IKE and IPsec packets sent/received: Frame 1 (126 bytes on wire, 126 bytes captured) Arrival Time: Jun 9, 2003 22:08:28.290319000 Time delta from previous packet: 0.000000000 seconds Time relative to first packet: 0.000000000 seconds Frame Number: 1 Packet Length: 126 bytes Capture Length: 126 bytes Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad) Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e) Type: IP (0x0800) Trailer: BBE5D8B3 Internet Protocol, Src Addr: 61.11.60.72 (61.11.60.72), Dst Addr: 63.202.92.133 (63.202.92.133) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 108 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 46 Protocol: UDP (0x11) Header checksum: 0x36df (correct) Source: 61.11.60.72 (61.11.60.72) Destination: 63.202.92.133 (63.202.92.133) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 88 Checksum: 0x7a30 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x8A9F85DC27ED2E56 Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 80 Security Association payload Next payload: NONE (0) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 0 Next payload: NONE (0) Length: 40 Proposal number: 0 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 0 Next payload: NONE (0) Length: 32 Transform number: 0 Transform ID: KEY_IKE (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (180) Encryption-Algorithm (1): 3DES-CBC (5) Authentication-Method (3): PSK (1) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) 0000 00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00 .@c.... o.`...E. 0010 00 6c 00 00 40 00 2e 11 36 df 3d 0b 3c 48 3f ca .l..@...6.=.r.V...... 00f0 5c 8f bc 53 44 9f 67 65 00 b2 08 47 eb 99 bc 51 \..SD.ge...G...Q 0100 53 e0 1f 94 70 83 6b 60 9e bc e5 c2 94 42 7d 85 S...p.k`.....B}. 0110 9d f2 76 28 04 3e 0c 1b 9c cf 65 d6 d3 18 ee 04 ..v(.>....e..... 0120 6a ed 5e e1 ca 87 32 94 80 31 de 64 e5 c7 a1 0e j.^...2..1.d.... 0130 34 1e da 29 fa d5 11 2b 90 2d 7c 8d a5 82 2b 23 4..)...+.-|...+# 0140 f5 ef 93 bc 60 84 ....`. Frame 11 (106 bytes on wire, 106 bytes captured) Arrival Time: Jun 9, 2003 22:08:30.724837000 Time delta from previous packet: 0.288503000 seconds Time relative to first packet: 2.434518000 seconds Frame Number: 11 Packet Length: 106 bytes Capture Length: 106 bytes Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad) Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e) Type: IP (0x0800) Trailer: 2FA0AAD9 Internet Protocol, Src Addr: 61.11.60.72 (61.11.60.72), Dst Addr: 63.202.92.133 (63.202.92.133) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 88 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 46 Protocol: UDP (0x11) Header checksum: 0x36f3 (correct) Source: 61.11.60.72 (61.11.60.72) Destination: 63.202.92.133 (63.202.92.133) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 68 Checksum: 0x7773 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x8A9F85DC27ED2E56 Responder cookie: 0x67E384D07953AA12 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x39EE4688 Length: 60 Encrypted payload (32 bytes) 0000 00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00 .@c.... o.`...E. 0010 00 58 00 00 40 00 2e 11 36 f3 3d 0b 3c 48 3f ca .X..@...6.=.D"..gO..C.....f 0050 d0 c6 b7 ae 61 b6 3c db 05 b3 b3 86 d4 c3 2f 8c ....a.<......./. 0060 da 47 b3 2d 9d e0 7e 5d 55 ae 73 de 90 c0 8e d8 .G.-..