|
|||||||||||
|
(no subject)
From: Hugh Daniel <hugh(at)road.toad.com>
Date: Fri Oct 30 1998 - 12:51:52 EST
I am currently testing AH-HMAC-MD5-96 as per the testing plan here and it's going REAL slow. For some reason every time I get a packet from the other end (KAME, IPSEC on FreeBSD) KLIPS logs this mesage: Oct 30 09:36:49 up kernel: klips_error:ah_rcv: packet received from Oct 30 09:36:49 up kernel: klips_error physical I/F not Oct 30 09:36:49 up kernel: klips_error connected to ipsec I/F. Oct 30 09:36:49 up kernel: klips_error Cannot record stats. Oct 30 09:36:49 up kernel: klips_error May not have SA for Oct 30 09:36:49 up kernel: klips_error decoding.
First off this <80 characters stuff is too painful, and the system
over head is horrid. Next off the message is USELESS to me. What
does it tell me? What do I do? Which IF did it come in on?
Worse it seems meaningless as packets are getting through, just very
slowly, even with per line syncing turned off in syslog (which did not
speed things up). A ping takes at least 250ms, with a telnet chargen
running I am seeing sevral second pings...
Below is some system state info.
||ugh Daniel hugh@toad.com Systems Testing & Project mis-Management The Linux FreeS/WAN Project http://www.xs4all.nl/~freeswan ipsec bing-kame left=209.154.161.149 leftsubnet=10.161.149.0/24 # lefttarget=209.154.149.1 # # FreeS/WAN End right=209.154.161.184 rightsubnet=10.161.184.0/24 # target 10.161.184.1 spibase=0xF0000000 rightahspi=0x00001111 leftahspi=0x00002222 rightespspi=0x00003333 leftespspi=0x00004444 ipsec ah-md5 type=tunnel ah=hmac-md5-96 leftahkey=0x1111FFFF_0000FFFF_0000FFFF_0000FFFF rightahkey=0x0000FFFF_0000FFFF_0000FFFF_0000FFFF
up.toad.com
Destination Gateway Genmask Flags MSS Window irtt Iface 209.154.161.0 0.0.0.0 255.255.255.0 U 1500 0 0 eth0 10.161.184.0 0.0.0.0 255.255.255.0 U 1500 0 0 eth1 10.161.149.0 209.154.161.149 255.255.255.0 UG 1404 0 0 ipsec0 127.0.0.0 0.0.0.0 255.0.0.0 U 3584 0 0 lo 0.0.0.0 209.154.161.1 0.0.0.0 UG 1500 0 0 eth0+ cat /proc/net/ipsec_tncfg ipsec0 -> eth0 ipsec1 -> NULL+ hostname --fqdn up.toad.com + ------------------------- + hostname --ip-address 209.154.161.184 + ------------------------- + cat /etc/sysconfig/ipsec # /etc/sysconfig/ipsec # Klips configuration # how much Klips debugging output # can be list of keywords, or empty for noneKLIPSDEBUG= # virtual and physical interfaces for Klips to use; the virtual shouldn't # need changing but the physical might (it should be the interface which # connects to the public network) KLIPSVIRTUAL=ipsec0 KLIPSPHYSICAL=eth0 # ifconfig parameters for $KLIPSVIRTUAL are now copied from $KLIPSPHYSICAL, # except that "ipsec manual" temporarily still needs to know the address # of the public-network interface KLIPSPUBADDR=209.154.161.184 # Pluto configuration # How to start Pluto; current values are "none" for no automatic key # management, and "auto" for automatic key management. ("active" and # "passive" are historical values, now obsolete, treated as synonyms # for "auto".) PLUTOTYPE=none # how much Pluto debugging output # can be list of keywords, or empty for none PLUTODEBUG= # which tunnels (by name) to load into Pluto's internal database at boot PLUTOLOAD= # which tunnels (by name) to attempt to start at boot PLUTOSTART= + ------------------------- + cat /proc/net/dev
Inter-| Receive | Transmit
face |packets errs drop fifo frame|packets errs drop fifo colls carrier
lo: 127158 0 0 0 0 127158 0 0 0 0 0
tunl0: 0 0 0 0 0 0 0 0 0 0 0
tunl1: 0 0 0 0 0 0 0 0 0 0 0
dummy: No statistics available.
plip1: 0 0 0 0 0 0 0 0 0 0 0
eth0: 780169 0 0 0 0 52965 0 0 0 55 0
eth1: 11321 0 0 0 0 9605 0 0 0 0 0
ipsec0: 0 0 0 0 0 104 0 0 0 0 0
ipsec1: 0 0 0 0 0 0 0 0 0 0 0
+ cat /proc/version
Linux version 2.0.35 (root@up.toad.com) (gcc version 2.7.2.3) #22 Wed Oct 28 11:35:53 PST 1998 + ------------------------- + test -r /etc/redhat-release + cat /etc/redhat-release release 5.1 (Manhattan) + ------------------------- + cat /proc/net/ipsec_version FreeS/WAN version: snap1998Oct30 Transform:+ cat /proc/net/ip_forward IP firewall forward rules, default 4 + ------------------------- + cat /proc/net/ip_input IP firewall input rules, default 4 + ------------------------- + cat /proc/net/ip_output IP firewall output rules, default 4 + ------------------------- + cat /proc/modules ipsec 28 1 + ------------------------- + cat /proc/meminfo total: used: free: shared: buffers: cached: Mem: 64806912 63225856 1581056 50024448 19468288 18477056 Swap: 133885952 1392640 132493312 MemTotal: 63288 kB MemFree: 1544 kB MemShared: 48852 kB Buffers: 19012 kB Cached: 18044 kB SwapTotal: 130748 kB SwapFree: 129388 kB + ------------------------- + ls -l /dev/ipsec c-w------- 1 root wheel 36, 10 Oct 25 18:35 /dev/ipsec+ test -f /usr/src/linux/.config + egrep IP /usr/src/linux/.config CONFIG_SYSVIPC=y # CONFIG_IDE_CHIPSETS is not set CONFIG_IP_FORWARD=y CONFIG_IP_MULTICAST=y CONFIG_IP_FIREWALL=y CONFIG_IP_FIREWALL_VERBOSE=y CONFIG_IP_MASQUERADE=y # CONFIG_IP_MASQUERADE_IPAUTOFW is not set CONFIG_IP_MASQUERADE_ICMP=y # CONFIG_IP_TRANSPARENT_PROXY is not set CONFIG_IP_ALWAYS_DEFRAG=y CONFIG_IP_ACCT=y CONFIG_IP_ROUTER=y CONFIG_NET_IPIP=y # CONFIG_IP_MROUTE is not set CONFIG_IP_ALIAS=y CONFIG_IP_NOSR=y # CONFIG_IPX is not set CONFIG_IPSEC=m CONFIG_IPSEC_IPIP=y # CONFIG_IPSEC_EXPERIMENTAL is not set CONFIG_IPSEC_AH=y CONFIG_IPSEC_AH_HMAC_MD5=y CONFIG_IPSEC_AH_HMAC_SHA1=y CONFIG_IPSEC_ESP=y CONFIG_IPSEC_ESP_DES_MD5_96=y CONFIG_IPSEC_ESP_3DES_MD5_96=y CONFIG_IPSEC_ESP_NULL_MD5_96=y CONFIG_IPSEC_ESP_NULL_SHA1_96=y CONFIG_IPSEC_ESP_3DES_SHA1_96=y CONFIG_IPSEC_ESP_DES_SHA1_96=y CONFIG_IPSEC_ESP_DES=y CONFIG_IPSEC_ESP_3DES=y DEBUG_IPSEC=y CONFIG_PLIP=y CONFIG_SLIP=y CONFIG_SLIP_COMPRESSED=y CONFIG_SLIP_SMART=y # CONFIG_SLIP_MODE_SLIP6 is