> My only concern in this case is what happens at the decapsulator > if an ECT/CE codepoint is set in the inner header but the outer > header contains Not-ECT. Which one do we trust, in that case, > and should the behavior be documented? Section 9.1 in RFC 3168 already documents this. Erik