<html>
<head>
<style><!--
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 12pt;
font-family:Calibri
}
--></style></head>
<body class='hmmessage'><div dir='ltr'>Hello,<div><br></div><div>After updating to openswan 2.6.43, 'ipsec eroute' will have duplicate tunnels when I stopped other side ipsec. 'ipsec spi' only has one tunnel though. Will this behavior have performance/function impact if the number accumulated to a huge list?</div><div><br></div><div>Any help would be great. Thanks.</div><div><br></div><div><div>[d2 ~]# ipsec eroute</div><div>0 172.31.6.0/24 -> 192.168.162.0/24 => tun0x1006@10.50.11.95</div><div>0 172.31.6.0/24 -> 192.168.162.0/24 => tun0x1006@10.50.11.95</div><div><br></div><div><div>[d2 ~]# ipsec spi</div><div>tun0x1005@10.50.8.209 IPIP: dir=in src=10.50.11.95 policy=192.168.162.0/24->172.31.6.0/24 flags=0x8<> life(c,s,h)=addtime(504,0,0) natencap=none natsport=0 natdport=0 refcount=3 ref=8 refhim=1</div><div>esp0x93fc3837@10.50.11.95 ESP_AES_HMAC_SHA1: dir=out src=10.50.8.209 iv_bits=128bits iv=0x2cf022f6a985517d98e40947758eb5a5 ooowin=64 alen=160 aklen=160 eklen=128 life(c,s,h)=addtime(504,0,0) natencap=none natsport=0 natdport=0 refcount=3 ref=10 refhim=0</div><div>tun0x1006@10.50.11.95 IPIP: dir=out src=10.50.8.209 life(c,s,h)=addtime(504,0,0) natencap=none natsport=0 natdport=0 refcount=3 ref=1 refhim=0</div><div>esp0xcbda1983@10.50.8.209 ESP_AES_HMAC_SHA1: dir=in src=10.50.11.95 iv_bits=128bits iv=0x576ca30e1ba7bf22e27561168b26e236 ooowin=64 alen=160 aklen=160 eklen=128 life(c,s,h)=addtime(504,0,0) natencap=none natsport=0 natdport=0 refcount=3 ref=9 refhim=1</div></div><div><br></div><br><font style="font-size:10pt;" size="2" face="Arial"><span style="font-family:Courier New,Courier,Monospace;">Feng Dai """""</span></font><font style="font-size:10pt;" size="2" face="Arial"><br style="font-family:Courier New,Courier,Monospace;"></font><font style="font-size:10pt;" size="2" face="Arial"><span style="font-family:Courier New,Courier,Monospace;"> ( @ @ )</span></font><font style="font-size:10pt;" size="2" face="Arial"><br style="font-family:Courier New,Courier,Monospace;"></font><font style="font-size:10pt;" size="2" face="Arial"><span style="font-family:Courier New,Courier,Monospace;">---------------------------oOo--(_)--oOo-------</span></font><font style="font-size:10pt;" size="2" face="Arial"><br style="font-family:Courier New,Courier,Monospace;"></font><font style="font-size:10pt;" size="2" face="Arial"><span style="height:15px;color:gray;font-size:10px;" id="ecxecxEC_EC_EC_stationSharingUrl"></span></font><font style="font-size:10pt;" size="2" face="Arial"><span style="font-family:Courier New,Courier,Monospace;"><a href="http://www.pandora.com/?sc=sh126158488288332491" target="_blank">http://www.pandora.com/?sc=sh126158488288332491</a><br></span></font><font style="font-size:10pt;" size="2" face="Arial"><span style="font-family:Courier New,Courier,Monospace;">===============================================</span></font><br></div> </div></body>
</html>