[Openswan dev] openswan-1.0.3 and procfs bug

[Paul Wouters]

On Thu, 22 Apr 2004, Bulba wrote:

> Hi,
> don't have enough time now to create patch, but just to let you
> know:
> 
> There seems to be a problem with ipsec_snprintf() in ipsec_proc.c.
> While reading /proc/net/ipsec_eroute pluto complains about:
> 
> INTERNAL ERROR: /proc/net/ipsec_eroute line 38 has wrong number of fields
> 
> It's all about NUL byte always at position 3071, in the middle of
> ipsec_eroute line.

Are you using Opportunistic Encryption on a really busy machine (eg a name
server or busy webserver?). This error happens when that is the case. The
fix for that is to run OE passively if you want OE, or to not run OE if 
you don't intend to use it.

btw. the error is "harmless" in that it won't process some eroutes on that
go, but will try in the next loop. It is a known limitation of how openswan
(and freeswan) work with procfs.

Paul