Thread View: pl.comp.os.linux.sieci
20 messages
20 total messages
Started by MaRc
Wed, 16 Apr 2014 15:47
ipsec/l2tp debian problem
Author: MaRc
Date: Wed, 16 Apr 2014 15:47
Date: Wed, 16 Apr 2014 15:47
3067 lines
165804 bytes
165804 bytes
Witam.
Mam problem z odpaleniem ipsec/l2tp. Mianowicie klient (android) się
łączy, działa to przez około minutę i na kliencie brak komunikacji.
Tunel niby cały czas zestawiony, tcpdump w czasie kiedy już nie działa
widzi na etherniecie jakiś ruch esp.
oto konfiguracja openswan
#v+
root@pat:/etc# cat ipsec.conf
version 2.0 # conforms to second version of ipsec.conf specification
config setup
nat_traversal=yes
virtual_private=%v4:10.0.0.0/8,%v4:192.168.0.0/16,%v4:172.16.0.0/12
nhelpers=0
protostack=netkey
plutodebug=all
# Add connections here
conn L2TP-PSK-CLIENTS
authby=secret
pfs=no
auto=add
keyingtries=3
rekey=no
type=transport
left=193.59.3.10
leftprotoport=17/1701
right=%any
rightsubnet=vhost:%priv,%no
rightprotoport=17/%any
dpddelay=40
dpdtimeout=130
dpdaction=clear
#Disable Opportunistic Encryption
include /etc/ipsec.d/examples/no_oe.conf
#v-
log pluto
#v+
Apr 16 17:33:10 pat pluto[28951]: | *received 444 bytes from
93.154.254.88:500 on eth0 (port=500)
Apr 16 17:33:10 pat pluto[28951]: | fd 5a 54 0a f7 ba 37 6b 00 00 00
00 00 00 00 00
Apr 16 17:33:10 pat pluto[28951]: | 01 10 02 00 00 00 00 00 00 00 01
bc 0d 00 01 24
Apr 16 17:33:10 pat pluto[28951]: | 00 00 00 01 00 00 00 01 00 00 01
18 01 01 00 08
Apr 16 17:33:10 pat pluto[28951]: | 03 00 00 24 01 01 00 00 80 0b 00
01 80 0c 70 80
Apr 16 17:33:10 pat pluto[28951]: | 80 01 00 07 80 0e 01 00 80 03 00
01 80 02 00 02
Apr 16 17:33:10 pat pluto[28951]: | 80 04 00 02 03 00 00 24 02 01 00
00 80 0b 00 01
Apr 16 17:33:10 pat pluto[28951]: | 80 0c 70 80 80 01 00 07 80 0e 01
00 80 03 00 01
Apr 16 17:33:10 pat pluto[28951]: | 80 02 00 01 80 04 00 02 03 00 00
24 03 01 00 00
Apr 16 17:33:10 pat pluto[28951]: | 80 0b 00 01 80 0c 70 80 80 01 00
07 80 0e 00 80
Apr 16 17:33:10 pat pluto[28951]: | 80 03 00 01 80 02 00 02 80 04 00
02 03 00 00 24
Apr 16 17:33:10 pat pluto[28951]: | 04 01 00 00 80 0b 00 01 80 0c 70
80 80 01 00 07
Apr 16 17:33:10 pat pluto[28951]: | 80 0e 00 80 80 03 00 01 80 02 00
01 80 04 00 02
Apr 16 17:33:10 pat pluto[28951]: | 03 00 00 20 05 01 00 00 80 0b 00
01 80 0c 70 80
Apr 16 17:33:10 pat pluto[28951]: | 80 01 00 05 80 03 00 01 80 02 00
02 80 04 00 02
Apr 16 17:33:10 pat pluto[28951]: | 03 00 00 20 06 01 00 00 80 0b 00
01 80 0c 70 80
Apr 16 17:33:10 pat pluto[28951]: | 80 01 00 05 80 03 00 01 80 02 00
01 80 04 00 02
Apr 16 17:33:10 pat pluto[28951]: | 03 00 00 20 07 01 00 00 80 0b 00
01 80 0c 70 80
Apr 16 17:33:10 pat pluto[28951]: | 80 01 00 01 80 03 00 01 80 02 00
02 80 04 00 02
Apr 16 17:33:10 pat pluto[28951]: | 00 00 00 20 08 01 00 00 80 0b 00
01 80 0c 70 80
Apr 16 17:33:10 pat pluto[28951]: | 80 01 00 01 80 03 00 01 80 02 00
01 80 04 00 02
Apr 16 17:33:10 pat pluto[28951]: | 0d 00 00 14 4a 13 1c 81 07 03 58
45 5c 57 28 f2
Apr 16 17:33:10 pat pluto[28951]: | 0e 95 45 2f 0d 00 00 14 cd 60 46
43 35 df 21 f8
Apr 16 17:33:10 pat pluto[28951]: | 7c fd b2 fc 68 b6 a4 48 0d 00 00
14 90 cb 80 91
Apr 16 17:33:10 pat pluto[28951]: | 3e bb 69 6e 08 63 81 b5 ec 42 7b
1f 0d 00 00 14
Apr 16 17:33:10 pat pluto[28951]: | 44 85 15 2d 18 b6 bb cd 0b e8 a8
46 95 79 dd cc
Apr 16 17:33:10 pat pluto[28951]: | 0d 00 00 18 40 48 b7 d5 6e bc e8
85 25 e7 de 7f
Apr 16 17:33:10 pat pluto[28951]: | 00 d6 c2 d3 80 00 00 00 00 00 00
14 af ca d7 13
Apr 16 17:33:10 pat pluto[28951]: | 68 a1 f1 c9 6b 86 96 fc 77 57 01 00
Apr 16 17:33:10 pat pluto[28951]: | **parse ISAKMP Message:
Apr 16 17:33:10 pat pluto[28951]: | initiator cookie:
Apr 16 17:33:10 pat pluto[28951]: | fd 5a 54 0a f7 ba 37 6b
Apr 16 17:33:10 pat pluto[28951]: | responder cookie:
Apr 16 17:33:10 pat pluto[28951]: | 00 00 00 00 00 00 00 00
Apr 16 17:33:10 pat pluto[28951]: | next payload type: ISAKMP_NEXT_SA
Apr 16 17:33:10 pat pluto[28951]: | ISAKMP version: ISAKMP Version
1.0 (rfc2407)
Apr 16 17:33:10 pat pluto[28951]: | exchange type: ISAKMP_XCHG_IDPROT
Apr 16 17:33:10 pat pluto[28951]: | flags: none
Apr 16 17:33:10 pat pluto[28951]: | message ID: 00 00 00 00
Apr 16 17:33:10 pat pluto[28951]: | length: 444
Apr 16 17:33:10 pat pluto[28951]: | processing version=1.0 packet with
exchange type=ISAKMP_XCHG_IDPROT (2)
Apr 16 17:33:10 pat pluto[28951]: | got payload 0x2(ISAKMP_NEXT_SA)
needed: 0x2 opt: 0x2080
Apr 16 17:33:10 pat pluto[28951]: | ***parse ISAKMP Security Association
Payload:
Apr 16 17:33:10 pat pluto[28951]: | next payload type: ISAKMP_NEXT_VID
Apr 16 17:33:10 pat pluto[28951]: | length: 292
Apr 16 17:33:10 pat pluto[28951]: | DOI: ISAKMP_DOI_IPSEC
Apr 16 17:33:10 pat pluto[28951]: | got payload 0x2000(ISAKMP_NEXT_VID)
needed: 0x0 opt: 0x2080
Apr 16 17:33:10 pat pluto[28951]: | ***parse ISAKMP Vendor ID Payload:
Apr 16 17:33:10 pat pluto[28951]: | next payload type: ISAKMP_NEXT_VID
Apr 16 17:33:10 pat pluto[28951]: | length: 20
Apr 16 17:33:10 pat pluto[28951]: | got payload 0x2000(ISAKMP_NEXT_VID)
needed: 0x0 opt: 0x2080
Apr 16 17:33:10 pat pluto[28951]: | ***parse ISAKMP Vendor ID Payload:
Apr 16 17:33:10 pat pluto[28951]: | next payload type: ISAKMP_NEXT_VID
Apr 16 17:33:10 pat pluto[28951]: | length: 20
Apr 16 17:33:10 pat pluto[28951]: | got payload 0x2000(ISAKMP_NEXT_VID)
needed: 0x0 opt: 0x2080
Apr 16 17:33:10 pat pluto[28951]: | ***parse ISAKMP Vendor ID Payload:
Apr 16 17:33:10 pat pluto[28951]: | next payload type: ISAKMP_NEXT_VID
Apr 16 17:33:10 pat pluto[28951]: | length: 20
Apr 16 17:33:10 pat pluto[28951]: | got payload 0x2000(ISAKMP_NEXT_VID)
needed: 0x0 opt: 0x2080
Apr 16 17:33:10 pat pluto[28951]: | ***parse ISAKMP Vendor ID Payload:
Apr 16 17:33:10 pat pluto[28951]: | next payload type: ISAKMP_NEXT_VID
Apr 16 17:33:10 pat pluto[28951]: | length: 20
Apr 16 17:33:10 pat pluto[28951]: | got payload 0x2000(ISAKMP_NEXT_VID)
needed: 0x0 opt: 0x2080
Apr 16 17:33:10 pat pluto[28951]: | ***parse ISAKMP Vendor ID Payload:
Apr 16 17:33:10 pat pluto[28951]: | next payload type: ISAKMP_NEXT_VID
Apr 16 17:33:10 pat pluto[28951]: | length: 24
Apr 16 17:33:10 pat pluto[28951]: | got payload 0x2000(ISAKMP_NEXT_VID)
needed: 0x0 opt: 0x2080
Apr 16 17:33:10 pat pluto[28951]: | ***parse ISAKMP Vendor ID Payload:
Apr 16 17:33:10 pat pluto[28951]: | next payload type: ISAKMP_NEXT_NONE
Apr 16 17:33:10 pat pluto[28951]: | length: 20
Apr 16 17:33:10 pat pluto[28951]: packet from 93.154.254.88:500:
received Vendor ID payload [RFC 3947] method set to=109
Apr 16 17:33:10 pat pluto[28951]: packet from 93.154.254.88:500:
received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02] meth=107, but
already using method 109
Apr 16 17:33:10 pat pluto[28951]: packet from 93.154.254.88:500:
received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02_n] meth=106,
but already using method 109
Apr 16 17:33:10 pat pluto[28951]: packet from 93.154.254.88:500:
received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-00]
Apr 16 17:33:10 pat pluto[28951]: packet from 93.154.254.88:500:
ignoring Vendor ID payload [FRAGMENTATION 80000000]
Apr 16 17:33:10 pat pluto[28951]: packet from 93.154.254.88:500:
received Vendor ID payload [Dead Peer Detection]
Apr 16 17:33:10 pat pluto[28951]: | nat-t detected, sending nat-t VID
Apr 16 17:33:10 pat pluto[28951]: | find_host_connection2 called from
main_inI1_outR1, me=193.59.3.10:500 him=93.154.254.88:500 policy=none
Apr 16 17:33:10 pat pluto[28951]: | find_host_pair: comparing to
193.59.3.10:500 0.0.0.0:500
Apr 16 17:33:10 pat pluto[28951]: | find_host_pair_conn
(find_host_connection2): 193.59.3.10:500 93.154.254.88:500 -> hp:none
Apr 16 17:33:10 pat pluto[28951]: | find_host_connection2 returns empty
Apr 16 17:33:10 pat pluto[28951]: | ****parse IPsec DOI SIT:
Apr 16 17:33:10 pat pluto[28951]: | IPsec DOI SIT: SIT_IDENTITY_ONLY
Apr 16 17:33:10 pat pluto[28951]: | ****parse ISAKMP Proposal Payload:
Apr 16 17:33:10 pat pluto[28951]: | next payload type: ISAKMP_NEXT_NONE
Apr 16 17:33:10 pat pluto[28951]: | length: 280
Apr 16 17:33:10 pat pluto[28951]: | proposal number: 1
Apr 16 17:33:10 pat pluto[28951]: | protocol ID: PROTO_ISAKMP
Apr 16 17:33:10 pat pluto[28951]: | SPI size: 0
Apr 16 17:33:10 pat pluto[28951]: | number of transforms: 8
Apr 16 17:33:10 pat pluto[28951]: | *****parse ISAKMP Transform Payload
(ISAKMP):
Apr 16 17:33:10 pat pluto[28951]: | next payload type: ISAKMP_NEXT_T
Apr 16 17:33:10 pat pluto[28951]: | length: 36
Apr 16 17:33:10 pat pluto[28951]: | transform number: 1
Apr 16 17:33:10 pat pluto[28951]: | transform ID: KEY_IKE
Apr 16 17:33:10 pat pluto[28951]: | ******parse ISAKMP Oakley attribute:
Apr 16 17:33:10 pat pluto[28951]: | af+type: OAKLEY_LIFE_TYPE
Apr 16 17:33:10 pat pluto[28951]: | length/value: 1
Apr 16 17:33:10 pat pluto[28951]: | ******parse ISAKMP Oakley attribute:
Apr 16 17:33:10 pat pluto[28951]: | af+type: OAKLEY_LIFE_DURATION
Apr 16 17:33:10 pat pluto[28951]: | length/value: 28800
Apr 16 17:33:10 pat pluto[28951]: | ******parse ISAKMP Oakley attribute:
Apr 16 17:33:10 pat pluto[28951]: | af+type: OAKLEY_ENCRYPTION_ALGORITHM
Apr 16 17:33:10 pat pluto[28951]: | length/value: 7
Apr 16 17:33:10 pat pluto[28951]: | ******parse ISAKMP Oakley attribute:
Apr 16 17:33:10 pat pluto[28951]: | af+type: OAKLEY_KEY_LENGTH
Apr 16 17:33:10 pat pluto[28951]: | length/value: 256
Apr 16 17:33:10 pat pluto[28951]: | ******parse ISAKMP Oakley attribute:
Apr 16 17:33:10 pat pluto[28951]: | af+type: OAKLEY_AUTHENTICATION_METHOD
Apr 16 17:33:10 pat pluto[28951]: | length/value: 1
Apr 16 17:33:10 pat pluto[28951]: | ******parse ISAKMP Oakley attribute:
Apr 16 17:33:10 pat pluto[28951]: | af+type: OAKLEY_HASH_ALGORITHM
Apr 16 17:33:10 pat pluto[28951]: | length/value: 2
Apr 16 17:33:10 pat pluto[28951]: | ******parse ISAKMP Oakley attribute:
Apr 16 17:33:10 pat pluto[28951]: | af+type: OAKLEY_GROUP_DESCRIPTION
Apr 16 17:33:10 pat pluto[28951]: | length/value: 2
Apr 16 17:33:10 pat pluto[28951]: | *****parse ISAKMP Transform Payload
(ISAKMP):
Apr 16 17:33:10 pat pluto[28951]: | next payload type: ISAKMP_NEXT_T
Apr 16 17:33:10 pat pluto[28951]: | length: 36
Apr 16 17:33:10 pat pluto[28951]: | transform number: 2
Apr 16 17:33:10 pat pluto[28951]: | transform ID: KEY_IKE
Apr 16 17:33:10 pat pluto[28951]: | ******parse ISAKMP Oakley attribute:
Apr 16 17:33:10 pat pluto[28951]: | af+type: OAKLEY_LIFE_TYPE
Apr 16 17:33:10 pat pluto[28951]: | length/value: 1
Apr 16 17:33:10 pat pluto[28951]: | ******parse ISAKMP Oakley attribute:
Apr 16 17:33:10 pat pluto[28951]: | af+type: OAKLEY_LIFE_DURATION
Apr 16 17:33:10 pat pluto[28951]: | length/value: 28800
Apr 16 17:33:10 pat pluto[28951]: | ******parse ISAKMP Oakley attribute:
Apr 16 17:33:10 pat pluto[28951]: | af+type: OAKLEY_ENCRYPTION_ALGORITHM
Apr 16 17:33:10 pat pluto[28951]: | length/value: 7
Apr 16 17:33:10 pat pluto[28951]: | ******parse ISAKMP Oakley attribute:
Apr 16 17:33:10 pat pluto[28951]: | af+type: OAKLEY_KEY_LENGTH
Apr 16 17:33:10 pat pluto[28951]: | length/value: 256
Apr 16 17:33:10 pat pluto[28951]: | ******parse ISAKMP Oakley attribute:
Apr 16 17:33:10 pat pluto[28951]: | af+type: OAKLEY_AUTHENTICATION_METHOD
Apr 16 17:33:10 pat pluto[28951]: | length/value: 1
Apr 16 17:33:10 pat pluto[28951]: | ******parse ISAKMP Oakley attribute:
Apr 16 17:33:10 pat pluto[28951]: | af+type: OAKLEY_HASH_ALGORITHM
Apr 16 17:33:10 pat pluto[28951]: | length/value: 1
Apr 16 17:33:10 pat pluto[28951]: | ******parse ISAKMP Oakley attribute:
Apr 16 17:33:10 pat pluto[28951]: | af+type: OAKLEY_GROUP_DESCRIPTION
Apr 16 17:33:10 pat pluto[28951]: | length/value: 2
Apr 16 17:33:10 pat pluto[28951]: | *****parse ISAKMP Transform Payload
(ISAKMP):
Apr 16 17:33:10 pat pluto[28951]: | next payload type: ISAKMP_NEXT_T
Apr 16 17:33:10 pat pluto[28951]: | length: 36
Apr 16 17:33:10 pat pluto[28951]: | transform number: 3
Apr 16 17:33:10 pat pluto[28951]: | transform ID: KEY_IKE
Apr 16 17:33:10 pat pluto[28951]: | ******parse ISAKMP Oakley attribute:
Apr 16 17:33:10 pat pluto[28951]: | af+type: OAKLEY_LIFE_TYPE
Apr 16 17:33:10 pat pluto[28951]: | length/value: 1
Apr 16 17:33:10 pat pluto[28951]: | ******parse ISAKMP Oakley attribute:
Apr 16 17:33:10 pat pluto[28951]: | af+type: OAKLEY_LIFE_DURATION
Apr 16 17:33:10 pat pluto[28951]: | length/value: 28800
Apr 16 17:33:10 pat pluto[28951]: | ******parse ISAKMP Oakley attribute:
Apr 16 17:33:10 pat pluto[28951]: | af+type: OAKLEY_ENCRYPTION_ALGORITHM
Apr 16 17:33:10 pat pluto[28951]: | length/value: 7
Apr 16 17:33:10 pat pluto[28951]: | ******parse ISAKMP Oakley attribute:
Apr 16 17:33:10 pat pluto[28951]: | af+type: OAKLEY_KEY_LENGTH
Apr 16 17:33:10 pat pluto[28951]: | length/value: 128
Apr 16 17:33:10 pat pluto[28951]: | ******parse ISAKMP Oakley attribute:
Apr 16 17:33:10 pat pluto[28951]: | af+type: OAKLEY_AUTHENTICATION_METHOD
Apr 16 17:33:10 pat pluto[28951]: | length/value: 1
Apr 16 17:33:10 pat pluto[28951]: | ******parse ISAKMP Oakley attribute:
Apr 16 17:33:10 pat pluto[28951]: | af+type: OAKLEY_HASH_ALGORITHM
Apr 16 17:33:10 pat pluto[28951]: | length/value: 2
Apr 16 17:33:10 pat pluto[28951]: | ******parse ISAKMP Oakley attribute:
Apr 16 17:33:10 pat pluto[28951]: | af+type: OAKLEY_GROUP_DESCRIPTION
Apr 16 17:33:10 pat pluto[28951]: | length/value: 2
Apr 16 17:33:10 pat pluto[28951]: | *****parse ISAKMP Transform Payload
(ISAKMP):
Apr 16 17:33:10 pat pluto[28951]: | next payload type: ISAKMP_NEXT_T
Apr 16 17:33:10 pat pluto[28951]: | length: 36
Apr 16 17:33:10 pat pluto[28951]: | transform number: 4
Apr 16 17:33:10 pat pluto[28951]: | transform ID: KEY_IKE
Apr 16 17:33:10 pat pluto[28951]: | ******parse ISAKMP Oakley attribute:
Apr 16 17:33:10 pat pluto[28951]: | af+type: OAKLEY_LIFE_TYPE
Apr 16 17:33:10 pat pluto[28951]: | length/value: 1
Apr 16 17:33:10 pat pluto[28951]: | ******parse ISAKMP Oakley attribute:
Apr 16 17:33:10 pat pluto[28951]: | af+type: OAKLEY_LIFE_DURATION
Apr 16 17:33:10 pat pluto[28951]: | length/value: 28800
Apr 16 17:33:10 pat pluto[28951]: | ******parse ISAKMP Oakley attribute:
Apr 16 17:33:10 pat pluto[28951]: | af+type: OAKLEY_ENCRYPTION_ALGORITHM
Apr 16 17:33:10 pat pluto[28951]: | length/value: 7
Apr 16 17:33:10 pat pluto[28951]: | ******parse ISAKMP Oakley attribute:
Apr 16 17:33:10 pat pluto[28951]: | af+type: OAKLEY_KEY_LENGTH
Apr 16 17:33:10 pat pluto[28951]: | length/value: 128
Apr 16 17:33:10 pat pluto[28951]: | ******parse ISAKMP Oakley attribute:
Apr 16 17:33:10 pat pluto[28951]: | af+type: OAKLEY_AUTHENTICATION_METHOD
Apr 16 17:33:10 pat pluto[28951]: | length/value: 1
Apr 16 17:33:10 pat pluto[28951]: | ******parse ISAKMP Oakley attribute:
Apr 16 17:33:10 pat pluto[28951]: | af+type: OAKLEY_HASH_ALGORITHM
Apr 16 17:33:10 pat pluto[28951]: | length/value: 1
Apr 16 17:33:10 pat pluto[28951]: | ******parse ISAKMP Oakley attribute:
Apr 16 17:33:10 pat pluto[28951]: | af+type: OAKLEY_GROUP_DESCRIPTION
Apr 16 17:33:10 pat pluto[28951]: | length/value: 2
Apr 16 17:33:10 pat pluto[28951]: | *****parse ISAKMP Transform Payload
(ISAKMP):
Apr 16 17:33:10 pat pluto[28951]: | next payload type: ISAKMP_NEXT_T
Apr 16 17:33:10 pat pluto[28951]: | length: 32
Apr 16 17:33:10 pat pluto[28951]: | transform number: 5
Apr 16 17:33:10 pat pluto[28951]: | transform ID: KEY_IKE
Apr 16 17:33:10 pat pluto[28951]: | ******parse ISAKMP Oakley attribute:
Apr 16 17:33:10 pat pluto[28951]: | af+type: OAKLEY_LIFE_TYPE
Apr 16 17:33:10 pat pluto[28951]: | length/value: 1
Apr 16 17:33:10 pat pluto[28951]: | ******parse ISAKMP Oakley attribute:
Apr 16 17:33:10 pat pluto[28951]: | af+type: OAKLEY_LIFE_DURATION
Apr 16 17:33:10 pat pluto[28951]: | length/value: 28800
Apr 16 17:33:10 pat pluto[28951]: | ******parse ISAKMP Oakley attribute:
Apr 16 17:33:10 pat pluto[28951]: | af+type: OAKLEY_ENCRYPTION_ALGORITHM
Apr 16 17:33:10 pat pluto[28951]: | length/value: 5
Apr 16 17:33:10 pat pluto[28951]: | ******parse ISAKMP Oakley attribute:
Apr 16 17:33:10 pat pluto[28951]: | af+type: OAKLEY_AUTHENTICATION_METHOD
Apr 16 17:33:10 pat pluto[28951]: | length/value: 1
Apr 16 17:33:10 pat pluto[28951]: | ******parse ISAKMP Oakley attribute:
Apr 16 17:33:10 pat pluto[28951]: | af+type: OAKLEY_HASH_ALGORITHM
Apr 16 17:33:10 pat pluto[28951]: | length/value: 2
Apr 16 17:33:10 pat pluto[28951]: | ******parse ISAKMP Oakley attribute:
Apr 16 17:33:10 pat pluto[28951]: | af+type: OAKLEY_GROUP_DESCRIPTION
Apr 16 17:33:10 pat pluto[28951]: | length/value: 2
Apr 16 17:33:10 pat pluto[28951]: | *****parse ISAKMP Transform Payload
(ISAKMP):
Apr 16 17:33:10 pat pluto[28951]: | next payload type: ISAKMP_NEXT_T
Apr 16 17:33:10 pat pluto[28951]: | length: 32
Apr 16 17:33:10 pat pluto[28951]: | transform number: 6
Apr 16 17:33:10 pat pluto[28951]: | transform ID: KEY_IKE
Apr 16 17:33:10 pat pluto[28951]: | ******parse ISAKMP Oakley attribute:
Apr 16 17:33:10 pat pluto[28951]: | af+type: OAKLEY_LIFE_TYPE
Apr 16 17:33:10 pat pluto[28951]: | length/value: 1
Apr 16 17:33:10 pat pluto[28951]: | ******parse ISAKMP Oakley attribute:
Apr 16 17:33:10 pat pluto[28951]: | af+type: OAKLEY_LIFE_DURATION
Apr 16 17:33:10 pat pluto[28951]: | length/value: 28800
Apr 16 17:33:10 pat pluto[28951]: | ******parse ISAKMP Oakley attribute:
Apr 16 17:33:10 pat pluto[28951]: | af+type: OAKLEY_ENCRYPTION_ALGORITHM
Apr 16 17:33:10 pat pluto[28951]: | length/value: 5
Apr 16 17:33:10 pat pluto[28951]: | ******parse ISAKMP Oakley attribute:
Apr 16 17:33:10 pat pluto[28951]: | af+type: OAKLEY_AUTHENTICATION_METHOD
Apr 16 17:33:10 pat pluto[28951]: | length/value: 1
Apr 16 17:33:10 pat pluto[28951]: | ******parse ISAKMP Oakley attribute:
Apr 16 17:33:10 pat pluto[28951]: | af+type: OAKLEY_HASH_ALGORITHM
Apr 16 17:33:10 pat pluto[28951]: | length/value: 1
Apr 16 17:33:10 pat pluto[28951]: | ******parse ISAKMP Oakley attribute:
Apr 16 17:33:10 pat pluto[28951]: | af+type: OAKLEY_GROUP_DESCRIPTION
Apr 16 17:33:10 pat pluto[28951]: | length/value: 2
Apr 16 17:33:10 pat pluto[28951]: | *****parse ISAKMP Transform Payload
(ISAKMP):
Apr 16 17:33:10 pat pluto[28951]: | next payload type: ISAKMP_NEXT_T
Apr 16 17:33:10 pat pluto[28951]: | length: 32
Apr 16 17:33:10 pat pluto[28951]: | transform number: 7
Apr 16 17:33:10 pat pluto[28951]: | transform ID: KEY_IKE
Apr 16 17:33:10 pat pluto[28951]: | ******parse ISAKMP Oakley attribute:
Apr 16 17:33:10 pat pluto[28951]: | af+type: OAKLEY_LIFE_TYPE
Apr 16 17:33:10 pat pluto[28951]: | length/value: 1
Apr 16 17:33:10 pat pluto[28951]: | ******parse ISAKMP Oakley attribute:
Apr 16 17:33:10 pat pluto[28951]: | af+type: OAKLEY_LIFE_DURATION
Apr 16 17:33:10 pat pluto[28951]: | length/value: 28800
Apr 16 17:33:10 pat pluto[28951]: | ******parse ISAKMP Oakley attribute:
Apr 16 17:33:10 pat pluto[28951]: | af+type: OAKLEY_ENCRYPTION_ALGORITHM
Apr 16 17:33:10 pat pluto[28951]: | length/value: 1
Apr 16 17:33:10 pat pluto[28951]: | ******parse ISAKMP Oakley attribute:
Apr 16 17:33:10 pat pluto[28951]: | af+type: OAKLEY_AUTHENTICATION_METHOD
Apr 16 17:33:10 pat pluto[28951]: | length/value: 1
Apr 16 17:33:10 pat pluto[28951]: | ******parse ISAKMP Oakley attribute:
Apr 16 17:33:10 pat pluto[28951]: | af+type: OAKLEY_HASH_ALGORITHM
Apr 16 17:33:10 pat pluto[28951]: | length/value: 2
Apr 16 17:33:10 pat pluto[28951]: | ******parse ISAKMP Oakley attribute:
Apr 16 17:33:10 pat pluto[28951]: | af+type: OAKLEY_GROUP_DESCRIPTION
Apr 16 17:33:10 pat pluto[28951]: | length/value: 2
Apr 16 17:33:10 pat pluto[28951]: | *****parse ISAKMP Transform Payload
(ISAKMP):
Apr 16 17:33:10 pat pluto[28951]: | next payload type: ISAKMP_NEXT_NONE
Apr 16 17:33:10 pat pluto[28951]: | length: 32
Apr 16 17:33:10 pat pluto[28951]: | transform number: 8
Apr 16 17:33:10 pat pluto[28951]: | transform ID: KEY_IKE
Apr 16 17:33:10 pat pluto[28951]: | ******parse ISAKMP Oakley attribute:
Apr 16 17:33:10 pat pluto[28951]: | af+type: OAKLEY_LIFE_TYPE
Apr 16 17:33:10 pat pluto[28951]: | length/value: 1
Apr 16 17:33:10 pat pluto[28951]: | ******parse ISAKMP Oakley attribute:
Apr 16 17:33:10 pat pluto[28951]: | af+type: OAKLEY_LIFE_DURATION
Apr 16 17:33:10 pat pluto[28951]: | length/value: 28800
Apr 16 17:33:10 pat pluto[28951]: | ******parse ISAKMP Oakley attribute:
Apr 16 17:33:10 pat pluto[28951]: | af+type: OAKLEY_ENCRYPTION_ALGORITHM
Apr 16 17:33:10 pat pluto[28951]: | length/value: 1
Apr 16 17:33:10 pat pluto[28951]: | ******parse ISAKMP Oakley attribute:
Apr 16 17:33:10 pat pluto[28951]: | af+type: OAKLEY_AUTHENTICATION_METHOD
Apr 16 17:33:10 pat pluto[28951]: | length/value: 1
Apr 16 17:33:10 pat pluto[28951]: | ******parse ISAKMP Oakley attribute:
Apr 16 17:33:10 pat pluto[28951]: | af+type: OAKLEY_HASH_ALGORITHM
Apr 16 17:33:10 pat pluto[28951]: | length/value: 1
Apr 16 17:33:10 pat pluto[28951]: | ******parse ISAKMP Oakley attribute:
Apr 16 17:33:10 pat pluto[28951]: | af+type: OAKLEY_GROUP_DESCRIPTION
Apr 16 17:33:10 pat pluto[28951]: | length/value: 2
Apr 16 17:33:10 pat pluto[28951]: | find_host_connection2 called from
main_inI1_outR1, me=193.59.3.10:500 him=%any:500 policy=PSK
Apr 16 17:33:10 pat pluto[28951]: | find_host_pair: comparing to
193.59.3.10:500 0.0.0.0:500
Apr 16 17:33:10 pat pluto[28951]: | find_host_pair_conn
(find_host_connection2): 193.59.3.10:500 %any:500 -> hp:L2TP-PSK-CLIENTS
Apr 16 17:33:10 pat pluto[28951]: | searching for connection with policy
= PSK
Apr 16 17:33:10 pat pluto[28951]: | found policy =
PSK+ENCRYPT+DONTREKEY+IKEv2ALLOW (L2TP-PSK-CLIENTS)
Apr 16 17:33:10 pat pluto[28951]: | find_host_connection2 returns
L2TP-PSK-CLIENTS
Apr 16 17:33:10 pat pluto[28951]: | find_host_pair: comparing to
193.59.3.10:500 0.0.0.0:500
Apr 16 17:33:10 pat pluto[28951]: | connect_to_host_pair:
193.59.3.10:500 93.154.254.88:500 -> hp:none
Apr 16 17:33:10 pat pluto[28951]: | instantiated "L2TP-PSK-CLIENTS" for
93.154.254.88
Apr 16 17:33:10 pat pluto[28951]: | creating state object #1 at 0x8156bb0
Apr 16 17:33:10 pat pluto[28951]: | processing connection
L2TP-PSK-CLIENTS[1] 93.154.254.88
Apr 16 17:33:10 pat pluto[28951]: | ICOOKIE: fd 5a 54 0a f7 ba 37 6b
Apr 16 17:33:10 pat pluto[28951]: | RCOOKIE: 50 80 75 74 f1 4c 26 93
Apr 16 17:33:10 pat pluto[28951]: | state hash entry 25
Apr 16 17:33:10 pat pluto[28951]: | inserting state object #1 on chain 25
Apr 16 17:33:10 pat pluto[28951]: | inserting event EVENT_SO_DISCARD,
timeout in 0 seconds for #1
Apr 16 17:33:10 pat pluto[28951]: | event added at head of queue
Apr 16 17:33:10 pat pluto[28951]: "L2TP-PSK-CLIENTS"[1] 93.154.254.88
#1: responding to Main Mode from unknown peer 93.154.254.88
Apr 16 17:33:10 pat pluto[28951]: | **emit ISAKMP Message:
Apr 16 17:33:10 pat pluto[28951]: | initiator cookie:
