I have the same failure: Cisco 5510 Ubuntu 16
sudo vpnc --gateway xxxx.xxxx.com --id xxxxxx --username xxxxxxx --debug 3 Enter IPSec secret for [email protected]: Enter password for [email protected]: vpnc version 0.5.3r550-2build1 hex_test: 00010203 S1 init_sockaddr [2016-06-30 21:48:56] S2 make_socket [2016-06-30 21:48:56] S3 setup_tunnel [2016-06-30 21:48:56] using interface tun0 S4 do_phase1_am [2016-06-30 21:48:56] S4.1 create_nonce [2016-06-30 21:48:56] i_cookie: a3a84eac 120762f0 i_nonce: 7c233790 1a2072a1 1ba05ee8 ce649c75 d4179f83 S4.2 dh setup [2016-06-30 21:48:56] dh_public: 7292eb22 7dbf41b3 35e10040 fd15dae3 18e52872 bab40030 4d5a5f31 42eaed88 cff8c563 3caab4b5 041dae1c 4f3ce297 b5e49dfa 28993352 601a8a33 844fdd53 cd820efa c681cff6 1e94b79b a06bf012 0be58714 bd582054 cda2d7bd d6226209 d626c3ae 3094b998 6a0d8462 29014ce3 c042c53f f1d7fee1 ae2c40dd c8c39a0f S4.3 AM packet_1 [2016-06-30 21:48:56] sending: ========================> BEGIN_PARSE Received Packet Len: 1303 i_cookie: a3a84eac 120762f0 r_cookie: 00000000 00000000 payload: 01 (ISAKMP_PAYLOAD_SA) isakmp_version: 10 exchange_type: 04 (ISAKMP_EXCHANGE_AGGRESSIVE) flags: 00 message_id: 00000000 len: 00000517 PARSING PAYLOAD type: 01 (ISAKMP_PAYLOAD_SA) next_type: 04 (ISAKMP_PAYLOAD_KE) length: 03a4 sa.doi: 00000001 (ISAKMP_DOI_IPSEC) sa.situation: 00000001 (ISAKMP_IPSEC_SIT_IDENTITY_ONLY) PARSING PAYLOAD type: 02 (ISAKMP_PAYLOAD_P) next_type: 00 (ISAKMP_PAYLOAD_NONE) length: 0398 p.number: 00 p.prot_id: 01 (ISAKMP_IPSEC_PROTO_ISAKMP) p.spi_size: 00 length: 18 p.spi: PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T) next_type: 03 (ISAKMP_PAYLOAD_T) length: 0028 t.number: 00 t.id: 01 (ISAKMP_IPSEC_KEY_IKE) t.attributes.type: 000e (IKE_ATTRIB_KEY_LENGTH) t.attributes.u.attr_16: 0100 t.attributes.type: 0001 (IKE_ATTRIB_ENC) t.attributes.u.attr_16: 0007 (IKE_ENC_AES_CBC) t.attributes.type: 0002 (IKE_ATTRIB_HASH) t.attributes.u.attr_16: 0002 (IKE_HASH_SHA) t.attributes.type: 0004 (IKE_ATTRIB_GROUP_DESC) t.attributes.u.attr_16: 0002 (IKE_GROUP_MODP_1024) t.attributes.type: 0003 (IKE_ATTRIB_AUTH_METHOD) t.attributes.u.attr_16: fde9 (IKE_AUTH_XAUTHInitPreShared) t.attributes.type: 000b (IKE_ATTRIB_LIFE_TYPE) t.attributes.u.attr_16: 0001 (IKE_LIFE_TYPE_SECONDS) t.attributes.type: 000c (IKE_ATTRIB_LIFE_DURATION) t.attributes.u.lots.length: 0004 t.attributes.u.lots.data: 0020c49b DONE PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T) PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T) next_type: 03 (ISAKMP_PAYLOAD_T) length: 0028 t.number: 01 t.id: 01 (ISAKMP_IPSEC_KEY_IKE) t.attributes.type: 000e (IKE_ATTRIB_KEY_LENGTH) t.attributes.u.attr_16: 0100 t.attributes.type: 0001 (IKE_ATTRIB_ENC) t.attributes.u.attr_16: 0007 (IKE_ENC_AES_CBC) t.attributes.type: 0002 (IKE_ATTRIB_HASH) t.attributes.u.attr_16: 0001 (IKE_HASH_MD5) t.attributes.type: 0004 (IKE_ATTRIB_GROUP_DESC) t.attributes.u.attr_16: 0002 (IKE_GROUP_MODP_1024) t.attributes.type: 0003 (IKE_ATTRIB_AUTH_METHOD) t.attributes.u.attr_16: fde9 (IKE_AUTH_XAUTHInitPreShared) t.attributes.type: 000b (IKE_ATTRIB_LIFE_TYPE) t.attributes.u.attr_16: 0001 (IKE_LIFE_TYPE_SECONDS) t.attributes.type: 000c (IKE_ATTRIB_LIFE_DURATION) t.attributes.u.lots.length: 0004 t.attributes.u.lots.data: 0020c49b DONE PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T) PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T) next_type: 03 (ISAKMP_PAYLOAD_T) length: 0028 t.number: 02 t.id: 01 (ISAKMP_IPSEC_KEY_IKE) t.attributes.type: 000e (IKE_ATTRIB_KEY_LENGTH) t.attributes.u.attr_16: 00c0 t.attributes.type: 0001 (IKE_ATTRIB_ENC) t.attributes.u.attr_16: 0007 (IKE_ENC_AES_CBC) t.attributes.type: 0002 (IKE_ATTRIB_HASH) t.attributes.u.attr_16: 0002 (IKE_HASH_SHA) t.attributes.type: 0004 (IKE_ATTRIB_GROUP_DESC) t.attributes.u.attr_16: 0002 (IKE_GROUP_MODP_1024) t.attributes.type: 0003 (IKE_ATTRIB_AUTH_METHOD) t.attributes.u.attr_16: fde9 (IKE_AUTH_XAUTHInitPreShared) t.attributes.type: 000b (IKE_ATTRIB_LIFE_TYPE) t.attributes.u.attr_16: 0001 (IKE_LIFE_TYPE_SECONDS) t.attributes.type: 000c (IKE_ATTRIB_LIFE_DURATION) t.attributes.u.lots.length: 0004 t.attributes.u.lots.data: 0020c49b DONE PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T) PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T) next_type: 03 (ISAKMP_PAYLOAD_T) length: 0028 t.number: 03 t.id: 01 (ISAKMP_IPSEC_KEY_IKE) t.attributes.type: 000e (IKE_ATTRIB_KEY_LENGTH) t.attributes.u.attr_16: 00c0 t.attributes.type: 0001 (IKE_ATTRIB_ENC) t.attributes.u.attr_16: 0007 (IKE_ENC_AES_CBC) t.attributes.type: 0002 (IKE_ATTRIB_HASH) t.attributes.u.attr_16: 0001 (IKE_HASH_MD5) t.attributes.type: 0004 (IKE_ATTRIB_GROUP_DESC) t.attributes.u.attr_16: 0002 (IKE_GROUP_MODP_1024) t.attributes.type: 0003 (IKE_ATTRIB_AUTH_METHOD) t.attributes.u.attr_16: fde9 (IKE_AUTH_XAUTHInitPreShared) t.attributes.type: 000b (IKE_ATTRIB_LIFE_TYPE) t.attributes.u.attr_16: 0001 (IKE_LIFE_TYPE_SECONDS) t.attributes.type: 000c (IKE_ATTRIB_LIFE_DURATION) t.attributes.u.lots.length: 0004 t.attributes.u.lots.data: 0020c49b DONE PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T) PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T) next_type: 03 (ISAKMP_PAYLOAD_T) length: 0028 t.number: 04 t.id: 01 (ISAKMP_IPSEC_KEY_IKE) t.attributes.type: 000e (IKE_ATTRIB_KEY_LENGTH) t.attributes.u.attr_16: 0080 t.attributes.type: 0001 (IKE_ATTRIB_ENC) t.attributes.u.attr_16: 0007 (IKE_ENC_AES_CBC) t.attributes.type: 0002 (IKE_ATTRIB_HASH) t.attributes.u.attr_16: 0002 (IKE_HASH_SHA) t.attributes.type: 0004 (IKE_ATTRIB_GROUP_DESC) t.attributes.u.attr_16: 0002 (IKE_GROUP_MODP_1024) t.attributes.type: 0003 (IKE_ATTRIB_AUTH_METHOD) t.attributes.u.attr_16: fde9 (IKE_AUTH_XAUTHInitPreShared) t.attributes.type: 000b (IKE_ATTRIB_LIFE_TYPE) t.attributes.u.attr_16: 0001 (IKE_LIFE_TYPE_SECONDS) t.attributes.type: 000c (IKE_ATTRIB_LIFE_DURATION) t.attributes.u.lots.length: 0004 t.attributes.u.lots.data: 0020c49b DONE PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T) PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T) next_type: 03 (ISAKMP_PAYLOAD_T) length: 0028 t.number: 05 t.id: 01 (ISAKMP_IPSEC_KEY_IKE) t.attributes.type: 000e (IKE_ATTRIB_KEY_LENGTH) t.attributes.u.attr_16: 0080 t.attributes.type: 0001 (IKE_ATTRIB_ENC) t.attributes.u.attr_16: 0007 (IKE_ENC_AES_CBC) t.attributes.type: 0002 (IKE_ATTRIB_HASH) t.attributes.u.attr_16: 0001 (IKE_HASH_MD5) t.attributes.type: 0004 (IKE_ATTRIB_GROUP_DESC) t.attributes.u.attr_16: 0002 (IKE_GROUP_MODP_1024) t.attributes.type: 0003 (IKE_ATTRIB_AUTH_METHOD) t.attributes.u.attr_16: fde9 (IKE_AUTH_XAUTHInitPreShared) t.attributes.type: 000b (IKE_ATTRIB_LIFE_TYPE) t.attributes.u.attr_16: 0001 (IKE_LIFE_TYPE_SECONDS) t.attributes.type: 000c (IKE_ATTRIB_LIFE_DURATION) t.attributes.u.lots.length: 0004 t.attributes.u.lots.data: 0020c49b DONE PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T) PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T) next_type: 03 (ISAKMP_PAYLOAD_T) length: 0024 t.number: 06 t.id: 01 (ISAKMP_IPSEC_KEY_IKE) t.attributes.type: 0001 (IKE_ATTRIB_ENC) t.attributes.u.attr_16: 0005 (IKE_ENC_3DES_CBC) t.attributes.type: 0002 (IKE_ATTRIB_HASH) t.attributes.u.attr_16: 0002 (IKE_HASH_SHA) t.attributes.type: 0004 (IKE_ATTRIB_GROUP_DESC) t.attributes.u.attr_16: 0002 (IKE_GROUP_MODP_1024) t.attributes.type: 0003 (IKE_ATTRIB_AUTH_METHOD) t.attributes.u.attr_16: fde9 (IKE_AUTH_XAUTHInitPreShared) t.attributes.type: 000b (IKE_ATTRIB_LIFE_TYPE) t.attributes.u.attr_16: 0001 (IKE_LIFE_TYPE_SECONDS) t.attributes.type: 000c (IKE_ATTRIB_LIFE_DURATION) t.attributes.u.lots.length: 0004 t.attributes.u.lots.data: 0020c49b DONE PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T) PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T) next_type: 03 (ISAKMP_PAYLOAD_T) length: 0024 t.number: 07 t.id: 01 (ISAKMP_IPSEC_KEY_IKE) t.attributes.type: 0001 (IKE_ATTRIB_ENC) t.attributes.u.attr_16: 0005 (IKE_ENC_3DES_CBC) t.attributes.type: 0002 (IKE_ATTRIB_HASH) t.attributes.u.attr_16: 0001 (IKE_HASH_MD5) t.attributes.type: 0004 (IKE_ATTRIB_GROUP_DESC) t.attributes.u.attr_16: 0002 (IKE_GROUP_MODP_1024) t.attributes.type: 0003 (IKE_ATTRIB_AUTH_METHOD) t.attributes.u.attr_16: fde9 (IKE_AUTH_XAUTHInitPreShared) t.attributes.type: 000b (IKE_ATTRIB_LIFE_TYPE) t.attributes.u.attr_16: 0001 (IKE_LIFE_TYPE_SECONDS) t.attributes.type: 000c (IKE_ATTRIB_LIFE_DURATION) t.attributes.u.lots.length: 0004 t.attributes.u.lots.data: 0020c49b DONE PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T) PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T) next_type: 03 (ISAKMP_PAYLOAD_T) length: 0024 t.number: 08 t.id: 01 (ISAKMP_IPSEC_KEY_IKE) t.attributes.type: 0001 (IKE_ATTRIB_ENC) t.attributes.u.attr_16: 0001 (IKE_ENC_DES_CBC) t.attributes.type: 0002 (IKE_ATTRIB_HASH) t.attributes.u.attr_16: 0002 (IKE_HASH_SHA) t.attributes.type: 0004 (IKE_ATTRIB_GROUP_DESC) t.attributes.u.attr_16: 0002 (IKE_GROUP_MODP_1024) t.attributes.type: 0003 (IKE_ATTRIB_AUTH_METHOD) t.attributes.u.attr_16: fde9 (IKE_AUTH_XAUTHInitPreShared) t.attributes.type: 000b (IKE_ATTRIB_LIFE_TYPE) t.attributes.u.attr_16: 0001 (IKE_LIFE_TYPE_SECONDS) t.attributes.type: 000c (IKE_ATTRIB_LIFE_DURATION) t.attributes.u.lots.length: 0004 t.attributes.u.lots.data: 0020c49b DONE PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T) PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T) next_type: 03 (ISAKMP_PAYLOAD_T) length: 0024 t.number: 09 t.id: 01 (ISAKMP_IPSEC_KEY_IKE) t.attributes.type: 0001 (IKE_ATTRIB_ENC) t.attributes.u.attr_16: 0001 (IKE_ENC_DES_CBC) t.attributes.type: 0002 (IKE_ATTRIB_HASH) t.attributes.u.attr_16: 0001 (IKE_HASH_MD5) t.attributes.type: 0004 (IKE_ATTRIB_GROUP_DESC) t.attributes.u.attr_16: 0002 (IKE_GROUP_MODP_1024) t.attributes.type: 0003 (IKE_ATTRIB_AUTH_METHOD) t.attributes.u.attr_16: fde9 (IKE_AUTH_XAUTHInitPreShared) t.attributes.type: 000b (IKE_ATTRIB_LIFE_TYPE) t.attributes.u.attr_16: 0001 (IKE_LIFE_TYPE_SECONDS) t.attributes.type: 000c (IKE_ATTRIB_LIFE_DURATION) t.attributes.u.lots.length: 0004 t.attributes.u.lots.data: 0020c49b DONE PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T) PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T) next_type: 03 (ISAKMP_PAYLOAD_T) length: 0024 t.number: 0a t.id: 01 (ISAKMP_IPSEC_KEY_IKE) t.attributes.type: 0001 (IKE_ATTRIB_ENC) t.attributes.u.attr_16: 0000 (IKE_ENC_NO_CBC) t.attributes.type: 0002 (IKE_ATTRIB_HASH) t.attributes.u.attr_16: 0002 (IKE_HASH_SHA) t.attributes.type: 0004 (IKE_ATTRIB_GROUP_DESC) t.attributes.u.attr_16: 0002 (IKE_GROUP_MODP_1024) t.attributes.type: 0003 (IKE_ATTRIB_AUTH_METHOD) t.attributes.u.attr_16: fde9 (IKE_AUTH_XAUTHInitPreShared) t.attributes.type: 000b (IKE_ATTRIB_LIFE_TYPE) t.attributes.u.attr_16: 0001 (IKE_LIFE_TYPE_SECONDS) t.attributes.type: 000c (IKE_ATTRIB_LIFE_DURATION) t.attributes.u.lots.length: 0004 t.attributes.u.lots.data: 0020c49b DONE PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T) PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T) next_type: 03 (ISAKMP_PAYLOAD_T) length: 0024 t.number: 0b t.id: 01 (ISAKMP_IPSEC_KEY_IKE) t.attributes.type: 0001 (IKE_ATTRIB_ENC) t.attributes.u.attr_16: 0000 (IKE_ENC_NO_CBC) t.attributes.type: 0002 (IKE_ATTRIB_HASH) t.attributes.u.attr_16: 0001 (IKE_HASH_MD5) t.attributes.type: 0004 (IKE_ATTRIB_GROUP_DESC) t.attributes.u.attr_16: 0002 (IKE_GROUP_MODP_1024) t.attributes.type: 0003 (IKE_ATTRIB_AUTH_METHOD) t.attributes.u.attr_16: fde9 (IKE_AUTH_XAUTHInitPreShared) t.attributes.type: 000b (IKE_ATTRIB_LIFE_TYPE) t.attributes.u.attr_16: 0001 (IKE_LIFE_TYPE_SECONDS) t.attributes.type: 000c (IKE_ATTRIB_LIFE_DURATION) t.attributes.u.lots.length: 0004 t.attributes.u.lots.data: 0020c49b DONE PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T) PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T) next_type: 03 (ISAKMP_PAYLOAD_T) length: 0028 t.number: 0c t.id: 01 (ISAKMP_IPSEC_KEY_IKE) t.attributes.type: 000e (IKE_ATTRIB_KEY_LENGTH) t.attributes.u.attr_16: 0100 t.attributes.type: 0001 (IKE_ATTRIB_ENC) t.attributes.u.attr_16: 0007 (IKE_ENC_AES_CBC) t.attributes.type: 0002 (IKE_ATTRIB_HASH) t.attributes.u.attr_16: 0002 (IKE_HASH_SHA) t.attributes.type: 0004 (IKE_ATTRIB_GROUP_DESC) t.attributes.u.attr_16: 0002 (IKE_GROUP_MODP_1024) t.attributes.type: 0003 (IKE_ATTRIB_AUTH_METHOD) t.attributes.u.attr_16: 0001 (IKE_AUTH_PRESHARED) t.attributes.type: 000b (IKE_ATTRIB_LIFE_TYPE) t.attributes.u.attr_16: 0001 (IKE_LIFE_TYPE_SECONDS) t.attributes.type: 000c (IKE_ATTRIB_LIFE_DURATION) t.attributes.u.lots.length: 0004 t.attributes.u.lots.data: 0020c49b DONE PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T) PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T) next_type: 03 (ISAKMP_PAYLOAD_T) length: 0028 t.number: 0d t.id: 01 (ISAKMP_IPSEC_KEY_IKE) t.attributes.type: 000e (IKE_ATTRIB_KEY_LENGTH) t.attributes.u.attr_16: 0100 t.attributes.type: 0001 (IKE_ATTRIB_ENC) t.attributes.u.attr_16: 0007 (IKE_ENC_AES_CBC) t.attributes.type: 0002 (IKE_ATTRIB_HASH) t.attributes.u.attr_16: 0001 (IKE_HASH_MD5) t.attributes.type: 0004 (IKE_ATTRIB_GROUP_DESC) t.attributes.u.attr_16: 0002 (IKE_GROUP_MODP_1024) t.attributes.type: 0003 (IKE_ATTRIB_AUTH_METHOD) t.attributes.u.attr_16: 0001 (IKE_AUTH_PRESHARED) t.attributes.type: 000b (IKE_ATTRIB_LIFE_TYPE) t.attributes.u.attr_16: 0001 (IKE_LIFE_TYPE_SECONDS) t.attributes.type: 000c (IKE_ATTRIB_LIFE_DURATION) t.attributes.u.lots.length: 0004 t.attributes.u.lots.data: 0020c49b DONE PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T) PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T) next_type: 03 (ISAKMP_PAYLOAD_T) length: 0028 t.number: 0e t.id: 01 (ISAKMP_IPSEC_KEY_IKE) t.attributes.type: 000e (IKE_ATTRIB_KEY_LENGTH) t.attributes.u.attr_16: 00c0 t.attributes.type: 0001 (IKE_ATTRIB_ENC) t.attributes.u.attr_16: 0007 (IKE_ENC_AES_CBC) t.attributes.type: 0002 (IKE_ATTRIB_HASH) t.attributes.u.attr_16: 0002 (IKE_HASH_SHA) t.attributes.type: 0004 (IKE_ATTRIB_GROUP_DESC) t.attributes.u.attr_16: 0002 (IKE_GROUP_MODP_1024) t.attributes.type: 0003 (IKE_ATTRIB_AUTH_METHOD) t.attributes.u.attr_16: 0001 (IKE_AUTH_PRESHARED) t.attributes.type: 000b (IKE_ATTRIB_LIFE_TYPE) t.attributes.u.attr_16: 0001 (IKE_LIFE_TYPE_SECONDS) t.attributes.type: 000c (IKE_ATTRIB_LIFE_DURATION) t.attributes.u.lots.length: 0004 t.attributes.u.lots.data: 0020c49b DONE PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T) PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T) next_type: 03 (ISAKMP_PAYLOAD_T) length: 0028 t.number: 0f t.id: 01 (ISAKMP_IPSEC_KEY_IKE) t.attributes.type: 000e (IKE_ATTRIB_KEY_LENGTH) t.attributes.u.attr_16: 00c0 t.attributes.type: 0001 (IKE_ATTRIB_ENC) t.attributes.u.attr_16: 0007 (IKE_ENC_AES_CBC) t.attributes.type: 0002 (IKE_ATTRIB_HASH) t.attributes.u.attr_16: 0001 (IKE_HASH_MD5) t.attributes.type: 0004 (IKE_ATTRIB_GROUP_DESC) t.attributes.u.attr_16: 0002 (IKE_GROUP_MODP_1024) t.attributes.type: 0003 (IKE_ATTRIB_AUTH_METHOD) t.attributes.u.attr_16: 0001 (IKE_AUTH_PRESHARED) t.attributes.type: 000b (IKE_ATTRIB_LIFE_TYPE) t.attributes.u.attr_16: 0001 (IKE_LIFE_TYPE_SECONDS) t.attributes.type: 000c (IKE_ATTRIB_LIFE_DURATION) t.attributes.u.lots.length: 0004 t.attributes.u.lots.data: 0020c49b DONE PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T) PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T) next_type: 03 (ISAKMP_PAYLOAD_T) length: 0028 t.number: 10 t.id: 01 (ISAKMP_IPSEC_KEY_IKE) t.attributes.type: 000e (IKE_ATTRIB_KEY_LENGTH) t.attributes.u.attr_16: 0080 t.attributes.type: 0001 (IKE_ATTRIB_ENC) t.attributes.u.attr_16: 0007 (IKE_ENC_AES_CBC) t.attributes.type: 0002 (IKE_ATTRIB_HASH) t.attributes.u.attr_16: 0002 (IKE_HASH_SHA) t.attributes.type: 0004 (IKE_ATTRIB_GROUP_DESC) t.attributes.u.attr_16: 0002 (IKE_GROUP_MODP_1024) t.attributes.type: 0003 (IKE_ATTRIB_AUTH_METHOD) t.attributes.u.attr_16: 0001 (IKE_AUTH_PRESHARED) t.attributes.type: 000b (IKE_ATTRIB_LIFE_TYPE) t.attributes.u.attr_16: 0001 (IKE_LIFE_TYPE_SECONDS) t.attributes.type: 000c (IKE_ATTRIB_LIFE_DURATION) t.attributes.u.lots.length: 0004 t.attributes.u.lots.data: 0020c49b DONE PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T) PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T) next_type: 03 (ISAKMP_PAYLOAD_T) length: 0028 t.number: 11 t.id: 01 (ISAKMP_IPSEC_KEY_IKE) t.attributes.type: 000e (IKE_ATTRIB_KEY_LENGTH) t.attributes.u.attr_16: 0080 t.attributes.type: 0001 (IKE_ATTRIB_ENC) t.attributes.u.attr_16: 0007 (IKE_ENC_AES_CBC) t.attributes.type: 0002 (IKE_ATTRIB_HASH) t.attributes.u.attr_16: 0001 (IKE_HASH_MD5) t.attributes.type: 0004 (IKE_ATTRIB_GROUP_DESC) t.attributes.u.attr_16: 