Say I have a tcp connection. How can I tell if there is any IPsec
protection of that connection? Specifically, how do I tell if there's any
IPsec protection making it to this box? Tunnels that terminate somewhere
else along the path don't need to count.

Take care,

Bill