Just out of curiosity, why is there an "AGAIN" in the subject line,
since this is the first email I've gotten on the subject?
tcpdump is capable of decrypting ESP, if you give it the key and if it's
linked with libcrypto. Since IPSEC is part of FreeBSD, and libcrypto
is part of FreeBSD, I figured it would be a nice thing to have.
It didn't occur to me that this would change where tcpdump lived
(i.e. it seemed like libcrypto was part of FreeBSD) so it wasn't an
explicit choice on my part to move distributions. I agree that's a bad
side effect. It's easy to disable the decrypting-ESP feature if the
disadvantage of having it is greater than the advantage.
Bill
To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-current" in the body of the message