not set CONFIG_STRIP=m + ------------------------- + test -f /var/log/kern.debug + ------------------------- + tail -500 /var/log/messages + egrep -i ipsec|klips|pluto|xxx Oct 30 09:36:11 up kernel: klips_error connected to ipsec I/F. Oct 30 09:36:11 up kernel: klips_error Cannot record stats. Oct 30 09:36:11 up kernel: klips_error May not have SA for Oct 30 09:36:11 up kernel: klips_error decoding. Oct 30 09:36:12 up kernel: klips_error:ah_rcv: packet received from Oct 30 09:36:12 up kernel: klips_error physical I/F not Oct 30 09:36:12 up kernel: klips_error connected to ipsec I/F. Oct 30 09:36:12 up kernel: klips_error Cannot record stats. Oct 30 09:36:12 up kernel: klips_error May not have SA for Oct 30 09:36:12 up kernel: klips_error decoding. Oct 30 09:36:13 up kernel: klips_error:ah_rcv: packet received from Oct 30 09:36:13 up kernel: klips_error physical I/F not Oct 30 09:36:13 up kernel: klips_error connected to ipsec I/F. Oct 30 09:36:13 up kernel: klips_error Cannot record stats. Oct 30 09:36:13 up kernel: klips_error May not have SA for Oct 30 09:36:13 up kernel: klips_error decoding. Oct 30 09:36:14 up kernel: klips_error:ah_rcv: packet received from Oct 30 09:36:14 up kernel: klips_error physical I/F not Oct 30 09:36:14 up kernel: klips_error connected to ipsec I/F. Oct 30 09:36:14 up kernel: klips_error Cannot record stats. Oct 30 09:36:14 up kernel: klips_error May not have SA for Oct 30 09:36:14 up kernel: klips_error decoding. Oct 30 09:36:14 up kernel: klips_error:ah_rcv: packet received from Oct 30 09:36:14 up kernel: klips_error physical I/F not Oct 30 09:36:14 up kernel: klips_error connected to ipsec I/F. Oct 30 09:36:14 up kernel: klips_error Cannot record stats. Oct 30 09:36:14 up kernel: klips_error May not have SA for Oct 30 09:36:14 up kernel: klips_error decoding. Oct 30 09:36:15 up kernel: klips_error:ah_rcv: packet received from Oct 30 09:36:15 up kernel: klips_error physical I/F not Oct 30 09:36:15 up kernel: klips_error connected to ipsec I/F. Oct 30 09:36:15 up kernel: klips_error Cannot record stats. Oct 30 09:36:15 up kernel: klips_error May not have SA for Oct 30 09:36:15 up kernel: klips_error decoding. Oct 30 09:36:16 up kernel: klips_error:ah_rcv: packet received from Oct 30 09:36:16 up kernel: klips_error physical I/F not Oct 30 09:36:16 up kernel: klips_error connected to ipsec I/F. Oct 30 09:36:16 up kernel: klips_error Cannot record stats. Oct 30 09:36:16 up kernel: klips_error May not have SA for Oct 30 09:36:16 up kernel: klips_error decoding. Oct 30 09:36:17 up kernel: klips_error:ah_rcv: packet received from Oct 30 09:36:17 up kernel: klips_error physical I/F not Oct 30 09:36:17 up kernel: klips_error connected to ipsec I/F. Oct 30 09:36:17 up kernel: klips_error Cannot record stats. Oct 30 09:36:17 up kernel: klips_error May not have SA for Oct 30 09:36:17 up kernel: klips_error decoding. Oct 30 09:36:18 up kernel: klips_error:ah_rcv: packet received from Oct 30 09:36:18 up kernel: klips_error physical I/F not Oct 30 09:36:18 up kernel: klips_error connected to ipsec I/F. Oct 30 09:36:18 up kernel: klips_error Cannot record stats. Oct 30 09:36:18 up kernel: klips_error May not have SA for Oct 30 09:36:18 up kernel: klips_error decoding. Oct 30 09:36:19 up kernel: klips_error:ah_rcv: packet received from Oct 30 09:36:19 up kernel: klips_error physical I/F not Oct 30 09:36:19 up kernel: klips_error connected to ipsec I/F. Oct 30 09:36:19 up kernel: klips_error Cannot record stats. Oct 30 09:36:19 up kernel: klips_error May not have SA for Oct 30 09:36:19 up kernel: klips_error decoding. Oct 30 09:36:19 up kernel: klips_error:ah_rcv: packet received from Oct 30 09:36:19 up kernel: klips_error physical I/F not Oct 30 09:36:19 up kernel: klips_error connected to ipsec I/F. Oct 30 09:36:19 up kernel: klips_error Cannot record stats. Oct 30 09:36:19 up kernel: klips_error May not have SA for Oct 30 09:36:19 up kernel: klips_error decoding. Oct 30 09:36:20 up kernel: klips_error:ah_rcv: packet received from Oct 30 09:36:20 up kernel: klips_error physical I/F not Oct 30 09:36:20 up kernel: klips_error connected to ipsec I/F. Oct 30 09:36:20 up kernel: klips_error Cannot record stats. Oct 30 09:36:20 up kernel: klips_error May not have SA for Oct 30 09:36:20 up kernel: klips_error decoding. Oct 30 09:36:21 up kernel: klips_error:ah_rcv: packet received from Oct 30 09:36:21 up kernel: klips_error physical I/F not Oct 30 09:36:21 up kernel: klips_error connected to ipsec I/F. Oct 30 09:36:21 up kernel: klips_error Cannot record stats. Oct 30 09:36:21 up kernel: klips_error May not have SA for Oct 30 09:36:21 up kernel: klips_error decoding. Oct 30 09:36:22 up kernel: klips_error:ah_rcv: packet received from Oct 30 09:36:22 up kernel: klips_error physical I/F not Oct 30 09:36:22 up kernel: klips_error connected to ipsec I/F. Oct 30 09:36:22 up kernel: klips_error Cannot record stats. Oct 30 09:36:22 up kernel: klips_error May not have SA for Oct 30 09:36:22 up kernel: klips_error decoding. Oct 30 09:36:23 up kernel: klips_error:ah_rcv: packet received from Oct 30 09:36:23 up kernel: klips_error physical I/F not Oct 30 09:36:23 up kernel: klips_error connected to ipsec I/F. Oct 30 09:36:23 up kernel: klips_error Cannot record stats. Oct 30 09:36:23 up kernel: klips_error May not have SA for Oct 30 09:36:23 up kernel: klips_error decoding. Oct 30 09:36:23 up kernel: klips_error:ah_rcv: packet received from Oct 30 09:36:23 up kernel: klips_error physical I/F not Oct 30 09:36:23 up kernel: klips_error connected to ipsec I/F. Oct 30 09:36:23 up kernel: klips_error Cannot record stats. Oct 30 09:36:23 up kernel: klips_error May not have SA for Oct 30 09:36:23 up kernel: klips_error decoding. Oct 30 09:36:24 up kernel: klips_error:ah_rcv: packet received from Oct 30 09:36:24 up kernel: klips_error physical I/F not Oct 30 09:36:24 up kernel: klips_error connected to ipsec I/F. Oct 30 09:36:24 up kernel: klips_error Cannot record stats. Oct 30 09:36:24 up kernel: klips_error May not have SA for Oct 30 09:36:24 up kernel: klips_error decoding. Oct 30 09:36:25 up kernel: klips_error:ah_rcv: packet received from Oct 30 09:36:25 up kernel: klips_error physical I/F not Oct 30 09:36:25 up kernel: klips_error connected to ipsec I/F. Oct 30 09:36:25 up kernel: klips_error Cannot record stats. Oct 30 09:36:25 up kernel: klips_error May not have SA for Oct 30 09:36:25 up kernel: klips_error decoding. Oct 30 09:36:26 up kernel: klips_error:ah_rcv: packet received from Oct 30 09:36:26 up kernel: klips_error physical I/F not Oct 30 09:36:26 up kernel: klips_error connected to ipsec I/F. Oct 30 09:36:26 up kernel: klips_error Cannot record stats. Oct 30 09:36:26 up kernel: klips_error May not have SA for Oct 30 09:36:26 up kernel: klips_error decoding. Oct 30 09:36:27 up kernel: klips_error:ah_rcv: packet received from Oct 30 09:36:27 up kernel: klips_error physical I/F not Oct 30 09:36:27 up kernel: klips_error connected to ipsec I/F. Oct 30 09:36:27 up kernel: klips_error Cannot record stats. Oct 30 09:36:27 up kernel: klips_error May not have SA for Oct 30 09:36:27 up kernel: klips_error decoding. Oct 30 09:36:27 up kernel: klips_error:ah_rcv: packet received from Oct 30 09:36:27 up kernel: klips_error physical I/F not Oct 30 09:36:27 up kernel: klips_error connected to ipsec I/F. Oct 30 09:36:27 up kernel: klips_error Cannot record stats. Oct 30 09:36:27 up kernel: klips_error May not have SA for Oct 30 09:36:27 up kernel: klips_error decoding. Oct 30 09:36:28 up kernel: klips_error:ah_rcv: packet received from Oct 30 09:36:28 up kernel: klips_error physical I/F not Oct 30 09:36:28 up kernel: klips_error connected to ipsec I/F. Oct 30 09:36:28 up kernel: klips_error Cannot record stats. Oct 30 09:36:28 up kernel: klips_error May not have SA for Oct 30 09:36:28 up kernel: klips_error decoding. Oct 30 09:36:29 up kernel: klips_error:ah_rcv: packet received from Oct 30 09:36:29 up kernel: klips_error physical I/F not Oct 30 09:36:29 up kernel: klips_error connected to ipsec I/F. Oct 30 09:36:29 up kernel: klips_error Cannot record stats. Oct 30 09:36:29 up kernel: klips_error May not have SA for Oct 30 09:36:29 up kernel: klips_error decoding. Oct 30 09:36:30 up kernel: klips_error:ah_rcv: packet received from Oct 30 09:36:30 up kernel: klips_error physical I/F not Oct 30 09:36:30 up kernel: klips_error connected to ipsec I/F. Oct 30 09:36:30 up kernel: klips_error Cannot record stats. Oct 30 09:36:30 up kernel: klips_error May not have SA for Oct 30 09:36:30 up kernel: klips_error decoding. Oct 30 09:36:31 up kernel: klips_error:ah_rcv: packet received from Oct 30 09:36:31 up kernel: klips_error physical I/F not Oct 30 09:36:31 up kernel: klips_error connected to ipsec I/F. Oct 30 09:36:31 up kernel: klips_error Cannot record stats. Oct 30 09:36:31 up kernel: klips_error May not have SA for Oct 30 09:36:31 up kernel: klips_error decoding. Oct 30 09:36:32 up kernel: klips_error:ah_rcv: packet received from Oct 30 09:36:32 up kernel: klips_error physical I/F not Oct 30 09:36:32 up kernel: klips_error connected to ipsec I/F. Oct 30 09:36:32 up kernel: klips_error Cannot record stats. Oct 30 09:36:32 up kernel: klips_error May not have SA for Oct 30 09:36:32 up kernel: klips_error decoding. Oct 30 09:36:32 up kernel: klips_error:ah_rcv: packet received from Oct 30 09:36:32 up kernel: klips_error physical I/F not Oct 30 09:36:32 up kernel: klips_error connected to ipsec I/F. Oct 30 09:36:32 up kernel: klips_error Cannot record stats. Oct 30 09:36:32 up kernel: klips_error May not have SA for Oct 30 09:36:32 up kernel: klips_error decoding. Oct 30 09:36:33 up kernel: klips_error:ah_rcv: packet received from Oct 30 09:36:33 up kernel: klips_error physical I/F not Oct 30 09:36:33 up kernel: klips_error connected to ipsec I/F. Oct 30 09:36:33 up kernel: klips_error Cannot record stats. Oct 30 09:36:33 up kernel: klips_error May not have SA for Oct 30 09:36:33 up kernel: klips_error decoding. Oct 30 09:36:34 up kernel: klips_error:ah_rcv: packet received from Oct 30 09:36:34 up kernel: klips_error physical I/F not Oct 30 09:36:34 up kernel: klips_error connected to ipsec I/F. Oct 30 09:36:34 up kernel: klips_error Cannot record stats. Oct 30 09:36:34 up kernel: klips_error May not have SA for Oct 30 09:36:34 up kernel: klips_error decoding. Oct 30 09:36:35 up kernel: klips_error:ah_rcv: packet received from Oct 30 09:36:35 up kernel: klips_error physical I/F not Oct 30 09:36:35 up kernel: klips_error connected to ipsec I/F. Oct 30 09:36:35 up kernel: klips_error Cannot record stats. Oct 30 09:36:35 up kernel: klips_error May not have SA for Oct 30 09:36:35 up kernel: klips_error decoding. Oct 30 09:36:36 up kernel: klips_error:ah_rcv: packet received from Oct 30 09:36:36 up kernel: klips_error physical I/F not Oct 30 09:36:36 up kernel: klips_error connected to ipsec I/F. Oct 30 09:36:36 up kernel: klips_error Cannot record stats. Oct 30 09:36:36 up kernel: klips_error May not have SA for Oct 30 09:36:36 up kernel: klips_error decoding. Oct 30 09:36:36 up kernel: klips_error:ah_rcv: packet received from Oct 30 09:36:36 up kernel: klips_error physical I/F not Oct 30 09:36:36 up kernel: klips_error connected to ipsec I/F. Oct 30 09:36:36 up kernel: klips_error Cannot record stats. Oct 30 09:36:36 up kernel: klips_error May not have SA for Oct 30 09:36:36 up kernel: klips_error decoding. Oct 30 09:36:37 up kernel: klips_error:ah_rcv: packet received from Oct 30 09:36:37 up kernel: klips_error physical I/F not Oct 30 09:36:37 up kernel: klips_error connected to ipsec I/F. Oct 