19:55:02.825749 IP .isakmp > .isakmp: isakmp: phase 1 I ident 19:55:02.826375 IP .isakmp > .isakmp: isakmp: phase 1 R ident 19:55:03.222458 IP .isakmp > .isakmp: isakmp: phase 1 I ident 19:55:03.246961 IP .isakmp > .isakmp: isakmp: phase 1 R ident 19:55:03.433304 IP .ipsec-nat-t > .ipsec-nat-t: NONESP-encap: isakmp: phase 1 I ident[E] 19:55:03.433786 IP .ipsec-nat-t > .ipsec-nat-t: NONESP-encap: isakmp: phase 1 R ident[E] 19:55:03.539477 IP .ipsec-nat-t > .ipsec-nat-t: NONESP-encap: isakmp: phase 2/others I oakley-quick[E] 19:55:03.540450 IP .ipsec-nat-t > .ipsec-nat-t: NONESP-encap: isakmp: phase 2/others R oakley-quick[E] 19:55:03.652397 IP .ipsec-nat-t > .ipsec-nat-t: NONESP-encap: isakmp: phase 2/others I oakley-quick[E] 19:55:03.671639 IP .ipsec-nat-t > .ipsec-nat-t: UDP-encap: ESP(spi=0x858b602b,seq=0x1), length 156 19:55:03.671639 IP .l2tp > .l2tp: l2tp:[TLS](0/0)Ns=0,Nr=0 *MSGTYPE(SCCRQ) *PROTO_VER(1.0) *FRAMING_CAP(S) *BEARER_CAP() FIRM_VER(1280) *HOST_NAME(hirenj.elitecore.com) VENDOR_NAME(Microsoft) *ASSND_TUN_ID(19) *RECV_WIN_SIZE(8) 19:55:03.777173 IP .l2tp > .l2tp: l2tp:[TLS](19/0)Ns=0,Nr=1 *MSGTYPE(SCCRP) *PROTO_VER(1.0) *FRAMING_CAP(AS) *BEARER_CAP() FIRM_VER(1680) *HOST_NAME(eriwan) VENDOR_NAME(l2tpd.org) *ASSND_TUN_ID(6579) *RECV_WIN_SIZE(4) 19:55:04.665160 IP .ipsec-nat-t > .ipsec-nat-t: UDP-encap: ESP(spi=0x858b602b,seq=0x2), length 156 19:55:04.665160 IP .l2tp > .l2tp: l2tp:[TLS](0/0)Ns=0,Nr=0 *MSGTYPE(SCCRQ) *PROTO_VER(1.0) *FRAMING_CAP(S) *BEARER_CAP() FIRM_VER(1280) *HOST_NAME(hirenj.elitecore.com) VENDOR_NAME(Microsoft) *ASSND_TUN_ID(19) *RECV_WIN_SIZE(8) 19:55:04.766506 IP .l2tp > .l2tp: l2tp:[TLS](19/0)Ns=0,Nr=1 ZLB 19:55:04.777687 IP .l2tp > .l2tp: l2tp:[TLS](19/0)Ns=0,Nr=1 *MSGTYPE(SCCRP) *PROTO_VER(1.0) *FRAMING_CAP(AS) *BEARER_CAP() FIRM_VER(1680) *HOST_NAME(eriwan) VENDOR_NAME(l2tpd.org) *ASSND_TUN_ID(6579) *RECV_WIN_SIZE(4) 19:55:05.777740 IP .l2tp > .l2tp: l2tp:[TLS](19/0)Ns=0,Nr=1 *MSGTYPE(SCCRP) *PROTO_VER(1.0) *FRAMING_CAP(AS) *BEARER_CAP() FIRM_VER(1680) *HOST_NAME(eriwan) VENDOR_NAME(l2tpd.org) *ASSND_TUN_ID(6579) *RECV_WIN_SIZE(4) 19:55:06.664200 IP .ipsec-nat-t > .ipsec-nat-t: UDP-encap: ESP(spi=0x858b602b,seq=0x3), length 156 19:55:06.664200 IP .l2tp > .l2tp: l2tp:[TLS](0/0)Ns=0,Nr=0 *MSGTYPE(SCCRQ) *PROTO_VER(1.0) *FRAMING_CAP(S) *BEARER_CAP() FIRM_VER(1280) *HOST_NAME(hirenj.elitecore.com) VENDOR_NAME(Microsoft) *ASSND_TUN_ID(19) *RECV_WIN_SIZE(8) 19:55:06.764191 IP .l2tp > .l2tp: l2tp:[TLS](19/0)Ns=0,Nr=1 ZLB 19:55:06.764542 IP .ipsec-nat-t > .ipsec-nat-t: UDP-encap: ESP(spi=0x701f9c54,seq=0x1), length 52 19:55:06.777823 IP .l2tp > .l2tp: l2tp:[TLS](19/0)Ns=0,Nr=1 *MSGTYPE(SCCRP) *PROTO_VER(1.0) *FRAMING_CAP(AS) *BEARER_CAP() FIRM_VER(1680) *HOST_NAME(eriwan) VENDOR_NAME(l2tpd.org) *ASSND_TUN_ID(6579) *RECV_WIN_SIZE(4) 19:55:06.778254 IP .ipsec-nat-t > .ipsec-nat-t: UDP-encap: ESP(spi=0x701f9c54,seq=0x2), length 140 19:55:06.881044 IP .ipsec-nat-t > .ipsec-nat-t: UDP-encap: ESP(spi=0x858b602b,seq=0x4), length 60 19:55:06.881044 IP .l2tp > .l2tp: l2tp:[TLS](6579/0)Ns=1,Nr=1 *MSGTYPE(SCCCN) 19:55:06.889036 IP .ipsec-nat-t > .ipsec-nat-t: UDP-encap: ESP(spi=0x858b602b,seq=0x5), length 92 19:55:06.889036 IP .l2tp > .l2tp: l2tp:[TLS](6579/0)Ns=2,Nr=1 *MSGTYPE(ICRQ) *ASSND_SESS_ID(1) *CALL_SER_NUM(0) *BEARER_TYPE(A) 19:55:06.898033 IP .ipsec-nat-t > .ipsec-nat-t: UDP-encap: ESP(spi=0x858b602b,seq=0x6), length 52 19:55:06.910198 IP .l2tp > .l2tp: l2tp:[TLS](19/0)Ns=1,Nr=2 ZLB 19:55:06.910551 IP .ipsec-nat-t > .ipsec-nat-t: UDP-encap: ESP(spi=0x701f9c54,seq=0x3), length 52 19:55:06.978212 IP .l2tp > .l2tp: l2tp:[TLS](19/1)Ns=1,Nr=3 *MSGTYPE(ICRP) *ASSND_SESS_ID(16145) 19:55:06.978598 IP .ipsec-nat-t > .ipsec-nat-t: UDP-encap: ESP(spi=0x701f9c54,seq=0x4), length 68 19:55:06.978619 IP .l2tp > .l2tp: l2tp:[TLS](19/0)Ns=2,Nr=3 ZLB 19:55:06.978930 IP .ipsec-nat-t > .ipsec-nat-t: UDP-encap: ESP(spi=0x701f9c54,seq=0x5), length 52 19:55:07.076403 IP .ipsec-nat-t > .ipsec-nat-t: UDP-encap: ESP(spi=0x858b602b,seq=0x7), length 92 19:55:07.076403 IP .l2tp > .l2tp: l2tp:[TLS](6579/16145)Ns=3,Nr=2 *MSGTYPE(ICCN) *TX_CONN_SPEED(10000000) *FRAMING_TYPE(S) PROXY_AUTH_TYPE(No Auth) 19:55:07.086145 IP .ipsec-nat-t > .ipsec-nat-t: UDP-encap: ESP(spi=0x858b602b,seq=0x8), length 52 19:55:07.111874 IP .ipsec-nat-t > .ipsec-nat-t: UDP-encap: ESP(spi=0x858b602b,seq=0x9), length 68 19:55:07.111874 IP .l2tp > .l2tp: l2tp:[L](6579/16145) {LCP, Conf-Request (0x01), id 0, length 20} 19:55:07.254162 IP .l2tp > .l2tp: l2tp:[TLS](19/1)Ns=2,Nr=4 ZLB 19:55:07.254565 IP .ipsec-nat-t > .ipsec-nat-t: UDP-encap: ESP(spi=0x701f9c54,seq=0x6), length 52 19:55:08.346274 IP .l2tp > .l2tp: l2tp:[L](19/1) {LCP, Conf-Request (0x01), id 1, length 31} 19:55:08.346699 IP .ipsec-nat-t > .ipsec-nat-t: UDP-encap: ESP(spi=0x701f9c54,seq=0x7), length 84 19:55:08.448151 IP .ipsec-nat-t > .ipsec-nat-t: UDP-encap: ESP(spi=0x858b602b,seq=0xa), length 60 19:55:08.448151 IP .l2tp > .l2tp: l2tp:[L](6579/16145) {LCP, Conf-Nack (0x03), id 1, length 10} 19:55:08.462270 IP .l2tp > .l2tp: l2tp:[L](19/1) {LCP, Conf-Request (0x01), id 2, length 30} 19:55:08.462639 IP .ipsec-nat-t > .ipsec-nat-t: UDP-encap: ESP(spi=0x701f9c54,seq=0x8), length 84 19:55:08.556324 IP .ipsec-nat-t > .ipsec-nat-t: UDP-encap: ESP(spi=0x858b602b,seq=0xb), length 84 19:55:08.556324 IP .l2tp > .l2tp: l2tp:[L](6579/16145) {LCP, Conf-Ack (0x02), id 2, length 30} 19:55:09.106183 IP .ipsec-nat-t > .ipsec-nat-t: UDP-encap: ESP(spi=0x858b602b,seq=0xc), length 68 19:55:09.106183 IP .l2tp > .l2tp: l2tp:[L](6579/16145) {LCP, Conf-Request (0x01), id 1, length 20} 19:55:09.122366 IP .l2tp > .l2tp: l2tp:[L](19/1) {LCP, Conf-Ack (0x02), id 1, length 20} 19:55:09.122751 IP .ipsec-nat-t > .ipsec-nat-t: UDP-encap: ESP(spi=0x701f9c54,seq=0x9), length 68 19:55:09.217341 IP .ipsec-nat-t > .ipsec-nat-t: UDP-encap: ESP(spi=0x858b602b,seq=0xd), length 68 19:55:09.217341 IP .l2tp > .l2tp: l2tp:[L](6579/16145) {PAP, Auth-Req (0x01), id 9, Peer alok, Name alok} 19:55:09.238766 IP .l2tp > .l2tp: l2tp:[L](19/1) {PAP, Auth-ACK (0x02), id 9, Msg } 19:55:09.239150 IP .ipsec-nat-t > .ipsec-nat-t: UDP-encap: ESP(spi=0x701f9c54,seq=0xa), length 60 19:55:09.256202 IP .l2tp > .l2tp: l2tp:[L](19/1) {IPCP, Conf-Request (0x01), id 1, length 18} 19:55:09.256551 IP .ipsec-nat-t > .ipsec-nat-t: UDP-encap: ESP(spi=0x701f9c54,seq=0xb), length 68 19:55:09.339001 IP .ipsec-nat-t > .ipsec-nat-t: UDP-encap: ESP(spi=0x858b602b,seq=0xe), length 84 19:55:09.339001 IP .l2tp > .l2tp: l2tp:[L](6579/16145) {IPCP, Conf-Request (0x01), id 2, length 36} 19:55:09.355741 IP .ipsec-nat-t > .ipsec-nat-t: UDP-encap: ESP(spi=0x858b602b,seq=0xf), length 60 19:55:09.355741 IP .l2tp > .l2tp: l2tp:[L](6579/16145) {IPCP, Conf-Reject (0x04), id 1, length 12} 19:55:09.356966 IP .l2tp > .l2tp: l2tp:[L](19/1) {IPCP, Conf-Reject (0x04), id 2, length 18} 19:55:09.357387 IP .ipsec-nat-t > .ipsec-nat-t: UDP-encap: ESP(spi=0x701f9c54,seq=0xc), length 68 19:55:09.370347 IP .l2tp > .l2tp: l2tp:[L](19/1) {IPCP, Conf-Request (0x01), id 2, length 12} 19:55:09.370723 IP .ipsec-nat-t > .ipsec-nat-t: UDP-encap: ESP(spi=0x701f9c54,seq=0xd), length 60 19:55:09.452420 IP .ipsec-nat-t > .ipsec-nat-t: UDP-encap: ESP(spi=0x858b602b,seq=0x10), length 76 19:55:09.452420 IP .l2tp > .l2tp: l2tp:[L](6579/16145) {IPCP, Conf-Request (0x01), id 3, length 24} 19:55:09.466717 IP .l2tp > .l2tp: l2tp:[L](19/1) {IPCP, Conf-Nack (0x03), id 3, length 24} 19:55:09.467113 IP .ipsec-nat-t > .ipsec-nat-t: UDP-encap: ESP(spi=0x701f9c54,seq=0xe), length 76 19:55:09.470157 IP .ipsec-nat-t > .ipsec-nat-t: UDP-encap: ESP(spi=0x858b602b,seq=0x11), length 60 19:55:09.470157 IP .l2tp > .l2tp: l2tp:[L](6579/16145) {IPCP, Conf-Ack (0x02), id 2, length 12} 19:55:09.560841 IP .ipsec-nat-t > .ipsec-nat-t: UDP-encap: ESP(spi=0x858b602b,seq=0x12), length 76 19:55:09.560841 IP .l2tp > .l2tp: l2tp:[L](6579/16145) {IPCP, Conf-Request (0x01), id 4, length 24} 19:55:09.576130 IP .l2tp > .l2tp: l2tp:[L](19/1) {IPCP, Conf-Ack (0x02), id 4, length 24} 19:55:09.576497 IP .ipsec-nat-t > .ipsec-nat-t: UDP-encap: ESP(spi=0x701f9c54,seq=0xf), length 76 19:55:09.834643 IP .ipsec-nat-t > .ipsec-nat-t: UDP-encap: ESP(spi=0x858b602b,seq=0x13), length 148 19:55:09.834643 IP .l2tp > .l2tp: l2tp:[L](6579/16145) {IP 10.10.10.71.netbios-ns > 255.255.255.255.netbios-ns: NBT UDP PACKET(137): REGISTRATION; REQUEST; BROADCAST} 19:55:09.854377 IP .ipsec-nat-t > .ipsec-nat-t: UDP-encap: ESP(spi=0x858b602b,seq=0x14), length 92 19:55:09.854377 IP .l2tp > .l2tp: l2tp:[L](6579/16145) {IP 10.10.10.71 > IGMP.MCAST.NET: igmp v3 report, 1 group record(s)} 19:55:09.972041 IP .ipsec-nat-t > .ipsec-nat-t: UDP-encap: ESP(spi=0x858b602b,seq=0x15), length 212 19:55:09.972041 IP .l2tp > .l2tp: l2tp:[L](6579/16145) {IP 10.10.10.71.netbill-cred > 239.255.255.250.ssdp: UDP, length 133} 19:55:09.991275 IP .ipsec-nat-t > .ipsec-nat-t: UDP-encap: ESP(spi=0x858b602b,seq=0x16), length 380 19:55:09.991275 IP .l2tp > .l2tp: l2tp:[L](6579/16145) {IP 10.10.10.71.bootpc > 255.255.255.255.bootps: BOOTP/DHCP, Request, length 300} 19:55:10.018508 IP .ipsec-nat-t > .ipsec-nat-t: UDP-encap: ESP(spi=0x858b602b,seq=0x17), length 164 19:55:10.018508 IP .l2tp > .l2tp: l2tp:[L](6579/16145) {IP 10.10.10.71.iad3 > nameserver.domain: 2799+ SRV? _ldap._tcp.Default-First-Site-Name._sites.dc._msdcs.elitecore.com. (83)} 19:55:10.104156 IP .l2tp > .l2tp: l2tp:[L](19/1) {IP nameserver.domain > 10.10.10.71.iad3: 2799 NXDomain 0/1/0 (137)} 19:55:10.104678 IP .ipsec-nat-t > .ipsec-nat-t: UDP-encap: ESP(spi=0x701f9c54,seq=0x10), length 212 19:55:10.207370 IP .ipsec-nat-t > .ipsec-nat-t: UDP-encap: ESP(spi=0x858b602b,seq=0x18), length 132 19:55:10.207370 IP .l2tp > .l2tp: l2tp:[L](6579/16145) {IP 10.10.10.71.iad3 > nameserver.domain: 62845+ SRV? _ldap._tcp.dc._msdcs.elitecore.com. (52)} 19:55:10.283413 IP .l2tp > .l2tp: l2tp:[L](19/1) {IP nameserver.domain > 10.10.10.71.iad3: 62845 NXDomain 0/1/0 (106)} 19:55:10.283926 IP .ipsec-nat-t > .ipsec-nat-t: UDP-encap: ESP(spi=0x701f9c54,seq=0x11), length 188 19:55:10.380995 IP .ipsec-nat-t > .ipsec-nat-t: UDP-encap: ESP(spi=0x858b602b,seq=0x19), length 172 19:55:10.380995 IP .l2tp > .l2tp: l2tp:[L](6579/16145) {IP 10.10.10.71.iad3 > nameserver.domain: 16086+ SRV? _ldap._tcp.9e18ccd8-bd03-4126-87fb-1b65d19ce392.domains._msdcs.elitecore.com. (94)} 19:55:10.454421 IP .l2tp > .l2tp: l2tp:[L](19/1) {IP nameserver.domain > 10.10.10.71.iad3: 16086 NXDomain 0/1/0 (148)} 19:55:10.454943 IP .ipsec-nat-t > .ipsec-nat-t: UDP-encap: ESP(spi=0x701f9c54,seq=0x12), length 228 19:55:10.572105 IP .ipsec-nat-t > .ipsec-nat-t: UDP-encap: ESP(spi=0x858b602b,seq=0x1a), length 148 19:55:10.572105 IP .l2tp > .l2tp: l2tp:[L](6579/16145) {IP 10.10.10.71.netbios-ns > 255.255.255.255.netbios-ns: NBT UDP PACKET(137): REGISTRATION; REQUEST; BROADCAST} 19:55:10.681773 IP .ipsec-nat-t > .ipsec-nat-t: UDP-encap: ESP(spi=0x858b602b,seq=0x1b), length 92 19:55:10.681773 IP .l2tp > .l2tp: l2tp:[L](6579/16145) {IP 10.10.10.71 > IGMP.MCAST.NET: igmp v3 report, 1 group record(s)} 19:55:11.329054 IP .ipsec-nat-t > .ipsec-nat-t: UDP-encap: ESP(spi=0x858b602b,seq=0x1c), length 148 19:55:11.329054 IP .l2tp > .l2tp: l2tp:[L](6579/16145) {IP 10.10.10.71.netbios-ns > 255.255.255.255.netbios-ns: NBT UDP PACKET(137): REGISTRATION; REQUEST; BROADCAST} 19:55:12.074760 IP .ipsec-nat-t > .ipsec-nat-t: UDP-encap: ESP(spi=0x858b602b,seq=0x1d), length 148 19:55:12.074760 IP .l2tp > .l2tp: l2tp:[L](6579/16145) {IP 10.10.10.71.netbios-ns > 255.255.255.255.netbios-ns: NBT UDP PACKET(137): REGISTRATION; REQUEST; BROADCAST} 19:55:12.835452 IP .ipsec-nat-t > .ipsec-nat-t: UDP-encap: ESP(spi=0x858b602b,seq=0x1e), length 148 19:55:12.835452 IP .l2tp > .l2tp: l2tp:[L](6579/16145) {IP 10.10.10.71.netbios-ns > 255.255.255.255.netbios-ns: NBT UDP PACKET(137): REGISTRATION; REQUEST; BROADCAST} 19:55:13.031063 IP .ipsec-nat-t > .ipsec-nat-t: UDP-encap: ESP(spi=0x858b602b,seq=0x1f), length 100 19:55:13.031063 IP .l2tp > .l2tp: l2tp:[L](6579/16145) {IP 10.10.10.71.nimrod-agent > 10.125.125.1.icslap: S 3360713975:3360713975(0) win 16384 } 19:55:13.045298 IP .ipsec-nat-t > .ipsec-nat-t: UDP-encap: ESP(spi=0x858b602b,seq=0x20), length 212 19:55:13.045298 IP .l2tp > .l2tp: l2tp:[L](6579/16145) {IP 10.10.10.71.netbill-cred > 239.255.255.250.ssdp: UDP, length 133} 19:55:13.574914 IP .ipsec-nat-t > .ipsec-nat-t: UDP-encap: ESP(spi=0x858b602b,seq=0x21), length 148 19:55:13.574914 IP .l2tp > .l2tp: l2tp:[L](6579/16145) {IP 10.10.10.71.netbios-ns > 255.255.255.255.netbios-ns: NBT UDP PACKET(137): REGISTRATION; REQUEST; BROADCAST} 19:55:13.981367 IP .ipsec-nat-t > .ipsec-nat-t: UDP-encap: ESP(spi=0x858b602b,seq=0x22), length 380 19:55:13.981367 IP .l2tp > .l2tp: l2tp:[L](6579/16145) {IP 10.10.10.71.bootpc > 255.255.255.255.bootps: BOOTP/DHCP, Request, length 300} 19:55:14.323870 IP .ipsec-nat-t > .ipsec-nat-t: UDP-encap: ESP(spi=0x858b602b,seq=0x23), length 148 19:55:14.323870 IP .l2tp > .l2tp: l2tp:[L](6579/16145) {IP 10.10.10.71.netbios-ns > 255.255.255.255.netbios-ns: NBT UDP PACKET(137): REGISTRATION; REQUEST; BROADCAST} 19:55:15.076571 IP .ipsec-nat-t > .ipsec-nat-t: UDP-encap: ESP(spi=0x858b602b,seq=0x24), length 148 19:55:15.076571 IP .l2tp > .l2tp: l2tp:[L](6579/16145) {IP 10.10.10.71.netbios-ns > 255.255.255.255.netbios-ns: NBT UDP PACKET(137): REGISTRATION; REQUEST; BROADCAST} 19:55:15.836517 IP .ipsec-nat-t > .ipsec-nat-t: UDP-encap: ESP(spi=0x858b602b,seq=0x25), length 148 19:55:15.836517 IP .l2tp > .l2tp: l2tp:[L](6579/16145) {IP 10.10.10.71.netbios-ns > 255.255.255.255.netbios-ns: NBT UDP PACKET(137): REGISTRATION; REQUEST; BROADCAST} 19:55:15.850507 IP .ipsec-nat-t > .ipsec-nat-t: UDP-encap: ESP(spi=0x858b602b,seq=0x26), length 148 19:55:15.850507 IP .l2tp > .l2tp: l2tp:[L](6579/16145) {IP 10.10.10.71.netbios-ns > 255.255.255.255.netbios-ns: NBT UDP PACKET(137): REGISTRATION; REQUEST; BROADCAST} 19:55:15.859997 IP .ipsec-nat-t > .ipsec-nat-t: UDP-encap: ESP(spi=0x858b602b,seq=0x27), length 308 19:55:15.859997 IP .l2tp > .l2tp: l2tp:[L](6579/16145) {IP 10.10.10.71.netbios-dgm > 255.255.255.255.netbios-dgm: NBT UDP PACKET(138)} 19:55:15.951183 IP .ipsec-nat-t > .ipsec-nat-t: UDP-encap: ESP(spi=0x858b602b,seq=0x28), length 116 19:55:15.951183 IP .l2tp > .l2tp: l2tp:[L](6579/16145) {IP 10.10.10.71.iad3 > nameserver.domain: 645+ A? esrv.elitecore.com. (36)} 19:55:15.967669 IP .ipsec-nat-t > .ipsec-nat-t: UDP-encap: ESP(spi=0x858b602b,seq=0x29), length 100 19:55:15.967669 IP .l2tp > .l2tp: l2tp:[L](6579/16145) {IP 10.10.10.71.nimrod-agent > 10.125.125.1.icslap: S 3360713975:3360713975(0) win 16384 } 19:55:16.022702 IP .l2tp > .l2tp: l2tp:[L](19/1) {IP nameserver.domain > 10.10.10.71.iad3: 645 NXDomain 0/1/0 (90)} 19:55:16.023193 IP .ipsec-nat-t > .ipsec-nat-t: UDP-encap: ESP(spi=0x701f9c54,seq=0x13), length 172 19:55:16.031872 IP .ipsec-nat-t > .ipsec-nat-t: UDP-encap: ESP(spi=0x858b602b,seq=0x2a), length 212 19:55:16.031872 IP .l2tp > .l2tp: l2tp:[L](6579/16145) {IP 10.10.10.71.netbill-cred > 239.255.255.250.ssdp: UDP, length 133} 19:55:16.579725 IP .ipsec-nat-t > .ipsec-nat-t: UDP-encap: ESP(spi=0x858b602b,seq=0x2b), length 148 19:55:16.579725 IP .l2tp > .l2tp: l2tp:[L](6579/16145) {IP 10.10.10.71.netbios-ns > 255.255.255.255.netbios-ns: NBT UDP PACKET(137): REGISTRATION; REQUEST; BROADCAST} 19:55:16.586969 IP .ipsec-nat-t > .ipsec-nat-t: UDP-encap: ESP(spi=0x858b602b,seq=0x2c), length 148 19:55:16.586969 IP .l2tp > .l2tp: l2tp:[L](6579/16145) {IP 10.10.10.71.netbios-ns > 255.255.255.255.netbios-ns: NBT UDP PACKET(137): REGISTRATION; REQUEST; BROADCAST} 19:55:17.326684 IP .ipsec-nat-t > .ipsec-nat-t: UDP-encap: ESP(spi=0x858b602b,seq=0x2d), length 148 19:55:17.326684 IP .l2tp > .l2tp: l2tp:[L](6579/16145) {IP 10.10.10.71.netbios-ns > 255.255.255.255.netbios-ns: NBT UDP PACKET(137): REGISTRATION; REQUEST; BROADCAST} 19:55:17.339171 IP .ipsec-nat-t > .ipsec-nat-t: UDP-encap: ESP(spi=0x858b602b,seq=0x2e), length 148 19:55:17.339171 IP .l2tp > .l2tp: l2tp:[L](6579/16145) {IP 10.10.10.71.netbios-ns > 255.255.255.255.netbios-ns: NBT UDP PACKET(137): REGISTRATION; REQUEST; BROADCAST} 19:55:17.515293 IP .ipsec-nat-t > .ipsec-nat-t: UDP-encap: ESP(spi=0x858b602b,seq=0x2f), length 340 19:55:17.515293 IP .l2tp > .l2tp: l2tp:[L](6579/16145) {IP 10.10.10.71.netbios-dgm > 255.255.255.255.netbios-dgm: NBT UDP PACKET(138)} 19:55:18.076881 IP .ipsec-nat-t > .ipsec-nat-t: UDP-encap: ESP(spi=0x858b602b,seq=0x30), length 148 19:55:18.076881 IP .l2tp > .l2tp: l2tp:[L](6579/16145) {IP 10.10.10.71.netbios-ns > 255.255.255.255.netbios-ns: NBT UDP PACKET(137): REGISTRATION; REQUEST; BROADCAST} 19:55:18.079132 IP .ipsec-nat-t > .ipsec-nat-t: UDP-encap: ESP(spi=0x858b602b,seq=0x31), length 148 19:55:18.079132 IP .l2tp > .l2tp: l2tp:[L](6579/16145) {IP 10.10.10.71.netbios-ns > 255.255.255.255.netbios-ns: NBT UDP PACKET(137): REGISTRATION; REQUEST; BROADCAST} 19:55:18.836827 IP .ipsec-nat-t > .ipsec-nat-t: UDP-encap: ESP(spi=0x858b602b,seq=0x32), length 252 19:55:18.836827 IP .l2tp > .l2tp: l2tp:[L](6579/16145) {IP 10.10.10.71.netbios-dgm > 255.255.255.255.netbios-dgm: NBT UDP PACKET(138)} 19:55:18.855813 IP .ipsec-nat-t > .ipsec-nat-t: UDP-encap: ESP(spi=0x858b602b,seq=0x33), length 276 19:55:18.855813 IP .l2tp > .l2tp: l2tp:[L](6579/16145) {IP 10.10.10.71.netbios-dgm > 255.255.255.255.netbios-dgm: NBT UDP PACKET(138)} 19:55:20.334239 IP .ipsec-nat-t > .ipsec-nat-t: UDP-encap: ESP(spi=0x858b602b,seq=0x34), length 252 19:55:20.334239 IP .l2tp > .l2tp: l2tp:[L](6579/16145) {IP 10.10.10.71.netbios-dgm > 255.255.255.255.netbios-dgm: NBT UDP PACKET(138)} 19:55:21.833643 IP .ipsec-nat-t > .ipsec-nat-t: UDP-encap: ESP(spi=0x858b602b,seq=0x35), length 252 19:55:21.833643 IP .l2tp > .l2tp: l2tp:[L](6579/16145) {IP 10.10.10.71.netbios-dgm > 255.255.255.255.netbios-dgm: NBT UDP PACKET(138)} 19:55:21.985036 IP .ipsec-nat-t > .ipsec-nat-t: UDP-encap: ESP(spi=0x858b602b,seq=0x36), length 100 19:55:21.985036 IP .l2tp > .l2tp: l2tp:[L](6579/16145) {IP 10.10.10.71.nimrod-agent > 10.125.125.1.icslap: S 3360713975:3360713975(0) win 16384 } 19:55:23.330804 IP .ipsec-nat-t > .ipsec-nat-t: UDP-encap: ESP(spi=0x858b602b,seq=0x37), length 252 19:55:23.330804 IP .l2tp > .l2tp: l2tp:[L](6579/16145) {IP 10.10.10.71.netbios-dgm > 255.255.255.255.netbios-dgm: NBT UDP PACKET(138)} 19:55:23.368027 IP .ipsec-nat-t > .ipsec-nat-t: UDP-encap: ESP(spi=0x858b602b,seq=0x38), length 308 19:55:23.368027 IP .l2tp > .l2tp: l2tp:[L](6579/16145) {IP 10.10.10.71.netbios-dgm > 255.255.255.255.netbios-dgm: NBT UDP PACKET(138)} 19:55:23.861416 IP .ipsec-nat-t > .ipsec-nat-t: isakmp-nat-keep-alive 19:55:25.032813 IP .ipsec-nat-t > .ipsec-nat-t: UDP-encap: ESP(spi=0x858b602b,seq=0x39), length 164 19:55:25.032813 IP .l2tp > .l2tp: l2tp:[L](6579/16145) {IP 10.10.10.71.iad3 > nameserver.domain: 23038+ SRV? _ldap._tcp.Default-First-Site-Name._sites.dc._msdcs.elitecore.com. (83)} 19:55:25.106968 IP .l2tp > .l2tp: l2tp:[L](19/1) {IP nameserver.domain > 10.10.10.71.iad3: 