| newref logger@0x564b9e277bb8(0->1) (in main() at plutomain.c:1591)
| delref logger@0x564b9e277bb8(1->0) (in main() at plutomain.c:1592)
| delref fd@NULL (in free_logger() at log.c:853)
| delref fd@NULL (in free_logger() at log.c:854)
NSS DB directory: sql:/var/lib/ipsec/nss
Initializing NSS
Opening NSS database "sql:/var/lib/ipsec/nss" read-only
FIPS Mode: NO
NSS crypto library initialized
FIPS mode disabled for pluto daemon
FIPS HMAC integrity support [disabled]
libcap-ng support [enabled]
Linux audit support [enabled]
Linux audit activated
Starting Pluto (Libreswan Version v4.1-88-gf1d1933837ef-main IKEv2 IKEv1 XFRM(netkey) XFRMI esp-hw-offload FORK PTHREAD_SETSCHEDPRIO NSS (IPsec profile) (NSS-PRF) DNSSEC LABELED_IPSEC (SELINUX) SECCOMP LIBCAP_NG LINUX_AUDIT AUTH_PAM NETWORKMANAGER CURL(non-NSS)) pid:2116446
core dump dir: /tmp
secrets file: /etc/ipsec.secrets
leak-detective enabled
NSS crypto [enabled]
XAUTH PAM support [enabled]
| libevent is using pluto's memory allocator
Initializing libevent in pthreads mode: headers: 2.1.8-stable (2010800); library: 2.1.8-stable (2010800)
| libevent_malloc: newref ptr-libevent@0x564b9e27c6b8 size 40
| libevent_malloc: newref ptr-libevent@0x564b9e2f1078 size 40
| libevent_malloc: newref ptr-libevent@0x564b9e2fd618 size 40
| creating event base
| libevent_malloc: newref ptr-libevent@0x564b9e2fd258 size 56
| libevent_malloc: newref ptr-libevent@0x564b9e2f3bb8 size 664
| libevent_malloc: newref ptr-libevent@0x564b9e32a548 size 24
| libevent_malloc: newref ptr-libevent@0x564b9e32a598 size 384
| libevent_malloc: newref ptr-libevent@0x564b9e32a748 size 16
| libevent_malloc: newref ptr-libevent@0x564b9e2fd598 size 40
| libevent_malloc: newref ptr-libevent@0x564b9e2fd518 size 48
| libevent_realloc: newref ptr-libevent@0x564b9e320d18 size 256
| libevent_malloc: newref ptr-libevent@0x564b9e32a788 size 16
| libevent_free: delref ptr-libevent@0x564b9e2fd258
| libevent initialized
| libevent_realloc: newref ptr-libevent@0x564b9e2fd258 size 64
| global periodic timer EVENT_RESET_LOG_RATE_LIMIT enabled with interval of 3600 seconds
| init_nat_traversal() initialized with keep_alive=0s
NAT-Traversal support  [enabled]
| global one-shot timer EVENT_NAT_T_KEEPALIVE initialized
| global one-shot timer EVENT_FREE_ROOT_CERTS initialized
| global periodic timer EVENT_REINIT_SECRET enabled with interval of 3600 seconds
| checking IKEv1 state table
|   MAIN_R0: category: half-open IKE SA; flags: 0:
|     -> MAIN_R1 EVENT_SO_DISCARD (main_inI1_outR1)
|   MAIN_I1: category: half-open IKE SA; flags: 0:
|     -> MAIN_I2 EVENT_RETRANSMIT (main_inR1_outI2)
|   MAIN_R1: category: open IKE SA; flags: 0:
|     -> MAIN_R2 EVENT_RETRANSMIT (main_inI2_outR2)
|     -> MAIN_R1 EVENT_RETRANSMIT (unexpected)
|     -> MAIN_R1 EVENT_RETRANSMIT (unexpected)
|   MAIN_I2: category: open IKE SA; flags: 0:
|     -> MAIN_I3 EVENT_RETRANSMIT (main_inR2_outI3)
|     -> MAIN_I2 EVENT_RETRANSMIT (unexpected)
|     -> MAIN_I2 EVENT_RETRANSMIT (unexpected)
|   MAIN_R2: category: open IKE SA; flags: 0:
|     -> MAIN_R3 EVENT_SA_REPLACE (main_inI3_outR3)
|     -> MAIN_R3 EVENT_SA_REPLACE (main_inI3_outR3)
|     -> MAIN_R2 EVENT_SA_REPLACE (unexpected)
|   MAIN_I3: category: open IKE SA; flags: 0:
|     -> MAIN_I4 EVENT_SA_REPLACE (main_inR3)
|     -> MAIN_I4 EVENT_SA_REPLACE (main_inR3)
|     -> MAIN_I3 EVENT_SA_REPLACE (unexpected)
|   MAIN_R3: category: established IKE SA; flags: 0:
|     -> MAIN_R3 EVENT_NULL (unexpected)
|   MAIN_I4: category: established IKE SA; flags: 0:
|     -> MAIN_I4 EVENT_NULL (unexpected)
|   AGGR_R0: category: half-open IKE SA; flags: 0:
|     -> AGGR_R1 EVENT_SO_DISCARD (aggr_inI1_outR1)
|   AGGR_I1: category: half-open IKE SA; flags: 0:
|     -> AGGR_I2 EVENT_SA_REPLACE (aggr_inR1_outI2)
|     -> AGGR_I2 EVENT_SA_REPLACE (aggr_inR1_outI2)
|   AGGR_R1: category: open IKE SA; flags: 0:
|     -> AGGR_R2 EVENT_SA_REPLACE (aggr_inI2)
|     -> AGGR_R2 EVENT_SA_REPLACE (aggr_inI2)
|   AGGR_I2: category: established IKE SA; flags: 0:
|     -> AGGR_I2 EVENT_NULL (unexpected)
|   AGGR_R2: category: established IKE SA; flags: 0:
|     -> AGGR_R2 EVENT_NULL (unexpected)
|   QUICK_R0: category: established CHILD SA; flags: 0:
|     -> QUICK_R1 EVENT_RETRANSMIT (quick_inI1_outR1)
|   QUICK_I1: category: established CHILD SA; flags: 0:
|     -> QUICK_I2 EVENT_SA_REPLACE (quick_inR1_outI2)
|   QUICK_R1: category: established CHILD SA; flags: 0:
|     -> QUICK_R2 EVENT_SA_REPLACE (quick_inI2)
|   QUICK_I2: category: established CHILD SA; flags: 0:
|     -> QUICK_I2 EVENT_NULL (unexpected)
|   QUICK_R2: category: established CHILD SA; flags: 0:
|     -> QUICK_R2 EVENT_NULL (unexpected)
|   INFO: category: informational; flags: 0:
|     -> INFO EVENT_NULL (informational)
|   INFO_PROTECTED: category: informational; flags: 0:
|     -> INFO_PROTECTED EVENT_NULL (informational)
|   XAUTH_R0: category: established IKE SA; flags: 0:
|     -> XAUTH_R1 EVENT_NULL (xauth_inR0)
|   XAUTH_R1: category: established IKE SA; flags: 0:
|     -> MAIN_R3 EVENT_SA_REPLACE (xauth_inR1)
|   MODE_CFG_R0: category: informational; flags: 0:
|     -> MODE_CFG_R1 EVENT_SA_REPLACE (modecfg_inR0)
|   MODE_CFG_R1: category: established IKE SA; flags: 0:
|     -> MODE_CFG_R2 EVENT_SA_REPLACE (modecfg_inR1)
|   MODE_CFG_R2: category: established IKE SA; flags: 0:
|     -> MODE_CFG_R2 EVENT_NULL (unexpected)
|   MODE_CFG_I1: category: established IKE SA; flags: 0:
|     -> MAIN_I4 EVENT_SA_REPLACE (modecfg_inR1)
|   XAUTH_I0: category: established IKE SA; flags: 0:
|     -> XAUTH_I1 EVENT_RETRANSMIT (xauth_inI0)
|   XAUTH_I1: category: established IKE SA; flags: 0:
|     -> MAIN_I4 EVENT_RETRANSMIT (xauth_inI1)
| checking IKEv2 state table
|   V2_REKEY_IKE_I0: category: established IKE SA; flags: 0:
|     -> V2_REKEY_IKE_I1 EVENT_RETRANSMIT send-request (Initiate CREATE_CHILD_SA IKE Rekey)
|   V2_REKEY_CHILD_I0: category: established IKE SA; flags: 0:
|     -> V2_REKEY_CHILD_I1 EVENT_RETRANSMIT send-request (Initiate CREATE_CHILD_SA IPsec Rekey SA)
|   V2_NEW_CHILD_I0: category: established IKE SA; flags: 0:
|     -> V2_NEW_CHILD_I1 EVENT_RETRANSMIT send-request (Initiate CREATE_CHILD_SA IPsec SA)
|   PARENT_I0: category: ignore; flags: 0:
|     -> PARENT_I1 EVENT_RETRANSMIT send-request (initiate IKE_SA_INIT)
|   PARENT_I1: category: half-open IKE SA; flags: 0:
|     -> PARENT_I0 EVENT_SO_DISCARD (received anti-DDOS COOKIE notify response; resending IKE_SA_INIT request with cookie payload added)
|     -> PARENT_I0 EVENT_SO_DISCARD (received IKE_SA_INIT INVALID_KE_PAYLOAD notify response; resending IKE_SA_INIT with new KE payload)
|     -> IKESA_DEL EVENT_v2_REDIRECT (received REDIRECT notify response; resending IKE_SA_INIT request to new destination)
|     -> PARENT_I2 EVENT_RETRANSMIT send-request (Initiator: process IKE_SA_INIT reply, initiate IKE_AUTH or IKE_INTERMEDIATE)
|   PARENT_I2: category: open IKE SA; flags: 0:
|     -> PARENT_I2 EVENT_RETRANSMIT send-request (Initiator: process IKE_INTERMEDIATE reply, initiate IKE_AUTH or IKE_INTERMEDIATE)
|     -> PARENT_I2 EVENT_NULL (Initiator: process INVALID_SYNTAX AUTH notification)
|     -> PARENT_I2 EVENT_NULL (Initiator: process AUTHENTICATION_FAILED AUTH notification)
|     -> PARENT_I2 EVENT_NULL (Initiator: process UNSUPPORTED_CRITICAL_PAYLOAD AUTH notification)
|     -> ESTABLISHED_CHILD_SA EVENT_SA_REPLACE (Initiator: process IKE_AUTH response)
|     -> PARENT_I2 EVENT_NULL (IKE SA: process IKE_AUTH response containing unknown notification)
|   PARENT_R0: category: half-open IKE SA; flags: 0:
|     -> PARENT_R1 EVENT_SO_DISCARD send-response (Respond to IKE_SA_INIT)
|   PARENT_R1: category: half-open IKE SA; flags: 0:
|     -> PARENT_R1 EVENT_SA_REPLACE send-response (Responder: process IKE_AUTH request (no SKEYSEED))
|     -> PARENT_R1 EVENT_SA_REPLACE send-response (Responder: process IKE_INTERMEDIATE request (no SKEYSEED))
|     -> PARENT_R1 EVENT_SA_REPLACE send-response (Responder: process IKE_INTERMEDIATE request (with SKEYSEED))
|     -> ESTABLISHED_CHILD_SA EVENT_SA_REPLACE send-response (Responder: process IKE_AUTH request)
|   V2_REKEY_IKE_R0: category: established IKE SA; flags: 0:
|     -> ESTABLISHED_IKE_SA EVENT_SA_REPLACE send-response (Respond to CREATE_CHILD_SA IKE Rekey)
|   V2_REKEY_IKE_I1: category: established IKE SA; flags: 0:
|     -> ESTABLISHED_IKE_SA EVENT_SA_REPLACE (Process CREATE_CHILD_SA IKE Rekey Response)
|   V2_NEW_CHILD_I1: category: established IKE SA; flags: 0:
|     -> ESTABLISHED_CHILD_SA EVENT_SA_REPLACE (Process CREATE_CHILD_SA IPsec SA Response)
|   V2_REKEY_CHILD_R0: category: established IKE SA; flags: 0:
|     -> ESTABLISHED_CHILD_SA EVENT_SA_REPLACE send-response (Respond to CREATE_CHILD_SA rekey CHILD SA request)
|   V2_NEW_CHILD_R0: category: established IKE SA; flags: 0:
|     -> ESTABLISHED_CHILD_SA EVENT_SA_REPLACE send-response (Respond to CREATE_CHILD_SA IPsec SA Request)
|   ESTABLISHED_IKE_SA: category: established IKE SA; flags: 0:
|     -> ESTABLISHED_IKE_SA EVENT_RETAIN send-response (Informational Request (liveness probe))
|     -> ESTABLISHED_IKE_SA EVENT_RETAIN (Informational Response (liveness probe))
|     -> ESTABLISHED_IKE_SA EVENT_RETAIN send-response (Informational Request)
|     -> ESTABLISHED_IKE_SA EVENT_RETAIN (Informational Response)
|   IKESA_DEL: category: established IKE SA; flags: 0:
|     -> IKESA_DEL EVENT_RETAIN (IKE_SA_DEL: process INFORMATIONAL)
|   CHILDSA_DEL: category: informational; flags: 0:
|     -> CHILDSA_DEL EVENT_RETAIN (IKE_SA_DEL: process INFORMATIONAL)
| global one-shot timer EVENT_REVIVE_CONNS initialized
| global periodic timer EVENT_PENDING_DDNS enabled with interval of 60 seconds
| global periodic timer EVENT_PENDING_PHASE2 enabled with interval of 120 seconds
Encryption algorithms:
  AES_CCM_16         {256,192,*128} IKEv1:     ESP     IKEv2:     ESP     FIPS              aes_ccm, aes_ccm_c
  AES_CCM_12         {256,192,*128} IKEv1:     ESP     IKEv2:     ESP     FIPS              aes_ccm_b
  AES_CCM_8          {256,192,*128} IKEv1:     ESP     IKEv2:     ESP     FIPS              aes_ccm_a
  3DES_CBC           [*192]         IKEv1: IKE ESP     IKEv2: IKE ESP     FIPS NSS(CBC)     3des
  CAMELLIA_CTR       {256,192,*128} IKEv1:     ESP     IKEv2:     ESP                      
  CAMELLIA_CBC       {256,192,*128} IKEv1: IKE ESP     IKEv2: IKE ESP          NSS(CBC)     camellia
  AES_GCM_16         {256,192,*128} IKEv1:     ESP     IKEv2: IKE ESP     FIPS NSS(GCM)     aes_gcm, aes_gcm_c
  AES_GCM_12         {256,192,*128} IKEv1:     ESP     IKEv2: IKE ESP     FIPS NSS(GCM)     aes_gcm_b
  AES_GCM_8          {256,192,*128} IKEv1:     ESP     IKEv2: IKE ESP     FIPS NSS(GCM)     aes_gcm_a
  AES_CTR            {256,192,*128} IKEv1: IKE ESP     IKEv2: IKE ESP     FIPS NSS(CTR)     aesctr
  AES_CBC            {256,192,*128} IKEv1: IKE ESP     IKEv2: IKE ESP     FIPS NSS(CBC)     aes
  NULL_AUTH_AES_GMAC {256,192,*128} IKEv1:     ESP     IKEv2:     ESP     FIPS              aes_gmac
  NULL               []             IKEv1:     ESP     IKEv2:     ESP                      
  CHACHA20_POLY1305  [*256]         IKEv1:             IKEv2: IKE ESP          NSS(AEAD)    chacha20poly1305
Hash algorithms:
  MD5                               IKEv1: IKE         IKEv2:                  NSS         
  SHA1                              IKEv1: IKE         IKEv2: IKE         FIPS NSS          sha
  SHA2_256                          IKEv1: IKE         IKEv2: IKE         FIPS NSS          sha2, sha256
  SHA2_384                          IKEv1: IKE         IKEv2: IKE         FIPS NSS          sha384
  SHA2_512                          IKEv1: IKE         IKEv2: IKE         FIPS NSS          sha512
PRF algorithms:
  HMAC_MD5                          IKEv1: IKE         IKEv2: IKE              native(HMAC) md5
  HMAC_SHA1                         IKEv1: IKE         IKEv2: IKE         FIPS NSS          sha, sha1
  HMAC_SHA2_256                     IKEv1: IKE         IKEv2: IKE         FIPS NSS          sha2, sha256, sha2_256
  HMAC_SHA2_384                     IKEv1: IKE         IKEv2: IKE         FIPS NSS          sha384, sha2_384
  HMAC_SHA2_512                     IKEv1: IKE         IKEv2: IKE         FIPS NSS          sha512, sha2_512
  AES_XCBC                          IKEv1:             IKEv2: IKE              native(XCBC) aes128_xcbc
Integrity algorithms:
  HMAC_MD5_96                       IKEv1: IKE ESP AH  IKEv2: IKE ESP AH       native(HMAC) md5, hmac_md5
  HMAC_SHA1_96                      IKEv1: IKE ESP AH  IKEv2: IKE ESP AH  FIPS NSS          sha, sha1, sha1_96, hmac_sha1
  HMAC_SHA2_512_256                 IKEv1: IKE ESP AH  IKEv2: IKE ESP AH  FIPS NSS          sha512, sha2_512, sha2_512_256, hmac_sha2_512
  HMAC_SHA2_384_192                 IKEv1: IKE ESP AH  IKEv2: IKE ESP AH  FIPS NSS          sha384, sha2_384, sha2_384_192, hmac_sha2_384
  HMAC_SHA2_256_128                 IKEv1: IKE ESP AH  IKEv2: IKE ESP AH  FIPS NSS          sha2, sha256, sha2_256, sha2_256_128, hmac_sha2_256
  HMAC_SHA2_256_TRUNCBUG            IKEv1:     ESP AH  IKEv2:         AH                   
  AES_XCBC_96                       IKEv1:     ESP AH  IKEv2: IKE ESP AH       native(XCBC) aes_xcbc, aes128_xcbc, aes128_xcbc_96
  AES_CMAC_96                       IKEv1:     ESP AH  IKEv2:     ESP AH  FIPS              aes_cmac
  NONE                              IKEv1:     ESP     IKEv2: IKE ESP     FIPS              null
DH algorithms:
  NONE                              IKEv1:             IKEv2: IKE ESP AH  FIPS NSS(MODP)    null, dh0
  MODP1536                          IKEv1: IKE ESP AH  IKEv2: IKE ESP AH       NSS(MODP)    dh5
  MODP2048                          IKEv1: IKE ESP AH  IKEv2: IKE ESP AH  FIPS NSS(MODP)    dh14
  MODP3072                          IKEv1: IKE ESP AH  IKEv2: IKE ESP AH  FIPS NSS(MODP)    dh15
  MODP4096                          IKEv1: IKE ESP AH  IKEv2: IKE ESP AH  FIPS NSS(MODP)    dh16
  MODP6144                          IKEv1: IKE ESP AH  IKEv2: IKE ESP AH  FIPS NSS(MODP)    dh17
  MODP8192                          IKEv1: IKE ESP AH  IKEv2: IKE ESP AH  FIPS NSS(MODP)    dh18
  DH19                              IKEv1: IKE         IKEv2: IKE ESP AH  FIPS NSS(ECP)     ecp_256, ecp256
  DH20                              IKEv1: IKE         IKEv2: IKE ESP AH  FIPS NSS(ECP)     ecp_384, ecp384
  DH21                              IKEv1: IKE         IKEv2: IKE ESP AH  FIPS NSS(ECP)     ecp_521, ecp521
  DH31                              IKEv1: IKE         IKEv2: IKE ESP AH       NSS(ECP)     curve25519
testing CAMELLIA_CBC:
  Camellia: 16 bytes with 128-bit key
  Camellia: 16 bytes with 128-bit key
  Camellia: 16 bytes with 256-bit key
  Camellia: 16 bytes with 256-bit key
testing AES_GCM_16:
  empty string
  one block
  two blocks
  two blocks with associated data
testing AES_CTR:
  Encrypting 16 octets using AES-CTR with 128-bit key
  Encrypting 32 octets using AES-CTR with 128-bit key
