Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 11 Oct 2016 14:54:29 -0400
From:      Emre Gundogan <emre@gundogan.us>
To:        freebsd-questions@freebsd.org
Subject:   Re: Log full of  'esp_output: skip 20'
Message-ID:  <1978412.BXObcaMDt2@eagle>
In-Reply-To: <mailman.99.1475928002.86339.freebsd-questions@freebsd.org>
References:  <mailman.99.1475928002.86339.freebsd-questions@freebsd.org>

next in thread | previous in thread | raw e-mail | index | archive | help

--nextPart4053279.Yy67J34OUd
Content-Transfer-Encoding: 7Bit
Content-Type: text/plain; charset="us-ascii"


This was due to 'options IPSEC_DEBUG' line in my kernel config. I was told to silence the messages with 'sysctl net.inet.ipsec.debug=0' without having to recompile the kernel.

Regards,
Emre

> 
> On a recently upgraded (10.3-RELEASE-p5 -> 11.0-RELEASE-p1) machine (amd64), I've noticed a barrage of 'esp_output: skip 20 hlen 24 ...' lines in log while there is traffic on an ipsec connection. Due to a change in sys/netipsec/xform_esp.c (DPRINTF on line 723), a log is generated with each packet in my case. This wasn't true in 10.3-p5, and it looks like perhaps that DPRINTF shouldn't be there? Both the client and the server are FreeBSD 11-p1 machines (both just upgraded). Any insight is much appreciated along with a pointer to how to turn it off (short of recompiling the kernel).
> 
> Thanks a lot,
> Emre.
> 
> P.S.: I am getting list digest, please cc me on your reply.


--nextPart4053279.Yy67J34OUd
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: This is a digitally signed message part.
Content-Transfer-Encoding: 7Bit

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
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=fKmE
-----END PGP SIGNATURE-----

--nextPart4053279.Yy67J34OUd--




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?1978412.BXObcaMDt2>