3-19: 09:15:49:818 SecMaxToken 12000 3-19: 09:15:49:818 FormatMessage from system 3-19: 09:15:49:818 Failed to obtain Kerberos server credentials for ISAKMP/Oakley service. Kerberos authentication will not function. The most likely reason for this is lack of domain membership. This is normal if your computer is a member of a workgroup. 3-19: 09:15:49:818 Get DH Prov type failed 234 3-19: 09:15:49:818 MaxDHLength 512 3-19: 09:15:49:818 Get DH Prov type failed 234 3-19: 09:15:49:818 MaxDHLength 512 3-19: 09:15:49:818 DH Provider 3 3-19: 09:15:49:818 RegisterSocket: Socket 1220, Event 1176 3-19: 09:15:49:818 Register wait a9380 3-19: 09:15:49:818 Adding socket: 1220 addr: 210.54.79.60 3-19: 09:15:49:818 Reapertimer a7fa8 3-19: 09:15:49:818 Before processing 3-19: 09:15:49:294 Acquire thread waiting 3-19: 09:15:49:818 After processing 3-19: 09:15:49:818 Oakley Init done 3-19: 09:15:49:818 Oakley group 2 from UI 3-19: 09:15:49:818 Isakmp policy (4 total): 7471bf65-b88a-4291-9e74db3daef80424 PFS=0 3-19: 09:15:49:818 #0: C.Id = 3, H.ID= 2, A.ID = 0, Group = 2 LT=28800 QMs=0 3-19: 09:15:49:818 #1: C.Id = 3, H.ID= 1, A.ID = 0, Group = 2 LT=28800 QMs=0 3-19: 09:15:49:818 #2: C.Id = 1, H.ID= 2, A.ID = 0, Group = 1 LT=28800 QMs=0 3-19: 09:15:49:818 #3: C.Id = 1, H.ID= 1, A.ID = 0, Group = 1 LT=28800 QMs=0 3-19: 09:15:49:818 flush guid(isakmp): 7471bf65-b88a-4291-9e74db3daef80424 3-19: 09:15:49:818 isadb_schedule_kill_oldPolicy_sas: 7471bf65-b88a-4291-9e74db3daef80424 1 3-19: 09:15:49:818 Added Timeout dc630 3-19: 09:15:49:188 entered kill_old_policy_sas 3-19: 09:16:08:818 flush(isakmp): 7471bf65-b88a-4291-9e74db3daef80424 3-19: 09:16:08:818 Oakley group 2 from UI 3-19: 09:16:08:818 Isakmp policy (4 total): d70902dc-9fcf-409b-a8cd9493ffe79725 PFS=0 3-19: 09:16:08:818 #0: C.Id = 3, H.ID= 2, A.ID = 0, Group = 2 LT=28800 QMs=0 3-19: 09:16:08:818 #1: C.Id = 3, H.ID= 1, A.ID = 0, Group = 2 LT=28800 QMs=0 3-19: 09:16:08:818 #2: C.Id = 1, H.ID= 2, A.ID = 0, Group = 1 LT=28800 QMs=0 3-19: 09:16:08:818 #3: C.Id = 1, H.ID= 1, A.ID = 0, Group = 1 LT=28800 QMs=0 3-19: 09:16:08:818 flush guid(isakmp): d70902dc-9fcf-409b-a8cd9493ffe79725 3-19: 09:16:08:818 isadb_schedule_kill_oldPolicy_sas: d70902dc-9fcf-409b-a8cd9493ffe79725 1 3-19: 09:16:08:818 Added Timeout deb10 3-19: 09:16:08:818 Adding policy guid(ipsec): 5c70ec02-b679-41de-af40d64f4827b2d8 3-19: 09:16:08:818 Authentication Method[0] from UI 5 3-19: 09:16:08:818 Auth[0]: 5 Authinfosize: 0 3-19: 09:16:08:818 Flags from UI 0 3-19: 09:16:08:818 Ipsec policy (6 total): 5c70ec02-b679-41de-af40d64f4827b2d8 PFS=24903644 3-19: 09:16:08:818 #0: Encrypt C.Id = 3, C.KeyLen = 64, I.ID = 2, 3-19: 09:16:08:818 #1: Encrypt C.Id = 3, C.KeyLen = 64, I.ID = 1, 3-19: 09:16:08:818 #2: Encrypt C.Id = 1, C.KeyLen = 64, I.ID = 2, 3-19: 09:16:08:818 #3: Encrypt C.Id = 1, C.KeyLen = 64, I.ID = 1, 3-19: 09:16:08:818 #4: Auth C.Id = 2, C.KeyLen = 