Sep 21 07:16:30.449389: FIPS Product: YES Sep 21 07:16:30.449426: FIPS Kernel: NO Sep 21 07:16:30.449429: FIPS Mode: NO Sep 21 07:16:30.449432: NSS DB directory: sql:/etc/ipsec.d Sep 21 07:16:30.449589: Initializing NSS Sep 21 07:16:30.449593: Opening NSS database "sql:/etc/ipsec.d" read-only Sep 21 07:16:30.492500: NSS initialized Sep 21 07:16:30.492512: NSS crypto library initialized Sep 21 07:16:30.492514: FIPS HMAC integrity support [enabled] Sep 21 07:16:30.492515: FIPS mode disabled for pluto daemon Sep 21 07:16:30.544813: FIPS HMAC integrity verification self-test FAILED Sep 21 07:16:30.544940: libcap-ng support [enabled] Sep 21 07:16:30.544951: Linux audit support [enabled] Sep 21 07:16:30.544971: Linux audit activated Sep 21 07:16:30.544977: Starting Pluto (Libreswan Version v3.28-827-gc9aa82b8a6-master-s2 XFRM(netkey) esp-hw-offload FORK PTHREAD_SETSCHEDPRIO NSS (IPsec profile) DNSSEC SYSTEMD_WATCHDOG FIPS_CHECK LABELED_IPSEC SECCOMP LIBCAP_NG LINUX_AUDIT XAUTH_PAM NETWORKMANAGER CURL(non-NSS)) pid:12106 Sep 21 07:16:30.544979: core dump dir: /tmp Sep 21 07:16:30.544980: secrets file: /etc/ipsec.secrets Sep 21 07:16:30.544981: leak-detective disabled Sep 21 07:16:30.544983: NSS crypto [enabled] Sep 21 07:16:30.544984: XAUTH PAM support [enabled] Sep 21 07:16:30.545040: | libevent is using pluto's memory allocator Sep 21 07:16:30.545045: Initializing libevent in pthreads mode: headers: 2.1.8-stable (2010800); library: 2.1.8-stable (2010800) Sep 21 07:16:30.545061: | libevent_malloc: new ptr-libevent@0x55edd3541240 size 40 Sep 21 07:16:30.545063: | libevent_malloc: new ptr-libevent@0x55edd35424f0 size 40 Sep 21 07:16:30.545065: | libevent_malloc: new ptr-libevent@0x55edd3542520 size 40 Sep 21 07:16:30.545067: | creating event base Sep 21 07:16:30.545068: | libevent_malloc: new ptr-libevent@0x55edd35424b0 size 56 Sep 21 07:16:30.545071: | libevent_malloc: new ptr-libevent@0x55edd3542550 size 664 Sep 21 07:16:30.545079: | libevent_malloc: new ptr-libevent@0x55edd35427f0 size 24 Sep 21 07:16:30.545095: | libevent_malloc: new ptr-libevent@0x55edd3533f00 size 384 Sep 21 07:16:30.545102: | libevent_malloc: new ptr-libevent@0x55edd3542810 size 16 Sep 21 07:16:30.545104: | libevent_malloc: new ptr-libevent@0x55edd3542830 size 40 Sep 21 07:16:30.545105: | libevent_malloc: new ptr-libevent@0x55edd3542860 size 48 Sep 21 07:16:30.545110: | libevent_realloc: new ptr-libevent@0x55edd34c4370 size 256 Sep 21 07:16:30.545112: | libevent_malloc: new ptr-libevent@0x55edd35428a0 size 16 Sep 21 07:16:30.545116: | libevent_free: release ptr-libevent@0x55edd35424b0 Sep 21 07:16:30.545118: | libevent initialized Sep 21 07:16:30.545120: | libevent_realloc: new ptr-libevent@0x55edd35428c0 size 64 Sep 21 07:16:30.545123: | global periodic timer EVENT_RESET_LOG_RATE_LIMIT enabled with interval of 3600 seconds Sep 21 07:16:30.545136: | init_nat_traversal() initialized with keep_alive=0s Sep 21 07:16:30.545137: NAT-Traversal support [enabled] Sep 21 07:16:30.545139: | global one-shot timer EVENT_NAT_T_KEEPALIVE initialized Sep 21 07:16:30.545143: | global one-shot timer EVENT_FREE_ROOT_CERTS initialized Sep 21 07:16:30.545146: | global periodic timer EVENT_REINIT_SECRET enabled with interval of 3600 seconds Sep 21 07:16:30.545173: | global one-shot timer EVENT_REVIVE_CONNS initialized Sep 21 07:16:30.545175: | global periodic timer EVENT_PENDING_DDNS enabled with interval of 60 seconds Sep 21 07:16:30.545177: | global periodic timer EVENT_PENDING_PHASE2 enabled with interval of 120 seconds Sep 21 07:16:30.545212: Encryption algorithms: Sep 21 07:16:30.545219: AES_CCM_16 IKEv1: ESP IKEv2: ESP FIPS {256,192,*128} aes_ccm, aes_ccm_c Sep 21 07:16:30.545221: AES_CCM_12 IKEv1: ESP IKEv2: ESP FIPS {256,192,*128} aes_ccm_b Sep 21 07:16:30.545223: AES_CCM_8 IKEv1: ESP IKEv2: ESP FIPS {256,192,*128} aes_ccm_a Sep 21 07:16:30.545226: 3DES_CBC IKEv1: IKE ESP IKEv2: IKE ESP FIPS [*192] 3des Sep 21 07:16:30.545228: CAMELLIA_CTR IKEv1: ESP IKEv2: ESP {256,192,*128} Sep 21 07:16:30.545234: CAMELLIA_CBC IKEv1: IKE ESP IKEv2: IKE ESP {256,192,*128} camellia Sep 21 07:16:30.545237: AES_GCM_16 IKEv1: ESP IKEv2: IKE ESP FIPS {256,192,*128} aes_gcm, aes_gcm_c Sep 21 07:16:30.545239: AES_GCM_12 IKEv1: ESP IKEv2: IKE ESP FIPS {256,192,*128} aes_gcm_b Sep 21 07:16:30.545241: AES_GCM_8 IKEv1: ESP IKEv2: IKE ESP FIPS {256,192,*128} aes_gcm_a Sep 21 07:16:30.545243: AES_CTR IKEv1: IKE ESP IKEv2: IKE ESP FIPS {256,192,*128} aesctr Sep 21 07:16:30.545245: AES_CBC IKEv1: IKE ESP IKEv2: IKE ESP FIPS {256,192,*128} aes Sep 21 07:16:30.545247: SERPENT_CBC IKEv1: IKE ESP IKEv2: IKE ESP {256,192,*128} serpent Sep 21 07:16:30.545249: TWOFISH_CBC IKEv1: IKE ESP IKEv2: IKE ESP {256,192,*128} twofish Sep 21 07:16:30.545251: TWOFISH_SSH IKEv1: IKE IKEv2: IKE ESP {256,192,*128} twofish_cbc_ssh Sep 21 07:16:30.545253: NULL_AUTH_AES_GMAC IKEv1: ESP IKEv2: ESP FIPS {256,192,*128} aes_gmac Sep 21 07:16:30.545255: NULL IKEv1: ESP IKEv2: ESP [] Sep 21 07:16:30.545257: CHACHA20_POLY1305 IKEv1: IKEv2: IKE ESP [*256] chacha20poly1305 Sep 21 07:16:30.545262: Hash algorithms: Sep 21 07:16:30.545263: MD5 IKEv1: IKE IKEv2: Sep 21 07:16:30.545265: SHA1 IKEv1: IKE IKEv2: FIPS sha Sep 21 07:16:30.545267: SHA2_256 IKEv1: IKE IKEv2: FIPS sha2, sha256 Sep 21 07:16:30.545269: SHA2_384 IKEv1: IKE IKEv2: FIPS sha384 Sep 21 07:16:30.545270: SHA2_512 IKEv1: IKE IKEv2: FIPS sha512 Sep 21 07:16:30.545278: PRF algorithms: Sep 21 07:16:30.545280: HMAC_MD5 IKEv1: IKE IKEv2: IKE md5 Sep 21 07:16:30.545282: HMAC_SHA1 IKEv1: IKE IKEv2: IKE FIPS sha, sha1 Sep 21 07:16:30.545284: HMAC_SHA2_256 IKEv1: IKE IKEv2: IKE FIPS sha2, sha256, sha2_256 Sep 21 07:16:30.545286: HMAC_SHA2_384 IKEv1: IKE IKEv2: IKE FIPS sha384, sha2_384 Sep 21 07:16:30.545288: HMAC_SHA2_512 IKEv1: IKE IKEv2: IKE FIPS sha512, sha2_512 Sep 21 07:16:30.545290: AES_XCBC IKEv1: IKEv2: IKE aes128_xcbc Sep 21 07:16:30.545304: Integrity algorithms: Sep 21 07:16:30.545306: HMAC_MD5_96 IKEv1: IKE ESP AH IKEv2: IKE ESP AH md5, hmac_md5 Sep 21 07:16:30.545308: HMAC_SHA1_96 IKEv1: IKE ESP AH IKEv2: IKE ESP AH FIPS sha, sha1, sha1_96, hmac_sha1 Sep 21 07:16:30.545311: HMAC_SHA2_512_256 IKEv1: IKE ESP AH IKEv2: IKE ESP AH FIPS sha512, sha2_512, sha2_512_256, hmac_sha2_512 Sep 21 07:16:30.545313: HMAC_SHA2_384_192 IKEv1: IKE ESP AH IKEv2: IKE ESP AH FIPS sha384, sha2_384, sha2_384_192, hmac_sha2_384 Sep 21 07:16:30.545315: HMAC_SHA2_256_128 IKEv1: IKE ESP AH IKEv2: IKE ESP AH FIPS sha2, sha256, sha2_256, sha2_256_128, hmac_sha2_256 Sep 21 07:16:30.545317: HMAC_SHA2_256_TRUNCBUG IKEv1: ESP AH IKEv2: AH Sep 21 07:16:30.545319: AES_XCBC_96 IKEv1: ESP AH IKEv2: IKE ESP AH aes_xcbc, aes128_xcbc, aes128_xcbc_96 Sep 21 07:16:30.545321: AES_CMAC_96 IKEv1: ESP AH IKEv2: ESP AH FIPS aes_cmac Sep 21 07:16:30.545322: NONE IKEv1: ESP IKEv2: IKE ESP FIPS null Sep 21 07:16:30.545330: DH algorithms: Sep 21 07:16:30.545332: NONE IKEv1: IKEv2: IKE ESP AH FIPS null, dh0 Sep 21 07:16:30.545333: MODP1536 IKEv1: IKE ESP AH IKEv2: IKE ESP AH dh5 Sep 21 07:16:30.545335: MODP2048 IKEv1: IKE ESP AH IKEv2: IKE ESP AH FIPS dh14 Sep 21 07:16:30.545338: MODP3072 IKEv1: IKE ESP AH IKEv2: IKE ESP AH FIPS dh15 Sep 21 07:16:30.545340: MODP4096 IKEv1: IKE ESP AH IKEv2: IKE ESP AH FIPS dh16 Sep 21 07:16:30.545341: MODP6144 IKEv1: IKE ESP AH IKEv2: IKE ESP AH FIPS dh17 Sep 21 07:16:30.545343: MODP8192 IKEv1: IKE ESP AH IKEv2: IKE ESP AH FIPS dh18 Sep 21 07:16:30.545345: DH19 IKEv1: IKE IKEv2: IKE ESP AH FIPS ecp_256, ecp256 Sep 21 07:16:30.545347: DH20 IKEv1: IKE IKEv2: IKE ESP AH FIPS ecp_384, ecp384 Sep 21 07:16:30.545349: DH21 IKEv1: IKE IKEv2: IKE ESP AH FIPS ecp_521, ecp521 Sep 21 07:16:30.545350: DH31 IKEv1: IKE IKEv2: IKE ESP AH curve25519 Sep 21 07:16:30.545352: testing CAMELLIA_CBC: Sep 21 07:16:30.545353: Camellia: 16 bytes with 128-bit key Sep 21 07:16:30.545435: Camellia: 16 bytes with 128-bit key Sep 21 07:16:30.545453: Camellia: 16 bytes with 256-bit key Sep 21 07:16:30.545472: Camellia: 16 bytes with 256-bit key Sep 21 07:16:30.545490: testing AES_GCM_16: Sep 21 07:16:30.545493: empty string Sep 21 07:16:30.545513: one block Sep 21 07:16:30.545529: two blocks Sep 21 07:16:30.545544: two blocks with associated data Sep 21 07:16:30.545559: testing AES_CTR: Sep 21 07:16:30.545561: Encrypting 16 octets using AES-CTR with 128-bit key Sep 21 07:16:30.545577: Encrypting 32 octets using AES-CTR with 128-bit key Sep 21 07:16:30.545593: Encrypting 36 octets using AES-CTR with 128-bit key Sep 21 07:16:30.545609: Encrypting 16 octets using AES-CTR with 192-bit key Sep 21 07:16:30.545624: Encrypting 32 octets using AES-CTR with 192-bit key Sep 21 07:16:30.545639: Encrypting 36 octets using AES-CTR with 192-bit key Sep 21 07:16:30.545655: Encrypting 16 octets using AES-CTR with 256-bit key Sep 21 07:16:30.545671: Encrypting 32 octets using AES-CTR with 256-bit key Sep 21 07:16:30.545687: Encrypting 36 octets using AES-CTR with 256-bit key Sep 21 07:16:30.545702: testing AES_CBC: Sep 21 07:16:30.545704: Encrypting 16 bytes (1 block) using AES-CBC with 128-bit key Sep 21 07:16:30.545719: Encrypting 32 bytes (2 blocks) using AES-CBC with 128-bit key Sep 21 07:16:30.545736: Encrypting 48 bytes (3 blocks) using AES-CBC with 128-bit key Sep 21 07:16:30.545753: Encrypting 64 bytes (4 blocks) using AES-CBC with 128-bit key Sep 21 07:16:30.545773: testing AES_XCBC: Sep 21 07:16:30.545775: RFC 3566 Test Case #1: AES-XCBC-MAC-96 with 0-byte input Sep 21 07:16:30.545884: RFC 3566 Test Case #2: AES-XCBC-MAC-96 with 3-byte input Sep 21 07:16:30.545965: RFC 3566 Test Case #3: AES-XCBC-MAC-96 with 16-byte input Sep 21 07:16:30.546037: RFC 3566 Test Case #4: AES-XCBC-MAC-96 with 20-byte input Sep 21 07:16:30.546148: RFC 3566 Test Case #5: AES-XCBC-MAC-96 with 32-byte input Sep 21 07:16:30.546242: RFC 3566 Test Case #6: AES-XCBC-MAC-96 with 34-byte input Sep 21 07:16:30.546318: RFC 3566 Test Case #7: AES-XCBC-MAC-96 with 1000-byte input Sep 21 07:16:30.546488: RFC 4434 Test Case AES-XCBC-PRF-128 with 20-byte input (key length 16) Sep 21 07:16:30.546563: RFC 4434 Test Case AES-XCBC-PRF-128 with 20-byte input (key length 10) Sep 21 07:16:30.546643: RFC 4434 Test Case AES-XCBC-PRF-128 with 20-byte input (key length 18) Sep 21 07:16:30.546786: testing HMAC_MD5: Sep 21 07:16:30.546806: RFC 2104: MD5_HMAC test 1 Sep 21 07:16:30.546925: RFC 2104: MD5_HMAC test 2 Sep 21 07:16:30.547019: RFC 2104: MD5_HMAC test 3 Sep 21 07:16:30.547157: 8 CPU cores online Sep 21 07:16:30.547160: starting up 7 crypto helpers Sep 21 07:16:30.547187: started thread for crypto helper 0 Sep 21 07:16:30.547204: started thread for crypto helper 1 Sep 21 07:16:30.547231: | starting up helper thread 1 Sep 21 07:16:30.547242: | starting up helper thread 0 Sep 21 07:16:30.547243: | starting up helper thread 2 Sep 21 07:16:30.547258: | status value returned by setting the priority of this thread (crypto helper 2) 22 Sep 21 07:16:30.547268: | crypto helper 2 waiting (nothing to do) Sep 21 07:16:30.547237: started thread for crypto helper 2 Sep 21 07:16:30.547249: | status value returned by setting the priority of this thread (crypto helper 0) 22 Sep 21 07:16:30.547317: | crypto helper 0 waiting (nothing to do) Sep 21 07:16:30.547248: | status value returned by setting the priority of this thread (crypto helper 1) 22 Sep 21 07:16:30.547345: | crypto helper 1 waiting (nothing to do) Sep 21 07:16:30.547346: started thread for crypto helper 3 Sep 21 07:16:30.547348: | starting up helper thread 3 Sep 21 07:16:30.547364: | status value returned by setting the priority of this thread (crypto helper 3) 22 Sep 21 07:16:30.547379: | crypto helper 3 waiting (nothing to do) Sep 21 07:16:30.547382: started thread for crypto helper 4 Sep 21 07:16:30.547399: started thread for crypto helper 5 Sep 21 07:16:30.547406: | starting up helper thread 5 Sep 21 07:16:30.547430: | starting up helper thread 4 Sep 21 07:16:30.547433: | starting up helper thread 6 Sep 21 07:16:30.547435: | status value returned by setting the priority of this thread (crypto helper 4) 22 Sep 21 07:16:30.547451: | crypto helper 4 waiting (nothing to do) Sep 21 07:16:30.547435: | status value returned by setting the priority of this thread (crypto helper 5) 22 Sep 21 07:16:30.547460: | crypto helper 5 waiting (nothing to do) Sep 21 07:16:30.547413: started thread for crypto helper 6 Sep 21 07:16:30.547448: | status value returned by setting the priority of this thread (crypto helper 6) 22 Sep 21 07:16:30.547511: | checking IKEv1 state table Sep 21 07:16:30.547513: | crypto helper 6 waiting (nothing to do) Sep 21 07:16:30.547519: | MAIN_R0: category: half-open IKE SA flags: 0: Sep 21 07:16:30.547521: | -> MAIN_R1 EVENT_SO_DISCARD Sep 21 07:16:30.547523: | MAIN_I1: category: half-open IKE SA flags: 0: Sep 21 07:16:30.547524: | -> MAIN_I2 EVENT_RETRANSMIT Sep 21 07:16:30.547526: | MAIN_R1: category: open IKE SA flags: 200: Sep 21 07:16:30.547527: | -> MAIN_R2 EVENT_RETRANSMIT Sep 21 07:16:30.547529: | -> UNDEFINED EVENT_RETRANSMIT Sep 21 07:16:30.547530: | -> UNDEFINED EVENT_RETRANSMIT Sep 21 07:16:30.547532: | MAIN_I2: category: open IKE SA flags: 0: Sep 21 07:16:30.547533: | -> MAIN_I3 EVENT_RETRANSMIT Sep 21 07:16:30.547535: | -> UNDEFINED EVENT_RETRANSMIT Sep 21 07:16:30.547536: | -> UNDEFINED EVENT_RETRANSMIT Sep 21 07:16:30.547538: | MAIN_R2: category: open IKE SA flags: 0: Sep 21 07:16:30.547539: | -> MAIN_R3 EVENT_SA_REPLACE Sep 21 07:16:30.547540: | -> MAIN_R3 EVENT_SA_REPLACE Sep 21 07:16:30.547542: | -> UNDEFINED EVENT_SA_REPLACE Sep 21 07:16:30.547543: | MAIN_I3: category: open IKE SA flags: 0: Sep 21 07:16:30.547545: | -> MAIN_I4 EVENT_SA_REPLACE Sep 21 07:16:30.547546: | -> MAIN_I4 EVENT_SA_REPLACE Sep 21 07:16:30.547548: | -> UNDEFINED EVENT_SA_REPLACE Sep 21 07:16:30.547549: | MAIN_R3: category: established IKE SA flags: 200: Sep 21 07:16:30.547551: | -> UNDEFINED EVENT_NULL Sep 21 07:16:30.547552: | MAIN_I4: category: established IKE SA flags: 0: Sep 21 07:16:30.547554: | -> UNDEFINED EVENT_NULL Sep 21 07:16:30.547555: | AGGR_R0: category: half-open IKE SA flags: 0: Sep 21 07:16:30.547557: | -> AGGR_R1 EVENT_SO_DISCARD Sep 21 07:16:30.547558: | AGGR_I1: category: half-open IKE SA flags: 0: Sep 21 07:16:30.547560: | -> AGGR_I2 EVENT_SA_REPLACE Sep 21 07:16:30.547561: | -> AGGR_I2 EVENT_SA_REPLACE Sep 21 07:16:30.547563: | AGGR_R1: category: open IKE SA flags: 200: Sep 21 07:16:30.547564: | -> AGGR_R2 EVENT_SA_REPLACE Sep 21 07:16:30.547565: | -> AGGR_R2 EVENT_SA_REPLACE Sep 21 07:16:30.547567: | AGGR_I2: category: established IKE SA flags: 200: Sep 21 07:16:30.547568: | -> UNDEFINED