gabriel montenegro writes: > Your point below about Next Header being useful is specially > valuable as it is from someone involved in developing these boxes.
If the box can do IPv6 header processing (which do require similar offset calculations) to find the WESP header in the first place, then doing packet length - ICV length (from packet) and get byte from there is not that complicated and hardware can most likely do that already. And I hope nobody is designing new hardware now which cannot do IPv6 processing... -- kivi...@iki.fi _______________________________________________ IPsec mailing list IPsec@ietf.org https://www.ietf.org/mailman/listinfo/ipsec
