root@vc1_TPC1:~# tcpdump -i eth1
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on eth1, link-type EN10MB (Ethernet), capture size 65535 bytes
15:03:40.408025 ARP, Request who-has 169.254.0.70 tell 169.254.0.71, length 46
15:03:40.408051 ARP, Reply 169.254.0.70 is-at 00:1f:29:61:21:ad (oui Unknown), length 28
15:03:40.408221 IP 169.254.1.70.isakmp > 169.254.0.70.isakmp: isakmp: phase 1 I ident
15:03:40.408621 IP 169.254.0.70.isakmp > 169.254.1.70.isakmp: isakmp: phase 1 R ident
15:03:40.572171 IP 169.254.1.70.isakmp > 169.254.0.70.isakmp: isakmp: phase 1 I ident
15:03:40.838755 IP 169.254.0.70.isakmp > 169.254.1.70.isakmp: isakmp: phase 1 R ident
15:03:40.998420 IP 169.254.1.70.isakmp > 169.254.0.70.isakmp: isakmp: phase 2/others I inf[E]
15:03:45.422593 ARP, Request who-has 169.254.0.71 tell 169.254.0.70, length 28
15:03:45.422819 ARP, Reply 169.254.0.71 is-at 02:00:00:00:18:03 (oui Unknown), length 46
15:03:51.006942 IP 169.254.0.70.isakmp > 169.254.1.70.isakmp: isakmp: phase 1 R ident
15:03:51.154824 IP 169.254.1.70.isakmp > 169.254.0.70.isakmp: isakmp: phase 2/others I inf[E]
15:03:51.154873 IP 169.254.1.70.isakmp > 169.254.0.70.isakmp: isakmp: phase 1 I ident




*********************after "ipsec up kay"***************************







15:04:11.175027 IP 169.254.1.70.isakmp > 169.254.0.70.isakmp: isakmp: phase 1 I ident
15:04:11.175265 IP 169.254.0.70.isakmp > 169.254.1.70.isakmp: isakmp: phase 1 R ident
15:04:11.336183 IP 169.254.1.70.isakmp > 169.254.0.70.isakmp: isakmp: phase 2/others I inf[E]
15:04:12.954302 IP 169.254.0.70.isakmp > 169.254.1.70.isakmp: isakmp: phase 1 I ident
15:04:12.954812 IP 169.254.1.70.isakmp > 169.254.0.70.isakmp: isakmp: phase 1 R ident
15:04:13.114481 IP 169.254.0.70.isakmp > 169.254.1.70.isakmp: isakmp: phase 1 I ident
15:04:13.378114 IP 169.254.1.70.isakmp > 169.254.0.70.isakmp: isakmp: phase 1 R ident
15:04:13.533401 IP 169.254.0.70.isakmp > 169.254.1.70.isakmp: isakmp: phase 2/others I inf[E]
15:04:16.191093 ARP, Request who-has 169.254.0.71 tell 169.254.0.70, length 28
15:04:16.191276 ARP, Reply 169.254.0.71 is-at 02:00:00:00:18:03 (oui Unknown), length 46
15:04:23.543627 IP 169.254.0.70.isakmp > 169.254.1.70.isakmp: isakmp: phase 1 I ident
15:04:23.543753 IP 169.254.1.70.isakmp > 169.254.0.70.isakmp: isakmp: phase 1 R ident
15:04:23.699019 IP 169.254.0.70.isakmp > 169.254.1.70.isakmp: isakmp: phase 2/others I inf[E]
15:04:29.096932 ARP, Request who-has 169.254.0.70 tell 169.254.0.71, length 46
15:04:29.096945 ARP, Reply 169.254.0.70 is-at 00:1f:29:61:21:ad (oui Unknown), length 28
15:04:43.400507 IP 169.254.1.70.isakmp > 169.254.0.70.isakmp: isakmp: phase 1 R ident
