(racoon 653) Re: Two simmetrical configuration but two different results

Thank you for the quick reponse.

Il ven, 2004-08-20 alle 09:01, Satoshi Inoue ha scritto:
> On Thu, 19 Aug 2004 23:21:49 +0200
> Michele Bendazzoli <[email protected]> wrote:
> 
> > When i try to ping from 192.168.1.1 (eth1 gateway1's) to 192.168.100.1
> > (eth1 gateway2's) the answer is a quick "connect: resource temporarily
> > unavailable", wherease when I ping from 192.168.100.1 to 192.168.1.1 the
> > system doen't return any response. 
> ...
> > Aug 19 22:58:38 localhost racoon: DEBUG: begin QUICK mode. 
> > Aug 19 22:58:38 localhost racoon: INFO: initiate new phase 2
> > negotiation: 80.183.151.70[0]<=>62.152.37.118[0] 
> 
> Looks like the other end is not responding to IKE phase 2 (Quick Mode).
> Have you checked on the other end's logs to see what's happening?

Yes I did. It failed to get sainfo: what it appears even more strange to
me is that if I stop the racoon in the gateway1 (i.e. flush all the spd
and sda entries and stop racoon) the ping begin to being succesfully,
i.e. I'm able to ping from xxx.xxx.151.70 to 192.168.100.1 at
xxx.xxx.37.118 at the other side of the internet connection, i.e. as the
vpn is up and running! After a while however it seems that the vpn go
down and the ping respond with a "From xxx.xxx.151.69 icmp_seq=x
Destination Host Unreachable", where xxx.xxx.151.69 is the address of my
router zyxel, set in trasparent mode.

However here is the pertinent log on the other side (gateway2) when I
try to ping 192.168.100.1 (eth1 of gateway2) from gateway1. 

ciao, Michele

Aug 20 08:33:47 sargefire racoon: DEBUG2: parse successed. 
Aug 20 08:33:47 sargefire racoon-tool[10540]: configured racoon.
Aug 20 08:33:49 sargefire racoon: DEBUG: === 
Aug 20 08:33:49 sargefire racoon: DEBUG: 80 bytes message received from
xxx.xxx.151.70[500] to xxx.xxx.37.118[500] 
Aug 20 08:33:49 sargefire racoon: DEBUG:  3a289625 15ecd484 00000000
00000000 01100200 00000000 00000050 00000034 00000001 00000001 00000028
01010001 00000020 01010000 800b0001 800c0e10 80010005 80030001 80020002
80040002 
Aug 20 08:33:49 sargefire racoon: DEBUG: configuration found for
xxx.xxx.151.70[500]. 
Aug 20 08:33:49 sargefire racoon: DEBUG: === 
Aug 20 08:33:49 sargefire racoon: INFO: respond new phase 1 negotiation:
xxx.xxx.37.118[500]<=>xxx.xxx.151.70[500] 
Aug 20 08:33:49 sargefire racoon: INFO: begin Identity Protection mode. 
Aug 20 08:33:49 sargefire racoon: DEBUG: begin. 
Aug 20 08:33:49 sargefire racoon: DEBUG: seen nptype=1(sa) 
Aug 20 08:33:49 sargefire racoon: DEBUG: succeed. 
Aug 20 08:33:49 sargefire racoon: DEBUG: total SA len=48 
Aug 20 08:33:49 sargefire racoon: DEBUG:  00000001 00000001 00000028
01010001 00000020 01010000 800b0001 800c0e10 80010005 80030001 80020002
80040002 
Aug 20 08:33:49 sargefire racoon: DEBUG: begin. 
Aug 20 08:33:49 sargefire racoon: DEBUG: seen nptype=2(prop) 
Aug 20 08:33:49 sargefire racoon: DEBUG: succeed. 
Aug 20 08:33:49 sargefire racoon: DEBUG: proposal #1 len=40 
Aug 20 08:33:49 sargefire racoon: DEBUG: begin. 
Aug 20 08:33:49 sargefire racoon: DEBUG: seen nptype=3(trns) 
Aug 20 08:33:49 sargefire racoon: DEBUG: succeed. 