EVENT_NULL Sep 21 07:16:30.547570: | AGGR_R2: category: established IKE SA flags: 0: Sep 21 07:16:30.547571: | -> UNDEFINED EVENT_NULL Sep 21 07:16:30.547573: | QUICK_R0: category: established CHILD SA flags: 0: Sep 21 07:16:30.547577: | -> QUICK_R1 EVENT_RETRANSMIT Sep 21 07:16:30.547579: | QUICK_I1: category: established CHILD SA flags: 0: Sep 21 07:16:30.547581: | -> QUICK_I2 EVENT_SA_REPLACE Sep 21 07:16:30.547582: | QUICK_R1: category: established CHILD SA flags: 0: Sep 21 07:16:30.547584: | -> QUICK_R2 EVENT_SA_REPLACE Sep 21 07:16:30.547585: | QUICK_I2: category: established CHILD SA flags: 200: Sep 21 07:16:30.547587: | -> UNDEFINED EVENT_NULL Sep 21 07:16:30.547588: | QUICK_R2: category: established CHILD SA flags: 0: Sep 21 07:16:30.547590: | -> UNDEFINED EVENT_NULL Sep 21 07:16:30.547591: | INFO: category: informational flags: 0: Sep 21 07:16:30.547593: | -> UNDEFINED EVENT_NULL Sep 21 07:16:30.547594: | INFO_PROTECTED: category: informational flags: 0: Sep 21 07:16:30.547596: | -> UNDEFINED EVENT_NULL Sep 21 07:16:30.547597: | XAUTH_R0: category: established IKE SA flags: 0: Sep 21 07:16:30.547599: | -> XAUTH_R1 EVENT_NULL Sep 21 07:16:30.547600: | XAUTH_R1: category: established IKE SA flags: 0: Sep 21 07:16:30.547602: | -> MAIN_R3 EVENT_SA_REPLACE Sep 21 07:16:30.547603: | MODE_CFG_R0: category: informational flags: 0: Sep 21 07:16:30.547605: | -> MODE_CFG_R1 EVENT_SA_REPLACE Sep 21 07:16:30.547606: | MODE_CFG_R1: category: established IKE SA flags: 0: Sep 21 07:16:30.547608: | -> MODE_CFG_R2 EVENT_SA_REPLACE Sep 21 07:16:30.547609: | MODE_CFG_R2: category: established IKE SA flags: 0: Sep 21 07:16:30.547611: | -> UNDEFINED EVENT_NULL Sep 21 07:16:30.547612: | MODE_CFG_I1: category: established IKE SA flags: 0: Sep 21 07:16:30.547614: | -> MAIN_I4 EVENT_SA_REPLACE Sep 21 07:16:30.547615: | XAUTH_I0: category: established IKE SA flags: 0: Sep 21 07:16:30.547617: | -> XAUTH_I1 EVENT_RETRANSMIT Sep 21 07:16:30.547618: | XAUTH_I1: category: established IKE SA flags: 0: Sep 21 07:16:30.547620: | -> MAIN_I4 EVENT_RETRANSMIT Sep 21 07:16:30.547625: | checking IKEv2 state table Sep 21 07:16:30.547629: | PARENT_I0: category: ignore flags: 0: Sep 21 07:16:30.547631: | -> PARENT_I1 EVENT_RETRANSMIT send-request (initiate IKE_SA_INIT) Sep 21 07:16:30.547632: | PARENT_I1: category: half-open IKE SA flags: 0: Sep 21 07:16:30.547634: | -> PARENT_I1 EVENT_RETAIN send-request (Initiator: process SA_INIT reply notification) Sep 21 07:16:30.547636: | -> PARENT_I2 EVENT_RETRANSMIT send-request (Initiator: process IKE_SA_INIT reply, initiate IKE_AUTH) Sep 21 07:16:30.547638: | PARENT_I2: category: open IKE SA flags: 0: Sep 21 07:16:30.547639: | -> PARENT_I2 EVENT_NULL (Initiator: process INVALID_SYNTAX AUTH notification) Sep 21 07:16:30.547641: | -> PARENT_I2 EVENT_NULL (Initiator: process AUTHENTICATION_FAILED AUTH notification) Sep 21 07:16:30.547643: | -> PARENT_I2 EVENT_NULL (Initiator: process UNSUPPORTED_CRITICAL_PAYLOAD AUTH notification) Sep 21 07:16:30.547644: | -> V2_IPSEC_I EVENT_SA_REPLACE (Initiator: process IKE_AUTH response) Sep 21 07:16:30.547646: | -> PARENT_I2 EVENT_NULL (IKE SA: process IKE_AUTH response containing unknown notification) Sep 21 07:16:30.547648: | PARENT_I3: category: established IKE SA flags: 0: Sep 21 07:16:30.547649: | -> PARENT_I3 EVENT_RETAIN (I3: Informational Request) Sep 21 07:16:30.547651: | -> PARENT_I3 EVENT_RETAIN (I3: Informational Response) Sep 21 07:16:30.547652: | -> PARENT_I3 EVENT_RETAIN (I3: INFORMATIONAL Request) Sep 21 07:16:30.547654: | -> PARENT_I3 EVENT_RETAIN (I3: INFORMATIONAL Response) Sep 21 07:16:30.547656: | PARENT_R0: category: half-open IKE SA flags: 0: Sep 21 07:16:30.547657: | -> PARENT_R1 EVENT_SO_DISCARD send-request (Respond to IKE_SA_INIT) Sep 21 07:16:30.547659: | PARENT_R1: category: half-open IKE SA flags: 0: Sep 21 07:16:30.547661: | -> PARENT_R1 EVENT_SA_REPLACE send-request (Responder: process IKE_AUTH request (no SKEYSEED)) Sep 21 07:16:30.547662: | -> V2_IPSEC_R EVENT_SA_REPLACE send-request (Responder: process IKE_AUTH request) Sep 21 07:16:30.547664: | PARENT_R2: category: established IKE SA flags: 0: Sep 21 07:16:30.547667: | -> PARENT_R2 EVENT_RETAIN (R2: process Informational Request) Sep 21 07:16:30.547668: | -> PARENT_R2 EVENT_RETAIN (R2: process Informational Response) Sep 21 07:16:30.547670: | -> PARENT_R2 EVENT_RETAIN (R2: process INFORMATIONAL Request) Sep 21 07:16:30.547671: | -> PARENT_R2 EVENT_RETAIN (R2: process INFORMATIONAL Response) Sep 21 07:16:30.547673: | V2_CREATE_I0: category: established IKE SA flags: 0: Sep 21 07:16:30.547675: | -> V2_CREATE_I EVENT_RETRANSMIT send-request (Initiate CREATE_CHILD_SA IPsec SA) Sep 21 07:16:30.547676: | V2_CREATE_I: category: established IKE SA flags: 0: Sep 21 07:16:30.547678: | -> V2_IPSEC_I EVENT_SA_REPLACE (Process CREATE_CHILD_SA IPsec SA Response) Sep 21 07:16:30.547680: | V2_REKEY_IKE_I0: category: established IKE SA flags: 0: Sep 21 07:16:30.547681: | -> V2_REKEY_IKE_I EVENT_RETRANSMIT send-request (Initiate CREATE_CHILD_SA IKE Rekey) Sep 21 07:16:30.547683: | V2_REKEY_IKE_I: category: established IKE SA flags: 0: Sep 21 07:16:30.547685: | -> PARENT_I3 EVENT_SA_REPLACE (Process CREATE_CHILD_SA IKE Rekey Response) Sep 21 07:16:30.547686: | V2_REKEY_CHILD_I0: category: established IKE SA flags: 0: Sep 21 07:16:30.547688: | -> V2_REKEY_CHILD_I EVENT_RETRANSMIT send-request (Initiate CREATE_CHILD_SA IPsec Rekey SA) Sep 21 07:16:30.547690: | V2_REKEY_CHILD_I: category: established IKE SA flags: 0: Sep 21 07:16:30.547691: | V2_CREATE_R: category: established IKE SA flags: 0: Sep 21 07:16:30.547693: | -> V2_IPSEC_R EVENT_SA_REPLACE send-request (Respond to CREATE_CHILD_SA IPsec SA Request) Sep 21 07:16:30.547695: | V2_REKEY_IKE_R: category: established IKE SA flags: 0: Sep 21 07:16:30.547696: | -> PARENT_R2 EVENT_SA_REPLACE send-request (Respond to CREATE_CHILD_SA IKE Rekey) Sep 21 07:16:30.547698: | V2_REKEY_CHILD_R: category: established IKE SA flags: 0: Sep 21 07:16:30.547700: | V2_IPSEC_I: category: established CHILD SA flags: 0: Sep 21 07:16:30.547701: | V2_IPSEC_R: category: established CHILD SA flags: 0: Sep 21 07:16:30.547703: | IKESA_DEL: category: established IKE SA flags: 0: Sep 21 07:16:30.547705: | -> IKESA_DEL EVENT_RETAIN (IKE_SA_DEL: process INFORMATIONAL) Sep 21 07:16:30.547706: | CHILDSA_DEL: category: informational flags: 0: Sep 21 07:16:30.547749: Using Linux XFRM/NETKEY IPsec interface code on 5.2.11+ Sep 21 07:16:30.547813: | Hard-wiring algorithms Sep 21 07:16:30.547820: | adding AES_CCM_16 to kernel algorithm db Sep 21 07:16:30.547823: | adding AES_CCM_12 to kernel algorithm db Sep 21 07:16:30.547825: | adding AES_CCM_8 to kernel algorithm db Sep 21 07:16:30.547826: | adding 3DES_CBC to kernel algorithm db Sep 21 07:16:30.547828: | adding CAMELLIA_CBC to kernel algorithm db Sep 21 07:16:30.547829: | adding AES_GCM_16 to kernel algorithm db Sep 21 07:16:30.547831: | adding AES_GCM_12 to kernel algorithm db Sep 21 07:16:30.547832: | adding AES_GCM_8 to kernel algorithm db Sep 21 07:16:30.547833: | adding AES_CTR to kernel algorithm db Sep 21 07:16:30.547835: | adding AES_CBC to kernel algorithm db Sep 21 07:16:30.547836: | adding SERPENT_CBC to kernel algorithm db Sep 21 07:16:30.547838: | adding TWOFISH_CBC to kernel algorithm db Sep 21 07:16:30.547839: | adding NULL_AUTH_AES_GMAC to kernel algorithm db Sep 21 07:16:30.547841: | adding NULL to kernel algorithm db Sep 21 07:16:30.547843: | adding CHACHA20_POLY1305 to kernel algorithm db Sep 21 07:16:30.547844: | adding HMAC_MD5_96 to kernel algorithm db Sep 21 07:16:30.547846: | adding HMAC_SHA1_96 to kernel algorithm db Sep 21 07:16:30.547847: | adding HMAC_SHA2_512_256 to kernel algorithm db Sep 21 07:16:30.547849: | adding HMAC_SHA2_384_192 to kernel algorithm db Sep 21 07:16:30.547850: | adding HMAC_SHA2_256_128 to kernel algorithm db Sep 21 07:16:30.547852: | adding HMAC_SHA2_256_TRUNCBUG to kernel algorithm db Sep 21 07:16:30.547854: | adding AES_XCBC_96 to kernel algorithm db Sep 21 07:16:30.547855: | adding AES_CMAC_96 to kernel algorithm db Sep 21 07:16:30.547857: | adding NONE to kernel algorithm db Sep 21 07:16:30.547877: | net.ipv6.conf.all.disable_ipv6=1 ignore ipv6 holes Sep 21 07:16:30.547881: | global periodic timer EVENT_SHUNT_SCAN enabled with interval of 20 seconds Sep 21 07:16:30.547882: | setup kernel fd callback Sep 21 07:16:30.547884: | add_fd_read_event_handler: new KERNEL_XRM_FD-pe@0x55edd3547f60 Sep 21 07:16:30.547887: | libevent_malloc: new ptr-libevent@0x55edd3554080 size 128 Sep 21 07:16:30.547889: | libevent_malloc: new ptr-libevent@0x55edd3547240 size 16 Sep 21 07:16:30.547893: | add_fd_read_event_handler: new KERNEL_ROUTE_FD-pe@0x55edd3547f20 Sep 21 07:16:30.547895: | libevent_malloc: new ptr-libevent@0x55edd3554110 size 128 Sep 21 07:16:30.547897: | libevent_malloc: new ptr-libevent@0x55edd3547260 size 16 Sep 21 07:16:30.548037: | global one-shot timer EVENT_CHECK_CRLS initialized Sep 21 07:16:30.548043: selinux support is enabled. Sep 21 07:16:30.548104: systemd watchdog not enabled - not sending watchdog keepalives Sep 21 07:16:30.548228: | unbound context created - setting debug level to 5 Sep 21 07:16:30.548249: | /etc/hosts lookups activated Sep 21 07:16:30.548260: | /etc/resolv.conf usage activated Sep 21 07:16:30.548292: | outgoing-port-avoid set 0-65535 Sep 21 07:16:30.548309: | outgoing-port-permit set 32768-60999 Sep 21 07:16:30.548311: | Loading dnssec root key from:/var/lib/unbound/root.key Sep 21 07:16:30.548313: | No additional dnssec trust anchors defined via dnssec-trusted= option Sep 21 07:16:30.548315: | Setting up events, loop start Sep 21 07:16:30.548317: | add_fd_read_event_handler: new PLUTO_CTL_FD-pe@0x55edd35424b0 Sep 21 07:16:30.548319: | libevent_malloc: new ptr-libevent@0x55edd355e680 size 128 Sep 21 07:16:30.548321: | libevent_malloc: new ptr-libevent@0x55edd355e710 size 16 Sep 21 07:16:30.548326: | libevent_realloc: new ptr-libevent@0x55edd34c25b0 size 256 Sep 21 07:16:30.548327: | libevent_malloc: new ptr-libevent@0x55edd355e730 size 8 Sep 21 07:16:30.548329: | libevent_realloc: new ptr-libevent@0x55edd3553480 size 144 Sep 21 07:16:30.548331: | libevent_malloc: new ptr-libevent@0x55edd355e750 size 152 Sep 21 07:16:30.548333: | libevent_malloc: new ptr-libevent@0x55edd355e7f0 size 16 Sep 21 07:16:30.548336: | signal event handler PLUTO_SIGCHLD installed Sep 21 07:16:30.548337: | libevent_malloc: new ptr-libevent@0x55edd355e810 size 8 Sep 21 07:16:30.548339: | libevent_malloc: new ptr-libevent@0x55edd355e830 size 152 Sep 21 07:16:30.548341: | signal event handler PLUTO_SIGTERM installed Sep 21 07:16:30.548342: | libevent_malloc: new ptr-libevent@0x55edd355e8d0 size 8 Sep 21 07:16:30.548344: | libevent_malloc: new ptr-libevent@0x55edd355e8f0 size 152 Sep 21 07:16:30.548346: | signal event handler PLUTO_SIGHUP installed Sep 21 07:16:30.548347: | libevent_malloc: new ptr-libevent@0x55edd355e990 size 8 Sep 21 07:16:30.548349: | libevent_realloc: release ptr-libevent@0x55edd3553480 Sep 21 07:16:30.548351: | libevent_realloc: new ptr-libevent@0x55edd355e9b0 size 256 Sep 21 07:16:30.548352: | libevent_malloc: new ptr-libevent@0x55edd3553480 size 152 Sep 21 07:16:30.548354: | signal event handler PLUTO_SIGSYS installed Sep 21 07:16:30.548584: | created addconn helper (pid:12207) using fork+execve Sep 21 07:16:30.548594: | forked child 12207 Sep 21 07:16:30.548624: | accept(whackctlfd, (struct sockaddr *)&whackaddr, &whackaddrlen) -> fd@16 (in whack_handle() at rcv_whack.c:721) Sep 21 07:16:30.548638: | pluto_sd: executing action action: reloading(4), status 0 Sep 21 07:16:30.548646: listening for IKE messages Sep 21 07:16:30.556086: | Inspecting interface lo Sep 21 07:16:30.556107: | found lo with address 127.0.0.1 Sep 21 07:16:30.556112: | Inspecting interface eth0 Sep 21 07:16:30.556116: | found eth0 with address 192.0.2.254 Sep 21 07:16:30.556119: | Inspecting interface eth0 Sep 21 07:16:30.556122: | found eth0 with address 192.0.22.251 Sep 21 07:16:30.556125: | Inspecting interface eth0 Sep 21 07:16:30.556129: | found eth0 with address 192.0.22.254 Sep 21 07:16:30.556131: | Inspecting interface eth0 Sep 21 07:16:30.556135: | found eth0 with address 192.0.2.251 Sep 21 07:16:30.556143: | Inspecting interface eth1 Sep 21 07:16:30.556147: | found eth1 with address 192.1.2.23 Sep 21 07:16:30.556205: Kernel supports NIC esp-hw-offload Sep 21 07:16:30.556218: adding interface eth1/eth1 (esp-hw-offload not supported by kernel) 192.1.2.23:500 Sep 21 07:16:30.556240: | NAT-Traversal: Trying sockopt style NAT-T Sep 21 07:16:30.556244: | NAT-Traversal: ESPINUDP(2) setup succeeded for sockopt style NAT-T family IPv4 Sep 21 07:16:30.556248: adding interface eth1/eth1 192.1.2.23:4500 Sep 21 07:16:30.556711: adding interface eth0/eth0 (esp-hw-offload not supported by kernel) 192.0.2.251:500 Sep 21 07:16:30.556748: | NAT-Traversal: Trying sockopt style NAT-T Sep 21 07:16:30.556753: | NAT-Traversal: ESPINUDP(2) setup succeeded for sockopt style NAT-T family IPv4 Sep 21 07:16:30.556758: adding interface eth0/eth0 192.0.2.251:4500 Sep 21 07:16:30.556791: adding interface eth0/eth0 (esp-hw-offload not supported by kernel) 192.0.22.254:500 Sep 21 07:16:30.556816: | NAT-Traversal: Trying sockopt style NAT-T Sep 21 07:16:30.556820: | NAT-Traversal: ESPINUDP(2) setup succeeded for sockopt style NAT-T family IPv4 Sep 21 07:16:30.556824: adding interface eth0/eth0 192.0.22.254:4500 Sep 21 07:16:30.556850: adding interface eth0/eth0 (esp-hw-offload not supported by kernel) 192.0.22.251:500 Sep 21 07:16:30.556871: | NAT-Traversal: Trying sockopt style NAT-T Sep 21 07:16:30.556875: | NAT-Traversal: ESPINUDP(2) setup succeeded for sockopt style NAT-T family IPv4 Sep 21 07:16:30.556878: adding interface eth0/eth0 192.0.22.251:4500 Sep 21 07:16:30.556903: adding interface eth0/eth0 (esp-hw-offload not supported by kernel) 192.0.2.254:500 Sep 21 07:16:30.556925: | NAT-Traversal: Trying sockopt style NAT-T Sep 21 07:16:30.556928: | NAT-Traversal: ESPINUDP(2) setup succeeded for sockopt style NAT-T family IPv4 Sep 21 07:16:30.556932: adding interface eth0/eth0 192.0.2.254:4500 Sep 21 07:16:30.556956: adding interface lo/lo (esp-hw-offload not supported by kernel) 127.0.0.1:500 Sep 21 07:16:30.556978: | NAT-Traversal: Trying sockopt style NAT-T Sep 21 07:16:30.556982: | NAT-Traversal: ESPINUDP(2) setup succeeded for sockopt style NAT-T family IPv4 Sep 21 07:16:30.556986: adding interface lo/lo 127.0.0.1:4500 Sep 21 07:16:30.557040: | no interfaces to sort Sep 21 07:16:30.557044: | FOR_EACH_UNORIENTED_CONNECTION_... in check_orientations Sep 21 07:16:30.557058: | add_fd_read_event_handler: new ethX-pe@0x55edd355f0c0 Sep 21 07:16:30.557061: | libevent_malloc: new ptr-libevent@0x55edd355f100 size 128 Sep 21 07:16:30.557066: | libevent_malloc: new ptr-libevent@0x55edd355f190 size 16 Sep 21 07:16:30.557074: | setup callback for interface lo 127.0.0.1:4500 fd 28 Sep 21 07:16:30.557077: | add_fd_read_event_handler: new ethX-pe@0x55edd355f1b0 Sep 21 07:16:30.557080: | libevent_malloc: new ptr-libevent@0x55edd355f1f0 size 128 Sep 21 07:16:30.557082: | libevent_malloc: new ptr-libevent@0x55edd355f280 size 16 Sep 21 07:16:30.557087: | setup callback for interface lo 127.0.0.1:500 fd 27 Sep 21 07:16:30.557089: | add_fd_read_event_handler: new ethX-pe@0x55edd355f2a0 Sep 21 07:16:30.557092: | libevent_malloc: new ptr-libevent@0x55edd355f2e0 size 128 Sep 21 07:16:30.557095: | libevent_malloc: new ptr-libevent@0x55edd355f370 size 16 Sep 21 07:16:30.557099: | setup callback for interface eth0 192.0.2.254:4500 fd 26 Sep 21 07:16:30.557101: | add_fd_read_event_handler: new ethX-pe@0x55edd355f390 Sep 21 07:16:30.557104: | libevent_malloc: new ptr-libevent@0x55edd355f3d0 size 128 Sep 21 07:16:30.557107: | libevent_malloc: new ptr-libevent@0x55edd355f460 size 16 Sep 21 07:16:30.557111: | setup callback for interface eth0 192.0.2.254:500 fd 25 Sep 21 07:16:30.557114: | add_fd_read_event_handler: new ethX-pe@0x55edd355f480 Sep 21 07:16:30.557116: | libevent_malloc: new ptr-libevent@0x55edd355fb40 size 128 Sep 21 07:16:30.557119: | libevent_malloc: new ptr-libevent@0x55edd355fbd0 size 16 Sep 21 07:16:30.557124: | setup callback for interface eth0 192.0.22.251:4500 fd 24 Sep 21 07:16:30.557127: | add_fd_read_event_handler: new ethX-pe@0x55edd355fbf0 Sep 21 07:16:30.557134: | libevent_malloc: new ptr-libevent@0x55edd355fc30 size 128 Sep 21 07:16:30.557136: | libevent_malloc: new ptr-libevent@0x55edd355fcc0 size 16 Sep 21 07:16:30.557141: | setup callback for interface eth0 192.0.22.251:500 fd 23 Sep 21 07:16:30.557144: | add_fd_read_event_handler: new ethX-pe@0x55edd355fce0 Sep 21 07:16:30.557146: | libevent_malloc: new ptr-libevent@0x55edd355fd20 size 128 Sep 21 07:16:30.557149: | libevent_malloc: new ptr-libevent@0x55edd355fdb0 size 16 Sep 21 07:16:30.557153: | setup callback for interface eth0 192.0.22.254:4500 fd 22 Sep 21 07:16:30.557156: | add_fd_read_event_handler: new ethX-pe@0x55edd355fdd0 Sep 21 07:16:30.557158: | libevent_malloc: new ptr-libevent@0x55edd355fe10 size 128 Sep 21 07:16:30.557161: | libevent_malloc: new ptr-libevent@0x55edd355fea0 size 16 Sep 21 07:16:30.557165: | setup callback for interface eth0 192.0.22.254:500 fd 21 Sep 21 07:16:30.557167: | add_fd_read_event_handler: new ethX-pe@0x55edd355fec0 Sep 21 07:16:30.557170: | libevent_malloc: new ptr-libevent@0x55edd355ff00 size 128 Sep 21 07:16:30.557172: | libevent_malloc: new ptr-libevent@0x55edd355ff90 size 16 Sep 21 07:16:30.557177: | setup callback for interface eth0 192.0.2.251:4500 fd 20 Sep 21 07:16:30.557179: | add_fd_read_event_handler: new ethX-pe@0x55edd355ffb0 Sep 21 07:16:30.557183: | libevent_malloc: new ptr-libevent@0x55edd355fff0 size 128 Sep 21 07:16:30.557186: | libevent_malloc: new ptr-libevent@0x55edd3560080 size 16 Sep 21 07:16:30.557191: | setup callback for interface eth0 192.0.2.251:500 fd 19 Sep 21 07:16:30.557193: | add_fd_read_event_handler: new ethX-pe@0x55edd35600a0 Sep 21 07:16:30.557196: | libevent_malloc: new ptr-libevent@0x55edd35600e0 size 128 Sep 21 07:16:30.557198: | libevent_malloc: new ptr-libevent@0x55edd3560170 size 16 Sep 21 07:16:30.557203: | setup callback for interface eth1 192.1.2.23:4500 fd 18 Sep 21 07:16:30.557206: | add_fd_read_event_handler: new ethX-pe@0x55edd3560190 Sep 21 07:16:30.557208: | libevent_malloc: new ptr-libevent@0x55edd35601d0 size 128 Sep 21 07:16:30.557211: | libevent_malloc: new ptr-libevent@0x55edd3560260 size 16 Sep 21 07:16:30.557215: | setup callback for interface eth1 192.1.2.23:500 fd 17 Sep 21 07:16:30.557220: | certs and keys locked by 'free_preshared_secrets' Sep 21 07:16:30.557222: | certs and keys unlocked by 'free_preshared_secrets' Sep 21 07:16:30.557242: loading secrets from "/etc/ipsec.secrets" Sep 21 07:16:30.557260: | saving Modulus Sep 21 07:16:30.557263: | saving PublicExponent Sep 21 07:16:30.557266: | ignoring PrivateExponent Sep 21 07:16:30.557269: | ignoring Prime1 Sep 21 07:16:30.557272: | ignoring Prime2 Sep 21 07:16:30.557275: | ignoring Exponent1 Sep 21 07:16:30.557278: | ignoring Exponent2 Sep 21 07:16:30.557281: | ignoring Coefficient Sep 21 07:16:30.557284: | ignoring CKAIDNSS Sep 21 07:16:30.557322: | computed rsa CKAID 61 55 99 73 d3 ac ef 7d 3a 37 0e 3e 82 ad 92 c1 Sep 21 07:16:30.557325: | computed rsa CKAID 8a 82 25 f1 Sep 21 07:16:30.557329: loaded private key for keyid: PKK_RSA:AQO9bJbr3 Sep 21 07:16:30.557335: | certs and keys locked by 'process_secret' Sep 21 07:16:30.557338: | certs and keys unlocked by 'process_secret' Sep 21 07:16:30.557343: | pluto_sd: executing action action: ready(5), status 0 Sep 21 07:16:30.557352: | close_any(fd@16) (in whack_process() at rcv_whack.c:700) Sep 21 07:16:30.557359: | spent 0.938 milliseconds in whack Sep 21 07:16:30.575322: | accept(whackctlfd, (struct sockaddr *)&whackaddr, &whackaddrlen) -> fd@16 (in whack_handle() at rcv_whack.c:721) Sep 21 07:16:30.575342: | FOR_EACH_CONNECTION_... in conn_by_name Sep 21 07:16:30.575346: | FOR_EACH_CONNECTION_... in foreach_connection_by_alias Sep 21 07:16:30.575348: | FOR_EACH_CONNECTION_... in conn_by_name Sep 21 07:16:30.575350: | FOR_EACH_CONNECTION_... in foreach_connection_by_alias Sep 21 07:16:30.575354: | FOR_EACH_CONNECTION_... in conn_by_name Sep 21 07:16:30.575361: | Added new connection north-eastnets/0x1 with policy ENCRYPT+TUNNEL+PFS+IKEV2_ALLOW+SAREF_TRACK+IKE_FRAG_ALLOW+ESN_NO Sep 21 07:16:30.575373: | No AUTH policy was set - defaulting to RSASIG Sep 21 07:16:30.575397: | ike (phase1) algorithm values: AES_CBC_256-HMAC_SHA2_256-MODP2048 Sep 21 07:16:30.575399: | from whack: got --esp=aes128-sha2_512;modp3072 Sep 21 07:16:30.575414: | ESP/AH string values: AES_CBC_128-HMAC_SHA2_512_256-MODP3072 Sep 21 07:16:30.575419: | counting wild cards for @north is 0 Sep 21 07:16:30.575422: | counting wild cards for @east is 0 Sep 21 07:16:30.575432: | connect_to_host_pair: 192.1.2.23:500 192.1.3.33:500 -> hp@(nil): none Sep 21 07:16:30.575436: | new hp@0x55edd352b720 Sep 21 07:16:30.575440: added connection description "north-eastnets/0x1" Sep 21 07:16:30.575450: | ike_life: 3600s; ipsec_life: 28800s; rekey_margin: 540s; rekey_fuzz: 100%; keyingtries: 0; replay_window: 32; policy: RSASIG+ENCRYPT+TUNNEL+PFS+IKEV2_ALLOW+SAREF_TRACK+IKE_FRAG_ALLOW+ESN_NO Sep 21 07:16:30.575460: | 192.0.2.0/24===192.1.2.23<192.1.2.23>[@east]...192.1.3.33<192.1.3.33>[@north]===192.0.3.0/24 Sep 21 07:16:30.575468: | close_any(fd@16) (in whack_process() at rcv_whack.c:700) Sep 21 07:16:30.575475: | spent 0.161 milliseconds in whack Sep 21 07:16:30.575503: | accept(whackctlfd, (struct sockaddr *)&whackaddr, &whackaddrlen) -> fd@16 (in whack_handle() at rcv_whack.c:721) Sep 21 07:16:30.575512: add keyid @north Sep 21 07:16:30.575515: | add pubkey 01 03 e5 df 73 b6 3e d5 36 a8 f1 3d 0d d3 02 ab Sep 21 07:16:30.575518: | add pubkey 7f ec 4c 9e 8b 0e 0e d2 cf 0f 59 bf 6d 88 21 86 Sep 21 07:16:30.575520: | add pubkey 93 9e 10 34 af 2d cf b3 7e eb e5 b2 24 b2 a5 b0 Sep 21 07:16:30.575522: | add pubkey 01 03 7d b5 96 ad 66 ee 48 c2 28 d9 9a 76 36 a9 Sep 21 07:16:30.575524: | add pubkey 10 84 b5 09 8f 17 4f 65 ce d8 2f 8e 78 80 8a 87 Sep 21 07:16:30.575526: | add pubkey f4 6b 98 d9 91 94 6b 52 15 5b 9c 47 12 be d8 6f Sep 21 07:16:30.575528: | add pubkey 25 b4 65 38 7e e4 8d c7 f0 58 d3 9f 69 14 cc 3e Sep 21 07:16:30.575531: | add pubkey c8 16 1f af bb 5d 93 2b 33 39 0e 94 55 81 f4 b3 Sep 21 07:16:30.575533: | add pubkey cc 92 58 6e 4a 5a 4e c3 76 ab 04 2e 11 08 06 55 Sep 21 07:16:30.575535: | add pubkey 13 0f 02 6c dd d1 bc c0 b8 8d 65 f5 97 ed fc 18 Sep 21 07:16:30.575537: | add pubkey 39 f9 55 ab fa 0d c5 49 99 7f 1b cf c3 de 99 7d Sep 21 07:16:30.575539: | add pubkey 9e ca 6f 9e 14 d6 5a ff de d6 4f 57 6a 83 ab 51 Sep 21 07:16:30.575541: | add pubkey ba 64 74 e0 22 e9 9a c5 10 71 bb d4 eb a4 99 28 Sep 21 07:16:30.575543: | add pubkey 9c 85 0e 31 ea cc ab ef 98 84 3f 59 c1 75 aa b3 Sep 21 07:16:30.575545: | add pubkey 61 eb 61 8c 58 a5 92 25 84 ad c7 79 f3 87 d0 c7 Sep 21 07:16:30.575548: | add pubkey 83 c2 d6 8a fe 26 9d 2a ff b1 dd 9b 89 21 7c ca Sep 21 07:16:30.575550: | add pubkey f5 38 2d 3f 64 0c 41 9c 34 e9 b2 55 0f 82 1a b3 Sep 21 07:16:30.575552: | add pubkey c7 5e a5 99 Sep 21 07:16:30.575572: | computed rsa CKAID 90 5d fc a1 08 68 74 7c 6f 20 d3 1b 2d 20 4b 8f Sep 21 07:16:30.575575: | computed rsa CKAID 88 aa 7c 5d Sep 21 07:16:30.575581: | keyid: *AQPl33O2P Sep 21 07:16:30.575583: | n e5 df 73 b6 3e d5 36 a8 f1 3d 0d d3 02 ab 7f ec Sep 21 07:16:30.575585: | n 4c 9e 8b 0e 0e d2 cf 0f 59 bf 6d 88 21 86 93 9e Sep 21 07:16:30.575588: | n 10 34 af 2d cf b3 7e eb e5 b2 24 b2 a5 b0 01 03 Sep 21 07:16:30.575590: | n 7d b5 96 ad 66 ee 48 c2 28 d9 9a 76 36 a9 10 84 Sep 21 07:16:30.575592: | n b5 09 8f 17 4f 65 ce d8 2f 8e 78 80 8a 87 f4 6b Sep 21 07:16:30.575594: | n 98 d9 91 94 6b 52 15 5b 9c 47 12 be d8 6f 25 b4 Sep 21 07:16:30.575596: | n 65 38 7e e4 8d c7 f0 58 d3 9f 69 14 cc 3e c8 16 Sep 21 07:16:30.575598: | n 1f af bb 5d 93 2b 33 39 0e 94 55 81 f4 b3 cc 92 Sep 21 07:16:30.575600: | n 58 6e 4a 5a 4e c3 76 ab 04 2e 11 08 06 55 13 0f Sep 21 07:16:30.575602: | n 02 6c dd d1 bc c0 b8 8d 65 f5 97 ed fc 18 39 f9 Sep 21 07:16:30.575604: | n 55 ab fa 0d c5 49 99 7f 1b cf c3 de 99 7d 9e ca Sep 21 07:16:30.575606: | n 6f 9e 14 d6 5a ff de d6 4f 57 6a 83 ab 51 ba 64 Sep 21 07:16:30.575611: | n 74 e0 22 e9 9a c5 10 71 bb d4 eb a4 99 28 9c 85 Sep 21 07:16:30.575613: | n 0e 31 ea cc ab ef 98 84 3f 59 c1 75 aa b3 61 eb Sep 21 07:16:30.575615: | n 61 8c 58 a5 92 25 84 ad c7 79 f3 87 d0 c7 83 c2 Sep 21 07:16:30.575617: | n d6 8a fe 26 9d 2a ff b1 dd 9b 89 21 7c ca f5 38 Sep 21 07:16:30.575619: | n 2d 3f 64 0c 41 9c 34 e9 b2 55 0f 82 1a b3 c7 5e Sep 21 07:16:30.575621: | n a5 99 Sep 21 07:16:30.575623: | e 03 Sep 21 07:16:30.575626: | CKAID 90 5d fc a1 08 68 74 7c 6f 20 d3 1b 2d 20 4b 8f Sep 21 07:16:30.575628: | CKAID 88 aa 7c 5d Sep 21 07:16:30.575634: | close_any(fd@16) (in whack_process() at rcv_whack.c:700) Sep 21 07:16:30.575638: | spent 0.139 milliseconds in whack Sep 21 07:16:30.575664: | accept(whackctlfd, (struct sockaddr *)&whackaddr, &whackaddrlen) -> fd@16 (in whack_handle() at rcv_whack.c:721) Sep 21 07:16:30.575671: add keyid @east Sep 21 07:16:30.575674: | add pubkey 01 03 bd 6c 96 eb df 78 89 b3 ed 77 0d a1 7f 7b Sep 21 07:16:30.575676: | add pubkey e5 16 c2 c9 e4 7d 92 0a 90 9d 55 43 b4 62 13 03 Sep 21 07:16:30.575678: | add pubkey 85 7a e0 26 7b 54 1f ca 09 93 cf ff 25 c9 02 4c Sep 21 07:16:30.575680: | add pubkey 78 ca 94 e5 3e ac d1 f9 a8 e5 bb 7f cc 20 84 e0 Sep 21 07:16:30.575682: | add pubkey 21 c9 f0 0d c5 44 ba f3 48 64 61 58 f6 0f 63 0d Sep 21 07:16:30.575684: | add pubkey d2 67 1e 59 8b ec f3 50 39 71 fb 39 da 11 64 b6 Sep 21 07:16:30.575686: | add pubkey 62 cd 5f d3 8d 2e c1 50 ed 9c 6e 22 0c 39 a7 ce Sep 21 07:16:30.575688: | add pubkey 62 b5 af 8a 80 0f 2e 4c 05 5c 82 c7 8d 29 02 2e Sep 21 07:16:30.575691: | add pubkey bb 23 5f db f2 9e b5 7d e2 20 70 1a 63 f3 8e 5d Sep 21 07:16:30.575693: | add pubkey ac 47 f0 5c 26 4e b1 d0 42 60 52 4a b0 77 25 ce Sep 21 07:16:30.575695: | add pubkey e0 98 2b 43 f4 c7 59 1a 64 01 83 ea 4e e3 1a 2a Sep 21 07:16:30.575697: | add pubkey 92 b8 55 ab 63 dd 4b 70 47 29 dc e9 b4 60 bf 43 Sep 21 07:16:30.575699: | add pubkey 4d 58 8f 64 73 95 70 ac 35 89 b2 c2 9c d4 62 c0 Sep 21 07:16:30.575701: | add pubkey 5f 56 5f ad 1b e5 dd 49 93 6a f5 23 82 ed d4 e7 Sep 21 07:16:30.575703: | add pubkey d5 f1 55 f2 2d a2 26 a6 36 53 2f 94 fb 99 22 5c Sep 21 07:16:30.575705: | add pubkey 47 cc 6d 80 30 88 96 38 0c f5 f2 ed 37 d0 09 d5 Sep 21 07:16:30.575707: | add pubkey 07 8f 69 ef a9 99 ce 4d 1a 77 9e 39 c4 38 f3 c5 Sep 21 07:16:30.575709: | add pubkey 51 51 48 ef Sep 21 07:16:30.575719: | computed rsa CKAID 61 55 99 73 d3 ac ef 7d 3a 37 0e 3e 82 ad 92 c1 Sep 21 07:16:30.575721: | computed rsa CKAID 8a 82 25 f1 Sep 21 07:16:30.575725: | keyid: *AQO9bJbr3 Sep 21 07:16:30.575727: | n bd 6c 96 eb df 78 89 b3 ed 77 0d a1 7f 7b e5 16 Sep 21 07:16:30.575729: | n c2 c9 e4 7d 92 0a 90 9d 55 43 b4 62 13 03 85 7a Sep 21 07:16:30.575731: | n e0 26 7b 54 1f ca 09 93 cf ff 25 c9 02 4c 78 ca Sep 21 07:16:30.575733: | n 94 e5 3e ac d1 f9 a8 e5 bb 7f cc 20 84 e0 21 c9 Sep 21 07:16:30.575735: | n f0 0d c5 44 ba f3 48 64 61 58 f6 0f 63 0d d2 67 Sep 21 07:16:30.575737: | n 1e 59 8b ec f3 50 39 71 fb 39 da 11 64 b6 62 cd Sep 21 07:16:30.575739: | n 5f d3 8d 2e c1 50 ed 9c 6e 22 0c 39 a7 ce 62 b5 Sep 21 07:16:30.575741: | n af 8a 80 0f 2e 4c 05 5c 82 c7 8d 29 02 2e bb 23 Sep 21 07:16:30.575743: | n 5f db f2 9e b5 7d e2 20 70 1a 63 f3 8e 5d ac 47 Sep 21 07:16:30.575745: | n f0 5c 26 4e b1 d0 42 60 52 4a b0 77 25 ce e0 98 Sep 21 07:16:30.575747: | n 2b 43 f4 c7 59 1a 64 01 83 ea 4e e3 1a 2a 92 b8 Sep 21 07:16:30.575749: | n 55 ab 63 dd 4b 70 47 29 dc e9 b4 60 bf 43 4d 58 Sep 21 07:16:30.575752: | n 8f 64 73 95 70 ac 35 89 b2 c2 9c d4 62 c0 5f 56 Sep 21 07:16:30.575754: | n 5f ad 1b e5 dd 49 93 6a f5 23 82 ed d4 e7 d5 f1 Sep 21 07:16:30.575756: | n 55 f2 2d a2 26 a6 36 53 2f 94 fb 99 22 5c 47 cc Sep 21 07:16:30.575758: | n 6d 80 30 88 96 38 0c f5 f2 ed 37 d0 09 d5 07 8f Sep 21 07:16:30.575760: | n 69 ef a9 99 ce 4d 1a 77 9e 39 c4 38 f3 c5 51 51 Sep 21 07:16:30.575764: | n 48 ef Sep 21 07:16:30.575766: | e 03 Sep 21 07:16:30.575768: | CKAID 61 55 99 73 d3 ac ef 7d 3a 37 0e 3e 82 ad 92 c1 Sep 21 07:16:30.575770: | CKAID 8a 82 25 f1 Sep 21 07:16:30.575776: | close_any(fd@16) (in whack_process() at rcv_whack.c:700) Sep 21 07:16:30.575780: | spent 0.119 milliseconds in whack Sep 21 07:16:30.575830: | accept(whackctlfd, (struct sockaddr *)&whackaddr, &whackaddrlen) -> fd@16 (in whack_handle() at rcv_whack.c:721) Sep 21 07:16:30.575842: | FOR_EACH_CONNECTION_... in conn_by_name Sep 21 07:16:30.575845: | FOR_EACH_CONNECTION_... in foreach_connection_by_alias Sep 21 07:16:30.575847: | FOR_EACH_CONNECTION_... in conn_by_name Sep 21 07:16:30.575849: | FOR_EACH_CONNECTION_... in foreach_connection_by_alias Sep 21 07:16:30.575852: | FOR_EACH_CONNECTION_... in conn_by_name Sep 21 07:16:30.575857: | Added new connection north-eastnets/0x2 with policy ENCRYPT+TUNNEL+PFS+IKEV2_ALLOW+SAREF_TRACK+IKE_FRAG_ALLOW+ESN_NO