FIPS Product: YES FIPS Kernel: NO FIPS Mode: NO NSS DB directory: sql:/etc/ipsec.d Initializing NSS Opening NSS database "sql:/etc/ipsec.d" read-only NSS initialized NSS crypto library initialized FIPS HMAC integrity support [enabled] FIPS mode disabled for pluto daemon FIPS HMAC integrity verification self-test FAILED libcap-ng support [enabled] Linux audit support [enabled] Linux audit activated Starting Pluto (Libreswan Version v3.28-685-gbfd5aef521-master-s2 XFRM(netkey) esp-hw-offload FORK PTHREAD_SETSCHEDPRIO NSS (IPsec profile) DNSSEC FIPS_CHECK LABELED_IPSEC SECCOMP LIBCAP_NG LINUX_AUDIT XAUTH_PAM NETWORKMANAGER CURL(non-NSS)) pid:14673 core dump dir: /tmp secrets file: /etc/ipsec.secrets leak-detective enabled NSS crypto [enabled] XAUTH PAM support [enabled] | libevent is using pluto's memory allocator Initializing libevent in pthreads mode: headers: 2.1.8-stable (2010800); library: 2.1.8-stable (2010800) | libevent_malloc: new ptr-libevent@0x55cbd9c8d748 size 40 | libevent_malloc: new ptr-libevent@0x55cbd9c8d6c8 size 40 | libevent_malloc: new ptr-libevent@0x55cbd9c8d648 size 40 | creating event base | libevent_malloc: new ptr-libevent@0x55cbd9c7f278 size 56 | libevent_malloc: new ptr-libevent@0x55cbd9c00878 size 664 | libevent_malloc: new ptr-libevent@0x55cbd9cc7d48 size 24 | libevent_malloc: new ptr-libevent@0x55cbd9cc7d98 size 384 | libevent_malloc: new ptr-libevent@0x55cbd9cc7d08 size 16 | libevent_malloc: new ptr-libevent@0x55cbd9c8d5c8 size 40 | libevent_malloc: new ptr-libevent@0x55cbd9c8d548 size 48 | libevent_realloc: new ptr-libevent@0x55cbd9c00508 size 256 | libevent_malloc: new ptr-libevent@0x55cbd9cc7f48 size 16 | libevent_free: release ptr-libevent@0x55cbd9c7f278 | libevent initialized | libevent_realloc: new ptr-libevent@0x55cbd9c7f278 size 64 | global periodic timer EVENT_RESET_LOG_RATE_LIMIT enabled with interval of 3600 seconds | init_nat_traversal() initialized with keep_alive=0s NAT-Traversal support [enabled] | global one-shot timer EVENT_NAT_T_KEEPALIVE initialized | global one-shot timer EVENT_FREE_ROOT_CERTS initialized | global periodic timer EVENT_REINIT_SECRET enabled with interval of 3600 seconds | global one-shot timer EVENT_REVIVE_CONNS initialized | global periodic timer EVENT_PENDING_DDNS enabled with interval of 60 seconds | global periodic timer EVENT_PENDING_PHASE2 enabled with interval of 120 seconds Encryption algorithms: AES_CCM_16 IKEv1: ESP IKEv2: ESP FIPS {256,192,*128} aes_ccm, aes_ccm_c AES_CCM_12 IKEv1: ESP IKEv2: ESP FIPS {256,192,*128} aes_ccm_b AES_CCM_8 IKEv1: ESP IKEv2: ESP FIPS {256,192,*128} aes_ccm_a 3DES_CBC IKEv1: IKE ESP IKEv2: IKE ESP FIPS [*192] 3des CAMELLIA_CTR IKEv1: ESP IKEv2: ESP {256,192,*128} CAMELLIA_CBC IKEv1: IKE ESP IKEv2: IKE ESP {256,192,*128} camellia AES_GCM_16 IKEv1: ESP IKEv2: IKE ESP FIPS {256,192,*128} aes_gcm, aes_gcm_c AES_GCM_12 IKEv1: ESP IKEv2: IKE ESP FIPS {256,192,*128} aes_gcm_b AES_GCM_8 IKEv1: ESP IKEv2: IKE ESP FIPS {256,192,*128} aes_gcm_a AES_CTR IKEv1: IKE ESP IKEv2: IKE ESP FIPS {256,192,*128} aesctr AES_CBC IKEv1: IKE ESP IKEv2: IKE ESP FIPS {256,192,*128} aes SERPENT_CBC IKEv1: IKE ESP IKEv2: IKE ESP {256,192,*128} serpent TWOFISH_CBC IKEv1: IKE ESP IKEv2: IKE ESP {256,192,*128} twofish TWOFISH_SSH IKEv1: IKE IKEv2: IKE ESP {256,192,*128} twofish_cbc_ssh NULL_AUTH_AES_GMAC IKEv1: ESP IKEv2: ESP FIPS {256,192,*128} aes_gmac NULL IKEv1: ESP IKEv2: ESP [] CHACHA20_POLY1305 IKEv1: IKEv2: IKE ESP [*256] chacha20poly1305 Hash algorithms: MD5 IKEv1: IKE IKEv2: SHA1 IKEv1: IKE IKEv2: FIPS sha SHA2_256 IKEv1: IKE IKEv2: FIPS sha2, sha256 SHA2_384 IKEv1: IKE IKEv2: FIPS sha384 SHA2_512 IKEv1: IKE IKEv2: FIPS sha512 PRF algorithms: HMAC_MD5 IKEv1: IKE IKEv2: IKE md5 HMAC_SHA1 IKEv1: IKE IKEv2: IKE FIPS sha, sha1 HMAC_SHA2_256 IKEv1: IKE IKEv2: IKE FIPS sha2, sha256, sha2_256 HMAC_SHA2_384 IKEv1: IKE IKEv2: IKE FIPS sha384, sha2_384 HMAC_SHA2_512 IKEv1: IKE IKEv2: IKE FIPS sha512, sha2_512 AES_XCBC IKEv1: IKEv2: IKE aes128_xcbc Integrity algorithms: HMAC_MD5_96 IKEv1: IKE ESP AH IKEv2: IKE ESP AH md5, hmac_md5 HMAC_SHA1_96 IKEv1: IKE ESP AH IKEv2: IKE ESP AH FIPS sha, sha1, sha1_96, hmac_sha1 HMAC_SHA2_512_256 IKEv1: IKE ESP AH IKEv2: IKE ESP AH FIPS sha512, sha2_512, sha2_512_256, hmac_sha2_512 HMAC_SHA2_384_192 IKEv1: IKE ESP AH IKEv2: IKE ESP AH FIPS sha384, sha2_384, sha2_384_192, hmac_sha2_384 HMAC_SHA2_256_128 IKEv1: IKE ESP AH IKEv2: IKE ESP AH FIPS sha2, sha256, sha2_256, sha2_256_128, hmac_sha2_256 HMAC_SHA2_256_TRUNCBUG IKEv1: ESP AH IKEv2: AH AES_XCBC_96 IKEv1: ESP AH IKEv2: IKE ESP AH aes_xcbc, aes128_xcbc, aes128_xcbc_96 AES_CMAC_96 IKEv1: ESP AH IKEv2: ESP AH FIPS aes_cmac NONE IKEv1: ESP IKEv2: IKE ESP FIPS null DH algorithms: NONE IKEv1: IKEv2: IKE ESP AH FIPS null, dh0 MODP1536 IKEv1: IKE ESP AH IKEv2: IKE ESP AH dh5 MODP2048 IKEv1: IKE ESP AH IKEv2: IKE ESP AH FIPS dh14 MODP3072 IKEv1: IKE ESP AH IKEv2: IKE ESP AH FIPS dh15 MODP4096 IKEv1: IKE ESP AH IKEv2: IKE ESP AH FIPS dh16 MODP6144 IKEv1: IKE ESP AH IKEv2: IKE ESP AH FIPS dh17 MODP8192 IKEv1: IKE ESP AH IKEv2: IKE ESP AH FIPS dh18 DH19 IKEv1: IKE IKEv2: IKE ESP AH FIPS ecp_256, ecp256 DH20 IKEv1: IKE IKEv2: IKE ESP AH FIPS ecp_384, ecp384 DH21 IKEv1: IKE IKEv2: IKE ESP AH FIPS ecp_521, ecp521 DH31 IKEv1: IKE IKEv2: IKE ESP AH curve25519 testing CAMELLIA_CBC: Camellia: 16 bytes with 128-bit key Camellia: 16 bytes with 128-bit key Camellia: 16 bytes with 256-bit key Camellia: 16 bytes with 256-bit key testing AES_GCM_16: empty string one block two blocks two blocks with associated data testing AES_CTR: Encrypting 16 octets using AES-CTR with 128-bit key Encrypting 32 octets using AES-CTR with 128-bit key Encrypting 36 octets using AES-CTR with 128-bit key Encrypting 16 octets using AES-CTR with 192-bit key Encrypting 32 octets using AES-CTR with 192-bit key Encrypting 36 octets using AES-CTR with 192-bit key Encrypting 16 octets using AES-CTR with 256-bit key Encrypting 32 octets using AES-CTR with 256-bit key Encrypting 36 octets using AES-CTR with 256-bit key testing AES_CBC: Encrypting 16 bytes (1 block) using AES-CBC with 128-bit key Encrypting 32 bytes (2 blocks) using AES-CBC with 128-bit key Encrypting 48 bytes (3 blocks) using AES-CBC with 128-bit key Encrypting 64 bytes (4 blocks) using AES-CBC with 128-bit key testing AES_XCBC: RFC 3566 Test Case #1: AES-XCBC-MAC-96 with 0-byte input RFC 3566 Test Case #2: AES-XCBC-MAC-96 with 3-byte input RFC 3566 Test Case #3: AES-XCBC-MAC-96 with 16-byte input RFC 3566 Test Case #4: AES-XCBC-MAC-96 with 20-byte input RFC 3566 Test Case #5: AES-XCBC-MAC-96 with 32-byte input RFC 3566 Test Case #6: AES-XCBC-MAC-96 with 34-byte input RFC 3566 Test Case #7: AES-XCBC-MAC-96 with 1000-byte input RFC 4434 Test Case AES-XCBC-PRF-128 with 20-byte input (key length 16) RFC 4434 Test Case AES-XCBC-PRF-128 with 20-byte input (key length 10) RFC 4434 Test Case AES-XCBC-PRF-128 with 20-byte input (key length 18) testing HMAC_MD5: RFC 2104: MD5_HMAC test 1 RFC 2104: MD5_HMAC test 2 RFC 2104: MD5_HMAC test 3 8 CPU cores online starting up 7 crypto helpers started thread for crypto helper 0 | starting up helper thread 0 | status value returned by setting the priority of this thread (crypto helper 0) 22 | crypto helper 0 waiting (nothing to do) started thread for crypto helper 1 | starting up helper thread 1 | status value returned by setting the priority of this thread (crypto helper 1) 22 | crypto helper 1 waiting (nothing to do) started thread for crypto helper 2 | starting up helper thread 2 | status value returned by setting the priority of this thread (crypto helper 2) 22 started thread for crypto helper 3 | starting up helper thread 3 | crypto helper 2 waiting (nothing to do) | status value returned by setting the priority of this thread (crypto helper 3) 22 started thread for crypto helper 4 | starting up helper thread 4 | crypto helper 3 waiting (nothing to do) | status value returned by setting the priority of this thread (crypto helper 4) 22 | crypto helper 4 waiting (nothing to do) started thread for crypto helper 5 | starting up helper thread 5 | status value returned by setting the priority of this thread (crypto helper 5) 22 | crypto helper 5 waiting (nothing to do) started thread for crypto helper 6 | starting up helper thread 6 | status value returned by setting the priority of this thread (crypto helper 6) 22 | checking IKEv1 state table | crypto helper 6 waiting (nothing to do) | MAIN_R0: category: half-open IKE SA flags: 0: | -> MAIN_R1 EVENT_SO_DISCARD | MAIN_I1: category: half-open IKE SA flags: 0: | -> MAIN_I2 EVENT_RETRANSMIT | MAIN_R1: category: open IKE SA flags: 200: | -> MAIN_R2 EVENT_RETRANSMIT | -> UNDEFINED EVENT_RETRANSMIT | -> UNDEFINED EVENT_RETRANSMIT | MAIN_I2: category: open IKE SA flags: 0: | -> MAIN_I3 EVENT_RETRANSMIT | -> UNDEFINED EVENT_RETRANSMIT | -> UNDEFINED EVENT_RETRANSMIT | MAIN_R2: category: open IKE SA flags: 0: | -> MAIN_R3 EVENT_SA_REPLACE | -> MAIN_R3 EVENT_SA_REPLACE | -> UNDEFINED EVENT_SA_REPLACE | MAIN_I3: category: open IKE SA flags: 0: | -> MAIN_I4 EVENT_SA_REPLACE | -> MAIN_I4 EVENT_SA_REPLACE | -> UNDEFINED EVENT_SA_REPLACE | MAIN_R3: category: established IKE SA flags: 200: | -> UNDEFINED EVENT_NULL | MAIN_I4: category: established IKE SA flags: 0: | -> UNDEFINED EVENT_NULL | AGGR_R0: category: half-open IKE SA flags: 0: | -> AGGR_R1 EVENT_SO_DISCARD | AGGR_I1: category: half-open IKE SA flags: 0: | -> AGGR_I2 EVENT_SA_REPLACE | -> AGGR_I2 EVENT_SA_REPLACE | AGGR_R1: category: open IKE SA flags: 200: | -> AGGR_R2 EVENT_SA_REPLACE | -> AGGR_R2 EVENT_SA_REPLACE | AGGR_I2: category: established IKE SA flags: 200: | -> UNDEFINED EVENT_NULL | AGGR_R2: category: established IKE SA flags: 0: | -> UNDEFINED EVENT_NULL | QUICK_R0: category: established CHILD SA flags: 0: | -> QUICK_R1 EVENT_RETRANSMIT | QUICK_I1: category: established CHILD SA flags: 0: | -> QUICK_I2 EVENT_SA_REPLACE | QUICK_R1: category: established CHILD SA flags: 0: | -> QUICK_R2 EVENT_SA_REPLACE | QUICK_I2: category: established CHILD SA flags: 200: | -> UNDEFINED EVENT_NULL | QUICK_R2: category: established CHILD SA flags: 0: | -> UNDEFINED EVENT_NULL | INFO: category: informational flags: 0: | -> UNDEFINED EVENT_NULL | INFO_PROTECTED: category: informational flags: 0: | -> UNDEFINED EVENT_NULL | XAUTH_R0: category: established IKE SA flags: 0: | -> XAUTH_R1 EVENT_NULL | XAUTH_R1: category: established IKE SA flags: 0: | -> MAIN_R3 EVENT_SA_REPLACE | MODE_CFG_R0: category: informational flags: 0: | -> MODE_CFG_R1 EVENT_SA_REPLACE | MODE_CFG_R1: category: established IKE SA flags: 0: | -> MODE_CFG_R2 EVENT_SA_REPLACE | MODE_CFG_R2: category: established IKE SA flags: 0: | -> UNDEFINED EVENT_NULL | MODE_CFG_I1: category: established IKE SA flags: 0: | -> MAIN_I4 EVENT_SA_REPLACE | XAUTH_I0: category: established IKE SA flags: 0: | -> XAUTH_I1 EVENT_RETRANSMIT | XAUTH_I1: category: established IKE SA flags: 0: | -> MAIN_I4 EVENT_RETRANSMIT | checking IKEv2 state table | PARENT_I0: category: ignore flags: 0: | -> PARENT_I1 EVENT_RETRANSMIT send-request (initiate IKE_SA_INIT) | PARENT_I1: category: half-open IKE SA flags: 0: | -> PARENT_I1 EVENT_RETAIN send-request (Initiator: process SA_INIT reply notification) | -> PARENT_I2 EVENT_RETRANSMIT send-request (Initiator: process IKE_SA_INIT reply, initiate IKE_AUTH) | PARENT_I2: category: open IKE SA flags: 0: | -> PARENT_I2 EVENT_NULL (Initiator: process INVALID_SYNTAX AUTH notification) | -> PARENT_I2 EVENT_NULL (Initiator: process AUTHENTICATION_FAILED AUTH notification) | -> PARENT_I2 EVENT_NULL (Initiator: process UNSUPPORTED_CRITICAL_PAYLOAD AUTH notification) | -> V2_IPSEC_I EVENT_SA_REPLACE (Initiator: process IKE_AUTH response) | -> PARENT_I2 EVENT_NULL (IKE SA: process IKE_AUTH response containing unknown notification) | PARENT_I3: category: established IKE SA flags: 0: | -> PARENT_I3 EVENT_RETAIN (I3: Informational Request) | -> PARENT_I3 EVENT_RETAIN (I3: Informational Response) | -> PARENT_I3 EVENT_RETAIN (I3: INFORMATIONAL Request) | -> PARENT_I3 EVENT_RETAIN (I3: INFORMATIONAL Response) | PARENT_R0: category: half-open IKE SA flags: 0: | -> PARENT_R1 EVENT_SO_DISCARD send-request (Respond to IKE_SA_INIT) | PARENT_R1: category: half-open IKE SA flags: 0: | -> PARENT_R1 EVENT_SA_REPLACE send-request (Responder: process IKE_AUTH request (no SKEYSEED)) | -> V2_IPSEC_R EVENT_SA_REPLACE send-request (Responder: process IKE_AUTH request) | PARENT_R2: category: established IKE SA flags: 0: | -> PARENT_R2 EVENT_RETAIN (R2: process Informational Request) | -> PARENT_R2 EVENT_RETAIN (R2: process Informational Response) | -> PARENT_R2 EVENT_RETAIN (R2: process INFORMATIONAL Request) | -> PARENT_R2 EVENT_RETAIN (R2: process INFORMATIONAL Response) | V2_CREATE_I0: category: established IKE SA flags: 0: | -> V2_CREATE_I EVENT_RETRANSMIT send-request (Initiate CREATE_CHILD_SA IPsec SA) | V2_CREATE_I: category: established IKE SA flags: 0: | -> V2_IPSEC_I EVENT_SA_REPLACE (Process CREATE_CHILD_SA IPsec SA Response) | V2_REKEY_IKE_I0: category: established IKE SA flags: 0: | -> V2_REKEY_IKE_I EVENT_RETRANSMIT send-request (Initiate CREATE_CHILD_SA IKE Rekey) | V2_REKEY_IKE_I: category: established IKE SA flags: 0: | -> PARENT_I3 EVENT_SA_REPLACE (Process CREATE_CHILD_SA IKE Rekey Response) | V2_REKEY_CHILD_I0: category: established IKE SA flags: 0: | -> V2_REKEY_CHILD_I EVENT_RETRANSMIT send-request (Initiate CREATE_CHILD_SA IPsec Rekey SA) | V2_REKEY_CHILD_I: category: established IKE SA flags: 0: | V2_CREATE_R: category: established IKE SA flags: 0: | -> V2_IPSEC_R EVENT_SA_REPLACE send-request (Respond to CREATE_CHILD_SA IPsec SA Request) | V2_REKEY_IKE_R: category: established IKE SA flags: 0: | -> PARENT_R2 EVENT_SA_REPLACE send-request (Respond to CREATE_CHILD_SA IKE Rekey) | V2_REKEY_CHILD_R: category: established IKE SA flags: 0: | V2_IPSEC_I: category: established CHILD SA flags: 0: | V2_IPSEC_R: category: established CHILD SA flags: 0: | IKESA_DEL: category: established IKE SA flags: 0: | -> IKESA_DEL EVENT_RETAIN (IKE_SA_DEL: process INFORMATIONAL) | CHILDSA_DEL: category: informational flags: 0: Using Linux XFRM/NETKEY IPsec interface code on 5.1.18-200.fc29.x86_64 | Hard-wiring algorithms | adding AES_CCM_16 to kernel algorithm db | adding AES_CCM_12 to kernel algorithm db | adding AES_CCM_8 to kernel algorithm db | adding 3DES_CBC to kernel algorithm db | adding CAMELLIA_CBC to kernel algorithm db | adding AES_GCM_16 to kernel algorithm db | adding AES_GCM_12 to kernel algorithm db | adding AES_GCM_8 to kernel algorithm db | adding AES_CTR to kernel algorithm db | adding AES_CBC to kernel algorithm db | adding SERPENT_CBC to kernel algorithm db | adding TWOFISH_CBC to kernel algorithm db | adding NULL_AUTH_AES_GMAC to kernel algorithm db | adding NULL to kernel algorithm db | adding CHACHA20_POLY1305 to kernel algorithm db | adding HMAC_MD5_96 to kernel algorithm db | adding HMAC_SHA1_96 to kernel algorithm db | adding HMAC_SHA2_512_256 to kernel algorithm db | adding HMAC_SHA2_384_192 to kernel algorithm db | adding HMAC_SHA2_256_128 to kernel algorithm db | adding HMAC_SHA2_256_TRUNCBUG to kernel algorithm db | adding AES_XCBC_96 to kernel algorithm db | adding AES_CMAC_96 to kernel algorithm db | adding NONE to kernel algorithm db | net.ipv6.conf.all.disable_ipv6=1 ignore ipv6 holes | global periodic timer EVENT_SHUNT_SCAN enabled with interval of 20 seconds | setup kernel fd callback | add_fd_read_event_handler: new KERNEL_XRM_FD-pe@0x55cbd9c87468 | libevent_malloc: new ptr-libevent@0x55cbd9cc63c8 size 128 | libevent_malloc: new ptr-libevent@0x55cbd9ccd548 size 16 | add_fd_read_event_handler: new KERNEL_ROUTE_FD-pe@0x55cbd9ccd4d8 | libevent_malloc: new ptr-libevent@0x55cbd9cc6478 size 128 | libevent_malloc: new ptr-libevent@0x55cbd9ccd1a8 size 16 | global one-shot timer EVENT_CHECK_CRLS initialized selinux support is enabled. | unbound context created - setting debug level to 5 | /etc/hosts lookups activated | /etc/resolv.conf usage activated | outgoing-port-avoid set 0-65535 | outgoing-port-permit set 32768-60999 | Loading dnssec root key from:/var/lib/unbound/root.key | No additional dnssec trust anchors defined via dnssec-trusted= option | Setting up events, loop start | add_fd_read_event_handler: new PLUTO_CTL_FD-pe@0x55cbd9ccd978 | libevent_malloc: new ptr-libevent@0x55cbd9cd97d8 size 128 | libevent_malloc: new ptr-libevent@0x55cbd9ce4ac8 size 16 | libevent_realloc: new ptr-libevent@0x55cbd9ce4b08 size 256 | libevent_malloc: new ptr-libevent@0x55cbd9ce4c38 size 8 | libevent_realloc: new ptr-libevent@0x55cbd9ce4c78 size 144 | libevent_malloc: new ptr-libevent@0x55cbd9c8ba38 size 152 | libevent_malloc: new ptr-libevent@0x55cbd9ce4d38 size 16 | signal event handler PLUTO_SIGCHLD installed | libevent_malloc: new ptr-libevent@0x55cbd9ce4d78 size 8 | libevent_malloc: new ptr-libevent@0x55cbd9c01e28 size 152 | signal event handler PLUTO_SIGTERM installed | libevent_malloc: new ptr-libevent@0x55cbd9ce4db8 size 8 | libevent_malloc: new ptr-libevent@0x55cbd9c0ca18 size 152 | signal event handler PLUTO_SIGHUP installed | libevent_malloc: new ptr-libevent@0x55cbd9ce4df8 size 8 | libevent_realloc: release ptr-libevent@0x55cbd9ce4c78 | libevent_realloc: new ptr-libevent@0x55cbd9ce4e38 size 256 | libevent_malloc: new ptr-libevent@0x55cbd9c04878 size 152 | signal event handler PLUTO_SIGSYS installed | created addconn helper (pid:14753) using fork+execve | forked child 14753 | accept(whackctlfd, (struct sockaddr *)&whackaddr, &whackaddrlen) -> fd@16 (in whack_handle() at rcv_whack.c:722) listening for IKE messages | Inspecting interface lo | found lo with address 127.0.0.1 | Inspecting interface eth0 | found eth0 with address 192.0.2.254 | Inspecting interface eth1 | found eth1 with address 192.1.2.23 Kernel supports NIC esp-hw-offload adding interface eth1/eth1 (esp-hw-offload not supported by kernel) 192.1.2.23:500 | NAT-Traversal: Trying sockopt style NAT-T | NAT-Traversal: ESPINUDP(2) setup succeeded for sockopt style NAT-T family IPv4 adding interface eth1/eth1 192.1.2.23:4500 adding interface eth0/eth0 (esp-hw-offload not supported by kernel) 192.0.2.254:500 | NAT-Traversal: Trying sockopt style NAT-T | NAT-Traversal: ESPINUDP(2) setup succeeded for sockopt style NAT-T family IPv4 adding interface eth0/eth0 192.0.2.254:4500 adding interface lo/lo (esp-hw-offload not supported by kernel) 127.0.0.1:500 | NAT-Traversal: Trying sockopt style NAT-T | NAT-Traversal: ESPINUDP(2) setup succeeded for sockopt style NAT-T family IPv4 adding interface lo/lo 127.0.0.1:4500 | no interfaces to sort | FOR_EACH_UNORIENTED_CONNECTION_... in check_orientations | add_fd_read_event_handler: new ethX-pe@0x55cbd9ce53f8 | libevent_malloc: new ptr-libevent@0x55cbd9cd9728 size 128 | libevent_malloc: new ptr-libevent@0x55cbd9ce5468 size 16 | setup callback for interface lo 127.0.0.1:4500 fd 22 | add_fd_read_event_handler: new ethX-pe@0x55cbd9ce54a8 | libevent_malloc: new ptr-libevent@0x55cbd9c7ff28 size 128 | libevent_malloc: new ptr-libevent@0x55cbd9ce5518 size 16 | setup callback for interface lo 127.0.0.1:500 fd 21 | add_fd_read_event_handler: new ethX-pe@0x55cbd9ce5558 | libevent_malloc: new ptr-libevent@0x55cbd9c7ffd8 size 128 | libevent_malloc: new ptr-libevent@0x55cbd9ce55c8 size 16 | setup callback for interface eth0 192.0.2.254:4500 fd 20 | add_fd_read_event_handler: new ethX-pe@0x55cbd9ce5608 | libevent_malloc: new ptr-libevent@0x55cbd9c7ef98 size 128 | libevent_malloc: new ptr-libevent@0x55cbd9ce5678 size 16 | setup callback for interface eth0 192.0.2.254:500 fd 19 | add_fd_read_event_handler: new ethX-pe@0x55cbd9ce56b8 | libevent_malloc: new ptr-libevent@0x55cbd9c872a8 size 128 | libevent_malloc: new ptr-libevent@0x55cbd9ce5728 size 16 | setup callback for interface eth1 192.1.2.23:4500 fd 18 | add_fd_read_event_handler: new ethX-pe@0x55cbd9ce5768 | libevent_malloc: new ptr-libevent@0x55cbd9c87dc8 size 128 | libevent_malloc: new ptr-libevent@0x55cbd9ce57d8 size 16 | setup callback for interface eth1 192.1.2.23:500 fd 17 | certs and keys locked by 'free_preshared_secrets' | certs and keys unlocked by 'free_preshared_secrets' loading secrets from "/etc/ipsec.secrets" | saving Modulus | saving PublicExponent | ignoring PrivateExponent | ignoring Prime1 | ignoring Prime2 | ignoring Exponent1 | ignoring Exponent2 | ignoring Coefficient | ignoring CKAIDNSS | computed rsa CKAID 61 55 99 73 d3 ac ef 7d 3a 37 0e 3e 82 ad 92 c1 | computed rsa CKAID 8a 82 25 f1 loaded private key for keyid: PKK_RSA:AQO9bJbr3 | certs and keys locked by 'process_secret' | certs and keys unlocked by 'process_secret' | close_any(fd@16) (in whack_process() at rcv_whack.c:700) | spent 1.5 milliseconds in whack | accept(whackctlfd, (struct sockaddr *)&whackaddr, &whackaddrlen) -> fd@16 (in whack_handle() at rcv_whack.c:722) listening for IKE messages | Inspecting interface lo | found lo with address 127.0.0.1 | Inspecting interface eth0 | found eth0 with address 192.0.2.254 | Inspecting interface eth1 | found eth1 with address 192.1.2.23 | no interfaces to sort | libevent_free: release ptr-libevent@0x55cbd9cd9728 | free_event_entry: release EVENT_NULL-pe@0x55cbd9ce53f8 | add_fd_read_event_handler: new ethX-pe@0x55cbd9ce53f8 | libevent_malloc: new ptr-libevent@0x55cbd9cd9728 size 128 | setup callback for interface lo 127.0.0.1:4500 fd 22 | libevent_free: release ptr-libevent@0x55cbd9c7ff28 | free_event_entry: release EVENT_NULL-pe@0x55cbd9ce54a8 | add_fd_read_event_handler: new ethX-pe@0x55cbd9ce54a8 | libevent_malloc: new ptr-libevent@0x55cbd9c7ff28 size 128 | setup callback for interface lo 127.0.0.1:500 fd 21 | libevent_free: release ptr-libevent@0x55cbd9c7ffd8 | free_event_entry: release EVENT_NULL-pe@0x55cbd9ce5558 | add_fd_read_event_handler: new ethX-pe@0x55cbd9ce5558 | libevent_malloc: new ptr-libevent@0x55cbd9c7ffd8 size 128 | setup callback for interface eth0 192.0.2.254:4500 fd 20 | libevent_free: release ptr-libevent@0x55cbd9c7ef98 | free_event_entry: release EVENT_NULL-pe@0x55cbd9ce5608 | add_fd_read_event_handler: new ethX-pe@0x55cbd9ce5608 | libevent_malloc: new ptr-libevent@0x55cbd9c7ef98 size 128 | setup callback for interface eth0 192.0.2.254:500 fd 19 | libevent_free: release ptr-libevent@0x55cbd9c872a8 | free_event_entry: release EVENT_NULL-pe@0x55cbd9ce56b8 | add_fd_read_event_handler: new ethX-pe@0x55cbd9ce56b8 | libevent_malloc: new ptr-libevent@0x55cbd9c872a8 size 128 | setup callback for interface eth1 192.1.2.23:4500 fd 18 | libevent_free: release ptr-libevent@0x55cbd9c87dc8 | free_event_entry: release EVENT_NULL-pe@0x55cbd9ce5768 | add_fd_read_event_handler: new ethX-pe@0x55cbd9ce5768 | libevent_malloc: new ptr-libevent@0x55cbd9c87dc8 size 128 | setup callback for interface eth1 192.1.2.23:500 fd 17 | certs and keys locked by 'free_preshared_secrets' forgetting secrets | certs and keys unlocked by 'free_preshared_secrets' loading secrets from "/etc/ipsec.secrets" | saving Modulus | saving PublicExponent | ignoring PrivateExponent | ignoring Prime1 | ignoring Prime2 | ignoring Exponent1 | ignoring Exponent2 | ignoring Coefficient | ignoring CKAIDNSS | computed rsa CKAID 61 55 99 73 d3 ac ef 7d 3a 37 0e 3e 82 ad 92 c1 | computed rsa CKAID 8a 82 25 f1 loaded private key for keyid: PKK_RSA:AQO9bJbr3 | certs and keys locked by 'process_secret' | certs and keys unlocked by 'process_secret' | close_any(fd@16) (in whack_process() at rcv_whack.c:700) | spent 0.555 milliseconds in whack | processing signal PLUTO_SIGCHLD | waitpid returned pid 14753 (exited with status 0) | reaped addconn helper child (status 0) | waitpid returned ECHILD (no child processes left) | spent 0.0147 milliseconds in signal handler PLUTO_SIGCHLD | accept(whackctlfd, (struct sockaddr *)&whackaddr, &whackaddrlen) -> fd@16 (in whack_handle() at rcv_whack.c:722) | FOR_EACH_CONNECTION_... in conn_by_name | FOR_EACH_CONNECTION_... in foreach_connection_by_alias | FOR_EACH_CONNECTION_... in conn_by_name | FOR_EACH_CONNECTION_... in foreach_connection_by_alias | FOR_EACH_CONNECTION_... in conn_by_name | Added new connection westnet-eastnet-ikev2 with policy RSASIG+ENCRYPT+TUNNEL+PFS+IKEV2_ALLOW+SAREF_TRACK+IKE_FRAG_ALLOW+ESN_NO | ike (phase1) algorithm values: AES_GCM_16_256-HMAC_SHA2_512+HMAC_SHA2_256-MODP2048+MODP3072+MODP4096+MODP8192+DH19+DH20+DH21+DH31, AES_GCM_16_128-HMAC_SHA2_512+HMAC_SHA2_256-MODP2048+MODP3072+MODP4096+MODP8192+DH19+DH20+DH21+DH31, AES_CBC_256-HMAC_SHA2_512+HMAC_SHA2_256-MODP2048+MODP3072+MODP4096+MODP8192+DH19+DH20+DH21+DH31, AES_CBC_128-HMAC_SHA2_512+HMAC_SHA2_256-MODP2048+MODP3072+MODP4096+MODP8192+DH19+DH20+DH21+DH31 | from whack: got --esp= | ESP/AH string values: AES_GCM_16_256-NONE, AES_GCM_16_128-NONE, AES_CBC_256-HMAC_SHA2_512_256+HMAC_SHA2_256_128, AES_CBC_128-HMAC_SHA2_512_256+HMAC_SHA2_256_128 | counting wild cards for %fromcert is 0 | counting wild cards for @east is 0 | connect_to_host_pair: 192.1.2.23:500 192.1.2.45:500 -> hp@(nil): none | new hp@0x55cbd9ce7f68 added connection description "westnet-eastnet-ikev2" | ike_life: 3600s; ipsec_life: 28800s; rekey_margin: 540s; rekey_fuzz: 100%; keyingtries: 0; replay_window: 32; policy: RSASIG+ENCRYPT+TUNNEL+PFS+IKEV2_ALLOW+SAREF_TRACK+IKE_FRAG_ALLOW+ESN_NO | 192.0.2.0/24===192.1.2.23<192.1.2.23>[@east]...192.1.2.45<192.1.2.45>[%fromcert]===192.0.1.0/24 | close_any(fd@16) (in whack_process() at rcv_whack.c:700) | spent 0.209 milliseconds in whack | accept(whackctlfd, (struct sockaddr *)&whackaddr, &whackaddrlen) -> fd@16 (in whack_handle() at rcv_whack.c:722) add keyid @east | add pubkey 01 03 bd 6c 96 eb df 78 89 b3 ed 77 0d a1 7f 7b | add pubkey e5 16 c2 c9 e4 7d 92 0a 90 9d 55 43 b4 62 13 03 | add pubkey 85 7a e0 26 7b 54 1f ca 09 93 cf ff 25 c9 02 4c | add pubkey 78 ca 94 e5 3e ac d1 f9 a8 e5 bb 7f cc 20 84 e0 | add pubkey 21 c9 f0 0d c5 44 ba f3 48 64 61 58 f6 0f 63 0d | add pubkey d2 67 1e 59 8b ec f3 50 39 71 fb 39 da 11 64 b6 | add pubkey 62 cd 5f d3 8d 2e c1 50 ed 9c 6e 22 0c 39 a7 ce | add pubkey 62 b5 af 8a 80 0f 2e 4c 05 5c 82 c7 8d 29 02 2e | add pubkey bb 23 5f db f2 9e b5 7d e2 20 70 1a 63 f3 8e 5d | add pubkey ac 47 f0 5c 26 4e b1 d0 42 60 52 4a b0 77 25 ce | add pubkey e0 98 2b 43 f4 c7 59 1a 64 01 83 ea 4e e3 1a 2a | add pubkey 92 b8 55 ab 63 dd 4b 70 47 29 dc e9 b4 60 bf 43 | add pubkey 4d 58 8f 64 73 95 70 ac 35 89 b2 c2 9c d4 62 c0 | add pubkey 5f 56 5f ad 1b e5 dd 49 93 6a f5 23 82 ed d4 e7 | add pubkey d5 f1 55 f2 2d a2 26 a6 36 53 2f 94 fb 99 22 5c | add pubkey 47 cc 6d 80 30 88 96 38 0c f5 f2 ed 37 d0 09 d5 | add pubkey 07 8f 69 ef a9 99 ce 4d 1a 77 9e 39 c4 38 f3 c5 | add pubkey 51 51 48 ef | computed rsa CKAID 61 55 99 73 d3 ac ef 7d 3a 37 0e 3e 82 ad 92 c1 | computed rsa CKAID 8a 82 25 f1 | close_any(fd@16) (in whack_process() at rcv_whack.c:700) | spent 0.0919 milliseconds in whack | accept(whackctlfd, (struct sockaddr *)&whackaddr, &whackaddrlen) -> fd@16 (in whack_handle() at rcv_whack.c:722) | FOR_EACH_CONNECTION_... in show_connections_status | FOR_EACH_CONNECTION_... in show_connections_status | FOR_EACH_STATE_... in show_states_status (sort_states) | close_any(fd@16) (in whack_process() at rcv_whack.c:700) | spent 0.337 milliseconds in whack | spent 0.00565 milliseconds in comm_handle_cb() calling check_incoming_msg_errqueue() | *received 828 bytes from 192.1.2.45:500 on eth1 (192.1.2.23:500) | 16 6a bf 80 5a 2e 72 e5 00 00 00 00 00 00 00 00 | 21 20 22 08 00 00 00 00 00 00 03 3c 22 00 01 b4 | 02 00 00 64 01 01 00 0b 03 00 00 0c 01 00 00 14 | 80 0e 01 00 03 00 00 08 02 00 00 07 03 00 00 08 | 02 00 00 05 03 00 00 08 04 00 00 0e 03 00 00 08 | 04 00 00 0f 03 00 00 08 04 00 00 10 03 00 00 08 | 04 00 00 12 03 00 00 08 04 00 00 13 03 00 00 08 | 04 00 00 14 03 00 00 08 04 00 00 15 00 00 00 08 | 04 00 00 1f 02 00 00 64 02 01 00 0b 03 00 00 0c | 01 00 00 14 80 0e 00 80 03 00 00 08 02 00 00 07 | 03 00 00 08 02 00 00 05 03 00 00 08 04 00 00 0e | 03 00 00 08 04 00 00 0f 03 00 00 08 04 00 00 10 | 03 00 00 08 04 00 00 12 03 00 00 08 04 00 00 13 | 03 00 00 08 04 00 00 14 03 00 00 08 04 00 00 15 | 00 00 00 08 04 00 00 1f 02 00 00 74 03 01 00 0d | 03 00 00 0c 01 00 00 0c 80 0e 01 00 03 00 00 08 | 02 00 00 07 03 00 00 08 02 00 00 05 03 00 00 08 | 03 00 00 0e 03 00 00 08 03 00 00 0c 03 00 00 08 | 04 00 00 0e 03 00 00 08 04 00 00 0f 03 00 00 08 | 04 00 00 10 03 00 00 08 04 00 00 12 03 00 00 08 | 04 00 00 13 03 00 00 08 04 00 00 14 03 00 00 08 | 04 00 00 15 00 00 00 08 04 00 00 1f 00 00 00 74 | 04 01 00 0d 03 00 00 0c 01 00 00 0c 80 0e 00 80 | 03 00 00 08 02 00 00 07 03 00 00 08 02 00 00 05 | 03 00 00 08 03 00 00 0e 03 00 00 08 03 00 00 0c | 03 00 00 08 04 00 00 0e 03 00 00 08 04 00 00 0f | 03 00 00 08 04 00 00 10 03 00 00 08 04 00 00 12 | 03 00 00 08 04 00 00 13 03 00 00 08 04 00 00 14 | 03 00 00 08 04 00 00 15 00 00 00 08 04 00 00 1f | 28 00 01 08 00 0e 00 00 de 40 70 61 42 04 a2 b7 | db ac 56 51 cd 00 7a 48 1f df 32 cd 9b ec 17 59 | 9d cc d2 9b 18 89 99 57 e2 ad 8b 59 f5 84 e8 9a | 3b a7 ed 3f 03 a4 3c 5e 64 06 42 34 8b 0b 8d 14 | eb da 2c 93 13 34 89 79 ac b3 fb 3e 59 0b 5d 37 | d0 ad fa 1a 2c 4a 25 bd 6f 71 7f e3 3b d1 b5 0a | c2 a6 10 6c 19 b4 5f 41 8c 8e 3f 91 73 09 0b 68 | 79 85 b4 d2 4e d4 58 2d b0 30 02 4f 6d 9a da 7c | 4b fa 86 1b 39 c1 d6 20 2a 22 39 ab c7 4b b6 5a | 97 a0 4b e7 3e b6 ea 87 9b 09 61 20 40 f9 6c c4 | af 3c 7a 56 40 4d 9e f1 fd 9e 22 72 2f 74 21 66 | 77 6d 70 df f8 5a a7 89 c3 48 f5 70 61 13 43 ca | cb bb 7a ba 85 f7 fc 2d 0f 5d 83 f6 5c 92 ce c1 | 27 87 28 fc de 13 26 a8 7d 26 7e 02 cb e0 00 25 | a0 2b 52 08 c2 43 61 ed d1 4e bf c0 db e0 d0 54 | c7 b5 96 1f dc dc f0 cb d4 aa fd 51 ef b3 e5 24 | 74 dd 46 c3 e9 f9 cc 40 29 00 00 24 57 6f e5 62 | 15 bc ba 19 56 30 ae ab e7 9e 46 e8 77 79 15 c9 | 2c af ef 7a 78 9e 96 24 0a 6d 7e 8e 29 00 00 08 | 00 00 40 2e 29 00 00 1c 00 00 40 04 b6 95 b0 c8 | b5 e9 28 c5 bb 21 e0 a9 19 5f 85 5e 9e ef 3e 48 | 00 00 00 1c 00 00 40 05 78 5d 73 92 4a 27 ca 8b | af f4 05 c4 11 10 e3 02 4c a5 9a 8f | start processing: from 192.1.2.45:500 (in process_md() at demux.c:378) | **parse ISAKMP Message: | initiator cookie: | 16 6a bf 80 5a 2e 72 e5 | responder cookie: | 00 00 00 00 00 00 00 00 | next payload type: ISAKMP_NEXT_v2SA (0x21) | ISAKMP version: IKEv2 version 2.0 (rfc4306/rfc5996) (0x20) | exchange type: ISAKMP_v2_IKE_SA_INIT (0x22) | flags: ISAKMP_FLAG_v2_IKE_INIT (0x8) | Message ID: 0 (0x0) | length: 828 (0x33c) | processing version=2.0 packet with exchange type=ISAKMP_v2_IKE_SA_INIT (34) | I am the IKE SA Original Responder receiving an IKEv2 IKE_SA_INIT request | State DB: IKEv2 state not found (find_v2_ike_sa_by_initiator_spi) | Now let's proceed with payload (ISAKMP_NEXT_v2SA) | ***parse IKEv2 Security Association Payload: | next payload type: ISAKMP_NEXT_v2KE (0x22) | flags: none (0x0) | length: 436 (0x1b4) | processing payload: ISAKMP_NEXT_v2SA (len=432) | Now let's proceed with payload (ISAKMP_NEXT_v2KE) | ***parse IKEv2 Key Exchange Payload: | next payload type: ISAKMP_NEXT_v2Ni (0x28) | flags: none (0x0) | length: 264 (0x108) | DH group: OAKLEY_GROUP_MODP2048 (0xe) | processing payload: ISAKMP_NEXT_v2KE (len=256) | Now let's proceed with payload (ISAKMP_NEXT_v2Ni) | ***parse IKEv2 Nonce Payload: | next payload type: ISAKMP_NEXT_v2N (0x29) | flags: none (0x0) | length: 36 (0x24) | processing payload: ISAKMP_NEXT_v2Ni (len=32) | Now let's proceed with payload (ISAKMP_NEXT_v2N) | ***parse IKEv2 Notify Payload: | next payload type: ISAKMP_NEXT_v2N (0x29) | flags: none (0x0) | length: 8 (0x8) | Protocol ID: PROTO_v2_RESERVED (0x0) | SPI size: 0 (0x0) | Notify Message Type: v2N_IKEV2_FRAGMENTATION_SUPPORTED (0x402e) | processing payload: ISAKMP_NEXT_v2N (len=0) | Now let's proceed with payload (ISAKMP_NEXT_v2N) | ***parse IKEv2 Notify Payload: | next payload type: ISAKMP_NEXT_v2N (0x29) | flags: none (0x0) | length: 28 (0x1c) | Protocol ID: PROTO_v2_RESERVED (0x0) | SPI size: 0 (0x0) | Notify Message Type: v2N_NAT_DETECTION_SOURCE_IP (0x4004) | processing payload: ISAKMP_NEXT_v2N (len=20) | Now let's proceed with payload (ISAKMP_NEXT_v2N) | ***parse IKEv2 Notify Payload: | next payload type: ISAKMP_NEXT_v2NONE (0x0) | flags: none (0x0) | length: 28 (0x1c) | Protocol ID: PROTO_v2_RESERVED (0x0) | SPI size: 0 (0x0) | Notify Message Type: v2N_NAT_DETECTION_DESTINATION_IP (0x4005) | processing payload: ISAKMP_NEXT_v2N (len=20) | DDOS disabled and no cookie sent, continuing | find_host_connection local=192.1.2.23:500 remote=192.1.2.45:500 policy=ECDSA+IKEV2_ALLOW but ignoring ports | find_host_pair: comparing 192.1.2.23:500 to 192.1.2.45:500 but ignoring ports | find_next_host_connection policy=ECDSA+IKEV2_ALLOW | found policy = RSASIG+ENCRYPT+TUNNEL+PFS+IKEV2_ALLOW+SAREF_TRACK+IKE_FRAG_ALLOW+ESN_NO (westnet-eastnet-ikev2) | find_next_host_connection returns empty | find_host_connection local=192.1.2.23:500 remote= policy=ECDSA+IKEV2_ALLOW but ignoring ports | find_next_host_connection policy=ECDSA+IKEV2_ALLOW | find_next_host_connection returns empty | initial parent SA message received on 192.1.2.23:500 but no connection has been authorized with policy ECDSA+IKEV2_ALLOW | find_host_connection local=192.1.2.23:500 remote=192.1.2.45:500 policy=RSASIG+IKEV2_ALLOW but ignoring ports | find_host_pair: comparing 192.1.2.23:500 to 192.1.2.45:500 but ignoring ports | find_next_host_connection policy=RSASIG+IKEV2_ALLOW | found policy = RSASIG+ENCRYPT+TUNNEL+PFS+IKEV2_ALLOW+SAREF_TRACK+IKE_FRAG_ALLOW+ESN_NO (westnet-eastnet-ikev2) | find_next_host_connection returns westnet-eastnet-ikev2 | find_next_host_connection policy=RSASIG+IKEV2_ALLOW | find_next_host_connection returns empty | found connection: westnet-eastnet-ikev2 with policy RSASIG+IKEV2_ALLOW | creating state object #1 at 0x55cbd9ce9dc8 | State DB: adding IKEv2 state #1 in UNDEFINED | pstats #1 ikev2.ike started | Message ID: init #1: msgid=0 lastack=4294967295 nextuse=0 lastrecv=4294967295 lastreplied=0 | parent state #1: UNDEFINED(ignore) => PARENT_R0(half-open IKE SA) | Message ID: init_ike #1; ike: initiator.sent=0->-1 initiator.recv=0->-1 responder.sent=0->-1 responder.recv=0->-1 wip.initiator=0->-1 wip.responder=0->-1 | start processing: state #1 connection "westnet-eastnet-ikev2" from 192.1.2.45 (in ikev2_process_packet() at ikev2.c:2016) | State DB: IKEv2 state not found (find_v2_sa_by_responder_wip) | [RE]START processing: state #1 connection "westnet-eastnet-ikev2" from 192.1.2.45 (in ike_process_packet() at ikev2.c:2064) | #1 st.st_msgid_lastrecv -1 md.hdr.isa_msgid 00000000 | Message ID: #1 not a duplicate - message is new; initiator.sent=-1 initiator.recv=-1 responder.sent=-1 responder.recv=-1 | Message ID: start-responder #1 request 0; ike: initiator.sent=-1 initiator.recv=-1 responder.sent=-1 responder.recv=-1 wip.initiator=-1 wip.responder=-1->0 | #1 in state PARENT_R0: processing SA_INIT request | selected state microcode Respond to IKE_SA_INIT | Now let's proceed with state specific processing | calling processor Respond to IKE_SA_INIT | #1 updating local interface from 192.1.2.23:500 to 192.1.2.23:500 using md->iface (in update_ike_endpoints() at state.c:2669) | constructing local IKE proposals for westnet-eastnet-ikev2 (IKE SA responder matching remote proposals) | converting ike_info AES_GCM_16_256-HMAC_SHA2_512+HMAC_SHA2_256-MODP2048+MODP3072+MODP4096+MODP8192+DH19+DH20+DH21+DH31 to ikev2 ... | ... ikev2_proposal: 1:IKE:ENCR=AES_GCM_C_256;PRF=HMAC_SHA2_512,HMAC_SHA2_256;INTEG=NONE;DH=MODP2048,MODP3072,MODP4096,MODP8192,ECP_256,ECP_384,ECP_521,CURVE25519 | converting ike_info AES_GCM_16_128-HMAC_SHA2_512+HMAC_SHA2_256-MODP2048+MODP3072+MODP4096+MODP8192+DH19+DH20+DH21+DH31 to ikev2 ... | ... ikev2_proposal: 2:IKE:ENCR=AES_GCM_C_128;PRF=HMAC_SHA2_512,HMAC_SHA2_256;INTEG=NONE;DH=MODP2048,MODP3072,MODP4096,MODP8192,ECP_256,ECP_384,ECP_521,CURVE25519 | converting ike_info AES_CBC_256-HMAC_SHA2_512+HMAC_SHA2_256-MODP2048+MODP3072+MODP4096+MODP8192+DH19+DH20+DH21+DH31 to ikev2 ... | ... ikev2_proposal: 3:IKE:ENCR=AES_CBC_256;PRF=HMAC_SHA2_512,HMAC_SHA2_256;INTEG=HMAC_SHA2_512_256,HMAC_SHA2_256_128;DH=MODP2048,MODP3072,MODP4096,MODP8192,ECP_256,ECP_384,ECP_521,CURVE25519 | converting ike_info AES_CBC_128-HMAC_SHA2_512+HMAC_SHA2_256-MODP2048+MODP3072+MODP4096+MODP8192+DH19+DH20+DH21+DH31 to ikev2 ... | ... ikev2_proposal: 4:IKE:ENCR=AES_CBC_128;PRF=HMAC_SHA2_512,HMAC_SHA2_256;INTEG=HMAC_SHA2_512_256,HMAC_SHA2_256_128;DH=MODP2048,MODP3072,MODP4096,MODP8192,ECP_256,ECP_384,ECP_521,CURVE25519 "westnet-eastnet-ikev2": constructed local IKE proposals for westnet-eastnet-ikev2 (IKE SA responder matching remote proposals): 1:IKE:ENCR=AES_GCM_C_256;PRF=HMAC_SHA2_512,HMAC_SHA2_256;INTEG=NONE;DH=MODP2048,MODP3072,MODP4096,MODP8192,ECP_256,ECP_384,ECP_521,CURVE25519 2:IKE:ENCR=AES_GCM_C_128;PRF=HMAC_SHA2_512,HMAC_SHA2_256;INTEG=NONE;DH=MODP2048,MODP3072,MODP4096,MODP8192,ECP_256,ECP_384,ECP_521,CURVE25519 3:IKE:ENCR=AES_CBC_256;PRF=HMAC_SHA2_512,HMAC_SHA2_256;INTEG=HMAC_SHA2_512_256,HMAC_SHA2_256_128;DH=MODP2048,MODP3072,MODP4096,MODP8192,ECP_256,ECP_384,ECP_521,CURVE25519 4:IKE:ENCR=AES_CBC_128;PRF=HMAC_SHA2_512,HMAC_SHA2_256;INTEG=HMAC_SHA2_512_256,HMAC_SHA2_256_128;DH=MODP2048,MODP3072,MODP4096,MODP8192,ECP_256,ECP_384,ECP_521,CURVE25519 | Comparing remote proposals against IKE responder 4 local proposals | local proposal 1 type ENCR has 1 transforms | local proposal 1 type PRF has 2 transforms | local proposal 1 type INTEG has 1 transforms | local proposal 1 type DH has 8 transforms | local proposal 1 type ESN has 0 transforms | local proposal 1 transforms: required: ENCR+PRF+DH; optional: INTEG | local proposal 2 type ENCR has 1 transforms | local proposal 2 type PRF has 2 transforms | local proposal 2 type INTEG has 1 transforms | local proposal 2 type DH has 8 transforms | local proposal 2 type ESN has 0 transforms | local proposal 2 transforms: required: ENCR+PRF+DH; optional: INTEG | local proposal 3 type ENCR has 1 transforms | local proposal 3 type PRF has 2 transforms | local proposal 3 type INTEG has 2 transforms | local proposal 3 type DH has 8 transforms | local proposal 3 type ESN has 0 transforms | local proposal 3 transforms: required: ENCR+PRF+INTEG+DH; optional: none | local proposal 4 type ENCR has 1 transforms | local proposal 4 type PRF has 2 transforms | local proposal 4 type INTEG has 2 transforms | local proposal 4 type DH has 8 transforms | local proposal 4 type ESN has 0 transforms | local proposal 4 transforms: required: ENCR+PRF+INTEG+DH; optional: none | ****parse IKEv2 Proposal Substructure Payload: | last proposal: v2_PROPOSAL_NON_LAST (0x2) | length: 100 (0x64) | prop #: 1 (0x1) | proto ID: IKEv2_SEC_PROTO_IKE (0x1) | spi size: 0 (0x0) | # transforms: 11 (0xb) | Comparing remote proposal 1 containing 11 transforms against local proposal [1..4] of 4 local proposals | *****parse IKEv2 Transform Substructure Payload: | last transform: v2_TRANSFORM_NON_LAST (0x3) | length: 12 (0xc) | IKEv2 transform type: TRANS_TYPE_ENCR (0x1) | IKEv2 transform ID: AES_GCM_C (0x14) | ******parse IKEv2 Attribute Substructure Payload: | af+type: AF+IKEv2_KEY_LENGTH (0x800e) | length/value: 256 (0x100) | remote proposal 1 transform 0 (ENCR=AES_GCM_C_256) matches local proposal 1 type 1 (ENCR) transform 0 | *****parse IKEv2 Transform Substructure Payload: | last transform: v2_TRANSFORM_NON_LAST (0x3) | length: 8 (0x8) | IKEv2 transform type: TRANS_TYPE_PRF (0x2) | IKEv2 transform ID: PRF_HMAC_SHA2_512 (0x7) | remote proposal 1 transform 1 (PRF=HMAC_SHA2_512) matches local proposal 1 type 2 (PRF) transform 0 | remote proposal 1 transform 1 (PRF=HMAC_SHA2_512) matches local proposal 2 type 2 (PRF) transform 0 | remote proposal 1 transform 1 (PRF=HMAC_SHA2_512) matches local proposal 3 type 2 (PRF) transform 0 | remote proposal 1 transform 1 (PRF=HMAC_SHA2_512) matches local proposal 4 type 2 (PRF) transform 0 | *****parse IKEv2 Transform Substructure Payload: | last transform: v2_TRANSFORM_NON_LAST (0x3) | length: 8 (0x8) | IKEv2 transform type: TRANS_TYPE_PRF (0x2) | IKEv2 transform ID: PRF_HMAC_SHA2_256 (0x5) | *****parse IKEv2 Transform Substructure Payload: | last transform: v2_TRANSFORM_NON_LAST (0x3) | length: 8 (0x8) | IKEv2 transform type: TRANS_TYPE_DH (0x4) | IKEv2 transform ID: OAKLEY_GROUP_MODP2048 (0xe) | remote proposal 1 transform 3 (DH=MODP2048) matches local proposal 1 type 4 (DH) transform 0 | remote proposal 1 transform 3 (DH=MODP2048) matches local proposal 2 type 4 (DH) transform 0 | remote proposal 1 transform 3 (DH=MODP2048) matches local proposal 3 type 4 (DH) transform 0 | remote proposal 1 transform 3 (DH=MODP2048) matches local proposal 4 type 4 (DH) transform 0 | *****parse IKEv2 Transform Substructure Payload: | last transform: v2_TRANSFORM_NON_LAST (0x3) | length: 8 (0x8) | IKEv2 transform type: TRANS_TYPE_DH (0x4) | IKEv2 transform ID: OAKLEY_GROUP_MODP3072 (0xf) | *****parse IKEv2 Transform Substructure Payload: | last transform: v2_TRANSFORM_NON_LAST (0x3) | length: 8 (0x8) | IKEv2 transform type: TRANS_TYPE_DH (0x4) | IKEv2 transform ID: OAKLEY_GROUP_MODP4096 (0x10) | *****parse IKEv2 Transform Substructure Payload: | last transform: v2_TRANSFORM_NON_LAST (0x3) | length: 8 (0x8) | IKEv2 transform type: TRANS_TYPE_DH (0x4) | IKEv2 transform ID: OAKLEY_GROUP_MODP8192 (0x12) | *****parse IKEv2 Transform Substructure Payload: | last transform: v2_TRANSFORM_NON_LAST (0x3) | length: 8 (0x8) | IKEv2 transform type: TRANS_TYPE_DH (0x4) | IKEv2 transform ID: OAKLEY_GROUP_ECP_256 (0x13) | *****parse IKEv2 Transform Substructure Payload: | last transform: v2_TRANSFORM_NON_LAST (0x3) | length: 8 (0x8) | IKEv2 transform type: TRANS_TYPE_DH (0x4) | IKEv2 transform ID: OAKLEY_GROUP_ECP_384 (0x14) | *****parse IKEv2 Transform Substructure Payload: | last transform: v2_TRANSFORM_NON_LAST (0x3) | length: 8 (0x8) | IKEv2 transform type: TRANS_TYPE_DH (0x4) | IKEv2 transform ID: OAKLEY_GROUP_ECP_521 (0x15) | *****parse IKEv2 Transform Substructure Payload: | last transform: v2_TRANSFORM_LAST (0x0) | length: 8 (0x8) | IKEv2 transform type: TRANS_TYPE_DH (0x4) | IKEv2 transform ID: OAKLEY_GROUP_CURVE25519 (0x1f) | remote proposal 1 proposed transforms: ENCR+PRF+DH; matched: ENCR+PRF+DH; unmatched: none | comparing remote proposal 1 containing ENCR+PRF+DH transforms to local proposal 1; required: ENCR+PRF+DH; optional: INTEG; matched: ENCR+PRF+DH | remote proposal 1 matches local proposal 1 | ****parse IKEv2 Proposal Substructure Payload: | last proposal: v2_PROPOSAL_NON_LAST (0x2) | length: 100 (0x64) | prop #: 2 (0x2) | proto ID: IKEv2_SEC_PROTO_IKE (0x1) | spi size: 0 (0x0) | # transforms: 11 (0xb) | Comparing remote proposal 2 containing 11 transforms against local proposal [1..0] of 4 local proposals | *****parse IKEv2 Transform Substructure Payload: | last transform: v2_TRANSFORM_NON_LAST (0x3) | length: 12 (0xc) | IKEv2 transform type: TRANS_TYPE_ENCR (0x1) | IKEv2 transform ID: AES_GCM_C (0x14) | ******parse IKEv2 Attribute Substructure Payload: | af+type: AF+IKEv2_KEY_LENGTH (0x800e) | length/value: 128 (0x80) | *****parse IKEv2 Transform Substructure Payload: | last transform: v2_TRANSFORM_NON_LAST (0x3) | length: 8 (0x8) | IKEv2 transform type: TRANS_TYPE_PRF (0x2) | IKEv2 transform ID: PRF_HMAC_SHA2_512 (0x7) | *****parse IKEv2 Transform Substructure Payload: | last transform: v2_TRANSFORM_NON_LAST (0x3) | length: 8 (0x8) | IKEv2 transform type: TRANS_TYPE_PRF (0x2) | IKEv2 transform ID: PRF_HMAC_SHA2_256 (0x5) | *****parse IKEv2 Transform Substructure Payload: | last transform: v2_TRANSFORM_NON_LAST (0x3) | length: 8 (0x8) | IKEv2 transform type: TRANS_TYPE_DH (0x4) | IKEv2 transform ID: OAKLEY_GROUP_MODP2048 (0xe) | *****parse IKEv2 Transform Substructure Payload: | last transform: v2_TRANSFORM_NON_LAST (0x3) | length: 8 (0x8) | IKEv2 transform type: TRANS_TYPE_DH (0x4) | IKEv2 transform ID: OAKLEY_GROUP_MODP3072 (0xf) | *****parse IKEv2 Transform Substructure Payload: | last transform: v2_TRANSFORM_NON_LAST (0x3) | length: 8 (0x8) | IKEv2 transform type: TRANS_TYPE_DH (0x4) | IKEv2 transform ID: OAKLEY_GROUP_MODP4096 (0x10) | *****parse IKEv2 Transform Substructure Payload: | last transform: v2_TRANSFORM_NON_LAST (0x3) | length: 8 (0x8) | IKEv2 transform type: TRANS_TYPE_DH (0x4) | IKEv2 transform ID: OAKLEY_GROUP_MODP8192 (0x12) | *****parse IKEv2 Transform Substructure Payload: | last