Hello all,
Currently my brother and I try to set up a vpn using isakmpd between two
OBSD 3.8 boxes. We had a similar vpn working before. We both changed ADSL
providers and thought it is time for an upgrade. However...
Our vpn refuses to work. We singled out a possible firewall problem. The
pflog is quet and even after a '$pfctl -F rules' we keep the same problem. A
'tcpdump -i xl1 port 500' shows that both sided receive cookies, but nothing
more:
like this
$ tcpdump -i xl1 port 500
13:24:47.067067 broeahs.net.isakmp > daim.broeahs.net.isakmp: isakmp v1.0
exchange ID_PROT
cookie: 385103343a680645->9c61c0d839d1d9ec msgid: 00000000 len: 168
13:24:48.878894 daim.broeahs.net.isakmp > broeahs.net.isakmp: isakmp v1.0
exchange ID_PROT
cookie: 7fd785c9ee93e8fe->31884d57a94e56a0 msgid: 00000000 len: 168
The debuggin' info gives messages like this:
132740.737518 Exch 40 exchange_establish_finalize: finalizing exchange
0x7cdb9b0 0 with arg 0x85e318d0 (daim-dimitri) & fail = 1
132740.736495 SA 90 sa_find: no SA matched query
132641.268445 Default transport_send_messages: giving up on exchange
dimitri, no response from peer 194.109.199.156:500
My question is: What is happening here? How is it possible there is traffic
on both sides on port 500 but the two are not able to get decent contact?
Thank you in advance.
Daom
confs follow:
# cat /etc/isakmpd/isakmpd.policy
KeyNote-Version: 2
Authorizer: "POLICY"
Licensees: "our_bad_passw"
Conditions: app_domain == "IPsec policy" &&
esp_present == "yes" &&
esp_enc_alg != "null" -> "true";
# cat /etc/isakmpd/isakmpd.conf
# $OpenBSD: VPN-east.conf,v 1.7 1999/10/29 07:46:04 todd Exp $
# $EOM: VPN-east.conf,v 1.7 1999/07/18 09:25:34 niklas Exp $
# A configuration sample for the isakmpd ISAKMP/Oakley (aka IKE) daemon.
[General]
Retransmits= 5
Exchange-max-time=120
Listen-on= xxx.xxx.xxx.xxx
#Shared-SADB= Defined
# Incoming phase 1 negotiations are multiplexed on the source IP address
[Phase 1]
yyy.yyy.yyy.yyy=dimitri
# These connections are walked over after config file parsing and told
# to the application layer so that it will inform us when traffic wants to
# pass over them. This means we can do on-demand keying.
[Phase 2]
Connections= daim-dimitri
[dimitri]
Phase= 1
Transport= udp
Local-address= xxx.xxx.xxx.xxx
Address= yyy.yyy.yyy.yyy
Configuration= Default-main-mode
Authentication= our_bad_passw
[daim-dimitri]
Phase= 2
ISAKMP-peer= dimitri
Configuration= Default-quick-mode
Local-ID= Net-daim
Remote-ID= Net-dimitri
[Net-daim]
ID-type= IPV4_ADDR_SUBNET
Network= 192.168.0.0
Netmask= 255.255.255.0
[Net-dimitri]
ID-type= IPV4_ADDR_SUBNET
Network= 10.10.10.0
Netmask= 255.255.255.0
# Main mode descriptions
[Default-main-mode]
DOI= IPSEC
EXCHANGE_TYPE= ID_PROT
Transforms= DES-SHA
# Main mode transforms
######################
# DES
[DES-MD5]
ENCRYPTION_ALGORITHM= DES_CBC
HASH_ALGORITHM= MD5
AUTHENTICATION_METHOD= PRE_SHARED
GROUP_DESCRIPTION= MODP_768
Life= LIFE_600_SECS,LIFE_1000_KB
[DES-MD5-NO-VOL-LIFE]
ENCRYPTION_ALGORITHM= DES_CBC
HASH_ALGORITHM= MD5
AUTHENTICATION_METHOD= PRE_SHARED
GROUP_DESCRIPTION= MODP_768
Life= LIFE_600_SECS
[DES-SHA]
ENCRYPTION_ALGORITHM= DES_CBC
HASH_ALGORITHM= SHA
AUTHENTICATION_METHOD= PRE_SHARED
GROUP_DESCRIPTION= MODP_768
Life= LIFE_600_SECS,LIFE_1000_KB
# 3DES
[3DES-SHA]
ENCRYPTION_ALGORITHM= 3DES_CBC
HASH_ALGORITHM= SHA
AUTHENTICATION_METHOD= PRE_SHARED
GROUP_DESCRIPTION= MODP_1024
Life= LIFE_3600_SECS
# Blowfish
[BLF-SHA-M1024]
ENCRYPTION_ALGORITHM= BLOWFISH_CBC
KEY_LENGTH= 128,96:192
HASH_ALGORITHM= SHA
AUTHENTICATION_METHOD= PRE_SHARED
GROUP_DESCRIPTION= MODP_1024
Life= LIFE_600_SECS,LIFE_1000_KB
[BLF-SHA-EC155]
ENCRYPTION_ALGORITHM= BLOWFISH_CBC
KEY_LENGTH= 128,96:192
HASH_ALGORITHM= SHA
AUTHENTICATION_METHOD= PRE_SHARED
GROUP_DESCRIPTION= EC2N_155
Life= LIFE_600_SECS,LIFE_1000_KB
[BLF-MD5-EC155]
ENCRYPTION_ALGORITHM= BLOWFISH_CBC
KEY_LENGTH= 128,96:192
HASH_ALGORITHM= MD5
AUTHENTICATION_METHOD= PRE_SHARED
GROUP_DESCRIPTION= EC2N_155
Life= LIFE_600_SECS,LIFE_1000_KB
[BLF-SHA-EC185]
ENCRYPTION_ALGORITHM= BLOWFISH_CBC
KEY_LENGTH= 128,96:192
HASH_ALGORITHM= SHA
AUTHENTICATION_METHOD= PRE_SHARED
GROUP_DESCRIPTION= EC2N_185
Life= LIFE_600_SECS,LIFE_1000_KB
[3DES-MD5]
ENCRYPTION_ALGORITHM= 3DES_CBC
HASH_ALGORITHM= MD5
AUTHENTICATION_METHOD= PRE_SHARED
GROUP_DESCRIPTION= MODP_1024
Life= LIFE_1_DAY
[CAST-SHA]
ENCRYPTION_ALGORITHM= CAST_CBC
HASH_ALGORITHM= SHA
AUTHENTICATION_METHOD= PRE_SHARED
GROUP_DESCRIPTION= MODP_1536
Life= LIFE_1_DAY
# Quick mode description
########################
[Default-quick-mode]
DOI= IPSEC
EXCHANGE_TYPE= QUICK_MODE
Suites=
QM-ESP-3DES-SHA-PFS-SUITE,QM-ESP-3DES-SHA-PFS-SUITE,QM-ESP-DES-MD5-PFS-SUITE
[Greenbow-quick-mode]
DOI= IPSEC
EXCHANGE_TYPE= QUICK_MODE
Suites= QM-ESP-DES-SHA-PFS-SUITE
# Quick mode protection suites
##############################
# DES
[QM-ESP-DES-SUITE]
Protocols= QM-ESP-DES
[QM-ESP-DES-PFS-SUITE]
Protocols= QM-ESP-DES-PFS
[QM-ESP-DES-MD5-SUITE]
Protocols= QM-ESP-DES-MD5
[QM-ESP-DES-MD5-PFS-SUITE]
Protocols= QM-ESP-DES-MD5-PFS
[QM-ESP-DES-SHA-SUITE]
Protocols= QM-ESP-DES-SHA
[QM-ESP-DES-SHA-PFS-SUITE]
Protocols= QM-ESP-DES-SHA-PFS
# 3DES
[QM-ESP-3DES-SHA-SUITE]
Protocols= QM-ESP-3DES-SHA
[QM-ESP-3DES-SHA-PFS-SUITE]
Protocols= QM-ESP-3DES-SHA-PFS
# AH
[QM-AH-MD5-SUITE]
Protocols= QM-AH-MD5
[QM-AH-MD5-PFS-SUITE]
Protocols= QM-AH-MD5-PFS
# AH + ESP
[QM-AH-MD5-ESP-DES-SUITE]
Protocols= QM-AH-MD5,QM-ESP-DES
[QM-AH-MD5-ESP-DES-MD5-SUITE]
Protocols= QM-AH-MD5,QM-ESP-DES-MD5
[QM-ESP-DES-MD5-AH-MD5-SUITE]
Protocols= QM-ESP-DES-MD5,QM-AH-MD5
# Quick mode protocols
# DES
[QM-ESP-DES]
PROTOCOL_ID= IPSEC_ESP
Transforms= QM-ESP-DES-XF
[QM-ESP-DES-MD5]
PROTOCOL_ID= IPSEC_ESP
Transforms= QM-ESP-DES-MD5-XF
[QM-ESP-DES-MD5-PFS]
PROTOCOL_ID= IPSEC_ESP
Transforms= QM-ESP-DES-MD5-PFS-XF
[QM-ESP-DES-SHA]
PROTOCOL_ID= IPSEC_ESP
Transforms= QM-ESP-DES-SHA-XF
# 3DES
[QM-ESP-3DES-SHA]
PROTOCOL_ID= IPSEC_ESP
Transforms= QM-ESP-3DES-SHA-XF
[QM-ESP-3DES-SHA-PFS]
PROTOCOL_ID= IPSEC_ESP
Transforms= QM-ESP-3DES-SHA-PFS-XF
[QM-ESP-3DES-SHA-TRP]
PROTOCOL_ID= IPSEC_ESP
Transforms= QM-ESP-3DES-SHA-TRP-XF
# AH MD5
[QM-AH-MD5]
PROTOCOL_ID= IPSEC_AH
Transforms= QM-AH-MD5-XF
[QM-AH-MD5-PFS]
PROTOCOL_ID= IPSEC_AH
Transforms= QM-AH-MD5-PFS-XF
# Quick mode transforms
# ESP DES+MD5
[QM-ESP-DES-XF]
TRANSFORM_ID= DES
ENCAPSULATION_MODE= TUNNEL
Life= LIFE_600_SECS
[QM-ESP-DES-MD5-XF]
TRANSFORM_ID= DES
ENCAPSULATION_MODE= TUNNEL
AUTHENTICATION_ALGORITHM= HMAC_MD5
Life= LIFE_600_SECS
[QM-ESP-DES-MD5-PFS-XF]
TRANSFORM_ID= DES
ENCAPSULATION_MODE= TUNNEL
GROUP_DESCRIPTION= MODP_1024
AUTHENTICATION_ALGORITHM= HMAC_MD5
Life= LIFE_600_SECS
[QM-ESP-DES-SHA-XF]
TRANSFORM_ID= DES
ENCAPSULATION_MODE= TUNNEL
AUTHENTICATION_ALGORITHM= HMAC_SHA
Life= LIFE_600_SECS
# 3DES
[QM-ESP-3DES-SHA-XF]
TRANSFORM_ID= 3DES
ENCAPSULATION_MODE= TUNNEL
AUTHENTICATION_ALGORITHM= HMAC_SHA
Life= LIFE_600_SECS
[QM-ESP-3DES-SHA-PFS-XF]
TRANSFORM_ID= 3DES
ENCAPSULATION_MODE= TUNNEL
AUTHENTICATION_ALGORITHM= HMAC_SHA
GROUP_DESCRIPTION= MODP_1024
Life= LIFE_600_SECS
[QM-ESP-3DES-SHA-TRP-XF]
TRANSFORM_ID= 3DES
ENCAPSULATION_MODE= TRANSPORT
AUTHENTICATION_ALGORITHM= HMAC_SHA
Life= LIFE_600_SECS
# AH
[QM-AH-MD5-XF]
TRANSFORM_ID= MD5
ENCAPSULATION_MODE= TUNNEL
AUTHENTICATION_ALGORITHM= HMAC_MD5
Life= LIFE_600_SECS
[QM-AH-MD5-PFS-XF]
TRANSFORM_ID= MD5
ENCAPSULATION_MODE= TUNNEL
GROUP_DESCRIPTION= MODP_768
Life= LIFE_600_SECS
[LIFE_600_SECS]
LIFE_TYPE= SECONDS
LIFE_DURATION= 600,450:720
[LIFE_3600_SECS]
LIFE_TYPE= SECONDS
LIFE_DURATION= 3600,1800:7200
[LIFE_1000_KB]
LIFE_TYPE= KILOBYTES
LIFE_DURATION= 1000,768:1536
[LIFE_32_MB]
LIFE_TYPE= KILOBYTES
LIFE_DURATION= 32768,16384:65536
[LIFE_4.5_GB]
LIFE_TYPE= KILOBYTES
LIFE_DURATION= 4608000,4096000:8192000
# Certificates stored in PEM format
[X509-certificates]
CA-directory= /etc/isakmpd/ca/
Cert-directory= /etc/isakmpd/certs/
#Accept-self-signed= defined
Private-key= /etc/isakmpd/private/local.key
# isakmpd -d -DA=90
133556.609954 Default log_debug_cmd: log level changed from 0 to 90 for
class 0 [priv]
133556.611022 Default log_debug_cmd: log level changed from 0 to 90 for
class 1 [priv]
133556.611601 Default log_debug_cmd: log level changed from 0 to 90 for
class 2 [priv]
133556.611999 Default log_debug_cmd: log level changed from 0 to 90 for
class 3 [priv]
133556.612530 Default log_debug_cmd: log level changed from 0 to 90 for
class 4 [priv]
133556.612930 Default log_debug_cmd: log level changed from 0 to 90 for
class 5 [priv]
133556.613439 Default log_debug_cmd: log level changed from 0 to 90 for
class 6 [priv]
133556.613828 Default log_debug_cmd: log level changed from 0 to 90 for
class 7 [priv]
133556.614337 Default log_debug_cmd: log level changed from 0 to 90 for
class 8 [priv]
133556.614729 Default log_debug_cmd: log level changed from 0 to 90 for
class 9 [priv]
133556.615236 Default log_debug_cmd: log level changed from 0 to 90 for
class 10 [priv]
133556.619066 Misc 10 monitor_init: privileges dropped for child process
133556.620433 Misc 80 monitor_loop: MONITOR_PFKEY_OPEN [priv]
133556.621315 Sdep 80 pf_key_v2_write: iov[0]: [priv]
133556.622056 Sdep 80 02070002 02000000 01000000 bd4c0000 [priv]
133556.622772 Sdep 80 pf_key_v2_read: msg: [priv]
133556.623459 Sdep 80 02070002 15000000 01000000 bd4c0000 07000e00 00000000
0300 a000 a0000000 [priv]
133556.623988 Sdep 80 02008000 80000000 0800a000 a0000000 05000001 00010000
0600 8001 80010000 [priv]
133556.624561 Sdep 80 07000002 00020000 09000f00 00000000 0b000000 00000000
0240 4000 40000000 [priv]
133556.625078 Sdep 80 0340c000 c0000000 07402800 c0010000 06402800 80000000
f940 5000 50000000 [priv]
133556.625645 Sdep 80 0c808000 00010000 0d80a000 20010000 03001e00 00000000
0200 0000 00000000 [priv]
133556.626110 Sdep 80 03000000 00000000 [priv]
133556.626635 Sdep 80 pf_key_v2_write: iov[0]: [priv]
133556.627127 Sdep 80 02070001 02000000 02000000 bd4c0000 [priv]
133556.627732 Sdep 80 pf_key_v2_read: msg: [priv]
133556.628308 Sdep 80 02070001 15000000 02000000 bd4c0000 07000e00 00000000
0300 a000 a0000000 [priv]
133556.628887 Sdep 80 02008000 80000000 0800a000 a0000000 05000001 00010000
0600 8001 80010000 [priv]
133556.629411 Sdep 80 07000002 00020000 09000f00 00000000 0b000000 00000000
0240 4000 40000000 [priv]
133556.629977 Sdep 80 0340c000 c0000000 07402800 c0010000 06402800 80000000
f940 5000 50000000 [priv]
133556.630520 Sdep 80 0c808000 00010000 0d80a000 20010000 03001e00 00000000
0200 0000 00000000 [priv]
133556.630942 Sdep 80 03000000 00000000 [priv]
133556.631500 Sdep 80 pf_key_v2_write: iov[0]: [priv]
133556.632040 Sdep 80 02070009 02000000 03000000 bd4c0000 [priv]
133556.632582 Sdep 80 pf_key_v2_read: msg: [priv]
133556.633193 Sdep 80 02070009 15000000 03000000 bd4c0000 07000e00 00000000
0300 a000 a0000000 [priv]
133556.633720 Sdep 80 02008000 80000000 0800a000 a0000000 05000001 00010000
0600 8001 80010000 [priv]
133556.634289 Sdep 80 07000002 00020000 09000f00 00000000 0b000000 00000000
0240 4000 40000000 [priv]
133556.634810 Sdep 80 0340c000 c0000000 07402800 c0010000 06402800 80000000
f940 5000 50000000 [priv]
133556.635373 Sdep 80 0c808000 00010000 0d80a000 20010000 03001e00 00000000
0200 0000 00000000 [priv]
133556.635857 Sdep 80 03000000 00000000 [priv]
133557.370555 Timr 10 timer_add_event: event connection_checker(0x89f40740)
adde d last, expiration in 0s
133557.371488 Misc 60 connection_record_passive: passive connection
"daim-dimitr i" added
133557.372182 Plcy 30 policy_init: initializing
133557.373277 Cryp 40 x509_read_from_dir: reading certs from
/etc/isakmpd/ca/
133557.373974 Misc 80 monitor_loop: MONITOR_REQ_READDIR [priv]
133557.374879 Cryp 40 x509_read_from_dir: reading certs from
/etc/isakmpd/certs/
133557.375553 Misc 80 monitor_loop: MONITOR_REQ_READDIR [priv]
133557.376319 Cryp 40 x509_read_crls_from_dir: reading CRLs from
/etc/isakmpd/cr ls/
133557.376969 Misc 80 monitor_loop: MONITOR_REQ_READDIR [priv]
133557.377977 Trpt 90 virtual_bind_if: interface lo0 family <unknown>
address <i nvalid>
133557.378656 Trpt 90 virtual_bind_if: interface lo0 family v6 address ::1
133557.379129 Trpt 40 virtual_listen_lookup: no match
133557.379815 Trpt 90 virtual_bind_if: interface lo0 family v6 address
fe80:6::1
133557.380343 Trpt 40 virtual_listen_lookup: no match
133557.381000 Trpt 90 virtual_bind_if: interface lo0 family v4 address
127.0.0.1
133557.381503 Trpt 40 virtual_listen_lookup: no match
133557.382136 Trpt 90 virtual_bind_if: interface xl0 family <unknown>
address <i nvalid>
133557.382671 Trpt 90 virtual_bind_if: interface xl0 family v6 address
fe80:1::2 50:daff:fe4a:a8e0
133557.383201 Trpt 40 virtual_listen_lookup: no match
133557.383833 Trpt 90 virtual_bind_if: interface xl0 family v6 address
2001:888: 1f2b::1
133557.384415 Trpt 40 virtual_listen_lookup: no match
133557.385033 Trpt 90 virtual_bind_if: interface xl0 family v6 address
2001:888: 1f2b::
133557.385514 Trpt 40 virtual_listen_lookup: no match
133557.386237 Trpt 90 virtual_bind_if: interface xl0 family v4 address
192.168.0 .1
133557.386715 Trpt 40 virtual_listen_lookup: no match
133557.387378 Trpt 90 virtual_bind_if: interface xl1 family <unknown>
address <i nvalid>
133557.387984 Trpt 90 virtual_bind_if: interface xl1 family v6 address
fe80:2::2 50:daff:fe44:e9ee
133557.388466 Trpt 40 virtual_listen_lookup: no match
133557.389145 Trpt 90 virtual_bind_if: interface xl1 family v4 address
213.84.21 2.27
133557.389658 Trpt 40 virtual_listen_lookup: no match
133557.390421 Misc 80 monitor_loop: MONITOR_SETSOCKOPT [priv]
133557.391154 Misc 80 monitor_loop: MONITOR_SETSOCKOPT [priv]
133557.391906 Misc 80 monitor_loop: MONITOR_SETSOCKOPT [priv]
133557.392566 Misc 80 monitor_loop: MONITOR_SETSOCKOPT [priv]
133557.393305 Misc 80 monitor_loop: MONITOR_BIND [priv]
133557.394180 Misc 20 udp_make: transport 0x801c6b40 socket 7 ip
213.84.212.27 p ort 500
133557.394699 Trpt 70 transport_setup: added 0x801c6b40 to transport list
133557.395357 Misc 80 monitor_loop: MONITOR_SETSOCKOPT [priv]
133557.396129 Misc 80 monitor_loop: MONITOR_SETSOCKOPT [priv]
133557.396793 Misc 80 monitor_loop: MONITOR_SETSOCKOPT [priv]
133557.397535 Misc 80 monitor_loop: MONITOR_SETSOCKOPT [priv]
133557.398202 Misc 80 monitor_loop: MONITOR_BIND [priv]
133557.398949 Misc 20 udp_encap_make: transport 0x801c6b80 socket 8 ip
213.84.21 2.27 port 4500
133557.399458 Trpt 70 transport_setup: added 0x801c6b80 to transport list
133557.399859 Trpt 70 transport_setup: virtual transport 0x801c6b00
133557.400493 Trpt 90 virtual_bind_if: interface pflog0 family <unknown>
address <invalid>
133557.400910 Trpt 90 virtual_bind_if: interface pfsync0 family <unknown>
addres s <invalid>
