> ask Craig Metz who designed PF_KEY. you can reach him at > cmetz at inner.net. On the other hand, the other name on that RFC sits in an office across the hall from me, implemented PF_KEY in solaris (including reliable start/end records for SADB_DUMP) and later agreed that a fully reliable SADB_DUMP made sense. - Bill