Sep 21 07:16:30.575860: | No AUTH policy was set - defaulting to RSASIG Sep 21 07:16:30.575875: | ike (phase1) algorithm values: AES_CBC_256-HMAC_SHA2_256-MODP2048 Sep 21 07:16:30.575877: | from whack: got --esp=aes128-sha2_512;modp3072 Sep 21 07:16:30.575890: | ESP/AH string values: AES_CBC_128-HMAC_SHA2_512_256-MODP3072 Sep 21 07:16:30.575894: | counting wild cards for @north is 0 Sep 21 07:16:30.575897: | counting wild cards for @east is 0 Sep 21 07:16:30.575903: | find_host_pair: comparing 192.1.2.23:500 to 192.1.3.33:500 but ignoring ports Sep 21 07:16:30.575907: | connect_to_host_pair: 192.1.2.23:500 192.1.3.33:500 -> hp@0x55edd352b720: north-eastnets/0x1 Sep 21 07:16:30.575910: added connection description "north-eastnets/0x2" Sep 21 07:16:30.575930: | ike_life: 3600s; ipsec_life: 28800s; rekey_margin: 540s; rekey_fuzz: 100%; keyingtries: 0; replay_window: 32; policy: RSASIG+ENCRYPT+TUNNEL+PFS+IKEV2_ALLOW+SAREF_TRACK+IKE_FRAG_ALLOW+ESN_NO Sep 21 07:16:30.575939: | 192.0.22.0/24===192.1.2.23<192.1.2.23>[@east]...192.1.3.33<192.1.3.33>[@north]===192.0.3.0/24 Sep 21 07:16:30.575962: | close_any(fd@16) (in whack_process() at rcv_whack.c:700) Sep 21 07:16:30.575966: | spent 0.14 milliseconds in whack Sep 21 07:16:30.575992: | accept(whackctlfd, (struct sockaddr *)&whackaddr, &whackaddrlen) -> fd@16 (in whack_handle() at rcv_whack.c:721) Sep 21 07:16:30.576000: add keyid @north Sep 21 07:16:30.576004: | unreference key: 0x55edd34b98f0 @north cnt 1-- Sep 21 07:16:30.576007: | add pubkey 01 03 e5 df 73 b6 3e d5 36 a8 f1 3d 0d d3 02 ab Sep 21 07:16:30.576009: | add pubkey 7f ec 4c 9e 8b 0e 0e d2 cf 0f 59 bf 6d 88 21 86 Sep 21 07:16:30.576011: | add pubkey 93 9e 10 34 af 2d cf b3 7e eb e5 b2 24 b2 a5 b0 Sep 21 07:16:30.576013: | add pubkey 01 03 7d b5 96 ad 66 ee 48 c2 28 d9 9a 76 36 a9 Sep 21 07:16:30.576015: | add pubkey 10 84 b5 09 8f 17 4f 65 ce d8 2f 8e 78 80 8a 87 Sep 21 07:16:30.576017: | add pubkey f4 6b 98 d9 91 94 6b 52 15 5b 9c 47 12 be d8 6f Sep 21 07:16:30.576020: | add pubkey 25 b4 65 38 7e e4 8d c7 f0 58 d3 9f 69 14 cc 3e Sep 21 07:16:30.576022: | add pubkey c8 16 1f af bb 5d 93 2b 33 39 0e 94 55 81 f4 b3 Sep 21 07:16:30.576024: | add pubkey cc 92 58 6e 4a 5a 4e c3 76 ab 04 2e 11 08 06 55 Sep 21 07:16:30.576026: | add pubkey 13 0f 02 6c dd d1 bc c0 b8 8d 65 f5 97 ed fc 18 Sep 21 07:16:30.576028: | add pubkey 39 f9 55 ab fa 0d c5 49 99 7f 1b cf c3 de 99 7d Sep 21 07:16:30.576030: | add pubkey 9e ca 6f 9e 14 d6 5a ff de d6 4f 57 6a 83 ab 51 Sep 21 07:16:30.576032: | add pubkey ba 64 74 e0 22 e9 9a c5 10 71 bb d4 eb a4 99 28 Sep 21 07:16:30.576034: | add pubkey 9c 85 0e 31 ea cc ab ef 98 84 3f 59 c1 75 aa b3 Sep 21 07:16:30.576036: | add pubkey 61 eb 61 8c 58 a5 92 25 84 ad c7 79 f3 87 d0 c7 Sep 21 07:16:30.576038: | add pubkey 83 c2 d6 8a fe 26 9d 2a ff b1 dd 9b 89 21 7c ca Sep 21 07:16:30.576040: | add pubkey f5 38 2d 3f 64 0c 41 9c 34 e9 b2 55 0f 82 1a b3 Sep 21 07:16:30.576042: | add pubkey c7 5e a5 99 Sep 21 07:16:30.576051: | computed rsa CKAID 90 5d fc a1 08 68 74 7c 6f 20 d3 1b 2d 20 4b 8f Sep 21 07:16:30.576056: | computed rsa CKAID 88 aa 7c 5d Sep 21 07:16:30.576060: | keyid: *AQPl33O2P Sep 21 07:16:30.576062: | n e5 df 73 b6 3e d5 36 a8 f1 3d 0d d3 02 ab 7f ec Sep 21 07:16:30.576064: | n 4c 9e 8b 0e 0e d2 cf 0f 59 bf 6d 88 21 86 93 9e Sep 21 07:16:30.576066: | n 10 34 af 2d cf b3 7e eb e5 b2 24 b2 a5 b0 01 03 Sep 21 07:16:30.576068: | n 7d b5 96 ad 66 ee 48 c2 28 d9 9a 76 36 a9 10 84 Sep 21 07:16:30.576070: | n b5 09 8f 17 4f 65 ce d8 2f 8e 78 80 8a 87 f4 6b Sep 21 07:16:30.576072: | n 98 d9 91 94 6b 52 15 5b 9c 47 12 be d8 6f 25 b4 Sep 21 07:16:30.576074: | n 65 38 7e e4 8d c7 f0 58 d3 9f 69 14 cc 3e c8 16 Sep 21 07:16:30.576076: | n 1f af bb 5d 93 2b 33 39 0e 94 55 81 f4 b3 cc 92 Sep 21 07:16:30.576078: | n 58 6e 4a 5a 4e c3 76 ab 04 2e 11 08 06 55 13 0f Sep 21 07:16:30.576080: | n 02 6c dd d1 bc c0 b8 8d 65 f5 97 ed fc 18 39 f9 Sep 21 07:16:30.576082: | n 55 ab fa 0d c5 49 99 7f 1b cf c3 de 99 7d 9e ca Sep 21 07:16:30.576084: | n 6f 9e 14 d6 5a ff de d6 4f 57 6a 83 ab 51 ba 64 Sep 21 07:16:30.576086: | n 74 e0 22 e9 9a c5 10 71 bb d4 eb a4 99 28 9c 85 Sep 21 07:16:30.576088: | n 0e 31 ea cc ab ef 98 84 3f 59 c1 75 aa b3 61 eb Sep 21 07:16:30.576090: | n 61 8c 58 a5 92 25 84 ad c7 79 f3 87 d0 c7 83 c2 Sep 21 07:16:30.576092: | n d6 8a fe 26 9d 2a ff b1 dd 9b 89 21 7c ca f5 38 Sep 21 07:16:30.576094: | n 2d 3f 64 0c 41 9c 34 e9 b2 55 0f 82 1a b3 c7 5e Sep 21 07:16:30.576096: | n a5 99 Sep 21 07:16:30.576098: | e 03 Sep 21 07:16:30.576100: | CKAID 90 5d fc a1 08 68 74 7c 6f 20 d3 1b 2d 20 4b 8f Sep 21 07:16:30.576102: | CKAID 88 aa 7c 5d Sep 21 07:16:30.576108: | close_any(fd@16) (in whack_process() at rcv_whack.c:700) Sep 21 07:16:30.576112: | spent 0.123 milliseconds in whack Sep 21 07:16:30.576143: | accept(whackctlfd, (struct sockaddr *)&whackaddr, &whackaddrlen) -> fd@16 (in whack_handle() at rcv_whack.c:721) Sep 21 07:16:30.576156: add keyid @east Sep 21 07:16:30.576160: | unreference key: 0x55edd34c26c0 @east cnt 1-- Sep 21 07:16:30.576163: | add pubkey 01 03 bd 6c 96 eb df 78 89 b3 ed 77 0d a1 7f 7b Sep 21 07:16:30.576165: | add pubkey e5 16 c2 c9 e4 7d 92 0a 90 9d 55 43 b4 62 13 03 Sep 21 07:16:30.576167: | add pubkey 85 7a e0 26 7b 54 1f ca 09 93 cf ff 25 c9 02 4c Sep 21 07:16:30.576169: | add pubkey 78 ca 94 e5 3e ac d1 f9 a8 e5 bb 7f cc 20 84 e0 Sep 21 07:16:30.576170: | add pubkey 21 c9 f0 0d c5 44 ba f3 48 64 61 58 f6 0f 63 0d Sep 21 07:16:30.576172: | add pubkey d2 67 1e 59 8b ec f3 50 39 71 fb 39 da 11 64 b6 Sep 21 07:16:30.576174: | add pubkey 62 cd 5f d3 8d 2e c1 50 ed 9c 6e 22 0c 39 a7 ce Sep 21 07:16:30.576176: | add pubkey 62 b5 af 8a 80 0f 2e 4c 05 5c 82 c7 8d 29 02 2e Sep 21 07:16:30.576178: | add pubkey bb 23 5f db f2 9e b5 7d e2 20 70 1a 63 f3 8e 5d Sep 21 07:16:30.576180: | add pubkey ac 47 f0 5c 26 4e b1 d0 42 60 52 4a b0 77 25 ce Sep 21 07:16:30.576182: | add pubkey e0 98 2b 43 f4 c7 59 1a 64 01 83 ea 4e e3 1a 2a Sep 21 07:16:30.576184: | add pubkey 92 b8 55 ab 63 dd 4b 70 47 29 dc e9 b4 60 bf 43 Sep 21 07:16:30.576186: | add pubkey 4d 58 8f 64 73 95 70 ac 35 89 b2 c2 9c d4 62 c0 Sep 21 07:16:30.576188: | add pubkey 5f 56 5f ad 1b e5 dd 49 93 6a f5 23 82 ed d4 e7 Sep 21 07:16:30.576191: | add pubkey d5 f1 55 f2 2d a2 26 a6 36 53 2f 94 fb 99 22 5c Sep 21 07:16:30.576193: | add pubkey 47 cc 6d 80 30 88 96 38 0c f5 f2 ed 37 d0 09 d5 Sep 21 07:16:30.576195: | add pubkey 07 8f 69 ef a9 99 ce 4d 1a 77 9e 39 c4 38 f3 c5 Sep 21 07:16:30.576197: | add pubkey 51 51 48 ef Sep 21 07:16:30.576208: | computed rsa CKAID 61 55 99 73 d3 ac ef 7d 3a 37 0e 3e 82 ad 92 c1 Sep 21 07:16:30.576211: | computed rsa CKAID 8a 82 25 f1 Sep 21 07:16:30.576215: | keyid: *AQO9bJbr3 Sep 21 07:16:30.576217: | n bd 6c 96 eb df 78 89 b3 ed 77 0d a1 7f 7b e5 16 Sep 21 07:16:30.576219: | n c2 c9 e4 7d 92 0a 90 9d 55 43 b4 62 13 03 85 7a Sep 21 07:16:30.576221: | n e0 26 7b 54 1f ca 09 93 cf ff 25 c9 02 4c 78 ca Sep 21 07:16:30.576227: | n 94 e5 3e ac d1 f9 a8 e5 bb 7f cc 20 84 e0 21 c9 Sep 21 07:16:30.576230: | n f0 0d c5 44 ba f3 48 64 61 58 f6 0f 63 0d d2 67 Sep 21 07:16:30.576232: | n 1e 59 8b ec f3 50 39 71 fb 39 da 11 64 b6 62 cd Sep 21 07:16:30.576234: | n 5f d3 8d 2e c1 50 ed 9c 6e 22 0c 39 a7 ce 62 b5 Sep 21 07:16:30.576237: | n af 8a 80 0f 2e 4c 05 5c 82 c7 8d 29 02 2e bb 23 Sep 21 07:16:30.576239: | n 5f db f2 9e b5 7d e2 20 70 1a 63 f3 8e 5d ac 47 Sep 21 07:16:30.576241: | n f0 5c 26 4e b1 d0 42 60 52 4a b0 77 25 ce e0 98 Sep 21 07:16:30.576244: | n 2b 43 f4 c7 59 1a 64 01 83 ea 4e e3 1a 2a 92 b8 Sep 21 07:16:30.576246: | n 55 ab 63 dd 4b 70 47 29 dc e9 b4 60 bf 43 4d 58 Sep 21 07:16:30.576248: | n 8f 64 73 95 70 ac 35 89 b2 c2 9c d4 62 c0 5f 56 Sep 21 07:16:30.576250: | n 5f ad 1b e5 dd 49 93 6a f5 23 82 ed d4 e7 d5 f1 Sep 21 07:16:30.576253: | n 55 f2 2d a2 26 a6 36 53 2f 94 fb 99 22 5c 47 cc Sep 21 07:16:30.576255: | n 6d 80 30 88 96 38 0c f5 f2 ed 37 d0 09 d5 07 8f Sep 21 07:16:30.576257: | n 69 ef a9 99 ce 4d 1a 77 9e 39 c4 38 f3 c5 51 51 Sep 21 07:16:30.576259: | n 48 ef Sep 21 07:16:30.576261: | e 03 Sep 21 07:16:30.576263: | CKAID 61 55 99 73 d3 ac ef 7d 3a 37 0e 3e 82 ad 92 c1 Sep 21 07:16:30.576266: | CKAID 8a 82 25 f1 Sep 21 07:16:30.576274: | close_any(fd@16) (in whack_process() at rcv_whack.c:700) Sep 21 07:16:30.576280: | spent 0.141 milliseconds in whack Sep 21 07:16:30.576307: | accept(whackctlfd, (struct sockaddr *)&whackaddr, &whackaddrlen) -> fd@16 (in whack_handle() at rcv_whack.c:721) Sep 21 07:16:30.576317: | pluto_sd: executing action action: reloading(4), status 0 Sep 21 07:16:30.576321: listening for IKE messages Sep 21 07:16:30.576359: | Inspecting interface lo Sep 21 07:16:30.576365: | found lo with address 127.0.0.1 Sep 21 07:16:30.576367: | Inspecting interface eth0 Sep 21 07:16:30.576372: | found eth0 with address 192.0.2.254 Sep 21 07:16:30.576374: | Inspecting interface eth0 Sep 21 07:16:30.576377: | found eth0 with address 192.0.22.251 Sep 21 07:16:30.576380: | Inspecting interface eth0 Sep 21 07:16:30.576384: | found eth0 with address 192.0.22.254 Sep 21 07:16:30.576386: | Inspecting interface eth0 Sep 21 07:16:30.576390: | found eth0 with address 192.0.2.251 Sep 21 07:16:30.576392: | Inspecting interface eth1 Sep 21 07:16:30.576396: | found eth1 with address 192.1.2.23 Sep 21 07:16:30.576451: | no interfaces to sort Sep 21 07:16:30.576459: | libevent_free: release ptr-libevent@0x55edd355f100 Sep 21 07:16:30.576462: | free_event_entry: release EVENT_NULL-pe@0x55edd355f0c0 Sep 21 07:16:30.576465: | add_fd_read_event_handler: new ethX-pe@0x55edd355f0c0 Sep 21 07:16:30.576469: | libevent_malloc: new ptr-libevent@0x55edd355f100 size 128 Sep 21 07:16:30.576476: | setup callback for interface lo 127.0.0.1:4500 fd 28 Sep 21 07:16:30.576480: | libevent_free: release ptr-libevent@0x55edd355f1f0 Sep 21 07:16:30.576482: | free_event_entry: release EVENT_NULL-pe@0x55edd355f1b0 Sep 21 07:16:30.576485: | add_fd_read_event_handler: new ethX-pe@0x55edd355f1b0 Sep 21 07:16:30.576488: | libevent_malloc: new ptr-libevent@0x55edd355f1f0 size 128 Sep 21 07:16:30.576493: | setup callback for interface lo 127.0.0.1:500 fd 27 Sep 21 07:16:30.576496: | libevent_free: release ptr-libevent@0x55edd355f2e0 Sep 21 07:16:30.576499: | free_event_entry: release EVENT_NULL-pe@0x55edd355f2a0 Sep 21 07:16:30.576501: | add_fd_read_event_handler: new ethX-pe@0x55edd355f2a0 Sep 21 07:16:30.576504: | libevent_malloc: new ptr-libevent@0x55edd355f2e0 size 128 Sep 21 07:16:30.576509: | setup callback for interface eth0 192.0.2.254:4500 fd 26 Sep 21 07:16:30.576512: | libevent_free: release ptr-libevent@0x55edd355f3d0 Sep 21 07:16:30.576515: | free_event_entry: release EVENT_NULL-pe@0x55edd355f390 Sep 21 07:16:30.576517: | add_fd_read_event_handler: new ethX-pe@0x55edd355f390 Sep 21 07:16:30.576520: | libevent_malloc: new ptr-libevent@0x55edd355f3d0 size 128 Sep 21 07:16:30.576525: | setup callback for interface eth0 192.0.2.254:500 fd 25 Sep 21 07:16:30.576532: | libevent_free: release ptr-libevent@0x55edd355fb40 Sep 21 07:16:30.576535: | free_event_entry: release EVENT_NULL-pe@0x55edd355f480 Sep 21 07:16:30.576537: | add_fd_read_event_handler: new ethX-pe@0x55edd3560ed0 Sep 21 07:16:30.576540: | libevent_malloc: new ptr-libevent@0x55edd355fb40 size 128 Sep 21 07:16:30.576545: | setup callback for interface eth0 192.0.22.251:4500 fd 24 Sep 21 07:16:30.576548: | libevent_free: release ptr-libevent@0x55edd355fc30 Sep 21 07:16:30.576551: | free_event_entry: release EVENT_NULL-pe@0x55edd355fbf0 Sep 21 07:16:30.576554: | add_fd_read_event_handler: new ethX-pe@0x55edd355fbf0 Sep 21 07:16:30.576556: | libevent_malloc: new ptr-libevent@0x55edd355fc30 size 128 Sep 21 07:16:30.576561: | setup callback for interface eth0 192.0.22.251:500 fd 23 Sep 21 07:16:30.576565: | libevent_free: release ptr-libevent@0x55edd355fd20 Sep 21 07:16:30.576567: | free_event_entry: release EVENT_NULL-pe@0x55edd355fce0 Sep 21 07:16:30.576569: | add_fd_read_event_handler: new ethX-pe@0x55edd355fce0 Sep 21 07:16:30.576572: | libevent_malloc: new ptr-libevent@0x55edd355fd20 size 128 Sep 21 07:16:30.576577: | setup callback for interface eth0 192.0.22.254:4500 fd 22 Sep 21 07:16:30.576580: | libevent_free: release ptr-libevent@0x55edd355fe10 Sep 21 07:16:30.576583: | free_event_entry: release EVENT_NULL-pe@0x55edd355fdd0 Sep 21 07:16:30.576585: | add_fd_read_event_handler: new ethX-pe@0x55edd355fdd0 Sep 21 07:16:30.576588: | libevent_malloc: new ptr-libevent@0x55edd355fe10 size 128 Sep 21 07:16:30.576593: | setup callback for interface eth0 192.0.22.254:500 fd 21 Sep 21 07:16:30.576597: | libevent_free: release ptr-libevent@0x55edd355ff00 Sep 21 07:16:30.576599: | free_event_entry: release EVENT_NULL-pe@0x55edd355fec0 Sep 21 07:16:30.576602: | add_fd_read_event_handler: new ethX-pe@0x55edd355fec0 Sep 21 07:16:30.576604: | libevent_malloc: new ptr-libevent@0x55edd355ff00 size 128 Sep 21 07:16:30.576609: | setup callback for interface eth0 192.0.2.251:4500 fd 20 Sep 21 07:16:30.576613: | libevent_free: release ptr-libevent@0x55edd355fff0 Sep 21 07:16:30.576615: | free_event_entry: release EVENT_NULL-pe@0x55edd355ffb0 Sep 21 07:16:30.576618: | add_fd_read_event_handler: new ethX-pe@0x55edd355ffb0 Sep 21 07:16:30.576620: | libevent_malloc: new ptr-libevent@0x55edd355fff0 size 128 Sep 21 07:16:30.576625: | setup callback for interface eth0 192.0.2.251:500 fd 19 Sep 21 07:16:30.576628: | libevent_free: release ptr-libevent@0x55edd35600e0 Sep 21 07:16:30.576631: | free_event_entry: release EVENT_NULL-pe@0x55edd35600a0 Sep 21 07:16:30.576633: | add_fd_read_event_handler: new ethX-pe@0x55edd35600a0 Sep 21 07:16:30.576636: | libevent_malloc: new ptr-libevent@0x55edd35600e0 size 128 Sep 21 07:16:30.576641: | setup callback for interface eth1 192.1.2.23:4500 fd 18 Sep 21 07:16:30.576645: | libevent_free: release ptr-libevent@0x55edd35601d0 Sep 21 07:16:30.576647: | free_event_entry: release EVENT_NULL-pe@0x55edd3560190 Sep 21 07:16:30.576650: | add_fd_read_event_handler: new ethX-pe@0x55edd3560190 Sep 21 07:16:30.576652: | libevent_malloc: new ptr-libevent@0x55edd35601d0 size 128 Sep 21 07:16:30.576657: | setup callback for interface eth1 192.1.2.23:500 fd 17 Sep 21 07:16:30.576660: | certs and keys locked by 'free_preshared_secrets' Sep 21 07:16:30.576662: forgetting secrets Sep 21 07:16:30.576671: | certs and keys unlocked by 'free_preshared_secrets' Sep 21 07:16:30.576685: loading secrets from "/etc/ipsec.secrets" Sep 21 07:16:30.576699: | saving Modulus Sep 21 07:16:30.576702: | saving PublicExponent Sep 21 07:16:30.576706: | ignoring