133557.401462 Trpt 90 virtual_bind_if: interface enc0 family <unknown>
address < invalid>
133557.401880 Trpt 90 virtual_bind_if: interface gif0 family <unknown>
address < invalid>
133557.402437 Trpt 90 virtual_bind_if: interface gif0 family v6 address
fe80:7:: 250:daff:fe4a:a8e0
133557.402966 Trpt 40 virtual_listen_lookup: no match
133557.403597 Trpt 90 virtual_bind_if: interface gif0 family v6 address
2001:888 :10:f2b::2
133557.404185 Trpt 40 virtual_listen_lookup: no match
133557.404815 Trpt 50 virtual_init: not binding ISAKMP port(s) to ADDR_ANY
133557.405292 Cryp 60 hash_get: requested algorithm 0
133557.405840 Exch 50 nat_t_setup_hashes: MD5("draft-ietf-ipsec-nat-t-ike-02
") (16 bytes)
133557.406253 Exch 50 nat_t_setup_hashes:
133557.406807 Exch 50 90cb8091 3ebb696e 086381b5 ec427b1f
133557.407302 Exch 50 nat_t_setup_hashes:
MD5("draft-ietf-ipsec-nat-t-ike-03") ( 16 bytes)
133557.407747 Exch 50 nat_t_setup_hashes:
133557.408254 Exch 50 7d9419a6 5310ca6f 2c179d92 15529d56
133557.408695 Exch 50 nat_t_setup_hashes: MD5("RFC 3947") (16 bytes)
133557.409101 Exch 50 nat_t_setup_hashes:
133557.409671 Exch 50 4a131c81 07035845 5c5728f2 0e95452f
133557.410225 Misc 80 monitor_loop: MONITOR_UI_INIT [priv]
133557.422570 Timr 10 timer_handle_expirations: event
connection_checker(0x89f40 740)
133557.423348 Misc 80 monitor_loop: MONITOR_INIT_DONE [priv]
133557.423898 Timr 10 timer_add_event: event connection_checker(0x89f40740)
adde d last, expiration in 60s
133557.424490 SA 90 sa_find: no SA matched query
133557.424978 Sdep 70 pf_key_v2_connection_check: SA for daim-dimitri
missing
133557.425554 SA 90 sa_find: no SA matched query
133557.426179 Trpt 70 transport_setup: added 0x801c6bc0 to transport list
133557.426814 Trpt 70 transport_setup: added 0x801c6c00 to transport list
133557.427293 Trpt 70 transport_setup: virtual transport 0x801c6c40
133557.427959 Timr 10 timer_add_event: event exchange_free_aux(0x7efe5800)
added last, expiration in 120s
133557.428496 Cryp 60 hash_get: requested algorithm 1
133557.429392 Exch 10 exchange_establish_p1: 0x7efe5800 dimitri
Default-main-mod e policy initiator phase 1 doi 1 exchange 2 step 0
133557.429935 Exch 10 exchange_establish_p1: icookie 73a01df8a84cc4a1
rcookie 00 00000000000000
133557.430389 Exch 10 exchange_establish_p1: msgid 00000000
133557.430932 Mesg 90 message_alloc: allocated 0x8ac7c400
133557.431486 SA 80 sa_reference: SA 0x7efe5900 now has 1 references
133557.431946 SA 70 sa_enter: SA 0x7efe5900 added to SA list
133557.432812 SA 80 sa_reference: SA 0x7efe5900 now has 2 references
133557.433235 SA 60 sa_create: sa 0x7efe5900 phase 1 added to exchange
0x7efe5 800 (dimitri)
133557.433655 SA 80 sa_reference: SA 0x7efe5900 now has 3 references
133557.434435 Misc 70 attribute_set_constant: no PRF in the DES-SHA section
133557.435052 Cryp 60 hash_get: requested algorithm 1
133557.435614 Exch 90 exchange_validate: checking for required SA
133557.436077 Mesg 70 message_send: message 0x8ac7c400
133557.436641 Mesg 70 ICOOKIE: 0x73a01df8a84cc4a1
133557.437178 Mesg 70 RCOOKIE: 0x0000000000000000
133557.437632 Mesg 70 NEXT_PAYLOAD: SA
133557.438043 Mesg 70 VERSION: 16
133557.438570 Mesg 70 EXCH_TYPE: ID_PROT
133557.438979 Mesg 70 FLAGS: [ ]
133557.439526 Mesg 70 MESSAGE_ID: 0x00000000
133557.440056 Mesg 70 LENGTH: 168
133557.440615 Mesg 70 message_send: 73a01df8 a84cc4a1 00000000 00000000
01100200 00000000 000000a8 0d00003c
133557.441200 Mesg 70 message_send: 00000001 00000001 00000030 01010001
00000028 00010000 80010001 80020002
133557.441730 Mesg 70 message_send: 80030001 80040001 800b0001 800c0258
800b0002 800c03e8 0d000014 90cb8091
133557.442289 Mesg 70 message_send: 3ebb696e 086381b5 ec427b1f 0d000014
7d9419a6 5310ca6f 2c179d92 15529d56
133557.442808 Mesg 70 message_send: 0d000014 4a131c81 07035845 5c5728f2
0e95452f 00000014 afcad713 68a1f1c9
133557.443319 Mesg 70 message_send: 6b8696fc 77570100
133557.443759 Exch 40 exchange_run: exchange 0x7efe5800 finished step 0,
advanci ng...
133557.444169 Exch 90 exchange_lookup_by_name: dimitri == dimitri && 1 == 1?
133557.444928 Trpt 30 transport_send_messages: message 0x8ac7c400 scheduled
for retransmission 1 in 7 secs
133557.445436 Timr 10 timer_add_event: event message_send_expire(0x8ac7c400)
add ed before connection_checker(0x89f40740), expiration in 7s
133557.603370 Trpt 70 transport_setup: added 0x801c6e00 to transport list
133557.604043 Trpt 70 transport_setup: added 0x801c6e40 to transport list
133557.604740 Trpt 50 virtual_clone: old 0x801c6b00 new 0x801c6dc0 (main is
0x80 1c6e00)
133557.605332 Trpt 70 transport_setup: virtual transport 0x801c6dc0
133557.605846 Mesg 90 message_alloc: allocated 0x8ac7c500
133557.606277 Mesg 70 message_recv: message 0x8ac7c500
133557.606832 Mesg 70 ICOOKIE: 0x73a01df8a84cc4a1
133557.607349 Mesg 70 RCOOKIE: 0x8b5c39b4bca3512c
133557.607808 Mesg 70 NEXT_PAYLOAD: SA
133557.608326 Mesg 70 VERSION: 16
133557.608775 Mesg 70 EXCH_TYPE: ID_PROT
133557.609179 Mesg 70 FLAGS: [ ]
133557.609960 Mesg 70 MESSAGE_ID: 0x00000000
133557.610418 Mesg 70 LENGTH: 168
133557.611574 Mesg 70 message_recv: 73a01df8 a84cc4a1 8b5c39b4 bca3512c
01100200 00000000 000000a8 0d00003c
133557.612183 Mesg 70 message_recv: 00000001 00000001 00000030 01010001
00000028 00010000 80010001 80020002
133557.612741 Mesg 70 message_recv: 80030001 80040001 800b0001 800c0258
800b0002 800c03e8 0d000014 90cb8091
133557.613310 Mesg 70 message_recv: 3ebb696e 086381b5 ec427b1f 0d000014
7d9419a6 5310ca6f 2c179d92 15529d56
133557.613832 Mesg 70 message_recv: 0d000014 4a131c81 07035845 5c5728f2
0e95452f 00000014 afcad713 68a1f1c9
133557.614265 Mesg 70 message_recv: 6b8696fc 77570100
133557.614789 SA 70 sa_remove: SA 0x7efe5900 removed from SA list
133557.615200 SA 80 sa_release: SA 0x7efe5900 had 3 references
133557.615728 SA 80 sa_reference: SA 0x7efe5900 now has 3 references
133557.616124 SA 70 sa_enter: SA 0x7efe5900 added to SA list
133557.616644 Mesg 90 message_check_duplicate: last_received 0x0
133557.617178 Mesg 20 message_free: freeing 0x8ac7c400
133557.617671 Timr 10 timer_remove_event: removing event
message_send_expire(0x8 ac7c400)
133557.618206 Trpt 70 transport_release: freeing 0x801c6c40
133557.618680 Trpt 90 udp_remove: removed transport 0x801c6c00
133557.619205 Trpt 90 udp_remove: removed transport 0x801c6bc0
133557.619655 Trpt 90 virtual_remove: removed 0x801c6c40
133557.620196 SA 80 sa_release: SA 0x7efe5900 had 3 references
133557.620696 Mesg 50 message_parse_payloads: offset 28 payload SA
133557.621132 Mesg 50 message_parse_payloads: offset 88 payload VENDOR
133557.621676 Mesg 50 message_parse_payloads: offset 108 payload VENDOR
133557.622088 Mesg 50 message_parse_payloads: offset 128 payload VENDOR
133557.622622 Mesg 50 message_parse_payloads: offset 148 payload VENDOR
133557.623040 Mesg 60 message_validate_payloads: payload SA at 0x7efe5a1c of
mes sage 0x8ac7c500
133557.623589 Mesg 70 DOI: 1
133557.624079 SA 80 sa_reference: SA 0x7efe5900 now has 3 references
133557.624531 Mesg 50 message_parse_payloads: offset 40 payload PROPOSAL
133557.624947 Mesg 50 message_parse_payloads: offset 48 payload TRANSFORM
133557.625474 Mesg 50 Transform 0's attributes
133557.625972 Mesg 50 Attribute ENCRYPTION_ALGORITHM value 1
133557.626417 Mesg 50 Attribute HASH_ALGORITHM value 2
