linux-ipsec: At last, it works...not.

From: Hugh Daniel <hugh(at)road.toad.com>
Date: Tue Jun 09 1998 - 11:33:02 EDT

  Well I got over the hump of the current CLI and error messages being a mess and got something that runs, well not really as now the encryption is fouled. Packets are going between machines encrypted (proto 50 in tcpdump lingo), but both ends are saying:

Jun 9 07:57:34 west kernel: esp3desmd596_input: decrypted packet from 209.157.9 0.145 has bad padding...may be bad decryption

Jun 9 07:54:54 east kernel: esp3desmd596_input: decrypted packet from 209.157.9 0.146 has bad padding...may be bad decryption

  Looking at various status output I notice that errors and recived packets are still not being reported.
  The interesting thing is that the scripts that set up the link are *exaclty* the same on both machines. The only difference between them is that one machine is 2.0.33 and the other is 2.0.34. Now I had a 2.0.33 talking to a 2.0.34 just fine with freeswan-0.8, so maybe this is a totaly different problem and has nothing to do with kernels.   I will append the output of my ipsec_systat program (that it seems no foreigner is bright enough to write one of) so that folks working on the code might find something dumb that I have overlooked.

  Oh, the MANUAL flag is being set again, progress! Thanks for this goes to Richard Guy Briggs I would guess.

		||ugh Daniel
		hugh@toad.com

			Systems Testing & Project mis-Management
			The Linux FreeS/WAN Project
			
http://www.xs4all.nl/~freeswan

# ipsec_systat on east.toad.com at Tue Jun 9 08:24:19 PDT 1998
Linux east.toad.com 2.0.33 #13 Tue Jun 9 04:36:25 PDT 1998 i586

# cat /proc/version

Linux version 2.0.33 (root@east.toad.com) (gcc version 2.7.2.1) #13 Tue Jun 9 04:36:25 PDT 1998

# cat /proc/net/ipsec_tncfg

TNCFG:
ipsec0 -> eth0
ipsec1 ->

# cat /proc/net/ipsec_spigrp

SPIGRP:
(209.157.90.146, 0x115, IPv4 Simple Encapsulation) (209.157.90.146, 0x113, 3DES-MD5-96 Encryption)

(209.157.90.145, 0x111, 3DES-MD5-96 Encryption)

# cat /proc/net/ipsec_eroute

EROUTE:
(209.157.90.152/255.255.255.248 -> 209.157.90.160/255.255.255.248) =>

    (209.157.90.146, 0x115)

# cat /proc/net/ipsec_spi

SPI:
(209.157.90.146, 0x115, IPv4 Simple Encapsulation: [209.157.90.145 -> 209.157.90.146])

(209.157.90.146, 0x113, 3DES-MD5-96 Encryption: iv = 0x5cefdc17b5f29e15 seq = 7, bit = 0x00000000, win = 1 flags = 0x4 <MANUAL,RESPONDER>)

(209.157.90.145, 0x111, 3DES-MD5-96 Encryption: iv = 0x0123456789abcdef seq = 1, bit = 0x00000000, win = 1 flags = 0x4 <MANUAL,RESPONDER>)

# cat /proc/net/dev

Inter-|   Receive                  |  Transmit
 face |packets errs drop fifo frame|packets errs drop fifo colls carrier
    lo:      0    0    0    0    0        0    0    0    0     0    0
 dummy: No statistics available.
 plip1:      0    0    0    0    0        0    0    0    0     0    0
  eth0:     63    0    0    0    0       55    0    0    0     0    0
  eth1:     14    0    0    0    0        6    0    0    0     0    0
ipsec0:      0    0    0    0    0        6    0    0    0     0    0
ipsec1:      0    0    0    0    0        0    0    0    0     0    0

# netstat -nr

Kernel IP routing table

Destination     Gateway         Genmask         Flags   MSS Window  irtt Iface
209.157.90.144  0.0.0.0         255.255.255.248 U      1500 0          0 eth0
209.157.90.160  209.157.90.146  255.255.255.248 UG     1404 0          0 ipsec0
209.157.90.152  0.0.0.0         255.255.255.248 U      1500 0          0 eth1
127.0.0.0       0.0.0.0         255.0.0.0       U      3584 0          0 lo
0.0.0.0         209.157.90.150  0.0.0.0         UG     1500 0          0 eth0


#  ifconfig -a


lo        Link encap:Local Loopback  
          inet addr:127.0.0.1  Bcast:127.255.255.255  Mask:255.0.0.0
          UP BROADCAST LOOPBACK RUNNING  MTU:3584  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0
          TX packets:0 errors:0 dropped:0 overruns:0

eth0      Link encap:10Mbps Ethernet  HWaddr 00:A0:24:D8:51:2F
          inet addr:209.157.90.145  Bcast:209.157.90.151  Mask:255.255.255.248
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:63 errors:0 dropped:0 overruns:0
          TX packets:55 errors:0 dropped:0 overruns:0
          Interrupt:10 Base address:0xfe80 

eth1      Link encap:10Mbps Ethernet  HWaddr 00:A0:24:97:8C:97
          inet addr:209.157.90.158  Bcast:209.157.90.159  Mask:255.255.255.248
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:14 errors:0 dropped:0 overruns:0
          TX packets:6 errors:0 dropped:0 overruns:0
          Interrupt:3 Base address:0xff40 

ipsec0    Link encap:IPIP Tunnel  HWaddr 
          inet addr:140.174.2.9  Bcast:140.174.2.255  Mask:255.255.255.0
          UP BROADCAST RUNNING NOARP  MTU:1404  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0
Can we help you?
In addition to our free technical library, Pantek provides professional IT services to companies who utilize Open Source software:
Learn more about Pantek's Technical Support offerings
Place an order for 24/7/365 Technical Support here
Learn more about Pantek, who we are, and what we do
Chat with a Live Operator
Related lists.freeswan.org Links
1998-fall
1998-spring
1998-summer
1998-winter
1999-winter
announce
briefs
bugs
design
freeswan-list
hipsec
ietf-sectest
users
users-admin
Request more information about Pantek
          TX packets:6 errors:0 dropped:0 overruns:0


#  cat /proc/modules


ipsec             21		1


#  cat /proc/meminfo


        total:    used:    free:  shared: buffers:  cached:
Mem:  31690752  8380416 23310336  5386240  1511424  3522560
Swap: 133885952        0 133885952
MemTotal:     30948 kB
MemFree:      22764 kB
MemShared:     5260 kB
Buffers:       1476 kB
Cached:        3440 kB

SwapTotal: 130748 kB
SwapFree: 130748 kB

# cat /proc/net/ip_forward

IP firewall forward rules, default 4

# cat /proc/net/ip_input

IP firewall input rules, default 4

# cat /proc/net/ip_output

IP firewall output rules, default 4

# cat /proc/net/route

Iface	Destination	Gateway 	Flags	RefCnt	Use	Metric	Mask		MTU	Window	IRTT                                                       
eth0	905A9DD1	00000000	01	0	2	0	F8FFFFFF	1500	0	0                                                                              
ipsec0	A05A9DD1	925A9DD1	03	0	1	0	F8FFFFFF	1404	0	0                                                                            
eth1	985A9DD1	00000000	01	0	1	0	F8FFFFFF	1500	0	0                                                                              
lo	0000007F	00000000	01	0	0	0	000000FF	3584	0	0                                                                                
eth0	00000000	965A9DD1	03	0	2	0	00000000	1500	0	0                                                                              

# grep IP /usr/src/linux/.config

CONFIG_SYSVIPC=y
CONFIG_IP_FORWARD=y
CONFIG_IP_MULTICAST=y
CONFIG_IP_FIREWALL=y
CONFIG_IP_FIREWALL_VERBOSE=y

# CONFIG_IP_MASQUERADE is not set

CONFIG_IP_ALWAYS_DEFRAG=y
CONFIG_IP_ACCT=y
CONFIG_IP_ROUTER=y
CONFIG_NET_IPIP=m

# CONFIG_IP_ALIAS is not set

CONFIG_IP_NOSR=y
# CONFIG_IPX is not set

CONFIG_IPSEC=m
CONFIG_IPSEC_IPIP=y
CONFIG_IPSEC_AH=y
CONFIG_IPSEC_AH_HMAC_MD5=y
CONFIG_IPSEC_AH_HMAC_SHA1=y
CONFIG_IPSEC_AH_MD5=y
CONFIG_IPSEC_ESP=y
CONFIG_IPSEC_ESP_DES_CBC=y
CONFIG_IPSEC_ESP_DES_MD5=y
CONFIG_IPSEC_ESP_3DES_MD5=y
CONFIG_IPSEC_ESP_DES_MD5_96=y
CONFIG_IPSEC_ESP_3DES_MD5_96=y

