Events seem to correlate to ISP outages/connectivity issues. Submitted bug to Ipsec-tools: https://sourceforge.net/tracker/index.php?func=detail&aid=3603844&group_id=74601&atid=541482# I'm running ipsec-tools 0.8.0, don't know if it happens with 0.8.1 as well.