[strongSwan] Strange behaviour

Sun Oct 24 11:46:49 CEST 2010

Hi,

We've been using Strongswan now for about 9 months as a core part of our
infrastructure. It's a far better product

We use it for host-to-host tunnels.

Recently, we've had strange behaviour where security associations seem to
'disappear' on server api. Recently, we managed to get a good trace in
daemon.log:-

Oct 23 04:48:30 api charon: 11[KNL] received netlink error: No such process
(3)
Oct 23 04:48:30 api charon: 11[KNL] unable to delete SAD entry with SPI
c1ccd29a

and
Oct 23 04:51:16 api charon: 15[KNL] received netlink error: Invalid argument
(22)

ipsec status reported 'Security Associations    none". ipsec statusall
implied 5 associations where in place, but only dynamic.

netstat reported that all sockets were as we expected, and all processes
were still running. We resolved the issue with an ipsec restart - not
something we want to have to do on a production box!

I've put a full log with context below.

Output of ipsec statusall after restart (ie the correct setup) is below
that.

We're running Ubuntu Lucid (Linux api 2.6.32-24-server #43-Ubuntu SMP Thu
Sep 16 16:05:42 UTC 2010 x86_64 GNU/Linux) and ipsec version is   Linux
strongSwan U4.3.2/K2.6.32-24-server  installed via deb pkg
strongswan-starter (4.3.2-1.1ubuntu1). We're using IKEv2.

Any ideas?

