[Openswan Users] Pluto dies doing keyexchange with Win2K
Paul Hampson
Paul.Hampson at PObox.com
Mon Mar 14 18:33:51 CET 2005
I've got a repeatable error from pluto, whenever my Win2K desktop
machine tries to negotiate IPSec.
The setup is using X.509 certificates, and the server is using openswan
2.3.0-2 from Debian with the Linux 2.6 built-in IPSec.
An openswan client on my linux laptop (also Linux 2.6 build-in IPSec) is
able to negotiate fine.
I've got a coredump and a whackload of data logged with debug=all, so I
hope this can be worked out. Someone posted an email to this list in
February with a simlar problem, but only posted the backtrace and no one
replied. I hope the extra details here help solve it.
The coredump is a segfault, it happens during an attempt to print the
status of pluto after a failed assertion, when it tries to use the same
value that was asserted. (State's state.)
Pluto was not stripped, so all the symbols are intact.
tbble at keitarou:~$ gdb /usr/lib/ipsec/pluto /root/plutocore
GNU gdb 6.3-debian
Copyright 2004 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB. Type "show warranty" for details.
This GDB was configured as "i386-linux"...Using host libthread_db library "/lib/tls/i686/cmov/libthread_db.so.1".
Core was generated by `/usr/lib/ipsec/pluto --nofork --secretsfile /etc/ipsec.secrets --ipsecdir /etc/'.
Program terminated with signal 11, Segmentation fault.
warning: current_sos: Can't read pathname for load map: Input/output error
Reading symbols from /usr/lib/libgmp.so.3...done.
Loaded symbols for /usr/lib/libgmp.so.3
Reading symbols from /lib/tls/i686/cmov/libresolv.so.2...done.
Loaded symbols for /lib/tls/i686/cmov/libresolv.so.2
Reading symbols from /lib/tls/i686/cmov/libc.so.6...done.
Loaded symbols for /lib/tls/i686/cmov/libc.so.6
Reading symbols from /lib/ld-linux.so.2...done.
Loaded symbols for /lib/ld-linux.so.2
#0 0xb7ee014b in strlen () from /lib/tls/i686/cmov/libc.so.6
(gdb) bt
#0 0xb7ee014b in strlen () from /lib/tls/i686/cmov/libc.so.6
#1 0xb7eaf431 in vfprintf () from /lib/tls/i686/cmov/libc.so.6
#2 0xb7ed0e80 in vsnprintf () from /lib/tls/i686/cmov/libc.so.6
#3 0xb7eb57e4 in snprintf () from /lib/tls/i686/cmov/libc.so.6
#4 0x0805b4b1 in fmt_state (st=0x8103b00, n=1110703373, state_buf=0xbffff120 "#2: \"wlan\"[2] 10.20.30.198 (null) ({0,0,0} attrs={0,0,0} ", state_buf_len=1024,
state_buf2=0xbfffed20 "`1�, state_buf2_len=1024) at state.c:871
#5 0x0805bc48 in show_states_status () at state.c:1014
#6 0x080594b1 in show_status () at log.c:754
#7 0x08059064 in passert_fail (pred_str=0x80c8940 "STATE_IKE_FLOOR <= from_state && from_state <= STATE_IKE_ROOF", file_str=0x80c7954 "demux.c", line_no=1799)
at log.c:596
#8 0x0807dce3 in process_packet (mdp=0x80eb9f8) at demux.c:1799
#9 0x0807c9ce in comm_handle (ifp=0x8100ae0) at demux.c:1173
#10 0x0805fff5 in call_server () at server.c:1076
#11 0x0805cb60 in main (argc=8, argv=0xbffff8f4) at plutomain.c:731
(gdb) frame 8
#8 0x0807dce3 in process_packet (mdp=0x80eb9f8) at demux.c:1799
1799 passert(STATE_IKE_FLOOR <= from_state && from_state <=
STATE_IKE_ROOF);
(gdb) p from_state
$1 = STATE_UNDEFINED
(gdb) p st
$2 = (struct state *) 0x8103b00
(gdb) p md->hdr.isa_xchg
$3 = 32 ' '
(gdb) p st->st_state
$4 = STATE_UNDEFINED
(gdb)
As you can see, the failure happens at demux.c:1799. So, a quick poke at
demux.c, which starts with a huge switch against md->hdr.isa_xchg.
To get to this point in demux.c, lines 1556-1557:
st = find_state(md->hdr.isa_icookie, md->hdr.isa_rcookie
, &md->sender, md->hdr.isa_msgid);
must have returned something, as the following "if (st == NULL)"
finishes by setting from_state to STATE_QUICK_R0. Every other
path returns, so we must have passed through lines 1626-1627:
set_cur_state(st);
from_state = st->st_state;
right before line 1799 where we failed the passert. And
set_cur_state is all-but a no-op, so the problem must have
already existed with the state somehow.
Here's the non-debugging logs from the last couple of packets
before the last one:
Mar 14 15:41:35 keitarou pluto[5598]: "wlan"[2] 10.20.30.198 #1: sent MR3, ISAKMP SA established
Mar 14 15:41:36 keitarou pluto[5598]: "wlan"[2] 10.20.30.198 #1: retransmitting in response to duplicate packet; already STATE_MAIN_R3
Mar 14 15:41:38 keitarou pluto[5598]: "wlan"[2] 10.20.30.198 #1: retransmitting in response to duplicate packet; already STATE_MAIN_R3
Mar 14 15:41:40 keitarou pluto[5598]: "wlan"[2] 10.20.30.198 #1: discarding duplicate packet -- exhausted retransmission; already STATE_MAIN_R3
And now for a huge dump of debugging data: ^_^ (All of three seconds...)
Mar 14 15:41:40 keitarou pluto[5598]: | next event EVENT_REINIT_SECRET in 1810 seconds
Mar 14 15:41:40 keitarou pluto[5598]: |
Mar 14 15:41:40 keitarou pluto[5598]: | *received 1300 bytes from 10.20.30.198:500 on wlan0
Mar 14 15:41:40 keitarou pluto[5598]: | 43 8d 40 2d 25 9c 19 72 ea b5 9b 10 d6 9f 6d 14
Mar 14 15:41:40 keitarou pluto[5598]: | 08 10 20 01 0a b1 70 b5 00 00 05 14 23 7a 51 92
Mar 14 15:41:40 keitarou pluto[5598]: | 17 06 85 94 3f 4f 3c 0c 15 35 dc 97 bb ae a4 31
Mar 14 15:41:40 keitarou pluto[5598]: | 58 30 54 07 14 14 02 11 92 eb 90 f3 f3 d2 b7 7e
Mar 14 15:41:40 keitarou pluto[5598]: | a2 ee d8 74 b4 ec 33 9a 06 53 6f 1f 3c 8e 99 06
Mar 14 15:41:40 keitarou pluto[5598]: | ef e4 55 df 29 5e 2b 5c da f8 11 52 1d 2b bc 7f
Mar 14 15:41:40 keitarou pluto[5598]: | 82 16 54 43 6f a7 ce a3 45 56 6c ad f6 d1 1e 67
Mar 14 15:41:40 keitarou pluto[5598]: | f3 d7 16 2b 12 be 48 80 73 51 f7 d7 04 4f 05 cb
Mar 14 15:41:40 keitarou pluto[5598]: | fd 3a e4 d5 bc 5e 5b 26 6d 92 9f 96 a5 b8 f8 21
Mar 14 15:41:40 keitarou pluto[5598]: | c4 96 e4 d8 40 cb 5f ba 18 28 a7 3a 03 1f 01 6b
