It seems that the FreeS/WAN team is going for a minor release this
week so I thouht I would try out todays snapshot and the new build
process that it includes. The results are below.
A general question is: Is anyone beyond myself running FreeS/WAN
with the 2.0.34 kernels? I am running two and a half (don't even
think of asking...) machines with them and they seem to work
perfectly.
Something I ask you to remember when reading my comments and working
on the INSTALL doc: This doc is not for _us_, long time programmers
and folks who have worked on IPSEC for many months. This doc is for
folks we all _want_ to use this software, folks who might have gotten
a Unix box for the first time just months ago and who has never added
software to a kernel before.
While pre 1.0 users are not quite this new, you should have that
goal in mind when working on the doc and reading my comments.
Comments on the INSTALL file:
0: Could you suggest a resonable place (/usr/src?) and say how much
disk space the tree takes up (maybe 5 megs?) so I can plan where to
unpack things?
- I think things are working just fine with 2.0.34, but you should
say that 2.0.33 is fine. Just saying your on your own with the 2.1.xx
kernels is cruel, it just won't work!
- I would suggest skipping the verbiage with GMP, if someone cares
they know enough to do what they want.
- You tell me to do a "make" before you tell me to cd into where I
untarred the release. Remember in confusing new situations folks need
every step layed out for them.
- Humm, doing the make install before successfully compiling the
kernel bothers me as it may wipe out working utils with ones that wont
work with the current kernel. Humm... This gets to be a mess.
- Could use two sentacnes, minor.
- Watch the verbage here, most folks don't care nor need to care to
the detail that this paragraph gives.
7b: You have "IP Forwareding" I see "IP: forwarding/gatewaying".
Why are you not telling folks to set "IP: optimize as router not
host"?
Following your instructions in this paragraph I can compile a kernel
with _no_ ESP or AH transforms! Ug...
Maybe you should tell the user to finish up the configure after
choosing at least one ESP or AH transform!.
- What doc might I want to browse? Where? What files?
- The text for the lines ending in "called." has changed a lot,
which totaly changes the look of the output. The INSTALL file should
reflect this change.
What is the "and possibly:..." shit? Why is that in there?
Now let me try using this INSTALL file:
Well my first try at following the INSTALL file's instructions was a
.9 second disaster, witness:
hugh@east.toad.com: make : Sun Jun 14 04:04:46 PDT 1998
cd klips/utils ; rm -f version.c ; ln -s ../../version.c
cd klips/utils ; make
make[1]: Entering directory `/usr/src/freeswan-snap1998Jun14/klips/utils'
gcc -O2 -I../src -g -c spi.c -o spi.o
In file included from /usr/include/linux/skbuff.h:17,
from spi.c:75:
/usr/include/linux/config.h:4: linux/autoconf.h: No such file or directory
make[1]: *** [spi.o] Error 1
make[1]: Leaving directory `/usr/src/freeswan-snap1998Jun14/klips/utils'
make: *** [utils] Error 2
Command exited with non-zero status 2
0.22user 0.15system 0:00.99elapsed 37%CPU (0avgtext+0avgdata 0maxresident)k
0inputs+0outputs (869major+250minor)pagefaults 0swaps
I am pretty sure that the problem here is that I was using a virgin
kernel that had never been compiled. I have run into this sevral time
so I suggest that we warn folks about this. It's a good idea to make
a kernel first just to be sure you have it right anyway.
All the user really needs to do is run the "make <something>config"
and the problem is fixed.
Another opps:
root@east > make clean
make: *** No rule to make target `clean'. Stop.
root@east > pwd
/usr/src/freeswan-snap1998Jun14
Another opps: I ^C'ed the make when it was in something (GMP I
think) and then went back and said "make" again and got this:
root@east > make
cd klips/utils ; make
make[1]: Entering directory `/usr/src/freeswan-snap1998Jun14/klips/utils'
make[1]: Nothing to be done for `all'.
make[1]: Leaving directory `/usr/src/freeswan-snap1998Jun14/klips/utils'
cd utils ; make
make[1]: Entering directory `/usr/src/freeswan-snap1998Jun14/utils'
make[1]: Nothing to be done for `it'.
make[1]: Leaving directory `/usr/src/freeswan-snap1998Jun14/utils'
root@east >
It never even tryed to make pluto.
Another (small) opps:
root@east > cd utils/
root@east > make clean
make: Nothing to be done for `clean'.
root@east >
Looking at the make file I see that it: is the first target when I
am used to all: being the first target.
