Aug 26 18:24:47.796640: FIPS Product: YES Aug 26 18:24:47.796673: FIPS Kernel: NO Aug 26 18:24:47.796676: FIPS Mode: NO Aug 26 18:24:47.796677: NSS DB directory: sql:/etc/ipsec.d Aug 26 18:24:47.796813: Initializing NSS Aug 26 18:24:47.796821: Opening NSS database "sql:/etc/ipsec.d" read-only Aug 26 18:24:47.823057: NSS initialized Aug 26 18:24:47.823075: NSS crypto library initialized Aug 26 18:24:47.823079: FIPS HMAC integrity support [enabled] Aug 26 18:24:47.823081: FIPS mode disabled for pluto daemon Aug 26 18:24:47.851185: FIPS HMAC integrity verification self-test FAILED Aug 26 18:24:47.851298: libcap-ng support [enabled] Aug 26 18:24:47.851312: Linux audit support [enabled] Aug 26 18:24:47.851352: Linux audit activated Aug 26 18:24:47.851358: Starting Pluto (Libreswan Version v3.28-685-gbfd5aef521-master-s2 XFRM(netkey) esp-hw-offload FORK PTHREAD_SETSCHEDPRIO NSS (IPsec profile) DNSSEC FIPS_CHECK LABELED_IPSEC SECCOMP LIBCAP_NG LINUX_AUDIT XAUTH_PAM NETWORKMANAGER CURL(non-NSS)) pid:26700 Aug 26 18:24:47.851362: core dump dir: /tmp Aug 26 18:24:47.851365: secrets file: /etc/ipsec.secrets Aug 26 18:24:47.851367: leak-detective enabled Aug 26 18:24:47.851370: NSS crypto [enabled] Aug 26 18:24:47.851372: XAUTH PAM support [enabled] Aug 26 18:24:47.851446: | libevent is using pluto's memory allocator Aug 26 18:24:47.851456: Initializing libevent in pthreads mode: headers: 2.1.8-stable (2010800); library: 2.1.8-stable (2010800) Aug 26 18:24:47.851473: | libevent_malloc: new ptr-libevent@0x55a956636138 size 40 Aug 26 18:24:47.851481: | libevent_malloc: new ptr-libevent@0x55a956630cd8 size 40 Aug 26 18:24:47.851485: | libevent_malloc: new ptr-libevent@0x55a956630dd8 size 40 Aug 26 18:24:47.851488: | creating event base Aug 26 18:24:47.851492: | libevent_malloc: new ptr-libevent@0x55a9566b5408 size 56 Aug 26 18:24:47.851497: | libevent_malloc: new ptr-libevent@0x55a956659c88 size 664 Aug 26 18:24:47.851509: | libevent_malloc: new ptr-libevent@0x55a9566b5478 size 24 Aug 26 18:24:47.851513: | libevent_malloc: new ptr-libevent@0x55a9566b54c8 size 384 Aug 26 18:24:47.851524: | libevent_malloc: new ptr-libevent@0x55a9566b53c8 size 16 Aug 26 18:24:47.851528: | libevent_malloc: new ptr-libevent@0x55a956630908 size 40 Aug 26 18:24:47.851531: | libevent_malloc: new ptr-libevent@0x55a956630d38 size 48 Aug 26 18:24:47.851536: | libevent_realloc: new ptr-libevent@0x55a956659918 size 256 Aug 26 18:24:47.851539: | libevent_malloc: new ptr-libevent@0x55a9566b5678 size 16 Aug 26 18:24:47.851545: | libevent_free: release ptr-libevent@0x55a9566b5408 Aug 26 18:24:47.851550: | libevent initialized Aug 26 18:24:47.851553: | libevent_realloc: new ptr-libevent@0x55a9566b5408 size 64 Aug 26 18:24:47.851557: | global periodic timer EVENT_RESET_LOG_RATE_LIMIT enabled with interval of 3600 seconds Aug 26 18:24:47.851571: | init_nat_traversal() initialized with keep_alive=0s Aug 26 18:24:47.851574: NAT-Traversal support [enabled] Aug 26 18:24:47.851577: | global one-shot timer EVENT_NAT_T_KEEPALIVE initialized Aug 26 18:24:47.851584: | global one-shot timer EVENT_FREE_ROOT_CERTS initialized Aug 26 18:24:47.851587: | global periodic timer EVENT_REINIT_SECRET enabled with interval of 3600 seconds Aug 26 18:24:47.851617: | global one-shot timer EVENT_REVIVE_CONNS initialized Aug 26 18:24:47.851623: | global periodic timer EVENT_PENDING_DDNS enabled with interval of 60 seconds Aug 26 18:24:47.851627: | global periodic timer EVENT_PENDING_PHASE2 enabled with interval of 120 seconds Aug 26 18:24:47.851667: Encryption algorithms: Aug 26 18:24:47.851677: AES_CCM_16 IKEv1: ESP IKEv2: ESP FIPS {256,192,*128} aes_ccm, aes_ccm_c Aug 26 18:24:47.851681: AES_CCM_12 IKEv1: ESP IKEv2: ESP FIPS {256,192,*128} aes_ccm_b Aug 26 18:24:47.851685: AES_CCM_8 IKEv1: ESP IKEv2: ESP FIPS {256,192,*128} aes_ccm_a Aug 26 18:24:47.851689: 3DES_CBC IKEv1: IKE ESP IKEv2: IKE ESP FIPS [*192] 3des Aug 26 18:24:47.851693: CAMELLIA_CTR IKEv1: ESP IKEv2: ESP {256,192,*128} Aug 26 18:24:47.851702: CAMELLIA_CBC IKEv1: IKE ESP IKEv2: IKE ESP {256,192,*128} camellia Aug 26 18:24:47.851707: AES_GCM_16 IKEv1: ESP IKEv2: IKE ESP FIPS {256,192,*128} aes_gcm, aes_gcm_c Aug 26 18:24:47.851711: AES_GCM_12 IKEv1: ESP IKEv2: IKE ESP FIPS {256,192,*128} aes_gcm_b Aug 26 18:24:47.851715: AES_GCM_8 IKEv1: ESP IKEv2: IKE ESP FIPS {256,192,*128} aes_gcm_a Aug 26 18:24:47.851718: AES_CTR IKEv1: IKE ESP IKEv2: IKE ESP FIPS {256,192,*128} aesctr Aug 26 18:24:47.851720: AES_CBC IKEv1: IKE ESP IKEv2: IKE ESP FIPS {256,192,*128} aes Aug 26 18:24:47.851722: SERPENT_CBC IKEv1: IKE ESP IKEv2: IKE ESP {256,192,*128} serpent Aug 26 18:24:47.851725: TWOFISH_CBC IKEv1: IKE ESP IKEv2: IKE ESP {256,192,*128} twofish Aug 26 18:24:47.851727: TWOFISH_SSH IKEv1: IKE IKEv2: IKE ESP {256,192,*128} twofish_cbc_ssh Aug 26 18:24:47.851729: NULL_AUTH_AES_GMAC IKEv1: ESP IKEv2: ESP FIPS {256,192,*128} aes_gmac Aug 26 18:24:47.851731: NULL IKEv1: ESP IKEv2: ESP [] Aug 26 18:24:47.851733: CHACHA20_POLY1305 IKEv1: IKEv2: IKE ESP [*256] chacha20poly1305 Aug 26 18:24:47.851738: Hash algorithms: Aug 26 18:24:47.851740: MD5 IKEv1: IKE IKEv2: Aug 26 18:24:47.851742: SHA1 IKEv1: IKE IKEv2: FIPS sha Aug 26 18:24:47.851744: SHA2_256 IKEv1: IKE IKEv2: FIPS sha2, sha256 Aug 26 18:24:47.851746: SHA2_384 IKEv1: IKE IKEv2: FIPS sha384 Aug 26 18:24:47.851748: SHA2_512 IKEv1: IKE IKEv2: FIPS sha512 Aug 26 18:24:47.851757: PRF algorithms: Aug 26 18:24:47.851759: HMAC_MD5 IKEv1: IKE IKEv2: IKE md5 Aug 26 18:24:47.851761: HMAC_SHA1 IKEv1: IKE IKEv2: IKE FIPS sha, sha1 Aug 26 18:24:47.851763: HMAC_SHA2_256 IKEv1: IKE IKEv2: IKE FIPS sha2, sha256, sha2_256 Aug 26 18:24:47.851765: HMAC_SHA2_384 IKEv1: IKE IKEv2: IKE FIPS sha384, sha2_384 Aug 26 18:24:47.851768: HMAC_SHA2_512 IKEv1: IKE IKEv2: IKE FIPS sha512, sha2_512 Aug 26 18:24:47.851769: AES_XCBC IKEv1: IKEv2: IKE aes128_xcbc Aug 26 18:24:47.851786: Integrity algorithms: Aug 26 18:24:47.851788: HMAC_MD5_96 IKEv1: IKE ESP AH IKEv2: IKE ESP AH md5, hmac_md5 Aug 26 18:24:47.851791: HMAC_SHA1_96 IKEv1: IKE ESP AH IKEv2: IKE ESP AH FIPS sha, sha1, sha1_96, hmac_sha1 Aug 26 18:24:47.851793: HMAC_SHA2_512_256 IKEv1: IKE ESP AH IKEv2: IKE ESP AH FIPS sha512, sha2_512, sha2_512_256, hmac_sha2_512 Aug 26 18:24:47.851796: HMAC_SHA2_384_192 IKEv1: IKE ESP AH IKEv2: IKE ESP AH FIPS sha384, sha2_384, sha2_384_192, hmac_sha2_384 Aug 26 18:24:47.851798: HMAC_SHA2_256_128 IKEv1: IKE ESP AH IKEv2: IKE ESP AH FIPS sha2, sha256, sha2_256, sha2_256_128, hmac_sha2_256 Aug 26 18:24:47.851800: HMAC_SHA2_256_TRUNCBUG IKEv1: ESP AH IKEv2: AH Aug 26 18:24:47.851802: AES_XCBC_96 IKEv1: ESP AH IKEv2: IKE ESP AH aes_xcbc, aes128_xcbc, aes128_xcbc_96 Aug 26 18:24:47.851804: AES_CMAC_96 IKEv1: ESP AH IKEv2: ESP AH FIPS aes_cmac Aug 26 18:24:47.851806: NONE IKEv1: ESP IKEv2: IKE ESP FIPS null Aug 26 18:24:47.851814: DH algorithms: Aug 26 18:24:47.851816: NONE IKEv1: IKEv2: IKE ESP AH FIPS null, dh0 Aug 26 18:24:47.851818: MODP1536 IKEv1: IKE ESP AH IKEv2: IKE ESP AH dh5 Aug 26 18:24:47.851820: MODP2048 IKEv1: IKE ESP AH IKEv2: IKE ESP AH FIPS dh14 Aug 26 18:24:47.851824: MODP3072 IKEv1: IKE ESP AH IKEv2: IKE ESP AH FIPS dh15 Aug 26 18:24:47.851826: MODP4096 IKEv1: IKE ESP AH IKEv2: IKE ESP AH FIPS dh16 Aug 26 18:24:47.851828: MODP6144 IKEv1: IKE ESP AH IKEv2: IKE ESP AH FIPS dh17 Aug 26 18:24:47.851830: MODP8192 IKEv1: IKE ESP AH IKEv2: IKE ESP AH FIPS dh18 Aug 26 18:24:47.851832: DH19 IKEv1: IKE IKEv2: IKE ESP AH FIPS ecp_256, ecp256 Aug 26 18:24:47.851834: DH20 IKEv1: IKE IKEv2: IKE ESP AH FIPS ecp_384, ecp384 Aug 26 18:24:47.851836: DH21 IKEv1: IKE IKEv2: IKE ESP AH FIPS ecp_521, ecp521 Aug 26 18:24:47.851838: DH31 IKEv1: IKE IKEv2: IKE ESP AH curve25519 Aug 26 18:24:47.851839: testing CAMELLIA_CBC: Aug 26 18:24:47.851841: Camellia: 16 bytes with 128-bit key Aug 26 18:24:47.851930: Camellia: 16 bytes with 128-bit key Aug 26 18:24:47.851949: Camellia: 16 bytes with 256-bit key Aug 26 18:24:47.851967: Camellia: 16 bytes with 256-bit key Aug 26 18:24:47.851985: testing AES_GCM_16: Aug 26 18:24:47.851987: empty string Aug 26 18:24:47.852005: one block Aug 26 18:24:47.852021: two blocks Aug 26 18:24:47.852037: two blocks with associated data Aug 26 18:24:47.852054: testing AES_CTR: Aug 26 18:24:47.852056: Encrypting 16 octets using AES-CTR with 128-bit key Aug 26 18:24:47.852072: Encrypting 32 octets using AES-CTR with 128-bit key Aug 26 18:24:47.852090: Encrypting 36 octets using AES-CTR with 128-bit key Aug 26 18:24:47.852109: Encrypting 16 octets using AES-CTR with 192-bit key Aug 26 18:24:47.852125: Encrypting 32 octets using AES-CTR with 192-bit key Aug 26 18:24:47.852142: Encrypting 36 octets using AES-CTR with 192-bit key Aug 26 18:24:47.852159: Encrypting 16 octets using AES-CTR with 256-bit key Aug 26 18:24:47.852175: Encrypting 32 octets using AES-CTR with 256-bit key Aug 26 18:24:47.852192: Encrypting 36 octets using AES-CTR with 256-bit key Aug 26 18:24:47.852210: testing AES_CBC: Aug 26 18:24:47.852212: Encrypting 16 bytes (1 block) using AES-CBC with 128-bit key Aug 26 18:24:47.852228: Encrypting 32 bytes (2 blocks) using AES-CBC with 128-bit key Aug 26 18:24:47.852246: Encrypting 48 bytes (3 blocks) using AES-CBC with 128-bit key Aug 26 18:24:47.852264: Encrypting 64 bytes (4 blocks) using AES-CBC with 128-bit key Aug 26 18:24:47.852284: testing AES_XCBC: Aug 26 18:24:47.852286: RFC 3566 Test Case #1: AES-XCBC-MAC-96 with 0-byte input Aug 26 18:24:47.852389: RFC 3566 Test Case #2: AES-XCBC-MAC-96 with 3-byte input Aug 26 18:24:47.852472: RFC 3566 Test Case #3: AES-XCBC-MAC-96 with 16-byte input Aug 26 18:24:47.852545: RFC 3566 Test Case #4: AES-XCBC-MAC-96 with 20-byte input Aug 26 18:24:47.852620: RFC 3566 Test Case #5: AES-XCBC-MAC-96 with 32-byte input Aug 26 18:24:47.852694: RFC 3566 Test Case #6: AES-XCBC-MAC-96 with 34-byte input Aug 26 18:24:47.852795: RFC 3566 Test Case #7: AES-XCBC-MAC-96 with 1000-byte input Aug 26 18:24:47.852988: RFC 4434 Test Case AES-XCBC-PRF-128 with 20-byte input (key length 16) Aug 26 18:24:47.853067: RFC 4434 Test Case AES-XCBC-PRF-128 with 20-byte input (key length 10) Aug 26 18:24:47.853147: RFC 4434 Test Case AES-XCBC-PRF-128 with 20-byte input (key length 18) Aug 26 18:24:47.853287: testing HMAC_MD5: Aug 26 18:24:47.853313: RFC 2104: MD5_HMAC test 1 Aug 26 18:24:47.853432: RFC 2104: MD5_HMAC test 2 Aug 26 18:24:47.853539: RFC 2104: MD5_HMAC test 3 Aug 26 18:24:47.853660: 8 CPU cores online Aug 26 18:24:47.853663: starting up 7 crypto helpers Aug 26 18:24:47.853688: started thread for crypto helper 0 Aug 26 18:24:47.853708: started thread for crypto helper 1 Aug 26 18:24:47.853713: | starting up helper thread 1 Aug 26 18:24:47.853732: started thread for crypto helper 2 Aug 26 18:24:47.853732: | status value returned by setting the priority of this thread (crypto helper 1) 22 Aug 26 18:24:47.853739: | starting up helper thread 2 Aug 26 18:24:47.853765: | status value returned by setting the priority of this thread (crypto helper 2) 22 Aug 26 18:24:47.853744: | crypto helper 1 waiting (nothing to do) Aug 26 18:24:47.853753: | starting up helper thread 0 Aug 26 18:24:47.853781: | crypto helper 2 waiting (nothing to do) Aug 26 18:24:47.853767: started thread for crypto helper 3 Aug 26 18:24:47.853787: | status value returned by setting the priority of this thread (crypto helper 0) 22 Aug 26 18:24:47.853800: | crypto helper 0 waiting (nothing to do) Aug 26 18:24:47.853810: started thread for crypto helper 4 Aug 26 18:24:47.853813: | starting up helper thread 4 Aug 26 18:24:47.853826: | status value returned by setting the priority of this thread (crypto helper 4) 22 Aug 26 18:24:47.853830: | crypto helper 4 waiting (nothing to do) Aug 26 18:24:47.853841: started thread for crypto helper 5 Aug 26 18:24:47.853857: started thread for crypto helper 6 Aug 26 18:24:47.853865: | starting up helper thread 5 Aug 26 18:24:47.853861: | starting up helper thread 6 Aug 26 18:24:47.853872: | status value returned by setting the priority of this thread (crypto helper 5) 22 Aug 26 18:24:47.853876: | status value returned by setting the priority of this thread (crypto helper 6) 22 Aug 26 18:24:47.853879: | crypto helper 6 waiting (nothing to do) Aug 26 18:24:47.853882: | crypto helper 5 waiting (nothing to do) Aug 26 18:24:47.853861: | checking IKEv1 state table Aug 26 18:24:47.853898: | MAIN_R0: category: half-open IKE SA flags: 0: Aug 26 18:24:47.853902: | -> MAIN_R1 EVENT_SO_DISCARD Aug 26 18:24:47.853905: | MAIN_I1: category: half-open IKE SA flags: 0: Aug 26 18:24:47.853907: | -> MAIN_I2 EVENT_RETRANSMIT Aug 26 18:24:47.853910: | MAIN_R1: category: open IKE SA flags: 200: Aug 26 18:24:47.853913: | -> MAIN_R2 EVENT_RETRANSMIT Aug 26 18:24:47.853915: | -> UNDEFINED EVENT_RETRANSMIT Aug 26 18:24:47.853918: | -> UNDEFINED EVENT_RETRANSMIT Aug 26 18:24:47.853921: | MAIN_I2: category: open IKE SA flags: 0: Aug 26 18:24:47.853923: | -> MAIN_I3 EVENT_RETRANSMIT Aug 26 18:24:47.853926: | -> UNDEFINED EVENT_RETRANSMIT Aug 26 18:24:47.853929: | -> UNDEFINED EVENT_RETRANSMIT Aug 26 18:24:47.853932: | MAIN_R2: category: open IKE SA flags: 0: Aug 26 18:24:47.853935: | -> MAIN_R3 EVENT_SA_REPLACE Aug 26 18:24:47.853938: | -> MAIN_R3 EVENT_SA_REPLACE Aug 26 18:24:47.853940: | -> UNDEFINED EVENT_SA_REPLACE Aug 26 18:24:47.853943: | MAIN_I3: category: open IKE SA flags: 0: Aug 26 18:24:47.853946: | -> MAIN_I4 EVENT_SA_REPLACE Aug 26 18:24:47.853949: | -> MAIN_I4 EVENT_SA_REPLACE Aug 26 18:24:47.853951: | -> UNDEFINED EVENT_SA_REPLACE Aug 26 18:24:47.853955: | MAIN_R3: category: established IKE SA flags: 200: Aug 26 18:24:47.853957: | -> UNDEFINED EVENT_NULL Aug 26 18:24:47.853960: | MAIN_I4: category: established IKE SA flags: 0: Aug 26 18:24:47.853963: | -> UNDEFINED EVENT_NULL Aug 26 