1 ARP, Request who-has 192.1.2.23 tell 192.1.2.254, length 28 2 ARP, Reply 192.1.2.23 is-at 10:00:00:64:64:23, length 28 3 IP 192.1.2.254.500 > 192.1.2.23.500: isakmp: phase 1 I ident 4 IP 192.1.2.23.500 > 192.1.2.254.500: isakmp: phase 1 R ident 5 IP 192.1.2.254.500 > 192.1.2.23.500: isakmp: phase 1 I ident 6 IP 192.1.2.23.500 > 192.1.2.254.500: isakmp: phase 1 R ident 7 IP 192.1.2.254.4500 > 192.1.2.23.4500: NONESP-encap: isakmp: phase 1 I ident[E] 8 IP 192.1.2.23.4500 > 192.1.2.254.4500: NONESP-encap: isakmp: phase 1 R ident[E] 9 IP 192.1.2.254.4500 > 192.1.2.23.4500: NONESP-encap: isakmp: phase 2/others I oakley-quick[E] 10 IP 192.1.2.23.4500 > 192.1.2.254.4500: NONESP-encap: isakmp: phase 2/others R oakley-quick[E] 11 IP 192.1.2.254.4500 > 192.1.2.23.4500: NONESP-encap: isakmp: phase 2/others I oakley-quick[E] 12 IP 192.1.2.254.4500 > 192.1.2.23.4500: UDP-encap: ESP(spi=0xf4dc0ae5,seq=0x1), length 132 13 ARP, Request who-has 192.1.2.254 tell 192.1.2.23, length 28 14 ARP, Reply 192.1.2.254 is-at 10:00:00:de:ad:ba, length 28 15 IP 192.1.2.23.4500 > 192.1.2.254.4500: NONESP-encap: isakmp: phase 2/others R oakley-quick[E] 16 IP 192.1.2.254.4500 > 192.1.2.23.4500: NONESP-encap: isakmp: phase 2/others I oakley-quick[E] 17 IP 192.1.2.254.4500 > 192.1.2.23.4500: UDP-encap: ESP(spi=0xf4dc0ae5,seq=0x2), length 132 18 IP 192.1.2.254.4500 > 192.1.2.23.4500: isakmp-nat-keep-alive 19 IP 192.1.2.254.4500 > 192.1.2.23.4500: UDP-encap: ESP(spi=0xf4dc0ae5,seq=0x3), length 132 20 IP 192.1.2.23.4500 > 192.1.2.254.4500: NONESP-encap: isakmp: phase 2/others R oakley-quick[E] 21 IP 192.1.2.254.4500 > 192.1.2.23.4500: NONESP-encap: isakmp: phase 2/others I oakley-quick[E] 22 IP 192.1.2.254.4500 > 192.1.2.23.4500: UDP-encap: ESP(spi=0xf4dc0ae5,seq=0x4), length 132 23 IP 192.1.2.254.4500 > 192.1.2.23.4500: isakmp-nat-keep-alive 24 IP 192.1.2.254.4500 > 192.1.2.23.4500: UDP-encap: ESP(spi=0xf4dc0ae5,seq=0x5), length 132 25 IP 192.1.2.254.4500 > 192.1.2.23.4500: UDP-encap: ESP(spi=0xf4dc0ae5,seq=0x6), length 132 26 ARP, Request who-has 192.1.2.23 tell 192.1.2.254, length 28 27 ARP, Reply 192.1.2.23 is-at 10:00:00:64:64:23, length 28 28 IP 192.1.2.254.4500 > 192.1.2.23.4500: isakmp-nat-keep-alive 29 IP 192.1.2.254.4500 > 192.1.2.23.4500: UDP-encap: ESP(spi=0xf4dc0ae5,seq=0x7), length 132 30 IP 192.1.2.23.4500 > 192.1.2.254.4500: NONESP-encap: isakmp: phase 2/others R oakley-quick[E] 31 IP 192.1.2.254.4500 > 192.1.2.23.4500: UDP-encap: ESP(spi=0xf4dc0ae5,seq=0x8), length 132 32 ARP, Request who-has 192.1.2.254 tell 192.1.2.23, length 28 33 ARP, Reply 192.1.2.254 is-at 10:00:00:de:ad:ba, length 28 34 IP 192.1.2.254.4500 > 192.1.2.23.4500: isakmp-nat-keep-alive 35 IP 192.1.2.23.4500 > 192.1.2.254.4500: NONESP-encap: isakmp: phase 2/others R inf[E] 36
