--- east.console.txt 2019-09-20 17:49:12.419187051 +0000 +++ OUTPUT/east.console.txt 2019-09-21 07:19:41.793983446 +0000 @@ -13,7 +13,8 @@ east # east # ipsec stop -Redirecting to: [initsystem] +PATH/bin/nsenter --mount=/run/mountns/east-impair-09-protected-ikev1 --net=/run/netns/east-impair-09-protected-ikev1 --uts=/run/utsns/east-impair-09-protected-ikev1 /bin/bash +whack: is Pluto running? connect() for "/run/pluto/pluto.ctl" failed (111 Connection refused) east # : what should be looked for? east # @@ -71,398 +72,6 @@ | SPI size: 16 (0x10) | number of SPIs: 1 (0x1) | received 'informational' message HASH(1) data ok --- start message (ID) -| next payload type: ISAKMP_NEXT_ID (0x5) -| ***parse ISAKMP Signature Payload: -| next payload type: ISAKMP_NEXT_NONE (0x0) -| length: 278 (0x116) -"westnet-eastnet" #4: Authenticated using RSA --- start message (HASH) -| next payload type: ISAKMP_NEXT_HASH (0x8) -| ***parse ISAKMP Hash Payload: -| next payload type: ISAKMP_NEXT_SA (0x1) -| length: 4 (0x4) -"westnet-eastnet" #4: received 'quick_inI1_outR1' message HASH(1) data is the wrong length (received 0 bytes but expected 32) --- start message (HASH) -| next payload type: ISAKMP_NEXT_HASH (0x8) -| ***parse ISAKMP Hash Payload: -| next payload type: ISAKMP_NEXT_SA (0x1) -| length: 4 (0x4) -"westnet-eastnet" #4: received 'quick_inI1_outR1' message HASH(1) data is the wrong length (received 0 bytes but expected 32) --- start message (HASH) -| next payload type: ISAKMP_NEXT_HASH (0x8) -| ***parse ISAKMP Hash Payload: -| next payload type: ISAKMP_NEXT_D (0xc) -| length: 36 (0x24) -| ***parse ISAKMP Delete Payload: -| next payload type: ISAKMP_NEXT_NONE (0x0) -| length: 28 (0x1c) -| DOI: ISAKMP_DOI_IPSEC (0x1) -| protocol ID: 1 (0x1) -| SPI size: 16 (0x10) -| number of SPIs: 1 (0x1) -| received 'informational' message HASH(1) data ok --- start message (ID) -| next payload type: ISAKMP_NEXT_ID (0x5) -| ***parse ISAKMP Signature Payload: -| next payload type: ISAKMP_NEXT_NONE (0x0) -| length: 278 (0x116) -"westnet-eastnet" #5: Authenticated using RSA --- start message (HASH) -| next payload type: ISAKMP_NEXT_HASH (0x8) -| ***parse ISAKMP Hash Payload: -| next payload type: ISAKMP_NEXT_SA (0x1) -| length: 36 (0x24) -"westnet-eastnet" #5: received 'quick_inI1_outR1' message HASH(1) data does not match computed value --- start message (HASH) -| next payload type: ISAKMP_NEXT_HASH (0x8) -| ***parse ISAKMP Hash Payload: -| next payload type: ISAKMP_NEXT_SA (0x1) -| length: 36 (0x24) -"westnet-eastnet" #5: received 'quick_inI1_outR1' message HASH(1) data does not match computed value --- start message (HASH) -| next payload type: ISAKMP_NEXT_HASH (0x8) -| ***parse ISAKMP Hash Payload: -| next payload type: ISAKMP_NEXT_D (0xc) -| length: 36 (0x24) -| ***parse ISAKMP Delete Payload: -| next payload type: ISAKMP_NEXT_NONE (0x0) -| length: 28 (0x1c) -| DOI: ISAKMP_DOI_IPSEC (0x1) -| protocol ID: 1 (0x1) -| SPI size: 16 (0x10) -| number of SPIs: 1 (0x1) -| received 'informational' message