Re: [Ipsec-tools-users] ipsec statistics

[Mick <mic...@gm...>]

Hi Dmitry,

On Friday 10 Apr 2015 06:04:50 Dmitry Melekhov wrote:
> Hello!
> 
> May be my question is more linux related, then ipsec-tools related, but ...
> Could you tell me is it possible to get encrypted/decrypted/errors
> packets on ipsec session,
> like in cisco by using
> sh crypto ipsec sa
> ?
> 
> Thank you!

I do not know of a command in Linux which will show the same output.  There 
are the ip commands:

ip -s xfrm [state|policy|monitor]

ip -s a s


and the ipsec-tools specific commands:

racoonctl show-sa [isakmp|esp|ah|ipsec]
racoonctl show-event


Please post back if you find something else more akin to what Cisco shows.

-- 
Regards,
Mick