ipsec_klipsdebug(5)

1IPSEC_KLIPSDEBUG(5)           Executable programs          IPSEC_KLIPSDEBUG(5)
2
3
4

NAME

6       ipsec_klipsdebug - list KLIPS (kernel IPSEC support) debug features and
7       level
8

SYNOPSIS

10       ipsec klipsdebug
11             cat/proc/net/ipsec_klipsdebug
12

DESCRIPTION

14       /proc/net/ipsec_klipsdebug lists flags that control various parts of
15       the debugging output of KLIPS and MAST, two of the IPsec stacks
16       supported by Libreswan. At this point it is a read-only file.
17
18       A table entry consists of:
19
20       +
21           a KLIPS debug variable
22
23       +
24           a ´=´ separator for visual and automated parsing between the
25           variable name and its current value
26
27       +
28           hexadecimal bitmap of variable´s flags.
29
30       The variable names roughly describe the scope of the debugging
31       variable. Currently, no flags are documented or individually accessible
32       yet except tunnel-xmit.
33
34       The variable names are:
35
36       tunnel
37           tunnelling code
38
39       netlink
40           userspace communication code (obsolete)
41
42       xform
43           transform selection and manipulation code
44
45       eroute
46           eroute table manipulation code
47
48       spi
49           SA table manipulation code
50
51       radij
52           radij tree manipulation code
53
54       esp
55           encryptions transforms code
56
57       ah
58           authentication transforms code
59
60       rcv
61           receive code
62
63       ipcomp
64           ip compression transforms code
65
66       verbose
67           give even more information, beware this will probably trample the
68           4k kernel printk buffer giving inaccurate output
69
70       All KLIPS debug output appears as kernel.info messages to syslogd(8).
71       Most systems are set up to log these messages to /var/log/messages.
72

EXAMPLES

74       debug_tunnel=00000010.
75
76       debug_netlink=00000000.
77
78       debug_xform=00000000.
79
80       debug_eroute=00000000.
81
82       debug_spi=00000000.
83
84       debug_radij=00000000.
85
86       debug_esp=00000000.
87
88       debug_ah=00000000.
89
90       debug_rcv=00000000.
91
92       debug_pfkey=ffffffff.
93
94       means that one tunnel flag has been set (tunnel-xmit), full pfkey
95       sockets debugging has been set and everything else is not set.
96

FILES

98       /proc/net/ipsec_klipsdebug, /usr/local/bin/ipsec
99

HISTORY

105       Written for the Linux FreeS/WAN project <http://www.freeswan.org/> by
106       Richard Guy Briggs.
107

AUTHOR

109       Paul Wouters
110           placeholder to suppress warning
111
112
113
114libreswan                         10/04/2017               IPSEC_KLIPSDEBUG(5)