We find that using vpnc (under Fedora 16) in place of a Cisco VPN client
(under Windows 7) gets disconnected from the host side every 5 minutes
or so. The Cisco client does not have this problem.
We would be grateful for any assistance you can provide.
Here is the tail of the debug log:
sending ESP packet (after crypt):
ede892a0 00000018 136d0973 f3ae7ebc 070fe95d 3cd568e9 95c9063b 0d048f5d
f83eeef7 65f97b40 d8525277 8b212496 9b85c06c c6b2b595 9edf2650 780d7b1a
7bd5ad54 53c92cb4 af6da583 1d64905a f8f1b171 45ddb007 e26c488b c362d9de
9846320c f4081c64
sending ESP packet (after ah):
ede892a0 00000018 136d0973 f3ae7ebc 070fe95d 3cd568e9 95c9063b 0d048f5d
f83eeef7 65f97b40 d8525277 8b212496 9b85c06c c6b2b595 9edf2650 780d7b1a
7bd5ad54 53c92cb4 af6da583 1d64905a f8f1b171 45ddb007 e26c488b c362d9de
9846320c f4081c64 90993704 578c99ed 557e174a
lifetime status: 480 of 28800 seconds used, 0|1 of 0 kbytes used
got late ike packet: 368 bytes
payload too short or not padded: len=368, min=28 (ivlen=8)
Payload:
2e95e333 9ded130d 00000000 00000000 01100400 00000000 00000170 04000038
00000001 00000001 0000002c 01010001 00000024 01010000 80040002 80010005
80020002 8003fdea 800b0001 000c0004 000001e0 0a000084 5ee4d9d5 b8881dd6
95c54d5a ceb7d221 131d89f0 5ccd9522 7bc96a59 d9e2cb8a ae34378e 3c3e8e53
dbc5bd56 e89617d7 02536c08 5c11f699 07d8effe 23d16417 bde8d6be ee43b124
a9faa4e8 466a311c 28f3d40b e83ed226 d5df7208 b268d4b5 86ce6dff 58072a34
54b76515 a1a6fe88 d7a3f905 caba25de 6dc33c7a bb687351 05000018 60f82028
d3d870cf a02f51f9 acd650fa 7e84933c 0d00000c 01110000 29df3803 0d000014
12f5f28c 457168a9 702d9fe2 74cc0100 0d00000c 09002689 dfd6b712 0d000014
90cb8091 3ebb696e 086381b5 ec427b1f 0d000014 7d9419a6 5310ca6f 2c179d92
15529d56 0d000014 4a131c81 07035845 5c5728f2 0e95452f 00000018 4048b7d5
6ebce885 25e7de7f 00d6c2d3 c0000000
got packet with wrong cookies
lifetime status: 488 of 28800 seconds used, 0|1 of 0 kbytes used
got late ike packet: 68 bytes
BEGIN_PARSE
Recieved Packet Len: 68
i_cookie: d660ffaf 2a491d88
r_cookie: f772cf43 c042649c
payload: 08 (ISAKMP_PAYLOAD_HASH)
isakmp_version: 10
exchange_type: 05 (ISAKMP_EXCHANGE_INFORMATIONAL)
flags: 01
message_id: e8d01e95
len: 00000044
PARSING PAYLOAD type: 08 (ISAKMP_PAYLOAD_HASH)
next_type: 0c (ISAKMP_PAYLOAD_D)
length: 0018
ke.data:
0526296b c487334a 8476a9d6 5ec1dd76 0c73ede1
DONE PARSING PAYLOAD type: 08 (ISAKMP_PAYLOAD_HASH)
PARSING PAYLOAD type: 0c (ISAKMP_PAYLOAD_D)
next_type: 00 (ISAKMP_PAYLOAD_NONE)
length: 0010
d.doi: 00000001 (ISAKMP_DOI_IPSEC)
d.protocol: 03 (ISAKMP_IPSEC_PROTO_IPSEC_ESP)
d.spi_length: 04
d.num_spi: 0001
d.spi: ede892a0
DONE PARSING PAYLOAD type: 0c (ISAKMP_PAYLOAD_D)
PARSING PAYLOAD type: 00 (ISAKMP_PAYLOAD_NONE)
PARSE_OK
hashlen: 20
u.hash.length: 20
expected_hash:
0526296b c487334a 8476a9d6 5ec1dd76 0c73ede1
h->u.hash.data:
0526296b c487334a 8476a9d6 5ec1dd76 0c73ede1
S7.1 QM_packet1
[2012-09-15 14:40:25]
S7.2 QM_packet2 send_receive
[2012-09-15 14:40:25]
size = 592, blksz = 8, padding = 0
sending: ========================>
BEGIN_PARSE
Recieved Packet Len: 620
i_cookie: d660ffaf 2a491d88
r_cookie: f772cf43 c042649c
payload: 08 (ISAKMP_PAYLOAD_HASH)
isakmp_version: 10
exchange_type: 20 (ISAKMP_EXCHANGE_IKE_QUICK)
flags: 01
message_id: 8886c2ec
len: 0000026c
PARSING PAYLOAD type: 08 (ISAKMP_PAYLOAD_HASH)
next_type: 01 (ISAKMP_PAYLOAD_SA)
length: 0018
ke.data:
31f66057 6d67b087 4b0a5288 19b1a287 ff940e95
DONE PARSING PAYLOAD type: 08 (ISAKMP_PAYLOAD_HASH)
PARSING PAYLOAD type: 01 (ISAKMP_PAYLOAD_SA)
next_type: 0a (ISAKMP_PAYLOAD_NONCE)
length: 0204
sa.doi: 00000001 (ISAKMP_DOI_IPSEC)
sa.situation: 00000001 (ISAKMP_IPSEC_SIT_IDENTITY_ONLY)
PARSING PAYLOAD type: 02 (ISAKMP_PAYLOAD_P)
next_type: 02 (ISAKMP_PAYLOAD_P)
length: 002c
p.number: 00
p.prot_id: 03 (ISAKMP_IPSEC_PROTO_IPSEC_ESP)
p.spi_size: 04
length: 01
p.spi: 77415f4b
PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T)
next_type: 00 (ISAKMP_PAYLOAD_NONE)
length: 0020
t.number: 00
t.id: 0c (ISAKMP_IPSEC_ESP_AES)
t.attributes.type: 0006 (ISAKMP_IPSEC_ATTRIB_KEY_LENGTH)
t.attributes.u.attr_16: 0100
t.attributes.type: 0004 (ISAKMP_IPSEC_ATTRIB_ENCAP_MODE)
t.attributes.u.attr_16: f003 (IPSEC_ENCAP_UDP_TUNNEL_OLD)
t.attributes.type: 0005 (ISAKMP_IPSEC_ATTRIB_AUTH_ALG)
t.attributes.u.attr_16: 0002 (IPSEC_AUTH_HMAC_SHA)
t.attributes.type: 0001 (ISAKMP_IPSEC_ATTRIB_SA_LIFE_TYPE)
t.attributes.u.attr_16: 0001 (IPSEC_LIFE_SECONDS)
t.attributes.type: 0002 (ISAKMP_IPSEC_ATTRIB_SA_LIFE_DURATION)
t.attributes.u.lots.length: 0004
t.attributes.u.lots.data: 0020c49b
DONE PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T)
PARSING PAYLOAD type: 00 (ISAKMP_PAYLOAD_NONE)
DONE PARSING PAYLOAD type: 02 (ISAKMP_PAYLOAD_P)
PARSING PAYLOAD type: 02 (ISAKMP_PAYLOAD_P)
next_type: 02 (ISAKMP_PAYLOAD_P)
length: 002c
p.number: 01
p.prot_id: 03 (ISAKMP_IPSEC_PROTO_IPSEC_ESP)
p.spi_size: 04
length: 01
p.spi: 77415f4b
PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T)
next_type: 00 (ISAKMP_PAYLOAD_NONE)
length: 0020
t.number: 00
t.id: 0c (ISAKMP_IPSEC_ESP_AES)
t.attributes.type: 0006 (ISAKMP_IPSEC_ATTRIB_KEY_LENGTH)
t.attributes.u.attr_16: 0100
t.attributes.type: 0004 (ISAKMP_IPSEC_ATTRIB_ENCAP_MODE)
t.attributes.u.attr_16: f003 (IPSEC_ENCAP_UDP_TUNNEL_OLD)
t.attributes.type: 0005 (ISAKMP_IPSEC_ATTRIB_AUTH_ALG)
t.attributes.u.attr_16: 0001 (IPSEC_AUTH_HMAC_MD5)
t.attributes.type: 0001 (ISAKMP_IPSEC_ATTRIB_SA_LIFE_TYPE)
t.attributes.u.attr_16: 0001 (IPSEC_LIFE_SECONDS)
t.attributes.type: 0002 (ISAKMP_IPSEC_ATTRIB_SA_LIFE_DURATION)
t.attributes.u.lots.length: 0004
t.attributes.u.lots.data: 0020c49b
DONE PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T)
PARSING PAYLOAD type: 00 (ISAKMP_PAYLOAD_NONE)
DONE PARSING PAYLOAD type: 02 (ISAKMP_PAYLOAD_P)
PARSING PAYLOAD type: 02 (ISAKMP_PAYLOAD_P)
next_type: 02 (ISAKMP_PAYLOAD_P)
length: 002c
p.number: 02
p.prot_id: 03 (ISAKMP_IPSEC_PROTO_IPSEC_ESP)
p.spi_size: 04
length: 01
p.spi: 77415f4b
PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T)
next_type: 00 (ISAKMP_PAYLOAD_NONE)
length: 0020
t.number: 00
t.id: 0c (ISAKMP_IPSEC_ESP_AES)
t.attributes.type: 0006 (ISAKMP_IPSEC_ATTRIB_KEY_LENGTH)
t.attributes.u.attr_16: 00c0
t.attributes.type: 0004 (ISAKMP_IPSEC_ATTRIB_ENCAP_MODE)
t.attributes.u.attr_16: f003 (IPSEC_ENCAP_UDP_TUNNEL_OLD)
t.attributes.type: 0005 (ISAKMP_IPSEC_ATTRIB_AUTH_ALG)
t.attributes.u.attr_16: 0002 (IPSEC_AUTH_HMAC_SHA)
t.attributes.type: 0001 (ISAKMP_IPSEC_ATTRIB_SA_LIFE_TYPE)
t.attributes.u.attr_16: 0001 (IPSEC_LIFE_SECONDS)
t.attributes.type: 0002 (ISAKMP_IPSEC_ATTRIB_SA_LIFE_DURATION)
t.attributes.u.lots.length: 0004
t.attributes.u.lots.data: 0020c49b
DONE PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T)
PARSING PAYLOAD type: 00 (ISAKMP_PAYLOAD_NONE)
DONE PARSING PAYLOAD type: 02 (ISAKMP_PAYLOAD_P)
PARSING PAYLOAD type: 02 (ISAKMP_PAYLOAD_P)
next_type: 02 (ISAKMP_PAYLOAD_P)
length: 002c
p.number: 03
p.prot_id: 03 (ISAKMP_IPSEC_PROTO_IPSEC_ESP)
p.spi_size: 04
length: 01
p.spi: 77415f4b
PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T)
next_type: 00 (ISAKMP_PAYLOAD_NONE)
length: 0020
t.number: 00
t.id: 0c (ISAKMP_IPSEC_ESP_AES)
t.attributes.type: 0006 (ISAKMP_IPSEC_ATTRIB_KEY_LENGTH)
t.attributes.u.attr_16: 00c0
t.attributes.type: 0004 (ISAKMP_IPSEC_ATTRIB_ENCAP_MODE)
t.attributes.u.attr_16: f003 (IPSEC_ENCAP_UDP_TUNNEL_OLD)
t.attributes.type: 0005 (ISAKMP_IPSEC_ATTRIB_AUTH_ALG)
t.attributes.u.attr_16: 0001 (IPSEC_AUTH_HMAC_MD5)
t.attributes.type: 0001 (ISAKMP_IPSEC_ATTRIB_SA_LIFE_TYPE)
t.attributes.u.attr_16: 0001 (IPSEC_LIFE_SECONDS)
t.attributes.type: 0002 (ISAKMP_IPSEC_ATTRIB_SA_LIFE_DURATION)
t.attributes.u.lots.length: 0004
t.attributes.u.lots.data: 0020c49b
DONE PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T)
PARSING PAYLOAD type: 00 (ISAKMP_PAYLOAD_NONE)
DONE PARSING PAYLOAD type: 02 (ISAKMP_PAYLOAD_P)
PARSING PAYLOAD type: 02 (ISAKMP_PAYLOAD_P)
next_type: 02 (ISAKMP_PAYLOAD_P)
length: 002c
p.number: 04
p.prot_id: 03 (ISAKMP_IPSEC_PROTO_IPSEC_ESP)
