[OpenSWAN dev] [DETAILED REPORT] CANNOT get FreeSWAN 2.04 and LinkSys
BEFSX41-CA(FR) to establish an IPsec tunnel
Jeannot_Langlois
jeannot at cableamos.com
Sat Dec 20 18:21:43 CET 2003
Skipped content of type multipart/alternative-------------- next part --------------
deimos
Wed Dec 17 21:24:03 EST 2003
+ _________________________ version
+ ipsec --version
Linux FreeS/WAN 2.04
See `ipsec --copyright' for copyright information.
+ _________________________ proc/version
+ cat /proc/version
Linux version 2.4.23-ipsec (root at deimos) (gcc version 3.2.3) #2 Sun Dec 7 14:59:51 EST 2003
+ _________________________ ipsec_verify
+ ipsec verify --nocolour
Checking your system to see if IPsec got installed and started correctly:
Version check and ipsec on-path [OK]
Linux FreeS/WAN 2.04
Checking for KLIPS support in kernel [OK]
Checking for RSA private key (/etc/ipsec.secrets) [OK]
Checking that pluto is running [OK]
Two or more interfaces found, checking IP forwarding [OK]
Checking NAT and MASQUERADEing
Opportunistic Encryption DNS checks:
Looking for TXT in forward map: deimos [MISSING]
Does the machine have at least one non-private address? [OK]
Looking for TXT in reverse map: Z.Y.X.W.in-addr.arpa. [MISSING]
+ _________________________ proc/net/ipsec_eroute
+ sort -sg +3 /proc/net/ipsec_eroute
+ _________________________ netstat-rn
+ netstat -nr
Kernel IP routing table
Destination Gateway Genmask Flags MSS Window irtt Iface
W.X.Y.0 0.0.0.0 255.255.255.0 U 0 0 0 eth0
W.X.Y.0 0.0.0.0 255.255.255.0 U 0 0 0 ipsec0
192.168.1.0 0.0.0.0 255.255.255.0 U 0 0 0 eth1
127.0.0.0 0.0.0.0 255.0.0.0 U 0 0 0 lo
0.0.0.0 W.X.Y.1 0.0.0.0 UG 0 0 0 eth0
+ _________________________ proc/net/ipsec_spi
+ cat /proc/net/ipsec_spi
+ _________________________ proc/net/ipsec_spigrp
+ cat /proc/net/ipsec_spigrp
+ _________________________ proc/net/ipsec_tncfg
+ cat /proc/net/ipsec_tncfg
ipsec0 -> eth0 mtu=16260(1500) -> 1500
ipsec1 -> NULL mtu=0(0) -> 0
ipsec2 -> NULL mtu=0(0) -> 0
ipsec3 -> NULL mtu=0(0) -> 0
+ _________________________ proc/net/pf_key
+ cat /proc/net/pf_key
sock pid socket next prev e n p sndbf Flags Type St
c0921960 20021 c0044770 0 0 0 0 2 65535 00000000 3 1
+ _________________________ proc/net/pf_key-star
+ cd /proc/net
+ egrep '^' pf_key_registered pf_key_supported
pf_key_registered:satype socket pid sk
pf_key_registered: 2 c0044770 20021 c0921960
pf_key_registered: 3 c0044770 20021 c0921960
pf_key_registered: 9 c0044770 20021 c0921960
pf_key_registered: 10 c0044770 20021 c0921960
pf_key_supported:satype exttype alg_id ivlen minbits maxbits
pf_key_supported: 2 14 3 0 160 160
pf_key_supported: 2 14 2 0 128 128
pf_key_supported: 3 15 3 128 168 168
pf_key_supported: 3 14 3 0 160 160
pf_key_supported: 3 14 2 0 128 128
pf_key_supported: 9 15 1 0 32 32
pf_key_supported: 10 15 2 0 1 1
+ _________________________ proc/sys/net/ipsec-star
+ cd /proc/sys/net/ipsec
+ egrep '^' icmp inbound_policy_check tos
icmp:1
inbound_policy_check:1
tos:1
+ _________________________ ipsec/status
+ ipsec auto --status
000 interface ipsec0/eth0 W.X.Y.Z
000 %myid = (none)
000 debug raw+crypt+parsing+emitting+control+lifecycle+klips+dns+oppo+controlmore
000
000 "jeannot_christian_psk_auto": 192.168.1.0/24===W.X.Y.Z---W.X.Y.1...A.B.C.1---A.B.C.D===192.168.0.0/24; unrouted; eroute owner: #0
000 "jeannot_christian_psk_auto": ike_life: 14400s; ipsec_life: 3600s; rekey_margin: 540s; rekey_fuzz: 100%; keyingtries: 0
000 "jeannot_christian_psk_auto": policy: PSK+ENCRYPT+TUNNEL+PFS+UP; prio: 24,24; interface: eth0;
000 "jeannot_christian_psk_auto": newest ISAKMP SA: #0; newest IPsec SA: #0;
000
000 #3: "jeannot_christian_psk_auto" STATE_MAIN_I2 (sent MI2, expecting MR2); EVENT_RETRANSMIT in 9s
000 #3: pending Phase 2 for "jeannot_christian_psk_auto" replacing #0
000
+ _________________________ ifconfig-a
+ ifconfig -a
eth0 Link encap:Ethernet HWaddr SOME_ETHERNET_HWADDRESS_ON_PUBLIC_SIDE
inet addr:W.X.Y.Z Bcast:255.255.255.255 Mask:255.255.255.0
UP BROADCAST NOTRAILERS RUNNING MULTICAST MTU:1500 Metric:1
RX packets:11449530 errors:0 dropped:0 overruns:0 frame:0
TX packets:2992986 errors:0 dropped:0 overruns:1 carrier:0
collisions:0 txqueuelen:1000
RX bytes:1329679802 (1268.0 Mb) TX bytes:273550671 (260.8 Mb)
Interrupt:10 Base address:0xc000
eth1 Link encap:Ethernet HWaddr SOME_ETHERNET_HWADDRESS_ON_PRIVATE_SIDE
inet addr:192.168.1.254 Bcast:192.168.1.255 Mask:255.255.255.0
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:3087133 errors:0 dropped:0 overruns:0 frame:0
TX packets:1915057 errors:0 dropped:0 overruns:8 carrier:0
collisions:0 txqueuelen:1000
RX bytes:273990612 (261.2 Mb) TX bytes:739788987 (705.5 Mb)
Interrupt:12 Base address:0xe000
ipsec0 Link encap:Ethernet HWaddr SOME_ETHERNET_HWADDRESS_ON_PUBLIC_SIDE
inet addr:W.X.Y.Z Mask:255.255.255.0
UP RUNNING NOARP MTU:16260 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:10
RX bytes:0 (0.0 b) TX bytes:0 (0.0 b)
ipsec1 Link encap:UNSPEC HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00
NOARP MTU:0 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:10
RX bytes:0 (0.0 b) TX bytes:0 (0.0 b)
ipsec2 Link encap:UNSPEC HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00
NOARP MTU:0 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:10
RX bytes:0 (0.0 b) TX bytes:0 (0.0 b)
ipsec3 Link encap:UNSPEC HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00
NOARP MTU:0 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:10
RX bytes:0 (0.0 b) TX bytes:0 (0.0 b)
lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
UP LOOPBACK RUNNING MTU:16436 Metric:1
RX packets:43 errors:0 dropped:0 overruns:0 frame:0
TX packets:43 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:3320 (3.2 Kb) TX bytes:3320 (3.2 Kb)
+ _________________________ mii-tool
+ '[' -x /sbin/mii-tool ']'
+ /sbin/mii-tool -v
eth0: negotiated 100baseTx-FD, link ok
product info: vendor 00:00:00, model 0 rev 0
basic mode: autonegotiation enabled
basic status: autonegotiation complete, link ok
capabilities: 100baseTx-FD 100baseTx-HD 10baseT-FD 10baseT-HD
advertising: 100baseTx-FD 100baseTx-HD 10baseT-FD 10baseT-HD
link partner: 100baseTx-FD 100baseTx-HD 10baseT-FD 10baseT-HD
eth1: negotiated 100baseTx-FD, link ok
product info: vendor 00:00:00, model 0 rev 0
basic mode: autonegotiation enabled
basic status: autonegotiation complete, link ok
capabilities: 100baseTx-FD 100baseTx-HD 10baseT-FD 10baseT-HD
advertising: 100baseTx-FD 100baseTx-HD 10baseT-FD 10baseT-HD
link partner: 100baseTx-FD 100baseTx-HD 10baseT-FD 10baseT-HD flow-control
+ _________________________ ipsec/directory
+ ipsec --directory
/usr/local/lib/ipsec
+ _________________________ hostname/fqdn
+ hostname --fqdn
deimos.mars.lan
+ _________________________ hostname/ipaddress
+ hostname --ip-address
127.0.0.1
+ _________________________ uptime
+ uptime
21:24:11 up 10 days, 4:02, 4 users, load average: 0.31, 0.36, 0.17
+ _________________________ ps
+ ps alxwf
+ egrep -i 'ppid|pluto|ipsec|klips'
Warning: /boot/System.map has an incorrect kernel version.
F UID PID PPID PRI NI VSZ RSS WCHAN STAT TTY TIME COMMAND
0 0 20232 9044 9 0 2072 1012 wait4 S tty3 0:00 \_ /bin/sh /usr/local/libexec/ipsec/barf
0 0 20291 20232 9 0 1488 472 pipe_w S tty3 0:00 \_ egrep -i ppid|pluto|ipsec|klips
1 0 20017 1 9 0 2068 960 wait4 S tty2 0:00 /bin/sh /usr/local/lib/ipsec/_plutorun --debug all --uniqueids yes --dump --opts --stderrlog --wait no --pre --post --log daemon.error --pid /var/run/pluto.pid
1 0 20019 20017 9 0 2068 980 wait4 S tty2 0:00 \_ /bin/sh /usr/local/lib/ipsec/_plutorun --debug all --uniqueids yes --dump --opts --stderrlog --wait no --pre --post --log daemon.error --pid /var/run/pluto.pid
4 0 20021 20019 9 0 2084 956 do_sel S tty2 0:03 | \_ /usr/local/libexec/ipsec/pluto --nofork --secretsfile /etc/ipsec.secrets --policygroupsdir /etc/ipsec.d/policies --debug-all --uniqueids
0 0 20028 20021 9 0 1424 252 do_sel S tty2 0:00 | \_ _pluto_adns -d
0 0 20020 20017 8 0 2044 972 pipe_w S tty2 0:00 \_ /bin/sh /usr/local/lib/ipsec/_plutoload --wait no --post
0 0 20018 1 9 0 1360 376 pipe_w S tty2 0:00 logger -s -p daemon.error -t ipsec__plutorun
+ _________________________ ipsec/showdefaults
+ ipsec showdefaults
# no default route
+ _________________________ ipsec/conf
+ ipsec _include /etc/ipsec.conf
+ ipsec _keycensor
#< /etc/ipsec.conf 1
# /etc/ipsec.conf - FreeS/WAN IPsec configuration file
version 2.0 # conforms to second version of ipsec.conf specification
# ------------------------------------------------------------------
# BASIC CONFIGURATION
# ------------------------------------------------------------------
config setup
interfaces="ipsec0=eth0" # Virtual/physical interfaces
klipsdebug=all # Debug KLIPS
plutodebug=all # Debug PLUTO
manualstart= # Manually-keyed conns to start automatically
forwardcontrol=no # Force IP forwarding
rp_filter=0 # DISABLE reverse path filtering
pluto=yes # Start PLUTO
# ------------------------------------------------------------------
# POLICY GROUP settings
# ------------------------------------------------------------------
conn block
auto=ignore
conn private
auto=ignore
conn private-or-clear
auto=ignore
conn clear-or-private
auto=ignore
conn clear
auto=ignore
conn packetdefault
auto=ignore
# ------------------------------------------------------------------
# Connections
# ------------------------------------------------------------------
#
# JEANNOT/FRANCK VPN connection (PSK/AUTO)
#
conn jeannot_franck_psk
left=W.X.Y.Z
leftsubnet=192.168.1.0/24
leftnexthop=W.X.Y.1
right=E.F.G.H
rightsubnet=10.1.1.0/24
rightnexthop=E.F.G.1
keyexchange=ike
ikelifetime=240m
keylife=60m
pfs=yes
compress=no
authby=secret
auto=ignore
#
# JEANNOT/FRANCK VPN connection (RSA/AUTO)
#
conn jeannot_franck_rsa
left=W.X.Y.Z
leftsubnet=192.168.1.0/24
leftnexthop=W.X.Y.1
leftrsasigkey=SOME_CENSORED_JEANNOT_PUBLIC_RSA_KEY
right=E.F.G.H
rightsubnet=10.1.1.0/24
rightnexthop=E.F.G.1
rightrsasigkey=SOME_CENSORED_FRANCK_PUBLIC_RSA_KEY
keyexchange=ike
ikelifetime=240m
keylife=60m
pfs=yes
compress=no
authby=rsasig
auto=ignore
#
# JEANNOT/CHRISTIAN VPN connection (PSK/AUTO) [NOTWORKINGYET]
#
conn jeannot_christian_psk_auto
left=W.X.Y.Z
leftsubnet=192.168.1.0/24
leftnexthop=W.X.Y.1
right=A.B.C.D
rightsubnet=192.168.0.0/24
rightnexthop=A.B.C.1
keyexchange=ike
ikelifetime=240m
keylife=60m
pfs=yes
compress=no
authby=secret
auto=ignore
#
# JEANNOT/CHRISTIAN VPN connection (MANUAL) [UNTESTED]
#
conn jeannot_christian_psk_manual
left=W.X.Y.Z
leftsubnet=192.168.1.0/24
leftnexthop=W.X.Y.1
right=A.B.C.D
rightsubnet=192.168.0.0/24
rightnexthop=A.B.C.1
auto=ignore
spi=0x666 # SPI number used for connection
esp=3des-md5-96 # ESP enc/auth algorithm (3des-md5-96/3des-sha1-96)
enckey=[sums to 82af...]
espauthkey=[sums to 5ed0...]
+ _________________________ ipsec/secrets
+ ipsec _include /etc/ipsec.secrets
+ ipsec _secretcensor
#< /etc/ipsec.secrets 1
W.X.Y.Z A.B.C.D : PSK "[sums to 62ed...]"
W.X.Y.Z E.F.G.H : PSK "[sums to 6998...]"
: RSA {
# RSA 2192 bits WXYZ-FQDN-NAME Sun Dec 14 15:24:08 2003
# for signatures only, UNSAFE FOR ENCRYPTION
#pubkey=[keyid AQOBtEhl3]
Modulus: [...]
PublicExponent: [...]
# everything after this point is secret
PrivateExponent: [...]
Prime1: [...]
Prime2: [...]
Exponent1: [...]
Exponent2: [...]
Coefficient: [...]
}
# do not change the indenting of that "[sums to 7d9d...]"
+ '[' /etc/ipsec.d/policies ']'
++ basename /etc/ipsec.d/policies/block
+ base=block
+ _________________________ ipsec/policies/block
+ cat /etc/ipsec.d/policies/block
# This file defines the set of CIDRs (network/mask-length) to which
# communication should never be allowed.
#
# See /usr/local/share/doc/freeswan/policygroups.html for details.
#
# $Id: block.in,v 1.4 2003/02/17 02:22:15 mcr Exp $
#
++ basename /etc/ipsec.d/policies/clear
+ base=clear
+ _________________________ ipsec/policies/clear
+ cat /etc/ipsec.d/policies/clear
# This file defines the set of CIDRs (network/mask-length) to which
# communication should always be in the clear.
#
# See /usr/local/share/doc/freeswan/policygroups.html for details.
#
# $Id: clear.in,v 1.4 2003/02/17 02:22:15 mcr Exp $
#
++ basename /etc/ipsec.d/policies/clear-or-private
+ base=clear-or-private
+ _________________________ ipsec/policies/clear-or-private
+ cat /etc/ipsec.d/policies/clear-or-private
# This file defines the set of CIDRs (network/mask-length) to which
# we will communicate in the clear, or, if the other side initiates IPSEC,
# using encryption. This behaviour is also called "Opportunistic Responder".
#
# See /usr/local/share/doc/freeswan/policygroups.html for details.
#
# $Id: clear-or-private.in,v 1.4 2003/02/17 02:22:15 mcr Exp $
#
++ basename /etc/ipsec.d/policies/private
+ base=private
+ _________________________ ipsec/policies/private
+ cat /etc/ipsec.d/policies/private
# This file defines the set of CIDRs (network/mask-length) to which
# communication should always be private (i.e. encrypted).
# See /usr/local/share/doc/freeswan/policygroups.html for details.
#
# $Id: private.in,v 1.4 2003/02/17 02:22:15 mcr Exp $
#
++ basename /etc/ipsec.d/policies/private-or-clear
+ base=private-or-clear
+ _________________________ ipsec/policies/private-or-clear
+ cat /etc/ipsec.d/policies/private-or-clear
# This file defines the set of CIDRs (network/mask-length) to which
# communication should be private, if possible, but in the clear otherwise.
#
# If the target has a TXT (later IPSECKEY) record that specifies
# authentication material, we will require private (i.e. encrypted)
# communications. If no such record is found, communications will be
# in the clear.
#
# See /usr/local/share/doc/freeswan/policygroups.html for details.
#
# $Id: private-or-clear.in,v 1.5 2003/02/17 02:22:15 mcr Exp $
#
0.0.0.0/0
+ _________________________ ipsec/ls-libdir
+ ls -l /usr/local/lib/ipsec
total 192
-rwxr-xr-x 1 root root 14890 Dec 7 17:12 _confread
-rwxr-xr-x 1 root root 47399 Dec 7 17:12 _copyright
-rwxr-xr-x 1 root root 2379 Dec 7 17:12 _include
-rwxr-xr-x 1 root root 1475 Dec 7 17:12 _keycensor
-rwxr-xr-x 1 root root 67961 Dec 7 17:12 _pluto_adns
-rwxr-xr-x 1 root root 3586 Dec 7 17:12 _plutoload
-rwxr-xr-x 1 root root 5165 Dec 7 17:12 _plutorun
-rwxr-xr-x 1 root root 9719 Dec 7 17:12 _realsetup
-rwxr-xr-x 1 root root 1975 Dec 7 17:12 _secretcensor
-rwxr-xr-x 1 root root 8065 Dec 7 17:12 _startklips
-rwxr-xr-x 1 root root 7959 Dec 7 17:12 _updown
-rwxr-xr-x 1 root root 1942 Dec 7 17:12 ipsec_pr.template
+ _________________________ ipsec/ls-execdir
+ ls -l /usr/local/libexec/ipsec
total 2976
-rwxr-xr-x 1 root root 12195 Dec 7 17:12 auto
-rwxr-xr-x 1 root root 8591 Dec 7 17:12 barf
-rwxr-xr-x 1 root root 816 Dec 7 17:12 calcgoo
-rwxr-xr-x 1 root root 309923 Dec 7 17:11 eroute
-rwxr-xr-x 1 root root 177832 Dec 7 17:11 klipsdebug
-rwxr-xr-x 1 root root 2449 Dec 7 17:12 look
-rwxr-xr-x 1 root root 7130 Dec 7 17:12 mailkey
-rwxr-xr-x 1 root root 16188 Dec 7 17:12 manual
-rwxr-xr-x 1 root root 1874 Dec 7 17:12 newhostkey
-rwxr-xr-x 1 root root 148261 Dec 7 17:11 pf_key
-rwxr-xr-x 1 root root 1274034 Dec 7 17:12 pluto
-rwxr-xr-x 1 root root 52827 Dec 7 17:12 ranbits
-rwxr-xr-x 1 root root 84925 Dec 7 17:12 rsasigkey
-rwxr-xr-x 1 root root 17602 Dec 7 17:12 send-pr
lrwxrwxrwx 1 root root 15 Dec 7 17:12 setup -> /etc/rc.d/ipsec
-rwxr-xr-x 1 root root 1048 Dec 7 17:12 showdefaults
-rwxr-xr-x 1 root root 4321 Dec 7 17:12 showhostkey
-rwxr-xr-x 1 root root 322083 Dec 7 17:11 spi
-rwxr-xr-x 1 root root 252904 Dec 7 17:11 spigrp
-rwxr-xr-x 1 root root 51311 Dec 7 17:11 tncfg
-rwxr-xr-x 1 root root 9292 Dec 7 17:12 verify
-rwxr-xr-x 1 root root 206657 Dec 7 17:12 whack
+ _________________________ ipsec/updowns
++ ls /usr/local/libexec/ipsec
++ egrep updown
+ _________________________ proc/net/dev
+ cat /proc/net/dev
Inter-| Receive | Transmit
face |bytes packets errs drop fifo frame compressed multicast|bytes packets errs drop fifo colls carrier compressed
lo: 3320 43 0 0 0 0 0 0 3320 43 0 0 0 0 0 0
eth0:1329684391 11449598 0 0 0 0 0 0 273551320 2992995 0 0 1 0 0 0
eth1:273991271 3087143 0 0 0 0 0 0 739790148 1915068 0 0 8 0 0 0
ipsec0: 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
ipsec1: 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
ipsec2: 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
ipsec3: 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
+ _________________________ proc/net/route
+ cat /proc/net/route
Iface Destination Gateway Flags RefCnt Use Metric Mask MTU Window IRTT
eth0 00AED98E 00000000 0001 0 0 0 00FFFFFF 0 0 0
ipsec0 00AED98E 00000000 0001 0 0 0 00FFFFFF 0 0 0
eth1 0001A8C0 00000000 0001 0 0 0 00FFFFFF 0 0 0
lo 0000007F 00000000 0001 0 0 0 000000FF 0 0 0
eth0 00000000 01AED98E 0003 0 0 0 00000000 0 0 0
+ _________________________ proc/sys/net/ipv4/ip_forward
+ cat /proc/sys/net/ipv4/ip_forward
1
+ _________________________ proc/sys/net/ipv4/conf/star-rp_filter
+ cd /proc/sys/net/ipv4/conf
+ egrep '^' all/rp_filter default/rp_filter eth0/rp_filter eth1/rp_filter ipsec0/rp_filter lo/rp_filter
all/rp_filter:0
default/rp_filter:0
eth0/rp_filter:0
eth1/rp_filter:0
ipsec0/rp_filter:0
lo/rp_filter:0
+ _________________________ uname-a
+ uname -a
Linux deimos 2.4.23-ipsec #2 Sun Dec 7 14:59:51 EST 2003 i486 unknown unknown GNU/Linux
+ _________________________ redhat-release
+ test -r /etc/redhat-release
+ _________________________ proc/net/ipsec_version
+ cat /proc/net/ipsec_version
FreeS/WAN version: 2.04
+ _________________________ iptables/list
+ iptables -L -v -n
Chain INPUT (policy DROP 3323 packets, 738K bytes)
pkts bytes target prot opt in out source destination
35 2344 ACCEPT all -- lo * 0.0.0.0/0 0.0.0.0/0
6447 648K ACCEPT all -- eth1 * 0.0.0.0/0 0.0.0.0/0
0 0 droplog_reserved all -- eth0 * 1.0.0.0/8 0.0.0.0/0
0 0 droplog_reserved all -- eth0 * 23.0.0.0/8 0.0.0.0/0
0 0 droplog_reserved all -- eth0 * 31.0.0.0/8 0.0.0.0/0
0 0 droplog_reserved all -- eth0 * 96.0.0.0/3 0.0.0.0/0
0 0 droplog_reserved all -- eth0 * 127.0.0.0/8 0.0.0.0/0
0 0 droplog_reserved all -- eth0 * 128.0.0.0/16 0.0.0.0/0
0 0 droplog_reserved all -- eth0 * 128.9.64.26 0.0.0.0/0
0 0 droplog_reserved all -- eth0 * 128.66.0.0/16 0.0.0.0/0
0 0 droplog_reserved all -- eth0 * 172.16.0.0/12 0.0.0.0/0
0 0 droplog_reserved all -- eth0 * 191.255.0.0/16 0.0.0.0/0
0 0 droplog_reserved all -- eth0 * 197.0.0.0/16 0.0.0.0/0
0 0 droplog_reserved all -- eth0 * 201.0.0.0/8 0.0.0.0/0
0 0 droplog_reserved all -- eth0 * 223.255.255.0/24 0.0.0.0/0
0 0 droplog_reserved all -- eth0 * 240.0.0.0/5 0.0.0.0/0
0 0 droplog_reserved all -- eth0 * 248.0.0.0/5 0.0.0.0/0
367K 21M ACCEPT icmp -- eth0 * 0.0.0.0/0 W.X.Y.Z icmp type 3
0 0 ACCEPT icmp -- eth0 * 0.0.0.0/0 W.X.Y.Z icmp type 11
0 0 ACCEPT tcp -- eth0 * 0.0.0.0/0 W.X.Y.Z tcp spt:123 dpt:123
1145 87020 ACCEPT udp -- eth0 * 0.0.0.0/0 W.X.Y.Z udp spt:123 dpt:123
0 0 ACCEPT tcp -- eth0 * 0.0.0.0/0 W.X.Y.Z tcp dpt:500
96 12364 ACCEPT udp -- eth0 * 0.0.0.0/0 W.X.Y.Z udp dpt:500
66 10792 ACCEPT esp -- eth0 * 0.0.0.0/0 W.X.Y.Z
0 0 ACCEPT ah -- eth0 * 0.0.0.0/0 W.X.Y.Z
Chain FORWARD (policy DROP 9 packets, 1215 bytes)
pkts bytes target prot opt in out source destination
1181K 212M ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED
85113 3310K LOG all -- * * 0.0.0.0/0 0.0.0.0/0 limit: avg 30/min burst 30 LOG flags 0 level 7 prefix `IPT FWD packet died: '
1558K 72M ACCEPT all -- eth1 eth0 0.0.0.0/0 0.0.0.0/0
1 84 ACCEPT all -- eth1 ipsec0 192.168.1.0/24 10.1.1.0/24