133557.626902 Mesg 50 Attribute AUTHENTICATION_METHOD value 1
133557.627353 Mesg 50 Attribute GROUP_DESCRIPTION value 1
133557.627752 Mesg 50 Attribute LIFE_TYPE value 1
133557.628314 Mesg 50 Attribute LIFE_DURATION value 600
133557.628721 Mesg 50 Attribute LIFE_TYPE value 2
133557.629375 Mesg 50 Attribute LIFE_DURATION value 1000
133557.629873 Mesg 60 message_validate_payloads: payload PROPOSAL at
0x7efe5a28 of message 0x8ac7c500
133557.630363 Mesg 70 NO: 1
133557.630852 Mesg 70 PROTO: ISAKMP
133557.631303 Mesg 70 SPI_SZ: 0
133557.631889 Mesg 70 NTRANSFORMS: 1
133557.632372 Mesg 60 message_validate_payloads: payload TRANSFORM at
0x7efe5a30 of message 0x8ac7c500
133557.632800 Mesg 70 NO: 0
133557.633332 Mesg 70 ID: 1
133557.633836 Mesg 60 message_validate_payloads: payload VENDOR at
0x7efe5a58 of message 0x8ac7c500
133557.634297 Exch 10 nat_t_check_vendor_payload: NAT-T capable peer
detected
133557.634717 Mesg 60 message_validate_payloads: payload VENDOR at
0x7efe5a6c of message 0x8ac7c500
133557.635257 Exch 10 nat_t_check_vendor_payload: NAT-T capable peer
detected
133557.635687 Mesg 60 message_validate_payloads: payload VENDOR at
0x7efe5a80 of message 0x8ac7c500
133557.636249 Exch 10 nat_t_check_vendor_payload: NAT-T capable peer
detected
133557.636671 Mesg 60 message_validate_payloads: payload VENDOR at
0x7efe5a94 of message 0x8ac7c500
133557.637197 Exch 10 dpd_check_vendor_payload: DPD capable peer detected
133557.637747 Exch 90 exchange_validate: checking for required SA
133557.638218 Cryp 60 hash_get: requested algorithm 1
133557.638713 Negt 30 message_negotiate_sa: transform 0 proto 1 proposal 1
ok
133557.639179 SA 80 sa_validate_proto_xf: attr_map xf 0x82dfb920 proto
0x801c6 cc0 pa 0x89f40930 found 0
133557.639740 SA 80 sa_validate_proto_xf: attr_map xf 0x82dfb920 proto
0x801c6 cc0 pa 0x89f40930 found 0
133557.642344 Mesg 20 message_free: freeing 0x8ac7c500
133557.642921 SA 80 sa_release: SA 0x7efe5900 had 3 references
133601.421022 Trpt 70 transport_setup: added 0x801c6c00 to transport list
133601.421620 Trpt 70 transport_setup: added 0x801c6c40 to transport list
133601.422191 Trpt 50 virtual_clone: old 0x801c6b00 new 0x801c6bc0 (main is
0x80 1c6c00)
133601.422734 Trpt 70 transport_setup: virtual transport 0x801c6bc0
133601.423245 Mesg 90 message_alloc: allocated 0x8ac7c400
133601.423700 Mesg 70 message_recv: message 0x8ac7c400
133601.424211 Mesg 70 ICOOKIE: 0xe170aaa29960bc52
133601.424719 Mesg 70 RCOOKIE: 0x0000000000000000
133601.425173 Mesg 70 NEXT_PAYLOAD: SA
133601.425740 Mesg 70 VERSION: 16
133601.426158 Mesg 70 EXCH_TYPE: ID_PROT
133601.426691 Mesg 70 FLAGS: [ ]
133601.427202 Mesg 70 MESSAGE_ID: 0x00000000
133601.427645 Mesg 70 LENGTH: 168
133601.428220 Mesg 70 message_recv: e170aaa2 9960bc52 00000000 00000000
01100200 00000000 000000a8 0d00003c
133601.428755 Mesg 70 message_recv: 00000001 00000001 00000030 01010001
00000028 00010000 80010001 80020002
133601.429325 Mesg 70 message_recv: 80030001 80040001 800b0001 800c0258
800b0002 800c03e8 0d000014 90cb8091
133601.429843 Mesg 70 message_recv: 3ebb696e 086381b5 ec427b1f 0d000014
7d9419a6 5310ca6f 2c179d92 15529d56
133601.430423 Mesg 70 message_recv: 0d000014 4a131c81 07035845 5c5728f2
0e95452f 00000014 afcad713 68a1f1c9
133601.430514 Mesg 70 message_recv: 6b8696fc 77570100
133601.430563 SA 90 sa_find: no SA matched query
133601.430622 Mesg 50 message_parse_payloads: offset 28 payload SA
133601.430673 Mesg 50 message_parse_payloads: offset 88 payload VENDOR
133601.430719 Mesg 50 message_parse_payloads: offset 108 payload VENDOR
133601.430764 Mesg 50 message_parse_payloads: offset 128 payload VENDOR
133601.430808 Mesg 50 message_parse_payloads: offset 148 payload VENDOR
133601.430856 Mesg 60 message_validate_payloads: payload SA at 0x7efe5a1c of
mes sage 0x8ac7c400
133601.430905 Mesg 70 DOI: 1
133601.431000 Exch 90 exchange_lookup_active: dimitri == dimitri && 1 == 1?
133601.431047 Exch 80 exchange_lookup_active: avoided early (pre-step 1)
exchang e 0x7efe5800
133601.431210 Timr 10 timer_add_event: event exchange_free_aux(0x7efe5b00)
added last, expiration in 120s
133601.431273 Cryp 60 hash_get: requested algorithm 1
133601.431625 Exch 10 exchange_setup_p1: 0x7efe5b00 dimitri
Default-main-mode po licy responder phase 1 doi 1 exchange 2 step 0
133601.431688 Exch 10 exchange_setup_p1: icookie e170aaa29960bc52 rcookie
c65852 06f35c0f3f
133601.431730 Exch 10 exchange_setup_p1: msgid 00000000
133601.431782 SA 80 sa_reference: SA 0x7efe5c00 now has 1 references
133601.431822 SA 70 sa_enter: SA 0x7efe5c00 added to SA list
133601.431863 SA 80 sa_reference: SA 0x7efe5c00 now has 2 references
133601.431908 SA 60 sa_create: sa 0x7efe5c00 phase 1 added to exchange
0x7efe5 b00 (dimitri)
133601.431950 SA 80 sa_reference: SA 0x7efe5c00 now has 3 references
133601.431997 Mesg 50 message_parse_payloads: offset 40 payload PROPOSAL
133601.432044 Mesg 50 message_parse_payloads: offset 48 payload TRANSFORM
133601.432086 Mesg 50 Transform 0's attributes
133601.432131 Mesg 50 Attribute ENCRYPTION_ALGORITHM value 1
133601.432174 Mesg 50 Attribute HASH_ALGORITHM value 2
133601.432216 Mesg 50 Attribute AUTHENTICATION_METHOD value 1
133601.432985 Mesg 50 Attribute GROUP_DESCRIPTION value 1
133601.433048 Mesg 50 Attribute LIFE_TYPE value 1
133601.433091 Mesg 50 Attribute LIFE_DURATION value 600
133601.433133 Mesg 50 Attribute LIFE_TYPE value 2
133601.433176 Mesg 50 Attribute LIFE_DURATION value 1000
133601.433226 Mesg 60 message_validate_payloads: payload PROPOSAL at
0x7efe5a28 of message 0x8ac7c400
133601.433277 Mesg 70 NO: 1
133601.433321 Mesg 70 PROTO: ISAKMP
133601.433363 Mesg 70 SPI_SZ: 0
133601.433404 Mesg 70 NTRANSFORMS: 1
133601.433450 Mesg 60 message_validate_payloads: payload TRANSFORM at
0x7efe5a30 of message 0x8ac7c400
133601.433496 Mesg 70 NO: 0
133601.433537 Mesg 70 ID: 1
133601.433589 Mesg 60 message_validate_payloads: payload VENDOR at
0x7efe5a58 of message 0x8ac7c400
133601.433636 Exch 10 nat_t_check_vendor_payload: NAT-T capable peer
detected
133601.433683 Mesg 60 message_validate_payloads: payload VENDOR at
0x7efe5a6c of message 0x8ac7c400
133601.433726 Exch 10 nat_t_check_vendor_payload: NAT-T capable peer
detected
133601.434330 Mesg 60 message_validate_payloads: payload VENDOR at
0x7efe5a80 of message 0x8ac7c400
133601.434394 Exch 10 nat_t_check_vendor_payload: NAT-T capable peer
detected
133601.434440 Mesg 60 message_validate_payloads: payload VENDOR at
0x7efe5a94 of message 0x8ac7c400
133601.434482 Exch 10 dpd_check_vendor_payload: DPD capable peer detected
133601.434579 Exch 90 exchange_validate: checking for required SA
133601.434626 Misc 30 ipsec_responder: phase 1 exchange 2 step 0
133601.434673 Cryp 60 hash_get: requested algorithm 1
133601.434720 Negt 30 message_negotiate_sa: transform 0 proto 1 proposal 1
ok
133601.434932 SA 80 sa_add_transform: proto 0x801c6e80 no 1 proto 1 chosen
0x8 2dfb920 sa 0x7efe5c00 id 1
133601.435412 Negt 20 ike_phase_1_validate_prop: success
133601.435473 Negt 30 message_negotiate_sa: proposal 1 succeeded
133601.435517 Misc 20 ipsec_decode_transform: transform 0 chosen
133601.435561 Cryp 60 hash_get: requested algorithm 1
133601.435625 Misc 70 group_get: returning 0x801c6ec0 of group 1
133601.436319 Exch 40 exchange_run: exchange 0x7efe5b00 finished step 0,
advanci ng...