0002 (IKE_GROUP_MODP_1024) t.attributes.type: 0003 (IKE_ATTRIB_AUTH_METHOD) t.attributes.u.attr_16: 0001 (IKE_AUTH_PRESHARED) t.attributes.type: 000b (IKE_ATTRIB_LIFE_TYPE) t.attributes.u.attr_16: 0001 (IKE_LIFE_TYPE_SECONDS) t.attributes.type: 000c (IKE_ATTRIB_LIFE_DURATION) t.attributes.u.lots.length: 0004 t.attributes.u.lots.data: 0020c49b DONE PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T) PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T) next_type: 03 (ISAKMP_PAYLOAD_T) length: 0024 t.number: 12 t.id: 01 (ISAKMP_IPSEC_KEY_IKE) t.attributes.type: 0001 (IKE_ATTRIB_ENC) t.attributes.u.attr_16: 0005 (IKE_ENC_3DES_CBC) t.attributes.type: 0002 (IKE_ATTRIB_HASH) t.attributes.u.attr_16: 0002 (IKE_HASH_SHA) t.attributes.type: 0004 (IKE_ATTRIB_GROUP_DESC) t.attributes.u.attr_16: 0002 (IKE_GROUP_MODP_1024) t.attributes.type: 0003 (IKE_ATTRIB_AUTH_METHOD) t.attributes.u.attr_16: 0001 (IKE_AUTH_PRESHARED) t.attributes.type: 000b (IKE_ATTRIB_LIFE_TYPE) t.attributes.u.attr_16: 0001 (IKE_LIFE_TYPE_SECONDS) t.attributes.type: 000c (IKE_ATTRIB_LIFE_DURATION) t.attributes.u.lots.length: 0004 t.attributes.u.lots.data: 0020c49b DONE PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T) PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T) next_type: 03 (ISAKMP_PAYLOAD_T) length: 0024 t.number: 13 t.id: 01 (ISAKMP_IPSEC_KEY_IKE) t.attributes.type: 0001 (IKE_ATTRIB_ENC) t.attributes.u.attr_16: 0005 (IKE_ENC_3DES_CBC) t.attributes.type: 0002 (IKE_ATTRIB_HASH) t.attributes.u.attr_16: 0001 (IKE_HASH_MD5) t.attributes.type: 0004 (IKE_ATTRIB_GROUP_DESC) t.attributes.u.attr_16: 0002 (IKE_GROUP_MODP_1024) t.attributes.type: 0003 (IKE_ATTRIB_AUTH_METHOD) t.attributes.u.attr_16: 0001 (IKE_AUTH_PRESHARED) t.attributes.type: 000b (IKE_ATTRIB_LIFE_TYPE) t.attributes.u.attr_16: 0001 (IKE_LIFE_TYPE_SECONDS) t.attributes.type: 000c (IKE_ATTRIB_LIFE_DURATION) t.attributes.u.lots.length: 0004 t.attributes.u.lots.data: 0020c49b DONE PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T) PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T) next_type: 03 (ISAKMP_PAYLOAD_T) length: 0024 t.number: 14 t.id: 01 (ISAKMP_IPSEC_KEY_IKE) t.attributes.type: 0001 (IKE_ATTRIB_ENC) t.attributes.u.attr_16: 0001 (IKE_ENC_DES_CBC) t.attributes.type: 0002 (IKE_ATTRIB_HASH) t.attributes.u.attr_16: 0002 (IKE_HASH_SHA) t.attributes.type: 0004 (IKE_ATTRIB_GROUP_DESC) t.attributes.u.attr_16: 0002 (IKE_GROUP_MODP_1024) t.attributes.type: 0003 (IKE_ATTRIB_AUTH_METHOD) t.attributes.u.attr_16: 0001 (IKE_AUTH_PRESHARED) t.attributes.type: 000b (IKE_ATTRIB_LIFE_TYPE) t.attributes.u.attr_16: 0001 (IKE_LIFE_TYPE_SECONDS) t.attributes.type: 000c (IKE_ATTRIB_LIFE_DURATION) t.attributes.u.lots.length: 0004 t.attributes.u.lots.data: 0020c49b DONE PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T) PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T) next_type: 03 (ISAKMP_PAYLOAD_T) length: 0024 t.number: 15 t.id: 01 (ISAKMP_IPSEC_KEY_IKE) t.attributes.type: 0001 (IKE_ATTRIB_ENC) t.attributes.u.attr_16: 0001 (IKE_ENC_DES_CBC) t.attributes.type: 0002 (IKE_ATTRIB_HASH) t.attributes.u.attr_16: 0001 (IKE_HASH_MD5) t.attributes.type: 0004 (IKE_ATTRIB_GROUP_DESC) t.attributes.u.attr_16: 0002 (IKE_GROUP_MODP_1024) t.attributes.type: 0003 (IKE_ATTRIB_AUTH_METHOD) t.attributes.u.attr_16: 0001 (IKE_AUTH_PRESHARED) t.attributes.type: 000b (IKE_ATTRIB_LIFE_TYPE) t.attributes.u.attr_16: 0001 (IKE_LIFE_TYPE_SECONDS) t.attributes.type: 000c (IKE_ATTRIB_LIFE_DURATION) t.attributes.u.lots.length: 0004 t.attributes.u.lots.data: 0020c49b DONE PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T) PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T) next_type: 03 (ISAKMP_PAYLOAD_T) length: 0024 t.number: 16 t.id: 01 (ISAKMP_IPSEC_KEY_IKE) t.attributes.type: 0001 (IKE_ATTRIB_ENC) t.attributes.u.attr_16: 0000 (IKE_ENC_NO_CBC) t.attributes.type: 0002 (IKE_ATTRIB_HASH) t.attributes.u.attr_16: 0002 (IKE_HASH_SHA) t.attributes.type: 0004 (IKE_ATTRIB_GROUP_DESC) t.attributes.u.attr_16: 0002 (IKE_GROUP_MODP_1024) t.attributes.type: 0003 (IKE_ATTRIB_AUTH_METHOD) t.attributes.u.attr_16: 0001 (IKE_AUTH_PRESHARED) t.attributes.type: 000b (IKE_ATTRIB_LIFE_TYPE) t.attributes.u.attr_16: 0001 (IKE_LIFE_TYPE_SECONDS) t.attributes.type: 000c (IKE_ATTRIB_LIFE_DURATION) t.attributes.u.lots.length: 0004 t.attributes.u.lots.data: 0020c49b DONE PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T) PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T) next_type: 00 (ISAKMP_PAYLOAD_NONE) length: 0024 t.number: 17 t.id: 01 (ISAKMP_IPSEC_KEY_IKE) t.attributes.type: 0001 (IKE_ATTRIB_ENC) t.attributes.u.attr_16: 0000 (IKE_ENC_NO_CBC) t.attributes.type: 0002 (IKE_ATTRIB_HASH) t.attributes.u.attr_16: 0001 (IKE_HASH_MD5) t.attributes.type: 0004 (IKE_ATTRIB_GROUP_DESC) t.attributes.u.attr_16: 0002 (IKE_GROUP_MODP_1024) t.attributes.type: 0003 (IKE_ATTRIB_AUTH_METHOD) t.attributes.u.attr_16: 0001 (IKE_AUTH_PRESHARED) t.attributes.type: 000b (IKE_ATTRIB_LIFE_TYPE) t.attributes.u.attr_16: 0001 (IKE_LIFE_TYPE_SECONDS) t.attributes.type: 000c (IKE_ATTRIB_LIFE_DURATION) t.attributes.u.lots.length: 0004 t.attributes.u.lots.data: 0020c49b DONE PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T) PARSING PAYLOAD type: 00 (ISAKMP_PAYLOAD_NONE) DONE PARSING PAYLOAD type: 02 (ISAKMP_PAYLOAD_P) PARSING PAYLOAD type: 00 (ISAKMP_PAYLOAD_NONE) DONE PARSING PAYLOAD type: 01 (ISAKMP_PAYLOAD_SA) PARSING PAYLOAD type: 04 (ISAKMP_PAYLOAD_KE) next_type: 0a (ISAKMP_PAYLOAD_NONCE) length: 0084 ke.data: 7292eb22 7dbf41b3 