64, I.ID = 0, 3-19: 09:16:08:818 #5: Auth C.Id = 1, C.KeyLen = 64, I.ID = 0, 3-19: 09:16:08:818 flush guid(ipsec): 5c70ec02-b679-41de-af40d64f4827b2d8 3-19: 09:16:08:818 Adding policy guid(ipsec): c6e4c78a-18ff-4aab-9e87f371dbc1be53 3-19: 09:16:08:818 Authentication Method[0] from UI 3 3-19: 09:16:08:188 entered kill_old_policy_sas 3-19: 09:16:08:818 Auth[0]: 3 Authinfosize: 122 3-19: 09:16:08:818 Flags from UI 2 3-19: 09:16:08:818 Ipsec policy (1 total): c6e4c78a-18ff-4aab-9e87f371dbc1be53 PFS=24903644 3-19: 09:16:08:818 #0: Encrypt C.Id = 3, C.KeyLen = 0, I.ID = 1, 3-19: 09:16:08:818 flush guid(ipsec): c6e4c78a-18ff-4aab-9e87f371dbc1be53 3-19: 09:16:08:818 Adding policy guid(ipsec): 4517c217-ad2a-4d7e-a6ed4005b57de1b4 3-19: 09:16:08:818 Authentication Method[0] from UI 3 3-19: 09:16:08:818 Auth[0]: 3 Authinfosize: 122 3-19: 09:16:08:818 Flags from UI 2 3-19: 09:16:08:818 Ipsec policy (1 total): 4517c217-ad2a-4d7e-a6ed4005b57de1b4 PFS=24903644 3-19: 09:16:08:818 #0: Encrypt C.Id = 3, C.KeyLen = 0, I.ID = 1, 3-19: 09:16:08:818 flush guid(ipsec): 4517c217-ad2a-4d7e-a6ed4005b57de1b4 3-19: 09:17:07:294 Posting acquire: op=810E2848 src=210.54.79.60.0 dst=192.168.0.7.0 proto = 0, SrcMask=255.255.255.255, DstMask=255.255.255.0, Tunnel 1, TunnelEndpt=210.54.122.217 Inbound TunnelEndpt=210.54.79.60 3-19: 09:17:07:294 Acquire thread waiting 3-19: 09:17:07:188 find(ipsec): c6e4c78a-18ff-4aab-9e87f371dbc1be53 3-19: 09:17:07:188 outstanding_kernel_req returned 0 3-19: 09:17:07:188 Created new SA 23a048 3-19: 09:17:07:188 Acquire: src = 210.54.79.60.0000, dst = 210.54.122.217.62465, proto = 00, context = 810E2848, ProxySrc = 210.54.79.60.0000, ProxyDst = 192.168.0.0.0000 SrcMask = 0.0.0.0 DstMask = 255.255.255.0 3-19: 09:17:07:188 constructing ISAKMP Header 3-19: 09:17:07:188 constructing SA (ISAKMP) 3-19: 09:17:07:188 find(isakmp): c6e4c78a-18ff-4aab-9e87f371dbc1be53 3-19: 09:17:07:188 Setting group desc 3-19: 09:17:07:188 Setting group desc 3-19: 09:17:07:188 Setting group desc 3-19: 09:17:07:188 Setting group desc 3-19: 09:17:07:188 Constructing Vendor 3-19: 09:17:07:188 Throw: State mask=1 3-19: 09:17:07:188 Added Timeout deb10 3-19: 09:17:07:188 Setting Retransmit: sa 23a048 handle deb10 context 23a7f0 3-19: 09:17:07:188 3-19: 09:17:07:188 Sending: SA = 0x0023A048 to 210.54.122.217 3-19: 09:17:07:188 ISAKMP Header: (V1.0), len = 216 3-19: 09:17:07:188 I-COOKIE bd4d96bf95947d67 3-19: 09:17:07:188 R-COOKIE 0000000000000000 3-19: 09:17:07:188 exchange: Oakley Main Mode 3-19: 09:17:07:188 flags: 0 3-19: 09:17:07:188 next payload: SA 3-19: 09:17:07:188 message ID: 00000000 3-19: 09:17:07:188 3-19: 09:17:07:188 Resume: (get) SA = 0x0023a048 from 210.54.122.217 3-19: 09:17:07:188 ISAKMP Header: (V1.0), len = 84 3-19: 09:17:07:188 I-COOKIE bd4d96bf95947d67 3-19: 09:17:07:188 R-COOKIE 12a0ef064b3f6b86 3-19: 09:17:07:188 exchange: Oakley Main Mode 3-19: 09:17:07:188 flags: 0 