PrivateExponent Sep 21 07:16:30.576709: | ignoring Prime1 Sep 21 07:16:30.576712: | ignoring Prime2 Sep 21 07:16:30.576715: | ignoring Exponent1 Sep 21 07:16:30.576718: | ignoring Exponent2 Sep 21 07:16:30.576721: | ignoring Coefficient Sep 21 07:16:30.576724: | ignoring CKAIDNSS Sep 21 07:16:30.576735: | computed rsa CKAID 61 55 99 73 d3 ac ef 7d 3a 37 0e 3e 82 ad 92 c1 Sep 21 07:16:30.576738: | computed rsa CKAID 8a 82 25 f1 Sep 21 07:16:30.576744: loaded private key for keyid: PKK_RSA:AQO9bJbr3 Sep 21 07:16:30.576748: | certs and keys locked by 'process_secret' Sep 21 07:16:30.576751: | certs and keys unlocked by 'process_secret' Sep 21 07:16:30.576756: | pluto_sd: executing action action: ready(5), status 0 Sep 21 07:16:30.576761: | close_any(fd@16) (in whack_process() at rcv_whack.c:700) Sep 21 07:16:30.576766: | spent 0.463 milliseconds in whack Sep 21 07:16:30.576821: | accept(whackctlfd, (struct sockaddr *)&whackaddr, &whackaddrlen) -> fd@16 (in whack_handle() at rcv_whack.c:721) Sep 21 07:16:30.576834: | FOR_EACH_CONNECTION_... in conn_by_name Sep 21 07:16:30.576837: initiating all conns with alias='north-eastnets' Sep 21 07:16:30.576841: | FOR_EACH_CONNECTION_... in foreach_connection_by_alias Sep 21 07:16:30.576846: | start processing: connection "north-eastnets/0x2" (in initiate_a_connection() at initiate.c:186) Sep 21 07:16:30.576849: | connection 'north-eastnets/0x2' +POLICY_UP Sep 21 07:16:30.576852: | dup_any(fd@-1) -> fd@-1 (in initiate_a_connection() at initiate.c:342) Sep 21 07:16:30.576855: | FOR_EACH_STATE_... in find_phase1_state Sep 21 07:16:30.576870: | creating state object #1 at 0x55edd3561ae0 Sep 21 07:16:30.576874: | State DB: adding IKEv2 state #1 in UNDEFINED Sep 21 07:16:30.576882: | pstats #1 ikev2.ike started Sep 21 07:16:30.576885: | Message ID: init #1: msgid=0 lastack=4294967295 nextuse=0 lastrecv=4294967295 lastreplied=0 Sep 21 07:16:30.576889: | parent state #1: UNDEFINED(ignore) => PARENT_I0(ignore) Sep 21 07:16:30.576894: | Message ID: init_ike #1; ike: initiator.sent=0->-1 initiator.recv=0->-1 responder.sent=0->-1 responder.recv=0->-1 wip.initiator=0->-1 wip.responder=0->-1 Sep 21 07:16:30.576900: | suspend processing: connection "north-eastnets/0x2" (in ikev2_parent_outI1() at ikev2_parent.c:535) Sep 21 07:16:30.576906: | start processing: state #1 connection "north-eastnets/0x2" from 192.1.3.33:500 (in ikev2_parent_outI1() at ikev2_parent.c:535) Sep 21 07:16:30.576909: | dup_any(fd@-1) -> fd@-1 (in ikev2_parent_outI1() at ikev2_parent.c:551) Sep 21 07:16:30.576913: | Queuing pending IPsec SA negotiating with 192.1.3.33 "north-eastnets/0x2" IKE SA #1 "north-eastnets/0x2" Sep 21 07:16:30.576917: "north-eastnets/0x2" #1: initiating v2 parent SA Sep 21 07:16:30.576924: | constructing local IKE proposals for north-eastnets/0x2 (IKE SA initiator selecting KE) Sep 21 07:16:30.576927: | converting ike_info AES_CBC_256-HMAC_SHA2_256-MODP2048 to ikev2 ... Sep 21 07:16:30.576934: | ... ikev2_proposal: 1:IKE:ENCR=AES_CBC_256;PRF=HMAC_SHA2_256;INTEG=HMAC_SHA2_256_128;DH=MODP2048 Sep 21 07:16:30.576939: "north-eastnets/0x2": constructed local IKE proposals for north-eastnets/0x2 (IKE SA initiator selecting KE): 1:IKE:ENCR=AES_CBC_256;PRF=HMAC_SHA2_256;INTEG=HMAC_SHA2_256_128;DH=MODP2048 Sep 21 07:16:30.576946: | adding ikev2_outI1 KE work-order 1 for state #1 Sep 21 07:16:30.576950: | event_schedule: new EVENT_CRYPTO_TIMEOUT-pe@0x55edd3560f50 Sep 21 07:16:30.576953: | inserting event EVENT_CRYPTO_TIMEOUT, timeout in 60 seconds for #1 Sep 21 07:16:30.576957: | libevent_malloc: new ptr-libevent@0x55edd3560f90 size 128 Sep 21 07:16:30.576968: | #1 spent 0.122 milliseconds in ikev2_parent_outI1() Sep 21 07:16:30.576971: | processing: RESET whack log_fd (was fd@16) (in ikev2_parent_outI1() at ikev2_parent.c:610) Sep 21 07:16:30.576976: | RESET processing: state #1 connection "north-eastnets/0x2" from 192.1.3.33:500 (in ikev2_parent_outI1() at ikev2_parent.c:610) Sep 21 07:16:30.576979: | RESET processing: connection "north-eastnets/0x2" (in ikev2_parent_outI1() at ikev2_parent.c:610) Sep 21 07:16:30.576982: | processing: STOP connection NULL (in initiate_a_connection() at initiate.c:349) Sep 21 07:16:30.576986: | start processing: connection "north-eastnets/0x1" (in initiate_a_connection() at initiate.c:186) Sep 21 07:16:30.576989: | connection 'north-eastnets/0x1' +POLICY_UP Sep 21 07:16:30.576992: | dup_any(fd@-1) -> fd@-1 (in initiate_a_connection() at initiate.c:342) Sep 21 07:16:30.576994: | FOR_EACH_STATE_... in find_phase1_state Sep 21 07:16:30.577003: | Queuing pending IPsec SA negotiating with 192.1.3.33 "north-eastnets/0x1" IKE SA #1 "north-eastnets/0x2" Sep 21 07:16:30.577008: | stop processing: connection "north-eastnets/0x1" (in initiate_a_connection() at initiate.c:349) Sep 21 07:16:30.577014: | close_any(fd@16) (in whack_process() at rcv_whack.c:700) Sep 21 07:16:30.577018: | spent 0.2 milliseconds in whack Sep 21 07:16:30.577631: | processing signal PLUTO_SIGCHLD Sep 21 07:16:30.577644: | waitpid returned pid 12207 (exited with status 0) Sep 21 07:16:30.577648: | reaped addconn helper child (status 0) Sep 21 07:16:30.577652: | waitpid returned ECHILD (no child processes left) Sep 21 07:16:30.577657: | spent 0.0168 milliseconds in signal handler PLUTO_SIGCHLD Sep 21 07:16:30.579125: | crypto helper 2 resuming Sep 21 07:16:30.579138: | crypto helper 2 starting work-order 1 for state #1 Sep 21 07:16:30.579143: | crypto helper 2 doing build KE and nonce (ikev2_outI1 KE); request ID 1 Sep 21 07:16:30.580040: | crypto helper 2 finished build KE and nonce (ikev2_outI1 KE); request ID 1 time elapsed 0.000897 seconds Sep 21 07:16:30.580051: | (#1) spent 0.9 milliseconds in crypto helper computing work-order 1: ikev2_outI1 KE (pcr) Sep 21 07:16:30.580053: | crypto helper 2 sending results from work-order 1 for state #1 to event queue Sep 21 07:16:30.580055: | scheduling resume sending helper answer for #1 Sep 21 07:16:30.580058: | libevent_malloc: new ptr-libevent@0x7fc0c8006900 size 128 Sep 21 07:16:30.580067: | crypto helper 2 waiting (nothing to do) Sep 21 07:16:30.580075: | processing resume sending helper answer for #1 Sep 21 07:16:30.580085: | start processing: state #1 connection "north-eastnets/0x2" from 192.1.3.33:500 (in resume_handler() at server.c:797) Sep 21 07:16:30.580089: | crypto helper 2 replies to request ID 1 Sep 21 07:16:30.580091: | calling continuation function 0x55edd1af6630 Sep 21 07:16:30.580093: | ikev2_parent_outI1_continue for #1 Sep 21 07:16:30.580123: | **emit ISAKMP Message: Sep 21 07:16:30.580126: | initiator cookie: Sep 21 07:16:30.580128: | 7b 62 d8 c9 e0 c5 68 51 Sep 21 07:16:30.580130: | responder cookie: Sep 21 07:16:30.580132: | 00 00 00 00 00 00 00 00 Sep 21 07:16:30.580135: | next payload type: ISAKMP_NEXT_NONE (0x0) Sep 21 07:16:30.580138: | ISAKMP version: IKEv2 version 2.0 (rfc4306/rfc5996) (0x20) Sep 21 07:16:30.580140: | exchange type: ISAKMP_v2_IKE_SA_INIT (0x22) Sep 21 07:16:30.580143: | flags: ISAKMP_FLAG_v2_IKE_INIT (0x8) Sep 21 07:16:30.580145: | Message ID: 0 (0x0) Sep 21 07:16:30.580147: | next payload chain: saving message location 'ISAKMP Message'.'next payload type' Sep 21 07:16:30.580155: | using existing local IKE proposals for connection north-eastnets/0x2 (IKE SA initiator emitting local proposals): 1:IKE:ENCR=AES_CBC_256;PRF=HMAC_SHA2_256;INTEG=HMAC_SHA2_256_128;DH=MODP2048 Sep 21 07:16:30.580157: | Emitting ikev2_proposals ... Sep 21 07:16:30.580160: | ***emit IKEv2 Security Association Payload: Sep 21 07:16:30.580163: | next payload type: ISAKMP_NEXT_v2NONE (0x0) Sep 21 07:16:30.580165: | flags: none (0x0) Sep 21 07:16:30.580168: | next payload chain: setting previous 'ISAKMP Message'.'next payload type' to current IKEv2 Security Association Payload (33:ISAKMP_NEXT_v2SA) Sep 21 07:16:30.580170: | next payload chain: saving location 'IKEv2 Security Association Payload'.'next payload type' in 'reply packet' Sep 21 07:16:30.580173: | ****emit IKEv2 Proposal Substructure Payload: Sep 21 07:16:30.580176: | last proposal: v2_PROPOSAL_LAST (0x0) Sep 21 07:16:30.580178: | prop #: 1 (0x1) Sep 21 07:16:30.580180: | proto ID: IKEv2_SEC_PROTO_IKE (0x1) Sep 21 07:16:30.580182: | spi size: 0 (0x0) Sep 21 07:16:30.580184: | # transforms: 4 (0x4) Sep 21 07:16:30.580187: | last substructure: saving location 'IKEv2 Security Association Payload'.'IKEv2 Proposal Substructure Payload'.'last proposal' Sep 21 07:16:30.580189: | *****emit IKEv2 Transform Substructure Payload: Sep 21 07:16:30.580191: | last transform: v2_TRANSFORM_NON_LAST (0x3) Sep 21 07:16:30.580197: | IKEv2 transform type: TRANS_TYPE_ENCR (0x1) Sep 21 07:16:30.580199: | IKEv2 transform ID: AES_CBC (0xc) Sep 21 07:16:30.580202: | last substructure: saving location 'IKEv2 Proposal Substructure Payload'.'IKEv2 Transform Substructure Payload'.'last transform' Sep 21 07:16:30.580204: | ******emit IKEv2 Attribute Substructure Payload: Sep 21 07:16:30.580207: | af+type: AF+IKEv2_KEY_LENGTH (0x800e) Sep 21 07:16:30.580209: | length/value: 256 (0x100) Sep 21 07:16:30.580211: | emitting length of IKEv2 Transform Substructure Payload: 12 Sep 21 07:16:30.580213: | *****emit IKEv2 Transform Substructure Payload: Sep 21 07:16:30.580215: | last transform: v2_TRANSFORM_NON_LAST (0x3) Sep 21 07:16:30.580218: | IKEv2 transform type: TRANS_TYPE_PRF (0x2) Sep 21 07:16:30.580220: | IKEv2 transform ID: PRF_HMAC_SHA2_256 (0x5) Sep 21 07:16:30.580223: | last substructure: checking 'IKEv2 Proposal Substructure Payload'.'IKEv2 Transform Substructure Payload'.'last transform' is v2_TRANSFORM_NON_LAST (0x3) Sep 21 07:16:30.580225: | last substructure: saving location 'IKEv2 Proposal Substructure Payload'.'IKEv2 Transform Substructure Payload'.'last transform' Sep 21 07:16:30.580228: | emitting length of IKEv2 Transform Substructure Payload: 8 Sep 21 07:16:30.580230: | *****emit IKEv2 Transform Substructure Payload: Sep 21 07:16:30.580232: | last transform: v2_TRANSFORM_NON_LAST (0x3) Sep 21 07:16:30.580234: | IKEv2 transform type: TRANS_TYPE_INTEG (0x3) Sep 21 07:16:30.580236: | IKEv2 transform ID: AUTH_HMAC_SHA2_256_128 (0xc) Sep 21 07:16:30.580239: | last substructure: checking 'IKEv2 Proposal Substructure Payload'.'IKEv2 Transform Substructure Payload'.'last transform' is v2_TRANSFORM_NON_LAST (0x3) Sep 21 07:16:30.580242: | last substructure: saving location 'IKEv2 Proposal Substructure Payload'.'IKEv2 Transform Substructure Payload'.'last transform' Sep 21 07:16:30.580244: | emitting length of IKEv2 Transform Substructure Payload: 8 Sep 21 07:16:30.580245: | *****emit IKEv2 Transform Substructure Payload: Sep 21 07:16:30.580247: | last transform: v2_TRANSFORM_LAST (0x0) Sep 21 07:16:30.580248: | IKEv2 transform type: TRANS_TYPE_DH (0x4) Sep 21 07:16:30.580250: | IKEv2 transform ID: OAKLEY_GROUP_MODP2048 (0xe) Sep 21 07:16:30.580252: | last substructure: checking 'IKEv2 Proposal Substructure Payload'.'IKEv2 Transform Substructure Payload'.'last transform' is v2_TRANSFORM_NON_LAST (0x3) Sep 21 07:16:30.580253: | last substructure: saving location 'IKEv2 Proposal Substructure Payload'.'IKEv2 Transform Substructure Payload'.'last transform' Sep 21 07:16:30.580255: | emitting length of IKEv2 Transform Substructure Payload: 8 Sep 21 07:16:30.580256: | emitting length of IKEv2 Proposal Substructure Payload: 44 Sep 21 07:16:30.580258: | last substructure: checking 'IKEv2 Proposal Substructure Payload'.'IKEv2 Transform Substructure Payload'.'last transform' is 0 Sep 21 07:16:30.580260: | emitting length of IKEv2 Security Association Payload: 48 Sep 21 07:16:30.580261: | last substructure: checking 'IKEv2 Security Association Payload'.'IKEv2 Proposal Substructure Payload'.'last proposal' is 0 Sep 21 07:16:30.580263: | ***emit IKEv2 Key Exchange Payload: Sep 21 07:16:30.580265: | next payload type: ISAKMP_NEXT_v2NONE (0x0) Sep 21 07:16:30.580266: | flags: none (0x0) Sep 21 07:16:30.580268: | DH group: OAKLEY_GROUP_MODP2048 (0xe) Sep 21 07:16:30.580270: | next payload chain: setting previous 'IKEv2 Security Association Payload'.'next payload type' to current IKEv2 Key Exchange Payload (34:ISAKMP_NEXT_v2KE) Sep 21 07:16:30.580272: | next payload chain: saving location 'IKEv2 Key Exchange Payload'.'next payload type' in 'reply packet' Sep 21 07:16:30.580274: | emitting 256 raw bytes of ikev2 g^x into IKEv2 Key Exchange Payload Sep 21 07:16:30.580275: | ikev2 g^x 54 19 a8 6c 38 18 39 f6 32 f7 3e 72 93 75 f9 9e Sep 21 07:16:30.580277: | ikev2 g^x 97 79 f9 89 3b 53 a3 5c 3b b8 c1 52 0a 12 12 6e Sep 21 07:16:30.580278: | ikev2 g^x b0 86 5d a0 17 1b e7 a7 b3 d4 1a ed 3d a7 35 79 Sep 21 07:16:30.580281: | ikev2 g^x dc 54 c0 42 33 23 f4 34 2a ae b7 40 61 31 29 07 Sep 21 07:16:30.580283: | ikev2 g^x ee af c4 c6 ca 47 70 a7 00 af 3a 73 08 c3 b0 fb Sep 21 07:16:30.580284: | ikev2 g^x 06 f6 97 1e 35 52 fa c0 53 33 b3 7c ca d5 51 14 Sep 21 07:16:30.580286: | ikev2 g^x 23 e1 30 c9 1a af f5 68 57 ff aa 77 f5 ed 86 2b Sep 21 07:16:30.580287: | ikev2 g^x e7 81 43 96 f0 6d 2a 2c b2 a0 01 e8 a2 45 d2 5c Sep 21 07:16:30.580288: | ikev2 g^x c0 d1 a3 a9 55 bf ec 6a 12 95 99 6d 6a 67 d4 19 Sep 21 07:16:30.580290: | ikev2 g^x 9b c8 f5 fd 91 12 79 80 93 d7 f9 54 d5 7d 45 92 Sep 21 07:16:30.580291: | ikev2 g^x c8 da e0 3c 62 2b 06 15 62 4c aa 05 b4 af 90 26 Sep 21 07:16:30.580293: | ikev2 g^x 18 02 e5 67 91 bf 5a cc c6 0d f0 44 28 f8 b3 1b Sep 21 07:16:30.580294: | ikev2 g^x 99 a5 42 05 b1 aa 42 f6 49 30 b9 c6 a8 12 2d e9 Sep 21 07:16:30.580295: | ikev2 g^x da 0e c7 86 f8 ee a6 f6 24 98 fc 27 47 9a 06 4d Sep 21 07:16:30.580297: | ikev2 g^x 34 68 06 17 c0 3c 94 bc f4 fe 49 bb 5f 81 7e b9 Sep 21 07:16:30.580298: | ikev2 g^x 65 bc ad f0 b3 28 1c 33 bd 83 a3 f9 b2 96 14 cc Sep 21 07:16:30.580300: | emitting length of IKEv2 Key Exchange Payload: 264 Sep 21 07:16:30.580301: | ***emit IKEv2 Nonce Payload: Sep 21 07:16:30.580303: | next payload type: ISAKMP_NEXT_v2N (0x29) Sep 21 07:16:30.580304: | flags: none (0x0) Sep 21 07:16:30.580306: | next payload chain: ignoring supplied 'IKEv2 Nonce Payload'.'next payload type' value 41:ISAKMP_NEXT_v2N Sep 21 07:16:30.580308: | next payload chain: setting previous 'IKEv2 Key Exchange Payload'.'next payload type' to current IKEv2 Nonce Payload (40:ISAKMP_NEXT_v2Ni) Sep 21 07:16:30.580310: | next payload chain: saving location 'IKEv2 Nonce Payload'.'next payload type' in 'reply packet' Sep 21 07:16:30.580311: | emitting 32 raw bytes of IKEv2 nonce into IKEv2 Nonce Payload Sep 21 07:16:30.580313: | IKEv2 nonce d2 95 24 5f 30 57 d8 23 7c 0d ae 5f 2e f6 13 45 Sep 21 07:16:30.580314: | IKEv2 nonce 55 a8 da 55 