(racoon 648) Two simmetrical configuration but two different results
Michele Bendazzoli <[email protected]>
| Newsgroups | gmane.network.ipv6.kame.racoon |
|---|---|
| Organization | Micky Mouse |
| Message-ID | <[email protected]> |
I have two gateways/router/firewall/vpn with the same configuration, and
I try to install a vpn from
192.168.1.0/24<->xxx.xxx.151.70<->xxx.xxx.37.118<->192.168.100.0/24.
When i try to ping from 192.168.1.1 (eth1 gateway1's) to 192.168.100.1
(eth1 gateway2's) the answer is a quick "connect: resource temporarily
unavailable", wherease when I ping from 192.168.100.1 to 192.168.1.1 the
system doen't return any response.
here are the info: both machines are Linux 2.6.7-1-686 i686 GNU/Linux
with Debian Sarge installed and update until today. The version of the
software are ipsec-tool 0.3.3, OpenSSL 0.9.7d.
If someone can give me a hint i'm very happy because I don't figure what
is my fault.
I attach the conf file, the spd generated by racoon-tool, the (larval
...) sad generated by racoon when i made the ping and the log.
I use the racoon-tool suggested by debian wich generates the following
racoon.conf:
#
# Racoon configuration for sarge
# Generated on Thu Aug 19 22:11:41 2004 by racoon-tool
#
#
# Global items
#
path pre_shared_key "/etc/racoon/psk.txt";
path certificate "/etc/racoon/certs";
log debug2;
#
# Connection bacckdoor-doormat
#
remote xxx.xxx.37.118 {
proposal {
encryption_algorithm 3des;
hash_algorithm sha1;
authentication_method pre_shared_key;
dh_group modp1024;
}
my_identifier address;
passive off;
verify_identifier off;
verify_cert on;
peers_certfile "vpn_sintelnet.public";
lifetime time 60 min;
peers_identifier address;
certificate_type x509 "vpn_mickymouse.public" "vpn_mickymouse.private";
exchange_mode main;
}
sainfo address xxx.xxx.151.70[any] any address 192.168.100.0/24[any] any
{
pfs_group modp1024;
lifetime time 20 min;
encryption_algorithm 3des;
authentication_algorithm hmac_sha1;
compression_algorithm deflate;
}
#
# Connection bacckdoor-doormat1
#
sainfo address 192.168.100.0/24[any] any address xxx.xxx.151.70[any] any
{
pfs_group modp1024;
lifetime time 20 min;
encryption_algorithm 3des;
authentication_algorithm hmac_sha1;
compression_algorithm deflate;
}
These are the policies generated automatically by the racoon-tool (the
output come from setkey -DP):
192.168.100.0/24[any] xxx.xxx.151.70[any] any
in ipsec
ipcomp/tunnel/62.152.37.118-80.183.151.70/use
esp/tunnel/62.152.37.118-80.183.151.70/unique#16385
created: Aug 19 22:11:41 2004 lastused:
lifetime: 0(s) validtime: 0(s)
spid=488 seq=11 pid=3858
refcnt=1
xxx.xxx.151.70[any] 192.168.100.0/24[any] any
in ipsec
ipcomp/tunnel/62.152.37.118-80.183.151.70/use
esp/tunnel/62.152.37.118-80.183.151.70/unique#16387
created: Aug 19 22:11:41 2004 lastused:
lifetime: 0(s) validtime: 0(s)
spid=504 seq=10 pid=3858
refcnt=1
xxx.xxx.151.70[any] 192.168.100.0/24[any] any
out ipsec
ipcomp/tunnel/80.183.151.70-62.152.37.118/use
esp/tunnel/80.183.151.70-62.152.37.118/unique#16384
created: Aug 19 22:11:41 2004 lastused: Aug 19 22:40:04 2004
lifetime: 0(s) validtime: 0(s)
spid=481 seq=9 pid=3858
refcnt=1
192.168.100.0/24[any] xxx.xxx.151.70[any] any
out ipsec
ipcomp/tunnel/80.183.151.70-62.152.37.118/use
esp/tunnel/80.183.151.70-62.152.37.118/unique#16386
created: Aug 19 22:11:41 2004 lastused:
lifetime: 0(s) validtime: 0(s)
spid=497 seq=8 pid=3858
refcnt=1
These are the sad entry (setkey -D).
xxx.xxx.151.70 xxx.xxx.37.118
ipcomp mode=tunnel spi=0(0x00000000) reqid=0(0x00000000)
C: none seq=0x00000000 replay=0 flags=0x00000000 state=larval
created: Aug 19 23:05:23 2004 current: Aug 19 23:05:26 2004
diff: 3(s) hard: 30(s) soft: 0(s)
last: hard: 0(s) soft: 0(s)
current: 0(bytes) hard: 0(bytes) soft: 0(bytes)
allocated: 0 hard: 0 soft: 0
sadb_seq=3 pid=4468 refcnt=0
xxx.xxx.151.70 xxx.xxx.37.118
esp mode=tunnel spi=0(0x00000000) reqid=16384(0x00004000)
seq=0x00000000 replay=0 flags=0x00000000 state=larval
created: Aug 19 23:05:23 2004 current: Aug 19 23:05:26 2004
diff: 3(s) hard: 30(s) soft: 0(s)
last: hard: 0(s) soft: 0(s)
current: 0(bytes) hard: 0(bytes) soft: 0(bytes)
allocated: 0 hard: 0 soft: 0
sadb_seq=2 pid=4468 refcnt=0
xxx.xxx.37.118 xxx.xxx.151.70
esp mode=tunnel spi=77193411(0x0499e0c3) reqid=0(0x00000000)
seq=0x00000000 replay=0 flags=0x00000000 state=larval
created: Aug 19 23:05:23 2004 current: Aug 19 23:05:26 2004
diff: 3(s) hard: 30(s) soft: 0(s)
last: hard: 0(s) soft: 0(s)
current: 0(bytes) hard: 0(bytes) soft: 0(bytes)
allocated: 0 hard: 0 soft: 0
sadb_seq=1 pid=4468 refcnt=0
xxx.xxx.37.118 xxx.xxx.151.70
ipcomp mode=tunnel spi=31513(0x00007b19) reqid=16385(0x00004001)
C: none seq=0x00000000 replay=0 flags=0x00000000 state=larval
created: Aug 19 23:05:23 2004 current: Aug 19 23:05:26 2004
diff: 3(s) hard: 30(s) soft: 0(s)
last: hard: 0(s) soft: 0(s)
current: 0(bytes) hard: 0(bytes) soft: 0(bytes)
allocated: 0 hard: 0 soft: 0
sadb_seq=0 pid=4468 refcnt=0
An this is the log in gateway1 where i try to ping 192.168.100.1 after a
fresh restart of racoon:
Aug 19 22:58:28 localhost racoon: DEBUG2: parse successed.
ago 19 22:58:28 localhost racoon-tool[3863]: configured racoon.
Aug 19 22:58:37 localhost racoon: DEBUG: get pfkey ACQUIRE message
Aug 19 22:58:37 localhost racoon: DEBUG2: 02060009 0a000000 01000000
00000000 03000500 00200000 02000000 50b79746 00000000 00000000 03000600
00200000 02000000 3e982576 00000000 00000000 02001200 02000200 61020000
00800408
Aug 19 22:58:37 localhost racoon: DEBUG: suitable outbound SP found:
80.183.151.70/32[0] 192.168.100.0/24[0] proto=any dir=out.
Aug 19 22:58:37 localhost racoon: DEBUG: sub:0xbffff9f0:
192.168.100.0/24[0] 80.183.151.70/32[0] proto=any dir=in
Aug 19 22:58:37 localhost racoon: DEBUG: db :0x80a60a0:
80.183.151.70/32[0] 192.168.100.0/24[0] proto=any dir=out
Aug 19 22:58:37 localhost racoon: DEBUG: sub:0xbffff9f0:
192.168.100.0/24[0] 80.183.151.70/32[0] proto=any dir=in
Aug 19 22:58:37 localhost racoon: DEBUG: db :0x80a63f0:
192.168.100.0/24[0] 80.183.151.70/32[0] proto=any dir=in
Aug 19 22:58:37 localhost racoon: DEBUG: suitable inbound SP found:
192.168.100.0/24[0] 80.183.151.70/32[0] proto=any dir=in.
Aug 19 22:58:37 localhost racoon: DEBUG: new acquire 80.183.151.70/32[0]
192.168.100.0/24[0] proto=any dir=out
Aug 19 22:58:37 localhost racoon: DEBUG: (proto_id=ESP spisize=4
spi=00000000 spi_p=00000000 encmode=Tunnel reqid=0:16384)
Aug 19 22:58:37 localhost racoon: DEBUG: (trns_id=3DES encklen=0
authtype=hmac-sha)
Aug 19 22:58:37 localhost racoon: DEBUG: (proto_id=IPCOMP spisize=4
spi=00000000 spi_p=00000000 encmode=Tunnel reqid=16385:0)
Aug 19 22:58:37 localhost racoon: DEBUG: (trns_id=DEFLATE)
Aug 19 22:58:37 localhost racoon: DEBUG: configuration found for
62.152.37.118.
Aug 19 22:58:37 localhost racoon: INFO: IPsec-SA request for
62.152.37.118 queued due to no phase1 found.
Aug 19 22:58:37 localhost racoon: DEBUG: ===
Aug 19 22:58:37 localhost racoon: INFO: initiate new phase 1
negotiation: 80.183.151.70[500]<=>62.152.37.118[500]
Aug 19 22:58:37 localhost racoon: INFO: begin Identity Protection mode.
Aug 19 22:58:37 localhost racoon: DEBUG: new cookie: ab678510a7b3558e
Aug 19 22:58:37 localhost racoon: DEBUG: add payload of len 48, next
type 0
Aug 19 22:58:37 localhost racoon: DEBUG: 80 bytes from
80.183.151.70[500] to 62.152.37.118[500]
Aug 19 22:58:37 localhost racoon: DEBUG: sockname 80.183.151.70[500]
Aug 19 22:58:37 localhost racoon: DEBUG: send packet from
80.183.151.70[500]
Aug 19 22:58:37 localhost racoon: DEBUG: send packet to
62.152.37.118[500]
Aug 19 22:58:37 localhost racoon: DEBUG: src4 80.183.151.70[500]
Aug 19 22:58:37 localhost racoon: DEBUG: dst4 62.152.37.118[500]
Aug 19 22:58:37 localhost racoon: DEBUG: 1 times of 80 bytes message
will be sent to 80.183.151.70[500]
Aug 19 22:58:37 localhost racoon: DEBUG: ab678510 a7b3558e 00000000
00000000 01100200 00000000 00000050 00000034 00000001 00000001 00000028
01010001 00000020 01010000 800b0001 800c0e10 80010005 80030001 80020002
80040002
Aug 19 22:58:37 localhost racoon: DEBUG: resend phase1 packet
ab678510a7b3558e:0000000000000000
Aug 19 22:58:37 localhost racoon: DEBUG: get pfkey ACQUIRE message
Aug 19 22:58:37 localhost racoon: DEBUG2: 02060003 c8000000 02000000
00000000 03000500 00200000 02000000 50b79746 00000000 00000000 03000600
00200000 02000000 3e982576 00000000 00000000 02001200 0200026d 61020000
726f7570 be000d00 20000000 020b0000 80008000 00000000 00000000 00000000
00000000 00000000 00000000 00000000 00000000 40190100 00000000 80510100
00000000 70620000 00000000 80700000 00000000 030b0000 a000a000 00000000
00000000 00000000 00000000 00000000 00000000 00000000 00000000 40190100
00000000 80510100 00000000 70620000 00000000 80700000 00000000 050b0000
00010001 00000000 00000000 00000000 00000000 00000000 00000000 00000000
00000000 40190100 00000000 80510100 00000000 70620000 00000000 80700000
00000000 02020000 80008000 40004000 00000000 00000000 00000000 00000000
00000000 00000000 00000000 40190100 00000000 80510100 00000000 70620000
00000000 80700000 00000000 03020000 a000a000 40004000 00000000 00000000
00000000 00000000 00000000 00000000 00000000 40190100 00000000 80510100
00000000 70620000 0000
Aug 19 22:58:37 localhost racoon: DEBUG: ignore the acquire because ph2
found
Aug 19 22:58:37 localhost racoon: DEBUG: ===
Aug 19 22:58:37 localhost racoon: DEBUG: 80 bytes message received from
62.152.37.118[500] to 80.183.151.70[500]
Aug 19 22:58:37 localhost racoon: DEBUG: ab678510 a7b3558e 974db04d
be415fca 01100200 00000000 00000050 00000034 00000001 00000001 00000028
01010001 00000020 01010000 800b0001 800c0e10 80010005 80030001 80020002
80040002
Aug 19 22:58:37 localhost racoon: DEBUG: begin.
