Martin Rusko <rusko@xxxxxxxxxxxxxxx> wrote: > > I came across one strange thing, when I tried to make IPSEC work on > GNU/Linux. Packages came from Debian Sarge, so ipsec-tools (0.5.2), > running kernel is 2.6.11.2, but the same is valid for 2.6.12.4, for example. Please retest using 2.6.12.4 on *both* sides. What you've shown here is a known problem with kernels 2.6.11 and earlier. What's happening is that the UDP layer is not making a copy the packet when it performs decapsulation. Therefore your packet dump sees a partially decapsulated packet. Cheers, -- Visit Openswan at http://www.openswan.org/ Email: Herbert Xu ~{PmV>HI~} <herbert@xxxxxxxxxxxxxxxxxxx> Home Page: http://gondor.apana.org.au/~herbert/ PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt - : send the line "unsubscribe linux-net" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
