From: Andreas Steffen (andreas.steffen_at_strongsec.net)
Date: Tue Dec 31 2002 - 12:55:00 CET
Ok, here comes the log with --debug-control --debug-klips switched on.
Regards
Andreas
Stephen J. Bevan wrote:
> Andreas Steffen writes:
> > I have run into some serious problems with the selectors patch and %hold
> > eroutes that are automatically set up and don't get deleted correctly
> > when the matching "broad" IPsec SA comes up.
>
> Have you narrowed down what "broad" means? Clearly there is a problem
> with using 0.0.0.0/0 as an address. Is there also a problem with
> dangling %hold eroutes with other addresses? For example is it
> failing when any other subnet is used?
======================================================================
Andreas Steffen e-mail: andreas.steffen_at_strongsec.com
strongSec GmbH phone: +41 76 340 25 56
Alter Zürichweg 20 home: http://www.strongsec.com
CH-8952 Schlieren (Switzerland)
==========================================[strong internet security]==
Dec 31 11:25:24 firewall pluto[23522]: | *received whack message
Dec 31 11:25:24 firewall pluto[23522]: "strongsec-zhw-mail-imaps": terminating SAs using this connection
Dec 31 11:25:24 firewall pluto[23522]: "strongsec-zhw-mail-imaps" #393: deleting state (STATE_QUICK_I2)
Dec 31 11:25:24 firewall pluto[23522]: | executing down-client: 2>&1 PLUTO_VERSION='1.1' PLUTO_VERB='down-client' PLUTO_CONNECTION='strongsec-zhw-mail-imaps' PL
UTO_NEXT_HOP='80.218.56.1' PLUTO_INTERFACE='ipsec0' PLUTO_ME='80.218.56.160' PLUTO_MY_ID='sna_at_zhwin.ch' PLUTO_MY_CLIENT='160.85.106.0/28' PLUTO_MY_CLIENT_NET='1
60.85.106.0' PLUTO_MY_CLIENT_MASK='255.255.255.240' PLUTO_MY_PORT='0' PLUTO_MY_PROTOCOL='6' PLUTO_PEER='160.85.139.240' PLUTO_PEER_ID='@pluto.zhwin.ch' PLUTO_PE
ER_CLIENT='160.85.196.15/32' PLUTO_PEER_CLIENT_NET='160.85.196.15' PLUTO_PEER_CLIENT_MASK='255.255.255.255' PLUTO_PEER_PORT='993' PLUTO_PEER_PROTOCOL='6' /usr/l
ocal/lib/ipsec/updown
DDec 31 11:25:25 firewall pluto[23522]: | replace with shunt eroute 160.85.106.0/28:0 -> 160.85.196.15/32:993 => %trap:6
Dec 31 11:25:25 firewall pluto[23522]: | finish_pfkey_msg: SADB_X_ADDFLOW message 3168 for flow %trap
Dec 31 11:25:25 firewall pluto[23522]: | 02 0e 00 0b 17 00 00 00 60 0c 00 00 e2 5b 00 00
Dec 31 11:25:25 firewall pluto[23522]: | 02 00 01 00 00 00 01 04 00 00 00 00 02 00 00 00
Dec 31 11:25:25 firewall pluto[23522]: | 03 00 05 00 00 00 00 00 02 00 00 00 50 da 38 a0
Dec 31 11:25:25 firewall pluto[23522]: | 00 00 00 00 00 00 00 00 03 00 06 00 00 00 00 00
Dec 31 11:25:25 firewall pluto[23522]: | 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Dec 31 11:25:25 firewall pluto[23522]: | 03 00 15 00 00 00 00 00 02 00 00 00 a0 55 6a 00
