Frame 4 (87 bytes on wire, 87 bytes captured)
Ethernet II, Src: 00:17:5a:4b:50:4a, Dst: 00:16:76:69:01:be
Internet Protocol, Src Addr: 2.0.0.1 (2.0.0.1), Dst Addr: 2.0.0.2 (2.0.0.2)
Transmission Control Protocol, Src Port: 32150 (32150), Dst Port: 49 (49), Seq: 1724352999, Ack: 4035510986, Len: 33
TACACS+
    Major version: TACACS+
    Minor version: 0
    Type: Authentication (1)
    Sequence number: 1
    Flags: 0x01 (Unencrypted payload, Multiple Connections)
    Session ID: 1372289594
    Packet length: 21
    Request
        Action: Inbound Login
        Privilege Level: 1
        Authentication type: ASCII
        Service: Login
        User len: 0
        Port len: 6
        Port: tty194
        Remaddr len: 7
        Remote Address: 1.0.0.2
        Data: 0 (not used)

Frame 6 (109 bytes on wire, 109 bytes captured)
Ethernet II, Src: 00:16:76:69:01:be, Dst: 00:17:5a:4b:50:4a
Internet Protocol, Src Addr: 2.0.0.2 (2.0.0.2), Dst Addr: 2.0.0.1 (2.0.0.1)
Transmission Control Protocol, Src Port: 49 (49), Dst Port: 32150 (32150), Seq: 4035510986, Ack: 1724353032, Len: 55
TACACS+
    Major version: TACACS+
    Minor version: 0
    Type: Authentication (1)
    Sequence number: 2
    Flags: 0x01 (Unencrypted payload, Multiple Connections)
    Session ID: 1372289594
    Packet length: 43
    Reply
        Status: 0x4 (Send Username)
        Flags: 0x00 
        Server message length: 37
        Server message: 
User Access Verification

Username: 
        Data length: 0

Frame 8 (77 bytes on wire, 77 bytes captured)
Ethernet II, Src: 00:17:5a:4b:50:4a, Dst: 00:16:76:69:01:be
Internet Protocol, Src Addr: 2.0.0.1 (2.0.0.1), Dst Addr: 2.0.0.2 (2.0.0.2)
Transmission Control Protocol, Src Port: 32150 (32150), Dst Port: 49 (49), Seq: 1724353032, Ack: 4035511041, Len: 23
TACACS+
    Major version: TACACS+
    Minor version: 0
    Type: Authentication (1)
    Sequence number: 3
    Flags: 0x01 (Unencrypted payload, Multiple Connections)
    Session ID: 1372289594
    Packet length: 11
    Request
        Flags: 0x00 
        User length: 6
        User: wal056
        Data length: 0

Frame 9 (82 bytes on wire, 82 bytes captured)
Ethernet II, Src: 00:16:76:69:01:be, Dst: 00:17:5a:4b:50:4a
Internet Protocol, Src Addr: 2.0.0.2 (2.0.0.2), Dst Addr: 2.0.0.1 (2.0.0.1)
Transmission Control Protocol, Src Port: 49 (49), Dst Port: 32150 (32150), Seq: 4035511041, Ack: 1724353055, Len: 28
TACACS+
    Major version: TACACS+
    Minor version: 0
    Type: Authentication (1)
    Sequence number: 4
    Flags: 0x01 (Unencrypted payload, Multiple Connections)
    Session ID: 1372289594
    Packet length: 16
    Reply
        Status: 0x5 (Send Password)
        Flags: 0x01 (NoEcho)
        Server message length: 10
        Server message: Password: 
        Data length: 0

Frame 11 (77 bytes on wire, 77 bytes captured)
Ethernet II, Src: 00:17:5a:4b:50:4a, Dst: 00:16:76:69:01:be
Internet Protocol, Src Addr: 2.0.0.1 (2.0.0.1), Dst Addr: 2.0.0.2 (2.0.0.2)
Transmission Control Protocol, Src Port: 32150 (32150), Dst Port: 49 (49), Seq: 1724353055, Ack: 4035511069, Len: 23
TACACS+
    Major version: TACACS+
    Minor version: 0
    Type: Authentication (1)
    Sequence number: 5
    Flags: 0x01 (Unencrypted payload, Multiple Connections)
    Session ID: 1372289594
    Packet length: 11
    Request
        Flags: 0x00 
        User length: 6
        User: tester
        Data length: 0

Frame 12 (72 bytes on wire, 72 bytes captured)
Ethernet II, Src: 00:16:76:69:01:be, Dst: 00:17:5a:4b:50:4a
Internet Protocol, Src Addr: 2.0.0.2 (2.0.0.2), Dst Addr: 2.0.0.1 (2.0.0.1)
Transmission Control Protocol, Src Port: 49 (49), Dst Port: 32150 (32150), Seq: 4035511069, Ack: 1724353078, Len: 18
TACACS+
    Major version: TACACS+
    Minor version: 0
    Type: Authentication (1)
    Sequence number: 6
    Flags: 0x01 (Unencrypted payload, Multiple Connections)
    Session ID: 1372289594
    Packet length: 6
    Reply
        Status: 0x1 (Authentication Passed)
        Flags: 0x00 
        Server message length: 0
        Data length: 0

