<br><font size=2 face="sans-serif">Excuse me the below error posting was
not complete:</font>
<br><font size=2 face="sans-serif">I still have Openswan 2.4.5rc5 (klips),
kernel 2.4.32, modules enabled but not used in kernel (every ipsec option
is compiled in). :-)</font>
<br>
<br><font size=2 face="sans-serif">This line was missing:</font>
<br><font size=2 face="sans-serif">Mar 22 16:26:01 gw-bud pluto[7130]:
ERROR: "BUD_KAP" #16290: pfkey write() of SADB_ADD message 68340
for Add SA comp.80a7@62.77.194.227 failed. Errno 17: File exists</font>
<br><font size=2 face="sans-serif">Mar 22 16:26:01 gw-bud pluto[7130]:
| 02 03 00 0a 0b 00 00 00 f4 0a 01 00 da 1b 00
00</font>
<br><font size=2 face="sans-serif">Mar 22 16:26:01 gw-bud pluto[7130]:
| 03 00 01 00 00 00 80 a7 00 01 00 02 00 00 00
00</font>
<br><font size=2 face="sans-serif">Mar 22 16:26:01 gw-bud pluto[7130]:
| ff ff ff ff 00 00 00 00 03 00 05 00 00 00 00
00</font>
<br><font size=2 face="sans-serif">Mar 22 16:26:01 gw-bud pluto[7130]:
| 02 00 00 00 3e 4d e4 e9 00 00 00 00 00 00 00
00</font>
<br><font size=2 face="sans-serif">Mar 22 16:26:01 gw-bud pluto[7130]:
| 03 00 06 00 00 00 00 00 02 00 00 00 3e 4d c2
e3</font>
<br><font size=2 face="sans-serif">Mar 22 16:26:01 gw-bud pluto[7130]:
| 00 00 00 00 00 00 00 00</font>
<br><font size=2 face="sans-serif">Mar 22 16:26:01 gw-bud pluto[7130]:
| add_sa ipcomp failed</font>
<br>
<br><font size=2 face="sans-serif">Since I have set "compress=no"
openswan has been working (2 days and 7 hours).</font>
<br><font size=2 face="sans-serif">But I still have the below error messages
quite often. I mean every 2 or 3 hours a day.</font>
<br>
<br><font size=2 face="sans-serif">Mar 22 16:26:01 gw-bud pluto[7130]:
| 02 03 00 0a 0b 00 00 00 f4 0a 01 00 da 1b 00
00</font>
<br><font size=2 face="sans-serif">Mar 22 16:26:01 gw-bud pluto[7130]:
| 03 00 01 00 00 00 80 a7 00 01 00 02 00 00 00
00</font>
<br><font size=2 face="sans-serif">Mar 22 16:26:01 gw-bud pluto[7130]:
| ff ff ff ff 00 00 00 00 03 00 05 00 00 00 00
00</font>
<br><font size=2 face="sans-serif">Mar 22 16:26:01 gw-bud pluto[7130]:
| 02 00 00 00 3e 4d e4 e9 00 00 00 00 00 00 00
00</font>
<br><font size=2 face="sans-serif">Mar 22 16:26:01 gw-bud pluto[7130]:
| 03 00 06 00 00 00 00 00 02 00 00 00 3e 4d c2
e3</font>
<br><font size=2 face="sans-serif">Mar 22 16:26:01 gw-bud pluto[7130]:
| 00 00 00 00 00 00 00 00</font>
<br><font size=2 face="sans-serif">Mar 22 16:26:01 gw-bud pluto[7130]:
| add_sa ipcomp failed</font>
<br>
<br><font size=2 face="sans-serif">And to tell you the truth I cannot tell
you if the compress setting or one of the following ones made it possible
to run for more than 2 days: (Unfortunately I made all of them at the same
time) </font>
<br><font size=2 face="sans-serif">kernel.shmmax = 2147483648</font>
<br><font size=2 face="sans-serif">kernel.shmmni = 4096</font>
<br><font size=2 face="sans-serif">kernel.shmall = 2097152</font>
<br><font size=2 face="sans-serif">kernel.sem = 512
64000 128 512</font>
<br>
<br><font size=2 face="sans-serif">Üdvözlettel / Kind regards,<br>
<br>
Horváth Gábor<br>
hálózati és rendszeradminisztrátor / IT specialist<br>
<br>
Konica Minolta Magyarország / Hungary<br>
Tel:+36-1-4649-013<br>
<br>
mailto:gabor.horvath@konicaminolta.hu<br>
http://www.konicaminolta.hu<br>
<br>
Érdeklődik a legújabb Konica Minolta hírek iránt? Iratkozzon fel a rendszeres
hírlevelünkre! http://www.konicaminolta.hu/hirlevel</font>
<br>
<br>
<br>
<table width=100%>
<tr valign=top>
<td>
<td><font size=1 face="sans-serif"><b>Paul Wouters <paul@xelerance.com></b></font>
<p><font size=1 face="sans-serif">2006.03.20 14:54</font>
<td><font size=1 face="Arial"> </font>
<br><font size=1 face="sans-serif"> Címzett:
gabor.horvath@konicaminolta.hu</font>
<br><font size=1 face="sans-serif"> Másolat:
users@openswan.org, Sherman Chan <Sherman.Chan@world.net></font>
<br><font size=1 face="sans-serif">
Tárgy: Re: Válasz: RE: [Openswan
Users] sadb_add error message with kernel 2.4.32 & 2.6.15 / openswan
2.4.5rcX</font></table>
<br>
<br>
<br><font size=2><tt>On Mon, 20 Mar 2006, gabor.horvath@konicaminolta.hu
wrote:<br>
<br>
> I forgot to mention: with 768 MB memory it runs without any problems
for 3<br>
> days and with 256 MB mem it does it for 1 day only before it goes
crazy. I<br>
> checked it twice.<br>
<br>
How many connections does that server have? That's a lot of memory to lose.<br>
<br>
There are a few fixes for memory leaks that I just commited to CVS. They<br>
should be in 2.4.5 when we release it later today.<br>
<br>
Though these memory leak fixes are for userland, not kernel space. Can
you<br>
try adding compress=no to your conn definitions and see if the problem<br>
becomes less?<br>
<br>
Paul<br>
</tt></font>
<br>