We also see these logging entries, dozens of them. We have various ip subnets on the router, which all appear in the destaddr.Nov 27 01:36:05.892: %CRYPTO-4-RECVD_PKT_INV_SPI: decaps: rec'd IPSEC packet has invalid spi for destaddr=x.x.x.x, prot=50, ...