Apr 16 17:33:10 pat pluto[28951]: | fd 5a 54 0a f7 ba 37 6b
Apr 16 17:33:10 pat pluto[28951]: | responder cookie:
Apr 16 17:33:10 pat pluto[28951]: | 50 80 75 74 f1 4c 26 93
Apr 16 17:33:10 pat pluto[28951]: | next payload type: ISAKMP_NEXT_SA
Apr 16 17:33:10 pat pluto[28951]: | ISAKMP version: ISAKMP Version
1.0 (rfc2407)
Apr 16 17:33:10 pat pluto[28951]: | exchange type: ISAKMP_XCHG_IDPROT
Apr 16 17:33:10 pat pluto[28951]: | flags: none
Apr 16 17:33:10 pat pluto[28951]: | message ID: 00 00 00 00
Apr 16 17:33:10 pat pluto[28951]: | ***emit ISAKMP Security Association
Payload:
Apr 16 17:33:10 pat pluto[28951]: | next payload type: ISAKMP_NEXT_VID
Apr 16 17:33:10 pat pluto[28951]: | DOI: ISAKMP_DOI_IPSEC
Apr 16 17:33:10 pat pluto[28951]: | ****parse IPsec DOI SIT:
Apr 16 17:33:10 pat pluto[28951]: | IPsec DOI SIT: SIT_IDENTITY_ONLY
Apr 16 17:33:10 pat pluto[28951]: | ****parse ISAKMP Proposal Payload:
Apr 16 17:33:10 pat pluto[28951]: | next payload type: ISAKMP_NEXT_NONE
Apr 16 17:33:10 pat pluto[28951]: | length: 280
Apr 16 17:33:10 pat pluto[28951]: | proposal number: 1
Apr 16 17:33:10 pat pluto[28951]: | protocol ID: PROTO_ISAKMP
Apr 16 17:33:10 pat pluto[28951]: | SPI size: 0
Apr 16 17:33:10 pat pluto[28951]: | number of transforms: 8
Apr 16 17:33:10 pat pluto[28951]: | *****parse ISAKMP Transform Payload
(ISAKMP):
Apr 16 17:33:10 pat pluto[28951]: | next payload type: ISAKMP_NEXT_T
Apr 16 17:33:10 pat pluto[28951]: | length: 36
Apr 16 17:33:10 pat pluto[28951]: | transform number: 1
Apr 16 17:33:10 pat pluto[28951]: | transform ID: KEY_IKE
Apr 16 17:33:10 pat pluto[28951]: | ******parse ISAKMP Oakley attribute:
Apr 16 17:33:10 pat pluto[28951]: | af+type: OAKLEY_LIFE_TYPE
Apr 16 17:33:10 pat pluto[28951]: | length/value: 1
Apr 16 17:33:10 pat pluto[28951]: | [1 is OAKLEY_LIFE_SECONDS]
Apr 16 17:33:10 pat pluto[28951]: | ******parse ISAKMP Oakley attribute:
Apr 16 17:33:10 pat pluto[28951]: | af+type: OAKLEY_LIFE_DURATION
Apr 16 17:33:10 pat pluto[28951]: | length/value: 28800
Apr 16 17:33:10 pat pluto[28951]: | ******parse ISAKMP Oakley attribute:
Apr 16 17:33:10 pat pluto[28951]: | af+type: OAKLEY_ENCRYPTION_ALGORITHM
Apr 16 17:33:10 pat pluto[28951]: | length/value: 7
Apr 16 17:33:10 pat pluto[28951]: | [7 is OAKLEY_AES_CBC]
Apr 16 17:33:10 pat pluto[28951]: | ike_alg_enc_ok(ealg=7,key_len=0):
blocksize=16, keyminlen=128, keydeflen=128, keymaxlen=256, ret=1
Apr 16 17:33:10 pat pluto[28951]: | ******parse ISAKMP Oakley attribute:
Apr 16 17:33:10 pat pluto[28951]: | af+type: OAKLEY_KEY_LENGTH
Apr 16 17:33:10 pat pluto[28951]: | length/value: 256
Apr 16 17:33:10 pat pluto[28951]: | ike_alg_enc_ok(ealg=7,key_len=256):
blocksize=16, keyminlen=128, keydeflen=128, keymaxlen=256, ret=1
Apr 16 17:33:10 pat pluto[28951]: | ******parse ISAKMP Oakley attribute:
Apr 16 17:33:10 pat pluto[28951]: | af+type: OAKLEY_AUTHENTICATION_METHOD
Apr 16 17:33:10 pat pluto[28951]: | length/value: 1
Apr 16 17:33:10 pat pluto[28951]: | [1 is OAKLEY_PRESHARED_KEY]
Apr 16 17:33:10 pat pluto[28951]: | started looking for secret for
193.59.3.10->93.154.254.88 of kind PPK_PSK
Apr 16 17:33:10 pat pluto[28951]: | instantiating him to 0.0.0.0
Apr 16 17:33:10 pat pluto[28951]: | actually looking for secret for
193.59.3.10->%any of kind PPK_PSK
Apr 16 17:33:10 pat pluto[28951]: | line 10: key type
PPK_PSK(193.59.3.10) to type PPK_PSK
Apr 16 17:33:10 pat pluto[28951]: | 1: compared key %any to 193.59.3.10
/ %any -> 2
Apr 16 17:33:10 pat pluto[28951]: | 2: compared key 193.59.3.10 to
193.59.3.10 / %any -> 10
Apr 16 17:33:10 pat pluto[28951]: | line 10: match=10
Apr 16 17:33:10 pat pluto[28951]: | best_match 0>10 best=0x8152be8 (line=10)
Apr 16 17:33:10 pat pluto[28951]: | concluding with best_match=10
best=0x8152be8 (lineno=10)
Apr 16 17:33:10 pat pluto[28951]: | ******parse ISAKMP Oakley attribute:
Apr 16 17:33:10 pat pluto[28951]: | af+type: OAKLEY_HASH_ALGORITHM
Apr 16 17:33:10 pat pluto[28951]: | length/value: 2
Apr 16 17:33:10 pat pluto[28951]: | [2 is OAKLEY_SHA1]
Apr 16 17:33:10 pat pluto[28951]: | ******parse ISAKMP Oakley attribute:
Apr 16 17:33:10 pat pluto[28951]: | af+type: OAKLEY_GROUP_DESCRIPTION
Apr 16 17:33:10 pat pluto[28951]: | length/value: 2
Apr 16 17:33:10 pat pluto[28951]: | [2 is OAKLEY_GROUP_MODP1024]
Apr 16 17:33:10 pat pluto[28951]: | Oakley Transform 1 accepted
Apr 16 17:33:10 pat pluto[28951]: | ****emit IPsec DOI SIT:
Apr 16 17:33:10 pat pluto[28951]: | IPsec DOI SIT: SIT_IDENTITY_ONLY
Apr 16 17:33:10 pat pluto[28951]: | ****emit ISAKMP Proposal Payload:
Apr 16 17:33:10 pat pluto[28951]: | next payload type: ISAKMP_NEXT_NONE
Apr 16 17:33:10 pat pluto[28951]: | proposal number: 1
Apr 16 17:33:10 pat pluto[28951]: | protocol ID: PROTO_ISAKMP
Apr 16 17:33:10 pat pluto[28951]: | SPI size: 0
Apr 16 17:33:10 pat pluto[28951]: | number of transforms: 1
Apr 16 17:33:10 pat pluto[28951]: | *****emit ISAKMP Transform Payload
(ISAKMP):
Apr 16 17:33:10 pat pluto[28951]: | next payload type: ISAKMP_NEXT_NONE
Apr 16 17:33:10 pat pluto[28951]: | transform number: 1
Apr 16 17:33:10 pat pluto[28951]: | transform ID: KEY_IKE
Apr 16 17:33:10 pat pluto[28951]: | emitting 28 raw bytes of attributes
into ISAKMP Transform Payload (ISAKMP)
Apr 16 17:33:10 pat pluto[28951]: | attributes 80 0b 00 01 80 0c 70 80
80 01 00 07 80 0e 01 00
Apr 16 17:33:10 pat pluto[28951]: | attributes 80 03 00 01 80 02 00 02
80 04 00 02
Apr 16 17:33:10 pat pluto[28951]: | emitting length of ISAKMP Transform
Payload (ISAKMP): 36
Apr 16 17:33:10 pat pluto[28951]: | emitting length of ISAKMP Proposal
Payload: 44
Apr 16 17:33:10 pat pluto[28951]: | emitting length of ISAKMP Security
Association Payload: 56
Apr 16 17:33:10 pat pluto[28951]: | ***emit ISAKMP Vendor ID Payload:
Apr 16 17:33:10 pat pluto[28951]: | next payload type: ISAKMP_NEXT_VID
Apr 16 17:33:10 pat pluto[28951]: | emitting 12 raw bytes of Vendor ID
into ISAKMP Vendor ID Payload
Apr 16 17:33:10 pat pluto[28951]: | Vendor ID 4f 45 51 7b 4f 7f 6e 65
7a 7b 43 51
Apr 16 17:33:10 pat pluto[28951]: | emitting length of ISAKMP Vendor ID
Payload: 16
Apr 16 17:33:10 pat pluto[28951]: | out_vendorid(): sending [Dead Peer
Detection]
Apr 16 17:33:10 pat pluto[28951]: | ***emit ISAKMP Vendor ID Payload:
Apr 16 17:33:10 pat pluto[28951]: | next payload type: ISAKMP_NEXT_VID
Apr 16 17:33:10 pat pluto[28951]: | emitting 16 raw bytes of V_ID into
ISAKMP Vendor ID Payload
Apr 16 17:33:10 pat pluto[28951]: | V_ID af ca d7 13 68 a1 f1 c9 6b
86 96 fc 77 57 01 00
Apr 16 17:33:10 pat pluto[28951]: | emitting length of ISAKMP Vendor ID
Payload: 20
Apr 16 17:33:10 pat pluto[28951]: | sender checking NAT-t: 1 and 109
Apr 16 17:33:10 pat pluto[28951]: | out_vendorid(): sending [RFC 3947]
Apr 16 17:33:10 pat pluto[28951]: | ***emit ISAKMP Vendor ID Payload:
Apr 16 17:33:10 pat pluto[28951]: | next payload type: ISAKMP_NEXT_NONE
Apr 16 17:33:10 pat pluto[28951]: | emitting 16 raw bytes of V_ID into
ISAKMP Vendor ID Payload
Apr 16 17:33:10 pat pluto[28951]: | V_ID 4a 13 1c 81 07 03 58 45 5c
57 28 f2 0e 95 45 2f
Apr 16 17:33:10 pat pluto[28951]: | emitting length of ISAKMP Vendor ID
Payload: 20
Apr 16 17:33:10 pat pluto[28951]: | emitting length of ISAKMP Message: 140
Apr 16 17:33:10 pat pluto[28951]: | peer supports dpd
Apr 16 17:33:10 pat pluto[28951]: | enabling sending dpd
Apr 16 17:33:10 pat pluto[28951]: | complete state transition with STF_OK
Apr 16 17:33:10 pat pluto[28951]: "L2TP-PSK-CLIENTS"[1] 93.154.254.88
#1: transition from state STATE_MAIN_R0 to state STATE_MAIN_R1
Apr 16 17:33:10 pat pluto[28951]: | deleting event for #1
Apr 16 17:33:10 pat pluto[28951]: | sending reply packet to
93.154.254.88:500 (from port 500)
Apr 16 17:33:10 pat pluto[28951]: | sending 140 bytes for STATE_MAIN_R0
through eth0:500 to 93.154.254.88:500 (using #1)
Apr 16 17:33:10 pat pluto[28951]: | fd 5a 54 0a f7 ba 37 6b 50 80 75
74 f1 4c 26 93
Apr 16 17:33:10 pat pluto[28951]: | 01 10 02 00 00 00 00 00 00 00 00
8c 0d 00 00 38
Apr 16 17:33:10 pat pluto[28951]: | 00 00 00 01 00 00 00 01 00 00 00
2c 01 01 00 01
Apr 16 17:33:10 pat pluto[28951]: | 00 00 00 24 01 01 00 00 80 0b 00
01 80 0c 70 80
Apr 16 17:33:10 pat pluto[28951]: | 80 01 00 07 80 0e 01 00 80 03 00
01 80 02 00 02
Apr 16 17:33:10 pat pluto[28951]: | 80 04 00 02 0d 00 00 10 4f 45 51
7b 4f 7f 6e 65
Apr 16 17:33:10 pat pluto[28951]: | 7a 7b 43 51 0d 00 00 14 af ca d7
13 68 a1 f1 c9
Apr 16 17:33:10 pat pluto[28951]: | 6b 86 96 fc 77 57 01 00 00 00 00
14 4a 13 1c 81
Apr 16 17:33:10 pat pluto[28951]: | 07 03 58 45 5c 57 28 f2 0e 95 45 2f
Apr 16 17:33:10 pat pluto[28951]: | inserting event EVENT_RETRANSMIT,
timeout in 10 seconds for #1
Apr 16 17:33:10 pat pluto[28951]: | event added after event
EVENT_PENDING_DDNS
Apr 16 17:33:10 pat pluto[28951]: "L2TP-PSK-CLIENTS"[1] 93.154.254.88
#1: STATE_MAIN_R1: sent MR1, expecting MI2
Apr 16 17:33:10 pat pluto[28951]: | modecfg pull: noquirk policy:push
not-client
Apr 16 17:33:10 pat pluto[28951]: | phase 1 is done, looking for phase 2
to unpend
Apr 16 17:33:10 pat pluto[28951]: | * processed 0 messages from
cryptographic helpers
Apr 16 17:33:10 pat pluto[28951]: | next event EVENT_PENDING_DDNS in 6
seconds
Apr 16 17:33:10 pat pluto[28951]: | next event EVENT_PENDING_DDNS in 6
seconds
Apr 16 17:33:10 pat pluto[28951]: |
Apr 16 17:33:10 pat pluto[28951]: | *received 228 bytes from
93.154.254.88:500 on eth0 (port=500)
Apr 16 17:33:10 pat pluto[28951]: | fd 5a 54 0a f7 ba 37 6b 50 80 75
74 f1 4c 26 93
Apr 16 17:33:10 pat pluto[28951]: | 04 10 02 00 00 00 00 00 00 00 00
e4 0a 00 00 84
Apr 16 17:33:10 pat pluto[28951]: | 95 a1 af 0e 5d 26 52 8e 5c 13 93
8d d2 05 28 1e
Apr 16 17:33:10 pat pluto[28951]: | 13 f3 8a f7 19 1b 63 68 63 50 1e
d3 97 e6 65 fb
Apr 16 17:33:10 pat pluto[28951]: | 65 d8 f8 c4 aa 45 49 b8 0d c2 b1
8d 7d 29 cd 05
Apr 16 17:33:10 pat pluto[28951]: | bb a5 d5 af dd 0a da 10 c9 ec 14
13 7c db 4b 6d
Apr 16 17:33:10 pat pluto[28951]: | c9 b2 30 7c a2 2f 35 df 0a 68 33
3a 17 05 8b 0b
Apr 16 17:33:10 pat pluto[28951]: | 08 cd fe a4 62 e6 d9 9a f5 5f da
46 30 40 08 62
Apr 16 17:33:10 pat pluto[28951]: | ac 3c d9 e1 01 e2 85 da 81 35 aa
a9 f6 27 d8 5e
Apr 16 17:33:10 pat pluto[28951]: | 95 8b 02 eb 71 fa 82 f1 10 e9 19
62 54 75 71 7c
Apr 16 17:33:10 pat pluto[28951]: | 14 00 00 14 90 7f a9 7d 93 9e c9
68 bb 8b d5 ef
Apr 16 17:33:10 pat pluto[28951]: | 3a 71 fe 20 14 00 00 18 0c b1 a9
c2 3c 6d a8 e3
Apr 16 17:33:10 pat pluto[28951]: | 46 94 be 03 cb bb 6e 54 85 60 20
94 00 00 00 18
Apr 16 17:33:10 pat pluto[28951]: | 52 2a 0e 70 be 78 e9 d3 dc 61 5b
6d 42 bf 2d 1d
Apr 16 17:33:10 pat pluto[28951]: | 5a 8d 48 14
Apr 16 17:33:10 pat pluto[28951]: | **parse ISAKMP Message:
Apr 16 17:33:10 pat pluto[28951]: | initiator cookie:
Apr 16 17:33:10 pat pluto[28951]: | fd 5a 54 0a f7 ba 37 6b
Apr 16 17:33:10 pat pluto[28951]: | responder cookie:
Apr 16 17:33:10 pat pluto[28951]: | 50 80 75 74 f1 4c 26 93
Apr 16 17:33:10 pat pluto[28951]: | next payload type: ISAKMP_NEXT_KE
Apr 16 17:33:10 pat pluto[28951]: | ISAKMP version: ISAKMP Version
1.0 (rfc2407)
Apr 16 17:33:10 pat pluto[28951]: | exchange type: ISAKMP_XCHG_IDPROT
Apr 16 17:33:10 pat pluto[28951]: | flags: none
Apr 16 17:33:10 pat pluto[28951]: | message ID: 00 00 00 00
Apr 16 17:33:10 pat pluto[28951]: | length: 228
Apr 16 17:33:10 pat pluto[28951]: | processing version=1.0 packet with
exchange type=ISAKMP_XCHG_IDPROT (2)
Apr 16 17:33:10 pat pluto[28951]: | ICOOKIE: fd 5a 54 0a f7 ba 37 6b
Apr 16 17:33:10 pat pluto[28951]: | RCOOKIE: 50 80 75 74 f1 4c 26 93
Apr 16 17:33:10 pat pluto[28951]: | state hash entry 25
Apr 16 17:33:10 pat pluto[28951]: | v1 peer and cookies match on #1,
provided msgid 00000000 vs 00000000
Apr 16 17:33:10 pat pluto[28951]: | v1 state object #1 found, in
STATE_MAIN_R1
Apr 16 17:33:10 pat pluto[28951]: | processing connection
L2TP-PSK-CLIENTS[1] 93.154.254.88
Apr 16 17:33:10 pat pluto[28951]: | got payload 0x10(ISAKMP_NEXT_KE)
needed: 0x410 opt: 0x102080
Apr 16 17:33:10 pat pluto[28951]: | ***parse ISAKMP Key Exchange Payload:
Apr 16 17:33:10 pat pluto[28951]: | next payload type: ISAKMP_NEXT_NONCE
Apr 16 17:33:10 pat pluto[28951]: | length: 132
Apr 16 17:33:10 pat pluto[28951]: | got payload 0x400(ISAKMP_NEXT_NONCE)
needed: 0x400 opt: 0x102080
Apr 16 17:33:10 pat pluto[28951]: | ***parse ISAKMP Nonce Payload:
Apr 16 17:33:10 pat pluto[28951]: | next payload type: ISAKMP_NEXT_NAT-D
Apr 16 17:33:10 pat pluto[28951]: | length: 20
Apr 16 17:33:10 pat pluto[28951]: | got payload
0x100000(ISAKMP_NEXT_NAT-D) needed: 0x0 opt: 0x102080
Apr 16 17:33:10 pat pluto[28951]: | ***parse ISAKMP NAT-D Payload:
Apr 16 17:33:10 pat pluto[28951]: | next payload type: ISAKMP_NEXT_NAT-D
Apr 16 17:33:10 pat pluto[28951]: | length: 24
Apr 16 17:33:10 pat pluto[28951]: | got payload
0x100000(ISAKMP_NEXT_NAT-D) needed: 0x0 opt: 0x102080
Apr 16 17:33:10 pat pluto[28951]: | ***parse ISAKMP NAT-D Payload:
Apr 16 17:33:10 pat pluto[28951]: | next payload type: ISAKMP_NEXT_NONE
Apr 16 17:33:10 pat pluto[28951]: | length: 24
Apr 16 17:33:10 pat pluto[28951]: | DH public value received:
Apr 16 17:33:10 pat pluto[28951]: | 95 a1 af 0e 5d 26 52 8e 5c 13 93
8d d2 05 28 1e
Apr 16 17:33:10 pat pluto[28951]: | 13 f3 8a f7 19 1b 63 68 63 50 1e
d3 97 e6 65 fb
Apr 16 17:33:10 pat pluto[28951]: | 65 d8 f8 c4 aa 45 49 b8 0d c2 b1
8d 7d 29 cd 05
Apr 16 17:33:10 pat pluto[28951]: | bb a5 d5 af dd 0a da 10 c9 ec 14
13 7c db 4b 6d
Apr 16 17:33:10 pat pluto[28951]: | c9 b2 30 7c a2 2f 35 df 0a 68 33
3a 17 05 8b 0b
Apr 16 17:33:10 pat pluto[28951]: | 08 cd fe a4 62 e6 d9 9a f5 5f da
46 30 40 08 62
Apr 16 17:33:10 pat pluto[28951]: | ac 3c d9 e1 01 e2 85 da 81 35 aa
a9 f6 27 d8 5e
Apr 16 17:33:10 pat pluto[28951]: | 95 8b 02 eb 71 fa 82 f1 10 e9 19
62 54 75 71 7c
Apr 16 17:33:10 pat pluto[28951]: | inI2: checking NAT-t: 1 and 32
Apr 16 17:33:10 pat pluto[28951]: | _natd_hash: hasher=0x81356a0(20)
Apr 16 17:33:10 pat pluto[28951]: | _natd_hash: icookie=
Apr 16 17:33:10 pat pluto[28951]: | fd 5a 54 0a f7 ba 37 6b
Apr 16 17:33:10 pat pluto[28951]: | _natd_hash: rcookie=
Apr 16 17:33:10 pat pluto[28951]: | 50 80 75 74 f1 4c 26 93
Apr 16 17:33:10 pat pluto[28951]: | _natd_hash: ip= c1 3b 21 0a
Apr 16 17:33:10 pat pluto[28951]: | _natd_hash: port=500
Apr 16 17:33:10 pat pluto[28951]: | _natd_hash: hash= 0c b1 a9 c2 3c
6d a8 e3 46 94 be 03 cb bb 6e 54
Apr 16 17:33:10 pat pluto[28951]: | _natd_hash: hash= 85 60 20 94
Apr 16 17:33:10 pat pluto[28951]: | _natd_hash: hasher=0x81356a0(20)
Apr 16 17:33:10 pat pluto[28951]: | _natd_hash: icookie=
Apr 16 17:33:10 pat pluto[28951]: | fd 5a 54 0a f7 ba 37 6b
Apr 16 17:33:10 pat pluto[28951]: | _natd_hash: rcookie=
Apr 16 17:33:10 pat pluto[28951]: | 50 80 75 74 f1 4c 26 93
Apr 16 17:33:10 pat pluto[28951]: | _natd_hash: ip= 5d 9a fe 58
Apr 16 17:33:10 pat pluto[28951]: | _natd_hash: port=500
Apr 16 17:33:10 pat pluto[28951]: | _natd_hash: hash= 52 2a 0e 70 be
78 e9 d3 dc 61 5b 6d 42 bf 2d 1d
Apr 16 17:33:10 pat pluto[28951]: | _natd_hash: hash= 5a 8d 48 14
Apr 16 17:33:10 pat pluto[28951]: | NAT_TRAVERSAL hash=0 (me:0) (him:0)
Apr 16 17:33:10 pat pluto[28951]: | expected NAT-D(me): 0c b1 a9 c2 3c
6d a8 e3 46 94 be 03 cb bb 6e 54
Apr 16 17:33:10 pat pluto[28951]: | expected NAT-D(me): 85 60 20 94
Apr 16 17:33:10 pat pluto[28951]: | expected NAT-D(him):
Apr 16 17:33:10 pat pluto[28951]: | 52 2a 0e 70 be 78 e9 d3 dc 61 5b
6d 42 bf 2d 1d
Apr 16 17:33:10 pat pluto[28951]: | 5a 8d 48 14
Apr 16 17:33:10 pat pluto[28951]: | received NAT-D: 0c b1 a9 c2 3c 6d
a8 e3 46 94 be 03 cb bb 6e 54
Apr 16 17:33:10 pat pluto[28951]: | received NAT-D: 85 60 20 94
Apr 16 17:33:10 pat pluto[28951]: | NAT_TRAVERSAL hash=1 (me:1) (him:0)
Apr 16 17:33:10 pat pluto[28951]: | expected NAT-D(me): 0c b1 a9 c2 3c
6d a8 e3 46 94 be 03 cb bb 6e 54
Apr 16 17:33:10 pat pluto[28951]: | expected NAT-D(me): 85 60 20 94
Apr 16 17:33:10 pat pluto[28951]: | expected NAT-D(him):
Apr 16 17:33:10 pat pluto[28951]: | 52 2a 0e 70 be 78 e9 d3 dc 61 5b
6d 42 bf 2d 1d
Apr 16 17:33:10 pat pluto[28951]: | 5a 8d 48 14
Apr 16 17:33:10 pat pluto[28951]: | received NAT-D: 52 2a 0e 70 be 78
e9 d3 dc 61 5b 6d 42 bf 2d 1d
Apr 16 17:33:10 pat pluto[28951]: | received NAT-D: 5a 8d 48 14
Apr 16 17:33:10 pat pluto[28951]: | NAT_TRAVERSAL hash=2 (me:1) (him:1)
Apr 16 17:33:10 pat pluto[28951]: "L2TP-PSK-CLIENTS"[1] 93.154.254.88
#1: NAT-Traversal: Result using RFC 3947 (NAT-Traversal): no NAT detected
Apr 16 17:33:10 pat pluto[28951]: | inserting event
EVENT_NAT_T_KEEPALIVE, timeout in 20 seconds
Apr 16 17:33:10 pat pluto[28951]: | event added after event
EVENT_RETRANSMIT for #1
Apr 16 17:33:10 pat pluto[28951]: | helper -1 doing build_kenonce op id: 0
Apr 16 17:33:10 pat pluto[28951]: | Local DH secret:
Apr 16 17:33:10 pat pluto[28951]: | fc fc 40 c5 d1 fe d5 72 1d f2 f6
19 26 8d 84 19
Apr 16 17:33:10 pat pluto[28951]: | 4e 6e 23 ba 10 68 75 cc 55 2f 1d
d7 09 e7 9e e6
Apr 16 17:33:10 pat pluto[28951]: | Public DH value sent:
Apr 16 17:33:10 pat pluto[28951]: | 24 51 38 73 47 6f 3d 48 28 ed 68
3e d2 80 16 64
Apr 16 17:33:10 pat pluto[28951]: | 3e 7b 57 a2 18 18 de 9f d9 77 3c
bf 05 4c 9d 77
Apr 16 17:33:10 pat pluto[28951]: | 17 ce 54 e6 ef 12 52 dd 52 34 a6
39 da e1 b1 5c
Apr 16 17:33:10 pat pluto[28951]: | 5e 48 18 bb d6 8c 5f f3 04 bb b8
af 86 19 09 a0
Apr 16 17:33:10 pat pluto[28951]: | df 30 3a b9 8a 02 d2 b6 0e d2 ce
02 d0 4e 7d 88
Apr 16 17:33:10 pat pluto[28951]: | ee b0 a3 20 d0 00 f4 e2 5a 36 9e
9b d1 48 76 b4
Apr 16 17:33:10 pat pluto[28951]: | fc 4e 84 a1 d2 01 b7 dd f6 92 27
df 75 77 f9 74
Apr 16 17:33:10 pat pluto[28951]: | 0c 4e c7 8d 3e e3 d8 09 e8 5c 9c
c1 aa b4 6d c0
Apr 16 17:33:10 pat pluto[28951]: | Generated nonce:
Apr 16 17:33:10 pat pluto[28951]: | 73 77 3b 60 31 34 9c 13 5a 62 3c
8c 13 2a f8 87
Apr 16 17:33:10 pat pluto[28951]: | main inI2_outR2: calculated
ke+nonce, sending R2
Apr 16 17:33:10 pat pluto[28951]: | processing connection
L2TP-PSK-CLIENTS[1] 93.154.254.88
Apr 16 17:33:10 pat pluto[28951]: | **emit ISAKMP Message:
Apr 16 17:33:10 pat pluto[28951]: | initiator cookie:
Apr 16 17:33:10 pat pluto[28951]: | fd 5a 54 0a f7 ba 37 6b
Apr 16 17:33:10 pat pluto[28951]: | responder cookie:
Apr 16 17:33:10 pat pluto[28951]: | 50 80 75 74 f1 4c 26 93
Apr 16 17:33:10 pat pluto[28951]: | next payload type: ISAKMP_NEXT_KE
Apr 16 17:33:10 pat pluto[28951]: | ISAKMP version: ISAKMP Version
1.0 (rfc2407)
Apr 16 17:33:10 pat pluto[28951]: | exchange type: ISAKMP_XCHG_IDPROT
Apr 16 17:33:10 pat pluto[28951]: | flags: none
Apr 16 17:33:10 pat pluto[28951]: | message ID: 00 00 00 00
Apr 16 17:33:10 pat pluto[28951]: | ***emit ISAKMP Key Exchange Payload:
Apr 16 17:33:10 pat pluto[28951]: | next payload type: ISAKMP_NEXT_NONCE
Apr 16 17:33:10 pat pluto[28951]: | emitting 128 raw bytes of keyex
value into ISAKMP Key Exchange Payload
Apr 16 17:33:10 pat pluto[28951]: | keyex value 24 51 38 73 47 6f 3d
48 28 ed 68 3e d2 80 16 64
Apr 16 17:33:10 pat pluto[28951]: | keyex value 3e 7b 57 a2 18 18 de
9f d9 77 3c bf 05 4c 9d 77
Apr 16 17:33:10 pat pluto[28951]: | keyex value 17 ce 54 e6 ef 12 52
dd 52 34 a6 39 da e1 b1 5c
Apr 16 17:33:10 pat pluto[28951]: | keyex value 5e 48 18 bb d6 8c 5f
f3 04 bb b8 af 86 19 09 a0
Apr 16 17:33:10 pat pluto[28951]: | keyex value df 30 3a b9 8a 02 d2
b6 0e d2 ce 02 d0 4e 7d 88
Apr 16 17:33:10 pat pluto[28951]: | keyex value ee b0 a3 20 d0 00 f4
e2 5a 36 9e 9b d1 48 76 b4
Apr 16 17:33:10 pat pluto[28951]: | keyex value fc 4e 84 a1 d2 01 b7
dd f6 92 27 df 75 77 f9 74
Apr 16 17:33:10 pat pluto[28951]: | keyex value 0c 4e c7 8d 3e e3 d8
09 e8 5c 9c c1 aa b4 6d c0
Apr 16 17:33:10 pat pluto[28951]: | emitting length of ISAKMP Key
Exchange Payload: 132
Apr 16 17:33:10 pat pluto[28951]: | ***emit ISAKMP Nonce Payload:
Apr 16 17:33:10 pat pluto[28951]: | next payload type: ISAKMP_NEXT_NONE
Apr 16 17:33:10 pat pluto[28951]: | emitting 16 raw bytes of Nr into
ISAKMP Nonce Payload
Apr 16 17:33:10 pat pluto[28951]: | Nr 73 77 3b 60 31 34 9c 13 5a 62
3c 8c 13 2a f8 87
Apr 16 17:33:10 pat pluto[28951]: | emitting length of ISAKMP Nonce
Payload: 20
Apr 16 17:33:10 pat pluto[28951]: | sending NATD payloads
Apr 16 17:33:10 pat pluto[28951]: | _natd_hash: hasher=0x81356a0(20)
Apr 16 17:33:10 pat pluto[28951]: | _natd_hash: icookie=
Apr 16 17:33:10 pat pluto[28951]: | fd 5a 54 0a f7 ba 37 6b
Apr 16 17:33:10 pat pluto[28951]: | _natd_hash: rcookie=
Apr 16 17:33:10 pat pluto[28951]: | 50 80 75 74 f1 4c 26 93
Apr 16 17:33:10 pat pluto[28951]: | _natd_hash: ip= 5d 9a fe 58
Apr 16 17:33:10 pat pluto[28951]: | _natd_hash: port=500
Apr 16 17:33:10 pat pluto[28951]: | _natd_hash: hash= 52 2a 0e 70 be
78 e9 d3 dc 61 5b 6d 42 bf 2d 1d
Apr 16 17:33:10 pat pluto[28951]: | _natd_hash: hash= 5a 8d 48 14
Apr 16 17:33:10 pat pluto[28951]: | ***emit ISAKMP NAT-D Payload:
Apr 16 17:33:10 pat pluto[28951]: | next payload type: ISAKMP_NEXT_NAT-D
Apr 16 17:33:10 pat pluto[28951]: | emitting 20 raw bytes of NAT-D into
ISAKMP NAT-D Payload
Apr 16 17:33:10 pat pluto[28951]: | NAT-D 52 2a 0e 70 be 78 e9 d3 dc
61 5b 6d 42 bf 2d 1d
Apr 16 17:33:10 pat pluto[28951]: | NAT-D 5a 8d 48 14
Apr 16 17:33:10 pat pluto[28951]: | emitting length of ISAKMP NAT-D
Payload: 24
Apr 16 17:33:10 pat pluto[28951]: | _natd_hash: hasher=0x81356a0(20)
Apr 16 17:33:10 pat pluto[28951]: | _natd_hash: icookie=
Apr 16 17:33:10 pat pluto[28951]: | fd 5a 54 0a f7 ba 37 6b
Apr 16 17:33:10 pat pluto[28951]: | _natd_hash: rcookie=
Apr 16 17:33:10 pat pluto[28951]: | 50 80 75 74 f1 4c 26 93
Apr 16 17:33:10 pat pluto[28951]: | _natd_hash: ip= c1 3b 21 0a
Apr 16 17:33:10 pat pluto[28951]: | _natd_hash: port=500
Apr 16 17:33:10 pat pluto[28951]: | _natd_hash: hash= 0c b1 a9 c2 3c
6d a8 e3 46 94 be 03 cb bb 6e 54
Apr 16 17:33:10 pat pluto[28951]: | _natd_hash: hash= 85 60 20 94
Apr 16 17:33:10 pat pluto[28951]: | ***emit ISAKMP NAT-D Payload:
Apr 16 17:33:10 pat pluto[28951]: | next payload type: ISAKMP_NEXT_NONE
Apr 16 17:33:10 pat pluto[28951]: | emitting 20 raw bytes of NAT-D into
ISAKMP NAT-D Payload
Apr 16 17:33:10 pat pluto[28951]: | NAT-D 0c b1 a9 c2 3c 6d a8 e3 46
94 be 03 cb bb 6e 54
Apr 16 17:33:10 pat pluto[28951]: | NAT-D 85 60 20 94
Apr 16 17:33:10 pat pluto[28951]: | emitting length of ISAKMP NAT-D
Payload: 24
Apr 16 17:33:10 pat pluto[28951]: | emitting length of ISAKMP Message: 228
Apr 16 17:33:10 pat pluto[28951]: | main inI2_outR2: starting async DH
calculation (group=2)
Apr 16 17:33:10 pat pluto[28951]: | started looking for secret for
193.59.3.10->93.154.254.88 of kind PPK_PSK
Apr 16 17:33:10 pat pluto[28951]: | instantiating him to 0.0.0.0
Apr 16 17:33:10 pat pluto[28951]: | actually looking for secret for