7 312 ACCEPT all -- eth1 ipsec0 192.168.1.0/24 192.168.0.0/24
0 0 droplog_lan tcp -- * eth0 0.0.0.0/0 0.0.0.0/0 tcp dpt:111
0 0 droplog_lan udp -- * eth0 0.0.0.0/0 0.0.0.0/0 udp dpt:111
0 0 droplog_lan tcp -- * eth0 0.0.0.0/0 0.0.0.0/0 tcp dpts:137:139
0 0 droplog_lan udp -- * eth0 0.0.0.0/0 0.0.0.0/0 udp dpts:137:139
0 0 droplog_lan tcp -- * eth0 0.0.0.0/0 0.0.0.0/0 tcp dpt:635
0 0 droplog_lan udp -- * eth0 0.0.0.0/0 0.0.0.0/0 udp dpt:635
2 96 ACCEPT all -- ipsec0 eth1 10.1.1.0/24 192.168.1.0/24
0 0 ACCEPT all -- ipsec0 eth1 192.168.0.0/24 192.168.1.0/24
5 240 ACCEPT tcp -- eth0 eth1 0.0.0.0/0 0.0.0.0/0 tcp dpt:8000 state NEW,RELATED,ESTABLISHED
0 0 ACCEPT udp -- eth0 eth1 0.0.0.0/0 0.0.0.0/0 udp dpt:8000 state NEW,RELATED,ESTABLISHED
Chain OUTPUT (policy DROP 2 packets, 168 bytes)
pkts bytes target prot opt in out source destination
35 2344 ACCEPT all -- * lo 0.0.0.0/0 0.0.0.0/0
5555 428K ACCEPT all -- * eth1 0.0.0.0/0 0.0.0.0/0
0 0 droplog_stuffed all -- * eth0 0.0.0.0/0 192.168.1.0/24
0 0 droplog_stuffed all -- * eth0 192.168.1.0/24 0.0.0.0/0
2 464 ACCEPT icmp -- * eth0 W.X.Y.Z 0.0.0.0/0
0 0 ACCEPT tcp -- * eth0 W.X.Y.Z 0.0.0.0/0 tcp spt:68 dpt:67
0 0 ACCEPT udp -- * eth0 W.X.Y.Z 0.0.0.0/0 udp spt:68 dpt:67
0 0 ACCEPT tcp -- * eth0 W.X.Y.Z 0.0.0.0/0 tcp spt:123 dpt:123
1154 87704 ACCEPT udp -- * eth0 W.X.Y.Z 0.0.0.0/0 udp spt:123 dpt:123
0 0 ACCEPT tcp -- * eth0 W.X.Y.Z 0.0.0.0/0 tcp spt:500
213 38544 ACCEPT udp -- * eth0 W.X.Y.Z 0.0.0.0/0 udp spt:500
102 119K ACCEPT esp -- * eth0 W.X.Y.Z 0.0.0.0/0
0 0 ACCEPT ah -- * eth0 W.X.Y.Z 0.0.0.0/0
Chain droplog_lan (6 references)
pkts bytes target prot opt in out source destination
0 0 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 LOG flags 0 level 4 prefix `DROP:: LAN packet: '
0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0
Chain droplog_reserved (15 references)
pkts bytes target prot opt in out source destination
0 0 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 LOG flags 0 level 4 prefix `DROP:: reserved IP: '
0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0
Chain droplog_stuffed (2 references)
pkts bytes target prot opt in out source destination
0 0 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 LOG flags 0 level 4 prefix `DROP:: stuffed packet: '
0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0
+ _________________________ ipchains/list
+ ipchains -L -v -n
/usr/local/libexec/ipsec/barf: line 236: ipchains: command not found
+ _________________________ ipfwadm/forward
+ ipfwadm -F -l -n -e
/usr/local/libexec/ipsec/barf: line 238: ipfwadm: command not found
+ _________________________ ipfwadm/input
+ ipfwadm -I -l -n -e
/usr/local/libexec/ipsec/barf: line 240: ipfwadm: command not found
+ _________________________ ipfwadm/output
+ ipfwadm -O -l -n -e
/usr/local/libexec/ipsec/barf: line 242: ipfwadm: command not found
+ _________________________ iptables/nat
+ iptables -t nat -L -v -n
Chain PREROUTING (policy ACCEPT 1269K packets, 55M bytes)
pkts bytes target prot opt in out source destination
5 240 DNAT tcp -- eth0 * 0.0.0.0/0 W.X.Y.Z tcp dpt:8000 to:192.168.1.200:8000
0 0 DNAT udp -- eth0 * 0.0.0.0/0 W.X.Y.Z udp dpt:8000 to:192.168.1.200:8000
Chain POSTROUTING (policy ACCEPT 5835 packets, 446K bytes)
pkts bytes target prot opt in out source destination
1 84 ACCEPT all -- * ipsec0 192.168.1.0/24 10.1.1.0/24
7 312 ACCEPT all -- * ipsec0 192.168.1.0/24 192.168.0.0/24
1260K 54M MASQUERADE all -- * eth0 192.168.1.0/24 0.0.0.0/0
Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
+ _________________________ ipchains/masq
+ ipchains -M -L -v -n
/usr/local/libexec/ipsec/barf: line 246: ipchains: command not found
+ _________________________ ipfwadm/masq
+ ipfwadm -M -l -n -e
/usr/local/libexec/ipsec/barf: line 248: ipfwadm: command not found
+ _________________________ iptables/mangle
+ iptables -t mangle -L -v -n
Chain PREROUTING (policy ACCEPT 3117K packets, 306M bytes)
pkts bytes target prot opt in out source destination
Chain INPUT (policy ACCEPT 378K packets, 22M bytes)
pkts bytes target prot opt in out source destination
Chain FORWARD (policy ACCEPT 2739K packets, 284M bytes)
pkts bytes target prot opt in out source destination
Chain OUTPUT (policy ACCEPT 7063 packets, 676K bytes)
pkts bytes target prot opt in out source destination
Chain POSTROUTING (policy ACCEPT 2750K packets, 285M bytes)
pkts bytes target prot opt in out source destination
+ _________________________ proc/modules
+ cat /proc/modules
ipsec 149056 2
ipt_multiport 664 0 (unused)
ipt_limit 856 1
ipt_state 536 3
iptable_filter 1644 1
iptable_mangle 2072 0 (unused)
ip_nat_irc 2128 0 (unused)
ip_nat_ftp 2704 0 (unused)
ip_conntrack_irc 3024 1
ip_conntrack_ftp 3856 1
ipt_MASQUERADE 1368 1
iptable_nat 15736 3 [ip_nat_irc ip_nat_ftp ipt_MASQUERADE]
ip_conntrack 19592 4 [ipt_state ip_nat_irc ip_nat_ftp ip_conntrack_irc ip_conntrack_ftp ipt_MASQUERADE iptable_nat]
ipt_LOG 3448 4
ip_tables 12096 10 [ipt_multiport ipt_limit ipt_state iptable_filter iptable_mangle ipt_MASQUERADE iptable_nat ipt_LOG]
8139too 13384 2
mii 2304 0 [8139too]
crc32 2880 0 [8139too]
+ _________________________ proc/meminfo
+ cat /proc/meminfo
total: used: free: shared: buffers: cached:
Mem: 23031808 22016000 1015808 0 335872 9089024
Swap: 131567616 2256896 129310720
MemTotal: 22492 kB
MemFree: 992 kB
MemShared: 0 kB
Buffers: 328 kB
Cached: 8276 kB
SwapCached: 600 kB
Active: 7252 kB
Inactive: 3088 kB
HighTotal: 0 kB
HighFree: 0 kB
LowTotal: 22492 kB
LowFree: 992 kB
SwapTotal: 128484 kB
SwapFree: 126280 kB
+ _________________________ dev/ipsec-ls
+ ls -l '/dev/ipsec*'
ls: /dev/ipsec*: No such file or directory
+ _________________________ proc/net/ipsec-ls
+ ls -l /proc/net/ipsec_eroute /proc/net/ipsec_klipsdebug /proc/net/ipsec_klipsdebug /proc/net/ipsec_klipsdebug /proc/net/ipsec_klipsdebug /proc/net/ipsec_klipsdebug /proc/net/ipsec_klipsdebug /proc/net/ipsec_klipsdebug /proc/net/ipsec_klipsdebug /proc/net/ipsec_klipsdebug /proc/net/ipsec_klipsdebug /proc/net/ipsec_klipsdebug /proc/net/ipsec_klipsdebug /proc/net/ipsec_klipsdebug /proc/net/ipsec_klipsdebug /proc/net/ipsec_klipsdebug /proc/net/ipsec_klipsdebug /proc/net/ipsec_klipsdebug /proc/net/ipsec_klipsdebug /proc/net/ipsec_klipsdebug /proc/net/ipsec_klipsdebug /proc/net/ipsec_klipsdebug /proc/net/ipsec_klipsdebug /proc/net/ipsec_klipsdebug /proc/net/ipsec_klipsdebug /proc/net/ipsec_klipsdebug /proc/net/ipsec_klipsdebug /proc/net/ipsec_klipsdebug /proc/net/ipsec_klipsdebug /proc/net/ipsec_klipsdebug /proc/net/ipsec_klipsdebug /proc/net/ipsec_klipsdebug /proc/net/ipsec_klipsdebug /proc/net/ipsec_klipsdebug /proc/net/ipsec_klipsdebug /proc/net/ipsec_klipsdebug /proc/net/ipsec_klipsdebug /proc/net/ipsec_klipsdebug /proc/net/ipsec_klipsdebug /proc/net/ipsec_klipsdebug /proc/net/ipsec_klipsdebug /proc/net/ipsec_klipsdebug /proc/net/ipsec_klipsdebug /proc/net/ipsec_klipsdebug /proc/net/ipsec_klipsdebug /proc/net/ipsec_klipsdebug /proc/net/ipsec_klipsdebug /proc/net/ipsec_klipsdebug /proc/net/ipsec_klipsdebug /proc/net/ipsec_klipsdebug /proc/net/ipsec_klipsdebug /proc/net/ipsec_klipsdebug /proc/net/ipsec_klipsdebug /proc/net/ipsec_klipsdebug /proc/net/ipsec_spi /proc/net/ipsec_spigrp /proc/net/ipsec_tncfg /proc/net/ipsec_version
lrwxrwxrwx 1 root root 16 Dec 17 21:24 /proc/net/ipsec_eroute -> ipsec/eroute/all
lrwxrwxrwx 1 root root 16 Dec 17 21:24 /proc/net/ipsec_klipsdebug -> ipsec/klipsdebug
lrwxrwxrwx 1 root root 16 Dec 17 21:24 /proc/net/ipsec_klipsdebug -> ipsec/klipsdebug
lrwxrwxrwx 1 root root 16 Dec 17 21:24 /proc/net/ipsec_klipsdebug -> ipsec/klipsdebug
lrwxrwxrwx 1 root root 16 Dec 17 21:24 /proc/net/ipsec_klipsdebug -> ipsec/klipsdebug
lrwxrwxrwx 1 root root 16 Dec 17 21:24 /proc/net/ipsec_klipsdebug -> ipsec/klipsdebug
lrwxrwxrwx 1 root root 16 Dec 17 21:24 /proc/net/ipsec_klipsdebug -> ipsec/klipsdebug
lrwxrwxrwx 1 root root 16 Dec 17 21:24 /proc/net/ipsec_klipsdebug -> ipsec/klipsdebug
lrwxrwxrwx 1 root root 16 Dec 17 21:24 /proc/net/ipsec_klipsdebug -> ipsec/klipsdebug
lrwxrwxrwx 1 root root 16 Dec 17 21:24 /proc/net/ipsec_klipsdebug -> ipsec/klipsdebug
lrwxrwxrwx 1 root root 16 Dec 17 21:24 /proc/net/ipsec_klipsdebug -> ipsec/klipsdebug
lrwxrwxrwx 1 root root 16 Dec 17 21:24 /proc/net/ipsec_klipsdebug -> ipsec/klipsdebug
lrwxrwxrwx 1 root root 16 Dec 17 21:24 /proc/net/ipsec_klipsdebug -> ipsec/klipsdebug
lrwxrwxrwx 1 root root 16 Dec 17 21:24 /proc/net/ipsec_klipsdebug -> ipsec/klipsdebug
lrwxrwxrwx 1 root root 16 Dec 17 21:24 /proc/net/ipsec_klipsdebug -> ipsec/klipsdebug
lrwxrwxrwx 1 root root 16 Dec 17 21:24 /proc/net/ipsec_klipsdebug -> ipsec/klipsdebug
lrwxrwxrwx 1 root root 16 Dec 17 21:24 /proc/net/ipsec_klipsdebug -> ipsec/klipsdebug
lrwxrwxrwx 1 root root 16 Dec 17 21:24 /proc/net/ipsec_klipsdebug -> ipsec/klipsdebug
lrwxrwxrwx 1 root root 16 Dec 17 21:24 /proc/net/ipsec_klipsdebug -> ipsec/klipsdebug
lrwxrwxrwx 1 root root 16 Dec 17 21:24 /proc/net/ipsec_klipsdebug -> ipsec/klipsdebug
lrwxrwxrwx 1 root root 16 Dec 17 21:24 /proc/net/ipsec_klipsdebug -> ipsec/klipsdebug
lrwxrwxrwx 1 root root 16 Dec 17 21:24 /proc/net/ipsec_klipsdebug -> ipsec/klipsdebug
lrwxrwxrwx 1 root root 16 Dec 17 21:24 /proc/net/ipsec_klipsdebug -> ipsec/klipsdebug
lrwxrwxrwx 1 root root 16 Dec 17 21:24 /proc/net/ipsec_klipsdebug -> ipsec/klipsdebug
lrwxrwxrwx 1 root root 16 Dec 17 21:24 /proc/net/ipsec_klipsdebug -> ipsec/klipsdebug
lrwxrwxrwx 1 root root 16 Dec 17 21:24 /proc/net/ipsec_klipsdebug -> ipsec/klipsdebug
lrwxrwxrwx 1 root root 16 Dec 17 21:24 /proc/net/ipsec_klipsdebug -> ipsec/klipsdebug
lrwxrwxrwx 1 root root 16 Dec 17 21:24 /proc/net/ipsec_klipsdebug -> ipsec/klipsdebug
lrwxrwxrwx 1 root root 16 Dec 17 21:24 /proc/net/ipsec_klipsdebug -> ipsec/klipsdebug
lrwxrwxrwx 1 root root 16 Dec 17 21:24 /proc/net/ipsec_klipsdebug -> ipsec/klipsdebug
lrwxrwxrwx 1 root root 16 Dec 17 21:24 /proc/net/ipsec_klipsdebug -> ipsec/klipsdebug
lrwxrwxrwx 1 root root 16 Dec 17 21:24 /proc/net/ipsec_klipsdebug -> ipsec/klipsdebug
lrwxrwxrwx 1 root root 16 Dec 17 21:24 /proc/net/ipsec_klipsdebug -> ipsec/klipsdebug
lrwxrwxrwx 1 root root 16 Dec 17 21:24 /proc/net/ipsec_klipsdebug -> ipsec/klipsdebug
lrwxrwxrwx 1 root root 16 Dec 17 21:24 /proc/net/ipsec_klipsdebug -> ipsec/klipsdebug
lrwxrwxrwx 1 root root 16 Dec 17 21:24 /proc/net/ipsec_klipsdebug -> ipsec/klipsdebug
lrwxrwxrwx 1 root root 16 Dec 17 21:24 /proc/net/ipsec_klipsdebug -> ipsec/klipsdebug
lrwxrwxrwx 1 root root 16 Dec 17 21:24 /proc/net/ipsec_klipsdebug -> ipsec/klipsdebug
lrwxrwxrwx 1 root root 16 Dec 17 21:24 /proc/net/ipsec_klipsdebug -> ipsec/klipsdebug
lrwxrwxrwx 1 root root 16 Dec 17 21:24 /proc/net/ipsec_klipsdebug -> ipsec/klipsdebug
lrwxrwxrwx 1 root root 16 Dec 17 21:24 /proc/net/ipsec_klipsdebug -> ipsec/klipsdebug
lrwxrwxrwx 1 root root 16 Dec 17 21:24 /proc/net/ipsec_klipsdebug -> ipsec/klipsdebug
lrwxrwxrwx 1 root root 16 Dec 17 21:24 /proc/net/ipsec_klipsdebug -> ipsec/klipsdebug
lrwxrwxrwx 1 root root 16 Dec 17 21:24 /proc/net/ipsec_klipsdebug -> ipsec/klipsdebug
lrwxrwxrwx 1 root root 16 Dec 17 21:24 /proc/net/ipsec_klipsdebug -> ipsec/klipsdebug
lrwxrwxrwx 1 root root 16 Dec 17 21:24 /proc/net/ipsec_klipsdebug -> ipsec/klipsdebug
lrwxrwxrwx 1 root root 16 Dec 17 21:24 /proc/net/ipsec_klipsdebug -> ipsec/klipsdebug
lrwxrwxrwx 1 root root 16 Dec 17 21:24 /proc/net/ipsec_klipsdebug -> ipsec/klipsdebug
lrwxrwxrwx 1 root root 16 Dec 17 21:24 /proc/net/ipsec_klipsdebug -> ipsec/klipsdebug
lrwxrwxrwx 1 root root 16 Dec 17 21:24 /proc/net/ipsec_klipsdebug -> ipsec/klipsdebug
lrwxrwxrwx 1 root root 16 Dec 17 21:24 /proc/net/ipsec_klipsdebug -> ipsec/klipsdebug
lrwxrwxrwx 1 root root 16 Dec 17 21:24 /proc/net/ipsec_klipsdebug -> ipsec/klipsdebug
lrwxrwxrwx 1 root root 16 Dec 17 21:24 /proc/net/ipsec_klipsdebug -> ipsec/klipsdebug
lrwxrwxrwx 1 root root 16 Dec 17 21:24 /proc/net/ipsec_klipsdebug -> ipsec/klipsdebug
lrwxrwxrwx 1 root root 13 Dec 17 21:24 /proc/net/ipsec_spi -> ipsec/spi/all
lrwxrwxrwx 1 root root 16 Dec 17 21:24 /proc/net/ipsec_spigrp -> ipsec/spigrp/all
lrwxrwxrwx 1 root root 11 Dec 17 21:24 /proc/net/ipsec_tncfg -> ipsec/tncfg
lrwxrwxrwx 1 root root 13 Dec 17 21:24 /proc/net/ipsec_version -> ipsec/version
+ _________________________ usr/src/linux/.config
+ test -f /usr/src/linux/.config
+ egrep 'IP|NETLINK' /usr/src/linux/.config
# CONFIG_MWINCHIPC6 is not set
# CONFIG_MWINCHIP2 is not set
# CONFIG_MWINCHIP3D is not set
CONFIG_SYSVIPC=y
# CONFIG_MD_MULTIPATH is not set
# CONFIG_NETLINK_DEV is not set
CONFIG_IP_MULTICAST=y
CONFIG_IP_ADVANCED_ROUTER=y
# CONFIG_IP_MULTIPLE_TABLES is not set
# CONFIG_IP_ROUTE_MULTIPATH is not set
# CONFIG_IP_ROUTE_TOS is not set
# CONFIG_IP_ROUTE_VERBOSE is not set
# CONFIG_IP_PNP is not set
CONFIG_NET_IPIP=m
CONFIG_NET_IPGRE=m
CONFIG_NET_IPGRE_BROADCAST=y
CONFIG_IP_MROUTE=y
# CONFIG_IP_PIMSM_V1 is not set
# CONFIG_IP_PIMSM_V2 is not set
# IP: Netfilter Configuration
CONFIG_IP_NF_CONNTRACK=m
CONFIG_IP_NF_FTP=m
CONFIG_IP_NF_AMANDA=m
CONFIG_IP_NF_TFTP=m
CONFIG_IP_NF_IRC=m
CONFIG_IP_NF_IPTABLES=m
CONFIG_IP_NF_MATCH_LIMIT=m
CONFIG_IP_NF_MATCH_MAC=m
CONFIG_IP_NF_MATCH_PKTTYPE=m
CONFIG_IP_NF_MATCH_MARK=m
CONFIG_IP_NF_MATCH_MULTIPORT=m
CONFIG_IP_NF_MATCH_TOS=m
# CONFIG_IP_NF_MATCH_RECENT is not set
CONFIG_IP_NF_MATCH_ECN=m
CONFIG_IP_NF_MATCH_DSCP=m
CONFIG_IP_NF_MATCH_AH_ESP=m
CONFIG_IP_NF_MATCH_LENGTH=m
CONFIG_IP_NF_MATCH_TTL=m
CONFIG_IP_NF_MATCH_TCPMSS=m
CONFIG_IP_NF_MATCH_HELPER=m
CONFIG_IP_NF_MATCH_STATE=m
CONFIG_IP_NF_MATCH_CONNTRACK=m
CONFIG_IP_NF_FILTER=m
CONFIG_IP_NF_TARGET_REJECT=m
CONFIG_IP_NF_NAT=m
CONFIG_IP_NF_NAT_NEEDED=y
CONFIG_IP_NF_TARGET_MASQUERADE=m
CONFIG_IP_NF_TARGET_REDIRECT=m
CONFIG_IP_NF_NAT_AMANDA=m
# CONFIG_IP_NF_NAT_LOCAL is not set
CONFIG_IP_NF_NAT_IRC=m
CONFIG_IP_NF_NAT_FTP=m
CONFIG_IP_NF_NAT_TFTP=m
CONFIG_IP_NF_MANGLE=m
CONFIG_IP_NF_TARGET_TOS=m
CONFIG_IP_NF_TARGET_ECN=m
CONFIG_IP_NF_TARGET_DSCP=m
CONFIG_IP_NF_TARGET_MARK=m
CONFIG_IP_NF_TARGET_LOG=m
CONFIG_IP_NF_TARGET_ULOG=m
CONFIG_IP_NF_TARGET_TCPMSS=m
CONFIG_IP_NF_ARPTABLES=m
CONFIG_IP_NF_ARPFILTER=m
CONFIG_IP_NF_ARP_MANGLE=m
# CONFIG_IP_NF_COMPAT_IPCHAINS is not set
# CONFIG_IP_NF_COMPAT_IPFWADM is not set
# IP: Virtual Server Configuration
# CONFIG_IP_VS is not set
CONFIG_IPX=m
CONFIG_IPX_INTERN=y
CONFIG_IPSEC=m
CONFIG_IPSEC_IPIP=y
CONFIG_IPSEC_AH=y
CONFIG_IPSEC_AUTH_HMAC_MD5=y
CONFIG_IPSEC_AUTH_HMAC_SHA1=y
CONFIG_IPSEC_ESP=y
CONFIG_IPSEC_ENC_3DES=y
CONFIG_IPSEC_IPCOMP=y
# CONFIG_IPSEC_DEBUG is not set
# CONFIG_IDEDMA_PCI_WIP is not set
# CONFIG_IDE_CHIPSETS is not set
# CONFIG_TULIP is not set
# CONFIG_PLIP is not set
# CONFIG_SLIP is not set
# CONFIG_IPMI_HANDLER is not set
# CONFIG_IPMI_PANIC_EVENT is not set
# CONFIG_IPMI_DEVICE_INTERFACE is not set
# CONFIG_IPMI_KCS is not set
# CONFIG_IPMI_WATCHDOG is not set
+ _________________________ etc/syslog.conf
+ cat /etc/syslog.conf
# /etc/syslog.conf
# For info about the format of this file, see "man syslog.conf"
# and /usr/doc/sysklogd/README.linux. Note the '-' prefixing some
# of these entries; this omits syncing the file after every logging.
# In the event of a crash, some log information might be lost, so
# if this is a concern to you then you might want to remove the '-'.
# Be advised this will cause a performation loss if you're using
# programs that do heavy logging.
# Uncomment this to see kernel messages on the console.
#kern.* /dev/console
# Log anything 'info' or higher, but lower than 'warn'.
# Exclude authpriv, cron, mail, and news. These are logged elsewhere.
*.info;*.!warn;\
authpriv.none;cron.none;mail.none;news.none -/var/log/messages
# Log anything 'warn' or higher.
# Exclude authpriv, cron, mail, and news. These are logged elsewhere.
*.warn;\
authpriv.none;cron.none;mail.none;news.none -/var/log/syslog
# Debugging information is logged here.
*.=debug -/var/log/debug
# Private authentication message logging:
authpriv.* -/var/log/secure
# Cron related logs:
cron.* -/var/log/cron
# Mail related logs:
mail.* -/var/log/maillog
# Emergency level messages go to all users:
*.emerg *
# This log is for news and uucp errors:
uucp,news.crit -/var/log/spooler
# Uncomment these if you'd like INN to keep logs on everything.
# You won't need this if you don't run INN (the InterNetNews daemon).
#news.=crit -/var/log/news/news.crit
#news.=err -/var/log/news/news.err
#news.notice -/var/log/news/news.notice
+ _________________________ etc/resolv.conf
+ cat /etc/resolv.conf
search mars.lan
nameserver 192.168.1.253
nameserver SOME_PRIMARY_PUBLIC_INTERNET_NAMESERVER
nameserver SOME_SECONDARY_PUBLIC_INTERNET_NAMESERVER
+ _________________________ lib/modules-ls
+ ls -ltr /lib/modules
total 12
drwxr-xr-x 4 root root 4096 Aug 29 03:47 2.4.22
drwxr-xr-x 4 root root 4096 Dec 7 11:27 2.4.23
drwxr-xr-x 4 root root 4096 Dec 7 16:14 2.4.23-ipsec
+ _________________________ proc/ksyms-netif_rx
+ egrep netif_rx /proc/ksyms
c01b0020 netif_rx
+ _________________________ lib/modules-netif_rx
+ modulegoo kernel/net/ipv4/ipip.o netif_rx
+ set +x
2.4.22:
2.4.23: U netif_rx
2.4.23-ipsec: U netif_rx
+ _________________________ kern.debug
+ test -f /var/log/kern.debug
+ _________________________ klog
+ sed -n '319,$p' /var/log/syslog
+ egrep -i 'ipsec|klips|pluto'
+ cat
Dec 17 21:21:19 deimos ipsec_setup: Starting FreeS/WAN IPsec 2.04...
Dec 17 21:21:20 deimos ipsec_setup: Using /lib/modules/2.4.23-ipsec/kernel/ipsec.o
Dec 17 21:21:21 deimos ipsec_setup: klipsdebug=`all' ignored, KLIPS lacks debug facilities
Dec 17 21:21:21 deimos ipsec_setup: KLIPS ipsec0 on eth0 W.X.Y.Z/255.255.255.0 broadcast 255.255.255.255
Dec 17 21:21:24 deimos ipsec_setup: ...FreeS/WAN IPsec started
+ _________________________ plog
+ sed -n '6689,$p' /var/log/secure
+ egrep -i pluto
+ cat
Dec 17 21:21:24 deimos ipsec__plutorun: Starting Pluto subsystem...
Dec 17 21:21:24 deimos pluto[20021]: Starting Pluto (FreeS/WAN Version 2.04 PLUTO_USES_KEYRR)
Dec 17 21:21:24 deimos pluto[20021]: | opening /dev/urandom
Dec 17 21:21:24 deimos pluto[20021]: | inserting event EVENT_REINIT_SECRET, timeout in 3600 seconds
Dec 17 21:21:24 deimos pluto[20021]: | process 20021 listening for PF_KEY_V2 on file descriptor 6
Dec 17 21:21:24 deimos pluto[20021]: Using KLIPS IPsec interface code
Dec 17 21:21:24 deimos pluto[20021]: | finish_pfkey_msg: SADB_REGISTER message 1 for AH
Dec 17 21:21:24 deimos pluto[20021]: | 02 07 00 02 02 00 00 00 01 00 00 00 35 4e 00 00
Dec 17 21:21:24 deimos pluto[20021]: | pfkey_get: SADB_REGISTER message 1
Dec 17 21:21:24 deimos pluto[20021]: | AH registered with kernel.
Dec 17 21:21:24 deimos pluto[20021]: | finish_pfkey_msg: SADB_REGISTER message 2 for ESP
Dec 17 21:21:24 deimos pluto[20021]: | 02 07 00 03 02 00 00 00 02 00 00 00 35 4e 00 00
Dec 17 21:21:24 deimos pluto[20021]: | pfkey_get: SADB_REGISTER message 2
Dec 17 21:21:24 deimos pluto[20021]: | ESP registered with kernel.
Dec 17 21:21:24 deimos pluto[20021]: | finish_pfkey_msg: SADB_REGISTER message 3 for IPCOMP
Dec 17 21:21:24 deimos pluto[20021]: | 02 07 00 0a 02 00 00 00 03 00 00 00 35 4e 00 00
Dec 17 21:21:24 deimos pluto[20021]: | pfkey_get: SADB_REGISTER message 3
Dec 17 21:21:24 deimos pluto[20021]: | IPCOMP registered with kernel.
Dec 17 21:21:24 deimos pluto[20021]: | finish_pfkey_msg: SADB_REGISTER message 4 for IPIP
Dec 17 21:21:24 deimos pluto[20021]: | 02 07 00 09 02 00 00 00 04 00 00 00 35 4e 00 00
Dec 17 21:21:24 deimos pluto[20021]: | pfkey_get: SADB_REGISTER message 4
Dec 17 21:21:24 deimos pluto[20021]: | IPIP registered with kernel.
