[Openswan Users] acquire-netlink

[Herbert Xu]

Norbert Wegener <nw at sbs.de> wrote:
> On a gateway with kernel 2.6.11 and openswan 2.4.0dr8
> ipsec auto --status shows lots of entries like:
> 000 1.2.3.4/32:0 -17-> 62.180.184.5/32:0 => %hold 0    %acquire-netlink
> 000 1.2.3.4/32:0 -17-> 213.23.192.58/32:0 => %hold 0    %acquire-netlink
> 000 1.2.3.4/32:0 -17-> 213.23.192.58/32:0 => %hold 0    %acquire-netlink
> 000 1.2.3.4/32:0 -17-> 10.176.0.198/32:0 => %hold 0    %acquire-netlink
> 000 1.2.3.4/32:0 -17-> 10.176.0.198/32:0 => %hold 0    %acquire-netlink
> 000 1.2.3.4/32:0 -17-> 10.176.0.198/32:0 => %hold 0    %acquire-netlink
> 000 1.2.3.4/32:0 -17-> 10.176.0.198/32:0 => %hold 0    %acquire-netlink
> 000 1.2.3.4/32:0 -17-> 84.130.207.26/32:0 => %hold 0    %acquire-netlink
> 000 1.2.3.4/32:0 -17-> 84.174.223.117/32:0 => %hold 0    %acquire-netlink
> 000 1.2.3.4/32:0 -17-> 84.152.178.214/32:0 => %hold 0    %acquire-netlink
> 
> What do those entries mean?
> Is there anything to be done, when there are lots of those entries?
> Norbert

Known problem with the native stack.  Patch is available at

http://bugs.xelerance.com/view.php?id=344
-- 
Visit Openswan at http://www.openswan.org/
Email: Herbert Xu ~{PmV>HI~} <herbert at gondor.apana.org.au>
Home Page: http://gondor.apana.org.au/~herbert/
PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt