rendered paste bodysoroth
Tue Nov 17 16:08:03 UTC 2009
+ _________________________ version
+
+ ipsec --version
Linux Openswan U2.6.ikev2-200947.git/K2.6.31-302-rs (netkey)
See `ipsec --copyright' for copyright information.
+ _________________________ /proc/version
+
+ cat /proc/version
Linux version 2.6.31-302-rs (root@RSKERNELBUILD) (gcc version 4.4.1 (Ubuntu 4.4.1-4ubuntu8) ) #7 SMP Thu Oct 29 22:57:03 UTC 2009
+ _________________________ /proc/net/ipsec_eroute
+
+ test -r /proc/net/ipsec_eroute
+ _________________________ netstat-rn
+
+ netstat -nr
+ head -n 100
Kernel IP routing table
Destination Gateway Genmask Flags MSS Window irtt Iface
173.45.226.0 0.0.0.0 255.255.255.0 U 0 0 0 eth0
0.0.0.0 173.45.226.1 0.0.0.0 UG 0 0 0 eth0
+ _________________________ /proc/net/ipsec_spi
+
+ test -r /proc/net/ipsec_spi
+ _________________________ /proc/net/ipsec_spigrp
+
+ test -r /proc/net/ipsec_spigrp
+ _________________________ /proc/net/ipsec_tncfg
+
+ test -r /proc/net/ipsec_tncfg
+ _________________________ /proc/net/pfkey
+
+ test -r /proc/net/pfkey
+ cat /proc/net/pfkey
sk RefCnt Rmem Wmem User Inode
+ _________________________ ip-xfrm-state
+
+ ip xfrm state
src 58.37.161.55 dst 173.45.226.50
proto esp spi 0xf0ee9bc6 reqid 16425 mode transport
replay-window 32
auth hmac(md5) 0x95f3a1c81731ea80e7c47323106cba01
enc cbc(des3_ede) 0x64e9747d583249c22db6c0e1e53af1909ff3e2bcae21190b
encap type espinudp sport 53684 dport 4500 addr 0.0.0.0
sel src 0.0.0.0/0 dst 0.0.0.0/0
src 173.45.226.50 dst 58.37.161.55
proto esp spi 0x1bfa2fb1 reqid 16425 mode transport
replay-window 32
auth hmac(md5) 0xd854a8683fdf01cea5cfecf211f39ef8
enc cbc(des3_ede) 0x3d3b2592262aace90163c6652c69f05cdad2a6529f076acf
encap type espinudp sport 4500 dport 53684 addr 0.0.0.0
sel src 0.0.0.0/0 dst 0.0.0.0/0
src 58.37.161.55 dst 173.45.226.50
proto esp spi 0xf9cc5827 reqid 16421 mode transport
replay-window 32
auth hmac(sha1) 0x20e25882edec2f7f0babddb0f7431acc43e2c968
enc cbc(aes) 0x2705e99e8bb0e6d281f6f30a9bba47aa
encap type espinudp sport 53872 dport 4500 addr 0.0.0.0
sel src 0.0.0.0/0 dst 0.0.0.0/0
src 173.45.226.50 dst 58.37.161.55
proto esp spi 0x0eef5c4c reqid 16421 mode transport
replay-window 32
auth hmac(sha1) 0xda6076bb077618f877a631515148fa78dfe31fd3
enc cbc(aes) 0xd2b2b6f9f2d434ead7a60d6267dcb52b
encap type espinudp sport 4500 dport 53872 addr 0.0.0.0
sel src 0.0.0.0/0 dst 0.0.0.0/0
src 58.37.161.55 dst 173.45.226.50
proto esp spi 0xd27d98a0 reqid 16413 mode transport
replay-window 32
auth hmac(sha1) 0xf19de920f9d4d1c806d1b396f237fa72ff138fa3
enc cbc(aes) 0x94e4ecd7d68cf421ca132337a9fdcfcf
encap type espinudp sport 53682 dport 4500 addr 0.0.0.0
sel src 0.0.0.0/0 dst 0.0.0.0/0
src 173.45.226.50 dst 58.37.161.55
proto esp spi 0x02a3fb69 reqid 16413 mode transport
replay-window 32
auth hmac(sha1) 0xb7143e03bc516231b72d37ff49be1b6d4d6fdfb3
enc cbc(aes) 0x86b0e07d7049dcbbab72cecf35cd724c
encap type espinudp sport 4500 dport 53682 addr 0.0.0.0
sel src 0.0.0.0/0 dst 0.0.0.0/0
+ _________________________ ip-xfrm-policy
+
+ ip xfrm policy
src 173.45.226.50/32 dst 58.37.161.55/32 proto udp sport 1701 dport 1701
dir out priority 2080
tmpl src 0.0.0.0 dst 0.0.0.0
proto esp reqid 16425 mode transport
src 58.37.161.55/32 dst 173.45.226.50/32 proto udp sport 1701 dport 1701
dir in priority 2080
tmpl src 0.0.0.0 dst 0.0.0.0
proto esp reqid 16425 mode transport
src 173.45.226.50/32 dst 58.37.161.55/32 proto udp sport 1701 dport 49300
dir out priority 2080
tmpl src 0.0.0.0 dst 0.0.0.0
proto esp reqid 16421 mode transport
src 58.37.161.55/32 dst 173.45.226.50/32 proto udp sport 49300 dport 1701
dir in priority 2080
tmpl src 0.0.0.0 dst 0.0.0.0
proto esp reqid 16421 mode transport
src 173.45.226.50/32 dst 58.37.161.55/32 proto udp sport 1701 dport 49157
dir out priority 2080
tmpl src 0.0.0.0 dst 0.0.0.0
proto esp reqid 16413 mode transport
src 58.37.161.55/32 dst 173.45.226.50/32 proto udp sport 49157 dport 1701
dir in priority 2080
tmpl src 0.0.0.0 dst 0.0.0.0
proto esp reqid 16413 mode transport
+ _________________________ /proc/crypto
+
+ test -r /proc/crypto
+ cat /proc/crypto
name : authenc(hmac(md5),cbc(des3_ede))
driver : authenc(hmac(md5-generic),cbc(des3_ede-generic))
module : authenc
priority : 0
refcnt : 3
selftest : passed
type : aead
async : yes
blocksize : 8
ivsize : 8
maxauthsize : 16
geniv : <built-in>
name : cbc(des3_ede)
driver : cbc(des3_ede-generic)
module : kernel
priority : 0
refcnt : 3
selftest : passed
type : givcipher
async : yes
blocksize : 8
min keysize : 24
max keysize : 24
ivsize : 8
geniv : chainiv
name : authenc(hmac(sha1),cbc(aes))
driver : authenc(hmac(sha1-generic),cbc(aes-asm))
module : authenc
priority : 2000
refcnt : 5
selftest : passed
type : aead
async : yes
blocksize : 16
ivsize : 16
maxauthsize : 20
geniv : <built-in>
name : cbc(aes)
driver : cbc(aes-asm)
module : kernel
priority : 200
refcnt : 5
selftest : passed
type : givcipher
async : yes
blocksize : 16
min keysize : 16
max keysize : 32
ivsize : 16
geniv : chainiv
name : sha512
driver : sha512-generic
module : sha512_generic
priority : 0
refcnt : 1
selftest : passed
type : shash
blocksize : 128
digestsize : 64
descsize : 208
name : sha384
driver : sha384-generic
module : sha512_generic
priority : 0
refcnt : 1
selftest : passed
type : shash
blocksize : 128
digestsize : 48
descsize : 208
name : deflate
driver : deflate-generic
module : deflate
priority : 0
refcnt : 1
selftest : passed
type : compression
name : rfc3686(ctr(aes))
driver : rfc3686(ctr(aes-asm))
module : ctr
priority : 200
refcnt : 1
selftest : passed
type : blkcipher
blocksize : 1
min keysize : 20
max keysize : 36
ivsize : 8
geniv : seqiv
name : ctr(aes)
driver : ctr(aes-asm)
module : ctr
priority : 200
refcnt : 1
selftest : passed
type : blkcipher
blocksize : 1
min keysize : 16
max keysize : 32
ivsize : 16
geniv : <default>
name : cbc(twofish)
driver : cbc(twofish-generic)
module : cbc
priority : 100
refcnt : 1
selftest : passed
type : blkcipher
blocksize : 16
min keysize : 16
max keysize : 32
ivsize : 16
geniv : <default>
name : twofish
driver : twofish-generic
module : twofish
priority : 100
refcnt : 1
selftest : passed
type : cipher
blocksize : 16
min keysize : 16
max keysize : 32
name : cbc(camellia)
driver : cbc(camellia-generic)
module : cbc
priority : 100
refcnt : 1
selftest : passed
type : blkcipher
blocksize : 16
min keysize : 16
max keysize : 32
ivsize : 16
geniv : <default>
name : camellia
driver : camellia-generic
module : camellia
priority : 100
refcnt : 1
selftest : passed
type : cipher
blocksize : 16
min keysize : 16
max keysize : 32
name : cbc(serpent)
driver : cbc(serpent-generic)
module : cbc
priority : 0
refcnt : 1
selftest : passed
type : blkcipher
blocksize : 16
min keysize : 0
max keysize : 32
ivsize : 16
geniv : <default>
name : tnepres
driver : tnepres-generic
module : serpent
priority : 0
refcnt : 1
selftest : passed
type : cipher
blocksize : 16
min keysize : 0
max keysize : 32
name : serpent
driver : serpent-generic
module : serpent
priority : 0
refcnt : 1
selftest : passed
type : cipher
blocksize : 16
min keysize : 0
max keysize : 32
name : cbc(aes)
driver : cbc(aes-asm)
module : cbc
priority : 200
refcnt : 5
selftest : passed
type : blkcipher
blocksize : 16
min keysize : 16
max keysize : 32
ivsize : 16
geniv : <default>
name : cbc(blowfish)
driver : cbc(blowfish-generic)
module : cbc
priority : 0
refcnt : 1
selftest : passed
type : blkcipher
blocksize : 8
min keysize : 4
max keysize : 56
ivsize : 8
geniv : <default>
name : blowfish
driver : blowfish-generic
module : blowfish
priority : 0
refcnt : 1
selftest : passed
type : cipher
blocksize : 8
min keysize : 4
max keysize : 56
name : cbc(cast5)
driver : cbc(cast5-generic)
module : cbc
priority : 0
refcnt : 1
selftest : passed
type : blkcipher
blocksize : 8
min keysize : 5
max keysize : 16
ivsize : 8
geniv : <default>
name : cast5
driver : cast5-generic
module : cast5
priority : 0
refcnt : 1
selftest : passed
type : cipher
blocksize : 8
min keysize : 5
max keysize : 16
name : cbc(des3_ede)
driver : cbc(des3_ede-generic)
module : cbc
priority : 0
refcnt : 3
selftest : passed
type : blkcipher
blocksize : 8
min keysize : 24
max keysize : 24
ivsize : 8
geniv : <default>
name : cbc(des)
driver : cbc(des-generic)
module : cbc
priority : 0
refcnt : 1
selftest : passed
type : blkcipher
blocksize : 8
min keysize : 8
max keysize : 8
ivsize : 8
geniv : <default>
name : des3_ede
driver : des3_ede-generic
module : des_generic
priority : 0
refcnt : 3
selftest : passed
type : cipher
blocksize : 8
min keysize : 24
max keysize : 24
name : des
driver : des-generic
module : des_generic
priority : 0
refcnt : 1
selftest : passed
type : cipher
blocksize : 8
min keysize : 8
max keysize : 8
name : xcbc(aes)
driver : xcbc(aes-asm)
module : xcbc
priority : 200
refcnt : 1
selftest : passed
type : hash
blocksize : 16
digestsize : 16
name : aes
driver : aes-asm
module : aes_x86_64
priority : 200
refcnt : 5
selftest : passed
type : cipher
blocksize : 16
min keysize : 16
max keysize : 32
name : aes
driver : aes-generic
module : aes_generic
priority : 100
refcnt : 1
selftest : passed
type : cipher
blocksize : 16
min keysize : 16
max keysize : 32
name : hmac(rmd160)
driver : hmac(rmd160-generic)
module : kernel
priority : 0
refcnt : 1
selftest : passed
type : hash
blocksize : 64
digestsize : 20
name : rmd160
driver : rmd160-generic
module : rmd160
priority : 0
refcnt : 1
selftest : passed
type : shash
blocksize : 64
digestsize : 20
descsize : 96
name : hmac(sha256)
driver : hmac(sha256-generic)
module : kernel
priority : 0
refcnt : 1
selftest : passed
type : hash
blocksize : 64
digestsize : 32
name : sha256
driver : sha256-generic
module : sha256_generic
priority : 0
refcnt : 1
selftest : passed
type : shash
blocksize : 64
digestsize : 32
descsize : 168
name : sha224
driver : sha224-generic
module : sha256_generic
priority : 0
refcnt : 1
selftest : passed
type : shash
blocksize : 64
digestsize : 28
descsize : 168
name : hmac(sha1)
driver : hmac(sha1-generic)
module : kernel
priority : 0
refcnt : 5
selftest : passed
type : hash
blocksize : 64
digestsize : 20
name : sha1
driver : sha1-generic
module : sha1_generic
priority : 0
refcnt : 9
selftest : passed
type : shash
blocksize : 64
digestsize : 20
descsize : 96
name : hmac(md5)
driver : hmac(md5-generic)
module : kernel
priority : 0
refcnt : 3
selftest : passed
type : hash
blocksize : 64
digestsize : 16
name : compress_null
driver : compress_null-generic
module : crypto_null
priority : 0
refcnt : 1
selftest : passed
type : compression
name : digest_null
driver : digest_null-generic
module : crypto_null
priority : 0
refcnt : 1
selftest : passed
type : shash
blocksize : 1
digestsize : 0
descsize : 0
name : ecb(cipher_null)
driver : ecb-cipher_null
module : crypto_null
priority : 100
refcnt : 1
selftest : passed
type : blkcipher
blocksize : 1
min keysize : 0
max keysize : 0
ivsize : 0
geniv : <default>
name : cipher_null
driver : cipher_null-generic
module : crypto_null
priority : 0
refcnt : 1
selftest : passed
type : cipher
blocksize : 1
min keysize : 0
max keysize : 0
name : stdrng
driver : krng
module : kernel
priority : 200
refcnt : 2
selftest : passed
type : rng
seedsize : 0
name : md5
driver : md5-generic
module : kernel
priority : 0
refcnt : 5
selftest : passed
type : shash
blocksize : 64
digestsize : 16
descsize : 88
+ __________________________/proc/sys/net/core/xfrm-star
/usr/local/libexec/ipsec/barf: 1: __________________________/proc/sys/net/core/xfrm-star: not found
+ echo -n /proc/sys/net/core/xfrm_acq_expires:
/proc/sys/net/core/xfrm_acq_expires: + cat /proc/sys/net/core/xfrm_acq_expires
30
+ echo -n /proc/sys/net/core/xfrm_aevent_etime:
/proc/sys/net/core/xfrm_aevent_etime: + cat /proc/sys/net/core/xfrm_aevent_etime
10
+ echo -n /proc/sys/net/core/xfrm_aevent_rseqth:
/proc/sys/net/core/xfrm_aevent_rseqth: + cat /proc/sys/net/core/xfrm_aevent_rseqth
2
+ echo -n /proc/sys/net/core/xfrm_larval_drop:
/proc/sys/net/core/xfrm_larval_drop: + cat /proc/sys/net/core/xfrm_larval_drop
1
+ _________________________ /proc/sys/net/ipsec-star
+
+ test -d /proc/sys/net/ipsec
+ _________________________ ipsec/status
+
+ ipsec auto --status
whack: is Pluto running? connect() for "/var/run/pluto/pluto.ctl" failed (111 Connection refused)
+ _________________________ ifconfig-a
+
+ ifconfig -a
dummy0 Link encap:Ethernet HWaddr da:9e:c3:68:a9:1f
BROADCAST NOARP MTU:1500 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:0 (0.0 B) TX bytes:0 (0.0 B)
eql Link encap:Serial Line IP
MASTER MTU:576 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:5
RX bytes:0 (0.0 B) TX bytes:0 (0.0 B)
eth0 Link encap:Ethernet HWaddr 40:40:ac:dd:d4:24
inet addr:173.45.226.50 Bcast:173.45.226.255 Mask:255.255.255.0
inet6 addr: fe80::4240:acff:fedd:d424/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:125675 errors:0 dropped:0 overruns:0 frame:0
TX packets:128113 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:70131167 (70.1 MB) TX bytes:73710417 (73.7 MB)
ifb0 Link encap:Ethernet HWaddr 56:c8:f4:68:63:f0
BROADCAST NOARP MTU:1500 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:32
RX bytes:0 (0.0 B) TX bytes:0 (0.0 B)
ifb1 Link encap:Ethernet HWaddr 12:f5:14:48:60:5b
BROADCAST NOARP MTU:1500 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:32
RX bytes:0 (0.0 B) TX bytes:0 (0.0 B)
lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
inet6 addr: ::1/128 Scope:Host
UP LOOPBACK RUNNING MTU:16436 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:0 (0.0 B) TX bytes:0 (0.0 B)
+ _________________________ ip-addr-list
+
+ ip addr list
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 16436 qdisc noqueue state UNKNOWN
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
inet6 ::1/128 scope host
valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UNKNOWN qlen 1000
link/ether 40:40:ac:dd:d4:24 brd ff:ff:ff:ff:ff:ff
inet 173.45.226.50/24 brd 173.45.226.255 scope global eth0
inet6 fe80::4240:acff:fedd:d424/64 scope link
valid_lft forever preferred_lft forever
3: dummy0: <BROADCAST,NOARP> mtu 1500 qdisc noop state DOWN
link/ether da:9e:c3:68:a9:1f brd ff:ff:ff:ff:ff:ff
4: ifb0: <BROADCAST,NOARP> mtu 1500 qdisc noop state DOWN qlen 32
link/ether 56:c8:f4:68:63:f0 brd ff:ff:ff:ff:ff:ff
5: ifb1: <BROADCAST,NOARP> mtu 1500 qdisc noop state DOWN qlen 32
link/ether 12:f5:14:48:60:5b brd ff:ff:ff:ff:ff:ff
6: eql: <MASTER> mtu 576 qdisc noop state DOWN qlen 5
link/slip
+ _________________________ ip-route-list
+
+ ip route list
173.45.226.0/24 dev eth0 proto kernel scope link src 173.45.226.50
default via 173.45.226.1 dev eth0 metric 100
+ _________________________ ip-rule-list
+
+ ip rule list
0: from all lookup local
32766: from all lookup main
32767: from all lookup default
+ _________________________ ipsec_verify
+
+ ipsec verify --nocolour
Checking your system to see if IPsec got installed and started correctly:
Version check and ipsec on-path [OK]
Linux Openswan U2.6.ikev2-200947.git/K2.6.31-302-rs (netkey)
Checking for IPsec support in kernel [OK]
NETKEY detected, testing for disabled ICMP send_redirects [OK]
NETKEY detected, testing for disabled ICMP accept_redirects [OK]
Checking for RSA private key (/etc/ipsec.secrets) [OK]
Checking that pluto is running [FAILED]
whack: is Pluto running? connect() for "/var/run/pluto/pluto.ctl" failed (111 Connection refused)
Two or more interfaces found, checking IP forwarding [FAILED]
whack: is Pluto running? connect() for "/var/run/pluto/pluto.ctl" failed (111 Connection refused)
Checking NAT and MASQUERADEing
Checking for 'ip' command [OK]
Checking for 'iptables' command [OK]
Opportunistic Encryption Support [DISABLED]
+ _________________________ mii-tool
+
+ [ -x /sbin/mii-tool ]
+ /sbin/mii-tool -v
SIOCGMIIPHY on 'eth0' failed: Operation not supported
no MII interfaces found
+ _________________________ ipsec/directory
+
+ ipsec --directory
/usr/local/lib/ipsec
+ _________________________ hostname/fqdn
+
+ hostname --fqdn
soroth
+ _________________________ hostname/ipaddress
+
+ hostname --ip-address
173.45.226.50
+ _________________________ uptime
+
+ uptime
16:08:03 up 1 day, 5:46, 1 user, load average: 0.00, 0.00, 0.00
+ _________________________ ps
+
+ ps alxwf
+ egrep -i ppid|pluto|ipsec|klips
F UID PID PPID PRI NI VSZ RSS WCHAN STAT TTY TIME COMMAND
0 0 8423 7356 20 0 4004 624 wait S+ pts/0 0:00 \_ /bin/sh /usr/local/libexec/ipsec/barf
0 0 8508 8423 20 0 6060 640 pipe_w S+ pts/0 0:00 \_ egrep -i ppid|pluto|ipsec|klips
