root@vc2_TPC1:~# tcpdump -i eth2
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on eth2, link-type EN10MB (Ethernet), capture size 65535 bytes
15:03:40.404261 IP 169.254.1.70.isakmp > 169.254.0.70.isakmp: isakmp: phase 1 I ident
15:03:40.415102 ARP, Request who-has 169.254.1.70 tell 169.254.1.71, length 46
15:03:40.415117 ARP, Reply 169.254.1.70 is-at 00:1f:29:69:70:ae (oui Unknown), length 28
15:03:40.415314 IP 169.254.0.70.isakmp > 169.254.1.70.isakmp: isakmp: phase 1 R ident
15:03:40.572107 IP 169.254.1.70.isakmp > 169.254.0.70.isakmp: isakmp: phase 1 I ident
15:03:40.838817 IP 169.254.0.70.isakmp > 169.254.1.70.isakmp: isakmp: phase 1 R ident
15:03:40.998384 IP 169.254.1.70.isakmp > 169.254.0.70.isakmp: isakmp: phase 2/others I inf[E]
15:03:45.582593 ARP, Request who-has 169.254.1.71 tell 169.254.1.70, length 28
15:03:45.582803 ARP, Reply 169.254.1.71 is-at 00:40:43:31:33:17 (oui Unknown), length 46
15:03:51.007008 IP 169.254.0.70.isakmp > 169.254.1.70.isakmp: isakmp: phase 1 R ident
15:03:51.154757 IP 169.254.1.70.isakmp > 169.254.0.70.isakmp: isakmp: phase 2/others I inf[E]
15:03:51.154815 IP 169.254.1.70.isakmp > 169.254.0.70.isakmp: isakmp: phase 1 I ident





********************* after "ipsec up kay2"*********************









15:04:11.174978 IP 169.254.1.70.isakmp > 169.254.0.70.isakmp: isakmp: phase 1 I ident
15:04:11.175328 IP 169.254.0.70.isakmp > 169.254.1.70.isakmp: isakmp: phase 1 R ident
15:04:11.336114 IP 169.254.1.70.isakmp > 169.254.0.70.isakmp: isakmp: phase 2/others I inf[E]
15:04:12.954362 IP 169.254.0.70.isakmp > 169.254.1.70.isakmp: isakmp: phase 1 I ident
15:04:12.954755 IP 169.254.1.70.isakmp > 169.254.0.70.isakmp: isakmp: phase 1 R ident
15:04:13.114551 IP 169.254.0.70.isakmp > 169.254.1.70.isakmp: isakmp: phase 1 I ident
15:04:13.378061 IP 169.254.1.70.isakmp > 169.254.0.70.isakmp: isakmp: phase 1 R ident
15:04:13.533450 IP 169.254.0.70.isakmp > 169.254.1.70.isakmp: isakmp: phase 2/others I inf[E]
15:04:23.543666 IP 169.254.1.70.isakmp > 169.254.0.70.isakmp: isakmp: phase 1 R ident
15:04:23.543689 IP 169.254.0.70.isakmp > 169.254.1.70.isakmp: isakmp: phase 1 I ident
15:04:23.699068 IP 169.254.0.70.isakmp > 169.254.1.70.isakmp: isakmp: phase 2/others I inf[E]
15:04:28.558594 ARP, Request who-has 169.254.1.71 tell 169.254.1.70, length 28
15:04:28.558795 ARP, Reply 169.254.1.71 is-at 00:40:43:31:33:17 (oui Unknown), length 46
15:04:43.400424 IP 169.254.1.70.isakmp > 169.254.0.70.isakmp: isakmp: phase 1 R ident
15:04:43.557881 IP 169.254.0.70.isakmp > 169.254.1.70.isakmp: isakmp: phase 2/others I inf[E]
15:04:43.558161 IP 169.254.0.70.isakmp > 169.254.1.70.isakmp: isakmp: phase 1 I ident
15:04:49.106149 ARP, Request who-has 169.254.1.70 tell 169.254.1.71, length 46
15:04:49.106159 ARP, Reply 169.254.1.70 is-at 00:1f:29:69:70:ae (oui Unknown), length 28
15:04:51.566481 IP 169.254.1.70.isakmp > 169.254.0.70.isakmp: isakmp: phase 1 I ident
15:04:51.567218 IP 169.254.0.70.isakmp > 169.254.1.70.isakmp: isakmp: phase 1 R ident
15:04:51.724018 IP 169.254.1.70.isakmp > 169.254.0.70.isakmp: isakmp: phase 1 I ident
