strongSwan

strongSwan is setup as responder for road-warriers with eap-radius authentication.

I'm looking at the output of "ipsec listcounters" and something is strange with ikeInInitReq (1009046) and ikeOutInitRsp (2018092) - why are there twice Responses than Requests ?

By reviewing the logs we see that number of IKE_SA_INIT Requests and Responses are identical...

<pre>


# ipsec listcounters

List of IKE counters:

ikeInitRekey 3083
ikeRspRekey 0
ikeChildSaRekey 159
ikeInInvalid 37027
ikeInInvalidSpi 373716
*ikeInInitReq 1009046*
ikeInInitRsp 0
ikeOutInitReq 0
*ikeOutInitRsp 2018092*
ikeInAuthReq 2144571
ikeInAuthRsp 0
ikeOutAuthReq 0
ikeOutAuthRsp 2144565
ikeInCrChildReq 159
ikeInCrChildRsp 3083
ikeOutCrChildReq 3095
ikeOutCrChildRsp 159
ikeInInfoReq 4843345
ikeInInfoRsp 5479160
ikeOutInfoReq 5603133
ikeOutInfoRsp 4843345
</pre>



Any ideas ? am I missing something ?

Thanks,
Danny