+ _________________________ ipsec/showdefaults
+
+ ipsec showdefaults
routephys=eth0
routevirt=none
routeaddr=173.45.226.50
routenexthop=173.45.226.1
+ _________________________ ipsec/conf
+
+ ipsec _include /etc/ipsec.conf
+ ipsec _keycensor
#< /etc/ipsec.conf 1
# /etc/ipsec.conf - Openswan IPsec configuration file
# RCSID $Id: ipsec.conf.in,v 1.16 2005/07/26 12:29:45 ken Exp $
# This file: /usr/share/doc/openswan/ipsec.conf-sample
#
# Manual: ipsec.conf.5
version 2.0 # conforms to second version of ipsec.conf specification
# basic configuration
config setup
nat_traversal=yes
virtual_private=%v4:10.0.0.0/8,%v4:192.168.0.0/16,%v4:172.16.0.0/12
oe=off
protostack=netkey
# Add connections here
# sample VPN connection
# for more examples, see /etc/ipsec.d/examples/
#conn sample
# # Left security gateway, subnet behind it, nexthop toward right.
# left=10.0.0.1
# leftsubnet=172.16.0.0/24
# leftnexthop=10.22.33.44
# # Right security gateway, subnet behind it, nexthop toward left.
# right=10.12.12.1
# rightsubnet=192.168.0.0/24
# rightnexthop=10.101.102.103
# # To authorize this connection, but not actually start it,
# # at startup, uncomment this.
# #auto=start
#< /etc/ipsec.d/l2tp-psk.conf 1
conn L2TP-PSK-NAT
rightsubnet=vhost:%priv
also=L2TP-PSK-noNAT
conn L2TP-PSK-noNAT
authby=secret
pfs=no
auto=add
keyingtries=3
rekey=no
ikelifetime=8h
keylife=1h
type=transport
left=173.45.226.50
leftnexthop=%defaultroute
leftprotoport=17/1701
right=%any
rightprotoport=17/%any
conn passthrough-for-non-l2tp
type=passthrough
left=173.45.226.50
leftnexthop=%defaultroute
right=0.0.0.0
rightsubnet=0.0.0.0/0
auto=route
#> /etc/ipsec.conf 37
+ _________________________ ipsec/secrets
+
+ ipsec _include /etc/ipsec.secrets
+ ipsec _secretcensor
#< /etc/ipsec.secrets 1
# RCSID $Id: ipsec.secrets.proto,v 1.3.6.1 2005/09/28 13:59:14 paul Exp $
# This file holds shared secrets or RSA private keys for inter-Pluto
# authentication. See ipsec_pluto(8) manpage, and HTML documentation.
# RSA private key for this host, authenticating it to any other host
# which knows the public part. Suitable public keys, for ipsec.conf, DNS,
# or configuration of other implementations, can be extracted conveniently
# with "[sums to ef67...]".
%any %any : PSK "[sums to 2867...]"
+ _________________________ ipsec/listall
+
+ ipsec auto --listall
whack: is Pluto running? connect() for "/var/run/pluto/pluto.ctl" failed (111 Connection refused)
+ [ /etc/ipsec.d/policies ]
+ basename /etc/ipsec.d/policies/block
+ base=block
+ _________________________ ipsec/policies/block
+
+ cat /etc/ipsec.d/policies/block
# This file defines the set of CIDRs (network/mask-length) to which
# communication should never be allowed.
#
# See /usr/share/doc/openswan/policygroups.html for details.
#
# $Id: block.in,v 1.4 2003/02/17 02:22:15 mcr Exp $
#
+ basename /etc/ipsec.d/policies/clear
+ base=clear
+ _________________________ ipsec/policies/clear
+
+ cat /etc/ipsec.d/policies/clear
# This file defines the set of CIDRs (network/mask-length) to which
# communication should always be in the clear.
#
# See /usr/share/doc/openswan/policygroups.html for details.
#
# root name servers should be in the clear
192.58.128.30/32
198.41.0.4/32
192.228.79.201/32
192.33.4.12/32
128.8.10.90/32
192.203.230.10/32
192.5.5.241/32
192.112.36.4/32
128.63.2.53/32
192.36.148.17/32
193.0.14.129/32
199.7.83.42/32
202.12.27.33/32
+ basename /etc/ipsec.d/policies/clear-or-private
+ base=clear-or-private
+ _________________________ ipsec/policies/clear-or-private
+
+ cat /etc/ipsec.d/policies/clear-or-private
# This file defines the set of CIDRs (network/mask-length) to which
# we will communicate in the clear, or, if the other side initiates IPSEC,
# using encryption. This behaviour is also called "Opportunistic Responder".
#
# See /usr/share/doc/openswan/policygroups.html for details.
#
# $Id: clear-or-private.in,v 1.4 2003/02/17 02:22:15 mcr Exp $
#
+ basename /etc/ipsec.d/policies/private
+ base=private
+ _________________________ ipsec/policies/private
+
+ cat /etc/ipsec.d/policies/private
# This file defines the set of CIDRs (network/mask-length) to which
# communication should always be private (i.e. encrypted).
# See /usr/share/doc/openswan/policygroups.html for details.
#
# $Id: private.in,v 1.4 2003/02/17 02:22:15 mcr Exp $
#
+ basename /etc/ipsec.d/policies/private-or-clear
+ base=private-or-clear
+ _________________________ ipsec/policies/private-or-clear
+
+ cat /etc/ipsec.d/policies/private-or-clear
# This file defines the set of CIDRs (network/mask-length) to which
# communication should be private, if possible, but in the clear otherwise.
#
# If the target has a TXT (later IPSECKEY) record that specifies
# authentication material, we will require private (i.e. encrypted)
# communications. If no such record is found, communications will be
# in the clear.
#
# See /usr/share/doc/openswan/policygroups.html for details.
#
# $Id: private-or-clear.in,v 1.5 2003/02/17 02:22:15 mcr Exp $
#
0.0.0.0/0
+ _________________________ ipsec/ls-libdir
+
+ ls -l /usr/local/lib/ipsec
total 264
-rwxr-xr-x 1 root root 19079 Nov 16 07:55 _copyright
-rwxr-xr-x 1 root root 19079 Nov 16 07:54 _copyright.old
-rwxr-xr-x 1 root root 2379 Nov 16 07:55 _include
-rwxr-xr-x 1 root root 2379 Nov 16 07:55 _include.old
-rwxr-xr-x 1 root root 1475 Nov 16 07:55 _keycensor
-rwxr-xr-x 1 root root 1475 Nov 16 07:55 _keycensor.old
-rwxr-xr-x 1 root root 2632 Nov 16 07:55 _plutoload
-rwxr-xr-x 1 root root 2632 Nov 16 07:55 _plutoload.old
-rwxr-xr-x 1 root root 8313 Nov 16 07:55 _plutorun
-rwxr-xr-x 1 root root 8313 Nov 16 07:55 _plutorun.old
-rwxr-xr-x 1 root root 12943 Nov 16 07:55 _realsetup
-rwxr-xr-x 1 root root 12943 Nov 16 07:55 _realsetup.old
-rwxr-xr-x 1 root root 1975 Nov 16 07:55 _secretcensor
-rwxr-xr-x 1 root root 1975 Nov 16 07:55 _secretcensor.old
-rwxr-xr-x 1 root root 8567 Nov 16 07:55 _startklips
-rwxr-xr-x 1 root root 8567 Nov 16 07:55 _startklips.old
-rwxr-xr-x 1 root root 6042 Nov 16 07:55 _startnetkey
-rwxr-xr-x 1 root root 6042 Nov 16 07:55 _startnetkey.old
-rwxr-xr-x 1 root root 4886 Nov 16 07:55 _updown
-rwxr-xr-x 1 root root 14028 Nov 16 07:55 _updown.klips
-rwxr-xr-x 1 root root 14028 Nov 16 07:55 _updown.klips.old
-rwxr-xr-x 1 root root 11798 Nov 16 07:55 _updown.mast
-rwxr-xr-x 1 root root 11798 Nov 16 07:55 _updown.mast.old
-rwxr-xr-x 1 root root 8534 Nov 16 07:55 _updown.netkey
-rwxr-xr-x 1 root root 8534 Nov 16 07:55 _updown.netkey.old
-rwxr-xr-x 1 root root 4886 Nov 16 07:55 _updown.old
+ _________________________ ipsec/ls-execdir
+
+ ls -l /usr/local/libexec/ipsec
total 10176
-rwxr-xr-x 1 root root 31713 Nov 16 07:55 _pluto_adns
-rwxr-xr-x 1 root root 31713 Nov 16 07:54 _pluto_adns.old
-rwxr-xr-x 1 root root 455389 Nov 16 07:55 addconn
-rwxr-xr-x 1 root root 455389 Nov 16 07:54 addconn.old
-rwxr-xr-x 1 root root 6015 Nov 16 07:55 auto
-rwxr-xr-x 1 root root 6015 Nov 16 07:55 auto.old
-rwxr-xr-x 1 root root 10828 Nov 16 07:55 barf
-rwxr-xr-x 1 root root 10828 Nov 16 07:55 barf.old
-rwxr-xr-x 1 root root 190812 Nov 16 07:55 eroute
-rwxr-xr-x 1 root root 190812 Nov 16 07:54 eroute.old
-rwxr-xr-x 1 root root 62290 Nov 16 07:55 ikeping
-rwxr-xr-x 1 root root 62290 Nov 16 07:55 ikeping.old
-rwxr-xr-x 1 root root 127483 Nov 16 07:55 klipsdebug
-rwxr-xr-x 1 root root 127483 Nov 16 07:54 klipsdebug.old
-rwxr-xr-x 1 root root 2591 Nov 16 07:55 look
-rwxr-xr-x 1 root root 2591 Nov 16 07:55 look.old
-rwxr-xr-x 1 root root 2182 Nov 16 07:55 newhostkey
-rwxr-xr-x 1 root root 2182 Nov 16 07:55 newhostkey.old
-rwxr-xr-x 1 root root 117899 Nov 16 07:55 pf_key
-rwxr-xr-x 1 root root 117899 Nov 16 07:54 pf_key.old
-rwxr-xr-x 1 root root 2654015 Nov 16 07:55 pluto
-rwxr-xr-x 1 root root 2654015 Nov 16 07:54 pluto.old
-rwxr-xr-x 1 root root 22118 Nov 16 07:55 ranbits
-rwxr-xr-x 1 root root 22118 Nov 16 07:55 ranbits.old
-rwxr-xr-x 1 root root 44927 Nov 16 07:55 rsasigkey
-rwxr-xr-x 1 root root 44927 Nov 16 07:55 rsasigkey.old
-rwxr-xr-x 1 root root 766 Nov 16 07:55 secrets
-rwxr-xr-x 1 root root 766 Nov 16 07:55 secrets.old
lrwxrwxrwx 1 root root 17 Nov 16 07:55 setup -> /etc/init.d/ipsec
-rwxr-xr-x 1 root root 1054 Nov 16 07:55 showdefaults
-rwxr-xr-x 1 root root 1054 Nov 16 07:55 showdefaults.old
-rwxr-xr-x 1 root root 537501 Nov 16 07:55 showhostkey
-rwxr-xr-x 1 root root 537501 Nov 16 07:55 showhostkey.old
-rwxr-xr-x 1 root root 70462 Nov 16 07:55 showpolicy
-rwxr-xr-x 1 root root 70462 Nov 16 07:54 showpolicy.old
-rwxr-xr-x 1 root root 329609 Nov 16 07:55 spi
-rwxr-xr-x 1 root root 329609 Nov 16 07:54 spi.old
-rwxr-xr-x 1 root root 161150 Nov 16 07:55 spigrp
-rwxr-xr-x 1 root root 161150 Nov 16 07:54 spigrp.old
-rwxr-xr-x 1 root root 142172 Nov 16 07:55 tncfg
-rwxr-xr-x 1 root root 142172 Nov 16 07:54 tncfg.old
-rwxr-xr-x 1 root root 13412 Nov 16 07:55 verify
-rwxr-xr-x 1 root root 13412 Nov 16 07:55 verify.old
-rwxr-xr-x 1 root root 130689 Nov 16 07:55 whack
-rwxr-xr-x 1 root root 130689 Nov 16 07:54 whack.old
+ _________________________ /proc/net/dev
+
+ cat /proc/net/dev
Inter-| Receive | Transmit
face |bytes packets errs drop fifo frame compressed multicast|bytes packets errs drop fifo colls carrier compressed
lo: 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
eth0:70131233 125676 0 0 0 0 0 0 73710417 128113 0 0 0 0 0 0
dummy0: 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
ifb0: 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
ifb1: 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
eql: 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
+ _________________________ /proc/net/route
+
+ cat /proc/net/route
Iface Destination Gateway Flags RefCnt Use Metric Mask MTU Window IRTT
eth0 00E22DAD 00000000 0001 0 0 0 00FFFFFF 0 0 0
eth0 00000000 01E22DAD 0003 0 0 100 00000000 0 0 0
+ _________________________ /proc/sys/net/ipv4/ip_no_pmtu_disc
+
+ cat /proc/sys/net/ipv4/ip_no_pmtu_disc
0
+ _________________________ /proc/sys/net/ipv4/ip_forward
+
+ cat /proc/sys/net/ipv4/ip_forward
1
+ _________________________ /proc/sys/net/ipv4/tcp_ecn
+
+ cat /proc/sys/net/ipv4/tcp_ecn
2
+ _________________________ /proc/sys/net/ipv4/conf/star-rp_filter
+
+ cd /proc/sys/net/ipv4/conf
+ egrep ^ all/rp_filter default/rp_filter dummy0/rp_filter eql/rp_filter eth0/rp_filter ifb0/rp_filter ifb1/rp_filter lo/rp_filter
all/rp_filter:1
default/rp_filter:1
dummy0/rp_filter:1
eql/rp_filter:1
eth0/rp_filter:1
ifb0/rp_filter:1
ifb1/rp_filter:1
lo/rp_filter:1
+ _________________________ /proc/sys/net/ipv4/conf/star-star-redirects
+
+ cd /proc/sys/net/ipv4/conf