133601.436418 Mesg 90 message_alloc: allocated 0x8ac7c580
133601.436463 SA 80 sa_reference: SA 0x7efe5c00 now has 4 references
133601.436510 Misc 30 ipsec_responder: phase 1 exchange 2 step 1
133601.436611 Exch 90 exchange_validate: checking for required SA
133601.436662 Mesg 70 message_send: message 0x8ac7c580
133601.436723 Mesg 70 ICOOKIE: 0xe170aaa29960bc52
133601.436782 Mesg 70 RCOOKIE: 0xc6585206f35c0f3f
133601.436824 Mesg 70 NEXT_PAYLOAD: SA
133601.436875 Mesg 70 VERSION: 16
133601.436917 Mesg 70 EXCH_TYPE: ID_PROT
133601.436958 Mesg 70 FLAGS: [ ]
133601.437008 Mesg 70 MESSAGE_ID: 0x00000000
133601.437051 Mesg 70 LENGTH: 168
133601.437165 Mesg 70 message_send: e170aaa2 9960bc52 c6585206 f35c0f3f
01100200 00000000 000000a8 0d00003c
133601.437287 Mesg 70 message_send: 00000001 00000001 00000030 01010001
00000028 00010000 80010001 80020002
133601.437405 Mesg 70 message_send: 80030001 80040001 800b0001 800c0258
800b0002 800c03e8 0d000014 90cb8091
133601.438342 Mesg 70 message_send: 3ebb696e 086381b5 ec427b1f 0d000014
7d9419a6 5310ca6f 2c179d92 15529d56
133601.438478 Mesg 70 message_send: 0d000014 4a131c81 07035845 5c5728f2
0e95452f 00000014 afcad713 68a1f1c9
133601.438539 Mesg 70 message_send: 6b8696fc 77570100
133601.438584 Exch 40 exchange_run: exchange 0x7efe5b00 finished step 1,
advanci ng...
133601.438871 Trpt 30 transport_send_messages: message 0x8ac7c580 scheduled
for retransmission 1 in 7 secs
133601.438947 Timr 10 timer_add_event: event message_send_expire(0x8ac7c580)
add ed before connection_checker(0x89f40740), expiration in 7s
133604.620937 Trpt 70 transport_setup: added 0x7d41e2c0 to transport list
133604.621545 Trpt 70 transport_setup: added 0x7d41e300 to transport list
133604.621968 Trpt 50 virtual_clone: old 0x801c6b00 new 0x801c6fc0 (main is
0x7d 41e2c0)
133604.622512 Trpt 70 transport_setup: virtual transport 0x801c6fc0
133604.623037 Mesg 90 message_alloc: allocated 0x8ac7c600
133604.623495 Mesg 70 message_recv: message 0x8ac7c600
133604.624009 Mesg 70 ICOOKIE: 0x73a01df8a84cc4a1
133604.624480 Mesg 70 RCOOKIE: 0x8b5c39b4bca3512c
133604.624898 Mesg 70 NEXT_PAYLOAD: SA
133604.625441 Mesg 70 VERSION: 16
133604.625851 Mesg 70 EXCH_TYPE: ID_PROT
133604.626391 Mesg 70 FLAGS: [ ]
133604.626898 Mesg 70 MESSAGE_ID: 0x00000000
133604.627348 Mesg 70 LENGTH: 168
133604.627915 Mesg 70 message_recv: 73a01df8 a84cc4a1 8b5c39b4 bca3512c
01100200 00000000 000000a8 0d00003c
133604.628481 Mesg 70 message_recv: 00000001 00000001 00000030 01010001
00000028 00010000 80010001 80020002
133604.629051 Mesg 70 message_recv: 80030001 80040001 800b0001 800c0258
800b0002 800c03e8 0d000014 90cb8091
133604.629569 Mesg 70 message_recv: 3ebb696e 086381b5 ec427b1f 0d000014
7d9419a6 5310ca6f 2c179d92 15529d56
133604.630152 Mesg 70 message_recv: 0d000014 4a131c81 07035845 5c5728f2
0e95452f 00000014 afcad713 68a1f1c9
133604.630631 Mesg 70 message_recv: 6b8696fc 77570100
133604.631038 SA 80 sa_reference: SA 0x7efe5900 now has 3 references
133604.631567 Mesg 90 message_check_duplicate: last_received 0x0
133604.632381 Mesg 50 message_parse_payloads: offset 28 payload SA
133604.632846 Mesg 50 message_parse_payloads: offset 88 payload VENDOR
133604.633260 Mesg 50 message_parse_payloads: offset 108 payload VENDOR
133604.633823 Mesg 50 message_parse_payloads: offset 128 payload VENDOR
133604.634236 Mesg 50 message_parse_payloads: offset 148 payload VENDOR
133604.634903 Mesg 60 message_validate_payloads: payload SA at 0x7efe5d1c of
mes sage 0x8ac7c600
133604.635353 Mesg 70 DOI: 1
133604.635909 SA 80 sa_reference: SA 0x7efe5900 now has 4 references
133604.636334 Mesg 50 message_parse_payloads: offset 40 payload PROPOSAL
133604.636870 Mesg 50 message_parse_payloads: offset 48 payload TRANSFORM
133604.637281 Mesg 50 Transform 0's attributes
133604.637819 Mesg 50 Attribute ENCRYPTION_ALGORITHM value 1
133604.638229 Mesg 50 Attribute HASH_ALGORITHM value 2
133604.638758 Mesg 50 Attribute AUTHENTICATION_METHOD value 1
133604.639166 Mesg 50 Attribute GROUP_DESCRIPTION value 1
133604.639693 Mesg 50 Attribute LIFE_TYPE value 1
133604.642526 Mesg 50 Attribute LIFE_DURATION value 600
133604.642981 Mesg 50 Attribute LIFE_TYPE value 2
133604.643391 Mesg 50 Attribute LIFE_DURATION value 1000
133604.643952 Mesg 60 message_validate_payloads: payload PROPOSAL at
0x7efe5d28 of message 0x8ac7c600
133604.644382 Mesg 70 NO: 1
133604.644908 Mesg 70 PROTO: ISAKMP
133604.645331 Mesg 70 SPI_SZ: 0
133604.645861 Mesg 70 NTRANSFORMS: 1
133604.646363 Mesg 60 message_validate_payloads: payload TRANSFORM at
0x7efe5d30 of message 0x8ac7c600
133604.646826 Mesg 70 NO: 0
133604.647237 Mesg 70 ID: 1
133604.647778 Mesg 60 message_validate_payloads: payload VENDOR at
0x7efe5d58 of message 0x8ac7c600
133604.648211 Exch 10 nat_t_check_vendor_payload: NAT-T capable peer
detected
133604.648756 Mesg 60 message_validate_payloads: payload VENDOR at
0x7efe5d6c of message 0x8ac7c600
133604.649172 Exch 10 nat_t_check_vendor_payload: NAT-T capable peer
detected
133604.649715 Mesg 60 message_validate_payloads: payload VENDOR at
0x7efe5d80 of message 0x8ac7c600
133604.650400 Exch 10 nat_t_check_vendor_payload: NAT-T capable peer
detected
133604.650829 Mesg 60 message_validate_payloads: payload VENDOR at
0x7efe5d94 of message 0x8ac7c600
133604.651392 Trpt 70 transport_release: freeing 0x801c6dc0
133604.651844 Trpt 90 udp_remove: removed transport 0x801c6e40
133604.652399 Trpt 90 udp_remove: removed transport 0x801c6e00
133604.652814 Trpt 90 virtual_remove: removed 0x801c6dc0
133604.653338 Exch 90 exchange_validate: checking for required SA
133604.653756 Cryp 60 hash_get: requested algorithm 1
133604.654291 Negt 30 message_negotiate_sa: transform 0 proto 1 proposal 1
ok
133604.654701 Mesg 20 message_free: freeing 0x8ac7c600
133604.655269 SA 80 sa_release: SA 0x7efe5900 had 4 references
133608.450118 Timr 10 timer_handle_expirations: event
message_send_expire(0x8ac7 c580)
133608.450725 Mesg 70 message_send: message 0x8ac7c580
133608.451157 Mesg 70 ICOOKIE: 0xe170aaa29960bc52
133608.451757 Mesg 70 RCOOKIE: 0xc6585206f35c0f3f
133608.452186 Mesg 70 NEXT_PAYLOAD: SA
133608.452741 Mesg 70 VERSION: 16
133608.453155 Mesg 70 EXCH_TYPE: ID_PROT
133608.453685 Mesg 70 FLAGS: [ ]
133608.454292 Mesg 70 MESSAGE_ID: 0x00000000
133608.454753 Mesg 70 LENGTH: 168
133608.455324 Mesg 70 message_send: e170aaa2 9960bc52 c6585206 f35c0f3f
01100200 00000000 000000a8 0d00003c
133608.455852 Mesg 70 message_send: 00000001 00000001 00000030 01010001
00000028 00010000 80010001 80020002
133608.456449 Mesg 70 message_send: 80030001 80040001 800b0001 800c0258
800b0002 800c03e8 0d000014 90cb8091
133608.456968 Mesg 70 message_send: 3ebb696e 086381b5 ec427b1f 0d000014
7d9419a6 5310ca6f 2c179d92 15529d56
133608.457528 Mesg 70 message_send: 0d000014 4a131c81 07035845 5c5728f2
0e95452f 00000014 afcad713 68a1f1c9
133608.457998 Mesg 70 message_send: 6b8696fc 77570100
133608.458839 Trpt 30 transport_send_messages: message 0x8ac7c580 scheduled
for retransmission 2 in 9 secs
133608.459362 Timr 10 timer_add_event: event message_send_expire(0x8ac7c580)
add ed before connection_checker(0x89f40740), expiration in 9s
133613.651193 Trpt 70 transport_setup: added 0x801c6e00 to transport list
133613.651827 Trpt 70 transport_setup: added 0x801c6e40 to transport list
133613.652241 Trpt 50 virtual_clone: old 0x801c6b00 new 0x801c6dc0 (main is
0x80 1c6e00)
133613.652786 Trpt 70 transport_setup: virtual transport 0x801c6dc0
133613.653300 Mesg 90 message_alloc: allocated 0x8ac7c600
133613.653752 Mesg 70 message_recv: message 0x8ac7c600