Aug 19 22:58:37 localhost racoon: DEBUG: seen nptype=1(sa)
Aug 19 22:58:37 localhost racoon: DEBUG: succeed.
Aug 19 22:58:37 localhost racoon: DEBUG: total SA len=48
Aug 19 22:58:37 localhost racoon: DEBUG: 00000001 00000001 00000028
01010001 00000020 01010000 800b0001 800c0e10 80010005 80030001 80020002
80040002
Aug 19 22:58:37 localhost racoon: DEBUG: begin.
Aug 19 22:58:37 localhost racoon: DEBUG: seen nptype=2(prop)
Aug 19 22:58:37 localhost racoon: DEBUG: succeed.
Aug 19 22:58:37 localhost racoon: DEBUG: proposal #1 len=40
Aug 19 22:58:37 localhost racoon: DEBUG: begin.
Aug 19 22:58:37 localhost racoon: DEBUG: seen nptype=3(trns)
Aug 19 22:58:37 localhost racoon: DEBUG: succeed.
Aug 19 22:58:37 localhost racoon: DEBUG: transform #1 len=32
Aug 19 22:58:37 localhost racoon: DEBUG: type=Life Type, flag=0x8000,
lorv=seconds
Aug 19 22:58:37 localhost racoon: DEBUG: type=Life Duration,
flag=0x8000, lorv=3600
Aug 19 22:58:37 localhost racoon: DEBUG: type=Encryption Algorithm,
flag=0x8000, lorv=3DES-CBC
Aug 19 22:58:37 localhost racoon: DEBUG: encription(3des)
Aug 19 22:58:37 localhost racoon: DEBUG: type=Authentication Method,
flag=0x8000, lorv=pre-shared key
Aug 19 22:58:37 localhost racoon: DEBUG: type=Hash Algorithm,
flag=0x8000, lorv=SHA
Aug 19 22:58:37 localhost racoon: DEBUG: hash(sha1)
Aug 19 22:58:37 localhost racoon: DEBUG: type=Group Description,
flag=0x8000, lorv=1024-bit MODP group
Aug 19 22:58:37 localhost racoon: DEBUG: hmac(modp1024)
Aug 19 22:58:37 localhost racoon: DEBUG: pair 1:
Aug 19 22:58:37 localhost racoon: DEBUG: 0x80a7288: next=(nil)
tnext=(nil)
Aug 19 22:58:37 localhost racoon: DEBUG: proposal #1: 1 transform
Aug 19 22:58:37 localhost racoon: DEBUG: prop#=1, prot-id=ISAKMP,
spi-size=0, #trns=1
Aug 19 22:58:37 localhost racoon: DEBUG: trns#=1, trns-id=IKE
Aug 19 22:58:37 localhost racoon: DEBUG: type=Life Type, flag=0x8000,
lorv=seconds
Aug 19 22:58:37 localhost racoon: DEBUG: type=Life Duration,
flag=0x8000, lorv=3600
Aug 19 22:58:37 localhost racoon: DEBUG: type=Encryption Algorithm,
flag=0x8000, lorv=3DES-CBC
Aug 19 22:58:37 localhost racoon: DEBUG: type=Authentication Method,
flag=0x8000, lorv=pre-shared key
Aug 19 22:58:37 localhost racoon: DEBUG: type=Hash Algorithm,
flag=0x8000, lorv=SHA
Aug 19 22:58:37 localhost racoon: DEBUG: type=Group Description,
flag=0x8000, lorv=1024-bit MODP group
Aug 19 22:58:37 localhost racoon: DEBUG: Compared: DB:Peer
Aug 19 22:58:37 localhost racoon: DEBUG: (lifetime = 3600:3600)
Aug 19 22:58:37 localhost racoon: DEBUG: (lifebyte = 0:0)
Aug 19 22:58:37 localhost racoon: DEBUG: enctype = 3DES-CBC:3DES-CBC
Aug 19 22:58:37 localhost racoon: DEBUG: (encklen = 0:0)
Aug 19 22:58:37 localhost racoon: DEBUG: hashtype = SHA:SHA
Aug 19 22:58:37 localhost racoon: DEBUG: authmethod = pre-shared
key:pre-shared key
Aug 19 22:58:37 localhost racoon: DEBUG: dh_group = 1024-bit MODP
group:1024-bit MODP group
Aug 19 22:58:37 localhost racoon: DEBUG: an acceptable proposal found.
Aug 19 22:58:37 localhost racoon: DEBUG: hmac(modp1024)
Aug 19 22:58:37 localhost racoon: DEBUG: ===
Aug 19 22:58:37 localhost racoon: DEBUG: compute DH's private.
Aug 19 22:58:37 localhost racoon: DEBUG: 6fb9f993 f6ef23c1 a28bf049
001b643d 76ecf97c 1e1d3426 9876fac3 0f4c0a9d 9f4a7f59 227f3ffe 891d2187
1133f391 45ccfa12 71884eb0 08428ccc 5d6dae58 0536edc4 bb292fa6 2152da3a
bee35e05 7b8fba90 9217516e 1413292b bf686dc2 7290ee42 1d4689bb 8fceb721
4e3e6de9 0cc1479c 862021e8 afa9af3a 51ca8f77
Aug 19 22:58:37 localhost racoon: DEBUG: compute DH's public.
