Interface Configuration Guide 7705 SAR Interfaces
Edition: 01 3HE 11011 AAAC TQZZA 573
 
Table 41 Show MDA Fabric Security Encryption Statistics Output Fields
Label  Description 
IPsec Datapath Statistics
Encrypted packets The total number of packets encrypted by the adapter card to 
be sent out IPSec tunnels
Encrypted bytes The total number of bytes encrypted by the adapter card to be 
sent out IPSec tunnels
Outbound dropped 
packets 
The total number of outbound packets dropped instead of 
encrypted and sent out IPSec tunnels 
Outbound SA misses  The number of Security Association-related mismatches in the 
outbound direction
Outbound policy entry 
misses 
The number of security policy entry mismatches in the 
outbound direction 
Decrypted packets  The total number of decrypted packets 
Decrypted bytes  The total number of decrypted bytes 
Inbound dropped 
packets
The total number packets dropped instead of forwarded 
Inbound SA misses  The number of inbound Security Association-related misses 
(that is, having mismatched security parameter index (SPI) on 
manual keyed tunnel)
Inbound IP dst/src 
mismatches 
The number of security policy entry mismatches in the inbound 
direction due to IP destination or source address mismatches 
Transmit packet errors  The number of generic packet transmit errors
Drop Too Big/Df-set 
Pkts 
The number of packets dropped because the packet is too big 
and the do-not-fragment flag is set 
IPsec Control Statistics (System Wide) 
Static IPsec Tunnels  The number of static IPSec tunnels configured on the 
7705 SAR
Dynamic IPsec Tunnels  Not applicable (always 0)
Encryption/Decryption Queue Statistics 
Decryption Queue Best-effort 
Hi Priority forwarded  The number of packets and octets forwarded by the decryption 
queue for high priority and best effort traffic