  Encrypting 36 octets using AES-CTR with 128-bit key
  Encrypting 16 octets using AES-CTR with 192-bit key
  Encrypting 32 octets using AES-CTR with 192-bit key
  Encrypting 36 octets using AES-CTR with 192-bit key
  Encrypting 16 octets using AES-CTR with 256-bit key
  Encrypting 32 octets using AES-CTR with 256-bit key
  Encrypting 36 octets using AES-CTR with 256-bit key
testing AES_CBC:
  Encrypting 16 bytes (1 block) using AES-CBC with 128-bit key
  Encrypting 32 bytes (2 blocks) using AES-CBC with 128-bit key
  Encrypting 48 bytes (3 blocks) using AES-CBC with 128-bit key
  Encrypting 64 bytes (4 blocks) using AES-CBC with 128-bit key
testing AES_XCBC:
  RFC 3566 Test Case 1: AES-XCBC-MAC-96 with 0-byte input
  RFC 3566 Test Case 2: AES-XCBC-MAC-96 with 3-byte input
  RFC 3566 Test Case 3: AES-XCBC-MAC-96 with 16-byte input
  RFC 3566 Test Case 4: AES-XCBC-MAC-96 with 20-byte input
  RFC 3566 Test Case 5: AES-XCBC-MAC-96 with 32-byte input
  RFC 3566 Test Case 6: AES-XCBC-MAC-96 with 34-byte input
  RFC 3566 Test Case 7: AES-XCBC-MAC-96 with 1000-byte input
  RFC 4434 Test Case AES-XCBC-PRF-128 with 20-byte input (key length 16)
  RFC 4434 Test Case AES-XCBC-PRF-128 with 20-byte input (key length 10)
  RFC 4434 Test Case AES-XCBC-PRF-128 with 20-byte input (key length 18)
testing HMAC_MD5:
  RFC 2104: MD5_HMAC test 1
  RFC 2104: MD5_HMAC test 2
  RFC 2104: MD5_HMAC test 3
8 CPU cores online
starting up 7 helper threads
started thread for helper 0
started thread for helper 1
started thread for helper 2
started thread for helper 3
started thread for helper 4
started thread for helper 5
started thread for helper 6
Using Linux XFRM/NETKEY IPsec kernel support code on 5.8.15-201.fc32.x86_64
| Hard-wiring algorithms
| adding AES_CCM_16 to kernel algorithm db
| adding AES_CCM_12 to kernel algorithm db
| adding AES_CCM_8 to kernel algorithm db
| adding 3DES_CBC to kernel algorithm db
| adding CAMELLIA_CBC to kernel algorithm db
| adding AES_GCM_16 to kernel algorithm db
| adding AES_GCM_12 to kernel algorithm db
| adding AES_GCM_8 to kernel algorithm db
| adding AES_CTR to kernel algorithm db
| adding AES_CBC to kernel algorithm db
| adding NULL_AUTH_AES_GMAC to kernel algorithm db
| adding NULL to kernel algorithm db
| adding CHACHA20_POLY1305 to kernel algorithm db
| adding HMAC_MD5_96 to kernel algorithm db
| adding HMAC_SHA1_96 to kernel algorithm db
| adding HMAC_SHA2_512_256 to kernel algorithm db
| adding HMAC_SHA2_384_192 to kernel algorithm db
| adding HMAC_SHA2_256_128 to kernel algorithm db
| adding HMAC_SHA2_256_TRUNCBUG to kernel algorithm db
| adding AES_XCBC_96 to kernel algorithm db
| adding AES_CMAC_96 to kernel algorithm db
| adding NONE to kernel algorithm db
| net.ipv6.conf.all.disable_ipv6=1 ignore ipv6 holes
| global periodic timer EVENT_SHUNT_SCAN enabled with interval of 20 seconds
| setup kernel fd callback
| add_fd_read_event_handler: newref KERNEL_XRM_FD-pe@0x564b9e337a28
| libevent_malloc: newref ptr-libevent@0x564b9e2faf58 size 128
| libevent_malloc: newref ptr-libevent@0x564b9e32e638 size 16
| add_fd_read_event_handler: newref KERNEL_ROUTE_FD-pe@0x564b9e337a98
| libevent_malloc: newref ptr-libevent@0x564b9e2fb058 size 128
| libevent_malloc: newref ptr-libevent@0x564b9e32dff8 size 16
| global one-shot timer EVENT_CHECK_CRLS initialized
SELinux support is enabled in PERMISSIVE mode.
| unbound context created - setting debug level to 5
| /etc/hosts lookups activated
| /etc/resolv.conf usage activated
| outgoing-port-avoid set 0-65535
| outgoing-port-permit set 32768-60999
| loading dnssec root key from:/var/lib/unbound/root.key
| no additional dnssec trust anchors defined via dnssec-trusted= option
| Setting up events, loop start
| add_fd_read_event_handler: newref PLUTO_CTL_FD-pe@0x564b9e33aff8
| libevent_malloc: newref ptr-libevent@0x564b9e337bb8 size 128
| libevent_malloc: newref ptr-libevent@0x564b9e32ea18 size 16
| libevent_realloc: newref ptr-libevent@0x564b9e33b068 size 256
| libevent_malloc: newref ptr-libevent@0x564b9e32e678 size 8
| libevent_realloc: newref ptr-libevent@0x564b9e32f068 size 144
| libevent_malloc: newref ptr-libevent@0x564b9e28d9a8 size 152
| libevent_malloc: newref ptr-libevent@0x564b9e32e828 size 16
| signal event handler PLUTO_SIGCHLD installed
| libevent_malloc: newref ptr-libevent@0x564b9e33b198 size 8
| libevent_malloc: newref ptr-libevent@0x564b9e28d8d8 size 152
| signal event handler PLUTO_SIGTERM installed
| libevent_malloc: newref ptr-libevent@0x564b9e33b1d8 size 8
| libevent_malloc: newref ptr-libevent@0x564b9e33b218 size 152
| signal event handler PLUTO_SIGHUP installed
| libevent_malloc: newref ptr-libevent@0x564b9e33b2e8 size 8
| libevent_realloc: delref ptr-libevent@0x564b9e32f068
| libevent_realloc: newref ptr-libevent@0x564b9e33b328 size 256
| libevent_malloc: newref ptr-libevent@0x564b9e33b458 size 152
| signal event handler PLUTO_SIGSYS installed
| created addconn helper (pid:2116540) using fork+execve
| forked child 2116540
seccomp security disabled
| starting helper thread 4
seccomp security disabled for crypto helper 4
| status value returned by setting the priority of this helper thread 4: 22
| helper thread 4 has nothing to do
| starting helper thread 1
seccomp security disabled for crypto helper 1
| status value returned by setting the priority of this helper thread 1: 22
| helper thread 1 has nothing to do
| starting helper thread 2
seccomp security disabled for crypto helper 2
| status value returned by setting the priority of this helper thread 2: 22
| helper thread 2 has nothing to do
| starting helper thread 3
seccomp security disabled for crypto helper 3
| status value returned by setting the priority of this helper thread 3: 22
| helper thread 3 has nothing to do
| starting helper thread 5
seccomp security disabled for crypto helper 5
| status value returned by setting the priority of this helper thread 5: 22
| helper thread 5 has nothing to do
| starting helper thread 6
seccomp security disabled for crypto helper 6
| status value returned by setting the priority of this helper thread 6: 22
| helper thread 6 has nothing to do
| starting helper thread 7
seccomp security disabled for crypto helper 7
| status value returned by setting the priority of this helper thread 7: 22
| helper thread 7 has nothing to do
| newref struct fd@0x564b9e33b5b8(0->1) (in whack_handle_cb() at rcv_whack.c:869)
| fd_accept: new fd-fd@0x564b9e33b5b8 (in whack_handle_cb() at rcv_whack.c:869)
| whack: options (impair|debug)
| old debugging base+cpu-usage + none
| new debugging = base+cpu-usage
| delref fd@0x564b9e33b5b8(1->0) (in whack_handle_cb() at rcv_whack.c:903)
| freeref fd-fd@0x564b9e33b5b8 (in whack_handle_cb() at rcv_whack.c:903)
| spent 0.0699 (0.0695) milliseconds in whack
| newref struct fd@0x564b9e33b5f8(0->1) (in whack_handle_cb() at rcv_whack.c:869)
| fd_accept: new fd-fd@0x564b9e33b5f8 (in whack_handle_cb() at rcv_whack.c:869)
| whack: listen
listening for IKE messages
| Inspecting interface lo 
| found lo with address 127.0.0.1
| Inspecting interface eth0 
| found eth0 with address 192.0.1.254
| Inspecting interface eth1 
| found eth1 with address 192.1.2.45
| newref struct iface_dev@0x564b9e33ba98(0->1) (in add_iface_dev() at iface.c:67)
Kernel supports NIC esp-hw-offload
| iface: marking eth1 add
| newref struct iface_dev@0x564b9e33bb88(0->1) (in add_iface_dev() at iface.c:67)
| iface: marking eth0 add
| newref struct iface_dev@0x564b9e33bc58(0->1) (in add_iface_dev() at iface.c:67)
| iface: marking lo add
| no interfaces to sort
| MSG_ERRQUEUE enabled on fd 18
| addref ifd@0x564b9e33ba98(1->2) (in bind_iface_port() at iface.c:237)
adding UDP interface eth1 192.1.2.45:500
| MSG_ERRQUEUE enabled on fd 19
| NAT-Traversal: Trying sockopt style NAT-T
| NAT-Traversal: ESPINUDP(2) setup succeeded for sockopt style NAT-T family IPv4
| addref ifd@0x564b9e33ba98(2->3) (in bind_iface_port() at iface.c:237)
adding UDP interface eth1 192.1.2.45:4500
| MSG_ERRQUEUE enabled on fd 20
| addref ifd@0x564b9e33bb88(1->2) (in bind_iface_port() at iface.c:237)
adding UDP interface eth0 192.0.1.254:500
| MSG_ERRQUEUE enabled on fd 21
| NAT-Traversal: Trying sockopt style NAT-T
| NAT-Traversal: ESPINUDP(2) setup succeeded for sockopt style NAT-T family IPv4
| addref ifd@0x564b9e33bb88(2->3) (in bind_iface_port() at iface.c:237)
adding UDP interface eth0 192.0.1.254:4500
| MSG_ERRQUEUE enabled on fd 22
| addref ifd@0x564b9e33bc58(1->2) (in bind_iface_port() at iface.c:237)
adding UDP interface lo 127.0.0.1:500
| MSG_ERRQUEUE enabled on fd 23
| NAT-Traversal: Trying sockopt style NAT-T
| NAT-Traversal: ESPINUDP(2) setup succeeded for sockopt style NAT-T family IPv4
| addref ifd@0x564b9e33bc58(2->3) (in bind_iface_port() at iface.c:237)
adding UDP interface lo 127.0.0.1:4500
| updating interfaces - listing interfaces that are going down
| updating interfaces - checking orientation
| FOR_EACH_UNORIENTED_CONNECTION_... in check_orientations
| libevent_malloc: newref ptr-libevent@0x564b9e337b08 size 128
| libevent_malloc: newref ptr-libevent@0x564b9e33c608 size 16
| setup callback for interface lo 127.0.0.1:4500 fd 23 on UDP
| libevent_malloc: newref ptr-libevent@0x564b9e2fb158 size 128
| libevent_malloc: newref ptr-libevent@0x564b9e33c648 size 16
| setup callback for interface lo 127.0.0.1:500 fd 22 on UDP
| libevent_malloc: newref ptr-libevent@0x564b9e2fb358 size 128
| libevent_malloc: newref ptr-libevent@0x564b9e33c688 size 16
| setup callback for interface eth0 192.0.1.254:4500 fd 21 on UDP
| libevent_malloc: newref ptr-libevent@0x564b9e2fb258 size 128
| libevent_malloc: newref ptr-libevent@0x564b9e33c6c8 size 16
| setup callback for interface eth0 192.0.1.254:500 fd 20 on UDP
| libevent_malloc: newref ptr-libevent@0x564b9e2f7c08 size 128
| libevent_malloc: newref ptr-libevent@0x564b9e33c708 size 16
| setup callback for interface eth1 192.1.2.45:4500 fd 19 on UDP
| libevent_malloc: newref ptr-libevent@0x564b9e2f7b08 size 128
| libevent_malloc: newref ptr-libevent@0x564b9e33c748 size 16
| setup callback for interface eth1 192.1.2.45:500 fd 18 on UDP
| no stale xfrmi interface 'ipsec1' found
| certs and keys locked by 'free_preshared_secrets'
| certs and keys unlocked by 'free_preshared_secrets'
loading secrets from "/etc/ipsec.secrets"
no secrets filename matched "/etc/ipsec.d/*.secrets"
| old food groups:
| new food groups:
| delref fd@0x564b9e33b5f8(1->0) (in whack_handle_cb() at rcv_whack.c:903)
| freeref fd-fd@0x564b9e33b5f8 (in whack_handle_cb() at rcv_whack.c:903)
| spent 0.819 (2.29) milliseconds in whack
| processing signal PLUTO_SIGCHLD
| waitpid returned pid 2116540 (exited with status 0)
| reaped addconn helper child (status 0)
| waitpid returned ECHILD (no child processes left)
| spent 0.0218 (0.0217) milliseconds in signal handler PLUTO_SIGCHLD
| newref struct fd@0x564b9e33bb28(0->1) (in whack_handle_cb() at rcv_whack.c:869)
| fd_accept: new fd-fd@0x564b9e33bb28 (in whack_handle_cb() at rcv_whack.c:869)
| whack: delete 'westnet-eastnet-ikev2'
| FOR_EACH_CONNECTION_... in conn_by_name
| FOR_EACH_CONNECTION_... in foreach_connection_by_alias
| FOR_EACH_CONNECTION_... in conn_by_name
| FOR_EACH_CONNECTION_... in foreach_connection_by_alias
| whack: connection 'westnet-eastnet-ikev2'
| addref fd@0x564b9e33bb28(1->2) (in string_logger() at log.c:838)
| newref string logger@0x564b9e32ee38(0->1) (in add_connection() at connections.c:1998)
| Connection DB: adding connection "westnet-eastnet-ikev2" $1
| FOR_EACH_CONNECTION_... in conn_by_name
| added new connection westnet-eastnet-ikev2 with policy RSASIG+ENCRYPT+TUNNEL+PFS+IKEV1_ALLOW+IKE_FRAG_ALLOW+ESN_NO
| counting wild cards for %fromcert is 0
| counting wild cards for %fromcert is 0
| updating connection from left.host_addr
| left host_port 500
| updating connection from right.host_addr
| right host_port 500
| orienting westnet-eastnet-ikev2
| westnet-eastnet-ikev2 doesn't match 127.0.0.1:4500 at all
| westnet-eastnet-ikev2 doesn't match 127.0.0.1:500 at all
| westnet-eastnet-ikev2 doesn't match 192.0.1.254:4500 at all
| westnet-eastnet-ikev2 doesn't match 192.0.1.254:500 at all
| westnet-eastnet-ikev2 doesn't match 192.1.2.45:4500 at all
| oriented westnet-eastnet-ikev2's this
| connect_to_host_pair: 192.1.2.45:500 192.1.2.23:500 -> hp@(nil): none
| newref hp@0x564b9e33d018(0->1) (in connect_to_host_pair() at hostpair.c:290)
added IKEv1 connection "westnet-eastnet-ikev2"
| ike_life: 3600; ipsec_life: 28800s; rekey_margin: 540s; rekey_fuzz: 100%; keyingtries: 0; replay_window: 32; policy: RSASIG+ENCRYPT+TUNNEL+PFS+IKEV1_ALLOW+IKE_FRAG_ALLOW+ESN_NO
| 192.0.1.0/24===192.1.2.45<192.1.2.45>[%fromcert]...192.1.2.23<192.1.2.23>[%fromcert]===192.0.2.0/24
| delref logger@0x564b9e32ee38(1->0) (in add_connection() at connections.c:2026)
| delref fd@0x564b9e33bb28(2->1) (in free_logger() at log.c:853)
| delref fd@NULL (in free_logger() at log.c:854)
| delref fd@0x564b9e33bb28(1->0) (in whack_handle_cb() at rcv_whack.c:903)
| freeref fd-fd@0x564b9e33bb28 (in whack_handle_cb() at rcv_whack.c:903)
| spent 0.206 (0.266) milliseconds in whack
| newref struct fd@0x564b9e33b638(0->1) (in whack_handle_cb() at rcv_whack.c:869)
| fd_accept: new fd-fd@0x564b9e33b638 (in whack_handle_cb() at rcv_whack.c:869)
| whack: options (impair|debug)
| old debugging base+cpu-usage + none
| new debugging = base+cpu-usage
| delete-on-retransmit:yes
| delref fd@0x564b9e33b638(1->0) (in whack_handle_cb() at rcv_whack.c:903)
| freeref fd-fd@0x564b9e33b638 (in whack_handle_cb() at rcv_whack.c:903)
| spent 0.0679 (0.0674) milliseconds in whack
| newref struct fd@0x564b9e33b678(0->1) (in whack_handle_cb() at rcv_whack.c:869)
| fd_accept: new fd-fd@0x564b9e33b678 (in whack_handle_cb() at rcv_whack.c:869)
| whack: initiate
| FOR_EACH_CONNECTION_... in conn_by_name
| empty esp_info, returning defaults for ENCRYPT
| newref sadb@0x564b9e32ea58(0->1) (in v1_kernel_alg_makedb() at ikev1_spdb_struct.c:542)
| delref sadb@0x564b9e32ea58(1->0) (in free_sa() at ikev1_spdb.c:837)
| connection 'westnet-eastnet-ikev2' +POLICY_UP
| FOR_EACH_STATE_... in find_phase1_state
| newref alloc logger@0x564b9e32ee38(0->1) (in new_state() at state.c:576)
| addref fd@0x564b9e33b678(1->2) (in new_state() at state.c:577)
| creating state object #1 at 0x564b9e33d528
| State DB: adding IKEv1 state #1 in UNDEFINED
| pstats #1 ikev1.isakmp started
| orienting westnet-eastnet-ikev2
| westnet-eastnet-ikev2 doesn't match 127.0.0.1:4500 at all
| westnet-eastnet-ikev2 doesn't match 127.0.0.1:500 at all
| westnet-eastnet-ikev2 doesn't match 192.0.1.254:4500 at all
| westnet-eastnet-ikev2 doesn't match 192.0.1.254:500 at all
| westnet-eastnet-ikev2 doesn't match 192.1.2.45:4500 at all
| oriented westnet-eastnet-ikev2's this
| start processing: state #1 connection "westnet-eastnet-ikev2" from 192.1.2.23:500 (in main_outI1() at ikev1_main.c:117)
| parent state #1: UNDEFINED(ignore) => MAIN_I1(half-open IKE SA)