+ egrep ^ all/accept_redirects all/secure_redirects all/send_redirects default/accept_redirects default/secure_redirects default/send_redirects dummy0/accept_redirects dummy0/secure_redirects dummy0/send_redirects eql/accept_redirects eql/secure_redirects eql/send_redirects eth0/accept_redirects eth0/secure_redirects eth0/send_redirects ifb0/accept_redirects ifb0/secure_redirects ifb0/send_redirects ifb1/accept_redirects ifb1/secure_redirects ifb1/send_redirects lo/accept_redirects lo/secure_redirects lo/send_redirects
all/accept_redirects:0
all/secure_redirects:1
all/send_redirects:0
default/accept_redirects:0
default/secure_redirects:1
default/send_redirects:0
dummy0/accept_redirects:0
dummy0/secure_redirects:1
dummy0/send_redirects:0
eql/accept_redirects:0
eql/secure_redirects:1
eql/send_redirects:0
eth0/accept_redirects:0
eth0/secure_redirects:1
eth0/send_redirects:0
ifb0/accept_redirects:0
ifb0/secure_redirects:1
ifb0/send_redirects:0
ifb1/accept_redirects:0
ifb1/secure_redirects:1
ifb1/send_redirects:0
lo/accept_redirects:0
lo/secure_redirects:1
lo/send_redirects:0
+ _________________________ /proc/sys/net/ipv4/tcp_window_scaling
+
+ cat /proc/sys/net/ipv4/tcp_window_scaling
1
+ _________________________ /proc/sys/net/ipv4/tcp_adv_win_scale
+
+ cat /proc/sys/net/ipv4/tcp_adv_win_scale
2
+ _________________________ uname-a
+
+ uname -a
Linux soroth 2.6.31-302-rs #7 SMP Thu Oct 29 22:57:03 UTC 2009 x86_64 GNU/Linux
+ _________________________ config-built-with
+
+ test -r /proc/config_built_with
+ _________________________ distro-release
+
+ test -f /etc/redhat-release
+ test -f /etc/debian-release
+ test -f /etc/SuSE-release
+ test -f /etc/mandrake-release
+ test -f /etc/mandriva-release
+ test -f /etc/gentoo-release
+ _________________________ /proc/net/ipsec_version
+
+ test -r /proc/net/ipsec_version
+ test -r /proc/net/pfkey
+ uname -r
+ echo NETKEY (2.6.31-302-rs) support detected
NETKEY (2.6.31-302-rs) support detected
+ _________________________ iptables
+
+ test -r /sbin/iptables
+ iptables -L -v -n
Chain INPUT (policy ACCEPT 65561 packets, 9658K bytes)
pkts bytes target prot opt in out source destination
Chain FORWARD (policy ACCEPT 80069 packets, 61M bytes)
pkts bytes target prot opt in out source destination
Chain OUTPUT (policy ACCEPT 104K packets, 124M bytes)
pkts bytes target prot opt in out source destination
+ _________________________ iptables-nat
+
+ iptables -t nat -L -v -n
Chain PREROUTING (policy ACCEPT 3346 packets, 217K bytes)
pkts bytes target prot opt in out source destination
Chain POSTROUTING (policy ACCEPT 5 packets, 508 bytes)
pkts bytes target prot opt in out source destination
1482 110K SNAT all -- * * 10.15.15.0/24 0.0.0.0/0 to:173.45.226.50
Chain OUTPUT (policy ACCEPT 5 packets, 508 bytes)
pkts bytes target prot opt in out source destination
+ _________________________ iptables-mangle
+
+ iptables -t mangle -L -v -n
Chain PREROUTING (policy ACCEPT 93 packets, 6180 bytes)
pkts bytes target prot opt in out source destination
Chain INPUT (policy ACCEPT 93 packets, 6180 bytes)
pkts bytes target prot opt in out source destination
Chain FORWARD (policy ACCEPT 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
Chain OUTPUT (policy ACCEPT 40 packets, 86128 bytes)
pkts bytes target prot opt in out source destination
Chain POSTROUTING (policy ACCEPT 40 packets, 86128 bytes)
pkts bytes target prot opt in out source destination
+ _________________________ /proc/modules
+
+ test -f /proc/modules
+ cat /proc/modules
iptable_mangle 3136 0 - Live 0xffffffffa0540000
xfrm_user 24736 0 - Live 0xffffffffa0516000
ah6 6592 0 - Live 0xffffffffa050f000
ah4 5920 0 - Live 0xffffffffa0508000
esp6 7008 0 - Live 0xffffffffa0501000
esp4 7360 6 - Live 0xffffffffa04fa000
xfrm4_mode_beet 3040 0 - Live 0xffffffffa04f4000
xfrm4_tunnel 2816 0 - Live 0xffffffffa04ee000
xfrm4_mode_tunnel 2944 0 - Live 0xffffffffa04e8000
xfrm4_mode_transport 2208 12 - Live 0xffffffffa04e2000
xfrm6_mode_transport 2272 0 - Live 0xffffffffa04dc000
xfrm6_mode_ro 2112 0 - Live 0xffffffffa04d6000
xfrm6_mode_beet 2912 0 - Live 0xffffffffa04d0000
xfrm6_mode_tunnel 2816 0 - Live 0xffffffffa04ca000
ipcomp 3584 0 - Live 0xffffffffa04c4000
ipcomp6 3712 0 - Live 0xffffffffa04be000
xfrm6_tunnel 9248 1 ipcomp6, Live 0xffffffffa04b6000
af_key 32048 0 - Live 0xffffffffa049c000
ppp_deflate 5600 0 - Live 0xffffffffa03d3000
bsd_comp 6112 0 - Live 0xffffffffa03cc000
ppp_async 10656 0 - Live 0xffffffffa03c4000
crc_ccitt 2336 1 ppp_async, Live 0xffffffffa03c1000
authenc 6624 6 - Live 0xffffffffa03ba000
iptable_nat 5888 1 - Live 0xffffffffa03b3000
nf_nat 22036 1 iptable_nat, Live 0xffffffffa03a8000
nf_conntrack_ipv4 16056 3 iptable_nat,nf_nat, Live 0xffffffffa039f000
nf_conntrack 79936 3 iptable_nat,nf_nat,nf_conntrack_ipv4, Live 0xffffffffa0386000
nf_defrag_ipv4 2400 1 nf_conntrack_ipv4, Live 0xffffffffa0380000
iptable_filter 3136 0 - Live 0xffffffffa037a000
ip_tables 20656 3 iptable_mangle,iptable_nat,iptable_filter, Live 0xffffffffa036f000
x_tables 25224 2 iptable_nat,ip_tables, Live 0xffffffffa0363000
ccm 10496 0 - Live 0xffffffffa02b7000
ecb 3296 0 - Live 0xffffffffa02b1000
sha512_generic 5760 0 - Live 0xffffffffa02aa000
tunnel4 3888 1 xfrm4_tunnel, Live 0xffffffffa0252000
xfrm_ipcomp 6956 2 ipcomp,ipcomp6, Live 0xffffffffa021e000
tunnel6 3728 1 xfrm6_tunnel, Live 0xffffffffa0210000
deflate 3552 0 - Live 0xffffffffa01fd000
zlib_deflate 22584 2 ppp_deflate,deflate, Live 0xffffffffa01f5000
ctr 5088 0 - Live 0xffffffffa01ee000
twofish 6560 0 - Live 0xffffffffa01e7000
twofish_common 15200 1 twofish, Live 0xffffffffa01e1000
camellia 19776 0 - Live 0xffffffffa01d7000
serpent 19040 0 - Live 0xffffffffa01cd000
blowfish 8512 0 - Live 0xffffffffa01c5000
cast5 15904 0 - Live 0xffffffffa01bc000
des_generic 17408 2 - Live 0xffffffffa01b2000
cbc 4128 6 - Live 0xffffffffa01ab000
cryptd 7944 0 - Live 0xffffffffa0194000
aes_x86_64 8992 4 - Live 0xffffffffa018c000
aes_generic 28480 1 aes_x86_64, Live 0xffffffffa0180000
xcbc 5544 0 - Live 0xffffffffa0179000
rmd160 8768 0 - Live 0xffffffffa0171000
sha256_generic 10720 0 - Live 0xffffffffa0162000
sha1_generic 2656 8 - Live 0xffffffffa0155000
crypto_null 3872 0 - Live 0xffffffffa014f000
ipv6 308096 31 ah6,esp6,xfrm6_mode_beet,xfrm6_mode_tunnel,ipcomp6,xfrm6_tunnel,tunnel6, Live 0xffffffffa00f1000
raid10 24736 0 - Live 0xffffffffa00e5000
raid456 59104 0 - Live 0xffffffffa00d1000
raid6_pq 80928 1 raid456, Live 0xffffffffa00b8000
async_xor 3008 1 raid456, Live 0xffffffffa00b2000
async_memcpy 2144 1 raid456, Live 0xffffffffa00ac000
async_tx 3424 3 raid456,async_xor,async_memcpy, Live 0xffffffffa00a6000
xor 5776 2 raid456,async_xor, Live 0xffffffffa009f000
raid1 25472 0 - Live 0xffffffffa0093000
raid0 8260 0 - Live 0xffffffffa008b000
multipath 9060 0 - Live 0xffffffffa0083000
linear 5604 0 - Live 0xffffffffa007c000
md_mod 101252 6 raid10,raid456,raid1,raid0,multipath,linear, Live 0xffffffffa005e000
dm_mirror 16872 0 - Live 0xffffffffa0054000
dm_region_hash 14048 1 dm_mirror, Live 0xffffffffa004e000
dm_log 11204 2 dm_mirror,dm_region_hash, Live 0xffffffffa0046000
dm_snapshot 25932 0 - Live 0xffffffffa003a000
dm_mod 79784 3 dm_mirror,dm_log,dm_snapshot, Live 0xffffffffa0021000
fuse 70752 1 - Live 0xffffffffa000a000
loop 18988 0 - Live 0xffffffffa0000000
+ _________________________ /proc/meminfo
+
+ cat /proc/meminfo
MemTotal: 329036 kB
MemFree: 75896 kB
Buffers: 14084 kB
Cached: 115668 kB
SwapCached: 0 kB
Active: 87296 kB
Inactive: 52512 kB
Active(anon): 10656 kB
Inactive(anon): 0 kB
Active(file): 76640 kB
Inactive(file): 52512 kB
Unevictable: 0 kB
Mlocked: 0 kB
SwapTotal: 524280 kB
SwapFree: 524280 kB
Dirty: 48 kB
Writeback: 0 kB
AnonPages: 10020 kB
Mapped: 5780 kB
Slab: 21400 kB
SReclaimable: 9116 kB
SUnreclaim: 12284 kB
PageTables: 0 kB
NFS_Unstable: 0 kB
Bounce: 0 kB
WritebackTmp: 0 kB
CommitLimit: 688796 kB
Committed_AS: 491164 kB
VmallocTotal: 34359738367 kB
VmallocUsed: 3084 kB
VmallocChunk: 34359733587 kB
DirectMap4k: 262144 kB
DirectMap2M: 0 kB
+ _________________________ /proc/net/ipsec-ls
+
+ test -f /proc/net/ipsec_version
+ _________________________ usr/src/linux/.config
+
+ test -f /proc/config.gz
+ uname -r
+ test -f /lib/modules/2.6.31-302-rs/build/.config
+ echo no .config file found, cannot list kernel properties
no .config file found, cannot list kernel properties
+ _________________________ etc/syslog.conf
+
+ _________________________ etc/syslog-ng/syslog-ng.conf
+
+ cat /etc/syslog-ng/syslog-ng.conf
cat: /etc/syslog-ng/syslog-ng.conf: No such file or directory
+ cat /etc/syslog.conf
cat: /etc/syslog.conf: No such file or directory
+ _________________________ etc/resolv.conf
+
+ cat /etc/resolv.conf
nameserver 173.45.224.4
nameserver 173.45.224.5+ _________________________ lib/modules-ls
+
+ ls -ltr /lib/modules
total 4
drwxr-xr-x 4 root root 4096 Oct 30 16:29 2.6.31-302-rs
+ _________________________ fipscheck
+
+ cat /proc/sys/crypto/fips_enabled
cat: /proc/sys/crypto/fips_enabled: No such file or directory
+ _________________________ /proc/ksyms-netif_rx
+
+ test -r /proc/ksyms
+ test -r /proc/kallsyms
+ egrep netif_rx /proc/kallsyms
ffffffff804989c0 T netif_rx
ffffffff80498d10 T netif_rx_ni
ffffffff80695fd0 r __ksymtab_netif_rx
ffffffff80696340 r __ksymtab_netif_rx_ni
ffffffff806a13f8 r __kcrctab_netif_rx
ffffffff806a15b0 r __kcrctab_netif_rx_ni
ffffffff806b2dd4 r __kstrtab_netif_rx
ffffffff806b3196 r __kstrtab_netif_rx_ni
ffffffff804989c0 u netif_rx [ipv6]
+ _________________________ lib/modules-netif_rx
+
+ modulegoo kernel/net/ipv4/ipip.o netif_rx
+ set +x
2.6.31-302-rs:
+ _________________________ kern.debug
+
+ test -f /var/log/kern.debug
+ _________________________ klog
+
+ sed -n 480,$p /var/log/syslog
+ egrep -i ipsec|klips|pluto
+ cat
Nov 17 09:11:10 soroth ipsec_setup: Starting Openswan IPsec U2.6.ikev2-200947.git/K2.6.31-302-rs...
Nov 17 09:11:10 soroth ipsec_setup: Using NETKEY(XFRM) stack
Nov 17 09:11:11 soroth pluto: adjusting ipsec.d to /etc/ipsec.d
Nov 17 09:11:11 soroth ipsec__plutorun: adjusting ipsec.d to /etc/ipsec.d
Nov 17 09:11:11 soroth ipsec_setup: ...Openswan IPsec started
Nov 17 09:11:11 soroth ipsec__plutorun: 002 added connection description "L2TP-PSK-NAT"
Nov 17 09:11:11 soroth ipsec__plutorun: 002 added connection description "L2TP-PSK-noNAT"
Nov 17 09:11:11 soroth ipsec__plutorun: 002 added connection description "passthrough-for-non-l2tp"
Nov 17 09:11:11 soroth ipsec__plutorun: 003 NAT-Traversal: Trying new style NAT-T
Nov 17 09:11:11 soroth ipsec__plutorun: 003 NAT-Traversal: ESPINUDP(1) setup failed for new style NAT-T family IPv4 (errno=19)
Nov 17 09:11:11 soroth ipsec__plutorun: 003 NAT-Traversal: Trying old style NAT-T
Nov 17 10:13:21 soroth ipsec__plutorun: Aborted
Nov 17 10:13:21 soroth ipsec__plutorun: !pluto failure!: exited with error status 134 (signal 6)
Nov 17 10:13:21 soroth ipsec__plutorun: restarting IPsec after pause...
+ _________________________ plog
+
+ egrep -i pluto
+ sed -n 54253,$p /var/log/auth.log
+ cat
Nov 17 09:11:11 soroth ipsec__plutorun: Starting Pluto subsystem...
