---
name: "ipsec_show"
section: "8"
platform: "linux"
package: "libreswan"
version: "4.10-2+deb12u1"
release: "Debian 12 (Bookworm)"
platforms: ["linux"]
url: "https://new.carta.tech/ipsec_show"
---

# ipsec\_show(8)

see if a target IP address would get encrypted or not

## NAME

ipsec\_show - see if a target IP address would get encrypted or not

## SYNOPSIS

**ipsec** *show* IP-address

## DESCRIPTION

The *ipsec show* show if the target IP address would get encrypted. Currently requires the XFRM/NETKEY stack root access. If no target IP is given, show all active source - dest tunnels.

## HISTORY

Written originally for the Libreswan Project by Paul Wouters

## BUGS

It's pretty simplistic, so there might be cases where it is wrong. There is also obviously a race condition if you run this show and right afterwards the tunnel goes down.

## AUTHOR

**Paul Wouters**

placeholder to suppress warning