[Openswan dev] OpenSwan 2.6.10-1 on OpenWrt 7.09 consistently hangs on large HTTP file transfer

[Michael Richardson]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


>>>>> "starlight" == starlight  <starlight at binnacle.cx> writes:
    starlight> After approximately 6GB of a HTTP file transfer through OpenSWAN, 
    starlight> it locks up suddenly and completely.  All remaining OpenWRT 
    starlight> router functions continue to function normally.

    starlight> Need some help on how to collect details for diagnosing the 
    starlight> problem.  Everything looks normal, no error messages of any kind 
    starlight> in the 'syslogd' log captured on a Linux server.  'dmesg' output 
    starlight> from router is equally devoid of any diagnostic messages.
    starlight> 'ipsec whack --status' output (attached) looks fine to
    starlight> me.

  Also look at "ipsec spi" output.
  If you are transfering 6GB, you should have multiple rekeys.   It's
possible that you hit a bug with IPsec SAs going stale due to too much
data transfered.

- -- 
]            Bear: "Me, I'm just the shape of a bear."          |  firewalls  [
]   Michael Richardson,    Xelerance Corporation, Ottawa, ON    |net architect[
] mcr at xelerance.com      http://www.sandelman.ottawa.on.ca/mcr/ |device driver[
] panic("Just another Debian GNU/Linux using, kernel hacking, security guy"); [


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Finger me for keys

iQEVAwUBR1MmC4CLcPvd0N1lAQJzBwf/Quq0rkpnwWu0A8A95hzMLPKsrGh4t0GW
cz/cGTAyyG/MlGG0MFgW1X+ldue5S7+t13cr94ud4o63jIZggj/6bWV9WkaY4odL
1jzzpQ78MH4pzzT70I//SZhp6chOl8a+WkU+JSsBifwqsdszM8r9bJZFDbobPIOy
UNN8YO/POLS3OC2rKYdlRFD5sqafDblV84t6tSdA7MuV98gwaAr41pbZWsWUYXBg
yWUbO1TkOK8HQVihKEPOD9LAU+ofsH6+r3bZUXCdpRpc+v5znVrTn8IiuwLmCrVM
y94C3ihv9z2S5+QPSHQJLGBHp74ssdc/Cjb3Mw/oxSKieXJ7EsN2pw==
=mi7n
-----END PGP SIGNATURE-----