~]U.s..... 0070 3b 3d ab 53 40 62 31 65 6a 15 ;=.S@b1ej. Frame 13 (110 bytes on wire, 110 bytes captured) Arrival Time: Jun 9, 2003 22:08:31.235954000 Time delta from previous packet: 0.001068000 seconds Time relative to first packet: 2.945635000 seconds Frame Number: 13 Packet Length: 110 bytes Capture Length: 110 bytes Ethernet II, Src: 00:40:63:c1:11:ad, Dst: 00:20:6f:09:60:0e Destination: 00:20:6f:09:60:0e (00:20:6f:09:60:0e) Source: 00:40:63:c1:11:ad (00:40:63:c1:11:ad) Type: IP (0x0800) Internet Protocol, Src Addr: 63.202.92.133 (63.202.92.133), Dst Addr: 61.11.60.72 (61.11.60.72) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0x5632 (22066) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x0e98 (correct) Source: 63.202.92.133 (63.202.92.133) Destination: 61.11.60.72 (61.11.60.72) Encapsulating Security Payload SPI: 0x0e603a57 Sequence: 0x00000001 Data (68 bytes) 0000 00 20 6f 09 60 0e 00 40 63 c1 11 ad 08 00 45 00 . o.`..@c.....E. 0010 00 60 56 32 00 00 40 32 0e 98 3f ca 5c 85 3d 0b .`V2..@2..?.\.=. 0020 3c 48 0e 60 3a 57 00 00 00 01 e0 2c 04 bc 87 53 ..Spn...v.. 00a0 5e b5 69 42 78 dd 60 de ef 6f 0a 6c 00 3a fc 40 ^.iBx.`..o.l.:.@ 00b0 cc fb 64 99 66 c2 aa 5e d8 a5 59 fc b1 ab b3 3b ..d.f..^..Y....; 00c0 1f 13 d1 80 84 53 1c 0e eb 33 97 0e 22 00 e7 22 .....S...3..".." 00d0 80 12 6c f3 fd ce 91 57 1a cc d1 a4 c9 4e 9a 82 ..l....W.....N.. 00e0 2e 7a 6e a4 c9 81 bf 6f 0b 77 31 56 70 8e 32 51 .zn....o.w1Vp.2Q 00f0 ad 4c 5e 3e 3d d0 b1 ff 3e 91 75 39 7a 60 fd 95 .L^>=...>.u9z`.. 0100 50 60 ab fa 2d 43 77 00 1e 0a 2c df 10 4d c0 66 P`..-Cw...,..M.f 0110 c2 b7 b9 14 77 0f cc eb d5 f6 94 b0 87 d4 1c c5 ....w........... 0120 b8 a2 21 a7 d5 18 99 12 2f 77 2d 49 64 67 a0 9d ..!...../w-Idg.. 0130 85 50 a0 6c 70 58 47 cb 8e e0 52 cf 6e a7 89 f2 .P.lpXG...R.n... 0140 1d b1 26 58 b4 31 b7 61 34 bc 22 13 4e e0 d6 87 ..&X.1.a4.".N... 0150 15 6d 43 59 1a 5e bb cf 1d 6f c9 dc 14 6e 80 a0 .mCY.^...o...n.. 0160 40 b0 82 f9 50 21 cf a8 03 45 5a ef d0 c9 76 1c @...P!...EZ...v. 0170 4d 32 05 2e 0f 68 86 e6 0a 48 98 76 ff ae e9 2e M2...h...H.v.... 0180 dc 6c .l Frame 16 (110 bytes on wire, 110 bytes captured) Arrival Time: Jun 9, 2003 22:08:31.699211000 Time delta from previous packet: 0.180324000 seconds Time relative to first packet: 3.408892000 seconds Frame Number: 16 Packet Length: 110 bytes Capture Length: 110 bytes Ethernet II, Src: 00:40:63:c1:11:ad, Dst: 00:20:6f:09:60:0e Destination: 00:20:6f:09:60:0e (00:20:6f:09:60:0e) Source: 00:40:63:c1:11:ad (00:40:63:c1:11:ad) Type: IP (0x0800) Internet Protocol, Src Addr: 63.202.92.133 (63.202.92.133), Dst Addr: 61.11.60.72 (61.11.60.72) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0x5633 (22067) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x0e97 (correct) Source: 63.202.92.133 (63.202.92.133) Destination: 61.11.60.72 (61.11.60.72) Encapsulating Security Payload SPI: 0x0e603a57 Sequence: 0x00000002 Data (68 bytes) 0000 00 20 6f 09 60 0e 00 40 63 c1 11 ad 08 00 45 00 . o.`..@c.....E. 0010 00 60 56 33 00 00 40 32 0e 97 3f ca 5c 85 3d 0b .`V3..@2..?.\.=. 0020 3c 48 0e 60 3a 57 00 00 00 02 91 99 92 8a f9 89 ......8b..h.i. 0280 5c 76 95 16 7d b7 d4 39 c0 d1 fc 01 49 de 8d fd \v..}..9....I... 0290 d1 d6 39 35 8a b7 81 41 4a 5b 62 a9 67 a9 1d 5c ..95...AJ[b.g..\ 02a0 d0 d0 e7 9a ba d4 b2 8b e2 67 08 16 74 0a 11 4b .........g..t..K 02b0 4e 45 85 43 5b df 68 bd 9c 14 79 13 8a 6b 4e b0 NE.C[.h...y..kN. 02c0 1a b1 df b6 02 56 d8 d3 88 19 b2 26 59 00 98 54 .....V.....&Y..T 02d0 ae 2a 2b e8 18 ff 05 79 66 4b 9e 99 34 77 5a 58 .*+....yfK..4wZX 02e0 12 4a 09 d0 cd 66 f1 67 d0 ee cb 63 ec 89 e3 a6 .J...f.g...c.... 02f0 21 4e 49 ee 8e 21 99 22 8d 34 51 5a 8d 3f 16 51 !NI..!.".4QZ.?.Q 0300 73 bf b7 72 38 44 18 b1 64 e9 e2 f1 46 62 5c f4 s..r8D..d...Fb\. 0310 66 75 82 fc c8 93 40 49 ad 36 f3 ce b3 21 08 e7 fu....@I.6...!.. 0320 9d 9a 74 9d ce 1a a6 6a 52 9f 82 ea f0 d7 2e e2 ..t....jR....... 0330 9e 35 f2 bc f4 4c b6 20 f7 6d a7 da f5 24 dc 7d .5...L. .m...$.} 0340 3f b0 dc a2 b9 df aa 1d 43 e7 1a 25 06 74 be 50 ?.......C..%.t.P 0350 44 29 f6 59 0e 87 a2 97 ee 1d 53 a8 4c fb 60 c8 D).Y......S.L.`. 0360 c9 de 9b aa dd bc f2 93 18 1f 02 a3 e0 b1 d7 30 ...............0 0370 aa 7b 39 89 a6 96 be 22 bc ba f6 09 c5 85 86 c4 .{9...."........ 