Dec 17 21:21:24 deimos pluto[20021]: | inserting event EVENT_SHUNT_SCAN, timeout in 120 seconds
Dec 17 21:21:25 deimos pluto[20021]: | inserting event 8??, timeout in 9515 seconds
Dec 17 21:21:25 deimos pluto[20021]: | next event EVENT_SHUNT_SCAN in 119 seconds
Dec 17 21:21:32 deimos pluto[20021]: |
Dec 17 21:21:32 deimos pluto[20021]: | *received whack message
Dec 17 21:21:32 deimos pluto[20021]: | next event EVENT_SHUNT_SCAN in 112 seconds
Dec 17 21:21:35 deimos pluto[20021]: |
Dec 17 21:21:35 deimos pluto[20021]: | *received whack message
Dec 17 21:21:35 deimos pluto[20021]: listening for IKE messages
Dec 17 21:21:35 deimos pluto[20021]: | found lo with address 127.0.0.1
Dec 17 21:21:35 deimos pluto[20021]: | found eth0 with address W.X.Y.Z
Dec 17 21:21:35 deimos pluto[20021]: | found eth1 with address 192.168.1.254
Dec 17 21:21:35 deimos pluto[20021]: | found ipsec0 with address W.X.Y.Z
Dec 17 21:21:35 deimos pluto[20021]: | IP interface eth1 192.168.1.254 has no matching ipsec* interface -- ignored
Dec 17 21:21:35 deimos pluto[20021]: adding interface ipsec0/eth0 W.X.Y.Z
Dec 17 21:21:35 deimos pluto[20021]: | IP interface lo 127.0.0.1 has no matching ipsec* interface -- ignored
Dec 17 21:21:35 deimos pluto[20021]: | could not open /proc/net/if_inet6
Dec 17 21:21:35 deimos pluto[20021]: loading secrets from "/etc/ipsec.secrets"
Dec 17 21:21:35 deimos pluto[20021]: | next event EVENT_SHUNT_SCAN in 109 seconds
Dec 17 21:21:37 deimos pluto[20021]: |
Dec 17 21:21:37 deimos pluto[20021]: | *received whack message
Dec 17 21:21:37 deimos pluto[20021]: added connection description "jeannot_christian_psk_auto"
Dec 17 21:21:37 deimos pluto[20021]: | 192.168.1.0/24===W.X.Y.Z---W.X.Y.1...A.B.C.1---A.B.C.D===192.168.0.0/24
Dec 17 21:21:37 deimos pluto[20021]: | ike_life: 14400s; ipsec_life: 3600s; rekey_margin: 540s; rekey_fuzz: 100%; keyingtries: 0; policy: PSK+ENCRYPT+TUNNEL+PFS
Dec 17 21:21:37 deimos pluto[20021]: | next event EVENT_SHUNT_SCAN in 107 seconds
Dec 17 21:21:38 deimos pluto[20021]: |
Dec 17 21:21:38 deimos pluto[20021]: | *received whack message
Dec 17 21:21:38 deimos pluto[20021]: | creating state object #1 at 0x80adc08
Dec 17 21:21:38 deimos pluto[20021]: | ICOOKIE: 22 90 cc c8 c0 cf 9c 35
Dec 17 21:21:38 deimos pluto[20021]: | RCOOKIE: 00 00 00 00 00 00 00 00
Dec 17 21:21:38 deimos pluto[20021]: | peer: 18 d4 1a d6
Dec 17 21:21:38 deimos pluto[20021]: | state hash entry 22
Dec 17 21:21:38 deimos pluto[20021]: | inserting event EVENT_SO_DISCARD, timeout in 0 seconds for #1
Dec 17 21:21:38 deimos pluto[20021]: | Queuing pending Quick Mode with A.B.C.D "jeannot_christian_psk_auto"
Dec 17 21:21:38 deimos pluto[20021]: "jeannot_christian_psk_auto" #1: initiating Main Mode
Dec 17 21:21:38 deimos pluto[20021]: | **emit ISAKMP Message:
Dec 17 21:21:38 deimos pluto[20021]: | initiator cookie:
Dec 17 21:21:38 deimos pluto[20021]: | 22 90 cc c8 c0 cf 9c 35
Dec 17 21:21:38 deimos pluto[20021]: | responder cookie:
Dec 17 21:21:38 deimos pluto[20021]: | 00 00 00 00 00 00 00 00
Dec 17 21:21:38 deimos pluto[20021]: | next payload type: ISAKMP_NEXT_SA
Dec 17 21:21:38 deimos pluto[20021]: | ISAKMP version: ISAKMP Version 1.0
Dec 17 21:21:38 deimos pluto[20021]: | exchange type: ISAKMP_XCHG_IDPROT
Dec 17 21:21:38 deimos pluto[20021]: | flags: none
Dec 17 21:21:38 deimos pluto[20021]: | message ID: 00 00 00 00
Dec 17 21:21:38 deimos pluto[20021]: | ***emit ISAKMP Security Association Payload:
Dec 17 21:21:38 deimos pluto[20021]: | next payload type: ISAKMP_NEXT_NONE
Dec 17 21:21:38 deimos pluto[20021]: | DOI: ISAKMP_DOI_IPSEC
Dec 17 21:21:38 deimos pluto[20021]: | ****emit IPsec DOI SIT:
Dec 17 21:21:38 deimos pluto[20021]: | IPsec DOI SIT: SIT_IDENTITY_ONLY
Dec 17 21:21:38 deimos pluto[20021]: | ****emit ISAKMP Proposal Payload:
Dec 17 21:21:38 deimos pluto[20021]: | next payload type: ISAKMP_NEXT_NONE
Dec 17 21:21:38 deimos pluto[20021]: | proposal number: 0
Dec 17 21:21:38 deimos pluto[20021]: | protocol ID: PROTO_ISAKMP
Dec 17 21:21:38 deimos pluto[20021]: | SPI size: 0
Dec 17 21:21:38 deimos pluto[20021]: | number of transforms: 4
Dec 17 21:21:38 deimos pluto[20021]: | *****emit ISAKMP Transform Payload (ISAKMP):
Dec 17 21:21:38 deimos pluto[20021]: | next payload type: ISAKMP_NEXT_T
Dec 17 21:21:38 deimos pluto[20021]: | transform number: 0
Dec 17 21:21:38 deimos pluto[20021]: | transform ID: KEY_IKE
Dec 17 21:21:38 deimos pluto[20021]: | ******emit ISAKMP Oakley attribute:
Dec 17 21:21:38 deimos pluto[20021]: | af+type: OAKLEY_LIFE_TYPE
Dec 17 21:21:38 deimos pluto[20021]: | length/value: 1
Dec 17 21:21:38 deimos pluto[20021]: | [1 is OAKLEY_LIFE_SECONDS]
Dec 17 21:21:38 deimos pluto[20021]: | ******emit ISAKMP Oakley attribute:
Dec 17 21:21:38 deimos pluto[20021]: | af+type: OAKLEY_LIFE_DURATION
Dec 17 21:21:38 deimos pluto[20021]: | length/value: 14400
Dec 17 21:21:38 deimos pluto[20021]: | ******emit ISAKMP Oakley attribute:
Dec 17 21:21:38 deimos pluto[20021]: | af+type: OAKLEY_ENCRYPTION_ALGORITHM
Dec 17 21:21:38 deimos pluto[20021]: | length/value: 5
Dec 17 21:21:38 deimos pluto[20021]: | [5 is OAKLEY_3DES_CBC]
Dec 17 21:21:38 deimos pluto[20021]: | ******emit ISAKMP Oakley attribute:
Dec 17 21:21:38 deimos pluto[20021]: | af+type: OAKLEY_HASH_ALGORITHM
Dec 17 21:21:38 deimos pluto[20021]: | length/value: 1
Dec 17 21:21:38 deimos pluto[20021]: | [1 is OAKLEY_MD5]
Dec 17 21:21:38 deimos pluto[20021]: | ******emit ISAKMP Oakley attribute:
Dec 17 21:21:38 deimos pluto[20021]: | af+type: OAKLEY_AUTHENTICATION_METHOD
Dec 17 21:21:38 deimos pluto[20021]: | length/value: 1
Dec 17 21:21:38 deimos pluto[20021]: | [1 is OAKLEY_PRESHARED_KEY]
Dec 17 21:21:38 deimos pluto[20021]: | ******emit ISAKMP Oakley attribute:
Dec 17 21:21:38 deimos pluto[20021]: | af+type: OAKLEY_GROUP_DESCRIPTION
Dec 17 21:21:38 deimos pluto[20021]: | length/value: 5
Dec 17 21:21:38 deimos pluto[20021]: | [5 is OAKLEY_GROUP_MODP1536 (extension)]
Dec 17 21:21:38 deimos pluto[20021]: | emitting length of ISAKMP Transform Payload (ISAKMP): 32
Dec 17 21:21:38 deimos pluto[20021]: | *****emit ISAKMP Transform Payload (ISAKMP):
Dec 17 21:21:38 deimos pluto[20021]: | next payload type: ISAKMP_NEXT_T
Dec 17 21:21:38 deimos pluto[20021]: | transform number: 1
Dec 17 21:21:38 deimos pluto[20021]: | transform ID: KEY_IKE
Dec 17 21:21:38 deimos pluto[20021]: | ******emit ISAKMP Oakley attribute:
Dec 17 21:21:38 deimos pluto[20021]: | af+type: OAKLEY_LIFE_TYPE
Dec 17 21:21:38 deimos pluto[20021]: | length/value: 1
Dec 17 21:21:38 deimos pluto[20021]: | [1 is OAKLEY_LIFE_SECONDS]
Dec 17 21:21:38 deimos pluto[20021]: | ******emit ISAKMP Oakley attribute:
Dec 17 21:21:38 deimos pluto[20021]: | af+type: OAKLEY_LIFE_DURATION
Dec 17 21:21:38 deimos pluto[20021]: | length/value: 14400
Dec 17 21:21:38 deimos pluto[20021]: | ******emit ISAKMP Oakley attribute:
Dec 17 21:21:38 deimos pluto[20021]: | af+type: OAKLEY_ENCRYPTION_ALGORITHM
Dec 17 21:21:38 deimos pluto[20021]: | length/value: 5
Dec 17 21:21:38 deimos pluto[20021]: | [5 is OAKLEY_3DES_CBC]
Dec 17 21:21:38 deimos pluto[20021]: | ******emit ISAKMP Oakley attribute:
Dec 17 21:21:38 deimos pluto[20021]: | af+type: OAKLEY_HASH_ALGORITHM
Dec 17 21:21:38 deimos pluto[20021]: | length/value: 2
Dec 17 21:21:38 deimos pluto[20021]: | [2 is OAKLEY_SHA]
Dec 17 21:21:38 deimos pluto[20021]: | ******emit ISAKMP Oakley attribute:
Dec 17 21:21:38 deimos pluto[20021]: | af+type: OAKLEY_AUTHENTICATION_METHOD
Dec 17 21:21:38 deimos pluto[20021]: | length/value: 1
Dec 17 21:21:38 deimos pluto[20021]: | [1 is OAKLEY_PRESHARED_KEY]
Dec 17 21:21:38 deimos pluto[20021]: | ******emit ISAKMP Oakley attribute:
Dec 17 21:21:38 deimos pluto[20021]: | af+type: OAKLEY_GROUP_DESCRIPTION
Dec 17 21:21:38 deimos pluto[20021]: | length/value: 5
Dec 17 21:21:38 deimos pluto[20021]: | [5 is OAKLEY_GROUP_MODP1536 (extension)]
Dec 17 21:21:38 deimos pluto[20021]: | emitting length of ISAKMP Transform Payload (ISAKMP): 32
Dec 17 21:21:38 deimos pluto[20021]: | *****emit ISAKMP Transform Payload (ISAKMP):
Dec 17 21:21:38 deimos pluto[20021]: | next payload type: ISAKMP_NEXT_T
Dec 17 21:21:38 deimos pluto[20021]: | transform number: 2
Dec 17 21:21:38 deimos pluto[20021]: | transform ID: KEY_IKE
Dec 17 21:21:38 deimos pluto[20021]: | ******emit ISAKMP Oakley attribute:
Dec 17 21:21:38 deimos pluto[20021]: | af+type: OAKLEY_LIFE_TYPE
Dec 17 21:21:38 deimos pluto[20021]: | length/value: 1
Dec 17 21:21:38 deimos pluto[20021]: | [1 is OAKLEY_LIFE_SECONDS]
Dec 17 21:21:38 deimos pluto[20021]: | ******emit ISAKMP Oakley attribute:
Dec 17 21:21:38 deimos pluto[20021]: | af+type: OAKLEY_LIFE_DURATION
Dec 17 21:21:38 deimos pluto[20021]: | length/value: 14400
Dec 17 21:21:38 deimos pluto[20021]: | ******emit ISAKMP Oakley attribute:
Dec 17 21:21:38 deimos pluto[20021]: | af+type: OAKLEY_ENCRYPTION_ALGORITHM
Dec 17 21:21:38 deimos pluto[20021]: | length/value: 5
Dec 17 21:21:38 deimos pluto[20021]: | [5 is OAKLEY_3DES_CBC]
Dec 17 21:21:38 deimos pluto[20021]: | ******emit ISAKMP Oakley attribute:
Dec 17 21:21:38 deimos pluto[20021]: | af+type: OAKLEY_HASH_ALGORITHM
Dec 17 21:21:38 deimos pluto[20021]: | length/value: 2
Dec 17 21:21:38 deimos pluto[20021]: | [2 is OAKLEY_SHA]
Dec 17 21:21:38 deimos pluto[20021]: | ******emit ISAKMP Oakley attribute:
Dec 17 21:21:38 deimos pluto[20021]: | af+type: OAKLEY_AUTHENTICATION_METHOD
Dec 17 21:21:38 deimos pluto[20021]: | length/value: 1
Dec 17 21:21:38 deimos pluto[20021]: | [1 is OAKLEY_PRESHARED_KEY]
Dec 17 21:21:38 deimos pluto[20021]: | ******emit ISAKMP Oakley attribute:
Dec 17 21:21:38 deimos pluto[20021]: | af+type: OAKLEY_GROUP_DESCRIPTION
Dec 17 21:21:38 deimos pluto[20021]: | length/value: 2
Dec 17 21:21:38 deimos pluto[20021]: | [2 is OAKLEY_GROUP_MODP1024]
Dec 17 21:21:38 deimos pluto[20021]: | emitting length of ISAKMP Transform Payload (ISAKMP): 32
Dec 17 21:21:38 deimos pluto[20021]: | *****emit ISAKMP Transform Payload (ISAKMP):
Dec 17 21:21:38 deimos pluto[20021]: | next payload type: ISAKMP_NEXT_NONE
Dec 17 21:21:38 deimos pluto[20021]: | transform number: 3
Dec 17 21:21:38 deimos pluto[20021]: | transform ID: KEY_IKE
Dec 17 21:21:38 deimos pluto[20021]: | ******emit ISAKMP Oakley attribute:
Dec 17 21:21:38 deimos pluto[20021]: | af+type: OAKLEY_LIFE_TYPE
Dec 17 21:21:38 deimos pluto[20021]: | length/value: 1
Dec 17 21:21:38 deimos pluto[20021]: | [1 is OAKLEY_LIFE_SECONDS]
Dec 17 21:21:38 deimos pluto[20021]: | ******emit ISAKMP Oakley attribute:
Dec 17 21:21:38 deimos pluto[20021]: | af+type: OAKLEY_LIFE_DURATION
Dec 17 21:21:38 deimos pluto[20021]: | length/value: 14400
Dec 17 21:21:38 deimos pluto[20021]: | ******emit ISAKMP Oakley attribute:
Dec 17 21:21:38 deimos pluto[20021]: | af+type: OAKLEY_ENCRYPTION_ALGORITHM
Dec 17 21:21:38 deimos pluto[20021]: | length/value: 5
Dec 17 21:21:38 deimos pluto[20021]: | [5 is OAKLEY_3DES_CBC]
Dec 17 21:21:38 deimos pluto[20021]: | ******emit ISAKMP Oakley attribute:
Dec 17 21:21:38 deimos pluto[20021]: | af+type: OAKLEY_HASH_ALGORITHM
Dec 17 21:21:38 deimos pluto[20021]: | length/value: 1
Dec 17 21:21:38 deimos pluto[20021]: | [1 is OAKLEY_MD5]
Dec 17 21:21:38 deimos pluto[20021]: | ******emit ISAKMP Oakley attribute:
Dec 17 21:21:38 deimos pluto[20021]: | af+type: OAKLEY_AUTHENTICATION_METHOD
Dec 17 21:21:38 deimos pluto[20021]: | length/value: 1
Dec 17 21:21:38 deimos pluto[20021]: | [1 is OAKLEY_PRESHARED_KEY]
Dec 17 21:21:38 deimos pluto[20021]: | ******emit ISAKMP Oakley attribute:
Dec 17 21:21:38 deimos pluto[20021]: | af+type: OAKLEY_GROUP_DESCRIPTION
Dec 17 21:21:38 deimos pluto[20021]: | length/value: 2
Dec 17 21:21:38 deimos pluto[20021]: | [2 is OAKLEY_GROUP_MODP1024]
Dec 17 21:21:38 deimos pluto[20021]: | emitting length of ISAKMP Transform Payload (ISAKMP): 32
Dec 17 21:21:38 deimos pluto[20021]: | emitting length of ISAKMP Proposal Payload: 136
Dec 17 21:21:38 deimos pluto[20021]: | emitting length of ISAKMP Security Association Payload: 148
Dec 17 21:21:38 deimos pluto[20021]: | emitting length of ISAKMP Message: 176
Dec 17 21:21:38 deimos pluto[20021]: | sending 176 bytes for main_outI1 through eth0 to A.B.C.D:500:
Dec 17 21:21:38 deimos pluto[20021]: | 22 90 cc c8 c0 cf 9c 35 00 00 00 00 00 00 00 00
Dec 17 21:21:38 deimos pluto[20021]: | 01 10 02 00 00 00 00 00 00 00 00 b0 00 00 00 94
Dec 17 21:21:38 deimos pluto[20021]: | 00 00 00 01 00 00 00 01 00 00 00 88 00 01 00 04
Dec 17 21:21:38 deimos pluto[20021]: | 03 00 00 20 00 01 00 00 80 0b 00 01 80 0c 38 40
Dec 17 21:21:38 deimos pluto[20021]: | 80 01 00 05 80 02 00 01 80 03 00 01 80 04 00 05
Dec 17 21:21:38 deimos pluto[20021]: | 03 00 00 20 01 01 00 00 80 0b 00 01 80 0c 38 40
Dec 17 21:21:38 deimos pluto[20021]: | 80 01 00 05 80 02 00 02 80 03 00 01 80 04 00 05
Dec 17 21:21:38 deimos pluto[20021]: | 03 00 00 20 02 01 00 00 80 0b 00 01 80 0c 38 40
Dec 17 21:21:38 deimos pluto[20021]: | 80 01 00 05 80 02 00 02 80 03 00 01 80 04 00 02
Dec 17 21:21:38 deimos pluto[20021]: | 00 00 00 20 03 01 00 00 80 0b 00 01 80 0c 38 40
Dec 17 21:21:38 deimos pluto[20021]: | 80 01 00 05 80 02 00 01 80 03 00 01 80 04 00 02
Dec 17 21:21:38 deimos pluto[20021]: | inserting event EVENT_RETRANSMIT, timeout in 10 seconds for #1
Dec 17 21:21:38 deimos pluto[20021]: | next event EVENT_RETRANSMIT in 10 seconds for #1
Dec 17 21:21:39 deimos pluto[20021]: |
Dec 17 21:21:39 deimos pluto[20021]: | *received 84 bytes from A.B.C.D:500 on eth0
Dec 17 21:21:39 deimos pluto[20021]: | 22 90 cc c8 c0 cf 9c 35 0d e1 7b 27 3d d4 54 02
Dec 17 21:21:39 deimos pluto[20021]: | 01 10 02 00 00 00 00 00 00 00 00 54 00 00 00 38
Dec 17 21:21:39 deimos pluto[20021]: | 00 00 00 01 00 00 00 01 00 00 00 2c 01 01 00 01
Dec 17 21:21:39 deimos pluto[20021]: | 00 00 00 24 01 01 00 00 80 01 00 05 80 02 00 02
Dec 17 21:21:39 deimos pluto[20021]: | 80 03 00 01 80 04 00 02 80 0b 00 01 00 0c 00 04
Dec 17 21:21:39 deimos pluto[20021]: | 00 00 38 40
Dec 17 21:21:39 deimos pluto[20021]: | **parse ISAKMP Message:
Dec 17 21:21:39 deimos pluto[20021]: | initiator cookie:
Dec 17 21:21:39 deimos pluto[20021]: | 22 90 cc c8 c0 cf 9c 35
Dec 17 21:21:39 deimos pluto[20021]: | responder cookie:
Dec 17 21:21:39 deimos pluto[20021]: | 0d e1 7b 27 3d d4 54 02
Dec 17 21:21:39 deimos pluto[20021]: | next payload type: ISAKMP_NEXT_SA
Dec 17 21:21:39 deimos pluto[20021]: | ISAKMP version: ISAKMP Version 1.0
Dec 17 21:21:39 deimos pluto[20021]: | exchange type: ISAKMP_XCHG_IDPROT
Dec 17 21:21:39 deimos pluto[20021]: | flags: none
Dec 17 21:21:39 deimos pluto[20021]: | message ID: 00 00 00 00
Dec 17 21:21:39 deimos pluto[20021]: | length: 84
Dec 17 21:21:39 deimos pluto[20021]: | ICOOKIE: 22 90 cc c8 c0 cf 9c 35
Dec 17 21:21:39 deimos pluto[20021]: | RCOOKIE: 0d e1 7b 27 3d d4 54 02
Dec 17 21:21:39 deimos pluto[20021]: | peer: 18 d4 1a d6
Dec 17 21:21:39 deimos pluto[20021]: | state hash entry 19
Dec 17 21:21:39 deimos pluto[20021]: | state object not found
Dec 17 21:21:39 deimos pluto[20021]: | ICOOKIE: 22 90 cc c8 c0 cf 9c 35
Dec 17 21:21:39 deimos pluto[20021]: | RCOOKIE: 00 00 00 00 00 00 00 00
Dec 17 21:21:39 deimos pluto[20021]: | peer: 18 d4 1a d6
Dec 17 21:21:39 deimos pluto[20021]: | state hash entry 22
Dec 17 21:21:39 deimos pluto[20021]: | state object #1 found, in STATE_MAIN_I1
Dec 17 21:21:39 deimos pluto[20021]: | ***parse ISAKMP Security Association Payload:
Dec 17 21:21:39 deimos pluto[20021]: | next payload type: ISAKMP_NEXT_NONE
Dec 17 21:21:39 deimos pluto[20021]: | length: 56
Dec 17 21:21:39 deimos pluto[20021]: | DOI: ISAKMP_DOI_IPSEC
Dec 17 21:21:39 deimos pluto[20021]: | ****parse IPsec DOI SIT:
Dec 17 21:21:39 deimos pluto[20021]: | IPsec DOI SIT: SIT_IDENTITY_ONLY
Dec 17 21:21:39 deimos pluto[20021]: | ****parse ISAKMP Proposal Payload:
Dec 17 21:21:39 deimos pluto[20021]: | next payload type: ISAKMP_NEXT_NONE
Dec 17 21:21:39 deimos pluto[20021]: | length: 44
Dec 17 21:21:39 deimos pluto[20021]: | proposal number: 1
Dec 17 21:21:39 deimos pluto[20021]: | protocol ID: PROTO_ISAKMP
Dec 17 21:21:39 deimos pluto[20021]: | SPI size: 0
Dec 17 21:21:39 deimos pluto[20021]: | number of transforms: 1
Dec 17 21:21:39 deimos pluto[20021]: | *****parse ISAKMP Transform Payload (ISAKMP):
Dec 17 21:21:39 deimos pluto[20021]: | next payload type: ISAKMP_NEXT_NONE
Dec 17 21:21:39 deimos pluto[20021]: | length: 36
Dec 17 21:21:39 deimos pluto[20021]: | transform number: 1
Dec 17 21:21:39 deimos pluto[20021]: | transform ID: KEY_IKE
Dec 17 21:21:39 deimos pluto[20021]: | ******parse ISAKMP Oakley attribute:
Dec 17 21:21:39 deimos pluto[20021]: | af+type: OAKLEY_ENCRYPTION_ALGORITHM
Dec 17 21:21:39 deimos pluto[20021]: | length/value: 5
Dec 17 21:21:39 deimos pluto[20021]: | [5 is OAKLEY_3DES_CBC]
Dec 17 21:21:39 deimos pluto[20021]: | ******parse ISAKMP Oakley attribute:
Dec 17 21:21:39 deimos pluto[20021]: | af+type: OAKLEY_HASH_ALGORITHM
Dec 17 21:21:39 deimos pluto[20021]: | length/value: 2
Dec 17 21:21:39 deimos pluto[20021]: | [2 is OAKLEY_SHA]
Dec 17 21:21:39 deimos pluto[20021]: | ******parse ISAKMP Oakley attribute:
Dec 17 21:21:39 deimos pluto[20021]: | af+type: OAKLEY_AUTHENTICATION_METHOD
Dec 17 21:21:39 deimos pluto[20021]: | length/value: 1
Dec 17 21:21:39 deimos pluto[20021]: | [1 is OAKLEY_PRESHARED_KEY]
Dec 17 21:21:39 deimos pluto[20021]: | ******parse ISAKMP Oakley attribute:
Dec 17 21:21:39 deimos pluto[20021]: | af+type: OAKLEY_GROUP_DESCRIPTION
Dec 17 21:21:39 deimos pluto[20021]: | length/value: 2
Dec 17 21:21:39 deimos pluto[20021]: | [2 is OAKLEY_GROUP_MODP1024]
Dec 17 21:21:40 deimos pluto[20021]: | ******parse ISAKMP Oakley attribute:
Dec 17 21:21:40 deimos pluto[20021]: | af+type: OAKLEY_LIFE_TYPE
Dec 17 21:21:40 deimos pluto[20021]: | length/value: 1
Dec 17 21:21:40 deimos pluto[20021]: | [1 is OAKLEY_LIFE_SECONDS]
Dec 17 21:21:40 deimos pluto[20021]: | ******parse ISAKMP Oakley attribute:
Dec 17 21:21:40 deimos pluto[20021]: | af+type: OAKLEY_LIFE_DURATION (variable length)
Dec 17 21:21:40 deimos pluto[20021]: | length/value: 4
Dec 17 21:21:40 deimos pluto[20021]: | long duration: 14400
Dec 17 21:21:40 deimos pluto[20021]: | Oakley Transform 1 accepted
Dec 17 21:21:40 deimos pluto[20021]: | **emit ISAKMP Message:
Dec 17 21:21:40 deimos pluto[20021]: | initiator cookie:
Dec 17 21:21:40 deimos pluto[20021]: | 22 90 cc c8 c0 cf 9c 35
Dec 17 21:21:40 deimos pluto[20021]: | responder cookie:
Dec 17 21:21:40 deimos pluto[20021]: | 0d e1 7b 27 3d d4 54 02
Dec 17 21:21:40 deimos pluto[20021]: | next payload type: ISAKMP_NEXT_KE
Dec 17 21:21:40 deimos pluto[20021]: | ISAKMP version: ISAKMP Version 1.0
Dec 17 21:21:40 deimos pluto[20021]: | exchange type: ISAKMP_XCHG_IDPROT
Dec 17 21:21:40 deimos pluto[20021]: | flags: none
Dec 17 21:21:40 deimos pluto[20021]: | message ID: 00 00 00 00