18:24:47.853965: | AGGR_R0: category: half-open IKE SA flags: 0: Aug 26 18:24:47.853968: | -> AGGR_R1 EVENT_SO_DISCARD Aug 26 18:24:47.853971: | AGGR_I1: category: half-open IKE SA flags: 0: Aug 26 18:24:47.853973: | -> AGGR_I2 EVENT_SA_REPLACE Aug 26 18:24:47.853975: | -> AGGR_I2 EVENT_SA_REPLACE Aug 26 18:24:47.853978: | AGGR_R1: category: open IKE SA flags: 200: Aug 26 18:24:47.853981: | -> AGGR_R2 EVENT_SA_REPLACE Aug 26 18:24:47.853983: | -> AGGR_R2 EVENT_SA_REPLACE Aug 26 18:24:47.853986: | AGGR_I2: category: established IKE SA flags: 200: Aug 26 18:24:47.853988: | -> UNDEFINED EVENT_NULL Aug 26 18:24:47.853991: | AGGR_R2: category: established IKE SA flags: 0: Aug 26 18:24:47.853994: | -> UNDEFINED EVENT_NULL Aug 26 18:24:47.853997: | QUICK_R0: category: established CHILD SA flags: 0: Aug 26 18:24:47.853999: | -> QUICK_R1 EVENT_RETRANSMIT Aug 26 18:24:47.854002: | QUICK_I1: category: established CHILD SA flags: 0: Aug 26 18:24:47.854005: | -> QUICK_I2 EVENT_SA_REPLACE Aug 26 18:24:47.854008: | QUICK_R1: category: established CHILD SA flags: 0: Aug 26 18:24:47.854014: | -> QUICK_R2 EVENT_SA_REPLACE Aug 26 18:24:47.854018: | QUICK_I2: category: established CHILD SA flags: 200: Aug 26 18:24:47.854021: | -> UNDEFINED EVENT_NULL Aug 26 18:24:47.854024: | QUICK_R2: category: established CHILD SA flags: 0: Aug 26 18:24:47.854027: | -> UNDEFINED EVENT_NULL Aug 26 18:24:47.854030: | INFO: category: informational flags: 0: Aug 26 18:24:47.854032: | -> UNDEFINED EVENT_NULL Aug 26 18:24:47.854035: | INFO_PROTECTED: category: informational flags: 0: Aug 26 18:24:47.854038: | -> UNDEFINED EVENT_NULL Aug 26 18:24:47.854040: | XAUTH_R0: category: established IKE SA flags: 0: Aug 26 18:24:47.854042: | -> XAUTH_R1 EVENT_NULL Aug 26 18:24:47.854044: | XAUTH_R1: category: established IKE SA flags: 0: Aug 26 18:24:47.854045: | -> MAIN_R3 EVENT_SA_REPLACE Aug 26 18:24:47.854047: | MODE_CFG_R0: category: informational flags: 0: Aug 26 18:24:47.854048: | -> MODE_CFG_R1 EVENT_SA_REPLACE Aug 26 18:24:47.854050: | MODE_CFG_R1: category: established IKE SA flags: 0: Aug 26 18:24:47.854052: | -> MODE_CFG_R2 EVENT_SA_REPLACE Aug 26 18:24:47.854053: | MODE_CFG_R2: category: established IKE SA flags: 0: Aug 26 18:24:47.854055: | -> UNDEFINED EVENT_NULL Aug 26 18:24:47.854057: | MODE_CFG_I1: category: established IKE SA flags: 0: Aug 26 18:24:47.854058: | -> MAIN_I4 EVENT_SA_REPLACE Aug 26 18:24:47.854060: | XAUTH_I0: category: established IKE SA flags: 0: Aug 26 18:24:47.854061: | -> XAUTH_I1 EVENT_RETRANSMIT Aug 26 18:24:47.854063: | XAUTH_I1: category: established IKE SA flags: 0: Aug 26 18:24:47.854064: | -> MAIN_I4 EVENT_RETRANSMIT Aug 26 18:24:47.854069: | checking IKEv2 state table Aug 26 18:24:47.854074: | PARENT_I0: category: ignore flags: 0: Aug 26 18:24:47.854076: | -> PARENT_I1 EVENT_RETRANSMIT send-request (initiate IKE_SA_INIT) Aug 26 18:24:47.854078: | PARENT_I1: category: half-open IKE SA flags: 0: Aug 26 18:24:47.854080: | -> PARENT_I1 EVENT_RETAIN send-request (Initiator: process SA_INIT reply notification) Aug 26 18:24:47.854082: | -> PARENT_I2 EVENT_RETRANSMIT send-request (Initiator: process IKE_SA_INIT reply, initiate IKE_AUTH) Aug 26 18:24:47.854083: | PARENT_I2: category: open IKE SA flags: 0: Aug 26 18:24:47.854085: | -> PARENT_I2 EVENT_NULL (Initiator: process INVALID_SYNTAX AUTH notification) Aug 26 18:24:47.854087: | -> PARENT_I2 EVENT_NULL (Initiator: process AUTHENTICATION_FAILED AUTH notification) Aug 26 18:24:47.854089: | -> PARENT_I2 EVENT_NULL (Initiator: process UNSUPPORTED_CRITICAL_PAYLOAD AUTH notification) Aug 26 18:24:47.854091: | -> V2_IPSEC_I EVENT_SA_REPLACE (Initiator: process IKE_AUTH response) Aug 26 18:24:47.854092: | -> PARENT_I2 EVENT_NULL (IKE SA: process IKE_AUTH response containing unknown notification) Aug 26 18:24:47.854094: | PARENT_I3: category: established IKE SA flags: 0: Aug 26 18:24:47.854096: | -> PARENT_I3 EVENT_RETAIN (I3: Informational Request) Aug 26 18:24:47.854098: | -> PARENT_I3 EVENT_RETAIN (I3: Informational Response) Aug 26 18:24:47.854099: | -> PARENT_I3 EVENT_RETAIN (I3: INFORMATIONAL Request) Aug 26 18:24:47.854101: | -> PARENT_I3 EVENT_RETAIN (I3: INFORMATIONAL Response) Aug 26 18:24:47.854103: | PARENT_R0: category: half-open IKE SA flags: 0: Aug 26 18:24:47.854104: | -> PARENT_R1 EVENT_SO_DISCARD send-request (Respond to IKE_SA_INIT) Aug 26 18:24:47.854106: | PARENT_R1: category: half-open IKE SA flags: 0: Aug 26 18:24:47.854108: | -> PARENT_R1 EVENT_SA_REPLACE send-request (Responder: process IKE_AUTH request (no SKEYSEED)) Aug 26 18:24:47.854110: | -> V2_IPSEC_R EVENT_SA_REPLACE send-request (Responder: process IKE_AUTH request) Aug 26 18:24:47.854111: | PARENT_R2: category: established IKE SA flags: 0: Aug 26 18:24:47.854113: | -> PARENT_R2 EVENT_RETAIN (R2: process Informational Request) Aug 26 18:24:47.854115: | -> PARENT_R2 EVENT_RETAIN (R2: process Informational Response) Aug 26 18:24:47.854116: | -> PARENT_R2 EVENT_RETAIN (R2: process INFORMATIONAL Request) Aug 26 18:24:47.854120: | -> PARENT_R2 EVENT_RETAIN (R2: process INFORMATIONAL Response) Aug 26 18:24:47.854122: | V2_CREATE_I0: category: established IKE SA flags: 0: Aug 26 18:24:47.854123: | -> V2_CREATE_I EVENT_RETRANSMIT send-request (Initiate CREATE_CHILD_SA IPsec SA) Aug 26 18:24:47.854125: | V2_CREATE_I: category: established IKE SA flags: 0: Aug 26 18:24:47.854127: | -> V2_IPSEC_I EVENT_SA_REPLACE (Process CREATE_CHILD_SA IPsec SA Response) Aug 26 18:24:47.854130: | V2_REKEY_IKE_I0: category: established IKE SA flags: 0: Aug 26 18:24:47.854133: | -> V2_REKEY_IKE_I EVENT_RETRANSMIT send-request (Initiate CREATE_CHILD_SA IKE Rekey) Aug 26 18:24:47.854136: | V2_REKEY_IKE_I: category: established IKE SA flags: 0: Aug 26 18:24:47.854138: | -> PARENT_I3 EVENT_SA_REPLACE (Process CREATE_CHILD_SA IKE Rekey Response) Aug 26 18:24:47.854139: | V2_REKEY_CHILD_I0: category: established IKE SA flags: 0: Aug 26 18:24:47.854141: | -> V2_REKEY_CHILD_I EVENT_RETRANSMIT send-request (Initiate CREATE_CHILD_SA IPsec Rekey SA) Aug 26 18:24:47.854143: | V2_REKEY_CHILD_I: category: established IKE SA flags: 0: Aug 26 18:24:47.854145: | V2_CREATE_R: category: established IKE SA flags: 0: Aug 26 18:24:47.854147: | -> V2_IPSEC_R EVENT_SA_REPLACE send-request (Respond to CREATE_CHILD_SA IPsec SA Request) Aug 26 18:24:47.854148: | V2_REKEY_IKE_R: category: established IKE SA flags: 0: Aug 26 18:24:47.854150: | -> PARENT_R2 EVENT_SA_REPLACE send-request (Respond to CREATE_CHILD_SA IKE Rekey) Aug 26 18:24:47.854152: | V2_REKEY_CHILD_R: category: established IKE SA flags: 0: Aug 26 18:24:47.854154: | V2_IPSEC_I: category: established CHILD SA flags: 0: Aug 26 18:24:47.854156: | V2_IPSEC_R: category: established CHILD SA flags: 0: Aug 26 18:24:47.854158: | IKESA_DEL: category: established IKE SA flags: 0: Aug 26 18:24:47.854159: | -> IKESA_DEL EVENT_RETAIN (IKE_SA_DEL: process INFORMATIONAL) Aug 26 18:24:47.854161: | CHILDSA_DEL: category: informational flags: 0: Aug 26 18:24:47.854172: Using Linux XFRM/NETKEY IPsec interface code on 5.1.18-200.fc29.x86_64 Aug 26 18:24:47.854224: | Hard-wiring algorithms Aug 26 18:24:47.854227: | adding AES_CCM_16 to kernel algorithm db Aug 26 18:24:47.854230: | adding AES_CCM_12 to kernel algorithm db Aug 26 18:24:47.854232: | adding AES_CCM_8 to kernel algorithm db Aug 26 18:24:47.854234: | adding 3DES_CBC to kernel algorithm db Aug 26 18:24:47.854235: | adding CAMELLIA_CBC to kernel algorithm db Aug 26 18:24:47.854237: | adding AES_GCM_16 to kernel algorithm db Aug 26 18:24:47.854239: | adding AES_GCM_12 to kernel algorithm db Aug 26 18:24:47.854240: | adding AES_GCM_8 to kernel algorithm db Aug 26 18:24:47.854242: | adding AES_CTR to kernel algorithm db Aug 26 18:24:47.854244: | adding AES_CBC to kernel algorithm db Aug 26 18:24:47.854245: | adding SERPENT_CBC to kernel algorithm db Aug 26 18:24:47.854247: | adding TWOFISH_CBC to kernel algorithm db Aug 26 18:24:47.854249: | adding NULL_AUTH_AES_GMAC to kernel algorithm db Aug 26 18:24:47.854251: | adding NULL to kernel algorithm db Aug 26 18:24:47.854253: | adding CHACHA20_POLY1305 to kernel algorithm db Aug 26 18:24:47.854254: | adding HMAC_MD5_96 to kernel algorithm db Aug 26 18:24:47.854256: | adding HMAC_SHA1_96 to kernel algorithm db Aug 26 18:24:47.854258: | adding HMAC_SHA2_512_256 to kernel algorithm db Aug 26 18:24:47.854259: | adding HMAC_SHA2_384_192 to kernel algorithm db Aug 26 18:24:47.854261: | adding HMAC_SHA2_256_128 to kernel algorithm db Aug 26 18:24:47.854263: | adding HMAC_SHA2_256_TRUNCBUG to kernel algorithm db Aug 26 18:24:47.854265: | adding AES_XCBC_96 to kernel algorithm db Aug 26 18:24:47.854266: | adding AES_CMAC_96 to kernel algorithm db Aug 26 18:24:47.854268: | adding NONE to kernel algorithm db Aug 26 18:24:47.854283: | net.ipv6.conf.all.disable_ipv6=1 ignore ipv6 holes Aug 26 18:24:47.854294: | global periodic timer EVENT_SHUNT_SCAN enabled with interval of 20 seconds Aug 26 18:24:47.854300: | setup kernel fd callback Aug 26 18:24:47.854305: | add_fd_read_event_handler: new KERNEL_XRM_FD-pe@0x55a9566ba048 Aug 26 18:24:47.854309: | libevent_malloc: new ptr-libevent@0x55a95669e4a8 size 128 Aug 26 18:24:47.854311: | libevent_malloc: new ptr-libevent@0x55a9566ba158 size 16 Aug 26 18:24:47.854316: | add_fd_read_event_handler: new KERNEL_ROUTE_FD-pe@0x55a9566bab88 Aug 26 18:24:47.854318: | libevent_malloc: new ptr-libevent@0x55a95665b0d8 size 128 Aug 26 18:24:47.854320: | libevent_malloc: new ptr-libevent@0x55a9566bab48 size 16 Aug 26 18:24:47.854324: | starting up helper thread 3 Aug 26 18:24:47.854335: | status value returned by setting the priority of this thread (crypto helper 3) 22 Aug 26 18:24:47.854338: | crypto helper 3 waiting (nothing to do) Aug 26 18:24:47.854492: | global one-shot timer EVENT_CHECK_CRLS initialized Aug 26 18:24:47.854498: selinux support is enabled. Aug 26 18:24:47.854675: | unbound context created - setting debug level to 5 Aug 26 18:24:47.854702: | /etc/hosts lookups activated Aug 26 18:24:47.854732: | /etc/resolv.conf usage activated Aug 26 18:24:47.854811: | outgoing-port-avoid set 0-65535 Aug 26 18:24:47.854845: | outgoing-port-permit set 32768-60999 Aug 26 18:24:47.854850: | Loading dnssec root key from:/var/lib/unbound/root.key Aug 26 18:24:47.854852: | No additional dnssec trust anchors defined via dnssec-trusted= option Aug 26 18:24:47.854854: | Setting up events, loop start Aug 26 18:24:47.854857: | add_fd_read_event_handler: new PLUTO_CTL_FD-pe@0x55a9566babf8 Aug 26 18:24:47.854859: | libevent_malloc: new ptr-libevent@0x55a9566c6e08 size 128 Aug 26 18:24:47.854861: | libevent_malloc: new ptr-libevent@0x55a9566d20d8 size 16 Aug 26 18:24:47.854866: | libevent_realloc: new ptr-libevent@0x55a9566d2118 size 256 Aug 26 18:24:47.854868: | libevent_malloc: new ptr-libevent@0x55a9566d2248 size 8 Aug 26 18:24:47.854870: | libevent_realloc: new ptr-libevent@0x55a9566d2288 size 144 Aug 26 18:24:47.854871: | libevent_malloc: new ptr-libevent@0x55a95665a7e8 size 152 Aug 26 18:24:47.854874: | libevent_malloc: new ptr-libevent@0x55a9566d2348 size 16 Aug 26 18:24:47.854877: | signal event handler PLUTO_SIGCHLD installed Aug 26 18:24:47.854878: | libevent_malloc: new ptr-libevent@0x55a9566d2388 size 8 Aug 26 18:24:47.854880: | libevent_malloc: new ptr-libevent@0x55a956665678 size 152 Aug 26 18:24:47.854882: | signal event handler PLUTO_SIGTERM installed Aug 26 18:24:47.854884: | libevent_malloc: new ptr-libevent@0x55a9566d23c8 size 8 Aug 26 18:24:47.854886: | libevent_malloc: new ptr-libevent@0x55a95665d498 size 152 Aug 26 18:24:47.854888: | signal event handler PLUTO_SIGHUP installed Aug 26 18:24:47.854889: | libevent_malloc: new ptr-libevent@0x55a9566d2408 size 8 Aug 26 18:24:47.854891: | libevent_realloc: release ptr-libevent@0x55a9566d2288 Aug 26 18:24:47.854893: | libevent_realloc: new ptr-libevent@0x55a9566d2448 size 256 Aug 26 18:24:47.854895: | libevent_malloc: new ptr-libevent@0x55a9566d2578 size 152 Aug 26 18:24:47.854897: | signal event handler PLUTO_SIGSYS installed Aug 26 18:24:47.855174: | created addconn helper (pid:26791) using fork+execve Aug 26 18:24:47.855190: | forked child 26791 Aug 26 18:24:47.855500: | accept(whackctlfd, (struct sockaddr *)&whackaddr, &whackaddrlen) -> fd@16 (in whack_handle() at rcv_whack.c:722) Aug 26 18:24:47.855516: listening for IKE messages Aug 26 18:24:47.855546: | Inspecting interface lo Aug 26 18:24:47.855551: | found lo with address 127.0.0.1 Aug 26 18:24:47.855553: | Inspecting interface eth0 Aug 26 18:24:47.855556: | found eth0 with address 192.0.2.254 Aug 26 18:24:47.855558: | Inspecting interface eth0 Aug 26 18:24:47.855561: | found eth0 with address 192.0.22.251 Aug 26 18:24:47.855563: | Inspecting interface eth0 Aug 26 18:24:47.855565: | found eth0 with address 192.0.22.254 Aug 26 18:24:47.855567: | Inspecting interface eth0 Aug 26 18:24:47.855569: | found eth0 with address 192.0.2.251 Aug 26 18:24:47.855571: | Inspecting interface eth1 Aug 26 18:24:47.855573: | found eth1 with address 192.1.2.23 Aug 26 18:24:47.855663: Kernel supports NIC esp-hw-offload Aug 26 18:24:47.855676: adding interface eth1/eth1 (esp-hw-offload not supported by kernel) 192.1.2.23:500 Aug 26 18:24:47.855697: | NAT-Traversal: Trying sockopt style NAT-T Aug 26 18:24:47.855701: | NAT-Traversal: ESPINUDP(2) setup succeeded for sockopt style NAT-T family IPv4 Aug 26 18:24:47.855704: adding interface eth1/eth1 192.1.2.23:4500 Aug 26 18:24:47.855725: adding interface eth0/eth0 (esp-hw-offload not supported by kernel) 192.0.2.251:500 Aug 26 18:24:47.855743: | NAT-Traversal: Trying sockopt style NAT-T Aug 26 18:24:47.855747: | NAT-Traversal: ESPINUDP(2) setup succeeded for sockopt style NAT-T family IPv4 Aug 26 18:24:47.855749: adding interface eth0/eth0 