tcpdump and decrypting esp packets

[aleonhardt]

Hi,

I try to decrypt esp packets now since a few days, but I don't see the real, encapsulated packets.. only ESP packets..

I donwloaded the lateste tcpdump, libpcap and openssl. I build tcpdump with decrypt/encrypt capabilities. If you want, I could post the config-options.

I tried this command :

tcpdump -i eth0 -vv -E desassword esp host <ipaddressofthedestinationhost>

Respond :
tcpdump: 'esp' modifier applied to host

I tried this command :

tcpdump -i eth0 -vv -E desassword

Respond after establishing the tunnel and some pings :

tcpdump: listening on eth0, link-type EN10MB (Ethernet), capture size 96 bytes
0 packets captured
0 packets received by filter
0 packets dropped by kernel

-------
I don't know what's wrong.. I enter the password in "plain-text" as I would set it in the SafeNet client ...

Hope anybody can help ..

Thanks,
Alex