[Openswan Users] failure to shut down ipsec

[Paul Wouters]

On Mon, 20 Apr 2009, Jon James wrote:

> 
> Hey does anyone know why I would be getting this error when stopping the ipsec service
> 
> On Centos 5.2 with Openswan 2.6.21
> 
> I run “/etc/init.d/ipsec stop”
>  
> And I get
>  
> 
> Ipsec_setup: Stopping Openswan Ipsec…
> Ipsec_setup: ERROR: Module esp4 is in use

It looks like your shutdown did not remove all IPsec SA's from
the kernel? What does 'ip xfrm pol' and 'ip xfrm state' show
you after doing the stop command? and what does lsmod|grep esp4
say?

Paul