[strongSwan] Locating a missing ICMP traffic

[Adrian Milanoski]

HI Pavel,

That worked thank you....

Tunnel was established and ESP packets were arriving at the GW when I looked at the tcpdump but don't know what was happening to the packet eventually found the sequence was off.

Thanks :)


Regards,

Adrian Milanoski
Lab Administrator
BBOS WiFI VPN. Security Testing - R&D
Tel.(289) 261-5801 | Cel: (647) 289-261-5801
Email  amilanoski at blackberry.com<mailto:amilanoski at blackberry.com>



[Description: Description: cid:image001.gif at 01CDFFB4.0099AD80][Description: Description: Description: hme_scrn_ind_new_notification_Precsn_Zen_801421_11]<http://www.blackberry.com/>




From: Pawel Grzesik [mailto:pawel.grzesik at brainstorm.co.uk]
Sent: Wednesday, March 05, 2014 4:48 AM
To: Adrian Milanoski
Cc: Users at lists.strongswan.org
Subject: Re: [strongSwan] Locating a missing ICMP traffic

Hi Adrian,

You can use:

tcpdump -i xxx esp host xxx
to see esp packets.

Aslo command: ip x m will help you find a problem.
Tunnel is established and installed? It need to have status Installed also.

Thanks,
Pawel

On 4 Mar 2014, at 23:09, Adrian Milanoski <amilanoski at blackberry.com<mailto:amilanoski at blackberry.com>> wrote:


Hi all,

I am trying to debug  why I can ping resources in my intranet and it works and then its stops working yet tunnel stays established?

Is there a way to see if the GW is decrypting my ESP packet and to try and trace where it is going?

Thanks in advance


Regards,

Adrian Milanoski
Lab Administrator
BBOS WiFI VPN. Security Testing - R&D
4715 Tahoe Blvd, Mississauga, ON, Canada, L4W 0B5
Tel.(289) 261-5801 | Fax.(905) 629-7836
Email  amilanoski at blackberry.com<mailto:amilanoski at blackberry.com>



<image001.jpg><image002.jpg><http://www.blackberry.com/>




---------------------------------------------------------------------
This transmission (including any attachments) may contain confidential information, privileged material (including material protected by the solicitor-client or other applicable privileges), or constitute non-public information. Any use of this information by anyone other than the intended recipient is prohibited. If you have received this transmission in error, please immediately reply to the sender and delete this information from your system. Use, dissemination, distribution, or reproduction of this transmission by unintended recipients is not authorized and may be unlawful.
_______________________________________________
Users mailing list
Users at lists.strongswan.org<mailto:Users at lists.strongswan.org>
https://lists.strongswan.org/mailman/listinfo/users

---------------------------------------------------------------------
This transmission (including any attachments) may contain confidential information, privileged material (including material protected by the solicitor-client or other applicable privileges), or constitute non-public information. Any use of this information by anyone other than the intended recipient is prohibited. If you have received this transmission in error, please immediately reply to the sender and delete this information from your system. Use, dissemination, distribution, or reproduction of this transmission by unintended recipients is not authorized and may be unlawful.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.strongswan.org/pipermail/users/attachments/20140306/070f5a50/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.jpg
Type: image/jpeg
Size: 1632 bytes
Desc: image001.jpg
URL: <http://lists.strongswan.org/pipermail/users/attachments/20140306/070f5a50/attachment.jpg>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image002.jpg
Type: image/jpeg
Size: 724 bytes
Desc: image002.jpg
URL: <http://lists.strongswan.org/pipermail/users/attachments/20140306/070f5a50/attachment-0001.jpg>