Visit Our UNIX and Linux User Community

Linux and UNIX Man Pages

Linux & Unix Commands - Search Man Pages

ipsec_pf_key(5) [centos man page]

IPSEC_PF_KEY(5) 						  [FIXME: manual]						   IPSEC_PF_KEY(5)

ipsec_pf_key - lists PF_KEY sockets registered with KLIPS SYNOPSIS
cat /proc/net/pf_key STACK
Note that pf_key is only supported on the KLIPS and MAST stacks. It is not supported on any other stack. DESCRIPTION
/proc/net/pf_key is a read-only file which lists the presently open PF_KEY sockets on the local system and their parameters. Each line lists one PF_KEY socket. A table entry consists of: + sock pointer (sock) + PID of the socket owner (pid) + flag to indicate if the socket is dead (d) + socket wait queue (sleep) + socket pointer (socket) + next socket in chain (next) + previous socket in chain (prev) + last socket error (e) + pointer to destruct routine (destruct) + is this a reused socket (r) + has this socket been zapped (z) + socket family to which this socket belongs (fa) + local port number (n) + protocol version number (p) + Receive queue bytes committed (r) + Transmit queue bytes committed (w) + option memory allocations (o) + size of send buffer in bytes (sndbf) + timestamp in seconds (stamp) + socket flags (Flags) + socket type (Type) + connection state (St) EXAMPLES
c3b8c140 3553 0 c0599818 c05997fc 0 0 0 0 1 0 15 0 2 0 0 0 65535 0.103232 00000000 00000003 01 shows that there is one pf_key socket set up that starts at c3b8c140, whose owning process has PID 3553, the socket is not dead, its wait queue is at c0599818, whose owning socket is at c05997fc, with no other sockets in the chain, no errors, no destructor, it is a reused socket which has not been zapped, from protocol family 15 (PF_KEY), local port number 0, protocol socket version 2, no memory allocated to transmit, receive or option queues, a send buffer of almost 64kB, a timestamp of 0.103232, no flags set, type 3, in state 1. FILES
/proc/net/pf_key SEE ALSO
ipsec(8), ipsec_manual(8), ipsec_eroute(5), ipsec_spi(5), ipsec_spigrp(5), ipsec_klipsdebug(5), ipsec_tncfg(8), ipsec_version(5) HISTORY
Written for the Linux FreeS/WAN project <> by Richard Guy Briggs. [FIXME: source] 10/06/2010 IPSEC_PF_KEY(5)

Check Out this Related Man Page

SOCKSTAT(1)						    BSD General Commands Manual 					       SOCKSTAT(1)

sockstat -- list open sockets SYNOPSIS
sockstat [-clh] [-p ports] [-P pid|process] [-U uid|user] [-G gid|group] DESCRIPTION
The sockstat command lists open Internet or UNIX domain sockets. The following options are available: -c Show connected sockets. -l Show listening sockets. -h Show a usage summary. -p ports Only show Internet sockets if either the local or foreign port number is on the specified list. The ports argument is a comma- separated list of port numbers and ranges specified as first and last port separated by a dash. -P pid|process Only show sockets of the specified pid|process. The pid|process argument is a process name or pid. -U uid|user Only show sockets of the specified uid|user. The uid|user argument is a username or uid. -G gid|group Only show sockets of the specified gid|group. The gid|group argument is a groupname or gid. If neither -c or -l is specified, sockstat will list both listening and connected sockets. The information listed for each socket is: USER The user who owns the socket. COMMAND The command which holds the socket. PID The process ID of the command which holds the socket. FD The file descriptor number of the socket. PROTO The transport protocol associated with the socket for Internet sockets, or the type of socket (stream or datagram) for UNIX sockets. LOCAL ADDRESS For Internet sockets, this is the address the local end of the socket is bound to (see getsockname(2)). For bound UNIX sockets, it is the socket's filename. For other UNIX sockets, it is a right arrow followed by the endpoint's filename, or ``??'' if the endpoint could not be determined. FOREIGN ADDRESS (Internet sockets only) The address the foreign end of the socket is bound to (see getpeername(2)). SEE ALSO
netstat(1), protocols(5) HISTORY
The sockstat command appeared in FreeBSD 3.1. AUTHORS
The sockstat command and this manual page were written by Dag-Erling Smorgrav <>. The sockstat command was ported to Linux by William Pitcock <>. BSD
May 18, 2008 BSD

Featured Tech Videos