3-19: 09:17:07:188 next payload: SA 3-19: 09:17:07:188 message ID: 00000000 3-19: 09:17:07:188 Stopping RetransTimer sa:0023A048 centry:00000000 handle:000DEB10 3-19: 09:17:07:188 processing payload SA 3-19: 09:17:07:188 Received Phase 1 Transform 1 3-19: 09:17:07:188 Encryption Alg Triple DES CBC(5) 3-19: 09:17:07:188 Hash Alg SHA(2) 3-19: 09:17:07:188 Oakley Group 2 3-19: 09:17:07:188 Auth Method RSA Signature with Certificates(3) 3-19: 09:17:07:188 Life type in Seconds 3-19: 09:17:07:188 Life duration of 28800 3-19: 09:17:07:188 Phase 1 SA accepted: transform=1 3-19: 09:17:07:188 SA - Oakley proposal accepted 3-19: 09:17:07:188 In state OAK_MM_SA_SETUP 3-19: 09:17:07:188 constructing ISAKMP Header 3-19: 09:17:07:188 constructing KE 3-19: 09:17:07:188 constructing NONCE (ISAKMP) 3-19: 09:17:07:188 Throw: State mask=7 3-19: 09:17:07:188 3-19: 09:17:07:188 Sending: SA = 0x0023A048 to 210.54.122.217 3-19: 09:17:07:188 ISAKMP Header: (V1.0), len = 184 3-19: 09:17:07:188 I-COOKIE bd4d96bf95947d67 3-19: 09:17:07:188 R-COOKIE 12a0ef064b3f6b86 3-19: 09:17:07:188 exchange: Oakley Main Mode 3-19: 09:17:07:188 flags: 0 3-19: 09:17:07:188 next payload: KE 3-19: 09:17:07:188 message ID: 00000000 3-19: 09:17:08:188 3-19: 09:17:08:188 Resume: (get) SA = 0x0023a048 from 210.54.122.217 3-19: 09:17:08:188 ISAKMP Header: (V1.0), len = 188 3-19: 09:17:08:188 I-COOKIE bd4d96bf95947d67 3-19: 09:17:08:188 R-COOKIE 12a0ef064b3f6b86 3-19: 09:17:08:188 exchange: Oakley Main Mode 3-19: 09:17:08:188 flags: 0 3-19: 09:17:08:188 next payload: KE 3-19: 09:17:08:188 message ID: 00000000 3-19: 09:17:08:188 Stopping RetransTimer sa:0023A048 centry:00000000 handle:000DEB10 3-19: 09:17:08:188 processing payload KE 3-19: 09:17:08:188 Generated 128 byte Shared Secret 3-19: 09:17:08:188 KE processed; DH shared secret computed 3-19: 09:17:08:188 processing payload NONCE 3-19: 09:17:08:188 processing payload CR 3-19: 09:17:08:188 Processing Cert request 3-19: 09:17:08:188 In state OAK_MM_Key_EXCH 3-19: 09:17:08:188 skeyid generated; crypto enabled (initiator) 3-19: 09:17:08:188 constructing ISAKMP Header 3-19: 09:17:08:188 constructing ID 3-19: 09:17:08:188 Received no valid CRPs. Using all configured 3-19: 09:17:08:188 Cert Trustes. 0 0 3-19: 09:17:08:188 Key Contained Name 3-19: 09:17:08:188 {69E35D70-A0C3-4B0A-8F3B-412927229F35} 3-19: 09:17:08:188 Found try 1 3-19: 09:17:08:188 constructing CERT 3-19: 09:17:08:188 constructing SIG 3-19: 09:17:08:188 Construct SIG 3-19: 09:17:08:188 Hash algo 2 3-19: 09:17:08:188 Initiator ID 09000000308187310b30090603550406 3-19: 09:17:08:188 13024e5a3121301f060355040a131844 3-19: 09:17:08:188 657369676e204275696c642053797374 3-19: 09:17:08:188 656d73204c7464312e302c0603550403 3-19: 09:17:08:188 13254442532057696e646f7773203230 3-19: 09:17:08:188 30302043657274696669636174652028 3-19: 09:17:08:188 632920323030323125302306092a8648 3-19: 09:17:08:188 86f70d0109011616686f73746d617374 3-19: 09:17:08:188 65724064627379732e636f2e6e7a 3-19: 09:17:08:188 Error 80090016 during CryptSignHash1! 