35e10040 fd15dae3 18e52872 bab40030 4d5a5f31 42eaed88 cff8c563 3caab4b5 041dae1c 4f3ce297 b5e49dfa 28993352 601a8a33 844fdd53 cd820efa c681cff6 1e94b79b a06bf012 0be58714 bd582054 cda2d7bd d6226209 d626c3ae 3094b998 6a0d8462 29014ce3 c042c53f f1d7fee1 ae2c40dd c8c39a0f DONE PARSING PAYLOAD type: 04 (ISAKMP_PAYLOAD_KE) PARSING PAYLOAD type: 0a (ISAKMP_PAYLOAD_NONCE) next_type: 05 (ISAKMP_PAYLOAD_ID) length: 0018 ke.data: 7c233790 1a2072a1 1ba05ee8 ce649c75 d4179f83 DONE PARSING PAYLOAD type: 0a (ISAKMP_PAYLOAD_NONCE) PARSING PAYLOAD type: 05 (ISAKMP_PAYLOAD_ID) next_type: 0d (ISAKMP_PAYLOAD_VID) length: 000f id.type: 0b (ISAKMP_IPSEC_ID_KEY_ID) id.protocol: 11 id.port: 01f4 id.data: 4143435f 456e67 DONE PARSING PAYLOAD type: 05 (ISAKMP_PAYLOAD_ID) PARSING PAYLOAD type: 0d (ISAKMP_PAYLOAD_VID) next_type: 0d (ISAKMP_PAYLOAD_VID) length: 000c ke.data: 09002689 dfd6b712 (Xauth) DONE PARSING PAYLOAD type: 0d (ISAKMP_PAYLOAD_VID) PARSING PAYLOAD type: 0d (ISAKMP_PAYLOAD_VID) next_type: 0d (ISAKMP_PAYLOAD_VID) length: 0014 ke.data: 12f5f28c 457168a9 702d9fe2 74cc0100 (Cisco Unity) DONE PARSING PAYLOAD type: 0d (ISAKMP_PAYLOAD_VID) PARSING PAYLOAD type: 0d (ISAKMP_PAYLOAD_VID) next_type: 0d (ISAKMP_PAYLOAD_VID) length: 0014 ke.data: 4a131c81 07035845 5c5728f2 0e95452f (Nat-T RFC) DONE PARSING PAYLOAD type: 0d (ISAKMP_PAYLOAD_VID) PARSING PAYLOAD type: 0d (ISAKMP_PAYLOAD_VID) next_type: 0d (ISAKMP_PAYLOAD_VID) length: 0014 ke.data: 7d9419a6 5310ca6f 2c179d92 15529d56 (Nat-T 03) DONE PARSING PAYLOAD type: 0d (ISAKMP_PAYLOAD_VID) PARSING PAYLOAD type: 0d (ISAKMP_PAYLOAD_VID) next_type: 0d (ISAKMP_PAYLOAD_VID) length: 0014 ke.data: 90cb8091 3ebb696e 086381b5 ec427b1f (Nat-T 02N) DONE PARSING PAYLOAD type: 0d (ISAKMP_PAYLOAD_VID) PARSING PAYLOAD type: 0d (ISAKMP_PAYLOAD_VID) next_type: 0d (ISAKMP_PAYLOAD_VID) length: 0014 ke.data: cd604643 35df21f8 7cfdb2fc 68b6a448 (Nat-T 02) DONE PARSING PAYLOAD type: 0d (ISAKMP_PAYLOAD_VID) PARSING PAYLOAD type: 0d (ISAKMP_PAYLOAD_VID) next_type: 0d (ISAKMP_PAYLOAD_VID) length: 0014 ke.data: 16f6ca16 e4a4066d 83821a0f 0aeaa862 (Nat-T 01) DONE PARSING PAYLOAD type: 0d (ISAKMP_PAYLOAD_VID) PARSING PAYLOAD type: 0d (ISAKMP_PAYLOAD_VID) next_type: 0d (ISAKMP_PAYLOAD_VID) length: 0014 ke.data: 4485152d 18b6bbcd 0be8a846 9579ddcc (Nat-T 00) DONE PARSING PAYLOAD type: 0d (ISAKMP_PAYLOAD_VID) PARSING PAYLOAD type: 0d (ISAKMP_PAYLOAD_VID) next_type: 00 (ISAKMP_PAYLOAD_NONE) length: 0014 ke.data: afcad713 68a1f1c9 6b8696fc 77570100 (DPD) DONE PARSING PAYLOAD type: 0d (ISAKMP_PAYLOAD_VID) PARSING PAYLOAD type: 00 (ISAKMP_PAYLOAD_NONE) PARSE_OK receiving: <======================== [2016-06-30 21:48:57] S4.4 AM_packet2 [2016-06-30 21:48:57] BEGIN_PARSE Received Packet Len: 440 i_cookie: a3a84eac 120762f0 r_cookie: bbbe764f 11681d2b payload: 01 (ISAKMP_PAYLOAD_SA) isakmp_version: 10 exchange_type: 04 (ISAKMP_EXCHANGE_AGGRESSIVE) flags: 00 message_id: 00000000 len: 000001b8 PARSING PAYLOAD type: 01 (ISAKMP_PAYLOAD_SA) next_type: 04 (ISAKMP_PAYLOAD_KE) length: 0038 sa.doi: 00000001 (ISAKMP_DOI_IPSEC) sa.situation: 00000001 (ISAKMP_IPSEC_SIT_IDENTITY_ONLY) PARSING PAYLOAD type: 02 (ISAKMP_PAYLOAD_P) next_type: 00 (ISAKMP_PAYLOAD_NONE) length: 002c p.number: 01 p.prot_id: 01 (ISAKMP_IPSEC_PROTO_ISAKMP) p.spi_size: 00 length: 01 p.spi: PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T) next_type: 00 (ISAKMP_PAYLOAD_NONE) length: 0024 t.number: 06 t.id: 01 (ISAKMP_IPSEC_KEY_IKE) t.attributes.type: 0001 (IKE_ATTRIB_ENC) t.attributes.u.attr_16: 0005 (IKE_ENC_3DES_CBC) t.attributes.type: 0002 (IKE_ATTRIB_HASH) t.attributes.u.attr_16: 0002 (IKE_HASH_SHA) t.attributes.type: 0004 (IKE_ATTRIB_GROUP_DESC) t.attributes.u.attr_16: 0002 (IKE_GROUP_MODP_1024) t.attributes.type: 0003 (IKE_ATTRIB_AUTH_METHOD) t.attributes.u.attr_16: fde9 (IKE_AUTH_XAUTHInitPreShared) t.attributes.type: 000b (IKE_ATTRIB_LIFE_TYPE) t.attributes.u.attr_16: 0001 (IKE_LIFE_TYPE_SECONDS) t.attributes.type: 000c (IKE_ATTRIB_LIFE_DURATION) t.attributes.u.lots.length: 0004 t.attributes.u.lots.data: 0020c49b DONE PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T) PARSING PAYLOAD type: 00 (ISAKMP_PAYLOAD_NONE) DONE PARSING PAYLOAD type: 02 (ISAKMP_PAYLOAD_P) PARSING PAYLOAD type: 00 (ISAKMP_PAYLOAD_NONE) DONE PARSING PAYLOAD type: 01 (ISAKMP_PAYLOAD_SA) PARSING PAYLOAD type: 04 (ISAKMP_PAYLOAD_KE) next_type: 0a (ISAKMP_PAYLOAD_NONCE) length: 0084 ke.data: e6a8257e 0caedb4f 28f4b085 afae8f5b 2320964f d58445f8 3caf51de de8778d5 34e90e90 c0a1a724 a7f9c768 4e088c37 3c9a4a93 f4f3290a 6ad166a7 1a105708 25a51016 47915ffb 3fb69b7f f02dc9f9 66f6d753 edf59075 ab6729fa 970b6170 5239d32e 4fb793ca fd34a867 a0050d5b 650bc2b1 68a60abc 2b24688c e35a5979 DONE PARSING PAYLOAD type: 04 (ISAKMP_PAYLOAD_KE) PARSING PAYLOAD type: 0a (ISAKMP_PAYLOAD_NONCE) next_type: 05 (ISAKMP_PAYLOAD_ID) length: 0018 ke.data: 708e8abf 6a9c2e24 e886b8b9 edf005b2 c6c4b04c DONE PARSING PAYLOAD type: 0a (ISAKMP_PAYLOAD_NONCE) PARSING PAYLOAD type: 05 (ISAKMP_PAYLOAD_ID) next_type: 08 (ISAKMP_PAYLOAD_HASH) length: 000c id.type: 01 (ISAKMP_IPSEC_ID_IPV4_ADDR) id.protocol: 11 id.port: 0000 id.data: 266f9761 DONE PARSING PAYLOAD type: 05 (ISAKMP_PAYLOAD_ID) PARSING PAYLOAD type: 08 (ISAKMP_PAYLOAD_HASH) next_type: 0d (ISAKMP_PAYLOAD_VID) length: 0018 ke.data: a2f2bed5 94ec1e95 e0c43426 70052f85 3e24b8f1 DONE PARSING PAYLOAD type: 08 (ISAKMP_PAYLOAD_HASH) PARSING PAYLOAD type: 0d (ISAKMP_PAYLOAD_VID) next_type: 0d (ISAKMP_PAYLOAD_VID) length: 0014 ke.data: 12f5f28c 457168a9 702d9fe2 74cc0100 (Cisco