30 09:36:37 up kernel: klips_error Cannot record stats. Oct 30 09:36:37 up kernel: klips_error May not have SA for Oct 30 09:36:37 up kernel: klips_error decoding. Oct 30 09:36:38 up kernel: klips_error:ah_rcv: packet received from Oct 30 09:36:38 up kernel: klips_error physical I/F not Oct 30 09:36:38 up kernel: klips_error connected to ipsec I/F. Oct 30 09:36:38 up kernel: klips_error Cannot record stats. Oct 30 09:36:38 up kernel: klips_error May not have SA for Oct 30 09:36:38 up kernel: klips_error decoding. Oct 30 09:36:39 up kernel: klips_error:ah_rcv: packet received from Oct 30 09:36:39 up kernel: klips_error physical I/F not Oct 30 09:36:39 up kernel: klips_error connected to ipsec I/F. Oct 30 09:36:39 up kernel: klips_error Cannot record stats. Oct 30 09:36:39 up kernel: klips_error May not have SA for Oct 30 09:36:39 up kernel: klips_error decoding. Oct 30 09:36:40 up kernel: klips_error:ah_rcv: packet received from Oct 30 09:36:40 up kernel: klips_error physical I/F not Oct 30 09:36:40 up kernel: klips_error connected to ipsec I/F. Oct 30 09:36:40 up kernel: klips_error Cannot record stats. Oct 30 09:36:40 up kernel: klips_error May not have SA for Oct 30 09:36:40 up kernel: klips_error decoding. Oct 30 09:36:40 up kernel: klips_error:ah_rcv: packet received from Oct 30 09:36:40 up kernel: klips_error physical I/F not Oct 30 09:36:40 up kernel: klips_error connected to ipsec I/F. Oct 30 09:36:40 up kernel: klips_error Cannot record stats. Oct 30 09:36:40 up kernel: klips_error May not have SA for Oct 30 09:36:40 up kernel: klips_error decoding. Oct 30 09:36:41 up kernel: klips_error:ah_rcv: packet received from Oct 30 09:36:41 up kernel: klips_error physical I/F not Oct 30 09:36:41 up kernel: klips_error connected to ipsec I/F. Oct 30 09:36:41 up kernel: klips_error Cannot record stats. Oct 30 09:36:41 up kernel: klips_error May not have SA for Oct 30 09:36:41 up kernel: klips_error decoding. Oct 30 09:36:42 up kernel: klips_error:ah_rcv: packet received from Oct 30 09:36:42 up kernel: klips_error physical I/F not Oct 30 09:36:42 up kernel: klips_error connected to ipsec I/F. Oct 30 09:36:42 up kernel: klips_error Cannot record stats. Oct 30 09:36:42 up kernel: klips_error May not have SA for Oct 30 09:36:42 up kernel: klips_error decoding. Oct 30 09:36:43 up kernel: klips_error:ah_rcv: packet received from Oct 30 09:36:43 up kernel: klips_error physical I/F not Oct 30 09:36:43 up kernel: klips_error connected to ipsec I/F. Oct 30 09:36:43 up kernel: klips_error Cannot record stats. Oct 30 09:36:43 up kernel: klips_error May not have SA for Oct 30 09:36:43 up kernel: klips_error decoding. Oct 30 09:36:44 up kernel: klips_error:ah_rcv: packet received from Oct 30 09:36:44 up kernel: klips_error physical I/F not Oct 30 09:36:44 up kernel: klips_error connected to ipsec I/F. Oct 30 09:36:44 up kernel: klips_error Cannot record stats. Oct 30 09:36:44 up kernel: klips_error May not have SA for Oct 30 09:36:44 up kernel: klips_error decoding. Oct 30 09:36:45 up kernel: klips_error:ah_rcv: packet received from Oct 30 09:36:45 up kernel: klips_error physical I/F not Oct 30 09:36:45 up kernel: klips_error connected to ipsec I/F. Oct 30 09:36:45 up kernel: klips_error Cannot record stats. Oct 30 09:36:45 up kernel: klips_error May not have SA for Oct 30 09:36:45 up kernel: klips_error decoding. Oct 30 09:36:45 up kernel: klips_error:ah_rcv: packet received from Oct 30 09:36:45 up kernel: klips_error physical I/F not Oct 30 09:36:45 up kernel: klips_error connected to ipsec I/F. Oct 30 09:36:45 up kernel: klips_error Cannot record stats. Oct 30 09:36:45 up kernel: klips_error May not have SA for Oct 30 09:36:45 up kernel: klips_error decoding. Oct 30 09:36:46 up kernel: klips_error:ah_rcv: packet received from Oct 30 09:36:46 up kernel: klips_error physical I/F not Oct 30 09:36:46 up kernel: klips_error connected to ipsec I/F. Oct 30 09:36:46 up kernel: klips_error Cannot record stats. Oct 30 09:36:46 up kernel: klips_error May not have SA for Oct 30 09:36:46 up kernel: klips_error decoding. Oct 30 09:36:47 up kernel: klips_error:ah_rcv: packet received from Oct 30 09:36:47 up kernel: klips_error physical I/F not Oct 30 09:36:47 up kernel: klips_error connected to ipsec I/F. Oct 30 09:36:47 up kernel: klips_error Cannot record stats. Oct 30 09:36:47 up kernel: klips_error May not have SA for Oct 30 09:36:47 up kernel: klips_error decoding. Oct 30 09:36:48 up kernel: klips_error:ah_rcv: packet received from Oct 30 09:36:48 up kernel: klips_error physical I/F not Oct 30 09:36:48 up kernel: klips_error connected to ipsec I/F. Oct 30 09:36:48 up kernel: klips_error Cannot record stats. Oct 30 09:36:48 up kernel: klips_error May not have SA for Oct 30 09:36:48 up kernel: klips_error decoding. Oct 30 09:36:49 up kernel: klips_error:ah_rcv: packet received from Oct 30 09:36:49 up kernel: klips_error physical I/F not Oct 30 09:36:49 up kernel: klips_error connected to ipsec I/F. Oct 30 09:36:49 up kernel: klips_error Cannot record stats. Oct 30 09:36:49 up kernel: klips_error May not have SA for Oct 30 09:36:49 up kernel: klips_error decoding. Oct 30 09:36:49 up kernel: klips_error:ah_rcv: packet received from Oct 30 09:36:49 up kernel: klips_error physical I/F not Oct 30 09:36:49 up kernel: klips_error connected to ipsec I/F. Oct 30 09:36:49 up kernel: klips_error Cannot record stats. Oct 30 09:36:49 up kernel: klips_error May not have SA for Oct 30 09:36:49 up kernel: klips_error decoding. Oct 30 09:36:50 up kernel: klips_error:ah_rcv: packet received from Oct 30 09:36:50 up kernel: klips_error physical I/F not Oct 30 09:36:50 up kernel: klips_error connected to ipsec I/F. Oct 30 09:36:50 up kernel: klips_error Cannot record stats. Oct 30 09:36:50 up kernel: klips_error May not have SA for Oct 