6f 11 dc 0e   ......|U...0o...
01a0  9f e4 1e c8 4b 78 5b 50 1c 29 88 48 eb 0b da 4e   ....Kx[P.).H...N
01b0  a5 b3 d1 b9 47 8b 4f b8 7b 29 38 c8 bd ea ab 31   ....G.O.{)8....1
01c0  e0 c4 0e 53 37 df 6e 71 a9 1a f7 cf 24 2f 65 77   ...S7.nq....$/ew
01d0  a1 fb c3 03 41 5f 0f b5 d9 a3 ab 41 0b 2c 60 0b   ....A_.....A.,`.
01e0  d7 59 da b7 f8 42 53 22 f3 b0 5f 98 68 5f aa be   .Y...BS".._.h_..
01f0  c8 a7 3d d5 90 33 76 79 6e 6f 07 bd 25 b3 11 16   ..=..3vyno..%...
0200  1f 1a 1e 80 17 52 cd 3e 08 b9 ab e1 4c fe bd fb   .....R.>....L...
0210  d0 99 be 85 80 db 58 cb ae fb 21 60 5a 1a ba a9   ......X...!`Z...
0220  a1 1a 29 1e ab 5b b7 4c 4f c8 80 3a 50 c9 a0 5d   ..)..[.LO..:P..]
0230  dd a4 76 03 58 10 35 cd 51 4f 67 97 51 90 86 96   ..v.X.5.QOg.Q...
0240  01 bc 10 03 55 0d 87 f7 1e 18 65 74 22 4b 9e 22   ....U.....et"K."
0250  e4 65 f1 d9 8c 93 06 27 8d 80 04 53 ea 37 52 46   .e.....'...S.7RF
0260  b5 d6 cf 86 8a e6 d5 14 81 11 4b 2e 8b 04 f1 f3   ..........K.....
0270  5e f8 69 46 c2 d4 cf 60 d3 ed 34 b2 1f da 24 6b   ^.iF...`..4...$k
0280  d8 36 25 6e c1 fb 23 9a 26 00 73 14 c5 f3 4a fd   .6%n..#.&.s...J.
0290  3e 45 83 d7 c8 24 ee ef 70 51 ee 4b 92 6b d5 43   >E...$..pQ.K.k.C
02a0  7b ae 7e 0d 98 71 22 bf 9b 52 14 24 2f 35 9e 3d   {.~..q"..R.$/5.=
02b0  fe cc 27 8b e7 06 2f 67 0d 9c 7a 7c e9 1b aa 0d   ..'.../g..z|....
02c0  c2 5e 4a 50 83 14 02 bd e0 11 42 6d b4 63 19 a3   .^JP......Bm.c..
02d0  7c 08 95 eb af cd 85 44 e0 7c 08 5d bb 17 5d d9   |......D.|.]..].
02e0  fa 30 d4 82 d0 a2 6b 32 b4 06 4b 93 07 ae f1 1c   .0....k2..K.....
02f0  56 47 a6 e9 f1 9f 1c 47 05 04 b6 83 a4 0e 37 81   VG.....G......7.
0300  b8 1f 82 6b ed 87 ce d4 1e c9 12 81 11 f2 63 43   ...k..........cC
0310  5b 96 e3 d9 72 d8 11 19 6e 3d ac 08 f0 7d ec 69   [...r...n=...}.i
0320  45 86 29 b2 00 09 78 11 ac a5 07 70 8b 87 8c 4d   E.)...x....p...M
0330  ef 15 a5 c1 c6 55 35 d8 d8 0e c2 61 95 a3 aa 23   .....U5....a...#
0340  59 d2 b9 e4 38 d0 e8 0a 7f fe 2d 77 48 8d d6 86   Y...8.....-wH...
0350  14 4b 11 a2 ea df 1f bb 1e ce ff df ad 0a 4c 01   .K............L.
0360  02 a2 66 98 da 8f c5 ab 8a 32 63 c6 87 d8 e9 e7   ..f......2c.....
0370  50 42 c9 ac 48 84 a0 72 b6 3d f0 01 55 31 9b fb   PB..H..r.=..U1..
0380  e6 7b 92 a0 14 5d ef a5 f2 06 86 84 48 b5 1e 6f   .{...]......H..o
0390  46 fc 92 d8 a7 c8 a7 c3 e2 26 15 ef 86 8b bf 4e   F........&.....N
03a0  88 fe 05 67 56 47                                 ...gVG

Frame 72 (110 bytes on wire, 110 bytes captured)
    Arrival Time: Aug 14, 2003 18:13:16.459788000
    Time delta from previous packet: 0.000211000 seconds
    Time relative to first packet: 724.211259000 seconds
    Frame Number: 72
    Packet Length: 110 bytes
    Capture Length: 110 bytes
Ethernet II, Src: 00:40:63:c1:11:ad, Dst: 00:20:6f:09:60:0e
    Destination: 00:20:6f:09:60:0e (00:20:6f:09:60:0e)
    Source: 00:40:63:c1:11:ad (00:40:63:c1:11:ad)
    Type: IP (0x0800)
Internet Protocol, Src Addr: 63.202.92.133 (63.202.92.133), Dst Addr: 211.20.96.195 (211.20.96.195)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 96
    Identification: 0x00af (175)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: ESP (0x32)
    Header checksum: 0xa996 (correct)
    Source: 63.202.92.133 (63.202.92.133)
    Destination: 211.20.96.195 (211.20.96.195)
Encapsulating Security Payload
    SPI: 0x9405eb37
    Sequence: 0x00000003
    Data (68 bytes)

0000  00 20 6f 09 60 0e 00 40 63 c1 11 ad 08 00 45 00   . o.`..@c.....E.
0010  00 60 00 af 00 00 40 32 a9 96 3f ca 5c 85 d3 14   .`....@2..?.\...
0020  60 c3 94 05 eb 37 00 00 00 03 3e 92 86 d6 49 85   `....7....>...I.
0030  ac 40 73 20 cc cc 23 26 80 b9 bd ce b4 bb 78 59   .@s ..#&......xY
0040  72 15 b5 a4 6e 03 1e c2 f2 09 e4 3c 77 62 1e 83   r...n......<wb..
0050  2a 25 8e 3a f7 cb 33 ec 9f e8 b8 bc 1f b1 7d a8   *%.:..3.......}.
0060  17 ff e9 05 12 ea d6 a5 ab a8 b9 5c ea bb         ...........\..

Frame 73 (114 bytes on wire, 114 bytes captured)
    Arrival Time: Aug 14, 2003 18:13:16.728460000
    Time delta from previous packet: 0.268672000 seconds
    Time relative to first packet: 724.479931000 seconds
    Frame Number: 73
    Packet Length: 114 bytes
    Capture Length: 114 bytes
Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad
    Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad)
    Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e)
    Type: IP (0x0800)
    Trailer: 601C95E4
Internet Protocol, Src Addr: 211.20.96.195 (211.20.96.195), Dst Addr: 63.202.92.133 (63.202.92.133)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 96
    Identification: 0xc495 (50325)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 45
    Protocol: ESP (0x32)
    Header checksum: 0xf8af (correct)
    Source: 211.20.96.195 (211.20.96.195)
    Destination: 63.202.92.133 (63.202.92.133)
Encapsulating Security Payload
    SPI: 0x0126b695
    Sequence: 0x00000004
    Data (68 bytes)

0000  00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00   .@c.... o.`...E.
0010  00 60 c4 95 00 00 2d 32 f8 af d3 14 60 c3 3f ca   .`....-2....`.?.
0020  5c 85 01 26 b6 95 00 00 00 04 55 56 57 58 59 5a   \..&......UVWXYZ
0030  5b 5c 69 50 f5 4b 2c 84 4a dd 60 fa b2 25 ca 4b   [\iP.K,.J.`..%.K
0040  ac 7e 21 f8 a3 a2 33 37 78 e9 5f ab e5 f4 37 d2   .~!...37x._...7.
0050  84 54 44 6f ce 66 f8 ec b2 c8 a7 f6 65 1e 41 16   .TDo.f......e.A.
0060  28 b2 ea 2c d9 54 d0 85 cc 0a b8 a2 7f 45 60 1c   (..,.T.......E`.
0070  95 e4                                             ..

Frame 74 (110 bytes on wire, 110 bytes captured)
    Arrival Time: Aug 14, 2003 18:13:31.459694000
    Time delta from previous packet: 14.731234000 seconds
    Time relative to first packet: 739.211165000 seconds
    Frame Number: 74
    Packet Length: 110 bytes
    Capture Length: 110 bytes
Ethernet II, Src: 00:40:63:c1:11:ad, Dst: 00:20:6f:09:60:0e
    Destination: 00:20:6f:09:60:0e (00:20:6f:09:60:0e)
    Source: 00:40:63:c1:11:ad (00:40:63:c1:11:ad)
    Type: IP (0x0800)
Internet Protocol, Src Addr: 63.202.92.133 (63.202.92.133), Dst Addr: 211.20.96.195 (211.20.96.195)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 96
    Identification: 0x00b0 (176)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: ESP (0x32)
    Header checksum: 0xa995 (correct)
    Source: 63.202.92.133 (63.202.92.133)
    Destination: 211.20.96.195 (211.20.96.195)
Encapsulating Security Payload
    SPI: 0x9405eb37
    Sequence: 0x00000004
    Data (68 bytes)

0000  00 20 6f 09 60 0e 00 40 63 c1 11 ad 08 00 45 00   . o.`..@c.....E.
0010  00 60 00 b0 00 00 40 32 a9 95 3f ca 5c 85 d3 14   .`....@2..?.\...
0020  60 c3 94 05 eb 37 00 00 00 04 8e 16 20 e5 2b 34   `....7...... .+4
0030  66 71 2d 5f d9 87 94 05 22 73 59 1e 6a 02 6a 1f   fq-_...."sY.j.j.
0040  f7 99 94 b6 cc cc 4d ad b7 14 92 94 d6 e8 5a d4   ......M.......Z.
0050  82 10 d1 1c 5f 9a 6b 75 64 db 7c a2 d7 a6 13 d5   ...._.kud.|.....
0060  56 eb c3 51 8e b2 73 fd 32 b4 03 d5 b0 58         V..Q..s.2....X

Frame 75 (114 bytes on wire, 114 bytes captured)
    Arrival Time: Aug 14, 2003 18:13:31.678822000
    Time delta from previous packet: 0.219128000 seconds
    Time relative to first packet: 739.430293000 seconds
    Frame Number: 75
    Packet Length: 114 bytes
    Capture Length: 114 bytes
Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad
    Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad)
    Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e)
    Type: IP (0x0800)
    Trailer: D28A11E5
Internet Protocol, Src Addr: 211.20.96.195 (211.20.96.195), Dst Addr: 63.202.92.133 (63.202.92.133)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 96
    Identification: 0xc496 (50326)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 45
    Protocol: ESP (0x32)
    Header checksum: 0xf8ae (correct)
    Source: 211.20.96.195 (211.20.96.195)
    Destination: 63.202.92.133 (63.202.92.133)
Encapsulating Security Payload
    SPI: 0x0126b695
    Sequence: 0x00000005
    Data (68 bytes)

0000  00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00   .@c.... o.`...E.
0010  00 60 c4 96 00 00 2d 32 f8 ae d3 14 60 c3 3f ca   .`....-2....`.?.
0020  5c 85 01 26 b6 95 00 00 00 05 32 33 34 35 36 37   \..&......234567
0030  38 39 5e f6 c3 f1 d8 32 4d 68 3e 5c d4 2e 5d 39   89^....2Mh>\..]9
0040  e2 48 0f e9 81 60 85 48 50 f7 93 60 dc 5e 95 96   .H...`.HP..`.^..
0050  8b 80 94 b0 f2 23 7e af 56 b9 6e 65 a7 04 2a 33   .....#~.V.ne..*3
0060  17 8f a7 bb 91 d1 3b 2c 81 c4 98 99 06 0d d2 8a   ......;,........
0070  11 e5                                             ..

Frame 76 (114 bytes on wire, 114 bytes captured)
    Arrival Time: Aug 14, 2003 18:13:31.716013000
    Time delta from previous packet: 0.037191000 seconds
    Time relative to first packet: 739.467484000 seconds
    Frame Number: 76
    Packet Length: 114 bytes
    Capture Length: 114 bytes
Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad
    Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad)
    Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e)
    Type: IP (0x0800)
    Trailer: DC6CF0B7
Internet Protocol, Src Addr: 211.20.96.195 (211.20.96.195), Dst Addr: 63.202.92.133 (63.202.92.133)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 96
    Identification: 0xc497 (50327)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 45
    Protocol: ESP (0x32)
    Header checksum: 0xf8ad (correct)
    Source: 211.20.96.195 (211.20.96.195)
    Destination: 63.202.92.133 (63.202.92.133)
Encapsulating Security Payload
    SPI: 0x0126b695
    Sequence: 0x00000006
    Data (68 bytes)

0000  00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00   .@c.... o.`...E.
0010  00 60 c4 97 00 00 2d 32 f8 ad d3 14 60 c3 3f ca   .`....-2....`.?.
0020  5c 85 01 26 b6 95 00 00 00 06 36 37 38 39 3a 3b   \..&......6789:;
0030  3c 3d 7a 9f cd b0 ea 49 4e 48 85 bf 69 97 54 36   <=z....INH..i.T6
0040  dd 6a c2 fc be a6 ef 3f 57 99 de 54 cc 60 c6 31   .j.....?W..T.`.1
0050  85 9a ad b7 e5 62 38 8d 89 88 49 a4 05 2b 47 74   .....b8...I..+Gt
0060  1f 0e d3 55 5c 24 3d c7 1f 69 4f 34 e7 e1 dc 6c   ...U\$=..iO4...l
0070  f0 b7                                             ..

Frame 77 (394 bytes on wire, 394 bytes captured)
    Arrival Time: Aug 14, 2003 18:16:08.798511000
    Time delta from previous packet: 157.082498000 seconds
    Time relative to first packet: 896.549982000 seconds
    Frame Number: 77
    Packet Length: 394 bytes
    Capture Length: 394 bytes
Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad
    Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad)
    Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e)
    Type: IP (0x0800)
    Trailer: CBCDB6B6
Internet Protocol, Src Addr: 211.20.96.195 (211.20.96.195), Dst Addr: 63.202.92.133 (63.202.92.133)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 376
    Identification: 0x0000 (0)
    Flags: 0x04
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 45
    Protocol: UDP (0x11)
    Header checksum: 0x7c4e (correct)
    Source: 211.20.96.195 (211.20.96.195)
    Destination: 63.202.92.133 (63.202.92.133)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 356
    Checksum: 0xa81a (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x8C03B04B4B2EF791
    Responder cookie: 0xE71B170929A1400D
    Next payload: Hash (8)
    Version: 1.0
    Exchange type: Quick Mode (32)
    Flags
        .... ...1 = Encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0xE4867DE0
    Length: 348
    Encrypted payload (320 bytes)

0000  00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00   .@c.... o.`...E.
0010  01 78 00 00 40 00 2d 11 7c 4e d3 14 60 c3 3f ca   .x..@.-.|N..`.?.
0020  5c 85 01 f4 01 f4 01 64 a8 1a 8c 03 b0 4b 4b 2e   \......d.....KK.
0030  f7 91 e7 1b 17 09 29 a1 40 0d 08 10 20 01 e4 86   ......).@... ...
0040  7d e0 00 00 01 5c aa 2f 99 7f 6f da 07 fa be df   }....\./..o.....
0050  4a 80 6e bf 04 6f a9 0c 43 cb 49 65 1d 17 2d f2   J.n..o..C.Ie..-.
0060  c3 79 14 83 cb 7d 73 f0 26 d0 93 51 a8 2f 17 41   .y...}s.&..Q./.A
0070  a8 d0 d5 60 21 19 86 0e 0f 48 62 5d e1 10 42 e0   ...`!....Hb]..B.
0080  de 08 83 8b 04 ac d8 0e be 0f 17 19 83 93 11 cf   ................
0090  2c 5c 78 90 b4 86 d6 69 34 58 9c c0 29 94 04 18   ,\x....i4X..)...
00a0  cc 0d 6c 42 57 58 18 cc e6 f3 91 88 ee ea 39 3e   ..lBWX........9>
00b0  8e fa f9 fe a5 55 6a 5e cd e2 fb df 80 49 09 7b   .....Uj^.....I.{
00c0  fb 1a 17 69 80 4b d8 8d 44 aa dc bc 05 48 82 5d   ...i.K..D....H.]
00d0  e3 f6 a0 06 11 b3 02 88 8b a1 2c 30 f6 f4 97 3c   ..........,0...<
00e0  2a e9 6c 7c 3f c8 f0 f4 c8 4b 7c 3a f8 2c 00 20   *.l|?....K|:.,. 
00f0  3c 4c ee 5c e2 1f e3 ff 0b 6b 04 02 47 04 87 7a   <L.\.....k..G..z
0100  0e 90 a8 83 b6 89 90 7e 63 c9 a1 a8 d7 ec 79 09   .......~c.....y.
0110  02 8c a4 34 bc 3b 7d 3a df eb ad 96 07 eb 3e 79   ...4.;}:......>y
0120  6d 48 74 bf 48 fe e4 1a 9a 73 d4 36 41 e0 49 2f   mHt.H....s.6A.I/
0130  4a c5 65 59 66 13 8f a9 ac aa aa 22 7a ae 2f e9   J.eYf......"z./.
0140  d1 dc 56 fe dd ba 73 47 72 8a 42 d4 e2 d2 21 ca   ..V...sGr.B...!.
0150  d4 25 ee 2c 7e 1a ff a3 b0 d7 7d a7 0d 54 ae f1   .%.,~.....}..T..
0160  28 e8 f6 61 ec 45 b8 0e 4b 62 1a 76 c7 d6 a0 9f   (..a.E..Kb.v....
0170  5a 75 c5 2b e8 8e 6a 0b 1b 77 5e 34 4a 62 3c 56   Zu.+..j..w^4Jb<V
0180  96 74 a7 c9 db a9 cb cd b6 b6                     .t........

