[Swan-dev] why are IKE SA initiator OE logs suppressed?

Andrew Cagney andrew.cagney at gmail.com
Tue Dec 10 22:19:09 UTC 2019


On Tue, 10 Dec 2019 at 16:51, Paul Wouters <paul at nohats.ca> wrote:
>
> On Mon, 2 Dec 2019, Andrew Cagney wrote:
>
> > Subject: [Swan-dev] why are IKE SA initiator OE logs suppressed?
> >
> > For instance, in ikev2_parent_outI1()?
> >
> > I can understand the rationale behind suppressing the responder, but
> > not the initiator - should I do something to trigger an OE connection
> > from my local machine I'd like to know about it.
>
> If you have 10000+ connections, it causes a LOT of logs. We tried to
> minimize it for OE.

Like I said, I can understand that for the IKE SA responder.  But for
the IKE SA initiator that is just trying to establish an SA is that
really true?


More information about the Swan-dev mailing list