DEBUG_IPSEC=y
CONFIG_PLIP=y
# CONFIG_SLIP is not set

# tail -100 /var/log/kern.debug

Jun  9 08:16:07 east kernel: pcibios_init : BIOS32 Service Directory entry at 0xfc610
Jun  9 08:16:07 east kernel: pcibios_init : PCI BIOS revision 2.10 entry at 0xfc631
Can't find what you're looking for?
In addition to our free technical library, Pantek provides professional IT services to companies who utilize Open Source software:
Learn more about Pantek's Technical Support offerings
Place an order for 24/7/365 Technical Support here
Learn more about Pantek, who we are, and what we do
Chat with a Live Operator
Related lists.freeswan.org Links
1998-fall
1998-spring
1998-summer
1998-winter
1999-winter
announce
briefs
bugs
design
freeswan-list
hipsec
ietf-sectest
users
users-admin
Request more information about Pantek
Jun  9 08:16:07 east kernel: Probing PCI hardware.
Jun  9 08:16:07 east kernel: Calibrating delay loop.. ok - 59.80 BogoMIPS
Jun  9 08:16:07 east kernel: Memory: 30948k/32768k available (688k kernel code, 384k reserved, 748k data)
Jun  9 08:16:07 east kernel: Swansea University Computer Society NET3.035 for Linux 2.0
Jun  9 08:16:07 east kernel: NET3: Unix domain sockets 0.13 for Linux NET3.035.
Jun  9 08:16:07 east kernel: Swansea University Computer Society TCP/IP for NET3.034
Jun  9 08:16:07 east kernel: IP Protocols: IGMP, ICMP, UDP, TCP
Jun  9 08:16:07 east kernel: Checking 386/387 coupling... Ok, fpu using exception 16 error reporting.
Jun  9 08:16:07 east kernel: Checking 'hlt' instruction... Ok.
Jun  9 08:16:07 east kernel: Intel Pentium with F0 0F bug - workaround enabled.
Jun  9 08:16:07 east kernel: alias mapping IDT readonly ...  ... done
Jun  9 08:16:07 east kernel: Linux version 2.0.33 (root@east.toad.com) (gcc version 2.7.2.1) #13 Tue Jun 9 04:36:25 PDT 1998
Jun  9 08:16:07 east kernel: Starting kswapd v 1.4.2.2 
Jun  9 08:16:07 east kernel: Serial driver version 4.13 with no serial options enabled
Jun  9 08:16:07 east kernel: tty00 at 0x03f8 (irq = 4) is a 16550A
Jun  9 08:16:07 east kernel: tty02 at 0x03e8 (irq = 4) is a 16550A
Jun  9 08:16:07 east kernel: Real Time Clock Driver v1.07
Jun  9 08:16:07 east kernel: Floppy drive(s): fd0 is 1.44M
Jun  9 08:16:07 east kernel: FDC 0 is a National Semiconductor PC87306
Jun  9 08:16:07 east kernel: scsi: ***** BusLogic SCSI Driver Version 2.0.10 of 11 August 1997 *****
Jun  9 08:16:07 east kernel: scsi: Copyright 1995 by Leonard N. Zubkoff 
Jun  9 08:16:07 east kernel: scsi0: Configuring BusLogic Model BT-948 PCI Ultra SCSI Host Adapter
Don't know where to look next?
In addition to our free technical library, Pantek provides professional IT services to companies who utilize Open Source software:
Learn more about Pantek's Technical Support offerings
Place an order for 24/7/365 Technical Support here
Learn more about Pantek, who we are, and what we do
Chat with a Live Operator
Related lists.freeswan.org Links
1998-fall
1998-spring
1998-summer
1998-winter
1999-winter
announce
briefs
bugs
design
freeswan-list
hipsec
ietf-sectest
users
users-admin
Request more information about Pantek
Jun  9 08:16:07 east kernel: scsi0:   Firmware Version: 5.05R, I/O Address: 0xFFF4, IRQ Channel: 11/Level
Jun  9 08:16:07 east kernel: scsi0:   PCI Bus: 0, Device: 15, Address: 0xFFFBF000, Host Adapter SCSI ID: 7
Jun  9 08:16:07 east kernel: scsi0:   Parity Checking: Enabled, Extended Translation: Enabled
Jun  9 08:16:07 east kernel: scsi0:   Synchronous Negotiation: Fast, Wide Negotiation: Disabled
Jun  9 08:16:07 east kernel: scsi0:   Disconnect/Reconnect: Enabled, Tagged Queuing: Enabled
Jun  9 08:16:07 east kernel: scsi0:   Scatter/Gather Limit: 128 of 8192 segments, Mailboxes: 255
Jun  9 08:16:07 east kernel: scsi0:   Driver Queue Depth: 255, Host Adapter Queue Depth: 192
Jun  9 08:16:07 east kernel: scsi0:   Tagged Queue Depth: Automatic, Untagged Queue Depth: 3
Jun  9 08:16:07 east kernel: scsi0:   Error Recovery Strategy: Default, SCSI Bus Reset: Enabled
Jun  9 08:16:07 east kernel: scsi0:   SCSI Bus Termination: Enabled, SCAM: Disabled
Jun  9 08:16:07 east kernel: scsi0: *** BusLogic BT-948 Initialized Successfully ***
Jun  9 08:16:07 east kernel: scsi0:   Target 0: Synchronous at 10.0 mega-transfers/second, offset 15
Jun  9 08:16:07 east kernel: scsi0:   Target 1: Synchronous at 10.0 mega-transfers/second, offset 15
Jun  9 08:16:07 east kernel: scsi0:   Target 3: Synchronous at 10.0 mega-transfers/second, offset 15
Jun  9 08:16:07 east kernel: scsi0:   Target 6: Asynchronous
Jun  9 08:16:07 east kernel: scsi0 : BusLogic BT-948
Jun  9 08:16:07 east kernel: scsi : 1 host.
Jun  9 08:16:07 east kernel:   Vendor: HP        Model: C3725S            Rev: 6039
Jun  9 08:16:07 east kernel:   Type:   Direct-Access                      ANSI SCSI revision: 02
Confused? Frustrated?
In addition to our free technical library, Pantek provides professional IT services to companies who utilize Open Source software:
Learn more about Pantek's Technical Support offerings
Place an order for 24/7/365 Technical Support here
Learn more about Pantek, who we are, and what we do
Chat with a Live Operator
Related lists.freeswan.org Links
1998-fall
1998-spring
1998-summer
1998-winter
1999-winter
announce
briefs
bugs
design
freeswan-list
hipsec
ietf-sectest
users
users-admin
Request more information about Pantek
Jun  9 08:16:07 east kernel: Detected scsi disk sda at scsi0, channel 0, id 0, lun 0
Jun  9 08:16:07 east kernel:   Vendor: FUJITSU   Model: M2624F-512        Rev: 0405
Jun  9 08:16:07 east kernel:   Type:   Direct-Access                      ANSI SCSI revision: 02
Jun  9 08:16:07 east kernel: Detected scsi disk sdb at scsi0, channel 0, id 1, lun 0