Frame 78 (326 bytes on wire, 326 bytes captured)
    Arrival Time: Aug 14, 2003 18:16:08.876285000
    Time delta from previous packet: 0.077774000 seconds
    Time relative to first packet: 896.627756000 seconds
    Frame Number: 78
    Packet Length: 326 bytes
    Capture Length: 326 bytes
Ethernet II, Src: 00:40:63:c1:11:ad, Dst: 00:20:6f:09:60:0e
    Destination: 00:20:6f:09:60:0e (00:20:6f:09:60:0e)
    Source: 00:40:63:c1:11:ad (00:40:63:c1:11:ad)
    Type: IP (0x0800)
Internet Protocol, Src Addr: 63.202.92.133 (63.202.92.133), Dst Addr: 211.20.96.195 (211.20.96.195)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 312
    Identification: 0x00b1 (177)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0xa8dd (correct)
    Source: 63.202.92.133 (63.202.92.133)
    Destination: 211.20.96.195 (211.20.96.195)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 292
    Checksum: 0x9fc3 (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x8C03B04B4B2EF791
    Responder cookie: 0xE71B170929A1400D
    Next payload: Hash (8)
    Version: 1.0
    Exchange type: Quick Mode (32)
    Flags
        .... ...1 = Encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0xE4867DE0
    Length: 284
    Encrypted payload (256 bytes)

0000  00 20 6f 09 60 0e 00 40 63 c1 11 ad 08 00 45 00   . o.`..@c.....E.
0010  01 38 00 b1 00 00 40 11 a8 dd 3f ca 5c 85 d3 14   .8....@...?.\...
0020  60 c3 01 f4 01 f4 01 24 9f c3 8c 03 b0 4b 4b 2e   `......$.....KK.
0030  f7 91 e7 1b 17 09 29 a1 40 0d 08 10 20 01 e4 86   ......).@... ...
0040  7d e0 00 00 01 1c bb 36 54 3b 16 81 1a f6 d8 18   }......6T;......
0050  f9 69 59 05 34 2f ad 96 39 af b9 08 07 f3 25 4e   .iY.4/..9.....%N
0060  2a 61 ad f2 fa 86 20 a1 73 24 4a 6c 4d f6 22 c9   *a.... .s$JlM.".
0070  dc 68 4b d6 10 36 ec b8 61 d0 ef 41 6f 9e 62 af   .hK..6..a..Ao.b.
0080  c9 ee a8 a3 54 70 c4 84 7b 50 bc ea 1a b9 2b 42   ....Tp..{P....+B
0090  96 42 89 90 fb a2 da b7 f3 70 e7 9f 64 5e ca 2e   .B.......p..d^..
00a0  7e c3 c9 4a f4 fb fc 95 8d ac 6a f8 c9 96 58 8a   ~..J......j...X.
00b0  c7 b0 ca 18 96 67 c4 1f 03 b1 39 55 75 2b cb 70   .....g....9Uu+.p
00c0  84 03 89 9f 2b 60 77 30 17 ee b4 8a ba d2 1d e2   ....+`w0........
00d0  07 51 c3 d3 a1 ff e2 4e 1e ef fb a1 34 91 39 7b   .Q.....N....4.9{
00e0  50 0d 05 e0 b5 fa 51 3b eb 22 05 57 18 49 69 ac   P.....Q;.".W.Ii.
00f0  ea d7 5e 2f 20 dd 3d c3 63 1e 45 d2 d6 b0 ff b0   ..^/ .=.c.E.....
0100  cd ac a4 88 97 e1 5d d3 e4 a8 f9 65 96 81 91 00   ......]....e....
0110  ff 3e 94 4b f3 80 26 8f 48 c3 f7 65 9f 56 eb d4   .>.K..&.H..e.V..
0120  26 77 a0 1e c4 26 1e 50 12 6a be 6e e6 ba d3 22   &w...&.P.j.n..."
0130  f0 5e 15 4d 2c 39 63 00 50 7f 9f 07 46 e9 19 eb   .^.M,9c.P...F...
0140  5a 70 24 2b d5 e3                                 Zp$+..

Frame 79 (98 bytes on wire, 98 bytes captured)
    Arrival Time: Aug 14, 2003 18:16:09.178091000
    Time delta from previous packet: 0.301806000 seconds
    Time relative to first packet: 896.929562000 seconds
    Frame Number: 79
    Packet Length: 98 bytes
    Capture Length: 98 bytes
Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad
    Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad)
    Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e)
    Type: IP (0x0800)
    Trailer: 18191D50
Internet Protocol, Src Addr: 211.20.96.195 (211.20.96.195), Dst Addr: 63.202.92.133 (63.202.92.133)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 80
    Identification: 0x0000 (0)
    Flags: 0x04
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 45
    Protocol: UDP (0x11)
    Header checksum: 0x7d76 (correct)
    Source: 211.20.96.195 (211.20.96.195)
    Destination: 63.202.92.133 (63.202.92.133)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 60
    Checksum: 0x11b6 (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x8C03B04B4B2EF791
    Responder cookie: 0xE71B170929A1400D
    Next payload: Hash (8)
    Version: 1.0
    Exchange type: Quick Mode (32)
    Flags
        .... ...1 = Encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0xE4867DE0
    Length: 52
    Encrypted payload (24 bytes)

0000  00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00   .@c.... o.`...E.
0010  00 50 00 00 40 00 2d 11 7d 76 d3 14 60 c3 3f ca   .P..@.-.}v..`.?.
0020  5c 85 01 f4 01 f4 00 3c 11 b6 8c 03 b0 4b 4b 2e   \......<.....KK.
0030  f7 91 e7 1b 17 09 29 a1 40 0d 08 10 20 01 e4 86   ......).@... ...
0040  7d e0 00 00 00 34 2d 28 83 cb a1 71 74 c8 d2 56   }....4-(...qt..V
0050  63 6a 3b 7d 1d 90 01 43 7a 89 5c 9c 79 bc 18 19   cj;}...Cz.\.y...
0060  1d 50                                             .P

Frame 80 (114 bytes on wire, 114 bytes captured)
    Arrival Time: Aug 14, 2003 18:16:10.172716000
    Time delta from previous packet: 0.994625000 seconds
    Time relative to first packet: 897.924187000 seconds
    Frame Number: 80
    Packet Length: 114 bytes
    Capture Length: 114 bytes
Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad
    Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad)
    Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e)
    Type: IP (0x0800)
    Trailer: E86B04EE
Internet Protocol, Src Addr: 211.20.96.195 (211.20.96.195), Dst Addr: 63.202.92.133 (63.202.92.133)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 96
    Identification: 0x0000 (0)
    Flags: 0x04
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 45
    Protocol: UDP (0x11)
    Header checksum: 0x7d66 (correct)
    Source: 211.20.96.195 (211.20.96.195)
    Destination: 63.202.92.133 (63.202.92.133)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 76
    Checksum: 0xf59f (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x8C03B04B4B2EF791
    Responder cookie: 0xE71B170929A1400D
    Next payload: Hash (8)
    Version: 1.0
    Exchange type: Informational (5)
    Flags
        .... ...1 = Encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x27D91115
    Length: 68
    Encrypted payload (40 bytes)

0000  00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00   .@c.... o.`...E.
0010  00 60 00 00 40 00 2d 11 7d 66 d3 14 60 c3 3f ca   .`..@.-.}f..`.?.
0020  5c 85 01 f4 01 f4 00 4c f5 9f 8c 03 b0 4b 4b 2e   \......L.....KK.
0030  f7 91 e7 1b 17 09 29 a1 40 0d 08 10 05 01 27 d9   ......).@.....'.
0040  11 15 00 00 00 44 b3 36 8a db 1b 30 89 37 51 3f   .....D.6...0.7Q?
0050  a6 7d 12 05 1d db 0f 05 44 c4 02 b3 b7 9e dd 4d   .}......D......M
0060  27 b0 74 9f d8 dc 97 b3 eb f2 a9 cc 70 61 e8 6b   '.t.........pa.k
0070  04 ee                                             ..

Frame 81 (122 bytes on wire, 122 bytes captured)
    Arrival Time: Aug 14, 2003 18:16:13.380613000
    Time delta from previous packet: 3.207897000 seconds
    Time relative to first packet: 901.132084000 seconds
    Frame Number: 81
    Packet Length: 122 bytes
    Capture Length: 122 bytes
Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad
    Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad)
    Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e)
    Type: IP (0x0800)
    Trailer: 2F6AF3E6
Internet Protocol, Src Addr: 211.20.96.195 (211.20.96.195), Dst Addr: 63.202.92.133 (63.202.92.133)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 104
    Identification: 0xc498 (50328)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 45
    Protocol: ESP (0x32)
    Header checksum: 0xf8a4 (correct)
    Source: 211.20.96.195 (211.20.96.195)
    Destination: 63.202.92.133 (63.202.92.133)
Encapsulating Security Payload
    SPI: 0x065a1ae4
    Sequence: 0x00000001
    Data (76 bytes)

0000  00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00   .@c.... o.`...E.
0010  00 68 c4 98 00 00 2d 32 f8 a4 d3 14 60 c3 3f ca   .h....-2....`.?.
0020  5c 85 06 5a 1a e4 00 00 00 01 9b 9c 9d 9e 9f a0   \..Z............
0030  a1 a2 06 fb 62 2b 17 27 b3 b4 05 46 28 21 6d 73   ....b+.'...F(!ms
0040  f6 b4 e9 00 3d e1 58 12 e7 5a d9 c2 43 b8 50 4b   ....=.X..Z..C.PK
0050  8c ac 50 1d 7f 6a e7 8b 8c 71 c3 f3 a2 de 21 39   ..P..j...q....!9
0060  b8 5f 4f 9f f7 b4 80 58 4f 97 92 5d ae c6 19 28   ._O....XO..]...(
0070  23 e2 ef 24 f4 0a 2f 6a f3 e6                     #..$../j..

Frame 82 (110 bytes on wire, 110 bytes captured)
    Arrival Time: Aug 14, 2003 18:16:13.381224000
    Time delta from previous packet: 0.000611000 seconds
    Time relative to first packet: 901.132695000 seconds
    Frame Number: 82
    Packet Length: 110 bytes
    Capture Length: 110 bytes
Ethernet II, Src: 00:40:63:c1:11:ad, Dst: 00:20:6f:09:60:0e
    Destination: 00:20:6f:09:60:0e (00:20:6f:09:60:0e)
    Source: 00:40:63:c1:11:ad (00:40:63:c1:11:ad)
    Type: IP (0x0800)
Internet Protocol, Src Addr: 63.202.92.133 (63.202.92.133), Dst Addr: 211.20.96.195 (211.20.96.195)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 96
    Identification: 0x00b2 (178)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: ESP (0x32)
    Header checksum: 0xa993 (correct)
    Source: 63.202.92.133 (63.202.92.133)
    Destination: 211.20.96.195 (211.20.96.195)
Encapsulating Security Payload
    SPI: 0x9405eb39
    Sequence: 0x00000001
    Data (68 bytes)

0000  00 20 6f 09 60 0e 00 40 63 c1 11 ad 08 00 45 00   . o.`..@c.....E.
0010  00 60 00 b2 00 00 40 32 a9 93 3f ca 5c 85 d3 14   .`....@2..?.\...
0020  60 c3 94 05 eb 39 00 00 00 01 57 fa d1 be 93 24   `....9....W....$
0030  a9 f1 b6 b2 5e 20 f5 8d b9 93 94 fb 10 b5 09 38   ....^ .........8
0040  3d e9 dc 6c 4c 15 b9 ee 5a 94 e3 74 4a ed 7a 4a   =..lL...Z..tJ.zJ
0050  a7 06 3c 91 ee 2f 6d 07 44 0b 17 af 96 c0 00 3c   ..<../m.D......<
0060  bf eb 1f 17 61 30 45 23 d5 b4 0c 3c 5a 4a         ....a0E#...<ZJ

Frame 83 (114 bytes on wire, 114 bytes captured)
    Arrival Time: Aug 14, 2003 18:16:13.602062000
    Time delta from previous packet: 0.220838000 seconds
    Time relative to first packet: 901.353533000 seconds
    Frame Number: 83
    Packet Length: 114 bytes
    Capture Length: 114 bytes
Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad
    Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad)
    Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e)
    Type: IP (0x0800)
    Trailer: 0410292E
Internet Protocol, Src Addr: 211.20.96.195 (211.20.96.195), Dst Addr: 63.202.92.133 (63.202.92.133)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 96
    Identification: 0xc499 (50329)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 45
    Protocol: ESP (0x32)
    Header checksum: 0xf8ab (correct)
    Source: 211.20.96.195 (211.20.96.195)
    Destination: 63.202.92.133 (63.202.92.133)
Encapsulating Security Payload
    SPI: 0x065a1ae4
    Sequence: 0x00000002
    Data (68 bytes)

0000  00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00   .@c.... o.`...E.
0010  00 60 c4 99 00 00 2d 32 f8 ab d3 14 60 c3 3f ca   .`....-2....`.?.
0020  5c 85 06 5a 1a e4 00 00 00 02 b1 b2 b3 b4 b5 b6   \..Z............
0030  b7 b8 b9 31 65 22 96 3c 18 92 09 bc df 7e 1d 1a   ...1e".<.....~..
0040  09 01 50 67 00 01 a1 1f ac 3d 5d 77 d2 2d ee d1   ..Pg.....=]w.-..
0050  e5 ba 0e 65 2d c4 5b 22 d1 81 1e 4a 32 fe bc 89   ...e-.["...J2...
0060  c0 b4 98 8d f6 8d 70 60 14 83 d5 2b 9d 5c 04 10   ......p`...+.\..
0070  29 2e                                             ).

Frame 84 (306 bytes on wire, 306 bytes captured)
    Arrival Time: Aug 14, 2003 18:16:13.612108000
    Time delta from previous packet: 0.010046000 seconds
    Time relative to first packet: 901.363579000 seconds
    Frame Number: 84
    Packet Length: 306 bytes
    Capture Length: 306 bytes
Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad
    Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad)
    Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e)
    Type: IP (0x0800)
    Trailer: 262DC9EF
Internet Protocol, Src Addr: 211.20.96.195 (211.20.96.195), Dst Addr: 63.202.92.133 (63.202.92.133)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 288
    Identification: 0xc49a (50330)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 45
    Protocol: ESP (0x32)
    Header checksum: 0xf7ea (correct)
    Source: 211.20.96.195 (211.20.96.195)
    Destination: 63.202.92.133 (63.202.92.133)
Encapsulating Security Payload
    SPI: 0x065a1ae4
    Sequence: 0x00000003
    Data (260 bytes)

0000  00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00   .@c.... o.`...E.
0010  01 20 c4 9a 00 00 2d 32 f7 ea d3 14 60 c3 3f ca   . ....-2....`.?.
0020  5c 85 06 5a 1a e4 00 00 00 03 b1 b2 b3 b4 b5 b6   \..Z............
0030  b7 b8 b9 01 7f 86 b7 c8 4b 2a d8 5e 90 bd 00 80   ........K*.^....
0040  13 fd 6b 61 5d e8 a8 77 ee 19 53 16 8c ce e4 97   ..ka]..w..S.....
0050  b7 cb ce 4a a9 3d fe bb 65 9c ff 34 69 9c 14 f0   ...J.=..e..4i...
0060  76 a6 44 22 bf 40 e6 60 48 13 6f d9 28 d3 37 b4   v.D".@.`H.o.(.7.
0070  31 cf df 02 d1 dd 0a f9 42 c3 e4 b7 2a f9 13 02   1.......B...*...
0080  16 e3 f1 94 29 3c 26 22 3e ac fb 5d 2b 9a 43 4b   ....)<&">..]+.CK
0090  01 7f 6e 43 4f 65 41 da 94 ca db e2 7c f1 80 85   ..nCOeA.....|...
00a0  83 b9 1a 1f 32 3e 48 c1 c5 25 76 a4 26 2d 32 ac   ....2>H..%v.&-2.
00b0  c7 cc 75 7e b7 67 df d2 9d 5c dd c5 03 e3 2d 25   ..u~.g...\....-%
00c0  c7 ea 49 03 83 6a 7b 78 c0 3d 2e 68 c4 3c 86 99   ..I..j{x.=.h.<..
00d0  a3 d6 aa bf 6c 6b 40 fe d2 66 56 e2 bd f7 7d 85   ....lk@..fV...}.
00e0  73 8c ed f6 da 48 88 ca c9 0e d1 22 8a 46 0b 4b   s....H.....".F.K
00f0  fd 77 f2 75 5e 58 06 1e 93 1b 2b 29 eb 78 f1 2b   .w.u^X....+).x.+
0100  90 84 7b ff 9a 26 31 cf 10 8d 65 f6 d3 5c 38 ca   ..{..&1...e..\8.
0110  8c 04 ac cf 79 44 e1 76 67 6b b9 c6 5a c8 b0 5a   ....yD.vgk..Z..Z
0120  53 7c 1e 79 cf 9e b1 b7 ed a8 a2 57 87 4c 26 2d   S|.y.......W.L&-
0130  c9 ef                                             ..

