1ARP, Request who-has 192.1.2.23 tell 192.1.2.254, length 28
2ARP, Reply 192.1.2.23 is-at 10:00:00:64:64:23, length 28
3IP 192.1.2.254.500 > 192.1.2.23.500: isakmp: phase 1 I ident
4IP 192.1.2.23.500 > 192.1.2.254.500: isakmp: phase 1 R ident
5IP 192.1.2.254.500 > 192.1.2.23.500: isakmp: phase 1 I ident
6IP 192.1.2.23.500 > 192.1.2.254.500: isakmp: phase 1 R ident
7IP 192.1.2.254.4500 > 192.1.2.23.4500: NONESP-encap: isakmp: phase 1 I ident[E]
8IP 192.1.2.23.4500 > 192.1.2.254.4500: NONESP-encap: isakmp: phase 1 R ident[E]
9IP 192.1.2.254.4500 > 192.1.2.23.4500: NONESP-encap: isakmp: phase 2/others I oakley-quick[E]
10IP 192.1.2.23.4500 > 192.1.2.254.4500: NONESP-encap: isakmp: phase 2/others R oakley-quick[E]
11IP 192.1.2.254.4500 > 192.1.2.23.4500: NONESP-encap: isakmp: phase 2/others I oakley-quick[E]
12IP 192.1.2.254.4500 > 192.1.2.23.4500: UDP-encap: ESP(spi=0xf4dc0ae5,seq=0x1), length 132
13ARP, Request who-has 192.1.2.254 tell 192.1.2.23, length 28
14ARP, Reply 192.1.2.254 is-at 10:00:00:de:ad:ba, length 28
15IP 192.1.2.23.4500 > 192.1.2.254.4500: NONESP-encap: isakmp: phase 2/others R oakley-quick[E]
16IP 192.1.2.254.4500 > 192.1.2.23.4500: NONESP-encap: isakmp: phase 2/others I oakley-quick[E]
17IP 192.1.2.254.4500 > 192.1.2.23.4500: UDP-encap: ESP(spi=0xf4dc0ae5,seq=0x2), length 132
18IP 192.1.2.254.4500 > 192.1.2.23.4500: isakmp-nat-keep-alive
19IP 192.1.2.254.4500 > 192.1.2.23.4500: UDP-encap: ESP(spi=0xf4dc0ae5,seq=0x3), length 132
20IP 192.1.2.23.4500 > 192.1.2.254.4500: NONESP-encap: isakmp: phase 2/others R oakley-quick[E]
21IP 192.1.2.254.4500 > 192.1.2.23.4500: NONESP-encap: isakmp: phase 2/others I oakley-quick[E]
22IP 192.1.2.254.4500 > 192.1.2.23.4500: UDP-encap: ESP(spi=0xf4dc0ae5,seq=0x4), length 132
23IP 192.1.2.254.4500 > 192.1.2.23.4500: isakmp-nat-keep-alive
24IP 192.1.2.254.4500 > 192.1.2.23.4500: UDP-encap: ESP(spi=0xf4dc0ae5,seq=0x5), length 132
25IP 192.1.2.254.4500 > 192.1.2.23.4500: UDP-encap: ESP(spi=0xf4dc0ae5,seq=0x6), length 132
26ARP, Request who-has 192.1.2.23 tell 192.1.2.254, length 28
27ARP, Reply 192.1.2.23 is-at 10:00:00:64:64:23, length 28
28IP 192.1.2.254.4500 > 192.1.2.23.4500: isakmp-nat-keep-alive
29IP 192.1.2.254.4500 > 192.1.2.23.4500: UDP-encap: ESP(spi=0xf4dc0ae5,seq=0x7), length 132
30IP 192.1.2.23.4500 > 192.1.2.254.4500: NONESP-encap: isakmp: phase 2/others R oakley-quick[E]
31IP 192.1.2.254.4500 > 192.1.2.23.4500: UDP-encap: ESP(spi=0xf4dc0ae5,seq=0x8), length 132
32ARP, Request who-has 192.1.2.254 tell 192.1.2.23, length 28
33ARP, Reply 192.1.2.254 is-at 10:00:00:de:ad:ba, length 28
34IP 192.1.2.254.4500 > 192.1.2.23.4500: isakmp-nat-keep-alive
35IP 192.1.2.23.4500 > 192.1.2.254.4500: NONESP-encap: isakmp: phase 2/others R inf[E]
36