Ah, the "make install" catches pluto, well this is better then not
catching it but "make all" should do this first so that when I am
scanning for what it's going to install I don't see all this gcc
gunk.
Even this fails:
make[3]: Leaving directory `/usr/src/freeswan-snap1998Jun14/gmp/mpn'
cd mpz; make "CC=gcc -O2" "CFLAGS=-g -O" "XCFLAGS=" libmpz.a
make[3]: Entering directory `/usr/src/freeswan-snap1998Jun14/gmp/mpz'
make[3]: *** No rule to make target `libmpz.a'. Stop.
make[3]: Leaving directory `/usr/src/freeswan-snap1998Jun14/gmp/mpz'
make[2]: *** [mpz/libmpz.a] Error 2
make[2]: Leaving directory `/usr/src/freeswan-snap1998Jun14/gmp'
make[1]: *** [gmp] Error 2
make[1]: Leaving directory `/usr/src/freeswan-snap1998Jun14/pluto'
make: *** [pluto-install] Error 2
My guess is that I ^C'ed in the middle of the GMP compile and it was
half way done. Doing a "make clean" at the top level should decend
into GMP and that would have fixed this.
Maybe you should tell folks to check for errors in the output of the
to kernel make commands, it might not have worked.
Dam, I got caught by the "#INSTALL_PATH=/boot" bug AGAIN! Look,
since we are using RH-4.2 and the kernel _has_ to be in /boot lets
warn folks to uncomment that dam line in the Makefile. My guess is
that you allways have to presume that folks are starting from scratch.
Now to rebuild yet again.
Ok, IPSEC in hand keyed ESP-3DES-HMAC-96 seems to work perfectly!
Cool. I did not get to test the rmmod steps as I have to get some
sleep some day. Nor did I get a chance to go over the rgb_setup.txt
file. I still have not tested Pluto, but I will wait untill later for
that.
Even though the instructions did not say to do this, I thought I
would try the new IPSEC system status script:
hugh@east $ barf
bash: /usr/local/sbin/barf: Permission denied
I will include the output of barf on my machine just for grins.
Humm, there is no RCSID at the top of the INSTALL file, or barf.
I have to stop sometime! Later!
||ugh Daniel
hugh@toad.com
Systems Testing & Project mis-Management
The Linux FreeS/WAN Project
http://www.xs4all.nl/~freeswan
---- barf on east ------------------------------------------
+ date
Sun Jun 14 05:36:10 PDT 1998
+ hostname
east.toad.com
+ hostname --fqdn
east.toad.com
+ hostname --ip-address
209.157.90.145
+ cat /proc/version
Linux version 2.0.34 (root@east.toad.com) (gcc version 2.7.2.1) #4 Sun Jun 14 05:08:21 PDT 1998
+ cat /proc/net/ipsec_eroute
EROUTE:
(209.157.90.152/255.255.255.248 -> 206.14.61.224/255.255.255.240) =>
(140.174.2.9, 0x125)
(209.157.90.152/255.255.255.248 -> 209.157.90.160/255.255.255.248) =>
(209.157.90.146, 0x115)
+ cat /proc/net/ipsec_spi
SPI:
(140.174.2.9, 0x125, IPv4 Simple Encapsulation: [209.157.90.145 -> 140.174.2.9])
(140.174.2.9, 0x123, 3DES-MD5-96 Encryption: iv = 0x06c6f986f8fcb89f seq = 6, bit = 0x00000000, win = 1 flags = 0x4 <MANUAL,RESPONDER>)
(209.157.90.145, 0x121, 3DES-MD5-96 Encryption: iv = 0x0123456789abcdef seq = 1, bit = 0x00000000, win = 1 flags = 0x4 <MANUAL,RESPONDER>)
(209.157.90.146, 0x115, IPv4 Simple Encapsulation: [209.157.90.145 -> 209.157.90.146])
(209.157.90.146, 0x113, 3DES-MD5-96 Encryption: iv = 0x27e352f3c714c112 seq = 1227, bit = 0x00000000, win = 1 flags = 0x4 <MANUAL,RESPONDER>)
(209.157.90.145, 0x111, 3DES-MD5-96 Encryption: iv = 0x0123456789abcdef seq = 1, bit = 0x00000000, win = 1 flags = 0x4 <MANUAL,RESPONDER>)
+ cat /proc/net/ipsec_spigrp
SPIGRP:
(140.174.2.9, 0x125, IPv4 Simple Encapsulation)
(140.174.2.9, 0x123, 3DES-MD5-96 Encryption)
(209.157.90.145, 0x121, 3DES-MD5-96 Encryption)
(209.157.90.146, 0x115, IPv4 Simple Encapsulation)
(209.157.90.146, 0x113, 3DES-MD5-96 Encryption)
(209.157.90.145, 0x111, 3DES-MD5-96 Encryption)
+ cat /proc/net/ipsec_tncfg
TNCFG:
ipsec0 -> eth0
ipsec1 -> NULL
+ cat /proc/net/ipsec_version
VERSION_INFO:
FreeS/WAN version: snap1998Jun14
Transform: , CVS version: $Id: ipsec_ipe4.c,v 1.6 1998/06/11 05:49:58 rgb Exp $
Transform: , CVS version: $Id: ipsec_ahhmacmd5.c,v 1.7 1998/06/11 05:49:53 rgb Exp $
Transform: , CVS version: $Id: ipsec_ahhmacsha1.c,v 1.7 1998/06/11 05:49:54 rgb Exp $
Transform: <3DES-MD5-96 Encryption>, CVS version: $Id: ipsec_esp3desmd596.c,v 1.8 1998/06/11 05:51:34 rgb Exp $
Transform: , CVS version: $Id: ipsec_espdesmd596.c,v 1.7 1998/06/11 05:51:35 rgb Exp $
+ cat /proc/net/dev
Inter-| Receive | Transmit
face |packets errs drop fifo frame|packets errs drop fifo colls carrier
lo: 5 0 0 0 0 5 0 0 0 0 0
tunl0: 0 0 0 0 0 0 0 0 0 0 0
tunl1: 0 0 0 0 0 0 0 0 0 0 0
dummy: No statistics available.
eth0: 1860 0 0 0 0 1739 0 0 0 0 0
eth1: 1246 0 0 0 0 1124 0 0 0 0 0
ipsec0: 1113 0 0 0 0 1231 0 0 0 0 0
ipsec1: 0 0 0 0 0 0 0 0 0 0 0
+ netstat -nr
Kernel IP routing table
Destination Gateway Genmask Flags MSS Window irtt Iface
209.157.90.144 0.0.0.0 255.255.255.248 U 1500 0 0 eth0
209.157.90.160 209.157.90.146 255.255.255.248 UG 1404 0 0 ipsec0
209.157.90.152 0.0.0.0 255.255.255.248 U 1500 0 0 eth1
206.14.61.224 140.174.2.9 255.255.255.240 UG 1404 0 0 ipsec0
127.0.0.0 0.0.0.0 255.0.0.0 U 3584 0 0 lo
0.0.0.0 209.157.90.150 0.0.0.0 UG 1500 0 0 eth0
+ cat /proc/net/route
Iface Destination Gateway Flags RefCnt Use Metric Mask MTU Window IRTT
eth0 905A9DD1 00000000 01 0 2 0 F8FFFFFF 1500 0 0
ipsec0 A05A9DD1 925A9DD1 03 0 1 0 F8FFFFFF 1404 0 0
eth1 985A9DD1 00000000 01 0 1 0 F8FFFFFF 1500 0 0
ipsec0 E03D0ECE 0902AE8C 03 0 1 0 F0FFFFFF 1404 0 0
lo 0000007F 00000000 01 0 1 0 000000FF 3584 0 0
eth0 00000000 965A9DD1 03 0 3 0 00000000 1500 0 0
+ ifconfig -a
lo Link encap:Local Loopback
inet addr:127.0.0.1 Bcast:127.255.255.255 Mask:255.0.0.0
UP BROADCAST LOOPBACK RUNNING MTU:3584 Metric:1
RX packets:5 errors:0 dropped:0 overruns:0
TX packets:5 errors:0 dropped:0 overruns:0
eth0 Link encap:10Mbps Ethernet HWaddr 00:A0:24:D8:51:2F
inet addr:209.157.90.145 Bcast:209.157.90.151 Mask:255.255.255.248
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:1860 errors:0 dropped:0 overruns:0
TX packets:1739 errors:0 dropped:0 overruns:0
Interrupt:10 Base address:0xfe80
eth1 Link encap:10Mbps Ethernet HWaddr 00:A0:24:97:8C:97
inet addr:209.157.90.158 Bcast:209.157.90.159 Mask:255.255.255.248
