Pantek Library
Hosting Provided By
CybrHost
High Speed Hosting

linux-ipsec: Comments on the INSTALL process of the 1998jun14 snapshot

From: Hugh Daniel <hugh(at)road.toad.com>
Date: Sun Jun 14 1998 - 08:41:40 EDT


  It seems that the FreeS/WAN team is going for a minor release this week so I thouht I would try out todays snapshot and the new build process that it includes. The results are below.   A general question is: Is anyone beyond myself running FreeS/WAN with the 2.0.34 kernels? I am running two and a half (don't even think of asking...) machines with them and they seem to work perfectly.

  Something I ask you to remember when reading my comments and working on the INSTALL doc: This doc is not for _us_, long time programmers and folks who have worked on IPSEC for many months. This doc is for folks we all _want_ to use this software, folks who might have gotten a Unix box for the first time just months ago and who has never added software to a kernel before.
  While pre 1.0 users are not quite this new, you should have that goal in mind when working on the doc and reading my comments.   

Comments on the INSTALL file:

0: Could you suggest a resonable place (/usr/src?) and say how much disk space the tree takes up (maybe 5 megs?) so I can plan where to unpack things?

  1. I think things are working just fine with 2.0.34, but you should say that 2.0.33 is fine. Just saying your on your own with the 2.1.xx kernels is cruel, it just won't work!
  2. I would suggest skipping the verbiage with GMP, if someone cares they know enough to do what they want.
  3. You tell me to do a "make" before you tell me to cd into where I untarred the release. Remember in confusing new situations folks need every step layed out for them.
  4. Humm, doing the make install before successfully compiling the kernel bothers me as it may wipe out working utils with ones that wont work with the current kernel. Humm... This gets to be a mess.
  5. Could use two sentacnes, minor.
  6. Watch the verbage here, most folks don't care nor need to care to the detail that this paragraph gives.

7b: You have "IP Forwareding" I see "IP: forwarding/gatewaying".   Why are you not telling folks to set "IP: optimize as router not host"?
  Following your instructions in this paragraph I can compile a kernel with _no_ ESP or AH transforms! Ug...
  Maybe you should tell the user to finish up the configure after
choosing at least one ESP or AH transform!.

  1. What doc might I want to browse? Where? What files?
  2. The text for the lines ending in "called." has changed a lot, which totaly changes the look of the output. The INSTALL file should reflect this change. What is the "and possibly:..." shit? Why is that in there?

  Now let me try using this INSTALL file:   Well my first try at following the INSTALL file's instructions was a .9 second disaster, witness:

hugh@east.toad.com: make : Sun Jun 14 04:04:46 PDT 1998 cd klips/utils ; rm -f version.c ; ln -s ../../version.c cd klips/utils ; make
make[1]: Entering directory `/usr/src/freeswan-snap1998Jun14/klips/utils' gcc -O2 -I../src -g -c spi.c -o spi.o
In file included from /usr/include/linux/skbuff.h:17,

                 from spi.c:75:

/usr/include/linux/config.h:4: linux/autoconf.h: No such file or directory make[1]: *** [spi.o] Error 1
make[1]: Leaving directory `/usr/src/freeswan-snap1998Jun14/klips/utils' make: *** [utils] Error 2
Command exited with non-zero status 2
0.22user 0.15system 0:00.99elapsed 37%CPU (0avgtext+0avgdata 0maxresident)k 0inputs+0outputs (869major+250minor)pagefaults 0swaps

  I am pretty sure that the problem here is that I was using a virgin kernel that had never been compiled. I have run into this sevral time so I suggest that we warn folks about this. It's a good idea to make a kernel first just to be sure you have it right anyway.   All the user really needs to do is run the "make <something>config" and the problem is fixed.

Do you need help?X

  Another opps:
root@east > make clean
make: *** No rule to make target `clean'. Stop. root@east > pwd
/usr/src/freeswan-snap1998Jun14

  Another opps: I ^C'ed the make when it was in something (GMP I think) and then went back and said "make" again and got this: root@east > make
cd klips/utils ; make

make[1]: Entering directory `/usr/src/freeswan-snap1998Jun14/klips/utils'
make[1]: Nothing to be done for `all'.
make[1]: Leaving directory `/usr/src/freeswan-snap1998Jun14/klips/utils'
cd utils ; make
make[1]: Entering directory `/usr/src/freeswan-snap1998Jun14/utils'
make[1]: Nothing to be done for `it'.
make[1]: Leaving directory `/usr/src/freeswan-snap1998Jun14/utils'
root@east >

  It never even tryed to make pluto.