Mar 14 15:41:40 keitarou pluto[5598]: | 5c 82 04 52 ee 5e 10 de ab 3c 72 27 97 56 84 0d
Mar 14 15:41:40 keitarou pluto[5598]: | ee a5 6a 3a 28 a2 13 53 09 6b 3d ed ec 08 26 ad
Mar 14 15:41:40 keitarou pluto[5598]: | a6 fd a9 e1 f8 53 55 a5 c4 d2 15 e9 c2 85 8e d6
Mar 14 15:41:40 keitarou pluto[5598]: | 52 5f a5 e3 86 3d cd 04 57 72 f5 40 8b ed c0 12
Mar 14 15:41:40 keitarou pluto[5598]: | c4 e3 af f9 5e a1 5f 8e 36 21 fe d1 ae a1 f6 bb
Mar 14 15:41:40 keitarou pluto[5598]: | 56 df 54 b5 75 81 fe 00 2c 75 93 fe 8d 45 4b 7e
Mar 14 15:41:40 keitarou pluto[5598]: | a6 36 88 69 7b 6c c9 d2 69 95 01 6a 20 84 07 2c
Mar 14 15:41:40 keitarou pluto[5598]: | 6f 5d 3e be 19 8d 70 af 2e 30 6c f1 86 a5 59 16
Mar 14 15:41:40 keitarou pluto[5598]: | fb a2 dc f3 80 f5 10 1a 27 bb 9b 5c d6 d7 21 25
Mar 14 15:41:40 keitarou pluto[5598]: | 8d 7f a3 2d c8 e2 a5 3c d8 6f 5a a4 a4 73 8c 84
Mar 14 15:41:40 keitarou pluto[5598]: | 6c f6 47 ae cc 8d 4f 25 7c 8c 49 aa cf a6 3f 5b
Mar 14 15:41:40 keitarou pluto[5598]: | 50 93 34 2b 4f 39 c2 43 f6 fd a0 74 6c 3a d0 c2
Mar 14 15:41:40 keitarou pluto[5598]: | 6b cc 5b cf 24 33 23 fb 80 0e 21 aa a0 9d 0f 9e
Mar 14 15:41:40 keitarou pluto[5598]: | f9 7c b1 3b 2c b9 a0 84 03 be 73 33 e4 5e bc b7
Mar 14 15:41:40 keitarou pluto[5598]: | 12 f7 bd 92 82 36 32 35 39 2f 1a a2 3b 7a bd e2
Mar 14 15:41:40 keitarou pluto[5598]: | 9b 38 80 ea ce ab f5 cf 89 ba 25 c8 d0 f6 a1 66
Mar 14 15:41:40 keitarou pluto[5598]: | 58 b9 fd 10 20 74 8e 6a ad 24 81 8a f1 71 22 93
Mar 14 15:41:40 keitarou pluto[5598]: | 72 73 5a f8 c0 53 06 79 5f df f9 31 0c 33 80 cc
Mar 14 15:41:40 keitarou pluto[5598]: | 9d 02 37 c4 79 96 15 42 1b f4 5f 0e 18 48 d2 74
Mar 14 15:41:40 keitarou pluto[5598]: | 29 1e e6 50 e9 76 fc d1 7f 46 fe 7f a4 05 01 ff
Mar 14 15:41:40 keitarou pluto[5598]: | 24 f2 e1 22 ab bc c6 ac ac c9 87 9b 0a c4 f3 2b
Mar 14 15:41:40 keitarou pluto[5598]: | 6d 03 2f 03 e3 ba f1 1b 6a 7b ec 74 45 95 6a e6
Mar 14 15:41:40 keitarou pluto[5598]: | 1f 72 8a aa b3 66 21 0f cd d6 78 b0 a2 5b 0e ec
Mar 14 15:41:40 keitarou pluto[5598]: | c8 4c 21 fd 18 32 cb 4c 0c 53 20 cb b4 7d 55 0b
Mar 14 15:41:40 keitarou pluto[5598]: | 2d 01 61 d3 ed c8 f7 49 13 f8 de 7d 95 49 b9 66
Mar 14 15:41:40 keitarou pluto[5598]: | 66 9c a4 bf 1f 17 fc 60 22 8b 92 84 85 59 20 7c
Mar 14 15:41:40 keitarou pluto[5598]: | e6 82 50 2a d4 9b e4 d2 17 3e aa 0f 52 26 42 05
Mar 14 15:41:40 keitarou pluto[5598]: | 88 c6 77 e1 6c 26 2d 3f 62 73 30 75 40 be b2 67
Mar 14 15:41:40 keitarou pluto[5598]: | 76 cb 3f 56 9f dd 5d 06 66 88 bb f9 65 e8 d0 5e
Mar 14 15:41:40 keitarou pluto[5598]: | 05 c7 01 01 c3 ce 7f f6 e4 38 4c 57 47 e2 c0 c7
Mar 14 15:41:40 keitarou pluto[5598]: | 85 4a 07 b9 93 32 b1 74 83 e5 0a 44 85 a5 50 1e
Mar 14 15:41:40 keitarou pluto[5598]: | 1a 64 ed 55 bb e8 50 c8 dc 13 35 e9 1b 53 b9 0c
Mar 14 15:41:40 keitarou pluto[5598]: | f4 ec 53 b8 17 ac 55 e8 3d f2 44 aa 9e 60 be db
Mar 14 15:41:40 keitarou pluto[5598]: | 10 d5 77 c1 1e 73 c5 9b 98 bc a0 4e 14 08 be 39
Mar 14 15:41:40 keitarou pluto[5598]: | 53 c2 96 7e af 63 c5 3e c0 60 dd b1 fe 18 4c 08
Mar 14 15:41:40 keitarou pluto[5598]: | 8c e5 b9 da 65 58 09 3c 69 97 29 54 87 d8 36 79
Mar 14 15:41:40 keitarou pluto[5598]: | 85 3e dc 29 e4 af 9f 1f c1 7f 77 e4 90 b0 c9 48
Mar 14 15:41:40 keitarou pluto[5598]: | 1f 41 53 1c e2 d1 74 e2 70 c9 2a 07 60 b0 78 90
Mar 14 15:41:40 keitarou pluto[5598]: | d6 7c be 89 73 01 ea f2 63 fb 8a e2 55 ed 93 d7
Mar 14 15:41:40 keitarou pluto[5598]: | 8d 11 49 1e bc 86 2d 1e 97 64 05 77 b7 eb da 1a
Mar 14 15:41:40 keitarou pluto[5598]: | cc e9 9e cd fe d7 e4 5d 23 a1 e7 14 fd f1 2f 70
Mar 14 15:41:40 keitarou pluto[5598]: | 29 c0 88 e7 c9 65 fb d8 4b 1b 2c 54 6a 5a 00 1b
Mar 14 15:41:40 keitarou pluto[5598]: | f1 ab 76 67 78 db df ff 0c b0 9b 71 3e f8 b4 5c
Mar 14 15:41:40 keitarou pluto[5598]: | 47 5f 41 50 45 04 0d dc d0 5e 31 01 08 f3 85 e2
Mar 14 15:41:40 keitarou pluto[5598]: | d1 6c 33 d6 d6 27 9a bd 07 bb 39 28 9c 27 72 1f
Mar 14 15:41:40 keitarou pluto[5598]: | f9 a6 cd 9d 14 bb 99 77 8c 79 c9 69 e9 3f a7 14
Mar 14 15:41:40 keitarou pluto[5598]: | 4d aa ae be a2 6a 54 fa 50 9a 70 84 38 a1 04 a9
Mar 14 15:41:40 keitarou pluto[5598]: | ed e3 70 ed 3f 87 0c 35 5b 75 cf 84 5a 39 62 60
Mar 14 15:41:40 keitarou pluto[5598]: | de 95 98 91 05 a9 dd 7a 5c 5c 9f 5b e1 7e 13 a4
Mar 14 15:41:40 keitarou pluto[5598]: | 13 7e 33 73 25 da 54 dd 04 24 3a e5 72 9e 5c 25
Mar 14 15:41:40 keitarou pluto[5598]: | c5 12 13 48 2e 07 16 92 9c 12 38 87 dc 71 28 fb
Mar 14 15:41:40 keitarou pluto[5598]: | 6e a0 4f 1e 40 4c 29 75 5a 81 8f 06 7e c8 db 38
Mar 14 15:41:40 keitarou pluto[5598]: | 29 84 f9 7a 9c f9 11 b7 4f e4 1d 8f 55 fe ea a0
Mar 14 15:41:40 keitarou pluto[5598]: | cd 93 40 da 9b ee a4 eb 11 fe 5c 27 dd 45 aa 2a
Mar 14 15:41:40 keitarou pluto[5598]: | 96 06 e9 ac c1 02 2b bf 15 85 00 53 53 97 63 a3
Mar 14 15:41:40 keitarou pluto[5598]: | d1 47 ad 57 a5 ab 97 ff 82 99 94 cf 29 2a a1 38
Mar 14 15:41:40 keitarou pluto[5598]: | b7 35 2e 9e b7 ad 2c 49 7f ce 85 ed 26 5b d4 d2
Mar 14 15:41:40 keitarou pluto[5598]: | 32 3c 36 cc 1a 20 01 12 17 49 fe 0c 83 6b ef ef
Mar 14 15:41:40 keitarou pluto[5598]: | 40 5d f3 07 8a e3 5a ee 4b 80 e7 30 30 23 66 72
Mar 14 15:41:40 keitarou pluto[5598]: | 46 41 1c 81 28 9a bc 5d cf e2 25 eb 43 4d 1a 40
Mar 14 15:41:40 keitarou pluto[5598]: | bd 8e 50 97 93 21 24 9a 43 7c 56 67 33 1c db 77
Mar 14 15:41:40 keitarou pluto[5598]: | 80 48 6c 4f 29 7d 7f 65 60 7e ff 0b a9 d8 b7 4d
Mar 14 15:41:40 keitarou pluto[5598]: | 70 e8 df 63 b1 69 de 62 3d 84 53 fc 05 f0 ed 89
Mar 14 15:41:40 keitarou pluto[5598]: | 74 8a 16 7f b7 7a 78 c2 20 64 92 02 30 c6 be f2
Mar 14 15:41:40 keitarou pluto[5598]: | 69 ac 85 82 31 a8 51 dc c8 77 cc 0d ca f5 e0 05
Mar 14 15:41:40 keitarou pluto[5598]: | 30 23 75 4a 2a f2 f2 ec cb cf 5a ab 3d 25 82 ff
Mar 14 15:41:40 keitarou pluto[5598]: | ce a0 f8 a1 c6 d3 31 6c 44 e4 5e 5e e4 b3 26 ce
Mar 14 15:41:40 keitarou pluto[5598]: | 23 6f 18 c3 65 82 e0 3d 1e 74 c8 a9 b9 0d ad a4
Mar 14 15:41:40 keitarou pluto[5598]: | b3 46 1d 6d 4e 1d 32 0b 90 76 b5 1f 82 10 a8 23
Mar 14 15:41:40 keitarou pluto[5598]: | 1b 2a 86 44 eb cc a5 e8 1e 0f 9a d4 f6 7b 03 21
Mar 14 15:41:40 keitarou pluto[5598]: | 09 f6 cb 9d 4b 8a 2f a5 1b 2a 73 e3 30 a1 7f 02
Mar 14 15:41:40 keitarou pluto[5598]: | df e0 2b 35
Mar 14 15:41:40 keitarou pluto[5598]: | **parse ISAKMP Message:
Mar 14 15:41:40 keitarou pluto[5598]: | initiator cookie:
Mar 14 15:41:40 keitarou pluto[5598]: | 43 8d 40 2d 25 9c 19 72
Mar 14 15:41:40 keitarou pluto[5598]: | responder cookie:
Mar 14 15:41:40 keitarou pluto[5598]: | ea b5 9b 10 d6 9f 6d 14
Mar 14 15:41:40 keitarou pluto[5598]: | next payload type: ISAKMP_NEXT_HASH
Mar 14 15:41:40 keitarou pluto[5598]: | ISAKMP version: ISAKMP Version 1.0
Mar 14 15:41:40 keitarou pluto[5598]: | exchange type: ISAKMP_XCHG_QUICK
Mar 14 15:41:40 keitarou pluto[5598]: | flags: ISAKMP_FLAG_ENCRYPTION
Mar 14 15:41:40 keitarou pluto[5598]: | message ID: 0a b1 70 b5
Mar 14 15:41:40 keitarou pluto[5598]: | length: 1300
Mar 14 15:41:40 keitarou pluto[5598]: | ICOOKIE: 43 8d 40 2d 25 9c 19 72
Mar 14 15:41:40 keitarou pluto[5598]: | RCOOKIE: ea b5 9b 10 d6 9f 6d 14
Mar 14 15:41:40 keitarou pluto[5598]: | peer: 0a 14 1e c6
Mar 14 15:41:40 keitarou pluto[5598]: | state hash entry 1
Mar 14 15:41:40 keitarou pluto[5598]: | peer and cookies match on #1, provided msgid 0ab170b5 vs 00000000
Mar 14 15:41:40 keitarou pluto[5598]: | state object not found
Mar 14 15:41:40 keitarou pluto[5598]: | ICOOKIE: 43 8d 40 2d 25 9c 19 72
Mar 14 15:41:40 keitarou pluto[5598]: | RCOOKIE: ea b5 9b 10 d6 9f 6d 14
Mar 14 15:41:40 keitarou pluto[5598]: | peer: 0a 14 1e c6
Mar 14 15:41:40 keitarou pluto[5598]: | state hash entry 1
Mar 14 15:41:40 keitarou pluto[5598]: | peer and cookies match on #1, provided msgid 00000000 vs 00000000
Mar 14 15:41:40 keitarou pluto[5598]: | state object #1 found, in STATE_MAIN_R3
Mar 14 15:41:40 keitarou pluto[5598]: | last Phase 1 IV: 75 e2 39 7d 37 1d 1d 67
Mar 14 15:41:40 keitarou pluto[5598]: | last Phase 1 IV: 75 e2 39 7d 37 1d 1d 67
Mar 14 15:41:40 keitarou pluto[5598]: | computed Phase 2 IV:
Mar 14 15:41:40 keitarou pluto[5598]: | 51 81 3d 7e 9a d4 ba e5 2d 19 2c 1c ef 9a 13 bc
Mar 14 15:41:40 keitarou pluto[5598]: | a1 8c 81 00
Mar 14 15:41:40 keitarou pluto[5598]: | received encrypted packet from 10.20.30.198:500
Mar 14 15:41:40 keitarou pluto[5598]: | decrypting 1272 bytes using algorithm OAKLEY_3DES_CBC
Mar 14 15:41:40 keitarou pluto[5598]: | decrypted:
Mar 14 15:41:40 keitarou pluto[5598]: | 01 00 00 18 e0 b5 5a e1 6f c3 cf e4 72 e1 9b 9e
Mar 14 15:41:40 keitarou pluto[5598]: | 1c e2 a5 bb cc 38 30 0a 0a 00 04 ac 00 00 00 01
Mar 14 15:41:40 keitarou pluto[5598]: | 00 00 00 01 02 00 00 5c 01 03 04 02 66 73 16 34
Mar 14 15:41:40 keitarou pluto[5598]: | 03 00 00 28 01 03 00 00 80 01 00 01 00 02 00 04
Mar 14 15:41:40 keitarou pluto[5598]: | 00 00 0e 10 80 01 00 02 00 02 00 04 00 03 d0 90
Mar 14 15:41:40 keitarou pluto[5598]: | 80 04 00 02 80 05 00 01 00 00 00 28 02 03 00 00
Mar 14 15:41:40 keitarou pluto[5598]: | 80 01 00 01 00 02 00 04 00 00 0e 10 80 01 00 02
Mar 14 15:41:40 keitarou pluto[5598]: | 00 02 00 04 00 03 d0 90 80 04 00 02 80 05 00 02
Mar 14 15:41:40 keitarou pluto[5598]: | 02 00 00 34 02 02 04 01 66 73 16 34 00 00 00 28
Mar 14 15:41:40 keitarou pluto[5598]: | 01 03 00 00 80 01 00 01 00 02 00 04 00 00 0e 10
Mar 14 15:41:40 keitarou pluto[5598]: | 80 01 00 02 00 02 00 04 00 03 d0 90 80 04 00 02
Mar 14 15:41:40 keitarou pluto[5598]: | 80 05 00 02 02 00 00 30 02 03 04 01 12 fa 0d 1d
Mar 14 15:41:40 keitarou pluto[5598]: | 00 00 00 24 01 03 00 00 80 01 00 01 00 02 00 04
Mar 14 15:41:40 keitarou pluto[5598]: | 00 00 0e 10 80 01 00 02 00 02 00 04 00 03 d0 90
Mar 14 15:41:40 keitarou pluto[5598]: | 80 04 00 02 02 00 00 34 03 02 04 01 66 73 16 34
Mar 14 15:41:40 keitarou pluto[5598]: | 00 00 00 28 01 02 00 00 80 01 00 01 00 02 00 04
Mar 14 15:41:41 keitarou pluto[5598]: | 00 00 0e 10 80 01 00 02 00 02 00 04 00 03 d0 90
Mar 14 15:41:41 keitarou pluto[5598]: | 80 04 00 02 80 05 00 01 02 00 00 30 03 03 04 01
Mar 14 15:41:41 keitarou pluto[5598]: | 12 fa 0d 1d 00 00 00 24 01 03 00 00 80 01 00 01
Mar 14 15:41:41 keitarou pluto[5598]: | 00 02 00 04 00 00 0e 10 80 01 00 02 00 02 00 04
Mar 14 15:41:41 keitarou pluto[5598]: | 00 03 d0 90 80 04 00 02 02 00 00 34 04 02 04 01
Mar 14 15:41:41 keitarou pluto[5598]: | 66 73 16 34 00 00 00 28 01 03 00 00 80 01 00 01
Mar 14 15:41:41 keitarou pluto[5598]: | 00 02 00 04 00 00 0e 10 80 01 00 02 00 02 00 04
Mar 14 15:41:41 keitarou pluto[5598]: | 00 03 d0 90 80 04 00 02 80 05 00 02 02 00 00 34
Mar 14 15:41:41 keitarou pluto[5598]: | 04 03 04 01 12 fa 0d 1d 00 00 00 28 01 03 00 00
Mar 14 15:41:41 keitarou pluto[5598]: | 80 01 00 01 00 02 00 04 00 00 0e 10 80 01 00 02
Mar 14 15:41:41 keitarou pluto[5598]: | 00 02 00 04 00 03 d0 90 80 04 00 02 80 05 00 02
Mar 14 15:41:41 keitarou pluto[5598]: | 02 00 00 34 05 02 04 01 66 73 16 34 00 00 00 28
Mar 14 15:41:41 keitarou pluto[5598]: | 01 02 00 00 80 01 00 01 00 02 00 04 00 00 0e 10
Mar 14 15:41:41 keitarou pluto[5598]: | 80 01 00 02 00 02 00 04 00 03 d0 90 80 04 00 02
Mar 14 15:41:41 keitarou pluto[5598]: | 80 05 00 01 02 00 00 34 05 03 04 01 12 fa 0d 1d
Mar 14 15:41:41 keitarou pluto[5598]: | 00 00 00 28 01 03 00 00 80 01 00 01 00 02 00 04
Mar 14 15:41:41 keitarou pluto[5598]: | 00 00 0e 10 80 01 00 02 00 02 00 04 00 03 d0 90
Mar 14 15:41:41 keitarou pluto[5598]: | 80 04 00 02 80 05 00 01 02 00 00 5c 06 03 04 02
Mar 14 15:41:41 keitarou pluto[5598]: | 66 73 16 34 03 00 00 28 01 02 00 00 80 01 00 01
Mar 14 15:41:41 keitarou pluto[5598]: | 00 02 00 04 00 00 0e 10 80 01 00 02 00 02 00 04
Mar 14 15:41:41 keitarou pluto[5598]: | 00 03 d0 90 80 04 00 02 80 05 00 01 00 00 00 28
Mar 14 15:41:41 keitarou pluto[5598]: | 02 02 00 00 80 01 00 01 00 02 00 04 00 00 0e 10
Mar 14 15:41:41 keitarou pluto[5598]: | 80 01 00 02 00 02 00 04 00 03 d0 90 80 04 00 02
Mar 14 15:41:41 keitarou pluto[5598]: | 80 05 00 02 02 00 00 34 07 02 04 01 66 73 16 34
Mar 14 15:41:41 keitarou pluto[5598]: | 00 00 00 28 01 03 00 00 80 01 00 01 00 02 00 04
Mar 14 15:41:41 keitarou pluto[5598]: | 00 00 0e 10 80 01 00 02 00 02 00 04 00 03 d0 90
Mar 14 15:41:41 keitarou pluto[5598]: | 80 04 00 02 80 05 00 02 02 00 00 30 07 03 04 01
Mar 14 15:41:41 keitarou pluto[5598]: | 12 fa 0d 1d 00 00 00 24 01 02 00 00 80 01 00 01
Mar 14 15:41:41 keitarou pluto[5598]: | 00 02 00 04 00 00 0e 10 80 01 00 02 00 02 00 04
Mar 14 15:41:41 keitarou pluto[5598]: | 00 03 d0 90 80 04 00 02 02 00 00 34 08 02 04 01
Mar 14 15:41:41 keitarou pluto[5598]: | 66 73 16 34 00 00 00 28 01 02 00 00 80 01 00 01
Mar 14 15:41:41 keitarou pluto[5598]: | 00 02 00 04 00 00 0e 10 80 01 00 02 00 02 00 04
Mar 14 15:41:41 keitarou pluto[5598]: | 00 03 d0 90 80 04 00 02 80 05 00 01 02 00 00 30
Mar 14 15:41:41 keitarou pluto[5598]: | 08 03 04 01 12 fa 0d 1d 00 00 00 24 01 02 00 00
Mar 14 15:41:41 keitarou pluto[5598]: | 80 01 00 01 00 02 00 04 00 00 0e 10 80 01 00 02
Mar 14 15:41:41 keitarou pluto[5598]: | 00 02 00 04 00 03 d0 90 80 04 00 02 02 00 00 34
Mar 14 15:41:41 keitarou pluto[5598]: | 09 02 04 01 66 73 16 34 00 00 00 28 01 03 00 00
Mar 14 15:41:41 keitarou pluto[5598]: | 80 01 00 01 00 02 00 04 00 00 0e 10 80 01 00 02
Mar 14 15:41:41 keitarou pluto[5598]: | 00 02 00 04 00 03 d0 90 80 04 00 02 80 05 00 02
Mar 14 15:41:41 keitarou pluto[5598]: | 02 00 00 34 09 03 04 01 12 fa 0d 1d 00 00 00 28
Mar 14 15:41:41 keitarou pluto[5598]: | 01 02 00 00 80 01 00 01 00 02 00 04 00 00 0e 10
Mar 14 15:41:41 keitarou pluto[5598]: | 80 01 00 02 00 02 00 04 00 03 d0 90 80 04 00 02
Mar 14 15:41:41 keitarou pluto[5598]: | 80 05 00 02 02 00 00 34 0a 02 04 01 66 73 16 34
Mar 14 15:41:41 keitarou pluto[5598]: | 00 00 00 28 01 02 00 00 80 01 00 01 00 02 00 04
Mar 14 15:41:41 keitarou pluto[5598]: | 00 00 0e 10 80 01 00 02 00 02 00 04 00 03 d0 90
Mar 14 15:41:41 keitarou pluto[5598]: | 80 04 00 02 80 05 00 01 02 00 00 34 0a 03 04 01
Mar 14 15:41:41 keitarou pluto[5598]: | 12 fa 0d 1d 00 00 00 28 01 02 00 00 80 01 00 01
Mar 14 15:41:41 keitarou pluto[5598]: | 00 02 00 04 00 00 0e 10 80 01 00 02 00 02 00 04
Mar 14 15:41:41 keitarou pluto[5598]: | 00 03 d0 90 80 04 00 02 80 05 00 01 02 00 00 5c
Mar 14 15:41:41 keitarou pluto[5598]: | 0b 03 04 02 66 73 16 34 03 00 00 28 01 0b 00 00
Mar 14 15:41:41 keitarou pluto[5598]: | 80 01 00 01 00 02 00 04 00 00 0e 10 80 01 00 02
Mar 14 15:41:41 keitarou pluto[5598]: | 00 02 00 04 00 03 d0 90 80 04 00 02 80 05 00 02
Mar 14 15:41:41 keitarou pluto[5598]: | 00 00 00 28 02 0b 00 00 80 01 00 01 00 02 00 04
Mar 14 15:41:41 keitarou pluto[5598]: | 00 00 0e 10 80 01 00 02 00 02 00 04 00 03 d0 90
Mar 14 15:41:41 keitarou pluto[5598]: | 80 04 00 02 80 05 00 01 00 00 00 5c 0c 02 04 02
Mar 14 15:41:41 keitarou pluto[5598]: | 66 73 16 34 03 00 00 28 01 03 00 00 80 01 00 01
Mar 14 15:41:41 keitarou pluto[5598]: | 00 02 00 04 00 00 0e 10 80 01 00 02 00 02 00 04
Mar 14 15:41:41 keitarou pluto[5598]: | 00 03 d0 90 80 04 00 02 80 05 00 02 00 00 00 28
Mar 14 15:41:41 keitarou pluto[5598]: | 02 02 00 00 80 01 00 01 00 02 00 04 00 00 0e 10
Mar 14 15:41:41 keitarou pluto[5598]: | 80 01 00 02 00 02 00 04 00 03 d0 90 80 04 00 02
Mar 14 15:41:41 keitarou pluto[5598]: | 80 05 00 01 05 00 00 18 b4 6d 7f 1e b9 9f c0 63
Mar 14 15:41:41 keitarou pluto[5598]: | b7 f1 e4 36 d9 64 db 8a 7e 58 80 f7 05 00 00 0c
Mar 14 15:41:41 keitarou pluto[5598]: | 01 11 06 a5 0a 14 1e c6 00 00 00 0c 01 11 06 a5
Mar 14 15:41:41 keitarou pluto[5598]: | 0a 14 1e 01 00 00 00 00
Mar 14 15:41:41 keitarou pluto[5598]: | next IV: 30 a1 7f 02 df e0 2b 35
Mar 14 15:41:41 keitarou pluto[5598]: | ***parse ISAKMP Hash Payload:
Mar 14 15:41:41 keitarou pluto[5598]: | next payload type: ISAKMP_NEXT_SA
Mar 14 15:41:41 keitarou pluto[5598]: | length: 24
Mar 14 15:41:41 keitarou pluto[5598]: | ***parse ISAKMP Security Association Payload:
Mar 14 15:41:41 keitarou pluto[5598]: | next payload type: ISAKMP_NEXT_NONCE
Mar 14 15:41:41 keitarou pluto[5598]: | length: 1196
Mar 14 15:41:41 keitarou pluto[5598]: | DOI: ISAKMP_DOI_IPSEC
Mar 14 15:41:41 keitarou pluto[5598]: | ***parse ISAKMP Nonce Payload:
Mar 14 15:41:41 keitarou pluto[5598]: | next payload type: ISAKMP_NEXT_ID
Mar 14 15:41:41 keitarou pluto[5598]: | length: 24
Mar 14 15:41:41 keitarou pluto[5598]: | ***parse ISAKMP Identification Payload (IPsec DOI):
Mar 14 15:41:41 keitarou pluto[5598]: | next payload type: ISAKMP_NEXT_ID
Mar 14 15:41:41 keitarou pluto[5598]: | length: 12
Mar 14 15:41:41 keitarou pluto[5598]: | ID type: ID_IPV4_ADDR
Mar 14 15:41:41 keitarou pluto[5598]: | Protocol ID: 17
Mar 14 15:41:41 keitarou pluto[5598]: | port: 1701
Mar 14 15:41:41 keitarou pluto[5598]: | ***parse ISAKMP Identification Payload (IPsec DOI):
Mar 14 15:41:41 keitarou pluto[5598]: | next payload type: ISAKMP_NEXT_NONE
Mar 14 15:41:41 keitarou pluto[5598]: | length: 12
Mar 14 15:41:41 keitarou pluto[5598]: | ID type: ID_IPV4_ADDR
Mar 14 15:41:41 keitarou pluto[5598]: | Protocol ID: 17
Mar 14 15:41:41 keitarou pluto[5598]: | port: 1701
