[strongSwan] IKE retransmission counters

[Patil, Suresh (Suresh)]

Hi Martin,

I wanted to extend the functionality for Strongswan. Where to register the listeners for these alerts ? Any pointers will be greatly appreciated. 

Thanks
Suresh

-----Original Message-----
From: Martin Willi [mailto:martin at strongswan.org] 
Sent: Thursday, July 17, 2014 2:23 PM
To: Patil, Suresh (Suresh)
Cc: users at lists.strongswan.org
Subject: Re: [strongSwan] IKE retransmission counters

Hi Patil,

> I am running Strongswan with version "Linux strongSwan 
> U4.4.0/K2.6.31.12" and Kernel 2.6.31.12. I wanted to determine how 
> many IKE retransmission have happened in the last one hour.

> 1. How can I determine the same ?

There is currently no such mechanism in strongSwan.

> 2. I see that there are some "ipsec listcounters" command present 
> since
> 5.0.3 ? Does this new listcounters command show the IKE retransmission 
> also ?

No, IKE retransmissions are not covered by these counters.

charon raises alerts for IKE message retransmission, but there is no listener that counts these alerts. You could extend the listcounters functionality if you want to count these events.

Regards
Martin