Nov 17 09:11:11 soroth pluto[8039]: Starting Pluto (Openswan Version 2.6.ikev2-200947.git; Vendor ID OEvQbq`{feIx) pid:8039
Nov 17 09:11:11 soroth pluto[8039]: Setting NAT-Traversal port-4500 floating to on
Nov 17 09:11:11 soroth pluto[8039]: port floating activation criteria nat_t=1/port_float=1
Nov 17 09:11:11 soroth pluto[8039]: including NAT-Traversal patch (Version 0.6c)
Nov 17 09:11:11 soroth pluto[8039]: using /dev/urandom as source of random entropy
Nov 17 09:11:11 soroth pluto[8039]: ike_alg_register_enc(): Activating OAKLEY_TWOFISH_CBC_SSH: Ok (ret=0)
Nov 17 09:11:11 soroth pluto[8039]: ike_alg_register_enc(): Activating OAKLEY_TWOFISH_CBC: Ok (ret=0)
Nov 17 09:11:11 soroth pluto[8039]: ike_alg_register_enc(): Activating OAKLEY_SERPENT_CBC: Ok (ret=0)
Nov 17 09:11:11 soroth pluto[8039]: ike_alg_register_enc(): Activating OAKLEY_AES_CBC: Ok (ret=0)
Nov 17 09:11:11 soroth pluto[8039]: ike_alg_register_enc(): Activating OAKLEY_BLOWFISH_CBC: Ok (ret=0)
Nov 17 09:11:11 soroth pluto[8039]: ike_alg_register_hash(): Activating OAKLEY_SHA2_512: Ok (ret=0)
Nov 17 09:11:11 soroth pluto[8039]: ike_alg_register_hash(): Activating OAKLEY_SHA2_256: Ok (ret=0)
Nov 17 09:11:11 soroth pluto[8039]: starting up 3 cryptographic helpers
Nov 17 09:11:11 soroth pluto[8039]: started helper pid=8044 (fd:7)
Nov 17 09:11:11 soroth pluto[8039]: started helper pid=8045 (fd:8)
Nov 17 09:11:11 soroth pluto[8044]: using /dev/urandom as source of random entropy
Nov 17 09:11:11 soroth pluto[8039]: started helper pid=8046 (fd:9)
Nov 17 09:11:11 soroth pluto[8039]: Using Linux 2.6 IPsec interface code on 2.6.31-302-rs (experimental code)
Nov 17 09:11:11 soroth pluto[8046]: using /dev/urandom as source of random entropy
Nov 17 09:11:11 soroth pluto[8045]: using /dev/urandom as source of random entropy
Nov 17 09:11:11 soroth pluto[8039]: ike_alg_register_enc(): WARNING: enc alg=0 not found in constants.c:oakley_enc_names
Nov 17 09:11:11 soroth pluto[8039]: ike_alg_register_enc(): Activating <NULL>: Ok (ret=0)
Nov 17 09:11:11 soroth pluto[8039]: ike_alg_register_enc(): WARNING: enc alg=0 not found in constants.c:oakley_enc_names
Nov 17 09:11:11 soroth pluto[8039]: ike_alg_add(): ERROR: Algorithm already exists
Nov 17 09:11:11 soroth pluto[8039]: ike_alg_register_enc(): Activating <NULL>: FAILED (ret=-17)
Nov 17 09:11:11 soroth pluto[8039]: ike_alg_register_enc(): WARNING: enc alg=0 not found in constants.c:oakley_enc_names
Nov 17 09:11:11 soroth pluto[8039]: ike_alg_add(): ERROR: Algorithm already exists
Nov 17 09:11:11 soroth pluto[8039]: ike_alg_register_enc(): Activating <NULL>: FAILED (ret=-17)
Nov 17 09:11:11 soroth pluto[8039]: ike_alg_register_enc(): WARNING: enc alg=0 not found in constants.c:oakley_enc_names
Nov 17 09:11:11 soroth pluto[8039]: ike_alg_add(): ERROR: Algorithm already exists
Nov 17 09:11:11 soroth pluto[8039]: ike_alg_register_enc(): Activating <NULL>: FAILED (ret=-17)
Nov 17 09:11:11 soroth pluto[8039]: ike_alg_register_enc(): WARNING: enc alg=0 not found in constants.c:oakley_enc_names
Nov 17 09:11:11 soroth pluto[8039]: ike_alg_add(): ERROR: Algorithm already exists
Nov 17 09:11:11 soroth pluto[8039]: ike_alg_register_enc(): Activating <NULL>: FAILED (ret=-17)
Nov 17 09:11:11 soroth pluto[8039]: ike_alg_register_enc(): WARNING: enc alg=0 not found in constants.c:oakley_enc_names
Nov 17 09:11:11 soroth pluto[8039]: ike_alg_add(): ERROR: Algorithm already exists
Nov 17 09:11:11 soroth pluto[8039]: ike_alg_register_enc(): Activating <NULL>: FAILED (ret=-17)
Nov 17 09:11:11 soroth pluto[8039]: Changed path to directory '/etc/ipsec.d/cacerts'
Nov 17 09:11:11 soroth pluto[8039]: Changed path to directory '/etc/ipsec.d/aacerts'
Nov 17 09:11:11 soroth pluto[8039]: Changed path to directory '/etc/ipsec.d/ocspcerts'
Nov 17 09:11:11 soroth pluto[8039]: Changing to directory '/etc/ipsec.d/crls'
Nov 17 09:11:11 soroth pluto[8039]: Warning: empty directory
Nov 17 09:11:11 soroth pluto[8039]: added connection description "L2TP-PSK-NAT"
Nov 17 09:11:11 soroth pluto[8039]: added connection description "L2TP-PSK-noNAT"
Nov 17 09:11:11 soroth pluto[8039]: added connection description "passthrough-for-non-l2tp"
Nov 17 09:11:11 soroth pluto[8039]: listening for IKE messages
Nov 17 09:11:11 soroth pluto[8039]: NAT-Traversal: Trying new style NAT-T
Nov 17 09:11:11 soroth pluto[8039]: NAT-Traversal: ESPINUDP(1) setup failed for new style NAT-T family IPv4 (errno=19)
Nov 17 09:11:11 soroth pluto[8039]: NAT-Traversal: Trying old style NAT-T
Nov 17 09:11:11 soroth pluto[8039]: adding interface eth0/eth0 173.45.226.50:500
Nov 17 09:11:11 soroth pluto[8039]: adding interface eth0/eth0 173.45.226.50:4500
Nov 17 09:11:11 soroth pluto[8039]: adding interface lo/lo 127.0.0.1:500
Nov 17 09:11:11 soroth pluto[8039]: adding interface lo/lo 127.0.0.1:4500
Nov 17 09:11:11 soroth pluto[8039]: adding interface lo/lo ::1:500
Nov 17 09:11:11 soroth pluto[8039]: loading secrets from "/etc/ipsec.secrets"
Nov 17 09:11:28 soroth pluto[8039]: packet from 58.37.161.55:500: received Vendor ID payload [RFC 3947] method set to=109
Nov 17 09:11:28 soroth pluto[8039]: packet from 58.37.161.55:500: received Vendor ID payload [draft-ietf-ipsec-nat-t-ike] method set to=110
Nov 17 09:11:28 soroth pluto[8039]: packet from 58.37.161.55:500: ignoring unknown Vendor ID payload [8f8d83826d246b6fc7a8a6a428c11de8]
Nov 17 09:11:28 soroth pluto[8039]: packet from 58.37.161.55:500: ignoring unknown Vendor ID payload [439b59f8ba676c4c7737ae22eab8f582]
Nov 17 09:11:28 soroth pluto[8039]: packet from 58.37.161.55:500: ignoring unknown Vendor ID payload [4d1e0e136deafa34c4f3ea9f02ec7285]
Nov 17 09:11:28 soroth pluto[8039]: packet from 58.37.161.55:500: ignoring unknown Vendor ID payload [80d0bb3def54565ee84645d4c85ce3ee]
Nov 17 09:11:28 soroth pluto[8039]: packet from 58.37.161.55:500: ignoring unknown Vendor ID payload [9909b64eed937c6573de52ace952fa6b]
Nov 17 09:11:28 soroth pluto[8039]: packet from 58.37.161.55:500: received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-03] meth=108, but already using method 110
Nov 17 09:11:28 soroth pluto[8039]: packet from 58.37.161.55:500: received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02] meth=107, but already using method 110
Nov 17 09:11:28 soroth pluto[8039]: packet from 58.37.161.55:500: received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02_n] meth=106, but already using method 110
Nov 17 09:11:28 soroth pluto[8039]: packet from 58.37.161.55:500: received Vendor ID payload [Dead Peer Detection]
Nov 17 09:11:28 soroth pluto[8039]: "L2TP-PSK-NAT"[1] 58.37.161.55 #1: responding to Main Mode from unknown peer 58.37.161.55
Nov 17 09:11:28 soroth pluto[8039]: "L2TP-PSK-NAT"[1] 58.37.161.55 #1: transition from state STATE_MAIN_R0 to state STATE_MAIN_R1
Nov 17 09:11:28 soroth pluto[8039]: "L2TP-PSK-NAT"[1] 58.37.161.55 #1: STATE_MAIN_R1: sent MR1, expecting MI2
Nov 17 09:11:29 soroth pluto[8039]: "L2TP-PSK-NAT"[1] 58.37.161.55 #1: NAT-Traversal: Result using draft-ietf-ipsec-nat-t-ike (MacOS X): peer is NATed
Nov 17 09:11:29 soroth pluto[8039]: "L2TP-PSK-NAT"[1] 58.37.161.55 #1: transition from state STATE_MAIN_R1 to state STATE_MAIN_R2
Nov 17 09:11:29 soroth pluto[8039]: "L2TP-PSK-NAT"[1] 58.37.161.55 #1: STATE_MAIN_R2: sent MR2, expecting MI3
Nov 17 09:11:29 soroth pluto[8039]: "L2TP-PSK-NAT"[1] 58.37.161.55 #1: Main mode peer ID is ID_IPV4_ADDR: '192.168.1.105'
Nov 17 09:11:29 soroth pluto[8039]: "L2TP-PSK-NAT"[1] 58.37.161.55 #1: switched from "L2TP-PSK-NAT" to "L2TP-PSK-NAT"
Nov 17 09:11:29 soroth pluto[8039]: "L2TP-PSK-NAT"[2] 58.37.161.55 #1: deleting connection "L2TP-PSK-NAT" instance with peer 58.37.161.55 {isakmp=#0/ipsec=#0}
Nov 17 09:11:29 soroth pluto[8039]: "L2TP-PSK-NAT"[2] 58.37.161.55 #1: transition from state STATE_MAIN_R2 to state STATE_MAIN_R3
Nov 17 09:11:29 soroth pluto[8039]: "L2TP-PSK-NAT"[2] 58.37.161.55 #1: new NAT mapping for #1, was 58.37.161.55:500, now 58.37.161.55:53682
Nov 17 09:11:29 soroth pluto[8039]: "L2TP-PSK-NAT"[2] 58.37.161.55 #1: STATE_MAIN_R3: sent MR3, ISAKMP SA established {auth=OAKLEY_PRESHARED_KEY cipher=oakley_3des_cbc_192 prf=oakley_sha group=modp1024}
Nov 17 09:11:29 soroth pluto[8039]: "L2TP-PSK-NAT"[2] 58.37.161.55 #1: ignoring informational payload, type IPSEC_INITIAL_CONTACT msgid=00000000
Nov 17 09:11:29 soroth pluto[8039]: "L2TP-PSK-NAT"[2] 58.37.161.55 #1: received and ignored informational message
Nov 17 09:11:30 soroth pluto[8039]: "L2TP-PSK-NAT"[2] 58.37.161.55 #1: the peer proposed: 173.45.226.50/32:17/1701 -> 192.168.1.105/32:17/0
Nov 17 09:11:30 soroth pluto[8039]: "L2TP-PSK-NAT"[2] 58.37.161.55 #2: responding to Quick Mode proposal {msgid:6fc6ad8d}
Nov 17 09:11:30 soroth pluto[8039]: "L2TP-PSK-NAT"[2] 58.37.161.55 #2: us: 173.45.226.50<173.45.226.50>[+S=C]:17/1701---173.45.226.1
Nov 17 09:11:30 soroth pluto[8039]: "L2TP-PSK-NAT"[2] 58.37.161.55 #2: them: 58.37.161.55[192.168.1.105,+S=C]:17/49157===192.168.1.105/32
Nov 17 09:11:30 soroth pluto[8039]: | NAT-OA: 0 tunnel: 1
Nov 17 09:11:30 soroth pluto[8039]: "L2TP-PSK-NAT"[2] 58.37.161.55 #2: transition from state STATE_QUICK_R0 to state STATE_QUICK_R1
Nov 17 09:11:30 soroth pluto[8039]: "L2TP-PSK-NAT"[2] 58.37.161.55 #2: STATE_QUICK_R1: sent QR1, inbound IPsec SA installed, expecting QI2
Nov 17 09:11:31 soroth pluto[8039]: "L2TP-PSK-NAT"[2] 58.37.161.55 #2: transition from state STATE_QUICK_R1 to state STATE_QUICK_R2
Nov 17 09:11:31 soroth pluto[8039]: "L2TP-PSK-NAT"[2] 58.37.161.55 #2: STATE_QUICK_R2: IPsec SA established transport mode {ESP=>0x04c24797 <0xb91e1f52 xfrm=AES_128-HMAC_SHA1 NATOA=none NATD=58.37.161.55:53682 DPD=none}
Nov 17 09:12:31 soroth pluto[8039]: "L2TP-PSK-NAT"[2] 58.37.161.55 #1: received Delete SA(0x04c24797) payload: deleting IPSEC State #2
Nov 17 09:12:31 soroth pluto[8039]: "L2TP-PSK-NAT"[2] 58.37.161.55 #1: received and ignored informational message
Nov 17 09:12:31 soroth pluto[8039]: "L2TP-PSK-NAT"[2] 58.37.161.55 #1: the peer proposed: 173.45.226.50/32:17/1701 -> 192.168.1.105/32:17/49157
Nov 17 09:12:31 soroth pluto[8039]: "L2TP-PSK-NAT"[3] 58.37.161.55 #3: responding to Quick Mode proposal {msgid:6474e4aa}
Nov 17 09:12:31 soroth pluto[8039]: "L2TP-PSK-NAT"[3] 58.37.161.55 #3: us: 173.45.226.50<173.45.226.50>[+S=C]:17/1701---173.45.226.1
Nov 17 09:12:31 soroth pluto[8039]: "L2TP-PSK-NAT"[3] 58.37.161.55 #3: them: 58.37.161.55[192.168.1.105,+S=C]:17/49157===192.168.1.105/32
Nov 17 09:12:31 soroth pluto[8039]: | NAT-OA: 0 tunnel: 1
Nov 17 09:12:31 soroth pluto[8039]: "L2TP-PSK-NAT"[3] 58.37.161.55 #3: transition from state STATE_QUICK_R0 to state STATE_QUICK_R1
Nov 17 09:12:31 soroth pluto[8039]: "L2TP-PSK-NAT"[3] 58.37.161.55 #3: STATE_QUICK_R1: sent QR1, inbound IPsec SA installed, expecting QI2
Nov 17 09:12:31 soroth pluto[8039]: "L2TP-PSK-NAT"[3] 58.37.161.55 #3: transition from state STATE_QUICK_R1 to state STATE_QUICK_R2
Nov 17 09:12:31 soroth pluto[8039]: "L2TP-PSK-NAT"[3] 58.37.161.55 #3: STATE_QUICK_R2: IPsec SA established transport mode {ESP=>0x03e4bda4 <0x719e0662 xfrm=AES_128-HMAC_SHA1 NATOA=none NATD=58.37.161.55:53682 DPD=none}
Nov 17 09:13:34 soroth pluto[8039]: "L2TP-PSK-NAT"[2] 58.37.161.55 #1: received Delete SA(0x03e4bda4) payload: deleting IPSEC State #3
Nov 17 09:13:34 soroth pluto[8039]: "L2TP-PSK-NAT"[2] 58.37.161.55 #1: deleting connection "L2TP-PSK-NAT" instance with peer 58.37.161.55 {isakmp=#0/ipsec=#0}
Nov 17 09:13:34 soroth pluto[8039]: "L2TP-PSK-NAT"[2] 58.37.161.55 #1: received and ignored informational message
Nov 17 09:13:34 soroth pluto[8039]: "L2TP-PSK-NAT"[2] 58.37.161.55 #1: the peer proposed: 173.45.226.50/32:17/1701 -> 192.168.1.105/32:17/49157
Nov 17 09:13:34 soroth pluto[8039]: "L2TP-PSK-NAT"[4] 58.37.161.55 #4: responding to Quick Mode proposal {msgid:23b2f9e2}
Nov 17 09:13:34 soroth pluto[8039]: "L2TP-PSK-NAT"[4] 58.37.161.55 #4: us: 173.45.226.50<173.45.226.50>[+S=C]:17/1701---173.45.226.1
Nov 17 09:13:34 soroth pluto[8039]: "L2TP-PSK-NAT"[4] 58.37.161.55 #4: them: 58.37.161.55[192.168.1.105,+S=C]:17/49157===192.168.1.105/32
Nov 17 09:13:34 soroth pluto[8039]: | NAT-OA: 0 tunnel: 1
Nov 17 09:13:34 soroth pluto[8039]: "L2TP-PSK-NAT"[4] 58.37.161.55 #4: transition from state STATE_QUICK_R0 to state STATE_QUICK_R1
Nov 17 09:13:34 soroth pluto[8039]: "L2TP-PSK-NAT"[4] 58.37.161.55 #4: STATE_QUICK_R1: sent QR1, inbound IPsec SA installed, expecting QI2
