Argus and IPsec traffic

[Peter Van Epp]

	Indeed that appears to be the explaination. The SPIs on the forward
and back connection are different. I'll need to remember that when looking
for correct operation (i.e. I need to find both halves of the connection).

Peter Van Epp / Operations and Technical Support 
Simon Fraser University, Burnaby, B.C. Canada


> 
> Hey Peter,
>    If the two flows share the same SPI, the
> Security Payload Indicator (?), then they will be
> mapped to the same flow.  Some vpn's do end up
> with the spi's the same for the two independent
> channels, so that's a bonus, but not all do that.
> 
>    raxml() will printout the spi's for you.  Don't
> have a place to put it in the normal ra() output,
> yet.
> 
> Carter
> 
> Carter Bullard
> QoSient, LLC
> 300 E. 56th Street, Suite 18K
> New York, New York  10022
> 
> carter at qosient.com
> Phone +1 212 588-9133
> Fax   +1 212 588-9134
> http://qosient.com
>