Jun  9 08:16:07 east kernel:   Vendor: IBM       Model: DORS-32160    !#  Rev: WA3E
Jun  9 08:16:07 east kernel:   Type:   Direct-Access                      ANSI SCSI revision: 02
Jun  9 08:16:07 east kernel: Detected scsi disk sdc at scsi0, channel 0, id 3, lun 0
Jun  9 08:16:07 east kernel:   Vendor: IBM       Model: CDRM00203     !J  Rev: 1.0m
Jun  9 08:16:07 east kernel:   Type:   CD-ROM                             ANSI SCSI revision: 02
Jun  9 08:16:07 east kernel: Detected scsi CD-ROM sr0 at scsi0, channel 0, id 6, lun 0
Jun  9 08:16:07 east kernel: scsi : detected 1 SCSI cdrom 3 SCSI disks total.
Jun  9 08:16:07 east kernel: SCSI device sda: hdwr sector= 512 bytes. Sectors= 4194058 [2047 MB] [2.0 GB]
Jun  9 08:16:07 east kernel: SCSI device sdb: hdwr sector= 512 bytes. Sectors= 1015812 [496 MB] [0.5 GB]
Jun  9 08:16:07 east kernel: SCSI device sdc: hdwr sector= 512 bytes. Sectors= 4226725 [2063 MB] [2.1 GB]
Jun  9 08:16:07 east kernel: PPP: version 2.2.0 (dynamic channel allocation)
Jun  9 08:16:07 east kernel: TCP compression code copyright 1989 Regents of the University of California
Jun  9 08:16:07 east kernel: PPP Dynamic channel allocation code copyright 1995 Caldera, Inc.
Jun  9 08:16:07 east kernel: PPP line discipline registered.
Jun  9 08:16:07 east kernel: NET3 PLIP version 2.2 gniibe@mri.co.jp
Jun  9 08:16:07 east kernel: plip1: Parallel port at 0x378, using assigned IRQ 7.
Call Pantek today for Open Source Technical Support at 1-877-546-8934 - 24/7/365
In addition to our free technical library, Pantek provides professional IT services to companies who utilize Open Source software:
Learn more about Pantek's Technical Support offerings
Place an order for 24/7/365 Technical Support here
Learn more about Pantek, who we are, and what we do
Chat with a Live Operator
Related lists.freeswan.org Links
1998-fall
1998-spring
1998-summer
1998-winter
1999-winter
announce
briefs
bugs
design
freeswan-list
hipsec
ietf-sectest
users
users-admin
Request more information about Pantek
Jun  9 08:16:07 east kernel: eth0: 3Com 3c905 Boomerang 100baseTx at 0xfe80, 00:a0:24:d8:51:2f, IRQ 10
Jun  9 08:16:07 east kernel:   8K word-wide RAM 3:5 Rx:Tx split, autoselect/NWay Autonegotiation interface.
Jun  9 08:16:07 east kernel:   MII transceiver found at address 24, status 782b.
Jun  9 08:16:07 east kernel:   Enabling bus-master transmits and whole-frame receives.
Jun  9 08:16:07 east kernel: eth1: 3Com 3c595 Vortex 100baseTX at 0xff40, 00:a0:24:97:8c:97, IRQ 3
Jun  9 08:16:07 east kernel:   64K word-wide RAM 3:1 Rx:Tx split, autoselect/10baseT interface.
Jun  9 08:16:07 east kernel: eth1: Overriding PCI latency timer (CFLT) setting of 64, new value is 248.
Jun  9 08:16:07 east kernel: 3c59x.c:v0.99D 4/26/98 Donald Becker 
http://cesdis.gsfc.nasa.gov/linux/drivers/vortex.html
Jun  9 08:16:07 east kernel: Partition check:
Jun  9 08:16:07 east kernel:  sda: sda1 sda3 < sda5 sda6 sda7 sda8 sda9 sda10 sda11 sda12 sda13 sda14 >
Jun  9 08:16:07 east kernel:  sdb: unknown partition table
Jun  9 08:16:07 east kernel:  sdc: sdc1 sdc2
Jun  9 08:16:07 east kernel: VFS: Mounted root (ext2 filesystem) readonly.
Jun  9 08:16:07 east kernel: scsi0: Tagged Queuing now active for Target 0
Jun  9 08:16:07 east kernel: Adding Swap: 130748k swap-space (priority -1)
Jun  9 08:16:10 east kernel: ipsec_init: attaching 
Jun  9 08:16:10 east kernel: ipe4_attach: called.$Id: ipsec_ipe4.c,v 1.5 1998/05/27 23:19:19 rgb Exp $
Jun  9 08:16:10 east kernel: ipsec_init: attaching 
Jun  9 08:16:10 east kernel: ahmd5_attach: called.$Id: ipsec_ahmd5.c,v 1.5 1998/05/27 23:19:17 rgb Exp $
Jun  9 08:16:10 east kernel: ipsec_init: attaching 
Jun  9 08:16:10 east kernel: espdes_attach: called.$Id: ipsec_espdes.c,v 1.5 1998/05/27 23:19:18 rgb Exp $
Do you need help?
In addition to our free technical library, Pantek provides professional IT services to companies who utilize Open Source software:
Learn more about Pantek's Technical Support offerings
Place an order for 24/7/365 Technical Support here
Learn more about Pantek, who we are, and what we do
Chat with a Live Operator
Related lists.freeswan.org Links
1998-fall
1998-spring
1998-summer
1998-winter
1999-winter
announce
briefs
bugs
design
freeswan-list
hipsec
ietf-sectest
users
users-admin
Request more information about Pantek
Jun  9 08:16:10 east kernel: ipsec_init: attaching 
Jun  9 08:16:10 east kernel: ahhmacmd5_attach: called.$Id: ipsec_ahhmacmd5.c,v 1.6 1998/05/27 23:19:15 rgb Exp $
Jun  9 08:16:10 east kernel: ipsec_init: attaching 
Jun  9 08:16:10 east kernel: ahhmacsha1_attach: called.$Id: ipsec_ahhmacsha1.c,v 1.6 1998/05/27 23:19:16 rgb Exp $
Jun  9 08:16:10 east kernel: ipsec_init: attaching 
Jun  9 08:16:10 east kernel: espdesmd5_attach: called.$Id: ipsec_espdesmd5.c,v 1.5 1998/05/27 23:41:29 rgb Exp $
Jun  9 08:16:10 east kernel: ipsec_init: attaching <3DES-MD5 Encryption>
Jun  9 08:16:10 east kernel: esp3desmd5_attach: called.$Id: ipsec_esp3desmd5.c,v 1.5 1998/05/27 23:41:31 rgb Exp $
Jun  9 08:16:10 east kernel: ipsec_init: attaching <3DES-MD5-96 Encryption>
Jun  9 08:16:10 east kernel: esp3desmd596_attach: called.$Id: ipsec_esp3desmd596.c,v 1.7 1998/06/05 02:34:21 rgb Exp $
Jun  9 08:16:10 east kernel: ipsec_init: attaching 
Jun  9 08:16:10 east kernel: espdesmd596_attach: called.$Id: ipsec_espdesmd596.c,v 1.6 1998/05/27 23:41:30 rgb Exp $
Jun  9 08:16:10 east kernel: ipsec_tunnel_init: KLIPS: tunneling code rel pre0.9
Jun  9 08:16:10 east kernel: ipsec_tunnel_init: KLIPS: $Id: ipsec_tunnel.c,v 1.7 1998/05/27 23:19:20 rgb Exp $
Jun  9 08:18:09 east kernel: esp3desmd596_input: decrypted packet from 209.157.90.146 has bad padding...may be bad decryption
Jun  9 08:18:32 east last message repeated 98 times

# tail -256 /var/log/messages | grep "ipsec\|XXX" > /tmp/ipsec_systat.295

Jun  9 06:37:57 east ipsec: setting up handkeyd tunnel: ipsec-ew.rc
Jun  9 06:37:56 east kernel: ipsec_init: attaching 
Jun  9 06:37:56 east kernel: ipe4_attach: called.$Id: ipsec_ipe4.c,v 1.5 1998/05/27 23:19:19 rgb Exp $
Can we help you?
In addition to our free technical library, Pantek provides professional IT services to companies who utilize Open Source software:
Learn more about Pantek's Technical Support offerings
Place an order for 24/7/365 Technical Support here
Learn more about Pantek, who we are, and what we do
Chat with a Live Operator
Related lists.freeswan.org Links
1998-fall
1998-spring
1998-summer
1998-winter
1999-winter
announce
briefs
bugs
design
freeswan-list
hipsec
ietf-sectest
users
users-admin
Request more information about Pantek
Jun  9 06:37:56 east kernel: ipsec_init: attaching 
Jun  9 06:37:56 east kernel: ahmd5_attach: called.$Id: ipsec_ahmd5.c,v 1.5 1998/05/27 23:19:17 rgb Exp $
Jun  9 06:37:56 east kernel: ipsec_init: attaching 
Jun  9 06:37:56 east kernel: espdes_attach: called.$Id: ipsec_espdes.c,v 1.5 1998/05/27 23:19:18 rgb Exp $
Jun  9 06:37:56 east kernel: ipsec_init: attaching 
Jun  9 06:37:56 east kernel: ahhmacmd5_attach: called.$Id: ipsec_ahhmacmd5.c,v 1.6 1998/05/27 23:19:15 rgb Exp $
Jun  9 06:37:56 east kernel: ipsec_init: attaching 
Jun  9 06:37:56 east kernel: ahhmacsha1_attach: called.$Id: ipsec_ahhmacsha1.c,v 1.6 1998/05/27 23:19:16 rgb Exp $
Jun  9 06:37:56 east kernel: ipsec_init: attaching 
Jun  9 06:37:56 east kernel: espdesmd5_attach: called.$Id: ipsec_espdesmd5.c,v 1.5 1998/05/27 23:41:29 rgb Exp $
Jun  9 06:37:56 east kernel: ipsec_init: attaching <3DES-MD5 Encryption>
Jun  9 06:37:56 east kernel: esp3desmd5_attach: called.$Id: ipsec_esp3desmd5.c,v 1.5 1998/05/27 23:41:31 rgb Exp $
Jun  9 06:37:56 east kernel: ipsec_init: attaching <3DES-MD5-96 Encryption>
Jun  9 06:37:56 east kernel: esp3desmd596_attach: called.$Id: ipsec_esp3desmd596.c,v 1.7 1998/06/05 02:34:21 rgb Exp $
Jun  9 06:37:56 east kernel: ipsec_init: attaching 
Jun  9 06:37:56 east kernel: espdesmd596_attach: called.$Id: ipsec_espdesmd596.c,v 1.6 1998/05/27 23:41:30 rgb Exp $
Jun  9 06:37:56 east kernel: ipsec_tunnel_init: KLIPS: tunneling code rel pre0.9
Jun  9 06:37:56 east kernel: ipsec_tunnel_init: KLIPS: $Id: ipsec_tunnel.c,v 1.7 1998/05/27 23:19:20 rgb Exp $
Can't find what you're looking for?
In addition to our free technical library, Pantek provides professional IT services to companies who utilize Open Source software:
Learn more about Pantek's Technical Support offerings
Place an order for 24/7/365 Technical Support here
Learn more about Pantek, who we are, and what we do
Chat with a Live Operator
Related lists.freeswan.org Links
1998-fall
1998-spring
1998-summer
1998-winter
1999-winter
announce
briefs
bugs
design
freeswan-list
hipsec
ietf-sectest
users
users-admin
Request more information about Pantek
Jun  9 07:51:33 east ipsec: setting up handkeyd tunnel: ipsec-0000.rc
Jun  9 07:51:35 east ipsec: setting up handkeyd tunnel: ipsec-ew.rc
Jun  9 07:51:34 east kernel: ipsec_init: attaching 
Jun  9 07:51:34 east kernel: ipe4_attach: called.$Id: ipsec_ipe4.c,v 1.5 1998/05/27 23:19:19 rgb Exp $
Jun  9 07:51:34 east kernel: ipsec_init: attaching 
Jun  9 07:51:34 east kernel: ahmd5_attach: called.$Id: ipsec_ahmd5.c,v 1.5 1998/05/27 23:19:17 rgb Exp $
Jun  9 07:51:34 east kernel: ipsec_init: attaching 
Jun  9 07:51:34 east kernel: espdes_attach: called.$Id: ipsec_espdes.c,v 1.5 1998/05/27 23:19:18 rgb Exp $
Jun  9 07:51:34 east kernel: ipsec_init: attaching 
Jun  9 07:51:34 east kernel: ahhmacmd5_attach: called.$Id: ipsec_ahhmacmd5.c,v 1.6 1998/05/27 23:19:15 rgb Exp $
Jun  9 07:51:34 east kernel: ipsec_init: attaching 
Jun  9 07:51:34 east kernel: ahhmacsha1_attach: called.$Id: ipsec_ahhmacsha1.c,v 1.6 1998/05/27 23:19:16 rgb Exp $
Jun  9 07:51:34 east kernel: ipsec_init: attaching 
Jun  9 07:51:34 east kernel: espdesmd5_attach: called.$Id: ipsec_espdesmd5.c,v 1.5 1998/05/27 23:41:29 rgb Exp $
Jun  9 07:51:34 east kernel: ipsec_init: attaching <3DES-MD5 Encryption>
Jun  9 07:51:34 east kernel: esp3desmd5_attach: called.$Id: ipsec_esp3desmd5.c,v 1.5 1998/05/27 23:41:31 rgb Exp $
Jun  9 07:51:34 east kernel: ipsec_init: attaching <3DES-MD5-96 Encryption>
Jun  9 07:51:34 east kernel: esp3desmd596_attach: called.$Id: ipsec_esp3desmd596.c,v 1.7 1998/06/05 02:34:21 rgb Exp $
Jun  9 07:51:34 east kernel: ipsec_init: attaching 
Jun  9 07:51:34 east kernel: espdesmd596_attach: called.$Id: ipsec_espdesmd596.c,v 1.6 1998/05/27 23:41:30 rgb Exp $
Don't know where to look next?
In addition to our free technical library, Pantek provides professional IT services to companies who utilize Open Source software:
Learn more about Pantek's Technical Support offerings
Place an order for 24/7/365 Technical Support here
Learn more about Pantek, who we are, and what we do
Chat with a Live Operator
Related lists.freeswan.org Links
1998-fall
1998-spring
1998-summer
1998-winter
1999-winter
announce
briefs
bugs
design
freeswan-list
hipsec
ietf-sectest
users
users-admin
Request more information about Pantek
Jun  9 07:51:34 east kernel: ipsec_tunnel_init: KLIPS: tunneling code rel pre0.9
Jun  9 07:51:34 east kernel: ipsec_tunnel_init: KLIPS: $Id: ipsec_tunnel.c,v 1.7 1998/05/27 23:19:20 rgb Exp $
Jun  9 08:16:09 east ipsec: setting up handkeyd tunnel: ipsec-0000.rc
Jun  9 08:16:11 east ipsec: setting up handkeyd tunnel: ipsec-ew.rc
Jun  9 08:16:10 east kernel: ipsec_init: attaching 
Jun  9 08:16:10 east kernel: ipe4_attach: called.$Id: ipsec_ipe4.c,v 1.5 1998/05/27 23:19:19 rgb Exp $
Jun  9 08:16:10 east kernel: ipsec_init: attaching 
Jun  9 08:16:10 east kernel: ahmd5_attach: called.$Id: ipsec_ahmd5.c,v 1.5 1998/05/27 23:19:17 rgb Exp $
Jun  9 08:16:10 east kernel: ipsec_init: attaching 
Jun  9 08:16:10 east kernel: espdes_attach: called.$Id: ipsec_espdes.c,v 1.5 1998/05/27 23:19:18 rgb Exp $
Jun  9 08:16:10 east kernel: ipsec_init: attaching 
Jun  9 08:16:10 east kernel: ahhmacmd5_attach: called.$Id: ipsec_ahhmacmd5.c,v 1.6 1998/05/27 23:19:15 rgb Exp $
Jun  9 08:16:10 east kernel: ipsec_init: attaching 
Jun  9 08:16:10 east kernel: ahhmacsha1_attach: called.$Id: ipsec_ahhmacsha1.c,v 1.6 1998/05/27 23:19:16 rgb Exp $
Jun  9 08:16:10 east kernel: ipsec_init: attaching 
Jun  9 08:16:10 east kernel: espdesmd5_attach: called.$Id: ipsec_espdesmd5.c,v 1.5 1998/05/27 23:41:29 rgb Exp $
Jun  9 08:16:10 east kernel: ipsec_init: attaching <3DES-MD5 Encryption>
Jun  9 08:16:10 east kernel: esp3desmd5_attach: called.$Id: ipsec_esp3desmd5.c,v 1.5 1998/05/27 23:41:31 rgb Exp $
Jun  9 08:16:10 east kernel: ipsec_init: attaching <3DES-MD5-96 Encryption>
Confused? Frustrated?
In addition to our free technical library, Pantek provides professional IT services to companies who utilize Open Source software:
Learn more about Pantek's Technical Support offerings
Place an order for 24/7/365 Technical Support here
Learn more about Pantek, who we are, and what we do
Chat with a Live Operator
Related lists.freeswan.org Links
1998-fall
1998-spring
1998-summer
1998-winter
1999-winter
announce
briefs
bugs
design
freeswan-list
hipsec
ietf-sectest
users
users-admin
Request more information about Pantek
Jun  9 08:16:10 east kernel: esp3desmd596_attach: called.$Id: ipsec_esp3desmd596.c,v 1.7 1998/06/05 02:34:21 rgb Exp $
Jun  9 08:16:10 east kernel: ipsec_init: attaching 
Jun  9 08:16:10 east kernel: espdesmd596_attach: called.$Id: ipsec_espdesmd596.c,v 1.6 1998/05/27 23:41:30 rgb Exp $
Jun  9 08:16:10 east kernel: ipsec_tunnel_init: KLIPS: tunneling code rel pre0.9
Jun  9 08:16:10 east kernel: ipsec_tunnel_init: KLIPS: $Id: ipsec_tunnel.c,v 1.7 1998/05/27 23:19:20 rgb Exp $