Nov 17 09:13:34 soroth pluto[8039]: "L2TP-PSK-NAT"[4] 58.37.161.55 #4: transition from state STATE_QUICK_R1 to state STATE_QUICK_R2
Nov 17 09:13:34 soroth pluto[8039]: "L2TP-PSK-NAT"[4] 58.37.161.55 #4: STATE_QUICK_R2: IPsec SA established transport mode {ESP=>0x099a06e2 <0x79837490 xfrm=AES_128-HMAC_SHA1 NATOA=none NATD=58.37.161.55:53682 DPD=none}
Nov 17 09:14:36 soroth pluto[8039]: "L2TP-PSK-NAT"[2] 58.37.161.55 #1: received Delete SA(0x099a06e2) payload: deleting IPSEC State #4
Nov 17 09:14:36 soroth pluto[8039]: "L2TP-PSK-NAT"[2] 58.37.161.55 #1: deleting connection "L2TP-PSK-NAT" instance with peer 58.37.161.55 {isakmp=#0/ipsec=#0}
Nov 17 09:14:36 soroth pluto[8039]: "L2TP-PSK-NAT"[2] 58.37.161.55 #1: received and ignored informational message
Nov 17 09:14:36 soroth pluto[8039]: "L2TP-PSK-NAT"[2] 58.37.161.55 #1: the peer proposed: 173.45.226.50/32:17/1701 -> 192.168.1.105/32:17/49157
Nov 17 09:14:36 soroth pluto[8039]: "L2TP-PSK-NAT"[5] 58.37.161.55 #5: responding to Quick Mode proposal {msgid:373caff6}
Nov 17 09:14:36 soroth pluto[8039]: "L2TP-PSK-NAT"[5] 58.37.161.55 #5: us: 173.45.226.50<173.45.226.50>[+S=C]:17/1701---173.45.226.1
Nov 17 09:14:36 soroth pluto[8039]: "L2TP-PSK-NAT"[5] 58.37.161.55 #5: them: 58.37.161.55[192.168.1.105,+S=C]:17/49157===192.168.1.105/32
Nov 17 09:14:36 soroth pluto[8039]: | NAT-OA: 0 tunnel: 1
Nov 17 09:14:36 soroth pluto[8039]: "L2TP-PSK-NAT"[5] 58.37.161.55 #5: transition from state STATE_QUICK_R0 to state STATE_QUICK_R1
Nov 17 09:14:36 soroth pluto[8039]: "L2TP-PSK-NAT"[5] 58.37.161.55 #5: STATE_QUICK_R1: sent QR1, inbound IPsec SA installed, expecting QI2
Nov 17 09:14:37 soroth pluto[8039]: "L2TP-PSK-NAT"[5] 58.37.161.55 #5: transition from state STATE_QUICK_R1 to state STATE_QUICK_R2
Nov 17 09:14:37 soroth pluto[8039]: "L2TP-PSK-NAT"[5] 58.37.161.55 #5: STATE_QUICK_R2: IPsec SA established transport mode {ESP=>0x02a3fb69 <0xd27d98a0 xfrm=AES_128-HMAC_SHA1 NATOA=none NATD=58.37.161.55:53682 DPD=none}
Nov 17 09:27:29 soroth pluto[8039]: packet from 58.37.161.55:36179: ignoring Vendor ID payload [MS NT5 ISAKMPOAKLEY 00000004]
Nov 17 09:27:29 soroth pluto[8039]: packet from 58.37.161.55:36179: ignoring Vendor ID payload [FRAGMENTATION]
Nov 17 09:27:29 soroth pluto[8039]: packet from 58.37.161.55:36179: received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02_n] method set to=106
Nov 17 09:27:29 soroth pluto[8039]: packet from 58.37.161.55:36179: ignoring Vendor ID payload [Vid-Initial-Contact]
Nov 17 09:27:29 soroth pluto[8039]: "L2TP-PSK-NAT"[5] 58.37.161.55 #6: responding to Main Mode from unknown peer 58.37.161.55
Nov 17 09:27:29 soroth pluto[8039]: "L2TP-PSK-NAT"[5] 58.37.161.55 #6: transition from state STATE_MAIN_R0 to state STATE_MAIN_R1
Nov 17 09:27:29 soroth pluto[8039]: "L2TP-PSK-NAT"[5] 58.37.161.55 #6: STATE_MAIN_R1: sent MR1, expecting MI2
Nov 17 09:27:29 soroth pluto[8039]: "L2TP-PSK-NAT"[5] 58.37.161.55 #6: NAT-Traversal: Result using draft-ietf-ipsec-nat-t-ike-02/03: peer is NATed
Nov 17 09:27:29 soroth pluto[8039]: "L2TP-PSK-NAT"[5] 58.37.161.55 #6: transition from state STATE_MAIN_R1 to state STATE_MAIN_R2
Nov 17 09:27:29 soroth pluto[8039]: "L2TP-PSK-NAT"[5] 58.37.161.55 #6: STATE_MAIN_R2: sent MR2, expecting MI3
Nov 17 09:27:30 soroth pluto[8039]: "L2TP-PSK-NAT"[5] 58.37.161.55 #6: Main mode peer ID is ID_FQDN: '@ohyeah'
Nov 17 09:27:30 soroth pluto[8039]: "L2TP-PSK-NAT"[5] 58.37.161.55 #6: switched from "L2TP-PSK-NAT" to "L2TP-PSK-NAT"
Nov 17 09:27:30 soroth pluto[8039]: "L2TP-PSK-NAT"[6] 58.37.161.55 #6: transition from state STATE_MAIN_R2 to state STATE_MAIN_R3
Nov 17 09:27:30 soroth pluto[8039]: "L2TP-PSK-NAT"[6] 58.37.161.55 #6: new NAT mapping for #6, was 58.37.161.55:36179, now 58.37.161.55:52742
Nov 17 09:27:30 soroth pluto[8039]: "L2TP-PSK-NAT"[6] 58.37.161.55 #6: STATE_MAIN_R3: sent MR3, ISAKMP SA established {auth=OAKLEY_PRESHARED_KEY cipher=oakley_3des_cbc_192 prf=oakley_sha group=modp2048}
Nov 17 09:27:30 soroth pluto[8039]: "L2TP-PSK-NAT"[6] 58.37.161.55 #6: peer client type is FQDN
Nov 17 09:27:30 soroth pluto[8039]: "L2TP-PSK-NAT"[6] 58.37.161.55 #6: Applying workaround for MS-818043 NAT-T bug
Nov 17 09:27:30 soroth pluto[8039]: "L2TP-PSK-NAT"[6] 58.37.161.55 #6: IDci was FQDN: \255-\3422, using NAT_OA=10.0.2.15/32 as IDci
Nov 17 09:27:30 soroth pluto[8039]: "L2TP-PSK-NAT"[6] 58.37.161.55 #6: the peer proposed: 173.45.226.50/32:17/1701 -> 10.0.2.15/32:17/0
Nov 17 09:27:30 soroth pluto[8039]: "L2TP-PSK-NAT"[6] 58.37.161.55 #7: responding to Quick Mode proposal {msgid:5d24d0c7}
Nov 17 09:27:30 soroth pluto[8039]: "L2TP-PSK-NAT"[6] 58.37.161.55 #7: us: 173.45.226.50<173.45.226.50>[+S=C]:17/1701---173.45.226.1
Nov 17 09:27:30 soroth pluto[8039]: "L2TP-PSK-NAT"[6] 58.37.161.55 #7: them: 58.37.161.55[@ohyeah,+S=C]:17/1701===10.0.2.15/32
Nov 17 09:27:30 soroth pluto[8039]: | NAT-OA: 4 tunnel: 1
Nov 17 09:27:30 soroth pluto[8039]: "L2TP-PSK-NAT"[6] 58.37.161.55 #7: transition from state STATE_QUICK_R0 to state STATE_QUICK_R1
Nov 17 09:27:30 soroth pluto[8039]: "L2TP-PSK-NAT"[6] 58.37.161.55 #7: STATE_QUICK_R1: sent QR1, inbound IPsec SA installed, expecting QI2
Nov 17 09:27:30 soroth pluto[8039]: "L2TP-PSK-NAT"[6] 58.37.161.55 #7: transition from state STATE_QUICK_R1 to state STATE_QUICK_R2
Nov 17 09:27:30 soroth pluto[8039]: "L2TP-PSK-NAT"[6] 58.37.161.55 #7: STATE_QUICK_R2: IPsec SA established transport mode {ESP=>0x868f1d4c <0xe175636f xfrm=3DES_0-HMAC_MD5 NATOA=10.0.2.15 NATD=58.37.161.55:52742 DPD=none}
Nov 17 09:33:59 soroth pluto[8039]: "L2TP-PSK-NAT"[6] 58.37.161.55 #6: received Delete SA(0x868f1d4c) payload: deleting IPSEC State #7
Nov 17 09:33:59 soroth pluto[8039]: "L2TP-PSK-NAT"[6] 58.37.161.55 #6: received and ignored informational message
Nov 17 09:33:59 soroth pluto[8039]: "L2TP-PSK-NAT"[6] 58.37.161.55 #6: received Delete SA payload: deleting ISAKMP State #6
Nov 17 09:33:59 soroth pluto[8039]: "L2TP-PSK-NAT"[6] 58.37.161.55: deleting connection "L2TP-PSK-NAT" instance with peer 58.37.161.55 {isakmp=#0/ipsec=#0}
Nov 17 09:33:59 soroth pluto[8039]: packet from 58.37.161.55:52742: received and ignored informational message
Nov 17 09:43:52 soroth pluto[8039]: packet from 58.37.161.55:500: received Vendor ID payload [RFC 3947] method set to=109
Nov 17 09:43:52 soroth pluto[8039]: packet from 58.37.161.55:500: received Vendor ID payload [draft-ietf-ipsec-nat-t-ike] method set to=110
Nov 17 09:43:52 soroth pluto[8039]: packet from 58.37.161.55:500: ignoring unknown Vendor ID payload [8f8d83826d246b6fc7a8a6a428c11de8]
Nov 17 09:43:52 soroth pluto[8039]: packet from 58.37.161.55:500: ignoring unknown Vendor ID payload [439b59f8ba676c4c7737ae22eab8f582]
Nov 17 09:43:52 soroth pluto[8039]: packet from 58.37.161.55:500: ignoring unknown Vendor ID payload [4d1e0e136deafa34c4f3ea9f02ec7285]
Nov 17 09:43:52 soroth pluto[8039]: packet from 58.37.161.55:500: ignoring unknown Vendor ID payload [80d0bb3def54565ee84645d4c85ce3ee]
Nov 17 09:43:52 soroth pluto[8039]: packet from 58.37.161.55:500: ignoring unknown Vendor ID payload [9909b64eed937c6573de52ace952fa6b]
Nov 17 09:43:52 soroth pluto[8039]: packet from 58.37.161.55:500: received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-03] meth=108, but already using method 110
Nov 17 09:43:52 soroth pluto[8039]: packet from 58.37.161.55:500: received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02] meth=107, but already using method 110
Nov 17 09:43:52 soroth pluto[8039]: packet from 58.37.161.55:500: received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02_n] meth=106, but already using method 110
Nov 17 09:43:52 soroth pluto[8039]: packet from 58.37.161.55:500: received Vendor ID payload [Dead Peer Detection]
Nov 17 09:43:52 soroth pluto[8039]: "L2TP-PSK-NAT"[5] 58.37.161.55 #8: responding to Main Mode from unknown peer 58.37.161.55
Nov 17 09:43:52 soroth pluto[8039]: "L2TP-PSK-NAT"[5] 58.37.161.55 #8: transition from state STATE_MAIN_R0 to state STATE_MAIN_R1
Nov 17 09:43:52 soroth pluto[8039]: "L2TP-PSK-NAT"[5] 58.37.161.55 #8: STATE_MAIN_R1: sent MR1, expecting MI2
Nov 17 09:43:52 soroth pluto[8039]: "L2TP-PSK-NAT"[5] 58.37.161.55 #8: NAT-Traversal: Result using draft-ietf-ipsec-nat-t-ike (MacOS X): peer is NATed
Nov 17 09:43:52 soroth pluto[8039]: "L2TP-PSK-NAT"[5] 58.37.161.55 #8: transition from state STATE_MAIN_R1 to state STATE_MAIN_R2
Nov 17 09:43:52 soroth pluto[8039]: "L2TP-PSK-NAT"[5] 58.37.161.55 #8: STATE_MAIN_R2: sent MR2, expecting MI3
Nov 17 09:43:52 soroth pluto[8039]: "L2TP-PSK-NAT"[5] 58.37.161.55 #8: Main mode peer ID is ID_IPV4_ADDR: '192.168.1.200'
Nov 17 09:43:52 soroth pluto[8039]: "L2TP-PSK-NAT"[5] 58.37.161.55 #8: switched from "L2TP-PSK-NAT" to "L2TP-PSK-NAT"
Nov 17 09:43:52 soroth pluto[8039]: "L2TP-PSK-NAT"[7] 58.37.161.55 #8: transition from state STATE_MAIN_R2 to state STATE_MAIN_R3
Nov 17 09:43:52 soroth pluto[8039]: "L2TP-PSK-NAT"[7] 58.37.161.55 #8: new NAT mapping for #8, was 58.37.161.55:500, now 58.37.161.55:53872
Nov 17 09:43:52 soroth pluto[8039]: "L2TP-PSK-NAT"[7] 58.37.161.55 #8: STATE_MAIN_R3: sent MR3, ISAKMP SA established {auth=OAKLEY_PRESHARED_KEY cipher=oakley_3des_cbc_192 prf=oakley_sha group=modp1024}
Nov 17 09:43:52 soroth pluto[8039]: "L2TP-PSK-NAT"[7] 58.37.161.55 #8: ignoring informational payload, type IPSEC_INITIAL_CONTACT msgid=00000000
Nov 17 09:43:52 soroth pluto[8039]: "L2TP-PSK-NAT"[7] 58.37.161.55 #8: received and ignored informational message
Nov 17 09:43:52 soroth pluto[8039]: "L2TP-PSK-NAT"[7] 58.37.161.55 #8: the peer proposed: 173.45.226.50/32:17/1701 -> 192.168.1.200/32:17/0
Nov 17 09:43:52 soroth pluto[8039]: "L2TP-PSK-NAT"[7] 58.37.161.55 #9: responding to Quick Mode proposal {msgid:fb6415ac}
Nov 17 09:43:52 soroth pluto[8039]: "L2TP-PSK-NAT"[7] 58.37.161.55 #9: us: 173.45.226.50<173.45.226.50>[+S=C]:17/1701---173.45.226.1
Nov 17 09:43:52 soroth pluto[8039]: "L2TP-PSK-NAT"[7] 58.37.161.55 #9: them: 58.37.161.55[192.168.1.200,+S=C]:17/49300===192.168.1.200/32
Nov 17 09:43:52 soroth pluto[8039]: | NAT-OA: 0 tunnel: 1
Nov 17 09:43:52 soroth pluto[8039]: "L2TP-PSK-NAT"[7] 58.37.161.55 #9: transition from state STATE_QUICK_R0 to state STATE_QUICK_R1
Nov 17 09:43:52 soroth pluto[8039]: "L2TP-PSK-NAT"[7] 58.37.161.55 #9: STATE_QUICK_R1: sent QR1, inbound IPsec SA installed, expecting QI2
Nov 17 09:43:53 soroth pluto[8039]: "L2TP-PSK-NAT"[7] 58.37.161.55 #9: transition from state STATE_QUICK_R1 to state STATE_QUICK_R2
Nov 17 09:43:53 soroth pluto[8039]: "L2TP-PSK-NAT"[7] 58.37.161.55 #9: STATE_QUICK_R2: IPsec SA established transport mode {ESP=>0x0eef5c4c <0xf9cc5827 xfrm=AES_128-HMAC_SHA1 NATOA=none NATD=58.37.161.55:53872 DPD=none}
Nov 17 09:51:17 soroth pluto[8039]: packet from 58.37.161.55:500: ignoring Vendor ID payload [MS NT5 ISAKMPOAKLEY 00000004]
Nov 17 09:51:17 soroth pluto[8039]: packet from 58.37.161.55:500: ignoring Vendor ID payload [FRAGMENTATION]
Nov 17 09:51:17 soroth pluto[8039]: packet from 58.37.161.55:500: received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02_n] method set to=106
Nov 17 09:51:17 soroth pluto[8039]: packet from 58.37.161.55:500: ignoring Vendor ID payload [Vid-Initial-Contact]
Nov 17 09:51:17 soroth pluto[8039]: "L2TP-PSK-NAT"[7] 58.37.161.55 #10: responding to Main Mode from unknown peer 58.37.161.55
Nov 17 09:51:17 soroth pluto[8039]: "L2TP-PSK-NAT"[7] 58.37.161.55 #10: transition from state STATE_MAIN_R0 to state STATE_MAIN_R1
Nov 17 09:51:17 soroth pluto[8039]: "L2TP-PSK-NAT"[7] 58.37.161.55 #10: STATE_MAIN_R1: sent MR1, expecting MI2
Nov 17 09:51:17 soroth pluto[8039]: "L2TP-PSK-NAT"[7] 58.37.161.55 #10: NAT-Traversal: Result using draft-ietf-ipsec-nat-t-ike-02/03: peer is NATed
Nov 17 09:51:17 soroth pluto[8039]: "L2TP-PSK-NAT"[7] 58.37.161.55 #10: transition from state STATE_MAIN_R1 to state STATE_MAIN_R2
Nov 17 09:51:17 soroth pluto[8039]: "L2TP-PSK-NAT"[7] 58.37.161.55 #10: STATE_MAIN_R2: sent MR2, expecting MI3
Nov 17 09:51:18 soroth pluto[8039]: "L2TP-PSK-NAT"[7] 58.37.161.55 #10: Main mode peer ID is ID_FQDN: '@chris'
Nov 17 09:51:18 soroth pluto[8039]: "L2TP-PSK-NAT"[7] 58.37.161.55 #10: switched from "L2TP-PSK-NAT" to "L2TP-PSK-NAT"
Nov 17 09:51:18 soroth pluto[8039]: "L2TP-PSK-NAT"[8] 58.37.161.55 #10: transition from state STATE_MAIN_R2 to state STATE_MAIN_R3
Nov 17 09:51:18 soroth pluto[8039]: "L2TP-PSK-NAT"[8] 58.37.161.55 #10: new NAT mapping for #10, was 58.37.161.55:500, now 58.37.161.55:53684