Aug 20 08:33:49 sargefire racoon: DEBUG: transform #1 len=32 
Aug 20 08:33:49 sargefire racoon: DEBUG: type=Life Type, flag=0x8000,
lorv=seconds 
Aug 20 08:33:49 sargefire racoon: DEBUG: type=Life Duration,
flag=0x8000, lorv=3600 
Aug 20 08:33:49 sargefire racoon: DEBUG: type=Encryption Algorithm,
flag=0x8000, lorv=3DES-CBC 
Aug 20 08:33:49 sargefire racoon: DEBUG: encription(3des) 
Aug 20 08:33:49 sargefire racoon: DEBUG: type=Authentication Method,
flag=0x8000, lorv=pre-shared key 
Aug 20 08:33:49 sargefire racoon: DEBUG: type=Hash Algorithm,
flag=0x8000, lorv=SHA 
Aug 20 08:33:49 sargefire racoon: DEBUG: hash(sha1) 
Aug 20 08:33:49 sargefire racoon: DEBUG: type=Group Description,
flag=0x8000, lorv=1024-bit MODP group 
Aug 20 08:33:49 sargefire racoon: DEBUG: hmac(modp1024) 
Aug 20 08:33:49 sargefire racoon: DEBUG: pair 1: 
Aug 20 08:33:49 sargefire racoon: DEBUG:  0x80a7e18: next=(nil)
tnext=(nil) 
Aug 20 08:33:49 sargefire racoon: DEBUG: proposal #1: 1 transform 
Aug 20 08:33:49 sargefire racoon: DEBUG: prop#=1, prot-id=ISAKMP,
spi-size=0, #trns=1 
Aug 20 08:33:49 sargefire racoon: DEBUG: trns#=1, trns-id=IKE 
Aug 20 08:33:49 sargefire racoon: DEBUG: type=Life Type, flag=0x8000,
lorv=seconds 
Aug 20 08:33:49 sargefire racoon: DEBUG: type=Life Duration,
flag=0x8000, lorv=3600 
Aug 20 08:33:49 sargefire racoon: DEBUG: type=Encryption Algorithm,
flag=0x8000, lorv=3DES-CBC 
Aug 20 08:33:49 sargefire racoon: DEBUG: type=Authentication Method,
flag=0x8000, lorv=pre-shared key 
Aug 20 08:33:49 sargefire racoon: DEBUG: type=Hash Algorithm,
flag=0x8000, lorv=SHA 
Aug 20 08:33:49 sargefire racoon: DEBUG: type=Group Description,
flag=0x8000, lorv=1024-bit MODP group 
Aug 20 08:33:49 sargefire racoon: DEBUG: Compared: DB:Peer 
Aug 20 08:33:49 sargefire racoon: DEBUG: (lifetime = 3600:3600) 
Aug 20 08:33:49 sargefire racoon: DEBUG: (lifebyte = 0:0) 
Aug 20 08:33:49 sargefire racoon: DEBUG: enctype = 3DES-CBC:3DES-CBC 
Aug 20 08:33:49 sargefire racoon: DEBUG: (encklen = 0:0) 
Aug 20 08:33:49 sargefire racoon: DEBUG: hashtype = SHA:SHA 
Aug 20 08:33:49 sargefire racoon: DEBUG: authmethod = pre-shared
key:pre-shared key 
Aug 20 08:33:49 sargefire racoon: DEBUG: dh_group = 1024-bit MODP
group:1024-bit MODP group 
Aug 20 08:33:49 sargefire racoon: DEBUG: an acceptable proposal found. 
Aug 20 08:33:49 sargefire racoon: DEBUG: hmac(modp1024) 
Aug 20 08:33:49 sargefire racoon: DEBUG: new cookie: c9d9fad7fde3c6da  
Aug 20 08:33:49 sargefire racoon: DEBUG: add payload of len 48, next
type 0 
Aug 20 08:33:49 sargefire racoon: DEBUG: 80 bytes from
xxx.xxx.37.118[500] to xxx.xxx.151.70[500] 
Aug 20 08:33:49 sargefire racoon: DEBUG: sockname xxx.xxx.37.118[500] 
Aug 20 08:33:49 sargefire racoon: DEBUG: send packet from
xxx.xxx.37.118[500] 
Aug 20 08:33:49 sargefire racoon: DEBUG: send packet to
xxx.xxx.151.70[500] 
Aug 20 08:33:49 sargefire racoon: DEBUG: src4 xxx.xxx.37.118[500] 
Aug 20 08:33:49 sargefire racoon: DEBUG: dst4 xxx.xxx.151.70[500] 
Aug 20 08:33:49 sargefire racoon: DEBUG: 1 times of 80 bytes message
will be sent to xxx.xxx.37.118[500] 
Aug 20 08:33:49 sargefire racoon: DEBUG:  3a289625 15ecd484 c9d9fad7
fde3c6da 01100200 00000000 00000050 00000034 00000001 00000001 00000028
01010001 00000020 01010000 800b0001 800c0e10 80010005 80030001 80020002
80040002 
Aug 20 08:33:49 sargefire racoon: DEBUG: resend phase1 packet
3a28962515ecd484:c9d9fad7fde3c6da 
Aug 20 08:33:49 sargefire racoon: DEBUG: === 
Aug 20 08:33:49 sargefire racoon: DEBUG: 180 bytes message received from
xxx.xxx.151.70[500] to xxx.xxx.37.118[500] 
Aug 20 08:33:49 sargefire racoon: DEBUG:  3a289625 15ecd484 c9d9fad7
fde3c6da 04100200 00000000 000000b4 0a000084 b48480ee 281c073a 928e53ad
53f88640 d7eb9077 67bf069a 92c98762 4f2904c5 44f3ff33 4e5511ed e3f91145
16c13947 0237c38b e800268f 4d92a50b ed6a8aa9 45e4c332 7491932b 7ce8561e
9ef715e7 30ef2034 d28fcc40 b5eeeb25 8ed1af62 077c0fd7 db8f2e7d ae9db502
8b9b7ff2 b01829a4 c7d72137 c8351c08 94d44078 00000014 851c2807 e3748589
5f75a1e9 5b6f8d33 
Aug 20 08:33:49 sargefire racoon: DEBUG: begin. 