| addref fd@0x564b9e33b678(2->3) (in add_pending() at pending.c:86)
| queuing pending IPsec SA negotiating with 192.1.2.23 IKE SA #1 "westnet-eastnet-ikev2"
"westnet-eastnet-ikev2" #1: initiating IKEv1 Main Mode connection
| opening output PBS reply packet
| **emit ISAKMP Message:
|    initiator SPI: 57 5f 25 be  c7 31 1d 6a
|    responder SPI: 00 00 00 00  00 00 00 00
|    next payload type: ISAKMP_NEXT_NONE (0x0)
|    ISAKMP version: ISAKMP Version 1.0 (rfc2407) (0x10)
|    exchange type: ISAKMP_XCHG_IDPROT (0x2)
|    flags: none (0x0)
|    Message ID: 0 (00 00 00 00)
| next payload chain: saving message location 'ISAKMP Message'.'next payload type'
| no specific IKE algorithms specified - using defaults
| oakley_alg_makedb() processing ealg=AES_CBC=7 halg=HMAC_SHA2_256=4 modp=MODP2048=14 eklen=0
| newref sadb@0x564b9e33b788(0->1) (in oakley_alg_mergedb() at ikev1_spdb_struct.c:698)
| newref sadb@0x564b9e33f208(0->1) (in oakley_alg_mergedb() at ikev1_spdb_struct.c:870)
| delref sadb@0x564b9e33f208(1->0) (in free_sa() at ikev1_spdb.c:837)
| delref sadb@0x564b9e33b788(1->0) (in free_sa() at ikev1_spdb.c:837)
| oakley_alg_makedb() processing ealg=AES_CBC=7 halg=HMAC_SHA2_512=6 modp=MODP2048=14 eklen=0
| newref sadb@0x564b9e33b788(0->1) (in oakley_alg_mergedb() at ikev1_spdb_struct.c:698)
| delref sadb@0x564b9e33f2f8(1->0) (in free_sa() at ikev1_spdb.c:837)
| delref sadb@0x564b9e33f208(1->0) (in free_sa() at ikev1_spdb.c:837)
| delref sadb@0x564b9e33b788(1->0) (in free_sa() at ikev1_spdb.c:837)
| oakley_alg_makedb() processing ealg=AES_CBC=7 halg=HMAC_SHA1=2 modp=MODP2048=14 eklen=0
| newref sadb@0x564b9e33b788(0->1) (in oakley_alg_mergedb() at ikev1_spdb_struct.c:698)
| delref sadb@0x564b9e33f2f8(1->0) (in free_sa() at ikev1_spdb.c:837)
| delref sadb@0x564b9e33f208(1->0) (in free_sa() at ikev1_spdb.c:837)
| delref sadb@0x564b9e33b788(1->0) (in free_sa() at ikev1_spdb.c:837)
| oakley_alg_makedb() processing ealg=AES_CBC=7 halg=HMAC_SHA2_256=4 modp=MODP1536=5 eklen=0
| newref sadb@0x564b9e33b788(0->1) (in oakley_alg_mergedb() at ikev1_spdb_struct.c:698)
| delref sadb@0x564b9e33f2f8(1->0) (in free_sa() at ikev1_spdb.c:837)
| delref sadb@0x564b9e33f208(1->0) (in free_sa() at ikev1_spdb.c:837)
| delref sadb@0x564b9e33b788(1->0) (in free_sa() at ikev1_spdb.c:837)
| oakley_alg_makedb() processing ealg=AES_CBC=7 halg=HMAC_SHA2_512=6 modp=MODP1536=5 eklen=0
| newref sadb@0x564b9e33b788(0->1) (in oakley_alg_mergedb() at ikev1_spdb_struct.c:698)
| delref sadb@0x564b9e33f2f8(1->0) (in free_sa() at ikev1_spdb.c:837)
| delref sadb@0x564b9e33f208(1->0) (in free_sa() at ikev1_spdb.c:837)
| delref sadb@0x564b9e33b788(1->0) (in free_sa() at ikev1_spdb.c:837)
| oakley_alg_makedb() processing ealg=AES_CBC=7 halg=HMAC_SHA1=2 modp=MODP1536=5 eklen=0
| newref sadb@0x564b9e33b788(0->1) (in oakley_alg_mergedb() at ikev1_spdb_struct.c:698)
| delref sadb@0x564b9e33f2f8(1->0) (in free_sa() at ikev1_spdb.c:837)
| delref sadb@0x564b9e33f208(1->0) (in free_sa() at ikev1_spdb.c:837)
| delref sadb@0x564b9e33b788(1->0) (in free_sa() at ikev1_spdb.c:837)
| oakley_alg_makedb() processing ealg=3DES_CBC=5 halg=HMAC_SHA2_256=4 modp=MODP2048=14 eklen=0
| newref sadb@0x564b9e33b788(0->1) (in oakley_alg_mergedb() at ikev1_spdb_struct.c:698)
| delref sadb@0x564b9e33f2f8(1->0) (in free_sa() at ikev1_spdb.c:837)
| delref sadb@0x564b9e33b788(1->0) (in free_sa() at ikev1_spdb.c:837)
| oakley_alg_makedb() processing ealg=3DES_CBC=5 halg=HMAC_SHA2_512=6 modp=MODP2048=14 eklen=0
| newref sadb@0x564b9e33b788(0->1) (in oakley_alg_mergedb() at ikev1_spdb_struct.c:698)
| delref sadb@0x564b9e33f208(1->0) (in free_sa() at ikev1_spdb.c:837)
| delref sadb@0x564b9e33b788(1->0) (in free_sa() at ikev1_spdb.c:837)
| oakley_alg_makedb() processing ealg=3DES_CBC=5 halg=HMAC_SHA1=2 modp=MODP2048=14 eklen=0
| newref sadb@0x564b9e33b788(0->1) (in oakley_alg_mergedb() at ikev1_spdb_struct.c:698)
| delref sadb@0x564b9e33f2f8(1->0) (in free_sa() at ikev1_spdb.c:837)
| delref sadb@0x564b9e33b788(1->0) (in free_sa() at ikev1_spdb.c:837)
| oakley_alg_makedb() processing ealg=3DES_CBC=5 halg=HMAC_SHA2_256=4 modp=MODP1536=5 eklen=0
| newref sadb@0x564b9e33b788(0->1) (in oakley_alg_mergedb() at ikev1_spdb_struct.c:698)
| delref sadb@0x564b9e33f208(1->0) (in free_sa() at ikev1_spdb.c:837)
| delref sadb@0x564b9e33b788(1->0) (in free_sa() at ikev1_spdb.c:837)
| oakley_alg_makedb() processing ealg=3DES_CBC=5 halg=HMAC_SHA2_512=6 modp=MODP1536=5 eklen=0
| newref sadb@0x564b9e33f108(0->1) (in oakley_alg_mergedb() at ikev1_spdb_struct.c:698)
| delref sadb@0x564b9e33f2f8(1->0) (in free_sa() at ikev1_spdb.c:837)
| delref sadb@0x564b9e33f108(1->0) (in free_sa() at ikev1_spdb.c:837)
| oakley_alg_makedb() processing ealg=3DES_CBC=5 halg=HMAC_SHA1=2 modp=MODP1536=5 eklen=0
| newref sadb@0x564b9e33f208(0->1) (in oakley_alg_mergedb() at ikev1_spdb_struct.c:698)
| delref sadb@0x564b9e33f258(1->0) (in free_sa() at ikev1_spdb.c:837)
| delref sadb@0x564b9e33f208(1->0) (in free_sa() at ikev1_spdb.c:837)
| oakley_alg_makedb() returning 0x564b9e340878
| ***emit ISAKMP Security Association Payload:
|    next payload type: ISAKMP_NEXT_NONE (0x0)
|    DOI: ISAKMP_DOI_IPSEC (0x1)
| next payload chain: setting previous 'ISAKMP Message'.'next payload type' to current ISAKMP Security Association Payload (1:ISAKMP_NEXT_SA)
| next payload chain: saving location 'ISAKMP Security Association Payload'.'next payload type' in 'reply packet'
| ****emit IPsec DOI SIT:
|    IPsec DOI SIT: SIT_IDENTITY_ONLY (0x1)
| ikev1_out_sa() pcn: 0 has 1 valid proposals
| ikev1_out_sa() pcn: 0 pn: 0<1 valid_count: 1 trans_cnt: 18
| ****emit ISAKMP Proposal Payload:
|    next payload type: ISAKMP_NEXT_NONE (0x0)
|    proposal number: 0 (00)
|    protocol ID: PROTO_ISAKMP (0x1)
|    SPI size: 0 (00)
|    number of transforms: 18 (12)
| last substructure: saving location 'ISAKMP Security Association Payload'.'ISAKMP Proposal Payload'.'next payload type'
| *****emit ISAKMP Transform Payload (ISAKMP):
|    next payload type: ISAKMP_NEXT_T (0x3)
|    ISAKMP transform number: 0 (00)
|    ISAKMP transform ID: KEY_IKE (0x1)
| last substructure: saving location 'ISAKMP Proposal Payload'.'ISAKMP Transform Payload (ISAKMP)'.'next payload type'
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_LIFE_TYPE (0x800b)
|    length/value: 1 (00 01)
|     [1 is OAKLEY_LIFE_SECONDS]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_LIFE_DURATION (variable length) (0x800c)
|    length/value: 3600 (0e 10)
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_ENCRYPTION_ALGORITHM (0x8001)
|    length/value: 7 (00 07)
|     [7 is OAKLEY_AES_CBC]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_HASH_ALGORITHM (0x8002)
|    length/value: 4 (00 04)
|     [4 is OAKLEY_SHA2_256]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_AUTHENTICATION_METHOD (0x8003)
|    length/value: 3 (00 03)
|     [3 is OAKLEY_RSA_SIG]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_GROUP_DESCRIPTION (0x8004)
|    length/value: 14 (00 0e)
|     [14 is OAKLEY_GROUP_MODP2048]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_KEY_LENGTH (0x800e)
|    length/value: 256 (01 00)
| emitting length of ISAKMP Transform Payload (ISAKMP): 36
| *****emit ISAKMP Transform Payload (ISAKMP):
|    next payload type: ISAKMP_NEXT_T (0x3)
|    ISAKMP transform number: 1 (01)
|    ISAKMP transform ID: KEY_IKE (0x1)
| last substructure: checking 'ISAKMP Proposal Payload'.'ISAKMP Transform Payload (ISAKMP)'.'next payload type' containing ISAKMP_NEXT_T (0x3) is ISAKMP_NEXT_T (0x3)
| last substructure: saving location 'ISAKMP Proposal Payload'.'ISAKMP Transform Payload (ISAKMP)'.'next payload type'
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_LIFE_TYPE (0x800b)
|    length/value: 1 (00 01)
|     [1 is OAKLEY_LIFE_SECONDS]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_LIFE_DURATION (variable length) (0x800c)
|    length/value: 3600 (0e 10)
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_ENCRYPTION_ALGORITHM (0x8001)
|    length/value: 7 (00 07)
|     [7 is OAKLEY_AES_CBC]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_HASH_ALGORITHM (0x8002)
|    length/value: 4 (00 04)
|     [4 is OAKLEY_SHA2_256]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_AUTHENTICATION_METHOD (0x8003)
|    length/value: 3 (00 03)
|     [3 is OAKLEY_RSA_SIG]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_GROUP_DESCRIPTION (0x8004)
|    length/value: 14 (00 0e)
|     [14 is OAKLEY_GROUP_MODP2048]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_KEY_LENGTH (0x800e)
|    length/value: 128 (00 80)
| emitting length of ISAKMP Transform Payload (ISAKMP): 36
| *****emit ISAKMP Transform Payload (ISAKMP):
|    next payload type: ISAKMP_NEXT_T (0x3)
|    ISAKMP transform number: 2 (02)
|    ISAKMP transform ID: KEY_IKE (0x1)
| last substructure: checking 'ISAKMP Proposal Payload'.'ISAKMP Transform Payload (ISAKMP)'.'next payload type' containing ISAKMP_NEXT_T (0x3) is ISAKMP_NEXT_T (0x3)
| last substructure: saving location 'ISAKMP Proposal Payload'.'ISAKMP Transform Payload (ISAKMP)'.'next payload type'
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_LIFE_TYPE (0x800b)
|    length/value: 1 (00 01)
|     [1 is OAKLEY_LIFE_SECONDS]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_LIFE_DURATION (variable length) (0x800c)
|    length/value: 3600 (0e 10)
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_ENCRYPTION_ALGORITHM (0x8001)
|    length/value: 7 (00 07)
|     [7 is OAKLEY_AES_CBC]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_HASH_ALGORITHM (0x8002)
|    length/value: 6 (00 06)
|     [6 is OAKLEY_SHA2_512]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_AUTHENTICATION_METHOD (0x8003)
|    length/value: 3 (00 03)
|     [3 is OAKLEY_RSA_SIG]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_GROUP_DESCRIPTION (0x8004)
|    length/value: 14 (00 0e)
|     [14 is OAKLEY_GROUP_MODP2048]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_KEY_LENGTH (0x800e)
|    length/value: 256 (01 00)
| emitting length of ISAKMP Transform Payload (ISAKMP): 36
| *****emit ISAKMP Transform Payload (ISAKMP):
|    next payload type: ISAKMP_NEXT_T (0x3)
|    ISAKMP transform number: 3 (03)
|    ISAKMP transform ID: KEY_IKE (0x1)
| last substructure: checking 'ISAKMP Proposal Payload'.'ISAKMP Transform Payload (ISAKMP)'.'next payload type' containing ISAKMP_NEXT_T (0x3) is ISAKMP_NEXT_T (0x3)
| last substructure: saving location 'ISAKMP Proposal Payload'.'ISAKMP Transform Payload (ISAKMP)'.'next payload type'
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_LIFE_TYPE (0x800b)
|    length/value: 1 (00 01)
|     [1 is OAKLEY_LIFE_SECONDS]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_LIFE_DURATION (variable length) (0x800c)
|    length/value: 3600 (0e 10)
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_ENCRYPTION_ALGORITHM (0x8001)
|    length/value: 7 (00 07)
|     [7 is OAKLEY_AES_CBC]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_HASH_ALGORITHM (0x8002)
|    length/value: 6 (00 06)
|     [6 is OAKLEY_SHA2_512]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_AUTHENTICATION_METHOD (0x8003)
|    length/value: 3 (00 03)
|     [3 is OAKLEY_RSA_SIG]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_GROUP_DESCRIPTION (0x8004)
|    length/value: 14 (00 0e)
|     [14 is OAKLEY_GROUP_MODP2048]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_KEY_LENGTH (0x800e)
|    length/value: 128 (00 80)
| emitting length of ISAKMP Transform Payload (ISAKMP): 36
| *****emit ISAKMP Transform Payload (ISAKMP):
|    next payload type: ISAKMP_NEXT_T (0x3)
|    ISAKMP transform number: 4 (04)
|    ISAKMP transform ID: KEY_IKE (0x1)
| last substructure: checking 'ISAKMP Proposal Payload'.'ISAKMP Transform Payload (ISAKMP)'.'next payload type' containing ISAKMP_NEXT_T (0x3) is ISAKMP_NEXT_T (0x3)
| last substructure: saving location 'ISAKMP Proposal Payload'.'ISAKMP Transform Payload (ISAKMP)'.'next payload type'
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_LIFE_TYPE (0x800b)
|    length/value: 1 (00 01)
|     [1 is OAKLEY_LIFE_SECONDS]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_LIFE_DURATION (variable length) (0x800c)
|    length/value: 3600 (0e 10)
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_ENCRYPTION_ALGORITHM (0x8001)
|    length/value: 7 (00 07)
|     [7 is OAKLEY_AES_CBC]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_HASH_ALGORITHM (0x8002)
|    length/value: 2 (00 02)
|     [2 is OAKLEY_SHA1]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_AUTHENTICATION_METHOD (0x8003)
|    length/value: 3 (00 03)
|     [3 is OAKLEY_RSA_SIG]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_GROUP_DESCRIPTION (0x8004)
|    length/value: 14 (00 0e)
|     [14 is OAKLEY_GROUP_MODP2048]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_KEY_LENGTH (0x800e)
|    length/value: 256 (01 00)
| emitting length of ISAKMP Transform Payload (ISAKMP): 36
| *****emit ISAKMP Transform Payload (ISAKMP):
|    next payload type: ISAKMP_NEXT_T (0x3)
|    ISAKMP transform number: 5 (05)
|    ISAKMP transform ID: KEY_IKE (0x1)
| last substructure: checking 'ISAKMP Proposal Payload'.'ISAKMP Transform Payload (ISAKMP)'.'next payload type' containing ISAKMP_NEXT_T (0x3) is ISAKMP_NEXT_T (0x3)
| last substructure: saving location 'ISAKMP Proposal Payload'.'ISAKMP Transform Payload (ISAKMP)'.'next payload type'
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_LIFE_TYPE (0x800b)
|    length/value: 1 (00 01)
|     [1 is OAKLEY_LIFE_SECONDS]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_LIFE_DURATION (variable length) (0x800c)
|    length/value: 3600 (0e 10)
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_ENCRYPTION_ALGORITHM (0x8001)
|    length/value: 7 (00 07)
|     [7 is OAKLEY_AES_CBC]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_HASH_ALGORITHM (0x8002)
|    length/value: 2 (00 02)
|     [2 is OAKLEY_SHA1]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_AUTHENTICATION_METHOD (0x8003)
|    length/value: 3 (00 03)
|     [3 is OAKLEY_RSA_SIG]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_GROUP_DESCRIPTION (0x8004)
|    length/value: 14 (00 0e)
|     [14 is OAKLEY_GROUP_MODP2048]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_KEY_LENGTH (0x800e)
|    length/value: 128 (00 80)
| emitting length of ISAKMP Transform Payload (ISAKMP): 36
| *****emit ISAKMP Transform Payload (ISAKMP):
|    next payload type: ISAKMP_NEXT_T (0x3)
|    ISAKMP transform number: 6 (06)
|    ISAKMP transform ID: KEY_IKE (0x1)
| last substructure: checking 'ISAKMP Proposal Payload'.'ISAKMP Transform Payload (ISAKMP)'.'next payload type' containing ISAKMP_NEXT_T (0x3) is ISAKMP_NEXT_T (0x3)
| last substructure: saving location 'ISAKMP Proposal Payload'.'ISAKMP Transform Payload (ISAKMP)'.'next payload type'
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_LIFE_TYPE (0x800b)
|    length/value: 1 (00 01)