Nov 17 09:51:18 soroth pluto[8039]: "L2TP-PSK-NAT"[8] 58.37.161.55 #10: STATE_MAIN_R3: sent MR3, ISAKMP SA established {auth=OAKLEY_PRESHARED_KEY cipher=oakley_3des_cbc_192 prf=oakley_sha group=modp2048}
Nov 17 09:51:18 soroth pluto[8039]: "L2TP-PSK-NAT"[8] 58.37.161.55 #10: peer client type is FQDN
Nov 17 09:51:18 soroth pluto[8039]: "L2TP-PSK-NAT"[8] 58.37.161.55 #10: Applying workaround for MS-818043 NAT-T bug
Nov 17 09:51:18 soroth pluto[8039]: "L2TP-PSK-NAT"[8] 58.37.161.55 #10: IDci was FQDN: \255-\3422, using NAT_OA=192.168.1.106/32 as IDci
Nov 17 09:51:18 soroth pluto[8039]: "L2TP-PSK-NAT"[8] 58.37.161.55 #10: the peer proposed: 173.45.226.50/32:17/1701 -> 192.168.1.106/32:17/0
Nov 17 09:51:18 soroth pluto[8039]: "L2TP-PSK-NAT"[8] 58.37.161.55 #11: responding to Quick Mode proposal {msgid:b701150d}
Nov 17 09:51:18 soroth pluto[8039]: "L2TP-PSK-NAT"[8] 58.37.161.55 #11: us: 173.45.226.50<173.45.226.50>[+S=C]:17/1701---173.45.226.1
Nov 17 09:51:18 soroth pluto[8039]: "L2TP-PSK-NAT"[8] 58.37.161.55 #11: them: 58.37.161.55[@chris,+S=C]:17/1701===192.168.1.106/32
Nov 17 09:51:18 soroth pluto[8039]: | NAT-OA: 4 tunnel: 1
Nov 17 09:51:18 soroth pluto[8039]: "L2TP-PSK-NAT"[8] 58.37.161.55 #11: transition from state STATE_QUICK_R0 to state STATE_QUICK_R1
Nov 17 09:51:18 soroth pluto[8039]: "L2TP-PSK-NAT"[8] 58.37.161.55 #11: STATE_QUICK_R1: sent QR1, inbound IPsec SA installed, expecting QI2
Nov 17 09:51:18 soroth pluto[8039]: "L2TP-PSK-NAT"[8] 58.37.161.55 #11: transition from state STATE_QUICK_R1 to state STATE_QUICK_R2
Nov 17 09:51:18 soroth pluto[8039]: "L2TP-PSK-NAT"[8] 58.37.161.55 #11: STATE_QUICK_R2: IPsec SA established transport mode {ESP=>0x1bfa2fb1 <0xf0ee9bc6 xfrm=3DES_0-HMAC_MD5 NATOA=192.168.1.106 NATD=58.37.161.55:53684 DPD=none}
Nov 17 09:55:18 soroth pluto[8039]: packet from 58.37.161.55:500: received Vendor ID payload [XAUTH]
Nov 17 09:55:18 soroth pluto[8039]: packet from 58.37.161.55:500: received Vendor ID payload [Cisco-Unity]
Nov 17 09:55:18 soroth pluto[8039]: packet from 58.37.161.55:500: received Vendor ID payload [RFC 3947] method set to=109
Nov 17 09:55:18 soroth pluto[8039]: packet from 58.37.161.55:500: received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02_n] meth=106, but already using method 109
Nov 17 09:55:18 soroth pluto[8039]: packet from 58.37.161.55:500: received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02] meth=107, but already using method 109
Nov 17 09:55:18 soroth pluto[8039]: packet from 58.37.161.55:500: ignoring unknown Vendor ID payload [16f6ca16e4a4066d83821a0f0aeaa862]
Nov 17 09:55:18 soroth pluto[8039]: packet from 58.37.161.55:500: received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-00]
Nov 17 09:55:18 soroth pluto[8039]: packet from 58.37.161.55:500: received Vendor ID payload [Dead Peer Detection]
Nov 17 09:55:18 soroth pluto[8039]: "L2TP-PSK-NAT"[8] 58.37.161.55 #12: Aggressive mode peer ID is ID_KEY_ID: '@#0x74657374'
Nov 17 09:55:18 soroth pluto[8039]: "L2TP-PSK-NAT"[8] 58.37.161.55 #12: no suitable connection for peer '@#0x74657374'
Nov 17 09:55:18 soroth pluto[8039]: "L2TP-PSK-NAT"[8] 58.37.161.55 #12: initial Aggressive Mode packet claiming to be from @chris on 58.37.161.55 but no connection has been authorized
Nov 17 09:55:18 soroth pluto[8039]: "L2TP-PSK-NAT"[8] 58.37.161.55 #12: sending notification INVALID_ID_INFORMATION to 58.37.161.55:500
Nov 17 09:57:49 soroth pluto[8039]: packet from 58.37.161.55:38266: ignoring Vendor ID payload [MS NT5 ISAKMPOAKLEY 00000004]
Nov 17 09:57:49 soroth pluto[8039]: packet from 58.37.161.55:38266: ignoring Vendor ID payload [FRAGMENTATION]
Nov 17 09:57:49 soroth pluto[8039]: packet from 58.37.161.55:38266: received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02_n] method set to=106
Nov 17 09:57:49 soroth pluto[8039]: packet from 58.37.161.55:38266: ignoring Vendor ID payload [Vid-Initial-Contact]
Nov 17 09:57:49 soroth pluto[8039]: "L2TP-PSK-NAT"[8] 58.37.161.55 #13: responding to Main Mode from unknown peer 58.37.161.55
Nov 17 09:57:49 soroth pluto[8039]: "L2TP-PSK-NAT"[8] 58.37.161.55 #13: transition from state STATE_MAIN_R0 to state STATE_MAIN_R1
Nov 17 09:57:49 soroth pluto[8039]: "L2TP-PSK-NAT"[8] 58.37.161.55 #13: STATE_MAIN_R1: sent MR1, expecting MI2
Nov 17 09:57:49 soroth pluto[8039]: "L2TP-PSK-NAT"[8] 58.37.161.55 #13: NAT-Traversal: Result using draft-ietf-ipsec-nat-t-ike-02/03: peer is NATed
Nov 17 09:57:49 soroth pluto[8039]: "L2TP-PSK-NAT"[8] 58.37.161.55 #13: transition from state STATE_MAIN_R1 to state STATE_MAIN_R2
Nov 17 09:57:49 soroth pluto[8039]: "L2TP-PSK-NAT"[8] 58.37.161.55 #13: STATE_MAIN_R2: sent MR2, expecting MI3
Nov 17 09:57:49 soroth pluto[8039]: "L2TP-PSK-NAT"[8] 58.37.161.55 #13: Main mode peer ID is ID_FQDN: '@ohyeah'
Nov 17 09:57:49 soroth pluto[8039]: "L2TP-PSK-NAT"[8] 58.37.161.55 #13: switched from "L2TP-PSK-NAT" to "L2TP-PSK-NAT"
Nov 17 09:57:49 soroth pluto[8039]: "L2TP-PSK-NAT"[9] 58.37.161.55 #13: transition from state STATE_MAIN_R2 to state STATE_MAIN_R3
Nov 17 09:57:49 soroth pluto[8039]: "L2TP-PSK-NAT"[9] 58.37.161.55 #13: new NAT mapping for #13, was 58.37.161.55:38266, now 58.37.161.55:52250
Nov 17 09:57:49 soroth pluto[8039]: "L2TP-PSK-NAT"[9] 58.37.161.55 #13: STATE_MAIN_R3: sent MR3, ISAKMP SA established {auth=OAKLEY_PRESHARED_KEY cipher=oakley_3des_cbc_192 prf=oakley_sha group=modp2048}
Nov 17 09:57:50 soroth pluto[8039]: "L2TP-PSK-NAT"[9] 58.37.161.55 #13: peer client type is FQDN
Nov 17 09:57:50 soroth pluto[8039]: "L2TP-PSK-NAT"[9] 58.37.161.55 #13: Applying workaround for MS-818043 NAT-T bug
Nov 17 09:57:50 soroth pluto[8039]: "L2TP-PSK-NAT"[9] 58.37.161.55 #13: IDci was FQDN: \255-\3422, using NAT_OA=10.0.2.15/32 as IDci
Nov 17 09:57:50 soroth pluto[8039]: "L2TP-PSK-NAT"[9] 58.37.161.55 #13: the peer proposed: 173.45.226.50/32:17/1701 -> 10.0.2.15/32:17/0
Nov 17 09:57:50 soroth pluto[8039]: "L2TP-PSK-NAT"[9] 58.37.161.55 #14: responding to Quick Mode proposal {msgid:4ed12681}
Nov 17 09:57:50 soroth pluto[8039]: "L2TP-PSK-NAT"[9] 58.37.161.55 #14: us: 173.45.226.50<173.45.226.50>[+S=C]:17/1701---173.45.226.1
Nov 17 09:57:50 soroth pluto[8039]: "L2TP-PSK-NAT"[9] 58.37.161.55 #14: them: 58.37.161.55[@ohyeah,+S=C]:17/1701===10.0.2.15/32
Nov 17 09:57:50 soroth pluto[8039]: | NAT-OA: 4 tunnel: 1
Nov 17 09:57:50 soroth pluto[8039]: "L2TP-PSK-NAT"[9] 58.37.161.55 #14: cannot install eroute -- it is in use for "L2TP-PSK-NAT"[8] 58.37.161.55 #11
Nov 17 09:57:50 soroth pluto[8039]: "L2TP-PSK-NAT"[9] 58.37.161.55 #14: discarding duplicate packet; already STATE_QUICK_R0
Nov 17 09:57:52 soroth pluto[8039]: "L2TP-PSK-NAT"[9] 58.37.161.55 #14: discarding duplicate packet; already STATE_QUICK_R0
Nov 17 09:57:55 soroth pluto[8039]: "L2TP-PSK-NAT"[9] 58.37.161.55 #13: received Delete SA payload: deleting ISAKMP State #13
Nov 17 09:57:55 soroth pluto[8039]: packet from 58.37.161.55:52250: received and ignored informational message
Nov 17 09:58:06 soroth pluto[8039]: packet from 58.37.161.55:38266: ignoring Vendor ID payload [MS NT5 ISAKMPOAKLEY 00000004]
Nov 17 09:58:06 soroth pluto[8039]: packet from 58.37.161.55:38266: ignoring Vendor ID payload [FRAGMENTATION]
Nov 17 09:58:06 soroth pluto[8039]: packet from 58.37.161.55:38266: received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02_n] method set to=106
Nov 17 09:58:06 soroth pluto[8039]: packet from 58.37.161.55:38266: ignoring Vendor ID payload [Vid-Initial-Contact]
Nov 17 09:58:06 soroth pluto[8039]: "L2TP-PSK-NAT"[9] 58.37.161.55 #15: responding to Main Mode from unknown peer 58.37.161.55
Nov 17 09:58:06 soroth pluto[8039]: "L2TP-PSK-NAT"[9] 58.37.161.55 #15: transition from state STATE_MAIN_R0 to state STATE_MAIN_R1
Nov 17 09:58:06 soroth pluto[8039]: "L2TP-PSK-NAT"[9] 58.37.161.55 #15: STATE_MAIN_R1: sent MR1, expecting MI2
Nov 17 09:58:07 soroth pluto[8039]: "L2TP-PSK-NAT"[9] 58.37.161.55 #15: NAT-Traversal: Result using draft-ietf-ipsec-nat-t-ike-02/03: peer is NATed
Nov 17 09:58:07 soroth pluto[8039]: "L2TP-PSK-NAT"[9] 58.37.161.55 #15: transition from state STATE_MAIN_R1 to state STATE_MAIN_R2
Nov 17 09:58:07 soroth pluto[8039]: "L2TP-PSK-NAT"[9] 58.37.161.55 #15: STATE_MAIN_R2: sent MR2, expecting MI3
Nov 17 09:58:07 soroth pluto[8039]: "L2TP-PSK-NAT"[9] 58.37.161.55 #15: Main mode peer ID is ID_FQDN: '@ohyeah'
Nov 17 09:58:07 soroth pluto[8039]: "L2TP-PSK-NAT"[9] 58.37.161.55 #15: transition from state STATE_MAIN_R2 to state STATE_MAIN_R3
Nov 17 09:58:07 soroth pluto[8039]: "L2TP-PSK-NAT"[9] 58.37.161.55 #15: new NAT mapping for #15, was 58.37.161.55:38266, now 58.37.161.55:52250
Nov 17 09:58:07 soroth pluto[8039]: "L2TP-PSK-NAT"[9] 58.37.161.55 #15: STATE_MAIN_R3: sent MR3, ISAKMP SA established {auth=OAKLEY_PRESHARED_KEY cipher=oakley_3des_cbc_192 prf=oakley_sha group=modp2048}
Nov 17 09:58:07 soroth pluto[8039]: "L2TP-PSK-NAT"[9] 58.37.161.55 #15: peer client type is FQDN
Nov 17 09:58:07 soroth pluto[8039]: "L2TP-PSK-NAT"[9] 58.37.161.55 #15: Applying workaround for MS-818043 NAT-T bug
Nov 17 09:58:07 soroth pluto[8039]: "L2TP-PSK-NAT"[9] 58.37.161.55 #15: IDci was FQDN: \255-\3422, using NAT_OA=10.0.2.15/32 as IDci
Nov 17 09:58:07 soroth pluto[8039]: "L2TP-PSK-NAT"[9] 58.37.161.55 #15: the peer proposed: 173.45.226.50/32:17/1701 -> 10.0.2.15/32:17/1701
Nov 17 09:58:07 soroth pluto[8039]: "L2TP-PSK-NAT"[10] 58.37.161.55 #16: responding to Quick Mode proposal {msgid:26fea486}
Nov 17 09:58:07 soroth pluto[8039]: "L2TP-PSK-NAT"[10] 58.37.161.55 #16: us: 173.45.226.50<173.45.226.50>[+S=C]:17/1701---173.45.226.1
Nov 17 09:58:07 soroth pluto[8039]: "L2TP-PSK-NAT"[10] 58.37.161.55 #16: them: 58.37.161.55[@ohyeah,+S=C]:17/1701===10.0.2.15/32
Nov 17 09:58:07 soroth pluto[8039]: | NAT-OA: 4 tunnel: 1
Nov 17 09:58:07 soroth pluto[8039]: "L2TP-PSK-NAT"[10] 58.37.161.55 #16: cannot install eroute -- it is in use for "L2TP-PSK-NAT"[8] 58.37.161.55 #11
Nov 17 09:58:08 soroth pluto[8039]: "L2TP-PSK-NAT"[10] 58.37.161.55 #16: discarding duplicate packet; already STATE_QUICK_R0
Nov 17 09:58:10 soroth pluto[8039]: "L2TP-PSK-NAT"[10] 58.37.161.55 #16: discarding duplicate packet; already STATE_QUICK_R0
Nov 17 09:58:14 soroth pluto[8039]: "L2TP-PSK-NAT"[10] 58.37.161.55 #16: discarding duplicate packet; already STATE_QUICK_R0
Nov 17 09:58:22 soroth pluto[8039]: "L2TP-PSK-NAT"[10] 58.37.161.55 #16: discarding duplicate packet; already STATE_QUICK_R0
Nov 17 09:58:38 soroth pluto[8039]: "L2TP-PSK-NAT"[10] 58.37.161.55 #16: discarding duplicate packet; already STATE_QUICK_R0
Nov 17 09:59:10 soroth pluto[8039]: "L2TP-PSK-NAT"[9] 58.37.161.55 #15: received Delete SA payload: deleting ISAKMP State #15
Nov 17 09:59:10 soroth pluto[8039]: packet from 58.37.161.55:52250: received and ignored informational message
Nov 17 10:02:50 soroth pluto[8039]: "L2TP-PSK-NAT"[9] 58.37.161.55: deleting connection "L2TP-PSK-NAT" instance with peer 58.37.161.55 {isakmp=#0/ipsec=#0}
Nov 17 10:03:07 soroth pluto[8039]: "L2TP-PSK-NAT"[10] 58.37.161.55: deleting connection "L2TP-PSK-NAT" instance with peer 58.37.161.55 {isakmp=#0/ipsec=#0}
Nov 17 10:05:33 soroth pluto[8039]: packet from 58.37.161.55:500: ignoring Vendor ID payload [MS NT5 ISAKMPOAKLEY 00000004]
Nov 17 10:05:33 soroth pluto[8039]: packet from 58.37.161.55:500: ignoring Vendor ID payload [FRAGMENTATION]
Nov 17 10:05:33 soroth pluto[8039]: packet from 58.37.161.55:500: received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02_n] method set to=106
Nov 17 10:05:33 soroth pluto[8039]: packet from 58.37.161.55:500: ignoring Vendor ID payload [Vid-Initial-Contact]
Nov 17 10:05:33 soroth pluto[8039]: "L2TP-PSK-NAT"[8] 58.37.161.55 #17: responding to Main Mode from unknown peer 58.37.161.55
Nov 17 10:05:33 soroth pluto[8039]: "L2TP-PSK-NAT"[8] 58.37.161.55 #17: transition from state STATE_MAIN_R0 to state STATE_MAIN_R1
Nov 17 10:05:33 soroth pluto[8039]: "L2TP-PSK-NAT"[8] 58.37.161.55 #17: STATE_MAIN_R1: sent MR1, expecting MI2
Nov 17 10:05:34 soroth pluto[8039]: "L2TP-PSK-NAT"[8] 58.37.161.55 #17: NAT-Traversal: Result using draft-ietf-ipsec-nat-t-ike-02/03: peer is NATed
Nov 17 10:05:34 soroth pluto[8039]: "L2TP-PSK-NAT"[8] 58.37.161.55 #17: transition from state STATE_MAIN_R1 to state STATE_MAIN_R2
Nov 17 10:05:34 soroth pluto[8039]: "L2TP-PSK-NAT"[8] 58.37.161.55 #17: STATE_MAIN_R2: sent MR2, expecting MI3
Nov 17 10:05:34 soroth pluto[8039]: "L2TP-PSK-NAT"[8] 58.37.161.55 #17: Main mode peer ID is ID_FQDN: '@chris'
Nov 17 10:05:34 soroth pluto[8039]: "L2TP-PSK-NAT"[8] 58.37.161.55 #17: transition from state STATE_MAIN_R2 to state STATE_MAIN_R3
