[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

monitoring ipsec tunnels...



Do there exist any products that monitors IPsec tunnels or is there interest
at all in monitoring IPsec tunnels...

There seems to exist ( to name a few ) parameters that seem to be of
interest from monitoring perspective..
A snapshot of an SA on a device ( talking ipsec ) at any give point will
give stats of things like
IPsec send, receive, compression, decompression errors ( Are these device
specific or standard based )

The names are self explanatory, however...

1) what causes these errors ?
2) how can you get rid of them ? ( is it a temporary behavior say during
IPsec renegotiating tunnels ? )
3) what behavioral aspect of the device do these errors represent ?
4) Are they of any concern as far as the overall operation of a tunnel is
concerned ?

Any help is appreciated.

gautam