diff --git a/connectivity/tests/encryption.go b/connectivity/tests/encryption.go
index b9402a2821..ed7ea41aac 100644
--- a/connectivity/tests/encryption.go
+++ b/connectivity/tests/encryption.go
@@ -13,8 +13,9 @@ import (
 	"sync"
 	"time"
 
-	"github.com/cilium/cilium-cli/connectivity/check"
 	"github.com/cilium/cilium/pkg/defaults"
+
+	"github.com/cilium/cilium-cli/connectivity/check"
 )
 
 type requestType int
@@ -56,7 +57,7 @@ func getInterNodeIface(ctx context.Context, t *check.Test, clientHost *check.Pod
 
 // getSourceAddress determines the source IP address we want to use for
 // capturing packet. If direct routing is used, the source IP is the client IP.
-func getSourceAddress(ctx context.Context, t *check.Test, iface string, client,
+func getSourceAddress(ctx context.Context, t *check.Test, client,
 	clientHost *check.Pod, ipFam check.IPFamily, dstIP string,
 ) string {
 	if tunnelStatus, ok := t.Context().Feature(check.FeatureTunnel); ok &&
@@ -123,7 +124,7 @@ func testNoTrafficLeak(ctx context.Context, t *check.Test, s check.Scenario,
 ) {
 	dstAddr := server.Address(ipFam)
 	iface := getInterNodeIface(ctx, t, clientHost, dstAddr)
-	srcAddr := getSourceAddress(ctx, t, iface, client, clientHost, ipFam, dstAddr)
+	srcAddr := getSourceAddress(ctx, t, client, clientHost, ipFam, dstAddr)
 
 	bgStdout := &safeBuffer{}
 	bgStderr := &safeBuffer{}