192.0.2.251:4500 Aug 26 18:24:47.855773: adding interface eth0/eth0 (esp-hw-offload not supported by kernel) 192.0.22.254:500 Aug 26 18:24:47.855797: | NAT-Traversal: Trying sockopt style NAT-T Aug 26 18:24:47.855802: | NAT-Traversal: ESPINUDP(2) setup succeeded for sockopt style NAT-T family IPv4 Aug 26 18:24:47.855806: adding interface eth0/eth0 192.0.22.254:4500 Aug 26 18:24:47.855830: adding interface eth0/eth0 (esp-hw-offload not supported by kernel) 192.0.22.251:500 Aug 26 18:24:47.855856: | NAT-Traversal: Trying sockopt style NAT-T Aug 26 18:24:47.855861: | NAT-Traversal: ESPINUDP(2) setup succeeded for sockopt style NAT-T family IPv4 Aug 26 18:24:47.855865: adding interface eth0/eth0 192.0.22.251:4500 Aug 26 18:24:47.855891: adding interface eth0/eth0 (esp-hw-offload not supported by kernel) 192.0.2.254:500 Aug 26 18:24:47.855911: | NAT-Traversal: Trying sockopt style NAT-T Aug 26 18:24:47.855916: | NAT-Traversal: ESPINUDP(2) setup succeeded for sockopt style NAT-T family IPv4 Aug 26 18:24:47.855920: adding interface eth0/eth0 192.0.2.254:4500 Aug 26 18:24:47.855943: adding interface lo/lo (esp-hw-offload not supported by kernel) 127.0.0.1:500 Aug 26 18:24:47.855963: | NAT-Traversal: Trying sockopt style NAT-T Aug 26 18:24:47.855967: | NAT-Traversal: ESPINUDP(2) setup succeeded for sockopt style NAT-T family IPv4 Aug 26 18:24:47.855971: adding interface lo/lo 127.0.0.1:4500 Aug 26 18:24:47.856040: | no interfaces to sort Aug 26 18:24:47.856046: | FOR_EACH_UNORIENTED_CONNECTION_... in check_orientations Aug 26 18:24:47.856067: | add_fd_read_event_handler: new ethX-pe@0x55a9566d2e68 Aug 26 18:24:47.856071: | libevent_malloc: new ptr-libevent@0x55a9566c6d58 size 128 Aug 26 18:24:47.856075: | libevent_malloc: new ptr-libevent@0x55a9566d2ed8 size 16 Aug 26 18:24:47.856082: | setup callback for interface lo 127.0.0.1:4500 fd 28 Aug 26 18:24:47.856086: | add_fd_read_event_handler: new ethX-pe@0x55a9566d2f18 Aug 26 18:24:47.856091: | libevent_malloc: new ptr-libevent@0x55a95665c878 size 128 Aug 26 18:24:47.856094: | libevent_malloc: new ptr-libevent@0x55a9566d2f88 size 16 Aug 26 18:24:47.856100: | setup callback for interface lo 127.0.0.1:500 fd 27 Aug 26 18:24:47.856103: | add_fd_read_event_handler: new ethX-pe@0x55a9566d2fc8 Aug 26 18:24:47.856107: | libevent_malloc: new ptr-libevent@0x55a95665d2f8 size 128 Aug 26 18:24:47.856110: | libevent_malloc: new ptr-libevent@0x55a9566d3038 size 16 Aug 26 18:24:47.856115: | setup callback for interface eth0 192.0.2.254:4500 fd 26 Aug 26 18:24:47.856117: | add_fd_read_event_handler: new ethX-pe@0x55a9566d36f8 Aug 26 18:24:47.856120: | libevent_malloc: new ptr-libevent@0x55a956630ba8 size 128 Aug 26 18:24:47.856123: | libevent_malloc: new ptr-libevent@0x55a9566d3768 size 16 Aug 26 18:24:47.856128: | setup callback for interface eth0 192.0.2.254:500 fd 25 Aug 26 18:24:47.856131: | add_fd_read_event_handler: new ethX-pe@0x55a9566d37a8 Aug 26 18:24:47.856133: | libevent_malloc: new ptr-libevent@0x55a9566314e8 size 128 Aug 26 18:24:47.856135: | libevent_malloc: new ptr-libevent@0x55a9566d3818 size 16 Aug 26 18:24:47.856139: | setup callback for interface eth0 192.0.22.251:4500 fd 24 Aug 26 18:24:47.856142: | add_fd_read_event_handler: new ethX-pe@0x55a9566d3858 Aug 26 18:24:47.856144: | libevent_malloc: new ptr-libevent@0x55a9566311d8 size 128 Aug 26 18:24:47.856146: | libevent_malloc: new ptr-libevent@0x55a9566d38c8 size 16 Aug 26 18:24:47.856153: | setup callback for interface eth0 192.0.22.251:500 fd 23 Aug 26 18:24:47.856156: | add_fd_read_event_handler: new ethX-pe@0x55a9566d3908 Aug 26 18:24:47.856158: | libevent_malloc: new ptr-libevent@0x55a9566d3978 size 128 Aug 26 18:24:47.856161: | libevent_malloc: new ptr-libevent@0x55a9566d3a28 size 16 Aug 26 18:24:47.856165: | setup callback for interface eth0 192.0.22.254:4500 fd 22 Aug 26 18:24:47.856167: | add_fd_read_event_handler: new ethX-pe@0x55a9566d3a68 Aug 26 18:24:47.856170: | libevent_malloc: new ptr-libevent@0x55a9566d3ad8 size 128 Aug 26 18:24:47.856172: | libevent_malloc: new ptr-libevent@0x55a9566d3b88 size 16 Aug 26 18:24:47.856177: | setup callback for interface eth0 192.0.22.254:500 fd 21 Aug 26 18:24:47.856180: | add_fd_read_event_handler: new ethX-pe@0x55a9566d3bc8 Aug 26 18:24:47.856183: | libevent_malloc: new ptr-libevent@0x55a9566d3c38 size 128 Aug 26 18:24:47.856185: | libevent_malloc: new ptr-libevent@0x55a9566d3ce8 size 16 Aug 26 18:24:47.856191: | setup callback for interface eth0 192.0.2.251:4500 fd 20 Aug 26 18:24:47.856194: | add_fd_read_event_handler: new ethX-pe@0x55a9566d3d28 Aug 26 18:24:47.856196: | libevent_malloc: new ptr-libevent@0x55a9566d3d98 size 128 Aug 26 18:24:47.856199: | libevent_malloc: new ptr-libevent@0x55a9566d3e48 size 16 Aug 26 18:24:47.856203: | setup callback for interface eth0 192.0.2.251:500 fd 19 Aug 26 18:24:47.856206: | add_fd_read_event_handler: new ethX-pe@0x55a9566d3e88 Aug 26 18:24:47.856208: | libevent_malloc: new ptr-libevent@0x55a9566d3ef8 size 128 Aug 26 18:24:47.856211: | libevent_malloc: new ptr-libevent@0x55a9566d3fa8 size 16 Aug 26 18:24:47.856216: | setup callback for interface eth1 192.1.2.23:4500 fd 18 Aug 26 18:24:47.856221: | add_fd_read_event_handler: new ethX-pe@0x55a9566d3fe8 Aug 26 18:24:47.856224: | libevent_malloc: new ptr-libevent@0x55a9566d4058 size 128 Aug 26 18:24:47.856227: | libevent_malloc: new ptr-libevent@0x55a9566d4108 size 16 Aug 26 18:24:47.856232: | setup callback for interface eth1 192.1.2.23:500 fd 17 Aug 26 18:24:47.856238: | certs and keys locked by 'free_preshared_secrets' Aug 26 18:24:47.856241: | certs and keys unlocked by 'free_preshared_secrets' Aug 26 18:24:47.856261: loading secrets from "/etc/ipsec.secrets" Aug 26 18:24:47.856276: | saving Modulus Aug 26 18:24:47.856280: | saving PublicExponent Aug 26 18:24:47.856283: | ignoring PrivateExponent Aug 26 18:24:47.856285: | ignoring Prime1 Aug 26 18:24:47.856287: | ignoring Prime2 Aug 26 18:24:47.856302: | ignoring Exponent1 Aug 26 18:24:47.856305: | ignoring Exponent2 Aug 26 18:24:47.856308: | ignoring Coefficient Aug 26 18:24:47.856311: | ignoring CKAIDNSS Aug 26 18:24:47.856340: | computed rsa CKAID 61 55 99 73 d3 ac ef 7d 3a 37 0e 3e 82 ad 92 c1 Aug 26 18:24:47.856343: | computed rsa CKAID 8a 82 25 f1 Aug 26 18:24:47.856346: loaded private key for keyid: PKK_RSA:AQO9bJbr3 Aug 26 18:24:47.856351: | certs and keys locked by 'process_secret' Aug 26 18:24:47.856356: | certs and keys unlocked by 'process_secret' Aug 26 18:24:47.856365: | close_any(fd@16) (in whack_process() at rcv_whack.c:700) Aug 26 18:24:47.856372: | spent 0.869 milliseconds in whack Aug 26 18:24:47.875814: | accept(whackctlfd, (struct sockaddr *)&whackaddr, &whackaddrlen) -> fd@16 (in whack_handle() at rcv_whack.c:722) Aug 26 18:24:47.875835: | FOR_EACH_CONNECTION_... in conn_by_name Aug 26 18:24:47.875840: | FOR_EACH_CONNECTION_... in foreach_connection_by_alias Aug 26 18:24:47.875843: | FOR_EACH_CONNECTION_... in conn_by_name Aug 26 18:24:47.875845: | FOR_EACH_CONNECTION_... in foreach_connection_by_alias Aug 26 18:24:47.875849: | FOR_EACH_CONNECTION_... in conn_by_name Aug 26 18:24:47.875857: | Added new connection north-eastnets/0x1 with policy ENCRYPT+TUNNEL+PFS+IKEV2_ALLOW+SAREF_TRACK+IKE_FRAG_ALLOW+ESN_NO Aug 26 18:24:47.875860: | No AUTH policy was set - defaulting to RSASIG Aug 26 18:24:47.875886: | ike (phase1) algorithm values: AES_CBC_256-HMAC_SHA2_256-MODP2048 Aug 26 18:24:47.875890: | from whack: got --esp=aes128-sha2_512;modp3072 Aug 26 18:24:47.875910: | ESP/AH string values: AES_CBC_128-HMAC_SHA2_512_256-MODP3072 Aug 26 18:24:47.875915: | counting wild cards for @north is 0 Aug 26 18:24:47.875919: | counting wild cards for @east is 0 Aug 26 18:24:47.875929: | connect_to_host_pair: 192.1.2.23:500 192.1.3.33:500 -> hp@(nil): none Aug 26 18:24:47.875932: | new hp@0x55a9566d4c48 Aug 26 18:24:47.875937: added connection description "north-eastnets/0x1" Aug 26 18:24:47.875947: | ike_life: 3600s; ipsec_life: 28800s; rekey_margin: 540s; rekey_fuzz: 100%; keyingtries: 0; replay_window: 32; policy: RSASIG+ENCRYPT+TUNNEL+PFS+IKEV2_ALLOW+SAREF_TRACK+IKE_FRAG_ALLOW+ESN_NO Aug 26 18:24:47.875959: | 192.0.2.0/24===192.1.2.23<192.1.2.23>[@east]...192.1.3.33<192.1.3.33>[@north]===192.0.3.0/24 Aug 26 18:24:47.875968: | close_any(fd@16) (in whack_process() at rcv_whack.c:700) Aug 26 18:24:47.875976: | spent 0.17 milliseconds in whack Aug 26 18:24:47.875990: | accept(whackctlfd, (struct sockaddr *)&whackaddr, &whackaddrlen) -> fd@16 (in whack_handle() at rcv_whack.c:722) Aug 26 18:24:47.875999: add keyid @north Aug 26 18:24:47.876002: | add pubkey 01 03 e5 df 73 b6 3e d5 36 a8 f1 3d 0d d3 02 ab Aug 26 18:24:47.876005: | add pubkey 7f ec 4c 9e 8b 0e 0e d2 cf 0f 59 bf 6d 88 21 86 Aug 26 18:24:47.876008: | add pubkey 93 9e 10 34 af 2d cf b3 7e eb e5 b2 24 b2 a5 b0 Aug 26 18:24:47.876010: | add pubkey 01 03 7d b5 96 ad 66 ee 48 c2 28 d9 9a 76 36 a9 Aug 26 18:24:47.876013: | add pubkey 10 84 b5 09 8f 17 4f 65 ce d8 2f 8e 78 80 8a 87 Aug 26 18:24:47.876015: | add pubkey f4 6b 98 d9 91 94 6b 52 15 5b 9c 47 12 be d8 6f Aug 26 18:24:47.876018: | add pubkey 25 b4 65 38 7e e4 8d c7 f0 58 d3 9f 69 14 cc 3e Aug 26 18:24:47.876021: | add pubkey c8 16 1f af bb 5d 93 2b 33 39 0e 94 55 81 f4 b3 Aug 26 18:24:47.876023: | add pubkey cc 92 58 6e 4a 5a 4e c3 76 ab 04 2e 11 08 06 55 Aug 26 18:24:47.876026: | add pubkey 13 0f 02 6c dd d1 bc c0 b8 8d 65 f5 97 ed fc 18 Aug 26 18:24:47.876029: | add pubkey 39 f9 55 ab fa 0d c5 49 99 7f 1b cf c3 de 99 7d Aug 26 18:24:47.876031: | add pubkey 9e ca 6f 9e 14 d6 5a ff de d6 4f 57 6a 83 ab 51 Aug 26 18:24:47.876034: | add pubkey ba 64 74 e0 22 e9 9a c5 10 71 bb d4 eb a4 99 28 Aug 26 18:24:47.876036: | add pubkey 9c 85 0e 31 ea cc ab ef 98 84 3f 59 c1 75 aa b3 Aug 26 18:24:47.876039: | add pubkey 61 eb 61 8c 58 a5 92 25 84 ad c7 79 f3 87 d0 c7 Aug 26 18:24:47.876042: | add pubkey 83 c2 d6 8a fe 26 9d 2a ff b1 dd 9b 89 21 7c ca Aug 26 18:24:47.876044: | add pubkey f5 38 2d 3f 64 0c 41 9c 34 e9 b2 55 0f 82 1a b3 Aug 26 18:24:47.876047: | add pubkey c7 5e a5 99 Aug 26 18:24:47.876069: | computed rsa CKAID 90 5d fc a1 08 68 74 7c 6f 20 d3 1b 2d 20 4b 8f Aug 26 18:24:47.876073: | computed rsa CKAID 88 aa 7c 5d Aug 26 18:24:47.876084: | close_any(fd@16) (in whack_process() at rcv_whack.c:700) Aug 26 18:24:47.876089: | spent 0.102 milliseconds in whack Aug 26 18:24:47.876125: | accept(whackctlfd, (struct sockaddr *)&whackaddr, &whackaddrlen) -> fd@16 (in whack_handle() at rcv_whack.c:722) Aug 26 18:24:47.876134: add keyid @east Aug 26 18:24:47.876138: | add pubkey 01 03 bd 6c 96 eb df 78 89 b3 ed 77 0d a1 7f 7b Aug 26 18:24:47.876141: | add pubkey e5 16 c2 c9 e4 7d 92 0a 90 9d 55 43 b4 62 13 03 Aug 26 18:24:47.876144: | add pubkey 85 7a e0 26 7b 54 1f ca 09 93 cf ff 25 c9 02 4c Aug 26 18:24:47.876146: | add pubkey 78 ca 94 e5 3e ac d1 f9 a8 e5 bb 7f cc 20 84 e0 Aug 26 18:24:47.876149: | add pubkey 21 c9 f0 0d c5 44 ba f3 48 64 61 58 f6 0f 63 0d Aug 26 18:24:47.876152: | add pubkey d2 67 1e 59 8b ec f3 50 39 71 fb 39 da 11 64 b6 Aug 26 18:24:47.876154: | add pubkey 62 cd 5f d3 8d 2e c1 50 ed 9c 6e 22 0c 39 a7 ce Aug 26 18:24:47.876157: | add pubkey 62 b5 af 8a 80 0f 2e 4c 05 5c 82 c7 8d 29 02 2e Aug 26 18:24:47.876159: | add pubkey bb 23 5f db f2 9e b5 7d e2 20 70 1a 63 f3 8e 5d Aug 26 18:24:47.876162: | add pubkey ac 47 f0 5c 26 4e b1 d0 42 60 52 4a b0 77 25 ce Aug 26 18:24:47.876165: | add pubkey e0 98 2b 43 f4 c7 59 1a 64 01 83 ea 4e e3 1a 2a Aug 26 18:24:47.876171: | add pubkey 92 b8 55 ab 63 dd 4b 70 47 29 dc e9 b4 60 bf 43 Aug 26 18:24:47.876174: | add pubkey 4d 58 8f 64 73 95 70 ac 35 89 b2 c2 9c d4 62 c0 Aug 26 18:24:47.876176: | add pubkey 5f 56 5f ad 1b e5 dd 49 93 6a f5 23 82 ed d4 e7 Aug 26 18:24:47.876179: | add pubkey d5 f1 55 f2 2d a2 26 a6 36 53 2f 94 fb 99 22 5c Aug 26 18:24:47.876181: | add pubkey 47 cc 6d 80 30 88 96 38 0c f5 f2 ed 37 d0 09 d5 Aug 26 18:24:47.876184: | add pubkey 07 8f 69 ef a9 99 ce 4d 1a 77 9e 39 c4 38 f3 c5 Aug 26 18:24:47.876187: | add pubkey 51 51 48 ef Aug 26 18:24:47.876196: | computed rsa CKAID 61 55 99 73 d3 ac ef 7d 3a 37 0e 3e 82 ad 92 c1 Aug 26 18:24:47.876199: | computed rsa CKAID 8a 82 25 f1 Aug 26 18:24:47.876208: | close_any(fd@16) (in whack_process() at rcv_whack.c:700) Aug 26 18:24:47.876213: | spent 0.0943 milliseconds in whack Aug 26 18:24:47.876235: | accept(whackctlfd, (struct sockaddr *)&whackaddr, &whackaddrlen) -> fd@16 (in whack_handle() at rcv_whack.c:722) Aug 26 18:24:47.876244: | FOR_EACH_CONNECTION_... in conn_by_name Aug 26 18:24:47.876247: | FOR_EACH_CONNECTION_... in foreach_connection_by_alias Aug 26 18:24:47.876250: | FOR_EACH_CONNECTION_... in conn_by_name Aug 26 18:24:47.876252: | FOR_EACH_CONNECTION_... in foreach_connection_by_alias Aug 26 18:24:47.876256: | FOR_EACH_CONNECTION_... in conn_by_name Aug 26 18:24:47.876261: | Added new connection north-eastnets/0x2 with policy ENCRYPT+TUNNEL+PFS+IKEV2_ALLOW+SAREF_TRACK+IKE_FRAG_ALLOW+ESN_NO Aug 26 18:24:47.876265: | No AUTH policy was set - defaulting to RSASIG Aug 26 18:24:47.876282: | ike (phase1) algorithm values: AES_CBC_256-HMAC_SHA2_256-MODP2048 Aug 26 18:24:47.876285: | from whack: got --esp=aes128-sha2_512;modp3072 Aug 26 18:24:47.876331: | ESP/AH string values: AES_CBC_128-HMAC_SHA2_512_256-MODP3072 Aug 26 18:24:47.876339: | counting wild cards for @north is 0 Aug 26 18:24:47.876343: | counting wild cards for @east is 0 Aug 26 18:24:47.876351: | find_host_pair: comparing 192.1.2.23:500 to 192.1.3.33:500 but ignoring ports Aug 26 18:24:47.876357: | connect_to_host_pair: 192.1.2.23:500 192.1.3.33:500 -> hp@0x55a9566d4c48: north-eastnets/0x1 Aug 26 18:24:47.876360: added connection description "north-eastnets/0x2" Aug 26 18:24:47.876370: | ike_life: 3600s; ipsec_life: 