Article View: pl.comp.os.linux.sieci
Article #244133ipsec/l2tp debian problem
From: MaRc
Date: Wed, 16 Apr 2014 15:47
Date: Wed, 16 Apr 2014 15:47
3067 lines
165804 bytes
165804 bytes
Witam.
Mam problem z odpaleniem ipsec/l2tp. Mianowicie klient (android) się
łączy, działa to przez około minutę i na kliencie brak komunikacji.
Tunel niby cały czas zestawiony, tcpdump w czasie kiedy już nie działa
widzi na etherniecie jakiś ruch esp.
oto konfiguracja openswan
#v+
root@pat:/etc# cat ipsec.conf
version 2.0 # conforms to second version of ipsec.conf specification
config setup
nat_traversal=yes
virtual_private=%v4:10.0.0.0/8,%v4:192.168.0.0/16,%v4:172.16.0.0/12
nhelpers=0
protostack=netkey
plutodebug=all
# Add connections here
conn L2TP-PSK-CLIENTS
authby=secret
pfs=no
auto=add
keyingtries=3
rekey=no
type=transport
left=193.59.3.10
leftprotoport=17/1701
right=%any
rightsubnet=vhost:%priv,%no
rightprotoport=17/%any
dpddelay=40
dpdtimeout=130
dpdaction=clear
#Disable Opportunistic Encryption
include /etc/ipsec.d/examples/no_oe.conf
#v-
log pluto
#v+
Apr 16 17:33:10 pat pluto[28951]: | *received 444 bytes from
93.154.254.88:500 on eth0 (port=500)
Apr 16 17:33:10 pat pluto[28951]: | fd 5a 54 0a f7 ba 37 6b 00 00 00
00 00 00 00 00
Apr 16 17:33:10 pat pluto[28951]: | 01 10 02 00 00 00 00 00 00 00 01
bc 0d 00 01 24
Apr 16 17:33:10 pat pluto[28951]: | 00 00 00 01 00 00 00 01 00 00 01
18 01 01 00 08
Apr 16 17:33:10 pat pluto[28951]: | 03 00 00 24 01 01 00 00 80 0b 00
01 80 0c 70 80
Apr 16 17:33:10 pat pluto[28951]: | 80 01 00 07 80 0e 01 00 80 03 00
01 80 02 00 02
Apr 16 17:33:10 pat pluto[28951]: | 80 04 00 02 03 00 00 24 02 01 00
00 80 0b 00 01
Apr 16 17:33:10 pat pluto[28951]: | 80 0c 70 80 80 01 00 07 80 0e 01
00 80 03 00 01
Apr 16 17:33:10 pat pluto[28951]: | 80 02 00 01 80 04 00 02 03 00 00
24 03 01 00 00
Apr 16 17:33:10 pat pluto[28951]: | 80 0b 00 01 80 0c 70 80 80 01 00
07 80 0e 00 80
Apr 16 17:33:10 pat pluto[28951]: | 80 03 00 01 80 02 00 02 80 04 00
02 03 00 00 24
Apr 16 17:33:10 pat pluto[28951]: | 04 01 00 00 80 0b 00 01 80 0c 70
80 80 01 00 07
Apr 16 17:33:10 pat pluto[28951]: | 80 0e 00 80 80 03 00 01 80 02 00
01 80 04 00 02
Apr 16 17:33:10 pat pluto[28951]: | 03 00 00 20 05 01 00 00 80 0b 00
01 80 0c 70 80
Apr 16 17:33:10 pat pluto[28951]: | 80 01 00 05 80 03 00 01 80 02 00
02 80 04 00 02
Apr 16 17:33:10 pat pluto[28951]: | 03 00 00 20 06 01 00 00 80 0b 00
01 80 0c 70 80
Apr 16 17:33:10 pat pluto[28951]: | 80 01 00 05 80 03 00 01 80 02 00
01 80 04 00 02
Apr 16 17:33:10 pat pluto[28951]: | 03 00 00 20 07 01 00 00 80 0b 00
01 80 0c 70 80
Apr 16 17:33:10 pat pluto[28951]: | 80 01 00 01 80 03 00 01 80 02 00
02 80 04 00 02
Apr 16 17:33:10 pat pluto[28951]: | 00 00 00 20 08 01 00 00 80 0b 00
01 80 0c 70 80
Apr 16 17:33:10 pat pluto[28951]: | 80 01 00 01 80 03 00 01 80 02 00
01 80 04 00 02
Apr 16 17:33:10 pat pluto[28951]: | 0d 00 00 14 4a 13 1c 81 07 03 58
45 5c 57 28 f2
Apr 16 17:33:10 pat pluto[28951]: | 0e 95 45 2f 0d 00 00 14 cd 60 46
43 35 df 21 f8
Apr 16 17:33:10 pat pluto[28951]: | 7c fd b2 fc 68 b6 a4 48 0d 00 00
14 90 cb 80 91
Apr 16 17:33:10 pat pluto[28951]: | 3e bb 69 6e 08 63 81 b5 ec 42 7b
1f 0d 00 00 14
Apr 16 17:33:10 pat pluto[28951]: | 44 85 15 2d 18 b6 bb cd 0b e8 a8
46 95 79 dd cc
Apr 16 17:33:10 pat pluto[28951]: | 0d 00 00 18 40 48 b7 d5 6e bc e8
85 25 e7 de 7f
Apr 16 17:33:10 pat pluto[28951]: | 00 d6 c2 d3 80 00 00 00 00 00 00
14 af ca d7 13
Apr 16 17:33:10 pat pluto[28951]: | 68 a1 f1 c9 6b 86 96 fc 77 57 01 00
Apr 16 17:33:10 pat pluto[28951]: | **parse ISAKMP Message:
Apr 16 17:33:10 pat pluto[28951]: | initiator cookie:
Apr 16 17:33:10 pat pluto[28951]: | fd 5a 54 0a f7 ba 37 6b
Apr 16 17:33:10 pat pluto[28951]: | responder cookie:
Apr 16 17:33:10 pat pluto[28951]: | 00 00 00 00 00 00 00 00
Apr 16 17:33:10 pat pluto[28951]: | next payload type: ISAKMP_NEXT_SA
Apr 16 17:33:10 pat pluto[28951]: | ISAKMP version: ISAKMP Version
1.0 (rfc2407)
Apr 16 17:33:10 pat pluto[28951]: | exchange type: ISAKMP_XCHG_IDPROT
Apr 16 17:33:10 pat pluto[28951]: | flags: none
Apr 16 17:33:10 pat pluto[28951]: | message ID: 00 00 00 00
Apr 16 17:33:10 pat pluto[28951]: | length: 444
Apr 16 17:33:10 pat pluto[28951]: | processing version=1.0 packet with
exchange type=ISAKMP_XCHG_IDPROT (2)
Apr 16 17:33:10 pat pluto[28951]: | got payload 0x2(ISAKMP_NEXT_SA)
needed: 0x2 opt: 0x2080
Apr 16 17:33:10 pat pluto[28951]: | ***parse ISAKMP Security Association
Payload:
Apr 16 17:33:10 pat pluto[28951]: | next payload type: ISAKMP_NEXT_VID
Apr 16 17:33:10 pat pluto[28951]: | length: 292
Apr 16 17:33:10 pat pluto[28951]: | DOI: ISAKMP_DOI_IPSEC
Apr 16 17:33:10 pat pluto[28951]: | got payload 0x2000(ISAKMP_NEXT_VID)
needed: 0x0 opt: 0x2080
Apr 16 17:33:10 pat pluto[28951]: | ***parse ISAKMP Vendor ID Payload:
Apr 16 17:33:10 pat pluto[28951]: | next payload type: ISAKMP_NEXT_VID
Apr 16 17:33:10 pat pluto[28951]: | length: 20
Apr 16 17:33:10 pat pluto[28951]: | got payload 0x2000(ISAKMP_NEXT_VID)
needed: 0x0 opt: 0x2080
Apr 16 17:33:10 pat pluto[28951]: | ***parse ISAKMP Vendor ID Payload:
Apr 16 17:33:10 pat pluto[28951]: | next payload type: ISAKMP_NEXT_VID
Apr 16 17:33:10 pat pluto[28951]: | length: 20
Apr 16 17:33:10 pat pluto[28951]: | got payload 0x2000(ISAKMP_NEXT_VID)
needed: 0x0 opt: 0x2080
Apr 16 17:33:10 pat pluto[28951]: | ***parse ISAKMP Vendor ID Payload:
Apr 16 17:33:10 pat pluto[28951]: | next payload type: ISAKMP_NEXT_VID
Apr 16 17:33:10 pat pluto[28951]: | length: 20
Apr 16 17:33:10 pat pluto[28951]: | got payload 0x2000(ISAKMP_NEXT_VID)
needed: 0x0 opt: 0x2080
Apr 16 17:33:10 pat pluto[28951]: | ***parse ISAKMP Vendor ID Payload:
Apr 16 17:33:10 pat pluto[28951]: | next payload type: ISAKMP_NEXT_VID
Apr 16 17:33:10 pat pluto[28951]: | length: 20
Apr 16 17:33:10 pat pluto[28951]: | got payload 0x2000(ISAKMP_NEXT_VID)
needed: 0x0 opt: 0x2080
Apr 16 17:33:10 pat pluto[28951]: | ***parse ISAKMP Vendor ID Payload:
Apr 16 17:33:10 pat pluto[28951]: | next payload type: ISAKMP_NEXT_VID
Apr 16 17:33:10 pat pluto[28951]: | length: 24
Apr 16 17:33:10 pat pluto[28951]: | got payload 0x2000(ISAKMP_NEXT_VID)
needed: 0x0 opt: 0x2080
Apr 16 17:33:10 pat pluto[28951]: | ***parse ISAKMP Vendor ID Payload:
Apr 16 17:33:10 pat pluto[28951]: | next payload type: ISAKMP_NEXT_NONE
Apr 16 17:33:10 pat pluto[28951]: | length: 20
Apr 16 17:33:10 pat pluto[28951]: packet from 93.154.254.88:500:
received Vendor ID payload [RFC 3947] method set to=109
Apr 16 17:33:10 pat pluto[28951]: packet from 93.154.254.88:500:
received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02] meth=107, but
already using method 109
Apr 16 17:33:10 pat pluto[28951]: packet from 93.154.254.88:500:
received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02_n] meth=106,
but already using method 109
Apr 16 17:33:10 pat pluto[28951]: packet from 93.154.254.88:500:
received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-00]
Apr 16 17:33:10 pat pluto[28951]: packet from 93.154.254.88:500:
ignoring Vendor ID payload [FRAGMENTATION 80000000]
Apr 16 17:33:10 pat pluto[28951]: packet from 93.154.254.88:500:
received Vendor ID payload [Dead Peer Detection]
Apr 16 17:33:10 pat pluto[28951]: | nat-t detected, sending nat-t VID
Apr 16 17:33:10 pat pluto[28951]: | find_host_connection2 called from
main_inI1_outR1, me=193.59.3.10:500 him=93.154.254.88:500 policy=none
Apr 16 17:33:10 pat pluto[28951]: | find_host_pair: comparing to
193.59.3.10:500 0.0.0.0:500
Apr 16 17:33:10 pat pluto[28951]: | find_host_pair_conn
(find_host_connection2): 193.59.3.10:500 93.154.254.88:500 -> hp:none
Apr 16 17:33:10 pat pluto[28951]: | find_host_connection2 returns empty
Apr 16 17:33:10 pat pluto[28951]: | ****parse IPsec DOI SIT:
Apr 16 17:33:10 pat pluto[28951]: | IPsec DOI SIT: SIT_IDENTITY_ONLY
Apr 16 17:33:10 pat pluto[28951]: | ****parse ISAKMP Proposal Payload:
Apr 16 17:33:10 pat pluto[28951]: | next payload type: ISAKMP_NEXT_NONE
Apr 16 17:33:10 pat pluto[28951]: | length: 280
Apr 16 17:33:10 pat pluto[28951]: | proposal number: 1
Apr 16 17:33:10 pat pluto[28951]: | protocol ID: PROTO_ISAKMP
Apr 16 17:33:10 pat pluto[28951]: | SPI size: 0
Apr 16 17:33:10 pat pluto[28951]: | number of transforms: 8
Apr 16 17:33:10 pat pluto[28951]: | *****parse ISAKMP Transform Payload
(ISAKMP):
Apr 16 17:33:10 pat pluto[28951]: | next payload type: ISAKMP_NEXT_T
Apr 16 17:33:10 pat pluto[28951]: | length: 36
Apr 16 17:33:10 pat pluto[28951]: | transform number: 1
Apr 16 17:33:10 pat pluto[28951]: | transform ID: KEY_IKE
Apr 16 17:33:10 pat pluto[28951]: | ******parse ISAKMP Oakley attribute:
Apr 16 17:33:10 pat pluto[28951]: | af+type: OAKLEY_LIFE_TYPE
Apr 16 17:33:10 pat pluto[28951]: | length/value: 1
Apr 16 17:33:10 pat pluto[28951]: | ******parse ISAKMP Oakley attribute:
Apr 16 17:33:10 pat pluto[28951]: | af+type: OAKLEY_LIFE_DURATION
Apr 16 17:33:10 pat pluto[28951]: | length/value: 28800
Apr 16 17:33:10 pat pluto[28951]: | ******parse ISAKMP Oakley attribute:
Apr 16 17:33:10 pat pluto[28951]: | af+type: OAKLEY_ENCRYPTION_ALGORITHM
Apr 16 17:33:10 pat pluto[28951]: | length/value: 7
Apr 16 17:33:10 pat pluto[28951]: | ******parse ISAKMP Oakley attribute:
Apr 16 17:33:10 pat pluto[28951]: | af+type: OAKLEY_KEY_LENGTH
Apr 16 17:33:10 pat pluto[28951]: | length/value: 256
Apr 16 17:33:10 pat pluto[28951]: | ******parse ISAKMP Oakley attribute:
Apr 16 17:33:10 pat pluto[28951]: | af+type: OAKLEY_AUTHENTICATION_METHOD
Apr 16 17:33:10 pat pluto[28951]: | length/value: 1
Apr 16 17:33:10 pat pluto[28951]: | ******parse ISAKMP Oakley attribute:
Apr 16 17:33:10 pat pluto[28951]: | af+type: OAKLEY_HASH_ALGORITHM
Apr 16 17:33:10 pat pluto[28951]: | length/value: 2
Apr 16 17:33:10 pat pluto[28951]: | ******parse ISAKMP Oakley attribute:
Apr 16 17:33:10 pat pluto[28951]: | af+type: OAKLEY_GROUP_DESCRIPTION
Apr 16 17:33:10 pat pluto[28951]: | length/value: 2
Apr 16 17:33:10 pat pluto[28951]: | *****parse ISAKMP Transform Payload
(ISAKMP):
Apr 16 17:33:10 pat pluto[28951]: | next payload type: ISAKMP_NEXT_T
Apr 16 17:33:10 pat pluto[28951]: | length: 36
Apr 16 17:33:10 pat pluto[28951]: | transform number: 2
Apr 16 17:33:10 pat pluto[28951]: | transform ID: KEY_IKE
Apr 16 17:33:10 pat pluto[28951]: | ******parse ISAKMP Oakley attribute:
Apr 16 17:33:10 pat pluto[28951]: | af+type: OAKLEY_LIFE_TYPE
Apr 16 17:33:10 pat pluto[28951]: | length/value: 1
Apr 16 17:33:10 pat pluto[28951]: | ******parse ISAKMP Oakley attribute:
Apr 16 17:33:10 pat pluto[28951]: | af+type: OAKLEY_LIFE_DURATION
Apr 16 17:33:10 pat pluto[28951]: | length/value: 28800
Apr 16 17:33:10 pat pluto[28951]: | ******parse ISAKMP Oakley attribute:
Apr 16 17:33:10 pat pluto[28951]: | af+type: OAKLEY_ENCRYPTION_ALGORITHM
Apr 16 17:33:10 pat pluto[28951]: | length/value: 7
Apr 16 17:33:10 pat pluto[28951]: | ******parse ISAKMP Oakley attribute:
Apr 16 17:33:10 pat pluto[28951]: | af+type: OAKLEY_KEY_LENGTH
Apr 16 17:33:10 pat pluto[28951]: | length/value: 256
Apr 16 17:33:10 pat pluto[28951]: | ******parse ISAKMP Oakley attribute:
Apr 16 17:33:10 pat pluto[28951]: | af+type: OAKLEY_AUTHENTICATION_METHOD
Apr 16 17:33:10 pat pluto[28951]: | length/value: 1
Apr 16 17:33:10 pat pluto[28951]: | ******parse ISAKMP Oakley attribute:
Apr 16 17:33:10 pat pluto[28951]: | af+type: OAKLEY_HASH_ALGORITHM
Apr 16 17:33:10 pat pluto[28951]: | length/value: 1
Apr 16 17:33:10 pat pluto[28951]: | ******parse ISAKMP Oakley attribute:
Apr 16 17:33:10 pat pluto[28951]: | af+type: OAKLEY_GROUP_DESCRIPTION
Apr 16 17:33:10 pat pluto[28951]: | length/value: 2
Apr 16 17:33:10 pat pluto[28951]: | *****parse ISAKMP Transform Payload
(ISAKMP):
Apr 16 17:33:10 pat pluto[28951]: | next payload type: ISAKMP_NEXT_T
Apr 16 17:33:10 pat pluto[28951]: | length: 36
Apr 16 17:33:10 pat pluto[28951]: | transform number: 3
Apr 16 17:33:10 pat pluto[28951]: | transform ID: KEY_IKE
Apr 16 17:33:10 pat pluto[28951]: | ******parse ISAKMP Oakley attribute:
Apr 16 17:33:10 pat pluto[28951]: | af+type: OAKLEY_LIFE_TYPE
Apr 16 17:33:10 pat pluto[28951]: | length/value: 1
Apr 16 17:33:10 pat pluto[28951]: | ******parse ISAKMP Oakley attribute:
Apr 16 17:33:10 pat pluto[28951]: | af+type: OAKLEY_LIFE_DURATION
Apr 16 17:33:10 pat pluto[28951]: | length/value: 28800
Apr 16 17:33:10 pat pluto[28951]: | ******parse ISAKMP Oakley attribute:
Apr 16 17:33:10 pat pluto[28951]: | af+type: OAKLEY_ENCRYPTION_ALGORITHM
Apr 16 17:33:10 pat pluto[28951]: | length/value: 7
Apr 16 17:33:10 pat pluto[28951]: | ******parse ISAKMP Oakley attribute:
Apr 16 17:33:10 pat pluto[28951]: | af+type: OAKLEY_KEY_LENGTH
Apr 16 17:33:10 pat pluto[28951]: | length/value: 128
Apr 16 17:33:10 pat pluto[28951]: | ******parse ISAKMP Oakley attribute:
Apr 16 17:33:10 pat pluto[28951]: | af+type: OAKLEY_AUTHENTICATION_METHOD
Apr 16 17:33:10 pat pluto[28951]: | length/value: 1
Apr 16 17:33:10 pat pluto[28951]: | ******parse ISAKMP Oakley attribute:
Apr 16 17:33:10 pat pluto[28951]: | af+type: OAKLEY_HASH_ALGORITHM
Apr 16 17:33:10 pat pluto[28951]: | length/value: 2
Apr 16 17:33:10 pat pluto[28951]: | ******parse ISAKMP Oakley attribute:
Apr 16 17:33:10 pat pluto[28951]: | af+type: OAKLEY_GROUP_DESCRIPTION
Apr 16 17:33:10 pat pluto[28951]: | length/value: 2
Apr 16 17:33:10 pat pluto[28951]: | *****parse ISAKMP Transform Payload
(ISAKMP):
Apr 16 17:33:10 pat pluto[28951]: | next payload type: ISAKMP_NEXT_T
Apr 16 17:33:10 pat pluto[28951]: | length: 36
Apr 16 17:33:10 pat pluto[28951]: | transform number: 4
Apr 16 17:33:10 pat pluto[28951]: | transform ID: KEY_IKE
Apr 16 17:33:10 pat pluto[28951]: | ******parse ISAKMP Oakley attribute:
Apr 16 17:33:10 pat pluto[28951]: | af+type: OAKLEY_LIFE_TYPE
Apr 16 17:33:10 pat pluto[28951]: | length/value: 1
Apr 16 17:33:10 pat pluto[28951]: | ******parse ISAKMP Oakley attribute:
Apr 16 17:33:10 pat pluto[28951]: | af+type: OAKLEY_LIFE_DURATION
Apr 16 17:33:10 pat pluto[28951]: | length/value: 28800
Apr 16 17:33:10 pat pluto[28951]: | ******parse ISAKMP Oakley attribute:
Apr 16 17:33:10 pat pluto[28951]: | af+type: OAKLEY_ENCRYPTION_ALGORITHM
Apr 16 17:33:10 pat pluto[28951]: | length/value: 7
Apr 16 17:33:10 pat pluto[28951]: | ******parse ISAKMP Oakley attribute:
Apr 16 17:33:10 pat pluto[28951]: | af+type: OAKLEY_KEY_LENGTH
Apr 16 17:33:10 pat pluto[28951]: | length/value: 128
Apr 16 17:33:10 pat pluto[28951]: | ******parse ISAKMP Oakley attribute:
Apr 16 17:33:10 pat pluto[28951]: | af+type: OAKLEY_AUTHENTICATION_METHOD
Apr 16 17:33:10 pat pluto[28951]: | length/value: 1
Apr 16 17:33:10 pat pluto[28951]: | ******parse ISAKMP Oakley attribute:
Apr 16 17:33:10 pat pluto[28951]: | af+type: OAKLEY_HASH_ALGORITHM
Apr 16 17:33:10 pat pluto[28951]: | length/value: 1
Apr 16 17:33:10 pat pluto[28951]: | ******parse ISAKMP Oakley attribute:
Apr 16 17:33:10 pat pluto[28951]: | af+type: OAKLEY_GROUP_DESCRIPTION
Apr 16 17:33:10 pat pluto[28951]: | length/value: 2
Apr 16 17:33:10 pat pluto[28951]: | *****parse ISAKMP Transform Payload
(ISAKMP):
Apr 16 17:33:10 pat pluto[28951]: | next payload type: ISAKMP_NEXT_T
Apr 16 17:33:10 pat pluto[28951]: | length: 32
Apr 16 17:33:10 pat pluto[28951]: | transform number: 5
Apr 16 17:33:10 pat pluto[28951]: | transform ID: KEY_IKE
Apr 16 17:33:10 pat pluto[28951]: | ******parse ISAKMP Oakley attribute:
Apr 16 17:33:10 pat pluto[28951]: | af+type: OAKLEY_LIFE_TYPE
Apr 16 17:33:10 pat pluto[28951]: | length/value: 1
Apr 16 17:33:10 pat pluto[28951]: | ******parse ISAKMP Oakley attribute:
Apr 16 17:33:10 pat pluto[28951]: | af+type: OAKLEY_LIFE_DURATION
Apr 16 17:33:10 pat pluto[28951]: | length/value: 28800
Apr 16 17:33:10 pat pluto[28951]: | ******parse ISAKMP Oakley attribute:
Apr 16 17:33:10 pat pluto[28951]: | af+type: OAKLEY_ENCRYPTION_ALGORITHM
Apr 16 17:33:10 pat pluto[28951]: | length/value: 5
Apr 16 17:33:10 pat pluto[28951]: | ******parse ISAKMP Oakley attribute:
Apr 16 17:33:10 pat pluto[28951]: | af+type: OAKLEY_AUTHENTICATION_METHOD
Apr 16 17:33:10 pat pluto[28951]: | length/value: 1
Apr 16 17:33:10 pat pluto[28951]: | ******parse ISAKMP Oakley attribute:
Apr 16 17:33:10 pat pluto[28951]: | af+type: OAKLEY_HASH_ALGORITHM
Apr 16 17:33:10 pat pluto[28951]: | length/value: 2
Apr 16 17:33:10 pat pluto[28951]: | ******parse ISAKMP Oakley attribute:
Apr 16 17:33:10 pat pluto[28951]: | af+type: OAKLEY_GROUP_DESCRIPTION
Apr 16 17:33:10 pat pluto[28951]: | length/value: 2
Apr 16 17:33:10 pat pluto[28951]: | *****parse ISAKMP Transform Payload
(ISAKMP):
Apr 16 17:33:10 pat pluto[28951]: | next payload type: ISAKMP_NEXT_T
Apr 16 17:33:10 pat pluto[28951]: | length: 32
Apr 16 17:33:10 pat pluto[28951]: | transform number: 6
Apr 16 17:33:10 pat pluto[28951]: | transform ID: KEY_IKE
Apr 16 17:33:10 pat pluto[28951]: | ******parse ISAKMP Oakley attribute:
Apr 16 17:33:10 pat pluto[28951]: | af+type: OAKLEY_LIFE_TYPE
Apr 16 17:33:10 pat pluto[28951]: | length/value: 1
Apr 16 17:33:10 pat pluto[28951]: | ******parse ISAKMP Oakley attribute:
Apr 16 17:33:10 pat pluto[28951]: | af+type: OAKLEY_LIFE_DURATION
Apr 16 17:33:10 pat pluto[28951]: | length/value: 28800
Apr 16 17:33:10 pat pluto[28951]: | ******parse ISAKMP Oakley attribute:
Apr 16 17:33:10 pat pluto[28951]: | af+type: OAKLEY_ENCRYPTION_ALGORITHM
Apr 16 17:33:10 pat pluto[28951]: | length/value: 5
Apr 16 17:33:10 pat pluto[28951]: | ******parse ISAKMP Oakley attribute:
Apr 16 17:33:10 pat pluto[28951]: | af+type: OAKLEY_AUTHENTICATION_METHOD
Apr 16 17:33:10 pat pluto[28951]: | length/value: 1
Apr 16 17:33:10 pat pluto[28951]: | ******parse ISAKMP Oakley attribute:
Apr 16 17:33:10 pat pluto[28951]: | af+type: OAKLEY_HASH_ALGORITHM
Apr 16 17:33:10 pat pluto[28951]: | length/value: 1
Apr 16 17:33:10 pat pluto[28951]: | ******parse ISAKMP Oakley attribute:
Apr 16 17:33:10 pat pluto[28951]: | af+type: OAKLEY_GROUP_DESCRIPTION
Apr 16 17:33:10 pat pluto[28951]: | length/value: 2
Apr 16 17:33:10 pat pluto[28951]: | *****parse ISAKMP Transform Payload
(ISAKMP):
Apr 16 17:33:10 pat pluto[28951]: | next payload type: ISAKMP_NEXT_T
Apr 16 17:33:10 pat pluto[28951]: | length: 32
Apr 16 17:33:10 pat pluto[28951]: | transform number: 7
Apr 16 17:33:10 pat pluto[28951]: | transform ID: KEY_IKE
Apr 16 17:33:10 pat pluto[28951]: | ******parse ISAKMP Oakley attribute:
Apr 16 17:33:10 pat pluto[28951]: | af+type: OAKLEY_LIFE_TYPE
Apr 16 17:33:10 pat pluto[28951]: | length/value: 1
Apr 16 17:33:10 pat pluto[28951]: | ******parse ISAKMP Oakley attribute:
Apr 16 17:33:10 pat pluto[28951]: | af+type: OAKLEY_LIFE_DURATION
Apr 16 17:33:10 pat pluto[28951]: | length/value: 28800
Apr 16 17:33:10 pat pluto[28951]: | ******parse ISAKMP Oakley attribute:
Apr 16 17:33:10 pat pluto[28951]: | af+type: OAKLEY_ENCRYPTION_ALGORITHM
Apr 16 17:33:10 pat pluto[28951]: | length/value: 1
Apr 16 17:33:10 pat pluto[28951]: | ******parse ISAKMP Oakley attribute:
Apr 16 17:33:10 pat pluto[28951]: | af+type: OAKLEY_AUTHENTICATION_METHOD
Apr 16 17:33:10 pat pluto[28951]: | length/value: 1
Apr 16 17:33:10 pat pluto[28951]: | ******parse ISAKMP Oakley attribute:
Apr 16 17:33:10 pat pluto[28951]: | af+type: OAKLEY_HASH_ALGORITHM
Apr 16 17:33:10 pat pluto[28951]: | length/value: 2
Apr 16 17:33:10 pat pluto[28951]: | ******parse ISAKMP Oakley attribute:
Apr 16 17:33:10 pat pluto[28951]: | af+type: OAKLEY_GROUP_DESCRIPTION
Apr 16 17:33:10 pat pluto[28951]: | length/value: 2
Apr 16 17:33:10 pat pluto[28951]: | *****parse ISAKMP Transform Payload
(ISAKMP):
Apr 16 17:33:10 pat pluto[28951]: | next payload type: ISAKMP_NEXT_NONE
Apr 16 17:33:10 pat pluto[28951]: | length: 32
Apr 16 17:33:10 pat pluto[28951]: | transform number: 8
Apr 16 17:33:10 pat pluto[28951]: | transform ID: KEY_IKE
Apr 16 17:33:10 pat pluto[28951]: | ******parse ISAKMP Oakley attribute:
Apr 16 17:33:10 pat pluto[28951]: | af+type: OAKLEY_LIFE_TYPE
Apr 16 17:33:10 pat pluto[28951]: | length/value: 1