Raph

Oct 23 04:00:14 api charon: 03[KNL] creating rekey job for ESP CHILD_SA with
SPI c705515e and reqid {3718}
Oct 23 04:00:14 api charon: 11[IKE] establishing CHILD_SA
local-cluster-dedicated-smithelectric-primary-2{3718}
Oct 23 04:00:14 api charon: 11[ENC] generating CREATE_CHILD_SA request 2 [
N(REKEY_SA) SA No TSi TSr ]
Oct 23 04:00:14 api charon: 11[NET] sending packet: from 10.0.0.54[4500] to
10.0.0.163[4500]
Oct 23 04:00:14 api charon: 15[NET] received packet: from 10.0.0.163[4500]
to 10.0.0.54[4500]
Oct 23 04:00:14 api charon: 15[ENC] parsed CREATE_CHILD_SA response 2 [ SA
No TSi TSr ]
Oct 23 04:00:14 api charon: 15[IKE] CHILD_SA
local-cluster-dedicated-smithelectric-primary-2{3718} established with SPIs
c1ccd29a_i c5d8454f_o and TS 10.0.0.54/32 === 10.0.0.163/32
Oct 23 04:00:14 api charon: 15[IKE] closing CHILD_SA
local-cluster-dedicated-smithelectric-primary-2{3718} with SPIs c705515e_i
c516f8c1_o and TS 10.0.0.54/32 === 10.0.0.163/32
Oct 23 04:00:14 api charon: 15[IKE] sending DELETE for ESP CHILD_SA with SPI
c705515e
Oct 23 04:00:14 api charon: 15[ENC] generating INFORMATIONAL request 3 [ D ]
Oct 23 04:00:14 api charon: 15[NET] sending packet: from 10.0.0.54[4500] to
10.0.0.163[4500]
Oct 23 04:00:14 api charon: 05[NET] received packet: from 10.0.0.163[4500]
to 10.0.0.54[4500]
Oct 23 04:00:14 api charon: 05[ENC] parsed INFORMATIONAL response 3 [ D ]
Oct 23 04:00:14 api charon: 05[IKE] received DELETE for ESP CHILD_SA with
SPI c516f8c1
Oct 23 04:00:14 api charon: 05[IKE] CHILD_SA closed
Oct 23 04:03:17 api charon: 03[KNL] creating rekey job for ESP CHILD_SA with
SPI c73d0f9b and reqid {3719}
Oct 23 04:03:17 api charon: 08[IKE] establishing CHILD_SA local-amqp{3719}
Oct 23 04:03:17 api charon: 08[ENC] generating CREATE_CHILD_SA request 4 [
N(REKEY_SA) SA No TSi TSr ]
Oct 23 04:03:18 api charon: 08[NET] sending packet: from 10.0.0.54[4500] to
10.0.0.52[4500]
Oct 23 04:03:18 api charon: 14[NET] received packet: from 10.0.0.52[4500] to
10.0.0.54[4500]
Oct 23 04:03:18 api charon: 14[ENC] parsed CREATE_CHILD_SA response 4 [ SA
No TSi TSr ]
Oct 23 04:03:18 api charon: 14[IKE] CHILD_SA local-amqp{3719} established
with SPIs ccb42a21_i c162b780_o and TS 10.0.0.54/32 === 10.0.0.52/32
Oct 23 04:03:18 api charon: 14[IKE] closing CHILD_SA local-amqp{3719} with
SPIs c73d0f9b_i ca6a78c2_o and TS 10.0.0.54/32 === 10.0.0.52/32
Oct 23 04:03:18 api charon: 14[IKE] sending DELETE for ESP CHILD_SA with SPI
c73d0f9b
Oct 23 04:03:18 api charon: 14[ENC] generating INFORMATIONAL request 5 [ D ]
Oct 23 04:03:18 api charon: 14[NET] sending packet: from 10.0.0.54[4500] to
10.0.0.52[4500]
Oct 23 04:03:18 api charon: 02[NET] received packet: from 10.0.0.52[4500] to
10.0.0.54[4500]
Oct 23 04:03:18 api charon: 02[ENC] parsed INFORMATIONAL response 5 [ D ]
Oct 23 04:03:18 api charon: 02[IKE] received DELETE for ESP CHILD_SA with
SPI ca6a78c2
Oct 23 04:03:18 api charon: 02[IKE] CHILD_SA closed
Oct 23 04:03:47 api charon: 11[IKE] deleting IKE_SA
local-stormmq-terracotta-1[3717] between 10.0.0.54[C=GB, ST=County Durham,
L=Gateshead, O=StormMQ Limited, OU=api.stormmq.com,
CN=api.stormmq.com]...10.0.0.50[C=GB,
ST=County Durham, L=Gateshead, O=StormMQ Limited, OU=
stormmq-terracotta-1.stormmq.com, CN=stormmq-terracotta-1.stormmq.com]
Oct 23 04:03:47 api charon: 11[IKE] sending DELETE for IKE_SA
local-stormmq-terracotta-1[3717]
Oct 23 04:03:47 api charon: 11[ENC] generating INFORMATIONAL request 6 [ D ]