|     [1 is OAKLEY_LIFE_SECONDS]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_LIFE_DURATION (variable length) (0x800c)
|    length/value: 3600 (0e 10)
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_ENCRYPTION_ALGORITHM (0x8001)
|    length/value: 7 (00 07)
|     [7 is OAKLEY_AES_CBC]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_HASH_ALGORITHM (0x8002)
|    length/value: 4 (00 04)
|     [4 is OAKLEY_SHA2_256]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_AUTHENTICATION_METHOD (0x8003)
|    length/value: 3 (00 03)
|     [3 is OAKLEY_RSA_SIG]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_GROUP_DESCRIPTION (0x8004)
|    length/value: 5 (00 05)
|     [5 is OAKLEY_GROUP_MODP1536]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_KEY_LENGTH (0x800e)
|    length/value: 256 (01 00)
| emitting length of ISAKMP Transform Payload (ISAKMP): 36
| *****emit ISAKMP Transform Payload (ISAKMP):
|    next payload type: ISAKMP_NEXT_T (0x3)
|    ISAKMP transform number: 7 (07)
|    ISAKMP transform ID: KEY_IKE (0x1)
| last substructure: checking 'ISAKMP Proposal Payload'.'ISAKMP Transform Payload (ISAKMP)'.'next payload type' containing ISAKMP_NEXT_T (0x3) is ISAKMP_NEXT_T (0x3)
| last substructure: saving location 'ISAKMP Proposal Payload'.'ISAKMP Transform Payload (ISAKMP)'.'next payload type'
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_LIFE_TYPE (0x800b)
|    length/value: 1 (00 01)
|     [1 is OAKLEY_LIFE_SECONDS]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_LIFE_DURATION (variable length) (0x800c)
|    length/value: 3600 (0e 10)
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_ENCRYPTION_ALGORITHM (0x8001)
|    length/value: 7 (00 07)
|     [7 is OAKLEY_AES_CBC]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_HASH_ALGORITHM (0x8002)
|    length/value: 4 (00 04)
|     [4 is OAKLEY_SHA2_256]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_AUTHENTICATION_METHOD (0x8003)
|    length/value: 3 (00 03)
|     [3 is OAKLEY_RSA_SIG]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_GROUP_DESCRIPTION (0x8004)
|    length/value: 5 (00 05)
|     [5 is OAKLEY_GROUP_MODP1536]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_KEY_LENGTH (0x800e)
|    length/value: 128 (00 80)
| emitting length of ISAKMP Transform Payload (ISAKMP): 36
| *****emit ISAKMP Transform Payload (ISAKMP):
|    next payload type: ISAKMP_NEXT_T (0x3)
|    ISAKMP transform number: 8 (08)
|    ISAKMP transform ID: KEY_IKE (0x1)
| last substructure: checking 'ISAKMP Proposal Payload'.'ISAKMP Transform Payload (ISAKMP)'.'next payload type' containing ISAKMP_NEXT_T (0x3) is ISAKMP_NEXT_T (0x3)
| last substructure: saving location 'ISAKMP Proposal Payload'.'ISAKMP Transform Payload (ISAKMP)'.'next payload type'
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_LIFE_TYPE (0x800b)
|    length/value: 1 (00 01)
|     [1 is OAKLEY_LIFE_SECONDS]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_LIFE_DURATION (variable length) (0x800c)
|    length/value: 3600 (0e 10)
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_ENCRYPTION_ALGORITHM (0x8001)
|    length/value: 7 (00 07)
|     [7 is OAKLEY_AES_CBC]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_HASH_ALGORITHM (0x8002)
|    length/value: 6 (00 06)
|     [6 is OAKLEY_SHA2_512]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_AUTHENTICATION_METHOD (0x8003)
|    length/value: 3 (00 03)
|     [3 is OAKLEY_RSA_SIG]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_GROUP_DESCRIPTION (0x8004)
|    length/value: 5 (00 05)
|     [5 is OAKLEY_GROUP_MODP1536]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_KEY_LENGTH (0x800e)
|    length/value: 256 (01 00)
| emitting length of ISAKMP Transform Payload (ISAKMP): 36
| *****emit ISAKMP Transform Payload (ISAKMP):
|    next payload type: ISAKMP_NEXT_T (0x3)
|    ISAKMP transform number: 9 (09)
|    ISAKMP transform ID: KEY_IKE (0x1)
| last substructure: checking 'ISAKMP Proposal Payload'.'ISAKMP Transform Payload (ISAKMP)'.'next payload type' containing ISAKMP_NEXT_T (0x3) is ISAKMP_NEXT_T (0x3)
| last substructure: saving location 'ISAKMP Proposal Payload'.'ISAKMP Transform Payload (ISAKMP)'.'next payload type'
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_LIFE_TYPE (0x800b)
|    length/value: 1 (00 01)
|     [1 is OAKLEY_LIFE_SECONDS]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_LIFE_DURATION (variable length) (0x800c)
|    length/value: 3600 (0e 10)
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_ENCRYPTION_ALGORITHM (0x8001)
|    length/value: 7 (00 07)
|     [7 is OAKLEY_AES_CBC]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_HASH_ALGORITHM (0x8002)
|    length/value: 6 (00 06)
|     [6 is OAKLEY_SHA2_512]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_AUTHENTICATION_METHOD (0x8003)
|    length/value: 3 (00 03)
|     [3 is OAKLEY_RSA_SIG]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_GROUP_DESCRIPTION (0x8004)
|    length/value: 5 (00 05)
|     [5 is OAKLEY_GROUP_MODP1536]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_KEY_LENGTH (0x800e)
|    length/value: 128 (00 80)
| emitting length of ISAKMP Transform Payload (ISAKMP): 36
| *****emit ISAKMP Transform Payload (ISAKMP):
|    next payload type: ISAKMP_NEXT_T (0x3)
|    ISAKMP transform number: 10 (0a)
|    ISAKMP transform ID: KEY_IKE (0x1)
| last substructure: checking 'ISAKMP Proposal Payload'.'ISAKMP Transform Payload (ISAKMP)'.'next payload type' containing ISAKMP_NEXT_T (0x3) is ISAKMP_NEXT_T (0x3)
| last substructure: saving location 'ISAKMP Proposal Payload'.'ISAKMP Transform Payload (ISAKMP)'.'next payload type'
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_LIFE_TYPE (0x800b)
|    length/value: 1 (00 01)
|     [1 is OAKLEY_LIFE_SECONDS]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_LIFE_DURATION (variable length) (0x800c)
|    length/value: 3600 (0e 10)
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_ENCRYPTION_ALGORITHM (0x8001)
|    length/value: 7 (00 07)
|     [7 is OAKLEY_AES_CBC]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_HASH_ALGORITHM (0x8002)
|    length/value: 2 (00 02)
|     [2 is OAKLEY_SHA1]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_AUTHENTICATION_METHOD (0x8003)
|    length/value: 3 (00 03)
|     [3 is OAKLEY_RSA_SIG]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_GROUP_DESCRIPTION (0x8004)
|    length/value: 5 (00 05)
|     [5 is OAKLEY_GROUP_MODP1536]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_KEY_LENGTH (0x800e)
|    length/value: 256 (01 00)
| emitting length of ISAKMP Transform Payload (ISAKMP): 36
| *****emit ISAKMP Transform Payload (ISAKMP):
|    next payload type: ISAKMP_NEXT_T (0x3)
|    ISAKMP transform number: 11 (0b)
|    ISAKMP transform ID: KEY_IKE (0x1)
| last substructure: checking 'ISAKMP Proposal Payload'.'ISAKMP Transform Payload (ISAKMP)'.'next payload type' containing ISAKMP_NEXT_T (0x3) is ISAKMP_NEXT_T (0x3)
| last substructure: saving location 'ISAKMP Proposal Payload'.'ISAKMP Transform Payload (ISAKMP)'.'next payload type'
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_LIFE_TYPE (0x800b)
|    length/value: 1 (00 01)
|     [1 is OAKLEY_LIFE_SECONDS]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_LIFE_DURATION (variable length) (0x800c)
|    length/value: 3600 (0e 10)
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_ENCRYPTION_ALGORITHM (0x8001)
|    length/value: 7 (00 07)
|     [7 is OAKLEY_AES_CBC]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_HASH_ALGORITHM (0x8002)
|    length/value: 2 (00 02)
|     [2 is OAKLEY_SHA1]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_AUTHENTICATION_METHOD (0x8003)
|    length/value: 3 (00 03)
|     [3 is OAKLEY_RSA_SIG]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_GROUP_DESCRIPTION (0x8004)
|    length/value: 5 (00 05)
|     [5 is OAKLEY_GROUP_MODP1536]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_KEY_LENGTH (0x800e)
|    length/value: 128 (00 80)
| emitting length of ISAKMP Transform Payload (ISAKMP): 36
| *****emit ISAKMP Transform Payload (ISAKMP):
|    next payload type: ISAKMP_NEXT_T (0x3)
|    ISAKMP transform number: 12 (0c)
|    ISAKMP transform ID: KEY_IKE (0x1)
| last substructure: checking 'ISAKMP Proposal Payload'.'ISAKMP Transform Payload (ISAKMP)'.'next payload type' containing ISAKMP_NEXT_T (0x3) is ISAKMP_NEXT_T (0x3)
| last substructure: saving location 'ISAKMP Proposal Payload'.'ISAKMP Transform Payload (ISAKMP)'.'next payload type'
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_LIFE_TYPE (0x800b)
|    length/value: 1 (00 01)
|     [1 is OAKLEY_LIFE_SECONDS]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_LIFE_DURATION (variable length) (0x800c)
|    length/value: 3600 (0e 10)
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_ENCRYPTION_ALGORITHM (0x8001)
|    length/value: 5 (00 05)
|     [5 is OAKLEY_3DES_CBC]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_HASH_ALGORITHM (0x8002)
|    length/value: 4 (00 04)
|     [4 is OAKLEY_SHA2_256]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_AUTHENTICATION_METHOD (0x8003)
|    length/value: 3 (00 03)
|     [3 is OAKLEY_RSA_SIG]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_GROUP_DESCRIPTION (0x8004)
|    length/value: 14 (00 0e)
|     [14 is OAKLEY_GROUP_MODP2048]
| emitting length of ISAKMP Transform Payload (ISAKMP): 32
| *****emit ISAKMP Transform Payload (ISAKMP):
|    next payload type: ISAKMP_NEXT_T (0x3)
|    ISAKMP transform number: 13 (0d)
|    ISAKMP transform ID: KEY_IKE (0x1)
| last substructure: checking 'ISAKMP Proposal Payload'.'ISAKMP Transform Payload (ISAKMP)'.'next payload type' containing ISAKMP_NEXT_T (0x3) is ISAKMP_NEXT_T (0x3)
| last substructure: saving location 'ISAKMP Proposal Payload'.'ISAKMP Transform Payload (ISAKMP)'.'next payload type'
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_LIFE_TYPE (0x800b)
|    length/value: 1 (00 01)
|     [1 is OAKLEY_LIFE_SECONDS]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_LIFE_DURATION (variable length) (0x800c)
|    length/value: 3600 (0e 10)
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_ENCRYPTION_ALGORITHM (0x8001)
|    length/value: 5 (00 05)
|     [5 is OAKLEY_3DES_CBC]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_HASH_ALGORITHM (0x8002)
|    length/value: 6 (00 06)
|     [6 is OAKLEY_SHA2_512]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_AUTHENTICATION_METHOD (0x8003)
|    length/value: 3 (00 03)
|     [3 is OAKLEY_RSA_SIG]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_GROUP_DESCRIPTION (0x8004)
|    length/value: 14 (00 0e)
|     [14 is OAKLEY_GROUP_MODP2048]
| emitting length of ISAKMP Transform Payload (ISAKMP): 32
| *****emit ISAKMP Transform Payload (ISAKMP):
|    next payload type: ISAKMP_NEXT_T (0x3)
|    ISAKMP transform number: 14 (0e)
|    ISAKMP transform ID: KEY_IKE (0x1)
| last substructure: checking 'ISAKMP Proposal Payload'.'ISAKMP Transform Payload (ISAKMP)'.'next payload type' containing ISAKMP_NEXT_T (0x3) is ISAKMP_NEXT_T (0x3)
| last substructure: saving location 'ISAKMP Proposal Payload'.'ISAKMP Transform Payload (ISAKMP)'.'next payload type'
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_LIFE_TYPE (0x800b)
|    length/value: 1 (00 01)
|     [1 is OAKLEY_LIFE_SECONDS]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_LIFE_DURATION (variable length) (0x800c)
|    length/value: 3600 (0e 10)
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_ENCRYPTION_ALGORITHM (0x8001)
|    length/value: 5 (00 05)
|     [5 is OAKLEY_3DES_CBC]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_HASH_ALGORITHM (0x8002)
|    length/value: 2 (00 02)
|     [2 is OAKLEY_SHA1]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_AUTHENTICATION_METHOD (0x8003)
|    length/value: 3 (00 03)
|     [3 is OAKLEY_RSA_SIG]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_GROUP_DESCRIPTION (0x8004)
|    length/value: 14 (00 0e)
|     [14 is OAKLEY_GROUP_MODP2048]
| emitting length of ISAKMP Transform Payload (ISAKMP): 32
| *****emit ISAKMP Transform Payload (ISAKMP):
|    next payload type: ISAKMP_NEXT_T (0x3)
|    ISAKMP transform number: 15 (0f)
|    ISAKMP transform ID: KEY_IKE (0x1)
| last substructure: checking 'ISAKMP Proposal Payload'.'ISAKMP Transform Payload (ISAKMP)'.'next payload type' containing ISAKMP_NEXT_T (0x3) is ISAKMP_NEXT_T (0x3)
| last substructure: saving location 'ISAKMP Proposal Payload'.'ISAKMP Transform Payload (ISAKMP)'.'next payload type'
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_LIFE_TYPE (0x800b)
|    length/value: 1 (00 01)
|     [1 is OAKLEY_LIFE_SECONDS]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_LIFE_DURATION (variable length) (0x800c)
|    length/value: 3600 (0e 10)
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_ENCRYPTION_ALGORITHM (0x8001)
|    length/value: 5 (00 05)
|     [5 is OAKLEY_3DES_CBC]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_HASH_ALGORITHM (0x8002)
|    length/value: 4 (00 04)
|     [4 is OAKLEY_SHA2_256]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_AUTHENTICATION_METHOD (0x8003)
|    length/value: 3 (00 03)
|     [3 is OAKLEY_RSA_SIG]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_GROUP_DESCRIPTION (0x8004)
|    length/value: 5 (00 05)
|     [5 is OAKLEY_GROUP_MODP1536]
| emitting length of ISAKMP Transform Payload (ISAKMP): 32
| *****emit ISAKMP Transform Payload (ISAKMP):
|    next payload type: ISAKMP_NEXT_T (0x3)
|    ISAKMP transform number: 16 (10)
|    ISAKMP transform ID: KEY_IKE (0x1)
| last substructure: checking 'ISAKMP Proposal Payload'.'ISAKMP Transform Payload (ISAKMP)'.'next payload type' containing ISAKMP_NEXT_T (0x3) is ISAKMP_NEXT_T (0x3)
| last substructure: saving location 'ISAKMP Proposal Payload'.'ISAKMP Transform Payload (ISAKMP)'.'next payload type'
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_LIFE_TYPE (0x800b)
|    length/value: 1 (00 01)
|     [1 is OAKLEY_LIFE_SECONDS]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_LIFE_DURATION (variable length) (0x800c)
|    length/value: 3600 (0e 10)
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_ENCRYPTION_ALGORITHM (0x8001)
|    length/value: 5 (00 05)
|     [5 is OAKLEY_3DES_CBC]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_HASH_ALGORITHM (0x8002)
|    length/value: 6 (00 06)
|     [6 is OAKLEY_SHA2_512]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_AUTHENTICATION_METHOD (0x8003)
|    length/value: 3 (00 03)
|     [3 is OAKLEY_RSA_SIG]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_GROUP_DESCRIPTION (0x8004)
|    length/value: 5 (00 05)
|     [5 is OAKLEY_GROUP_MODP1536]
| emitting length of ISAKMP Transform Payload (ISAKMP): 32
| *****emit ISAKMP Transform Payload (ISAKMP):
|    next payload type: ISAKMP_NEXT_NONE (0x0)
|    ISAKMP transform number: 17 (11)
|    ISAKMP transform ID: KEY_IKE (0x1)
