programs/pf_key/pf_key.8

   1 .TH IPSEC_PF_KEY 8 "17 Oct 2001"
   2 .\"
   3 .\" RCSID $Id: pf_key.8,v 1.2 2005/07/07 19:07:43 as Exp $
   4 .\"
   5 .SH NAME
   6 pf_key \- shows pfkey messages emitted by the kernel
   7 .SH SYNOPSIS
   8 .B pf_key
   9 .B \-\-ah
  10 .B \-\-esp
  11 .B \-\-ipip
  12 .B \-\-ipcomp
  13 .B \-\-daemon
  14 .I file
  15 .BR hmac-md5-96 | hmac-sha1-96
  16 .SH DESCRIPTION
  17 .B pf_key
  18 is a program to open a PF_KEY socket and print all messages that are received
  19 from it. With no options, it will register itself to receive key requests for
  20 AH, ESP, IPIP and IPCOMP security associations. If given more specific
  21 options, then it will listen only to those protocols which are listed.
  22 .PP
  23 If the messages are recognized, the messages will be decoded.
  24 .PP
  25 If the option
  26 .B \-\-daemon
  27 is provided, then after doing the registrations, the program will fork
  28 into the background. The provided file will be opened and the process ID of
  29 the background process will be written to it. This option is present to
  30 present race conditions in regression testing.
  31 .SH EXAMPLES
  32 .TP
  33 .\".B "pfkey v.2 msg. type 3 seq=20 len=2 errno=22 satype=3"
  34 .SH "FILES"
  35 /proc/net/pf_key
  36 .SH "SEE ALSO"
  37 pf_key(5), ipsec(8), ipsec_manual(8), ipsec_eroute(5), ipsec_spi(5),
  38 ipsec_spigrp(5), ipsec_klipsdebug(5), ipsec_tncfg(8), ipsec_version(5)
  39 .SH HISTORY
  40 Written for the Linux FreeS/WAN project
  41 <http://www.freeswan.org/>
  42 by Michael Richardson <mcr@freeswan.org>
  43 .\"
  44 .\" $Log: pf_key.8,v $
  45 .\" Revision 1.2  2005/07/07 19:07:43  as
  46 .\" fixed man page type
  47 .\"
  48 .\" Revision 1.1  2004/03/15 20:35:28  as
  49 .\" added files from freeswan-2.04-x509-1.5.3
  50 .\"
  51 .\" Revision 1.4  2002/07/16 02:53:42  mcr
  52 .\"     added --daemon <pidfile> to "ipsec pf_key" command.
  53 .\"     this is used in *-trap-* tests to avoid race conditions between
  54 .\"     registration of PF_KEY listeners and arrival of first test packet.
  55 .\"
  56 .\" Revision 1.3  2002/04/24 07:35:39  mcr
  57 .\" Moved from ./klips/utils/pf_key.8,v
  58 .\"
  59 .\" Revision 1.2  2001/11/23 07:23:14  mcr
  60 .\"     pulled up klips2 Makefile and pf_key code.
  61 .\"
  62 .\" Revision 1.1.2.1  2001/10/23 18:49:12  mcr
  63 .\"     renamed man page to section 8.
  64 .\"     added --ah, --esp, --ipcomp and --ipip to control which
  65 .\"     protocols are printed.
  66 .\"     incomplete messages which include at least an sadb header are printed.
  67 .\"
  68 .\" Revision 1.1.2.1  2001/10/17 23:25:37  mcr
  69 .\"     added "pk_key" program to dump raw kernel pf messages.
  70 .\"     (program is still skeletal)
  71 .\"
  72 .\"
  73 .\"