Oct 23 04:03:47 api charon: 11[NET] sending packet: from 10.0.0.54[4500] to
10.0.0.50[4500]
Oct 23 04:03:47 api charon: 15[NET] received packet: from 10.0.0.50[4500] to
10.0.0.54[4500]
Oct 23 04:03:47 api charon: 15[ENC] parsed INFORMATIONAL response 6 [ ]
Oct 23 04:03:47 api charon: 15[IKE] IKE_SA deleted
Oct 23 04:03:47 api charon: 15[IKE] initiating IKE_SA
local-stormmq-terracotta-1[3723] to 10.0.0.50
Oct 23 04:03:47 api charon: 15[ENC] generating IKE_SA_INIT request 0 [ SA KE
No N(NATD_S_IP) N(NATD_D_IP) ]
Oct 23 04:03:47 api charon: 15[NET] sending packet: from 10.0.0.54[500] to
10.0.0.50[500]
Oct 23 04:03:47 api charon: 05[NET] received packet: from 10.0.0.50[500] to
10.0.0.54[500]
Oct 23 04:03:47 api charon: 05[ENC] parsed IKE_SA_INIT response 0 [ SA KE No
N(NATD_S_IP) N(NATD_D_IP) CERTREQ ]
Oct 23 04:03:47 api charon: 05[IKE] received cert request for "C=GB,
ST=County Durham, L=Gateshead, O=StormMQ Limited, OU=stormmq.com, CN=
stormmq.com IPSec Certificate Authority"
Oct 23 04:03:47 api charon: 05[IKE] sending cert request for "C=GB,
ST=County Durham, L=Gateshead, O=StormMQ Limited, OU=stormmq.com, CN=
stormmq.com IPSec Certificate Authority"
Oct 23 04:03:47 api charon: 05[IKE] authentication of 'C=GB, ST=County
Durham, L=Gateshead, O=StormMQ Limited, OU=api.stormmq.com, CN=
api.stormmq.com' (myself) with RSA signature successful
Oct 23 04:03:47 api charon: 05[IKE] sending end entity cert "C=GB, ST=County
Durham, L=Gateshead, O=StormMQ Limited, OU=api.stormmq.com, CN=
api.stormmq.com"
Oct 23 04:03:47 api charon: 05[IKE] establishing CHILD_SA
local-stormmq-terracotta-1
Oct 23 04:03:47 api charon: 05[ENC] generating IKE_AUTH request 1 [ IDi CERT
CERTREQ IDr AUTH SA TSi TSr N(MOBIKE_SUP) N(ADD_4_ADDR) ]
Oct 23 04:03:47 api charon: 05[NET] sending packet: from 10.0.0.54[4500] to
10.0.0.50[4500]
Oct 23 04:03:47 api charon: 12[NET] received packet: from 10.0.0.50[4500] to
10.0.0.54[4500]
Oct 23 04:03:47 api charon: 12[ENC] parsed IKE_AUTH response 1 [ IDr CERT
AUTH SA TSi TSr N(AUTH_LFT) N(MOBIKE_SUP) N(ADD_4_ADDR) ]
Oct 23 04:03:48 api charon: 12[IKE] received end entity cert "C=GB,
ST=County Durham, L=Gateshead, O=StormMQ Limited, OU=
stormmq-terracotta-1.stormmq.com, CN=stormmq-terracotta-1.stormmq.com"
Oct 23 04:03:48 api charon: 12[CFG]   using certificate "C=GB, ST=County
Durham, L=Gateshead, O=StormMQ Limited, OU=stormmq-terracotta-1.stormmq.com,
CN=stormmq-terracotta-1.stormmq.com"
Oct 23 04:03:48 api charon: 12[CFG]   using trusted ca certificate "C=GB,
ST=County Durham, L=Gateshead, O=StormMQ Limited, OU=stormmq.com, CN=
stormmq.com IPSec Certificate Authority"
Oct 23 04:03:48 api charon: 12[CFG] checking certificate status of "C=GB,
ST=County Durham, L=Gateshead, O=StormMQ Limited, OU=
stormmq-terracotta-1.stormmq.com, CN=stormmq-terracotta-1.stormmq.com"
Oct 23 04:03:48 api charon: 12[CFG] certificate status is not available
Oct 23 04:03:48 api charon: 12[IKE] authentication of 'C=GB, ST=County
Durham, L=Gateshead, O=StormMQ Limited, OU=stormmq-terracotta-1.stormmq.com,
CN=stormmq-terracotta-1.stormmq.com' with RSA signature successful
Oct 23 04:03:48 api charon: 12[IKE] scheduling reauthentication in 3391s
Oct 23 04:03:48 api charon: 12[IKE] maximum IKE_SA lifetime 3571s
Oct 23 04:03:48 api charon: 12[IKE] IKE_SA local-stormmq-terracotta-1[3723]
established between 10.0.0.54[C=GB, ST=County Durham, L=Gateshead, O=StormMQ
