[strongSwan] Don't know where to start

[Noel Kuntze]

Hello René,

On 25.04.2017 20:04, Rene Maurer wrote:
> Meanwhile I have looked at the time stamps and IMHO they are a little bit strange:
> 
>>> Apr 25 16:32:28 daemon.info syslog: 05[NET] sending packet: from 10.64.33.100[4500] to xxx.137.25.195[4500] (1120 bytes)
>>> 16:32:32.802620 IP 10.64.33.100.4500 > xxx.137.25.195.4500: NONESP-encap: isakmp: child_sa  ikev2_auth[I]
>>> Apr 25 16:32:32 daemon.info syslog: 03[IKE] retransmit 1 of request with message ID 1
> strongSwan[NET] is sending the package 16:32:28.
> The package is visible on ppp0 16:32:32.
> 4 seconds... this seams to be charons retransmit_timeout (which we can see as well).
> 
> Is there an explanation for this behavior?

As you wrote, the link is a GPRS link, so it's anything but fast or responsive.
It probably just takes four seconds to write the packet to the link, or you have a serious problem 
with the queueing discipline of the output interface (or the driver for the interface, or the whole kernel, or ...).
It's definitively not something that's caused by strongSwan.

Kind regards,

Noel

-- 
GPG Key ID: 0x63EC6658
Fingerprint: 23CA BB60 2146 05E7 7278 6592 3839 298F 63EC 6658

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 866 bytes
Desc: OpenPGP digital signature
URL: <http://lists.strongswan.org/pipermail/users/attachments/20170425/4b65f806/attachment-0001.sig>