On Fri, Oct 16, 2015 at 1:30 AM, Abdul Adil <[email protected]> wrote: > Hi OSSEC Community, > > Could any one please help with this error log from OSSEC ? > Oct 1 03:17:18 ip-XX-X-X-XX.us-west-2.server 2015:pmthrfw1 pluto[5281]: > "S_REF_IpsSitPmtToDpIpsec_5" #140687: malformed payload in packet. Probable > authentication failure (mismatch of preshared secrets?) > > And why this kind of error is occuring ,the following is the log from the > server: > 2015:09:29-00:01:22 pmthrfw1 pluto[5281]: "S_REF_IpsSitPmtToDpIpsec_5" > #134143: next payload type of ISAKMP Identification Payload has an unknown > value: 155 > 2015:09:29-00:01:22 pmthrfw1 pluto[5281]: "S_REF_IpsSitPmtToDpIpsec_5" > #134143: malformed payload in packet. Probable authentication failure > (mismatch of preshared secrets?) > 2015:09:29-00:01:22 pmthrfw1 pluto[5281]: "S_REF_IpsSitPmtToDpIpsec_5" > #134143: sending encrypted notification PAYLOAD_MALFORMED to x.x.x.x:4500 > 2015:09:29-00:01:24 pmthrfw1 pluto[5281]: "S_REF_IpsSitPmtToDpIpsec_5" > #134142: next payload type of ISAKMP Identification Payload has an unknown > value: 206 > 2015:09:29-00:01:24 pmthrfw1 pluto[5281]: "S_REF_IpsSitPmtToDpIpsec_5" > #134142: malformed payload in packet. Probable authentication failure > (mismatch of preshared secrets?) > 2015:09:29-00:01:24 pmthrfw1 pluto[5281]: "S_REF_IpsSitPmtToDpIpsec_5" > #134142: sending encrypted notification PAYLOAD_MALFORMED to x.x.x.x:4500 > 2015:09:29-00:01:32 pmthrfw1 pluto[5281]: "S_REF_IpsSitPmtToDpIpsec_5" > #134143: next payload type of ISAKMP Identification Payload has an unknown > value: 155 > 2015:09:29-00:01:32 pmthrfw1 pluto[5281]: "S_REF_IpsSitPmtToDpIpsec_5" > #134143: malformed payload in packet. Probable authentication failure > (mismatch of preshared secrets?) > > Please provide a solution to overcome this issue. >
These are not OSSEC errors. > Thank you, > Abdul Adil. > > -- > > --- > You received this message because you are subscribed to the Google Groups > "ossec-list" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > For more options, visit https://groups.google.com/d/optout. -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
