Thanks for the patch, but I'm not convinced it's useful. With ESP the payload is encrypted so ngrep cannot match anything, and there are better tools (like tcpdump) to see the SA parameters. It makes more sense with AH, but in the real world nobody uses AH.
-- Romain Francoise <[email protected]> http://people.debian.org/~rfrancoise/ -- To UNSUBSCRIBE, email to [email protected] with a subject of "unsubscribe". Trouble? Contact [email protected]
