Seth Woolley's Man Viewer

IPSEC_KLIPSDEBUG(8)                                        IPSEC_KLIPSDEBUG(8)



NAME
       ipsec(5,8)  klipsdebug(5,8) - set(7,n,1 builtins) KLIPS (kernel IPSEC support) debug features and
       level

SYNOPSIS
       ipsec(5,8) klipsdebug(5,8)

       ipsec(5,8) klipsdebug(5,8) --set flagname

       ipsec(5,8) klipsdebug(5,8) --clear flagname

       ipsec(5,8) klipsdebug(5,8) --all

       ipsec(5,8) klipsdebug(5,8) --none

       ipsec(5,8) klipsdebug(5,8) --help

       ipsec(5,8) klipsdebug(5,8) --version

DESCRIPTION
       Klipsdebug sets and clears flags that  control  various  parts  of  the
       debugging output of Klips (the kernel portion of FreeS/WAN IPSEC).  The
       form with  no  additional  arguments  lists  the  present  contents  of
       /proc(5,n)/net/ipsec_klipsdebug.   The  --set  form turns the specified flag
       on, while the --clear form turns the specified  flag  off.   The  --all
       form turns all flags on except verbose, while the --none form turns all
       flags off.

       The current flag names are:

       tunnel  tunnelling code

       tunnel-xmit
               tunnelling transmit only code

       pfkey   userspace communication code

       xform   transform selection and manipulation code

       eroute(5,8)  eroute(5,8) table manipulation code

       spi(5,8)     SA table manipulation code

       radij   radij tree manipulation code

       esp     encryptions transforms code

       ah      authentication transforms code rcv receive code

       ipcomp  ip(7,8) compression transforms code

       verbose give even more information, BEWARE: a)this will print authenti-
               cation  and  encryption  keys  in(1,8) the logs b)this will probably
               trample the 4k kernel printk buffer giving inaccurate output

       All Klips debug output appears as kernel.info messages  to  syslogd(8).
       Most  systems  are  set(7,n,1 builtins)  up to log these messages to /var/log/messages.
       Beware that klipsdebug(5,8) --all produces a lot of output and the log  file(1,n)
       will grow quickly.

       The   file(1,n)   format  for  /proc(5,n)/net/ipsec_klipsdebug  is  discussed  in(1,8)
       ipsec_klipsdebug(5).

EXAMPLES
       klipsdebug(5,8) --all
              turns on all KLIPS debugging except verbose.

       klipsdebug(5,8) --clear tunnel
              turns off only the tunnel debugging messages.


FILES
       /proc(5,n)/net/ipsec_klipsdebug, /usr/local/bin/ipsec(5,8)

SEE ALSO
       ipsec(5,8)(8),     ipsec_manual(8),     ipsec_tncfg(8),     ipsec_eroute(8),
       ipsec_spi(8), ipsec_spigrp(8), ipsec_klipsdebug(5)

HISTORY
       Written  for  the Linux FreeS/WAN project <http://www.freeswan.org/> by
       Richard Guy Briggs.

BUGS
       It really ought to be possible to set(7,n,1 builtins) or unset  selective  combinations
       of flags.



                                  21 Jun 2000              IPSEC_KLIPSDEBUG(8)