In -current as of a week ago, the sysctl variable 'net.inet.ip.encdebug' is incorrectly listed as 'net.ipsec.encap.encdebug'. Mark