[strongSwan] Compression - how to check it?

[Andreas Steffen]

Cześć Kamil,

you can see it either in the ipsec statusall output:

http://www.strongswan.org/uml/testresults/ikev2/compress/moon.statusall

where the compression CPIs are shown or with the ip -s xfrm state
command:

http://www.strongswan.org/uml/testresults/ikev2/compress/moon.ip.state

which shows the compression security associations:

src 192.168.0.1 dst 192.168.0.100
	proto comp spi 0x0000bdf9(48633) reqid 1(0x00000001) mode tunnel
	replay-window 0 seq 0x00000000 flag af-unspec (0x00100000)
	comp deflate 0x (0 bits)
	lifetime config:
	  limit: soft (INF)(bytes), hard (INF)(bytes)
	  limit: soft (INF)(packets), hard (INF)(packets)
	  expire add: soft 0(sec), hard 0(sec)
	  expire use: soft 0(sec), hard 0(sec)
	lifetime current:
	  16424(bytes), 2(packets)
	  add 2011-02-10 20:32:06 use 2011-02-10 20:32:07
	stats:
	  replay-window 0 replay 0 failed 0

src 192.168.0.100 dst 192.168.0.1
	proto comp spi 0x0000464e(17998) reqid 1(0x00000001) mode tunnel
	replay-window 0 seq 0x00000000 flag af-unspec (0x00100000)
	comp deflate 0x (0 bits)
	lifetime config:
	  limit: soft (INF)(bytes), hard (INF)(bytes)
	  limit: soft (INF)(packets), hard (INF)(packets)
	  expire add: soft 0(sec), hard 0(sec)
	  expire use: soft 0(sec), hard 0(sec)
	lifetime current:
	  16424(bytes), 2(packets)
	  add 2011-02-10 20:32:06 use 2011-02-10 20:32:07
	stats:
	  replay-window 0 replay 0 failed 0

Pozdrowiena

Andreas

On 05.05.2011 12:10, Kamil Jońca wrote:
> 
> How can I check if compression directive works?
> KJ

======================================================================
Andreas Steffen                         andreas.steffen at strongswan.org
strongSwan - the Linux VPN Solution!                www.strongswan.org
Institute for Internet Technologies and Applications
University of Applied Sciences Rapperswil
CH-8640 Rapperswil (Switzerland)
===========================================================[ITA-HSR]==