[root@bb2k137738 admin]# tcpdump -i any esp and host 10.10.55.1 -e
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on any, link-type LINUX_SLL (Linux cooked), capture size 262144 bytes
11:57:02.037477  In 00:04:df:5c:de:f9 (oui Unknown) ethertype 802.1Q (0x8100), length 176: vlan 350, p 0, ethertype IPv4, 10.10.55.1 > 10.165.112.248: ESP(spi=0xc08ae54d,seq=0xb03), length 136
11:57:02.037477  In 00:04:df:5c:de:f9 (oui Unknown) ethertype 802.1Q (0x8100), length 176: vlan 350, p 0, ethertype IPv4, 10.10.55.1 > 10.165.112.248: ESP(spi=0xc08ae54d,seq=0xb03), length 136
11:57:02.037477  In 00:04:df:5c:de:f9 (oui Unknown) ethertype IPv4 (0x0800), length 172: 10.10.55.1 > 10.165.112.248: ESP(spi=0xc08ae54d,seq=0xb03), length 136
11:57:03.063989  In 00:04:df:5c:de:f9 (oui Unknown) ethertype 802.1Q (0x8100), length 176: vlan 350, p 0, ethertype IPv4, 10.10.55.1 > 10.165.112.248: ESP(spi=0xc08ae54d,seq=0xb04), length 136
11:57:03.063989  In 00:04:df:5c:de:f9 (oui Unknown) ethertype 802.1Q (0x8100), length 176: vlan 350, p 0, ethertype IPv4, 10.10.55.1 > 10.165.112.248: ESP(spi=0xc08ae54d,seq=0xb04), length 136
11:57:03.063989  In 00:04:df:5c:de:f9 (oui Unknown) ethertype IPv4 (0x0800), length 172: 10.10.55.1 > 10.165.112.248: ESP(spi=0xc08ae54d,seq=0xb04), length 136
11:57:04.088052  In 00:04:df:5c:de:f9 (oui Unknown) ethertype 802.1Q (0x8100), length 176: vlan 350, p 0, ethertype IPv4, 10.10.55.1 > 10.165.112.248: ESP(spi=0xc08ae54d,seq=0xb05), length 136
11:57:04.088052  In 00:04:df:5c:de:f9 (oui Unknown) ethertype 802.1Q (0x8100), length 176: vlan 350, p 0, ethertype IPv4, 10.10.55.1 > 10.165.112.248: ESP(spi=0xc08ae54d,seq=0xb05), length 136
11:57:04.088052  In 00:04:df:5c:de:f9 (oui Unknown) ethertype IPv4 (0x0800), length 172: 10.10.55.1 > 10.165.112.248: ESP(spi=0xc08ae54d,seq=0xb05), length 136
11:57:05.109613  In 00:04:df:5c:de:f9 (oui Unknown) ethertype 802.1Q (0x8100), length 176: vlan 350, p 0, ethertype IPv4, 10.10.55.1 > 10.165.112.248: ESP(spi=0xc08ae54d,seq=0xb06), length 136
11:57:05.109613  In 00:04:df:5c:de:f9 (oui Unknown) ethertype 802.1Q (0x8100), length 176: vlan 350, p 0, ethertype IPv4, 10.10.55.1 > 10.165.112.248: ESP(spi=0xc08ae54d,seq=0xb06), length 136
11:57:05.109613  In 00:04:df:5c:de:f9 (oui Unknown) ethertype IPv4 (0x0800), length 172: 10.10.55.1 > 10.165.112.248: ESP(spi=0xc08ae54d,seq=0xb06), length 136
11:57:06.133501  In 00:04:df:5c:de:f9 (oui Unknown) ethertype 802.1Q (0x8100), length 176: vlan 350, p 0, ethertype IPv4, 10.10.55.1 > 10.165.112.248: ESP(spi=0xc08ae54d,seq=0xb07), length 136
11:57:06.133501  In 00:04:df:5c:de:f9 (oui Unknown) ethertype 802.1Q (0x8100), length 176: vlan 350, p 0, ethertype IPv4, 10.10.55.1 > 10.165.112.248: ESP(spi=0xc08ae54d,seq=0xb07), length 136
11:57:06.133501  In 00:04:df:5c:de:f9 (oui Unknown) ethertype IPv4 (0x0800), length 172: 10.10.55.1 > 10.165.112.248: ESP(spi=0xc08ae54d,seq=0xb07), length 136
11:57:07.157430  In 00:04:df:5c:de:f9 (oui Unknown) ethertype 802.1Q (0x8100), length 176: vlan 350, p 0, ethertype IPv4, 10.10.55.1 > 10.165.112.248: ESP(spi=0xc08ae54d,seq=0xb08), length 136
11:57:07.157430  In 00:04:df:5c:de:f9 (oui Unknown) ethertype 802.1Q (0x8100), length 176: vlan 350, p 0, ethertype IPv4, 10.10.55.1 > 10.165.112.248: ESP(spi=0xc08ae54d,seq=0xb08), length 136
11:57:07.157430  In 00:04:df:5c:de:f9 (oui Unknown) ethertype IPv4 (0x0800), length 172: 10.10.55.1 > 10.165.112.248: ESP(spi=0xc08ae54d,seq=0xb08), length 136
11:57:08.181499  In 00:04:df:5c:de:f9 (oui Unknown) ethertype 802.1Q (0x8100), length 176: vlan 350, p 0, ethertype IPv4, 10.10.55.1 > 10.165.112.248: ESP(spi=0xc08ae54d,seq=0xb09), length 136
11:57:08.181499  In 00:04:df:5c:de:f9 (oui Unknown) ethertype 802.1Q (0x8100), length 176: vlan 350, p 0, ethertype IPv4, 10.10.55.1 > 10.165.112.248: ESP(spi=0xc08ae54d,seq=0xb09), length 136
11:57:08.181499  In 00:04:df:5c:de:f9 (oui Unknown) ethertype IPv4 (0x0800), length 172: 10.10.55.1 > 10.165.112.248: ESP(spi=0xc08ae54d,seq=0xb09), length 136
11:57:09.205496  In 00:04:df:5c:de:f9 (oui Unknown) ethertype 802.1Q (0x8100), length 176: vlan 350, p 0, ethertype IPv4, 10.10.55.1 > 10.165.112.248: ESP(spi=0xc08ae54d,seq=0xb0a), length 136
11:57:09.205496  In 00:04:df:5c:de:f9 (oui Unknown) ethertype 802.1Q (0x8100), length 176: vlan 350, p 0, ethertype IPv4, 10.10.55.1 > 10.165.112.248: ESP(spi=0xc08ae54d,seq=0xb0a), length 136
11:57:09.205496  In 00:04:df:5c:de:f9 (oui Unknown) ethertype IPv4 (0x0800), length 172: 10.10.55.1 > 10.165.112.248: ESP(spi=0xc08ae54d,seq=0xb0a), length 136
^C
24 packets captured
3200 packets received by filter
2914 packets dropped by kernel