1IPSEC_KLIPSDEBUG(8) [FIXME: manual] IPSEC_KLIPSDEBUG(8)
2
3
4
6 ipsec_klipsdebug - set KLIPS and MAST debug features and level. Other
7 stacks are not supported.
8
10 ipsec klipsdebug
11 ipsec klipsdebug --set flagname
12 ipsec klipsdebug --clear flagname
13 ipsec klipsdebug --all
14 ipsec klipsdebug --none
15 ipsec klipsdebug --help
16 ipsec klipsdebug --version
17
19 Klipsdebug sets and clears flags that control various parts of the
20 debugging output of Klips (the kernel portion of FreeS/WAN IPSEC). The
21 form with no additional arguments lists the present contents of
22 /proc/net/ipsec_klipsdebug. The --set form turns the specified flag on,
23 while the --clear form turns the specified flag off. The --all form
24 turns all flags on except verbose, while the --none form turns all
25 flags off.
26
27 The current flag names are:
28
29 tunnel
30 tunnelling code
31
32 tunnel-xmit
33 tunnelling transmit only code
34
35 pfkey
36 userspace communication code
37
38 xform
39 transform selection and manipulation code
40
41 eroute
42 eroute table manipulation code
43
44 spi
45 SA table manipulation code
46
47 radij
48 radij tree manipulation code
49
50 esp
51 encryptions transforms code
52
53 ah
54 authentication transforms code rcv receive code
55
56 ipcomp
57 ip compression transforms code
58
59 verbose
60 give even more information, BEWARE: a)this will print
61 authentication and encryption keys in the logs b)this will probably
62 trample the 4k kernel printk buffer giving inaccurate output
63
64 All Klips debug output appears as kernel.info messages to syslogd(8).
65 Most systems are set up to log these messages to /var/log/messages.
66 Beware that klipsdebug --all produces a lot of output and the log file
67 will grow quickly.
68
69 The file format for /proc/net/ipsec_klipsdebug is discussed in
70 ipsec_klipsdebug(5).
71
73 klipsdebug --all
74 turns on all KLIPS debugging except verbose.
75
76 klipsdebug --clear tunnel
77 turns off only the tunnel debugging messages.
78
80 /proc/net/ipsec_klipsdebug, /usr/local/bin/ipsec
81
83 ipsec(8), ipsec_manual(8), ipsec_tncfg(8), ipsec_eroute(8),
84 ipsec_spi(8), ipsec_spigrp(8), ipsec_klipsdebug(5)
85
87 Written for the Linux FreeS/WAN project <http://www.freeswan.org/> by
88 Richard Guy Briggs.
89
91 It really ought to be possible to set or unset selective combinations
92 of flags.
93
94
95
96[FIXME: source] 10/06/2010 IPSEC_KLIPSDEBUG(8)