[strongSwan] tcpdump of ping over ipsec transport

[tal anker]

Hi,
I have two machines, with ipsec configured to encrypt every packet going
between the two (transport esp), with pre-shared key.

When I ping machine A from machine B, and I do 'tcpdump -i <dev> esp ‘  I
dont see ESP packets going bi directional but rather only the replies from
B to A. Is this the expected behavior of tcpdump in that case?
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.strongswan.org/pipermail/users/attachments/20200323/a96a6eec/attachment.html>