printf(" --reconnect-timeout %s\n", _("Connection retry timeout in seconds"));
printf(" --resolve=HOST:IP %s\n", _("Use IP when connecting to HOST"));
printf(" --passtos %s\n", _("copy TOS / TCLASS when using DTLS"));
- printf(" --dtls-local-port=PORT %s\n", _("Set local port for DTLS datagrams"));
+ printf(" --dtls-local-port=PORT %s\n", _("Set local port for DTLS and ESP datagrams"));
printf("\n%s:\n", _("Authentication (two-phase)"));
- printf(" -C, --cookie=COOKIE %s\n", _("Use WebVPN cookie COOKIE"));
+ printf(" -C, --cookie=COOKIE %s\n", _("Use authentication cookie COOKIE"));
printf(" --cookie-on-stdin %s\n", _("Read cookie from standard input"));
printf(" --authenticate %s\n", _("Authenticate only and print login info"));
- printf(" --cookieonly %s\n", _("Fetch webvpn cookie only; don't connect"));
- printf(" --printcookie %s\n", _("Print webvpn cookie before connecting"));
+ printf(" --cookieonly %s\n", _("Fetch and print cookie only; don't connect"));
+ printf(" --printcookie %s\n", _("Print cookie before connecting"));
+
#ifndef _WIN32
printf("\n%s:\n", _("Process control"));
printf(" -b, --background %s\n", _("Continue in background after startup"));
printf(" -D, --no-deflate %s\n", _("Disable compression"));
printf(" --force-dpd=INTERVAL %s\n", _("Set minimum Dead Peer Detection interval"));
printf(" --pfs %s\n", _("Require perfect forward secrecy"));
- printf(" --no-dtls %s\n", _("Disable DTLS"));
+ printf(" --no-dtls %s\n", _("Disable DTLS and ESP"));
printf(" --dtls-ciphers=LIST %s\n", _("OpenSSL ciphers to support for DTLS"));
printf(" -Q, --queue-len=LEN %s\n", _("Set packet queue limit to LEN pkts"));
#ifndef _WIN32
printf("\n%s:\n", _("Trojan binary (CSD) execution"));
- printf(" --csd-user=USER %s\n", _("Drop privileges during CSD execution"));
- printf(" --csd-wrapper=SCRIPT %s\n", _("Run SCRIPT instead of CSD binary"));
+ printf(" --csd-user=USER %s\n", _("Drop privileges during trojan execution"));
+ printf(" --csd-wrapper=SCRIPT %s\n", _("Run SCRIPT instead of trojan binary"));
#endif
printf("\n%s:\n", _("Server bugs"));
version of GnuTLS, a PKCS#11 URL.
.TP
.B \-C,\-\-cookie=COOKIE
-Use WebVPN cookie.
+Use authentication cookie COOKIE.
.I COOKIE
.TP
.B \-\-cookie\-on\-stdin
.I USER
.TP
.B \-\-csd\-user=USER
-Drop privileges during CSD (Cisco Secure Desktop) script execution.
+Drop privileges during execution of trojan binary or script (CSD, TNCC, or HIP).
.TP
.B \-\-csd\-wrapper=SCRIPT
Run
.I SCRIPT
-instead of the CSD (Cisco Secure Desktop) script.
+instead of the trojan binary or script.
.TP
.B \-m,\-\-mtu=MTU
Request
.fi
.TP
.B \-\-cookieonly
-Fetch webvpn cookie only; don't connect
+Fetch and print cookie only; don't connect
.TP
.B \-\-printcookie
-Print webvpn cookie before connecting
+Print cookie before connecting
.TP
.B \-\-cafile=FILE
Cert file for server verification
.B \-\-dtls\-local\-port=PORT
Use
.I PORT
-as the local port for DTLS datagrams
+as the local port for DTLS and UDP datagrams
.TP
.B \-\-dump\-http\-traffic
Enable verbose output of all HTTP requests and the bodies of all responses