| Win32_PerfFormattedData_IPSec_IPSecv4Driver | |||
| Displays IPSec driver counters. | |||
| NameSpace Path | |||
| \ROOT\CIMV2 | |||
| PROPERTY | SMS_REPORT | CIMTYPE | DESCRIPTION |
| ActiveSecurityAssociations | UInt32 | The number of active IPSec quick mode security associations. | |
| Caption | String | A short textual description (one-line string) for the statistic or metric. | |
| Description | String | A textual description of the statistic or metric. | |
| Frequency_Object | UInt64 | NA | |
| Frequency_PerfTime | UInt64 | NA | |
| Frequency_Sys100NS | UInt64 | NA | |
| Name | String | The Name property defines the label by which the statistic or metric is known. When subclassed, the property can be overridden to be a Key property. | |
| OffloadedSecurityAssociations | UInt32 | The number of active IPSec quick mode security associations offloaded to hardware. Certain network adapters can accelerate IPSec processing by performing hardware offload of IPSec cryptographic functions. | |
| PendingKeyExchangeOperations | UInt32 | The number of IPSec key exchange operations that are in progress but are not yet completed. | |
| Timestamp_Object | UInt64 | NA | |
| Timestamp_PerfTime | UInt64 | NA | |
| Timestamp_Sys100NS | UInt64 | NA | |
| TotalBadSPIPackets | UInt32 | The total number of packets for which the Security Parameters Index (SPI) was incorrect since the computer was last started. A large number of packets with bad SPIs within a short amount of time might indicate a packet spoofing attack. | |
| TotalBytesReceivedInTunnels | UInt64 | The total number of bytes received using IPSec tunnel mode since the computer was last started. | |
| TotalBytesSentInTunnels | UInt64 | The total number of bytes sent using IPSec tunnel mode since the computer was last started. | |
| TotalOffloadedBytesReceived | UInt64 | The total number of bytes received using IPSec hardware offload since the computer was last started. Certain network adapters can accelerate IPSec processing by performing hardware offload of IPSec cryptographic functions. | |
| TotalOffloadedBytesSent | UInt64 | The total number of bytes sent using IPSec hardware offload since the computer was last started. Certain network adapters can accelerate IPSec processing by performing hardware offload of IPSec cryptographic functions. | |
| TotalPacketsFailingReplayDetection | UInt32 | The total number of packets that contained an invalid sequence number since the computer was last started. Increases in this counter might indicate a network problem or replay attack. | |
| TotalPacketsNotAuthenticated | UInt32 | The total number of packets for which data could not be verified (for which the integrity hash verification failed) since the computer was last started. Increases in this counter might indicate an IPSec packet spoofing or modification attack, or packet corruption by network devices. | |
| TotalPacketsNotDecrypted | UInt32 | The total number of packets that could not be decrypted since the computer was last started. A packet might not be decrypted if it fails a validation check. | |
| TotalSARekeys | UInt32 | The total number of successful rekey operations for IPSec quick mode security associations since the computer was last started. | |
| TotalTransportBytesReceived | UInt64 | The total number of bytes received using IPSec transport mode since the computer was last started. | |
| TotalTransportBytesSent | UInt64 | The total number of bytes sent using IPSec transport mode since the computer was last started. | |
| SAMPLE DATA INSTANCE | |||
|    [Description("Displays IPSec driver counters."): ToInstance Amended, DisplayName("IPSec v4 Driver"): ToInstance Amended, genericperfctr: ToInstance Amended, locale(1033): ToInstance Amended]    instance of Win32_PerfFormattedData_IPSec_IPSecv4Driver    {     [Description("The number of active IPSec quick mode security associations."): ToInstance Amended, DisplayName("Active Security Associations"): ToInstance Amended] ActiveSecurityAssociations = 0;     [Description("The number of active IPSec quick mode security associations offloaded to hardware. Certain network adapters can accelerate IPSec processing by performing hardware offload of IPSec cryptographic functions."): ToInstance Amended, DisplayName("Offloaded Security Associations"): ToInstance Amended] OffloadedSecurityAssociations = 0;     [Description("The number of IPSec key exchange operations that are in progress but are not yet completed."): ToInstance Amended, DisplayName("Pending Key Exchange Operations"): ToInstance Amended] PendingKeyExchangeOperations = 0;     [Description("The total number of packets for which the Security Parameters Index (SPI) was incorrect since the computer was last started. A large number of packets with bad SPIs within a short amount of time might indicate a packet spoofing attack."): ToInstance Amended, DisplayName("Total Bad SPI Packets"): ToInstance Amended] TotalBadSPIPackets = 0;     [Description("The total number of bytes received using IPSec tunnel mode since the computer was last started."): ToInstance Amended, DisplayName("Total Bytes Received In Tunnels"): ToInstance Amended] TotalBytesReceivedInTunnels = "0";     [Description("The total number of bytes sent using IPSec tunnel mode since the computer was last started."): ToInstance Amended, DisplayName("Total Bytes Sent In Tunnels"): ToInstance Amended] TotalBytesSentInTunnels = "0";     [Description("The total number of bytes received using IPSec hardware offload since the computer was last started. Certain network adapters can accelerate IPSec processing by performing hardware offload of IPSec cryptographic functions."): ToInstance Amended, DisplayName("Total Offloaded Bytes Received"): ToInstance Amended] TotalOffloadedBytesReceived = "0";     [Description("The total number of bytes sent using IPSec hardware offload since the computer was last started. Certain network adapters can accelerate IPSec processing by performing hardware offload of IPSec cryptographic functions."): ToInstance Amended, DisplayName("Total Offloaded Bytes Sent"): ToInstance Amended] TotalOffloadedBytesSent = "0";     [Description("The total number of packets that contained an invalid sequence number since the computer was last started. Increases in this counter might indicate a network problem or replay attack."): ToInstance Amended, DisplayName("Total Packets Failing Replay Detection"): ToInstance Amended] TotalPacketsFailingReplayDetection = 0;     [Description("The total number of packets for which data could not be verified (for which the integrity hash verification failed) since the computer was last started. Increases in this counter might indicate an IPSec packet spoofing or modification attack, or packet corruption by network devices."): ToInstance Amended, DisplayName("Total Packets Not Authenticated"): ToInstance Amended] TotalPacketsNotAuthenticated = 0;     [Description("The total number of packets that could not be decrypted since the computer was last started. A packet might not be decrypted if it fails a validation check."): ToInstance Amended, DisplayName("Total Packets Not Decrypted"): ToInstance Amended] TotalPacketsNotDecrypted = 0;     [Description("The total number of successful rekey operations for IPSec quick mode security associations since the computer was last started."): ToInstance Amended, DisplayName("Total SA Rekeys"): ToInstance Amended] TotalSARekeys = 0;     [Description("The total number of bytes received using IPSec transport mode since the computer was last started."): ToInstance Amended, DisplayName("Total Transport Bytes Received"): ToInstance Amended] TotalTransportBytesReceived = "0";     [Description("The total number of bytes sent using IPSec transport mode since the computer was last started."): ToInstance Amended, DisplayName("Total Transport Bytes Sent"): ToInstance Amended] TotalTransportBytesSent = "0";    }; | |||