Jason Thorpe wrote:
> 
> Err, not just "might".  From my vague recollection from IPSEC WG 
> meetings a few years go, this would be a socket that normally carries 
> IKE traffic for the IKE daemon, right?
> 

yes, the nat-t port is the same as ike.