  Another (small) opps:
root@east > cd utils/
root@east > make clean
make: Nothing to be done for `clean'.
root@east >

  Looking at the make file I see that it: is the first target when I am used to all: being the first target.

  Ah, the "make install" catches pluto, well this is better then not catching it but "make all" should do this first so that when I am scanning for what it's going to install I don't see all this gcc gunk.
  Even this fails:
make[3]: Leaving directory `/usr/src/freeswan-snap1998Jun14/gmp/mpn' cd mpz; make "CC=gcc -O2" "CFLAGS=-g -O" "XCFLAGS=" libmpz.a

make[3]: Entering directory `/usr/src/freeswan-snap1998Jun14/gmp/mpz'
make[3]: *** No rule to make target `libmpz.a'.  Stop.
make[3]: Leaving directory `/usr/src/freeswan-snap1998Jun14/gmp/mpz'
make[2]: *** [mpz/libmpz.a] Error 2
make[2]: Leaving directory `/usr/src/freeswan-snap1998Jun14/gmp'
make[1]: *** [gmp] Error 2
make[1]: Leaving directory `/usr/src/freeswan-snap1998Jun14/pluto'
make: *** [pluto-install] Error 2

  My guess is that I ^C'ed in the middle of the GMP compile and it was half way done. Doing a "make clean" at the top level should decend into GMP and that would have fixed this.

  Maybe you should tell folks to check for errors in the output of the to kernel make commands, it might not have worked.

Do you need more help?X

  Dam, I got caught by the "#INSTALL_PATH=/boot" bug AGAIN! Look, since we are using RH-4.2 and the kernel _has_ to be in /boot lets warn folks to uncomment that dam line in the Makefile. My guess is that you allways have to presume that folks are starting from scratch.   Now to rebuild yet again.

  Ok, IPSEC in hand keyed ESP-3DES-HMAC-96 seems to work perfectly! Cool. I did not get to test the rmmod steps as I have to get some sleep some day. Nor did I get a chance to go over the rgb_setup.txt file. I still have not tested Pluto, but I will wait untill later for that.

  Even though the instructions did not say to do this, I thought I would try the new IPSEC system status script:

      hugh@east $ barf
      bash: /usr/local/sbin/barf: Permission denied
I will include the output of barf on my machine just for grins.

  Humm, there is no RCSID at the top of the INSTALL file, or barf.   I have to stop sometime! Later!

		||ugh Daniel
		hugh@toad.com

			Systems Testing & Project mis-Management
			The Linux FreeS/WAN Project
			
http://www.xs4all.nl/~freeswan

----  barf on east  ------------------------------------------

+ date

Sun Jun 14 05:36:10 PDT 1998
+ hostname

east.toad.com
+ hostname --fqdn

east.toad.com
+ hostname --ip-address

209.157.90.145
+ cat /proc/version

Linux version 2.0.34 (root@east.toad.com) (gcc version 2.7.2.1) #4 Sun Jun 14 05:08:21 PDT 1998
+ cat /proc/net/ipsec_eroute

EROUTE:
(209.157.90.152/255.255.255.248 -> 206.14.61.224/255.255.255.240) =>

    (140.174.2.9, 0x125)

(209.157.90.152/255.255.255.248 -> 209.157.90.160/255.255.255.248) =>

    (209.157.90.146, 0x115)

+ cat /proc/net/ipsec_spi

SPI:
(140.174.2.9, 0x125, IPv4 Simple Encapsulation: [209.157.90.145 -> 140.174.2.9])

Can we help you?X

(140.174.2.9, 0x123, 3DES-MD5-96 Encryption: iv = 0x06c6f986f8fcb89f seq = 6, bit = 0x00000000, win = 1 flags = 0x4 <MANUAL,RESPONDER>)

(209.157.90.145, 0x121, 3DES-MD5-96 Encryption: iv = 0x0123456789abcdef seq = 1, bit = 0x00000000, win = 1 flags = 0x4 <MANUAL,RESPONDER>)

(209.157.90.146, 0x115, IPv4 Simple Encapsulation: [209.157.90.145 -> 209.157.90.146])

(209.157.90.146, 0x113, 3DES-MD5-96 Encryption: iv = 0x27e352f3c714c112 seq = 1227, bit = 0x00000000, win = 1 flags = 0x4 <MANUAL,RESPONDER>)

