[Openswan dev] Obtaining unencrypted stream

[Paul Wouters]

On Fri, 23 Nov 2007, Wallakazoo wrote:

> I'm currently doing some experimentation and analysis on IPsec
> traffic. I was wondering whether it would be possible to obtain the
> unencrypted packets from the kernel before they are encrypted and sent
> out an interface.
>
> I hope to be able to do some comparisons between the encrypted and
> unencrypted streams.

Using klips, you can sniff on ipsecX for plaintext, and ethX for
crypted text.

Paul