Dec 31 11:25:25 firewall pluto[23522]: | 94 f4 ff bf 2c f4 ff bf 03 00 16 00 00 00 00 00
Dec 31 11:25:25 firewall pluto[23522]: | 02 00 03 e1 a0 55 c4 0f 2c eb ff bf 2c eb ff bf
Dec 31 11:25:25 firewall pluto[23522]: | 03 00 17 00 00 00 00 00 02 00 00 00 ff ff ff f0
Dec 31 11:25:25 firewall pluto[23522]: | 00 00 00 00 00 00 00 00 03 00 18 00 00 00 00 00
Dec 31 11:25:25 firewall pluto[23522]: | 02 00 ff ff ff ff ff ff 00 00 00 00 00 00 00 00
Dec 31 11:25:25 firewall pluto[23522]: | 01 00 1a 00 06 22 00 00
Dec 31 11:25:25 firewall pluto[23522]: | pfkey_get: SADB_X_ADDFLOW message 3168
Dec 31 11:25:25 firewall pluto[23522]: | delete esp.924cba3e_at_160.85.139.240
Dec 31 11:25:25 firewall pluto[23522]: | finish_pfkey_msg: SADB_DELETE message 3169 for Delete SA esp.924cba3e_at_160.85.139.240
Dec 31 11:25:25 firewall pluto[23522]: | 02 04 00 03 0a 00 00 00 61 0c 00 00 e2 5b 00 00
Dec 31 11:25:25 firewall pluto[23522]: | 02 00 01 00 92 4c ba 3e 00 01 00 00 00 00 00 00
Dec 31 11:25:25 firewall pluto[23522]: | 03 00 05 00 00 00 00 00 02 00 00 00 50 da 38 a0
Dec 31 11:25:25 firewall pluto[23522]: | 00 00 00 00 00 00 00 00 03 00 06 00 00 00 00 00
Dec 31 11:25:25 firewall pluto[23522]: | 02 00 03 e1 a0 55 8b f0 00 00 00 00 00 00 00 00
Dec 31 11:25:25 firewall pluto[23522]: | pfkey_get: SADB_DELETE message 3169
Dec 31 11:25:25 firewall pluto[23522]: | delete esp.8e96a056_at_80.218.56.160
Dec 31 11:25:25 firewall pluto[23522]: | finish_pfkey_msg: SADB_DELETE message 3170 for Delete SA esp.8e96a056_at_80.218.56.160
Dec 31 11:25:25 firewall pluto[23522]: | 02 04 00 03 0a 00 00 00 62 0c 00 00 e2 5b 00 00
Dec 31 11:25:25 firewall pluto[23522]: | 02 00 01 00 8e 96 a0 56 00 01 00 00 00 00 00 00
Dec 31 11:25:25 firewall pluto[23522]: | 03 00 05 00 00 00 00 00 02 00 03 e1 a0 55 8b f0
Dec 31 11:25:25 firewall pluto[23522]: | 00 00 00 00 00 00 00 00 03 00 06 00 00 00 00 00
Dec 31 11:25:25 firewall pluto[23522]: | 02 00 00 00 50 da 38 a0 00 00 00 00 00 00 00 00
Dec 31 11:25:25 firewall pluto[23522]: | pfkey_get: SADB_DELETE message 3170
Dec 31 11:25:25 firewall pluto[23522]: | next event EVENT_SHUNT_SCAN in 37 seconds
Dec 31 11:25:25 firewall pluto[23522]: |
Dec 31 11:25:53 firewall pluto[23522]: | *received pfkey message
Dec 31 11:25:53 firewall pluto[23522]: | pfkey_get: SADB_ACQUIRE message 4
Dec 31 11:25:53 firewall pluto[23522]: | pfkey_async: SADB_ACQUIRE len=29, errno=0, satype=3, seq=4, pid=0
Dec 31 11:25:53 firewall pluto[23522]: | add bare shunt 0x80cf560 160.85.106.4/32 -> 160.85.196.15/32 => %hold
Dec 31 11:25:53 firewall pluto[23522]: | initiate on demand from 160.85.106.4 to 160.85.196.15