87 18 f9 71 c1 17 f4 6c 18 34 4a b3 Sep 21 07:16:30.580316: | emitting length of IKEv2 Nonce Payload: 36 Sep 21 07:16:30.580317: | Adding a v2N Payload Sep 21 07:16:30.580319: | ***emit IKEv2 Notify Payload: Sep 21 07:16:30.580320: | next payload type: ISAKMP_NEXT_v2NONE (0x0) Sep 21 07:16:30.580322: | flags: none (0x0) Sep 21 07:16:30.580324: | Protocol ID: PROTO_v2_RESERVED (0x0) Sep 21 07:16:30.580325: | SPI size: 0 (0x0) Sep 21 07:16:30.580327: | Notify Message Type: v2N_IKEV2_FRAGMENTATION_SUPPORTED (0x402e) Sep 21 07:16:30.580329: | next payload chain: setting previous 'IKEv2 Nonce Payload'.'next payload type' to current IKEv2 Notify Payload (41:ISAKMP_NEXT_v2N) Sep 21 07:16:30.580330: | next payload chain: saving location 'IKEv2 Notify Payload'.'next payload type' in 'reply packet' Sep 21 07:16:30.580332: | emitting length of IKEv2 Notify Payload: 8 Sep 21 07:16:30.580334: | NAT-Traversal support [enabled] add v2N payloads. Sep 21 07:16:30.580336: | natd_hash: rcookie is zero Sep 21 07:16:30.580344: | natd_hash: hasher=0x55edd1bcc7a0(20) Sep 21 07:16:30.580346: | natd_hash: icookie= 7b 62 d8 c9 e0 c5 68 51 Sep 21 07:16:30.580347: | natd_hash: rcookie= 00 00 00 00 00 00 00 00 Sep 21 07:16:30.580349: | natd_hash: ip= c0 01 02 17 Sep 21 07:16:30.580350: | natd_hash: port= 01 f4 Sep 21 07:16:30.580351: | natd_hash: hash= 03 84 f4 92 ef b2 e7 23 9b 7e 52 93 57 ef f7 39 Sep 21 07:16:30.580353: | natd_hash: hash= 61 5d 98 0a Sep 21 07:16:30.580354: | Adding a v2N Payload Sep 21 07:16:30.580356: | ***emit IKEv2 Notify Payload: Sep 21 07:16:30.580357: | next payload type: ISAKMP_NEXT_v2NONE (0x0) Sep 21 07:16:30.580359: | flags: none (0x0) Sep 21 07:16:30.580360: | Protocol ID: PROTO_v2_RESERVED (0x0) Sep 21 07:16:30.580361: | SPI size: 0 (0x0) Sep 21 07:16:30.580363: | Notify Message Type: v2N_NAT_DETECTION_SOURCE_IP (0x4004) Sep 21 07:16:30.580365: | next payload chain: setting previous 'IKEv2 Notify Payload'.'next payload type' to current IKEv2 Notify Payload (41:ISAKMP_NEXT_v2N) Sep 21 07:16:30.580369: | next payload chain: saving location 'IKEv2 Notify Payload'.'next payload type' in 'reply packet' Sep 21 07:16:30.580371: | emitting 20 raw bytes of Notify data into IKEv2 Notify Payload Sep 21 07:16:30.580372: | Notify data 03 84 f4 92 ef b2 e7 23 9b 7e 52 93 57 ef f7 39 Sep 21 07:16:30.580374: | Notify data 61 5d 98 0a Sep 21 07:16:30.580375: | emitting length of IKEv2 Notify Payload: 28 Sep 21 07:16:30.580376: | natd_hash: rcookie is zero Sep 21 07:16:30.580380: | natd_hash: hasher=0x55edd1bcc7a0(20) Sep 21 07:16:30.580381: | natd_hash: icookie= 7b 62 d8 c9 e0 c5 68 51 Sep 21 07:16:30.580383: | natd_hash: rcookie= 00 00 00 00 00 00 00 00 Sep 21 07:16:30.580384: | natd_hash: ip= c0 01 03 21 Sep 21 07:16:30.580386: | natd_hash: port= 01 f4 Sep 21 07:16:30.580389: | natd_hash: hash= d7 27 e1 f7 e4 d6 3e c8 5f 91 e3 a0 d1 61 d6 62 Sep 21 07:16:30.580391: | natd_hash: hash= 3e 1e a7 e4 Sep 21 07:16:30.580392: | Adding a v2N Payload Sep 21 07:16:30.580394: | ***emit IKEv2 Notify Payload: Sep 21 07:16:30.580396: | next payload type: ISAKMP_NEXT_v2NONE (0x0) Sep 21 07:16:30.580399: | flags: none (0x0) Sep 21 07:16:30.580401: | Protocol ID: PROTO_v2_RESERVED (0x0) Sep 21 07:16:30.580403: | SPI size: 0 (0x0) Sep 21 07:16:30.580405: | Notify Message Type: v2N_NAT_DETECTION_DESTINATION_IP (0x4005) Sep 21 07:16:30.580408: | next payload chain: setting previous 'IKEv2 Notify Payload'.'next payload type' to current IKEv2 Notify Payload (41:ISAKMP_NEXT_v2N) Sep 21 07:16:30.580410: | next payload chain: saving location 'IKEv2 Notify Payload'.'next payload type' in 'reply packet' Sep 21 07:16:30.580413: | emitting 20 raw bytes of Notify data into IKEv2 Notify Payload Sep 21 07:16:30.580415: | Notify data d7 27 e1 f7 e4 d6 3e c8 5f 91 e3 a0 d1 61 d6 62 Sep 21 07:16:30.580417: | Notify data 3e 1e a7 e4 Sep 21 07:16:30.580419: | emitting length of IKEv2 Notify Payload: 28 Sep 21 07:16:30.580422: | emitting length of ISAKMP Message: 440 Sep 21 07:16:30.580428: | stop processing: state #1 connection "north-eastnets/0x2" from 192.1.3.33:500 (in ikev2_parent_outI1_common() at ikev2_parent.c:817) Sep 21 07:16:30.580439: | start processing: state #1 connection "north-eastnets/0x2" from 192.1.3.33:500 (in complete_v2_state_transition() at ikev2.c:3376) Sep 21 07:16:30.580443: | #1 complete_v2_state_transition() PARENT_I0->PARENT_I1 with status STF_OK Sep 21 07:16:30.580446: | IKEv2: transition from state STATE_PARENT_I0 to state STATE_PARENT_I1 Sep 21 07:16:30.580449: | parent state #1: PARENT_I0(ignore) => PARENT_I1(half-open IKE SA) Sep 21 07:16:30.580452: | Message ID: updating counters for #1 to 4294967295 after switching state Sep 21 07:16:30.580455: | Message ID: IKE #1 skipping update_recv as MD is fake Sep 21 07:16:30.580460: | Message ID: sent #1 request 0; ike: initiator.sent=-1->0 initiator.recv=-1 responder.sent=-1 responder.recv=-1 wip.initiator=-1->0 wip.responder=-1 Sep 21 07:16:30.580464: "north-eastnets/0x2" #1: STATE_PARENT_I1: sent v2I1, expected v2R1 Sep 21 07:16:30.580469: | sending V2 reply packet to 192.1.3.33:500 (from 192.1.2.23:500) Sep 21 07:16:30.580478: | sending 440 bytes for STATE_PARENT_I0 through eth1 from 192.1.2.23:500 to 192.1.3.33:500 (using #1) Sep 21 07:16:30.580481: | 7b 62 d8 c9 e0 c5 68 51 00 00 00 00 00 00 00 00 Sep 21 07:16:30.580483: | 21 20 22 08 00 00 00 00 00 00 01 b8 22 00 00 30 Sep 21 07:16:30.580485: | 00 00 00 2c 01 01 00 04 03 00 00 0c 01 00 00 0c Sep 21 07:16:30.580488: | 80 0e 01 00 03 00 00 08 02 00 00 05 03 00 00 08 Sep 21 07:16:30.580490: | 03 00 00 0c 00 00 00 08 04 00 00 0e 28 00 01 08 Sep 21 07:16:30.580492: | 00 0e 00 00 54 19 a8 6c 38 18 39 f6 32 f7 3e 72 Sep 21 07:16:30.580494: | 93 75 f9 9e 97 79 f9 89 3b 53 a3 5c 3b b8 c1 52 Sep 21 07:16:30.580497: | 0a 12 12 6e b0 86 5d a0 17 1b e7 a7 b3 d4 1a ed Sep 21 07:16:30.580499: | 3d a7 35 79 dc 54 c0 42 33 23 f4 34 2a ae b7 40 Sep 21 07:16:30.580501: | 61 31 29 07 ee af c4 c6 ca 47 70 a7 00 af 3a 73 Sep 21 07:16:30.580505: | 08 c3 b0 fb 06 f6 97 1e 35 52 fa c0 53 33 b3 7c Sep 21 07:16:30.580508: | ca d5 51 14 23 e1 30 c9 1a af f5 68 57 ff aa 77 Sep 21 07:16:30.580510: | f5 ed 86 2b e7 81 43 96 f0 6d 2a 2c b2 a0 01 e8 Sep 21 07:16:30.580512: | a2 45 d2 5c c0 d1 a3 a9 55 bf ec 6a 12 95 99 6d Sep 21 07:16:30.580514: | 6a 67 d4 19 9b c8 f5 fd 91 12 79 80 93 d7 f9 54 Sep 21 07:16:30.580516: | d5 7d 45 92 c8 da e0 3c 62 2b 06 15 62 4c aa 05 Sep 21 07:16:30.580518: | b4 af 90 26 18 02 e5 67 91 bf 5a cc c6 0d f0 44 Sep 21 07:16:30.580521: | 28 f8 b3 1b 99 a5 42 05 b1 aa 42 f6 49 30 b9 c6 Sep 21 07:16:30.580523: | a8 12 2d e9 da 0e c7 86 f8 ee a6 f6 24 98 fc 27 Sep 21 07:16:30.580525: | 47 9a 06 4d 34 68 06 17 c0 3c 94 bc f4 fe 49 bb Sep 21 07:16:30.580527: | 5f 81 7e b9 65 bc ad f0 b3 28 1c 33 bd 83 a3 f9 Sep 21 07:16:30.580529: | b2 96 14 cc 29 00 00 24 d2 95 24 5f 30 57 d8 23 Sep 21 07:16:30.580532: | 7c 0d ae 5f 2e f6 13 45 55 a8 da 55 87 18 f9 71 Sep 21 07:16:30.580534: | c1 17 f4 6c 18 34 4a b3 29 00 00 08 00 00 40 2e Sep 21 07:16:30.580536: | 29 00 00 1c 00 00 40 04 03 84 f4 92 ef b2 e7 23 Sep 21 07:16:30.580538: | 9b 7e 52 93 57 ef f7 39 61 5d 98 0a 00 00 00 1c Sep 21 07:16:30.580540: | 00 00 40 05 d7 27 e1 f7 e4 d6 3e c8 5f 91 e3 a0 Sep 21 07:16:30.580543: | d1 61 d6 62 3e 1e a7 e4 Sep 21 07:16:30.580629: | state #1 requesting EVENT_CRYPTO_TIMEOUT to be deleted Sep 21 07:16:30.580634: | libevent_free: release ptr-libevent@0x55edd3560f90 Sep 21 07:16:30.580636: | free_event_entry: release EVENT_CRYPTO_TIMEOUT-pe@0x55edd3560f50 Sep 21 07:16:30.580638: | success_v2_state_transition scheduling EVENT_RETRANSMIT of c->r_interval=50ms Sep 21 07:16:30.580641: | event_schedule: new EVENT_RETRANSMIT-pe@0x55edd3560f50 Sep 21 07:16:30.580643: | inserting event EVENT_RETRANSMIT, timeout in 0.05 seconds for #1 Sep 21 07:16:30.580645: | libevent_malloc: new ptr-libevent@0x55edd3560f90 size 128 Sep 21 07:16:30.580648: | #1 STATE_PARENT_I1: retransmits: first event in 0.05 seconds; timeout in 60 seconds; limit of 12 retransmits; current time is 48836.948905 Sep 21 07:16:30.580651: | resume sending helper answer for #1 suppresed complete_v2_state_transition() and stole MD Sep 21 07:16:30.580655: | #1 spent 0.509 milliseconds in resume sending helper answer Sep 21 07:16:30.580658: | stop processing: state #1 connection "north-eastnets/0x2" from 192.1.3.33:500 (in resume_handler() at server.c:833) Sep 21 07:16:30.580660: | libevent_free: release ptr-libevent@0x7fc0c8006900 Sep 21 07:16:30.612171: | accept(whackctlfd, (struct sockaddr *)&whackaddr, &whackaddrlen) -> fd@16 (in whack_handle() at rcv_whack.c:721) Sep 21 07:16:30.612375: | FOR_EACH_CONNECTION_... in show_connections_status Sep 21 07:16:30.612378: | FOR_EACH_CONNECTION_... in show_connections_status Sep 21 07:16:30.612499: | FOR_EACH_STATE_... in show_states_status (sort_states) Sep 21 07:16:30.612504: | FOR_EACH_STATE_... in sort_states Sep 21 07:16:30.612524: | close_any(fd@16) (in whack_process() at rcv_whack.c:700) Sep 21 07:16:30.612532: | spent 0.38 milliseconds in whack Sep 21 07:16:30.631605: | timer_event_cb: processing event@0x55edd3560f50 Sep 21 07:16:30.631619: | handling event EVENT_RETRANSMIT for parent state #1 Sep 21 07:16:30.631627: | start processing: state #1 connection "north-eastnets/0x2" from 192.1.3.33:500 (in timer_event_cb() at timer.c:250) Sep 21 07:16:30.631630: | IKEv2 retransmit event Sep 21 07:16:30.631635: | [RE]START processing: state #1 connection "north-eastnets/0x2" from 192.1.3.33:500 (in retransmit_v2_msg() at retry.c:144) Sep 21 07:16:30.631640: | handling event EVENT_RETRANSMIT for 192.1.3.33 "north-eastnets/0x2" #1 attempt 2 of 0 Sep 21 07:16:30.631644: | and parent for 192.1.3.33 "north-eastnets/0x2" #1 keying attempt 1 of 0; retransmit 1 Sep 21 07:16:30.631650: | retransmits: current time 48836.999911; retransmit count 0 exceeds limit? NO; deltatime 0.05 exceeds limit? NO; monotime 0.051006 exceeds limit? NO Sep 21 07:16:30.631654: | event_schedule: new EVENT_RETRANSMIT-pe@0x7fc0c8002b20 Sep 21 07:16:30.631662: | inserting event EVENT_RETRANSMIT, timeout in 0.05 seconds for #1 Sep 21 07:16:30.631666: | libevent_malloc: new ptr-libevent@0x7fc0c8006900 size 128 Sep 21 07:16:30.631670: "north-eastnets/0x2" #1: STATE_PARENT_I1: retransmission; will wait 0.05 seconds for response Sep 21 07:16:30.631677: | sending 440 bytes for EVENT_RETRANSMIT through eth1 from 192.1.2.23:500 to 192.1.3.33:500 (using #1) Sep 21 07:16:30.631680: | 7b 62 d8 c9 e0 c5 68 51 00 00 00 00 00 00 00 00 Sep 21 07:16:30.631682: | 21 20 22 08 00 00 00 00 00 00 01 b8 22 00 00 30 Sep 21 07:16:30.631684: | 00 00 00 2c 01 01 00 04 03 00 00 0c 01 00 00 0c Sep 21 07:16:30.631687: | 80 0e 01 00 03 00 00 08 02 00 00 05 03 00 00 08 Sep 21 07:16:30.631689: | 03 00 00 0c 00 00 00 08 04 00 00 0e 28 00 01 08 Sep 21 07:16:30.631691: | 00 0e 00 00 54 19 a8 6c 38 18 39 f6 32 f7 3e 72 Sep 21 07:16:30.631693: | 93 75 f9 9e 97 79 f9 89 3b 53 a3 5c 3b b8 c1 52 Sep 21 07:16:30.631695: | 0a 12 12 6e b0 86 5d a0 17 1b e7 a7 b3 d4 1a ed Sep 21 07:16:30.631698: | 3d a7 35 79 dc 54 c0 42 33 23 f4 34 2a ae b7 40 Sep 21 07:16:30.631700: | 61 31 29 07 ee af c4 c6 ca 47 70 a7 00 af 3a 73 Sep 21 07:16:30.631702: | 08 c3 b0 fb 06 f6 97 1e 35 52 fa c0 53 33 b3 7c Sep 21 07:16:30.631704: | ca d5 51 14 23 e1 30 c9 1a af f5 68 57 ff aa 77 Sep 21 07:16:30.631707: | f5 ed 86 2b e7 81 43 96 f0 6d 2a 2c b2 a0 01 e8 Sep 21 07:16:30.631709: | a2 45 d2 5c c0 d1 a3 a9 55 bf ec 6a 12 95 99 6d Sep 21 07:16:30.631711: | 6a 67 d4 19 9b c8 f5 fd 91 12 79 80 93 d7 f9 54 Sep 21 07:16:30.631713: | d5 7d 45 92 c8 da e0 3c 62 2b 06 15 62 4c aa 05 Sep 21 07:16:30.631715: | b4 af 90 26 18 02 e5 67 91 bf 5a cc c6 0d f0 44 Sep 21 07:16:30.631718: | 28 f8 b3 1b 99 a5 42 05 b1 aa 42 f6 49 30 b9 c6 Sep 21 07:16:30.631720: | a8 12 2d e9 da 0e c7 86 f8 ee a6 f6 24 98 fc 27 Sep 21 07:16:30.631722: | 47 9a 06 4d 34 68 06 17 c0 3c 94 bc f4 fe 49 bb Sep 21 07:16:30.631725: | 5f 81 7e b9 65 bc ad f0 b3 28 1c 33 bd 83 a3 f9 Sep 21 07:16:30.631727: | b2 96 14 cc 29 00 00 24 d2 95 24 5f 30 57 d8 23 Sep 21 07:16:30.631729: | 7c 0d ae 5f 2e f6 13 45 55 a8 da 55 87 18 f9 71 Sep 21 07:16:30.631731: | c1 17 f4 6c 18 34 4a b3 29 00 00 08 00 00 40 2e Sep 21 07:16:30.631733: | 29 00 00 1c 00 00 40 04 03 84 f4 92 ef b2 e7 23 Sep 21 07:16:30.631736: | 9b 7e 52 93 57 ef f7 39 61 5d 98 0a 00 00 00 1c Sep 21 07:16:30.631738: | 00 00 40 05 d7 27 e1 f7 e4 d6 3e c8 5f 91 e3 a0 Sep 21 07:16:30.631740: | d1 61 d6 62 3e 1e a7 e4 Sep 21 07:16:30.631778: | libevent_free: release ptr-libevent@0x55edd3560f90 Sep 21 07:16:30.631782: | free_event_entry: release EVENT_RETRANSMIT-pe@0x55edd3560f50 Sep 21 07:16:30.631795: | #1 spent 0.169 milliseconds in timer_event_cb() EVENT_RETRANSMIT Sep 21 07:16:30.631800: | stop processing: state #1 connection "north-eastnets/0x2" from 192.1.3.33:500 (in timer_event_cb() at timer.c:557) Sep 21 07:16:30.681872: | timer_event_cb: processing event@0x7fc0c8002b20 Sep 21 07:16:30.681885: | handling event EVENT_RETRANSMIT for parent state #1 Sep 21 07:16:30.681894: | start processing: state #1 connection "north-eastnets/0x2" from 192.1.3.33:500 (in timer_event_cb() at timer.c:250) Sep 21 07:16:30.681897: | IKEv2 retransmit event Sep 21 07:16:30.681902: | [RE]START processing: state #1 connection "north-eastnets/0x2" from 192.1.3.33:500 (in retransmit_v2_msg() at retry.c:144) Sep 21 07:16:30.681907: | handling event EVENT_RETRANSMIT for 192.1.3.33 "north-eastnets/0x2" #1 attempt 2 of 0 Sep 21 07:16:30.681911: | and parent for 192.1.3.33 "north-eastnets/0x2" #1 keying attempt 1 of 0; retransmit 2 Sep 21 07:16:30.681918: | retransmits: current time 48837.050179; retransmit count 1 exceeds limit? NO; deltatime 0.1 exceeds limit? NO; monotime 0.101274 exceeds limit? NO Sep 21 07:16:30.681922: | event_schedule: new EVENT_RETRANSMIT-pe@0x55edd3560f50 Sep 21 07:16:30.681925: | inserting event EVENT_RETRANSMIT, timeout in 0.1 seconds for #1 Sep 21 07:16:30.681932: | libevent_malloc: new ptr-libevent@0x55edd3560f90 size 128 Sep 21 07:16:30.681937: "north-eastnets/0x2" #1: STATE_PARENT_I1: retransmission; will wait 0.1 seconds for response Sep 21 07:16:30.681945: | sending 440 bytes for EVENT_RETRANSMIT through eth1 from 192.1.2.23:500 to 192.1.3.33:500 (using #1) Sep 21 07:16:30.681947: | 7b 62 d8 c9 e0 c5 68 51 00 00 00 00 00 00 00 00 Sep 21 07:16:30.681950: | 21 20 22 08 00 00 00 00 00 00 01 b8 22 00 00 30 Sep 21 07:16:30.681952: | 00 00 00 2c 01 01 00 04 03 00 00 0c 01 00 00 0c Sep 21 07:16:30.681954: | 80 0e 01 00 03 00 00 08 02 00 00 05 03 00 00 08 