1 1970-01-01 00:00:00.000000 ARP, Request who-has 192.1.2.23 tell 192.1.2.254, length 28 2 1970-01-01 00:00:00.000000 ARP, Reply 192.1.2.23 is-at 10:00:00:64:64:23, length 28 3 1970-01-01 00:00:00.000000 IP 192.1.2.254.500 > 192.1.2.23.500: isakmp: phase 1 I ident 4 1970-01-01 00:00:00.000000 IP 192.1.2.23.500 > 192.1.2.254.500: isakmp: phase 1 R ident 5 1970-01-01 00:00:00.000000 IP 192.1.2.254.500 > 192.1.2.23.500: isakmp: phase 1 I ident 6 1970-01-01 00:00:00.000000 IP 192.1.2.23.500 > 192.1.2.254.500: isakmp: phase 1 R ident 7 1970-01-01 00:00:00.000000 IP 192.1.2.254.4500 > 192.1.2.23.4500: NONESP-encap: isakmp: phase 1 I ident[E] 8 1970-01-01 00:00:00.000000 IP 192.1.2.23.4500 > 192.1.2.254.4500: NONESP-encap: isakmp: phase 1 R ident[E] 9 1970-01-01 00:00:00.000000 IP 192.1.2.254.4500 > 192.1.2.23.4500: NONESP-encap: isakmp: phase 2/others I oakley-quick[E] 10 1970-01-01 00:00:00.000000 IP 192.1.2.23.4500 > 192.1.2.254.4500: NONESP-encap: isakmp: phase 2/others R oakley-quick[E] 11 1970-01-01 00:00:00.000000 IP 192.1.2.254.4500 > 192.1.2.23.4500: NONESP-encap: isakmp: phase 2/others I oakley-quick[E] 12 1970-01-01 00:00:00.000000 IP 192.1.2.254.4500 > 192.1.2.23.4500: UDP-encap: ESP(spi=0xf4dc0ae5,seq=0x1), length 132 13 1970-01-01 00:00:00.000000 ARP, Request who-has 192.1.2.254 tell 192.1.2.23, length 28 14 1970-01-01 00:00:00.000000 ARP, Reply 192.1.2.254 is-at 10:00:00:de:ad:ba, length 28 15 1970-01-01 00:00:00.000000 IP 192.1.2.23.4500 > 192.1.2.254.4500: NONESP-encap: isakmp: phase 2/others R oakley-quick[E] 16 1970-01-01 00:00:00.000000 IP 192.1.2.254.4500 > 192.1.2.23.4500: NONESP-encap: isakmp: phase 2/others I oakley-quick[E] 17 1970-01-01 00:00:00.000000 IP 192.1.2.254.4500 > 192.1.2.23.4500: UDP-encap: ESP(spi=0xf4dc0ae5,seq=0x2), length 132 18 1970-01-01 00:00:00.000000 IP 192.1.2.254.4500 > 192.1.2.23.4500: isakmp-nat-keep-alive 19 1970-01-01 00:00:00.000000 IP 192.1.2.254.4500 > 192.1.2.23.4500: UDP-encap: ESP(spi=0xf4dc0ae5,seq=0x3), length 132 20 1970-01-01 00:00:00.000000 IP 192.1.2.23.4500 > 192.1.2.254.4500: NONESP-encap: isakmp: phase 2/others R oakley-quick[E] 21 1970-01-01 00:00:00.000000 IP 192.1.2.254.4500 > 192.1.2.23.4500: NONESP-encap: isakmp: phase 2/others I oakley-quick[E] 22 1970-01-01 00:00:00.000000 IP 192.1.2.254.4500 > 192.1.2.23.4500: UDP-encap: ESP(spi=0xf4dc0ae5,seq=0x4), length 132 23 1970-01-01 00:00:00.000000 IP 192.1.2.254.4500 > 192.1.2.23.4500: isakmp-nat-keep-alive 24 1970-01-01 00:00:00.000000 IP 192.1.2.254.4500 > 192.1.2.23.4500: UDP-encap: ESP(spi=0xf4dc0ae5,seq=0x5), length 132 25 1970-01-01 00:00:00.000000 IP 192.1.2.254.4500 > 192.1.2.23.4500: UDP-encap: ESP(spi=0xf4dc0ae5,seq=0x6), length 132 26 1970-01-01 00:00:00.000000 ARP, Request who-has 192.1.2.23 tell 192.1.2.254, length 28 27 1970-01-01 00:00:00.000000 ARP, Reply 192.1.2.23 is-at 10:00:00:64:64:23, length 28 28 1970-01-01 00:00:00.000000 IP 192.1.2.254.4500 > 192.1.2.23.4500: isakmp-nat-keep-alive 29 1970-01-01 00:00:00.000000 IP 192.1.2.254.4500 > 192.1.2.23.4500: UDP-encap: ESP(spi=0xf4dc0ae5,seq=0x7), length 132 30 1970-01-01 00:00:00.000000 IP 192.1.2.23.4500 > 192.1.2.254.4500: NONESP-encap: isakmp: phase 2/others R oakley-quick[E] 31 1970-01-01 00:00:00.000000 IP 192.1.2.254.4500 > 192.1.2.23.4500: UDP-encap: ESP(spi=0xf4dc0ae5,seq=0x8), length 132 32 1970-01-01 00:00:00.000000 ARP, Request who-has 192.1.2.254 tell 192.1.2.23, length 28 33 1970-01-01 00:00:00.000000 ARP, Reply 192.1.2.254 is-at 10:00:00:de:ad:ba, length 28 34 1970-01-01 00:00:00.000000 IP 192.1.2.254.4500 > 192.1.2.23.4500: isakmp-nat-keep-alive 35 1970-01-01 00:00:00.000000 IP 192.1.2.23.4500 > 192.1.2.254.4500: NONESP-encap: isakmp: phase 2/others R inf[E]