Mar 14 15:41:41 keitarou pluto[5598]: | removing 4 bytes of padding
Mar 14 15:41:41 keitarou pluto[5598]: | HASH(1) computed:
Mar 14 15:41:41 keitarou pluto[5598]: | e0 b5 5a e1 6f c3 cf e4 72 e1 9b 9e 1c e2 a5 bb
Mar 14 15:41:41 keitarou pluto[5598]: | cc 38 30 0a
Mar 14 15:41:41 keitarou pluto[5598]: | peer client is 10.20.30.198
Mar 14 15:41:41 keitarou pluto[5598]: | peer client protocol/port is 17/1701
Mar 14 15:41:41 keitarou pluto[5598]: | our client is 10.20.30.1
Mar 14 15:41:41 keitarou pluto[5598]: | our client protocol/port is 17/1701
Mar 14 15:41:41 keitarou pluto[5598]: | find_client_connection starting with wlan
Mar 14 15:41:41 keitarou pluto[5598]: | looking for 10.20.30.1/32:17/1701 -> 10.20.30.198/32:17/1701
Mar 14 15:41:41 keitarou pluto[5598]: | concrete checking against sr#0 10.20.30.1/32 -> 10.20.30.198/32
Mar 14 15:41:41 keitarou pluto[5598]: | match_id a=C=AU, ST=New South Wales, O=Bubblesworth Pty Ltd, CN=mutsumi.queanbeyan.bubblesworth.net, E=Paul.Hampson at Anu.edu.au b=C=AU, ST=New South Wales, O=Bubblesworth Pty Ltd, CN=mutsumi.queanbeyan.bubblesworth.net, E=Paul.Hampson at Anu.edu.au
Mar 14 15:41:41 keitarou pluto[5598]: | match_id called with a=C=AU, ST=New South Wales, O=Bubblesworth Pty Ltd, CN=mutsumi.queanbeyan.bubblesworth.net, E=Paul.Hampson at Anu.edu.au b=C=AU, ST=New South Wales, O=Bubblesworth Pty Ltd, CN=mutsumi.queanbeyan.bubblesworth.net, E=Paul.Hampson at Anu.edu.au
Mar 14 15:41:41 keitarou pluto[5598]: | trusted_ca called with a=(empty) b=(empty)
Mar 14 15:41:41 keitarou pluto[5598]: | fc_try trying wlan:10.20.30.1/32:17/1701 -> 10.20.30.198/32:17/1701 vs wlan:10.20.30.1/32:17/1701 -> 10.20.30.198/32:17/1701
Mar 14 15:41:41 keitarou pluto[5598]: | fc_try concluding with wlan [128]
Mar 14 15:41:41 keitarou pluto[5598]: | fc_try wlan gives wlan
Mar 14 15:41:41 keitarou pluto[5598]: | concluding with d = wlan
Mar 14 15:41:41 keitarou pluto[5598]: | duplicating state object #1
Mar 14 15:41:41 keitarou pluto[5598]: | creating state object #2 at 0x8103b00
Mar 14 15:41:41 keitarou pluto[5598]: | ICOOKIE: 43 8d 40 2d 25 9c 19 72
Mar 14 15:41:41 keitarou pluto[5598]: | RCOOKIE: ea b5 9b 10 d6 9f 6d 14
Mar 14 15:41:41 keitarou pluto[5598]: | peer: 0a 14 1e c6
Mar 14 15:41:41 keitarou pluto[5598]: | state hash entry 1
Mar 14 15:41:41 keitarou pluto[5598]: | inserting event EVENT_SO_DISCARD, timeout in 0 seconds for #2
Mar 14 15:41:41 keitarou pluto[5598]: | ****parse IPsec DOI SIT:
Mar 14 15:41:41 keitarou pluto[5598]: | IPsec DOI SIT: SIT_IDENTITY_ONLY
Mar 14 15:41:41 keitarou pluto[5598]: | ****parse ISAKMP Proposal Payload:
Mar 14 15:41:41 keitarou pluto[5598]: | next payload type: ISAKMP_NEXT_P
Mar 14 15:41:41 keitarou pluto[5598]: | length: 92
Mar 14 15:41:41 keitarou pluto[5598]: | proposal number: 1
Mar 14 15:41:41 keitarou pluto[5598]: | protocol ID: PROTO_IPSEC_ESP
Mar 14 15:41:41 keitarou pluto[5598]: | SPI size: 4
Mar 14 15:41:41 keitarou pluto[5598]: | number of transforms: 2
Mar 14 15:41:41 keitarou pluto[5598]: | parsing 4 raw bytes of ISAKMP Proposal Payload into SPI
Mar 14 15:41:41 keitarou pluto[5598]: | SPI 66 73 16 34
Mar 14 15:41:41 keitarou pluto[5598]: | ****parse ISAKMP Proposal Payload:
Mar 14 15:41:41 keitarou pluto[5598]: | next payload type: ISAKMP_NEXT_P
Mar 14 15:41:41 keitarou pluto[5598]: | length: 52
Mar 14 15:41:41 keitarou pluto[5598]: | proposal number: 2
Mar 14 15:41:41 keitarou pluto[5598]: | protocol ID: PROTO_IPSEC_AH
Mar 14 15:41:41 keitarou pluto[5598]: | SPI size: 4
Mar 14 15:41:41 keitarou pluto[5598]: | number of transforms: 1
Mar 14 15:41:41 keitarou pluto[5598]: | *****parse ISAKMP Transform Payload (ESP):
Mar 14 15:41:41 keitarou pluto[5598]: | next payload type: ISAKMP_NEXT_T
Mar 14 15:41:41 keitarou pluto[5598]: | length: 40
Mar 14 15:41:41 keitarou pluto[5598]: | transform number: 1
Mar 14 15:41:41 keitarou pluto[5598]: | transform ID: ESP_3DES
Mar 14 15:41:41 keitarou pluto[5598]: | ******parse ISAKMP IPsec DOI attribute:
Mar 14 15:41:41 keitarou pluto[5598]: | af+type: SA_LIFE_TYPE
Mar 14 15:41:42 keitarou pluto[5598]: | length/value: 1
Mar 14 15:41:42 keitarou pluto[5598]: | [1 is SA_LIFE_TYPE_SECONDS]
Mar 14 15:41:42 keitarou pluto[5598]: | ******parse ISAKMP IPsec DOI attribute:
Mar 14 15:41:42 keitarou pluto[5598]: | af+type: SA_LIFE_DURATION (variable length)
Mar 14 15:41:42 keitarou pluto[5598]: | length/value: 4
Mar 14 15:41:42 keitarou pluto[5598]: | long duration: 3600
Mar 14 15:41:42 keitarou pluto[5598]: | ******parse ISAKMP IPsec DOI attribute:
Mar 14 15:41:42 keitarou pluto[5598]: | af+type: SA_LIFE_TYPE
Mar 14 15:41:42 keitarou pluto[5598]: | length/value: 2
Mar 14 15:41:42 keitarou pluto[5598]: | [2 is SA_LIFE_TYPE_KBYTES]
Mar 14 15:41:42 keitarou pluto[5598]: | ******parse ISAKMP IPsec DOI attribute:
Mar 14 15:41:42 keitarou pluto[5598]: | af+type: SA_LIFE_DURATION (variable length)
Mar 14 15:41:42 keitarou pluto[5598]: | length/value: 4
Mar 14 15:41:42 keitarou pluto[5598]: | long duration: 250000
Mar 14 15:41:42 keitarou pluto[5598]: | ******parse ISAKMP IPsec DOI attribute:
Mar 14 15:41:42 keitarou pluto[5598]: | af+type: ENCAPSULATION_MODE
Mar 14 15:41:42 keitarou pluto[5598]: | length/value: 2
Mar 14 15:41:42 keitarou pluto[5598]: | [2 is ENCAPSULATION_MODE_TRANSPORT]
Mar 14 15:41:42 keitarou pluto[5598]: | ******parse ISAKMP IPsec DOI attribute:
Mar 14 15:41:42 keitarou pluto[5598]: | af+type: AUTH_ALGORITHM
Mar 14 15:41:42 keitarou pluto[5598]: | length/value: 1
Mar 14 15:41:42 keitarou pluto[5598]: | [1 is AUTH_ALGORITHM_HMAC_MD5]
Mar 14 15:41:42 keitarou pluto[5598]: | 0: w->pcw_dead: 0 w->pcw_work: 0 cnt: 1
Mar 14 15:41:42 keitarou pluto[5598]: | asking helper 0 to do build_nonce op on seq: 2