Dec 17 21:21:40 deimos pluto[20021]: | Local DH secret:
Dec 17 21:21:40 deimos pluto[20021]: | e2 07 69 00 e6 72 b2 b3 c6 f2 b1 03 5c e9 3d ed
Dec 17 21:21:40 deimos pluto[20021]: | 96 0d f1 c0 b9 fd 8c 63 7e dc 0f 05 58 02 4f 64
Dec 17 21:21:40 deimos pluto[20021]: | Public DH value sent:
Dec 17 21:21:40 deimos pluto[20021]: | 3e de 87 13 f2 fa e4 ea 84 82 d9 10 81 5d d8 7f
Dec 17 21:21:40 deimos pluto[20021]: | 6c 37 95 43 fc 26 18 27 9d f7 51 15 9d 4e 9e 38
Dec 17 21:21:40 deimos pluto[20021]: | 43 b8 5c 0e c3 f7 f1 f4 61 04 9e eb e0 66 32 6d
Dec 17 21:21:40 deimos pluto[20021]: | ba 29 c8 b2 27 c3 d1 c3 33 7d 43 6c b8 a7 fe 36
Dec 17 21:21:40 deimos pluto[20021]: | 21 0c 9a 35 59 8f ea 91 17 51 34 f2 04 7b 53 1b
Dec 17 21:21:40 deimos pluto[20021]: | 67 26 9a 8f 6c 18 40 2a ed 18 a2 cc 61 86 c8 5c
Dec 17 21:21:40 deimos pluto[20021]: | 22 22 2f 29 71 1c 33 08 11 08 34 24 b5 8c 8d 9d
Dec 17 21:21:40 deimos pluto[20021]: | a2 6d 9b ef be d1 bf 2a 76 4e dc ed 29 f9 48 b8
Dec 17 21:21:40 deimos pluto[20021]: | ***emit ISAKMP Key Exchange Payload:
Dec 17 21:21:40 deimos pluto[20021]: | next payload type: ISAKMP_NEXT_NONCE
Dec 17 21:21:40 deimos pluto[20021]: | emitting 128 raw bytes of keyex value into ISAKMP Key Exchange Payload
Dec 17 21:21:40 deimos pluto[20021]: | keyex value 3e de 87 13 f2 fa e4 ea 84 82 d9 10 81 5d d8 7f
Dec 17 21:21:40 deimos pluto[20021]: | 6c 37 95 43 fc 26 18 27 9d f7 51 15 9d 4e 9e 38
Dec 17 21:21:40 deimos pluto[20021]: | 43 b8 5c 0e c3 f7 f1 f4 61 04 9e eb e0 66 32 6d
Dec 17 21:21:40 deimos pluto[20021]: | ba 29 c8 b2 27 c3 d1 c3 33 7d 43 6c b8 a7 fe 36
Dec 17 21:21:40 deimos pluto[20021]: | 21 0c 9a 35 59 8f ea 91 17 51 34 f2 04 7b 53 1b
Dec 17 21:21:40 deimos pluto[20021]: | 67 26 9a 8f 6c 18 40 2a ed 18 a2 cc 61 86 c8 5c
Dec 17 21:21:40 deimos pluto[20021]: | 22 22 2f 29 71 1c 33 08 11 08 34 24 b5 8c 8d 9d
Dec 17 21:21:40 deimos pluto[20021]: | a2 6d 9b ef be d1 bf 2a 76 4e dc ed 29 f9 48 b8
Dec 17 21:21:40 deimos pluto[20021]: | emitting length of ISAKMP Key Exchange Payload: 132
Dec 17 21:21:40 deimos pluto[20021]: | ***emit ISAKMP Nonce Payload:
Dec 17 21:21:40 deimos pluto[20021]: | next payload type: ISAKMP_NEXT_NONE
Dec 17 21:21:40 deimos pluto[20021]: | emitting 16 raw bytes of Ni into ISAKMP Nonce Payload
Dec 17 21:21:40 deimos pluto[20021]: | Ni 7e 61 ec 52 a7 df d9 87 86 7b 87 f1 e3 c6 b2 ab
Dec 17 21:21:40 deimos pluto[20021]: | emitting length of ISAKMP Nonce Payload: 20
Dec 17 21:21:40 deimos pluto[20021]: | emitting length of ISAKMP Message: 180
Dec 17 21:21:40 deimos pluto[20021]: | ICOOKIE: 22 90 cc c8 c0 cf 9c 35
Dec 17 21:21:40 deimos pluto[20021]: | RCOOKIE: 00 00 00 00 00 00 00 00
Dec 17 21:21:40 deimos pluto[20021]: | peer: 18 d4 1a d6
Dec 17 21:21:40 deimos pluto[20021]: | state hash entry 22
Dec 17 21:21:40 deimos pluto[20021]: | ICOOKIE: 22 90 cc c8 c0 cf 9c 35
Dec 17 21:21:40 deimos pluto[20021]: | RCOOKIE: 0d e1 7b 27 3d d4 54 02
Dec 17 21:21:40 deimos pluto[20021]: | peer: 18 d4 1a d6
Dec 17 21:21:40 deimos pluto[20021]: | state hash entry 19
Dec 17 21:21:40 deimos pluto[20021]: | sending 180 bytes for STATE_MAIN_I1 through eth0 to A.B.C.D:500:
Dec 17 21:21:40 deimos pluto[20021]: | 22 90 cc c8 c0 cf 9c 35 0d e1 7b 27 3d d4 54 02
Dec 17 21:21:40 deimos pluto[20021]: | 04 10 02 00 00 00 00 00 00 00 00 b4 0a 00 00 84
Dec 17 21:21:40 deimos pluto[20021]: | 3e de 87 13 f2 fa e4 ea 84 82 d9 10 81 5d d8 7f
Dec 17 21:21:40 deimos pluto[20021]: | 6c 37 95 43 fc 26 18 27 9d f7 51 15 9d 4e 9e 38
Dec 17 21:21:40 deimos pluto[20021]: | 43 b8 5c 0e c3 f7 f1 f4 61 04 9e eb e0 66 32 6d
Dec 17 21:21:40 deimos pluto[20021]: | ba 29 c8 b2 27 c3 d1 c3 33 7d 43 6c b8 a7 fe 36
Dec 17 21:21:40 deimos pluto[20021]: | 21 0c 9a 35 59 8f ea 91 17 51 34 f2 04 7b 53 1b
Dec 17 21:21:40 deimos pluto[20021]: | 67 26 9a 8f 6c 18 40 2a ed 18 a2 cc 61 86 c8 5c
Dec 17 21:21:40 deimos pluto[20021]: | 22 22 2f 29 71 1c 33 08 11 08 34 24 b5 8c 8d 9d
Dec 17 21:21:40 deimos pluto[20021]: | a2 6d 9b ef be d1 bf 2a 76 4e dc ed 29 f9 48 b8
Dec 17 21:21:40 deimos pluto[20021]: | 00 00 00 14 7e 61 ec 52 a7 df d9 87 86 7b 87 f1
Dec 17 21:21:40 deimos pluto[20021]: | e3 c6 b2 ab
Dec 17 21:21:40 deimos pluto[20021]: | inserting event EVENT_RETRANSMIT, timeout in 10 seconds for #1
Dec 17 21:21:40 deimos pluto[20021]: | next event EVENT_RETRANSMIT in 10 seconds for #1
Dec 17 21:21:42 deimos pluto[20021]: |
Dec 17 21:21:42 deimos pluto[20021]: | *received 184 bytes from A.B.C.D:500 on eth0
Dec 17 21:21:42 deimos pluto[20021]: | 22 90 cc c8 c0 cf 9c 35 0d e1 7b 27 3d d4 54 02
Dec 17 21:21:42 deimos pluto[20021]: | 04 10 02 00 00 00 00 00 00 00 00 b8 0a 00 00 84
Dec 17 21:21:42 deimos pluto[20021]: | d6 b9 99 ab 25 2f d8 58 2b 7c 97 23 22 80 7e a6
Dec 17 21:21:42 deimos pluto[20021]: | ad 4d a6 0d 07 8c d8 6f 26 1a 17 2b 3d 7c bf 12
Dec 17 21:21:42 deimos pluto[20021]: | 69 78 9a 5d e3 4c 43 e4 dd a8 0c 47 3d ea 82 4b
Dec 17 21:21:42 deimos pluto[20021]: | 8e 8d 54 0b cc b0 0b cd 25 fe d9 c9 d1 34 40 1b
Dec 17 21:21:42 deimos pluto[20021]: | ed 1b cc e0 69 79 74 a9 7c d5 ab c6 a3 aa be 2a
Dec 17 21:21:42 deimos pluto[20021]: | 0f 7c c1 42 f9 a8 e2 e2 b8 7b 90 02 c0 ab 95 1c
Dec 17 21:21:42 deimos pluto[20021]: | d0 24 ff f7 73 f8 b8 40 a5 62 21 1d 82 de b8 54
Dec 17 21:21:42 deimos pluto[20021]: | e4 a6 f8 b7 65 57 3b 1d 5d 33 78 7d 16 d9 71 84
Dec 17 21:21:42 deimos pluto[20021]: | 00 00 00 18 7c 0d 1d 9b a8 54 8a dc ad 7c 17 4c
Dec 17 21:21:42 deimos pluto[20021]: | 48 e8 17 c1 66 dd de 60
Dec 17 21:21:42 deimos pluto[20021]: | **parse ISAKMP Message:
Dec 17 21:21:42 deimos pluto[20021]: | initiator cookie:
Dec 17 21:21:42 deimos pluto[20021]: | 22 90 cc c8 c0 cf 9c 35
Dec 17 21:21:42 deimos pluto[20021]: | responder cookie:
Dec 17 21:21:42 deimos pluto[20021]: | 0d e1 7b 27 3d d4 54 02
Dec 17 21:21:42 deimos pluto[20021]: | next payload type: ISAKMP_NEXT_KE
Dec 17 21:21:42 deimos pluto[20021]: | ISAKMP version: ISAKMP Version 1.0
Dec 17 21:21:42 deimos pluto[20021]: | exchange type: ISAKMP_XCHG_IDPROT
Dec 17 21:21:42 deimos pluto[20021]: | flags: none
Dec 17 21:21:42 deimos pluto[20021]: | message ID: 00 00 00 00
Dec 17 21:21:42 deimos pluto[20021]: | length: 184
Dec 17 21:21:42 deimos pluto[20021]: | ICOOKIE: 22 90 cc c8 c0 cf 9c 35
Dec 17 21:21:42 deimos pluto[20021]: | RCOOKIE: 0d e1 7b 27 3d d4 54 02
Dec 17 21:21:42 deimos pluto[20021]: | peer: 18 d4 1a d6
Dec 17 21:21:42 deimos pluto[20021]: | state hash entry 19
Dec 17 21:21:42 deimos pluto[20021]: | state object #1 found, in STATE_MAIN_I2
Dec 17 21:21:42 deimos pluto[20021]: | ***parse ISAKMP Key Exchange Payload:
Dec 17 21:21:42 deimos pluto[20021]: | next payload type: ISAKMP_NEXT_NONCE
Dec 17 21:21:42 deimos pluto[20021]: | length: 132
Dec 17 21:21:42 deimos pluto[20021]: | ***parse ISAKMP Nonce Payload:
Dec 17 21:21:42 deimos pluto[20021]: | next payload type: ISAKMP_NEXT_NONE
Dec 17 21:21:42 deimos pluto[20021]: | length: 24
Dec 17 21:21:42 deimos pluto[20021]: | **emit ISAKMP Message:
Dec 17 21:21:42 deimos pluto[20021]: | initiator cookie:
Dec 17 21:21:42 deimos pluto[20021]: | 22 90 cc c8 c0 cf 9c 35
Dec 17 21:21:42 deimos pluto[20021]: | responder cookie:
Dec 17 21:21:42 deimos pluto[20021]: | 0d e1 7b 27 3d d4 54 02
Dec 17 21:21:42 deimos pluto[20021]: | next payload type: ISAKMP_NEXT_ID
Dec 17 21:21:42 deimos pluto[20021]: | ISAKMP version: ISAKMP Version 1.0
Dec 17 21:21:42 deimos pluto[20021]: | exchange type: ISAKMP_XCHG_IDPROT
Dec 17 21:21:42 deimos pluto[20021]: | flags: ISAKMP_FLAG_ENCRYPTION
Dec 17 21:21:42 deimos pluto[20021]: | message ID: 00 00 00 00
Dec 17 21:21:42 deimos pluto[20021]: | DH public value received:
Dec 17 21:21:42 deimos pluto[20021]: | d6 b9 99 ab 25 2f d8 58 2b 7c 97 23 22 80 7e a6
Dec 17 21:21:42 deimos pluto[20021]: | ad 4d a6 0d 07 8c d8 6f 26 1a 17 2b 3d 7c bf 12
Dec 17 21:21:42 deimos pluto[20021]: | 69 78 9a 5d e3 4c 43 e4 dd a8 0c 47 3d ea 82 4b
Dec 17 21:21:42 deimos pluto[20021]: | 8e 8d 54 0b cc b0 0b cd 25 fe d9 c9 d1 34 40 1b
Dec 17 21:21:42 deimos pluto[20021]: | ed 1b cc e0 69 79 74 a9 7c d5 ab c6 a3 aa be 2a
Dec 17 21:21:42 deimos pluto[20021]: | 0f 7c c1 42 f9 a8 e2 e2 b8 7b 90 02 c0 ab 95 1c
Dec 17 21:21:42 deimos pluto[20021]: | d0 24 ff f7 73 f8 b8 40 a5 62 21 1d 82 de b8 54
Dec 17 21:21:42 deimos pluto[20021]: | e4 a6 f8 b7 65 57 3b 1d 5d 33 78 7d 16 d9 71 84
Dec 17 21:21:42 deimos pluto[20021]: | DH shared secret:
Dec 17 21:21:42 deimos pluto[20021]: | 1f 28 1c 71 ba fa fc 1d f5 e7 97 04 04 e8 16 34
Dec 17 21:21:42 deimos pluto[20021]: | fb 24 3c 82 6e fc 6a 18 b3 38 ab 25 b6 e9 f7 df
Dec 17 21:21:42 deimos pluto[20021]: | 66 1b 56 dc 20 79 c2 04 a0 bf d5 32 46 24 24 e3
Dec 17 21:21:42 deimos pluto[20021]: | 66 99 dd 4f 3d 8d 99 64 64 bd ea 94 d6 b9 86 12
Dec 17 21:21:42 deimos pluto[20021]: | 4f f7 72 3b 8f 54 76 16 37 de bc 9e d5 af 5a 8a
Dec 17 21:21:42 deimos pluto[20021]: | 70 05 35 d6 b9 33 dd 85 76 90 92 60 a1 98 06 cb
Dec 17 21:21:42 deimos pluto[20021]: | a5 b9 38 4e 53 27 ef 57 73 27 04 70 9d fe 78 52
Dec 17 21:21:42 deimos pluto[20021]: | 04 d3 a6 16 88 82 35 ab 74 69 5a 8f 1b db 9a e8
Dec 17 21:21:42 deimos pluto[20021]: | Skeyid: ac 42 ea 65 86 58 a3 f0 30 af 73 79 28 65 13 d1
Dec 17 21:21:42 deimos pluto[20021]: | 76 d4 b8 ca
Dec 17 21:21:42 deimos pluto[20021]: | Skeyid_d: 0a 22 78 a9 b7 5e 7a 2b 01 dd 0d 01 a4 dd 60 53
Dec 17 21:21:42 deimos pluto[20021]: | a3 0a e4 6e
Dec 17 21:21:42 deimos pluto[20021]: | Skeyid_a: 49 4e 39 7b 1a 1b 34 81 bf c5 9c 70 ab d5 7d 16
Dec 17 21:21:42 deimos pluto[20021]: | 71 aa dd 2a
Dec 17 21:21:42 deimos pluto[20021]: | Skeyid_e: 39 dc 3a 5c c6 12 0f 7d 4a 7b e2 1f f6 28 51 63
Dec 17 21:21:42 deimos pluto[20021]: | 55 05 58 94
Dec 17 21:21:42 deimos pluto[20021]: | enc key: ac 00 e4 5d 14 1d d3 d2 f3 13 98 55 c0 e3 4b 41
Dec 17 21:21:42 deimos pluto[20021]: | ba 42 c4 3e d0 a6 e0 04
Dec 17 21:21:42 deimos pluto[20021]: | IV: 34 f4 25 aa 04 29 35 4a 0f bd 90 05 e6 e1 89 3d
Dec 17 21:21:42 deimos pluto[20021]: | 67 24 be f5
Dec 17 21:21:42 deimos pluto[20021]: | ***emit ISAKMP Identification Payload (IPsec DOI):
Dec 17 21:21:42 deimos pluto[20021]: | next payload type: ISAKMP_NEXT_HASH
Dec 17 21:21:42 deimos pluto[20021]: | ID type: ID_IPV4_ADDR
Dec 17 21:21:42 deimos pluto[20021]: | Protocol ID: 0
Dec 17 21:21:42 deimos pluto[20021]: | port: 0
Dec 17 21:21:42 deimos pluto[20021]: | emitting 4 raw bytes of my identity into ISAKMP Identification Payload (IPsec DOI)
Dec 17 21:21:42 deimos pluto[20021]: | my identity 8e d9 ae 39
Dec 17 21:21:42 deimos pluto[20021]: | emitting length of ISAKMP Identification Payload (IPsec DOI): 12
Dec 17 21:21:42 deimos pluto[20021]: | hashing 144 bytes of SA
Dec 17 21:21:42 deimos pluto[20021]: | ***emit ISAKMP Hash Payload:
Dec 17 21:21:42 deimos pluto[20021]: | next payload type: ISAKMP_NEXT_NONE
Dec 17 21:21:42 deimos pluto[20021]: | emitting 20 raw bytes of HASH_I into ISAKMP Hash Payload
Dec 17 21:21:42 deimos pluto[20021]: | HASH_I d5 92 1b 4d 8e c4 53 58 ea bc a3 b5 74 19 18 3a
Dec 17 21:21:42 deimos pluto[20021]: | d4 42 0a 43
Dec 17 21:21:42 deimos pluto[20021]: | emitting length of ISAKMP Hash Payload: 24
Dec 17 21:21:42 deimos pluto[20021]: | encrypting:
Dec 17 21:21:42 deimos pluto[20021]: | 08 00 00 0c 01 00 00 00 8e d9 ae 39 00 00 00 18
Dec 17 21:21:42 deimos pluto[20021]: | d5 92 1b 4d 8e c4 53 58 ea bc a3 b5 74 19 18 3a
Dec 17 21:21:42 deimos pluto[20021]: | d4 42 0a 43
Dec 17 21:21:42 deimos pluto[20021]: | emitting 4 zero bytes of encryption padding into ISAKMP Message
Dec 17 21:21:42 deimos pluto[20021]: | encrypting using OAKLEY_3DES_CBC
Dec 17 21:21:42 deimos pluto[20021]: | next IV: 7b 1f ae 80 88 12 51 5d
Dec 17 21:21:42 deimos pluto[20021]: | emitting length of ISAKMP Message: 68
Dec 17 21:21:42 deimos pluto[20021]: | sending 68 bytes for STATE_MAIN_I2 through eth0 to A.B.C.D:500:
Dec 17 21:21:42 deimos pluto[20021]: | 22 90 cc c8 c0 cf 9c 35 0d e1 7b 27 3d d4 54 02
Dec 17 21:21:42 deimos pluto[20021]: | 05 10 02 01 00 00 00 00 00 00 00 44 be 66 d0 54
Dec 17 21:21:42 deimos pluto[20021]: | 08 de c8 7e 81 36 bd ce c5 fb b4 77 96 fd 5d a9
Dec 17 21:21:42 deimos pluto[20021]: | 8a 6c ba fd 2b b4 06 75 6f bd c0 8c 7b 1f ae 80
Dec 17 21:21:42 deimos pluto[20021]: | 88 12 51 5d
Dec 17 21:21:42 deimos pluto[20021]: | inserting event EVENT_RETRANSMIT, timeout in 10 seconds for #1
Dec 17 21:21:42 deimos pluto[20021]: | next event EVENT_RETRANSMIT in 10 seconds for #1
Dec 17 21:21:42 deimos pluto[20021]: |
Dec 17 21:21:42 deimos pluto[20021]: | *received 56 bytes from A.B.C.D:500 on eth0
Dec 17 21:21:42 deimos pluto[20021]: | 22 90 cc c8 c0 cf 9c 35 0d e1 7b 27 3d d4 54 02
Dec 17 21:21:42 deimos pluto[20021]: | 0b 10 05 00 00 00 00 00 00 00 00 38 00 00 00 1c
Dec 17 21:21:42 deimos pluto[20021]: | 00 00 00 01 01 10 00 01 22 90 cc c8 c0 cf 9c 35
Dec 17 21:21:42 deimos pluto[20021]: | 0d e1 7b 27 3d d4 54 02
Dec 17 21:21:42 deimos pluto[20021]: | **parse ISAKMP Message:
Dec 17 21:21:42 deimos pluto[20021]: | initiator cookie:
Dec 17 21:21:42 deimos pluto[20021]: | 22 90 cc c8 c0 cf 9c 35
Dec 17 21:21:42 deimos pluto[20021]: | responder cookie:
Dec 17 21:21:42 deimos pluto[20021]: | 0d e1 7b 27 3d d4 54 02
Dec 17 21:21:42 deimos pluto[20021]: | next payload type: ISAKMP_NEXT_N
Dec 17 21:21:42 deimos pluto[20021]: | ISAKMP version: ISAKMP Version 1.0
Dec 17 21:21:42 deimos pluto[20021]: | exchange type: ISAKMP_XCHG_INFO
Dec 17 21:21:42 deimos pluto[20021]: | flags: none
Dec 17 21:21:42 deimos pluto[20021]: | message ID: 00 00 00 00
Dec 17 21:21:42 deimos pluto[20021]: | length: 56
Dec 17 21:21:42 deimos pluto[20021]: | ICOOKIE: 22 90 cc c8 c0 cf 9c 35
Dec 17 21:21:42 deimos pluto[20021]: | RCOOKIE: 0d e1 7b 27 3d d4 54 02
Dec 17 21:21:42 deimos pluto[20021]: | peer: 18 d4 1a d6
Dec 17 21:21:42 deimos pluto[20021]: | state hash entry 19
Dec 17 21:21:42 deimos pluto[20021]: | state object #1 found, in STATE_MAIN_I3
Dec 17 21:21:42 deimos pluto[20021]: | ***parse ISAKMP Notification Payload:
Dec 17 21:21:42 deimos pluto[20021]: | next payload type: ISAKMP_NEXT_NONE
Dec 17 21:21:42 deimos pluto[20021]: | length: 28
Dec 17 21:21:42 deimos pluto[20021]: | DOI: ISAKMP_DOI_IPSEC
Dec 17 21:21:42 deimos pluto[20021]: | protocol ID: 1
Dec 17 21:21:42 deimos pluto[20021]: | SPI size: 16
Dec 17 21:21:42 deimos pluto[20021]: | Notify Message Type: INVALID_PAYLOAD_TYPE
Dec 17 21:21:42 deimos pluto[20021]: "jeannot_christian_psk_auto" #1: ignoring informational payload, type INVALID_PAYLOAD_TYPE
Dec 17 21:21:42 deimos pluto[20021]: | info: 22 90 cc c8 c0 cf 9c 35 0d e1 7b 27 3d d4 54 02
Dec 17 21:21:42 deimos pluto[20021]: | next event EVENT_RETRANSMIT in 10 seconds for #1
Dec 17 21:21:52 deimos pluto[20021]: |
Dec 17 21:21:52 deimos pluto[20021]: | *time to handle event
Dec 17 21:21:52 deimos pluto[20021]: | event after this is EVENT_SHUNT_SCAN in 92 seconds
Dec 17 21:21:52 deimos pluto[20021]: | handling event EVENT_RETRANSMIT for A.B.C.D "jeannot_christian_psk_auto" #1
Dec 17 21:21:52 deimos pluto[20021]: | sending 68 bytes for EVENT_RETRANSMIT through eth0 to A.B.C.D:500:
Dec 17 21:21:52 deimos pluto[20021]: | 22 90 cc c8 c0 cf 9c 35 0d e1 7b 27 3d d4 54 02
Dec 17 21:21:52 deimos pluto[20021]: | 05 10 02 01 00 00 00 00 00 00 00 44 be 66 d0 54
Dec 17 21:21:52 deimos pluto[20021]: | 08 de c8 7e 81 36 bd ce c5 fb b4 77 96 fd 5d a9
Dec 17 21:21:52 deimos pluto[20021]: | 8a 6c ba fd 2b b4 06 75 6f bd c0 8c 7b 1f ae 80
Dec 17 21:21:52 deimos pluto[20021]: | 88 12 51 5d
Dec 17 21:21:52 deimos pluto[20021]: | inserting event EVENT_RETRANSMIT, timeout in 20 seconds for #1
Dec 17 21:21:52 deimos pluto[20021]: | next event EVENT_RETRANSMIT in 20 seconds for #1
Dec 17 21:21:52 deimos pluto[20021]: |
Dec 17 21:21:52 deimos pluto[20021]: | *received 56 bytes from A.B.C.D:500 on eth0
Dec 17 21:21:52 deimos pluto[20021]: | 22 90 cc c8 c0 cf 9c 35 0d e1 7b 27 3d d4 54 02
Dec 17 21:21:52 deimos pluto[20021]: | 0b 10 05 00 00 00 00 00 00 00 00 38 00 00 00 1c
Dec 17 21:21:52 deimos pluto[20021]: | 00 00 00 01 01 10 00 01 22 90 cc c8 c0 cf 9c 35
Dec 17 21:21:52 deimos pluto[20021]: | 0d e1 7b 27 3d d4 54 02
Dec 17 21:21:52 deimos pluto[20021]: | **parse ISAKMP Message:
Dec 17 21:21:52 deimos pluto[20021]: | initiator cookie:
Dec 17 21:21:52 deimos pluto[20021]: | 22 90 cc c8 c0 cf 9c 35
Dec 17 21:21:52 deimos pluto[20021]: | responder cookie:
Dec 17 21:21:52 deimos pluto[20021]: | 0d e1 7b 27 3d d4 54 02
Dec 17 21:21:52 deimos pluto[20021]: | next payload type: ISAKMP_NEXT_N
Dec 17 21:21:52 deimos pluto[20021]: | ISAKMP version: ISAKMP Version 1.0
Dec 17 21:21:52 deimos pluto[20021]: | exchange type: ISAKMP_XCHG_INFO
Dec 17 21:21:52 deimos pluto[20021]: | flags: none
Dec 17 21:21:52 deimos pluto[20021]: | message ID: 00 00 00 00
Dec 17 21:21:52 deimos pluto[20021]: | length: 56
Dec 17 21:21:52 deimos pluto[20021]: | ICOOKIE: 22 90 cc c8 c0 cf 9c 35
Dec 17 21:21:52 deimos pluto[20021]: | RCOOKIE: 0d e1 7b 27 3d d4 54 02
Dec 17 21:21:52 deimos pluto[20021]: | peer: 18 d4 1a d6
Dec 17 21:21:52 deimos pluto[20021]: | state hash entry 19
Dec 17 21:21:52 deimos pluto[20021]: | state object #1 found, in STATE_MAIN_I3
Dec 17 21:21:52 deimos pluto[20021]: | ***parse ISAKMP Notification Payload:
Dec 17 21:21:52 deimos pluto[20021]: | next payload type: ISAKMP_NEXT_NONE
Dec 17 21:21:52 deimos pluto[20021]: | length: 28
Dec 17 21:21:52 deimos pluto[20021]: | DOI: ISAKMP_DOI_IPSEC
Dec 17 21:21:52 deimos pluto[20021]: | protocol ID: 1
Dec 17 21:21:52 deimos pluto[20021]: | SPI size: 16
Dec 17 21:21:52 deimos pluto[20021]: | Notify Message Type: INVALID_PAYLOAD_TYPE
Dec 17 21:21:52 deimos pluto[20021]: "jeannot_christian_psk_auto" #1: ignoring informational payload, type INVALID_PAYLOAD_TYPE
Dec 17 21:21:52 deimos pluto[20021]: | info: 22 90 cc c8 c0 cf 9c 35 0d e1 7b 27 3d d4 54 02
Dec 17 21:21:52 deimos pluto[20021]: | next event EVENT_RETRANSMIT in 20 seconds for #1
Dec 17 21:22:08 deimos pluto[20021]: |
Dec 17 21:22:08 deimos pluto[20021]: | *received whack message
Dec 17 21:22:08 deimos pluto[20021]: | next event EVENT_RETRANSMIT in 4 seconds for #1
Dec 17 21:22:11 deimos pluto[20021]: |
Dec 17 21:22:11 deimos pluto[20021]: | *received whack message
Dec 17 21:22:11 deimos pluto[20021]: | next event EVENT_RETRANSMIT in 1 seconds for #1
Dec 17 21:22:12 deimos pluto[20021]: |
Dec 17 21:22:12 deimos pluto[20021]: | *time to handle event
Dec 17 21:22:12 deimos pluto[20021]: | event after this is EVENT_SHUNT_SCAN in 72 seconds
Dec 17 21:22:12 deimos pluto[20021]: | handling event EVENT_RETRANSMIT for A.B.C.D "jeannot_christian_psk_auto" #1
Dec 17 21:22:12 deimos pluto[20021]: | sending 68 bytes for EVENT_RETRANSMIT through eth0 to A.B.C.D:500:
Dec 17 21:22:12 deimos pluto[20021]: | 22 90 cc c8 c0 cf 9c 35 0d e1 7b 27 3d d4 54 02
