Frame 1 (146 bytes on wire, 146 bytes captured) Arrival Time: Jan 20, 2006 09:38:18.560866000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 146 bytes Capture Length: 146 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:7a:d4:aa, Dst: 00:0c:29:9e:5c:5f Destination: 00:0c:29:9e:5c:5f (00:0c:29:9e:5c:5f) Source: 00:0c:29:7a:d4:aa (00:0c:29:7a:d4:aa) Type: IP (0x0800) Internet Protocol, Src Addr: 10.110.110.129 (10.110.110.129), Dst Addr: 10.110.110.128 (10.110.110.128) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 132 Identification: 0x0000 (0) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x488c (correct) Source: 10.110.110.129 (10.110.110.129) Destination: 10.110.110.128 (10.110.110.128) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 112 Checksum: 0x5f0c (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x989A721751100D89 Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 104 Security Association payload Next payload: Vendor ID (13) Length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 44 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 36 Transform number: 1 Transform ID: KEY_IKE (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (86400) Encryption-Algorithm (1): 3DES-CBC (5) Authentication-Method (3): PSK (1) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: RFC 3706 Detecting Dead IKE Peers (DPD) Frame 2 (126 bytes on wire, 126 bytes captured) Arrival Time: Jan 20, 2006 09:38:18.631954000 Time delta from previous packet: 0.071088000 seconds Time since reference or first frame: 0.071088000 seconds Frame Number: 2 Packet Length: 126 bytes Capture Length: 126 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:9e:5c:5f, Dst: 00:0c:29:7a:d4:aa Destination: 00:0c:29:7a:d4:aa (00:0c:29:7a:d4:aa) Source: 00:0c:29:9e:5c:5f (00:0c:29:9e:5c:5f) Type: IP (0x0800) Internet Protocol, Src Addr: 10.110.110.128 (10.110.110.128), Dst Addr: 10.110.110.129 (10.110.110.129) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x429e (17054) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0x0602 (correct) Source: 10.110.110.128 (10.110.110.128) Destination: 10.110.110.129 (10.110.110.129) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 92 Checksum: 0x3d18 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x989A721751100D89 Responder cookie: 0x5A65DCA119383B29 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 84 Security Association payload Next payload: NONE (0) Length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 44 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 36 Transform number: 1 Transform ID: KEY_IKE (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (86400) Encryption-Algorithm (1): 3DES-CBC (5) Authentication-Method (3): PSK (1) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Frame 3 (222 bytes on wire, 222 bytes captured) Arrival Time: Jan 20, 2006 09:38:19.250715000 Time delta from previous packet: 0.618761000 seconds Time since reference or first frame: 0.689849000 seconds Frame Number: 3 Packet Length: 222 bytes Capture Length: 222 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:7a:d4:aa, Dst: 00:0c:29:9e:5c:5f Destination: 00:0c:29:9e:5c:5f (00:0c:29:9e:5c:5f) Source: 00:0c:29:7a:d4:aa (00:0c:29:7a:d4:aa) Type: IP (0x0800) Internet Protocol, Src Addr: 10.110.110.129 (10.110.110.129), Dst Addr: 10.110.110.128 (10.110.110.128) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 208 Identification: 0x0001 (1) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x483f (correct) Source: 10.110.110.129 (10.110.110.129) Destination: 10.110.110.128 (10.110.110.128) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 188 Checksum: 0xd248 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x989A721751100D89 Responder cookie: 0x5A65DCA119383B29 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 180 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 20 Nonce Data Frame 4 (226 bytes on wire, 226 bytes captured) Arrival Time: Jan 20, 2006 09:38:19.254147000 Time delta from previous packet: 0.003432000 seconds Time since reference or first frame: 0.693281000 seconds Frame Number: 4 Packet Length: 226 bytes Capture Length: 226 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:9e:5c:5f, Dst: 00:0c:29:7a:d4:aa Destination: 00:0c:29:7a:d4:aa (00:0c:29:7a:d4:aa) Source: 00:0c:29:9e:5c:5f (00:0c:29:9e:5c:5f) Type: IP (0x0800) Internet Protocol, Src Addr: 10.110.110.128 (10.110.110.128), Dst Addr: 10.110.110.129 (10.110.110.129) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 212 Identification: 0x429f (17055) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0x059d (correct) Source: 10.110.110.128 (10.110.110.128) Destination: 10.110.110.129 (10.110.110.129) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 192 Checksum: 0xdd1f (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x989A721751100D89 Responder cookie: 0x5A65DCA119383B29 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 184 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 24 Nonce Data