For those interested, I have posted an issue with PF_KEY whereby a DUMP of the SPD/SAD when it has thousands of entries would cause NOT all the entries to be returned due to socket receive buffer size limitations. http://marc.theaimsgroup.com/?l=linux-netdev&m=113872582513827&w=2