Limited, OU=api.stormmq.com, CN=api.stormmq.com]...10.0.0.50[C=GB, ST=County
Durham, L=Gateshead, O=StormMQ Limited, OU=stormmq-terracotta-1.stormmq.com,
CN=stormmq-terracotta-1.stormmq.com]
Oct 23 04:03:48 api charon: 12[IKE] CHILD_SA
local-stormmq-terracotta-1{3723} established with SPIs cca5adc1_i c35cca0e_o
and TS 10.0.0.54/32 === 10.0.0.50/32
Oct 23 04:03:48 api charon: 12[IKE] received AUTH_LIFETIME of 3381s,
scheduling reauthentication in 3201s
Oct 23 04:03:48 api charon: 12[IKE] peer supports MOBIKE
Oct 23 04:48:30 api charon: 03[KNL] creating rekey job for ESP CHILD_SA with
SPI cbf0f0af and reqid {3720}
Oct 23 04:48:30 api charon: 03[KNL] creating rekey job for ESP CHILD_SA with
SPI c3a35904 and reqid {3721}
Oct 23 04:48:30 api charon: 03[KNL] creating delete job for ESP CHILD_SA
with SPI c2eb09ce and reqid {3720}
Oct 23 04:48:30 api charon: 03[KNL] creating delete job for ESP CHILD_SA
with SPI cbf0f0af and reqid {3720}
Oct 23 04:48:30 api charon: 03[KNL] creating delete job for ESP CHILD_SA
with SPI c3b5dc9e and reqid {3721}
Oct 23 04:48:30 api charon: 03[KNL] creating delete job for ESP CHILD_SA
with SPI c3a35904 and reqid {3721}
Oct 23 04:48:30 api charon: 03[KNL] creating rekey job for ESP CHILD_SA with
SPI c665f5aa and reqid {3722}
Oct 23 04:48:30 api charon: 03[KNL] creating rekey job for ESP CHILD_SA with
SPI c1ccd29a and reqid {3718}
Oct 23 04:48:30 api charon: 03[KNL] creating rekey job for ESP CHILD_SA with
SPI ccb42a21 and reqid {3719}
Oct 23 04:48:30 api charon: 03[KNL] creating delete job for ESP CHILD_SA
with SPI cc8049db and reqid {3722}
Oct 23 04:48:30 api charon: 03[KNL] creating delete job for ESP CHILD_SA
with SPI c665f5aa and reqid {3722}
Oct 23 04:48:30 api charon: 03[KNL] creating rekey job for ESP CHILD_SA with
SPI cca5adc1 and reqid {3723}
Oct 23 04:48:30 api charon: 03[KNL] creating delete job for ESP CHILD_SA
with SPI c5d8454f and reqid {3718}
Oct 23 04:48:30 api charon: 03[KNL] creating delete job for ESP CHILD_SA
with SPI c1ccd29a and reqid {3718}
Oct 23 04:48:30 api charon: 03[KNL] creating delete job for ESP CHILD_SA
with SPI c162b780 and reqid {3719}
Oct 23 04:48:30 api charon: 03[KNL] creating delete job for ESP CHILD_SA
with SPI ccb42a21 and reqid {3719}
Oct 23 04:48:30 api charon: 03[KNL] creating delete job for ESP CHILD_SA
with SPI c35cca0e and reqid {3723}
Oct 23 04:48:30 api charon: 03[KNL] creating delete job for ESP CHILD_SA
with SPI cca5adc1 and reqid {3723}
Oct 23 04:48:30 api charon: 02[IKE] deleting IKE_SA
local-stormmq-terracotta-2[3720] between 10.0.0.54[C=GB, ST=County Durham,
L=Gateshead, O=StormMQ Limited, OU=api.stormmq.com,
CN=api.stormmq.com]...10.0.0.51[C=GB,
ST=County Durham, L=Gateshead, O=StormMQ Limited, OU=
stormmq-terracotta-2.stormmq.com, CN=stormmq-terracotta-2.stormmq.com]
Oct 23 04:48:30 api charon: 02[IKE] sending DELETE for IKE_SA
local-stormmq-terracotta-2[3720]
Oct 23 04:48:30 api charon: 02[ENC] generating INFORMATIONAL request 6 [ D ]
Oct 23 04:48:30 api charon: 05[IKE] deleting IKE_SA local-amqp[3719] between
10.0.0.54[C=GB, ST=County Durham, L=Gateshead, O=StormMQ Limited, OU=
api.stormmq.com, CN=api.stormmq.com]...10.0.0.52[C=GB, ST=County Durham,
L=Gateshead, O=StormMQ Limited, OU=amqp.stormmq.com, CN=amqp.stormmq.com]
Oct 23 04:48:30 api charon: 13[IKE] deleting IKE_SA
local-cluster-dedicated-smithelectric-primary-2[3718] between
10.0.0.54[C=GB, ST=County Durham, L=Gateshead, O=StormMQ Limited, OU=
api.stormmq.com, CN=api.stormmq.com]...10.0.0.163[C=GB, ST=County Durham,
L=Gateshead, O=StormMQ Limited, OU=
cluster-dedicated-smithelectric-primary-2.stormmq.com, CN=
cluster-dedicated-smithelectric-primary-2.stormmq.com]
Oct 23 04:48:30 api charon: 12[IKE] deleting IKE_SA
local-cluster-free-1-primary-1[3721] between 10.0.0.54[C=GB, ST=County
Durham, L=Gateshead, O=StormMQ Limited, OU=api.stormmq.com, CN=
api.stormmq.com]...10.0.0.53[C=GB, ST=County Durham, L=Gateshead, O=StormMQ
Limited, OU=cluster-free-1-primary-1.stormmq.com, CN=
cluster-free-1-primary-1.stormmq.com]
Oct 23 04:48:30 api charon: 05[IKE] sending DELETE for IKE_SA
local-amqp[3719]
Oct 23 04:48:30 api charon: 05[ENC] generating INFORMATIONAL request 6 [ D ]
Oct 23 04:48:30 api charon: 12[IKE] sending DELETE for IKE_SA
local-cluster-free-1-primary-1[3721]
Oct 23 04:48:30 api charon: 12[ENC] generating INFORMATIONAL request 4 [ D ]
Oct 23 04:48:30 api charon: 13[IKE] sending DELETE for IKE_SA
local-cluster-dedicated-smithelectric-primary-2[3718]
Oct 23 04:48:30 api charon: 13[ENC] generating INFORMATIONAL request 4 [ D ]
Oct 23 04:48:30 api charon: 05[NET] sending packet: from 10.0.0.54[4500] to
10.0.0.52[4500]
Oct 23 04:48:30 api charon: 02[NET] sending packet: from 10.0.0.54[4500] to
10.0.0.51[4500]
Oct 23 04:48:30 api charon: 14[IKE] destroying IKE_SA in state DELETING
without notification
Oct 23 04:48:30 api charon: 12[NET] sending packet: from 10.0.0.54[4500] to
10.0.0.53[4500]
Oct 23 04:48:30 api charon: 13[NET] sending packet: from 10.0.0.54[4500] to
10.0.0.163[4500]
Oct 23 04:48:30 api charon: 13[IKE] establishing CHILD_SA
local-cluster-dedicated-smithelectric-primary-1{3722}
Oct 23 04:48:30 api charon: 02[IKE] destroying IKE_SA in state DELETING
without notification
Oct 23 04:48:30 api charon: 11[IKE] destroying IKE_SA in state DELETING
without notification
Oct 23 04:48:30 api charon: 13[ENC] generating CREATE_CHILD_SA request 2 [
N(REKEY_SA) SA No TSi TSr ]
Oct 23 04:48:30 api charon: 13[NET] sending packet: from 10.0.0.54[4500] to
10.0.0.161[4500]
Oct 23 04:48:30 api charon: 13[IKE] establishing CHILD_SA
local-stormmq-terracotta-1{3723}
Oct 23 04:48:30 api charon: 13[ENC] generating CREATE_CHILD_SA request 2 [
N(REKEY_SA) SA No TSi TSr ]
Oct 23 04:48:30 api charon: 13[NET] sending packet: from 10.0.0.54[4500] to
10.0.0.50[4500]
Oct 23 04:48:30 api charon: 16[JOB] CHILD_SA with reqid 3718 not found for
delete
Oct 23 04:48:30 api charon: 15[JOB] CHILD_SA with reqid 3720 not found for
delete
Oct 23 04:48:30 api charon: 15[NET] received packet: from 10.0.0.52[4500] to
10.0.0.54[4500]
Oct 23 04:48:30 api charon: 08[MGR] ignoring request with ID 2, already
processing
Oct 23 04:48:30 api charon: last message repeated 2 times
Oct 23 04:48:30 api charon: 08[NET] received packet: from 10.0.0.161[4500]
to 10.0.0.54[4500]
Oct 23 04:48:30 api charon: 05[JOB] CHILD_SA with reqid 3718 not found for
delete
Oct 23 04:48:30 api charon: 15[ENC] parsed INFORMATIONAL request 2 [ D ]
Oct 23 04:48:30 api charon: 16[MGR] ignoring request with ID 0, already
processing
Oct 23 04:48:30 api charon: last message repeated 2 times
Oct 23 04:48:30 api charon: 16[NET] received packet: from 10.0.0.50[4500] to
10.0.0.54[4500]
Oct 23 04:48:30 api charon: 05[MGR] ignoring request with ID 0, already
processing
Oct 23 04:48:30 api charon: last message repeated 2 times
Oct 23 04:48:30 api charon: 12[JOB] CHILD_SA with reqid 3720 not found for
delete
Oct 23 04:48:30 api charon: 15[IKE] received DELETE for IKE_SA
local-amqp[3719]
Oct 23 04:48:30 api charon: 15[IKE] deleting IKE_SA local-amqp[3719] between
10.0.0.54[C=GB, ST=County Durham, L=Gateshead, O=StormMQ Limited, OU=
api.stormmq.com, CN=api.stormmq.com]...10.0.0.52[C=GB, ST=County Durham,
L=Gateshead, O=StormMQ Limited, OU=amqp.stormmq.com, CN=amqp.stormmq.com]
Oct 23 04:48:30 api charon: 15[IKE] IKE_SA deleted
Oct 23 04:48:30 api charon: 15[ENC] generating INFORMATIONAL response 2 [ ]
Oct 23 04:48:30 api charon: 10[MGR] ignoring request with ID 0, already
processing
Oct 23 04:48:30 api charon: 10[MGR] ignoring request with ID 0, already
processing
Oct 23 04:48:30 api charon: 05[MGR] ignoring request with ID 0, already
processing
Oct 23 04:48:30 api charon: 12[MGR] ignoring request with ID 0, already
processing
Oct 23 04:48:30 api charon: 15[NET] sending packet: from 10.0.0.54[4500] to
10.0.0.52[4500]
Oct 23 04:48:30 api charon: 08[ENC] parsed CREATE_CHILD_SA request 0 [
N(REKEY_SA) SA No TSi TSr ]
Oct 23 04:48:30 api charon: 16[ENC] parsed CREATE_CHILD_SA request 0 [
N(REKEY_SA) SA No TSi TSr ]
Oct 23 04:48:30 api charon: 08[IKE] CHILD_SA
local-cluster-dedicated-smithelectric-primary-1{3722} established with SPIs
c829fa75_i cf580d6f_o and TS 10.0.0.54/32 === 10.0.0.161/32
Oct 23 04:48:30 api charon: 08[ENC] generating CREATE_CHILD_SA response 0 [
SA No TSi TSr ]
Oct 23 04:48:30 api charon: 16[IKE] CHILD_SA
local-stormmq-terracotta-1{3723} established with SPIs c738ef47_i c18eded4_o
and TS 10.0.0.54/32 === 10.0.0.50/32
Oct 23 04:48:30 api charon: 16[ENC] generating CREATE_CHILD_SA response 0 [
SA No TSi TSr ]
Oct 23 04:48:30 api charon: 08[NET] sending packet: from 10.0.0.54[4500] to
10.0.0.161[4500]
Oct 23 04:48:30 api charon: 16[NET] sending packet: from 10.0.0.54[4500] to
10.0.0.50[4500]
Oct 23 04:48:30 api charon: 11[KNL] received netlink error: No such process
(3)
Oct 23 04:48:30 api charon: 11[KNL] unable to delete SAD entry with SPI
c1ccd29a
Oct 23 04:48:30 api charon: 11[KNL] received netlink error: No such process
(3)
Oct 23 04:48:30 api charon: 11[KNL] unable to delete SAD entry with SPI
c5d8454f
Oct 23 04:48:30 api charon: 02[KNL] received netlink error: No such process
(3)
Oct 23 04:48:30 api charon: 02[KNL] unable to delete SAD entry with SPI
c3a35904
Oct 23 04:48:30 api charon: 14[KNL] received netlink error: No such process
(3)
Oct 23 04:48:30 api charon: 14[KNL] unable to delete SAD entry with SPI
cbf0f0af
Oct 23 04:48:30 api charon: 02[KNL] received netlink error: No such process
(3)
Oct 23 04:48:30 api charon: 02[KNL] unable to delete SAD entry with SPI
c3b5dc9e
Oct 23 04:48:30 api charon: 14[KNL] received netlink error: No such process
(3)
Oct 23 04:48:30 api charon: 14[KNL] unable to delete SAD entry with SPI
c2eb09ce
Oct 23 04:48:34 api charon: 13[IKE] retransmit 1 of request with message ID
6
Oct 23 04:48:34 api charon: 13[NET] sending packet: from 10.0.0.54[4500] to
10.0.0.52[4500]
Oct 23 04:48:34 api charon: 15[IKE] retransmit 1 of request with message ID
2
Oct 23 04:48:34 api charon: 15[NET] sending packet: from 10.0.0.54[4500] to
10.0.0.161[4500]
Oct 23 04:48:34 api charon: 08[IKE] retransmit 1 of request with message ID
2
Oct 23 04:48:34 api charon: 08[NET] sending packet: from 10.0.0.54[4500] to
10.0.0.50[4500]
Oct 23 04:48:42 api charon: 16[IKE] retransmit 2 of request with message ID
6
Oct 23 04:48:42 api charon: 16[NET] sending packet: from 10.0.0.54[4500] to
