[Openswan Users] Packet has no Non-ESP marker

Stefan Denker Stefan at dn-kr.de
Mon Nov 13 05:50:58 EST 2006


Hello once again, 

The situation is the same as in my previous post:

seikan:~# ipsec --version
Linux Openswan U2.4.6/K2.6.17.8seikan (netkey)

with xltp2d 1.04 acting as a server to an XP workstation.
The connection is successfully established, "ping 172.20.0.1" works. 

But... "ping -l 138 172.20.0.1"(pinging with 138 Bytes of data) doesn't
work. While doing this pluto logs: 

Nov 13 11:11:25 seikan pluto[1825]: packet from 87.78.98.213:4500: recvfrom 87.78.98.213:4500 has no Non-ESP marker
Nov 13 11:11:56 seikan last message repeated 7 times

What is this "Non-ESP marker"? I thought it might have something to do
with packet fragmentation, so I reduced the mtu of the Windows machine
as far as 1000, but with no luck. 

Anyone? 

Stefan
-- 
Swordfish? Every password  was swordfish! Whenever anyone tried to
think of a word that no one would ever guess, they always chose
swordfish. It was just one of those strange quirks of the human mind.
(Seargent-at-Arms John Keel)           [Terry Pratchett, Night Watch]
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature
Url : http://lists.openswan.org/pipermail/users/attachments/20061113/d9a08414/attachment.bin 


More information about the Users mailing list