Frame 85 (934 bytes on wire, 934 bytes captured)
    Arrival Time: Aug 14, 2003 18:16:13.623854000
    Time delta from previous packet: 0.011746000 seconds
    Time relative to first packet: 901.375325000 seconds
    Frame Number: 85
    Packet Length: 934 bytes
    Capture Length: 934 bytes
Ethernet II, Src: 00:40:63:c1:11:ad, Dst: 00:20:6f:09:60:0e
    Destination: 00:20:6f:09:60:0e (00:20:6f:09:60:0e)
    Source: 00:40:63:c1:11:ad (00:40:63:c1:11:ad)
    Type: IP (0x0800)
Internet Protocol, Src Addr: 63.202.92.133 (63.202.92.133), Dst Addr: 211.20.96.195 (211.20.96.195)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 920
    Identification: 0x00b3 (179)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: ESP (0x32)
    Header checksum: 0xa65a (correct)
    Source: 63.202.92.133 (63.202.92.133)
    Destination: 211.20.96.195 (211.20.96.195)
Encapsulating Security Payload
    SPI: 0x9405eb39
    Sequence: 0x00000002
    Data (892 bytes)

0000  00 20 6f 09 60 0e 00 40 63 c1 11 ad 08 00 45 00   . o.`..@c.....E.
0010  03 98 00 b3 00 00 40 32 a6 5a 3f ca 5c 85 d3 14   ......@2.Z?.\...
0020  60 c3 94 05 eb 39 00 00 00 02 f1 65 75 8f a6 3a   `....9.....eu..:
0030  fc dd 58 93 67 db e6 89 5c 1a a4 1d 11 31 3b 9e   ..X.g...\....1;.
0040  bc e3 db 8c 61 d4 4d 57 84 c2 0e 59 94 8e ff f1   ....a.MW...Y....
0050  1f b2 8a 16 3b c6 0b e4 a8 2d 54 b3 16 e0 87 8b   ....;....-T.....
0060  47 51 ef f7 6a 68 5d 6b a6 ab 88 4e 6f 28 51 84   GQ..jh]k...No(Q.
0070  1f 65 07 3c bd 0e f5 66 d4 43 4b 45 47 d6 0b 86   .e.<...f.CKEG...
0080  af 54 ec fa 4a 7b d8 c8 10 87 f2 3d 29 a7 42 52   .T..J{.....=).BR
0090  f0 52 f2 54 b2 fc 93 08 c5 84 10 a8 fb 96 5d 3c   .R.T..........]<
00a0  8e c8 b5 1f f2 ed 1a 4b be ec 8b c3 c8 78 1c 8e   .......K.....x..
00b0  a2 97 bf 30 78 2e 8b 66 89 98 c8 d3 cc 58 f1 61   ...0x..f.....X.a
00c0  7f 96 fa 5f 68 7b ef b0 d0 99 1b 25 61 b5 36 de   ..._h{.....%a.6.
00d0  48 fd ad 2e 72 7c a7 93 77 0c 50 f4 c6 44 ad e0   H...r|..w.P..D..
00e0  72 d1 3e 90 96 97 be ae 07 97 69 13 c0 b0 5d 4b   r.>.......i...]K
00f0  6e 88 02 bb a7 aa 23 4f 1d d8 7c bf 6a 56 a3 16   n.....#O..|.jV..
0100  dc 64 e6 2c 4b 9d e4 9d 96 f3 7d da b2 c1 41 73   .d.,K.....}...As
0110  2d 96 01 2f fc 2f 1e 04 ae 71 aa 8f 52 26 a9 1f   -.././...q..R&..
0120  02 38 f7 18 01 05 6f d9 e4 28 7b 98 53 39 97 76   .8....o..({.S9.v
0130  31 e0 94 18 70 3c 7d ea d1 25 93 89 11 60 f8 bf   1...p<}..%...`..
0140  fa e6 6a 1d 00 46 fe f0 1c 97 69 2c 76 4b bd dc   ..j..F....i,vK..
0150  10 19 26 f0 2d 42 0d e1 6b e4 39 ff 31 6a c8 b3   ..&.-B..k.9.1j..
0160  fe e8 7c 8d a4 1a 4f b1 be ff f5 62 ca 32 25 02   ..|...O....b.2%.
0170  99 4c 9a 3b 31 37 1a d1 32 dd 55 98 c4 d1 f1 8e   .L.;17..2.U.....
0180  da 71 78 ca 0f c8 1c a5 c2 69 73 19 c3 df 49 68   .qx......is...Ih
0190  97 68 bf 47 ed 82 67 d1 1b 9a 53 70 07 89 f4 e9   .h.G..g...Sp....
01a0  9a fd 05 16 e8 eb 1b 49 3c a2 b3 65 8b 93 70 40   .......I<..e..p@
01b0  25 0d f4 21 74 62 12 f5 ee 9b c2 c6 9f c0 c9 5f   %..!tb........._
01c0  78 03 94 25 32 80 e7 92 d2 72 c7 c5 f3 ec 6d 34   x..%2....r....m4
01d0  7a 5d 6e b4 25 92 99 5f 56 48 6c e1 59 0e 41 07   z]n.%.._VHl.Y.A.
01e0  47 86 34 d7 08 f4 f9 90 df 25 89 61 c4 42 42 83   G.4......%.a.BB.
01f0  67 0e b7 22 16 64 15 c6 ed dc 2b f8 b7 86 37 00   g..".d....+...7.
0200  3a a6 35 72 02 7e f7 dc 20 53 4b 6e f1 51 76 1d   :.5r.~.. SKn.Qv.
0210  34 77 bb 81 24 48 38 86 14 92 0d 15 42 82 43 4e   4w..$H8.....B.CN
0220  b9 bb 35 54 73 8e 6c d5 fc 52 b3 25 85 4c 5f 27   ..5Ts.l..R.%.L_'
0230  7e 90 5e 26 7e 43 03 e2 f6 50 79 e6 0a db fd bc   ~.^&~C...Py.....
0240  5c dd 65 01 bc 94 5c 53 4a fd 5b bb a5 6c c6 5b   \.e...\SJ.[..l.[
0250  54 08 b1 cc ec 9e c4 d0 e6 ee 29 26 97 38 37 bd   T.........)&.87.
0260  26 b7 4e a1 06 dd 1b 97 f7 15 2e 29 11 89 7a c7   &.N........)..z.
0270  a5 ed b7 22 37 12 16 8e 65 92 6c ae ee 2f 0a df   ..."7...e.l../..
0280  17 20 38 9f 9a 6a 50 1d 89 5c 8a 66 b6 33 38 a3   . 8..jP..\.f.38.
0290  48 53 bd 69 e2 04 7c fa 04 7d 6b c3 04 2c 2a 49   HS.i..|..}k..,*I
02a0  15 51 33 ff 77 cf ab 42 69 5f ae b5 d9 2f 50 6d   .Q3.w..Bi_.../Pm
02b0  05 38 c4 d5 e0 c8 64 28 fd cc 6b 6c 0b 92 92 b4   .8....d(..kl....
02c0  3d 93 e9 22 53 41 77 c0 01 15 87 4a 12 3e 0e d5   =.."SAw....J.>..
02d0  19 fd c2 e9 2f ac da 08 8c 6d 13 38 66 68 c9 35   ..../....m.8fh.5
02e0  e5 c8 8e 63 25 d5 51 af 6d 44 44 34 98 8c b5 23   ...c%.Q.mDD4...#
02f0  1d ac b5 bb 19 0d d9 a9 96 ef ce a0 f3 ce 47 5d   ..............G]
0300  27 38 36 8b 97 ee 9c 16 a6 66 70 64 5a 53 eb 33   '86......fpdZS.3
0310  5a f5 9f dd b1 4f 90 dd 69 2e b1 7f 5d 41 a2 0d   Z....O..i...]A..
0320  39 77 39 fc 2d 8f b9 d5 94 ea cd 36 42 aa 9a ce   9w9.-......6B...
0330  6d e9 06 4b cf 55 91 26 20 87 10 04 bf 48 74 14   m..K.U.& ....Ht.
0340  c1 be 18 3d a4 a2 83 70 74 18 4c 92 87 35 56 c7   ...=...pt.L..5V.
0350  91 5c 51 62 cf 42 ef 01 a4 7b fa d2 a8 ca 4d 6d   .\Qb.B...{....Mm
0360  6a bc cb 78 34 c6 bd af c4 73 7f 01 6a f2 37 55   j..x4....s..j.7U
0370  7e 2a 64 ab 12 b1 07 35 db 7a 20 0b f4 df 28 c4   ~*d....5.z ...(.
0380  e2 ca 01 68 33 6c 56 be 0a e5 a2 bd 36 43 0d 85   ...h3lV.....6C..
0390  47 8e 77 35 17 b6 06 5d fc 4e 1f 30 b7 72 08 d2   G.w5...].N.0.r..
03a0  a3 26 e4 35 14 b6                                 .&.5..

Frame 86 (110 bytes on wire, 110 bytes captured)
    Arrival Time: Aug 14, 2003 18:16:13.624059000
    Time delta from previous packet: 0.000205000 seconds
    Time relative to first packet: 901.375530000 seconds
    Frame Number: 86
    Packet Length: 110 bytes
    Capture Length: 110 bytes
Ethernet II, Src: 00:40:63:c1:11:ad, Dst: 00:20:6f:09:60:0e
    Destination: 00:20:6f:09:60:0e (00:20:6f:09:60:0e)
    Source: 00:40:63:c1:11:ad (00:40:63:c1:11:ad)
    Type: IP (0x0800)
Internet Protocol, Src Addr: 63.202.92.133 (63.202.92.133), Dst Addr: 211.20.96.195 (211.20.96.195)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 96
    Identification: 0x00b4 (180)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: ESP (0x32)
    Header checksum: 0xa991 (correct)
    Source: 63.202.92.133 (63.202.92.133)
    Destination: 211.20.96.195 (211.20.96.195)
Encapsulating Security Payload
    SPI: 0x9405eb39
    Sequence: 0x00000003
    Data (68 bytes)

0000  00 20 6f 09 60 0e 00 40 63 c1 11 ad 08 00 45 00   . o.`..@c.....E.
0010  00 60 00 b4 00 00 40 32 a9 91 3f ca 5c 85 d3 14   .`....@2..?.\...
0020  60 c3 94 05 eb 39 00 00 00 03 d2 77 d5 3d df 03   `....9.....w.=..
0030  46 61 b7 3a e4 a4 05 2b a4 06 22 e5 d9 40 40 01   Fa.:...+.."..@@.
0040  65 23 90 c0 85 06 1a c5 c0 7b 5e 62 41 a8 c4 b6   e#.......{^bA...
0050  6f 56 57 b0 e6 e6 7d 49 be 8e 33 2c 4f d7 14 f6   oVW...}I..3,O...
0060  17 e6 02 a2 c1 73 5a b8 6b 83 25 04 61 af         .....sZ.k.%.a.

Frame 87 (114 bytes on wire, 114 bytes captured)
    Arrival Time: Aug 14, 2003 18:16:13.898471000
    Time delta from previous packet: 0.274412000 seconds
    Time relative to first packet: 901.649942000 seconds
    Frame Number: 87
    Packet Length: 114 bytes
    Capture Length: 114 bytes
Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad
    Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad)
    Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e)
    Type: IP (0x0800)
    Trailer: 4CB71640
Internet Protocol, Src Addr: 211.20.96.195 (211.20.96.195), Dst Addr: 63.202.92.133 (63.202.92.133)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 96
    Identification: 0xc49b (50331)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 45
    Protocol: ESP (0x32)
    Header checksum: 0xf8a9 (correct)
    Source: 211.20.96.195 (211.20.96.195)
    Destination: 63.202.92.133 (63.202.92.133)
Encapsulating Security Payload
    SPI: 0x065a1ae4
    Sequence: 0x00000004
    Data (68 bytes)

0000  00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00   .@c.... o.`...E.
0010  00 60 c4 9b 00 00 2d 32 f8 a9 d3 14 60 c3 3f ca   .`....-2....`.?.
0020  5c 85 06 5a 1a e4 00 00 00 04 cf d0 d1 d2 d3 d4   \..Z............
0030  d5 d6 ba 86 9a 00 f7 34 56 26 33 b0 d4 86 44 95   .......4V&3...D.
0040  ab 38 7a 1b b0 04 2c 95 54 ba e1 09 f8 51 79 5f   .8z...,.T....Qy_
0050  4b 9d f9 11 fb 3e 64 e6 94 a0 a7 b6 3a 46 25 52   K....>d.....:F%R
0060  17 0f bf 62 a4 f4 8f 29 48 2e 4d 86 13 e5 4c b7   ...b...)H.M...L.
0070  16 40                                             .@

Frame 88 (110 bytes on wire, 110 bytes captured)
    Arrival Time: Aug 14, 2003 18:16:28.627370000
    Time delta from previous packet: 14.728899000 seconds
    Time relative to first packet: 916.378841000 seconds
    Frame Number: 88
    Packet Length: 110 bytes
    Capture Length: 110 bytes
Ethernet II, Src: 00:40:63:c1:11:ad, Dst: 00:20:6f:09:60:0e
    Destination: 00:20:6f:09:60:0e (00:20:6f:09:60:0e)
    Source: 00:40:63:c1:11:ad (00:40:63:c1:11:ad)
    Type: IP (0x0800)
Internet Protocol, Src Addr: 63.202.92.133 (63.202.92.133), Dst Addr: 211.20.96.195 (211.20.96.195)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 96
    Identification: 0x00b5 (181)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: ESP (0x32)
    Header checksum: 0xa990 (correct)
    Source: 63.202.92.133 (63.202.92.133)
    Destination: 211.20.96.195 (211.20.96.195)
Encapsulating Security Payload
    SPI: 0x9405eb39
    Sequence: 0x00000004
    Data (68 bytes)

0000  00 20 6f 09 60 0e 00 40 63 c1 11 ad 08 00 45 00   . o.`..@c.....E.
0010  00 60 00 b5 00 00 40 32 a9 90 3f ca 5c 85 d3 14   .`....@2..?.\...
0020  60 c3 94 05 eb 39 00 00 00 04 65 30 37 67 27 33   `....9....e07g'3
0030  af 76 8a c5 14 16 4e 1c 21 b0 d3 81 b5 9f fb 07   .v....N.!.......
0040  a6 8d 96 99 36 c5 f3 dd ce f4 2f cc 05 8a d7 f2   ....6...../.....
0050  a5 ad dc 85 77 07 ad ad 27 27 98 2f 9c 26 e3 c3   ....w...''./.&..
0060  76 23 5f c6 7c 5a b4 a4 7f e9 6c c8 2a 69         v#_.|Z....l.*i

Frame 89 (114 bytes on wire, 114 bytes captured)
    Arrival Time: Aug 14, 2003 18:16:28.854866000
    Time delta from previous packet: 0.227496000 seconds
    Time relative to first packet: 916.606337000 seconds
    Frame Number: 89
    Packet Length: 114 bytes
    Capture Length: 114 bytes
Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad
    Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad)
    Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e)
    Type: IP (0x0800)
    Trailer: AAABF0CF
Internet Protocol, Src Addr: 211.20.96.195 (211.20.96.195), Dst Addr: 63.202.92.133 (63.202.92.133)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 96
    Identification: 0xc49c (50332)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 45
    Protocol: ESP (0x32)
    Header checksum: 0xf8a8 (correct)
    Source: 211.20.96.195 (211.20.96.195)
    Destination: 63.202.92.133 (63.202.92.133)
Encapsulating Security Payload
    SPI: 0x065a1ae4
    Sequence: 0x00000005
    Data (68 bytes)

0000  00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00   .@c.... o.`...E.
0010  00 60 c4 9c 00 00 2d 32 f8 a8 d3 14 60 c3 3f ca   .`....-2....`.?.
0020  5c 85 06 5a 1a e4 00 00 00 05 ad ae af b0 b1 b2   \..Z............
0030  b3 b4 08 b8 10 bd 7e d2 6e dd bf 8b 88 52 d5 87   ......~.n....R..
0040  f6 fa 4f ee a9 70 f5 1e 4c df 98 18 13 1e 68 6f   ..O..p..L.....ho
0050  c6 22 9c f1 56 53 b0 40 48 c7 6d f2 7f 9b df 40   ."..VS.@H.m....@
0060  11 19 07 4e c2 9c 44 a6 75 97 ed be f6 d9 aa ab   ...N..D.u.......
0070  f0 cf                                             ..

Frame 90 (114 bytes on wire, 114 bytes captured)
    Arrival Time: Aug 14, 2003 18:16:28.892938000
    Time delta from previous packet: 0.038072000 seconds
    Time relative to first packet: 916.644409000 seconds
    Frame Number: 90
    Packet Length: 114 bytes
    Capture Length: 114 bytes
Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad
    Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad)
    Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e)
    Type: IP (0x0800)
    Trailer: 839F14D9
Internet Protocol, Src Addr: 211.20.96.195 (211.20.96.195), Dst Addr: 63.202.92.133 (63.202.92.133)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 96
    Identification: 0xc49d (50333)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 45
    Protocol: ESP (0x32)
    Header checksum: 0xf8a7 (correct)
    Source: 211.20.96.195 (211.20.96.195)
    Destination: 63.202.92.133 (63.202.92.133)
Encapsulating Security Payload
    SPI: 0x065a1ae4
    Sequence: 0x00000006
    Data (68 bytes)

0000  00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00   .@c.... o.`...E.
0010  00 60 c4 9d 00 00 2d 32 f8 a7 d3 14 60 c3 3f ca   .`....-2....`.?.
0020  5c 85 06 5a 1a e4 00 00 00 06 b1 b2 b3 b4 b5 b6   \..Z............
0030  b7 b8 29 97 4f a5 07 cf 9b 82 a9 01 79 39 3c e9   ..).O.......y9<.
0040  af 2a 92 bb 8a fc ed 88 c6 c3 05 05 dd 8b ae 47   .*.............G
0050  32 89 de 27 1d 10 f8 ea 4d fc b2 42 f1 07 08 de   2..'....M..B....
0060  d9 27 b8 7c 91 70 3a ce a3 aa 08 b6 6d 35 83 9f   .'.|.p:.....m5..
0070  14 d9                                             ..

Frame 91 (394 bytes on wire, 394 bytes captured)
    Arrival Time: Aug 14, 2003 18:19:08.203085000
    Time delta from previous packet: 159.310147000 seconds
    Time relative to first packet: 1075.954556000 seconds
    Frame Number: 91
    Packet Length: 394 bytes
    Capture Length: 394 bytes
Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad
    Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad)
    Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e)
    Type: IP (0x0800)
    Trailer: F6508B91
Internet Protocol, Src Addr: 211.20.96.195 (211.20.96.195), Dst Addr: 63.202.92.133 (63.202.92.133)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 376
    Identification: 0x0000 (0)
    Flags: 0x04
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 45
    Protocol: UDP (0x11)
    Header checksum: 0x7c4e (correct)
    Source: 211.20.96.195 (211.20.96.195)
    Destination: 63.202.92.133 (63.202.92.133)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 356
    Checksum: 0x4cf6 (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x8C03B04B4B2EF791
    Responder cookie: 0xE71B170929A1400D
    Next payload: Hash (8)
    Version: 1.0
    Exchange type: Quick Mode (32)
    Flags
        .... ...1 = Encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x50F9C855
    Length: 348
    Encrypted payload (320 bytes)

0000  00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00   .@c.... o.`...E.
0010  01 78 00 00 40 00 2d 11 7c 4e d3 14 60 c3 3f ca   .x..@.-.|N..`.?.
0020  5c 85 01 f4 01 f4 01 64 4c f6 8c 03 b0 4b 4b 2e   \......dL....KK.
0030  f7 91 e7 1b 17 09 29 a1 40 0d 08 10 20 01 50 f9   ......).@... .P.
0040  c8 55 00 00 01 5c 4c 38 24 3d 5d 07 9d 11 3f e3   .U...\L8$=]...?.
0050  b1 ca 84 39 48 fc 59 98 10 bf 58 04 5c 02 34 65   ...9H.Y...X.\.4e
0060  2c 9e 04 50 3c fa a6 fa 04 c3 22 89 fd c1 9b 1b   ,..P<.....".....
0070  96 a0 6c 53 22 fa 94 2e 4c 2b 8e 30 a7 48 35 d9   ..lS"...L+.0.H5.
0080  cb 04 af b1 f3 63 86 67 f9 25 54 3f c0 24 a4 a8   .....c.g.%T?.$..
0090  f9 75 10 77 1e f1 60 75 d4 99 67 93 74 38 46 19   .u.w..`u..g.t8F.
00a0  39 e8 63 1b 65 0d c4 2a 2f bb c3 40 32 f9 de 6b   9.c.e..*/..@2..k
00b0  54 81 9d 4a 15 20 74 1a 7e bb 05 44 5a ec f4 3f   T..J. t.~..DZ..?
00c0  4e d3 f7 49 d4 18 0d e6 9d 53 4e de 4b 54 f1 db   N..I.....SN.KT..
00d0  90 11 36 11 34 f5 fc 0a 1c 6e f8 ac 9e dd cf 7a   ..6.4....n.....z
00e0  69 97 76 9d 2a 8a 75 0c 86 5c 75 86 17 3e a6 b5   i.v.*.u..\u..>..
00f0  1e c6 80 2b 44 06 3d 13 d4 81 bc fe b6 e9 74 f4   ...+D.=.......t.
0100  c4 92 f1 52 f4 48 c4 f5 d9 1e 52 86 0d c3 4b a7   ...R.H....R...K.
0110  cf dc 1c 4c 94 f6 71 6d 92 ef b8 c6 d8 d2 cc da   ...L..qm........
0120  bb 6c 11 86 19 95 4f 96 0f e6 33 12 a8 53 94 c1   .l....O...3..S..
0130  87 a8 c7 9e e3 7d e1 78 58 69 b4 1e 0f a3 a9 81   .....}.xXi......
0140  26 67 46 f6 11 fd 14 1a 9e 7d 93 a5 4d 83 40 01   &gF......}..M.@.
0150  34 9c 30 e4 e3 11 d9 8f 77 38 9f eb d6 2a c0 8a   4.0.....w8...*..
0160  4a 46 db 90 3c 9d 2c 4a af f6 7b 76 3d d8 5d 76   JF..<.,J..{v=.]v
0170  55 9b 93 00 29 40 77 42 ad ee 4b 9b 6a 94 94 71   U...)@wB..K.j..q
0180  7d c7 9c 1e 50 cb f6 50 8b 91                     }...P..P..

Frame 92 (326 bytes on wire, 326 bytes captured)
    Arrival Time: Aug 14, 2003 18:19:08.288751000
    Time delta from previous packet: 0.085666000 seconds
    Time relative to first packet: 1076.040222000 seconds
    Frame Number: 92
    Packet Length: 326 bytes
    Capture Length: 326 bytes
Ethernet II, Src: 00:40:63:c1:11:ad, Dst: 00:20:6f:09:60:0e
    Destination: 00:20:6f:09:60:0e (00:20:6f:09:60:0e)
    Source: 00:40:63:c1:11:ad (00:40:63:c1:11:ad)
    Type: IP (0x0800)
Internet Protocol, Src Addr: 63.202.92.133 (63.202.92.133), Dst Addr: 211.20.96.195 (211.20.96.195)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 312
    Identification: 0x00b6 (182)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0xa8d8 (correct)
    Source: 63.202.92.133 (63.202.92.133)
    Destination: 211.20.96.195 (211.20.96.195)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 292
    Checksum: 0xb695 (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x8C03B04B4B2EF791
    Responder cookie: 0xE71B170929A1400D
    Next payload: Hash (8)
    Version: 1.0
    Exchange type: Quick Mode (32)
    Flags
        .... ...1 = Encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x50F9C855
    Length: 284
    Encrypted payload (256 bytes)

0000  00 20 6f 09 60 0e 00 40 63 c1 11 ad 08 00 45 00   . o.`..@c.....E.
0010  01 38 00 b6 00 00 40 11 a8 d8 3f ca 5c 85 d3 14   .8....@...?.\...
0020  60 c3 01 f4 01 f4 01 24 b6 95 8c 03 b0 4b 4b 2e   `......$.....KK.
0030  f7 91 e7 1b 17 09 29 a1 40 0d 08 10 20 01 50 f9   ......).@... .P.
0040  c8 55 00 00 01 1c f9 d2 97 ab e2 a8 32 da 0c 68   .U..........2..h
0050  f5 78 da ab b7 0f c3 ba b4 00 ca a3 63 8a 4f 01   .x..........c.O.
0060  a4 c0 90 19 97 bc da 01 95 79 15 01 02 a6 1a 02   .........y......
0070  c2 7b a1 51 ae 89 e1 f3 8e 14 3c 69 d8 9d 7b d2   .{.Q......<i..{.
0080  6c 83 31 66 81 39 3a 66 22 25 2d b3 91 91 b6 ea   l.1f.9:f"%-.....
0090  b9 cb 2f 4f c3 37 34 44 7b b2 7d e2 63 ea b8 b4   ../O.74D{.}.c...
00a0  ba 0f ec cc e1 88 7b 06 c9 82 94 3e 44 6c 8f ea   ......{....>Dl..
00b0  a4 68 f0 8d 16 d3 ce 4c 55 42 71 35 fa bb 10 57   .h.....LUBq5...W
00c0  2d ab 1f f5 c3 ef 17 bc 89 e1 7a 94 d7 f3 ae 05   -.........z.....
00d0  b0 49 32 6e f8 a5 eb 50 d2 d8 82 f2 9a 46 f5 3f   .I2n...P.....F.?
00e0  8f 05 bb 65 25 2c 00 ca 64 df 6b a6 61 e8 66 37   ...e%,..d.k.a.f7
00f0  4a b5 30 d9 72 62 4b 83 97 ae 46 a0 c3 8e 6f 8e   J.0.rbK...F...o.
0100  ca 8c 1d fd 0c 74 25 ca f1 3c cc b8 34 56 d4 65   .....t%..<..4V.e
0110  71 6e 6f f5 b6 38 f2 7d 5b 98 12 ad 3a 15 c9 84   qno..8.}[...:...
0120  bc 12 64 68 9c 83 27 7a 4f 6a e9 4c 43 6a 7b 87   ..dh..'zOj.LCj{.
0130  2f 63 53 3d 9a 79 e6 1a 21 67 d8 da d6 98 ae e5   /cS=.y..!g......
0140  2e ff 88 e9 87 3e                                 .....>

Frame 93 (98 bytes on wire, 98 bytes captured)
    Arrival Time: Aug 14, 2003 18:19:08.590940000
    Time delta from previous packet: 0.302189000 seconds
    Time relative to first packet: 1076.342411000 seconds
    Frame Number: 93
    Packet Length: 98 bytes
    Capture Length: 98 bytes
Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad
    Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad)
    Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e)
    Type: IP (0x0800)
    Trailer: 69E9D78E
Internet Protocol, Src Addr: 211.20.96.195 (211.20.96.195), Dst Addr: 63.202.92.133 (63.202.92.133)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 80
    Identification: 0x0000 (0)
    Flags: 0x04
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 45
    Protocol: UDP (0x11)
    Header checksum: 0x7d76 (correct)
    Source: 211.20.96.195 (211.20.96.195)
    Destination: 63.202.92.133 (63.202.92.133)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 60
    Checksum: 0x1bb4 (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x8C03B04B4B2EF791
    Responder cookie: 0xE71B170929A1400D
    Next payload: Hash (8)
    Version: 1.0
    Exchange type: Quick Mode (32)
    Flags
        .... ...1 = Encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x50F9C855
    Length: 52
    Encrypted payload (24 bytes)

0000  00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00   .@c.... o.`...E.
0010  00 50 00 00 40 00 2d 11 7d 76 d3 14 60 c3 3f ca   .P..@.-.}v..`.?.
0020  5c 85 01 f4 01 f4 00 3c 1b b4 8c 03 b0 4b 4b 2e   \......<.....KK.
0030  f7 91 e7 1b 17 09 29 a1 40 0d 08 10 20 01 50 f9   ......).@... .P.
0040  c8 55 00 00 00 34 b2 f7 7e b9 c2 cd 4f 98 0e 20   .U...4..~...O.. 
0050  ac b8 bd ad 3f b1 68 59 85 d7 16 64 e6 57 69 e9   ....?.hY...d.Wi.
0060  d7 8e                                             ..

Frame 94 (114 bytes on wire, 114 bytes captured)
    Arrival Time: Aug 14, 2003 18:19:09.588501000
    Time delta from previous packet: 0.997561000 seconds
    Time relative to first packet: 1077.339972000 seconds
    Frame Number: 94
    Packet Length: 114 bytes
    Capture Length: 114 bytes
Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad
    Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad)
    Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e)
    Type: IP (0x0800)
    Trailer: AFCC30E4
Internet Protocol, Src Addr: 211.20.96.195 (211.20.96.195), Dst Addr: 63.202.92.133 (63.202.92.133)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 96
    Identification: 0x0000 (0)
    Flags: 0x04
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 45
    Protocol: UDP (0x11)
    Header checksum: 0x7d66 (correct)
    Source: 211.20.96.195 (211.20.96.195)
    Destination: 63.202.92.133 (63.202.92.133)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 76
    Checksum: 0x0565 (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x8C03B04B4B2EF791
    Responder cookie: 0xE71B170929A1400D
    Next payload: Hash (8)
    Version: 1.0
    Exchange type: Informational (5)
    Flags
        .... ...1 = Encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x823E2AD3
    Length: 68
    Encrypted payload (40 bytes)

0000  00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00   .@c.... o.`...E.
0010  00 60 00 00 40 00 2d 11 7d 66 d3 14 60 c3 3f ca   .`..@.-.}f..`.?.
0020  5c 85 01 f4 01 f4 00 4c 05 65 8c 03 b0 4b 4b 2e   \......L.e...KK.
0030  f7 91 e7 1b 17 09 29 a1 40 0d 08 10 05 01 82 3e   ......).@......>
0040  2a d3 00 00 00 44 7d 77 81 9c 8b b8 a5 64 93 5c   *....D}w.....d.\
0050  68 a6 82 ef 50 f3 21 b6 43 8f 5b 18 75 2f 77 cc   h...P.!.C.[.u/w.
0060  0f a5 e5 50 39 d5 45 da 24 78 ec a9 51 60 af cc   ...P9.E.$x..Q`..
0070  30 e4                                             0.

Frame 95 (394 bytes on wire, 394 bytes captured)
    Arrival Time: Aug 14, 2003 18:22:07.650099000
    Time delta from previous packet: 178.061598000 seconds
    Time relative to first packet: 1255.401570000 seconds
    Frame Number: 95
    Packet Length: 394 bytes
    Capture Length: 394 bytes
Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad
    Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad)
    Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e)
    Type: IP (0x0800)
    Trailer: 58B58933
Internet Protocol, Src Addr: 211.20.96.195 (211.20.96.195), Dst Addr: 63.202.92.133 (63.202.92.133)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 376
    Identification: 0x0000 (0)
    Flags: 0x04
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 45
    Protocol: UDP (0x11)
    Header checksum: 0x7c4e (correct)
    Source: 211.20.96.195 (211.20.96.195)
    Destination: 63.202.92.133 (63.202.92.133)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 356
    Checksum: 0x43cd (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x8C03B04B4B2EF791
    Responder cookie: 0xE71B170929A1400D
    Next payload: Hash (8)
    Version: 1.0
    Exchange type: Quick Mode (32)
    Flags
        .... ...1 = Encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x6FCE42B6
    Length: 348
    Encrypted payload (320 bytes)

0000  00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00   .@c.... o.`...E.
0010  01 78 00 00 40 00 2d 11 7c 4e d3 14 60 c3 3f ca   .x..@.-.|N..`.?.
0020  5c 85 01 f4 01 f4 01 64 43 cd 8c 03 b0 4b 4b 2e   \......dC....KK.
0030  f7 91 e7 1b 17 09 29 a1 40 0d 08 10 20 01 6f ce   ......).@... .o.
0040  42 b6 00 00 01 5c 6f 46 f3 d8 f2 8c d9 4b 30 b0   B....\oF.....K0.
0050  5d 9d 64 e7 6f bc 92 55 c4 cd 68 18 78 46 5c 74   ].d.o..U..h.xF\t
0060  c1 5f 7a 3b 38 46 c7 3b 1e 29 df bb f9 b8 9a 04   ._z;8F.;.)......
0070  b3 09 35 20 19 b6 c4 cf 5d b1 62 df 15 d5 59 09   ..5 ....].b...Y.
0080  7d ad 48 90 16 5f f0 14 2c 4d be c0 8d 37 a5 89   }.H.._..,M...7..
0090  ec bc ce 25 eb 33 53 da 6b 89 a9 27 c5 a0 9d e0   ...%.3S.k..'....
00a0  38 38 f4 2b c6 c6 28 63 78 35 86 04 c8 56 8b fc   88.+..(cx5...V..
00b0  53 97 56 d4 fe 2e 58 b1 44 0a 17 17 8d e8 d1 fa   S.V...X.D.......
00c0  63 57 91 4d 74 d1 5a 65 59 18 6d 97 ea 87 8c 28   cW.Mt.ZeY.m....(
00d0  9e 29 c0 56 f4 ba 04 2a 39 e1 44 ac 90 41 e5 37   .).V...*9.D..A.7
00e0  8a 12 b4 23 68 6f 94 84 8d 21 75 46 a2 86 1b bd   ...#ho...!uF....
00f0  50 19 35 8e f7 29 45 1a df 61 1f f5 9c cf 07 cd   P.5..)E..a......
0100  c0 4e e1 2f a8 e6 bd 69 8b ee 18 6d 75 70 ec 67   .N./...i...mup.g
0110  72 50 fa 3e d8 4d dd 06 20 52 36 6d 8f c1 ef 0e   rP.>.M.. R6m....
0120  67 0e 1f 28 4d 5c 04 b9 83 cd b2 e8 4e fd 0b 0c   g..(M\......N...
0130  8c 8e c7 ce 48 1c 5b 4b f5 2a 92 72 58 06 67 da   ....H.[K.*.rX.g.
0140  12 2a 48 ce 91 cb 92 50 6c 3e 47 1a cd 80 3e 28   .*H....Pl>G...>(
0150  1d a8 c9 2f 8a 44 16 da d5 5c 31 98 d4 54 0f 00   .../.D...\1..T..
0160  f2 79 01 d3 27 ff 6f 8f 03 74 5b 1d df 87 1f 4b   .y..'.o..t[....K
0170  a1 82 84 f3 6d 84 18 27 64 27 73 62 04 cf 57 0d   ....m..'d'sb..W.
0180  dd 90 61 21 9e b1 58 b5 89 33                     ..a!..X..3

Frame 96 (326 bytes on wire, 326 bytes captured)
    Arrival Time: Aug 14, 2003 18:22:07.728027000
    Time delta from previous packet: 0.077928000 seconds
    Time relative to first packet: 1255.479498000 seconds
    Frame Number: 96
    Packet Length: 326 bytes
    Capture Length: 326 bytes
Ethernet II, Src: 00:40:63:c1:11:ad, Dst: 00:20:6f:09:60:0e
    Destination: 00:20:6f:09:60:0e (00:20:6f:09:60:0e)
    Source: 00:40:63:c1:11:ad (00:40:63:c1:11:ad)
    Type: IP (0x0800)
Internet Protocol, Src Addr: 63.202.92.133 (63.202.92.133), Dst Addr: 211.20.96.195 (211.20.96.195)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 312
    Identification: 0x00b7 (183)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0xa8d7 (correct)
    Source: 63.202.92.133 (63.202.92.133)
    Destination: 211.20.96.195 (211.20.96.195)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 292
    Checksum: 0xddfb (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x8C03B04B4B2EF791
    Responder cookie: 0xE71B170929A1400D
    Next payload: Hash (8)
    Version: 1.0
    Exchange type: Quick Mode (32)
    Flags
        .... ...1 = Encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x6FCE42B6
    Length: 284
    Encrypted payload (256 bytes)

0000  00 20 6f 09 60 0e 00 40 63 c1 11 ad 08 00 45 00   . o.`..@c.....E.
0010  01 38 00 b7 00 00 40 11 a8 d7 3f ca 5c 85 d3 14   .8....@...?.\...
0020  60 c3 01 f4 01 f4 01 24 dd fb 8c 03 b0 4b 4b 2e   `......$.....KK.
0030  f7 91 e7 1b 17 09 29 a1 40 0d 08 10 20 01 6f ce   ......).@... .o.
0040  42 b6 00 00 01 1c 82 a2 a9 21 2e 21 25 bf 90 c5   B........!.!%...
0050  81 31 37 79 1d ad ee e0 ba 5e 34 9a 6e f9 42 f0   .17y.....^4.n.B.
0060  d8 94 4e 12 53 85 e7 47 77 6b 4f 76 e9 3b 44 26   ..N.S..GwkOv.;D&
0070  c6 51 da 9c 30 f4 19 ee 9f f6 16 bd ba b8 60 12   .Q..0.........`.
0080  80 3e a4 d1 87 7e d7 7c ee 06 c7 48 4a 0f 6e ab   .>...~.|...HJ.n.
0090  4e 1e 62 5d 00 16 11 c2 6e 2b d5 7b 9a 3b 2e 82   N.b]....n+.{.;..
00a0  3e e5 4b 51 13 ff 74 2d 1b 55 98 0d d1 98 86 3f   >.KQ..t-.U.....?
00b0  c5 16 1e bd f2 ad ee cd 8c 18 2e e4 f5 e0 59 58   ..............YX
00c0  e7 8d e6 3f 6e 9e c8 48 04 a7 b8 2a f0 66 b2 22   ...?n..H...*.f."
00d0  3e e4 9a 1c b6 dd 31 0b 67 00 14 3e 51 3b 49 f7   >.....1.g..>Q;I.
00e0  0f 63 32 30 c4 b7 01 16 7e 9e 3c e2 1e 52 3a b5   .c20....~.<..R:.
00f0  5e 5e ff e3 41 fc 87 62 d5 f6 2c e3 f0 ea 00 25   ^^..A..b..,....%
0100  e0 b9 bf d0 b2 a9 c5 28 f9 51 df 35 0f 89 f3 04   .......(.Q.5....
0110  94 7a da a0 68 36 81 6c bf f4 a4 87 15 71 90 f7   .z..h6.l.....q..
0120  c0 38 61 d0 4d 8d 88 5c 16 de 0a c4 32 e6 9b 27   .8a.M..\....2..'
0130  f6 7a d0 64 31 58 52 bd 96 96 f3 20 08 a4 10 70   .z.d1XR.... ...p
0140  49 38 e2 bd 86 36                                 I8...6

Frame 97 (98 bytes on wire, 98 bytes captured)
    Arrival Time: Aug 14, 2003 18:22:08.027372000
    Time delta from previous packet: 0.299345000 seconds
    Time relative to first packet: 1255.778843000 seconds
    Frame Number: 97
    Packet Length: 98 bytes
    Capture Length: 98 bytes
Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad
    Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad)
    Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e)
    Type: IP (0x0800)
    Trailer: 35E0E689
Internet Protocol, Src Addr: 211.20.96.195 (211.20.96.195), Dst Addr: 63.202.92.133 (63.202.92.133)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 80
    Identification: 0x0000 (0)
    Flags: 0x04
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 45
    Protocol: UDP (0x11)
    Header checksum: 0x7d76 (correct)
    Source: 211.20.96.195 (211.20.96.195)
    Destination: 63.202.92.133 (63.202.92.133)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 60
    Checksum: 0xd16a (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x8C03B04B4B2EF791
    Responder cookie: 0xE71B170929A1400D
    Next payload: Hash (8)
    Version: 1.0
    Exchange type: Quick Mode (32)
    Flags
        .... ...1 = Encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x6FCE42B6
    Length: 52
    Encrypted payload (24 bytes)

0000  00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00   .@c.... o.`...E.
0010  00 50 00 00 40 00 2d 11 7d 76 d3 14 60 c3 3f ca   .P..@.-.}v..`.?.
0020  5c 85 01 f4 01 f4 00 3c d1 6a 8c 03 b0 4b 4b 2e   \......<.j...KK.
0030  f7 91 e7 1b 17 09 29 a1 40 0d 08 10 20 01 6f ce   ......).@... .o.
0040  42 b6 00 00 00 34 aa 8d 9d 94 e8 fb 24 af 3b 1e   B....4......$.;.
0050  04 7a bc 91 1c 56 a5 da 42 24 78 58 c9 aa 35 e0   .z...V..B$xX..5.
0060  e6 89                                             ..

Frame 98 (114 bytes on wire, 114 bytes captured)
    Arrival Time: Aug 14, 2003 18:22:09.025766000
    Time delta from previous packet: 0.998394000 seconds
    Time relative to first packet: 1256.777237000 seconds
    Frame Number: 98
    Packet Length: 114 bytes
    Capture Length: 114 bytes
Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad
    Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad)
    Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e)
    Type: IP (0x0800)
    Trailer: 23B75040
Internet Protocol, Src Addr: 211.20.96.195 (211.20.96.195), Dst Addr: 63.202.92.133 (63.202.92.133)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 96
    Identification: 0x0000 (0)
    Flags: 0x04
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 45
    Protocol: UDP (0x11)
    Header checksum: 0x7d66 (correct)
    Source: 211.20.96.195 (211.20.96.195)
    Destination: 63.202.92.133 (63.202.92.133)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 76
    Checksum: 0xa65b (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x8C03B04B4B2EF791
    Responder cookie: 0xE71B170929A1400D
    Next payload: Hash (8)
    Version: 1.0
    Exchange type: Informational (5)
    Flags
        .... ...1 = Encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x721DA532
    Length: 68
    Encrypted payload (40 bytes)

0000  00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00   .@c.... o.`...E.
0010  00 60 00 00 40 00 2d 11 7d 66 d3 14 60 c3 3f ca   .`..@.-.}f..`.?.
0020  5c 85 01 f4 01 f4 00 4c a6 5b 8c 03 b0 4b 4b 2e   \......L.[...KK.
0030  f7 91 e7 1b 17 09 29 a1 40 0d 08 10 05 01 72 1d   ......).@.....r.
0040  a5 32 00 00 00 44 bb dd 13 eb ac 7d 6b 1c 63 4e   .2...D.....}k.cN
0050  94 d3 99 28 76 80 a5 bb 23 36 b7 90 44 d3 82 c1   ...(v...#6..D...
0060  db b1 c1 64 f5 7c 7d c7 0c e3 28 2b fc b4 23 b7   ...d.|}...(+..#.
0070  50 40                                             P@

Frame 99 (394 bytes on wire, 394 bytes captured)
    Arrival Time: Aug 14, 2003 18:25:07.086740000
    Time delta from previous packet: 178.060974000 seconds
    Time relative to first packet: 1434.838211000 seconds
    Frame Number: 99
    Packet Length: 394 bytes
    Capture Length: 394 bytes
Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad
    Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad)
    Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e)
    Type: IP (0x0800)
    Trailer: D10582F7
Internet Protocol, Src Addr: 211.20.96.195 (211.20.96.195), Dst Addr: 63.202.92.133 (63.202.92.133)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 376
    Identification: 0x0000 (0)
    Flags: 0x04
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 45
    Protocol: UDP (0x11)
    Header checksum: 0x7c4e (correct)
    Source: 211.20.96.195 (211.20.96.195)
    Destination: 63.202.92.133 (63.202.92.133)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 356
    Checksum: 0xe3dd (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x8C03B04B4B2EF791
    Responder cookie: 0xE71B170929A1400D
    Next payload: Hash (8)
    Version: 1.0
    Exchange type: Quick Mode (32)
    Flags
        .... ...1 = Encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x7569400C
    Length: 348
    Encrypted payload (320 bytes)

0000  00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00   .@c.... o.`...E.
0010  01 78 00 00 40 00 2d 11 7c 4e d3 14 60 c3 3f ca   .x..@.-.|N..`.?.
0020  5c 85 01 f4 01 f4 01 64 e3 dd 8c 03 b0 4b 4b 2e   \......d.....KK.
0030  f7 91 e7 1b 17 09 29 a1 40 0d 08 10 20 01 75 69   ......).@... .ui
0040  40 0c 00 00 01 5c ff a5 a8 5c 8e bc c8 42 ec d1   @....\...\...B..
0050  2f 1c 4b dd c1 0f d8 11 ba 11 b6 7e 7b af de 80   /.K........~{...
0060  f7 8e 18 d4 b6 6f 1b 1e a9 51 5a f7 15 4e 63 c5   .....o...QZ..Nc.
0070  b7 c6 23 f6 00 e5 1b 5d f8 d7 02 a6 30 f2 63 60   ..#....]....0.c`
0080  af 55 ee ac 32 97 47 6c 87 21 fe 9c 76 a6 04 b2   .U..2.Gl.!..v...
0090  0f ae 0f 8d 25 ad ef 0e ba c2 98 b1 5e 9e 4e 44   ....%.......^.ND
00a0  b5 90 13 9c bd da b3 d2 d4 7f 51 12 7c 42 dd b9   ..........Q.|B..
00b0  94 6e 61 e4 01 38 a5 24 35 5d bb 99 2e 50 70 0c   .na..8.$5]...Pp.
00c0  62 0e 48 0d 34 73 b8 4f 5d f4 63 5c aa 53 4f 10   b.H.4s.O].c\.SO.
00d0  e2 14 ee 5c 96 8e e2 24 3f 90 b2 c6 d2 55 e3 8e   ...\...$?....U..
00e0  f1 39 46 c4 94 f4 03 5e f2 2c d7 bf d2 5b ac 2b   .9F....^.,...[.+
00f0  b6 5e 9e 0e 12 62 b1 b0 5d b8 e7 35 e1 c7 5a 47   .^...b..]..5..ZG
0100  9d 2f be 64 3a bf ab 6c c2 3f 8f 7c 7a f8 51 9d   ./.d:..l.?.|z.Q.
0110  9b c5 51 b1 01 c2 77 bd b0 81 42 f7 f2 50 be 21   ..Q...w...B..P.!
0120  6d 0d fc ba 50 24 b8 b4 48 d9 be 3d bf a9 6f c8   m...P$..H..=..o.
0130  f4 be ba a4 c1 8d dc 89 c3 ed 1d a6 63 67 55 5c   ............cgU\
0140  11 26 13 66 c9 e6 5a b2 13 5d 80 f0 ca 25 1f d6   .&.f..Z..]...%..
0150  7e 9d c0 14 5f d8 58 9f 4d 7d 9d b4 f8 5b 72 e3   ~..._.X.M}...[r.
0160  5c ec a6 a9 b2 55 e2 b7 d7 6f fd 39 75 fd 10 5c   \....U...o.9u..\
0170  55 af ff 70 9f 9f 32 dc 55 a0 9a 67 eb ed a2 f9   U..p..2.U..g....
0180  9e 4b 3b 73 1f ab d1 05 82 f7                     .K;s......

Frame 100 (326 bytes on wire, 326 bytes captured)
    Arrival Time: Aug 14, 2003 18:25:07.166275000
    Time delta from previous packet: 0.079535000 seconds
    Time relative to first packet: 1434.917746000 seconds
    Frame Number: 100
    Packet Length: 326 bytes
    Capture Length: 326 bytes
Ethernet II, Src: 00:40:63:c1:11:ad, Dst: 00:20:6f:09:60:0e
    Destination: 00:20:6f:09:60:0e (00:20:6f:09:60:0e)
    Source: 00:40:63:c1:11:ad (00:40:63:c1:11:ad)
    Type: IP (0x0800)
Internet Protocol, Src Addr: 63.202.92.133 (63.202.92.133), Dst Addr: 211.20.96.195 (211.20.96.195)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 312
    Identification: 0x00b8 (184)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0xa8d6 (correct)
    Source: 63.202.92.133 (63.202.92.133)
    Destination: 211.20.96.195 (211.20.96.195)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 292
    Checksum: 0x6911 (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x8C03B04B4B2EF791
    Responder cookie: 0xE71B170929A1400D
    Next payload: Hash (8)
    Version: 1.0
    Exchange type: Quick Mode (32)
    Flags
        .... ...1 = Encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x7569400C
    Length: 284
    Encrypted payload (256 bytes)

0000  00 20 6f 09 60 0e 00 40 63 c1 11 ad 08 00 45 00   . o.`..@c.....E.
0010  01 38 00 b8 00 00 40 11 a8 d6 3f ca 5c 85 d3 14   .8....@...?.\...
0020  60 c3 01 f4 01 f4 01 24 69 11 8c 03 b0 4b 4b 2e   `......$i....KK.
0030  f7 91 e7 1b 17 09 29 a1 40 0d 08 10 20 01 75 69   ......).@... .ui
0040  40 0c 00 00 01 1c 97 51 f8 f9 47 1a 33 4d 1b 14   @......Q..G.3M..
0050  83 23 28 68 00 df 59 20 ec 5d ba 89 9c 23 5e 8b   .#(h..Y .]...#^.
0060  a9 1a 41 5a cf c9 05 72 d0 33 d4 d9 18 95 52 36   ..AZ...r.3....R6
0070  c0 3d 06 e3 cc 07 97 44 fc 40 05 ae bc 39 71 4e   .=.....D.@...9qN
0080  98 a1 b5 5c f1 cf 29 e0 96 e1 3f 02 1c 01 c6 db   ...\..)...?.....
0090  f7 ab 0e c4 ed dd 9c f3 64 2e 56 66 1e 61 c5 1f   ........d.Vf.a..
00a0  14 9e 7e 77 1f 33 84 b3 4f 3f 00 a1 45 36 8a 49   ..~w.3..O?..E6.I
00b0  16 a5 16 63 06 6c 2b a7 ec 8b 5a 72 05 d8 f6 8f   ...c.l+...Zr....
00c0  dc 51 06 c4 f0 3b 3a 66 56 0b 09 73 30 d3 23 2b   .Q...;:fV..s0.#+
00d0  5d 2c 23 2d 49 8b 5e 54 0e 0d 9e 1b 66 db 73 5a   ],#-I.^T....f.sZ
00e0  b0 25 0d 7b f2 2c 88 e7 db 7c 07 b5 96 30 99 00   .%.{.,...|...0..
00f0  55 c2 e6 e8 cc 20 b1 61 2b 31 f3 42 d9 7a 9c 20   U.... .a+1.B.z. 
0100  06 2d f5 e0 0d 42 fd c1 2b 66 e1 d3 25 08 11 63   .-...B..+f..%..c
0110  8d 95 3a 55 26 35 97 7f 05 5a f0 c9 3f c5 5c 09   ..:U&5...Z..?.\.
0120  0e 53 bc af 78 9e 7e 1f f9 57 e4 77 b3 10 81 b6   .S..x.~..W.w....
0130  2d 74 32 63 0d 12 fa b0 90 6b 16 3e c9 79 4a 90   -t2c.....k.>.yJ.
0140  7d 74 c2 78 18 06                                 }t.x..

