Hi OSSEC Community, Could any one please help with this error log from OSSEC ? Oct 1 03:17:18 ip-XX-X-X-XX.us-west-2.server 2015:pmthrfw1 pluto[5281]: "S_REF_IpsSitPmtToDpIpsec_5" #140687: malformed payload in packet. Probable authentication failure (mismatch of preshared secrets?)
And why this kind of error is occuring ,the following is the log from the server: 2015:09:29-00:01:22 pmthrfw1 pluto[5281]: "S_REF_IpsSitPmtToDpIpsec_5" #134143: next payload type of ISAKMP Identification Payload has an unknown value: 155 2015:09:29-00:01:22 pmthrfw1 pluto[5281]: "S_REF_IpsSitPmtToDpIpsec_5" #134143: malformed payload in packet. Probable authentication failure (mismatch of preshared secrets?) 2015:09:29-00:01:22 pmthrfw1 pluto[5281]: "S_REF_IpsSitPmtToDpIpsec_5" #134143: sending encrypted notification PAYLOAD_MALFORMED to x.x.x.x:4500 2015:09:29-00:01:24 pmthrfw1 pluto[5281]: "S_REF_IpsSitPmtToDpIpsec_5" #134142: next payload type of ISAKMP Identification Payload has an unknown value: 206 2015:09:29-00:01:24 pmthrfw1 pluto[5281]: "S_REF_IpsSitPmtToDpIpsec_5" #134142: malformed payload in packet. Probable authentication failure (mismatch of preshared secrets?) 2015:09:29-00:01:24 pmthrfw1 pluto[5281]: "S_REF_IpsSitPmtToDpIpsec_5" #134142: sending encrypted notification PAYLOAD_MALFORMED to x.x.x.x:4500 2015:09:29-00:01:32 pmthrfw1 pluto[5281]: "S_REF_IpsSitPmtToDpIpsec_5" #134143: next payload type of ISAKMP Identification Payload has an unknown value: 155 2015:09:29-00:01:32 pmthrfw1 pluto[5281]: "S_REF_IpsSitPmtToDpIpsec_5" #134143: malformed payload in packet. Probable authentication failure (mismatch of preshared secrets?) Please provide a solution to overcome this issue. Thank you, Abdul Adil. -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
2015:09:29-00:01:22 pmthrfw1 pluto[5281]: "S_REF_IpsSitPmtToDpIpsec_5" #134143: next payload type of ISAKMP Identification Payload has an unknown value: 155 2015:09:29-00:01:22 pmthrfw1 pluto[5281]: "S_REF_IpsSitPmtToDpIpsec_5" #134143: malformed payload in packet. Probable authentication failure (mismatch of preshared secrets?) 2015:09:29-00:01:22 pmthrfw1 pluto[5281]: "S_REF_IpsSitPmtToDpIpsec_5" #134143: sending encrypted notification PAYLOAD_MALFORMED to x.x.x.x:4500 2015:09:29-00:01:24 pmthrfw1 pluto[5281]: "S_REF_IpsSitPmtToDpIpsec_5" #134142: next payload type of ISAKMP Identification Payload has an unknown value: 206 2015:09:29-00:01:24 pmthrfw1 pluto[5281]: "S_REF_IpsSitPmtToDpIpsec_5" #134142: malformed payload in packet. Probable authentication failure (mismatch of preshared secrets?) 2015:09:29-00:01:24 pmthrfw1 pluto[5281]: "S_REF_IpsSitPmtToDpIpsec_5" #134142: sending encrypted notification PAYLOAD_MALFORMED to x.x.x.x:4500 2015:09:29-00:01:32 pmthrfw1 pluto[5281]: "S_REF_IpsSitPmtToDpIpsec_5" #134143: next payload type of ISAKMP Identification Payload has an unknown value: 155 2015:09:29-00:01:32 pmthrfw1 pluto[5281]: "S_REF_IpsSitPmtToDpIpsec_5" #134143: malformed payload in packet. Probable authentication failure (mismatch of preshared secrets?)