Dec 17 21:22:12 deimos pluto[20021]: | 05 10 02 01 00 00 00 00 00 00 00 44 be 66 d0 54
Dec 17 21:22:12 deimos pluto[20021]: | 08 de c8 7e 81 36 bd ce c5 fb b4 77 96 fd 5d a9
Dec 17 21:22:12 deimos pluto[20021]: | 8a 6c ba fd 2b b4 06 75 6f bd c0 8c 7b 1f ae 80
Dec 17 21:22:12 deimos pluto[20021]: | 88 12 51 5d
Dec 17 21:22:12 deimos pluto[20021]: | inserting event EVENT_RETRANSMIT, timeout in 40 seconds for #1
Dec 17 21:22:12 deimos pluto[20021]: | next event EVENT_RETRANSMIT in 40 seconds for #1
Dec 17 21:22:12 deimos pluto[20021]: |
Dec 17 21:22:12 deimos pluto[20021]: | *received 56 bytes from A.B.C.D:500 on eth0
Dec 17 21:22:12 deimos pluto[20021]: | 22 90 cc c8 c0 cf 9c 35 0d e1 7b 27 3d d4 54 02
Dec 17 21:22:12 deimos pluto[20021]: | 0b 10 05 00 00 00 00 00 00 00 00 38 00 00 00 1c
Dec 17 21:22:12 deimos pluto[20021]: | 00 00 00 01 01 10 00 01 22 90 cc c8 c0 cf 9c 35
Dec 17 21:22:12 deimos pluto[20021]: | 0d e1 7b 27 3d d4 54 02
Dec 17 21:22:12 deimos pluto[20021]: | **parse ISAKMP Message:
Dec 17 21:22:12 deimos pluto[20021]: | initiator cookie:
Dec 17 21:22:12 deimos pluto[20021]: | 22 90 cc c8 c0 cf 9c 35
Dec 17 21:22:12 deimos pluto[20021]: | responder cookie:
Dec 17 21:22:12 deimos pluto[20021]: | 0d e1 7b 27 3d d4 54 02
Dec 17 21:22:12 deimos pluto[20021]: | next payload type: ISAKMP_NEXT_N
Dec 17 21:22:12 deimos pluto[20021]: | ISAKMP version: ISAKMP Version 1.0
Dec 17 21:22:12 deimos pluto[20021]: | exchange type: ISAKMP_XCHG_INFO
Dec 17 21:22:12 deimos pluto[20021]: | flags: none
Dec 17 21:22:12 deimos pluto[20021]: | message ID: 00 00 00 00
Dec 17 21:22:12 deimos pluto[20021]: | length: 56
Dec 17 21:22:12 deimos pluto[20021]: | ICOOKIE: 22 90 cc c8 c0 cf 9c 35
Dec 17 21:22:12 deimos pluto[20021]: | RCOOKIE: 0d e1 7b 27 3d d4 54 02
Dec 17 21:22:12 deimos pluto[20021]: | peer: 18 d4 1a d6
Dec 17 21:22:12 deimos pluto[20021]: | state hash entry 19
Dec 17 21:22:12 deimos pluto[20021]: | state object #1 found, in STATE_MAIN_I3
Dec 17 21:22:12 deimos pluto[20021]: | ***parse ISAKMP Notification Payload:
Dec 17 21:22:12 deimos pluto[20021]: | next payload type: ISAKMP_NEXT_NONE
Dec 17 21:22:12 deimos pluto[20021]: | length: 28
Dec 17 21:22:12 deimos pluto[20021]: | DOI: ISAKMP_DOI_IPSEC
Dec 17 21:22:12 deimos pluto[20021]: | protocol ID: 1
Dec 17 21:22:12 deimos pluto[20021]: | SPI size: 16
Dec 17 21:22:12 deimos pluto[20021]: | Notify Message Type: INVALID_PAYLOAD_TYPE
Dec 17 21:22:12 deimos pluto[20021]: "jeannot_christian_psk_auto" #1: ignoring informational payload, type INVALID_PAYLOAD_TYPE
Dec 17 21:22:12 deimos pluto[20021]: | info: 22 90 cc c8 c0 cf 9c 35 0d e1 7b 27 3d d4 54 02
Dec 17 21:22:12 deimos pluto[20021]: | next event EVENT_RETRANSMIT in 40 seconds for #1
Dec 17 21:22:52 deimos pluto[20021]: |
Dec 17 21:22:52 deimos pluto[20021]: | *time to handle event
Dec 17 21:22:52 deimos pluto[20021]: | event after this is EVENT_SHUNT_SCAN in 32 seconds
Dec 17 21:22:52 deimos pluto[20021]: | handling event EVENT_RETRANSMIT for A.B.C.D "jeannot_christian_psk_auto" #1
Dec 17 21:22:52 deimos pluto[20021]: "jeannot_christian_psk_auto" #1: max number of retransmissions (2) reached STATE_MAIN_I3. Possible authentication failure: no acceptable response to our first encrypted message
Dec 17 21:22:52 deimos pluto[20021]: "jeannot_christian_psk_auto" #1: starting keying attempt 2 of an unlimited number, but releasing whack
Dec 17 21:22:52 deimos pluto[20021]: | creating state object #2 at 0x80ae328
Dec 17 21:22:52 deimos pluto[20021]: | ICOOKIE: 00 bf d2 1d bc dc f3 00
Dec 17 21:22:52 deimos pluto[20021]: | RCOOKIE: 00 00 00 00 00 00 00 00
Dec 17 21:22:52 deimos pluto[20021]: | peer: 18 d4 1a d6
Dec 17 21:22:52 deimos pluto[20021]: | state hash entry 19
Dec 17 21:22:52 deimos pluto[20021]: | inserting event EVENT_SO_DISCARD, timeout in 0 seconds for #2
Dec 17 21:22:52 deimos pluto[20021]: "jeannot_christian_psk_auto" #2: initiating Main Mode to replace #1
Dec 17 21:22:52 deimos pluto[20021]: | **emit ISAKMP Message:
Dec 17 21:22:52 deimos pluto[20021]: | initiator cookie:
Dec 17 21:22:52 deimos pluto[20021]: | 00 bf d2 1d bc dc f3 00
Dec 17 21:22:52 deimos pluto[20021]: | responder cookie:
Dec 17 21:22:52 deimos pluto[20021]: | 00 00 00 00 00 00 00 00
Dec 17 21:22:52 deimos pluto[20021]: | next payload type: ISAKMP_NEXT_SA
Dec 17 21:22:52 deimos pluto[20021]: | ISAKMP version: ISAKMP Version 1.0
Dec 17 21:22:52 deimos pluto[20021]: | exchange type: ISAKMP_XCHG_IDPROT
Dec 17 21:22:52 deimos pluto[20021]: | flags: none
Dec 17 21:22:52 deimos pluto[20021]: | message ID: 00 00 00 00
Dec 17 21:22:52 deimos pluto[20021]: | ***emit ISAKMP Security Association Payload:
Dec 17 21:22:52 deimos pluto[20021]: | next payload type: ISAKMP_NEXT_NONE
Dec 17 21:22:52 deimos pluto[20021]: | DOI: ISAKMP_DOI_IPSEC
Dec 17 21:22:52 deimos pluto[20021]: | ****emit IPsec DOI SIT:
Dec 17 21:22:52 deimos pluto[20021]: | IPsec DOI SIT: SIT_IDENTITY_ONLY
Dec 17 21:22:52 deimos pluto[20021]: | ****emit ISAKMP Proposal Payload:
Dec 17 21:22:52 deimos pluto[20021]: | next payload type: ISAKMP_NEXT_NONE
Dec 17 21:22:52 deimos pluto[20021]: | proposal number: 0
Dec 17 21:22:52 deimos pluto[20021]: | protocol ID: PROTO_ISAKMP
Dec 17 21:22:52 deimos pluto[20021]: | SPI size: 0
Dec 17 21:22:52 deimos pluto[20021]: | number of transforms: 4
Dec 17 21:22:52 deimos pluto[20021]: | *****emit ISAKMP Transform Payload (ISAKMP):
Dec 17 21:22:52 deimos pluto[20021]: | next payload type: ISAKMP_NEXT_T
Dec 17 21:22:52 deimos pluto[20021]: | transform number: 0
Dec 17 21:22:52 deimos pluto[20021]: | transform ID: KEY_IKE
Dec 17 21:22:52 deimos pluto[20021]: | ******emit ISAKMP Oakley attribute:
Dec 17 21:22:52 deimos pluto[20021]: | af+type: OAKLEY_LIFE_TYPE
Dec 17 21:22:52 deimos pluto[20021]: | length/value: 1
Dec 17 21:22:52 deimos pluto[20021]: | [1 is OAKLEY_LIFE_SECONDS]
Dec 17 21:22:52 deimos pluto[20021]: | ******emit ISAKMP Oakley attribute:
Dec 17 21:22:52 deimos pluto[20021]: | af+type: OAKLEY_LIFE_DURATION
Dec 17 21:22:52 deimos pluto[20021]: | length/value: 14400
Dec 17 21:22:52 deimos pluto[20021]: | ******emit ISAKMP Oakley attribute:
Dec 17 21:22:52 deimos pluto[20021]: | af+type: OAKLEY_ENCRYPTION_ALGORITHM
Dec 17 21:22:52 deimos pluto[20021]: | length/value: 5
Dec 17 21:22:52 deimos pluto[20021]: | [5 is OAKLEY_3DES_CBC]
Dec 17 21:22:52 deimos pluto[20021]: | ******emit ISAKMP Oakley attribute:
Dec 17 21:22:52 deimos pluto[20021]: | af+type: OAKLEY_HASH_ALGORITHM
Dec 17 21:22:52 deimos pluto[20021]: | length/value: 1
Dec 17 21:22:52 deimos pluto[20021]: | [1 is OAKLEY_MD5]
Dec 17 21:22:52 deimos pluto[20021]: | ******emit ISAKMP Oakley attribute:
Dec 17 21:22:52 deimos pluto[20021]: | af+type: OAKLEY_AUTHENTICATION_METHOD
Dec 17 21:22:52 deimos pluto[20021]: | length/value: 1
Dec 17 21:22:52 deimos pluto[20021]: | [1 is OAKLEY_PRESHARED_KEY]
Dec 17 21:22:52 deimos pluto[20021]: | ******emit ISAKMP Oakley attribute:
Dec 17 21:22:52 deimos pluto[20021]: | af+type: OAKLEY_GROUP_DESCRIPTION
Dec 17 21:22:52 deimos pluto[20021]: | length/value: 5
Dec 17 21:22:52 deimos pluto[20021]: | [5 is OAKLEY_GROUP_MODP1536 (extension)]
Dec 17 21:22:52 deimos pluto[20021]: | emitting length of ISAKMP Transform Payload (ISAKMP): 32
Dec 17 21:22:52 deimos pluto[20021]: | *****emit ISAKMP Transform Payload (ISAKMP):
Dec 17 21:22:52 deimos pluto[20021]: | next payload type: ISAKMP_NEXT_T
Dec 17 21:22:52 deimos pluto[20021]: | transform number: 1
Dec 17 21:22:52 deimos pluto[20021]: | transform ID: KEY_IKE
Dec 17 21:22:52 deimos pluto[20021]: | ******emit ISAKMP Oakley attribute:
Dec 17 21:22:52 deimos pluto[20021]: | af+type: OAKLEY_LIFE_TYPE
Dec 17 21:22:52 deimos pluto[20021]: | length/value: 1
Dec 17 21:22:52 deimos pluto[20021]: | [1 is OAKLEY_LIFE_SECONDS]
Dec 17 21:22:52 deimos pluto[20021]: | ******emit ISAKMP Oakley attribute:
Dec 17 21:22:52 deimos pluto[20021]: | af+type: OAKLEY_LIFE_DURATION
Dec 17 21:22:52 deimos pluto[20021]: | length/value: 14400
Dec 17 21:22:52 deimos pluto[20021]: | ******emit ISAKMP Oakley attribute:
Dec 17 21:22:52 deimos pluto[20021]: | af+type: OAKLEY_ENCRYPTION_ALGORITHM
Dec 17 21:22:52 deimos pluto[20021]: | length/value: 5
Dec 17 21:22:52 deimos pluto[20021]: | [5 is OAKLEY_3DES_CBC]
Dec 17 21:22:52 deimos pluto[20021]: | ******emit ISAKMP Oakley attribute:
Dec 17 21:22:52 deimos pluto[20021]: | af+type: OAKLEY_HASH_ALGORITHM
Dec 17 21:22:52 deimos pluto[20021]: | length/value: 2
Dec 17 21:22:52 deimos pluto[20021]: | [2 is OAKLEY_SHA]
Dec 17 21:22:52 deimos pluto[20021]: | ******emit ISAKMP Oakley attribute:
Dec 17 21:22:52 deimos pluto[20021]: | af+type: OAKLEY_AUTHENTICATION_METHOD
Dec 17 21:22:52 deimos pluto[20021]: | length/value: 1
Dec 17 21:22:52 deimos pluto[20021]: | [1 is OAKLEY_PRESHARED_KEY]
Dec 17 21:22:52 deimos pluto[20021]: | ******emit ISAKMP Oakley attribute:
Dec 17 21:22:52 deimos pluto[20021]: | af+type: OAKLEY_GROUP_DESCRIPTION
Dec 17 21:22:52 deimos pluto[20021]: | length/value: 5
Dec 17 21:22:52 deimos pluto[20021]: | [5 is OAKLEY_GROUP_MODP1536 (extension)]
Dec 17 21:22:52 deimos pluto[20021]: | emitting length of ISAKMP Transform Payload (ISAKMP): 32
Dec 17 21:22:52 deimos pluto[20021]: | *****emit ISAKMP Transform Payload (ISAKMP):
Dec 17 21:22:52 deimos pluto[20021]: | next payload type: ISAKMP_NEXT_T
Dec 17 21:22:52 deimos pluto[20021]: | transform number: 2
Dec 17 21:22:52 deimos pluto[20021]: | transform ID: KEY_IKE
Dec 17 21:22:52 deimos pluto[20021]: | ******emit ISAKMP Oakley attribute:
Dec 17 21:22:52 deimos pluto[20021]: | af+type: OAKLEY_LIFE_TYPE
Dec 17 21:22:52 deimos pluto[20021]: | length/value: 1
Dec 17 21:22:52 deimos pluto[20021]: | [1 is OAKLEY_LIFE_SECONDS]
Dec 17 21:22:52 deimos pluto[20021]: | ******emit ISAKMP Oakley attribute:
Dec 17 21:22:52 deimos pluto[20021]: | af+type: OAKLEY_LIFE_DURATION
Dec 17 21:22:52 deimos pluto[20021]: | length/value: 14400
Dec 17 21:22:52 deimos pluto[20021]: | ******emit ISAKMP Oakley attribute:
Dec 17 21:22:52 deimos pluto[20021]: | af+type: OAKLEY_ENCRYPTION_ALGORITHM
Dec 17 21:22:52 deimos pluto[20021]: | length/value: 5
Dec 17 21:22:52 deimos pluto[20021]: | [5 is OAKLEY_3DES_CBC]
Dec 17 21:22:52 deimos pluto[20021]: | ******emit ISAKMP Oakley attribute:
Dec 17 21:22:52 deimos pluto[20021]: | af+type: OAKLEY_HASH_ALGORITHM
Dec 17 21:22:52 deimos pluto[20021]: | length/value: 2
Dec 17 21:22:52 deimos pluto[20021]: | [2 is OAKLEY_SHA]
Dec 17 21:22:52 deimos pluto[20021]: | ******emit ISAKMP Oakley attribute:
Dec 17 21:22:52 deimos pluto[20021]: | af+type: OAKLEY_AUTHENTICATION_METHOD
Dec 17 21:22:52 deimos pluto[20021]: | length/value: 1
Dec 17 21:22:52 deimos pluto[20021]: | [1 is OAKLEY_PRESHARED_KEY]
Dec 17 21:22:52 deimos pluto[20021]: | ******emit ISAKMP Oakley attribute:
Dec 17 21:22:52 deimos pluto[20021]: | af+type: OAKLEY_GROUP_DESCRIPTION
Dec 17 21:22:52 deimos pluto[20021]: | length/value: 2
Dec 17 21:22:52 deimos pluto[20021]: | [2 is OAKLEY_GROUP_MODP1024]
Dec 17 21:22:52 deimos pluto[20021]: | emitting length of ISAKMP Transform Payload (ISAKMP): 32
Dec 17 21:22:52 deimos pluto[20021]: | *****emit ISAKMP Transform Payload (ISAKMP):
Dec 17 21:22:52 deimos pluto[20021]: | next payload type: ISAKMP_NEXT_NONE
Dec 17 21:22:52 deimos pluto[20021]: | transform number: 3
Dec 17 21:22:52 deimos pluto[20021]: | transform ID: KEY_IKE
Dec 17 21:22:52 deimos pluto[20021]: | ******emit ISAKMP Oakley attribute:
Dec 17 21:22:52 deimos pluto[20021]: | af+type: OAKLEY_LIFE_TYPE
Dec 17 21:22:52 deimos pluto[20021]: | length/value: 1
Dec 17 21:22:52 deimos pluto[20021]: | [1 is OAKLEY_LIFE_SECONDS]
Dec 17 21:22:52 deimos pluto[20021]: | ******emit ISAKMP Oakley attribute:
Dec 17 21:22:52 deimos pluto[20021]: | af+type: OAKLEY_LIFE_DURATION
Dec 17 21:22:52 deimos pluto[20021]: | length/value: 14400
Dec 17 21:22:52 deimos pluto[20021]: | ******emit ISAKMP Oakley attribute:
Dec 17 21:22:52 deimos pluto[20021]: | af+type: OAKLEY_ENCRYPTION_ALGORITHM
Dec 17 21:22:52 deimos pluto[20021]: | length/value: 5
Dec 17 21:22:52 deimos pluto[20021]: | [5 is OAKLEY_3DES_CBC]
Dec 17 21:22:52 deimos pluto[20021]: | ******emit ISAKMP Oakley attribute:
Dec 17 21:22:52 deimos pluto[20021]: | af+type: OAKLEY_HASH_ALGORITHM
Dec 17 21:22:52 deimos pluto[20021]: | length/value: 1
Dec 17 21:22:52 deimos pluto[20021]: | [1 is OAKLEY_MD5]
Dec 17 21:22:52 deimos pluto[20021]: | ******emit ISAKMP Oakley attribute:
Dec 17 21:22:52 deimos pluto[20021]: | af+type: OAKLEY_AUTHENTICATION_METHOD
Dec 17 21:22:52 deimos pluto[20021]: | length/value: 1
Dec 17 21:22:52 deimos pluto[20021]: | [1 is OAKLEY_PRESHARED_KEY]
Dec 17 21:22:52 deimos pluto[20021]: | ******emit ISAKMP Oakley attribute:
Dec 17 21:22:52 deimos pluto[20021]: | af+type: OAKLEY_GROUP_DESCRIPTION
Dec 17 21:22:52 deimos pluto[20021]: | length/value: 2
Dec 17 21:22:52 deimos pluto[20021]: | [2 is OAKLEY_GROUP_MODP1024]
Dec 17 21:22:52 deimos pluto[20021]: | emitting length of ISAKMP Transform Payload (ISAKMP): 32
Dec 17 21:22:52 deimos pluto[20021]: | emitting length of ISAKMP Proposal Payload: 136
Dec 17 21:22:52 deimos pluto[20021]: | emitting length of ISAKMP Security Association Payload: 148
Dec 17 21:22:52 deimos pluto[20021]: | emitting length of ISAKMP Message: 176
Dec 17 21:22:52 deimos pluto[20021]: | sending 176 bytes for main_outI1 through eth0 to A.B.C.D:500:
Dec 17 21:22:52 deimos pluto[20021]: | 00 bf d2 1d bc dc f3 00 00 00 00 00 00 00 00 00
Dec 17 21:22:52 deimos pluto[20021]: | 01 10 02 00 00 00 00 00 00 00 00 b0 00 00 00 94
Dec 17 21:22:52 deimos pluto[20021]: | 00 00 00 01 00 00 00 01 00 00 00 88 00 01 00 04
Dec 17 21:22:52 deimos pluto[20021]: | 03 00 00 20 00 01 00 00 80 0b 00 01 80 0c 38 40
Dec 17 21:22:52 deimos pluto[20021]: | 80 01 00 05 80 02 00 01 80 03 00 01 80 04 00 05
Dec 17 21:22:52 deimos pluto[20021]: | 03 00 00 20 01 01 00 00 80 0b 00 01 80 0c 38 40
Dec 17 21:22:52 deimos pluto[20021]: | 80 01 00 05 80 02 00 02 80 03 00 01 80 04 00 05
Dec 17 21:22:52 deimos pluto[20021]: | 03 00 00 20 02 01 00 00 80 0b 00 01 80 0c 38 40
Dec 17 21:22:52 deimos pluto[20021]: | 80 01 00 05 80 02 00 02 80 03 00 01 80 04 00 02
Dec 17 21:22:52 deimos pluto[20021]: | 00 00 00 20 03 01 00 00 80 0b 00 01 80 0c 38 40
Dec 17 21:22:52 deimos pluto[20021]: | 80 01 00 05 80 02 00 01 80 03 00 01 80 04 00 02
Dec 17 21:22:52 deimos pluto[20021]: | inserting event EVENT_RETRANSMIT, timeout in 10 seconds for #2
Dec 17 21:22:52 deimos pluto[20021]: | next event EVENT_RETRANSMIT in 10 seconds for #2
Dec 17 21:22:53 deimos pluto[20021]: |
Dec 17 21:22:53 deimos pluto[20021]: | *received 84 bytes from A.B.C.D:500 on eth0
Dec 17 21:22:53 deimos pluto[20021]: | 00 bf d2 1d bc dc f3 00 56 4e 32 5d 85 55 48 ce
Dec 17 21:22:53 deimos pluto[20021]: | 01 10 02 00 00 00 00 00 00 00 00 54 00 00 00 38
Dec 17 21:22:53 deimos pluto[20021]: | 00 00 00 01 00 00 00 01 00 00 00 2c 01 01 00 01
Dec 17 21:22:53 deimos pluto[20021]: | 00 00 00 24 01 01 00 00 80 01 00 05 80 02 00 02
Dec 17 21:22:53 deimos pluto[20021]: | 80 03 00 01 80 04 00 02 80 0b 00 01 00 0c 00 04
Dec 17 21:22:53 deimos pluto[20021]: | 00 00 38 40
Dec 17 21:22:53 deimos pluto[20021]: | **parse ISAKMP Message:
Dec 17 21:22:53 deimos pluto[20021]: | initiator cookie:
Dec 17 21:22:53 deimos pluto[20021]: | 00 bf d2 1d bc dc f3 00
Dec 17 21:22:53 deimos pluto[20021]: | responder cookie:
Dec 17 21:22:53 deimos pluto[20021]: | 56 4e 32 5d 85 55 48 ce
Dec 17 21:22:53 deimos pluto[20021]: | next payload type: ISAKMP_NEXT_SA
Dec 17 21:22:53 deimos pluto[20021]: | ISAKMP version: ISAKMP Version 1.0
Dec 17 21:22:53 deimos pluto[20021]: | exchange type: ISAKMP_XCHG_IDPROT
Dec 17 21:22:53 deimos pluto[20021]: | flags: none
Dec 17 21:22:53 deimos pluto[20021]: | message ID: 00 00 00 00
Dec 17 21:22:53 deimos pluto[20021]: | length: 84
Dec 17 21:22:53 deimos pluto[20021]: | ICOOKIE: 00 bf d2 1d bc dc f3 00
Dec 17 21:22:53 deimos pluto[20021]: | RCOOKIE: 56 4e 32 5d 85 55 48 ce
Dec 17 21:22:53 deimos pluto[20021]: | peer: 18 d4 1a d6
Dec 17 21:22:53 deimos pluto[20021]: | state hash entry 20
Dec 17 21:22:53 deimos pluto[20021]: | state object not found
Dec 17 21:22:53 deimos pluto[20021]: | ICOOKIE: 00 bf d2 1d bc dc f3 00
Dec 17 21:22:53 deimos pluto[20021]: | RCOOKIE: 00 00 00 00 00 00 00 00
Dec 17 21:22:53 deimos pluto[20021]: | peer: 18 d4 1a d6
Dec 17 21:22:53 deimos pluto[20021]: | state hash entry 19
Dec 17 21:22:53 deimos pluto[20021]: | state object #2 found, in STATE_MAIN_I1
Dec 17 21:22:53 deimos pluto[20021]: | ***parse ISAKMP Security Association Payload:
Dec 17 21:22:53 deimos pluto[20021]: | next payload type: ISAKMP_NEXT_NONE
Dec 17 21:22:53 deimos pluto[20021]: | length: 56
Dec 17 21:22:53 deimos pluto[20021]: | DOI: ISAKMP_DOI_IPSEC
Dec 17 21:22:53 deimos pluto[20021]: | ****parse IPsec DOI SIT:
Dec 17 21:22:53 deimos pluto[20021]: | IPsec DOI SIT: SIT_IDENTITY_ONLY
Dec 17 21:22:53 deimos pluto[20021]: | ****parse ISAKMP Proposal Payload:
Dec 17 21:22:53 deimos pluto[20021]: | next payload type: ISAKMP_NEXT_NONE
Dec 17 21:22:53 deimos pluto[20021]: | length: 44
Dec 17 21:22:53 deimos pluto[20021]: | proposal number: 1
Dec 17 21:22:53 deimos pluto[20021]: | protocol ID: PROTO_ISAKMP
Dec 17 21:22:53 deimos pluto[20021]: | SPI size: 0
Dec 17 21:22:53 deimos pluto[20021]: | number of transforms: 1
Dec 17 21:22:53 deimos pluto[20021]: | *****parse ISAKMP Transform Payload (ISAKMP):
Dec 17 21:22:53 deimos pluto[20021]: | next payload type: ISAKMP_NEXT_NONE
Dec 17 21:22:53 deimos pluto[20021]: | length: 36
Dec 17 21:22:53 deimos pluto[20021]: | transform number: 1
Dec 17 21:22:53 deimos pluto[20021]: | transform ID: KEY_IKE
Dec 17 21:22:53 deimos pluto[20021]: | ******parse ISAKMP Oakley attribute:
Dec 17 21:22:53 deimos pluto[20021]: | af+type: OAKLEY_ENCRYPTION_ALGORITHM
Dec 17 21:22:53 deimos pluto[20021]: | length/value: 5
Dec 17 21:22:53 deimos pluto[20021]: | [5 is OAKLEY_3DES_CBC]
Dec 17 21:22:53 deimos pluto[20021]: | ******parse ISAKMP Oakley attribute:
Dec 17 21:22:53 deimos pluto[20021]: | af+type: OAKLEY_HASH_ALGORITHM
Dec 17 21:22:53 deimos pluto[20021]: | length/value: 2
Dec 17 21:22:53 deimos pluto[20021]: | [2 is OAKLEY_SHA]
Dec 17 21:22:53 deimos pluto[20021]: | ******parse ISAKMP Oakley attribute:
Dec 17 21:22:53 deimos pluto[20021]: | af+type: OAKLEY_AUTHENTICATION_METHOD
Dec 17 21:22:53 deimos pluto[20021]: | length/value: 1
Dec 17 21:22:53 deimos pluto[20021]: | [1 is OAKLEY_PRESHARED_KEY]
Dec 17 21:22:53 deimos pluto[20021]: | ******parse ISAKMP Oakley attribute:
Dec 17 21:22:53 deimos pluto[20021]: | af+type: OAKLEY_GROUP_DESCRIPTION
Dec 17 21:22:53 deimos pluto[20021]: | length/value: 2
Dec 17 21:22:53 deimos pluto[20021]: | [2 is OAKLEY_GROUP_MODP1024]