3-19: 09:17:08:188 Trying KE key 3-19: 09:17:08:188 Signature Created Successfully 3-19: 09:17:08:188 Sig LE: ab47cfe914a4ce8412bfe90d2947bc28 3-19: 09:17:08:188 d52c3e2ddc56c7e751e49b69754a7597 3-19: 09:17:08:188 6a255ebaff31625afdecb190896781c1 3-19: 09:17:08:188 eda1a9cf0b33c71637b337e6a7e41e47 3-19: 09:17:08:188 b982b1d72726cc1aa001abc2d578a86c 3-19: 09:17:08:188 775688ed87eb5c54ca485b5e501148e7 3-19: 09:17:08:188 594faf1abab2a6a07ed1e60e2d2fa753 3-19: 09:17:08:188 b29746875a8aa810a9ac07d6c24d02a8 3-19: 09:17:08:188 a46118f6d2992b87c24b4919a30a05d1 3-19: 09:17:08:188 7cb5915f6b7d492cd8f22000e709e9bd 3-19: 09:17:08:188 78a15067fbd7ec36d7411d510b544c9a 3-19: 09:17:08:188 c4e3b346d1fb51cec791cf59e16fc5d8 3-19: 09:17:08:188 64f2f85c74f449331f77dfb07c4b6dad 3-19: 09:17:08:188 622dba7bf32d7e44b6ddbdacb3f5a83b 3-19: 09:17:08:188 96bef2a1ebd85fcb77cdba547430b752 3-19: 09:17:08:188 53a066e5ac016e58c09c73db75ec0331 3-19: 09:17:08:188 3-19: 09:17:08:188 SIG BE: 3103ec75db739cc0586e01ace566a053 3-19: 09:17:08:188 52b7307454bacd77cb5fd8eba1f2be96 3-19: 09:17:08:188 3ba8f5b3acbdddb6447e2df37bba2d62 3-19: 09:17:08:188 ad6d4b7cb0df771f3349f4745cf8f264 3-19: 09:17:08:188 d8c56fe159cf91c7ce51fbd146b3e3c4 3-19: 09:17:08:188 9a4c540b511d41d736ecd7fb6750a178 3-19: 09:17:08:188 bde909e70020f2d82c497d6b5f91b57c 3-19: 09:17:08:188 d1050aa319494bc2872b99d2f61861a4 3-19: 09:17:08:188 a8024dc2d607aca910a88a5a874697b2 3-19: 09:17:08:188 53a72f2d0ee6d17ea0a6b2ba1aaf4f59 3-19: 09:17:08:188 e74811505e5b48ca545ceb87ed885677 3-19: 09:17:08:188 6ca878d5c2ab01a01acc2627d7b182b9 3-19: 09:17:08:188 471ee4a7e637b33716c7330bcfa9a1ed 3-19: 09:17:08:188 c181678990b1ecfd5a6231ffba5e256a 3-19: 09:17:08:188 97754a75699be451e7c756dc2d3e2cd5 3-19: 09:17:08:188 28bc47290de9bf1284cea414e9cf47ab 3-19: 09:17:08:188 3-19: 09:17:08:188 AuthCount 1 3-19: 09:17:08:188 Constructing Cert Request 3-19: 09:17:08:188 Setting CertReq type 3-19: 09:17:08:188 Throw: State mask=111f 3-19: 09:17:08:188 Doing tripleDES 3-19: 09:17:08:188 3-19: 09:17:08:188 Sending: SA = 0x0023A048 to 210.54.122.217 3-19: 09:17:08:188 ISAKMP Header: (V1.0), len = 1724 3-19: 09:17:08:188 I-COOKIE bd4d96bf95947d67 3-19: 09:17:08:188 R-COOKIE 12a0ef064b3f6b86 3-19: 09:17:08:188 exchange: Oakley Main Mode 3-19: 09:17:08:188 flags: 1 ( encrypted ) 3-19: 09:17:08:188 next payload: ID 3-19: 09:17:08:188 message ID: 00000000 3-19: 09:17:09:188 Handling Retransmit: sa 23a048 handle deb10 context 23a7f0 arg 23a7f0 3-19: 09:17:09:188 retransmit: sa = 0023A048 centry 00000000 , count = 0 3-19: 09:17:09:188 3-19: 09:17:09:188 Sending: SA = 0x0023A048 to 210.54.122.217 3-19: 09:17:09:188 ISAKMP Header: (V1.0), len = 1724 3-19: 09:17:09:188 I-COOKIE bd4d96bf95947d67 3-19: 09:17:09:188 R-COOKIE 12a0ef064b3f6b86 3-19: 