wrstuden@netbsd.org (Bill Studenmund) writes:
> Say I have a tcp connection. How can I tell if there is any IPsec
> protection of that connection? Specifically, how do I tell if there's any
> IPsec protection making it to this box? Tunnels that terminate somewhere
> else along the path don't need to count.

And the other related question, is there some way to know what
credentials are associated with the IPSEC connection on a specific
socket.  

One might not want to extend the same privileges to a socket that was
using opportunistic encryption as some socket that used some secret
showing it was a "trusted" connection.
  
-wolfgang
-- 
Wolfgang S. Rupprecht 		     http://www.wsrcc.com/wolfgang/