IPSec Tunnel incrementing pckts decaps failed

[napd]

Anyone who can explain why I am getting this incrementing decaps failed packets when I do show cry ipsec sa? Would appreciate response from anyone. Another question, is there a way to clear the counters of ipsec?

[sunilc]

What router, encr card is this?

There is a packets decompress failed counter under crypto ipsec sa, but dont remember seeing a packets decaps failed counter.

You can delets ipsec counters by "clear crypto sa counters".

[napd]

Thanks for the reply, the clear command works. It is a Cisco PIX 525 with VAC, it also shows when you use the sh cry ipsec sa command..