Aug 19 22:58:37 localhost racoon: DEBUG: 73f356b4 7faf5e4d 4b52b66d
8d581b48 d6167b03 6b9b801f 641f9a6e 1830bbf7 d597b208 1e025f79 ec24145e
552165c8 252670f3 793dafa7 53d3c5bf 45912632 01f4377b 027d750a 1288a448
4afe3bfe 7a858b85 9e1fcbcb 04516e04 cf0252fd 162b346d 08cd38b9 bc444b50
562f00d6 3221d82f 68cff0a6 ef763cdb 95b7aa4a
Aug 19 22:58:37 localhost racoon: DEBUG: add payload of len 128, next
type 10
Aug 19 22:58:37 localhost racoon: DEBUG: add payload of len 16, next
type 0
Aug 19 22:58:37 localhost racoon: DEBUG: 180 bytes from
80.183.151.70[500] to 62.152.37.118[500]
Aug 19 22:58:37 localhost racoon: DEBUG: sockname 80.183.151.70[500]
Aug 19 22:58:37 localhost racoon: DEBUG: send packet from
80.183.151.70[500]
Aug 19 22:58:37 localhost racoon: DEBUG: send packet to
62.152.37.118[500]
Aug 19 22:58:37 localhost racoon: DEBUG: src4 80.183.151.70[500]
Aug 19 22:58:37 localhost racoon: DEBUG: dst4 62.152.37.118[500]
Aug 19 22:58:37 localhost racoon: DEBUG: 1 times of 180 bytes message
will be sent to 80.183.151.70[500]
Aug 19 22:58:37 localhost racoon: DEBUG: ab678510 a7b3558e 974db04d
be415fca 04100200 00000000 000000b4 0a000084 73f356b4 7faf5e4d 4b52b66d
8d581b48 d6167b03 6b9b801f 641f9a6e 1830bbf7 d597b208 1e025f79 ec24145e
552165c8 252670f3 793dafa7 53d3c5bf 45912632 01f4377b 027d750a 1288a448
4afe3bfe 7a858b85 9e1fcbcb 04516e04 cf0252fd 162b346d 08cd38b9 bc444b50
562f00d6 3221d82f 68cff0a6 ef763cdb 95b7aa4a 00000014 c8a83b88 25803e75
2f7890a3 129788b7
Aug 19 22:58:37 localhost racoon: DEBUG: resend phase1 packet
ab678510a7b3558e:974db04dbe415fca
Aug 19 22:58:37 localhost racoon: DEBUG: ===
Aug 19 22:58:37 localhost racoon: DEBUG: 180 bytes message received from
62.152.37.118[500] to 80.183.151.70[500]
Aug 19 22:58:37 localhost racoon: DEBUG: ab678510 a7b3558e 974db04d
be415fca 04100200 00000000 000000b4 0a000084 d95bbd14 894e21bd a92c534d
fad4d6be dbd350b7 cb0a7cfd d5873d71 030f1591 8a7a73d7 48434d66 dd0a2adc
5549888a b8565b05 fa6ad852 2e5fd5ab d22da95f eb50f3be 870afa73 5b9f6c03
9c9cbe9b 79243e87 52bc7aea e79dcf3a 1a898cc5 f18a02e2 381c3687 81b675ae
6c7419d3 0e804a3f 0aed2d05 a563fafc ce25b3d2 00000014 a2c609cc e50fde1b
7ec3ada8 11cf63a1
Aug 19 22:58:37 localhost racoon: DEBUG: begin.
Aug 19 22:58:37 localhost racoon: DEBUG: seen nptype=4(ke)
Aug 19 22:58:37 localhost racoon: DEBUG: seen nptype=10(nonce)
Aug 19 22:58:37 localhost racoon: DEBUG: succeed.
Aug 19 22:58:37 localhost racoon: DEBUG: ===
Aug 19 22:58:37 localhost racoon: DEBUG: compute DH's shared.
Aug 19 22:58:37 localhost racoon: DEBUG: cbc6b569 a3443a17 50e3ea40
2240d7c4 7ace5264 22aee6e9 3c2d8650 1c403515 15f88d24 18fc91c1 e187fb3d
297b3e20 dfffae20 c6d971d2 db039016 8b6b6edc f88c6563 d9e2e294 7b658041
44b1d7b2 9c04eccd 99da0eec fb7df7f5 3b5eb7f5 29d61459 55ff046d a845c5c6
8a565a91 7d26401a 4b02e921 d468a29f 33b1a22e
Aug 19 22:58:37 localhost racoon: DEBUG: the psk found.
Aug 19 22:58:37 localhost racoon: DEBUG2: psk:
Aug 19 22:58:37 localhost racoon: DEBUG2: 70726573 68617265 646b6579
Aug 19 22:58:37 localhost racoon: DEBUG: nonce 1:
Aug 19 22:58:37 localhost racoon: DEBUG: c8a83b88 25803e75 2f7890a3
129788b7
Aug 19 22:58:37 localhost racoon: DEBUG: nonce 2:
Aug 19 22:58:37 localhost racoon: DEBUG: a2c609cc e50fde1b 7ec3ada8
11cf63a1
Aug 19 22:58:37 localhost racoon: DEBUG: hmac(hmac_sha1)
Aug 19 22:58:37 localhost racoon: DEBUG: SKEYID computed:
Aug 19 22:58:37 localhost racoon: DEBUG: 028f0a3c 5b8276a1 c9902e8e
0c577ac3 9eae5fbe
Aug 19 22:58:37 localhost racoon: DEBUG: hmac(hmac_sha1)
Aug 19 22:58:37 localhost racoon: DEBUG: SKEYID_d computed:
Aug 19 22:58:37 localhost racoon: DEBUG: 9960f35b 6ddc5560 a26607c1
b8fa0fd1 054e0921
Aug 19 22:58:37 localhost racoon: DEBUG: hmac(hmac_sha1)
Aug 19 22:58:37 localhost racoon: DEBUG: SKEYID_a computed:
Aug 19 22:58:37 localhost racoon: DEBUG: bcd0d931 87001217 f1fa30f6
7d65122f e834e116
Aug 19 22:58:37 localhost racoon: DEBUG: hmac(hmac_sha1)
Aug 19 22:58:37 localhost racoon: DEBUG: SKEYID_e computed:
Aug 19 22:58:37 localhost racoon: DEBUG: 6f6f8cff 9fab88c9 ce591761
86ed4247 4eca58ca
Aug 19 22:58:37 localhost racoon: DEBUG: encription(3des)
Aug 19 22:58:37 localhost racoon: DEBUG: hash(sha1)
Aug 19 22:58:37 localhost racoon: DEBUG: len(SKEYID_e) < len(Ka) (20 <
24), generating long key (Ka = K1 | K2 | ...)
