[Openswan Users] Strange ping response

[Paul Wouters]

On Tue, 6 Sep 2005, George Hadjichristofi wrote:

> After I successfully initiate a connection I ping from G1 to G2.
> G2 will return 2 packets, one cleartext and one encrypted.
> If I ping from G2 to G1 then G1 will return two packets.
>
> Why does the responding gateway send 2 packets back?

It works properly. Running tcpdump on the gateway using NETKEY
does not. Packets are modified by NETKEY after tcpdump seems
them.

Put a hub in the middle and verify on a third machines you only
see encrypted packets.

Paul