<div dir="ltr">Hi Strong Swan:)<div><br></div><div>I am a new to SS and have a question regarding the counters.</div><div>I could find the IKE counters in stroke_counter.h in libcharon.</div><div><br></div><div>enum stroke_counter_type_t {</div>
<div> /** initiated IKE_SA rekeyings */</div><div> COUNTER_INIT_IKE_SA_REKEY,</div><div> /** responded IKE_SA rekeyings */</div><div> COUNTER_RESP_IKE_SA_REKEY,</div><div> /** completed CHILD_SA rekeyings */</div>
<div> COUNTER_CHILD_SA_REKEY,</div><div> /** messages with invalid types, length, or a value out of range */</div><div> COUNTER_IN_INVALID,</div><div> /** messages with an invalid IKE SPI */</div>
<div> COUNTER_IN_INVALID_IKE_SPI,</div><div> ....</div><div><br></div><div>But I am wondering where I can find IPSEC tunnel related counters. Such as OutDiscNoSa, the number of outgoing packets that are discarded because SA is not present, or InPkts, the number of incoming packets for a particular tunnel.<br clear="all">
<div><br></div>-- <br>Best regards<br>Sima Hooshyar<br><br>
</div></div>