23038 NXDomain 0/1/0 (137)} 19:55:25.107458 IP .ipsec-nat-t > .ipsec-nat-t: UDP-encap: ESP(spi=0x701f9c54,seq=0x14), length 212 19:55:25.204938 IP .ipsec-nat-t > .ipsec-nat-t: UDP-encap: ESP(spi=0x858b602b,seq=0x3a), length 132 19:55:25.204938 IP .l2tp > .l2tp: l2tp:[L](6579/16145) {IP 10.10.10.71.iad3 > nameserver.domain: 11194+ SRV? _ldap._tcp.dc._msdcs.elitecore.com. (52)} 19:55:25.276984 IP .l2tp > .l2tp: l2tp:[L](19/1) {IP nameserver.domain > 10.10.10.71.iad3: 11194 NXDomain 0/1/0 (106)} 19:55:25.277468 IP .ipsec-nat-t > .ipsec-nat-t: UDP-encap: ESP(spi=0x701f9c54,seq=0x15), length 188 19:55:25.375815 IP .ipsec-nat-t > .ipsec-nat-t: UDP-encap: ESP(spi=0x858b602b,seq=0x3b), length 172 19:55:25.375815 IP .l2tp > .l2tp: l2tp:[L](6579/16145) {IP 10.10.10.71.iad3 > nameserver.domain: 25095+ SRV? _ldap._tcp.9e18ccd8-bd03-4126-87fb-1b65d19ce392.domains._msdcs.elitecore.com. (94)} 19:55:25.449701 IP .l2tp > .l2tp: l2tp:[L](19/1) {IP nameserver.domain > 10.10.10.71.iad3: 25095 NXDomain 0/1/0 (148)} 19:55:25.450238 IP .ipsec-nat-t > .ipsec-nat-t: UDP-encap: ESP(spi=0x701f9c54,seq=0x16), length 228 19:55:25.549437 IP .ipsec-nat-t > .ipsec-nat-t: UDP-encap: ESP(spi=0x858b602b,seq=0x3c), length 308 19:55:25.549437 IP .l2tp > .l2tp: l2tp:[L](6579/16145) {IP 10.10.10.71.netbios-dgm > 255.255.255.255.netbios-dgm: NBT UDP PACKET(138)} 19:55:25.645867 IP .ipsec-nat-t > .ipsec-nat-t: UDP-encap: ESP(spi=0x858b602b,seq=0x3d), length 116 19:55:25.645867 IP .l2tp > .l2tp: l2tp:[L](6579/16145) {IP 10.10.10.71.iad3 > nameserver.domain: 14506+ A? esrv.elitecore.com. (36)} 19:55:25.718348 IP .l2tp > .l2tp: l2tp:[L](19/1) {IP nameserver.domain > 10.10.10.71.iad3: 14506 NXDomain 0/1/0 (90)} 19:55:25.718816 IP .ipsec-nat-t > .ipsec-nat-t: UDP-encap: ESP(spi=0x701f9c54,seq=0x17), length 172 19:55:30.821091 IP .ipsec-nat-t > .ipsec-nat-t: UDP-encap: ESP(spi=0x858b602b,seq=0x3e), length 164 19:55:30.821091 IP .l2tp > .l2tp: l2tp:[L](6579/16145) {IP 10.10.10.71.faxportwinport > nameserver.domain: 50781+ SRV? _ldap._tcp.Default-First-Site-Name._sites.dc._msdcs.elitecore.com. (83)} 19:55:30.896472 IP .l2tp > .l2tp: l2tp:[L](19/1) {IP nameserver.domain > 10.10.10.71.faxportwinport: 50781 NXDomain 0/1/0 (137)} 19:55:30.896993 IP .ipsec-nat-t > .ipsec-nat-t: UDP-encap: ESP(spi=0x701f9c54,seq=0x18), length 212 19:55:30.995217 IP .ipsec-nat-t > .ipsec-nat-t: UDP-encap: ESP(spi=0x858b602b,seq=0x3f), length 132 19:55:30.995217 IP .l2tp > .l2tp: l2tp:[L](6579/16145) {IP 10.10.10.71.softdataphone > nameserver.domain: 21475+ SRV? _ldap._tcp.dc._msdcs.elitecore.com. (52)} 19:55:31.068057 IP .l2tp > .l2tp: l2tp:[L](19/1) {IP nameserver.domain > 10.10.10.71.softdataphone: 21475 NXDomain 0/1/0 (106)} 19:55:31.068547 IP .ipsec-nat-t > .ipsec-nat-t: UDP-encap: ESP(spi=0x701f9c54,seq=0x19), length 188 19:55:31.169091 IP .ipsec-nat-t > .ipsec-nat-t: UDP-encap: ESP(spi=0x858b602b,seq=0x40), length 172 19:55:31.169091 IP .l2tp > .l2tp: l2tp:[L](6579/16145) {IP 10.10.10.71.ontime > nameserver.domain: 5771+ SRV? _ldap._tcp.9e18ccd8-bd03-4126-87fb-1b65d19ce392.domains._msdcs.elitecore.com. (94)} 19:55:31.244504 IP .l2tp > .l2tp: l2tp:[L](19/1) {IP nameserver.domain > 10.10.10.71.ontime: 5771 NXDomain 0/1/0 (148)} 19:55:31.245042 IP .ipsec-nat-t > .ipsec-nat-t: UDP-encap: ESP(spi=0x701f9c54,seq=0x1a), length 228 19:55:31.345712 IP .ipsec-nat-t > .ipsec-nat-t: UDP-encap: ESP(spi=0x858b602b,seq=0x41), length 308 19:55:31.345712 IP .l2tp > .l2tp: l2tp:[L](6579/16145) {IP 10.10.10.71.netbios-dgm > 255.255.255.255.netbios-dgm: NBT UDP PACKET(138)} 19:55:31.457881 IP .ipsec-nat-t > .ipsec-nat-t: UDP-encap: ESP(spi=0x858b602b,seq=0x42), length 116 19:55:31.457881 IP .l2tp > .l2tp: l2tp:[L](6579/16145) {IP 10.10.10.71.jaleosnd > nameserver.domain: 27460+ A? esrv.elitecore.com. (36)} 