doc/manpage.d/ipsec_klipsdebug.8.html

   1 Content-type: text/html
   2
   3 <HTML><HEAD><TITLE>Manpage of IPSEC_KLIPSDEBUG</TITLE>
   4 </HEAD><BODY>
   5 <H1>IPSEC_KLIPSDEBUG</H1>
   6 Section: Maintenance Commands (8)<BR>Updated: 21 Jun 2000<BR><A HREF="#index">Index</A>
   7 <A HREF="http://localhost/cgi-bin/man/man2html">Return to Main Contents</A><HR>
   8
   9
  10
  11
  12 <A NAME="lbAB">&nbsp;</A>
  13 <H2>NAME</H2>
  14
  15 ipsec klipsdebug - set KLIPS (kernel IPSEC support) debug features and level
  16 <A NAME="lbAC">&nbsp;</A>
  17 <H2>SYNOPSIS</H2>
  18
  19 <B>ipsec</B>
  20
  21 <B>klipsdebug</B>
  22
  23 <P>
  24
  25 <B>ipsec</B>
  26
  27 <B>klipsdebug</B>
  28
  29 <B>--set</B>
  30
  31 flagname
  32 <P>
  33
  34 <B>ipsec</B>
  35
  36 <B>klipsdebug</B>
  37
  38 <B>--clear</B>
  39
  40 flagname
  41 <P>
  42
  43 <B>ipsec</B>
  44
  45 <B>klipsdebug</B>
  46
  47 <B>--all</B>
  48
  49 <P>
  50
  51 <B>ipsec</B>
  52
  53 <B>klipsdebug</B>
  54
  55 <B>--none</B>
  56
  57 <P>
  58
  59 <B>ipsec</B>
  60
  61 <B>klipsdebug</B>
  62
  63 <B>--help</B>
  64
  65 <P>
  66
  67 <B>ipsec</B>
  68
  69 <B>klipsdebug</B>
  70
  71 <B>--version</B>
  72
  73 <A NAME="lbAD">&nbsp;</A>
  74 <H2>DESCRIPTION</H2>
  75
  76 <I>Klipsdebug</I>
  77
  78 sets and clears flags that control
  79 various parts of the debugging output of Klips
  80 (the kernel portion of FreeS/WAN IPSEC).
  81 The form with no additional arguments lists the present contents of
  82 /proc/net/ipsec_klipsdebug.
  83 The
  84 <B>--set</B>
  85
  86 form turns the specified flag on,
  87 while the
  88 <B>--clear</B>
  89
  90 form turns the specified flag off.
  91 The
  92 <B>--all</B>
  93
  94 form
  95 turns all flags on except verbose, while the
  96 <B>--none</B>
  97
  98 form turns all flags off.
  99 <P>
 100
 101 The current flag names are:
 102 <DL COMPACT>
 103 <DT><B>tunnel</B>
 104
 105 <DD>
 106 tunnelling code
 107 <DT><B>tunnel-xmit</B>
 108
 109 <DD>
 110 tunnelling transmit only code
 111 <DT><B>pfkey</B>
 112
 113 <DD>
 114 userspace communication code
 115 <DT><B>xform</B>
 116
 117 <DD>
 118 transform selection and manipulation code
 119 <DT><B>eroute</B>
 120
 121 <DD>
 122 eroute table manipulation code
 123 <DT><B>spi</B>
 124
 125 <DD>
 126 SA table manipulation code
 127 <DT><B>radij</B>
 128
 129 <DD>
 130 radij tree manipulation code
 131 <DT><B>esp</B>
 132
 133 <DD>
 134 encryptions transforms code
 135 <DT><B>ah</B>
 136
 137 <DD>
 138 authentication transforms code
 139 <B>rcv</B>
 140
 141 receive code
 142 <DT><B>ipcomp</B>
 143
 144 <DD>
 145 ip compression transforms code
 146 <DT><B>verbose</B>
 147
 148 <DD>
 149 give even more information, BEWARE:
 150 a)this will print authentication and encryption keys in the logs
 151 b)this will probably trample the 4k kernel printk buffer giving inaccurate output
 152 </DL>
 153 <P>
 154
 155 All Klips debug output appears as
 156 <B>kernel.info</B>
 157
 158 messages to
 159 <I><A HREF="syslogd.8.html">syslogd</A></I>(8).