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:1246 errors:0 dropped:0 overruns:0
TX packets:1124 errors:0 dropped:0 overruns:0
Interrupt:3 Base address:0xff40
ipsec0 Link encap:IPIP Tunnel HWaddr
inet addr:209.157.90.145 Bcast:209.157.90.151 Mask:255.255.255.248
UP BROADCAST RUNNING NOARP MTU:1404 Metric:1
RX packets:1113 errors:0 dropped:0 overruns:0
TX packets:1231 errors:0 dropped:0 overruns:0
+ cat /proc/net/ip_forward
cat: /proc/net/ip_forward: No such file or directory
+ cat /proc/net/ip_input
cat: /proc/net/ip_input: No such file or directory
+ cat /proc/net/ip_output
cat: /proc/net/ip_output: No such file or directory
+ cat /proc/modules
ipsec 17 1
+ cat /proc/meminfo
total: used: free: shared: buffers: cached:
Mem: 31830016 8613888 23216128 5373952 1576960 3846144
Swap: 133885952 0 133885952
MemTotal: 31084 kB
MemFree: 22672 kB
MemShared: 5248 kB
Buffers: 1540 kB
Cached: 3756 kB
SwapTotal: 130748 kB
SwapFree: 130748 kB
+ ls -l /dev/ipsec
crw-r--r-- 1 root wheel 36, 10 May 6 1997 /dev/ipsec
+ ls -l /proc/net/ipsec_eroute /proc/net/ipsec_spi /proc/net/ipsec_spigrp /proc/net/ipsec_spinew /proc/net/ipsec_tncfg /proc/net/ipsec_version
-r--r--r-- 1 root root 0 Jun 14 05:33 /proc/net/ipsec_eroute
-r--r--r-- 1 root root 0 Jun 14 05:33 /proc/net/ipsec_spi
-r--r--r-- 1 root root 0 Jun 14 05:33 /proc/net/ipsec_spigrp
-r--r--r-- 1 root root 0 Jun 14 05:33 /proc/net/ipsec_spinew
-r--r--r-- 1 root root 0 Jun 14 05:33 /proc/net/ipsec_tncfg
-r--r--r-- 1 root root 0 Jun 14 05:33 /proc/net/ipsec_version
+ test -f /usr/src/linux/.config
+ egrep IP /usr/src/linux/.config
CONFIG_SYSVIPC=y
CONFIG_IP_FORWARD=y
# CONFIG_IP_MULTICAST is not set
# CONFIG_IP_ACCT is not set
# CONFIG_IP_ROUTER is not set
CONFIG_NET_IPIP=y
CONFIG_IP_NOSR=y
# CONFIG_IPX is not set
CONFIG_IPSEC=m
CONFIG_IPSEC_IPIP=y
# CONFIG_IPSEC_EXPERIMENTAL is not set
CONFIG_IPSEC_AH=y
CONFIG_IPSEC_AH_HMAC_MD5=y
CONFIG_IPSEC_AH_HMAC_SHA1=y
CONFIG_IPSEC_ESP=y
CONFIG_IPSEC_ESP_DES_MD5_96=y
CONFIG_IPSEC_ESP_3DES_MD5_96=y
DEBUG_IPSEC=y
# CONFIG_PLIP is not set
# CONFIG_SLIP is not set
+ test -f /var/log/kern.debug
+ tail -100 /var/log/kern.debug
Jun 14 05:08:40 east kernel: scsi0: Partition Table - Adopting 64/32 Geometry from Partition Table
Jun 14 05:08:40 east kernel: scsi0: Warning: Extended Translation Setting (> 1GB Switch) does not match
Jun 14 05:08:40 east kernel: scsi0: Partition Table - Adopting 64/32 Geometry from Partition Table
Jun 14 05:08:40 east kernel: scsi0: Warning: Extended Translation Setting (> 1GB Switch) does not match
Jun 14 05:08:40 east kernel: scsi0: Partition Table - Adopting 64/32 Geometry from Partition Table
Jun 14 05:08:40 east kernel: scsi0: Warning: Extended Translation Setting (> 1GB Switch) does not match
Jun 14 05:08:40 east kernel: scsi0: Partition Table - Adopting 64/32 Geometry from Partition Table
Jun 14 05:08:41 east kernel: scsi0: Warning: Extended Translation Setting (> 1GB Switch) does not match
Jun 14 05:08:41 east kernel: scsi0: Partition Table - Adopting 64/32 Geometry from Partition Table
Jun 14 05:11:55 east kernel: klogd 1.3-3, log source = /proc/kmsg started.