Dec 31 11:25:53 firewall pluto[23522]: | delete narrow %hold eroute 160.85.106.4/32:0 -> 160.85.196.15/32:0 => %hold:6
Dec 31 11:25:53 firewall pluto[23522]: | finish_pfkey_msg: SADB_X_DELFLOW message 3171 for flow %hold
Dec 31 11:25:53 firewall pluto[23522]: | 02 0f 00 0b 0f 00 00 00 63 0c 00 00 e2 5b 00 00
Dec 31 11:25:53 firewall pluto[23522]: | 03 00 15 00 00 00 00 00 02 00 00 00 a0 55 6a 04
Dec 31 11:25:53 firewall pluto[23522]: | bc e5 ff bf 28 e5 ff bf 03 00 16 00 00 00 00 00
Dec 31 11:25:53 firewall pluto[23522]: | 02 00 00 00 a0 55 c4 0f 98 f6 ff bf b7 28 0e 40
Dec 31 11:25:53 firewall pluto[23522]: | 03 00 17 00 00 00 00 00 02 00 00 00 ff ff ff ff
Dec 31 11:25:53 firewall pluto[23522]: | 1f 00 00 00 0b 00 00 00 03 00 18 00 00 00 00 00
Dec 31 11:25:53 firewall pluto[23522]: | 02 00 00 00 ff ff ff ff 07 00 00 00 c1 fa 08 08
Dec 31 11:25:53 firewall pluto[23522]: | 01 00 1a 00 06 22 00 00
Dec 31 11:25:53 firewall pluto[23522]: ERROR: pfkey write() of SADB_X_DELFLOW message 3171 for flow %hold failed. Errno 14: Bad address
Dec 31 11:25:53 firewall pluto[23522]: | duplicating state object #388
Dec 31 11:25:53 firewall pluto[23522]: | creating state object #405 at 0x80d9cf8
Dec 31 11:25:53 firewall pluto[23522]: | ICOOKIE: a4 4a 93 9c ac b1 f9 25
Dec 31 11:25:53 firewall pluto[23522]: | RCOOKIE: 5c 26 8e 98 29 2d 2c ea
Dec 31 11:25:53 firewall pluto[23522]: | peer: a0 55 8b f0
Dec 31 11:25:53 firewall pluto[23522]: | state hash entry 2
Dec 31 11:25:53 firewall pluto[23522]: | inserting event EVENT_SO_DISCARD, timeout in 0 seconds for #405
Dec 31 11:25:53 firewall pluto[23522]: "strongsec-zhw-mail-https" #405: initiating Quick Mode RSASIG+ENCRYPT+TUNNEL+PFS
Dec 31 11:25:53 firewall pluto[23522]: | 12_128-1, 12_128-2, 3_000-1, 3_000-2, flags=-strict
Dec 31 11:25:53 firewall pluto[23522]: | kernel_alg_db_prop_new() will return p_new->protoid=3, p_new->trans_cnt=4
Dec 31 11:25:53 firewall pluto[23522]: | kernel_alg_db_prop_new() trans[0]: transid=12, attr_cnt=2, attrs[0].type=5, attrs[0].val=1
Dec 31 11:25:53 firewall pluto[23522]: | kernel_alg_db_prop_new() trans[1]: transid=12, attr_cnt=2, attrs[0].type=5, attrs[0].val=2
Dec 31 11:25:53 firewall pluto[23522]: | kernel_alg_db_prop_new() trans[2]: transid=3, attr_cnt=1, attrs[0].type=5, attrs[0].val=1
Dec 31 11:25:53 firewall pluto[23522]: | kernel_alg_db_prop_new() trans[3]: transid=3, attr_cnt=1, attrs[0].type=5, attrs[0].val=2
Dec 31 11:25:53 firewall pluto[23522]: | generate SPI: 8e 96 a0 61
Dec 31 11:25:53 firewall pluto[23522]: | inserting event EVENT_RETRANSMIT, timeout in 10 seconds for #405
Dec 31 11:25:53 firewall pluto[23522]: | next event EVENT_SHUNT_SCAN in 9 seconds
Dec 31 11:25:53 firewall pluto[23522]: |