Aug 19 22:58:37 localhost racoon: DEBUG: hmac(hmac_sha1)
Aug 19 22:58:37 localhost racoon: DEBUG: compute intermediate encryption
key K1
Aug 19 22:58:37 localhost racoon: DEBUG: 00
Aug 19 22:58:37 localhost racoon: DEBUG: 61240bc4 797c5a11 9b57b5df
e00e3f74 d6aaed3e
Aug 19 22:58:37 localhost racoon: DEBUG: hmac(hmac_sha1)
Aug 19 22:58:37 localhost racoon: DEBUG: compute intermediate encryption
key K2
Aug 19 22:58:37 localhost racoon: DEBUG: 61240bc4 797c5a11 9b57b5df
e00e3f74 d6aaed3e
Aug 19 22:58:37 localhost racoon: DEBUG: 107a462a afe2bc13 5bf8fe80
3435939f 3e34c701
Aug 19 22:58:37 localhost racoon: DEBUG: final encryption key computed:
Aug 19 22:58:37 localhost racoon: DEBUG: 61240bc4 797c5a11 9b57b5df
e00e3f74 d6aaed3e 107a462a
Aug 19 22:58:37 localhost racoon: DEBUG: hash(sha1)
Aug 19 22:58:37 localhost racoon: DEBUG: encription(3des)
Aug 19 22:58:37 localhost racoon: DEBUG: IV computed:
Aug 19 22:58:37 localhost racoon: DEBUG: 3e1af8d6 b2ef69cb
Aug 19 22:58:37 localhost racoon: DEBUG: use ID type of IPv4_address
Aug 19 22:58:37 localhost racoon: DEBUG: HASH with:
Aug 19 22:58:37 localhost racoon: DEBUG: 73f356b4 7faf5e4d 4b52b66d
8d581b48 d6167b03 6b9b801f 641f9a6e 1830bbf7 d597b208 1e025f79 ec24145e
552165c8 252670f3 793dafa7 53d3c5bf 45912632 01f4377b 027d750a 1288a448
4afe3bfe 7a858b85 9e1fcbcb 04516e04 cf0252fd 162b346d 08cd38b9 bc444b50
562f00d6 3221d82f 68cff0a6 ef763cdb 95b7aa4a d95bbd14 894e21bd a92c534d
fad4d6be dbd350b7 cb0a7cfd d5873d71 030f1591 8a7a73d7 48434d66 dd0a2adc
5549888a b8565b05 fa6ad852 2e5fd5ab d22da95f eb50f3be 870afa73 5b9f6c03
9c9cbe9b 79243e87 52bc7aea e79dcf3a 1a898cc5 f18a02e2 381c3687 81b675ae
6c7419d3 0e804a3f 0aed2d05 a563fafc ce25b3d2 ab678510 a7b3558e 974db04d
be415fca 00000001 00000001 00000028 01010001 00000020 01010000 800b0001
800c0e10 80010005 80030001 80020002 80040002 011101f4 50b79746
Aug 19 22:58:37 localhost racoon: DEBUG: hmac(hmac_sha1)
Aug 19 22:58:37 localhost racoon: DEBUG: HASH computed:
Aug 19 22:58:37 localhost racoon: DEBUG: 4a00f5e2 979bdf24 dc4e156f
c058fd59 f89d0acf
Aug 19 22:58:37 localhost racoon: DEBUG: add payload of len 8, next type
8
Aug 19 22:58:37 localhost racoon: DEBUG: add payload of len 20, next
type 0
Aug 19 22:58:37 localhost racoon: DEBUG: begin encryption.
Aug 19 22:58:37 localhost racoon: DEBUG: encription(3des)
Aug 19 22:58:37 localhost racoon: DEBUG: pad length = 4
Aug 19 22:58:37 localhost racoon: DEBUG: 0800000c 011101f4 50b79746
00000018 4a00f5e2 979bdf24 dc4e156f c058fd59 f89d0acf 924eed03
Aug 19 22:58:37 localhost racoon: DEBUG: encription(3des)
Aug 19 22:58:37 localhost racoon: DEBUG: with key:
Aug 19 22:58:37 localhost racoon: DEBUG: 61240bc4 797c5a11 9b57b5df
e00e3f74 d6aaed3e 107a462a
Aug 19 22:58:37 localhost racoon: DEBUG: encrypted payload by IV:
Aug 19 22:58:37 localhost racoon: DEBUG: 74972ab8 3f1a0e80
Aug 19 22:58:37 localhost racoon: DEBUG: save IV for next:
Aug 19 22:58:37 localhost racoon: DEBUG: 74972ab8 3f1a0e80
Aug 19 22:58:37 localhost racoon: DEBUG: encrypted.
Aug 19 22:58:37 localhost racoon: DEBUG: 68 bytes from
80.183.151.70[500] to 62.152.37.118[500]
Aug 19 22:58:37 localhost racoon: DEBUG: sockname 80.183.151.70[500]
Aug 19 22:58:37 localhost racoon: DEBUG: send packet from
80.183.151.70[500]
Aug 19 22:58:37 localhost racoon: DEBUG: send packet to
62.152.37.118[500]
Aug 19 22:58:37 localhost racoon: DEBUG: src4 80.183.151.70[500]
Aug 19 22:58:37 localhost racoon: DEBUG: dst4 62.152.37.118[500]
Aug 19 22:58:37 localhost racoon: DEBUG: 1 times of 68 bytes message
will be sent to 80.183.151.70[500]
Aug 19 22:58:37 localhost racoon: DEBUG: ab678510 a7b3558e 974db04d
be415fca 05100201 00000000 00000044 fec45b64 7fce9dde f98d623e 84648865
b89a5d1e ca8aa9cf 98b62df1 be38e328 74972ab8 3f1a0e80
Aug 19 22:58:37 localhost racoon: DEBUG: resend phase1 packet
ab678510a7b3558e:974db04dbe415fca
Aug 19 22:58:37 localhost racoon: DEBUG: ===
Aug 19 22:58:37 localhost racoon: DEBUG: 68 bytes message received from
62.152.37.118[500] to 80.183.151.70[500]
Aug 19 22:58:37 localhost racoon: DEBUG: ab678510 a7b3558e 974db04d
be415fca 05100201 00000000 00000044 b24a4eb9 798788be b8ab17db 878bc44b
e77f072b 42b32dfa 30e26ea8 8e41ed47 ae3f05b4 be80eb1d
Aug 19 22:58:37 localhost racoon: DEBUG: begin decryption.