| last substructure: checking 'ISAKMP Proposal Payload'.'ISAKMP Transform Payload (ISAKMP)'.'next payload type' containing ISAKMP_NEXT_T (0x3) is ISAKMP_NEXT_T (0x3)
| last substructure: saving location 'ISAKMP Proposal Payload'.'ISAKMP Transform Payload (ISAKMP)'.'next payload type'
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_LIFE_TYPE (0x800b)
|    length/value: 1 (00 01)
|     [1 is OAKLEY_LIFE_SECONDS]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_LIFE_DURATION (variable length) (0x800c)
|    length/value: 3600 (0e 10)
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_ENCRYPTION_ALGORITHM (0x8001)
|    length/value: 5 (00 05)
|     [5 is OAKLEY_3DES_CBC]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_HASH_ALGORITHM (0x8002)
|    length/value: 2 (00 02)
|     [2 is OAKLEY_SHA1]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_AUTHENTICATION_METHOD (0x8003)
|    length/value: 3 (00 03)
|     [3 is OAKLEY_RSA_SIG]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_GROUP_DESCRIPTION (0x8004)
|    length/value: 5 (00 05)
|     [5 is OAKLEY_GROUP_MODP1536]
| emitting length of ISAKMP Transform Payload (ISAKMP): 32
| emitting length of ISAKMP Proposal Payload: 632
| last substructure: checking 'ISAKMP Proposal Payload'.'ISAKMP Transform Payload (ISAKMP)'.'next payload type' is 0
| emitting length of ISAKMP Security Association Payload: 644
| last substructure: checking 'ISAKMP Security Association Payload'.'ISAKMP Proposal Payload'.'next payload type' is 0
| delref sadb@0x564b9e340878(1->0) (in free_sa() at ikev1_spdb.c:837)
| out_vid(): sending [FRAGMENTATION]
| ***emit ISAKMP Vendor ID Payload:
|    next payload type: ISAKMP_NEXT_NONE (0x0)
| next payload chain: setting previous 'ISAKMP Security Association Payload'.'next payload type' to current ISAKMP Vendor ID Payload (13:ISAKMP_NEXT_VID)
| next payload chain: saving location 'ISAKMP Vendor ID Payload'.'next payload type' in 'reply packet'
| emitting 16 raw bytes of V_ID into ISAKMP Vendor ID Payload
| V_ID: 40 48 b7 d5  6e bc e8 85  25 e7 de 7f  00 d6 c2 d3
| emitting length of ISAKMP Vendor ID Payload: 20
| out_vid(): sending [Dead Peer Detection]
| ***emit ISAKMP Vendor ID Payload:
|    next payload type: ISAKMP_NEXT_NONE (0x0)
| next payload chain: setting previous 'ISAKMP Vendor ID Payload'.'next payload type' to current ISAKMP Vendor ID Payload (13:ISAKMP_NEXT_VID)
| next payload chain: saving location 'ISAKMP Vendor ID Payload'.'next payload type' in 'reply packet'
| emitting 16 raw bytes of V_ID into ISAKMP Vendor ID Payload
| V_ID: af ca d7 13  68 a1 f1 c9  6b 86 96 fc  77 57 01 00
| emitting length of ISAKMP Vendor ID Payload: 20
| nat add vid
| sending draft and RFC NATT VIDs
| out_vid(): sending [RFC 3947]
| ***emit ISAKMP Vendor ID Payload:
|    next payload type: ISAKMP_NEXT_NONE (0x0)
| next payload chain: setting previous 'ISAKMP Vendor ID Payload'.'next payload type' to current ISAKMP Vendor ID Payload (13:ISAKMP_NEXT_VID)
| next payload chain: saving location 'ISAKMP Vendor ID Payload'.'next payload type' in 'reply packet'
| emitting 16 raw bytes of V_ID into ISAKMP Vendor ID Payload
| V_ID: 4a 13 1c 81  07 03 58 45  5c 57 28 f2  0e 95 45 2f
| emitting length of ISAKMP Vendor ID Payload: 20
| skipping VID_NATT_RFC
| out_vid(): sending [draft-ietf-ipsec-nat-t-ike-03]
| ***emit ISAKMP Vendor ID Payload:
|    next payload type: ISAKMP_NEXT_NONE (0x0)
| next payload chain: setting previous 'ISAKMP Vendor ID Payload'.'next payload type' to current ISAKMP Vendor ID Payload (13:ISAKMP_NEXT_VID)
| next payload chain: saving location 'ISAKMP Vendor ID Payload'.'next payload type' in 'reply packet'
| emitting 16 raw bytes of V_ID into ISAKMP Vendor ID Payload
| V_ID: 7d 94 19 a6  53 10 ca 6f  2c 17 9d 92  15 52 9d 56
| emitting length of ISAKMP Vendor ID Payload: 20
| out_vid(): sending [draft-ietf-ipsec-nat-t-ike-02_n]
| ***emit ISAKMP Vendor ID Payload:
|    next payload type: ISAKMP_NEXT_NONE (0x0)
| next payload chain: setting previous 'ISAKMP Vendor ID Payload'.'next payload type' to current ISAKMP Vendor ID Payload (13:ISAKMP_NEXT_VID)
| next payload chain: saving location 'ISAKMP Vendor ID Payload'.'next payload type' in 'reply packet'
| emitting 16 raw bytes of V_ID into ISAKMP Vendor ID Payload
| V_ID: 90 cb 80 91  3e bb 69 6e  08 63 81 b5  ec 42 7b 1f
| emitting length of ISAKMP Vendor ID Payload: 20
| out_vid(): sending [draft-ietf-ipsec-nat-t-ike-02]
| ***emit ISAKMP Vendor ID Payload:
|    next payload type: ISAKMP_NEXT_NONE (0x0)
| next payload chain: setting previous 'ISAKMP Vendor ID Payload'.'next payload type' to current ISAKMP Vendor ID Payload (13:ISAKMP_NEXT_VID)
| next payload chain: saving location 'ISAKMP Vendor ID Payload'.'next payload type' in 'reply packet'
| emitting 16 raw bytes of V_ID into ISAKMP Vendor ID Payload
| V_ID: cd 60 46 43  35 df 21 f8  7c fd b2 fc  68 b6 a4 48
| emitting length of ISAKMP Vendor ID Payload: 20
| no IKEv1 message padding required
| emitting length of ISAKMP Message: 792
| sending 792 bytes for reply packet for main_outI1 through eth1 from 192.1.2.45:500 to 192.1.2.23:500 using UDP (for #1)
|   57 5f 25 be  c7 31 1d 6a  00 00 00 00  00 00 00 00
|   01 10 02 00  00 00 00 00  00 00 03 18  0d 00 02 84
|   00 00 00 01  00 00 00 01  00 00 02 78  00 01 00 12
|   03 00 00 24  00 01 00 00  80 0b 00 01  80 0c 0e 10
|   80 01 00 07  80 02 00 04  80 03 00 03  80 04 00 0e
|   80 0e 01 00  03 00 00 24  01 01 00 00  80 0b 00 01
|   80 0c 0e 10  80 01 00 07  80 02 00 04  80 03 00 03
|   80 04 00 0e  80 0e 00 80  03 00 00 24  02 01 00 00
|   80 0b 00 01  80 0c 0e 10  80 01 00 07  80 02 00 06
|   80 03 00 03  80 04 00 0e  80 0e 01 00  03 00 00 24
|   03 01 00 00  80 0b 00 01  80 0c 0e 10  80 01 00 07
|   80 02 00 06  80 03 00 03  80 04 00 0e  80 0e 00 80
|   03 00 00 24  04 01 00 00  80 0b 00 01  80 0c 0e 10
|   80 01 00 07  80 02 00 02  80 03 00 03  80 04 00 0e
|   80 0e 01 00  03 00 00 24  05 01 00 00  80 0b 00 01
|   80 0c 0e 10  80 01 00 07  80 02 00 02  80 03 00 03
|   80 04 00 0e  80 0e 00 80  03 00 00 24  06 01 00 00
|   80 0b 00 01  80 0c 0e 10  80 01 00 07  80 02 00 04
|   80 03 00 03  80 04 00 05  80 0e 01 00  03 00 00 24
|   07 01 00 00  80 0b 00 01  80 0c 0e 10  80 01 00 07
|   80 02 00 04  80 03 00 03  80 04 00 05  80 0e 00 80
|   03 00 00 24  08 01 00 00  80 0b 00 01  80 0c 0e 10
|   80 01 00 07  80 02 00 06  80 03 00 03  80 04 00 05
|   80 0e 01 00  03 00 00 24  09 01 00 00  80 0b 00 01
|   80 0c 0e 10  80 01 00 07  80 02 00 06  80 03 00 03
|   80 04 00 05  80 0e 00 80  03 00 00 24  0a 01 00 00
|   80 0b 00 01  80 0c 0e 10  80 01 00 07  80 02 00 02
|   80 03 00 03  80 04 00 05  80 0e 01 00  03 00 00 24
|   0b 01 00 00  80 0b 00 01  80 0c 0e 10  80 01 00 07
|   80 02 00 02  80 03 00 03  80 04 00 05  80 0e 00 80
|   03 00 00 20  0c 01 00 00  80 0b 00 01  80 0c 0e 10
|   80 01 00 05  80 02 00 04  80 03 00 03  80 04 00 0e
|   03 00 00 20  0d 01 00 00  80 0b 00 01  80 0c 0e 10
|   80 01 00 05  80 02 00 06  80 03 00 03  80 04 00 0e
|   03 00 00 20  0e 01 00 00  80 0b 00 01  80 0c 0e 10
|   80 01 00 05  80 02 00 02  80 03 00 03  80 04 00 0e
|   03 00 00 20  0f 01 00 00  80 0b 00 01  80 0c 0e 10
|   80 01 00 05  80 02 00 04  80 03 00 03  80 04 00 05
|   03 00 00 20  10 01 00 00  80 0b 00 01  80 0c 0e 10
|   80 01 00 05  80 02 00 06  80 03 00 03  80 04 00 05
|   00 00 00 20  11 01 00 00  80 0b 00 01  80 0c 0e 10
|   80 01 00 05  80 02 00 02  80 03 00 03  80 04 00 05
|   0d 00 00 14  40 48 b7 d5  6e bc e8 85  25 e7 de 7f
|   00 d6 c2 d3  0d 00 00 14  af ca d7 13  68 a1 f1 c9
|   6b 86 96 fc  77 57 01 00  0d 00 00 14  4a 13 1c 81
|   07 03 58 45  5c 57 28 f2  0e 95 45 2f  0d 00 00 14
|   7d 94 19 a6  53 10 ca 6f  2c 17 9d 92  15 52 9d 56
|   0d 00 00 14  90 cb 80 91  3e bb 69 6e  08 63 81 b5
|   ec 42 7b 1f  00 00 00 14  cd 60 46 43  35 df 21 f8
|   7c fd b2 fc  68 b6 a4 48
| state #1 has no .st_event to delete
| #1 STATE_MAIN_I1: retransmits: cleared
| event_schedule: newref EVENT_RETRANSMIT-pe@0x564b9e3413c8
| inserting event EVENT_RETRANSMIT, timeout in 0.5 seconds for #1
| libevent_malloc: newref ptr-libevent@0x564b9e33f5c8 size 128
| #1 STATE_MAIN_I1: retransmits: first event in 0.5 seconds; timeout in 60 seconds; limit of 12 retransmits; current time is 744539.104953
"westnet-eastnet-ikev2" #1: sent Main Mode request
| #1 spent 1.73 (1.76) milliseconds in main_outI1()
| stop processing: state #1 connection "westnet-eastnet-ikev2" from 192.1.2.23:500 (in main_outI1() at ikev1_main.c:222)
| delref fd@0x564b9e33b678(3->2) (in whack_handle_cb() at rcv_whack.c:903)
| spent 1.82 (1.86) milliseconds in whack
| timer_event_cb: processing event@0x564b9e3413c8
| handling event EVENT_RETRANSMIT for parent state #1
| libevent_free: delref ptr-libevent@0x564b9e33f5c8
| free_event_entry: delref EVENT_RETRANSMIT-pe@0x564b9e3413c8
| start processing: state #1 connection "westnet-eastnet-ikev2" from 192.1.2.23:500 (in timer_event_cb() at timer.c:188)
| IKEv1 retransmit event
| [RE]START processing: state #1 connection "westnet-eastnet-ikev2" from 192.1.2.23:500 (in retransmit_v1_msg() at retry.c:62)
| handling event EVENT_RETRANSMIT for 192.1.2.23 "westnet-eastnet-ikev2" #1 keying attempt 1 of 0; retransmit 1
"westnet-eastnet-ikev2" #1: IMPAIR: retransmit so deleting SA
| [RE]START processing: state #1 connection "westnet-eastnet-ikev2" from 192.1.2.23:500 (in retransmit_v1_msg() at retry.c:123)
| pstats #1 ikev1.isakmp failed too-many-retransmits
| pstats #1 ikev1.isakmp deleted too-many-retransmits
| #1 main thread spent 1.73 (1.76) milliseconds helper thread spent 0 (0) milliseconds in total
| [RE]START processing: state #1 connection "westnet-eastnet-ikev2" from 192.1.2.23:500 (in delete_state() at state.c:935)
| should_send_delete: no, not established
"westnet-eastnet-ikev2" #1: deleting state (STATE_MAIN_I1) aged 0.502272s and NOT sending notification
| parent state #1: MAIN_I1(half-open IKE SA) => delete
| unsuspending #1 MD (nil)
| should_send_delete: no, not established
| state #1 has no .st_event to delete
| #1 STATE_MAIN_I1: retransmits: cleared
| in connection_discard for connection westnet-eastnet-ikev2
| delref fd@0x564b9e33b678(2->1) (in delete_pending() at pending.c:218)
| removing pending policy for "westnet-eastnet-ikev2" {0x564b9e33b6f8}
| State DB: IKEv1 state not found (flush_incomplete_children)
| picked newest_isakmp_sa #0 for #1
"westnet-eastnet-ikev2" #1: deleting IKE SA but connection is supposed to remain up; schedule EVENT_REVIVE_CONNS
| add revival: connection 'westnet-eastnet-ikev2' added to the list and scheduled for 0 seconds
| global one-shot timer EVENT_REVIVE_CONNS scheduled in 0 seconds
| in connection_discard for connection westnet-eastnet-ikev2
| State DB: deleting IKEv1 state #1 in MAIN_I1
| parent state #1: MAIN_I1(half-open IKE SA) => UNDEFINED(ignore)
| releasing #1's fd-fd@0x564b9e33b678 because deleting state
| delref fd@0x564b9e33b678(1->0) (in delete_state() at state.c:1195)
| freeref fd-fd@0x564b9e33b678 (in delete_state() at state.c:1195)
| delref fd@NULL (in delete_state() at state.c:1195)
| delref pkp@NULL (in delete_state() at state.c:1202)
| stop processing: state #1 from 192.1.2.23:500 (in delete_state() at state.c:1239)
| delref logger@0x564b9e32ee38(1->0) (in delete_state() at state.c:1306)
| delref fd@NULL (in free_logger() at log.c:853)
| delref fd@NULL (in free_logger() at log.c:854)
| in statetime_stop() and could not find #1
| processing: STOP state #0 (in timer_event_cb() at timer.c:447)
| processing global timer EVENT_REVIVE_CONNS
| FOR_EACH_CONNECTION_... in conn_by_name
"westnet-eastnet-ikev2": initiating connection which received a Delete/Notify but must remain up per local policy
| empty esp_info, returning defaults for ENCRYPT
| newref sadb@0x564b9e33ff88(0->1) (in v1_kernel_alg_makedb() at ikev1_spdb_struct.c:542)
| delref sadb@0x564b9e33ff88(1->0) (in free_sa() at ikev1_spdb.c:837)
| connection 'westnet-eastnet-ikev2' +POLICY_UP
| FOR_EACH_STATE_... in find_phase1_state
| newref alloc logger@0x564b9e3413c8(0->1) (in new_state() at state.c:576)
| addref fd@NULL (in new_state() at state.c:577)
| creating state object #2 at 0x564b9e33d138
| State DB: adding IKEv1 state #2 in UNDEFINED
| pstats #2 ikev1.isakmp started
| orienting westnet-eastnet-ikev2
| westnet-eastnet-ikev2 doesn't match 127.0.0.1:4500 at all
| westnet-eastnet-ikev2 doesn't match 127.0.0.1:500 at all
| westnet-eastnet-ikev2 doesn't match 192.0.1.254:4500 at all
| westnet-eastnet-ikev2 doesn't match 192.0.1.254:500 at all
| westnet-eastnet-ikev2 doesn't match 192.1.2.45:4500 at all
| oriented westnet-eastnet-ikev2's this
| start processing: state #2 connection "westnet-eastnet-ikev2" from 192.1.2.23:500 (in main_outI1() at ikev1_main.c:117)
| parent state #2: UNDEFINED(ignore) => MAIN_I1(half-open IKE SA)
| addref fd@NULL (in add_pending() at pending.c:86)
| queuing pending IPsec SA negotiating with 192.1.2.23 IKE SA #2 "westnet-eastnet-ikev2"
"westnet-eastnet-ikev2" #2: initiating IKEv1 Main Mode connection
| opening output PBS reply packet
| **emit ISAKMP Message:
|    initiator SPI: 40 3f ab c8  d7 d8 02 0f
|    responder SPI: 00 00 00 00  00 00 00 00
|    next payload type: ISAKMP_NEXT_NONE (0x0)
|    ISAKMP version: ISAKMP Version 1.0 (rfc2407) (0x10)
|    exchange type: ISAKMP_XCHG_IDPROT (0x2)
|    flags: none (0x0)
|    Message ID: 0 (00 00 00 00)
| next payload chain: saving message location 'ISAKMP Message'.'next payload type'
| no specific IKE algorithms specified - using defaults
| oakley_alg_makedb() processing ealg=AES_CBC=7 halg=HMAC_SHA2_256=4 modp=MODP2048=14 eklen=0
| newref sadb@0x564b9e32a918(0->1) (in oakley_alg_mergedb() at ikev1_spdb_struct.c:698)
| newref sadb@0x564b9e33e458(0->1) (in oakley_alg_mergedb() at ikev1_spdb_struct.c:870)
| delref sadb@0x564b9e33e458(1->0) (in free_sa() at ikev1_spdb.c:837)
| delref sadb@0x564b9e32a918(1->0) (in free_sa() at ikev1_spdb.c:837)
| oakley_alg_makedb() processing ealg=AES_CBC=7 halg=HMAC_SHA2_512=6 modp=MODP2048=14 eklen=0
| newref sadb@0x564b9e32a918(0->1) (in oakley_alg_mergedb() at ikev1_spdb_struct.c:698)
| delref sadb@0x564b9e33e548(1->0) (in free_sa() at ikev1_spdb.c:837)
| delref sadb@0x564b9e33e458(1->0) (in free_sa() at ikev1_spdb.c:837)
| delref sadb@0x564b9e32a918(1->0) (in free_sa() at ikev1_spdb.c:837)
| oakley_alg_makedb() processing ealg=AES_CBC=7 halg=HMAC_SHA1=2 modp=MODP2048=14 eklen=0
| newref sadb@0x564b9e32a918(0->1) (in oakley_alg_mergedb() at ikev1_spdb_struct.c:698)
| delref sadb@0x564b9e33e548(1->0) (in free_sa() at ikev1_spdb.c:837)
| delref sadb@0x564b9e33e458(1->0) (in free_sa() at ikev1_spdb.c:837)
| delref sadb@0x564b9e32a918(1->0) (in free_sa() at ikev1_spdb.c:837)
| oakley_alg_makedb() processing ealg=AES_CBC=7 halg=HMAC_SHA2_256=4 modp=MODP1536=5 eklen=0
| newref sadb@0x564b9e32a918(0->1) (in oakley_alg_mergedb() at ikev1_spdb_struct.c:698)
| delref sadb@0x564b9e33e548(1->0) (in free_sa() at ikev1_spdb.c:837)
| delref sadb@0x564b9e33e458(1->0) (in free_sa() at ikev1_spdb.c:837)