transform: v2_TRANSFORM_NON_LAST (0x3) | length: 8 (0x8) | IKEv2 transform type: TRANS_TYPE_DH (0x4) | IKEv2 transform ID: OAKLEY_GROUP_ECP_256 (0x13) | *****parse IKEv2 Transform Substructure Payload: | last transform: v2_TRANSFORM_NON_LAST (0x3) | length: 8 (0x8) | IKEv2 transform type: TRANS_TYPE_DH (0x4) | IKEv2 transform ID: OAKLEY_GROUP_ECP_384 (0x14) | *****parse IKEv2 Transform Substructure Payload: | last transform: v2_TRANSFORM_NON_LAST (0x3) | length: 8 (0x8) | IKEv2 transform type: TRANS_TYPE_DH (0x4) | IKEv2 transform ID: OAKLEY_GROUP_ECP_521 (0x15) | *****parse IKEv2 Transform Substructure Payload: | last transform: v2_TRANSFORM_LAST (0x0) | length: 8 (0x8) | IKEv2 transform type: TRANS_TYPE_DH (0x4) | IKEv2 transform ID: OAKLEY_GROUP_CURVE25519 (0x1f) | remote proposal 2 proposed transforms: ENCR+PRF+DH; matched: none; unmatched: ENCR+PRF+DH | remote proposal 2 does not match; unmatched remote transforms: ENCR+PRF+DH | ****parse IKEv2 Proposal Substructure Payload: | last proposal: v2_PROPOSAL_NON_LAST (0x2) | length: 116 (0x74) | prop #: 3 (0x3) | proto ID: IKEv2_SEC_PROTO_IKE (0x1) | spi size: 0 (0x0) | # transforms: 13 (0xd) | Comparing remote proposal 3 containing 13 transforms against local proposal [1..0] of 4 local proposals | *****parse IKEv2 Transform Substructure Payload: | last transform: v2_TRANSFORM_NON_LAST (0x3) | length: 12 (0xc) | IKEv2 transform type: TRANS_TYPE_ENCR (0x1) | IKEv2 transform ID: AES_CBC (0xc) | ******parse IKEv2 Attribute Substructure Payload: | af+type: AF+IKEv2_KEY_LENGTH (0x800e) | length/value: 256 (0x100) | *****parse IKEv2 Transform Substructure Payload: | last transform: v2_TRANSFORM_NON_LAST (0x3) | length: 8 (0x8) | IKEv2 transform type: TRANS_TYPE_PRF (0x2) | IKEv2 transform ID: PRF_HMAC_SHA2_512 (0x7) | *****parse IKEv2 Transform Substructure Payload: | last transform: v2_TRANSFORM_NON_LAST (0x3) | length: 8 (0x8) | IKEv2 transform type: TRANS_TYPE_PRF (0x2) | IKEv2 transform ID: PRF_HMAC_SHA2_256 (0x5) | *****parse IKEv2 Transform Substructure Payload: | last transform: v2_TRANSFORM_NON_LAST (0x3) | length: 8 (0x8) | IKEv2 transform type: TRANS_TYPE_INTEG (0x3) | IKEv2 transform ID: AUTH_HMAC_SHA2_512_256 (0xe) | *****parse IKEv2 Transform Substructure Payload: | last transform: v2_TRANSFORM_NON_LAST (0x3) | length: 8 (0x8) | IKEv2 transform type: TRANS_TYPE_INTEG (0x3) | IKEv2 transform ID: AUTH_HMAC_SHA2_256_128 (0xc) | *****parse IKEv2 Transform Substructure Payload: | last transform: v2_TRANSFORM_NON_LAST (0x3) | length: 8 (0x8) | IKEv2 transform type: TRANS_TYPE_DH (0x4) | IKEv2 transform ID: OAKLEY_GROUP_MODP2048 (0xe) | *****parse IKEv2 Transform Substructure Payload: | last transform: v2_TRANSFORM_NON_LAST (0x3) | length: 8 (0x8) | IKEv2 transform type: TRANS_TYPE_DH (0x4) | IKEv2 transform ID: OAKLEY_GROUP_MODP3072 (0xf) | *****parse IKEv2 Transform Substructure Payload: | last transform: v2_TRANSFORM_NON_LAST (0x3) | length: 8 (0x8) | IKEv2 transform type: TRANS_TYPE_DH (0x4) | IKEv2 transform ID: OAKLEY_GROUP_MODP4096 (0x10) | *****parse IKEv2 Transform Substructure Payload: | last transform: v2_TRANSFORM_NON_LAST (0x3) | length: 8 (0x8) | IKEv2 transform type: TRANS_TYPE_DH (0x4) | IKEv2 transform ID: OAKLEY_GROUP_MODP8192 (0x12) | *****parse IKEv2 Transform Substructure Payload: | last transform: v2_TRANSFORM_NON_LAST (0x3) | length: 8 (0x8) | IKEv2 transform type: TRANS_TYPE_DH (0x4) | IKEv2 transform ID: OAKLEY_GROUP_ECP_256 (0x13) | *****parse IKEv2 Transform Substructure Payload: | last transform: v2_TRANSFORM_NON_LAST (0x3) | length: 8 (0x8) | IKEv2 transform type: TRANS_TYPE_DH (0x4) | IKEv2 transform ID: OAKLEY_GROUP_ECP_384 (0x14) | *****parse IKEv2 Transform Substructure Payload: | last transform: v2_TRANSFORM_NON_LAST (0x3) | length: 8 (0x8) | IKEv2 transform type: TRANS_TYPE_DH (0x4) | IKEv2 transform ID: OAKLEY_GROUP_ECP_521 (0x15) | *****parse IKEv2 Transform Substructure Payload: | last transform: v2_TRANSFORM_LAST (0x0) | length: 8 (0x8) | IKEv2 transform type: TRANS_TYPE_DH (0x4) | IKEv2 transform ID: OAKLEY_GROUP_CURVE25519 (0x1f) | remote proposal 3 proposed transforms: ENCR+PRF+INTEG+DH; matched: none; unmatched: ENCR+PRF+INTEG+DH | remote proposal 3 does not match; unmatched remote transforms: ENCR+PRF+INTEG+DH | ****parse IKEv2 Proposal Substructure Payload: | last proposal: v2_PROPOSAL_LAST (0x0) | length: 116 (0x74) | prop #: 4 (0x4) | proto ID: IKEv2_SEC_PROTO_IKE (0x1) | spi size: 0 (0x0) | # transforms: 13 (0xd) | Comparing remote proposal 4 containing 13 transforms against local proposal [1..0] of 4 local proposals | *****parse IKEv2 Transform Substructure Payload: | last transform: v2_TRANSFORM_NON_LAST (0x3) | length: 12 (0xc) | IKEv2 transform type: TRANS_TYPE_ENCR (0x1) | IKEv2 transform ID: AES_CBC (0xc) | ******parse IKEv2 Attribute Substructure Payload: | af+type: AF+IKEv2_KEY_LENGTH (0x800e) | length/value: 128 (0x80) | *****parse IKEv2 Transform Substructure Payload: | last transform: v2_TRANSFORM_NON_LAST (0x3) | length: 8 (0x8) | IKEv2 transform type: TRANS_TYPE_PRF (0x2) | IKEv2 transform ID: PRF_HMAC_SHA2_512 (0x7) | *****parse IKEv2 Transform Substructure Payload: | last transform: v2_TRANSFORM_NON_LAST (0x3) | length: 8 (0x8) | IKEv2 transform type: TRANS_TYPE_PRF (0x2) | IKEv2 transform ID: PRF_HMAC_SHA2_256 (0x5) | *****parse IKEv2 Transform Substructure Payload: | last transform: v2_TRANSFORM_NON_LAST (0x3) | length: 8 (0x8) | IKEv2 transform type: TRANS_TYPE_INTEG (0x3) | IKEv2 transform ID: AUTH_HMAC_SHA2_512_256 (0xe) | *****parse IKEv2 Transform Substructure Payload: | last transform: v2_TRANSFORM_NON_LAST (0x3) | length: 8 (0x8) | IKEv2 transform type: TRANS_TYPE_INTEG (0x3) | IKEv2 transform ID: AUTH_HMAC_SHA2_256_128 (0xc) | *****parse IKEv2 Transform Substructure Payload: | last transform: v2_TRANSFORM_NON_LAST (0x3) | length: 8 (0x8) | IKEv2 transform type: TRANS_TYPE_DH (0x4) | IKEv2 transform ID: OAKLEY_GROUP_MODP2048 (0xe) | *****parse IKEv2 Transform Substructure Payload: | last transform: v2_TRANSFORM_NON_LAST (0x3) | length: 8 (0x8) | IKEv2 transform type: TRANS_TYPE_DH (0x4) | IKEv2 transform ID: OAKLEY_GROUP_MODP3072 (0xf) | *****parse IKEv2 Transform Substructure Payload: | last transform: v2_TRANSFORM_NON_LAST (0x3) | length: 8 (0x8) | IKEv2 transform type: TRANS_TYPE_DH (0x4) | IKEv2 transform ID: OAKLEY_GROUP_MODP4096 (0x10) | *****parse IKEv2 Transform Substructure Payload: | last transform: v2_TRANSFORM_NON_LAST (0x3) | length: 8 (0x8) | IKEv2 transform type: TRANS_TYPE_DH (0x4) | IKEv2 transform ID: OAKLEY_GROUP_MODP8192 (0x12) | *****parse IKEv2 Transform Substructure Payload: | last transform: v2_TRANSFORM_NON_LAST (0x3) | length: 8 (0x8) | IKEv2 transform type: TRANS_TYPE_DH (0x4) | IKEv2 transform ID: OAKLEY_GROUP_ECP_256 (0x13) | *****parse IKEv2 Transform Substructure Payload: | last transform: v2_TRANSFORM_NON_LAST (0x3) | length: 8 (0x8) | IKEv2 transform type: TRANS_TYPE_DH (0x4) | IKEv2 transform ID: OAKLEY_GROUP_ECP_384 (0x14) | *****parse IKEv2 Transform Substructure Payload: | last transform: v2_TRANSFORM_NON_LAST (0x3) | length: 8 (0x8) | IKEv2 transform type: TRANS_TYPE_DH (0x4) | IKEv2 transform ID: OAKLEY_GROUP_ECP_521 (0x15) | *****parse IKEv2 Transform Substructure Payload: | last transform: v2_TRANSFORM_LAST (0x0) | length: 8 (0x8) | IKEv2 transform type: TRANS_TYPE_DH (0x4) | IKEv2 transform ID: OAKLEY_GROUP_CURVE25519 (0x1f) | remote proposal 4 proposed transforms: ENCR+PRF+INTEG+DH; matched: none; unmatched: ENCR+PRF+INTEG+DH | remote proposal 4 does not match; unmatched remote transforms: ENCR+PRF+INTEG+DH "westnet-eastnet-ikev2" #1: proposal 1:IKE:ENCR=AES_GCM_C_256;PRF=HMAC_SHA2_512;DH=MODP2048 chosen from remote proposals 1:IKE:ENCR=AES_GCM_C_256;PRF=HMAC_SHA2_512;PRF=HMAC_SHA2_256;DH=MODP2048;DH=MODP3072;DH=MODP4096;DH=MODP8192;DH=ECP_256;DH=ECP_384;DH=ECP_521;DH=CURVE25519[first-match] 2:IKE:ENCR=AES_GCM_C_128;PRF=HMAC_SHA2_512;PRF=HMAC_SHA2_256;DH=MODP2048;DH=MODP3072;DH=MODP4096;DH=MODP8192;DH=ECP_256;DH=ECP_384;DH=ECP_521;DH=CURVE25519 3:IKE:ENCR=AES_CBC_256;PRF=HMAC_SHA2_512;PRF=HMAC_SHA2_256;INTEG=HMAC_SHA2_512_256;INTEG=HMAC_SHA2_256_128;DH=MODP2048;DH=MODP3072;DH=MODP4096;DH=MODP8192;DH=ECP_256;DH=ECP_384;DH=ECP_521;DH=CURVE25519 4:IKE:ENCR=AES_CBC_128;PRF=HMAC_SHA2_512;PRF=HMAC_SHA2_256;INTEG=HMAC_SHA2_512_256;INTEG=HMAC_SHA2_256_128;DH=MODP2048;DH=MODP3072;DH=MODP4096;DH=MODP8192;DH=ECP_256;DH=ECP_384;DH=ECP_521;DH=CURVE25519 | accepted IKE proposal ikev2_proposal: 1:IKE:ENCR=AES_GCM_C_256;PRF=HMAC_SHA2_512;DH=MODP2048 | converting proposal to internal trans attrs | natd_hash: rcookie is zero | natd_hash: hasher=0x55cbd9798800(20) | natd_hash: icookie= 16 6a bf 80 5a 2e 72 e5 | natd_hash: rcookie= 00 00 00 00 00 00 00 00 | natd_hash: ip= c0 01 02 17 | natd_hash: port=500 | natd_hash: hash= 78 5d 73 92 4a 27 ca 8b af f4 05 c4 11 10 e3 02 | natd_hash: hash= 4c a5 9a 8f | natd_hash: rcookie is zero | natd_hash: hasher=0x55cbd9798800(20) | natd_hash: icookie= 16 6a bf 80 5a 2e 72 e5 | natd_hash: rcookie= 00 00 00 00 00 00 00 00 | natd_hash: ip= c0 01 02 2d | natd_hash: port=500 | natd_hash: hash= b6 95 b0 c8 b5 e9 28 c5 bb 21 e0 a9 19 5f 85 5e | natd_hash: hash= 9e ef 3e 48 | NAT_TRAVERSAL encaps using auto-detect | NAT_TRAVERSAL this end is NOT behind NAT | NAT_TRAVERSAL that end is NOT behind NAT | NAT_TRAVERSAL nat-keepalive enabled 192.1.2.45 | adding ikev2_inI1outR1 KE work-order 1 for state #1 | event_schedule: new EVENT_CRYPTO_TIMEOUT-pe@0x55cbd9ce8048 | inserting event EVENT_CRYPTO_TIMEOUT, timeout in 60 seconds for #1 | libevent_malloc: new ptr-libevent@0x55cbd9ce9ae8 size 128 | #1 spent 1.18 milliseconds in processing: Respond to IKE_SA_INIT in ikev2_process_state_packet() | crypto helper 0 resuming | crypto helper 0 starting work-order 1 for state #1 | crypto helper 0 doing build KE and nonce (ikev2_inI1outR1 KE); request ID 1 | [RE]START processing: state #1 connection "westnet-eastnet-ikev2" from 192.1.2.45:500 (in complete_v2_state_transition() at ikev2.c:3379) | #1 complete_v2_state_transition() PARENT_R0->PARENT_R1 with status STF_SUSPEND | suspending state #1 and saving MD | #1 is busy; has a suspended MD | [RE]START processing: state #1 connection "westnet-eastnet-ikev2" from 192.1.2.45:500 (in log_stf_suspend() at ikev2.c:3269) | "westnet-eastnet-ikev2" #1 complete v2 state STATE_PARENT_R0 transition with STF_SUSPEND suspended from complete_v2_state_transition:3451 | stop processing: state #1 connection "westnet-eastnet-ikev2" from 192.1.2.45:500 (in ikev2_process_packet() at ikev2.c:2018) | #1 spent 1.85 milliseconds in ikev2_process_packet() | stop processing: from 192.1.2.45:500 (in process_md() at demux.c:380) | processing: STOP state #0 (in process_md() at demux.c:382) | processing: STOP connection NULL (in process_md() at demux.c:383) | spent 1.87 milliseconds in comm_handle_cb() reading and processing packet | crypto helper 0 finished build KE and nonce (ikev2_inI1outR1 KE); request ID 1 time elapsed 0.001755 seconds | (#1) spent 1.75 milliseconds in crypto helper computing work-order 1: ikev2_inI1outR1 KE (pcr) | crypto helper 0 sending results from work-order 1 for state #1 to event queue | scheduling resume sending helper answer for #1 | libevent_malloc: new ptr-libevent@0x7f4b44002888 size 128 | crypto helper 0 waiting (nothing to do) | processing resume sending helper answer for #1 | start processing: state #1 connection "westnet-eastnet-ikev2" from 192.1.2.45:500 (in resume_handler() at server.c:797) | crypto helper 0 replies to request ID 1 | calling continuation function 0x55cbd96c3b50 | ikev2_parent_inI1outR1_continue for #1: calculated ke+nonce, sending R1 | **emit ISAKMP Message: | initiator cookie: | 16 6a bf 80 5a 2e 72 e5 | responder cookie: | af 01 9e 64 da 8f 43 06 | next payload type: ISAKMP_NEXT_NONE (0x0) | ISAKMP version: IKEv2 version 2.0 (rfc4306/rfc5996) (0x20) | exchange type: ISAKMP_v2_IKE_SA_INIT (0x22) | flags: ISAKMP_FLAG_v2_MSG_RESPONSE (0x20) | Message ID: 0 (0x0) | next payload chain: saving message location 'ISAKMP Message'.'next payload type' | Emitting ikev2_proposal ... | ***emit IKEv2 Security Association Payload: | next payload type: ISAKMP_NEXT_v2NONE (0x0) | flags: none (0x0) | next payload chain: setting previous 'ISAKMP Message'.'next payload type' to current IKEv2 Security Association Payload (33:ISAKMP_NEXT_v2SA) | next payload chain: saving location 'IKEv2 Security Association Payload'.'next payload type' in 'reply packet' | ****emit IKEv2 Proposal Substructure Payload: | last proposal: v2_PROPOSAL_LAST (0x0) | prop #: 1 (0x1) | proto ID: IKEv2_SEC_PROTO_IKE (0x1) | spi size: 0 (0x0) | # transforms: 3 (0x3) | last substructure: saving location 'IKEv2 Security Association Payload'.'IKEv2 Proposal Substructure Payload'.'last proposal' | *****emit IKEv2 Transform Substructure Payload: | last transform: v2_TRANSFORM_NON_LAST (0x3) | IKEv2 transform type: TRANS_TYPE_ENCR (0x1) | IKEv2 transform ID: AES_GCM_C (0x14) | last substructure: saving location 'IKEv2 Proposal Substructure Payload'.'IKEv2 Transform Substructure Payload'.'last transform' | ******emit IKEv2 Attribute Substructure Payload: | af+type: AF+IKEv2_KEY_LENGTH (0x800e) | length/value: 256 (0x100) | emitting length of IKEv2 Transform Substructure Payload: 12 | *****emit IKEv2 Transform Substructure Payload: | last transform: v2_TRANSFORM_NON_LAST (0x3) | IKEv2 transform type: TRANS_TYPE_PRF (0x2) | IKEv2 transform ID: PRF_HMAC_SHA2_512 (0x7) | last substructure: checking 'IKEv2 Proposal Substructure Payload'.'IKEv2 Transform Substructure Payload'.'last transform' is v2_TRANSFORM_NON_LAST (0x3) | last substructure: saving location 'IKEv2 Proposal Substructure Payload'.'IKEv2 Transform Substructure Payload'.'last transform' | emitting length of IKEv2 Transform Substructure Payload: 8 | *****emit IKEv2 Transform Substructure Payload: | last transform: v2_TRANSFORM_LAST (0x0) | IKEv2 transform type: TRANS_TYPE_DH (0x4) | IKEv2 transform ID: OAKLEY_GROUP_MODP2048 (0xe) | last substructure: checking 'IKEv2 Proposal Substructure Payload'.'IKEv2 Transform Substructure Payload'.'last transform' is v2_TRANSFORM_NON_LAST (0x3) | last substructure: saving location 'IKEv2 Proposal Substructure Payload'.'IKEv2 Transform Substructure Payload'.'last transform' | emitting length of IKEv2 Transform Substructure Payload: 8 | emitting length of IKEv2 Proposal Substructure Payload: 36 | last substructure: checking 'IKEv2 Proposal Substructure Payload'.'IKEv2 Transform Substructure Payload'.'last transform' is 0 | emitting length of IKEv2 Security Association Payload: 40 | last substructure: checking 'IKEv2 Security Association Payload'.'IKEv2 Proposal Substructure Payload'.'last proposal' is 0 | ***emit IKEv2 Key Exchange Payload: | next payload type: ISAKMP_NEXT_v2NONE (0x0) | flags: none (0x0) | DH group: OAKLEY_GROUP_MODP2048 (0xe) | next payload chain: setting previous 'IKEv2 Security Association Payload'.'next payload type' to current IKEv2 Key Exchange Payload (34:ISAKMP_NEXT_v2KE) | next payload chain: saving location 'IKEv2 Key Exchange Payload'.'next payload type' in 'reply packet' | emitting 256 raw bytes of ikev2 g^x into IKEv2 Key Exchange Payload | ikev2 g^x e9 9e 28 0b c6 f7 3e 6b 64 c8 1c 84 ef 05 e2 61 | ikev2 g^x bb 08 22 eb ec 13 4a d4 34 a6 e3 a1 8a 1d c2 05 | ikev2 g^x e1 96 73 63 ac 75 62 52 d0 64 ef 2a d5 92 01 6e | ikev2 g^x fa 89 21 89 84 f0 53 5b a4 e1 c2 58 1b b8 28 6b | ikev2 g^x bb e9 55 37 ab d1 71 55 17 9f ea ba ae ae 0a 30 | ikev2 g^x 11 fa f3 99 7e 9b 08 07 5c 81 04 93 c4 2e 0c c6 | ikev2 g^x 3b 63 63 42 a4 18 97 a8 95 d4 c6 a7 69 7a 5e 23 | ikev2 g^x 9a 9b 95 d2 0d 08 9e 79 b7 1e 4d 33 4d a1 ce 75 | ikev2 g^x 6d 08 5e 36 f0 1f 58 0f ad a0 89 6a 88 d0 12 fa | ikev2 g^x cd 98 b3 49 19 b1 27 e7 5a 13 19 76 db 5d ae b9 | ikev2 g^x 5e 0a 10 02 f0 86 c5 8f 85 f6 eb 16 f4 dc 5f 49 | ikev2 g^x d7 f3 0a cf cc 88 74 c8 e4 37 b1 bf 9c 42 e3 9b | ikev2 g^x ac c1 6e 7f 42 bf 01 d3 82 ab 3c 1d 5c 09 72 af | ikev2 g^x cc 61 49 e1 6a 3e e4 75 93 aa d7 17 db 44 9c 8e | ikev2 g^x 18 89 9f 6e 54 9a c4 18 b4 bd 79 a6 6c 1f 4d c3 | ikev2 g^x 80 a6 e1 6e a5 1f 54 2c c5 6d 4c 65 6b 34 23 ef | emitting length of IKEv2 Key Exchange Payload: 264 | ***emit IKEv2 Nonce Payload: | next payload type: ISAKMP_NEXT_v2N (0x29) | flags: none (0x0) | next payload chain: ignoring supplied 'IKEv2 Nonce Payload'.'next payload type' value 41:ISAKMP_NEXT_v2N | next payload chain: setting previous 'IKEv2 Key Exchange Payload'.'next payload type' to current IKEv2 Nonce Payload (40:ISAKMP_NEXT_v2Ni) | next payload chain: saving location 'IKEv2 Nonce Payload'.'next payload type' in 'reply packet' | emitting 32 raw bytes of IKEv2 nonce into IKEv2 Nonce Payload | IKEv2 nonce 77 26 80 da 55 4e 8b ff e0 5d 89 25 9d 04 b9 30 | IKEv2 nonce d6 c2 79 3a c0 82 fb 41 ef e8 5e c7 98 2d ac 84 | emitting length of IKEv2 Nonce Payload: 36 | Adding a v2N Payload | ***emit IKEv2 Notify Payload: | next payload type: ISAKMP_NEXT_v2NONE (0x0) | flags: none (0x0) | Protocol ID: PROTO_v2_RESERVED (0x0) | SPI size: 0 (0x0) | Notify Message Type: v2N_IKEV2_FRAGMENTATION_SUPPORTED (0x402e) | next payload chain: setting previous 'IKEv2 Nonce Payload'.'next payload type' to current IKEv2 Notify Payload (41:ISAKMP_NEXT_v2N) | next payload chain: saving location 'IKEv2 Notify Payload'.'next payload type' in 'reply packet' | emitting length of IKEv2 Notify Payload: 8 | NAT-Traversal support [enabled] add v2N payloads. | natd_hash: hasher=0x55cbd9798800(20) | natd_hash: icookie= 16 6a bf 80 5a 2e 72 e5 | natd_hash: rcookie= af 01 9e 64 da 8f 43 06 | natd_hash: ip= c0 01 02 17 | natd_hash: port=500 | natd_hash: hash= a0 99 a6 93 eb 36 36 e5 df 73 85 0b 2a bb d8 f9 | natd_hash: hash= e9 7d 4e a0 | Adding a v2N Payload | ***emit IKEv2 Notify Payload: | next payload type: ISAKMP_NEXT_v2NONE (0x0) | flags: none (0x0) | Protocol ID: PROTO_v2_RESERVED (0x0) | SPI size: 0 (0x0) | Notify Message Type: v2N_NAT_DETECTION_SOURCE_IP (0x4004) | next payload chain: setting previous 'IKEv2 Notify Payload'.'next payload type' to current IKEv2 Notify Payload (41:ISAKMP_NEXT_v2N) | next payload chain: saving location 'IKEv2 Notify Payload'.'next payload type' in 'reply packet' | emitting 20 raw bytes of Notify data into IKEv2 Notify Payload | Notify data a0 99 a6 93 eb 36 36 e5 df 73 85 0b 2a bb d8 f9 | Notify data e9 7d 4e a0 | emitting length of IKEv2 Notify Payload: 28 | natd_hash: hasher=0x55cbd9798800(20) | natd_hash: icookie= 16 6a bf 80 5a 2e 72 e5 | natd_hash: rcookie= af 01 9e 64 da 8f 43 06 | natd_hash: ip= c0 01 02 2d | natd_hash: port=500 | natd_hash: hash= ab 47 52 92 32 9c 52 05 a3 95 3f a4 a9 36 d0 6c | natd_hash: hash= 84 a5 90 33 | Adding a v2N Payload | ***emit IKEv2 Notify Payload: | next payload type: ISAKMP_NEXT_v2NONE (0x0) | flags: none (0x0) | Protocol ID: PROTO_v2_RESERVED (0x0) | SPI size: 0 (0x0) | Notify Message Type: v2N_NAT_DETECTION_DESTINATION_IP (0x4005) | next payload chain: setting previous 'IKEv2 Notify Payload'.'next payload type' to current IKEv2 Notify Payload (41:ISAKMP_NEXT_v2N) | next payload chain: saving location 'IKEv2 Notify Payload'.'next payload type' in 'reply packet' | emitting 20 raw bytes of Notify data into IKEv2 Notify Payload | Notify data ab 47 52 92 32 9c 52 05 a3 95 3f a4 a9 36 d0 6c | Notify data 84 a5 90 33 | emitting length of IKEv2 Notify Payload: 28 | going to send a certreq | connection->kind is CK_PERMANENT so send CERTREQ | ***emit IKEv2 Certificate Request Payload: | next payload type: ISAKMP_NEXT_v2NONE (0x0) | flags: none (0x0) | ikev2 cert encoding: CERT_X509_SIGNATURE (0x4) | next payload chain: setting previous 'IKEv2 Notify Payload'.'next payload type' to current IKEv2 Certificate Request Payload (38:ISAKMP_NEXT_v2CERTREQ) | next payload chain: saving location 'IKEv2 Certificate Request Payload'.'next payload type' in 'reply packet' | emitting length of IKEv2 Certificate Request Payload: 5 | emitting length of ISAKMP Message: 437 | [RE]START processing: state #1 connection "westnet-eastnet-ikev2" from 192.1.2.45:500 (in complete_v2_state_transition() at ikev2.c:3379) | #1 complete_v2_state_transition() PARENT_R0->PARENT_R1 with status STF_OK | IKEv2: transition from state STATE_PARENT_R0 to state STATE_PARENT_R1 | parent state #1: PARENT_R0(half-open IKE SA) => PARENT_R1(half-open IKE SA) | Message ID: updating counters for #1 to 0 after switching state | Message ID: recv #1 request 0; ike: initiator.sent=-1 initiator.recv=-1 responder.sent=-1 responder.recv=-1->0 wip.initiator=-1 wip.responder=0->-1 | Message ID: sent #1 response 0; ike: initiator.sent=-1 initiator.recv=-1 responder.sent=-1->0 responder.recv=0 wip.initiator=-1 wip.responder=-1 "westnet-eastnet-ikev2" #1: STATE_PARENT_R1: received v2I1, sent v2R1 {auth=IKEv2 cipher=AES_GCM_16_256 integ=n/a prf=HMAC_SHA2_512 group=MODP2048} | sending V2 new request packet to 192.1.2.45:500 (from 192.1.2.23:500) | sending 437 bytes for STATE_PARENT_R0 through eth1 from 192.1.2.23:500 to 192.1.2.45:500 (using #1) | 16 6a bf 80 5a 2e 72 e5 af 01 9e 64 da 8f 43 06 | 21 20 22 20 00 00 00 00 00 00 01 b5 22 00 00 28 | 00 00 00 24 01 01 00 03 03 00 00 0c 01 00 00 14 | 80 0e 01 00 03 00 00 08 02 00 00 07 00 00 00 08 | 04 00 00 0e 28 00 01 08 00 0e 00 00 e9 9e 28 0b | c6 f7 3e 6b 64 c8 1c 84 ef 05 e2 61 bb 08 22 eb | ec 13 4a d4 34 a6 e3 a1 8a 1d c2 05 e1 96 73 63 | ac 75 62 52 d0 64 ef 2a d5 92 01 6e fa 89 21 89 | 84 f0 53 5b a4 e1 c2 58 1b b8 28 6b bb e9 55 37 | ab d1 71 55 17 9f ea ba ae ae 0a 30 11 fa f3 99 | 7e 9b 08 07 5c 81 04 93 c4 2e 0c c6 3b 63 63 42 | a4 18 97 a8 95 d4 c6 a7 69 7a 5e 23 9a 9b 95 d2 | 0d 08 9e 79 b7 1e 4d 33 4d a1 ce 75 6d 08 5e 36 | f0 1f 58 0f ad a0 89 6a 88 d0 12 fa cd 98 b3 49 | 19 b1 27 e7 5a 13 19 76 db 5d ae b9 5e 0a 10 02 | f0 86 c5 8f 85 f6 eb 16 f4 dc 5f 49 d7 f3 0a cf | cc 88 74 c8 e4 37 b1 bf 9c 42 e3 9b ac c1 6e 7f | 42 bf 01 d3 82 ab 3c 1d 5c 09 72 af cc 61 49 e1 | 6a 3e e4 75 93 aa d7 17 db 44 9c 8e 18 89 9f 6e | 54 9a c4 18 b4 bd 79 a6 6c 1f 4d c3 80 a6 e1 6e | a5 1f 54 2c c5 6d 4c 65 6b 34 23 ef 29 00 00 24 | 77 26 80 da 55 4e 8b ff e0 5d 89 25 9d 04 b9 30 | d6 c2 79 3a c0 82 fb 41 ef e8 5e c7 98 2d ac 84 | 29 00 00 08 00 00 40 2e 29 00 00 1c 00 00 40 04 | a0 99 a6 93 eb 36 36 e5 df 73 85 0b 2a bb d8 f9 | e9 7d 4e a0 26 00 00 1c 00 00 40 05 ab 47 52 92 | 32 9c 52 05 a3 95 3f a4 a9 36 d0 6c 84 a5 90 33 | 00 00 00 05 04 | state #1 requesting EVENT_CRYPTO_TIMEOUT to be deleted | libevent_free: release ptr-libevent@0x55cbd9ce9ae8 | free_event_entry: release EVENT_CRYPTO_TIMEOUT-pe@0x55cbd9ce8048 | event_schedule: new EVENT_SO_DISCARD-pe@0x55cbd9ce8048 | inserting event EVENT_SO_DISCARD, timeout in 200 seconds for #1 | libevent_malloc: new ptr-libevent@0x55cbd9cebec8 size 128 | resume sending helper answer for #1 suppresed complete_v2_state_transition() | #1 spent 0.724 milliseconds in resume sending helper answer | stop processing: state #1 connection "westnet-eastnet-ikev2" from 192.1.2.45:500 (in resume_handler() at server.c:833) | libevent_free: release ptr-libevent@0x7f4b44002888 | spent 0.00519 milliseconds in comm_handle_cb() calling check_incoming_msg_errqueue() | *received 539 bytes from 192.1.2.45:500 on eth1 (192.1.2.23:500) | 16 6a bf 80 5a 2e 72 e5 af 01 9e 64 da 8f 43 06 | 35 20 23 08 00 00 00 01 00 00 02 1b 23 00 01 ff | 00 01 00 05 9f f8 78 0a 72 42 8c 19 5c 50 cf a8 | f5 ba 1d eb a5 9c 4d c8 5e c6 e7 13 23 62 73 7f | 0f 2e 4d 12 f4 c2 a2 86 80 3b 01 aa b4 61 b1 4f | 90 12 17 90 0d ee 4f b3 50 06 42 4d 30 c0 36 be | 3d 82 70 da 84 5e 43 da 9a 90 f5 51 40 3f 65 d7 | 19 92 ad b0 e7 09 4b 2b e1 f0 79 5c 7f e3 90 2f | be 61 9f f8 74 4c 1e ad c5 b5 01 d2 ef 6e e9 9c | d4 a0 20 96 0f 7d 49 64 e4 80 8c 50 2a f6 f7 e8 | 59 98 ab 56 40 4a fe 0b 9a 18 38 5f db c2 e0 2b | 2f e3 60 9e b1 29 85 77 85 a2 9a ad 98 73 6e e0 | 83 be 4f 80 6d 23 0e 26 e6 e3 94 19 1f 05 6c 75 | ca 3c e0 f0 70 e8 77 10 a8 c1 e4 84 b5 c8 11 ab | 2a de b5 8e 3c be a3 c1 a4 c7 9d 74 e0 4f b8 ac | 40 bb c8 74 a3 f0 0f f3 55 28 13 4e 5d 7d 5e 19 | 93 ad 89 30 02 61 9d 73 d5 ef 4c 6f 73 93 d6 79 | 12 10 b7 76 de 61 08 a8 1f 00 46 5c 04 fa 84 10 | e5 b6 f8 68 6f c0 bd 90 79 47 61 24 c7 dd 5e 4d | bb b0 3b 68 54 ef 31 d0 14 0c 17 e8 5d dc 76 93 | 8e 40 ed 08 e0 8e e6 09 95 85 07 e6 c9 38 b8 3a | 76 ed ae 29 58 c0 a8 cf a1 23 72 47 80 30 3b c3 | 5f db 4f 76 45 b8 43 28 91 33 bf 9d d7 bd cc f2 | 47 64 06 da 65 ab b6 2c 7d 1b d5 36 31 f8 53 5c | fb c5 21 2f d9 a1 27 4d 66 00 0c bc 23 7b ea 18 | 88 60 d2 10 ff 58 1c 31 ab 02 49 77 10 b2 21 cd | 38 a2 fd f3 2c d7 30 9a 00 5e d4 37 da 90 16 49 | ee 05 17 8e 34 a5 0e fb 12 95 ae 00 f8 8b 03 c0 | b4 fc e0 42 7e b9 6b b2 5a 89 f4 ae d2 7f f0 e9 | 25 14 65 b1 c9 f7 8b c8 2b 4c bd fc c3 7b 3d 18 | 4f 86 62 02 23 6c 53 2f ed 64 c2 09 4f 30 fe 3e | cc ee d8 2f dd 21 af 6b 3c 19 6d 1b e5 ea 7e d1 | d2 83 e5 32 1f ff b0 10 74 2e 35 42 dd 13 8f cc | 76 d2 79 fc fc 3d 9e 7a 30 44 5a | start processing: from 192.1.2.45:500 (in process_md() at demux.c:378) | **parse ISAKMP Message: | initiator cookie: | 16 6a bf 80 5a 2e 72 e5 | responder cookie: | af 01 9e 64 da 8f 43 06 | next payload type: ISAKMP_NEXT_v2SKF (0x35) | ISAKMP version: IKEv2 version 2.0 (rfc4306/rfc5996) (0x20) | exchange type: ISAKMP_v2_IKE_AUTH (0x23) | flags: ISAKMP_FLAG_v2_IKE_INIT (0x8) | Message ID: 1 (0x1) | length: 539 (0x21b) | processing version=2.0 packet with exchange type=ISAKMP_v2_IKE_AUTH (35) | I am the IKE SA Original Responder receiving an IKEv2 IKE_AUTH request | State DB: found IKEv2 state #1 in PARENT_R1 (find_v2_ike_sa) | start processing: state #1 connection "westnet-eastnet-ikev2" from 192.1.2.45:500 (in ikev2_process_packet() at ikev2.c:2016) | State DB: IKEv2 state not found (find_v2_sa_by_responder_wip) | [RE]START processing: state #1 connection "westnet-eastnet-ikev2" from 192.1.2.45:500 (in ike_process_packet() at ikev2.c:2064) | #1 st.st_msgid_lastrecv 0 md.hdr.isa_msgid 00000001 | Message ID: #1 not a duplicate - message is new; initiator.sent=-1 initiator.recv=-1 responder.sent=0 responder.recv=0 | unpacking clear payload | Now let's proceed with payload (ISAKMP_NEXT_v2SKF) | ***parse IKEv2 Encrypted Fragment: | next payload type: ISAKMP_NEXT_v2IDi (0x23) | flags: none (0x0) | length: 511 (0x1ff) | fragment number: 1 (0x1) | total fragments: 5 (0x5) | processing payload: ISAKMP_NEXT_v2SKF (len=503) | Message ID: start-responder #1 request 1; ike: initiator.sent=-1 initiator.recv=-1 responder.sent=0 responder.recv=0 wip.initiator=-1 wip.responder=-1->1 | #1 in state PARENT_R1: received v2I1, sent v2R1 | received IKE encrypted fragment number '1', total number '5', next payload '35' | updated IKE fragment state to respond using fragments without waiting for re-transmits | stop processing: state #1 connection "westnet-eastnet-ikev2" from 192.1.2.45:500 (in ikev2_process_packet() at ikev2.c:2018) | #1 spent 0.328 milliseconds in ikev2_process_packet() | stop processing: from 192.1.2.45:500 (in process_md() at demux.c:380) | processing: STOP state #0 (in process_md() at demux.c:382) | processing: STOP connection NULL (in process_md() at demux.c:383) | spent 0.355 milliseconds in comm_handle_cb() reading and processing packet | spent 0.00304 milliseconds in comm_handle_cb() calling check_incoming_msg_errqueue() | *received 539 bytes from 192.1.2.45:500 on eth1 (192.1.2.23:500) | 16 6a bf 80 5a 2e 72 e5 af 01 9e 64 da 8f 43 06 | 35 20 23 08 00 00 00 01 00 00 02 1b 00 00 01 ff | 00 02 00 05 22 ce 23 58 04 2a af 66 90 f7 c3 5e | fa 69 cb bf 4a 3a 69 1a 69 5f 8a 97 84 5d dd 0c | cf 26 f1 a9 80 49 5d 79 c9 5b 60 5f 37 d0 54 c5 | bc a9 75 a3 90 50 a4 a5 47 44 e5 79 8d 1d 73 1a | f8 5c 65 e7 1d 24 e8 9f 14 19 28 01 1b 5d 19 cd | 93 7d 91 1d ee 03 59 b7 27 2b 52 9f df 43 ed f5 | 2e dd ef 64 cd 2b ba f6 a3 59 e2 0f ef ac 0f 9c | 8e 05 83 03 2c 64 ce 04 6a 25 0a c4 e6 52 4f f2 | 36 4c 88 85 2e 93 8a 8a 2a 70 10 16 36 31 ea 89 | 11 ae 16 42 7a 13 84 b3 5f da af dc 3c 8f 0d 25 | 34 08 2b 6a f2 66 59 22 52 c2 f0 bf 94 3b a4 80 | 4b a5 72 48 ce 39 52 93 e0 06 7b 9a 84 3f f6 18 | ef e2 59 82 6f df 62 b2 c7 c3 70 99 33 7b e6 53 | 2f b4 a0 51 5f 2f bc da a4 db d9 58 54 43 64 98 | ec d2 15 28 7c be c6 db c8 f0 82 6b 17 3a a3 2a | 25 78 4c 13 cb e6 e4 df b8 1f cc ab 04 b0 23 73 | 16 e8 ef bf 19 01 83 18 56 01 a1 04 85 ef 36 75 | 78 f6 78 de d6 1f 13 d9 9f 43 3a e0 80 13 7f 6d | 83 8e ff 71 5c 17 c7 2d 46 53 fe 17 99 4a 7f 0d | 15 cf c4 fb 4f e4 ef b1 3b 43 bb 61 4a 32 95 fe | d5 d3 7e 11 40 50 83 fd da 45 5b 7d 0f bc 72 ed | e4 76 6a 16 78 d6 ef 77 a4 f8 56 08 23 8d d3 dd | 55 8e aa 37 cc 8d 9f b0 9e ce bc 43 d4 8c eb 9f | cf 6e 61 46 da af b7 03 97 a2 81 42 13 ad 58 09 | 21 ea dd db 3f fe 46 b3 ad 7a 7c 0f a3 27 07 ae | b5 36 b4 e2 24 42 3e 69 09 05 5c fe 83 65 7b 2c | 34 ac fc 64 10 60 f6 01 14 64 73 db 57 d2 62 d1 | 4c 02 6b a7 34 82 78 65 7f 6b 24 f9 a5 f0 ce 6d | a8 78 c0 7b 04 a6 4d b2 30 49 76 c4 e4 21 a9 0d | 09 c1 a8 3a b5 de c0 f9 32 7b 02 35 b0 b4 da 75 | 5d 36 80 6d b1 38 a1 af b6 00 b7 b1 92 3c 8a d0 | 91 b2 7d 0f 3b 0e 16 1f 5c e5 aa | start processing: from 192.1.2.45:500 (in process_md() at demux.c:378) | **parse ISAKMP Message: | initiator cookie: | 16 6a bf 80 5a 2e 72 e5 | responder cookie: | af 01 9e 64 da 8f 43 06 | next payload type: ISAKMP_NEXT_v2SKF (0x35) | ISAKMP version: IKEv2 version 2.0 (rfc4306/rfc5996) (0x20) | exchange type: ISAKMP_v2_IKE_AUTH (0x23) | flags: ISAKMP_FLAG_v2_IKE_INIT (0x8) | Message ID: 1 (0x1) | length: 539 (0x21b) | processing version=2.0 packet with exchange type=ISAKMP_v2_IKE_AUTH (35) | I am the IKE SA Original Responder receiving an IKEv2 IKE_AUTH request | State DB: found IKEv2 state #1 in PARENT_R1 (find_v2_ike_sa) | start processing: state #1 connection "westnet-eastnet-ikev2" from 192.1.2.45:500 (in ikev2_process_packet() at ikev2.c:2016) | [RE]START processing: state #1 connection "westnet-eastnet-ikev2" from 192.1.2.45:500 (in ike_process_packet() at ikev2.c:2062) | #1 st.st_msgid_lastrecv 0 md.hdr.isa_msgid 00000001 | #1 is idle | #1 idle | Message ID: #1 not a duplicate - responder is accumulating fragments; initiator.sent=-1 initiator.recv=-1 responder.sent=0 responder.recv=0 wip.initiator=-1 wip.responder=1 | unpacking clear payload | Now let's proceed with payload (ISAKMP_NEXT_v2SKF) | ***parse IKEv2 Encrypted Fragment: | next payload type: ISAKMP_NEXT_v2NONE (0x0) | flags: none (0x0) | length: 511 (0x1ff) | fragment number: 2 (0x2) | total fragments: 5 (0x5) | processing payload: ISAKMP_NEXT_v2SKF (len=503) | #1 in state PARENT_R1: received v2I1, sent v2R1 | received IKE encrypted fragment number '2', total number '5', next payload '0' | stop processing: state #1 connection "westnet-eastnet-ikev2" from 192.1.2.45:500 (in ikev2_process_packet() at ikev2.c:2018) | #1 spent 0.297 milliseconds in ikev2_process_packet() | stop processing: from 192.1.2.45:500 (in process_md() at demux.c:380) | processing: STOP state #0 (in process_md() at demux.c:382) | processing: STOP connection NULL (in process_md() at demux.c:383) | spent 0.32 milliseconds in comm_handle_cb() reading and processing packet | spent 0.00291 milliseconds in comm_handle_cb() calling check_incoming_msg_errqueue() | *received 539 bytes from 192.1.2.45:500 on eth1 (192.1.2.23:500) | 16 6a bf 80 5a 2e 72 e5 af 01 9e 64 da 8f 43 06 | 35 20 23 08 00 00 00 01 00 00 02 1b 00 00 01 ff | 00 03 00 05 65 e8 85 e5 09 60 91 2e 3e 1a ec cf | 1e cc 40 b9 d7 08 b1 02 5e 37 56 c3 e3 39 92 2b | 51 95 6b 81 74 2b 5e 82 a4 c2 e9 a3 1f 6b 99 89 | 21 09 83 df 91 d4 31 79 36 16 af 28 65 56 e0 50 | 15 7f 88 5d de b4 40 53 51 9b cd c4 5c 83 a8 05 | 32 53 ae 23 87 d2 01 3e 1e 23 f6 a7 79 09 45 df | b6 48 16 be 70 8b a2 67 ff 1a 4f bc c4 04 4f f3 | d5 3d 4f 68 a5 98 23 85 6d 69 c5 c1 70 93 bf a9 | 1a 30 1e a1 2f e0 69 78 94 87 14 ab 49 54 00 56 | d4 5a d0 5a b9 18 9c cb 83 da fb 5d 2f 91 c2 58 | f1 38 ca 30 b1 9e 0c 5d 9d f4 fc aa d0 65 d5 b0 | d7 66 f8 59 f7 cb 08 33 da 21 d2 5a 92 80 80 a8 | 61 2e bb 52 5f ae 11 d1 56 40 16 56 d8 be a9 1d | 05 3a e1 ea b5 f0 9f 88 17 09 c1 5b eb a4 38 4b | b8 e3 47 88 e7 34 3d c5 73 52 b3 cd cf 34 3a 64 | 51 c2 46 6c c3 77 de 29 9b 6d 15 fb 57 0f 10 1c | 59 20 14 0f e0 1f 34 ba a1 41 74 d8 12 b0 b3 6b | 41 4d 85 a3 f5 c9 90 79 84 25 6a e4 0e ce ee de | 2d e4 30 9b f0 6a 80 41 b4 16 a7 cb 84 60 b9 2b | e1 21 e1 8a 30 45 05 7f 8d ae 25 7f 1c 49 ae 0e | 87 c0 2c e0 df b7 3d 62 e0 5f ae b3 37 fc 0b 25 | c3 9c f4 24 3a 50 22 9c 0a fa 77 b3 d5 fe d8 0d | 2e 95 c8 f8 8d ce 0d 7e 33 f5 5e 24 da ad 55 0a | 1e 43 95 79 c1 1c ef 9a f3 29 35 4d 44 71 7a 05 | b5 d9 b5 1c 46 db 47 fe 1c 3b 0b 53 0b 2f 48 05 | 9f 5b 14 ba 6c 66 3d 61 68 d3 2a 83 31 47 41 03 | 30 1d e7 55 41 a4 cf 5e 50 3e e0 b2 4d 6b a1 a5 | 33 f0 91 b7 30 de 86 60 63 c0 ac 08 1f 74 d8 6c | 4f 39 b9 a7 c4 ab 64 91 b8 e2 e4 f6 d9 52 35 57 | 56 88 b4 c4 cd c2 c7 ca 22 46 e0 32 e0 d3 1b 22 | f2 c3 88 41 3d 2a d6 c3 ed 1a fa b8 8d 4b 6b c9 | 00 e5 61 d7 65 9c e4 37 a1 90 71 | start processing: from 192.1.2.45:500 (in process_md() at demux.c:378) | **parse ISAKMP Message: | initiator cookie: | 16 6a bf 80 5a 2e 72 e5 | responder cookie: | af 01 9e 64 da 8f 43 06 | next payload type: ISAKMP_NEXT_v2SKF (0x35) | ISAKMP version: IKEv2 version 2.0 (rfc4306/rfc5996) (0x20) | exchange type: ISAKMP_v2_IKE_AUTH (0x23) | flags: ISAKMP_FLAG_v2_IKE_INIT (0x8) | Message ID: 1 (0x1) | length: 539 (0x21b) | processing version=2.0 packet with exchange type=ISAKMP_v2_IKE_AUTH (35) | I am the IKE SA Original Responder receiving an IKEv2 IKE_AUTH request | State DB: found IKEv2 state #1 in PARENT_R1 (find_v2_ike_sa) | start processing: state #1 connection "westnet-eastnet-ikev2" from 192.1.2.45:500 (in ikev2_process_packet() at ikev2.c:2016) | [RE]START processing: state #1 connection "westnet-eastnet-ikev2" from 192.1.2.45:500 (in ike_process_packet() at ikev2.c:2062) | #1 st.st_msgid_lastrecv 0 md.hdr.isa_msgid 00000001 | #1 is idle | #1 idle | Message ID: #1 not a duplicate - responder is accumulating fragments; initiator.sent=-1 initiator.recv=-1 responder.sent=0 responder.recv=0 wip.initiator=-1 wip.responder=1 | unpacking clear payload | Now let's proceed with payload (ISAKMP_NEXT_v2SKF) | ***parse IKEv2 Encrypted Fragment: | next payload type: ISAKMP_NEXT_v2NONE (0x0) | flags: none (0x0) | length: 511 (0x1ff) | fragment number: 3 (0x3) | total fragments: 5 (0x5) | processing payload: ISAKMP_NEXT_v2SKF (len=503) | #1 in state PARENT_R1: received v2I1, sent v2R1 | received IKE encrypted fragment number '3', total number '5', next payload '0' | stop processing: state #1 connection "westnet-eastnet-ikev2" from 192.1.2.45:500 (in ikev2_process_packet() at ikev2.c:2018) | #1 spent 0.283 milliseconds in ikev2_process_packet() | stop processing: from 192.1.2.45:500 (in process_md() at demux.c:380) | processing: STOP state #0 (in process_md() at demux.c:382) | processing: STOP connection NULL (in process_md() at demux.c:383) | spent 0.305 milliseconds in comm_handle_cb() reading and processing packet | spent 0.00266 milliseconds in comm_handle_cb() calling check_incoming_msg_errqueue() | *received 539 bytes from 192.1.2.45:500 on eth1 (192.1.2.23:500) | 16 6a bf 80 5a 2e 72 e5 af 01 9e 64 da 8f 43 06 | 35 20 23 08 00 00 00 01 00 00 02 1b 00 00 01 ff | 00 04 00 05 5f 2f 65 1f 2d 98 c4 11 13 5e 67 35 | cb 68 23 23 61 14 53 01 74 ea 1a 32 66 b8 25 ab | 55 87 bc 7e dc a0 9a 0d 96 87 20 4f 60 14 4b 2c | b7 41 82 0a b3 4b 5a 94 ad 93 d5 fa be 5c 24 0d | 5e c2 2a 95 01 b2 3e 89 7e 05 58 82 24 61 7d cb | 83 4e 9e 71 d5 84 3e a5 5f 90 52 b4 00 16 b6 84 | 1f ac 2c 9f b0 58 18 0f af fe d7 db b9 28 33 c6 | 9e 0f 17 0f 9a f2 89 9b a8 49 d5 98 61 f1 bf f7 | dc a5 74 bd 4f 0e fe a8 81 bd ae df aa 44 7b 5f | 56 88 c7 ce 1b 06 78 71 f2 39 45 0c 34 1f ba bc | 75 e9 f0 6f 43 0d 8c 92 76 c9 3a 7a ea 0c d2 12 | 5b c3 02 70 dd e2 8a b7 f8 03 53 50 a0 2d 75 cc | 68 14 79 c2 04 45 09 1e 7a b5 86 f2 94 0d 2a af | 03 f1 ba 26 3f 1b 68 0f c3 56 a2 02 ee 1f 46 1a | 9c b3 eb 8e bb 98 e1 cd f7 4a b2 39 f7 27 bb b0 | fd 82 69 cf 7a 90 52 da 47 b4 9b 5c 9a 39 81 e9 | 14 04 ca fd 2c bf 2d 0f cf 94 38 52 1a d7 18 66 | 61 77 b7 73 4b 53 78 ab d0 77 04 a4 d2 80 47 44 | ba e1 af 41 b2 ab f5 9e e2 f2 1e 9b 9e a7 56 76 | bb b8 e2 cc 3b 0b 40 8f 83 d3 44 f9 01 c3 c7 1f | 43 96 31 9e 94 69 ab a1 74 9d d3 a9 ad e1 05 f4 | 00 a8 2f da e5 47 8d 0e e6 9c 69 fb cf bf 9b 50 | 60 eb 7c ee 34 9a 13 ec ce 69 cd 17 99 bf 14 77 | 74 0f a3 39 f3 1b 28 d3 9d 53 25 5c fc d0 18 b2 | 65 61 ea 8e 95 e8 0b e2 1d 94 cb da c8 53 1b 62 | 91 91 5f 08 aa 7d e1 7d a2 cd 67 77 5e 18 7a 08 | 2a 6b 0a e8 5b d8 20 b2 71 36 84 2d 1b 29 8a 5e | f2 c6 13 7d cc 37 42 a1 2c 3e 65 ee dc f9 48 30 | 6f f2 3b 8f 4e 3e 22 53 f3 9f f7 92 0f 0d ae 90 | 36 b1 1e ba 05 21 8c 15 cd 35 55 22 4b 3c 9d c8 | ed 26 4a 2a 3b 0b 52 b6 b1 11 32 00 02 6e 8b f1 | e2 dc d0 f4 de 0a d3 a0 1e 26 81 | start processing: from 192.1.2.45:500 (in process_md() at demux.c:378) | **parse ISAKMP Message: | initiator cookie: | 16 6a bf 80 5a 2e 72 e5 | responder cookie: | af 01 9e 64 da 8f 43 06 | next payload type: ISAKMP_NEXT_v2SKF (0x35) | ISAKMP version: IKEv2 version 2.0 (rfc4306/rfc5996) (0x20) | exchange type: ISAKMP_v2_IKE_AUTH (0x23) | flags: ISAKMP_FLAG_v2_IKE_INIT (0x8) | Message ID: 1 (0x1) | length: 539 (0x21b) | processing version=2.0 packet with exchange type=ISAKMP_v2_IKE_AUTH (35) | I am the IKE SA Original Responder receiving an IKEv2 IKE_AUTH request | State DB: found IKEv2 state #1 in PARENT_R1 (find_v2_ike_sa) | start processing: state #1 connection "westnet-eastnet-ikev2" from 192.1.2.45:500 (in ikev2_process_packet() at ikev2.c:2016) | [RE]START processing: state #1 connection "westnet-eastnet-ikev2" from 192.1.2.45:500 (in ike_process_packet() at ikev2.c:2062) | #1 st.st_msgid_lastrecv 0 md.hdr.isa_msgid 00000001 | #1 is idle | #1 idle | Message ID: #1 not a duplicate - responder is accumulating fragments; initiator.sent=-1 initiator.recv=-1 responder.sent=0 responder.recv=0 wip.initiator=-1 wip.responder=1 | unpacking clear payload | Now let's proceed with payload (ISAKMP_NEXT_v2SKF) | ***parse IKEv2 Encrypted Fragment: | next payload type: ISAKMP_NEXT_v2NONE (0x0) | flags: none (0x0) | length: 511 (0x1ff) | fragment number: 4 (0x4) | total fragments: 5 (0x5) | processing payload: ISAKMP_NEXT_v2SKF (len=503) | #1 in state PARENT_R1: received v2I1, sent v2R1 | received IKE encrypted fragment number '4', total number '5', next payload '0' | stop processing: state #1 connection "westnet-eastnet-ikev2" from 192.1.2.45:500 (in ikev2_process_packet() at ikev2.c:2018) | #1 spent 0.281 milliseconds in ikev2_process_packet() | stop processing: from 192.1.2.45:500 (in process_md() at demux.c:380) | processing: STOP state #0 (in process_md() at demux.c:382) | processing: STOP connection NULL (in process_md() at demux.c:383) | spent 0.304 milliseconds in comm_handle_cb() reading and processing packet | spent 0.00268 milliseconds in comm_handle_cb() calling check_incoming_msg_errqueue() | *received 221 bytes from 192.1.2.45:500 on eth1 (192.1.2.23:500) | 16 6a bf 80 5a 2e 72 e5 af 01 9e 64 da 8f 43 06 | 35 20 23 08 00 00 00 01 00 00 00 dd 00 00 00 c1 | 00 05 00 05 95 40 f2 ee c2 46 17 50 77 15 58 85 | 66 df b5 c7 ba 20 02 26 15 3c a5 20 d1 bf 7f 1c | 19 f0 64 2f f1 48 c8 46 65 2c a5 73 3e e1 5f cf | 1c a0 20 2d 44 b6 5f 5d 5d a5 84 a2 76 70 73 83 | 49 be 1a 87 7f 21 96 d9 aa 4c 10 8d a0 54 ed ef | ba c4 67 dd 34 78 de b7 17 c5 9d 16 1c ff 88 7c | ac 1c 92 19 f0 02 59 9c f5 ec 1c e9 a7 b2 61 49 | f3 2a 0d 62 70 b6 e1 73 5c a1 bb eb 2f 6d 7b 65 | 12 ae 47 e4 a2 46 a8 c0 e0 aa f4 c1 29 65 d6 3e | 1e c0 c9 07 0f fa 97 de 68 0d 10 7f fd 2e 22 7f | 49 f2 ed d1 4c e8 dd 73 d2 62 38 33 90 f1 56 dc | 2c 13 3d 82 f8 ac 87 45 27 91 66 ca 3c | start processing: from 192.1.2.45:500 (in process_md() at demux.c:378) | **parse ISAKMP Message: | initiator cookie: | 16 6a bf 80 5a 2e 72 e5 | responder cookie: | af 01 9e 64 da 8f 43 06 | next payload type: ISAKMP_NEXT_v2SKF (0x35) | ISAKMP version: IKEv2 version 2.0 (rfc4306/rfc5996) (0x20) | exchange type: ISAKMP_v2_IKE_AUTH (0x23) | flags: ISAKMP_FLAG_v2_IKE_INIT (0x8) | Message ID: 1 (0x1) | length: 221 (0xdd) | processing version=2.0 packet with exchange type=ISAKMP_v2_IKE_AUTH (35) | I am the IKE SA Original Responder receiving an IKEv2 IKE_AUTH request | State DB: found IKEv2 state #1 in PARENT_R1 (find_v2_ike_sa) | start processing: state #1 connection "westnet-eastnet-ikev2" from 192.1.2.45:500 (in ikev2_process_packet() at ikev2.c:2016) | [RE]START processing: state #1 connection "westnet-eastnet-ikev2" from 192.1.2.45:500 (in ike_process_packet() at ikev2.c:2062) | #1 st.st_msgid_lastrecv 0 md.hdr.isa_msgid 00000001 | #1 is idle | #1 idle | Message ID: #1 not a duplicate - responder is accumulating fragments; initiator.sent=-1 initiator.recv=-1 responder.sent=0 responder.recv=0 wip.initiator=-1 wip.responder=1 | unpacking clear payload | Now let's proceed with payload (ISAKMP_NEXT_v2SKF) | ***parse IKEv2 Encrypted Fragment: | next payload type: ISAKMP_NEXT_v2NONE (0x0) | flags: none (0x0) | length: 193 (0xc1) | fragment number: 5 (0x5) | total fragments: 5 (0x5) | processing payload: ISAKMP_NEXT_v2SKF (len=185) | #1 in state PARENT_R1: received v2I1, sent v2R1 | received IKE encrypted fragment number '5', total number '5', next payload '0' | selected state microcode Responder: process IKE_AUTH request (no SKEYSEED) | Now let's proceed with state specific processing | calling processor Responder: process IKE_AUTH request (no SKEYSEED) | ikev2 parent inI2outR2: calculating g^{xy} in order to decrypt I2 | offloading IKEv2 SKEYSEED using prf=HMAC_SHA2_512 integ=NONE cipherkey=AES_GCM_16 | adding ikev2_inI2outR2 KE work-order 2 for state #1 | state #1 requesting EVENT_SO_DISCARD to be deleted | libevent_free: release ptr-libevent@0x55cbd9cebec8 | free_event_entry: release EVENT_SO_DISCARD-pe@0x55cbd9ce8048 | event_schedule: new EVENT_CRYPTO_TIMEOUT-pe@0x55cbd9ce8048 | inserting event EVENT_CRYPTO_TIMEOUT, timeout in 60 seconds for #1 | libevent_malloc: new ptr-libevent@0x7f4b44002888 size 128 | #1 spent 0.0515 milliseconds in processing: Responder: process IKE_AUTH request (no SKEYSEED) in ikev2_process_state_packet() | [RE]START processing: state #1 connection "westnet-eastnet-ikev2" from 192.1.2.45:500 (in complete_v2_state_transition() at ikev2.c:3379) | crypto helper 1 resuming | crypto helper 1 starting work-order 2 for state #1 | crypto helper 1 doing compute dh (V2) (ikev2_inI2outR2 KE); request ID 2 | #1 complete_v2_state_transition() PARENT_R1->PARENT_R1 with status STF_SUSPEND | suspending state #1 and saving MD | #1 is busy; has a suspended MD | [RE]START processing: state #1 connection "westnet-eastnet-ikev2" from 192.1.2.45:500 (in log_stf_suspend() at ikev2.c:3269) | "westnet-eastnet-ikev2" #1 complete v2 state STATE_PARENT_R1 transition with STF_SUSPEND suspended from complete_v2_state_transition:3451 | stop processing: state #1 connection "westnet-eastnet-ikev2" from 192.1.2.45:500 (in ikev2_process_packet() at ikev2.c:2018) | #1 spent 0.374 milliseconds in ikev2_process_packet() | stop processing: from 192.1.2.45:500 (in process_md() at demux.c:380) | processing: STOP state #0 (in process_md() at demux.c:382) | processing: STOP connection NULL (in process_md() at demux.c:383) | spent 0.393 milliseconds in comm_handle_cb() reading and processing packet | calculating skeyseed using prf=sha2_512 integ=none cipherkey-size=32 salt-size=4 | crypto helper 1 finished compute dh (V2) (ikev2_inI2outR2 KE); request ID 2 time elapsed 0.002506 seconds | (#1) spent 2.51 milliseconds in crypto helper computing work-order 2: ikev2_inI2outR2 KE (pcr) | crypto helper 1 sending results from work-order 2 for state #1 to event queue | scheduling resume sending helper answer for #1 | libevent_malloc: new ptr-libevent@0x7f4b3c000f48 size 128 | crypto helper 1 waiting (nothing to do) | processing resume sending helper answer for #1 | start processing: state #1 connection "westnet-eastnet-ikev2" from 192.1.2.45:500 (in resume_handler() at server.c:797) | crypto helper 1 replies to request ID 2 | calling continuation function 0x55cbd96c3b50 | ikev2_parent_inI2outR2_continue for #1: calculating g^{xy}, sending R2 | #1 in state PARENT_R1: received v2I1, sent v2R1 | already have