gif(4) and bpf(4)

[Alex]

Hello,

Since we see ESP traffic directly on the ep0 interface, packets are not 
going through gif0 as stated in the routing table. IPsec SPD is 
overriding the routing table, can you check (provide us) with setkey 
-DP and setkey -D if no SPD is present from your net to 192.168.4.0/24 
?

Regards, Alex.

> Yes they are (network on the other side of the tunnel is 
> 192.168.4.0/24) :
> %%%
>   yoda:tools# netstat -rnf inet
>   Routing tables
>
>   Internet:
>   Destination        Gateway            Flags    Refs      Use  Netif 
> Expire
>   default            <hidden gw>        UGSc       24 17513460    ep0
> [...]
>   192.168.4          192.168.4.13       UGSc        0   691911   gif0
>   192.168.4.13       192.168.1.1        UH          3     6949   gif0