0380 0c 18 69 20 9f 34 9d 89 3b b4 cf 14 33 a1 1e db ..i .4..;...3... 0390 f6 ab 0d 45 9f 29 97 ea 61 e1 6a 2e 74 83 83 9b ...E.)..a.j.t... 03a0 43 a4 d1 f9 a4 ff 42 55 f9 26 eb 38 35 08 ae 7c C.....BU.&.85..| 03b0 fb 9d 7e 23 6c 21 8e 1b 2b 1e 2b 67 41 2e 14 06 ..~#l!..+.+gA... 03c0 6a 36 69 86 39 87 fa 54 d8 55 a3 69 24 59 ee 6c j6i.9..T.U.i$Y.l 03d0 7f d5 a2 57 5c 2e ...W\. Frame 18 (110 bytes on wire, 110 bytes captured) Arrival Time: Jun 9, 2003 22:08:31.904331000 Time delta from previous packet: 0.000155000 seconds Time relative to first packet: 3.614012000 seconds Frame Number: 18 Packet Length: 110 bytes Capture Length: 110 bytes Ethernet II, Src: 00:40:63:c1:11:ad, Dst: 00:20:6f:09:60:0e Destination: 00:20:6f:09:60:0e (00:20:6f:09:60:0e) Source: 00:40:63:c1:11:ad (00:40:63:c1:11:ad) Type: IP (0x0800) Internet Protocol, Src Addr: 63.202.92.133 (63.202.92.133), Dst Addr: 61.11.60.72 (61.11.60.72) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0x5635 (22069) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x0e95 (correct) Source: 63.202.92.133 (63.202.92.133) Destination: 61.11.60.72 (61.11.60.72) Encapsulating Security Payload SPI: 0x0e603a57 Sequence: 0x00000004 Data (68 bytes) 0000 00 20 6f 09 60 0e 00 40 63 c1 11 ad 08 00 45 00 . o.`..@c.....E. 0010 00 60 56 35 00 00 40 32 0e 95 3f ca 5c 85 3d 0b .`V5..@2..?.\.=. 0020 3c 48 0e 60 3a 57 00 00 00 04 9e 2f 4d fe 4f f8 ..u..kb Frame 19 (114 bytes on wire, 114 bytes captured) Arrival Time: Jun 9, 2003 22:08:32.235387000 Time delta from previous packet: 0.331056000 seconds Time relative to first packet: 3.945068000 seconds Frame Number: 19 Packet Length: 114 bytes Capture Length: 114 bytes Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad) Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e) Type: IP (0x0800) Trailer: 5B816702 Internet Protocol, Src Addr: 61.11.60.72 (61.11.60.72), Dst Addr: 63.202.92.133 (63.202.92.133) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0x0004 (4) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 109 Protocol: ESP (0x32) Header checksum: 0x37c6 (correct) Source: 61.11.60.72 (61.11.60.72) Destination: 63.202.92.133 (63.202.92.133) Encapsulating Security Payload SPI: 0x0beb23c4 Sequence: 0x00000004 Data (68 bytes) 0000 00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00 .@c.... o.`...E. 0010 00 60 00 04 00 00 6d 32 37 c6 3d 0b 3c 48 3f ca .`....m27.=....m... 00b0 3c d1 f8 16 2c 73 21 73 06 f5 a8 80 08 00 6f 36 <...,s!s......o6 00c0 09 97 c9 a5 f0 47 59 05 09 72 0d 00 00 14 f3 5f .....GY..r....._ 00d0 05 df 38 51 05 1c b9 4d 37 37 73 e7 36 1c 00 00 ..8Q...M77s.6... 00e0 00 14 70 03 cb c1 09 7d be 9c 26 00 ba 69 83 bc ..p....}..&..i.. 00f0 8b 35 aa 1f 18 8f .5.... Frame 25 (242 bytes on wire, 242 bytes captured) Arrival Time: Jun 9, 2003 22:12:14.549997000 Time delta from previous packet: 0.052187000 seconds Time relative to first packet: 226.259678000 seconds Frame Number: 25 Packet Length: 242 bytes Capture Length: 242 bytes Ethernet II, Src: 00:40:63:c1:11:ad, Dst: 00:20:6f:09:60:0e Destination: 00:20:6f:09:60:0e (00:20:6f:09:60:0e) Source: 00:40:63:c1:11:ad (00:40:63:c1:11:ad) Type: IP (0x0800) Internet Protocol, Src Addr: 63.202.92.133 (63.202.92.133), Dst Addr: 61.11.60.72 (61.11.60.72) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 228 Identification: 0x56d0 (22224) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x0d97 (correct) Source: 63.202.92.133 (63.202.92.133) Destination: 61.11.60.72 (61.11.60.72) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 208 Checksum: 0x5c28 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xB98FF09617917BD5 Responder cookie: 0x6C5E86F56E232AC4 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 200 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: Vendor ID (13) Length: 20 Nonce Data Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: unknown vendor ID: 0x7003CBC1097DBE9C2600BA6983BC8B35 0000 00 20 6f 09 60 0e 00 40 63 c1 11 ad 08 00 45 00 . o.