Aug 20 08:33:49 sargefire racoon: DEBUG: seen nptype=4(ke) 
Aug 20 08:33:49 sargefire racoon: DEBUG: seen nptype=10(nonce) 
Aug 20 08:33:49 sargefire racoon: DEBUG: succeed. 
Aug 20 08:33:49 sargefire racoon: DEBUG: === 
Aug 20 08:33:49 sargefire racoon: DEBUG: compute DH's private. 
Aug 20 08:33:49 sargefire racoon: DEBUG:  5197a08a 2266b84c 4cb82508
ddbcf4b0 3e60c42f f7fc0654 cb9bc2be 8af0a1c0 6df3ba69 2bb94250 020900dd
b21ec4b4 b0e5df77 d1515912 c5381b0c 697c5806 bf81b4f8 b6e34cec 459fed8d
4b3540d2 f3a1dc88 fc06c88d 2c495272 856a129b 94fb5585 17db55a9 84407d5f
b51f3c37 ab5fca6e 0857f8dd 149df453 3ed0fc69 
Aug 20 08:33:49 sargefire racoon: DEBUG: compute DH's public. 
Aug 20 08:33:49 sargefire racoon: DEBUG:  f3ae0612 0cb929b0 60574035
028e31ad 94c51573 941d76c0 1092afc9 b77bc743 dc2b3c66 ae0771fb be028c22
396038b7 6e743a39 68d2ac2b 2de4fba6 d7823878 30dbddc4 653470da 4f14c711
057fbba4 3c101ffe 18bedb50 8ad81379 e1354991 db6f41b8 7617c131 af62eaa8
43813e90 cd129cd1 e269f3a3 9d25b790 dcc3aaa8 
Aug 20 08:33:49 sargefire racoon: DEBUG: add payload of len 128, next
type 10 
Aug 20 08:33:49 sargefire racoon: DEBUG: add payload of len 16, next
type 0 
Aug 20 08:33:49 sargefire racoon: DEBUG: 180 bytes from
xxx.xxx.37.118[500] to xxx.xxx.151.70[500] 
Aug 20 08:33:49 sargefire racoon: DEBUG: sockname xxx.xxx.37.118[500] 
Aug 20 08:33:49 sargefire racoon: DEBUG: send packet from
xxx.xxx.37.118[500] 
Aug 20 08:33:49 sargefire racoon: DEBUG: send packet to
xxx.xxx.151.70[500] 
Aug 20 08:33:49 sargefire racoon: DEBUG: src4 xxx.xxx.37.118[500] 
Aug 20 08:33:49 sargefire racoon: DEBUG: dst4 xxx.xxx.151.70[500] 
Aug 20 08:33:49 sargefire racoon: DEBUG: 1 times of 180 bytes message
will be sent to xxx.xxx.37.118[500] 
Aug 20 08:33:49 sargefire racoon: DEBUG:  3a289625 15ecd484 c9d9fad7
fde3c6da 04100200 00000000 000000b4 0a000084 f3ae0612 0cb929b0 60574035
028e31ad 94c51573 941d76c0 1092afc9 b77bc743 dc2b3c66 ae0771fb be028c22
396038b7 6e743a39 68d2ac2b 2de4fba6 d7823878 30dbddc4 653470da 4f14c711
057fbba4 3c101ffe 18bedb50 8ad81379 e1354991 db6f41b8 7617c131 af62eaa8
43813e90 cd129cd1 e269f3a3 9d25b790 dcc3aaa8 00000014 c9ca2f8a d48a3b43
37c17807 4cdba08d 
Aug 20 08:33:49 sargefire racoon: DEBUG: resend phase1 packet
3a28962515ecd484:c9d9fad7fde3c6da 
Aug 20 08:33:49 sargefire racoon: DEBUG: compute DH's shared. 
Aug 20 08:33:49 sargefire racoon: DEBUG:  f75086ef 373ec95e 0ab59456
3342d5f4 38f1fc90 4d2329fa 764d14f2 fb715f5c 91f2ad4a c6b9a4f1 3a893b41
7260ae88 18ae8452 fcccd09a 92ffda55 4e95a7c0 678a6071 8db40471 77c18f36
d715b65b 0864e0de 2448065d 07309d38 1683e731 fb96a4bf e2f5bd8b 3a7151d4
f3f5acd0 fee5baa6 06277b8a c281f27a 9f01bae8 
Aug 20 08:33:49 sargefire racoon: DEBUG: the psk found. 