Dec 17 21:22:53 deimos pluto[20021]: | ******parse ISAKMP Oakley attribute:
Dec 17 21:22:53 deimos pluto[20021]: | af+type: OAKLEY_LIFE_TYPE
Dec 17 21:22:53 deimos pluto[20021]: | length/value: 1
Dec 17 21:22:53 deimos pluto[20021]: | [1 is OAKLEY_LIFE_SECONDS]
Dec 17 21:22:53 deimos pluto[20021]: | ******parse ISAKMP Oakley attribute:
Dec 17 21:22:53 deimos pluto[20021]: | af+type: OAKLEY_LIFE_DURATION (variable length)
Dec 17 21:22:53 deimos pluto[20021]: | length/value: 4
Dec 17 21:22:53 deimos pluto[20021]: | long duration: 14400
Dec 17 21:22:53 deimos pluto[20021]: | Oakley Transform 1 accepted
Dec 17 21:22:53 deimos pluto[20021]: | **emit ISAKMP Message:
Dec 17 21:22:53 deimos pluto[20021]: | initiator cookie:
Dec 17 21:22:53 deimos pluto[20021]: | 00 bf d2 1d bc dc f3 00
Dec 17 21:22:53 deimos pluto[20021]: | responder cookie:
Dec 17 21:22:53 deimos pluto[20021]: | 56 4e 32 5d 85 55 48 ce
Dec 17 21:22:53 deimos pluto[20021]: | next payload type: ISAKMP_NEXT_KE
Dec 17 21:22:53 deimos pluto[20021]: | ISAKMP version: ISAKMP Version 1.0
Dec 17 21:22:53 deimos pluto[20021]: | exchange type: ISAKMP_XCHG_IDPROT
Dec 17 21:22:53 deimos pluto[20021]: | flags: none
Dec 17 21:22:53 deimos pluto[20021]: | message ID: 00 00 00 00
Dec 17 21:22:53 deimos pluto[20021]: | Local DH secret:
Dec 17 21:22:53 deimos pluto[20021]: | b7 fe c9 5d 6e 93 58 2e 5b 96 0d 27 51 5d 44 76
Dec 17 21:22:53 deimos pluto[20021]: | 84 61 6b 3e b2 84 50 7f 4c 40 de b4 36 71 e1 88
Dec 17 21:22:53 deimos pluto[20021]: | Public DH value sent:
Dec 17 21:22:53 deimos pluto[20021]: | ae d7 23 77 c3 d8 f4 aa cb 1e 52 c5 f2 89 4a 87
Dec 17 21:22:53 deimos pluto[20021]: | 13 9b 9c f7 c6 82 c7 23 86 9f 9f 06 99 9c 11 c8
Dec 17 21:22:53 deimos pluto[20021]: | 6f 8c c0 ee 68 c9 be 5f 4a 8e 05 ba 09 78 5b e5
Dec 17 21:22:53 deimos pluto[20021]: | c1 9b 92 0c 34 26 fd 30 0f 5f 91 0f e9 36 e8 10
Dec 17 21:22:53 deimos pluto[20021]: | c1 76 f4 ae 51 5b 76 fb e1 9a 0e 43 62 da d1 3a
Dec 17 21:22:53 deimos pluto[20021]: | b8 39 e5 3e 68 f4 eb 6a e7 7e 58 82 ff b6 c0 a6
Dec 17 21:22:53 deimos pluto[20021]: | 18 43 e3 dd 3f 3c 62 29 ec b6 82 e0 2a d3 07 fc
Dec 17 21:22:53 deimos pluto[20021]: | b5 95 bd b1 8f 9e 80 d4 a0 62 8b a7 48 b2 c6 07
Dec 17 21:22:53 deimos pluto[20021]: | ***emit ISAKMP Key Exchange Payload:
Dec 17 21:22:53 deimos pluto[20021]: | next payload type: ISAKMP_NEXT_NONCE
Dec 17 21:22:53 deimos pluto[20021]: | emitting 128 raw bytes of keyex value into ISAKMP Key Exchange Payload
Dec 17 21:22:53 deimos pluto[20021]: | keyex value ae d7 23 77 c3 d8 f4 aa cb 1e 52 c5 f2 89 4a 87
Dec 17 21:22:53 deimos pluto[20021]: | 13 9b 9c f7 c6 82 c7 23 86 9f 9f 06 99 9c 11 c8
Dec 17 21:22:53 deimos pluto[20021]: | 6f 8c c0 ee 68 c9 be 5f 4a 8e 05 ba 09 78 5b e5
Dec 17 21:22:53 deimos pluto[20021]: | c1 9b 92 0c 34 26 fd 30 0f 5f 91 0f e9 36 e8 10
Dec 17 21:22:53 deimos pluto[20021]: | c1 76 f4 ae 51 5b 76 fb e1 9a 0e 43 62 da d1 3a
Dec 17 21:22:53 deimos pluto[20021]: | b8 39 e5 3e 68 f4 eb 6a e7 7e 58 82 ff b6 c0 a6
Dec 17 21:22:53 deimos pluto[20021]: | 18 43 e3 dd 3f 3c 62 29 ec b6 82 e0 2a d3 07 fc
Dec 17 21:22:53 deimos pluto[20021]: | b5 95 bd b1 8f 9e 80 d4 a0 62 8b a7 48 b2 c6 07
Dec 17 21:22:53 deimos pluto[20021]: | emitting length of ISAKMP Key Exchange Payload: 132
Dec 17 21:22:54 deimos pluto[20021]: | ***emit ISAKMP Nonce Payload:
Dec 17 21:22:54 deimos pluto[20021]: | next payload type: ISAKMP_NEXT_NONE
Dec 17 21:22:54 deimos pluto[20021]: | emitting 16 raw bytes of Ni into ISAKMP Nonce Payload
Dec 17 21:22:54 deimos pluto[20021]: | Ni 78 91 8f e9 34 8b d9 c2 b3 64 2c 88 4e 27 ee dd
Dec 17 21:22:54 deimos pluto[20021]: | emitting length of ISAKMP Nonce Payload: 20
Dec 17 21:22:54 deimos pluto[20021]: | emitting length of ISAKMP Message: 180
Dec 17 21:22:54 deimos pluto[20021]: | ICOOKIE: 00 bf d2 1d bc dc f3 00
Dec 17 21:22:54 deimos pluto[20021]: | RCOOKIE: 00 00 00 00 00 00 00 00
Dec 17 21:22:54 deimos pluto[20021]: | peer: 18 d4 1a d6
Dec 17 21:22:54 deimos pluto[20021]: | state hash entry 19
Dec 17 21:22:54 deimos pluto[20021]: | ICOOKIE: 00 bf d2 1d bc dc f3 00
Dec 17 21:22:54 deimos pluto[20021]: | RCOOKIE: 56 4e 32 5d 85 55 48 ce
Dec 17 21:22:54 deimos pluto[20021]: | peer: 18 d4 1a d6
Dec 17 21:22:54 deimos pluto[20021]: | state hash entry 20
Dec 17 21:22:54 deimos pluto[20021]: | sending 180 bytes for STATE_MAIN_I1 through eth0 to A.B.C.D:500:
Dec 17 21:22:54 deimos pluto[20021]: | 00 bf d2 1d bc dc f3 00 56 4e 32 5d 85 55 48 ce
Dec 17 21:22:54 deimos pluto[20021]: | 04 10 02 00 00 00 00 00 00 00 00 b4 0a 00 00 84
Dec 17 21:22:54 deimos pluto[20021]: | ae d7 23 77 c3 d8 f4 aa cb 1e 52 c5 f2 89 4a 87
Dec 17 21:22:54 deimos pluto[20021]: | 13 9b 9c f7 c6 82 c7 23 86 9f 9f 06 99 9c 11 c8
Dec 17 21:22:54 deimos pluto[20021]: | 6f 8c c0 ee 68 c9 be 5f 4a 8e 05 ba 09 78 5b e5
Dec 17 21:22:54 deimos pluto[20021]: | c1 9b 92 0c 34 26 fd 30 0f 5f 91 0f e9 36 e8 10
Dec 17 21:22:54 deimos pluto[20021]: | c1 76 f4 ae 51 5b 76 fb e1 9a 0e 43 62 da d1 3a
Dec 17 21:22:54 deimos pluto[20021]: | b8 39 e5 3e 68 f4 eb 6a e7 7e 58 82 ff b6 c0 a6
Dec 17 21:22:54 deimos pluto[20021]: | 18 43 e3 dd 3f 3c 62 29 ec b6 82 e0 2a d3 07 fc
Dec 17 21:22:54 deimos pluto[20021]: | b5 95 bd b1 8f 9e 80 d4 a0 62 8b a7 48 b2 c6 07
Dec 17 21:22:54 deimos pluto[20021]: | 00 00 00 14 78 91 8f e9 34 8b d9 c2 b3 64 2c 88
Dec 17 21:22:54 deimos pluto[20021]: | 4e 27 ee dd
Dec 17 21:22:54 deimos pluto[20021]: | inserting event EVENT_RETRANSMIT, timeout in 10 seconds for #2
Dec 17 21:22:54 deimos pluto[20021]: | next event EVENT_RETRANSMIT in 10 seconds for #2
Dec 17 21:22:55 deimos pluto[20021]: |
Dec 17 21:22:55 deimos pluto[20021]: | *received 184 bytes from A.B.C.D:500 on eth0
Dec 17 21:22:55 deimos pluto[20021]: | 00 bf d2 1d bc dc f3 00 56 4e 32 5d 85 55 48 ce
Dec 17 21:22:55 deimos pluto[20021]: | 04 10 02 00 00 00 00 00 00 00 00 b8 0a 00 00 84
Dec 17 21:22:55 deimos pluto[20021]: | 21 e9 17 e3 b3 54 4e 21 6e 64 8b 86 f8 29 9f db
Dec 17 21:22:55 deimos pluto[20021]: | ce 4b 00 58 8d b6 c0 0b 5e f4 58 66 70 b5 89 95
Dec 17 21:22:55 deimos pluto[20021]: | d5 70 96 dd c1 06 de 88 fd cd d4 25 c8 f0 fd c9
Dec 17 21:22:55 deimos pluto[20021]: | 9b 8f 89 31 4b ed 71 d8 6c 7b b6 0f 9e f5 99 10
Dec 17 21:22:55 deimos pluto[20021]: | c4 5f f6 30 19 44 4d 14 47 a7 9d e3 7e cc b2 0b
Dec 17 21:22:55 deimos pluto[20021]: | f3 01 e8 49 6c 39 b4 8d 50 38 92 dd c5 2d 44 a0
Dec 17 21:22:55 deimos pluto[20021]: | f3 2f 75 a4 82 66 89 b0 15 23 25 0b c6 d4 99 df
Dec 17 21:22:55 deimos pluto[20021]: | 52 0b c1 b3 b7 2d ae 37 f7 5c cb 8e 31 19 9c 2d
Dec 17 21:22:55 deimos pluto[20021]: | 00 00 00 18 ae 05 c2 f7 bb d3 52 74 9b 4c d4 fd
Dec 17 21:22:55 deimos pluto[20021]: | 8a 02 17 bb 25 96 a0 fc
Dec 17 21:22:55 deimos pluto[20021]: | **parse ISAKMP Message:
Dec 17 21:22:55 deimos pluto[20021]: | initiator cookie:
Dec 17 21:22:55 deimos pluto[20021]: | 00 bf d2 1d bc dc f3 00
Dec 17 21:22:55 deimos pluto[20021]: | responder cookie:
Dec 17 21:22:55 deimos pluto[20021]: | 56 4e 32 5d 85 55 48 ce
Dec 17 21:22:55 deimos pluto[20021]: | next payload type: ISAKMP_NEXT_KE
Dec 17 21:22:55 deimos pluto[20021]: | ISAKMP version: ISAKMP Version 1.0
Dec 17 21:22:55 deimos pluto[20021]: | exchange type: ISAKMP_XCHG_IDPROT
Dec 17 21:22:55 deimos pluto[20021]: | flags: none
Dec 17 21:22:55 deimos pluto[20021]: | message ID: 00 00 00 00
Dec 17 21:22:55 deimos pluto[20021]: | length: 184
Dec 17 21:22:55 deimos pluto[20021]: | ICOOKIE: 00 bf d2 1d bc dc f3 00
Dec 17 21:22:55 deimos pluto[20021]: | RCOOKIE: 56 4e 32 5d 85 55 48 ce
Dec 17 21:22:55 deimos pluto[20021]: | peer: 18 d4 1a d6
Dec 17 21:22:55 deimos pluto[20021]: | state hash entry 20
Dec 17 21:22:55 deimos pluto[20021]: | state object #2 found, in STATE_MAIN_I2
Dec 17 21:22:55 deimos pluto[20021]: | ***parse ISAKMP Key Exchange Payload:
Dec 17 21:22:55 deimos pluto[20021]: | next payload type: ISAKMP_NEXT_NONCE
Dec 17 21:22:55 deimos pluto[20021]: | length: 132
Dec 17 21:22:55 deimos pluto[20021]: | ***parse ISAKMP Nonce Payload:
Dec 17 21:22:55 deimos pluto[20021]: | next payload type: ISAKMP_NEXT_NONE
Dec 17 21:22:55 deimos pluto[20021]: | length: 24
Dec 17 21:22:55 deimos pluto[20021]: | **emit ISAKMP Message:
Dec 17 21:22:55 deimos pluto[20021]: | initiator cookie:
Dec 17 21:22:55 deimos pluto[20021]: | 00 bf d2 1d bc dc f3 00
Dec 17 21:22:55 deimos pluto[20021]: | responder cookie:
Dec 17 21:22:55 deimos pluto[20021]: | 56 4e 32 5d 85 55 48 ce
Dec 17 21:22:55 deimos pluto[20021]: | next payload type: ISAKMP_NEXT_ID
Dec 17 21:22:55 deimos pluto[20021]: | ISAKMP version: ISAKMP Version 1.0
Dec 17 21:22:55 deimos pluto[20021]: | exchange type: ISAKMP_XCHG_IDPROT
Dec 17 21:22:55 deimos pluto[20021]: | flags: ISAKMP_FLAG_ENCRYPTION
Dec 17 21:22:55 deimos pluto[20021]: | message ID: 00 00 00 00
Dec 17 21:22:55 deimos pluto[20021]: | DH public value received:
Dec 17 21:22:55 deimos pluto[20021]: | 21 e9 17 e3 b3 54 4e 21 6e 64 8b 86 f8 29 9f db
Dec 17 21:22:55 deimos pluto[20021]: | ce 4b 00 58 8d b6 c0 0b 5e f4 58 66 70 b5 89 95
Dec 17 21:22:55 deimos pluto[20021]: | d5 70 96 dd c1 06 de 88 fd cd d4 25 c8 f0 fd c9
Dec 17 21:22:55 deimos pluto[20021]: | 9b 8f 89 31 4b ed 71 d8 6c 7b b6 0f 9e f5 99 10
Dec 17 21:22:55 deimos pluto[20021]: | c4 5f f6 30 19 44 4d 14 47 a7 9d e3 7e cc b2 0b
Dec 17 21:22:55 deimos pluto[20021]: | f3 01 e8 49 6c 39 b4 8d 50 38 92 dd c5 2d 44 a0
Dec 17 21:22:55 deimos pluto[20021]: | f3 2f 75 a4 82 66 89 b0 15 23 25 0b c6 d4 99 df
Dec 17 21:22:55 deimos pluto[20021]: | 52 0b c1 b3 b7 2d ae 37 f7 5c cb 8e 31 19 9c 2d
Dec 17 21:22:55 deimos pluto[20021]: | DH shared secret:
Dec 17 21:22:55 deimos pluto[20021]: | e5 d5 4d 70 46 fe 68 6e a2 bf c7 5e 9f 10 79 c7
Dec 17 21:22:55 deimos pluto[20021]: | 93 91 53 b5 c8 ee f2 01 18 1c 41 cc 27 0f 13 15
Dec 17 21:22:55 deimos pluto[20021]: | 28 d9 f0 a6 ea b1 02 b3 d0 99 8d 16 d2 00 87 80
Dec 17 21:22:55 deimos pluto[20021]: | 26 be a3 8a 5d de 15 6e e5 92 83 37 af f7 0e 23
Dec 17 21:22:55 deimos pluto[20021]: | 87 c1 75 8b 1c c8 9e a9 ba e7 b3 64 b9 e6 6d 8d
Dec 17 21:22:56 deimos pluto[20021]: | 68 d6 7d 79 dc ce 03 ed 1d 2a 3a 6f 62 58 e7 84
Dec 17 21:22:56 deimos pluto[20021]: | 3c 34 69 0c 87 75 9c 4c 09 c6 fc 54 2f b3 c7 b9
Dec 17 21:22:56 deimos pluto[20021]: | 90 14 f9 d0 2f 3d 3f 58 f4 91 e9 43 45 c1 f8 5b
Dec 17 21:22:56 deimos pluto[20021]: | Skeyid: 01 7b ca c1 56 2a 39 4d 22 53 8a f0 4b 16 90 84
Dec 17 21:22:56 deimos pluto[20021]: | 67 d7 8c 39
Dec 17 21:22:56 deimos pluto[20021]: | Skeyid_d: 3f 19 ce e1 2f 5d 4f 74 59 3a 44 16 79 25 32 25
Dec 17 21:22:56 deimos pluto[20021]: | 3b 9a a1 e9
Dec 17 21:22:56 deimos pluto[20021]: | Skeyid_a: 18 40 98 a0 5c b5 33 ed 9c 7a e6 d0 c7 cf 9c b4
Dec 17 21:22:56 deimos pluto[20021]: | 68 2c 8e 36
Dec 17 21:22:56 deimos pluto[20021]: | Skeyid_e: f5 aa d2 b1 b9 42 7f 4d b7 85 fe 15 07 01 fa 3d
Dec 17 21:22:56 deimos pluto[20021]: | d2 08 9b c0
Dec 17 21:22:56 deimos pluto[20021]: | enc key: 21 d3 cd d9 59 7a 26 15 a4 ed c9 47 24 dc cc 70
Dec 17 21:22:56 deimos pluto[20021]: | b2 a5 80 a0 4f e9 f9 cd
Dec 17 21:22:56 deimos pluto[20021]: | IV: 5c 6c 2e e6 07 80 86 89 67 ff 04 6f 1b 9a 9d 26
Dec 17 21:22:56 deimos pluto[20021]: | 47 80 40 43
Dec 17 21:22:56 deimos pluto[20021]: | ***emit ISAKMP Identification Payload (IPsec DOI):
Dec 17 21:22:56 deimos pluto[20021]: | next payload type: ISAKMP_NEXT_HASH
Dec 17 21:22:56 deimos pluto[20021]: | ID type: ID_IPV4_ADDR
Dec 17 21:22:56 deimos pluto[20021]: | Protocol ID: 0
Dec 17 21:22:56 deimos pluto[20021]: | port: 0
Dec 17 21:22:56 deimos pluto[20021]: | emitting 4 raw bytes of my identity into ISAKMP Identification Payload (IPsec DOI)
Dec 17 21:22:56 deimos pluto[20021]: | my identity 8e d9 ae 39
Dec 17 21:22:56 deimos pluto[20021]: | emitting length of ISAKMP Identification Payload (IPsec DOI): 12
Dec 17 21:22:56 deimos pluto[20021]: | hashing 144 bytes of SA
Dec 17 21:22:56 deimos pluto[20021]: | ***emit ISAKMP Hash Payload:
Dec 17 21:22:56 deimos pluto[20021]: | next payload type: ISAKMP_NEXT_NONE
Dec 17 21:22:56 deimos pluto[20021]: | emitting 20 raw bytes of HASH_I into ISAKMP Hash Payload
Dec 17 21:22:56 deimos pluto[20021]: | HASH_I 71 20 16 40 29 8d 0c 78 27 35 23 92 93 ff d4 58
Dec 17 21:22:56 deimos pluto[20021]: | 03 b3 2d 5a
Dec 17 21:22:56 deimos pluto[20021]: | emitting length of ISAKMP Hash Payload: 24
Dec 17 21:22:56 deimos pluto[20021]: | encrypting:
Dec 17 21:22:56 deimos pluto[20021]: | 08 00 00 0c 01 00 00 00 8e d9 ae 39 00 00 00 18
Dec 17 21:22:56 deimos pluto[20021]: | 71 20 16 40 29 8d 0c 78 27 35 23 92 93 ff d4 58
Dec 17 21:22:56 deimos pluto[20021]: | 03 b3 2d 5a
Dec 17 21:22:56 deimos pluto[20021]: | emitting 4 zero bytes of encryption padding into ISAKMP Message
Dec 17 21:22:56 deimos pluto[20021]: | encrypting using OAKLEY_3DES_CBC
Dec 17 21:22:56 deimos pluto[20021]: | next IV: c6 4f 6d e1 da 07 9b 13
Dec 17 21:22:56 deimos pluto[20021]: | emitting length of ISAKMP Message: 68
Dec 17 21:22:56 deimos pluto[20021]: | sending 68 bytes for STATE_MAIN_I2 through eth0 to A.B.C.D:500:
Dec 17 21:22:56 deimos pluto[20021]: | 00 bf d2 1d bc dc f3 00 56 4e 32 5d 85 55 48 ce
Dec 17 21:22:56 deimos pluto[20021]: | 05 10 02 01 00 00 00 00 00 00 00 44 03 8c 40 aa
Dec 17 21:22:56 deimos pluto[20021]: | f9 2e e4 dc 87 ed dc ee 09 65 a4 4f b5 4c 1e 4c
Dec 17 21:22:56 deimos pluto[20021]: | a8 1e 64 89 37 04 e2 ef 2a bf 07 4d c6 4f 6d e1
Dec 17 21:22:56 deimos pluto[20021]: | da 07 9b 13
Dec 17 21:22:56 deimos pluto[20021]: | inserting event EVENT_RETRANSMIT, timeout in 10 seconds for #2
Dec 17 21:22:56 deimos pluto[20021]: | next event EVENT_RETRANSMIT in 10 seconds for #2
Dec 17 21:22:56 deimos pluto[20021]: |
Dec 17 21:22:56 deimos pluto[20021]: | *received 56 bytes from A.B.C.D:500 on eth0
Dec 17 21:22:56 deimos pluto[20021]: | 00 bf d2 1d bc dc f3 00 56 4e 32 5d 85 55 48 ce
Dec 17 21:22:56 deimos pluto[20021]: | 0b 10 05 00 00 00 00 00 00 00 00 38 00 00 00 1c
Dec 17 21:22:56 deimos pluto[20021]: | 00 00 00 01 01 10 00 01 00 bf d2 1d bc dc f3 00
Dec 17 21:22:56 deimos pluto[20021]: | 56 4e 32 5d 85 55 48 ce
Dec 17 21:22:56 deimos pluto[20021]: | **parse ISAKMP Message:
Dec 17 21:22:56 deimos pluto[20021]: | initiator cookie:
Dec 17 21:22:56 deimos pluto[20021]: | 00 bf d2 1d bc dc f3 00
Dec 17 21:22:56 deimos pluto[20021]: | responder cookie:
Dec 17 21:22:56 deimos pluto[20021]: | 56 4e 32 5d 85 55 48 ce
Dec 17 21:22:56 deimos pluto[20021]: | next payload type: ISAKMP_NEXT_N
Dec 17 21:22:56 deimos pluto[20021]: | ISAKMP version: ISAKMP Version 1.0
Dec 17 21:22:56 deimos pluto[20021]: | exchange type: ISAKMP_XCHG_INFO
Dec 17 21:22:56 deimos pluto[20021]: | flags: none
Dec 17 21:22:56 deimos pluto[20021]: | message ID: 00 00 00 00
Dec 17 21:22:56 deimos pluto[20021]: | length: 56
Dec 17 21:22:56 deimos pluto[20021]: | ICOOKIE: 00 bf d2 1d bc dc f3 00
Dec 17 21:22:56 deimos pluto[20021]: | RCOOKIE: 56 4e 32 5d 85 55 48 ce
Dec 17 21:22:56 deimos pluto[20021]: | peer: 18 d4 1a d6
Dec 17 21:22:56 deimos pluto[20021]: | state hash entry 20
Dec 17 21:22:56 deimos pluto[20021]: | state object #2 found, in STATE_MAIN_I3
Dec 17 21:22:56 deimos pluto[20021]: | ***parse ISAKMP Notification Payload:
Dec 17 21:22:56 deimos pluto[20021]: | next payload type: ISAKMP_NEXT_NONE
Dec 17 21:22:56 deimos pluto[20021]: | length: 28
Dec 17 21:22:56 deimos pluto[20021]: | DOI: ISAKMP_DOI_IPSEC
Dec 17 21:22:56 deimos pluto[20021]: | protocol ID: 1
Dec 17 21:22:56 deimos pluto[20021]: | SPI size: 16
Dec 17 21:22:56 deimos pluto[20021]: | Notify Message Type: INVALID_PAYLOAD_TYPE
Dec 17 21:22:56 deimos pluto[20021]: "jeannot_christian_psk_auto" #2: ignoring informational payload, type INVALID_PAYLOAD_TYPE
Dec 17 21:22:56 deimos pluto[20021]: | info: 00 bf d2 1d bc dc f3 00 56 4e 32 5d 85 55 48 ce
Dec 17 21:22:56 deimos pluto[20021]: | next event EVENT_RETRANSMIT in 10 seconds for #2
Dec 17 21:23:06 deimos pluto[20021]: |
Dec 17 21:23:06 deimos pluto[20021]: | *time to handle event
Dec 17 21:23:06 deimos pluto[20021]: | event after this is EVENT_SHUNT_SCAN in 18 seconds
Dec 17 21:23:06 deimos pluto[20021]: | handling event EVENT_RETRANSMIT for A.B.C.D "jeannot_christian_psk_auto" #2
Dec 17 21:23:06 deimos pluto[20021]: | sending 68 bytes for EVENT_RETRANSMIT through eth0 to A.B.C.D:500:
Dec 17 21:23:06 deimos pluto[20021]: | 00 bf d2 1d bc dc f3 00 56 4e 32 5d 85 55 48 ce
Dec 17 21:23:06 deimos pluto[20021]: | 05 10 02 01 00 00 00 00 00 00 00 44 03 8c 40 aa
Dec 17 21:23:06 deimos pluto[20021]: | f9 2e e4 dc 87 ed dc ee 09 65 a4 4f b5 4c 1e 4c
Dec 17 21:23:06 deimos pluto[20021]: | a8 1e 64 89 37 04 e2 ef 2a bf 07 4d c6 4f 6d e1
Dec 17 21:23:06 deimos pluto[20021]: | da 07 9b 13
Dec 17 21:23:06 deimos pluto[20021]: | inserting event EVENT_RETRANSMIT, timeout in 20 seconds for #2
Dec 17 21:23:06 deimos pluto[20021]: | next event EVENT_SHUNT_SCAN in 18 seconds
Dec 17 21:23:06 deimos pluto[20021]: |
Dec 17 21:23:06 deimos pluto[20021]: | *received 56 bytes from A.B.C.D:500 on eth0
Dec 17 21:23:06 deimos pluto[20021]: | 00 bf d2 1d bc dc f3 00 56 4e 32 5d 85 55 48 ce
Dec 17 21:23:06 deimos pluto[20021]: | 0b 10 05 00 00 00 00 00 00 00 00 38 00 00 00 1c
Dec 17 21:23:06 deimos pluto[20021]: | 00 00 00 01 01 10 00 01 00 bf d2 1d bc dc f3 00
Dec 17 21:23:06 deimos pluto[20021]: | 56 4e 32 5d 85 55 48 ce
Dec 17 21:23:06 deimos pluto[20021]: | **parse ISAKMP Message:
Dec 17 21:23:06 deimos pluto[20021]: | initiator cookie:
Dec 17 21:23:06 deimos pluto[20021]: | 00 bf d2 1d bc dc f3 00
Dec 17 21:23:06 deimos pluto[20021]: | responder cookie:
Dec 17 21:23:06 deimos pluto[20021]: | 56 4e 32 5d 85 55 48 ce
Dec 17 21:23:06 deimos pluto[20021]: | next payload type: ISAKMP_NEXT_N
Dec 17 21:23:06 deimos pluto[20021]: | ISAKMP version: ISAKMP Version 1.0
Dec 17 21:23:06 deimos pluto[20021]: | exchange type: ISAKMP_XCHG_INFO
Dec 17 21:23:06 deimos pluto[20021]: | flags: none
Dec 17 21:23:06 deimos pluto[20021]: | message ID: 00 00 00 00
Dec 17 21:23:06 deimos pluto[20021]: | length: 56
Dec 17 21:23:06 deimos pluto[20021]: | ICOOKIE: 00 bf d2 1d bc dc f3 00
Dec 17 21:23:06 deimos pluto[20021]: | RCOOKIE: 56 4e 32 5d 85 55 48 ce
Dec 17 21:23:06 deimos pluto[20021]: | peer: 18 d4 1a d6
Dec 17 21:23:06 deimos pluto[20021]: | state hash entry 20
Dec 17 21:23:06 deimos pluto[20021]: | state object #2 found, in STATE_MAIN_I3
Dec 17 21:23:06 deimos pluto[20021]: | ***parse ISAKMP Notification Payload:
Dec 17 21:23:06 deimos pluto[20021]: | next payload type: ISAKMP_NEXT_NONE
Dec 17 21:23:06 deimos pluto[20021]: | length: 28
Dec 17 21:23:06 deimos pluto[20021]: | DOI: ISAKMP_DOI_IPSEC
Dec 17 21:23:06 deimos pluto[20021]: | protocol ID: 1
Dec 17 21:23:06 deimos pluto[20021]: | SPI size: 16