Aug 19 22:58:37 localhost racoon: DEBUG: encription(3des)
Aug 19 22:58:37 localhost racoon: DEBUG: IV was saved for next
processing:
Aug 19 22:58:37 localhost racoon: DEBUG: ae3f05b4 be80eb1d
Aug 19 22:58:37 localhost racoon: DEBUG: encription(3des)
Aug 19 22:58:37 localhost racoon: DEBUG: with key:
Aug 19 22:58:37 localhost racoon: DEBUG: 61240bc4 797c5a11 9b57b5df
e00e3f74 d6aaed3e 107a462a
Aug 19 22:58:37 localhost racoon: DEBUG: decrypted payload by IV:
Aug 19 22:58:37 localhost racoon: DEBUG: ae3f05b4 be80eb1d
Aug 19 22:58:37 localhost racoon: DEBUG: decrypted payload, but not
trimed.
Aug 19 22:58:37 localhost racoon: DEBUG: 0800000c 011101f4 3e982576
00000018 2c943fc7 d2641a64 d2e3e2a3 edfdfc92 d5ef0549 3130cb03
Aug 19 22:58:37 localhost racoon: DEBUG: padding len=4
Aug 19 22:58:37 localhost racoon: DEBUG: skip to trim padding.
Aug 19 22:58:37 localhost racoon: DEBUG: decrypted.
Aug 19 22:58:37 localhost racoon: DEBUG: ab678510 a7b3558e 974db04d
be415fca 05100201 00000000 00000044 0800000c 011101f4 3e982576 00000018
2c943fc7 d2641a64 d2e3e2a3 edfdfc92 d5ef0549 3130cb03
Aug 19 22:58:37 localhost racoon: DEBUG: begin.
Aug 19 22:58:37 localhost racoon: DEBUG: seen nptype=5(id)
Aug 19 22:58:37 localhost racoon: DEBUG: seen nptype=8(hash)
Aug 19 22:58:37 localhost racoon: DEBUG: succeed.
Aug 19 22:58:37 localhost racoon: DEBUG: HASH received:
Aug 19 22:58:37 localhost racoon: DEBUG: 2c943fc7 d2641a64 d2e3e2a3
edfdfc92 d5ef0549
Aug 19 22:58:37 localhost racoon: DEBUG: HASH with:
Aug 19 22:58:37 localhost racoon: DEBUG: d95bbd14 894e21bd a92c534d
fad4d6be dbd350b7 cb0a7cfd d5873d71 030f1591 8a7a73d7 48434d66 dd0a2adc
5549888a b8565b05 fa6ad852 2e5fd5ab d22da95f eb50f3be 870afa73 5b9f6c03
9c9cbe9b 79243e87 52bc7aea e79dcf3a 1a898cc5 f18a02e2 381c3687 81b675ae
6c7419d3 0e804a3f 0aed2d05 a563fafc ce25b3d2 73f356b4 7faf5e4d 4b52b66d
8d581b48 d6167b03 6b9b801f 641f9a6e 1830bbf7 d597b208 1e025f79 ec24145e
552165c8 252670f3 793dafa7 53d3c5bf 45912632 01f4377b 027d750a 1288a448
4afe3bfe 7a858b85 9e1fcbcb 04516e04 cf0252fd 162b346d 08cd38b9 bc444b50
562f00d6 3221d82f 68cff0a6 ef763cdb 95b7aa4a 974db04d be415fca ab678510
a7b3558e 00000001 00000001 00000028 01010001 00000020 01010000 800b0001
800c0e10 80010005 80030001 80020002 80040002 011101f4 3e982576
Aug 19 22:58:37 localhost racoon: DEBUG: hmac(hmac_sha1)
Aug 19 22:58:37 localhost racoon: DEBUG: HASH computed:
Aug 19 22:58:37 localhost racoon: DEBUG: 2c943fc7 d2641a64 d2e3e2a3
edfdfc92 d5ef0549
Aug 19 22:58:37 localhost racoon: DEBUG: HASH for PSK validated.
Aug 19 22:58:37 localhost racoon: DEBUG: peer's ID:
Aug 19 22:58:37 localhost racoon: DEBUG: 011101f4 3e982576
Aug 19 22:58:37 localhost racoon: DEBUG: ===
Aug 19 22:58:37 localhost racoon: DEBUG: compute IV for phase2
Aug 19 22:58:37 localhost racoon: DEBUG: phase1 last IV:
Aug 19 22:58:37 localhost racoon: DEBUG: ae3f05b4 be80eb1d 3fd22ad9
Aug 19 22:58:37 localhost racoon: DEBUG: hash(sha1)
Aug 19 22:58:37 localhost racoon: DEBUG: encription(3des)
Aug 19 22:58:37 localhost racoon: DEBUG: phase2 IV computed:
Aug 19 22:58:37 localhost racoon: DEBUG: f57758de f3277117
Aug 19 22:58:37 localhost racoon: DEBUG: HASH with:
Aug 19 22:58:37 localhost racoon: DEBUG: 3fd22ad9 0000001c 00000001
01106002 ab678510 a7b3558e 974db04d be415fca
Aug 19 22:58:37 localhost racoon: DEBUG: hmac(hmac_sha1)
Aug 19 22:58:37 localhost racoon: DEBUG: HASH computed:
Aug 19 22:58:37 localhost racoon: DEBUG: f4b16f28 a7a71dc5 0f45ff04
e6363081 56d548f5
Aug 19 22:58:37 localhost racoon: DEBUG: begin encryption.
Aug 19 22:58:37 localhost racoon: DEBUG: encription(3des)
Aug 19 22:58:37 localhost racoon: DEBUG: pad length = 4
Aug 19 22:58:37 localhost racoon: DEBUG: 0b000018 f4b16f28 a7a71dc5
0f45ff04 e6363081 56d548f5 0000001c 00000001 01106002 ab678510 a7b3558e
974db04d be415fca dc01e603
Aug 19 22:58:37 localhost racoon: DEBUG: encription(3des)
Aug 19 22:58:37 localhost racoon: DEBUG: with key:
Aug 19 22:58:37 localhost racoon: DEBUG: 61240bc4 797c5a11 9b57b5df
e00e3f74 d6aaed3e 107a462a
Aug 19 22:58:37 localhost racoon: DEBUG: encrypted payload by IV:
Aug 19 22:58:37 localhost racoon: DEBUG: 6683c608 673d59da
Aug 19 22:58:37 localhost racoon: DEBUG: save IV for next:
Aug 19 22:58:37 localhost racoon: DEBUG: 6683c608 673d59da
Aug 19 22:58:37 localhost racoon: DEBUG: encrypted.