193.59.3.10->%any of kind PPK_PSK
Apr 16 17:33:10 pat pluto[28951]: | line 10: key type
PPK_PSK(193.59.3.10) to type PPK_PSK
Apr 16 17:33:10 pat pluto[28951]: | 1: compared key %any to 193.59.3.10
/ %any -> 2
Apr 16 17:33:10 pat pluto[28951]: | 2: compared key 193.59.3.10 to
193.59.3.10 / %any -> 10
Apr 16 17:33:10 pat pluto[28951]: | line 10: match=10
Apr 16 17:33:10 pat pluto[28951]: | best_match 0>10 best=0x8152be8 (line=10)
Apr 16 17:33:10 pat pluto[28951]: | concluding with best_match=10
best=0x8152be8 (lineno=10)
Apr 16 17:33:10 pat pluto[28951]: | parent1 type: 7 group: 2 len: 2668
Apr 16 17:33:10 pat pluto[28951]: | helper -1 doing compute dh+iv op id:
135270994
Apr 16 17:33:10 pat pluto[28951]: | peer's g: 95 a1 af 0e 5d 26 52 8e
5c 13 93 8d d2 05 28 1e
Apr 16 17:33:10 pat pluto[28951]: | peer's g: 13 f3 8a f7 19 1b 63 68
63 50 1e d3 97 e6 65 fb
Apr 16 17:33:10 pat pluto[28951]: | peer's g: 65 d8 f8 c4 aa 45 49 b8
0d c2 b1 8d 7d 29 cd 05
Apr 16 17:33:10 pat pluto[28951]: | peer's g: bb a5 d5 af dd 0a da 10
c9 ec 14 13 7c db 4b 6d
Apr 16 17:33:10 pat pluto[28951]: | peer's g: c9 b2 30 7c a2 2f 35 df
0a 68 33 3a 17 05 8b 0b
Apr 16 17:33:10 pat pluto[28951]: | peer's g: 08 cd fe a4 62 e6 d9 9a
f5 5f da 46 30 40 08 62
Apr 16 17:33:10 pat pluto[28951]: | peer's g: ac 3c d9 e1 01 e2 85 da
81 35 aa a9 f6 27 d8 5e
Apr 16 17:33:10 pat pluto[28951]: | peer's g: 95 8b 02 eb 71 fa 82 f1
10 e9 19 62 54 75 71 7c
Apr 16 17:33:10 pat pluto[28951]: | long term secret: fc fc 40 c5 d1
fe d5 72 1d f2 f6 19 26 8d 84 19
Apr 16 17:33:10 pat pluto[28951]: | long term secret: 4e 6e 23 ba 10
68 75 cc 55 2f 1d d7 09 e7 9e e6
Apr 16 17:33:10 pat pluto[28951]: | calc_dh_shared(): time elapsed
(OAKLEY_GROUP_MODP1024): 2033 usec
Apr 16 17:33:10 pat pluto[28951]: | DH shared-secret:
Apr 16 17:33:10 pat pluto[28951]: | 9d 7f e2 9b 64 1a dc f8 63 6c 88
e9 03 6d 93 40
Apr 16 17:33:10 pat pluto[28951]: | 2b c2 fa b4 a0 e1 aa f0 88 14 a9
fe a2 6f 1d a3
Apr 16 17:33:10 pat pluto[28951]: | f5 a4 f8 1f d6 7d 04 04 82 56 1b
bd ed a1 70 7d
Apr 16 17:33:10 pat pluto[28951]: | 43 7e ba b7 12 c4 c6 aa 64 d1 24
ee c4 1f 4c 9e
Apr 16 17:33:10 pat pluto[28951]: | 1f 9d 43 e5 0d 50 24 c1 6c 09 2c
47 c3 0d 8e 25
Apr 16 17:33:10 pat pluto[28951]: | 9b 25 a9 f1 fb 05 c7 c7 b2 2f 31
dd 63 20 48 95
Apr 16 17:33:10 pat pluto[28951]: | b3 16 22 ee 17 c6 b9 38 3b db b1
3f b4 a4 9c 4d
Apr 16 17:33:10 pat pluto[28951]: | f6 b0 c5 35 96 19 a6 ba c9 63 96
91 2d 88 27 04
Apr 16 17:33:10 pat pluto[28951]: | Skey inputs (PSK+NI+NR)
Apr 16 17:33:10 pat pluto[28951]: | ni: 90 7f a9 7d 93 9e c9 68 bb
8b d5 ef 3a 71 fe 20
Apr 16 17:33:10 pat pluto[28951]: | nr: 73 77 3b 60 31 34 9c 13 5a
62 3c 8c 13 2a f8 87
Apr 16 17:33:10 pat pluto[28951]: | keyid: 75 85 9d a7 9f 73 1d 59
25 04 33 3b ee 66 4e 66
Apr 16 17:33:10 pat pluto[28951]: | keyid: 6b bb 66 cb
Apr 16 17:33:10 pat pluto[28951]: | NSS: end of key computation
Apr 16 17:33:10 pat pluto[28951]: | DH_i: 95 a1 af 0e 5d 26 52 8e 5c
13 93 8d d2 05 28 1e
Apr 16 17:33:10 pat pluto[28951]: | DH_i: 13 f3 8a f7 19 1b 63 68 63
50 1e d3 97 e6 65 fb
Apr 16 17:33:10 pat pluto[28951]: | DH_i: 65 d8 f8 c4 aa 45 49 b8 0d
c2 b1 8d 7d 29 cd 05
Apr 16 17:33:10 pat pluto[28951]: | DH_i: bb a5 d5 af dd 0a da 10 c9
ec 14 13 7c db 4b 6d
Apr 16 17:33:10 pat pluto[28951]: | DH_i: c9 b2 30 7c a2 2f 35 df 0a
68 33 3a 17 05 8b 0b
Apr 16 17:33:10 pat pluto[28951]: | DH_i: 08 cd fe a4 62 e6 d9 9a f5
5f da 46 30 40 08 62
Apr 16 17:33:10 pat pluto[28951]: | DH_i: ac 3c d9 e1 01 e2 85 da 81
35 aa a9 f6 27 d8 5e
Apr 16 17:33:10 pat pluto[28951]: | DH_i: 95 8b 02 eb 71 fa 82 f1 10
e9 19 62 54 75 71 7c
Apr 16 17:33:10 pat pluto[28951]: | DH_r: 24 51 38 73 47 6f 3d 48 28
ed 68 3e d2 80 16 64
Apr 16 17:33:10 pat pluto[28951]: | DH_r: 3e 7b 57 a2 18 18 de 9f d9
77 3c bf 05 4c 9d 77
Apr 16 17:33:10 pat pluto[28951]: | DH_r: 17 ce 54 e6 ef 12 52 dd 52
34 a6 39 da e1 b1 5c
Apr 16 17:33:10 pat pluto[28951]: | DH_r: 5e 48 18 bb d6 8c 5f f3 04
bb b8 af 86 19 09 a0
Apr 16 17:33:10 pat pluto[28951]: | DH_r: df 30 3a b9 8a 02 d2 b6 0e
d2 ce 02 d0 4e 7d 88
Apr 16 17:33:10 pat pluto[28951]: | DH_r: ee b0 a3 20 d0 00 f4 e2 5a
36 9e 9b d1 48 76 b4
Apr 16 17:33:10 pat pluto[28951]: | DH_r: fc 4e 84 a1 d2 01 b7 dd f6
92 27 df 75 77 f9 74
Apr 16 17:33:10 pat pluto[28951]: | DH_r: 0c 4e c7 8d 3e e3 d8 09 e8
5c 9c c1 aa b4 6d c0
Apr 16 17:33:10 pat pluto[28951]: | end of IV generation
Apr 16 17:33:10 pat pluto[28951]: | Skeyid: 75 85 9d a7 9f 73 1d 59
25 04 33 3b ee 66 4e 66
Apr 16 17:33:10 pat pluto[28951]: | Skeyid: 6b bb 66 cb
Apr 16 17:33:10 pat pluto[28951]: | Skeyid_d: 87 4b d5 8d 33 c9 3b ef
2c 3e 78 8f 46 21 55 36
Apr 16 17:33:10 pat pluto[28951]: | Skeyid_d: c8 ff 96 ad
Apr 16 17:33:10 pat pluto[28951]: | Skeyid_a: 69 67 ab 20 bb e4 ff 13
c6 60 2f 51 68 bd ef 4c
Apr 16 17:33:10 pat pluto[28951]: | Skeyid_a: c3 57 a6 e2
Apr 16 17:33:10 pat pluto[28951]: | Skeyid_e: 31 be 2d c0 02 f6 fa 06
7c ea 61 43 67 38 a4 21
Apr 16 17:33:10 pat pluto[28951]: | Skeyid_e: 6a 41 66 8c
Apr 16 17:33:10 pat pluto[28951]: | enc key: fe 1d 55 e3 fd 53 df 6b
5f f1 f5 a7 79 2e fc 5a
Apr 16 17:33:10 pat pluto[28951]: | enc key: b9 13 0e 3f 11 16 b0 c1
c9 af de 1b 0b 3f 0b 64
Apr 16 17:33:10 pat pluto[28951]: | IV: ee 15 52 52 4e 4f af f0 75 f9
40 13 1c f3 54 e1
Apr 16 17:33:10 pat pluto[28951]: | IV: 06 aa 9b 64
Apr 16 17:33:10 pat pluto[28951]: | main inI2_outR2: calculated DH finished
Apr 16 17:33:10 pat pluto[28951]: | processing connection
L2TP-PSK-CLIENTS[1] 93.154.254.88
Apr 16 17:33:10 pat pluto[28951]: | started dh_secretiv, returned:
stf=STF_INLINE
Apr 16 17:33:10 pat pluto[28951]: | complete state transition with STF_OK
Apr 16 17:33:10 pat pluto[28951]: "L2TP-PSK-CLIENTS"[1] 93.154.254.88
#1: transition from state STATE_MAIN_R1 to state STATE_MAIN_R2
Apr 16 17:33:10 pat pluto[28951]: | deleting event for #1
Apr 16 17:33:10 pat pluto[28951]: | sending reply packet to
93.154.254.88:500 (from port 500)
Apr 16 17:33:10 pat pluto[28951]: | sending 228 bytes for STATE_MAIN_R1
through eth0:500 to 93.154.254.88:500 (using #1)
Apr 16 17:33:10 pat pluto[28951]: | fd 5a 54 0a f7 ba 37 6b 50 80 75
74 f1 4c 26 93
Apr 16 17:33:10 pat pluto[28951]: | 04 10 02 00 00 00 00 00 00 00 00
e4 0a 00 00 84
Apr 16 17:33:10 pat pluto[28951]: | 24 51 38 73 47 6f 3d 48 28 ed 68
3e d2 80 16 64
Apr 16 17:33:10 pat pluto[28951]: | 3e 7b 57 a2 18 18 de 9f d9 77 3c
bf 05 4c 9d 77
Apr 16 17:33:10 pat pluto[28951]: | 17 ce 54 e6 ef 12 52 dd 52 34 a6
39 da e1 b1 5c
Apr 16 17:33:10 pat pluto[28951]: | 5e 48 18 bb d6 8c 5f f3 04 bb b8
af 86 19 09 a0
Apr 16 17:33:10 pat pluto[28951]: | df 30 3a b9 8a 02 d2 b6 0e d2 ce
02 d0 4e 7d 88
Apr 16 17:33:10 pat pluto[28951]: | ee b0 a3 20 d0 00 f4 e2 5a 36 9e
9b d1 48 76 b4
Apr 16 17:33:10 pat pluto[28951]: | fc 4e 84 a1 d2 01 b7 dd f6 92 27
df 75 77 f9 74
Apr 16 17:33:10 pat pluto[28951]: | 0c 4e c7 8d 3e e3 d8 09 e8 5c 9c
c1 aa b4 6d c0
Apr 16 17:33:10 pat pluto[28951]: | 14 00 00 14 73 77 3b 60 31 34 9c
13 5a 62 3c 8c
Apr 16 17:33:10 pat pluto[28951]: | 13 2a f8 87 14 00 00 18 52 2a 0e
70 be 78 e9 d3
Apr 16 17:33:10 pat pluto[28951]: | dc 61 5b 6d 42 bf 2d 1d 5a 8d 48
14 00 00 00 18
Apr 16 17:33:10 pat pluto[28951]: | 0c b1 a9 c2 3c 6d a8 e3 46 94 be
03 cb bb 6e 54
Apr 16 17:33:10 pat pluto[28951]: | 85 60 20 94
Apr 16 17:33:10 pat pluto[28951]: | inserting event EVENT_RETRANSMIT,
timeout in 10 seconds for #1
Apr 16 17:33:10 pat pluto[28951]: | event added after event
EVENT_PENDING_DDNS
Apr 16 17:33:10 pat pluto[28951]: "L2TP-PSK-CLIENTS"[1] 93.154.254.88
#1: STATE_MAIN_R2: sent MR2, expecting MI3
Apr 16 17:33:10 pat pluto[28951]: | modecfg pull: noquirk policy:push
not-client
Apr 16 17:33:10 pat pluto[28951]: | phase 1 is done, looking for phase 2
to unpend
Apr 16 17:33:10 pat pluto[28951]: | complete state transition with
STF_INLINE
Apr 16 17:33:10 pat pluto[28951]: | * processed 0 messages from
cryptographic helpers
Apr 16 17:33:10 pat pluto[28951]: | next event EVENT_PENDING_DDNS in 6
seconds
Apr 16 17:33:10 pat pluto[28951]: | next event EVENT_PENDING_DDNS in 6
seconds
Apr 16 17:33:10 pat pluto[28951]: |
Apr 16 17:33:10 pat pluto[28951]: | *received 92 bytes from
93.154.254.88:500 on eth0 (port=500)
Apr 16 17:33:10 pat pluto[28951]: | fd 5a 54 0a f7 ba 37 6b 50 80 75
74 f1 4c 26 93
Apr 16 17:33:10 pat pluto[28951]: | 05 10 02 01 00 00 00 00 00 00 00
5c 69 99 d9 2e
Apr 16 17:33:10 pat pluto[28951]: | ff 1a a1 67 6b 62 7e 3e 7f 42 f0
bd fd d8 45 23
Apr 16 17:33:10 pat pluto[28951]: | b9 8a bf fd 2e b8 21 95 b7 b6 0c
12 d0 27 c9 de
Apr 16 17:33:10 pat pluto[28951]: | 25 a8 9c f4 7f 54 0b b8 db f8 e0
7a bd 0b dc 15
Apr 16 17:33:10 pat pluto[28951]: | 81 8c 76 ec 9d 52 ba 5b 1b 23 b5 09
Apr 16 17:33:10 pat pluto[28951]: | **parse ISAKMP Message:
Apr 16 17:33:10 pat pluto[28951]: | initiator cookie:
Apr 16 17:33:10 pat pluto[28951]: | fd 5a 54 0a f7 ba 37 6b
Apr 16 17:33:10 pat pluto[28951]: | responder cookie:
Apr 16 17:33:10 pat pluto[28951]: | 50 80 75 74 f1 4c 26 93
Apr 16 17:33:10 pat pluto[28951]: | next payload type: ISAKMP_NEXT_ID
Apr 16 17:33:10 pat pluto[28951]: | ISAKMP version: ISAKMP Version
1.0 (rfc2407)
Apr 16 17:33:10 pat pluto[28951]: | exchange type: ISAKMP_XCHG_IDPROT
Apr 16 17:33:10 pat pluto[28951]: | flags: ISAKMP_FLAG_ENCRYPTION
Apr 16 17:33:10 pat pluto[28951]: | message ID: 00 00 00 00
Apr 16 17:33:10 pat pluto[28951]: | length: 92
Apr 16 17:33:10 pat pluto[28951]: | processing version=1.0 packet with
exchange type=ISAKMP_XCHG_IDPROT (2)
Apr 16 17:33:10 pat pluto[28951]: | ICOOKIE: fd 5a 54 0a f7 ba 37 6b
Apr 16 17:33:10 pat pluto[28951]: | RCOOKIE: 50 80 75 74 f1 4c 26 93
Apr 16 17:33:10 pat pluto[28951]: | state hash entry 25
Apr 16 17:33:10 pat pluto[28951]: | v1 peer and cookies match on #1,
provided msgid 00000000 vs 00000000
Apr 16 17:33:10 pat pluto[28951]: | v1 state object #1 found, in
STATE_MAIN_R2
Apr 16 17:33:10 pat pluto[28951]: | processing connection
L2TP-PSK-CLIENTS[1] 93.154.254.88
Apr 16 17:33:10 pat pluto[28951]: | received encrypted packet from
93.154.254.88:500
Apr 16 17:33:10 pat pluto[28951]: | decrypting 64 bytes using algorithm
OAKLEY_AES_CBC
Apr 16 17:33:10 pat pluto[28951]: | decrypted:
Apr 16 17:33:10 pat pluto[28951]: | 08 00 00 0c 01 11 01 f4 5d 9a fe
58 00 00 00 18
Apr 16 17:33:10 pat pluto[28951]: | b2 d0 21 3d 26 47 2b 41 5b 99 85
0f 0a b0 54 c6
Apr 16 17:33:10 pat pluto[28951]: | da 2d 50 c2 e5 94 91 df e9 bc 88
fa 82 fa f3 87
Apr 16 17:33:10 pat pluto[28951]: | ef 8b c2 9d 8f d6 f8 e0 f7 e7 ff
d9 f1 e8 e4 1b
Apr 16 17:33:10 pat pluto[28951]: | next IV: bd 0b dc 15 81 8c 76 ec
9d 52 ba 5b 1b 23 b5 09
Apr 16 17:33:10 pat pluto[28951]: | got payload 0x20(ISAKMP_NEXT_ID)
needed: 0x120 opt: 0x2080
Apr 16 17:33:10 pat pluto[28951]: | ***parse ISAKMP Identification Payload:
Apr 16 17:33:10 pat pluto[28951]: | next payload type: ISAKMP_NEXT_HASH
Apr 16 17:33:10 pat pluto[28951]: | length: 12
Apr 16 17:33:10 pat pluto[28951]: | ID type: ID_IPV4_ADDR
Apr 16 17:33:10 pat pluto[28951]: | DOI specific A: 17
Apr 16 17:33:10 pat pluto[28951]: | DOI specific B: 500
Apr 16 17:33:10 pat pluto[28951]: | obj: 5d 9a fe 58 00 00 00 18
b2 d0 21 3d
Apr 16 17:33:10 pat pluto[28951]: | got payload 0x100(ISAKMP_NEXT_HASH)
needed: 0x100 opt: 0x2080
Apr 16 17:33:10 pat pluto[28951]: | ***parse ISAKMP Hash Payload:
Apr 16 17:33:10 pat pluto[28951]: | next payload type: ISAKMP_NEXT_NONE
Apr 16 17:33:10 pat pluto[28951]: | length: 24
Apr 16 17:33:10 pat pluto[28951]: | removing 28 bytes of padding
Apr 16 17:33:10 pat pluto[28951]: "L2TP-PSK-CLIENTS"[1] 93.154.254.88
#1: Main mode peer ID is ID_IPV4_ADDR: '93.154.254.88'
Apr 16 17:33:10 pat pluto[28951]: | refine_connection: starting with
L2TP-PSK-CLIENTS
Apr 16 17:33:10 pat pluto[28951]: | started looking for secret for
193.59.3.10->93.154.254.88 of kind PPK_PSK
Apr 16 17:33:10 pat pluto[28951]: | instantiating him to 0.0.0.0
Apr 16 17:33:10 pat pluto[28951]: | actually looking for secret for
193.59.3.10->%any of kind PPK_PSK
Apr 16 17:33:10 pat pluto[28951]: | line 10: key type
PPK_PSK(193.59.3.10) to type PPK_PSK
Apr 16 17:33:10 pat pluto[28951]: | 1: compared key %any to 193.59.3.10
/ %any -> 2
Apr 16 17:33:10 pat pluto[28951]: | 2: compared key 193.59.3.10 to
193.59.3.10 / %any -> 10
Apr 16 17:33:10 pat pluto[28951]: | line 10: match=10
Apr 16 17:33:10 pat pluto[28951]: | best_match 0>10 best=0x8152be8 (line=10)
Apr 16 17:33:10 pat pluto[28951]: | concluding with best_match=10
best=0x8152be8 (lineno=10)
Apr 16 17:33:10 pat pluto[28951]: | match_id a=93.154.254.88
Apr 16 17:33:10 pat pluto[28951]: | b=93.154.254.88
Apr 16 17:33:10 pat pluto[28951]: | results matched
Apr 16 17:33:10 pat pluto[28951]: | trusted_ca called with a=(empty)
b=(empty)
Apr 16 17:33:10 pat pluto[28951]: | refine_connection: checking
L2TP-PSK-CLIENTS against L2TP-PSK-CLIENTS, best=(none) with
match=1(id=1/ca=1/reqca=1)
Apr 16 17:33:10 pat pluto[28951]: | refine_connection: checked
L2TP-PSK-CLIENTS against L2TP-PSK-CLIENTS, now for see if best
Apr 16 17:33:10 pat pluto[28951]: | started looking for secret for
193.59.3.10->93.154.254.88 of kind PPK_PSK
Apr 16 17:33:10 pat pluto[28951]: | instantiating him to 0.0.0.0
Apr 16 17:33:10 pat pluto[28951]: | actually looking for secret for
193.59.3.10->%any of kind PPK_PSK
Apr 16 17:33:10 pat pluto[28951]: | line 10: key type
PPK_PSK(193.59.3.10) to type PPK_PSK
Apr 16 17:33:10 pat pluto[28951]: | 1: compared key %any to 193.59.3.10
/ %any -> 2
Apr 16 17:33:10 pat pluto[28951]: | 2: compared key 193.59.3.10 to
193.59.3.10 / %any -> 10
Apr 16 17:33:10 pat pluto[28951]: | line 10: match=10
Apr 16 17:33:10 pat pluto[28951]: | best_match 0>10 best=0x8152be8 (line=10)
Apr 16 17:33:10 pat pluto[28951]: | concluding with best_match=10
best=0x8152be8 (lineno=10)
Apr 16 17:33:10 pat pluto[28951]: | offered CA: '%none'
Apr 16 17:33:10 pat pluto[28951]: | hashing 288 bytes of SA
Apr 16 17:33:10 pat pluto[28951]: | authentication succeeded
Apr 16 17:33:10 pat pluto[28951]: | thinking about whether to send my
certificate:
Apr 16 17:33:10 pat pluto[28951]: | I have RSA key:
OAKLEY_PRESHARED_KEY cert.type: CERT_NONE
Apr 16 17:33:10 pat pluto[28951]: | sendcert: CERT_ALWAYSSEND and I
did not get a certificate request
Apr 16 17:33:10 pat pluto[28951]: | so do not send cert.
Apr 16 17:33:10 pat pluto[28951]: | I did not send a certificate because
digital signatures are not being used. (PSK)
Apr 16 17:33:10 pat pluto[28951]: | **emit ISAKMP Message:
Apr 16 17:33:10 pat pluto[28951]: | initiator cookie:
Apr 16 17:33:10 pat pluto[28951]: | fd 5a 54 0a f7 ba 37 6b
Apr 16 17:33:10 pat pluto[28951]: | responder cookie:
Apr 16 17:33:10 pat pluto[28951]: | 50 80 75 74 f1 4c 26 93
Apr 16 17:33:10 pat pluto[28951]: | next payload type: ISAKMP_NEXT_ID
Apr 16 17:33:10 pat pluto[28951]: | ISAKMP version: ISAKMP Version
1.0 (rfc2407)
Apr 16 17:33:10 pat pluto[28951]: | exchange type: ISAKMP_XCHG_IDPROT
Apr 16 17:33:10 pat pluto[28951]: | flags: ISAKMP_FLAG_ENCRYPTION
Apr 16 17:33:10 pat pluto[28951]: | message ID: 00 00 00 00
Apr 16 17:33:10 pat pluto[28951]: | ***emit ISAKMP Identification
Payload (IPsec DOI):
Apr 16 17:33:10 pat pluto[28951]: | next payload type: ISAKMP_NEXT_HASH
Apr 16 17:33:10 pat pluto[28951]: | ID type: ID_IPV4_ADDR
Apr 16 17:33:10 pat pluto[28951]: | Protocol ID: 0
Apr 16 17:33:10 pat pluto[28951]: | port: 0
Apr 16 17:33:10 pat pluto[28951]: | emitting 4 raw bytes of my identity
into ISAKMP Identification Payload (IPsec DOI)
Apr 16 17:33:10 pat pluto[28951]: | my identity c1 3b 21 0a
Apr 16 17:33:10 pat pluto[28951]: | emitting length of ISAKMP
Identification Payload (IPsec DOI): 12
Apr 16 17:33:10 pat pluto[28951]: | hashing 288 bytes of SA
Apr 16 17:33:10 pat pluto[28951]: | ***emit ISAKMP Hash Payload:
Apr 16 17:33:10 pat pluto[28951]: | next payload type: ISAKMP_NEXT_VID
Apr 16 17:33:10 pat pluto[28951]: | emitting 20 raw bytes of HASH_R into
ISAKMP Hash Payload
Apr 16 17:33:10 pat pluto[28951]: | HASH_R 0b 3f 53 b5 55 e9 67 0a db
2f bc f7 46 af c9 2d
Apr 16 17:33:10 pat pluto[28951]: | HASH_R ac 8b 63 e6
Apr 16 17:33:10 pat pluto[28951]: | emitting length of ISAKMP Hash
Payload: 24
Apr 16 17:33:10 pat pluto[28951]: | out_vendorid(): sending [CAN-IKEv2]
Apr 16 17:33:10 pat pluto[28951]: | ***emit ISAKMP Vendor ID Payload:
Apr 16 17:33:10 pat pluto[28951]: | next payload type: ISAKMP_NEXT_NONE
Apr 16 17:33:10 pat pluto[28951]: | emitting 5 raw bytes of V_ID into
ISAKMP Vendor ID Payload
Apr 16 17:33:10 pat pluto[28951]: | V_ID 49 4b 45 76 32
Apr 16 17:33:10 pat pluto[28951]: | emitting length of ISAKMP Vendor ID
Payload: 9
Apr 16 17:33:10 pat pluto[28951]: | encrypting:
Apr 16 17:33:10 pat pluto[28951]: | 08 00 00 0c 01 00 00 00 c1 3b 21
0a 0d 00 00 18
Apr 16 17:33:10 pat pluto[28951]: | 0b 3f 53 b5 55 e9 67 0a db 2f bc
f7 46 af c9 2d
Apr 16 17:33:10 pat pluto[28951]: | ac 8b 63 e6 00 00 00 09 49 4b 45
76 32
Apr 16 17:33:10 pat pluto[28951]: | IV:
Apr 16 17:33:10 pat pluto[28951]: | bd 0b dc 15 81 8c 76 ec 9d 52 ba
5b 1b 23 b5 09
Apr 16 17:33:10 pat pluto[28951]: | unpadded size is: 45
Apr 16 17:33:10 pat pluto[28951]: | emitting 3 zero bytes of encryption
padding into ISAKMP Message
Apr 16 17:33:10 pat pluto[28951]: | encrypting 48 using OAKLEY_AES_CBC
Apr 16 17:33:10 pat pluto[28951]: | next IV: ac 67 17 24 05 39 ab a2
4f 07 b4 13 2d 95 6f ad
Apr 16 17:33:10 pat pluto[28951]: | emitting length of ISAKMP Message: 76
Apr 16 17:33:10 pat pluto[28951]: | last encrypted block of Phase 1:
Apr 16 17:33:10 pat pluto[28951]: | ac 67 17 24 05 39 ab a2 4f 07 b4
13 2d 95 6f ad
Apr 16 17:33:10 pat pluto[28951]: | complete state transition with STF_OK
Apr 16 17:33:10 pat pluto[28951]: "L2TP-PSK-CLIENTS"[1] 93.154.254.88
#1: transition from state STATE_MAIN_R2 to state STATE_MAIN_R3
Apr 16 17:33:10 pat pluto[28951]: | deleting event for #1
Apr 16 17:33:10 pat pluto[28951]: | sending reply packet to
93.154.254.88:500 (from port 500)
Apr 16 17:33:10 pat pluto[28951]: | sending 76 bytes for STATE_MAIN_R2
through eth0:500 to 93.154.254.88:500 (using #1)
Apr 16 17:33:10 pat pluto[28951]: | fd 5a 54 0a f7 ba 37 6b 50 80 75
74 f1 4c 26 93
Apr 16 17:33:10 pat pluto[28951]: | 05 10 02 01 00 00 00 00 00 00 00
4c 0c fc 43 74
Apr 16 17:33:10 pat pluto[28951]: | 72 99 53 a4 f1 ef 13 e2 f8 1b b9
59 60 8c 3c 83
Apr 16 17:33:10 pat pluto[28951]: | 42 77 fb ae 29 84 8a f3 62 c6 b8
16 ac 67 17 24
Apr 16 17:33:10 pat pluto[28951]: | 05 39 ab a2 4f 07 b4 13 2d 95 6f ad
Apr 16 17:33:10 pat pluto[28951]: | inserting event EVENT_SA_EXPIRE,
timeout in 28800 seconds for #1
Apr 16 17:33:10 pat pluto[28951]: | event added after event EVENT_LOG_DAILY
Apr 16 17:33:10 pat pluto[28951]: "L2TP-PSK-CLIENTS"[1] 93.154.254.88
#1: STATE_MAIN_R3: sent MR3, ISAKMP SA established
{auth=OAKLEY_PRESHARED_KEY cipher=aes_256 prf=oakley_sha group=modp1024}
Apr 16 17:33:10 pat pluto[28951]: | ICOOKIE: fd 5a 54 0a f7 ba 37 6b
Apr 16 17:33:10 pat pluto[28951]: | RCOOKIE: 50 80 75 74 f1 4c 26 93
Apr 16 17:33:10 pat pluto[28951]: | state hash entry 25
Apr 16 17:33:10 pat pluto[28951]: | v1 peer and cookies match on #1,
provided msgid 00000000 vs 00000000
Apr 16 17:33:10 pat pluto[28951]: | v1 state object #1 found, in
STATE_MAIN_R3
Apr 16 17:33:10 pat pluto[28951]: "L2TP-PSK-CLIENTS"[1] 93.154.254.88
#1: Dead Peer Detection (RFC 3706): enabled
Apr 16 17:33:10 pat pluto[28951]: | state: 1 requesting event none to be
deleted by
/build/buildd-openswan_2.6.28+dfsg-5+squeeze1-i386-OOSWut/openswan-2.6.28+dfsg/programs/pluto/dpd.c:159
Apr 16 17:33:10 pat pluto[28951]: | inserting event EVENT_DPD, timeout
in 40 seconds for #1
Apr 16 17:33:10 pat pluto[28951]: | event added after event
EVENT_NAT_T_KEEPALIVE
Apr 16 17:33:10 pat pluto[28951]: | modecfg pull: noquirk policy:push
not-client
Apr 16 17:33:10 pat pluto[28951]: | phase 1 is done, looking for phase 2
to unpend
Apr 16 17:33:10 pat pluto[28951]: | unpending state #1
Apr 16 17:33:10 pat pluto[28951]: | * processed 0 messages from
cryptographic helpers
Apr 16 17:33:10 pat pluto[28951]: | next event EVENT_PENDING_DDNS in 6
seconds
Apr 16 17:33:10 pat pluto[28951]: | next event EVENT_PENDING_DDNS in 6
seconds
Apr 16 17:33:10 pat pluto[28951]: |
Apr 16 17:33:10 pat pluto[28951]: | *received 108 bytes from
93.154.254.88:500 on eth0 (port=500)
Apr 16 17:33:10 pat pluto[28951]: | fd 5a 54 0a f7 ba 37 6b 50 80 75
74 f1 4c 26 93
Apr 16 17:33:10 pat pluto[28951]: | 08 10 05 01 8b ea b2 56 00 00 00
6c 2e 8d f8 b9
Apr 16 17:33:10 pat pluto[28951]: | 9a da f9 20 0e 9a c9 2a 27 83 05
b3 34 24 b4 4a
Apr 16 17:33:10 pat pluto[28951]: | e4 cf a8 1f ab f9 55 0d 7b a2 d7
e9 7d 90 92 96
Apr 16 17:33:10 pat pluto[28951]: | 81 24 ee 35 63 0b 8b 2b 19 a6 65
2d 4e b9 4c ae
Apr 16 17:33:10 pat pluto[28951]: | 09 4f ac 24 5e 42 fd 1a 82 e4 c7
77 85 8e ae da
Apr 16 17:33:10 pat pluto[28951]: | b3 a3 7c b5 24 97 3e 3f 6b 29 b3 ae
Apr 16 17:33:10 pat pluto[28951]: | **parse ISAKMP Message:
Apr 16 17:33:10 pat pluto[28951]: | initiator cookie:
Apr 16 17:33:10 pat pluto[28951]: | fd 5a 54 0a f7 ba 37 6b
Apr 16 17:33:10 pat pluto[28951]: | responder cookie:
Apr 16 17:33:10 pat pluto[28951]: | 50 80 75 74 f1 4c 26 93
Apr 16 17:33:10 pat pluto[28951]: | next payload type: ISAKMP_NEXT_HASH
Apr 16 17:33:10 pat pluto[28951]: | ISAKMP version: ISAKMP Version
1.0 (rfc2407)
Apr 16 17:33:10 pat pluto[28951]: | exchange type: ISAKMP_XCHG_INFO
Apr 16 17:33:10 pat pluto[28951]: | flags: ISAKMP_FLAG_ENCRYPTION
Apr 16 17:33:10 pat pluto[28951]: | message ID: 8b ea b2 56
Apr 16 17:33:10 pat pluto[28951]: | length: 108
Apr 16 17:33:10 pat pluto[28951]: | processing version=1.0 packet with
exchange type=ISAKMP_XCHG_INFO (5)
Apr 16 17:33:10 pat pluto[28951]: | ICOOKIE: fd 5a 54 0a f7 ba 37 6b
Apr 16 17:33:10 pat pluto[28951]: | RCOOKIE: 50 80 75 74 f1 4c 26 93
Apr 16 17:33:10 pat pluto[28951]: | state hash entry 25
Apr 16 17:33:10 pat pluto[28951]: | peer and cookies match on #1,
provided msgid 00000000 vs 00000000/00000000
Apr 16 17:33:10 pat pluto[28951]: | p15 state object #1 found, in
STATE_MAIN_R3
Apr 16 17:33:10 pat pluto[28951]: | processing connection
L2TP-PSK-CLIENTS[1] 93.154.254.88
Apr 16 17:33:10 pat pluto[28951]: | last Phase 1 IV: ac 67 17 24 05 39
ab a2 4f 07 b4 13 2d 95 6f ad
Apr 16 17:33:10 pat pluto[28951]: | current Phase 1 IV: ac 67 17 24 05
39 ab a2 4f 07 b4 13 2d 95 6f ad
Apr 16 17:33:10 pat pluto[28951]: | computed Phase 2 IV:
Apr 16 17:33:10 pat pluto[28951]: | c4 05 40 46 56 2e 55 4f 3c ac a6
26 7a ae e4 16
Apr 16 17:33:10 pat pluto[28951]: | 49 69 76 b8
Apr 16 17:33:10 pat pluto[28951]: | received encrypted packet from