Sep 21 07:16:30.681956: | 03 00 00 0c 00 00 00 08 04 00 00 0e 28 00 01 08 Sep 21 07:16:30.681958: | 00 0e 00 00 54 19 a8 6c 38 18 39 f6 32 f7 3e 72 Sep 21 07:16:30.681960: | 93 75 f9 9e 97 79 f9 89 3b 53 a3 5c 3b b8 c1 52 Sep 21 07:16:30.681963: | 0a 12 12 6e b0 86 5d a0 17 1b e7 a7 b3 d4 1a ed Sep 21 07:16:30.681965: | 3d a7 35 79 dc 54 c0 42 33 23 f4 34 2a ae b7 40 Sep 21 07:16:30.681967: | 61 31 29 07 ee af c4 c6 ca 47 70 a7 00 af 3a 73 Sep 21 07:16:30.681969: | 08 c3 b0 fb 06 f6 97 1e 35 52 fa c0 53 33 b3 7c Sep 21 07:16:30.681971: | ca d5 51 14 23 e1 30 c9 1a af f5 68 57 ff aa 77 Sep 21 07:16:30.681973: | f5 ed 86 2b e7 81 43 96 f0 6d 2a 2c b2 a0 01 e8 Sep 21 07:16:30.681976: | a2 45 d2 5c c0 d1 a3 a9 55 bf ec 6a 12 95 99 6d Sep 21 07:16:30.681978: | 6a 67 d4 19 9b c8 f5 fd 91 12 79 80 93 d7 f9 54 Sep 21 07:16:30.681980: | d5 7d 45 92 c8 da e0 3c 62 2b 06 15 62 4c aa 05 Sep 21 07:16:30.681982: | b4 af 90 26 18 02 e5 67 91 bf 5a cc c6 0d f0 44 Sep 21 07:16:30.681984: | 28 f8 b3 1b 99 a5 42 05 b1 aa 42 f6 49 30 b9 c6 Sep 21 07:16:30.681986: | a8 12 2d e9 da 0e c7 86 f8 ee a6 f6 24 98 fc 27 Sep 21 07:16:30.681988: | 47 9a 06 4d 34 68 06 17 c0 3c 94 bc f4 fe 49 bb Sep 21 07:16:30.681991: | 5f 81 7e b9 65 bc ad f0 b3 28 1c 33 bd 83 a3 f9 Sep 21 07:16:30.681993: | b2 96 14 cc 29 00 00 24 d2 95 24 5f 30 57 d8 23 Sep 21 07:16:30.681995: | 7c 0d ae 5f 2e f6 13 45 55 a8 da 55 87 18 f9 71 Sep 21 07:16:30.681997: | c1 17 f4 6c 18 34 4a b3 29 00 00 08 00 00 40 2e Sep 21 07:16:30.681999: | 29 00 00 1c 00 00 40 04 03 84 f4 92 ef b2 e7 23 Sep 21 07:16:30.682002: | 9b 7e 52 93 57 ef f7 39 61 5d 98 0a 00 00 00 1c Sep 21 07:16:30.682004: | 00 00 40 05 d7 27 e1 f7 e4 d6 3e c8 5f 91 e3 a0 Sep 21 07:16:30.682006: | d1 61 d6 62 3e 1e a7 e4 Sep 21 07:16:30.682047: | libevent_free: release ptr-libevent@0x7fc0c8006900 Sep 21 07:16:30.682051: | free_event_entry: release EVENT_RETRANSMIT-pe@0x7fc0c8002b20 Sep 21 07:16:30.682058: | #1 spent 0.165 milliseconds in timer_event_cb() EVENT_RETRANSMIT Sep 21 07:16:30.682063: | stop processing: state #1 connection "north-eastnets/0x2" from 192.1.3.33:500 (in timer_event_cb() at timer.c:557) Sep 21 07:16:30.783299: | timer_event_cb: processing event@0x55edd3560f50 Sep 21 07:16:30.783316: | handling event EVENT_RETRANSMIT for parent state #1 Sep 21 07:16:30.783323: | start processing: state #1 connection "north-eastnets/0x2" from 192.1.3.33:500 (in timer_event_cb() at timer.c:250) Sep 21 07:16:30.783326: | IKEv2 retransmit event Sep 21 07:16:30.783329: | [RE]START processing: state #1 connection "north-eastnets/0x2" from 192.1.3.33:500 (in retransmit_v2_msg() at retry.c:144) Sep 21 07:16:30.783332: | handling event EVENT_RETRANSMIT for 192.1.3.33 "north-eastnets/0x2" #1 attempt 2 of 0 Sep 21 07:16:30.783335: | and parent for 192.1.3.33 "north-eastnets/0x2" #1 keying attempt 1 of 0; retransmit 3 Sep 21 07:16:30.783340: | retransmits: current time 48837.151602; retransmit count 2 exceeds limit? NO; deltatime 0.2 exceeds limit? NO; monotime 0.202697 exceeds limit? NO Sep 21 07:16:30.783343: | event_schedule: new EVENT_RETRANSMIT-pe@0x7fc0c8002b20 Sep 21 07:16:30.783345: | inserting event EVENT_RETRANSMIT, timeout in 0.2 seconds for #1 Sep 21 07:16:30.783348: | libevent_malloc: new ptr-libevent@0x7fc0c8006900 size 128 Sep 21 07:16:30.783351: "north-eastnets/0x2" #1: STATE_PARENT_I1: retransmission; will wait 0.2 seconds for response Sep 21 07:16:30.783360: | sending 440 bytes for EVENT_RETRANSMIT through eth1 from 192.1.2.23:500 to 192.1.3.33:500 (using #1) Sep 21 07:16:30.783362: | 7b 62 d8 c9 e0 c5 68 51 00 00 00 00 00 00 00 00 Sep 21 07:16:30.783363: | 21 20 22 08 00 00 00 00 00 00 01 b8 22 00 00 30 Sep 21 07:16:30.783364: | 00 00 00 2c 01 01 00 04 03 00 00 0c 01 00 00 0c Sep 21 07:16:30.783366: | 80 0e 01 00 03 00 00 08 02 00 00 05 03 00 00 08 Sep 21 07:16:30.783367: | 03 00 00 0c 00 00 00 08 04 00 00 0e 28 00 01 08 Sep 21 07:16:30.783368: | 00 0e 00 00 54 19 a8 6c 38 18 39 f6 32 f7 3e 72 Sep 21 07:16:30.783370: | 93 75 f9 9e 97 79 f9 89 3b 53 a3 5c 3b b8 c1 52 Sep 21 07:16:30.783371: | 0a 12 12 6e b0 86 5d a0 17 1b e7 a7 b3 d4 1a ed Sep 21 07:16:30.783373: | 3d a7 35 79 dc 54 c0 42 33 23 f4 34 2a ae b7 40 Sep 21 07:16:30.783374: | 61 31 29 07 ee af c4 c6 ca 47 70 a7 00 af 3a 73 Sep 21 07:16:30.783375: | 08 c3 b0 fb 06 f6 97 1e 35 52 fa c0 53 33 b3 7c Sep 21 07:16:30.783377: | ca d5 51 14 23 e1 30 c9 1a af f5 68 57 ff aa 77 Sep 21 07:16:30.783378: | f5 ed 86 2b e7 81 43 96 f0 6d 2a 2c b2 a0 01 e8 Sep 21 07:16:30.783379: | a2 45 d2 5c c0 d1 a3 a9 55 bf ec 6a 12 95 99 6d Sep 21 07:16:30.783381: | 6a 67 d4 19 9b c8 f5 fd 91 12 79 80 93 d7 f9 54 Sep 21 07:16:30.783382: | d5 7d 45 92 c8 da e0 3c 62 2b 06 15 62 4c aa 05 Sep 21 07:16:30.783384: | b4 af 90 26 18 02 e5 67 91 bf 5a cc c6 0d f0 44 Sep 21 07:16:30.783385: | 28 f8 b3 1b 99 a5 42 05 b1 aa 42 f6 49 30 b9 c6 Sep 21 07:16:30.783386: | a8 12 2d e9 da 0e c7 86 f8 ee a6 f6 24 98 fc 27 Sep 21 07:16:30.783388: | 47 9a 06 4d 34 68 06 17 c0 3c 94 bc f4 fe 49 bb Sep 21 07:16:30.783389: | 5f 81 7e b9 65 bc ad f0 b3 28 1c 33 bd 83 a3 f9 Sep 21 07:16:30.783390: | b2 96 14 cc 29 00 00 24 d2 95 24 5f 30 57 d8 23 Sep 21 07:16:30.783392: | 7c 0d ae 5f 2e f6 13 45 55 a8 da 55 87 18 f9 71 Sep 21 07:16:30.783393: | c1 17 f4 6c 18 34 4a b3 29 00 00 08 00 00 40 2e Sep 21 07:16:30.783394: | 29 00 00 1c 00 00 40 04 03 84 f4 92 ef b2 e7 23 Sep 21 07:16:30.783396: | 9b 7e 52 93 57 ef f7 39 61 5d 98 0a 00 00 00 1c Sep 21 07:16:30.783397: | 00 00 40 05 d7 27 e1 f7 e4 d6 3e c8 5f 91 e3 a0 Sep 21 07:16:30.783398: | d1 61 d6 62 3e 1e a7 e4 Sep 21 07:16:30.783441: | libevent_free: release ptr-libevent@0x55edd3560f90 Sep 21 07:16:30.783444: | free_event_entry: release EVENT_RETRANSMIT-pe@0x55edd3560f50 Sep 21 07:16:30.783450: | #1 spent 0.129 milliseconds in timer_event_cb() EVENT_RETRANSMIT Sep 21 07:16:30.783454: | stop processing: state #1 connection "north-eastnets/0x2" from 192.1.3.33:500 (in timer_event_cb() at timer.c:557) Sep 21 07:16:30.984744: | timer_event_cb: processing event@0x7fc0c8002b20 Sep 21 07:16:30.984774: | handling event EVENT_RETRANSMIT for parent state #1 Sep 21 07:16:30.984790: | start processing: state #1 connection "north-eastnets/0x2" from 192.1.3.33:500 (in timer_event_cb() at timer.c:250) Sep 21 07:16:30.984798: | IKEv2 retransmit event Sep 21 07:16:30.984806: | [RE]START processing: state #1 connection "north-eastnets/0x2" from 192.1.3.33:500 (in retransmit_v2_msg() at retry.c:144) Sep 21 07:16:30.984812: | handling event EVENT_RETRANSMIT for 192.1.3.33 "north-eastnets/0x2" #1 attempt 2 of 0 Sep 21 07:16:30.984818: | and parent for 192.1.3.33 "north-eastnets/0x2" #1 keying attempt 1 of 0; retransmit 4 Sep 21 07:16:30.984827: | retransmits: current time 48837.353087; retransmit count 3 exceeds limit? NO; deltatime 0.4 exceeds limit? NO; monotime 0.404182 exceeds limit? NO Sep 21 07:16:30.984833: | event_schedule: new EVENT_RETRANSMIT-pe@0x55edd3560f50 Sep 21 07:16:30.984838: | inserting event EVENT_RETRANSMIT, timeout in 0.4 seconds for #1 Sep 21 07:16:30.984843: | libevent_malloc: new ptr-libevent@0x55edd3560f90 size 128 Sep 21 07:16:30.984850: "north-eastnets/0x2" #1: STATE_PARENT_I1: retransmission; will wait 0.4 seconds for response Sep 21 07:16:30.984860: | sending 440 bytes for EVENT_RETRANSMIT through eth1 from 192.1.2.23:500 to 192.1.3.33:500 (using #1) Sep 21 07:16:30.984870: | 7b 62 d8 c9 e0 c5 68 51 00 00 00 00 00 00 00 00 Sep 21 07:16:30.984873: | 21 20 22 08 00 00 00 00 00 00 01 b8 22 00 00 30 Sep 21 07:16:30.984876: | 00 00 00 2c 01 01 00 04 03 00 00 0c 01 00 00 0c Sep 21 07:16:30.984879: | 80 0e 01 00 03 00 00 08 02 00 00 05 03 00 00 08 Sep 21 07:16:30.984882: | 03 00 00 0c 00 00 00 08 04 00 00 0e 28 00 01 08 Sep 21 07:16:30.984885: | 00 0e 00 00 54 19 a8 6c 38 18 39 f6 32 f7 3e 72 Sep 21 07:16:30.984888: | 93 75 f9 9e 97 79 f9 89 3b 53 a3 5c 3b b8 c1 52 Sep 21 07:16:30.984891: | 0a 12 12 6e b0 86 5d a0 17 1b e7 a7 b3 d4 1a ed Sep 21 07:16:30.984895: | 3d a7 35 79 dc 54 c0 42 33 23 f4 34 2a ae b7 40 Sep 21 07:16:30.984898: | 61 31 29 07 ee af c4 c6 ca 47 70 a7 00 af 3a 73 Sep 21 07:16:30.984901: | 08 c3 b0 fb 06 f6 97 1e 35 52 fa c0 53 33 b3 7c Sep 21 07:16:30.984904: | ca d5 51 14 23 e1 30 c9 1a af f5 68 57 ff aa 77 Sep 21 07:16:30.984907: | f5 ed 86 2b e7 81 43 96 f0 6d 2a 2c b2 a0 01 e8 Sep 21 07:16:30.984910: | a2 45 d2 5c c0 d1 a3 a9 55 bf ec 6a 12 95 99 6d Sep 21 07:16:30.984913: | 6a 67 d4 19 9b c8 f5 fd 91 12 79 80 93 d7 f9 54 Sep 21 07:16:30.984916: | d5 7d 45 92 c8 da e0 3c 62 2b 06 15 62 4c aa 05 Sep 21 07:16:30.984919: | b4 af 90 26 18 02 e5 67 91 bf 5a cc c6 0d f0 44 Sep 21 07:16:30.984922: | 28 f8 b3 1b 99 a5 42 05 b1 aa 42 f6 49 30 b9 c6 Sep 21 07:16:30.984925: | a8 12 2d e9 da 0e c7 86 f8 ee a6 f6 24 98 fc 27 Sep 21 07:16:30.984928: | 47 9a 06 4d 34 68 06 17 c0 3c 94 bc f4 fe 49 bb Sep 21 07:16:30.984932: | 5f 81 7e b9 65 bc ad f0 b3 28 1c 33 bd 83 a3 f9 Sep 21 07:16:30.984935: | b2 96 14 cc 29 00 00 24 d2 95 24 5f 30 57 d8 23 Sep 21 07:16:30.984938: | 7c 0d ae 5f 2e f6 13 45 55 a8 da 55 87 18 f9 71 Sep 21 07:16:30.984941: | c1 17 f4 6c 18 34 4a b3 29 00 00 08 00 00 40 2e Sep 21 07:16:30.984944: | 29 00 00 1c 00 00 40 04 03 84 f4 92 ef b2 e7 23 Sep 21 07:16:30.984947: | 9b 7e 52 93 57 ef f7 39 61 5d 98 0a 00 00 00 1c Sep 21 07:16:30.984950: | 00 00 40 05 d7 27 e1 f7 e4 d6 3e c8 5f 91 e3 a0 Sep 21 07:16:30.984953: | d1 61 d6 62 3e 1e a7 e4 Sep 21 07:16:30.985026: | libevent_free: release ptr-libevent@0x7fc0c8006900 Sep 21 07:16:30.985033: | free_event_entry: release EVENT_RETRANSMIT-pe@0x7fc0c8002b20 Sep 21 07:16:30.985044: | #1 spent 0.262 milliseconds in timer_event_cb() EVENT_RETRANSMIT Sep 21 07:16:30.985051: | stop processing: state #1 connection "north-eastnets/0x2" from 192.1.3.33:500 (in timer_event_cb() at timer.c:557) Sep 21 07:16:31.385502: | timer_event_cb: processing event@0x55edd3560f50 Sep 21 07:16:31.385515: | handling event EVENT_RETRANSMIT for parent state #1 Sep 21 07:16:31.385521: | start processing: state #1 connection "north-eastnets/0x2" from 192.1.3.33:500 (in timer_event_cb() at timer.c:250) Sep 21 07:16:31.385524: | IKEv2 retransmit event Sep 21 07:16:31.385527: | [RE]START processing: state #1 connection "north-eastnets/0x2" from 192.1.3.33:500 (in retransmit_v2_msg() at retry.c:144) Sep 21 07:16:31.385530: | handling event EVENT_RETRANSMIT for 192.1.3.33 "north-eastnets/0x2" #1 attempt 2 of 0 Sep 21 07:16:31.385533: | and parent for 192.1.3.33 "north-eastnets/0x2" #1 keying attempt 1 of 0; retransmit 5 Sep 21 07:16:31.385538: | retransmits: current time 48837.753801; retransmit count 4 exceeds limit? NO; deltatime 0.8 exceeds limit? NO; monotime 0.804896 exceeds limit? NO Sep 21 07:16:31.385541: | event_schedule: new EVENT_RETRANSMIT-pe@0x7fc0c8002b20 Sep 21 07:16:31.385544: | inserting event EVENT_RETRANSMIT, timeout in 0.8 seconds for #1 Sep 21 07:16:31.385546: | libevent_malloc: new ptr-libevent@0x7fc0c8006900 size 128 Sep 21 07:16:31.385550: "north-eastnets/0x2" #1: STATE_PARENT_I1: retransmission; will wait 0.8 seconds for response Sep 21 07:16:31.385554: | sending 440 bytes for EVENT_RETRANSMIT through eth1 from 192.1.2.23:500 to 192.1.3.33:500 (using #1) Sep 21 07:16:31.385556: | 7b 62 d8 c9 e0 c5 68 51 00 00 00 00 00 00 00 00 Sep 21 07:16:31.385561: | 21 20 22 08 00 00 00 00 00 00 01 b8 22 00 00 30 Sep 21 07:16:31.385563: | 00 00 00 2c 01 01 00 04 03 00 00 0c 01 00 00 0c Sep 21 07:16:31.385564: | 80 0e 01 00 03 00 00 08 02 00 00 05 03 00 00 08 Sep 21 07:16:31.385566: | 03 00 00 0c 00 00 00 08 04 00 00 0e 28 00 01 08 Sep 21 07:16:31.385567: | 00 0e 00 00 54 19 a8 6c 38 18 39 f6 32 f7 3e 72 Sep 21 07:16:31.385568: | 93 75 f9 9e 97 79 f9 89 3b 53 a3 5c 3b b8 c1 52 Sep 21 07:16:31.385570: | 0a 12 12 6e b0 86 5d a0 17 1b e7 a7 b3 d4 1a ed Sep 21 07:16:31.385571: | 3d a7 35 79 dc 54 c0 42 33 23 f4 34 2a ae b7 40 Sep 21 07:16:31.385573: | 61 31 29 07 ee af c4 c6 ca 47 70 a7 00 af 3a 73 Sep 21 07:16:31.385574: | 08 c3 b0 fb 06 f6 97 1e 35 52 fa c0 53 33 b3 7c Sep 21 07:16:31.385576: | ca d5 51 14 23 e1 30 c9 1a af f5 68 57 ff aa 77 Sep 21 07:16:31.385577: | f5 ed 86 2b e7 81 43 96 f0 6d 2a 2c b2 a0 01 e8 Sep 21 07:16:31.385579: | a2 45 d2 5c c0 d1 a3 a9 55 bf ec 6a 12 95 99 6d Sep 21 07:16:31.385580: | 6a 67 d4 19 9b c8 f5 fd 91 12 79 80 93 d7 f9 54 Sep 21 07:16:31.385582: | d5 7d 45 92 c8 da e0 3c 62 2b 06 15 62 4c aa 05 Sep 21 07:16:31.385583: | b4 af 90 26 18 02 e5 67 91 bf 5a cc c6 0d f0 44 Sep 21 07:16:31.385585: | 28 f8 b3 1b 99 a5 42 05 b1 aa 42 f6 49 30 b9 c6 Sep 21 07:16:31.385586: | a8 12 2d e9 da 0e c7 86 f8 ee a6 f6 24 98 fc 27 Sep 21 07:16:31.385588: | 47 9a 06 4d 34 68 06 17 c0 3c 94 bc f4 fe 49 bb Sep 21 07:16:31.385589: | 5f 81 7e b9 65 bc ad f0 b3 28 1c 33 bd 83 a3 f9 Sep 21 07:16:31.385591: | b2 96 14 cc 29 00 00 24 d2 95 24 5f 30 57 d8 23 Sep 21 07:16:31.385592: | 7c 0d ae 5f 2e f6 13 45 55 a8 da 55 87 18 f9 71 Sep 21 07:16:31.385593: | c1 17 f4 6c 18 34 4a b3 29 00 00 08 00 00 40 2e Sep 21 07:16:31.385595: | 29 00 00 1c 00 00 40 04 03 84 f4 92 ef b2 e7 23 Sep 21 07:16:31.385596: | 9b 7e 52 93 57 ef f7 39 61 5d 98 0a 00 00 00 1c Sep 21 07:16:31.385598: | 00 00 40 05 d7 27 e1 f7 e4 d6 3e c8 5f 91 e3 a0 Sep 21 07:16:31.385599: | d1 61 d6 62 3e 1e a7 e4 Sep 21 07:16:31.385638: | libevent_free: release ptr-libevent@0x55edd3560f90 Sep 21 07:16:31.385641: | free_event_entry: release EVENT_RETRANSMIT-pe@0x55edd3560f50 Sep 21 07:16:31.385646: | #1 spent 0.124 milliseconds in timer_event_cb() EVENT_RETRANSMIT Sep 21 07:16:31.385650: | stop processing: state #1 connection "north-eastnets/0x2" from 192.1.3.33:500 (in timer_event_cb() at timer.c:557) Sep 21 07:16:32.186172: | timer_event_cb: processing event@0x7fc0c8002b20 Sep 21 07:16:32.186187: | handling event EVENT_RETRANSMIT for parent state #1 Sep 21 07:16:32.186196: | start processing: state #1 connection "north-eastnets/0x2" from 192.1.3.33:500 (in timer_event_cb() at timer.c:250) Sep 21 07:16:32.186199: | IKEv2 retransmit event Sep 21 07:16:32.186202: | [RE]START processing: state #1 connection "north-eastnets/0x2" from 192.1.3.33:500 (in retransmit_v2_msg() at retry.c:144) Sep 21 07:16:32.186205: | handling event EVENT_RETRANSMIT for 192.1.3.33 "north-eastnets/0x2" #1 attempt 2 of 0 Sep 21 07:16:32.186208: | and parent for 192.1.3.33 "north-eastnets/0x2" #1 keying attempt 1 of 0; retransmit 6 Sep 21 07:16:32.186212: | retransmits: current time 48838.554475; retransmit count 5 exceeds limit? NO; deltatime 1.6 exceeds limit? NO; monotime 1.60557 exceeds limit? NO Sep 21 07:16:32.186215: | event_schedule: new EVENT_RETRANSMIT-pe@0x55edd3560f50 