all fragments, skipping fragment collection | already have all fragments, skipping fragment collection | #1 ikev2 ISAKMP_v2_IKE_AUTH decrypt success | Now let's proceed with payload (ISAKMP_NEXT_v2IDi) | **parse IKEv2 Identification - Initiator - Payload: | next payload type: ISAKMP_NEXT_v2CERT (0x25) | flags: none (0x0) | length: 191 (0xbf) | ID type: ID_DER_ASN1_DN (0x9) | processing payload: ISAKMP_NEXT_v2IDi (len=183) | Now let's proceed with payload (ISAKMP_NEXT_v2CERT) | **parse IKEv2 Certificate Payload: | next payload type: ISAKMP_NEXT_v2IDr (0x24) | flags: none (0x0) | length: 1265 (0x4f1) | ikev2 cert encoding: CERT_X509_SIGNATURE (0x4) | processing payload: ISAKMP_NEXT_v2CERT (len=1260) | Now let's proceed with payload (ISAKMP_NEXT_v2IDr) | **parse IKEv2 Identification - Responder - Payload: | next payload type: ISAKMP_NEXT_v2AUTH (0x27) | flags: none (0x0) | length: 12 (0xc) | ID type: ID_FQDN (0x2) | processing payload: ISAKMP_NEXT_v2IDr (len=4) | Now let's proceed with payload (ISAKMP_NEXT_v2AUTH) | **parse IKEv2 Authentication Payload: | next payload type: ISAKMP_NEXT_v2SA (0x21) | flags: none (0x0) | length: 392 (0x188) | auth method: IKEv2_AUTH_RSA (0x1) | processing payload: ISAKMP_NEXT_v2AUTH (len=384) | Now let's proceed with payload (ISAKMP_NEXT_v2SA) | **parse IKEv2 Security Association Payload: | next payload type: ISAKMP_NEXT_v2TSi (0x2c) | flags: none (0x0) | length: 164 (0xa4) | processing payload: ISAKMP_NEXT_v2SA (len=160) | Now let's proceed with payload (ISAKMP_NEXT_v2TSi) | **parse IKEv2 Traffic Selector - Initiator - Payload: | next payload type: ISAKMP_NEXT_v2TSr (0x2d) | flags: none (0x0) | length: 24 (0x18) | number of TS: 1 (0x1) | processing payload: ISAKMP_NEXT_v2TSi (len=16) | Now let's proceed with payload (ISAKMP_NEXT_v2TSr) | **parse IKEv2 Traffic Selector - Responder - Payload: | next payload type: ISAKMP_NEXT_v2NONE (0x0) | flags: none (0x0) | length: 24 (0x18) | number of TS: 1 (0x1) | processing payload: ISAKMP_NEXT_v2TSr (len=16) | selected state microcode Responder: process IKE_AUTH request | Now let's proceed with state specific processing | calling processor Responder: process IKE_AUTH request "westnet-eastnet-ikev2" #1: processing decrypted IKE_AUTH request: SK{IDi,CERT,IDr,AUTH,SA,TSi,TSr} | #1 updating local interface from 192.1.2.23:500 to 192.1.2.23:500 using md->iface (in update_ike_endpoints() at state.c:2669) | global one-shot timer EVENT_FREE_ROOT_CERTS scheduled in 300 seconds loading root certificate cache | spent 8.17 milliseconds in get_root_certs() calling PK11_ListCertsInSlot() | spent 0.0544 milliseconds in get_root_certs() filtering CAs | #1 spent 8.29 milliseconds in find_and_verify_certs() calling get_root_certs() | checking for known CERT payloads | saving certificate of type 'X509_SIGNATURE' | decoded cert: E=user-west@testing.libreswan.org,CN=west.testing.libreswan.org,OU=Test Department,O=Libreswan,L=Toronto,ST=Ontario,C=CA | #1 spent 1.22 milliseconds in find_and_verify_certs() calling decode_cert_payloads() | cert_issuer_has_current_crl: looking for a CRL issued by E=testing@libreswan.org,CN=Libreswan test CA for mainca,OU=Test Department,O=Libreswan,L=Toronto,ST=Ontario,C=CA | #1 spent 0.09 milliseconds in find_and_verify_certs() calling crl_update_check() | missing or expired CRL | crl_strict: 0, ocsp: 0, ocsp_strict: 0, ocsp_post: 0 | verify_end_cert trying profile IPsec | certificate is valid (profile IPsec) | #1 spent 0.301 milliseconds in find_and_verify_certs() calling verify_end_cert() "westnet-eastnet-ikev2" #1: certificate verified OK: E=user-west@testing.libreswan.org,CN=west.testing.libreswan.org,OU=Test Department,O=Libreswan,L=Toronto,ST=Ontario,C=CA | get_pluto_gn_from_nss_cert: allocated pluto_gn 0x55cbd9cf94e8 | get_pluto_gn_from_nss_cert: allocated pluto_gn 0x55cbd9cf8b28 | get_pluto_gn_from_nss_cert: allocated pluto_gn 0x55cbd9d05f68 | get_pluto_gn_from_nss_cert: allocated pluto_gn 0x55cbd9d05db8 | get_pluto_gn_from_nss_cert: allocated pluto_gn 0x55cbd9cf3988 | unreference key: 0x55cbd9d07588 C=CA, ST=Ontario, L=Toronto, O=Libreswan, OU=Test Department, CN=west.testing.libreswan.org, E=user-west@testing.libreswan.org cnt 1-- | #1 spent 0.636 milliseconds in decode_certs() calling add_pubkey_from_nss_cert() | #1 spent 10.6 milliseconds in decode_certs() | DER ASN1 DN: 30 81 b4 31 0b 30 09 06 03 55 04 06 13 02 43 41 | DER ASN1 DN: 31 10 30 0e 06 03 55 04 08 0c 07 4f 6e 74 61 72 | DER ASN1 DN: 69 6f 31 10 30 0e 06 03 55 04 07 0c 07 54 6f 72 | DER ASN1 DN: 6f 6e 74 6f 31 12 30 10 06 03 55 04 0a 0c 09 4c | DER ASN1 DN: 69 62 72 65 73 77 61 6e 31 18 30 16 06 03 55 04 | DER ASN1 DN: 0b 0c 0f 54 65 73 74 20 44 65 70 61 72 74 6d 65 | DER ASN1 DN: 6e 74 31 23 30 21 06 03 55 04 03 0c 1a 77 65 73 | DER ASN1 DN: 74 2e 74 65 73 74 69 6e 67 2e 6c 69 62 72 65 73 | DER ASN1 DN: 77 61 6e 2e 6f 72 67 31 2e 30 2c 06 09 2a 86 48 | DER ASN1 DN: 86 f7 0d 01 09 01 16 1f 75 73 65 72 2d 77 65 73 | DER ASN1 DN: 74 40 74 65 73 74 69 6e 67 2e 6c 69 62 72 65 73 | DER ASN1 DN: 77 61 6e 2e 6f 72 67 | received IDr payload - extracting our alleged ID | ID_DER_ASN1_DN '%fromcert' does not need further ID verification | stomping on peer_id | X509: CERT and ID matches current connection | refine_host_connection for IKEv2: starting with "westnet-eastnet-ikev2" | trusted_ca_nss: trustee A = 'C=CA, ST=Ontario, L=Toronto, O=Libreswan, OU=Test Department, CN=Libreswan test CA for mainca, E=testing@libreswan.org' | match_id a=C=CA, ST=Ontario, L=Toronto, O=Libreswan, OU=Test Department, CN=west.testing.libreswan.org, E=user-west@testing.libreswan.org | b=C=CA, ST=Ontario, L=Toronto, O=Libreswan, OU=Test Department, CN=west.testing.libreswan.org, E=user-west@testing.libreswan.org | results matched | trusted_ca_nss: trustee A = 'C=CA, ST=Ontario, L=Toronto, O=Libreswan, OU=Test Department, CN=Libreswan test CA for mainca, E=testing@libreswan.org' | refine_host_connection: checking "westnet-eastnet-ikev2" against "westnet-eastnet-ikev2", best=(none) with match=1(id=1(0)/ca=1(7)/reqca=1(0)) | Warning: not switching back to template of current instance | Peer expects us to be @east (ID_FQDN) according to its IDr payload | This connection's local id is @east (ID_FQDN) | refine_host_connection: checked westnet-eastnet-ikev2 against westnet-eastnet-ikev2, now for see if best | started looking for secret for @east->C=CA, ST=Ontario, L=Toronto, O=Libreswan, OU=Test Department, CN=west.testing.libreswan.org, E=user-west@testing.libreswan.org of kind PKK_RSA | actually looking for secret for @east->C=CA, ST=Ontario, L=Toronto, O=Libreswan, OU=Test Department, CN=west.testing.libreswan.org, E=user-west@testing.libreswan.org of kind PKK_RSA | line 1: key type PKK_RSA(@east) to type PKK_RSA | 1: compared key (none) to @east / C=CA, ST=Ontario, L=Toronto, O=Libreswan, OU=Test Department, CN=west.testing.libreswan.org, E=user-west@testing.libreswan.org -> 002 | 2: compared key (none) to @east / C=CA, ST=Ontario, L=Toronto, O=Libreswan, OU=Test Department, CN=west.testing.libreswan.org, E=user-west@testing.libreswan.org -> 002 | line 1: match=002 | match 002 beats previous best_match 000 match=0x55cbd9bd3b58 (line=1) | concluding with best_match=002 best=0x55cbd9bd3b58 (lineno=1) | refine_host_connection: picking new best "westnet-eastnet-ikev2" (wild=0, peer_pathlen=7/our=0) | refine going into 2nd loop allowing instantiated conns as well | returning since no better match than original best_found | offered CA: '%none' "westnet-eastnet-ikev2" #1: IKEv2 mode peer ID is ID_DER_ASN1_DN: 'C=CA, ST=Ontario, L=Toronto, O=Libreswan, OU=Test Department, CN=west.testing.libreswan.org, E=user-west@testing.libreswan.org' | verifying AUTH payload | required RSA CA is '%any' | checking RSA keyid 'C=CA, ST=Ontario, L=Toronto, O=Libreswan, OU=Test Department, CN=west.testing.libreswan.org, E=user-west@testing.libreswan.org' for match with 'C=CA, ST=Ontario, L=Toronto, O=Libreswan, OU=Test Department, CN=west.testing.libreswan.org, E=user-west@testing.libreswan.org' | trusted_ca_nss: trustee A = 'C=CA, ST=Ontario, L=Toronto, O=Libreswan, OU=Test Department, CN=Libreswan test CA for mainca, E=testing@libreswan.org' | key issuer CA is 'C=CA, ST=Ontario, L=Toronto, O=Libreswan, OU=Test Department, CN=Libreswan test CA for mainca, E=testing@libreswan.org' | an RSA Sig check passed with *AwEAAZd0v [remote certificates] | #1 spent 0.231 milliseconds in try_all_RSA_keys() trying a pubkey "westnet-eastnet-ikev2" #1: Authenticated using RSA | #1 spent 0.283 milliseconds in ikev2_verify_rsa_hash() | parent state #1: PARENT_R1(half-open IKE SA) => PARENT_R2(established IKE SA) | #1 will start re-keying in 3330 seconds with margin of 270 seconds (attempting re-key) | state #1 requesting EVENT_CRYPTO_TIMEOUT to be deleted | libevent_free: release ptr-libevent@0x7f4b44002888 | free_event_entry: release EVENT_CRYPTO_TIMEOUT-pe@0x55cbd9ce8048 | event_schedule: new EVENT_SA_REKEY-pe@0x55cbd9ce8048 | inserting event EVENT_SA_REKEY, timeout in 3330 seconds for #1 | libevent_malloc: new ptr-libevent@0x55cbd9cf1658 size 128 | pstats #1 ikev2.ike established | **emit ISAKMP Message: | initiator cookie: | 16 6a bf 80 5a 2e 72 e5 | responder cookie: | af 01 9e 64 da 8f 43 06 | next payload type: ISAKMP_NEXT_NONE (0x0) | ISAKMP version: IKEv2 version 2.0 (rfc4306/rfc5996) (0x20) | exchange type: ISAKMP_v2_IKE_AUTH (0x23) | flags: ISAKMP_FLAG_v2_MSG_RESPONSE (0x20) | Message ID: 1 (0x1) | next payload chain: saving message location 'ISAKMP Message'.'next payload type' | IKEv2 CERT: send a certificate? | IKEv2 CERT: no certificate to send | ***emit IKEv2 Encryption Payload: | next payload type: ISAKMP_NEXT_v2NONE (0x0) | flags: none (0x0) | next payload chain: setting previous 'ISAKMP Message'.'next payload type' to current IKEv2 Encryption Payload (46:ISAKMP_NEXT_v2SK) | next payload chain: saving location 'IKEv2 Encryption Payload'.'next payload type' in 'reply packet' | emitting 8 zero bytes of IV into IKEv2 Encryption Payload | Initiator child policy is compress=no, NOT sending v2N_IPCOMP_SUPPORTED | ****emit IKEv2 Identification - Responder - Payload: | next payload type: ISAKMP_NEXT_v2NONE (0x0) | flags: none (0x0) | ID type: ID_FQDN (0x2) | next payload chain: setting previous 'IKEv2 Encryption Payload'.'next payload type' to current IKEv2 Identification - Responder - Payload (36:ISAKMP_NEXT_v2IDr) | next payload chain: saving location 'IKEv2 Identification - Responder - Payload'.'next payload type' in 'reply packet' | emitting 4 raw bytes of my identity into IKEv2 Identification - Responder - Payload | my identity 65 61 73 74 | emitting length of IKEv2 Identification - Responder - Payload: 12 | assembled IDr payload | CHILD SA proposals received | going to assemble AUTH payload | ****emit IKEv2 Authentication Payload: | next payload type: ISAKMP_NEXT_v2SA (0x21) | flags: none (0x0) | auth method: IKEv2_AUTH_RSA (0x1) | next payload chain: ignoring supplied 'IKEv2 Authentication Payload'.'next payload type' value 33:ISAKMP_NEXT_v2SA | next payload chain: setting previous 'IKEv2 Identification - Responder - Payload'.'next payload type' to current IKEv2 Authentication Payload (39:ISAKMP_NEXT_v2AUTH) | next payload chain: saving location 'IKEv2 Authentication Payload'.'next payload type' in 'reply packet' | started looking for secret for @east->C=CA, ST=Ontario, L=Toronto, O=Libreswan, OU=Test Department, CN=west.testing.libreswan.org, E=user-west@testing.libreswan.org of kind PKK_RSA | actually looking for secret for @east->C=CA, ST=Ontario, L=Toronto, O=Libreswan, OU=Test Department, CN=west.testing.libreswan.org, E=user-west@testing.libreswan.org of kind PKK_RSA | line 1: key type PKK_RSA(@east) to type PKK_RSA | 1: compared key (none) to @east / C=CA, ST=Ontario, L=Toronto, O=Libreswan, OU=Test Department, CN=west.testing.libreswan.org, E=user-west@testing.libreswan.org -> 002 | 2: compared key (none) to @east / C=CA, ST=Ontario, L=Toronto, O=Libreswan, OU=Test Department, CN=west.testing.libreswan.org, E=user-west@testing.libreswan.org -> 002 | line 1: match=002 | match 002 beats previous best_match 000 match=0x55cbd9bd3b58 (line=1) | concluding with best_match=002 best=0x55cbd9bd3b58 (lineno=1) "westnet-eastnet-ikev2" #1: Can't find the certificate or private key from the NSS CKA_ID | #1 spent 4.94 milliseconds in ikev2_calculate_rsa_hash() calling sign_hash_RSA() "westnet-eastnet-ikev2" #1: Failed to find our RSA key | ikev2_parent_inI2outR2_continue_tail returned STF_FATAL | #1 spent 16.5 milliseconds in processing: Responder: process IKE_AUTH request in ikev2_process_state_packet() | [RE]START processing: state #1 connection "westnet-eastnet-ikev2" from 192.1.2.45:500 (in complete_v2_state_transition() at ikev2.c:3379) | #1 complete_v2_state_transition() md.from_state=PARENT_R1 md.svm.state[from]=PARENT_R1 PARENT_R2->V2_IPSEC_R with status STF_FATAL | release_pending_whacks: state #1 has no whack fd | pstats #1 ikev2.ike deleted completed | #1 spent 8.39 milliseconds in total | [RE]START processing: state #1 connection "westnet-eastnet-ikev2" from 192.1.2.45:500 (in delete_state() at state.c:879) "westnet-eastnet-ikev2" #1: deleting state (STATE_PARENT_R2) aged 0.043s and sending notification | parent state #1: PARENT_R2(established IKE SA) => delete | #1 send IKEv2 delete notification for STATE_PARENT_R2 | Opening output PBS informational exchange delete request | **emit ISAKMP Message: | initiator cookie: | 16 6a bf 80 5a 2e 72 e5 | responder cookie: | af 01 9e 64 da 8f 43 06 | next payload type: ISAKMP_NEXT_NONE (0x0) | ISAKMP version: IKEv2 version 2.0 (rfc4306/rfc5996) (0x20) | exchange type: ISAKMP_v2_INFORMATIONAL (0x25) | flags: none (0x0) | Message ID: 0 (0x0) | next payload chain: saving message location 'ISAKMP Message'.'next payload type' | ***emit IKEv2 Encryption Payload: | next payload type: ISAKMP_NEXT_v2NONE (0x0) | flags: none (0x0) | next payload chain: setting previous 'ISAKMP Message'.'next payload type' to current IKEv2 Encryption Payload (46:ISAKMP_NEXT_v2SK) | next payload chain: saving location 'IKEv2 Encryption Payload'.'next payload type' in 'informational exchange delete request' | emitting 8 zero bytes of IV into IKEv2 Encryption Payload | ****emit IKEv2 Delete Payload: | next payload type: ISAKMP_NEXT_v2NONE (0x0) | flags: none (0x0) | protocol ID: PROTO_v2_IKE (0x1) | SPI size: 0 (0x0) | number of SPIs: 0 (0x0) | next payload chain: setting previous 'IKEv2 Encryption Payload'.'next payload type' to current IKEv2 Delete Payload (42:ISAKMP_NEXT_v2D) | next payload chain: saving location 'IKEv2 Delete Payload'.'next payload type' in 'informational exchange delete request' | emitting length of IKEv2 Delete Payload: 8 | adding 1 bytes of padding (including 1 byte padding-length) | emitting 1 0x00 repeated bytes of padding and length into IKEv2 Encryption Payload | emitting 16 zero bytes of length of truncated HMAC/KEY into IKEv2 Encryption Payload | emitting length of IKEv2 Encryption Payload: 37 | emitting length of ISAKMP Message: 65 | sending 65 bytes for delete notification through eth1 from 192.1.2.23:500 to 192.1.2.45:500 (using #1) | 16 6a bf 80 5a 2e 72 e5 af 01 9e 64 da 8f 43 06 | 2e 20 25 00 00 00 00 00 00 00 00 41 2a 00 00 25 | a2 fd f1 5b 46 6f 0d 25 78 cd e0 46 e1 74 f7 e2 | 21 e9 1e dc 9b 95 92 51 27 5e b3 af 64 3e 31 9f | 11 | Message ID: IKE #1 sender #1 in send_delete record 'n' sending delete request so forcing IKE nextuse=0->1 and sender msgid=0->0 | Message ID: IKE #1 sender #1 in send_delete hacking around record ' send | Message ID: sent #1 request 0; ike: initiator.sent=-1->0 initiator.recv=-1 responder.sent=0 responder.recv=0 wip.initiator=-1->0 wip.responder=1 | state #1 requesting EVENT_SA_REKEY to be deleted | libevent_free: release ptr-libevent@0x55cbd9cf1658 | free_event_entry: release EVENT_SA_REKEY-pe@0x55cbd9ce8048 | State DB: IKEv2 state not found (flush_incomplete_children) | in connection_discard for connection westnet-eastnet-ikev2 | State DB: deleting IKEv2 state #1 in PARENT_R2 | parent state #1: PARENT_R2(established IKE SA) => UNDEFINED(ignore) | unreference key: 0x55cbd9cf36f8 C=CA, ST=Ontario, L=Toronto, O=Libreswan, OU=Test Department, CN=west.testing.libreswan.org, E=user-west@testing.libreswan.org cnt 2-- | stop processing: state #1 from 192.1.2.45:500 (in delete_state() at state.c:1143) | unreference key: 0x55cbd9cf36f8 C=CA, ST=Ontario, L=Toronto, O=Libreswan, OU=Test Department, CN=west.testing.libreswan.org, E=user-west@testing.libreswan.org cnt 1-- | unreference key: 0x55cbd9d07448 user-west@testing.libreswan.org cnt 1-- | unreference key: 0x55cbd9cf3858 @west.testing.libreswan.org cnt 1-- | unreference key: 0x55cbd9cf2598 west@testing.libreswan.org cnt 1-- | unreference key: 0x55cbd9d02cf8 192.1.2.45 cnt 1-- | resume sending helper answer for #1 suppresed complete_v2_state_transition() | in statetime_stop() and could not find #1 | processing: STOP state #0 (in resume_handler() at server.c:833) | libevent_free: release ptr-libevent@0x7f4b3c000f48 | spent 0.00281 milliseconds in comm_handle_cb() calling check_incoming_msg_errqueue() | *received 539 bytes from 192.1.2.45:500 on eth1 (192.1.2.23:500) | 16 6a bf 80 5a 2e 72 e5 af 01 9e 64 da 8f 43 06 | 35 20 23 08 00 00 00 01 00 00 02 1b 23 00 01 ff | 00 01 00 05 9f f8 78 0a 72 42 8c 19 5c 50 cf a8 | f5 ba 1d eb a5 9c 4d c8 5e c6 e7 13 23 62 73 7f | 0f 2e 4d 12 f4 c2 a2 86 80 3b 01 aa b4 61 b1 4f | 90 12 17 90 0d ee 4f b3 50 06 42 4d 30 c0 36 be | 3d 82 70 da 84 5e 43 da 9a 90 f5 51 40 3f 65 d7 | 19 92 ad b0 e7 09 4b 2b e1 f0 79 5c 7f e3 90 2f | be 61 9f f8 74 4c 1e ad c5 b5 01 d2 ef 6e e9 9c | d4 a0 20 96 0f 7d 49 64 e4 80 8c 50 2a f6 f7 e8 | 59 98 ab 56 40 4a fe 0b 9a 18 38 5f db c2 e0 2b | 2f e3 60 9e b1 29 85 77 85 a2 9a ad 98 73 6e e0 | 83 be 4f 80 6d 23 0e 26 e6 e3 94 19 1f 05 6c 75 | ca 3c e0 f0 70 e8 77 10 a8 c1 e4 84 b5 c8 11 ab | 2a de b5 8e 3c be a3 c1 a4 c7 9d 74 e0 4f b8 ac | 40 bb c8 74 a3 f0 0f f3 55 28 13 4e 5d 7d 5e 19 | 93 ad 89 30 02 61 9d 73 d5 ef 4c 6f 73 93 d6 79 | 12 10 b7 76 de 61 08 a8 1f 00 46 5c 04 fa 84 10 | e5 b6 f8 68 6f c0 bd 90 79 47 61 24 c7 dd 5e 4d | bb b0 3b 68 54 ef 31 d0 14 0c 17 e8 5d dc 76 93 | 8e 40 ed 08 e0 8e e6 09 95 85 07 e6 c9 38 b8 3a | 76 ed ae 29 58 c0 a8 cf a1 23 72 47 80 30 3b c3 | 5f db 4f 76 45 b8 43 28 91 33 bf 9d d7 bd cc f2 | 47 64 06 da 65 ab b6 2c 7d 1b d5 36 31 f8 53 5c | fb c5 21 2f d9 a1 27 4d 66 00 0c bc 23 7b ea 18 | 88 60 d2 10 ff 58 1c 31 ab 02 49 77 10 b2 21 cd | 38 a2 fd f3 2c d7 30 9a 00 5e d4 37 da 90 16 49 | ee 05 17 8e 34 a5 0e fb 12 95 ae 00 f8 8b 03 c0 | b4 fc e0 42 7e b9 6b b2 5a 89 f4 ae d2 7f f0 e9 | 25 14 65 b1 c9 f7 8b c8 2b 4c bd fc c3 7b 3d 18 | 4f 86 62 02 23 6c 53 2f ed 64 c2 09 4f 30 fe 3e | cc ee d8 2f dd 21 af 6b 3c 19 6d 1b e5 ea 7e d1 | d2 83 e5 32 1f ff b0 10 74 2e 35 42 dd 13 8f cc | 76 d2 79 fc fc 3d 9e 7a 30 44 5a | start processing: from 192.1.2.45:500 (in process_md() at demux.c:378) | **parse ISAKMP Message: | initiator cookie: | 16 6a bf 80 5a 2e 72 e5 | responder cookie: | af 01 9e 64 da 8f 43 06 | next payload type: ISAKMP_NEXT_v2SKF (0x35) | ISAKMP version: IKEv2 version 2.0 (rfc4306/rfc5996) (0x20) | exchange type: ISAKMP_v2_IKE_AUTH (0x23) | flags: ISAKMP_FLAG_v2_IKE_INIT (0x8) | Message ID: 1 (0x1) | length: 539 (0x21b) | processing version=2.0 packet with exchange type=ISAKMP_v2_IKE_AUTH (35) | I am the IKE SA Original Responder receiving an IKEv2 IKE_AUTH request | State DB: IKEv2 state not found (find_v2_ike_sa) packet from 192.1.2.45:500: IKE_AUTH message request has no corresponding IKE SA | stop processing: from 192.1.2.45:500 (in process_md() at demux.c:380) | processing: STOP state #0 (in process_md() at demux.c:382) | processing: STOP connection NULL (in process_md() at demux.c:383) | spent 0.0807 milliseconds in comm_handle_cb() reading and processing packet | spent 0.00104 milliseconds in comm_handle_cb() calling check_incoming_msg_errqueue() | *received 539 bytes from 192.1.2.45:500 on eth1 (192.1.2.23:500) | 16 6a bf 80 5a 2e 72 e5 af 01 9e 64 da 8f 43 06 | 35 20 23 08 00 00 00 01 00 00 02 1b 00 00 01 ff | 00 02 00 05 22 ce 23 58 04 2a af 66 90 f7 c3 5e | fa 69 cb bf 4a 3a 69 1a 69 5f 8a 97 84 5d dd 0c | cf 26 f1 a9 80 49 5d 79 c9 5b 60 5f 37 d0 54 c5 | bc a9 75 a3 90 50 a4 a5 47 44 e5 79 8d 1d 73 1a | f8 5c 65 e7 1d 24 e8 9f 14 19 28 01 1b 5d 19 cd | 93 7d 91 1d ee 03 59 b7 27 2b 52 9f df 43 ed f5 | 2e dd ef 64 cd 2b ba f6 a3 59 e2 0f ef ac 0f 9c | 8e 05 83 03 2c 64 ce 04 6a 25 0a c4 e6 52 4f f2 | 36 4c 88 85 2e 93 8a 8a 2a 70 10 16 36 31 ea 89 | 11 ae 16 42 7a 13 84 b3 5f da af dc 3c 8f 0d 25 | 34 08 2b 6a f2 66 59 22 52 c2 f0 bf 94 3b a4 80 | 4b a5 72 48 ce 39 52 93 e0 06 7b 9a 84 3f f6 18 | ef e2 59 82 6f df 62 b2 c7 c3 70 99 33 7b e6 53 | 2f b4 a0 51 5f 2f bc da a4 db d9 58 54 43 64 98 | ec d2 15 28 7c be c6 db c8 f0 82 6b 17 3a a3 2a | 25 78 4c 13 cb e6 e4 df b8 1f cc ab 04 b0 23 73 | 16 e8 ef bf 19 01 83 18 56 01 a1 04 85 ef 36 75 | 78 f6 78 de d6 1f 13 d9 9f 43 3a e0 80 13 7f 6d | 83 8e ff 71 5c 17 c7 2d 46 53 fe 17 99 4a 7f 0d | 15 cf c4 fb 4f e4 ef b1 3b 43 bb 61 4a 32 95 fe | d5 d3 7e 11 40 50 83 fd da 45 5b 7d 0f bc 72 ed | e4 76 6a 16 78 d6 ef 77 a4 f8 56 08 23 8d d3 dd | 55 8e aa 37 cc 8d 9f b0 9e ce bc 43 d4 8c eb 9f | cf 6e 61 46 da af b7 03 97 a2 81 42 13 ad 58 09 | 21 ea dd db 3f fe 46 b3 ad 7a 7c 0f a3 27 07 ae | b5 36 b4 e2 24 42 3e 69 09 05 5c fe 83 65 7b 2c | 34 ac fc 64 10 60 f6 01 14 64 73 db 57 d2 62 d1 | 4c 02 6b a7 34 82 78 65 7f 6b 24 f9 a5 f0 ce 6d | a8 78 c0 7b 04 a6 4d b2 30 49 76 c4 e4 21 a9 0d | 09 c1 a8 3a b5 de c0 f9 32 7b 02 35 b0 b4 da 75 | 5d 36 80 6d b1 38 a1 af b6 00 b7 b1 92 3c 8a d0 | 91 b2 7d 0f 3b 0e 16 1f 5c e5 aa | start processing: from 192.1.2.45:500 (in process_md() at demux.c:378) | **parse ISAKMP Message: | initiator cookie: | 16 6a bf 80 5a 2e 72 e5 | responder cookie: | af 01 9e 64 da 8f 43 06 | next payload type: ISAKMP_NEXT_v2SKF (0x35) | ISAKMP version: IKEv2 version 2.0 (rfc4306/rfc5996) (0x20) | exchange type: ISAKMP_v2_IKE_AUTH (0x23) | flags: ISAKMP_FLAG_v2_IKE_INIT (0x8) | Message ID: 1 (0x1) | length: 539 (0x21b) | processing version=2.0 packet with exchange type=ISAKMP_v2_IKE_AUTH (35) | I am the IKE SA Original Responder receiving an IKEv2 IKE_AUTH request | State DB: IKEv2 state not found (find_v2_ike_sa) packet from 192.1.2.45:500: IKE_AUTH message request has no corresponding IKE SA | stop processing: from 192.1.2.45:500 (in process_md() at demux.c:380) | processing: STOP state #0 (in process_md() at demux.c:382) | processing: STOP connection NULL (in process_md() at demux.c:383) | spent 0.068 milliseconds in comm_handle_cb() reading and processing packet | spent 0.000993 milliseconds in comm_handle_cb() calling check_incoming_msg_errqueue() | *received 539 bytes from 192.1.2.45:500 on eth1 (192.1.2.23:500) | 16 6a bf 80 5a 2e 72 e5 af 01 9e 64 da 8f 43 06 | 35 20 23 08 00 00 00 01 00 00 02 1b 00 00 01 ff | 00 03 00 05 65 e8 85 e5 09 60 91 2e 3e 1a ec cf | 1e cc 40 b9 d7 08 b1 02 5e 37 56 c3 e3 39 92 2b | 51 95 6b 81 74 2b 5e 82 a4 c2 e9 a3 1f 6b 99 89 | 21 09 83 df 91 d4 31 79 36 16 af 28 65 56 e0 50 | 15 7f 88 5d de b4 40 53 51 9b cd c4 5c 83 a8 05 | 32 53 ae 23 87 d2 01 3e 1e 23 f6 a7 79 09 45 df | b6 48 16 be 70 8b a2 67 ff 1a 4f bc c4 04 4f f3 | d5 3d 4f 68 a5 98 23 85 6d 69 c5 c1 70 93 bf a9 | 1a 30 1e a1 2f e0 69 78 94 87 14 ab 49 54 00 56 | d4 5a d0 5a b9 18 9c cb 83 da fb 5d 2f 91 c2 58 | f1 38 ca 30 b1 9e 0c 5d 9d f4 fc aa d0 65 d5 b0 | d7 66 f8 59 f7 cb 08 33 da 21 d2 5a 92 80 80 a8 | 61 2e bb 52 5f ae 11 d1 56 40 16 56 d8 be a9 1d | 05 3a e1 ea b5 f0 9f 88 17 09 c1 5b eb a4 38 4b | b8 e3 47 88 e7 34 3d c5 73 52 b3 cd cf 34 3a 64 | 51 c2 46 6c c3 77 de 29 9b 6d 15 fb 57 0f 10 1c | 59 20 14 0f e0 1f 34 ba a1 41 74 d8 12 b0 b3 6b | 41 4d 85 a3 f5 c9 90 79 84 25 6a e4 0e ce ee de | 2d e4 30 9b f0 6a 80 41 b4 16 a7 cb 84 60 b9 2b | e1 21 e1 8a 30 45 05 7f 8d ae 25 7f 1c 49 ae 0e | 87 c0 2c e0 df b7 3d 62 e0 5f ae b3 37 fc 0b 25 | c3 9c f4 24 3a 50 22 9c 0a fa 77 b3 d5 fe d8 0d | 2e 95 c8 f8 8d ce 0d 7e 33 f5 5e 24 da ad 55 0a | 1e 43 95 79 c1 1c ef 9a f3 29 35 4d 44 71 7a 05 | b5 d9 b5 1c 46 db 47 fe 1c 3b 0b 53 0b 2f 48 05 | 9f 5b 14 ba 6c 66 3d 61 68 d3 2a 83 31 47 41 03 | 30 1d e7 55 41 a4 cf 5e 50 3e e0 b2 4d 6b a1 a5 | 33 f0 91 b7 30 de 86 60 63 c0 ac 08 1f 74 d8 6c | 4f 39 b9 a7 c4 ab 64 91 b8 e2 e4 f6 d9 52 35 57 | 56 88 b4 c4 cd c2 c7 ca 22 46 e0 32 e0 d3 1b 22 | f2 c3 88 41 3d 2a d6 c3 ed 1a fa b8 8d 4b 6b c9 | 00 e5 61 d7 65 9c e4 37 a1 90 71 | start processing: from 192.1.2.45:500 (in process_md() at demux.c:378) | **parse ISAKMP Message: | initiator cookie: | 16 6a bf 80 5a 2e 72 e5 | responder cookie: | af 01 9e 64 da 8f 43 06 | next payload type: ISAKMP_NEXT_v2SKF (0x35) | ISAKMP version: IKEv2 version 2.0 (rfc4306/rfc5996) (0x20) | exchange type: ISAKMP_v2_IKE_AUTH (0x23) | flags: ISAKMP_FLAG_v2_IKE_INIT (0x8) | Message ID: 1 (0x1) | length: 539 (0x21b) | processing version=2.0 packet with exchange type=ISAKMP_v2_IKE_AUTH (35) | I am the IKE SA Original Responder receiving an IKEv2 IKE_AUTH request | State DB: IKEv2 state not found (find_v2_ike_sa) packet from 192.1.2.45:500: IKE_AUTH message request has no corresponding IKE SA | stop processing: from 192.1.2.45:500 (in process_md() at demux.c:380) | processing: STOP state #0 (in process_md() at demux.c:382) | processing: STOP connection NULL (in process_md() at demux.c:383) | spent 0.107 milliseconds in comm_handle_cb() reading and processing packet | spent 0.000971 milliseconds in comm_handle_cb() calling check_incoming_msg_errqueue() | *received 539 bytes from 192.1.2.45:500 on eth1 (192.1.2.23:500) | 16 6a bf 80 5a 2e 72 e5 af 01 9e 64 da 8f 43 06 | 35 20 23 08 00 00 00 01 00 00 02 1b 00 00 01 ff | 00 04 00 05 5f 2f 65 1f 2d 98 c4 11 13 5e 67 35 | cb 68 23 23 61 14 53 01 74 ea 1a 32 66 b8 25 ab | 55 87 bc 7e dc a0 9a 0d 96 87 20 4f 60 14 4b 2c | b7 41 82 0a b3 4b 5a 94 ad 93 d5 fa be 5c 24 0d | 5e c2 2a 95 01 b2 3e 89 7e 05 58 82 24 61 7d cb | 83 4e 9e 71 d5 84 3e a5 5f 90 52 b4 00 16 b6 84 | 1f ac 2c 9f b0 58 18 0f af fe d7 db b9 28 33 c6 | 9e 0f 17 0f 9a f2 89 9b a8 49 d5 98 61 f1 bf f7 | dc a5 74 bd 4f 0e fe a8 81 bd ae df aa 44 7b 5f | 56 88 c7 ce 1b 06 78 71 f2 39 45 0c 34 1f ba bc | 75 e9 f0 6f 43 0d 8c 92 76 c9 3a 7a ea 0c d2 12 | 5b c3 02 70 dd e2 8a b7 f8 03 53 50 a0 2d 75 cc | 68 14 79 c2 04 45 09 1e 7a b5 86 f2 94 0d 2a af | 03 f1 ba 26 3f 1b 68 0f c3 56 a2 02 ee 1f 46 1a | 9c b3 eb 8e bb 98 e1 cd f7 4a b2 39 f7 27 bb b0 | fd 82 69 cf 7a 90 52 da 47 b4 9b 5c 9a 39 81 e9 | 14 04 ca fd 2c bf 2d 0f cf 94 38 52 1a d7 18 66 | 61 77 b7 73 4b 53 78 ab d0 77 04 a4 d2 80 47 44 | ba e1 af 41 b2 ab f5 9e e2 f2 1e 9b 9e a7 56 76 | bb b8 e2 cc 3b 0b 40 8f 83 d3 44 f9 01 c3 c7 1f | 43 96 31 9e 94 69 ab a1 74 9d d3 a9 ad e1 05 f4 | 00 a8 2f da e5 47 8d 0e e6 9c 69 fb cf bf 9b 50 | 60 eb 7c ee 34 9a 13 ec ce 69 cd 17 99 bf 14 77 | 74 0f a3 39 f3 1b 28 d3 9d 53 25 5c fc d0 18 b2 | 65 61 ea 8e 95 e8 0b e2 1d 94 cb da c8 53 1b 62 | 91 91 5f 08 aa 7d e1 7d a2 cd 67 77 5e 18 7a 08 | 2a 6b 0a e8 5b d8 20 b2 71 36 84 2d 1b 29 8a 5e | f2 c6 13 7d cc 37 42 a1 2c 3e 65 ee dc f9 48 30 | 6f f2 3b 8f 4e 3e 22 53 f3 9f f7 92 0f 0d ae 90 | 36 b1 1e ba 05 21 8c 15 cd 35 55 22 4b 3c 9d c8 | ed 26 4a 2a 3b 0b 52 b6 b1 11 32 00 02 6e 8b f1 | e2 dc d0 f4 de 0a d3 a0 1e 26 81 | start processing: from 192.1.2.45:500 (in process_md() at demux.c:378) | **parse ISAKMP Message: | initiator cookie: | 16 6a bf 80 5a 2e 72 e5 | responder cookie: | af 01 9e 64 da 8f 43 06 | next payload type: ISAKMP_NEXT_v2SKF (0x35) | ISAKMP version: IKEv2 version 2.0 (rfc4306/rfc5996) (0x20) | exchange type: ISAKMP_v2_IKE_AUTH (0x23) | flags: ISAKMP_FLAG_v2_IKE_INIT (0x8) | Message ID: 1 (0x1) | length: 539 (0x21b) | processing version=2.0 packet with exchange type=ISAKMP_v2_IKE_AUTH (35) | I am the IKE SA Original Responder receiving an IKEv2 IKE_AUTH request | State DB: IKEv2 state not found (find_v2_ike_sa) packet from 192.1.2.45:500: IKE_AUTH message request has no corresponding IKE SA | stop processing: from 192.1.2.45:500 (in process_md() at demux.c:380) | processing: STOP state #0 (in process_md() at demux.c:382) | processing: STOP connection NULL (in process_md() at demux.c:383) | spent 0.0656 milliseconds in comm_handle_cb() reading and processing packet | spent 0.00097 milliseconds in comm_handle_cb() calling check_incoming_msg_errqueue() | *received 221 bytes from 192.1.2.45:500 on eth1 (192.1.2.23:500) | 16 6a bf 80 5a 2e 72 e5 af 01 9e 64 da 8f 43 06 | 35 20 23 08 00 00 00 01 00 00 00 dd 00 00 00 c1 | 00 05 00 05 95 40 f2 ee c2 46 17 50 77 15 58 85 | 66 df b5 c7 ba 20 02 26 15 3c a5 20 d1 bf 7f 1c | 19 f0 64 2f f1 48 c8 46 65 2c a5 73 3e e1 5f cf | 1c a0 20 2d 44 b6 5f 5d 5d a5 84 a2 76 70 73 83 | 49 be 1a 87 7f 21 96 d9 aa 4c 10 8d a0 54 ed ef | ba c4 67 dd 34 78 de b7 17 c5 9d 16 1c ff 88 7c | ac 1c 92 19 f0 02 59 9c f5 ec 1c e9 a7 b2 61 49 | f3 2a 0d 62 70 b6 e1 73 5c a1 bb eb 2f 6d 7b 65 | 12 ae 47 e4 a2 46 a8 c0 e0 aa f4 c1 29 65 d6 3e | 1e c0 c9 07 0f fa 97 de 68 0d 10 7f fd 2e 22 7f | 49 f2 ed d1 4c e8 dd 73 d2 62 38 33 90 f1 56 dc | 2c 13 3d 82 f8 ac 87 45 27 91 66 ca 3c | start processing: from 192.1.2.45:500 (in process_md() at demux.c:378) | **parse ISAKMP Message: | initiator cookie: | 16 6a bf 80 5a 2e 72 e5 | responder cookie: | af 01 9e 64 da 8f 43 06 | next payload type: ISAKMP_NEXT_v2SKF (0x35) | ISAKMP version: IKEv2 version 2.0 (rfc4306/rfc5996) (0x20) | exchange type: ISAKMP_v2_IKE_AUTH (0x23) | flags: ISAKMP_FLAG_v2_IKE_INIT (0x8) | Message ID: 1 (0x1) | length: 221 (0xdd) | processing version=2.0 packet with exchange type=ISAKMP_v2_IKE_AUTH (35) | I am the IKE SA Original Responder receiving an IKEv2 IKE_AUTH request | State DB: IKEv2 state not found (find_v2_ike_sa) packet from 192.1.2.45:500: IKE_AUTH message request has no corresponding IKE SA | stop processing: from 192.1.2.45:500 (in process_md() at demux.c:380) | processing: STOP state #0 (in process_md() at demux.c:382) | processing: STOP connection NULL (in process_md() at demux.c:383) | spent 0.0459 milliseconds in comm_handle_cb() reading and processing packet | spent 0.00305 milliseconds in comm_handle_cb() calling check_incoming_msg_errqueue() | *received 539 bytes from 192.1.2.45:500 on eth1 (192.1.2.23:500) | 16 6a bf 80 5a 2e 72 e5 af 01 9e 64 da 8f 43 06 | 35 20 23 08 00 00 00 01 00 00 02 1b 23 00 01 ff | 00 01 00 05 9f f8 78 0a 72 42 8c 19 5c 50 cf a8 | f5 ba 1d eb a5 9c 4d c8 5e c6 e7 13 23 62 73 7f | 0f 2e 4d 12 f4 c2 a2 86 80 3b 01 aa b4 61 b1 4f | 90 12 17 90 0d ee 4f b3 50 06 42 4d 30 c0 36 be | 3d 82 70 da 84 5e 43 da 9a 90 f5 51 40 3f 65 d7 | 19 92 ad b0 e7 09 4b 2b e1 f0 79 5c 7f e3 90 2f | be 61 9f f8 74 4c 1e ad c5 b5 01 d2 ef 6e e9 9c | d4 a0 20 96 0f 7d 49 64 e4 80 8c 50 2a f6 f7 e8 | 59 98 ab 56 40 4a fe 0b 9a 18 38 5f db c2 e0 2b | 2f e3 60 9e b1 29 85 77 85 a2 9a ad 98 73 6e e0 | 83 be 4f 80 6d 23 0e 26 e6 e3 94 19 1f 05 6c 75 | ca 3c e0 f0 70 e8 77 10 a8 c1 e4 84 b5 c8 11 ab | 2a de b5 8e 3c be a3 c1 a4 c7 9d 74 e0 4f b8 ac | 40 bb c8 74 a3 f0 0f f3 55 28 13 4e 5d 7d 5e 19 | 93 ad 89 30 02 61 9d 73 d5 ef 4c 6f 73 93 d6 79 | 12 10 b7 76 de 61 08 a8 1f 00 46 5c 04 fa 84 10 | e5 b6 f8 68 6f c0 bd 90 79 47 61 24 c7 dd 5e 4d | bb b0 3b 68 54 ef 31 d0 14 0c 17 e8 5d dc 76 93 | 8e 40 ed 08 e0 8e e6 09 95 85 07 e6 c9 38 b8 3a | 76 ed ae 29 58 c0 a8 cf a1 23 72 47 80 30 3b c3 | 5f db 4f 76 45 b8 43 28 91 33 bf 9d d7 bd cc f2 | 47 64 06 da 65 ab b6 2c 7d 1b d5 36 31 f8 53 5c | fb c5 21 2f d9 a1 27 4d 66 00 0c bc 23 7b ea 18 | 88 60 d2 10 ff 58 1c 31 ab 02 49 77 10 b2 21 cd | 38 a2 fd f3 2c d7 30 9a 00 5e d4 37 da 90 16 49 | ee 05 17 8e 34 a5 0e fb 12 95 ae 00 f8 8b 03 c0 | b4 fc e0 42 7e b9 6b b2 5a 89 f4 ae d2 7f f0 e9 | 25 14 65 b1 c9 f7 8b c8 2b 4c bd fc c3 7b 3d 18 | 4f 86 62 02 23 6c 53 2f ed 64 c2 09 4f 30 fe 3e | cc ee d8 2f dd 21 af 6b 3c 19 6d 1b e5 ea 7e d1 | d2 83 e5 32 1f ff b0 10 74 2e 35 42 dd 13 8f cc | 76 d2 79 fc fc 3d 9e 7a 30 44 5a | start processing: from 192.1.2.45:500 (in process_md() at demux.c:378) | **parse ISAKMP Message: | initiator cookie: | 16 6a bf 80 5a 2e 72 e5 | responder cookie: | af 01 9e 64 da 8f 43 06 | next payload type: ISAKMP_NEXT_v2SKF (0x35) | ISAKMP version: IKEv2 version 2.0 (rfc4306/rfc5996) (0x20) | exchange type: ISAKMP_v2_IKE_AUTH (0x23) | flags: ISAKMP_FLAG_v2_IKE_INIT (0x8) | Message ID: 1 (0x1) | length: 539 (0x21b) | processing version=2.0 packet with exchange type=ISAKMP_v2_IKE_AUTH (35) | I am the IKE SA Original Responder receiving an IKEv2 IKE_AUTH request | State DB: IKEv2 state not found (find_v2_ike_sa) packet from 192.1.2.45:500: IKE_AUTH message request has no corresponding IKE SA | stop processing: from 192.1.2.45:500 (in process_md() at demux.c:380) | processing: STOP state #0 (in process_md() at demux.c:382) | processing: STOP connection NULL (in process_md() at demux.c:383) | spent 0.0835 milliseconds in comm_handle_cb() reading and processing packet | spent 0.00108 milliseconds in comm_handle_cb() calling check_incoming_msg_errqueue() | *received 539 bytes from 192.1.2.45:500 on eth1 (192.1.2.23:500) | 16 6a bf 80 5a 2e 72 e5 af 01 9e 64 da 8f 43 06 | 35 20 23 08 00 00 00 01 00 00 02 1b 00 00 01 ff | 00 02 00 05 22 ce 23 58 04 2a af 66 90 f7 c3 5e | fa 69 cb bf 4a 3a 69 1a 69 5f 8a 97 84 5d dd 0c | cf 26 f1 a9 80 49 5d 79 c9 5b 60 5f 37 d0 54 c5 | bc a9 75 a3 90 50 a4 a5 47 44 e5 79 8d 1d 73 1a | f8 5c 65 e7 1d 24 e8 9f 14 19 28 01 1b 5d 19 cd | 93 7d 91 1d ee 03 59 b7 27 2b 52 9f df 43 ed f5 | 2e dd ef 64 cd 2b ba f6 a3 59 e2 0f ef ac 0f 9c | 8e 05 83 03 2c 64 ce 04 6a 25 0a c4 e6 52 4f f2 | 36 4c 88 85 2e 93 8a 8a 2a 70 10 16 36 31 ea 89 | 11 ae 16 42 7a 13 84 b3 5f da af dc 3c 8f 0d 25 | 34 08 2b 6a f2 66 59 22 52 c2 f0 bf 94 3b a4 80 | 4b a5 72 48 ce 39 52 93 e0 06 7b 9a 84 3f f6 18 | ef e2 59 82 6f df 62 b2 c7 c3 70 99 33 7b e6 53 | 2f b4 a0 51 5f 2f bc da a4 db d9 58 54 43 64 98 | ec d2 15 28 7c be c6 db c8 f0 82 6b 17 3a a3 2a | 25 78 4c 13 cb e6 e4 df b8 1f cc ab 04 b0 23 73 | 16 e8 ef bf 19 01 83 18 56 01 a1 04 85 ef 36 75 | 78 f6 78 de d6 1f 13 d9 9f 43 3a e0 80 13 7f 6d | 83 8e ff 71 5c 17 c7 2d 46 53 fe 17 99 4a 7f 0d | 15 cf c4 fb 4f e4 ef b1 3b 43 bb 61 4a 32 95 fe | d5 d3 7e 11 40 50 83 fd da 45 5b 7d 0f bc 72 ed | e4 76 6a 16 78 d6 ef 77 a4 f8 56 08 23 8d d3 dd | 55 8e aa 37 cc 8d 9f b0 9e ce bc 43 d4 8c eb 9f | cf 6e 61 46 da af b7 03 97 a2 81 42 13 ad 58 09 | 21 ea dd db 3f fe 46 b3 ad 7a 7c 0f a3 27 07 ae | b5 36 b4 e2 24 42 3e 69 09 05 5c fe 83 65 7b 2c | 34 ac fc 64 10 60 f6 01 14 64 73 db 57 d2 62 d1 | 4c 02 6b a7 34 82 78 65 7f 6b 24 f9 a5 f0 ce 6d | a8 78 c0 7b 04 a6 4d b2 30 49 76 c4 e4 21 a9 0d | 09 c1 a8 3a b5 de c0 f9 32 7b 02 35 b0 b4 da 75 | 5d 36 80 6d b1 38 a1 af b6 00 b7 b1 92 3c 8a d0 | 91 b2 7d 0f 3b 0e 16 1f 5c e5 aa | start processing: from 192.1.2.45:500 (in process_md() at demux.c:378) | **parse ISAKMP Message: | initiator cookie: | 16 6a bf 80 5a 2e 72 e5 | responder cookie: | af 01 9e 64 da 8f 43 06 | next payload type: ISAKMP_NEXT_v2SKF (0x35) | ISAKMP version: IKEv2 version 2.0 (rfc4306/rfc5996) (0x20) | exchange type: ISAKMP_v2_IKE_AUTH (0x23) | flags: ISAKMP_FLAG_v2_IKE_INIT (0x8) | Message ID: 1 (0x1) | length: 539 (0x21b) | processing version=2.0 packet with exchange type=ISAKMP_v2_IKE_AUTH (35) | I am the IKE SA Original Responder receiving an IKEv2 IKE_AUTH request | State DB: IKEv2 state not found (find_v2_ike_sa) packet from 192.1.2.45:500: IKE_AUTH message request has no corresponding IKE SA | stop processing: from 192.1.2.45:500 (in process_md() at demux.c:380) | processing: STOP state #0 (in process_md() at demux.c:382) | processing: STOP connection NULL (in process_md() at demux.c:383) | spent 0.0673 milliseconds in comm_handle_cb() reading and processing packet | spent 0.000958 milliseconds in comm_handle_cb() calling check_incoming_msg_errqueue() | *received 539 bytes from 192.1.2.45:500 on eth1 (192.1.2.23:500) | 16 6a bf 80 5a 2e 72 e5 af 01 9e 64 da 8f 43 06 | 35 20 23 08 00 00 00 01 00 00 02 1b 00 00 01 ff | 00 03 00 05 65 e8 85 e5 09 60 91 2e 3e 1a ec cf | 1e cc 40 b9 d7 08 b1 02 5e 37 56 c3 e3 39 92 2b | 51 95 6b 81 74 2b 5e 82 a4 c2 e9 a3 1f 6b 99 89 | 21 09 83 df 91 d4 31 79 36 16 af 28 65 56 e0 50 | 15 7f 88 5d de b4 40 53 51 9b cd c4 5c 83 a8 05 | 32 53 ae 23 87 d2 01 3e 1e 23 f6 a7 79 09 45 df | b6 48 16 be 70 8b a2 67 ff 1a 4f bc c4 04 4f f3 | d5 3d 4f 68 a5 98 23 85 6d 69 c5 c1 70 93 bf a9 | 1a 30 1e a1 2f e0 69 78 94 87 14 ab 49 54 00 56 | d4 5a d0 5a b9 18 9c cb 83 da fb 5d 2f 91 c2 58 | f1 38 ca 30 b1 9e 0c 5d 9d f4 fc aa d0 65 d5 b0 | d7 66 f8 59 f7 cb 08 33 da 21 d2 5a 92 80 80 a8 | 61 2e bb 52 5f ae 11 d1 56 40 16 56 d8 be a9 1d | 05 3a e1 ea b5 f0 9f 88 17 09 c1 5b eb a4 38 4b | b8 e3 47 88 e7 34 3d c5 73 52 b3 cd cf 34 3a 64 | 51 c2 46 6c c3 77 de 29 9b 6d 15 fb 57 0f 10 1c | 59 20 14 0f e0 1f 34 ba a1 41 74 d8 12 b0 b3 6b | 41 4d 85 a3 f5 c9 90 79 84 25 6a e4 0e ce ee de | 2d e4 30 9b f0 6a 80 41 b4 16 a7 cb 84 60 b9 2b | e1 21 e1 8a 30 45 05 7f 8d ae 25 7f 1c 49 ae 0e | 87 c0 2c e0 df b7 3d 62 e0 5f ae b3 37 fc 0b 25 | c3 9c f4 24 3a 50 22 9c 0a fa 77 b3 d5 fe d8 0d | 2e 95 c8 f8 8d ce 0d 7e 33 f5 5e 24 da ad 55 0a | 1e 43 95 79 c1 1c ef 9a f3 29 35 4d 44 71 7a 05 | b5 d9 b5 1c 46 db 47 fe 1c 3b 0b 53 0b 2f 48 05 | 9f 5b 14 ba 6c 66 3d 61 68 d3 2a 83 31 47 41 03 | 30 1d e7 55 41 a4 cf 5e 50 3e e0 b2 4d 6b a1 a5 | 33 f0 91 b7 30 de 86 60 63 c0 ac 08 1f 74 d8 6c | 4f 39 b9 a7 c4 ab 64 91 b8 e2 e4 f6 d9 52 35 57 | 56 88 b4 c4 cd c2 c7 ca 22 46 e0 32 e0 d3 1b 22 | f2 c3 88 41 3d 2a d6 c3 ed 1a fa b8 8d 4b 6b c9 | 00 e5 61 d7 65 9c e4 37 a1 90 71 | start processing: from 192.1.2.45:500 (in process_md() at demux.c:378) | **parse ISAKMP Message: | initiator cookie: | 16 6a bf 80 5a 2e 72 e5 | responder cookie: | af 01 9e 64 da 8f 43 06 | next payload type: ISAKMP_NEXT_v2SKF (0x35) | ISAKMP version: IKEv2 version 2.0 (rfc4306/rfc5996) (0x20) | exchange type: ISAKMP_v2_IKE_AUTH (0x23) | flags: ISAKMP_FLAG_v2_IKE_INIT (0x8) | Message ID: 1 (0x1) | length: 539 (0x21b) | processing version=2.0 packet with exchange type=ISAKMP_v2_IKE_AUTH (35) | I am the IKE SA Original Responder receiving an IKEv2 IKE_AUTH request | State DB: IKEv2 state not found (find_v2_ike_sa) packet from 192.1.2.45:500: IKE_AUTH message request has no corresponding IKE SA | stop processing: from 192.1.2.45:500 (in process_md() at demux.c:380) | processing: STOP state #0 (in process_md() at demux.c:382) | processing: STOP connection NULL (in process_md() at demux.c:383) | spent 0.067 milliseconds in comm_handle_cb() reading and processing packet | spent 0.00097 milliseconds in comm_handle_cb() calling check_incoming_msg_errqueue() | *received 539 bytes from 192.1.2.45:500 on eth1 (192.1.2.23:500) | 16 6a bf 80 5a 2e 72 e5 af 01 9e 64 da 8f 43 06 | 35 20 23 08 00 00 00 01 00 00 02 1b 00 00 01 ff | 00 04 00 05 5f 2f 65 1f 2d 98 c4 11 13 5e 67 35 | cb 68 23 23 61 14 53 01 74 ea 1a 32 66 b8 25 ab | 55 87 bc 7e dc a0 9a 0d 96 87 20 4f 60 14 4b 2c | b7 41 82 0a b3 4b 5a 94 ad 93 d5 fa be 5c 24 0d | 5e c2 2a 95 01 b2 3e 89 7e 05 58 82 24 61 7d cb | 83 4e 9e 71 d5 84 3e a5 5f 90 52 b4 00 16 b6 84 | 1f ac 2c 9f b0 58 18 0f af fe d7 db b9 28 33 c6 | 9e 0f 17 0f 9a f2 89 9b a8 49 d5 98 61 f1 bf f7 | dc a5 74 bd 4f 0e fe a8 81 bd ae df aa 44 7b 5f | 56 88 c7 ce 1b 06 78 71 f2 39 45 0c 34 1f ba bc | 75 e9 f0 6f 43 0d 8c 92 76 c9 3a 7a ea 0c d2 12 | 5b c3 02 70 dd e2 8a b7 f8 03 53 50 a0 2d 75 cc | 68 14 79 c2 04 45 09 1e 7a b5 86 f2 94 0d 2a af | 03 f1 ba 26 3f 1b 68 0f c3 56 a2 02 ee 1f 46 1a | 9c b3 eb 8e bb 98 e1 cd f7 4a b2 39 f7 27 bb b0 | fd 82 69 cf 7a 90 52 da 47 b4 9b 5c 9a 39 81 e9 | 14 04 ca fd 2c bf 2d 0f cf 94 38 52 1a d7 18 66 | 61 77 b7 73 4b 53 78 ab d0 77 04 a4 d2 80 47 44 | ba e1 af 41 b2 ab f5 9e e2 f2 1e 9b 9e a7 56 76 | bb b8 e2 cc 3b 0b 40 8f 83 d3 44 f9 01 c3 c7 1f | 43 96 31 9e 94 69 ab a1 74 9d d3 a9 ad e1 05 f4 | 00 a8 2f da e5 47 8d 0e e6 9c 69 fb cf bf 9b 50 | 60 eb 7c ee 34 9a 13 ec ce 69 cd 17 99 bf 14 77 | 74 0f a3 39 f3 1b 28 d3 9d 53 25 5c fc d0 18 b2 | 65 61 ea 8e 95 e8 0b e2 1d 94 cb da c8 53 1b 62 | 91 91 5f 08 aa 7d e1 7d a2 cd 67 77 5e 18 7a 08 | 2a 6b 0a e8 5b d8 20 b2 71 36 84 2d 1b 29 8a 5e | f2 c6 13 7d cc 37 42 a1 2c 3e 65 ee dc f9 48 30 | 6f f2 3b 8f 4e 3e 22 53 f3 9f f7 92 0f 0d ae 90 | 36 b1 1e ba 05 21 8c 15 cd 35 55 22 4b 3c 9d c8 | ed 26 4a 2a 3b 0b 52 b6 b1 11 32 00 02 6e 8b f1 | e2 dc d0 f4 de 0a d3 a0 1e 26 81 | start processing: from 192.1.2.45:500 (in process_md() at demux.c:378) | **parse ISAKMP Message: | initiator cookie: | 16 6a bf 80 5a 2e 72 e5 | responder cookie: | af 01 9e 64 da 8f 43 06 | next payload type: ISAKMP_NEXT_v2SKF (0x35) | ISAKMP version: IKEv2 version 2.0 (rfc4306/rfc5996) (0x20) | exchange type: ISAKMP_v2_IKE_AUTH (0x23) | flags: ISAKMP_FLAG_v2_IKE_INIT (0x8) | Message ID: 1 (0x1) | length: 539 (0x21b) | processing version=2.0 packet with exchange type=ISAKMP_v2_IKE_AUTH (35) | I am the IKE SA Original Responder receiving an IKEv2 IKE_AUTH request | State DB: IKEv2 state not found (find_v2_ike_sa) packet from 192.1.2.45:500: IKE_AUTH message request has no corresponding IKE SA | stop processing: from 192.1.2.45:500 (in process_md() at demux.c:380) | processing: STOP state #0 (in process_md() at demux.c:382) | processing: STOP connection NULL (in process_md() at demux.c:383) | spent 0.0664 milliseconds in comm_handle_cb() reading and processing packet | spent 0.000962 milliseconds in comm_handle_cb() calling check_incoming_msg_errqueue() | *received 221 bytes from 192.1.2.45:500 on eth1 (192.1.2.23:500) | 16 6a bf 80 5a 2e 72 e5 af 01 9e 64 da 8f 43 06 | 35 20 23 08 00 00 00 01 00 00 00 dd 00 00 00 c1 | 00 05 00 05 95 40 f2 ee c2 46 17 50 77 15 58 85 | 66 df b5 c7 ba 20 02 26 15 3c a5 20 d1 bf 7f 1c | 19 f0 64 2f f1 48 c8 46 65 2c a5 73 3e e1 5f cf | 1c a0 20 2d 44 b6 5f 5d 5d a5 84 a2 76 70 73 83 | 49 be 1a 87 7f 21 96 d9 aa 4c 10 8d a0 54 ed ef | ba c4 67 dd 34 78 de b7 17 c5 9d 16 1c ff 88 7c | ac 1c 92 19 f0 02 59 9c f5 ec 1c e9 a7 b2 61 49 | f3 2a 0d 62 70 b6 e1 73 5c a1 bb eb 2f 6d 7b 65 | 12 ae 47 e4 a2 46 a8 c0 e0 aa f4 c1 29 65 d6 3e | 1e c0 c9 07 0f fa 97 de 68 0d 10 7f fd 2e 22 7f | 49 f2 ed d1 4c e8 dd 73 d2 62 38 33 90 f1 56 dc | 2c 13 3d 82 f8 ac 87 45 27 91 66 ca 3c | start processing: from 192.1.2.45:500 (in process_md() at demux.c:378) | **parse ISAKMP Message: | initiator cookie: | 16 6a bf 80 5a 2e 72 e5 | responder cookie: | af 01 9e 64 da 8f 43 06 | next payload type: ISAKMP_NEXT_v2SKF (0x35) | ISAKMP version: IKEv2 version 2.0 (rfc4306/rfc5996) (0x20) | exchange type: ISAKMP_v2_IKE_AUTH (0x23) | flags: ISAKMP_FLAG_v2_IKE_INIT (0x8) | Message ID: 1 (0x1) | length: 221 (0xdd) | processing version=2.0 packet with exchange type=ISAKMP_v2_IKE_AUTH (35) | I am the IKE SA Original Responder receiving an IKEv2 IKE_AUTH request | State DB: IKEv2 state not found (find_v2_ike_sa) packet from 192.1.2.45:500: IKE_AUTH message request has no corresponding IKE SA | stop processing: from 192.1.2.45:500 (in process_md() at demux.c:380) | processing: STOP state #0 (in process_md() at demux.c:382) | processing: STOP connection NULL (in process_md() at demux.c:383) | spent 0.044 milliseconds in comm_handle_cb() reading and processing packet | spent 0.00269 milliseconds in comm_handle_cb() calling check_incoming_msg_errqueue() | *received 539 bytes from 192.1.2.45:500 on eth1 (192.1.2.23:500) | 16 6a bf 80 5a 2e 72 e5 af 01 9e 64 da 8f 43 06 | 35 20 23 08 00 00 00 01 00 00 02 1b 23 00 01 ff | 00 01 00 05 9f f8 78 0a 72 42 8c 19 5c 50 cf a8 | f5 ba 1d eb a5 9c 4d c8 5e c6 e7 13 23 62 73 7f | 0f 2e 4d 12 f4 c2 a2 86 80 3b 01 aa b4 61 b1 4f | 90 12 17 90 0d ee 4f b3 50 06 42 4d 30 c0 36 be | 3d 82 70 da 84 5e 43 da 9a 90 f5 51 40 3f 65 d7 | 19 92 ad b0 e7 09 4b 2b e1 f0 79 5c 7f e3 90 2f | be 61 9f f8 74 4c 1e ad c5 b5 01 d2 ef 6e e9 9c | d4 a0 20 96 0f 7d 49 64 e4 80 8c 50 2a f6 f7 e8 | 59 98 ab 56 40 4a fe 0b 9a 18 38 5f db c2 e0 2b | 2f e3 60 9e b1 29 85 77 85 a2 9a ad 98 73 6e e0 | 83 be 4f 80 6d 23 0e 26 e6 e3 94 19 1f 05 6c 75 | ca 3c e0 f0 70 e8 77 10 a8 c1 e4 84 b5 c8 11 ab | 2a de b5 8e 3c be a3 c1 a4 c7 9d 74 e0 4f b8 ac | 40 bb c8 74 a3 f0 0f f3 55 28 13 4e 5d 7d 5e 19 | 93 ad 89 30 02 61 9d 73 d5 ef 4c 6f 73 93 d6 