[Openswan dev] RFC: Changes to whack's --status output
Paul Wouters
paul at xtdnet.nl
Thu Dec 2 15:22:31 CET 2004
On Thu, 2 Dec 2004, Herbert Xu wrote:
> mcr at xelerance.com wrote:
>>
>> Systems with ipsecX devices can trivially get tunnel stats by looking
>> at the ipsecX stats. (that's one of the reasons to have this device!)
Herbert wrote:
> Systems without ipsecX can get even more granular stats by running
> ip(8) or setkey(8):
Seems to me that we need ipsec whack --statistics that unifies both.
Ofcourse, even better IMHO would be to unify the stacks. that is one
stack natively in the kernel tree, with netlink,pmtu,packet caching,
optional virtual devices, ipv6, cryptoapi, async/sync, mast device
properties, longest prefix match, nat-t support.
Maybe I can ask Santa ? :)
Paul
More information about the Dev
mailing list