On Tue, Aug 12, 2003 at 11:44:57PM +0200, Michal Ludvig wrote:
Vanilla kernel linux-2.6.0-test2.tar.bz2, FreeS/WAN 2.01, your patch freeswan-2.01-linux-ipsec-20030803.patch.gz
2.6.0-test2 was kind of between ABI changes so there wasn't a freeswan patch specifically for it. 20030803 should work with 2.6.0-test3 though.
ACK, with 2.6.0-test3 it's working fine. Thanks a lot!
BTW I pinged from urchin (10.20.1.28) to naga (10.20.1.16) and seen this strange output on tcpdump:
naga:~ # tcpdump -i eth0 -n -x -s0 'host urchin'
tcpdump: listening on eth0
12:28:49.465424 10.20.1.28 > 10.20.1.16: ESP(spi=0x1d22b466,seq=0x1a)
4500 0088 cd23 0000 4032 96cd 0a14 011c
0a14 0110 1d22 b466 0000 001a 6cb2 04ef
42ab df1c bb68 9df8 2099 84fa 9ad8 7d9d
5383 e607 3467 09db fe81 72b2 1d79 a4c6
78db fdfa 14e7 59f0 41d5 22e1 a9b8 a2b5
d1f1 f018 92a5 294b 7a7f f0ba dc34 da97
be1d 848b 22f4 1ada 112f 2c53 8299 d404
a4ee f5bf 5927 4f2b 69d0 eb04 4817 d969
a16e 7d13 aa91 199e
12:28:49.465424 truncated-ip - 16 bytes missing! 10.20.1.28 > 69.0.0.84: 10.20.1.16 > 69.0.0.84: hmp (frag 16388:[EMAIL PROTECTED]) [tos 0x23,CE] (ipip-proto-4)
4500 0088 cd23 0000 4004 96cd 0a14 011c
4500 0054 cd23 0000 4004 96cd 0a14 011c
0a14 0110 4500 0054 0000 4000 4001 2456
0a14 011c 0a14 0110 0800 b9a7 1f06 0001
d212 3a3f 19fc 0e00 0809 0a0b 0c0d 0e0f
1011 1213 1415 1617 1819 1a1b 1c1d 1e1f
2021 2223 2425 2627 2829 2a2b 2c2d 2e2f
3031 3233 3435 3637
12:28:49.465533 10.20.1.16 > 10.20.1.28: ESP(spi=0xc7f2ce8d,seq=0x1a)
4500 0088 747f 0000 4032 ef71 0a14 0110
0a14 011c c7f2 ce8d 0000 001a e7b6 3629
c933 e640 e852 fbab 2936 ca20 74e6 9d8f
560a d882 f70a 2b70 520d e1f6 9dfc 7be0
06fe 7475 b4de 72ab c171 f5be 1481 ff76
b315 ec49 dc08 83f6 0f0b 3c93 5f4a cb43
704c 0de7 2d22 2a24 c687 ef19 2a81 91aa
8a66 a2e0 afb7 3009 7c14 7e4c f13d 0cc3
e29b d530 e88d 5bde
What does the second packet mean? Is that a bug in libpcap, kernel, freeswan (unlikely)?
How can I see the unencrypted traffic (i.e. something like 'tcpdump -i ipsec0' before?)
Michal Ludvig
_______________________________________________ FreeS/WAN Users mailing list [EMAIL PROTECTED] https://mj2.freeswan.org/cgi-bin/mj_wwwusr
