[Openswan Users] Sementation fauled with Pluto

[Marc Hansen]

Hi,
I found a little problem on our Gateway.
We use about 600 tunnels
Kernel 2.4.31 mit ipsec 2.4.7.

I have now two questions about an segfauled with pluto


- Is there a recommendet Kernelversion for openswan 2.4.7. We need Kernel 
2.4.x for the Interfaces "ipsec0".

- How to trace a problem like ours. See the logfileoutput down there.
Maybe the Bugfix from the 29.03.09 a usefull way to get rid of oure Problem.
We get the "Sementation fault" round about 1/Week. Often on Monday/Tuesday.

Hopefully you have a hint...

Regards 
Marc


------------------------------------------------------ 
 ipsec__plutorun: /usr/local/lib/ipsec/_plutorun: line 1: 23091 Segmentation 
fault /usr/local/libexec/ipsec/pluto --nofork --secretsfile /etc/i
 psec.secrets --ipsecdir /etc/ipsec.d --debug-none --use-auto --uniqueids --
nat_traversal --virtual_private %v4:192.168.0.0/16
 ipsec__plutorun: !pluto failure!: exited with error status 139 (signal 11)
 ipsec__plutorun: restarting IPsec after pause...
 kernel: IPSEC EVENT: KLIPS device ipsec0 shut down.
 kernel: klips_infofkey_cleanup: shutting down PF_KEY domain sockets.
 kernel: klips_info:cleanup_module: ipsec module unloaded.
 ipsec_setup: ...Openswan IPsec stopped
 ipsec_setup: Stopping Openswan IPsec...
 ipsec_setup: Removing orphaned /var/run/pluto/pluto.pid:
 kernel: klips_info:ipsec_init: KLIPS startup, Openswan KLIPS IPsec stack 
version: 2.4.7
 kernel: klips_info:ipsec_alg_init: KLIPS alg v=0.8.1-0 (EALG_MAX=255, 
AALG_MAX=251)
 kernel: klips_info:ipsec_alg_init: calling ipsec_alg_static_init()
 kernel: ipsec_aes_init(alg_type=15 alg_id=12 name=aes): ret=0
 kernel: klips_debug: experimental ipsec_alg_AES_MAC not registered [Ok] 
(auth_id=0)
 kernel: ipsec_3des_init(alg_type=15 alg_id=3 name=3des): ret=0
 ipsec_setup: KLIPS debug `none'
 kernel: