Hi, Does the bpf helper function bpf_skb_get_xfrm_state suppose to work for ipsec using transport mode ? So far i have only managed to get it working with tunnel mode. Is there any possibility with bpf to create new SA/SP (transport mode) on the fly when an ESP packet is received but there is no SA/SP present for the corresponding SPI, provided that all necessary information for the creation is available in the bpf program? /Ors