Aug 19 22:58:37 localhost racoon: DEBUG: 84 bytes from
80.183.151.70[500] to 62.152.37.118[500]
Aug 19 22:58:37 localhost racoon: DEBUG: sockname 80.183.151.70[500]
Aug 19 22:58:37 localhost racoon: DEBUG: send packet from
80.183.151.70[500]
Aug 19 22:58:37 localhost racoon: DEBUG: send packet to
62.152.37.118[500]
Aug 19 22:58:37 localhost racoon: DEBUG: src4 80.183.151.70[500]
Aug 19 22:58:37 localhost racoon: DEBUG: dst4 62.152.37.118[500]
Aug 19 22:58:37 localhost racoon: DEBUG: 1 times of 84 bytes message
will be sent to 80.183.151.70[500]
Aug 19 22:58:37 localhost racoon: DEBUG: ab678510 a7b3558e 974db04d
be415fca 08100501 3fd22ad9 00000054 34c2db0a 0e378762 7ecc825d e292cafd
9697053a df5bbf37 bd5a3d85 c8bf84b4 dec98b6f ab3ea34c 4836232e 2be10030
6683c608 673d59da
Aug 19 22:58:37 localhost racoon: DEBUG: sendto Information notify.
Aug 19 22:58:37 localhost racoon: INFO: ISAKMP-SA established
80.183.151.70[500]-62.152.37.118[500]
spi:ab678510a7b3558e:974db04dbe415fca
Aug 19 22:58:37 localhost racoon: DEBUG: ===
Aug 19 22:58:38 localhost racoon: DEBUG: ===
Aug 19 22:58:38 localhost racoon: DEBUG: begin QUICK mode.
Aug 19 22:58:38 localhost racoon: INFO: initiate new phase 2
negotiation: 80.183.151.70[0]<=>62.152.37.118[0]
Aug 19 22:58:38 localhost racoon: DEBUG: compute IV for phase2
Aug 19 22:58:38 localhost racoon: DEBUG: phase1 last IV:
Aug 19 22:58:38 localhost racoon: DEBUG: ae3f05b4 be80eb1d f3e58632
Aug 19 22:58:38 localhost racoon: DEBUG: hash(sha1)
Aug 19 22:58:38 localhost racoon: DEBUG: encription(3des)
Aug 19 22:58:38 localhost racoon: DEBUG: phase2 IV computed:
Aug 19 22:58:38 localhost racoon: DEBUG: 2f8038df b6b1ee3c
Aug 19 22:58:38 localhost racoon: DEBUG: call pfkey_send_getspi
Aug 19 22:58:38 localhost racoon: DEBUG: pfkey GETSPI sent: ESP/Tunnel
62.152.37.118->80.183.151.70
Aug 19 22:58:38 localhost racoon: DEBUG: call pfkey_send_getspi
Aug 19 22:58:38 localhost racoon: DEBUG: pfkey GETSPI sent:
IPCOMP/Tunnel 62.152.37.118->80.183.151.70
Aug 19 22:58:38 localhost racoon: DEBUG: pfkey getspi sent.
Aug 19 22:58:38 localhost racoon: DEBUG: get pfkey GETSPI message
Aug 19 22:58:38 localhost racoon: DEBUG2: 02010003 18000000 01000000
840f0000 02000100 05448073 00000000 00000000 04000300 00000000 00000000
00000000 1e000000 00000000 00000000 00000000 04000400 00000000 00000000
00000000 00000000 00000000 00000000 00000000 04000200 00000000 00000000
00000000 7e142541 00000000 00000000 00000000 03000500 00200000 02000000
3e982576 00000000 00000000 03000600 00200000 02000000 50b79746 00000000
00000000 02001300 02000000 00000000 00000000
Aug 19 22:58:38 localhost racoon: DEBUG: pfkey GETSPI succeeded:
ESP/Tunnel 62.152.37.118->80.183.151.70 spi=88375411(0x5448073)
Aug 19 22:58:38 localhost racoon: DEBUG: get pfkey GETSPI message
Aug 19 22:58:38 localhost racoon: DEBUG2: 02010009 18000000 01000000
840f0000 02000100 00008805 00000000 00000000 04000300 00000000 00000000
00000000 1e000000 00000000 00000000 00000000 04000400 00000000 00000000
00000000 00000000 00000000 00000000 00000000 04000200 00000000 00000000
00000000 7e142541 00000000 00000000 00000000 03000500 00200000 02000000
3e982576 00000000 00000000 03000600 00200000 02000000 50b79746 00000000
00000000 02001300 02000000 00000000 01400000
Aug 19 22:58:38 localhost racoon: DEBUG: pfkey GETSPI succeeded:
IPCOMP/Tunnel 62.152.37.118->80.183.151.70 spi=34821(0x8805)
Aug 19 22:58:38 localhost racoon: DEBUG: hmac(modp1024)
Aug 19 22:58:38 localhost racoon: DEBUG: compute DH's private.
Aug 19 22:58:38 localhost racoon: DEBUG: 4e7b7557 10302f3e 61c7212b
69d3a42a 66d0b16f 7d8f0a3c 7488c92a 0042bc08 c7ae3578 dc08db7f 53befb98
afa2e905 c0926902 ebe8eb3b b22987ce 23006110 386ffa27 186f9672 9a65352c
b943fe17 5ad98c75 820d1dce 78dcf144 04cbdcde 804613d2 7800d237 d941d7a0
28d6cc99 84e4c0a3 cb4cfbfa d48312c7 8cf6278f
Aug 19 22:58:38 localhost racoon: DEBUG: compute DH's public.