93.154.254.88:500
Apr 16 17:33:10 pat pluto[28951]: | decrypting 80 bytes using algorithm
OAKLEY_AES_CBC
Apr 16 17:33:10 pat pluto[28951]: | decrypted:
Apr 16 17:33:10 pat pluto[28951]: | 0b 00 00 18 43 05 df 3f 72 8e 1d
52 88 67 f7 2c
Apr 16 17:33:10 pat pluto[28951]: | f2 18 f0 ad 6f 9b 86 0c 00 00 00
1c 00 00 00 01
Apr 16 17:33:10 pat pluto[28951]: | 01 10 60 02 fd 5a 54 0a f7 ba 37
6b 50 80 75 74
Apr 16 17:33:10 pat pluto[28951]: | f1 4c 26 93 cd d8 83 b5 f7 d5 bb
c0 e4 82 fd 93
Apr 16 17:33:10 pat pluto[28951]: | fb d3 9b dc a1 9b d1 d1 ae 81 8e
bd 87 b4 e8 1b
Apr 16 17:33:10 pat pluto[28951]: | next IV: 85 8e ae da b3 a3 7c b5
24 97 3e 3f 6b 29 b3 ae
Apr 16 17:33:10 pat pluto[28951]: | got payload 0x100(ISAKMP_NEXT_HASH)
needed: 0x100 opt: 0x0
Apr 16 17:33:10 pat pluto[28951]: | ***parse ISAKMP Hash Payload:
Apr 16 17:33:10 pat pluto[28951]: | next payload type: ISAKMP_NEXT_N
Apr 16 17:33:10 pat pluto[28951]: | length: 24
Apr 16 17:33:10 pat pluto[28951]: | got payload 0x800(ISAKMP_NEXT_N)
needed: 0x0 opt: 0x0
Apr 16 17:33:10 pat pluto[28951]: | ***parse ISAKMP Notification Payload:
Apr 16 17:33:10 pat pluto[28951]: | next payload type: ISAKMP_NEXT_NONE
Apr 16 17:33:10 pat pluto[28951]: | length: 28
Apr 16 17:33:10 pat pluto[28951]: | DOI: ISAKMP_DOI_IPSEC
Apr 16 17:33:10 pat pluto[28951]: | protocol ID: 1
Apr 16 17:33:10 pat pluto[28951]: | SPI size: 16
Apr 16 17:33:10 pat pluto[28951]: | Notify Message Type:
IPSEC_INITIAL_CONTACT
Apr 16 17:33:10 pat pluto[28951]: | removing 28 bytes of padding
Apr 16 17:33:10 pat pluto[28951]: "L2TP-PSK-CLIENTS"[1] 93.154.254.88
#1: ignoring informational payload, type IPSEC_INITIAL_CONTACT
msgid=00000000
Apr 16 17:33:10 pat pluto[28951]: | info: fd 5a 54 0a f7 ba 37 6b 50
80 75 74 f1 4c 26 93
Apr 16 17:33:10 pat pluto[28951]: | processing informational
IPSEC_INITIAL_CONTACT (24578)
Apr 16 17:33:10 pat pluto[28951]: "L2TP-PSK-CLIENTS"[1] 93.154.254.88
#1: received and ignored informational message
Apr 16 17:33:10 pat pluto[28951]: | complete state transition with
STF_IGNORE
Apr 16 17:33:10 pat pluto[28951]: | * processed 0 messages from
cryptographic helpers
Apr 16 17:33:10 pat pluto[28951]: | next event EVENT_PENDING_DDNS in 6
seconds
Apr 16 17:33:10 pat pluto[28951]: | next event EVENT_PENDING_DDNS in 6
seconds
Apr 16 17:33:11 pat pluto[28951]: |
Apr 16 17:33:11 pat pluto[28951]: | *received 348 bytes from
93.154.254.88:500 on eth0 (port=500)
Apr 16 17:33:11 pat pluto[28951]: | fd 5a 54 0a f7 ba 37 6b 50 80 75
74 f1 4c 26 93
Apr 16 17:33:11 pat pluto[28951]: | 08 10 20 01 b6 5f 91 09 00 00 01
5c 8a 30 9d 86
Apr 16 17:33:11 pat pluto[28951]: | 7d 08 7b 60 7f 76 f1 18 09 8f 27
b4 99 45 7c 49
Apr 16 17:33:11 pat pluto[28951]: | 8c a6 1c 11 ac 48 c8 b0 dc 08 78
35 44 11 7d f0
Apr 16 17:33:11 pat pluto[28951]: | 23 6a 68 aa 00 99 ff ea 88 ff ca
a4 0f 52 53 3d
Apr 16 17:33:11 pat pluto[28951]: | 05 3c 34 83 eb 7e 57 7b e3 c8 29
f5 a9 54 56 de
Apr 16 17:33:11 pat pluto[28951]: | 8c b6 eb 0f cd 72 64 a0 87 23 af
d3 9a 4c 0a f2
Apr 16 17:33:11 pat pluto[28951]: | d3 b4 5d eb 02 f0 95 d5 ff e3 c5
02 e2 c9 fa f1
Apr 16 17:33:11 pat pluto[28951]: | 0c cc 7b 65 2f 2d b4 9f a5 55 9e
13 cd 3a bb f3
Apr 16 17:33:11 pat pluto[28951]: | 7f a9 9d 42 98 37 05 a6 83 22 b1
b2 d6 58 7f 20
Apr 16 17:33:11 pat pluto[28951]: | 04 db 90 2f b3 80 f7 ed 53 39 1a
71 21 b7 af 1e
Apr 16 17:33:11 pat pluto[28951]: | 2a 9f 6e 69 4a 3d 9a 3c 14 73 b5
ce 89 34 67 12
Apr 16 17:33:11 pat pluto[28951]: | 6c 15 d1 f6 d7 ae c5 29 a8 92 d0
87 78 cb 4d bc
Apr 16 17:33:11 pat pluto[28951]: | 41 e7 b0 ab 80 93 b0 5e e0 29 75
15 88 6a 0a bd
Apr 16 17:33:11 pat pluto[28951]: | c4 e1 1c cf 70 45 a5 f0 a3 a8 48
0f d7 20 38 6f
Apr 16 17:33:11 pat pluto[28951]: | c3 52 79 0d ea 5e bb 5b cc a5 ec
06 88 29 f2 ed
Apr 16 17:33:11 pat pluto[28951]: | 38 6c 4e 6c 64 de 0e e6 33 7e b6
c4 1c 51 36 16
Apr 16 17:33:11 pat pluto[28951]: | 51 b6 52 22 d7 90 db 87 e0 7d 3a
9c 0c e6 d4 e6
Apr 16 17:33:11 pat pluto[28951]: | 3d 41 b2 20 ef 6a fd 13 db e1 1e
91 e0 e1 ef b1
Apr 16 17:33:11 pat pluto[28951]: | ce e8 bf e0 f8 d7 70 90 6a be 09
da db 70 3b 33
Apr 16 17:33:11 pat pluto[28951]: | a3 a6 67 29 1f c2 59 62 f9 62 96
be 33 ce 16 ea
Apr 16 17:33:11 pat pluto[28951]: | 0f 9a f7 5c 95 fe f2 a2 2a f6 21 f3
Apr 16 17:33:11 pat pluto[28951]: | **parse ISAKMP Message:
Apr 16 17:33:11 pat pluto[28951]: | initiator cookie:
Apr 16 17:33:11 pat pluto[28951]: | fd 5a 54 0a f7 ba 37 6b
Apr 16 17:33:11 pat pluto[28951]: | responder cookie:
Apr 16 17:33:11 pat pluto[28951]: | 50 80 75 74 f1 4c 26 93
Apr 16 17:33:11 pat pluto[28951]: | next payload type: ISAKMP_NEXT_HASH
Apr 16 17:33:11 pat pluto[28951]: | ISAKMP version: ISAKMP Version
1.0 (rfc2407)
Apr 16 17:33:11 pat pluto[28951]: | exchange type: ISAKMP_XCHG_QUICK
Apr 16 17:33:11 pat pluto[28951]: | flags: ISAKMP_FLAG_ENCRYPTION
Apr 16 17:33:11 pat pluto[28951]: | message ID: b6 5f 91 09
Apr 16 17:33:11 pat pluto[28951]: | length: 348
Apr 16 17:33:11 pat pluto[28951]: | processing version=1.0 packet with
exchange type=ISAKMP_XCHG_QUICK (32)
Apr 16 17:33:11 pat pluto[28951]: | ICOOKIE: fd 5a 54 0a f7 ba 37 6b
Apr 16 17:33:11 pat pluto[28951]: | RCOOKIE: 50 80 75 74 f1 4c 26 93
Apr 16 17:33:11 pat pluto[28951]: | state hash entry 25
Apr 16 17:33:11 pat pluto[28951]: | v1 peer and cookies match on #1,
provided msgid b65f9109 vs 00000000
Apr 16 17:33:11 pat pluto[28951]: | v1 state object not found
Apr 16 17:33:11 pat pluto[28951]: | ICOOKIE: fd 5a 54 0a f7 ba 37 6b
Apr 16 17:33:11 pat pluto[28951]: | RCOOKIE: 50 80 75 74 f1 4c 26 93
Apr 16 17:33:11 pat pluto[28951]: | state hash entry 25
Apr 16 17:33:11 pat pluto[28951]: | v1 peer and cookies match on #1,
provided msgid 00000000 vs 00000000
Apr 16 17:33:11 pat pluto[28951]: | v1 state object #1 found, in
STATE_MAIN_R3
Apr 16 17:33:11 pat pluto[28951]: | processing connection
L2TP-PSK-CLIENTS[1] 93.154.254.88
Apr 16 17:33:11 pat pluto[28951]: | last Phase 1 IV: ac 67 17 24 05 39
ab a2 4f 07 b4 13 2d 95 6f ad
Apr 16 17:33:11 pat pluto[28951]: | current Phase 1 IV: ac 67 17 24 05
39 ab a2 4f 07 b4 13 2d 95 6f ad
Apr 16 17:33:11 pat pluto[28951]: | computed Phase 2 IV:
Apr 16 17:33:11 pat pluto[28951]: | e6 a6 ed 83 ea 74 b3 0d 48 c4 97
ee e3 fc 7f 58
Apr 16 17:33:11 pat pluto[28951]: | 00 07 74 a2
Apr 16 17:33:11 pat pluto[28951]: | received encrypted packet from
93.154.254.88:500
Apr 16 17:33:11 pat pluto[28951]: | decrypting 320 bytes using algorithm
OAKLEY_AES_CBC
Apr 16 17:33:11 pat pluto[28951]: | decrypted:
Apr 16 17:33:11 pat pluto[28951]: | 01 00 00 18 76 b6 e8 1f 41 91 74
b9 0d 21 89 fb
Apr 16 17:33:11 pat pluto[28951]: | 53 1c b2 c7 4c af a7 55 0a 00 00
e8 00 00 00 01
Apr 16 17:33:11 pat pluto[28951]: | 00 00 00 01 00 00 00 dc 01 03 04
08 02 8b 31 77
Apr 16 17:33:11 pat pluto[28951]: | 03 00 00 1c 01 0c 00 00 80 01 00
01 80 02 70 80
Apr 16 17:33:11 pat pluto[28951]: | 80 04 00 02 80 06 01 00 80 05 00
02 03 00 00 1c
Apr 16 17:33:11 pat pluto[28951]: | 02 0c 00 00 80 01 00 01 80 02 70
80 80 04 00 02
Apr 16 17:33:11 pat pluto[28951]: | 80 06 01 00 80 05 00 01 03 00 00
1c 03 0c 00 00
Apr 16 17:33:11 pat pluto[28951]: | 80 01 00 01 80 02 70 80 80 04 00
02 80 06 00 80
Apr 16 17:33:11 pat pluto[28951]: | 80 05 00 02 03 00 00 1c 04 0c 00
00 80 01 00 01
Apr 16 17:33:11 pat pluto[28951]: | 80 02 70 80 80 04 00 02 80 06 00
80 80 05 00 01
Apr 16 17:33:11 pat pluto[28951]: | 03 00 00 18 05 03 00 00 80 01 00
01 80 02 70 80
Apr 16 17:33:11 pat pluto[28951]: | 80 04 00 02 80 05 00 02 03 00 00
18 06 03 00 00
Apr 16 17:33:11 pat pluto[28951]: | 80 01 00 01 80 02 70 80 80 04 00
02 80 05 00 01
Apr 16 17:33:11 pat pluto[28951]: | 03 00 00 18 07 02 00 00 80 01 00
01 80 02 70 80
Apr 16 17:33:11 pat pluto[28951]: | 80 04 00 02 80 05 00 02 00 00 00
18 08 02 00 00
Apr 16 17:33:11 pat pluto[28951]: | 80 01 00 01 80 02 70 80 80 04 00
02 80 05 00 01
Apr 16 17:33:11 pat pluto[28951]: | 05 00 00 14 ce 65 69 e7 d7 7b 15
3a 0f 5a e0 1b
Apr 16 17:33:11 pat pluto[28951]: | 86 28 69 52 05 00 00 0c 01 11 00
00 5d 9a fe 58
Apr 16 17:33:11 pat pluto[28951]: | 00 00 00 0c 01 11 06 a5 c1 3b 21
0a c2 cd df ce
Apr 16 17:33:11 pat pluto[28951]: | bd fe 93 d8 dc f7 f8 e0 f7 b7 f7
b7 d6 d2 94 13
Apr 16 17:33:11 pat pluto[28951]: | next IV: 33 ce 16 ea 0f 9a f7 5c
95 fe f2 a2 2a f6 21 f3
Apr 16 17:33:11 pat pluto[28951]: | got payload 0x100(ISAKMP_NEXT_HASH)
needed: 0x502 opt: 0x200030
Apr 16 17:33:11 pat pluto[28951]: | ***parse ISAKMP Hash Payload:
Apr 16 17:33:11 pat pluto[28951]: | next payload type: ISAKMP_NEXT_SA
Apr 16 17:33:11 pat pluto[28951]: | length: 24
Apr 16 17:33:11 pat pluto[28951]: | got payload 0x2(ISAKMP_NEXT_SA)
needed: 0x402 opt: 0x200030
Apr 16 17:33:11 pat pluto[28951]: | ***parse ISAKMP Security Association
Payload:
Apr 16 17:33:11 pat pluto[28951]: | next payload type: ISAKMP_NEXT_NONCE
Apr 16 17:33:11 pat pluto[28951]: | length: 232
Apr 16 17:33:11 pat pluto[28951]: | DOI: ISAKMP_DOI_IPSEC
Apr 16 17:33:11 pat pluto[28951]: | got payload 0x400(ISAKMP_NEXT_NONCE)
needed: 0x400 opt: 0x200030
Apr 16 17:33:11 pat pluto[28951]: | ***parse ISAKMP Nonce Payload:
Apr 16 17:33:11 pat pluto[28951]: | next payload type: ISAKMP_NEXT_ID
Apr 16 17:33:11 pat pluto[28951]: | length: 20
Apr 16 17:33:11 pat pluto[28951]: | got payload 0x20(ISAKMP_NEXT_ID)
needed: 0x0 opt: 0x200030
Apr 16 17:33:11 pat pluto[28951]: | ***parse ISAKMP Identification
Payload (IPsec DOI):
Apr 16 17:33:11 pat pluto[28951]: | next payload type: ISAKMP_NEXT_ID
Apr 16 17:33:11 pat pluto[28951]: | length: 12
Apr 16 17:33:11 pat pluto[28951]: | ID type: ID_IPV4_ADDR
Apr 16 17:33:11 pat pluto[28951]: | Protocol ID: 17
Apr 16 17:33:11 pat pluto[28951]: | port: 0
Apr 16 17:33:11 pat pluto[28951]: | obj: 5d 9a fe 58 00 00 00 0c
01 11 06 a5
Apr 16 17:33:11 pat pluto[28951]: | got payload 0x20(ISAKMP_NEXT_ID)
needed: 0x0 opt: 0x200030
Apr 16 17:33:11 pat pluto[28951]: | ***parse ISAKMP Identification
Payload (IPsec DOI):
Apr 16 17:33:11 pat pluto[28951]: | next payload type: ISAKMP_NEXT_NONE
Apr 16 17:33:11 pat pluto[28951]: | length: 12
Apr 16 17:33:11 pat pluto[28951]: | ID type: ID_IPV4_ADDR
Apr 16 17:33:11 pat pluto[28951]: | Protocol ID: 17
Apr 16 17:33:11 pat pluto[28951]: | port: 1701
Apr 16 17:33:11 pat pluto[28951]: | obj: c1 3b 21 0a c2 cd df ce
bd fe 93 d8
Apr 16 17:33:11 pat pluto[28951]: | removing 20 bytes of padding
Apr 16 17:33:11 pat pluto[28951]: | HASH(1) computed:
Apr 16 17:33:11 pat pluto[28951]: | 76 b6 e8 1f 41 91 74 b9 0d 21 89
fb 53 1c b2 c7
Apr 16 17:33:11 pat pluto[28951]: | 4c af a7 55
Apr 16 17:33:11 pat pluto[28951]: | peer client is 93.154.254.88
Apr 16 17:33:11 pat pluto[28951]: | peer client protocol/port is 17/0
Apr 16 17:33:11 pat pluto[28951]: | our client is 193.59.3.10
Apr 16 17:33:11 pat pluto[28951]: | our client protocol/port is 17/1701
Apr 16 17:33:11 pat pluto[28951]: "L2TP-PSK-CLIENTS"[1] 93.154.254.88
#1: the peer proposed: 193.59.3.10/32:17/1701 -> 93.154.254.88/32:17/0
Apr 16 17:33:11 pat pluto[28951]: | find_client_connection starting with
L2TP-PSK-CLIENTS
Apr 16 17:33:11 pat pluto[28951]: | looking for 193.59.3.10/32:17/1701
-> 93.154.254.88/32:17/0
Apr 16 17:33:11 pat pluto[28951]: | concrete checking against sr#0
193.59.3.10/32 -> 0.0.0.0/32
Apr 16 17:33:11 pat pluto[28951]: | match_id a=93.154.254.88
Apr 16 17:33:11 pat pluto[28951]: | b=93.154.254.88
Apr 16 17:33:11 pat pluto[28951]: | results matched
Apr 16 17:33:11 pat pluto[28951]: | trusted_ca called with a=(empty)
b=(empty)
Apr 16 17:33:11 pat pluto[28951]: | fc_try trying
L2TP-PSK-CLIENTS:193.59.3.10/32:17/1701 -> 93.154.254.88/32:17/0(virt)
vs L2TP-PSK-CLIENTS:193.59.3.10/32:17/1701 -> 0.0.0.0/32:17/0(virt)
Apr 16 17:33:11 pat pluto[28951]: | fc_try concluding with
L2TP-PSK-CLIENTS [128]
Apr 16 17:33:11 pat pluto[28951]: | fc_try L2TP-PSK-CLIENTS gives
L2TP-PSK-CLIENTS
Apr 16 17:33:11 pat pluto[28951]: | concluding with d = L2TP-PSK-CLIENTS
Apr 16 17:33:11 pat pluto[28951]: | client wildcard: no port wildcard:
yes virtual: yes
Apr 16 17:33:11 pat pluto[28951]: | setting phase 2 virtual values to
93.154.254.88[+S=C]:17/0
Apr 16 17:33:11 pat pluto[28951]: | duplicating state object #1
Apr 16 17:33:11 pat pluto[28951]: | creating state object #2 at 0x81578b0
Apr 16 17:33:11 pat pluto[28951]: | processing connection
L2TP-PSK-CLIENTS[1] 93.154.254.88
Apr 16 17:33:11 pat pluto[28951]: | ICOOKIE: fd 5a 54 0a f7 ba 37 6b
Apr 16 17:33:11 pat pluto[28951]: | RCOOKIE: 50 80 75 74 f1 4c 26 93
Apr 16 17:33:11 pat pluto[28951]: | state hash entry 25
Apr 16 17:33:11 pat pluto[28951]: | inserting state object #2 on chain 25
Apr 16 17:33:11 pat pluto[28951]: | inserting event EVENT_SO_DISCARD,
timeout in 0 seconds for #2
Apr 16 17:33:11 pat pluto[28951]: | event added at head of queue
Apr 16 17:33:11 pat pluto[28951]: | ****parse IPsec DOI SIT:
Apr 16 17:33:11 pat pluto[28951]: | IPsec DOI SIT: SIT_IDENTITY_ONLY
Apr 16 17:33:11 pat pluto[28951]: | ****parse ISAKMP Proposal Payload:
Apr 16 17:33:11 pat pluto[28951]: | next payload type: ISAKMP_NEXT_NONE
Apr 16 17:33:11 pat pluto[28951]: | length: 220
Apr 16 17:33:11 pat pluto[28951]: | proposal number: 1
Apr 16 17:33:11 pat pluto[28951]: | protocol ID: PROTO_IPSEC_ESP
Apr 16 17:33:11 pat pluto[28951]: | SPI size: 4
Apr 16 17:33:11 pat pluto[28951]: | number of transforms: 8
Apr 16 17:33:11 pat pluto[28951]: | parsing 4 raw bytes of ISAKMP
Proposal Payload into SPI
Apr 16 17:33:11 pat pluto[28951]: | SPI 02 8b 31 77
Apr 16 17:33:11 pat pluto[28951]: | *****parse ISAKMP Transform Payload
(ESP):
Apr 16 17:33:11 pat pluto[28951]: | next payload type: ISAKMP_NEXT_T
Apr 16 17:33:11 pat pluto[28951]: | length: 28
Apr 16 17:33:11 pat pluto[28951]: | transform number: 1
Apr 16 17:33:11 pat pluto[28951]: | transform ID: ESP_AES
Apr 16 17:33:11 pat pluto[28951]: | ******parse ISAKMP IPsec DOI attribute:
Apr 16 17:33:11 pat pluto[28951]: | af+type: SA_LIFE_TYPE
Apr 16 17:33:11 pat pluto[28951]: | length/value: 1
Apr 16 17:33:11 pat pluto[28951]: | [1 is SA_LIFE_TYPE_SECONDS]
Apr 16 17:33:11 pat pluto[28951]: | ******parse ISAKMP IPsec DOI attribute:
Apr 16 17:33:11 pat pluto[28951]: | af+type: SA_LIFE_DURATION
Apr 16 17:33:11 pat pluto[28951]: | length/value: 28800
Apr 16 17:33:11 pat pluto[28951]: | ******parse ISAKMP IPsec DOI attribute:
Apr 16 17:33:11 pat pluto[28951]: | af+type: ENCAPSULATION_MODE
Apr 16 17:33:11 pat pluto[28951]: | length/value: 2
Apr 16 17:33:11 pat pluto[28951]: | [2 is ENCAPSULATION_MODE_TRANSPORT]
Apr 16 17:33:11 pat pluto[28951]: | ******parse ISAKMP IPsec DOI attribute:
Apr 16 17:33:11 pat pluto[28951]: | af+type: KEY_LENGTH
Apr 16 17:33:11 pat pluto[28951]: | length/value: 256
Apr 16 17:33:11 pat pluto[28951]: | ******parse ISAKMP IPsec DOI attribute:
Apr 16 17:33:11 pat pluto[28951]: | af+type: AUTH_ALGORITHM
Apr 16 17:33:11 pat pluto[28951]: | length/value: 2
Apr 16 17:33:11 pat pluto[28951]: | [2 is AUTH_ALGORITHM_HMAC_SHA1]
Apr 16 17:33:11 pat pluto[28951]: | helper -1 doing build_nonce op id:
3084492864
Apr 16 17:33:11 pat pluto[28951]: | Generated nonce:
Apr 16 17:33:11 pat pluto[28951]: | 64 8d e0 91 92 47 1d 63 71 ce ed
9c fc ec 3e 88
Apr 16 17:33:11 pat pluto[28951]: | quick inI1_outR1: calculated
ke+nonce, calculating DH
Apr 16 17:33:11 pat pluto[28951]: | processing connection
L2TP-PSK-CLIENTS[1] 93.154.254.88
Apr 16 17:33:11 pat pluto[28951]: | **emit ISAKMP Message:
Apr 16 17:33:11 pat pluto[28951]: | initiator cookie:
Apr 16 17:33:11 pat pluto[28951]: | fd 5a 54 0a f7 ba 37 6b
Apr 16 17:33:11 pat pluto[28951]: | responder cookie:
Apr 16 17:33:11 pat pluto[28951]: | 50 80 75 74 f1 4c 26 93
Apr 16 17:33:11 pat pluto[28951]: | next payload type: ISAKMP_NEXT_HASH
Apr 16 17:33:11 pat pluto[28951]: | ISAKMP version: ISAKMP Version
1.0 (rfc2407)
Apr 16 17:33:11 pat pluto[28951]: | exchange type: ISAKMP_XCHG_QUICK
Apr 16 17:33:11 pat pluto[28951]: | flags: ISAKMP_FLAG_ENCRYPTION
Apr 16 17:33:11 pat pluto[28951]: | message ID: b6 5f 91 09
Apr 16 17:33:11 pat pluto[28951]: | ***emit ISAKMP Hash Payload:
Apr 16 17:33:11 pat pluto[28951]: | next payload type: ISAKMP_NEXT_SA
Apr 16 17:33:11 pat pluto[28951]: | emitting 20 zero bytes of HASH into
ISAKMP Hash Payload
Apr 16 17:33:11 pat pluto[28951]: | emitting length of ISAKMP Hash
Payload: 24
Apr 16 17:33:11 pat pluto[28951]: | ***emit ISAKMP Security Association
Payload:
Apr 16 17:33:11 pat pluto[28951]: | next payload type: ISAKMP_NEXT_NONCE
Apr 16 17:33:11 pat pluto[28951]: | DOI: ISAKMP_DOI_IPSEC
Apr 16 17:33:11 pat pluto[28951]: | ****parse IPsec DOI SIT:
Apr 16 17:33:11 pat pluto[28951]: | IPsec DOI SIT: SIT_IDENTITY_ONLY
Apr 16 17:33:11 pat pluto[28951]: | ****parse ISAKMP Proposal Payload:
Apr 16 17:33:11 pat pluto[28951]: | next payload type: ISAKMP_NEXT_NONE
Apr 16 17:33:11 pat pluto[28951]: | length: 220
Apr 16 17:33:11 pat pluto[28951]: | proposal number: 1
Apr 16 17:33:11 pat pluto[28951]: | protocol ID: PROTO_IPSEC_ESP
Apr 16 17:33:11 pat pluto[28951]: | SPI size: 4
Apr 16 17:33:11 pat pluto[28951]: | number of transforms: 8
Apr 16 17:33:11 pat pluto[28951]: | parsing 4 raw bytes of ISAKMP
Proposal Payload into SPI
Apr 16 17:33:11 pat pluto[28951]: | SPI 02 8b 31 77
Apr 16 17:33:11 pat pluto[28951]: | *****parse ISAKMP Transform Payload
(ESP):
Apr 16 17:33:11 pat pluto[28951]: | next payload type: ISAKMP_NEXT_T
Apr 16 17:33:11 pat pluto[28951]: | length: 28
Apr 16 17:33:11 pat pluto[28951]: | transform number: 1
Apr 16 17:33:11 pat pluto[28951]: | transform ID: ESP_AES
Apr 16 17:33:11 pat pluto[28951]: | ******parse ISAKMP IPsec DOI attribute:
Apr 16 17:33:11 pat pluto[28951]: | af+type: SA_LIFE_TYPE
Apr 16 17:33:11 pat pluto[28951]: | length/value: 1
Apr 16 17:33:11 pat pluto[28951]: | [1 is SA_LIFE_TYPE_SECONDS]
Apr 16 17:33:11 pat pluto[28951]: | ******parse ISAKMP IPsec DOI attribute:
Apr 16 17:33:11 pat pluto[28951]: | af+type: SA_LIFE_DURATION
Apr 16 17:33:11 pat pluto[28951]: | length/value: 28800
Apr 16 17:33:11 pat pluto[28951]: | ******parse ISAKMP IPsec DOI attribute:
Apr 16 17:33:11 pat pluto[28951]: | af+type: ENCAPSULATION_MODE
Apr 16 17:33:11 pat pluto[28951]: | length/value: 2
Apr 16 17:33:11 pat pluto[28951]: | [2 is ENCAPSULATION_MODE_TRANSPORT]
Apr 16 17:33:11 pat pluto[28951]: | ******parse ISAKMP IPsec DOI attribute:
Apr 16 17:33:11 pat pluto[28951]: | af+type: KEY_LENGTH
Apr 16 17:33:11 pat pluto[28951]: | length/value: 256
Apr 16 17:33:11 pat pluto[28951]: | ******parse ISAKMP IPsec DOI attribute:
Apr 16 17:33:11 pat pluto[28951]: | af+type: AUTH_ALGORITHM
Apr 16 17:33:11 pat pluto[28951]: | length/value: 2
Apr 16 17:33:11 pat pluto[28951]: | [2 is AUTH_ALGORITHM_HMAC_SHA1]
Apr 16 17:33:11 pat pluto[28951]: | ****emit IPsec DOI SIT:
Apr 16 17:33:11 pat pluto[28951]: | IPsec DOI SIT: SIT_IDENTITY_ONLY
Apr 16 17:33:11 pat pluto[28951]: | ****emit ISAKMP Proposal Payload:
Apr 16 17:33:11 pat pluto[28951]: | next payload type: ISAKMP_NEXT_NONE
Apr 16 17:33:11 pat pluto[28951]: | proposal number: 1
Apr 16 17:33:11 pat pluto[28951]: | protocol ID: PROTO_IPSEC_ESP
Apr 16 17:33:11 pat pluto[28951]: | SPI size: 4
Apr 16 17:33:11 pat pluto[28951]: | number of transforms: 1
Apr 16 17:33:11 pat pluto[28951]: | netlink_get_spi: allocated
0xa728160f for esp.0@193.59.3.10
Apr 16 17:33:11 pat pluto[28951]: | emitting 4 raw bytes of SPI into
ISAKMP Proposal Payload
Apr 16 17:33:11 pat pluto[28951]: | SPI a7 28 16 0f
Apr 16 17:33:11 pat pluto[28951]: | *****emit ISAKMP Transform Payload
(ESP):
Apr 16 17:33:11 pat pluto[28951]: | next payload type: ISAKMP_NEXT_NONE
Apr 16 17:33:11 pat pluto[28951]: | transform number: 1
Apr 16 17:33:11 pat pluto[28951]: | transform ID: ESP_AES
Apr 16 17:33:11 pat pluto[28951]: | emitting 20 raw bytes of attributes
into ISAKMP Transform Payload (ESP)
Apr 16 17:33:11 pat pluto[28951]: | attributes 80 01 00 01 80 02 70 80
80 04 00 02 80 06 01 00
Apr 16 17:33:11 pat pluto[28951]: | attributes 80 05 00 02
Apr 16 17:33:11 pat pluto[28951]: | emitting length of ISAKMP Transform
Payload (ESP): 28
Apr 16 17:33:11 pat pluto[28951]: | emitting length of ISAKMP Proposal
Payload: 40
Apr 16 17:33:11 pat pluto[28951]: | emitting length of ISAKMP Security
Association Payload: 52
Apr 16 17:33:11 pat pluto[28951]: "L2TP-PSK-CLIENTS"[1] 93.154.254.88
#2: responding to Quick Mode proposal {msgid:09915fb6}
Apr 16 17:33:11 pat pluto[28951]: "L2TP-PSK-CLIENTS"[1] 93.154.254.88
#2: us: 193.59.3.10<193.59.3.10>[+S=C]:17/1701
Apr 16 17:33:11 pat pluto[28951]: "L2TP-PSK-CLIENTS"[1] 93.154.254.88
#2: them: 93.154.254.88[+S=C]:17/0
Apr 16 17:33:11 pat pluto[28951]: | ***emit ISAKMP Nonce Payload:
Apr 16 17:33:11 pat pluto[28951]: | next payload type: ISAKMP_NEXT_ID
Apr 16 17:33:11 pat pluto[28951]: | emitting 16 raw bytes of Nr into
ISAKMP Nonce Payload
Apr 16 17:33:11 pat pluto[28951]: | Nr 64 8d e0 91 92 47 1d 63 71 ce
ed 9c fc ec 3e 88
Apr 16 17:33:11 pat pluto[28951]: | emitting length of ISAKMP Nonce
Payload: 20
Apr 16 17:33:11 pat pluto[28951]: | emitting 12 raw bytes of IDci into
ISAKMP Message
Apr 16 17:33:11 pat pluto[28951]: | IDci 05 00 00 0c 01 11 00 00 5d
9a fe 58
Apr 16 17:33:11 pat pluto[28951]: | emitting 12 raw bytes of IDcr into
ISAKMP Message
Apr 16 17:33:11 pat pluto[28951]: | IDcr 00 00 00 0c 01 11 06 a5 c1
3b 21 0a
Apr 16 17:33:11 pat pluto[28951]: | HASH(2) computed:
Apr 16 17:33:11 pat pluto[28951]: | 19 71 c5 43 a6 0e 0a 5f 4c fd e5
73 6e 22 f2 d5
Apr 16 17:33:11 pat pluto[28951]: | df 4c 89 47
Apr 16 17:33:11 pat pluto[28951]: | compute_proto_keymat:needed_len
(after ESP enc)=32
Apr 16 17:33:11 pat pluto[28951]: | compute_proto_keymat:needed_len
(after ESP auth)=52
Apr 16 17:33:11 pat pluto[28951]: | ESP KEYMAT
Apr 16 17:33:11 pat pluto[28951]: | KEYMAT computed:
Apr 16 17:33:11 pat pluto[28951]: | a3 90 5f e7 7b 94 89 4b 35 72 f7
11 24 4e b5 17
Apr 16 17:33:11 pat pluto[28951]: | 00 b5 7e 5a 8c 72 96 14 10 c7 ec
79 df 01 a9 3d
Apr 16 17:33:11 pat pluto[28951]: | 47 cc 75 8d 71 66 1e aa 11 0f 81
3b 92 aa e3 7f
Apr 16 17:33:11 pat pluto[28951]: | 84 60 bc 53
Apr 16 17:33:11 pat pluto[28951]: | Peer KEYMAT computed:
Apr 16 17:33:11 pat pluto[28951]: | 4e 07 96 b8 64 a2 7c 3a c3 79 e2
9d 74 54 ac 3c
Apr 16 17:33:11 pat pluto[28951]: | 87 6f 72 6f fa 1c 75 52 1a 57 5e
56 80 43 e9 d7
Apr 16 17:33:11 pat pluto[28951]: | d3 2a ab 59 4c ff 2e e3 a9 0e ec
c7 9a 9c 6a 8a
Apr 16 17:33:11 pat pluto[28951]: | d0 08 70 d2
Apr 16 17:33:11 pat pluto[28951]: | install_inbound_ipsec_sa() checking
if we can route
Apr 16 17:33:11 pat pluto[28951]: | route owner of "L2TP-PSK-CLIENTS"[1]
93.154.254.88 unrouted: NULL; eroute owner: NULL
Apr 16 17:33:11 pat pluto[28951]: | could_route called for
