IPSEC_KLIPSDEBUG(5) IPSEC_KLIPSDEBUG(5)
NAME
ipsec_klipsdebug - list KLIPS (kernel IPSEC support) debug features and
level
SYNOPSIS
ipsec(5,8) klipsdebug(5,8)
cat /proc(5,n)/net/ipsec_klipsdebug
DESCRIPTION
/proc(5,n)/net/ipsec_klipsdebug lists flags that control various parts of
the debugging output of Klips (the kernel portion of FreeS/WAN IPSEC).
At this point it is a read-only file.
A table entry consists of:
+ a KLIPS debug variable
+ a '=' separator for visual and automated parsing between the vari-
able name and its current value
+ hexadecimal bitmap of variable's flags.
The variable names roughly describe the scope of the debugging vari-
able. Currently, no flags are documented or individually accessible
yet except tunnel-xmit.
The variable names are:
tunnel tunnelling code
netlink(3,7) userspace communication code (obsolete)
xform transform selection and manipulation code
eroute(5,8) eroute(5,8) table manipulation code
spi(5,8) SA table manipulation code
radij radij tree manipulation code
esp encryptions transforms code
ah authentication transforms code
rcv receive code
ipcomp ip(7,8) compression transforms code
verbose give even more information, beware this will probably trample
the 4k kernel printk buffer giving inaccurate output
All KLIPS debug output appears as kernel.info messages to syslogd(8).
Most systems are set(7,n,1 builtins) up to log these messages to /var/log/messages.
EXAMPLES
debug_tunnel=00000010.
debug_netlink=00000000.
debug_xform=00000000.
debug_eroute=00000000.
debug_spi=00000000.
debug_radij=00000000.
debug_esp=00000000.
debug_ah=00000000.
debug_rcv=00000000.
debug_pfkey=ffffffff.
means that one tunnel flag has been set(7,n,1 builtins) (tunnel-xmit), full pfkey sock-
ets debugging has been set(7,n,1 builtins) and everything else is not set.
FILES
/proc(5,n)/net/ipsec_klipsdebug, /usr/local/bin/ipsec(5,8)
SEE ALSO
ipsec(5,8)(8), ipsec_manual(8), ipsec_tncfg(8), ipsec_eroute(8),
ipsec_spi(8), ipsec_spigrp(8), ipsec_klipsdebug(5), ipsec_version(5),
ipsec_pf_key(5)
HISTORY
Written for the Linux FreeS/WAN project <http://www.freeswan.org/> by
Richard Guy Briggs.
26 Jun 2000 IPSEC_KLIPSDEBUG(5)