Dec 17 21:23:06 deimos pluto[20021]: | Notify Message Type: INVALID_PAYLOAD_TYPE
Dec 17 21:23:06 deimos pluto[20021]: "jeannot_christian_psk_auto" #2: ignoring informational payload, type INVALID_PAYLOAD_TYPE
Dec 17 21:23:06 deimos pluto[20021]: | info: 00 bf d2 1d bc dc f3 00 56 4e 32 5d 85 55 48 ce
Dec 17 21:23:06 deimos pluto[20021]: | next event EVENT_SHUNT_SCAN in 18 seconds
Dec 17 21:23:24 deimos pluto[20021]: |
Dec 17 21:23:24 deimos pluto[20021]: | *time to handle event
Dec 17 21:23:24 deimos pluto[20021]: | event after this is EVENT_RETRANSMIT in 2 seconds
Dec 17 21:23:24 deimos pluto[20021]: | inserting event EVENT_SHUNT_SCAN, timeout in 120 seconds
Dec 17 21:23:24 deimos pluto[20021]: | next event EVENT_RETRANSMIT in 2 seconds for #2
Dec 17 21:23:26 deimos pluto[20021]: |
Dec 17 21:23:26 deimos pluto[20021]: | *time to handle event
Dec 17 21:23:26 deimos pluto[20021]: | event after this is EVENT_SHUNT_SCAN in 118 seconds
Dec 17 21:23:26 deimos pluto[20021]: | handling event EVENT_RETRANSMIT for A.B.C.D "jeannot_christian_psk_auto" #2
Dec 17 21:23:26 deimos pluto[20021]: | sending 68 bytes for EVENT_RETRANSMIT through eth0 to A.B.C.D:500:
Dec 17 21:23:26 deimos pluto[20021]: | 00 bf d2 1d bc dc f3 00 56 4e 32 5d 85 55 48 ce
Dec 17 21:23:26 deimos pluto[20021]: | 05 10 02 01 00 00 00 00 00 00 00 44 03 8c 40 aa
Dec 17 21:23:26 deimos pluto[20021]: | f9 2e e4 dc 87 ed dc ee 09 65 a4 4f b5 4c 1e 4c
Dec 17 21:23:26 deimos pluto[20021]: | a8 1e 64 89 37 04 e2 ef 2a bf 07 4d c6 4f 6d e1
Dec 17 21:23:26 deimos pluto[20021]: | da 07 9b 13
Dec 17 21:23:26 deimos pluto[20021]: | inserting event EVENT_RETRANSMIT, timeout in 40 seconds for #2
Dec 17 21:23:26 deimos pluto[20021]: | next event EVENT_RETRANSMIT in 40 seconds for #2
Dec 17 21:23:26 deimos pluto[20021]: |
Dec 17 21:23:26 deimos pluto[20021]: | *received 56 bytes from A.B.C.D:500 on eth0
Dec 17 21:23:26 deimos pluto[20021]: | 00 bf d2 1d bc dc f3 00 56 4e 32 5d 85 55 48 ce
Dec 17 21:23:26 deimos pluto[20021]: | 0b 10 05 00 00 00 00 00 00 00 00 38 00 00 00 1c
Dec 17 21:23:26 deimos pluto[20021]: | 00 00 00 01 01 10 00 01 00 bf d2 1d bc dc f3 00
Dec 17 21:23:26 deimos pluto[20021]: | 56 4e 32 5d 85 55 48 ce
Dec 17 21:23:26 deimos pluto[20021]: | **parse ISAKMP Message:
Dec 17 21:23:26 deimos pluto[20021]: | initiator cookie:
Dec 17 21:23:26 deimos pluto[20021]: | 00 bf d2 1d bc dc f3 00
Dec 17 21:23:26 deimos pluto[20021]: | responder cookie:
Dec 17 21:23:26 deimos pluto[20021]: | 56 4e 32 5d 85 55 48 ce
Dec 17 21:23:26 deimos pluto[20021]: | next payload type: ISAKMP_NEXT_N
Dec 17 21:23:26 deimos pluto[20021]: | ISAKMP version: ISAKMP Version 1.0
Dec 17 21:23:26 deimos pluto[20021]: | exchange type: ISAKMP_XCHG_INFO
Dec 17 21:23:26 deimos pluto[20021]: | flags: none
Dec 17 21:23:26 deimos pluto[20021]: | message ID: 00 00 00 00
Dec 17 21:23:26 deimos pluto[20021]: | length: 56
Dec 17 21:23:26 deimos pluto[20021]: | ICOOKIE: 00 bf d2 1d bc dc f3 00
Dec 17 21:23:26 deimos pluto[20021]: | RCOOKIE: 56 4e 32 5d 85 55 48 ce
Dec 17 21:23:26 deimos pluto[20021]: | peer: 18 d4 1a d6
Dec 17 21:23:26 deimos pluto[20021]: | state hash entry 20
Dec 17 21:23:26 deimos pluto[20021]: | state object #2 found, in STATE_MAIN_I3
Dec 17 21:23:26 deimos pluto[20021]: | ***parse ISAKMP Notification Payload:
Dec 17 21:23:26 deimos pluto[20021]: | next payload type: ISAKMP_NEXT_NONE
Dec 17 21:23:26 deimos pluto[20021]: | length: 28
Dec 17 21:23:26 deimos pluto[20021]: | DOI: ISAKMP_DOI_IPSEC
Dec 17 21:23:26 deimos pluto[20021]: | protocol ID: 1
Dec 17 21:23:26 deimos pluto[20021]: | SPI size: 16
Dec 17 21:23:26 deimos pluto[20021]: | Notify Message Type: INVALID_PAYLOAD_TYPE
Dec 17 21:23:26 deimos pluto[20021]: "jeannot_christian_psk_auto" #2: ignoring informational payload, type INVALID_PAYLOAD_TYPE
Dec 17 21:23:26 deimos pluto[20021]: | info: 00 bf d2 1d bc dc f3 00 56 4e 32 5d 85 55 48 ce
Dec 17 21:23:26 deimos pluto[20021]: | next event EVENT_RETRANSMIT in 40 seconds for #2
Dec 17 21:24:06 deimos pluto[20021]: |
Dec 17 21:24:06 deimos pluto[20021]: | *time to handle event
Dec 17 21:24:06 deimos pluto[20021]: | event after this is EVENT_SHUNT_SCAN in 78 seconds
Dec 17 21:24:06 deimos pluto[20021]: | handling event EVENT_RETRANSMIT for A.B.C.D "jeannot_christian_psk_auto" #2
Dec 17 21:24:06 deimos pluto[20021]: "jeannot_christian_psk_auto" #2: max number of retransmissions (2) reached STATE_MAIN_I3. Possible authentication failure: no acceptable response to our first encrypted message
Dec 17 21:24:06 deimos pluto[20021]: "jeannot_christian_psk_auto" #2: starting keying attempt 3 of an unlimited number
Dec 17 21:24:06 deimos pluto[20021]: | creating state object #3 at 0x80ae630
Dec 17 21:24:06 deimos pluto[20021]: | ICOOKIE: c5 e4 0f 20 69 f5 f5 9a
Dec 17 21:24:06 deimos pluto[20021]: | RCOOKIE: 00 00 00 00 00 00 00 00
Dec 17 21:24:06 deimos pluto[20021]: | peer: 18 d4 1a d6
Dec 17 21:24:06 deimos pluto[20021]: | state hash entry 21
Dec 17 21:24:06 deimos pluto[20021]: | inserting event EVENT_SO_DISCARD, timeout in 0 seconds for #3
Dec 17 21:24:06 deimos pluto[20021]: "jeannot_christian_psk_auto" #3: initiating Main Mode to replace #2
Dec 17 21:24:06 deimos pluto[20021]: | **emit ISAKMP Message:
Dec 17 21:24:06 deimos pluto[20021]: | initiator cookie:
Dec 17 21:24:06 deimos pluto[20021]: | c5 e4 0f 20 69 f5 f5 9a
Dec 17 21:24:06 deimos pluto[20021]: | responder cookie:
Dec 17 21:24:06 deimos pluto[20021]: | 00 00 00 00 00 00 00 00
Dec 17 21:24:06 deimos pluto[20021]: | next payload type: ISAKMP_NEXT_SA
Dec 17 21:24:06 deimos pluto[20021]: | ISAKMP version: ISAKMP Version 1.0
Dec 17 21:24:06 deimos pluto[20021]: | exchange type: ISAKMP_XCHG_IDPROT
Dec 17 21:24:06 deimos pluto[20021]: | flags: none
Dec 17 21:24:06 deimos pluto[20021]: | message ID: 00 00 00 00
Dec 17 21:24:06 deimos pluto[20021]: | ***emit ISAKMP Security Association Payload:
Dec 17 21:24:06 deimos pluto[20021]: | next payload type: ISAKMP_NEXT_NONE
Dec 17 21:24:06 deimos pluto[20021]: | DOI: ISAKMP_DOI_IPSEC
Dec 17 21:24:06 deimos pluto[20021]: | ****emit IPsec DOI SIT:
Dec 17 21:24:06 deimos pluto[20021]: | IPsec DOI SIT: SIT_IDENTITY_ONLY
Dec 17 21:24:06 deimos pluto[20021]: | ****emit ISAKMP Proposal Payload:
Dec 17 21:24:06 deimos pluto[20021]: | next payload type: ISAKMP_NEXT_NONE
Dec 17 21:24:06 deimos pluto[20021]: | proposal number: 0
Dec 17 21:24:06 deimos pluto[20021]: | protocol ID: PROTO_ISAKMP
Dec 17 21:24:06 deimos pluto[20021]: | SPI size: 0
Dec 17 21:24:06 deimos pluto[20021]: | number of transforms: 4
Dec 17 21:24:06 deimos pluto[20021]: | *****emit ISAKMP Transform Payload (ISAKMP):
Dec 17 21:24:06 deimos pluto[20021]: | next payload type: ISAKMP_NEXT_T
Dec 17 21:24:06 deimos pluto[20021]: | transform number: 0
Dec 17 21:24:06 deimos pluto[20021]: | transform ID: KEY_IKE
Dec 17 21:24:06 deimos pluto[20021]: | ******emit ISAKMP Oakley attribute:
Dec 17 21:24:06 deimos pluto[20021]: | af+type: OAKLEY_LIFE_TYPE
Dec 17 21:24:06 deimos pluto[20021]: | length/value: 1
Dec 17 21:24:06 deimos pluto[20021]: | [1 is OAKLEY_LIFE_SECONDS]
Dec 17 21:24:06 deimos pluto[20021]: | ******emit ISAKMP Oakley attribute:
Dec 17 21:24:06 deimos pluto[20021]: | af+type: OAKLEY_LIFE_DURATION
Dec 17 21:24:06 deimos pluto[20021]: | length/value: 14400
Dec 17 21:24:06 deimos pluto[20021]: | ******emit ISAKMP Oakley attribute:
Dec 17 21:24:06 deimos pluto[20021]: | af+type: OAKLEY_ENCRYPTION_ALGORITHM
Dec 17 21:24:06 deimos pluto[20021]: | length/value: 5
Dec 17 21:24:06 deimos pluto[20021]: | [5 is OAKLEY_3DES_CBC]
Dec 17 21:24:06 deimos pluto[20021]: | ******emit ISAKMP Oakley attribute:
Dec 17 21:24:06 deimos pluto[20021]: | af+type: OAKLEY_HASH_ALGORITHM
Dec 17 21:24:06 deimos pluto[20021]: | length/value: 1
Dec 17 21:24:06 deimos pluto[20021]: | [1 is OAKLEY_MD5]
Dec 17 21:24:06 deimos pluto[20021]: | ******emit ISAKMP Oakley attribute:
Dec 17 21:24:06 deimos pluto[20021]: | af+type: OAKLEY_AUTHENTICATION_METHOD
Dec 17 21:24:06 deimos pluto[20021]: | length/value: 1
Dec 17 21:24:06 deimos pluto[20021]: | [1 is OAKLEY_PRESHARED_KEY]
Dec 17 21:24:06 deimos pluto[20021]: | ******emit ISAKMP Oakley attribute:
Dec 17 21:24:06 deimos pluto[20021]: | af+type: OAKLEY_GROUP_DESCRIPTION
Dec 17 21:24:06 deimos pluto[20021]: | length/value: 5
Dec 17 21:24:06 deimos pluto[20021]: | [5 is OAKLEY_GROUP_MODP1536 (extension)]
Dec 17 21:24:06 deimos pluto[20021]: | emitting length of ISAKMP Transform Payload (ISAKMP): 32
Dec 17 21:24:06 deimos pluto[20021]: | *****emit ISAKMP Transform Payload (ISAKMP):
Dec 17 21:24:06 deimos pluto[20021]: | next payload type: ISAKMP_NEXT_T
Dec 17 21:24:06 deimos pluto[20021]: | transform number: 1
Dec 17 21:24:06 deimos pluto[20021]: | transform ID: KEY_IKE
Dec 17 21:24:06 deimos pluto[20021]: | ******emit ISAKMP Oakley attribute:
Dec 17 21:24:06 deimos pluto[20021]: | af+type: OAKLEY_LIFE_TYPE
Dec 17 21:24:06 deimos pluto[20021]: | length/value: 1
Dec 17 21:24:06 deimos pluto[20021]: | [1 is OAKLEY_LIFE_SECONDS]
Dec 17 21:24:06 deimos pluto[20021]: | ******emit ISAKMP Oakley attribute:
Dec 17 21:24:06 deimos pluto[20021]: | af+type: OAKLEY_LIFE_DURATION
Dec 17 21:24:06 deimos pluto[20021]: | length/value: 14400
Dec 17 21:24:06 deimos pluto[20021]: | ******emit ISAKMP Oakley attribute:
Dec 17 21:24:06 deimos pluto[20021]: | af+type: OAKLEY_ENCRYPTION_ALGORITHM
Dec 17 21:24:06 deimos pluto[20021]: | length/value: 5
Dec 17 21:24:06 deimos pluto[20021]: | [5 is OAKLEY_3DES_CBC]
Dec 17 21:24:06 deimos pluto[20021]: | ******emit ISAKMP Oakley attribute:
Dec 17 21:24:06 deimos pluto[20021]: | af+type: OAKLEY_HASH_ALGORITHM
Dec 17 21:24:06 deimos pluto[20021]: | length/value: 2
Dec 17 21:24:06 deimos pluto[20021]: | [2 is OAKLEY_SHA]
Dec 17 21:24:06 deimos pluto[20021]: | ******emit ISAKMP Oakley attribute:
Dec 17 21:24:06 deimos pluto[20021]: | af+type: OAKLEY_AUTHENTICATION_METHOD
Dec 17 21:24:06 deimos pluto[20021]: | length/value: 1
Dec 17 21:24:06 deimos pluto[20021]: | [1 is OAKLEY_PRESHARED_KEY]
Dec 17 21:24:06 deimos pluto[20021]: | ******emit ISAKMP Oakley attribute:
Dec 17 21:24:06 deimos pluto[20021]: | af+type: OAKLEY_GROUP_DESCRIPTION
Dec 17 21:24:06 deimos pluto[20021]: | length/value: 5
Dec 17 21:24:06 deimos pluto[20021]: | [5 is OAKLEY_GROUP_MODP1536 (extension)]
Dec 17 21:24:06 deimos pluto[20021]: | emitting length of ISAKMP Transform Payload (ISAKMP): 32
Dec 17 21:24:06 deimos pluto[20021]: | *****emit ISAKMP Transform Payload (ISAKMP):
Dec 17 21:24:06 deimos pluto[20021]: | next payload type: ISAKMP_NEXT_T
Dec 17 21:24:06 deimos pluto[20021]: | transform number: 2
Dec 17 21:24:06 deimos pluto[20021]: | transform ID: KEY_IKE
Dec 17 21:24:06 deimos pluto[20021]: | ******emit ISAKMP Oakley attribute:
Dec 17 21:24:06 deimos pluto[20021]: | af+type: OAKLEY_LIFE_TYPE
Dec 17 21:24:06 deimos pluto[20021]: | length/value: 1
Dec 17 21:24:06 deimos pluto[20021]: | [1 is OAKLEY_LIFE_SECONDS]
Dec 17 21:24:06 deimos pluto[20021]: | ******emit ISAKMP Oakley attribute:
Dec 17 21:24:06 deimos pluto[20021]: | af+type: OAKLEY_LIFE_DURATION
Dec 17 21:24:06 deimos pluto[20021]: | length/value: 14400
Dec 17 21:24:06 deimos pluto[20021]: | ******emit ISAKMP Oakley attribute:
Dec 17 21:24:06 deimos pluto[20021]: | af+type: OAKLEY_ENCRYPTION_ALGORITHM
Dec 17 21:24:06 deimos pluto[20021]: | length/value: 5
Dec 17 21:24:06 deimos pluto[20021]: | [5 is OAKLEY_3DES_CBC]
Dec 17 21:24:06 deimos pluto[20021]: | ******emit ISAKMP Oakley attribute:
Dec 17 21:24:06 deimos pluto[20021]: | af+type: OAKLEY_HASH_ALGORITHM
Dec 17 21:24:06 deimos pluto[20021]: | length/value: 2
Dec 17 21:24:06 deimos pluto[20021]: | [2 is OAKLEY_SHA]
Dec 17 21:24:06 deimos pluto[20021]: | ******emit ISAKMP Oakley attribute:
Dec 17 21:24:06 deimos pluto[20021]: | af+type: OAKLEY_AUTHENTICATION_METHOD
Dec 17 21:24:06 deimos pluto[20021]: | length/value: 1
Dec 17 21:24:06 deimos pluto[20021]: | [1 is OAKLEY_PRESHARED_KEY]
Dec 17 21:24:06 deimos pluto[20021]: | ******emit ISAKMP Oakley attribute:
Dec 17 21:24:06 deimos pluto[20021]: | af+type: OAKLEY_GROUP_DESCRIPTION
Dec 17 21:24:06 deimos pluto[20021]: | length/value: 2
Dec 17 21:24:06 deimos pluto[20021]: | [2 is OAKLEY_GROUP_MODP1024]
Dec 17 21:24:06 deimos pluto[20021]: | emitting length of ISAKMP Transform Payload (ISAKMP): 32
Dec 17 21:24:06 deimos pluto[20021]: | *****emit ISAKMP Transform Payload (ISAKMP):
Dec 17 21:24:06 deimos pluto[20021]: | next payload type: ISAKMP_NEXT_NONE
Dec 17 21:24:06 deimos pluto[20021]: | transform number: 3
Dec 17 21:24:06 deimos pluto[20021]: | transform ID: KEY_IKE
Dec 17 21:24:06 deimos pluto[20021]: | ******emit ISAKMP Oakley attribute:
Dec 17 21:24:06 deimos pluto[20021]: | af+type: OAKLEY_LIFE_TYPE
Dec 17 21:24:06 deimos pluto[20021]: | length/value: 1
Dec 17 21:24:06 deimos pluto[20021]: | [1 is OAKLEY_LIFE_SECONDS]
Dec 17 21:24:06 deimos pluto[20021]: | ******emit ISAKMP Oakley attribute:
Dec 17 21:24:06 deimos pluto[20021]: | af+type: OAKLEY_LIFE_DURATION
Dec 17 21:24:06 deimos pluto[20021]: | length/value: 14400
Dec 17 21:24:06 deimos pluto[20021]: | ******emit ISAKMP Oakley attribute:
Dec 17 21:24:06 deimos pluto[20021]: | af+type: OAKLEY_ENCRYPTION_ALGORITHM
Dec 17 21:24:06 deimos pluto[20021]: | length/value: 5
Dec 17 21:24:06 deimos pluto[20021]: | [5 is OAKLEY_3DES_CBC]
Dec 17 21:24:06 deimos pluto[20021]: | ******emit ISAKMP Oakley attribute:
Dec 17 21:24:06 deimos pluto[20021]: | af+type: OAKLEY_HASH_ALGORITHM
Dec 17 21:24:06 deimos pluto[20021]: | length/value: 1
Dec 17 21:24:06 deimos pluto[20021]: | [1 is OAKLEY_MD5]
Dec 17 21:24:06 deimos pluto[20021]: | ******emit ISAKMP Oakley attribute:
Dec 17 21:24:06 deimos pluto[20021]: | af+type: OAKLEY_AUTHENTICATION_METHOD
Dec 17 21:24:06 deimos pluto[20021]: | length/value: 1
Dec 17 21:24:06 deimos pluto[20021]: | [1 is OAKLEY_PRESHARED_KEY]
Dec 17 21:24:06 deimos pluto[20021]: | ******emit ISAKMP Oakley attribute:
Dec 17 21:24:06 deimos pluto[20021]: | af+type: OAKLEY_GROUP_DESCRIPTION
Dec 17 21:24:06 deimos pluto[20021]: | length/value: 2
Dec 17 21:24:06 deimos pluto[20021]: | [2 is OAKLEY_GROUP_MODP1024]
Dec 17 21:24:06 deimos pluto[20021]: | emitting length of ISAKMP Transform Payload (ISAKMP): 32
Dec 17 21:24:06 deimos pluto[20021]: | emitting length of ISAKMP Proposal Payload: 136
Dec 17 21:24:06 deimos pluto[20021]: | emitting length of ISAKMP Security Association Payload: 148
Dec 17 21:24:06 deimos pluto[20021]: | emitting length of ISAKMP Message: 176
Dec 17 21:24:06 deimos pluto[20021]: | sending 176 bytes for main_outI1 through eth0 to A.B.C.D:500:
Dec 17 21:24:06 deimos pluto[20021]: | c5 e4 0f 20 69 f5 f5 9a 00 00 00 00 00 00 00 00
Dec 17 21:24:06 deimos pluto[20021]: | 01 10 02 00 00 00 00 00 00 00 00 b0 00 00 00 94
Dec 17 21:24:06 deimos pluto[20021]: | 00 00 00 01 00 00 00 01 00 00 00 88 00 01 00 04
Dec 17 21:24:06 deimos pluto[20021]: | 03 00 00 20 00 01 00 00 80 0b 00 01 80 0c 38 40
Dec 17 21:24:06 deimos pluto[20021]: | 80 01 00 05 80 02 00 01 80 03 00 01 80 04 00 05
Dec 17 21:24:06 deimos pluto[20021]: | 03 00 00 20 01 01 00 00 80 0b 00 01 80 0c 38 40
Dec 17 21:24:06 deimos pluto[20021]: | 80 01 00 05 80 02 00 02 80 03 00 01 80 04 00 05
Dec 17 21:24:06 deimos pluto[20021]: | 03 00 00 20 02 01 00 00 80 0b 00 01 80 0c 38 40
Dec 17 21:24:06 deimos pluto[20021]: | 80 01 00 05 80 02 00 02 80 03 00 01 80 04 00 02
Dec 17 21:24:06 deimos pluto[20021]: | 00 00 00 20 03 01 00 00 80 0b 00 01 80 0c 38 40
Dec 17 21:24:06 deimos pluto[20021]: | 80 01 00 05 80 02 00 01 80 03 00 01 80 04 00 02
Dec 17 21:24:06 deimos pluto[20021]: | inserting event EVENT_RETRANSMIT, timeout in 10 seconds for #3
Dec 17 21:24:06 deimos pluto[20021]: | ICOOKIE: 00 bf d2 1d bc dc f3 00
Dec 17 21:24:06 deimos pluto[20021]: | RCOOKIE: 56 4e 32 5d 85 55 48 ce
Dec 17 21:24:06 deimos pluto[20021]: | peer: 18 d4 1a d6
Dec 17 21:24:06 deimos pluto[20021]: | state hash entry 20
Dec 17 21:24:06 deimos pluto[20021]: | next event EVENT_RETRANSMIT in 10 seconds for #3
Dec 17 21:24:07 deimos pluto[20021]: |
Dec 17 21:24:07 deimos pluto[20021]: | *received whack message
Dec 17 21:24:07 deimos pluto[20021]: | next event EVENT_RETRANSMIT in 9 seconds for #3
Dec 17 21:24:07 deimos pluto[20021]: |
Dec 17 21:24:07 deimos pluto[20021]: | *received 84 bytes from A.B.C.D:500 on eth0
Dec 17 21:24:07 deimos pluto[20021]: | c5 e4 0f 20 69 f5 f5 9a 5a 73 7f e1 c7 57 35 e6
Dec 17 21:24:07 deimos pluto[20021]: | 01 10 02 00 00 00 00 00 00 00 00 54 00 00 00 38
Dec 17 21:24:07 deimos pluto[20021]: | 00 00 00 01 00 00 00 01 00 00 00 2c 01 01 00 01
Dec 17 21:24:07 deimos pluto[20021]: | 00 00 00 24 01 01 00 00 80 01 00 05 80 02 00 02
Dec 17 21:24:07 deimos pluto[20021]: | 80 03 00 01 80 04 00 02 80 0b 00 01 00 0c 00 04
Dec 17 21:24:07 deimos pluto[20021]: | 00 00 38 40
Dec 17 21:24:07 deimos pluto[20021]: | **parse ISAKMP Message:
Dec 17 21:24:07 deimos pluto[20021]: | initiator cookie:
Dec 17 21:24:07 deimos pluto[20021]: | c5 e4 0f 20 69 f5 f5 9a
Dec 17 21:24:07 deimos pluto[20021]: | responder cookie:
Dec 17 21:24:07 deimos pluto[20021]: | 5a 73 7f e1 c7 57 35 e6
Dec 17 21:24:07 deimos pluto[20021]: | next payload type: ISAKMP_NEXT_SA
Dec 17 21:24:07 deimos pluto[20021]: | ISAKMP version: ISAKMP Version 1.0
Dec 17 21:24:07 deimos pluto[20021]: | exchange type: ISAKMP_XCHG_IDPROT
Dec 17 21:24:07 deimos pluto[20021]: | flags: none
Dec 17 21:24:07 deimos pluto[20021]: | message ID: 00 00 00 00
Dec 17 21:24:07 deimos pluto[20021]: | length: 84
Dec 17 21:24:07 deimos pluto[20021]: | ICOOKIE: c5 e4 0f 20 69 f5 f5 9a
Dec 17 21:24:07 deimos pluto[20021]: | RCOOKIE: 5a 73 7f e1 c7 57 35 e6
Dec 17 21:24:07 deimos pluto[20021]: | peer: 18 d4 1a d6
Dec 17 21:24:07 deimos pluto[20021]: | state hash entry 25
Dec 17 21:24:07 deimos pluto[20021]: | state object not found
Dec 17 21:24:07 deimos pluto[20021]: | ICOOKIE: c5 e4 0f 20 69 f5 f5 9a
Dec 17 21:24:07 deimos pluto[20021]: | RCOOKIE: 00 00 00 00 00 00 00 00
Dec 17 21:24:07 deimos pluto[20021]: | peer: 18 d4 1a d6
Dec 17 21:24:07 deimos pluto[20021]: | state hash entry 21
Dec 17 21:24:07 deimos pluto[20021]: | state object #3 found, in STATE_MAIN_I1
Dec 17 21:24:07 deimos pluto[20021]: | ***parse ISAKMP Security Association Payload:
Dec 17 21:24:07 deimos pluto[20021]: | next payload type: ISAKMP_NEXT_NONE
Dec 17 21:24:07 deimos pluto[20021]: | length: 56
Dec 17 21:24:07 deimos pluto[20021]: | DOI: ISAKMP_DOI_IPSEC
Dec 17 21:24:07 deimos pluto[20021]: | ****parse IPsec DOI SIT:
Dec 17 21:24:07 deimos pluto[20021]: | IPsec DOI SIT: SIT_IDENTITY_ONLY
Dec 17 21:24:07 deimos pluto[20021]: | ****parse ISAKMP Proposal Payload:
Dec 17 21:24:07 deimos pluto[20021]: | next payload type: ISAKMP_NEXT_NONE
Dec 17 21:24:07 deimos pluto[20021]: | length: 44
