On Wed, 5 Jul 2006, Stephen Bosch wrote:
> Otto Moerbeek wrote:
> > On Wed, 5 Jul 2006, Stephen Bosch wrote:
> >
> >> Does tcpdump work on enc0?
> >
> > Are you really too lazy to read a manual page?
>
> And for the record -- since some people found that question beyond the
> pale -- I have been tcpdumping enc0 all morning and I am seeing no
> traffic, inspite of the fact that I have active SAs up and running.
>
> And why?
>
> Because the man page doesn't mention that tcpdump ignores the host
> parameter when used with enc0 (this is something someone else was kind
> enough to point out, proving that the question wasn't pointless).
>
> So -- let's try this -- let's fix the man page, instead of being snarky
> and blaming the person asking the question.
>
> Thank you for your help.
I think that is very clear, after all the src and dst addresses are
part of the ipsec encapsulated header, and not of a regular IP header.
The host specifier of tcpdump only applies to IP headers.
-Otto