19:55:31.529894 IP .l2tp > .l2tp: l2tp:[L](19/1) {IP nameserver.domain > 10.10.10.71.jaleosnd: 27460 NXDomain 0/1/0 (90)} 19:55:31.530383 IP .ipsec-nat-t > .ipsec-nat-t: UDP-encap: ESP(spi=0x701f9c54,seq=0x1b), length 172 19:55:32.491127 IP .ipsec-nat-t > .ipsec-nat-t: UDP-encap: ESP(spi=0x858b602b,seq=0x43), length 308 19:55:32.491127 IP .l2tp > .l2tp: l2tp:[L](6579/16145) {IP 10.10.10.71.netbios-dgm > 255.255.255.255.netbios-dgm: NBT UDP PACKET(138)} 19:55:34.902368 IP .ipsec-nat-t > .ipsec-nat-t: UDP-encap: ESP(spi=0x858b602b,seq=0x44), length 132 19:55:34.902368 IP .l2tp > .l2tp: l2tp:[L](6579/16145) {IP 10.10.10.71.udp-sr-port > nameserver.domain: 47269+ SRV? _ldap._tcp.pdc._msdcs.elitecore.com. (53)} 19:55:34.975187 IP .l2tp > .l2tp: l2tp:[L](19/1) {IP nameserver.domain > 10.10.10.71.udp-sr-port: 47269 NXDomain 0/1/0 (107)} 19:55:34.975691 IP .ipsec-nat-t > .ipsec-nat-t: UDP-encap: ESP(spi=0x701f9c54,seq=0x1c), length 188 19:55:38.328369 IP .ipsec-nat-t > .ipsec-nat-t: UDP-encap: ESP(spi=0x858b602b,seq=0x45), length 308 19:55:38.328369 IP .l2tp > .l2tp: l2tp:[L](6579/16145) {IP 10.10.10.71.netbios-dgm > 255.255.255.255.netbios-dgm: NBT UDP PACKET(138)} 19:55:38.357102 IP .ipsec-nat-t > .ipsec-nat-t: UDP-encap: ESP(spi=0x858b602b,seq=0x46), length 116 19:55:38.357102 IP .l2tp > .l2tp: l2tp:[L](6579/16145) {IP 10.10.10.71.svs-omagent > nameserver.domain: 56281+ A? esrv.elitecore.com. (36)} 19:55:38.441102 IP .l2tp > .l2tp: l2tp:[L](19/1) {IP nameserver.domain > 10.10.10.71.svs-omagent: 56281 NXDomain 0/1/0 (90)} 19:55:38.441584 IP .ipsec-nat-t > .ipsec-nat-t: UDP-encap: ESP(spi=0x701f9c54,seq=0x1d), length 172 19:55:40.007147 IP .ipsec-nat-t > .ipsec-nat-t: UDP-encap: ESP(spi=0x858b602b,seq=0x47), length 308 19:55:40.007147 IP .l2tp > .l2tp: l2tp:[L](6579/16145) {IP 10.10.10.71.netbios-dgm > 255.255.255.255.netbios-dgm: NBT UDP PACKET(138)} 19:55:43.828862 IP .ipsec-nat-t > .ipsec-nat-t: isakmp-nat-keep-alive 19:55:47.508680 IP .ipsec-nat-t > .ipsec-nat-t: UDP-encap: ESP(spi=0x858b602b,seq=0x48), length 308 19:55:47.508680 IP .l2tp > .l2tp: l2tp:[L](6579/16145) {IP 10.10.10.71.netbios-dgm > 255.255.255.255.netbios-dgm: NBT UDP PACKET(138)} 19:55:50.846746 IP .ipsec-nat-t > .ipsec-nat-t: UDP-encap: ESP(spi=0x858b602b,seq=0x49), length 308 19:55:50.846746 IP .l2tp > .l2tp: l2tp:[L](6579/16145) {IP 10.10.10.71.netbios-dgm > 255.255.255.255.netbios-dgm: NBT UDP PACKET(138)} 19:55:58.345527 IP .ipsec-nat-t > .ipsec-nat-t: UDP-encap: ESP(spi=0x858b602b,seq=0x4a), length 308 19:55:58.345527 IP .l2tp > .l2tp: l2tp:[L](6579/16145) {IP 10.10.10.71.netbios-dgm > 255.255.255.255.netbios-dgm: NBT UDP PACKET(138)} 19:56:03.850018 IP .ipsec-nat-t > .ipsec-nat-t: isakmp-nat-keep-alive 19:56:05.856306 IP .ipsec-nat-t > .ipsec-nat-t: UDP-encap: ESP(spi=0x858b602b,seq=0x4b), length 164 19:56:05.856306 IP .l2tp > .l2tp: l2tp:[L](6579/16145) {IP 10.10.10.71.t128-gateway > nameserver.domain: 60230+ SRV? _ldap._tcp.Default-First-Site-Name._sites.dc._msdcs.elitecore.com. (83)} 19:56:05.937982 IP .l2tp > .l2tp: l2tp:[L](19/1) {IP nameserver.domain > 10.10.10.71.t128-gateway: 60230 NXDomain 0/1/0 (137)} 19:56:05.938479 IP .ipsec-nat-t > .ipsec-nat-t: UDP-encap: ESP(spi=0x701f9c54,seq=0x1e), length 212 19:56:06.037424 IP .ipsec-nat-t > .ipsec-nat-t: UDP-encap: ESP(spi=0x858b602b,seq=0x4c), length 132 19:56:06.037424 IP .l2tp > .l2tp: l2tp:[L](6579/16145) {IP 10.10.10.71.lontalk-norm > nameserver.domain: 58568+ SRV? _ldap._tcp.dc._msdcs.elitecore.com. (52)} 19:56:06.110038 IP .l2tp > .l2tp: l2tp:[L](19/1) {IP nameserver.domain > 10.10.10.71.lontalk-norm: 58568 NXDomain 0/1/0 (106)} 19:56:06.110518 IP .ipsec-nat-t > .ipsec-nat-t: UDP-encap: ESP(spi=0x701f9c54,seq=0x1f), length 188 19:56:06.209299 IP .ipsec-nat-t > .ipsec-nat-t: UDP-encap: ESP(spi=0x858b602b,seq=0x4d), length 172 19:56:06.209299 IP .l2tp > .l2tp: l2tp:[L](6579/16145) {IP 10.10.10.71.lontalk-urgnt > nameserver.domain: 41801+ SRV? _ldap._tcp.9e18ccd8-bd03-4126-87fb-1b65d19ce392.domains._msdcs.elitecore.com. (94)} 19:56:06.283701 IP .l2tp > .l2tp: l2tp:[L](19/1) {IP nameserver.domain > 10.10.10.71.lontalk-urgnt: 41801 NXDomain 0/1/0 (148)} 19:56:06.284259 IP .ipsec-nat-t > .ipsec-nat-t: UDP-encap: ESP(spi=0x701f9c54,seq=0x20), length 228 19:56:06.724172 IP .ipsec-nat-t > .ipsec-nat-t: UDP-encap: ESP(spi=0x858b602b,seq=0x4e), length 308 19:56:06.724172 IP .l2tp > .l2tp: l2tp:[L](6579/16145) {IP 10.10.10.71.netbios-dgm > 255.255.255.255.netbios-dgm: NBT UDP PACKET(138)} 19:56:06.746905 IP .ipsec-nat-t > .ipsec-nat-t: UDP-encap: ESP(spi=0x858b602b,seq=0x4f), length 116 19:56:06.746905 IP .l2tp > .l2tp: l2tp:[L](6579/16145) {IP 10.10.10.71.oraclenet8cman > nameserver.domain: 39872+ A? esrv.elitecore.com. (36)} 19:56:06.831425 IP .l2tp > .l2tp: l2tp:[L](19/1) {IP nameserver.domain > 10.10.10.71.oraclenet8cman: 39872 NXDomain 0/1/0 (90)} 19:56:06.831912 IP .ipsec-nat-t > .ipsec-nat-t: UDP-encap: ESP(spi=0x701f9c54,seq=0x21), length 172 19:56:06.913597 IP .l2tp > .l2tp: l2tp:[TLS](19/0)Ns=2,Nr=4 *MSGTYPE(HELLO) 19:56:06.914051 IP .ipsec-nat-t > .ipsec-nat-t: UDP-encap: ESP(spi=0x701f9c54,seq=0x22), length 60 19:56:07.007218 IP .ipsec-nat-t > .ipsec-nat-t: UDP-encap: ESP(spi=0x858b602b,seq=0x50), length 52 19:56:07.913865 IP .l2tp > .l2tp: l2tp:[TLS](19/0)Ns=2,Nr=4 *MSGTYPE(HELLO) 19:56:07.914260 IP .ipsec-nat-t > .ipsec-nat-t: UDP-encap: ESP(spi=0x701f9c54,seq=0x23), length 60 19:56:08.006995 IP .ipsec-nat-t > .ipsec-nat-t: UDP-encap: ESP(spi=0x858b602b,seq=0x51), length 52 19:56:08.917703 IP .l2tp > .l2tp: l2tp:[TLS](19/0)Ns=2,Nr=4 *MSGTYPE(HELLO) 19:56:08.918097 IP .ipsec-nat-t > .ipsec-nat-t: UDP-encap: ESP(spi=0x701f9c54,seq=0x24), length 60 19:56:09.019751 IP .ipsec-nat-t > .ipsec-nat-t: UDP-encap: ESP(spi=0x858b602b,seq=0x52), length 52 19:56:09.917759 IP .l2tp > .l2tp: l2tp:[TLS](19/0)Ns=2,Nr=4 *MSGTYPE(HELLO) 19:56:09.918139 IP .ipsec-nat-t > .ipsec-nat-t: UDP-encap: ESP(spi=0x701f9c54,seq=0x25), length 60 19:56:10.012276 IP .ipsec-nat-t > .ipsec-nat-t: UDP-encap: ESP(spi=0x858b602b,seq=0x53), length 52 19:56:10.917822 IP .l2tp > .l2tp: l2tp:[TLS](19/0)Ns=2,Nr=4 *MSGTYPE(HELLO) 19:56:10.918207 IP .ipsec-nat-t > .ipsec-nat-t: UDP-encap: ESP(spi=0x701f9c54,seq=0x26), length 60 19:56:11.012798 IP .ipsec-nat-t > .ipsec-nat-t: UDP-encap: ESP(spi=0x858b602b,seq=0x54), length 52 19:56:11.918091 IP .l2tp > .l2tp: l2tp:[TLS](19/0)Ns=3,Nr=4 *MSGTYPE(StopCCN) *ASSND_TUN_ID(6579) *RESULT_CODE(1/0 Timeout) 19:56:11.918525 IP .ipsec-nat-t > .ipsec-nat-t: UDP-encap: ESP(spi=0x701f9c54,seq=0x27), length 84 19:56:12.015827 IP .ipsec-nat-t > .ipsec-nat-t: UDP-encap: ESP(spi=0x858b602b,seq=0x55), length 52 19:56:12.102755 IP .ipsec-nat-t > .ipsec-nat-t: NONESP-encap: isakmp: phase 2/others I inf[E] 19:56:12.109747 IP .ipsec-nat-t > .ipsec-nat-t: NONESP-encap: isakmp: phase 2/others I inf[E] 19:56:12.110453 IP .ipsec-nat-t > .ipsec-nat-t: NONESP-encap: isakmp: phase 2/others R inf[E] 19:56:12.110553 IP .ipsec-nat-t > .ipsec-nat-t: NONESP-encap: isakmp: phase 2/others R inf[E] 19:56:12.243161 IP .ipsec-nat-t > .ipsec-nat-t: NONESP-encap: isakmp: phase 2/others R inf[E] 19:56:12.243235 IP .ipsec-nat-t > .ipsec-nat-t: NONESP-encap: isakmp: phase 2/others R inf[E] 19:56:13.070461 IP .l2tp > .l2tp: l2tp:[TLS](19/0)Ns=3,Nr=4 *MSGTYPE(StopCCN) *ASSND_TUN_ID(6579) *RESULT_CODE(1/0 Timeout) 19:56:14.074013 IP .l2tp > .l2tp: l2tp:[TLS](19/0)Ns=3,Nr=4 *MSGTYPE(StopCCN) *ASSND_TUN_ID(6579) *RESULT_CODE(1/0 Timeout) 19:56:15.074102 IP .l2tp > .l2tp: l2tp:[TLS](19/0)Ns=3,Nr=4 *MSGTYPE(StopCCN) *ASSND_TUN_ID(6579) *RESULT_CODE(1/0 Timeout)