[Openswan Users] Checking running tunnels with netkey

[Nicole Hähnel]

Hi,

we're using openswan 2.4.11 on SLES10SP1 kernel 2.6.16.54-0.2.3-bigsmp 
and netkey.
In the near future we have to connect about 40 sites,
so I have to monitor round about 40 tunnels on every gateway.
I tried to write a nagios check plugin to be sure that all tunnels are up.

I use this command from init script:
ipsec auto --status 2> /dev/null | grep -i "ipsec sa established" | wc 
-l | sed s/\ //g

But often I get more tunnels up than I have configured.
Any reasons for this behavior?

Is there another command to check how many tunnels are up?

Thanks!

Nicole