| delref sadb@0x564b9e32a918(1->0) (in free_sa() at ikev1_spdb.c:837)
| oakley_alg_makedb() processing ealg=AES_CBC=7 halg=HMAC_SHA2_512=6 modp=MODP1536=5 eklen=0
| newref sadb@0x564b9e32a918(0->1) (in oakley_alg_mergedb() at ikev1_spdb_struct.c:698)
| delref sadb@0x564b9e33e548(1->0) (in free_sa() at ikev1_spdb.c:837)
| delref sadb@0x564b9e33e458(1->0) (in free_sa() at ikev1_spdb.c:837)
| delref sadb@0x564b9e32a918(1->0) (in free_sa() at ikev1_spdb.c:837)
| oakley_alg_makedb() processing ealg=AES_CBC=7 halg=HMAC_SHA1=2 modp=MODP1536=5 eklen=0
| newref sadb@0x564b9e32a918(0->1) (in oakley_alg_mergedb() at ikev1_spdb_struct.c:698)
| delref sadb@0x564b9e33e548(1->0) (in free_sa() at ikev1_spdb.c:837)
| delref sadb@0x564b9e33e458(1->0) (in free_sa() at ikev1_spdb.c:837)
| delref sadb@0x564b9e32a918(1->0) (in free_sa() at ikev1_spdb.c:837)
| oakley_alg_makedb() processing ealg=3DES_CBC=5 halg=HMAC_SHA2_256=4 modp=MODP2048=14 eklen=0
| newref sadb@0x564b9e32a918(0->1) (in oakley_alg_mergedb() at ikev1_spdb_struct.c:698)
| delref sadb@0x564b9e33e548(1->0) (in free_sa() at ikev1_spdb.c:837)
| delref sadb@0x564b9e32a918(1->0) (in free_sa() at ikev1_spdb.c:837)
| oakley_alg_makedb() processing ealg=3DES_CBC=5 halg=HMAC_SHA2_512=6 modp=MODP2048=14 eklen=0
| newref sadb@0x564b9e32a918(0->1) (in oakley_alg_mergedb() at ikev1_spdb_struct.c:698)
| delref sadb@0x564b9e33e458(1->0) (in free_sa() at ikev1_spdb.c:837)
| delref sadb@0x564b9e32a918(1->0) (in free_sa() at ikev1_spdb.c:837)
| oakley_alg_makedb() processing ealg=3DES_CBC=5 halg=HMAC_SHA1=2 modp=MODP2048=14 eklen=0
| newref sadb@0x564b9e32a918(0->1) (in oakley_alg_mergedb() at ikev1_spdb_struct.c:698)
| delref sadb@0x564b9e33e548(1->0) (in free_sa() at ikev1_spdb.c:837)
| delref sadb@0x564b9e32a918(1->0) (in free_sa() at ikev1_spdb.c:837)
| oakley_alg_makedb() processing ealg=3DES_CBC=5 halg=HMAC_SHA2_256=4 modp=MODP1536=5 eklen=0
| newref sadb@0x564b9e32a918(0->1) (in oakley_alg_mergedb() at ikev1_spdb_struct.c:698)
| delref sadb@0x564b9e33e458(1->0) (in free_sa() at ikev1_spdb.c:837)
| delref sadb@0x564b9e32a918(1->0) (in free_sa() at ikev1_spdb.c:837)
| oakley_alg_makedb() processing ealg=3DES_CBC=5 halg=HMAC_SHA2_512=6 modp=MODP1536=5 eklen=0
| newref sadb@0x564b9e33e358(0->1) (in oakley_alg_mergedb() at ikev1_spdb_struct.c:698)
| delref sadb@0x564b9e33e548(1->0) (in free_sa() at ikev1_spdb.c:837)
| delref sadb@0x564b9e33e358(1->0) (in free_sa() at ikev1_spdb.c:837)
| oakley_alg_makedb() processing ealg=3DES_CBC=5 halg=HMAC_SHA1=2 modp=MODP1536=5 eklen=0
| newref sadb@0x564b9e33e458(0->1) (in oakley_alg_mergedb() at ikev1_spdb_struct.c:698)
| delref sadb@0x564b9e33e4a8(1->0) (in free_sa() at ikev1_spdb.c:837)
| delref sadb@0x564b9e33e458(1->0) (in free_sa() at ikev1_spdb.c:837)
| oakley_alg_makedb() returning 0x564b9e341d58
| ***emit ISAKMP Security Association Payload:
|    next payload type: ISAKMP_NEXT_NONE (0x0)
|    DOI: ISAKMP_DOI_IPSEC (0x1)
| next payload chain: setting previous 'ISAKMP Message'.'next payload type' to current ISAKMP Security Association Payload (1:ISAKMP_NEXT_SA)
| next payload chain: saving location 'ISAKMP Security Association Payload'.'next payload type' in 'reply packet'
| ****emit IPsec DOI SIT:
|    IPsec DOI SIT: SIT_IDENTITY_ONLY (0x1)
| ikev1_out_sa() pcn: 0 has 1 valid proposals
| ikev1_out_sa() pcn: 0 pn: 0<1 valid_count: 1 trans_cnt: 18
| ****emit ISAKMP Proposal Payload:
|    next payload type: ISAKMP_NEXT_NONE (0x0)
|    proposal number: 0 (00)
|    protocol ID: PROTO_ISAKMP (0x1)
|    SPI size: 0 (00)
|    number of transforms: 18 (12)
| last substructure: saving location 'ISAKMP Security Association Payload'.'ISAKMP Proposal Payload'.'next payload type'
| *****emit ISAKMP Transform Payload (ISAKMP):
|    next payload type: ISAKMP_NEXT_T (0x3)
|    ISAKMP transform number: 0 (00)
|    ISAKMP transform ID: KEY_IKE (0x1)
| last substructure: saving location 'ISAKMP Proposal Payload'.'ISAKMP Transform Payload (ISAKMP)'.'next payload type'
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_LIFE_TYPE (0x800b)
|    length/value: 1 (00 01)
|     [1 is OAKLEY_LIFE_SECONDS]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_LIFE_DURATION (variable length) (0x800c)
|    length/value: 3600 (0e 10)
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_ENCRYPTION_ALGORITHM (0x8001)
|    length/value: 7 (00 07)
|     [7 is OAKLEY_AES_CBC]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_HASH_ALGORITHM (0x8002)
|    length/value: 4 (00 04)
|     [4 is OAKLEY_SHA2_256]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_AUTHENTICATION_METHOD (0x8003)
|    length/value: 3 (00 03)
|     [3 is OAKLEY_RSA_SIG]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_GROUP_DESCRIPTION (0x8004)
|    length/value: 14 (00 0e)
|     [14 is OAKLEY_GROUP_MODP2048]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_KEY_LENGTH (0x800e)
|    length/value: 256 (01 00)
| emitting length of ISAKMP Transform Payload (ISAKMP): 36
| *****emit ISAKMP Transform Payload (ISAKMP):
|    next payload type: ISAKMP_NEXT_T (0x3)
|    ISAKMP transform number: 1 (01)
|    ISAKMP transform ID: KEY_IKE (0x1)
| last substructure: checking 'ISAKMP Proposal Payload'.'ISAKMP Transform Payload (ISAKMP)'.'next payload type' containing ISAKMP_NEXT_T (0x3) is ISAKMP_NEXT_T (0x3)
| last substructure: saving location 'ISAKMP Proposal Payload'.'ISAKMP Transform Payload (ISAKMP)'.'next payload type'
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_LIFE_TYPE (0x800b)
|    length/value: 1 (00 01)
|     [1 is OAKLEY_LIFE_SECONDS]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_LIFE_DURATION (variable length) (0x800c)
|    length/value: 3600 (0e 10)
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_ENCRYPTION_ALGORITHM (0x8001)
|    length/value: 7 (00 07)
|     [7 is OAKLEY_AES_CBC]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_HASH_ALGORITHM (0x8002)
|    length/value: 4 (00 04)
|     [4 is OAKLEY_SHA2_256]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_AUTHENTICATION_METHOD (0x8003)
|    length/value: 3 (00 03)
|     [3 is OAKLEY_RSA_SIG]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_GROUP_DESCRIPTION (0x8004)
|    length/value: 14 (00 0e)
|     [14 is OAKLEY_GROUP_MODP2048]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_KEY_LENGTH (0x800e)
|    length/value: 128 (00 80)
| emitting length of ISAKMP Transform Payload (ISAKMP): 36
| *****emit ISAKMP Transform Payload (ISAKMP):
|    next payload type: ISAKMP_NEXT_T (0x3)
|    ISAKMP transform number: 2 (02)
|    ISAKMP transform ID: KEY_IKE (0x1)
| last substructure: checking 'ISAKMP Proposal Payload'.'ISAKMP Transform Payload (ISAKMP)'.'next payload type' containing ISAKMP_NEXT_T (0x3) is ISAKMP_NEXT_T (0x3)
| last substructure: saving location 'ISAKMP Proposal Payload'.'ISAKMP Transform Payload (ISAKMP)'.'next payload type'
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_LIFE_TYPE (0x800b)
|    length/value: 1 (00 01)
|     [1 is OAKLEY_LIFE_SECONDS]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_LIFE_DURATION (variable length) (0x800c)
|    length/value: 3600 (0e 10)
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_ENCRYPTION_ALGORITHM (0x8001)
|    length/value: 7 (00 07)
|     [7 is OAKLEY_AES_CBC]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_HASH_ALGORITHM (0x8002)
|    length/value: 6 (00 06)
|     [6 is OAKLEY_SHA2_512]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_AUTHENTICATION_METHOD (0x8003)
|    length/value: 3 (00 03)
|     [3 is OAKLEY_RSA_SIG]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_GROUP_DESCRIPTION (0x8004)
|    length/value: 14 (00 0e)
|     [14 is OAKLEY_GROUP_MODP2048]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_KEY_LENGTH (0x800e)
|    length/value: 256 (01 00)
| emitting length of ISAKMP Transform Payload (ISAKMP): 36
| *****emit ISAKMP Transform Payload (ISAKMP):
|    next payload type: ISAKMP_NEXT_T (0x3)
|    ISAKMP transform number: 3 (03)
|    ISAKMP transform ID: KEY_IKE (0x1)
| last substructure: checking 'ISAKMP Proposal Payload'.'ISAKMP Transform Payload (ISAKMP)'.'next payload type' containing ISAKMP_NEXT_T (0x3) is ISAKMP_NEXT_T (0x3)
| last substructure: saving location 'ISAKMP Proposal Payload'.'ISAKMP Transform Payload (ISAKMP)'.'next payload type'
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_LIFE_TYPE (0x800b)
|    length/value: 1 (00 01)
|     [1 is OAKLEY_LIFE_SECONDS]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_LIFE_DURATION (variable length) (0x800c)
|    length/value: 3600 (0e 10)
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_ENCRYPTION_ALGORITHM (0x8001)
|    length/value: 7 (00 07)
|     [7 is OAKLEY_AES_CBC]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_HASH_ALGORITHM (0x8002)
|    length/value: 6 (00 06)
|     [6 is OAKLEY_SHA2_512]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_AUTHENTICATION_METHOD (0x8003)
|    length/value: 3 (00 03)
|     [3 is OAKLEY_RSA_SIG]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_GROUP_DESCRIPTION (0x8004)
|    length/value: 14 (00 0e)
|     [14 is OAKLEY_GROUP_MODP2048]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_KEY_LENGTH (0x800e)
|    length/value: 128 (00 80)
| emitting length of ISAKMP Transform Payload (ISAKMP): 36
| *****emit ISAKMP Transform Payload (ISAKMP):
|    next payload type: ISAKMP_NEXT_T (0x3)
|    ISAKMP transform number: 4 (04)
|    ISAKMP transform ID: KEY_IKE (0x1)
| last substructure: checking 'ISAKMP Proposal Payload'.'ISAKMP Transform Payload (ISAKMP)'.'next payload type' containing ISAKMP_NEXT_T (0x3) is ISAKMP_NEXT_T (0x3)
| last substructure: saving location 'ISAKMP Proposal Payload'.'ISAKMP Transform Payload (ISAKMP)'.'next payload type'
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_LIFE_TYPE (0x800b)
|    length/value: 1 (00 01)
|     [1 is OAKLEY_LIFE_SECONDS]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_LIFE_DURATION (variable length) (0x800c)
|    length/value: 3600 (0e 10)
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_ENCRYPTION_ALGORITHM (0x8001)
|    length/value: 7 (00 07)
|     [7 is OAKLEY_AES_CBC]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_HASH_ALGORITHM (0x8002)
|    length/value: 2 (00 02)
|     [2 is OAKLEY_SHA1]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_AUTHENTICATION_METHOD (0x8003)
|    length/value: 3 (00 03)
|     [3 is OAKLEY_RSA_SIG]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_GROUP_DESCRIPTION (0x8004)
|    length/value: 14 (00 0e)
|     [14 is OAKLEY_GROUP_MODP2048]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_KEY_LENGTH (0x800e)
|    length/value: 256 (01 00)
| emitting length of ISAKMP Transform Payload (ISAKMP): 36
| *****emit ISAKMP Transform Payload (ISAKMP):
|    next payload type: ISAKMP_NEXT_T (0x3)
|    ISAKMP transform number: 5 (05)
|    ISAKMP transform ID: KEY_IKE (0x1)
| last substructure: checking 'ISAKMP Proposal Payload'.'ISAKMP Transform Payload (ISAKMP)'.'next payload type' containing ISAKMP_NEXT_T (0x3) is ISAKMP_NEXT_T (0x3)
| last substructure: saving location 'ISAKMP Proposal Payload'.'ISAKMP Transform Payload (ISAKMP)'.'next payload type'
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_LIFE_TYPE (0x800b)
|    length/value: 1 (00 01)
|     [1 is OAKLEY_LIFE_SECONDS]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_LIFE_DURATION (variable length) (0x800c)
|    length/value: 3600 (0e 10)
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_ENCRYPTION_ALGORITHM (0x8001)
|    length/value: 7 (00 07)
|     [7 is OAKLEY_AES_CBC]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_HASH_ALGORITHM (0x8002)
|    length/value: 2 (00 02)
|     [2 is OAKLEY_SHA1]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_AUTHENTICATION_METHOD (0x8003)
|    length/value: 3 (00 03)
|     [3 is OAKLEY_RSA_SIG]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_GROUP_DESCRIPTION (0x8004)
|    length/value: 14 (00 0e)
|     [14 is OAKLEY_GROUP_MODP2048]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_KEY_LENGTH (0x800e)
|    length/value: 128 (00 80)
| emitting length of ISAKMP Transform Payload (ISAKMP): 36
| *****emit ISAKMP Transform Payload (ISAKMP):
|    next payload type: ISAKMP_NEXT_T (0x3)
|    ISAKMP transform number: 6 (06)
|    ISAKMP transform ID: KEY_IKE (0x1)
| last substructure: checking 'ISAKMP Proposal Payload'.'ISAKMP Transform Payload (ISAKMP)'.'next payload type' containing ISAKMP_NEXT_T (0x3) is ISAKMP_NEXT_T (0x3)
| last substructure: saving location 'ISAKMP Proposal Payload'.'ISAKMP Transform Payload (ISAKMP)'.'next payload type'
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_LIFE_TYPE (0x800b)
|    length/value: 1 (00 01)
|     [1 is OAKLEY_LIFE_SECONDS]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_LIFE_DURATION (variable length) (0x800c)
|    length/value: 3600 (0e 10)
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_ENCRYPTION_ALGORITHM (0x8001)
|    length/value: 7 (00 07)
|     [7 is OAKLEY_AES_CBC]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_HASH_ALGORITHM (0x8002)
|    length/value: 4 (00 04)
|     [4 is OAKLEY_SHA2_256]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_AUTHENTICATION_METHOD (0x8003)
|    length/value: 3 (00 03)
|     [3 is OAKLEY_RSA_SIG]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_GROUP_DESCRIPTION (0x8004)
|    length/value: 5 (00 05)
|     [5 is OAKLEY_GROUP_MODP1536]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_KEY_LENGTH (0x800e)
|    length/value: 256 (01 00)
| emitting length of ISAKMP Transform Payload (ISAKMP): 36
| *****emit ISAKMP Transform Payload (ISAKMP):
|    next payload type: ISAKMP_NEXT_T (0x3)
|    ISAKMP transform number: 7 (07)
|    ISAKMP transform ID: KEY_IKE (0x1)
| last substructure: checking 'ISAKMP Proposal Payload'.'ISAKMP Transform Payload (ISAKMP)'.'next payload type' containing ISAKMP_NEXT_T (0x3) is ISAKMP_NEXT_T (0x3)
| last substructure: saving location 'ISAKMP Proposal Payload'.'ISAKMP Transform Payload (ISAKMP)'.'next payload type'
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_LIFE_TYPE (0x800b)
|    length/value: 1 (00 01)
|     [1 is OAKLEY_LIFE_SECONDS]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_LIFE_DURATION (variable length) (0x800c)
|    length/value: 3600 (0e 10)
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_ENCRYPTION_ALGORITHM (0x8001)
|    length/value: 7 (00 07)
|     [7 is OAKLEY_AES_CBC]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_HASH_ALGORITHM (0x8002)
|    length/value: 4 (00 04)
|     [4 is OAKLEY_SHA2_256]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_AUTHENTICATION_METHOD (0x8003)
|    length/value: 3 (00 03)
|     [3 is OAKLEY_RSA_SIG]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_GROUP_DESCRIPTION (0x8004)
|    length/value: 5 (00 05)
|     [5 is OAKLEY_GROUP_MODP1536]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_KEY_LENGTH (0x800e)
