Hi, I'm currently doing some experimentation and analysis on IPsec traffic. I was wondering whether it would be possible to obtain the unencrypted packets from the kernel before they are encrypted and sent out an interface. I hope to be able to do some comparisons between the encrypted and unencrypted streams. Thanks.