It's because recived packet is decapsulated (from AH) and reinserted into your interface (e.g. eth0). Then it's decapsulated from ESP and reinserted one more time in plain. In FreeS/WAN packets ware inserted in ipsec0 instead of original eth0. It's normal. You don't see the same with sent packets because wey are inserted into interface (eth0) after being encrypted. PoltoS/ ------------------------------------------------- This mail sent through IMP: http://horde.org/imp/ ------------------------------------------------- _______________________________________________ LARTC mailing list / LARTC@xxxxxxxxxxxxxxx http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/