p.spi_size: 04
length: 01
p.spi: 77415f4b
PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T)
next_type: 00 (ISAKMP_PAYLOAD_NONE)
length: 0020
t.number: 00
t.id: 0c (ISAKMP_IPSEC_ESP_AES)
t.attributes.type: 0006 (ISAKMP_IPSEC_ATTRIB_KEY_LENGTH)
t.attributes.u.attr_16: 0080
t.attributes.type: 0004 (ISAKMP_IPSEC_ATTRIB_ENCAP_MODE)
t.attributes.u.attr_16: f003 (IPSEC_ENCAP_UDP_TUNNEL_OLD)
t.attributes.type: 0005 (ISAKMP_IPSEC_ATTRIB_AUTH_ALG)
t.attributes.u.attr_16: 0002 (IPSEC_AUTH_HMAC_SHA)
t.attributes.type: 0001 (ISAKMP_IPSEC_ATTRIB_SA_LIFE_TYPE)
t.attributes.u.attr_16: 0001 (IPSEC_LIFE_SECONDS)
t.attributes.type: 0002 (ISAKMP_IPSEC_ATTRIB_SA_LIFE_DURATION)
t.attributes.u.lots.length: 0004
t.attributes.u.lots.data: 0020c49b
DONE PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T)
PARSING PAYLOAD type: 00 (ISAKMP_PAYLOAD_NONE)
DONE PARSING PAYLOAD type: 02 (ISAKMP_PAYLOAD_P)
PARSING PAYLOAD type: 02 (ISAKMP_PAYLOAD_P)
next_type: 02 (ISAKMP_PAYLOAD_P)
length: 002c
p.number: 05
p.prot_id: 03 (ISAKMP_IPSEC_PROTO_IPSEC_ESP)
p.spi_size: 04
length: 01
p.spi: 77415f4b
PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T)
next_type: 00 (ISAKMP_PAYLOAD_NONE)
length: 0020
t.number: 00
t.id: 0c (ISAKMP_IPSEC_ESP_AES)
t.attributes.type: 0006 (ISAKMP_IPSEC_ATTRIB_KEY_LENGTH)
t.attributes.u.attr_16: 0080
t.attributes.type: 0004 (ISAKMP_IPSEC_ATTRIB_ENCAP_MODE)
t.attributes.u.attr_16: f003 (IPSEC_ENCAP_UDP_TUNNEL_OLD)
t.attributes.type: 0005 (ISAKMP_IPSEC_ATTRIB_AUTH_ALG)
t.attributes.u.attr_16: 0001 (IPSEC_AUTH_HMAC_MD5)
t.attributes.type: 0001 (ISAKMP_IPSEC_ATTRIB_SA_LIFE_TYPE)
t.attributes.u.attr_16: 0001 (IPSEC_LIFE_SECONDS)
t.attributes.type: 0002 (ISAKMP_IPSEC_ATTRIB_SA_LIFE_DURATION)
t.attributes.u.lots.length: 0004
t.attributes.u.lots.data: 0020c49b
DONE PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T)
PARSING PAYLOAD type: 00 (ISAKMP_PAYLOAD_NONE)
DONE PARSING PAYLOAD type: 02 (ISAKMP_PAYLOAD_P)
PARSING PAYLOAD type: 02 (ISAKMP_PAYLOAD_P)
next_type: 02 (ISAKMP_PAYLOAD_P)
length: 0028
p.number: 06
p.prot_id: 03 (ISAKMP_IPSEC_PROTO_IPSEC_ESP)
p.spi_size: 04
length: 01
p.spi: 77415f4b
PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T)
next_type: 00 (ISAKMP_PAYLOAD_NONE)
length: 001c
t.number: 00
t.id: 03 (ISAKMP_IPSEC_ESP_3DES)
t.attributes.type: 0004 (ISAKMP_IPSEC_ATTRIB_ENCAP_MODE)
t.attributes.u.attr_16: f003 (IPSEC_ENCAP_UDP_TUNNEL_OLD)
t.attributes.type: 0005 (ISAKMP_IPSEC_ATTRIB_AUTH_ALG)
t.attributes.u.attr_16: 0002 (IPSEC_AUTH_HMAC_SHA)
t.attributes.type: 0001 (ISAKMP_IPSEC_ATTRIB_SA_LIFE_TYPE)
t.attributes.u.attr_16: 0001 (IPSEC_LIFE_SECONDS)
t.attributes.type: 0002 (ISAKMP_IPSEC_ATTRIB_SA_LIFE_DURATION)
