This counter tracks how many requests for creating new security associations this specific protocol sent to the accelerators, counted since the last reboot. A rising rate here for a given protocol reflects new tunnel or session establishments rather than ongoing traffic on existing tunnels, so an admin can use it to detect an unusually high rate of new SA creation, which could indicate tunnels flapping and repeatedly re-establishing rather than staying up. If this counter for the IPsec row is incrementing every few minutes instead of only at scheduled rekey intervals, that pattern would point an admin toward a flapping tunnel rather than normal periodic rekeying.