 160
 161 Most systems are set up
 162 to log these messages to
 163 <I>/var/log/messages</I>.
 164
 165 Beware that
 166 <B>klipsdebug</B>
 167
 168 <B>--all</B>
 169
 170 produces a lot of output and the log file will grow quickly.
 171 <P>
 172
 173 The file format for /proc/net/ipsec_klipsdebug is discussed in
 174 <A HREF="ipsec_klipsdebug.5.html">ipsec_klipsdebug</A>(5).
 175 <A NAME="lbAE">&nbsp;</A>
 176 <H2>EXAMPLES</H2>
 177
 178 <DL COMPACT>
 179 <DT><B>klipsdebug --all</B>
 180
 181 <DD>
 182 turns on all KLIPS debugging except verbose.
 183 <DT><B>klipsdebug --clear tunnel</B>
 184
 185 <DD>
 186 turns off only the
 187 <B>tunnel</B>
 188
 189 debugging messages.
 190 </DL>
 191 <P>
 192
 193 <A NAME="lbAF">&nbsp;</A>
 194 <H2>FILES</H2>
 195
 196 /proc/net/ipsec_klipsdebug, /usr/local/bin/ipsec
 197 <A NAME="lbAG">&nbsp;</A>
 198 <H2>SEE ALSO</H2>
 199
 200 <A HREF="ipsec.8.html">ipsec</A>(8), <A HREF="ipsec_manual.8.html">ipsec_manual</A>(8), <A HREF="ipsec_tncfg.8.html">ipsec_tncfg</A>(8), <A HREF="ipsec_eroute.8.html">ipsec_eroute</A>(8),
 201 <A HREF="ipsec_spi.8.html">ipsec_spi</A>(8), <A HREF="ipsec_spigrp.8.html">ipsec_spigrp</A>(8), <A HREF="ipsec_klipsdebug.5.html">ipsec_klipsdebug</A>(5)
 202 <A NAME="lbAH">&nbsp;</A>
 203 <H2>HISTORY</H2>
 204
 205 Written for the Linux FreeS/WAN project
 206 &lt;<A HREF="http://www.freeswan.org/">http://www.freeswan.org/</A>&gt;
 207 by Richard Guy Briggs.
 208 <A NAME="lbAI">&nbsp;</A>
 209 <H2>BUGS</H2>
 210
 211 It really ought to be possible to set or unset selective combinations
 212 of flags.
 213
 214
 215
 216
 217
 218
 219
 220
 221
 222
 223
 224
 225
 226
 227
 228
 229
 230
 231
 232
 233
 234
 235
 236
 237
 238
 239
 240
 241
 242
 243
 244 <P>
 245
 246 <HR>
 247 <A NAME="index">&nbsp;</A><H2>Index</H2>
 248 <DL>
 249 <DT><A HREF="#lbAB">NAME</A><DD>
 250 <DT><A HREF="#lbAC">SYNOPSIS</A><DD>
 251 <DT><A HREF="#lbAD">DESCRIPTION</A><DD>
 252 <DT><A HREF="#lbAE">EXAMPLES</A><DD>
 253 <DT><A HREF="#lbAF">FILES</A><DD>
 254 <DT><A HREF="#lbAG">SEE ALSO</A><DD>
 255 <DT><A HREF="#lbAH">HISTORY</A><DD>
 256 <DT><A HREF="#lbAI">BUGS</A><DD>
 257 </DL>
 258 <HR>
 259 This document was created by
 260 <A HREF="http://localhost/cgi-bin/man/man2html">man2html</A>,
 261 using the manual pages.<BR>
 262 Time: 21:40:18 GMT, November 11, 2003
 263 </BODY>
 264 </HTML>