Hi, today I see tons of these on a 4.6-stable/amd64 machine (sample):
17:21:00.848135 esp 1.1.1.1 > 2.2.2.2 spi 0x54d46678 seq 132642 len 84 (DF) (ttl 64, id 49897, len 104, bad cksum 0! differs by 8b3c) 17:21:00.859630 esp 2.2.2.2 > 1.1.1.1 spi 0x87b9932c seq 89638 len 324 (ttl 46, id 63366, len 344) 17:21:00.860346 esp 1.1.1.1 > 2.2.2.2 spi 0x54d46678 seq 132643 len 324 [tos 0xb8] (ttl 64, id 40719, len 344, bad cksum 0! differs by ed6e) 17:21:00.866788 esp 2.2.2.2 > 1.1.1.1 spi 0x87b9932c seq 89639 len 1028 (ttl 46, id 22841, len 1048) 17:21:00.867366 esp 1.1.1.1 > 2.2.2.2 spi 0x54d46678 seq 132644 len 84 (DF) (ttl 64, id 58626, len 104, bad cksum 0! differs by 6923) 17:21:00.874786 esp 2.2.2.2 > 1.1.1.1 spi 0x87b9932c seq 89640 len 756 (ttl 46, id 57720, len 776) 17:21:00.888078 esp 2.2.2.2 > 1.1.1.1 spi 0x87b9932c seq 89641 len 324 (ttl 46, id 50367, len 344) 17:21:00.890475 esp 1.1.1.1 > 2.2.2.2 spi 0x54d46678 seq 132645 len 324 [tos 0xb8] (ttl 64, id 11430, len 344, bad cksum 0! differs by 5fd8) 17:21:00.912343 esp 1.1.1.1 > 2.2.2.2 spi 0x54d46678 seq 132646 len 84 (DF) (ttl 64, id 28840, len 104, bad cksum 0! differs by dd7d) 17:21:00.918568 esp 2.2.2.2 > 1.1.1.1 spi 0x87b9932c seq 89642 len 324 (ttl 46, id 19061, len 344) 17:21:00.920435 esp 1.1.1.1 > 2.2.2.2 spi 0x54d46678 seq 132647 len 324 [tos 0xb8] (ttl 64, id 33521, len 344, bad cksum 0! differs by 98d) 17:21:00.949296 esp 2.2.2.2 > 1.1.1.1 spi 0x87b9932c seq 89643 len 324 (ttl 46, id 24659, len 344) 17:21:00.950417 esp 1.1.1.1 > 2.2.2.2 spi 0x54d46678 seq 132648 len 324 [tos 0xb8] (ttl 64, id 56867, len 344, bad cksum 0! differs by ae5a) 17:21:00.959740 esp 2.2.2.2 > 1.1.1.1 spi 0x87b9932c seq 89644 len 84 (ttl 46, id 12621, len 104) 17:21:00.977666 esp 2.2.2.2 > 1.1.1.1 spi 0x87b9932c seq 89645 len 324 (ttl 46, id 30599, len 344) The 2.2.2.2 machine runs an older version of OpenBSD, but is now slated to be upgraded RSN now. Kind regards, --Toni++
