[Swan-dev] What happened to "ipsec show" ?

[Andrew Cagney]

> How about I add "whack --briefconnectionstatus", which would be wrapped by "ipsec briefconnectionstatus"? This would show (at least) what you listed above.

It would somehow display both:
    host<->host kernel state
    selector<->selector kernel policy
?

I suspect more useful than the reqid are the type of policy(1) and/or routing

Andrew

(1) There's a bear trap here, pluto has three words - reject, drop,
hold - that all mean block(linux) / discard(bsd); I'd ignore it