Herbert Xu wrote: > On Thu, Jan 17, 2008 at 07:54:32AM +0200, Timo Teräs wrote: >>> Racoon doesn't use pfkey dumping as far as I know. >> ipsec-tools racoon uses pfkey and only pfkey. And it's non trivial to >> make it use netlink; it relies heavily all around the code to pfkey >> structs. It also runs on BSD so we cannot rip pfkey away; adding a >> layer to work with both pfkey and netlink would be doable, but just a >> lot of work. > > Sure racoon uses pfkey but the question is does it use pfkey dumping?
Yes it does. It does SPD dump at startup and keeps the SP database in sync by listening to notifications. It also does SA dumps when it is figuring out which SAs to purge. I started to work on the xfrm/pfkey patch only because racoon is having problems with (as is anything else using pfkey). - Timo -- To unsubscribe from this list: send the line "unsubscribe netdev" in the body of a message to [EMAIL PROTECTED] More majordomo info at http://vger.kernel.org/majordomo-info.html