`..@c.....E. 0010 00 e4 56 d0 00 00 40 11 0d 97 3f ca 5c 85 3d 0b ..V...@...?.\.=. 0020 3c 48 01 f4 01 f4 00 d0 5c 28 b9 8f f0 96 17 91 u;...7. 0080 63 de 1e 64 a3 0f 15 a4 8a 25 68 d8 21 23 d0 c1 c..d.....%h.!#.. 0090 d1 cd 76 21 8c 24 1d 75 91 8d 14 77 f4 7b 83 92 ..v!.$.u...w.{.. 00a0 ff 83 45 ec 53 2c 30 f0 77 f3 0e 90 fc 7d c4 df ..E.S,0.w....}.. 00b0 67 d1 b2 40 7a 1b 30 89 a2 8d 6f 9c 0f ab 03 80 g..@z.0...o..... 00c0 57 85 0c 2c f2 a5 bd ed 51 5a 0d 00 00 14 d6 1b W..,....QZ...... 00d0 47 e1 1a f2 5a bb 4b 4b e4 d2 e5 e0 4b 2f 00 00 G...Z.KK....K/.. 00e0 00 14 70 03 cb c1 09 7d be 9c 26 00 ba 69 83 bc ..p....}..&..i.. 00f0 8b 35 .5 Frame 26 (114 bytes on wire, 114 bytes captured) Arrival Time: Jun 9, 2003 22:12:14.922599000 Time delta from previous packet: 0.372602000 seconds Time relative to first packet: 226.632280000 seconds Frame Number: 26 Packet Length: 114 bytes Capture Length: 114 bytes Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad) Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e) Type: IP (0x0800) Trailer: D6B92C93 Internet Protocol, Src Addr: 61.11.60.72 (61.11.60.72), Dst Addr: 63.202.92.133 (63.202.92.133) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 46 Protocol: UDP (0x11) Header checksum: 0x36eb (correct) Source: 61.11.60.72 (61.11.60.72) Destination: 63.202.92.133 (63.202.92.133) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 76 Checksum: 0xe6dc (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xB98FF09617917BD5 Responder cookie: 0x6C5E86F56E232AC4 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 68 Encrypted payload (40 bytes) 0000 00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00 .@c.... o.`...E. 0010 00 60 00 00 40 00 2e 11 36 eb 3d 0b 3c 48 3f ca .`..@...6.=...c..^h. .p. 00a0 31 61 4e 91 b2 f9 e6 27 1d 77 ed 29 73 7c e7 e1 1aN....'.w.)s|.. 00b0 c2 2f 5e fa 26 a8 13 f1 b4 58 0d 2a 3e 0c 78 b2 ./^.&....X.*>.x. 00c0 68 7c 7a a7 42 f3 47 e8 85 eb 41 87 28 54 68 2d h|z.B.G...A.(Th- 00d0 23 a7 54 73 1f 97 a3 4f ec 30 6d 66 a3 57 d0 50 #.Ts...O.0mf.W.P 00e0 bf 68 a8 a4 8a cc 62 5c 4f 84 ac 0e 1a ac a0 bc .h....b\O....... 00f0 25 e5 1c d1 5c 6f c3 4f ce bc dd b8 64 67 87 f1 %...\o.O....dg.. 0100 28 e7 e4 b7 8f 2d 57 3c 82 e3 1c 0e 9f 09 b9 e4 (....-W<........ 0110 82 a8 81 b0 f6 b2 7d 42 0f 70 e2 47 fa de 17 42 ......}B.p.G...B 0120 13 c9 1b 0b 11 64 77 0a 8d 53 b1 3d 82 4c cf 72 .....dw..S.=.L.r 0130 4f 98 11 71 cb bb fd 69 64 86 72 1b 26 1a 35 fa O..q...id.r.&.5. 0140 ec 60 8e 4e 39 85 .`.N9. Frame 30 (106 bytes on wire, 106 bytes captured) Arrival Time: Jun 9, 2003 22:12:16.557146000 Time delta from previous packet: 0.288698000 seconds Time relative to first packet: 228.266827000 seconds Frame Number: 30 Packet Length: 106 bytes Capture Length: 106 bytes Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad) Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e) Type: IP (0x0800) Trailer: 2E51CFD9 Internet Protocol, Src Addr: 61.11.60.72 (61.11.60.72), Dst Addr: 63.202.92.133 (63.202.92.133) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 88 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 46 Protocol: UDP (0x11) Header checksum: 0x36f3 (correct) Source: 61.11.60.72 (61.11.60.72) Destination: 63.202.92.133 (63.202.92.133) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 68 Checksum: 0x5de0 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xB98FF09617917BD5 Responder cookie: 0x6C5E86F56E232AC4 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x0B36C01B Length: 60 Encrypted payload (32 bytes) 0000 00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00 .@c.... o.