79 | 12 10 b7 76 de 61 08 a8 1f 00 46 5c 04 fa 84 10 | e5 b6 f8 68 6f c0 bd 90 79 47 61 24 c7 dd 5e 4d | bb b0 3b 68 54 ef 31 d0 14 0c 17 e8 5d dc 76 93 | 8e 40 ed 08 e0 8e e6 09 95 85 07 e6 c9 38 b8 3a | 76 ed ae 29 58 c0 a8 cf a1 23 72 47 80 30 3b c3 | 5f db 4f 76 45 b8 43 28 91 33 bf 9d d7 bd cc f2 | 47 64 06 da 65 ab b6 2c 7d 1b d5 36 31 f8 53 5c | fb c5 21 2f d9 a1 27 4d 66 00 0c bc 23 7b ea 18 | 88 60 d2 10 ff 58 1c 31 ab 02 49 77 10 b2 21 cd | 38 a2 fd f3 2c d7 30 9a 00 5e d4 37 da 90 16 49 | ee 05 17 8e 34 a5 0e fb 12 95 ae 00 f8 8b 03 c0 | b4 fc e0 42 7e b9 6b b2 5a 89 f4 ae d2 7f f0 e9 | 25 14 65 b1 c9 f7 8b c8 2b 4c bd fc c3 7b 3d 18 | 4f 86 62 02 23 6c 53 2f ed 64 c2 09 4f 30 fe 3e | cc ee d8 2f dd 21 af 6b 3c 19 6d 1b e5 ea 7e d1 | d2 83 e5 32 1f ff b0 10 74 2e 35 42 dd 13 8f cc | 76 d2 79 fc fc 3d 9e 7a 30 44 5a | start processing: from 192.1.2.45:500 (in process_md() at demux.c:378) | **parse ISAKMP Message: | initiator cookie: | 16 6a bf 80 5a 2e 72 e5 | responder cookie: | af 01 9e 64 da 8f 43 06 | next payload type: ISAKMP_NEXT_v2SKF (0x35) | ISAKMP version: IKEv2 version 2.0 (rfc4306/rfc5996) (0x20) | exchange type: ISAKMP_v2_IKE_AUTH (0x23) | flags: ISAKMP_FLAG_v2_IKE_INIT (0x8) | Message ID: 1 (0x1) | length: 539 (0x21b) | processing version=2.0 packet with exchange type=ISAKMP_v2_IKE_AUTH (35) | I am the IKE SA Original Responder receiving an IKEv2 IKE_AUTH request | State DB: IKEv2 state not found (find_v2_ike_sa) packet from 192.1.2.45:500: IKE_AUTH message request has no corresponding IKE SA | stop processing: from 192.1.2.45:500 (in process_md() at demux.c:380) | processing: STOP state #0 (in process_md() at demux.c:382) | processing: STOP connection NULL (in process_md() at demux.c:383) | spent 0.0838 milliseconds in comm_handle_cb() reading and processing packet | spent 0.00112 milliseconds in comm_handle_cb() calling check_incoming_msg_errqueue() | *received 539 bytes from 192.1.2.45:500 on eth1 (192.1.2.23:500) | 16 6a bf 80 5a 2e 72 e5 af 01 9e 64 da 8f 43 06 | 35 20 23 08 00 00 00 01 00 00 02 1b 00 00 01 ff | 00 02 00 05 22 ce 23 58 04 2a af 66 90 f7 c3 5e | fa 69 cb bf 4a 3a 69 1a 69 5f 8a 97 84 5d dd 0c | cf 26 f1 a9 80 49 5d 79 c9 5b 60 5f 37 d0 54 c5 | bc a9 75 a3 90 50 a4 a5 47 44 e5 79 8d 1d 73 1a | f8 5c 65 e7 1d 24 e8 9f 14 19 28 01 1b 5d 19 cd | 93 7d 91 1d ee 03 59 b7 27 2b 52 9f df 43 ed f5 | 2e dd ef 64 cd 2b ba f6 a3 59 e2 0f ef ac 0f 9c | 8e 05 83 03 2c 64 ce 04 6a 25 0a c4 e6 52 4f f2 | 36 4c 88 85 2e 93 8a 8a 2a 70 10 16 36 31 ea 89 | 11 ae 16 42 7a 13 84 b3 5f da af dc 3c 8f 0d 25 | 34 08 2b 6a f2 66 59 22 52 c2 f0 bf 94 3b a4 80 | 4b a5 72 48 ce 39 52 93 e0 06 7b 9a 84 3f f6 18 | ef e2 59 82 6f df 62 b2 c7 c3 70 99 33 7b e6 53 | 2f b4 a0 51 5f 2f bc da a4 db d9 58 54 43 64 98 | ec d2 15 28 7c be c6 db c8 f0 82 6b 17 3a a3 2a | 25 78 4c 13 cb e6 e4 df b8 1f cc ab 04 b0 23 73 | 16 e8 ef bf 19 01 83 18 56 01 a1 04 85 ef 36 75 | 78 f6 78 de d6 1f 13 d9 9f 43 3a e0 80 13 7f 6d | 83 8e ff 71 5c 17 c7 2d 46 53 fe 17 99 4a 7f 0d | 15 cf c4 fb 4f e4 ef b1 3b 43 bb 61 4a 32 95 fe | d5 d3 7e 11 40 50 83 fd da 45 5b 7d 0f bc 72 ed | e4 76 6a 16 78 d6 ef 77 a4 f8 56 08 23 8d d3 dd | 55 8e aa 37 cc 8d 9f b0 9e ce bc 43 d4 8c eb 9f | cf 6e 61 46 da af b7 03 97 a2 81 42 13 ad 58 09 | 21 ea dd db 3f fe 46 b3 ad 7a 7c 0f a3 27 07 ae | b5 36 b4 e2 24 42 3e 69 09 05 5c fe 83 65 7b 2c | 34 ac fc 64 10 60 f6 01 14 64 73 db 57 d2 62 d1 | 4c 02 6b a7 34 82 78 65 7f 6b 24 f9 a5 f0 ce 6d | a8 78 c0 7b 04 a6 4d b2 30 49 76 c4 e4 21 a9 0d | 09 c1 a8 3a b5 de c0 f9 32 7b 02 35 b0 b4 da 75 | 5d 36 80 6d b1 38 a1 af b6 00 b7 b1 92 3c 8a d0 | 91 b2 7d 0f 3b 0e 16 1f 5c e5 aa | start processing: from 192.1.2.45:500 (in process_md() at demux.c:378) | **parse ISAKMP Message: | initiator cookie: | 16 6a bf 80 5a 2e 72 e5 | responder cookie: | af 01 9e 64 da 8f 43 06 | next payload type: ISAKMP_NEXT_v2SKF (0x35) | ISAKMP version: IKEv2 version 2.0 (rfc4306/rfc5996) (0x20) | exchange type: ISAKMP_v2_IKE_AUTH (0x23) | flags: ISAKMP_FLAG_v2_IKE_INIT (0x8) | Message ID: 1 (0x1) | length: 539 (0x21b) | processing version=2.0 packet with exchange type=ISAKMP_v2_IKE_AUTH (35) | I am the IKE SA Original Responder receiving an IKEv2 IKE_AUTH request | State DB: IKEv2 state not found (find_v2_ike_sa) packet from 192.1.2.45:500: IKE_AUTH message request has no corresponding IKE SA | stop processing: from 192.1.2.45:500 (in process_md() at demux.c:380) | processing: STOP state #0 (in process_md() at demux.c:382) | processing: STOP connection NULL (in process_md() at demux.c:383) | spent 0.0688 milliseconds in comm_handle_cb() reading and processing packet | spent 0.00102 milliseconds in comm_handle_cb() calling check_incoming_msg_errqueue() | *received 539 bytes from 192.1.2.45:500 on eth1 (192.1.2.23:500) | 16 6a bf 80 5a 2e 72 e5 af 01 9e 64 da 8f 43 06 | 35 20 23 08 00 00 00 01 00 00 02 1b 00 00 01 ff | 00 03 00 05 65 e8 85 e5 09 60 91 2e 3e 1a ec cf | 1e cc 40 b9 d7 08 b1 02 5e 37 56 c3 e3 39 92 2b | 51 95 6b 81 74 2b 5e 82 a4 c2 e9 a3 1f 6b 99 89 | 21 09 83 df 91 d4 31 79 36 16 af 28 65 56 e0 50 | 15 7f 88 5d de b4 40 53 51 9b cd c4 5c 83 a8 05 | 32 53 ae 23 87 d2 01 3e 1e 23 f6 a7 79 09 45 df | b6 48 16 be 70 8b a2 67 ff 1a 4f bc c4 04 4f f3 | d5 3d 4f 68 a5 98 23 85 6d 69 c5 c1 70 93 bf a9 | 1a 30 1e a1 2f e0 69 78 94 87 14 ab 49 54 00 56 | d4 5a d0 5a b9 18 9c cb 83 da fb 5d 2f 91 c2 58 | f1 38 ca 30 b1 9e 0c 5d 9d f4 fc aa d0 65 d5 b0 | d7 66 f8 59 f7 cb 08 33 da 21 d2 5a 92 80 80 a8 | 61 2e bb 52 5f ae 11 d1 56 40 16 56 d8 be a9 1d | 05 3a e1 ea b5 f0 9f 88 17 09 c1 5b eb a4 38 4b | b8 e3 47 88 e7 34 3d c5 73 52 b3 cd cf 34 3a 64 | 51 c2 46 6c c3 77 de 29 9b 6d 15 fb 57 0f 10 1c | 59 20 14 0f e0 1f 34 ba a1 41 74 d8 12 b0 b3 6b | 41 4d 85 a3 f5 c9 90 79 84 25 6a e4 0e ce ee de | 2d e4 30 9b f0 6a 80 41 b4 16 a7 cb 84 60 b9 2b | e1 21 e1 8a 30 45 05 7f 8d ae 25 7f 1c 49 ae 0e | 87 c0 2c e0 df b7 3d 62 e0 5f ae b3 37 fc 0b 25 | c3 9c f4 24 3a 50 22 9c 0a fa 77 b3 d5 fe d8 0d | 2e 95 c8 f8 8d ce 0d 7e 33 f5 5e 24 da ad 55 0a | 1e 43 95 79 c1 1c ef 9a f3 29 35 4d 44 71 7a 05 | b5 d9 b5 1c 46 db 47 fe 1c 3b 0b 53 0b 2f 48 05 | 9f 5b 14 ba 6c 66 3d 61 68 d3 2a 83 31 47 41 03 | 30 1d e7 55 41 a4 cf 5e 50 3e e0 b2 4d 6b a1 a5 | 33 f0 91 b7 30 de 86 60 63 c0 ac 08 1f 74 d8 6c | 4f 39 b9 a7 c4 ab 64 91 b8 e2 e4 f6 d9 52 35 57 | 56 88 b4 c4 cd c2 c7 ca 22 46 e0 32 e0 d3 1b 22 | f2 c3 88 41 3d 2a d6 c3 ed 1a fa b8 8d 4b 6b c9 | 00 e5 61 d7 65 9c e4 37 a1 90 71 | start processing: from 192.1.2.45:500 (in process_md() at demux.c:378) | **parse ISAKMP Message: | initiator cookie: | 16 6a bf 80 5a 2e 72 e5 | responder cookie: | af 01 9e 64 da 8f 43 06 | next payload type: ISAKMP_NEXT_v2SKF (0x35) | ISAKMP version: IKEv2 version 2.0 (rfc4306/rfc5996) (0x20) | exchange type: ISAKMP_v2_IKE_AUTH (0x23) | flags: ISAKMP_FLAG_v2_IKE_INIT (0x8) | Message ID: 1 (0x1) | length: 539 (0x21b) | processing version=2.0 packet with exchange type=ISAKMP_v2_IKE_AUTH (35) | I am the IKE SA Original Responder receiving an IKEv2 IKE_AUTH request | State DB: IKEv2 state not found (find_v2_ike_sa) packet from 192.1.2.45:500: IKE_AUTH message request has no corresponding IKE SA | stop processing: from 192.1.2.45:500 (in process_md() at demux.c:380) | processing: STOP state #0 (in process_md() at demux.c:382) | processing: STOP connection NULL (in process_md() at demux.c:383) | spent 0.0771 milliseconds in comm_handle_cb() reading and processing packet | spent 0.000943 milliseconds in comm_handle_cb() calling check_incoming_msg_errqueue() | *received 539 bytes from 192.1.2.45:500 on eth1 (192.1.2.23:500) | 16 6a bf 80 5a 2e 72 e5 af 01 9e 64 da 8f 43 06 | 35 20 23 08 00 00 00 01 00 00 02 1b 00 00 01 ff | 00 04 00 05 5f 2f 65 1f 2d 98 c4 11 13 5e 67 35 | cb 68 23 23 61 14 53 01 74 ea 1a 32 66 b8 25 ab | 55 87 bc 7e dc a0 9a 0d 96 87 20 4f 60 14 4b 2c | b7 41 82 0a b3 4b 5a 94 ad 93 d5 fa be 5c 24 0d | 5e c2 2a 95 01 b2 3e 89 7e 05 58 82 24 61 7d cb | 83 4e 9e 71 d5 84 3e a5 5f 90 52 b4 00 16 b6 84 | 1f ac 2c 9f b0 58 18 0f af fe d7 db b9 28 33 c6 | 9e 0f 17 0f 9a f2 89 9b a8 49 d5 98 61 f1 bf f7 | dc a5 74 bd 4f 0e fe a8 81 bd ae df aa 44 7b 5f | 56 88 c7 ce 1b 06 78 71 f2 39 45 0c 34 1f ba bc | 75 e9 f0 6f 43 0d 8c 92 76 c9 3a 7a ea 0c d2 12 | 5b c3 02 70 dd e2 8a b7 f8 03 53 50 a0 2d 75 cc | 68 14 79 c2 04 45 09 1e 7a b5 86 f2 94 0d 2a af | 03 f1 ba 26 3f 1b 68 0f c3 56 a2 02 ee 1f 46 1a | 9c b3 eb 8e bb 98 e1 cd f7 4a b2 39 f7 27 bb b0 | fd 82 69 cf 7a 90 52 da 47 b4 9b 5c 9a 39 81 e9 | 14 04 ca fd 2c bf 2d 0f cf 94 38 52 1a d7 18 66 | 61 77 b7 73 4b 53 78 ab d0 77 04 a4 d2 80 47 44 | ba e1 af 41 b2 ab f5 9e e2 f2 1e 9b 9e a7 56 76 | bb b8 e2 cc 3b 0b 40 8f 83 d3 44 f9 01 c3 c7 1f | 43 96 31 9e 94 69 ab a1 74 9d d3 a9 ad e1 05 f4 | 00 a8 2f da e5 47 8d 0e e6 9c 69 fb cf bf 9b 50 | 60 eb 7c ee 34 9a 13 ec ce 69 cd 17 99 bf 14 77 | 74 0f a3 39 f3 1b 28 d3 9d 53 25 5c fc d0 18 b2 | 65 61 ea 8e 95 e8 0b e2 1d 94 cb da c8 53 1b 62 | 91 91 5f 08 aa 7d e1 7d a2 cd 67 77 5e 18 7a 08 | 2a 6b 0a e8 5b d8 20 b2 71 36 84 2d 1b 29 8a 5e | f2 c6 13 7d cc 37 42 a1 2c 3e 65 ee dc f9 48 30 | 6f f2 3b 8f 4e 3e 22 53 f3 9f f7 92 0f 0d ae 90 | 36 b1 1e ba 05 21 8c 15 cd 35 55 22 4b 3c 9d c8 | ed 26 4a 2a 3b 0b 52 b6 b1 11 32 00 02 6e 8b f1 | e2 dc d0 f4 de 0a d3 a0 1e 26 81 | start processing: from 192.1.2.45:500 (in process_md() at demux.c:378) | **parse ISAKMP Message: | initiator cookie: | 16 6a bf 80 5a 2e 72 e5 | responder cookie: | af 01 9e 64 da 8f 43 06 | next payload type: ISAKMP_NEXT_v2SKF (0x35) | ISAKMP version: IKEv2 version 2.0 (rfc4306/rfc5996) (0x20) | exchange type: ISAKMP_v2_IKE_AUTH (0x23) | flags: ISAKMP_FLAG_v2_IKE_INIT (0x8) | Message ID: 1 (0x1) | length: 539 (0x21b) | processing version=2.0 packet with exchange type=ISAKMP_v2_IKE_AUTH (35) | I am the IKE SA Original Responder receiving an IKEv2 IKE_AUTH request | State DB: IKEv2 state not found (find_v2_ike_sa) packet from 192.1.2.45:500: IKE_AUTH message request has no corresponding IKE SA | stop processing: from 192.1.2.45:500 (in process_md() at demux.c:380) | processing: STOP state #0 (in process_md() at demux.c:382) | processing: STOP connection NULL (in process_md() at demux.c:383) | spent 0.0639 milliseconds in comm_handle_cb() reading and processing packet | spent 0.000931 milliseconds in comm_handle_cb() calling check_incoming_msg_errqueue() | *received 221 bytes from 192.1.2.45:500 on eth1 (192.1.2.23:500) | 16 6a bf 80 5a 2e 72 e5 af 01 9e 64 da 8f 43 06 | 35 20 23 08 00 00 00 01 00 00 00 dd 00 00 00 c1 | 00 05 00 05 95 40 f2 ee c2 46 17 50 77 15 58 85 | 66 df b5 c7 ba 20 02 26 15 3c a5 20 d1 bf 7f 1c | 19 f0 64 2f f1 48 c8 46 65 2c a5 73 3e e1 5f cf | 1c a0 20 2d 44 b6 5f 5d 5d a5 84 a2 76 70 73 83 | 49 be 1a 87 7f 21 96 d9 aa 4c 10 8d a0 54 ed ef | ba c4 67 dd 34 78 de b7 17 c5 9d 16 1c ff 88 7c | ac 1c 92 19 f0 02 59 9c f5 ec 1c e9 a7 b2 61 49 | f3 2a 0d 62 70 b6 e1 73 5c a1 bb eb 2f 6d 7b 65 | 12 ae 47 e4 a2 46 a8 c0 e0 aa f4 c1 29 65 d6 3e | 1e c0 c9 07 0f fa 97 de 68 0d 10 7f fd 2e 22 7f | 49 f2 ed d1 4c e8 dd 73 d2 62 38 33 90 f1 56 dc | 2c 13 3d 82 f8 ac 87 45 27 91 66 ca 3c | start processing: from 192.1.2.45:500 (in process_md() at demux.c:378) | **parse ISAKMP Message: | initiator cookie: | 16 6a bf 80 5a 2e 72 e5 | responder cookie: | af 01 9e 64 da 8f 43 06 | next payload type: ISAKMP_NEXT_v2SKF (0x35) | ISAKMP version: IKEv2 version 2.0 (rfc4306/rfc5996) (0x20) | exchange type: ISAKMP_v2_IKE_AUTH (0x23) | flags: ISAKMP_FLAG_v2_IKE_INIT (0x8) | Message ID: 1 (0x1) | length: 221 (0xdd) | processing version=2.0 packet with exchange type=ISAKMP_v2_IKE_AUTH (35) | I am the IKE SA Original Responder receiving an IKEv2 IKE_AUTH request | State DB: IKEv2 state not found (find_v2_ike_sa) packet from 192.1.2.45:500: IKE_AUTH message request has no corresponding IKE SA | stop processing: from 192.1.2.45:500 (in process_md() at demux.c:380) | processing: STOP state #0 (in process_md() at demux.c:382) | processing: STOP connection NULL (in process_md() at demux.c:383) | spent 0.044 milliseconds in comm_handle_cb() reading and processing packet | spent 0.00309 milliseconds in comm_handle_cb() calling check_incoming_msg_errqueue() | *received 539 bytes from 192.1.2.45:500 on eth1 (192.1.2.23:500) | 16 6a bf 80 5a 2e 72 e5 af 01 9e 64 da 8f 43 06 | 35 20 23 08 00 00 00 01 00 00 02 1b 23 00 01 ff | 00 01 00 05 9f f8 78 0a 72 42 8c 19 5c 50 cf a8 | f5 ba 1d eb a5 9c 4d c8 5e c6 e7 13 23 62 73 7f | 0f 2e 4d 12 f4 c2 a2 86 80 3b 01 aa b4 61 b1 4f | 90 12 17 90 0d ee 4f b3 50 06 42 4d 30 c0 36 be | 3d 82 70 da 84 5e 43 da 9a 90 f5 51 40 3f 65 d7 | 19 92 ad b0 e7 09 4b 2b e1 f0 79 5c 7f e3 90 2f | be 61 9f f8 74 4c 1e ad c5 b5 01 d2 ef 6e e9 9c | d4 a0 20 96 0f 7d 49 64 e4 80 8c 50 2a f6 f7 e8 | 59 98 ab 56 40 4a fe 0b 9a 18 38 5f db c2 e0 2b | 2f e3 60 9e b1 29 85 77 85 a2 9a ad 98 73 6e e0 | 83 be 4f 80 6d 23 0e 26 e6 e3 94 19 1f 05 6c 75 | ca 3c e0 f0 70 e8 77 10 a8 c1 e4 84 b5 c8 11 ab | 2a de b5 8e 3c be a3 c1 a4 c7 9d 74 e0 4f b8 ac | 40 bb c8 74 a3 f0 0f f3 55 28 13 4e 5d 7d 5e 19 | 93 ad 89 30 02 61 9d 73 d5 ef 4c 6f 73 93 d6 79 | 12 10 b7 76 de 61 08 a8 1f 00 46 5c 04 fa 84 10 | e5 b6 f8 68 6f c0 bd 90 79 47 61 24 c7 dd 5e 4d | bb b0 3b 68 54 ef 31 d0 14 0c 17 e8 5d dc 76 93 | 8e 40 ed 08 e0 8e e6 09 95 85 07 e6 c9 38 b8 3a | 76 ed ae 29 58 c0 a8 cf a1 23 72 47 80 30 3b c3 | 5f db 4f 76 45 b8 43 28 91 33 bf 9d d7 bd cc f2 | 47 64 06 da 65 ab b6 2c 7d 1b d5 36 31 f8 53 5c | fb c5 21 2f d9 a1 27 4d 66 00 0c bc 23 7b ea 18 | 88 60 d2 10 ff 58 1c 31 ab 02 49 77 10 b2 21 cd | 38 a2 fd f3 2c d7 30 9a 00 5e d4 37 da 90 16 49 | ee 05 17 8e 34 a5 0e fb 12 95 ae 00 f8 8b 03 c0 | b4 fc e0 42 7e b9 6b b2 5a 89 f4 ae d2 7f f0 e9 | 25 14 65 b1 c9 f7 8b c8 2b 4c bd fc c3 7b 3d 18 | 4f 86 62 02 23 6c 53 2f ed 64 c2 09 4f 30 fe 3e | cc ee d8 2f dd 21 af 6b 3c 19 6d 1b e5 ea 7e d1 | d2 83 e5 32 1f ff b0 10 74 2e 35 42 dd 13 8f cc | 76 d2 79 fc fc 3d 9e 7a 30 44 5a | start processing: from 192.1.2.45:500 (in process_md() at demux.c:378) | **parse ISAKMP Message: | initiator cookie: | 16 6a bf 80 5a 2e 72 e5 | responder cookie: | af 01 9e 64 da 8f 43 06 | next payload type: ISAKMP_NEXT_v2SKF (0x35) | ISAKMP version: IKEv2 version 2.0 (rfc4306/rfc5996) (0x20) | exchange type: ISAKMP_v2_IKE_AUTH (0x23) | flags: ISAKMP_FLAG_v2_IKE_INIT (0x8) | Message ID: 1 (0x1) | length: 539 (0x21b) | processing version=2.0 packet with exchange type=ISAKMP_v2_IKE_AUTH (35) | I am the IKE SA Original Responder receiving an IKEv2 IKE_AUTH request | State DB: IKEv2 state not found (find_v2_ike_sa) packet from 192.1.2.45:500: IKE_AUTH message request has no corresponding IKE SA | stop processing: from 192.1.2.45:500 (in process_md() at demux.c:380) | processing: STOP state #0 (in process_md() at demux.c:382) | processing: STOP connection NULL (in process_md() at demux.c:383) | spent 0.117 milliseconds in comm_handle_cb() reading and processing packet | spent 0.00136 milliseconds in comm_handle_cb() calling check_incoming_msg_errqueue() | *received 539 bytes from 192.1.2.45:500 on eth1 (192.1.2.23:500) | 16 6a bf 80 5a 2e 72 e5 af 01 9e 64 da 8f 43 06 | 35 20 23 08 00 00 00 01 00 00 02 1b 00 00 01 ff | 00 02 00 05 22 ce 23 58 04 2a af 66 90 f7 c3 5e | fa 69 cb bf 4a 3a 69 1a 69 5f 8a 97 84 5d dd 0c | cf 26 f1 a9 80 49 5d 79 c9 5b 60 5f 37 d0 54 c5 | bc a9 75 a3 90 50 a4 a5 47 44 e5 79 8d 1d 73 1a | f8 5c 65 e7 1d 24 e8 9f 14 19 28 01 1b 5d 19 cd | 93 7d 91 1d ee 03 59 b7 27 2b 52 9f df 43 ed f5 | 2e dd ef 64 cd 2b ba f6 a3 59 e2 0f ef ac 0f 9c | 8e 05 83 03 2c 64 ce 04 6a 25 0a c4 e6 52 4f f2 | 36 4c 88 85 2e 93 8a 8a 2a 70 10 16 36 31 ea 89 | 11 ae 16 42 7a 13 84 b3 5f da af dc 3c 8f 0d 25 | 34 08 2b 6a f2 66 59 22 52 c2 f0 bf 94 3b a4 80 | 4b a5 72 48 ce 39 52 93 e0 06 7b 9a 84 3f f6 18 | ef e2 59 82 6f df 62 b2 c7 c3 70 99 33 7b e6 53 | 2f b4 a0 51 5f 2f bc da a4 db d9 58 54 43 64 98 | ec d2 15 28 7c be c6 db c8 f0 82 6b 17 3a a3 2a | 25 78 4c 13 cb e6 e4 df b8 1f cc ab 04 b0 23 73 | 16 e8 ef bf 19 01 83 18 56 01 a1 04 85 ef 36 75 | 78 f6 78 de d6 1f 13 d9 9f 43 3a e0 80 13 7f 6d | 83 8e ff 71 5c 17 c7 2d 46 53 fe 17 99 4a 7f 0d | 15 cf c4 fb 4f e4 ef b1 3b 43 bb 61 4a 32 95 fe | d5 d3 7e 11 40 50 83 fd da 45 5b 7d 0f bc 72 ed | e4 76 6a 16 78 d6 ef 77 a4 f8 56 08 23 8d d3 dd | 55 8e aa 37 cc 8d 9f b0 9e ce bc 43 d4 8c eb 9f | cf 6e 61 46 da af b7 03 97 a2 81 42 13 ad 58 09 | 21 ea dd db 3f fe 46 b3 ad 7a 7c 0f a3 27 07 ae | b5 36 b4 e2 24 42 3e 69 09 05 5c fe 83 65 7b 2c | 34 ac fc 64 10 60 f6 01 14 64 73 db 57 d2 62 d1 | 4c 02 6b a7 34 82 78 65 7f 6b 24 f9 a5 f0 ce 6d | a8 78 c0 7b 04 a6 4d b2 30 49 76 c4 e4 21 a9 0d | 09 c1 a8 3a b5 de c0 f9 32 7b 02 35 b0 b4 da 75 | 5d 36 80 6d b1 38 a1 af b6 00 b7 b1 92 3c 8a d0 | 91 b2 7d 0f 3b 0e 16 1f 5c e5 aa | start processing: from 192.1.2.45:500 (in process_md() at demux.c:378) | **parse ISAKMP Message: | initiator cookie: | 16 6a bf 80 5a 2e 72 e5 | responder cookie: | af 01 9e 64 da 8f 43 06 | next payload type: ISAKMP_NEXT_v2SKF (0x35) | ISAKMP version: IKEv2 version 2.0 (rfc4306/rfc5996) (0x20) | exchange type: ISAKMP_v2_IKE_AUTH (0x23) | flags: ISAKMP_FLAG_v2_IKE_INIT (0x8) | Message ID: 1 (0x1) | length: 539 (0x21b) | processing version=2.0 packet with exchange type=ISAKMP_v2_IKE_AUTH (35) | I am the IKE SA Original Responder receiving an IKEv2 IKE_AUTH request | State DB: IKEv2 state not found (find_v2_ike_sa) packet from 192.1.2.45:500: IKE_AUTH message request has no corresponding IKE SA | stop processing: from 192.1.2.45:500 (in process_md() at demux.c:380) | processing: STOP state #0 (in process_md() at demux.c:382) | processing: STOP connection NULL (in process_md() at demux.c:383) | spent 0.116 milliseconds in comm_handle_cb() reading and processing packet | spent 0.00139 milliseconds in comm_handle_cb() calling check_incoming_msg_errqueue() | *received 539 bytes from 192.1.2.45:500 on eth1 (192.1.2.23:500) | 16 6a bf 80 5a 2e 72 e5 af 01 9e 64 da 8f 43 06 | 35 20 23 08 00 00 00 01 00 00 02 1b 00 00 01 ff | 00 03 00 05 65 e8 85 e5 09 60 91 2e 3e 1a ec cf | 1e cc 40 b9 d7 08 b1 02 5e 37 56 c3 e3 39 92 2b | 51 95 6b 81 74 2b 5e 82 a4 c2 e9 a3 1f 6b 99 89 | 21 09 83 df 91 d4 31 79 36 16 af 28 65 56 e0 50 | 15 7f 88 5d de b4 40 53 51 9b cd c4 5c 83 a8 05 | 32 53 ae 23 87 d2 01 3e 1e 23 f6 a7 79 09 45 df | b6 48 16 be 70 8b a2 67 ff 1a 4f bc c4 04 4f f3 | d5 3d 4f 68 a5 98 23 85 6d 69 c5 c1 70 93 bf a9 | 1a 30 1e a1 2f e0 69 78 94 87 14 ab 49 54 00 56 | d4 5a d0 5a b9 18 9c cb 83 da fb 5d 2f 91 c2 58 | f1 38 ca 30 b1 9e 0c 5d 9d f4 fc aa d0 65 d5 b0 | d7 66 f8 59 f7 cb 08 33 da 21 d2 5a 92 80 80 a8 | 61 2e bb 52 5f ae 11 d1 56 40 16 56 d8 be a9 1d | 05 3a e1 ea b5 f0 9f 88 17 09 c1 5b eb a4 38 4b | b8 e3 47 88 e7 34 3d c5 73 52 b3 cd cf 34 3a 64 | 51 c2 46 6c c3 77 de 29 9b 6d 15 fb 57 0f 10 1c | 59 20 14 0f e0 1f 34 ba a1 41 74 d8 12 b0 b3 6b | 41 4d 85 a3 f5 c9 90 79 84 25 6a e4 0e ce ee de | 2d e4 30 9b f0 6a 80 41 b4 16 a7 cb 84 60 b9 2b | e1 21 e1 8a 30 45 05 7f 8d ae 25 7f 1c 49 ae 0e | 87 c0 2c e0 df b7 3d 62 e0 5f ae b3 37 fc 0b 25 | c3 9c f4 24 3a 50 22 9c 0a fa 77 b3 d5 fe d8 0d | 2e 95 c8 f8 8d ce 0d 7e 33 f5 5e 24 da ad 55 0a | 1e 43 95 79 c1 1c ef 9a f3 29 35 4d 44 71 7a 05 | b5 d9 b5 1c 46 db 47 fe 1c 3b 0b 53 0b 2f 48 05 | 9f 5b 14 ba 6c 66 3d 61 68 d3 2a 83 31 47 41 03 | 30 1d e7 55 41 a4 cf 5e 50 3e e0 b2 4d 6b a1 a5 | 33 f0 91 b7 30 de 86 60 63 c0 ac 08 1f 74 d8 6c | 4f 39 b9 a7 c4 ab 64 91 b8 e2 e4 f6 d9 52 35 57 | 56 88 b4 c4 cd c2 c7 ca 22 46 e0 32 e0 d3 1b 22 | f2 c3 88 41 3d 2a d6 c3 ed 1a fa b8 8d 4b 6b c9 | 00 e5 61 d7 65 9c e4 37 a1 90 71 | start processing: from 192.1.2.45:500 (in process_md() at demux.c:378) | **parse ISAKMP Message: | initiator cookie: | 16 6a bf 80 5a 2e 72 e5 | responder cookie: | af 01 9e 64 da 8f 43 06 | next payload type: ISAKMP_NEXT_v2SKF (0x35) | ISAKMP version: IKEv2 version 2.0 (rfc4306/rfc5996) (0x20) | exchange type: ISAKMP_v2_IKE_AUTH (0x23) | flags: ISAKMP_FLAG_v2_IKE_INIT (0x8) | Message ID: 1 (0x1) | length: 539 (0x21b) | processing version=2.0 packet with exchange type=ISAKMP_v2_IKE_AUTH (35) | I am the IKE SA Original Responder receiving an IKEv2 IKE_AUTH request | State DB: IKEv2 state not found (find_v2_ike_sa) packet from 192.1.2.45:500: IKE_AUTH message request has no corresponding IKE SA | stop processing: from 192.1.2.45:500 (in process_md() at demux.c:380) | processing: STOP state #0 (in process_md() at demux.c:382) | processing: STOP connection NULL (in process_md() at demux.c:383) | spent 0.0999 milliseconds in comm_handle_cb() reading and processing packet | spent 0.00128 milliseconds in comm_handle_cb() calling check_incoming_msg_errqueue() | *received 539 bytes from 192.1.2.45:500 on eth1 (192.1.2.23:500) | 16 6a bf 80 5a 2e 72 e5 af 01 9e 64 da 8f 43 06 | 35 20 23 08 00 00 00 01 00 00 02 1b 00 00 01 ff | 00 04 00 05 5f 2f 65 1f 2d 98 c4 11 13 5e 67 35 | cb 68 23 23 61 14 53 01 74 ea 1a 32 66 b8 25 ab | 55 87 bc 7e dc a0 9a 0d 96 87 20 4f 60 14 4b 2c | b7 41 82 0a b3 4b 5a 94 ad 93 d5 fa be 5c 24 0d | 5e c2 2a 95 01 b2 3e 89 7e 05 58 82 24 61 7d cb | 83 4e 9e 71 d5 84 3e a5 5f 90 52 b4 00 16 b6 84 | 1f ac 2c 9f b0 58 18 0f af fe d7 db b9 28 33 c6 | 9e 0f 17 0f 9a f2 89 9b a8 49 d5 98 61 f1 bf f7 | dc a5 74 bd 4f 0e fe a8 81 bd ae df aa 44 7b 5f | 56 88 c7 ce 1b 06 78 71 f2 39 45 0c 34 1f ba bc | 75 e9 f0 6f 43 0d 8c 92 76 c9 3a 7a ea 0c d2 12 | 5b c3 02 70 dd e2 8a b7 f8 03 53 50 a0 2d 75 cc | 68 14 79 c2 04 45 09 1e 7a b5 86 f2 94 0d 2a af | 03 f1 ba 26 3f 1b 68 0f c3 56 a2 02 ee 1f 46 1a | 9c b3 eb 8e bb 98 e1 cd f7 4a b2 39 f7 27 bb b0 | fd 82 69 cf 7a 90 52 da 47 b4 9b 5c 9a 39 81 e9 | 14 04 ca fd 2c bf 2d 0f cf 94 38 52 1a d7 18 66 | 61 77 b7 73 4b 53 78 ab d0 77 04 a4 d2 80 47 44 | ba e1 af 41 b2 ab f5 9e e2 f2 1e 9b 9e a7 56 76 | bb b8 e2 cc 3b 0b 40 8f 83 d3 44 f9 01 c3 c7 1f | 43 96 31 9e 94 69 ab a1 74 9d d3 a9 ad e1 05 f4 | 00 a8 2f da e5 47 8d 0e e6 9c 69 fb cf bf 9b 50 | 60 eb 7c ee 34 9a 13 ec ce 69 cd 17 99 bf 14 77 | 74 0f a3 39 f3 1b 28 d3 9d 53 25 5c fc d0 18 b2 | 65 61 ea 8e 95 e8 0b e2 1d 94 cb da c8 53 1b 62 | 91 91 5f 08 aa 7d e1 7d a2 cd 67 77 5e 18 7a 08 | 2a 6b 0a e8 5b d8 20 b2 71 36 84 2d 1b 29 8a 5e | f2 c6 13 7d cc 37 42 a1 2c 3e 65 ee dc f9 48 30 | 6f f2 3b 8f 4e 3e 22 53 f3 9f f7 92 0f 0d ae 90 | 36 b1 1e ba 05 21 8c 15 cd 35 55 22 4b 3c 9d c8 | ed 26 4a 2a 3b 0b 52 b6 b1 11 32 00 02 6e 8b f1 | e2 dc d0 f4 de 0a d3 a0 1e 26 81 | start processing: from 192.1.2.45:500 (in process_md() at demux.c:378) | **parse ISAKMP Message: | initiator cookie: | 16 6a bf 80 5a 2e 72 e5 | responder cookie: | af 01 9e 64 da 8f 43 06 | next payload type: ISAKMP_NEXT_v2SKF (0x35) | ISAKMP version: IKEv2 version 2.0 (rfc4306/rfc5996) (0x20) | exchange type: ISAKMP_v2_IKE_AUTH (0x23) | flags: ISAKMP_FLAG_v2_IKE_INIT (0x8) | Message ID: 1 (0x1) | length: 539 (0x21b) | processing version=2.0 packet with exchange type=ISAKMP_v2_IKE_AUTH (35) | I am the IKE SA Original Responder receiving an IKEv2 IKE_AUTH request | State DB: IKEv2 state not found (find_v2_ike_sa) packet from 192.1.2.45:500: IKE_AUTH message request has no corresponding IKE SA | stop processing: from 192.1.2.45:500 (in process_md() at demux.c:380) | processing: STOP state #0 (in process_md() at demux.c:382) | processing: STOP connection NULL (in process_md() at demux.c:383) | spent 0.127 milliseconds in comm_handle_cb() reading and processing packet | spent 0.00121 milliseconds in comm_handle_cb() calling check_incoming_msg_errqueue() | *received 221 bytes from 192.1.2.45:500 on eth1 (192.1.2.23:500) | 16 6a bf 80 5a 2e 72 e5 af 01 9e 64 da 8f 43 06 | 35 20 23 08 00 00 00 01 00 00 00 dd 00 00 00 c1 | 00 05 00 05 95 40 f2 ee c2 46 17 50 77 15 58 85 | 66 df b5 c7 ba 20 02 26 15 3c a5 20 d1 bf 7f 1c | 19 f0 64 2f f1 48 c8 46 65 2c a5 73 3e e1 5f cf | 1c a0 20 2d 44 b6 5f 5d 5d a5 84 a2 76 70 73 83 | 49 be 1a 87 7f 21 96 d9 aa 4c 10 8d a0 54 ed ef | ba c4 67 dd 34 78 de b7 17 c5 9d 16 1c ff 88 7c | ac 1c 92 19 f0 02 59 9c f5 ec 1c e9 a7 b2 61 49 | f3 2a 0d 62 70 b6 e1 73 5c a1 bb eb 2f 6d 7b 65 | 12 ae 47 e4 a2 46 a8 c0 e0 aa f4 c1 29 65 d6 3e | 1e c0 c9 07 0f fa 97 de 68 0d 10 7f fd 2e 22 7f | 49 f2 ed d1 4c e8 dd 73 d2 62 38 33 90 f1 56 dc | 2c 13 3d 82 f8 ac 87 45 27 91 66 ca 3c | start processing: from 192.1.2.45:500 (in process_md() at demux.c:378) | **parse ISAKMP Message: | initiator cookie: | 16 6a bf 80 5a 2e 72 e5 | responder cookie: | af 01 9e 64 da 8f 43 06 | next payload type: ISAKMP_NEXT_v2SKF (0x35) | ISAKMP version: IKEv2 version 2.0 (rfc4306/rfc5996) (0x20) | exchange type: ISAKMP_v2_IKE_AUTH (0x23) | flags: ISAKMP_FLAG_v2_IKE_INIT (0x8) | Message ID: 1 (0x1) | length: 221 (0xdd) | processing version=2.0 packet with exchange type=ISAKMP_v2_IKE_AUTH (35) | I am the IKE SA Original Responder receiving an IKEv2 IKE_AUTH request | State DB: IKEv2 state not found (find_v2_ike_sa) packet from 192.1.2.45:500: IKE_AUTH message request has no corresponding IKE SA | stop processing: from 192.1.2.45:500 (in process_md() at demux.c:380) | processing: STOP state #0 (in process_md() at demux.c:382) | processing: STOP connection NULL (in process_md() at demux.c:383) | spent 0.0663 milliseconds in comm_handle_cb() reading and processing packet | spent 0.00308 milliseconds in comm_handle_cb() calling check_incoming_msg_errqueue() | *received 539 bytes from 192.1.2.45:500 on eth1 (192.1.2.23:500) | 16 6a bf 80 5a 2e 72 e5 af 01 9e 64 da 8f 43 06 | 35 20 23 08 00 00 00 01 00 00 02 1b 23 00 01 ff | 00 01 00 05 9f f8 78 0a 72 42 8c 19 5c 50 cf a8 | f5 ba 1d eb a5 9c 4d c8 5e c6 e7 13 23 62 73 7f | 0f 2e 4d 12 f4 c2 a2 86 80 3b 01 aa b4 61 b1 4f | 90 12 17 90 0d ee 4f b3 50 06 42 4d 30 c0 36 be | 3d 82 70 da 84 5e 43 da 9a 90 f5 51 40 3f 65 d7 | 19 92 ad b0 e7 09 4b 2b e1 f0 79 5c 7f e3 90 2f | be 61 9f f8 74 4c 1e ad c5 b5 01 d2 ef 6e e9 9c | d4 a0 20 96 0f 7d 49 64 e4 80 8c 50 2a f6 f7 e8 | 59 98 ab 56 40 4a fe 0b 9a 18 38 5f db c2 e0 2b | 2f e3 60 9e b1 29 85 77 85 a2 9a ad 98 73 6e e0 | 83 be 4f 80 6d 23 0e 26 e6 e3 94 19 1f 05 6c 75 | ca 3c e0 f0 70 e8 77 10 a8 c1 e4 84 b5 c8 11 ab | 2a de b5 8e 3c be a3 c1 a4 c7 9d 74 e0 4f b8 ac | 40 bb c8 74 a3 f0 0f f3 55 28 13 4e 5d 7d 5e 19 | 93 ad 89 30 02 61 9d 73 d5 ef 4c 6f 73 93 d6 79 | 12 10 b7 76 de 61 08 a8 1f 00 46 5c 04 fa 84 10 | e5 b6 f8 68 6f c0 bd 90 79 47 61 24 c7 dd 5e 4d | bb b0 3b 68 54 ef 31 d0 14 0c 17 e8 5d dc 76 93 | 8e 40 ed 08 e0 8e e6 09 95 85 07 e6 c9 38 b8 3a | 76 ed ae 29 58 c0 a8 cf a1 23 72 47 80 30 3b c3 | 5f db 4f 76 45 b8 43 28 91 33 bf 9d d7 bd cc f2 | 47 64 06 da 65 ab b6 2c 7d 1b d5 36 31 f8 53 5c | fb c5 21 2f d9 a1 27 4d 66 00 0c bc 23 7b ea 18 | 88 60 d2 10 ff 58 1c 31 ab 02 49 77 10 b2 21 cd | 38 a2 fd f3 2c d7 30 9a 00 5e d4 37 da 90 16 49 | ee 05 17 8e 34 a5 0e fb 12 95 ae 00 f8 8b 03 c0 | b4 fc e0 42 7e b9 6b b2 5a 89 f4 ae d2 7f f0 e9 | 25 14 65 b1 c9 f7 8b c8 2b 4c bd fc c3 7b 3d 18 | 4f 86 62 02 23 6c 53 2f ed 64 c2 09 4f 30 fe 3e | cc ee d8 2f dd 21 af 6b 3c 19 6d 1b e5 ea 7e d1 | d2 83 e5 32 1f ff b0 10 74 2e 35 42 dd 13 8f cc | 76 d2 79 fc fc 3d 9e 7a 30 44 5a | start processing: from 192.1.2.45:500 (in process_md() at demux.c:378) | **parse ISAKMP Message: | initiator cookie: | 16 6a bf 80 5a 2e 72 e5 | responder cookie: | af 01 9e 64 da 8f 43 06 | next payload type: ISAKMP_NEXT_v2SKF (0x35) | ISAKMP version: IKEv2 version 2.0 (rfc4306/rfc5996) (0x20) | exchange type: ISAKMP_v2_IKE_AUTH (0x23) | flags: ISAKMP_FLAG_v2_IKE_INIT (0x8) | Message ID: 1 (0x1) | length: 539 (0x21b) | processing version=2.0 packet with exchange type=ISAKMP_v2_IKE_AUTH (35) | I am the IKE SA Original Responder receiving an IKEv2 IKE_AUTH request | State DB: IKEv2 state not found (find_v2_ike_sa) packet from 192.1.2.45:500: IKE_AUTH message request has no corresponding IKE SA | stop processing: from 192.1.2.45:500 (in process_md() at demux.c:380) | processing: STOP state #0 (in process_md() at demux.c:382) | processing: STOP connection NULL (in process_md() at demux.c:383) | spent 0.147 milliseconds in comm_handle_cb() reading and processing packet | spent 0.00144 milliseconds in comm_handle_cb() calling check_incoming_msg_errqueue() | *received 539 bytes from 192.1.2.45:500 on eth1 (192.1.2.23:500) | 16 6a bf 80 5a 2e 72 e5 af 01 9e 64 da 8f 43 06 | 35 20 23 08 00 00 00 01 00 00 02 1b 00 00 01 ff | 00 02 00 05 22 ce 23 58 04 2a af 66 90 f7 c3 5e | fa 69 cb bf 4a 3a 69 1a 69 5f 8a 97 84 5d dd 0c | cf 26 f1 a9 80 49 5d 79 c9 5b 60 5f 37 d0 54 c5 | bc a9 75 a3 90 50 a4 a5 47 44 e5 79 8d 1d 73 1a | f8 5c 65 e7 1d 24 e8 9f 14 19 28 01 1b 5d 19 cd | 93 7d 91 1d ee 03 59 b7 27 2b 52 9f df 43 ed f5 | 2e dd ef 64 cd 2b ba f6 a3 59 e2 0f ef ac 0f 9c | 8e 05 83 03 2c 64 ce 04 6a 25 0a c4 e6 52 4f f2 | 36 4c 88 85 2e 93 8a 8a 2a 70 10 16 36 31 ea 89 | 11 ae 16 42 7a 13 84 b3 5f da af dc 3c 8f 0d 25 | 34 08 2b 6a f2 66 59 22 52 c2 f0 bf 94 3b a4 80 | 4b a5 72 48 ce 39 52 93 e0 06 7b 9a 84 3f f6 18 | ef e2 59 82 6f df 62 b2 c7 c3 70 99 33 7b e6 53 | 2f b4 a0 51 5f 2f bc da a4 db d9 58 54 43 64 98 | ec d2 15 28 7c be c6 db c8 f0 82 6b 17 3a a3 2a | 25 78 4c 13 cb e6 e4 df b8 1f cc ab 04 b0 23 73 | 16 e8 ef bf 19 01 83 18 56 01 a1 04 85 ef 36 75 | 78 f6 78 de d6 1f 13 d9 9f 43 3a e0 80 13 7f 6d | 83 8e ff 71 5c 17 c7 2d 46 53 fe 17 99 4a 7f 0d | 15 cf c4 fb 4f e4 ef b1 3b 43 bb 61 4a 32 95 fe | d5 d3 7e 11 40 50 83 fd da 45 5b 7d 0f bc 72 ed | e4 76 6a 16 78 d6 ef 77 a4 f8 56 08 23 8d d3 dd | 55 8e aa 37 cc 8d 9f b0 9e ce bc 43 d4 8c eb 9f | cf 6e 61 46 da af b7 03 97 a2 81 42 13 ad 58 09 | 21 ea dd db 3f fe 46 b3 ad 7a 7c 0f a3 27 07 ae | b5 36 b4 e2 24 42 3e 69 09 05 5c fe 83 65 7b 2c | 34 ac fc 64 10 60 f6 01 14 64 73 db 57 d2 62 d1 | 4c 02 6b a7 34 82 78 65 7f 6b 24 f9 a5 f0 ce 6d | a8 78 c0 7b 04 a6 4d b2 30 49 76 c4 e4 21 a9 0d | 09 c1 a8 3a b5 de c0 f9 32 7b 02 35 b0 b4 da 75 | 5d 36 80 6d b1 38 a1 af b6 00 b7 b1 92 3c 8a d0 | 91 b2 7d 0f 3b 0e 16 1f 5c e5 aa | start processing: from 192.1.2.45:500 (in process_md() at demux.c:378) | **parse ISAKMP Message: | initiator cookie: | 16 6a bf 80 5a 2e 72 e5 | responder cookie: | af 01 9e 64 da 8f 43 06 | next payload type: ISAKMP_NEXT_v2SKF (0x35) | ISAKMP version: IKEv2 version 2.0 (rfc4306/rfc5996) (0x20) | exchange type: ISAKMP_v2_IKE_AUTH (0x23) | flags: ISAKMP_FLAG_v2_IKE_INIT (0x8) | Message ID: 1 (0x1) | length: 539 (0x21b) | processing version=2.0 packet with exchange type=ISAKMP_v2_IKE_AUTH (35) | I am the IKE SA Original Responder receiving an IKEv2 IKE_AUTH request | State DB: IKEv2 state not found (find_v2_ike_sa) packet from 192.1.2.45:500: IKE_AUTH message request has no corresponding IKE SA | stop processing: from 192.1.2.45:500 (in process_md() at demux.c:380) | processing: STOP state #0 (in process_md() at demux.c:382) | processing: STOP connection NULL (in process_md() at demux.c:383) | spent 0.129 milliseconds in comm_handle_cb() reading and processing packet | spent 0.00104 milliseconds in comm_handle_cb() calling check_incoming_msg_errqueue() | *received 539 bytes from 192.1.2.45:500 on eth1 (192.1.2.23:500) | 16 6a bf 80 5a 2e 72 e5 af 01 9e 64 da 8f 43 06 | 35 20 23 08 00 00 00 01 00 00 02 1b 00 00 01 ff | 00 03 00 05 65 e8 85 e5 09 60 91 2e 3e 1a ec cf | 1e cc 40 b9 d7 08 b1 02 5e 37 56 c3 e3 39 92 2b | 51 95 6b 81 74 2b 5e 82 a4 c2 e9 a3 1f 6b 99 89 | 21 09 83 df 91 d4 31 79 36 16 af 28 65 56 e0 50 | 15 7f 88 5d de b4 40 53 51 9b cd c4 5c 83 a8 05 | 32 53 ae 23 87 d2 01 3e 1e 23 f6 a7 79 09 45 df | b6 48 16 be 70 8b a2 67 ff 1a 4f bc c4 04 4f f3 | d5 3d 4f 68 a5 98 23 85 6d 69 c5 c1 70 93 bf a9 | 1a 30 1e a1 2f e0 69 78 94 87 14 ab 49 54 00 56 | d4 5a d0 5a b9 18 9c cb 83 da fb 5d 2f 91 c2 58 | f1 38 ca 30 b1 9e 0c 5d 9d f4 fc aa d0 65 d5 b0 | d7 66 f8 59 f7 cb 08 33 da 21 d2 5a 92 80 80 a8 | 61 2e bb 52 5f ae 11 d1 56 40 16 56 d8 be a9 1d | 05 3a e1 ea b5 f0 9f 88 17 09 c1 5b eb a4 38 4b | b8 e3 47 88 e7 34 3d c5 73 52 b3 cd cf 34 3a 64 | 51 c2 46 6c c3 77 de 29 9b 6d 15 fb 57 0f 10 1c | 59 20 14 0f e0 1f 34 ba a1 41 74 d8 12 b0 b3 6b | 41 4d 85 a3 f5 c9 90 79 84 25 6a e4 0e ce ee de | 2d e4 30 9b f0 6a 80 41 b4 16 a7 cb 84 60 b9 2b | e1 21 e1 8a 30 45 05 7f 8d ae 25 7f 1c 49 ae 0e | 87 c0 2c e0 df b7 3d 62 e0 5f ae b3 37 fc 0b 25 | c3 9c f4 24 3a 50 22 9c 0a fa 77 b3 d5 fe d8 0d | 2e 95 c8 f8 8d ce 0d 7e 33 f5 5e 24 da ad 55 0a | 1e 43 95 79 c1 1c ef 9a f3 29 35 4d 44 71 7a 05 | b5 d9 b5 1c 46 db 47 fe 1c 3b 0b 53 0b 2f 48 05 | 9f 5b 14 ba 6c 66 3d 61 68 d3 2a 83 31 47 41 03 | 30 1d e7 55 41 a4 cf 5e 50 3e e0 b2 4d 6b a1 a5 | 33 f0 91 b7 30 de 86 60 63 c0 ac 08 1f 74 d8 6c | 4f 39 b9 a7 c4 ab 64 91 b8 e2 e4 f6 d9 52 35 57 | 56 88 b4 c4 cd c2 c7 ca 22 46 e0 32 e0 d3 1b 22 | f2 c3 88 41 3d 2a d6 c3 ed 1a fa b8 8d 4b 6b c9 | 00 e5 61 d7 65 9c e4 37 a1 90 71 | start processing: from 192.1.2.45:500 (in process_md() at demux.c:378) | **parse ISAKMP Message: | initiator cookie: | 16 6a bf 80 5a 2e 72 e5 | responder cookie: | af 01 9e 64 da 8f 43 06 | next payload type: ISAKMP_NEXT_v2SKF (0x35) | ISAKMP version: IKEv2 version 2.0 (rfc4306/rfc5996) (0x20) | exchange type: ISAKMP_v2_IKE_AUTH (0x23) | flags: ISAKMP_FLAG_v2_IKE_INIT (0x8) | Message ID: 1 (0x1) | length: 539 (0x21b) | processing version=2.0 packet with exchange type=ISAKMP_v2_IKE_AUTH (35) | I am the IKE SA Original Responder receiving an IKEv2 IKE_AUTH request | State DB: IKEv2 state not found (find_v2_ike_sa) packet from 192.1.2.45:500: IKE_AUTH message request has no corresponding IKE SA | stop processing: from 192.1.2.45:500 (in process_md() at demux.c:380) | processing: STOP state #0 (in process_md() at demux.c:382) | processing: STOP connection NULL (in process_md() at demux.c:383) | spent 0.0648 milliseconds in comm_handle_cb() reading and processing packet | spent 0.000934 milliseconds in comm_handle_cb() calling check_incoming_msg_errqueue() | *received 539 bytes from 192.1.2.45:500 on eth1 (192.1.2.23:500) | 16 6a bf 80 5a 2e 72 e5 af 01 9e 64 da 8f 43 06 | 35 20 23 08 00 00 00 01 00 00 02 1b 00 00 01 ff | 00 04 00 05 5f 2f 65 1f 2d 98 c4 11 13 5e 67 35 | cb 68 23 23 61 14 53 01 74 ea 1a 32 66 b8 25 ab | 55 87 bc 7e dc a0 9a 0d 96 87 20 4f 60 14 4b 2c | b7 41 82 0a b3 4b 5a 94 ad 93 d5 fa be 5c 24 0d | 5e c2 2a 95 01 b2 3e 89 7e 05 58 82 24 61 7d cb | 83 4e 9e 71 d5 84 3e a5 5f 90 52 b4 00 16 b6 84 | 1f ac 2c 9f b0 58 18 0f af fe d7 db b9 28 33 c6 | 9e 0f 17 0f 9a f2 89 9b a8 49 d5 98 61 f1 bf f7 | dc a5 74 bd 4f 0e fe a8 81 bd ae df aa 44 7b 5f | 56 88 c7 ce 1b 06 78 71 f2 39 45 0c 34 1f ba bc | 75 e9 f0 6f 43 0d 8c 92 76 c9 3a 7a ea 0c d2 12 | 5b c3 02 70 dd e2 8a b7 f8 03 53 50 a0 2d 75 cc | 68 14 79 c2 04 45 09 1e 7a b5 86 f2 94 0d 2a af | 03 f1 ba 26 3f 1b 68 0f c3 56 a2 02 ee 1f 46 1a | 9c b3 eb 8e bb 98 e1 cd f7 4a b2 39 f7 27 bb b0 | fd 82 69 cf 7a 90 52 da 47 b4 9b 5c 9a 39 81 e9 | 14 04 ca fd 2c bf 2d 0f cf 94 38 52 1a d7 18 66 | 61 77 b7 73 4b 53 78 ab d0 77 04 a4 d2 80 47 44 | ba e1 af 41 b2 ab f5 9e e2 f2 1e 9b 9e a7 56 76 | bb b8 e2 cc 3b 0b 40 8f 83 d3 44 f9 01 c3 c7 1f | 43 96 31 9e 94 69 ab a1 74 9d d3 a9 ad e1 05 f4 | 00 a8 2f da e5 47 8d 0e e6 9c 69 fb cf bf 9b 50 | 60 eb 7c ee 34 9a 13 ec ce 69 cd 17 99 bf 14 77 | 74 0f a3 39 f3 1b 28 d3 9d 53 25 5c fc d0 18 b2 | 65 61 ea 8e 95 e8 0b e2 1d 94 cb da c8 53 1b 62 | 91 91 5f 08 aa 7d e1 7d a2 cd 67 77 5e 18 7a 08 | 2a 6b 0a e8 5b d8 20 b2 71 36 84 2d 1b 29 8a 5e | f2 c6 13 7d cc 37 42 a1 2c 3e 65 ee dc f9 48 30 | 6f f2 3b 8f 4e 3e 22 53 f3 9f f7 92 0f 0d ae 90 | 36 b1 1e ba 05 21 8c 15 cd 35 55 22 4b 3c 9d c8 | ed 26 4a 2a 3b 0b 52 b6 b1 11 32 00 02 6e 8b f1 | e2 dc d0 f4 de 0a d3 a0 1e 26 81 | start processing: from 192.1.2.45:500 (in process_md() at demux.c:378) | **parse ISAKMP Message: | initiator cookie: | 16 6a bf 80 5a 2e 72 e5 | responder cookie: | af 01 9e 64 da 8f 43 06 | next payload type: ISAKMP_NEXT_v2SKF (0x35) | ISAKMP version: IKEv2 version 2.0 (rfc4306/rfc5996) (0x20) | exchange type: ISAKMP_v2_IKE_AUTH (0x23) | flags: ISAKMP_FLAG_v2_IKE_INIT (0x8) | Message ID: 1 (0x1) | length: 539 (0x21b) | processing version=2.0 packet with exchange type=ISAKMP_v2_IKE_AUTH (35) | I am the IKE SA Original Responder receiving an IKEv2 IKE_AUTH request | State DB: IKEv2 state not found (find_v2_ike_sa) packet from 192.1.2.45:500: IKE_AUTH message request has no corresponding IKE SA | stop processing: from 192.1.2.45:500 (in process_md() at demux.c:380) | processing: STOP state #0 (in process_md() at demux.c:382) | processing: STOP connection NULL (in process_md() at demux.c:383) | spent 0.0674 milliseconds in comm_handle_cb() reading and processing packet | spent 0.000952 milliseconds in comm_handle_cb() calling check_incoming_msg_errqueue() | *received 221 bytes from 192.1.2.45:500 on eth1 (192.1.2.23:500) | 16 6a bf 80 5a 2e 72 e5 af 01 9e 64 da 8f 43 06 | 35 20 23 08 00 00 00 01 00 00 00 dd 00 00 00 c1 | 00 05 00 05 95 40 f2 ee c2 46 17 50 77 15 58 85 | 66 df b5 c7 ba 20 02 26 15 3c a5 20 d1 bf 7f 1c | 19 f0 64 2f f1 48 c8 46 65 2c a5 73 3e e1 5f cf | 1c a0 20 2d 44 b6 5f 5d 5d a5 84 a2 76 70 73 83 | 49 be 1a 87 7f 21 96 d9 aa 4c 10 8d a0 54 ed ef | ba c4 67 dd 34 78 de b7 17 c5 9d 16 1c ff 88 7c | ac 1c 92 19 f0 02 59 9c f5 ec 1c e9 a7 b2 61 49 | f3 2a 0d 62 70 b6 e1 73 5c a1 bb eb 2f 6d 7b 65 | 12 ae 47 e4 a2 46 a8 c0 e0 aa f4 c1 29 65 d6 3e | 1e c0 c9 07 0f fa 97 de 68 0d 10 7f fd 2e 22 7f | 49 f2 ed d1 4c e8 dd 73 d2 62 38 33 90 f1 56 dc | 2c 13 3d 82 f8 ac 87 45 27 91 66 ca 3c | start processing: from 192.1.2.45:500 (in process_md() at demux.c:378) | **parse ISAKMP Message: | initiator cookie: | 16 6a bf 80 5a 2e 72 e5 | responder cookie: | af 01 9e 64 da 8f 43 06 | next payload type: ISAKMP_NEXT_v2SKF (0x35) | ISAKMP version: IKEv2 version 2.0 (rfc4306/rfc5996) (0x20) | exchange type: ISAKMP_v2_IKE_AUTH (0x23) | flags: ISAKMP_FLAG_v2_IKE_INIT (0x8) | Message ID: 1 (0x1) | length: 221 (0xdd) | processing version=2.0 packet with exchange type=ISAKMP_v2_IKE_AUTH (35) | I am the IKE SA Original Responder receiving an IKEv2 IKE_AUTH request | State DB: IKEv2 state not found (find_v2_ike_sa) packet from 192.1.2.45:500: IKE_AUTH message request has no corresponding IKE SA | stop processing: from 192.1.2.45:500 (in process_md() at demux.c:380) | processing: STOP state #0 (in process_md() at demux.c:382) | processing: STOP connection NULL (in process_md() at demux.c:383) | spent 0.0441 milliseconds in comm_handle_cb() reading and processing packet | spent 0.00273 milliseconds in comm_handle_cb() calling check_incoming_msg_errqueue() | *received 539 bytes from 192.1.2.45:500 on eth1 (192.1.2.23:500) | 16 6a bf 80 5a 2e 72 e5 af 01 9e 64 da 8f 43 06 | 35 20 23 08 00 00 00 01 00 00 02 1b 23 00 01 ff | 00 01 00 05 9f f8 78 0a 72 42 8c 19 5c 50 cf a8 | f5 ba 1d eb a5 9c 4d c8 5e c6 e7 13 23 62 73 7f | 0f 2e 4d 12 f4 c2 a2 86 80 3b 01 aa b4 61 b1 4f | 90 12 17 90 0d ee 4f b3 50 06 42 4d 30 c0 36 be | 3d 82 70 da 84 5e 43 da 9a 90 f5 51 40 3f 65 d7 | 19 92 ad b0 e7 09 4b 2b e1 f0 79 5c 7f e3 90 2f | be 61 9f f8 74 4c 1e ad c5 b5 01 d2 ef 6e e9 9c | d4 a0 20 96 0f 7d 49 64 e4 80 8c 50 2a f6 f7 e8 | 59 98 ab 56 40 4a fe 0b 9a 18 38 5f db c2 e0 2b | 2f e3 60 9e b1 29 85 77 85 a2 9a ad 98 73 6e e0 | 83 be 4f 80 6d 23 0e 26 e6 e3 94 19 1f 05 6c 75 | ca 3c e0 f0 70 e8 77 10 a8 c1 e4 84 b5 c8 11 ab | 2a de b5 8e 3c be a3 c1 a4 c7 9d 74 e0 4f b8 ac | 40 bb c8 74 a3 f0 0f f3 55 28 13 4e 5d 7d 5e 19 | 93 ad 89 30 02 61 9d 73 d5 ef 4c 6f 73 93 d6 79 | 12 10 b7 76 de 61 08 a8 1f 00 46 5c 04 fa 84 10 | e5 b6 f8 68 6f c0 bd 90 79 47 61 24 c7 dd 5e 4d | bb b0 3b 68 54 ef 31 d0 14 0c 17 e8 5d dc 76 93 | 8e 40 ed 08 e0 8e e6 09 95 85 07 e6 c9 38 b8 3a | 76 ed ae 29 58 c0 a8 cf a1 23 72 47 80 30 3b c3 | 5f db 4f 76 45 b8 43 28 91 33 bf 9d d7 bd cc f2 | 47 64 06 da 65 ab b6 2c 7d 1b d5 36 31 f8 53 5c | fb c5 21 2f d9 a1 27 4d 66 00 0c bc 23 7b ea 18 | 88 60 d2 10 ff 58 1c 31 ab 02 49 77 10 b2 21 cd | 38 a2 fd f3 2c d7 30 9a 00 5e d4 37 da 90 16 49 | ee 05 17 8e 34 a5 0e fb 12 95 ae 00 f8 8b 03 c0 | b4 fc e0 42 7e b9 6b b2 5a 89 f4 ae d2 7f f0 e9 | 25 14 65 b1 c9 f7 8b c8 2b 4c bd fc c3 7b 3d 18 | 4f 86 62 02 23 6c 53 2f ed 64 c2 09 4f 30 fe 3e | cc ee d8 2f dd 21 af 6b 3c 19 6d 1b e5 ea 7e d1 | d2 83 e5 32 1f ff b0 10 74 2e 35 42 dd 13 8f cc | 76 d2 79 fc fc 3d 9e 7a 30 44 5a | start processing: from 192.1.2.45:500 (in process_md() at demux.c:378) | **parse ISAKMP Message: | initiator cookie: | 16 6a bf 80 5a 2e 72 e5 | responder cookie: | af 01 9e 64 da 8f 43 06 | next payload type: ISAKMP_NEXT_v2SKF (0x35) | ISAKMP version: IKEv2 version 2.0 (rfc4306/rfc5996) (0x20) | exchange type: ISAKMP_v2_IKE_AUTH (0x23) | flags: ISAKMP_FLAG_v2_IKE_INIT (0x8) | Message ID: 1 (0x1) | length: 539 (0x21b) | processing version=2.0 packet with exchange type=ISAKMP_v2_IKE_AUTH (35) | I am the IKE SA Original Responder receiving an IKEv2 IKE_AUTH request | State DB: IKEv2 state not found (find_v2_ike_sa) packet from 192.1.2.45:500: IKE_AUTH message request has no corresponding IKE SA | stop processing: from 192.1.2.45:500 (in process_md() at demux.c:380) | processing: STOP state #0 (in process_md() at demux.c:382) | processing: STOP connection NULL (in process_md() at demux.c:383) | spent 0.0806 milliseconds in comm_handle_cb() reading and processing packet | spent 0.00113 milliseconds in comm_handle_cb() calling check_incoming_msg_errqueue() | *received 539 bytes from 192.1.2.45:500 on eth1 (192.1.2.23:500) | 16 6a bf 80 5a 2e 72 e5 af 01 9e 64 da 8f 43 06 | 35 20 23 08 00 00 00 01 00 00 02 1b 00 00 01 ff | 00 02 00 05 22 ce 23 58 04 2a af 66 90 f7 c3 5e | fa 69 cb bf 4a 3a 69 1a 69 5f 8a 97 84 5d dd 0c | cf 26 f1 a9 80 49 5d 79 c9 5b 60 5f 37 d0 54 c5 | bc a9 75 a3 90 50 a4 a5 47 44 e5 79 8d 1d 73 1a | f8 5c 65 e7 1d 24 e8 9f 14 19 28 01 1b 5d 19 cd | 93 7d 91 1d ee 03 59 b7 27 2b 52 9f df 43 ed f5 | 2e dd ef 64 cd 2b ba f6 a3 59 e2 0f ef ac 0f 9c | 8e 05 83 03 2c 64 ce 04 6a 25 0a c4 e6 52 4f f2 | 36 4c 88 85 2e 93 8a 8a 2a 70 10 16 36 31 ea 89 | 11 ae 16 42 7a 13 84 b3 5f da af dc 3c 8f 0d 25 | 34 08 2b 6a f2 66 59 22 52 c2 f0 bf 94 3b a4 80 | 4b a5 72 48 ce 39 52 93 e0 06 7b 9a 84 3f f6 18 | ef e2 59 82 6f df 62 b2 c7 c3 70 99 33 7b e6 53 | 2f b4 a0 51 5f 2f bc da a4 db d9 58 54 43 64 98 | ec d2 15 28 7c be c6 db c8 f0 82 6b 17 3a a3 2a | 25 78 4c 13 cb e6 e4 df b8 1f cc ab 04 b0 23 73 | 16 e8 ef bf 19 01 83 18 56 01 a1 04 85 ef 36 75 | 78 f6 78 de d6 1f 13 d9 9f 43 3a e0 80 13 7f 6d | 83 8e ff 71 5c 17 c7 2d 46 53 fe 17 99 4a 7f 0d | 15 cf c4 fb 4f e4 ef b1 3b 43 bb 61 4a 32 95 fe | d5 d3 7e 11 40 50 83 fd da 45 5b 7d 0f bc 72 ed | e4 76 6a 16 78 d6 ef 77 a4 f8 56 08 23 8d d3 dd | 55 8e aa 37 cc 8d 9f b0 9e ce bc 43 d4 8c eb 9f | cf 6e 61 46 da af b7 03 97 a2 81 42 13 ad 58 09 | 21 ea dd db 3f fe 46 b3 ad 7a 7c 0f a3 27 07 ae | b5 36 b4 e2 24 42 3e 69 09 05 5c fe 83 65 7b 2c | 34 ac fc 64 10 60 f6 01 14 64 73 db 57 d2 62 d1 | 4c 02 6b a7 34 82 78 65 7f 6b 24 f9 a5 f0 ce 6d | a8 78 c0 7b 04 a6 4d b2 30 49 76 c4 e4 21 a9 0d | 09 c1 a8 3a b5 de c0 f9 32 7b 02 35 b0 b4 da 75 | 5d 36 80 6d b1 38 a1 af b6 00 b7 b1 92 3c 8a d0 | 91 b2 7d 0f 3b 0e 16 1f 5c e5 aa | start processing: from 192.1.2.45:500 (in process_md() at demux.c:378) | **parse ISAKMP Message: | initiator cookie: | 16 6a bf 80 5a 2e 72 e5 | responder cookie: | af 01 9e 64 da 8f 43 06 | next payload type: ISAKMP_NEXT_v2SKF (0x35) | ISAKMP version: IKEv2 version 2.0 (rfc4306/rfc5996) (0x20) | exchange type: ISAKMP_v2_IKE_AUTH (0x23) | flags: ISAKMP_FLAG_v2_IKE_INIT (0x8) | Message ID: 1 (0x1) | length: 539 (0x21b) | processing version=2.0 packet with exchange type=ISAKMP_v2_IKE_AUTH (35) | I am the IKE SA Original Responder receiving an IKEv2 IKE_AUTH request | State DB: IKEv2 state not found (find_v2_ike_sa) packet from 192.1.2.45:500: IKE_AUTH message request has no corresponding IKE SA | stop processing: from 192.1.2.45:500 (in process_md() at demux.c:380) | processing: STOP state #0 (in process_md() at demux.c:382) | processing: STOP connection NULL (in process_md() at demux.c:383) | spent 0.0831 milliseconds in comm_handle_cb() reading and processing packet | spent 0.001 milliseconds in comm_handle_cb() calling check_incoming_msg_errqueue() | *received 539 bytes from 192.1.2.45:500 on eth1 (192.1.2.23:500) | 16 6a bf 80 5a 2e 72 e5 af 01 9e 64 da 8f 43 06 | 35 20 23 08 00 00 00 01 00 00 02 1b 00 00 01 ff | 00 03 00 05 65 e8 85 e5 09 60 91 2e 3e 1a