Aug 20 08:33:49 sargefire racoon: DEBUG2: psk: 
Aug 20 08:33:49 sargefire racoon: DEBUG2:  70726573 68617265 646b6579 
Aug 20 08:33:49 sargefire racoon: DEBUG: nonce 1: 
Aug 20 08:33:49 sargefire racoon: DEBUG:  851c2807 e3748589 5f75a1e9
5b6f8d33 
Aug 20 08:33:49 sargefire racoon: DEBUG: nonce 2: 
Aug 20 08:33:49 sargefire racoon: DEBUG:  c9ca2f8a d48a3b43 37c17807
4cdba08d 
Aug 20 08:33:49 sargefire racoon: DEBUG: hmac(hmac_sha1) 
Aug 20 08:33:49 sargefire racoon: DEBUG: SKEYID computed: 
Aug 20 08:33:49 sargefire racoon: DEBUG:  7359fa59 7047f873 0ea8b515
79581999 16fd113d 
Aug 20 08:33:49 sargefire racoon: DEBUG: hmac(hmac_sha1) 
Aug 20 08:33:49 sargefire racoon: DEBUG: SKEYID_d computed: 
Aug 20 08:33:49 sargefire racoon: DEBUG:  8b49304e 4bbd26df 8bcdd0af
6a6334c3 4da24c33 
Aug 20 08:33:49 sargefire racoon: DEBUG: hmac(hmac_sha1) 
Aug 20 08:33:49 sargefire racoon: DEBUG: SKEYID_a computed: 
Aug 20 08:33:49 sargefire racoon: DEBUG:  c8472df3 49a0b8d9 be944038
442f1fce 1d9dc2d5 
Aug 20 08:33:49 sargefire racoon: DEBUG: hmac(hmac_sha1) 
Aug 20 08:33:49 sargefire racoon: DEBUG: SKEYID_e computed: 
Aug 20 08:33:49 sargefire racoon: DEBUG:  845f138a 7fcebab6 8ecf9ed5
1f78b95e 9f18f655 
Aug 20 08:33:49 sargefire racoon: DEBUG: encription(3des) 
Aug 20 08:33:49 sargefire racoon: DEBUG: hash(sha1) 
Aug 20 08:33:49 sargefire racoon: DEBUG: len(SKEYID_e) < len(Ka) (20 <
24), generating long key (Ka = K1 | K2 | ...) 
Aug 20 08:33:49 sargefire racoon: DEBUG: hmac(hmac_sha1) 
Aug 20 08:33:49 sargefire racoon: DEBUG: compute intermediate encryption
key K1 
Aug 20 08:33:49 sargefire racoon: DEBUG:  00 
Aug 20 08:33:49 sargefire racoon: DEBUG:  a880400f 18cdf9d8 f93c0179
564e07a6 7b3c40b7 
Aug 20 08:33:49 sargefire racoon: DEBUG: hmac(hmac_sha1) 
Aug 20 08:33:49 sargefire racoon: DEBUG: compute intermediate encryption
key K2 
Aug 20 08:33:49 sargefire racoon: DEBUG:  a880400f 18cdf9d8 f93c0179
564e07a6 7b3c40b7 
Aug 20 08:33:49 sargefire racoon: DEBUG:  01d03264 04bc0e0d f440c635
6088403b 463f1945 
Aug 20 08:33:49 sargefire racoon: DEBUG: final encryption key computed: 
Aug 20 08:33:49 sargefire racoon: DEBUG:  a880400f 18cdf9d8 f93c0179
564e07a6 7b3c40b7 01d03264 
Aug 20 08:33:49 sargefire racoon: DEBUG: hash(sha1) 
Aug 20 08:33:49 sargefire racoon: DEBUG: encription(3des) 
Aug 20 08:33:49 sargefire racoon: DEBUG: IV computed: 
Aug 20 08:33:49 sargefire racoon: DEBUG:  db1a77de acdc75c6 
Aug 20 08:33:49 sargefire racoon: DEBUG: === 
Aug 20 08:33:49 sargefire racoon: DEBUG: 68 bytes message received from
xxx.xxx.151.70[500] to xxx.xxx.37.118[500] 
Aug 20 08:33:49 sargefire racoon: DEBUG:  3a289625 15ecd484 c9d9fad7
fde3c6da 05100201 00000000 00000044 f1051f77 d2cd755b cff57c2a 65bbd107
87ec0c7c 77d9a67e 7691c2ad 58b13ed5 40c6fe70 fb8764ba 
Aug 20 08:33:49 sargefire racoon: DEBUG: begin decryption. 
Aug 20 08:33:49 sargefire racoon: DEBUG: encription(3des) 
Aug 20 08:33:49 sargefire racoon: DEBUG: IV was saved for next
processing: 
Aug 20 08:33:49 sargefire racoon: DEBUG:  40c6fe70 fb8764ba 
Aug 20 08:33:49 sargefire racoon: DEBUG: encription(3des) 
Aug 20 08:33:49 sargefire racoon: DEBUG: with key: 
Aug 20 08:33:49 sargefire racoon: DEBUG:  a880400f 18cdf9d8 f93c0179
564e07a6 7b3c40b7 01d03264 
Aug 20 08:33:49 sargefire racoon: DEBUG: decrypted payload by IV: 
Aug 20 08:33:49 sargefire racoon: DEBUG:  40c6fe70 fb8764ba 
Aug 20 08:33:49 sargefire racoon: DEBUG: decrypted payload, but not
trimed. 
Aug 20 08:33:49 sargefire racoon: DEBUG:  0800000c 011101f4 50b79746
00000018 610cb920 016bf66a d0822ab2 f18cb0d9 74b37e09 4f302a03 
Aug 20 08:33:49 sargefire racoon: DEBUG: padding len=4 
Aug 20 08:33:49 sargefire racoon: DEBUG: skip to trim padding. 
Aug 20 08:33:49 sargefire racoon: DEBUG: decrypted. 