(209.157.90.145, 0x111, 3DES-MD5-96 Encryption: iv = 0x0123456789abcdef seq = 1, bit = 0x00000000, win = 1 flags = 0x4 <MANUAL,RESPONDER>)

+ cat /proc/net/ipsec_spigrp

SPIGRP:
(140.174.2.9, 0x125, IPv4 Simple Encapsulation) (140.174.2.9, 0x123, 3DES-MD5-96 Encryption)

(209.157.90.145, 0x121, 3DES-MD5-96 Encryption)

(209.157.90.146, 0x115, IPv4 Simple Encapsulation) (209.157.90.146, 0x113, 3DES-MD5-96 Encryption)

Can't find what you're looking for?X

(209.157.90.145, 0x111, 3DES-MD5-96 Encryption)

+ cat /proc/net/ipsec_tncfg

TNCFG:
ipsec0 -> eth0
ipsec1 -> NULL
+ cat /proc/net/ipsec_version

VERSION_INFO:
FreeS/WAN version: snap1998Jun14

Transform: , CVS version: $Id: ipsec_ipe4.c,v 1.6 1998/06/11 05:49:58 rgb Exp $
Transform: , CVS version: $Id: ipsec_ahhmacmd5.c,v 1.7 1998/06/11 05:49:53 rgb Exp $
Transform: , CVS version: $Id: ipsec_ahhmacsha1.c,v 1.7 1998/06/11 05:49:54 rgb Exp $
Transform: <3DES-MD5-96 Encryption>, CVS version: $Id: ipsec_esp3desmd596.c,v 1.8 1998/06/11 05:51:34 rgb Exp $
Transform: , CVS version: $Id: ipsec_espdesmd596.c,v 1.7 1998/06/11 05:51:35 rgb Exp $

+ cat /proc/net/dev
Inter-| Receive | Transmit face |packets errs drop fifo frame|packets errs drop fifo colls carrier lo: 5 0 0 0 0 5 0 0 0 0 0 tunl0: 0 0 0 0 0 0 0 0 0 0 0
Don't know where to look next?X
tunl1: 0 0 0 0 0 0 0 0 0 0 0 dummy: No statistics available. eth0: 1860 0 0 0 0 1739 0 0 0 0 0 eth1: 1246 0 0 0 0 1124 0 0 0 0 0 ipsec0: 1113 0 0 0 0 1231 0 0 0 0 0 ipsec1: 0 0 0 0 0 0 0 0 0 0 0

+ netstat -nr

Kernel IP routing table
Destination     Gateway         Genmask         Flags   MSS Window  irtt Iface
209.157.90.144  0.0.0.0         255.255.255.248 U      1500 0          0 eth0
209.157.90.160  209.157.90.146  255.255.255.248 UG     1404 0          0 ipsec0
209.157.90.152  0.0.0.0         255.255.255.248 U      1500 0          0 eth1
206.14.61.224   140.174.2.9     255.255.255.240 UG     1404 0          0 ipsec0
127.0.0.0       0.0.0.0         255.0.0.0       U      3584 0          0 lo
0.0.0.0         209.157.90.150  0.0.0.0         UG     1500 0          0 eth0

+ cat /proc/net/route
Iface Destination Gateway Flags RefCnt Use Metric Mask MTU Window IRTT eth0 905A9DD1 00000000 01 0 2 0 F8FFFFFF 1500 0 0 ipsec0 A05A9DD1 925A9DD1 03 0 1 0 F8FFFFFF 1404 0 0 eth1 985A9DD1 00000000 01 0 1 0 F8FFFFFF 1500 0 0 ipsec0 E03D0ECE 0902AE8C 03 0 1 0 F0FFFFFF 1404 0 0 lo 0000007F 00000000 01 0 1 0 000000FF 3584 0 0
Confused? Frustrated?X
eth0 00000000 965A9DD1 03 0 3 0 00000000 1500 0 0
+ ifconfig -a
lo Link encap:Local Loopback inet addr:127.0.0.1 Bcast:127.255.255.255 Mask:255.0.0.0 UP BROADCAST LOOPBACK RUNNING MTU:3584 Metric:1 RX packets:5 errors:0 dropped:0 overruns:0 TX packets:5 errors:0 dropped:0 overruns:0 eth0 Link encap:10Mbps Ethernet HWaddr 00:A0:24:D8:51:2F inet addr:209.157.90.145 Bcast:209.157.90.151 Mask:255.255.255.248 UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:1860 errors:0 dropped:0 overruns:0 TX packets:1739 errors:0 dropped:0 overruns:0 Interrupt:10 Base address:0xfe80 eth1 Link encap:10Mbps Ethernet HWaddr 00:A0:24:97:8C:97 inet addr:209.157.90.158 Bcast:209.157.90.159 Mask:255.255.255.248 UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:1246 errors:0 dropped:0 overruns:0 TX packets:1124 errors:0 dropped:0 overruns:0 Interrupt:3 Base address:0xff40 ipsec0 Link encap:IPIP Tunnel HWaddr inet addr:209.157.90.145 Bcast:209.157.90.151 Mask:255.255.255.248 UP BROADCAST RUNNING NOARP MTU:1404 Metric:1 RX packets:1113 errors:0 dropped:0 overruns:0 TX packets:1231 errors:0 dropped:0 overruns:0