|    length/value: 128 (00 80)
| emitting length of ISAKMP Transform Payload (ISAKMP): 36
| *****emit ISAKMP Transform Payload (ISAKMP):
|    next payload type: ISAKMP_NEXT_T (0x3)
|    ISAKMP transform number: 8 (08)
|    ISAKMP transform ID: KEY_IKE (0x1)
| last substructure: checking 'ISAKMP Proposal Payload'.'ISAKMP Transform Payload (ISAKMP)'.'next payload type' containing ISAKMP_NEXT_T (0x3) is ISAKMP_NEXT_T (0x3)
| last substructure: saving location 'ISAKMP Proposal Payload'.'ISAKMP Transform Payload (ISAKMP)'.'next payload type'
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_LIFE_TYPE (0x800b)
|    length/value: 1 (00 01)
|     [1 is OAKLEY_LIFE_SECONDS]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_LIFE_DURATION (variable length) (0x800c)
|    length/value: 3600 (0e 10)
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_ENCRYPTION_ALGORITHM (0x8001)
|    length/value: 7 (00 07)
|     [7 is OAKLEY_AES_CBC]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_HASH_ALGORITHM (0x8002)
|    length/value: 6 (00 06)
|     [6 is OAKLEY_SHA2_512]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_AUTHENTICATION_METHOD (0x8003)
|    length/value: 3 (00 03)
|     [3 is OAKLEY_RSA_SIG]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_GROUP_DESCRIPTION (0x8004)
|    length/value: 5 (00 05)
|     [5 is OAKLEY_GROUP_MODP1536]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_KEY_LENGTH (0x800e)
|    length/value: 256 (01 00)
| emitting length of ISAKMP Transform Payload (ISAKMP): 36
| *****emit ISAKMP Transform Payload (ISAKMP):
|    next payload type: ISAKMP_NEXT_T (0x3)
|    ISAKMP transform number: 9 (09)
|    ISAKMP transform ID: KEY_IKE (0x1)
| last substructure: checking 'ISAKMP Proposal Payload'.'ISAKMP Transform Payload (ISAKMP)'.'next payload type' containing ISAKMP_NEXT_T (0x3) is ISAKMP_NEXT_T (0x3)
| last substructure: saving location 'ISAKMP Proposal Payload'.'ISAKMP Transform Payload (ISAKMP)'.'next payload type'
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_LIFE_TYPE (0x800b)
|    length/value: 1 (00 01)
|     [1 is OAKLEY_LIFE_SECONDS]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_LIFE_DURATION (variable length) (0x800c)
|    length/value: 3600 (0e 10)
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_ENCRYPTION_ALGORITHM (0x8001)
|    length/value: 7 (00 07)
|     [7 is OAKLEY_AES_CBC]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_HASH_ALGORITHM (0x8002)
|    length/value: 6 (00 06)
|     [6 is OAKLEY_SHA2_512]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_AUTHENTICATION_METHOD (0x8003)
|    length/value: 3 (00 03)
|     [3 is OAKLEY_RSA_SIG]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_GROUP_DESCRIPTION (0x8004)
|    length/value: 5 (00 05)
|     [5 is OAKLEY_GROUP_MODP1536]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_KEY_LENGTH (0x800e)
|    length/value: 128 (00 80)
| emitting length of ISAKMP Transform Payload (ISAKMP): 36
| *****emit ISAKMP Transform Payload (ISAKMP):
|    next payload type: ISAKMP_NEXT_T (0x3)
|    ISAKMP transform number: 10 (0a)
|    ISAKMP transform ID: KEY_IKE (0x1)
| last substructure: checking 'ISAKMP Proposal Payload'.'ISAKMP Transform Payload (ISAKMP)'.'next payload type' containing ISAKMP_NEXT_T (0x3) is ISAKMP_NEXT_T (0x3)
| last substructure: saving location 'ISAKMP Proposal Payload'.'ISAKMP Transform Payload (ISAKMP)'.'next payload type'
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_LIFE_TYPE (0x800b)
|    length/value: 1 (00 01)
|     [1 is OAKLEY_LIFE_SECONDS]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_LIFE_DURATION (variable length) (0x800c)
|    length/value: 3600 (0e 10)
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_ENCRYPTION_ALGORITHM (0x8001)
|    length/value: 7 (00 07)
|     [7 is OAKLEY_AES_CBC]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_HASH_ALGORITHM (0x8002)
|    length/value: 2 (00 02)
|     [2 is OAKLEY_SHA1]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_AUTHENTICATION_METHOD (0x8003)
|    length/value: 3 (00 03)
|     [3 is OAKLEY_RSA_SIG]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_GROUP_DESCRIPTION (0x8004)
|    length/value: 5 (00 05)
|     [5 is OAKLEY_GROUP_MODP1536]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_KEY_LENGTH (0x800e)
|    length/value: 256 (01 00)
| emitting length of ISAKMP Transform Payload (ISAKMP): 36
| *****emit ISAKMP Transform Payload (ISAKMP):
|    next payload type: ISAKMP_NEXT_T (0x3)
|    ISAKMP transform number: 11 (0b)
|    ISAKMP transform ID: KEY_IKE (0x1)
| last substructure: checking 'ISAKMP Proposal Payload'.'ISAKMP Transform Payload (ISAKMP)'.'next payload type' containing ISAKMP_NEXT_T (0x3) is ISAKMP_NEXT_T (0x3)
| last substructure: saving location 'ISAKMP Proposal Payload'.'ISAKMP Transform Payload (ISAKMP)'.'next payload type'
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_LIFE_TYPE (0x800b)
|    length/value: 1 (00 01)
|     [1 is OAKLEY_LIFE_SECONDS]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_LIFE_DURATION (variable length) (0x800c)
|    length/value: 3600 (0e 10)
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_ENCRYPTION_ALGORITHM (0x8001)
|    length/value: 7 (00 07)
|     [7 is OAKLEY_AES_CBC]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_HASH_ALGORITHM (0x8002)
|    length/value: 2 (00 02)
|     [2 is OAKLEY_SHA1]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_AUTHENTICATION_METHOD (0x8003)
|    length/value: 3 (00 03)
|     [3 is OAKLEY_RSA_SIG]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_GROUP_DESCRIPTION (0x8004)
|    length/value: 5 (00 05)
|     [5 is OAKLEY_GROUP_MODP1536]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_KEY_LENGTH (0x800e)
|    length/value: 128 (00 80)
| emitting length of ISAKMP Transform Payload (ISAKMP): 36
| *****emit ISAKMP Transform Payload (ISAKMP):
|    next payload type: ISAKMP_NEXT_T (0x3)
|    ISAKMP transform number: 12 (0c)
|    ISAKMP transform ID: KEY_IKE (0x1)
| last substructure: checking 'ISAKMP Proposal Payload'.'ISAKMP Transform Payload (ISAKMP)'.'next payload type' containing ISAKMP_NEXT_T (0x3) is ISAKMP_NEXT_T (0x3)
| last substructure: saving location 'ISAKMP Proposal Payload'.'ISAKMP Transform Payload (ISAKMP)'.'next payload type'
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_LIFE_TYPE (0x800b)
|    length/value: 1 (00 01)
|     [1 is OAKLEY_LIFE_SECONDS]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_LIFE_DURATION (variable length) (0x800c)
|    length/value: 3600 (0e 10)
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_ENCRYPTION_ALGORITHM (0x8001)
|    length/value: 5 (00 05)
|     [5 is OAKLEY_3DES_CBC]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_HASH_ALGORITHM (0x8002)
|    length/value: 4 (00 04)
|     [4 is OAKLEY_SHA2_256]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_AUTHENTICATION_METHOD (0x8003)
|    length/value: 3 (00 03)
|     [3 is OAKLEY_RSA_SIG]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_GROUP_DESCRIPTION (0x8004)
|    length/value: 14 (00 0e)
|     [14 is OAKLEY_GROUP_MODP2048]
| emitting length of ISAKMP Transform Payload (ISAKMP): 32
| *****emit ISAKMP Transform Payload (ISAKMP):
|    next payload type: ISAKMP_NEXT_T (0x3)
|    ISAKMP transform number: 13 (0d)
|    ISAKMP transform ID: KEY_IKE (0x1)
| last substructure: checking 'ISAKMP Proposal Payload'.'ISAKMP Transform Payload (ISAKMP)'.'next payload type' containing ISAKMP_NEXT_T (0x3) is ISAKMP_NEXT_T (0x3)
| last substructure: saving location 'ISAKMP Proposal Payload'.'ISAKMP Transform Payload (ISAKMP)'.'next payload type'
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_LIFE_TYPE (0x800b)
|    length/value: 1 (00 01)
|     [1 is OAKLEY_LIFE_SECONDS]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_LIFE_DURATION (variable length) (0x800c)
|    length/value: 3600 (0e 10)
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_ENCRYPTION_ALGORITHM (0x8001)
|    length/value: 5 (00 05)
|     [5 is OAKLEY_3DES_CBC]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_HASH_ALGORITHM (0x8002)
|    length/value: 6 (00 06)
|     [6 is OAKLEY_SHA2_512]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_AUTHENTICATION_METHOD (0x8003)
|    length/value: 3 (00 03)
|     [3 is OAKLEY_RSA_SIG]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_GROUP_DESCRIPTION (0x8004)
|    length/value: 14 (00 0e)
|     [14 is OAKLEY_GROUP_MODP2048]
| emitting length of ISAKMP Transform Payload (ISAKMP): 32
| *****emit ISAKMP Transform Payload (ISAKMP):
|    next payload type: ISAKMP_NEXT_T (0x3)
|    ISAKMP transform number: 14 (0e)
|    ISAKMP transform ID: KEY_IKE (0x1)
| last substructure: checking 'ISAKMP Proposal Payload'.'ISAKMP Transform Payload (ISAKMP)'.'next payload type' containing ISAKMP_NEXT_T (0x3) is ISAKMP_NEXT_T (0x3)
| last substructure: saving location 'ISAKMP Proposal Payload'.'ISAKMP Transform Payload (ISAKMP)'.'next payload type'
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_LIFE_TYPE (0x800b)
|    length/value: 1 (00 01)
|     [1 is OAKLEY_LIFE_SECONDS]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_LIFE_DURATION (variable length) (0x800c)
|    length/value: 3600 (0e 10)
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_ENCRYPTION_ALGORITHM (0x8001)
|    length/value: 5 (00 05)
|     [5 is OAKLEY_3DES_CBC]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_HASH_ALGORITHM (0x8002)
|    length/value: 2 (00 02)
|     [2 is OAKLEY_SHA1]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_AUTHENTICATION_METHOD (0x8003)
|    length/value: 3 (00 03)
|     [3 is OAKLEY_RSA_SIG]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_GROUP_DESCRIPTION (0x8004)
|    length/value: 14 (00 0e)
|     [14 is OAKLEY_GROUP_MODP2048]
| emitting length of ISAKMP Transform Payload (ISAKMP): 32
| *****emit ISAKMP Transform Payload (ISAKMP):
|    next payload type: ISAKMP_NEXT_T (0x3)
|    ISAKMP transform number: 15 (0f)
|    ISAKMP transform ID: KEY_IKE (0x1)
| last substructure: checking 'ISAKMP Proposal Payload'.'ISAKMP Transform Payload (ISAKMP)'.'next payload type' containing ISAKMP_NEXT_T (0x3) is ISAKMP_NEXT_T (0x3)
| last substructure: saving location 'ISAKMP Proposal Payload'.'ISAKMP Transform Payload (ISAKMP)'.'next payload type'
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_LIFE_TYPE (0x800b)
|    length/value: 1 (00 01)
|     [1 is OAKLEY_LIFE_SECONDS]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_LIFE_DURATION (variable length) (0x800c)
|    length/value: 3600 (0e 10)
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_ENCRYPTION_ALGORITHM (0x8001)
|    length/value: 5 (00 05)
|     [5 is OAKLEY_3DES_CBC]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_HASH_ALGORITHM (0x8002)
|    length/value: 4 (00 04)
|     [4 is OAKLEY_SHA2_256]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_AUTHENTICATION_METHOD (0x8003)
|    length/value: 3 (00 03)
|     [3 is OAKLEY_RSA_SIG]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_GROUP_DESCRIPTION (0x8004)
|    length/value: 5 (00 05)
|     [5 is OAKLEY_GROUP_MODP1536]
| emitting length of ISAKMP Transform Payload (ISAKMP): 32
| *****emit ISAKMP Transform Payload (ISAKMP):
|    next payload type: ISAKMP_NEXT_T (0x3)
|    ISAKMP transform number: 16 (10)
|    ISAKMP transform ID: KEY_IKE (0x1)
| last substructure: checking 'ISAKMP Proposal Payload'.'ISAKMP Transform Payload (ISAKMP)'.'next payload type' containing ISAKMP_NEXT_T (0x3) is ISAKMP_NEXT_T (0x3)
| last substructure: saving location 'ISAKMP Proposal Payload'.'ISAKMP Transform Payload (ISAKMP)'.'next payload type'
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_LIFE_TYPE (0x800b)
|    length/value: 1 (00 01)
|     [1 is OAKLEY_LIFE_SECONDS]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_LIFE_DURATION (variable length) (0x800c)
|    length/value: 3600 (0e 10)
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_ENCRYPTION_ALGORITHM (0x8001)
|    length/value: 5 (00 05)
|     [5 is OAKLEY_3DES_CBC]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_HASH_ALGORITHM (0x8002)
|    length/value: 6 (00 06)
|     [6 is OAKLEY_SHA2_512]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_AUTHENTICATION_METHOD (0x8003)
|    length/value: 3 (00 03)
|     [3 is OAKLEY_RSA_SIG]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_GROUP_DESCRIPTION (0x8004)
|    length/value: 5 (00 05)
|     [5 is OAKLEY_GROUP_MODP1536]
| emitting length of ISAKMP Transform Payload (ISAKMP): 32
| *****emit ISAKMP Transform Payload (ISAKMP):
|    next payload type: ISAKMP_NEXT_NONE (0x0)
|    ISAKMP transform number: 17 (11)
|    ISAKMP transform ID: KEY_IKE (0x1)
| last substructure: checking 'ISAKMP Proposal Payload'.'ISAKMP Transform Payload (ISAKMP)'.'next payload type' containing ISAKMP_NEXT_T (0x3) is ISAKMP_NEXT_T (0x3)
| last substructure: saving location 'ISAKMP Proposal Payload'.'ISAKMP Transform Payload (ISAKMP)'.'next payload type'
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_LIFE_TYPE (0x800b)
|    length/value: 1 (00 01)
|     [1 is OAKLEY_LIFE_SECONDS]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_LIFE_DURATION (variable length) (0x800c)
|    length/value: 3600 (0e 10)
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_ENCRYPTION_ALGORITHM (0x8001)
|    length/value: 5 (00 05)
|     [5 is OAKLEY_3DES_CBC]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_HASH_ALGORITHM (0x8002)
|    length/value: 2 (00 02)
|     [2 is OAKLEY_SHA1]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_AUTHENTICATION_METHOD (0x8003)
|    length/value: 3 (00 03)
|     [3 is OAKLEY_RSA_SIG]
| ******emit ISAKMP Oakley attribute:
|    af+type: AF+OAKLEY_GROUP_DESCRIPTION (0x8004)
|    length/value: 5 (00 05)
|     [5 is OAKLEY_GROUP_MODP1536]
| emitting length of ISAKMP Transform Payload (ISAKMP): 32
| emitting length of ISAKMP Proposal Payload: 632
| last substructure: checking 'ISAKMP Proposal Payload'.'ISAKMP Transform Payload (ISAKMP)'.'next payload type' is 0
| emitting length of ISAKMP Security Association Payload: 644
| last substructure: checking 'ISAKMP Security Association Payload'.'ISAKMP Proposal Payload'.'next payload type' is 0
| delref sadb@0x564b9e341d58(1->0) (in free_sa() at ikev1_spdb.c:837)
| out_vid(): sending [FRAGMENTATION]
| ***emit ISAKMP Vendor ID Payload:
|    next payload type: ISAKMP_NEXT_NONE (0x0)
| next payload chain: setting previous 'ISAKMP Security Association Payload'.'next payload type' to current ISAKMP Vendor ID Payload (13:ISAKMP_NEXT_VID)
| next payload chain: saving location 'ISAKMP Vendor ID Payload'.'next payload type' in 'reply packet'
| emitting 16 raw bytes of V_ID into ISAKMP Vendor ID Payload
| V_ID: 40 48 b7 d5  6e bc e8 85  25 e7 de 7f  00 d6 c2 d3
| emitting length of ISAKMP Vendor ID Payload: 20
| out_vid(): sending [Dead Peer Detection]
| ***emit ISAKMP Vendor ID Payload:
|    next payload type: ISAKMP_NEXT_NONE (0x0)