Unity) DONE PARSING PAYLOAD type: 0d (ISAKMP_PAYLOAD_VID) PARSING PAYLOAD type: 0d (ISAKMP_PAYLOAD_VID) next_type: 0d (ISAKMP_PAYLOAD_VID) length: 000c ke.data: 09002689 dfd6b712 (Xauth) DONE PARSING PAYLOAD type: 0d (ISAKMP_PAYLOAD_VID) PARSING PAYLOAD type: 0d (ISAKMP_PAYLOAD_VID) next_type: 0d (ISAKMP_PAYLOAD_VID) length: 0014 ke.data: afcad713 68a1f1c9 6b8696fc 77570100 (DPD) DONE PARSING PAYLOAD type: 0d (ISAKMP_PAYLOAD_VID) PARSING PAYLOAD type: 0d (ISAKMP_PAYLOAD_VID) next_type: 14 (ISAKMP_PAYLOAD_NAT_D) length: 0014 ke.data: 4a131c81 07035845 5c5728f2 0e95452f (Nat-T RFC) DONE PARSING PAYLOAD type: 0d (ISAKMP_PAYLOAD_VID) PARSING PAYLOAD type: 14 (ISAKMP_PAYLOAD_NAT_D) next_type: 14 (ISAKMP_PAYLOAD_NAT_D) length: 0018 ke.data: e041c26e bffebc1d 6aea29b4 1346a36c 918185cd DONE PARSING PAYLOAD type: 14 (ISAKMP_PAYLOAD_NAT_D) PARSING PAYLOAD type: 14 (ISAKMP_PAYLOAD_NAT_D) next_type: 0d (ISAKMP_PAYLOAD_VID) length: 0018 ke.data: 0908b11d 1283b516 c4e48470 29d253f4 bf78c8d3 DONE PARSING PAYLOAD type: 14 (ISAKMP_PAYLOAD_NAT_D) PARSING PAYLOAD type: 0d (ISAKMP_PAYLOAD_VID) next_type: 0d (ISAKMP_PAYLOAD_VID) length: 0018 ke.data: 4048b7d5 6ebce885 25e7de7f 00d6c2d3 c0000000 (unknown) DONE PARSING PAYLOAD type: 0d (ISAKMP_PAYLOAD_VID) PARSING PAYLOAD type: 0d (ISAKMP_PAYLOAD_VID) next_type: 00 (ISAKMP_PAYLOAD_NONE) length: 0014 ke.data: 1f07f70e aa6514d3 b0fa9654 2a500100 (unknown) DONE PARSING PAYLOAD type: 0d (ISAKMP_PAYLOAD_VID) PARSING PAYLOAD type: 00 (ISAKMP_PAYLOAD_NONE) PARSE_OK got ike lifetime attributes: 2147483 seconds IKE SA selected psk+xauth-3des-sha1 unknown ISAKMP_PAYLOAD_VID: 12f5f28c 457168a9 702d9fe2 74cc0100 peer is XAUTH capable (draft-ietf-ipsec-isakmp-xauth-06) peer is DPD capable (RFC3706) peer is NAT-T capable (RFC 3947) peer is using type 20 (ISAKMP_PAYLOAD_NAT_D) for NAT-Discovery payloads peer is using type 20 (ISAKMP_PAYLOAD_NAT_D) for NAT-Discovery payloads unknown ISAKMP_PAYLOAD_VID: 4048b7d5 6ebce885 25e7de7f 00d6c2d3 c0000000 unknown ISAKMP_PAYLOAD_VID: 1f07f70e aa6514d3 b0fa9654 2a500100 dh_shared_secret: 1b5f7c9f fac84ddb 42d2e1ae f93658fc 6b5fea02 94578cf0 1daf198b ddfafac0 403160f1 2999c928 b7b6d902 aba002bf 8aed1657 eb48b033 3eda8468 f9222a2e 9a3cae3a 7243176b 00ca38e0 94dab32b 12c8b649 d6eec48b bf33841d 4cdf3a27 86cd44be 445b253f adb6f8a7 47b19811 9a5c43fc c61a4320 b2718b37 ba47f57a (not dumping psk hash) skeyid: 9de78a0e 7103b79e 4051fecf ad66ae34 177061b4 expected hash: a2f2bed5 94ec1e95 e0c43426 70052f85 3e24b8f1 received hash: a2f2bed5 94ec1e95 e0c43426 70052f85 3e24b8f1 returned_hash: eea9a419 41aba98b ea660c25 bdbbc0af 65e60ab5 psk_hash: 96799437 0105d965 13004244 1b521531 302a83e3 dh_shared_secret: 1b5f7c9f fac84ddb 42d2e1ae f93658fc 6b5fea02 94578cf0 1daf198b ddfafac0 403160f1 2999c928 b7b6d902 aba002bf 8aed1657 eb48b033 3eda8468 f9222a2e 9a3cae3a 7243176b 00ca38e0 94dab32b 12c8b649 d6eec48b bf33841d 4cdf3a27 86cd44be 445b253f adb6f8a7 47b19811 9a5c43fc c61a4320 b2718b37 ba47f57a skeyid_d: c9bd73c8 d08d6a0f 7421fae0 a93b6cda e56da92b skeyid_a: f7c49953 210e6276 3d397232 803318b4 0f56502e skeyid_e: a2c41756 74977a0a cc64778a b5d384a8 c854ef1f enc-key: fa2e0e77 7d40380e 474867c6 7a95b89a 25ec5c32 bf5446c3 current_iv: aa15abd4 d7753f34 NAT status: this end behind NAT? YES -- remote end behind NAT? no S4.5 AM_packet3 [2016-06-30 21:48:57] size = 140, blksz = 8, padding = 4 sending: ========================> BEGIN_PARSE Received Packet Len: 172 i_cookie: a3a84eac 120762f0 r_cookie: bbbe764f 11681d2b payload: 08 (ISAKMP_PAYLOAD_HASH) isakmp_version: 10 exchange_type: 04 (ISAKMP_EXCHANGE_AGGRESSIVE) flags: 01 message_id: 00000000 len: 000000ac PARSING PAYLOAD type: 08 (ISAKMP_PAYLOAD_HASH) next_type: 0b (ISAKMP_PAYLOAD_N) length: 0018 ke.data: eea9a419 41aba98b ea660c25 bdbbc0af 65e60ab5 DONE PARSING PAYLOAD type: 08 (ISAKMP_PAYLOAD_HASH) PARSING PAYLOAD type: 0b (ISAKMP_PAYLOAD_N) next_type: 0d (ISAKMP_PAYLOAD_VID) length: 001c n.doi: 00000001 (ISAKMP_DOI_IPSEC) n.protocol: 01 (ISAKMP_IPSEC_PROTO_ISAKMP) n.spi_length: 10 n.type: 6002 (ISAKMP_N_IPSEC_INITIAL_CONTACT) n.spi: a3a84eac 120762f0 bbbe764f 11681d2b n.data: DONE PARSING PAYLOAD type: 0b (ISAKMP_PAYLOAD_N) PARSING PAYLOAD type: 0d (ISAKMP_PAYLOAD_VID) next_type: 0d (ISAKMP_PAYLOAD_VID) length: 0014 ke.data: 126e1f57 7291153b 20485f7f 155b4bc8 (unknown) DONE PARSING PAYLOAD type: 0d (ISAKMP_PAYLOAD_VID) PARSING PAYLOAD type: 0d (ISAKMP_PAYLOAD_VID) next_type: 14 (ISAKMP_PAYLOAD_NAT_D) length: 0014 ke.data: 12f5f28c 457168a9 702d9fe2 74cc0100 (Cisco Unity) DONE PARSING PAYLOAD type: 0d (ISAKMP_PAYLOAD_VID) PARSING PAYLOAD type: 14 (ISAKMP_PAYLOAD_NAT_D) next_type: 14 (ISAKMP_PAYLOAD_NAT_D) length: 0018 ke.data: 0908b11d 1283b516 c4e48470 29d253f4 bf78c8d3 DONE PARSING PAYLOAD type: 14 (ISAKMP_PAYLOAD_NAT_D) PARSING PAYLOAD type: 14 (ISAKMP_PAYLOAD_NAT_D) next_type: 00 (ISAKMP_PAYLOAD_NONE) length: 0018 ke.data: c237026a c860ef67 9c1d7b82 29bbd98b 00c65b16 DONE PARSING PAYLOAD type: 14 (ISAKMP_PAYLOAD_NAT_D) PARSING PAYLOAD type: 00 (ISAKMP_PAYLOAD_NONE) PARSE_OK initial_iv: 717bda86 01627ab5 NAT-T mode, adding non-esp marker receiving: <======================== [2016-06-30 21:48:57] S4.6 cleanup [2016-06-30 21:48:57] S5 do_phase2_xauth [2016-06-30 21:48:57] S5.1 xauth_request [2016-06-30 21:48:57] S5.2 notice_check [2016-06-30 21:48:57] BEGIN_PARSE Received Packet Len: 76 i_cookie: a3a84eac 120762f0 r_cookie: bbbe764f 11681d2b payload: 08 (ISAKMP_PAYLOAD_HASH) isakmp_version: 10 exchange_type: 06 (ISAKMP_EXCHANGE_MODECFG_TRANSACTION) flags: 