09:17:09:188 exchange: Oakley Main Mode 3-19: 09:17:09:188 flags: 1 ( encrypted ) 3-19: 09:17:09:188 next payload: ID 3-19: 09:17:09:188 message ID: 00000000 3-19: 09:17:10:188 3-19: 09:17:10:188 Resume: (get) SA = 0x0023a048 from 210.54.122.217 3-19: 09:17:10:188 ISAKMP Header: (V1.0), len = 1548 3-19: 09:17:10:188 I-COOKIE bd4d96bf95947d67 3-19: 09:17:10:188 R-COOKIE 12a0ef064b3f6b86 3-19: 09:17:10:188 exchange: Oakley Main Mode 3-19: 09:17:10:188 flags: 1 ( encrypted ) 3-19: 09:17:10:188 next payload: ID 3-19: 09:17:10:188 message ID: 00000000 3-19: 09:17:10:188 Doing tripleDES 3-19: 09:17:10:188 Stopping RetransTimer sa:0023A048 centry:00000000 handle:000DEB10 3-19: 09:17:10:188 processing payload ID 3-19: 09:17:10:188 Process Id 3-19: 09:17:10:188 Got Cert ID 3-19: 09:17:10:188 processing payload CERT 3-19: 09:17:10:188 Processing Cert 3-19: 09:17:10:188 ProcessingCert 3-19: 09:17:10:188 processing payload SIG 3-19: 09:17:10:188 Process SIG 3-19: 09:17:10:188 Verifying CertStore 3-19: 09:17:10:188 Cert Trustes. 0 0 3-19: 09:17:10:188 CertFindExtenstion failed with 0 3-19: 09:17:10:188 Cert Trustes. 0 0 3-19: 09:17:10:188 CertFindExtenstion failed with 0 3-19: 09:17:10:188 Cert lifetime in seconds low 157003523, high 0 3-19: 09:17:10:188 Responder ID 090000003060310b3009060355040613 3-19: 09:17:10:188 024e5a3121301f060355040a13184465 3-19: 09:17:10:188 7369676e204275696c64205379737465 3-19: 09:17:10:188 6d73204c7464312e302c060355040313 3-19: 09:17:10:188 254442532057696e646f777320323030 3-19: 09:17:10:188 30204365727469666963617465202863 3-19: 09:17:10:188 292032303032 3-19: 09:17:10:188 Sig to Verify ee02e8bcd9561f31fcee9d84d3ca2499 3-19: 09:17:10:188 be696b927385e235a119519b51806bcf 3-19: 09:17:10:188 a9fa4950aa5e0c3da9a172c7860babe9 3-19: 09:17:10:188 098e339dacf897a2b94b76a296561572 3-19: 09:17:10:188 db7e32d3cf48c6416f62caed6a899cd7 3-19: 09:17:10:188 757cbc2792ff4365d0b57a185728a956 3-19: 09:17:10:188 0ca02d9106555b3e583cf8c8bbad8c57 3-19: 09:17:10:188 de33780c6f179589a6a46573e09dc7e5 3-19: 09:17:10:188 d66486a1d157f72cd2751108c13eb2db 3-19: 09:17:10:188 8ee0fe684c5f912f2ed14832f78861f9 3-19: 09:17:10:188 3a672439e38cd54387159f31c1f0e454 3-19: 09:17:10:188 6c264e48df65ac0b0bdd67b9609e9015 3-19: 09:17:10:188 94b1ea80b50761e42021d38ed60eab93 3-19: 09:17:10:188 c5b72c4c935b0b7616c741016b12361e 3-19: 09:17:10:188 d294f7a4b4aed54db49553a2ace5ec24 3-19: 09:17:10:188 e53fc9ae311617013e67cf7612111c51 3-19: 09:17:10:188 3-19: 09:17:10:188 Signature validated 3-19: 09:17:10:188 AUTH - Phase I signature authentication accepted 3-19: 09:17:10:188 In state OAK_MM_KEY_AUTH 3-19: 09:17:10:188 Key Exchange Mode (Main Mode) 3-19: 09:17:10:188 Certificate based Identity. Subject NZ, Design Build Systems Ltd, DBS Windows 2000 Certificate (c) 2002 Issuing Certificate Authority NZ, Auckland, Design Build Systems Ltd, Root CA, DBS VPN Root CA (c) 2002 Root Certificate