[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
isakmpd -L not logging
in -current, if i run `iskampd -d -L` and then look at
/var/run/isakmpd.pcap, all i see is the packet time sigs:
bash-2.05# isakmpd -L -d
173545.254163 Default log_packet_init: starting IKE packet capture to file "/var/run/isakmpd.pcap"
bash-2.05# ls -l /var/run/isakmpd.pcap
-rw------- 1 root wheel 2768 Mar 25 17:35 /var/run/isakmpd.pcap
bash-2.05# tcpdump -nvv -r /var/run/isakmpd.pcap
17:35:45.302058
17:35:51.362277
17:35:51.439126
17:35:51.487461
i have verified that net.inet.ip.encdebug is set:
bash-2.05# sysctl net.inet.ip.encdebug
net.inet.ip.encdebug = 1
and i know there is more info being sent in the isakmp exchange because i
can do a `tcpdump -vv -n -s1500 udp port 500` and see the unecrypted
packets.
- brett