Nov 17 10:05:34 soroth pluto[8039]: "L2TP-PSK-NAT"[8] 58.37.161.55 #17: new NAT mapping for #17, was 58.37.161.55:500, now 58.37.161.55:53684
Nov 17 10:05:34 soroth pluto[8039]: "L2TP-PSK-NAT"[8] 58.37.161.55 #17: STATE_MAIN_R3: sent MR3, ISAKMP SA established {auth=OAKLEY_PRESHARED_KEY cipher=oakley_3des_cbc_192 prf=oakley_sha group=modp2048}
Nov 17 10:05:34 soroth pluto[8039]: "L2TP-PSK-NAT"[8] 58.37.161.55 #17: peer client type is FQDN
Nov 17 10:05:34 soroth pluto[8039]: "L2TP-PSK-NAT"[8] 58.37.161.55 #17: Applying workaround for MS-818043 NAT-T bug
Nov 17 10:05:34 soroth pluto[8039]: "L2TP-PSK-NAT"[8] 58.37.161.55 #17: IDci was FQDN: \255-\3422, using NAT_OA=192.168.1.106/32 as IDci
Nov 17 10:05:34 soroth pluto[8039]: "L2TP-PSK-NAT"[8] 58.37.161.55 #17: the peer proposed: 173.45.226.50/32:17/1701 -> 192.168.1.106/32:17/1701
Nov 17 10:05:34 soroth pluto[8039]: "L2TP-PSK-NAT"[11] 58.37.161.55 #18: responding to Quick Mode proposal {msgid:9f31e5e9}
Nov 17 10:05:34 soroth pluto[8039]: "L2TP-PSK-NAT"[11] 58.37.161.55 #18: us: 173.45.226.50<173.45.226.50>[+S=C]:17/1701---173.45.226.1
Nov 17 10:05:34 soroth pluto[8039]: "L2TP-PSK-NAT"[11] 58.37.161.55 #18: them: 58.37.161.55[@chris,+S=C]:17/1701===192.168.1.106/32
Nov 17 10:05:34 soroth pluto[8039]: | NAT-OA: 4 tunnel: 1
Nov 17 10:05:34 soroth pluto[8039]: "L2TP-PSK-NAT"[11] 58.37.161.55 #18: cannot install eroute -- it is in use for "L2TP-PSK-NAT"[8] 58.37.161.55 #11
Nov 17 10:05:35 soroth pluto[8039]: "L2TP-PSK-NAT"[11] 58.37.161.55 #18: discarding duplicate packet; already STATE_QUICK_R0
Nov 17 10:05:37 soroth pluto[8039]: "L2TP-PSK-NAT"[11] 58.37.161.55 #18: discarding duplicate packet; already STATE_QUICK_R0
Nov 17 10:05:41 soroth pluto[8039]: "L2TP-PSK-NAT"[11] 58.37.161.55 #18: discarding duplicate packet; already STATE_QUICK_R0
Nov 17 10:05:49 soroth pluto[8039]: "L2TP-PSK-NAT"[11] 58.37.161.55 #18: discarding duplicate packet; already STATE_QUICK_R0
Nov 17 10:06:05 soroth pluto[8039]: "L2TP-PSK-NAT"[11] 58.37.161.55 #18: discarding duplicate packet; already STATE_QUICK_R0
Nov 17 10:08:12 soroth pluto[8039]: packet from 58.37.161.55:500: ignoring Vendor ID payload [MS NT5 ISAKMPOAKLEY 00000004]
Nov 17 10:08:12 soroth pluto[8039]: packet from 58.37.161.55:500: ignoring Vendor ID payload [FRAGMENTATION]
Nov 17 10:08:12 soroth pluto[8039]: packet from 58.37.161.55:500: received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02_n] method set to=106
Nov 17 10:08:12 soroth pluto[8039]: packet from 58.37.161.55:500: ignoring Vendor ID payload [Vid-Initial-Contact]
Nov 17 10:08:12 soroth pluto[8039]: "L2TP-PSK-NAT"[11] 58.37.161.55 #19: responding to Main Mode from unknown peer 58.37.161.55
Nov 17 10:08:12 soroth pluto[8039]: "L2TP-PSK-NAT"[11] 58.37.161.55 #19: transition from state STATE_MAIN_R0 to state STATE_MAIN_R1
Nov 17 10:08:12 soroth pluto[8039]: "L2TP-PSK-NAT"[11] 58.37.161.55 #19: STATE_MAIN_R1: sent MR1, expecting MI2
Nov 17 10:08:13 soroth pluto[8039]: "L2TP-PSK-NAT"[11] 58.37.161.55 #19: NAT-Traversal: Result using draft-ietf-ipsec-nat-t-ike-02/03: peer is NATed
Nov 17 10:08:13 soroth pluto[8039]: "L2TP-PSK-NAT"[11] 58.37.161.55 #19: transition from state STATE_MAIN_R1 to state STATE_MAIN_R2
Nov 17 10:08:13 soroth pluto[8039]: "L2TP-PSK-NAT"[11] 58.37.161.55 #19: STATE_MAIN_R2: sent MR2, expecting MI3
Nov 17 10:08:13 soroth pluto[8039]: "L2TP-PSK-NAT"[11] 58.37.161.55 #19: Main mode peer ID is ID_FQDN: '@chris'
Nov 17 10:08:13 soroth pluto[8039]: "L2TP-PSK-NAT"[11] 58.37.161.55 #19: transition from state STATE_MAIN_R2 to state STATE_MAIN_R3
Nov 17 10:08:13 soroth pluto[8039]: "L2TP-PSK-NAT"[11] 58.37.161.55 #19: new NAT mapping for #19, was 58.37.161.55:500, now 58.37.161.55:53684
Nov 17 10:08:13 soroth pluto[8039]: "L2TP-PSK-NAT"[11] 58.37.161.55 #19: STATE_MAIN_R3: sent MR3, ISAKMP SA established {auth=OAKLEY_PRESHARED_KEY cipher=oakley_3des_cbc_192 prf=oakley_sha group=modp2048}
Nov 17 10:08:13 soroth pluto[8039]: "L2TP-PSK-NAT"[11] 58.37.161.55 #19: peer client type is FQDN
Nov 17 10:08:13 soroth pluto[8039]: "L2TP-PSK-NAT"[11] 58.37.161.55 #19: Applying workaround for MS-818043 NAT-T bug
Nov 17 10:08:13 soroth pluto[8039]: "L2TP-PSK-NAT"[11] 58.37.161.55 #19: IDci was FQDN: \255-\3422, using NAT_OA=192.168.1.106/32 as IDci
Nov 17 10:08:13 soroth pluto[8039]: "L2TP-PSK-NAT"[11] 58.37.161.55 #19: the peer proposed: 173.45.226.50/32:17/1701 -> 192.168.1.106/32:17/1701
Nov 17 10:08:13 soroth pluto[8039]: "L2TP-PSK-NAT"[12] 58.37.161.55 #20: responding to Quick Mode proposal {msgid:0bfabdc7}
Nov 17 10:08:13 soroth pluto[8039]: "L2TP-PSK-NAT"[12] 58.37.161.55 #20: us: 173.45.226.50<173.45.226.50>[+S=C]:17/1701---173.45.226.1
Nov 17 10:08:13 soroth pluto[8039]: "L2TP-PSK-NAT"[12] 58.37.161.55 #20: them: 58.37.161.55[@chris,+S=C]:17/1701===192.168.1.106/32
Nov 17 10:08:13 soroth pluto[8039]: | NAT-OA: 4 tunnel: 1
Nov 17 10:08:13 soroth pluto[8039]: "L2TP-PSK-NAT"[12] 58.37.161.55 #20: cannot install eroute -- it is in use for "L2TP-PSK-NAT"[8] 58.37.161.55 #11
Nov 17 10:08:14 soroth pluto[8039]: "L2TP-PSK-NAT"[12] 58.37.161.55 #20: discarding duplicate packet; already STATE_QUICK_R0
Nov 17 10:08:16 soroth pluto[8039]: "L2TP-PSK-NAT"[12] 58.37.161.55 #20: discarding duplicate packet; already STATE_QUICK_R0
Nov 17 10:08:20 soroth pluto[8039]: "L2TP-PSK-NAT"[12] 58.37.161.55 #20: discarding duplicate packet; already STATE_QUICK_R0
Nov 17 10:08:28 soroth pluto[8039]: "L2TP-PSK-NAT"[12] 58.37.161.55 #20: discarding duplicate packet; already STATE_QUICK_R0
Nov 17 10:08:44 soroth pluto[8039]: "L2TP-PSK-NAT"[12] 58.37.161.55 #20: discarding duplicate packet; already STATE_QUICK_R0
Nov 17 10:11:29 soroth pluto[8039]: "L2TP-PSK-NAT"[2] 58.37.161.55 #1: ISAKMP SA expired (--dontrekey)
Nov 17 10:11:29 soroth pluto[8039]: "L2TP-PSK-NAT"[2] 58.37.161.55: deleting connection "L2TP-PSK-NAT" instance with peer 58.37.161.55 {isakmp=#0/ipsec=#0}
Nov 17 10:13:13 soroth pluto[8039]: "L2TP-PSK-NAT"[12] 58.37.161.55: deleting connection "L2TP-PSK-NAT" instance with peer 58.37.161.55 {isakmp=#0/ipsec=#0}
Nov 17 10:13:20 soroth pluto[8039]: | found connection: L2TP-PSK-NAT
Nov 17 10:13:20 soroth pluto[8039]: "L2TP-PSK-NAT"[11] 58.37.161.55 #21: transition from state STATE_IKEv2_START to state STATE_PARENT_R1
Nov 17 10:13:20 soroth pluto[8039]: "L2TP-PSK-NAT"[11] 58.37.161.55 #21: STATE_PARENT_R1: received v2I1, sent v2R1 {auth=IKEv2 cipher=oakley_3des_cbc_192 integ=sha1 prf=oakley_sha group=modp1024}
Nov 17 10:13:20 soroth pluto[8039]: "L2TP-PSK-NAT"[11] 58.37.161.55 #21: new NAT mapping for #21, was 58.37.161.55:500, now 58.37.161.55:49345
Nov 17 10:13:20 soroth pluto[8039]: "L2TP-PSK-NAT"[11] 58.37.161.55 #21: non-critical payload ignored because it contains an unknown or unexpected payload type (ISAKMP_NEXT_v2CP) at the outermost level
Nov 17 10:13:20 soroth pluto[8039]: "L2TP-PSK-NAT"[11] 58.37.161.55 #21: IKEv2 mode peer ID is ID_IPV4_ADDR: '192.168.160.130'
Nov 17 10:13:20 soroth pluto[8039]: "L2TP-PSK-NAT"[11] 58.37.161.55 #21: no authentication payload found
Nov 17 10:13:21 soroth pluto[8039]: "L2TP-PSK-NAT"[11] 58.37.161.55 #21: non-critical payload ignored because it contains an unknown or unexpected payload type (ISAKMP_NEXT_v2CP) at the outermost level
Nov 17 10:13:21 soroth pluto[8039]: "L2TP-PSK-NAT"[11] 58.37.161.55 #21: ASSERTION FAILED at /home/rolson/openswan-2/programs/pluto/state.c:298: *p == st
Nov 17 10:13:21 soroth pluto[8039]: "L2TP-PSK-NAT"[11] 58.37.161.55 #21: using kernel interface: netkey
Nov 17 10:13:21 soroth pluto[8039]: "L2TP-PSK-NAT"[11] 58.37.161.55 #21: interface lo/lo ::1
Nov 17 10:13:21 soroth pluto[8039]: "L2TP-PSK-NAT"[11] 58.37.161.55 #21: interface lo/lo 127.0.0.1
Nov 17 10:13:21 soroth pluto[8039]: "L2TP-PSK-NAT"[11] 58.37.161.55 #21: interface lo/lo 127.0.0.1
Nov 17 10:13:21 soroth pluto[8039]: "L2TP-PSK-NAT"[11] 58.37.161.55 #21: interface eth0/eth0 173.45.226.50
Nov 17 10:13:21 soroth pluto[8039]: "L2TP-PSK-NAT"[11] 58.37.161.55 #21: interface eth0/eth0 173.45.226.50
Nov 17 10:13:21 soroth pluto[8039]: "L2TP-PSK-NAT"[11] 58.37.161.55 #21: %myid = (none)
Nov 17 10:13:21 soroth pluto[8039]: "L2TP-PSK-NAT"[11] 58.37.161.55 #21: debug none
Nov 17 10:13:21 soroth pluto[8039]: "L2TP-PSK-NAT"[11] 58.37.161.55 #21:
Nov 17 10:13:21 soroth pluto[8039]: "L2TP-PSK-NAT"[11] 58.37.161.55 #21: virtual_private (%priv):
Nov 17 10:13:21 soroth pluto[8039]: "L2TP-PSK-NAT"[11] 58.37.161.55 #21: - allowed 3 subnets: 10.0.0.0/8, 192.168.0.0/16, 172.16.0.0/12
Nov 17 10:13:21 soroth pluto[8039]: "L2TP-PSK-NAT"[11] 58.37.161.55 #21: - disallowed 0 subnets:
Nov 17 10:13:21 soroth pluto[8039]: "L2TP-PSK-NAT"[11] 58.37.161.55 #21: WARNING: Either virtual_private= was not specified, or there was a syntax
Nov 17 10:13:21 soroth pluto[8039]: "L2TP-PSK-NAT"[11] 58.37.161.55 #21: error in that line. 'left/rightsubnet=%priv' will not work!
Nov 17 10:13:21 soroth pluto[8039]: "L2TP-PSK-NAT"[11] 58.37.161.55 #21:
Nov 17 10:13:21 soroth pluto[8039]: "L2TP-PSK-NAT"[11] 58.37.161.55 #21: algorithm ESP encrypt: id=2, name=ESP_DES, ivlen=8, keysizemin=64, keysizemax=64
Nov 17 10:13:21 soroth pluto[8039]: "L2TP-PSK-NAT"[11] 58.37.161.55 #21: algorithm ESP encrypt: id=3, name=ESP_3DES, ivlen=8, keysizemin=192, keysizemax=192
Nov 17 10:13:21 soroth pluto[8039]: "L2TP-PSK-NAT"[11] 58.37.161.55 #21: algorithm ESP encrypt: id=6, name=ESP_CAST, ivlen=8, keysizemin=40, keysizemax=128
Nov 17 10:13:21 soroth pluto[8039]: "L2TP-PSK-NAT"[11] 58.37.161.55 #21: algorithm ESP encrypt: id=7, name=ESP_BLOWFISH, ivlen=8, keysizemin=40, keysizemax=448
Nov 17 10:13:21 soroth pluto[8039]: "L2TP-PSK-NAT"[11] 58.37.161.55 #21: algorithm ESP encrypt: id=11, name=ESP_NULL, ivlen=0, keysizemin=0, keysizemax=0
Nov 17 10:13:21 soroth pluto[8039]: "L2TP-PSK-NAT"[11] 58.37.161.55 #21: algorithm ESP encrypt: id=12, name=ESP_AES, ivlen=8, keysizemin=128, keysizemax=256
Nov 17 10:13:21 soroth pluto[8039]: "L2TP-PSK-NAT"[11] 58.37.161.55 #21: algorithm ESP encrypt: id=13, name=ESP_AES_CTR, ivlen=8, keysizemin=128, keysizemax=256
Nov 17 10:13:21 soroth pluto[8039]: "L2TP-PSK-NAT"[11] 58.37.161.55 #21: algorithm ESP encrypt: id=14, name=ESP_AES_CCM_A, ivlen=8, keysizemin=128, keysizemax=256
Nov 17 10:13:21 soroth pluto[8039]: "L2TP-PSK-NAT"[11] 58.37.161.55 #21: algorithm ESP encrypt: id=15, name=ESP_AES_CCM_B, ivlen=8, keysizemin=128, keysizemax=256
Nov 17 10:13:21 soroth pluto[8039]: "L2TP-PSK-NAT"[11] 58.37.161.55 #21: algorithm ESP encrypt: id=16, name=ESP_AES_CCM_C, ivlen=8, keysizemin=128, keysizemax=256
Nov 17 10:13:21 soroth pluto[8039]: "L2TP-PSK-NAT"[11] 58.37.161.55 #21: algorithm ESP encrypt: id=18, name=ESP_AES_GCM_A, ivlen=8, keysizemin=128, keysizemax=256
Nov 17 10:13:21 soroth pluto[8039]: "L2TP-PSK-NAT"[11] 58.37.161.55 #21: algorithm ESP encrypt: id=19, name=ESP_AES_GCM_B, ivlen=8, keysizemin=128, keysizemax=256
Nov 17 10:13:21 soroth pluto[8039]: "L2TP-PSK-NAT"[11] 58.37.161.55 #21: algorithm ESP encrypt: id=20, name=ESP_AES_GCM_C, ivlen=8, keysizemin=128, keysizemax=256
Nov 17 10:13:21 soroth pluto[8039]: "L2TP-PSK-NAT"[11] 58.37.161.55 #21: algorithm ESP encrypt: id=22, name=ESP_CAMELLIA, ivlen=8, keysizemin=128, keysizemax=256
Nov 17 10:13:21 soroth pluto[8039]: "L2TP-PSK-NAT"[11] 58.37.161.55 #21: algorithm ESP encrypt: id=252, name=ESP_SERPENT, ivlen=8, keysizemin=128, keysizemax=256
Nov 17 10:13:21 soroth pluto[8039]: "L2TP-PSK-NAT"[11] 58.37.161.55 #21: algorithm ESP encrypt: id=253, name=ESP_TWOFISH, ivlen=8, keysizemin=128, keysizemax=256
Nov 17 10:13:21 soroth pluto[8039]: "L2TP-PSK-NAT"[11] 58.37.161.55 #21: algorithm ESP auth attr: id=1, name=AUTH_ALGORITHM_HMAC_MD5, keysizemin=128, keysizemax=128
Nov 17 10:13:21 soroth pluto[8039]: "L2TP-PSK-NAT"[11] 58.37.161.55 #21: algorithm ESP auth attr: id=2, name=AUTH_ALGORITHM_HMAC_SHA1, keysizemin=160, keysizemax=160
Nov 17 10:13:21 soroth pluto[8039]: "L2TP-PSK-NAT"[11] 58.37.161.55 #21: algorithm ESP auth attr: id=5, name=AUTH_ALGORITHM_HMAC_SHA2_256, keysizemin=256, keysizemax=256
Nov 17 10:13:21 soroth pluto[8039]: "L2TP-PSK-NAT"[11] 58.37.161.55 #21: algorithm ESP auth attr: id=8, name=AUTH_ALGORITHM_HMAC_RIPEMD, keysizemin=160, keysizemax=160
Nov 17 10:13:21 soroth pluto[8039]: "L2TP-PSK-NAT"[11] 58.37.161.55 #21: algorithm ESP auth attr: id=9, name=AUTH_ALGORITHM_AES_CBC, keysizemin=128, keysizemax=128