133613.654264 Mesg 70 ICOOKIE: 0x73a01df8a84cc4a1
133613.654736 Mesg 70 RCOOKIE: 0x8b5c39b4bca3512c
133613.655147 Mesg 70 NEXT_PAYLOAD: SA
133613.655688 Mesg 70 VERSION: 16
133613.656097 Mesg 70 EXCH_TYPE: ID_PROT
133613.656624 Mesg 70 FLAGS: [ ]
133613.657137 Mesg 70 MESSAGE_ID: 0x00000000
133613.657583 Mesg 70 LENGTH: 168
133613.658150 Mesg 70 message_recv: 73a01df8 a84cc4a1 8b5c39b4 bca3512c
01100200 00000000 000000a8 0d00003c
133613.658684 Mesg 70 message_recv: 00000001 00000001 00000030 01010001
00000028 00010000 80010001 80020002
133613.659255 Mesg 70 message_recv: 80030001 80040001 800b0001 800c0258
800b0002 800c03e8 0d000014 90cb8091
133613.659805 Mesg 70 message_recv: 3ebb696e 086381b5 ec427b1f 0d000014
7d9419a6 5310ca6f 2c179d92 15529d56
133613.660104 Mesg 70 message_recv: 0d000014 4a131c81 07035845 5c5728f2
0e95452f 00000014 afcad713 68a1f1c9
133613.660177 Mesg 70 message_recv: 6b8696fc 77570100
133613.660223 SA 80 sa_reference: SA 0x7efe5900 now has 4 references
133613.660267 Mesg 90 message_check_duplicate: last_received 0x0
133613.660326 Mesg 50 message_parse_payloads: offset 28 payload SA
133613.660377 Mesg 50 message_parse_payloads: offset 88 payload VENDOR
133613.660422 Mesg 50 message_parse_payloads: offset 108 payload VENDOR
133613.660466 Mesg 50 message_parse_payloads: offset 128 payload VENDOR
133613.660510 Mesg 50 message_parse_payloads: offset 148 payload VENDOR
133613.660557 Mesg 60 message_validate_payloads: payload SA at 0x7efe5d1c of
mes sage 0x8ac7c600
133613.660605 Mesg 70 DOI: 1
133613.660653 SA 80 sa_reference: SA 0x7efe5900 now has 5 references
133613.660699 Mesg 50 message_parse_payloads: offset 40 payload PROPOSAL
133613.660745 Mesg 50 message_parse_payloads: offset 48 payload TRANSFORM
133613.660787 Mesg 50 Transform 0's attributes
133613.660946 Mesg 50 Attribute ENCRYPTION_ALGORITHM value 1
133613.660996 Mesg 50 Attribute HASH_ALGORITHM value 2
133613.661038 Mesg 50 Attribute AUTHENTICATION_METHOD value 1
133613.661080 Mesg 50 Attribute GROUP_DESCRIPTION value 1
133613.661123 Mesg 50 Attribute LIFE_TYPE value 1
133613.661166 Mesg 50 Attribute LIFE_DURATION value 600
133613.661207 Mesg 50 Attribute LIFE_TYPE value 2
133613.661250 Mesg 50 Attribute LIFE_DURATION value 1000
133613.661295 Mesg 60 message_validate_payloads: payload PROPOSAL at
0x7efe5d28 of message 0x8ac7c600
133613.661342 Mesg 70 NO: 1
133613.661383 Mesg 70 PROTO: ISAKMP
133613.661424 Mesg 70 SPI_SZ: 0
133613.661466 Mesg 70 NTRANSFORMS: 1
133613.661511 Mesg 60 message_validate_payloads: payload TRANSFORM at
0x7efe5d30 of message 0x8ac7c600
133613.661556 Mesg 70 NO: 0
133613.661597 Mesg 70 ID: 1
133613.661648 Mesg 60 message_validate_payloads: payload VENDOR at
0x7efe5d58 of message 0x8ac7c600
133613.661695 Exch 10 nat_t_check_vendor_payload: NAT-T capable peer
detected
133613.662388 Mesg 60 message_validate_payloads: payload VENDOR at
0x7efe5d6c of message 0x8ac7c600
133613.662454 Exch 10 nat_t_check_vendor_payload: NAT-T capable peer
detected
133613.662500 Mesg 60 message_validate_payloads: payload VENDOR at
0x7efe5d80 of message 0x8ac7c600
133613.662543 Exch 10 nat_t_check_vendor_payload: NAT-T capable peer
detected
133613.662588 Mesg 60 message_validate_payloads: payload VENDOR at
0x7efe5d94 of message 0x8ac7c600
133613.662648 Trpt 70 transport_release: freeing 0x801c6fc0
133613.662696 Trpt 90 udp_remove: removed transport 0x7d41e300
133613.662766 Trpt 90 udp_remove: removed transport 0x7d41e2c0
133613.662808 Trpt 90 virtual_remove: removed 0x801c6fc0
133613.662854 Exch 90 exchange_validate: checking for required SA
133613.662906 Cryp 60 hash_get: requested algorithm 1
133613.662954 Negt 30 message_negotiate_sa: transform 0 proto 1 proposal 1
ok
133613.662998 Mesg 20 message_free: freeing 0x8ac7c600
133613.663067 SA 80 sa_release: SA 0x7efe5900 had 5 references
133617.470114 Timr 10 timer_handle_expirations: event
message_send_expire(0x8ac7 c580)
133617.470714 Mesg 70 message_send: message 0x8ac7c580
133617.471244 Mesg 70 ICOOKIE: 0xe170aaa29960bc52
133617.471741 Mesg 70 RCOOKIE: 0xc6585206f35c0f3f
133617.472191 Mesg 70 NEXT_PAYLOAD: SA
133617.472742 Mesg 70 VERSION: 16
133617.473241 Mesg 70 EXCH_TYPE: ID_PROT
133617.473685 Mesg 70 FLAGS: [ ]
133617.474188 Mesg 70 MESSAGE_ID: 0x00000000
133617.474641 Mesg 70 LENGTH: 168
133617.475208 Mesg 70 message_send: e170aaa2 9960bc52 c6585206 f35c0f3f
01100200 00000000 000000a8 0d00003c
133617.475747 Mesg 70 message_send: 00000001 00000001 00000030 01010001
00000028 00010000 80010001 80020002
133617.476313 Mesg 70 message_send: 80030001 80040001 800b0001 800c0258
800b0002 800c03e8 0d000014 90cb8091
133617.476831 Mesg 70 message_send: 3ebb696e 086381b5 ec427b1f 0d000014
7d9419a6 5310ca6f 2c179d92 15529d56
133617.477400 Mesg 70 message_send: 0d000014 4a131c81 07035845 5c5728f2
0e95452f 00000014 afcad713 68a1f1c9
133617.477864 Mesg 70 message_send: 6b8696fc 77570100
133617.478572 Trpt 30 transport_send_messages: message 0x8ac7c580 scheduled
for retransmission 3 in 11 secs
133617.479094 Timr 10 timer_add_event: event message_send_expire(0x8ac7c580)
add ed before connection_checker(0x89f40740), expiration in 11s
133624.681372 Trpt 70 transport_setup: added 0x7d41e2c0 to transport list
133624.681977 Trpt 70 transport_setup: added 0x7d41e300 to transport list
133624.682393 Trpt 50 virtual_clone: old 0x801c6b00 new 0x801c6fc0 (main is
0x7d 41e2c0)
133624.682956 Trpt 70 transport_setup: virtual transport 0x801c6fc0
133624.683476 Mesg 90 message_alloc: allocated 0x8ac7c600
133624.683932 Mesg 70 message_recv: message 0x8ac7c600
133624.684611 Mesg 70 ICOOKIE: 0x73a01df8a84cc4a1
133624.685133 Mesg 70 RCOOKIE: 0x8b5c39b4bca3512c
133624.685588 Mesg 70 NEXT_PAYLOAD: SA
133624.686093 Mesg 70 VERSION: 16
133624.686541 Mesg 70 EXCH_TYPE: ID_PROT
133624.686946 Mesg 70 FLAGS: [ ]
133624.687610 Mesg 70 MESSAGE_ID: 0x00000000
133624.688130 Mesg 70 LENGTH: 168
133624.688646 Mesg 70 message_recv: 73a01df8 a84cc4a1 8b5c39b4 bca3512c
01100200 00000000 000000a8 0d00003c
133624.689226 Mesg 70 message_recv: 00000001 00000001 00000030 01010001
00000028 00010000 80010001 80020002
133624.689753 Mesg 70 message_recv: 80030001 80040001 800b0001 800c0258
800b0002 800c03e8 0d000014 90cb8091
133624.690331 Mesg 70 message_recv: 3ebb696e 086381b5 ec427b1f 0d000014
7d9419a6 5310ca6f 2c179d92 15529d56
133624.690876 Mesg 70 message_recv: 0d000014 4a131c81 07035845 5c5728f2
0e95452f 00000014 afcad713 68a1f1c9
133624.691385 Mesg 70 message_recv: 6b8696fc 77570100
133624.691827 SA 80 sa_reference: SA 0x7efe5900 now has 5 references
133624.692232 Mesg 90 message_check_duplicate: last_received 0x0
133624.692775 Mesg 50 message_parse_payloads: offset 28 payload SA
133624.693204 Mesg 50 message_parse_payloads: offset 88 payload VENDOR
133624.693748 Mesg 50 message_parse_payloads: offset 108 payload VENDOR
133624.694243 Mesg 50 message_parse_payloads: offset 128 payload VENDOR
133624.694696 Mesg 50 message_parse_payloads: offset 148 payload VENDOR
133624.695200 Mesg 60 message_validate_payloads: payload SA at 0x7efe5d1c of
mes sage 0x8ac7c600
133624.695672 Mesg 70 DOI: 1
133624.696084 SA 80 sa_reference: SA 0x7efe5900 now has 6 references
133624.696624 Mesg 50 message_parse_payloads: offset 40 payload PROPOSAL
133624.697034 Mesg 50 message_parse_payloads: offset 48 payload TRANSFORM
133624.697558 Mesg 50 Transform 0's attributes
133624.697969 Mesg 50 Attribute ENCRYPTION_ALGORITHM value 1
133624.698514 Mesg 50 Attribute HASH_ALGORITHM value 2
133624.698919 Mesg 50 Attribute AUTHENTICATION_METHOD value 1