30 09:36:50 up kernel: klips_error decoding. Oct 30 09:36:51 up kernel: klips_error:ah_rcv: packet received from Oct 30 09:36:51 up kernel: klips_error physical I/F not Oct 30 09:36:51 up kernel: klips_error connected to ipsec I/F. Oct 30 09:36:51 up kernel: klips_error Cannot record stats. Oct 30 09:36:51 up kernel: klips_error May not have SA for Oct 30 09:36:51 up kernel: klips_error decoding. Oct 30 09:36:52 up kernel: klips_error:ah_rcv: packet received from Oct 30 09:36:52 up kernel: klips_error physical I/F not Oct 30 09:36:52 up kernel: klips_error connected to ipsec I/F. Oct 30 09:36:52 up kernel: klips_error Cannot record stats. Oct 30 09:36:52 up kernel: klips_error May not have SA for Oct 30 09:36:52 up kernel: klips_error decoding. Oct 30 09:36:53 up kernel: klips_error:ah_rcv: packet received from Oct 30 09:36:53 up kernel: klips_error physical I/F not Oct 30 09:36:53 up kernel: klips_error connected to ipsec I/F. Oct 30 09:36:53 up kernel: klips_error Cannot record stats. Oct 30 09:36:53 up kernel: klips_error May not have SA for Oct 30 09:36:53 up kernel: klips_error decoding. Oct 30 09:36:53 up kernel: klips_error:ah_rcv: packet received from Oct 30 09:36:53 up kernel: klips_error physical I/F not Oct 30 09:36:53 up kernel: klips_error connected to ipsec I/F. Oct 30 09:36:53 up kernel: klips_error Cannot record stats. Oct 30 09:36:53 up kernel: klips_error May not have SA for Oct 30 09:36:53 up kernel: klips_error decoding. Oct 30 09:36:54 up kernel: klips_error:ah_rcv: packet received from Oct 30 09:36:54 up kernel: klips_error physical I/F not Oct 30 09:36:54 up kernel: klips_error connected to ipsec I/F. Oct 30 09:36:54 up kernel: klips_error Cannot record stats. Oct 30 09:36:54 up kernel: klips_error May not have SA for Oct 30 09:36:54 up kernel: klips_error decoding. Oct 30 09:36:55 up kernel: klips_error:ah_rcv: packet received from Oct 30 09:36:55 up kernel: klips_error physical I/F not Oct 30 09:36:55 up kernel: klips_error connected to ipsec I/F. Oct 30 09:36:55 up kernel: klips_error Cannot record stats. Oct 30 09:36:55 up kernel: klips_error May not have SA for Oct 30 09:36:55 up kernel: klips_error decoding. Oct 30 09:36:56 up kernel: klips_error:ah_rcv: packet received from Oct 30 09:36:56 up kernel: klips_error physical I/F not Oct 30 09:36:56 up kernel: klips_error connected to ipsec I/F. Oct 30 09:36:56 up kernel: klips_error Cannot record stats. Oct 30 09:36:56 up kernel: klips_error May not have SA for Oct 30 09:36:56 up kernel: klips_error decoding. Oct 30 09:36:57 up kernel: klips_error:ah_rcv: packet received from Oct 30 09:36:57 up kernel: klips_error physical I/F not Oct 30 09:36:57 up kernel: klips_error connected to ipsec I/F. Oct 30 09:36:57 up kernel: klips_error Cannot record stats. Oct 30 09:36:57 up kernel: klips_error May not have SA for Oct 30 09:36:57 up kernel: klips_error decoding. Oct 30 09:36:58 up kernel: klips_error:ah_rcv: packet received from Oct 30 09:36:58 up kernel: klips_error physical I/F not Oct 30 09:36:58 up kernel: klips_error connected to ipsec I/F. Oct 30 09:36:58 up kernel: klips_error Cannot record stats. Oct 30 09:36:58 up kernel: klips_error May not have SA for Oct 30 09:36:58 up kernel: klips_error decoding. Oct 30 09:36:58 up kernel: klips_error:ah_rcv: packet received from Oct 30 09:36:58 up kernel: klips_error physical I/F not Oct 30 09:36:58 up kernel: klips_error connected to ipsec I/F. Oct 30 09:36:58 up kernel: klips_error Cannot record stats. Oct 30 09:36:58 up kernel: klips_error May not have SA for Oct 30 09:36:58 up kernel: klips_error decoding. Oct 30 09:36:59 up kernel: klips_error:ah_rcv: packet received from Oct 30 09:36:59 up kernel: klips_error physical I/F not Oct 30 09:36:59 up kernel: klips_error connected to ipsec I/F. Oct 30 09:36:59 up kernel: klips_error Cannot record stats. Oct 30 09:36:59 up kernel: klips_error May not have SA for Oct 30 09:36:59 up kernel: klips_error decoding. Oct 30 09:37:00 up kernel: klips_error:ah_rcv: packet received from Oct 30 09:37:00 up kernel: klips_error physical I/F not Oct 30 09:37:00 up kernel: klips_error connected to ipsec I/F. Oct 30 09:37:00 up kernel: klips_error Cannot record stats. Oct 30 09:37:00 up kernel: klips_error May not have SA for Oct 30 09:37:00 up kernel: klips_error decoding. Oct 30 09:37:01 up kernel: klips_error:ah_rcv: packet received from Oct 30 09:37:01 up kernel: klips_error physical I/F not Oct 30 09:37:01 up kernel: klips_error connected to ipsec I/F. Oct 30 09:37:01 up kernel: klips_error Cannot record stats. Oct 30 09:37:01 up kernel: klips_error May not have SA for Oct 30 09:37:01 up kernel: klips_error decoding. Oct 30 09:37:02 up kernel: klips_error:ah_rcv: packet received from Oct 30 09:37:02 up kernel: klips_error physical I/F not Oct 30 09:37:02 up kernel: klips_error connected to ipsec I/F. Oct 30 09:37:02 up kernel: klips_error Cannot record stats. Oct 30 09:37:02 up kernel: klips_error May not have SA for Oct 30 09:37:02 up kernel: klips_error decoding. Oct 30 09:37:02 up kernel: klips_error:ah_rcv: packet received from Oct 30 09:37:02 up kernel: klips_error physical I/F not Oct 30 09:37:02 up kernel: klips_error connected to ipsec I/F. Oct 30 09:37:02 up kernel: klips_error Cannot record stats. Oct 30 09:37:02 up kernel: klips_error May not have SA for Oct 30 09:37:02 up kernel: klips_error decoding. Oct 30 09:37:03 up kernel: klips_error:ah_rcv: packet received from Oct 30 09:37:03 up kernel: klips_error physical I/F not Oct 30 09:37:03 up kernel: klips_error connected to ipsec I/F. Oct 30 09:37:03 up kernel: klips_error Cannot record stats. Oct 30 09:37:03 up kernel: klips_error May not have SA for Oct 30 09:37:03 up kernel: klips_error decoding. Oct 30 09:37:04 up kernel: klips_error:ah_rcv: packet received from Oct 30 09:37:04 up kernel: klips_error physical I/F not Oct 30 09:37:04 up kernel: klips_error connected to ipsec I/F. Oct 30 09:37:04 up kernel: klips_error Cannot record stats. Oct 30 09:37:04 up kernel: klips_error May not have SA for Oct 30 09:37:04 up kernel: klips_error decoding. Oct 30 09:37:05 up kernel: klips_error:ah_rcv: packet received from Oct 30 09:37:05 up kernel: klips_error physical I/F not Oct 30 09:37:05 up kernel: klips_error connected to ipsec I/F. Oct 30 09:37:05 up kernel: klips_error Cannot record stats. Oct 30 09:37:05 up kernel: klips_error May not have SA for Oct 30 09:37:05 up kernel: klips_error decoding. Oct 30 09:37:06 up kernel: klips_error:ah_rcv: packet received from Oct 30 09:37:06 up kernel: klips_error physical I/F not Oct 30 09:37:06 up kernel: klips_error connected to ipsec I/F. Oct 30 09:37:06 up kernel: klips_error Cannot record stats. Oct 30 09:37:06 up kernel: klips_error May not have SA for Oct 30 09:37:06 up kernel: klips_error decoding. Oct 30 09:37:06 up kernel: klips_error:ah_rcv: packet received from Oct 30 09:37:06 up kernel: klips_error physical I/F not Oct 30 09:37:06 up kernel: klips_error connected to ipsec I/F. Oct 30 09:37:06 up kernel: klips_error Cannot record stats. Oct 30 09:37:06 up kernel: klips_error May not have SA for Oct 30 09:37:06 up kernel: klips_error decoding. Oct 30 09:37:07 up kernel: klips_error:ah_rcv: packet received from Oct 30 09:37:07 up kernel: klips_error physical I/F not Oct 30 09:37:07 up kernel: klips_error connected to ipsec I/F. Oct 30 09:37:07 up kernel: klips_error Cannot record stats. Oct 30 09:37:07 up kernel: klips_error May not have SA for Oct 30 09:37:07 up kernel: klips_error decoding. Oct 30 09:37:08 up kernel: klips_error:ah_rcv: packet received from Oct 30 09:37:08 up kernel: klips_error physical I/F not Oct 30 09:37:08 up kernel: klips_error connected to ipsec I/F. Oct 30 09:37:08 up kernel: klips_error Cannot record stats. Oct 30 09:37:08 up kernel: klips_error May not have SA for Oct 30 09:37:08 up kernel: klips_error decoding. Oct 30 09:37:09 up kernel: klips_error:ah_rcv: packet received from Oct 30 09:37:09 up kernel: klips_error physical I/F not Oct 30 09:37:09 up kernel: klips_error connected to ipsec I/F. Oct 30 09:37:09 up kernel: klips_error Cannot record stats. Oct 30 09:37:09 up kernel: klips_error May not have SA for Oct 30 09:37:09 up kernel: klips_error decoding. Oct 30 09:37:10 up kernel: klips_error:ah_rcv: packet received from Oct 30 09:37:10 up kernel: klips_error physical I/F not Oct 30 09:37:10 up kernel: klips_error connected to ipsec I/F. Oct 30 09:37:10 up kernel: klips_error Cannot record stats. Oct 30 09:37:10 up kernel: klips_error May not have SA for Oct 30 09:37:10 up kernel: klips_error decoding. Oct 30 09:37:10 up kernel: klips_error:ah_rcv: packet received from Oct 30 09:37:10 up kernel: klips_error physical I/F not Oct 30 09:37:10 up kernel: klips_error connected to ipsec I/F. Oct 30 09:37:10 up kernel: klips_error Cannot record stats. Oct 30 09:37:10 up kernel: klips_error May not have SA for Oct 30 09:37:10 up kernel: klips_error decoding. Oct 30 09:37:11 up kernel: klips_error:ah_rcv: packet received from Oct 30 09:37:11 up kernel: klips_error physical I/F not Oct 30 09:37:11 up kernel: klips_error connected to ipsec I/F. Oct 30 09:37:11 up kernel: klips_error Cannot record stats. Oct 30 09:37:11 up kernel: klips_error May not have SA for Oct 30 09:37:11 up kernel: klips_error decoding. Oct 30 09:37:12 up kernel: klips_error:ah_rcv: packet received from Oct 30 09:37:12 up kernel: klips_error physical I/F not Oct 30 09:37:12 up kernel: klips_error connected to ipsec I/F. Oct 30 09:37:12 up kernel: klips_error Cannot record stats. Oct 30 09:37:12 up kernel: klips_error May not have SA for Oct 30 09:37:12 up kernel: klips_error decoding. Oct 30 09:37:13 up kernel: klips_error:ah_rcv: packet received from Oct 30 09:37:13 up kernel: klips_error physical I/F not Oct 30 09:37:13 up kernel: klips_error connected to ipsec I/F. Oct 30 09:37:13 up kernel: klips_error Cannot record stats. Oct 30 09:37:13 up kernel: klips_error May not have SA for Oct 30 09:37:13 up kernel: klips_error decoding. Oct 30 09:37:14 up kernel: klips_error:ah_rcv: packet received from Oct 30 09:37:14 up kernel: klips_error physical I/F not Oct 30 09:37:14 up kernel: klips_error connected to ipsec I/F. Oct 30 09:37:14 up kernel: klips_error Cannot record stats. Oct 30 09:37:14 up kernel: klips_error May not have SA for Oct 30 09:37:14 up kernel: klips_error decoding. Oct 30 09:37:15 up kernel: klips_error:ah_rcv: packet received from Oct 30 09:37:15 up kernel: klips_error physical I/F not Oct 30 09:37:15 up kernel: klips_error connected to ipsec I/F. Oct 30 09:37:15 up kernel: klips_error Cannot record stats. Oct 30 09:37:15 up kernel: klips_error May not have SA for Oct 30 09:37:15 up kernel: klips_error decoding. Oct 30 09:37:15 up kernel: klips_error:ah_rcv: packet received from Oct 30 09:37:15 up kernel: klips_error physical I/F not Oct 30 09:37:15 up kernel: klips_error connected to ipsec I/F. Oct 30 09:37:15 up kernel: klips_error Cannot record stats. Oct 30 09:37:15 up kernel: klips_error May not have SA for Oct 30 09:37:15 up kernel: klips_error decoding. Oct 30 09:37:16 up kernel: klips_error:ah_rcv: packet received from Oct 30 09:37:16 up kernel: klips_error physical I/F not Oct 30 09:37:16 up kernel: klips_error connected to ipsec I/F. Oct 30 09:37:16 up kernel: klips_error Cannot record stats. Oct 30 09:37:16 up kernel: klips_error May not have SA for Oct 30 09:37:16 up kernel: klips_error decoding. Oct 30 09:37:17 up kernel: klips_error:ah_rcv: packet received from Oct 30 09:37:17 up kernel: klips_error physical I/F not Oct 30 09:37:17 up kernel: klips_error connected to ipsec I/F. Oct 30 09:37:17 up kernel: klips_error Cannot record stats. Oct 30 09:37:17 up kernel: klips_error May not have SA for Oct 30 09:37:17 up kernel: klips_error decoding. Oct 30 09:37:18 up kernel: klips_error:ah_rcv: packet received from Oct 30 09:37:18 up kernel: klips_error physical I/F not Oct 30 09:37:18 up kernel: klips_error connected to ipsec I/F. Oct 30 09:37:18 up kernel: klips_error Cannot record stats. Oct 30 09:37:18 up kernel: klips_error May not have SA for Oct 30 09:37:18 up kernel: klips_error decoding.