[Openswan Users] RHEL guides

Norman Rasmussen normanr at gmail.com
Mon Jun 6 18:39:52 CEST 2005


> Since with NETKEY, you can't reliably look at the data with tcpdump, since netkey hooks into
> the networking stack past the point where tcpdump can look.
>
Maybe it should be added to the comment, that you should run the
tcpdump process on a machine that is between the endpoints, and is not
involved in the ipsec tunnel, but just has to route it.

-- 
- Norman Rasmussen
 - Email: norman at rasmussen.co.za
 - Home page: http://norman.rasmussen.co.za/


More information about the Users mailing list