Re: linux-ipsec: Partial Success :-)(

On 03-Dec-98 Richard Guy Briggs wrote:

> Fascinating, it is the (n * 3 - 2), where n = (0,1,2,3,4,5,6,7,8,9,10)

I #defined DEBUG_IPSEC_ESP_ in ipsec_esp.c on the Intel box to look at the packet pre & post decryption....

BAD PACKET Dec 3 18:12:35 catbert kernel:
45 00 00 68 00 7d 00 00 00 04 28 17 84 92 c4 6b 84 92 c4 6e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c 0d 0e 0f 10 11 12 13 14 15 16 17 18 19 1a 1b 1c 1d 1e 1f 20 21 22 23 24 25 26 27 28 29 2a 2b 2c 2d 2e 2f 30 31 32 33 34 35 36 37

GOOD PACKET Dec 3 18:12:55 catbert kernel:
45 00 00 68 00 81 00 00 40 04 e8 12 84 92 c4 6b 84 92 c4 6e 45 00 00 54 00 80 00 00 40 01 e8 2a 84 92 c4 6b 84 92 c4 6e 00 00 f7 f0 2b 02 06 00 a7 d4 66 36 d2 fe 0b 00 08 09 0a 0b 0c 0d 0e 0f 10 11 12 13 14 15 16 17 18 19 1a 1b 1c 1d 1e 1f 20 21 22 23 24 25 26 27 28 29 2a 2b 2c 2d 2e 2f 30 31 32 33 34 35 36 37

Something has trashed part of the original packet.... The 0x45 at offset 0x14 is the first byte of the header of the IP-in-IP packet, and in BAD PACKETS this (and the following bytes) has either been overwritten with 00s or has not been copied properly at some point...

I started to write this e-mail at 08:41 Its now 13:28...

Do you need help?

In addition to our free technical library, Pantek provides professional IT services to companies who utilize Open Source software: Learn more about Pantek's Technical Support offerings Place an order for 24/7/365 Technical Support here Learn more about Pantek, who we are, and what we do Chat with a Live Operator Related lists.freeswan.org Links 1998-fall 1998-spring 1998-summer 1998-winter 1999-winter announce briefs bugs design freeswan-list hipsec ietf-sectest users users-admin Request more information about Pantek

I think its a socket buffer problem somewhere, But I really dont know what the hell is going on... the buffer seems to get corrupted during ipe4_output, but I cant figure out what is trashing it.... I think its something "outside" of this function and its just a time critical thing that make sit occure here...

I'm totally baffled by this :-(

I may go home early :-)

HELP ! Peter Onion :-(

This message was sent by XFMail