ipsec klipsdebug —all
> > Testing latest master branch 3d5516b1c. When trying to restart ipsec > services using klips, I get a device lockup and/or reboot. Syslog seems to > stop at different places (ssh connection). > > Is there other debugging that would help besides whack --debug all? > > Thanks! > > -Brian > > > 1656 tmp]# ipsec barf > Unable to find KLIPS messages, typically found in /var/log/messages or > equivalent. You may need to run Libreswan for the first time; alternatively, > your log files have been emptied (ie, logrotate) or we do not understand your > logging configuration. > Unable to find Pluto messages, typically found in /var/log/secure or > equivalent. You may need to run Libreswan for the first time; alternatively, > your log files have been emptied (ie, logrotate) or we do not understand your > logging configuration. > DA70N-051656 > Fri Sep 6 09:20:15 CDT 2019 > + _________________________ version > + ipsec --version > Linux Libreswan 3.master-201936.git (netkey) on 4.9.119 It believes it is running XFRM, not KLIPS > + _________________________ /proc/version > + cat /proc/version > Linux version 4.9.119 (captain@784c3b036f31) (gcc version 7.4.0 > (Ubuntu/Linaro 7.4.0-1ubuntu1~18.04) ) #1 PREEMPT Fri Sep 6 14:00:18 UTC 2019 > + _________________________ /proc/net/ipsec_eroute > + '[' -r /proc/net/ipsec_eroute ']' > + _________________________ /proc/net/ipsec_spi > + '[' -r /proc/net/ipsec_spi ']' > + _________________________ /proc/net/ipsec_spigrp > + '[' -r /proc/net/ipsec_spigrp ']' > + _________________________ /proc/net/ipsec_tncfg > + '[' -r /proc/net/ipsec_tncfg ']' > + '[' -r /proc/sys/net/core/xfrm_acq_expires ']' > + _________________________ ip-xfrm-state > + ip xfrm state > + _________________________ ip-xfrm-policy > + ip xfrm policy > + _________________________ cat-proc-net-xfrm_stat > + cat /proc/net/xfrm_stat > XfrmInError 0 > XfrmInBufferError 0 You still have XFRM loaded or compiled in? Paul _______________________________________________ Swan mailing list [email protected] https://lists.libreswan.org/mailman/listinfo/swan