+ tail -500 /var/log/secure + egrep -i pluto Oct 25 18:53:40 up Pluto[315]: Starting Pluto (FreeS/WAN Version snap1998Oct25) Oct 25 20:11:33 up Pluto[315]: shutting down Oct 25 20:11:42 up Pluto[921]: Starting Pluto (FreeS/WAN Version snap1998Oct25) Oct 25 20:11:42 up Pluto[921]: FATAL ERROR: bind() in init_whackfd(). Errno 98: Address already in use Oct 25 20:23:16 up Pluto[315]: Starting Pluto (FreeS/WAN Version snap1998Oct25) Oct 25 20:25:33 up Pluto[315]: shutting down Oct 25 20:26:44 up Pluto[316]: Starting Pluto (FreeS/WAN Version snap1998Oct25) Oct 25 21:23:37 up Pluto[316]: shutting down Oct 25 21:27:26 up Pluto[316]: Starting Pluto (FreeS/WAN Version snap1998Oct25) Oct 25 22:24:10 up Pluto[316]: shutting down Oct 25 22:25:21 up Pluto[316]: Starting Pluto (FreeS/WAN Version snap1998Oct25) Oct 26 00:44:35 up Pluto[316]: shutting down Oct 26 00:58:25 up Pluto[316]: Starting Pluto (FreeS/WAN Version snap1998Oct25) Oct 26 03:13:43 up Pluto[316]: added connection description "sntidi" 10.161.184.0/24<->209.154.161.184:500<->209.154.160.43<--->209.154.161.184<->209.154.160.43:500<->209.154.163.104/29 Oct 26 03:13:43 up Pluto[316]: ike_life: 3600s; ipsec_life: 28800s; rekey_window: 540s; rekeytries: 3; goal: Oct 26 03:15:40 up Pluto[316]: max number of retransmissions (2) reached for 209.154.160.43 #1 Oct 26 03:15:40 up Pluto[316]: deleting state #1 Oct 26 03:17:12 up Pluto[316]: | debugging = debug-raw+debug-crypt+debug-parsing+debug-emitting+debug-control+debug-klips Oct 26 03:17:12 up Pluto[316]: | next event EVENT_REINIT_SECRET in 2473 seconds ((nil)) Oct 26 03:20:11 up Pluto[316]: | Oct 26 03:20:11 up Pluto[316]: | received whack message Oct 26 03:20:11 up Pluto[316]: | creating state object #2 at 0x80683f8 Oct 26 03:20:11 up Pluto[316]: | emit ISAKMP Message: Oct 26 03:20:11 up Pluto[316]: | initiator cookie: 3c 9f c6 f0 4e a1 4a 2d Oct 26 03:20:11 up Pluto[316]: | responder cookie: 00 00 00 00 00 00 00 00 Oct 26 03:20:11 up Pluto[316]: | next payload type: ISAKMP_NEXT_SA Oct 26 03:20:11 up Pluto[316]: | ISAKMP version: ISAKMP Version 1.0 Oct 26 03:20:11 up Pluto[316]: | exchange type: ISAKMP_XCHG_IDPROT Oct 26 03:20:11 up Pluto[316]: | flags: none Oct 26 03:20:11 up Pluto[316]: | message ID: 00 00 00 00 Oct 26 03:20:11 up Pluto[316]: | emit ISAKMP Security Association Payload: Oct 26 03:20:11 up Pluto[316]: | next payload type: ISAKMP_NEXT_NONE Oct 26 03:20:11 up Pluto[316]: | DOI: ISAKMP_DOI_IPSEC Oct 26 03:20:11 up Pluto[316]: | emit IPsec DOI SIT: Oct 26 03:20:11 up Pluto[316]: | IPsec DOI SIT: SIT_IDENTITY_ONLY Oct 26 03:20:11 up Pluto[316]: | emit ISAKMP Proposal Payload: Oct 26 03:20:11 up Pluto[316]: | next payload type: ISAKMP_NEXT_NONE Oct 26 03:20:11 up Pluto[316]: | proposal number: 0 Oct 26 03:20:11 up Pluto[316]: | protocol ID: PROTO_ISAKMP Oct 26 03:20:11 up Pluto[316]: | SPI size: 0 Oct 26 03:20:11 up Pluto[316]: | number of transforms: 4 Oct 26 03:20:11 up Pluto[316]: | emit ISAKMP Transform Payload (ISAKMP): Oct 26 03:20:11 up Pluto[316]: | next payload type: ISAKMP_NEXT_T Oct 26 03:20:11 up Pluto[316]: | transform number: 0 Oct 26 03:20:11 up Pluto[316]: | transform ID: KEY_IKE Oct 26 03:20:11 up Pluto[316]: | emit ISAKMP Oakley attribute: Oct 26 03:20:11 up Pluto[316]: | af+type: OAKLEY_ENCRYPTION_ALGORITHM Oct 26 03:20:11 up Pluto[316]: | length/value: 5 Oct 26 03:20:11 up Pluto[316]: | [5 is OAKLEY_3DES_CBC] Oct 26 03:20:11 up Pluto[316]: | emit ISAKMP Oakley attribute: Oct 26 03:20:11 up Pluto[316]: | af+type: OAKLEY_HASH_ALGORITHM Oct 26 03:20:11 up Pluto[316]: | length/value: 2 Oct 26 03:20:11 up Pluto[316]: | [2 is OAKLEY_SHA] Oct 26 03:20:11 up Pluto[316]: | emit ISAKMP Oakley attribute: Oct 26 03:20:11 up Pluto[316]: | af+type: OAKLEY_AUTHENTICATION_METHOD Oct 26 03:20:11 up Pluto[316]: | length/value: 1 Oct 26 03:20:11 up Pluto[316]: | [1 is OAKLEY_PRESHARED_KEY] Oct 26 03:20:11 up Pluto[316]: | emit ISAKMP Oakley attribute: Oct 26 03:20:11 up Pluto[316]: | af+type: OAKLEY_GROUP_DESCRIPTION Oct 26 03:20:11 up Pluto[316]: | length/value: 2 Oct 26 03:20:11 up Pluto[316]: | [2 is OAKLEY_GROUP_MODP1024] Oct 26 03:20:11 up Pluto[316]: | emit ISAKMP Oakley attribute: Oct 26 03:20:11 up Pluto[316]: | af+type: OAKLEY_LIFE_TYPE Oct 26 03:20:11 up Pluto[316]: | length/value: 1 Oct 26 03:20:11 up Pluto[316]: | [1 is OAKLEY_LIFE_SECONDS] Oct 26 03:20:11 up Pluto[316]: | emit ISAKMP Oakley attribute: Oct 26 03:20:11 up Pluto[316]: | af+type: OAKLEY_LIFE_DURATION Oct 26 03:20:11 up Pluto[316]: | length/value: 3600 Oct 26 03:20:11 up Pluto[316]: | emitting length of ISAKMP Transform Payload (ISAKMP): 32 Oct 26 03:20:11 up Pluto[316]: | emit ISAKMP Transform Payload (ISAKMP): Oct 26 03:20:11 up Pluto[316]: | next payload type: ISAKMP_NEXT_T Oct 26 03:20:11 up Pluto[316]: | transform number: 1 Oct 26 03:20:11 up Pluto[316]: | transform ID: KEY_IKE Oct 26 03:20:11 up Pluto[316]: | emit ISAKMP Oakley attribute: Oct 26 03:20:11 up Pluto[316]: | af+type: OAKLEY_ENCRYPTION_ALGORITHM Oct 26 03:20:11 up Pluto[316]: | length/value: 5 Oct 26 03:20:11 up Pluto[316]: | [5 is OAKLEY_3DES_CBC] Oct 26 03:20:11 up Pluto[316]: | emit ISAKMP Oakley attribute: Oct 26 03:20:11 up Pluto[316]: | af+type: OAKLEY_HASH_ALGORITHM Oct 26 03:20:11 up Pluto[316]: | length/value: 2 Oct 26 