[Openswan Users] IPsec on Ubuntu Linux Server 8.04 (Hardy)

[Paul Wouters]

On Mon, 17 Jan 2011, Kaushal Shriyan wrote:

> Yes, posting a link to the logs would be useful to figure out what is going on.

> http://pastebin.ubuntu.com/554974/ --> ipsec.log

packet from 10.0.0.7:22363: not enough room in input packet for ISAKMP Message (remain=8, sd->size=28)

That's pretty bad. And you're using 2.6.32, so this is not the old 2.6.21 bug.

Your logs are incomplete, and it seems you have thousands of state objects for your
tunnel.

Disable the debug you enabled. stop openswan. clear the logs. start openswan, let the
tunnel come up, wait until there is an issue, or two hours, whichever comes first,
then pastebin those logs.

Paul