Jun 14 05:11:55 east kernel: Loaded 3064 symbols from /boot/System.map.
Jun 14 05:11:55 east kernel: Symbols match kernel version 2.0.34.
Jun 14 05:11:55 east kernel: No module symbols loaded.
Jun 14 05:11:55 east kernel: Console: 16 point font, 400 scans
Jun 14 05:11:55 east kernel: Console: colour VGA+ 80x25, 1 virtual console (max 63)
Jun 14 05:11:55 east kernel: pcibios_init : BIOS32 Service Directory structure at 0x000fc600
Jun 14 05:11:55 east kernel: pcibios_init : BIOS32 Service Directory entry at 0xfc610
Jun 14 05:11:55 east kernel: pcibios_init : PCI BIOS revision 2.10 entry at 0xfc631
Jun 14 05:11:55 east kernel: Probing PCI hardware.
Jun 14 05:11:55 east kernel: Calibrating delay loop.. ok - 59.80 BogoMIPS
Jun 14 05:11:55 east kernel: Memory: 31084k/32768k available (584k kernel code, 384k reserved, 716k data)
Jun 14 05:11:55 east kernel: Swansea University Computer Society NET3.035 for Linux 2.0
Jun 14 05:11:55 east kernel: NET3: Unix domain sockets 0.13 for Linux NET3.035.
Jun 14 05:11:55 east kernel: Swansea University Computer Society TCP/IP for NET3.034
Jun 14 05:11:55 east kernel: IP Protocols: ICMP, UDP, TCP, IPIP
Jun 14 05:11:55 east kernel: Checking 386/387 coupling... Ok, fpu using exception 16 error reporting.
Jun 14 05:11:55 east kernel: Checking 'hlt' instruction... Ok.
Jun 14 05:11:55 east kernel: Intel Pentium with F0 0F bug - workaround enabled.
Jun 14 05:11:55 east kernel: alias mapping IDT readonly ... ... done
Jun 14 05:11:55 east kernel: Linux version 2.0.34 (root@east.toad.com) (gcc version 2.7.2.1) #4 Sun Jun 14 05:08:21 PDT 1998
Jun 14 05:11:55 east kernel: Starting kswapd v 1.4.2.2
Jun 14 05:11:55 east kernel: Serial driver version 4.13 with no serial options enabled
Jun 14 05:11:55 east kernel: tty00 at 0x03f8 (irq = 4) is a 16550A
Jun 14 05:11:55 east kernel: tty02 at 0x03e8 (irq = 4) is a 16550A
Jun 14 05:11:55 east kernel: Floppy drive(s): fd0 is 1.44M
Jun 14 05:11:55 east kernel: FDC 0 is a National Semiconductor PC87306
Jun 14 05:11:55 east kernel: scsi: ***** BusLogic SCSI Driver Version 2.0.14 of 29 April 1998 *****
Jun 14 05:11:55 east kernel: scsi: Copyright 1995-1998 by Leonard N. Zubkoff
Jun 14 05:11:55 east kernel: scsi0: Configuring BusLogic Model BT-948 PCI Ultra SCSI Host Adapter
Jun 14 05:11:55 east kernel: scsi0: Firmware Version: 5.05R, I/O Address: 0xFFF4, IRQ Channel: 11/Level
Jun 14 05:11:55 east kernel: scsi0: PCI Bus: 0, Device: 15, Address: 0xFFFBF000, Host Adapter SCSI ID: 7
Jun 14 05:11:55 east kernel: scsi0: Parity Checking: Enabled, Extended Translation: Enabled
Jun 14 05:11:55 east kernel: scsi0: Synchronous Negotiation: Fast, Wide Negotiation: Disabled
Jun 14 05:11:55 east kernel: scsi0: Disconnect/Reconnect: Enabled, Tagged Queuing: Enabled
Jun 14 05:11:55 east kernel: scsi0: Scatter/Gather Limit: 128 of 8192 segments, Mailboxes: 211
Jun 14 05:11:55 east kernel: scsi0: Driver Queue Depth: 211, Host Adapter Queue Depth: 192
Jun 14 05:11:55 east kernel: scsi0: Tagged Queue Depth: Automatic, Untagged Queue Depth: 3
Jun 14 05:11:55 east kernel: scsi0: Error Recovery Strategy: Default, SCSI Bus Reset: Enabled
Jun 14 05:11:55 east kernel: scsi0: SCSI Bus Termination: Enabled, SCAM: Disabled
Jun 14 05:11:55 east kernel: scsi0: *** BusLogic BT-948 Initialized Successfully ***
Jun 14 05:11:55 east kernel: scsi0 : BusLogic BT-948
Jun 14 05:11:55 east kernel: scsi : 1 host.
