On Thu, Dec 22, 2022 at 06:35:41PM +0000, Stuart Henderson wrote:
> On 2022/12/22 17:58, Jason McIntyre wrote:
> > > > flag.
> > > > Just like for IPsec, using the
> > > > -.Fl r
> > > > -flag,
> > > > -.Xr netstat 1
> > > > +.Xr route 8
> > > > +.Cm show
> > > > +command
> > > > displays information about IPComp flows.
> > >
> > > That's a lie. Neither netstat nor route show IPsec flows. This was moved
> > > to ipsecctl(8). At least I was not able to display the flows with netstat
> > > or route.
> > >
> >
> > ah. so i tried ipcomp but thought it was maybe just not compiled in.
> >
> > so what about the note above it:
> >
> > DIAGNOSTICS
> > netstat(1) can be used to obtain some statistics about
> > IPComp usage, using the -p flag.
> >
> > i can;t get netstat -p to do anything useful. should this whole text go,
> > or just the -r text?
>
> netstat -s -p ipcomp (or just netstat -s and look in the ipcomp section)
> displays statistics about ipcomp usage, but doesn't list ipcomp flows.
> unless you have actually configured ipcomp (probably most easily done
> via iked) you'll just see a bunch of zeroes though.
>
> (similarly netstat -s shows some other stats for ipsec, though not flows)
>
i have to say, i'm getting nowhere with this SYNOPSIS:
netstat -r [-AFu] [-f address_family] [-M core] [-N system]
[-p protocol] [-T rtable]
i mean the combination of -r and -p. is it wholly redundant?
anyway, how about this text for ipcomp/ipsec?
jmc
Index: ipcomp.4
===================================================================
RCS file: /cvs/src/share/man/man4/ipcomp.4,v
retrieving revision 1.16
diff -u -p -r1.16 ipcomp.4
--- ipcomp.4 12 Jan 2018 04:36:44 -0000 1.16
+++ ipcomp.4 22 Dec 2022 19:29:18 -0000
@@ -101,14 +101,9 @@ compressed.
.El
.Sh DIAGNOSTICS
.Xr netstat 1
-can be used to obtain some statistics about IPComp usage, using the
-.Fl p
-flag.
-Just like for IPsec, using the
-.Fl r
-flag,
-.Xr netstat 1
-displays information about IPComp flows.
+can be used to obtain some statistics about IPComp usage:
+.Pp
+.Dl $ netstat -s -p ipcomp
.Sh SEE ALSO
.Xr enc 4 ,
.Xr inet 4 ,
Index: ipsec.4
===================================================================
RCS file: /cvs/src/share/man/man4/ipsec.4,v
retrieving revision 1.88
diff -u -p -r1.88 ipsec.4
--- ipsec.4 31 Mar 2022 17:27:21 -0000 1.88
+++ ipsec.4 22 Dec 2022 19:29:19 -0000
@@ -356,14 +356,15 @@ was given.
.El
.Pp
.Xr netstat 1
-can be used to obtain some statistics about AH and ESP usage, using the
-.Fl p
-flag.
-Using the
-.Fl r
-flag,
-.Xr netstat 1
-displays information about IPsec flows.
+can be used to obtain some statistics about AH or ESP usage:
+.Bd -literal -offset indent
+$ netstat -s -p ah
+$ netstat -s -p esp
+.Ed
+.Pp
+The
+.Xr ipsecctl 8
+command can be used to display information about IPsec flows.
.Pp
.Xr vmstat 8
displays information about memory use by IPsec with the
