Subject: Re: [PATCH][XFRM] export SAD info

From: David Miller <[email-masked]>
Date: Thu, 26 Apr 2007 00:10:50 -0700 (PDT)

From: jamal <[email-masked]>
Date: Wed, 25 Apr 2007 11:42:41 -0400

> [XFRM] export SAD info
> 
> On a system with a lot of SAs, counting SAD entries chews useful
> CPU time since you need to dump the whole SAD to user space;
> i.e something like ip xfrm state ls | grep -i src | wc -l
> I have seen taking literally minutes on a 40K SAs when the system
> is swapping.
> With this patch, some of the SAD info (that was already being tracked)
> is exposed to user space. i.e you do:
> ip xfrm state count
> And you get the count; you can also pass -s to the command line and
> get the hash info.
> 
> Signed-off-by: Jamal Hadi Salim <[email-masked]>

Applied, thanks Jamal.