Encapsulating Security Payload (ESP)
Next Header (8 bits)
- Identifies the type of data contained in the payload data field by identifying the first header in that payload (for example, an upper-layer protocol such as TCP)
Authentication Data (variable)
- A variable-length field (must be an integral number of 32-bit words) that contains the integrity check value computed over the ESP packet minus the Authentication Data field