NAME¶

ipsec_showpolicy - dump policy of socket found as stdin

SYNOPSIS¶

ipsec showpolicy

ipsec showpolicy --udpport --sockpolicy --packetcountnum

DESCRIPTION¶

showpolicy calls the ipsec_policy_lookup(3) function on the file description which is its stdin.

It then dumps the resulting query in a human readable form.

With the --udp option, it opens a UDP port, and dumps policy on each packet received on that port using the IP_IPSEC_RECVREF socket option.

The --maxpacket option causes the program to exit after processing that many packets. This can be used in test cases.

This is a test program. One might run it from inetd, via:

discard stream tcp nowait nobody /usr/local/libexec/ipsec/showpolicy showpolicy

One could also run it from the command line via:

ipsec showpolicy --udp 9 --sockpolicy --maxpacket 2

FILES¶

/var/run/pluto/ipsecpolicy.ctl

SEE ALSO¶

ipsec(8), ipsec_policy_query(3), ipsec_pluto(8)

HISTORY¶

Written for the Linux FreeS/WAN project <http://www.freeswan.org/> by Michael Richardson