Provided by: openswan_2.4.4-3ubuntu1_i386 bug

NAME

       ipsec_klipsdebug - list KLIPS (kernel IPSEC support) debug features and
       level

SYNOPSIS

       ipsec klipsdebug

       cat /proc/net/ipsec_klipsdebug

DESCRIPTION

       /proc/net/ipsec_klipsdebug lists flags that control  various  parts  of
       the  debugging output of Klips (the kernel portion of FreeS/WAN IPSEC).
       At this point it is a read-only file.

       A table entry consists of:

       +  a KLIPS debug variable

       +  a ’=’  separator  for  visual  and  automated  parsing  between  the
          variable name and its current value

       +  hexadecimal bitmap of variable’s flags.

       The  variable  names  roughly  describe  the  scope  of  the  debugging
       variable.   Currently,  no  flags  are   documented   or   individually
       accessible yet except tunnel-xmit.

       The variable names are:

       tunnel  tunnelling code

       netlink userspace communication code (obsolete)

       xform   transform selection and manipulation code

       eroute  eroute table manipulation code

       spi     SA table manipulation code

       radij   radij tree manipulation code

       esp     encryptions transforms code

       ah      authentication transforms code

       rcv     receive code

       ipcomp  ip compression transforms code

       verbose give  even  more information, beware this will probably trample
               the 4k kernel printk buffer giving inaccurate output

       All KLIPS debug output appears as kernel.info messages  to  syslogd(8).
       Most systems are set up to log these messages to /var/log/messages.

EXAMPLES

       debug_tunnel=00000010.
       debug_netlink=00000000.
       debug_xform=00000000.
       debug_eroute=00000000.
       debug_spi=00000000.
       debug_radij=00000000.
       debug_esp=00000000.
       debug_ah=00000000.
       debug_rcv=00000000.
       debug_pfkey=ffffffff.

       means  that  one  tunnel  flag  has  been set (tunnel-xmit), full pfkey
       sockets debugging has been set and everything else is not set.

FILES

       /proc/net/ipsec_klipsdebug, /usr/bin/ipsec

SEE ALSO

       ipsec(8),     ipsec_manual(8),     ipsec_tncfg(8),     ipsec_eroute(8),
       ipsec_spi(8),  ipsec_spigrp(8),  ipsec_klipsdebug(5), ipsec_version(5),
       ipsec_pf_key(5)

HISTORY

       Written for the Linux FreeS/WAN project  <http://www.freeswan.org/>  by
       Richard Guy Briggs.

                                  26 Jun 2000              IPSEC_KLIPSDEBUG(5)