listening on eth0, link-type EN10MB (Ethernet), capture size 262144 bytes
14:02:17.994448 IP 192.168.0.6.ipsec-nat-t > vpn1.serv.ru.ipsec-nat-t: NONESP-encap: isakmp: phase 2/others ? inf[E]
14:02:17.996985 IP 192.168.0.6.ipsec-nat-t > vpn1.serv.ru.ipsec-nat-t: NONESP-encap: isakmp: phase 2/others ? inf[E]
14:02:18.817809 IP 192.168.0.199.domain > 192.168.0.6.57520: 63096 1/2/2 PTR vpn1.serv.ru.ipsec-nat-t. (154)
14:02:19.625760 IP 192.168.0.6.isakmp > vpn1.serv.ru.isakmp: isakmp: phase 1 I ident
14:02:19.629692 IP vpn1.serv.ru.ipsec-nat-t.isakmp > 192.168.0.6.isakmp: isakmp: phase 1 R ident
14:02:19.630189 IP 192.168.0.6.isakmp > vpn1.serv.ru.isakmp: isakmp: phase 1 I ident
14:02:19.645028 IP vpn1.serv.ru.ipsec-nat-t.isakmp > 192.168.0.6.isakmp: isakmp: phase 1 R ident
14:02:19.646036 IP 192.168.0.6.ipsec-nat-t > vpn1.serv.ru.ipsec-nat-t: NONESP-encap: isakmp: phase 1 I ident[E]
14:02:19.648325 IP vpn1.serv.ru.ipsec-nat-t.ipsec-nat-t > 192.168.0.6.ipsec-nat-t: NONESP-encap: isakmp: phase 1 R ident[E]
14:02:19.648879 IP 192.168.0.6.ipsec-nat-t > vpn1.serv.ru.ipsec-nat-t: NONESP-encap: isakmp: phase 2/others I oakley-quick[E]
14:02:19.655595 IP vpn1.serv.ru.ipsec-nat-t > 192.168.0.6.ipsec-nat-t: NONESP-encap: isakmp: phase 2/others R oakley-quick[EC]
14:02:19.677763 IP 192.168.0.6.ipsec-nat-t > vpn1.serv.ru.ipsec-nat-t: NONESP-encap: isakmp: phase 2/others I oakley-quick[E]
14:02:19.681120 IP vpn1.serv.ru.ipsec-nat-t.ipsec-nat-t > 192.168.0.6.ipsec-nat-t: NONESP-encap: isakmp: phase 2/others R oakley-quick[EC]
14:02:19.681257 IP 192.168.0.6.ipsec-nat-t > vpn1.serv.ru.ipsec-nat-t: NONESP-encap: isakmp: phase 2/others I inf[E]