`...E. 0010 00 58 00 00 40 00 2e 11 36 f3 3d 0b 3c 48 3f ca .X..@...6.=.7Q|..V.T....) 0040 74 45 40 d0 7c 7e 06 95 70 e6 53 16 7f 46 37 e9 tE@.|~..p.S..F7. 0050 ad 66 20 c6 10 c6 47 ef eb 13 ad fc 0c 7b 98 50 .f ...G......{.P 0060 a1 91 8a 89 63 ff 1f 23 12 20 26 78 1c a9 75 93 ....c..#. &x..u. 0070 92 84 fc 7a b5 f0 9d 77 c6 ba 87 1b 05 96 93 2a ...z...w.......* 0080 98 74 51 f0 49 37 a3 fb da 87 24 96 7e 1d 61 3c .tQ.I7....$.~.a< 0090 80 ab e0 e1 75 d1 bd 7d 74 b3 56 32 bb 87 d8 b4 ....u..}t.V2.... 00a0 21 7a c2 0b 2d df 96 05 14 53 68 0e 0d d7 b3 d5 !z..-....Sh..... 00b0 bd d7 0b 96 5f 97 53 e2 1a e5 da 9e f1 2b c9 3d ...._.S......+.= 00c0 f6 c7 c3 18 e8 79 12 57 87 13 9f 21 27 09 e7 93 .....y.W...!'... 00d0 84 d1 4f 2f 52 98 ad b1 df 34 7c a0 2c 8c 1d cb ..O/R....4|.,... 00e0 8b bb dd 43 8f 8f b5 3b 03 0c b5 90 51 d5 6c 77 ...C...;....Q.lw 00f0 ec b6 1e df c5 e8 12 ad d9 2a 0a f6 27 dc 73 d3 .........*..'.s. 0100 a4 1a ab 31 a3 78 ff 87 f2 2b b7 73 e8 ee 31 c9 ...1.x...+.s..1. 0110 e0 ed 75 d8 81 4c ec ad bc 25 57 69 e1 e1 2c bc ..u..L...%Wi..,. 0120 ae 20 e1 7e af b2 a4 66 da c6 ef 60 44 64 94 fa . .~...f...`Dd.. 0130 67 16 01 a4 72 3a 2e e3 15 d2 1e 3b 34 cf 69 f3 g...r:.....;4.i. 0140 91 b7 a8 9a db 2a 77 23 cf 02 70 08 55 96 8d 34 .....*w#..p.U..4 0150 36 37 aa a4 33 ff 39 ab d2 38 3a 1d b2 c5 44 61 67..3.9..8:...Da 0160 39 b6 7e 67 0f d0 dc 47 33 e1 62 dd ca 82 ab f6 9.~g...G3.b..... 0170 c7 b8 c3 11 aa 9a 94 b0 70 4a bc cf f1 dd bd 35 ........pJ.....5 0180 a2 fa .. Frame 35 (982 bytes on wire, 982 bytes captured) Arrival Time: Jun 9, 2003 22:12:17.425153000 Time delta from previous packet: 0.019064000 seconds Time relative to first packet: 229.134834000 seconds Frame Number: 35 Packet Length: 982 bytes Capture Length: 982 bytes Ethernet II, Src: 00:40:63:c1:11:ad, Dst: 00:20:6f:09:60:0e Destination: 00:20:6f:09:60:0e (00:20:6f:09:60:0e) Source: 00:40:63:c1:11:ad (00:40:63:c1:11:ad) Type: IP (0x0800) Internet Protocol, Src Addr: 63.202.92.133 (63.202.92.133), Dst Addr: 61.11.60.72 (61.11.60.72) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 968 Identification: 0x56d4 (22228) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x0a8e (correct) Source: 63.202.92.133 (63.202.92.133) Destination: 61.11.60.72 (61.11.60.72) Encapsulating Security Payload SPI: 0x0301e7d8 Sequence: 0x00000002 Data (940 bytes) 0000 00 20 6f 09 60 0e 00 40 63 c1 11 ad 08 00 45 00 . o.`..@c.....E. 0010 03 c8 56 d4 00 00 40 32 0a 8e 3f ca 5c 85 3d 0b ..V...@2..?.\.=. 0020 3c 48 03 01 e7 d8 00 00 00 02 4c dd fe 0c cc 80 1.v 0040 81 70 fd f5 d4 f5 2b 2e 64 72 cc 93 64 c4 44 82 .p....+.dr..d.D. 0050 7c da a1 21 ed a3 29 e7 d1 58 78 6f eb 72 63 99 |..!..)..Xxo.rc. 0060 0d bd 4f b1 06 59 64 a6 13 dd 53 ba 9d 4f 7b bf ..O..Yd...S..O{. 0070 6d 0c 6d cb 62 07 86 50 97 c9 fd 43 cd 36 de b9 m.m.b..P...C.6.. 0080 de e6 79 63 94 b5 96 be 83 4c 91 f9 5d e5 af b2 ..yc.....L..]... 0090 be 59 be 56 92 2b 2c a8 01 1b 4a b2 b4 1b f8 98 .Y.V.+,...J..... 00a0 e9 f0 22 7e db 89 38 24 89 c7 de f5 7e ea f8 39 .."~..8$....~..9 00b0 7b 3a d2 94 c2 fa 3b b6 ba 61 ef b8 67 89 d7 ea {:....;..a..g... 00c0 08 19 2e 64 57 c8 a4 d0 69 bc 01 ad 72 74 f3 7a ...dW...i...rt.z 00d0 7b 66 6f f6 88 69 ea da 13 9a 0c 6a 05 65 eb 40 {fo..i.....j.e.@ 00e0 dc 07 aa f4 dd 59 01 31 c5 5d e9 8a 44 cd 05 21 .....Y.1.]..D..! 00f0 77 f6 de df 11 9d b9 7f 8e 5b 1a dd 60 70 ea ef w........[..`p.. 0100 8f 5c bc d3 0e 0d 75 8f ac 9c 6e 49 75 69 b2 fd .\....u...nIui.. 0110 8d 49 75 62 79 48 7c c5 31 91 ce 3a 68 fd 8f 33 .IubyH|.1..:h..3 0120 7a cb 90 a0 22 14 74 98 3c 68 e0 c7 19 b9 59 7b z...".t.c.$.. 0190 07 ee ae a9 4d 3e ac dc 1e f1 f8 9e 12 2a c3 a0 ....M>.......*.. 01a0 75 36 84 99 7b 86 f1 17 93 0f 80 b6 59 89 18 d9 u6..{.......Y... 01b0 ec 39 4f 6d fa d9 75 2f 8e 6c e8 23 d2 ec a3 df .9Om..u/.l.#.... 