Authority NZ, Auckland, Design Build Systems Ltd, Root CA, DBS VPN Root CA (c) 2002 Peer IP Address: 210.54.122.217 3-19: 09:17:10:188 Source IP Address 210.54.79.60 Source IP Address Mask 255.255.255.255 Destination IP Address 210.54.122.217 Destination IP Address Mask 255.255.255.255 Protocol 0 Source Port 0 Destination Port 0 3-19: 09:17:10:188 ESP Algorithm Triple DES CBC HMAC Algorithm SHA Lifetime (sec) 28800 3-19: 09:17:10:188 Setting SA timeout: 25860 3-19: 09:17:10:188 Added Timeout 12b890 3-19: 09:17:10:188 Copying temp iv to sa->crypt_iv 3-19: 09:17:10:188 Created new conn entry 23b4e0 3-19: 09:17:10:188 Starting QM with mess ID 12bc1b5f 3-19: 09:17:10:188 find(ipsec): c6e4c78a-18ff-4aab-9e87f371dbc1be53 3-19: 09:17:10:188 GetSpi: src = 192.168.0.0.0000, dst = 210.54.79.60.0000, proto = 00, context = 810E2848, srcMask = 255.255.255.0, destMask = 255.255.255.255, TunnelFilter 1 3-19: 09:17:10:188 Setting SPI 1028901682 3-19: 09:17:10:188 constructing ISAKMP Header 3-19: 09:17:10:188 constructing HASH (null) 3-19: 09:17:10:188 constructing SA (IPSEC) 3-19: 09:17:10:188 Sending Tunnelling Attribute 3-19: 09:17:10:188 constructing QM KE 3-19: 09:17:10:188 constructing NONCE (IPSEC) 3-19: 09:17:10:188 constructing ID (proxy) 3-19: 09:17:10:188 constructing ID (proxy) 3-19: 09:17:10:188 constructing HASH (QM) 3-19: 09:17:10:188 Construct QM Hash mess ID = 1595653138 3-19: 09:17:10:188 Throw: State mask=30004 3-19: 09:17:10:188 Doing tripleDES 3-19: 09:17:10:188 Added Timeout 12db98 3-19: 09:17:10:188 Setting Retransmit: sa 23a048 centry 23b4e0 handle 12db98 context 23a720 3-19: 09:17:10:188 3-19: 09:17:10:188 Sending: SA = 0x0023A048 to 210.54.122.217 3-19: 09:17:10:188 ISAKMP Header: (V1.0), len = 308 3-19: 09:17:10:188 I-COOKIE bd4d96bf95947d67 3-19: 09:17:10:188 R-COOKIE 12a0ef064b3f6b86 3-19: 09:17:10:188 exchange: Oakley Quick Mode 3-19: 09:17:10:188 flags: 1 ( encrypted ) 3-19: 09:17:10:188 next payload: HASH 3-19: 09:17:10:188 message ID: 12bc1b5f 3-19: 09:17:10:188 3-19: 09:17:10:188 Resume: (get) SA = 0x0023a048 from 210.54.122.217 3-19: 09:17:10:188 ISAKMP Header: (V1.0), len = 1548 3-19: 09:17:10:188 I-COOKIE bd4d96bf95947d67 3-19: 09:17:10:188 R-COOKIE 12a0ef064b3f6b86 3-19: 09:17:10:188 exchange: Oakley Main Mode 3-19: 09:17:10:188 flags: 1 ( encrypted ) 3-19: 09:17:10:188 next payload: ID 3-19: 09:17:10:188 message ID: 00000000 3-19: 09:17:10:188 Doing tripleDES 3-19: 09:17:10:188 invalid payload received 3-19: 09:17:10:188 GetPacket failed cbad034b 3-19: 09:17:10:188 3-19: 09:17:10:188 Resume: (get) SA = 0x0023a048 from 210.54.122.217 3-19: 09:17:10:188 ISAKMP Header: (V1.0), len = 300 3-19: 09:17:10:188 I-COOKIE bd4d96bf95947d67 3-19: 09:17:10:188 R-COOKIE 12a0ef064b3f6b86 3-19: 09:17:10:188 exchange: Oakley Quick Mode 3-19: 09:17:10:188 flags: 1 ( encrypted ) 3-19: 09:17:10:188 next payload: HASH 3-19: 09:17:10:188 message ID: 