>> routing scket operation case was fixed by using sysctl(NET_RT_DUMP). > why can't PF_KEY use a sysctl then? that's one of the possibility, yes. i might do that. itojun