ipsec -t

Use the ipsec -t command to locate active filter rules for the default stack that match a specified traffic pattern. The -p option directs the command to another stack or the -z option directs the command to an NSS IPSec client.