L2TP-PSK-CLIENTS (kind=CK_INSTANCE)
Apr 16 17:33:11 pat pluto[28951]: | routing is easy, or has
resolvable near-conflict
Apr 16 17:33:11 pat pluto[28951]: | checking if this is a replacement state
Apr 16 17:33:11 pat pluto[28951]: | st=0x81578b0 ost=(nil)
st->serialno=#2 ost->serialno=#0
Apr 16 17:33:11 pat pluto[28951]: | installing outgoing SA now as refhim=0
Apr 16 17:33:11 pat pluto[28951]: | looking for alg with transid: 12
keylen: 256 auth: 2
Apr 16 17:33:11 pat pluto[28951]: | checking transid: 11 keylen: 0 auth: 1
Apr 16 17:33:11 pat pluto[28951]: | checking transid: 11 keylen: 0 auth: 2
Apr 16 17:33:11 pat pluto[28951]: | checking transid: 2 keylen: 8 auth: 0
Apr 16 17:33:11 pat pluto[28951]: | checking transid: 2 keylen: 8 auth: 1
Apr 16 17:33:11 pat pluto[28951]: | checking transid: 2 keylen: 8 auth: 2
Apr 16 17:33:11 pat pluto[28951]: | checking transid: 3 keylen: 24 auth: 0
Apr 16 17:33:11 pat pluto[28951]: | checking transid: 3 keylen: 24 auth: 1
Apr 16 17:33:11 pat pluto[28951]: | checking transid: 3 keylen: 24 auth: 2
Apr 16 17:33:11 pat pluto[28951]: | checking transid: 12 keylen: 16 auth: 0
Apr 16 17:33:11 pat pluto[28951]: | checking transid: 12 keylen: 16 auth: 1
Apr 16 17:33:11 pat pluto[28951]: | checking transid: 12 keylen: 16 auth: 2
Apr 16 17:33:11 pat pluto[28951]: | kernel_alg_esp_info():transid=12,
auth=2, ei=0x813d228, enckeylen=32, authkeylen=20, encryptalg=12, authalg=3
Apr 16 17:33:11 pat pluto[28951]: | esp enckey: 4e 07 96 b8 64 a2 7c
3a c3 79 e2 9d 74 54 ac 3c
Apr 16 17:33:11 pat pluto[28951]: | esp enckey: 87 6f 72 6f fa 1c 75
52 1a 57 5e 56 80 43 e9 d7
Apr 16 17:33:11 pat pluto[28951]: | esp authkey: d3 2a ab 59 4c ff 2e
e3 a9 0e ec c7 9a 9c 6a 8a
Apr 16 17:33:11 pat pluto[28951]: | esp authkey: d0 08 70 d2
Apr 16 17:33:11 pat pluto[28951]: | outgoing SA has refhim=4294901761
Apr 16 17:33:11 pat pluto[28951]: | looking for alg with transid: 12
keylen: 256 auth: 2
Apr 16 17:33:11 pat pluto[28951]: | checking transid: 11 keylen: 0 auth: 1
Apr 16 17:33:11 pat pluto[28951]: | checking transid: 11 keylen: 0 auth: 2
Apr 16 17:33:11 pat pluto[28951]: | checking transid: 2 keylen: 8 auth: 0
Apr 16 17:33:11 pat pluto[28951]: | checking transid: 2 keylen: 8 auth: 1
Apr 16 17:33:11 pat pluto[28951]: | checking transid: 2 keylen: 8 auth: 2
Apr 16 17:33:11 pat pluto[28951]: | checking transid: 3 keylen: 24 auth: 0
Apr 16 17:33:11 pat pluto[28951]: | checking transid: 3 keylen: 24 auth: 1
Apr 16 17:33:11 pat pluto[28951]: | checking transid: 3 keylen: 24 auth: 2
Apr 16 17:33:11 pat pluto[28951]: | checking transid: 12 keylen: 16 auth: 0
Apr 16 17:33:11 pat pluto[28951]: | checking transid: 12 keylen: 16 auth: 1
Apr 16 17:33:11 pat pluto[28951]: | checking transid: 12 keylen: 16 auth: 2
Apr 16 17:33:11 pat pluto[28951]: | kernel_alg_esp_info():transid=12,
auth=2, ei=0x813d228, enckeylen=32, authkeylen=20, encryptalg=12, authalg=3
Apr 16 17:33:11 pat pluto[28951]: | esp enckey: a3 90 5f e7 7b 94 89
4b 35 72 f7 11 24 4e b5 17
Apr 16 17:33:11 pat pluto[28951]: | esp enckey: 00 b5 7e 5a 8c 72 96
14 10 c7 ec 79 df 01 a9 3d
Apr 16 17:33:11 pat pluto[28951]: | esp authkey: 47 cc 75 8d 71 66 1e
aa 11 0f 81 3b 92 aa e3 7f
Apr 16 17:33:11 pat pluto[28951]: | esp authkey: 84 60 bc 53
Apr 16 17:33:11 pat pluto[28951]: | add inbound eroute
93.154.254.88/32:0 --17-> 193.59.3.10/32:1701 => tun.10000@193.59.3.10
(raw_eroute)
Apr 16 17:33:11 pat pluto[28951]: | raw_eroute result=1
Apr 16 17:33:11 pat pluto[28951]: | encrypting:
Apr 16 17:33:11 pat pluto[28951]: | 01 00 00 18 19 71 c5 43 a6 0e 0a
5f 4c fd e5 73
Apr 16 17:33:11 pat pluto[28951]: | 6e 22 f2 d5 df 4c 89 47 0a 00 00
34 00 00 00 01
Apr 16 17:33:11 pat pluto[28951]: | 00 00 00 01 00 00 00 28 01 03 04
01 a7 28 16 0f
Apr 16 17:33:11 pat pluto[28951]: | 00 00 00 1c 01 0c 00 00 80 01 00
01 80 02 70 80
Apr 16 17:33:11 pat pluto[28951]: | 80 04 00 02 80 06 01 00 80 05 00
02 05 00 00 14
Apr 16 17:33:11 pat pluto[28951]: | 64 8d e0 91 92 47 1d 63 71 ce ed
9c fc ec 3e 88
Apr 16 17:33:11 pat pluto[28951]: | 05 00 00 0c 01 11 00 00 5d 9a fe
58 00 00 00 0c
Apr 16 17:33:11 pat pluto[28951]: | 01 11 06 a5 c1 3b 21 0a
Apr 16 17:33:11 pat pluto[28951]: | IV:
Apr 16 17:33:11 pat pluto[28951]: | 33 ce 16 ea 0f 9a f7 5c 95 fe f2
a2 2a f6 21 f3
Apr 16 17:33:11 pat pluto[28951]: | unpadded size is: 120
Apr 16 17:33:11 pat pluto[28951]: | emitting 8 zero bytes of encryption
padding into ISAKMP Message
Apr 16 17:33:11 pat pluto[28951]: | encrypting 128 using OAKLEY_AES_CBC
Apr 16 17:33:11 pat pluto[28951]: | next IV: 2f 6e de 9d 4e 53 2c c0
71 3c 49 b2 d3 bc d2 e9
Apr 16 17:33:11 pat pluto[28951]: | emitting length of ISAKMP Message: 156
Apr 16 17:33:11 pat pluto[28951]: | finished processing quick inI1
Apr 16 17:33:11 pat pluto[28951]: | complete state transition with STF_OK
Apr 16 17:33:11 pat pluto[28951]: "L2TP-PSK-CLIENTS"[1] 93.154.254.88
#2: transition from state STATE_QUICK_R0 to state STATE_QUICK_R1
Apr 16 17:33:11 pat pluto[28951]: | deleting event for #2
Apr 16 17:33:11 pat pluto[28951]: | sending reply packet to
93.154.254.88:500 (from port 500)
Apr 16 17:33:11 pat pluto[28951]: | sending 156 bytes for STATE_QUICK_R0
through eth0:500 to 93.154.254.88:500 (using #2)
Apr 16 17:33:11 pat pluto[28951]: | fd 5a 54 0a f7 ba 37 6b 50 80 75
74 f1 4c 26 93
Apr 16 17:33:11 pat pluto[28951]: | 08 10 20 01 b6 5f 91 09 00 00 00
9c 6d cd 7c 5a
Apr 16 17:33:11 pat pluto[28951]: | b4 78 b3 d5 df ae 71 b9 80 b6 36
c3 0d 0b 47 f1
Apr 16 17:33:11 pat pluto[28951]: | 06 51 0e 08 05 de ff 69 a5 e5 f8
ed f7 c4 26 9a
Apr 16 17:33:11 pat pluto[28951]: | 55 12 23 da 3a f3 df 60 3e af 96
86 3f 2b 88 65
Apr 16 17:33:11 pat pluto[28951]: | 36 f4 a9 9e 4d 54 a5 8f c5 dd 26
11 68 7e a1 66
Apr 16 17:33:11 pat pluto[28951]: | 0c 76 56 ee c2 6f 4c ef b0 05 79
ab e9 92 e7 b0
Apr 16 17:33:11 pat pluto[28951]: | 20 b2 7a fa 66 58 24 ae eb 81 6b
ce 86 b8 9e cf
Apr 16 17:33:11 pat pluto[28951]: | 1d 23 b2 ab 92 e1 5d 2b 30 a7 57
27 2f 6e de 9d
Apr 16 17:33:11 pat pluto[28951]: | 4e 53 2c c0 71 3c 49 b2 d3 bc d2 e9
Apr 16 17:33:11 pat pluto[28951]: | inserting event EVENT_RETRANSMIT,
timeout in 10 seconds for #2
Apr 16 17:33:11 pat pluto[28951]: | event added after event
EVENT_PENDING_DDNS
Apr 16 17:33:11 pat pluto[28951]: "L2TP-PSK-CLIENTS"[1] 93.154.254.88
#2: STATE_QUICK_R1: sent QR1, inbound IPsec SA installed, expecting QI2
Apr 16 17:33:11 pat pluto[28951]: | modecfg pull: noquirk policy:push
not-client
Apr 16 17:33:11 pat pluto[28951]: | phase 1 is done, looking for phase 2
to unpend
Apr 16 17:33:11 pat pluto[28951]: | complete state transition with
STF_INLINE
Apr 16 17:33:11 pat pluto[28951]: | * processed 0 messages from
cryptographic helpers
Apr 16 17:33:11 pat pluto[28951]: | next event EVENT_PENDING_DDNS in 5
seconds
Apr 16 17:33:11 pat pluto[28951]: | next event EVENT_PENDING_DDNS in 5
seconds
Apr 16 17:33:11 pat pluto[28951]: |
Apr 16 17:33:11 pat pluto[28951]: | *received 76 bytes from
93.154.254.88:500 on eth0 (port=500)
Apr 16 17:33:11 pat pluto[28951]: | fd 5a 54 0a f7 ba 37 6b 50 80 75
74 f1 4c 26 93
Apr 16 17:33:11 pat pluto[28951]: | 08 10 20 01 b6 5f 91 09 00 00 00
4c 77 4c 81 ae
Apr 16 17:33:11 pat pluto[28951]: | 5a e8 eb d2 d3 aa 41 4f 09 70 de
29 d2 8a 26 66
Apr 16 17:33:11 pat pluto[28951]: | ac be 5e 06 62 b1 9a 6b cc 3a 53
79 fa 9d a8 e9
Apr 16 17:33:11 pat pluto[28951]: | e8 0c d1 10 d8 c2 60 3c 72 cd 3f 59
Apr 16 17:33:11 pat pluto[28951]: | **parse ISAKMP Message:
Apr 16 17:33:11 pat pluto[28951]: | initiator cookie:
Apr 16 17:33:11 pat pluto[28951]: | fd 5a 54 0a f7 ba 37 6b
Apr 16 17:33:11 pat pluto[28951]: | responder cookie:
Apr 16 17:33:11 pat pluto[28951]: | 50 80 75 74 f1 4c 26 93
Apr 16 17:33:11 pat pluto[28951]: | next payload type: ISAKMP_NEXT_HASH
Apr 16 17:33:11 pat pluto[28951]: | ISAKMP version: ISAKMP Version
1.0 (rfc2407)
Apr 16 17:33:11 pat pluto[28951]: | exchange type: ISAKMP_XCHG_QUICK
Apr 16 17:33:11 pat pluto[28951]: | flags: ISAKMP_FLAG_ENCRYPTION
Apr 16 17:33:11 pat pluto[28951]: | message ID: b6 5f 91 09
Apr 16 17:33:11 pat pluto[28951]: | length: 76
Apr 16 17:33:11 pat pluto[28951]: | processing version=1.0 packet with
exchange type=ISAKMP_XCHG_QUICK (32)
Apr 16 17:33:11 pat pluto[28951]: | ICOOKIE: fd 5a 54 0a f7 ba 37 6b
Apr 16 17:33:11 pat pluto[28951]: | RCOOKIE: 50 80 75 74 f1 4c 26 93
Apr 16 17:33:11 pat pluto[28951]: | state hash entry 25
Apr 16 17:33:11 pat pluto[28951]: | v1 peer and cookies match on #2,
provided msgid b65f9109 vs b65f9109
Apr 16 17:33:11 pat pluto[28951]: | v1 state object #2 found, in
STATE_QUICK_R1
Apr 16 17:33:11 pat pluto[28951]: | processing connection
L2TP-PSK-CLIENTS[1] 93.154.254.88
Apr 16 17:33:11 pat pluto[28951]: | received encrypted packet from
93.154.254.88:500
Apr 16 17:33:11 pat pluto[28951]: | decrypting 48 bytes using algorithm
OAKLEY_AES_CBC
Apr 16 17:33:11 pat pluto[28951]: | decrypted:
Apr 16 17:33:11 pat pluto[28951]: | 00 00 00 18 b6 bf 83 11 d0 49 28
18 15 2b b4 81
Apr 16 17:33:11 pat pluto[28951]: | cc 16 32 3b 2e fd 36 da f3 f9 b9
d9 ef de d1 8a
Apr 16 17:33:11 pat pluto[28951]: | c1 ce f6 a4 fa b7 c8 bf eb 9f de
f4 a0 ce d9 17
Apr 16 17:33:11 pat pluto[28951]: | next IV: fa 9d a8 e9 e8 0c d1 10
d8 c2 60 3c 72 cd 3f 59
Apr 16 17:33:11 pat pluto[28951]: | got payload 0x100(ISAKMP_NEXT_HASH)
needed: 0x100 opt: 0x0
Apr 16 17:33:11 pat pluto[28951]: | ***parse ISAKMP Hash Payload:
Apr 16 17:33:11 pat pluto[28951]: | next payload type: ISAKMP_NEXT_NONE
Apr 16 17:33:11 pat pluto[28951]: | length: 24
Apr 16 17:33:11 pat pluto[28951]: | removing 24 bytes of padding
Apr 16 17:33:11 pat pluto[28951]: | HASH(3) computed: b6 bf 83 11 d0
49 28 18 15 2b b4 81 cc 16 32 3b
Apr 16 17:33:11 pat pluto[28951]: | HASH(3) computed: 2e fd 36 da
Apr 16 17:33:11 pat pluto[28951]: | install_ipsec_sa() for #2: outbound only
Apr 16 17:33:11 pat pluto[28951]: | route owner of "L2TP-PSK-CLIENTS"[1]
93.154.254.88 unrouted: NULL; eroute owner: NULL
Apr 16 17:33:11 pat pluto[28951]: | could_route called for
L2TP-PSK-CLIENTS (kind=CK_INSTANCE)
Apr 16 17:33:11 pat pluto[28951]: | sr for #2: unrouted
Apr 16 17:33:11 pat pluto[28951]: | route owner of "L2TP-PSK-CLIENTS"[1]
93.154.254.88 unrouted: NULL; eroute owner: NULL
Apr 16 17:33:11 pat pluto[28951]: | route_and_eroute with c:
L2TP-PSK-CLIENTS (next: none) ero:null esr:{(nil)} ro:null rosr:{(nil)}
and state: 2
Apr 16 17:33:11 pat pluto[28951]: | eroute_connection add eroute
193.59.3.10/32:1701 --17-> 93.154.254.88/32:0 =>
esp.28b3177@93.154.254.88 (raw_eroute)
Apr 16 17:33:11 pat pluto[28951]: | raw_eroute result=1
Apr 16 17:33:11 pat pluto[28951]: | command executing up-host
Apr 16 17:33:11 pat pluto[28951]: | executing up-host: 2>&1
PLUTO_VERB='up-host' PLUTO_VERSION='2.0'
PLUTO_CONNECTION='L2TP-PSK-CLIENTS' PLUTO_INTERFACE='eth0'
PLUTO_NEXT_HOP='93.154.254.88' PLUTO_ME='193.59.3.10'
PLUTO_MY_ID='193.59.3.10' PLUTO_MY_CLIENT='193.59.3.10/32'
PLUTO_MY_CLIENT_NET='193.59.3.10' PLUTO_MY_CLIENT_MASK='255.255.255.255'
PLUTO_MY_PORT='1701' PLUTO_MY_PROTOCOL='17' PLUTO_PEER='93.154.254.88'
PLUTO_PEER_ID='93.154.254.88' PLUTO_PEER_CLIENT='93.154.254.88/32'
PLUTO_PEER_CLIENT_NET='93.154.254.88'
PLUTO_PEER_CLIENT_MASK='255.255.255.255' PLUTO_PEER_PORT='0'
PLUTO_PEER_PROTOCOL='17' PLUTO_PEER_CA='' PLUTO_STACK='netkey'
PLUTO_CONN_POLICY='PSK+ENCRYPT+DONTREKEY+IKEv2ALLOW'
PLUTO_XAUTH_USERNAME='' PLUTO_CISCO_DNS_INFO=''
PLUTO_CISCO_DOMAIN_INFO='' PLUTO_PEER_BANNER='' ipsec _updown
Apr 16 17:33:11 pat pluto[28951]: | popen(): cmd is 759 chars long
Apr 16 17:33:11 pat pluto[28951]: | cmd( 0):2>&1 PLUTO_VERB='up-host'
PLUTO_VERSION='2.0' PLUTO_CONNECTION='L2TP-PSK-CLIENTS:
Apr 16 17:33:11 pat pluto[28951]: | cmd( 80):' PLUTO_INTERFACE='eth0'
PLUTO_NEXT_HOP='93.154.254.88' PLUTO_ME='193.59.3.10' :
Apr 16 17:33:11 pat pluto[28951]: | cmd( 160):PLUTO_MY_ID='193.59.3.10'
PLUTO_MY_CLIENT='193.59.3.10/32' PLUTO_MY_CLIENT_NET:
Apr 16 17:33:11 pat pluto[28951]: | cmd( 240):='193.59.3.10'
PLUTO_MY_CLIENT_MASK='255.255.255.255' PLUTO_MY_PORT='1701' PLUT:
Apr 16 17:33:11 pat pluto[28951]: | cmd( 320):O_MY_PROTOCOL='17'
PLUTO_PEER='93.154.254.88' PLUTO_PEER_ID='93.154.254.88' PLUT:
Apr 16 17:33:11 pat pluto[28951]: | cmd(
400):O_PEER_CLIENT='93.154.254.88/32'
PLUTO_PEER_CLIENT_NET='93.154.254.88' PLUTO_PEE:
Apr 16 17:33:11 pat pluto[28951]: | cmd(
480):R_CLIENT_MASK='255.255.255.255' PLUTO_PEER_PORT='0'
PLUTO_PEER_PROTOCOL='17' PLU:
Apr 16 17:33:11 pat pluto[28951]: | cmd( 560):TO_PEER_CA=''
PLUTO_STACK='netkey' PLUTO_CONN_POLICY='PSK+ENCRYPT+DONTREKEY+IKE:
Apr 16 17:33:11 pat pluto[28951]: | cmd( 640):v2ALLOW'
PLUTO_XAUTH_USERNAME='' PLUTO_CISCO_DNS_INFO='' PLUTO_CISCO_DOMAIN_INF:
Apr 16 17:33:11 pat pluto[28951]: | cmd( 720):O='' PLUTO_PEER_BANNER=''
ipsec _updown:
Apr 16 17:33:11 pat pluto[28951]: | route_and_eroute: firewall_notified:
true
Apr 16 17:33:11 pat pluto[28951]: | command executing prepare-host
Apr 16 17:33:11 pat pluto[28951]: | executing prepare-host: 2>&1
PLUTO_VERB='prepare-host' PLUTO_VERSION='2.0'
PLUTO_CONNECTION='L2TP-PSK-CLIENTS' PLUTO_INTERFACE='eth0'
PLUTO_NEXT_HOP='93.154.254.88' PLUTO_ME='193.59.3.10'
PLUTO_MY_ID='193.59.3.10' PLUTO_MY_CLIENT='193.59.3.10/32'
PLUTO_MY_CLIENT_NET='193.59.3.10' PLUTO_MY_CLIENT_MASK='255.255.255.255'
PLUTO_MY_PORT='1701' PLUTO_MY_PROTOCOL='17' PLUTO_PEER='93.154.254.88'
PLUTO_PEER_ID='93.154.254.88' PLUTO_PEER_CLIENT='93.154.254.88/32'
PLUTO_PEER_CLIENT_NET='93.154.254.88'
PLUTO_PEER_CLIENT_MASK='255.255.255.255' PLUTO_PEER_PORT='0'
PLUTO_PEER_PROTOCOL='17' PLUTO_PEER_CA='' PLUTO_STACK='netkey'
PLUTO_CONN_POLICY='PSK+ENCRYPT+DONTREKEY+IKEv2ALLOW'
PLUTO_XAUTH_USERNAME='' PLUTO_CISCO_DNS_INFO=''
PLUTO_CISCO_DOMAIN_INFO='' PLUTO_PEER_BANNER='' ipsec _updown
Apr 16 17:33:11 pat pluto[28951]: | popen(): cmd is 764 chars long
Apr 16 17:33:11 pat pluto[28951]: | cmd( 0):2>&1
PLUTO_VERB='prepare-host' PLUTO_VERSION='2.0' PLUTO_CONNECTION='L2TP-PSK-CL:
Apr 16 17:33:11 pat pluto[28951]: | cmd( 80):IENTS'
PLUTO_INTERFACE='eth0' PLUTO_NEXT_HOP='93.154.254.88' PLUTO_ME='193.59.33:
Apr 16 17:33:11 pat pluto[28951]: | cmd( 160):.10'
PLUTO_MY_ID='193.59.3.10' PLUTO_MY_CLIENT='193.59.3.10/32' PLUTO_MY_CLIEN:
Apr 16 17:33:11 pat pluto[28951]: | cmd( 240):T_NET='193.59.3.10'
PLUTO_MY_CLIENT_MASK='255.255.255.255' PLUTO_MY_PORT='1701':
Apr 16 17:33:11 pat pluto[28951]: | cmd( 320): PLUTO_MY_PROTOCOL='17'
PLUTO_PEER='93.154.254.88' PLUTO_PEER_ID='93.154.254.88':
Apr 16 17:33:11 pat pluto[28951]: | cmd( 400):
PLUTO_PEER_CLIENT='93.154.254.88/32'
PLUTO_PEER_CLIENT_NET='93.154.254.88' PLUT:
Apr 16 17:33:11 pat pluto[28951]: | cmd(
480):O_PEER_CLIENT_MASK='255.255.255.255' PLUTO_PEER_PORT='0'
PLUTO_PEER_PROTOCOL='17:
Apr 16 17:33:11 pat pluto[28951]: | cmd( 560):' PLUTO_PEER_CA=''
PLUTO_STACK='netkey' PLUTO_CONN_POLICY='PSK+ENCRYPT+DONTREKE:
Apr 16 17:33:11 pat pluto[28951]: | cmd( 640):Y+IKEv2ALLOW'
PLUTO_XAUTH_USERNAME='' PLUTO_CISCO_DNS_INFO='' PLUTO_CISCO_DOMAI:
Apr 16 17:33:11 pat pluto[28951]: | cmd( 720):N_INFO=''
PLUTO_PEER_BANNER='' ipsec _updown:
Apr 16 17:33:11 pat pluto[28951]: | command executing route-host
Apr 16 17:33:11 pat pluto[28951]: | executing route-host: 2>&1
PLUTO_VERB='route-host' PLUTO_VERSION='2.0'
PLUTO_CONNECTION='L2TP-PSK-CLIENTS' PLUTO_INTERFACE='eth0'
PLUTO_NEXT_HOP='93.154.254.88' PLUTO_ME='193.59.3.10'
PLUTO_MY_ID='193.59.3.10' PLUTO_MY_CLIENT='193.59.3.10/32'
PLUTO_MY_CLIENT_NET='193.59.3.10' PLUTO_MY_CLIENT_MASK='255.255.255.255'
PLUTO_MY_PORT='1701' PLUTO_MY_PROTOCOL='17' PLUTO_PEER='93.154.254.88'
PLUTO_PEER_ID='93.154.254.88' PLUTO_PEER_CLIENT='93.154.254.88/32'
PLUTO_PEER_CLIENT_NET='93.154.254.88'
PLUTO_PEER_CLIENT_MASK='255.255.255.255' PLUTO_PEER_PORT='0'
PLUTO_PEER_PROTOCOL='17' PLUTO_PEER_CA='' PLUTO_STACK='netkey'
PLUTO_CONN_POLICY='PSK+ENCRYPT+DONTREKEY+IKEv2ALLOW'
PLUTO_XAUTH_USERNAME='' PLUTO_CISCO_DNS_INFO=''
PLUTO_CISCO_DOMAIN_INFO='' PLUTO_PEER_BANNER='' ipsec _updown
Apr 16 17:33:11 pat pluto[28951]: | popen(): cmd is 762 chars long
Apr 16 17:33:11 pat pluto[28951]: | cmd( 0):2>&1
PLUTO_VERB='route-host' PLUTO_VERSION='2.0' PLUTO_CONNECTION='L2TP-PSK-CLIE:
Apr 16 17:33:11 pat pluto[28951]: | cmd( 80):NTS'
PLUTO_INTERFACE='eth0' PLUTO_NEXT_HOP='93.154.254.88' PLUTO_ME='193.59.33.1:
Apr 16 17:33:11 pat pluto[28951]: | cmd( 160):0'
PLUTO_MY_ID='193.59.3.10' PLUTO_MY_CLIENT='193.59.3.10/32' PLUTO_MY_CLIENT_:
Apr 16 17:33:11 pat pluto[28951]: | cmd( 240):NET='193.59.3.10'
PLUTO_MY_CLIENT_MASK='255.255.255.255' PLUTO_MY_PORT='1701' P:
Apr 16 17:33:11 pat pluto[28951]: | cmd( 320):LUTO_MY_PROTOCOL='17'
PLUTO_PEER='93.154.254.88' PLUTO_PEER_ID='93.154.254.88' P:
Apr 16 17:33:11 pat pluto[28951]: | cmd(
400):LUTO_PEER_CLIENT='93.154.254.88/32'
PLUTO_PEER_CLIENT_NET='93.154.254.88' PLUTO_:
Apr 16 17:33:11 pat pluto[28951]: | cmd(
480):PEER_CLIENT_MASK='255.255.255.255' PLUTO_PEER_PORT='0'
PLUTO_PEER_PROTOCOL='17' :
Apr 16 17:33:11 pat pluto[28951]: | cmd( 560):PLUTO_PEER_CA=''
PLUTO_STACK='netkey' PLUTO_CONN_POLICY='PSK+ENCRYPT+DONTREKEY+:
Apr 16 17:33:11 pat pluto[28951]: | cmd( 640):IKEv2ALLOW'
PLUTO_XAUTH_USERNAME='' PLUTO_CISCO_DNS_INFO='' PLUTO_CISCO_DOMAIN_:
Apr 16 17:33:11 pat pluto[28951]: | cmd( 720):INFO=''
PLUTO_PEER_BANNER='' ipsec _updown:
Apr 16 17:33:11 pat pluto[28951]: | route_and_eroute: instance
"L2TP-PSK-CLIENTS"[1] 93.154.254.88, setting eroute_owner
{spd=0x815684c,sr=0x815684c} to #2 (was #0) (newest_ipsec_sa=#0)
Apr 16 17:33:11 pat pluto[28951]: | inI2: instance L2TP-PSK-CLIENTS[1],
setting newest_ipsec_sa to #2 (was #0) (spd.eroute=#2)
Apr 16 17:33:11 pat pluto[28951]: | ICOOKIE: fd 5a 54 0a f7 ba 37 6b
Apr 16 17:33:11 pat pluto[28951]: | RCOOKIE: 50 80 75 74 f1 4c 26 93
Apr 16 17:33:11 pat pluto[28951]: | state hash entry 25
Apr 16 17:33:11 pat pluto[28951]: | v1 peer and cookies match on #2,
provided msgid 00000000 vs b65f9109
Apr 16 17:33:11 pat pluto[28951]: | v1 peer and cookies match on #1,
provided msgid 00000000 vs 00000000
Apr 16 17:33:11 pat pluto[28951]: | v1 state object #1 found, in
STATE_MAIN_R3
Apr 16 17:33:11 pat pluto[28951]: "L2TP-PSK-CLIENTS"[1] 93.154.254.88
#2: Dead Peer Detection (RFC 3706): enabled
Apr 16 17:33:11 pat pluto[28951]: | state: 2 requesting event none to be
deleted by
/build/buildd-openswan_2.6.28+dfsg-5+squeeze1-i386-OOSWut/openswan-2.6.28+dfsg/programs/pluto/dpd.c:159
Apr 16 17:33:11 pat pluto[28951]: | inserting event EVENT_DPD, timeout
in 40 seconds for #2
Apr 16 17:33:11 pat pluto[28951]: | event added after event EVENT_DPD for #1
Apr 16 17:33:11 pat pluto[28951]: | state: 1 requesting event EVENT_DPD
to be deleted by
/build/buildd-openswan_2.6.28+dfsg-5+squeeze1-i386-OOSWut/openswan-2.6.28+dfsg/programs/pluto/dpd.c:171
Apr 16 17:33:11 pat pluto[28951]: | complete state transition with STF_OK
Apr 16 17:33:11 pat pluto[28951]: "L2TP-PSK-CLIENTS"[1] 93.154.254.88
#2: transition from state STATE_QUICK_R1 to state STATE_QUICK_R2
Apr 16 17:33:11 pat pluto[28951]: | deleting event for #2
Apr 16 17:33:11 pat pluto[28951]: | inserting event EVENT_SA_EXPIRE,
timeout in 28800 seconds for #2
Apr 16 17:33:11 pat pluto[28951]: | event added after event
EVENT_SA_EXPIRE for #1
Apr 16 17:33:11 pat pluto[28951]: "L2TP-PSK-CLIENTS"[1] 93.154.254.88
#2: STATE_QUICK_R2: IPsec SA established transport mode {ESP=>0x028b3177
<0xa728160f xfrm=AES_256-HMAC_SHA1 NATOA=none NATD=none DPD=enabled}
Apr 16 17:33:11 pat pluto[28951]: | modecfg pull: noquirk policy:push
not-client
Apr 16 17:33:11 pat pluto[28951]: | phase 1 is done, looking for phase 2
to unpend
Apr 16 17:33:11 pat pluto[28951]: | * processed 0 messages from
cryptographic helpers
Apr 16 17:33:11 pat pluto[28951]: | next event EVENT_PENDING_DDNS in 5
seconds
Apr 16 17:33:11 pat pluto[28951]: | next event EVENT_PENDING_DDNS in 5
seconds
Apr 16 17:33:16 pat pluto[28951]: |
Apr 16 17:33:16 pat pluto[28951]: | next event EVENT_PENDING_DDNS in 0
seconds
Apr 16 17:33:16 pat pluto[28951]: | *time to handle event
Apr 16 17:33:16 pat pluto[28951]: | handling event EVENT_PENDING_DDNS
Apr 16 17:33:16 pat pluto[28951]: | event after this is
EVENT_NAT_T_KEEPALIVE in 14 seconds
Apr 16 17:33:16 pat pluto[28951]: | inserting event EVENT_PENDING_DDNS,
timeout in 60 seconds
Apr 16 17:33:16 pat pluto[28951]: | event added after event EVENT_DPD for #2
Apr 16 17:33:16 pat pluto[28951]: | next event EVENT_NAT_T_KEEPALIVE in
14 seconds
Apr 16 17:33:30 pat pluto[28951]: |
Apr 16 17:33:30 pat pluto[28951]: | next event EVENT_NAT_T_KEEPALIVE in
0 seconds
Apr 16 17:33:30 pat pluto[28951]: | *time to handle event
Apr 16 17:33:30 pat pluto[28951]: | handling event EVENT_NAT_T_KEEPALIVE
Apr 16 17:33:30 pat pluto[28951]: | event after this is EVENT_DPD in 21
seconds
Apr 16 17:33:30 pat pluto[28951]: | processing connection
L2TP-PSK-CLIENTS[1] 93.154.254.88
Apr 16 17:33:30 pat pluto[28951]: | processing connection
L2TP-PSK-CLIENTS[1] 93.154.254.88
Apr 16 17:33:30 pat pluto[28951]: | next event EVENT_DPD in 21 seconds
for #2
Apr 16 17:33:51 pat pluto[28951]: |
Apr 16 17:33:51 pat pluto[28951]: | next event EVENT_DPD in 0 seconds for #2
Apr 16 17:33:51 pat pluto[28951]: | *time to handle event
Apr 16 17:33:51 pat pluto[28951]: | handling event EVENT_DPD
Apr 16 17:33:51 pat pluto[28951]: | event after this is
EVENT_PENDING_DDNS in 25 seconds
Apr 16 17:33:51 pat pluto[28951]: | processing connection
L2TP-PSK-CLIENTS[1] 93.154.254.88
Apr 16 17:33:51 pat pluto[28951]: | DPD: processing for state #2
("L2TP-PSK-CLIENTS")
Apr 16 17:33:51 pat pluto[28951]: | get esp.a728160f@193.59.3.10
Apr 16 17:33:51 pat pluto[28951]: | DPD: out event not sent, phase 2 active
Apr 16 17:33:51 pat pluto[28951]: | inserting event EVENT_DPD, timeout
in 40 seconds for #2
Apr 16 17:33:51 pat pluto[28951]: | event added after event
EVENT_PENDING_PHASE2
Apr 16 17:33:51 pat pluto[28951]: | next event EVENT_PENDING_DDNS in 25
seconds
Apr 16 17:34:16 pat pluto[28951]: |
Apr 16 17:34:16 pat pluto[28951]: | next event EVENT_PENDING_DDNS in 0
seconds
Apr 16 17:34:16 pat pluto[28951]: | *time to handle event
Apr 16 17:34:16 pat pluto[28951]: | handling event EVENT_PENDING_DDNS
Apr 16 17:34:16 pat pluto[28951]: | event after this is
EVENT_PENDING_PHASE2 in 0 seconds
Apr 16 17:34:16 pat pluto[28951]: | inserting event EVENT_PENDING_DDNS,
timeout in 60 seconds
Apr 16 17:34:16 pat pluto[28951]: | event added after event EVENT_DPD for #2
Apr 16 17:34:16 pat pluto[28951]: | handling event EVENT_PENDING_PHASE2
Apr 16 17:34:16 pat pluto[28951]: | event after this is EVENT_DPD in 15
seconds
Apr 16 17:34:16 pat pluto[28951]: | inserting event
EVENT_PENDING_PHASE2, timeout in 120 seconds
Apr 16 17:34:16 pat pluto[28951]: | event added after event