01 message_id: 11be1497 len: 0000004c PARSING PAYLOAD type: 08 (ISAKMP_PAYLOAD_HASH) next_type: 0e (ISAKMP_PAYLOAD_MODECFG_ATTR) length: 0018 ke.data: 59a4eb70 578bfa49 1fc516bc 70476702 46d6bfc9 DONE PARSING PAYLOAD type: 08 (ISAKMP_PAYLOAD_HASH) PARSING PAYLOAD type: 0e (ISAKMP_PAYLOAD_MODECFG_ATTR) next_type: 00 (ISAKMP_PAYLOAD_NONE) length: 0014 modecfg.type: 01 (ISAKMP_MODECFG_CFG_REQUEST) modecfg.id: 0000 t.attributes.type: 4088 (ISAKMP_XAUTH_06_ATTRIB_TYPE) t.attributes.u.attr_16: 0000 t.attributes.type: 4089 (ISAKMP_XAUTH_06_ATTRIB_USER_NAME) t.attributes.u.lots.length: 0000 t.attributes.u.lots.data: t.attributes.type: 408a (ISAKMP_XAUTH_06_ATTRIB_USER_PASSWORD) t.attributes.u.lots.length: 0000 t.attributes.u.lots.data: DONE PARSING PAYLOAD type: 0e (ISAKMP_PAYLOAD_MODECFG_ATTR) PARSING PAYLOAD type: 00 (ISAKMP_PAYLOAD_NONE) PARSE_OK hashlen: 20 u.hash.length: 20 expected_hash: 59a4eb70 578bfa49 1fc516bc 70476702 46d6bfc9 h->u.hash.data: 59a4eb70 578bfa49 1fc516bc 70476702 46d6bfc9 S5.3 type-is-xauth check [2016-06-30 21:48:57] S5.4 xauth type check [2016-06-30 21:48:57] S5.5 do xauth reply [2016-06-30 21:48:57] size = 58, blksz = 8, padding = 6 sending: ========================> BEGIN_PARSE Received Packet Len: 92 i_cookie: a3a84eac 120762f0 r_cookie: bbbe764f 11681d2b payload: 08 (ISAKMP_PAYLOAD_HASH) isakmp_version: 10 exchange_type: 06 (ISAKMP_EXCHANGE_MODECFG_TRANSACTION) flags: 01 message_id: 11be1497 len: 0000005c PARSING PAYLOAD type: 08 (ISAKMP_PAYLOAD_HASH) next_type: 0e (ISAKMP_PAYLOAD_MODECFG_ATTR) length: 0018 ke.data: 72b63c24 0eb99af5 3f36e41e 6d823589 d1e64ce0 DONE PARSING PAYLOAD type: 08 (ISAKMP_PAYLOAD_HASH) PARSING PAYLOAD type: 0e (ISAKMP_PAYLOAD_MODECFG_ATTR) next_type: 00 (ISAKMP_PAYLOAD_NONE) length: 0022 modecfg.type: 02 (ISAKMP_MODECFG_CFG_REPLY) modecfg.id: 0000 t.attributes.type: 4088 (ISAKMP_XAUTH_06_ATTRIB_TYPE) t.attributes.u.attr_16: 0000 t.attributes.type: 4089 (ISAKMP_XAUTH_06_ATTRIB_USER_NAME) (not dumping xauth data length) (not dumping xauth data) t.attributes.type: 408a (ISAKMP_XAUTH_06_ATTRIB_USER_PASSWORD) (not dumping xauth data length) (not dumping xauth data) DONE PARSING PAYLOAD type: 0e (ISAKMP_PAYLOAD_MODECFG_ATTR) PARSING PAYLOAD type: 00 (ISAKMP_PAYLOAD_NONE) PARSE_OK NAT-T mode, adding non-esp marker receiving: <======================== [2016-06-30 21:48:57] S5.2 notice_check [2016-06-30 21:48:57] BEGIN_PARSE Received Packet Len: 100 i_cookie: a3a84eac 120762f0 r_cookie: bbbe764f 11681d2b payload: 08 (ISAKMP_PAYLOAD_HASH) isakmp_version: 10 exchange_type: 06 (ISAKMP_EXCHANGE_MODECFG_TRANSACTION) flags: 01 message_id: ce807177 len: 00000064 PARSING PAYLOAD type: 08 (ISAKMP_PAYLOAD_HASH) next_type: 0e (ISAKMP_PAYLOAD_MODECFG_ATTR) length: 0018 ke.data: 29660419 efd2ccf0 96955c9a 7b7e1e19 e46f4af5 DONE PARSING PAYLOAD type: 08 (ISAKMP_PAYLOAD_HASH) PARSING PAYLOAD type: 0e (ISAKMP_PAYLOAD_MODECFG_ATTR) next_type: 00 (ISAKMP_PAYLOAD_NONE) length: 002d modecfg.type: 01 (ISAKMP_MODECFG_CFG_REQUEST) modecfg.id: 0000 t.attributes.type: 4088 (ISAKMP_XAUTH_06_ATTRIB_TYPE) t.attributes.u.attr_16: 0000 t.attributes.type: 4089 (ISAKMP_XAUTH_06_ATTRIB_USER_NAME) t.attributes.u.lots.length: 0000 t.attributes.u.lots.data: t.attributes.type: 408a (ISAKMP_XAUTH_06_ATTRIB_USER_PASSWORD) t.attributes.u.lots.length: 0000 t.attributes.u.lots.data: t.attributes.type: 408c (ISAKMP_XAUTH_06_ATTRIB_MESSAGE) (not dumping xauth data length) (not dumping xauth data) DONE PARSING PAYLOAD type: 0e (ISAKMP_PAYLOAD_MODECFG_ATTR) PARSING PAYLOAD type: 00 (ISAKMP_PAYLOAD_NONE) PARSE_OK hashlen: 20 u.hash.length: 20 expected_hash: 29660419 efd2ccf0 96955c9a 7b7e1e19 e46f4af5 h->u.hash.data: 29660419 efd2ccf0 96955c9a 7b7e1e19 e46f4af5 S5.3 type-is-xauth check [2016-06-30 21:48:57] S5.4 xauth type check [2016-06-30 21:48:57] Authentication failed S5.5 do xauth reply [2016-06-30 21:48:57] Password for VPN [email protected]: size = 61, blksz = 8, padding = 3 sending: ========================> BEGIN_PARSE Received Packet Len: 92 i_cookie: a3a84eac 120762f0 r_cookie: bbbe764f 11681d2b payload: 08 (ISAKMP_PAYLOAD_HASH) isakmp_version: 10 exchange_type: 06 (ISAKMP_EXCHANGE_MODECFG_TRANSACTION) flags: 01 message_id: ce807177 len: 0000005c PARSING PAYLOAD type: 08 (ISAKMP_PAYLOAD_HASH) next_type: 0e (ISAKMP_PAYLOAD_MODECFG_ATTR) length: 0018 ke.data: 003f55a2 8b0aa5cb 7bce897f 1581ec2a cd0b13ce DONE PARSING PAYLOAD type: 08 (ISAKMP_PAYLOAD_HASH) PARSING PAYLOAD type: 0e (ISAKMP_PAYLOAD_MODECFG_ATTR) next_type: 00 (ISAKMP_PAYLOAD_NONE) length: 0025 modecfg.type: 02 (ISAKMP_MODECFG_CFG_REPLY) modecfg.id: 0000 t.attributes.type: 4088 (ISAKMP_XAUTH_06_ATTRIB_TYPE) t.attributes.u.attr_16: 0000 t.attributes.type: 4089 (ISAKMP_XAUTH_06_ATTRIB_USER_NAME) (not dumping xauth data length) (not dumping xauth data) t.attributes.type: 408a (ISAKMP_XAUTH_06_ATTRIB_USER_PASSWORD) (not dumping xauth data length) (not dumping xauth data) DONE PARSING PAYLOAD type: 0e (ISAKMP_PAYLOAD_MODECFG_ATTR) PARSING PAYLOAD type: 00 (ISAKMP_PAYLOAD_NONE) PARSE_OK NAT-T mode, adding non-esp marker receiving: <======================== [2016-06-30 21:49:05] S5.2 notice_check [2016-06-30 21:49:05] BEGIN_PARSE Received Packet Len: 68 i_cookie: a3a84eac 120762f0 r_cookie: bbbe764f 11681d2b payload: 08 (ISAKMP_PAYLOAD_HASH) isakmp_version: 10 exchange_type: 06 (ISAKMP_EXCHANGE_MODECFG_TRANSACTION) flags: 01 message_id: 8253fbe7 len: 00000044 PARSING PAYLOAD type: 08 (ISAKMP_PAYLOAD_HASH) next_type: 0e (ISAKMP_PAYLOAD_MODECFG_ATTR) length: 0018 ke.data: 