Frame 101 (98 bytes on wire, 98 bytes captured)
    Arrival Time: Aug 14, 2003 18:25:07.467130000
    Time delta from previous packet: 0.300855000 seconds
    Time relative to first packet: 1435.218601000 seconds
    Frame Number: 101
    Packet Length: 98 bytes
    Capture Length: 98 bytes
Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad
    Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad)
    Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e)
    Type: IP (0x0800)
    Trailer: 79013099
Internet Protocol, Src Addr: 211.20.96.195 (211.20.96.195), Dst Addr: 63.202.92.133 (63.202.92.133)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 80
    Identification: 0x0000 (0)
    Flags: 0x04
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 45
    Protocol: UDP (0x11)
    Header checksum: 0x7d76 (correct)
    Source: 211.20.96.195 (211.20.96.195)
    Destination: 63.202.92.133 (63.202.92.133)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 60
    Checksum: 0x3310 (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x8C03B04B4B2EF791
    Responder cookie: 0xE71B170929A1400D
    Next payload: Hash (8)
    Version: 1.0
    Exchange type: Quick Mode (32)
    Flags
        .... ...1 = Encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x7569400C
    Length: 52
    Encrypted payload (24 bytes)

0000  00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00   .@c.... o.`...E.
0010  00 50 00 00 40 00 2d 11 7d 76 d3 14 60 c3 3f ca   .P..@.-.}v..`.?.
0020  5c 85 01 f4 01 f4 00 3c 33 10 8c 03 b0 4b 4b 2e   \......<3....KK.
0030  f7 91 e7 1b 17 09 29 a1 40 0d 08 10 20 01 75 69   ......).@... .ui
0040  40 0c 00 00 00 34 bc c3 0f 88 aa 43 dd 43 af ef   @....4.....C.C..
0050  b4 3c 1d b4 1a 0e de a8 29 88 ac 71 8f 54 79 01   .<......)..q.Ty.
0060  30 99                                             0.

Frame 102 (114 bytes on wire, 114 bytes captured)
    Arrival Time: Aug 14, 2003 18:25:08.467037000
    Time delta from previous packet: 0.999907000 seconds
    Time relative to first packet: 1436.218508000 seconds
    Frame Number: 102
    Packet Length: 114 bytes
    Capture Length: 114 bytes
Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad
    Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad)
    Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e)
    Type: IP (0x0800)
    Trailer: 740546FA
Internet Protocol, Src Addr: 211.20.96.195 (211.20.96.195), Dst Addr: 63.202.92.133 (63.202.92.133)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 96
    Identification: 0x0000 (0)
    Flags: 0x04
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 45
    Protocol: UDP (0x11)
    Header checksum: 0x7d66 (correct)
    Source: 211.20.96.195 (211.20.96.195)
    Destination: 63.202.92.133 (63.202.92.133)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 76
    Checksum: 0xf97e (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x8C03B04B4B2EF791
    Responder cookie: 0xE71B170929A1400D
    Next payload: Hash (8)
    Version: 1.0
    Exchange type: Informational (5)
    Flags
        .... ...1 = Encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0xBC3AB25A
    Length: 68
    Encrypted payload (40 bytes)

0000  00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00   .@c.... o.`...E.
0010  00 60 00 00 40 00 2d 11 7d 66 d3 14 60 c3 3f ca   .`..@.-.}f..`.?.
0020  5c 85 01 f4 01 f4 00 4c f9 7e 8c 03 b0 4b 4b 2e   \......L.~...KK.
0030  f7 91 e7 1b 17 09 29 a1 40 0d 08 10 05 01 bc 3a   ......).@......:
0040  b2 5a 00 00 00 44 55 ed db 02 cc c9 40 df 44 13   .Z...DU.....@.D.
0050  06 69 f7 36 84 19 c9 fb a8 05 bc 58 1d a1 17 94   .i.6.......X....
0060  81 ef 60 01 1c 4c 86 27 8b b4 fb f1 5a fa 74 05   ..`..L.'....Z.t.
0070  46 fa                                             F.

Frame 103 (394 bytes on wire, 394 bytes captured)
    Arrival Time: Aug 14, 2003 18:28:06.561002000
    Time delta from previous packet: 178.093965000 seconds
    Time relative to first packet: 1614.312473000 seconds
    Frame Number: 103
    Packet Length: 394 bytes
    Capture Length: 394 bytes
Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad
    Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad)
    Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e)
    Type: IP (0x0800)
    Trailer: 4DAFEE07
Internet Protocol, Src Addr: 211.20.96.195 (211.20.96.195), Dst Addr: 63.202.92.133 (63.202.92.133)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 376
    Identification: 0x0000 (0)
    Flags: 0x04
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 45
    Protocol: UDP (0x11)
    Header checksum: 0x7c4e (correct)
    Source: 211.20.96.195 (211.20.96.195)
    Destination: 63.202.92.133 (63.202.92.133)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 356
    Checksum: 0xe15c (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x8C03B04B4B2EF791
    Responder cookie: 0xE71B170929A1400D
    Next payload: Hash (8)
    Version: 1.0
    Exchange type: Quick Mode (32)
    Flags
        .... ...1 = Encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0xA80F5CE0
    Length: 348
    Encrypted payload (320 bytes)

0000  00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00   .@c.... o.`...E.
0010  01 78 00 00 40 00 2d 11 7c 4e d3 14 60 c3 3f ca   .x..@.-.|N..`.?.
0020  5c 85 01 f4 01 f4 01 64 e1 5c 8c 03 b0 4b 4b 2e   \......d.\...KK.
0030  f7 91 e7 1b 17 09 29 a1 40 0d 08 10 20 01 a8 0f   ......).@... ...
0040  5c e0 00 00 01 5c 7a ee c3 f2 46 20 ab 5c 24 0f   \....\z...F .\$.
0050  81 9a 6f 99 2d 36 b0 18 77 7a e8 74 9f 89 4f f6   ..o.-6..wz.t..O.
0060  9e 53 56 b6 bc c7 eb d8 6e cd 4d 59 a3 d6 db 93   .SV.....n.MY....
0070  d7 bd 3d 35 6d fb dd 20 53 86 db e2 0c 04 55 07   ..=5m.. S.....U.
0080  a9 f0 07 00 85 50 fa 87 81 06 61 38 9b 1d 1e 8e   .....P....a8....
0090  21 a8 8c 74 50 b2 3d d0 d1 da 5e 4f 5c ae c6 b8   !..tP.=...^O\...
00a0  96 bf ad 01 1e 68 61 9e 5e 12 92 74 11 4e 03 68   .....ha.^..t.N.h
00b0  e2 3b 09 fc 96 7d d8 a9 98 7c 83 3e 1f 00 79 19   .;...}...|.>..y.
00c0  98 18 e7 4a 07 5b c2 f0 f5 e7 cf 8e 4e 97 29 3a   ...J.[......N.):
00d0  f7 8e 9e 42 1c 06 d6 a0 98 df 58 de 31 86 48 58   ...B......X.1.HX
00e0  19 23 16 e8 50 28 44 56 7c 0f d6 7e 91 82 66 c5   .#..P(DV|..~..f.
00f0  fb 34 5a 28 e6 f6 54 6a 2e 1c 3f 21 89 1d 8a 20   .4Z(..Tj..?!... 
0100  36 d4 b0 0d 31 2d ac be 3f d3 a2 7d bc c8 07 5e   6...1-..?..}...^
0110  2f 0d fa 98 58 a2 03 42 82 05 b9 ee c1 50 a4 06   /...X..B.....P..
0120  72 0d f3 b3 c1 18 fa 14 22 97 ba 48 6a 0f 5a 24   r......."..Hj.Z$
0130  9e 3e 66 ae bb 38 73 8f 03 e2 73 e1 26 c0 c7 9b   .>f..8s...s.&...
0140  17 e9 4b 14 52 e5 2a 18 12 69 b6 66 2c 0e a1 9f   ..K.R.*..i.f,...
0150  df 88 7f bd fc 72 74 da 2e 70 d8 e1 c1 f2 7a 2f   .....rt..p....z/
0160  27 eb d0 aa 8e 12 75 c4 b1 f3 cd 1a aa 89 0a 61   '.....u........a
0170  4d ae 1d 41 ae ab 51 eb a2 7b e6 58 5b b2 ba c4   M..A..Q..{.X[...
0180  ac 44 4d e1 77 c5 4d af ee 07                     .DM.w.M...

Frame 104 (326 bytes on wire, 326 bytes captured)
    Arrival Time: Aug 14, 2003 18:28:06.638567000
    Time delta from previous packet: 0.077565000 seconds
    Time relative to first packet: 1614.390038000 seconds
    Frame Number: 104
    Packet Length: 326 bytes
    Capture Length: 326 bytes
Ethernet II, Src: 00:40:63:c1:11:ad, Dst: 00:20:6f:09:60:0e
    Destination: 00:20:6f:09:60:0e (00:20:6f:09:60:0e)
    Source: 00:40:63:c1:11:ad (00:40:63:c1:11:ad)
    Type: IP (0x0800)
Internet Protocol, Src Addr: 63.202.92.133 (63.202.92.133), Dst Addr: 211.20.96.195 (211.20.96.195)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 312
    Identification: 0x00bf (191)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0xa8cf (correct)
    Source: 63.202.92.133 (63.202.92.133)
    Destination: 211.20.96.195 (211.20.96.195)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 292
    Checksum: 0x4447 (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x8C03B04B4B2EF791
    Responder cookie: 0xE71B170929A1400D
    Next payload: Hash (8)
    Version: 1.0
    Exchange type: Quick Mode (32)
    Flags
        .... ...1 = Encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0xA80F5CE0
    Length: 284
    Encrypted payload (256 bytes)

0000  00 20 6f 09 60 0e 00 40 63 c1 11 ad 08 00 45 00   . o.`..@c.....E.
0010  01 38 00 bf 00 00 40 11 a8 cf 3f ca 5c 85 d3 14   .8....@...?.\...
0020  60 c3 01 f4 01 f4 01 24 44 47 8c 03 b0 4b 4b 2e   `......$DG...KK.
0030  f7 91 e7 1b 17 09 29 a1 40 0d 08 10 20 01 a8 0f   ......).@... ...
0040  5c e0 00 00 01 1c 2d 8b fd e4 62 55 07 42 46 4d   \.....-...bU.BFM
0050  d2 eb 17 70 b0 b7 5d e2 2c 4d f1 5b 15 d3 fb 75   ...p..].,M.[...u
0060  1d 32 a9 12 28 b2 c4 35 6d 58 e0 5e 3f 52 8b 1c   .2..(..5mX.^?R..
0070  d0 95 a2 c0 0a be fa 48 0a f5 94 f6 1c c2 f3 95   .......H........
0080  b0 2f 06 ff 65 ef cc df 17 d1 86 c0 84 ad 72 19   ./..e.........r.
0090  f9 96 bd 84 82 0f 20 ff 6d a5 7a e5 8e 07 52 6d   ...... .m.z...Rm
00a0  7f 5b f0 4e 0c 63 ae 43 1b 7c aa 2d 94 65 cc f3   .[.N.c.C.|.-.e..
00b0  35 bc b7 d9 04 27 ff e3 06 35 bc 61 fa 7f bd 4a   5....'...5.a...J
00c0  24 aa c9 f1 69 1a 7b d8 23 a7 2a 66 a2 3f 12 2b   $...i.{.#.*f.?.+
00d0  81 12 43 fd cc 8a 86 51 81 0b d2 b3 18 aa 74 f2   ..C....Q......t.
00e0  03 6c 2a 4c ac b1 14 b7 cb 65 53 c7 b5 6f 8f 79   .l*L.....eS..o.y
00f0  93 26 a0 15 e6 06 b0 90 a8 f2 7c 35 fd 1c 00 b6   .&........|5....
0100  28 50 1e 18 9d 94 e4 82 10 d6 2f d2 ea 7a 6b c6   (P......../..zk.
0110  83 c3 14 be 81 2e 6f 34 09 12 36 41 02 30 7e 60   ......o4..6A.0~`
0120  84 07 8a 92 48 33 c7 c2 15 fb 8a b1 84 4e 30 e0   ....H3.......N0.
0130  79 48 55 ff f6 46 95 1b 4e 42 52 77 06 09 2d 28   yHU..F..NBRw..-(
0140  37 07 b3 44 34 74                                 7..D4t

Frame 105 (98 bytes on wire, 98 bytes captured)
    Arrival Time: Aug 14, 2003 18:28:06.942455000
    Time delta from previous packet: 0.303888000 seconds
    Time relative to first packet: 1614.693926000 seconds
    Frame Number: 105
    Packet Length: 98 bytes
    Capture Length: 98 bytes
Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad
    Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad)
    Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e)
    Type: IP (0x0800)
    Trailer: 753C30F7
Internet Protocol, Src Addr: 211.20.96.195 (211.20.96.195), Dst Addr: 63.202.92.133 (63.202.92.133)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 80
    Identification: 0x0000 (0)
    Flags: 0x04
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 45
    Protocol: UDP (0x11)
    Header checksum: 0x7d76 (correct)
    Source: 211.20.96.195 (211.20.96.195)
    Destination: 63.202.92.133 (63.202.92.133)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 60
    Checksum: 0xd379 (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x8C03B04B4B2EF791
    Responder cookie: 0xE71B170929A1400D
    Next payload: Hash (8)
    Version: 1.0
    Exchange type: Quick Mode (32)
    Flags
        .... ...1 = Encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0xA80F5CE0
    Length: 52
    Encrypted payload (24 bytes)

0000  00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00   .@c.... o.`...E.
0010  00 50 00 00 40 00 2d 11 7d 76 d3 14 60 c3 3f ca   .P..@.-.}v..`.?.
0020  5c 85 01 f4 01 f4 00 3c d3 79 8c 03 b0 4b 4b 2e   \......<.y...KK.
0030  f7 91 e7 1b 17 09 29 a1 40 0d 08 10 20 01 a8 0f   ......).@... ...
0040  5c e0 00 00 00 34 83 c1 34 3d 28 af fb 08 28 ce   \....4..4=(...(.
0050  71 82 da 35 3d db 41 dd 38 91 82 c0 b8 8d 75 3c   q..5=.A.8.....u<
0060  30 f7                                             0.

Frame 106 (114 bytes on wire, 114 bytes captured)
    Arrival Time: Aug 14, 2003 18:28:06.947141000
    Time delta from previous packet: 0.004686000 seconds
    Time relative to first packet: 1614.698612000 seconds
    Frame Number: 106
    Packet Length: 114 bytes
    Capture Length: 114 bytes
Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad
    Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad)
    Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e)
    Type: IP (0x0800)
    Trailer: 4BB81186
Internet Protocol, Src Addr: 211.20.96.195 (211.20.96.195), Dst Addr: 63.202.92.133 (63.202.92.133)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 96
    Identification: 0x0000 (0)
    Flags: 0x04
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 45
    Protocol: UDP (0x11)
    Header checksum: 0x7d66 (correct)
    Source: 211.20.96.195 (211.20.96.195)
    Destination: 63.202.92.133 (63.202.92.133)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 76
    Checksum: 0x5bf7 (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x8C03B04B4B2EF791
    Responder cookie: 0xE71B170929A1400D
    Next payload: Hash (8)
    Version: 1.0
    Exchange type: Informational (5)
    Flags
        .... ...1 = Encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0xCB61F144
    Length: 68
    Encrypted payload (40 bytes)

0000  00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00   .@c.... o.`...E.
0010  00 60 00 00 40 00 2d 11 7d 66 d3 14 60 c3 3f ca   .`..@.-.}f..`.?.
0020  5c 85 01 f4 01 f4 00 4c 5b f7 8c 03 b0 4b 4b 2e   \......L[....KK.
0030  f7 91 e7 1b 17 09 29 a1 40 0d 08 10 05 01 cb 61   ......).@......a
0040  f1 44 00 00 00 44 6d 29 f0 50 e5 8a bc ce e2 99   .D...Dm).P......
0050  db cf 8c 29 03 d9 32 21 32 99 d3 96 94 c2 5f 26   ...)..2!2....._&
0060  41 cc 1d 7f 72 f2 00 04 f3 9f 4c a0 91 74 4b b8   A...r.....L..tK.
0070  11 86                                             ..

