On 2009-03-31, Juan Miscaro <jmisc...@gmail.com> wrote: > 14:15:19.913539 (authentic,confidential): SPI 0xcefeac0c: > truncated-ip6 - 48 bytes missing!esp B::2 > A::2 spi 0xF2FC992F seq 30 > len 148 (len 148, hlim 63) # ESP - encapsulated ICMPv6 Echo Reply from > D::1 to C::1. > > [...] > > The 'bytes missing' might be due to the fact that headers are being > stripped off.
look at the -s option of tcpdump.
