>>>>> "itojun" == itojun  <itojun@iijlab.net> writes:
    >> (Is there someway to get it to log them?)

    itojun> 	sysctl -w net.inet.ipsec.debug=blah?

  Thanks. I wasn't aware of that.
  But, it would be nice to have a rate limited output that didn't require
debugging.

]       ON HUMILITY: to err is human. To moo, bovine.           |  firewalls  [
]   Michael Richardson, Sandelman Software Works, Ottawa, ON    |net architect[
] mcr@sandelman.ottawa.on.ca http://www.sandelman.ottawa.on.ca/ |device driver[
] panic("Just another NetBSD/notebook using, kernel hacking, security guy");  [