1IPSEC_KLIPSDEBUG(5)                                        IPSEC_KLIPSDEBUG(5)
2
3
4

NAME

6       ipsec_klipsdebug - list KLIPS (kernel IPSEC support) debug features and
7       level
8

SYNOPSIS

10       ipsec klipsdebug
11              cat/proc/net/ipsec_klipsdebug
12
13

DESCRIPTION

15       /proc/net/ipsec_klipsdebug lists flags that control  various  parts  of
16       the  debugging  output  of KLIPS and MAST, two of the IPsec stacks sup‐
17       ported by Openswan. At this point it is a read-only file.
18
19
20       A table entry consists of:
21
22
23       +      a KLIPS debug variable
24
25
26       +      a '=' separator for visual and  automated  parsing  between  the
27              variable name and its current value
28
29
30       +      hexadecimal bitmap of variable's flags.
31
32
33       The  variable  names  roughly describe the scope of the debugging vari‐
34       able. Currently, no flags are documented or individually accessible yet
35       except tunnel-xmit.
36
37
38       The variable names are:
39
40
41       tunnel tunnelling code
42
43
44       netlink
45              userspace communication code (obsolete)
46
47
48       xform  transform selection and manipulation code
49
50
51       eroute eroute table manipulation code
52
53
54       spi    SA table manipulation code
55
56
57       radij  radij tree manipulation code
58
59
60       esp    encryptions transforms code
61
62
63       ah     authentication transforms code
64
65
66       rcv    receive code
67
68
69       ipcomp ip compression transforms code
70
71
72       verbose
73              give  even  more  information, beware this will probably trample
74              the 4k kernel printk buffer giving inaccurate output
75
76
77       All KLIPS debug output appears as kernel.info messages  to  syslogd(8).
78       Most systems are set up to log these messages to /var/log/messages.
79
80

EXAMPLES

82       debug_tunnel=00000010.            debug_netlink=00000000.           de‐
83       bug_xform=00000000.     debug_eroute=00000000.      debug_spi=00000000.
84       debug_radij=00000000.       debug_esp=00000000.      debug_ah=00000000.
85       debug_rcv=00000000.    debug_pfkey=ffffffff.
86
87
88       means that one tunnel flag has been set (tunnel-xmit), full pfkey sock‐
89       ets debugging has been set and everything else is not set.
90
91

FILES

93       /proc/net/ipsec_klipsdebug, /usr/local/bin/ipsec
94
95

SEE ALSO

97       ipsec(8),     ipsec_manual(8),     ipsec_tncfg(8),     ipsec_eroute(8),
98       ipsec_spi(8), ipsec_spigrp(8),  ipsec_klipsdebug(5),  ipsec_version(5),
99       ipsec_pf_key(5)
100
101

HISTORY

103       Written  for  the  Linux  FreeS/WAN  project <http://www.freeswan.org/:
104       http://www.freeswan.org/> by Richard Guy Briggs.
105
106
107
108
109                                                           IPSEC_KLIPSDEBUG(5)
Impressum