+ cat /proc/net/ip_forward

cat: /proc/net/ip_forward: No such file or directory
+ cat /proc/net/ip_input

cat: /proc/net/ip_input: No such file or directory
+ cat /proc/net/ip_output

cat: /proc/net/ip_output: No such file or directory
+ cat /proc/modules

ipsec 17 1
+ cat /proc/meminfo

        total: used: free: shared: buffers: cached: Mem: 31830016 8613888 23216128 5373952 1576960 3846144

Swap: 133885952        0 133885952
MemTotal:     31084 kB
MemFree:      22672 kB
MemShared:     5248 kB
Buffers:       1540 kB
Cached:        3756 kB

SwapTotal: 130748 kB
SwapFree: 130748 kB
+ ls -l /dev/ipsec
crw-r--r--   1 root     wheel     36,  10 May  6  1997 /dev/ipsec

+ ls -l /proc/net/ipsec_eroute /proc/net/ipsec_spi /proc/net/ipsec_spigrp /proc/net/ipsec_spinew /proc/net/ipsec_tncfg /proc/net/ipsec_version
-r--r--r-- 1 root root 0 Jun 14 05:33 /proc/net/ipsec_eroute -r--r--r-- 1 root root 0 Jun 14 05:33 /proc/net/ipsec_spi
Call Pantek today for Open Source Technical Support at 1-877-546-8934 - 24/7/365X
-r--r--r-- 1 root root 0 Jun 14 05:33 /proc/net/ipsec_spigrp -r--r--r-- 1 root root 0 Jun 14 05:33 /proc/net/ipsec_spinew -r--r--r-- 1 root root 0 Jun 14 05:33 /proc/net/ipsec_tncfg -r--r--r-- 1 root root 0 Jun 14 05:33 /proc/net/ipsec_version

+ test -f /usr/src/linux/.config
+ egrep IP /usr/src/linux/.config

CONFIG_SYSVIPC=y
CONFIG_IP_FORWARD=y
# CONFIG_IP_MULTICAST is not set
# CONFIG_IP_ACCT is not set
# CONFIG_IP_ROUTER is not set

CONFIG_NET_IPIP=y
CONFIG_IP_NOSR=y
# CONFIG_IPX is not set
CONFIG_IPSEC=m
CONFIG_IPSEC_IPIP=y
# CONFIG_IPSEC_EXPERIMENTAL is not set
CONFIG_IPSEC_AH=y
CONFIG_IPSEC_AH_HMAC_MD5=y
CONFIG_IPSEC_AH_HMAC_SHA1=y
CONFIG_IPSEC_ESP=y
CONFIG_IPSEC_ESP_DES_MD5_96=y
CONFIG_IPSEC_ESP_3DES_MD5_96=y

