Hi guys 
Here is the output of setkey -D command. Would you please tell me why there are double entries of one IP? And if I want to show inbound and outbound entries to user, which of them should I show?

192.168.100.1 172.221.10.2 
esp mode=tunnel spi=53644524(0x03328cec) reqid=0(0x00000000)
created: May  4 08:34:01 2013 current: May  4 08:37:07 2013
        sadb_seq=3 pid=24340 refcnt=1
192.168.100.1 172.221.10.2 
esp mode=tunnel spi=39375239(0x0258d187) reqid=0(0x00000000)
created: May  4 08:34:00 2013 current: May  4 08:37:07 2013
        sadb_seq=2 pid=24340 refcnt=1
172.221.10.2  192.168.100.1 
esp mode=tunnel spi=199300376(0x0be11518) reqid=0(0x00000000)
created: May  4 08:34:01 2013 current: May  4 08:37:07 2013
        sadb_seq=1 pid=24340 refcnt=1   
172.221.10.2  192.168.100.1 
esp mode=tunnel spi=32297398(0x01ecd1b6) reqid=0(0x00000000)
created: May  4 08:34:00 2013 current: May  4 08:37:07 2013
        sadb_seq=0 pid=24340 refcnt=1

Thanks