On Tue, Dec 04, 2007 at 10:31:02AM -0500, Shahram Amini-Didani wrote:
> Would you please explain what the cache stats mean in the following
> netstat capture?
> 
> Is there options to enable cache look ups?
> 
> mpc8349e# netstat -p ipsec
> (Fast) IPsec:
>         0 no SA found (output)
>         0 no memory available (output)
>         0 no route available (output)
>         0 generic errors (output)
>         3 bundled SA processed (output)
>         3644 SPD cache lookups
>         3644 SPD cache misses
> 
> IPsec ah:
>         148 ah input packets processed
>         150 ah output packets processed
>         0 ah headers too short
>         0 ah headers for unsupported address family
>         0 ah packets with no SA
>         0 ah packets dropped by crypto returning NULL mbuf
> ...
> 

It's a bug: PR 53840.  Fixed.

-seanb