DEBUG_IPSEC=y
# CONFIG_PLIP is not set
# CONFIG_SLIP is not set
+ test -f /var/log/kern.debug
+ tail -100 /var/log/kern.debug
Jun 14 05:08:40 east kernel: scsi0: Partition Table - Adopting 64/32 Geometry from Partition Table
Jun 14 05:08:40 east kernel: scsi0: Warning: Extended Translation Setting (> 1GB Switch) does not match
Jun 14 05:08:40 east kernel: scsi0: Partition Table - Adopting 64/32 Geometry from Partition Table
Jun 14 05:08:40 east kernel: scsi0: Warning: Extended Translation Setting (> 1GB Switch) does not match
Jun 14 05:08:40 east kernel: scsi0: Partition Table - Adopting 64/32 Geometry from Partition Table
Jun 14 05:08:40 east kernel: scsi0: Warning: Extended Translation Setting (> 1GB Switch) does not match
Jun 14 05:08:40 east kernel: scsi0: Partition Table - Adopting 64/32 Geometry from Partition Table
Jun 14 05:08:41 east kernel: scsi0: Warning: Extended Translation Setting (> 1GB Switch) does not match
Jun 14 05:08:41 east kernel: scsi0: Partition Table - Adopting 64/32 Geometry from Partition Table
Jun 14 05:11:55 east kernel: klogd 1.3-3, log source = /proc/kmsg started.
Jun 14 05:11:55 east kernel: Loaded 3064 symbols from /boot/System.map.
Jun 14 05:11:55 east kernel: Symbols match kernel version 2.0.34.
Jun 14 05:11:55 east kernel: No module symbols loaded.
Do you need help?X
Jun 14 05:11:55 east kernel: Console: 16 point font, 400 scans Jun 14 05:11:55 east kernel: Console: colour VGA+ 80x25, 1 virtual console (max 63) Jun 14 05:11:55 east kernel: pcibios_init : BIOS32 Service Directory structure at 0x000fc600 Jun 14 05:11:55 east kernel: pcibios_init : BIOS32 Service Directory entry at 0xfc610 Jun 14 05:11:55 east kernel: pcibios_init : PCI BIOS revision 2.10 entry at 0xfc631 Jun 14 05:11:55 east kernel: Probing PCI hardware. Jun 14 05:11:55 east kernel: Calibrating delay loop.. ok - 59.80 BogoMIPS Jun 14 05:11:55 east kernel: Memory: 31084k/32768k available (584k kernel code, 384k reserved, 716k data) Jun 14 05:11:55 east kernel: Swansea University Computer Society NET3.035 for Linux 2.0 Jun 14 05:11:55 east kernel: NET3: Unix domain sockets 0.13 for Linux NET3.035. Jun 14 05:11:55 east kernel: Swansea University Computer Society TCP/IP for NET3.034 Jun 14 05:11:55 east kernel: IP Protocols: ICMP, UDP, TCP, IPIP Jun 14 05:11:55 east kernel: Checking 386/387 coupling... Ok, fpu using exception 16 error reporting. Jun 14 05:11:55 east kernel: Checking 'hlt' instruction... Ok. Jun 14 05:11:55 east kernel: Intel Pentium with F0 0F bug - workaround enabled. Jun 14 05:11:55 east kernel: alias mapping IDT readonly ... ... done Jun 14 05:11:55 east kernel: Linux version 2.0.34 (root@east.toad.com) (gcc version 2.7.2.1) #4 Sun Jun 14 05:08:21 PDT 1998 Jun 14 05:11:55 east kernel: Starting kswapd v 1.4.2.2 Jun 14 05:11:55 east kernel: Serial driver version 4.13 with no serial options enabled Jun 14 05:11:55 east kernel: tty00 at 0x03f8 (irq = 4) is a 16550A Jun 14 05:11:55 east kernel: tty02 at 0x03e8 (irq = 4) is a 16550A Jun 14 05:11:55 east kernel: Floppy drive(s): fd0 is 1.44M Jun 14 05:11:55 east kernel: FDC 0 is a National Semiconductor PC87306
