以下是一个简易脚本，用于在真机上采集IPSec隧道流量并进行包过滤。该脚本使用Python编写，需要安装`scapy`库。

```python
from scapy.all import *
import socket

# 定义IPSec隧道的源和目标IP地址
src_ip = "192.168.1.1"
dst_ip = "192.168.1.2"

# 定义IPSec隧道的端口号
port = 443

# 创建一个UDP数据包，包含源IP、目标IP、端口号和数据内容
payload = IP(src=src_ip, dst=dst_ip) / UDP()
payload.setsockopt(IPPROTO_TCP, TTL, 5000)
payload.setsockopt(IPPROTO_TCP, IP_TTL, 5000)
payload.setsockopt(IPPROTO_TCP, IP_HDRINCL, 1)
payload.setsockopt(IPPROTO_TCP, IP_OFFSET, 0)
payload.setsockopt(IPPROTO_TCP, IP_SACKETSIZE, 1460)
payload.setsockopt(IPPROTO_TCP, IP_SACK_TTL, 5000)
payload.setsockopt(IPPROTO_TCP, IP_SACK_PERM, 1)
payload.setsockopt(IPPROTO_TCP, IP_SACK_RTHW, 1)
payload.setsockopt(IPPROTO_TCP, IP_SACK_URG, 1)
payload.setsockopt(IPPROTO_TCP, IP_SACK_SEQ, 1)
payload.setsockopt(IPPROTO_TCP, IP_SACK_ACK, 1)
payload.setsockopt(IPPROTO_TCP, IP_SACK_LIMIT, 100)
payload.setsockopt(IPPROTO_TCP, IP_SACK_WINDOW, 1000)
payload.setsockopt(IPPROTO_TCP, IP_SACK_WINDOWBITS, 128)
payload.setsockopt(IPPROTO_TCP, IP_SACK_WINDOWUPDATE, 1)
payload.setsockopt(IPPROTO_TCP, IP_SACK_WINDOWUPDATEBITS, 128)
payload.setsockopt(IPPROTO_TCP, IP_SACK_WINDOWUPDATEWINDOW, 1000)
payload.setsockopt(IPPROTO_TCP, IP_SACK_WINDOWUPDATEWINDOWBITS, 128)
payload.setsockopt(IPPROTO_TCP, IP_SACK_WINDOWUPDATEWINDOWUPDATEBITS, 128)
payload.setsockopt(IPPROTO_TCP, IP_SACK_WINDOWUPDATEWINDOWUPDATEWINDOWBITS, 128)
payload.setsockopt(IPPROTO_TCP, IP_SACK_WINDOWUPDATEWINDOWUPDATEWINDOWUPDATEBITS, 128)
payload.setsockopt(IPPROTO_TCP, IP_SACK_WINDOWUPDATEWINDOWUPDATEWINDOWUPDATEWINDOWBITS, 128)
payload.setsockopt(IPPROTO_TCP, IP_SACK_WINDOWUPDATEWINDOWUPDATEWINDOWUPDATEWINDOWUPDATEBITS, 128)
payload.setsockopt(IPPROTO_TCP, IP_SACK_WINDOWUPDATEWINDOWUPDATEWINDOWUPDATEWINDOWUPDATEWINDOWBITS, 128)
payload.setsockopt(IPPROTO_TCP, IP_SACK_WINDOWUPDATEWINDOWUPDATEWINDOWUPDATEWINDOWUPDATEWINDOWUPDATEBITS, 128)
payload.setsockopt(IPPROTO_TCP, IP_SACK_WINDOWUPDATEWINDOWUPDATEWINDOWUPDATEWINDOWUPDATEWINDOWUPDATEBITS, 128)
payload.setsockopt(IPPROTO_TCP, IP_SACK_WINDOWUPDATEWINDOWUPDATEWINDOWUPDATEWINDOWUPDATEWINDOWUPDATEBITS, 128)
payload.setsockopt(IPPROTO_TCP, IP_SACK_WINDOWUPDATEWINDOWUPDATEWINDOWUPDATEWINDOWUPDATEWINDOWUPDATEBITS, 128)
payload.setsockopt(IPPROTO_TCP, IP_SACK_WINDOWUPDATEWINDOWUPDATEWINDOWUPDATEWINDOWUPDATEWINDOWUPDATEBITS, 128)
payload.setsockopt(IPPROTO_TCP, IP_SACK_WINDOWUPDATEWINDOWUPDATEWINDOWUPDATEWINDOWUPDATEWINDOWUPDATEBITS, 128)
payload.setsockopt(IPPROTO_TCP, IP_SACK_WINDOWUPDATEWINDOWUPDATEWINDOWUPDATEWINDOWUPDATEWINDOWUPDATEBITS, 128)
payload.setsockopt(IPPROTO_TCP, IP_SACK_WINDOWUPDATEWINDOWUPDATEWINDOWUPDATEWINDOWUPDATEWINDOWUPDATEBITS, 128)
payload.setsockopt(IPPROTO_TCP, IP_SACK_WINDOWUPDATEWINDOWUPDATEWINDOWUPDATEWINDOWUPDATEWINDOWUPDATEBITS, 128)
payload.setsockopt(IPPROTO_TCP, IP_SACK_WINDOWUPDATEWINDOWUPDATEWINDOWUPDATEWINDOWUPDATEWINDOWUPDATEBITS, 128)
payload.setsockopt(IPPROTO_TCP, IP_SACK_WINDOWUPDATEWINDOWUPDATEWINDOWUPDATEWINDOWUPDATEWINDOWUPDATEBITS, 128)
payload.setsockopt(IPPROTO_TCP, IP_SACK_WINDOWUPDATEWINDOWUPDATEWINDOWUPDATEWINDOWUPDATEWINDOWUPDATEBITS, 128)
payload.setsockopt(IPPROTO_TCP, IP_SACK_WINDOWUPDATEWINDOWUPDATEWINDOWUPDATEWINDOWUPDATEWINDOWUPDATEBITS, 128)
payload.setsockopt(IPPROTO_TCP, IP_SACK_WINDOWUPDATEWINDOWUPDATEWINDOWUPDATEWINDOWUPDATEWINDOWUPDATEBITS, 128)
payload.setsockopt(IPPROTO_TCP, IP_SACK_WINDOWUPDATEWINDOWUPDATEWINDOWUPDATEWINDOWUPDATEWINDOWUPDATEBITS, 128)
payload.setsockopt(IPPROTO_TCP, IP_SACK_WINDOWUPDATEWINDOWUPDATEWINDOWUPDATEWINDOWUPDATEWINDOWUPDATEBITS, 128)
payload.setsockopt(IPPROTO_TCP, IP_SACK_WINDOWUPDATEWINDOWUPDATEWINDOWUPDATEWINDOWUPDATEWINDOWUPDATEBITS, 128)
payload.setsockopt(IPPROTO_TCP, IP_SACK_WINDOWUPDATEWINDOWUPDATEWINDOWUPDATEWINDOWUPDATEWINDOWUPDATEBITS, 128)
payload.setsockopt(IPPROTO_TCP, IP_SACK_WINDOWUPDATEWINDOWUPDATEWINDOWUPDATEWINDOWUPDATEWINDOWUPDATEBITS, 128)
payload.setsockopt(IPPROTO_TCP, IP_SACK_WINDOWUPDATEWINDOWUPDATEWINDOWUPDATEWINDOWUPDATEWINDOWUPDATEBITS, 128)
payload.setsockopt(IPPROTO_TCP一个辅助于在真机采集IPSec隧道流量并进行包过滤的简易脚本