Re: List of SAs

[Juan Vera <core.lists.openbsd-tech@core-sdi.com>]

btw, en man 4 ipsec dice:


     A list of all security associations in the kernel tables can be obtained
     via the kernfs file <ipsec> (typically in </kern/ipsec> ).


  ----- Original Message -----
  From: Hernan Gips
  To: tech@openbsd.org
  Sent: Tuesday, May 07, 2002 1:18 PM
  Subject: List of SAs



  Hi,
  im trying  to list all the security associations in the system.
  i started using the PF_KEY interface, but as is written in the man pages,
  the command 'dump' is only for debugin. so i looked at netstat  source and
  figured out that netstat use kvm to fetch the kernel information, but kvm
  is not working well and sometimes the netstat output hangs and never finish.
  my question is, i must choose between PF_KEY dump or kvm?? or
  there is another solution to this??

  thanks.