Aug 20 08:33:49 sargefire racoon: DEBUG:  3a289625 15ecd484 c9d9fad7
fde3c6da 05100201 00000000 00000044 0800000c 011101f4 50b79746 00000018
610cb920 016bf66a d0822ab2 f18cb0d9 74b37e09 4f302a03 
Aug 20 08:33:49 sargefire racoon: DEBUG: begin. 
Aug 20 08:33:49 sargefire racoon: DEBUG: seen nptype=5(id) 
Aug 20 08:33:49 sargefire racoon: DEBUG: seen nptype=8(hash) 
Aug 20 08:33:49 sargefire racoon: DEBUG: succeed. 
Aug 20 08:33:49 sargefire racoon: DEBUG: HASH received:
Aug 20 08:33:49 sargefire racoon: DEBUG:  610cb920 016bf66a d0822ab2
f18cb0d9 74b37e09 
Aug 20 08:33:49 sargefire racoon: DEBUG: HASH with: 
Aug 20 08:33:49 sargefire racoon: DEBUG:  b48480ee 281c073a 928e53ad
53f88640 d7eb9077 67bf069a 92c98762 4f2904c5 44f3ff33 4e5511ed e3f91145
16c13947 0237c38b e800268f 4d92a50b ed6a8aa9 45e4c332 7491932b 7ce8561e
9ef715e7 30ef2034 d28fcc40 b5eeeb25 8ed1af62 077c0fd7 db8f2e7d ae9db502
8b9b7ff2 b01829a4 c7d72137 c8351c08 94d44078 f3ae0612 0cb929b0 60574035
028e31ad 94c51573 941d76c0 1092afc9 b77bc743 dc2b3c66 ae0771fb be028c22
396038b7 6e743a39 68d2ac2b 2de4fba6 d7823878 30dbddc4 653470da 4f14c711
057fbba4 3c101ffe 18bedb50 8ad81379 e1354991 db6f41b8 7617c131 af62eaa8
43813e90 cd129cd1 e269f3a3 9d25b790 dcc3aaa8 3a289625 15ecd484 c9d9fad7
fde3c6da 00000001 00000001 00000028 01010001 00000020 01010000 800b0001
800c0e10 80010005 80030001 80020002 80040002 011101f4 50b79746 
Aug 20 08:33:49 sargefire racoon: DEBUG: hmac(hmac_sha1) 
Aug 20 08:33:49 sargefire racoon: DEBUG: HASH computed: 
Aug 20 08:33:49 sargefire racoon: DEBUG:  610cb920 016bf66a d0822ab2
f18cb0d9 74b37e09 
Aug 20 08:33:49 sargefire racoon: DEBUG: HASH for PSK validated. 
Aug 20 08:33:49 sargefire racoon: DEBUG: peer's ID 
Aug 20 08:33:49 sargefire racoon: DEBUG:  011101f4 50b79746 
Aug 20 08:33:49 sargefire racoon: DEBUG: === 
Aug 20 08:33:49 sargefire racoon: DEBUG: use ID type of IPv4_address 
Aug 20 08:33:49 sargefire racoon: DEBUG: generate HASH_R 
Aug 20 08:33:49 sargefire racoon: DEBUG: HASH with: 
Aug 20 08:33:49 sargefire racoon: DEBUG:  f3ae0612 0cb929b0 60574035
028e31ad 94c51573 941d76c0 1092afc9 b77bc743 dc2b3c66 ae0771fb be028c22
396038b7 6e743a39 68d2ac2b 2de4fba6 d7823878 30dbddc4 653470da 4f14c711
057fbba4 3c101ffe 18bedb50 8ad81379 e1354991 db6f41b8 7617c131 af62eaa8
43813e90 cd129cd1 e269f3a3 9d25b790 dcc3aaa8 b48480ee 281c073a 928e53ad
53f88640 d7eb9077 67bf069a 92c98762 4f2904c5 44f3ff33 4e5511ed e3f91145
16c13947 0237c38b e800268f 4d92a50b ed6a8aa9 45e4c332 7491932b 7ce8561e
9ef715e7 30ef2034 d28fcc40 b5eeeb25 8ed1af62 077c0fd7 db8f2e7d ae9db502
8b9b7ff2 b01829a4 c7d72137 c8351c08 94d44078 c9d9fad7 fde3c6da 3a289625
15ecd484 00000001 00000001 00000028 01010001 00000020 01010000 800b0001
800c0e10 80010005 80030001 80020002 80040002 011101f4 3e982576 
Aug 20 08:33:49 sargefire racoon: DEBUG: hmac(hmac_sha1) 
Aug 20 08:33:49 sargefire racoon: DEBUG: HASH computed: 
Aug 20 08:33:49 sargefire racoon: DEBUG:  528ca8e0 e7ab6fa6 081e665c
443b17e2 2c87aa3b 
Aug 20 08:33:49 sargefire racoon: DEBUG: add payload of len 8, next type
8 
Aug 20 08:33:49 sargefire racoon: DEBUG: add payload of len 20, next
type 0 
Aug 20 08:33:49 sargefire racoon: DEBUG: begin encryption. 