Sep 21 07:16:32.186217: | inserting event EVENT_RETRANSMIT, timeout in 1.6 seconds for #1 Sep 21 07:16:32.186220: | libevent_malloc: new ptr-libevent@0x55edd3560f90 size 128 Sep 21 07:16:32.186223: "north-eastnets/0x2" #1: STATE_PARENT_I1: retransmission; will wait 1.6 seconds for response Sep 21 07:16:32.186227: | sending 440 bytes for EVENT_RETRANSMIT through eth1 from 192.1.2.23:500 to 192.1.3.33:500 (using #1) Sep 21 07:16:32.186229: | 7b 62 d8 c9 e0 c5 68 51 00 00 00 00 00 00 00 00 Sep 21 07:16:32.186231: | 21 20 22 08 00 00 00 00 00 00 01 b8 22 00 00 30 Sep 21 07:16:32.186232: | 00 00 00 2c 01 01 00 04 03 00 00 0c 01 00 00 0c Sep 21 07:16:32.186237: | 80 0e 01 00 03 00 00 08 02 00 00 05 03 00 00 08 Sep 21 07:16:32.186238: | 03 00 00 0c 00 00 00 08 04 00 00 0e 28 00 01 08 Sep 21 07:16:32.186239: | 00 0e 00 00 54 19 a8 6c 38 18 39 f6 32 f7 3e 72 Sep 21 07:16:32.186241: | 93 75 f9 9e 97 79 f9 89 3b 53 a3 5c 3b b8 c1 52 Sep 21 07:16:32.186242: | 0a 12 12 6e b0 86 5d a0 17 1b e7 a7 b3 d4 1a ed Sep 21 07:16:32.186244: | 3d a7 35 79 dc 54 c0 42 33 23 f4 34 2a ae b7 40 Sep 21 07:16:32.186245: | 61 31 29 07 ee af c4 c6 ca 47 70 a7 00 af 3a 73 Sep 21 07:16:32.186246: | 08 c3 b0 fb 06 f6 97 1e 35 52 fa c0 53 33 b3 7c Sep 21 07:16:32.186248: | ca d5 51 14 23 e1 30 c9 1a af f5 68 57 ff aa 77 Sep 21 07:16:32.186249: | f5 ed 86 2b e7 81 43 96 f0 6d 2a 2c b2 a0 01 e8 Sep 21 07:16:32.186251: | a2 45 d2 5c c0 d1 a3 a9 55 bf ec 6a 12 95 99 6d Sep 21 07:16:32.186252: | 6a 67 d4 19 9b c8 f5 fd 91 12 79 80 93 d7 f9 54 Sep 21 07:16:32.186253: | d5 7d 45 92 c8 da e0 3c 62 2b 06 15 62 4c aa 05 Sep 21 07:16:32.186255: | b4 af 90 26 18 02 e5 67 91 bf 5a cc c6 0d f0 44 Sep 21 07:16:32.186256: | 28 f8 b3 1b 99 a5 42 05 b1 aa 42 f6 49 30 b9 c6 Sep 21 07:16:32.186257: | a8 12 2d e9 da 0e c7 86 f8 ee a6 f6 24 98 fc 27 Sep 21 07:16:32.186259: | 47 9a 06 4d 34 68 06 17 c0 3c 94 bc f4 fe 49 bb Sep 21 07:16:32.186260: | 5f 81 7e b9 65 bc ad f0 b3 28 1c 33 bd 83 a3 f9 Sep 21 07:16:32.186262: | b2 96 14 cc 29 00 00 24 d2 95 24 5f 30 57 d8 23 Sep 21 07:16:32.186263: | 7c 0d ae 5f 2e f6 13 45 55 a8 da 55 87 18 f9 71 Sep 21 07:16:32.186264: | c1 17 f4 6c 18 34 4a b3 29 00 00 08 00 00 40 2e Sep 21 07:16:32.186266: | 29 00 00 1c 00 00 40 04 03 84 f4 92 ef b2 e7 23 Sep 21 07:16:32.186267: | 9b 7e 52 93 57 ef f7 39 61 5d 98 0a 00 00 00 1c Sep 21 07:16:32.186268: | 00 00 40 05 d7 27 e1 f7 e4 d6 3e c8 5f 91 e3 a0 Sep 21 07:16:32.186270: | d1 61 d6 62 3e 1e a7 e4 Sep 21 07:16:32.186309: | libevent_free: release ptr-libevent@0x7fc0c8006900 Sep 21 07:16:32.186312: | free_event_entry: release EVENT_RETRANSMIT-pe@0x7fc0c8002b20 Sep 21 07:16:32.186318: | #1 spent 0.127 milliseconds in timer_event_cb() EVENT_RETRANSMIT Sep 21 07:16:32.186321: | stop processing: state #1 connection "north-eastnets/0x2" from 192.1.3.33:500 (in timer_event_cb() at timer.c:557) Sep 21 07:16:33.787802: | timer_event_cb: processing event@0x55edd3560f50 Sep 21 07:16:33.787814: | handling event EVENT_RETRANSMIT for parent state #1 Sep 21 07:16:33.787822: | start processing: state #1 connection "north-eastnets/0x2" from 192.1.3.33:500 (in timer_event_cb() at timer.c:250) Sep 21 07:16:33.787825: | IKEv2 retransmit event Sep 21 07:16:33.787830: | [RE]START processing: state #1 connection "north-eastnets/0x2" from 192.1.3.33:500 (in retransmit_v2_msg() at retry.c:144) Sep 21 07:16:33.787835: | handling event EVENT_RETRANSMIT for 192.1.3.33 "north-eastnets/0x2" #1 attempt 2 of 0 Sep 21 07:16:33.787839: | and parent for 192.1.3.33 "north-eastnets/0x2" #1 keying attempt 1 of 0; retransmit 7 Sep 21 07:16:33.787845: | retransmits: current time 48840.156107; retransmit count 6 exceeds limit? NO; deltatime 3.2 exceeds limit? NO; monotime 3.207202 exceeds limit? NO Sep 21 07:16:33.787849: | event_schedule: new EVENT_RETRANSMIT-pe@0x7fc0c8002b20 Sep 21 07:16:33.787852: | inserting event EVENT_RETRANSMIT, timeout in 3.2 seconds for #1 Sep 21 07:16:33.787856: | libevent_malloc: new ptr-libevent@0x7fc0c8006900 size 128 Sep 21 07:16:33.787860: "north-eastnets/0x2" #1: STATE_PARENT_I1: retransmission; will wait 3.2 seconds for response Sep 21 07:16:33.787867: | sending 440 bytes for EVENT_RETRANSMIT through eth1 from 192.1.2.23:500 to 192.1.3.33:500 (using #1) Sep 21 07:16:33.787869: | 7b 62 d8 c9 e0 c5 68 51 00 00 00 00 00 00 00 00 Sep 21 07:16:33.787871: | 21 20 22 08 00 00 00 00 00 00 01 b8 22 00 00 30 Sep 21 07:16:33.787874: | 00 00 00 2c 01 01 00 04 03 00 00 0c 01 00 00 0c Sep 21 07:16:33.787876: | 80 0e 01 00 03 00 00 08 02 00 00 05 03 00 00 08 Sep 21 07:16:33.787881: | 03 00 00 0c 00 00 00 08 04 00 00 0e 28 00 01 08 Sep 21 07:16:33.787884: | 00 0e 00 00 54 19 a8 6c 38 18 39 f6 32 f7 3e 72 Sep 21 07:16:33.787886: | 93 75 f9 9e 97 79 f9 89 3b 53 a3 5c 3b b8 c1 52 Sep 21 07:16:33.787888: | 0a 12 12 6e b0 86 5d a0 17 1b e7 a7 b3 d4 1a ed Sep 21 07:16:33.787890: | 3d a7 35 79 dc 54 c0 42 33 23 f4 34 2a ae b7 40 Sep 21 07:16:33.787892: | 61 31 29 07 ee af c4 c6 ca 47 70 a7 00 af 3a 73 Sep 21 07:16:33.787895: | 08 c3 b0 fb 06 f6 97 1e 35 52 fa c0 53 33 b3 7c Sep 21 07:16:33.787897: | ca d5 51 14 23 e1 30 c9 1a af f5 68 57 ff aa 77 Sep 21 07:16:33.787899: | f5 ed 86 2b e7 81 43 96 f0 6d 2a 2c b2 a0 01 e8 Sep 21 07:16:33.787902: | a2 45 d2 5c c0 d1 a3 a9 55 bf ec 6a 12 95 99 6d Sep 21 07:16:33.787904: | 6a 67 d4 19 9b c8 f5 fd 91 12 79 80 93 d7 f9 54 Sep 21 07:16:33.787906: | d5 7d 45 92 c8 da e0 3c 62 2b 06 15 62 4c aa 05 Sep 21 07:16:33.787908: | b4 af 90 26 18 02 e5 67 91 bf 5a cc c6 0d f0 44 Sep 21 07:16:33.787910: | 28 f8 b3 1b 99 a5 42 05 b1 aa 42 f6 49 30 b9 c6 Sep 21 07:16:33.787913: | a8 12 2d e9 da 0e c7 86 f8 ee a6 f6 24 98 fc 27 Sep 21 07:16:33.787915: | 47 9a 06 4d 34 68 06 17 c0 3c 94 bc f4 fe 49 bb Sep 21 07:16:33.787917: | 5f 81 7e b9 65 bc ad f0 b3 28 1c 33 bd 83 a3 f9 Sep 21 07:16:33.787919: | b2 96 14 cc 29 00 00 24 d2 95 24 5f 30 57 d8 23 Sep 21 07:16:33.787922: | 7c 0d ae 5f 2e f6 13 45 55 a8 da 55 87 18 f9 71 Sep 21 07:16:33.787924: | c1 17 f4 6c 18 34 4a b3 29 00 00 08 00 00 40 2e Sep 21 07:16:33.787926: | 29 00 00 1c 00 00 40 04 03 84 f4 92 ef b2 e7 23 Sep 21 07:16:33.787928: | 9b 7e 52 93 57 ef f7 39 61 5d 98 0a 00 00 00 1c Sep 21 07:16:33.787931: | 00 00 40 05 d7 27 e1 f7 e4 d6 3e c8 5f 91 e3 a0 Sep 21 07:16:33.787933: | d1 61 d6 62 3e 1e a7 e4 Sep 21 07:16:33.787975: | libevent_free: release ptr-libevent@0x55edd3560f90 Sep 21 07:16:33.787978: | free_event_entry: release EVENT_RETRANSMIT-pe@0x55edd3560f50 Sep 21 07:16:33.787986: | #1 spent 0.161 milliseconds in timer_event_cb() EVENT_RETRANSMIT Sep 21 07:16:33.787991: | stop processing: state #1 connection "north-eastnets/0x2" from 192.1.3.33:500 (in timer_event_cb() at timer.c:557) Sep 21 07:16:36.990829: | timer_event_cb: processing event@0x7fc0c8002b20 Sep 21 07:16:36.990846: | handling event EVENT_RETRANSMIT for parent state #1 Sep 21 07:16:36.990855: | start processing: state #1 connection "north-eastnets/0x2" from 192.1.3.33:500 (in timer_event_cb() at timer.c:250) Sep 21 07:16:36.990859: | IKEv2 retransmit event Sep 21 07:16:36.990864: | [RE]START processing: state #1 connection "north-eastnets/0x2" from 192.1.3.33:500 (in retransmit_v2_msg() at retry.c:144) Sep 21 07:16:36.990869: | handling event EVENT_RETRANSMIT for 192.1.3.33 "north-eastnets/0x2" #1 attempt 2 of 0 Sep 21 07:16:36.990873: | and parent for 192.1.3.33 "north-eastnets/0x2" #1 keying attempt 1 of 0; retransmit 8 Sep 21 07:16:36.990880: | retransmits: current time 48843.359141; retransmit count 7 exceeds limit? NO; deltatime 6.4 exceeds limit? NO; monotime 6.410236 exceeds limit? NO Sep 21 07:16:36.990884: | event_schedule: new EVENT_RETRANSMIT-pe@0x55edd3560f50 Sep 21 07:16:36.990888: | inserting event EVENT_RETRANSMIT, timeout in 6.4 seconds for #1 Sep 21 07:16:36.990892: | libevent_malloc: new ptr-libevent@0x55edd3560f90 size 128 Sep 21 07:16:36.990897: "north-eastnets/0x2" #1: STATE_PARENT_I1: retransmission; will wait 6.4 seconds for response Sep 21 07:16:36.990904: | sending 440 bytes for EVENT_RETRANSMIT through eth1 from 192.1.2.23:500 to 192.1.3.33:500 (using #1) Sep 21 07:16:36.990907: | 7b 62 d8 c9 e0 c5 68 51 00 00 00 00 00 00 00 00 Sep 21 07:16:36.990909: | 21 20 22 08 00 00 00 00 00 00 01 b8 22 00 00 30 Sep 21 07:16:36.990911: | 00 00 00 2c 01 01 00 04 03 00 00 0c 01 00 00 0c Sep 21 07:16:36.990914: | 80 0e 01 00 03 00 00 08 02 00 00 05 03 00 00 08 Sep 21 07:16:36.990916: | 03 00 00 0c 00 00 00 08 04 00 00 0e 28 00 01 08 Sep 21 07:16:36.990918: | 00 0e 00 00 54 19 a8 6c 38 18 39 f6 32 f7 3e 72 Sep 21 07:16:36.990925: | 93 75 f9 9e 97 79 f9 89 3b 53 a3 5c 3b b8 c1 52 Sep 21 07:16:36.990927: | 0a 12 12 6e b0 86 5d a0 17 1b e7 a7 b3 d4 1a ed Sep 21 07:16:36.990929: | 3d a7 35 79 dc 54 c0 42 33 23 f4 34 2a ae b7 40 Sep 21 07:16:36.990932: | 61 31 29 07 ee af c4 c6 ca 47 70 a7 00 af 3a 73 Sep 21 07:16:36.990934: | 08 c3 b0 fb 06 f6 97 1e 35 52 fa c0 53 33 b3 7c Sep 21 07:16:36.990936: | ca d5 51 14 23 e1 30 c9 1a af f5 68 57 ff aa 77 Sep 21 07:16:36.990938: | f5 ed 86 2b e7 81 43 96 f0 6d 2a 2c b2 a0 01 e8 Sep 21 07:16:36.990941: | a2 45 d2 5c c0 d1 a3 a9 55 bf ec 6a 12 95 99 6d Sep 21 07:16:36.990943: | 6a 67 d4 19 9b c8 f5 fd 91 12 79 80 93 d7 f9 54 Sep 21 07:16:36.990945: | d5 7d 45 92 c8 da e0 3c 62 2b 06 15 62 4c aa 05 Sep 21 07:16:36.990947: | b4 af 90 26 18 02 e5 67 91 bf 5a cc c6 0d f0 44 Sep 21 07:16:36.990950: | 28 f8 b3 1b 99 a5 42 05 b1 aa 42 f6 49 30 b9 c6 Sep 21 07:16:36.990952: | a8 12 2d e9 da 0e c7 86 f8 ee a6 f6 24 98 fc 27 Sep 21 07:16:36.990954: | 47 9a 06 4d 34 68 06 17 c0 3c 94 bc f4 fe 49 bb Sep 21 07:16:36.990957: | 5f 81 7e b9 65 bc ad f0 b3 28 1c 33 bd 83 a3 f9 Sep 21 07:16:36.990959: | b2 96 14 cc 29 00 00 24 d2 95 24 5f 30 57 d8 23 Sep 21 07:16:36.990961: | 7c 0d ae 5f 2e f6 13 45 55 a8 da 55 87 18 f9 71 Sep 21 07:16:36.990963: | c1 17 f4 6c 18 34 4a b3 29 00 00 08 00 00 40 2e Sep 21 07:16:36.990966: | 29 00 00 1c 00 00 40 04 03 84 f4 92 ef b2 e7 23 Sep 21 07:16:36.990968: | 9b 7e 52 93 57 ef f7 39 61 5d 98 0a 00 00 00 1c Sep 21 07:16:36.990970: | 00 00 40 05 d7 27 e1 f7 e4 d6 3e c8 5f 91 e3 a0 Sep 21 07:16:36.990972: | d1 61 d6 62 3e 1e a7 e4 Sep 21 07:16:36.991006: | libevent_free: release ptr-libevent@0x7fc0c8006900 Sep 21 07:16:36.991011: | free_event_entry: release EVENT_RETRANSMIT-pe@0x7fc0c8002b20 Sep 21 07:16:36.991019: | #1 spent 0.173 milliseconds in timer_event_cb() EVENT_RETRANSMIT Sep 21 07:16:36.991025: | stop processing: state #1 connection "north-eastnets/0x2" from 192.1.3.33:500 (in timer_event_cb() at timer.c:557) Sep 21 07:16:43.396831: | timer_event_cb: processing event@0x55edd3560f50 Sep 21 07:16:43.396845: | handling event EVENT_RETRANSMIT for parent state #1 Sep 21 07:16:43.396852: | start processing: state #1 connection "north-eastnets/0x2" from 192.1.3.33:500 (in timer_event_cb() at timer.c:250) Sep 21 07:16:43.396854: | IKEv2 retransmit event Sep 21 07:16:43.396857: | [RE]START processing: state #1 connection "north-eastnets/0x2" from 192.1.3.33:500 (in retransmit_v2_msg() at retry.c:144) Sep 21 07:16:43.396860: | handling event EVENT_RETRANSMIT for 192.1.3.33 "north-eastnets/0x2" #1 attempt 2 of 0 Sep 21 07:16:43.396863: | and parent for 192.1.3.33 "north-eastnets/0x2" #1 keying attempt 1 of 0; retransmit 9 Sep 21 07:16:43.396868: | retransmits: current time 48849.76513; retransmit count 8 exceeds limit? NO; deltatime 12.8 exceeds limit? NO; monotime 12.816225 exceeds limit? NO Sep 21 07:16:43.396871: | event_schedule: new EVENT_RETRANSMIT-pe@0x7fc0c8002b20 Sep 21 07:16:43.396873: | inserting event EVENT_RETRANSMIT, timeout in 12.8 seconds for #1 Sep 21 07:16:43.396876: | libevent_malloc: new ptr-libevent@0x7fc0c8006900 size 128 Sep 21 07:16:43.396879: "north-eastnets/0x2" #1: STATE_PARENT_I1: retransmission; will wait 12.8 seconds for response Sep 21 07:16:43.396884: | sending 440 bytes for EVENT_RETRANSMIT through eth1 from 192.1.2.23:500 to 192.1.3.33:500 (using #1) Sep 21 07:16:43.396886: | 7b 62 d8 c9 e0 c5 68 51 00 00 00 00 00 00 00 00 Sep 21 07:16:43.396887: | 21 20 22 08 00 00 00 00 00 00 01 b8 22 00 00 30 Sep 21 07:16:43.396889: | 00 00 00 2c 01 01 00 04 03 00 00 0c 01 00 00 0c Sep 21 07:16:43.396890: | 80 0e 01 00 03 00 00 08 02 00 00 05 03 00 00 08 Sep 21 07:16:43.396892: | 03 00 00 0c 00 00 00 08 04 00 00 0e 28 00 01 08 Sep 21 07:16:43.396893: | 00 0e 00 00 54 19 a8 6c 38 18 39 f6 32 f7 3e 72 Sep 21 07:16:43.396894: | 93 75 f9 9e 97 79 f9 89 3b 53 a3 5c 3b b8 c1 52 Sep 21 07:16:43.396899: | 0a 12 12 6e b0 86 5d a0 17 1b e7 a7 b3 d4 1a ed Sep 21 07:16:43.396901: | 3d a7 35 79 dc 54 c0 42 33 23 f4 34 2a ae b7 40 Sep 21 07:16:43.396902: | 61 31 29 07 ee af c4 c6 ca 47 70 a7 00 af 3a 73 Sep 21 07:16:43.396903: | 08 c3 b0 fb 06 f6 97 1e 35 52 fa c0 53 33 b3 7c Sep 21 07:16:43.396905: | ca d5 51 14 23 e1 30 c9 1a af f5 68 57 ff aa 77 Sep 21 07:16:43.396906: | f5 ed 86 2b e7 81 43 96 f0 6d 2a 2c b2 a0 01 e8 Sep 21 07:16:43.396908: | a2 45 d2 5c c0 d1 a3 a9 55 bf ec 6a 12 95 99 6d Sep 21 07:16:43.396909: | 6a 67 d4 19 9b c8 f5 fd 91 12 79 80 93 d7 f9 54 Sep 21 07:16:43.396910: | d5 7d 45 92 c8 da e0 3c 62 2b 06 15 62 4c aa 05 Sep 21 07:16:43.396912: | b4 af 90 26 18 02 e5 67 91 bf 5a cc c6 0d f0 44 Sep 21 07:16:43.396913: | 28 f8 b3 1b 99 a5 42 05 b1 aa 42 f6 49 30 b9 c6 Sep 21 07:16:43.396914: | a8 12 2d e9 da 0e c7 86 f8 ee a6 f6 24 98 fc 27 Sep 21 07:16:43.396916: | 47 9a 06 4d 34 68 06 17 c0 3c 94 bc f4 fe 49 bb Sep 21 07:16:43.396917: | 5f 81 7e b9 65 bc ad f0 b3 28 1c 33 bd 83 a3 f9 Sep 21 07:16:43.396919: | b2 96 14 cc 29 00 00 24 d2 95 24 5f 30 57 d8 23 Sep 21 07:16:43.396920: | 7c 0d ae 5f 2e f6 13 45 55 a8 da 55 87 18 f9 71 Sep 21 07:16:43.396921: | c1 17 f4 6c 18 34 4a b3 29 00 00 08 00 00 40 2e Sep 21 07:16:43.396923: | 29 00 00 1c 00 00 40 04 03 84 f4 92 ef b2 e7 23 Sep 21 07:16:43.396924: | 9b 7e 52 93 57 ef f7 39 61 5d 98 0a 00 00 00 1c Sep 21 07:16:43.396926: | 00 00 40 05 d7 27 e1 f7 e4 d6 3e c8 5f 91 e3 a0 Sep 21 07:16:43.396927: | d1 61 d6 62 3e 1e a7 e4 Sep 21 07:16:43.396970: | libevent_free: release ptr-libevent@0x55edd3560f90 Sep 21 07:16:43.396974: | free_event_entry: release EVENT_RETRANSMIT-pe@0x55edd3560f50 Sep 21 07:16:43.396979: | #1 spent 0.127 milliseconds in timer_event_cb() EVENT_RETRANSMIT Sep 21 07:16:43.396982: | stop processing: state #1 connection "north-eastnets/0x2" from 192.1.3.33:500 (in timer_event_cb() at timer.c:557) Sep 21 07:16:50.554828: | processing global timer EVENT_SHUNT_SCAN Sep 21 07:16:50.554844: | expiring aged bare shunts from shunt table Sep 21 07:16:50.554849: | spent 0.00366 milliseconds in global timer EVENT_SHUNT_SCAN