Frame 107 (394 bytes on wire, 394 bytes captured)
    Arrival Time: Aug 14, 2003 18:31:06.003165000
    Time delta from previous packet: 179.056024000 seconds
    Time relative to first packet: 1793.754636000 seconds
    Frame Number: 107
    Packet Length: 394 bytes
    Capture Length: 394 bytes
Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad
    Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad)
    Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e)
    Type: IP (0x0800)
    Trailer: 2C4F2FCA
Internet Protocol, Src Addr: 211.20.96.195 (211.20.96.195), Dst Addr: 63.202.92.133 (63.202.92.133)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 376
    Identification: 0x0000 (0)
    Flags: 0x04
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 45
    Protocol: UDP (0x11)
    Header checksum: 0x7c4e (correct)
    Source: 211.20.96.195 (211.20.96.195)
    Destination: 63.202.92.133 (63.202.92.133)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 356
    Checksum: 0x8042 (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x8C03B04B4B2EF791
    Responder cookie: 0xE71B170929A1400D
    Next payload: Hash (8)
    Version: 1.0
    Exchange type: Quick Mode (32)
    Flags
        .... ...1 = Encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0xC1D0C7BD
    Length: 348
    Encrypted payload (320 bytes)

0000  00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00   .@c.... o.`...E.
0010  01 78 00 00 40 00 2d 11 7c 4e d3 14 60 c3 3f ca   .x..@.-.|N..`.?.
0020  5c 85 01 f4 01 f4 01 64 80 42 8c 03 b0 4b 4b 2e   \......d.B...KK.
0030  f7 91 e7 1b 17 09 29 a1 40 0d 08 10 20 01 c1 d0   ......).@... ...
0040  c7 bd 00 00 01 5c d2 1e 84 43 41 2f 31 f7 7f fd   .....\...CA/1...
0050  87 77 67 22 66 f1 f1 63 7e aa a4 c1 fb 95 8f 0f   .wg"f..c~.......
0060  5a 46 77 6a 69 64 44 8f 48 9a 12 45 c4 bd 82 56   ZFwjidD.H..E...V
0070  cd 00 f9 04 08 9e db de da 3d 5a 97 15 8d 7b 05   .........=Z...{.
0080  36 2c 37 d6 86 ef ea 90 df e6 fe 8d e9 48 09 e3   6,7..........H..
0090  66 4e 3f 01 79 be ae 0d 69 96 1b 44 5f 69 80 12   fN?.y...i..D_i..
00a0  e1 de 39 13 6b ca 7b a2 8c 6a 73 a8 cc 88 1e 4b   ..9.k.{..js....K
00b0  01 47 8c f8 18 04 0c ac 9b 0f e2 81 04 ca 6d 47   .G............mG
00c0  83 77 c4 24 c4 39 49 be f4 71 c1 24 32 b9 46 43   .w.$.9I..q.$2.FC
00d0  99 1a 18 f2 b6 bb 72 fb 14 59 51 87 1e e7 85 3a   ......r..YQ....:
00e0  d0 49 0d dc 47 64 9c 22 d4 e6 39 b1 5c e3 71 89   .I..Gd."..9.\.q.
00f0  8e 77 ec 4d fb 3a f4 d0 d1 a2 a2 8d 3d a1 93 44   .w.M.:......=..D
0100  2b dc f0 39 cc 34 f7 22 a4 1b 46 83 14 9b 77 dd   +..9.4."..F...w.
0110  1c 18 1b f4 37 4a 03 0d 2f 6f 45 02 e7 39 f8 ad   ....7J../oE..9..
0120  4a 14 b0 f7 7b ee 8a 00 be 97 f8 3e df c2 d0 b1   J...{......>....
0130  02 83 b8 47 85 3f ce 6a 2e ef e7 1e 9f 02 bd c3   ...G.?.j........
0140  df df cf 9c a0 ec b2 bd ca 62 bb 9f f4 f3 69 e4   .........b....i.
0150  65 61 66 1f 78 56 ae f0 64 b2 3f 77 6c d3 78 df   eaf.xV..d.?wl.x.
0160  ef 3f 3e 1a 92 33 03 40 f0 9f 9d ff ae a6 75 96   .?>..3.@......u.
0170  67 76 8e 4b c6 5f b5 8b cd 5e ad ed 81 a3 d2 0d   gv.K._...^......
0180  e6 7e 46 21 c5 88 2c 4f 2f ca                     .~F!..,O/.

Frame 108 (326 bytes on wire, 326 bytes captured)
    Arrival Time: Aug 14, 2003 18:31:06.080968000
    Time delta from previous packet: 0.077803000 seconds
    Time relative to first packet: 1793.832439000 seconds
    Frame Number: 108
    Packet Length: 326 bytes
    Capture Length: 326 bytes
Ethernet II, Src: 00:40:63:c1:11:ad, Dst: 00:20:6f:09:60:0e
    Destination: 00:20:6f:09:60:0e (00:20:6f:09:60:0e)
    Source: 00:40:63:c1:11:ad (00:40:63:c1:11:ad)
    Type: IP (0x0800)
Internet Protocol, Src Addr: 63.202.92.133 (63.202.92.133), Dst Addr: 211.20.96.195 (211.20.96.195)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 312
    Identification: 0x00c0 (192)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0xa8ce (correct)
    Source: 63.202.92.133 (63.202.92.133)
    Destination: 211.20.96.195 (211.20.96.195)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 292
    Checksum: 0x93b0 (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x8C03B04B4B2EF791
    Responder cookie: 0xE71B170929A1400D
    Next payload: Hash (8)
    Version: 1.0
    Exchange type: Quick Mode (32)
    Flags
        .... ...1 = Encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0xC1D0C7BD
    Length: 284
    Encrypted payload (256 bytes)

0000  00 20 6f 09 60 0e 00 40 63 c1 11 ad 08 00 45 00   . o.`..@c.....E.
0010  01 38 00 c0 00 00 40 11 a8 ce 3f ca 5c 85 d3 14   .8....@...?.\...
0020  60 c3 01 f4 01 f4 01 24 93 b0 8c 03 b0 4b 4b 2e   `......$.....KK.
0030  f7 91 e7 1b 17 09 29 a1 40 0d 08 10 20 01 c1 d0   ......).@... ...
0040  c7 bd 00 00 01 1c a9 5b 11 e3 2f 25 bd 64 7a b8   .......[../%.dz.
0050  1d 97 04 43 3a 6a b8 e9 e4 18 5e ba 04 b3 24 d2   ...C:j....^...$.
0060  3d bc 7d 33 85 a6 fc d6 be c3 cd 18 51 40 ba de   =.}3........Q@..
0070  46 ea 0f ae cf 6c bd 75 f4 f7 d5 90 ea 29 c0 8c   F....l.u.....)..
0080  a4 a5 b7 83 67 b9 89 3d 31 c0 64 05 47 96 9a c3   ....g..=1.d.G...
0090  80 16 d8 ff 2a 66 d8 40 fa ff 94 5b 20 a8 75 49   ....*f.@...[ .uI
00a0  72 57 e1 c9 97 8d c3 eb 2d ac 6d a5 67 cd d4 29   rW......-.m.g..)
00b0  d4 2c 86 10 23 b0 22 7f 94 fa df d0 c4 f4 8b 99   .,..#.".........
00c0  72 f6 4e 17 65 61 b8 d7 1e e8 90 a8 e2 dc e3 98   r.N.ea..........
00d0  d4 c0 73 23 77 cf 93 2e 4c c8 55 4a 36 ce 52 40   ..s#w...L.UJ6.R@
00e0  a2 8e f4 dc da da 26 34 25 fd e3 82 76 0c 29 eb   ......&4%...v.).
00f0  17 26 65 d7 e2 d2 58 51 34 b4 6b a1 2e 7c bc b5   .&e...XQ4.k..|..
0100  61 16 21 47 d9 8b ca 93 67 e8 fb ac 3c 39 ed f6   a.!G....g...<9..
0110  ac 91 f7 ae 67 b8 7c 69 73 a7 21 b4 4e b7 87 d1   ....g.|is.!.N...
0120  c8 d3 fc d5 4b ac 72 25 0b d9 37 7d 79 e2 4f 2d   ....K.r%..7}y.O-
0130  43 24 72 17 42 65 8f 25 49 bc ac c5 a7 69 f5 68   C$r.Be.%I....i.h
0140  fe e1 ae e6 9d ed                                 ......

Frame 109 (98 bytes on wire, 98 bytes captured)
    Arrival Time: Aug 14, 2003 18:31:06.378724000
    Time delta from previous packet: 0.297756000 seconds
    Time relative to first packet: 1794.130195000 seconds
    Frame Number: 109
    Packet Length: 98 bytes
    Capture Length: 98 bytes
Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad
    Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad)
    Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e)
    Type: IP (0x0800)
    Trailer: AAB9CE39
Internet Protocol, Src Addr: 211.20.96.195 (211.20.96.195), Dst Addr: 63.202.92.133 (63.202.92.133)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 80
    Identification: 0x0000 (0)
    Flags: 0x04
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 45
    Protocol: UDP (0x11)
    Header checksum: 0x7d76 (correct)
    Source: 211.20.96.195 (211.20.96.195)
    Destination: 63.202.92.133 (63.202.92.133)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 60
    Checksum: 0xb00d (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x8C03B04B4B2EF791
    Responder cookie: 0xE71B170929A1400D
    Next payload: Hash (8)
    Version: 1.0
    Exchange type: Quick Mode (32)
    Flags
        .... ...1 = Encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0xC1D0C7BD
    Length: 52
    Encrypted payload (24 bytes)

0000  00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00   .@c.... o.`...E.
0010  00 50 00 00 40 00 2d 11 7d 76 d3 14 60 c3 3f ca   .P..@.-.}v..`.?.
0020  5c 85 01 f4 01 f4 00 3c b0 0d 8c 03 b0 4b 4b 2e   \......<.....KK.
0030  f7 91 e7 1b 17 09 29 a1 40 0d 08 10 20 01 c1 d0   ......).@... ...
0040  c7 bd 00 00 00 34 72 b9 5c 1f 83 cd 69 4e f0 4d   .....4r.\...iN.M
0050  aa 4e 89 b2 0f 2e 08 b9 27 48 e5 6f dd bf aa b9   .N......'H.o....
0060  ce 39                                             .9

Frame 110 (114 bytes on wire, 114 bytes captured)
    Arrival Time: Aug 14, 2003 18:31:07.376325000
    Time delta from previous packet: 0.997601000 seconds
    Time relative to first packet: 1795.127796000 seconds
    Frame Number: 110
    Packet Length: 114 bytes
    Capture Length: 114 bytes
Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad
    Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad)
    Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e)
    Type: IP (0x0800)
    Trailer: 4E955EB2
Internet Protocol, Src Addr: 211.20.96.195 (211.20.96.195), Dst Addr: 63.202.92.133 (63.202.92.133)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 96
    Identification: 0x0000 (0)
    Flags: 0x04
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 45
    Protocol: UDP (0x11)
    Header checksum: 0x7d66 (correct)
    Source: 211.20.96.195 (211.20.96.195)
    Destination: 63.202.92.133 (63.202.92.133)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 76
    Checksum: 0x0489 (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x8C03B04B4B2EF791
    Responder cookie: 0xE71B170929A1400D
    Next payload: Hash (8)
    Version: 1.0
    Exchange type: Informational (5)
    Flags
        .... ...1 = Encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0xCF6AF07C
    Length: 68
    Encrypted payload (40 bytes)

0000  00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00   .@c.... o.`...E.
0010  00 60 00 00 40 00 2d 11 7d 66 d3 14 60 c3 3f ca   .`..@.-.}f..`.?.
0020  5c 85 01 f4 01 f4 00 4c 04 89 8c 03 b0 4b 4b 2e   \......L.....KK.
0030  f7 91 e7 1b 17 09 29 a1 40 0d 08 10 05 01 cf 6a   ......).@......j
0040  f0 7c 00 00 00 44 73 89 fc 61 30 f4 bd 86 97 3c   .|...Ds..a0....<
0050  ec b3 98 27 84 9a c2 5d 49 d6 52 d5 5f 0f 94 ba   ...'...]I.R._...
0060  58 55 34 e6 f7 8e 01 69 61 44 18 91 20 a9 4e 95   XU4....iaD.. .N.
0070  5e b2                                             ^.

Frame 111 (394 bytes on wire, 394 bytes captured)
    Arrival Time: Aug 14, 2003 18:34:05.438625000
    Time delta from previous packet: 178.062300000 seconds
    Time relative to first packet: 1973.190096000 seconds
    Frame Number: 111
    Packet Length: 394 bytes
    Capture Length: 394 bytes
Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad
    Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad)
    Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e)
    Type: IP (0x0800)
    Trailer: 768BAF7B
Internet Protocol, Src Addr: 211.20.96.195 (211.20.96.195), Dst Addr: 63.202.92.133 (63.202.92.133)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 376
    Identification: 0x0000 (0)
    Flags: 0x04
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 45
    Protocol: UDP (0x11)
    Header checksum: 0x7c4e (correct)
    Source: 211.20.96.195 (211.20.96.195)
    Destination: 63.202.92.133 (63.202.92.133)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 356
    Checksum: 0x5d6a (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x8C03B04B4B2EF791
    Responder cookie: 0xE71B170929A1400D
    Next payload: Hash (8)
    Version: 1.0
    Exchange type: Quick Mode (32)
    Flags
        .... ...1 = Encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x829A6016
    Length: 348
    Encrypted payload (320 bytes)

0000  00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00   .@c.... o.`...E.
0010  01 78 00 00 40 00 2d 11 7c 4e d3 14 60 c3 3f ca   .x..@.-.|N..`.?.
0020  5c 85 01 f4 01 f4 01 64 5d 6a 8c 03 b0 4b 4b 2e   \......d]j...KK.
0030  f7 91 e7 1b 17 09 29 a1 40 0d 08 10 20 01 82 9a   ......).@... ...
0040  60 16 00 00 01 5c 1a 4f 80 b2 a4 57 19 df c9 d8   `....\.O...W....
0050  dd 4b 52 43 26 ab f2 db c4 00 04 36 a4 c4 71 6f   .KRC&......6..qo
0060  3e c6 7c 8d fc d3 f5 2c da d0 b9 fd de 93 f8 61   >.|....,.......a
0070  55 ef 35 81 a1 23 3d 01 35 98 93 03 e8 51 44 08   U.5..#=.5....QD.
0080  96 4b 67 72 2e 69 d1 f6 a2 9e 15 59 32 f8 cb 34   .Kgr.i.....Y2..4
0090  09 91 96 93 ac 04 b9 20 10 44 7d 95 02 3d c5 f4   ....... .D}..=..
00a0  aa 84 15 af 1f 16 e2 b6 87 77 26 d1 dd e2 a0 f1   .........w&.....
00b0  91 e4 cb 11 1e 0b 26 e6 e4 a5 9b b3 6a 06 3c 6e   ......&.....j.<n
00c0  f3 cd 90 92 67 6e 4f 78 37 a8 23 62 a8 3a 14 89   ....gnOx7.#b.:..
00d0  14 1f fc 6b b6 22 94 64 85 36 66 57 d0 c8 92 fc   ...k.".d.6fW....
00e0  8b 2b 2a f2 95 35 c7 32 c1 26 23 94 b7 e2 46 8d   .+*..5.2.&#...F.
00f0  9a f3 aa 80 e6 7e f2 bc ff 0c 92 25 14 76 86 98   .....~.....%.v..
0100  d8 47 19 9b 5f 48 ef 92 49 e8 26 2d da 18 9f 90   .G.._H..I.&-....
0110  5d 1a 53 ce 95 bc f1 fb 23 61 33 20 43 30 bb af   ].S.....#a3 C0..
0120  cf 99 7b 1f 30 4d f4 24 44 6b 8d 47 02 db 82 51   ..{.0M.$Dk.G...Q
0130  73 7c 99 c0 84 f4 90 3b 91 84 60 f3 b2 ea f4 0a   s|.....;..`.....
0140  70 d8 f0 80 fb ce 5a 96 9a 6d 1e c9 95 c8 93 7a   p.....Z..m.....z
0150  42 9d 8d 56 b3 c0 bb 27 d8 4c 79 e5 05 9f ab 40   B..V...'.Ly....@
0160  0b b0 fb 24 3e 4d 0c 64 bf dc 49 e6 56 53 5e 61   ...$>M.d..I.VS^a
0170  ae 77 14 16 e0 44 13 66 7f 03 97 c2 7b 05 8c 2b   .w...D.f....{..+
0180  83 69 d5 57 bd 70 76 8b af 7b                     .i.W.pv..{

Frame 112 (326 bytes on wire, 326 bytes captured)
    Arrival Time: Aug 14, 2003 18:34:05.516193000
    Time delta from previous packet: 0.077568000 seconds
    Time relative to first packet: 1973.267664000 seconds
    Frame Number: 112
    Packet Length: 326 bytes
    Capture Length: 326 bytes
Ethernet II, Src: 00:40:63:c1:11:ad, Dst: 00:20:6f:09:60:0e
    Destination: 00:20:6f:09:60:0e (00:20:6f:09:60:0e)
    Source: 00:40:63:c1:11:ad (00:40:63:c1:11:ad)
    Type: IP (0x0800)
Internet Protocol, Src Addr: 63.202.92.133 (63.202.92.133), Dst Addr: 211.20.96.195 (211.20.96.195)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 312
    Identification: 0x00c1 (193)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0xa8cd (correct)
    Source: 63.202.92.133 (63.202.92.133)
    Destination: 211.20.96.195 (211.20.96.195)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 292
    Checksum: 0xbbce (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x8C03B04B4B2EF791
    Responder cookie: 0xE71B170929A1400D
    Next payload: Hash (8)
    Version: 1.0
    Exchange type: Quick Mode (32)
    Flags
        .... ...1 = Encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x829A6016
    Length: 284
    Encrypted payload (256 bytes)

0000  00 20 6f 09 60 0e 00 40 63 c1 11 ad 08 00 45 00   . o.`..@c.....E.
0010  01 38 00 c1 00 00 40 11 a8 cd 3f ca 5c 85 d3 14   .8....@...?.\...
0020  60 c3 01 f4 01 f4 01 24 bb ce 8c 03 b0 4b 4b 2e   `......$.....KK.
0030  f7 91 e7 1b 17 09 29 a1 40 0d 08 10 20 01 82 9a   ......).@... ...
0040  60 16 00 00 01 1c b4 0e b5 23 d0 d5 e9 a1 7d 8c   `........#....}.
0050  cb 43 fd 2a 01 b7 e7 69 6f 12 34 a1 b8 87 ad c0   .C.*...io.4.....
0060  f9 0c df ad 4d 67 5e 2e 78 a0 e1 6a 3c 76 88 0b   ....Mg^.x..j<v..
0070  b0 dc 82 95 aa 62 92 a3 0b 10 77 a0 2c b4 bd 02   .....b....w.,...
0080  66 a0 8e 76 50 92 d1 30 74 e7 0c 23 9a 20 a1 06   f..vP..0t..#. ..
0090  ce c1 80 ac 0c 3d 60 4c ea 25 ea d8 6f 4b 8d 88   .....=`L.%..oK..
00a0  d2 09 97 a3 11 8c 0a d6 ba 12 3e ff 20 ee 9d 09   ..........>. ...
00b0  a2 79 d5 76 02 68 4f c0 d3 db 7f 87 3b 94 4c 0b   .y.v.hO.....;.L.
00c0  f7 62 35 94 c9 09 b4 82 fb 3f 39 b7 83 19 fd e2   .b5......?9.....
00d0  57 11 35 7c 66 aa 13 28 f9 0b 32 2d 75 fa 38 72   W.5|f..(..2-u.8r
00e0  eb 62 1b 55 b2 76 6a 1c f1 d8 c5 17 ad 6c 10 6b   .b.U.vj......l.k
00f0  60 e6 18 5b e9 1b ea 88 e6 67 1a 00 a3 36 5a 13   `..[.....g...6Z.
0100  62 4f cc 70 f7 8e 79 07 96 54 9c e3 e1 b4 dc bf   bO.p..y..T......
0110  29 65 a4 4d 8e 49 84 35 63 6e 95 48 85 5e 00 1b   )e.M.I.5cn.H.^..
0120  58 ef f3 54 51 52 b4 9b 97 c7 bd 37 25 dc bc 58   X..TQR.....7%..X
0130  cf ab 17 34 03 3f 58 18 cd 44 7d 83 c7 b8 f1 29   ...4.?X..D}....)
0140  30 17 07 59 42 34                                 0..YB4

