Independent Verification of IPsec Functionality in FreeBSD
		Next

Independent Verification of IPsec Functionality in FreeBSD

David Honig

<honig@sprynet.com>

Last modified on 2021-05-08 01:17:39 WIB by root.

Abstract

You installed IPsec and it seems to be working. How do you know? I describe a method for experimentally verifying that IPsec is working.

[ Split HTML / Single HTML ]

Table of Contents

1. The Problem
2. The Solution
3. The Experiment
4. Caveat
5. IPsec---Definition
6. Installing IPsec
7. src/sys/i386/conf/KERNELNAME
8. Maurer's Universal Statistical Test (for block size=8 bits)

1. The Problem

First, lets assume you have installed IPsec. How do you know it is working? Sure, your connection will not work if it is misconfigured, and it will work when you finally get it right. netstat(1) will list it. But can you independently confirm it?