Frame 21 (93 bytes on wire, 93 bytes captured)
Ethernet II, Src: 00:17:5a:4b:50:4a, Dst: 00:16:76:69:01:be
Internet Protocol, Src Addr: 2.0.0.1 (2.0.0.1), Dst Addr: 2.0.0.2 (2.0.0.2)
Transmission Control Protocol, Src Port: 64019 (64019), Dst Port: 49 (49), Seq: 3726103420, Ack: 4041093742, Len: 39
TACACS+
    Major version: TACACS+
    Minor version: 0
    Type: Authentication (1)
    Sequence number: 1
    Flags: 0x01 (Unencrypted payload, Multiple Connections)
    Session ID: 2863020732
    Packet length: 27
    Request
        Action: Inbound Login
        Privilege Level: 15
        Authentication type: ASCII
        Service: ENABLE
        User len: 6
        User: wal056
        Port len: 6
        Port: tty194
        Remaddr len: 7
        Remote Address: 1.0.0.2
        Data: 0 (not used)

Frame 23 (82 bytes on wire, 82 bytes captured)
Ethernet II, Src: 00:16:76:69:01:be, Dst: 00:17:5a:4b:50:4a
Internet Protocol, Src Addr: 2.0.0.2 (2.0.0.2), Dst Addr: 2.0.0.1 (2.0.0.1)
Transmission Control Protocol, Src Port: 49 (49), Dst Port: 64019 (64019), Seq: 4041093742, Ack: 3726103459, Len: 28
TACACS+
    Major version: TACACS+
    Minor version: 0
    Type: Authentication (1)
    Sequence number: 2
    Flags: 0x01 (Unencrypted payload, Multiple Connections)
    Session ID: 2863020732
    Packet length: 16
    Reply
        Status: 0x5 (Send Password)
        Flags: 0x01 (NoEcho)
        Server message length: 10
        Server message: Password: 
        Data length: 0

Frame 25 (79 bytes on wire, 79 bytes captured)
Ethernet II, Src: 00:17:5a:4b:50:4a, Dst: 00:16:76:69:01:be
Internet Protocol, Src Addr: 2.0.0.1 (2.0.0.1), Dst Addr: 2.0.0.2 (2.0.0.2)
Transmission Control Protocol, Src Port: 64019 (64019), Dst Port: 49 (49), Seq: 3726103459, Ack: 4041093770, Len: 25
TACACS+
    Major version: TACACS+
    Minor version: 0
    Type: Authentication (1)
    Sequence number: 3
    Flags: 0x01 (Unencrypted payload, Multiple Connections)
    Session ID: 2863020732
    Packet length: 13
    Request
        Flags: 0x00 
        User length: 8
        User: shenable
        Data length: 0

Frame 26 (72 bytes on wire, 72 bytes captured)
Ethernet II, Src: 00:16:76:69:01:be, Dst: 00:17:5a:4b:50:4a
Internet Protocol, Src Addr: 2.0.0.2 (2.0.0.2), Dst Addr: 2.0.0.1 (2.0.0.1)
Transmission Control Protocol, Src Port: 49 (49), Dst Port: 64019 (64019), Seq: 4041093770, Ack: 3726103484, Len: 18
TACACS+
    Major version: TACACS+
    Minor version: 0
    Type: Authentication (1)
    Sequence number: 4
    Flags: 0x01 (Unencrypted payload, Multiple Connections)
    Session ID: 2863020732
    Packet length: 6
    Reply
        Status: 0x2 (Authentication Failed)
        Flags: 0x00 
        Server message length: 0
        Data length: 0

Frame 35 (93 bytes on wire, 93 bytes captured)
Ethernet II, Src: 00:17:5a:4b:50:4a, Dst: 00:16:76:69:01:be
Internet Protocol, Src Addr: 2.0.0.1 (2.0.0.1), Dst Addr: 2.0.0.2 (2.0.0.2)
Transmission Control Protocol, Src Port: 15281 (15281), Dst Port: 49 (49), Seq: 4011523555, Ack: 4058374966, Len: 39
TACACS+
    Major version: TACACS+
    Minor version: 0
    Type: Authentication (1)
    Sequence number: 1
    Flags: 0x01 (Unencrypted payload, Multiple Connections)
    Session ID: 2167323473
    Packet length: 27
    Request
        Action: Inbound Login
        Privilege Level: 15
        Authentication type: ASCII
        Service: ENABLE
        User len: 6
        User: wal056
        Port len: 6
        Port: tty194
        Remaddr len: 7
        Remote Address: 1.0.0.2
        Data: 0 (not used)