Apr 16 17:33:10 pat pluto[28951]: | ******parse ISAKMP Oakley attribute:
Apr 16 17:33:10 pat pluto[28951]: | af+type: OAKLEY_LIFE_DURATION
Apr 16 17:33:10 pat pluto[28951]: | length/value: 28800
Apr 16 17:33:10 pat pluto[28951]: | ******parse ISAKMP Oakley attribute:
Apr 16 17:33:10 pat pluto[28951]: | af+type: OAKLEY_ENCRYPTION_ALGORITHM
Apr 16 17:33:10 pat pluto[28951]: | length/value: 1
Apr 16 17:33:10 pat pluto[28951]: | ******parse ISAKMP Oakley attribute:
Apr 16 17:33:10 pat pluto[28951]: | af+type: OAKLEY_AUTHENTICATION_METHOD
Apr 16 17:33:10 pat pluto[28951]: | length/value: 1
Apr 16 17:33:10 pat pluto[28951]: | ******parse ISAKMP Oakley attribute:
Apr 16 17:33:10 pat pluto[28951]: | af+type: OAKLEY_HASH_ALGORITHM
Apr 16 17:33:10 pat pluto[28951]: | length/value: 1
Apr 16 17:33:10 pat pluto[28951]: | ******parse ISAKMP Oakley attribute:
Apr 16 17:33:10 pat pluto[28951]: | af+type: OAKLEY_GROUP_DESCRIPTION
Apr 16 17:33:10 pat pluto[28951]: | length/value: 2
Apr 16 17:33:10 pat pluto[28951]: | find_host_connection2 called from
main_inI1_outR1, me=193.59.3.10:500 him=%any:500 policy=PSK
Apr 16 17:33:10 pat pluto[28951]: | find_host_pair: comparing to
193.59.3.10:500 0.0.0.0:500
Apr 16 17:33:10 pat pluto[28951]: | find_host_pair_conn
(find_host_connection2): 193.59.3.10:500 %any:500 -> hp:L2TP-PSK-CLIENTS
Apr 16 17:33:10 pat pluto[28951]: | searching for connection with policy
= PSK
Apr 16 17:33:10 pat pluto[28951]: | found policy =
PSK+ENCRYPT+DONTREKEY+IKEv2ALLOW (L2TP-PSK-CLIENTS)
Apr 16 17:33:10 pat pluto[28951]: | find_host_connection2 returns
L2TP-PSK-CLIENTS
Apr 16 17:33:10 pat pluto[28951]: | find_host_pair: comparing to
193.59.3.10:500 0.0.0.0:500
Apr 16 17:33:10 pat pluto[28951]: | connect_to_host_pair:
193.59.3.10:500 93.154.254.88:500 -> hp:none
Apr 16 17:33:10 pat pluto[28951]: | instantiated "L2TP-PSK-CLIENTS" for
93.154.254.88
Apr 16 17:33:10 pat pluto[28951]: | creating state object #1 at 0x8156bb0
Apr 16 17:33:10 pat pluto[28951]: | processing connection
L2TP-PSK-CLIENTS[1] 93.154.254.88
Apr 16 17:33:10 pat pluto[28951]: | ICOOKIE: fd 5a 54 0a f7 ba 37 6b
Apr 16 17:33:10 pat pluto[28951]: | RCOOKIE: 50 80 75 74 f1 4c 26 93
Apr 16 17:33:10 pat pluto[28951]: | state hash entry 25
Apr 16 17:33:10 pat pluto[28951]: | inserting state object #1 on chain 25
Apr 16 17:33:10 pat pluto[28951]: | inserting event EVENT_SO_DISCARD,
timeout in 0 seconds for #1
Apr 16 17:33:10 pat pluto[28951]: | event added at head of queue
Apr 16 17:33:10 pat pluto[28951]: "L2TP-PSK-CLIENTS"[1] 93.154.254.88
#1: responding to Main Mode from unknown peer 93.154.254.88
Apr 16 17:33:10 pat pluto[28951]: | **emit ISAKMP Message:
Apr 16 17:33:10 pat pluto[28951]: | initiator cookie:
Apr 16 17:33:10 pat pluto[28951]: | fd 5a 54 0a f7 ba 37 6b
Apr 16 17:33:10 pat pluto[28951]: | responder cookie:
Apr 16 17:33:10 pat pluto[28951]: | 50 80 75 74 f1 4c 26 93
Apr 16 17:33:10 pat pluto[28951]: | next payload type: ISAKMP_NEXT_SA
Apr 16 17:33:10 pat pluto[28951]: | ISAKMP version: ISAKMP Version
1.0 (rfc2407)
Apr 16 17:33:10 pat pluto[28951]: | exchange type: ISAKMP_XCHG_IDPROT
Apr 16 17:33:10 pat pluto[28951]: | flags: none
Apr 16 17:33:10 pat pluto[28951]: | message ID: 00 00 00 00
Apr 16 17:33:10 pat pluto[28951]: | ***emit ISAKMP Security Association
Payload:
Apr 16 17:33:10 pat pluto[28951]: | next payload type: ISAKMP_NEXT_VID
Apr 16 17:33:10 pat pluto[28951]: | DOI: ISAKMP_DOI_IPSEC
Apr 16 17:33:10 pat pluto[28951]: | ****parse IPsec DOI SIT:
Apr 16 17:33:10 pat pluto[28951]: | IPsec DOI SIT: SIT_IDENTITY_ONLY
Apr 16 17:33:10 pat pluto[28951]: | ****parse ISAKMP Proposal Payload:
Apr 16 17:33:10 pat pluto[28951]: | next payload type: ISAKMP_NEXT_NONE
Apr 16 17:33:10 pat pluto[28951]: | length: 280
Apr 16 17:33:10 pat pluto[28951]: | proposal number: 1
Apr 16 17:33:10 pat pluto[28951]: | protocol ID: PROTO_ISAKMP
Apr 16 17:33:10 pat pluto[28951]: | SPI size: 0
Apr 16 17:33:10 pat pluto[28951]: | number of transforms: 8
Apr 16 17:33:10 pat pluto[28951]: | *****parse ISAKMP Transform Payload
(ISAKMP):
Apr 16 17:33:10 pat pluto[28951]: | next payload type: ISAKMP_NEXT_T
Apr 16 17:33:10 pat pluto[28951]: | length: 36
Apr 16 17:33:10 pat pluto[28951]: | transform number: 1
Apr 16 17:33:10 pat pluto[28951]: | transform ID: KEY_IKE
Apr 16 17:33:10 pat pluto[28951]: | ******parse ISAKMP Oakley attribute:
Apr 16 17:33:10 pat pluto[28951]: | af+type: OAKLEY_LIFE_TYPE
Apr 16 17:33:10 pat pluto[28951]: | length/value: 1
Apr 16 17:33:10 pat pluto[28951]: | [1 is OAKLEY_LIFE_SECONDS]
Apr 16 17:33:10 pat pluto[28951]: | ******parse ISAKMP Oakley attribute:
Apr 16 17:33:10 pat pluto[28951]: | af+type: OAKLEY_LIFE_DURATION
Apr 16 17:33:10 pat pluto[28951]: | length/value: 28800
Apr 16 17:33:10 pat pluto[28951]: | ******parse ISAKMP Oakley attribute:
Apr 16 17:33:10 pat pluto[28951]: | af+type: OAKLEY_ENCRYPTION_ALGORITHM
Apr 16 17:33:10 pat pluto[28951]: | length/value: 7
Apr 16 17:33:10 pat pluto[28951]: | [7 is OAKLEY_AES_CBC]
Apr 16 17:33:10 pat pluto[28951]: | ike_alg_enc_ok(ealg=7,key_len=0):
blocksize=16, keyminlen=128, keydeflen=128, keymaxlen=256, ret=1
Apr 16 17:33:10 pat pluto[28951]: | ******parse ISAKMP Oakley attribute:
Apr 16 17:33:10 pat pluto[28951]: | af+type: OAKLEY_KEY_LENGTH
Apr 16 17:33:10 pat pluto[28951]: | length/value: 256
Apr 16 17:33:10 pat pluto[28951]: | ike_alg_enc_ok(ealg=7,key_len=256):
blocksize=16, keyminlen=128, keydeflen=128, keymaxlen=256, ret=1
Apr 16 17:33:10 pat pluto[28951]: | ******parse ISAKMP Oakley attribute:
Apr 16 17:33:10 pat pluto[28951]: | af+type: OAKLEY_AUTHENTICATION_METHOD
Apr 16 17:33:10 pat pluto[28951]: | length/value: 1
Apr 16 17:33:10 pat pluto[28951]: | [1 is OAKLEY_PRESHARED_KEY]
Apr 16 17:33:10 pat pluto[28951]: | started looking for secret for
193.59.3.10->93.154.254.88 of kind PPK_PSK
Apr 16 17:33:10 pat pluto[28951]: | instantiating him to 0.0.0.0
Apr 16 17:33:10 pat pluto[28951]: | actually looking for secret for
193.59.3.10->%any of kind PPK_PSK
Apr 16 17:33:10 pat pluto[28951]: | line 10: key type
PPK_PSK(193.59.3.10) to type PPK_PSK
Apr 16 17:33:10 pat pluto[28951]: | 1: compared key %any to 193.59.3.10
/ %any -> 2
Apr 16 17:33:10 pat pluto[28951]: | 2: compared key 193.59.3.10 to
193.59.3.10 / %any -> 10
Apr 16 17:33:10 pat pluto[28951]: | line 10: match=10
Apr 16 17:33:10 pat pluto[28951]: | best_match 0>10 best=0x8152be8 (line=10)
Apr 16 17:33:10 pat pluto[28951]: | concluding with best_match=10
best=0x8152be8 (lineno=10)
Apr 16 17:33:10 pat pluto[28951]: | ******parse ISAKMP Oakley attribute:
Apr 16 17:33:10 pat pluto[28951]: | af+type: OAKLEY_HASH_ALGORITHM
Apr 16 17:33:10 pat pluto[28951]: | length/value: 2
Apr 16 17:33:10 pat pluto[28951]: | [2 is OAKLEY_SHA1]
Apr 16 17:33:10 pat pluto[28951]: | ******parse ISAKMP Oakley attribute:
Apr 16 17:33:10 pat pluto[28951]: | af+type: OAKLEY_GROUP_DESCRIPTION
Apr 16 17:33:10 pat pluto[28951]: | length/value: 2
Apr 16 17:33:10 pat pluto[28951]: | [2 is OAKLEY_GROUP_MODP1024]
Apr 16 17:33:10 pat pluto[28951]: | Oakley Transform 1 accepted
Apr 16 17:33:10 pat pluto[28951]: | ****emit IPsec DOI SIT:
Apr 16 17:33:10 pat pluto[28951]: | IPsec DOI SIT: SIT_IDENTITY_ONLY
Apr 16 17:33:10 pat pluto[28951]: | ****emit ISAKMP Proposal Payload:
Apr 16 17:33:10 pat pluto[28951]: | next payload type: ISAKMP_NEXT_NONE
Apr 16 17:33:10 pat pluto[28951]: | proposal number: 1
Apr 16 17:33:10 pat pluto[28951]: | protocol ID: PROTO_ISAKMP
Apr 16 17:33:10 pat pluto[28951]: | SPI size: 0
Apr 16 17:33:10 pat pluto[28951]: | number of transforms: 1
Apr 16 17:33:10 pat pluto[28951]: | *****emit ISAKMP Transform Payload
(ISAKMP):
Apr 16 17:33:10 pat pluto[28951]: | next payload type: ISAKMP_NEXT_NONE
Apr 16 17:33:10 pat pluto[28951]: | transform number: 1
Apr 16 17:33:10 pat pluto[28951]: | transform ID: KEY_IKE
Apr 16 17:33:10 pat pluto[28951]: | emitting 28 raw bytes of attributes
into ISAKMP Transform Payload (ISAKMP)
Apr 16 17:33:10 pat pluto[28951]: | attributes 80 0b 00 01 80 0c 70 80
80 01 00 07 80 0e 01 00
Apr 16 17:33:10 pat pluto[28951]: | attributes 80 03 00 01 80 02 00 02
80 04 00 02
Apr 16 17:33:10 pat pluto[28951]: | emitting length of ISAKMP Transform
Payload (ISAKMP): 36
Apr 16 17:33:10 pat pluto[28951]: | emitting length of ISAKMP Proposal
Payload: 44
Apr 16 17:33:10 pat pluto[28951]: | emitting length of ISAKMP Security
Association Payload: 56
Apr 16 17:33:10 pat pluto[28951]: | ***emit ISAKMP Vendor ID Payload:
Apr 16 17:33:10 pat pluto[28951]: | next payload type: ISAKMP_NEXT_VID
Apr 16 17:33:10 pat pluto[28951]: | emitting 12 raw bytes of Vendor ID
into ISAKMP Vendor ID Payload
Apr 16 17:33:10 pat pluto[28951]: | Vendor ID 4f 45 51 7b 4f 7f 6e 65
7a 7b 43 51
Apr 16 17:33:10 pat pluto[28951]: | emitting length of ISAKMP Vendor ID
Payload: 16
Apr 16 17:33:10 pat pluto[28951]: | out_vendorid(): sending [Dead Peer
Detection]
Apr 16 17:33:10 pat pluto[28951]: | ***emit ISAKMP Vendor ID Payload:
Apr 16 17:33:10 pat pluto[28951]: | next payload type: ISAKMP_NEXT_VID
Apr 16 17:33:10 pat pluto[28951]: | emitting 16 raw bytes of V_ID into
ISAKMP Vendor ID Payload
Apr 16 17:33:10 pat pluto[28951]: | V_ID af ca d7 13 68 a1 f1 c9 6b
86 96 fc 77 57 01 00
Apr 16 17:33:10 pat pluto[28951]: | emitting length of ISAKMP Vendor ID
Payload: 20
Apr 16 17:33:10 pat pluto[28951]: | sender checking NAT-t: 1 and 109
Apr 16 17:33:10 pat pluto[28951]: | out_vendorid(): sending [RFC 3947]
Apr 16 17:33:10 pat pluto[28951]: | ***emit ISAKMP Vendor ID Payload:
Apr 16 17:33:10 pat pluto[28951]: | next payload type: ISAKMP_NEXT_NONE
Apr 16 17:33:10 pat pluto[28951]: | emitting 16 raw bytes of V_ID into
ISAKMP Vendor ID Payload
Apr 16 17:33:10 pat pluto[28951]: | V_ID 4a 13 1c 81 07 03 58 45 5c
57 28 f2 0e 95 45 2f
Apr 16 17:33:10 pat pluto[28951]: | emitting length of ISAKMP Vendor ID
Payload: 20
Apr 16 17:33:10 pat pluto[28951]: | emitting length of ISAKMP Message: 140
Apr 16 17:33:10 pat pluto[28951]: | peer supports dpd
Apr 16 17:33:10 pat pluto[28951]: | enabling sending dpd
Apr 16 17:33:10 pat pluto[28951]: | complete state transition with STF_OK
Apr 16 17:33:10 pat pluto[28951]: "L2TP-PSK-CLIENTS"[1] 93.154.254.88
#1: transition from state STATE_MAIN_R0 to state STATE_MAIN_R1
Apr 16 17:33:10 pat pluto[28951]: | deleting event for #1
Apr 16 17:33:10 pat pluto[28951]: | sending reply packet to
93.154.254.88:500 (from port 500)
Apr 16 17:33:10 pat pluto[28951]: | sending 140 bytes for STATE_MAIN_R0
through eth0:500 to 93.154.254.88:500 (using #1)
Apr 16 17:33:10 pat pluto[28951]: | fd 5a 54 0a f7 ba 37 6b 50 80 75
74 f1 4c 26 93
Apr 16 17:33:10 pat pluto[28951]: | 01 10 02 00 00 00 00 00 00 00 00
8c 0d 00 00 38
Apr 16 17:33:10 pat pluto[28951]: | 00 00 00 01 00 00 00 01 00 00 00
2c 01 01 00 01
Apr 16 17:33:10 pat pluto[28951]: | 00 00 00 24 01 01 00 00 80 0b 00
01 80 0c 70 80
Apr 16 17:33:10 pat pluto[28951]: | 80 01 00 07 80 0e 01 00 80 03 00
01 80 02 00 02
Apr 16 17:33:10 pat pluto[28951]: | 80 04 00 02 0d 00 00 10 4f 45 51
7b 4f 7f 6e 65
Apr 16 17:33:10 pat pluto[28951]: | 7a 7b 43 51 0d 00 00 14 af ca d7
13 68 a1 f1 c9
Apr 16 17:33:10 pat pluto[28951]: | 6b 86 96 fc 77 57 01 00 00 00 00
14 4a 13 1c 81
Apr 16 17:33:10 pat pluto[28951]: | 07 03 58 45 5c 57 28 f2 0e 95 45 2f
Apr 16 17:33:10 pat pluto[28951]: | inserting event EVENT_RETRANSMIT,
timeout in 10 seconds for #1
Apr 16 17:33:10 pat pluto[28951]: | event added after event
EVENT_PENDING_DDNS
Apr 16 17:33:10 pat pluto[28951]: "L2TP-PSK-CLIENTS"[1] 93.154.254.88
#1: STATE_MAIN_R1: sent MR1, expecting MI2
Apr 16 17:33:10 pat pluto[28951]: | modecfg pull: noquirk policy:push
not-client
Apr 16 17:33:10 pat pluto[28951]: | phase 1 is done, looking for phase 2
to unpend
Apr 16 17:33:10 pat pluto[28951]: | * processed 0 messages from
cryptographic helpers
Apr 16 17:33:10 pat pluto[28951]: | next event EVENT_PENDING_DDNS in 6
seconds
Apr 16 17:33:10 pat pluto[28951]: | next event EVENT_PENDING_DDNS in 6
seconds
Apr 16 17:33:10 pat pluto[28951]: |
Apr 16 17:33:10 pat pluto[28951]: | *received 228 bytes from
93.154.254.88:500 on eth0 (port=500)
Apr 16 17:33:10 pat pluto[28951]: | fd 5a 54 0a f7 ba 37 6b 50 80 75
74 f1 4c 26 93
Apr 16 17:33:10 pat pluto[28951]: | 04 10 02 00 00 00 00 00 00 00 00
e4 0a 00 00 84
Apr 16 17:33:10 pat pluto[28951]: | 95 a1 af 0e 5d 26 52 8e 5c 13 93
8d d2 05 28 1e
Apr 16 17:33:10 pat pluto[28951]: | 13 f3 8a f7 19 1b 63 68 63 50 1e
d3 97 e6 65 fb
Apr 16 17:33:10 pat pluto[28951]: | 65 d8 f8 c4 aa 45 49 b8 0d c2 b1
8d 7d 29 cd 05
Apr 16 17:33:10 pat pluto[28951]: | bb a5 d5 af dd 0a da 10 c9 ec 14
13 7c db 4b 6d
Apr 16 17:33:10 pat pluto[28951]: | c9 b2 30 7c a2 2f 35 df 0a 68 33
3a 17 05 8b 0b
Apr 16 17:33:10 pat pluto[28951]: | 08 cd fe a4 62 e6 d9 9a f5 5f da
46 30 40 08 62
Apr 16 17:33:10 pat pluto[28951]: | ac 3c d9 e1 01 e2 85 da 81 35 aa
a9 f6 27 d8 5e
Apr 16 17:33:10 pat pluto[28951]: | 95 8b 02 eb 71 fa 82 f1 10 e9 19
62 54 75 71 7c
Apr 16 17:33:10 pat pluto[28951]: | 14 00 00 14 90 7f a9 7d 93 9e c9
68 bb 8b d5 ef
Apr 16 17:33:10 pat pluto[28951]: | 3a 71 fe 20 14 00 00 18 0c b1 a9
c2 3c 6d a8 e3
Apr 16 17:33:10 pat pluto[28951]: | 46 94 be 03 cb bb 6e 54 85 60 20
94 00 00 00 18
Apr 16 17:33:10 pat pluto[28951]: | 52 2a 0e 70 be 78 e9 d3 dc 61 5b
6d 42 bf 2d 1d
Apr 16 17:33:10 pat pluto[28951]: | 5a 8d 48 14
Apr 16 17:33:10 pat pluto[28951]: | **parse ISAKMP Message:
Apr 16 17:33:10 pat pluto[28951]: | initiator cookie:
Apr 16 17:33:10 pat pluto[28951]: | fd 5a 54 0a f7 ba 37 6b
Apr 16 17:33:10 pat pluto[28951]: | responder cookie:
Apr 16 17:33:10 pat pluto[28951]: | 50 80 75 74 f1 4c 26 93
Apr 16 17:33:10 pat pluto[28951]: | next payload type: ISAKMP_NEXT_KE
Apr 16 17:33:10 pat pluto[28951]: | ISAKMP version: ISAKMP Version
1.0 (rfc2407)
Apr 16 17:33:10 pat pluto[28951]: | exchange type: ISAKMP_XCHG_IDPROT
Apr 16 17:33:10 pat pluto[28951]: | flags: none
Apr 16 17:33:10 pat pluto[28951]: | message ID: 00 00 00 00
Apr 16 17:33:10 pat pluto[28951]: | length: 228
Apr 16 17:33:10 pat pluto[28951]: | processing version=1.0 packet with
exchange type=ISAKMP_XCHG_IDPROT (2)
Apr 16 17:33:10 pat pluto[28951]: | ICOOKIE: fd 5a 54 0a f7 ba 37 6b
Apr 16 17:33:10 pat pluto[28951]: | RCOOKIE: 50 80 75 74 f1 4c 26 93
Apr 16 17:33:10 pat pluto[28951]: | state hash entry 25
Apr 16 17:33:10 pat pluto[28951]: | v1 peer and cookies match on #1,
provided msgid 00000000 vs 00000000
Apr 16 17:33:10 pat pluto[28951]: | v1 state object #1 found, in
STATE_MAIN_R1
Apr 16 17:33:10 pat pluto[28951]: | processing connection
L2TP-PSK-CLIENTS[1] 93.154.254.88
Apr 16 17:33:10 pat pluto[28951]: | got payload 0x10(ISAKMP_NEXT_KE)
needed: 0x410 opt: 0x102080
Apr 16 17:33:10 pat pluto[28951]: | ***parse ISAKMP Key Exchange Payload:
Apr 16 17:33:10 pat pluto[28951]: | next payload type: ISAKMP_NEXT_NONCE
Apr 16 17:33:10 pat pluto[28951]: | length: 132
Apr 16 17:33:10 pat pluto[28951]: | got payload 0x400(ISAKMP_NEXT_NONCE)
needed: 0x400 opt: 0x102080
Apr 16 17:33:10 pat pluto[28951]: | ***parse ISAKMP Nonce Payload:
Apr 16 17:33:10 pat pluto[28951]: | next payload type: ISAKMP_NEXT_NAT-D
Apr 16 17:33:10 pat pluto[28951]: | length: 20
Apr 16 17:33:10 pat pluto[28951]: | got payload
0x100000(ISAKMP_NEXT_NAT-D) needed: 0x0 opt: 0x102080
Apr 16 17:33:10 pat pluto[28951]: | ***parse ISAKMP NAT-D Payload:
Apr 16 17:33:10 pat pluto[28951]: | next payload type: ISAKMP_NEXT_NAT-D
Apr 16 17:33:10 pat pluto[28951]: | length: 24
Apr 16 17:33:10 pat pluto[28951]: | got payload
0x100000(ISAKMP_NEXT_NAT-D) needed: 0x0 opt: 0x102080
Apr 16 17:33:10 pat pluto[28951]: | ***parse ISAKMP NAT-D Payload:
Apr 16 17:33:10 pat pluto[28951]: | next payload type: ISAKMP_NEXT_NONE
Apr 16 17:33:10 pat pluto[28951]: | length: 24
Apr 16 17:33:10 pat pluto[28951]: | DH public value received:
Apr 16 17:33:10 pat pluto[28951]: | 95 a1 af 0e 5d 26 52 8e 5c 13 93
8d d2 05 28 1e
Apr 16 17:33:10 pat pluto[28951]: | 13 f3 8a f7 19 1b 63 68 63 50 1e
d3 97 e6 65 fb
Apr 16 17:33:10 pat pluto[28951]: | 65 d8 f8 c4 aa 45 49 b8 0d c2 b1
8d 7d 29 cd 05
Apr 16 17:33:10 pat pluto[28951]: | bb a5 d5 af dd 0a da 10 c9 ec 14
13 7c db 4b 6d
Apr 16 17:33:10 pat pluto[28951]: | c9 b2 30 7c a2 2f 35 df 0a 68 33
3a 17 05 8b 0b
Apr 16 17:33:10 pat pluto[28951]: | 08 cd fe a4 62 e6 d9 9a f5 5f da
46 30 40 08 62
Apr 16 17:33:10 pat pluto[28951]: | ac 3c d9 e1 01 e2 85 da 81 35 aa
a9 f6 27 d8 5e
Apr 16 17:33:10 pat pluto[28951]: | 95 8b 02 eb 71 fa 82 f1 10 e9 19
62 54 75 71 7c
Apr 16 17:33:10 pat pluto[28951]: | inI2: checking NAT-t: 1 and 32
Apr 16 17:33:10 pat pluto[28951]: | _natd_hash: hasher=0x81356a0(20)
Apr 16 17:33:10 pat pluto[28951]: | _natd_hash: icookie=
Apr 16 17:33:10 pat pluto[28951]: | fd 5a 54 0a f7 ba 37 6b
Apr 16 17:33:10 pat pluto[28951]: | _natd_hash: rcookie=
Apr 16 17:33:10 pat pluto[28951]: | 50 80 75 74 f1 4c 26 93
Apr 16 17:33:10 pat pluto[28951]: | _natd_hash: ip= c1 3b 21 0a
Apr 16 17:33:10 pat pluto[28951]: | _natd_hash: port=500
Apr 16 17:33:10 pat pluto[28951]: | _natd_hash: hash= 0c b1 a9 c2 3c
6d a8 e3 46 94 be 03 cb bb 6e 54
Apr 16 17:33:10 pat pluto[28951]: | _natd_hash: hash= 85 60 20 94
Apr 16 17:33:10 pat pluto[28951]: | _natd_hash: hasher=0x81356a0(20)
Apr 16 17:33:10 pat pluto[28951]: | _natd_hash: icookie=
Apr 16 17:33:10 pat pluto[28951]: | fd 5a 54 0a f7 ba 37 6b
Apr 16 17:33:10 pat pluto[28951]: | _natd_hash: rcookie=
Apr 16 17:33:10 pat pluto[28951]: | 50 80 75 74 f1 4c 26 93
Apr 16 17:33:10 pat pluto[28951]: | _natd_hash: ip= 5d 9a fe 58
Apr 16 17:33:10 pat pluto[28951]: | _natd_hash: port=500
Apr 16 17:33:10 pat pluto[28951]: | _natd_hash: hash= 52 2a 0e 70 be
78 e9 d3 dc 61 5b 6d 42 bf 2d 1d
Apr 16 17:33:10 pat pluto[28951]: | _natd_hash: hash= 5a 8d 48 14
Apr 16 17:33:10 pat pluto[28951]: | NAT_TRAVERSAL hash=0 (me:0) (him:0)
Apr 16 17:33:10 pat pluto[28951]: | expected NAT-D(me): 0c b1 a9 c2 3c
6d a8 e3 46 94 be 03 cb bb 6e 54
Apr 16 17:33:10 pat pluto[28951]: | expected NAT-D(me): 85 60 20 94
Apr 16 17:33:10 pat pluto[28951]: | expected NAT-D(him):
Apr 16 17:33:10 pat pluto[28951]: | 52 2a 0e 70 be 78 e9 d3 dc 61 5b
6d 42 bf 2d 1d
Apr 16 17:33:10 pat pluto[28951]: | 5a 8d 48 14
Apr 16 17:33:10 pat pluto[28951]: | received NAT-D: 0c b1 a9 c2 3c 6d
a8 e3 46 94 be 03 cb bb 6e 54
Apr 16 17:33:10 pat pluto[28951]: | received NAT-D: 85 60 20 94
Apr 16 17:33:10 pat pluto[28951]: | NAT_TRAVERSAL hash=1 (me:1) (him:0)
Apr 16 17:33:10 pat pluto[28951]: | expected NAT-D(me): 0c b1 a9 c2 3c
6d a8 e3 46 94 be 03 cb bb 6e 54
Apr 16 17:33:10 pat pluto[28951]: | expected NAT-D(me): 85 60 20 94
Apr 16 17:33:10 pat pluto[28951]: | expected NAT-D(him):
Apr 16 17:33:10 pat pluto[28951]: | 52 2a 0e 70 be 78 e9 d3 dc 61 5b
6d 42 bf 2d 1d
Apr 16 17:33:10 pat pluto[28951]: | 5a 8d 48 14
Apr 16 17:33:10 pat pluto[28951]: | received NAT-D: 52 2a 0e 70 be 78
e9 d3 dc 61 5b 6d 42 bf 2d 1d
Apr 16 17:33:10 pat pluto[28951]: | received NAT-D: 5a 8d 48 14
Apr 16 17:33:10 pat pluto[28951]: | NAT_TRAVERSAL hash=2 (me:1) (him:1)
Apr 16 17:33:10 pat pluto[28951]: "L2TP-PSK-CLIENTS"[1] 93.154.254.88
#1: NAT-Traversal: Result using RFC 3947 (NAT-Traversal): no NAT detected
Apr 16 17:33:10 pat pluto[28951]: | inserting event
EVENT_NAT_T_KEEPALIVE, timeout in 20 seconds
Apr 16 17:33:10 pat pluto[28951]: | event added after event
EVENT_RETRANSMIT for #1
Apr 16 17:33:10 pat pluto[28951]: | helper -1 doing build_kenonce op id: 0
Apr 16 17:33:10 pat pluto[28951]: | Local DH secret:
Apr 16 17:33:10 pat pluto[28951]: | fc fc 40 c5 d1 fe d5 72 1d f2 f6
19 26 8d 84 19
Apr 16 17:33:10 pat pluto[28951]: | 4e 6e 23 ba 10 68 75 cc 55 2f 1d
d7 09 e7 9e e6
Apr 16 17:33:10 pat pluto[28951]: | Public DH value sent:
Apr 16 17:33:10 pat pluto[28951]: | 24 51 38 73 47 6f 3d 48 28 ed 68
3e d2 80 16 64
Apr 16 17:33:10 pat pluto[28951]: | 3e 7b 57 a2 18 18 de 9f d9 77 3c