EVENT_PENDING_DDNS
Apr 16 17:34:16 pat pluto[28951]: | pending review: connection
"L2TP-PSK-CLIENTS" was not up, skipped
Apr 16 17:34:16 pat pluto[28951]: | pending review: connection
"L2TP-PSK-CLIENTS" was not up, skipped
Apr 16 17:34:16 pat pluto[28951]: | next event EVENT_DPD in 15 seconds
for #2
Apr 16 17:34:31 pat pluto[28951]: |
Apr 16 17:34:31 pat pluto[28951]: | next event EVENT_DPD in 0 seconds for #2
Apr 16 17:34:31 pat pluto[28951]: | *time to handle event
Apr 16 17:34:31 pat pluto[28951]: | handling event EVENT_DPD
Apr 16 17:34:31 pat pluto[28951]: | event after this is
EVENT_PENDING_DDNS in 45 seconds
Apr 16 17:34:31 pat pluto[28951]: | processing connection
L2TP-PSK-CLIENTS[1] 93.154.254.88
Apr 16 17:34:31 pat pluto[28951]: | DPD: processing for state #2
("L2TP-PSK-CLIENTS")
Apr 16 17:34:31 pat pluto[28951]: | get esp.a728160f@193.59.3.10
Apr 16 17:34:31 pat pluto[28951]: | DPD: out event not sent, phase 2 active
Apr 16 17:34:31 pat pluto[28951]: | inserting event EVENT_DPD, timeout
in 40 seconds for #2
Apr 16 17:34:31 pat pluto[28951]: | event added at head of queue
Apr 16 17:34:31 pat pluto[28951]: | next event EVENT_DPD in 40 seconds
for #2
Apr 16 17:35:11 pat pluto[28951]: |
Apr 16 17:35:11 pat pluto[28951]: | next event EVENT_DPD in 0 seconds for #2
Apr 16 17:35:11 pat pluto[28951]: | *time to handle event
Apr 16 17:35:11 pat pluto[28951]: | handling event EVENT_DPD
Apr 16 17:35:11 pat pluto[28951]: | event after this is
EVENT_PENDING_DDNS in 5 seconds
Apr 16 17:35:11 pat pluto[28951]: | processing connection
L2TP-PSK-CLIENTS[1] 93.154.254.88
Apr 16 17:35:11 pat pluto[28951]: | DPD: processing for state #2
("L2TP-PSK-CLIENTS")
Apr 16 17:35:11 pat pluto[28951]: | get esp.a728160f@193.59.3.10
Apr 16 17:35:11 pat pluto[28951]: | DPD: out event not sent, phase 2 active
Apr 16 17:35:11 pat pluto[28951]: | inserting event EVENT_DPD, timeout
in 40 seconds for #2
Apr 16 17:35:11 pat pluto[28951]: | event added after event
EVENT_PENDING_DDNS
Apr 16 17:35:11 pat pluto[28951]: | next event EVENT_PENDING_DDNS in 5
seconds
Apr 16 17:35:16 pat pluto[28951]: |
Apr 16 17:35:16 pat pluto[28951]: | next event EVENT_PENDING_DDNS in 0
seconds
Apr 16 17:35:16 pat pluto[28951]: | *time to handle event
Apr 16 17:35:16 pat pluto[28951]: | handling event EVENT_PENDING_DDNS
Apr 16 17:35:16 pat pluto[28951]: | event after this is EVENT_DPD in 35
seconds
Apr 16 17:35:16 pat pluto[28951]: | inserting event EVENT_PENDING_DDNS,
timeout in 60 seconds
Apr 16 17:35:16 pat pluto[28951]: | event added after event EVENT_DPD for #2
Apr 16 17:35:16 pat pluto[28951]: | next event EVENT_DPD in 35 seconds
for #2
Apr 16 17:35:51 pat pluto[28951]: |
Apr 16 17:35:51 pat pluto[28951]: | next event EVENT_DPD in 0 seconds for #2
Apr 16 17:35:51 pat pluto[28951]: | *time to handle event
Apr 16 17:35:51 pat pluto[28951]: | handling event EVENT_DPD
Apr 16 17:35:51 pat pluto[28951]: | event after this is
EVENT_PENDING_DDNS in 25 seconds
Apr 16 17:35:51 pat pluto[28951]: | processing connection
L2TP-PSK-CLIENTS[1] 93.154.254.88
Apr 16 17:35:51 pat pluto[28951]: | DPD: processing for state #2
("L2TP-PSK-CLIENTS")
Apr 16 17:35:51 pat pluto[28951]: | get esp.a728160f@193.59.3.10
Apr 16 17:35:51 pat pluto[28951]: | DPD: out event not sent, phase 2 active
Apr 16 17:35:51 pat pluto[28951]: | inserting event EVENT_DPD, timeout
in 40 seconds for #2
Apr 16 17:35:51 pat pluto[28951]: | event added after event
EVENT_PENDING_PHASE2
Apr 16 17:35:51 pat pluto[28951]: | next event EVENT_PENDING_DDNS in 25
seconds
Apr 16 17:36:16 pat pluto[28951]: |
Apr 16 17:36:16 pat pluto[28951]: | next event EVENT_PENDING_DDNS in 0
seconds
Apr 16 17:36:16 pat pluto[28951]: | *time to handle event
Apr 16 17:36:16 pat pluto[28951]: | handling event EVENT_PENDING_DDNS
Apr 16 17:36:16 pat pluto[28951]: | event after this is
EVENT_PENDING_PHASE2 in 0 seconds
Apr 16 17:36:16 pat pluto[28951]: | inserting event EVENT_PENDING_DDNS,
timeout in 60 seconds
Apr 16 17:36:16 pat pluto[28951]: | event added after event EVENT_DPD for #2
Apr 16 17:36:16 pat pluto[28951]: | handling event EVENT_PENDING_PHASE2
Apr 16 17:36:16 pat pluto[28951]: | event after this is EVENT_DPD in 15
seconds
Apr 16 17:36:16 pat pluto[28951]: | inserting event
EVENT_PENDING_PHASE2, timeout in 120 seconds
Apr 16 17:36:16 pat pluto[28951]: | event added after event
EVENT_PENDING_DDNS
Apr 16 17:36:16 pat pluto[28951]: | pending review: connection
"L2TP-PSK-CLIENTS" was not up, skipped
Apr 16 17:36:16 pat pluto[28951]: | pending review: connection
"L2TP-PSK-CLIENTS" was not up, skipped
Apr 16 17:36:16 pat pluto[28951]: | next event EVENT_DPD in 15 seconds
for #2
Apr 16 17:36:31 pat pluto[28951]: |
Apr 16 17:36:31 pat pluto[28951]: | next event EVENT_DPD in 0 seconds for #2
Apr 16 17:36:31 pat pluto[28951]: | *time to handle event
Apr 16 17:36:31 pat pluto[28951]: | handling event EVENT_DPD
Apr 16 17:36:31 pat pluto[28951]: | event after this is
EVENT_PENDING_DDNS in 45 seconds
Apr 16 17:36:31 pat pluto[28951]: | processing connection
L2TP-PSK-CLIENTS[1] 93.154.254.88
Apr 16 17:36:31 pat pluto[28951]: | DPD: processing for state #2
("L2TP-PSK-CLIENTS")
Apr 16 17:36:31 pat pluto[28951]: | get esp.a728160f@193.59.3.10
Apr 16 17:36:31 pat pluto[28951]: | DPD: out event not sent, phase 2 active
Apr 16 17:36:31 pat pluto[28951]: | inserting event EVENT_DPD, timeout
in 40 seconds for #2
Apr 16 17:36:31 pat pluto[28951]: | event added at head of queue
Apr 16 17:36:31 pat pluto[28951]: | next event EVENT_DPD in 40 seconds
for #2
Apr 16 17:37:11 pat pluto[28951]: |
Apr 16 17:37:11 pat pluto[28951]: | next event EVENT_DPD in 0 seconds for #2
Apr 16 17:37:11 pat pluto[28951]: | *time to handle event
Apr 16 17:37:11 pat pluto[28951]: | handling event EVENT_DPD
Apr 16 17:37:11 pat pluto[28951]: | event after this is
EVENT_PENDING_DDNS in 5 seconds
Apr 16 17:37:11 pat pluto[28951]: | processing connection
L2TP-PSK-CLIENTS[1] 93.154.254.88
Apr 16 17:37:11 pat pluto[28951]: | DPD: processing for state #2
("L2TP-PSK-CLIENTS")
Apr 16 17:37:11 pat pluto[28951]: | get esp.a728160f@193.59.3.10
Apr 16 17:37:11 pat pluto[28951]: | inserting event EVENT_DPD, timeout
in 40 seconds for #2
Apr 16 17:37:11 pat pluto[28951]: | event added after event
EVENT_PENDING_DDNS
Apr 16 17:37:11 pat pluto[28951]: | DPD: scheduling timeout to 130
Apr 16 17:37:11 pat pluto[28951]: | state: 1 requesting event none to be
deleted by
/build/buildd-openswan_2.6.28+dfsg-5+squeeze1-i386-OOSWut/openswan-2.6.28+dfsg/programs/pluto/dpd.c:192
Apr 16 17:37:11 pat pluto[28951]: | inserting event EVENT_DPD_TIMEOUT,
timeout in 130 seconds for #1
Apr 16 17:37:11 pat pluto[28951]: | event added after event
EVENT_PENDING_PHASE2
Apr 16 17:37:11 pat pluto[28951]: | DPD: sending R_U_THERE 2658074624 to
93.154.254.88:500 (state #1)
Apr 16 17:37:11 pat pluto[28951]: | **emit ISAKMP Message:
Apr 16 17:37:11 pat pluto[28951]: | initiator cookie:
Apr 16 17:37:11 pat pluto[28951]: | fd 5a 54 0a f7 ba 37 6b
Apr 16 17:37:11 pat pluto[28951]: | responder cookie:
Apr 16 17:37:11 pat pluto[28951]: | 50 80 75 74 f1 4c 26 93
Apr 16 17:37:11 pat pluto[28951]: | next payload type: ISAKMP_NEXT_HASH
Apr 16 17:37:11 pat pluto[28951]: | ISAKMP version: ISAKMP Version
1.0 (rfc2407)
Apr 16 17:37:11 pat pluto[28951]: | exchange type: ISAKMP_XCHG_INFO
Apr 16 17:37:11 pat pluto[28951]: | flags: ISAKMP_FLAG_ENCRYPTION
Apr 16 17:37:11 pat pluto[28951]: | message ID: 9a d6 f6 9d
Apr 16 17:37:11 pat pluto[28951]: | ***emit ISAKMP Hash Payload:
Apr 16 17:37:11 pat pluto[28951]: | next payload type: ISAKMP_NEXT_N
Apr 16 17:37:11 pat pluto[28951]: | emitting 20 zero bytes of HASH into
ISAKMP Hash Payload
Apr 16 17:37:11 pat pluto[28951]: | emitting length of ISAKMP Hash
Payload: 24
Apr 16 17:37:11 pat pluto[28951]: | ***emit ISAKMP Notification Payload:
Apr 16 17:37:11 pat pluto[28951]: | next payload type: ISAKMP_NEXT_NONE
Apr 16 17:37:11 pat pluto[28951]: | DOI: ISAKMP_DOI_IPSEC
Apr 16 17:37:11 pat pluto[28951]: | protocol ID: 1
Apr 16 17:37:11 pat pluto[28951]: | SPI size: 16
Apr 16 17:37:11 pat pluto[28951]: | Notify Message Type: R_U_THERE
Apr 16 17:37:11 pat pluto[28951]: | emitting 8 raw bytes of notify
icookie into ISAKMP Notification Payload
Apr 16 17:37:11 pat pluto[28951]: | notify icookie fd 5a 54 0a f7 ba 37 6b
Apr 16 17:37:11 pat pluto[28951]: | emitting 8 raw bytes of notify
rcookie into ISAKMP Notification Payload
Apr 16 17:37:11 pat pluto[28951]: | notify rcookie 50 80 75 74 f1 4c 26 93
Apr 16 17:37:11 pat pluto[28951]: | emitting 4 raw bytes of notify data
into ISAKMP Notification Payload
Apr 16 17:37:11 pat pluto[28951]: | notify data 00 00 6f 9e
Apr 16 17:37:11 pat pluto[28951]: | emitting length of ISAKMP
Notification Payload: 32
Apr 16 17:37:11 pat pluto[28951]: | HASH computed:
Apr 16 17:37:11 pat pluto[28951]: | 7a 60 91 9a 0c 5f d3 85 83 eb fe
03 ec f9 67 d6
Apr 16 17:37:11 pat pluto[28951]: | 40 0c 73 75
Apr 16 17:37:11 pat pluto[28951]: | last Phase 1 IV: ac 67 17 24 05 39
ab a2 4f 07 b4 13 2d 95 6f ad
Apr 16 17:37:11 pat pluto[28951]: | current Phase 1 IV: ac 67 17 24 05
39 ab a2 4f 07 b4 13 2d 95 6f ad
Apr 16 17:37:11 pat pluto[28951]: | computed Phase 2 IV:
Apr 16 17:37:11 pat pluto[28951]: | b1 a1 3f 18 b0 1a a1 f4 a1 25 09
f4 b8 c8 76 27
Apr 16 17:37:11 pat pluto[28951]: | 96 e9 55 37
Apr 16 17:37:11 pat pluto[28951]: | encrypting:
Apr 16 17:37:11 pat pluto[28951]: | 0b 00 00 18 7a 60 91 9a 0c 5f d3
85 83 eb fe 03
Apr 16 17:37:11 pat pluto[28951]: | ec f9 67 d6 40 0c 73 75 00 00 00
20 00 00 00 01
Apr 16 17:37:11 pat pluto[28951]: | 01 10 8d 28 fd 5a 54 0a f7 ba 37
6b 50 80 75 74
Apr 16 17:37:11 pat pluto[28951]: | f1 4c 26 93 00 00 6f 9e
Apr 16 17:37:11 pat pluto[28951]: | IV:
Apr 16 17:37:11 pat pluto[28951]: | b1 a1 3f 18 b0 1a a1 f4 a1 25 09
f4 b8 c8 76 27
Apr 16 17:37:11 pat pluto[28951]: | 96 e9 55 37
Apr 16 17:37:11 pat pluto[28951]: | unpadded size is: 56
Apr 16 17:37:11 pat pluto[28951]: | emitting 8 zero bytes of encryption
padding into ISAKMP Message
Apr 16 17:37:11 pat pluto[28951]: | encrypting 64 using OAKLEY_AES_CBC
Apr 16 17:37:11 pat pluto[28951]: | next IV: 0c d3 d3 27 88 c0 d5 a2
dd 76 2a 55 df ac 4c b8
Apr 16 17:37:11 pat pluto[28951]: | emitting length of ISAKMP Message: 92
Apr 16 17:37:11 pat pluto[28951]: | sending 92 bytes for ISAKMP notify
through eth0:500 to 93.154.254.88:500 (using #1)
Apr 16 17:37:11 pat pluto[28951]: | fd 5a 54 0a f7 ba 37 6b 50 80 75
74 f1 4c 26 93
Apr 16 17:37:11 pat pluto[28951]: | 08 10 05 01 9a d6 f6 9d 00 00 00
5c c9 9b b6 1f
Apr 16 17:37:11 pat pluto[28951]: | 96 3b 84 87 f7 af 8b 75 0d 98 f2
9d db 51 b9 92
Apr 16 17:37:11 pat pluto[28951]: | d1 44 9e 5d ca b6 9b 82 61 d2 e8
da 07 2c 5e df
Apr 16 17:37:11 pat pluto[28951]: | 27 76 d7 9e de 89 ee a5 ef ac 38
f9 0c d3 d3 27
Apr 16 17:37:11 pat pluto[28951]: | 88 c0 d5 a2 dd 76 2a 55 df ac 4c b8
Apr 16 17:37:11 pat pluto[28951]: | next event EVENT_PENDING_DDNS in 5
seconds
Apr 16 17:37:16 pat pluto[28951]: |
Apr 16 17:37:16 pat pluto[28951]: | next event EVENT_PENDING_DDNS in 0
seconds
Apr 16 17:37:16 pat pluto[28951]: | *time to handle event
Apr 16 17:37:16 pat pluto[28951]: | handling event EVENT_PENDING_DDNS
Apr 16 17:37:16 pat pluto[28951]: | event after this is EVENT_DPD in 35
seconds
Apr 16 17:37:16 pat pluto[28951]: | inserting event EVENT_PENDING_DDNS,
timeout in 60 seconds
Apr 16 17:37:16 pat pluto[28951]: | event added after event EVENT_DPD for #2
Apr 16 17:37:16 pat pluto[28951]: | next event EVENT_DPD in 35 seconds
for #2
Apr 16 17:37:51 pat pluto[28951]: |
Apr 16 17:37:51 pat pluto[28951]: | next event EVENT_DPD in 0 seconds for #2
Apr 16 17:37:51 pat pluto[28951]: | *time to handle event
Apr 16 17:37:51 pat pluto[28951]: | handling event EVENT_DPD
Apr 16 17:37:51 pat pluto[28951]: | event after this is
EVENT_PENDING_DDNS in 25 seconds
Apr 16 17:37:51 pat pluto[28951]: | processing connection
L2TP-PSK-CLIENTS[1] 93.154.254.88
Apr 16 17:37:51 pat pluto[28951]: | DPD: processing for state #2
("L2TP-PSK-CLIENTS")
Apr 16 17:37:51 pat pluto[28951]: | get esp.a728160f@193.59.3.10
Apr 16 17:37:51 pat pluto[28951]: | inserting event EVENT_DPD, timeout
in 40 seconds for #2
Apr 16 17:37:51 pat pluto[28951]: | event added after event
EVENT_PENDING_PHASE2
Apr 16 17:37:51 pat pluto[28951]: | DPD: sending R_U_THERE 2674851840 to
93.154.254.88:500 (state #1)
Apr 16 17:37:51 pat pluto[28951]: | **emit ISAKMP Message:
Apr 16 17:37:51 pat pluto[28951]: | initiator cookie:
Apr 16 17:37:51 pat pluto[28951]: | fd 5a 54 0a f7 ba 37 6b
Apr 16 17:37:51 pat pluto[28951]: | responder cookie:
Apr 16 17:37:51 pat pluto[28951]: | 50 80 75 74 f1 4c 26 93
Apr 16 17:37:51 pat pluto[28951]: | next payload type: ISAKMP_NEXT_HASH
Apr 16 17:37:51 pat pluto[28951]: | ISAKMP version: ISAKMP Version
1.0 (rfc2407)
Apr 16 17:37:51 pat pluto[28951]: | exchange type: ISAKMP_XCHG_INFO
Apr 16 17:37:51 pat pluto[28951]: | flags: ISAKMP_FLAG_ENCRYPTION
Apr 16 17:37:51 pat pluto[28951]: | message ID: b4 85 22 05
Apr 16 17:37:51 pat pluto[28951]: | ***emit ISAKMP Hash Payload:
Apr 16 17:37:51 pat pluto[28951]: | next payload type: ISAKMP_NEXT_N
Apr 16 17:37:51 pat pluto[28951]: | emitting 20 zero bytes of HASH into
ISAKMP Hash Payload
Apr 16 17:37:51 pat pluto[28951]: | emitting length of ISAKMP Hash
Payload: 24
Apr 16 17:37:51 pat pluto[28951]: | ***emit ISAKMP Notification Payload:
Apr 16 17:37:51 pat pluto[28951]: | next payload type: ISAKMP_NEXT_NONE
Apr 16 17:37:51 pat pluto[28951]: | DOI: ISAKMP_DOI_IPSEC
Apr 16 17:37:51 pat pluto[28951]: | protocol ID: 1
Apr 16 17:37:51 pat pluto[28951]: | SPI size: 16
Apr 16 17:37:51 pat pluto[28951]: | Notify Message Type: R_U_THERE
Apr 16 17:37:51 pat pluto[28951]: | emitting 8 raw bytes of notify
icookie into ISAKMP Notification Payload
Apr 16 17:37:51 pat pluto[28951]: | notify icookie fd 5a 54 0a f7 ba 37 6b
Apr 16 17:37:51 pat pluto[28951]: | emitting 8 raw bytes of notify
rcookie into ISAKMP Notification Payload
Apr 16 17:37:51 pat pluto[28951]: | notify rcookie 50 80 75 74 f1 4c 26 93
Apr 16 17:37:51 pat pluto[28951]: | emitting 4 raw bytes of notify data
into ISAKMP Notification Payload
Apr 16 17:37:51 pat pluto[28951]: | notify data 00 00 6f 9f
Apr 16 17:37:51 pat pluto[28951]: | emitting length of ISAKMP
Notification Payload: 32
Apr 16 17:37:51 pat pluto[28951]: | HASH computed:
Apr 16 17:37:51 pat pluto[28951]: | a4 83 fb ca 90 24 5e a4 bd bb fc
22 37 0f 82 9a
Apr 16 17:37:51 pat pluto[28951]: | 10 68 9e 42
Apr 16 17:37:51 pat pluto[28951]: | last Phase 1 IV: ac 67 17 24 05 39
ab a2 4f 07 b4 13 2d 95 6f ad
Apr 16 17:37:51 pat pluto[28951]: | current Phase 1 IV: ac 67 17 24 05
39 ab a2 4f 07 b4 13 2d 95 6f ad
Apr 16 17:37:51 pat pluto[28951]: | computed Phase 2 IV:
Apr 16 17:37:51 pat pluto[28951]: | 9b dc 56 d8 da 1b 3c d6 cc c8 96
51 c9 74 0c b7
Apr 16 17:37:51 pat pluto[28951]: | ed 93 9f f4
Apr 16 17:37:51 pat pluto[28951]: | encrypting:
Apr 16 17:37:51 pat pluto[28951]: | 0b 00 00 18 a4 83 fb ca 90 24 5e
a4 bd bb fc 22
Apr 16 17:37:51 pat pluto[28951]: | 37 0f 82 9a 10 68 9e 42 00 00 00
20 00 00 00 01
Apr 16 17:37:51 pat pluto[28951]: | 01 10 8d 28 fd 5a 54 0a f7 ba 37
6b 50 80 75 74
Apr 16 17:37:51 pat pluto[28951]: | f1 4c 26 93 00 00 6f 9f
Apr 16 17:37:51 pat pluto[28951]: | IV:
Apr 16 17:37:51 pat pluto[28951]: | 9b dc 56 d8 da 1b 3c d6 cc c8 96
51 c9 74 0c b7
Apr 16 17:37:51 pat pluto[28951]: | ed 93 9f f4
Apr 16 17:37:51 pat pluto[28951]: | unpadded size is: 56
Apr 16 17:37:51 pat pluto[28951]: | emitting 8 zero bytes of encryption
padding into ISAKMP Message
Apr 16 17:37:51 pat pluto[28951]: | encrypting 64 using OAKLEY_AES_CBC
Apr 16 17:37:51 pat pluto[28951]: | next IV: af 03 46 34 50 61 b6 bf
e5 7e 4c bb ce 64 6f 49
Apr 16 17:37:51 pat pluto[28951]: | emitting length of ISAKMP Message: 92
Apr 16 17:37:51 pat pluto[28951]: | sending 92 bytes for ISAKMP notify
through eth0:500 to 93.154.254.88:500 (using #1)
Apr 16 17:37:51 pat pluto[28951]: | fd 5a 54 0a f7 ba 37 6b 50 80 75
74 f1 4c 26 93
Apr 16 17:37:51 pat pluto[28951]: | 08 10 05 01 b4 85 22 05 00 00 00
5c e7 49 d5 42
Apr 16 17:37:51 pat pluto[28951]: | 12 7c 58 d4 68 e7 c7 f7 90 ab 17
4d 58 df 1f 8a
Apr 16 17:37:51 pat pluto[28951]: | fe 2c 5a 28 7d ca c2 fc 74 cc 62
12 93 97 b8 2a
Apr 16 17:37:51 pat pluto[28951]: | 6a bb dc 23 15 8f ef 41 aa 52 7e
52 af 03 46 34
Apr 16 17:37:51 pat pluto[28951]: | 50 61 b6 bf e5 7e 4c bb ce 64 6f 49
Apr 16 17:37:51 pat pluto[28951]: | next event EVENT_PENDING_DDNS in 25
seconds
Apr 16 17:38:16 pat pluto[28951]: |
Apr 16 17:38:16 pat pluto[28951]: | next event EVENT_PENDING_DDNS in 0
seconds
Apr 16 17:38:16 pat pluto[28951]: | *time to handle event
Apr 16 17:38:16 pat pluto[28951]: | handling event EVENT_PENDING_DDNS
Apr 16 17:38:16 pat pluto[28951]: | event after this is
EVENT_PENDING_PHASE2 in 0 seconds
Apr 16 17:38:16 pat pluto[28951]: | inserting event EVENT_PENDING_DDNS,
timeout in 60 seconds
Apr 16 17:38:16 pat pluto[28951]: | event added after event EVENT_DPD for #2
Apr 16 17:38:16 pat pluto[28951]: | handling event EVENT_PENDING_PHASE2
Apr 16 17:38:16 pat pluto[28951]: | event after this is EVENT_DPD in 15
seconds
Apr 16 17:38:16 pat pluto[28951]: | inserting event
EVENT_PENDING_PHASE2, timeout in 120 seconds
Apr 16 17:38:16 pat pluto[28951]: | event added after event
EVENT_DPD_TIMEOUT for #1
Apr 16 17:38:16 pat pluto[28951]: | pending review: connection
"L2TP-PSK-CLIENTS" was not up, skipped
Apr 16 17:38:16 pat pluto[28951]: | pending review: connection
"L2TP-PSK-CLIENTS" was not up, skipped
Apr 16 17:38:16 pat pluto[28951]: | next event EVENT_DPD in 15 seconds
for #2
Apr 16 17:38:31 pat pluto[28951]: |
Apr 16 17:38:31 pat pluto[28951]: | next event EVENT_DPD in 0 seconds for #2
Apr 16 17:38:31 pat pluto[28951]: | *time to handle event
Apr 16 17:38:31 pat pluto[28951]: | handling event EVENT_DPD
Apr 16 17:38:31 pat pluto[28951]: | event after this is
EVENT_PENDING_DDNS in 45 seconds
Apr 16 17:38:31 pat pluto[28951]: | processing connection
L2TP-PSK-CLIENTS[1] 93.154.254.88
Apr 16 17:38:31 pat pluto[28951]: | DPD: processing for state #2
("L2TP-PSK-CLIENTS")
Apr 16 17:38:31 pat pluto[28951]: | get esp.a728160f@193.59.3.10
Apr 16 17:38:31 pat pluto[28951]: | inserting event EVENT_DPD, timeout
in 40 seconds for #2
Apr 16 17:38:31 pat pluto[28951]: | event added at head of queue
Apr 16 17:38:31 pat pluto[28951]: | DPD: sending R_U_THERE 2691629056 to
93.154.254.88:500 (state #1)
Apr 16 17:38:31 pat pluto[28951]: | **emit ISAKMP Message:
Apr 16 17:38:31 pat pluto[28951]: | initiator cookie:
Apr 16 17:38:31 pat pluto[28951]: | fd 5a 54 0a f7 ba 37 6b
Apr 16 17:38:31 pat pluto[28951]: | responder cookie:
Apr 16 17:38:31 pat pluto[28951]: | 50 80 75 74 f1 4c 26 93
Apr 16 17:38:31 pat pluto[28951]: | next payload type: ISAKMP_NEXT_HASH
Apr 16 17:38:31 pat pluto[28951]: | ISAKMP version: ISAKMP Version
1.0 (rfc2407)
Apr 16 17:38:31 pat pluto[28951]: | exchange type: ISAKMP_XCHG_INFO
Apr 16 17:38:31 pat pluto[28951]: | flags: ISAKMP_FLAG_ENCRYPTION
Apr 16 17:38:31 pat pluto[28951]: | message ID: 6c 10 e8 0f
Apr 16 17:38:31 pat pluto[28951]: | ***emit ISAKMP Hash Payload:
Apr 16 17:38:31 pat pluto[28951]: | next payload type: ISAKMP_NEXT_N
Apr 16 17:38:31 pat pluto[28951]: | emitting 20 zero bytes of HASH into
ISAKMP Hash Payload
Apr 16 17:38:31 pat pluto[28951]: | emitting length of ISAKMP Hash
Payload: 24
Apr 16 17:38:31 pat pluto[28951]: | ***emit ISAKMP Notification Payload:
Apr 16 17:38:31 pat pluto[28951]: | next payload type: ISAKMP_NEXT_NONE
Apr 16 17:38:31 pat pluto[28951]: | DOI: ISAKMP_DOI_IPSEC
Apr 16 17:38:31 pat pluto[28951]: | protocol ID: 1
Apr 16 17:38:31 pat pluto[28951]: | SPI size: 16
Apr 16 17:38:31 pat pluto[28951]: | Notify Message Type: R_U_THERE
Apr 16 17:38:31 pat pluto[28951]: | emitting 8 raw bytes of notify
icookie into ISAKMP Notification Payload
Apr 16 17:38:31 pat pluto[28951]: | notify icookie fd 5a 54 0a f7 ba 37 6b
Apr 16 17:38:31 pat pluto[28951]: | emitting 8 raw bytes of notify
rcookie into ISAKMP Notification Payload
Apr 16 17:38:31 pat pluto[28951]: | notify rcookie 50 80 75 74 f1 4c 26 93
Apr 16 17:38:31 pat pluto[28951]: | emitting 4 raw bytes of notify data
into ISAKMP Notification Payload
Apr 16 17:38:31 pat pluto[28951]: | notify data 00 00 6f a0
Apr 16 17:38:31 pat pluto[28951]: | emitting length of ISAKMP
Notification Payload: 32
Apr 16 17:38:31 pat pluto[28951]: | HASH computed:
Apr 16 17:38:31 pat pluto[28951]: | 22 ed 41 5e 0f 67 7c 83 08 58 99
41 13 6b ca 01
Apr 16 17:38:31 pat pluto[28951]: | 5f 19 a5 02
Apr 16 17:38:31 pat pluto[28951]: | last Phase 1 IV: ac 67 17 24 05 39
ab a2 4f 07 b4 13 2d 95 6f ad
Apr 16 17:38:31 pat pluto[28951]: | current Phase 1 IV: ac 67 17 24 05
39 ab a2 4f 07 b4 13 2d 95 6f ad
Apr 16 17:38:31 pat pluto[28951]: | computed Phase 2 IV:
Apr 16 17:38:31 pat pluto[28951]: | fc a7 59 7a 15 de 1d 27 a1 5d d7
0a 15 4c cd 4e
Apr 16 17:38:31 pat pluto[28951]: | 3a 70 8a 5d
Apr 16 17:38:31 pat pluto[28951]: | encrypting:
Apr 16 17:38:31 pat pluto[28951]: | 0b 00 00 18 22 ed 41 5e 0f 67 7c
83 08 58 99 41
Apr 16 17:38:31 pat pluto[28951]: | 13 6b ca 01 5f 19 a5 02 00 00 00
20 00 00 00 01
Apr 16 17:38:31 pat pluto[28951]: | 01 10 8d 28 fd 5a 54 0a f7 ba 37
6b 50 80 75 74
Apr 16 17:38:31 pat pluto[28951]: | f1 4c 26 93 00 00 6f a0
Apr 16 17:38:31 pat pluto[28951]: | IV:
Apr 16 17:38:31 pat pluto[28951]: | fc a7 59 7a 15 de 1d 27 a1 5d d7
0a 15 4c cd 4e
Apr 16 17:38:31 pat pluto[28951]: | 3a 70 8a 5d
Apr 16 17:38:31 pat pluto[28951]: | unpadded size is: 56
Apr 16 17:38:31 pat pluto[28951]: | emitting 8 zero bytes of encryption
padding into ISAKMP Message
Apr 16 17:38:31 pat pluto[28951]: | encrypting 64 using OAKLEY_AES_CBC
Apr 16 17:38:31 pat pluto[28951]: | next IV: 29 d3 ed 9e 9d 59 f5 ea
09 fe 91 a3 d1 f9 7f de
Apr 16 17:38:31 pat pluto[28951]: | emitting length of ISAKMP Message: 92
Apr 16 17:38:31 pat pluto[28951]: | sending 92 bytes for ISAKMP notify
through eth0:500 to 93.154.254.88:500 (using #1)
Apr 16 17:38:31 pat pluto[28951]: | fd 5a 54 0a f7 ba 37 6b 50 80 75
74 f1 4c 26 93
Apr 16 17:38:31 pat pluto[28951]: | 08 10 05 01 6c 10 e8 0f 00 00 00
5c cd f4 6e 93
Apr 16 17:38:31 pat pluto[28951]: | 3b cd bc 40 aa 3e bf d0 02 13 19
dd ab 56 a0 92
Apr 16 17:38:31 pat pluto[28951]: | 4a c3 39 6d 1c ff b1 75 ba a3 7d
c1 b3 c9 d3 29
Apr 16 17:38:31 pat pluto[28951]: | d8 1a 25 65 9c 05 d6 1b 3b 12 24
18 29 d3 ed 9e
Apr 16 17:38:31 pat pluto[28951]: | 9d 59 f5 ea 09 fe 91 a3 d1 f9 7f de
Apr 16 17:38:31 pat pluto[28951]: | next event EVENT_DPD in 40 seconds
for #2
Apr 16 17:39:11 pat pluto[28951]: |
