[strongSwan] SA establishment is trigerred by icmp traffic, when the rule is added for udp

[divya mohan]

Hi,

> The reason is that the ping utility binds a UDP socket to probe for a source address.
> While no traffic is actually sent, this is sufficient to trigger an acquire by the kernel.

Thanks for the information.

However, I noticed that the behaviour is same the other way also.
i.e, if rule is added for ICMP, and UDP traffic is sent, then also SA
entry is getting created (but not being used).
What could be causing this?

Regards,
Divya