bin/47744: netstat -s stops output prematurely when ipsec is not compiled in

[kardel%netbsd.org@localhost]

>Number:         47744
>Category:       bin
>Synopsis:       netstat -s stops output prematurely when ipsec is not compiled 
>in
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    bin-bug-people
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Mon Apr 15 20:10:00 +0000 2013
>Originator:     Frank Kardel
>Release:        NetBSD 6.99.19
>Organization:
        
>Environment:
System: NetBSD cerberus.kardel.name 6.99.19 NetBSD 6.99.19 (CERBERUS) #1: Mon 
Apr 15 21:37:55 CEST 2013 
kardel%pip.kardel.name@localhost:/src/obj.i386/sys/arch/i386/compile/CERBERUS 
i386
Architecture: i386
Machine: i386
>Description:
        On kernels without ipsec (e. g. GENERIC) netstat -s stops output when 
ipsec stats 
        cannnot be read. This suppresses other statistics such as IPv6 status.

icmp:
        287 calls to icmp_error
        3 errors not generated because old message was icmp
        Output histogram:
[... snip ...]
ip:
        10058246 total packets received
        0 bad header checksums
        0 with size smaller than minimum
        0 with data size < data length
        0 with length > max ip packet size
        0 with header length < data size
        0 with data length < header length
        0 with bad options
        0 with incorrect version number
        332 fragments received
        0 fragments dropped (dup or out of space)
        0 fragments dropped (out of ipqent)
        0 malformed fragments dropped
        0 fragments dropped after timeout
        163 packets reassembled ok
        4494978 packets for this host
        0 packets for unknown/unsupported protocol
        5560577 packets forwarded (0 packets fast forwarded)
        941 packets not forwardable
        0 redirects sent
        0 packets no matching gif found
        4834215 packets sent from this host
        245 packets sent with fabricated ip header
        0 output packets dropped due to no bufs, etc.
        0 output packets discarded due to no route
        78 output datagrams fragmented
        82 fragments created
        0 datagrams that can't be fragmented
        0 datagrams with bad address in header
netstat: net.inet.ipsec.ipsecstats: No such file or directory
[... other statistics missing ...]

>How-To-Repeat:
        Try netstat -s on a GENERIC kernel.

>Fix:
        netstat