Frame 37 (82 bytes on wire, 82 bytes captured)
Ethernet II, Src: 00:16:76:69:01:be, Dst: 00:17:5a:4b:50:4a
Internet Protocol, Src Addr: 2.0.0.2 (2.0.0.2), Dst Addr: 2.0.0.1 (2.0.0.1)
Transmission Control Protocol, Src Port: 49 (49), Dst Port: 15281 (15281), Seq: 4058374966, Ack: 4011523594, Len: 28
TACACS+
    Major version: TACACS+
    Minor version: 0
    Type: Authentication (1)
    Sequence number: 2
    Flags: 0x01 (Unencrypted payload, Multiple Connections)
    Session ID: 2167323473
    Packet length: 16
    Reply
        Status: 0x5 (Send Password)
        Flags: 0x01 (NoEcho)
        Server message length: 10
        Server message: Password: 
        Data length: 0

Frame 39 (77 bytes on wire, 77 bytes captured)
Ethernet II, Src: 00:17:5a:4b:50:4a, Dst: 00:16:76:69:01:be
Internet Protocol, Src Addr: 2.0.0.1 (2.0.0.1), Dst Addr: 2.0.0.2 (2.0.0.2)
Transmission Control Protocol, Src Port: 15281 (15281), Dst Port: 49 (49), Seq: 4011523594, Ack: 4058374994, Len: 23
TACACS+
    Major version: TACACS+
    Minor version: 0
    Type: Authentication (1)
    Sequence number: 3
    Flags: 0x01 (Unencrypted payload, Multiple Connections)
    Session ID: 2167323473
    Packet length: 11
    Request
        Flags: 0x00 
        User length: 6
        User: enable
        Data length: 0

Frame 40 (72 bytes on wire, 72 bytes captured)
Ethernet II, Src: 00:16:76:69:01:be, Dst: 00:17:5a:4b:50:4a
Internet Protocol, Src Addr: 2.0.0.2 (2.0.0.2), Dst Addr: 2.0.0.1 (2.0.0.1)
Transmission Control Protocol, Src Port: 49 (49), Dst Port: 15281 (15281), Seq: 4058374994, Ack: 4011523617, Len: 18
TACACS+
    Major version: TACACS+
    Minor version: 0
    Type: Authentication (1)
    Sequence number: 4
    Flags: 0x01 (Unencrypted payload, Multiple Connections)
    Session ID: 2167323473
    Packet length: 6
    Reply
        Status: 0x1 (Authentication Passed)
        Flags: 0x00 
        Server message length: 0
        Data length: 0

Frame 49 (154 bytes on wire, 154 bytes captured)
Ethernet II, Src: 00:17:5a:4b:50:4a, Dst: 00:16:76:69:01:be
Internet Protocol, Src Addr: 2.0.0.1 (2.0.0.1), Dst Addr: 2.0.0.2 (2.0.0.2)
Transmission Control Protocol, Src Port: 26163 (26163), Dst Port: 49 (49), Seq: 1899051569, Ack: 4056626655, Len: 100
TACACS+
    Major version: TACACS+
    Minor version: 0
    Type: Authorization (2)
    Sequence number: 1
    Flags: 0x01 (Unencrypted payload, Multiple Connections)
    Session ID: 941313521
    Packet length: 88
    Request
        Auth Method: NONE
        Privilege Level: 1
        Authentication type: ASCII
        Service: TAC_PLUS_AUTHEN_SVC_NONE
        User len: 6
        User: wal056
        Port len: 6
        Port: tty194
        Remaddr len: 7
        Remote Address: 1.0.0.2
        Arg count: 5
        Arg[0] length: 13
        Arg[0] value: service=shell
        Arg[1] length: 8
        Arg[1] value: cmd=show
        Arg[2] length: 10
        Arg[2] value: cmd-arg=ip
        Arg[3] length: 13
        Arg[3] value: cmd-arg=route
        Arg[4] length: 12
        Arg[4] value: cmd-arg=<cr>

Frame 51 (72 bytes on wire, 72 bytes captured)
Ethernet II, Src: 00:16:76:69:01:be, Dst: 00:17:5a:4b:50:4a
Internet Protocol, Src Addr: 2.0.0.2 (2.0.0.2), Dst Addr: 2.0.0.1 (2.0.0.1)
Transmission Control Protocol, Src Port: 49 (49), Dst Port: 26163 (26163), Seq: 4056626655, Ack: 1899051669, Len: 18
TACACS+
    Major version: TACACS+
    Minor version: 0
    Type: Authorization (2)
    Sequence number: 2
    Flags: 0x01 (Unencrypted payload, Multiple Connections)
    Session ID: 941313521
    Packet length: 6
    Reply
        Auth Status: 0x1 (PASS_ADD)
        Server Msg length: 0
        Data length: 0
        Arg count: 0