Re: [FW1] proto esp

[CryptoTech <cryptotech@FW1-NOSPAMgmx.de>]

Encapsulated Service Payload.  It is a VPN packet.  My guess is that prot.the-innocent.com is a name given to a network
object, and alex is the remote peer.  Judging by the length of the packet, it looks to be an Security Association
negotiation.

CryptoTech

Hans-Joachim Hoetger wrote:

> Hello
> Please have a look at a line from our FW-Logfile:
>
> 11:40:05 accept our-firewall >hme0 proto esp src prot.the-innocent.com dst alex service 52027 s_port 3 len 152 rule 62
>
> What is 'proto esp'?
> Thank you
> --
> Hans-Joachim Hoetger              voice: +49-5241-80-88990
> mediaWays GmbH                        NMW-T1 (Technologie)
>
> "Gut ist auch des Emporkommen von Linux als Herausforderer
> von Microsoft."       Angela Merkel (Die Zeit, 4.Mai 2000)
>
> ================================================================================
>      To unsubscribe from this mailing list, please see the instructions at
>                http://www.checkpoint.com/services/mailing.html
> ================================================================================



================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================