15:04:43.557830 IP 169.254.0.70.isakmp > 169.254.1.70.isakmp: isakmp: phase 2/others I inf[E]
15:04:43.558101 IP 169.254.0.70.isakmp > 169.254.1.70.isakmp: isakmp: phase 1 I ident
15:04:48.558596 ARP, Request who-has 169.254.0.71 tell 169.254.0.70, length 28
15:04:48.558786 ARP, Reply 169.254.0.71 is-at 02:00:00:00:18:03 (oui Unknown), length 46
15:04:51.566547 IP 169.254.1.70.isakmp > 169.254.0.70.isakmp: isakmp: phase 1 I ident
15:04:51.567166 IP 169.254.0.70.isakmp > 169.254.1.70.isakmp: isakmp: phase 1 R ident
15:04:51.724106 IP 169.254.1.70.isakmp > 169.254.0.70.isakmp: isakmp: phase 1 I ident
15:04:51.988812 IP 169.254.0.70.isakmp > 169.254.1.70.isakmp: isakmp: phase 1 R ident
15:04:52.094241 IP 169.254.1.70.isakmp > 169.254.0.70.isakmp: isakmp: phase 2/others I inf[E]
15:05:01.103353 IP 169.254.1.70.isakmp > 169.254.0.70.isakmp: isakmp: phase 1 I ident
15:05:01.103495 IP 169.254.0.70.isakmp > 169.254.1.70.isakmp: isakmp: phase 1 R ident
15:05:01.261754 IP 169.254.1.70.isakmp > 169.254.0.70.isakmp: isakmp: phase 2/others I inf[E]
15:05:07.109283 ARP, Request who-has 169.254.0.70 tell 169.254.0.71, length 46
15:05:07.109302 ARP, Reply 169.254.0.70 is-at 00:1f:29:61:21:ad (oui Unknown), length 28
15:05:21.281906 IP 169.254.1.70.isakmp > 169.254.0.70.isakmp: isakmp: phase 1 I ident
15:05:21.282091 IP 169.254.0.70.isakmp > 169.254.1.70.isakmp: isakmp: phase 1 R ident
15:05:21.439916 IP 169.254.1.70.isakmp > 169.254.0.70.isakmp: isakmp: phase 2/others I inf[E]
15:05:23.442406 IP 169.254.0.70.isakmp > 169.254.1.70.isakmp: isakmp: phase 1 I ident
15:05:23.442809 IP 169.254.1.70.isakmp > 169.254.0.70.isakmp: isakmp: phase 1 R ident
15:05:23.602394 IP 169.254.0.70.isakmp > 169.254.1.70.isakmp: isakmp: phase 1 I ident
15:05:23.862867 IP 169.254.1.70.isakmp > 169.254.0.70.isakmp: isakmp: phase 1 R ident
15:05:23.966813 IP 169.254.0.70.isakmp > 169.254.1.70.isakmp: isakmp: phase 2/others I inf[E]
15:05:26.286608 ARP, Request who-has 169.254.0.71 tell 169.254.0.70, length 28
15:05:26.286819 ARP, Reply 169.254.0.71 is-at 02:00:00:00:18:03 (oui Unknown), length 46
15:05:33.976925 IP 169.254.0.70.isakmp > 169.254.1.70.isakmp: isakmp: phase 1 I ident
15:05:33.977185 IP 169.254.1.70.isakmp > 169.254.0.70.isakmp: isakmp: phase 1 R ident
15:05:34.133108 IP 169.254.0.70.isakmp > 169.254.1.70.isakmp: isakmp: phase 2/others I inf[E]
15:05:39.121189 ARP, Request who-has 169.254.0.70 tell 169.254.0.71, length 46
15:05:39.121204 ARP, Reply 169.254.0.70 is-at 00:1f:29:61:21:ad (oui Unknown), length 28
15:05:53.135519 IP 169.254.0.70.isakmp > 169.254.1.70.isakmp: isakmp: phase 1 I ident
15:05:53.135852 IP 169.254.1.70.isakmp > 169.254.0.70.isakmp: isakmp: phase 1 R ident