HASH(1) data ok --- start message (ID) -| next payload type: ISAKMP_NEXT_ID (0x5) -| ***parse ISAKMP Signature Payload: -| next payload type: ISAKMP_NEXT_NONE (0x0) -| length: 278 (0x116) -"westnet-eastnet" #6: Authenticated using RSA --- start message (HASH) -| next payload type: ISAKMP_NEXT_HASH (0x8) -| ***parse ISAKMP Hash Payload: -| next payload type: ISAKMP_NEXT_SA (0x1) -| length: 36 (0x24) -| received 'quick_inI1_outR1' message HASH(1) data ok --- start message (HASH) -| next payload type: ISAKMP_NEXT_HASH (0x8) -| ***parse ISAKMP Hash Payload: -| next payload type: ISAKMP_NEXT_NONE (0x0) -| length: 36 (0x24) -| received 'quick_inI2' message HASH(3) data ok --- start message (D) -| next payload type: ISAKMP_NEXT_D (0xc) -| ***parse ISAKMP Delete Payload: -| next payload type: ISAKMP_NEXT_NONE (0x0) -| length: 16 (0x10) -| DOI: ISAKMP_DOI_IPSEC (0x1) -| protocol ID: 3 (0x3) -| SPI size: 4 (0x4) -| number of SPIs: 1 (0x1) -"westnet-eastnet" #6: message for STATE_INFO_PROTECTED is missing payloads ISAKMP_NEXT_HASH --- start message (D) -| next payload type: ISAKMP_NEXT_D (0xc) -| ***parse ISAKMP Delete Payload: -| next payload type: ISAKMP_NEXT_NONE (0x0) -| length: 28 (0x1c) -| DOI: ISAKMP_DOI_IPSEC (0x1) -| protocol ID: 1 (0x1) -| SPI size: 16 (0x10) -| number of SPIs: 1 (0x1) -"westnet-eastnet" #6: message for STATE_INFO_PROTECTED is missing payloads ISAKMP_NEXT_HASH --- start message (ID) -| next payload type: ISAKMP_NEXT_ID (0x5) -| ***parse ISAKMP Signature Payload: -| next payload type: ISAKMP_NEXT_NONE (0x0) -| length: 278 (0x116) -"westnet-eastnet" #8: Authenticated using RSA --- start message (HASH) -| next payload type: ISAKMP_NEXT_HASH (0x8) -| ***parse ISAKMP Hash Payload: -| next payload type: ISAKMP_NEXT_SA (0x1) -| length: 36 (0x24) -| received 'quick_inI1_outR1' message HASH(1) data ok --- start message (HASH) -| next payload type: ISAKMP_NEXT_HASH (0x8) -| ***parse ISAKMP Hash Payload: -| next payload type: ISAKMP_NEXT_NONE (0x0) -| length: 36 (0x24) -| received 'quick_inI2' message HASH(3) data ok --- start message (HASH) -| next payload type: ISAKMP_NEXT_HASH (0x8) -| ***parse ISAKMP Hash Payload: -| next payload type: ISAKMP_NEXT_D (0xc) -| length: 4 (0x4) -| ***parse ISAKMP Delete Payload: -| next payload type: ISAKMP_NEXT_NONE (0x0) -| length: 16 (0x10) -| DOI: ISAKMP_DOI_IPSEC (0x1) -| protocol ID: 3 (0x3) -| SPI size: 4 (0x4) -| number of SPIs: 1 (0x1) -"westnet-eastnet" #8: received 'informational' message HASH(1) data is the wrong length (received 0 bytes but expected 32) --- start message (HASH) -| next payload type: ISAKMP_NEXT_HASH (0x8) -| ***parse ISAKMP Hash Payload: -| next payload type: ISAKMP_NEXT_D (0xc) -| length: 4 (0x4) -| ***parse ISAKMP Delete Payload: -| next payload type: ISAKMP_NEXT_NONE (0x0) -| length: 28 (0x1c) -| DOI: ISAKMP_DOI_IPSEC (0x1) -| protocol ID: 1 (0x1) -| SPI size: 16 (0x10) -| number of SPIs: 1 (0x1) -"westnet-eastnet" #8: received 'informational' message HASH(1) data is the wrong length (received 0 bytes but expected 32) --- start message (ID) -| next payload type: ISAKMP_NEXT_ID (0x5) -| ***parse ISAKMP Signature Payload: -| next payload type: ISAKMP_NEXT_NONE (0x0) -| length: 278 (0x116) -"westnet-eastnet" #10: Authenticated using RSA --- start message (HASH) -| next payload type: ISAKMP_NEXT_HASH (0x8) -| ***parse ISAKMP Hash Payload: -| next payload type: ISAKMP_NEXT_SA (0x1) -| length: 36 (0x24) -| received 'quick_inI1_outR1' message HASH(1) data ok --- start message (HASH) -| next payload type: ISAKMP_NEXT_HASH (0x8) -| ***parse ISAKMP Hash Payload: -| next payload type: ISAKMP_NEXT_NONE (0x0) -| length: 36 (0x24) -| received 'quick_inI2' message HASH(3) data ok --- start message (HASH) -| next payload type: ISAKMP_NEXT_HASH (0x8) -| ***parse ISAKMP Hash Payload: -| next payload type: ISAKMP_NEXT_D (0xc) -| length: 36 (0x24) -| ***parse ISAKMP Delete Payload: -| next payload type: ISAKMP_NEXT_NONE (0x0) -| length: 16 (0x10) -| DOI: ISAKMP_DOI_IPSEC (0x1) -| protocol ID: 3 (0x3) -| SPI size: 4 (0x4) -| number of SPIs: 1 (0x1) -"westnet-eastnet" #10: received 'informational' message HASH(1) data does not match computed value --- start message (HASH) -| next payload type: ISAKMP_NEXT_HASH (0x8) -| ***parse ISAKMP Hash Payload: -| next payload type: ISAKMP_NEXT_D (0xc) -| length: 36 (0x24) -| ***parse ISAKMP Delete Payload: -| next payload type: ISAKMP_NEXT_NONE (0x0) -| length: 28 (0x1c) -| DOI: ISAKMP_DOI_IPSEC (0x1) -| protocol ID: 1 (0x1) -| SPI size: 16 (0x10) -| number of SPIs: 1 (0x1) -"westnet-eastnet" #10: received 'informational' message HASH(1) data does not match computed value --- start message (ID) -| next payload type: ISAKMP_NEXT_ID (0x5) -| ***parse ISAKMP Signature Payload: -| next payload type: ISAKMP_NEXT_NONE (0x0) -| length: 278 (0x116) -"westnet-eastnet" #12: Authenticated using RSA --- start message (HASH) -| next payload type: ISAKMP_NEXT_HASH (0x8) -| ***parse ISAKMP Hash Payload: -| next payload type: ISAKMP_NEXT_SA (0x1) -| length: 36 (0x24) -| received 'quick_inI1_outR1' message HASH(1) data ok --- start message (HASH) -| next payload type: ISAKMP_NEXT_HASH (0x8) -| ***parse ISAKMP Hash Payload: -| next payload type: ISAKMP_NEXT_NONE (0x0) -| length: 36 (0x24) -| received 'quick_inI2' message HASH(3) data ok --- start message (HASH) -| next payload type: ISAKMP_NEXT_HASH (0x8) -| ***parse ISAKMP Hash Payload: -| next payload type: ISAKMP_NEXT_D (0xc) -| length: 36 (0x24) -| ***parse ISAKMP Delete Payload: -| next payload type: ISAKMP_NEXT_NONE (0x0) -| length: 16 (0x10) -| DOI: ISAKMP_DOI_IPSEC (0x1) -| protocol ID: 3 (0x3) -| SPI size: 4 (0x4) -| number of SPIs: 1 (0x1) -| received 'informational' message HASH(1) data ok --- start message (HASH) -| next payload type: ISAKMP_NEXT_HASH (0x8) -| Informational Exchange is for an unknown (expired?) SA with MSGID:0x.... --- start message (ID) -| next payload type: ISAKMP_NEXT_ID (0x5) -| ***parse ISAKMP Signature Payload: -| next payload type: ISAKMP_NEXT_NONE (0x0) -| length: 278 (0x116) -"westnet-eastnet" #14: Authenticated using RSA --- start message (HASH) -| next payload type: ISAKMP_NEXT_HASH (0x8) -| ***parse ISAKMP Hash Payload: -| next payload type: ISAKMP_NEXT_SA (0x1) -| length: 36 (0x24) -| received 'quick_inI1_outR1' message HASH(1) data ok --- start message (HASH) -| next payload type: ISAKMP_NEXT_HASH (0x8) -| ***parse ISAKMP Hash Payload: -| next payload type: ISAKMP_NEXT_NONE (0x0) -| length: 36 (0x24) -| received 'quick_inI2' message HASH(3) data ok --- start message (HASH) -| next payload type: ISAKMP_NEXT_HASH (0x8) -| ***parse ISAKMP Hash Payload: -| next payload type: ISAKMP_NEXT_D (0xc) -| length: 36 (0x24) -| ***parse ISAKMP Delete Payload: -| next payload type: ISAKMP_NEXT_NONE (0x0) -| length: 16 (0x10) -| DOI: ISAKMP_DOI_IPSEC (0x1) -| protocol ID: 3 (0x3) -| SPI size: 4 (0x4) -| number of SPIs: 1 (0x1) -| received 'informational' message HASH(1) data ok --- start message (HASH) -| next payload type: ISAKMP_NEXT_HASH (0x8) -| Informational Exchange is for an unknown (expired?) SA with MSGID:0x.... --- start message (ID) -| next payload type: ISAKMP_NEXT_ID (0x5) -| ***parse ISAKMP Signature Payload: -| next payload type: ISAKMP_NEXT_NONE (0x0) -| length: 278 (0x116) -"westnet-eastnet" #16: Authenticated using RSA --- start message (HASH) -| next payload type: ISAKMP_NEXT_HASH (0x8) -| ***parse ISAKMP Hash Payload: -| next payload type: ISAKMP_NEXT_SA (0x1) -| length: 36 (0x24) -| received 'quick_inI1_outR1' message HASH(1) data ok --- start message (HASH) -| next payload type: ISAKMP_NEXT_HASH (0x8) -| ***parse ISAKMP Hash Payload: -| next payload type: ISAKMP_NEXT_NONE (0x0) -| length: 36 (0x24) -| received 'quick_inI2' message HASH(3) data ok --- start message (HASH) -| next payload type: ISAKMP_NEXT_HASH (0x8) -| ***parse ISAKMP Hash Payload: -| next payload type: ISAKMP_NEXT_D (0xc) -| length: 36 (0x24) -| ***parse ISAKMP Delete Payload: -| next payload type: ISAKMP_NEXT_NONE (0x0) -| length: 16 (0x10) -| DOI: ISAKMP_DOI_IPSEC (0x1) -| protocol ID: 3 (0x3) -| SPI size: 4 (0x4) -| number of SPIs: 1 (0x1) -| received 'informational' message HASH(1) data ok --- start message (HASH) -| next payload type: ISAKMP_NEXT_HASH (0x8) -| Informational Exchange is for an unknown (expired?) SA with MSGID:0x.... --- start message (ID) -| next payload type: ISAKMP_NEXT_ID (0x5) -| ***parse ISAKMP Signature Payload: -| next payload type: ISAKMP_NEXT_NONE (0x0) -| length: 278 (0x116) -"westnet-eastnet" #18: Authenticated using RSA --- start message (HASH) -| next payload type: ISAKMP_NEXT_HASH (0x8) -| ***parse ISAKMP Hash Payload: -| next payload type: ISAKMP_NEXT_SA (0x1) -| length: 36 (0x24) -| received 'quick_inI1_outR1' message HASH(1) data ok --- start message (HASH) -| next payload type: ISAKMP_NEXT_HASH (0x8) -| ***parse ISAKMP Hash Payload: -| next payload type: ISAKMP_NEXT_NONE (0x0) -| length: 36 (0x24) -| received 'quick_inI2' message HASH(3) data ok --- start message (HASH) -| next payload type: ISAKMP_NEXT_HASH (0x8) -| ***parse ISAKMP Hash Payload: -| next payload type: ISAKMP_NEXT_D (0xc) -| length: 36 (0x24) -| ***parse ISAKMP Delete Payload: -| next payload type: ISAKMP_NEXT_NONE (0x0) -| length: 16 (0x10) -| DOI: ISAKMP_DOI_IPSEC (0x1) -| protocol ID: 3 (0x3) -| SPI size: 4 (0x4) -| number of SPIs: 1 (0x1) -| received 'informational' message HASH(1) data ok --- start message (HASH) -| next payload type: ISAKMP_NEXT_HASH (0x8) -| Informational Exchange is for an unknown (expired?) SA with MSGID:0x.... --- start message (ID) -| next payload type: ISAKMP_NEXT_ID (0x5) -| ***parse ISAKMP Signature Payload: -| next payload type: ISAKMP_NEXT_NONE (0x0) -| length: 278 (0x116) -"westnet-eastnet" #20: Authenticated using RSA --- start message (HASH) -| next payload type: ISAKMP_NEXT_HASH (0x8) -| ***parse ISAKMP Hash Payload: -| next payload type: ISAKMP_NEXT_SA (0x1) -| length: 36 (0x24) -| received 'quick_inI1_outR1' message HASH(1) data ok --- start message (HASH) -| next payload type: ISAKMP_NEXT_HASH (0x8) -| ***parse ISAKMP Hash Payload: -| next payload type: ISAKMP_NEXT_NONE (0x0) -| length: 36 (0x24) -| received 'quick_inI2' message HASH(3) data ok --- start message (HASH) -| next payload type: ISAKMP_NEXT_HASH (0x8) -| ***parse ISAKMP Hash Payload: -| next payload type: ISAKMP_NEXT_D (0xc) -| length: 36 (0x24) -| ***parse ISAKMP Delete Payload: -| next payload type: ISAKMP_NEXT_NONE (0x0) -| length: 16 (0x10) -| DOI: ISAKMP_DOI_IPSEC (0x1) -| protocol ID: 3 (0x3) -| SPI size: 4 (0x4) -| number of SPIs: 1 (0x1) -| received 'informational' message HASH(1) data ok --- start message (HASH) -| next payload type: ISAKMP_NEXT_HASH (0x8) -| Informational Exchange is for an unknown (expired?) SA with MSGID:0x.... --- start message (ID) -| next payload type: ISAKMP_NEXT_ID (0x5) -| ***parse ISAKMP Signature Payload: -| next payload type: ISAKMP_NEXT_NONE (0x0) -| length: 278 (0x116) -"westnet-eastnet" #22: Authenticated using RSA --- start message (HASH) -| next payload type: ISAKMP_NEXT_HASH (0x8) -| ***parse ISAKMP Hash Payload: -| next payload type: ISAKMP_NEXT_SA (0x1) -| length: 36 (0x24) -| received 'quick_inI1_outR1' message HASH(1) data ok --- start message (HASH) -| next payload type: ISAKMP_NEXT_HASH (0x8) -| ***parse ISAKMP Hash Payload: -| next payload type: ISAKMP_NEXT_NONE (0x0) -| length: 36 (0x24) -| received 'quick_inI2' message HASH(3) data ok --- start message (HASH) -| next payload type: ISAKMP_NEXT_HASH (0x8) -| ***parse ISAKMP Hash Payload: -| next payload type: ISAKMP_NEXT_D (0xc) -| length: 36 (0x24) -| ***parse ISAKMP Delete Payload: -| next payload type: ISAKMP_NEXT_NONE (0x0) -| length: 16 (0x10) -| DOI: ISAKMP_DOI_IPSEC (0x1) -| protocol ID: 3 (0x3) -| SPI size: 4 (0x4) -| number of SPIs: 1 (0x1) -| received 'informational' message HASH(1) data ok --- start message (HASH) -| next payload type: ISAKMP_NEXT_HASH (0x8) -| Informational Exchange is for an unknown (expired?) SA with MSGID:0x.... east # ../bin/check-for-core.sh east #