Apr 16 17:39:11 pat pluto[28951]: | next event EVENT_DPD in 0 seconds for #2
Apr 16 17:39:11 pat pluto[28951]: | *time to handle event
Apr 16 17:39:11 pat pluto[28951]: | handling event EVENT_DPD
Apr 16 17:39:11 pat pluto[28951]: | event after this is
EVENT_PENDING_DDNS in 5 seconds
Apr 16 17:39:11 pat pluto[28951]: | processing connection
L2TP-PSK-CLIENTS[1] 93.154.254.88
Apr 16 17:39:11 pat pluto[28951]: | DPD: processing for state #2
("L2TP-PSK-CLIENTS")
Apr 16 17:39:11 pat pluto[28951]: | get esp.a728160f@193.59.3.10
Apr 16 17:39:11 pat pluto[28951]: | inserting event EVENT_DPD, timeout
in 40 seconds for #2
Apr 16 17:39:11 pat pluto[28951]: | event added after event
EVENT_DPD_TIMEOUT for #1
Apr 16 17:39:11 pat pluto[28951]: | DPD: sending R_U_THERE 2708406272 to
93.154.254.88:500 (state #1)
Apr 16 17:39:11 pat pluto[28951]: | **emit ISAKMP Message:
Apr 16 17:39:11 pat pluto[28951]: | initiator cookie:
Apr 16 17:39:11 pat pluto[28951]: | fd 5a 54 0a f7 ba 37 6b
Apr 16 17:39:11 pat pluto[28951]: | responder cookie:
Apr 16 17:39:11 pat pluto[28951]: | 50 80 75 74 f1 4c 26 93
Apr 16 17:39:11 pat pluto[28951]: | next payload type: ISAKMP_NEXT_HASH
Apr 16 17:39:11 pat pluto[28951]: | ISAKMP version: ISAKMP Version
1.0 (rfc2407)
Apr 16 17:39:11 pat pluto[28951]: | exchange type: ISAKMP_XCHG_INFO
Apr 16 17:39:11 pat pluto[28951]: | flags: ISAKMP_FLAG_ENCRYPTION
Apr 16 17:39:11 pat pluto[28951]: | message ID: 14 ff a3 8b
Apr 16 17:39:11 pat pluto[28951]: | ***emit ISAKMP Hash Payload:
Apr 16 17:39:11 pat pluto[28951]: | next payload type: ISAKMP_NEXT_N
Apr 16 17:39:11 pat pluto[28951]: | emitting 20 zero bytes of HASH into
ISAKMP Hash Payload
Apr 16 17:39:11 pat pluto[28951]: | emitting length of ISAKMP Hash
Payload: 24
Apr 16 17:39:11 pat pluto[28951]: | ***emit ISAKMP Notification Payload:
Apr 16 17:39:11 pat pluto[28951]: | next payload type: ISAKMP_NEXT_NONE
Apr 16 17:39:11 pat pluto[28951]: | DOI: ISAKMP_DOI_IPSEC
Apr 16 17:39:11 pat pluto[28951]: | protocol ID: 1
Apr 16 17:39:11 pat pluto[28951]: | SPI size: 16
Apr 16 17:39:11 pat pluto[28951]: | Notify Message Type: R_U_THERE
Apr 16 17:39:11 pat pluto[28951]: | emitting 8 raw bytes of notify
icookie into ISAKMP Notification Payload
Apr 16 17:39:11 pat pluto[28951]: | notify icookie fd 5a 54 0a f7 ba 37 6b
Apr 16 17:39:11 pat pluto[28951]: | emitting 8 raw bytes of notify
rcookie into ISAKMP Notification Payload
Apr 16 17:39:11 pat pluto[28951]: | notify rcookie 50 80 75 74 f1 4c 26 93
Apr 16 17:39:11 pat pluto[28951]: | emitting 4 raw bytes of notify data
into ISAKMP Notification Payload
Apr 16 17:39:11 pat pluto[28951]: | notify data 00 00 6f a1
Apr 16 17:39:11 pat pluto[28951]: | emitting length of ISAKMP
Notification Payload: 32
Apr 16 17:39:11 pat pluto[28951]: | HASH computed:
Apr 16 17:39:11 pat pluto[28951]: | 35 9c f3 d1 fc 7a d5 18 5b 42 2b
84 01 24 e4 b0
Apr 16 17:39:11 pat pluto[28951]: | e1 34 d4 50
Apr 16 17:39:11 pat pluto[28951]: | last Phase 1 IV: ac 67 17 24 05 39
ab a2 4f 07 b4 13 2d 95 6f ad
Apr 16 17:39:11 pat pluto[28951]: | current Phase 1 IV: ac 67 17 24 05
39 ab a2 4f 07 b4 13 2d 95 6f ad
Apr 16 17:39:11 pat pluto[28951]: | computed Phase 2 IV:
Apr 16 17:39:11 pat pluto[28951]: | 45 8d 0b c6 cd 90 cb 02 1b 7b 68
98 7c 76 2a 96
Apr 16 17:39:11 pat pluto[28951]: | 74 18 1a a0
Apr 16 17:39:11 pat pluto[28951]: | encrypting:
Apr 16 17:39:11 pat pluto[28951]: | 0b 00 00 18 35 9c f3 d1 fc 7a d5
18 5b 42 2b 84
Apr 16 17:39:11 pat pluto[28951]: | 01 24 e4 b0 e1 34 d4 50 00 00 00
20 00 00 00 01
Apr 16 17:39:11 pat pluto[28951]: | 01 10 8d 28 fd 5a 54 0a f7 ba 37
6b 50 80 75 74
Apr 16 17:39:11 pat pluto[28951]: | f1 4c 26 93 00 00 6f a1
Apr 16 17:39:11 pat pluto[28951]: | IV:
Apr 16 17:39:11 pat pluto[28951]: | 45 8d 0b c6 cd 90 cb 02 1b 7b 68
98 7c 76 2a 96
Apr 16 17:39:11 pat pluto[28951]: | 74 18 1a a0
Apr 16 17:39:11 pat pluto[28951]: | unpadded size is: 56
Apr 16 17:39:11 pat pluto[28951]: | emitting 8 zero bytes of encryption
padding into ISAKMP Message
Apr 16 17:39:11 pat pluto[28951]: | encrypting 64 using OAKLEY_AES_CBC
Apr 16 17:39:11 pat pluto[28951]: | next IV: 8d 33 56 b1 b1 64 9c 56
b9 97 62 cc 77 0a cf c6
Apr 16 17:39:11 pat pluto[28951]: | emitting length of ISAKMP Message: 92
Apr 16 17:39:11 pat pluto[28951]: | sending 92 bytes for ISAKMP notify
through eth0:500 to 93.154.254.88:500 (using #1)
Apr 16 17:39:11 pat pluto[28951]: | fd 5a 54 0a f7 ba 37 6b 50 80 75
74 f1 4c 26 93
Apr 16 17:39:11 pat pluto[28951]: | 08 10 05 01 14 ff a3 8b 00 00 00
5c 82 72 26 bd
Apr 16 17:39:11 pat pluto[28951]: | 57 77 c5 c5 af 83 ee 9a d4 05 6f
98 83 34 dd d4
Apr 16 17:39:11 pat pluto[28951]: | 71 1e b5 97 dc b5 c0 3d 6f 7f 0b
53 6c 93 86 21
Apr 16 17:39:11 pat pluto[28951]: | 75 f0 1d ac 7e 05 12 6d 7c 5e cb
7d 8d 33 56 b1
Apr 16 17:39:11 pat pluto[28951]: | b1 64 9c 56 b9 97 62 cc 77 0a cf c6
Apr 16 17:39:11 pat pluto[28951]: | next event EVENT_PENDING_DDNS in 5
seconds
Apr 16 17:39:16 pat pluto[28951]: |
Apr 16 17:39:16 pat pluto[28951]: | next event EVENT_PENDING_DDNS in 0
seconds
Apr 16 17:39:16 pat pluto[28951]: | *time to handle event
Apr 16 17:39:16 pat pluto[28951]: | handling event EVENT_PENDING_DDNS
Apr 16 17:39:16 pat pluto[28951]: | event after this is
EVENT_DPD_TIMEOUT in 5 seconds
Apr 16 17:39:16 pat pluto[28951]: | inserting event EVENT_PENDING_DDNS,
timeout in 60 seconds
Apr 16 17:39:16 pat pluto[28951]: | event added after event EVENT_DPD for #2
Apr 16 17:39:16 pat pluto[28951]: | next event EVENT_DPD_TIMEOUT in 5
seconds for #1
Apr 16 17:39:21 pat pluto[28951]: |
Apr 16 17:39:21 pat pluto[28951]: | next event EVENT_DPD_TIMEOUT in 0
seconds for #1
Apr 16 17:39:21 pat pluto[28951]: | *time to handle event
Apr 16 17:39:21 pat pluto[28951]: | handling event EVENT_DPD_TIMEOUT
Apr 16 17:39:21 pat pluto[28951]: | event after this is EVENT_DPD in 30
seconds
Apr 16 17:39:21 pat pluto[28951]: | processing connection
L2TP-PSK-CLIENTS[1] 93.154.254.88
Apr 16 17:39:21 pat pluto[28951]: | processing connection
L2TP-PSK-CLIENTS[1] 93.154.254.88
Apr 16 17:39:21 pat pluto[28951]: "L2TP-PSK-CLIENTS"[1] 93.154.254.88
#1: DPD: No response from peer - declaring peer dead
Apr 16 17:39:21 pat pluto[28951]: "L2TP-PSK-CLIENTS"[1] 93.154.254.88
#1: DPD: Clearing Connection
Apr 16 17:39:21 pat pluto[28951]: | processing connection L2TP-PSK-CLIENTS
Apr 16 17:39:21 pat pluto[28951]: "L2TP-PSK-CLIENTS" #2: deleting state
(STATE_QUICK_R2)
Apr 16 17:39:21 pat pluto[28951]: | deleting event for #2
Apr 16 17:39:21 pat pluto[28951]: | deleting state #2
Apr 16 17:39:21 pat pluto[28951]: | state: 2 requesting event EVENT_DPD
to be deleted by
/build/buildd-openswan_2.6.28+dfsg-5+squeeze1-i386-OOSWut/openswan-2.6.28+dfsg/programs/pluto/state.c:366
Apr 16 17:39:21 pat pluto[28951]: | **emit ISAKMP Message:
Apr 16 17:39:21 pat pluto[28951]: | initiator cookie:
Apr 16 17:39:21 pat pluto[28951]: | fd 5a 54 0a f7 ba 37 6b
Apr 16 17:39:21 pat pluto[28951]: | responder cookie:
Apr 16 17:39:21 pat pluto[28951]: | 50 80 75 74 f1 4c 26 93
Apr 16 17:39:21 pat pluto[28951]: | next payload type: ISAKMP_NEXT_HASH
Apr 16 17:39:21 pat pluto[28951]: | ISAKMP version: ISAKMP Version
1.0 (rfc2407)
Apr 16 17:39:21 pat pluto[28951]: | exchange type: ISAKMP_XCHG_INFO
Apr 16 17:39:21 pat pluto[28951]: | flags: ISAKMP_FLAG_ENCRYPTION
Apr 16 17:39:21 pat pluto[28951]: | message ID: 11 6b 06 e4
Apr 16 17:39:21 pat pluto[28951]: | ***emit ISAKMP Hash Payload:
Apr 16 17:39:21 pat pluto[28951]: | next payload type: ISAKMP_NEXT_D
Apr 16 17:39:21 pat pluto[28951]: | emitting 20 zero bytes of HASH(1)
into ISAKMP Hash Payload
Apr 16 17:39:21 pat pluto[28951]: | emitting length of ISAKMP Hash
Payload: 24
Apr 16 17:39:21 pat pluto[28951]: | ***emit ISAKMP Delete Payload:
Apr 16 17:39:21 pat pluto[28951]: | next payload type: ISAKMP_NEXT_NONE
Apr 16 17:39:21 pat pluto[28951]: | DOI: ISAKMP_DOI_IPSEC
Apr 16 17:39:21 pat pluto[28951]: | protocol ID: 3
Apr 16 17:39:21 pat pluto[28951]: | SPI size: 4
Apr 16 17:39:21 pat pluto[28951]: | number of SPIs: 1
Apr 16 17:39:21 pat pluto[28951]: | emitting 4 raw bytes of delete
payload into ISAKMP Delete Payload
Apr 16 17:39:21 pat pluto[28951]: | delete payload a7 28 16 0f
Apr 16 17:39:21 pat pluto[28951]: | emitting length of ISAKMP Delete
Payload: 16
Apr 16 17:39:21 pat pluto[28951]: | HASH(1) computed:
Apr 16 17:39:21 pat pluto[28951]: | f7 ab fd a0 6f c4 9b c0 9e fc f7
a2 5d 02 d7 cf
Apr 16 17:39:21 pat pluto[28951]: | 04 9c 10 e6
Apr 16 17:39:21 pat pluto[28951]: | last Phase 1 IV: ac 67 17 24 05 39
ab a2 4f 07 b4 13 2d 95 6f ad
Apr 16 17:39:21 pat pluto[28951]: | current Phase 1 IV: ac 67 17 24 05
39 ab a2 4f 07 b4 13 2d 95 6f ad
Apr 16 17:39:21 pat pluto[28951]: | computed Phase 2 IV:
Apr 16 17:39:21 pat pluto[28951]: | b4 73 f7 2b 24 42 57 54 e1 30 bb
2d 8e 86 5e e5
Apr 16 17:39:21 pat pluto[28951]: | 32 ee 49 a7
Apr 16 17:39:21 pat pluto[28951]: | encrypting:
Apr 16 17:39:21 pat pluto[28951]: | 0c 00 00 18 f7 ab fd a0 6f c4 9b
c0 9e fc f7 a2
Apr 16 17:39:21 pat pluto[28951]: | 5d 02 d7 cf 04 9c 10 e6 00 00 00
10 00 00 00 01
Apr 16 17:39:21 pat pluto[28951]: | 03 04 00 01 a7 28 16 0f
Apr 16 17:39:21 pat pluto[28951]: | IV:
Apr 16 17:39:21 pat pluto[28951]: | b4 73 f7 2b 24 42 57 54 e1 30 bb
2d 8e 86 5e e5
Apr 16 17:39:21 pat pluto[28951]: | 32 ee 49 a7
Apr 16 17:39:21 pat pluto[28951]: | unpadded size is: 40
Apr 16 17:39:21 pat pluto[28951]: | emitting 8 zero bytes of encryption
padding into ISAKMP Message
Apr 16 17:39:21 pat pluto[28951]: | encrypting 48 using OAKLEY_AES_CBC
Apr 16 17:39:21 pat pluto[28951]: | next IV: 77 5a 3f 82 9b c8 66 2a
00 91 06 78 79 f5 3c f8
Apr 16 17:39:21 pat pluto[28951]: | emitting length of ISAKMP Message: 76
Apr 16 17:39:21 pat pluto[28951]: | sending 76 bytes for delete notify
through eth0:500 to 93.154.254.88:500 (using #1)
Apr 16 17:39:21 pat pluto[28951]: | fd 5a 54 0a f7 ba 37 6b 50 80 75
74 f1 4c 26 93
Apr 16 17:39:21 pat pluto[28951]: | 08 10 05 01 11 6b 06 e4 00 00 00
4c 82 db ce 24
Apr 16 17:39:21 pat pluto[28951]: | 5d f4 db c0 a1 79 6f 4a 69 9c 6c
5b ad eb 08 3d
Apr 16 17:39:21 pat pluto[28951]: | 9e eb 54 59 da d7 d1 a2 ee b1 67
68 77 5a 3f 82
Apr 16 17:39:21 pat pluto[28951]: | 9b c8 66 2a 00 91 06 78 79 f5 3c f8
Apr 16 17:39:21 pat pluto[28951]: | deleting event for #2
Apr 16 17:39:21 pat pluto[28951]: | no suspended cryptographic state for 2
Apr 16 17:39:21 pat pluto[28951]: | ICOOKIE: fd 5a 54 0a f7 ba 37 6b
Apr 16 17:39:21 pat pluto[28951]: | RCOOKIE: 50 80 75 74 f1 4c 26 93
Apr 16 17:39:21 pat pluto[28951]: | state hash entry 25
Apr 16 17:39:21 pat pluto[28951]: | command executing down-host
Apr 16 17:39:21 pat pluto[28951]: | executing down-host: 2>&1
PLUTO_VERB='down-host' PLUTO_VERSION='2.0'
PLUTO_CONNECTION='L2TP-PSK-CLIENTS' PLUTO_INTERFACE='eth0'
PLUTO_NEXT_HOP='93.154.254.88' PLUTO_ME='193.59.3.10'
PLUTO_MY_ID='193.59.3.10' PLUTO_MY_CLIENT='193.59.3.10/32'
PLUTO_MY_CLIENT_NET='193.59.3.10' PLUTO_MY_CLIENT_MASK='255.255.255.255'
PLUTO_MY_PORT='1701' PLUTO_MY_PROTOCOL='17' PLUTO_PEER='93.154.254.88'
PLUTO_PEER_ID='93.154.254.88' PLUTO_PEER_CLIENT='93.154.254.88/32'
PLUTO_PEER_CLIENT_NET='93.154.254.88'
PLUTO_PEER_CLIENT_MASK='255.255.255.255' PLUTO_PEER_PORT='0'
PLUTO_PEER_PROTOCOL='17' PLUTO_PEER_CA='' PLUTO_STACK='netkey'
PLUTO_CONN_POLICY='PSK+ENCRYPT+DONTREKEY+IKEv2ALLOW'
PLUTO_XAUTH_USERNAME='' PLUTO_CISCO_DNS_INFO=''
PLUTO_CISCO_DOMAIN_INFO='' PLUTO_PEER_BANNER='' ipsec _updown
Apr 16 17:39:21 pat pluto[28951]: | popen(): cmd is 761 chars long
Apr 16 17:39:21 pat pluto[28951]: | cmd( 0):2>&1
PLUTO_VERB='down-host' PLUTO_VERSION='2.0' PLUTO_CONNECTION='L2TP-PSK-CLIEN:
Apr 16 17:39:21 pat pluto[28951]: | cmd( 80):TS' PLUTO_INTERFACE='eth0'
PLUTO_NEXT_HOP='93.154.254.88' PLUTO_ME='193.59.3.10:
Apr 16 17:39:21 pat pluto[28951]: | cmd( 160):'
PLUTO_MY_ID='193.59.3.10' PLUTO_MY_CLIENT='193.59.3.10/32'
PLUTO_MY_CLIENT_N:
Apr 16 17:39:21 pat pluto[28951]: | cmd( 240):ET='193.59.3.10'
PLUTO_MY_CLIENT_MASK='255.255.255.255' PLUTO_MY_PORT='1701' PL:
Apr 16 17:39:21 pat pluto[28951]: | cmd( 320):UTO_MY_PROTOCOL='17'
PLUTO_PEER='93.154.254.88' PLUTO_PEER_ID='93.154.254.88' PL:
Apr 16 17:39:21 pat pluto[28951]: | cmd(
400):UTO_PEER_CLIENT='93.154.254.88/32'
PLUTO_PEER_CLIENT_NET='93.154.254.88' PLUTO_P:
Apr 16 17:39:21 pat pluto[28951]: | cmd(
480):EER_CLIENT_MASK='255.255.255.255' PLUTO_PEER_PORT='0'
PLUTO_PEER_PROTOCOL='17' P:
Apr 16 17:39:21 pat pluto[28951]: | cmd( 560):LUTO_PEER_CA=''
PLUTO_STACK='netkey' PLUTO_CONN_POLICY='PSK+ENCRYPT+DONTREKEY+I:
Apr 16 17:39:21 pat pluto[28951]: | cmd( 640):KEv2ALLOW'
PLUTO_XAUTH_USERNAME='' PLUTO_CISCO_DNS_INFO='' PLUTO_CISCO_DOMAIN_I:
Apr 16 17:39:21 pat pluto[28951]: | cmd( 720):NFO=''
PLUTO_PEER_BANNER='' ipsec _updown:
Apr 16 17:39:21 pat pluto[28951]: | request to replace with shunt a
prospective erouted policy with netkey kernel --- experimental
Apr 16 17:39:21 pat pluto[28951]: | delete esp.28b3177@93.154.254.88
Apr 16 17:39:21 pat pluto[28951]: | delete inbound eroute
93.154.254.88/32:0 --17-> 193.59.3.10/32:1701 =>
unk255.10000@193.59.3.10 (raw_eroute)
Apr 16 17:39:21 pat pluto[28951]: | raw_eroute result=1
Apr 16 17:39:21 pat pluto[28951]: | delete esp.a728160f@193.59.3.10
Apr 16 17:39:21 pat pluto[28951]: | processing connection L2TP-PSK-CLIENTS
Apr 16 17:39:21 pat pluto[28951]: "L2TP-PSK-CLIENTS" #1: deleting state
(STATE_MAIN_R3)
Apr 16 17:39:21 pat pluto[28951]: | deleting event for #1
Apr 16 17:39:21 pat pluto[28951]: | deleting state #1
Apr 16 17:39:21 pat pluto[28951]: | **emit ISAKMP Message:
Apr 16 17:39:21 pat pluto[28951]: | initiator cookie:
Apr 16 17:39:21 pat pluto[28951]: | fd 5a 54 0a f7 ba 37 6b
Apr 16 17:39:21 pat pluto[28951]: | responder cookie:
Apr 16 17:39:21 pat pluto[28951]: | 50 80 75 74 f1 4c 26 93
Apr 16 17:39:21 pat pluto[28951]: | next payload type: ISAKMP_NEXT_HASH
Apr 16 17:39:21 pat pluto[28951]: | ISAKMP version: ISAKMP Version
1.0 (rfc2407)
Apr 16 17:39:21 pat pluto[28951]: | exchange type: ISAKMP_XCHG_INFO
Apr 16 17:39:21 pat pluto[28951]: | flags: ISAKMP_FLAG_ENCRYPTION
Apr 16 17:39:21 pat pluto[28951]: | message ID: 1e b2 1c 77
Apr 16 17:39:21 pat pluto[28951]: | ***emit ISAKMP Hash Payload:
Apr 16 17:39:21 pat pluto[28951]: | next payload type: ISAKMP_NEXT_D
Apr 16 17:39:21 pat pluto[28951]: | emitting 20 zero bytes of HASH(1)
into ISAKMP Hash Payload
Apr 16 17:39:21 pat pluto[28951]: | emitting length of ISAKMP Hash
Payload: 24
Apr 16 17:39:21 pat pluto[28951]: | ***emit ISAKMP Delete Payload:
Apr 16 17:39:21 pat pluto[28951]: | next payload type: ISAKMP_NEXT_NONE
Apr 16 17:39:21 pat pluto[28951]: | DOI: ISAKMP_DOI_IPSEC
Apr 16 17:39:21 pat pluto[28951]: | protocol ID: 1
Apr 16 17:39:21 pat pluto[28951]: | SPI size: 16
Apr 16 17:39:21 pat pluto[28951]: | number of SPIs: 1
Apr 16 17:39:21 pat pluto[28951]: | emitting 16 raw bytes of delete
payload into ISAKMP Delete Payload
Apr 16 17:39:21 pat pluto[28951]: | delete payload fd 5a 54 0a f7 ba
37 6b 50 80 75 74 f1 4c 26 93
Apr 16 17:39:21 pat pluto[28951]: | emitting length of ISAKMP Delete
Payload: 28
Apr 16 17:39:21 pat pluto[28951]: | HASH(1) computed:
Apr 16 17:39:21 pat pluto[28951]: | c7 75 fa 08 0a 12 c4 4e f0 c7 82
aa 55 53 4f 1b
Apr 16 17:39:21 pat pluto[28951]: | 9b 6b 1c aa
Apr 16 17:39:21 pat pluto[28951]: | last Phase 1 IV: ac 67 17 24 05 39
ab a2 4f 07 b4 13 2d 95 6f ad
Apr 16 17:39:21 pat pluto[28951]: | current Phase 1 IV: ac 67 17 24 05
39 ab a2 4f 07 b4 13 2d 95 6f ad
Apr 16 17:39:21 pat pluto[28951]: | computed Phase 2 IV:
Apr 16 17:39:21 pat pluto[28951]: | db c3 58 76 e5 40 43 dc 20 01 3b
c8 8c 12 93 1c
Apr 16 17:39:21 pat pluto[28951]: | 8c 98 aa c7
Apr 16 17:39:21 pat pluto[28951]: | encrypting:
Apr 16 17:39:21 pat pluto[28951]: | 0c 00 00 18 c7 75 fa 08 0a 12 c4
4e f0 c7 82 aa
Apr 16 17:39:21 pat pluto[28951]: | 55 53 4f 1b 9b 6b 1c aa 00 00 00
1c 00 00 00 01
Apr 16 17:39:21 pat pluto[28951]: | 01 10 00 01 fd 5a 54 0a f7 ba 37
6b 50 80 75 74
Apr 16 17:39:21 pat pluto[28951]: | f1 4c 26 93
Apr 16 17:39:21 pat pluto[28951]: | IV:
Apr 16 17:39:21 pat pluto[28951]: | db c3 58 76 e5 40 43 dc 20 01 3b
c8 8c 12 93 1c
Apr 16 17:39:21 pat pluto[28951]: | 8c 98 aa c7
Apr 16 17:39:21 pat pluto[28951]: | unpadded size is: 52
Apr 16 17:39:21 pat pluto[28951]: | emitting 12 zero bytes of encryption
padding into ISAKMP Message
Apr 16 17:39:21 pat pluto[28951]: | encrypting 64 using OAKLEY_AES_CBC
Apr 16 17:39:21 pat pluto[28951]: | next IV: e8 3e ca fa d4 68 6c 23
62 d8 a5 97 5a a0 4f 6a
Apr 16 17:39:21 pat pluto[28951]: | emitting length of ISAKMP Message: 92
Apr 16 17:39:21 pat pluto[28951]: | sending 92 bytes for delete notify
through eth0:500 to 93.154.254.88:500 (using #1)
Apr 16 17:39:21 pat pluto[28951]: | fd 5a 54 0a f7 ba 37 6b 50 80 75
74 f1 4c 26 93
Apr 16 17:39:21 pat pluto[28951]: | 08 10 05 01 1e b2 1c 77 00 00 00
5c be fc 67 02
Apr 16 17:39:21 pat pluto[28951]: | be 8b 46 b7 cc ec 39 ce 7d 74 a1
69 17 ad 02 2c
Apr 16 17:39:21 pat pluto[28951]: | 06 ab ad e2 ca b1 f8 36 b4 b1 ff
3e 34 28 91 db
Apr 16 17:39:21 pat pluto[28951]: | 35 57 57 6d 51 ef 85 57 f2 d3 53
00 e8 3e ca fa
Apr 16 17:39:21 pat pluto[28951]: | d4 68 6c 23 62 d8 a5 97 5a a0 4f 6a
Apr 16 17:39:21 pat pluto[28951]: | deleting event for #1
Apr 16 17:39:21 pat pluto[28951]: | no suspended cryptographic state for 1
Apr 16 17:39:21 pat pluto[28951]: | ICOOKIE: fd 5a 54 0a f7 ba 37 6b
Apr 16 17:39:21 pat pluto[28951]: | RCOOKIE: 50 80 75 74 f1 4c 26 93
Apr 16 17:39:21 pat pluto[28951]: | state hash entry 25
Apr 16 17:39:21 pat pluto[28951]: | processing connection
L2TP-PSK-CLIENTS[1] 93.154.254.88
Apr 16 17:39:21 pat pluto[28951]: "L2TP-PSK-CLIENTS"[1] 93.154.254.88:
deleting connection "L2TP-PSK-CLIENTS" instance with peer 93.154.254.88
{isakmp=#0/ipsec=#0}
Apr 16 17:39:21 pat pluto[28951]: | request to delete a unrouted policy
with netkey kernel --- experimental
Apr 16 17:39:21 pat pluto[28951]: | route owner of "L2TP-PSK-CLIENTS"
unrouted: NULL
Apr 16 17:39:21 pat pluto[28951]: | command executing unroute-host
Apr 16 17:39:21 pat pluto[28951]: | executing unroute-host: 2>&1
PLUTO_VERB='unroute-host' PLUTO_VERSION='2.0'
PLUTO_CONNECTION='L2TP-PSK-CLIENTS' PLUTO_INTERFACE='eth0'
PLUTO_NEXT_HOP='93.154.254.88' PLUTO_ME='193.59.3.10'
PLUTO_MY_ID='193.59.3.10' PLUTO_MY_CLIENT='193.59.3.10/32'
PLUTO_MY_CLIENT_NET='193.59.3.10' PLUTO_MY_CLIENT_MASK='255.255.255.255'
PLUTO_MY_PORT='1701' PLUTO_MY_PROTOCOL='17' PLUTO_PEER='93.154.254.88'
PLUTO_PEER_ID='93.154.254.88' PLUTO_PEER_CLIENT='93.154.254.88/32'
PLUTO_PEER_CLIENT_NET='93.154.254.88'
PLUTO_PEER_CLIENT_MASK='255.255.255.255' PLUTO_PEER_PORT='0'
PLUTO_PEER_PROTOCOL='17' PLUTO_PEER_CA='' PLUTO_STACK='netkey'
PLUTO_CONN_POLICY='PSK+ENCRYPT+DONTREKEY+IKEv2ALLOW'
PLUTO_CISCO_DNS_INFO='' PLUTO_CISCO_DOMAIN_INFO='' PLUTO_PEER_BANNER=''
ipsec _updown
Apr 16 17:39:21 pat pluto[28951]: | popen(): cmd is 741 chars long
Apr 16 17:39:21 pat pluto[28951]: | cmd( 0):2>&1
PLUTO_VERB='unroute-host' PLUTO_VERSION='2.0' PLUTO_CONNECTION='L2TP-PSK-CL:
Apr 16 17:39:21 pat pluto[28951]: | cmd( 80):IENTS'
PLUTO_INTERFACE='eth0' PLUTO_NEXT_HOP='93.154.254.88' PLUTO_ME='193.59.33:
Apr 16 17:39:21 pat pluto[28951]: | cmd( 160):.10'
PLUTO_MY_ID='193.59.3.10' PLUTO_MY_CLIENT='193.59.3.10/32' PLUTO_MY_CLIEN:
Apr 16 17:39:21 pat pluto[28951]: | cmd( 240):T_NET='193.59.3.10'
PLUTO_MY_CLIENT_MASK='255.255.255.255' PLUTO_MY_PORT='1701':
Apr 16 17:39:21 pat pluto[28951]: | cmd( 320): PLUTO_MY_PROTOCOL='17'
PLUTO_PEER='93.154.254.88' PLUTO_PEER_ID='93.154.254.88':
Apr 16 17:39:21 pat pluto[28951]: | cmd( 400):
PLUTO_PEER_CLIENT='93.154.254.88/32'
PLUTO_PEER_CLIENT_NET='93.154.254.88' PLUT:
Apr 16 17:39:21 pat pluto[28951]: | cmd(
480):O_PEER_CLIENT_MASK='255.255.255.255' PLUTO_PEER_PORT='0'
PLUTO_PEER_PROTOCOL='17:
Apr 16 17:39:21 pat pluto[28951]: | cmd( 560):' PLUTO_PEER_CA=''
PLUTO_STACK='netkey' PLUTO_CONN_POLICY='PSK+ENCRYPT+DONTREKE:
Apr 16 17:39:21 pat pluto[28951]: | cmd( 640):Y+IKEv2ALLOW'
PLUTO_CISCO_DNS_INFO='' PLUTO_CISCO_DOMAIN_INFO='' PLUTO_PEER_BA:
Apr 16 17:39:21 pat pluto[28951]: | cmd( 720):NNER='' ipsec _updown:
Apr 16 17:39:21 pat pluto[28951]: | DPD: unrouting connection
Apr 16 17:39:21 pat pluto[28951]: | next event EVENT_PENDING_DDNS in 55
seconds
Apr 16 17:40:16 pat pluto[28951]: |
Apr 16 17:40:16 pat pluto[28951]: | next event EVENT_PENDING_DDNS in 0
seconds
Apr 16 17:40:16 pat pluto[28951]: | *time to handle event
Apr 16 17:40:16 pat pluto[28951]: | handling event EVENT_PENDING_DDNS
Apr 16 17:40:16 pat pluto[28951]: | event after this is
EVENT_PENDING_PHASE2 in 0 seconds
Apr 16 17:40:16 pat pluto[28951]: | inserting event EVENT_PENDING_DDNS,
timeout in 60 seconds
Apr 16 17:40:16 pat pluto[28951]: | event added after event
EVENT_PENDING_PHASE2
Apr 16 17:40:16 pat pluto[28951]: | handling event EVENT_PENDING_PHASE2
Apr 16 17:40:16 pat pluto[28951]: | event after this is
EVENT_PENDING_DDNS in 60 seconds
Apr 16 17:40:16 pat pluto[28951]: | inserting event
EVENT_PENDING_PHASE2, timeout in 120 seconds
Apr 16 17:40:16 pat pluto[28951]: | event added after event
EVENT_PENDING_DDNS
Apr 16 17:40:16 pat pluto[28951]: | pending review: connection
"L2TP-PSK-CLIENTS" was not up, skipped
Apr 16 17:40:16 pat pluto[28951]: | next event EVENT_PENDING_DDNS in 60
seconds
#v-
a to mówi tcpdump na portach 500 oraz 4500 podczas połączenia
#v+
marcin@pat:~$ sudo tcpdump -pni eth0 port 500 or port 4500
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on eth0, link-type EN10MB (Ethernet), capture size 96 bytes
17:33:10.104620 IP 93.154.254.88.500 > 193.59.3.10.500: isakmp: phase 1
I ident
17:33:10.113897 IP 193.59.3.10.500 > 93.154.254.88.500: isakmp: phase 1
R ident
17:33:10.206368 IP 93.154.254.88.500 > 193.59.3.10.500: isakmp: phase 1
I ident
17:33:10.216540 IP 193.59.3.10.500 > 93.154.254.88.500: isakmp: phase 1
R ident
17:33:10.298617 IP 93.154.254.88.500 > 193.59.3.10.500: isakmp: phase 1
I ident[E]
17:33:10.301659 IP 193.59.3.10.500 > 93.154.254.88.500: isakmp: phase 1
R ident[E]
17:33:10.360907 IP 93.154.254.88.500 > 193.59.3.10.500: isakmp: phase
2/others I inf[E]
17:33:11.464697 IP 93.154.254.88.500 > 193.59.3.10.500: isakmp: phase
2/others I oakley-quick[E]
17:33:11.472043 IP 193.59.3.10.500 > 93.154.254.88.500: isakmp: phase
2/others R oakley-quick[E]
17:33:11.529739 IP 93.154.254.88.500 > 193.59.3.10.500: isakmp: phase
2/others I oakley-quick[E]
#v-
dalej cisza.
podpowie ktoś gdzie robię błąd?? przewaliłem już kilka konfiguracji i
efekt ciągle ten sam :/
--
MaRc
Nie kłóć się z idiotą. Będziesz musiał zniżyć się do jego poziomu a
wówczas pobije cię swoimi argumentami.
