[strongSwan] Don't know where to start
noel at familie-kuntze.de
Tue Apr 25 20:10:42 CEST 2017
On 25.04.2017 20:04, Rene Maurer wrote:
> Meanwhile I have looked at the time stamps and IMHO they are a little bit strange:
>>> Apr 25 16:32:28 daemon.info syslog: 05[NET] sending packet: from 10.64.33.100 to xxx.137.25.195 (1120 bytes)
>>> 16:32:32.802620 IP 10.64.33.100.4500 > xxx.22.214.171.12400: NONESP-encap: isakmp: child_sa ikev2_auth[I]
>>> Apr 25 16:32:32 daemon.info syslog: 03[IKE] retransmit 1 of request with message ID 1
> strongSwan[NET] is sending the package 16:32:28.
> The package is visible on ppp0 16:32:32.
> 4 seconds... this seams to be charons retransmit_timeout (which we can see as well).
> Is there an explanation for this behavior?
As you wrote, the link is a GPRS link, so it's anything but fast or responsive.
It probably just takes four seconds to write the packet to the link, or you have a serious problem
with the queueing discipline of the output interface (or the driver for the interface, or the whole kernel, or ...).
It's definitively not something that's caused by strongSwan.
GPG Key ID: 0x63EC6658
Fingerprint: 23CA BB60 2146 05E7 7278 6592 3839 298F 63EC 6658
-------------- next part --------------
A non-text attachment was scrubbed...
Size: 866 bytes
Desc: OpenPGP digital signature
More information about the Users