28800s; rekey_margin: 540s; rekey_fuzz: 100%; keyingtries: 0; replay_window: 32; policy: RSASIG+ENCRYPT+TUNNEL+PFS+IKEV2_ALLOW+SAREF_TRACK+IKE_FRAG_ALLOW+ESN_NO Aug 26 18:24:47.876381: | 192.0.22.0/24===192.1.2.23<192.1.2.23>[@east]...192.1.3.33<192.1.3.33>[@north]===192.0.3.0/24 Aug 26 18:24:47.876389: | close_any(fd@16) (in whack_process() at rcv_whack.c:700) Aug 26 18:24:47.876394: | spent 0.135 milliseconds in whack Aug 26 18:24:47.876432: | accept(whackctlfd, (struct sockaddr *)&whackaddr, &whackaddrlen) -> fd@16 (in whack_handle() at rcv_whack.c:722) Aug 26 18:24:47.876443: add keyid @north Aug 26 18:24:47.876447: | unreference key: 0x55a95662cc48 @north cnt 1-- Aug 26 18:24:47.876452: | add pubkey 01 03 e5 df 73 b6 3e d5 36 a8 f1 3d 0d d3 02 ab Aug 26 18:24:47.876455: | add pubkey 7f ec 4c 9e 8b 0e 0e d2 cf 0f 59 bf 6d 88 21 86 Aug 26 18:24:47.876458: | add pubkey 93 9e 10 34 af 2d cf b3 7e eb e5 b2 24 b2 a5 b0 Aug 26 18:24:47.876460: | add pubkey 01 03 7d b5 96 ad 66 ee 48 c2 28 d9 9a 76 36 a9 Aug 26 18:24:47.876463: | add pubkey 10 84 b5 09 8f 17 4f 65 ce d8 2f 8e 78 80 8a 87 Aug 26 18:24:47.876466: | add pubkey f4 6b 98 d9 91 94 6b 52 15 5b 9c 47 12 be d8 6f Aug 26 18:24:47.876468: | add pubkey 25 b4 65 38 7e e4 8d c7 f0 58 d3 9f 69 14 cc 3e Aug 26 18:24:47.876471: | add pubkey c8 16 1f af bb 5d 93 2b 33 39 0e 94 55 81 f4 b3 Aug 26 18:24:47.876474: | add pubkey cc 92 58 6e 4a 5a 4e c3 76 ab 04 2e 11 08 06 55 Aug 26 18:24:47.876476: | add pubkey 13 0f 02 6c dd d1 bc c0 b8 8d 65 f5 97 ed fc 18 Aug 26 18:24:47.876479: | add pubkey 39 f9 55 ab fa 0d c5 49 99 7f 1b cf c3 de 99 7d Aug 26 18:24:47.876482: | add pubkey 9e ca 6f 9e 14 d6 5a ff de d6 4f 57 6a 83 ab 51 Aug 26 18:24:47.876484: | add pubkey ba 64 74 e0 22 e9 9a c5 10 71 bb d4 eb a4 99 28 Aug 26 18:24:47.876489: | add pubkey 9c 85 0e 31 ea cc ab ef 98 84 3f 59 c1 75 aa b3 Aug 26 18:24:47.876492: | add pubkey 61 eb 61 8c 58 a5 92 25 84 ad c7 79 f3 87 d0 c7 Aug 26 18:24:47.876495: | add pubkey 83 c2 d6 8a fe 26 9d 2a ff b1 dd 9b 89 21 7c ca Aug 26 18:24:47.876497: | add pubkey f5 38 2d 3f 64 0c 41 9c 34 e9 b2 55 0f 82 1a b3 Aug 26 18:24:47.876500: | add pubkey c7 5e a5 99 Aug 26 18:24:47.876512: | computed rsa CKAID 90 5d fc a1 08 68 74 7c 6f 20 d3 1b 2d 20 4b 8f Aug 26 18:24:47.876515: | computed rsa CKAID 88 aa 7c 5d Aug 26 18:24:47.876524: | close_any(fd@16) (in whack_process() at rcv_whack.c:700) Aug 26 18:24:47.876529: | spent 0.103 milliseconds in whack Aug 26 18:24:47.876558: | accept(whackctlfd, (struct sockaddr *)&whackaddr, &whackaddrlen) -> fd@16 (in whack_handle() at rcv_whack.c:722) Aug 26 18:24:47.876566: add keyid @east Aug 26 18:24:47.876571: | unreference key: 0x55a9566d4fb8 @east cnt 1-- Aug 26 18:24:47.876575: | add pubkey 01 03 bd 6c 96 eb df 78 89 b3 ed 77 0d a1 7f 7b Aug 26 18:24:47.876577: | add pubkey e5 16 c2 c9 e4 7d 92 0a 90 9d 55 43 b4 62 13 03 Aug 26 18:24:47.876580: | add pubkey 85 7a e0 26 7b 54 1f ca 09 93 cf ff 25 c9 02 4c Aug 26 18:24:47.876583: | add pubkey 78 ca 94 e5 3e ac d1 f9 a8 e5 bb 7f cc 20 84 e0 Aug 26 18:24:47.876585: | add pubkey 21 c9 f0 0d c5 44 ba f3 48 64 61 58 f6 0f 63 0d Aug 26 18:24:47.876588: | add pubkey d2 67 1e 59 8b ec f3 50 39 71 fb 39 da 11 64 b6 Aug 26 18:24:47.876591: | add pubkey 62 cd 5f d3 8d 2e c1 50 ed 9c 6e 22 0c 39 a7 ce Aug 26 18:24:47.876593: | add pubkey 62 b5 af 8a 80 0f 2e 4c 05 5c 82 c7 8d 29 02 2e Aug 26 18:24:47.876596: | add pubkey bb 23 5f db f2 9e b5 7d e2 20 70 1a 63 f3 8e 5d Aug 26 18:24:47.876598: | add pubkey ac 47 f0 5c 26 4e b1 d0 42 60 52 4a b0 77 25 ce Aug 26 18:24:47.876601: | add pubkey e0 98 2b 43 f4 c7 59 1a 64 01 83 ea 4e e3 1a 2a Aug 26 18:24:47.876604: | add pubkey 92 b8 55 ab 63 dd 4b 70 47 29 dc e9 b4 60 bf 43 Aug 26 18:24:47.876606: | add pubkey 4d 58 8f 64 73 95 70 ac 35 89 b2 c2 9c d4 62 c0 Aug 26 18:24:47.876609: | add pubkey 5f 56 5f ad 1b e5 dd 49 93 6a f5 23 82 ed d4 e7 Aug 26 18:24:47.876611: | add pubkey d5 f1 55 f2 2d a2 26 a6 36 53 2f 94 fb 99 22 5c Aug 26 18:24:47.876614: | add pubkey 47 cc 6d 80 30 88 96 38 0c f5 f2 ed 37 d0 09 d5 Aug 26 18:24:47.876617: | add pubkey 07 8f 69 ef a9 99 ce 4d 1a 77 9e 39 c4 38 f3 c5 Aug 26 18:24:47.876619: | add pubkey 51 51 48 ef Aug 26 18:24:47.876627: | computed rsa CKAID 61 55 99 73 d3 ac ef 7d 3a 37 0e 3e 82 ad 92 c1 Aug 26 18:24:47.876631: | computed rsa CKAID 8a 82 25 f1 Aug 26 18:24:47.876638: | close_any(fd@16) (in whack_process() at rcv_whack.c:700) Aug 26 18:24:47.876643: | spent 0.0891 milliseconds in whack Aug 26 18:24:47.876669: | accept(whackctlfd, (struct sockaddr *)&whackaddr, &whackaddrlen) -> fd@16 (in whack_handle() at rcv_whack.c:722) Aug 26 18:24:47.876678: listening for IKE messages Aug 26 18:24:47.876710: | Inspecting interface lo Aug 26 18:24:47.876717: | found lo with address 127.0.0.1 Aug 26 18:24:47.876721: | Inspecting interface eth0 Aug 26 18:24:47.876725: | found eth0 with address 192.0.2.254 Aug 26 18:24:47.876728: | Inspecting interface eth0 Aug 26 18:24:47.876732: | found eth0 with address 192.0.22.251 Aug 26 18:24:47.876734: | Inspecting interface eth0 Aug 26 18:24:47.876738: | found eth0 with address 192.0.22.254 Aug 26 18:24:47.876740: | Inspecting interface eth0 Aug 26 18:24:47.876744: | found eth0 with address 192.0.2.251 Aug 26 18:24:47.876746: | Inspecting interface eth1 Aug 26 18:24:47.876751: | found eth1 with address 192.1.2.23 Aug 26 18:24:47.876819: | no interfaces to sort Aug 26 18:24:47.876829: | libevent_free: release ptr-libevent@0x55a9566c6d58 Aug 26 18:24:47.876833: | free_event_entry: release EVENT_NULL-pe@0x55a9566d2e68 Aug 26 18:24:47.876836: | add_fd_read_event_handler: new ethX-pe@0x55a9566d2e68 Aug 26 18:24:47.876840: | libevent_malloc: new ptr-libevent@0x55a9566d6228 size 128 Aug 26 18:24:47.876851: | setup callback for interface lo 127.0.0.1:4500 fd 28 Aug 26 18:24:47.876856: | libevent_free: release ptr-libevent@0x55a95665c878 Aug 26 18:24:47.876859: | free_event_entry: release EVENT_NULL-pe@0x55a9566d2f18 Aug 26 18:24:47.876862: | add_fd_read_event_handler: new ethX-pe@0x55a9566d2f18 Aug 26 18:24:47.876865: | libevent_malloc: new ptr-libevent@0x55a95665c878 size 128 Aug 26 18:24:47.876871: | setup callback for interface lo 127.0.0.1:500 fd 27 Aug 26 18:24:47.876875: | libevent_free: release ptr-libevent@0x55a95665d2f8 Aug 26 18:24:47.876878: | free_event_entry: release EVENT_NULL-pe@0x55a9566d2fc8 Aug 26 18:24:47.876881: | add_fd_read_event_handler: new ethX-pe@0x55a9566d2fc8 Aug 26 18:24:47.876884: | libevent_malloc: new ptr-libevent@0x55a95665d2f8 size 128 Aug 26 18:24:47.876889: | setup callback for interface eth0 192.0.2.254:4500 fd 26 Aug 26 18:24:47.876894: | libevent_free: release ptr-libevent@0x55a956630ba8 Aug 26 18:24:47.876897: | free_event_entry: release EVENT_NULL-pe@0x55a9566d36f8 Aug 26 18:24:47.876900: | add_fd_read_event_handler: new ethX-pe@0x55a9566d36f8 Aug 26 18:24:47.876903: | libevent_malloc: new ptr-libevent@0x55a956630ba8 size 128 Aug 26 18:24:47.876908: | setup callback for interface eth0 192.0.2.254:500 fd 25 Aug 26 18:24:47.876912: | libevent_free: release ptr-libevent@0x55a9566314e8 Aug 26 18:24:47.876915: | free_event_entry: release EVENT_NULL-pe@0x55a9566d37a8 Aug 26 18:24:47.876918: | add_fd_read_event_handler: new ethX-pe@0x55a9566d37a8 Aug 26 18:24:47.876921: | libevent_malloc: new ptr-libevent@0x55a9566314e8 size 128 Aug 26 18:24:47.876926: | setup callback for interface eth0 192.0.22.251:4500 fd 24 Aug 26 18:24:47.876930: | libevent_free: release ptr-libevent@0x55a9566311d8 Aug 26 18:24:47.876933: | free_event_entry: release EVENT_NULL-pe@0x55a9566d3858 Aug 26 18:24:47.876936: | add_fd_read_event_handler: new ethX-pe@0x55a9566d3858 Aug 26 18:24:47.876939: | libevent_malloc: new ptr-libevent@0x55a9566311d8 size 128 Aug 26 18:24:47.876944: | setup callback for interface eth0 192.0.22.251:500 fd 23 Aug 26 18:24:47.876948: | libevent_free: release ptr-libevent@0x55a9566d3978 Aug 26 18:24:47.876951: | free_event_entry: release EVENT_NULL-pe@0x55a9566d3908 Aug 26 18:24:47.876953: | add_fd_read_event_handler: new ethX-pe@0x55a9566d3908 Aug 26 18:24:47.876957: | libevent_malloc: new ptr-libevent@0x55a9566d3978 size 128 Aug 26 18:24:47.876962: | setup callback for interface eth0 192.0.22.254:4500 fd 22 Aug 26 18:24:47.876966: | libevent_free: release ptr-libevent@0x55a9566d3ad8 Aug 26 18:24:47.876969: | free_event_entry: release EVENT_NULL-pe@0x55a9566d3a68 Aug 26 18:24:47.876972: | add_fd_read_event_handler: new ethX-pe@0x55a9566d3a68 Aug 26 18:24:47.876974: | libevent_malloc: new ptr-libevent@0x55a9566d3ad8 size 128 Aug 26 18:24:47.876980: | setup callback for interface eth0 192.0.22.254:500 fd 21 Aug 26 18:24:47.876984: | libevent_free: release ptr-libevent@0x55a9566d3c38 Aug 26 18:24:47.876987: | free_event_entry: release EVENT_NULL-pe@0x55a9566d3bc8 Aug 26 18:24:47.876990: | add_fd_read_event_handler: new ethX-pe@0x55a9566d3bc8 Aug 26 18:24:47.876992: | libevent_malloc: new ptr-libevent@0x55a9566d3c38 size 128 Aug 26 18:24:47.876997: | setup callback for interface eth0 192.0.2.251:4500 fd 20 Aug 26 18:24:47.877001: | libevent_free: release ptr-libevent@0x55a9566d3d98 Aug 26 18:24:47.877004: | free_event_entry: release EVENT_NULL-pe@0x55a9566d3d28 Aug 26 18:24:47.877006: | add_fd_read_event_handler: new ethX-pe@0x55a9566d3d28 Aug 26 18:24:47.877009: | libevent_malloc: new ptr-libevent@0x55a9566d3d98 size 128 Aug 26 18:24:47.877014: | setup callback for interface eth0 192.0.2.251:500 fd 19 Aug 26 18:24:47.877018: | libevent_free: release ptr-libevent@0x55a9566d3ef8 Aug 26 18:24:47.877020: | free_event_entry: release EVENT_NULL-pe@0x55a9566d3e88 Aug 26 18:24:47.877023: | add_fd_read_event_handler: new ethX-pe@0x55a9566d3e88 Aug 26 18:24:47.877026: | libevent_malloc: new ptr-libevent@0x55a9566d3ef8 size 128 Aug 26 18:24:47.877031: | setup callback for interface eth1 192.1.2.23:4500 fd 18 Aug 26 18:24:47.877037: | libevent_free: release ptr-libevent@0x55a9566d4058 Aug 26 18:24:47.877040: | free_event_entry: release EVENT_NULL-pe@0x55a9566d3fe8 Aug 26 18:24:47.877043: | add_fd_read_event_handler: new ethX-pe@0x55a9566d3fe8 Aug 26 18:24:47.877045: | libevent_malloc: new ptr-libevent@0x55a9566d4058 size 128 Aug 26 18:24:47.877050: | setup callback for interface eth1 192.1.2.23:500 fd 17 Aug 26 18:24:47.877053: | certs and keys locked by 'free_preshared_secrets' Aug 26 18:24:47.877056: forgetting secrets Aug 26 18:24:47.877064: | certs and keys unlocked by 'free_preshared_secrets' Aug 26 18:24:47.877081: loading secrets from "/etc/ipsec.secrets" Aug 26 18:24:47.877096: | saving Modulus Aug 26 18:24:47.877100: | saving PublicExponent Aug 26 18:24:47.877104: | ignoring PrivateExponent Aug 26 18:24:47.877107: | ignoring Prime1 Aug 26 18:24:47.877110: | ignoring Prime2 Aug 26 18:24:47.877113: | ignoring Exponent1 Aug 26 18:24:47.877116: | ignoring Exponent2 Aug 26 18:24:47.877119: | ignoring Coefficient Aug 26 18:24:47.877122: | ignoring CKAIDNSS Aug 26 18:24:47.877133: | computed rsa CKAID 61 55 99 73 d3 ac ef 7d 3a 37 0e 3e 82 ad 92 c1 Aug 26 18:24:47.877136: | computed rsa CKAID 8a 82 25 f1 Aug 26 18:24:47.877140: loaded private key for keyid: PKK_RSA:AQO9bJbr3 Aug 26 18:24:47.877147: | certs and keys locked by 'process_secret' Aug 26 18:24:47.877149: | certs and keys unlocked by 'process_secret' Aug 26 18:24:47.877158: | close_any(fd@16) (in whack_process() at rcv_whack.c:700) Aug 26 18:24:47.877163: | spent 0.496 milliseconds in whack Aug 26 18:24:47.877188: | accept(whackctlfd, (struct sockaddr *)&whackaddr, &whackaddrlen) -> fd@16 (in whack_handle() at rcv_whack.c:722) Aug 26 18:24:47.877196: | FOR_EACH_CONNECTION_... in conn_by_name Aug 26 18:24:47.877200: initiating all conns with alias='north-eastnets' Aug 26 18:24:47.877205: | FOR_EACH_CONNECTION_... in foreach_connection_by_alias Aug 26 18:24:47.877210: | start processing: connection "north-eastnets/0x2" (in initiate_a_connection() at initiate.c:186) Aug 26 18:24:47.877213: | connection 'north-eastnets/0x2' +POLICY_UP Aug 26 18:24:47.877217: | dup_any(fd@-1) -> fd@-1 (in initiate_a_connection() at initiate.c:342) Aug 26 18:24:47.877219: | FOR_EACH_STATE_... in find_phase1_state Aug 26 18:24:47.877230: | creating state object #1 at 0x55a9566d62d8 Aug 26 18:24:47.877233: | State DB: adding IKEv2 state #1 in UNDEFINED Aug 26 18:24:47.877240: | pstats #1 ikev2.ike started Aug 26 18:24:47.877243: | Message ID: init #1: msgid=0 lastack=4294967295 nextuse=0 lastrecv=4294967295 lastreplied=0 Aug 26 18:24:47.877246: | parent state #1: UNDEFINED(ignore) => PARENT_I0(ignore) Aug 26 18:24:47.877252: | Message ID: init_ike #1; ike: initiator.sent=0->-1 initiator.recv=0->-1 responder.sent=0->-1 responder.recv=0->-1 wip.initiator=0->-1 wip.responder=0->-1 Aug 26 18:24:47.877260: | suspend processing: connection "north-eastnets/0x2" (in ikev2_parent_outI1() at ikev2_parent.c:535) Aug 26 18:24:47.877265: | start processing: state #1 connection "north-eastnets/0x2" from 192.1.3.33 (in ikev2_parent_outI1() at ikev2_parent.c:535) Aug 26 18:24:47.877268: | dup_any(fd@-1) -> fd@-1 (in ikev2_parent_outI1() at ikev2_parent.c:551) Aug 26 18:24:47.877273: | Queuing pending IPsec SA negotiating with 192.1.3.33 "north-eastnets/0x2" IKE SA #1 "north-eastnets/0x2" Aug 26 18:24:47.877277: "north-eastnets/0x2" #1: initiating v2 parent SA Aug 26 18:24:47.877286: | constructing local IKE proposals for north-eastnets/0x2 (IKE SA initiator selecting KE) Aug 26 18:24:47.877314: | converting ike_info AES_CBC_256-HMAC_SHA2_256-MODP2048 to ikev2 ... Aug 26 18:24:47.877322: | ... ikev2_proposal: 1:IKE:ENCR=AES_CBC_256;PRF=HMAC_SHA2_256;INTEG=HMAC_SHA2_256_128;DH=MODP2048 Aug 26 18:24:47.877327: "north-eastnets/0x2": constructed local IKE proposals for north-eastnets/0x2 (IKE SA initiator selecting KE): 1:IKE:ENCR=AES_CBC_256;PRF=HMAC_SHA2_256;INTEG=HMAC_SHA2_256_128;DH=MODP2048 Aug 26 18:24:47.877338: | adding ikev2_outI1 KE work-order 1 for state #1 Aug 26 18:24:47.877345: | event_schedule: new EVENT_CRYPTO_TIMEOUT-pe@0x55a9566d4d28 Aug 26 18:24:47.877349: | inserting event EVENT_CRYPTO_TIMEOUT, timeout in 60 seconds for #1 Aug 26 18:24:47.877352: | libevent_malloc: new ptr-libevent@0x55a9566c6d58 size 128 Aug 26 18:24:47.877363: | #1 spent 0.136 milliseconds in ikev2_parent_outI1() Aug 26 18:24:47.877367: | processing: RESET whack log_fd (was fd@16) (in ikev2_parent_outI1() at ikev2_parent.c:610) Aug 26 18:24:47.877370: | crypto helper 1 resuming Aug 26 18:24:47.877371: | RESET processing: state #1 connection "north-eastnets/0x2" from 192.1.3.33 (in ikev2_parent_outI1() at ikev2_parent.c:610) Aug 26 18:24:47.877387: | crypto helper 1 starting work-order 1 for state #1 Aug 26 18:24:47.877388: | RESET processing: connection "north-eastnets/0x2" (in ikev2_parent_outI1() at ikev2_parent.c:610) Aug 26 18:24:47.877394: | crypto helper 1 doing build KE and nonce (ikev2_outI1 KE); request ID 1 Aug 26 18:24:47.877396: | processing: STOP connection NULL (in initiate_a_connection() at initiate.c:349) Aug 26 18:24:47.877401: | start processing: connection "north-eastnets/0x1" (in initiate_a_connection() at initiate.c:186) Aug 26 18:24:47.877404: | connection 'north-eastnets/0x1' +POLICY_UP Aug 26 18:24:47.877407: | dup_any(fd@-1) -> fd@-1 (in initiate_a_connection() at initiate.c:342) Aug 26 18:24:47.877409: | FOR_EACH_STATE_... in find_phase1_state Aug 26 18:24:47.877413: | Queuing pending IPsec SA negotiating with 192.1.3.33 "north-eastnets/0x1" IKE SA #1 "north-eastnets/0x2" Aug 26 18:24:47.877417: | stop processing: connection "north-eastnets/0x1" (in initiate_a_connection() at initiate.c:349) Aug 26 18:24:47.877424: | close_any(fd@16) (in whack_process() at rcv_whack.c:700) Aug 26 18:24:47.877428: | spent 0.22 milliseconds in whack Aug 26 18:24:47.878049: | processing signal PLUTO_SIGCHLD Aug 26 18:24:47.878062: | waitpid returned pid 26791 (exited with status 0) Aug 26 18:24:47.878067: | reaped addconn helper child (status 0) Aug 26 18:24:47.878073: | waitpid returned ECHILD (no child processes left) Aug 26 18:24:47.878079: | spent 0.0198 milliseconds in signal handler PLUTO_SIGCHLD Aug 26 18:24:47.878425: | crypto helper 1 finished build KE and nonce (ikev2_outI1 KE); request ID 1 time elapsed 0.001031 seconds Aug 26 18:24:47.878440: | (#1) spent 1.02 milliseconds in crypto helper computing work-order 1: ikev2_outI1 KE (pcr) Aug 26 18:24:47.878444: | crypto helper 1 sending results from work-order 1 for state #1 to event queue Aug 26 18:24:47.878448: | scheduling resume sending helper answer for #1 Aug 26 18:24:47.878452: | libevent_malloc: new ptr-libevent@0x7f3ac4002888 size 128 Aug 26 18:24:47.878459: | crypto helper 1 waiting (nothing to do) Aug 26 18:24:47.878466: | processing resume sending helper answer for #1 Aug 26 18:24:47.878475: | start processing: state #1 connection "north-eastnets/0x2" from 192.1.3.33 (in resume_handler() at server.c:797) Aug 26 18:24:47.878478: | crypto helper 1 replies to request ID 1 Aug 26 18:24:47.878480: | calling continuation function 0x55a9559fdb50 Aug 26 18:24:47.878482: | ikev2_parent_outI1_continue for #1 Aug 26 18:24:47.878508: | **emit ISAKMP Message: Aug 26 18:24:47.878510: | initiator cookie: Aug 26 18:24:47.878512: | 91 56 7a 14 bd 22 79 f1 Aug 26 18:24:47.878513: | responder cookie: Aug 26 18:24:47.878515: | 00 00 00 00 00 00 00 00 Aug 26 18:24:47.878517: | next payload type: ISAKMP_NEXT_NONE (0x0) Aug 26 18:24:47.878520: | ISAKMP version: IKEv2 version 2.0 (rfc4306/rfc5996) (0x20) Aug 26 18:24:47.878524: | exchange type: ISAKMP_v2_IKE_SA_INIT (0x22) Aug 26 18:24:47.878528: | flags: ISAKMP_FLAG_v2_IKE_INIT (0x8) Aug 26 18:24:47.878531: | Message ID: 0 (0x0) Aug 26 18:24:47.878534: | next payload chain: saving message location 'ISAKMP Message'.'next payload type' Aug 26 18:24:47.878540: | using existing local IKE proposals for connection north-eastnets/0x2 (IKE SA initiator emitting local proposals): 1:IKE:ENCR=AES_CBC_256;PRF=HMAC_SHA2_256;INTEG=HMAC_SHA2_256_128;DH=MODP2048 Aug 26 18:24:47.878545: | Emitting ikev2_proposals ... Aug 26 18:24:47.878547: | ***emit IKEv2 Security Association Payload: Aug 26 18:24:47.878550: | next payload type: ISAKMP_NEXT_v2NONE (0x0) Aug 26 18:24:47.878551: | flags: none (0x0) Aug 26 18:24:47.878553: | next payload chain: setting previous 'ISAKMP Message'.'next payload type' to current IKEv2 Security Association Payload (33:ISAKMP_NEXT_v2SA) Aug 26 18:24:47.878555: | next payload chain: saving location 'IKEv2 Security Association Payload'.'next payload type' in 'reply packet' Aug 26 18:24:47.878558: | ****emit IKEv2 Proposal Substructure Payload: Aug 26 18:24:47.878559: | last proposal: v2_PROPOSAL_LAST (0x0) Aug 26 18:24:47.878561: | prop #: 1 (0x1) Aug 26 18:24:47.878563: | proto ID: IKEv2_SEC_PROTO_IKE (0x1) Aug 26 18:24:47.878564: | spi size: 0 (0x0) Aug 26 18:24:47.878566: | # transforms: 4 (0x4) Aug 26 18:24:47.878568: | last substructure: saving location 'IKEv2 Security Association Payload'.'IKEv2 Proposal Substructure Payload'.'last proposal' Aug 26 18:24:47.878570: | *****emit IKEv2 Transform Substructure Payload: Aug 26 18:24:47.878571: | last transform: v2_TRANSFORM_NON_LAST (0x3) Aug 26 18:24:47.878573: | IKEv2 transform type: TRANS_TYPE_ENCR (0x1) Aug 26 18:24:47.878575: | IKEv2 transform ID: AES_CBC (0xc) Aug 26 18:24:47.878577: | last substructure: saving location 'IKEv2 Proposal Substructure Payload'.'IKEv2 Transform Substructure Payload'.'last transform' Aug 26 18:24:47.878579: | ******emit IKEv2 Attribute Substructure Payload: Aug 26 18:24:47.878580: | af+type: AF+IKEv2_KEY_LENGTH (0x800e) Aug 26 18:24:47.878582: | length/value: 256 (0x100) Aug 26 18:24:47.878585: | emitting length of IKEv2 Transform Substructure Payload: 12 Aug 26 18:24:47.878588: | *****emit IKEv2 Transform Substructure Payload: Aug 26 18:24:47.878592: | last transform: v2_TRANSFORM_NON_LAST (0x3) Aug 26 18:24:47.878595: | IKEv2 transform type: TRANS_TYPE_PRF (0x2) Aug 26 18:24:47.878598: | IKEv2 transform ID: PRF_HMAC_SHA2_256 (0x5) Aug 26 18:24:47.878601: | last substructure: checking 'IKEv2 Proposal Substructure Payload'.'IKEv2 Transform Substructure Payload'.'last transform' is v2_TRANSFORM_NON_LAST (0x3) Aug 26 18:24:47.878603: | last substructure: saving location 'IKEv2 Proposal Substructure Payload'.'IKEv2 Transform Substructure Payload'.'last transform' Aug 26 18:24:47.878605: | emitting length of IKEv2 Transform Substructure Payload: 8 Aug 26 18:24:47.878606: | *****emit IKEv2 Transform Substructure Payload: Aug 26 18:24:47.878608: | last transform: v2_TRANSFORM_NON_LAST (0x3) Aug 26 18:24:47.878610: | IKEv2 transform type: TRANS_TYPE_INTEG (0x3) Aug 26 18:24:47.878611: | IKEv2 transform ID: AUTH_HMAC_SHA2_256_128 (0xc) Aug 26 18:24:47.878613: | last substructure: checking 'IKEv2 Proposal Substructure Payload'.'IKEv2 Transform Substructure Payload'.'last transform' is v2_TRANSFORM_NON_LAST (0x3) Aug 26 18:24:47.878615: | last substructure: saving location 'IKEv2 Proposal Substructure Payload'.'IKEv2 Transform Substructure Payload'.'last transform' Aug 26 18:24:47.878617: | emitting length of IKEv2 Transform Substructure Payload: 8 Aug 26 18:24:47.878618: | *****emit IKEv2 Transform Substructure Payload: Aug 26 18:24:47.878620: | last transform: v2_TRANSFORM_LAST (0x0) Aug 26 18:24:47.878621: | IKEv2 transform type: TRANS_TYPE_DH (0x4) Aug 26 18:24:47.878623: | IKEv2 transform ID: OAKLEY_GROUP_MODP2048 (0xe) Aug 26 18:24:47.878625: | last substructure: checking 'IKEv2 Proposal Substructure Payload'.'IKEv2 Transform Substructure Payload'.'last transform' is v2_TRANSFORM_NON_LAST (0x3) Aug 26 18:24:47.878627: | last substructure: saving location 'IKEv2 Proposal Substructure Payload'.'IKEv2 Transform Substructure Payload'.'last transform' Aug 26 18:24:47.878628: | emitting length of IKEv2 Transform Substructure Payload: 8 Aug 26 18:24:47.878630: | emitting length of IKEv2 Proposal Substructure Payload: 44 Aug 26 18:24:47.878632: | last substructure: checking 'IKEv2 Proposal Substructure Payload'.'IKEv2 Transform Substructure Payload'.'last transform' is 0 Aug 26 18:24:47.878637: | emitting length of IKEv2 Security Association Payload: 48 Aug 26 18:24:47.878639: | last substructure: checking 'IKEv2 Security Association Payload'.'IKEv2 Proposal Substructure Payload'.'last proposal' is 0 Aug 26 18:24:47.878641: | ***emit IKEv2 Key Exchange Payload: Aug 26 18:24:47.878643: | next payload type: ISAKMP_NEXT_v2NONE (0x0) Aug 26 18:24:47.878644: | flags: none (0x0) Aug 26 18:24:47.878646: | DH group: OAKLEY_GROUP_MODP2048 (0xe) Aug 26 18:24:47.878648: | next payload chain: setting previous 'IKEv2 Security Association Payload'.'next payload type' to current IKEv2 Key Exchange Payload (34:ISAKMP_NEXT_v2KE) Aug 26 18:24:47.878650: | next payload chain: saving location 'IKEv2 Key Exchange Payload'.'next payload type' in 'reply packet' Aug 26 18:24:47.878653: | emitting 256 raw bytes of ikev2 g^x into IKEv2 Key Exchange Payload Aug 26 18:24:47.878656: | ikev2 g^x c4 82 c0 c8 e3 17 ae d5 f5 55 9b 8a 00 b3 9e 08 Aug 26 18:24:47.878660: | ikev2 g^x 00 a8 ed 4c 9c c4 2e e8 d7 87 7c 24 1b 54 44 ab Aug 26 18:24:47.878663: | ikev2 g^x af ba b2 87 db 80 f1 ac 75 ce d2 3e ef a8 98 78 Aug 26 18:24:47.878666: | ikev2 g^x 56 3c 1c e2 e8 a1 d4 bd 88 6a 29 e4 db 5d fe c8 Aug 26 18:24:47.878668: | ikev2 g^x f5 ce 42 99 05 4a bc c0 1c 07 73 f5 a7 43 89 8f Aug 26 18:24:47.878670: | ikev2 g^x de ce 48 2d d5 2a 6f b0 35 d2 0a 95 cb bc 7a 5e Aug 26 18:24:47.878671: | ikev2 g^x ec 0e 41 ac 65 ab 54 b1 30 1b 6e 4a e2 ad d4 7d Aug 26 18:24:47.878673: | ikev2 g^x 03 2d d3 33 dd 93 1f 95 db 45 65 0c 75 e8 7f 36 Aug 26 18:24:47.878674: | ikev2 g^x f0 8d f7 f1 25 f6 70 ee f4 fc 72 6e d0 40 a2 85 Aug 26 18:24:47.878676: | ikev2 g^x 4f 7d d6 10 cb 07 bd 19 fe 9b 18 29 55 0a 20 dd Aug 26 18:24:47.878677: | ikev2 g^x e4 21 8f 3e 90 f1 28 fd db 49 37 5c 38 a2 fb 1e Aug 26 18:24:47.878679: | ikev2 g^x af 0f 42 c3 e8 1e 52 b6 f1 d6 ec 77 64 4c 33 c0 Aug 26 18:24:47.878680: | ikev2 g^x d1 5a e8 37 33 70 29 1c a0 02 28 bc bd 1f 41 0c Aug 26 18:24:47.878682: | ikev2 g^x cc e9 08 a8 ce 17 c9 7b 06 91 01 70 89 d5 15 13 Aug 26 18:24:47.878683: | ikev2 g^x d2 10 b1 f2 0d 32 c8 8c 6d d7 7a 50 be 39 89 58 Aug 26 18:24:47.878685: | ikev2 g^x a5 ae 82 a4 69 05 98 f4 49 49 f7 7f 97 cb a5 17 Aug 26 18:24:47.878686: | emitting length of IKEv2 Key Exchange Payload: 264 Aug 26 18:24:47.878688: | ***emit IKEv2 Nonce Payload: Aug 26 18:24:47.878690: | next payload type: ISAKMP_NEXT_v2N (0x29) Aug 26 18:24:47.878692: | flags: none (0x0) Aug 26 18:24:47.878694: | next payload chain: ignoring supplied 'IKEv2 Nonce Payload'.'next payload type' value 41:ISAKMP_NEXT_v2N Aug 26 18:24:47.878696: | next payload chain: setting previous 'IKEv2 Key Exchange Payload'.'next payload type' to current IKEv2 Nonce Payload (40:ISAKMP_NEXT_v2Ni) Aug 26 18:24:47.878697: | next payload chain: saving location 'IKEv2 Nonce Payload'.'next payload type' in 'reply packet' Aug 26 18:24:47.878699: | emitting 32 raw bytes of IKEv2 nonce into IKEv2 Nonce Payload Aug 26 18:24:47.878701: | IKEv2 nonce aa a7 d5 71 d6 3e c7 99 5d d9 b7 2a 31 b9 12 28 Aug 26 18:24:47.878703: | IKEv2 nonce de dc 47 bc 7f 97 8c 6b 63 32 17 2a dd 17 2a f7 Aug 26 18:24:47.878704: | emitting length of IKEv2 Nonce Payload: 36 Aug 26 18:24:47.878706: | Adding a v2N Payload Aug 26 18:24:47.878708: | ***emit IKEv2 Notify Payload: Aug 26 18:24:47.878709: | next payload type: ISAKMP_NEXT_v2NONE (0x0) Aug 26 18:24:47.878711: | flags: none (0x0) Aug 26 18:24:47.878713: | Protocol ID: PROTO_v2_RESERVED (0x0) Aug 26 18:24:47.878714: | SPI size: 0 (0x0) Aug 26 18:24:47.878716: | Notify Message Type: v2N_IKEV2_FRAGMENTATION_SUPPORTED (0x402e) Aug 26 18:24:47.878718: | next payload chain: setting previous 'IKEv2 Nonce Payload'.'next payload type' to current IKEv2 Notify Payload (41:ISAKMP_NEXT_v2N) Aug 26 18:24:47.878720: | next payload chain: saving location 'IKEv2 Notify Payload'.'next payload type' in 'reply packet' Aug 26 18:24:47.878722: | emitting length of IKEv2 Notify Payload: 8 Aug 26 18:24:47.878727: | NAT-Traversal support [enabled] add v2N payloads. Aug 26 18:24:47.878729: | natd_hash: rcookie is zero Aug 26 18:24:47.878738: | natd_hash: hasher=0x55a955ad2800(20) Aug 26 18:24:47.878739: | natd_hash: icookie= 91 56 7a 14 bd 22 79 f1 Aug 26 18:24:47.878741: | natd_hash: rcookie= 00 00 00 00 00 00 00 00 Aug 26 18:24:47.878743: | natd_hash: ip= c0 01 02 17 Aug 26 18:24:47.878744: | natd_hash: port=500 Aug 26 18:24:47.878746: | natd_hash: hash= 31 3f ef 16 28 74 49 99 29 c0 77 72 09 dc d7 7b Aug 26 18:24:47.878747: | natd_hash: hash= 47 e1 91 96 Aug 26 18:24:47.878749: | Adding a v2N Payload Aug 26 18:24:47.878750: | ***emit IKEv2 Notify Payload: Aug 26 18:24:47.878752: | next payload type: ISAKMP_NEXT_v2NONE (0x0) Aug 26 18:24:47.878754: | flags: none (0x0) Aug 26 18:24:47.878755: | Protocol ID: PROTO_v2_RESERVED (0x0) Aug 26 18:24:47.878757: | SPI size: 0 (0x0) Aug 26 18:24:47.878759: | Notify Message Type: v2N_NAT_DETECTION_SOURCE_IP (0x4004) Aug 26 18:24:47.878765: | next payload chain: setting previous 'IKEv2 Notify Payload'.'next payload type' to current IKEv2 Notify Payload (41:ISAKMP_NEXT_v2N) Aug 26 18:24:47.878769: | next payload chain: saving location 'IKEv2 Notify Payload'.'next payload type' in 'reply packet' Aug 26 18:24:47.878773: | emitting 20 raw bytes of Notify data into IKEv2 Notify Payload Aug 26 18:24:47.878776: | Notify data 31 3f ef 16 28 74 49 99 29 c0 77 72 09 dc d7 7b Aug 26 18:24:47.878779: | Notify data 47 e1 91 96 Aug 26 