[Openswan Users] How to see more debug messages?
paul at xelerance.com
Thu Apr 5 15:48:03 EDT 2007
On Thu, 5 Apr 2007, Ëï¹ú»Ô(VPN¼¼Êõ²¿) wrote:
> I have succesfully established ipsec connection between two ipsec gateways. I want to see the content of every ipsec packet during the phase 1 and phase 2 of IKE. So I have used tcpdump to capture the ipsec packets of phase 1 of IKE and i can see the SA payload, transform payload,etc. But the data of phase 2 is encrypted. Is there any methods which can help me to see the detailed content of the phase'2 packet?
Only with KLIPS can you do that. Enable klipsdebug=all
For IKE use plutodebug.all, and you might want to look at the taproom functionality for
looking into IKE packets.
Building and integrating Virtual Private Networks with Openswan:
More information about the Users