[Openswan dev] RFC: Changes to whack's --status output

Paul Wouters paul at xtdnet.nl
Thu Dec 2 15:22:31 CET 2004


On Thu, 2 Dec 2004, Herbert Xu wrote:

> mcr at xelerance.com wrote:
>>
>>  Systems with ipsecX devices can trivially get tunnel stats by looking
>> at the ipsecX stats. (that's one of the reasons to have this device!)

Herbert wrote:

> Systems without ipsecX can get even more granular stats by running
> ip(8) or setkey(8):

Seems to me that we need ipsec whack --statistics that unifies both.

Ofcourse, even better IMHO would be to unify the stacks. that is one
stack natively in the kernel tree, with netlink,pmtu,packet caching,
optional virtual devices, ipv6, cryptoapi, async/sync, mast device 
properties, longest prefix match, nat-t support.

Maybe I can ask Santa ? :)

Paul


More information about the Dev mailing list