18:24:47.878782: | emitting length of IKEv2 Notify Payload: 28 Aug 26 18:24:47.878784: | natd_hash: rcookie is zero Aug 26 18:24:47.878794: | natd_hash: hasher=0x55a955ad2800(20) Aug 26 18:24:47.878797: | natd_hash: icookie= 91 56 7a 14 bd 22 79 f1 Aug 26 18:24:47.878800: | natd_hash: rcookie= 00 00 00 00 00 00 00 00 Aug 26 18:24:47.878802: | natd_hash: ip= c0 01 03 21 Aug 26 18:24:47.878804: | natd_hash: port=500 Aug 26 18:24:47.878807: | natd_hash: hash= d1 48 3e ca 4f 62 d3 b0 e9 58 43 9c 37 5d 83 5a Aug 26 18:24:47.878810: | natd_hash: hash= 32 91 22 18 Aug 26 18:24:47.878812: | Adding a v2N Payload Aug 26 18:24:47.878814: | ***emit IKEv2 Notify Payload: Aug 26 18:24:47.878817: | next payload type: ISAKMP_NEXT_v2NONE (0x0) Aug 26 18:24:47.878820: | flags: none (0x0) Aug 26 18:24:47.878822: | Protocol ID: PROTO_v2_RESERVED (0x0) Aug 26 18:24:47.878825: | SPI size: 0 (0x0) Aug 26 18:24:47.878828: | Notify Message Type: v2N_NAT_DETECTION_DESTINATION_IP (0x4005) Aug 26 18:24:47.878831: | next payload chain: setting previous 'IKEv2 Notify Payload'.'next payload type' to current IKEv2 Notify Payload (41:ISAKMP_NEXT_v2N) Aug 26 18:24:47.878834: | next payload chain: saving location 'IKEv2 Notify Payload'.'next payload type' in 'reply packet' Aug 26 18:24:47.878837: | emitting 20 raw bytes of Notify data into IKEv2 Notify Payload Aug 26 18:24:47.878840: | Notify data d1 48 3e ca 4f 62 d3 b0 e9 58 43 9c 37 5d 83 5a Aug 26 18:24:47.878842: | Notify data 32 91 22 18 Aug 26 18:24:47.878845: | emitting length of IKEv2 Notify Payload: 28 Aug 26 18:24:47.878848: | emitting length of ISAKMP Message: 440 Aug 26 18:24:47.878854: | stop processing: state #1 connection "north-eastnets/0x2" from 192.1.3.33 (in ikev2_parent_outI1_common() at ikev2_parent.c:817) Aug 26 18:24:47.878864: | start processing: state #1 connection "north-eastnets/0x2" from 192.1.3.33 (in complete_v2_state_transition() at ikev2.c:3379) Aug 26 18:24:47.878869: | #1 complete_v2_state_transition() PARENT_I0->PARENT_I1 with status STF_OK Aug 26 18:24:47.878872: | IKEv2: transition from state STATE_PARENT_I0 to state STATE_PARENT_I1 Aug 26 18:24:47.878875: | parent state #1: PARENT_I0(ignore) => PARENT_I1(half-open IKE SA) Aug 26 18:24:47.878878: | Message ID: updating counters for #1 to 4294967295 after switching state Aug 26 18:24:47.878881: | Message ID: IKE #1 skipping update_recv as MD is fake Aug 26 18:24:47.878886: | Message ID: sent #1 request 0; ike: initiator.sent=-1->0 initiator.recv=-1 responder.sent=-1 responder.recv=-1 wip.initiator=-1->0 wip.responder=-1 Aug 26 18:24:47.878892: "north-eastnets/0x2" #1: STATE_PARENT_I1: sent v2I1, expected v2R1 Aug 26 18:24:47.878897: | sending V2 reply packet to 192.1.3.33:500 (from 192.1.2.23:500) Aug 26 18:24:47.878907: | sending 440 bytes for STATE_PARENT_I0 through eth1 from 192.1.2.23:500 to 192.1.3.33:500 (using #1) Aug 26 18:24:47.878910: | 91 56 7a 14 bd 22 79 f1 00 00 00 00 00 00 00 00 Aug 26 18:24:47.878912: | 21 20 22 08 00 00 00 00 00 00 01 b8 22 00 00 30 Aug 26 18:24:47.878914: | 00 00 00 2c 01 01 00 04 03 00 00 0c 01 00 00 0c Aug 26 18:24:47.878916: | 80 0e 01 00 03 00 00 08 02 00 00 05 03 00 00 08 Aug 26 18:24:47.878919: | 03 00 00 0c 00 00 00 08 04 00 00 0e 28 00 01 08 Aug 26 18:24:47.878921: | 00 0e 00 00 c4 82 c0 c8 e3 17 ae d5 f5 55 9b 8a Aug 26 18:24:47.878923: | 00 b3 9e 08 00 a8 ed 4c 9c c4 2e e8 d7 87 7c 24 Aug 26 18:24:47.878926: | 1b 54 44 ab af ba b2 87 db 80 f1 ac 75 ce d2 3e Aug 26 18:24:47.878928: | ef a8 98 78 56 3c 1c e2 e8 a1 d4 bd 88 6a 29 e4 Aug 26 18:24:47.878931: | db 5d fe c8 f5 ce 42 99 05 4a bc c0 1c 07 73 f5 Aug 26 18:24:47.878933: | a7 43 89 8f de ce 48 2d d5 2a 6f b0 35 d2 0a 95 Aug 26 18:24:47.878935: | cb bc 7a 5e ec 0e 41 ac 65 ab 54 b1 30 1b 6e 4a Aug 26 18:24:47.878936: | e2 ad d4 7d 03 2d d3 33 dd 93 1f 95 db 45 65 0c Aug 26 18:24:47.878938: | 75 e8 7f 36 f0 8d f7 f1 25 f6 70 ee f4 fc 72 6e Aug 26 18:24:47.878939: | d0 40 a2 85 4f 7d d6 10 cb 07 bd 19 fe 9b 18 29 Aug 26 18:24:47.878941: | 55 0a 20 dd e4 21 8f 3e 90 f1 28 fd db 49 37 5c Aug 26 18:24:47.878942: | 38 a2 fb 1e af 0f 42 c3 e8 1e 52 b6 f1 d6 ec 77 Aug 26 18:24:47.878944: | 64 4c 33 c0 d1 5a e8 37 33 70 29 1c a0 02 28 bc Aug 26 18:24:47.878945: | bd 1f 41 0c cc e9 08 a8 ce 17 c9 7b 06 91 01 70 Aug 26 18:24:47.878947: | 89 d5 15 13 d2 10 b1 f2 0d 32 c8 8c 6d d7 7a 50 Aug 26 18:24:47.878948: | be 39 89 58 a5 ae 82 a4 69 05 98 f4 49 49 f7 7f Aug 26 18:24:47.878950: | 97 cb a5 17 29 00 00 24 aa a7 d5 71 d6 3e c7 99 Aug 26 18:24:47.878951: | 5d d9 b7 2a 31 b9 12 28 de dc 47 bc 7f 97 8c 6b Aug 26 18:24:47.878953: | 63 32 17 2a dd 17 2a f7 29 00 00 08 00 00 40 2e Aug 26 18:24:47.878954: | 29 00 00 1c 00 00 40 04 31 3f ef 16 28 74 49 99 Aug 26 18:24:47.878956: | 29 c0 77 72 09 dc d7 7b 47 e1 91 96 00 00 00 1c Aug 26 18:24:47.878957: | 00 00 40 05 d1 48 3e ca 4f 62 d3 b0 e9 58 43 9c Aug 26 18:24:47.878959: | 37 5d 83 5a 32 91 22 18 Aug 26 18:24:47.879026: | state #1 requesting EVENT_CRYPTO_TIMEOUT to be deleted Aug 26 18:24:47.879031: | libevent_free: release ptr-libevent@0x55a9566c6d58 Aug 26 18:24:47.879033: | free_event_entry: release EVENT_CRYPTO_TIMEOUT-pe@0x55a9566d4d28 Aug 26 18:24:47.879035: | success_v2_state_transition scheduling EVENT_RETRANSMIT of c->r_interval=50ms Aug 26 18:24:47.879038: | event_schedule: new EVENT_RETRANSMIT-pe@0x55a9566d4d28 Aug 26 18:24:47.879040: | inserting event EVENT_RETRANSMIT, timeout in 0.05 seconds for #1 Aug 26 18:24:47.879042: | libevent_malloc: new ptr-libevent@0x55a9566d6f18 size 128 Aug 26 18:24:47.879046: | #1 STATE_PARENT_I1: retransmits: first event in 0.05 seconds; timeout in 60 seconds; limit of 12 retransmits; current time is 29173.621504 Aug 26 18:24:47.879048: | resume sending helper answer for #1 suppresed complete_v2_state_transition() and stole MD Aug 26 18:24:47.879052: | #1 spent 0.527 milliseconds in resume sending helper answer Aug 26 18:24:47.879056: | stop processing: state #1 connection "north-eastnets/0x2" from 192.1.3.33 (in resume_handler() at server.c:833) Aug 26 18:24:47.879058: | libevent_free: release ptr-libevent@0x7f3ac4002888 Aug 26 18:24:47.911377: | accept(whackctlfd, (struct sockaddr *)&whackaddr, &whackaddrlen) -> fd@16 (in whack_handle() at rcv_whack.c:722) Aug 26 18:24:47.911704: | FOR_EACH_CONNECTION_... in show_connections_status Aug 26 18:24:47.911711: | FOR_EACH_CONNECTION_... in show_connections_status Aug 26 18:24:47.911825: | FOR_EACH_STATE_... in show_states_status (sort_states) Aug 26 18:24:47.911833: | FOR_EACH_STATE_... in sort_states Aug 26 18:24:47.911849: | close_any(fd@16) (in whack_process() at rcv_whack.c:700) Aug 26 18:24:47.911855: | spent 0.483 milliseconds in whack Aug 26 18:24:47.929926: | timer_event_cb: processing event@0x55a9566d4d28 Aug 26 18:24:47.929940: | handling event EVENT_RETRANSMIT for parent state #1 Aug 26 18:24:47.929946: | start processing: state #1 connection "north-eastnets/0x2" from 192.1.3.33 (in timer_event_cb() at timer.c:250) Aug 26 18:24:47.929949: | IKEv2 retransmit event Aug 26 18:24:47.929953: | [RE]START processing: state #1 connection "north-eastnets/0x2" from 192.1.3.33 (in retransmit_v2_msg() at retry.c:144) Aug 26 18:24:47.929955: | handling event EVENT_RETRANSMIT for 192.1.3.33 "north-eastnets/0x2" #1 attempt 2 of 0 Aug 26 18:24:47.929958: | and parent for 192.1.3.33 "north-eastnets/0x2" #1 keying attempt 1 of 0; retransmit 1 Aug 26 18:24:47.929963: | retransmits: current time 29173.672427; retransmit count 0 exceeds limit? NO; deltatime 0.05 exceeds limit? NO; monotime 0.050923 exceeds limit? NO Aug 26 18:24:47.929966: | event_schedule: new EVENT_RETRANSMIT-pe@0x7f3ac4002b78 Aug 26 18:24:47.929969: | inserting event EVENT_RETRANSMIT, timeout in 0.05 seconds for #1 Aug 26 18:24:47.929971: | libevent_malloc: new ptr-libevent@0x7f3ac4002888 size 128 Aug 26 18:24:47.929974: "north-eastnets/0x2" #1: STATE_PARENT_I1: retransmission; will wait 0.05 seconds for response Aug 26 18:24:47.929979: | sending 440 bytes for EVENT_RETRANSMIT through eth1 from 192.1.2.23:500 to 192.1.3.33:500 (using #1) Aug 26 18:24:47.929982: | 91 56 7a 14 bd 22 79 f1 00 00 00 00 00 00 00 00 Aug 26 18:24:47.929983: | 21 20 22 08 00 00 00 00 00 00 01 b8 22 00 00 30 Aug 26 18:24:47.929985: | 00 00 00 2c 01 01 00 04 03 00 00 0c 01 00 00 0c Aug 26 18:24:47.929986: | 80 0e 01 00 03 00 00 08 02 00 00 05 03 00 00 08 Aug 26 18:24:47.929988: | 03 00 00 0c 00 00 00 08 04 00 00 0e 28 00 01 08 Aug 26 18:24:47.929989: | 00 0e 00 00 c4 82 c0 c8 e3 17 ae d5 f5 55 9b 8a Aug 26 18:24:47.929991: | 00 b3 9e 08 00 a8 ed 4c 9c c4 2e e8 d7 87 7c 24 Aug 26 18:24:47.929992: | 1b 54 44 ab af ba b2 87 db 80 f1 ac 75 ce d2 3e Aug 26 18:24:47.929994: | ef a8 98 78 56 3c 1c e2 e8 a1 d4 bd 88 6a 29 e4 Aug 26 18:24:47.929995: | db 5d fe c8 f5 ce 42 99 05 4a bc c0 1c 07 73 f5 Aug 26 18:24:47.929996: | a7 43 89 8f de ce 48 2d d5 2a 6f b0 35 d2 0a 95 Aug 26 18:24:47.929998: | cb bc 7a 5e ec 0e 41 ac 65 ab 54 b1 30 1b 6e 4a Aug 26 18:24:47.929999: | e2 ad d4 7d 03 2d d3 33 dd 93 1f 95 db 45 65 0c Aug 26 18:24:47.930001: | 75 e8 7f 36 f0 8d f7 f1 25 f6 70 ee f4 fc 72 6e Aug 26 18:24:47.930002: | d0 40 a2 85 4f 7d d6 10 cb 07 bd 19 fe 9b 18 29 Aug 26 18:24:47.930004: | 55 0a 20 dd e4 21 8f 3e 90 f1 28 fd db 49 37 5c Aug 26 18:24:47.930005: | 38 a2 fb 1e af 0f 42 c3 e8 1e 52 b6 f1 d6 ec 77 Aug 26 18:24:47.930007: | 64 4c 33 c0 d1 5a e8 37 33 70 29 1c a0 02 28 bc Aug 26 18:24:47.930008: | bd 1f 41 0c cc e9 08 a8 ce 17 c9 7b 06 91 01 70 Aug 26 18:24:47.930010: | 89 d5 15 13 d2 10 b1 f2 0d 32 c8 8c 6d d7 7a 50 Aug 26 18:24:47.930011: | be 39 89 58 a5 ae 82 a4 69 05 98 f4 49 49 f7 7f Aug 26 18:24:47.930013: | 97 cb a5 17 29 00 00 24 aa a7 d5 71 d6 3e c7 99 Aug 26 18:24:47.930014: | 5d d9 b7 2a 31 b9 12 28 de dc 47 bc 7f 97 8c 6b Aug 26 18:24:47.930016: | 63 32 17 2a dd 17 2a f7 29 00 00 08 00 00 40 2e Aug 26 18:24:47.930017: | 29 00 00 1c 00 00 40 04 31 3f ef 16 28 74 49 99 Aug 26 18:24:47.930019: | 29 c0 77 72 09 dc d7 7b 47 e1 91 96 00 00 00 1c Aug 26 18:24:47.930020: | 00 00 40 05 d1 48 3e ca 4f 62 d3 b0 e9 58 43 9c Aug 26 18:24:47.930022: | 37 5d 83 5a 32 91 22 18 Aug 26 18:24:47.930063: | libevent_free: release ptr-libevent@0x55a9566d6f18 Aug 26 18:24:47.930067: | free_event_entry: release EVENT_RETRANSMIT-pe@0x55a9566d4d28 Aug 26 18:24:47.930072: | #1 spent 0.125 milliseconds in timer_event_cb() EVENT_RETRANSMIT Aug 26 18:24:47.930075: | stop processing: state #1 connection "north-eastnets/0x2" from 192.1.3.33 (in timer_event_cb() at timer.c:557) Aug 26 18:24:47.981241: | timer_event_cb: processing event@0x7f3ac4002b78 Aug 26 18:24:47.981253: | handling event EVENT_RETRANSMIT for parent state #1 Aug 26 18:24:47.981259: | start processing: state #1 connection "north-eastnets/0x2" from 192.1.3.33 (in timer_event_cb() at timer.c:250) Aug 26 18:24:47.981262: | IKEv2 retransmit event Aug 26 18:24:47.981265: | [RE]START processing: state #1 connection "north-eastnets/0x2" from 192.1.3.33 (in retransmit_v2_msg() at retry.c:144) Aug 26 18:24:47.981268: | handling event EVENT_RETRANSMIT for 192.1.3.33 "north-eastnets/0x2" #1 attempt 2 of 0 Aug 26 18:24:47.981271: | and parent for 192.1.3.33 "north-eastnets/0x2" #1 keying attempt 1 of 0; retransmit 2 Aug 26 18:24:47.981276: | retransmits: current time 29173.72374; retransmit count 1 exceeds limit? NO; deltatime 0.1 exceeds limit? NO; monotime 0.102236 exceeds limit? NO Aug 26 18:24:47.981278: | event_schedule: new EVENT_RETRANSMIT-pe@0x55a9566d4d28 Aug 26 18:24:47.981281: | inserting event EVENT_RETRANSMIT, timeout in 0.1 seconds for #1 Aug 26 18:24:47.981284: | libevent_malloc: new ptr-libevent@0x55a9566d6f18 size 128 Aug 26 18:24:47.981286: "north-eastnets/0x2" #1: STATE_PARENT_I1: retransmission; will wait 0.1 seconds for response Aug 26 18:24:47.981309: | sending 440 bytes for EVENT_RETRANSMIT through eth1 from 192.1.2.23:500 to 192.1.3.33:500 (using #1) Aug 26 18:24:47.981313: | 91 56 7a 14 bd 22 79 f1 00 00 00 00 00 00 00 00 Aug 26 18:24:47.981315: | 21 20 22 08 00 00 00 00 00 00 01 b8 22 00 00 30 Aug 26 18:24:47.981316: | 00 00 00 2c 01 01 00 04 03 00 00 0c 01 00 00 0c Aug 26 18:24:47.981318: | 80 0e 01 00 03 00 00 08 02 00 00 05 03 00 00 08 Aug 26 18:24:47.981319: | 03 00 00 0c 00 00 00 08 04 00 00 0e 28 00 01 08 Aug 26 18:24:47.981321: | 00 0e 00 00 c4 82 c0 c8 e3 17 ae d5 f5 55 9b 8a Aug 26 18:24:47.981322: | 00 b3 9e 08 00 a8 ed 4c 9c c4 2e e8 d7 87 7c 24 Aug 26 18:24:47.981324: | 1b 54 44 ab af ba b2 87 db 80 f1 ac 75 ce d2 3e Aug 26 18:24:47.981325: | ef a8 98 78 56 3c 1c e2 e8 a1 d4 bd 88 6a 29 e4 Aug 26 18:24:47.981327: | db 5d fe c8 f5 ce 42 99 05 4a bc c0 1c 07 73 f5 Aug 26 18:24:47.981328: | a7 43 89 8f de ce 48 2d d5 2a 6f b0 35 d2 0a 95 Aug 26 18:24:47.981330: | cb bc 7a 5e ec 0e 41 ac 65 ab 54 b1 30 1b 6e 4a Aug 26 18:24:47.981331: | e2 ad d4 7d 03 2d d3 33 dd 93 1f 95 db 45 65 0c Aug 26 18:24:47.981333: | 75 e8 7f 36 f0 8d f7 f1 25 f6 70 ee f4 fc 72 6e Aug 26 18:24:47.981334: | d0 40 a2 85 4f 7d d6 10 cb 07 bd 19 fe 9b 18 29 Aug 26 18:24:47.981336: | 55 0a 20 dd e4 21 8f 3e 90 f1 28 fd db 49 37 5c Aug 26 18:24:47.981337: | 38 a2 fb 1e af 0f 42 c3 e8 1e 52 b6 f1 d6 ec 77 Aug 26 18:24:47.981339: | 64 4c 33 c0 d1 5a e8 37 33 70 29 1c a0 02 28 bc Aug 26 18:24:47.981340: | bd 1f 41 0c cc e9 08 a8 ce 17 c9 7b 06 91 01 70 Aug 26 18:24:47.981342: | 89 d5 15 13 d2 10 b1 f2 0d 32 c8 8c 6d d7 7a 50 Aug 26 18:24:47.981343: | be 39 89 58 a5 ae 82 a4 69 05 98 f4 49 49 f7 7f Aug 26 18:24:47.981345: | 97 cb a5 17 29 00 00 24 aa a7 d5 71 d6 3e c7 99 Aug 26 18:24:47.981346: | 5d d9 b7 2a 31 b9 12 28 de dc 47 bc 7f 97 8c 6b Aug 26 18:24:47.981348: | 63 32 17 2a dd 17 2a f7 29 00 00 08 00 00 40 2e Aug 26 18:24:47.981349: | 29 00 00 1c 00 00 40 04 31 3f ef 16 28 74 49 99 Aug 26 18:24:47.981351: | 29 c0 77 72 09 dc d7 7b 47 e1 91 96 00 00 00 1c Aug 26 18:24:47.981352: | 00 00 40 05 d1 48 3e ca 4f 62 d3 b0 e9 58 43 9c Aug 26 18:24:47.981354: | 37 5d 83 5a 32 91 22 18 Aug 26 18:24:47.981407: | libevent_free: release ptr-libevent@0x7f3ac4002888 Aug 26 18:24:47.981412: | free_event_entry: release EVENT_RETRANSMIT-pe@0x7f3ac4002b78 Aug 26 18:24:47.981421: | #1 spent 0.133 milliseconds in timer_event_cb() EVENT_RETRANSMIT Aug 26 18:24:47.981426: | stop processing: state #1 connection "north-eastnets/0x2" from 192.1.3.33 (in timer_event_cb() at timer.c:557) Aug 26 18:24:48.081550: | timer_event_cb: processing event@0x55a9566d4d28 Aug 26 18:24:48.081576: | handling event EVENT_RETRANSMIT for parent state #1 Aug 26 18:24:48.081585: | start processing: state #1 connection "north-eastnets/0x2" from 192.1.3.33 (in timer_event_cb() at timer.c:250) Aug 26 18:24:48.081589: | IKEv2 retransmit event Aug 26 18:24:48.081594: | [RE]START processing: state #1 connection "north-eastnets/0x2" from 192.1.3.33 (in retransmit_v2_msg() at retry.c:144) Aug 26 18:24:48.081598: | handling event EVENT_RETRANSMIT for 192.1.3.33 "north-eastnets/0x2" #1 attempt 2 of 0 Aug 26 18:24:48.081603: | and parent for 192.1.3.33 "north-eastnets/0x2" #1 keying attempt 1 of 0; retransmit 3 Aug 26 18:24:48.081609: | retransmits: current time 29173.824073; retransmit count 2 exceeds limit? NO; deltatime 0.2 exceeds limit? NO; monotime 0.202569 exceeds limit? NO Aug 26 18:24:48.081613: | event_schedule: new EVENT_RETRANSMIT-pe@0x7f3ac4002b78 Aug 26 18:24:48.081617: | inserting event EVENT_RETRANSMIT, timeout in 0.2 seconds for #1 Aug 26 18:24:48.081621: | libevent_malloc: new ptr-libevent@0x7f3ac4002888 size 128 Aug 26 18:24:48.081627: "north-eastnets/0x2" #1: STATE_PARENT_I1: retransmission; will wait 0.2 seconds for response Aug 26 18:24:48.081634: | sending 440 bytes for EVENT_RETRANSMIT through eth1 from 192.1.2.23:500 to 192.1.3.33:500 (using #1) Aug 26 18:24:48.081637: | 91 56 7a 14 bd 22 79 f1 00 00 00 00 00 00 00 00 Aug 26 18:24:48.081640: | 21 20 22 08 00 00 00 00 00 00 01 b8 22 00 00 30 Aug 26 18:24:48.081643: | 00 00 00 2c 01 01 00 04 03 00 00 0c 01 00 00 0c Aug 26 18:24:48.081645: | 80 0e 01 00 03 00 00 08 02 00 00 05 03 00 00 08 Aug 26 18:24:48.081647: | 03 00 00 0c 00 00 00 08 04 00 00 0e 28 00 01 08 Aug 26 18:24:48.081650: | 00 0e 00 00 c4 82 c0 c8 e3 17 ae d5 f5 55 9b 8a Aug 26 18:24:48.081652: | 00 b3 9e 08 00 a8 ed 4c 9c c4 2e e8 d7 87 7c 24 Aug 26 18:24:48.081655: | 1b 54 44 ab af ba b2 87 db 80 f1 ac 75 ce d2 3e Aug 26 18:24:48.081657: | ef a8 98 78 56 3c 1c e2 e8 a1 d4 bd 88 6a 29 e4 Aug 26 18:24:48.081660: | db 5d fe c8 f5 ce 42 99 05 4a bc c0 1c 07 73 f5 Aug 26 18:24:48.081662: | a7 43 89 8f de ce 48 2d d5 2a 6f b0 35 d2 0a 95 Aug 26 18:24:48.081665: | cb bc 7a 5e ec 0e 41 ac 65 ab 54 b1 30 1b 6e 4a Aug 26 18:24:48.081667: | e2 ad d4 7d 03 2d d3 33 dd 93 1f 95 db 45 65 0c Aug 26 18:24:48.081670: | 75 e8 7f 36 f0 8d f7 f1 25 f6 70 ee f4 fc 72 6e Aug 26 18:24:48.081672: | d0 40 a2 85 4f 7d d6 10 cb 07 bd 19 fe 9b 18 29 Aug 26 18:24:48.081675: | 55 0a 20 dd e4 21 8f 3e 90 f1 28 fd db 49 37 5c Aug 26 18:24:48.081677: | 38 a2 fb 1e af 0f 42 c3 e8 1e 52 b6 f1 d6 ec 77 Aug 26 18:24:48.081680: | 64 4c 33 c0 d1 5a e8 37 33 70 29 1c a0 02 28 bc Aug 26 18:24:48.081682: | bd 1f 41 0c cc e9 08 a8 ce 17 c9 7b 06 91 01 70 Aug 26 18:24:48.081685: | 89 d5 15 13 d2 10 b1 f2 0d 32 c8 8c 6d d7 7a 50 Aug 26 18:24:48.081687: | be 39 89 58 a5 ae 82 a4 69 05 98 f4 49 49 f7 7f Aug 26 18:24:48.081690: | 97 cb a5 17 29 00 00 24 aa a7 d5 71 d6 3e c7 99 Aug 26 18:24:48.081692: | 5d d9 b7 2a 31 b9 12 28 de dc 47 bc 7f 97 8c 6b Aug 26 18:24:48.081695: | 63 32 17 2a dd 17 2a f7 29 00 00 08 00 00 40 2e Aug 26 18:24:48.081697: | 29 00 00 1c 00 00 40 04 31 3f ef 16 28 74 49 99 Aug 26 18:24:48.081700: | 29 c0 77 72 09 dc d7 7b 47 e1 91 96 00 00 00 1c Aug 26 18:24:48.081702: | 00 00 40 05 d1 48 3e ca 4f 62 d3 b0 e9 58 43 9c Aug 26 18:24:48.081705: | 37 5d 83 5a 32 91 22 18 Aug 26 18:24:48.081753: | libevent_free: release ptr-libevent@0x55a9566d6f18 Aug 26 18:24:48.081758: | free_event_entry: release EVENT_RETRANSMIT-pe@0x55a9566d4d28 Aug 26 18:24:48.081766: | #1 spent 0.19 milliseconds in timer_event_cb() EVENT_RETRANSMIT Aug 26 18:24:48.081771: | stop processing: state #1 connection "north-eastnets/0x2" from 192.1.3.33 (in timer_event_cb() at timer.c:557) Aug 26 18:24:48.283059: | timer_event_cb: processing event@0x7f3ac4002b78 Aug 26 18:24:48.283074: | handling event EVENT_RETRANSMIT for parent state #1 Aug 26 18:24:48.283084: | start processing: state #1 connection "north-eastnets/0x2" from 192.1.3.33 (in timer_event_cb() at timer.c:250) Aug 26 18:24:48.283092: | IKEv2 retransmit event Aug 26 18:24:48.283097: | [RE]START processing: state #1 connection "north-eastnets/0x2" from 192.1.3.33 (in retransmit_v2_msg() at retry.c:144) Aug 26 18:24:48.283102: | handling event EVENT_RETRANSMIT for 192.1.3.33 "north-eastnets/0x2" #1 attempt 2 of 0 Aug 26 18:24:48.283106: | and parent for 192.1.3.33 "north-eastnets/0x2" #1 keying attempt 1 of 0; retransmit 4 Aug 26 18:24:48.283114: | retransmits: current time 29174.025577; retransmit count 3 exceeds limit? NO; deltatime 0.4 exceeds limit? NO; monotime 0.404073 exceeds limit? NO Aug 26 18:24:48.283119: | event_schedule: new EVENT_RETRANSMIT-pe@0x55a9566d4d28 Aug 26 18:24:48.283124: | inserting event EVENT_RETRANSMIT, timeout in 0.4 seconds for #1 Aug 26 18:24:48.283128: | libevent_malloc: new ptr-libevent@0x55a9566d6f18 size 128 Aug 26 18:24:48.283134: "north-eastnets/0x2" #1: STATE_PARENT_I1: retransmission; will wait 0.4 seconds for response Aug 26 18:24:48.283142: | sending 440 bytes for EVENT_RETRANSMIT through eth1 from 192.1.2.23:500 to 192.1.3.33:500 (using #1) Aug 26 18:24:48.283146: | 91 56 7a 14 bd 22 79 f1 00 00 00 00 00 00 00 00 Aug 26 18:24:48.283148: | 21 20 22 08 00 00 00 00 00 00 01 b8 22 00 00 30 Aug 26 18:24:48.283151: | 00 00 00 2c 01 01 00 04 03 00 00 0c 01 00 00 0c Aug 26 18:24:48.283154: | 80 0e 01 00 03 00 00 08 02 00 00 05 03 00 00 08 Aug 26 18:24:48.283157: | 03 00 00 0c 00 00 00 08 04 00 00 0e 28 00 01 08 Aug 26 18:24:48.283159: | 00 0e 00 00 c4 82 c0 c8 e3 17 ae d5 f5 55 9b 8a Aug 26 18:24:48.283161: | 00 b3 9e 08 00 a8 ed 4c 9c c4 2e e8 d7 87 7c 24 Aug 26 18:24:48.283164: | 1b 54 44 ab af ba b2 87 db 80 f1 ac 75 ce d2 3e Aug 26 18:24:48.283166: | ef a8 98 78 56 3c 1c e2 e8 a1 d4 bd 88 6a 29 e4 Aug 26 18:24:48.283169: | db 5d fe c8 f5 ce 42 99 05 4a bc c0 1c 07 73 f5 Aug 26 18:24:48.283171: | a7 43 89 8f de ce 48 2d d5 2a 6f b0 35 d2 0a 95 Aug 26 18:24:48.283174: | cb bc 7a 5e ec 0e 41 ac 65 ab 54 b1 30 1b 6e 4a Aug 26 18:24:48.283176: | e2 ad d4 7d 03 2d d3 33 dd 93 1f 95 db 45 65 0c Aug 26 18:24:48.283179: | 75 e8 7f 36 f0 8d f7 f1 25 f6 70 ee f4 fc 72 6e Aug 26 18:24:48.283181: | d0 40 a2 85 4f 7d d6 10 cb 07 bd 19 fe 9b 18 29 Aug 26 18:24:48.283184: | 55 0a 20 dd e4 21 8f 3e 90 f1 28 fd db 49 37 5c Aug 26 18:24:48.283187: | 38 a2 fb 1e af 0f 42 c3 e8 1e 52 b6 f1 d6 ec 77 Aug 26 18:24:48.283189: | 64 4c 33 c0 d1 5a e8 37 33 70 29 1c a0 02 28 bc Aug 26 18:24:48.283192: | bd 1f 41 0c cc e9 08 a8 ce 17 c9 7b 06 91 01 70 Aug 26 18:24:48.283194: | 89 d5 15 13 d2 10 b1 f2 0d 32 c8 8c 6d d7 7a 50 Aug 26 18:24:48.283196: | be 39 89 58 a5 ae 82 a4 69 05 98 f4 49 49 f7 7f Aug 26 18:24:48.283199: | 97 cb a5 17 29 00 00 24 aa a7 d5 71 d6 3e c7 99 Aug 26 18:24:48.283201: | 5d d9 b7 2a 31 b9 12 28 de dc 47 bc 7f 97 8c 6b Aug 26 18:24:48.283203: | 63 32 17 2a dd 17 2a f7 29 00 00 08 00 00 40 2e Aug 26 18:24:48.283206: | 29 00 00 1c 00 00 40 04 31 3f ef 16 28 74 49 99 Aug 26 18:24:48.283208: | 29 c0 77 72 09 dc d7 7b 47 e1 91 96 00 00 00 1c Aug 26 18:24:48.283211: | 00 00 40 05 d1 48 3e ca 4f 62 d3 b0 e9 58 43 9c Aug 26 18:24:48.283213: | 37 5d 83 5a 32 91 22 18 Aug 26 18:24:48.283670: | libevent_free: release ptr-libevent@0x7f3ac4002888 Aug 26 18:24:48.283682: | free_event_entry: release EVENT_RETRANSMIT-pe@0x7f3ac4002b78 Aug 26 18:24:48.283692: | #1 spent 0.588 milliseconds in timer_event_cb() EVENT_RETRANSMIT Aug 26 18:24:48.283699: | stop processing: state #1 connection "north-eastnets/0x2" from 192.1.3.33 (in timer_event_cb() at timer.c:557) Aug 26 18:24:48.684208: | timer_event_cb: processing event@0x55a9566d4d28 Aug 26 18:24:48.684223: | handling event EVENT_RETRANSMIT for parent state #1 Aug 26 18:24:48.684232: | start processing: state #1 connection "north-eastnets/0x2" from 192.1.3.33 (in timer_event_cb() at timer.c:250) Aug 26 18:24:48.684237: | IKEv2 retransmit event Aug 26 18:24:48.684245: | [RE]START processing: state #1 connection "north-eastnets/0x2" from 192.1.3.33 (in retransmit_v2_msg() at retry.c:144) Aug 26 18:24:48.684250: | handling event EVENT_RETRANSMIT for 192.1.3.33 "north-eastnets/0x2" #1 attempt 2 of 0 Aug 26 18:24:48.684255: | and parent for 192.1.3.33 "north-eastnets/0x2" #1 keying attempt 1 of 0; retransmit 5 Aug 26 18:24:48.684262: | retransmits: current time 29174.426726; retransmit count 4 exceeds limit? NO; deltatime 0.8 exceeds limit? NO; monotime 0.805222 exceeds limit? NO Aug 26 18:24:48.684267: | event_schedule: new EVENT_RETRANSMIT-pe@0x7f3ac4002b78 Aug 26 18:24:48.684271: | inserting event EVENT_RETRANSMIT, timeout in 0.8 seconds for #1 Aug 26 18:24:48.684275: | libevent_malloc: new ptr-libevent@0x7f3ac4002888 size 128 Aug 26 18:24:48.684281: "north-eastnets/0x2" #1: STATE_PARENT_I1: retransmission; will wait 0.8 seconds for response Aug 26 18:24:48.684293: | sending 440 bytes for EVENT_RETRANSMIT through eth1 from 192.1.2.23:500 to 192.1.3.33:500 (using #1) Aug 26 18:24:48.684300: | 91 56 7a 14 bd 22 79 f1 00 00 00 00 00 00 00 00 Aug 26 18:24:48.684303: | 21 20 22 08 00 00 00 00 00 00 01 b8 22 00 00 30 Aug 26 18:24:48.684306: | 00 00 00 2c 01 01 00 04 03 00 00 0c 01 00 00 0c Aug 26 18:24:48.684308: | 80 0e 01 00 03 00 00 08 02 00 00 05 03 00 00 08 Aug 26 18:24:48.684311: | 03 00 00 0c 00 00 00 08 04 00 00 0e 28 00 01 08 Aug 26 18:24:48.684313: | 00 0e 00 00 c4 82 c0 c8 e3 17 ae d5 f5 55 9b 8a Aug 26 18:24:48.684315: | 00 b3 9e 08 00 a8 ed 4c 9c c4 2e e8 d7 87 7c 24 Aug 26 18:24:48.684318: | 1b 54 44 ab af ba b2 87 db 80 f1 ac 75 ce d2 3e Aug 26 18:24:48.684321: | ef a8 98 78 56 3c 1c e2 e8 a1 d4 bd 88 6a 29 e4 Aug 26 18:24:48.684323: | db 5d fe c8 f5 ce 42 99 05 4a bc c0 1c 07 73 f5 Aug 26 18:24:48.684326: | a7 43 89 8f de ce 48 2d d5 2a 6f b0 35 d2 0a 95 Aug 26 18:24:48.684329: | cb bc 7a 5e ec 0e 41 ac 65 ab 54 b1 30 1b 6e 4a Aug 26 18:24:48.684331: | e2 ad d4 7d 03 2d d3 33 dd 93 1f 95 db 45 65 0c Aug 26 18:24:48.684333: | 75 e8 7f 36 f0 8d f7 f1 25 f6 70 ee f4 fc 72 6e Aug 26 18:24:48.684336: | d0 40 a2 85 4f 7d d6 10 cb 07 bd 19 fe 9b 18 29 Aug 26 18:24:48.684339: | 55 0a 20 dd e4 21 8f 3e 90 f1 28 fd db 49 37 5c Aug 26 18:24:48.684342: | 38 a2 fb 1e af 0f 42 c3 e8 1e 52 b6 f1 d6 ec 77 Aug 26 18:24:48.684344: | 64 4c 33 c0 d1 5a e8 37 33 70 29 1c a0 02 28 bc Aug 26 18:24:48.684347: | bd 1f 41 0c cc e9 08 a8 ce 17 c9 7b 06 91 01 70 Aug 26 18:24:48.684349: | 89 d5 15 13 d2 10 b1 f2 0d 32 c8 8c 6d d7 7a 50 Aug 26 18:24:48.684352: | be 39 89 58 a5 ae 82 a4 69 05 98 f4 49 49 f7 7f Aug 26 18:24:48.684354: | 97 cb a5 17 29 00 00 24 aa a7 d5 71 d6 3e c7 99 Aug 26 18:24:48.684357: | 5d d9 b7 2a 31 b9 12 28 de dc 47 bc 7f 97 8c 6b Aug 26 18:24:48.684360: | 63 32 17 2a dd 17 2a f7 29 00 00 08 00 00 40 2e Aug 26 18:24:48.684363: | 29 00 00 1c 00 00 40 04 31 3f ef 16 28 74 49 99 Aug 26 18:24:48.684365: | 29 c0 77 72 09 dc d7 7b 47 e1 91 96 00 00 00 1c Aug 26 18:24:48.684368: | 00 00 40 05 d1 48 3e ca 4f 62 d3 b0 e9 58 43 9c Aug 26 18:24:48.684371: | 37 5d 83 5a 32 91 22 18 Aug 26 18:24:48.684812: | libevent_free: release ptr-libevent@0x55a9566d6f18 Aug 26 18:24:48.684820: | free_event_entry: release EVENT_RETRANSMIT-pe@0x55a9566d4d28 Aug 26 18:24:48.684829: | #1 spent 0.594 milliseconds in timer_event_cb() EVENT_RETRANSMIT Aug 26 18:24:48.684835: | stop processing: state #1 connection "north-eastnets/0x2" from 192.1.3.33 (in timer_event_cb() at timer.c:557) Aug 26 18:24:49.485351: | timer_event_cb: processing event@0x7f3ac4002b78 Aug 26 18:24:49.485365: | handling event EVENT_RETRANSMIT for parent state #1 Aug 26 18:24:49.485371: | start processing: state #1 connection "north-eastnets/0x2" from 192.1.3.33 (in timer_event_cb() at timer.c:250) Aug 26 18:24:49.485374: | IKEv2 retransmit event Aug 26 18:24:49.485377: | [RE]START processing: state #1 connection "north-eastnets/0x2" from 192.1.3.33 (in retransmit_v2_msg() at retry.c:144) Aug 26 18:24:49.485383: | handling event EVENT_RETRANSMIT for 192.1.3.33 "north-eastnets/0x2" #1 attempt 2 of 0 Aug 26 18:24:49.485386: | and parent for 192.1.3.33 "north-eastnets/0x2" #1 keying attempt 1 of 0; retransmit 6 Aug 26 18:24:49.485391: | retransmits: current time 29175.227855; retransmit count 5 exceeds limit? NO; deltatime 1.6 exceeds limit? NO; monotime 1.606351 exceeds limit? NO Aug 26 18:24:49.485393: | event_schedule: new EVENT_RETRANSMIT-pe@0x55a9566d4d28 Aug 26 18:24:49.485396: | inserting event EVENT_RETRANSMIT, timeout in 1.6 seconds for #1 Aug 26 18:24:49.485399: | libevent_malloc: new ptr-libevent@0x55a9566d6f18 size 128 Aug 26 18:24:49.485402: "north-eastnets/0x2" #1: STATE_PARENT_I1: retransmission; will wait 1.6 seconds for response Aug 26 18:24:49.485407: | sending 440 bytes for EVENT_RETRANSMIT through eth1 from 192.1.2.23:500 to 192.1.3.33:500 (using #1) Aug 26 18:24:49.485410: | 91 56 7a 14 bd 22 79 f1 00 00 00 00 00 00 00 00 Aug 26 18:24:49.485411: | 21 20 22 08 00 00 00 00 00 00 01 b8 22 00 00 30 Aug 26 18:24:49.485413: | 00 00 00 2c 01 01 00 04 03 00 00 0c 01 00 00 0c Aug 26 18:24:49.485414: | 80 0e 01 00 03 00 00 08 02 00 00 05 03 00 00 08 Aug 26 18:24:49.485416: | 03 00 00 0c 00 00 00 08 04 00 00 0e 28 