715821fd a3a81eb6 635a1179 b995cd82 c9ef102b DONE PARSING PAYLOAD type: 08 (ISAKMP_PAYLOAD_HASH) PARSING PAYLOAD type: 0e (ISAKMP_PAYLOAD_MODECFG_ATTR) next_type: 00 (ISAKMP_PAYLOAD_NONE) length: 000c modecfg.type: 03 (ISAKMP_MODECFG_CFG_SET) modecfg.id: 0000 t.attributes.type: 408f (ISAKMP_XAUTH_06_ATTRIB_STATUS) t.attributes.u.attr_16: 0001 DONE PARSING PAYLOAD type: 0e (ISAKMP_PAYLOAD_MODECFG_ATTR) PARSING PAYLOAD type: 00 (ISAKMP_PAYLOAD_NONE) PARSE_OK hashlen: 20 u.hash.length: 20 expected_hash: 715821fd a3a81eb6 635a1179 b995cd82 c9ef102b h->u.hash.data: 715821fd a3a81eb6 635a1179 b995cd82 c9ef102b S5.3 type-is-xauth check [2016-06-30 21:49:05] S5.6 process xauth set [2016-06-30 21:49:05] S5.7 send xauth ack [2016-06-30 21:49:05] size = 36, blksz = 8, padding = 4 sending: ========================> BEGIN_PARSE Received Packet Len: 68 i_cookie: a3a84eac 120762f0 r_cookie: bbbe764f 11681d2b payload: 08 (ISAKMP_PAYLOAD_HASH) isakmp_version: 10 exchange_type: 06 (ISAKMP_EXCHANGE_MODECFG_TRANSACTION) flags: 01 message_id: 8253fbe7 len: 00000044 PARSING PAYLOAD type: 08 (ISAKMP_PAYLOAD_HASH) next_type: 0e (ISAKMP_PAYLOAD_MODECFG_ATTR) length: 0018 ke.data: 508abe14 f17c9229 237d3ecc 3158c28b d28e77ed DONE PARSING PAYLOAD type: 08 (ISAKMP_PAYLOAD_HASH) PARSING PAYLOAD type: 0e (ISAKMP_PAYLOAD_MODECFG_ATTR) next_type: 00 (ISAKMP_PAYLOAD_NONE) length: 000c modecfg.type: 04 (ISAKMP_MODECFG_CFG_ACK) modecfg.id: 0000 t.attributes.type: 408f (ISAKMP_XAUTH_06_ATTRIB_STATUS) t.attributes.u.attr_16: 0001 DONE PARSING PAYLOAD type: 0e (ISAKMP_PAYLOAD_MODECFG_ATTR) PARSING PAYLOAD type: 00 (ISAKMP_PAYLOAD_NONE) PARSE_OK NAT-T mode, adding non-esp marker S5.8 xauth done [2016-06-30 21:49:05] S6 do_phase2_config [2016-06-30 21:49:05] S6.1 phase2_config send modecfg [2016-06-30 21:49:05] size = 162, blksz = 8, padding = 6 sending: ========================> BEGIN_PARSE Received Packet Len: 196 i_cookie: a3a84eac 120762f0 r_cookie: bbbe764f 11681d2b payload: 08 (ISAKMP_PAYLOAD_HASH) isakmp_version: 10 exchange_type: 06 (ISAKMP_EXCHANGE_MODECFG_TRANSACTION) flags: 01 message_id: 4a7dbc2a len: 000000c4 PARSING PAYLOAD type: 08 (ISAKMP_PAYLOAD_HASH) next_type: 0e (ISAKMP_PAYLOAD_MODECFG_ATTR) length: 0018 ke.data: 2e4a5e93 e50cbce8 6acd7b52 2fd9bce4 d6763f1f DONE PARSING PAYLOAD type: 08 (ISAKMP_PAYLOAD_HASH) PARSING PAYLOAD type: 0e (ISAKMP_PAYLOAD_MODECFG_ATTR) next_type: 00 (ISAKMP_PAYLOAD_NONE) length: 008a modecfg.type: 01 (ISAKMP_MODECFG_CFG_REQUEST) modecfg.id: 0014 t.attributes.type: 0001 (ISAKMP_MODECFG_ATTRIB_INTERNAL_IP4_ADDRESS) t.attributes.u.lots.length: 0000 t.attributes.u.lots.data: t.attributes.type: 0002 (ISAKMP_MODECFG_ATTRIB_INTERNAL_IP4_NETMASK) t.attributes.u.lots.length: 0000 t.attributes.u.lots.data: t.attributes.type: 0003 (ISAKMP_MODECFG_ATTRIB_INTERNAL_IP4_DNS) t.attributes.u.lots.length: 0000 t.attributes.u.lots.data: t.attributes.type: 0004 (ISAKMP_MODECFG_ATTRIB_INTERNAL_IP4_NBNS) t.attributes.u.lots.length: 0000 t.attributes.u.lots.data: t.attributes.type: 7002 (ISAKMP_MODECFG_ATTRIB_CISCO_DEF_DOMAIN) t.attributes.u.lots.length: 0000 t.attributes.u.lots.data: t.attributes.type: 7008 (ISAKMP_MODECFG_ATTRIB_CISCO_FW_TYPE) t.attributes.u.lots.length: 000c t.attributes.u.lots.data: 80010001 80020001 80030002 t.attributes.type: 7007 (ISAKMP_MODECFG_ATTRIB_CISCO_DO_PFS) t.attributes.u.lots.length: 0000 t.attributes.u.lots.data: t.attributes.type: 7000 (ISAKMP_MODECFG_ATTRIB_CISCO_BANNER) t.attributes.u.lots.length: 0000 t.attributes.u.lots.data: t.attributes.type: 7001 (ISAKMP_MODECFG_ATTRIB_CISCO_SAVE_PW) t.attributes.u.lots.length: 0000 t.attributes.u.lots.data: t.attributes.type: 7004 (ISAKMP_MODECFG_ATTRIB_CISCO_SPLIT_INC) t.attributes.u.lots.length: 0000 t.attributes.type: 7003 (ISAKMP_MODECFG_ATTRIB_CISCO_SPLIT_DNS) t.attributes.u.lots.length: 0000 t.attributes.u.lots.data: t.attributes.type: 700a (ISAKMP_MODECFG_ATTRIB_CISCO_DDNS_HOSTNAME) t.attributes.u.lots.length: 0012 t.attributes.u.lots.data: 6d6a6f6e 65732d58 50532d31 352d3935 3530 t.attributes.type: 0007 (ISAKMP_MODECFG_ATTRIB_APPLICATION_VERSION) t.attributes.u.lots.length: 0030 t.attributes.u.lots.data: 43697363 6f205379 7374656d 73205650 4e20436c 69656e74 20302e35 2e337235 35302d32 6275696c 64313a4c 696e7578 DONE PARSING PAYLOAD type: 0e (ISAKMP_PAYLOAD_MODECFG_ATTR) PARSING PAYLOAD type: 00 (ISAKMP_PAYLOAD_NONE) PARSE_OK NAT-T mode, adding non-esp marker PAUSE HERE receiving: <======================== [2016-06-30 21:49:25] S6.2 phase2_config receive modecfg [2016-06-30 21:49:25] BEGIN_PARSE Received Packet Len: 84 i_cookie: a3a84eac 120762f0 r_cookie: bbbe764f 11681d2b payload: 08 (ISAKMP_PAYLOAD_HASH) isakmp_version: 10 exchange_type: 05 (ISAKMP_EXCHANGE_INFORMATIONAL) flags: 01 message_id: 658a3a00 len: 00000054 PARSING PAYLOAD type: 08 (ISAKMP_PAYLOAD_HASH) next_type: 0c (ISAKMP_PAYLOAD_D) length: 0018 ke.data: 6d1606ef 707c22cb 6fdc44fb a7a35eab 43c9d044 DONE PARSING PAYLOAD type: 08 (ISAKMP_PAYLOAD_HASH) PARSING PAYLOAD type: 0c (ISAKMP_PAYLOAD_D) next_type: 00 (ISAKMP_PAYLOAD_NONE) length: 001c d.doi: 00000001 (ISAKMP_DOI_IPSEC) d.protocol: 01 (ISAKMP_IPSEC_PROTO_ISAKMP) d.spi_length: 10 d.num_spi: 0001 d.spi: a3a84eac 120762f0 bbbe764f 11681d2b DONE PARSING PAYLOAD type: 0c (ISAKMP_PAYLOAD_D) PARSING PAYLOAD type: 00 (ISAKMP_PAYLOAD_NONE) PARSE_OK hashlen: 20 u.hash.length: 20 expected_hash: 6d1606ef 707c22cb 6fdc44fb a7a35eab 43c9d044 h->u.hash.data: 6d1606ef 707c22cb 6fdc44fb a7a35eab 43c9d044 got delete for old connection, ignoring.. HANG HERE
