[Openswan Users] 1.0.8, strange problem with pings

[Dmitry Melekhov]

Dmitry Melekhov wrote:

>
> If I ping from different ip I get:
>
>
>
> May 20 03:44:47 vpn_22_203 kernel: klips_debug:   IP: ihl:20 ver:4 
> tos:0 tlen:84 id:43 DF frag_off:0 ttl:61 proto:1 (ICMP) chk:13895 saddr:
> 192.168.22.229 daddr:192.168.111.1 type:code=8:0
> May 20 03:44:47 vpn_22_203 kernel: 
> klips_debug:ipsec_tunnel_start_xmit: checking for local udp/500 IKE 
> packet saddr=c0a816e5, er=cfa7b0c0,
> daddr=c0a86f01, er_dst=ac100414, proto=1 sport=0 dport=0
> May 20 03:44:47 vpn_22_203 kernel: 
> klips_debug:ipsec_tunnel_start_xmit: found Tunnel Descriptor Block -- 
> SA:<IPIP> tun0x100e at 172.16.4.20
> May 20 03:44:47 vpn_22_203 kernel: 
> klips_debug:ipsec_tunnel_start_xmit: after <IPIP>, 
> SA:tun0x100e at 172.16.4.20:
> May 20 03:44:47 vpn_22_203 kernel: klips_debug:   IP: ihl:20 ver:4 
> tos:0 tlen:104 id:29910 frag_off:0 ttl:64 proto:4 chk:42373 saddr:172.16
> .4.2 daddr:172.16.4.20
> May 20 03:44:47 vpn_22_203 kernel: 
> klips_debug:ipsec_tunnel_start_xmit: after <ESP_3DES_HMAC_MD5>, 
> SA:esp0x2ef00086 at 172.16.4.20:
> May 20 03:44:47 vpn_22_203 kernel: klips_debug:   IP: ihl:20 ver:4 
> tos:0 tlen:136 id:29910 frag_off:0 ttl:64 proto:50 chk:42295 saddr:172.1
> 6.4.2 daddr:172.16.4.20
> May 20 03:44:47 vpn_22_203 kernel: 
> klips_debug:ipsec_tunnel_start_xmit: ...done, calling ip_send() on 
> device:eth2
>
>
>
>
btw, after ipsec restart I have the same problem with this host:

May 20 03:50:25 vpn_22_203 kernel: klips_debug:   IP: ihl:20 ver:4 tos:0 
tlen:84 id:0 DF frag_off:0 ttl:61 proto:1 (ICMP) chk:13938 saddr:1
92.168.22.229 daddr:192.168.111.1 type:code=8:0
May 20 03:50:25 vpn_22_203 kernel: klips_debug:ipsec_tunnel_start_xmit: 
checking for local udp/500 IKE packet saddr=c0a816e5, er=cfa7b8c0,
daddr=c0a86f01, er_dst=0, proto=1 sport=0 dport=0
May 20 03:50:25 vpn_22_203 kernel: klips_debug:ipsec_tunnel_start_xmit: 
shunt SA of HOLD: skb stored in HOLD.
May 20 03:50:25 vpn_22_203 kernel: klips_debug:ipsec_tunnel_start_xmit: 
 >>> skb->len=74 hard_header_len:14 00:04:23:ad:31:23:00:04:23:ad:31
:23:08:00