IPSEC_BARF(8)					    IPSEC_BARF(8)


NAME
       ipsec  barf  - spew out collected IPSEC debugging informa-
       tion
       ipsec look - show minimal debugging information

SYNOPSIS
       ipsec barf [ --short ]

       ipsec look

DESCRIPTION
       Barf outputs (on standard output) a collection  of  debug-
       ging information (contents of files, selections from logs,
       etc.)  related to the IPSEC encryption/authentication sys-
       tem.   It is primarily a convenience for remote debugging,
       a single command which packages up (and labels) all infor-
       mation  that  might be relevant to diagnosing a problem in
       IPSEC.

       Look outputs a minimal subset of this, intended as a quick
       look  at current connections and related information, in a
       somewhat less self-explanatory format optimized for terse-
       ness.

       The --short option limits the length of the log portion of
       barf's output, which can otherwise be extremely voluminous
       if debug logging is turned on.

       Barf  censors  its output, replacing keys and secrets with
       brief checksums to avoid revealing sensitive  information.
       Look output does not contain such information.

       Beware  that  the  output  of  both  commands  is aimed at
       humans, not programs, and the output format is subject  to
       change without warning.

FILES
       /proc/net/*, /var/log/*

HISTORY
       Written	   for	   the	   Linux     FreeS/WAN	  project
       <http://www.xs4all.nl/~freeswan/> by Henry Spencer.

BUGS
       Barf uses heuristics to try to pick relevant material  out
       of  the logs, and relevant messages which are not labelled
       with any of the tags that barf looks for will be lost.  We
       think  we've  eliminated the last such case, but one never
       knows...

       Finding updown scripts (so they can be included in output)
       is,  in	general,  difficult.   Barf  uses  a  very simple
       heuristic that is easily fooled.




			   1 June 2000				1


