ACC-IPSEC::accIpsecStatsMalformedOpts counts packets discarded because they carried IP options with syntax errors or invalid lengths that make them impossible to parse safely. This counter helps you detect either corrupted traffic or an attacker trying to exploit IP option parsing bugs in your IPSec stack. For example, a value of 1 might represent a single crafted packet from a vulnerability scanner, whereas a growing counter suggests an active attack or a buggy network application.