t.attributes.u.lots.length: 0004
t.attributes.u.lots.data: 0020c49b
DONE PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T)
PARSING PAYLOAD type: 00 (ISAKMP_PAYLOAD_NONE)
DONE PARSING PAYLOAD type: 02 (ISAKMP_PAYLOAD_P)
PARSING PAYLOAD type: 02 (ISAKMP_PAYLOAD_P)
next_type: 02 (ISAKMP_PAYLOAD_P)
length: 0028
p.number: 07
p.prot_id: 03 (ISAKMP_IPSEC_PROTO_IPSEC_ESP)
p.spi_size: 04
length: 01
p.spi: 77415f4b
PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T)
next_type: 00 (ISAKMP_PAYLOAD_NONE)
length: 001c
t.number: 00
t.id: 03 (ISAKMP_IPSEC_ESP_3DES)
t.attributes.type: 0004 (ISAKMP_IPSEC_ATTRIB_ENCAP_MODE)
t.attributes.u.attr_16: f003 (IPSEC_ENCAP_UDP_TUNNEL_OLD)
t.attributes.type: 0005 (ISAKMP_IPSEC_ATTRIB_AUTH_ALG)
t.attributes.u.attr_16: 0001 (IPSEC_AUTH_HMAC_MD5)
t.attributes.type: 0001 (ISAKMP_IPSEC_ATTRIB_SA_LIFE_TYPE)
t.attributes.u.attr_16: 0001 (IPSEC_LIFE_SECONDS)
t.attributes.type: 0002 (ISAKMP_IPSEC_ATTRIB_SA_LIFE_DURATION)
t.attributes.u.lots.length: 0004
t.attributes.u.lots.data: 0020c49b
DONE PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T)
PARSING PAYLOAD type: 00 (ISAKMP_PAYLOAD_NONE)
DONE PARSING PAYLOAD type: 02 (ISAKMP_PAYLOAD_P)
PARSING PAYLOAD type: 02 (ISAKMP_PAYLOAD_P)
next_type: 02 (ISAKMP_PAYLOAD_P)
length: 0028
p.number: 08
p.prot_id: 03 (ISAKMP_IPSEC_PROTO_IPSEC_ESP)
p.spi_size: 04
length: 01
p.spi: 77415f4b
PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T)
next_type: 00 (ISAKMP_PAYLOAD_NONE)
length: 001c
t.number: 00
t.id: 02 (ISAKMP_IPSEC_ESP_DES)
t.attributes.type: 0004 (ISAKMP_IPSEC_ATTRIB_ENCAP_MODE)
t.attributes.u.attr_16: f003 (IPSEC_ENCAP_UDP_TUNNEL_OLD)
t.attributes.type: 0005 (ISAKMP_IPSEC_ATTRIB_AUTH_ALG)
t.attributes.u.attr_16: 0002 (IPSEC_AUTH_HMAC_SHA)
t.attributes.type: 0001 (ISAKMP_IPSEC_ATTRIB_SA_LIFE_TYPE)
t.attributes.u.attr_16: 0001 (IPSEC_LIFE_SECONDS)
t.attributes.type: 0002 (ISAKMP_IPSEC_ATTRIB_SA_LIFE_DURATION)
t.attributes.u.lots.length: 0004
t.attributes.u.lots.data: 0020c49b
DONE PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T)
PARSING PAYLOAD type: 00 (ISAKMP_PAYLOAD_NONE)
DONE PARSING PAYLOAD type: 02 (ISAKMP_PAYLOAD_P)
PARSING PAYLOAD type: 02 (ISAKMP_PAYLOAD_P)
next_type: 02 (ISAKMP_PAYLOAD_P)
length: 0028
p.number: 09
p.prot_id: 03 (ISAKMP_IPSEC_PROTO_IPSEC_ESP)
p.spi_size: 04
length: 01
p.spi: 77415f4b
PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T)
next_type: 00 (ISAKMP_PAYLOAD_NONE)
length: 001c
t.number: 00
t.id: 02 (ISAKMP_IPSEC_ESP_DES)
t.attributes.type: 0004 (ISAKMP_IPSEC_ATTRIB_ENCAP_MODE)
t.attributes.u.attr_16: f003 (IPSEC_ENCAP_UDP_TUNNEL_OLD)
t.attributes.type: 0005 (ISAKMP_IPSEC_ATTRIB_AUTH_ALG)
t.attributes.u.attr_16: 0001 (IPSEC_AUTH_HMAC_MD5)
t.attributes.type: 0001 (ISAKMP_IPSEC_ATTRIB_SA_LIFE_TYPE)
t.attributes.u.attr_16: 0001 (IPSEC_LIFE_SECONDS)
t.attributes.type: 0002 (ISAKMP_IPSEC_ATTRIB_SA_LIFE_DURATION)
t.attributes.u.lots.length: 0004
t.attributes.u.lots.data: 0020c49b
DONE PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T)
PARSING PAYLOAD type: 00 (ISAKMP_PAYLOAD_NONE)
DONE PARSING PAYLOAD type: 02 (ISAKMP_PAYLOAD_P)
PARSING PAYLOAD type: 02 (ISAKMP_PAYLOAD_P)
next_type: 02 (ISAKMP_PAYLOAD_P)
length: 0028
p.number: 0a
p.prot_id: 03 (ISAKMP_IPSEC_PROTO_IPSEC_ESP)
p.spi_size: 04
length: 01
p.spi: 77415f4b
PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T)
next_type: 00 (ISAKMP_PAYLOAD_NONE)
length: 001c
t.number: 00
t.id: 0b (ISAKMP_IPSEC_ESP_NULL)
t.attributes.type: 0004 (ISAKMP_IPSEC_ATTRIB_ENCAP_MODE)
t.attributes.u.attr_16: f003 (IPSEC_ENCAP_UDP_TUNNEL_OLD)
t.attributes.type: 0005 (ISAKMP_IPSEC_ATTRIB_AUTH_ALG)
t.attributes.u.attr_16: 0002 (IPSEC_AUTH_HMAC_SHA)
t.attributes.type: 0001 (ISAKMP_IPSEC_ATTRIB_SA_LIFE_TYPE)
t.attributes.u.attr_16: 0001 (IPSEC_LIFE_SECONDS)
t.attributes.type: 0002 (ISAKMP_IPSEC_ATTRIB_SA_LIFE_DURATION)
t.attributes.u.lots.length: 0004
t.attributes.u.lots.data: 0020c49b
DONE PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T)
PARSING PAYLOAD type: 00 (ISAKMP_PAYLOAD_NONE)
DONE PARSING PAYLOAD type: 02 (ISAKMP_PAYLOAD_P)
PARSING PAYLOAD type: 02 (ISAKMP_PAYLOAD_P)
next_type: 00 (ISAKMP_PAYLOAD_NONE)
length: 0028
p.number: 0b
p.prot_id: 03 (ISAKMP_IPSEC_PROTO_IPSEC_ESP)
p.spi_size: 04
length: 01
p.spi: 77415f4b
PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T)
next_type: 00 (ISAKMP_PAYLOAD_NONE)
length: 001c
t.number: 00
t.id: 0b (ISAKMP_IPSEC_ESP_NULL)
t.attributes.type: 0004 (ISAKMP_IPSEC_ATTRIB_ENCAP_MODE)
t.attributes.u.attr_16: f003 (IPSEC_ENCAP_UDP_TUNNEL_OLD)
t.attributes.type: 0005 (ISAKMP_IPSEC_ATTRIB_AUTH_ALG)
t.attributes.u.attr_16: 0001 (IPSEC_AUTH_HMAC_MD5)
t.attributes.type: 0001 (ISAKMP_IPSEC_ATTRIB_SA_LIFE_TYPE)
t.attributes.u.attr_16: 0001 (IPSEC_LIFE_SECONDS)
t.attributes.type: 0002 (ISAKMP_IPSEC_ATTRIB_SA_LIFE_DURATION)
t.attributes.u.lots.length: 0004
t.attributes.u.lots.data: 0020c49b
DONE PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T)
PARSING PAYLOAD type: 00 (ISAKMP_PAYLOAD_NONE)
DONE PARSING PAYLOAD type: 02 (ISAKMP_PAYLOAD_P)
PARSING PAYLOAD type: 00 (ISAKMP_PAYLOAD_NONE)
DONE PARSING PAYLOAD type: 01 (ISAKMP_PAYLOAD_SA)
PARSING PAYLOAD type: 0a (ISAKMP_PAYLOAD_NONCE)
next_type: 05 (ISAKMP_PAYLOAD_ID)
length: 0018
ke.data:
64da8463 5af7c252 8c07a224 8790e1ca d6de86f7