Nov 17 10:13:21 soroth pluto[8039]: "L2TP-PSK-NAT"[11] 58.37.161.55 #21: algorithm ESP auth attr: id=251, name=(null), keysizemin=0, keysizemax=0
Nov 17 10:13:21 soroth pluto[8039]: "L2TP-PSK-NAT"[11] 58.37.161.55 #21:
Nov 17 10:13:21 soroth pluto[8039]: "L2TP-PSK-NAT"[11] 58.37.161.55 #21: algorithm IKE encrypt: id=0, name=(null), blocksize=16, keydeflen=131
Nov 17 10:13:21 soroth pluto[8039]: "L2TP-PSK-NAT"[11] 58.37.161.55 #21: algorithm IKE encrypt: id=3, name=OAKLEY_BLOWFISH_CBC, blocksize=8, keydeflen=128
Nov 17 10:13:21 soroth pluto[8039]: "L2TP-PSK-NAT"[11] 58.37.161.55 #21: algorithm IKE encrypt: id=5, name=OAKLEY_3DES_CBC, blocksize=8, keydeflen=192
Nov 17 10:13:21 soroth pluto[8039]: "L2TP-PSK-NAT"[11] 58.37.161.55 #21: algorithm IKE encrypt: id=7, name=OAKLEY_AES_CBC, blocksize=16, keydeflen=128
Nov 17 10:13:21 soroth pluto[8039]: "L2TP-PSK-NAT"[11] 58.37.161.55 #21: algorithm IKE encrypt: id=65004, name=OAKLEY_SERPENT_CBC, blocksize=16, keydeflen=128
Nov 17 10:13:21 soroth pluto[8039]: "L2TP-PSK-NAT"[11] 58.37.161.55 #21: algorithm IKE encrypt: id=65005, name=OAKLEY_TWOFISH_CBC, blocksize=16, keydeflen=128
Nov 17 10:13:21 soroth pluto[8039]: "L2TP-PSK-NAT"[11] 58.37.161.55 #21: algorithm IKE encrypt: id=65289, name=OAKLEY_TWOFISH_CBC_SSH, blocksize=16, keydeflen=128
Nov 17 10:13:21 soroth pluto[8039]: "L2TP-PSK-NAT"[11] 58.37.161.55 #21: algorithm IKE hash: id=1, name=OAKLEY_MD5, hashsize=16
Nov 17 10:13:21 soroth pluto[8039]: "L2TP-PSK-NAT"[11] 58.37.161.55 #21: algorithm IKE hash: id=2, name=OAKLEY_SHA1, hashsize=20
Nov 17 10:13:21 soroth pluto[8039]: "L2TP-PSK-NAT"[11] 58.37.161.55 #21: algorithm IKE hash: id=4, name=OAKLEY_SHA2_256, hashsize=32
Nov 17 10:13:21 soroth pluto[8039]: "L2TP-PSK-NAT"[11] 58.37.161.55 #21: algorithm IKE hash: id=6, name=OAKLEY_SHA2_512, hashsize=64
Nov 17 10:13:21 soroth pluto[8039]: "L2TP-PSK-NAT"[11] 58.37.161.55 #21: algorithm IKE dh group: id=2, name=OAKLEY_GROUP_MODP1024, bits=1024
Nov 17 10:13:21 soroth pluto[8039]: "L2TP-PSK-NAT"[11] 58.37.161.55 #21: algorithm IKE dh group: id=5, name=OAKLEY_GROUP_MODP1536, bits=1536
Nov 17 10:13:21 soroth pluto[8039]: "L2TP-PSK-NAT"[11] 58.37.161.55 #21: algorithm IKE dh group: id=14, name=OAKLEY_GROUP_MODP2048, bits=2048
Nov 17 10:13:21 soroth pluto[8039]: "L2TP-PSK-NAT"[11] 58.37.161.55 #21: algorithm IKE dh group: id=15, name=OAKLEY_GROUP_MODP3072, bits=3072
Nov 17 10:13:21 soroth pluto[8039]: "L2TP-PSK-NAT"[11] 58.37.161.55 #21: algorithm IKE dh group: id=16, name=OAKLEY_GROUP_MODP4096, bits=4096
Nov 17 10:13:21 soroth pluto[8039]: "L2TP-PSK-NAT"[11] 58.37.161.55 #21: algorithm IKE dh group: id=17, name=OAKLEY_GROUP_MODP6144, bits=6144
Nov 17 10:13:21 soroth pluto[8039]: "L2TP-PSK-NAT"[11] 58.37.161.55 #21: algorithm IKE dh group: id=18, name=OAKLEY_GROUP_MODP8192, bits=8192
Nov 17 10:13:21 soroth pluto[8039]: "L2TP-PSK-NAT"[11] 58.37.161.55 #21:
Nov 17 10:13:21 soroth pluto[8039]: "L2TP-PSK-NAT"[11] 58.37.161.55 #21: stats db_ops: {curr_cnt, total_cnt, maxsz} :context={0,0,0} trans={0,0,0} attrs={0,0,0}
Nov 17 10:13:21 soroth pluto[8039]: "L2TP-PSK-NAT"[11] 58.37.161.55 #21:
Nov 17 10:13:21 soroth pluto[8039]: "L2TP-PSK-NAT"[11] 58.37.161.55 #21: "L2TP-PSK-NAT": 173.45.226.50<173.45.226.50>[+S=C]:17/1701---173.45.226.1...%virtual[+S=C]:17/%any===?; unrouted; eroute owner: #0
Nov 17 10:13:21 soroth pluto[8039]: "L2TP-PSK-NAT"[11] 58.37.161.55 #21: "L2TP-PSK-NAT": myip=unset; hisip=unset;
Nov 17 10:13:21 soroth pluto[8039]: "L2TP-PSK-NAT"[11] 58.37.161.55 #21: "L2TP-PSK-NAT": ike_life: 28800s; ipsec_life: 3600s; rekey_margin: 540s; rekey_fuzz: 100%; keyingtries: 3
Nov 17 10:13:21 soroth pluto[8039]: "L2TP-PSK-NAT"[11] 58.37.161.55 #21: "L2TP-PSK-NAT": policy: PSK+ENCRYPT+DONTREKEY+IKEv2ALLOW+lKOD+rKOD; prio: 32,32; interface: eth0;
Nov 17 10:13:21 soroth pluto[8039]: "L2TP-PSK-NAT"[11] 58.37.161.55 #21: "L2TP-PSK-NAT": newest ISAKMP SA: #0; newest IPsec SA: #0;
Nov 17 10:13:21 soroth pluto[8039]: "L2TP-PSK-NAT"[11] 58.37.161.55 #21: "L2TP-PSK-NAT"[5]: 173.45.226.50<173.45.226.50>[+S=C]:17/1701---173.45.226.1...58.37.161.55[192.168.1.105,+S=C]:17/49157; erouted; eroute owner: #5
Nov 17 10:13:21 soroth pluto[8039]: "L2TP-PSK-NAT"[11] 58.37.161.55 #21: "L2TP-PSK-NAT"[5]: myip=unset; hisip=unset;
Nov 17 10:13:21 soroth pluto[8039]: "L2TP-PSK-NAT"[11] 58.37.161.55 #21: "L2TP-PSK-NAT"[5]: ike_life: 28800s; ipsec_life: 3600s; rekey_margin: 540s; rekey_fuzz: 100%; keyingtries: 3
Nov 17 10:13:21 soroth pluto[8039]: "L2TP-PSK-NAT"[11] 58.37.161.55 #21: "L2TP-PSK-NAT"[5]: policy: PSK+ENCRYPT+DONTREKEY+IKEv2ALLOW+lKOD+rKOD; prio: 32,32; interface: eth0;
Nov 17 10:13:21 soroth pluto[8039]: "L2TP-PSK-NAT"[11] 58.37.161.55 #21: "L2TP-PSK-NAT"[5]: newest ISAKMP SA: #0; newest IPsec SA: #5;
Nov 17 10:13:21 soroth pluto[8039]: "L2TP-PSK-NAT"[11] 58.37.161.55 #21: "L2TP-PSK-NAT"[7]: 173.45.226.50<173.45.226.50>[+S=C]:17/1701---173.45.226.1...58.37.161.55[192.168.1.200,+S=C]:17/49300; erouted; eroute owner: #9
Nov 17 10:13:21 soroth pluto[8039]: "L2TP-PSK-NAT"[11] 58.37.161.55 #21: "L2TP-PSK-NAT"[7]: myip=unset; hisip=unset;
Nov 17 10:13:21 soroth pluto[8039]: "L2TP-PSK-NAT"[11] 58.37.161.55 #21: "L2TP-PSK-NAT"[7]: ike_life: 28800s; ipsec_life: 3600s; rekey_margin: 540s; rekey_fuzz: 100%; keyingtries: 3
Nov 17 10:13:21 soroth pluto[8039]: "L2TP-PSK-NAT"[11] 58.37.161.55 #21: "L2TP-PSK-NAT"[7]: policy: PSK+ENCRYPT+DONTREKEY+IKEv2ALLOW+lKOD+rKOD; prio: 32,32; interface: eth0;
Nov 17 10:13:21 soroth pluto[8039]: "L2TP-PSK-NAT"[11] 58.37.161.55 #21: "L2TP-PSK-NAT"[7]: newest ISAKMP SA: #8; newest IPsec SA: #9;
Nov 17 10:13:21 soroth pluto[8039]: "L2TP-PSK-NAT"[11] 58.37.161.55 #21: "L2TP-PSK-NAT"[7]: IKE algorithm newest: 3DES_CBC_192-SHA1-MODP1024
Nov 17 10:13:21 soroth pluto[8039]: "L2TP-PSK-NAT"[11] 58.37.161.55 #21: "L2TP-PSK-NAT"[8]: 173.45.226.50<173.45.226.50>[+S=C]:17/1701---173.45.226.1...58.37.161.55[@chris,+S=C]:17/1701; erouted; eroute owner: #11
Nov 17 10:13:21 soroth pluto[8039]: "L2TP-PSK-NAT"[11] 58.37.161.55 #21: "L2TP-PSK-NAT"[8]: myip=unset; hisip=unset;
Nov 17 10:13:21 soroth pluto[8039]: "L2TP-PSK-NAT"[11] 58.37.161.55 #21: "L2TP-PSK-NAT"[8]: ike_life: 28800s; ipsec_life: 3600s; rekey_margin: 540s; rekey_fuzz: 100%; keyingtries: 3
Nov 17 10:13:21 soroth pluto[8039]: "L2TP-PSK-NAT"[11] 58.37.161.55 #21: "L2TP-PSK-NAT"[8]: policy: PSK+ENCRYPT+DONTREKEY+IKEv2ALLOW+lKOD+rKOD; prio: 32,32; interface: eth0;
Nov 17 10:13:21 soroth pluto[8039]: "L2TP-PSK-NAT"[11] 58.37.161.55 #21: "L2TP-PSK-NAT"[8]: newest ISAKMP SA: #17; newest IPsec SA: #11;
Nov 17 10:13:21 soroth pluto[8039]: "L2TP-PSK-NAT"[11] 58.37.161.55 #21: "L2TP-PSK-NAT"[8]: IKE algorithm newest: 3DES_CBC_192-SHA1-MODP2048
Nov 17 10:13:21 soroth pluto[8039]: "L2TP-PSK-NAT"[11] 58.37.161.55 #21: "L2TP-PSK-NAT"[11]: 173.45.226.50<173.45.226.50>[+S=C]:17/1701---173.45.226.1...58.37.161.55[@chris,+S=C]:17/1701; unrouted; eroute owner: #0
Nov 17 10:13:21 soroth pluto[8039]: "L2TP-PSK-NAT"[11] 58.37.161.55 #21: "L2TP-PSK-NAT"[11]: myip=unset; hisip=unset;
Nov 17 10:13:21 soroth pluto[8039]: "L2TP-PSK-NAT"[11] 58.37.161.55 #21: "L2TP-PSK-NAT"[11]: ike_life: 28800s; ipsec_life: 3600s; rekey_margin: 540s; rekey_fuzz: 100%; keyingtries: 3
Nov 17 10:13:21 soroth pluto[8039]: "L2TP-PSK-NAT"[11] 58.37.161.55 #21: "L2TP-PSK-NAT"[11]: policy: PSK+ENCRYPT+DONTREKEY+IKEv2ALLOW+lKOD+rKOD; prio: 32,32; interface: eth0;
Nov 17 10:13:21 soroth pluto[8039]: "L2TP-PSK-NAT"[11] 58.37.161.55 #21: "L2TP-PSK-NAT"[11]: newest ISAKMP SA: #19; newest IPsec SA: #0;
Nov 17 10:13:21 soroth pluto[8039]: "L2TP-PSK-NAT"[11] 58.37.161.55 #21: "L2TP-PSK-NAT"[11]: IKE algorithm newest: 3DES_CBC_192-SHA1-MODP2048
Nov 17 10:13:21 soroth pluto[8039]: "L2TP-PSK-NAT"[11] 58.37.161.55 #21: "L2TP-PSK-noNAT": 173.45.226.50<173.45.226.50>[+S=C]:17/1701---173.45.226.1...%any[+S=C]:17/%any; unrouted; eroute owner: #0
Nov 17 10:13:21 soroth pluto[8039]: "L2TP-PSK-NAT"[11] 58.37.161.55 #21: "L2TP-PSK-noNAT": myip=unset; hisip=unset;
Nov 17 10:13:21 soroth pluto[8039]: "L2TP-PSK-NAT"[11] 58.37.161.55 #21: "L2TP-PSK-noNAT": ike_life: 28800s; ipsec_life: 3600s; rekey_margin: 540s; rekey_fuzz: 100%; keyingtries: 3
Nov 17 10:13:21 soroth pluto[8039]: "L2TP-PSK-NAT"[11] 58.37.161.55 #21: "L2TP-PSK-noNAT": policy: PSK+ENCRYPT+DONTREKEY+IKEv2ALLOW+lKOD+rKOD; prio: 32,32; interface: eth0;
Nov 17 10:13:21 soroth pluto[8039]: "L2TP-PSK-NAT"[11] 58.37.161.55 #21: "L2TP-PSK-noNAT": newest ISAKMP SA: #0; newest IPsec SA: #0;
Nov 17 10:13:21 soroth pluto[8039]: "L2TP-PSK-NAT"[11] 58.37.161.55 #21: "passthrough-for-non-l2tp": 173.45.226.50<173.45.226.50>[+S=C]---173.45.226.1...%any[+S=C]===0.0.0.0/0; unrouted; eroute owner: #0
Nov 17 10:13:21 soroth pluto[8039]: "L2TP-PSK-NAT"[11] 58.37.161.55 #21: "passthrough-for-non-l2tp": myip=unset; hisip=unset;
Nov 17 10:13:21 soroth pluto[8039]: "L2TP-PSK-NAT"[11] 58.37.161.55 #21: "passthrough-for-non-l2tp": ike_life: 3600s; ipsec_life: 28800s; rekey_margin: 540s; rekey_fuzz: 100%; keyingtries: 0
Nov 17 10:13:21 soroth pluto[8039]: "L2TP-PSK-NAT"[11] 58.37.161.55 #21: "passthrough-for-non-l2tp": policy: PFS+IKEv2ALLOW+PASS+NEVER_NEGOTIATE+lKOD+rKOD; prio: 32,0; interface: eth0;
Nov 17 10:13:21 soroth pluto[8039]: "L2TP-PSK-NAT"[11] 58.37.161.55 #21: "passthrough-for-non-l2tp": newest ISAKMP SA: #0; newest IPsec SA: #0;
Nov 17 10:13:21 soroth pluto[8039]: "L2TP-PSK-NAT"[11] 58.37.161.55 #21:
Nov 17 10:13:21 soroth pluto[8039]: "L2TP-PSK-NAT"[11] 58.37.161.55 #21: #5: "L2TP-PSK-NAT"[5] 58.37.161.55:53682 STATE_QUICK_R2 (IPsec SA established); EVENT_SA_EXPIRE in 76s; newest IPSEC; eroute owner; isakmp#1; idle; import:not set
Nov 17 10:13:21 soroth pluto[8039]: "L2TP-PSK-NAT"[11] 58.37.161.55 #21: #5: "L2TP-PSK-NAT"[5] 58.37.161.55 esp.2a3fb69@58.37.161.55 esp.d27d98a0@173.45.226.50 ref=0 refhim=4294901761
Nov 17 10:13:21 soroth pluto[8039]: "L2TP-PSK-NAT"[11] 58.37.161.55 #21: #9: "L2TP-PSK-NAT"[7] 58.37.161.55:53872 STATE_QUICK_R2 (IPsec SA established); EVENT_SA_EXPIRE in 1832s; newest IPSEC; eroute owner; isakmp#8; idle; import:not set
Nov 17 10:13:21 soroth pluto[8039]: "L2TP-PSK-NAT"[11] 58.37.161.55 #21: #9: "L2TP-PSK-NAT"[7] 58.37.161.55 esp.eef5c4c@58.37.161.55 esp.f9cc5827@173.45.226.50 ref=0 refhim=4294901761
Nov 17 10:13:21 soroth pluto[8039]: "L2TP-PSK-NAT"[11] 58.37.161.55 #21: #8: "L2TP-PSK-NAT"[7] 58.37.161.55:53872 STATE_MAIN_R3 (sent MR3, ISAKMP SA established); EVENT_SA_EXPIRE in 1831s; newest ISAKMP; lastdpd=-1s(seq in:0 out:0); idle; import:not set
Nov 17 10:13:21 soroth pluto[8039]: "L2TP-PSK-NAT"[11] 58.37.161.55 #21: #11: "L2TP-PSK-NAT"[8] 58.37.161.55:53684 STATE_QUICK_R2 (IPsec SA established); EVENT_SA_EXPIRE in 2277s; newest IPSEC; eroute owner; isakmp#10; idle; import:not set
Nov 17 10:13:21 soroth pluto[8039]: "L2TP-PSK-NAT"[11] 58.37.161.55 #21: #11: "L2TP-PSK-NAT"[8] 58.37.161.55 esp.1bfa2fb1@58.37.161.55 esp.f0ee9bc6@173.45.226.50 ref=0 refhim=4294901761
Nov 17 10:13:21 soroth pluto[8039]: "L2TP-PSK-NAT"[11] 58.37.161.55 #21: #10: "L2TP-PSK-NAT"[8] 58.37.161.55:53684 STATE_MAIN_R3 (sent MR3, ISAKMP SA established); EVENT_SA_EXPIRE in 27477s; nodpd; idle; import:not set
Nov 17 10:13:21 soroth pluto[8039]: "L2TP-PSK-NAT"[11] 58.37.161.55 #21: #17: "L2TP-PSK-NAT"[8] 58.37.161.55:53684 STATE_MAIN_R3 (sent MR3, ISAKMP SA established); EVENT_SA_EXPIRE in 28333s; newest ISAKMP; nodpd; idle; import:not set
Nov 17 10:13:21 soroth pluto[8039]: "L2TP-PSK-NAT"[11] 58.37.161.55 #21: #19: "L2TP-PSK-NAT"[11] 58.37.161.55:53684 STATE_MAIN_R3 (sent MR3, ISAKMP SA established); EVENT_SA_EXPIRE in 28492s; newest ISAKMP; nodpd; idle; import:not set
Nov 17 10:13:21 soroth pluto[8039]: "L2TP-PSK-NAT"[11] 58.37.161.55 #21: #21: "L2TP-PSK-NAT"[11] 58.37.161.55:49345 STATE_PARENT_R1 (received v2I1, sent v2R1); EVENT_CRYPTO_FAILED in 300s; nodpd; idle; import:respond to stranger
Nov 17 10:13:21 soroth pluto[8039]: "L2TP-PSK-NAT"[11] 58.37.161.55 #21:
Nov 17 10:13:21 soroth pluto[8039]: "L2TP-PSK-NAT"[11] 58.37.161.55 #21: ABORT at /home/rolson/openswan-2/programs/pluto/log.c:633
Nov 17 10:13:21 soroth pluto[8039]: "L2TP-PSK-NAT"[11] 58.37.161.55 #21: ABORT at /home/rolson/openswan-2/programs/pluto/log.c:633
Nov 17 10:13:21 soroth pluto[8045]: pluto_crypto_helper: helper (1) is normal exiting
Nov 17 10:13:21 soroth pluto[8046]: pluto_crypto_helper: helper (2) is normal exiting
Nov 17 10:13:21 soroth pluto[8044]: pluto_crypto_helper: helper (0) is normal exiting
+ _________________________ date
+
+ date
Tue Nov 17 16:08:03 UTC 2009