Mar 14 15:41:42 keitarou pluto[5598]: | inserting event EVENT_CRYPTO_FAILED, timeout in 300 seconds for #2
Mar 14 15:41:42 keitarou pluto[5598]: | complete state transition with STF_SUSPEND
Mar 14 15:41:42 keitarou pluto[5598]: | next event EVENT_CRYPTO_FAILED in 300 seconds for #2
Mar 14 15:41:42 keitarou pluto[5598]: |
Mar 14 15:41:42 keitarou pluto[5598]: | *received 1300 bytes from 10.20.30.198:500 on wlan0
Mar 14 15:41:42 keitarou pluto[5598]: | 43 8d 40 2d 25 9c 19 72 ea b5 9b 10 d6 9f 6d 14
Mar 14 15:41:42 keitarou pluto[5598]: | 08 10 20 01 0a b1 70 b5 00 00 05 14 23 7a 51 92
Mar 14 15:41:42 keitarou pluto[5598]: | 17 06 85 94 3f 4f 3c 0c 15 35 dc 97 bb ae a4 31
Mar 14 15:41:42 keitarou pluto[5598]: | 58 30 54 07 14 14 02 11 92 eb 90 f3 f3 d2 b7 7e
Mar 14 15:41:42 keitarou pluto[5598]: | a2 ee d8 74 b4 ec 33 9a 06 53 6f 1f 3c 8e 99 06
Mar 14 15:41:42 keitarou pluto[5598]: | ef e4 55 df 29 5e 2b 5c da f8 11 52 1d 2b bc 7f
Mar 14 15:41:42 keitarou pluto[5598]: | 82 16 54 43 6f a7 ce a3 45 56 6c ad f6 d1 1e 67
Mar 14 15:41:42 keitarou pluto[5598]: | f3 d7 16 2b 12 be 48 80 73 51 f7 d7 04 4f 05 cb
Mar 14 15:41:42 keitarou pluto[5598]: | fd 3a e4 d5 bc 5e 5b 26 6d 92 9f 96 a5 b8 f8 21
Mar 14 15:41:42 keitarou pluto[5598]: | c4 96 e4 d8 40 cb 5f ba 18 28 a7 3a 03 1f 01 6b
Mar 14 15:41:42 keitarou pluto[5598]: | 5c 82 04 52 ee 5e 10 de ab 3c 72 27 97 56 84 0d
Mar 14 15:41:42 keitarou pluto[5598]: | ee a5 6a 3a 28 a2 13 53 09 6b 3d ed ec 08 26 ad
Mar 14 15:41:42 keitarou pluto[5598]: | a6 fd a9 e1 f8 53 55 a5 c4 d2 15 e9 c2 85 8e d6
Mar 14 15:41:42 keitarou pluto[5598]: | 52 5f a5 e3 86 3d cd 04 57 72 f5 40 8b ed c0 12
Mar 14 15:41:42 keitarou pluto[5598]: | c4 e3 af f9 5e a1 5f 8e 36 21 fe d1 ae a1 f6 bb
Mar 14 15:41:42 keitarou pluto[5598]: | 56 df 54 b5 75 81 fe 00 2c 75 93 fe 8d 45 4b 7e
Mar 14 15:41:42 keitarou pluto[5598]: | a6 36 88 69 7b 6c c9 d2 69 95 01 6a 20 84 07 2c
Mar 14 15:41:42 keitarou pluto[5598]: | 6f 5d 3e be 19 8d 70 af 2e 30 6c f1 86 a5 59 16
Mar 14 15:41:42 keitarou pluto[5598]: | fb a2 dc f3 80 f5 10 1a 27 bb 9b 5c d6 d7 21 25
Mar 14 15:41:42 keitarou pluto[5598]: | 8d 7f a3 2d c8 e2 a5 3c d8 6f 5a a4 a4 73 8c 84
Mar 14 15:41:42 keitarou pluto[5598]: | 6c f6 47 ae cc 8d 4f 25 7c 8c 49 aa cf a6 3f 5b
Mar 14 15:41:42 keitarou pluto[5598]: | 50 93 34 2b 4f 39 c2 43 f6 fd a0 74 6c 3a d0 c2
Mar 14 15:41:42 keitarou pluto[5598]: | 6b cc 5b cf 24 33 23 fb 80 0e 21 aa a0 9d 0f 9e
Mar 14 15:41:42 keitarou pluto[5598]: | f9 7c b1 3b 2c b9 a0 84 03 be 73 33 e4 5e bc b7
Mar 14 15:41:42 keitarou pluto[5598]: | 12 f7 bd 92 82 36 32 35 39 2f 1a a2 3b 7a bd e2
Mar 14 15:41:42 keitarou pluto[5598]: | 9b 38 80 ea ce ab f5 cf 89 ba 25 c8 d0 f6 a1 66
Mar 14 15:41:42 keitarou pluto[5598]: | 58 b9 fd 10 20 74 8e 6a ad 24 81 8a f1 71 22 93
Mar 14 15:41:42 keitarou pluto[5598]: | 72 73 5a f8 c0 53 06 79 5f df f9 31 0c 33 80 cc
Mar 14 15:41:42 keitarou pluto[5598]: | 9d 02 37 c4 79 96 15 42 1b f4 5f 0e 18 48 d2 74
Mar 14 15:41:42 keitarou pluto[5598]: | 29 1e e6 50 e9 76 fc d1 7f 46 fe 7f a4 05 01 ff
Mar 14 15:41:42 keitarou pluto[5598]: | 24 f2 e1 22 ab bc c6 ac ac c9 87 9b 0a c4 f3 2b
Mar 14 15:41:42 keitarou pluto[5598]: | 6d 03 2f 03 e3 ba f1 1b 6a 7b ec 74 45 95 6a e6
Mar 14 15:41:42 keitarou pluto[5598]: | 1f 72 8a aa b3 66 21 0f cd d6 78 b0 a2 5b 0e ec
Mar 14 15:41:42 keitarou pluto[5598]: | c8 4c 21 fd 18 32 cb 4c 0c 53 20 cb b4 7d 55 0b
Mar 14 15:41:42 keitarou pluto[5598]: | 2d 01 61 d3 ed c8 f7 49 13 f8 de 7d 95 49 b9 66
Mar 14 15:41:42 keitarou pluto[5598]: | 66 9c a4 bf 1f 17 fc 60 22 8b 92 84 85 59 20 7c
Mar 14 15:41:42 keitarou pluto[5598]: | e6 82 50 2a d4 9b e4 d2 17 3e aa 0f 52 26 42 05
Mar 14 15:41:42 keitarou pluto[5598]: | 88 c6 77 e1 6c 26 2d 3f 62 73 30 75 40 be b2 67
Mar 14 15:41:42 keitarou pluto[5598]: | 76 cb 3f 56 9f dd 5d 06 66 88 bb f9 65 e8 d0 5e
Mar 14 15:41:42 keitarou pluto[5598]: | 05 c7 01 01 c3 ce 7f f6 e4 38 4c 57 47 e2 c0 c7
Mar 14 15:41:42 keitarou pluto[5598]: | 85 4a 07 b9 93 32 b1 74 83 e5 0a 44 85 a5 50 1e
Mar 14 15:41:42 keitarou pluto[5598]: | 1a 64 ed 55 bb e8 50 c8 dc 13 35 e9 1b 53 b9 0c
Mar 14 15:41:42 keitarou pluto[5598]: | f4 ec 53 b8 17 ac 55 e8 3d f2 44 aa 9e 60 be db
Mar 14 15:41:42 keitarou pluto[5598]: | 10 d5 77 c1 1e 73 c5 9b 98 bc a0 4e 14 08 be 39
Mar 14 15:41:42 keitarou pluto[5598]: | 53 c2 96 7e af 63 c5 3e c0 60 dd b1 fe 18 4c 08
Mar 14 15:41:42 keitarou pluto[5598]: | 8c e5 b9 da 65 58 09 3c 69 97 29 54 87 d8 36 79
Mar 14 15:41:42 keitarou pluto[5598]: | 85 3e dc 29 e4 af 9f 1f c1 7f 77 e4 90 b0 c9 48
Mar 14 15:41:42 keitarou pluto[5598]: | 1f 41 53 1c e2 d1 74 e2 70 c9 2a 07 60 b0 78 90
Mar 14 15:41:42 keitarou pluto[5598]: | d6 7c be 89 73 01 ea f2 63 fb 8a e2 55 ed 93 d7
Mar 14 15:41:42 keitarou pluto[5598]: | 8d 11 49 1e bc 86 2d 1e 97 64 05 77 b7 eb da 1a
Mar 14 15:41:42 keitarou pluto[5598]: | cc e9 9e cd fe d7 e4 5d 23 a1 e7 14 fd f1 2f 70
Mar 14 15:41:42 keitarou pluto[5598]: | 29 c0 88 e7 c9 65 fb d8 4b 1b 2c 54 6a 5a 00 1b
Mar 14 15:41:42 keitarou pluto[5598]: | f1 ab 76 67 78 db df ff 0c b0 9b 71 3e f8 b4 5c
Mar 14 15:41:42 keitarou pluto[5598]: | 47 5f 41 50 45 04 0d dc d0 5e 31 01 08 f3 85 e2
Mar 14 15:41:42 keitarou pluto[5598]: | d1 6c 33 d6 d6 27 9a bd 07 bb 39 28 9c 27 72 1f
Mar 14 15:41:42 keitarou pluto[5598]: | f9 a6 cd 9d 14 bb 99 77 8c 79 c9 69 e9 3f a7 14
Mar 14 15:41:42 keitarou pluto[5598]: | 4d aa ae be a2 6a 54 fa 50 9a 70 84 38 a1 04 a9
Mar 14 15:41:42 keitarou pluto[5598]: | ed e3 70 ed 3f 87 0c 35 5b 75 cf 84 5a 39 62 60
Mar 14 15:41:42 keitarou pluto[5598]: | de 95 98 91 05 a9 dd 7a 5c 5c 9f 5b e1 7e 13 a4
Mar 14 15:41:42 keitarou pluto[5598]: | 13 7e 33 73 25 da 54 dd 04 24 3a e5 72 9e 5c 25
Mar 14 15:41:42 keitarou pluto[5598]: | c5 12 13 48 2e 07 16 92 9c 12 38 87 dc 71 28 fb
Mar 14 15:41:42 keitarou pluto[5598]: | 6e a0 4f 1e 40 4c 29 75 5a 81 8f 06 7e c8 db 38
Mar 14 15:41:42 keitarou pluto[5598]: | 29 84 f9 7a 9c f9 11 b7 4f e4 1d 8f 55 fe ea a0
Mar 14 15:41:42 keitarou pluto[5598]: | cd 93 40 da 9b ee a4 eb 11 fe 5c 27 dd 45 aa 2a
Mar 14 15:41:42 keitarou pluto[5598]: | 96 06 e9 ac c1 02 2b bf 15 85 00 53 53 97 63 a3
Mar 14 15:41:42 keitarou pluto[5598]: | d1 47 ad 57 a5 ab 97 ff 82 99 94 cf 29 2a a1 38
Mar 14 15:41:42 keitarou pluto[5598]: | b7 35 2e 9e b7 ad 2c 49 7f ce 85 ed 26 5b d4 d2
Mar 14 15:41:42 keitarou pluto[5598]: | 32 3c 36 cc 1a 20 01 12 17 49 fe 0c 83 6b ef ef
Mar 14 15:41:42 keitarou pluto[5598]: | 40 5d f3 07 8a e3 5a ee 4b 80 e7 30 30 23 66 72
Mar 14 15:41:42 keitarou pluto[5598]: | 46 41 1c 81 28 9a bc 5d cf e2 25 eb 43 4d 1a 40
Mar 14 15:41:42 keitarou pluto[5598]: | bd 8e 50 97 93 21 24 9a 43 7c 56 67 33 1c db 77
Mar 14 15:41:42 keitarou pluto[5598]: | 80 48 6c 4f 29 7d 7f 65 60 7e ff 0b a9 d8 b7 4d
Mar 14 15:41:42 keitarou pluto[5598]: | 70 e8 df 63 b1 69 de 62 3d 84 53 fc 05 f0 ed 89
Mar 14 15:41:42 keitarou pluto[5598]: | 74 8a 16 7f b7 7a 78 c2 20 64 92 02 30 c6 be f2
Mar 14 15:41:42 keitarou pluto[5598]: | 69 ac 85 82 31 a8 51 dc c8 77 cc 0d ca f5 e0 05
Mar 14 15:41:42 keitarou pluto[5598]: | 30 23 75 4a 2a f2 f2 ec cb cf 5a ab 3d 25 82 ff
Mar 14 15:41:42 keitarou pluto[5598]: | ce a0 f8 a1 c6 d3 31 6c 44 e4 5e 5e e4 b3 26 ce
Mar 14 15:41:42 keitarou pluto[5598]: | 23 6f 18 c3 65 82 e0 3d 1e 74 c8 a9 b9 0d ad a4
Mar 14 15:41:42 keitarou pluto[5598]: | b3 46 1d 6d 4e 1d 32 0b 90 76 b5 1f 82 10 a8 23
Mar 14 15:41:42 keitarou pluto[5598]: | 1b 2a 86 44 eb cc a5 e8 1e 0f 9a d4 f6 7b 03 21
Mar 14 15:41:42 keitarou pluto[5598]: | 09 f6 cb 9d 4b 8a 2f a5 1b 2a 73 e3 30 a1 7f 02
Mar 14 15:41:42 keitarou pluto[5598]: | df e0 2b 35
Mar 14 15:41:42 keitarou pluto[5598]: | **parse ISAKMP Message:
Mar 14 15:41:42 keitarou pluto[5598]: | initiator cookie:
Mar 14 15:41:42 keitarou pluto[5598]: | 43 8d 40 2d 25 9c 19 72
Mar 14 15:41:42 keitarou pluto[5598]: | responder cookie:
Mar 14 15:41:42 keitarou pluto[5598]: | ea b5 9b 10 d6 9f 6d 14
Mar 14 15:41:42 keitarou pluto[5598]: | next payload type: ISAKMP_NEXT_HASH
Mar 14 15:41:42 keitarou pluto[5598]: | ISAKMP version: ISAKMP Version 1.0
Mar 14 15:41:42 keitarou pluto[5598]: | exchange type: ISAKMP_XCHG_QUICK
Mar 14 15:41:42 keitarou pluto[5598]: | flags: ISAKMP_FLAG_ENCRYPTION
Mar 14 15:41:42 keitarou pluto[5598]: | message ID: 0a b1 70 b5
Mar 14 15:41:42 keitarou pluto[5598]: | length: 1300
Mar 14 15:41:42 keitarou pluto[5598]: | ICOOKIE: 43 8d 40 2d 25 9c 19 72
Mar 14 15:41:42 keitarou pluto[5598]: | RCOOKIE: ea b5 9b 10 d6 9f 6d 14
Mar 14 15:41:42 keitarou pluto[5598]: | peer: 0a 14 1e c6
Mar 14 15:41:42 keitarou pluto[5598]: | state hash entry 1
Mar 14 15:41:42 keitarou pluto[5598]: | peer and cookies match on #2, provided msgid 0ab170b5 vs 0ab170b5
Mar 14 15:41:42 keitarou pluto[5598]: | state object #2 found, in 0??
Mar 14 15:41:42 keitarou pluto[5598]: "wlan"[2] 10.20.30.198 #2: ASSERTION FAILED at demux.c:1799: STATE_IKE_FLOOR <= from_state && from_state <= STATE_IKE_ROOF
Mar 14 15:41:42 keitarou pluto[5598]: "wlan"[2] 10.20.30.198 #2: interface eth0/eth0 2001:388:c00f::1
Mar 14 15:41:42 keitarou pluto[5598]: "wlan"[2] 10.20.30.198 #2: interface vmnet3/vmnet3 2001:388:c00f:2::1
Mar 14 15:41:42 keitarou pluto[5598]: "wlan"[2] 10.20.30.198 #2: interface tap0/tap0 2002:dcf0:c3bf:1::1
Mar 14 15:41:42 keitarou pluto[5598]: "wlan"[2] 10.20.30.198 #2: interface tun6to4_ppp0/tun6to4_ppp0 2002:dcf0:c3bf:f000::1
Mar 14 15:41:42 keitarou pluto[5598]: "wlan"[2] 10.20.30.198 #2: interface tap0/tap0 2002:dcf0:c125:1::1
Mar 14 15:41:42 keitarou pluto[5598]: "wlan"[2] 10.20.30.198 #2: interface tap0/tap0 2002:dcf0:c0f9:1::1
Mar 14 15:41:42 keitarou pluto[5598]: "wlan"[2] 10.20.30.198 #2: interface tap0/tap0 2001:388:c00f:1::1
Mar 14 15:41:42 keitarou pluto[5598]: "wlan"[2] 10.20.30.198 #2: interface lo/lo ::1
Mar 14 15:41:42 keitarou pluto[5598]: "wlan"[2] 10.20.30.198 #2: interface tun6to4_ppp0/tun6to4_ppp0 ::dcf0:c3bf
Mar 14 15:41:43 keitarou pluto[5598]: "wlan"[2] 10.20.30.198 #2: interface lo/lo 127.0.0.1
Mar 14 15:41:43 keitarou pluto[5598]: "wlan"[2] 10.20.30.198 #2: interface eth0/eth0 192.168.0.1
Mar 14 15:41:43 keitarou pluto[5598]: "wlan"[2] 10.20.30.198 #2: interface wlan0/wlan0 10.20.30.1
Mar 14 15:41:43 keitarou pluto[5598]: "wlan"[2] 10.20.30.198 #2: interface tap0/tap0 192.168.1.1
Mar 14 15:41:43 keitarou pluto[5598]: "wlan"[2] 10.20.30.198 #2: interface ppp0/ppp0 220.240.195.191
Mar 14 15:41:43 keitarou pluto[5598]: "wlan"[2] 10.20.30.198 #2: interface vmnet3/vmnet3 192.168.2.1
Mar 14 15:41:43 keitarou pluto[5598]: "wlan"[2] 10.20.30.198 #2: %myid = (none)
Mar 14 15:41:43 keitarou pluto[5598]: "wlan"[2] 10.20.30.198 #2: debug raw+crypt+parsing+emitting+control+lifecycle+klips+dns+oppo+controlmore+pfkey+nattraversal+x509
Mar 14 15:41:43 keitarou pluto[5598]: "wlan"[2] 10.20.30.198 #2:
Mar 14 15:41:43 keitarou pluto[5598]: "wlan"[2] 10.20.30.198 #2: algorithm ESP encrypt: id=2, name=ESP_DES, ivlen=8, keysizemin=64, keysizemax=64
Mar 14 15:41:43 keitarou pluto[5598]: "wlan"[2] 10.20.30.198 #2: algorithm ESP encrypt: id=3, name=ESP_3DES, ivlen=8, keysizemin=192, keysizemax=192
Mar 14 15:41:43 keitarou pluto[5598]: "wlan"[2] 10.20.30.198 #2: algorithm ESP encrypt: id=7, name=ESP_BLOWFISH, ivlen=8, keysizemin=40, keysizemax=448
Mar 14 15:41:43 keitarou pluto[5598]: "wlan"[2] 10.20.30.198 #2: algorithm ESP encrypt: id=11, name=ESP_NULL, ivlen=0, keysizemin=0, keysizemax=0
Mar 14 15:41:43 keitarou pluto[5598]: "wlan"[2] 10.20.30.198 #2: algorithm ESP encrypt: id=12, name=ESP_AES, ivlen=8, keysizemin=128, keysizemax=256
Mar 14 15:41:43 keitarou pluto[5598]: "wlan"[2] 10.20.30.198 #2: algorithm ESP encrypt: id=252, name=ESP_SERPENT, ivlen=8, keysizemin=128, keysizemax=256
Mar 14 15:41:43 keitarou pluto[5598]: "wlan"[2] 10.20.30.198 #2: algorithm ESP encrypt: id=253, name=ESP_TWOFISH, ivlen=8, keysizemin=128, keysizemax=256
Mar 14 15:41:43 keitarou pluto[5598]: "wlan"[2] 10.20.30.198 #2: algorithm ESP auth attr: id=1, name=AUTH_ALGORITHM_HMAC_MD5, keysizemin=128, keysizemax=128
Mar 14 15:41:43 keitarou pluto[5598]: "wlan"[2] 10.20.30.198 #2: algorithm ESP auth attr: id=2, name=AUTH_ALGORITHM_HMAC_SHA1, keysizemin=160, keysizemax=160
Mar 14 15:41:43 keitarou pluto[5598]: "wlan"[2] 10.20.30.198 #2: algorithm ESP auth attr: id=5, name=AUTH_ALGORITHM_HMAC_SHA2_256, keysizemin=256, keysizemax=256
Mar 14 15:41:43 keitarou pluto[5598]: "wlan"[2] 10.20.30.198 #2: algorithm ESP auth attr: id=251, name=(null), keysizemin=0, keysizemax=0
Mar 14 15:41:43 keitarou pluto[5598]: "wlan"[2] 10.20.30.198 #2:
Mar 14 15:41:43 keitarou pluto[5598]: "wlan"[2] 10.20.30.198 #2: algorithm IKE encrypt: id=7, name=OAKLEY_AES_CBC, blocksize=16, keydeflen=128
Mar 14 15:41:43 keitarou pluto[5598]: "wlan"[2] 10.20.30.198 #2: algorithm IKE encrypt: id=5, name=OAKLEY_3DES_CBC, blocksize=8, keydeflen=192
Mar 14 15:41:43 keitarou pluto[5598]: "wlan"[2] 10.20.30.198 #2: algorithm IKE hash: id=2, name=OAKLEY_SHA1, hashsize=20
Mar 14 15:41:43 keitarou pluto[5598]: "wlan"[2] 10.20.30.198 #2: algorithm IKE hash: id=1, name=OAKLEY_MD5, hashsize=16
Mar 14 15:41:43 keitarou pluto[5598]: "wlan"[2] 10.20.30.198 #2: algorithm IKE dh group: id=2, name=OAKLEY_GROUP_MODP1024, bits=1024
Mar 14 15:41:43 keitarou pluto[5598]: "wlan"[2] 10.20.30.198 #2: algorithm IKE dh group: id=5, name=OAKLEY_GROUP_MODP1536, bits=1536
Mar 14 15:41:43 keitarou pluto[5598]: "wlan"[2] 10.20.30.198 #2: algorithm IKE dh group: id=14, name=OAKLEY_GROUP_MODP2048, bits=2048
Mar 14 15:41:43 keitarou pluto[5598]: "wlan"[2] 10.20.30.198 #2: algorithm IKE dh group: id=15, name=OAKLEY_GROUP_MODP3072, bits=3072
Mar 14 15:41:43 keitarou pluto[5598]: "wlan"[2] 10.20.30.198 #2: algorithm IKE dh group: id=16, name=OAKLEY_GROUP_MODP4096, bits=4096
Mar 14 15:41:43 keitarou pluto[5598]: "wlan"[2] 10.20.30.198 #2: algorithm IKE dh group: id=17, name=OAKLEY_GROUP_MODP6144, bits=6144
Mar 14 15:41:43 keitarou pluto[5598]: "wlan"[2] 10.20.30.198 #2: algorithm IKE dh group: id=18, name=OAKLEY_GROUP_MODP8192, bits=8192
Mar 14 15:41:43 keitarou pluto[5598]: "wlan"[2] 10.20.30.198 #2:
Mar 14 15:41:43 keitarou pluto[5598]: "wlan"[2] 10.20.30.198 #2: stats db_ops.c: {curr_cnt, total_cnt, maxsz} :context={0,0,0} trans={0,0,0} attrs={0,0,0}
Mar 14 15:41:43 keitarou pluto[5598]: "wlan"[2] 10.20.30.198 #2:
Mar 14 15:41:43 keitarou pluto[5598]: "wlan"[2] 10.20.30.198 #2: "wlan": 10.20.30.1[C=AU, ST=New South Wales, O=Bubblesworth Pty Ltd, CN=keitarou.bubblesworth.net, E=Paul.Hampson at anu.edu.au]:17/1701...%any:17/1701; unrouted; eroute owner: #0
Mar 14 15:41:43 keitarou pluto[5598]: "wlan"[2] 10.20.30.198 #2: "wlan": srcip=unset; dstip=unset
Mar 14 15:41:43 keitarou pluto[5598]: "wlan"[2] 10.20.30.198 #2: "wlan": CAs: 'CN=Bubblesworth Pty Ltd CA, C=AU, ST=New South Wales, L=Queanbeyan, O=Bubblesworth Pty Ltd, E=Paul.Hampson at PObox.Com'...'%any'
Mar 14 15:41:43 keitarou pluto[5598]: "wlan"[2] 10.20.30.198 #2: "wlan": ike_life: 3600s; ipsec_life: 28800s; rekey_margin: 540s; rekey_fuzz: 100%; keyingtries: 0
Mar 14 15:41:43 keitarou pluto[5598]: "wlan"[2] 10.20.30.198 #2: "wlan": policy: RSASIG+ENCRYPT+PFS; prio: 32,32; interface: wlan0;
Mar 14 15:41:43 keitarou pluto[5598]: "wlan"[2] 10.20.30.198 #2: "wlan": newest ISAKMP SA: #0; newest IPsec SA: #0;
Mar 14 15:41:43 keitarou pluto[5598]: "wlan"[2] 10.20.30.198 #2: "wlan"[2]: 10.20.30.1[C=AU, ST=New South Wales, O=Bubblesworth Pty Ltd, CN=keitarou.bubblesworth.net, E=Paul.Hampson at anu.edu.au]:17/1701...10.20.30.198[C=AU, ST=New South Wales, O=Bubblesworth Pty Ltd, CN=mutsumi.queanbeyan.bubblesworth.net, E=Paul.Hampson at Anu.edu.au]:17/1701; unrouted; eroute owner: #0
Mar 14 15:41:43 keitarou pluto[5598]: "wlan"[2] 10.20.30.198 #2: "wlan"[2]: srcip=unset; dstip=unset
Mar 14 15:41:43 keitarou pluto[5598]: "wlan"[2] 10.20.30.198 #2: "wlan"[2]: CAs: 'CN=Bubblesworth Pty Ltd CA, C=AU, ST=New South Wales, L=Queanbeyan, O=Bubblesworth Pty Ltd, E=Paul.Hampson at PObox.Com'...'%any'
Mar 14 15:41:43 keitarou pluto[5598]: "wlan"[2] 10.20.30.198 #2: "wlan"[2]: ike_life: 3600s; ipsec_life: 28800s; rekey_margin: 540s; rekey_fuzz: 100%; keyingtries: 0
Mar 14 15:41:43 keitarou pluto[5598]: "wlan"[2] 10.20.30.198 #2: "wlan"[2]: policy: RSASIG+ENCRYPT+PFS; prio: 32,32; interface: wlan0;
Mar 14 15:41:43 keitarou pluto[5598]: "wlan"[2] 10.20.30.198 #2: "wlan"[2]: newest ISAKMP SA: #1; newest IPsec SA: #0;
Mar 14 15:41:43 keitarou pluto[5598]: "wlan"[2] 10.20.30.198 #2: "wlan"[2]: IKE algorithm newest: 3DES_CBC_192-SHA1-MODP2048
Mar 14 15:41:43 keitarou pluto[5598]: "wlan"[2] 10.20.30.198 #2:
Mar 14 15:41:43 keitarou pluto[5603]: ! helper -1 doing build_nonce op id: 2
Mar 14 15:41:43 keitarou pluto[5603]: ! Generated nonce:
Mar 14 15:41:43 keitarou pluto[5603]: ! 96 57 41 59 31 e8 8c 56 a2 e5 59 36 76 fd d9 2a
I hope that sufficient information. If not, I still have the logs,
and the core, and I can recreate a new one whenever I wish.
(If I disable IPSec in Win2K, the L2TP works fine, BTW. ^_^)
--
Paul "TBBle" Hampson, on an alternate email client.
More information about the Users
mailing list