Aug 19 22:58:38 localhost racoon: DEBUG: fd17705e 2f0ed219 7f663c59
816604ce 123fde34 c7261883 9be8faaa 51f5c066 ceff2135 075c1afb 2f000583
4b22262a b07c6b0f c3ea2128 f1ebf36d 5447a730 30d202a6 16d3c3f1 97de5d2d
517a184e 2501a861 eb3f383a 2f4a0bd6 06321537 4918c500 0a10bf44 66786ee5
1a010563 2f17a5cf 3003784d f48eedb6 3331bf20
Aug 19 22:58:38 localhost racoon: DEBUG: use local ID type IPv4_address
Aug 19 22:58:38 localhost racoon: DEBUG: use remote ID type IPv4_subnet
Aug 19 22:58:38 localhost racoon: DEBUG: IDci:
Aug 19 22:58:38 localhost racoon: DEBUG: 01000000 50b79746
Aug 19 22:58:39 localhost racoon: DEBUG: IDcr:
Aug 19 22:58:39 localhost racoon: DEBUG: 04000000 c0a86400 ffffff00
Aug 19 22:58:39 localhost racoon: DEBUG: add payload of len 82, next
type 10
Aug 19 22:58:39 localhost racoon: DEBUG: add payload of len 16, next
type 4
Aug 19 22:58:39 localhost racoon: DEBUG: add payload of len 128, next
type 5
Aug 19 22:58:39 localhost racoon: DEBUG: add payload of len 8, next type
5
Aug 19 22:58:39 localhost racoon: DEBUG: add payload of len 12, next
type 0
Aug 19 22:58:39 localhost racoon: DEBUG: HASH with:
Aug 19 22:58:39 localhost racoon: DEBUG: f3e58632 0a000056 00000001
00000001 02000028 01030401 05448073 0000001c 01030000 80010001 800204b0
80040001 80050002 80030002 00000022 01040201 88050000 00180102 00008001
00018002 04b08004 00018003 00020400 0014ab2a c00bc209 2575a348 0a160d79
f4a70500 0084fd17 705e2f0e d2197f66 3c598166 04ce123f de34c726 18839be8
faaa51f5 c066ceff 2135075c 1afb2f00 05834b22 262ab07c 6b0fc3ea 2128f1eb
f36d5447 a73030d2 02a616d3 c3f197de 5d2d517a 184e2501 a861eb3f 383a2f4a
0bd60632 15374918 c5000a10 bf446678 6ee51a01 05632f17 a5cf3003 784df48e
edb63331 bf200500 000c0100 000050b7 97460000 00100400 0000c0a8 6400ffff
ff00
Aug 19 22:58:39 localhost racoon: DEBUG: hmac(hmac_sha1)
Aug 19 22:58:39 localhost racoon: DEBUG: HASH computed:
Aug 19 22:58:39 localhost racoon: DEBUG: f8125463 aca8feed c2b9aa70
f9e0fd28 639eb421
Aug 19 22:58:39 localhost racoon: DEBUG: add payload of len 20, next
type 1
Aug 19 22:58:39 localhost racoon: DEBUG: begin encryption.
Aug 19 22:58:39 localhost racoon: DEBUG: encription(3des)
Aug 19 22:58:39 localhost racoon: DEBUG: pad length = 6
Aug 19 22:58:39 localhost racoon: DEBUG: 01000018 f8125463 aca8feed
c2b9aa70 f9e0fd28 639eb421 0a000056 00000001 00000001 02000028 01030401
05448073 0000001c 01030000 80010001 800204b0 80040001 80050002 80030002
00000022 01040201 88050000 00180102 00008001 00018002 04b08004 00018003
00020400 0014ab2a c00bc209 2575a348 0a160d79 f4a70500 0084fd17 705e2f0e
d2197f66 3c598166 04ce123f de34c726 18839be8 faaa51f5 c066ceff 2135075c
1afb2f00 05834b22 262ab07c 6b0fc3ea 2128f1eb f36d5447 a73030d2 02a616d3
c3f197de 5d2d517a 184e2501 a861eb3f 383a2f4a 0bd60632 15374918 c5000a10
bf446678 6ee51a01 05632f17 a5cf3003 784df48e edb63331 bf200500 000c0100
000050b7 97460000 00100400 0000c0a8 6400ffff ff007429 a85a9405
Aug 19 22:58:39 localhost racoon: DEBUG: encription(3des)
Aug 19 22:58:39 localhost racoon: DEBUG: with key:
Aug 19 22:58:39 localhost racoon: DEBUG: 61240bc4 797c5a11 9b57b5df
e00e3f74 d6aaed3e 107a462a
Aug 19 22:58:39 localhost racoon: DEBUG: encrypted payload by IV:
Aug 19 22:58:39 localhost racoon: DEBUG: d6e30d54 a54c9490
Aug 19 22:58:39 localhost racoon: DEBUG: save IV for next:
Aug 19 22:58:39 localhost racoon: DEBUG: d6e30d54 a54c9490
Aug 19 22:58:39 localhost racoon: DEBUG: encrypted.
Aug 19 22:58:39 localhost racoon: DEBUG: 324 bytes from
80.183.151.70[500] to 62.152.37.118[500]
Aug 19 22:58:39 localhost racoon: DEBUG: sockname 80.183.151.70[500]
Aug 19 22:58:39 localhost racoon: DEBUG: send packet from
80.183.151.70[500]
Aug 19 22:58:39 localhost racoon: DEBUG: send packet to
62.152.37.118[500]
Aug 19 22:58:39 localhost racoon: DEBUG: src4 80.183.151.70[500]
Aug 19 22:58:39 localhost racoon: DEBUG: dst4 62.152.37.118[500]
Aug 19 22:58:39 localhost racoon: DEBUG: 1 times of 324 bytes message
will be sent to 80.183.151.70[500]
Aug 19 22:58:39 localhost racoon: DEBUG: ab678510 a7b3558e 974db04d
be415fca 08102001 f3e58632 00000144 4f40fa9a 1a0f8ab0 76e41d77 2d5bcd0d
548cfc8a 71cb6807 b651c81c 5156104e e66e4793 73ff0d3d 99abf493 24ef710f
7d43234e 3b0f55e8 02dd3567 4a2ef462 109bcac7 f05627f3 4c5ef8fb afdd76fb
a2956ada 26bb2449 3e0fadbf e388c72d 514c7e58 874dd6f1 56ace13d a959ca81
6f1a03fc bcb58cd0 d58653f6 f9b7087d 33a3d3ab cceeb85f cf838f8a 40eebe32
b2164844 f7c61e74 dd4a7a24 a41744bb 38446f93 d98bf855 a7e6bf88 d7c2bb5e
393050b8 3c43d92e 7dbc49ca a8520a90 96d8e2e4 3c6678df 2fed3142 dc4dd959
ebb1e0dd f69b57ca da210e7a e1f212b2 ad26a43c 68fb350d 3194d603 8aa5b658
bdca8b21 2f5de96e cd57c9ae 14f6e768 09afa28b b0dd3c52 c920101d 729c9627
cf5227d7 8f4dece1 d42363de 8d779f19 d6e30d54 a54c9490
Aug 19 22:58:39 localhost racoon: DEBUG: resend phase2 packet
ab678510a7b3558e:974db04dbe415fca:0000f3e5