01c0 44 67 98 e4 90 db 31 cd e6 f4 a5 4f 9e 7e af fb Dg....1....O.~.. 01d0 56 c4 bd 0b e0 5c a1 82 5b 89 9a 17 1b 4a a9 93 V....\..[....J.. 01e0 0f ea d2 55 83 4e f3 6a 1a f3 09 78 d1 d6 7f 2b ...U.N.j...x...+ 01f0 ee eb 66 61 7d ff 7c 4d 8c 12 d7 bf 28 23 94 cb ..fa}.|M....(#.. 0200 03 25 5b 94 d6 f1 14 f7 39 8b 15 34 6f e6 ef e4 .%[.....9..4o... 0210 69 da d2 e1 c1 3f da 9c ed 98 89 25 04 30 80 5a i....?.....%.0.Z 0220 2f 63 57 c4 e0 49 1d c3 85 31 33 00 4c cb 3a 43 /cW..I...13.L.:C 0230 0e f0 59 75 45 ca 33 0f 15 07 0c 23 d0 db 74 79 ..YuE.3....#..ty 0240 01 6e a0 2e 32 51 bd 5b ce 3d 57 13 1c 96 7b cf .n..2Q.[.=W...{. 0250 9e 65 8c 3e 53 20 68 ab f2 14 2a 00 21 bf 67 e3 .e.>S h...*.!.g. 0260 78 2f e5 b5 86 67 7e 72 a7 f6 8c e4 9c 7d ad ca x/...g~r.....}.. 0270 8b af 1e d3 2b 41 90 eb 55 7a 13 17 a2 1d 66 1f ....+A..Uz....f. 0280 0f 30 47 7e 4c ce 95 64 10 d4 3a 64 08 25 09 f1 .0G~L..d..:d.%.. 0290 bd 53 5a 03 0b 87 90 c3 1e 99 b5 4d bf 2c 2b 85 .SZ........M.,+. 02a0 f2 47 07 24 55 06 39 f2 be 22 3b f3 e7 d9 df 0b .G.$U.9..";..... 02b0 14 88 bd 11 60 5f 62 3b b4 30 f4 c3 20 68 9d 17 ....`_b;.0.. h.. 02c0 e9 6a d4 2f fe 59 41 d3 3e e9 09 15 98 69 96 25 .j./.YA.>....i.% 02d0 d4 5f a6 1c f3 0d 73 c0 e8 80 20 64 3c ca 2d 08 ._....s... d<.-. 02e0 02 b5 e1 c8 17 fa c6 eb 9a a3 80 b6 63 b1 d5 60 ............c..` 02f0 ca 4f 9e 70 fb 01 0c 38 db 8f e3 60 29 07 94 45 .O.p...8...`)..E 0300 28 9d 11 1e c9 2f c9 e4 c1 d4 6b ca 98 8e 12 e1 (..../....k..... 0310 b0 0c 01 0f 0f 5c c5 39 ca 55 64 cf 19 52 21 d7 .....\.9.Ud..R!. 0320 c9 3f 0a e2 f5 db 2e 61 27 bb 78 5c 89 7b a5 47 .?.....a'.x\.{.G 0330 e1 ee a4 83 4f ac f3 23 3c 2b e1 00 1c f3 63 78 ....O..#<+....cx 0340 30 f8 fa dc a9 18 20 93 25 ee 1f f6 9f 59 5a 92 0..... .%....YZ. 0350 54 b3 fd dc 07 9c e5 10 76 5e eb 8d 6c 0c 77 92 T.......v^..l.w. 0360 37 26 a5 68 c9 4e dc 16 bd 41 94 22 5b 6c 92 c0 7&.h.N...A."[l.. 0370 49 e9 a0 8e e6 bc 19 0e e8 c2 29 43 d2 42 5f 5d I.........)C.B_] 0380 28 b7 57 4b fb b5 91 94 6b be 1c 28 7c ae 6d 7f (.WK....k..(|.m. 0390 9a 07 2d 0e ac 70 0b 90 c2 e9 a9 51 ee f1 5b bf ..-..p.....Q..[. 03a0 2f 3b 2b 3d 12 ba c9 0d d0 fe df 94 28 b3 5a a9 /;+=........(.Z. 03b0 ea b1 67 74 bc 14 b1 93 63 2b ba 4d d2 7d 82 12 ..gt....c+.M.}.. 03c0 c5 fa 71 60 be e8 72 52 bf 52 05 8f 5c 51 0c fa ..q`..rR.R..\Q.. 03d0 76 9f 77 85 e7 dc v.w... Frame 36 (110 bytes on wire, 110 bytes captured) Arrival Time: Jun 9, 2003 22:12:17.425311000 Time delta from previous packet: 0.000158000 seconds Time relative to first packet: 229.134992000 seconds Frame Number: 36 Packet Length: 110 bytes Capture Length: 110 bytes Ethernet II, Src: 00:40:63:c1:11:ad, Dst: 00:20:6f:09:60:0e Destination: 00:20:6f:09:60:0e (00:20:6f:09:60:0e) Source: 00:40:63:c1:11:ad (00:40:63:c1:11:ad) Type: IP (0x0800) Internet Protocol, Src Addr: 63.202.92.133 (63.202.92.133), Dst Addr: 61.11.60.72 (61.11.60.72) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0x56d5 (22229) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x0df5 (correct) Source: 63.202.92.133 (63.202.92.133) Destination: 61.11.60.72 (61.11.60.72) Encapsulating Security Payload SPI: 0x0301e7d8 Sequence: 0x00000003 Data (68 bytes) 0000 00 20 6f 09 60 0e 00 40 63 c1 11 ad 08 00 45 00 . o.`..@c.....E. 0010 00 60 56 d5 00 00 40 32 0d f5 3f ca 5c 85 3d 0b .`V...@2..?.\.=. 0020 3c 48 03 01 e7 d8 00 00 00 03 e7 e6 7f a1 91 27 .>l@...L 0040 d3 f0 eb c3 18 c9 90 09 ee 2f 79 5a 84 68 e8 cc ........./yZ.h.. 0050 58 f0 32 76 f1 38 ac e1 e7 6c 31 f3 24 1d f7 c8 X.2v.8...l1.$... 0060 f1 97 26 e4 22 db 25 78 f8 04 6c 42 72 bf f8 b9 ..&.".