00 01 08 Aug 26 18:24:49.485417: | 00 0e 00 00 c4 82 c0 c8 e3 17 ae d5 f5 55 9b 8a Aug 26 18:24:49.485419: | 00 b3 9e 08 00 a8 ed 4c 9c c4 2e e8 d7 87 7c 24 Aug 26 18:24:49.485420: | 1b 54 44 ab af ba b2 87 db 80 f1 ac 75 ce d2 3e Aug 26 18:24:49.485422: | ef a8 98 78 56 3c 1c e2 e8 a1 d4 bd 88 6a 29 e4 Aug 26 18:24:49.485423: | db 5d fe c8 f5 ce 42 99 05 4a bc c0 1c 07 73 f5 Aug 26 18:24:49.485424: | a7 43 89 8f de ce 48 2d d5 2a 6f b0 35 d2 0a 95 Aug 26 18:24:49.485426: | cb bc 7a 5e ec 0e 41 ac 65 ab 54 b1 30 1b 6e 4a Aug 26 18:24:49.485427: | e2 ad d4 7d 03 2d d3 33 dd 93 1f 95 db 45 65 0c Aug 26 18:24:49.485429: | 75 e8 7f 36 f0 8d f7 f1 25 f6 70 ee f4 fc 72 6e Aug 26 18:24:49.485430: | d0 40 a2 85 4f 7d d6 10 cb 07 bd 19 fe 9b 18 29 Aug 26 18:24:49.485432: | 55 0a 20 dd e4 21 8f 3e 90 f1 28 fd db 49 37 5c Aug 26 18:24:49.485433: | 38 a2 fb 1e af 0f 42 c3 e8 1e 52 b6 f1 d6 ec 77 Aug 26 18:24:49.485435: | 64 4c 33 c0 d1 5a e8 37 33 70 29 1c a0 02 28 bc Aug 26 18:24:49.485436: | bd 1f 41 0c cc e9 08 a8 ce 17 c9 7b 06 91 01 70 Aug 26 18:24:49.485438: | 89 d5 15 13 d2 10 b1 f2 0d 32 c8 8c 6d d7 7a 50 Aug 26 18:24:49.485439: | be 39 89 58 a5 ae 82 a4 69 05 98 f4 49 49 f7 7f Aug 26 18:24:49.485441: | 97 cb a5 17 29 00 00 24 aa a7 d5 71 d6 3e c7 99 Aug 26 18:24:49.485442: | 5d d9 b7 2a 31 b9 12 28 de dc 47 bc 7f 97 8c 6b Aug 26 18:24:49.485444: | 63 32 17 2a dd 17 2a f7 29 00 00 08 00 00 40 2e Aug 26 18:24:49.485445: | 29 00 00 1c 00 00 40 04 31 3f ef 16 28 74 49 99 Aug 26 18:24:49.485447: | 29 c0 77 72 09 dc d7 7b 47 e1 91 96 00 00 00 1c Aug 26 18:24:49.485448: | 00 00 40 05 d1 48 3e ca 4f 62 d3 b0 e9 58 43 9c Aug 26 18:24:49.485450: | 37 5d 83 5a 32 91 22 18 Aug 26 18:24:49.485483: | libevent_free: release ptr-libevent@0x7f3ac4002888 Aug 26 18:24:49.485486: | free_event_entry: release EVENT_RETRANSMIT-pe@0x7f3ac4002b78 Aug 26 18:24:49.485492: | #1 spent 0.125 milliseconds in timer_event_cb() EVENT_RETRANSMIT Aug 26 18:24:49.485495: | stop processing: state #1 connection "north-eastnets/0x2" from 192.1.3.33 (in timer_event_cb() at timer.c:557) Aug 26 18:24:51.086310: | timer_event_cb: processing event@0x55a9566d4d28 Aug 26 18:24:51.086326: | handling event EVENT_RETRANSMIT for parent state #1 Aug 26 18:24:51.086336: | start processing: state #1 connection "north-eastnets/0x2" from 192.1.3.33 (in timer_event_cb() at timer.c:250) Aug 26 18:24:51.086340: | IKEv2 retransmit event Aug 26 18:24:51.086345: | [RE]START processing: state #1 connection "north-eastnets/0x2" from 192.1.3.33 (in retransmit_v2_msg() at retry.c:144) Aug 26 18:24:51.086350: | handling event EVENT_RETRANSMIT for 192.1.3.33 "north-eastnets/0x2" #1 attempt 2 of 0 Aug 26 18:24:51.086358: | and parent for 192.1.3.33 "north-eastnets/0x2" #1 keying attempt 1 of 0; retransmit 7 Aug 26 18:24:51.086365: | retransmits: current time 29176.828829; retransmit count 6 exceeds limit? NO; deltatime 3.2 exceeds limit? NO; monotime 3.207325 exceeds limit? NO Aug 26 18:24:51.086370: | event_schedule: new EVENT_RETRANSMIT-pe@0x7f3ac4002b78 Aug 26 18:24:51.086374: | inserting event EVENT_RETRANSMIT, timeout in 3.2 seconds for #1 Aug 26 18:24:51.086378: | libevent_malloc: new ptr-libevent@0x7f3ac4002888 size 128 Aug 26 18:24:51.086383: "north-eastnets/0x2" #1: STATE_PARENT_I1: retransmission; will wait 3.2 seconds for response Aug 26 18:24:51.086391: | sending 440 bytes for EVENT_RETRANSMIT through eth1 from 192.1.2.23:500 to 192.1.3.33:500 (using #1) Aug 26 18:24:51.086394: | 91 56 7a 14 bd 22 79 f1 00 00 00 00 00 00 00 00 Aug 26 18:24:51.086397: | 21 20 22 08 00 00 00 00 00 00 01 b8 22 00 00 30 Aug 26 18:24:51.086399: | 00 00 00 2c 01 01 00 04 03 00 00 0c 01 00 00 0c Aug 26 18:24:51.086402: | 80 0e 01 00 03 00 00 08 02 00 00 05 03 00 00 08 Aug 26 18:24:51.086404: | 03 00 00 0c 00 00 00 08 04 00 00 0e 28 00 01 08 Aug 26 18:24:51.086407: | 00 0e 00 00 c4 82 c0 c8 e3 17 ae d5 f5 55 9b 8a Aug 26 18:24:51.086409: | 00 b3 9e 08 00 a8 ed 4c 9c c4 2e e8 d7 87 7c 24 Aug 26 18:24:51.086412: | 1b 54 44 ab af ba b2 87 db 80 f1 ac 75 ce d2 3e Aug 26 18:24:51.086414: | ef a8 98 78 56 3c 1c e2 e8 a1 d4 bd 88 6a 29 e4 Aug 26 18:24:51.086417: | db 5d fe c8 f5 ce 42 99 05 4a bc c0 1c 07 73 f5 Aug 26 18:24:51.086419: | a7 43 89 8f de ce 48 2d d5 2a 6f b0 35 d2 0a 95 Aug 26 18:24:51.086422: | cb bc 7a 5e ec 0e 41 ac 65 ab 54 b1 30 1b 6e 4a Aug 26 18:24:51.086424: | e2 ad d4 7d 03 2d d3 33 dd 93 1f 95 db 45 65 0c Aug 26 18:24:51.086427: | 75 e8 7f 36 f0 8d f7 f1 25 f6 70 ee f4 fc 72 6e Aug 26 18:24:51.086429: | d0 40 a2 85 4f 7d d6 10 cb 07 bd 19 fe 9b 18 29 Aug 26 18:24:51.086431: | 55 0a 20 dd e4 21 8f 3e 90 f1 28 fd db 49 37 5c Aug 26 18:24:51.086434: | 38 a2 fb 1e af 0f 42 c3 e8 1e 52 b6 f1 d6 ec 77 Aug 26 18:24:51.086436: | 64 4c 33 c0 d1 5a e8 37 33 70 29 1c a0 02 28 bc Aug 26 18:24:51.086439: | bd 1f 41 0c cc e9 08 a8 ce 17 c9 7b 06 91 01 70 Aug 26 18:24:51.086441: | 89 d5 15 13 d2 10 b1 f2 0d 32 c8 8c 6d d7 7a 50 Aug 26 18:24:51.086444: | be 39 89 58 a5 ae 82 a4 69 05 98 f4 49 49 f7 7f Aug 26 18:24:51.086446: | 97 cb a5 17 29 00 00 24 aa a7 d5 71 d6 3e c7 99 Aug 26 18:24:51.086448: | 5d d9 b7 2a 31 b9 12 28 de dc 47 bc 7f 97 8c 6b Aug 26 18:24:51.086451: | 63 32 17 2a dd 17 2a f7 29 00 00 08 00 00 40 2e Aug 26 18:24:51.086453: | 29 00 00 1c 00 00 40 04 31 3f ef 16 28 74 49 99 Aug 26 18:24:51.086456: | 29 c0 77 72 09 dc d7 7b 47 e1 91 96 00 00 00 1c Aug 26 18:24:51.086458: | 00 00 40 05 d1 48 3e ca 4f 62 d3 b0 e9 58 43 9c Aug 26 18:24:51.086461: | 37 5d 83 5a 32 91 22 18 Aug 26 18:24:51.086478: | libevent_free: release ptr-libevent@0x55a9566d6f18 Aug 26 18:24:51.086483: | free_event_entry: release EVENT_RETRANSMIT-pe@0x55a9566d4d28 Aug 26 18:24:51.086491: | #1 spent 0.182 milliseconds in timer_event_cb() EVENT_RETRANSMIT Aug 26 18:24:51.086496: | stop processing: state #1 connection "north-eastnets/0x2" from 192.1.3.33 (in timer_event_cb() at timer.c:557) Aug 26 18:24:54.289311: | timer_event_cb: processing event@0x7f3ac4002b78 Aug 26 18:24:54.289335: | handling event EVENT_RETRANSMIT for parent state #1 Aug 26 18:24:54.289344: | start processing: state #1 connection "north-eastnets/0x2" from 192.1.3.33 (in timer_event_cb() at timer.c:250) Aug 26 18:24:54.289348: | IKEv2 retransmit event Aug 26 18:24:54.289353: | [RE]START processing: state #1 connection "north-eastnets/0x2" from 192.1.3.33 (in retransmit_v2_msg() at retry.c:144) Aug 26 18:24:54.289358: | handling event EVENT_RETRANSMIT for 192.1.3.33 "north-eastnets/0x2" #1 attempt 2 of 0 Aug 26 18:24:54.289363: | and parent for 192.1.3.33 "north-eastnets/0x2" #1 keying attempt 1 of 0; retransmit 8 Aug 26 18:24:54.289374: | retransmits: current time 29180.031837; retransmit count 7 exceeds limit? NO; deltatime 6.4 exceeds limit? NO; monotime 6.410333 exceeds limit? NO Aug 26 18:24:54.289378: | event_schedule: new EVENT_RETRANSMIT-pe@0x55a9566d4d28 Aug 26 18:24:54.289383: | inserting event EVENT_RETRANSMIT, timeout in 6.4 seconds for #1 Aug 26 18:24:54.289387: | libevent_malloc: new ptr-libevent@0x55a9566d6f18 size 128 Aug 26 18:24:54.289392: "north-eastnets/0x2" #1: STATE_PARENT_I1: retransmission; will wait 6.4 seconds for response Aug 26 18:24:54.289400: | sending 440 bytes for EVENT_RETRANSMIT through eth1 from 192.1.2.23:500 to 192.1.3.33:500 (using #1) Aug 26 18:24:54.289403: | 91 56 7a 14 bd 22 79 f1 00 00 00 00 00 00 00 00 Aug 26 18:24:54.289406: | 21 20 22 08 00 00 00 00 00 00 01 b8 22 00 00 30 Aug 26 18:24:54.289408: | 00 00 00 2c 01 01 00 04 03 00 00 0c 01 00 00 0c Aug 26 18:24:54.289411: | 80 0e 01 00 03 00 00 08 02 00 00 05 03 00 00 08 Aug 26 18:24:54.289413: | 03 00 00 0c 00 00 00 08 04 00 00 0e 28 00 01 08 Aug 26 18:24:54.289416: | 00 0e 00 00 c4 82 c0 c8 e3 17 ae d5 f5 55 9b 8a Aug 26 18:24:54.289418: | 00 b3 9e 08 00 a8 ed 4c 9c c4 2e e8 d7 87 7c 24 Aug 26 18:24:54.289421: | 1b 54 44 ab af ba b2 87 db 80 f1 ac 75 ce d2 3e Aug 26 18:24:54.289423: | ef a8 98 78 56 3c 1c e2 e8 a1 d4 bd 88 6a 29 e4 Aug 26 18:24:54.289426: | db 5d fe c8 f5 ce 42 99 05 4a bc c0 1c 07 73 f5 Aug 26 18:24:54.289428: | a7 43 89 8f de ce 48 2d d5 2a 6f b0 35 d2 0a 95 Aug 26 18:24:54.289431: | cb bc 7a 5e ec 0e 41 ac 65 ab 54 b1 30 1b 6e 4a Aug 26 18:24:54.289433: | e2 ad d4 7d 03 2d d3 33 dd 93 1f 95 db 45 65 0c Aug 26 18:24:54.289436: | 75 e8 7f 36 f0 8d f7 f1 25 f6 70 ee f4 fc 72 6e Aug 26 18:24:54.289439: | d0 40 a2 85 4f 7d d6 10 cb 07 bd 19 fe 9b 18 29 Aug 26 18:24:54.289441: | 55 0a 20 dd e4 21 8f 3e 90 f1 28 fd db 49 37 5c Aug 26 18:24:54.289444: | 38 a2 fb 1e af 0f 42 c3 e8 1e 52 b6 f1 d6 ec 77 Aug 26 18:24:54.289447: | 64 4c 33 c0 d1 5a e8 37 33 70 29 1c a0 02 28 bc Aug 26 18:24:54.289449: | bd 1f 41 0c cc e9 08 a8 ce 17 c9 7b 06 91 01 70 Aug 26 18:24:54.289452: | 89 d5 15 13 d2 10 b1 f2 0d 32 c8 8c 6d d7 7a 50 Aug 26 18:24:54.289454: | be 39 89 58 a5 ae 82 a4 69 05 98 f4 49 49 f7 7f Aug 26 18:24:54.289457: | 97 cb a5 17 29 00 00 24 aa a7 d5 71 d6 3e c7 99 Aug 26 18:24:54.289459: | 5d d9 b7 2a 31 b9 12 28 de dc 47 bc 7f 97 8c 6b Aug 26 18:24:54.289461: | 63 32 17 2a dd 17 2a f7 29 00 00 08 00 00 40 2e Aug 26 18:24:54.289464: | 29 00 00 1c 00 00 40 04 31 3f ef 16 28 74 49 99 Aug 26 18:24:54.289466: | 29 c0 77 72 09 dc d7 7b 47 e1 91 96 00 00 00 1c Aug 26 18:24:54.289469: | 00 00 40 05 d1 48 3e ca 4f 62 d3 b0 e9 58 43 9c Aug 26 18:24:54.289471: | 37 5d 83 5a 32 91 22 18 Aug 26 18:24:54.289489: | libevent_free: release ptr-libevent@0x7f3ac4002888 Aug 26 18:24:54.289493: | free_event_entry: release EVENT_RETRANSMIT-pe@0x7f3ac4002b78 Aug 26 18:24:54.289501: | #1 spent 0.191 milliseconds in timer_event_cb() EVENT_RETRANSMIT Aug 26 18:24:54.289506: | stop processing: state #1 connection "north-eastnets/0x2" from 192.1.3.33 (in timer_event_cb() at timer.c:557) Aug 26 18:25:00.694393: | timer_event_cb: processing event@0x55a9566d4d28 Aug 26 18:25:00.694451: | handling event EVENT_RETRANSMIT for parent state #1 Aug 26 18:25:00.694486: | start processing: state #1 connection "north-eastnets/0x2" from 192.1.3.33 (in timer_event_cb() at timer.c:250) Aug 26 18:25:00.694507: | IKEv2 retransmit event Aug 26 18:25:00.694533: | [RE]START processing: state #1 connection "north-eastnets/0x2" from 192.1.3.33 (in retransmit_v2_msg() at retry.c:144) Aug 26 18:25:00.694551: | handling event EVENT_RETRANSMIT for 192.1.3.33 "north-eastnets/0x2" #1 attempt 2 of 0 Aug 26 18:25:00.694563: | and parent for 192.1.3.33 "north-eastnets/0x2" #1 keying attempt 1 of 0; retransmit 9 Aug 26 18:25:00.694583: | retransmits: current time 29186.437039; retransmit count 8 exceeds limit? NO; deltatime 12.8 exceeds limit? NO; monotime 12.815535 exceeds limit? NO Aug 26 18:25:00.694606: | event_schedule: new EVENT_RETRANSMIT-pe@0x7f3ac4002b78 Aug 26 18:25:00.694619: | inserting event EVENT_RETRANSMIT, timeout in 12.8 seconds for #1 Aug 26 18:25:00.694630: | libevent_malloc: new ptr-libevent@0x7f3ac4002888 size 128 Aug 26 18:25:00.694644: "north-eastnets/0x2" #1: STATE_PARENT_I1: retransmission; will wait 12.8 seconds for response Aug 26 18:25:00.694664: | sending 440 bytes for EVENT_RETRANSMIT through eth1 from 192.1.2.23:500 to 192.1.3.33:500 (using #1) Aug 26 18:25:00.694673: | 91 56 7a 14 bd 22 79 f1 00 00 00 00 00 00 00 00 Aug 26 18:25:00.694681: | 21 20 22 08 00 00 00 00 00 00 01 b8 22 00 00 30 Aug 26 18:25:00.694688: | 00 00 00 2c 01 01 00 04 03 00 00 0c 01 00 00 0c Aug 26 18:25:00.694695: | 80 0e 01 00 03 00 00 08 02 00 00 05 03 00 00 08 Aug 26 18:25:00.694703: | 03 00 00 0c 00 00 00 08 04 00 00 0e 28 00 01 08 Aug 26 18:25:00.694710: | 00 0e 00 00 c4 82 c0 c8 e3 17 ae d5 f5 55 9b 8a Aug 26 18:25:00.694717: | 00 b3 9e 08 00 a8 ed 4c 9c c4 2e e8 d7 87 7c 24 Aug 26 18:25:00.694725: | 1b 54 44 ab af ba b2 87 db 80 f1 ac 75 ce d2 3e Aug 26 18:25:00.694732: | ef a8 98 78 56 3c 1c e2 e8 a1 d4 bd 88 6a 29 e4 Aug 26 18:25:00.694739: | db 5d fe c8 f5 ce 42 99 05 4a bc c0 1c 07 73 f5 Aug 26 18:25:00.694747: | a7 43 89 8f de ce 48 2d d5 2a 6f b0 35 d2 0a 95 Aug 26 18:25:00.694754: | cb bc 7a 5e ec 0e 41 ac 65 ab 54 b1 30 1b 6e 4a Aug 26 18:25:00.694761: | e2 ad d4 7d 03 2d d3 33 dd 93 1f 95 db 45 65 0c Aug 26 18:25:00.694768: | 75 e8 7f 36 f0 8d f7 f1 25 f6 70 ee f4 fc 72 6e Aug 26 18:25:00.694776: | d0 40 a2 85 4f 7d d6 10 cb 07 bd 19 fe 9b 18 29 Aug 26 18:25:00.694783: | 55 0a 20 dd e4 21 8f 3e 90 f1 28 fd db 49 37 5c Aug 26 18:25:00.694790: | 38 a2 fb 1e af 0f 42 c3 e8 1e 52 b6 f1 d6 ec 77 Aug 26 18:25:00.694798: | 64 4c 33 c0 d1 5a e8 37 33 70 29 1c a0 02 28 bc Aug 26 18:25:00.694805: | bd 1f 41 0c cc e9 08 a8 ce 17 c9 7b 06 91 01 70 Aug 26 18:25:00.694812: | 89 d5 15 13 d2 10 b1 f2 0d 32 c8 8c 6d d7 7a 50 Aug 26 18:25:00.694819: | be 39 89 58 a5 ae 82 a4 69 05 98 f4 49 49 f7 7f Aug 26 18:25:00.694827: | 97 cb a5 17 29 00 00 24 aa a7 d5 71 d6 3e c7 99 Aug 26 18:25:00.694834: | 5d d9 b7 2a 31 b9 12 28 de dc 47 bc 7f 97 8c 6b Aug 26 18:25:00.694841: | 63 32 17 2a dd 17 2a f7 29 00 00 08 00 00 40 2e Aug 26 18:25:00.694849: | 29 00 00 1c 00 00 40 04 31 3f ef 16 28 74 49 99 Aug 26 18:25:00.694856: | 29 c0 77 72 09 dc d7 7b 47 e1 91 96 00 00 00 1c Aug 26 18:25:00.694863: | 00 00 40 05 d1 48 3e ca 4f 62 d3 b0 e9 58 43 9c Aug 26 18:25:00.694870: | 37 5d 83 5a 32 91 22 18 Aug 26 18:25:00.694983: | libevent_free: release ptr-libevent@0x55a9566d6f18 Aug 26 18:25:00.694998: | free_event_entry: release EVENT_RETRANSMIT-pe@0x55a9566d4d28 Aug 26 18:25:00.695026: | #1 spent 0.583 milliseconds in timer_event_cb() EVENT_RETRANSMIT Aug 26 18:25:00.695050: | stop processing: state #1 connection "north-eastnets/0x2" from 192.1.3.33 (in timer_event_cb() at timer.c:557) Aug 26 18:25:07.860346: | processing global timer EVENT_SHUNT_SCAN Aug 26 18:25:07.860363: | expiring aged bare shunts from shunt table Aug 26 18:25:07.860369: | spent 0.00441 milliseconds in global timer EVENT_SHUNT_SCAN