ec cf | 1e cc 40 b9 d7 08 b1 02 5e 37 56 c3 e3 39 92 2b | 51 95 6b 81 74 2b 5e 82 a4 c2 e9 a3 1f 6b 99 89 | 21 09 83 df 91 d4 31 79 36 16 af 28 65 56 e0 50 | 15 7f 88 5d de b4 40 53 51 9b cd c4 5c 83 a8 05 | 32 53 ae 23 87 d2 01 3e 1e 23 f6 a7 79 09 45 df | b6 48 16 be 70 8b a2 67 ff 1a 4f bc c4 04 4f f3 | d5 3d 4f 68 a5 98 23 85 6d 69 c5 c1 70 93 bf a9 | 1a 30 1e a1 2f e0 69 78 94 87 14 ab 49 54 00 56 | d4 5a d0 5a b9 18 9c cb 83 da fb 5d 2f 91 c2 58 | f1 38 ca 30 b1 9e 0c 5d 9d f4 fc aa d0 65 d5 b0 | d7 66 f8 59 f7 cb 08 33 da 21 d2 5a 92 80 80 a8 | 61 2e bb 52 5f ae 11 d1 56 40 16 56 d8 be a9 1d | 05 3a e1 ea b5 f0 9f 88 17 09 c1 5b eb a4 38 4b | b8 e3 47 88 e7 34 3d c5 73 52 b3 cd cf 34 3a 64 | 51 c2 46 6c c3 77 de 29 9b 6d 15 fb 57 0f 10 1c | 59 20 14 0f e0 1f 34 ba a1 41 74 d8 12 b0 b3 6b | 41 4d 85 a3 f5 c9 90 79 84 25 6a e4 0e ce ee de | 2d e4 30 9b f0 6a 80 41 b4 16 a7 cb 84 60 b9 2b | e1 21 e1 8a 30 45 05 7f 8d ae 25 7f 1c 49 ae 0e | 87 c0 2c e0 df b7 3d 62 e0 5f ae b3 37 fc 0b 25 | c3 9c f4 24 3a 50 22 9c 0a fa 77 b3 d5 fe d8 0d | 2e 95 c8 f8 8d ce 0d 7e 33 f5 5e 24 da ad 55 0a | 1e 43 95 79 c1 1c ef 9a f3 29 35 4d 44 71 7a 05 | b5 d9 b5 1c 46 db 47 fe 1c 3b 0b 53 0b 2f 48 05 | 9f 5b 14 ba 6c 66 3d 61 68 d3 2a 83 31 47 41 03 | 30 1d e7 55 41 a4 cf 5e 50 3e e0 b2 4d 6b a1 a5 | 33 f0 91 b7 30 de 86 60 63 c0 ac 08 1f 74 d8 6c | 4f 39 b9 a7 c4 ab 64 91 b8 e2 e4 f6 d9 52 35 57 | 56 88 b4 c4 cd c2 c7 ca 22 46 e0 32 e0 d3 1b 22 | f2 c3 88 41 3d 2a d6 c3 ed 1a fa b8 8d 4b 6b c9 | 00 e5 61 d7 65 9c e4 37 a1 90 71 | start processing: from 192.1.2.45:500 (in process_md() at demux.c:378) | **parse ISAKMP Message: | initiator cookie: | 16 6a bf 80 5a 2e 72 e5 | responder cookie: | af 01 9e 64 da 8f 43 06 | next payload type: ISAKMP_NEXT_v2SKF (0x35) | ISAKMP version: IKEv2 version 2.0 (rfc4306/rfc5996) (0x20) | exchange type: ISAKMP_v2_IKE_AUTH (0x23) | flags: ISAKMP_FLAG_v2_IKE_INIT (0x8) | Message ID: 1 (0x1) | length: 539 (0x21b) | processing version=2.0 packet with exchange type=ISAKMP_v2_IKE_AUTH (35) | I am the IKE SA Original Responder receiving an IKEv2 IKE_AUTH request | State DB: IKEv2 state not found (find_v2_ike_sa) packet from 192.1.2.45:500: IKE_AUTH message request has no corresponding IKE SA | stop processing: from 192.1.2.45:500 (in process_md() at demux.c:380) | processing: STOP state #0 (in process_md() at demux.c:382) | processing: STOP connection NULL (in process_md() at demux.c:383) | spent 0.0658 milliseconds in comm_handle_cb() reading and processing packet | spent 0.000963 milliseconds in comm_handle_cb() calling check_incoming_msg_errqueue() | *received 539 bytes from 192.1.2.45:500 on eth1 (192.1.2.23:500) | 16 6a bf 80 5a 2e 72 e5 af 01 9e 64 da 8f 43 06 | 35 20 23 08 00 00 00 01 00 00 02 1b 00 00 01 ff | 00 04 00 05 5f 2f 65 1f 2d 98 c4 11 13 5e 67 35 | cb 68 23 23 61 14 53 01 74 ea 1a 32 66 b8 25 ab | 55 87 bc 7e dc a0 9a 0d 96 87 20 4f 60 14 4b 2c | b7 41 82 0a b3 4b 5a 94 ad 93 d5 fa be 5c 24 0d | 5e c2 2a 95 01 b2 3e 89 7e 05 58 82 24 61 7d cb | 83 4e 9e 71 d5 84 3e a5 5f 90 52 b4 00 16 b6 84 | 1f ac 2c 9f b0 58 18 0f af fe d7 db b9 28 33 c6 | 9e 0f 17 0f 9a f2 89 9b a8 49 d5 98 61 f1 bf f7 | dc a5 74 bd 4f 0e fe a8 81 bd ae df aa 44 7b 5f | 56 88 c7 ce 1b 06 78 71 f2 39 45 0c 34 1f ba bc | 75 e9 f0 6f 43 0d 8c 92 76 c9 3a 7a ea 0c d2 12 | 5b c3 02 70 dd e2 8a b7 f8 03 53 50 a0 2d 75 cc | 68 14 79 c2 04 45 09 1e 7a b5 86 f2 94 0d 2a af | 03 f1 ba 26 3f 1b 68 0f c3 56 a2 02 ee 1f 46 1a | 9c b3 eb 8e bb 98 e1 cd f7 4a b2 39 f7 27 bb b0 | fd 82 69 cf 7a 90 52 da 47 b4 9b 5c 9a 39 81 e9 | 14 04 ca fd 2c bf 2d 0f cf 94 38 52 1a d7 18 66 | 61 77 b7 73 4b 53 78 ab d0 77 04 a4 d2 80 47 44 | ba e1 af 41 b2 ab f5 9e e2 f2 1e 9b 9e a7 56 76 | bb b8 e2 cc 3b 0b 40 8f 83 d3 44 f9 01 c3 c7 1f | 43 96 31 9e 94 69 ab a1 74 9d d3 a9 ad e1 05 f4 | 00 a8 2f da e5 47 8d 0e e6 9c 69 fb cf bf 9b 50 | 60 eb 7c ee 34 9a 13 ec ce 69 cd 17 99 bf 14 77 | 74 0f a3 39 f3 1b 28 d3 9d 53 25 5c fc d0 18 b2 | 65 61 ea 8e 95 e8 0b e2 1d 94 cb da c8 53 1b 62 | 91 91 5f 08 aa 7d e1 7d a2 cd 67 77 5e 18 7a 08 | 2a 6b 0a e8 5b d8 20 b2 71 36 84 2d 1b 29 8a 5e | f2 c6 13 7d cc 37 42 a1 2c 3e 65 ee dc f9 48 30 | 6f f2 3b 8f 4e 3e 22 53 f3 9f f7 92 0f 0d ae 90 | 36 b1 1e ba 05 21 8c 15 cd 35 55 22 4b 3c 9d c8 | ed 26 4a 2a 3b 0b 52 b6 b1 11 32 00 02 6e 8b f1 | e2 dc d0 f4 de 0a d3 a0 1e 26 81 | start processing: from 192.1.2.45:500 (in process_md() at demux.c:378) | **parse ISAKMP Message: | initiator cookie: | 16 6a bf 80 5a 2e 72 e5 | responder cookie: | af 01 9e 64 da 8f 43 06 | next payload type: ISAKMP_NEXT_v2SKF (0x35) | ISAKMP version: IKEv2 version 2.0 (rfc4306/rfc5996) (0x20) | exchange type: ISAKMP_v2_IKE_AUTH (0x23) | flags: ISAKMP_FLAG_v2_IKE_INIT (0x8) | Message ID: 1 (0x1) | length: 539 (0x21b) | processing version=2.0 packet with exchange type=ISAKMP_v2_IKE_AUTH (35) | I am the IKE SA Original Responder receiving an IKEv2 IKE_AUTH request | State DB: IKEv2 state not found (find_v2_ike_sa) packet from 192.1.2.45:500: IKE_AUTH message request has no corresponding IKE SA | stop processing: from 192.1.2.45:500 (in process_md() at demux.c:380) | processing: STOP state #0 (in process_md() at demux.c:382) | processing: STOP connection NULL (in process_md() at demux.c:383) | spent 0.0638 milliseconds in comm_handle_cb() reading and processing packet | spent 0.000973 milliseconds in comm_handle_cb() calling check_incoming_msg_errqueue() | *received 221 bytes from 192.1.2.45:500 on eth1 (192.1.2.23:500) | 16 6a bf 80 5a 2e 72 e5 af 01 9e 64 da 8f 43 06 | 35 20 23 08 00 00 00 01 00 00 00 dd 00 00 00 c1 | 00 05 00 05 95 40 f2 ee c2 46 17 50 77 15 58 85 | 66 df b5 c7 ba 20 02 26 15 3c a5 20 d1 bf 7f 1c | 19 f0 64 2f f1 48 c8 46 65 2c a5 73 3e e1 5f cf | 1c a0 20 2d 44 b6 5f 5d 5d a5 84 a2 76 70 73 83 | 49 be 1a 87 7f 21 96 d9 aa 4c 10 8d a0 54 ed ef | ba c4 67 dd 34 78 de b7 17 c5 9d 16 1c ff 88 7c | ac 1c 92 19 f0 02 59 9c f5 ec 1c e9 a7 b2 61 49 | f3 2a 0d 62 70 b6 e1 73 5c a1 bb eb 2f 6d 7b 65 | 12 ae 47 e4 a2 46 a8 c0 e0 aa f4 c1 29 65 d6 3e | 1e c0 c9 07 0f fa 97 de 68 0d 10 7f fd 2e 22 7f | 49 f2 ed d1 4c e8 dd 73 d2 62 38 33 90 f1 56 dc | 2c 13 3d 82 f8 ac 87 45 27 91 66 ca 3c | start processing: from 192.1.2.45:500 (in process_md() at demux.c:378) | **parse ISAKMP Message: | initiator cookie: | 16 6a bf 80 5a 2e 72 e5 | responder cookie: | af 01 9e 64 da 8f 43 06 | next payload type: ISAKMP_NEXT_v2SKF (0x35) | ISAKMP version: IKEv2 version 2.0 (rfc4306/rfc5996) (0x20) | exchange type: ISAKMP_v2_IKE_AUTH (0x23) | flags: ISAKMP_FLAG_v2_IKE_INIT (0x8) | Message ID: 1 (0x1) | length: 221 (0xdd) | processing version=2.0 packet with exchange type=ISAKMP_v2_IKE_AUTH (35) | I am the IKE SA Original Responder receiving an IKEv2 IKE_AUTH request | State DB: IKEv2 state not found (find_v2_ike_sa) packet from 192.1.2.45:500: IKE_AUTH message request has no corresponding IKE SA | stop processing: from 192.1.2.45:500 (in process_md() at demux.c:380) | processing: STOP state #0 (in process_md() at demux.c:382) | processing: STOP connection NULL (in process_md() at demux.c:383) | spent 0.0435 milliseconds in comm_handle_cb() reading and processing packet | processing global timer EVENT_SHUNT_SCAN | expiring aged bare shunts from shunt table | spent 0.00279 milliseconds in global timer EVENT_SHUNT_SCAN | spent 0.0108 milliseconds in comm_handle_cb() calling check_incoming_msg_errqueue() | *received 539 bytes from 192.1.2.45:500 on eth1 (192.1.2.23:500) | 16 6a bf 80 5a 2e 72 e5 af 01 9e 64 da 8f 43 06 | 35 20 23 08 00 00 00 01 00 00 02 1b 23 00 01 ff | 00 01 00 05 9f f8 78 0a 72 42 8c 19 5c 50 cf a8 | f5 ba 1d eb a5 9c 4d c8 5e c6 e7 13 23 62 73 7f | 0f 2e 4d 12 f4 c2 a2 86 80 3b 01 aa b4 61 b1 4f | 90 12 17 90 0d ee 4f b3 50 06 42 4d 30 c0 36 be | 3d 82 70 da 84 5e 43 da 9a 90 f5 51 40 3f 65 d7 | 19 92 ad b0 e7 09 4b 2b e1 f0 79 5c 7f e3 90 2f | be 61 9f f8 74 4c 1e ad c5 b5 01 d2 ef 6e e9 9c | d4 a0 20 96 0f 7d 49 64 e4 80 8c 50 2a f6 f7 e8 | 59 98 ab 56 40 4a fe 0b 9a 18 38 5f db c2 e0 2b | 2f e3 60 9e b1 29 85 77 85 a2 9a ad 98 73 6e e0 | 83 be 4f 80 6d 23 0e 26 e6 e3 94 19 1f 05 6c 75 | ca 3c e0 f0 70 e8 77 10 a8 c1 e4 84 b5 c8 11 ab | 2a de b5 8e 3c be a3 c1 a4 c7 9d 74 e0 4f b8 ac | 40 bb c8 74 a3 f0 0f f3 55 28 13 4e 5d 7d 5e 19 | 93 ad 89 30 02 61 9d 73 d5 ef 4c 6f 73 93 d6 79 | 12 10 b7 76 de 61 08 a8 1f 00 46 5c 04 fa 84 10 | e5 b6 f8 68 6f c0 bd 90 79 47 61 24 c7 dd 5e 4d | bb b0 3b 68 54 ef 31 d0 14 0c 17 e8 5d dc 76 93 | 8e 40 ed 08 e0 8e e6 09 95 85 07 e6 c9 38 b8 3a | 76 ed ae 29 58 c0 a8 cf a1 23 72 47 80 30 3b c3 | 5f db 4f 76 45 b8 43 28 91 33 bf 9d d7 bd cc f2 | 47 64 06 da 65 ab b6 2c 7d 1b d5 36 31 f8 53 5c | fb c5 21 2f d9 a1 27 4d 66 00 0c bc 23 7b ea 18 | 88 60 d2 10 ff 58 1c 31 ab 02 49 77 10 b2 21 cd | 38 a2 fd f3 2c d7 30 9a 00 5e d4 37 da 90 16 49 | ee 05 17 8e 34 a5 0e fb 12 95 ae 00 f8 8b 03 c0 | b4 fc e0 42 7e b9 6b b2 5a 89 f4 ae d2 7f f0 e9 | 25 14 65 b1 c9 f7 8b c8 2b 4c bd fc c3 7b 3d 18 | 4f 86 62 02 23 6c 53 2f ed 64 c2 09 4f 30 fe 3e | cc ee d8 2f dd 21 af 6b 3c 19 6d 1b e5 ea 7e d1 | d2 83 e5 32 1f ff b0 10 74 2e 35 42 dd 13 8f cc | 76 d2 79 fc fc 3d 9e 7a 30 44 5a | start processing: from 192.1.2.45:500 (in process_md() at demux.c:378) | **parse ISAKMP Message: | initiator cookie: | 16 6a bf 80 5a 2e 72 e5 | responder cookie: | af 01 9e 64 da 8f 43 06 | next payload type: ISAKMP_NEXT_v2SKF (0x35) | ISAKMP version: IKEv2 version 2.0 (rfc4306/rfc5996) (0x20) | exchange type: ISAKMP_v2_IKE_AUTH (0x23) | flags: ISAKMP_FLAG_v2_IKE_INIT (0x8) | Message ID: 1 (0x1) | length: 539 (0x21b) | processing version=2.0 packet with exchange type=ISAKMP_v2_IKE_AUTH (35) | I am the IKE SA Original Responder receiving an IKEv2 IKE_AUTH request | State DB: IKEv2 state not found (find_v2_ike_sa) packet from 192.1.2.45:500: IKE_AUTH message request has no corresponding IKE SA | stop processing: from 192.1.2.45:500 (in process_md() at demux.c:380) | processing: STOP state #0 (in process_md() at demux.c:382) | processing: STOP connection NULL (in process_md() at demux.c:383) | spent 0.404 milliseconds in comm_handle_cb() reading and processing packet | spent 0.00539 milliseconds in comm_handle_cb() calling check_incoming_msg_errqueue() | *received 539 bytes from 192.1.2.45:500 on eth1 (192.1.2.23:500) | 16 6a bf 80 5a 2e 72 e5 af 01 9e 64 da 8f 43 06 | 35 20 23 08 00 00 00 01 00 00 02 1b 00 00 01 ff | 00 02 00 05 22 ce 23 58 04 2a af 66 90 f7 c3 5e | fa 69 cb bf 4a 3a 69 1a 69 5f 8a 97 84 5d dd 0c | cf 26 f1 a9 80 49 5d 79 c9 5b 60 5f 37 d0 54 c5 | bc a9 75 a3 90 50 a4 a5 47 44 e5 79 8d 1d 73 1a | f8 5c 65 e7 1d 24 e8 9f 14 19 28 01 1b 5d 19 cd | 93 7d 91 1d ee 03 59 b7 27 2b 52 9f df 43 ed f5 | 2e dd ef 64 cd 2b ba f6 a3 59 e2 0f ef ac 0f 9c | 8e 05 83 03 2c 64 ce 04 6a 25 0a c4 e6 52 4f f2 | 36 4c 88 85 2e 93 8a 8a 2a 70 10 16 36 31 ea 89 | 11 ae 16 42 7a 13 84 b3 5f da af dc 3c 8f 0d 25 | 34 08 2b 6a f2 66 59 22 52 c2 f0 bf 94 3b a4 80 | 4b a5 72 48 ce 39 52 93 e0 06 7b 9a 84 3f f6 18 | ef e2 59 82 6f df 62 b2 c7 c3 70 99 33 7b e6 53 | 2f b4 a0 51 5f 2f bc da a4 db d9 58 54 43 64 98 | ec d2 15 28 7c be c6 db c8 f0 82 6b 17 3a a3 2a | 25 78 4c 13 cb e6 e4 df b8 1f cc ab 04 b0 23 73 | 16 e8 ef bf 19 01 83 18 56 01 a1 04 85 ef 36 75 | 78 f6 78 de d6 1f 13 d9 9f 43 3a e0 80 13 7f 6d | 83 8e ff 71 5c 17 c7 2d 46 53 fe 17 99 4a 7f 0d | 15 cf c4 fb 4f e4 ef b1 3b 43 bb 61 4a 32 95 fe | d5 d3 7e 11 40 50 83 fd da 45 5b 7d 0f bc 72 ed | e4 76 6a 16 78 d6 ef 77 a4 f8 56 08 23 8d d3 dd | 55 8e aa 37 cc 8d 9f b0 9e ce bc 43 d4 8c eb 9f | cf 6e 61 46 da af b7 03 97 a2 81 42 13 ad 58 09 | 21 ea dd db 3f fe 46 b3 ad 7a 7c 0f a3 27 07 ae | b5 36 b4 e2 24 42 3e 69 09 05 5c fe 83 65 7b 2c | 34 ac fc 64 10 60 f6 01 14 64 73 db 57 d2 62 d1 | 4c 02 6b a7 34 82 78 65 7f 6b 24 f9 a5 f0 ce 6d | a8 78 c0 7b 04 a6 4d b2 30 49 76 c4 e4 21 a9 0d | 09 c1 a8 3a b5 de c0 f9 32 7b 02 35 b0 b4 da 75 | 5d 36 80 6d b1 38 a1 af b6 00 b7 b1 92 3c 8a d0 | 91 b2 7d 0f 3b 0e 16 1f 5c e5 aa | start processing: from 192.1.2.45:500 (in process_md() at demux.c:378) | **parse ISAKMP Message: | initiator cookie: | 16 6a bf 80 5a 2e 72 e5 | responder cookie: | af 01 9e 64 da 8f 43 06 | next payload type: ISAKMP_NEXT_v2SKF (0x35) | ISAKMP version: IKEv2 version 2.0 (rfc4306/rfc5996) (0x20) | exchange type: ISAKMP_v2_IKE_AUTH (0x23) | flags: ISAKMP_FLAG_v2_IKE_INIT (0x8) | Message ID: 1 (0x1) | length: 539 (0x21b) | processing version=2.0 packet with exchange type=ISAKMP_v2_IKE_AUTH (35) | I am the IKE SA Original Responder receiving an IKEv2 IKE_AUTH request | State DB: IKEv2 state not found (find_v2_ike_sa) packet from 192.1.2.45:500: IKE_AUTH message request has no corresponding IKE SA | stop processing: from 192.1.2.45:500 (in process_md() at demux.c:380) | processing: STOP state #0 (in process_md() at demux.c:382) | processing: STOP connection NULL (in process_md() at demux.c:383) | spent 0.331 milliseconds in comm_handle_cb() reading and processing packet | spent 0.00489 milliseconds in comm_handle_cb() calling check_incoming_msg_errqueue() | *received 539 bytes from 192.1.2.45:500 on eth1 (192.1.2.23:500) | 16 6a bf 80 5a 2e 72 e5 af 01 9e 64 da 8f 43 06 | 35 20 23 08 00 00 00 01 00 00 02 1b 00 00 01 ff | 00 03 00 05 65 e8 85 e5 09 60 91 2e 3e 1a ec cf | 1e cc 40 b9 d7 08 b1 02 5e 37 56 c3 e3 39 92 2b | 51 95 6b 81 74 2b 5e 82 a4 c2 e9 a3 1f 6b 99 89 | 21 09 83 df 91 d4 31 79 36 16 af 28 65 56 e0 50 | 15 7f 88 5d de b4 40 53 51 9b cd c4 5c 83 a8 05 | 32 53 ae 23 87 d2 01 3e 1e 23 f6 a7 79 09 45 df | b6 48 16 be 70 8b a2 67 ff 1a 4f bc c4 04 4f f3 | d5 3d 4f 68 a5 98 23 85 6d 69 c5 c1 70 93 bf a9 | 1a 30 1e a1 2f e0 69 78 94 87 14 ab 49 54 00 56 | d4 5a d0 5a b9 18 9c cb 83 da fb 5d 2f 91 c2 58 | f1 38 ca 30 b1 9e 0c 5d 9d f4 fc aa d0 65 d5 b0 | d7 66 f8 59 f7 cb 08 33 da 21 d2 5a 92 80 80 a8 | 61 2e bb 52 5f ae 11 d1 56 40 16 56 d8 be a9 1d | 05 3a e1 ea b5 f0 9f 88 17 09 c1 5b eb a4 38 4b | b8 e3 47 88 e7 34 3d c5 73 52 b3 cd cf 34 3a 64 | 51 c2 46 6c c3 77 de 29 9b 6d 15 fb 57 0f 10 1c | 59 20 14 0f e0 1f 34 ba a1 41 74 d8 12 b0 b3 6b | 41 4d 85 a3 f5 c9 90 79 84 25 6a e4 0e ce ee de | 2d e4 30 9b f0 6a 80 41 b4 16 a7 cb 84 60 b9 2b | e1 21 e1 8a 30 45 05 7f 8d ae 25 7f 1c 49 ae 0e | 87 c0 2c e0 df b7 3d 62 e0 5f ae b3 37 fc 0b 25 | c3 9c f4 24 3a 50 22 9c 0a fa 77 b3 d5 fe d8 0d | 2e 95 c8 f8 8d ce 0d 7e 33 f5 5e 24 da ad 55 0a | 1e 43 95 79 c1 1c ef 9a f3 29 35 4d 44 71 7a 05 | b5 d9 b5 1c 46 db 47 fe 1c 3b 0b 53 0b 2f 48 05 | 9f 5b 14 ba 6c 66 3d 61 68 d3 2a 83 31 47 41 03 | 30 1d e7 55 41 a4 cf 5e 50 3e e0 b2 4d 6b a1 a5 | 33 f0 91 b7 30 de 86 60 63 c0 ac 08 1f 74 d8 6c | 4f 39 b9 a7 c4 ab 64 91 b8 e2 e4 f6 d9 52 35 57 | 56 88 b4 c4 cd c2 c7 ca 22 46 e0 32 e0 d3 1b 22 | f2 c3 88 41 3d 2a d6 c3 ed 1a fa b8 8d 4b 6b c9 | 00 e5 61 d7 65 9c e4 37 a1 90 71 | start processing: from 192.1.2.45:500 (in process_md() at demux.c:378) | **parse ISAKMP Message: | initiator cookie: | 16 6a bf 80 5a 2e 72 e5 | responder cookie: | af 01 9e 64 da 8f 43 06 | next payload type: ISAKMP_NEXT_v2SKF (0x35) | ISAKMP version: IKEv2 version 2.0 (rfc4306/rfc5996) (0x20) | exchange type: ISAKMP_v2_IKE_AUTH (0x23) | flags: ISAKMP_FLAG_v2_IKE_INIT (0x8) | Message ID: 1 (0x1) | length: 539 (0x21b) | processing version=2.0 packet with exchange type=ISAKMP_v2_IKE_AUTH (35) | I am the IKE SA Original Responder receiving an IKEv2 IKE_AUTH request | State DB: IKEv2 state not found (find_v2_ike_sa) packet from 192.1.2.45:500: IKE_AUTH message request has no corresponding IKE SA | stop processing: from 192.1.2.45:500 (in process_md() at demux.c:380) | processing: STOP state #0 (in process_md() at demux.c:382) | processing: STOP connection NULL (in process_md() at demux.c:383) | spent 0.323 milliseconds in comm_handle_cb() reading and processing packet | spent 0.00479 milliseconds in comm_handle_cb() calling check_incoming_msg_errqueue() | *received 539 bytes from 192.1.2.45:500 on eth1 (192.1.2.23:500) | 16 6a bf 80 5a 2e 72 e5 af 01 9e 64 da 8f 43 06 | 35 20 23 08 00 00 00 01 00 00 02 1b 00 00 01 ff | 00 04 00 05 5f 2f 65 1f 2d 98 c4 11 13 5e 67 35 | cb 68 23 23 61 14 53 01 74 ea 1a 32 66 b8 25 ab | 55 87 bc 7e dc a0 9a 0d 96 87 20 4f 60 14 4b 2c | b7 41 82 0a b3 4b 5a 94 ad 93 d5 fa be 5c 24 0d | 5e c2 2a 95 01 b2 3e 89 7e 05 58 82 24 61 7d cb | 83 4e 9e 71 d5 84 3e a5 5f 90 52 b4 00 16 b6 84 | 1f ac 2c 9f b0 58 18 0f af fe d7 db b9 28 33 c6 | 9e 0f 17 0f 9a f2 89 9b a8 49 d5 98 61 f1 bf f7 | dc a5 74 bd 4f 0e fe a8 81 bd ae df aa 44 7b 5f | 56 88 c7 ce 1b 06 78 71 f2 39 45 0c 34 1f ba bc | 75 e9 f0 6f 43 0d 8c 92 76 c9 3a 7a ea 0c d2 12 | 5b c3 02 70 dd e2 8a b7 f8 03 53 50 a0 2d 75 cc | 68 14 79 c2 04 45 09 1e 7a b5 86 f2 94 0d 2a af | 03 f1 ba 26 3f 1b 68 0f c3 56 a2 02 ee 1f 46 1a | 9c b3 eb 8e bb 98 e1 cd f7 4a b2 39 f7 27 bb b0 | fd 82 69 cf 7a 90 52 da 47 b4 9b 5c 9a 39 81 e9 | 14 04 ca fd 2c bf 2d 0f cf 94 38 52 1a d7 18 66 | 61 77 b7 73 4b 53 78 ab d0 77 04 a4 d2 80 47 44 | ba e1 af 41 b2 ab f5 9e e2 f2 1e 9b 9e a7 56 76 | bb b8 e2 cc 3b 0b 40 8f 83 d3 44 f9 01 c3 c7 1f | 43 96 31 9e 94 69 ab a1 74 9d d3 a9 ad e1 05 f4 | 00 a8 2f da e5 47 8d 0e e6 9c 69 fb cf bf 9b 50 | 60 eb 7c ee 34 9a 13 ec ce 69 cd 17 99 bf 14 77 | 74 0f a3 39 f3 1b 28 d3 9d 53 25 5c fc d0 18 b2 | 65 61 ea 8e 95 e8 0b e2 1d 94 cb da c8 53 1b 62 | 91 91 5f 08 aa 7d e1 7d a2 cd 67 77 5e 18 7a 08 | 2a 6b 0a e8 5b d8 20 b2 71 36 84 2d 1b 29 8a 5e | f2 c6 13 7d cc 37 42 a1 2c 3e 65 ee dc f9 48 30 | 6f f2 3b 8f 4e 3e 22 53 f3 9f f7 92 0f 0d ae 90 | 36 b1 1e ba 05 21 8c 15 cd 35 55 22 4b 3c 9d c8 | ed 26 4a 2a 3b 0b 52 b6 b1 11 32 00 02 6e 8b f1 | e2 dc d0 f4 de 0a d3 a0 1e 26 81 | start processing: from 192.1.2.45:500 (in process_md() at demux.c:378) | **parse ISAKMP Message: | initiator cookie: | 16 6a bf 80 5a 2e 72 e5 | responder cookie: | af 01 9e 64 da 8f 43 06 | next payload type: ISAKMP_NEXT_v2SKF (0x35) | ISAKMP version: IKEv2 version 2.0 (rfc4306/rfc5996) (0x20) | exchange type: ISAKMP_v2_IKE_AUTH (0x23) | flags: ISAKMP_FLAG_v2_IKE_INIT (0x8) | Message ID: 1 (0x1) | length: 539 (0x21b) | processing version=2.0 packet with exchange type=ISAKMP_v2_IKE_AUTH (35) | I am the IKE SA Original Responder receiving an IKEv2 IKE_AUTH request | State DB: IKEv2 state not found (find_v2_ike_sa) packet from 192.1.2.45:500: IKE_AUTH message request has no corresponding IKE SA | stop processing: from 192.1.2.45:500 (in process_md() at demux.c:380) | processing: STOP state #0 (in process_md() at demux.c:382) | processing: STOP connection NULL (in process_md() at demux.c:383) | spent 0.341 milliseconds in comm_handle_cb() reading and processing packet | spent 0.00526 milliseconds in comm_handle_cb() calling check_incoming_msg_errqueue() | *received 221 bytes from 192.1.2.45:500 on eth1 (192.1.2.23:500) | 16 6a bf 80 5a 2e 72 e5 af 01 9e 64 da 8f 43 06 | 35 20 23 08 00 00 00 01 00 00 00 dd 00 00 00 c1 | 00 05 00 05 95 40 f2 ee c2 46 17 50 77 15 58 85 | 66 df b5 c7 ba 20 02 26 15 3c a5 20 d1 bf 7f 1c | 19 f0 64 2f f1 48 c8 46 65 2c a5 73 3e e1 5f cf | 1c a0 20 2d 44 b6 5f 5d 5d a5 84 a2 76 70 73 83 | 49 be 1a 87 7f 21 96 d9 aa 4c 10 8d a0 54 ed ef | ba c4 67 dd 34 78 de b7 17 c5 9d 16 1c ff 88 7c | ac 1c 92 19 f0 02 59 9c f5 ec 1c e9 a7 b2 61 49 | f3 2a 0d 62 70 b6 e1 73 5c a1 bb eb 2f 6d 7b 65 | 12 ae 47 e4 a2 46 a8 c0 e0 aa f4 c1 29 65 d6 3e | 1e c0 c9 07 0f fa 97 de 68 0d 10 7f fd 2e 22 7f | 49 f2 ed d1 4c e8 dd 73 d2 62 38 33 90 f1 56 dc | 2c 13 3d 82 f8 ac 87 45 27 91 66 ca 3c | start processing: from 192.1.2.45:500 (in process_md() at demux.c:378) | **parse ISAKMP Message: | initiator cookie: | 16 6a bf 80 5a 2e 72 e5 | responder cookie: | af 01 9e 64 da 8f 43 06 | next payload type: ISAKMP_NEXT_v2SKF (0x35) | ISAKMP version: IKEv2 version 2.0 (rfc4306/rfc5996) (0x20) | exchange type: ISAKMP_v2_IKE_AUTH (0x23) | flags: ISAKMP_FLAG_v2_IKE_INIT (0x8) | Message ID: 1 (0x1) | length: 221 (0xdd) | processing version=2.0 packet with exchange type=ISAKMP_v2_IKE_AUTH (35) | I am the IKE SA Original Responder receiving an IKEv2 IKE_AUTH request | State DB: IKEv2 state not found (find_v2_ike_sa) packet from 192.1.2.45:500: IKE_AUTH message request has no corresponding IKE SA | stop processing: from 192.1.2.45:500 (in process_md() at demux.c:380) | processing: STOP state #0 (in process_md() at demux.c:382) | processing: STOP connection NULL (in process_md() at demux.c:383) | spent 0.217 milliseconds in comm_handle_cb() reading and processing packet | processing global timer EVENT_SHUNT_SCAN | expiring aged bare shunts from shunt table | spent 0.0127 milliseconds in global timer EVENT_SHUNT_SCAN | processing global timer EVENT_PENDING_DDNS | FOR_EACH_CONNECTION_... in connection_check_ddns | FOR_EACH_UNORIENTED_CONNECTION_... in check_orientations | elapsed time in connection_check_ddns for hostname lookup 0.000032 | spent 0.0494 milliseconds in global timer EVENT_PENDING_DDNS | processing global timer EVENT_SHUNT_SCAN | expiring aged bare shunts from shunt table | spent 0.00906 milliseconds in global timer EVENT_SHUNT_SCAN | spent 0.0027 milliseconds in comm_handle_cb() calling check_incoming_msg_errqueue() | *received 828 bytes from 192.1.2.45:500 on eth1 (192.1.2.23:500) | 27 ae 31 26 5e c6 79 93 00 00 00 00 00 00 00 00 | 21 20 22 08 00 00 00 00 00 00 03 3c 22 00 01 b4 | 02 00 00 64 01 01 00 0b 03 00 00 0c 01 00 00 14 | 80 0e 01 00 03 00 00 08 02 00 00 07 03 00 00 08 | 02 00 00 05 03 00 00 08 04 00 00 0e 03 00 00 08 | 04 00 00 0f 03 00 00 08 04 00 00 10 03 00 00 08 | 04 00 00 12 03 00 00 08 04 00 00 13 03 00 00 08 | 04 00 00 14 03 00 00 08 04 00 00 15 00 00 00 08 | 04 00 00 1f 02 00 00 64 02 01 00 0b 03 00 00 0c | 01 00 00 14 80 0e 00 80 03 00 00 08 02 00 00 07 | 03 00 00 08 02 00 00 05 03 00 00 08 04 00 00 0e | 03 00 00 08 04 00 00 0f 03 00 00 08 04 00 00 10 | 03 00 00 08 04 00 00 12 03 00 00 08 04 00 00 13 | 03 00 00 08 04 00 00 14 03 00 00 08 04 00 00 15 | 00 00 00 08 04 00 00 1f 02 00 00 74 03 01 00 0d | 03 00 00 0c 01 00 00 0c 80 0e 01 00 03 00 00 08 | 02 00 00 07 03 00 00 08 02 00 00 05 03 00 00 08 | 03 00 00 0e 03 00 00 08 03 00 00 0c 03 00 00 08 | 04 00 00 0e 03 00 00 08 04 00 00 0f 03 00 00 08 | 04 00 00 10 03 00 00 08 04 00 00 12 03 00 00 08 | 04 00 00 13 03 00 00 08 04 00 00 14 03 00 00 08 | 04 00 00 15 00 00 00 08 04 00 00 1f 00 00 00 74 | 04 01 00 0d 03 00 00 0c 01 00 00 0c 80 0e 00 80 | 03 00 00 08 02 00 00 07 03 00 00 08 02 00 00 05 | 03 00 00 08 03 00 00 0e 03 00 00 08 03 00 00 0c | 03 00 00 08 04 00 00 0e 03 00 00 08 04 00 00 0f | 03 00 00 08 04 00 00 10 03 00 00 08 04 00 00 12 | 03 00 00 08 04 00 00 13 03 00 00 08 04 00 00 14 | 03 00 00 08 04 00 00 15 00 00 00 08 04 00 00 1f | 28 00 01 08 00 0e 00 00 c4 5a b7 27 7e e5 a9 c1 | 6c c6 5d ef 24 a9 51 bc e7 6e 55 78 d2 e7 52 07 | 30 4f 93 ca d9 df 32 f5 ce 70 9b 4d 98 c4 67 36 | 43 14 eb 9a 65 9e 2f c9 1a 6d f3 2e ae e7 7d 7b | 52 af 9f 67 27 a1 be 6d 99 86 af 28 c4 c3 8b 3c | 25 ca 58 fc 5f 7f 5f ce aa 1e 86 95 0a c1 ba 6c | 78 21 11 ab b0 c7 17 90 61 a3 48 d8 56 f2 77 7f | db 78 25 9c 5e af 03 3a 39 45 1e a5 a8 63 3b e4 | 5f 03 fb 2d 89 39 21 d0 b8 a7 7a a3 d0 dd c3 1a | 64 73 1d fa f7 d4 e9 d2 b6 b4 86 57 67 55 5e 90 | 2c 33 63 b9 ef 7b e2 be d5 2a b9 71 7d a0 93 41 | 65 0d d4 27 f7 7e 38 b0 2e 66 5b 31 4b 4b 50 2d | 91 b1 cf 49 25 bb 82 9c 31 33 ed bd 72 9f 6e 25 | 72 05 d8 a2 7f 8c 0a ab 5f cb d3 f6 40 5f 13 de | 16 db d9 28 c7 9e c4 58 e3 e5 fa e2 96 df 9e fd | 07 82 91 83 ce c3 ec 2f f5 50 5a 89 ef 64 5b d9 | f6 93 80 6a 95 a6 9b 27 29 00 00 24 3d e4 29 56 | a5 5f 2c e9 a4 d0 ec 05 d3 48 d5 af 45 f5 bb 4e | 2e 6f dc 89 be f1 46 75 de f9 85 09 29 00 00 08 | 00 00 40 2e 29 00 00 1c 00 00 40 04 d2 ba 33 39 | f5 d2 fc 68 77 b7 78 de 8b 48 0e 4e e9 3b e1 d9 | 00 00 00 1c 00 00 40 05 bc e5 1d c2 5f 8b ca 0f | 0b 37 da 7e bf fc e1 65 43 c0 da 8b | start processing: from 192.1.2.45:500 (in process_md() at demux.c:378) | **parse ISAKMP Message: | initiator cookie: | 27 ae 31 26 5e c6 79 93 | responder cookie: | 00 00 00 00 00 00 00 00 | next payload type: ISAKMP_NEXT_v2SA (0x21) | ISAKMP version: IKEv2 version 2.0 (rfc4306/rfc5996) (0x20) | exchange type: ISAKMP_v2_IKE_SA_INIT (0x22) | flags: ISAKMP_FLAG_v2_IKE_INIT (0x8) | Message ID: 0 (0x0) | length: 828 (0x33c) | processing version=2.0 packet with exchange type=ISAKMP_v2_IKE_SA_INIT (34) | I am the IKE SA Original Responder receiving an IKEv2 IKE_SA_INIT request | State DB: IKEv2 state not found (find_v2_ike_sa_by_initiator_spi) | Now let's proceed with payload (ISAKMP_NEXT_v2SA) | ***parse IKEv2 Security Association Payload: | next payload type: ISAKMP_NEXT_v2KE (0x22) | flags: none (0x0) | length: 436 (0x1b4) | processing payload: ISAKMP_NEXT_v2SA (len=432) | Now let's proceed with payload (ISAKMP_NEXT_v2KE) | ***parse IKEv2 Key Exchange Payload: | next payload type: ISAKMP_NEXT_v2Ni (0x28) | flags: none (0x0) | length: 264 (0x108) | DH group: OAKLEY_GROUP_MODP2048 (0xe) | processing payload: ISAKMP_NEXT_v2KE (len=256) | Now let's proceed with payload (ISAKMP_NEXT_v2Ni) | ***parse IKEv2 Nonce Payload: | next payload type: ISAKMP_NEXT_v2N (0x29) | flags: none (0x0) | length: 36 (0x24) | processing payload: ISAKMP_NEXT_v2Ni (len=32) | Now let's proceed with payload (ISAKMP_NEXT_v2N) | ***parse IKEv2 Notify Payload: | next payload type: ISAKMP_NEXT_v2N (0x29) | flags: none (0x0) | length: 8 (0x8) | Protocol ID: PROTO_v2_RESERVED (0x0) | SPI size: 0 (0x0) | Notify Message Type: v2N_IKEV2_FRAGMENTATION_SUPPORTED (0x402e) | processing payload: ISAKMP_NEXT_v2N (len=0) | Now let's proceed with payload (ISAKMP_NEXT_v2N) | ***parse IKEv2 Notify Payload: | next payload type: ISAKMP_NEXT_v2N (0x29) | flags: none (0x0) | length: 28 (0x1c) | Protocol ID: PROTO_v2_RESERVED (0x0) | SPI size: 0 (0x0) | Notify Message Type: v2N_NAT_DETECTION_SOURCE_IP (0x4004) | processing payload: ISAKMP_NEXT_v2N (len=20) | Now let's proceed with payload (ISAKMP_NEXT_v2N) | ***parse IKEv2 Notify Payload: | next payload type: ISAKMP_NEXT_v2NONE (0x0) | flags: none (0x0) | length: 28 (0x1c) | Protocol ID: PROTO_v2_RESERVED (0x0) | SPI size: 0 (0x0) | Notify Message Type: v2N_NAT_DETECTION_DESTINATION_IP (0x4005) | processing payload: ISAKMP_NEXT_v2N (len=20) | DDOS disabled and no cookie sent, continuing | find_host_connection local=192.1.2.23:500 remote=192.1.2.45:500 policy=ECDSA+IKEV2_ALLOW but ignoring ports | find_host_pair: comparing 192.1.2.23:500 to 192.1.2.45:500 but ignoring ports | find_next_host_connection policy=ECDSA+IKEV2_ALLOW | found policy = RSASIG+ENCRYPT+TUNNEL+PFS+IKEV2_ALLOW+SAREF_TRACK+IKE_FRAG_ALLOW+ESN_NO (westnet-eastnet-ikev2) | find_next_host_connection returns empty | find_host_connection local=192.1.2.23:500 remote= policy=ECDSA+IKEV2_ALLOW but ignoring ports | find_next_host_connection policy=ECDSA+IKEV2_ALLOW | find_next_host_connection returns empty | initial parent SA message received on 192.1.2.23:500 but no connection has been authorized with policy ECDSA+IKEV2_ALLOW | find_host_connection local=192.1.2.23:500 remote=192.1.2.45:500 policy=RSASIG+IKEV2_ALLOW but ignoring ports | find_host_pair: comparing 192.1.2.23:500 to 192.1.2.45:500 but ignoring ports | find_next_host_connection policy=RSASIG+IKEV2_ALLOW | found policy = RSASIG+ENCRYPT+TUNNEL+PFS+IKEV2_ALLOW+SAREF_TRACK+IKE_FRAG_ALLOW+ESN_NO (westnet-eastnet-ikev2) | find_next_host_connection returns westnet-eastnet-ikev2 | find_next_host_connection policy=RSASIG+IKEV2_ALLOW | find_next_host_connection returns empty | found connection: westnet-eastnet-ikev2 with policy RSASIG+IKEV2_ALLOW | creating state object #2 at 0x55cbd9ce9dc8 | State DB: adding IKEv2 state #2 in UNDEFINED | pstats #2 ikev2.ike started | Message ID: init #2: msgid=0 lastack=4294967295 nextuse=0 lastrecv=4294967295 lastreplied=0 | parent state #2: UNDEFINED(ignore) => PARENT_R0(half-open IKE SA) | Message ID: init_ike #2; ike: initiator.sent=0->-1 initiator.recv=0->-1 responder.sent=0->-1 responder.recv=0->-1 wip.initiator=0->-1 wip.responder=0->-1 | start processing: state #2 connection "westnet-eastnet-ikev2" from 192.1.2.45 (in ikev2_process_packet() at ikev2.c:2016) | State DB: IKEv2 state not found (find_v2_sa_by_responder_wip) | [RE]START processing: state #2 connection "westnet-eastnet-ikev2" from 192.1.2.45 (in ike_process_packet() at ikev2.c:2064) | #2 st.st_msgid_lastrecv -1 md.hdr.isa_msgid 00000000 | Message ID: #2 not a duplicate - message is new; initiator.sent=-1 initiator.recv=-1 responder.sent=-1 responder.recv=-1 | Message ID: start-responder #2 request 0; ike: initiator.sent=-1 initiator.recv=-1 responder.sent=-1 responder.recv=-1 wip.initiator=-1 wip.responder=-1->0 | #2 in state PARENT_R0: processing SA_INIT request | selected state microcode Respond to IKE_SA_INIT | Now let's proceed with state specific processing | calling processor Respond to IKE_SA_INIT | #2 updating local interface from 192.1.2.23:500 to 192.1.2.23:500 using md->iface (in update_ike_endpoints() at state.c:2669) | using existing local IKE proposals for connection westnet-eastnet-ikev2 (IKE SA responder matching remote proposals): 1:IKE:ENCR=AES_GCM_C_256;PRF=HMAC_SHA2_512,HMAC_SHA2_256;INTEG=NONE;DH=MODP2048,MODP3072,MODP4096,MODP8192,ECP_256,ECP_384,ECP_521,CURVE25519 2:IKE:ENCR=AES_GCM_C_128;PRF=HMAC_SHA2_512,HMAC_SHA2_256;INTEG=NONE;DH=MODP2048,MODP3072,MODP4096,MODP8192,ECP_256,ECP_384,ECP_521,CURVE25519 3:IKE:ENCR=AES_CBC_256;PRF=HMAC_SHA2_512,HMAC_SHA2_256;INTEG=HMAC_SHA2_512_256,HMAC_SHA2_256_128;DH=MODP2048,MODP3072,MODP4096,MODP8192,ECP_256,ECP_384,ECP_521,CURVE25519 4:IKE:ENCR=AES_CBC_128;PRF=HMAC_SHA2_512,HMAC_SHA2_256;INTEG=HMAC_SHA2_512_256,HMAC_SHA2_256_128;DH=MODP2048,MODP3072,MODP4096,MODP8192,ECP_256,ECP_384,ECP_521,CURVE25519 | Comparing remote proposals against IKE responder 4 local proposals | local proposal 1 type ENCR has 1 transforms | local proposal 1 type PRF has 2 transforms | local proposal 1 type INTEG has 1 transforms | local proposal 1 type DH has 8 transforms | local proposal 1 type ESN has 0 transforms | local proposal 1 transforms: required: ENCR+PRF+DH; optional: INTEG | local proposal 2 type ENCR has 1 transforms | local proposal 2 type PRF has 2 transforms | local proposal 2 type INTEG has 1 transforms | local proposal 2 type DH has 8 transforms | local proposal 2 type ESN has 0 transforms | local proposal 2 transforms: required: ENCR+PRF+DH; optional: INTEG | local proposal 3 type ENCR has 1 transforms | local proposal 3 type PRF has 2 transforms | local proposal 3 type INTEG has 2 transforms | local proposal 3 type DH has 8 transforms | local proposal 3 type ESN has 0 transforms | local proposal 3 transforms: required: ENCR+PRF+INTEG+DH; optional: none | local proposal 4 type ENCR has 1 transforms | local proposal 4 type PRF has 2 transforms | local proposal 4 type INTEG has 2 transforms | local proposal 4 type DH has 8 transforms | local proposal 4 type ESN has 0 transforms | local proposal 4 transforms: required: ENCR+PRF+INTEG+DH; optional: none | ****parse IKEv2 Proposal Substructure Payload: | last proposal: v2_PROPOSAL_NON_LAST (0x2) | length: 100 (0x64) | prop #: 1 (0x1) | proto ID: IKEv2_SEC_PROTO_IKE (0x1) | spi size: 0 (0x0) | # transforms: 11 (0xb) | Comparing remote proposal 1 containing 11 transforms against local proposal [1..4] of 4 local proposals | *****parse IKEv2 Transform Substructure Payload: | last transform: v2_TRANSFORM_NON_LAST (0x3) | length: 12 (0xc) | IKEv2 transform type: TRANS_TYPE_ENCR (0x1) | IKEv2 transform ID: AES_GCM_C (0x14) | ******parse IKEv2 Attribute Substructure Payload: | af+type: AF+IKEv2_KEY_LENGTH (0x800e) | length/value: 256 (0x100) | remote proposal 1 transform 0 (ENCR=AES_GCM_C_256) matches local proposal 1 type 1 (ENCR) transform 0 | *****parse IKEv2 Transform Substructure Payload: | last transform: v2_TRANSFORM_NON_LAST (0x3) | length: 8 (0x8) | IKEv2 transform type: TRANS_TYPE_PRF (0x2) | IKEv2 transform ID: PRF_HMAC_SHA2_512 (0x7) | remote proposal 1 transform 1 (PRF=HMAC_SHA2_512) matches local proposal 1 type 2 (PRF) transform 0 | remote proposal 1 transform 1 (PRF=HMAC_SHA2_512) matches local proposal 2 type 2 (PRF) transform 0 | remote proposal 1 transform 1 (PRF=HMAC_SHA2_512) matches local proposal 3 type 2 (PRF) transform 0 | remote proposal 1 transform 1 (PRF=HMAC_SHA2_512) matches local proposal 4 type 2 (PRF) transform 0 | *****parse IKEv2 Transform Substructure Payload: | last transform: v2_TRANSFORM_NON_LAST (0x3) | length: 8 (0x8) | IKEv2 transform type: TRANS_TYPE_PRF (0x2) | IKEv2 transform ID: PRF_HMAC_SHA2_256 (0x5) | *****parse IKEv2 Transform Substructure Payload: | last transform: v2_TRANSFORM_NON_LAST (0x3) | length: 8 (0x8) | IKEv2 transform type: TRANS_TYPE_DH (0x4) | IKEv2 transform ID: OAKLEY_GROUP_MODP2048 (0xe) | remote proposal 1 transform 3 (DH=MODP2048) matches local proposal 1 type 4 (DH) transform 0 | remote proposal 1 transform 3 (DH=MODP2048) matches local proposal 2 type 4 (DH) transform 0 | remote proposal 1 transform 3 (DH=MODP2048) matches local proposal 3 type 4 (DH) transform 0 | remote proposal 1 transform 3 (DH=MODP2048) matches local proposal 4 type 4 (DH) transform 0 | *****parse IKEv2 Transform Substructure Payload: | last transform: v2_TRANSFORM_NON_LAST (0x3) | length: 8 (0x8) | IKEv2 transform type: TRANS_TYPE_DH (0x4) | IKEv2 transform ID: OAKLEY_GROUP_MODP3072 (0xf) | *****parse IKEv2 Transform Substructure Payload: | last transform: v2_TRANSFORM_NON_LAST (0x3) | length: 8 (0x8) | IKEv2 transform type: TRANS_TYPE_DH (0x4) | IKEv2 transform ID: OAKLEY_GROUP_MODP4096 (0x10) | *****parse IKEv2 Transform Substructure Payload: | last transform: v2_TRANSFORM_NON_LAST (0x3) | length: 8 (0x8) | IKEv2 transform type: TRANS_TYPE_DH (0x4) | IKEv2 transform ID: OAKLEY_GROUP_MODP8192 (0x12) | *****parse IKEv2 Transform Substructure Payload: | last transform: v2_TRANSFORM_NON_LAST (0x3) | length: 8 (0x8) | IKEv2 transform type: TRANS_TYPE_DH (0x4) | IKEv2 transform ID: OAKLEY_GROUP_ECP_256 (0x13) | *****parse IKEv2 Transform Substructure Payload: | last transform: v2_TRANSFORM_NON_LAST (0x3) | length: 8 (0x8) | IKEv2 transform type: TRANS_TYPE_DH (0x4) | IKEv2 transform ID: OAKLEY_GROUP_ECP_384 (0x14) | *****parse IKEv2 Transform Substructure Payload: | last transform: v2_TRANSFORM_NON_LAST (0x3) | length: 8 (0x8) | IKEv2 transform type: TRANS_TYPE_DH (0x4) | IKEv2 transform ID: OAKLEY_GROUP_ECP_521 (0x15) | *****parse IKEv2 Transform Substructure Payload: | last transform: v2_TRANSFORM_LAST (0x0) | length: 8 (0x8) | IKEv2 transform type: TRANS_TYPE_DH (0x4) | IKEv2 transform ID: OAKLEY_GROUP_CURVE25519 (0x1f) | remote proposal 1 proposed transforms: ENCR+PRF+DH; matched: ENCR+PRF+DH; unmatched: none | comparing remote proposal 1 containing ENCR+PRF+DH transforms to local proposal 1; required: ENCR+PRF+DH; optional: INTEG; matched: ENCR+PRF+DH | remote proposal 1 matches local proposal 1 | ****parse IKEv2 Proposal Substructure Payload: | last proposal: v2_PROPOSAL_NON_LAST (0x2) | length: 100 (0x64) | prop #: 2 (0x2) | proto ID: IKEv2_SEC_PROTO_IKE (0x1) | spi size: 0 (0x0) | # transforms: 11 (0xb) | Comparing remote proposal 2 containing 11 transforms against local proposal [1..0] of 4 local proposals | *****parse IKEv2 Transform Substructure Payload: | last transform: v2_TRANSFORM_NON_LAST (0x3) | length: 12 (0xc) | IKEv2 transform type: TRANS_TYPE_ENCR (0x1) | IKEv2 transform ID: AES_GCM_C (0x14) | ******parse IKEv2 Attribute Substructure Payload: | af+type: AF+IKEv2_KEY_LENGTH (0x800e) | length/value: 128 (0x80) | *****parse IKEv2 Transform Substructure Payload: | last transform: v2_TRANSFORM_NON_LAST (0x3) | length: 8 (0x8) | IKEv2 transform type: TRANS_TYPE_PRF (0x2) | IKEv2 transform ID: PRF_HMAC_SHA2_512 (0x7) | *****parse IKEv2 Transform Substructure Payload: | last transform: v2_TRANSFORM_NON_LAST (0x3) | length: 8 (0x8) | IKEv2 transform type: TRANS_TYPE_PRF (0x2) | IKEv2 transform ID: PRF_HMAC_SHA2_256 (0x5) | *****parse IKEv2 Transform Substructure Payload: | last transform: v2_TRANSFORM_NON_LAST (0x3) | length: 8 (0x8) | IKEv2 transform type: TRANS_TYPE_DH (0x4) | IKEv2 transform ID: OAKLEY_GROUP_MODP2048 (0xe) | *****parse IKEv2 Transform Substructure Payload: | last transform: v2_TRANSFORM_NON_LAST (0x3) | length: 8 (0x8) | IKEv2 transform type: TRANS_TYPE_DH (0x4) | IKEv2 transform ID: OAKLEY_GROUP_MODP3072 (0xf) | *****parse IKEv2 Transform Substructure Payload: | last transform: v2_TRANSFORM_NON_LAST (0x3) | length: 8 (0x8) | IKEv2 transform type: TRANS_TYPE_DH (0x4) | IKEv2 transform ID: OAKLEY_GROUP_MODP4096 (0x10) | *****parse IKEv2 Transform Substructure Payload: | last transform: v2_TRANSFORM_NON_LAST (0x3) | length: 8 (0x8) | IKEv2 transform type: TRANS_TYPE_DH (0x4) | IKEv2 transform ID: OAKLEY_GROUP_MODP8192 (0x12) | *****parse IKEv2 Transform Substructure Payload: | last transform: v2_TRANSFORM_NON_LAST (0x3) | length: 8 (0x8) | IKEv2 transform type: TRANS_TYPE_DH (0x4) | IKEv2 transform ID: OAKLEY_GROUP_ECP_256 (0x13) | *****parse IKEv2 Transform Substructure Payload: | last transform: v2_TRANSFORM_NON_LAST (0x3) | length: 8 (0x8) | IKEv2 transform type: TRANS_TYPE_DH (0x4) | IKEv2 transform ID: OAKLEY_GROUP_ECP_384 (0x14) | *****parse IKEv2 Transform Substructure Payload: | last transform: v2_TRANSFORM_NON_LAST (0x3) | length: 8 (0x8) | IKEv2 transform type: TRANS_TYPE_DH (0x4) | IKEv2 transform ID: OAKLEY_GROUP_ECP_521 (0x15) | *****parse IKEv2 Transform Substructure Payload: | last transform: v2_TRANSFORM_LAST (0x0) | length: 8 (0x8) | IKEv2 transform type: TRANS_TYPE_DH (0x4) | IKEv2 transform ID: OAKLEY_GROUP_CURVE25519 (0x1f) | remote proposal 2 proposed transforms: ENCR+PRF+DH; matched: none; unmatched: ENCR+PRF+DH | remote proposal 2 does not match; unmatched remote transforms: ENCR+PRF+DH | ****parse IKEv2 Proposal Substructure Payload: | last proposal: v2_PROPOSAL_NON_LAST (0x2) | length: 116 (0x74) | prop #: 3 (0x3) | proto ID: IKEv2_SEC_PROTO_IKE (0x1) | spi size: 0 (0x0) | # transforms: 13 (0xd) | Comparing remote proposal 3 containing 13 transforms against local proposal [1..0] of 4 local proposals | *****parse IKEv2 Transform Substructure Payload: | last transform: v2_TRANSFORM_NON_LAST (0x3) | length: 12 (0xc) | IKEv2 transform type: TRANS_TYPE_ENCR (0x1) | IKEv2 transform ID: AES_CBC (0xc) | ******parse IKEv2 Attribute Substructure Payload: | af+type: AF+IKEv2_KEY_LENGTH (0x800e) | length/value: 256 (0x100) | *****parse IKEv2 Transform Substructure Payload: | last transform: v2_TRANSFORM_NON_LAST (0x3) | length: 8 (0x8) | IKEv2 transform type: TRANS_TYPE_PRF (0x2) | IKEv2 transform ID: PRF_HMAC_SHA2_512 (0x7) | *****parse IKEv2 Transform Substructure Payload: | last transform: v2_TRANSFORM_NON_LAST (0x3) | length: 8 (0x8) | IKEv2 transform type: TRANS_TYPE_PRF (0x2) | IKEv2 transform ID: PRF_HMAC_SHA2_256 (0x5) | *****parse IKEv2 Transform Substructure Payload: | last transform: v2_TRANSFORM_NON_LAST (0x3) | length: 8 (0x8) | IKEv2 transform type: TRANS_TYPE_INTEG (0x3) | IKEv2 transform ID: AUTH_HMAC_SHA2_512_256 (0xe) | *****parse IKEv2 Transform Substructure Payload: | last transform: v2_TRANSFORM_NON_LAST (0x3) | length: 8 (0x8) | IKEv2 transform type: TRANS_TYPE_INTEG (0x3) | IKEv2 transform ID: AUTH_HMAC_SHA2_256_128 (0xc) | *****parse IKEv2 Transform Substructure Payload: | last transform: v2_TRANSFORM_NON_LAST (0x3) | length: 8 (0x8) | IKEv2 transform type: TRANS_TYPE_DH (0x4) | IKEv2 transform ID: OAKLEY_GROUP_MODP2048 (0xe) | *****parse IKEv2 Transform Substructure Payload: | last transform: v2_TRANSFORM_NON_LAST (0x3) | length: 8 (0x8) | IKEv2 transform type: TRANS_TYPE_DH (0x4) | IKEv2 transform ID: OAKLEY_GROUP_MODP3072 (0xf) | *****parse IKEv2 Transform Substructure Payload: | last transform: v2_TRANSFORM_NON_LAST (0x3) | length: 8 (0x8) | IKEv2 transform type: TRANS_TYPE_DH (0x4) | IKEv2 transform ID: OAKLEY_GROUP_MODP4096 (0x10) | *****parse IKEv2 Transform Substructure Payload: | last transform: v2_TRANSFORM_NON_LAST (0x3) | length: 8 (0x8) | IKEv2 transform type: TRANS_TYPE_DH (0x4) | IKEv2 transform ID: OAKLEY_GROUP_MODP8192 (0x12) | *****parse IKEv2 Transform Substructure Payload: | last transform: v2_TRANSFORM_NON_LAST (0x3) | length: 8 (0x8) | IKEv2 transform type: TRANS_TYPE_DH (0x4) | IKEv2 transform ID: OAKLEY_GROUP_ECP_256 (0x13) | *****parse IKEv2 Transform Substructure Payload: | last transform: v2_TRANSFORM_NON_LAST (0x3) | length: 8 (0x8) | IKEv2 transform type: TRANS_TYPE_DH (0x4) | IKEv2 transform ID: OAKLEY_GROUP_ECP_384 (0x14) | *****parse IKEv2 Transform Substructure Payload: | last transform: v2_TRANSFORM_NON_LAST (0x3) | length: 8 (0x8) | IKEv2 transform type: TRANS_TYPE_DH (0x4) | IKEv2 transform ID: OAKLEY_GROUP_ECP_521 (0x15) | *****parse IKEv2 Transform Substructure Payload: | last transform: v2_TRANSFORM_LAST (0x0) | length: 8 (0x8) | IKEv2 transform type: TRANS_TYPE_DH (0x4) | IKEv2 transform ID: OAKLEY_GROUP_CURVE25519 (0x1f) | remote proposal 3 proposed transforms: ENCR+PRF+INTEG+DH; matched: none; unmatched: ENCR+PRF+INTEG+DH | remote proposal 3 does not match; unmatched remote transforms: ENCR+PRF+INTEG+DH | ****parse IKEv2 Proposal Substructure Payload: | last proposal: v2_PROPOSAL_LAST (0x0) | length: 116 (0x74) | prop #: 4 (0x4) | proto ID: IKEv2_SEC_PROTO_IKE (0x1) | spi size: 0 (0x0) | # transforms: 13 (0xd) | Comparing remote proposal 4 containing 13 transforms against local proposal [1..0] of 4 local proposals | *****parse IKEv2 Transform Substructure Payload: | last transform: v2_TRANSFORM_NON_LAST (0x3) | length: 12 (0xc) | IKEv2 transform type: TRANS_TYPE_ENCR (0x1) | IKEv2 transform ID: AES_CBC (0xc) | ******parse IKEv2 Attribute Substructure Payload: | af+type: AF+IKEv2_KEY_LENGTH (0x800e) | length/value: 128 (0x80) | *****parse IKEv2 Transform Substructure Payload: | last transform: v2_TRANSFORM_NON_LAST (0x3) | length: 8 (0x8) | IKEv2 transform type: TRANS_TYPE_PRF (0x2) | IKEv2 transform ID: PRF_HMAC_SHA2_512 (0x7) | *****parse IKEv2 Transform Substructure Payload: | last transform: v2_TRANSFORM_NON_LAST (0x3) | length: 8 (0x8) | IKEv2 transform type: TRANS_TYPE_PRF (0x2) | IKEv2 transform ID: PRF_HMAC_SHA2_256 (0x5) | *****parse IKEv2 Transform Substructure Payload: | last transform: v2_TRANSFORM_NON_LAST (0x3) | length: 8 (0x8) | IKEv2 transform type: TRANS_TYPE_INTEG (0x3) | IKEv2 transform ID: AUTH_HMAC_SHA2_512_256 (0xe) | *****parse IKEv2 Transform Substructure Payload: | last transform: v2_TRANSFORM_NON_LAST (0x3) | length: 8 (0x8) | IKEv2 transform type: TRANS_TYPE_INTEG (0x3) | IKEv2 transform ID: AUTH_HMAC_SHA2_256_128 (0xc) | *****parse IKEv2 Transform Substructure Payload: | last transform: v2_TRANSFORM_NON_LAST (0x3) | length: 8 (0x8) | IKEv2 transform type: TRANS_TYPE_DH (0x4) | IKEv2 transform ID: OAKLEY_GROUP_MODP2048 (0xe) | *****parse IKEv2 Transform Substructure Payload: | last transform: v2_TRANSFORM_NON_LAST (0x3) | length: 8 (0x8) | IKEv2 transform type: TRANS_TYPE_DH (0x4) | IKEv2 transform ID: OAKLEY_GROUP_MODP3072 (0xf) | *****parse IKEv2 Transform Substructure Payload: | last transform: v2_TRANSFORM_NON_LAST (0x3) | length: 8 (0x8) | IKEv2 transform type: TRANS_TYPE_DH (0x4) | IKEv2 transform ID: OAKLEY_GROUP_MODP4096 (0x10) | *****parse IKEv2 Transform Substructure Payload: | last transform: v2_TRANSFORM_NON_LAST (0x3) | length: 8 (0x8) | IKEv2 transform type: TRANS_TYPE_DH (0x4) | IKEv2 transform ID: OAKLEY_GROUP_MODP8192 (0x12) | *****parse IKEv2 Transform Substructure Payload: | last transform: v2_TRANSFORM_NON_LAST (0x3) | length: 8 (0x8) | IKEv2 transform type: TRANS_TYPE_DH (0x4) | IKEv2 transform ID: OAKLEY_GROUP_ECP_256 (0x13) | *****parse IKEv2 Transform Substructure Payload: | last transform: v2_TRANSFORM_NON_LAST (0x3) | length: 8 (0x8) | IKEv2 transform type: TRANS_TYPE_DH (0x4) | IKEv2 transform ID: OAKLEY_GROUP_ECP_384 (0x14) | *****parse IKEv2 Transform Substructure Payload: | last transform: v2_TRANSFORM_NON_LAST (0x3) | length: 8 (0x8) | IKEv2 transform type: TRANS_TYPE_DH (0x4) | IKEv2 transform ID: OAKLEY_GROUP_ECP_521 (0x15) | *****parse IKEv2 Transform Substructure Payload: | last transform: v2_TRANSFORM_LAST (0x0) | length: 8 (0x8) | IKEv2 transform type: TRANS_TYPE_DH (0x4) | IKEv2 transform ID: OAKLEY_GROUP_CURVE25519 (0x1f) | remote proposal 4 proposed transforms: ENCR+PRF+INTEG+DH; matched: none; unmatched: ENCR+PRF+INTEG+DH | remote proposal 4 does not match; unmatched remote transforms: ENCR+PRF+INTEG+DH "westnet-eastnet-ikev2" #2: proposal 1:IKE:ENCR=AES_GCM_C_256;PRF=HMAC_SHA2_512;DH=MODP2048 chosen from remote proposals 1:IKE:ENCR=AES_GCM_C_256;PRF=HMAC_SHA2_512;PRF=HMAC_SHA2_256;DH=MODP2048;DH=MODP3072;DH=MODP4096;DH=MODP8192;DH=ECP_256;DH=ECP_384;DH=ECP_521;DH=CURVE25519[first-match] 2:IKE:ENCR=AES_GCM_C_128;PRF=HMAC_SHA2_512;PRF=HMAC_SHA2_256;DH=MODP2048;DH=MODP3072;DH=MODP4096;DH=MODP8192;DH=ECP_256;DH=ECP_384;DH=ECP_521;DH=CURVE25519 3:IKE:ENCR=AES_CBC_256;PRF=HMAC_SHA2_512;PRF=HMAC_SHA2_256;INTEG=HMAC_SHA2_512_256;INTEG=HMAC_SHA2_256_128;DH=MODP2048;DH=MODP3072;DH=MODP4096;DH=MODP8192;DH=ECP_256;DH=ECP_384;DH=ECP_521;DH=CURVE25519 4:IKE:ENCR=AES_CBC_128;PRF=HMAC_SHA2_512;PRF=HMAC_SHA2_256;INTEG=HMAC_SHA2_512_256;INTEG=HMAC_SHA2_256_128;DH=MODP2048;DH=MODP3072;DH=MODP4096;DH=MODP8192;DH=ECP_256;DH=ECP_384;DH=ECP_521;DH=CURVE25519 | accepted IKE proposal ikev2_proposal: 1:IKE:ENCR=AES_GCM_C_256;PRF=HMAC_SHA2_512;DH=MODP2048 | converting proposal to internal trans attrs | natd_hash: rcookie is zero | natd_hash: hasher=0x55cbd9798800(20) | natd_hash: icookie= 27 ae 31 26 5e c6 79 93 | natd_hash: rcookie= 00 00 00 00 00 00 00 00 | natd_hash: ip= c0 01 02 17 | natd_hash: port=500 | natd_hash: hash= bc e5 1d c2 5f 8b ca 0f 0b 37 da 7e bf fc e1 65 | natd_hash: hash= 43 c0 da 8b | natd_hash: rcookie is zero | natd_hash: hasher=0x55cbd9798800(20) | natd_hash: icookie= 27 ae 31 26 5e c6 79 93 | natd_hash: rcookie= 00 00 00 00 00 00 00 00 | natd_hash: ip= c0 01 02 2d | natd_hash: port=500 | natd_hash: hash= d2 ba 33 39 f5 d2 fc 68 77 b7 78 de 8b 48 0e 4e | natd_hash: hash= e9 3b e1 d9 | NAT_TRAVERSAL encaps using auto-detect | NAT_TRAVERSAL this end is NOT behind NAT | NAT_TRAVERSAL that end is NOT behind NAT | NAT_TRAVERSAL nat-keepalive enabled 192.1.2.45 | adding ikev2_inI1outR1 KE work-order 3 for state #2 | event_schedule: new EVENT_CRYPTO_TIMEOUT-pe@0x7f4b3c001f18 | inserting event EVENT_CRYPTO_TIMEOUT, timeout in 60 seconds for #2 | libevent_malloc: new ptr-libevent@0x55cbd9d0e488 size 128 | #2 spent 0.446 milliseconds in processing: Respond to IKE_SA_INIT in ikev2_process_state_packet() | [RE]START processing: state #2 connection "westnet-eastnet-ikev2" from 192.1.2.45:500 (in complete_v2_state_transition() at ikev2.c:3379) | #2 complete_v2_state_transition() PARENT_R0->PARENT_R1 with status STF_SUSPEND | suspending state #2 and saving MD | #2 is busy; has a suspended MD | [RE]START processing: state #2 connection "westnet-eastnet-ikev2" from 192.1.2.45:500 (in log_stf_suspend() at ikev2.c:3269) | "westnet-eastnet-ikev2" #2 complete v2 state STATE_PARENT_R0 transition with STF_SUSPEND suspended from complete_v2_state_transition:3451 | crypto helper 2 resuming | crypto helper 2 starting work-order 3 for state #2 | stop processing: state #2 connection "westnet-eastnet-ikev2" from 192.1.2.45:500 (in ikev2_process_packet() at ikev2.c:2018) | crypto helper 2 doing build KE and nonce (ikev2_inI1outR1 KE); request ID 3 | #2 spent 0.733 milliseconds in ikev2_process_packet() | stop processing: from 192.1.2.45:500 (in process_md() at demux.c:380) | processing: STOP state #0 (in process_md() at demux.c:382) | processing: STOP connection NULL (in process_md() at demux.c:383) | spent 0.742 milliseconds in comm_handle_cb() reading and processing packet | crypto helper 2 finished build KE and nonce (ikev2_inI1outR1 KE); request ID 3 time elapsed 0.000534 seconds | (#2) spent 0.532 milliseconds in crypto helper computing work-order 3: ikev2_inI1outR1 KE (pcr) | crypto helper 2 sending results from work-order 3 for state #2 to event queue | scheduling resume sending helper answer for #2 | libevent_malloc: new ptr-libevent@0x7f4b40002888 size 128 | crypto helper 2 waiting (nothing to do) | processing resume sending helper answer for #2 | start processing: state #2 connection "westnet-eastnet-ikev2" from 192.1.2.45:500 (in resume_handler() at server.c:797) | crypto helper 2 replies to request ID 3 | calling continuation function 0x55cbd96c3b50 | ikev2_parent_inI1outR1_continue for #2: calculated ke+nonce, sending R1 | **emit ISAKMP Message: | initiator cookie: | 27 ae 31 26 5e c6 79 93 | responder cookie: | d4 d8 78 73 8a b3 3b d6 | next payload type: ISAKMP_NEXT_NONE (0x0) | ISAKMP version: IKEv2 version 2.0 (rfc4306/rfc5996) (0x20) | exchange type: ISAKMP_v2_IKE_SA_INIT (0x22) | flags: ISAKMP_FLAG_v2_MSG_RESPONSE (0x20) | Message ID: 0 (0x0) | next payload chain: saving message location 'ISAKMP Message'.'next payload type' | Emitting ikev2_proposal ... | ***emit IKEv2 Security Association Payload: | next payload type: ISAKMP_NEXT_v2NONE (0x0) | flags: none (0x0) | next payload chain: setting previous 'ISAKMP Message'.'next payload type' to current IKEv2 Security Association Payload (33:ISAKMP_NEXT_v2SA) | next payload chain: saving location 'IKEv2 Security Association Payload'.'next payload type' in 'reply packet' | ****emit IKEv2 Proposal Substructure Payload: | last proposal: v2_PROPOSAL_LAST (0x0) | prop #: 1 (0x1) | proto ID: IKEv2_SEC_PROTO_IKE (0x1) | spi size: 0 (0x0) | # transforms: 3 (0x3) | last substructure: saving location 'IKEv2 Security Association Payload'.'IKEv2 Proposal Substructure Payload'.'last proposal' | *****emit IKEv2 Transform Substructure Payload: | last transform: v2_TRANSFORM_NON_LAST (0x3) | IKEv2 transform type: TRANS_TYPE_ENCR (0x1) | IKEv2 transform ID: AES_GCM_C (0x14) | last substructure: saving location 'IKEv2 Proposal Substructure Payload'.'IKEv2 Transform Substructure Payload'.'last transform' | ******emit IKEv2 Attribute Substructure Payload: | af+type: AF+IKEv2_KEY_LENGTH (0x800e) | length/value: 256 (0x100) | emitting length of IKEv2 Transform Substructure Payload: 12 | *****emit IKEv2 Transform Substructure Payload: | last transform: v2_TRANSFORM_NON_LAST (0x3) | IKEv2 transform type: TRANS_TYPE_PRF (0x2) | IKEv2 transform ID: PRF_HMAC_SHA2_512 (0x7) | last substructure: checking 'IKEv2 Proposal Substructure Payload'.'IKEv2 Transform Substructure Payload'.'last transform' is v2_TRANSFORM_NON_LAST (0x3) | last substructure: saving location 'IKEv2 Proposal Substructure Payload'.'IKEv2 Transform Substructure Payload'.'last transform' | emitting length of IKEv2 Transform Substructure Payload: 8 | *****emit IKEv2 Transform Substructure Payload: | last transform: v2_TRANSFORM_LAST (0x0) | IKEv2 transform type: TRANS_TYPE_DH (0x4) | IKEv2 transform ID: OAKLEY_GROUP_MODP2048 (0xe) | last substructure: checking 'IKEv2 Proposal Substructure Payload'.'IKEv2 Transform Substructure Payload'.'last transform' is v2_TRANSFORM_NON_LAST (0x3) | last substructure: saving location 'IKEv2 Proposal Substructure Payload'.'IKEv2 Transform Substructure Payload'.'last transform' | emitting length of IKEv2 Transform Substructure Payload: 8 | emitting length of IKEv2 Proposal Substructure Payload: 36 | last substructure: checking 'IKEv2 Proposal Substructure Payload'.'IKEv2 Transform Substructure Payload'.'last transform' is 0 | emitting length of IKEv2 Security Association Payload: 40 | last substructure: checking 'IKEv2 Security Association Payload'.'IKEv2 Proposal Substructure Payload'.'last proposal' is 0 | ***emit IKEv2 Key Exchange Payload: | next payload type: ISAKMP_NEXT_v2NONE (0x0) | flags: none (0x0) | DH group: OAKLEY_GROUP_MODP2048 (0xe) | next payload chain: setting previous 'IKEv2 Security Association Payload'.'next payload type' to current IKEv2 Key Exchange Payload (34:ISAKMP_NEXT_v2KE) | next payload chain: saving location 'IKEv2 Key Exchange Payload'.'next payload type' in 'reply packet' | emitting 256 raw bytes of ikev2 g^x into IKEv2 Key Exchange Payload | ikev2 g^x 78 2d f2 83 6e 02 a2 26 a3 15 71 bf ed 55 ed 81 | ikev2 g^x 92 92 5e 1e e9 7d 36 92 f4 3c 87 56 70 ac d7 1d | ikev2 g^x d7 62 ff b1 4b 42 63 7c 43 be 7f 8c b1 ad 38 73 | ikev2 g^x a0 ee c7 c2 f4 b6 96 2c 5e 4e 38 a5 4a 6a ee 09 | ikev2 g^x 71 12 62 89 52 0d 58 21 1b 69 2b 1c b4 b7 c2 6c | ikev2 g^x 95 40 9a 5e 55 a1 9e 29 c7 e0 06 6c 51 70 9f 12 | ikev2 g^x 35 34 9f ba 87 bd 73 6f cc 98 b5 39 ef f7 82 07 | ikev2 g^x d0 3a 12 05 b7 75 71 4a 55 27 3d 3f 09 8e e8 99 | ikev2 g^x d1 96 d5 f2 e8 f5 50 60 af 4c dd 68 10 1a 54 0e | ikev2 g^x 12 dd 82 09 b7 6d 5d d9 21 86 4f a2 ac 92 b3 ee | ikev2 g^x 55 fe a7 c7 42 4c a3 df 74 7b 9c 5c 37 93 14 c9 | ikev2 g^x b9 3b b8 71 ae d9 ea 0f c5 8a 90 fe c7 e8 5d ac | ikev2 g^x 38 5c 2f 15 07 7f 6e 8b 42 d9 17 fe 81 43 40 84 | ikev2 g^x 0f 3d 2e 2d c8 a9 a1 1b 5b 6a 97 31 af d6 31 f7 | ikev2 g^x cc a1 87 db ed d4 04 89 e0 ab 59 96 65 88 0f 3a | ikev2 g^x f9 fc a9 46 84 c0 eb 70 a0 a4 c5 e4 cd d4 84 36 | emitting length of IKEv2 Key Exchange Payload: 264 | ***emit IKEv2 Nonce Payload: | next payload type: ISAKMP_NEXT_v2N (0x29) | flags: none (0x0) | next payload chain: ignoring supplied 'IKEv2 Nonce Payload'.'next payload type' value 41:ISAKMP_NEXT_v2N | next payload chain: setting previous 'IKEv2 Key Exchange Payload'.'next payload type' to current IKEv2 Nonce Payload (40:ISAKMP_NEXT_v2Ni) | next payload chain: saving location 'IKEv2 Nonce Payload'.'next payload type' in 'reply packet' | emitting 32 raw bytes of IKEv2 nonce into IKEv2 Nonce Payload | IKEv2 nonce 3d c4 37 8b 6a a0 9b 02 fd 5b eb ff 2b 2f dd 7c | IKEv2 nonce 65 cc 54 1f 1a cb b8 83 88 70 52 1a 4c 10 a5 31 | emitting length of IKEv2 Nonce Payload: 36 | Adding a v2N Payload | ***emit IKEv2 Notify Payload: | next payload type: ISAKMP_NEXT_v2NONE (0x0) | flags: none (0x0) | Protocol ID: PROTO_v2_RESERVED (0x0) | SPI size: 0 (0x0) | Notify Message Type: v2N_IKEV2_FRAGMENTATION_SUPPORTED (0x402e) | next payload chain: setting previous 'IKEv2 Nonce Payload'.'next payload type' to current IKEv2 Notify Payload (41:ISAKMP_NEXT_v2N) | next payload chain: saving location 'IKEv2 Notify Payload'.'next payload type' in 'reply packet' | emitting length of IKEv2 Notify Payload: 8 | NAT-Traversal support [enabled] add v2N payloads. | natd_hash: hasher=0x55cbd9798800(20) | natd_hash: icookie= 27 ae 31 26 5e c6 79 93 | natd_hash: rcookie= d4 d8 78 73 8a b3 3b d6 | natd_hash: ip= c0 01 02 17 | natd_hash: port=500 | natd_hash: hash= 38 be 5f 95 14 b6 ff 12 8e cf 90 e1 1d 82 0d eb | natd_hash: hash= 5e 95 56 00 | Adding a v2N Payload | ***emit IKEv2 Notify Payload: | next payload type: ISAKMP_NEXT_v2NONE (0x0) | flags: none (0x0) | Protocol ID: PROTO_v2_RESERVED (0x0) | SPI size: 0 (0x0) | Notify Message Type: v2N_NAT_DETECTION_SOURCE_IP (0x4004) | next payload chain: setting previous 'IKEv2 Notify Payload'.'next payload type' to current IKEv2 Notify Payload (41:ISAKMP_NEXT_v2N) | next payload chain: saving location 'IKEv2 Notify Payload'.'next payload type' in 'reply packet' | emitting 20 raw bytes of Notify data into IKEv2 Notify Payload | Notify data 38 be 5f 95 14 b6 ff 12 8e cf 90 e1 1d 82 0d eb | Notify data 5e 95 56 00 | emitting length of IKEv2 Notify Payload: 28 | natd_hash: hasher=0x55cbd9798800(20) | natd_hash: icookie= 27 ae 31 26 5e c6 79 93 | natd_hash: rcookie= d4 d8 78 73 8a b3 3b d6 | natd_hash: ip= c0 01 02 2d | natd_hash: port=500 | natd_hash: hash= bc 05 5d bd 5d ba aa f6 53 f0 b6 81 7e 9f 15 38 | natd_hash: hash= 18 89 71 5c | Adding a v2N Payload | ***emit IKEv2 Notify Payload: | next payload type: ISAKMP_NEXT_v2NONE (0x0) | flags: none (0x0) | Protocol ID: PROTO_v2_RESERVED (0x0) | SPI size: 0 (0x0) | Notify Message Type: v2N_NAT_DETECTION_DESTINATION_IP (0x4005) | next payload chain: setting previous 'IKEv2 Notify Payload'.'next payload type' to current IKEv2 Notify Payload (41:ISAKMP_NEXT_v2N) | next payload chain: saving location 'IKEv2 Notify Payload'.'next payload type' in 'reply packet' | emitting 20 raw bytes of Notify data into IKEv2 Notify Payload | Notify data bc 05 5d bd 5d ba aa f6 53 f0 b6 81 7e 9f 15 38 | Notify data 18 89 71 5c | emitting length of IKEv2 Notify Payload: 28 | going to send a certreq | connection->kind is CK_PERMANENT so send CERTREQ | ***emit IKEv2 Certificate Request Payload: | next payload type: ISAKMP_NEXT_v2NONE (0x0) | flags: none (0x0) | ikev2 cert encoding: CERT_X509_SIGNATURE (0x4) | next payload chain: setting previous 'IKEv2 Notify Payload'.'next payload type' to current IKEv2 Certificate Request Payload (38:ISAKMP_NEXT_v2CERTREQ) | next payload chain: saving location 'IKEv2 Certificate Request Payload'.'next payload type' in 'reply packet' | emitting length of IKEv2 Certificate Request Payload: 5 | emitting length of ISAKMP Message: 437 | [RE]START processing: state #2 connection "westnet-eastnet-ikev2" from 192.1.2.45:500 (in complete_v2_state_transition() at ikev2.c:3379) | #2 complete_v2_state_transition() PARENT_R0->PARENT_R1 with status STF_OK | IKEv2: transition from state STATE_PARENT_R0 to state STATE_PARENT_R1 | parent state #2: PARENT_R0(half-open IKE SA) => PARENT_R1(half-open IKE SA) | Message ID: updating counters for #2 to 0 after switching state | Message ID: recv #2 request 0; ike: initiator.sent=-1 initiator.recv=-1 responder.sent=-1 responder.recv=-1->0 wip.initiator=-1 wip.responder=0->-1 | Message ID: sent #2 response 0; ike: initiator.sent=-1 initiator.recv=-1 responder.sent=-1->0 responder.recv=0 wip.initiator=-1 wip.responder=-1 "westnet-eastnet-ikev2" #2: STATE_PARENT_R1: received v2I1, sent v2R1 {auth=IKEv2 cipher=AES_GCM_16_256 integ=n/a prf=HMAC_SHA2_512 group=MODP2048} | sending V2 new request packet to 192.1.2.45:500 (from 192.1.2.23:500) | sending 437 bytes for STATE_PARENT_R0 through eth1 from 192.1.2.23:500 to 192.1.2.45:500 (using #2) | 27 ae 31 26 5e c6 79 93 d4 d8 78 73 8a b3 3b d6 | 21 20 22 20 00 00 00 00 00 00 01 b5 22 00 00 28 | 00 00 00 24 01 01 00 03 03 00 00 0c 01 00 00 14 | 80 0e 01 00 03 00 00 08 02 00 00 07 00 00 00 08 | 04 00 00 0e 28 00 01 08 00 0e 00 00 78 2d f2 83 | 6e 02 a2 26 a3 15 71 bf ed 55 ed 81 92 92 5e 1e | e9 7d 36 92 f4 3c 87 56 70 ac d7 1d d7 62 ff b1 | 4b 42 63 7c 43 be 7f 8c b1 ad 38 73 a0 ee c7 c2 | f4 b6 96 2c 5e 4e 38 a5 4a 6a ee 09 71 12 62 89 | 52 0d 58 21 1b 69 2b 1c b4 b7 c2 6c 95 40 9a 5e | 55 a1 9e 29 c7 e0 06 6c 51 70 9f 12 35 34 9f ba | 87 bd 73 6f cc 98 b5 39 ef f7 82 07 d0 3a 12 05 | b7 75 71 4a 55 27 3d 3f 09 8e e8 99 d1 96 d5 f2 | e8 f5 50 60 af 4c dd 68 10 1a 54 0e 12 dd 82 09 | b7 6d 5d d9 21 86 4f a2 ac 92 b3 ee 55 fe a7 c7 | 42 4c a3 df 74 7b 9c 5c 37 93 14 c9 b9 3b b8 71 | ae d9 ea 0f c5 8a 90 fe c7 e8 5d ac 38 5c 2f 15 | 07 7f 6e 8b 42 d9 17 fe 81 43 40 84 0f 3d 2e 2d | c8 a9 a1 1b 5b 6a 97 31 af d6 31 f7 cc a1 87 db | ed d4 04 89 e0 ab 59 96 65 88 0f 3a f9 fc a9 46 | 84 c0 eb 70 a0 a4 c5 e4 cd d4 84 36 29 00 00 24 | 3d c4 37 8b 6a a0 9b 02 fd 5b eb ff 2b 2f dd 7c | 65 cc 54 1f 1a cb b8 83 88 70 52 1a 4c 10 a5 31 | 29 00 00 08 00 00 40 2e 29 00 00 1c 00 00 40 04 | 38 be 5f 95 14 b6 ff 12 8e cf 90 e1 1d 82 0d eb | 5e 95 56 00 26 00 00 1c 00 00 40 05 bc 05 5d bd | 5d ba aa f6 53 f0 b6 81 7e 9f 15 38 18 89 71 5c | 00 00 00 05 04 | state #2 requesting EVENT_CRYPTO_TIMEOUT to be deleted | libevent_free: release ptr-libevent@0x55cbd9d0e488 | free_event_entry: release EVENT_CRYPTO_TIMEOUT-pe@0x7f4b3c001f18 | event_schedule: new EVENT_SO_DISCARD-pe@0x7f4b3c001f18 | inserting event EVENT_SO_DISCARD, timeout in 200 seconds for #2 | libevent_malloc: new ptr-libevent@0x55cbd9d02038 size 128 | resume sending helper answer for #2 suppresed complete_v2_state_transition() | #2 spent 0.289 milliseconds in resume sending helper answer | stop processing: state #2 connection "westnet-eastnet-ikev2" from 192.1.2.45:500 (in resume_handler() at server.c:833) | libevent_free: release ptr-libevent@0x7f4b40002888 | spent 0.00226 milliseconds in comm_handle_cb() calling check_incoming_msg_errqueue() | *received 539 bytes from 192.1.2.45:500 on eth1 (192.1.2.23:500) | 27 ae 31 26 5e c6 79 93 d4 d8 78 73 8a b3 3b d6 | 35 20 23 08 00 00 00 01 00 00 02 1b 23 00 01 ff | 00 01 00 05 93 7f 0b 7d 21 f8 49 21 6f 45 d2 ea | 37 ff 7d 19 91 e5 d3 3d 84 52 70 02 c0 b7 c8 9b | 6f 95 33 c9 12 09 0b e1 46 6b 95 81 b3 b0 87 09 | 44 87 22 6b 5f dd b4 62 99 9b ae 4a 92 ed 93 6a | 94 ec 9d e5 b7 33 52 71 5f 52 3f be f4 d3 2b 33 | 0f 80 e9 06 74 e6 f2 50 ad 1f bc b3 0c 08 09 c5 | 1c d7 8f 48 e6 74 af 8c fc 77 28 21 44 bc ee 6a | 30 5d fe 22 e0 9c f3 05 24 04 2a 8a 3a 16 f3 70 | 4d 33 05 1a d9 9a 27 26 06 46 48 e6 1f c9 2b 9f | 8f 0b 85 9a 71 d4 4e 13 ea 83 37 60 e3 72 ec d7 | 71 19 da 6a 04 eb d6 92 44 09 c8 25 e3 04 1d f9 | 6c 42 b3 6c 34 f6 f3 32 94 2c 2b 4f 6b 05 5f 1a | 3d 3d 72 78 c6 e4 14 71 c4 4c f5 6d fa 2e a1 26 | c6 97 b0 9c 2e 9c 12 6d cb fd 5b 30 51 bd 6b 72 | 60 5b 1b 8b 2a da 92 81 80 1c af 66 66 be bc ac | ee 17 a0 70 99 6e d7 ef 2d 71 49 1f 33 d1 6c 58 | fd a2 93 8d a6 0c 42 a5 ee 65 05 89 42 62 54 d4 | fb 21 48 3d af 7f a2 2c 83 bb 4d 77 ed 75 40 81 | 00 d0 f0 74 b8 bf 9c 6a 70 36 6f e5 9a d0 d6 fa | 5e 7e b0 3c 59 1d 51 d7 6a 21 d5 44 e8 73 72 d5 | 50 4d 65 dd fc 86 ae 60 ed b1 34 e0 1b 31 04 4c | 40 51 b6 58 b3 c4 61 47 23 06 a3 8e 11 82 03 d5 | ae 6c 65 c0 78 07 3a 5e c1 18 37 77 e6 9a 75 1d | 78 0c ec 03 38 4f 08 19 82 ea fb 89 d6 85 f5 3e | 1a c5 49 72 ca 69 6d 53 e4 69 03 eb 2b 20 8c ca | 03 fd 70 2c 04 68 73 8c b4 f8 4e 06 36 e1 cc 5d | b6 01 e2 cf fe a0 1d 9a 20 f7 47 ab b1 3f 35 47 | 21 9d 12 9c 14 0e 89 07 a0 85 96 fb 0d 0f d4 04 | fe 2e 7a 6a 34 79 44 2f 5a 4c 6f 13 66 0a 62 c5 | 78 d0 18 ce 7c f4 3a 77 6b c5 10 8b d0 2d f5 c9 | 3e 6c 91 81 7e 7a 2c fd a4 d9 71 87 35 9c cb c1 | 94 1d eb b0 71 a2 57 b6 dc 31 61 | start processing: from 192.1.2.45:500 (in process_md() at demux.c:378) | **parse ISAKMP Message: | initiator cookie: | 27 ae 31 26 5e c6 79 93 | responder cookie: | d4 d8 78 73 8a b3 3b d6 | next payload type: ISAKMP_NEXT_v2SKF (0x35) | ISAKMP version: IKEv2 version 2.0 (rfc4306/rfc5996) (0x20) | exchange type: ISAKMP_v2_IKE_AUTH (0x23) | flags: ISAKMP_FLAG_v2_IKE_INIT (0x8) | Message ID: 1 (0x1) | length: 539 (0x21b) | processing version=2.0 packet with exchange type=ISAKMP_v2_IKE_AUTH (35) | I am the IKE SA Original Responder receiving an IKEv2 IKE_AUTH request | State DB: found IKEv2 state #2 in PARENT_R1 (find_v2_ike_sa) | start processing: state #2 connection "westnet-eastnet-ikev2" from 192.1.2.45:500 (in ikev2_process_packet() at ikev2.c:2016) | State DB: IKEv2 state not found (find_v2_sa_by_responder_wip) | [RE]START processing: state #2 connection "westnet-eastnet-ikev2" from 192.1.2.45:500 (in ike_process_packet() at ikev2.c:2064) | #2 st.st_msgid_lastrecv 0 md.hdr.isa_msgid 00000001 | Message ID: #2 not a duplicate - message is new; initiator.sent=-1 initiator.recv=-1 responder.sent=0 responder.recv=0 | unpacking clear payload | Now let's proceed with payload (ISAKMP_NEXT_v2SKF) | ***parse IKEv2 Encrypted Fragment: | next payload type: ISAKMP_NEXT_v2IDi (0x23) | flags: none (0x0) | length: 511 (0x1ff) | fragment number: 1 (0x1) | total fragments: 5 (0x5) | processing payload: ISAKMP_NEXT_v2SKF (len=503) | Message ID: start-responder #2 request 1; ike: initiator.sent=-1 initiator.recv=-1 responder.sent=0 responder.recv=0 wip.initiator=-1 wip.responder=-1->1 | #2 in state PARENT_R1: received v2I1, sent v2R1 | received IKE encrypted fragment number '1', total number '5', next payload '35' | updated IKE fragment state to respond using fragments without waiting for re-transmits | stop processing: state #2 connection "westnet-eastnet-ikev2" from 192.1.2.45:500 (in ikev2_process_packet() at ikev2.c:2018) | #2 spent 0.106 milliseconds in ikev2_process_packet() | stop processing: from 192.1.2.45:500 (in process_md() at demux.c:380) | processing: STOP state #0 (in process_md() at demux.c:382) | processing: STOP connection NULL (in process_md() at demux.c:383) | spent 0.114 milliseconds in comm_handle_cb() reading and processing packet | spent 0.00114 milliseconds in comm_handle_cb() calling check_incoming_msg_errqueue() | *received 539 bytes from 192.1.2.45:500 on eth1 (192.1.2.23:500) | 27 ae 31 26 5e c6 79 93 d4 d8 78 73 8a b3 3b d6 | 35 20 23 08 00 00 00 01 00 00 02 1b 00 00 01 ff | 00 02 00 05 59 df ed f0 61 da 0c cf 62 af 31 2a | e4 f9 e5 f9 78 08 d8 7a ac 05 a9 f5 7b de 09 45 | fe 8c a0 4d e1 19 af ef 69 b0 1e 6b 09 a6 ac e3 | 29 ec 89 50 e3 e2 f2 ad 4c 33 a7 e4 20 d7 1c 1a | 26 d6 d7 3e 3c ba 50 16 45 df 05 f8 e6 1a d3 02 | 23 08 7d 7b 38 b9 ee 78 0a 6e 0a bc 21 50 47 65 | c2 b4 7b 56 72 3b 3a 60 ce 9d 14 ee 39 86 2b 23 | df 5e 6c 31 b9 ef 00 70 f1 32 71 59 07 0d 1c 11 | 09 b5 c0 d1 3d 99 a9 ae b9 a6 dd 04 d9 09 f7 96 | b7 c7 ef fb b6 f1 25 e1 b4 e2 94 0c 13 33 9a 2d | 55 5f c9 ee 94 d5 f2 6d fb 37 b7 79 68 bb fb 69 | d3 a6 83 4f 61 0f 31 d1 eb ff 96 5b 71 fe 26 6f | e1 15 f7 5c 1d 4e 70 e7 4d 93 d4 07 4a 59 84 fb | 83 ce 63 fa 50 d7 94 57 69 32 2b da 75 d3 38 d6 | 77 d1 46 cc f5 45 af 2e be cd 16 15 30 1a 9e 1e | c9 d7 d6 51 85 47 60 80 2b d8 84 36 e7 11 7e 0d | 47 fe 10 7e c3 a2 a7 a6 96 d4 dd 57 a2 39 43 ea | 45 ac 84 3a 82 0f 6a b0 20 ad b6 59 36 9f 99 ad | e0 67 d8 15 b4 c2 a7 5c b5 33 e0 a6 c6 43 4c 5c | f5 b8 88 b2 64 d1 f3 2f 15 b0 31 76 6b df e5 55 | 89 fa 48 f6 79 a3 50 e1 6c 69 65 c8 47 c5 dd 56 | b5 f7 36 bc a8 8e cc 33 f9 c5 47 5d 19 5f 03 a5 | b9 3c dd 93 af 0d d2 2a e7 a4 67 db d1 a8 f5 82 | 87 b1 d2 74 6c a1 eb cb 52 5e 4d 40 eb 4e 0c 1d | b9 b3 19 ba e6 45 4b 6a 60 75 df 29 4d 2f 4d a0 | 30 6b e5 f2 de d6 ee a2 0f a1 43 62 5d 03 21 7c | 50 32 be 0e dc e3 13 3d 67 73 7f 65 5c fa 7b b8 | 97 1d 87 de 37 7f 0f b1 e2 bd 1b 33 f6 d8 83 3b | 60 3b 42 30 0c 89 a4 db a9 5b 2e 7a 53 60 68 fc | f0 79 38 b0 28 f4 a1 9a 47 48 7e f1 34 4d 2b 2b | 28 10 b2 26 ca 90 a9 0a e2 d7 73 50 bb 56 12 28 | 79 c6 e7 ea c5 d0 12 79 f2 d2 98 | start processing: from 192.1.2.45:500 (in process_md() at demux.c:378) | **parse ISAKMP Message: | initiator cookie: | 27 ae 31 26 5e c6 79 93 | responder cookie: | d4 d8 78 73 8a b3 3b d6 | next payload type: ISAKMP_NEXT_v2SKF (0x35) | ISAKMP version: IKEv2 version 2.0 (rfc4306/rfc5996) (0x20) | exchange type: ISAKMP_v2_IKE_AUTH (0x23) | flags: ISAKMP_FLAG_v2_IKE_INIT (0x8) | Message ID: 1 (0x1) | length: 539 (0x21b) | processing version=2.0 packet with exchange type=ISAKMP_v2_IKE_AUTH (35) | I am the IKE SA Original Responder receiving an IKEv2 IKE_AUTH request | State DB: found IKEv2 state #2 in PARENT_R1 (find_v2_ike_sa) | start processing: state #2 connection "westnet-eastnet-ikev2" from 192.1.2.45:500 (in ikev2_process_packet() at ikev2.c:2016) | [RE]START processing: state #2 connection "westnet-eastnet-ikev2" from 192.1.2.45:500 (in ike_process_packet() at ikev2.c:2062) | #2 st.st_msgid_lastrecv 0 md.hdr.isa_msgid 00000001 | #2 is idle | #2 idle | Message ID: #2 not a duplicate - responder is accumulating fragments; initiator.sent=-1 initiator.recv=-1 responder.sent=0 responder.recv=0 wip.initiator=-1 wip.responder=1 | unpacking clear payload | Now let's proceed with payload (ISAKMP_NEXT_v2SKF) | ***parse IKEv2 Encrypted Fragment: | next payload type: ISAKMP_NEXT_v2NONE (0x0) | flags: none (0x0) | length: 511 (0x1ff) | fragment number: 2 (0x2) | total fragments: 5 (0x5) | processing payload: ISAKMP_NEXT_v2SKF (len=503) | #2 in state PARENT_R1: received v2I1, sent v2R1 | received IKE encrypted fragment number '2', total number '5', next payload '0' | stop processing: state #2 connection "westnet-eastnet-ikev2" from 192.1.2.45:500 (in ikev2_process_packet() at ikev2.c:2018) | #2 spent 0.0935 milliseconds in ikev2_process_packet() | stop processing: from 192.1.2.45:500 (in process_md() at demux.c:380) | processing: STOP state #0 (in process_md() at demux.c:382) | processing: STOP connection NULL (in process_md() at demux.c:383) | spent 0.101 milliseconds in comm_handle_cb() reading and processing packet | spent 0.00105 milliseconds in comm_handle_cb() calling check_incoming_msg_errqueue() | *received 539 bytes from 192.1.2.45:500 on eth1 (192.1.2.23:500) | 27 ae 31 26 5e c6 79 93 d4 d8 78 73 8a b3 3b d6 | 35 20 23 08 00 00 00 01 00 00 02 1b 00 00 01 ff | 00 03 00 05 e3 cb 6d 2a 20 a0 78 06 91 4f 44 08 | 98 d3 70 32 51 e8 94 b9 93 8d 6c d5 7d 51 de f0 | 94 9d 69 63 da ac b9 f4 5b 91 e6 8d 64 5d 3c ad | e6 c6 78 bb b2 8f 7d 55 fb e4 76 d4 a9 f4 81 37 | 11 7b fc 1b 2d 6f de 8a 3b c2 f9 33 f1 f4 1c b8 | ae 04 e3 15 7f 2f ac 16 c5 91 70 2b 60 d3 04 7d | 47 77 4f 55 6c a5 2c 95 ff 1c b9 be 75 4a 14 5e | 84 fa 66 ea 84 41 14 ae b0 da 7a b3 62 9e 34 54 | c0 23 3a dc ba 77 3f 10 20 7e 13 23 fd 2d d0 05 | f0 fd 06 f0 9d ec a5 c6 7f 39 23 89 60 91 ef 2e | 53 82 eb 21 88 a9 b1 b3 c7 36 ed 97 5d ac 87 44 | 4d b2 59 dc 21 20 81 f6 e9 78 d8 b0 4e 5c 20 d0 | c1 51 ea 9e 6f 5d fd 2b a9 60 58 f9 60 29 bb bc | 09 11 2f 31 56 d9 d1 1f 92 9e a2 6f ea 68 98 61 | 89 1f e0 d1 93 43 f7 d8 3b 90 b2 3b f3 66 ef 0b | f8 0a 5a c8 52 20 cd b6 8b 97 e8 16 fb 04 98 45 | 13 e7 0d e9 05 37 d9 93 31 e1 04 ad 53 b3 e1 cb | c0 63 95 b8 91 01 e3 a0 f2 e3 29 56 b9 ab c6 72 | 46 3c 43 f7 74 35 6c 82 b8 ee 51 24 93 d9 9e 0c | 79 de 0b a1 3b ee 3c c7 bc d5 bc c2 1a 4a ce d4 | 78 f7 a5 83 44 e2 77 fc d6 b5 7c 32 4d 0c d7 11 | 47 c7 fd 80 f9 0a b7 6d b8 8c ca f0 c9 d7 e6 55 | f9 61 2c d8 5b 85 ac 40 ff b3 f8 1f 86 93 88 8e | 54 c0 96 ab 17 68 be b6 ad cc 2b d1 77 47 8a 32 | 6a 74 56 7c 62 dc e8 8d 61 0e c8 4b dc 50 a9 59 | fb ac 55 73 e4 e1 62 85 a0 d2 f8 40 25 27 9f 52 | 29 3a 60 4b ff b2 88 b2 32 02 8e f9 c4 ff 76 c1 | 46 7f 5e b6 6f 64 a3 38 e1 99 0c 83 e0 24 f9 9e | 6c 9c 48 65 56 11 47 73 b1 50 a1 b4 94 6d 74 84 | 71 02 41 70 25 f3 eb 2d f7 66 41 4c 4c e7 c8 c7 | 22 a0 6f 09 66 e2 f0 38 16 e1 0d 82 ec 0d 78 5d | a5 22 69 93 e8 1d 20 6e a8 95 47 | start processing: from 192.1.2.45:500 (in process_md() at demux.c:378) | **parse ISAKMP Message: | initiator cookie: | 27 ae 31 26 5e c6 79 93 | responder cookie: | d4 d8 78 73 8a b3 3b d6 | next payload type: ISAKMP_NEXT_v2SKF (0x35) | ISAKMP version: IKEv2 version 2.0 (rfc4306/rfc5996) (0x20) | exchange type: ISAKMP_v2_IKE_AUTH (0x23) | flags: ISAKMP_FLAG_v2_IKE_INIT (0x8) | Message ID: 1 (0x1) | length: 539 (0x21b) | processing version=2.0 packet with exchange type=ISAKMP_v2_IKE_AUTH (35) | I am the IKE SA Original Responder receiving an IKEv2 IKE_AUTH request | State DB: found IKEv2 state #2 in PARENT_R1 (find_v2_ike_sa) | start processing: state #2 connection "westnet-eastnet-ikev2" from 192.1.2.45:500 (in ikev2_process_packet() at ikev2.c:2016) | [RE]START processing: state #2 connection "westnet-eastnet-ikev2" from 192.1.2.45:500 (in ike_process_packet() at ikev2.c:2062) | #2 st.st_msgid_lastrecv 0 md.hdr.isa_msgid 00000001 | #2 is idle | #2 idle | Message ID: #2 not a duplicate - responder is accumulating fragments; initiator.sent=-1 initiator.recv=-1 responder.sent=0 responder.recv=0 wip.initiator=-1 wip.responder=1 | unpacking clear payload | Now let's proceed with payload (ISAKMP_NEXT_v2SKF) | ***parse IKEv2 Encrypted Fragment: | next payload type: ISAKMP_NEXT_v2NONE (0x0) | flags: none (0x0) | length: 511 (0x1ff) | fragment number: 3 (0x3) | total fragments: 5 (0x5) | processing payload: ISAKMP_NEXT_v2SKF (len=503) | #2 in state PARENT_R1: received v2I1, sent v2R1 | received IKE encrypted fragment number '3', total number '5', next payload '0' | stop processing: state #2 connection "westnet-eastnet-ikev2" from 192.1.2.45:500 (in ikev2_process_packet() at ikev2.c:2018) | #2 spent 0.0909 milliseconds in ikev2_process_packet() | stop processing: from 192.1.2.45:500 (in process_md() at demux.c:380) | processing: STOP state #0 (in process_md() at demux.c:382) | processing: STOP connection NULL (in process_md() at demux.c:383) | spent 0.098 milliseconds in comm_handle_cb() reading and processing packet | spent 0.00115 milliseconds in comm_handle_cb() calling check_incoming_msg_errqueue() | *received 539 bytes from 192.1.2.45:500 on eth1 (192.1.2.23:500) | 27 ae 31 26 5e c6 79 93 d4 d8 78 73 8a b3 3b d6 | 35 20 23 08 00 00 00 01 00 00 02 1b 00 00 01 ff | 00 04 00 05 e4 6f 03 b2 8f fc 07 8b 98 56 18 8b | b5 d8 85 6c 87 82 af 96 6f 6b af a0 3a 5d 9b 7f | 95 02 e7 4f 82 fc 9a f5 30 d4 3c 89 70 f4 5a 18 | a5 de 9d bc 3c 6d 43 74 51 e0 1a 94 27 34 85 fb | 23 33 db 79 67 03 fb fc 3c ef 7b 32 b4 ef 2e 5d | 95 da 8f c3 70 7c d4 9f fd d3 ae 1e 05 dd 14 c9 | 43 e7 a0 50 e5 8b 6a ea 18 52 37 b0 c8 96 52 7d | a3 f1 d4 aa 6d 6a 8a 52 96 c8 76 d1 7a 58 f8 b4 | a9 67 33 d1 85 3b e6 62 9d 58 9f a8 31 11 d0 84 | c4 30 28 58 56 8b 23 fc 34 f9 f0 39 c6 03 79 83 | dc 3b b7 a4 77 c4 e8 02 fa 77 59 21 05 41 36 0d | cc 0d bf 5c 3e 12 4a f3 1f 9e f3 77 70 30 b7 41 | 5b fb fc c5 e9 25 aa a1 d2 d4 23 fa 4a 92 ab 65 | 33 15 fd 58 25 e8 c0 a6 fa ed 46 3b e8 95 ac da | 64 89 27 ec a6 20 ba 4f 77 86 79 14 2a e6 de 17 | 41 4e 00 fd 2b 6c 6a 96 ed f0 18 9b 1a db ea 4a | a4 79 56 7d 96 e9 5f e9 42 a3 3c 06 07 a6 fe c3 | 3d e7 62 5b dc 68 a8 1a 2d 4b 82 d2 f8 58 44 74 | cc 40 a7 4b 01 2f 4d ff b2 53 60 a8 97 38 de 59 | 75 99 cb 71 cb 4f 60 64 b3 a2 81 99 61 80 6d b4 | cf 24 21 be 53 52 ae 9c a0 14 ef 01 8f dc 9b 10 | 63 78 fa 3d 4f 07 fb 6c 7e 33 cf cf 32 ae bc 5c | c1 19 0a 22 95 c0 bf b3 67 9e 82 7b e1 68 49 41 | 64 30 1f 66 1c 02 c1 d4 70 05 17 fe 92 2b f0 5f | 6c 66 9b 41 b1 2b 77 3f cc 86 8b 08 6d 74 4b fa | cf 07 6b 84 0a a1 5a 8a 5c 4c aa b7 3c 2e f7 56 | f7 61 91 7e c8 60 5d 8b 39 dd 32 ca 53 dd 06 a1 | 93 27 71 cc 83 d0 4f 51 c1 f2 17 f5 25 41 f9 e0 | 1a 29 c6 c3 39 52 7e 68 24 d0 77 9c e4 85 02 82 | 62 eb 80 cf 45 57 9c da 2f 67 20 5c db 29 fd f8 | 53 06 1d cf 31 7f 1a 0f 7d 65 4d ca d8 be 15 9b | 61 09 de ca 67 8b 1d 31 38 f1 da | start processing: from 192.1.2.45:500 (in process_md() at demux.c:378) | **parse ISAKMP Message: | initiator cookie: | 27 ae 31 26 5e c6 79 93 | responder cookie: | d4 d8 78 73 8a b3 3b d6 | next payload type: ISAKMP_NEXT_v2SKF (0x35) | ISAKMP version: IKEv2 version 2.0 (rfc4306/rfc5996) (0x20) | exchange type: ISAKMP_v2_IKE_AUTH (0x23) | flags: ISAKMP_FLAG_v2_IKE_INIT (0x8) | Message ID: 1 (0x1) | length: 539 (0x21b) | processing version=2.0 packet with exchange type=ISAKMP_v2_IKE_AUTH (35) | I am the IKE SA Original Responder receiving an IKEv2 IKE_AUTH request | State DB: found IKEv2 state #2 in PARENT_R1 (find_v2_ike_sa) | start processing: state #2 connection "westnet-eastnet-ikev2" from 192.1.2.45:500 (in ikev2_process_packet() at ikev2.c:2016) | [RE]START processing: state #2 connection "westnet-eastnet-ikev2" from 192.1.2.45:500 (in ike_process_packet() at ikev2.c:2062) | #2 st.st_msgid_lastrecv 0 md.hdr.isa_msgid 00000001 | #2 is idle | #2 idle | Message ID: #2 not a duplicate - responder is accumulating fragments; initiator.sent=-1 initiator.recv=-1 responder.sent=0 responder.recv=0 wip.initiator=-1 wip.responder=1 | unpacking clear payload | Now let's proceed with payload (ISAKMP_NEXT_v2SKF) | ***parse IKEv2 Encrypted Fragment: | next payload type: ISAKMP_NEXT_v2NONE (0x0) | flags: none (0x0) | length: 511 (0x1ff) | fragment number: 4 (0x4) | total fragments: 5 (0x5) | processing payload: ISAKMP_NEXT_v2SKF (len=503) | #2 in state PARENT_R1: received v2I1, sent v2R1 | received IKE encrypted fragment number '4', total number '5', next payload '0' | stop processing: state #2 connection "westnet-eastnet-ikev2" from 192.1.2.45:500 (in ikev2_process_packet() at ikev2.c:2018) | #2 spent 0.0895 milliseconds in ikev2_process_packet() | stop processing: from 192.1.2.45:500 (in process_md() at demux.c:380) | processing: STOP state #0 (in process_md() at demux.c:382) | processing: STOP connection NULL (in process_md() at demux.c:383) | spent 0.0964 milliseconds in comm_handle_cb() reading and processing packet | spent 0.00101 milliseconds in comm_handle_cb() calling check_incoming_msg_errqueue() | *received 221 bytes from 192.1.2.45:500 on eth1 (192.1.2.23:500) | 27 ae 31 26 5e c6 79 93 d4 d8 78 73 8a b3 3b d6 | 35 20 23 08 00 00 00 01 00 00 00 dd 00 00 00 c1 | 00 05 00 05 2c f4 ce f4 31 44 0b 50 48 02 68 54 | a3 b8 39 2b 35 e0 93 72 2c 9b e3 66 5c 58 ef 19 | 77 d6 76 c9 cb 06 8e 72 e0 ea e7 d0 1e 16 c2 34 | 0d 7e 7d e7 0c df b8 57 75 f3 d9 eb 9e 92 3f 9f | 0a 3b 58 40 f8 fd 38 10 6a 4c 6b cd 5c c4 13 15 | 85 67 f4 13 20 e5 f7 52 d0 7d 78 58 50 f9 17 78 | bf 15 9d d3 34 3f 77 a2 b9 ed a0 53 8c ea b3 ef | 1d 1c 97 9f 0f 89 99 04 cf b4 21 a8 d6 24 80 ab | e1 dd 70 f8 f4 35 ee 8c 51 97 eb 47 13 0a 73 84 | 23 67 ff 0f 6c 4f 6b 1b af bb a8 09 c8 61 8e e7 | 9f 49 64 e6 fa ef 66 5d a7 9d 75 d6 47 04 31 5f | 01 02 94 0e 2c 2b ac ff 3a bc 14 68 31 | start processing: from 192.1.2.45:500 (in process_md() at demux.c:378) | **parse ISAKMP Message: | initiator cookie: | 27 ae 31 26 5e c6 79 93 | responder cookie: | d4 d8 78 73 8a b3 3b d6 | next payload type: ISAKMP_NEXT_v2SKF (0x35) | ISAKMP version: IKEv2 version 2.0 (rfc4306/rfc5996) (0x20) | exchange type: ISAKMP_v2_IKE_AUTH (0x23) | flags: ISAKMP_FLAG_v2_IKE_INIT (0x8) | Message ID: 1 (0x1) | length: 221 (0xdd) | processing version=2.0 packet with exchange type=ISAKMP_v2_IKE_AUTH (35) | I am the IKE SA Original Responder receiving an IKEv2 IKE_AUTH request | State DB: found IKEv2 state #2 in PARENT_R1 (find_v2_ike_sa) | start processing: state #2 connection "westnet-eastnet-ikev2" from 192.1.2.45:500 (in ikev2_process_packet() at ikev2.c:2016) | [RE]START processing: state #2 connection "westnet-eastnet-ikev2" from 192.1.2.45:500 (in ike_process_packet() at ikev2.c:2062) | #2 st.st_msgid_lastrecv 0 md.hdr.isa_msgid 00000001 | #2 is idle | #2 idle | Message ID: #2 not a duplicate - responder is accumulating fragments; initiator.sent=-1 initiator.recv=-1 responder.sent=0 responder.recv=0 wip.initiator=-1 wip.responder=1 | unpacking clear payload | Now let's proceed with payload (ISAKMP_NEXT_v2SKF) | ***parse IKEv2 Encrypted Fragment: | next payload type: ISAKMP_NEXT_v2NONE (0x0) | flags: none (0x0) | length: 193 (0xc1) | fragment number: 5 (0x5) | total fragments: 5 (0x5) | processing payload: ISAKMP_NEXT_v2SKF (len=185) | #2 in state PARENT_R1: received v2I1, sent v2R1 | received IKE encrypted fragment number '5', total number '5', next payload '0' | selected state microcode Responder: process IKE_AUTH request (no SKEYSEED) | Now let's proceed with state specific processing | calling processor Responder: process IKE_AUTH request (no SKEYSEED) | ikev2 parent inI2outR2: calculating g^{xy} in order to decrypt I2 | offloading IKEv2 SKEYSEED using prf=HMAC_SHA2_512 integ=NONE cipherkey=AES_GCM_16 | adding ikev2_inI2outR2 KE work-order 4 for state #2 | state #2 requesting EVENT_SO_DISCARD to be deleted | libevent_free: release ptr-libevent@0x55cbd9d02038 | free_event_entry: release EVENT_SO_DISCARD-pe@0x7f4b3c001f18 | event_schedule: new EVENT_CRYPTO_TIMEOUT-pe@0x7f4b40002b78 | inserting event EVENT_CRYPTO_TIMEOUT, timeout in 60 seconds for #2 | libevent_malloc: new ptr-libevent@0x7f4b40002888 size 128 | #2 spent 0.0202 milliseconds in processing: Responder: process IKE_AUTH request (no SKEYSEED) in ikev2_process_state_packet() | [RE]START processing: state #2 connection "westnet-eastnet-ikev2" from 192.1.2.45:500 (in complete_v2_state_transition() at ikev2.c:3379) | #2 complete_v2_state_transition() PARENT_R1->PARENT_R1 with status STF_SUSPEND | suspending state #2 and saving MD | #2 is busy; has a suspended MD | [RE]START processing: state #2 connection "westnet-eastnet-ikev2" from 192.1.2.45:500 (in log_stf_suspend() at ikev2.c:3269) | "westnet-eastnet-ikev2" #2 complete v2 state STATE_PARENT_R1 transition with STF_SUSPEND suspended from complete_v2_state_transition:3451 | stop processing: state #2 connection "westnet-eastnet-ikev2" from 192.1.2.45:500 (in ikev2_process_packet() at ikev2.c:2018) | #2 spent 0.105 milliseconds in ikev2_process_packet() | stop processing: from 192.1.2.45:500 (in process_md() at demux.c:380) | processing: STOP state #0 (in process_md() at demux.c:382) | processing: STOP connection NULL (in process_md() at demux.c:383) | spent 0.115 milliseconds in comm_handle_cb() reading and processing packet | crypto helper 3 resuming | crypto helper 3 starting work-order 4 for state #2 | crypto helper 3 doing compute dh (V2) (ikev2_inI2outR2 KE); request ID 4 | calculating skeyseed using prf=sha2_512 integ=none cipherkey-size=32 salt-size=4 | crypto helper 3 finished compute dh (V2) (ikev2_inI2outR2 KE); request ID 4 time elapsed 0.000785 seconds | (#2) spent 0.786 milliseconds in crypto helper computing work-order 4: ikev2_inI2outR2 KE (pcr) | crypto helper 3 sending results from work-order 4 for state #2 to event queue | scheduling resume sending helper answer for #2 | libevent_malloc: new ptr-libevent@0x7f4b34000f48 size 128 | crypto helper 3 waiting (nothing to do) | processing resume sending helper answer for #2 | start processing: state #2 connection "westnet-eastnet-ikev2" from 192.1.2.45:500 (in resume_handler() at server.c:797) | crypto helper 3 replies to request ID 4 | calling continuation function 0x55cbd96c3b50 | ikev2_parent_inI2outR2_continue for #2: calculating g^{xy}, sending R2 | #2 in state PARENT_R1: received v2I1, sent v2R1 | already have all fragments, skipping fragment collection | already have all fragments, skipping fragment collection | #2 ikev2 ISAKMP_v2_IKE_AUTH decrypt success | Now let's proceed with payload (ISAKMP_NEXT_v2IDi) | **parse IKEv2 Identification - Initiator - Payload: | next payload type: ISAKMP_NEXT_v2CERT (0x25) | flags: none (0x0) | length: 191 (0xbf) | ID type: ID_DER_ASN1_DN (0x9) | processing payload: ISAKMP_NEXT_v2IDi (len=183) | Now let's proceed with payload (ISAKMP_NEXT_v2CERT) | **parse IKEv2 Certificate Payload: | next payload type: ISAKMP_NEXT_v2IDr (0x24) | flags: none (0x0) | length: 1265 (0x4f1) | ikev2 cert encoding: CERT_X509_SIGNATURE (0x4) | processing payload: ISAKMP_NEXT_v2CERT (len=1260) | Now let's proceed with payload (ISAKMP_NEXT_v2IDr) | **parse IKEv2 Identification - Responder - Payload: | next payload type: ISAKMP_NEXT_v2AUTH (0x27) | flags: none (0x0) | length: 12 (0xc) | ID type: ID_FQDN (0x2) | processing payload: ISAKMP_NEXT_v2IDr (len=4) | Now let's proceed with payload (ISAKMP_NEXT_v2AUTH) | **parse IKEv2 Authentication Payload: | next payload type: ISAKMP_NEXT_v2SA (0x21) | flags: none (0x0) | length: 392 (0x188) | auth method: IKEv2_AUTH_RSA (0x1) | processing payload: ISAKMP_NEXT_v2AUTH (len=384) | Now let's proceed with payload (ISAKMP_NEXT_v2SA) | **parse IKEv2 Security Association Payload: | next payload type: ISAKMP_NEXT_v2TSi (0x2c) | flags: none (0x0) | length: 164 (0xa4) | processing payload: ISAKMP_NEXT_v2SA (len=160) | Now let's proceed with payload (ISAKMP_NEXT_v2TSi) | **parse IKEv2 Traffic Selector - Initiator - Payload: | next payload type: ISAKMP_NEXT_v2TSr (0x2d) | flags: none (0x0) | length: 24 (0x18) | number of TS: 1 (0x1) | processing payload: ISAKMP_NEXT_v2TSi (len=16) | Now let's proceed with payload (ISAKMP_NEXT_v2TSr) | **parse IKEv2 Traffic Selector - Responder - Payload: | next payload type: ISAKMP_NEXT_v2NONE (0x0) | flags: none (0x0) | length: 24 (0x18) | number of TS: 1 (0x1) | processing payload: ISAKMP_NEXT_v2TSr (len=16) | selected state microcode Responder: process IKE_AUTH request | Now let's proceed with state specific processing | calling processor Responder: process IKE_AUTH request "westnet-eastnet-ikev2" #2: processing decrypted IKE_AUTH request: SK{IDi,CERT,IDr,AUTH,SA,TSi,TSr} | #2 updating local interface from 192.1.2.23:500 to 192.1.2.23:500 using md->iface (in update_ike_endpoints() at state.c:2669) | global one-shot timer EVENT_FREE_ROOT_CERTS scheduled in 300 seconds | #2 spent 0.00299 milliseconds in find_and_verify_certs() calling get_root_certs() | checking for known CERT payloads | saving certificate of type 'X509_SIGNATURE' | decoded cert: E=user-west@testing.libreswan.org,CN=west.testing.libreswan.org,OU=Test Department,O=Libreswan,L=Toronto,ST=Ontario,C=CA | #2 spent 0.502 milliseconds in find_and_verify_certs() calling decode_cert_payloads() | cert_issuer_has_current_crl: looking for a CRL issued by E=testing@libreswan.org,CN=Libreswan test CA for mainca,OU=Test Department,O=Libreswan,L=Toronto,ST=Ontario,C=CA | #2 spent 0.0292 milliseconds in find_and_verify_certs() calling crl_update_check() | missing or expired CRL | crl_strict: 0, ocsp: 0, ocsp_strict: 0, ocsp_post: 0 | verify_end_cert trying profile IPsec | certificate is valid (profile IPsec) | #2 spent 0.0764 milliseconds in find_and_verify_certs() calling verify_end_cert() "westnet-eastnet-ikev2" #2: certificate verified OK: E=user-west@testing.libreswan.org,CN=west.testing.libreswan.org,OU=Test Department,O=Libreswan,L=Toronto,ST=Ontario,C=CA | get_pluto_gn_from_nss_cert: allocated pluto_gn 0x55cbd9d0a1c8 | get_pluto_gn_from_nss_cert: allocated pluto_gn 0x55cbd9d0a018 | get_pluto_gn_from_nss_cert: allocated pluto_gn 0x55cbd9d09e68 | get_pluto_gn_from_nss_cert: allocated pluto_gn 0x55cbd9d09cb8 | get_pluto_gn_from_nss_cert: allocated pluto_gn 0x55cbd9d05768 | unreference key: 0x55cbd9cf36f8 C=CA, ST=Ontario, L=Toronto, O=Libreswan, OU=Test Department, CN=west.testing.libreswan.org, E=user-west@testing.libreswan.org cnt 1-- | #2 spent 0.23 milliseconds in decode_certs() calling add_pubkey_from_nss_cert() | #2 spent 0.866 milliseconds in decode_certs() | DER ASN1 DN: 30 81 b4 31 0b 30 09 06 03 55 04 06 13 02 43 41 | DER ASN1 DN: 31 10 30 0e 06 03 55 04 08 0c 07 4f 6e 74 61 72 | DER ASN1 DN: 69 6f 31 10 30 0e 06 03 55 04 07 0c 07 54 6f 72 | DER ASN1 DN: 6f 6e 74 6f 31 12 30 10 06 03 55 04 0a 0c 09 4c | DER ASN1 DN: 69 62 72 65 73 77 61 6e 31 18 30 16 06 03 55 04 | DER ASN1 DN: 0b 0c 0f 54 65 73 74 20 44 65 70 61 72 74 6d 65 | DER ASN1 DN: 6e 74 31 23 30 21 06 03 55 04 03 0c 1a 77 65 73 | DER ASN1 DN: 74 2e 74 65 73 74 69 6e 67 2e 6c 69 62 72 65 73 | DER ASN1 DN: 77 61 6e 2e 6f 72 67 31 2e 30 2c 06 09 2a 86 48 | DER ASN1 DN: 86 f7 0d 01 09 01 16 1f 75 73 65 72 2d 77 65 73 | DER ASN1 DN: 74 40 74 65 73 74 69 6e 67 2e 6c 69 62 72 65 73 | DER ASN1 DN: 77 61 6e 2e 6f 72 67 | received IDr payload - extracting our alleged ID | ID_DER_ASN1_DN 'C=CA, ST=Ontario, L=Toronto, O=Libreswan, OU=Test Department, CN=west.testing.libreswan.org, E=user-west@testing.libreswan.org' needs further ID comparison against 'C=CA, ST=Ontario, L=Toronto, O=Libreswan, OU=Test Department, CN=west.testing.libreswan.org, E=user-west@testing.libreswan.org' | ID_DER_ASN1_DN 'C=CA, ST=Ontario, L=Toronto, O=Libreswan, OU=Test Department, CN=west.testing.libreswan.org, E=user-west@testing.libreswan.org' matched our ID | X509: CERT and ID matches current connection | refine_host_connection for IKEv2: starting with "westnet-eastnet-ikev2" | trusted_ca_nss: trustee A = 'C=CA, ST=Ontario, L=Toronto, O=Libreswan, OU=Test Department, CN=Libreswan test CA for mainca, E=testing@libreswan.org' | match_id a=C=CA, ST=Ontario, L=Toronto, O=Libreswan, OU=Test Department, CN=west.testing.libreswan.org, E=user-west@testing.libreswan.org | b=C=CA, ST=Ontario, L=Toronto, O=Libreswan, OU=Test Department, CN=west.testing.libreswan.org, E=user-west@testing.libreswan.org | results matched | trusted_ca_nss: trustee A = 'C=CA, ST=Ontario, L=Toronto, O=Libreswan, OU=Test Department, CN=Libreswan test CA for mainca, E=testing@libreswan.org' | refine_host_connection: checking "westnet-eastnet-ikev2" against "westnet-eastnet-ikev2", best=(none) with match=1(id=1(0)/ca=1(7)/reqca=1(0)) | Warning: not switching back to template of current instance | Peer expects us to be @east (ID_FQDN) according to its IDr payload | This connection's local id is @east (ID_FQDN) | refine_host_connection: checked westnet-eastnet-ikev2 against westnet-eastnet-ikev2, now for see if best | started looking for secret for @east->C=CA, ST=Ontario, L=Toronto, O=Libreswan, OU=Test Department, CN=west.testing.libreswan.org, E=user-west@testing.libreswan.org of kind PKK_RSA | actually looking for secret for @east->C=CA, ST=Ontario, L=Toronto, O=Libreswan, OU=Test Department, CN=west.testing.libreswan.org, E=user-west@testing.libreswan.org of kind PKK_RSA | line 1: key type PKK_RSA(@east) to type PKK_RSA | 1: compared key (none) to @east / C=CA, ST=Ontario, L=Toronto, O=Libreswan, OU=Test Department, CN=west.testing.libreswan.org, E=user-west@testing.libreswan.org -> 002 | 2: compared key (none) to @east / C=CA, ST=Ontario, L=Toronto, O=Libreswan, OU=Test Department, CN=west.testing.libreswan.org, E=user-west@testing.libreswan.org -> 002 | line 1: match=002 | match 002 beats previous best_match 000 match=0x55cbd9bd3b58 (line=1) | concluding with best_match=002 best=0x55cbd9bd3b58 (lineno=1) | refine_host_connection: picking new best "westnet-eastnet-ikev2" (wild=0, peer_pathlen=7/our=0) | refine going into 2nd loop allowing instantiated conns as well | returning since no better match than original best_found | offered CA: '%none' "westnet-eastnet-ikev2" #2: IKEv2 mode peer ID is ID_DER_ASN1_DN: 'C=CA, ST=Ontario, L=Toronto, O=Libreswan, OU=Test Department, CN=west.testing.libreswan.org, E=user-west@testing.libreswan.org' | verifying AUTH payload | required RSA CA is '%any' | checking RSA keyid 'C=CA, ST=Ontario, L=Toronto, O=Libreswan, OU=Test Department, CN=west.testing.libreswan.org, E=user-west@testing.libreswan.org' for match with 'C=CA, ST=Ontario, L=Toronto, O=Libreswan, OU=Test Department, CN=west.testing.libreswan.org, E=user-west@testing.libreswan.org' | trusted_ca_nss: trustee A = 'C=CA, ST=Ontario, L=Toronto, O=Libreswan, OU=Test Department, CN=Libreswan test CA for mainca, E=testing@libreswan.org' | key issuer CA is 'C=CA, ST=Ontario, L=Toronto, O=Libreswan, OU=Test Department, CN=Libreswan test CA for mainca, E=testing@libreswan.org' | an RSA Sig check passed with *AwEAAZd0v [remote certificates] | #2 spent 0.0962 milliseconds in try_all_RSA_keys() trying a pubkey "westnet-eastnet-ikev2" #2: Authenticated using RSA | #2 spent 0.12 milliseconds in ikev2_verify_rsa_hash() | parent state #2: PARENT_R1(half-open IKE SA) => PARENT_R2(established IKE SA) | #2 will start re-keying in 3330 seconds with margin of 270 seconds (attempting re-key) | state #2 requesting EVENT_CRYPTO_TIMEOUT to be deleted | libevent_free: release ptr-libevent@0x7f4b40002888 | free_event_entry: release EVENT_CRYPTO_TIMEOUT-pe@0x7f4b40002b78 | event_schedule: new EVENT_SA_REKEY-pe@0x7f4b40002b78 | inserting event EVENT_SA_REKEY, timeout in 3330 seconds for #2 | libevent_malloc: new ptr-libevent@0x55cbd9d059f8 size 128 | pstats #2 ikev2.ike established | **emit ISAKMP Message: | initiator cookie: | 27 ae 31 26 5e c6 79 93 | responder cookie: | d4 d8 78 73 8a b3 3b d6 | next payload type: ISAKMP_NEXT_NONE (0x0) | ISAKMP version: IKEv2 version 2.0 (rfc4306/rfc5996) (0x20) | exchange type: ISAKMP_v2_IKE_AUTH (0x23) | flags: ISAKMP_FLAG_v2_MSG_RESPONSE (0x20) | Message ID: 1 (0x1) | next payload chain: saving message location 'ISAKMP Message'.'next payload type' | IKEv2 CERT: send a certificate? | IKEv2 CERT: no certificate to send | ***emit IKEv2 Encryption Payload: | next payload type: ISAKMP_NEXT_v2NONE (0x0) | flags: none (0x0) | next payload chain: setting previous 'ISAKMP Message'.'next payload type' to current IKEv2 Encryption Payload (46:ISAKMP_NEXT_v2SK) | next payload chain: saving location 'IKEv2 Encryption Payload'.'next payload type' in 'reply packet' | emitting 8 zero bytes of IV into IKEv2 Encryption Payload | Initiator child policy is compress=no, NOT sending v2N_IPCOMP_SUPPORTED | ****emit IKEv2 Identification - Responder - Payload: | next payload type: ISAKMP_NEXT_v2NONE (0x0) | flags: none (0x0) | ID type: ID_FQDN (0x2) | next payload chain: setting previous 'IKEv2 Encryption Payload'.'next payload type' to current IKEv2 Identification - Responder - Payload (36:ISAKMP_NEXT_v2IDr) | next payload chain: saving location 'IKEv2 Identification - Responder - Payload'.'next payload type' in 'reply packet' | emitting 4 raw bytes of my identity into IKEv2 Identification - Responder - Payload | my identity 65 61 73 74 | emitting length of IKEv2 Identification - Responder - Payload: 12 | assembled IDr payload | CHILD SA proposals received | going to assemble AUTH payload | ****emit IKEv2 Authentication Payload: | next payload type: ISAKMP_NEXT_v2SA (0x21) | flags: none (0x0) | auth method: IKEv2_AUTH_RSA (0x1) | next payload chain: ignoring supplied 'IKEv2 Authentication Payload'.'next payload type' value 33:ISAKMP_NEXT_v2SA | next payload chain: setting previous 'IKEv2 Identification - Responder - Payload'.'next payload type' to current IKEv2 Authentication Payload (39:ISAKMP_NEXT_v2AUTH) | next payload chain: saving location 'IKEv2 Authentication Payload'.'next payload type' in 'reply packet' | started looking for secret for @east->C=CA, ST=Ontario, L=Toronto, O=Libreswan, OU=Test Department, CN=west.testing.libreswan.org, E=user-west@testing.libreswan.org of kind PKK_RSA | actually looking for secret for @east->C=CA, ST=Ontario, L=Toronto, O=Libreswan, OU=Test Department, CN=west.testing.libreswan.org, E=user-west@testing.libreswan.org of kind PKK_RSA | line 1: key type PKK_RSA(@east) to type PKK_RSA | 1: compared key (none) to @east / C=CA, ST=Ontario, L=Toronto, O=Libreswan, OU=Test Department, CN=west.testing.libreswan.org, E=user-west@testing.libreswan.org -> 002 | 2: compared key (none) to @east / C=CA, ST=Ontario, L=Toronto, O=Libreswan, OU=Test Department, CN=west.testing.libreswan.org, E=user-west@testing.libreswan.org -> 002 | line 1: match=002 | match 002 beats previous best_match 000 match=0x55cbd9bd3b58 (line=1) | concluding with best_match=002 best=0x55cbd9bd3b58 (lineno=1) "westnet-eastnet-ikev2" #2: Can't find the certificate or private key from the NSS CKA_ID | #2 spent 1.87 milliseconds in ikev2_calculate_rsa_hash() calling sign_hash_RSA() "westnet-eastnet-ikev2" #2: Failed to find our RSA key | ikev2_parent_inI2outR2_continue_tail returned STF_FATAL | #2 spent 3.14 milliseconds in processing: Responder: process IKE_AUTH request in ikev2_process_state_packet() | [RE]START processing: state #2 connection "westnet-eastnet-ikev2" from 192.1.2.45:500 (in complete_v2_state_transition() at ikev2.c:3379) | #2 complete_v2_state_transition() md.from_state=PARENT_R1 md.svm.state[from]=PARENT_R1 PARENT_R2->V2_IPSEC_R with status STF_FATAL | release_pending_whacks: state #2 has no whack fd | pstats #2 ikev2.ike deleted completed | #2 spent 2.83 milliseconds in total | [RE]START processing: state #2 connection "westnet-eastnet-ikev2" from 192.1.2.45:500 (in delete_state() at state.c:879) "westnet-eastnet-ikev2" #2: deleting state (STATE_PARENT_R2) aged 0.013s and sending notification | parent state #2: PARENT_R2(established IKE SA) => delete | #2 send IKEv2 delete notification for STATE_PARENT_R2 | Opening output PBS informational exchange delete request | **emit ISAKMP Message: | initiator cookie: | 27 ae 31 26 5e c6 79 93 | responder cookie: | d4 d8 78 73 8a b3 3b d6 | next payload type: ISAKMP_NEXT_NONE (0x0) | ISAKMP version: IKEv2 version 2.0 (rfc4306/rfc5996) (0x20) | exchange type: ISAKMP_v2_INFORMATIONAL (0x25) | flags: none (0x0) | Message ID: 0 (0x0) | next payload chain: saving message location 'ISAKMP Message'.'next payload type' | ***emit IKEv2 Encryption Payload: | next payload type: ISAKMP_NEXT_v2NONE (0x0) | flags: none (0x0) | next payload chain: setting previous 'ISAKMP Message'.'next payload type' to current IKEv2 Encryption Payload (46:ISAKMP_NEXT_v2SK) | next payload chain: saving location 'IKEv2 Encryption Payload'.'next payload type' in 'informational exchange delete request' | emitting 8 zero bytes of IV into IKEv2 Encryption Payload | ****emit IKEv2 Delete Payload: | next payload type: ISAKMP_NEXT_v2NONE (0x0) | flags: none (0x0) | protocol ID: PROTO_v2_IKE (0x1) | SPI size: 0 (0x0) | number of SPIs: 0 (0x0) | next payload chain: setting previous 'IKEv2 Encryption Payload'.'next payload type' to current IKEv2 Delete Payload (42:ISAKMP_NEXT_v2D) | next payload chain: saving location 'IKEv2 Delete Payload'.'next payload type' in 'informational exchange delete request' | emitting length of IKEv2 Delete Payload: 8 | adding 1 bytes of padding (including 1 byte padding-length) | emitting 1 0x00 repeated bytes of padding and length into IKEv2 Encryption Payload | emitting 16 zero bytes of length of truncated HMAC/KEY into IKEv2 Encryption Payload | emitting length of IKEv2 Encryption Payload: 37 | emitting length of ISAKMP Message: 65 | sending 65 bytes for delete notification through eth1 from 192.1.2.23:500 to 192.1.2.45:500 (using #2) | 27 ae 31 26 5e c6 79 93 d4 d8 78 73 8a b3 3b d6 | 2e 20 25 00 00 00 00 00 00 00 00 41 2a 00 00 25 | d9 d2 a8 88 52 c6 a7 85 b7 7c 63 2e de 2e 7e ef | 87 0c cb bf 93 be 74 83 70 45 94 6e 99 57 9e 0f | 5e | Message ID: IKE #2 sender #2 in send_delete record 'n' sending delete request so forcing IKE nextuse=0->1 and sender msgid=0->0 | Message ID: IKE #2 sender #2 in send_delete hacking around record ' send | Message ID: sent #2 request 0; ike: initiator.sent=-1->0 initiator.recv=-1 responder.sent=0 responder.recv=0 wip.initiator=-1->0 wip.responder=1 | state #2 requesting EVENT_SA_REKEY to be deleted | libevent_free: release ptr-libevent@0x55cbd9d059f8 | free_event_entry: release EVENT_SA_REKEY-pe@0x7f4b40002b78 | State DB: IKEv2 state not found (flush_incomplete_children) | in connection_discard for connection westnet-eastnet-ikev2 | State DB: deleting IKEv2 state #2 in PARENT_R2 | parent state #2: PARENT_R2(established IKE SA) => UNDEFINED(ignore) | unreference key: 0x55cbd9d01b88 C=CA, ST=Ontario, L=Toronto, O=Libreswan, OU=Test Department, CN=west.testing.libreswan.org, E=user-west@testing.libreswan.org cnt 2-- | stop processing: state #2 from 192.1.2.45:500 (in delete_state() at state.c:1143) | unreference key: 0x55cbd9d01b88 C=CA, ST=Ontario, L=Toronto, O=Libreswan, OU=Test Department, CN=west.testing.libreswan.org, E=user-west@testing.libreswan.org cnt 1-- | unreference key: 0x55cbd9d087f8 user-west@testing.libreswan.org cnt 1-- | unreference key: 0x55cbd9d0a3c8 @west.testing.libreswan.org cnt 1-- | unreference key: 0x55cbd9d09258 west@testing.libreswan.org cnt 1-- | unreference key: 0x55cbd9d0d9d8 192.1.2.45 cnt 1-- | resume sending helper answer for #2 suppresed complete_v2_state_transition() | in statetime_stop() and could not find #2 | processing: STOP state #0 (in resume_handler() at server.c:833) | libevent_free: release ptr-libevent@0x7f4b34000f48 | spent 0.0109 milliseconds in comm_handle_cb() calling check_incoming_msg_errqueue() | *received 539 bytes from 192.1.2.45:500 on eth1 (192.1.2.23:500) | 27 ae 31 26 5e c6 79 93 d4 d8 78 73 8a b3 3b d6 | 35 20 23 08 00 00 00 01 00 00 02 1b 23 00 01 ff | 00 01 00 05 93 7f 0b 7d 21 f8 49 21 6f 45 d2 ea | 37 ff 7d 19 91 e5 d3 3d 84 52 70 02 c0 b7 c8 9b | 6f 95 33 c9 12 09 0b e1 46 6b 95 81 b3 b0 87 09 | 44 87 22 6b 5f dd b4 62 99 9b ae 4a 92 ed 93 6a | 94 ec 9d e5 b7 33 52 71 5f 52 3f be f4 d3 2b 33 | 0f 80 e9 06 74 e6 f2 50 ad 1f bc b3 0c 08 09 c5 | 1c d7 8f 48 e6 74 af 8c fc 77 28 21 44 bc ee 6a | 30 5d fe 22 e0 9c f3 05 24 04 2a 8a 3a 16 f3 70 | 4d 33 05 1a d9 9a 27 26 06 46 48 e6 1f c9 2b 9f | 8f 0b 85 9a 71 d4 4e 13 ea 83 37 60 e3 72 ec d7 | 71 19 da 6a 04 eb d6 92 44 09 c8 25 e3 04 1d f9 | 6c 42 b3 6c 34 f6 f3 32 94 2c 2b 4f 6b 05 5f 1a | 3d 3d 72 78 c6 e4 14 71 c4 4c f5 6d fa 2e a1 26 | c6 97 b0 9c 2e 9c 12 6d cb fd 5b 30 51 bd 6b 72 | 60 5b 1b 8b 2a da 92 81 80 1c af 66 66 be bc ac | ee 17 a0 70 99 6e d7 ef 2d 71 49 1f 33 d1 6c 58 | fd a2 93 8d a6 0c 42 a5 ee 65 05 89 42 62 54 d4 | fb 21 48 3d af 7f a2 2c 83 bb 4d 77 ed 75 40 81 | 00 d0 f0 74 b8 bf 9c 6a 70 36 6f e5 9a d0 d6 fa | 5e 7e b0 3c 59 1d 51 d7 6a 21 d5 44 e8 73 72 d5 | 50 4d 65 dd fc 86 ae 60 ed b1 34 e0 1b 31 04 4c | 40 51 b6 58 b3 c4 61 47 23 06 a3 8e 11 82 03 d5 | ae 6c 65 c0 78 07 3a 5e c1 18 37 77 e6 9a 75 1d | 78 0c ec 03 38 4f 08 19 82 ea fb 89 d6 85 f5 3e | 1a c5 49 72 ca 69 6d 53 e4 69 03 eb 2b 20 8c ca | 03 fd 70 2c 04 68 73 8c b4 f8 4e 06 36 e1 cc 5d | b6 01 e2 cf fe a0 1d 9a 20 f7 47 ab b1 3f 35 47 | 21 9d 12 9c 14 0e 89 07 a0 85 96 fb 0d 0f d4 04 | fe 2e 7a 6a 34 79 44 2f 5a 4c 6f 13 66 0a 62 c5 | 78 d0 18 ce 7c f4 3a 77 6b c5 10 8b d0 2d f5 c9 | 3e 6c 91 81 7e 7a 2c fd a4 d9 71 87 35 9c cb c1 | 94 1d eb b0 71 a2 57 b6 dc 31 61 | start processing: from 192.1.2.45:500 (in process_md() at demux.c:378) | **parse ISAKMP Message: | initiator cookie: | 27 ae 31 26 5e c6 79 93 | responder cookie: | d4 d8 78 73 8a b3 3b d6 | next payload type: ISAKMP_NEXT_v2SKF (0x35) | ISAKMP version: IKEv2 version 2.0 (rfc4306/rfc5996) (0x20) | exchange type: ISAKMP_v2_IKE_AUTH (0x23) | flags: ISAKMP_FLAG_v2_IKE_INIT (0x8) | Message ID: 1 (0x1) | length: 539 (0x21b) | processing version=2.0 packet with exchange type=ISAKMP_v2_IKE_AUTH (35) | I am the IKE SA Original Responder receiving an IKEv2 IKE_AUTH request | State DB: IKEv2 state not found (find_v2_ike_sa) packet from 192.1.2.45:500: IKE_AUTH message request has no corresponding IKE SA | stop processing: from 192.1.2.45:500 (in process_md() at demux.c:380) | processing: STOP state #0 (in process_md() at demux.c:382) | processing: STOP connection NULL (in process_md() at demux.c:383) | spent 0.404 milliseconds in comm_handle_cb() reading and processing packet | spent 0.00566 milliseconds in comm_handle_cb() calling check_incoming_msg_errqueue() | *received 539 bytes from 192.1.2.45:500 on eth1 (192.1.2.23:500) | 27 ae 31 26 5e c6 79 93 d4 d8 78 73 8a b3 3b d6 | 35 20 23 08 00 00 00 01 00 00 02 1b 00 00 01 ff | 00 02 00 05 59 df ed f0 61 da 0c cf 62 af 31 2a | e4 f9 e5 f9 78 08 d8 7a ac 05 a9 f5 7b de 09 45 | fe 8c a0 4d e1 19 af ef 69 b0 1e 6b 09 a6 ac e3 | 29 ec 89 50 e3 e2 f2 ad 4c 33 a7 e4 20 d7 1c 1a | 26 d6 d7 3e 3c ba 50 16 45 df 05 f8 e6 1a d3 02 | 23 08 7d 7b 38 b9 ee 78 0a 6e 0a bc 21 50 47 65 | c2 b4 7b 56 72 3b 3a 60 ce 9d 14 ee 39 86 2b 23 | df 5e 6c 31 b9 ef 00 70 f1 32 71 59 07 0d 1c 11 | 09 b5 c0 d1 3d 99 a9 ae b9 a6 dd 04 d9 09 f7 96 | b7 c7 ef fb b6 f1 25 e1 b4 e2 94 0c 13 33 9a 2d | 55 5f c9 ee 94 d5 f2 6d fb 37 b7 79 68 bb fb 69 | d3 a6 83 4f 61 0f 31 d1 eb ff 96 5b 71 fe 26 6f | e1 15 f7 5c 1d 4e 70 e7 4d 93 d4 07 4a 59 84 fb | 83 ce 63 fa 50 d7 94 57 69 32 2b da 75 d3 38 d6 | 77 d1 46 cc f5 45 af 2e be cd 16 15 30 1a 9e 1e | c9 d7 d6 51 85 47 60 80 2b d8 84 36 e7 11 7e 0d | 47 fe 10 7e c3 a2 a7 a6 96 d4 dd 57 a2 39 43 ea | 45 ac 84 3a 82 0f 6a b0 20 ad b6 59 36 9f 99 ad | e0 67 d8 15 b4 c2 a7 5c b5 33 e0 a6 c6 43 4c 5c | f5 b8 88 b2 64 d1 f3 2f 15 b0 31 76 6b df e5 55 | 89 fa 48 f6 79 a3 50 e1 6c 69 65 c8 47 c5 dd 56 | b5 f7 36 bc a8 8e cc 33 f9 c5 47 5d 19 5f 03 a5 | b9 3c dd 93 af 0d d2 2a e7 a4 67 db d1 a8 f5 82 | 87 b1 d2 74 6c a1 eb cb 52 5e 4d 40 eb 4e 0c 1d | b9 b3 19 ba e6 45 4b 6a 60 75 df 29 4d 2f 4d a0 | 30 6b e5 f2 de d6 ee a2 0f a1 43 62 5d 03 21 7c | 50 32 be 0e dc e3 13 3d 67 73 7f 65 5c fa 7b b8 | 97 1d 87 de 37 7f 0f b1 e2 bd 1b 33 f6 d8 83 3b | 60 3b 42 30 0c 89 a4 db a9 5b 2e 7a 53 60 68 fc | f0 79 38 b0 28 f4 a1 9a 47 48 7e f1 34 4d 2b 2b | 28 10 b2 26 ca 90 a9 0a e2 d7 73 50 bb 56 12 28 | 79 c6 e7 ea c5 d0 12 79 f2 d2 98 | start processing: from 192.1.2.45:500 (in process_md() at demux.c:378) | **parse ISAKMP Message: | initiator cookie: | 27 ae 31 26 5e c6 79 93 | responder cookie: | d4 d8 78 73 8a b3 3b d6 | next payload type: ISAKMP_NEXT_v2SKF (0x35) | ISAKMP version: IKEv2 version 2.0 (rfc4306/rfc5996) (0x20) | exchange type: ISAKMP_v2_IKE_AUTH (0x23) | flags: ISAKMP_FLAG_v2_IKE_INIT (0x8) | Message ID: 1 (0x1) | length: 539 (0x21b) | processing version=2.0 packet with exchange type=ISAKMP_v2_IKE_AUTH (35) | I am the IKE SA Original Responder receiving an IKEv2 IKE_AUTH request | State DB: IKEv2 state not found (find_v2_ike_sa) packet from 192.1.2.45:500: IKE_AUTH message request has no corresponding IKE SA | stop processing: from 192.1.2.45:500 (in process_md() at demux.c:380) | processing: STOP state #0 (in process_md() at demux.c:382) | processing: STOP connection NULL (in process_md() at demux.c:383) | spent 0.335 milliseconds in comm_handle_cb() reading and processing packet | spent 0.00498 milliseconds in comm_handle_cb() calling check_incoming_msg_errqueue() | *received 539 bytes from 192.1.2.45:500 on eth1 (192.1.2.23:500) | 27 ae 31 26 5e c6 79 93 d4 d8 78 73 8a b3 3b d6 | 35 20 23 08 00 00 00 01 00 00 02 1b 00 00 01 ff | 00 03 00 05 e3 cb 6d 2a 20 a0 78 06 91 4f 44 08 | 98 d3 70 32 51 e8 94 b9 93 8d 6c d5 7d 51 de f0 | 94 9d 69 63 da ac b9 f4 5b 91 e6 8d 64 5d 3c ad | e6 c6 78 bb b2 8f 7d 55 fb e4 76 d4 a9 f4 81 37 | 11 7b fc 1b 2d 6f de 8a 3b c2 f9 33 f1 f4 1c b8 | ae 04 e3 15 7f 2f ac 16 c5 91 70 2b 60 d3 04 7d | 47 77 4f 55 6c a5 2c 95 ff 1c b9 be 75 4a 14 5e | 84 fa 66 ea 84 41 14 ae b0 da 7a b3 62 9e 34 54 | c0 23 3a dc ba 77 3f 10 20 7e 13 23 fd 2d d0 05 | f0 fd 06 f0 9d ec a5 c6 7f 39 23 89 60 91 ef 2e | 53 82 eb 21 88 a9 b1 b3 c7 36 ed 97 5d ac 87 44 | 4d b2 59 dc 21 20 81 f6 e9 78 d8 b0 4e 5c 20 d0 | c1 51 ea 9e 6f 5d fd 2b a9 60 58 f9 60 29 bb bc | 09 11 2f 31 56 d9 d1 1f 92 9e a2 6f ea 68 98 61 | 89 1f e0 d1 93 43 f7 d8 3b 90 b2 3b f3 66 ef 0b | f8 0a 5a c8 52 20 cd b6 8b 97 e8 16 fb 04 98 45 | 13 e7 0d e9 05 37 d9 93 31 e1 04 ad 53 b3 e1 cb | c0 63 95 b8 91 01 e3 a0 f2 e3 29 56 b9 ab c6 72 | 46 3c 43 f7 74 35 6c 82 b8 ee 51 24 93 d9 9e 0c | 79 de 0b a1 3b ee 3c c7 bc d5 bc c2 1a 4a ce d4 | 78 f7 a5 83 44 e2 77 fc d6 b5 7c 32 4d 0c d7 11 | 47 c7 fd 80 f9 0a b7 6d b8 8c ca f0 c9 d7 e6 55 | f9 61 2c d8 5b 85 ac 40 ff b3 f8 1f 86 93 88 8e | 54 c0 96 ab 17 68 be b6 ad cc 2b d1 77 47 8a 32 | 6a 74 56 7c 62 dc e8 8d 61 0e c8 4b dc 50 a9 59 | fb ac 55 73 e4 e1 62 85 a0 d2 f8 40 25 27 9f 52 | 29 3a 60 4b ff b2 88 b2 32 02 8e f9 c4 ff 76 c1 | 46 7f 5e b6 6f 64 a3 38 e1 99 0c 83 e0 24 f9 9e | 6c 9c 48 65 56 11 47 73 b1 50 a1 b4 94 6d 74 84 | 71 02 41 70 25 f3 eb 2d f7 66 41 4c 4c e7 c8 c7 | 22 a0 6f 09 66 e2 f0 38 16 e1 0d 82 ec 0d 78 5d | a5 22 69 93 e8 1d 20 6e a8 95 47 | start processing: from 192.1.2.45:500 (in process_md() at demux.c:378) | **parse ISAKMP Message: | initiator cookie: | 27 ae 31 26 5e c6 79 93 | responder cookie: | d4 d8 78 73 8a b3 3b d6 | next payload type: ISAKMP_NEXT_v2SKF (0x35) | ISAKMP version: IKEv2 version 2.0 (rfc4306/rfc5996) (0x20) | exchange type: ISAKMP_v2_IKE_AUTH (0x23) | flags: ISAKMP_FLAG_v2_IKE_INIT (0x8) | Message ID: 1 (0x1) | length: 539 (0x21b) | processing version=2.0 packet with exchange type=ISAKMP_v2_IKE_AUTH (35) | I am the IKE SA Original Responder receiving an IKEv2 IKE_AUTH request | State DB: IKEv2 state not found (find_v2_ike_sa) packet from 192.1.2.45:500: IKE_AUTH message request has no corresponding IKE SA | stop processing: from 192.1.2.45:500 (in process_md() at demux.c:380) | processing: STOP state #0 (in process_md() at demux.c:382) | processing: STOP connection NULL (in process_md() at demux.c:383) | spent 0.331 milliseconds in comm_handle_cb() reading and processing packet | spent 0.00502 milliseconds in comm_handle_cb() calling check_incoming_msg_errqueue() | *received 539 bytes from 192.1.2.45:500 on eth1 (192.1.2.23:500) | 27 ae 31 26 5e c6 79 93 d4 d8 78 73 8a b3 3b d6 | 35 20 23 08 00 00 00 01 00 00 02 1b 00 00 01 ff | 00 04 00 05 e4 6f 03 b2 8f fc 07 8b 98 56 18 8b | b5 d8 85 6c 87 82 af 96 6f 6b af a0 3a 5d 9b 7f | 95 02 e7 4f 82 fc 9a f5 30 d4 3c 89 70 f4 5a 18 | a5 de 9d bc 3c 6d 43 74 51 e0 1a 94 27 34 85 fb | 23 33 db 79 67 03 fb fc 3c ef 7b 32 b4 ef 2e 5d | 95 da 8f c3 70 7c d4 9f fd d3 ae 1e 05 dd 14 c9 | 43 e7 a0 50 e5 8b 6a ea 18 52 37 b0 c8 96 52 7d | a3 f1 d4 aa 6d 6a 8a 52 96 c8 76 d1 7a 58 f8 b4 | a9 67 33 d1 85 3b e6 62 9d 58 9f a8 31 11 d0 84 | c4 30 28 58 56 8b 23 fc 34 f9 f0 39 c6 03 79 83 | dc 3b b7 a4 77 c4 e8 02 fa 77 59 21 05 41 36 0d | cc 0d bf 5c 3e 12 4a f3 1f 9e f3 77 70 30 b7 41 | 5b fb fc c5 e9 25 aa a1 d2 d4 23 fa 4a 92 ab 65 | 33 15 fd 58 25 e8 c0 a6 fa ed 46 3b e8 95 ac da | 64 89 27 ec a6 20 ba 4f 77 86 79 14 2a e6 de 17 | 41 4e 00 fd 2b 6c 6a 96 ed f0 18 9b 1a db ea 4a | a4 79 56 7d 96 e9 5f e9 42 a3 3c 06 07 a6 fe c3 | 3d e7 62 5b dc 68 a8 1a 2d 4b 82 d2 f8 58 44 74 | cc 40 a7 4b 01 2f 4d ff b2 53 60 a8 97 38 de 59 | 75 99 cb 71 cb 4f 60 64 b3 a2 81 99 61 80 6d b4 | cf 24 21 be 53 52 ae 9c a0 14 ef 01 8f dc 9b 10 | 63 78 fa 3d 4f 07 fb 6c 7e 33 cf cf 32 ae bc 5c | c1 19 0a 22 95 c0 bf b3 67 9e 82 7b e1 68 49 41 | 64 30 1f 66 1c 02 c1 d4 70 05 17 fe 92 2b f0 5f | 6c 66 9b 41 b1 2b 77 3f cc 86 8b 08 6d 74 4b fa | cf 07 6b 84 0a a1 5a 8a 5c 4c aa b7 3c 2e f7 56 | f7 61 91 7e c8 60 5d 8b 39 dd 32 ca 53 dd 06 a1 | 93 27 71 cc 83 d0 4f 51 c1 f2 17 f5 25 41 f9 e0 | 1a 29 c6 c3 39 52 7e 68 24 d0 77 9c e4 85 02 82 | 62 eb 80 cf 45 57 9c da 2f 67 20 5c db 29 fd f8 | 53 06 1d cf 31 7f 1a 0f 7d 65 4d ca d8 be 15 9b | 61 09 de ca 67 8b 1d 31 38 f1 da | start processing: from 192.1.2.45:500 (in process_md() at demux.c:378) | **parse ISAKMP Message: | initiator cookie: | 27 ae 31 26 5e c6 79 93 | responder cookie: | d4 d8 78 73 8a b3 3b d6 | next payload type: ISAKMP_NEXT_v2SKF (0x35) | ISAKMP version: IKEv2 version 2.0 (rfc4306/rfc5996) (0x20) | exchange type: ISAKMP_v2_IKE_AUTH (0x23) | flags: ISAKMP_FLAG_v2_IKE_INIT (0x8) | Message ID: 1 (0x1) | length: 539 (0x21b) | processing version=2.0 packet with exchange type=ISAKMP_v2_IKE_AUTH (35) | I am the IKE SA Original Responder receiving an IKEv2 IKE_AUTH request | State DB: IKEv2 state not found (find_v2_ike_sa) packet from 192.1.2.45:500: IKE_AUTH message request has no corresponding IKE SA | stop processing: from 192.1.2.45:500 (in process_md() at demux.c:380) | processing: STOP state #0 (in process_md() at demux.c:382) | processing: STOP connection NULL (in process_md() at demux.c:383) | spent 0.328 milliseconds in comm_handle_cb() reading and processing packet | spent 0.00475 milliseconds in comm_handle_cb() calling check_incoming_msg_errqueue() | *received 221 bytes from 192.1.2.45:500 on eth1 (192.1.2.23:500) | 27 ae 31 26 5e c6 79 93 d4 d8 78 73 8a b3 3b d6 | 35 20 23 08 00 00 00 01 00 00 00 dd 00 00 00 c1 | 00 05 00 05 2c f4 ce f4 31 44 0b 50 48 02 68 54 | a3 b8 39 2b 35 e0 93 72 2c 9b e3 66 5c 58 ef 19 | 77 d6 76 c9 cb 06 8e 72 e0 ea e7 d0 1e 16 c2 34 | 0d 7e 7d e7 0c df b8 57 75 f3 d9 eb 9e 92 3f 9f | 0a 3b 58 40 f8 fd 38 10 6a 4c 6b cd 5c c4 13 15 | 85 67 f4 13 20 e5 f7 52 d0 7d 78 58 50 f9 17 78 | bf 15 9d d3 34 3f 77 a2 b9 ed a0 53 8c ea b3 ef | 1d 1c 97 9f 0f 89 99 04 cf b4 21 a8 d6 24 80 ab | e1 dd 70 f8 f4 35 ee 8c 51 97 eb 47 13 0a 73 84 | 23 67 ff 0f 6c 4f 6b 1b af bb a8 09 c8 61 8e e7 | 9f 49 64 e6 fa ef 66 5d a7 9d 75 d6 47 04 31 5f | 01 02 94 0e 2c 2b ac ff 3a bc 14 68 31 | start processing: from 192.1.2.45:500 (in process_md() at demux.c:378) | **parse ISAKMP Message: | initiator cookie: | 27 ae 31 26 5e c6 79 93 | responder cookie: | d4 d8 78 73 8a b3 3b d6 | next payload type: ISAKMP_NEXT_v2SKF (0x35) | ISAKMP version: IKEv2 version 2.0 (rfc4306/rfc5996) (0x20) | exchange type: ISAKMP_v2_IKE_AUTH (0x23) | flags: ISAKMP_FLAG_v2_IKE_INIT (0x8) | Message ID: 1 (0x1) | length: 221 (0xdd) | processing version=2.0 packet with exchange type=ISAKMP_v2_IKE_AUTH (35) | I am the IKE SA Original Responder receiving an IKEv2 IKE_AUTH request | State DB: IKEv2 state not found (find_v2_ike_sa) packet from 192.1.2.45:500: IKE_AUTH message request has no corresponding IKE SA | stop processing: from 192.1.2.45:500 (in process_md() at demux.c:380) | processing: STOP state #0 (in process_md() at demux.c:382) | processing: STOP connection NULL (in process_md() at demux.c:383) | spent 0.22 milliseconds in comm_handle_cb() reading and processing packet | spent 0.011 milliseconds in comm_handle_cb() calling check_incoming_msg_errqueue() | *received 539 bytes from 192.1.2.45:500 on eth1 (192.1.2.23:500) | 27 ae 31 26 5e c6 79 93 d4 d8 78 73 8a b3 3b d6 | 35 20 23 08 00 00 00 01 00 00 02 1b 23 00 01 ff | 00 01 00 05 93 7f 0b 7d 21 f8 49 21 6f 45 d2 ea | 37 ff 7d 19 91 e5 d3 3d 84 52 70 02 c0 b7 c8 9b | 6f 95 33 c9 12 09 0b e1 46 6b 95 81 b3 b0 87 09 | 44 87 22 6b 5f dd b4 62 99 9b ae 4a 92 ed 93 6a | 94 ec 9d e5 b7 33 52 71 5f 52 3f be f4 d3 2b 33 | 0f 80 e9 06 74 e6 f2 50 ad 1f bc b3 0c 08 09 c5 | 1c d7 8f 48 e6 74 af 8c fc 77 28 21 44 bc ee 6a | 30 5d fe 22 e0 9c f3 05 24 04 2a 8a 3a 16 f3 70 | 4d 33 05 1a d9 9a 27 26 06 46 48 e6 1f c9 2b 9f | 8f 0b 85 9a 71 d4 4e 13 ea 83 37 60 e3 72 ec d7 | 71 19 da 6a 04 eb d6 92 44 09 c8 25 e3 04 1d f9 | 6c 42 b3 6c 34 f6 f3 32 94 2c 2b 4f 6b 05 5f 1a | 3d 3d 72 78 c6 e4 14 71 c4 4c f5 6d fa 2e a1 26 | c6 97 b0 9c 2e 9c 12 6d cb fd 5b 30 51 bd 6b 72 | 60 5b 1b 8b 2a da 92 81 80 1c af 66 66 be bc ac | ee 17 a0 70 99 6e d7 ef 2d 71 49 1f 33 d1 6c 58 | fd a2 93 8d a6 0c 42 a5 ee 65 05 89 42 62 54 d4 | fb 21 48 3d af 7f a2 2c 83 bb 4d 77 ed 75 40 81 | 00 d0 f0 74 b8 bf 9c 6a 70 36 6f e5 9a d0 d6 fa | 5e 7e b0 3c 59 1d 51 d7 6a 21 d5 44 e8 73 72 d5 | 50 4d 65 dd fc 86 ae 60 ed b1 34 e0 1b 31 04 4c | 40 51 b6 58 b3 c4 61 47 23 06 a3 8e 11 82 03 d5 | ae 6c 65 c0 78 07 3a 5e c1 18 37 77 e6 9a 75 1d | 78 0c ec 03 38 4f 08 19 82 ea fb 89 d6 85 f5 3e | 1a c5 49 72 ca 69 6d 53 e4 69 03 eb 2b 20 8c ca | 03 fd 70 2c 04 68 73 8c b4 f8 4e 06 36 e1 cc 5d | b6 01 e2 cf fe a0 1d 9a 20 f7 47 ab b1 3f 35 47 | 21 9d 12 9c 14 0e 89 07 a0 85 96 fb 0d 0f d4 04 | fe 2e 7a 6a 34 79 44 2f 5a 4c 6f 13 66 0a 62 c5 | 78 d0 18 ce 7c f4 3a 77 6b c5 10 8b d0 2d f5 c9 | 3e 6c 91 81 7e 7a 2c fd a4 d9 71 87 35 9c cb c1 | 94 1d eb b0 71 a2 57 b6 dc 31 61 | start processing: from 192.1.2.45:500 (in process_md() at demux.c:378) | **parse ISAKMP Message: | initiator cookie: | 27 ae 31 26 5e c6 79 93 | responder cookie: | d4 d8 78 73 8a b3 3b d6 | next payload type: ISAKMP_NEXT_v2SKF (0x35) | ISAKMP version: IKEv2 version 2.0 (rfc4306/rfc5996) (0x20) | exchange type: ISAKMP_v2_IKE_AUTH (0x23) | flags: ISAKMP_FLAG_v2_IKE_INIT (0x8) | Message ID: 1 (0x1) | length: 539 (0x21b) | processing version=2.0 packet with exchange type=ISAKMP_v2_IKE_AUTH (35) | I am the IKE SA Original Responder receiving an IKEv2 IKE_AUTH request | State DB: IKEv2 state not found (find_v2_ike_sa) packet from 192.1.2.45:500: IKE_AUTH message request has no corresponding IKE SA | stop processing: from 192.1.2.45:500 (in process_md() at demux.c:380) | processing: STOP state #0 (in process_md() at demux.c:382) | processing: STOP connection NULL (in process_md() at demux.c:383) | spent 0.371 milliseconds in comm_handle_cb() reading and processing packet | spent 0.0052 milliseconds in comm_handle_cb() calling check_incoming_msg_errqueue() | *received 539 bytes from 192.1.2.45:500 on eth1 (192.1.2.23:500) | 27 ae 31 26 5e c6 79 93 d4 d8 78 73 8a b3 3b d6 | 35 20 23 08 00 00 00 01 00 00 02 1b 00 00 01 ff | 00 02 00 05 59 df ed f0 61 da 0c cf 62 af 31 2a | e4 f9 e5 f9 78 08 d8 7a ac 05 a9 f5 7b de 09 45 | fe 8c a0 4d e1 19 af ef 69 b0 1e 6b 09 a6 ac e3 | 29 ec 89 50 e3 e2 f2 ad 4c 33 a7 e4 20 d7 1c 1a | 26 d6 d7 3e 3c ba 50 16 45 df 05 f8 e6 1a d3 02 | 23 08 7d 7b 38 b9 ee 78 0a 6e 0a bc 21 50 47 65 | c2 b4 7b 56 72 3b 3a 60 ce 9d 14 ee 39 86 2b 23 | df 5e 6c 31 b9 ef 00 70 f1 32 71 59 07 0d 1c 11 | 09 b5 c0 d1 3d 99 a9 ae b9 a6 dd 04 d9 09 f7 96 | b7 c7 ef fb b6 f1 25 e1 b4 e2 94 0c 13 33 9a 2d | 55 5f c9 ee 94 d5 f2 6d fb 37 b7 79 68 bb fb 69 | d3 a6 83 4f 61 0f 31 d1 eb ff 96 5b 71 fe 26 6f | e1 15 f7 5c 1d 4e 70 e7 4d 93 d4 07 4a 59 84 fb | 83 ce 63 fa 50 d7 94 57 69 32 2b da 75 d3 38 d6 | 77 d1 46 cc f5 45 af 2e be cd 16 15 30 1a 9e 1e | c9 d7 d6 51 85 47 60 80 2b d8 84 36 e7 11 7e 0d | 47 fe 10 7e c3 a2 a7 a6 96 d4 dd 57 a2 39 43 ea | 45 ac 84 3a 82 0f 6a b0 20 ad b6 59 36 9f 99 ad | e0 67 d8 15 b4 c2 a7 5c b5 33 e0 a6 c6 43 4c 5c | f5 b8 88 b2 64 d1 f3 2f 15 b0 31 76 6b df e5 55 | 89 fa 48 f6 79 a3 50 e1 6c 69 65 c8 47 c5 dd 56 | b5 f7 36 bc a8 8e cc 33 f9 c5 47 5d 19 5f 03 a5 | b9 3c dd 93 af 0d d2 2a e7 a4 67 db d1 a8 f5 82 | 87 b1 d2 74 6c a1 eb cb 52 5e 4d 40 eb 4e 0c 1d | b9 b3 19 ba e6 45 4b 6a 60 75 df 29 4d 2f 4d a0 | 30 6b e5 f2 de d6 ee a2 0f a1 43 62 5d 03 21 7c | 50 32 be 0e dc e3 13 3d 67 73 7f 65 5c fa 7b b8 | 97 1d 87 de 37 7f 0f b1 e2 bd 1b 33 f6 d8 83 3b | 60 3b 42 30 0c 89 a4 db a9 5b 2e 7a 53 60 68 fc | f0 79 38 b0 28 f4 a1 9a 47 48 7e f1 34 4d 2b 2b | 28 10 b2 26 ca 90 a9 0a e2 d7 73 50 bb 56 12 28 | 79 c6 e7 ea c5 d0 12 79 f2 d2 98 | start processing: from 192.1.2.45:500 (in process_md() at demux.c:378) | **parse ISAKMP Message: | initiator cookie: | 27 ae 31 26 5e c6 79 93 | responder cookie: | d4 d8 78 73 8a b3 3b d6 | next payload type: ISAKMP_NEXT_v2SKF (0x35) | ISAKMP version: IKEv2 version 2.0 (rfc4306/rfc5996) (0x20) | exchange type: ISAKMP_v2_IKE_AUTH (0x23) | flags: ISAKMP_FLAG_v2_IKE_INIT (0x8) | Message ID: 1 (0x1) | length: 539 (0x21b) | processing version=2.0 packet with exchange type=ISAKMP_v2_IKE_AUTH (35) | I am the IKE SA Original Responder receiving an IKEv2 IKE_AUTH request | State DB: IKEv2 state not found (find_v2_ike_sa) packet from 192.1.2.45:500: IKE_AUTH message request has no corresponding IKE SA | stop processing: from 192.1.2.45:500 (in process_md() at demux.c:380) | processing: STOP state #0 (in process_md() at demux.c:382) | processing: STOP connection NULL (in process_md() at demux.c:383) | spent 0.341 milliseconds in comm_handle_cb() reading and processing packet | spent 0.0047 milliseconds in comm_handle_cb() calling check_incoming_msg_errqueue() | *received 539 bytes from 192.1.2.45:500 on eth1 (192.1.2.23:500) | 27 ae 31 26 5e c6 79 93 d4 d8 78 73 8a b3 3b d6 | 35 20 23 08 00 00 00 01 00 00 02 1b 00 00 01 ff | 00 03 00 05 e3 cb 6d 2a 20 a0 78 06 91 4f 44 08 | 98 d3 70 32 51 e8 94 b9 93 8d 6c d5 7d 51 de f0 | 94 9d 69 63 da ac b9 f4 5b 91 e6 8d 64 5d 3c ad | e6 c6 78 bb b2 8f 7d 55 fb e4 76 d4 a9 f4 81 37 | 11 7b fc 1b 2d 6f de 8a 3b c2 f9 33 f1 f4 1c b8 | ae 04 e3 15 7f 2f ac 16 c5 91 70 2b 60 d3 04 7d | 47 77 4f 55 6c a5 2c 95 ff 1c b9 be 75 4a 14 5e | 84 fa 66 ea 84 41 14 ae b0 da 7a b3 62 9e 34 54 | c0 23 3a dc ba 77 3f 10 20 7e 13 23 fd 2d d0 05 | f0 fd 06 f0 9d ec a5 c6 7f 39 23 89 60 91 ef 2e | 53 82 eb 21 88 a9 b1 b3 c7 36 ed 97 5d ac 87 44 | 4d b2 59 dc 21 20 81 f6 e9 78 d8 b0 4e 5c 20 d0 | c1 51 ea 9e 6f 5d fd 2b a9 60 58 f9 60 29 bb bc | 09 11 2f 31 56 d9 d1 1f 92 9e a2 6f ea 68 98 61 | 89 1f e0 d1 93 43 f7 d8 3b 90 b2 3b f3 66 ef 0b | f8 0a 5a c8 52 20 cd b6 8b 97 e8 16 fb 04 98 45 | 13 e7 0d e9 05 37 d9 93 31 e1 04 ad 53 b3 e1 cb | c0 63 95 b8 91 01 e3 a0 f2 e3 29 56 b9 ab c6 72 | 46 3c 43 f7 74 35 6c 82 b8 ee 51 24 93 d9 9e 0c | 79 de 0b a1 3b ee 3c c7 bc d5 bc c2 1a 4a ce d4 | 78 f7 a5 83 44 e2 77 fc d6 b5 7c 32 4d 0c d7 11 | 47 c7 fd 80 f9 0a b7 6d b8 8c ca f0 c9 d7 e6 55 | f9 61 2c d8 5b 85 ac 40 ff b3 f8 1f 86 93 88 8e | 54 c0 96 ab 17 68 be b6 ad cc 2b d1 77 47 8a 32 | 6a 74 56 7c 62 dc e8 8d 61 0e c8 4b dc 50 a9 59 | fb ac 55 73 e4 e1 62 85 a0 d2 f8 40 25 27 9f 52 | 29 3a 60 4b ff b2 88 b2 32 02 8e f9 c4 ff 76 c1 | 46 7f 5e b6 6f 64 a3 38 e1 99 0c 83 e0 24 f9 9e | 6c 9c 48 65 56 11 47 73 b1 50 a1 b4 94 6d 74 84 | 71 02 41 70 25 f3 eb 2d f7 66 41 4c 4c e7 c8 c7 | 22 a0 6f 09 66 e2 f0 38 16 e1 0d 82 ec 0d 78 5d | a5 22 69 93 e8 1d 20 6e a8 95 47 | start processing: from 192.1.2.45:500 (in process_md() at demux.c:378) | **parse ISAKMP Message: | initiator cookie: | 27 ae 31 26 5e c6 79 93 | responder cookie: | d4 d8 78 73 8a b3 3b d6 | next payload type: ISAKMP_NEXT_v2SKF (0x35) | ISAKMP version: IKEv2 version 2.0 (rfc4306/rfc5996) (0x20) | exchange type: ISAKMP_v2_IKE_AUTH (0x23) | flags: ISAKMP_FLAG_v2_IKE_INIT (0x8) | Message ID: 1 (0x1) | length: 539 (0x21b) | processing version=2.0 packet with exchange type=ISAKMP_v2_IKE_AUTH (35) | I am the IKE SA Original Responder receiving an IKEv2 IKE_AUTH request | State DB: IKEv2 state not found (find_v2_ike_sa) packet from 192.1.2.45:500: IKE_AUTH message request has no corresponding IKE SA | stop processing: from 192.1.2.45:500 (in process_md() at demux.c:380) | processing: STOP state #0 (in process_md() at demux.c:382) | processing: STOP connection NULL (in process_md() at demux.c:383) | spent 0.341 milliseconds in comm_handle_cb() reading and processing packet | spent 0.00524 milliseconds in comm_handle_cb() calling check_incoming_msg_errqueue() | *received 539 bytes from 192.1.2.45:500 on eth1 (192.1.2.23:500) | 27 ae 31 26 5e c6 79 93 d4 d8 78 73 8a b3 3b d6 | 35 20 23 08 00 00 00 01 00 00 02 1b 00 00 01 ff | 00 04 00 05 e4 6f 03 b2 8f fc 07 8b 98 56 18 8b | b5 d8 85 6c 87 82 af 96 6f 6b af a0 3a 5d 9b 7f | 95 02 e7 4f 82 fc 9a f5 30 d4 3c 89 70 f4 5a 18 | a5 de 9d bc 3c 6d 43 74 51 e0 1a 94 27 34 85 fb | 23 33 db 79 67 03 fb fc 3c ef 7b 32 b4 ef 2e 5d | 95 da 8f c3 70 7c d4 9f fd d3 ae 1e 05 dd 14 c9 | 43 e7 a0 50 e5 8b 6a ea 18 52 37 b0 c8 96 52 7d | a3 f1 d4 aa 6d 6a 8a 52 96 c8 76 d1 7a 58 f8 b4 | a9 67 33 d1 85 3b e6 62 9d 58 9f a8 31 11 d0 84 | c4 30 28 58 56 8b 23 fc 34 f9 f0 39 c6 03 79 83 | dc 3b b7 a4 77 c4 e8 02 fa 77 59 21 05 41 36 0d | cc 0d bf 5c 3e 12 4a f3 1f 9e f3 77 70 30 b7 41 | 5b fb fc c5 e9 25 aa a1 d2 d4 23 fa 4a 92 ab 65 | 33 15 fd 58 25 e8 c0 a6 fa ed 46 3b e8 95 ac da | 64 89 27 ec a6 20 ba 4f 77 86 79 14 2a e6 de 17 | 41 4e 00 fd 2b 6c 6a 96 ed f0 18 9b 1a db ea 4a | a4 79 56 7d 96 e9 5f e9 42 a3 3c 06 07 a6 fe c3 | 3d e7 62 5b dc 68 a8 1a 2d 4b 82 d2 f8 58 44 74 | cc 40 a7 4b 01 2f 4d ff b2 53 60 a8 97 38 de 59 | 75 99 cb 71 cb 4f 60 64 b3 a2 81 99 61 80 6d b4 | cf 24 21 be 53 52 ae 9c a0 14 ef 01 8f dc 9b 10 | 63 78 fa 3d 4f 07 fb 6c 7e 33 cf cf 32 ae bc 5c | c1 19 0a 22 95 c0 bf b3 67 9e 82 7b e1 68 49 41 | 64 30 1f 66 1c 02 c1 d4 70 05 17 fe 92 2b f0 5f | 6c 66 9b 41 b1 2b 77 3f cc 86 8b 08 6d 74 4b fa | cf 07 6b 84 0a a1 5a 8a 5c 4c aa b7 3c 2e f7 56 | f7 61 91 7e c8 60 5d 8b 39 dd 32 ca 53 dd 06 a1 | 93 27 71 cc 83 d0 4f 51 c1 f2 17 f5 25 41 f9 e0 | 1a 29 c6 c3 39 52 7e 68 24 d0 77 9c e4 85 02 82 | 62 eb 80 cf 45 57 9c da 2f 67 20 5c db 29 fd f8 | 53 06 1d cf 31 7f 1a 0f 7d 65 4d ca d8 be 15 9b | 61 09 de ca 67 8b 1d 31 38 f1 da | start processing: from 192.1.2.45:500 (in process_md() at demux.c:378) | **parse ISAKMP Message: | initiator cookie: | 27 ae 31 26 5e c6 79 93 | responder cookie: | d4 d8 78 73 8a b3 3b d6 | next payload type: ISAKMP_NEXT_v2SKF (0x35) | ISAKMP version: IKEv2 version 2.0 (rfc4306/rfc5996) (0x20) | exchange type: ISAKMP_v2_IKE_AUTH (0x23) | flags: ISAKMP_FLAG_v2_IKE_INIT (0x8) | Message ID: 1 (0x1) | length: 539 (0x21b) | processing version=2.0 packet with exchange type=ISAKMP_v2_IKE_AUTH (35) | I am the IKE SA Original Responder receiving an IKEv2 IKE_AUTH request | State DB: IKEv2 state not found (find_v2_ike_sa) packet from 192.1.2.45:500: IKE_AUTH message request has no corresponding IKE SA | stop processing: from 192.1.2.45:500 (in process_md() at demux.c:380) | processing: STOP state #0 (in process_md() at demux.c:382) | processing: STOP connection NULL (in process_md() at demux.c:383) | spent 0.323 milliseconds in comm_handle_cb() reading and processing packet | spent 0.00468 milliseconds in comm_handle_cb() calling check_incoming_msg_errqueue() | *received 221 bytes from 192.1.2.45:500 on eth1 (192.1.2.23:500) | 27 ae 31 26 5e c6 79 93 d4 d8 78 73 8a b3 3b d6 | 35 20 23 08 00 00 00 01 00 00 00 dd 00 00 00 c1 | 00 05 00 05 2c f4 ce f4 31 44 0b 50 48 02 68 54 | a3 b8 39 2b 35 e0 93 72 2c 9b e3 66 5c 58 ef 19 | 77 d6 76 c9 cb 06 8e 72 e0 ea e7 d0 1e 16 c2 34 | 0d 7e 7d e7 0c df b8 57 75 f3 d9 eb 9e 92 3f 9f | 0a 3b 58 40 f8 fd 38 10 6a 4c 6b cd 5c c4 13 15 | 85 67 f4 13 20 e5 f7 52 d0 7d 78 58 50 f9 17 78 | bf 15 9d d3 34 3f 77 a2 b9 ed a0 53 8c ea b3 ef | 1d 1c 97 9f 0f 89 99 04 cf b4 21 a8 d6 24 80 ab | e1 dd 70 f8 f4 35 ee 8c 51 97 eb 47 13 0a 73 84 | 23 67 ff 0f 6c 4f 6b 1b af bb a8 09 c8 61 8e e7 | 9f 49 64 e6 fa ef 66 5d a7 9d 75 d6 47 04 31 5f | 01 02 94 0e 2c 2b ac ff 3a bc 14 68 31 | start processing: from 192.1.2.45:500 (in process_md() at demux.c:378) | **parse ISAKMP Message: | initiator cookie: | 27 ae 31 26 5e c6 79 93 | responder cookie: | d4 d8 78 73 8a b3 3b d6 | next payload type: ISAKMP_NEXT_v2SKF (0x35) | ISAKMP version: IKEv2 version 2.0 (rfc4306/rfc5996) (0x20) | exchange type: ISAKMP_v2_IKE_AUTH (0x23) | flags: ISAKMP_FLAG_v2_IKE_INIT (0x8) | Message ID: 1 (0x1) | length: 221 (0xdd) | processing version=2.0 packet with exchange type=ISAKMP_v2_IKE_AUTH (35) | I am the IKE SA Original Responder receiving an IKEv2 IKE_AUTH request | State DB: IKEv2 state not found (find_v2_ike_sa) packet from 192.1.2.45:500: IKE_AUTH message request has no corresponding IKE SA | stop processing: from 192.1.2.45:500 (in process_md() at demux.c:380) | processing: STOP state #0 (in process_md() at demux.c:382) | processing: STOP connection NULL (in process_md() at demux.c:383) | spent 0.217 milliseconds in comm_handle_cb() reading and processing packet | spent 0.0108 milliseconds in comm_handle_cb() calling check_incoming_msg_errqueue() | *received 539 bytes from 192.1.2.45:500 on eth1 (192.1.2.23:500) | 27 ae 31 26 5e c6 79 93 d4 d8 78 73 8a b3 3b d6 | 35 20 23 08 00 00 00 01 00 00 02 1b 23 00 01 ff | 00 01 00 05 93 7f 0b 7d 21 f8 49 21 6f 45 d2 ea | 37 ff 7d 19 91 e5 d3 3d 84 52 70 02 c0 b7 c8 9b | 6f 95 33 c9 12 09 0b e1 46 6b 95 81 b3 b0 87 09 | 44 87 22 6b 5f dd b4 62 99 9b ae 4a 92 ed 93 6a | 94 ec 9d e5 b7 33 52 71 5f 52 3f be f4 d3 2b 33 | 0f 80 e9 06 74 e6 f2 50 ad 1f bc b3 0c 08 09 c5 | 1c d7 8f 48 e6 74 af 8c fc 77 28 21 44 bc ee 6a | 30 5d fe 22 e0 9c f3 05 24 04 2a 8a 3a 16 f3 70 | 4d 33 05 1a d9 9a 27 26 06 46 48 e6 1f c9 2b 9f | 8f 0b 85 9a 71 d4 4e 13 ea 83 37 60 e3 72 ec d7 | 71 19 da 6a 04 eb d6 92 44 09 c8 25 e3 04 1d f9 | 6c 42 b3 6c 34 f6 f3 32 94 2c 2b 4f 6b 05 5f 1a | 3d 3d 72 78 c6 e4 14 71 c4 4c f5 6d fa 2e a1 26 | c6 97 b0 9c 2e 9c 12 6d cb fd 5b 30 51 bd 6b 72 | 60 5b 1b 8b 2a da 92 81 80 1c af 66 66 be bc ac | ee 17 a0 70 99 6e d7 ef 2d 71 49 1f 33 d1 6c 58 | fd a2 93 8d a6 0c 42 a5 ee 65 05 89 42 62 54 d4 | fb 21 48 3d af 7f a2 2c 83 bb 4d 77 ed 75 40 81 | 00 d0 f0 74 b8 bf 9c 6a 70 36 6f e5 9a d0 d6 fa | 5e 7e b0 3c 59 1d 51 d7 6a 21 d5 44 e8 73 72 d5 | 50 4d 65 dd fc 86 ae 60 ed b1 34 e0 1b 31 04 4c | 40 51 b6 58 b3 c4 61 47 23 06 a3 8e 11 82 03 d5 | ae 6c 65 c0 78 07 3a 5e c1 18 37 77 e6 9a 75 1d | 78 0c ec 03 38 4f 08 19 82 ea fb 89 d6 85 f5 3e | 1a c5 49 72 ca 69 6d 53 e4 69 03 eb 2b 20 8c ca | 03 fd 70 2c 04 68 73 8c b4 f8 4e 06 36 e1 cc 5d | b6 01 e2 cf fe a0 1d 9a 20 f7 47 ab b1 3f 35 47 | 21 9d 12 9c 14 0e 89 07 a0 85 96 fb 0d 0f d4 04 | fe 2e 7a 6a 34 79 44 2f 5a 4c 6f 13 66 0a 62 c5 | 78 d0 18 ce 7c f4 3a 77 6b c5 10 8b d0 2d f5 c9 | 3e 6c 91 81 7e 7a 2c fd a4 d9 71 87 35 9c cb c1 | 94 1d eb b0 71 a2 57 b6 dc 31 61 | start processing: from 192.1.2.45:500 (in process_md() at demux.c:378) | **parse ISAKMP Message: | initiator cookie: | 27 ae 31 26 5e c6 79 93 | responder cookie: | d4 d8 78 73 8a b3 3b d6 | next payload type: ISAKMP_NEXT_v2SKF (0x35) | ISAKMP version: IKEv2 version 2.0 (rfc4306/rfc5996) (0x20) | exchange type: ISAKMP_v2_IKE_AUTH (0x23) | flags: ISAKMP_FLAG_v2_IKE_INIT (0x8) | Message ID: 1 (0x1) | length: 539 (0x21b) | processing version=2.0 packet with exchange type=ISAKMP_v2_IKE_AUTH (35) | I am the IKE SA Original Responder receiving an IKEv2 IKE_AUTH request | State DB: IKEv2 state not found (find_v2_ike_sa) packet from 192.1.2.45:500: IKE_AUTH message request has no corresponding IKE SA | stop processing: from 192.1.2.45:500 (in process_md() at demux.c:380) | processing: STOP state #0 (in process_md() at demux.c:382) | processing: STOP connection NULL (in process_md() at demux.c:383) | spent 0.432 milliseconds in comm_handle_cb() reading and processing packet | spent 0.00569 milliseconds in comm_handle_cb() calling check_incoming_msg_errqueue() | *received 539 bytes from 192.1.2.45:500 on eth1 (192.1.2.23:500) | 27 ae 31 26 5e c6 79 93 d4 d8 78 73 8a b3 3b d6 | 35 20 23 08 00 00 00 01 00 00 02 1b 00 00 01 ff | 00 02 00 05 59 df ed f0 61 da 0c cf 62 af 31 2a | e4 f9 e5 f9 78 08 d8 7a ac 05 a9 f5 7b de 09 45 | fe 8c a0 4d e1 19 af ef 69 b0 1e 6b 09 a6 ac e3 | 29 ec 89 50 e3 e2 f2 ad 4c 33 a7 e4 20 d7 1c 1a | 26 d6 d7 3e 3c ba 50 16 45 df 05 f8 e6 1a d3 02 | 23 08 7d 7b 38 b9 ee 78 0a 6e 0a bc 21 50 47 65 | c2 b4 7b 56 72 3b 3a 60 ce 9d 14 ee 39 86 2b 23 | df 5e 6c 31 b9 ef 00 70 f1 32 71 59 07 0d 1c 11 | 09 b5 c0 d1 3d 99 a9 ae b9 a6 dd 04 d9 09 f7 96 | b7 c7 ef fb b6 f1 25 e1 b4 e2 94 0c 13 33 9a 2d | 55 5f c9 ee 94 d5 f2 6d fb 37 b7 79 68 bb fb 69 | d3 a6 83 4f 61 0f 31 d1 eb ff 96 5b 71 fe 26 6f | e1 15 f7 5c 1d 4e 70 e7 4d 93 d4 07 4a 59 84 fb | 83 ce 63 fa 50 d7 94 57 69 32 2b da 75 d3 38 d6 | 77 d1 46 cc f5 45 af 2e be cd 16 15 30 1a 9e 1e | c9 d7 d6 51 85 47 60 80 2b d8 84 36 e7 11 7e 0d | 47 fe 10 7e c3 a2 a7 a6 96 d4 dd 57 a2 39 43 ea | 45 ac 84 3a 82 0f 6a b0 20 ad b6 59 36 9f 99 ad | e0 67 d8 15 b4 c2 a7 5c b5 33 e0 a6 c6 43 4c 5c | f5 b8 88 b2 64 d1 f3 2f 15 b0 31 76 6b df e5 55 | 89 fa 48 f6 79 a3 50 e1 6c 69 65 c8 47 c5 dd 56 | b5 f7 36 bc a8 8e cc 33 f9 c5 47 5d 19 5f 03 a5 | b9 3c dd 93 af 0d d2 2a e7 a4 67 db d1 a8 f5 82 | 87 b1 d2 74 6c a1 eb cb 52 5e 4d 40 eb 4e 0c 1d | b9 b3 19 ba e6 45 4b 6a 60 75 df 29 4d 2f 4d a0 | 30 6b e5 f2 de d6 ee a2 0f a1 43 62 5d 03 21 7c | 50 32 be 0e dc e3 13 3d 67 73 7f 65 5c fa 7b b8 | 97 1d 87 de 37 7f 0f b1 e2 bd 1b 33 f6 d8 83 3b | 60 3b 42 30 0c 89 a4 db a9 5b 2e 7a 53 60 68 fc | f0 79 38 b0 28 f4 a1 9a 47 48 7e f1 34 4d 2b 2b | 28 10 b2 26 ca 90 a9 0a e2 d7 73 50 bb 56 12 28 | 79 c6 e7 ea c5 d0 12 79 f2 d2 98 | start processing: from 192.1.2.45:500 (in process_md() at demux.c:378) | **parse ISAKMP Message: | initiator cookie: | 27 ae 31 26 5e c6 79 93 | responder cookie: | d4 d8 78 73 8a b3 3b d6 | next payload type: ISAKMP_NEXT_v2SKF (0x35) | ISAKMP version: IKEv2 version 2.0 (rfc4306/rfc5996) (0x20) | exchange type: ISAKMP_v2_IKE_AUTH (0x23) | flags: ISAKMP_FLAG_v2_IKE_INIT (0x8) | Message ID: 1 (0x1) | length: 539 (0x21b) | processing version=2.0 packet with exchange type=ISAKMP_v2_IKE_AUTH (35) | I am the IKE SA Original Responder receiving an IKEv2 IKE_AUTH request | State DB: IKEv2 state not found (find_v2_ike_sa) packet from 192.1.2.45:500: IKE_AUTH message request has no corresponding IKE SA | stop processing: from 192.1.2.45:500 (in process_md() at demux.c:380) | processing: STOP state #0 (in process_md() at demux.c:382) | processing: STOP connection NULL (in process_md() at demux.c:383) | spent 0.33 milliseconds in comm_handle_cb() reading and processing packet | spent 0.00476 milliseconds in comm_handle_cb() calling check_incoming_msg_errqueue() | *received 539 bytes from 192.1.2.45:500 on eth1 (192.1.2.23:500) | 27 ae 31 26 5e c6 79 93 d4 d8 78 73 8a b3 3b d6 | 35 20 23 08 00 00 00 01 00 00 02 1b 00 00 01 ff | 00 03 00 05 e3 cb 6d 2a 20 a0 78 06 91 4f 44 08 | 98 d3 70 32 51 e8 94 b9 93 8d 6c d5 7d 51 de f0 | 94 9d 69 63 da ac b9 f4 5b 91 e6 8d 64 5d 3c ad | e6 c6 78 bb b2 8f 7d 55 fb e4 76 d4 a9 f4 81 37 | 11 7b fc 1b 2d 6f de 8a 3b c2 f9 33 f1 f4 1c b8 | ae 04 e3 15 7f 2f ac 16 c5 91 70 2b 60 d3 04 7d | 47 77 4f 55 6c a5 2c 95 ff 1c b9 be 75 4a 14 5e | 84 fa 66 ea 84 41 14 ae b0 da 7a b3 62 9e 34 54 | c0 23 3a dc ba 77 3f 10 20 7e 13 23 fd 2d d0 05 | f0 fd 06 f0 9d ec a5 c6 7f 39 23 89 60 91 ef 2e | 53 82 eb 21 88 a9 b1 b3 c7 36 ed 97 5d ac 87 44 | 4d b2 59 dc 21 20 81 f6 e9 78 d8 b0 4e 5c 20 d0 | c1 51 ea 9e 6f 5d fd 2b a9 60 58 f9 60 29 bb bc | 09 11 2f 31 56 d9 d1 1f 92 9e a2 6f ea 68 98 61 | 89 1f e0 d1 93 43 f7 d8 3b 90 b2 3b f3 66 ef 0b | f8 0a 5a c8 52 20 cd b6 8b 97 e8 16 fb 04 98 45 | 13 e7 0d e9 05 37 d9 93 31 e1 04 ad 53 b3 e1 cb | c0 63 95 b8 91 01 e3 a0 f2 e3 29 56 b9 ab c6 72 | 46 3c 43 f7 74 35 6c 82 b8 ee 51 24 93 d9 9e 0c | 79 de 0b a1 3b ee 3c c7 bc d5 bc c2 1a 4a ce d4 | 78 f7 a5 83 44 e2 77 fc d6 b5 7c 32 4d 0c d7 11 | 47 c7 fd 80 f9 0a b7 6d b8 8c ca f0 c9 d7 e6 55 | f9 61 2c d8 5b 85 ac 40 ff b3 f8 1f 86 93 88 8e | 54 c0 96 ab 17 68 be b6 ad cc 2b d1 77 47 8a 32 | 6a 74 56 7c 62 dc e8 8d 61 0e c8 4b dc 50 a9 59 | fb ac 55 73 e4 e1 62 85 a0 d2 f8 40 25 27 9f 52 | 29 3a 60 4b ff b2 88 b2 32 02 8e f9 c4 ff 76 c1 | 46 7f 5e b6 6f 64 a3 38 e1 99 0c 83 e0 24 f9 9e | 6c 9c 48 65 56 11 47 73 b1 50 a1 b4 94 6d 74 84 | 71 02 41 70 25 f3 eb 2d f7 66 41 4c 4c e7 c8 c7 | 22 a0 6f 09 66 e2 f0 38 16 e1 0d 82 ec 0d 78 5d | a5 22 69 93 e8 1d 20 6e a8 95 47 | start processing: from 192.1.2.45:500 (in process_md() at demux.c:378) | **parse ISAKMP Message: | initiator cookie: | 27 ae 31 26 5e c6 79 93 | responder cookie: | d4 d8 78 73 8a b3 3b d6 | next payload type: ISAKMP_NEXT_v2SKF (0x35) | ISAKMP version: IKEv2 version 2.0 (rfc4306/rfc5996) (0x20) | exchange type: ISAKMP_v2_IKE_AUTH (0x23) | flags: ISAKMP_FLAG_v2_IKE_INIT (0x8) | Message ID: 1 (0x1) | length: 539 (0x21b) | processing version=2.0 packet with exchange type=ISAKMP_v2_IKE_AUTH (35) | I am the IKE SA Original Responder receiving an IKEv2 IKE_AUTH request | State DB: IKEv2 state not found (find_v2_ike_sa) packet from 192.1.2.45:500: IKE_AUTH message request has no corresponding IKE SA | stop processing: from 192.1.2.45:500 (in process_md() at demux.c:380) | processing: STOP state #0 (in process_md() at