Do you need more help?X
Jun 14 05:11:55 east kernel: scsi: ***** BusLogic SCSI Driver Version 2.0.14 of 29 April 1998 ***** Jun 14 05:11:55 east kernel: scsi: Copyright 1995-1998 by Leonard N. Zubkoff Jun 14 05:11:55 east kernel: scsi0: Configuring BusLogic Model BT-948 PCI Ultra SCSI Host Adapter Jun 14 05:11:55 east kernel: scsi0: Firmware Version: 5.05R, I/O Address: 0xFFF4, IRQ Channel: 11/Level Jun 14 05:11:55 east kernel: scsi0: PCI Bus: 0, Device: 15, Address: 0xFFFBF000, Host Adapter SCSI ID: 7 Jun 14 05:11:55 east kernel: scsi0: Parity Checking: Enabled, Extended Translation: Enabled Jun 14 05:11:55 east kernel: scsi0: Synchronous Negotiation: Fast, Wide Negotiation: Disabled Jun 14 05:11:55 east kernel: scsi0: Disconnect/Reconnect: Enabled, Tagged Queuing: Enabled Jun 14 05:11:55 east kernel: scsi0: Scatter/Gather Limit: 128 of 8192 segments, Mailboxes: 211 Jun 14 05:11:55 east kernel: scsi0: Driver Queue Depth: 211, Host Adapter Queue Depth: 192 Jun 14 05:11:55 east kernel: scsi0: Tagged Queue Depth: Automatic, Untagged Queue Depth: 3 Jun 14 05:11:55 east kernel: scsi0: Error Recovery Strategy: Default, SCSI Bus Reset: Enabled Jun 14 05:11:55 east kernel: scsi0: SCSI Bus Termination: Enabled, SCAM: Disabled Jun 14 05:11:55 east kernel: scsi0: *** BusLogic BT-948 Initialized Successfully *** Jun 14 05:11:55 east kernel: scsi0 : BusLogic BT-948 Jun 14 05:11:55 east kernel: scsi : 1 host. Jun 14 05:11:55 east kernel: Vendor: HP Model: C3725S Rev: 6039 Jun 14 05:11:55 east kernel: Type: Direct-Access ANSI SCSI revision: 02 Jun 14 05:11:55 east kernel: Detected scsi disk sda at scsi0, channel 0, id 0, lun 0
Can we help you?X
Jun 14 05:11:55 east kernel: Vendor: FUJITSU Model: M2624F-512 Rev: 0405 Jun 14 05:11:55 east kernel: Type: Direct-Access ANSI SCSI revision: 02 Jun 14 05:11:55 east kernel: Detected scsi disk sdb at scsi0, channel 0, id 1, lun 0 Jun 14 05:11:55 east kernel: Vendor: IBM Model: DORS-32160 !# Rev: WA3E Jun 14 05:11:55 east kernel: Type: Direct-Access ANSI SCSI revision: 02 Jun 14 05:11:55 east kernel: Detected scsi disk sdc at scsi0, channel 0, id 3, lun 0 Jun 14 05:11:55 east kernel: Vendor: IBM Model: CDRM00203 !J Rev: 1.0m Jun 14 05:11:55 east kernel: Type: CD-ROM ANSI SCSI revision: 02 Jun 14 05:11:55 east kernel: Detected scsi CD-ROM sr0 at scsi0, channel 0, id 6, lun 0 Jun 14 05:11:55 east kernel: scsi0: Target 0: Queue Depth 28, Synchronous at 10.0 MB/sec, offset 15 Jun 14 05:11:55 east kernel: scsi0: Target 1: Queue Depth 28, Synchronous at 10.0 MB/sec, offset 15 Jun 14 05:11:55 east kernel: scsi0: Target 3: Queue Depth 28, Synchronous at 10.0 MB/sec, offset 15 Jun 14 