Aug 20 08:33:49 sargefire racoon: DEBUG: encription(3des) 
Aug 20 08:33:49 sargefire racoon: DEBUG: pad length = 4 
Aug 20 08:33:49 sargefire racoon: DEBUG:  0800000c 011101f4 3e982576
00000018 528ca8e0 e7ab6fa6 081e665c 443b17e2 2c87aa3b 87af9b03 
Aug 20 08:33:49 sargefire racoon: DEBUG: encription(3des) 
Aug 20 08:33:49 sargefire racoon: DEBUG: with key: 
Aug 20 08:33:49 sargefire racoon: DEBUG:  a880400f 18cdf9d8 f93c0179
564e07a6 7b3c40b7 01d03264 
Aug 20 08:33:49 sargefire racoon: DEBUG: encrypted payload by IV: 
Aug 20 08:33:49 sargefire racoon: DEBUG:  e5859431 7b4b6c1b 
Aug 20 08:33:49 sargefire racoon: DEBUG: save IV for next: 
Aug 20 08:33:49 sargefire racoon: DEBUG:  e5859431 7b4b6c1b 
Aug 20 08:33:49 sargefire racoon: DEBUG: encrypted. 
Aug 20 08:33:49 sargefire racoon: DEBUG: 68 bytes from
xxx.xxx.37.118[500] to xxx.xxx.151.70[500] 
Aug 20 08:33:49 sargefire racoon: DEBUG: sockname xxx.xxx.37.118[500] 
Aug 20 08:33:49 sargefire racoon: DEBUG: send packet from
xxx.xxx.37.118[500] 
Aug 20 08:33:49 sargefire racoon: DEBUG: send packet to
xxx.xxx.151.70[500] 
Aug 20 08:33:49 sargefire racoon: DEBUG: src4 xxx.xxx.37.118[500] 
Aug 20 08:33:49 sargefire racoon: DEBUG: dst4 xxx.xxx.151.70[500] 
Aug 20 08:33:49 sargefire racoon: DEBUG: 1 times of 68 bytes message
will be sent to xxx.xxx.37.118[500] 
Aug 20 08:33:49 sargefire racoon: DEBUG:  3a289625 15ecd484 c9d9fad7
fde3c6da 05100201 00000000 00000044 7acd89e3 7c9f25f9 ded18000 85a307d4
3c79414b 7912d0c5 d5d56db5 231345e2 e5859431 7b4b6c1b 
Aug 20 08:33:49 sargefire racoon: DEBUG: compute IV for phase2 
Aug 20 08:33:49 sargefire racoon: DEBUG: phase1 last IV: 
Aug 20 08:33:49 sargefire racoon: DEBUG:  e5859431 7b4b6c1b b286d3a4 
Aug 20 08:33:49 sargefire racoon: DEBUG: hash(sha1) 
Aug 20 08:33:49 sargefire racoon: DEBUG: encription(3des) 
Aug 20 08:33:49 sargefire racoon: DEBUG: phase2 IV computed: 
Aug 20 08:33:49 sargefire racoon: DEBUG:  3b77aa60 95a586fb 
Aug 20 08:33:49 sargefire racoon: DEBUG: HASH with: 
Aug 20 08:33:49 sargefire racoon: DEBUG:  b286d3a4 0000001c 00000001
01106002 3a289625 15ecd484 c9d9fad7 fde3c6da 
Aug 20 08:33:49 sargefire racoon: DEBUG: hmac(hmac_sha1) 
Aug 20 08:33:49 sargefire racoon: DEBUG: HASH computed: 
Aug 20 08:33:49 sargefire racoon: DEBUG:  ffb18599 a3e0448a f78d78a3
eea52195 70216863 
Aug 20 08:33:49 sargefire racoon: DEBUG: begin encryption. 
Aug 20 08:33:49 sargefire racoon: DEBUG: encription(3des) 
Aug 20 08:33:49 sargefire racoon: DEBUG: pad length = 4 
Aug 20 08:33:49 sargefire racoon: DEBUG:  0b000018 ffb18599 a3e0448a
f78d78a3 eea52195 70216863 0000001c 00000001 01106002 3a289625 15ecd484
c9d9fad7 fde3c6da e5186003 
Aug 20 08:33:49 sargefire racoon: DEBUG: encription(3des) 
Aug 20 08:33:49 sargefire racoon: DEBUG: with key: 
Aug 20 08:33:49 sargefire racoon: DEBUG:  a880400f 18cdf9d8 f93c0179
564e07a6 7b3c40b7 01d03264 
Aug 20 08:33:49 sargefire racoon: DEBUG: encrypted payload by IV: 
Aug 20 08:33:49 sargefire racoon: DEBUG:  f1f539cd b3f71c97 
Aug 20 08:33:49 sargefire racoon: DEBUG: save IV for next: 
Aug 20 08:33:49 sargefire racoon: DEBUG:  f1f539cd b3f71c97 
Aug 20 08:33:49 sargefire racoon: DEBUG: encrypted. 