Dec 17 21:24:07 deimos pluto[20021]: | proposal number: 1
Dec 17 21:24:07 deimos pluto[20021]: | protocol ID: PROTO_ISAKMP
Dec 17 21:24:07 deimos pluto[20021]: | SPI size: 0
Dec 17 21:24:07 deimos pluto[20021]: | number of transforms: 1
Dec 17 21:24:07 deimos pluto[20021]: | *****parse ISAKMP Transform Payload (ISAKMP):
Dec 17 21:24:07 deimos pluto[20021]: | next payload type: ISAKMP_NEXT_NONE
Dec 17 21:24:07 deimos pluto[20021]: | length: 36
Dec 17 21:24:07 deimos pluto[20021]: | transform number: 1
Dec 17 21:24:07 deimos pluto[20021]: | transform ID: KEY_IKE
Dec 17 21:24:07 deimos pluto[20021]: | ******parse ISAKMP Oakley attribute:
Dec 17 21:24:07 deimos pluto[20021]: | af+type: OAKLEY_ENCRYPTION_ALGORITHM
Dec 17 21:24:07 deimos pluto[20021]: | length/value: 5
Dec 17 21:24:07 deimos pluto[20021]: | [5 is OAKLEY_3DES_CBC]
Dec 17 21:24:07 deimos pluto[20021]: | ******parse ISAKMP Oakley attribute:
Dec 17 21:24:07 deimos pluto[20021]: | af+type: OAKLEY_HASH_ALGORITHM
Dec 17 21:24:07 deimos pluto[20021]: | length/value: 2
Dec 17 21:24:07 deimos pluto[20021]: | [2 is OAKLEY_SHA]
Dec 17 21:24:07 deimos pluto[20021]: | ******parse ISAKMP Oakley attribute:
Dec 17 21:24:07 deimos pluto[20021]: | af+type: OAKLEY_AUTHENTICATION_METHOD
Dec 17 21:24:07 deimos pluto[20021]: | length/value: 1
Dec 17 21:24:07 deimos pluto[20021]: | [1 is OAKLEY_PRESHARED_KEY]
Dec 17 21:24:07 deimos pluto[20021]: | ******parse ISAKMP Oakley attribute:
Dec 17 21:24:07 deimos pluto[20021]: | af+type: OAKLEY_GROUP_DESCRIPTION
Dec 17 21:24:07 deimos pluto[20021]: | length/value: 2
Dec 17 21:24:07 deimos pluto[20021]: | [2 is OAKLEY_GROUP_MODP1024]
Dec 17 21:24:07 deimos pluto[20021]: | ******parse ISAKMP Oakley attribute:
Dec 17 21:24:07 deimos pluto[20021]: | af+type: OAKLEY_LIFE_TYPE
Dec 17 21:24:07 deimos pluto[20021]: | length/value: 1
Dec 17 21:24:07 deimos pluto[20021]: | [1 is OAKLEY_LIFE_SECONDS]
Dec 17 21:24:07 deimos pluto[20021]: | ******parse ISAKMP Oakley attribute:
Dec 17 21:24:07 deimos pluto[20021]: | af+type: OAKLEY_LIFE_DURATION (variable length)
Dec 17 21:24:08 deimos pluto[20021]: | length/value: 4
Dec 17 21:24:08 deimos pluto[20021]: | long duration: 14400
Dec 17 21:24:08 deimos pluto[20021]: | Oakley Transform 1 accepted
Dec 17 21:24:08 deimos pluto[20021]: | **emit ISAKMP Message:
Dec 17 21:24:08 deimos pluto[20021]: | initiator cookie:
Dec 17 21:24:08 deimos pluto[20021]: | c5 e4 0f 20 69 f5 f5 9a
Dec 17 21:24:08 deimos pluto[20021]: | responder cookie:
Dec 17 21:24:08 deimos pluto[20021]: | 5a 73 7f e1 c7 57 35 e6
Dec 17 21:24:08 deimos pluto[20021]: | next payload type: ISAKMP_NEXT_KE
Dec 17 21:24:08 deimos pluto[20021]: | ISAKMP version: ISAKMP Version 1.0
Dec 17 21:24:08 deimos pluto[20021]: | exchange type: ISAKMP_XCHG_IDPROT
Dec 17 21:24:08 deimos pluto[20021]: | flags: none
Dec 17 21:24:08 deimos pluto[20021]: | message ID: 00 00 00 00
Dec 17 21:24:08 deimos pluto[20021]: | Local DH secret:
Dec 17 21:24:08 deimos pluto[20021]: | 31 f8 67 92 68 e4 28 3b 40 4f 80 81 3f 88 2b c6
Dec 17 21:24:08 deimos pluto[20021]: | 62 b5 db 78 08 55 93 5f 15 67 5d cf b4 6b 68 83
Dec 17 21:24:08 deimos pluto[20021]: | Public DH value sent:
Dec 17 21:24:08 deimos pluto[20021]: | af c1 ff 28 c0 4a 77 39 c1 63 7e 0e 19 37 0a 38
Dec 17 21:24:08 deimos pluto[20021]: | 65 44 08 13 8c 25 d6 0f f6 ca 47 04 8a 54 fd 9f
Dec 17 21:24:08 deimos pluto[20021]: | f6 09 76 29 fa b7 4e b3 c9 cb f2 ed ef 8d bb 44
Dec 17 21:24:08 deimos pluto[20021]: | 14 8b 3d 15 33 1a ff 3b c1 ba e4 7a eb 01 85 b7
Dec 17 21:24:08 deimos pluto[20021]: | 46 c7 67 fd f1 5b ff 98 5b 14 c3 fe 6c b3 c4 6a
Dec 17 21:24:08 deimos pluto[20021]: | 2a 53 52 e5 00 72 0b 80 6f 2d de 3a ea 52 87 62
Dec 17 21:24:08 deimos pluto[20021]: | 89 71 59 8d 28 08 d9 a8 a8 7b 57 c6 39 04 9f 73
Dec 17 21:24:08 deimos pluto[20021]: | c3 e6 19 69 c2 06 f3 01 59 67 dc 5f f2 89 eb 78
Dec 17 21:24:08 deimos pluto[20021]: | ***emit ISAKMP Key Exchange Payload:
Dec 17 21:24:08 deimos pluto[20021]: | next payload type: ISAKMP_NEXT_NONCE
Dec 17 21:24:08 deimos pluto[20021]: | emitting 128 raw bytes of keyex value into ISAKMP Key Exchange Payload
Dec 17 21:24:08 deimos pluto[20021]: | keyex value af c1 ff 28 c0 4a 77 39 c1 63 7e 0e 19 37 0a 38
Dec 17 21:24:08 deimos pluto[20021]: | 65 44 08 13 8c 25 d6 0f f6 ca 47 04 8a 54 fd 9f
Dec 17 21:24:08 deimos pluto[20021]: | f6 09 76 29 fa b7 4e b3 c9 cb f2 ed ef 8d bb 44
Dec 17 21:24:08 deimos pluto[20021]: | 14 8b 3d 15 33 1a ff 3b c1 ba e4 7a eb 01 85 b7
Dec 17 21:24:08 deimos pluto[20021]: | 46 c7 67 fd f1 5b ff 98 5b 14 c3 fe 6c b3 c4 6a
Dec 17 21:24:08 deimos pluto[20021]: | 2a 53 52 e5 00 72 0b 80 6f 2d de 3a ea 52 87 62
Dec 17 21:24:08 deimos pluto[20021]: | 89 71 59 8d 28 08 d9 a8 a8 7b 57 c6 39 04 9f 73
Dec 17 21:24:08 deimos pluto[20021]: | c3 e6 19 69 c2 06 f3 01 59 67 dc 5f f2 89 eb 78
Dec 17 21:24:08 deimos pluto[20021]: | emitting length of ISAKMP Key Exchange Payload: 132
Dec 17 21:24:08 deimos pluto[20021]: | ***emit ISAKMP Nonce Payload:
Dec 17 21:24:08 deimos pluto[20021]: | next payload type: ISAKMP_NEXT_NONE
Dec 17 21:24:08 deimos pluto[20021]: | emitting 16 raw bytes of Ni into ISAKMP Nonce Payload
Dec 17 21:24:08 deimos pluto[20021]: | Ni 94 04 40 90 e0 03 16 93 32 03 6b e1 f9 6f 80 42
Dec 17 21:24:08 deimos pluto[20021]: | emitting length of ISAKMP Nonce Payload: 20
Dec 17 21:24:08 deimos pluto[20021]: | emitting length of ISAKMP Message: 180
Dec 17 21:24:08 deimos pluto[20021]: | ICOOKIE: c5 e4 0f 20 69 f5 f5 9a
Dec 17 21:24:08 deimos pluto[20021]: | RCOOKIE: 00 00 00 00 00 00 00 00
Dec 17 21:24:08 deimos pluto[20021]: | peer: 18 d4 1a d6
Dec 17 21:24:08 deimos pluto[20021]: | state hash entry 21
Dec 17 21:24:08 deimos pluto[20021]: | ICOOKIE: c5 e4 0f 20 69 f5 f5 9a
Dec 17 21:24:08 deimos pluto[20021]: | RCOOKIE: 5a 73 7f e1 c7 57 35 e6
Dec 17 21:24:09 deimos pluto[20021]: | peer: 18 d4 1a d6
Dec 17 21:24:09 deimos pluto[20021]: | state hash entry 25
Dec 17 21:24:09 deimos pluto[20021]: | sending 180 bytes for STATE_MAIN_I1 through eth0 to A.B.C.D:500:
Dec 17 21:24:09 deimos pluto[20021]: | c5 e4 0f 20 69 f5 f5 9a 5a 73 7f e1 c7 57 35 e6
Dec 17 21:24:09 deimos pluto[20021]: | 04 10 02 00 00 00 00 00 00 00 00 b4 0a 00 00 84
Dec 17 21:24:09 deimos pluto[20021]: | af c1 ff 28 c0 4a 77 39 c1 63 7e 0e 19 37 0a 38
Dec 17 21:24:09 deimos pluto[20021]: | 65 44 08 13 8c 25 d6 0f f6 ca 47 04 8a 54 fd 9f
Dec 17 21:24:09 deimos pluto[20021]: | f6 09 76 29 fa b7 4e b3 c9 cb f2 ed ef 8d bb 44
Dec 17 21:24:09 deimos pluto[20021]: | 14 8b 3d 15 33 1a ff 3b c1 ba e4 7a eb 01 85 b7
Dec 17 21:24:09 deimos pluto[20021]: | 46 c7 67 fd f1 5b ff 98 5b 14 c3 fe 6c b3 c4 6a
Dec 17 21:24:09 deimos pluto[20021]: | 2a 53 52 e5 00 72 0b 80 6f 2d de 3a ea 52 87 62
Dec 17 21:24:09 deimos pluto[20021]: | 89 71 59 8d 28 08 d9 a8 a8 7b 57 c6 39 04 9f 73
Dec 17 21:24:09 deimos pluto[20021]: | c3 e6 19 69 c2 06 f3 01 59 67 dc 5f f2 89 eb 78
Dec 17 21:24:09 deimos pluto[20021]: | 00 00 00 14 94 04 40 90 e0 03 16 93 32 03 6b e1
Dec 17 21:24:09 deimos pluto[20021]: | f9 6f 80 42
Dec 17 21:24:09 deimos pluto[20021]: | inserting event EVENT_RETRANSMIT, timeout in 10 seconds for #3
Dec 17 21:24:09 deimos pluto[20021]: | next event EVENT_RETRANSMIT in 10 seconds for #3
Dec 17 21:24:10 deimos pluto[20021]: |
Dec 17 21:24:10 deimos pluto[20021]: | *received whack message
Dec 17 21:24:10 deimos pluto[20021]: | next event EVENT_RETRANSMIT in 9 seconds for #3
Dec 17 21:24:10 deimos pluto[20021]: |
Dec 17 21:24:10 deimos pluto[20021]: | *received 184 bytes from A.B.C.D:500 on eth0
Dec 17 21:24:10 deimos pluto[20021]: | c5 e4 0f 20 69 f5 f5 9a 5a 73 7f e1 c7 57 35 e6
Dec 17 21:24:10 deimos pluto[20021]: | 04 10 02 00 00 00 00 00 00 00 00 b8 0a 00 00 84
Dec 17 21:24:10 deimos pluto[20021]: | f8 48 a3 d4 1d 6f 90 5b 62 3f 18 b2 d7 71 c0 12
Dec 17 21:24:10 deimos pluto[20021]: | d8 38 fa e1 93 09 26 29 de ab 5d e1 ab 83 96 86
Dec 17 21:24:10 deimos pluto[20021]: | 8b c6 69 ba bc ab 98 0a fe b4 40 da 3a d3 69 a1
Dec 17 21:24:10 deimos pluto[20021]: | 6f f6 47 d4 4d ab 6b e0 b0 f3 ae 2c d9 a5 18 d9
Dec 17 21:24:10 deimos pluto[20021]: | c0 ca fe 64 3e 85 77 2c d2 f0 14 b8 6e 41 42 69
Dec 17 21:24:10 deimos pluto[20021]: | 28 1e 66 1c dc 36 8f 4f 3a 09 9d 7a ee 41 44 ca
Dec 17 21:24:10 deimos pluto[20021]: | 3e fa 35 e3 c2 72 a8 2f 97 e8 3b 9f c6 bf 30 f3
Dec 17 21:24:10 deimos pluto[20021]: | fc 0e 3d ff 8e 6b bf 96 2d 8f e6 ee fe 79 15 65
Dec 17 21:24:10 deimos pluto[20021]: | 00 00 00 18 05 36 08 47 8d e0 b5 41 5d 9e dc 1c
Dec 17 21:24:10 deimos pluto[20021]: | cb a9 5b 07 c7 78 ec 14
Dec 17 21:24:10 deimos pluto[20021]: | **parse ISAKMP Message:
Dec 17 21:24:10 deimos pluto[20021]: | initiator cookie:
Dec 17 21:24:10 deimos pluto[20021]: | c5 e4 0f 20 69 f5 f5 9a
Dec 17 21:24:10 deimos pluto[20021]: | responder cookie:
Dec 17 21:24:10 deimos pluto[20021]: | 5a 73 7f e1 c7 57 35 e6
Dec 17 21:24:10 deimos pluto[20021]: | next payload type: ISAKMP_NEXT_KE
Dec 17 21:24:10 deimos pluto[20021]: | ISAKMP version: ISAKMP Version 1.0
Dec 17 21:24:10 deimos pluto[20021]: | exchange type: ISAKMP_XCHG_IDPROT
Dec 17 21:24:10 deimos pluto[20021]: | flags: none
Dec 17 21:24:10 deimos pluto[20021]: | message ID: 00 00 00 00
Dec 17 21:24:10 deimos pluto[20021]: | length: 184
Dec 17 21:24:10 deimos pluto[20021]: | ICOOKIE: c5 e4 0f 20 69 f5 f5 9a
Dec 17 21:24:10 deimos pluto[20021]: | RCOOKIE: 5a 73 7f e1 c7 57 35 e6
Dec 17 21:24:10 deimos pluto[20021]: | peer: 18 d4 1a d6
Dec 17 21:24:10 deimos pluto[20021]: | state hash entry 25
Dec 17 21:24:10 deimos pluto[20021]: | state object #3 found, in STATE_MAIN_I2
Dec 17 21:24:10 deimos pluto[20021]: | ***parse ISAKMP Key Exchange Payload:
Dec 17 21:24:10 deimos pluto[20021]: | next payload type: ISAKMP_NEXT_NONCE
Dec 17 21:24:10 deimos pluto[20021]: | length: 132
Dec 17 21:24:10 deimos pluto[20021]: | ***parse ISAKMP Nonce Payload:
Dec 17 21:24:10 deimos pluto[20021]: | next payload type: ISAKMP_NEXT_NONE
Dec 17 21:24:10 deimos pluto[20021]: | length: 24
Dec 17 21:24:10 deimos pluto[20021]: | **emit ISAKMP Message:
Dec 17 21:24:10 deimos pluto[20021]: | initiator cookie:
Dec 17 21:24:10 deimos pluto[20021]: | c5 e4 0f 20 69 f5 f5 9a
Dec 17 21:24:10 deimos pluto[20021]: | responder cookie:
Dec 17 21:24:10 deimos pluto[20021]: | 5a 73 7f e1 c7 57 35 e6
Dec 17 21:24:10 deimos pluto[20021]: | next payload type: ISAKMP_NEXT_ID
Dec 17 21:24:10 deimos pluto[20021]: | ISAKMP version: ISAKMP Version 1.0
Dec 17 21:24:10 deimos pluto[20021]: | exchange type: ISAKMP_XCHG_IDPROT
Dec 17 21:24:10 deimos pluto[20021]: | flags: ISAKMP_FLAG_ENCRYPTION
Dec 17 21:24:10 deimos pluto[20021]: | message ID: 00 00 00 00
Dec 17 21:24:10 deimos pluto[20021]: | DH public value received:
Dec 17 21:24:10 deimos pluto[20021]: | f8 48 a3 d4 1d 6f 90 5b 62 3f 18 b2 d7 71 c0 12
Dec 17 21:24:10 deimos pluto[20021]: | d8 38 fa e1 93 09 26 29 de ab 5d e1 ab 83 96 86
Dec 17 21:24:10 deimos pluto[20021]: | 8b c6 69 ba bc ab 98 0a fe b4 40 da 3a d3 69 a1
Dec 17 21:24:10 deimos pluto[20021]: | 6f f6 47 d4 4d ab 6b e0 b0 f3 ae 2c d9 a5 18 d9
Dec 17 21:24:10 deimos pluto[20021]: | c0 ca fe 64 3e 85 77 2c d2 f0 14 b8 6e 41 42 69
Dec 17 21:24:10 deimos pluto[20021]: | 28 1e 66 1c dc 36 8f 4f 3a 09 9d 7a ee 41 44 ca
Dec 17 21:24:10 deimos pluto[20021]: | 3e fa 35 e3 c2 72 a8 2f 97 e8 3b 9f c6 bf 30 f3
Dec 17 21:24:10 deimos pluto[20021]: | fc 0e 3d ff 8e 6b bf 96 2d 8f e6 ee fe 79 15 65
Dec 17 21:24:11 deimos pluto[20021]: | DH shared secret:
Dec 17 21:24:11 deimos pluto[20021]: | d6 e2 ae 55 e6 00 56 bc 21 1d 24 53 3c 03 43 95
Dec 17 21:24:11 deimos pluto[20021]: | db c5 7b ea 52 e0 23 b2 60 fe bd 0f 59 66 2e 40
Dec 17 21:24:11 deimos pluto[20021]: | 2e a9 ab fe e7 a6 92 3c 6f 15 38 96 ea 33 67 da
Dec 17 21:24:11 deimos pluto[20021]: | f2 cd e9 36 af dc 65 bb cd 95 31 af 5a 11 58 0a
Dec 17 21:24:11 deimos pluto[20021]: | 2a aa 16 e8 e3 73 c5 6b 93 60 8c f6 fe cb 5a 1b
Dec 17 21:24:11 deimos pluto[20021]: | 64 c0 7b b6 6e 82 ed 9d a3 d1 f1 a3 ea a7 3d 51
Dec 17 21:24:11 deimos pluto[20021]: | cf 2d 0c b1 a2 33 80 ce 33 ff 93 6b f7 ce 76 c1
Dec 17 21:24:11 deimos pluto[20021]: | 49 95 80 25 3b 10 ee 0a 92 66 ef 98 bb 06 f7 55
Dec 17 21:24:11 deimos pluto[20021]: | Skeyid: 1a 56 a9 88 fc 57 4c 29 c6 75 51 38 fb eb 6b b3
Dec 17 21:24:11 deimos pluto[20021]: | eb 1d 03 b3
Dec 17 21:24:11 deimos pluto[20021]: | Skeyid_d: 6a 06 9b da 38 dd 3b 88 86 33 b5 6d bb c6 fc e6
Dec 17 21:24:11 deimos pluto[20021]: | 55 80 06 66
Dec 17 21:24:11 deimos pluto[20021]: | Skeyid_a: 20 e9 ab 5c fb 48 b3 43 57 86 bd 65 0c da 88 a8
Dec 17 21:24:11 deimos pluto[20021]: | 19 53 45 d1
Dec 17 21:24:11 deimos pluto[20021]: | Skeyid_e: 4e 1e 14 90 d8 c9 e8 eb aa 52 ef a7 69 8e 49 ac
Dec 17 21:24:11 deimos pluto[20021]: | c0 3f 23 e5
Dec 17 21:24:11 deimos pluto[20021]: | enc key: 58 c7 3d 2e d1 f7 80 81 1e 65 1b fc b4 0b 84 8f
Dec 17 21:24:11 deimos pluto[20021]: | 0f 34 25 93 91 78 71 b4
Dec 17 21:24:11 deimos pluto[20021]: | IV: 16 83 d4 80 68 a9 70 1d 26 5a 1f f2 de b1 de 03
Dec 17 21:24:11 deimos pluto[20021]: | 31 e5 eb a2
Dec 17 21:24:11 deimos pluto[20021]: | ***emit ISAKMP Identification Payload (IPsec DOI):
Dec 17 21:24:11 deimos pluto[20021]: | next payload type: ISAKMP_NEXT_HASH
Dec 17 21:24:11 deimos pluto[20021]: | ID type: ID_IPV4_ADDR
Dec 17 21:24:11 deimos pluto[20021]: | Protocol ID: 0
Dec 17 21:24:11 deimos pluto[20021]: | port: 0
Dec 17 21:24:11 deimos pluto[20021]: | emitting 4 raw bytes of my identity into ISAKMP Identification Payload (IPsec DOI)
Dec 17 21:24:11 deimos pluto[20021]: | my identity 8e d9 ae 39
Dec 17 21:24:11 deimos pluto[20021]: | emitting length of ISAKMP Identification Payload (IPsec DOI): 12
Dec 17 21:24:11 deimos pluto[20021]: | hashing 144 bytes of SA
Dec 17 21:24:11 deimos pluto[20021]: | ***emit ISAKMP Hash Payload:
Dec 17 21:24:11 deimos pluto[20021]: | next payload type: ISAKMP_NEXT_NONE
Dec 17 21:24:11 deimos pluto[20021]: | emitting 20 raw bytes of HASH_I into ISAKMP Hash Payload
Dec 17 21:24:11 deimos pluto[20021]: | HASH_I 73 14 2a ea 41 c8 dd be 6a 90 d7 bf b4 ec f5 aa
Dec 17 21:24:11 deimos pluto[20021]: | b2 a8 af d4
Dec 17 21:24:11 deimos pluto[20021]: | emitting length of ISAKMP Hash Payload: 24
Dec 17 21:24:11 deimos pluto[20021]: | encrypting:
Dec 17 21:24:11 deimos pluto[20021]: | 08 00 00 0c 01 00 00 00 8e d9 ae 39 00 00 00 18
Dec 17 21:24:11 deimos pluto[20021]: | 73 14 2a ea 41 c8 dd be 6a 90 d7 bf b4 ec f5 aa
Dec 17 21:24:11 deimos pluto[20021]: | b2 a8 af d4
Dec 17 21:24:11 deimos pluto[20021]: | emitting 4 zero bytes of encryption padding into ISAKMP Message
Dec 17 21:24:11 deimos pluto[20021]: | encrypting using OAKLEY_3DES_CBC
Dec 17 21:24:11 deimos pluto[20021]: | next IV: f2 1e 01 31 66 13 7a 29
Dec 17 21:24:11 deimos pluto[20021]: | emitting length of ISAKMP Message: 68
Dec 17 21:24:11 deimos pluto[20021]: | sending 68 bytes for STATE_MAIN_I2 through eth0 to A.B.C.D:500:
Dec 17 21:24:11 deimos pluto[20021]: | c5 e4 0f 20 69 f5 f5 9a 5a 73 7f e1 c7 57 35 e6
Dec 17 21:24:11 deimos pluto[20021]: | 05 10 02 01 00 00 00 00 00 00 00 44 cf 29 bb 5b
Dec 17 21:24:11 deimos pluto[20021]: | df 8a 59 14 48 0e 54 7b aa b6 f6 58 b5 4f 4a 72
Dec 17 21:24:11 deimos pluto[20021]: | db af 3e d3 5d 8b c8 90 e4 2c 99 a0 f2 1e 01 31
Dec 17 21:24:11 deimos pluto[20021]: | 66 13 7a 29
Dec 17 21:24:11 deimos pluto[20021]: | inserting event EVENT_RETRANSMIT, timeout in 10 seconds for #3
Dec 17 21:24:11 deimos pluto[20021]: | next event EVENT_RETRANSMIT in 10 seconds for #3
Dec 17 21:24:11 deimos pluto[20021]: |
Dec 17 21:24:11 deimos pluto[20021]: | *received 56 bytes from A.B.C.D:500 on eth0
Dec 17 21:24:11 deimos pluto[20021]: | c5 e4 0f 20 69 f5 f5 9a 5a 73 7f e1 c7 57 35 e6
Dec 17 21:24:11 deimos pluto[20021]: | 0b 10 05 00 00 00 00 00 00 00 00 38 00 00 00 1c
Dec 17 21:24:11 deimos pluto[20021]: | 00 00 00 01 01 10 00 01 c5 e4 0f 20 69 f5 f5 9a
Dec 17 21:24:11 deimos pluto[20021]: | 5a 73 7f e1 c7 57 35 e6
Dec 17 21:24:11 deimos pluto[20021]: | **parse ISAKMP Message:
Dec 17 21:24:11 deimos pluto[20021]: | initiator cookie:
Dec 17 21:24:11 deimos pluto[20021]: | c5 e4 0f 20 69 f5 f5 9a
Dec 17 21:24:11 deimos pluto[20021]: | responder cookie:
Dec 17 21:24:11 deimos pluto[20021]: | 5a 73 7f e1 c7 57 35 e6
Dec 17 21:24:11 deimos pluto[20021]: | next payload type: ISAKMP_NEXT_N
Dec 17 21:24:11 deimos pluto[20021]: | ISAKMP version: ISAKMP Version 1.0
Dec 17 21:24:11 deimos pluto[20021]: | exchange type: ISAKMP_XCHG_INFO
Dec 17 21:24:11 deimos pluto[20021]: | flags: none
Dec 17 21:24:11 deimos pluto[20021]: | message ID: 00 00 00 00
Dec 17 21:24:11 deimos pluto[20021]: | length: 56
Dec 17 21:24:11 deimos pluto[20021]: | ICOOKIE: c5 e4 0f 20 69 f5 f5 9a
Dec 17 21:24:11 deimos pluto[20021]: | RCOOKIE: 5a 73 7f e1 c7 57 35 e6
Dec 17 21:24:11 deimos pluto[20021]: | peer: 18 d4 1a d6
Dec 17 21:24:11 deimos pluto[20021]: | state hash entry 25
Dec 17 21:24:11 deimos pluto[20021]: | state object #3 found, in STATE_MAIN_I3
Dec 17 21:24:11 deimos pluto[20021]: | ***parse ISAKMP Notification Payload:
Dec 17 21:24:11 deimos pluto[20021]: | next payload type: ISAKMP_NEXT_NONE
Dec 17 21:24:11 deimos pluto[20021]: | length: 28
Dec 17 21:24:11 deimos pluto[20021]: | DOI: ISAKMP_DOI_IPSEC
Dec 17 21:24:11 deimos pluto[20021]: | protocol ID: 1
Dec 17 21:24:11 deimos pluto[20021]: | SPI size: 16
Dec 17 21:24:12 deimos pluto[20021]: | Notify Message Type: INVALID_PAYLOAD_TYPE
Dec 17 21:24:12 deimos pluto[20021]: "jeannot_christian_psk_auto" #3: ignoring informational payload, type INVALID_PAYLOAD_TYPE
Dec 17 21:24:12 deimos pluto[20021]: | info: c5 e4 0f 20 69 f5 f5 9a 5a 73 7f e1 c7 57 35 e6
Dec 17 21:24:12 deimos pluto[20021]: | next event EVENT_RETRANSMIT in 9 seconds for #3
+ _________________________ date
+ date
Wed Dec 17 21:24:19 EST 2003
-------------- next part --------------
A non-text attachment was scrubbed...
Name: christian_firmware_version.jpg
Type: image/jpeg
Size: 77698 bytes
Desc: not available
Url : http://lists.openswan.org/pipermail/dev/attachments/20031220/5e788cf7/christian_firmware_version-0001.jpg
-------------- next part --------------
A non-text attachment was scrubbed...
Name: christian_basic_ipsec_setup.jpg
Type: image/jpeg
Size: 63820 bytes
Desc: not available
Url : http://lists.openswan.org/pipermail/dev/attachments/20031220/5e788cf7/christian_basic_ipsec_setup-0001.jpg
-------------- next part --------------
A non-text attachment was scrubbed...
Name: christian_advanced_ipsec_setup.jpg
Type: image/jpeg
Size: 47509 bytes
Desc: not available
Url : http://lists.openswan.org/pipermail/dev/attachments/20031220/5e788cf7/christian_advanced_ipsec_setup-0001.jpg
More information about the Dev
mailing list