15:05:53.291783 IP 169.254.0.70.isakmp > 169.254.1.70.isakmp: isakmp: phase 2/others I inf[E]
15:05:58.142603 ARP, Request who-has 169.254.0.71 tell 169.254.0.70, length 28
15:05:58.142813 ARP, Reply 169.254.0.71 is-at 02:00:00:00:18:03 (oui Unknown), length 46
15:06:01.293558 IP 169.254.1.70.isakmp > 169.254.0.70.isakmp: isakmp: phase 1 I ident
15:06:01.293887 IP 169.254.0.70.isakmp > 169.254.1.70.isakmp: isakmp: phase 1 R ident
15:06:01.450965 IP 169.254.1.70.isakmp > 169.254.0.70.isakmp: isakmp: phase 1 I ident
15:06:01.739101 IP 169.254.0.70.isakmp > 169.254.1.70.isakmp: isakmp: phase 1 R ident
15:06:01.896886 IP 169.254.1.70.isakmp > 169.254.0.70.isakmp: isakmp: phase 2/others I inf[E]
15:06:11.907012 IP 169.254.1.70.isakmp > 169.254.0.70.isakmp: isakmp: phase 1 I ident
15:06:11.907208 IP 169.254.0.70.isakmp > 169.254.1.70.isakmp: isakmp: phase 1 R ident
15:06:12.065171 IP 169.254.1.70.isakmp > 169.254.0.70.isakmp: isakmp: phase 2/others I inf[E]
15:06:17.131491 ARP, Request who-has 169.254.0.70 tell 169.254.0.71, length 46
15:06:17.131505 ARP, Reply 169.254.0.70 is-at 00:1f:29:61:21:ad (oui Unknown), length 28
15:06:31.084301 IP 169.254.1.70.isakmp > 169.254.0.70.isakmp: isakmp: phase 1 I ident
15:06:31.084532 IP 169.254.0.70.isakmp > 169.254.1.70.isakmp: isakmp: phase 1 R ident
15:06:31.242661 IP 169.254.1.70.isakmp > 169.254.0.70.isakmp: isakmp: phase 2/others I inf[E]
15:06:33.245002 IP 169.254.0.70.isakmp > 169.254.1.70.isakmp: isakmp: phase 1 I ident
15:06:33.245604 IP 169.254.1.70.isakmp > 169.254.0.70.isakmp: isakmp: phase 1 R ident
15:06:33.405477 IP 169.254.0.70.isakmp > 169.254.1.70.isakmp: isakmp: phase 1 I ident
15:06:33.687039 IP 169.254.1.70.isakmp > 169.254.0.70.isakmp: isakmp: phase 1 R ident
15:06:33.791426 IP 169.254.0.70.isakmp > 169.254.1.70.isakmp: isakmp: phase 2/others I inf[E]
15:06:36.094596 ARP, Request who-has 169.254.0.71 tell 169.254.0.70, length 28
15:06:36.094805 ARP, Reply 169.254.0.71 is-at 02:00:00:00:18:03 (oui Unknown), length 46
15:06:43.801596 IP 169.254.1.70.isakmp > 169.254.0.70.isakmp: isakmp: phase 1 R ident
15:06:43.801636 IP 169.254.0.70.isakmp > 169.254.1.70.isakmp: isakmp: phase 1 I ident
15:06:43.951931 IP 169.254.0.70.isakmp > 169.254.1.70.isakmp: isakmp: phase 2/others I inf[E]
15:06:49.142548 ARP, Request who-has 169.254.0.70 tell 169.254.0.71, length 46
15:06:49.142566 ARP, Reply 169.254.0.70 is-at 00:1f:29:61:21:ad (oui Unknown), length 28
15:07:03.972119 IP 169.254.1.70.isakmp > 169.254.0.70.isakmp: isakmp: phase 1 R ident
15:07:03.972197 IP 169.254.0.70.isakmp > 169.254.1.70.isakmp: isakmp: phase 1 I ident
15:07:04.128326 IP 169.254.0.70.isakmp > 169.254.1.70.isakmp: isakmp: phase 2/others I inf[E]