[Ipsec-tools-users] counters or stats

[Bart R. <lo...@po...>]

Are there any ipsec-related counters or stats exposed that show,
for example, how many packets were dropped due to auth failure,
etc?

I see the kernel maintains a integrity_failed counter in the
xfrm state but I don't see that exposed anywhere like /proc or
netstat -s.

Thanks
-- bart