12bc1b5f 3-19: 09:17:10:188 Centry 0023B4E0 3-19: 09:17:10:188 Doing tripleDES 3-19: 09:17:10:188 Stopping RetransTimer sa:0023A048 centry:0023B4E0 handle:0012DB98 3-19: 09:17:10:188 Received QM with mess ID 314317663 3-19: 09:17:10:188 processing HASH (QM) 3-19: 09:17:10:188 Verify QM Hash mess ID = 1595653138 3-19: 09:17:10:188 processing payload NONCE 3-19: 09:17:10:188 processing payload KE 3-19: 09:17:10:188 Quick Mode KE processed; Saved KE data 3-19: 09:17:10:188 processing payload ID 3-19: 09:17:10:188 Process Id 3-19: 09:17:10:188 processing payload ID 3-19: 09:17:10:188 Process Id 3-19: 09:17:10:188 processing payload SA 3-19: 09:17:10:188 Negotiated Proxy ID: Src 210.54.79.60.0 Dst 192.168.0.0.0 3-19: 09:17:10:188 Dst id for subnet. Mask 255.255.255.0 3-19: 09:17:10:188 Checking Proposal 1: Proto= ESP(3), num trans=1 Next=0 3-19: 09:17:10:188 Checking Transform # 1: ID=Triple DES CBC(3) 3-19: 09:17:10:188 SA life type in seconds 3-19: 09:17:10:188 SA life duration 00000e10 3-19: 09:17:10:188 SA life type in kilobytes 3-19: 09:17:10:188 SA life duration 0000c350 3-19: 09:17:10:188 tunnel mode is Tunnel Mode(1) 3-19: 09:17:10:188 HMAC algorithm is MD5(1) 3-19: 09:17:10:188 group description for PFS is 2 3-19: 09:17:10:188 Phase 2 SA accepted: proposal=1 transform=1 3-19: 09:17:10:188 Tunnelling: 1 3-19: 09:17:10:188 Generated 128 byte Shared Secret 3-19: 09:17:10:188 constructing ISAKMP Header 3-19: 09:17:10:188 constructing HASH (QM) 3-19: 09:17:10:188 Checking nodes 3-19: 09:17:10:188 Checking node: spi=1028901682 other_spi=1781226791 accept=1 num=1 3-19: 09:17:10:188 Found accepted node 3-19: 09:17:10:188 HMAC Transform 1 3-19: 09:17:10:188 Phase II Hash Length 16 3-19: 09:17:10:188 Hash len 20 3-19: 09:17:10:188 HMAC Transform 1 3-19: 09:17:10:188 Phase II Hash Length 16 3-19: 09:17:10:188 Hash len 20 3-19: 09:17:10:188 Proxy src addr 3c4f36d2 3-19: 09:17:10:188 Proxy src port 0 3-19: 09:17:10:188 Proxy dest addr a8c0 3-19: 09:17:10:188 Proxy dest port 0 3-19: 09:17:10:188 src addr 3c4f36d2 3-19: 09:17:10:188 src port 0 3-19: 09:17:10:188 dst addr d97a36d2 3-19: 09:17:10:188 dst port f401 3-19: 09:17:10:188 Hmac algo 1 3-19: 09:17:10:188 Transform 3 3-19: 09:17:10:188 Loading tunnelling SA 3-19: 09:17:10:188 SRC PORT = 0 DST PORT=0 3-19: 09:17:10:188 HMAC algo 1 3-19: 09:17:10:188 ESP Algo 3 ConKeyLen 24 KeyLen 40 3-19: 09:17:10:188 Filter SRC port=0 3-19: 09:17:10:188 Filter DST port=0 3-19: 09:17:10:188 LifetimeSec 3600 3-19: 09:17:10:188 LifetimeKB 50000 3-19: 09:17:10:188 NotifyLifetimeSec 0 3-19: 09:17:10:188 NotifyLifetimeKB 0 3-19: 09:17:10:188 Add: src = 210.54.79.60.0000, dst = 192.168.0.0.0000, proto = 00, context = 810E2848, tunnel endpt = 210.54.122.217, SrcMask = 255.255.255.255, DestMask = 255.255.255.0 SPI=1781226791 LifetimeTime= 3600 LifeTimeBytes= 50000 3-19: 09:17:10:188 Elap time 3 AcquireTime 1016486227 3-19: 09:17:10:188 Data