133624.699449 Mesg 50 Attribute GROUP_DESCRIPTION value 1
133624.699857 Mesg 50 Attribute LIFE_TYPE value 1
133624.700430 Mesg 50 Attribute LIFE_DURATION value 600
133624.700835 Mesg 50 Attribute LIFE_TYPE value 2
133624.701353 Mesg 50 Attribute LIFE_DURATION value 1000
133624.701845 Mesg 60 message_validate_payloads: payload PROPOSAL at
0x7efe5d28 of message 0x8ac7c600
133624.702310 Mesg 70 NO: 1
133624.702709 Mesg 70 PROTO: ISAKMP
133624.703243 Mesg 70 SPI_SZ: 0
133624.703660 Mesg 70 NTRANSFORMS: 1
133624.704193 Mesg 60 message_validate_payloads: payload TRANSFORM at
0x7efe5d30 of message 0x8ac7c600
133624.704619 Mesg 70 NO: 0
133624.705145 Mesg 70 ID: 1
133624.705651 Mesg 60 message_validate_payloads: payload VENDOR at
0x7efe5d58 of message 0x8ac7c600
133624.706107 Exch 10 nat_t_check_vendor_payload: NAT-T capable peer
detected
133624.706548 Mesg 60 message_validate_payloads: payload VENDOR at
0x7efe5d6c of message 0x8ac7c600
133624.707088 Exch 10 nat_t_check_vendor_payload: NAT-T capable peer
detected
133624.707508 Mesg 60 message_validate_payloads: payload VENDOR at
0x7efe5d80 of message 0x8ac7c600
133624.708042 Exch 10 nat_t_check_vendor_payload: NAT-T capable peer
detected
133624.708456 Mesg 60 message_validate_payloads: payload VENDOR at
0x7efe5d94 of message 0x8ac7c600
133624.709010 Trpt 70 transport_release: freeing 0x801c6dc0
133624.709424 Trpt 90 udp_remove: removed transport 0x801c6e40
133624.709978 Trpt 90 udp_remove: removed transport 0x801c6e00
133624.710428 Trpt 90 virtual_remove: removed 0x801c6dc0
133624.710942 Exch 90 exchange_validate: checking for required SA
133624.711368 Cryp 60 hash_get: requested algorithm 1
133624.711910 Negt 30 message_negotiate_sa: transform 0 proto 1 proposal 1
ok
133624.712323 Mesg 20 message_free: freeing 0x8ac7c600
133624.712889 SA 80 sa_release: SA 0x7efe5900 had 6 references
133628.490117 Timr 10 timer_handle_expirations: event
message_send_expire(0x8ac7 c580)
133628.490826 Mesg 70 message_send: message 0x8ac7c580
133628.491386 Mesg 70 ICOOKIE: 0xe170aaa29960bc52
133628.491878 Mesg 70 RCOOKIE: 0xc6585206f35c0f3f
133628.492299 Mesg 70 NEXT_PAYLOAD: SA
133628.492852 Mesg 70 VERSION: 16
133628.493265 Mesg 70 EXCH_TYPE: ID_PROT
133628.493792 Mesg 70 FLAGS: [ ]
133628.494300 Mesg 70 MESSAGE_ID: 0x00000000
133628.494743 Mesg 70 LENGTH: 168
133628.495338 Mesg 70 message_send: e170aaa2 9960bc52 c6585206 f35c0f3f
01100200 00000000 000000a8 0d00003c
133628.495876 Mesg 70 message_send: 00000001 00000001 00000030 01010001
00000028 00010000 80010001 80020002
133628.496453 Mesg 70 message_send: 80030001 80040001 800b0001 800c0258
800b0002 800c03e8 0d000014 90cb8091
133628.496969 Mesg 70 message_send: 3ebb696e 086381b5 ec427b1f 0d000014
7d9419a6 5310ca6f 2c179d92 15529d56
133628.497538 Mesg 70 message_send: 0d000014 4a131c81 07035845 5c5728f2
0e95452f 00000014 afcad713 68a1f1c9
133628.498001 Mesg 70 message_send: 6b8696fc 77570100
133628.498704 Trpt 30 transport_send_messages: message 0x8ac7c580 scheduled
for retransmission 4 in 13 secs
133628.499232 Timr 10 timer_add_event: event message_send_expire(0x8ac7c580)
add ed before connection_checker(0x89f40740), expiration in 13s
133637.711996 Trpt 70 transport_setup: added 0x801c6e00 to transport list
133637.712605 Trpt 70 transport_setup: added 0x801c6e40 to transport list
133637.713021 Trpt 50 virtual_clone: old 0x801c6b00 new 0x801c6dc0 (main is
0x80 1c6e00)
133637.713564 Trpt 70 transport_setup: virtual transport 0x801c6dc0
133637.714075 Mesg 90 message_alloc: allocated 0x8ac7c600
133637.714557 Mesg 70 message_recv: message 0x8ac7c600
133637.715070 Mesg 70 ICOOKIE: 0x73a01df8a84cc4a1
133637.715539 Mesg 70 RCOOKIE: 0x8b5c39b4bca3512c
133637.715952 Mesg 70 NEXT_PAYLOAD: SA
133637.716492 Mesg 70 VERSION: 16
133637.716899 Mesg 70 EXCH_TYPE: ID_PROT
133637.717435 Mesg 70 FLAGS: [ ]
133637.717939 Mesg 70 MESSAGE_ID: 0x00000000
133637.718395 Mesg 70 LENGTH: 168
133637.718968 Mesg 70 message_recv: 73a01df8 a84cc4a1 8b5c39b4 bca3512c
01100200 00000000 000000a8 0d00003c
133637.719502 Mesg 70 message_recv: 00000001 00000001 00000030 01010001
00000028 00010000 80010001 80020002
133637.720078 Mesg 70 message_recv: 80030001 80040001 800b0001 800c0258
800b0002 800c03e8 0d000014 90cb8091
133637.720604 Mesg 70 message_recv: 3ebb696e 086381b5 ec427b1f 0d000014
7d9419a6 5310ca6f 2c179d92 15529d56
133637.721177 Mesg 70 message_recv: 0d000014 4a131c81 07035845 5c5728f2
0e95452f 00000014 afcad713 68a1f1c9
133637.721643 Mesg 70 message_recv: 6b8696fc 77570100
133637.722077 SA 80 sa_reference: SA 0x7efe5900 now has 6 references
133637.722597 Mesg 90 message_check_duplicate: last_received 0x0
133637.723023 Mesg 50 message_parse_payloads: offset 28 payload SA
133637.723568 Mesg 50 message_parse_payloads: offset 88 payload VENDOR
133637.723982 Mesg 50 message_parse_payloads: offset 108 payload VENDOR
133637.724517 Mesg 50 message_parse_payloads: offset 128 payload VENDOR
133637.725010 Mesg 50 message_parse_payloads: offset 148 payload VENDOR
133637.725466 Mesg 60 message_validate_payloads: payload SA at 0x7efe5d1c of
mes sage 0x8ac7c600
133637.725891 Mesg 70 DOI: 1
133637.726423 SA 80 sa_reference: SA 0x7efe5900 now has 7 references
133637.726843 Mesg 50 message_parse_payloads: offset 40 payload PROPOSAL
133637.727377 Mesg 50 message_parse_payloads: offset 48 payload TRANSFORM
133637.727787 Mesg 50 Transform 0's attributes
133637.728329 Mesg 50 Attribute ENCRYPTION_ALGORITHM value 1
133637.728737 Mesg 50 Attribute HASH_ALGORITHM value 2
133637.729264 Mesg 50 Attribute AUTHENTICATION_METHOD value 1
133637.729672 Mesg 50 Attribute GROUP_DESCRIPTION value 1
133637.730230 Mesg 50 Attribute LIFE_TYPE value 1
133637.730723 Mesg 50 Attribute LIFE_DURATION value 600
133637.731158 Mesg 50 Attribute LIFE_TYPE value 2
133637.731756 Mesg 50 Attribute LIFE_DURATION value 1000
133637.732335 Mesg 60 message_validate_payloads: payload PROPOSAL at
0x7efe5d28 of message 0x8ac7c600
133637.732766 Mesg 70 NO: 1
133637.733291 Mesg 70 PROTO: ISAKMP
133637.733706 Mesg 70 SPI_SZ: 0
133637.734246 Mesg 70 NTRANSFORMS: 1
133637.734658 Mesg 60 message_validate_payloads: payload TRANSFORM at
0x7efe5d30 of message 0x8ac7c600
133637.735426 Mesg 70 NO: 0
133637.735918 Mesg 70 ID: 1
133637.736378 Mesg 60 message_validate_payloads: payload VENDOR at
0x7efe5d58 of message 0x8ac7c600
133637.736800 Exch 10 nat_t_check_vendor_payload: NAT-T capable peer
detected
133637.737339 Mesg 60 message_validate_payloads: payload VENDOR at
0x7efe5d6c of message 0x8ac7c600
133637.737784 Exch 10 nat_t_check_vendor_payload: NAT-T capable peer
detected
133637.738326 Mesg 60 message_validate_payloads: payload VENDOR at
0x7efe5d80 of message 0x8ac7c600
133637.738738 Exch 10 nat_t_check_vendor_payload: NAT-T capable peer
detected
133637.739269 Mesg 60 message_validate_payloads: payload VENDOR at
0x7efe5d94 of message 0x8ac7c600
133637.739789 Trpt 70 transport_release: freeing 0x801c6fc0
133637.740286 Trpt 90 udp_remove: removed transport 0x7d41e300
133637.740827 Trpt 90 udp_remove: removed transport 0x7d41e2c0
133637.741281 Trpt 90 virtual_remove: removed 0x801c6fc0
133637.741693 Exch 90 exchange_validate: checking for required SA
133637.742242 Cryp 60 hash_get: requested algorithm 1
133637.742747 Negt 30 message_negotiate_sa: transform 0 proto 1 proposal 1
ok
133637.743191 Mesg 20 message_free: freeing 0x8ac7c600
133637.743731 SA 80 sa_release: SA 0x7efe5900 had 7 references
133641.510426 Timr 10 timer_handle_expirations: event
message_send_expire(0x8ac7 c580)
133641.511036 Mesg 70 message_send: message 0x8ac7c580