Aug 20 08:33:49 sargefire racoon: DEBUG: 84 bytes from
xxx.xxx.37.118[500] to xxx.xxx.151.70[500] 
Aug 20 08:33:49 sargefire racoon: DEBUG: sockname xxx.xxx.37.118[500] 
Aug 20 08:33:49 sargefire racoon: DEBUG: send packet from
xxx.xxx.37.118[500] 
Aug 20 08:33:49 sargefire racoon: DEBUG: send packet to
xxx.xxx.151.70[500] 
Aug 20 08:33:49 sargefire racoon: DEBUG: src4 xxx.xxx.37.118[500] 
Aug 20 08:33:49 sargefire racoon: DEBUG: dst4 xxx.xxx.151.70[500] 
Aug 20 08:33:49 sargefire racoon: DEBUG: 1 times of 84 bytes message
will be sent to xxx.xxx.37.118[500] 
Aug 20 08:33:49 sargefire racoon: DEBUG:  3a289625 15ecd484 c9d9fad7
fde3c6da 08100501 b286d3a4 00000054 c4993291 5fa22dfe 14b5383d 210408e1
d57b92d5 f418af5b a2ee1b2b ce802419 af3fbeb2 a9625b45 8dba5268 3d99a708
f1f539cd b3f71c97 
Aug 20 08:33:49 sargefire racoon: DEBUG: sendto Information notify. 
Aug 20 08:33:49 sargefire racoon: INFO: ISAKMP-SA established
xxx.xxx.37.118[500]-xxx.xxx.151.70[500]
spi:3a28962515ecd484:c9d9fad7fde3c6da 
Aug 20 08:33:49 sargefire racoon: DEBUG: === 
Aug 20 08:33:49 sargefire racoon: DEBUG: === 
Aug 20 08:33:49 sargefire racoon: DEBUG: 324 bytes message received from
xxx.xxx.151.70[500] to xxx.xxx.37.118[500] 
Aug 20 08:33:49 sargefire racoon: DEBUG:  3a289625 15ecd484 c9d9fad7
fde3c6da 08102001 229dae39 00000144 9c7a1bbd f8c06510 e514973c 2088b49d
bd53c518 23db13e4 92075272 1b970385 fa3ef4d9 21b5d1f4 6ecfa914 a5131c93
8108dbac 585c2a18 77f4a00a 4c9383fe a5f608c4 74ff4e94 47d89193 016258c7
973c86eb fdd2981c 9cbf0559 7b063be5 64e2fd2f 597fb2f9 8361a6b8 46019304
ecb31b92 c713e732 672c592d b7f8ec6c 995079fa 29ba8e4a 24f222de ff61f088
1973e00d 25d51411 694175d4 e0e7fd25 5bd55912 26447612 9f14c864 e2ef4867
b7b4f2f1 f0de1b8e 7ef6a20e 561a36c9 b12f1eef d507e680 8247fdcd aa24c1b4
b2c884e9 5307364c ea3e26ad 65ca80e3 a84dffc4 e9cee1d1 33f81b21 aeb750f6
f78560fa 0ca7c657 f14db90f a8e304e9 df299987 916924ff 8de04e37 df3e9008
499cb627 38cc7795 acaad895 507072cb 6f32fa25 b653158e 
Aug 20 08:33:49 sargefire racoon: DEBUG: compute IV for phase2 
Aug 20 08:33:49 sargefire racoon: DEBUG: phase1 last IV: 
Aug 20 08:33:49 sargefire racoon: DEBUG:  e5859431 7b4b6c1b 229dae39 
Aug 20 08:33:49 sargefire racoon: DEBUG: hash(sha1) 
Aug 20 08:33:49 sargefire racoon: DEBUG: encription(3des) 
Aug 20 08:33:49 sargefire racoon: DEBUG: phase2 IV computed: 
Aug 20 08:33:49 sargefire racoon: DEBUG:  fab3287f e2865fab 
Aug 20 08:33:49 sargefire racoon: DEBUG: === 
Aug 20 08:33:49 sargefire racoon: INFO: respond new phase 2 negotiation:
xxx.xxx.37.118[0]<=>xxx.xxx.151.70[0] 
Aug 20 08:33:49 sargefire racoon: DEBUG: begin decryption. 
Aug 20 08:33:49 sargefire racoon: DEBUG: encription(3des) 
Aug 20 08:33:49 sargefire racoon: DEBUG: IV was saved for next
processing: 
Aug 20 08:33:49 sargefire racoon: DEBUG:  6f32fa25 b653158e 
Aug 20 08:33:49 sargefire racoon: DEBUG: encription(3des) 
Aug 20 08:33:49 sargefire racoon: DEBUG: with key: 
Aug 20 08:33:49 sargefire racoon: DEBUG:  a880400f 18cdf9d8 f93c0179
564e07a6 7b3c40b7 01d03264 
Aug 20 08:33:49 sargefire racoon: DEBUG: decrypted payload by IV: 
Aug 20 08:33:49 sargefire racoon: DEBUG:  6f32fa25 b653158e 
Aug 20 08:33:49 sargefire racoon: DEBUG: decrypted payload, but not
trimed. 
