Counters

Table 9 lists the counters introduced by the IPsec feature.

Table 9 Counters
Counter Description
pmOutDroppedPacketsPolicyControl Indicates the number of transmitted inner IP datagrams
which are dropped because of mismatch of the policy rules
for any tunnel.
pmChildSaRekey Indicates the number of completed Child SA rekeyings.
pmInAuthReq Indicates the number of received IKE authentication requests.
pmInAuthRsp Indicates the number of received IKE authentication
responses.
pmInCrChildReq Indicates the number of received IKE Create Child SA
requests.
pmInCrChildRsp Indicates the number of received IKE Create Child SA
responses.
pmInInfoReq Indicates the number of received IKE information requests.
pmInInfoRsp Indicates the number of received IKE information responses.
pmInInitReq Indicates the number of received IKE initial requests.
pmInInitRsp Indicates the number of received IKE initial responses.
pmInInvalid Indicates the number of received IKE messages with invalid
types, invalid length, or a value that is out of range.
pmInInvalidSpi Indicates the number of received IP or ESP packets with SPI
that does not match an existing SA.
pmOutAuthReq Indicates the number of sent IKE authentication requests.
pmOutAuthRsp Indicates the number of sent IKE authentication responses.
pmOutCrChildReq Indicates the number of sent IKE Create Child SA requests.
pmOutCrChildRsp Indicates the number of sent IKE Create Child SA responses.
pmOutInfoReq Indicates the number of sent IKE information requests.
pmOutInfoRsp Indicates the number of sent IKE information responses.
pmOutInitReq Indicates the number of sent IKE initial requests.
pmOutInitRsp Indicates the number of sent IKE initial responses.
pmInDiscAReFail Indicates the number of incoming packets (after reassembly)
which are discarded because of failed anti-replay check.
pmInDiscDec Indicates the number of incoming packets (after reassembly)
which are discarded because of failure in decryption.
pmInDiscIntCh Indicates the number of incoming packets (after reassembly)
which are discarded because of failure in integrity check.
pmInDiscNoSa Indicates the number of incoming packets, which are
discarded because of mismatch of the traffic selectors for the
Child SA through which they are received.
pmInEspData Indicates the number of MB of incoming data which are
processed by ESP.
pmInPkt Indicates the number of incoming packets for the tunnel.
pmOutDiscNoSa Indicates the number of outgoing packets which are
discarded because the applicable SA is not established.
pmOutDiscSeqOw Indicates the number of outgoing packets which are
discarded because of sequence number overflow.
pmOutEspData Indicates the number of MB of outgoing data which are
processed by ESP.
pmOutPkt Indicates the number of outgoing packets for the tunnel.
More information about counters can be found in Managed Object Model RNC and
Managed Object Model RBS.