Jun 14 05:11:55 east kernel: Vendor: HP Model: C3725S Rev: 6039
Jun 14 05:11:55 east kernel: Type: Direct-Access ANSI SCSI revision: 02
Jun 14 05:11:55 east kernel: Detected scsi disk sda at scsi0, channel 0, id 0, lun 0
Jun 14 05:11:55 east kernel: Vendor: FUJITSU Model: M2624F-512 Rev: 0405
Jun 14 05:11:55 east kernel: Type: Direct-Access ANSI SCSI revision: 02
Jun 14 05:11:55 east kernel: Detected scsi disk sdb at scsi0, channel 0, id 1, lun 0
Jun 14 05:11:55 east kernel: Vendor: IBM Model: DORS-32160 !# Rev: WA3E
Jun 14 05:11:55 east kernel: Type: Direct-Access ANSI SCSI revision: 02
Jun 14 05:11:55 east kernel: Detected scsi disk sdc at scsi0, channel 0, id 3, lun 0
Jun 14 05:11:55 east kernel: Vendor: IBM Model: CDRM00203 !J Rev: 1.0m
Jun 14 05:11:55 east kernel: Type: CD-ROM ANSI SCSI revision: 02
Jun 14 05:11:55 east kernel: Detected scsi CD-ROM sr0 at scsi0, channel 0, id 6, lun 0
Jun 14 05:11:55 east kernel: scsi0: Target 0: Queue Depth 28, Synchronous at 10.0 MB/sec, offset 15
Jun 14 05:11:55 east kernel: scsi0: Target 1: Queue Depth 28, Synchronous at 10.0 MB/sec, offset 15
Jun 14 05:11:55 east kernel: scsi0: Target 3: Queue Depth 28, Synchronous at 10.0 MB/sec, offset 15
Jun 14 05:11:55 east kernel: scsi0: Target 6: Queue Depth 3, Asynchronous
Jun 14 05:11:55 east kernel: scsi : detected 1 SCSI cdrom 3 SCSI disks total.
Jun 14 05:11:55 east kernel: SCSI device sda: hdwr sector= 512 bytes. Sectors= 4194058 [2047 MB] [2.0 GB]
Jun 14 05:11:55 east kernel: SCSI device sdb: hdwr sector= 512 bytes. Sectors= 1015812 [496 MB] [0.5 GB]
Jun 14 05:11:55 east kernel: SCSI device sdc: hdwr sector= 512 bytes. Sectors= 4226725 [2063 MB] [2.1 GB]
Jun 14 05:11:55 east kernel: tunnel: version v0.2b2
Jun 14 05:11:55 east kernel: eth0: 3Com 3c905 Boomerang 100baseTx at 0xfe80, 00:a0:24:d8:51:2f, IRQ 10
Jun 14 05:11:55 east kernel: 8K word-wide RAM 3:5 Rx:Tx split, autoselect/NWay Autonegotiation interface.
Jun 14 05:11:55 east kernel: MII transceiver found at address 24, status 782b.
Jun 14 05:11:55 east kernel: Enabling bus-master transmits and whole-frame receives.
Jun 14 05:11:55 east kernel: eth1: 3Com 3c595 Vortex 100baseTX at 0xff40, 00:a0:24:97:8c:97, IRQ 3
Jun 14 05:11:55 east kernel: 64K word-wide RAM 3:1 Rx:Tx split, autoselect/10baseT interface.
Jun 14 05:11:55 east kernel: eth1: Overriding PCI latency timer (CFLT) setting of 64, new value is 248.