Protection Mode (Quick Mode) 3-19: 09:17:10:188 Certificate based Identity. Subject NZ, Design Build Systems Ltd, DBS Windows 2000 Certificate (c) 2002 Issuing Certificate Authority NZ, Auckland, Design Build Systems Ltd, Root CA, DBS VPN Root CA (c) 2002 Root Certificate Authority NZ, Auckland, Design Build Systems Ltd, Root CA, DBS VPN Root CA (c) 2002 Peer IP Address: 210.54.122.217 3-19: 09:17:10:188 Source IP Address 210.54.79.60 Source IP Address Mask 255.255.255.255 Destination IP Address 192.168.0.0 Destination IP Address Mask 255.255.255.0 Protocol 0 Source Port 0 Destination Port 0 3-19: 09:17:10:188 ESP Algorithm Triple DES CBC HMAC Algorithm MD5 AH Algorithm None Encapsulation Tunnel Mode InboundSpi 1028901682 OutBoundSpi 1781226791 Lifetime (sec) 3600 Lifetime (kb) 50000 3-19: 09:17:10:188 Proxy src addr 3c4f36d2 3-19: 09:17:10:188 Proxy src port 0 3-19: 09:17:10:188 Proxy dest addr a8c0 3-19: 09:17:10:188 Proxy dest port 0 3-19: 09:17:10:188 src addr 3c4f36d2 3-19: 09:17:10:188 src port 0 3-19: 09:17:10:188 dst addr d97a36d2 3-19: 09:17:10:188 dst port f401 3-19: 09:17:10:188 Hmac algo 1 3-19: 09:17:10:188 Transform 3 3-19: 09:17:10:188 Loading tunnelling SA 3-19: 09:17:10:188 SRC PORT = 0 DST PORT=0 3-19: 09:17:10:188 HMAC algo 1 3-19: 09:17:10:188 ESP Algo 3 ConKeyLen 24 KeyLen 40 3-19: 09:17:10:188 Filter SRC port=0 3-19: 09:17:10:188 Filter DST port=0 3-19: 09:17:10:188 LifetimeSec 3600 3-19: 09:17:10:188 LifetimeKB 50000 3-19: 09:17:10:188 NotifyLifetimeSec 0 3-19: 09:17:10:188 NotifyLifetimeKB 0 3-19: 09:17:10:188 Update: src = 192.168.0.0.0000, dst = 210.54.79.60.0000, proto = 00, context = 810E2848, tunnel endpt = 210.54.79.60, SrcMask = 255.255.255.0, DestMask = 255.255.255.255 SPI=1028901682 LifetimeTime= 3600 LifeTimeBytes= 50000 3-19: 09:17:10:188 Adding SPI to SA: 1028901682 3-19: 09:17:10:188 Spi flags 2 3-19: 09:17:10:188 isadb_set_status sa:0023A048 centry:0023B4E0 status 0 3-19: 09:17:10:188 Added Timeout 12dad0 3-19: 09:17:10:188 In state OAK_QM_IDLE 3-19: 09:17:10:188 Throw: State mask=3008c 3-19: 09:17:10:188 Doing tripleDES 3-19: 09:17:10:188 3-19: 09:17:10:188 Sending: SA = 0x0023A048 to 210.54.122.217 3-19: 09:17:10:188 ISAKMP Header: (V1.0), len = 52 3-19: 09:17:10:188 I-COOKIE bd4d96bf95947d67 3-19: 09:17:10:188 R-COOKIE 12a0ef064b3f6b86 3-19: 09:17:10:188 exchange: Oakley Quick Mode 3-19: 09:17:10:188 flags: 1 ( encrypted ) 3-19: 09:17:10:188 next payload: HASH 3-19: 09:17:10:188 message ID: 12bc1b5f 3-19: 09:17:19:188 ReapCentry centry 0023B4E0 Tick 1 Status 0 Event 00000000 3-19: 09:18:04:188 ReapCentry centry 0023B4E0 Tick 2 Status 0 Event 00000000 3-19: 09:18:10:188 Deleting conn entry with message id 12bc1b5f 3-19: 09:18:10:188 CE Dead. sa:0023A048 ce:0023B4E0 status:cbad0327 3-19: 09:18:10:188 Cancelling Timer 12dad0 3-19: 09:18:49:188 Deleting ConnEntry 0023B4E0 3-19: 09:18:49:188 Cancelling Timeout 12db98