# IKE / IPsec Sample Hosts File
# Covers all sample PCAP captures in this directory

# ikev2_aes_natt_three_modes.pcapng
# IKEv2 + ESP over NAT-T (UDP/4500). Three back-to-back sessions
# differing only in AES mode (GCM, CTR, CBC). Fully decryptable
# with the ikev2_decryption_table and esp_sa files in this dir.
192.168.245.131  🔑 VPN.Client
172.16.15.92     🔐 VPN.Gateway
# Inner tunnel addresses (visible after ESP decryption)
192.168.225.11   📡 Tunnel.Client
192.168.225.1    📡 Tunnel.Gateway

# ikev2_eap_inside_isakmp.pcap
# IKE_AUTH carrying EAP-SIM over NAT-T
1.1.1.1          🔑 EAP.Initiator
2.2.2.2          🔐 EAP.Responder

# ikev2_security_association_initialization.pcap
# Multiple IKEv2 initiators sending IKE_SA_INIT to a single VPN gateway
192.0.2.1       📡 Ping.Client
192.0.2.2       🔐 VPN.Gateway
192.0.2.99      🔑 Initiator-5.VPN
192.0.2.137     🔑 Initiator-8.VPN
192.0.2.173     🔑 Initiator-2.VPN
192.0.2.183     🔑 Initiator-7.VPN
192.0.2.203     🔑 Initiator-9.VPN
192.0.2.207     🔑 Initiator-3.VPN
192.0.2.213     🔑 Initiator-6.VPN
192.0.2.225     🔑 Initiator-4.VPN
192.0.2.251     🔑 Initiator-1.VPN

# partial_esp_ikev1_aggressive_quick_mode.pcapng
# IKEv1 Aggressive Mode + Quick Mode between two routers
# (ESP frames opaque — no SA keys available)
10.1.1.1        🔑 Initiator.IKEv1
10.1.1.2        🔐 Responder.IKEv1