Frame 113 (98 bytes on wire, 98 bytes captured)
    Arrival Time: Aug 14, 2003 18:34:05.816200000
    Time delta from previous packet: 0.300007000 seconds
    Time relative to first packet: 1973.567671000 seconds
    Frame Number: 113
    Packet Length: 98 bytes
    Capture Length: 98 bytes
Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad
    Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad)
    Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e)
    Type: IP (0x0800)
    Trailer: CFE3A82B
Internet Protocol, Src Addr: 211.20.96.195 (211.20.96.195), Dst Addr: 63.202.92.133 (63.202.92.133)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 80
    Identification: 0x0000 (0)
    Flags: 0x04
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 45
    Protocol: UDP (0x11)
    Header checksum: 0x7d76 (correct)
    Source: 211.20.96.195 (211.20.96.195)
    Destination: 63.202.92.133 (63.202.92.133)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 60
    Checksum: 0xb726 (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x8C03B04B4B2EF791
    Responder cookie: 0xE71B170929A1400D
    Next payload: Hash (8)
    Version: 1.0
    Exchange type: Quick Mode (32)
    Flags
        .... ...1 = Encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x829A6016
    Length: 52
    Encrypted payload (24 bytes)

0000  00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00   .@c.... o.`...E.
0010  00 50 00 00 40 00 2d 11 7d 76 d3 14 60 c3 3f ca   .P..@.-.}v..`.?.
0020  5c 85 01 f4 01 f4 00 3c b7 26 8c 03 b0 4b 4b 2e   \......<.&...KK.
0030  f7 91 e7 1b 17 09 29 a1 40 0d 08 10 20 01 82 9a   ......).@... ...
0040  60 16 00 00 00 34 5f c5 24 a2 57 9a 5c e3 cd 64   `....4_.$.W.\..d
0050  87 a9 b3 c7 fd 6e 5d 8c 89 3a 16 1b 46 5b cf e3   .....n]..:..F[..
0060  a8 2b                                             .+

Frame 114 (114 bytes on wire, 114 bytes captured)
    Arrival Time: Aug 14, 2003 18:34:05.819382000
    Time delta from previous packet: 0.003182000 seconds
    Time relative to first packet: 1973.570853000 seconds
    Frame Number: 114
    Packet Length: 114 bytes
    Capture Length: 114 bytes
Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad
    Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad)
    Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e)
    Type: IP (0x0800)
    Trailer: D56A667C
Internet Protocol, Src Addr: 211.20.96.195 (211.20.96.195), Dst Addr: 63.202.92.133 (63.202.92.133)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 96
    Identification: 0x0000 (0)
    Flags: 0x04
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 45
    Protocol: UDP (0x11)
    Header checksum: 0x7d66 (correct)
    Source: 211.20.96.195 (211.20.96.195)
    Destination: 63.202.92.133 (63.202.92.133)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 76
    Checksum: 0xb1c7 (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x8C03B04B4B2EF791
    Responder cookie: 0xE71B170929A1400D
    Next payload: Hash (8)
    Version: 1.0
    Exchange type: Informational (5)
    Flags
        .... ...1 = Encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0xA8A14D74
    Length: 68
    Encrypted payload (40 bytes)

0000  00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00   .@c.... o.`...E.
0010  00 60 00 00 40 00 2d 11 7d 66 d3 14 60 c3 3f ca   .`..@.-.}f..`.?.
0020  5c 85 01 f4 01 f4 00 4c b1 c7 8c 03 b0 4b 4b 2e   \......L.....KK.
0030  f7 91 e7 1b 17 09 29 a1 40 0d 08 10 05 01 a8 a1   ......).@.......
0040  4d 74 00 00 00 44 ec ec 44 0d 64 f7 53 a4 4a ed   Mt...D..D.d.S.J.
0050  56 67 d2 a9 10 8f 60 b4 50 c3 2c 49 f9 57 4e 6a   Vg....`.P.,I.WNj
0060  94 c1 35 90 68 3e 73 6a 23 24 72 15 c0 56 d5 6a   ..5.h>sj#$r..V.j
0070  66 7c                                             f|

Frame 115 (394 bytes on wire, 394 bytes captured)
    Arrival Time: Aug 14, 2003 18:37:04.878852000
    Time delta from previous packet: 179.059470000 seconds
    Time relative to first packet: 2152.630323000 seconds
    Frame Number: 115
    Packet Length: 394 bytes
    Capture Length: 394 bytes
Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad
    Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad)
    Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e)
    Type: IP (0x0800)
    Trailer: 8C7ED14F
Internet Protocol, Src Addr: 211.20.96.195 (211.20.96.195), Dst Addr: 63.202.92.133 (63.202.92.133)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 376
    Identification: 0x0000 (0)
    Flags: 0x04
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 45
    Protocol: UDP (0x11)
    Header checksum: 0x7c4e (correct)
    Source: 211.20.96.195 (211.20.96.195)
    Destination: 63.202.92.133 (63.202.92.133)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 356
    Checksum: 0x7267 (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x8C03B04B4B2EF791
    Responder cookie: 0xE71B170929A1400D
    Next payload: Hash (8)
    Version: 1.0
    Exchange type: Quick Mode (32)
    Flags
        .... ...1 = Encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x96B57DF5
    Length: 348
    Encrypted payload (320 bytes)

0000  00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00   .@c.... o.`...E.
0010  01 78 00 00 40 00 2d 11 7c 4e d3 14 60 c3 3f ca   .x..@.-.|N..`.?.
0020  5c 85 01 f4 01 f4 01 64 72 67 8c 03 b0 4b 4b 2e   \......drg...KK.
0030  f7 91 e7 1b 17 09 29 a1 40 0d 08 10 20 01 96 b5   ......).@... ...
0040  7d f5 00 00 01 5c cd 28 25 fd c9 7d 37 7b 70 00   }....\.(%..}7{p.
0050  ea 08 d7 f2 6d a8 79 1c c7 74 f4 ce 81 64 0f c8   ....m.y..t...d..
0060  59 7c 01 fe f8 5a 51 d3 18 a2 f5 a7 44 4a 3b ef   Y|...ZQ.....DJ;.
0070  b5 8b 9a 0f c5 6d aa 73 34 1c 90 23 40 73 cd 82   .....m.s4..#@s..
0080  1a 21 21 19 06 7b 00 89 cb 0d db d8 af 5c 9d f7   .!!..{.......\..
0090  87 89 a9 15 40 d4 84 f7 80 85 15 8d 3d 6f 93 a0   ....@.......=o..
00a0  66 5e e4 48 71 bd 40 c2 49 68 38 4f 6b ba c6 8e   f^.Hq.@.Ih8Ok...
00b0  9a b4 e6 d5 1e b3 63 ca d5 ef 51 7f 20 fa d3 e9   ......c...Q. ...
00c0  5a 75 5e 12 fd 34 af 88 c0 33 05 1d 90 79 51 2f   Zu^..4...3...yQ/
00d0  45 d7 74 8f f4 e8 2e 03 9b be 1c 56 47 40 82 9d   E.t........VG@..
00e0  a8 97 12 2d 96 7b 05 b0 c4 f9 ef 1f a2 18 84 72   ...-.{.........r
00f0  7d 6d 20 c0 ab fc bc ec 6f 18 48 49 19 bd 4c b4   }m .....o.HI..L.
0100  86 eb e7 24 ce d2 5d 54 b1 68 a1 7b 58 dd 6e 98   ...$..]T.h.{X.n.
0110  2a cc 2a c9 db 26 40 9e aa 24 35 61 c1 0d 9f 67   *.*..&@..$5a...g
0120  f1 de cf f6 88 75 cc 83 78 61 5c 28 64 a8 a0 25   .....u..xa\(d..%
0130  d9 14 b0 0f 0a 32 f9 0c 31 40 14 37 79 b2 34 95   .....2..1@.7y.4.
0140  d4 b8 fd 66 12 af 42 b3 dd 5c fa 9f 50 32 ba cc   ...f..B..\..P2..
0150  44 6d b3 9e 30 9c ab 7f 50 aa 1a d6 f6 22 30 69   Dm..0...P...."0i
0160  4f c6 dc 2c 4f 4a 5e b2 e7 8d f5 60 dd 1e 71 05   O..,OJ^....`..q.
0170  d9 6d 65 d6 03 03 a2 8e 34 3a 38 2a be c0 fa 1b   .me.....4:8*....
0180  ef dd d2 6f 31 ad 8c 7e d1 4f                     ...o1..~.O

Frame 116 (326 bytes on wire, 326 bytes captured)
    Arrival Time: Aug 14, 2003 18:37:04.956274000
    Time delta from previous packet: 0.077422000 seconds
    Time relative to first packet: 2152.707745000 seconds
    Frame Number: 116
    Packet Length: 326 bytes
    Capture Length: 326 bytes
Ethernet II, Src: 00:40:63:c1:11:ad, Dst: 00:20:6f:09:60:0e
    Destination: 00:20:6f:09:60:0e (00:20:6f:09:60:0e)
    Source: 00:40:63:c1:11:ad (00:40:63:c1:11:ad)
    Type: IP (0x0800)
Internet Protocol, Src Addr: 63.202.92.133 (63.202.92.133), Dst Addr: 211.20.96.195 (211.20.96.195)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 312
    Identification: 0x0153 (339)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0xa83b (correct)
    Source: 63.202.92.133 (63.202.92.133)
    Destination: 211.20.96.195 (211.20.96.195)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 292
    Checksum: 0xba23 (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x8C03B04B4B2EF791
    Responder cookie: 0xE71B170929A1400D
    Next payload: Hash (8)
    Version: 1.0
    Exchange type: Quick Mode (32)
    Flags
        .... ...1 = Encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x96B57DF5
    Length: 284
    Encrypted payload (256 bytes)

0000  00 20 6f 09 60 0e 00 40 63 c1 11 ad 08 00 45 00   . o.`..@c.....E.
0010  01 38 01 53 00 00 40 11 a8 3b 3f ca 5c 85 d3 14   .8.S..@..;?.\...
0020  60 c3 01 f4 01 f4 01 24 ba 23 8c 03 b0 4b 4b 2e   `......$.#...KK.
0030  f7 91 e7 1b 17 09 29 a1 40 0d 08 10 20 01 96 b5   ......).@... ...
0040  7d f5 00 00 01 1c 28 3a e9 44 d1 26 77 99 28 56   }.....(:.D.&w.(V
0050  0a ef 4f 1c 28 0c f2 f2 bb 03 cd a5 a0 f0 00 9e   ..O.(...........
0060  da ad d0 35 17 c5 ed a3 1b 36 41 a6 4c 28 9e 87   ...5.....6A.L(..
0070  19 de 8e 3b 89 ed 9b 2f c8 99 7b 59 b1 25 a6 87   ...;.../..{Y.%..
0080  98 78 91 86 dc 75 08 83 1f 9c de d2 1e dd 5e 24   .x...u........^$
0090  3e a5 cf 62 c7 62 f4 1b 5d ae c8 1b c8 b5 6d 78   >..b.b..].....mx
00a0  c4 5e 2d 27 f3 b4 f0 cf c0 2e 50 1d 6e 81 bf 0f   .^-'......P.n...
00b0  bf ed db 7f 69 88 32 cb 2f 93 1c e3 9b e6 b9 68   ....i.2./......h
00c0  9a ff 66 73 f9 9c 40 57 7c c9 2b 84 47 43 1d 45   ..fs..@W|.+.GC.E
00d0  bb bf ee 7c a0 55 5f 43 25 af 16 40 73 cc e9 54   ...|.U_C%..@s..T
00e0  b7 af 3a 81 78 f4 60 9d bb c0 4e 40 e4 33 a7 78   ..:.x.`...N@.3.x
00f0  8d e4 52 77 70 5e 4c 2d c7 67 60 bf b8 26 17 ba   ..Rwp^L-.g`..&..
0100  dc 2c 85 73 12 7b fc e4 d0 cd 4d 4b b7 72 6e 51   .,.s.{....MK.rnQ
0110  3f a5 f8 f6 03 49 e5 cd 13 6b df df b4 c3 52 38   ?....I...k....R8
0120  82 c7 16 a1 33 d4 52 ca 08 13 d7 33 17 e3 23 b1   ....3.R....3..#.
0130  7e 1e ad d0 c0 a8 92 cf f1 65 3c 01 cf 7f 9c f4   ~........e<.....
0140  79 24 40 76 ca bd                                 y$@v..

Frame 117 (98 bytes on wire, 98 bytes captured)
    Arrival Time: Aug 14, 2003 18:37:05.254562000
    Time delta from previous packet: 0.298288000 seconds
    Time relative to first packet: 2153.006033000 seconds
    Frame Number: 117
    Packet Length: 98 bytes
    Capture Length: 98 bytes
Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad
    Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad)
    Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e)
    Type: IP (0x0800)
    Trailer: 1B3E78E6
Internet Protocol, Src Addr: 211.20.96.195 (211.20.96.195), Dst Addr: 63.202.92.133 (63.202.92.133)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 80
    Identification: 0x0000 (0)
    Flags: 0x04
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 45
    Protocol: UDP (0x11)
    Header checksum: 0x7d76 (correct)
    Source: 211.20.96.195 (211.20.96.195)
    Destination: 63.202.92.133 (63.202.92.133)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 60
    Checksum: 0x6163 (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x8C03B04B4B2EF791
    Responder cookie: 0xE71B170929A1400D
    Next payload: Hash (8)
    Version: 1.0
    Exchange type: Quick Mode (32)
    Flags
        .... ...1 = Encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x96B57DF5
    Length: 52
    Encrypted payload (24 bytes)

0000  00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00   .@c.... o.`...E.
0010  00 50 00 00 40 00 2d 11 7d 76 d3 14 60 c3 3f ca   .P..@.-.}v..`.?.
0020  5c 85 01 f4 01 f4 00 3c 61 63 8c 03 b0 4b 4b 2e   \......<ac...KK.
0030  f7 91 e7 1b 17 09 29 a1 40 0d 08 10 20 01 96 b5   ......).@... ...
0040  7d f5 00 00 00 34 af 27 85 f6 2e 0a 1c 22 ac 25   }....4.'.....".%
0050  f5 f2 9c 8d 2e 3c 84 96 cf e8 15 e0 4f a4 1b 3e   .....<......O..>
0060  78 e6                                             x.

Frame 118 (114 bytes on wire, 114 bytes captured)
    Arrival Time: Aug 14, 2003 18:37:06.254231000
    Time delta from previous packet: 0.999669000 seconds
    Time relative to first packet: 2154.005702000 seconds
    Frame Number: 118
    Packet Length: 114 bytes
    Capture Length: 114 bytes
Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad
    Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad)
    Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e)
    Type: IP (0x0800)
    Trailer: 118AE7E9
Internet Protocol, Src Addr: 211.20.96.195 (211.20.96.195), Dst Addr: 63.202.92.133 (63.202.92.133)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 96
    Identification: 0x0000 (0)
    Flags: 0x04
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 45
    Protocol: UDP (0x11)
    Header checksum: 0x7d66 (correct)
    Source: 211.20.96.195 (211.20.96.195)
    Destination: 63.202.92.133 (63.202.92.133)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 76
    Checksum: 0xa784 (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x8C03B04B4B2EF791
    Responder cookie: 0xE71B170929A1400D
    Next payload: Hash (8)
    Version: 1.0
    Exchange type: Informational (5)
    Flags
        .... ...1 = Encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0xBD89E696
    Length: 68
    Encrypted payload (40 bytes)

0000  00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00   .@c.... o.`...E.
0010  00 60 00 00 40 00 2d 11 7d 66 d3 14 60 c3 3f ca   .`..@.-.}f..`.?.
0020  5c 85 01 f4 01 f4 00 4c a7 84 8c 03 b0 4b 4b 2e   \......L.....KK.
0030  f7 91 e7 1b 17 09 29 a1 40 0d 08 10 05 01 bd 89   ......).@.......
0040  e6 96 00 00 00 44 76 54 90 30 bd e1 f0 a2 86 12   .....DvT.0......
0050  55 78 6a 5d 7e d0 de 93 b4 1c 23 25 49 98 ad b4   Uxj]~.....#%I...
0060  de 01 9c 05 b3 e4 7b 4e 49 63 65 e4 6c 02 11 8a   ......{NIce.l...
0070  e7 e9                                             ..