bf 05 4c 9d 77
Apr 16 17:33:10 pat pluto[28951]: | 17 ce 54 e6 ef 12 52 dd 52 34 a6
39 da e1 b1 5c
Apr 16 17:33:10 pat pluto[28951]: | 5e 48 18 bb d6 8c 5f f3 04 bb b8
af 86 19 09 a0
Apr 16 17:33:10 pat pluto[28951]: | df 30 3a b9 8a 02 d2 b6 0e d2 ce
02 d0 4e 7d 88
Apr 16 17:33:10 pat pluto[28951]: | ee b0 a3 20 d0 00 f4 e2 5a 36 9e
9b d1 48 76 b4
Apr 16 17:33:10 pat pluto[28951]: | fc 4e 84 a1 d2 01 b7 dd f6 92 27
df 75 77 f9 74
Apr 16 17:33:10 pat pluto[28951]: | 0c 4e c7 8d 3e e3 d8 09 e8 5c 9c
c1 aa b4 6d c0
Apr 16 17:33:10 pat pluto[28951]: | Generated nonce:
Apr 16 17:33:10 pat pluto[28951]: | 73 77 3b 60 31 34 9c 13 5a 62 3c
8c 13 2a f8 87
Apr 16 17:33:10 pat pluto[28951]: | main inI2_outR2: calculated
ke+nonce, sending R2
Apr 16 17:33:10 pat pluto[28951]: | processing connection
L2TP-PSK-CLIENTS[1] 93.154.254.88
Apr 16 17:33:10 pat pluto[28951]: | **emit ISAKMP Message:
Apr 16 17:33:10 pat pluto[28951]: | initiator cookie:
Apr 16 17:33:10 pat pluto[28951]: | fd 5a 54 0a f7 ba 37 6b
Apr 16 17:33:10 pat pluto[28951]: | responder cookie:
Apr 16 17:33:10 pat pluto[28951]: | 50 80 75 74 f1 4c 26 93
Apr 16 17:33:10 pat pluto[28951]: | next payload type: ISAKMP_NEXT_KE
Apr 16 17:33:10 pat pluto[28951]: | ISAKMP version: ISAKMP Version
1.0 (rfc2407)
Apr 16 17:33:10 pat pluto[28951]: | exchange type: ISAKMP_XCHG_IDPROT
Apr 16 17:33:10 pat pluto[28951]: | flags: none
Apr 16 17:33:10 pat pluto[28951]: | message ID: 00 00 00 00
Apr 16 17:33:10 pat pluto[28951]: | ***emit ISAKMP Key Exchange Payload:
Apr 16 17:33:10 pat pluto[28951]: | next payload type: ISAKMP_NEXT_NONCE
Apr 16 17:33:10 pat pluto[28951]: | emitting 128 raw bytes of keyex
value into ISAKMP Key Exchange Payload
Apr 16 17:33:10 pat pluto[28951]: | keyex value 24 51 38 73 47 6f 3d
48 28 ed 68 3e d2 80 16 64
Apr 16 17:33:10 pat pluto[28951]: | keyex value 3e 7b 57 a2 18 18 de
9f d9 77 3c bf 05 4c 9d 77
Apr 16 17:33:10 pat pluto[28951]: | keyex value 17 ce 54 e6 ef 12 52
dd 52 34 a6 39 da e1 b1 5c
Apr 16 17:33:10 pat pluto[28951]: | keyex value 5e 48 18 bb d6 8c 5f
f3 04 bb b8 af 86 19 09 a0
Apr 16 17:33:10 pat pluto[28951]: | keyex value df 30 3a b9 8a 02 d2
b6 0e d2 ce 02 d0 4e 7d 88
Apr 16 17:33:10 pat pluto[28951]: | keyex value ee b0 a3 20 d0 00 f4
e2 5a 36 9e 9b d1 48 76 b4
Apr 16 17:33:10 pat pluto[28951]: | keyex value fc 4e 84 a1 d2 01 b7
dd f6 92 27 df 75 77 f9 74
Apr 16 17:33:10 pat pluto[28951]: | keyex value 0c 4e c7 8d 3e e3 d8
09 e8 5c 9c c1 aa b4 6d c0
Apr 16 17:33:10 pat pluto[28951]: | emitting length of ISAKMP Key
Exchange Payload: 132
Apr 16 17:33:10 pat pluto[28951]: | ***emit ISAKMP Nonce Payload:
Apr 16 17:33:10 pat pluto[28951]: | next payload type: ISAKMP_NEXT_NONE
Apr 16 17:33:10 pat pluto[28951]: | emitting 16 raw bytes of Nr into
ISAKMP Nonce Payload
Apr 16 17:33:10 pat pluto[28951]: | Nr 73 77 3b 60 31 34 9c 13 5a 62
3c 8c 13 2a f8 87
Apr 16 17:33:10 pat pluto[28951]: | emitting length of ISAKMP Nonce
Payload: 20
Apr 16 17:33:10 pat pluto[28951]: | sending NATD payloads
Apr 16 17:33:10 pat pluto[28951]: | _natd_hash: hasher=0x81356a0(20)
Apr 16 17:33:10 pat pluto[28951]: | _natd_hash: icookie=
Apr 16 17:33:10 pat pluto[28951]: | fd 5a 54 0a f7 ba 37 6b
Apr 16 17:33:10 pat pluto[28951]: | _natd_hash: rcookie=
Apr 16 17:33:10 pat pluto[28951]: | 50 80 75 74 f1 4c 26 93
Apr 16 17:33:10 pat pluto[28951]: | _natd_hash: ip= 5d 9a fe 58
Apr 16 17:33:10 pat pluto[28951]: | _natd_hash: port=500
Apr 16 17:33:10 pat pluto[28951]: | _natd_hash: hash= 52 2a 0e 70 be
78 e9 d3 dc 61 5b 6d 42 bf 2d 1d
Apr 16 17:33:10 pat pluto[28951]: | _natd_hash: hash= 5a 8d 48 14
Apr 16 17:33:10 pat pluto[28951]: | ***emit ISAKMP NAT-D Payload:
Apr 16 17:33:10 pat pluto[28951]: | next payload type: ISAKMP_NEXT_NAT-D
Apr 16 17:33:10 pat pluto[28951]: | emitting 20 raw bytes of NAT-D into
ISAKMP NAT-D Payload
Apr 16 17:33:10 pat pluto[28951]: | NAT-D 52 2a 0e 70 be 78 e9 d3 dc
61 5b 6d 42 bf 2d 1d
Apr 16 17:33:10 pat pluto[28951]: | NAT-D 5a 8d 48 14
Apr 16 17:33:10 pat pluto[28951]: | emitting length of ISAKMP NAT-D
Payload: 24
Apr 16 17:33:10 pat pluto[28951]: | _natd_hash: hasher=0x81356a0(20)
Apr 16 17:33:10 pat pluto[28951]: | _natd_hash: icookie=
Apr 16 17:33:10 pat pluto[28951]: | fd 5a 54 0a f7 ba 37 6b
Apr 16 17:33:10 pat pluto[28951]: | _natd_hash: rcookie=
Apr 16 17:33:10 pat pluto[28951]: | 50 80 75 74 f1 4c 26 93
Apr 16 17:33:10 pat pluto[28951]: | _natd_hash: ip= c1 3b 21 0a
Apr 16 17:33:10 pat pluto[28951]: | _natd_hash: port=500
Apr 16 17:33:10 pat pluto[28951]: | _natd_hash: hash= 0c b1 a9 c2 3c
6d a8 e3 46 94 be 03 cb bb 6e 54
Apr 16 17:33:10 pat pluto[28951]: | _natd_hash: hash= 85 60 20 94
Apr 16 17:33:10 pat pluto[28951]: | ***emit ISAKMP NAT-D Payload:
Apr 16 17:33:10 pat pluto[28951]: | next payload type: ISAKMP_NEXT_NONE
Apr 16 17:33:10 pat pluto[28951]: | emitting 20 raw bytes of NAT-D into
ISAKMP NAT-D Payload
Apr 16 17:33:10 pat pluto[28951]: | NAT-D 0c b1 a9 c2 3c 6d a8 e3 46
94 be 03 cb bb 6e 54
Apr 16 17:33:10 pat pluto[28951]: | NAT-D 85 60 20 94
Apr 16 17:33:10 pat pluto[28951]: | emitting length of ISAKMP NAT-D
Payload: 24
Apr 16 17:33:10 pat pluto[28951]: | emitting length of ISAKMP Message: 228
Apr 16 17:33:10 pat pluto[28951]: | main inI2_outR2: starting async DH
calculation (group=2)
Apr 16 17:33:10 pat pluto[28951]: | started looking for secret for
193.59.3.10->93.154.254.88 of kind PPK_PSK
Apr 16 17:33:10 pat pluto[28951]: | instantiating him to 0.0.0.0
Apr 16 17:33:10 pat pluto[28951]: | actually looking for secret for
193.59.3.10->%any of kind PPK_PSK
Apr 16 17:33:10 pat pluto[28951]: | line 10: key type
PPK_PSK(193.59.3.10) to type PPK_PSK
Apr 16 17:33:10 pat pluto[28951]: | 1: compared key %any to 193.59.3.10
/ %any -> 2
Apr 16 17:33:10 pat pluto[28951]: | 2: compared key 193.59.3.10 to
193.59.3.10 / %any -> 10
Apr 16 17:33:10 pat pluto[28951]: | line 10: match=10
Apr 16 17:33:10 pat pluto[28951]: | best_match 0>10 best=0x8152be8 (line=10)
Apr 16 17:33:10 pat pluto[28951]: | concluding with best_match=10
best=0x8152be8 (lineno=10)
Apr 16 17:33:10 pat pluto[28951]: | parent1 type: 7 group: 2 len: 2668
Apr 16 17:33:10 pat pluto[28951]: | helper -1 doing compute dh+iv op id:
135270994
Apr 16 17:33:10 pat pluto[28951]: | peer's g: 95 a1 af 0e 5d 26 52 8e
5c 13 93 8d d2 05 28 1e
Apr 16 17:33:10 pat pluto[28951]: | peer's g: 13 f3 8a f7 19 1b 63 68
63 50 1e d3 97 e6 65 fb
Apr 16 17:33:10 pat pluto[28951]: | peer's g: 65 d8 f8 c4 aa 45 49 b8
0d c2 b1 8d 7d 29 cd 05
Apr 16 17:33:10 pat pluto[28951]: | peer's g: bb a5 d5 af dd 0a da 10
c9 ec 14 13 7c db 4b 6d
Apr 16 17:33:10 pat pluto[28951]: | peer's g: c9 b2 30 7c a2 2f 35 df
0a 68 33 3a 17 05 8b 0b
Apr 16 17:33:10 pat pluto[28951]: | peer's g: 08 cd fe a4 62 e6 d9 9a
f5 5f da 46 30 40 08 62
Apr 16 17:33:10 pat pluto[28951]: | peer's g: ac 3c d9 e1 01 e2 85 da
81 35 aa a9 f6 27 d8 5e
Apr 16 17:33:10 pat pluto[28951]: | peer's g: 95 8b 02 eb 71 fa 82 f1
10 e9 19 62 54 75 71 7c
Apr 16 17:33:10 pat pluto[28951]: | long term secret: fc fc 40 c5 d1
fe d5 72 1d f2 f6 19 26 8d 84 19
Apr 16 17:33:10 pat pluto[28951]: | long term secret: 4e 6e 23 ba 10
68 75 cc 55 2f 1d d7 09 e7 9e e6
Apr 16 17:33:10 pat pluto[28951]: | calc_dh_shared(): time elapsed
(OAKLEY_GROUP_MODP1024): 2033 usec
Apr 16 17:33:10 pat pluto[28951]: | DH shared-secret:
Apr 16 17:33:10 pat pluto[28951]: | 9d 7f e2 9b 64 1a dc f8 63 6c 88
e9 03 6d 93 40
Apr 16 17:33:10 pat pluto[28951]: | 2b c2 fa b4 a0 e1 aa f0 88 14 a9
fe a2 6f 1d a3
Apr 16 17:33:10 pat pluto[28951]: | f5 a4 f8 1f d6 7d 04 04 82 56 1b
bd ed a1 70 7d
Apr 16 17:33:10 pat pluto[28951]: | 43 7e ba b7 12 c4 c6 aa 64 d1 24
ee c4 1f 4c 9e
Apr 16 17:33:10 pat pluto[28951]: | 1f 9d 43 e5 0d 50 24 c1 6c 09 2c
47 c3 0d 8e 25
Apr 16 17:33:10 pat pluto[28951]: | 9b 25 a9 f1 fb 05 c7 c7 b2 2f 31
dd 63 20 48 95
Apr 16 17:33:10 pat pluto[28951]: | b3 16 22 ee 17 c6 b9 38 3b db b1
3f b4 a4 9c 4d
Apr 16 17:33:10 pat pluto[28951]: | f6 b0 c5 35 96 19 a6 ba c9 63 96
91 2d 88 27 04
Apr 16 17:33:10 pat pluto[28951]: | Skey inputs (PSK+NI+NR)
Apr 16 17:33:10 pat pluto[28951]: | ni: 90 7f a9 7d 93 9e c9 68 bb
8b d5 ef 3a 71 fe 20
Apr 16 17:33:10 pat pluto[28951]: | nr: 73 77 3b 60 31 34 9c 13 5a
62 3c 8c 13 2a f8 87
Apr 16 17:33:10 pat pluto[28951]: | keyid: 75 85 9d a7 9f 73 1d 59
25 04 33 3b ee 66 4e 66
Apr 16 17:33:10 pat pluto[28951]: | keyid: 6b bb 66 cb
Apr 16 17:33:10 pat pluto[28951]: | NSS: end of key computation
Apr 16 17:33:10 pat pluto[28951]: | DH_i: 95 a1 af 0e 5d 26 52 8e 5c
13 93 8d d2 05 28 1e
Apr 16 17:33:10 pat pluto[28951]: | DH_i: 13 f3 8a f7 19 1b 63 68 63
50 1e d3 97 e6 65 fb
Apr 16 17:33:10 pat pluto[28951]: | DH_i: 65 d8 f8 c4 aa 45 49 b8 0d
c2 b1 8d 7d 29 cd 05
Apr 16 17:33:10 pat pluto[28951]: | DH_i: bb a5 d5 af dd 0a da 10 c9
ec 14 13 7c db 4b 6d
Apr 16 17:33:10 pat pluto[28951]: | DH_i: c9 b2 30 7c a2 2f 35 df 0a
68 33 3a 17 05 8b 0b
Apr 16 17:33:10 pat pluto[28951]: | DH_i: 08 cd fe a4 62 e6 d9 9a f5
5f da 46 30 40 08 62
Apr 16 17:33:10 pat pluto[28951]: | DH_i: ac 3c d9 e1 01 e2 85 da 81
35 aa a9 f6 27 d8 5e
Apr 16 17:33:10 pat pluto[28951]: | DH_i: 95 8b 02 eb 71 fa 82 f1 10
e9 19 62 54 75 71 7c
Apr 16 17:33:10 pat pluto[28951]: | DH_r: 24 51 38 73 47 6f 3d 48 28
ed 68 3e d2 80 16 64
Apr 16 17:33:10 pat pluto[28951]: | DH_r: 3e 7b 57 a2 18 18 de 9f d9
77 3c bf 05 4c 9d 77
Apr 16 17:33:10 pat pluto[28951]: | DH_r: 17 ce 54 e6 ef 12 52 dd 52
34 a6 39 da e1 b1 5c
Apr 16 17:33:10 pat pluto[28951]: | DH_r: 5e 48 18 bb d6 8c 5f f3 04
bb b8 af 86 19 09 a0
Apr 16 17:33:10 pat pluto[28951]: | DH_r: df 30 3a b9 8a 02 d2 b6 0e
d2 ce 02 d0 4e 7d 88
Apr 16 17:33:10 pat pluto[28951]: | DH_r: ee b0 a3 20 d0 00 f4 e2 5a
36 9e 9b d1 48 76 b4
Apr 16 17:33:10 pat pluto[28951]: | DH_r: fc 4e 84 a1 d2 01 b7 dd f6
92 27 df 75 77 f9 74
Apr 16 17:33:10 pat pluto[28951]: | DH_r: 0c 4e c7 8d 3e e3 d8 09 e8
5c 9c c1 aa b4 6d c0
Apr 16 17:33:10 pat pluto[28951]: | end of IV generation
Apr 16 17:33:10 pat pluto[28951]: | Skeyid: 75 85 9d a7 9f 73 1d 59
25 04 33 3b ee 66 4e 66
Apr 16 17:33:10 pat pluto[28951]: | Skeyid: 6b bb 66 cb
Apr 16 17:33:10 pat pluto[28951]: | Skeyid_d: 87 4b d5 8d 33 c9 3b ef
2c 3e 78 8f 46 21 55 36
Apr 16 17:33:10 pat pluto[28951]: | Skeyid_d: c8 ff 96 ad
Apr 16 17:33:10 pat pluto[28951]: | Skeyid_a: 69 67 ab 20 bb e4 ff 13
c6 60 2f 51 68 bd ef 4c
Apr 16 17:33:10 pat pluto[28951]: | Skeyid_a: c3 57 a6 e2
Apr 16 17:33:10 pat pluto[28951]: | Skeyid_e: 31 be 2d c0 02 f6 fa 06
7c ea 61 43 67 38 a4 21
Apr 16 17:33:10 pat pluto[28951]: | Skeyid_e: 6a 41 66 8c
Apr 16 17:33:10 pat pluto[28951]: | enc key: fe 1d 55 e3 fd 53 df 6b
5f f1 f5 a7 79 2e fc 5a
Apr 16 17:33:10 pat pluto[28951]: | enc key: b9 13 0e 3f 11 16 b0 c1
c9 af de 1b 0b 3f 0b 64
Apr 16 17:33:10 pat pluto[28951]: | IV: ee 15 52 52 4e 4f af f0 75 f9
40 13 1c f3 54 e1
Apr 16 17:33:10 pat pluto[28951]: | IV: 06 aa 9b 64
Apr 16 17:33:10 pat pluto[28951]: | main inI2_outR2: calculated DH finished
Apr 16 17:33:10 pat pluto[28951]: | processing connection
L2TP-PSK-CLIENTS[1] 93.154.254.88
Apr 16 17:33:10 pat pluto[28951]: | started dh_secretiv, returned:
stf=STF_INLINE
Apr 16 17:33:10 pat pluto[28951]: | complete state transition with STF_OK
Apr 16 17:33:10 pat pluto[28951]: "L2TP-PSK-CLIENTS"[1] 93.154.254.88
#1: transition from state STATE_MAIN_R1 to state STATE_MAIN_R2
Apr 16 17:33:10 pat pluto[28951]: | deleting event for #1
Apr 16 17:33:10 pat pluto[28951]: | sending reply packet to
93.154.254.88:500 (from port 500)
Apr 16 17:33:10 pat pluto[28951]: | sending 228 bytes for STATE_MAIN_R1
through eth0:500 to 93.154.254.88:500 (using #1)
Apr 16 17:33:10 pat pluto[28951]: | fd 5a 54 0a f7 ba 37 6b 50 80 75
74 f1 4c 26 93
Apr 16 17:33:10 pat pluto[28951]: | 04 10 02 00 00 00 00 00 00 00 00
e4 0a 00 00 84
Apr 16 17:33:10 pat pluto[28951]: | 24 51 38 73 47 6f 3d 48 28 ed 68
3e d2 80 16 64
Apr 16 17:33:10 pat pluto[28951]: | 3e 7b 57 a2 18 18 de 9f d9 77 3c
bf 05 4c 9d 77
Apr 16 17:33:10 pat pluto[28951]: | 17 ce 54 e6 ef 12 52 dd 52 34 a6
39 da e1 b1 5c
Apr 16 17:33:10 pat pluto[28951]: | 5e 48 18 bb d6 8c 5f f3 04 bb b8
af 86 19 09 a0
Apr 16 17:33:10 pat pluto[28951]: | df 30 3a b9 8a 02 d2 b6 0e d2 ce
02 d0 4e 7d 88
Apr 16 17:33:10 pat pluto[28951]: | ee b0 a3 20 d0 00 f4 e2 5a 36 9e
9b d1 48 76 b4
Apr 16 17:33:10 pat pluto[28951]: | fc 4e 84 a1 d2 01 b7 dd f6 92 27
df 75 77 f9 74
Apr 16 17:33:10 pat pluto[28951]: | 0c 4e c7 8d 3e e3 d8 09 e8 5c 9c
c1 aa b4 6d c0
Apr 16 17:33:10 pat pluto[28951]: | 14 00 00 14 73 77 3b 60 31 34 9c
13 5a 62 3c 8c
Apr 16 17:33:10 pat pluto[28951]: | 13 2a f8 87 14 00 00 18 52 2a 0e
70 be 78 e9 d3
Apr 16 17:33:10 pat pluto[28951]: | dc 61 5b 6d 42 bf 2d 1d 5a 8d 48
14 00 00 00 18
Apr 16 17:33:10 pat pluto[28951]: | 0c b1 a9 c2 3c 6d a8 e3 46 94 be
03 cb bb 6e 54
Apr 16 17:33:10 pat pluto[28951]: | 85 60 20 94
Apr 16 17:33:10 pat pluto[28951]: | inserting event EVENT_RETRANSMIT,
timeout in 10 seconds for #1
Apr 16 17:33:10 pat pluto[28951]: | event added after event
EVENT_PENDING_DDNS
Apr 16 17:33:10 pat pluto[28951]: "L2TP-PSK-CLIENTS"[1] 93.154.254.88
#1: STATE_MAIN_R2: sent MR2, expecting MI3
Apr 16 17:33:10 pat pluto[28951]: | modecfg pull: noquirk policy:push
not-client
Apr 16 17:33:10 pat pluto[28951]: | phase 1 is done, looking for phase 2
to unpend
Apr 16 17:33:10 pat pluto[28951]: | complete state transition with
STF_INLINE
Apr 16 17:33:10 pat pluto[28951]: | * processed 0 messages from
cryptographic helpers
Apr 16 17:33:10 pat pluto[28951]: | next event EVENT_PENDING_DDNS in 6
seconds
Apr 16 17:33:10 pat pluto[28951]: | next event EVENT_PENDING_DDNS in 6
seconds
Apr 16 17:33:10 pat pluto[28951]: |
Apr 16 17:33:10 pat pluto[28951]: | *received 92 bytes from
93.154.254.88:500 on eth0 (port=500)
Apr 16 17:33:10 pat pluto[28951]: | fd 5a 54 0a f7 ba 37 6b 50 80 75
74 f1 4c 26 93
Apr 16 17:33:10 pat pluto[28951]: | 05 10 02 01 00 00 00 00 00 00 00
5c 69 99 d9 2e
Apr 16 17:33:10 pat pluto[28951]: | ff 1a a1 67 6b 62 7e 3e 7f 42 f0
bd fd d8 45 23
Apr 16 17:33:10 pat pluto[28951]: | b9 8a bf fd 2e b8 21 95 b7 b6 0c
12 d0 27 c9 de
Apr 16 17:33:10 pat pluto[28951]: | 25 a8 9c f4 7f 54 0b b8 db f8 e0
7a bd 0b dc 15
Apr 16 17:33:10 pat pluto[28951]: | 81 8c 76 ec 9d 52 ba 5b 1b 23 b5 09
Apr 16 17:33:10 pat pluto[28951]: | **parse ISAKMP Message:
Apr 16 17:33:10 pat pluto[28951]: | initiator cookie:
Apr 16 17:33:10 pat pluto[28951]: | fd 5a 54 0a f7 ba 37 6b
Apr 16 17:33:10 pat pluto[28951]: | responder cookie:
Apr 16 17:33:10 pat pluto[28951]: | 50 80 75 74 f1 4c 26 93
Apr 16 17:33:10 pat pluto[28951]: | next payload type: ISAKMP_NEXT_ID
Apr 16 17:33:10 pat pluto[28951]: | ISAKMP version: ISAKMP Version
1.0 (rfc2407)
Apr 16 17:33:10 pat pluto[28951]: | exchange type: ISAKMP_XCHG_IDPROT
Apr 16 17:33:10 pat pluto[28951]: | flags: ISAKMP_FLAG_ENCRYPTION
Apr 16 17:33:10 pat pluto[28951]: | message ID: 00 00 00 00
Apr 16 17:33:10 pat pluto[28951]: | length: 92
Apr 16 17:33:10 pat pluto[28951]: | processing version=1.0 packet with
exchange type=ISAKMP_XCHG_IDPROT (2)
Apr 16 17:33:10 pat pluto[28951]: | ICOOKIE: fd 5a 54 0a f7 ba 37 6b
Apr 16 17:33:10 pat pluto[28951]: | RCOOKIE: 50 80 75 74 f1 4c 26 93
Apr 16 17:33:10 pat pluto[28951]: | state hash entry 25
Apr 16 17:33:10 pat pluto[28951]: | v1 peer and cookies match on #1,
provided msgid 00000000 vs 00000000
Apr 16 17:33:10 pat pluto[28951]: | v1 state object #1 found, in
STATE_MAIN_R2
Apr 16 17:33:10 pat pluto[28951]: | processing connection
L2TP-PSK-CLIENTS[1] 93.154.254.88
Apr 16 17:33:10 pat pluto[28951]: | received encrypted packet from
93.154.254.88:500
Apr 16 17:33:10 pat pluto[28951]: | decrypting 64 bytes using algorithm
OAKLEY_AES_CBC
Apr 16 17:33:10 pat pluto[28951]: | decrypted:
Apr 16 17:33:10 pat pluto[28951]: | 08 00 00 0c 01 11 01 f4 5d 9a fe
58 00 00 00 18
Apr 16 17:33:10 pat pluto[28951]: | b2 d0 21 3d 26 47 2b 41 5b 99 85
0f 0a b0 54 c6
Apr 16 17:33:10 pat pluto[28951]: | da 2d 50 c2 e5 94 91 df e9 bc 88
fa 82 fa f3 87
Apr 16 17:33:10 pat pluto[28951]: | ef 8b c2 9d 8f d6 f8 e0 f7 e7 ff
d9 f1 e8 e4 1b
Apr 16 17:33:10 pat pluto[28951]: | next IV: bd 0b dc 15 81 8c 76 ec
9d 52 ba 5b 1b 23 b5 09
Apr 16 17:33:10 pat pluto[28951]: | got payload 0x20(ISAKMP_NEXT_ID)
needed: 0x120 opt: 0x2080
Apr 16 17:33:10 pat pluto[28951]: | ***parse ISAKMP Identification Payload:
Apr 16 17:33:10 pat pluto[28951]: | next payload type: ISAKMP_NEXT_HASH
Apr 16 17:33:10 pat pluto[28951]: | length: 12
Apr 16 17:33:10 pat pluto[28951]: | ID type: ID_IPV4_ADDR
Apr 16 17:33:10 pat pluto[28951]: | DOI specific A: 17
Apr 16 17:33:10 pat pluto[28951]: | DOI specific B: 500
Apr 16 17:33:10 pat pluto[28951]: | obj: 5d 9a fe 58 00 00 00 18
b2 d0 21 3d
Apr 16 17:33:10 pat pluto[28951]: | got payload 0x100(ISAKMP_NEXT_HASH)
needed: 0x100 opt: 0x2080
Apr 16 17:33:10 pat pluto[28951]: | ***parse ISAKMP Hash Payload:
Apr 16 17:33:10 pat pluto[28951]: | next payload type: ISAKMP_NEXT_NONE
Apr 16 17:33:10 pat pluto[28951]: | length: 24
Apr 16 17:33:10 pat pluto[28951]: | removing 28 bytes of padding
Apr 16 17:33:10 pat pluto[28951]: "L2TP-PSK-CLIENTS"[1] 93.154.254.88
#1: Main mode peer ID is ID_IPV4_ADDR: '93.154.254.88'
Apr 16 17:33:10 pat pluto[28951]: | refine_connection: starting with
L2TP-PSK-CLIENTS
Apr 16 17:33:10 pat pluto[28951]: | started looking for secret for
193.59.3.10->93.154.254.88 of kind PPK_PSK
Apr 16 17:33:10 pat pluto[28951]: | instantiating him to 0.0.0.0
Apr 16 17:33:10 pat pluto[28951]: | actually looking for secret for
193.59.3.10->%any of kind PPK_PSK
Apr 16 17:33:10 pat pluto[28951]: | line 10: key type
PPK_PSK(193.59.3.10) to type PPK_PSK
Apr 16 17:33:10 pat pluto[28951]: | 1: compared key %any to 193.59.3.10
/ %any -> 2
Apr 16 17:33:10 pat pluto[28951]: | 2: compared key 193.59.3.10 to
193.59.3.10 / %any -> 10
Apr 16 17:33:10 pat pluto[28951]: | line 10: match=10
Apr 16 17:33:10 pat pluto[28951]: | best_match 0>10 best=0x8152be8 (line=10)
Apr 16 17:33:10 pat pluto[28951]: | concluding with best_match=10
best=0x8152be8 (lineno=10)
Apr 16 17:33:10 pat pluto[28951]: | match_id a=93.154.254.88
Apr 16 17:33:10 pat pluto[28951]: | b=93.154.254.88
Apr 16 17:33:10 pat pluto[28951]: | results matched
Apr 16 17:33:10 pat pluto[28951]: | trusted_ca called with a=(empty)
b=(empty)
Apr 16 17:33:10 pat pluto[28951]: | refine_connection: checking
L2TP-PSK-CLIENTS against L2TP-PSK-CLIENTS, best=(none) with
match=1(id=1/ca=1/reqca=1)
Apr 16 17:33:10 pat pluto[28951]: | refine_connection: checked
L2TP-PSK-CLIENTS against L2TP-PSK-CLIENTS, now for see if best
Apr 16 17:33:10 pat pluto[28951]: | started looking for secret for
193.59.3.10->93.154.254.88 of kind PPK_PSK
Apr 16 17:33:10 pat pluto[28951]: | instantiating him to 0.0.0.0
Apr 16 17:33:10 pat pluto[28951]: | actually looking for secret for
193.59.3.10->%any of kind PPK_PSK
Apr 16 17:33:10 pat pluto[28951]: | line 10: key type
PPK_PSK(193.59.3.10) to type PPK_PSK
Apr 16 17:33:10 pat pluto[28951]: | 1: compared key %any to 193.59.3.10
/ %any -> 2
Apr 16 17:33:10 pat pluto[28951]: | 2: compared key 193.59.3.10 to
193.59.3.10 / %any -> 10
Apr 16 17:33:10 pat pluto[28951]: | line 10: match=10
Apr 16 17:33:10 pat pluto[28951]: | best_match 0>10 best=0x8152be8 (line=10)
Apr 16 17:33:10 pat pluto[28951]: | concluding with best_match=10
best=0x8152be8 (lineno=10)
Apr 16 17:33:10 pat pluto[28951]: | offered CA: '%none'
Apr 16 17:33:10 pat pluto[28951]: | hashing 288 bytes of SA
Apr 16 17:33:10 pat pluto[28951]: | authentication succeeded
Apr 16 17:33:10 pat pluto[28951]: | thinking about whether to send my
certificate:
Apr 16 17:33:10 pat pluto[28951]: | I have RSA key:
OAKLEY_PRESHARED_KEY cert.type: CERT_NONE
Apr 16 17:33:10 pat pluto[28951]: | sendcert: CERT_ALWAYSSEND and I
did not get a certificate request
Apr 16 17:33:10 pat pluto[28951]: | so do not send cert.