Dec 31 11:25:53 firewall pluto[23522]: | *received pfkey message
Dec 31 11:25:53 firewall pluto[23522]: | pfkey_get: SADB_X_DELFLOW message 3171
Dec 31 11:25:53 firewall pluto[23522]: | pfkey_async: SADB_X_DELFLOW len=2, errno=14, satype=11, seq=3171, pid=23522
Dec 31 11:25:53 firewall pluto[23522]: | next event EVENT_SHUNT_SCAN in 9 seconds
Dec 31 11:25:53 firewall pluto[23522]: |
Dec 31 11:25:53 firewall pluto[23522]: | *received 364 bytes from 160.85.139.240:500 on eth0
Dec 31 11:25:53 firewall pluto[23522]: | ICOOKIE: a4 4a 93 9c ac b1 f9 25
Dec 31 11:25:53 firewall pluto[23522]: | RCOOKIE: 5c 26 8e 98 29 2d 2c ea
Dec 31 11:25:53 firewall pluto[23522]: | peer: a0 55 8b f0
Dec 31 11:25:53 firewall pluto[23522]: | state hash entry 2
Dec 31 11:25:53 firewall pluto[23522]: | state object #405 found, in STATE_QUICK_I1
Dec 31 11:25:53 firewall pluto[23522]: | kernel_alg_esp_enc_ok(12,128): alg_id=12, alg_ivlen=128, alg_minbits=128, alg_maxbits=256, res=0, ret=1
Dec 31 11:25:53 firewall pluto[23522]: | kernel_alg_esp_auth_ok(auth=1): ret=1
Dec 31 11:25:53 firewall pluto[23522]: | our client is subnet 160.85.106.0/28
Dec 31 11:25:53 firewall pluto[23522]: | our client protocol/port is 6/0
Dec 31 11:25:53 firewall pluto[23522]: | peer client is subnet 160.85.196.15/32
Dec 31 11:25:53 firewall pluto[23522]: | peer client protocol/port is 6/443
Dec 31 11:25:53 firewall pluto[23522]: | kernel_alg_esp_enc_keylen():alg_id=12, keylen=32
Dec 31 11:25:53 firewall pluto[23522]: | kernel_alg_esp_auth_ok(auth=1): ret=1
Dec 31 11:25:53 firewall pluto[23522]: | kernel_alg_esp_auth_keylen(auth=1, sadb_aalg=2): a_keylen=16
Dec 31 11:25:53 firewall pluto[23522]: | route owner of "strongsec-zhw-mail-https" CK_PERMANENT erouted: self; eroute owner: self
Dec 31 11:25:53 firewall pluto[23522]: | finish_pfkey_msg: SADB_ADD message 3172 for Add ESP SA esp.8e96a061_at_80.218.56.160
Dec 31 11:25:53 firewall pluto[23522]: | 02 03 00 03 10 00 00 00 64 0c 00 00 e2 5b 00 00
Dec 31 11:25:53 firewall pluto[23522]: | 02 00 01 00 8e 96 a0 61 40 01 02 0c 00 00 00 00
Dec 31 11:25:53 firewall pluto[23522]: | 03 00 05 00 00 00 00 00 02 00 01 bb a0 55 8b f0
Dec 31 11:25:53 firewall pluto[23522]: | 00 00 00 00 00 00 00 00 03 00 06 00 00 00 00 00
Dec 31 11:25:53 firewall pluto[23522]: | 02 00 00 00 50 da 38 a0 00 00 00 00 00 00 00 00
Dec 31 11:25:53 firewall pluto[23522]: | 03 00 08 00 80 00 00 00 09 25 df ed 37 50 c8 d9
Dec 31 11:25:53 firewall pluto[23522]: | 12 31 4a 3f 5e 9e fb c5 03 00 09 00 80 00 00 00
Dec 31 11:25:53 firewall pluto[23522]: | c6 44 67 3f 75 7c f1 3b 78 a0 3a bc 2a 11 30 19
Dec 31 11:25:53 firewall pluto[23522]: | pfkey_get: SADB_ADD message 3172
