---
name: "ipsec_klipsdebug"
section: "5"
platform: "linux"
package: "openswan"
version: "1:2.6.37-3+deb7u1"
release: "Debian 7 (Wheezy)"
platforms: ["linux"]
url: "https://new.carta.tech/ipsec_klipsdebug/5"
---

# ipsec\_klipsdebug(5)

list KLIPS (kernel IPSEC support) debug features and level

## NAME

ipsec\_klipsdebug - list KLIPS (kernel IPSEC support) debug features and level

## SYNOPSIS

**ipsec** *klipsdebug*\
 *cat/proc/net/ipsec\_klipsdebug*

## DESCRIPTION

/proc/net/ipsec\_klipsdebug lists flags that control various parts of the debugging output of KLIPS and MAST, two of the IPsec stacks supported by Openswan. At this point it is a read-only file.

A table entry consists of:

\+

a KLIPS debug variable

\+

a ´=´ separator for visual and automated parsing between the variable name and its current value

\+

hexadecimal bitmap of variable´s flags.

The variable names roughly describe the scope of the debugging variable. Currently, no flags are documented or individually accessible yet except tunnel-xmit.

The variable names are:

**tunnel**

tunnelling code

**netlink**

userspace communication code (obsolete)

**xform**

transform selection and manipulation code

**eroute**

eroute table manipulation code

**spi**

SA table manipulation code

**radij**

radij tree manipulation code

**esp**

encryptions transforms code

**ah**

authentication transforms code

**rcv**

receive code

**ipcomp**

ip compression transforms code

**verbose**

give even more information, beware this will probably trample the 4k kernel printk buffer giving inaccurate output

All KLIPS debug output appears as **kernel.info** messages to [**syslogd**(8)](/syslogd/8.md). Most systems are set up to log these messages to /var/log/messages.

## EXAMPLES

**debug\_tunnel=00000010.**

**debug\_netlink=00000000.**

**debug\_xform=00000000.**

**debug\_eroute=00000000.**

**debug\_spi=00000000.**

**debug\_radij=00000000.**

**debug\_esp=00000000.**

**debug\_ah=00000000.**

**debug\_rcv=00000000.**

**debug\_pfkey=ffffffff.**

means that one **tunnel** flag has been set (tunnel-xmit), full **pfkey** sockets debugging has been set and everything else is not set.

## FILES

/proc/net/ipsec\_klipsdebug, /usr/local/bin/ipsec

## SEE ALSO

[ipsec(8)](/ipsec/8.md), [ipsec\_manual(8)](/ipsec_manual/8.md), [ipsec\_tncfg(8)](/ipsec_tncfg/8.md), [ipsec\_eroute(8)](/ipsec_eroute/8.md), [ipsec\_spi(8)](/ipsec_spi/8.md), [ipsec\_spigrp(8)](/ipsec_spigrp/8.md), [ipsec\_klipsdebug(5)](/ipsec_klipsdebug/5.md), [ipsec\_version(5)](/ipsec_version/5.md), [ipsec\_pf\_key(5)](/ipsec_pf_key/5.md)

## HISTORY

Written for the Linux FreeS/WAN project \<**http://www.freeswan.org/**\> by Richard Guy Briggs.