Apr 16 17:33:10 pat pluto[28951]: | I did not send a certificate because
digital signatures are not being used. (PSK)
Apr 16 17:33:10 pat pluto[28951]: | **emit ISAKMP Message:
Apr 16 17:33:10 pat pluto[28951]: | initiator cookie:
Apr 16 17:33:10 pat pluto[28951]: | fd 5a 54 0a f7 ba 37 6b
Apr 16 17:33:10 pat pluto[28951]: | responder cookie:
Apr 16 17:33:10 pat pluto[28951]: | 50 80 75 74 f1 4c 26 93
Apr 16 17:33:10 pat pluto[28951]: | next payload type: ISAKMP_NEXT_ID
Apr 16 17:33:10 pat pluto[28951]: | ISAKMP version: ISAKMP Version
1.0 (rfc2407)
Apr 16 17:33:10 pat pluto[28951]: | exchange type: ISAKMP_XCHG_IDPROT
Apr 16 17:33:10 pat pluto[28951]: | flags: ISAKMP_FLAG_ENCRYPTION
Apr 16 17:33:10 pat pluto[28951]: | message ID: 00 00 00 00
Apr 16 17:33:10 pat pluto[28951]: | ***emit ISAKMP Identification
Payload (IPsec DOI):
Apr 16 17:33:10 pat pluto[28951]: | next payload type: ISAKMP_NEXT_HASH
Apr 16 17:33:10 pat pluto[28951]: | ID type: ID_IPV4_ADDR
Apr 16 17:33:10 pat pluto[28951]: | Protocol ID: 0
Apr 16 17:33:10 pat pluto[28951]: | port: 0
Apr 16 17:33:10 pat pluto[28951]: | emitting 4 raw bytes of my identity
into ISAKMP Identification Payload (IPsec DOI)
Apr 16 17:33:10 pat pluto[28951]: | my identity c1 3b 21 0a
Apr 16 17:33:10 pat pluto[28951]: | emitting length of ISAKMP
Identification Payload (IPsec DOI): 12
Apr 16 17:33:10 pat pluto[28951]: | hashing 288 bytes of SA
Apr 16 17:33:10 pat pluto[28951]: | ***emit ISAKMP Hash Payload:
Apr 16 17:33:10 pat pluto[28951]: | next payload type: ISAKMP_NEXT_VID
Apr 16 17:33:10 pat pluto[28951]: | emitting 20 raw bytes of HASH_R into
ISAKMP Hash Payload
Apr 16 17:33:10 pat pluto[28951]: | HASH_R 0b 3f 53 b5 55 e9 67 0a db
2f bc f7 46 af c9 2d
Apr 16 17:33:10 pat pluto[28951]: | HASH_R ac 8b 63 e6
Apr 16 17:33:10 pat pluto[28951]: | emitting length of ISAKMP Hash
Payload: 24
Apr 16 17:33:10 pat pluto[28951]: | out_vendorid(): sending [CAN-IKEv2]
Apr 16 17:33:10 pat pluto[28951]: | ***emit ISAKMP Vendor ID Payload:
Apr 16 17:33:10 pat pluto[28951]: | next payload type: ISAKMP_NEXT_NONE
Apr 16 17:33:10 pat pluto[28951]: | emitting 5 raw bytes of V_ID into
ISAKMP Vendor ID Payload
Apr 16 17:33:10 pat pluto[28951]: | V_ID 49 4b 45 76 32
Apr 16 17:33:10 pat pluto[28951]: | emitting length of ISAKMP Vendor ID
Payload: 9
Apr 16 17:33:10 pat pluto[28951]: | encrypting:
Apr 16 17:33:10 pat pluto[28951]: | 08 00 00 0c 01 00 00 00 c1 3b 21
0a 0d 00 00 18
Apr 16 17:33:10 pat pluto[28951]: | 0b 3f 53 b5 55 e9 67 0a db 2f bc
f7 46 af c9 2d
Apr 16 17:33:10 pat pluto[28951]: | ac 8b 63 e6 00 00 00 09 49 4b 45
76 32
Apr 16 17:33:10 pat pluto[28951]: | IV:
Apr 16 17:33:10 pat pluto[28951]: | bd 0b dc 15 81 8c 76 ec 9d 52 ba
5b 1b 23 b5 09
Apr 16 17:33:10 pat pluto[28951]: | unpadded size is: 45
Apr 16 17:33:10 pat pluto[28951]: | emitting 3 zero bytes of encryption
padding into ISAKMP Message
Apr 16 17:33:10 pat pluto[28951]: | encrypting 48 using OAKLEY_AES_CBC
Apr 16 17:33:10 pat pluto[28951]: | next IV: ac 67 17 24 05 39 ab a2
4f 07 b4 13 2d 95 6f ad
Apr 16 17:33:10 pat pluto[28951]: | emitting length of ISAKMP Message: 76
Apr 16 17:33:10 pat pluto[28951]: | last encrypted block of Phase 1:
Apr 16 17:33:10 pat pluto[28951]: | ac 67 17 24 05 39 ab a2 4f 07 b4
13 2d 95 6f ad
Apr 16 17:33:10 pat pluto[28951]: | complete state transition with STF_OK
Apr 16 17:33:10 pat pluto[28951]: "L2TP-PSK-CLIENTS"[1] 93.154.254.88
#1: transition from state STATE_MAIN_R2 to state STATE_MAIN_R3
Apr 16 17:33:10 pat pluto[28951]: | deleting event for #1
Apr 16 17:33:10 pat pluto[28951]: | sending reply packet to
93.154.254.88:500 (from port 500)
Apr 16 17:33:10 pat pluto[28951]: | sending 76 bytes for STATE_MAIN_R2
through eth0:500 to 93.154.254.88:500 (using #1)
Apr 16 17:33:10 pat pluto[28951]: | fd 5a 54 0a f7 ba 37 6b 50 80 75
74 f1 4c 26 93
Apr 16 17:33:10 pat pluto[28951]: | 05 10 02 01 00 00 00 00 00 00 00
4c 0c fc 43 74
Apr 16 17:33:10 pat pluto[28951]: | 72 99 53 a4 f1 ef 13 e2 f8 1b b9
59 60 8c 3c 83
Apr 16 17:33:10 pat pluto[28951]: | 42 77 fb ae 29 84 8a f3 62 c6 b8
16 ac 67 17 24
Apr 16 17:33:10 pat pluto[28951]: | 05 39 ab a2 4f 07 b4 13 2d 95 6f ad
Apr 16 17:33:10 pat pluto[28951]: | inserting event EVENT_SA_EXPIRE,
timeout in 28800 seconds for #1
Apr 16 17:33:10 pat pluto[28951]: | event added after event EVENT_LOG_DAILY
Apr 16 17:33:10 pat pluto[28951]: "L2TP-PSK-CLIENTS"[1] 93.154.254.88
#1: STATE_MAIN_R3: sent MR3, ISAKMP SA established
{auth=OAKLEY_PRESHARED_KEY cipher=aes_256 prf=oakley_sha group=modp1024}
Apr 16 17:33:10 pat pluto[28951]: | ICOOKIE: fd 5a 54 0a f7 ba 37 6b
Apr 16 17:33:10 pat pluto[28951]: | RCOOKIE: 50 80 75 74 f1 4c 26 93
Apr 16 17:33:10 pat pluto[28951]: | state hash entry 25
Apr 16 17:33:10 pat pluto[28951]: | v1 peer and cookies match on #1,
provided msgid 00000000 vs 00000000
Apr 16 17:33:10 pat pluto[28951]: | v1 state object #1 found, in
STATE_MAIN_R3
Apr 16 17:33:10 pat pluto[28951]: "L2TP-PSK-CLIENTS"[1] 93.154.254.88
#1: Dead Peer Detection (RFC 3706): enabled
Apr 16 17:33:10 pat pluto[28951]: | state: 1 requesting event none to be
deleted by
/build/buildd-openswan_2.6.28+dfsg-5+squeeze1-i386-OOSWut/openswan-2.6.28+dfsg/programs/pluto/dpd.c:159
Apr 16 17:33:10 pat pluto[28951]: | inserting event EVENT_DPD, timeout
in 40 seconds for #1
Apr 16 17:33:10 pat pluto[28951]: | event added after event
EVENT_NAT_T_KEEPALIVE
Apr 16 17:33:10 pat pluto[28951]: | modecfg pull: noquirk policy:push
not-client
Apr 16 17:33:10 pat pluto[28951]: | phase 1 is done, looking for phase 2
to unpend
Apr 16 17:33:10 pat pluto[28951]: | unpending state #1
Apr 16 17:33:10 pat pluto[28951]: | * processed 0 messages from
cryptographic helpers
Apr 16 17:33:10 pat pluto[28951]: | next event EVENT_PENDING_DDNS in 6
seconds
Apr 16 17:33:10 pat pluto[28951]: | next event EVENT_PENDING_DDNS in 6
seconds
Apr 16 17:33:10 pat pluto[28951]: |
Apr 16 17:33:10 pat pluto[28951]: | *received 108 bytes from
93.154.254.88:500 on eth0 (port=500)
Apr 16 17:33:10 pat pluto[28951]: | fd 5a 54 0a f7 ba 37 6b 50 80 75
74 f1 4c 26 93
Apr 16 17:33:10 pat pluto[28951]: | 08 10 05 01 8b ea b2 56 00 00 00
6c 2e 8d f8 b9
Apr 16 17:33:10 pat pluto[28951]: | 9a da f9 20 0e 9a c9 2a 27 83 05
b3 34 24 b4 4a
Apr 16 17:33:10 pat pluto[28951]: | e4 cf a8 1f ab f9 55 0d 7b a2 d7
e9 7d 90 92 96
Apr 16 17:33:10 pat pluto[28951]: | 81 24 ee 35 63 0b 8b 2b 19 a6 65
2d 4e b9 4c ae
Apr 16 17:33:10 pat pluto[28951]: | 09 4f ac 24 5e 42 fd 1a 82 e4 c7
77 85 8e ae da
Apr 16 17:33:10 pat pluto[28951]: | b3 a3 7c b5 24 97 3e 3f 6b 29 b3 ae
Apr 16 17:33:10 pat pluto[28951]: | **parse ISAKMP Message:
Apr 16 17:33:10 pat pluto[28951]: | initiator cookie:
Apr 16 17:33:10 pat pluto[28951]: | fd 5a 54 0a f7 ba 37 6b
Apr 16 17:33:10 pat pluto[28951]: | responder cookie:
Apr 16 17:33:10 pat pluto[28951]: | 50 80 75 74 f1 4c 26 93
Apr 16 17:33:10 pat pluto[28951]: | next payload type: ISAKMP_NEXT_HASH
Apr 16 17:33:10 pat pluto[28951]: | ISAKMP version: ISAKMP Version
1.0 (rfc2407)
Apr 16 17:33:10 pat pluto[28951]: | exchange type: ISAKMP_XCHG_INFO
Apr 16 17:33:10 pat pluto[28951]: | flags: ISAKMP_FLAG_ENCRYPTION
Apr 16 17:33:10 pat pluto[28951]: | message ID: 8b ea b2 56
Apr 16 17:33:10 pat pluto[28951]: | length: 108
Apr 16 17:33:10 pat pluto[28951]: | processing version=1.0 packet with
exchange type=ISAKMP_XCHG_INFO (5)
Apr 16 17:33:10 pat pluto[28951]: | ICOOKIE: fd 5a 54 0a f7 ba 37 6b
Apr 16 17:33:10 pat pluto[28951]: | RCOOKIE: 50 80 75 74 f1 4c 26 93
Apr 16 17:33:10 pat pluto[28951]: | state hash entry 25
Apr 16 17:33:10 pat pluto[28951]: | peer and cookies match on #1,
provided msgid 00000000 vs 00000000/00000000
Apr 16 17:33:10 pat pluto[28951]: | p15 state object #1 found, in
STATE_MAIN_R3
Apr 16 17:33:10 pat pluto[28951]: | processing connection
L2TP-PSK-CLIENTS[1] 93.154.254.88
Apr 16 17:33:10 pat pluto[28951]: | last Phase 1 IV: ac 67 17 24 05 39
ab a2 4f 07 b4 13 2d 95 6f ad
Apr 16 17:33:10 pat pluto[28951]: | current Phase 1 IV: ac 67 17 24 05
39 ab a2 4f 07 b4 13 2d 95 6f ad
Apr 16 17:33:10 pat pluto[28951]: | computed Phase 2 IV:
Apr 16 17:33:10 pat pluto[28951]: | c4 05 40 46 56 2e 55 4f 3c ac a6
26 7a ae e4 16
Apr 16 17:33:10 pat pluto[28951]: | 49 69 76 b8
Apr 16 17:33:10 pat pluto[28951]: | received encrypted packet from
93.154.254.88:500
Apr 16 17:33:10 pat pluto[28951]: | decrypting 80 bytes using algorithm
OAKLEY_AES_CBC
Apr 16 17:33:10 pat pluto[28951]: | decrypted:
Apr 16 17:33:10 pat pluto[28951]: | 0b 00 00 18 43 05 df 3f 72 8e 1d
52 88 67 f7 2c
Apr 16 17:33:10 pat pluto[28951]: | f2 18 f0 ad 6f 9b 86 0c 00 00 00
1c 00 00 00 01
Apr 16 17:33:10 pat pluto[28951]: | 01 10 60 02 fd 5a 54 0a f7 ba 37
6b 50 80 75 74
Apr 16 17:33:10 pat pluto[28951]: | f1 4c 26 93 cd d8 83 b5 f7 d5 bb
c0 e4 82 fd 93
Apr 16 17:33:10 pat pluto[28951]: | fb d3 9b dc a1 9b d1 d1 ae 81 8e
bd 87 b4 e8 1b
Apr 16 17:33:10 pat pluto[28951]: | next IV: 85 8e ae da b3 a3 7c b5
24 97 3e 3f 6b 29 b3 ae
Apr 16 17:33:10 pat pluto[28951]: | got payload 0x100(ISAKMP_NEXT_HASH)
needed: 0x100 opt: 0x0
Apr 16 17:33:10 pat pluto[28951]: | ***parse ISAKMP Hash Payload:
Apr 16 17:33:10 pat pluto[28951]: | next payload type: ISAKMP_NEXT_N
Apr 16 17:33:10 pat pluto[28951]: | length: 24
Apr 16 17:33:10 pat pluto[28951]: | got payload 0x800(ISAKMP_NEXT_N)
needed: 0x0 opt: 0x0
Apr 16 17:33:10 pat pluto[28951]: | ***parse ISAKMP Notification Payload:
Apr 16 17:33:10 pat pluto[28951]: | next payload type: ISAKMP_NEXT_NONE
Apr 16 17:33:10 pat pluto[28951]: | length: 28
Apr 16 17:33:10 pat pluto[28951]: | DOI: ISAKMP_DOI_IPSEC
Apr 16 17:33:10 pat pluto[28951]: | protocol ID: 1
Apr 16 17:33:10 pat pluto[28951]: | SPI size: 16
Apr 16 17:33:10 pat pluto[28951]: | Notify Message Type:
IPSEC_INITIAL_CONTACT
Apr 16 17:33:10 pat pluto[28951]: | removing 28 bytes of padding
Apr 16 17:33:10 pat pluto[28951]: "L2TP-PSK-CLIENTS"[1] 93.154.254.88
#1: ignoring informational payload, type IPSEC_INITIAL_CONTACT
msgid=00000000
Apr 16 17:33:10 pat pluto[28951]: | info: fd 5a 54 0a f7 ba 37 6b 50
80 75 74 f1 4c 26 93
Apr 16 17:33:10 pat pluto[28951]: | processing informational
IPSEC_INITIAL_CONTACT (24578)
Apr 16 17:33:10 pat pluto[28951]: "L2TP-PSK-CLIENTS"[1] 93.154.254.88
#1: received and ignored informational message
Apr 16 17:33:10 pat pluto[28951]: | complete state transition with
STF_IGNORE
Apr 16 17:33:10 pat pluto[28951]: | * processed 0 messages from
cryptographic helpers
Apr 16 17:33:10 pat pluto[28951]: | next event EVENT_PENDING_DDNS in 6
seconds
Apr 16 17:33:10 pat pluto[28951]: | next event EVENT_PENDING_DDNS in 6
seconds
Apr 16 17:33:11 pat pluto[28951]: |
Apr 16 17:33:11 pat pluto[28951]: | *received 348 bytes from
93.154.254.88:500 on eth0 (port=500)
Apr 16 17:33:11 pat pluto[28951]: | fd 5a 54 0a f7 ba 37 6b 50 80 75
74 f1 4c 26 93
Apr 16 17:33:11 pat pluto[28951]: | 08 10 20 01 b6 5f 91 09 00 00 01
5c 8a 30 9d 86
Apr 16 17:33:11 pat pluto[28951]: | 7d 08 7b 60 7f 76 f1 18 09 8f 27
b4 99 45 7c 49
Apr 16 17:33:11 pat pluto[28951]: | 8c a6 1c 11 ac 48 c8 b0 dc 08 78
35 44 11 7d f0
Apr 16 17:33:11 pat pluto[28951]: | 23 6a 68 aa 00 99 ff ea 88 ff ca
a4 0f 52 53 3d
Apr 16 17:33:11 pat pluto[28951]: | 05 3c 34 83 eb 7e 57 7b e3 c8 29
f5 a9 54 56 de
Apr 16 17:33:11 pat pluto[28951]: | 8c b6 eb 0f cd 72 64 a0 87 23 af
d3 9a 4c 0a f2
Apr 16 17:33:11 pat pluto[28951]: | d3 b4 5d eb 02 f0 95 d5 ff e3 c5
02 e2 c9 fa f1
Apr 16 17:33:11 pat pluto[28951]: | 0c cc 7b 65 2f 2d b4 9f a5 55 9e
13 cd 3a bb f3
Apr 16 17:33:11 pat pluto[28951]: | 7f a9 9d 42 98 37 05 a6 83 22 b1
b2 d6 58 7f 20
Apr 16 17:33:11 pat pluto[28951]: | 04 db 90 2f b3 80 f7 ed 53 39 1a
71 21 b7 af 1e
Apr 16 17:33:11 pat pluto[28951]: | 2a 9f 6e 69 4a 3d 9a 3c 14 73 b5
ce 89 34 67 12
Apr 16 17:33:11 pat pluto[28951]: | 6c 15 d1 f6 d7 ae c5 29 a8 92 d0
87 78 cb 4d bc
Apr 16 17:33:11 pat pluto[28951]: | 41 e7 b0 ab 80 93 b0 5e e0 29 75
15 88 6a 0a bd
Apr 16 17:33:11 pat pluto[28951]: | c4 e1 1c cf 70 45 a5 f0 a3 a8 48
0f d7 20 38 6f
Apr 16 17:33:11 pat pluto[28951]: | c3 52 79 0d ea 5e bb 5b cc a5 ec
06 88 29 f2 ed
Apr 16 17:33:11 pat pluto[28951]: | 38 6c 4e 6c 64 de 0e e6 33 7e b6
c4 1c 51 36 16
Apr 16 17:33:11 pat pluto[28951]: | 51 b6 52 22 d7 90 db 87 e0 7d 3a
9c 0c e6 d4 e6
Apr 16 17:33:11 pat pluto[28951]: | 3d 41 b2 20 ef 6a fd 13 db e1 1e
91 e0 e1 ef b1
Apr 16 17:33:11 pat pluto[28951]: | ce e8 bf e0 f8 d7 70 90 6a be 09
da db 70 3b 33
Apr 16 17:33:11 pat pluto[28951]: | a3 a6 67 29 1f c2 59 62 f9 62 96
be 33 ce 16 ea
Apr 16 17:33:11 pat pluto[28951]: | 0f 9a f7 5c 95 fe f2 a2 2a f6 21 f3
Apr 16 17:33:11 pat pluto[28951]: | **parse ISAKMP Message:
Apr 16 17:33:11 pat pluto[28951]: | initiator cookie:
Apr 16 17:33:11 pat pluto[28951]: | fd 5a 54 0a f7 ba 37 6b
Apr 16 17:33:11 pat pluto[28951]: | responder cookie:
Apr 16 17:33:11 pat pluto[28951]: | 50 80 75 74 f1 4c 26 93
Apr 16 17:33:11 pat pluto[28951]: | next payload type: ISAKMP_NEXT_HASH
Apr 16 17:33:11 pat pluto[28951]: | ISAKMP version: ISAKMP Version
1.0 (rfc2407)
Apr 16 17:33:11 pat pluto[28951]: | exchange type: ISAKMP_XCHG_QUICK
Apr 16 17:33:11 pat pluto[28951]: | flags: ISAKMP_FLAG_ENCRYPTION
Apr 16 17:33:11 pat pluto[28951]: | message ID: b6 5f 91 09
Apr 16 17:33:11 pat pluto[28951]: | length: 348
Apr 16 17:33:11 pat pluto[28951]: | processing version=1.0 packet with
exchange type=ISAKMP_XCHG_QUICK (32)
Apr 16 17:33:11 pat pluto[28951]: | ICOOKIE: fd 5a 54 0a f7 ba 37 6b
Apr 16 17:33:11 pat pluto[28951]: | RCOOKIE: 50 80 75 74 f1 4c 26 93
Apr 16 17:33:11 pat pluto[28951]: | state hash entry 25
Apr 16 17:33:11 pat pluto[28951]: | v1 peer and cookies match on #1,
provided msgid b65f9109 vs 00000000
Apr 16 17:33:11 pat pluto[28951]: | v1 state object not found
Apr 16 17:33:11 pat pluto[28951]: | ICOOKIE: fd 5a 54 0a f7 ba 37 6b
Apr 16 17:33:11 pat pluto[28951]: | RCOOKIE: 50 80 75 74 f1 4c 26 93
Apr 16 17:33:11 pat pluto[28951]: | state hash entry 25
Apr 16 17:33:11 pat pluto[28951]: | v1 peer and cookies match on #1,
provided msgid 00000000 vs 00000000
Apr 16 17:33:11 pat pluto[28951]: | v1 state object #1 found, in
STATE_MAIN_R3
Apr 16 17:33:11 pat pluto[28951]: | processing connection
L2TP-PSK-CLIENTS[1] 93.154.254.88
Apr 16 17:33:11 pat pluto[28951]: | last Phase 1 IV: ac 67 17 24 05 39
ab a2 4f 07 b4 13 2d 95 6f ad
Apr 16 17:33:11 pat pluto[28951]: | current Phase 1 IV: ac 67 17 24 05
39 ab a2 4f 07 b4 13 2d 95 6f ad
Apr 16 17:33:11 pat pluto[28951]: | computed Phase 2 IV:
Apr 16 17:33:11 pat pluto[28951]: | e6 a6 ed 83 ea 74 b3 0d 48 c4 97
ee e3 fc 7f 58
Apr 16 17:33:11 pat pluto[28951]: | 00 07 74 a2
Apr 16 17:33:11 pat pluto[28951]: | received encrypted packet from
93.154.254.88:500
Apr 16 17:33:11 pat pluto[28951]: | decrypting 320 bytes using algorithm
OAKLEY_AES_CBC
Apr 16 17:33:11 pat pluto[28951]: | decrypted:
Apr 16 17:33:11 pat pluto[28951]: | 01 00 00 18 76 b6 e8 1f 41 91 74
b9 0d 21 89 fb
Apr 16 17:33:11 pat pluto[28951]: | 53 1c b2 c7 4c af a7 55 0a 00 00
e8 00 00 00 01
Apr 16 17:33:11 pat pluto[28951]: | 00 00 00 01 00 00 00 dc 01 03 04
08 02 8b 31 77
Apr 16 17:33:11 pat pluto[28951]: | 03 00 00 1c 01 0c 00 00 80 01 00
01 80 02 70 80
Apr 16 17:33:11 pat pluto[28951]: | 80 04 00 02 80 06 01 00 80 05 00
02 03 00 00 1c
Apr 16 17:33:11 pat pluto[28951]: | 02 0c 00 00 80 01 00 01 80 02 70
80 80 04 00 02
Apr 16 17:33:11 pat pluto[28951]: | 80 06 01 00 80 05 00 01 03 00 00
1c 03 0c 00 00
Apr 16 17:33:11 pat pluto[28951]: | 80 01 00 01 80 02 70 80 80 04 00
02 80 06 00 80
Apr 16 17:33:11 pat pluto[28951]: | 80 05 00 02 03 00 00 1c 04 0c 00
00 80 01 00 01
Apr 16 17:33:11 pat pluto[28951]: | 80 02 70 80 80 04 00 02 80 06 00
80 80 05 00 01
Apr 16 17:33:11 pat pluto[28951]: | 03 00 00 18 05 03 00 00 80 01 00
01 80 02 70 80
Apr 16 17:33:11 pat pluto[28951]: | 80 04 00 02 80 05 00 02 03 00 00
18 06 03 00 00
Apr 16 17:33:11 pat pluto[28951]: | 80 01 00 01 80 02 70 80 80 04 00
02 80 05 00 01
Apr 16 17:33:11 pat pluto[28951]: | 03 00 00 18 07 02 00 00 80 01 00
01 80 02 70 80
Apr 16 17:33:11 pat pluto[28951]: | 80 04 00 02 80 05 00 02 00 00 00
18 08 02 00 00
Apr 16 17:33:11 pat pluto[28951]: | 80 01 00 01 80 02 70 80 80 04 00
02 80 05 00 01
Apr 16 17:33:11 pat pluto[28951]: | 05 00 00 14 ce 65 69 e7 d7 7b 15
3a 0f 5a e0 1b
Apr 16 17:33:11 pat pluto[28951]: | 86 28 69 52 05 00 00 0c 01 11 00
00 5d 9a fe 58
Apr 16 17:33:11 pat pluto[28951]: | 00 00 00 0c 01 11 06 a5 c1 3b 21
0a c2 cd df ce
Apr 16 17:33:11 pat pluto[28951]: | bd fe 93 d8 dc f7 f8 e0 f7 b7 f7
b7 d6 d2 94 13
Apr 16 17:33:11 pat pluto[28951]: | next IV: 33 ce 16 ea 0f 9a f7 5c
95 fe f2 a2 2a f6 21 f3
Apr 16 17:33:11 pat pluto[28951]: | got payload 0x100(ISAKMP_NEXT_HASH)
needed: 0x502 opt: 0x200030
Apr 16 17:33:11 pat pluto[28951]: | ***parse ISAKMP Hash Payload:
Apr 16 17:33:11 pat pluto[28951]: | next payload type: ISAKMP_NEXT_SA
Apr 16 17:33:11 pat pluto[28951]: | length: 24
Apr 16 17:33:11 pat pluto[28951]: | got payload 0x2(ISAKMP_NEXT_SA)
needed: 0x402 opt: 0x200030
Apr 16 17:33:11 pat pluto[28951]: | ***parse ISAKMP Security Association
Payload:
Apr 16 17:33:11 pat pluto[28951]: | next payload type: ISAKMP_NEXT_NONCE
Apr 16 17:33:11 pat pluto[28951]: | length: 232
Apr 16 17:33:11 pat pluto[28951]: | DOI: ISAKMP_DOI_IPSEC
Apr 16 17:33:11 pat pluto[28951]: | got payload 0x400(ISAKMP_NEXT_NONCE)
needed: 0x400 opt: 0x200030
Apr 16 17:33:11 pat pluto[28951]: | ***parse ISAKMP Nonce Payload:
Apr 16 17:33:11 pat pluto[28951]: | next payload type: ISAKMP_NEXT_ID
Apr 16 17:33:11 pat pluto[28951]: | length: 20
Apr 16 17:33:11 pat pluto[28951]: | got payload 0x20(ISAKMP_NEXT_ID)
needed: 0x0 opt: 0x200030
Apr 16 17:33:11 pat pluto[28951]: | ***parse ISAKMP Identification
Payload (IPsec DOI):
Apr 16 17:33:11 pat pluto[28951]: | next payload type: ISAKMP_NEXT_ID
Apr 16 17:33:11 pat pluto[28951]: | length: 12
Apr 16 17:33:11 pat pluto[28951]: | ID type: ID_IPV4_ADDR
Apr 16 17:33:11 pat pluto[28951]: | Protocol ID: 17
Apr 16 17:33:11 pat pluto[28951]: | port: 0
Apr 16 17:33:11 pat pluto[28951]: | obj: 5d 9a fe 58 00 00 00 0c
01 11 06 a5
Apr 16 17:33:11 pat pluto[28951]: | got payload 0x20(ISAKMP_NEXT_ID)
needed: 0x0 opt: 0x200030
Apr 16 17:33:11 pat pluto[28951]: | ***parse ISAKMP Identification
Payload (IPsec DOI):
Apr 16 17:33:11 pat pluto[28951]: | next payload type: ISAKMP_NEXT_NONE
Apr 16 17:33:11 pat pluto[28951]: | length: 12
Apr 16 17:33:11 pat pluto[28951]: | ID type: ID_IPV4_ADDR
Apr 16 17:33:11 pat pluto[28951]: | Protocol ID: 17
Apr 16 17:33:11 pat pluto[28951]: | port: 1701
Apr 16 17:33:11 pat pluto[28951]: | obj: c1 3b 21 0a c2 cd df ce
bd fe 93 d8
Apr 16 17:33:11 pat pluto[28951]: | removing 20 bytes of padding
Apr 16 17:33:11 pat pluto[28951]: | HASH(1) computed:
Apr 16 17:33:11 pat pluto[28951]: | 76 b6 e8 1f 41 91 74 b9 0d 21 89
fb 53 1c b2 c7
Apr 16 17:33:11 pat pluto[28951]: | 4c af a7 55
Apr 16 17:33:11 pat pluto[28951]: | peer client is 93.154.254.88
Apr 16 17:33:11 pat pluto[28951]: | peer client protocol/port is 17/0
Apr 16 17:33:11 pat pluto[28951]: | our client is 193.59.3.10
Apr 16 17:33:11 pat pluto[28951]: | our client protocol/port is 17/1701
Apr 16 17:33:11 pat pluto[28951]: "L2TP-PSK-CLIENTS"[1] 93.154.254.88
#1: the peer proposed: 193.59.3.10/32:17/1701 -> 93.154.254.88/32:17/0
Apr 16 17:33:11 pat pluto[28951]: | find_client_connection starting with
L2TP-PSK-CLIENTS
Apr 16 17:33:11 pat pluto[28951]: | looking for 193.59.3.10/32:17/1701
-> 93.154.254.88/32:17/0
Apr 16 17:33:11 pat pluto[28951]: | concrete checking against sr#0
193.59.3.10/32 -> 0.0.0.0/32
Apr 16 17:33:11 pat pluto[28951]: | match_id a=93.154.254.88
Apr 16 17:33:11 pat pluto[28951]: | b=93.154.254.88
Apr 16 17:33:11 pat pluto[28951]: | results matched
Apr 16 17:33:11 pat pluto[28951]: | trusted_ca called with a=(empty)
b=(empty)
Apr 16 17:33:11 pat pluto[28951]: | fc_try trying
L2TP-PSK-CLIENTS:193.59.3.10/32:17/1701 -> 93.154.254.88/32:17/0(virt)
vs L2TP-PSK-CLIENTS:193.59.3.10/32:17/1701 -> 0.0.0.0/32:17/0(virt)
Apr 16 17:33:11 pat pluto[28951]: | fc_try concluding with
L2TP-PSK-CLIENTS [128]
Apr 16 17:33:11 pat pluto[28951]: | fc_try L2TP-PSK-CLIENTS gives
