[Openswan Users] Help:Why pfkey write error?

[Andreas Steffen]

Do your userland and kernel versons of super-fs match?

What version[s] does the command ipsec --version show?

swcims wrote:

> Hi, All
> 
> 	I am using super-fs 1.99 in linux2.4.17 to connect with other vpn router. First,tunnel can be set up successfully.Then I use "whack --name test --terminate" to terminate tunnel.And then,I ping from subnet within super-fs(ping 192.168.5.100 from 192.168.1.100),it would occur:
>     Jan  1 00:49:16 pluto[2203]: ERROR: pfkey write() of SADB_X_DELFLOW message 53 for flow %hold failed. Errno 14: Bad address
> 
> Jan  1 00:49:16 pluto[2203]: |   02 0f 00 0b  0e 00 00 00  35 00 00 00  9b 08 00 00
> 
> Jan  1 00:49:16 pluto[2203]: |   03 00 15 00  00 00 00 00  02 00 00 00  c0 a8 01 64
> 
> Jan  1 00:49:16 pluto[2203]: |   00 00 00 00  00 00 00 00  03 00 16 00  00 00 00 00
> 
> Jan  1 00:49:16 pluto[2203]: |   02 00 00 00  c0 a8 05 e6  00 00 00 00  00 00 00 00
> 
> Jan  1 00:49:16 pluto[2203]: |   03 00 17 00  00 00 00 00  02 00 00 00  ff ff ff ff
> 
> Jan  1 00:49:16 pluto[2203]: |   00 00 00 00  00 00 00 00  03 00 18 00  00 00 00 00
> 
> Jan  1 00:49:16 pluto[2203]: |   02 00 00 00  ff ff ff ff  00 00 00 00  00 00 00 00
> 
> 	And I can find a new-added eroute :
> 	4          192.168.1.100/32:0 -> 192.168.5.100/32:0 => %hold:1
> 	I got lost.
> 	Would anyone supply some advice?Thanks a lot!
> 
> 
> 	
> 
> ¡¡¡¡Regards.
>  				
> 
> ¡¡¡¡¡¡¡¡¡¡¡¡¡¡¡¡swcims
> ¡¡¡¡¡¡¡¡¡¡¡¡¡¡¡¡swcims at 163.com
> ¡¡¡¡¡¡¡¡¡¡¡¡¡¡¡¡¡¡¡¡2004-03-10

=======================================================================
Andreas Steffen                   e-mail: andreas.steffen at strongsec.com
strongSec GmbH                    home:   http://www.strongsec.com
Alter Z¨¹richweg 20                phone:  +41 1 730 80 64
CH-8952 Schlieren (Switzerland)   fax:    +41 1 730 80 65
==========================================[strong internet security]===