[strongSwan] Locating a missing ICMP traffic

Pawel Grzesik pawel.grzesik at brainstorm.co.uk
Wed Mar 5 10:47:52 CET 2014

Hi Adrian,

You can use:

tcpdump -i xxx esp host xxx
to see esp packets.

Aslo command: ip x m will help you find a problem.
Tunnel is established and installed? It need to have status Installed also.


On 4 Mar 2014, at 23:09, Adrian Milanoski <amilanoski at blackberry.com> wrote:

> Hi all,
> I am trying to debug  why I can ping resources in my intranet and it works and then its stops working yet tunnel stays established?
> Is there a way to see if the GW is decrypting my ESP packet and to try and trace where it is going?
> Thanks in advance
> Regards,
> Adrian Milanoski
> Lab Administrator
> BBOS WiFI VPN. Security Testing – R&D
> 4715 Tahoe Blvd, Mississauga, ON, Canada, L4W 0B5
> Tel.(289) 261-5801 | Fax.(905) 629-7836 
> Email  amilanoski at blackberry.com
> <image001.jpg><image002.jpg>
> ---------------------------------------------------------------------
> This transmission (including any attachments) may contain confidential information, privileged material (including material protected by the solicitor-client or other applicable privileges), or constitute non-public information. Any use of this information by anyone other than the intended recipient is prohibited. If you have received this transmission in error, please immediately reply to the sender and delete this information from your system. Use, dissemination, distribution, or reproduction of this transmission by unintended recipients is not authorized and may be unlawful.
> _______________________________________________
> Users mailing list
> Users at lists.strongswan.org
> https://lists.strongswan.org/mailman/listinfo/users

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.strongswan.org/pipermail/users/attachments/20140305/cc1fbb18/attachment-0001.html>

More information about the Users mailing list