| next payload chain: setting previous 'ISAKMP Vendor ID Payload'.'next payload type' to current ISAKMP Vendor ID Payload (13:ISAKMP_NEXT_VID)
| next payload chain: saving location 'ISAKMP Vendor ID Payload'.'next payload type' in 'reply packet'
| emitting 16 raw bytes of V_ID into ISAKMP Vendor ID Payload
| V_ID: af ca d7 13  68 a1 f1 c9  6b 86 96 fc  77 57 01 00
| emitting length of ISAKMP Vendor ID Payload: 20
| nat add vid
| sending draft and RFC NATT VIDs
| out_vid(): sending [RFC 3947]
| ***emit ISAKMP Vendor ID Payload:
|    next payload type: ISAKMP_NEXT_NONE (0x0)
| next payload chain: setting previous 'ISAKMP Vendor ID Payload'.'next payload type' to current ISAKMP Vendor ID Payload (13:ISAKMP_NEXT_VID)
| next payload chain: saving location 'ISAKMP Vendor ID Payload'.'next payload type' in 'reply packet'
| emitting 16 raw bytes of V_ID into ISAKMP Vendor ID Payload
| V_ID: 4a 13 1c 81  07 03 58 45  5c 57 28 f2  0e 95 45 2f
| emitting length of ISAKMP Vendor ID Payload: 20
| skipping VID_NATT_RFC
| out_vid(): sending [draft-ietf-ipsec-nat-t-ike-03]
| ***emit ISAKMP Vendor ID Payload:
|    next payload type: ISAKMP_NEXT_NONE (0x0)
| next payload chain: setting previous 'ISAKMP Vendor ID Payload'.'next payload type' to current ISAKMP Vendor ID Payload (13:ISAKMP_NEXT_VID)
| next payload chain: saving location 'ISAKMP Vendor ID Payload'.'next payload type' in 'reply packet'
| emitting 16 raw bytes of V_ID into ISAKMP Vendor ID Payload
| V_ID: 7d 94 19 a6  53 10 ca 6f  2c 17 9d 92  15 52 9d 56
| emitting length of ISAKMP Vendor ID Payload: 20
| out_vid(): sending [draft-ietf-ipsec-nat-t-ike-02_n]
| ***emit ISAKMP Vendor ID Payload:
|    next payload type: ISAKMP_NEXT_NONE (0x0)
| next payload chain: setting previous 'ISAKMP Vendor ID Payload'.'next payload type' to current ISAKMP Vendor ID Payload (13:ISAKMP_NEXT_VID)
| next payload chain: saving location 'ISAKMP Vendor ID Payload'.'next payload type' in 'reply packet'
| emitting 16 raw bytes of V_ID into ISAKMP Vendor ID Payload
| V_ID: 90 cb 80 91  3e bb 69 6e  08 63 81 b5  ec 42 7b 1f
| emitting length of ISAKMP Vendor ID Payload: 20
| out_vid(): sending [draft-ietf-ipsec-nat-t-ike-02]
| ***emit ISAKMP Vendor ID Payload:
|    next payload type: ISAKMP_NEXT_NONE (0x0)
| next payload chain: setting previous 'ISAKMP Vendor ID Payload'.'next payload type' to current ISAKMP Vendor ID Payload (13:ISAKMP_NEXT_VID)
| next payload chain: saving location 'ISAKMP Vendor ID Payload'.'next payload type' in 'reply packet'
| emitting 16 raw bytes of V_ID into ISAKMP Vendor ID Payload
| V_ID: cd 60 46 43  35 df 21 f8  7c fd b2 fc  68 b6 a4 48
| emitting length of ISAKMP Vendor ID Payload: 20
| no IKEv1 message padding required
| emitting length of ISAKMP Message: 792
| sending 792 bytes for reply packet for main_outI1 through eth1 from 192.1.2.45:500 to 192.1.2.23:500 using UDP (for #2)
|   40 3f ab c8  d7 d8 02 0f  00 00 00 00  00 00 00 00
|   01 10 02 00  00 00 00 00  00 00 03 18  0d 00 02 84
|   00 00 00 01  00 00 00 01  00 00 02 78  00 01 00 12
|   03 00 00 24  00 01 00 00  80 0b 00 01  80 0c 0e 10
|   80 01 00 07  80 02 00 04  80 03 00 03  80 04 00 0e
|   80 0e 01 00  03 00 00 24  01 01 00 00  80 0b 00 01
|   80 0c 0e 10  80 01 00 07  80 02 00 04  80 03 00 03
|   80 04 00 0e  80 0e 00 80  03 00 00 24  02 01 00 00
|   80 0b 00 01  80 0c 0e 10  80 01 00 07  80 02 00 06
|   80 03 00 03  80 04 00 0e  80 0e 01 00  03 00 00 24
|   03 01 00 00  80 0b 00 01  80 0c 0e 10  80 01 00 07
|   80 02 00 06  80 03 00 03  80 04 00 0e  80 0e 00 80
|   03 00 00 24  04 01 00 00  80 0b 00 01  80 0c 0e 10
|   80 01 00 07  80 02 00 02  80 03 00 03  80 04 00 0e
|   80 0e 01 00  03 00 00 24  05 01 00 00  80 0b 00 01
|   80 0c 0e 10  80 01 00 07  80 02 00 02  80 03 00 03
|   80 04 00 0e  80 0e 00 80  03 00 00 24  06 01 00 00
|   80 0b 00 01  80 0c 0e 10  80 01 00 07  80 02 00 04
|   80 03 00 03  80 04 00 05  80 0e 01 00  03 00 00 24
|   07 01 00 00  80 0b 00 01  80 0c 0e 10  80 01 00 07
|   80 02 00 04  80 03 00 03  80 04 00 05  80 0e 00 80
|   03 00 00 24  08 01 00 00  80 0b 00 01  80 0c 0e 10
|   80 01 00 07  80 02 00 06  80 03 00 03  80 04 00 05
|   80 0e 01 00  03 00 00 24  09 01 00 00  80 0b 00 01
|   80 0c 0e 10  80 01 00 07  80 02 00 06  80 03 00 03
|   80 04 00 05  80 0e 00 80  03 00 00 24  0a 01 00 00
|   80 0b 00 01  80 0c 0e 10  80 01 00 07  80 02 00 02
|   80 03 00 03  80 04 00 05  80 0e 01 00  03 00 00 24
|   0b 01 00 00  80 0b 00 01  80 0c 0e 10  80 01 00 07
|   80 02 00 02  80 03 00 03  80 04 00 05  80 0e 00 80
|   03 00 00 20  0c 01 00 00  80 0b 00 01  80 0c 0e 10
|   80 01 00 05  80 02 00 04  80 03 00 03  80 04 00 0e
|   03 00 00 20  0d 01 00 00  80 0b 00 01  80 0c 0e 10
|   80 01 00 05  80 02 00 06  80 03 00 03  80 04 00 0e
|   03 00 00 20  0e 01 00 00  80 0b 00 01  80 0c 0e 10
|   80 01 00 05  80 02 00 02  80 03 00 03  80 04 00 0e
|   03 00 00 20  0f 01 00 00  80 0b 00 01  80 0c 0e 10
|   80 01 00 05  80 02 00 04  80 03 00 03  80 04 00 05
|   03 00 00 20  10 01 00 00  80 0b 00 01  80 0c 0e 10
|   80 01 00 05  80 02 00 06  80 03 00 03  80 04 00 05
|   00 00 00 20  11 01 00 00  80 0b 00 01  80 0c 0e 10
|   80 01 00 05  80 02 00 02  80 03 00 03  80 04 00 05
|   0d 00 00 14  40 48 b7 d5  6e bc e8 85  25 e7 de 7f
|   00 d6 c2 d3  0d 00 00 14  af ca d7 13  68 a1 f1 c9
|   6b 86 96 fc  77 57 01 00  0d 00 00 14  4a 13 1c 81
|   07 03 58 45  5c 57 28 f2  0e 95 45 2f  0d 00 00 14
|   7d 94 19 a6  53 10 ca 6f  2c 17 9d 92  15 52 9d 56
|   0d 00 00 14  90 cb 80 91  3e bb 69 6e  08 63 81 b5
|   ec 42 7b 1f  00 00 00 14  cd 60 46 43  35 df 21 f8
|   7c fd b2 fc  68 b6 a4 48
| state #2 has no .st_event to delete
| #2 STATE_MAIN_I1: retransmits: cleared
| event_schedule: newref EVENT_RETRANSMIT-pe@0x564b9e33f788
| inserting event EVENT_RETRANSMIT, timeout in 0.5 seconds for #2
| libevent_malloc: newref ptr-libevent@0x564b9e33e818 size 128
| #2 STATE_MAIN_I1: retransmits: first event in 0.5 seconds; timeout in 60 seconds; limit of 12 retransmits; current time is 744539.607099
"westnet-eastnet-ikev2" #2: sent Main Mode request
| #2 spent 1.43 (1.46) milliseconds in main_outI1()
| stop processing: state #2 connection "westnet-eastnet-ikev2" from 192.1.2.23:500 (in main_outI1() at ikev1_main.c:222)
| spent 1.44 (1.47) milliseconds in global timer EVENT_REVIVE_CONNS
| newref struct fd@0x564b9e33fef8(0->1) (in whack_handle_cb() at rcv_whack.c:869)
| fd_accept: new fd-fd@0x564b9e33fef8 (in whack_handle_cb() at rcv_whack.c:869)
shutting down
| leaking fd-fd@0x564b9e33fef8's FD; will be closed when pluto exits (in whack_handle_cb() at rcv_whack.c:889)
| delref fd@0x564b9e33fef8(1->0) (in whack_handle_cb() at rcv_whack.c:895)
| freeref fd-fd@0x564b9e33fef8 (in whack_handle_cb() at rcv_whack.c:895)
| shutting down helper thread 4
| helper thread 4 exited
| shutting down helper thread 1
| helper thread 1 exited
| shutting down helper thread 2
| helper thread 2 exited
| shutting down helper thread 3
| helper thread 3 exited
| shutting down helper thread 5
| helper thread 5 exited
| shutting down helper thread 6
| helper thread 6 exited
| shutting down helper thread 7
| helper thread 7 exited
7 helper threads shutdown
| delref root_certs@NULL (in free_root_certs() at root_certs.c:127)
| certs and keys locked by 'free_preshared_secrets'
| certs and keys unlocked by 'free_preshared_secrets'
| delref fd@NULL (in delete_pending() at pending.c:218)
| removing pending policy for no connection {0x564b9e340828}
| deleting states for connection - including all other IPsec SA's of this IKE SA
| pass 0
| FOR_EACH_STATE_... in foreach_state_by_connection_func_delete
| state #2
| start processing: state #2 connection "westnet-eastnet-ikev2" from 192.1.2.23:500 (in foreach_state_by_connection_func_delete() at state.c:1406)
| delref fd@NULL (in foreach_state_by_connection_func_delete() at state.c:1408)
| addref fd@NULL (in foreach_state_by_connection_func_delete() at state.c:1409)
| pstats #2 ikev1.isakmp deleted other
| #2 main thread spent 1.43 (1.46) milliseconds helper thread spent 0 (0) milliseconds in total
| [RE]START processing: state #2 connection "westnet-eastnet-ikev2" from 192.1.2.23:500 (in delete_state() at state.c:935)
| should_send_delete: no, not established
"westnet-eastnet-ikev2" #2: deleting state (STATE_MAIN_I1) aged 0.473872s and NOT sending notification
| parent state #2: MAIN_I1(half-open IKE SA) => delete
| unsuspending #2 MD (nil)
| should_send_delete: no, not established
| state #2 has no .st_event to delete
| #2 requesting EVENT_RETRANSMIT-pe@0x564b9e33f788 be deleted
| libevent_free: delref ptr-libevent@0x564b9e33e818
| free_event_entry: delref EVENT_RETRANSMIT-pe@0x564b9e33f788
| #2 STATE_MAIN_I1: retransmits: cleared
| State DB: IKEv1 state not found (flush_incomplete_children)
| picked newest_isakmp_sa #0 for #2
"westnet-eastnet-ikev2" #2: deleting IKE SA but connection is supposed to remain up; schedule EVENT_REVIVE_CONNS
| add revival: connection 'westnet-eastnet-ikev2' added to the list and scheduled for 5 seconds
| global one-shot timer EVENT_REVIVE_CONNS scheduled in 5 seconds
| in connection_discard for connection westnet-eastnet-ikev2
| State DB: deleting IKEv1 state #2 in MAIN_I1
| parent state #2: MAIN_I1(half-open IKE SA) => UNDEFINED(ignore)
| releasing #2's fd-fd@(nil) because deleting state
| delref fd@NULL (in delete_state() at state.c:1195)
| delref fd@NULL (in delete_state() at state.c:1195)
| delref pkp@NULL (in delete_state() at state.c:1202)
| stop processing: state #2 from 192.1.2.23:500 (in delete_state() at state.c:1239)
| delref logger@0x564b9e3413c8(1->0) (in delete_state() at state.c:1306)
| delref fd@NULL (in free_logger() at log.c:853)
| delref fd@NULL (in free_logger() at log.c:854)
| processing: STOP state #0 (in foreach_state_by_connection_func_delete() at state.c:1411)
| pass 1
| FOR_EACH_STATE_... in foreach_state_by_connection_func_delete
| addref fd@NULL (in clone_logger() at log.c:809)
| addref fd@NULL (in clone_logger() at log.c:810)
| newref clone logger@0x564b9e32ee38(0->1) (in clone_logger() at log.c:817)
| delref hp@0x564b9e33d018(1->0) (in delete_oriented_hp() at hostpair.c:360)
| flush revival: connection 'westnet-eastnet-ikev2' revival flushed
| delref vip@NULL (in discard_connection() at connections.c:262)
| delref vip@NULL (in discard_connection() at connections.c:263)
| Connection DB: deleting connection $1
| delref logger@0x564b9e32ee38(1->0) (in delete_connection() at connections.c:214)
| delref fd@NULL (in free_logger() at log.c:853)
| delref fd@NULL (in free_logger() at log.c:854)
| crl fetch request list locked by 'free_crl_fetch'
| crl fetch request list unlocked by 'free_crl_fetch'
| iface: marking eth1 dead
| iface: marking eth0 dead
| iface: marking lo dead
| updating interfaces - listing interfaces that are going down
shutting down interface lo 127.0.0.1:4500
shutting down interface lo 127.0.0.1:500
shutting down interface eth0 192.0.1.254:4500
shutting down interface eth0 192.0.1.254:500
shutting down interface eth1 192.1.2.45:4500
shutting down interface eth1 192.1.2.45:500
| updating interfaces - deleting the dead
| FOR_EACH_STATE_... in delete_states_dead_interfaces
| libevent_free: delref ptr-libevent@0x564b9e337b08
| delref id@0x564b9e33bc58(3->2) (in release_iface_dev() at iface.c:125)
| libevent_free: delref ptr-libevent@0x564b9e2fb158
| delref id@0x564b9e33bc58(2->1) (in release_iface_dev() at iface.c:125)
| libevent_free: delref ptr-libevent@0x564b9e2fb358
| delref id@0x564b9e33bb88(3->2) (in release_iface_dev() at iface.c:125)
| libevent_free: delref ptr-libevent@0x564b9e2fb258
| delref id@0x564b9e33bb88(2->1) (in release_iface_dev() at iface.c:125)
| libevent_free: delref ptr-libevent@0x564b9e2f7c08
| delref id@0x564b9e33ba98(3->2) (in release_iface_dev() at iface.c:125)
| libevent_free: delref ptr-libevent@0x564b9e2f7b08
| delref id@0x564b9e33ba98(2->1) (in release_iface_dev() at iface.c:125)
| delref id@0x564b9e33ba98(1->0) (in release_iface_dev() at iface.c:125)
| delref id@0x564b9e33bb88(1->0) (in release_iface_dev() at iface.c:125)
| delref id@0x564b9e33bc58(1->0) (in release_iface_dev() at iface.c:125)
| updating interfaces - checking orientation
| FOR_EACH_UNORIENTED_CONNECTION_... in check_orientations
| libevent_free: delref ptr-libevent@0x564b9e337bb8
| free_event_entry: delref EVENT_NULL-pe@0x564b9e33aff8
| libevent_free: delref ptr-libevent@0x564b9e2fb058
| free_event_entry: delref EVENT_NULL-pe@0x564b9e337a98
| libevent_free: delref ptr-libevent@0x564b9e2faf58
| free_event_entry: delref EVENT_NULL-pe@0x564b9e337a28
| global timer EVENT_REINIT_SECRET uninitialized
| global timer EVENT_SHUNT_SCAN uninitialized
| global timer EVENT_PENDING_DDNS uninitialized
| global timer EVENT_PENDING_PHASE2 uninitialized
| global timer EVENT_CHECK_CRLS uninitialized
| global timer EVENT_REVIVE_CONNS uninitialized
| global timer EVENT_FREE_ROOT_CERTS uninitialized
| global timer EVENT_RESET_LOG_RATE_LIMIT uninitialized
| global timer EVENT_NAT_T_KEEPALIVE uninitialized
| libevent_free: delref ptr-libevent@0x564b9e28d9a8
| signal event handler PLUTO_SIGCHLD uninstalled
| libevent_free: delref ptr-libevent@0x564b9e28d8d8
| signal event handler PLUTO_SIGTERM uninstalled
| libevent_free: delref ptr-libevent@0x564b9e33b218
| signal event handler PLUTO_SIGHUP uninstalled
| libevent_free: delref ptr-libevent@0x564b9e33b458
| signal event handler PLUTO_SIGSYS uninstalled
| releasing event base
| libevent_free: delref ptr-libevent@0x564b9e33b328
| libevent_free: delref ptr-libevent@0x564b9e32a598
| libevent_free: delref ptr-libevent@0x564b9e32a548
| libevent_free: delref ptr-libevent@0x564b9e2fd258
| libevent_free: delref ptr-libevent@0x564b9e32a748
| libevent_free: delref ptr-libevent@0x564b9e32ea18
| libevent_free: delref ptr-libevent@0x564b9e32e828
| libevent_free: delref ptr-libevent@0x564b9e32a788
| libevent_free: delref ptr-libevent@0x564b9e32e638
| libevent_free: delref ptr-libevent@0x564b9e32dff8
| libevent_free: delref ptr-libevent@0x564b9e33c748
| libevent_free: delref ptr-libevent@0x564b9e33c708
| libevent_free: delref ptr-libevent@0x564b9e33c6c8
| libevent_free: delref ptr-libevent@0x564b9e33c688
| libevent_free: delref ptr-libevent@0x564b9e33c648
| libevent_free: delref ptr-libevent@0x564b9e33c608
| libevent_free: delref ptr-libevent@0x564b9e320d18
| libevent_free: delref ptr-libevent@0x564b9e33b1d8
| libevent_free: delref ptr-libevent@0x564b9e33b198
| libevent_free: delref ptr-libevent@0x564b9e32e678
| libevent_free: delref ptr-libevent@0x564b9e33b2e8
| libevent_free: delref ptr-libevent@0x564b9e33b068
| libevent_free: delref ptr-libevent@0x564b9e2fd598
| libevent_free: delref ptr-libevent@0x564b9e2fd518
| libevent_free: delref ptr-libevent@0x564b9e2f3bb8
| releasing global libevent data
| libevent_free: delref ptr-libevent@0x564b9e27c6b8
| libevent_free: delref ptr-libevent@0x564b9e2f1078
| libevent_free: delref ptr-libevent@0x564b9e2fd618
leak detective found no leaks