[strongSwan] Connection dies w/netlink error

richard Knight rjknight at us.ibm.com
Mon Aug 9 17:50:04 CEST 2010


Hi All, 

I am using version 4.1.10 of strongswan and have been doing some testing on a
system with two connections, every so often one of the connections will stop
working with the netlink error below.  It doesnt seem to be related to time,
though if I leave the connection going overnight it will almost always fail.

15[AUD] CHILD_SA closed
04[KNL] creating rekey job for ESP CHILD_SA 0xcde4752d (reqid 10)
16[AUD] establishing CHILD_SA
16[CFG] proposing traffic selectors for us:
16[CFG]  2033:123::aaa/128 (derived from dynamic/128)
16[CFG] proposing traffic selectors for other:
16[CFG]  2033:123::bbb/128 (derived from dynamic/128)
16[ENC] generating CREATE_CHILD_SA request 18 [ N(REKEY_SA) SA No KE TSi TSr ]
16[NET] sending packet: from 2033:123::aaa[500] to 2033:123::bbb[500]
04[KNL] creating rekey job for ESP CHILD_SA 0xc450608a (reqid 11)
17[NET] received packet: from 2033:123::bbb[500] to 2033:123::aaa[500]
17[ENC] parsed CREATE_CHILD_SA response 18 [ SA No KE TSi TSr ]
17[CFG] selecting proposal:
17[CFG]   proposal matches
17[CFG] selecting traffic selectors for us:
17[CFG]  config: 2033:123::aaa/128, received: 2033:123::aaa/128 => match:
2033:123::aaa/128
17[CFG] selecting traffic selectors for other:
17[CFG]  config: 2033:123::bbb/128, received: 2033:123::bbb/128 => match:
2033:123::bbb/128
17[AUD] CHILD_SA 'fsp-hmc' established successfully
17[AUD] closing CHILD_SA 2033:123::aaa/128 === 2033:123::bbb/128 
17[ENC] generating INFORMATIONAL request 19 [ D ]
17[NET] sending packet: from 2033:123::aaa[500] to 2033:123::bbb[500]
07[NET] received packet: from 2033:123::bbb[500] to 2033:123::aaa[500]
07[ENC] parsed INFORMATIONAL response 19 [ D ]
07[AUD] CHILD_SA closed
07[AUD] establishing CHILD_SA
07[CFG] proposing traffic selectors for us:
07[CFG]  2033:123::aaa/128 (derived from dynamic/128)
07[CFG] proposing traffic selectors for other:
07[CFG]  2033:123::bbb/128 (derived from dynamic/32)
07[ENC] generating CREATE_CHILD_SA request 20 [ N(REKEY_SA) SA No KE TSi TSr ]
07[NET] sending packet: from 2033:123::aaa[500] to 2033:123::bbb[500]
04[KNL] creating rekey job for ESP CHILD_SA 0xc428ea7d (reqid 12)
04[KNL] creating delete job for ESP CHILD_SA 0xc6f71609 (reqid 11)
04[KNL] creating delete job for ESP CHILD_SA 0xc450608a (reqid 11)
15[NET] received packet: from 2033:123::bbb[500] to 2033:123::aaa[500]
15[ENC] parsed CREATE_CHILD_SA response 20 [ SA No KE TSi TSr ]
15[CFG] selecting proposal:
15[CFG]   proposal matches
15[CFG] selecting traffic selectors for us:
15[CFG]  config: 2033:123::aaa/128, received: 2033:123::aaa/128 => match:
2033:123::aaa/128
15[CFG] selecting traffic selectors for other:
15[CFG]  config: 2033:123::bbb/128, received: 2033:123::bbb/128 => match:
2033:123::bbb/128
15[AUD] CHILD_SA 'bpc2-hmc' established successfully
15[AUD] closing CHILD_SA 2033:123::aaa/128 === 2033:123::bbb/128 
15[ENC] generating INFORMATIONAL request 21 [ D ]
15[NET] sending packet: from 2033:123::aaa[500] to 2033:123::bbb[500]
16[NET] received packet: from 2033:123::bbb[500] to 2033:123::aaa[500]
16[ENC] parsed INFORMATIONAL response 21 [ D ]
16[KNL] received netlink error: No such process (3)
16[KNL] unable to delete SAD entry with SPI 0x8a6050c4
16[KNL] received netlink error: No such process (3)
16[KNL] unable to delete SAD entry with SPI 0x916f7c6
16[AUD] CHILD_SA closed







More information about the Users mailing list