15:04:51.988872 IP 169.254.0.70.isakmp > 169.254.1.70.isakmp: isakmp: phase 1 R ident
15:04:52.094175 IP 169.254.1.70.isakmp > 169.254.0.70.isakmp: isakmp: phase 2/others I inf[E]
15:05:01.103289 IP 169.254.1.70.isakmp > 169.254.0.70.isakmp: isakmp: phase 1 I ident
15:05:01.103555 IP 169.254.0.70.isakmp > 169.254.1.70.isakmp: isakmp: phase 1 R ident
15:05:01.261701 IP 169.254.1.70.isakmp > 169.254.0.70.isakmp: isakmp: phase 2/others I inf[E]
15:05:21.281844 IP 169.254.1.70.isakmp > 169.254.0.70.isakmp: isakmp: phase 1 I ident
15:05:21.282153 IP 169.254.0.70.isakmp > 169.254.1.70.isakmp: isakmp: phase 1 R ident
15:05:21.439843 IP 169.254.1.70.isakmp > 169.254.0.70.isakmp: isakmp: phase 2/others I inf[E]
15:05:23.442469 IP 169.254.0.70.isakmp > 169.254.1.70.isakmp: isakmp: phase 1 I ident
15:05:23.442761 IP 169.254.1.70.isakmp > 169.254.0.70.isakmp: isakmp: phase 1 R ident
15:05:23.602462 IP 169.254.0.70.isakmp > 169.254.1.70.isakmp: isakmp: phase 1 I ident
15:05:23.862794 IP 169.254.1.70.isakmp > 169.254.0.70.isakmp: isakmp: phase 1 R ident
15:05:23.966873 IP 169.254.0.70.isakmp > 169.254.1.70.isakmp: isakmp: phase 2/others I inf[E]
15:05:26.286596 ARP, Request who-has 169.254.1.71 tell 169.254.1.70, length 28
15:05:26.286817 ARP, Reply 169.254.1.71 is-at 00:40:43:31:33:17 (oui Unknown), length 46
15:05:33.976993 IP 169.254.0.70.isakmp > 169.254.1.70.isakmp: isakmp: phase 1 I ident
15:05:33.977129 IP 169.254.1.70.isakmp > 169.254.0.70.isakmp: isakmp: phase 1 R ident
15:05:34.133177 IP 169.254.0.70.isakmp > 169.254.1.70.isakmp: isakmp: phase 2/others I inf[E]
15:05:39.121195 ARP, Request who-has 169.254.1.70 tell 169.254.1.71, length 46
15:05:39.121210 ARP, Reply 169.254.1.70 is-at 00:1f:29:69:70:ae (oui Unknown), length 28
15:05:53.135583 IP 169.254.0.70.isakmp > 169.254.1.70.isakmp: isakmp: phase 1 I ident
15:05:53.135762 IP 169.254.1.70.isakmp > 169.254.0.70.isakmp: isakmp: phase 1 R ident
15:05:53.291837 IP 169.254.0.70.isakmp > 169.254.1.70.isakmp: isakmp: phase 2/others I inf[E]
15:06:01.293501 IP 169.254.1.70.isakmp > 169.254.0.70.isakmp: isakmp: phase 1 I ident
15:06:01.293944 IP 169.254.0.70.isakmp > 169.254.1.70.isakmp: isakmp: phase 1 R ident
15:06:01.450912 IP 169.254.1.70.isakmp > 169.254.0.70.isakmp: isakmp: phase 1 I ident
15:06:01.739161 IP 169.254.0.70.isakmp > 169.254.1.70.isakmp: isakmp: phase 1 R ident
15:06:01.896811 IP 169.254.1.70.isakmp > 169.254.0.70.isakmp: isakmp: phase 2/others I inf[E]
15:06:11.906928 IP 169.254.1.70.isakmp > 169.254.0.70.isakmp: isakmp: phase 1 I ident
15:06:11.907268 IP 169.254.0.70.isakmp > 169.254.1.70.isakmp: isakmp: phase 1 R ident
15:06:12.065117 IP 169.254.1.70.isakmp > 169.254.0.70.isakmp: isakmp: phase 2/others I inf[E]
15:06:16.910596 ARP, Request who-has 169.254.1.71 tell 169.254.1.70, length 28
15:06:16.910793 ARP, Reply 169.254.1.71 is-at 00:40:43:31:33:17 (oui Unknown), length 46
15:06:31.084225 IP 169.254.1.70.isakmp > 169.254.0.70.isakmp: isakmp: phase 1 I ident
15:06:31.084590 IP 169.254.0.70.isakmp > 169.254.1.70.isakmp: isakmp: phase 1 R ident
15:06:31.242623 IP 169.254.1.70.isakmp > 169.254.0.70.isakmp: isakmp: phase 2/others I inf[E]