%x..lBr... 0070 c5 00 .. Frame 38 (114 bytes on wire, 114 bytes captured) Arrival Time: Jun 9, 2003 22:12:17.758741000 Time delta from previous packet: 0.002173000 seconds Time relative to first packet: 229.468422000 seconds Frame Number: 38 Packet Length: 114 bytes Capture Length: 114 bytes Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad) Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e) Type: IP (0x0800) Trailer: 7458AF81 Internet Protocol, Src Addr: 61.11.60.72 (61.11.60.72), Dst Addr: 63.202.92.133 (63.202.92.133) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0x000a (10) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 109 Protocol: ESP (0x32) Header checksum: 0x37c0 (correct) Source: 61.11.60.72 (61.11.60.72) Destination: 63.202.92.133 (63.202.92.133) Encapsulating Security Payload SPI: 0x07f45193 Sequence: 0x00000005 Data (68 bytes) 0000 00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00 .@c.... o.`...E. 0010 00 60 00 0a 00 00 6d 32 37 c0 3d 0b 3c 48 3f ca .`....m27.=.. ..gW......i 0080 60 87 b1 d0 9d 53 db 6c 4e 92 ca a0 24 c7 29 a1 `....S.lN...$.). 0090 da 3d ac 0f 8c f4 13 6d 67 33 d0 1b 9c b8 92 4d .=.....mg3.....M 00a0 69 83 26 51 b7 7c 91 aa 9d 41 e7 4b ba 49 a4 89 i.&Q.|...A.K.I.. 00b0 2d 8f 2f ff 84 a4 0e 58 16 bf 79 52 41 1c c7 77 -./....X..yRA..w 00c0 c2 44 95 f2 5a 42 e1 9b 94 3d 0d 00 00 14 cd f4 .D..ZB...=...... 00d0 bd ee 47 37 f6 c9 57 31 50 ab b9 bb e5 03 00 00 ..G7..W1P....... 00e0 00 14 70 03 cb c1 09 7d be 9c 26 00 ba 69 83 bc ..p....}..&..i.. 00f0 8b 35 .5 Frame 44 (114 bytes on wire, 114 bytes captured) Arrival Time: Jun 9, 2003 22:15:47.669288000 Time delta from previous packet: 0.370429000 seconds Time relative to first packet: 439.378969000 seconds Frame Number: 44 Packet Length: 114 bytes Capture Length: 114 bytes Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad) Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e) Type: IP (0x0800) Trailer: 66B1B76C Internet Protocol, Src Addr: 61.11.60.72 (61.11.60.72), Dst Addr: 63.202.92.133 (63.202.92.133) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 46 Protocol: UDP (0x11) Header checksum: 0x36eb (correct) Source: 61.11.60.72 (61.11.60.72) Destination: 63.202.92.133 (63.202.92.133) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 76 Checksum: 0xe0b0 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x3CD0B40A21B37784 Responder cookie: 0x7348046D9B5FEB36 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 68 Encrypted payload (40 bytes) 0000 00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00 .@c.... o.`...E. 0010 00 60 00 00 40 00 2e 11 36 eb 3d 0b 3c 48 3f ca .`..@...6.=.V...... 0040 9f 24 7e a6 26 dc 65 d7 b7 7e ff 3a b4 4e 5c cc .$~.&.e..~.:.N\. 0050 f0 37 9a 65 d9 6e 34 b1 87 e3 b0 f2 01 6e 4d 30 .7.e.n4......nM0 0060 ac 51 f7 8f 16 51 5d 8c 40 5c 08 23 cb 79 aa d5 .Q...Q].@\.#.y.. 0070 1e a3 da 5f 78 2a d9 ee ac 6f ..._x*...o Frame 50 (110 bytes on wire, 110 bytes captured) Arrival Time: Jun 9, 2003 22:15:49.874435000 Time delta from previous packet: 0.000772000 seconds Time relative to first packet: 441.584116000 seconds Frame Number: 50 Packet Length: 110 bytes Capture Length: 110 bytes Ethernet II, Src: 00:40:63:c1:11:ad, Dst: 00:20:6f:09:60:0e Destination: 00:20:6f:09:60:0e (00:20:6f:09:60:0e) Source: 00:40:63:c1:11:ad (00:40:63:c1:11:ad) Type: IP (0x0800) Internet Protocol, Src Addr: 63.202.92.133 (63.202.92.133), Dst Addr: 61.11.60.72 (61.11.60.72) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0x57c3 (22467) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x0d07 (correct) Source: 63.202.92.133 (63.202.92.133) Destination: 61.11.60.72 (61.11.60.72) Encapsulating Security Payload SPI: 0x0b147d58 Sequence: 0x00000001 Data (68 bytes) 0000 00 20 6f 09 60 0e 00 40 63 c1 11 ad 08 00 45 00 . o.`..@c.....E. 0010 00 60 57 c3 00 00 40 32 0d 07 3f ca 5c 85 3d 0b .`W...@2..?.\.=. 0020 3c 48 0b 14 7d 58 00 00 00 01 28 ea 83 ea 37 78 00d0 be 09 d0 12 f4 2e 37 ca af 56 c4 14 f5 86 62 b3 ......7..V....b. 00e0 5e 82 5b 38 a9 c3 7a 4c f7 36 e0 00 68 00 70 0d ^.