L2TP-PSK-CLIENTS
Apr 16 17:33:11 pat pluto[28951]: | concluding with d = L2TP-PSK-CLIENTS
Apr 16 17:33:11 pat pluto[28951]: | client wildcard: no port wildcard:
yes virtual: yes
Apr 16 17:33:11 pat pluto[28951]: | setting phase 2 virtual values to
93.154.254.88[+S=C]:17/0
Apr 16 17:33:11 pat pluto[28951]: | duplicating state object #1
Apr 16 17:33:11 pat pluto[28951]: | creating state object #2 at 0x81578b0
Apr 16 17:33:11 pat pluto[28951]: | processing connection
L2TP-PSK-CLIENTS[1] 93.154.254.88
Apr 16 17:33:11 pat pluto[28951]: | ICOOKIE: fd 5a 54 0a f7 ba 37 6b
Apr 16 17:33:11 pat pluto[28951]: | RCOOKIE: 50 80 75 74 f1 4c 26 93
Apr 16 17:33:11 pat pluto[28951]: | state hash entry 25
Apr 16 17:33:11 pat pluto[28951]: | inserting state object #2 on chain 25
Apr 16 17:33:11 pat pluto[28951]: | inserting event EVENT_SO_DISCARD,
timeout in 0 seconds for #2
Apr 16 17:33:11 pat pluto[28951]: | event added at head of queue
Apr 16 17:33:11 pat pluto[28951]: | ****parse IPsec DOI SIT:
Apr 16 17:33:11 pat pluto[28951]: | IPsec DOI SIT: SIT_IDENTITY_ONLY
Apr 16 17:33:11 pat pluto[28951]: | ****parse ISAKMP Proposal Payload:
Apr 16 17:33:11 pat pluto[28951]: | next payload type: ISAKMP_NEXT_NONE
Apr 16 17:33:11 pat pluto[28951]: | length: 220
Apr 16 17:33:11 pat pluto[28951]: | proposal number: 1
Apr 16 17:33:11 pat pluto[28951]: | protocol ID: PROTO_IPSEC_ESP
Apr 16 17:33:11 pat pluto[28951]: | SPI size: 4
Apr 16 17:33:11 pat pluto[28951]: | number of transforms: 8
Apr 16 17:33:11 pat pluto[28951]: | parsing 4 raw bytes of ISAKMP
Proposal Payload into SPI
Apr 16 17:33:11 pat pluto[28951]: | SPI 02 8b 31 77
Apr 16 17:33:11 pat pluto[28951]: | *****parse ISAKMP Transform Payload
(ESP):
Apr 16 17:33:11 pat pluto[28951]: | next payload type: ISAKMP_NEXT_T
Apr 16 17:33:11 pat pluto[28951]: | length: 28
Apr 16 17:33:11 pat pluto[28951]: | transform number: 1
Apr 16 17:33:11 pat pluto[28951]: | transform ID: ESP_AES
Apr 16 17:33:11 pat pluto[28951]: | ******parse ISAKMP IPsec DOI attribute:
Apr 16 17:33:11 pat pluto[28951]: | af+type: SA_LIFE_TYPE
Apr 16 17:33:11 pat pluto[28951]: | length/value: 1
Apr 16 17:33:11 pat pluto[28951]: | [1 is SA_LIFE_TYPE_SECONDS]
Apr 16 17:33:11 pat pluto[28951]: | ******parse ISAKMP IPsec DOI attribute:
Apr 16 17:33:11 pat pluto[28951]: | af+type: SA_LIFE_DURATION
Apr 16 17:33:11 pat pluto[28951]: | length/value: 28800
Apr 16 17:33:11 pat pluto[28951]: | ******parse ISAKMP IPsec DOI attribute:
Apr 16 17:33:11 pat pluto[28951]: | af+type: ENCAPSULATION_MODE
Apr 16 17:33:11 pat pluto[28951]: | length/value: 2
Apr 16 17:33:11 pat pluto[28951]: | [2 is ENCAPSULATION_MODE_TRANSPORT]
Apr 16 17:33:11 pat pluto[28951]: | ******parse ISAKMP IPsec DOI attribute:
Apr 16 17:33:11 pat pluto[28951]: | af+type: KEY_LENGTH
Apr 16 17:33:11 pat pluto[28951]: | length/value: 256
Apr 16 17:33:11 pat pluto[28951]: | ******parse ISAKMP IPsec DOI attribute:
Apr 16 17:33:11 pat pluto[28951]: | af+type: AUTH_ALGORITHM
Apr 16 17:33:11 pat pluto[28951]: | length/value: 2
Apr 16 17:33:11 pat pluto[28951]: | [2 is AUTH_ALGORITHM_HMAC_SHA1]
Apr 16 17:33:11 pat pluto[28951]: | helper -1 doing build_nonce op id:
3084492864
Apr 16 17:33:11 pat pluto[28951]: | Generated nonce:
Apr 16 17:33:11 pat pluto[28951]: | 64 8d e0 91 92 47 1d 63 71 ce ed
9c fc ec 3e 88
Apr 16 17:33:11 pat pluto[28951]: | quick inI1_outR1: calculated
ke+nonce, calculating DH
Apr 16 17:33:11 pat pluto[28951]: | processing connection
L2TP-PSK-CLIENTS[1] 93.154.254.88
Apr 16 17:33:11 pat pluto[28951]: | **emit ISAKMP Message:
Apr 16 17:33:11 pat pluto[28951]: | initiator cookie:
Apr 16 17:33:11 pat pluto[28951]: | fd 5a 54 0a f7 ba 37 6b
Apr 16 17:33:11 pat pluto[28951]: | responder cookie:
Apr 16 17:33:11 pat pluto[28951]: | 50 80 75 74 f1 4c 26 93
Apr 16 17:33:11 pat pluto[28951]: | next payload type: ISAKMP_NEXT_HASH
Apr 16 17:33:11 pat pluto[28951]: | ISAKMP version: ISAKMP Version
1.0 (rfc2407)
Apr 16 17:33:11 pat pluto[28951]: | exchange type: ISAKMP_XCHG_QUICK
Apr 16 17:33:11 pat pluto[28951]: | flags: ISAKMP_FLAG_ENCRYPTION
Apr 16 17:33:11 pat pluto[28951]: | message ID: b6 5f 91 09
Apr 16 17:33:11 pat pluto[28951]: | ***emit ISAKMP Hash Payload:
Apr 16 17:33:11 pat pluto[28951]: | next payload type: ISAKMP_NEXT_SA
Apr 16 17:33:11 pat pluto[28951]: | emitting 20 zero bytes of HASH into
ISAKMP Hash Payload
Apr 16 17:33:11 pat pluto[28951]: | emitting length of ISAKMP Hash
Payload: 24
Apr 16 17:33:11 pat pluto[28951]: | ***emit ISAKMP Security Association
Payload:
Apr 16 17:33:11 pat pluto[28951]: | next payload type: ISAKMP_NEXT_NONCE
Apr 16 17:33:11 pat pluto[28951]: | DOI: ISAKMP_DOI_IPSEC
Apr 16 17:33:11 pat pluto[28951]: | ****parse IPsec DOI SIT:
Apr 16 17:33:11 pat pluto[28951]: | IPsec DOI SIT: SIT_IDENTITY_ONLY
Apr 16 17:33:11 pat pluto[28951]: | ****parse ISAKMP Proposal Payload:
Apr 16 17:33:11 pat pluto[28951]: | next payload type: ISAKMP_NEXT_NONE
Apr 16 17:33:11 pat pluto[28951]: | length: 220
Apr 16 17:33:11 pat pluto[28951]: | proposal number: 1
Apr 16 17:33:11 pat pluto[28951]: | protocol ID: PROTO_IPSEC_ESP
Apr 16 17:33:11 pat pluto[28951]: | SPI size: 4
Apr 16 17:33:11 pat pluto[28951]: | number of transforms: 8
Apr 16 17:33:11 pat pluto[28951]: | parsing 4 raw bytes of ISAKMP
Proposal Payload into SPI
Apr 16 17:33:11 pat pluto[28951]: | SPI 02 8b 31 77
Apr 16 17:33:11 pat pluto[28951]: | *****parse ISAKMP Transform Payload
(ESP):
Apr 16 17:33:11 pat pluto[28951]: | next payload type: ISAKMP_NEXT_T
Apr 16 17:33:11 pat pluto[28951]: | length: 28
Apr 16 17:33:11 pat pluto[28951]: | transform number: 1
Apr 16 17:33:11 pat pluto[28951]: | transform ID: ESP_AES
Apr 16 17:33:11 pat pluto[28951]: | ******parse ISAKMP IPsec DOI attribute:
Apr 16 17:33:11 pat pluto[28951]: | af+type: SA_LIFE_TYPE
Apr 16 17:33:11 pat pluto[28951]: | length/value: 1
Apr 16 17:33:11 pat pluto[28951]: | [1 is SA_LIFE_TYPE_SECONDS]
Apr 16 17:33:11 pat pluto[28951]: | ******parse ISAKMP IPsec DOI attribute:
Apr 16 17:33:11 pat pluto[28951]: | af+type: SA_LIFE_DURATION
Apr 16 17:33:11 pat pluto[28951]: | length/value: 28800
Apr 16 17:33:11 pat pluto[28951]: | ******parse ISAKMP IPsec DOI attribute:
Apr 16 17:33:11 pat pluto[28951]: | af+type: ENCAPSULATION_MODE
Apr 16 17:33:11 pat pluto[28951]: | length/value: 2
Apr 16 17:33:11 pat pluto[28951]: | [2 is ENCAPSULATION_MODE_TRANSPORT]
Apr 16 17:33:11 pat pluto[28951]: | ******parse ISAKMP IPsec DOI attribute:
Apr 16 17:33:11 pat pluto[28951]: | af+type: KEY_LENGTH
Apr 16 17:33:11 pat pluto[28951]: | length/value: 256
Apr 16 17:33:11 pat pluto[28951]: | ******parse ISAKMP IPsec DOI attribute:
Apr 16 17:33:11 pat pluto[28951]: | af+type: AUTH_ALGORITHM
Apr 16 17:33:11 pat pluto[28951]: | length/value: 2
Apr 16 17:33:11 pat pluto[28951]: | [2 is AUTH_ALGORITHM_HMAC_SHA1]
Apr 16 17:33:11 pat pluto[28951]: | ****emit IPsec DOI SIT:
Apr 16 17:33:11 pat pluto[28951]: | IPsec DOI SIT: SIT_IDENTITY_ONLY
Apr 16 17:33:11 pat pluto[28951]: | ****emit ISAKMP Proposal Payload:
Apr 16 17:33:11 pat pluto[28951]: | next payload type: ISAKMP_NEXT_NONE
Apr 16 17:33:11 pat pluto[28951]: | proposal number: 1
Apr 16 17:33:11 pat pluto[28951]: | protocol ID: PROTO_IPSEC_ESP
Apr 16 17:33:11 pat pluto[28951]: | SPI size: 4
Apr 16 17:33:11 pat pluto[28951]: | number of transforms: 1
Apr 16 17:33:11 pat pluto[28951]: | netlink_get_spi: allocated
0xa728160f for esp.0@193.59.3.10
Apr 16 17:33:11 pat pluto[28951]: | emitting 4 raw bytes of SPI into
ISAKMP Proposal Payload
Apr 16 17:33:11 pat pluto[28951]: | SPI a7 28 16 0f
Apr 16 17:33:11 pat pluto[28951]: | *****emit ISAKMP Transform Payload
(ESP):
Apr 16 17:33:11 pat pluto[28951]: | next payload type: ISAKMP_NEXT_NONE
Apr 16 17:33:11 pat pluto[28951]: | transform number: 1
Apr 16 17:33:11 pat pluto[28951]: | transform ID: ESP_AES
Apr 16 17:33:11 pat pluto[28951]: | emitting 20 raw bytes of attributes
into ISAKMP Transform Payload (ESP)
Apr 16 17:33:11 pat pluto[28951]: | attributes 80 01 00 01 80 02 70 80
80 04 00 02 80 06 01 00
Apr 16 17:33:11 pat pluto[28951]: | attributes 80 05 00 02
Apr 16 17:33:11 pat pluto[28951]: | emitting length of ISAKMP Transform
Payload (ESP): 28
Apr 16 17:33:11 pat pluto[28951]: | emitting length of ISAKMP Proposal
Payload: 40
Apr 16 17:33:11 pat pluto[28951]: | emitting length of ISAKMP Security
Association Payload: 52
Apr 16 17:33:11 pat pluto[28951]: "L2TP-PSK-CLIENTS"[1] 93.154.254.88
#2: responding to Quick Mode proposal {msgid:09915fb6}
Apr 16 17:33:11 pat pluto[28951]: "L2TP-PSK-CLIENTS"[1] 93.154.254.88
#2: us: 193.59.3.10<193.59.3.10>[+S=C]:17/1701
Apr 16 17:33:11 pat pluto[28951]: "L2TP-PSK-CLIENTS"[1] 93.154.254.88
#2: them: 93.154.254.88[+S=C]:17/0
Apr 16 17:33:11 pat pluto[28951]: | ***emit ISAKMP Nonce Payload:
Apr 16 17:33:11 pat pluto[28951]: | next payload type: ISAKMP_NEXT_ID
Apr 16 17:33:11 pat pluto[28951]: | emitting 16 raw bytes of Nr into
ISAKMP Nonce Payload
Apr 16 17:33:11 pat pluto[28951]: | Nr 64 8d e0 91 92 47 1d 63 71 ce
ed 9c fc ec 3e 88
Apr 16 17:33:11 pat pluto[28951]: | emitting length of ISAKMP Nonce
Payload: 20
Apr 16 17:33:11 pat pluto[28951]: | emitting 12 raw bytes of IDci into
ISAKMP Message
Apr 16 17:33:11 pat pluto[28951]: | IDci 05 00 00 0c 01 11 00 00 5d
9a fe 58
Apr 16 17:33:11 pat pluto[28951]: | emitting 12 raw bytes of IDcr into
ISAKMP Message
Apr 16 17:33:11 pat pluto[28951]: | IDcr 00 00 00 0c 01 11 06 a5 c1
3b 21 0a
Apr 16 17:33:11 pat pluto[28951]: | HASH(2) computed:
Apr 16 17:33:11 pat pluto[28951]: | 19 71 c5 43 a6 0e 0a 5f 4c fd e5
73 6e 22 f2 d5
Apr 16 17:33:11 pat pluto[28951]: | df 4c 89 47
Apr 16 17:33:11 pat pluto[28951]: | compute_proto_keymat:needed_len
(after ESP enc)=32
Apr 16 17:33:11 pat pluto[28951]: | compute_proto_keymat:needed_len
(after ESP auth)=52
Apr 16 17:33:11 pat pluto[28951]: | ESP KEYMAT
Apr 16 17:33:11 pat pluto[28951]: | KEYMAT computed:
Apr 16 17:33:11 pat pluto[28951]: | a3 90 5f e7 7b 94 89 4b 35 72 f7
11 24 4e b5 17
Apr 16 17:33:11 pat pluto[28951]: | 00 b5 7e 5a 8c 72 96 14 10 c7 ec
79 df 01 a9 3d
Apr 16 17:33:11 pat pluto[28951]: | 47 cc 75 8d 71 66 1e aa 11 0f 81
3b 92 aa e3 7f
Apr 16 17:33:11 pat pluto[28951]: | 84 60 bc 53
Apr 16 17:33:11 pat pluto[28951]: | Peer KEYMAT computed:
Apr 16 17:33:11 pat pluto[28951]: | 4e 07 96 b8 64 a2 7c 3a c3 79 e2
9d 74 54 ac 3c
Apr 16 17:33:11 pat pluto[28951]: | 87 6f 72 6f fa 1c 75 52 1a 57 5e
56 80 43 e9 d7
Apr 16 17:33:11 pat pluto[28951]: | d3 2a ab 59 4c ff 2e e3 a9 0e ec
c7 9a 9c 6a 8a
Apr 16 17:33:11 pat pluto[28951]: | d0 08 70 d2
Apr 16 17:33:11 pat pluto[28951]: | install_inbound_ipsec_sa() checking
if we can route
Apr 16 17:33:11 pat pluto[28951]: | route owner of "L2TP-PSK-CLIENTS"[1]
93.154.254.88 unrouted: NULL; eroute owner: NULL
Apr 16 17:33:11 pat pluto[28951]: | could_route called for
L2TP-PSK-CLIENTS (kind=CK_INSTANCE)
Apr 16 17:33:11 pat pluto[28951]: | routing is easy, or has
resolvable near-conflict
Apr 16 17:33:11 pat pluto[28951]: | checking if this is a replacement state
Apr 16 17:33:11 pat pluto[28951]: | st=0x81578b0 ost=(nil)
st->serialno=#2 ost->serialno=#0
Apr 16 17:33:11 pat pluto[28951]: | installing outgoing SA now as refhim=0
Apr 16 17:33:11 pat pluto[28951]: | looking for alg with transid: 12
keylen: 256 auth: 2
Apr 16 17:33:11 pat pluto[28951]: | checking transid: 11 keylen: 0 auth: 1
Apr 16 17:33:11 pat pluto[28951]: | checking transid: 11 keylen: 0 auth: 2
Apr 16 17:33:11 pat pluto[28951]: | checking transid: 2 keylen: 8 auth: 0
Apr 16 17:33:11 pat pluto[28951]: | checking transid: 2 keylen: 8 auth: 1
Apr 16 17:33:11 pat pluto[28951]: | checking transid: 2 keylen: 8 auth: 2
Apr 16 17:33:11 pat pluto[28951]: | checking transid: 3 keylen: 24 auth: 0
Apr 16 17:33:11 pat pluto[28951]: | checking transid: 3 keylen: 24 auth: 1
Apr 16 17:33:11 pat pluto[28951]: | checking transid: 3 keylen: 24 auth: 2
Apr 16 17:33:11 pat pluto[28951]: | checking transid: 12 keylen: 16 auth: 0
Apr 16 17:33:11 pat pluto[28951]: | checking transid: 12 keylen: 16 auth: 1
Apr 16 17:33:11 pat pluto[28951]: | checking transid: 12 keylen: 16 auth: 2
Apr 16 17:33:11 pat pluto[28951]: | kernel_alg_esp_info():transid=12,
auth=2, ei=0x813d228, enckeylen=32, authkeylen=20, encryptalg=12, authalg=3
Apr 16 17:33:11 pat pluto[28951]: | esp enckey: 4e 07 96 b8 64 a2 7c
3a c3 79 e2 9d 74 54 ac 3c
Apr 16 17:33:11 pat pluto[28951]: | esp enckey: 87 6f 72 6f fa 1c 75
52 1a 57 5e 56 80 43 e9 d7
Apr 16 17:33:11 pat pluto[28951]: | esp authkey: d3 2a ab 59 4c ff 2e
e3 a9 0e ec c7 9a 9c 6a 8a
Apr 16 17:33:11 pat pluto[28951]: | esp authkey: d0 08 70 d2
Apr 16 17:33:11 pat pluto[28951]: | outgoing SA has refhim=4294901761
Apr 16 17:33:11 pat pluto[28951]: | looking for alg with transid: 12
keylen: 256 auth: 2
Apr 16 17:33:11 pat pluto[28951]: | checking transid: 11 keylen: 0 auth: 1
Apr 16 17:33:11 pat pluto[28951]: | checking transid: 11 keylen: 0 auth: 2
Apr 16 17:33:11 pat pluto[28951]: | checking transid: 2 keylen: 8 auth: 0
Apr 16 17:33:11 pat pluto[28951]: | checking transid: 2 keylen: 8 auth: 1
Apr 16 17:33:11 pat pluto[28951]: | checking transid: 2 keylen: 8 auth: 2
Apr 16 17:33:11 pat pluto[28951]: | checking transid: 3 keylen: 24 auth: 0
Apr 16 17:33:11 pat pluto[28951]: | checking transid: 3 keylen: 24 auth: 1
Apr 16 17:33:11 pat pluto[28951]: | checking transid: 3 keylen: 24 auth: 2
Apr 16 17:33:11 pat pluto[28951]: | checking transid: 12 keylen: 16 auth: 0
Apr 16 17:33:11 pat pluto[28951]: | checking transid: 12 keylen: 16 auth: 1
Apr 16 17:33:11 pat pluto[28951]: | checking transid: 12 keylen: 16 auth: 2
Apr 16 17:33:11 pat pluto[28951]: | kernel_alg_esp_info():transid=12,
auth=2, ei=0x813d228, enckeylen=32, authkeylen=20, encryptalg=12, authalg=3
Apr 16 17:33:11 pat pluto[28951]: | esp enckey: a3 90 5f e7 7b 94 89
4b 35 72 f7 11 24 4e b5 17
Apr 16 17:33:11 pat pluto[28951]: | esp enckey: 00 b5 7e 5a 8c 72 96
14 10 c7 ec 79 df 01 a9 3d
Apr 16 17:33:11 pat pluto[28951]: | esp authkey: 47 cc 75 8d 71 66 1e
aa 11 0f 81 3b 92 aa e3 7f
Apr 16 17:33:11 pat pluto[28951]: | esp authkey: 84 60 bc 53
Apr 16 17:33:11 pat pluto[28951]: | add inbound eroute
93.154.254.88/32:0 --17-> 193.59.3.10/32:1701 => tun.10000@193.59.3.10
(raw_eroute)
Apr 16 17:33:11 pat pluto[28951]: | raw_eroute result=1
Apr 16 17:33:11 pat pluto[28951]: | encrypting:
Apr 16 17:33:11 pat pluto[28951]: | 01 00 00 18 19 71 c5 43 a6 0e 0a
5f 4c fd e5 73
Apr 16 17:33:11 pat pluto[28951]: | 6e 22 f2 d5 df 4c 89 47 0a 00 00
34 00 00 00 01
Apr 16 17:33:11 pat pluto[28951]: | 00 00 00 01 00 00 00 28 01 03 04
01 a7 28 16 0f
Apr 16 17:33:11 pat pluto[28951]: | 00 00 00 1c 01 0c 00 00 80 01 00
01 80 02 70 80
Apr 16 17:33:11 pat pluto[28951]: | 80 04 00 02 80 06 01 00 80 05 00
02 05 00 00 14
Apr 16 17:33:11 pat pluto[28951]: | 64 8d e0 91 92 47 1d 63 71 ce ed
9c fc ec 3e 88
Apr 16 17:33:11 pat pluto[28951]: | 05 00 00 0c 01 11 00 00 5d 9a fe
58 00 00 00 0c
Apr 16 17:33:11 pat pluto[28951]: | 01 11 06 a5 c1 3b 21 0a
Apr 16 17:33:11 pat pluto[28951]: | IV:
Apr 16 17:33:11 pat pluto[28951]: | 33 ce 16 ea 0f 9a f7 5c 95 fe f2
a2 2a f6 21 f3
Apr 16 17:33:11 pat pluto[28951]: | unpadded size is: 120
Apr 16 17:33:11 pat pluto[28951]: | emitting 8 zero bytes of encryption
padding into ISAKMP Message
Apr 16 17:33:11 pat pluto[28951]: | encrypting 128 using OAKLEY_AES_CBC
Apr 16 17:33:11 pat pluto[28951]: | next IV: 2f 6e de 9d 4e 53 2c c0
71 3c 49 b2 d3 bc d2 e9
Apr 16 17:33:11 pat pluto[28951]: | emitting length of ISAKMP Message: 156
Apr 16 17:33:11 pat pluto[28951]: | finished processing quick inI1
Apr 16 17:33:11 pat pluto[28951]: | complete state transition with STF_OK
Apr 16 17:33:11 pat pluto[28951]: "L2TP-PSK-CLIENTS"[1] 93.154.254.88
#2: transition from state STATE_QUICK_R0 to state STATE_QUICK_R1
Apr 16 17:33:11 pat pluto[28951]: | deleting event for #2
Apr 16 17:33:11 pat pluto[28951]: | sending reply packet to
93.154.254.88:500 (from port 500)
Apr 16 17:33:11 pat pluto[28951]: | sending 156 bytes for STATE_QUICK_R0
through eth0:500 to 93.154.254.88:500 (using #2)
Apr 16 17:33:11 pat pluto[28951]: | fd 5a 54 0a f7 ba 37 6b 50 80 75
74 f1 4c 26 93
Apr 16 17:33:11 pat pluto[28951]: | 08 10 20 01 b6 5f 91 09 00 00 00
9c 6d cd 7c 5a
Apr 16 17:33:11 pat pluto[28951]: | b4 78 b3 d5 df ae 71 b9 80 b6 36
c3 0d 0b 47 f1
Apr 16 17:33:11 pat pluto[28951]: | 06 51 0e 08 05 de ff 69 a5 e5 f8
ed f7 c4 26 9a
Apr 16 17:33:11 pat pluto[28951]: | 55 12 23 da 3a f3 df 60 3e af 96
86 3f 2b 88 65
Apr 16 17:33:11 pat pluto[28951]: | 36 f4 a9 9e 4d 54 a5 8f c5 dd 26
11 68 7e a1 66
Apr 16 17:33:11 pat pluto[28951]: | 0c 76 56 ee c2 6f 4c ef b0 05 79
ab e9 92 e7 b0
Apr 16 17:33:11 pat pluto[28951]: | 20 b2 7a fa 66 58 24 ae eb 81 6b
ce 86 b8 9e cf
Apr 16 17:33:11 pat pluto[28951]: | 1d 23 b2 ab 92 e1 5d 2b 30 a7 57
27 2f 6e de 9d
Apr 16 17:33:11 pat pluto[28951]: | 4e 53 2c c0 71 3c 49 b2 d3 bc d2 e9
Apr 16 17:33:11 pat pluto[28951]: | inserting event EVENT_RETRANSMIT,
timeout in 10 seconds for #2
Apr 16 17:33:11 pat pluto[28951]: | event added after event
EVENT_PENDING_DDNS
Apr 16 17:33:11 pat pluto[28951]: "L2TP-PSK-CLIENTS"[1] 93.154.254.88
#2: STATE_QUICK_R1: sent QR1, inbound IPsec SA installed, expecting QI2
Apr 16 17:33:11 pat pluto[28951]: | modecfg pull: noquirk policy:push
not-client
Apr 16 17:33:11 pat pluto[28951]: | phase 1 is done, looking for phase 2
to unpend
Apr 16 17:33:11 pat pluto[28951]: | complete state transition with
STF_INLINE
Apr 16 17:33:11 pat pluto[28951]: | * processed 0 messages from
cryptographic helpers
Apr 16 17:33:11 pat pluto[28951]: | next event EVENT_PENDING_DDNS in 5
seconds
Apr 16 17:33:11 pat pluto[28951]: | next event EVENT_PENDING_DDNS in 5
seconds
Apr 16 17:33:11 pat pluto[28951]: |
Apr 16 17:33:11 pat pluto[28951]: | *received 76 bytes from
93.154.254.88:500 on eth0 (port=500)
Apr 16 17:33:11 pat pluto[28951]: | fd 5a 54 0a f7 ba 37 6b 50 80 75
74 f1 4c 26 93
Apr 16 17:33:11 pat pluto[28951]: | 08 10 20 01 b6 5f 91 09 00 00 00
4c 77 4c 81 ae
Apr 16 17:33:11 pat pluto[28951]: | 5a e8 eb d2 d3 aa 41 4f 09 70 de
29 d2 8a 26 66
Apr 16 17:33:11 pat pluto[28951]: | ac be 5e 06 62 b1 9a 6b cc 3a 53
79 fa 9d a8 e9
Apr 16 17:33:11 pat pluto[28951]: | e8 0c d1 10 d8 c2 60 3c 72 cd 3f 59
Apr 16 17:33:11 pat pluto[28951]: | **parse ISAKMP Message:
Apr 16 17:33:11 pat pluto[28951]: | initiator cookie:
Apr 16 17:33:11 pat pluto[28951]: | fd 5a 54 0a f7 ba 37 6b
Apr 16 17:33:11 pat pluto[28951]: | responder cookie:
Apr 16 17:33:11 pat pluto[28951]: | 50 80 75 74 f1 4c 26 93
Apr 16 17:33:11 pat pluto[28951]: | next payload type: ISAKMP_NEXT_HASH
Apr 16 17:33:11 pat pluto[28951]: | ISAKMP version: ISAKMP Version
1.0 (rfc2407)
Apr 16 17:33:11 pat pluto[28951]: | exchange type: ISAKMP_XCHG_QUICK
Apr 16 17:33:11 pat pluto[28951]: | flags: ISAKMP_FLAG_ENCRYPTION
Apr 16 17:33:11 pat pluto[28951]: | message ID: b6 5f 91 09
Apr 16 17:33:11 pat pluto[28951]: | length: 76
Apr 16 17:33:11 pat pluto[28951]: | processing version=1.0 packet with
exchange type=ISAKMP_XCHG_QUICK (32)
Apr 16 17:33:11 pat pluto[28951]: | ICOOKIE: fd 5a 54 0a f7 ba 37 6b
Apr 16 17:33:11 pat pluto[28951]: | RCOOKIE: 50 80 75 74 f1 4c 26 93
Apr 16 17:33:11 pat pluto[28951]: | state hash entry 25
Apr 16 17:33:11 pat pluto[28951]: | v1 peer and cookies match on #2,
provided msgid b65f9109 vs b65f9109
Apr 16 17:33:11 pat pluto[28951]: | v1 state object #2 found, in
STATE_QUICK_R1
Apr 16 17:33:11 pat pluto[28951]: | processing connection
L2TP-PSK-CLIENTS[1] 93.154.254.88
Apr 16 17:33:11 pat pluto[28951]: | received encrypted packet from
93.154.254.88:500
Apr 16 17:33:11 pat pluto[28951]: | decrypting 48 bytes using algorithm
OAKLEY_AES_CBC
Apr 16 17:33:11 pat pluto[28951]: | decrypted:
Apr 16 17:33:11 pat pluto[28951]: | 00 00 00 18 b6 bf 83 11 d0 49 28
18 15 2b b4 81
Apr 16 17:33:11 pat pluto[28951]: | cc 16 32 3b 2e fd 36 da f3 f9 b9
d9 ef de d1 8a
Apr 16 17:33:11 pat pluto[28951]: | c1 ce f6 a4 fa b7 c8 bf eb 9f de
f4 a0 ce d9 17
Apr 16 17:33:11 pat pluto[28951]: | next IV: fa 9d a8 e9 e8 0c d1 10
d8 c2 60 3c 72 cd 3f 59
Apr 16 17:33:11 pat pluto[28951]: | got payload 0x100(ISAKMP_NEXT_HASH)
