ipsec_trap_sendcount – KLIPS statistic on number of successful ACQUIREs Synopsis cat /proc/net/ipsec/stats/trap_sendcount Obsolete Note that trap_sendcount is only supported on the classic KLIPS stack. It is not supported on any other stack and will be completely removed in future versions. A replacement command still needs to be designed Description /proc/net/ipsec/stats/trap_sendcount is a read-only file. It…
ipsec_trap_count – KLIPS statistic on number of ACQUIREs Synopsis cat /proc/net/ipsec/stats/trap_count Obsolete Note that trap_count is only supported on the classic KLIPS stack. It is not supported on any other stack and will be completely removed in future versions. A replacement command still needs to be designed Description /proc/net/ipsec/stats/trap_count is a read-only file. It contains…
ipsec_tncfg – lists IPSEC virtual interfaces attached to real interfaces Synopsis ipsec tncfg cat/proc/net/ipsec_tncfg Klips Note that tncfg is only supported on the KLIPS stack which uses ipsecX interfaces bound to physical interfaces Description /proc/net/ipsec_tncfg is a read-only file which lists which IPSEC virtual interfaces are attached to which real interfaces, through which packets will…
ipsec_spigrp – list IPSEC Security Association groupings Synopsis ipsec spigrp cat/proc/net/ipsec_spigrp Obsolete Note that spigrp is only supported on the classic KLIPS stack. It is not supported on any other stack and will be completely removed in future versions. A replacement command still needs to be designed Description /proc/net/ipsec_spigrp is a read-only file that lists…
ipsec_spi – list IPSEC Security Associations Synopsis ipsec spi cat/proc/net/ipsec_spi Obsolete Note that eroute is only supported on the classic KLIPS stack. It is not supported on any other stack and will be completely removed in future versions. A replacement command still needs to be designed Description /proc/net/ipsec_spi is a read-only file that lists the…
ipsec_pf_key – lists PF_KEY sockets registered with KLIPS Synopsis cat /proc/net/pf_key Stack Note that pf_key is only supported on the KLIPS and MAST stacks. It is not supported on any other stack. Description /proc/net/pf_key is a read-only file which lists the presently open PF_KEY sockets on the local system and their parameters. Each line lists…
ipsec_klipsdebug – list KLIPS (kernel IPSEC support) debug features and level Synopsis ipsec klipsdebug cat/proc/net/ipsec_klipsdebug Description /proc/net/ipsec_klipsdebug lists flags that control various parts of the debugging output of KLIPS and MAST, two of the IPsec stacks supported by Libreswan. At this point it is a read-only file. A table entry consists of: + a KLIPS…
ipsec_eroute – list of existing eroutes Synopsis ipsec eroute cat/proc/net/ipsec_eroute Obsolete Note that eroute is only supported on the classic KLIPS stack. It is not supported on any other stack and will be completely removed in future versions. On the mast stack, use ipsec policy, on the netkey stack, use ip xfrm Description /proc/net/ipsec_eroute lists…
ipsec.secrets – secrets for IKE/IPsec authentication Description The file ipsec.secrets contains a list of secrets. Currently supported secrets are preshared secrets (PSKs), RSA keys and XAUTH passwords. These secrets are used by pluto(8) , the Libreswan Internet Key Exchange daemon, to authenticate other hosts. RSA private keys are stored in the NSS database. The secrets…
ipsec.secrets – secrets for IKE/IPsec authentication Description The file ipsec.secrets contains a list of secrets. Currently supported secrets are preshared secrets (PSKs), RSA keys and XAUTH passwords. These secrets are used by pluto(8) , the Libreswan Internet Key Exchange daemon, to authenticate other hosts. RSA private keys are stored in the NSS database. The secrets…
ipsec.conf – IPsec configuration and connections Description The ipsec.conf file specifies most configuration and control information for the Libreswan IPsec subsystem. (The major exception is secrets for authentication; see ipsec.secrets(5).) Its contents are not security-sensitive. Configurations can be added using this configuration file or by using ipsec whack directly. This means that technically, the ipsec.conf…
ipptoolfile – ipptool file format Description The ipptool(1) program accepts free-form plain text files that describe one or more IPP requests. Comments start with the "#" character and continue to the end of the line. Each request is enclosed by curly braces, for example: # This is a comment { # The name of the…
ipmiseld.conf – ipmiseld configuration file Description The ipmiseld configuration file configures the ipmiseld daemon. The default configuration file loaded is /etc/freeipmi//ipmiseld.conf. The configuration options that can be specified in the configuration file are listed below. Each configuration option must be listed on a separate line. Arguments for an option are separated by any amount of…
freeipmi.conf – specify default values to FreeIPMI Description The FreeIPMI configuration file can be used to set alternate default values to many FreeIPMI tools so values don’t have to be configured on the command line. This allows users to avoid typing in a long list of command line options everytime a command is executed. It…
ipmi_monitoring_sensors.conf – specify sensor interpretation rules Description The /etc/ipmi_monitoring_sensors.conf defines how IPMI sensors should be interpreted. IPMI based sensors specify a number of states/thresholds when they are read. Based on those states/thresholds we can allow the libipmimonitoring(3) library and ipmimonitoring(8) tool to report if a sensor reading is "good" or "bad" (or in a NOMINAL,…
freeipmi_interpret_sensor.conf – specify sensor interpretation rules Description The /etc/freeipmi//freeipmi_interpret_sensor.conf defines how IPMI sensors should be interpreted. IPMI based sensors specify a number of states/thresholds when they are read. Based on those states/thresholds, libraries and tools such as libfreeipmi(3), libipmimonitoring(3) and ipmi-sensors(8) can report if a sensor reading is "good" or "bad" via a report of…
ipmi_monitoring_sensors.conf – specify sensor interpretation rules Description The /etc/ipmi_monitoring_sensors.conf defines how IPMI sensors should be interpreted. IPMI based sensors specify a number of states/thresholds when they are read. Based on those states/thresholds we can allow the libipmimonitoring(3) library and ipmimonitoring(8) tool to report if a sensor reading is "good" or "bad" (or in a NOMINAL,…
freeipmi_interpret_sensor.conf – specify sensor interpretation rules Description The /etc/freeipmi//freeipmi_interpret_sensor.conf defines how IPMI sensors should be interpreted. IPMI based sensors specify a number of states/thresholds when they are read. Based on those states/thresholds, libraries and tools such as libfreeipmi(3), libipmimonitoring(3) and ipmi-sensors(8) can report if a sensor reading is "good" or "bad" via a report of…
ipmidetectd.conf – ipmidetectd configuration file Description The ipmidetectd configuration file configures the ipmidetectd daemon. The default configuration file loaded is /etc/ipmidetectd.conf. The configuration options that can be specified in the configuration file are listed below. Each configuration option must be listed on a separate line. Arguments for an option are separated by any amount of…
ipmidetectd.conf – ipmidetectd configuration file Description The ipmidetectd configuration file configures the ipmidetectd daemon. The default configuration file loaded is /etc/freeipmi//ipmidetectd.conf. The configuration options that can be specified in the configuration file are listed below. Each configuration option must be listed on a separate line. Arguments for an option are separated by any amount of…