1IPSEC_KLIPSDEBUG(5)           Executable programs          IPSEC_KLIPSDEBUG(5)
2
3
4

NAME

6       ipsec_klipsdebug - list KLIPS (kernel IPSEC support) debug features and
7       level
8

SYNOPSIS

10       ipsec klipsdebug
11             cat/proc/net/ipsec_klipsdebug
12

DESCRIPTION

14       /proc/net/ipsec_klipsdebug lists flags that control various parts of
15       the debugging output of KLIPS and MAST, two of the IPsec stacks
16       supported by Libreswan. At this point it is a read-only file.
17
18       A table entry consists of:
19
20       +
21           a KLIPS debug variable
22
23       +
24           a '=' separator for visual and automated parsing between the
25           variable name and its current value
26
27       +
28           hexadecimal bitmap of variable's flags.
29
30       The variable names roughly describe the scope of the debugging
31       variable. Currently, no flags are documented or individually accessible
32       yet except tunnel-xmit.
33
34       The variable names are:
35
36       tunnel
37           tunnelling code
38
39       netlink
40           userspace communication code (obsolete)
41
42       xform
43           transform selection and manipulation code
44
45       eroute
46           eroute table manipulation code
47
48       spi
49           SA table manipulation code
50
51       radij
52           radij tree manipulation code
53
54       esp
55           encryptions transforms code
56
57       ah
58           authentication transforms code
59
60       rcv
61           receive code
62
63       ipcomp
64           ip compression transforms code
65
66       verbose
67           give even more information, beware this will probably trample the
68           4k kernel printk buffer giving inaccurate output
69
70       All KLIPS debug output appears as kernel.info messages to syslogd(8).
71       Most systems are set up to log these messages to /var/log/messages.
72

EXAMPLES

74       debug_tunnel=00000010.debug_netlink=00000000.debug_xform=00000000.debug_eroute=00000000.debug_spi=00000000.debug_radij=00000000.debug_esp=00000000.debug_ah=00000000.debug_rcv=00000000.debug_pfkey=ffffffff.
75
76       means that one tunnel flag has been set (tunnel-xmit), full pfkey
77       sockets debugging has been set and everything else is not set.
78

FILES

80       /proc/net/ipsec_klipsdebug, /usr/local/bin/ipsec
81

SEE ALSO

83       ipsec(8), ipsec_tncfg(8), ipsec_eroute(8), ipsec_spi(8),
84       ipsec_spigrp(8), ipsec_klipsdebug(5), ipsec_version(5), ipsec_pf_key(5)
85

HISTORY

87       Written for the Linux FreeS/WAN project <http://www.freeswan.org/> by
88       Richard Guy Briggs.
89

AUTHOR

91       Paul Wouters
92           placeholder to suppress warning
93
94
95
96libreswan                         02/01/2019               IPSEC_KLIPSDEBUG(5)
Impressum