needed: 0x100 opt: 0x0
Apr 16 17:33:11 pat pluto[28951]: | ***parse ISAKMP Hash Payload:
Apr 16 17:33:11 pat pluto[28951]: | next payload type: ISAKMP_NEXT_NONE
Apr 16 17:33:11 pat pluto[28951]: | length: 24
Apr 16 17:33:11 pat pluto[28951]: | removing 24 bytes of padding
Apr 16 17:33:11 pat pluto[28951]: | HASH(3) computed: b6 bf 83 11 d0
49 28 18 15 2b b4 81 cc 16 32 3b
Apr 16 17:33:11 pat pluto[28951]: | HASH(3) computed: 2e fd 36 da
Apr 16 17:33:11 pat pluto[28951]: | install_ipsec_sa() for #2: outbound only
Apr 16 17:33:11 pat pluto[28951]: | route owner of "L2TP-PSK-CLIENTS"[1]
93.154.254.88 unrouted: NULL; eroute owner: NULL
Apr 16 17:33:11 pat pluto[28951]: | could_route called for
L2TP-PSK-CLIENTS (kind=CK_INSTANCE)
Apr 16 17:33:11 pat pluto[28951]: | sr for #2: unrouted
Apr 16 17:33:11 pat pluto[28951]: | route owner of "L2TP-PSK-CLIENTS"[1]
93.154.254.88 unrouted: NULL; eroute owner: NULL
Apr 16 17:33:11 pat pluto[28951]: | route_and_eroute with c:
L2TP-PSK-CLIENTS (next: none) ero:null esr:{(nil)} ro:null rosr:{(nil)}
and state: 2
Apr 16 17:33:11 pat pluto[28951]: | eroute_connection add eroute
193.59.3.10/32:1701 --17-> 93.154.254.88/32:0 =>
esp.28b3177@93.154.254.88 (raw_eroute)
Apr 16 17:33:11 pat pluto[28951]: | raw_eroute result=1
Apr 16 17:33:11 pat pluto[28951]: | command executing up-host
Apr 16 17:33:11 pat pluto[28951]: | executing up-host: 2>&1
PLUTO_VERB='up-host' PLUTO_VERSION='2.0'
PLUTO_CONNECTION='L2TP-PSK-CLIENTS' PLUTO_INTERFACE='eth0'
PLUTO_NEXT_HOP='93.154.254.88' PLUTO_ME='193.59.3.10'
PLUTO_MY_ID='193.59.3.10' PLUTO_MY_CLIENT='193.59.3.10/32'
PLUTO_MY_CLIENT_NET='193.59.3.10' PLUTO_MY_CLIENT_MASK='255.255.255.255'
PLUTO_MY_PORT='1701' PLUTO_MY_PROTOCOL='17' PLUTO_PEER='93.154.254.88'
PLUTO_PEER_ID='93.154.254.88' PLUTO_PEER_CLIENT='93.154.254.88/32'
PLUTO_PEER_CLIENT_NET='93.154.254.88'
PLUTO_PEER_CLIENT_MASK='255.255.255.255' PLUTO_PEER_PORT='0'
PLUTO_PEER_PROTOCOL='17' PLUTO_PEER_CA='' PLUTO_STACK='netkey'
PLUTO_CONN_POLICY='PSK+ENCRYPT+DONTREKEY+IKEv2ALLOW'
PLUTO_XAUTH_USERNAME='' PLUTO_CISCO_DNS_INFO=''
PLUTO_CISCO_DOMAIN_INFO='' PLUTO_PEER_BANNER='' ipsec _updown
Apr 16 17:33:11 pat pluto[28951]: | popen(): cmd is 759 chars long
Apr 16 17:33:11 pat pluto[28951]: | cmd( 0):2>&1 PLUTO_VERB='up-host'
PLUTO_VERSION='2.0' PLUTO_CONNECTION='L2TP-PSK-CLIENTS:
Apr 16 17:33:11 pat pluto[28951]: | cmd( 80):' PLUTO_INTERFACE='eth0'
PLUTO_NEXT_HOP='93.154.254.88' PLUTO_ME='193.59.3.10' :
Apr 16 17:33:11 pat pluto[28951]: | cmd( 160):PLUTO_MY_ID='193.59.3.10'
PLUTO_MY_CLIENT='193.59.3.10/32' PLUTO_MY_CLIENT_NET:
Apr 16 17:33:11 pat pluto[28951]: | cmd( 240):='193.59.3.10'
PLUTO_MY_CLIENT_MASK='255.255.255.255' PLUTO_MY_PORT='1701' PLUT:
Apr 16 17:33:11 pat pluto[28951]: | cmd( 320):O_MY_PROTOCOL='17'
PLUTO_PEER='93.154.254.88' PLUTO_PEER_ID='93.154.254.88' PLUT:
Apr 16 17:33:11 pat pluto[28951]: | cmd(
400):O_PEER_CLIENT='93.154.254.88/32'
PLUTO_PEER_CLIENT_NET='93.154.254.88' PLUTO_PEE:
Apr 16 17:33:11 pat pluto[28951]: | cmd(
480):R_CLIENT_MASK='255.255.255.255' PLUTO_PEER_PORT='0'
PLUTO_PEER_PROTOCOL='17' PLU:
Apr 16 17:33:11 pat pluto[28951]: | cmd( 560):TO_PEER_CA=''
PLUTO_STACK='netkey' PLUTO_CONN_POLICY='PSK+ENCRYPT+DONTREKEY+IKE:
Apr 16 17:33:11 pat pluto[28951]: | cmd( 640):v2ALLOW'
PLUTO_XAUTH_USERNAME='' PLUTO_CISCO_DNS_INFO='' PLUTO_CISCO_DOMAIN_INF:
Apr 16 17:33:11 pat pluto[28951]: | cmd( 720):O='' PLUTO_PEER_BANNER=''
ipsec _updown:
Apr 16 17:33:11 pat pluto[28951]: | route_and_eroute: firewall_notified:
true
Apr 16 17:33:11 pat pluto[28951]: | command executing prepare-host
Apr 16 17:33:11 pat pluto[28951]: | executing prepare-host: 2>&1
PLUTO_VERB='prepare-host' PLUTO_VERSION='2.0'
PLUTO_CONNECTION='L2TP-PSK-CLIENTS' PLUTO_INTERFACE='eth0'
PLUTO_NEXT_HOP='93.154.254.88' PLUTO_ME='193.59.3.10'
PLUTO_MY_ID='193.59.3.10' PLUTO_MY_CLIENT='193.59.3.10/32'
PLUTO_MY_CLIENT_NET='193.59.3.10' PLUTO_MY_CLIENT_MASK='255.255.255.255'
PLUTO_MY_PORT='1701' PLUTO_MY_PROTOCOL='17' PLUTO_PEER='93.154.254.88'
PLUTO_PEER_ID='93.154.254.88' PLUTO_PEER_CLIENT='93.154.254.88/32'
PLUTO_PEER_CLIENT_NET='93.154.254.88'
PLUTO_PEER_CLIENT_MASK='255.255.255.255' PLUTO_PEER_PORT='0'
PLUTO_PEER_PROTOCOL='17' PLUTO_PEER_CA='' PLUTO_STACK='netkey'
PLUTO_CONN_POLICY='PSK+ENCRYPT+DONTREKEY+IKEv2ALLOW'
PLUTO_XAUTH_USERNAME='' PLUTO_CISCO_DNS_INFO=''
PLUTO_CISCO_DOMAIN_INFO='' PLUTO_PEER_BANNER='' ipsec _updown
Apr 16 17:33:11 pat pluto[28951]: | popen(): cmd is 764 chars long
Apr 16 17:33:11 pat pluto[28951]: | cmd( 0):2>&1
PLUTO_VERB='prepare-host' PLUTO_VERSION='2.0' PLUTO_CONNECTION='L2TP-PSK-CL:
Apr 16 17:33:11 pat pluto[28951]: | cmd( 80):IENTS'
PLUTO_INTERFACE='eth0' PLUTO_NEXT_HOP='93.154.254.88' PLUTO_ME='193.59.33:
Apr 16 17:33:11 pat pluto[28951]: | cmd( 160):.10'
PLUTO_MY_ID='193.59.3.10' PLUTO_MY_CLIENT='193.59.3.10/32' PLUTO_MY_CLIEN:
Apr 16 17:33:11 pat pluto[28951]: | cmd( 240):T_NET='193.59.3.10'
PLUTO_MY_CLIENT_MASK='255.255.255.255' PLUTO_MY_PORT='1701':
Apr 16 17:33:11 pat pluto[28951]: | cmd( 320): PLUTO_MY_PROTOCOL='17'
PLUTO_PEER='93.154.254.88' PLUTO_PEER_ID='93.154.254.88':
Apr 16 17:33:11 pat pluto[28951]: | cmd( 400):
PLUTO_PEER_CLIENT='93.154.254.88/32'
PLUTO_PEER_CLIENT_NET='93.154.254.88' PLUT:
Apr 16 17:33:11 pat pluto[28951]: | cmd(
480):O_PEER_CLIENT_MASK='255.255.255.255' PLUTO_PEER_PORT='0'
PLUTO_PEER_PROTOCOL='17:
Apr 16 17:33:11 pat pluto[28951]: | cmd( 560):' PLUTO_PEER_CA=''
PLUTO_STACK='netkey' PLUTO_CONN_POLICY='PSK+ENCRYPT+DONTREKE:
Apr 16 17:33:11 pat pluto[28951]: | cmd( 640):Y+IKEv2ALLOW'
PLUTO_XAUTH_USERNAME='' PLUTO_CISCO_DNS_INFO='' PLUTO_CISCO_DOMAI:
Apr 16 17:33:11 pat pluto[28951]: | cmd( 720):N_INFO=''
PLUTO_PEER_BANNER='' ipsec _updown:
Apr 16 17:33:11 pat pluto[28951]: | command executing route-host
Apr 16 17:33:11 pat pluto[28951]: | executing route-host: 2>&1
PLUTO_VERB='route-host' PLUTO_VERSION='2.0'
PLUTO_CONNECTION='L2TP-PSK-CLIENTS' PLUTO_INTERFACE='eth0'
PLUTO_NEXT_HOP='93.154.254.88' PLUTO_ME='193.59.3.10'
PLUTO_MY_ID='193.59.3.10' PLUTO_MY_CLIENT='193.59.3.10/32'
PLUTO_MY_CLIENT_NET='193.59.3.10' PLUTO_MY_CLIENT_MASK='255.255.255.255'
PLUTO_MY_PORT='1701' PLUTO_MY_PROTOCOL='17' PLUTO_PEER='93.154.254.88'
PLUTO_PEER_ID='93.154.254.88' PLUTO_PEER_CLIENT='93.154.254.88/32'
PLUTO_PEER_CLIENT_NET='93.154.254.88'
PLUTO_PEER_CLIENT_MASK='255.255.255.255' PLUTO_PEER_PORT='0'
PLUTO_PEER_PROTOCOL='17' PLUTO_PEER_CA='' PLUTO_STACK='netkey'
PLUTO_CONN_POLICY='PSK+ENCRYPT+DONTREKEY+IKEv2ALLOW'
PLUTO_XAUTH_USERNAME='' PLUTO_CISCO_DNS_INFO=''
PLUTO_CISCO_DOMAIN_INFO='' PLUTO_PEER_BANNER='' ipsec _updown
Apr 16 17:33:11 pat pluto[28951]: | popen(): cmd is 762 chars long
Apr 16 17:33:11 pat pluto[28951]: | cmd( 0):2>&1
PLUTO_VERB='route-host' PLUTO_VERSION='2.0' PLUTO_CONNECTION='L2TP-PSK-CLIE:
Apr 16 17:33:11 pat pluto[28951]: | cmd( 80):NTS'
PLUTO_INTERFACE='eth0' PLUTO_NEXT_HOP='93.154.254.88' PLUTO_ME='193.59.33.1:
Apr 16 17:33:11 pat pluto[28951]: | cmd( 160):0'
PLUTO_MY_ID='193.59.3.10' PLUTO_MY_CLIENT='193.59.3.10/32' PLUTO_MY_CLIENT_:
Apr 16 17:33:11 pat pluto[28951]: | cmd( 240):NET='193.59.3.10'
PLUTO_MY_CLIENT_MASK='255.255.255.255' PLUTO_MY_PORT='1701' P:
Apr 16 17:33:11 pat pluto[28951]: | cmd( 320):LUTO_MY_PROTOCOL='17'
PLUTO_PEER='93.154.254.88' PLUTO_PEER_ID='93.154.254.88' P:
Apr 16 17:33:11 pat pluto[28951]: | cmd(
400):LUTO_PEER_CLIENT='93.154.254.88/32'
PLUTO_PEER_CLIENT_NET='93.154.254.88' PLUTO_:
Apr 16 17:33:11 pat pluto[28951]: | cmd(
480):PEER_CLIENT_MASK='255.255.255.255' PLUTO_PEER_PORT='0'
PLUTO_PEER_PROTOCOL='17' :
Apr 16 17:33:11 pat pluto[28951]: | cmd( 560):PLUTO_PEER_CA=''
PLUTO_STACK='netkey' PLUTO_CONN_POLICY='PSK+ENCRYPT+DONTREKEY+:
Apr 16 17:33:11 pat pluto[28951]: | cmd( 640):IKEv2ALLOW'
PLUTO_XAUTH_USERNAME='' PLUTO_CISCO_DNS_INFO='' PLUTO_CISCO_DOMAIN_:
Apr 16 17:33:11 pat pluto[28951]: | cmd( 720):INFO=''
PLUTO_PEER_BANNER='' ipsec _updown:
Apr 16 17:33:11 pat pluto[28951]: | route_and_eroute: instance
"L2TP-PSK-CLIENTS"[1] 93.154.254.88, setting eroute_owner
{spd=0x815684c,sr=0x815684c} to #2 (was #0) (newest_ipsec_sa=#0)
Apr 16 17:33:11 pat pluto[28951]: | inI2: instance L2TP-PSK-CLIENTS[1],
setting newest_ipsec_sa to #2 (was #0) (spd.eroute=#2)
Apr 16 17:33:11 pat pluto[28951]: | ICOOKIE: fd 5a 54 0a f7 ba 37 6b
Apr 16 17:33:11 pat pluto[28951]: | RCOOKIE: 50 80 75 74 f1 4c 26 93
Apr 16 17:33:11 pat pluto[28951]: | state hash entry 25
Apr 16 17:33:11 pat pluto[28951]: | v1 peer and cookies match on #2,
provided msgid 00000000 vs b65f9109
Apr 16 17:33:11 pat pluto[28951]: | v1 peer and cookies match on #1,
provided msgid 00000000 vs 00000000
Apr 16 17:33:11 pat pluto[28951]: | v1 state object #1 found, in
STATE_MAIN_R3
Apr 16 17:33:11 pat pluto[28951]: "L2TP-PSK-CLIENTS"[1] 93.154.254.88
#2: Dead Peer Detection (RFC 3706): enabled
Apr 16 17:33:11 pat pluto[28951]: | state: 2 requesting event none to be
deleted by
/build/buildd-openswan_2.6.28+dfsg-5+squeeze1-i386-OOSWut/openswan-2.6.28+dfsg/programs/pluto/dpd.c:159
Apr 16 17:33:11 pat pluto[28951]: | inserting event EVENT_DPD, timeout
in 40 seconds for #2
Apr 16 17:33:11 pat pluto[28951]: | event added after event EVENT_DPD for #1
Apr 16 17:33:11 pat pluto[28951]: | state: 1 requesting event EVENT_DPD
to be deleted by
/build/buildd-openswan_2.6.28+dfsg-5+squeeze1-i386-OOSWut/openswan-2.6.28+dfsg/programs/pluto/dpd.c:171
Apr 16 17:33:11 pat pluto[28951]: | complete state transition with STF_OK
Apr 16 17:33:11 pat pluto[28951]: "L2TP-PSK-CLIENTS"[1] 93.154.254.88
#2: transition from state STATE_QUICK_R1 to state STATE_QUICK_R2
Apr 16 17:33:11 pat pluto[28951]: | deleting event for #2
Apr 16 17:33:11 pat pluto[28951]: | inserting event EVENT_SA_EXPIRE,
timeout in 28800 seconds for #2
Apr 16 17:33:11 pat pluto[28951]: | event added after event
EVENT_SA_EXPIRE for #1
Apr 16 17:33:11 pat pluto[28951]: "L2TP-PSK-CLIENTS"[1] 93.154.254.88
#2: STATE_QUICK_R2: IPsec SA established transport mode {ESP=>0x028b3177
<0xa728160f xfrm=AES_256-HMAC_SHA1 NATOA=none NATD=none DPD=enabled}
Apr 16 17:33:11 pat pluto[28951]: | modecfg pull: noquirk policy:push
not-client
Apr 16 17:33:11 pat pluto[28951]: | phase 1 is done, looking for phase 2
to unpend
Apr 16 17:33:11 pat pluto[28951]: | * processed 0 messages from
cryptographic helpers
Apr 16 17:33:11 pat pluto[28951]: | next event EVENT_PENDING_DDNS in 5
seconds
Apr 16 17:33:11 pat pluto[28951]: | next event EVENT_PENDING_DDNS in 5
seconds
Apr 16 17:33:16 pat pluto[28951]: |
Apr 16 17:33:16 pat pluto[28951]: | next event EVENT_PENDING_DDNS in 0
seconds
Apr 16 17:33:16 pat pluto[28951]: | *time to handle event
Apr 16 17:33:16 pat pluto[28951]: | handling event EVENT_PENDING_DDNS
Apr 16 17:33:16 pat pluto[28951]: | event after this is
EVENT_NAT_T_KEEPALIVE in 14 seconds
Apr 16 17:33:16 pat pluto[28951]: | inserting event EVENT_PENDING_DDNS,
timeout in 60 seconds
Apr 16 17:33:16 pat pluto[28951]: | event added after event EVENT_DPD for #2
Apr 16 17:33:16 pat pluto[28951]: | next event EVENT_NAT_T_KEEPALIVE in
14 seconds
Apr 16 17:33:30 pat pluto[28951]: |
Apr 16 17:33:30 pat pluto[28951]: | next event EVENT_NAT_T_KEEPALIVE in
0 seconds
Apr 16 17:33:30 pat pluto[28951]: | *time to handle event
Apr 16 17:33:30 pat pluto[28951]: | handling event EVENT_NAT_T_KEEPALIVE
Apr 16 17:33:30 pat pluto[28951]: | event after this is EVENT_DPD in 21
seconds
Apr 16 17:33:30 pat pluto[28951]: | processing connection
L2TP-PSK-CLIENTS[1] 93.154.254.88
Apr 16 17:33:30 pat pluto[28951]: | processing connection
L2TP-PSK-CLIENTS[1] 93.154.254.88
Apr 16 17:33:30 pat pluto[28951]: | next event EVENT_DPD in 21 seconds
for #2
Apr 16 17:33:51 pat pluto[28951]: |
Apr 16 17:33:51 pat pluto[28951]: | next event EVENT_DPD in 0 seconds for #2
Apr 16 17:33:51 pat pluto[28951]: | *time to handle event
Apr 16 17:33:51 pat pluto[28951]: | handling event EVENT_DPD
Apr 16 17:33:51 pat pluto[28951]: | event after this is
EVENT_PENDING_DDNS in 25 seconds
Apr 16 17:33:51 pat pluto[28951]: | processing connection
L2TP-PSK-CLIENTS[1] 93.154.254.88
Apr 16 17:33:51 pat pluto[28951]: | DPD: processing for state #2
("L2TP-PSK-CLIENTS")
Apr 16 17:33:51 pat pluto[28951]: | get esp.a728160f@193.59.3.10
Apr 16 17:33:51 pat pluto[28951]: | DPD: out event not sent, phase 2 active
Apr 16 17:33:51 pat pluto[28951]: | inserting event EVENT_DPD, timeout
in 40 seconds for #2
Apr 16 17:33:51 pat pluto[28951]: | event added after event
EVENT_PENDING_PHASE2
Apr 16 17:33:51 pat pluto[28951]: | next event EVENT_PENDING_DDNS in 25
seconds
Apr 16 17:34:16 pat pluto[28951]: |
Apr 16 17:34:16 pat pluto[28951]: | next event EVENT_PENDING_DDNS in 0
seconds
Apr 16 17:34:16 pat pluto[28951]: | *time to handle event
Apr 16 17:34:16 pat pluto[28951]: | handling event EVENT_PENDING_DDNS
Apr 16 17:34:16 pat pluto[28951]: | event after this is
EVENT_PENDING_PHASE2 in 0 seconds
Apr 16 17:34:16 pat pluto[28951]: | inserting event EVENT_PENDING_DDNS,
timeout in 60 seconds
Apr 16 17:34:16 pat pluto[28951]: | event added after event EVENT_DPD for #2
Apr 16 17:34:16 pat pluto[28951]: | handling event EVENT_PENDING_PHASE2
Apr 16 17:34:16 pat pluto[28951]: | event after this is EVENT_DPD in 15
seconds
Apr 16 17:34:16 pat pluto[28951]: | inserting event
EVENT_PENDING_PHASE2, timeout in 120 seconds
Apr 16 17:34:16 pat pluto[28951]: | event added after event
EVENT_PENDING_DDNS
Apr 16 17:34:16 pat pluto[28951]: | pending review: connection
"L2TP-PSK-CLIENTS" was not up, skipped
Apr 16 17:34:16 pat pluto[28951]: | pending review: connection
"L2TP-PSK-CLIENTS" was not up, skipped
Apr 16 17:34:16 pat pluto[28951]: | next event EVENT_DPD in 15 seconds
for #2
Apr 16 17:34:31 pat pluto[28951]: |
Apr 16 17:34:31 pat pluto[28951]: | next event EVENT_DPD in 0 seconds for #2
Apr 16 17:34:31 pat pluto[28951]: | *time to handle event
Apr 16 17:34:31 pat pluto[28951]: | handling event EVENT_DPD
Apr 16 17:34:31 pat pluto[28951]: | event after this is
EVENT_PENDING_DDNS in 45 seconds
Apr 16 17:34:31 pat pluto[28951]: | processing connection
L2TP-PSK-CLIENTS[1] 93.154.254.88
Apr 16 17:34:31 pat pluto[28951]: | DPD: processing for state #2
("L2TP-PSK-CLIENTS")
Apr 16 17:34:31 pat pluto[28951]: | get esp.a728160f@193.59.3.10
Apr 16 17:34:31 pat pluto[28951]: | DPD: out event not sent, phase 2 active
Apr 16 17:34:31 pat pluto[28951]: | inserting event EVENT_DPD, timeout
in 40 seconds for #2
Apr 16 17:34:31 pat pluto[28951]: | event added at head of queue
Apr 16 17:34:31 pat pluto[28951]: | next event EVENT_DPD in 40 seconds
for #2
Apr 16 17:35:11 pat pluto[28951]: |
Apr 16 17:35:11 pat pluto[28951]: | next event EVENT_DPD in 0 seconds for #2
Apr 16 17:35:11 pat pluto[28951]: | *time to handle event
Apr 16 17:35:11 pat pluto[28951]: | handling event EVENT_DPD
Apr 16 17:35:11 pat pluto[28951]: | event after this is
EVENT_PENDING_DDNS in 5 seconds
Apr 16 17:35:11 pat pluto[28951]: | processing connection
L2TP-PSK-CLIENTS[1] 93.154.254.88
Apr 16 17:35:11 pat pluto[28951]: | DPD: processing for state #2
("L2TP-PSK-CLIENTS")
Apr 16 17:35:11 pat pluto[28951]: | get esp.a728160f@193.59.3.10
Apr 16 17:35:11 pat pluto[28951]: | DPD: out event not sent, phase 2 active
Apr 16 17:35:11 pat pluto[28951]: | inserting event EVENT_DPD, timeout
in 40 seconds for #2
Apr 16 17:35:11 pat pluto[28951]: | event added after event
EVENT_PENDING_DDNS
Apr 16 17:35:11 pat pluto[28951]: | next event EVENT_PENDING_DDNS in 5
seconds
Apr 16 17:35:16 pat pluto[28951]: |
Apr 16 17:35:16 pat pluto[28951]: | next event EVENT_PENDING_DDNS in 0
seconds
Apr 16 17:35:16 pat pluto[28951]: | *time to handle event
Apr 16 17:35:16 pat pluto[28951]: | handling event EVENT_PENDING_DDNS
Apr 16 17:35:16 pat pluto[28951]: | event after this is EVENT_DPD in 35
seconds
Apr 16 17:35:16 pat pluto[28951]: | inserting event EVENT_PENDING_DDNS,
timeout in 60 seconds
Apr 16 17:35:16 pat pluto[28951]: | event added after event EVENT_DPD for #2
Apr 16 17:35:16 pat pluto[28951]: | next event EVENT_DPD in 35 seconds
for #2
Apr 16 17:35:51 pat pluto[28951]: |
Apr 16 17:35:51 pat pluto[28951]: | next event EVENT_DPD in 0 seconds for #2
Apr 16 17:35:51 pat pluto[28951]: | *time to handle event
Apr 16 17:35:51 pat pluto[28951]: | handling event EVENT_DPD
Apr 16 17:35:51 pat pluto[28951]: | event after this is
EVENT_PENDING_DDNS in 25 seconds
Apr 16 17:35:51 pat pluto[28951]: | processing connection
L2TP-PSK-CLIENTS[1] 93.154.254.88
Apr 16 17:35:51 pat pluto[28951]: | DPD: processing for state #2
("L2TP-PSK-CLIENTS")
Apr 16 17:35:51 pat pluto[28951]: | get esp.a728160f@193.59.3.10
Apr 16 17:35:51 pat pluto[28951]: | DPD: out event not sent, phase 2 active
Apr 16 17:35:51 pat pluto[28951]: | inserting event EVENT_DPD, timeout
in 40 seconds for #2
Apr 16 17:35:51 pat pluto[28951]: | event added after event
EVENT_PENDING_PHASE2
Apr 16 17:35:51 pat pluto[28951]: | next event EVENT_PENDING_DDNS in 25
seconds
Apr 16 17:36:16 pat pluto[28951]: |
Apr 16 17:36:16 pat pluto[28951]: | next event EVENT_PENDING_DDNS in 0
seconds
Apr 16 17:36:16 pat pluto[28951]: | *time to handle event
Apr 16 17:36:16 pat pluto[28951]: | handling event EVENT_PENDING_DDNS
Apr 16 17:36:16 pat pluto[28951]: | event after this is
EVENT_PENDING_PHASE2 in 0 seconds
Apr 16 17:36:16 pat pluto[28951]: | inserting event EVENT_PENDING_DDNS,
timeout in 60 seconds
Apr 16 17:36:16 pat pluto[28951]: | event added after event EVENT_DPD for #2
Apr 16 17:36:16 pat pluto[28951]: | handling event EVENT_PENDING_PHASE2
Apr 16 17:36:16 pat pluto[28951]: | event after this is EVENT_DPD in 15
seconds
Apr 16 17:36:16 pat pluto[28951]: | inserting event
EVENT_PENDING_PHASE2, timeout in 120 seconds
Apr 16 17:36:16 pat pluto[28951]: | event added after event
EVENT_PENDING_DDNS
Apr 16 17:36:16 pat pluto[28951]: | pending review: connection
"L2TP-PSK-CLIENTS" was not up, skipped
Apr 16 17:36:16 pat pluto[28951]: | pending review: connection
"L2TP-PSK-CLIENTS" was not up, skipped
Apr 16 17:36:16 pat pluto[28951]: | next event EVENT_DPD in 15 seconds
for #2
Apr 16 17:36:31 pat pluto[28951]: |
Apr 16 17:36:31 pat pluto[28951]: | next event EVENT_DPD in 0 seconds for #2
Apr 16 17:36:31 pat pluto[28951]: | *time to handle event
Apr 16 17:36:31 pat pluto[28951]: | handling event EVENT_DPD
Apr 16 17:36:31 pat pluto[28951]: | event after this is
EVENT_PENDING_DDNS in 45 seconds
Apr 16 17:36:31 pat pluto[28951]: | processing connection
L2TP-PSK-CLIENTS[1] 93.154.254.88
Apr 16 17:36:31 pat pluto[28951]: | DPD: processing for state #2
("L2TP-PSK-CLIENTS")
Apr 16 17:36:31 pat pluto[28951]: | get esp.a728160f@193.59.3.10
Apr 16 17:36:31 pat pluto[28951]: | DPD: out event not sent, phase 2 active
Apr 16 17:36:31 pat pluto[28951]: | inserting event EVENT_DPD, timeout
in 40 seconds for #2
Apr 16 17:36:31 pat pluto[28951]: | event added at head of queue
Apr 16 17:36:31 pat pluto[28951]: | next event EVENT_DPD in 40 seconds
for #2
Apr 16 17:37:11 pat pluto[28951]: |
Apr 16 17:37:11 pat pluto[28951]: | next event EVENT_DPD in 0 seconds for #2
Apr 16 17:37:11 pat pluto[28951]: | *time to handle event
Apr 16 17:37:11 pat pluto[28951]: | handling event EVENT_DPD
Apr 16 17:37:11 pat pluto[28951]: | event after this is
EVENT_PENDING_DDNS in 5 seconds
Apr 16 17:37:11 pat pluto[28951]: | processing connection
L2TP-PSK-CLIENTS[1] 93.154.254.88
Apr 16 17:37:11 pat pluto[28951]: | DPD: processing for state #2
("L2TP-PSK-CLIENTS")
Apr 16 17:37:11 pat pluto[28951]: | get esp.a728160f@193.59.3.10
Apr 16 17:37:11 pat pluto[28951]: | inserting event EVENT_DPD, timeout
in 40 seconds for #2
Apr 16 17:37:11 pat pluto[28951]: | event added after event
EVENT_PENDING_DDNS
Apr 16 17:37:11 pat pluto[28951]: | DPD: scheduling timeout to 130
Apr 16 17:37:11 pat pluto[28951]: | state: 1 requesting event none to be
deleted by
/build/buildd-openswan_2.6.28+dfsg-5+squeeze1-i386-OOSWut/openswan-2.6.28+dfsg/programs/pluto/dpd.c:192
Apr 16 17:37:11 pat pluto[28951]: | inserting event EVENT_DPD_TIMEOUT,
timeout in 130 seconds for #1
Apr 16 17:37:11 pat pluto[28951]: | event added after event
EVENT_PENDING_PHASE2
Apr 16 17:37:11 pat pluto[28951]: | DPD: sending R_U_THERE 2658074624 to
93.154.254.88:500 (state #1)
Apr 16 17:37:11 pat pluto[28951]: | **emit ISAKMP Message:
Apr 16 17:37:11 pat pluto[28951]: | initiator cookie:
Apr 16 17:37:11 pat pluto[28951]: | fd 5a 54 0a f7 ba 37 6b
Apr 16 17:37:11 pat pluto[28951]: | responder cookie:
Apr 16 17:37:11 pat pluto[28951]: | 50 80 75 74 f1 4c 26 93
Apr 16 17:37:11 pat pluto[28951]: | next payload type: ISAKMP_NEXT_HASH
Apr 16 17:37:11 pat pluto[28951]: | ISAKMP version: ISAKMP Version
1.0 (rfc2407)
Apr 16 17:37:11 pat pluto[28951]: | exchange type: ISAKMP_XCHG_INFO
Apr 16 17:37:11 pat pluto[28951]: | flags: ISAKMP_FLAG_ENCRYPTION
Apr 16 17:37:11 pat pluto[28951]: | message ID: 9a d6 f6 9d
Apr 16 17:37:11 pat pluto[28951]: | ***emit ISAKMP Hash Payload:
Apr 16 17:37:11 pat pluto[28951]: | next payload type: ISAKMP_NEXT_N
Apr 16 17:37:11 pat pluto[28951]: | emitting 20 zero bytes of HASH into
ISAKMP Hash Payload
Apr 16 17:37:11 pat pluto[28951]: | emitting length of ISAKMP Hash
Payload: 24
Apr 16 17:37:11 pat pluto[28951]: | ***emit ISAKMP Notification Payload:
Apr 16 17:37:11 pat pluto[28951]: | next payload type: ISAKMP_NEXT_NONE
Apr 16 17:37:11 pat pluto[28951]: | DOI: ISAKMP_DOI_IPSEC
Apr 16 17:37:11 pat pluto[28951]: | protocol ID: 1
Apr 16 17:37:11 pat pluto[28951]: | SPI size: 16
Apr 16 17:37:11 pat pluto[28951]: | Notify Message Type: R_U_THERE
Apr 16 17:37:11 pat pluto[28951]: | emitting 8 raw bytes of notify
icookie into ISAKMP Notification Payload
Apr 16 17:37:11 pat pluto[28951]: | notify icookie fd 5a 54 0a f7 ba 37 6b
Apr 16 17:37:11 pat pluto[28951]: | emitting 8 raw bytes of notify
rcookie into ISAKMP Notification Payload
Apr 16 17:37:11 pat pluto[28951]: | notify rcookie 50 80 75 74 f1 4c 26 93
Apr 16 17:37:11 pat pluto[28951]: | emitting 4 raw bytes of notify data
into ISAKMP Notification Payload
Apr 16 17:37:11 pat pluto[28951]: | notify data 00 00 6f 9e
Apr 16 17:37:11 pat pluto[28951]: | emitting length of ISAKMP
Notification Payload: 32
Apr 16 17:37:11 pat pluto[28951]: | HASH computed:
Apr 16 17:37:11 pat pluto[28951]: | 7a 60 91 9a 0c 5f d3 85 83 eb fe
03 ec f9 67 d6
Apr 16 17:37:11 pat pluto[28951]: | 40 0c 73 75
Apr 16 17:37:11 pat pluto[28951]: | last Phase 1 IV: ac 67 17 24 05 39
ab a2 4f 07 b4 13 2d 95 6f ad
Apr 16 17:37:11 pat pluto[28951]: | current Phase 1 IV: ac 67 17 24 05
39 ab a2 4f 07 b4 13 2d 95 6f ad
Apr 16 17:37:11 pat pluto[28951]: | computed Phase 2 IV:
Apr 16 17:37:11 pat pluto[28951]: | b1 a1 3f 18 b0 1a a1 f4 a1 25 09
f4 b8 c8 76 27
Apr 16 17:37:11 pat pluto[28951]: | 96 e9 55 37
Apr 16 17:37:11 pat pluto[28951]: | encrypting:
Apr 16 17:37:11 pat pluto[28951]: | 0b 00 00 18 7a 60 91 9a 0c 5f d3
85 83 eb fe 03
Apr 16 17:37:11 pat pluto[28951]: | ec f9 67 d6 40 0c 73 75 00 00 00
20 00 00 00 01
Apr 16 17:37:11 pat pluto[28951]: | 01 10 8d 28 fd 5a 54 0a f7 ba 37
6b 50 80 75 74
Apr 16 17:37:11 pat pluto[28951]: | f1 4c 26 93 00 00 6f 9e
Apr 16 17:37:11 pat pluto[28951]: | IV:
Apr 16 17:37:11 pat pluto[28951]: | b1 a1 3f 18 b0 1a a1 f4 a1 25 09
f4 b8 c8 76 27
Apr 16 17:37:11 pat pluto[28951]: | 96 e9 55 37
Apr 16 17:37:11 pat pluto[28951]: | unpadded size is: 56
Apr 16 17:37:11 pat pluto[28951]: | emitting 8 zero bytes of encryption
padding into ISAKMP Message
Apr 16 17:37:11 pat pluto[28951]: | encrypting 64 using OAKLEY_AES_CBC
Apr 16 17:37:11 pat pluto[28951]: | next IV: 0c d3 d3 27 88 c0 d5 a2
dd 76 2a 55 df ac 4c b8
Apr 16 17:37:11 pat pluto[28951]: | emitting length of ISAKMP Message: 92
Apr 16 17:37:11 pat pluto[28951]: | sending 92 bytes for ISAKMP notify
through eth0:500 to 93.154.254.88:500 (using #1)
Apr 16 17:37:11 pat pluto[28951]: | fd 5a 54 0a f7 ba 37 6b 50 80 75
74 f1 4c 26 93
Apr 16 17:37:11 pat pluto[28951]: | 08 10 05 01 9a d6 f6 9d 00 00 00
5c c9 9b b6 1f
Apr 16 17:37:11 pat pluto[28951]: | 96 3b 84 87 f7 af 8b 75 0d 98 f2
9d db 51 b9 92
Apr 16 17:37:11 pat pluto[28951]: | d1 44 9e 5d ca b6 9b 82 61 d2 e8
da 07 2c 5e df
Apr 16 17:37:11 pat pluto[28951]: | 27 76 d7 9e de 89 ee a5 ef ac 38
f9 0c d3 d3 27
Apr 16 17:37:11 pat pluto[28951]: | 88 c0 d5 a2 dd 76 2a 55 df ac 4c b8
Apr 16 17:37:11 pat pluto[28951]: | next event EVENT_PENDING_DDNS in 5
seconds
Apr 16 17:37:16 pat pluto[28951]: |
Apr 16 17:37:16 pat pluto[28951]: | next event EVENT_PENDING_DDNS in 0
seconds
Apr 16 17:37:16 pat pluto[28951]: | *time to handle event
Apr 16 17:37:16 pat pluto[28951]: | handling event EVENT_PENDING_DDNS
Apr 16 17:37:16 pat pluto[28951]: | event after this is EVENT_DPD in 35
seconds
Apr 16 17:37:16 pat pluto[28951]: | inserting event EVENT_PENDING_DDNS,
timeout in 60 seconds
Apr 16 17:37:16 pat pluto[28951]: | event added after event EVENT_DPD for #2
Apr 16 17:37:16 pat pluto[28951]: | next event EVENT_DPD in 35 seconds
for #2
Apr 16 17:37:51 pat pluto[28951]: |
Apr 16 17:37:51 pat pluto[28951]: | next event EVENT_DPD in 0 seconds for #2
Apr 16 17:37:51 pat pluto[28951]: | *time to handle event
Apr 16 17:37:51 pat pluto[28951]: | handling event EVENT_DPD
Apr 16 17:37:51 pat pluto[28951]: | event after this is
EVENT_PENDING_DDNS in 25 seconds
Apr 16 17:37:51 pat pluto[28951]: | processing connection
L2TP-PSK-CLIENTS[1] 93.154.254.88
Apr 16 17:37:51 pat pluto[28951]: | DPD: processing for state #2
("L2TP-PSK-CLIENTS")
Apr 16 17:37:51 pat pluto[28951]: | get esp.a728160f@193.59.3.10
Apr 16 17:37:51 pat pluto[28951]: | inserting event EVENT_DPD, timeout
in 40 seconds for #2
Apr 16 17:37:51 pat pluto[28951]: | event added after event
EVENT_PENDING_PHASE2
Apr 16 17:37:51 pat pluto[28951]: | DPD: sending R_U_THERE 2674851840 to
93.154.254.88:500 (state #1)
Apr 16 17:37:51 pat pluto[28951]: | **emit ISAKMP Message:
Apr 16 17:37:51 pat pluto[28951]: | initiator cookie:
Apr 16 17:37:51 pat pluto[28951]: | fd 5a 54 0a f7 ba 37 6b
Apr 16 17:37:51 pat pluto[28951]: | responder cookie:
Apr 16 17:37:51 pat pluto[28951]: | 50 80 75 74 f1 4c 26 93
Apr 16 17:37:51 pat pluto[28951]: | next payload type: ISAKMP_NEXT_HASH
Apr 16 17:37:51 pat pluto[28951]: | ISAKMP version: ISAKMP Version
1.0 (rfc2407)
Apr 16 17:37:51 pat pluto[28951]: | exchange type: ISAKMP_XCHG_INFO
Apr 16 17:37:51 pat pluto[28951]: | flags: ISAKMP_FLAG_ENCRYPTION
Apr 16 17:37:51 pat pluto[28951]: | message ID: b4 85 22 05
Apr 16 17:37:51 pat pluto[28951]: | ***emit ISAKMP Hash Payload:
Apr 16 17:37:51 pat pluto[28951]: | next payload type: ISAKMP_NEXT_N
Apr 16 17:37:51 pat pluto[28951]: | emitting 20 zero bytes of HASH into
ISAKMP Hash Payload
Apr 16 17:37:51 pat pluto[28951]: | emitting length of ISAKMP Hash
Payload: 24
Apr 16 17:37:51 pat pluto[28951]: | ***emit ISAKMP Notification Payload:
Apr 16 17:37:51 pat pluto[28951]: | next payload type: ISAKMP_NEXT_NONE
Apr 16 17:37:51 pat pluto[28951]: | DOI: ISAKMP_DOI_IPSEC
Apr 16 17:37:51 pat pluto[28951]: | protocol ID: 1
Apr 16 17:37:51 pat pluto[28951]: | SPI size: 16
Apr 16 17:37:51 pat pluto[28951]: | Notify Message Type: R_U_THERE
Apr 16 17:37:51 pat pluto[28951]: | emitting 8 raw bytes of notify
icookie into ISAKMP Notification Payload
Apr 16 17:37:51 pat pluto[28951]: | notify icookie fd 5a 54 0a f7 ba 37 6b
Apr 16 17:37:51 pat pluto[28951]: | emitting 8 raw bytes of notify
rcookie into ISAKMP Notification Payload
Apr 16 17:37:51 pat pluto[28951]: | notify rcookie 50 80 75 74 f1 4c 26 93
Apr 16 17:37:51 pat pluto[28951]: | emitting 4 raw bytes of notify data
into ISAKMP Notification Payload
Apr 16 17:37:51 pat pluto[28951]: | notify data 00 00 6f 9f
Apr 16 17:37:51 pat pluto[28951]: | emitting length of ISAKMP
Notification Payload: 32
Apr 16 17:37:51 pat pluto[28951]: | HASH computed:
Apr 16 17:37:51 pat pluto[28951]: | a4 83 fb ca 90 24 5e a4 bd bb fc
22 37 0f 82 9a
Apr 16 17:37:51 pat pluto[28951]: | 10 68 9e 42
Apr 16 17:37:51 pat pluto[28951]: | last Phase 1 IV: ac 67 17 24 05 39
ab a2 4f 07 b4 13 2d 95 6f ad
Apr 16 17:37:51 pat pluto[28951]: | current Phase 1 IV: ac 67 17 24 05
39 ab a2 4f 07 b4 13 2d 95 6f ad
Apr 16 17:37:51 pat pluto[28951]: | computed Phase 2 IV:
Apr 16 17:37:51 pat pluto[28951]: | 9b dc 56 d8 da 1b 3c d6 cc c8 96
51 c9 74 0c b7
Apr 16 17:37:51 pat pluto[28951]: | ed 93 9f f4
Apr 16 17:37:51 pat pluto[28951]: | encrypting:
Apr 16 17:37:51 pat pluto[28951]: | 0b 00 00 18 a4 83 fb ca 90 24 5e
a4 bd bb fc 22
Apr 16 17:37:51 pat pluto[28951]: | 37 0f 82 9a 10 68 9e 42 00 00 00
20 00 00 00 01
Apr 16 17:37:51 pat pluto[28951]: | 01 10 8d 28 fd 5a 54 0a f7 ba 37
6b 50 80 75 74
Apr 16 17:37:51 pat pluto[28951]: | f1 4c 26 93 00 00 6f 9f
Apr 16 17:37:51 pat pluto[28951]: | IV:
Apr 16 17:37:51 pat pluto[28951]: | 9b dc 56 d8 da 1b 3c d6 cc c8 96
51 c9 74 0c b7
Apr 16 17:37:51 pat pluto[28951]: | ed 93 9f f4
Apr 16 17:37:51 pat pluto[28951]: | unpadded size is: 56
Apr 16 17:37:51 pat pluto[28951]: | emitting 8 zero bytes of encryption
padding into ISAKMP Message
Apr 16 17:37:51 pat pluto[28951]: | encrypting 64 using OAKLEY_AES_CBC
Apr 16 17:37:51 pat pluto[28951]: | next IV: af 03 46 34 50 61 b6 bf
e5 7e 4c bb ce 64 6f 49
Apr 16 17:37:51 pat pluto[28951]: | emitting length of ISAKMP Message: 92
Apr 16 17:37:51 pat pluto[28951]: | sending 92 bytes for ISAKMP notify
through eth0:500 to 93.154.254.88:500 (using #1)
Apr 16 17:37:51 pat pluto[28951]: | fd 5a 54 0a f7 ba 37 6b 50 80 75
74 f1 4c 26 93
Apr 16 17:37:51 pat pluto[28951]: | 08 10 05 01 b4 85 22 05 00 00 00
5c e7 49 d5 42
Apr 16 17:37:51 pat pluto[28951]: | 12 7c 58 d4 68 e7 c7 f7 90 ab 17
4d 58 df 1f 8a
Apr 16 17:37:51 pat pluto[28951]: | fe 2c 5a 28 7d ca c2 fc 74 cc 62
12 93 97 b8 2a
Apr 16 17:37:51 pat pluto[28951]: | 6a bb dc 23 15 8f ef 41 aa 52 7e
52 af 03 46 34
Apr 16 17:37:51 pat pluto[28951]: | 50 61 b6 bf e5 7e 4c bb ce 64 6f 49
Apr 16 17:37:51 pat pluto[28951]: | next event EVENT_PENDING_DDNS in 25
seconds
Apr 16 17:38:16 pat pluto[28951]: |
Apr 16 17:38:16 pat pluto[28951]: | next event EVENT_PENDING_DDNS in 0
seconds
Apr 16 17:38:16 pat pluto[28951]: | *time to handle event
Apr 16 17:38:16 pat pluto[28951]: | handling event EVENT_PENDING_DDNS
Apr 16 17:38:16 pat pluto[28951]: | event after this is
EVENT_PENDING_PHASE2 in 0 seconds
Apr 16 17:38:16 pat pluto[28951]: | inserting event EVENT_PENDING_DDNS,
timeout in 60 seconds
Apr 16 17:38:16 pat pluto[28951]: | event added after event EVENT_DPD for #2
Apr 16 17:38:16 pat pluto[28951]: | handling event EVENT_PENDING_PHASE2
Apr 16 17:38:16 pat pluto[28951]: | event after this is EVENT_DPD in 15
seconds
Apr 16 17:38:16 pat pluto[28951]: | inserting event
EVENT_PENDING_PHASE2, timeout in 120 seconds
Apr 16 17:38:16 pat pluto[28951]: | event added after event
EVENT_DPD_TIMEOUT for #1
Apr 16 17:38:16 pat pluto[28951]: | pending review: connection
"L2TP-PSK-CLIENTS" was not up, skipped
Apr 16 17:38:16 pat pluto[28951]: | pending review: connection
"L2TP-PSK-CLIENTS" was not up, skipped
Apr 16 17:38:16 pat pluto[28951]: | next event EVENT_DPD in 15 seconds
for #2
Apr 16 17:38:31 pat pluto[28951]: |
Apr 16 17:38:31 pat pluto[28951]: | next event EVENT_DPD in 0 seconds for #2
Apr 16 17:38:31 pat pluto[28951]: | *time to handle event
Apr 16 17:38:31 pat pluto[28951]: | handling event EVENT_DPD
Apr 16 17:38:31 pat pluto[28951]: | event after this is
EVENT_PENDING_DDNS in 45 seconds
Apr 16 17:38:31 pat pluto[28951]: | processing connection
L2TP-PSK-CLIENTS[1] 93.154.254.88
Apr 16 17:38:31 pat pluto[28951]: | DPD: processing for state #2
("L2TP-PSK-CLIENTS")
Apr 16 17:38:31 pat pluto[28951]: | get esp.a728160f@193.59.3.10
Apr 16 17:38:31 pat pluto[28951]: | inserting event EVENT_DPD, timeout
in 40 seconds for #2
Apr 16 17:38:31 pat pluto[28951]: | event added at head of queue
Apr 16 17:38:31 pat pluto[28951]: | DPD: sending R_U_THERE 2691629056 to
93.154.254.88:500 (state #1)
Apr 16 17:38:31 pat pluto[28951]: | **emit ISAKMP Message:
Apr 16 17:38:31 pat pluto[28951]: | initiator cookie:
Apr 16 17:38:31 pat pluto[28951]: | fd 5a 54 0a f7 ba 37 6b
Apr 16 17:38:31 pat pluto[28951]: | responder cookie:
Apr 16 17:38:31 pat pluto[28951]: | 50 80 75 74 f1 4c 26 93
Apr 16 17:38:31 pat pluto[28951]: | next payload type: ISAKMP_NEXT_HASH
Apr 16 17:38:31 pat pluto[28951]: | ISAKMP version: ISAKMP Version
1.0 (rfc2407)
Apr 16 17:38:31 pat pluto[28951]: | exchange type: ISAKMP_XCHG_INFO
Apr 16 17:38:31 pat pluto[28951]: | flags: ISAKMP_FLAG_ENCRYPTION
Apr 16 17:38:31 pat pluto[28951]: | message ID: 6c 10 e8 0f
Apr 16 17:38:31 pat pluto[28951]: | ***emit ISAKMP Hash Payload:
Apr 16 17:38:31 pat pluto[28951]: | next payload type: ISAKMP_NEXT_N
Apr 16 17:38:31 pat pluto[28951]: | emitting 20 zero bytes of HASH into
ISAKMP Hash Payload
Apr 16 17:38:31 pat pluto[28951]: | emitting length of ISAKMP Hash
Payload: 24
Apr 16 17:38:31 pat pluto[28951]: | ***emit ISAKMP Notification Payload:
Apr 16 17:38:31 pat pluto[28951]: | next payload type: ISAKMP_NEXT_NONE
Apr 16 17:38:31 pat pluto[28951]: | DOI: ISAKMP_DOI_IPSEC
Apr 16 17:38:31 pat pluto[28951]: | protocol ID: 1
Apr 16 17:38:31 pat pluto[28951]: | SPI size: 16
Apr 16 17:38:31 pat pluto[28951]: | Notify Message Type: R_U_THERE
Apr 16 17:38:31 pat pluto[28951]: | emitting 8 raw bytes of notify
icookie into ISAKMP Notification Payload
Apr 16 17:38:31 pat pluto[28951]: | notify icookie fd 5a 54 0a f7 ba 37 6b
Apr 16 17:38:31 pat pluto[28951]: | emitting 8 raw bytes of notify
rcookie into ISAKMP Notification Payload
Apr 16 17:38:31 pat pluto[28951]: | notify rcookie 50 80 75 74 f1 4c 26 93
Apr 16 17:38:31 pat pluto[28951]: | emitting 4 raw bytes of notify data
into ISAKMP Notification Payload
Apr 16 17:38:31 pat pluto[28951]: | notify data 00 00 6f a0
Apr 16 17:38:31 pat pluto[28951]: | emitting length of ISAKMP
Notification Payload: 32
Apr 16 17:38:31 pat pluto[28951]: | HASH computed:
Apr 16 17:38:31 pat pluto[28951]: | 22 ed 41 5e 0f 67 7c 83 08 58 99
41 13 6b ca 01
Apr 16 17:38:31 pat pluto[28951]: | 5f 19 a5 02
Apr 16 17:38:31 pat pluto[28951]: | last Phase 1 IV: ac 67 17 24 05 39
ab a2 4f 07 b4 13 2d 95 6f ad
Apr 16 17:38:31 pat pluto[28951]: | current Phase 1 IV: ac 67 17 24 05
39 ab a2 4f 07 b4 13 2d 95 6f ad
Apr 16 17:38:31 pat pluto[28951]: | computed Phase 2 IV:
Apr 16 17:38:31 pat pluto[28951]: | fc a7 59 7a 15 de 1d 27 a1 5d d7
0a 15 4c cd 4e
Apr 16 17:38:31 pat pluto[28951]: | 3a 70 8a 5d
Apr 16 17:38:31 pat pluto[28951]: | encrypting:
Apr 16 17:38:31 pat pluto[28951]: | 0b 00 00 18 22 ed 41 5e 0f 67 7c
83 08 58 99 41
Apr 16 17:38:31 pat pluto[28951]: | 13 6b ca 01 5f 19 a5 02 00 00 00
20 00 00 00 01
Apr 16 17:38:31 pat pluto[28951]: | 01 10 8d 28 fd 5a 54 0a f7 ba 37
6b 50 80 75 74
Apr 16 17:38:31 pat pluto[28951]: | f1 4c 26 93 00 00 6f a0
Apr 16 17:38:31 pat pluto[28951]: | IV:
Apr 16 17:38:31 pat pluto[28951]: | fc a7 59 7a 15 de 1d 27 a1 5d d7
0a 15 4c cd 4e
Apr 16 17:38:31 pat pluto[28951]: | 3a 70 8a 5d
Apr 16 17:38:31 pat pluto[28951]: | unpadded size is: 56
Apr 16 17:38:31 pat pluto[28951]: | emitting 8 zero bytes of encryption
padding into ISAKMP Message
Apr 16 17:38:31 pat pluto[28951]: | encrypting 64 using OAKLEY_AES_CBC
Apr 16 17:38:31 pat pluto[28951]: | next IV: 29 d3 ed 9e 9d 59 f5 ea
09 fe 91 a3 d1 f9 7f de
Apr 16 17:38:31 pat pluto[28951]: | emitting length of ISAKMP Message: 92
Apr 16 17:38:31 pat pluto[28951]: | sending 92 bytes for ISAKMP notify
through eth0:500 to 93.154.254.88:500 (using #1)
Apr 16 17:38:31 pat pluto[28951]: | fd 5a 54 0a f7 ba 37 6b 50 80 75
74 f1 4c 26 93
Apr 16 17:38:31 pat pluto[28951]: | 08 10 05 01 6c 10 e8 0f 00 00 00
5c cd f4 6e 93
Apr 16 17:38:31 pat pluto[28951]: | 3b cd bc 40 aa 3e bf d0 02 13 19
dd ab 56 a0 92
Apr 16 17:38:31 pat pluto[28951]: | 4a c3 39 6d 1c ff b1 75 ba a3 7d
c1 b3 c9 d3 29
Apr 16 17:38:31 pat pluto[28951]: | d8 1a 25 65 9c 05 d6 1b 3b 12 24
18 29 d3 ed 9e
Apr 16 17:38:31 pat pluto[28951]: | 9d 59 f5 ea 09 fe 91 a3 d1 f9 7f de
Apr 16 17:38:31 pat pluto[28951]: | next event EVENT_DPD in 40 seconds
for #2
Apr 16 17:39:11 pat pluto[28951]: |
Apr 16 17:39:11 pat pluto[28951]: | next event EVENT_DPD in 0 seconds for #2
Apr 16 17:39:11 pat pluto[28951]: | *time to handle event
Apr 16 17:39:11 pat pluto[28951]: | handling event EVENT_DPD
Apr 16 17:39:11 pat pluto[28951]: | event after this is
EVENT_PENDING_DDNS in 5 seconds
Apr 16 17:39:11 pat pluto[28951]: | processing connection
L2TP-PSK-CLIENTS[1] 93.154.254.88
Apr 16 17:39:11 pat pluto[28951]: | DPD: processing for state #2
("L2TP-PSK-CLIENTS")
Apr 16 17:39:11 pat pluto[28951]: | get esp.a728160f@193.59.3.10
Apr 16 17:39:11 pat pluto[28951]: | inserting event EVENT_DPD, timeout
in 40 seconds for #2
Apr 16 17:39:11 pat pluto[28951]: | event added after event
EVENT_DPD_TIMEOUT for #1
Apr 16 17:39:11 pat pluto[28951]: | DPD: sending R_U_THERE 2708406272 to
93.154.254.88:500 (state #1)
Apr 16 17:39:11 pat pluto[28951]: | **emit ISAKMP Message:
Apr 16 17:39:11 pat pluto[28951]: | initiator cookie:
Apr 16 17:39:11 pat pluto[28951]: | fd 5a 54 0a f7 ba 37 6b
Apr 16 17:39:11 pat pluto[28951]: | responder cookie:
Apr 16 17:39:11 pat pluto[28951]: | 50 80 75 74 f1 4c 26 93
Apr 16 17:39:11 pat pluto[28951]: | next payload type: ISAKMP_NEXT_HASH
Apr 16 17:39:11 pat pluto[28951]: | ISAKMP version: ISAKMP Version
1.0 (rfc2407)
Apr 16 17:39:11 pat pluto[28951]: | exchange type: ISAKMP_XCHG_INFO
Apr 16 17:39:11 pat pluto[28951]: | flags: ISAKMP_FLAG_ENCRYPTION
Apr 16 17:39:11 pat pluto[28951]: | message ID: 14 ff a3 8b
Apr 16 17:39:11 pat pluto[28951]: | ***emit ISAKMP Hash Payload:
Apr 16 17:39:11 pat pluto[28951]: | next payload type: ISAKMP_NEXT_N
Apr 16 17:39:11 pat pluto[28951]: | emitting 20 zero bytes of HASH into
ISAKMP Hash Payload
Apr 16 17:39:11 pat pluto[28951]: | emitting length of ISAKMP Hash
Payload: 24
Apr 16 17:39:11 pat pluto[28951]: | ***emit ISAKMP Notification Payload:
Apr 16 17:39:11 pat pluto[28951]: | next payload type: ISAKMP_NEXT_NONE
Apr 16 17:39:11 pat pluto[28951]: | DOI: ISAKMP_DOI_IPSEC
Apr 16 17:39:11 pat pluto[28951]: | protocol ID: 1
Apr 16 17:39:11 pat pluto[28951]: | SPI size: 16
Apr 16 17:39:11 pat pluto[28951]: | Notify Message Type: R_U_THERE
Apr 16 17:39:11 pat pluto[28951]: | emitting 8 raw bytes of notify
icookie into ISAKMP Notification Payload
Apr 16 17:39:11 pat pluto[28951]: | notify icookie fd 5a 54 0a f7 ba 37 6b
Apr 16 17:39:11 pat pluto[28951]: | emitting 8 raw bytes of notify
rcookie into ISAKMP Notification Payload
Apr 16 17:39:11 pat pluto[28951]: | notify rcookie 50 80 75 74 f1 4c 26 93
Apr 16 17:39:11 pat pluto[28951]: | emitting 4 raw bytes of notify data
into ISAKMP Notification Payload
Apr 16 17:39:11 pat pluto[28951]: | notify data 00 00 6f a1
Apr 16 17:39:11 pat pluto[28951]: | emitting length of ISAKMP
Notification Payload: 32
Apr 16 17:39:11 pat pluto[28951]: | HASH computed:
Apr 16 17:39:11 pat pluto[28951]: | 35 9c f3 d1 fc 7a d5 18 5b 42 2b
84 01 24 e4 b0
Apr 16 17:39:11 pat pluto[28951]: | e1 34 d4 50
Apr 16 17:39:11 pat pluto[28951]: | last Phase 1 IV: ac 67 17 24 05 39
ab a2 4f 07 b4 13 2d 95 6f ad
Apr 16 17:39:11 pat pluto[28951]: | current Phase 1 IV: ac 67 17 24 05
39 ab a2 4f 07 b4 13 2d 95 6f ad
Apr 16 17:39:11 pat pluto[28951]: | computed Phase 2 IV:
Apr 16 17:39:11 pat pluto[28951]: | 45 8d 0b c6 cd 90 cb 02 1b 7b 68
98 7c 76 2a 96
Apr 16 17:39:11 pat pluto[28951]: | 74 18 1a a0
Apr 16 17:39:11 pat pluto[28951]: | encrypting:
Apr 16 17:39:11 pat pluto[28951]: | 0b 00 00 18 35 9c f3 d1 fc 7a d5
18 5b 42 2b 84
Apr 16 17:39:11 pat pluto[28951]: | 01 24 e4 b0 e1 34 d4 50 00 00 00
20 00 00 00 01
Apr 16 17:39:11 pat pluto[28951]: | 01 10 8d 28 fd 5a 54 0a f7 ba 37
6b 50 80 75 74
Apr 16 17:39:11 pat pluto[28951]: | f1 4c 26 93 00 00 6f a1
Apr 16 17:39:11 pat pluto[28951]: | IV:
Apr 16 17:39:11 pat pluto[28951]: | 45 8d 0b c6 cd 90 cb 02 1b 7b 68
98 7c 76 2a 96
Apr 16 17:39:11 pat pluto[28951]: | 74 18 1a a0
Apr 16 17:39:11 pat pluto[28951]: | unpadded size is: 56
Apr 16 17:39:11 pat pluto[28951]: | emitting 8 zero bytes of encryption
padding into ISAKMP Message
Apr 16 17:39:11 pat pluto[28951]: | encrypting 64 using OAKLEY_AES_CBC
Apr 16 17:39:11 pat pluto[28951]: | next IV: 8d 33 56 b1 b1 64 9c 56
b9 97 62 cc 77 0a cf c6
Apr 16 17:39:11 pat pluto[28951]: | emitting length of ISAKMP Message: 92