Dec 31 11:25:53 firewall pluto[23522]: | finish_pfkey_msg: SADB_ADD message 3173 for Add IPIP SA tun.127b_at_160.85.139.240
Dec 31 11:25:53 firewall pluto[23522]: | 02 03 00 09 0a 00 00 00 65 0c 00 00 e2 5b 00 00
Dec 31 11:25:53 firewall pluto[23522]: | 02 00 01 00 00 00 12 7b 00 01 00 00 00 00 00 00
Dec 31 11:25:53 firewall pluto[23522]: | 03 00 05 00 00 00 00 00 02 00 01 bb a0 55 8b f0
Dec 31 11:25:53 firewall pluto[23522]: | 00 00 00 00 00 00 00 00 03 00 06 00 00 00 00 00
Dec 31 11:25:53 firewall pluto[23522]: | 02 00 00 00 50 da 38 a0 00 00 00 00 00 00 00 00
Dec 31 11:25:53 firewall pluto[23522]: | pfkey_get: SADB_ADD message 3173
Dec 31 11:25:53 firewall pluto[23522]: | add inbound eroute 160.85.196.15/32:0 -> 160.85.106.0/28:0 => tun.127b_at_80.218.56.160:0
Dec 31 11:25:53 firewall pluto[23522]: | finish_pfkey_msg: SADB_X_ADDFLOW message 3174 for flow tun.127b_at_80.218.56.160
Dec 31 11:25:53 firewall pluto[23522]: | 02 0e 00 09 16 00 00 00 66 0c 00 00 e2 5b 00 00
Dec 31 11:25:53 firewall pluto[23522]: | 02 00 01 00 00 00 12 7b 00 00 00 00 08 00 00 00
Dec 31 11:25:53 firewall pluto[23522]: | 03 00 05 00 00 00 00 00 02 00 01 bb a0 55 8b f0
Dec 31 11:25:53 firewall pluto[23522]: | 00 00 00 00 00 00 00 00 03 00 06 00 00 00 00 00
Dec 31 11:25:53 firewall pluto[23522]: | 02 00 00 00 50 da 38 a0 00 00 00 00 00 00 00 00
Dec 31 11:25:53 firewall pluto[23522]: | 03 00 15 00 00 00 00 00 02 00 01 bb a0 55 c4 0f
Dec 31 11:25:53 firewall pluto[23522]: | 2c eb ff bf 2c eb ff bf 03 00 16 00 00 00 00 00
Dec 31 11:25:53 firewall pluto[23522]: | 02 00 00 00 a0 55 6a 00 94 f4 ff bf 2c f4 ff bf
Dec 31 11:25:53 firewall pluto[23522]: | 03 00 17 00 00 00 00 00 02 00 00 00 ff ff ff ff
Dec 31 11:25:53 firewall pluto[23522]: | 00 00 06 00 38 30 2e 32 03 00 18 00 00 00 00 00
Dec 31 11:25:53 firewall pluto[23522]: | 02 00 00 00 ff ff ff f0 00 00 00 00 5f de 44 f9
Dec 31 11:25:53 firewall pluto[23522]: | pfkey_get: SADB_X_ADDFLOW message 3174
Dec 31 11:25:53 firewall pluto[23522]: | grouping tun.127b_at_80.218.56.160 and esp.8e96a061_at_80.218.56.160
Dec 31 11:25:53 firewall pluto[23522]: | finish_pfkey_msg: SADB_X_GRPSA message 3175 for group tun.127b_at_80.218.56.160
Dec 31 11:25:53 firewall pluto[23522]: | 02 0d 00 09 0d 00 00 00 67 0c 00 00 e2 5b 00 00
Dec 31 11:25:53 firewall pluto[23522]: | 02 00 01 00 00 00 12 7b 00 00 00 00 00 00 00 00
Dec 31 11:25:53 firewall pluto[23522]: | 03 00 06 00 00 00 00 00 02 00 00 00 50 da 38 a0
Dec 31 11:25:53 firewall pluto[23522]: | 00 00 00 00 00 00 00 00 01 00 12 00 03 00 00 00
Dec 31 11:25:53 firewall pluto[23522]: | 02 00 13 00 8e 96 a0 61 00 00 00 00 00 00 00 00
Dec 31 11:25:53 firewall pluto[23522]: | 03 00 14 00 00 00 00 00 02 00 00 00 50 da 38 a0