Jun 14 05:11:55 east kernel: 3c59x.c:v0.99E 5/12/98 Donald Becker
http://cesdis.gsfc.nasa.gov/linux/drivers/vortex.html
Jun 14 05:11:55 east kernel: Partition check:
Jun 14 05:11:55 east kernel: sda: sda1 sda3 < sda5 sda6 sda7 sda8 sda9 sda10 sda11 sda12 sda13 sda14 >
Jun 14 05:11:55 east kernel: sdb: unknown partition table
Jun 14 05:11:55 east kernel: sdc: sdc1 sdc2
Jun 14 05:11:55 east kernel: VFS: Mounted root (ext2 filesystem) readonly.
Jun 14 05:11:55 east kernel: scsi0: Tagged Queuing now active for Target 0
Jun 14 05:11:55 east kernel: Adding Swap: 130748k swap-space (priority -1)
Jun 14 05:11:58 east kernel: ipsec_init: attaching
Jun 14 05:11:58 east kernel: ipe4_attach: called.$Id: ipsec_ipe4.c,v 1.6 1998/06/11 05:49:58 rgb Exp $
Jun 14 05:11:58 east kernel: ipsec_init: attaching
Jun 14 05:11:58 east kernel: ahhmacmd5_attach: called.$Id: ipsec_ahhmacmd5.c,v 1.7 1998/06/11 05:49:53 rgb Exp $
Jun 14 05:11:58 east kernel: ipsec_init: attaching
Jun 14 05:11:58 east kernel: ahhmacsha1_attach: called.$Id: ipsec_ahhmacsha1.c,v 1.7 1998/06/11 05:49:54 rgb Exp $
Jun 14 05:11:58 east kernel: ipsec_init: attaching <3DES-MD5-96 Encryption>
Jun 14 05:11:58 east kernel: esp3desmd596_attach: called.$Id: ipsec_esp3desmd596.c,v 1.8 1998/06/11 05:51:34 rgb Exp $
Jun 14 05:11:58 east kernel: ipsec_init: attaching
Jun 14 05:11:58 east kernel: espdesmd596_attach: called.$Id: ipsec_espdesmd596.c,v 1.7 1998/06/11 05:51:35 rgb Exp $
Jun 14 05:11:58 east kernel: ipsec_tunnel_init: KLIPS: tunneling code rel pre0.9
Jun 14 05:11:58 east kernel: ipsec_tunnel_init: KLIPS: $Id: ipsec_tunnel.c,v 1.7 1998/05/27 23:19:20 rgb Exp $
+ tail -250 /var/log/messages
+ egrep -i ipsec|klips|pluto|xxx
Jun 13 10:10:33 east kernel: ipsec_tunnel_do_xmit: calling room for
Jun 13 10:10:33 east kernel: ipsec_tunnel_do_xmit: calling room for <3DES-MD5-96 Encryption>
Jun 13 10:10:33 east kernel: ipsec_tunnel_do_xmit: Room left at head: 96
Jun 13 10:10:33 east kernel: ipsec_tunnel_do_xmit: Room left at tail: 44
Jun 13 10:10:33 east kernel: ipsec_tunnel_do_xmit: Required room: 52,16, Tunnel hlen: 96
Jun 13 10:10:33 east kernel: ipsec_tunnel_do_xmit: data fits in existing skb
Jun 13 10:10:33 east kernel: ipsec_tunnel_do_xmit: calling output for ...
Jun 13 10:10:33 east kernel: ipsec_tunnel_do_xmit: returns 0
Jun 13 10:10:33 east kernel: ipsec_tunnel_do_xmit: calling output for <3DES-MD5-96 Encryption>...
