linux-ipsec: Partial Success :-)(

Well I can ping the Alpha from the Intel box :-)

But not all the packets get through :-(

31 packets transmitted, 21 packets received, 32% packet loss

64 bytes from 132.146.196.107: icmp_seq=0 ttl=64 time=1.9 ms
64 bytes from 132.146.196.107: icmp_seq=2 ttl=64 time=1.7 ms
64 bytes from 132.146.196.107: icmp_seq=3 ttl=64 time=1.7 ms
64 bytes from 132.146.196.107: icmp_seq=5 ttl=64 time=1.7 ms
64 bytes from 132.146.196.107: icmp_seq=6 ttl=64 time=1.7 ms
64 bytes from 132.146.196.107: icmp_seq=8 ttl=64 time=1.7 ms
64 bytes from 132.146.196.107: icmp_seq=9 ttl=64 time=1.7 ms
64 bytes from 132.146.196.107: icmp_seq=11 ttl=64 time=1.7 ms
64 bytes from 132.146.196.107: icmp_seq=12 ttl=64 time=1.8 ms
64 bytes from 132.146.196.107: icmp_seq=14 ttl=64 time=1.7 ms
64 bytes from 132.146.196.107: icmp_seq=15 ttl=64 time=1.7 ms
64 bytes from 132.146.196.107: icmp_seq=17 ttl=64 time=1.8 ms
64 bytes from 132.146.196.107: icmp_seq=18 ttl=64 time=1.7 ms
64 bytes from 132.146.196.107: icmp_seq=20 ttl=64 time=1.7 ms
64 bytes from 132.146.196.107: icmp_seq=21 ttl=64 time=1.7 ms
64 bytes from 132.146.196.107: icmp_seq=23 ttl=64 time=1.7 ms
64 bytes from 132.146.196.107: icmp_seq=24 ttl=64 time=1.7 ms
64 bytes from 132.146.196.107: icmp_seq=26 ttl=64 time=1.7 ms
64 bytes from 132.146.196.107: icmp_seq=27 ttl=64 time=1.7 ms
64 bytes from 132.146.196.107: icmp_seq=29 ttl=64 time=1.7 ms
64 bytes from 132.146.196.107: icmp_seq=30 ttl=64 time=1.7 ms

ipsec0 on both machines show 31 packets TX & RX. I conclude from this that the Intel box is seeing some of the reply packets as invalid after they have been decrypted, which I think means there is a problem with the encryption on the Aplha.... Let me try the ping the other way....

The Alpha Tx 11 packets, Intel Rx 11

    Intel Tx 6 packets, Alpha Rx 6

So it does look like the Intel box is rejecting some Rx packets, why ? I dont know (yet)...

Do you need help?

In addition to our free technical library, Pantek provides professional IT services to companies who utilize Open Source software: Learn more about Pantek's Technical Support offerings Place an order for 24/7/365 Technical Support here Learn more about Pantek, who we are, and what we do Chat with a Live Operator Related lists.freeswan.org Links 1998-fall 1998-spring 1998-summer 1998-winter 1999-winter announce briefs bugs design freeswan-list hipsec ietf-sectest users users-admin Request more information about Pantek

Peter (getting there slowly) Onion.

This message was sent by XFMail