[Openswan dev] openswan bug reporting.... (fwd)

David McCullough david_mccullough at mcafee.com
Mon Jun 6 19:45:19 EDT 2011


Jivin Paul Wouters lays it down ...
> On Sat, 4 Jun 2011, David McCullough wrote:
> 
> I still have problems with 2.6.34rc6 on one machine. I've
> added your key to aivd.xelerance.com (root). It is a test
> L2TP server. The test acount is username "test", password "test",
> PSK "test".
> 
> I see:
> 
> [   83.923783] ipsec_sa_get: ipsec_sa ffff880002e3c400 SA:esp.7ac1e1a at 74.198.9.106, ref:1 reference count (3++) incremented by ipsec_sa_getbyid:563.
> [   83.923887] ipsec_sa_getbyid: linked entry in ipsec_sa table for hash=182 of SA:esp.7ac1e1a at 74.198.9.106 requested.
> [   83.923896] ipsec_sa_get: ipsec_sa ffff880002e3c400 SA:esp.7ac1e1a at 74.198.9.106, ref:1 reference count (4++) incremented by ipsec_sa_getbyid:563.
> [   83.923903] ipsec_sa_put: ipsec_sa ffff880002e3c400 SA:esp.7ac1e1a at 74.198.9.106, ref:1 reference count (5--) decremented by ipsec_xsm:2780.
> [   83.923911] ipsec_sa_put: ipsec_sa ffff880002e3c400 SA:esp.7ac1e1a at 74.198.9.106, ref:1 reference count (4--) decremented by ipsec_xmit_cont:1312.
> [   84.924939] ipsec_sa_getbyid: linked entry in ipsec_sa table for hash=182 of SA:esp.7ac1e1a at 74.198.9.106 requested.
> [   84.924951] ipsec_sa_get: ipsec_sa ffff880002e3c400 SA:esp.7ac1e1a at 74.198.9.106, ref:1 reference count (3++) incremented by ipsec_sa_getbyid:563.
> [   84.925060] ipsec_sa_getbyid: linked entry in ipsec_sa table for hash=182 of SA:esp.7ac1e1a at 74.198.9.106 requested.
> [   84.925068] ipsec_sa_get: ipsec_sa ffff880002e3c400 SA:esp.7ac1e1a at 74.198.9.106, ref:1 reference count (4++) incremented by ipsec_sa_getbyid:563.
> [   84.925076] ipsec_sa_put: ipsec_sa ffff880002e3c400 SA:esp.7ac1e1a at 74.198.9.106, ref:1 reference count (5--) decremented by ipsec_xsm:2780.
> [   84.925084] ipsec_sa_put: ipsec_sa ffff880002e3c400 SA:esp.7ac1e1a at 74.198.9.106, ref:1 reference count (4--) decremented by ipsec_xmit_cont:1312.
> 
> I see this without enabling klipsdebug by the way.

You must have debug_xform set,  if not then something must have corrupted
it :-(  What does "klipsdebug" show ?

Cheers,
Davidm

-- 
David McCullough,      david_mccullough at mcafee.com,  Ph:+61 734352815
McAfee - SnapGear      http://www.mcafee.com         http://www.uCdot.org


More information about the Dev mailing list