Apr 16 17:39:11 pat pluto[28951]: | sending 92 bytes for ISAKMP notify
through eth0:500 to 93.154.254.88:500 (using #1)
Apr 16 17:39:11 pat pluto[28951]: | fd 5a 54 0a f7 ba 37 6b 50 80 75
74 f1 4c 26 93
Apr 16 17:39:11 pat pluto[28951]: | 08 10 05 01 14 ff a3 8b 00 00 00
5c 82 72 26 bd
Apr 16 17:39:11 pat pluto[28951]: | 57 77 c5 c5 af 83 ee 9a d4 05 6f
98 83 34 dd d4
Apr 16 17:39:11 pat pluto[28951]: | 71 1e b5 97 dc b5 c0 3d 6f 7f 0b
53 6c 93 86 21
Apr 16 17:39:11 pat pluto[28951]: | 75 f0 1d ac 7e 05 12 6d 7c 5e cb
7d 8d 33 56 b1
Apr 16 17:39:11 pat pluto[28951]: | b1 64 9c 56 b9 97 62 cc 77 0a cf c6
Apr 16 17:39:11 pat pluto[28951]: | next event EVENT_PENDING_DDNS in 5
seconds
Apr 16 17:39:16 pat pluto[28951]: |
Apr 16 17:39:16 pat pluto[28951]: | next event EVENT_PENDING_DDNS in 0
seconds
Apr 16 17:39:16 pat pluto[28951]: | *time to handle event
Apr 16 17:39:16 pat pluto[28951]: | handling event EVENT_PENDING_DDNS
Apr 16 17:39:16 pat pluto[28951]: | event after this is
EVENT_DPD_TIMEOUT in 5 seconds
Apr 16 17:39:16 pat pluto[28951]: | inserting event EVENT_PENDING_DDNS,
timeout in 60 seconds
Apr 16 17:39:16 pat pluto[28951]: | event added after event EVENT_DPD for #2
Apr 16 17:39:16 pat pluto[28951]: | next event EVENT_DPD_TIMEOUT in 5
seconds for #1
Apr 16 17:39:21 pat pluto[28951]: |
Apr 16 17:39:21 pat pluto[28951]: | next event EVENT_DPD_TIMEOUT in 0
seconds for #1
Apr 16 17:39:21 pat pluto[28951]: | *time to handle event
Apr 16 17:39:21 pat pluto[28951]: | handling event EVENT_DPD_TIMEOUT
Apr 16 17:39:21 pat pluto[28951]: | event after this is EVENT_DPD in 30
seconds
Apr 16 17:39:21 pat pluto[28951]: | processing connection
L2TP-PSK-CLIENTS[1] 93.154.254.88
Apr 16 17:39:21 pat pluto[28951]: | processing connection
L2TP-PSK-CLIENTS[1] 93.154.254.88
Apr 16 17:39:21 pat pluto[28951]: "L2TP-PSK-CLIENTS"[1] 93.154.254.88
#1: DPD: No response from peer - declaring peer dead
Apr 16 17:39:21 pat pluto[28951]: "L2TP-PSK-CLIENTS"[1] 93.154.254.88
#1: DPD: Clearing Connection
Apr 16 17:39:21 pat pluto[28951]: | processing connection L2TP-PSK-CLIENTS
Apr 16 17:39:21 pat pluto[28951]: "L2TP-PSK-CLIENTS" #2: deleting state
(STATE_QUICK_R2)
Apr 16 17:39:21 pat pluto[28951]: | deleting event for #2
Apr 16 17:39:21 pat pluto[28951]: | deleting state #2
Apr 16 17:39:21 pat pluto[28951]: | state: 2 requesting event EVENT_DPD
to be deleted by
/build/buildd-openswan_2.6.28+dfsg-5+squeeze1-i386-OOSWut/openswan-2.6.28+dfsg/programs/pluto/state.c:366
Apr 16 17:39:21 pat pluto[28951]: | **emit ISAKMP Message:
Apr 16 17:39:21 pat pluto[28951]: | initiator cookie:
Apr 16 17:39:21 pat pluto[28951]: | fd 5a 54 0a f7 ba 37 6b
Apr 16 17:39:21 pat pluto[28951]: | responder cookie:
Apr 16 17:39:21 pat pluto[28951]: | 50 80 75 74 f1 4c 26 93
Apr 16 17:39:21 pat pluto[28951]: | next payload type: ISAKMP_NEXT_HASH
Apr 16 17:39:21 pat pluto[28951]: | ISAKMP version: ISAKMP Version
1.0 (rfc2407)
Apr 16 17:39:21 pat pluto[28951]: | exchange type: ISAKMP_XCHG_INFO
Apr 16 17:39:21 pat pluto[28951]: | flags: ISAKMP_FLAG_ENCRYPTION
Apr 16 17:39:21 pat pluto[28951]: | message ID: 11 6b 06 e4
Apr 16 17:39:21 pat pluto[28951]: | ***emit ISAKMP Hash Payload:
Apr 16 17:39:21 pat pluto[28951]: | next payload type: ISAKMP_NEXT_D
Apr 16 17:39:21 pat pluto[28951]: | emitting 20 zero bytes of HASH(1)
into ISAKMP Hash Payload
Apr 16 17:39:21 pat pluto[28951]: | emitting length of ISAKMP Hash
Payload: 24
Apr 16 17:39:21 pat pluto[28951]: | ***emit ISAKMP Delete Payload:
Apr 16 17:39:21 pat pluto[28951]: | next payload type: ISAKMP_NEXT_NONE
Apr 16 17:39:21 pat pluto[28951]: | DOI: ISAKMP_DOI_IPSEC
Apr 16 17:39:21 pat pluto[28951]: | protocol ID: 3
Apr 16 17:39:21 pat pluto[28951]: | SPI size: 4
Apr 16 17:39:21 pat pluto[28951]: | number of SPIs: 1
Apr 16 17:39:21 pat pluto[28951]: | emitting 4 raw bytes of delete
payload into ISAKMP Delete Payload
Apr 16 17:39:21 pat pluto[28951]: | delete payload a7 28 16 0f
Apr 16 17:39:21 pat pluto[28951]: | emitting length of ISAKMP Delete
Payload: 16
Apr 16 17:39:21 pat pluto[28951]: | HASH(1) computed:
Apr 16 17:39:21 pat pluto[28951]: | f7 ab fd a0 6f c4 9b c0 9e fc f7
a2 5d 02 d7 cf
Apr 16 17:39:21 pat pluto[28951]: | 04 9c 10 e6
Apr 16 17:39:21 pat pluto[28951]: | last Phase 1 IV: ac 67 17 24 05 39
ab a2 4f 07 b4 13 2d 95 6f ad
Apr 16 17:39:21 pat pluto[28951]: | current Phase 1 IV: ac 67 17 24 05
39 ab a2 4f 07 b4 13 2d 95 6f ad
Apr 16 17:39:21 pat pluto[28951]: | computed Phase 2 IV:
Apr 16 17:39:21 pat pluto[28951]: | b4 73 f7 2b 24 42 57 54 e1 30 bb
2d 8e 86 5e e5
Apr 16 17:39:21 pat pluto[28951]: | 32 ee 49 a7
Apr 16 17:39:21 pat pluto[28951]: | encrypting:
Apr 16 17:39:21 pat pluto[28951]: | 0c 00 00 18 f7 ab fd a0 6f c4 9b
c0 9e fc f7 a2
Apr 16 17:39:21 pat pluto[28951]: | 5d 02 d7 cf 04 9c 10 e6 00 00 00
10 00 00 00 01
Apr 16 17:39:21 pat pluto[28951]: | 03 04 00 01 a7 28 16 0f
Apr 16 17:39:21 pat pluto[28951]: | IV:
Apr 16 17:39:21 pat pluto[28951]: | b4 73 f7 2b 24 42 57 54 e1 30 bb
2d 8e 86 5e e5
Apr 16 17:39:21 pat pluto[28951]: | 32 ee 49 a7
Apr 16 17:39:21 pat pluto[28951]: | unpadded size is: 40
Apr 16 17:39:21 pat pluto[28951]: | emitting 8 zero bytes of encryption
padding into ISAKMP Message
Apr 16 17:39:21 pat pluto[28951]: | encrypting 48 using OAKLEY_AES_CBC
Apr 16 17:39:21 pat pluto[28951]: | next IV: 77 5a 3f 82 9b c8 66 2a
00 91 06 78 79 f5 3c f8
Apr 16 17:39:21 pat pluto[28951]: | emitting length of ISAKMP Message: 76
Apr 16 17:39:21 pat pluto[28951]: | sending 76 bytes for delete notify
through eth0:500 to 93.154.254.88:500 (using #1)
Apr 16 17:39:21 pat pluto[28951]: | fd 5a 54 0a f7 ba 37 6b 50 80 75
74 f1 4c 26 93
Apr 16 17:39:21 pat pluto[28951]: | 08 10 05 01 11 6b 06 e4 00 00 00
4c 82 db ce 24
Apr 16 17:39:21 pat pluto[28951]: | 5d f4 db c0 a1 79 6f 4a 69 9c 6c
5b ad eb 08 3d
Apr 16 17:39:21 pat pluto[28951]: | 9e eb 54 59 da d7 d1 a2 ee b1 67
68 77 5a 3f 82
Apr 16 17:39:21 pat pluto[28951]: | 9b c8 66 2a 00 91 06 78 79 f5 3c f8
Apr 16 17:39:21 pat pluto[28951]: | deleting event for #2
Apr 16 17:39:21 pat pluto[28951]: | no suspended cryptographic state for 2
Apr 16 17:39:21 pat pluto[28951]: | ICOOKIE: fd 5a 54 0a f7 ba 37 6b
Apr 16 17:39:21 pat pluto[28951]: | RCOOKIE: 50 80 75 74 f1 4c 26 93
Apr 16 17:39:21 pat pluto[28951]: | state hash entry 25
Apr 16 17:39:21 pat pluto[28951]: | command executing down-host
Apr 16 17:39:21 pat pluto[28951]: | executing down-host: 2>&1
PLUTO_VERB='down-host' PLUTO_VERSION='2.0'
PLUTO_CONNECTION='L2TP-PSK-CLIENTS' PLUTO_INTERFACE='eth0'
PLUTO_NEXT_HOP='93.154.254.88' PLUTO_ME='193.59.3.10'
PLUTO_MY_ID='193.59.3.10' PLUTO_MY_CLIENT='193.59.3.10/32'
PLUTO_MY_CLIENT_NET='193.59.3.10' PLUTO_MY_CLIENT_MASK='255.255.255.255'
PLUTO_MY_PORT='1701' PLUTO_MY_PROTOCOL='17' PLUTO_PEER='93.154.254.88'
PLUTO_PEER_ID='93.154.254.88' PLUTO_PEER_CLIENT='93.154.254.88/32'
PLUTO_PEER_CLIENT_NET='93.154.254.88'
PLUTO_PEER_CLIENT_MASK='255.255.255.255' PLUTO_PEER_PORT='0'
PLUTO_PEER_PROTOCOL='17' PLUTO_PEER_CA='' PLUTO_STACK='netkey'
PLUTO_CONN_POLICY='PSK+ENCRYPT+DONTREKEY+IKEv2ALLOW'
PLUTO_XAUTH_USERNAME='' PLUTO_CISCO_DNS_INFO=''
PLUTO_CISCO_DOMAIN_INFO='' PLUTO_PEER_BANNER='' ipsec _updown
Apr 16 17:39:21 pat pluto[28951]: | popen(): cmd is 761 chars long
Apr 16 17:39:21 pat pluto[28951]: | cmd( 0):2>&1
PLUTO_VERB='down-host' PLUTO_VERSION='2.0' PLUTO_CONNECTION='L2TP-PSK-CLIEN:
Apr 16 17:39:21 pat pluto[28951]: | cmd( 80):TS' PLUTO_INTERFACE='eth0'
PLUTO_NEXT_HOP='93.154.254.88' PLUTO_ME='193.59.3.10:
Apr 16 17:39:21 pat pluto[28951]: | cmd( 160):'
PLUTO_MY_ID='193.59.3.10' PLUTO_MY_CLIENT='193.59.3.10/32'
PLUTO_MY_CLIENT_N:
Apr 16 17:39:21 pat pluto[28951]: | cmd( 240):ET='193.59.3.10'
PLUTO_MY_CLIENT_MASK='255.255.255.255' PLUTO_MY_PORT='1701' PL:
Apr 16 17:39:21 pat pluto[28951]: | cmd( 320):UTO_MY_PROTOCOL='17'
PLUTO_PEER='93.154.254.88' PLUTO_PEER_ID='93.154.254.88' PL:
Apr 16 17:39:21 pat pluto[28951]: | cmd(
400):UTO_PEER_CLIENT='93.154.254.88/32'
PLUTO_PEER_CLIENT_NET='93.154.254.88' PLUTO_P:
Apr 16 17:39:21 pat pluto[28951]: | cmd(
480):EER_CLIENT_MASK='255.255.255.255' PLUTO_PEER_PORT='0'
PLUTO_PEER_PROTOCOL='17' P:
Apr 16 17:39:21 pat pluto[28951]: | cmd( 560):LUTO_PEER_CA=''
PLUTO_STACK='netkey' PLUTO_CONN_POLICY='PSK+ENCRYPT+DONTREKEY+I:
Apr 16 17:39:21 pat pluto[28951]: | cmd( 640):KEv2ALLOW'
PLUTO_XAUTH_USERNAME='' PLUTO_CISCO_DNS_INFO='' PLUTO_CISCO_DOMAIN_I:
Apr 16 17:39:21 pat pluto[28951]: | cmd( 720):NFO=''
PLUTO_PEER_BANNER='' ipsec _updown:
Apr 16 17:39:21 pat pluto[28951]: | request to replace with shunt a
prospective erouted policy with netkey kernel --- experimental
Apr 16 17:39:21 pat pluto[28951]: | delete esp.28b3177@93.154.254.88
Apr 16 17:39:21 pat pluto[28951]: | delete inbound eroute
93.154.254.88/32:0 --17-> 193.59.3.10/32:1701 =>
unk255.10000@193.59.3.10 (raw_eroute)
Apr 16 17:39:21 pat pluto[28951]: | raw_eroute result=1
Apr 16 17:39:21 pat pluto[28951]: | delete esp.a728160f@193.59.3.10
Apr 16 17:39:21 pat pluto[28951]: | processing connection L2TP-PSK-CLIENTS
Apr 16 17:39:21 pat pluto[28951]: "L2TP-PSK-CLIENTS" #1: deleting state
(STATE_MAIN_R3)
Apr 16 17:39:21 pat pluto[28951]: | deleting event for #1
Apr 16 17:39:21 pat pluto[28951]: | deleting state #1
Apr 16 17:39:21 pat pluto[28951]: | **emit ISAKMP Message:
Apr 16 17:39:21 pat pluto[28951]: | initiator cookie:
Apr 16 17:39:21 pat pluto[28951]: | fd 5a 54 0a f7 ba 37 6b
Apr 16 17:39:21 pat pluto[28951]: | responder cookie:
Apr 16 17:39:21 pat pluto[28951]: | 50 80 75 74 f1 4c 26 93
Apr 16 17:39:21 pat pluto[28951]: | next payload type: ISAKMP_NEXT_HASH
Apr 16 17:39:21 pat pluto[28951]: | ISAKMP version: ISAKMP Version
1.0 (rfc2407)
Apr 16 17:39:21 pat pluto[28951]: | exchange type: ISAKMP_XCHG_INFO
Apr 16 17:39:21 pat pluto[28951]: | flags: ISAKMP_FLAG_ENCRYPTION
Apr 16 17:39:21 pat pluto[28951]: | message ID: 1e b2 1c 77
Apr 16 17:39:21 pat pluto[28951]: | ***emit ISAKMP Hash Payload:
Apr 16 17:39:21 pat pluto[28951]: | next payload type: ISAKMP_NEXT_D
Apr 16 17:39:21 pat pluto[28951]: | emitting 20 zero bytes of HASH(1)
into ISAKMP Hash Payload
Apr 16 17:39:21 pat pluto[28951]: | emitting length of ISAKMP Hash
Payload: 24
Apr 16 17:39:21 pat pluto[28951]: | ***emit ISAKMP Delete Payload:
Apr 16 17:39:21 pat pluto[28951]: | next payload type: ISAKMP_NEXT_NONE
Apr 16 17:39:21 pat pluto[28951]: | DOI: ISAKMP_DOI_IPSEC
Apr 16 17:39:21 pat pluto[28951]: | protocol ID: 1
Apr 16 17:39:21 pat pluto[28951]: | SPI size: 16
Apr 16 17:39:21 pat pluto[28951]: | number of SPIs: 1
Apr 16 17:39:21 pat pluto[28951]: | emitting 16 raw bytes of delete
payload into ISAKMP Delete Payload
Apr 16 17:39:21 pat pluto[28951]: | delete payload fd 5a 54 0a f7 ba
37 6b 50 80 75 74 f1 4c 26 93
Apr 16 17:39:21 pat pluto[28951]: | emitting length of ISAKMP Delete
Payload: 28
Apr 16 17:39:21 pat pluto[28951]: | HASH(1) computed:
Apr 16 17:39:21 pat pluto[28951]: | c7 75 fa 08 0a 12 c4 4e f0 c7 82
aa 55 53 4f 1b
Apr 16 17:39:21 pat pluto[28951]: | 9b 6b 1c aa
Apr 16 17:39:21 pat pluto[28951]: | last Phase 1 IV: ac 67 17 24 05 39
ab a2 4f 07 b4 13 2d 95 6f ad
Apr 16 17:39:21 pat pluto[28951]: | current Phase 1 IV: ac 67 17 24 05
39 ab a2 4f 07 b4 13 2d 95 6f ad
Apr 16 17:39:21 pat pluto[28951]: | computed Phase 2 IV:
Apr 16 17:39:21 pat pluto[28951]: | db c3 58 76 e5 40 43 dc 20 01 3b
c8 8c 12 93 1c
Apr 16 17:39:21 pat pluto[28951]: | 8c 98 aa c7
Apr 16 17:39:21 pat pluto[28951]: | encrypting:
Apr 16 17:39:21 pat pluto[28951]: | 0c 00 00 18 c7 75 fa 08 0a 12 c4
4e f0 c7 82 aa
Apr 16 17:39:21 pat pluto[28951]: | 55 53 4f 1b 9b 6b 1c aa 00 00 00
1c 00 00 00 01
Apr 16 17:39:21 pat pluto[28951]: | 01 10 00 01 fd 5a 54 0a f7 ba 37
6b 50 80 75 74
Apr 16 17:39:21 pat pluto[28951]: | f1 4c 26 93
Apr 16 17:39:21 pat pluto[28951]: | IV:
Apr 16 17:39:21 pat pluto[28951]: | db c3 58 76 e5 40 43 dc 20 01 3b
c8 8c 12 93 1c
Apr 16 17:39:21 pat pluto[28951]: | 8c 98 aa c7
Apr 16 17:39:21 pat pluto[28951]: | unpadded size is: 52
Apr 16 17:39:21 pat pluto[28951]: | emitting 12 zero bytes of encryption
padding into ISAKMP Message
Apr 16 17:39:21 pat pluto[28951]: | encrypting 64 using OAKLEY_AES_CBC
Apr 16 17:39:21 pat pluto[28951]: | next IV: e8 3e ca fa d4 68 6c 23
62 d8 a5 97 5a a0 4f 6a
Apr 16 17:39:21 pat pluto[28951]: | emitting length of ISAKMP Message: 92
Apr 16 17:39:21 pat pluto[28951]: | sending 92 bytes for delete notify
through eth0:500 to 93.154.254.88:500 (using #1)
Apr 16 17:39:21 pat pluto[28951]: | fd 5a 54 0a f7 ba 37 6b 50 80 75
74 f1 4c 26 93
Apr 16 17:39:21 pat pluto[28951]: | 08 10 05 01 1e b2 1c 77 00 00 00
5c be fc 67 02
Apr 16 17:39:21 pat pluto[28951]: | be 8b 46 b7 cc ec 39 ce 7d 74 a1
69 17 ad 02 2c
Apr 16 17:39:21 pat pluto[28951]: | 06 ab ad e2 ca b1 f8 36 b4 b1 ff
3e 34 28 91 db
Apr 16 17:39:21 pat pluto[28951]: | 35 57 57 6d 51 ef 85 57 f2 d3 53
00 e8 3e ca fa
Apr 16 17:39:21 pat pluto[28951]: | d4 68 6c 23 62 d8 a5 97 5a a0 4f 6a
Apr 16 17:39:21 pat pluto[28951]: | deleting event for #1
Apr 16 17:39:21 pat pluto[28951]: | no suspended cryptographic state for 1
Apr 16 17:39:21 pat pluto[28951]: | ICOOKIE: fd 5a 54 0a f7 ba 37 6b
Apr 16 17:39:21 pat pluto[28951]: | RCOOKIE: 50 80 75 74 f1 4c 26 93
Apr 16 17:39:21 pat pluto[28951]: | state hash entry 25
Apr 16 17:39:21 pat pluto[28951]: | processing connection
L2TP-PSK-CLIENTS[1] 93.154.254.88
Apr 16 17:39:21 pat pluto[28951]: "L2TP-PSK-CLIENTS"[1] 93.154.254.88:
deleting connection "L2TP-PSK-CLIENTS" instance with peer 93.154.254.88
{isakmp=#0/ipsec=#0}
Apr 16 17:39:21 pat pluto[28951]: | request to delete a unrouted policy
with netkey kernel --- experimental
Apr 16 17:39:21 pat pluto[28951]: | route owner of "L2TP-PSK-CLIENTS"
unrouted: NULL
Apr 16 17:39:21 pat pluto[28951]: | command executing unroute-host
Apr 16 17:39:21 pat pluto[28951]: | executing unroute-host: 2>&1
PLUTO_VERB='unroute-host' PLUTO_VERSION='2.0'
PLUTO_CONNECTION='L2TP-PSK-CLIENTS' PLUTO_INTERFACE='eth0'
PLUTO_NEXT_HOP='93.154.254.88' PLUTO_ME='193.59.3.10'
PLUTO_MY_ID='193.59.3.10' PLUTO_MY_CLIENT='193.59.3.10/32'
PLUTO_MY_CLIENT_NET='193.59.3.10' PLUTO_MY_CLIENT_MASK='255.255.255.255'
PLUTO_MY_PORT='1701' PLUTO_MY_PROTOCOL='17' PLUTO_PEER='93.154.254.88'
PLUTO_PEER_ID='93.154.254.88' PLUTO_PEER_CLIENT='93.154.254.88/32'
PLUTO_PEER_CLIENT_NET='93.154.254.88'
PLUTO_PEER_CLIENT_MASK='255.255.255.255' PLUTO_PEER_PORT='0'
PLUTO_PEER_PROTOCOL='17' PLUTO_PEER_CA='' PLUTO_STACK='netkey'
PLUTO_CONN_POLICY='PSK+ENCRYPT+DONTREKEY+IKEv2ALLOW'
PLUTO_CISCO_DNS_INFO='' PLUTO_CISCO_DOMAIN_INFO='' PLUTO_PEER_BANNER=''
ipsec _updown
Apr 16 17:39:21 pat pluto[28951]: | popen(): cmd is 741 chars long
Apr 16 17:39:21 pat pluto[28951]: | cmd( 0):2>&1
PLUTO_VERB='unroute-host' PLUTO_VERSION='2.0' PLUTO_CONNECTION='L2TP-PSK-CL:
Apr 16 17:39:21 pat pluto[28951]: | cmd( 80):IENTS'
PLUTO_INTERFACE='eth0' PLUTO_NEXT_HOP='93.154.254.88' PLUTO_ME='193.59.33:
Apr 16 17:39:21 pat pluto[28951]: | cmd( 160):.10'
PLUTO_MY_ID='193.59.3.10' PLUTO_MY_CLIENT='193.59.3.10/32' PLUTO_MY_CLIEN:
Apr 16 17:39:21 pat pluto[28951]: | cmd( 240):T_NET='193.59.3.10'
PLUTO_MY_CLIENT_MASK='255.255.255.255' PLUTO_MY_PORT='1701':
Apr 16 17:39:21 pat pluto[28951]: | cmd( 320): PLUTO_MY_PROTOCOL='17'
PLUTO_PEER='93.154.254.88' PLUTO_PEER_ID='93.154.254.88':
Apr 16 17:39:21 pat pluto[28951]: | cmd( 400):
PLUTO_PEER_CLIENT='93.154.254.88/32'
PLUTO_PEER_CLIENT_NET='93.154.254.88' PLUT:
Apr 16 17:39:21 pat pluto[28951]: | cmd(
480):O_PEER_CLIENT_MASK='255.255.255.255' PLUTO_PEER_PORT='0'
PLUTO_PEER_PROTOCOL='17:
Apr 16 17:39:21 pat pluto[28951]: | cmd( 560):' PLUTO_PEER_CA=''
PLUTO_STACK='netkey' PLUTO_CONN_POLICY='PSK+ENCRYPT+DONTREKE:
Apr 16 17:39:21 pat pluto[28951]: | cmd( 640):Y+IKEv2ALLOW'
PLUTO_CISCO_DNS_INFO='' PLUTO_CISCO_DOMAIN_INFO='' PLUTO_PEER_BA:
Apr 16 17:39:21 pat pluto[28951]: | cmd( 720):NNER='' ipsec _updown:
Apr 16 17:39:21 pat pluto[28951]: | DPD: unrouting connection
Apr 16 17:39:21 pat pluto[28951]: | next event EVENT_PENDING_DDNS in 55
seconds
Apr 16 17:40:16 pat pluto[28951]: |
Apr 16 17:40:16 pat pluto[28951]: | next event EVENT_PENDING_DDNS in 0
seconds
Apr 16 17:40:16 pat pluto[28951]: | *time to handle event
Apr 16 17:40:16 pat pluto[28951]: | handling event EVENT_PENDING_DDNS
Apr 16 17:40:16 pat pluto[28951]: | event after this is
EVENT_PENDING_PHASE2 in 0 seconds
Apr 16 17:40:16 pat pluto[28951]: | inserting event EVENT_PENDING_DDNS,
timeout in 60 seconds
Apr 16 17:40:16 pat pluto[28951]: | event added after event
EVENT_PENDING_PHASE2
Apr 16 17:40:16 pat pluto[28951]: | handling event EVENT_PENDING_PHASE2
Apr 16 17:40:16 pat pluto[28951]: | event after this is
EVENT_PENDING_DDNS in 60 seconds
Apr 16 17:40:16 pat pluto[28951]: | inserting event
EVENT_PENDING_PHASE2, timeout in 120 seconds
Apr 16 17:40:16 pat pluto[28951]: | event added after event
EVENT_PENDING_DDNS
Apr 16 17:40:16 pat pluto[28951]: | pending review: connection
"L2TP-PSK-CLIENTS" was not up, skipped
Apr 16 17:40:16 pat pluto[28951]: | next event EVENT_PENDING_DDNS in 60
seconds
#v-
a to mówi tcpdump na portach 500 oraz 4500 podczas połączenia
#v+
marcin@pat:~$ sudo tcpdump -pni eth0 port 500 or port 4500
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on eth0, link-type EN10MB (Ethernet), capture size 96 bytes
17:33:10.104620 IP 93.154.254.88.500 > 193.59.3.10.500: isakmp: phase 1
I ident
17:33:10.113897 IP 193.59.3.10.500 > 93.154.254.88.500: isakmp: phase 1
R ident
17:33:10.206368 IP 93.154.254.88.500 > 193.59.3.10.500: isakmp: phase 1
I ident
17:33:10.216540 IP 193.59.3.10.500 > 93.154.254.88.500: isakmp: phase 1
R ident
17:33:10.298617 IP 93.154.254.88.500 > 193.59.3.10.500: isakmp: phase 1
I ident[E]
17:33:10.301659 IP 193.59.3.10.500 > 93.154.254.88.500: isakmp: phase 1
R ident[E]
17:33:10.360907 IP 93.154.254.88.500 > 193.59.3.10.500: isakmp: phase
2/others I inf[E]
17:33:11.464697 IP 93.154.254.88.500 > 193.59.3.10.500: isakmp: phase
2/others I oakley-quick[E]
17:33:11.472043 IP 193.59.3.10.500 > 93.154.254.88.500: isakmp: phase
2/others R oakley-quick[E]
17:33:11.529739 IP 93.154.254.88.500 > 193.59.3.10.500: isakmp: phase
2/others I oakley-quick[E]
#v-
dalej cisza.
podpowie ktoś gdzie robię błąd?? przewaliłem już kilka konfiguracji i
efekt ciągle ten sam :/
--
MaRc
Nie kłóć się z idiotą. Będziesz musiał zniżyć się do jego poziomu a
wówczas pobije cię swoimi argumentami.
Technical Details
Message-ID:
<534ea601$0$2228$65785112@news.neostrada.pl>Path:
mbox-mo1.pugleaf.net!news-archive.icm.edu.pl!agh.edu.pl!news.agh.edu.pl!newsfeed2.atman.pl!newsfeed.atman.pl!news.nask.pl!news.nask.org.pl!newsfeed.pionier.net.pl!fu-berlin.de!m5no2502719qaj.1!news-out.google.com!gi6ni507igc.0!nntp.google.com!news.glorb.com!news-out.readnews.com!news-xxxfer.readnews.com!nx01.iad01.newshosting.com!newshosting.com!newsfeed.neostrada.pl!unt-exc-01.news.neostrada.pl!unt-spo-a-02.news.neostrada.pl!news.neostrada.pl.POSTED!not-for-mailShow Full Headers
Complete Article Headers
X-Received: by 10.224.22.71 with SMTP id m7mr2621325qab.8.1397663237817; Wed, 16 Apr 2014 08:47:17 -0700 (PDT) Path: mbox-mo1.pugleaf.net!news-archive.icm.edu.pl!agh.edu.pl!news.agh.edu.pl!newsfeed2.atman.pl!newsfeed.atman.pl!news.nask.pl!news.nask.org.pl!newsfeed.pionier.net.pl!fu-berlin.de!m5no2502719qaj.1!news-out.google.com!gi6ni507igc.0!nntp.google.com!news.glorb.com!news-out.readnews.com!news-xxxfer.readnews.com!nx01.iad01.newshosting.com!newshosting.com!newsfeed.neostrada.pl!unt-exc-01.news.neostrada.pl!unt-spo-a-02.news.neostrada.pl!news.neostrada.pl.POSTED!not-for-mail Date: Wed, 16 Apr 2014 17:47:18 +0200 From: MaRc <tuksmr@gmail.com> User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:24.0) Gecko/20100101 Thunderbird/24.4.0 MIME-Version: 1.0 Newsgroups: pl.comp.os.linux.sieci Subject: ipsec/l2tp debian problem Lines: 3067 Message-ID: <534ea601$0$2228$65785112@news.neostrada.pl> Organization: Telekomunikacja Polska NNTP-Posting-Host: 46.174.237.1 X-Trace: 1397663234 unt-rea-b-01.news.neostrada.pl 2228 46.174.237.1:54615 X-Complaints-To: abuse@news.neostrada.pl Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit