The op mode "show vpn ipsec sa" only works for site to site tunnels and ignores DMVPN connections.

The root cause is that it looks for configured tunnels only in /etc/ipsec.conf, while DMVPN connections are only in /etc/swanctl.conf. However, output parsing functions also need some adjustment to make it work properly.