[8..zL.6..h.p. 00f0 bb 07 1c a8 73 a2 1a e7 8d 55 db 89 29 c1 6a 8e ....s....U..).j. 0100 e3 c1 ad 8e d3 95 47 e6 9a 01 25 b9 23 89 f8 56 ......G...%.#..V 0110 1b 36 0a f9 0d fe c7 4f 5f a3 ff db e3 ec c7 9e .6.....O_....... 0120 a2 f8 45 40 1a 8f 42 d1 7e 9e ab db d8 7a f6 0c ..E@..B.~....z.. 0130 fb a4 83 6a 54 b3 3a 1a 5d b5 cd 4b 3d 83 33 06 ...jT.:.]..K=.3. 0140 d3 53 e1 1e 6c c9 73 23 71 52 1f 93 b4 cf dc 16 .S..l.s#qR...... 0150 86 10 01 0c bc d2 0f 8b 9a 5e 71 e4 1e 42 13 3b .........^q..B.; 0160 cb 1f c5 0c 9f cf c5 41 04 dc fa 4c 0c 6e 04 b5 .......A...L.n.. 0170 f4 e0 99 27 e9 d2 13 c9 41 83 10 9f f3 8c 9e 27 ...'....A......' 0180 4b 1f bb 91 bc 7a 6f 0c 54 76 ce b2 7f 75 a7 c9 K....zo.Tv...u.. 0190 8e e6 0b f0 84 62 9a 46 f5 52 d8 5b ea 47 c1 f6 .....b.F.R.[.G.. 01a0 bf 47 c0 41 9e 32 82 3c b1 74 ea 51 04 97 33 1a .G.A.2.<.t.Q..3. 01b0 78 5e a3 a4 c9 3b 92 77 7d 95 a0 91 eb 66 17 90 x^...;.w}....f.. 01c0 4f a8 db 95 7b 30 7e ac 8b 64 a6 7c 9c 56 82 68 O...{0~..d.|.V.h 01d0 eb 1e 57 91 c6 7f 18 36 c1 ad 1f 05 23 b1 b8 2b ..W....6....#..+ 01e0 b8 c9 92 e9 fe 72 fa ed 18 d8 f9 da f3 ff ee f6 .....r.......... 01f0 2a 60 e8 9a 8b 31 f4 91 8a 00 79 5c b6 03 b7 1b *`...1....y\.... 0200 94 fb 34 ec 1c 36 9c 83 50 7f 82 73 55 55 85 03 ..4..6..P..sUU.. 0210 58 9d fa ef 36 28 18 e3 b7 5a 1f 3b cd 65 96 3e X...6(...Z.;.e.> 0220 43 cf 85 57 69 99 d3 2e 31 b4 d6 75 0c be 9e 33 C..Wi...1..u...3 0230 8f de 49 47 c2 98 ba 27 9a 1d a3 08 ec 2d f4 19 ..IG...'.....-.. 0240 06 68 88 5f f6 3d f7 37 b3 9a 7b de d7 f4 6e af .h._.=.7..{...n. 0250 14 d5 bf 0f 18 f8 8b df cc c0 73 e6 45 4f 8f 4a ..........s.EO.J 0260 67 c8 10 15 86 94 e5 53 78 ab 50 e7 0d 8d 11 41 g......Sx.P....A 0270 da 2f 68 4e 10 3b 9d 34 4c 45 3f eb 3c 41 36 f7 ./hN.;.4LE?... 02f0 1a bf 7c 0e 7c 10 97 5a 2e ac 24 15 b0 1b ad df ..|.|..Z..$..... 0300 ff 11 b4 05 3a 6b df d4 a2 d7 2f d4 df 92 58 25 ....:k..../...X% 0310 0e a3 cb e2 a1 b9 39 09 79 61 4a 34 8b c1 10 98 ......9.yaJ4.... 0320 f3 47 fe 8a 5c 34 e1 71 dd a5 5e 76 12 fd b2 2a .G..\4.q..^v...* 0330 04 0c 0e 51 50 e1 6e 4c c8 c7 be 70 e3 c3 7f ab ...QP.nL...p.... 0340 6e 02 d5 7f e2 e5 7e 42 78 04 0b 93 03 92 3d 9f n.....~Bx.....=. 0350 be bf a2 3a a9 28 28 f2 63 b8 d6 c0 ca d5 12 e1 ...:.((.c....... 0360 6e b2 93 c2 ae 3e 04 ee 3b 8d 2c f3 eb 76 ea 58 n....>..;.,..v.X 0370 a2 05 1d 99 84 d9 1c 37 7e 5c aa 98 f7 1f 6c 72 .......7~\....lr 0380 3d 85 59 90 6b 60 29 60 99 c4 7c b3 73 c3 e8 55 =.Y.k`)`..|.s..U 0390 f5 73 4e eb 45 6f f2 36 ba ca 83 48 b8 27 8e ba .sN.Eo.6...H.'.. 03a0 61 de 2e 4d af e7 a4 24 74 df 8f 64 d1 62 cc c7 a..M...$t..d.b.. 03b0 36 f1 b5 90 91 3d 4f de 2e 4c c8 45 38 57 1e a7 6....=O..L.E8W.. 03c0 07 62 0f 0b ad 22 3b 0c e0 25 92 3e d8 ec 24 3a .b...";..%.>..$: 03d0 2d 51 10 08 9c 2c -Q..., Frame 54 (110 bytes on wire, 110 bytes captured) Arrival Time: Jun 9, 2003 22:15:50.185797000 Time delta from previous packet: 0.000152000 seconds Time relative to first packet: 441.895478000 seconds Frame Number: 54 Packet Length: 110 bytes Capture Length: 110 bytes Ethernet II, Src: 00:40:63:c1:11:ad, Dst: 00:20:6f:09:60:0e Destination: 00:20:6f:09:60:0e (00:20:6f:09:60:0e) Source: 00:40:63:c1:11:ad (00:40:63:c1:11:ad) Type: IP (0x0800) Internet Protocol, Src Addr: 63.202.92.133 (63.202.92.133), Dst Addr: 61.11.60.72 (61.11.60.72) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0x57c5 (22469) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x0d05 (correct) Source: 63.202.92.133 (63.202.92.133) Destination: 61.11.60.72 (61.11.60.72) Encapsulating Security Payload SPI: 0x0b147d58 Sequence: 0x00000003 Data (68 bytes) 0000 00 20 6f 09 60 0e 00 40 63 c1 11 ad 08 00 45 00 . o.`..@c.....E. 0010 00 60 57 c5 00 00 40 32 0d 05 3f ca 5c 85 3d 0b .`W...@2..?.\.=. 0020 3c 48 0b 14 7d 58 00 00 00 03 af 0d 1d 2e f6 5a