03:20:11 up Pluto[316]: | [2 is OAKLEY_SHA] Oct 26 03:20:11 up Pluto[316]: | emit ISAKMP Oakley attribute: Oct 26 03:20:11 up Pluto[316]: | af+type: OAKLEY_AUTHENTICATION_METHOD Oct 26 03:20:11 up Pluto[316]: | length/value: 1 Oct 26 03:20:11 up Pluto[316]: | [1 is OAKLEY_PRESHARED_KEY] Oct 26 03:20:11 up Pluto[316]: | emit ISAKMP Oakley attribute: Oct 26 03:20:11 up Pluto[316]: | af+type: OAKLEY_GROUP_DESCRIPTION Oct 26 03:20:11 up Pluto[316]: | length/value: 2 Oct 26 03:20:11 up Pluto[316]: | [2 is OAKLEY_GROUP_MODP1024] Oct 26 03:20:11 up Pluto[316]: | emit ISAKMP Oakley attribute: Oct 26 03:20:11 up Pluto[316]: | af+type: OAKLEY_LIFE_TYPE Oct 26 03:20:11 up Pluto[316]: | length/value: 1 Oct 26 03:20:11 up Pluto[316]: | [1 is OAKLEY_LIFE_SECONDS] Oct 26 03:20:11 up Pluto[316]: | emit ISAKMP Oakley attribute: Oct 26 03:20:11 up Pluto[316]: | af+type: OAKLEY_LIFE_DURATION Oct 26 03:20:11 up Pluto[316]: | length/value: 3600 Oct 26 03:20:11 up Pluto[316]: | emitting length of ISAKMP Transform Payload (ISAKMP): 32 Oct 26 03:20:11 up Pluto[316]: | emit ISAKMP Transform Payload (ISAKMP): Oct 26 03:20:11 up Pluto[316]: | next payload type: ISAKMP_NEXT_T Oct 26 03:20:11 up Pluto[316]: | transform number: 2 Oct 26 03:20:11 up Pluto[316]: | transform ID: KEY_IKE Oct 26 03:20:11 up Pluto[316]: | emit ISAKMP Oakley attribute: Oct 26 03:20:11 up Pluto[316]: | af+type: OAKLEY_ENCRYPTION_ALGORITHM Oct 26 03:20:11 up Pluto[316]: | length/value: 5 Oct 26 03:20:11 up Pluto[316]: | [5 is OAKLEY_3DES_CBC] Oct 26 03:20:11 up Pluto[316]: | emit ISAKMP Oakley attribute: Oct 26 03:20:11 up Pluto[316]: | af+type: OAKLEY_HASH_ALGORITHM Oct 26 03:20:11 up Pluto[316]: | length/value: 1 Oct 26 03:20:11 up Pluto[316]: | [1 is OAKLEY_MD5] Oct 26 03:20:11 up Pluto[316]: | emit ISAKMP Oakley attribute: Oct 26 03:20:11 up Pluto[316]: | af+type: OAKLEY_AUTHENTICATION_METHOD Oct 26 03:20:11 up Pluto[316]: | length/value: 1 Oct 26 03:20:11 up Pluto[316]: | [1 is OAKLEY_PRESHARED_KEY] Oct 26 03:20:11 up Pluto[316]: | emit ISAKMP Oakley attribute: Oct 26 03:20:11 up Pluto[316]: | af+type: OAKLEY_GROUP_DESCRIPTION Oct 26 03:20:11 up Pluto[316]: | length/value: 2 Oct 26 03:20:11 up Pluto[316]: | [2 is OAKLEY_GROUP_MODP1024] Oct 26 03:20:11 up Pluto[316]: | emit ISAKMP Oakley attribute: Oct 26 03:20:11 up Pluto[316]: | af+type: OAKLEY_LIFE_TYPE Oct 26 03:20:11 up Pluto[316]: | length/value: 1 Oct 26 03:20:11 up Pluto[316]: | [1 is OAKLEY_LIFE_SECONDS] Oct 26 03:20:11 up Pluto[316]: | emit ISAKMP Oakley attribute: Oct 26 03:20:11 up Pluto[316]: | af+type: OAKLEY_LIFE_DURATION Oct 26 03:20:11 up Pluto[316]: | length/value: 3600 Oct 26 03:20:11 up Pluto[316]: | emitting length of ISAKMP Transform Payload (ISAKMP): 32 Oct 26 03:20:11 up Pluto[316]: | emit ISAKMP Transform Payload (ISAKMP): Oct 26 03:20:11 up Pluto[316]: | next payload type: ISAKMP_NEXT_NONE Oct 26 03:20:11 up Pluto[316]: | transform number: 3 Oct 26 03:20:11 up Pluto[316]: | transform ID: KEY_IKE Oct 26 03:20:11 up Pluto[316]: | emit ISAKMP Oakley attribute: Oct 26 03:20:11 up Pluto[316]: | af+type: OAKLEY_ENCRYPTION_ALGORITHM Oct 26 03:20:11 up Pluto[316]: | length/value: 5 Oct 26 03:20:11 up Pluto[316]: | [5 is OAKLEY_3DES_CBC] Oct 26 03:20:11 up Pluto[316]: | emit ISAKMP Oakley attribute: Oct 26 03:20:11 up Pluto[316]: | af+type: OAKLEY_HASH_ALGORITHM Oct 26 03:20:11 up Pluto[316]: | length/value: 1 Oct 26 03:20:11 up Pluto[316]: | [1 is OAKLEY_MD5] Oct 26 03:20:11 up Pluto[316]: | emit ISAKMP Oakley attribute: Oct 26 03:20:11 up Pluto[316]: | af+type: OAKLEY_AUTHENTICATION_METHOD Oct 26 03:20:11 up Pluto[316]: | length/value: 1 Oct 26 03:20:11 up Pluto[316]: | [1 is OAKLEY_PRESHARED_KEY] Oct 26 03:20:11 up Pluto[316]: | emit ISAKMP Oakley attribute: Oct 26 03:20:11 up Pluto[316]: | af+type: OAKLEY_GROUP_DESCRIPTION Oct 26 03:20:11 up Pluto[316]: | length/value: 1 Oct 26 03:20:11 up Pluto[316]: | [1 is OAKLEY_GROUP_MODP768] Oct 26 03:20:11 up Pluto[316]: | emit ISAKMP Oakley attribute: Oct 26 03:20:11 up Pluto[316]: | af+type: OAKLEY_LIFE_TYPE Oct 26 03:20:11 up Pluto[316]: | length/value: 1 Oct 26 03:20:11 up Pluto[316]: | [1 is OAKLEY_LIFE_SECONDS] Oct 26 03:20:11 up Pluto[316]: | emit ISAKMP Oakley attribute: Oct 26 03:20:11 up Pluto[316]: | af+type: OAKLEY_LIFE_DURATION Oct 26 03:20:11 up Pluto[316]: | length/value: 3600 Oct 26 03:20:11 up Pluto[316]: | emitting length of ISAKMP Transform Payload (ISAKMP): 32 Oct 26 03:20:11 up Pluto[316]: | emitting length of ISAKMP Proposal Payload: 136 Oct 26 03:20:11 up Pluto[316]: | emitting length of ISAKMP Security Association Payload: 148 Oct 26 03:20:11 up Pluto[316]: | emitting length of ISAKMP Message: 176 Oct 26 03:20:11 up Pluto[316]: | ICOOKIE: 3c 9f c6 f0 4e a1 4a 2d Oct 26 03:20:11 up Pluto[316]: | RCOOKIE: 00 00 00 00 00 00 00 00 Oct 26 03:20:11 up Pluto[316]: | peer: d1 9a a0 2b Oct 26 03:20:11 up Pluto[316]: | state hash entry 8 Oct 26 03:20:11 up Pluto[316]: | sending: Oct 26 03:20:11 up Pluto[316]: | 3c 9f c6 f0 4e a1 4a 2d 00 00 00 00 00 00 00 00 Oct 26 03:20:11 up Pluto[316]: | 01 10 02 00 00 00 00 00 00 00 00 b0 00 00 00 94 Oct 26 03:20:11 up Pluto[316]: | 00 00 00 01 00 00 00 01 00 00 00 88 00 01 00 04 Oct 26 03:20:11 up Pluto[316]: | 03 00 00 20 00 01 00 00 80 01 00 05 80 02 00 02 Oct 26 03:20:11 up Pluto[316]: | 80 03 00 01 80 04 00 02 80 0b 00 01 80 0c 0e 10 Oct 26 03:20:11 up Pluto[316]: | 03 00 00 20 01 01 00 00 80 01 00 05 80 02 00 02 Oct 26 03:20:11 up Pluto[316]: | 80 03 00 01 80 04 00 02 80 0b 00 01 80 0c 0e 10 Oct 26 03:20:11 up Pluto[316]: | 03 00 00 20 02 01 00 00 80 01 00 05 80 02 00 01 Oct 26 03:20:11 up Pluto[316]: | 80 03 00 01 80 04 00 02 80 0b 00 01 80 0c 0e 10 Oct 26 03:20:11 up Pluto[316]: | 00 00 00 20 03 01 00 00 80 01 00 05 80 02 00 01 Oct 26 03:20:11 up Pluto[316]: | 80 | ||||||||||