Ip sec adds two route entires for the same network. for eg: 192.168.10.0 dev eth0 192.168.10.0 dev ipsec0 where eth0 is a phsical NIC and ipsec0 is a psuedo device.. My question is how do they differentiate between the route i.e a packet with destination 192.168.10.1 which route will it take eth0 or ipsec0?? as far as my understanding it should see the first match but somehow i see that the packet goes through the eth0 interface sometimes and sometimes through ipsec0. i want to know how do they make a switch i.e depending on what factor they choose the route and how??? Thanks & Regards, Lakshmi -- Kernelnewbies: Help each other learn about the Linux kernel. Archive: http://mail.nl.linux.org/kernelnewbies/ FAQ: http://kernelnewbies.org/faq/