Re: ipsec/l2tp debian problem
Author: MaRc
Date: Fri, 18 Apr 2014 13:36
Date: Fri, 18 Apr 2014 13:36
12 lines
1746 bytes
1746 bytes
dodam jeszcze, że problem mam bez natu. za natem działa dobrze (łącze się w domu i jestem za routerem). Jeśli przełączam się na aero2 to połączenie jest nawiązywane ale po około minucie brak transmisji. tcpdump pokazuje, ze pakiety ESP lecą, ale brak ruchu na porcie 500. co dziwne, sesje nie są zrywane. pomoże ktoś? -- MaRc Nie kłóć się z idiotą. Będziesz musiał zniżyć się do jego poziomu a wówczas pobije cię swoimi argumentami.
Re: ipsec/l2tp debian problem
Author: Olek
Date: Fri, 18 Apr 2014 17:16
Date: Fri, 18 Apr 2014 17:16
10 lines
1391 bytes
1391 bytes
On 18.04.2014 15:36, MaRc wrote: > dodam jeszcze, że problem mam bez natu. za natem działa dobrze (łącze > się w domu i jestem za routerem). Jeśli przełączam się na aero2 to > połączenie jest nawiązywane ale po około minucie brak transmisji. > tcpdump pokazuje, ze pakiety ESP lecą, ale brak ruchu na porcie 500. > co dziwne, sesje nie są zrywane. Ale o potrzebie wpisania captcha w Aero wiesz? -- Olek
Re: ipsec/l2tp debian problem
Author: MaRc
Date: Fri, 18 Apr 2014 17:43
Date: Fri, 18 Apr 2014 17:43
11 lines
1447 bytes
1447 bytes
On 18.04.2014 19:16, Olek wrote: > Ale o potrzebie wpisania captcha w Aero wiesz? tak, wiem. ale to nie to :) pptp działa bez problemu. -- MaRc Nie kłóć się z idiotą. Będziesz musiał zniżyć się do jego poziomu a wówczas pobije cię swoimi argumentami.
Re: ipsec/l2tp debian problem
Author: MaRc
Date: Fri, 18 Apr 2014 19:12
Date: Fri, 18 Apr 2014 19:12
12 lines
1429 bytes
1429 bytes
On 16.04.2014 17:47, MaRc wrote: > type=transport wydaje mi się, że problem był tu. zmieniłem na tunnel i już prawie 30 minut chodzi bez problemu. -- MaRc Nie kłóć się z idiotą. Będziesz musiał zniżyć się do jego poziomu a wówczas pobije cię swoimi argumentami.
Re: ipsec/l2tp debian problem
Author: MaRc
Date: Sat, 19 Apr 2014 09:06
Date: Sat, 19 Apr 2014 09:06
194 lines
7143 bytes
7143 bytes
Pojawił mi się kolejny problem. Mianowicie jak "obciąże" tunel to zrywa
mi ppp xl2tp.
Gdy nie robię nic "wielkiego", zwykłe pingowanie, ssh, przeglądanie
stron to tunel jest trzymany. wystarczy że wejdę na zasób smb i zacznę
ściągać jakiś większy plik. zaciągnie kilka mega i połączeni ppp zaczyna
wisieć. to mówi log:
#v+
marcin@pat:~$ sudo tail -f /var/log/daemon.log | egrep "xl2tp|ppp"
Apr 19 10:47:03 pat xl2tpd[31371]: xl2tpd version xl2tpd-1.2.0 started
on vpn.domain.pl PID:31371
Apr 19 10:47:03 pat xl2tpd[31371]: Written by Mark Spencer, Copyright
(C) 1998, Adtran, Inc.
Apr 19 10:47:03 pat xl2tpd[31371]: Forked by Scott Balmos and David
Stipp, (C) 2001
Apr 19 10:47:03 pat xl2tpd[31371]: Inherited by Jeff McAdams, (C) 2002
Apr 19 10:47:03 pat xl2tpd[31371]: Forked again by Xelerance
(www.xelerance.com) (C) 2006
Apr 19 10:47:03 pat xl2tpd[31371]: Listening on IP address 1.1.1.1, port
1701
Apr 19 10:47:29 pat xl2tpd[31371]: control_finish: Peer requested tunnel
8 twice, ignoring second one.
Apr 19 10:47:29 pat xl2tpd[31371]: Connection established to
32.11.234.22, 1701. Local: 10091, Remote: 8 (ref=0/0). LNS session is
'default'
Apr 19 10:47:29 pat xl2tpd[31371]: start_pppd: I'm running:
Apr 19 10:47:29 pat xl2tpd[31371]: "/usr/sbin/pppd"
Apr 19 10:47:29 pat xl2tpd[31371]: "passive"
Apr 19 10:47:29 pat xl2tpd[31371]: "-detach"
Apr 19 10:47:29 pat xl2tpd[31371]: "172.21.7.1:172.21.7.230"
Apr 19 10:47:29 pat xl2tpd[31371]: "auth"
Apr 19 10:47:29 pat xl2tpd[31371]: "require-chap"
Apr 19 10:47:29 pat xl2tpd[31371]: "name"
Apr 19 10:47:29 pat xl2tpd[31371]: "ipsec"
Apr 19 10:47:29 pat xl2tpd[31371]: "debug"
Apr 19 10:47:29 pat xl2tpd[31371]: "file"
Apr 19 10:47:29 pat xl2tpd[31371]: "/etc/ppp/options.l2tpd"
Apr 19 10:47:29 pat xl2tpd[31371]: "/dev/pts/1"
Apr 19 10:47:29 pat xl2tpd[31371]: Call established with 32.11.234.22,
Local: 11598, Remote: 1, Serial: 0
Apr 19 10:49:34 pat xl2tpd[31371]: Maximum retries exceeded for tunnel
10091. Closing.
Apr 19 10:49:34 pat xl2tpd[31371]: Trustingly terminating pppd: sending
TERM signal to pid 31653
Apr 19 10:49:34 pat xl2tpd[31371]: pppd 31653 successfully terminated
Apr 19 10:49:34 pat xl2tpd[31371]: Connection 8 closed to 32.11.234.22,
port 1701 (Timeout)
Apr 19 10:49:35 pat xl2tpd[31371]: get_call: can't find call 11598 in
tunnel 10091#012 (ref=0/0)
Apr 19 10:49:35 pat xl2tpd[31371]: get_call: can't find call 11598 in
tunnel 10091#012 (ref=0/0)
Apr 19 10:49:36 pat xl2tpd[31371]: get_call: can't find call 11598 in
tunnel 10091#012 (ref=0/0)
Apr 19 10:49:36 pat xl2tpd[31371]: get_call: can't find call 11598 in
tunnel 10091#012 (ref=0/0)
Apr 19 10:49:37 pat xl2tpd[31371]: get_call: can't find call 11598 in
tunnel 10091#012 (ref=0/0)
Apr 19 10:49:37 pat xl2tpd[31371]: get_call: can't find call 11598 in
tunnel 10091#012 (ref=0/0)
Apr 19 10:49:37 pat xl2tpd[31371]: get_call: can't find call 11598 in
tunnel 10091#012 (ref=0/0)
Apr 19 10:49:38 pat xl2tpd[31371]: get_call: can't find call 11598 in
tunnel 10091#012 (ref=0/0)
Apr 19 10:49:38 pat xl2tpd[31371]: get_call: can't find call 11598 in
tunnel 10091#012 (ref=0/0)
Apr 19 10:49:38 pat xl2tpd[31371]: get_call: can't find call 11598 in
tunnel 10091#012 (ref=0/0)
Apr 19 10:49:39 pat xl2tpd[31371]: Unable to deliver closing message for
tunnel 10091. Destroying anyway.
Apr 19 10:49:39 pat xl2tpd[31371]: Can not find tunnel 10091 (refhim=0)
Apr 19 10:49:39 pat xl2tpd[31371]: network_thread: unable to find call
or tunnel to handle packet. call = 11598, tunnel = 10091 Dumping.
Apr 19 10:49:39 pat xl2tpd[31371]: Can not find tunnel 10091 (refhim=0)
Apr 19 10:49:39 pat xl2tpd[31371]: network_thread: unable to find call
or tunnel to handle packet. call = 11598, tunnel = 10091 Dumping.
Apr 19 10:49:40 pat xl2tpd[31371]: Can not find tunnel 10091 (refhim=0)
Apr 19 10:49:40 pat xl2tpd[31371]: network_thread: unable to find call
or tunnel to handle packet. call = 11598, tunnel = 10091 Dumping.
Apr 19 10:49:40 pat xl2tpd[31371]: Can not find tunnel 10091 (refhim=0)
Apr 19 10:49:40 pat xl2tpd[31371]: network_thread: unable to find call
or tunnel to handle packet. call = 11598, tunnel = 10091 Dumping.
#v-
host 1.1.1.1 to host na którym jest serwer vpn. Jak widać, gdzy zacząłem
kopiować tunel przestał działać Maximum retries exceeded for tunnel
10091. Closing.. Ktoś wie dlaczego?
oto teraźniejsza konfiguracja ipsec i xl2tpd
#v+
marcin@pat:~$ cat /etc/xl2tpd/xl2tpd.conf
[global]
port = 1701
listen-addr = 1.1.1.1
[lns default]
ip range = 172.21.7.230-172.21.7.240
local ip = 172.21.7.1
require chap = yes
require authentication = yes
name = ipsec
ppp debug = yes
pppoptfile = /etc/ppp/options.l2tpd
marcin@pat:~$ cat /etc/ppp/options.l2tpd
ipcp-accept-local
ipcp-accept-remote
require-mschap-v2
auth
proxyarp
idle 1800
mtu 1400
mru 1400
ms-dns 8.8.8.8
marcin@pat:~$ cat /etc/ipsec.conf
version 2.0 # conforms to second version of ipsec.conf specification
config setup
nat_traversal=yes
virtual_private=%v4:10.0.0.0/8,%v4:192.168.0.0/16,%v4:172.16.0.0/12,%v4:!172.21.7.0/24
nhelpers=0
protostack=netkey
# plutodebug=all
# Add connections here
conn PUBLIC-PSK-PRIVATE-NAT
rightsubnet=vhost:%priv
also=L2TP-PSK-CLIENTS
conn L2TP-PSK-CLIENTS
authby=secret
pfs=no
auto=add
keyingtries=3
rekey=no
# type=transport
type=tunnel
left=1.1.1.1
leftprotoport=17/1701
right=%any
rightprotoport=17/%any
dpddelay=40
dpdtimeout=130
dpdaction=clear
#Disable Opportunistic Encryption
include /etc/ipsec.d/examples/no_oe.conf
#v-
proszę o podpowiedzi. z góry dzięki.
--
MaRc
Nie kłóć się z idiotą. Będziesz musiał zniżyć się do jego poziomu a
wówczas pobije cię swoimi argumentami.
Re: ipsec/l2tp debian problem
Author: tombo
Date: Mon, 21 Apr 2014 20:19
Date: Mon, 21 Apr 2014 20:19
107 lines
3894 bytes
3894 bytes
On 18.04.2014 15:36, MaRc wrote:
> dodam jeszcze, że problem mam bez natu. za natem działa dobrze (łącze
> się w domu i jestem za routerem). Jeśli przełączam się na aero2 to
> połączenie jest nawiązywane ale po około minucie brak transmisji.
> tcpdump pokazuje, ze pakiety ESP lecą, ale brak ruchu na porcie 500.
> co dziwne, sesje nie są zrywane.
>
> pomoże ktoś?
Siema
Sprawdź dobrze tcpdumpa po stronie andorida i po stronie serwera.
Pakiety ESP niejednokrotnie są w sieciach komórkowych blokowane.
Ja staram się wymuszać NAT-T, żeby encapsulować w UDP i wogóle ESP pominąć.
Sprawdź też MTU, żeby było wystrczająco niskie, masz ppp over l2tp over ipsec over UDP
najczęściej, i co za tym idzie spory narzut na nagłówki. Sobie ustawiłem "na pałę" 1200,
być może można wyżej, nie testowałem.
Zrzut z moich konfigów, robie autoryzacja w serwerze samby, pewnie to pominiesz,
ale do tego co niżej kernel musi być z pathami SAref (działa też wtedy kilku klientów zza jednego nata ) :
https://github.com/xelerance/Openswan/wiki/Building-and-installing-an-saref-capable-klips-version-for-ubuntu-precise
/etc/ipsec.conf:
config setup
nat_traversal=yes
virtual_private=%v4:10.0.0.0/8,%v4:192.168.0.0/16,%v4:172.16.0.0/12
oe=off
protostack=mast
interfaces="%defaultroute"
conn vpn1
overlapip=yes
sareftrack=yes
type=transport
leftnexthop=%defaultroute
left=11.22.33.44
right=%any
rekey=no
keyingtries=3
pfs=no
leftprotoport=17/1701
rightprotoport=17/%any
authby=secret
auto=add
rightsubnet=vhost:%priv,%no
conn vpn2
overlapip=yes
sareftrack=yes
type=transport
leftnexthop=%defaultroute
left=11.22.33.45
right=%any
rekey=no
keyingtries=3
pfs=no
leftprotoport=17/1701
rightprotoport=17/%any
authby=secret
auto=add
rightsubnet=vhost:%priv,%no
.... ( itd , mam kilka ip z vpn dla roznch grupek ludzi )
/etc/xl2tpd/xl2tpd.vpn1.conf:
[global]
listen-addr = 11.22.33.44
ipsec saref = yes
[lns default]
name = OpenswanVPN
assign ip = yes
ip range = 192.168.194.2-192.168.194.200
local ip = 192.168.194.1
refuse chap = yes
refuse pap = yes
require authentication = yes
ppp debug = yes
pppoptfile = /etc/ppp/options.xl2tpd.vpn1
length bit = yes
/etc/ppp/options.xl2tpd.vpn1:
name l2tp
ipcp-accept-local
ipcp-accept-remote
ms-dns 192.168.193.2
ms-wins 192.168.193.2
noccp
auth
crtscts
idle 1800
mtu 1200
mru 1200
nodefaultroute
debug
lock
proxyarp
connect-delay 5000
require-mschap-v2
plugin winbind.so
ntlm_auth-helper '/usr/bin/ntlm_auth --helper-protocol=ntlm-server-1 --require-membership-of="MSDomain\\GroupOfUsers"'
--
MG
Re: ipsec/l2tp debian problem
Author: MaRc
Date: Wed, 23 Apr 2014 06:21
Date: Wed, 23 Apr 2014 06:21
27 lines
2320 bytes
2320 bytes
On 21.04.2014 22:19, tombo wrote: > > Siema > > Sprawdź dobrze tcpdumpa po stronie andorida i po stronie serwera. > Pakiety ESP niejednokrotnie są w sieciach komórkowych blokowane. > Ja staram się wymuszać NAT-T, żeby encapsulować w UDP i wogóle ESP pominąć. > > Sprawdź też MTU, żeby było wystrczająco niskie, masz ppp over l2tp over ipsec over UDP > najczęściej, i co za tym idzie spory narzut na nagłówki. Sobie ustawiłem "na pałę" 1200, > być może można wyżej, nie testowałem. > > > Zrzut z moich konfigów, robie autoryzacja w serwerze samby, pewnie to pominiesz, > ale do tego co niżej kernel musi być z pathami SAref (działa też wtedy kilku klientów zza jednego nata ) : > https://github.com/xelerance/Openswan/wiki/Building-and-installing-an-saref-capable-klips-version-for-ubuntu-precise > Dzięki. biorę się za testy. -- MaRc Nie kłóć się z idiotą. Będziesz musiał zniżyć się do jego poziomu a wówczas pobije cię swoimi argumentami.
Re: ipsec/l2tp debian problem
Author: ein
Date: Wed, 23 Apr 2014 07:25
Date: Wed, 23 Apr 2014 07:25
15 lines
1536 bytes
1536 bytes
MaRc wrote: > Witam. > Mam problem z odpaleniem ipsec/l2tp. Mianowicie klient (android) się > łączy, działa to przez około minutę i na kliencie brak komunikacji. > Tunel niby cały czas zestawiony, tcpdump w czasie kiedy już nie działa > widzi na etherniecie jakiś ruch esp. > [...] > podpowie ktoś gdzie robię błąd?? przewaliłem już kilka konfiguracji i > efekt ciągle ten sam :/ Z czystej ciekawości czemu pałujesz się z IPsec-iem do zestawiania VPN w takich warunkach? OpenVPN-em osiągniesz to samo w 30 minut. Bez patch-owania, pitolenia z softem z pudełka w każdej znanej mi dystrybucji.
Re: ipsec/l2tp debian problem
Author: MaRc
Date: Wed, 23 Apr 2014 08:45
Date: Wed, 23 Apr 2014 08:45
16 lines
1796 bytes
1796 bytes
On 23.04.2014 09:25, ein wrote: > Z czystej ciekawości czemu pałujesz się z IPsec-iem do zestawiania VPN w > takich warunkach? > OpenVPN-em osiągniesz to samo w 30 minut. Bez patch-owania, pitolenia z > softem z pudełka w każdej znanej mi dystrybucji. OpenVPN mi działa bez problemu, z tym, ze robi interfejsy tap/tun 10Mbit :( Pozatym chcę się czegoś więcej poduczyć. IPSec/L2TP jest ofb w każdym systemie windowsowym bez instalowania czego kolwiek. -- MaRc Nie kłóć się z idiotą. Będziesz musiał zniżyć się do jego poziomu a wówczas pobije cię swoimi argumentami.
Re: ipsec/l2tp debian problem
Author: ein
Date: Wed, 23 Apr 2014 19:55
Date: Wed, 23 Apr 2014 19:55
19 lines
1695 bytes
1695 bytes
MaRc wrote: > On 23.04.2014 09:25, ein wrote: >> Z czystej ciekawości czemu pałujesz się z IPsec-iem do >> zestawiania VPN w takich warunkach? OpenVPN-em osiągniesz to samo >> w 30 minut. Bez patch-owania, pitolenia z softem z pudełka w >> każdej znanej mi dystrybucji. > > OpenVPN mi działa bez problemu, z tym, ze robi interfejsy tap/tun > 10Mbit :( Z tego co czytałem to te 10Mbit, to jest tylko wyświetlany label i nijak się ma do praktycznych limitów takiego łącza. > Pozatym chcę się czegoś więcej poduczyć. IPSec/L2TP jest ofb w > każdym systemie windowsowym bez instalowania czego kolwiek. Masochizm - to już jakiś argument jest. ;) Pozdrawiam i powodzenia.
Re: ipsec/l2tp debian problem
Author: MaRc
Date: Thu, 24 Apr 2014 06:30
Date: Thu, 24 Apr 2014 06:30
23 lines
2020 bytes
2020 bytes
On 23.04.2014 21:55, ein wrote: > Z tego co czytałem to te 10Mbit, to jest tylko wyświetlany label i > nijak się ma do praktycznych limitów takiego łącza. jednak ma się do limitowania. Właśnie m.in. z tego powodu szukam innego stabilnego rozwiązania. > >> Pozatym chcę się czegoś więcej poduczyć. IPSec/L2TP jest ofb w >> każdym systemie windowsowym bez instalowania czego kolwiek. > > Masochizm - to już jakiś argument jest. ;) Bez przesady, w wielu miejscach ładnie działa IPSec/L2TP i nie ma z tym problemów. Pozatym, spróbuj wrzucić OpenVPNa do sprzętu typu Cisco :) -- MaRc Nie kłóć się z idiotą. Będziesz musiał zniżyć się do jego poziomu a wówczas pobije cię swoimi argumentami.
Re: ipsec/l2tp debian problem
Author: ein
Date: Thu, 24 Apr 2014 07:49
Date: Thu, 24 Apr 2014 07:49
21 lines
1920 bytes
1920 bytes
MaRc wrote: > On 23.04.2014 21:55, ein wrote: >> Z tego co czytałem to te 10Mbit, to jest tylko wyświetlany label i >> nijak się ma do praktycznych limitów takiego łącza. > > jednak ma się do limitowania. Właśnie m.in. z tego powodu szukam innego > stabilnego rozwiązania. Nie, coś pomyliłeś: http://openvpn.net/archive/openvpn-users/2004-02/msg00041.html http://community.openvpn.net/openvpn/wiki/Gigabit_Networks_Linux >>> Pozatym chcę się czegoś więcej poduczyć. IPSec/L2TP jest ofb w >>> każdym systemie windowsowym bez instalowania czego kolwiek. >> >> Masochizm - to już jakiś argument jest. ;) > > Bez przesady, w wielu miejscach ładnie działa IPSec/L2TP i nie ma z tym > problemów. Pozatym, spróbuj wrzucić OpenVPNa do sprzętu typu Cisco :) Prawda, punkt widzenia zależy od punktu siedzenia. :)
Re: ipsec/l2tp debian problem
Author: MaRc
Date: Thu, 24 Apr 2014 08:46
Date: Thu, 24 Apr 2014 08:46
36 lines
2509 bytes
2509 bytes
On 24.04.2014 09:49, ein wrote:
> Nie, coś pomyliłeś:
> http://openvpn.net/archive/openvpn-users/2004-02/msg00041.html
> http://community.openvpn.net/openvpn/wiki/Gigabit_Networks_Linux
hmm, mi zawsze przycinało do 10Mbit :/ chyba mam starego openvpna
#v+
:/etc/openvpn# ethtool tun0
Settings for tun0:
Supported ports: [ ]
Supported link modes:
Supports auto-negotiation: No
Advertised link modes: Not reported
Advertised auto-negotiation: No
Speed: 10Mb/s
Duplex: Full
Port: Twisted Pair
PHYAD: 0
Transceiver: internal
Auto-negotiation: off
Current message level: 0xffffffa1 (-95)
Link detected: yes
/etc/openvpn# openvpn --version
OpenVPN 2.1_rc11 i486-pc-linux-gnu [SSL] [LZO2] [EPOLL] [PKCS11] built
on Sep 18 2008
Developed by James Yonan
Copyright (C) 2002-2008 Telethra, Inc. <sales@openvpn.net>
#v-
--
MaRc
Nie kłóć się z idiotą. Będziesz musiał zniżyć się do jego poziomu a
wówczas pobije cię swoimi argumentami.
Re: ipsec/l2tp debian problem
Author: ein
Date: Thu, 24 Apr 2014 11:16
Date: Thu, 24 Apr 2014 11:16
21 lines
1897 bytes
1897 bytes
MaRc wrote: > On 24.04.2014 09:49, ein wrote: >> Nie, coś pomyliłeś: >> http://openvpn.net/archive/openvpn-users/2004-02/msg00041.html >> http://community.openvpn.net/openvpn/wiki/Gigabit_Networks_Linux > > hmm, mi zawsze przycinało do 10Mbit :/ chyba mam starego openvpna > #v+ > :/etc/openvpn# ethtool tun0 > Settings for tun0: > Supported ports: [ ] > Supported link modes: > Supports auto-negotiation: No > Advertised link modes: Not reported > Advertised auto-negotiation: No > Speed: 10Mb/s > Duplex: Full > Port: Twisted Pair No to Ci tłumacze, że to tylko nic nie znaczący label z drivera! :))) Podłączałeś tam także skrętkę to tego tap-a? :D
Re: ipsec/l2tp debian problem
Author: MaRc
Date: Thu, 24 Apr 2014 13:12
Date: Thu, 24 Apr 2014 13:12
16 lines
1800 bytes
1800 bytes
On 24.04.2014 13:16, ein wrote: > No to Ci tłumacze, że to tylko nic nie znaczący label z drivera! :))) > Podłączałeś tam także skrętkę to tego tap-a? :D Tak, podłączyłem skrętkę do tapa. Jak się łącze z domu (w domu mam 100Mbit) po sshfs to leci całą parą, jak się połącze przez OpenVPN to tnie właśnie do 10Mbit :/ -- MaRc Nie kłóć się z idiotą. Będziesz musiał zniżyć się do jego poziomu a wówczas pobije cię swoimi argumentami.
Re: ipsec/l2tp debian problem
Author: ein
Date: Fri, 25 Apr 2014 03:37
Date: Fri, 25 Apr 2014 03:37
29 lines
2304 bytes
2304 bytes
MaRc wrote: > On 24.04.2014 13:16, ein wrote: >> No to Ci tłumacze, że to tylko nic nie znaczący label z drivera! :))) >> Podłączałeś tam także skrętkę to tego tap-a? :D > > Tak, podłączyłem skrętkę do tapa. Jak się łącze z domu (w domu mam Jestem pewien, że akurat tego nie zrobiłeś. :-) > 100Mbit) po sshfs to leci całą parą, jak się połącze przez OpenVPN to > tnie właśnie do 10Mbit :/ W przykładzie (ethtool *tun*X) jest to interfejs *logiczny* pracujący w warstwie *3* (ISO/OSI), negocjacja duplex-u i prędkości odbywa się w warstwie *której*? tapX - działa w warstwie *drugiej* to samo co wyżej ale inna warstwa działania. Prędkości osiągane nie są wynikiem tego co pokazuje ethtool lub Windows, to tylko *napis* wszyty w sterownik. Przypadkowa zbieżność *nic* nie znaczy, na 100 % jest tu problem konfiguracyjny lub/i wydajnościowy. Konfiguracja IPsec-a w przypadku który opisujesz najprawdopodobniej tą wydajność jeszcze zmiejszy. Mam nadzieję, że rozwiałem wszelkie wątpliwości.
Re: ipsec/l2tp debian problem
Author: MaRc
Date: Fri, 25 Apr 2014 06:47
Date: Fri, 25 Apr 2014 06:47
45 lines
2916 bytes
2916 bytes
On 25.04.2014 05:37, ein wrote: > MaRc wrote: >> On 24.04.2014 13:16, ein wrote: >>> No to Ci tłumacze, że to tylko nic nie znaczący label z drivera! :))) >>> Podłączałeś tam także skrętkę to tego tap-a? :D >> >> Tak, podłączyłem skrętkę do tapa. Jak się łącze z domu (w domu mam > > Jestem pewien, że akurat tego nie zrobiłeś. :-) :) no fakt, bezpośrednio nie, ale w infrastrukturę "miedzianą" tak :) > >> 100Mbit) po sshfs to leci całą parą, jak się połącze przez OpenVPN to >> tnie właśnie do 10Mbit :/ > > W przykładzie (ethtool *tun*X) jest to interfejs *logiczny* pracujący w > warstwie *3* (ISO/OSI), negocjacja duplex-u i prędkości odbywa się w > warstwie *której*? > > tapX - działa w warstwie *drugiej* to samo co wyżej ale inna warstwa > działania. > > Prędkości osiągane nie są wynikiem tego co pokazuje ethtool lub Windows, > to tylko *napis* wszyty w sterownik. > > Przypadkowa zbieżność *nic* nie znaczy, na 100 % jest tu problem > konfiguracyjny lub/i wydajnościowy. > > Konfiguracja IPsec-a w przypadku który opisujesz najprawdopodobniej tą > wydajność jeszcze zmiejszy. > > Mam nadzieję, że rozwiałem wszelkie wątpliwości. > tu nie chodzi o wątpliwości, ale dzięki za zainteresowanie tematem offtopicowym :) pozdrawiam -- MaRc Nie kłóć się z idiotą. Będziesz musiał zniżyć się do jego poziomu a wówczas pobije cię swoimi argumentami.
Re: ipsec/l2tp debian problem
Author: ein
Date: Tue, 29 Apr 2014 05:28
Date: Tue, 29 Apr 2014 05:28
64 lines
3297 bytes
3297 bytes
MaRc wrote:
> On 25.04.2014 05:37, ein wrote:
>> MaRc wrote:
>>> On 24.04.2014 13:16, ein wrote:
>>>> No to Ci tłumacze, że to tylko nic nie znaczący label z drivera! :)))
>>>> Podłączałeś tam także skrętkę to tego tap-a? :D
>>>
>>> Tak, podłączyłem skrętkę do tapa. Jak się łącze z domu (w domu mam
>>
>> Jestem pewien, że akurat tego nie zrobiłeś. :-)
>
> :) no fakt, bezpośrednio nie, ale w infrastrukturę "miedzianą" tak :)
>
>>
>>> 100Mbit) po sshfs to leci całą parą, jak się połącze przez OpenVPN to
>>> tnie właśnie do 10Mbit :/
>>
[...]
> tu nie chodzi o wątpliwości, ale dzięki za zainteresowanie tematem
> offtopicowym :)
Tak sobie właśnie kopię zapasową wykonuję i patrze, że przez OpenVPN w
konfiguracji:
- urządzenie TAP,
- TLS,
- kompresja LZO,
- cipher BlowFish - 128 bit i SHA1 as digest (domyślne ustawienia)
Oczywiście:
root@nsa310:~# ethtool tap0
Settings for tap0:
Supported ports: [ ]
Supported link modes: Not reported
Supported pause frame use: No
Supports auto-negotiation: No
Advertised link modes: Not reported
Advertised pause frame use: No
Advertised auto-negotiation: No
Speed: 10Mb/s
Duplex: Full
Port: Twisted Pair
PHYAD: 0
Transceiver: internal
Auto-negotiation: off
MDI-X: Unknown
Link detected: yes
Kapie tam jakieś ~ 3-3,5 MiB/s, proces Openvpn-a zżera około 70-75 %
czasu CPU, resztę wcina rsync, procek to:
root@nsa310:~# cat /proc/cpuinfo
Processor : Feroceon 88FR131 rev 1 (v5l)
BogoMIPS : 1199.30
Features : swp half thumb fastmult edsp
CPU implementer : 0x56
CPU architecture: 5TE
CPU variant : 0x2
CPU part : 0x131
CPU revision : 1
Hardware : Zyxel NSA-310
Revision : 0000
Serial : 0000000000000000
Czyli względnie kupa - telefon mam mocniejszy. (-;
Re: ipsec/l2tp debian problem
Author: Krzysztof Halasa
Date: Thu, 01 May 2014 12:03
Date: Thu, 01 May 2014 12:03
39 lines
2634 bytes
2634 bytes
ein <ein@no.spam> writes: > Tak sobie właśnie kopię zapasową wykonuję i patrze, że przez OpenVPN w > konfiguracji: > - urządzenie TAP, > - TLS, > - kompresja LZO, > - cipher BlowFish - 128 bit i SHA1 as digest (domyślne ustawienia) > Kapie tam jakieś ~ 3-3,5 MiB/s, proces Openvpn-a zżera około 70-75 % > czasu CPU, resztę wcina rsync, procek to: > > root@nsa310:~# cat /proc/cpuinfo > Processor : Feroceon 88FR131 rev 1 (v5l) > BogoMIPS : 1199.30 > Features : swp half thumb fastmult edsp > CPU implementer : 0x56 > CPU architecture: 5TE > CPU variant : 0x2 > CPU part : 0x131 > CPU revision : 1 > Hardware : Zyxel NSA-310 > Revision : 0000 > Serial : 0000000000000000 > > Czyli względnie kupa - telefon mam mocniejszy. (-; Ale to chyba jest oczywiste, w telefonie masz pewnie dużo nowszy procesor (np. 2- lub 4-rdzeniowy). W tamtych starszych maszynkach jedyne opcje pozwalające na sensowne szyfrowanie to sprzętowe akceleratory. Mam delikatne wrażenie, że ten procesor też to ma i że openvpn (i np. IPSec) potrafi tego użyć. Wydajność szyfrowania takich ARMów to typowo np. od kilkudziesięciu do kilkuset Mbit/s (np. nieco poniżej 10 MB/s do kilkudziesięciu MB/s), przy czym nie obciąża to znacząco rdzenia/rdzeni i nie wpływa specjalnie na pobór energii. -- Krzysztof Hałasa
Thread Navigation
This is a paginated view of messages in the thread with full content displayed inline.
Messages are displayed in chronological order, with the original post highlighted in green.
Use pagination controls to navigate through all messages in large threads.
Back to All Threads