05:11:55 east kernel: scsi0: Target 6: Queue Depth 3, Asynchronous Jun 14 05:11:55 east kernel: scsi : detected 1 SCSI cdrom 3 SCSI disks total. Jun 14 05:11:55 east kernel: SCSI device sda: hdwr sector= 512 bytes. Sectors= 4194058 [2047 MB] [2.0 GB] Jun 14 05:11:55 east kernel: SCSI device sdb: hdwr sector= 512 bytes. Sectors= 1015812 [496 MB] [0.5 GB] Jun 14 05:11:55 east kernel: SCSI device sdc: hdwr sector= 512 bytes. Sectors= 4226725 [2063 MB] [2.1 GB] Jun 14 05:11:55 east kernel: tunnel: version v0.2b2 Jun 14 05:11:55 east kernel: eth0: 3Com 3c905 Boomerang 100baseTx at 0xfe80, 00:a0:24:d8:51:2f, IRQ 10
Can't find what you're looking for?X
Jun 14 05:11:55 east kernel: 8K word-wide RAM 3:5 Rx:Tx split, autoselect/NWay Autonegotiation interface. Jun 14 05:11:55 east kernel: MII transceiver found at address 24, status 782b. Jun 14 05:11:55 east kernel: Enabling bus-master transmits and whole-frame receives. Jun 14 05:11:55 east kernel: eth1: 3Com 3c595 Vortex 100baseTX at 0xff40, 00:a0:24:97:8c:97, IRQ 3 Jun 14 05:11:55 east kernel: 64K word-wide RAM 3:1 Rx:Tx split, autoselect/10baseT interface. Jun 14 05:11:55 east kernel: eth1: Overriding PCI latency timer (CFLT) setting of 64, new value is 248. Jun 14 05:11:55 east kernel: 3c59x.c:v0.99E 5/12/98 Donald Becker http://cesdis.gsfc.nasa.gov/linux/drivers/vortex.html Jun 14 05:11:55 east kernel: Partition check: Jun 14 05:11:55 east kernel: sda: sda1 sda3 < sda5 sda6 sda7 sda8 sda9 sda10 sda11 sda12 sda13 sda14 > Jun 14 05:11:55 east kernel: sdb: unknown partition table Jun 14 05:11:55 east kernel: sdc: sdc1 sdc2 Jun 14 05:11:55 east kernel: VFS: Mounted root (ext2 filesystem) readonly. Jun 14 05:11:55 east kernel: scsi0: Tagged Queuing now active for Target 0 Jun 14 05:11:55 east kernel: Adding Swap: 130748k swap-space (priority -1) Jun 14 05:11:58 east kernel: ipsec_init: attaching Jun 14 05:11:58 east kernel: ipe4_attach: called.$Id: ipsec_ipe4.c,v 1.6 1998/06/11 05:49:58 rgb Exp $ Jun 14 05:11:58 east kernel: ipsec_init: attaching Jun 14 05:11:58 east kernel: ahhmacmd5_attach: called.$Id: ipsec_ahhmacmd5.c,v 1.7 1998/06/11 05:49:53 rgb Exp $ Jun 14 05:11:58 east kernel: ipsec_init: attaching Jun 14 05:11:58 east kernel: ahhmacsha1_attach: called.$Id: ipsec_ahhmacsha1.c,v 1.7 1998/06/11 05:49:54 rgb Exp $ Jun 14 05:11:58 east kernel: ipsec_init: attaching <3DES-MD5-96 Encryption>
Don't know where to look next?X
Jun 14 05:11:58 east kernel: esp3desmd596_attach: called.$Id: ipsec_esp3desmd596.c,v 1.8 1998/06/11 05:51:34 rgb Exp $ Jun 14 05:11:58 east kernel: ipsec_init: attaching Jun 14 05:11:58 east kernel: espdesmd596_attach: called.$Id: ipsec_espdesmd596.c,v 1.7 1998/06/11 05:51:35 rgb Exp $ Jun 14 05:11:58 east kernel: ipsec_tunnel_init: KLIPS: tunneling code rel pre0.9 Jun 14 05:11:58 east kernel: ipsec_tunnel_init: KLIPS: $Id: ipsec_tunnel.c,v 1.7 1998/05/27 23:19:20 rgb Exp $

