[Openswan Users] How to see more debug messages?

Paul Wouters paul at xelerance.com
Thu Apr 5 15:48:03 EDT 2007

On Thu, 5 Apr 2007, Ëï¹ú»Ô(VPN¼¼Êõ²¿) wrote:

>             I have succesfully established ipsec connection between two ipsec gateways.  I want to see the content of every ipsec packet during the phase 1 and phase 2 of IKE. So I have used tcpdump to capture the  ipsec packets of phase 1 of IKE and i can see the SA payload, transform payload,etc. But the data of phase 2 is encrypted. Is there any methods which can help me to see the detailed content of the phase'2 packet?

Only with KLIPS can you do that. Enable klipsdebug=all
For IKE use plutodebug.all, and you might want to look at the taproom functionality for
looking into IKE packets.

Building and integrating Virtual Private Networks with Openswan:

More information about the Users mailing list