[Fedora Core 4 (kernel 2.6.17)]
I am interested to understand whether the IPsec implementation outputs any
log information. I am particularly interested in any log output under
conditions of replay attack. I have simulated a replay attack (using
ethereal and tcpreplay) - I noted that the incoming ping packets were
ignored, but I could find no log of the 'replay attack'. I looked in the
syslog, but perhaps I am looking in the wrong place - or maybe there is a
kernel option that needs to be enabled.
I understand that IPsec is implemented in the kernel - I'm struggling to
find any documenation that might describe the function of the IPsec
implementation (e.g. regarding logging, configuration etc.). Perhaps someone
could point me in the right direction.
Thanks,
Richard
Linux