+ tail -250 /var/log/messages
+ egrep -i ipsec|klips|pluto|xxx
Jun 13 10:10:33 east kernel: ipsec_tunnel_do_xmit: calling room for 
Jun 13 10:10:33 east kernel: ipsec_tunnel_do_xmit: calling room for <3DES-MD5-96 Encryption>
Jun 13 10:10:33 east kernel: ipsec_tunnel_do_xmit: Room left at head: 96
Jun 13 10:10:33 east kernel: ipsec_tunnel_do_xmit: Room left at tail: 44
Jun 13 10:10:33 east kernel: ipsec_tunnel_do_xmit: Required room: 52,16, Tunnel hlen: 96
Jun 13 10:10:33 east kernel: ipsec_tunnel_do_xmit: data fits in existing skb
Jun 13 10:10:33 east kernel: ipsec_tunnel_do_xmit: calling output for ...
Jun 13 10:10:33 east kernel: ipsec_tunnel_do_xmit: returns 0
Jun 13 10:10:33 east kernel: ipsec_tunnel_do_xmit: calling output for <3DES-MD5-96 Encryption>...
Jun 13 10:10:33 east kernel: ipsec_tunnel_do_xmit: returns 0
Jun 13 10:10:33 east kernel: ipsec_tunnel_do_xmit: packet contents after xforms:IP:hlen:20 ver:4 proto:50 saddr:209.157.90.145 daddr:209.157.90.146 tlen:136
Jun 13 10:10:33 east kernel: ipsec_tunnel_do_xmit: skb->data= 0x01b78054, skb->h.iph= 0x01b78054, skb->ip_hdr= 0x01b78054
Jun 13 10:10:33 east kernel: ipsec_tunnel_do_xmit: ip_forwarding of skb->dev->name eth0 hopefully equal to eth0, 136 bytes, to 925a9dd1
Confused? Frustrated?X
Jun 13 10:10:33 east kernel: ipsec_tunnel_do_xmit: ts=33.5817 calling ip_forward Jun 13 10:10:33 east kernel: ipsec_esp_rcv: ts=33.5846 ESP packet received, dev = ipsec0 Jun 13 10:10:33 east kernel: ipsec_esp_rcv: old IP:hlen:20 ver:4 proto:50 saddr:209.157.90.146 daddr:209.157.90.145 tlen:136 Jun 13 10:10:33 east kernel: ipsec_esp_rcv: new IP:hlen:20 ver:4 proto:4 saddr:209.157.90.146 daddr:209.157.90.145 tlen:104 Jun 13 10:26:22 east ipsec: setting up handkeyd tunnel: ipsec-0000.rc Jun 13 10:26:24 east ipsec: setting up handkeyd tunnel: ipsec-ew.rc Jun 13 10:26:23 east kernel: ipsec_init: attaching Jun 13 10:26:23 east kernel: ipe4_attach: called.$Id: ipsec_ipe4.c,v 1.6 1998/06/11 05:49:58 rgb Exp $ Jun 13 10:26:23 east kernel: ipsec_init: attaching Jun 13 10:26:23 east kernel: ahhmacmd5_attach: called.$Id: ipsec_ahhmacmd5.c,v 1.7 1998/06/11 05:49:53 rgb Exp $ Jun 13 10:26:23 east kernel: ipsec_init: attaching Jun 13 10:26:23 east kernel: ahhmacsha1_attach: called.$Id: ipsec_ahhmacsha1.c,v 1.7 1998/06/11 05:49:54 rgb Exp $ Jun 13 10:26:23 east kernel: ipsec_init: attaching <3DES-MD5-96 Encryption> Jun 13 10:26:23 east kernel: esp3desmd596_attach: called.$Id: ipsec_esp3desmd596.c,v 1.8 1998/06/11 05:51:34 rgb Exp $ Jun 13 10:26:23 east kernel: ipsec_init: attaching Jun 13 10:26:23 east kernel: espdesmd596_attach: called.$Id: ipsec_espdesmd596.c,v 1.7 1998/06/11 05:51:35 rgb Exp $ Jun 13 10:26:23 east kernel: ipsec_tunnel_init: KLIPS: tunneling code rel pre0.9 Jun 13 10:26:23 east kernel: ipsec_tunnel_init: KLIPS: $Id: ipsec_tunnel.c,v 1.7 1998/05/27 23:19:20 rgb Exp $ Jun 13 10:26:26 east ipsec: setting up handkeyd tunnel: ipsec-ne.rc
Call Pantek today for Open Source Technical Support at 1-877-546-8934 - 24/7/365X
Jun 14 05:11:58 east ipsec: setting up handkeyd tunnel: ipsec-0000.rc Jun 14 05:12:00 east ipsec: setting up handkeyd tunnel: ipsec-ew.rc Jun 14 05:11:58 east kernel: ipsec_init: attaching Jun 14 05:11:58 east kernel: ipe4_attach: called.$Id: ipsec_ipe4.c,v 1.6 1998/06/11 05:49:58 rgb Exp $ Jun 14 05:11:58 east kernel: ipsec_init: attaching Jun 14 05:11:58 east kernel: ahhmacmd5_attach: called.$Id: ipsec_ahhmacmd5.c,v 1.7 1998/06/11 05:49:53 rgb Exp $ Jun 14 05:11:58 east kernel: ipsec_init: attaching Jun 14 05:11:58 east kernel: ahhmacsha1_attach: called.$Id: ipsec_ahhmacsha1.c,v 1.7 1998/06/11 05:49:54 rgb Exp $ Jun 14 05:11:58 east kernel: ipsec_init: attaching <3DES-MD5-96 Encryption> Jun 14 05:11:58 east kernel: esp3desmd596_attach: called.$Id: ipsec_esp3desmd596.c,v 1.8 1998/06/11 05:51:34 rgb Exp $ Jun 14 05:11:58 east kernel: ipsec_init: attaching Jun 14 05:11:58 east kernel: espdesmd596_attach: called.$Id: ipsec_espdesmd596.c,v 1.7 1998/06/11 05:51:35 rgb Exp $ Jun 14 05:11:58 east kernel: ipsec_tunnel_init: KLIPS: tunneling code rel pre0.9 Jun 14 05:11:58 east kernel: ipsec_tunnel_init: KLIPS: $Id: ipsec_tunnel.c,v 1.7 1998/05/27 23:19:20 rgb Exp $ Jun 14 05:12:02 east ipsec: setting up handkeyd tunnel: ipsec-ne.rc

+ date

Sun Jun 14 05:36:10 PDT 1998 Received on Sun Jun 14 09:28:23 1998

This archive was generated by hypermail 2.1.8 : Wed Aug 23 2006 - 12:59:20 EDT


Contact Us  Legal Notices  Order Services Online 
Pantek Home  Privacy Policy  IT news  Site Map  Pantek Library