> No I meant the exact output of ip x p and ip x s.

I know, but as I end up every time with a tainted kernel on our
production server I didn't turn ipcomp on, but now I got it.

src Net_B dst A
        dir in priority 2088 
        tmpl src B dst A
                proto comp reqid 16394 mode tunnel
                level use 
        tmpl src 0.0.0.0 dst 0.0.0.0
                proto esp reqid 16393 mode transport
src Net_B dst Net_A
        dir in priority 2344 
        tmpl src B dst A
                proto comp reqid 16390 mode tunnel
                level use 
        tmpl src 0.0.0.0 dst 0.0.0.0
                proto esp reqid 16389 mode transport
src A dst Net_B 
        dir out priority 2088 
        tmpl src A dst B
                proto comp reqid 16394 mode tunnel
        tmpl src 0.0.0.0 dst 0.0.0.0
                proto esp reqid 16393 mode transport
src Net_A dst Net_B
        dir out priority 2344 
        tmpl src A dst B
                proto comp reqid 16390 mode tunnel
        tmpl src 0.0.0.0 dst 0.0.0.0
                proto esp reqid 16389 mode transport
src Net_B dst A
        dir fwd priority 2088 
        tmpl src B dst A
                proto comp reqid 16394 mode tunnel
                level use 
        tmpl src 0.0.0.0 dst 0.0.0.0
                proto esp reqid 16393 mode transport
src Net_B dst Net_A
        dir fwd priority 2344 
        tmpl src B dst A
                proto comp reqid 16390 mode tunnel
                level use 
        tmpl src 0.0.0.0 dst 0.0.0.0
                proto esp reqid 16389 mode transport

src A dst B
        proto comp spi 0x0000427e reqid 16390 mode tunnel
        replay-window 0 
        comp deflate 0x
        sel src 0.0.0.0/0 dst 0.0.0.0/0 
src B dst A
        proto comp spi 0x0000ecf0 reqid 16390 mode tunnel
        replay-window 0 
        comp deflate 0x
        sel src 0.0.0.0/0 dst 0.0.0.0/0 
src A dst B
        proto esp spi 0x53f15e96 reqid 16389 mode transport
        replay-window 32 
        auth hmac(sha1) 0x...
        enc cbc(aes) 0x...
        sel src 0.0.0.0/0 dst 0.0.0.0/0 
src B dst A
        proto esp spi 0x7b329066 reqid 16389 mode transport
        replay-window 32 
        auth hmac(sha1) 0...
        enc cbc(aes) 0x...
        sel src 0.0.0.0/0 dst 0.0.0.0/0 
src A dst B
        proto (null) spi 0x53ec987a reqid 0 mode tunnel
        replay-window 0 
        sel src 0.0.0.0/0 dst 0.0.0.0/0 
src B dst A
        proto (null) spi 0xc19ef67c reqid 0 mode tunnel
        replay-window 0 
        sel src 0.0.0.0/0 dst 0.0.0.0/0 
src A dst B
        proto comp spi 0x00001314 reqid 16394 mode tunnel
        replay-window 0 
        comp deflate 0x
        sel src 0.0.0.0/0 dst 0.0.0.0/0 
src B dst A
        proto comp spi 0x000032ff reqid 16394 mode tunnel
        replay-window 0 
        comp deflate 0x
        sel src 0.0.0.0/0 dst 0.0.0.0/0 
src A dst B
        proto esp spi 0xec7d12de reqid 16393 mode transport
        replay-window 32 
        auth hmac(sha1) 0x...
        enc cbc(aes) 0x...
        sel src 0.0.0.0/0 dst 0.0.0.0/0 
src B dst A
        proto esp spi 0x75016d2d reqid 16393 mode transport
        replay-window 32 
        auth hmac(sha1) 0x...
        enc cbc(aes) 0x...
        sel src 0.0.0.0/0 dst 0.0.0.0/0 
--
To unsubscribe from this list: send the line "unsubscribe netdev" in
the body of a message to [EMAIL PROTECTED]
More majordomo info at  http://vger.kernel.org/majordomo-info.html

Reply via email to