133641.511570 Mesg 70 ICOOKIE: 0xe170aaa29960bc52
133641.512069 Mesg 70 RCOOKIE: 0xc6585206f35c0f3f
133641.512489 Mesg 70 NEXT_PAYLOAD: SA
133641.513043 Mesg 70 VERSION: 16
133641.513461 Mesg 70 EXCH_TYPE: ID_PROT
133641.513992 Mesg 70 FLAGS: [ ]
133641.514504 Mesg 70 MESSAGE_ID: 0x00000000
133641.514950 Mesg 70 LENGTH: 168
133641.515521 Mesg 70 message_send: e170aaa2 9960bc52 c6585206 f35c0f3f
01100200 00000000 000000a8 0d00003c
133641.516058 Mesg 70 message_send: 00000001 00000001 00000030 01010001
00000028 00010000 80010001 80020002
133641.516638 Mesg 70 message_send: 80030001 80040001 800b0001 800c0258
800b0002 800c03e8 0d000014 90cb8091
133641.517158 Mesg 70 message_send: 3ebb696e 086381b5 ec427b1f 0d000014
7d9419a6 5310ca6f 2c179d92 15529d56
133641.517727 Mesg 70 message_send: 0d000014 4a131c81 07035845 5c5728f2
0e95452f 00000014 afcad713 68a1f1c9
133641.518196 Mesg 70 message_send: 6b8696fc 77570100
133641.518925 Trpt 30 transport_send_messages: message 0x8ac7c580 scheduled
for retransmission 5 in 15 secs
133641.519448 Timr 10 timer_add_event: event message_send_expire(0x8ac7c580)
add ed before connection_checker(0x89f40740), expiration in 15s
133652.742309 Trpt 70 transport_setup: added 0x7d41e2c0 to transport list
133652.742927 Trpt 70 transport_setup: added 0x7d41e300 to transport list
133652.743337 Trpt 50 virtual_clone: old 0x801c6b00 new 0x801c6fc0 (main is
0x7d 41e2c0)
133652.743883 Trpt 70 transport_setup: virtual transport 0x801c6fc0
133652.744405 Mesg 90 message_alloc: allocated 0x8ac7c600
133652.744860 Mesg 70 message_recv: message 0x8ac7c600
133652.745371 Mesg 70 ICOOKIE: 0x73a01df8a84cc4a1
133652.745871 Mesg 70 RCOOKIE: 0x8b5c39b4bca3512c
133652.746281 Mesg 70 NEXT_PAYLOAD: SA
133652.746819 Mesg 70 VERSION: 16
133652.747231 Mesg 70 EXCH_TYPE: ID_PROT
133652.747759 Mesg 70 FLAGS: [ ]
133652.748271 Mesg 70 MESSAGE_ID: 0x00000000
133652.748722 Mesg 70 LENGTH: 168
133652.749289 Mesg 70 message_recv: 73a01df8 a84cc4a1 8b5c39b4 bca3512c
01100200 00000000 000000a8 0d00003c
133652.749818 Mesg 70 message_recv: 00000001 00000001 00000030 01010001
00000028 00010000 80010001 80020002
133652.750408 Mesg 70 message_recv: 80030001 80040001 800b0001 800c0258
800b0002 800c03e8 0d000014 90cb8091
133652.750926 Mesg 70 message_recv: 3ebb696e 086381b5 ec427b1f 0d000014
7d9419a6 5310ca6f 2c179d92 15529d56
133652.751489 Mesg 70 message_recv: 0d000014 4a131c81 07035845 5c5728f2
0e95452f 00000014 afcad713 68a1f1c9
133652.751958 Mesg 70 message_recv: 6b8696fc 77570100
133652.752352 SA 80 sa_reference: SA 0x7efe5900 now has 7 references
133652.752872 Mesg 90 message_check_duplicate: last_received 0x0
133652.753413 Mesg 50 message_parse_payloads: offset 28 payload SA
133652.753874 Mesg 50 message_parse_payloads: offset 88 payload VENDOR
133652.754285 Mesg 50 message_parse_payloads: offset 108 payload VENDOR
133652.754825 Mesg 50 message_parse_payloads: offset 128 payload VENDOR
133652.755239 Mesg 50 message_parse_payloads: offset 148 payload VENDOR
133652.755776 Mesg 60 message_validate_payloads: payload SA at 0x7efe5d1c of
mes sage 0x8ac7c600
133652.756207 Mesg 70 DOI: 1
133652.756725 SA 80 sa_reference: SA 0x7efe5900 now has 8 references
133652.757144 Mesg 50 message_parse_payloads: offset 40 payload PROPOSAL
133652.757681 Mesg 50 message_parse_payloads: offset 48 payload TRANSFORM
133652.758091 Mesg 50 Transform 0's attributes
133652.758628 Mesg 50 Attribute ENCRYPTION_ALGORITHM value 1
133652.759035 Mesg 50 Attribute HASH_ALGORITHM value 2
133652.759563 Mesg 50 Attribute AUTHENTICATION_METHOD value 1
133652.759974 Mesg 50 Attribute GROUP_DESCRIPTION value 1
133652.760544 Mesg 50 Attribute LIFE_TYPE value 1
133652.760950 Mesg 50 Attribute LIFE_DURATION value 600
133652.761496 Mesg 50 Attribute LIFE_TYPE value 2
133652.761904 Mesg 50 Attribute LIFE_DURATION value 1000
133652.762422 Mesg 60 message_validate_payloads: payload PROPOSAL at
0x7efe5d28 of message 0x8ac7c600
133652.762849 Mesg 70 NO: 1
133652.763365 Mesg 70 PROTO: ISAKMP
133652.763864 Mesg 70 SPI_SZ: 0
133652.764312 Mesg 70 NTRANSFORMS: 1
133652.764730 Mesg 60 message_validate_payloads: payload TRANSFORM at
0x7efe5d30 of message 0x8ac7c600
133652.765276 Mesg 70 NO: 0
133652.765678 Mesg 70 ID: 1
133652.766219 Mesg 60 message_validate_payloads: payload VENDOR at
0x7efe5d58 of message 0x8ac7c600
133652.766642 Exch 10 nat_t_check_vendor_payload: NAT-T capable peer
detected
133652.767181 Mesg 60 message_validate_payloads: payload VENDOR at
0x7efe5d6c of message 0x8ac7c600
133652.767596 Exch 10 nat_t_check_vendor_payload: NAT-T capable peer
detected
133652.768125 Mesg 60 message_validate_payloads: payload VENDOR at
0x7efe5d80 of message 0x8ac7c600
133652.768539 Exch 10 nat_t_check_vendor_payload: NAT-T capable peer
detected
133652.769095 Mesg 60 message_validate_payloads: payload VENDOR at
0x7efe5d94 of message 0x8ac7c600
133652.769620 Trpt 70 transport_release: freeing 0x801c6dc0
133652.770108 Trpt 90 udp_remove: removed transport 0x801c6e40
133652.770644 Trpt 90 udp_remove: removed transport 0x801c6e00
133652.771091 Trpt 90 virtual_remove: removed 0x801c6dc0
133652.771495 Exch 90 exchange_validate: checking for required SA
133652.772030 Cryp 60 hash_get: requested algorithm 1
133652.772451 Negt 30 message_negotiate_sa: transform 0 proto 1 proposal 1
ok
133652.772986 Mesg 20 message_free: freeing 0x8ac7c600
133652.773530 SA 80 sa_release: SA 0x7efe5900 had 8 references
133656.530114 Timr 10 timer_handle_expirations: event
message_send_expire(0x8ac7 c580)
133656.530710 Mesg 70 message_send: message 0x8ac7c580
133656.531235 Mesg 70 ICOOKIE: 0xe170aaa29960bc52
133656.531730 Mesg 70 RCOOKIE: 0xc6585206f35c0f3f
133656.532151 Mesg 70 NEXT_PAYLOAD: SA
133656.532710 Mesg 70 VERSION: 16
133656.533212 Mesg 70 EXCH_TYPE: ID_PROT
133656.533658 Mesg 70 FLAGS: [ ]
133656.534159 Mesg 70 MESSAGE_ID: 0x00000000
133656.534631 Mesg 70 LENGTH: 168
133656.535205 Mesg 70 message_send: e170aaa2 9960bc52 c6585206 f35c0f3f
01100200 00000000 000000a8 0d00003c
133656.535743 Mesg 70 message_send: 00000001 00000001 00000030 01010001
00000028 00010000 80010001 80020002
133656.536309 Mesg 70 message_send: 80030001 80040001 800b0001 800c0258
800b0002 800c03e8 0d000014 90cb8091
133656.536828 Mesg 70 message_send: 3ebb696e 086381b5 ec427b1f 0d000014
7d9419a6 5310ca6f 2c179d92 15529d56
133656.537310 Mesg 70 message_send: 0d000014 4a131c81 07035845 5c5728f2
0e95452f 00000014 afcad713 68a1f1c9
133656.538020 Mesg 70 message_send: 6b8696fc 77570100
133656.538761 Default transport_send_messages: giving up on exchange
dimitri, no response from peer 194.109.199.156:500
133656.539282 Mesg 20 message_free: freeing 0x8ac7c580
133656.540330 SA 80 sa_release: SA 0x7efe5c00 had 4 references
133657.440101 Timr 10 timer_handle_expirations: event
connection_checker(0x89f40 740)
133657.440732 Timr 10 timer_add_event: event connection_checker(0x89f40740)
adde d before exchange_free_aux(0x7efe5b00), expiration in 60s
133657.441214 SA 90 sa_find: no SA matched query
133657.441756 Sdep 70 pf_key_v2_connection_check: SA for daim-dimitri
missing
133657.442286 Exch 90 exchange_lookup_by_name: daim-dimitri == dimitri && 2
== 1 ?
133657.442747 Exch 90 exchange_lookup_by_name: daim-dimitri == dimitri && 2
== 1 ?
133657.443173 SA 90 sa_find: no SA matched query
133657.443747 Exch 90 exchange_lookup_by_name: dimitri == dimitri && 1 == 1?
133657.444171 Exch 40 exchange_establish: dimitri exchange already exists as
0x7 efe5b00
133657.444704 Exch 90 exchange_lookup_by_name: dimitri == dimitri && 1 == 1?
