[Openswan Users] How to see more debug messages?

[Paul Wouters]

On Thu, 5 Apr 2007, Ëï¹ú»Ô(VPN¼¼Êõ²¿) wrote:

>             I have succesfully established ipsec connection between two ipsec gateways.  I want to see the content of every ipsec packet during the phase 1 and phase 2 of IKE. So I have used tcpdump to capture the  ipsec packets of phase 1 of IKE and i can see the SA payload, transform payload,etc. But the data of phase 2 is encrypted. Is there any methods which can help me to see the detailed content of the phase'2 packet?

Only with KLIPS can you do that. Enable klipsdebug=all
For IKE use plutodebug.all, and you might want to look at the taproom functionality for
looking into IKE packets.

Paul
-- 
Building and integrating Virtual Private Networks with Openswan:
http://www.amazon.com/gp/product/1904811256/104-3099591-2946327?n=283155