10.0.0.52[4500]
Oct 23 04:48:42 api charon: 02[IKE] retransmit 2 of request with message ID
2
Oct 23 04:48:42 api charon: 02[NET] sending packet: from 10.0.0.54[4500] to
10.0.0.161[4500]
Oct 23 04:48:42 api charon: 11[IKE] retransmit 2 of request with message ID
2
Oct 23 04:48:42 api charon: 11[NET] sending packet: from 10.0.0.54[4500] to
10.0.0.50[4500]
Oct 23 04:48:55 api charon: 13[IKE] retransmit 3 of request with message ID
2
Oct 23 04:48:55 api charon: 14[IKE] retransmit 3 of request with message ID
6
Oct 23 04:48:55 api charon: 13[NET] sending packet: from 10.0.0.54[4500] to
10.0.0.161[4500]
Oct 23 04:48:55 api charon: 14[NET] sending packet: from 10.0.0.54[4500] to
10.0.0.52[4500]
Oct 23 04:48:55 api charon: 10[IKE] retransmit 3 of request with message ID
2
Oct 23 04:48:55 api charon: 10[NET] sending packet: from 10.0.0.54[4500] to
10.0.0.50[4500]
Oct 23 04:49:00 api charon: 12[IKE] destroying IKE_SA in state DELETING
without notification
Oct 23 04:49:00 api charon: 12[KNL] received netlink error: No such process
(3)
Oct 23 04:49:00 api charon: 12[KNL] unable to delete SAD entry with SPI
ccb42a21
Oct 23 04:49:00 api charon: 12[KNL] received netlink error: No such process
(3)
Oct 23 04:49:00 api charon: 12[KNL] unable to delete SAD entry with SPI
c162b780
Oct 23 04:49:00 api charon: 03[KNL] creating delete job for ESP CHILD_SA
with SPI c8a8ec40 and reqid {3722}
Oct 23 04:49:00 api charon: 03[KNL] creating delete job for ESP CHILD_SA
with SPI cdeede32 and reqid {3723}
Oct 23 04:49:18 api charon: 14[IKE] retransmit 4 of request with message ID
2
Oct 23 04:49:18 api charon: 13[IKE] retransmit 4 of request with message ID
2
Oct 23 04:49:18 api charon: 13[NET] sending packet: from 10.0.0.54[4500] to
10.0.0.161[4500]
Oct 23 04:49:18 api charon: 14[NET] sending packet: from 10.0.0.54[4500] to
10.0.0.50[4500]
Oct 23 04:50:00 api charon: 12[IKE] retransmit 5 of request with message ID
2
Oct 23 04:50:00 api charon: 12[NET] sending packet: from 10.0.0.54[4500] to
10.0.0.161[4500]
Oct 23 04:50:00 api charon: 05[IKE] retransmit 5 of request with message ID
2
Oct 23 04:50:00 api charon: 05[NET] sending packet: from 10.0.0.54[4500] to
10.0.0.50[4500]
Oct 23 04:51:16 api charon: 08[IKE] giving up after 5 retransmits
Oct 23 04:51:16 api charon: 08[KNL] received netlink error: No such process
(3)
Oct 23 04:51:16 api charon: 08[KNL] unable to delete SAD entry with SPI
c665f5aa
Oct 23 04:51:16 api charon: 08[KNL] received netlink error: No such process
(3)
Oct 23 04:51:16 api charon: 08[KNL] unable to delete SAD entry with SPI
cc8049db
Oct 23 04:51:16 api charon: 15[IKE] giving up after 5 retransmits
Oct 23 04:51:16 api charon: 15[KNL] received netlink error: No such process
(3)
Oct 23 04:51:16 api charon: 15[KNL] unable to delete SAD entry with SPI
cca5adc1
Oct 23 04:51:16 api charon: 15[KNL] received netlink error: No such process
(3)
Oct 23 04:51:16 api charon: 15[KNL] unable to delete SAD entry with SPI
c35cca0e
Oct 23 04:51:16 api charon: 15[KNL] received netlink error: Invalid argument
(22)
Oct 23 04:51:16 api charon: 15[KNL] unable to delete SAD entry with SPI
cdeede32
Oct 23 04:51:16 api charon: 08[KNL] received netlink error: Invalid argument
(22)
Oct 23 04:51:16 api charon: 08[KNL] unable to delete SAD entry with SPI
c8a8ec40
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.strongswan.org/pipermail/users/attachments/20101024/bef8fe04/attachment.html>