# ipsec_systat finished at Tue Jun 9 08:24:20 PDT 1998

# ipsec_systat on west.toad.com at Tue Jun 9 08:27:11 PDT 1998
Linux west.toad.com 2.0.34 #6 Tue Jun 9 03:21:41 PDT 1998 i586

# cat /proc/version

Linux version 2.0.34 (root@west.toad.com) (gcc version 2.7.2) #6 Tue Jun 9 03:21:41 PDT 1998

# cat /proc/net/ipsec_tncfg

TNCFG:
ipsec0 -> eth0
ipsec1 ->

# cat /proc/net/ipsec_spigrp

SPIGRP:
(209.157.90.146, 0x113, 3DES-MD5-96 Encryption)

(209.157.90.145, 0x110, IPv4 Simple Encapsulation) (209.157.90.145, 0x111, 3DES-MD5-96 Encryption)

# cat /proc/net/ipsec_eroute

EROUTE:
(209.157.90.160/255.255.255.248 -> 209.157.90.152/255.255.255.248) =>

    (209.157.90.145, 0x110)

# cat /proc/net/ipsec_spi

SPI:
(209.157.90.146, 0x113, 3DES-MD5-96 Encryption: iv = 0x0123456789abcdef seq = 1, bit = 0x00000000, win = 1 flags = 0x4 <MANUAL,RESPONDER>)

(209.157.90.145, 0x111, 3DES-MD5-96 Encryption: iv = 0xa8acdba0099ce346 seq = 7, bit = 0x00000000, win = 1 flags = 0x4 <MANUAL,RESPONDER>)

(209.157.90.145, 0x110, IPv4 Simple Encapsulation: [209.157.90.146 -> 209.157.90.145])

# cat /proc/net/dev

Inter-|   Receive                  |  Transmit
 face |packets errs drop fifo frame|packets errs drop fifo colls carrier
    lo:      6    0    0    0    0        6    0    0    0     0    0
 tunl0:      0    0    0    0    0        0    0    0    0     0    0
 tunl1:      0    0    0    0    0        0    0    0    0     0    0
 dummy: No statistics available.
 plip1:      0    0    0    0    0        0    0    0    0     0    0
  eth0:    105    0    0    0    0       83    0    0    0     0    0
  eth1:      8    0    0    0    0        8    0    0    0     0    0
ipsec0:      0    0    0    0    0        6    0    0    0     0    0
ipsec1:      0    0    0    0    0        0    0    0    0     0    0

# netstat -nr

Kernel IP routing table

Destination     Gateway         Genmask         Flags   MSS Window  irtt Iface
209.157.90.144  0.0.0.0         255.255.255.248 U      1500 0          0 eth0
209.157.90.152  209.157.90.145  255.255.255.248 UG     1404 0          0 ipsec0
209.157.90.160  0.0.0.0         255.255.255.248 U      1500 0          0 eth1
127.0.0.0       0.0.0.0         255.0.0.0       U      3584 0          0 lo
0.0.0.0         209.157.90.150  0.0.0.0         UG     1500 0          0 eth0


#  ifconfig -a
Do you need help?
In addition to our free technical library, Pantek provides professional IT services to companies who utilize Open Source software:
Learn more about Pantek's Technical Support offerings
Place an order for 24/7/365 Technical Support here
Learn more about Pantek, who we are, and what we do
Chat with a Live Operator
Related lists.freeswan.org Links
1998-fall
1998-spring
1998-summer
1998-winter
1999-winter
announce
briefs
bugs
design
freeswan-list
hipsec
ietf-sectest
users
users-admin
Request more information about Pantek


lo        Link encap:Local Loopback  
          inet addr:127.0.0.1  Bcast:127.255.255.255  Mask:255.0.0.0
          UP BROADCAST LOOPBACK RUNNING  MTU:3584  Metric:1
          RX packets:6 errors:0 dropped:0 overruns:0
          TX packets:6 errors:0 dropped:0 overruns:0

eth0      Link encap:10Mbps Ethernet  HWaddr 00:A0:24:E6:5C:52
          inet addr:209.157.90.146  Bcast:209.157.90.151  Mask:255.255.255.248
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:105 errors:0 dropped:0 overruns:0
          TX packets:83 errors:0 dropped:0 overruns:0
          Interrupt:10 Base address:0xfe80 

eth1      Link encap:10Mbps Ethernet  HWaddr 00:A0:24:C9:E7:55
          inet addr:209.157.90.166  Bcast:209.157.90.167  Mask:255.255.255.248
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:8 errors:0 dropped:0 overruns:0
          TX packets:8 errors:0 dropped:0 overruns:0
          Interrupt:3 Base address:0xff40 

ipsec0    Link encap:IPIP Tunnel  HWaddr 
          inet addr:140.174.2.9  Bcast:140.174.2.255  Mask:255.255.255.0
          UP BROADCAST RUNNING NOARP  MTU:1404  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0
          TX packets:6 errors:0 dropped:0 overruns:0


#  cat /proc/modules


ipsec             21		1


#  cat /proc/meminfo


        total:    used:    free:  shared: buffers:  cached:
Mem:  15183872  8798208  6385664  6762496  1183744  4186112
Swap: 133885952        0 133885952
MemTotal:     14828 kB
MemFree:       6236 kB
MemShared:     6604 kB
Buffers:       1156 kB
Cached:        4088 kB

SwapTotal: 130748 kB
SwapFree: 130748 kB

# cat /proc/net/ip_forward

IP firewall forward rules, default 4

# cat /proc/net/ip_input

IP firewall input rules, default 4

# cat /proc/net/ip_output

IP firewall output rules, default 4

# cat /proc/net/route

Iface	Destination	Gateway 	Flags	RefCnt	Use	Metric	Mask		MTU	Window	IRTT                                                       
eth0	905A9DD1	00000000	01	0	3	0	F8FFFFFF	1500	0	0                                                                              
Can we help you?
In addition to our free technical library, Pantek provides professional IT services to companies who utilize Open Source software:
Learn more about Pantek's Technical Support offerings
Place an order for 24/7/365 Technical Support here
Learn more about Pantek, who we are, and what we do
Chat with a Live Operator
Related lists.freeswan.org Links
1998-fall
1998-spring
1998-summer
1998-winter
1999-winter
announce
briefs
bugs
design
freeswan-list
hipsec
ietf-sectest
users
users-admin
Request more information about Pantek
ipsec0	985A9DD1	915A9DD1	03	0	1	0	F8FFFFFF	1404	0	0                                                                            
eth1	A05A9DD1	00000000	01	0	1	0	F8FFFFFF	1500	0	0                                                                              
lo	0000007F	00000000	01	0	1	0	000000FF	3584	0	0                                                                                
eth0	00000000	965A9DD1	03	0	6	0	00000000	1500	0	0                                                                              

# grep IP /usr/src/linux/.config

CONFIG_SYSVIPC=y
CONFIG_IP_FORWARD=y
CONFIG_IP_MULTICAST=y
CONFIG_IP_FIREWALL=y
CONFIG_IP_FIREWALL_VERBOSE=y

# CONFIG_IP_MASQUERADE is not set

CONFIG_IP_ALWAYS_DEFRAG=y
CONFIG_IP_ACCT=y
CONFIG_IP_ROUTER=y
CONFIG_NET_IPIP=y

# CONFIG_IP_ALIAS is not set

CONFIG_IP_NOSR=y
# CONFIG_IPX is not set

CONFIG_IPSEC=m
CONFIG_IPSEC_IPIP=y
CONFIG_IPSEC_AH=y
CONFIG_IPSEC_AH_HMAC_MD5=y
CONFIG_IPSEC_AH_HMAC_SHA1=y
CONFIG_IPSEC_AH_MD5=y
CONFIG_IPSEC_ESP=y
CONFIG_IPSEC_ESP_DES_CBC=y
CONFIG_IPSEC_ESP_DES_MD5=y
CONFIG_IPSEC_ESP_3DES_MD5=y
CONFIG_IPSEC_ESP_DES_MD5_96=y
CONFIG_IPSEC_ESP_3DES_MD5_96=y

DEBUG_IPSEC=y
CONFIG_PLIP=y
# CONFIG_SLIP is not set

# tail -100 /var/log/kern.debug

Jun  9 14:54:28 west kernel: espdesmd596_attach: called.$Id: ipsec_espdesmd596.c,v 1.6 1998/05/27 23:41:30 rgb Exp $
Jun  9 14:54:28 west kernel: ipsec_tunnel_init: KLIPS: tunneling code rel pre0.9
Jun  9 14:54:28 west kernel: ipsec_tunnel_init: KLIPS: $Id: ipsec_tunnel.c,v 1.7 1998/05/27 23:19:20 rgb Exp $
Jun  9 07:57:34 west kernel: esp3desmd596_input: decrypted packet from 209.157.90.145 has bad padding...may be bad decryption
Jun  9 07:57:43 west last message repeated 169 times
Jun  9 15:18:57 west kernel: klogd 1.3-3, log source = /proc/kmsg started.
Jun  9 15:18:58 west kernel: Loaded 3439 symbols from /boot/System.map.
Jun  9 15:18:58 west kernel: Symbols match kernel version 2.0.34.
Can't find what you're looking for?
In addition to our free technical library, Pantek provides professional IT services to companies who utilize Open Source software:
Learn more about Pantek's Technical Support offerings
Place an order for 24/7/365 Technical Support here
Learn more about Pantek, who we are, and what we do
Chat with a Live Operator
Related lists.freeswan.org Links
1998-fall
1998-spring
1998-summer
1998-winter
1999-winter
announce
briefs
bugs
design
freeswan-list
hipsec
ietf-sectest
users
users-admin
Request more information about Pantek
Jun  9 15:18:58 west kernel: No module symbols loaded.
Jun  9 15:18:58 west kernel: Console: 16 point font, 400 scans
Jun  9 15:18:58 west kernel: Console: colour VGA+ 80x25, 1 virtual console (max 63)
Jun  9 15:18:58 west kernel: pcibios_init : BIOS32 Service Directory structure at 0x000fc470
Jun  9 15:18:58 west kernel: pcibios_init : BIOS32 Service Directory entry at 0xfc480
Jun  9 15:18:58 west kernel: pcibios_init : PCI BIOS revision 2.10 entry at 0xfc4a1
Jun  9 15:18:58 west kernel: Probing PCI hardware.
Jun  9 15:18:58 west kernel: Calibrating delay loop.. ok - 59.80 BogoMIPS
Jun  9 15:18:58 west kernel: Memory: 14828k/16384k available (668k kernel code, 384k reserved, 504k data)
Jun  9 15:18:58 west kernel: Swansea University Computer Society NET3.035 for Linux 2.0
Jun  9 15:18:58 west kernel: NET3: Unix domain sockets 0.13 for Linux NET3.035.
Jun  9 15:18:58 west kernel: Swansea University Computer Society TCP/IP for NET3.034
Jun  9 15:18:58 west kernel: IP Protocols: IGMP, ICMP, UDP, TCP, IPIP
Jun  9 15:18:58 west kernel: Checking 386/387 coupling... Ok, fpu using exception 16 error reporting.
Jun  9 15:18:58 west kernel: Checking 'hlt' instruction... Ok.
Jun  9 15:18:58 west kernel: Intel Pentium with F0 0F bug - workaround enabled.
Jun  9 15:18:58 west kernel: alias mapping IDT readonly ...  ... done
Jun  9 15:18:58 west kernel: Linux version 2.0.34 (root@west.toad.com) (gcc version 2.7.2) #6 Tue Jun 9 03:21:41 PDT 1998
Jun  9 15:18:58 west kernel: Starting kswapd v 1.4.2.2 
Jun  9 15:18:58 west kernel: Serial driver version 4.13 with no serial options enabled
Jun  9 15:18:58 west kernel: tty00 at 0x03f8 (irq = 4) is a 16550A
Jun  9 15:18:58 west kernel: tty02 at 0x03e8 (irq = 4) is a 16550A
Don't know where to look next?
In addition to our free technical library, Pantek provides professional IT services to companies who utilize Open Source software:
Learn more about Pantek's Technical Support offerings
Place an order for 24/7/365 Technical Support here
Learn more about Pantek, who we are, and what we do
Chat with a Live Operator
Related lists.freeswan.org Links
1998-fall
1998-spring
1998-summer
1998-winter
1999-winter
announce
briefs
bugs
design
freeswan-list
hipsec
ietf-sectest
users
users-admin
Request more information about Pantek
Jun  9 15:18:58 west kernel: Floppy drive(s): fd0 is 1.44M
Jun  9 15:18:58 west kernel: FDC 0 is a National Semiconductor PC87306
Jun  9 15:18:58 west kernel: scsi: ***** BusLogic SCSI Driver Version 2.0.14 of 29 April 1998 *****
Jun  9 15:18:58 west kernel: scsi: Copyright 1995-1998 by Leonard N. Zubkoff 
Jun  9 15:18:58 west kernel: scsi0: Configuring BusLogic Model BT-946C PCI SCSI Host Adapter
Jun  9 15:18:58 west kernel: scsi0:   Firmware Version: 4.28D, I/O Address: 0xFFF4, IRQ Channel: 11/Level
Jun  9 15:18:58 west kernel: scsi0:   PCI Bus: 0, Device: 15, Address: Unassigned, Host Adapter SCSI ID: 7
Jun  9 15:18:58 west kernel: scsi0:   Parity Checking: Enabled, Extended Translation: Disabled
Jun  9 15:18:58 west kernel: scsi0:   Synchronous Negotiation: SFFFFFF#, Wide Negotiation: Disabled
Jun  9 15:18:58 west kernel: scsi0:   Disconnect/Reconnect: Enabled, Tagged Queuing: Enabled
Jun  9 15:18:58 west kernel: scsi0:   Scatter/Gather Limit: 128 of 8192 segments, Mailboxes: 211
Jun  9 15:18:58 west kernel: scsi0:   Driver Queue Depth: 211, Host Adapter Queue Depth: 100
Jun  9 15:18:58 west kernel: scsi0:   Tagged Queue Depth: Automatic, Untagged Queue Depth: 3
Jun  9 15:18:58 west kernel: scsi0:   Error Recovery Strategy: Default, SCSI Bus Reset: Enabled
Jun  9 15:18:58 west kernel: scsi0:   SCSI Bus Termination: Enabled
Jun  9 15:18:58 west kernel: scsi0: *** BusLogic BT-946C Initialized Successfully ***
Jun  9 15:18:58 west kernel: scsi0 : BusLogic BT-946C
Jun  9 15:18:58 west kernel: scsi : 1 host.
Jun  9 15:18:58 west kernel:   Vendor: HP        Model: C3725S            Rev: 6019
Jun  9 15:18:58 west kernel:   Type:   Direct-Access                      ANSI SCSI revision: 02
Confused? Frustrated?
In addition to our free technical library, Pantek provides professional IT services to companies who utilize Open Source software:
Learn more about Pantek's Technical Support offerings
Place an order for 24/7/365 Technical Support here
Learn more about Pantek, who we are, and what we do
Chat with a Live Operator
Related lists.freeswan.org Links
1998-fall
1998-spring
1998-summer
1998-winter
1999-winter
announce
briefs
bugs
design
freeswan-list
hipsec
ietf-sectest
users
users-admin
Request more information about Pantek
Jun  9 15:18:58 west kernel: Detected scsi disk sda at scsi0, channel 0, id 0, lun 0
Jun  9 15:18:58 west kernel:   Vendor: IBM       Model: CDRM00203     !J  Rev: 1.0m
Jun  9 15:18:58 west kernel:   Type:   CD-ROM                             ANSI SCSI revision: 02
Jun  9 15:18:58 west kernel: Detected scsi CD-ROM sr0 at scsi0, channel 0, id 6, lun 0
Jun  9 15:18:58 west kernel: scsi0: Target 0: Queue Depth 28, Synchronous at 5.00 MB/sec, offset 15
Jun  9 15:18:58 west kernel: scsi0: Target 6: Queue Depth 3, Asynchronous
Jun  9 15:18:58 west kernel: scsi : detected 1 SCSI cdrom 1 SCSI disk total.
Jun  9 15:18:58 west kernel: SCSI device sda: hdwr sector= 512 bytes. Sectors= 4194058 [2047 MB] [2.0 GB]
Jun  9 15:18:58 west kernel: tunnel: version v0.2b2
Jun  9 15:18:58 west kernel: PPP: version 2.2.0 (dynamic channel allocation)
Jun  9 15:18:58 west kernel: TCP compression code copyright 1989 Regents of the University of California
Jun  9 15:18:58 west kernel: PPP Dynamic channel allocation code copyright 1995 Caldera, Inc.
Jun  9 15:18:58 west kernel: PPP line discipline registered.
Jun  9 15:18:58 west kernel: NET3 PLIP version 2.2 gniibe@mri.co.jp
Jun  9 15:18:58 west kernel: plip1: Parallel port at 0x378, using assigned IRQ 7.
Jun  9 15:18:58 west kernel: eth0: 3Com 3c905 Boomerang 100baseTx at 0xfe80, 00:a0:24:e6:5c:52, IRQ 10
Jun  9 15:18:58 west kernel:   8K word-wide RAM 3:5 Rx:Tx split, autoselect/NWay Autonegotiation interface.
Jun  9 15:18:58 west kernel:   MII transceiver found at address 24, status 782b.
Jun  9 15:18:58 west kernel:   Enabling bus-master transmits and whole-frame receives.
Jun  9 15:18:58 west kernel: eth1: 3Com 3c595 Vortex 100baseTX at 0xff40, 00:a0:24:c9:e7:55, IRQ 3
Jun  9 15:18:58 west kernel:   64K word-wide RAM 3:1 Rx:Tx split, autoselect/10baseT interface.
Call Pantek today for Open Source Technical Support at 1-877-546-8934 - 24/7/365
In addition to our free technical library, Pantek provides professional IT services to companies who utilize Open Source software:
Learn more about Pantek's Technical Support offerings
Place an order for 24/7/365 Technical Support here
Learn more about Pantek, who we are, and what we do
Chat with a Live Operator
Related lists.freeswan.org Links
1998-fall
1998-spring
1998-summer
1998-winter
1999-winter
announce
briefs
bugs
design
freeswan-list
hipsec
ietf-sectest
users
users-admin
Request more information about Pantek
Jun  9 15:18:58 west kernel: eth1: Overriding PCI latency timer (CFLT) setting of 64, new value is 248.
Jun  9 15:18:58 west kernel: 3c59x.c:v0.99E 5/12/98 Donald Becker 
http://cesdis.gsfc.nasa.gov/linux/drivers/vortex.html
Jun  9 15:18:58 west kernel: Partition check:
Jun  9 15:18:58 west kernel:  sda: sda1 sda2 sda3 sda4 < sda5 sda6 sda7 sda8 sda9 >
Jun  9 15:18:58 west kernel: VFS: Mounted root (ext2 filesystem) readonly.
Jun  9 15:18:58 west kernel: scsi0: Tagged Queuing now active for Target 0
Jun  9 15:18:58 west kernel: Adding Swap: 130748k swap-space (priority -1)
Jun  9 15:19:00 west kernel: ipsec_init: attaching 
Jun  9 15:19:00 west kernel: ipe4_attach: called.$Id: ipsec_ipe4.c,v 1.5 1998/05/27 23:19:19 rgb Exp $
Jun  9 15:19:00 west kernel: ipsec_init: attaching 
Jun  9 15:19:00 west kernel: ahmd5_attach: called.$Id: ipsec_ahmd5.c,v 1.5 1998/05/27 23:19:17 rgb Exp $
Jun  9 15:19:00 west kernel: ipsec_init: attaching 
Jun  9 15:19:00 west kernel: espdes_attach: called.$Id: ipsec_espdes.c,v 1.5 1998/05/27 23:19:18 rgb Exp $
Jun  9 15:19:00 west kernel: ipsec_init: attaching 
Jun  9 15:19:00 west kernel: ahhmacmd5_attach: called.$Id: ipsec_ahhmacmd5.c,v 1.6 1998/05/27 23:19:15 rgb Exp $
Jun  9 15:19:00 west kernel: ipsec_init: attaching 
Jun  9 15:19:00 west kernel: ahhmacsha1_attach: called.$Id: ipsec_ahhmacsha1.c,v 1.6 1998/05/27 23:19:16 rgb Exp $
Jun  9 15:19:00 west kernel: ipsec_init: attaching 
Jun  9 15:19:00 west kernel: espdesmd5_attach: called.$Id: ipsec_espdesmd5.c,v 1.5 1998/05/27 23:41:29 rgb Exp $
Jun  9 15:19:00 west kernel: ipsec_init: attaching <3DES-MD5 Encryption>
Do you need help?
In addition to our free technical library, Pantek provides professional IT services to companies who utilize Open Source software:
Learn more about Pantek's Technical Support offerings
Place an order for 24/7/365 Technical Support here
Learn more about Pantek, who we are, and what we do
Chat with a Live Operator
Related lists.freeswan.org Links
1998-fall
1998-spring
1998-summer
1998-winter
1999-winter
announce
briefs
bugs
design
freeswan-list
hipsec
ietf-sectest
users
users-admin
Request more information about Pantek
Jun  9 15:19:00 west kernel: esp3desmd5_attach: called.$Id: ipsec_esp3desmd5.c,v 1.5 1998/05/27 23:41:31 rgb Exp $
Jun  9 15:19:00 west kernel: ipsec_init: attaching <3DES-MD5-96 Encryption>
Jun  9 15:19:00 west kernel: esp3desmd596_attach: called.$Id: ipsec_esp3desmd596.c,v 1.7 1998/06/05 02:34:21 rgb Exp $
Jun  9 15:19:00 west kernel: ipsec_init: attaching 
Jun  9 15:19:00 west kernel: espdesmd596_attach: called.$Id: ipsec_espdesmd596.c,v 1.6 1998/05/27 23:41:30 rgb Exp $
Jun  9 15:19:00 west kernel: ipsec_tunnel_init: KLIPS: tunneling code rel pre0.9
Jun  9 15:19:00 west kernel: ipsec_tunnel_init: KLIPS: $Id: ipsec_tunnel.c,v 1.7 1998/05/27 23:19:20 rgb Exp $
Jun  9 08:20:50 west kernel: esp3desmd596_input: decrypted packet from 209.157.90.145 has bad padding...may be bad decryption
Jun  9 08:21:13 west last message repeated 98 times

# tail -256 /var/log/messages | grep "ipsec\|XXX" > /tmp/ipsec_systat.242

Jun  9 13:40:42 west kernel: ipsec_init: attaching 
Jun  9 13:40:42 west kernel: espdes_attach: called.$Id: ipsec_espdes.c,v 1.5 1998/05/27 23:19:18 rgb Exp $
Jun  9 13:40:42 west kernel: ipsec_init: attaching 
Jun  9 13:40:42 west kernel: ahhmacmd5_attach: called.$Id: ipsec_ahhmacmd5.c,v 1.6 1998/05/27 23:19:15 rgb Exp $
Jun  9 13:40:42 west kernel: ipsec_init: attaching 
Jun  9 13:40:42 west kernel: ahhmacsha1_attach: called.$Id: ipsec_ahhmacsha1.c,v 1.6 1998/05/27 23:19:16 rgb Exp $
Jun  9 13:40:42 west kernel: ipsec_init: attaching 
Jun  9 13:40:42 west kernel: espdesmd5_attach: called.$Id: ipsec_espdesmd5.c,v 1.5 1998/05/27 23:41:29 rgb Exp $
Jun  9 13:40:42 west kernel: ipsec_init: attaching <3DES-MD5 Encryption>
Jun  9 13:40:42 west kernel: esp3desmd5_attach: called.$Id: ipsec_esp3desmd5.c,v 1.5 1998/05/27 23:41:31 rgb Exp $
Do you need more help?
In addition to our free technical library, Pantek provides professional IT services to companies who utilize Open Source software:
Learn more about Pantek's Technical Support offerings
Place an order for 24/7/365 Technical Support here
Learn more about Pantek, who we are, and what we do
Chat with a Live Operator
Related lists.freeswan.org Links
1998-fall
1998-spring
1998-summer
1998-winter
1999-winter
announce
briefs
bugs
design
freeswan-list
hipsec
ietf-sectest
users
users-admin
Request more information about Pantek
Jun  9 13:40:42 west kernel: ipsec_init: attaching <3DES-MD5-96 Encryption>
Jun  9 13:40:42 west kernel: esp3desmd596_attach: called.$Id: ipsec_esp3desmd596.c,v 1.7 1998/06/05 02:34:21 rgb Exp $
Jun  9 13:40:42 west kernel: ipsec_init: attaching 
Jun  9 13:40:42 west kernel: espdesmd596_attach: called.$Id: ipsec_espdesmd596.c,v 1.6 1998/05/27 23:41:30 rgb Exp $
Jun  9 13:40:42 west kernel: ipsec_tunnel_init: KLIPS: tunneling code rel pre0.9
Jun  9 13:40:42 west kernel: ipsec_tunnel_init: KLIPS: $Id: ipsec_tunnel.c,v 1.7 1998/05/27 23:19:20 rgb Exp $
Jun  9 13:40:43 west kernel: ipsec_callback: groupspis: no TDB for 209.157.90.145, 0x111
Jun  9 13:40:43 west kernel: ipsec_callback: meaning -- tried to group a non-existant SPI
Jun  9 07:00:36 west ipsec: setting up handkeyd tunnel: ipsec-0000.rc
Jun  9 07:00:36 west ipsec: setting up handkeyd tunnel: ipsec-ew.rc
Jun  9 07:00:36 west kernel: ipsec_makeroute: rj_addroute not able to insert eroute for dst=209.157.90.145, spi=0x110
Jun  9 07:00:36 west kernel: ipsec_callback: groupspis: no TDB for 209.157.90.145, 0x111
Jun  9 07:00:36 west kernel: ipsec_callback: meaning -- tried to group a non-existant SPI
Jun  9 07:02:04 west ipsec: setting up handkeyd tunnel: ipsec-0000.rc
Jun  9 07:02:04 west ipsec: setting up handkeyd tunnel: ipsec-ew.rc
Jun  9 07:02:04 west kernel: ipsec_makeroute: rj_addroute not able to insert eroute for dst=209.157.90.145, spi=0x110
Jun  9 07:02:04 west kernel: ipsec_callback: groupspis: no TDB for 209.157.90.145, 0x111
Jun  9 07:02:04 west kernel: ipsec_callback: meaning -- tried to group a non-existant SPI
Jun  9 14:54:27 west ipsec: setting up handkeyd tunnel: ipsec-0000.rc
Can we help you?
In addition to our free technical library, Pantek provides professional IT services to companies who utilize Open Source software:
Learn more about Pantek's Technical Support offerings
Place an order for 24/7/365 Technical Support here
Learn more about Pantek, who we are, and what we do
Chat with a Live Operator
Related lists.freeswan.org Links
1998-fall
1998-spring
1998-summer
1998-winter
1999-winter
announce
briefs
bugs
design
freeswan-list
hipsec
ietf-sectest
users
users-admin
Request more information about Pantek
Jun  9 14:54:28 west kernel: ipsec_init: attaching 
Jun  9 14:54:28 west kernel: ipe4_attach: called.$Id: ipsec_ipe4.c,v 1.5 1998/05/27 23:19:19 rgb Exp $
Jun  9 14:54:28 west kernel: ipsec_init: attaching 
Jun  9 14:54:28 west ipsec: setting up handkeyd tunnel: ipsec-ew.rc
Jun  9 14:54:28 west kernel: ahmd5_attach: called.$Id: ipsec_ahmd5.c,v 1.5 1998/05/27 23:19:17 rgb Exp $
Jun  9 14:54:28 west kernel: ipsec_init: attaching 
Jun  9 14:54:28 west kernel: espdes_attach: called.$Id: ipsec_espdes.c,v 1.5 1998/05/27 23:19:18 rgb Exp $
Jun  9 14:54:28 west kernel: ipsec_init: attaching 
Jun  9 14:54:28 west kernel: ahhmacmd5_attach: called.$Id: ipsec_ahhmacmd5.c,v 1.6 1998/05/27 23:19:15 rgb Exp $
Jun  9 14:54:28 west kernel: ipsec_init: attaching 
Jun  9 14:54:28 west kernel: ahhmacsha1_attach: called.$Id: ipsec_ahhmacsha1.c,v 1.6 1998/05/27 23:19:16 rgb Exp $
Jun  9 14:54:28 west kernel: ipsec_init: attaching 
Jun  9 14:54:28 west kernel: espdesmd5_attach: called.$Id: ipsec_espdesmd5.c,v 1.5 1998/05/27 23:41:29 rgb Exp $
Jun  9 14:54:28 west kernel: ipsec_init: attaching <3DES-MD5 Encryption>
Jun  9 14:54:28 west kernel: esp3desmd5_attach: called.$Id: ipsec_esp3desmd5.c,v 1.5 1998/05/27 23:41:31 rgb Exp $
Jun  9 14:54:28 west kernel: ipsec_init: attaching <3DES-MD5-96 Encryption>
Jun  9 14:54:28 west kernel: esp3desmd596_attach: called.$Id: ipsec_esp3desmd596.c,v 1.7 1998/06/05 02:34:21 rgb Exp $
Jun  9 14:54:28 west kernel: ipsec_init: attaching 
Jun  9 14:54:28 west kernel: espdesmd596_attach: called.$Id: ipsec_espdesmd596.c,v 1.6 1998/05/27 23:41:30 rgb Exp $
Can't find what you're looking for?
In addition to our free technical library, Pantek provides professional IT services to companies who utilize Open Source software:
Learn more about Pantek's Technical Support offerings
Place an order for 24/7/365 Technical Support here
Learn more about Pantek, who we are, and what we do
Chat with a Live Operator
Related lists.freeswan.org Links
1998-fall
1998-spring
1998-summer
1998-winter
1999-winter
announce
briefs
bugs
design
freeswan-list
hipsec
ietf-sectest
users
users-admin
Request more information about Pantek
Jun  9 14:54:28 west kernel: ipsec_tunnel_init: KLIPS: tunneling code rel pre0.9
Jun  9 14:54:28 west kernel: ipsec_tunnel_init: KLIPS: $Id: ipsec_tunnel.c,v 1.7 1998/05/27 23:19:20 rgb Exp $
Jun  9 15:18:59 west ipsec: setting up handkeyd tunnel: ipsec-0000.rc
Jun  9 15:19:00 west kernel: ipsec_init: attaching 
Jun  9 15:19:00 west kernel: ipe4_attach: called.$Id: ipsec_ipe4.c,v 1.5 1998/05/27 23:19:19 rgb Exp $
Jun  9 15:19:00 west kernel: ipsec_init: attaching 
Jun  9 15:19:01 west ipsec: setting up handkeyd tunnel: ipsec-ew.rc
Jun  9 15:19:00 west kernel: ahmd5_attach: called.$Id: ipsec_ahmd5.c,v 1.5 1998/05/27 23:19:17 rgb Exp $
Jun  9 15:19:00 west kernel: ipsec_init: attaching 
Jun  9 15:19:00 west kernel: espdes_attach: called.$Id: ipsec_espdes.c,v 1.5 1998/05/27 23:19:18 rgb Exp $
Jun  9 15:19:00 west kernel: ipsec_init: attaching 
Jun  9 15:19:00 west kernel: ahhmacmd5_attach: called.$Id: ipsec_ahhmacmd5.c,v 1.6 1998/05/27 23:19:15 rgb Exp $
Jun  9 15:19:00 west kernel: ipsec_init: attaching 
Jun  9 15:19:00 west kernel: ahhmacsha1_attach: called.$Id: ipsec_ahhmacsha1.c,v 1.6 1998/05/27 23:19:16 rgb Exp $
Jun  9 15:19:00 west kernel: ipsec_init: attaching 
Jun  9 15:19:00 west kernel: espdesmd5_attach: called.$Id: ipsec_espdesmd5.c,v 1.5 1998/05/27 23:41:29 rgb Exp $
Jun  9 15:19:00 west kernel: ipsec_init: attaching <3DES-MD5 Encryption>
Jun  9 15:19:00 west kernel: esp3desmd5_attach: called.$Id: ipsec_esp3desmd5.c,v 1.5 1998/05/27 23:41:31 rgb Exp $
Jun  9 15:19:00 west kernel: ipsec_init: attaching <3DES-MD5-96 Encryption>
Don't know where to look next?
In addition to our free technical library, Pantek provides professional IT services to companies who utilize Open Source software:
Learn more about Pantek's Technical Support offerings
Place an order for 24/7/365 Technical Support here
Learn more about Pantek, who we are, and what we do
Chat with a Live Operator
Related lists.freeswan.org Links
1998-fall
1998-spring
1998-summer
1998-winter
1999-winter
announce
briefs
bugs
design
freeswan-list
hipsec
ietf-sectest
users
users-admin
Request more information about Pantek
Jun  9 15:19:00 west kernel: esp3desmd596_attach: called.$Id: ipsec_esp3desmd596.c,v 1.7 1998/06/05 02:34:21 rgb Exp $
Jun  9 15:19:00 west kernel: ipsec_init: attaching 
Jun  9 15:19:00 west kernel: espdesmd596_attach: called.$Id: ipsec_espdesmd596.c,v 1.6 1998/05/27 23:41:30 rgb Exp $
Jun  9 15:19:00 west kernel: ipsec_tunnel_init: KLIPS: tunneling code rel pre0.9
Jun  9 15:19:00 west kernel: ipsec_tunnel_init: KLIPS: $Id: ipsec_tunnel.c,v 1.7 1998/05/27 23:19:20 rgb Exp $

# ipsec_systat finished at Tue Jun 9 08:27:12 PDT 1998
Received on Tue Jun 9 12:30:21 1998