Aug 20 08:33:49 sargefire racoon: DEBUG:  01000018 ed3049d0 410db213
7f5bf0c1 4f5fe6cf 342c739d 0a000056 00000001 00000001 02000028 01030401
05472feb 0000001c 01030000 80010001 800204b0 80040001 80050002 80030002
00000022 01040201 bc900000 00180102 00008001 00018002 04b08004 00018003
00020400 0014ce0c 43c9cbae e5a0b431 e28fbc4d 08400500 0084b8c2 69723abb
9fbdf1ee 3f0520bd e43a11e5 991634cf b81a7e31 6e9a54b7 b1c3ef6c 5d3f00cc
6ac40b1a cb96d76e 2924f881 a2680f60 ad9cf69c 61f78f4c a9e2cc3c 3707d837
2cf8906a 76a2c47c 17870385 dddadcb6 88eeb75e 0b8b87f3 cdae60dc 8a2cb472
d07e2ef4 e2e5d0d0 b9dcc182 c28f632f 97037e4f 5245ee2d 4a2c0500 000c0100
000050b7 97460000 00100400 0000c0a8 6400ffff ff00e956 a864c105 
Aug 20 08:33:49 sargefire racoon: DEBUG: padding len=6 
Aug 20 08:33:49 sargefire racoon: DEBUG: skip to trim padding. 
Aug 20 08:33:49 sargefire racoon: DEBUG: decrypted. 
Aug 20 08:33:49 sargefire racoon: DEBUG:  3a289625 15ecd484 c9d9fad7
fde3c6da 08102001 229dae39 00000144 01000018 ed3049d0 410db213 7f5bf0c1
4f5fe6cf 342c739d 0a000056 00000001 00000001 02000028 01030401 05472feb
0000001c 01030000 80010001 800204b0 80040001 80050002 80030002 00000022
01040201 bc900000 00180102 00008001 00018002 04b08004 00018003 00020400
0014ce0c 43c9cbae e5a0b431 e28fbc4d 08400500 0084b8c2 69723abb 9fbdf1ee
3f0520bd e43a11e5 991634cf b81a7e31 6e9a54b7 b1c3ef6c 5d3f00cc 6ac40b1a
cb96d76e 2924f881 a2680f60 ad9cf69c 61f78f4c a9e2cc3c 3707d837 2cf8906a
76a2c47c 17870385 dddadcb6 88eeb75e 0b8b87f3 cdae60dc 8a2cb472 d07e2ef4
e2e5d0d0 b9dcc182 c28f632f 97037e4f 5245ee2d 4a2c0500 000c0100 000050b7
97460000 00100400 0000c0a8 6400ffff ff00e956 a864c105 
Aug 20 08:33:49 sargefire racoon: DEBUG: begin. 
Aug 20 08:33:49 sargefire racoon: DEBUG: seen nptype=8(hash) 
Aug 20 08:33:49 sargefire racoon: DEBUG: seen nptype=1(sa) 
Aug 20 08:33:49 sargefire racoon: DEBUG: seen nptype=10(nonce) 
Aug 20 08:33:49 sargefire racoon: DEBUG: seen nptype=4(ke) 
Aug 20 08:33:49 sargefire racoon: DEBUG: seen nptype=5(id) 
Aug 20 08:33:49 sargefire racoon: DEBUG: seen nptype=5(id) 
Aug 20 08:33:49 sargefire racoon: DEBUG: succeed. 
Aug 20 08:33:49 sargefire racoon: DEBUG: received IDci2:
Aug 20 08:33:49 sargefire racoon: DEBUG:  01000000 50b79746 
Aug 20 08:33:49 sargefire racoon: DEBUG: received IDcr2:
Aug 20 08:33:49 sargefire racoon: DEBUG:  04000000 c0a86400 ffffff00 
Aug 20 08:33:49 sargefire racoon: DEBUG: HASH(1) validate:
Aug 20 08:33:49 sargefire racoon: DEBUG:  ed3049d0 410db213 7f5bf0c1
4f5fe6cf 342c739d 
Aug 20 08:33:49 sargefire racoon: DEBUG: HASH with: 
Aug 20 08:33:49 sargefire racoon: DEBUG:  229dae39 0a000056 00000001
00000001 02000028 01030401 05472feb 0000001c 01030000 80010001 800204b0
80040001 80050002 80030002 00000022 01040201 bc900000 00180102 00008001
00018002 04b08004 00018003 00020400 0014ce0c 43c9cbae e5a0b431 e28fbc4d
08400500 0084b8c2 69723abb 9fbdf1ee 3f0520bd e43a11e5 991634cf b81a7e31
6e9a54b7 b1c3ef6c 5d3f00cc 6ac40b1a cb96d76e 2924f881 a2680f60 ad9cf69c
61f78f4c a9e2cc3c 3707d837 2cf8906a 76a2c47c 17870385 dddadcb6 88eeb75e
0b8b87f3 cdae60dc 8a2cb472 d07e2ef4 e2e5d0d0 b9dcc182 c28f632f 97037e4f
5245ee2d 4a2c0500 000c0100 000050b7 97460000 00100400 0000c0a8 6400ffff
ff00 
Aug 20 08:33:49 sargefire racoon: DEBUG: hmac(hmac_sha1) 
Aug 20 08:33:49 sargefire racoon: DEBUG: HASH computed: 
Aug 20 08:33:49 sargefire racoon: DEBUG:  ed3049d0 410db213 7f5bf0c1
4f5fe6cf 342c739d 
Aug 20 08:33:49 sargefire racoon: ERROR: failed to get sainfo. 
Aug 20 08:33:49 sargefire racoon: ERROR: failed to get sainfo. 
Aug 20 08:33:49 sargefire racoon: ERROR: failed to pre-process packet.