K 10
svn:author
V 7
thompsa
K 8
svn:date
V 27
2006-06-26T22:30:08.000000Z
K 7
svn:log
V 352
Add a pseudo interface for packet filtering IPSec connections before or after
encryption. There are two functions, a bpf tap which has a basic header with
the SPI number which our current tcpdump knows how to display, and handoff to
pfil(9) for packet filtering.

Obtained from:	OpenBSD
Based on:	kern/94829
No objections:	arch, net
MFC after:	1 month

END