demux.c:382) | processing: STOP connection NULL (in process_md() at demux.c:383) | spent 0.341 milliseconds in comm_handle_cb() reading and processing packet | spent 0.00508 milliseconds in comm_handle_cb() calling check_incoming_msg_errqueue() | *received 539 bytes from 192.1.2.45:500 on eth1 (192.1.2.23:500) | 27 ae 31 26 5e c6 79 93 d4 d8 78 73 8a b3 3b d6 | 35 20 23 08 00 00 00 01 00 00 02 1b 00 00 01 ff | 00 04 00 05 e4 6f 03 b2 8f fc 07 8b 98 56 18 8b | b5 d8 85 6c 87 82 af 96 6f 6b af a0 3a 5d 9b 7f | 95 02 e7 4f 82 fc 9a f5 30 d4 3c 89 70 f4 5a 18 | a5 de 9d bc 3c 6d 43 74 51 e0 1a 94 27 34 85 fb | 23 33 db 79 67 03 fb fc 3c ef 7b 32 b4 ef 2e 5d | 95 da 8f c3 70 7c d4 9f fd d3 ae 1e 05 dd 14 c9 | 43 e7 a0 50 e5 8b 6a ea 18 52 37 b0 c8 96 52 7d | a3 f1 d4 aa 6d 6a 8a 52 96 c8 76 d1 7a 58 f8 b4 | a9 67 33 d1 85 3b e6 62 9d 58 9f a8 31 11 d0 84 | c4 30 28 58 56 8b 23 fc 34 f9 f0 39 c6 03 79 83 | dc 3b b7 a4 77 c4 e8 02 fa 77 59 21 05 41 36 0d | cc 0d bf 5c 3e 12 4a f3 1f 9e f3 77 70 30 b7 41 | 5b fb fc c5 e9 25 aa a1 d2 d4 23 fa 4a 92 ab 65 | 33 15 fd 58 25 e8 c0 a6 fa ed 46 3b e8 95 ac da | 64 89 27 ec a6 20 ba 4f 77 86 79 14 2a e6 de 17 | 41 4e 00 fd 2b 6c 6a 96 ed f0 18 9b 1a db ea 4a | a4 79 56 7d 96 e9 5f e9 42 a3 3c 06 07 a6 fe c3 | 3d e7 62 5b dc 68 a8 1a 2d 4b 82 d2 f8 58 44 74 | cc 40 a7 4b 01 2f 4d ff b2 53 60 a8 97 38 de 59 | 75 99 cb 71 cb 4f 60 64 b3 a2 81 99 61 80 6d b4 | cf 24 21 be 53 52 ae 9c a0 14 ef 01 8f dc 9b 10 | 63 78 fa 3d 4f 07 fb 6c 7e 33 cf cf 32 ae bc 5c | c1 19 0a 22 95 c0 bf b3 67 9e 82 7b e1 68 49 41 | 64 30 1f 66 1c 02 c1 d4 70 05 17 fe 92 2b f0 5f | 6c 66 9b 41 b1 2b 77 3f cc 86 8b 08 6d 74 4b fa | cf 07 6b 84 0a a1 5a 8a 5c 4c aa b7 3c 2e f7 56 | f7 61 91 7e c8 60 5d 8b 39 dd 32 ca 53 dd 06 a1 | 93 27 71 cc 83 d0 4f 51 c1 f2 17 f5 25 41 f9 e0 | 1a 29 c6 c3 39 52 7e 68 24 d0 77 9c e4 85 02 82 | 62 eb 80 cf 45 57 9c da 2f 67 20 5c db 29 fd f8 | 53 06 1d cf 31 7f 1a 0f 7d 65 4d ca d8 be 15 9b | 61 09 de ca 67 8b 1d 31 38 f1 da | start processing: from 192.1.2.45:500 (in process_md() at demux.c:378) | **parse ISAKMP Message: | initiator cookie: | 27 ae 31 26 5e c6 79 93 | responder cookie: | d4 d8 78 73 8a b3 3b d6 | next payload type: ISAKMP_NEXT_v2SKF (0x35) | ISAKMP version: IKEv2 version 2.0 (rfc4306/rfc5996) (0x20) | exchange type: ISAKMP_v2_IKE_AUTH (0x23) | flags: ISAKMP_FLAG_v2_IKE_INIT (0x8) | Message ID: 1 (0x1) | length: 539 (0x21b) | processing version=2.0 packet with exchange type=ISAKMP_v2_IKE_AUTH (35) | I am the IKE SA Original Responder receiving an IKEv2 IKE_AUTH request | State DB: IKEv2 state not found (find_v2_ike_sa) packet from 192.1.2.45:500: IKE_AUTH message request has no corresponding IKE SA | stop processing: from 192.1.2.45:500 (in process_md() at demux.c:380) | processing: STOP state #0 (in process_md() at demux.c:382) | processing: STOP connection NULL (in process_md() at demux.c:383) | spent 0.327 milliseconds in comm_handle_cb() reading and processing packet | spent 0.00464 milliseconds in comm_handle_cb() calling check_incoming_msg_errqueue() | *received 221 bytes from 192.1.2.45:500 on eth1 (192.1.2.23:500) | 27 ae 31 26 5e c6 79 93 d4 d8 78 73 8a b3 3b d6 | 35 20 23 08 00 00 00 01 00 00 00 dd 00 00 00 c1 | 00 05 00 05 2c f4 ce f4 31 44 0b 50 48 02 68 54 | a3 b8 39 2b 35 e0 93 72 2c 9b e3 66 5c 58 ef 19 | 77 d6 76 c9 cb 06 8e 72 e0 ea e7 d0 1e 16 c2 34 | 0d 7e 7d e7 0c df b8 57 75 f3 d9 eb 9e 92 3f 9f | 0a 3b 58 40 f8 fd 38 10 6a 4c 6b cd 5c c4 13 15 | 85 67 f4 13 20 e5 f7 52 d0 7d 78 58 50 f9 17 78 | bf 15 9d d3 34 3f 77 a2 b9 ed a0 53 8c ea b3 ef | 1d 1c 97 9f 0f 89 99 04 cf b4 21 a8 d6 24 80 ab | e1 dd 70 f8 f4 35 ee 8c 51 97 eb 47 13 0a 73 84 | 23 67 ff 0f 6c 4f 6b 1b af bb a8 09 c8 61 8e e7 | 9f 49 64 e6 fa ef 66 5d a7 9d 75 d6 47 04 31 5f | 01 02 94 0e 2c 2b ac ff 3a bc 14 68 31 | start processing: from 192.1.2.45:500 (in process_md() at demux.c:378) | **parse ISAKMP Message: | initiator cookie: | 27 ae 31 26 5e c6 79 93 | responder cookie: | d4 d8 78 73 8a b3 3b d6 | next payload type: ISAKMP_NEXT_v2SKF (0x35) | ISAKMP version: IKEv2 version 2.0 (rfc4306/rfc5996) (0x20) | exchange type: ISAKMP_v2_IKE_AUTH (0x23) | flags: ISAKMP_FLAG_v2_IKE_INIT (0x8) | Message ID: 1 (0x1) | length: 221 (0xdd) | processing version=2.0 packet with exchange type=ISAKMP_v2_IKE_AUTH (35) | I am the IKE SA Original Responder receiving an IKEv2 IKE_AUTH request | State DB: IKEv2 state not found (find_v2_ike_sa) packet from 192.1.2.45:500: IKE_AUTH message request has no corresponding IKE SA | stop processing: from 192.1.2.45:500 (in process_md() at demux.c:380) | processing: STOP state #0 (in process_md() at demux.c:382) | processing: STOP connection NULL (in process_md() at demux.c:383) | spent 0.214 milliseconds in comm_handle_cb() reading and processing packet | spent 0.0027 milliseconds in comm_handle_cb() calling check_incoming_msg_errqueue() | *received 539 bytes from 192.1.2.45:500 on eth1 (192.1.2.23:500) | 27 ae 31 26 5e c6 79 93 d4 d8 78 73 8a b3 3b d6 | 35 20 23 08 00 00 00 01 00 00 02 1b 23 00 01 ff | 00 01 00 05 93 7f 0b 7d 21 f8 49 21 6f 45 d2 ea | 37 ff 7d 19 91 e5 d3 3d 84 52 70 02 c0 b7 c8 9b | 6f 95 33 c9 12 09 0b e1 46 6b 95 81 b3 b0 87 09 | 44 87 22 6b 5f dd b4 62 99 9b ae 4a 92 ed 93 6a | 94 ec 9d e5 b7 33 52 71 5f 52 3f be f4 d3 2b 33 | 0f 80 e9 06 74 e6 f2 50 ad 1f bc b3 0c 08 09 c5 | 1c d7 8f 48 e6 74 af 8c fc 77 28 21 44 bc ee 6a | 30 5d fe 22 e0 9c f3 05 24 04 2a 8a 3a 16 f3 70 | 4d 33 05 1a d9 9a 27 26 06 46 48 e6 1f c9 2b 9f | 8f 0b 85 9a 71 d4 4e 13 ea 83 37 60 e3 72 ec d7 | 71 19 da 6a 04 eb d6 92 44 09 c8 25 e3 04 1d f9 | 6c 42 b3 6c 34 f6 f3 32 94 2c 2b 4f 6b 05 5f 1a | 3d 3d 72 78 c6 e4 14 71 c4 4c f5 6d fa 2e a1 26 | c6 97 b0 9c 2e 9c 12 6d cb fd 5b 30 51 bd 6b 72 | 60 5b 1b 8b 2a da 92 81 80 1c af 66 66 be bc ac | ee 17 a0 70 99 6e d7 ef 2d 71 49 1f 33 d1 6c 58 | fd a2 93 8d a6 0c 42 a5 ee 65 05 89 42 62 54 d4 | fb 21 48 3d af 7f a2 2c 83 bb 4d 77 ed 75 40 81 | 00 d0 f0 74 b8 bf 9c 6a 70 36 6f e5 9a d0 d6 fa | 5e 7e b0 3c 59 1d 51 d7 6a 21 d5 44 e8 73 72 d5 | 50 4d 65 dd fc 86 ae 60 ed b1 34 e0 1b 31 04 4c | 40 51 b6 58 b3 c4 61 47 23 06 a3 8e 11 82 03 d5 | ae 6c 65 c0 78 07 3a 5e c1 18 37 77 e6 9a 75 1d | 78 0c ec 03 38 4f 08 19 82 ea fb 89 d6 85 f5 3e | 1a c5 49 72 ca 69 6d 53 e4 69 03 eb 2b 20 8c ca | 03 fd 70 2c 04 68 73 8c b4 f8 4e 06 36 e1 cc 5d | b6 01 e2 cf fe a0 1d 9a 20 f7 47 ab b1 3f 35 47 | 21 9d 12 9c 14 0e 89 07 a0 85 96 fb 0d 0f d4 04 | fe 2e 7a 6a 34 79 44 2f 5a 4c 6f 13 66 0a 62 c5 | 78 d0 18 ce 7c f4 3a 77 6b c5 10 8b d0 2d f5 c9 | 3e 6c 91 81 7e 7a 2c fd a4 d9 71 87 35 9c cb c1 | 94 1d eb b0 71 a2 57 b6 dc 31 61 | start processing: from 192.1.2.45:500 (in process_md() at demux.c:378) | **parse ISAKMP Message: | initiator cookie: | 27 ae 31 26 5e c6 79 93 | responder cookie: | d4 d8 78 73 8a b3 3b d6 | next payload type: ISAKMP_NEXT_v2SKF (0x35) | ISAKMP version: IKEv2 version 2.0 (rfc4306/rfc5996) (0x20) | exchange type: ISAKMP_v2_IKE_AUTH (0x23) | flags: ISAKMP_FLAG_v2_IKE_INIT (0x8) | Message ID: 1 (0x1) | length: 539 (0x21b) | processing version=2.0 packet with exchange type=ISAKMP_v2_IKE_AUTH (35) | I am the IKE SA Original Responder receiving an IKEv2 IKE_AUTH request | State DB: IKEv2 state not found (find_v2_ike_sa) packet from 192.1.2.45:500: IKE_AUTH message request has no corresponding IKE SA | stop processing: from 192.1.2.45:500 (in process_md() at demux.c:380) | processing: STOP state #0 (in process_md() at demux.c:382) | processing: STOP connection NULL (in process_md() at demux.c:383) | spent 0.0806 milliseconds in comm_handle_cb() reading and processing packet | spent 0.00107 milliseconds in comm_handle_cb() calling check_incoming_msg_errqueue() | *received 539 bytes from 192.1.2.45:500 on eth1 (192.1.2.23:500) | 27 ae 31 26 5e c6 79 93 d4 d8 78 73 8a b3 3b d6 | 35 20 23 08 00 00 00 01 00 00 02 1b 00 00 01 ff | 00 02 00 05 59 df ed f0 61 da 0c cf 62 af 31 2a | e4 f9 e5 f9 78 08 d8 7a ac 05 a9 f5 7b de 09 45 | fe 8c a0 4d e1 19 af ef 69 b0 1e 6b 09 a6 ac e3 | 29 ec 89 50 e3 e2 f2 ad 4c 33 a7 e4 20 d7 1c 1a | 26 d6 d7 3e 3c ba 50 16 45 df 05 f8 e6 1a d3 02 | 23 08 7d 7b 38 b9 ee 78 0a 6e 0a bc 21 50 47 65 | c2 b4 7b 56 72 3b 3a 60 ce 9d 14 ee 39 86 2b 23 | df 5e 6c 31 b9 ef 00 70 f1 32 71 59 07 0d 1c 11 | 09 b5 c0 d1 3d 99 a9 ae b9 a6 dd 04 d9 09 f7 96 | b7 c7 ef fb b6 f1 25 e1 b4 e2 94 0c 13 33 9a 2d | 55 5f c9 ee 94 d5 f2 6d fb 37 b7 79 68 bb fb 69 | d3 a6 83 4f 61 0f 31 d1 eb ff 96 5b 71 fe 26 6f | e1 15 f7 5c 1d 4e 70 e7 4d 93 d4 07 4a 59 84 fb | 83 ce 63 fa 50 d7 94 57 69 32 2b da 75 d3 38 d6 | 77 d1 46 cc f5 45 af 2e be cd 16 15 30 1a 9e 1e | c9 d7 d6 51 85 47 60 80 2b d8 84 36 e7 11 7e 0d | 47 fe 10 7e c3 a2 a7 a6 96 d4 dd 57 a2 39 43 ea | 45 ac 84 3a 82 0f 6a b0 20 ad b6 59 36 9f 99 ad | e0 67 d8 15 b4 c2 a7 5c b5 33 e0 a6 c6 43 4c 5c | f5 b8 88 b2 64 d1 f3 2f 15 b0 31 76 6b df e5 55 | 89 fa 48 f6 79 a3 50 e1 6c 69 65 c8 47 c5 dd 56 | b5 f7 36 bc a8 8e cc 33 f9 c5 47 5d 19 5f 03 a5 | b9 3c dd 93 af 0d d2 2a e7 a4 67 db d1 a8 f5 82 | 87 b1 d2 74 6c a1 eb cb 52 5e 4d 40 eb 4e 0c 1d | b9 b3 19 ba e6 45 4b 6a 60 75 df 29 4d 2f 4d a0 | 30 6b e5 f2 de d6 ee a2 0f a1 43 62 5d 03 21 7c | 50 32 be 0e dc e3 13 3d 67 73 7f 65 5c fa 7b b8 | 97 1d 87 de 37 7f 0f b1 e2 bd 1b 33 f6 d8 83 3b | 60 3b 42 30 0c 89 a4 db a9 5b 2e 7a 53 60 68 fc | f0 79 38 b0 28 f4 a1 9a 47 48 7e f1 34 4d 2b 2b | 28 10 b2 26 ca 90 a9 0a e2 d7 73 50 bb 56 12 28 | 79 c6 e7 ea c5 d0 12 79 f2 d2 98 | start processing: from 192.1.2.45:500 (in process_md() at demux.c:378) | **parse ISAKMP Message: | initiator cookie: | 27 ae 31 26 5e c6 79 93 | responder cookie: | d4 d8 78 73 8a b3 3b d6 | next payload type: ISAKMP_NEXT_v2SKF (0x35) | ISAKMP version: IKEv2 version 2.0 (rfc4306/rfc5996) (0x20) | exchange type: ISAKMP_v2_IKE_AUTH (0x23) | flags: ISAKMP_FLAG_v2_IKE_INIT (0x8) | Message ID: 1 (0x1) | length: 539 (0x21b) | processing version=2.0 packet with exchange type=ISAKMP_v2_IKE_AUTH (35) | I am the IKE SA Original Responder receiving an IKEv2 IKE_AUTH request | State DB: IKEv2 state not found (find_v2_ike_sa) packet from 192.1.2.45:500: IKE_AUTH message request has no corresponding IKE SA | stop processing: from 192.1.2.45:500 (in process_md() at demux.c:380) | processing: STOP state #0 (in process_md() at demux.c:382) | processing: STOP connection NULL (in process_md() at demux.c:383) | spent 0.0862 milliseconds in comm_handle_cb() reading and processing packet | spent 0.00111 milliseconds in comm_handle_cb() calling check_incoming_msg_errqueue() | *received 539 bytes from 192.1.2.45:500 on eth1 (192.1.2.23:500) | 27 ae 31 26 5e c6 79 93 d4 d8 78 73 8a b3 3b d6 | 35 20 23 08 00 00 00 01 00 00 02 1b 00 00 01 ff | 00 03 00 05 e3 cb 6d 2a 20 a0 78 06 91 4f 44 08 | 98 d3 70 32 51 e8 94 b9 93 8d 6c d5 7d 51 de f0 | 94 9d 69 63 da ac b9 f4 5b 91 e6 8d 64 5d 3c ad | e6 c6 78 bb b2 8f 7d 55 fb e4 76 d4 a9 f4 81 37 | 11 7b fc 1b 2d 6f de 8a 3b c2 f9 33 f1 f4 1c b8 | ae 04 e3 15 7f 2f ac 16 c5 91 70 2b 60 d3 04 7d | 47 77 4f 55 6c a5 2c 95 ff 1c b9 be 75 4a 14 5e | 84 fa 66 ea 84 41 14 ae b0 da 7a b3 62 9e 34 54 | c0 23 3a dc ba 77 3f 10 20 7e 13 23 fd 2d d0 05 | f0 fd 06 f0 9d ec a5 c6 7f 39 23 89 60 91 ef 2e | 53 82 eb 21 88 a9 b1 b3 c7 36 ed 97 5d ac 87 44 | 4d b2 59 dc 21 20 81 f6 e9 78 d8 b0 4e 5c 20 d0 | c1 51 ea 9e 6f 5d fd 2b a9 60 58 f9 60 29 bb bc | 09 11 2f 31 56 d9 d1 1f 92 9e a2 6f ea 68 98 61 | 89 1f e0 d1 93 43 f7 d8 3b 90 b2 3b f3 66 ef 0b | f8 0a 5a c8 52 20 cd b6 8b 97 e8 16 fb 04 98 45 | 13 e7 0d e9 05 37 d9 93 31 e1 04 ad 53 b3 e1 cb | c0 63 95 b8 91 01 e3 a0 f2 e3 29 56 b9 ab c6 72 | 46 3c 43 f7 74 35 6c 82 b8 ee 51 24 93 d9 9e 0c | 79 de 0b a1 3b ee 3c c7 bc d5 bc c2 1a 4a ce d4 | 78 f7 a5 83 44 e2 77 fc d6 b5 7c 32 4d 0c d7 11 | 47 c7 fd 80 f9 0a b7 6d b8 8c ca f0 c9 d7 e6 55 | f9 61 2c d8 5b 85 ac 40 ff b3 f8 1f 86 93 88 8e | 54 c0 96 ab 17 68 be b6 ad cc 2b d1 77 47 8a 32 | 6a 74 56 7c 62 dc e8 8d 61 0e c8 4b dc 50 a9 59 | fb ac 55 73 e4 e1 62 85 a0 d2 f8 40 25 27 9f 52 | 29 3a 60 4b ff b2 88 b2 32 02 8e f9 c4 ff 76 c1 | 46 7f 5e b6 6f 64 a3 38 e1 99 0c 83 e0 24 f9 9e | 6c 9c 48 65 56 11 47 73 b1 50 a1 b4 94 6d 74 84 | 71 02 41 70 25 f3 eb 2d f7 66 41 4c 4c e7 c8 c7 | 22 a0 6f 09 66 e2 f0 38 16 e1 0d 82 ec 0d 78 5d | a5 22 69 93 e8 1d 20 6e a8 95 47 | start processing: from 192.1.2.45:500 (in process_md() at demux.c:378) | **parse ISAKMP Message: | initiator cookie: | 27 ae 31 26 5e c6 79 93 | responder cookie: | d4 d8 78 73 8a b3 3b d6 | next payload type: ISAKMP_NEXT_v2SKF (0x35) | ISAKMP version: IKEv2 version 2.0 (rfc4306/rfc5996) (0x20) | exchange type: ISAKMP_v2_IKE_AUTH (0x23) | flags: ISAKMP_FLAG_v2_IKE_INIT (0x8) | Message ID: 1 (0x1) | length: 539 (0x21b) | processing version=2.0 packet with exchange type=ISAKMP_v2_IKE_AUTH (35) | I am the IKE SA Original Responder receiving an IKEv2 IKE_AUTH request | State DB: IKEv2 state not found (find_v2_ike_sa) packet from 192.1.2.45:500: IKE_AUTH message request has no corresponding IKE SA | stop processing: from 192.1.2.45:500 (in process_md() at demux.c:380) | processing: STOP state #0 (in process_md() at demux.c:382) | processing: STOP connection NULL (in process_md() at demux.c:383) | spent 0.118 milliseconds in comm_handle_cb() reading and processing packet | spent 0.00121 milliseconds in comm_handle_cb() calling check_incoming_msg_errqueue() | *received 539 bytes from 192.1.2.45:500 on eth1 (192.1.2.23:500) | 27 ae 31 26 5e c6 79 93 d4 d8 78 73 8a b3 3b d6 | 35 20 23 08 00 00 00 01 00 00 02 1b 00 00 01 ff | 00 04 00 05 e4 6f 03 b2 8f fc 07 8b 98 56 18 8b | b5 d8 85 6c 87 82 af 96 6f 6b af a0 3a 5d 9b 7f | 95 02 e7 4f 82 fc 9a f5 30 d4 3c 89 70 f4 5a 18 | a5 de 9d bc 3c 6d 43 74 51 e0 1a 94 27 34 85 fb | 23 33 db 79 67 03 fb fc 3c ef 7b 32 b4 ef 2e 5d | 95 da 8f c3 70 7c d4 9f fd d3 ae 1e 05 dd 14 c9 | 43 e7 a0 50 e5 8b 6a ea 18 52 37 b0 c8 96 52 7d | a3 f1 d4 aa 6d 6a 8a 52 96 c8 76 d1 7a 58 f8 b4 | a9 67 33 d1 85 3b e6 62 9d 58 9f a8 31 11 d0 84 | c4 30 28 58 56 8b 23 fc 34 f9 f0 39 c6 03 79 83 | dc 3b b7 a4 77 c4 e8 02 fa 77 59 21 05 41 36 0d | cc 0d bf 5c 3e 12 4a f3 1f 9e f3 77 70 30 b7 41 | 5b fb fc c5 e9 25 aa a1 d2 d4 23 fa 4a 92 ab 65 | 33 15 fd 58 25 e8 c0 a6 fa ed 46 3b e8 95 ac da | 64 89 27 ec a6 20 ba 4f 77 86 79 14 2a e6 de 17 | 41 4e 00 fd 2b 6c 6a 96 ed f0 18 9b 1a db ea 4a | a4 79 56 7d 96 e9 5f e9 42 a3 3c 06 07 a6 fe c3 | 3d e7 62 5b dc 68 a8 1a 2d 4b 82 d2 f8 58 44 74 | cc 40 a7 4b 01 2f 4d ff b2 53 60 a8 97 38 de 59 | 75 99 cb 71 cb 4f 60 64 b3 a2 81 99 61 80 6d b4 | cf 24 21 be 53 52 ae 9c a0 14 ef 01 8f dc 9b 10 | 63 78 fa 3d 4f 07 fb 6c 7e 33 cf cf 32 ae bc 5c | c1 19 0a 22 95 c0 bf b3 67 9e 82 7b e1 68 49 41 | 64 30 1f 66 1c 02 c1 d4 70 05 17 fe 92 2b f0 5f | 6c 66 9b 41 b1 2b 77 3f cc 86 8b 08 6d 74 4b fa | cf 07 6b 84 0a a1 5a 8a 5c 4c aa b7 3c 2e f7 56 | f7 61 91 7e c8 60 5d 8b 39 dd 32 ca 53 dd 06 a1 | 93 27 71 cc 83 d0 4f 51 c1 f2 17 f5 25 41 f9 e0 | 1a 29 c6 c3 39 52 7e 68 24 d0 77 9c e4 85 02 82 | 62 eb 80 cf 45 57 9c da 2f 67 20 5c db 29 fd f8 | 53 06 1d cf 31 7f 1a 0f 7d 65 4d ca d8 be 15 9b | 61 09 de ca 67 8b 1d 31 38 f1 da | start processing: from 192.1.2.45:500 (in process_md() at demux.c:378) | **parse ISAKMP Message: | initiator cookie: | 27 ae 31 26 5e c6 79 93 | responder cookie: | d4 d8 78 73 8a b3 3b d6 | next payload type: ISAKMP_NEXT_v2SKF (0x35) | ISAKMP version: IKEv2 version 2.0 (rfc4306/rfc5996) (0x20) | exchange type: ISAKMP_v2_IKE_AUTH (0x23) | flags: ISAKMP_FLAG_v2_IKE_INIT (0x8) | Message ID: 1 (0x1) | length: 539 (0x21b) | processing version=2.0 packet with exchange type=ISAKMP_v2_IKE_AUTH (35) | I am the IKE SA Original Responder receiving an IKEv2 IKE_AUTH request | State DB: IKEv2 state not found (find_v2_ike_sa) packet from 192.1.2.45:500: IKE_AUTH message request has no corresponding IKE SA | stop processing: from 192.1.2.45:500 (in process_md() at demux.c:380) | processing: STOP state #0 (in process_md() at demux.c:382) | processing: STOP connection NULL (in process_md() at demux.c:383) | spent 0.119 milliseconds in comm_handle_cb() reading and processing packet | spent 0.00126 milliseconds in comm_handle_cb() calling check_incoming_msg_errqueue() | *received 221 bytes from 192.1.2.45:500 on eth1 (192.1.2.23:500) | 27 ae 31 26 5e c6 79 93 d4 d8 78 73 8a b3 3b d6 | 35 20 23 08 00 00 00 01 00 00 00 dd 00 00 00 c1 | 00 05 00 05 2c f4 ce f4 31 44 0b 50 48 02 68 54 | a3 b8 39 2b 35 e0 93 72 2c 9b e3 66 5c 58 ef 19 | 77 d6 76 c9 cb 06 8e 72 e0 ea e7 d0 1e 16 c2 34 | 0d 7e 7d e7 0c df b8 57 75 f3 d9 eb 9e 92 3f 9f | 0a 3b 58 40 f8 fd 38 10 6a 4c 6b cd 5c c4 13 15 | 85 67 f4 13 20 e5 f7 52 d0 7d 78 58 50 f9 17 78 | bf 15 9d d3 34 3f 77 a2 b9 ed a0 53 8c ea b3 ef | 1d 1c 97 9f 0f 89 99 04 cf b4 21 a8 d6 24 80 ab | e1 dd 70 f8 f4 35 ee 8c 51 97 eb 47 13 0a 73 84 | 23 67 ff 0f 6c 4f 6b 1b af bb a8 09 c8 61 8e e7 | 9f 49 64 e6 fa ef 66 5d a7 9d 75 d6 47 04 31 5f | 01 02 94 0e 2c 2b ac ff 3a bc 14 68 31 | start processing: from 192.1.2.45:500 (in process_md() at demux.c:378) | **parse ISAKMP Message: | initiator cookie: | 27 ae 31 26 5e c6 79 93 | responder cookie: | d4 d8 78 73 8a b3 3b d6 | next payload type: ISAKMP_NEXT_v2SKF (0x35) | ISAKMP version: IKEv2 version 2.0 (rfc4306/rfc5996) (0x20) | exchange type: ISAKMP_v2_IKE_AUTH (0x23) | flags: ISAKMP_FLAG_v2_IKE_INIT (0x8) | Message ID: 1 (0x1) | length: 221 (0xdd) | processing version=2.0 packet with exchange type=ISAKMP_v2_IKE_AUTH (35) | I am the IKE SA Original Responder receiving an IKEv2 IKE_AUTH request | State DB: IKEv2 state not found (find_v2_ike_sa) packet from 192.1.2.45:500: IKE_AUTH message request has no corresponding IKE SA | stop processing: from 192.1.2.45:500 (in process_md() at demux.c:380) | processing: STOP state #0 (in process_md() at demux.c:382) | processing: STOP connection NULL (in process_md() at demux.c:383) | spent 0.0966 milliseconds in comm_handle_cb() reading and processing packet | spent 0.00324 milliseconds in comm_handle_cb() calling check_incoming_msg_errqueue() | *received 539 bytes from 192.1.2.45:500 on eth1 (192.1.2.23:500) | 27 ae 31 26 5e c6 79 93 d4 d8 78 73 8a b3 3b d6 | 35 20 23 08 00 00 00 01 00 00 02 1b 23 00 01 ff | 00 01 00 05 93 7f 0b 7d 21 f8 49 21 6f 45 d2 ea | 37 ff 7d 19 91 e5 d3 3d 84 52 70 02 c0 b7 c8 9b | 6f 95 33 c9 12 09 0b e1 46 6b 95 81 b3 b0 87 09 | 44 87 22 6b 5f dd b4 62 99 9b ae 4a 92 ed 93 6a | 94 ec 9d e5 b7 33 52 71 5f 52 3f be f4 d3 2b 33 | 0f 80 e9 06 74 e6 f2 50 ad 1f bc b3 0c 08 09 c5 | 1c d7 8f 48 e6 74 af 8c fc 77 28 21 44 bc ee 6a | 30 5d fe 22 e0 9c f3 05 24 04 2a 8a 3a 16 f3 70 | 4d 33 05 1a d9 9a 27 26 06 46 48 e6 1f c9 2b 9f | 8f 0b 85 9a 71 d4 4e 13 ea 83 37 60 e3 72 ec d7 | 71 19 da 6a 04 eb d6 92 44 09 c8 25 e3 04 1d f9 | 6c 42 b3 6c 34 f6 f3 32 94 2c 2b 4f 6b 05 5f 1a | 3d 3d 72 78 c6 e4 14 71 c4 4c f5 6d fa 2e a1 26 | c6 97 b0 9c 2e 9c 12 6d cb fd 5b 30 51 bd 6b 72 | 60 5b 1b 8b 2a da 92 81 80 1c af 66 66 be bc ac | ee 17 a0 70 99 6e d7 ef 2d 71 49 1f 33 d1 6c 58 | fd a2 93 8d a6 0c 42 a5 ee 65 05 89 42 62 54 d4 | fb 21 48 3d af 7f a2 2c 83 bb 4d 77 ed 75 40 81 | 00 d0 f0 74 b8 bf 9c 6a 70 36 6f e5 9a d0 d6 fa | 5e 7e b0 3c 59 1d 51 d7 6a 21 d5 44 e8 73 72 d5 | 50 4d 65 dd fc 86 ae 60 ed b1 34 e0 1b 31 04 4c | 40 51 b6 58 b3 c4 61 47 23 06 a3 8e 11 82 03 d5 | ae 6c 65 c0 78 07 3a 5e c1 18 37 77 e6 9a 75 1d | 78 0c ec 03 38 4f 08 19 82 ea fb 89 d6 85 f5 3e | 1a c5 49 72 ca 69 6d 53 e4 69 03 eb 2b 20 8c ca | 03 fd 70 2c 04 68 73 8c b4 f8 4e 06 36 e1 cc 5d | b6 01 e2 cf fe a0 1d 9a 20 f7 47 ab b1 3f 35 47 | 21 9d 12 9c 14 0e 89 07 a0 85 96 fb 0d 0f d4 04 | fe 2e 7a 6a 34 79 44 2f 5a 4c 6f 13 66 0a 62 c5 | 78 d0 18 ce 7c f4 3a 77 6b c5 10 8b d0 2d f5 c9 | 3e 6c 91 81 7e 7a 2c fd a4 d9 71 87 35 9c cb c1 | 94 1d eb b0 71 a2 57 b6 dc 31 61 | start processing: from 192.1.2.45:500 (in process_md() at demux.c:378) | **parse ISAKMP Message: | initiator cookie: | 27 ae 31 26 5e c6 79 93 | responder cookie: | d4 d8 78 73 8a b3 3b d6 | next payload type: ISAKMP_NEXT_v2SKF (0x35) | ISAKMP version: IKEv2 version 2.0 (rfc4306/rfc5996) (0x20) | exchange type: ISAKMP_v2_IKE_AUTH (0x23) | flags: ISAKMP_FLAG_v2_IKE_INIT (0x8) | Message ID: 1 (0x1) | length: 539 (0x21b) | processing version=2.0 packet with exchange type=ISAKMP_v2_IKE_AUTH (35) | I am the IKE SA Original Responder receiving an IKEv2 IKE_AUTH request | State DB: IKEv2 state not found (find_v2_ike_sa) packet from 192.1.2.45:500: IKE_AUTH message request has no corresponding IKE SA | stop processing: from 192.1.2.45:500 (in process_md() at demux.c:380) | processing: STOP state #0 (in process_md() at demux.c:382) | processing: STOP connection NULL (in process_md() at demux.c:383) | spent 0.0986 milliseconds in comm_handle_cb() reading and processing packet | spent 0.00125 milliseconds in comm_handle_cb() calling check_incoming_msg_errqueue() | *received 539 bytes from 192.1.2.45:500 on eth1 (192.1.2.23:500) | 27 ae 31 26 5e c6 79 93 d4 d8 78 73 8a b3 3b d6 | 35 20 23 08 00 00 00 01 00 00 02 1b 00 00 01 ff | 00 02 00 05 59 df ed f0 61 da 0c cf 62 af 31 2a | e4 f9 e5 f9 78 08 d8 7a ac 05 a9 f5 7b de 09 45 | fe 8c a0 4d e1 19 af ef 69 b0 1e 6b 09 a6 ac e3 | 29 ec 89 50 e3 e2 f2 ad 4c 33 a7 e4 20 d7 1c 1a | 26 d6 d7 3e 3c ba 50 16 45 df 05 f8 e6 1a d3 02 | 23 08 7d 7b 38 b9 ee 78 0a 6e 0a bc 21 50 47 65 | c2 b4 7b 56 72 3b 3a 60 ce 9d 14 ee 39 86 2b 23 | df 5e 6c 31 b9 ef 00 70 f1 32 71 59 07 0d 1c 11 | 09 b5 c0 d1 3d 99 a9 ae b9 a6 dd 04 d9 09 f7 96 | b7 c7 ef fb b6 f1 25 e1 b4 e2 94 0c 13 33 9a 2d | 55 5f c9 ee 94 d5 f2 6d fb 37 b7 79 68 bb fb 69 | d3 a6 83 4f 61 0f 31 d1 eb ff 96 5b 71 fe 26 6f | e1 15 f7 5c 1d 4e 70 e7 4d 93 d4 07 4a 59 84 fb | 83 ce 63 fa 50 d7 94 57 69 32 2b da 75 d3 38 d6 | 77 d1 46 cc f5 45 af 2e be cd 16 15 30 1a 9e 1e | c9 d7 d6 51 85 47 60 80 2b d8 84 36 e7 11 7e 0d | 47 fe 10 7e c3 a2 a7 a6 96 d4 dd 57 a2 39 43 ea | 45 ac 84 3a 82 0f 6a b0 20 ad b6 59 36 9f 99 ad | e0 67 d8 15 b4 c2 a7 5c b5 33 e0 a6 c6 43 4c 5c | f5 b8 88 b2 64 d1 f3 2f 15 b0 31 76 6b df e5 55 | 89 fa 48 f6 79 a3 50 e1 6c 69 65 c8 47 c5 dd 56 | b5 f7 36 bc a8 8e cc 33 f9 c5 47 5d 19 5f 03 a5 | b9 3c dd 93 af 0d d2 2a e7 a4 67 db d1 a8 f5 82 | 87 b1 d2 74 6c a1 eb cb 52 5e 4d 40 eb 4e 0c 1d | b9 b3 19 ba e6 45 4b 6a 60 75 df 29 4d 2f 4d a0 | 30 6b e5 f2 de d6 ee a2 0f a1 43 62 5d 03 21 7c | 50 32 be 0e dc e3 13 3d 67 73 7f 65 5c fa 7b b8 | 97 1d 87 de 37 7f 0f b1 e2 bd 1b 33 f6 d8 83 3b | 60 3b 42 30 0c 89 a4 db a9 5b 2e 7a 53 60 68 fc | f0 79 38 b0 28 f4 a1 9a 47 48 7e f1 34 4d 2b 2b | 28 10 b2 26 ca 90 a9 0a e2 d7 73 50 bb 56 12 28 | 79 c6 e7 ea c5 d0 12 79 f2 d2 98 | start processing: from 192.1.2.45:500 (in process_md() at demux.c:378) | **parse ISAKMP Message: | initiator cookie: | 27 ae 31 26 5e c6 79 93 | responder cookie: | d4 d8 78 73 8a b3 3b d6 | next payload type: ISAKMP_NEXT_v2SKF (0x35) | ISAKMP version: IKEv2 version 2.0 (rfc4306/rfc5996) (0x20) | exchange type: ISAKMP_v2_IKE_AUTH (0x23) | flags: ISAKMP_FLAG_v2_IKE_INIT (0x8) | Message ID: 1 (0x1) | length: 539 (0x21b) | processing version=2.0 packet with exchange type=ISAKMP_v2_IKE_AUTH (35) | I am the IKE SA Original Responder receiving an IKEv2 IKE_AUTH request | State DB: IKEv2 state not found (find_v2_ike_sa) packet from 192.1.2.45:500: IKE_AUTH message request has no corresponding IKE SA | stop processing: from 192.1.2.45:500 (in process_md() at demux.c:380) | processing: STOP state #0 (in process_md() at demux.c:382) | processing: STOP connection NULL (in process_md() at demux.c:383) | spent 0.0818 milliseconds in comm_handle_cb() reading and processing packet | spent 0.0012 milliseconds in comm_handle_cb() calling check_incoming_msg_errqueue() | *received 539 bytes from 192.1.2.45:500 on eth1 (192.1.2.23:500) | 27 ae 31 26 5e c6 79 93 d4 d8 78 73 8a b3 3b d6 | 35 20 23 08 00 00 00 01 00 00 02 1b 00 00 01 ff | 00 03 00 05 e3 cb 6d 2a 20 a0 78 06 91 4f 44 08 | 98 d3 70 32 51 e8 94 b9 93 8d 6c d5 7d 51 de f0 | 94 9d 69 63 da ac b9 f4 5b 91 e6 8d 64 5d 3c ad | e6 c6 78 bb b2 8f 7d 55 fb e4 76 d4 a9 f4 81 37 | 11 7b fc 1b 2d 6f de 8a 3b c2 f9 33 f1 f4 1c b8 | ae 04 e3 15 7f 2f ac 16 c5 91 70 2b 60 d3 04 7d | 47 77 4f 55 6c a5 2c 95 ff 1c b9 be 75 4a 14 5e | 84 fa 66 ea 84 41 14 ae b0 da 7a b3 62 9e 34 54 | c0 23 3a dc ba 77 3f 10 20 7e 13 23 fd 2d d0 05 | f0 fd 06 f0 9d ec a5 c6 7f 39 23 89 60 91 ef 2e | 53 82 eb 21 88 a9 b1 b3 c7 36 ed 97 5d ac 87 44 | 4d b2 59 dc 21 20 81 f6 e9 78 d8 b0 4e 5c 20 d0 | c1 51 ea 9e 6f 5d fd 2b a9 60 58 f9 60 29 bb bc | 09 11 2f 31 56 d9 d1 1f 92 9e a2 6f ea 68 98 61 | 89 1f e0 d1 93 43 f7 d8 3b 90 b2 3b f3 66 ef 0b | f8 0a 5a c8 52 20 cd b6 8b 97 e8 16 fb 04 98 45 | 13 e7 0d e9 05 37 d9 93 31 e1 04 ad 53 b3 e1 cb | c0 63 95 b8 91 01 e3 a0 f2 e3 29 56 b9 ab c6 72 | 46 3c 43 f7 74 35 6c 82 b8 ee 51 24 93 d9 9e 0c | 79 de 0b a1 3b ee 3c c7 bc d5 bc c2 1a 4a ce d4 | 78 f7 a5 83 44 e2 77 fc d6 b5 7c 32 4d 0c d7 11 | 47 c7 fd 80 f9 0a b7 6d b8 8c ca f0 c9 d7 e6 55 | f9 61 2c d8 5b 85 ac 40 ff b3 f8 1f 86 93 88 8e | 54 c0 96 ab 17 68 be b6 ad cc 2b d1 77 47 8a 32 | 6a 74 56 7c 62 dc e8 8d 61 0e c8 4b dc 50 a9 59 | fb ac 55 73 e4 e1 62 85 a0 d2 f8 40 25 27 9f 52 | 29 3a 60 4b ff b2 88 b2 32 02 8e f9 c4 ff 76 c1 | 46 7f 5e b6 6f 64 a3 38 e1 99 0c 83 e0 24 f9 9e | 6c 9c 48 65 56 11 47 73 b1 50 a1 b4 94 6d 74 84 | 71 02 41 70 25 f3 eb 2d f7 66 41 4c 4c e7 c8 c7 | 22 a0 6f 09 66 e2 f0 38 16 e1 0d 82 ec 0d 78 5d | a5 22 69 93 e8 1d 20 6e a8 95 47 | start processing: from 192.1.2.45:500 (in process_md() at demux.c:378) | **parse ISAKMP Message: | initiator cookie: | 27 ae 31 26 5e c6 79 93 | responder cookie: | d4 d8 78 73 8a b3 3b d6 | next payload type: ISAKMP_NEXT_v2SKF (0x35) | ISAKMP version: IKEv2 version 2.0 (rfc4306/rfc5996) (0x20) | exchange type: ISAKMP_v2_IKE_AUTH (0x23) | flags: ISAKMP_FLAG_v2_IKE_INIT (0x8) | Message ID: 1 (0x1) | length: 539 (0x21b) | processing version=2.0 packet with exchange type=ISAKMP_v2_IKE_AUTH (35) | I am the IKE SA Original Responder receiving an IKEv2 IKE_AUTH request | State DB: IKEv2 state not found (find_v2_ike_sa) packet from 192.1.2.45:500: IKE_AUTH message request has no corresponding IKE SA | stop processing: from 192.1.2.45:500 (in process_md() at demux.c:380) | processing: STOP state #0 (in process_md() at demux.c:382) | processing: STOP connection NULL (in process_md() at demux.c:383) | spent 0.0857 milliseconds in comm_handle_cb() reading and processing packet | spent 0.00116 milliseconds in comm_handle_cb() calling check_incoming_msg_errqueue() | *received 539 bytes from 192.1.2.45:500 on eth1 (192.1.2.23:500) | 27 ae 31 26 5e c6 79 93 d4 d8 78 73 8a b3 3b d6 | 35 20 23 08 00 00 00 01 00 00 02 1b 00 00 01 ff | 00 04 00 05 e4 6f 03 b2 8f fc 07 8b 98 56 18 8b | b5 d8 85 6c 87 82 af 96 6f 6b af a0 3a 5d 9b 7f | 95 02 e7 4f 82 fc 9a f5 30 d4 3c 89 70 f4 5a 18 | a5 de 9d bc 3c 6d 43 74 51 e0 1a 94 27 34 85 fb | 23 33 db 79 67 03 fb fc 3c ef 7b 32 b4 ef 2e 5d | 95 da 8f c3 70 7c d4 9f fd d3 ae 1e 05 dd 14 c9 | 43 e7 a0 50 e5 8b 6a ea 18 52 37 b0 c8 96 52 7d | a3 f1 d4 aa 6d 6a 8a 52 96 c8 76 d1 7a 58 f8 b4 | a9 67 33 d1 85 3b e6 62 9d 58 9f a8 31 11 d0 84 | c4 30 28 58 56 8b 23 fc 34 f9 f0 39 c6 03 79 83 | dc 3b b7 a4 77 c4 e8 02 fa 77 59 21 05 41 36 0d | cc 0d bf 5c 3e 12 4a f3 1f 9e f3 77 70 30 b7 41 | 5b fb fc c5 e9 25 aa a1 d2 d4 23 fa 4a 92 ab 65 | 33 15 fd 58 25 e8 c0 a6 fa ed 46 3b e8 95 ac da | 64 89 27 ec a6 20 ba 4f 77 86 79 14 2a e6 de 17 | 41 4e 00 fd 2b 6c 6a 96 ed f0 18 9b 1a db ea 4a | a4 79 56 7d 96 e9 5f e9 42 a3 3c 06 07 a6 fe c3 | 3d e7 62 5b dc 68 a8 1a 2d 4b 82 d2 f8 58 44 74 | cc 40 a7 4b 01 2f 4d ff b2 53 60 a8 97 38 de 59 | 75 99 cb 71 cb 4f 60 64 b3 a2 81 99 61 80 6d b4 | cf 24 21 be 53 52 ae 9c a0 14 ef 01 8f dc 9b 10 | 63 78 fa 3d 4f 07 fb 6c 7e 33 cf cf 32 ae bc 5c | c1 19 0a 22 95 c0 bf b3 67 9e 82 7b e1 68 49 41 | 64 30 1f 66 1c 02 c1 d4 70 05 17 fe 92 2b f0 5f | 6c 66 9b 41 b1 2b 77 3f cc 86 8b 08 6d 74 4b fa | cf 07 6b 84 0a a1 5a 8a 5c 4c aa b7 3c 2e f7 56 | f7 61 91 7e c8 60 5d 8b 39 dd 32 ca 53 dd 06 a1 | 93 27 71 cc 83 d0 4f 51 c1 f2 17 f5 25 41 f9 e0 | 1a 29 c6 c3 39 52 7e 68 24 d0 77 9c e4 85 02 82 | 62 eb 80 cf 45 57 9c da 2f 67 20 5c db 29 fd f8 | 53 06 1d cf 31 7f 1a 0f 7d 65 4d ca d8 be 15 9b | 61 09 de ca 67 8b 1d 31 38 f1 da | start processing: from 192.1.2.45:500 (in process_md() at demux.c:378) | **parse ISAKMP Message: | initiator cookie: | 27 ae 31 26 5e c6 79 93 | responder cookie: | d4 d8 78 73 8a b3 3b d6 | next payload type: ISAKMP_NEXT_v2SKF (0x35) | ISAKMP version: IKEv2 version 2.0 (rfc4306/rfc5996) (0x20) | exchange type: ISAKMP_v2_IKE_AUTH (0x23) | flags: ISAKMP_FLAG_v2_IKE_INIT (0x8) | Message ID: 1 (0x1) | length: 539 (0x21b) | processing version=2.0 packet with exchange type=ISAKMP_v2_IKE_AUTH (35) | I am the IKE SA Original Responder receiving an IKEv2 IKE_AUTH request | State DB: IKEv2 state not found (find_v2_ike_sa) packet from 192.1.2.45:500: IKE_AUTH message request has no corresponding IKE SA | stop processing: from 192.1.2.45:500 (in process_md() at demux.c:380) | processing: STOP state #0 (in process_md() at demux.c:382) | processing: STOP connection NULL (in process_md() at demux.c:383) | spent 0.0797 milliseconds in comm_handle_cb() reading and processing packet | spent 0.00113 milliseconds in comm_handle_cb() calling check_incoming_msg_errqueue() | *received 221 bytes from 192.1.2.45:500 on eth1 (192.1.2.23:500) | 27 ae 31 26 5e c6 79 93 d4 d8 78 73 8a b3 3b d6 | 35 20 23 08 00 00 00 01 00 00 00 dd 00 00 00 c1 | 00 05 00 05 2c f4 ce f4 31 44 0b 50 48 02 68 54 | a3 b8 39 2b 35 e0 93 72 2c 9b e3 66 5c 58 ef 19 | 77 d6 76 c9 cb 06 8e 72 e0 ea e7 d0 1e 16 c2 34 | 0d 7e 7d e7 0c df b8 57 75 f3 d9 eb 9e 92 3f 9f | 0a 3b 58 40 f8 fd 38 10 6a 4c 6b cd 5c c4 13 15 | 85 67 f4 13 20 e5 f7 52 d0 7d 78 58 50 f9 17 78 | bf 15 9d d3 34 3f 77 a2 b9 ed a0 53 8c ea b3 ef | 1d 1c 97 9f 0f 89 99 04 cf b4 21 a8 d6 24 80 ab | e1 dd 70 f8 f4 35 ee 8c 51 97 eb 47 13 0a 73 84 | 23 67 ff 0f 6c 4f 6b 1b af bb a8 09 c8 61 8e e7 | 9f 49 64 e6 fa ef 66 5d a7 9d 75 d6 47 04 31 5f | 01 02 94 0e 2c 2b ac ff 3a bc 14 68 31 | start processing: from 192.1.2.45:500 (in process_md() at demux.c:378) | **parse ISAKMP Message: | initiator cookie: | 27 ae 31 26 5e c6 79 93 | responder cookie: | d4 d8 78 73 8a b3 3b d6 | next payload type: ISAKMP_NEXT_v2SKF (0x35) | ISAKMP version: IKEv2 version 2.0 (rfc4306/rfc5996) (0x20) | exchange type: ISAKMP_v2_IKE_AUTH (0x23) | flags: ISAKMP_FLAG_v2_IKE_INIT (0x8) | Message ID: 1 (0x1) | length: 221 (0xdd) | processing version=2.0 packet with exchange type=ISAKMP_v2_IKE_AUTH (35) | I am the IKE SA Original Responder receiving an IKEv2 IKE_AUTH request | State DB: IKEv2 state not found (find_v2_ike_sa) packet from 192.1.2.45:500: IKE_AUTH message request has no corresponding IKE SA | stop processing: from 192.1.2.45:500 (in process_md() at demux.c:380) | processing: STOP state #0 (in process_md() at demux.c:382) | processing: STOP connection NULL (in process_md() at demux.c:383) | spent 0.0527 milliseconds in comm_handle_cb() reading and processing packet | processing global timer EVENT_SHUNT_SCAN | expiring aged bare shunts from shunt table | spent 0.00509 milliseconds in global timer EVENT_SHUNT_SCAN | spent 0.00285 milliseconds in comm_handle_cb() calling check_incoming_msg_errqueue() | *received 539 bytes from 192.1.2.45:500 on eth1 (192.1.2.23:500) | 27 ae 31 26 5e c6 79 93 d4 d8 78 73 8a b3 3b d6 | 35 20 23 08 00 00 00 01 00 00 02 1b 23 00 01 ff | 00 01 00 05 93 7f 0b 7d 21 f8 49 21 6f 45 d2 ea | 37 ff 7d 19 91 e5 d3 3d 84 52 70 02 c0 b7 c8 9b | 6f 95 33 c9 12 09 0b e1 46 6b 95 81 b3 b0 87 09 | 44 87 22 6b 5f dd b4 62 99 9b ae 4a 92 ed 93 6a | 94 ec 9d e5 b7 33 52 71 5f 52 3f be f4 d3 2b 33 | 0f 80 e9 06 74 e6 f2 50 ad 1f bc b3 0c 08 09 c5 | 1c d7 8f 48 e6 74 af 8c fc 77 28 21 44 bc ee 6a | 30 5d fe 22 e0 9c f3 05 24 04 2a 8a 3a 16 f3 70 | 4d 33 05 1a d9 9a 27 26 06 46 48 e6 1f c9 2b 9f | 8f 0b 85 9a 71 d4 4e 13 ea 83 37 60 e3 72 ec d7 | 71 19 da 6a 04 eb d6 92 44 09 c8 25 e3 04 1d f9 | 6c 42 b3 6c 34 f6 f3 32 94 2c 2b 4f 6b 05 5f 1a | 3d 3d 72 78 c6 e4 14 71 c4 4c f5 6d fa 2e a1 26 | c6 97 b0 9c 2e 9c 12 6d cb fd 5b 30 51 bd 6b 72 | 60 5b 1b 8b 2a da 92 81 80 1c af 66 66 be bc ac | ee 17 a0 70 99 6e d7 ef 2d 71 49 1f 33 d1 6c 58 | fd a2 93 8d a6 0c 42 a5 ee 65 05 89 42 62 54 d4 | fb 21 48 3d af 7f a2 2c 83 bb 4d 77 ed 75 40 81 | 00 d0 f0 74 b8 bf 9c 6a 70 36 6f e5 9a d0 d6 fa | 5e 7e b0 3c 59 1d 51 d7 6a 21 d5 44 e8 73 72 d5 | 50 4d 65 dd fc 86 ae 60 ed b1 34 e0 1b 31 04 4c | 40 51 b6 58 b3 c4 61 47 23 06 a3 8e 11 82 03 d5 | ae 6c 65 c0 78 07 3a 5e c1 18 37 77 e6 9a 75 1d | 78 0c ec 03 38 4f 08 19 82 ea fb 89 d6 85 f5 3e | 1a c5 49 72 ca 69 6d 53 e4 69 03 eb 2b 20 8c ca | 03 fd 70 2c 04 68 73 8c b4 f8 4e 06 36 e1 cc 5d | b6 01 e2 cf fe a0 1d 9a 20 f7 47 ab b1 3f 35 47 | 21 9d 12 9c 14 0e 89 07 a0 85 96 fb 0d 0f d4 04 | fe 2e 7a 6a 34 79 44 2f 5a 4c 6f 13 66 0a 62 c5 | 78 d0 18 ce 7c f4 3a 77 6b c5 10 8b d0 2d f5 c9 | 3e 6c 91 81 7e 7a 2c fd a4 d9 71 87 35 9c cb c1 | 94 1d eb b0 71 a2 57 b6 dc 31 61 | start processing: from 192.1.2.45:500 (in process_md() at demux.c:378) | **parse ISAKMP Message: | initiator cookie: | 27 ae 31 26 5e c6 79 93 | responder cookie: | d4 d8 78 73 8a b3 3b d6 | next payload type: ISAKMP_NEXT_v2SKF (0x35) | ISAKMP version: IKEv2 version 2.0 (rfc4306/rfc5996) (0x20) | exchange type: ISAKMP_v2_IKE_AUTH (0x23) | flags: ISAKMP_FLAG_v2_IKE_INIT (0x8) | Message ID: 1 (0x1) | length: 539 (0x21b) | processing version=2.0 packet with exchange type=ISAKMP_v2_IKE_AUTH (35) | I am the IKE SA Original Responder receiving an IKEv2 IKE_AUTH request | State DB: IKEv2 state not found (find_v2_ike_sa) packet from 192.1.2.45:500: IKE_AUTH message request has no corresponding IKE SA | stop processing: from 192.1.2.45:500 (in process_md() at demux.c:380) | processing: STOP state #0 (in process_md() at demux.c:382) | processing: STOP connection NULL (in process_md() at demux.c:383) | spent 0.0964 milliseconds in comm_handle_cb() reading and processing packet | spent 0.00179 milliseconds in comm_handle_cb() calling check_incoming_msg_errqueue() | *received 539 bytes from 192.1.2.45:500 on eth1 (192.1.2.23:500) | 27 ae 31 26 5e c6 79 93 d4 d8 78 73 8a b3 3b d6 | 35 20 23 08 00 00 00 01 00 00 02 1b 00 00 01 ff | 00 02 00 05 59 df ed f0 61 da 0c cf 62 af 31 2a | e4 f9 e5 f9 78 08 d8 7a ac 05 a9 f5 7b de 09 45 | fe 8c a0 4d e1 19 af ef 69 b0 1e 6b 09 a6 ac e3 | 29 ec 89 50 e3 e2 f2 ad 4c 33 a7 e4 20 d7 1c 1a | 26 d6 d7 3e 3c ba 50 16 45 df 05 f8 e6 1a d3 02 | 23 08 7d 7b 38 b9 ee 78 0a 6e 0a bc 21 50 47 65 | c2 b4 7b 56 72 3b 3a 60 ce 9d 14 ee 39 86 2b 23 | df 5e 6c 31 b9 ef 00 70 f1 32 71 59 07 0d 1c 11 | 09 b5 c0 d1 3d 99 a9 ae b9 a6 dd 04 d9 09 f7 96 | b7 c7 ef fb b6 f1 25 e1 b4 e2 94 0c 13 33 9a 2d | 55 5f c9 ee 94 d5 f2 6d fb 37 b7 79 68 bb fb 69 | d3 a6 83 4f 61 0f 31 d1 eb ff 96 5b 71 fe 26 6f | e1 15 f7 5c 1d 4e 70 e7 4d 93 d4 07 4a 59 84 fb | 83 ce 63 fa 50 d7 94 57 69 32 2b da 75 d3 38 d6 | 77 d1 46 cc f5 45 af 2e be cd 16 15 30 1a 9e 1e | c9 d7 d6 51 85 47 60 80 2b d8 84 36 e7 11 7e 0d | 47 fe 10 7e c3 a2 a7 a6 96 d4 dd 57 a2 39 43 ea | 45 ac 84 3a 82 0f 6a b0 20 ad b6 59 36 9f 99 ad | e0 67 d8 15 b4 c2 a7 5c b5 33 e0 a6 c6 43 4c 5c | f5 b8 88 b2 64 d1 f3 2f 15 b0 31 76 6b df e5 55 | 89 fa 48 f6 79 a3 50 e1 6c 69 65 c8 47 c5 dd 56 | b5 f7 36 bc a8 8e cc 33 f9 c5 47 5d 19 5f 03 a5 | b9 3c dd 93 af 0d d2 2a e7 a4 67 db d1 a8 f5 82 | 87 b1 d2 74 6c a1 eb cb 52 5e 4d 40 eb 4e 0c 1d | b9 b3 19 ba e6 45 4b 6a 60 75 df 29 4d 2f 4d a0 | 30 6b e5 f2 de d6 ee a2 0f a1 43 62 5d 03 21 7c | 50 32 be 0e dc e3 13 3d 67 73 7f 65 5c fa 7b b8 | 97 1d 87 de 37 7f 0f b1 e2 bd 1b 33 f6 d8 83 3b | 60 3b 42 30 0c 89 a4 db a9 5b 2e 7a 53 60 68 fc | f0 79 38 b0 28 f4 a1 9a 47 48 7e f1 34 4d 2b 2b | 28 10 b2 26 ca 90 a9 0a e2 d7 73 50 bb 56 12 28 | 79 c6 e7 ea c5 d0 12 79 f2 d2 98 | start processing: from 192.1.2.45:500 (in process_md() at demux.c:378) | **parse ISAKMP Message: | initiator cookie: | 27 ae 31 26 5e c6 79 93 | responder cookie: | d4 d8 78 73 8a b3 3b d6 | next payload type: ISAKMP_NEXT_v2SKF (0x35) | ISAKMP version: IKEv2 version 2.0 (rfc4306/rfc5996) (0x20) | exchange type: ISAKMP_v2_IKE_AUTH (0x23) | flags: ISAKMP_FLAG_v2_IKE_INIT (0x8) | Message ID: 1 (0x1) | length: 539 (0x21b) | processing version=2.0 packet with exchange type=ISAKMP_v2_IKE_AUTH (35) | I am the IKE SA Original Responder receiving an IKEv2 IKE_AUTH request | State DB: IKEv2 state not found (find_v2_ike_sa) packet from 192.1.2.45:500: IKE_AUTH message request has no corresponding IKE SA | stop processing: from 192.1.2.45:500 (in process_md() at demux.c:380) | processing: STOP state #0 (in process_md() at demux.c:382) | processing: STOP connection NULL (in process_md() at demux.c:383) | spent 0.107 milliseconds in comm_handle_cb() reading and processing packet | spent 0.002 milliseconds in comm_handle_cb() calling check_incoming_msg_errqueue() | *received 539 bytes from 192.1.2.45:500 on eth1 (192.1.2.23:500) | 27 ae 31 26 5e c6 79 93 d4 d8 78 73 8a b3 3b d6 | 35 20 23 08 00 00 00 01 00 00 02 1b 00 00 01 ff | 00 03 00 05 e3 cb 6d 2a 20 a0 78 06 91 4f 44 08 | 98 d3 70 32 51 e8 94 b9 93 8d 6c d5 7d 51 de f0 | 94 9d 69 63 da ac b9 f4 5b 91 e6 8d 64 5d 3c ad | e6 c6 78 bb b2 8f 7d 55 fb e4 76 d4 a9 f4 81 37 | 11 7b fc 1b 2d 6f de 8a 3b c2 f9 33 f1 f4 1c b8 | ae 04 e3 15 7f 2f ac 16 c5 91 70 2b 60 d3 04 7d | 47 77 4f 55 6c a5 2c 95 ff 1c b9 be 75 4a 14 5e | 84 fa 66 ea 84 41 14 ae b0 da 7a b3 62 9e 34 54 | c0 23 3a dc ba 77 3f 10 20 7e 13 23 fd 2d d0 05 | f0 fd 06 f0 9d ec a5 c6 7f 39 23 89 60 91 ef 2e | 53 82 eb 21 88 a9 b1 b3 c7 36 ed 97 5d ac 87 44 | 4d b2 59 dc 21 20 81 f6 e9 78 d8 b0 4e 5c 20 d0 | c1 51 ea 9e 6f 5d fd 2b a9 60 58 f9 60 29 bb bc | 09 11 2f 31 56 d9 d1 1f 92 9e a2 6f ea 68 98 61 | 89 1f e0 d1 93 43 f7 d8 3b 90 b2 3b f3 66 ef 0b | f8 0a 5a c8 52 20 cd b6 8b 97 e8 16 fb 04 98 45 | 13 e7 0d e9 05 37 d9 93 31 e1 04 ad 53 b3 e1 cb | c0 63 95 b8 91 01 e3 a0 f2 e3 29 56 b9 ab c6 72 | 46 3c 43 f7 74 35 6c 82 b8 ee 51 24 93 d9 9e 0c | 79 de 0b a1 3b ee 3c c7 bc d5 bc c2 1a 4a ce d4 | 78 f7 a5 83 44 e2 77 fc d6 b5 7c 32 4d 0c d7 11 | 47 c7 fd 80 f9 0a b7 6d b8 8c ca f0 c9 d7 e6 55 | f9 61 2c d8 5b 85 ac 40 ff b3 f8 1f 86 93 88 8e | 54 c0 96 ab 17 68 be b6 ad cc 2b d1 77 47 8a 32 | 6a 74 56 7c 62 dc e8 8d 61 0e c8 4b dc 50 a9 59 | fb ac 55 73 e4 e1 62 85 a0 d2 f8 40 25 27 9f 52 | 29 3a 60 4b ff b2 88 b2 32 02 8e f9 c4 ff 76 c1 | 46 7f 5e b6 6f 64 a3 38 e1 99 0c 83 e0 24 f9 9e | 6c 9c 48 65 56 11 47 73 b1 50 a1 b4 94 6d 74 84 | 71 02 41 70 25 f3 eb 2d f7 66 41 4c 4c e7 c8 c7 | 22 a0 6f 09 66 e2 f0 38 16 e1 0d 82 ec 0d 78 5d | a5 22 69 93 e8 1d 20 6e a8 95 47 | start processing: from 192.1.2.45:500 (in process_md() at demux.c:378) | **parse ISAKMP Message: | initiator cookie: | 27 ae 31 26 5e c6 79 93 | responder cookie: | d4 d8 78 73 8a b3 3b d6 | next payload type: ISAKMP_NEXT_v2SKF (0x35) | ISAKMP version: IKEv2 version 2.0 (rfc4306/rfc5996) (0x20) | exchange type: ISAKMP_v2_IKE_AUTH (0x23) | flags: ISAKMP_FLAG_v2_IKE_INIT (0x8) | Message ID: 1 (0x1) | length: 539 (0x21b) | processing version=2.0 packet with exchange type=ISAKMP_v2_IKE_AUTH (35) | I am the IKE SA Original Responder receiving an IKEv2 IKE_AUTH request | State DB: IKEv2 state not found (find_v2_ike_sa) packet from 192.1.2.45:500: IKE_AUTH message request has no corresponding IKE SA | stop processing: from 192.1.2.45:500 (in process_md() at demux.c:380) | processing: STOP state #0 (in process_md() at demux.c:382) | processing: STOP connection NULL (in process_md() at demux.c:383) | spent 0.0668 milliseconds in comm_handle_cb() reading and processing packet | spent 0.00101 milliseconds in comm_handle_cb() calling check_incoming_msg_errqueue() | *received 539 bytes from 192.1.2.45:500 on eth1 (192.1.2.23:500) | 27 ae 31 26 5e c6 79 93 d4 d8 78 73 8a b3 3b d6 | 35 20 23 08 00 00 00 01 00 00 02 1b 00 00 01 ff | 00 04 00 05 e4 6f 03 b2 8f fc 07 8b 98 56 18 8b | b5 d8 85 6c 87 82 af 96 6f 6b af a0 3a 5d 9b 7f | 95 02 e7 4f 82 fc 9a f5 30 d4 3c 89 70 f4 5a 18 | a5 de 9d bc 3c 6d 43 74 51 e0 1a 94 27 34 85 fb | 23 33 db 79 67 03 fb fc 3c ef 7b 32 b4 ef 2e 5d | 95 da 8f c3 70 7c d4 9f fd d3 ae 1e 05 dd 14 c9 | 43 e7 a0 50 e5 8b 6a ea 18 52 37 b0 c8 96 52 7d | a3 f1 d4 aa 6d 6a 8a 52 96 c8 76 d1 7a 58 f8 b4 | a9 67 33 d1 85 3b e6 62 9d 58 9f a8 31 11 d0 84 | c4 30 28 58 56 8b 23 fc 34 f9 f0 39 c6 03 79 83 | dc 3b b7 a4 77 c4 e8 02 fa 77 59 21 05 41 36 0d | cc 0d bf 5c 3e 12 4a f3 1f 9e f3 77 70 30 b7 41 | 5b fb fc c5 e9 25 aa a1 d2 d4 23 fa 4a 92 ab 65 | 33 15 fd 58 25 e8 c0 a6 fa ed 46 3b e8 95 ac da | 64 89 27 ec a6 20 ba 4f 77 86 79 14 2a e6 de 17 | 41 4e 00 fd 2b 6c 6a 96 ed f0 18 9b 1a db ea 4a | a4 79 56 7d 96 e9 5f e9 42 a3 3c 06 07 a6 fe c3 | 3d e7 62 5b dc 68 a8 1a 2d 4b 82 d2 f8 58 44 74 | cc 40 a7 4b 01 2f 4d ff b2 53 60 a8 97 38 de 59 | 75 99 cb 71 cb 4f 60 64 b3 a2 81 99 61 80 6d b4 | cf 24 21 be 53 52 ae 9c a0 14 ef 01 8f dc 9b 10 | 63 78 fa 3d 4f 07 fb 6c 7e 33 cf cf 32 ae bc 5c | c1 19 0a 22 95 c0 bf b3 67 9e 82 7b e1 68 49 41 | 64 30 1f 66 1c 02 c1 d4 70 05 17 fe 92 2b f0 5f | 6c 66 9b 41 b1 2b 77 3f cc 86 8b 08 6d 74 4b fa | cf 07 6b 84 0a a1 5a 8a 5c 4c aa b7 3c 2e f7 56 | f7 61 91 7e c8 60 5d 8b 39 dd 32 ca 53 dd 06 a1 | 93 27 71 cc 83 d0 4f 51 c1 f2 17 f5 25 41 f9 e0 | 1a 29 c6 c3 39 52 7e 68 24 d0 77 9c e4 85 02 82 | 62 eb 80 cf 45 57 9c da 2f 67 20 5c db 29 fd f8 | 53 06 1d cf 31 7f 1a 0f 7d 65 4d ca d8 be 15 9b | 61 09 de ca 67 8b 1d 31 38 f1 da | start processing: from 192.1.2.45:500 (in process_md() at demux.c:378) | **parse ISAKMP Message: | initiator cookie: | 27 ae 31 26 5e c6 79 93 | responder cookie: | d4 d8 78 73 8a b3 3b d6 | next payload type: ISAKMP_NEXT_v2SKF (0x35) | ISAKMP version: IKEv2 version 2.0 (rfc4306/rfc5996) (0x20) | exchange type: ISAKMP_v2_IKE_AUTH (0x23) | flags: ISAKMP_FLAG_v2_IKE_INIT (0x8) | Message ID: 1 (0x1) | length: 539 (0x21b) | processing version=2.0 packet with exchange type=ISAKMP_v2_IKE_AUTH (35) | I am the IKE SA Original Responder receiving an IKEv2 IKE_AUTH request | State DB: IKEv2 state not found (find_v2_ike_sa) packet from 192.1.2.45:500: IKE_AUTH message request has no corresponding IKE SA | stop processing: from 192.1.2.45:500 (in process_md() at demux.c:380) | processing: STOP state #0 (in process_md() at demux.c:382) | processing: STOP connection NULL (in process_md() at demux.c:383) | spent 0.0649 milliseconds in comm_handle_cb() reading and processing packet | spent 0.000956 milliseconds in comm_handle_cb() calling check_incoming_msg_errqueue() | *received 221 bytes from 192.1.2.45:500 on eth1 (192.1.2.23:500) | 27 ae 31 26 5e c6 79 93 d4 d8 78 73 8a b3 3b d6 | 35 20 23 08 00 00 00 01 00 00 00 dd 00 00 00 c1 | 00 05 00 05 2c f4 ce f4 31 44 0b 50 48 02 68 54 | a3 b8 39 2b 35 e0 93 72 2c 9b e3 66 5c 58 ef 19 | 77 d6 76 c9 cb 06 8e 72 e0 ea e7 d0 1e 16 c2 34 | 0d 7e 7d e7 0c df b8 57 75 f3 d9 eb 9e 92 3f 9f | 0a 3b 58 40 f8 fd 38 10 6a 4c 6b cd 5c c4 13 15 | 85 67 f4 13 20 e5 f7 52 d0 7d 78 58 50 f9 17 78 | bf 15 9d d3 34 3f 77 a2 b9 ed a0 53 8c ea b3 ef | 1d 1c 97 9f 0f 89 99 04 cf b4 21 a8 d6 24 80 ab | e1 dd 70 f8 f4 35 ee 8c 51 97 eb 47 13 0a 73 84 | 23 67 ff 0f 6c 4f 6b 1b af bb a8 09 c8 61 8e e7 | 9f 49 64 e6 fa ef 66 5d a7 9d 75 d6 47 04 31 5f | 01 02 94 0e 2c 2b ac ff 3a bc 14 68 31 | start processing: from 192.1.2.45:500 (in process_md() at demux.c:378) | **parse ISAKMP Message: | initiator cookie: | 27 ae 31 26 5e c6 79 93 | responder cookie: | d4 d8 78 73 8a b3 3b d6 | next payload type: ISAKMP_NEXT_v2SKF (0x35) | ISAKMP version: IKEv2 version 2.0 (rfc4306/rfc5996) (0x20) | exchange type: ISAKMP_v2_IKE_AUTH (0x23) | flags: ISAKMP_FLAG_v2_IKE_INIT (0x8) | Message ID: 1 (0x1) | length: 221 (0xdd) | processing version=2.0 packet with exchange type=ISAKMP_v2_IKE_AUTH (35) | I am the IKE SA Original Responder receiving an IKEv2 IKE_AUTH request | State DB: IKEv2 state not found (find_v2_ike_sa) packet from 192.1.2.45:500: IKE_AUTH message request has no corresponding IKE SA | stop processing: from 192.1.2.45:500 (in process_md() at demux.c:380) | processing: STOP state #0 (in process_md() at demux.c:382) | processing: STOP connection NULL (in process_md() at demux.c:383) | spent 0.045 milliseconds in comm_handle_cb() reading and processing packet