ipsec on multicore VM

[Victor Gamov]

Hi All

I have FreeBSD 11.2-STABLE #0 r343863 VM with 2 CPU and vxnet3 NIC. 
This host uses many if_ipsec and strongswan-5.7.2 to make site-to-site 
ipsec connections.

When I use `tcpdump -nn -i <ext_iface> src <site1_ext_ip> and esp` then 
I got many reordered IPsec packets.

Does tcpdump give me a real picture and I have reordering somewhere "on 
the wire" or packets may be reordered due more then one CPU read 
packets from NIC ?

-- 
CU,
Victor Gamov