Dec 31 11:25:53 firewall pluto[23522]: | 00 00 00 00 00 00 00 00
Dec 31 11:25:53 firewall pluto[23522]: | pfkey_get: SADB_X_GRPSA message 3175
Dec 31 11:25:53 firewall pluto[23522]: | finish_pfkey_msg: SADB_ADD message 3176 for Add ESP SA esp.924cba42_at_160.85.139.240
Dec 31 11:25:53 firewall pluto[23522]: | 02 03 00 03 10 00 00 00 68 0c 00 00 e2 5b 00 00
Dec 31 11:25:53 firewall pluto[23522]: | 02 00 01 00 92 4c ba 42 40 01 02 0c 00 00 00 00
Dec 31 11:25:53 firewall pluto[23522]: | 03 00 05 00 00 00 00 00 02 00 00 00 50 da 38 a0
Dec 31 11:25:53 firewall pluto[23522]: | 00 00 00 00 00 00 00 00 03 00 06 00 00 00 00 00
Dec 31 11:25:53 firewall pluto[23522]: | 02 00 01 bb a0 55 8b f0 00 00 00 00 00 00 00 00
Dec 31 11:25:53 firewall pluto[23522]: | 03 00 08 00 80 00 00 00 66 d9 ad 4c 35 d8 48 82
Dec 31 11:25:53 firewall pluto[23522]: | 6c b5 e9 46 a7 1b dd 63 03 00 09 00 80 00 00 00
Dec 31 11:25:53 firewall pluto[23522]: | 32 2d 37 28 91 99 b9 d6 d4 31 82 89 c3 e6 e1 e7
Dec 31 11:25:53 firewall pluto[23522]: | pfkey_get: SADB_ADD message 3176
Dec 31 11:25:53 firewall pluto[23522]: | finish_pfkey_msg: SADB_ADD message 3177 for Add IPIP SA tun.127c_at_160.85.139.240
Dec 31 11:25:53 firewall pluto[23522]: | 02 03 00 09 0a 00 00 00 69 0c 00 00 e2 5b 00 00
Dec 31 11:25:53 firewall pluto[23522]: | 02 00 01 00 00 00 12 7c 00 01 00 00 00 00 00 00
Dec 31 11:25:53 firewall pluto[23522]: | 03 00 05 00 00 00 00 00 02 00 00 00 50 da 38 a0
Dec 31 11:25:53 firewall pluto[23522]: | 00 00 00 00 00 00 00 00 03 00 06 00 00 00 00 00
Dec 31 11:25:53 firewall pluto[23522]: | 02 00 01 bb a0 55 8b f0 00 00 00 00 00 00 00 00
Dec 31 11:25:53 firewall pluto[23522]: | pfkey_get: SADB_ADD message 3177
Dec 31 11:25:53 firewall pluto[23522]: | grouping tun.127c_at_160.85.139.240 and esp.924cba42_at_160.85.139.240
Dec 31 11:25:53 firewall pluto[23522]: | finish_pfkey_msg: SADB_X_GRPSA message 3178 for group tun.127c_at_160.85.139.240
Dec 31 11:25:53 firewall pluto[23522]: | 02 0d 00 09 0d 00 00 00 6a 0c 00 00 e2 5b 00 00
Dec 31 11:25:53 firewall pluto[23522]: | 02 00 01 00 00 00 12 7c 00 00 00 00 00 00 00 00
Dec 31 11:25:53 firewall pluto[23522]: | 03 00 06 00 00 00 00 00 02 00 01 bb a0 55 8b f0
Dec 31 11:25:53 firewall pluto[23522]: | 00 00 00 00 00 00 00 00 01 00 12 00 03 00 00 00
Dec 31 11:25:53 firewall pluto[23522]: | 02 00 13 00 92 4c ba 42 00 00 00 00 00 00 00 00
Dec 31 11:25:53 firewall pluto[23522]: | 03 00 14 00 00 00 00 00 02 00 01 bb a0 55 8b f0
Dec 31 11:25:53 firewall pluto[23522]: | 00 00 00 00 00 00 00 00
Dec 31 11:25:53 firewall pluto[23522]: | pfkey_get: SADB_X_GRPSA message 3178