Jun 13 10:10:33 east kernel: ipsec_tunnel_do_xmit: returns 0
Jun 13 10:10:33 east kernel: ipsec_tunnel_do_xmit: packet contents after xforms:IP:hlen:20 ver:4 proto:50 saddr:209.157.90.145 daddr:209.157.90.146 tlen:136
Jun 13 10:10:33 east kernel: ipsec_tunnel_do_xmit: skb->data= 0x01b78054, skb->h.iph= 0x01b78054, skb->ip_hdr= 0x01b78054
Jun 13 10:10:33 east kernel: ipsec_tunnel_do_xmit: ip_forwarding of skb->dev->name eth0 hopefully equal to eth0, 136 bytes, to 925a9dd1
Jun 13 10:10:33 east kernel: ipsec_tunnel_do_xmit: ts=33.5817 calling ip_forward
Jun 13 10:10:33 east kernel: ipsec_esp_rcv: ts=33.5846 ESP packet received, dev = ipsec0
Jun 13 10:10:33 east kernel: ipsec_esp_rcv: old IP:hlen:20 ver:4 proto:50 saddr:209.157.90.146 daddr:209.157.90.145 tlen:136
Jun 13 10:10:33 east kernel: ipsec_esp_rcv: new IP:hlen:20 ver:4 proto:4 saddr:209.157.90.146 daddr:209.157.90.145 tlen:104
Jun 13 10:26:22 east ipsec: setting up handkeyd tunnel: ipsec-0000.rc
Jun 13 10:26:24 east ipsec: setting up handkeyd tunnel: ipsec-ew.rc
Jun 13 10:26:23 east kernel: ipsec_init: attaching
Jun 13 10:26:23 east kernel: ipe4_attach: called.$Id: ipsec_ipe4.c,v 1.6 1998/06/11 05:49:58 rgb Exp $
Jun 13 10:26:23 east kernel: ipsec_init: attaching
Jun 13 10:26:23 east kernel: ahhmacmd5_attach: called.$Id: ipsec_ahhmacmd5.c,v 1.7 1998/06/11 05:49:53 rgb Exp $
Jun 13 10:26:23 east kernel: ipsec_init: attaching
Jun 13 10:26:23 east kernel: ahhmacsha1_attach: called.$Id: ipsec_ahhmacsha1.c,v 1.7 1998/06/11 05:49:54 rgb Exp $
Jun 13 10:26:23 east kernel: ipsec_init: attaching <3DES-MD5-96 Encryption>
Jun 13 10:26:23 east kernel: esp3desmd596_attach: called.$Id: ipsec_esp3desmd596.c,v 1.8 1998/06/11 05:51:34 rgb Exp $
Jun 13 10:26:23 east kernel: ipsec_init: attaching
Jun 13 10:26:23 east kernel: espdesmd596_attach: called.$Id: ipsec_espdesmd596.c,v 1.7 1998/06/11 05:51:35 rgb Exp $
Jun 13 10:26:23 east kernel: ipsec_tunnel_init: KLIPS: tunneling code rel pre0.9
Jun 13 10:26:23 east kernel: ipsec_tunnel_init: KLIPS: $Id: ipsec_tunnel.c,v 1.7 1998/05/27 23:19:20 rgb Exp $
Jun 13 10:26:26 east ipsec: setting up handkeyd tunnel: ipsec-ne.rc
Jun 14 05:11:58 east ipsec: setting up handkeyd tunnel: ipsec-0000.rc
Jun 14 05:12:00 east ipsec: setting up handkeyd tunnel: ipsec-ew.rc
Jun 14 05:11:58 east kernel: ipsec_init: attaching
Jun 14 05:11:58 east kernel: ipe4_attach: called.$Id: ipsec_ipe4.c,v 1.6 1998/06/11 05:49:58 rgb Exp $
Jun 14 05:11:58 east kernel: ipsec_init: attaching
Jun 14 05:11:58 east kernel: ahhmacmd5_attach: called.$Id: ipsec_ahhmacmd5.c,v 1.7 1998/06/11 05:49:53 rgb Exp $
Jun 14 05:11:58 east kernel: ipsec_init: attaching
Jun 14 05:11:58 east kernel: ahhmacsha1_attach: called.$Id: ipsec_ahhmacsha1.c,v 1.7 1998/06/11 05:49:54 rgb Exp $
Jun 14 05:11:58 east kernel: ipsec_init: attaching <3DES-MD5-96 Encryption>
Jun 14 05:11:58 east kernel: esp3desmd596_attach: called.$Id: ipsec_esp3desmd596.c,v 1.8 1998/06/11 05:51:34 rgb Exp $
Jun 14 05:11:58 east kernel: ipsec_init: attaching
Jun 14 05:11:58 east kernel: espdesmd596_attach: called.$Id: ipsec_espdesmd596.c,v 1.7 1998/06/11 05:51:35 rgb Exp $
Jun 14 05:11:58 east kernel: ipsec_tunnel_init: KLIPS: tunneling code rel pre0.9
Jun 14 05:11:58 east kernel: ipsec_tunnel_init: KLIPS: $Id: ipsec_tunnel.c,v 1.7 1998/05/27 23:19:20 rgb Exp $
Jun 14 05:12:02 east ipsec: setting up handkeyd tunnel: ipsec-ne.rc
+ date
Sun Jun 14 05:36:10 PDT 1998
Received on Sun Jun 14 09:28:23 1998