15:06:33.245064 IP 169.254.0.70.isakmp > 169.254.1.70.isakmp: isakmp: phase 1 I ident
15:06:33.245529 IP 169.254.1.70.isakmp > 169.254.0.70.isakmp: isakmp: phase 1 R ident
15:06:33.405541 IP 169.254.0.70.isakmp > 169.254.1.70.isakmp: isakmp: phase 1 I ident
15:06:33.686949 IP 169.254.1.70.isakmp > 169.254.0.70.isakmp: isakmp: phase 1 R ident
15:06:33.791475 IP 169.254.0.70.isakmp > 169.254.1.70.isakmp: isakmp: phase 2/others I inf[E]
15:06:37.136687 ARP, Request who-has 169.254.1.70 tell 169.254.1.71, length 46
15:06:37.136696 ARP, Reply 169.254.1.70 is-at 00:1f:29:69:70:ae (oui Unknown), length 28
15:06:43.801525 IP 169.254.1.70.isakmp > 169.254.0.70.isakmp: isakmp: phase 1 R ident
15:06:43.801701 IP 169.254.0.70.isakmp > 169.254.1.70.isakmp: isakmp: phase 1 I ident
15:06:43.951984 IP 169.254.0.70.isakmp > 169.254.1.70.isakmp: isakmp: phase 2/others I inf[E]
15:07:03.972061 IP 169.254.1.70.isakmp > 169.254.0.70.isakmp: isakmp: phase 1 R ident
15:07:03.972258 IP 169.254.0.70.isakmp > 169.254.1.70.isakmp: isakmp: phase 1 I ident
15:07:04.128382 IP 169.254.0.70.isakmp > 169.254.1.70.isakmp: isakmp: phase 2/others I inf[E]
15:07:08.974595 ARP, Request who-has 169.254.1.71 tell 169.254.1.70, length 28
15:07:08.974803 ARP, Reply 169.254.1.71 is-at 00:40:43:31:33:17 (oui Unknown), length 46
15:13:56.341292 ARP, Request who-has 169.254.1.70 tell 169.254.1.71, length 46
15:13:56.341306 ARP, Reply 169.254.1.70 is-at 00:1f:29:69:70:ae (oui Unknown), length 28
15:13:56.341491 IP 169.254.0.70 > 169.254.1.70: ICMP echo request, id 7663, seq 1, length 64
15:13:56.341524 IP 169.254.1.70 > 169.254.0.70: ICMP echo reply, id 7663, seq 1, length 64
15:13:57.337709 IP 169.254.0.70 > 169.254.1.70: ICMP echo request, id 7663, seq 2, length 64
15:13:57.337720 IP 169.254.1.70 > 169.254.0.70: ICMP echo reply, id 7663, seq 2, length 64
15:14:01.343093 ARP, Request who-has 169.254.1.71 tell 169.254.1.70, length 28
15:14:01.343315 ARP, Reply 169.254.1.71 is-at 00:40:43:31:33:17 (oui Unknown), length 46
15:14:27.756101 IP 169.254.0.70 > 169.254.1.70: ICMP echo request, id 7664, seq 1, length 64
15:14:27.756122 IP 169.254.1.70 > 169.254.0.70: ICMP echo reply, id 7664, seq 1, length 64
15:14:28.755087 IP 169.254.0.70 > 169.254.1.70: ICMP echo request, id 7664, seq 2, length 64
15:14:28.755099 IP 169.254.1.70 > 169.254.0.70: ICMP echo reply, id 7664, seq 2, length 64
15:14:32.758577 ARP, Request who-has 169.254.1.70 tell 169.254.1.71, length 46
15:14:32.758585 ARP, Reply 169.254.1.70 is-at 00:1f:29:69:70:ae (oui Unknown), length 28
15:15:40.000823 IP 169.254.0.70 > 169.254.1.70: ICMP echo request, id 7689, seq 1, length 64
15:15:40.000859 IP 169.254.1.70 > 169.254.0.70: ICMP echo reply, id 7689, seq 1, length 64
15:15:41.000267 IP 169.254.0.70 > 169.254.1.70: ICMP echo request, id 7689, seq 2, length 64
15:15:41.000285 IP 169.254.1.70 > 169.254.0.70: ICMP echo reply, id 7689, seq 2, length 64
15:15:44.999877 ARP, Request who-has 169.254.1.70 tell 169.254.1.71, length 46
15:15:44.999894 ARP, Reply 169.254.1.70 is-at 00:1f:29:69:70:ae (oui Unknown), length 28