Dec 31 11:25:53 firewall pluto[23522]: | route owner of "strongsec-zhw-mail-https" CK_PERMANENT erouted: self; eroute owner: self
Dec 31 11:25:53 firewall pluto[23522]: | replace eroute 160.85.106.0/28:0 -> 160.85.196.15/32:443 => tun.127c_at_160.85.139.240:6
Dec 31 11:25:53 firewall pluto[23522]: | finish_pfkey_msg: SADB_X_ADDFLOW message 3179 for flow tun.127c_at_160.85.139.240
Dec 31 11:25:53 firewall pluto[23522]: | 02 0e 00 09 17 00 00 00 6b 0c 00 00 e2 5b 00 00
Dec 31 11:25:53 firewall pluto[23522]: | 02 00 01 00 00 00 12 7c 00 00 00 00 02 00 00 00
Dec 31 11:25:53 firewall pluto[23522]: | 03 00 05 00 00 00 00 00 02 00 00 00 50 da 38 a0
Dec 31 11:25:53 firewall pluto[23522]: | 00 00 00 00 00 00 00 00 03 00 06 00 00 00 00 00
Dec 31 11:25:53 firewall pluto[23522]: | 02 00 01 bb a0 55 8b f0 00 00 00 00 00 00 00 00
Dec 31 11:25:53 firewall pluto[23522]: | 03 00 15 00 00 00 00 00 02 00 00 00 a0 55 6a 00
Dec 31 11:25:53 firewall pluto[23522]: | 94 f4 ff bf 2c f4 ff bf 03 00 16 00 00 00 00 00
Dec 31 11:25:53 firewall pluto[23522]: | 02 00 01 bb a0 55 c4 0f 2c eb ff bf 2c eb ff bf
Dec 31 11:25:53 firewall pluto[23522]: | 03 00 17 00 00 00 00 00 02 00 00 00 ff ff ff f0
Dec 31 11:25:53 firewall pluto[23522]: | 40 31 36 30 2e 38 35 2e 03 00 18 00 00 00 00 00
Dec 31 11:25:53 firewall pluto[23522]: | 02 00 ff ff ff ff ff ff a0 b2 0a 08 30 e5 0c 08
Dec 31 11:25:53 firewall pluto[23522]: | 01 00 1a 00 06 a2 00 00
Dec 31 11:25:53 firewall pluto[23522]: | pfkey_get: SADB_X_ADDFLOW message 3179
Dec 31 11:25:54 firewall pluto[23522]: | inserting event EVENT_SA_REPLACE, timeout in 2526 seconds for #405
Dec 31 11:25:54 firewall pluto[23522]: "strongsec-zhw-mail-https" #405: sent QI2, IPsec SA established
Dec 31 11:25:54 firewall pluto[23522]: | next event EVENT_SHUNT_SCAN in 8 seconds
Dec 31 11:26:01 firewall pluto[23522]: |
Dec 31 11:26:01 firewall pluto[23522]: | *time to handle event
Dec 31 11:26:01 firewall pluto[23522]: | called while no event expired (1041330361/1041330362, EVENT_SHUNT_SCAN)
Dec 31 11:26:01 firewall pluto[23522]: | next event EVENT_SHUNT_SCAN in 1 seconds
Dec 31 11:26:02 firewall pluto[23522]: |
Dec 31 11:26:02 firewall pluto[23522]: | *time to handle event
Dec 31 11:26:02 firewall pluto[23522]: | event after this is EVENT_SA_EXPIRE in 13 seconds
Dec 31 11:26:02 firewall pluto[23522]: | inserting event EVENT_SHUNT_SCAN, timeout in 120 seconds
Dec 31 11:26:02 firewall pluto[23522]: | next event EVENT_SA_EXPIRE in 13 seconds for #380
root_at_firewall
_______________________________________________
Users mailing list
Users_at_lists.freeswan.org
http://lists.freeswan.org/mailman/listinfo/users
This archive was generated by hypermail 2.1.5 : Wed Jan 01 2003 - 05:21:05 CET