Charles Steinkuehler's LEAF/LRP Website

IPSEC_KLIPSDEBUG

Section: Maintenance Commands (8)
Updated: 30 Nov 1998
Index Return to Main Contents

NAME

ipsec klipsdebug - set Klips (kernel IPSEC support) debug features and level

SYNOPSIS

ipsec klipsdebug --set flagname

ipsec klipsdebug --clear flagname

ipsec klipsdebug --all

ipsec klipsdebug --none

ipsec klipsdebug --help

ipsec klipsdebug --version

DESCRIPTION

Klipsdebug sets and clears flags that control various parts of the debugging output of Klips (the kernel portion of FreeS/WAN IPSEC). The --set form turns the specified flag on, while the --clear form turns the specified flag off. The --all form turns all flags on, while the --none form turns all flags off.

The current flag names are:

tunnel: tunnelling code
netlink: userspace communication code
xform: transform selection and manipulation code
eroute: eroute table manipulation code
spi: SA table manipulation code
radij: radij tree manipulation code
esp: encryptions transforms code
ah: authentication transforms code

All Klips debug output appears as kernel.info messages to syslogd(8). Most systems are set up to log these messages to /var/log/messages. Beware that klipsdebug --all produces a lot of output and the log file will grow quickly.

EXAMPLES

klipsdebug --all: turns on all KLIPS debugging.
klipsdebug --clear tunnel: turns off only the tunnel debugging messages.

FILES

/dev/ipsec

HISTORY

Written for the Linux FreeS/WAN project <http://www.xs4all.nl/~freeswan/> by Richard Guy Briggs.

BUGS

It really ought to be possible to set or unset selective combinations of flags.

This document was created by man2html, using the manual pages.
Time: 21:22:49 GMT, February 08, 2000

Content-type: text/html