IPSEC_KLIPSDEBUG(8)			      IPSEC_KLIPSDEBUG(8)


NAME
       ipsec  klipsdebug - set KLIPS (kernel IPSEC support) debug
       features and level

SYNOPSIS
       ipsec klipsdebug

       ipsec klipsdebug --set flagname

       ipsec klipsdebug --clear flagname

       ipsec klipsdebug --all

       ipsec klipsdebug --none

       ipsec klipsdebug --help

       ipsec klipsdebug --version

DESCRIPTION
       Klipsdebug sets and  clears  flags  that	 control  various
       parts of the debugging output of Klips (the kernel portion
       of FreeS/WAN IPSEC).  The form with  no	additional  argu-
       ments lists the present contents of /proc/net/ipsec_klips-
       debug.  The --set form turns the specified flag on,  while
       the  --clear form turns the specified flag off.	The --all
       form turns all flags on except verbose, while  the  --none
       form turns all flags off.

       The current flag names are:

       tunnel  tunnelling code

       tunnel-xmit
	       tunnelling transmit only code

       pfkey   userspace communication code

       xform   transform selection and manipulation code

       eroute  eroute table manipulation code

       spi     SA table manipulation code

       radij   radij tree manipulation code

       esp     encryptions transforms code

       ah      authentication transforms code rcv receive code

       ipcomp  ip compression transforms code

       verbose give  even  more	 information, BEWARE: a)this will
	       print authentication and encryption  keys  in  the



			   21 Jun 2000				1





IPSEC_KLIPSDEBUG(8)			      IPSEC_KLIPSDEBUG(8)


	       logs  b)this  will  probably trample the 4k kernel
	       printk buffer giving inaccurate output

       All Klips debug output appears as kernel.info messages  to
       syslogd(8).  Most systems are set up to log these messages
       to /var/log/messages.  Beware that klipsdebug  --all  pro-
       duces  a lot of output and the log file will grow quickly.

       The file format	for  /proc/net/ipsec_klipsdebug	 is  dis-
       cussed in ipsec_klipsdebug(5).

EXAMPLES
       klipsdebug --all
	      turns on all KLIPS debugging except verbose.

       klipsdebug --clear tunnel
	      turns off only the tunnel debugging messages.


FILES
       /proc/net/ipsec_klipsdebug, /usr/local/bin/ipsec

SEE ALSO
       ipsec(8),	 ipsec_manual(8),	  ipsec_tncfg(8),
       ipsec_eroute(8),	     ipsec_spi(8),	 ipsec_spigrp(8),
       ipsec_klipsdebug(5)

HISTORY
       Written	   for	   the	   Linux     FreeS/WAN	  project
       <http://www.freeswan.org/> by Richard Guy Briggs.

BUGS
       It really ought to be possible to set or	 unset	selective
       combinations of flags.























			   21 Jun 2000				2