DONE PARSING PAYLOAD type: 0a (ISAKMP_PAYLOAD_NONCE)
PARSING PAYLOAD type: 05 (ISAKMP_PAYLOAD_ID)
next_type: 05 (ISAKMP_PAYLOAD_ID)
length: 000c
id.type: 01 (ISAKMP_IPSEC_ID_IPV4_ADDR)
id.protocol: 00
id.port: 0000
id.data: ac174530
DONE PARSING PAYLOAD type: 05 (ISAKMP_PAYLOAD_ID)
PARSING PAYLOAD type: 05 (ISAKMP_PAYLOAD_ID)
next_type: 00 (ISAKMP_PAYLOAD_NONE)
length: 0010
id.type: 04 (ISAKMP_IPSEC_ID_IPV4_ADDR_SUBNET)
id.protocol: 00
id.port: 0000
id.data: 00000000 00000000
DONE PARSING PAYLOAD type: 05 (ISAKMP_PAYLOAD_ID)
PARSING PAYLOAD type: 00 (ISAKMP_PAYLOAD_NONE)
PARSE_OK
NAT-T mode, adding non-esp marker
receiving: <========================
[2012-09-15 14:40:25]
S7.3 QM_packet2 validate type
[2012-09-15 14:40:25]
BEGIN_PARSE
Recieved Packet Len: 84
i_cookie: d660ffaf 2a491d88
r_cookie: f772cf43 c042649c
payload: 08 (ISAKMP_PAYLOAD_HASH)
isakmp_version: 10
exchange_type: 05 (ISAKMP_EXCHANGE_INFORMATIONAL)
flags: 01
message_id: da253590
len: 00000054
PARSING PAYLOAD type: 08 (ISAKMP_PAYLOAD_HASH)
next_type: 0c (ISAKMP_PAYLOAD_D)
length: 0018
ke.data:
f686cba1 661e9f92 d27e6a7a 3c4c8c7d 57463f09
DONE PARSING PAYLOAD type: 08 (ISAKMP_PAYLOAD_HASH)
PARSING PAYLOAD type: 0c (ISAKMP_PAYLOAD_D)
next_type: 00 (ISAKMP_PAYLOAD_NONE)
length: 001c
d.doi: 00000001 (ISAKMP_DOI_IPSEC)
d.protocol: 01 (ISAKMP_IPSEC_PROTO_ISAKMP)
d.spi_length: 10
d.num_spi: 0001
d.spi: d660ffaf 2a491d88 f772cf43 c042649c
DONE PARSING PAYLOAD type: 0c (ISAKMP_PAYLOAD_D)
PARSING PAYLOAD type: 00 (ISAKMP_PAYLOAD_NONE)
PARSE_OK
hashlen: 20
u.hash.length: 20
expected_hash:
2292fb8a 38abdbeb d3bafc93 57393ec4 e5cb7b3d
h->u.hash.data:
f686cba1 661e9f92 d27e6a7a 3c4c8c7d 57463f09
got delete for old connection, ignoring..
vpnc: no response from target
At this point, /var/log/messages shows
Sep 15 14:24:17 vmfc17vpn vpnc[44740]: connection terminated by peer
_______________________________________________
vpnc-devel mailing list
vpnc-devel@unix-ag.uni-kl.de
https://lists.unix-ag.uni-kl.de/mailman/listinfo/vpnc-devel
http://www.unix-ag.uni-kl.de/~massar/vpnc/
(under Windows 7) gets disconnected from the host side every 5 minutes
or so. The Cisco client does not have this problem.
We would be grateful for any assistance you can provide.
Here is the tail of the debug log:
sending ESP packet (after crypt):
ede892a0 00000018 136d0973 f3ae7ebc 070fe95d 3cd568e9 95c9063b 0d048f5d
f83eeef7 65f97b40 d8525277 8b212496 9b85c06c c6b2b595 9edf2650 780d7b1a
7bd5ad54 53c92cb4 af6da583 1d64905a f8f1b171 45ddb007 e26c488b c362d9de
9846320c f4081c64
sending ESP packet (after ah):
ede892a0 00000018 136d0973 f3ae7ebc 070fe95d 3cd568e9 95c9063b 0d048f5d
f83eeef7 65f97b40 d8525277 8b212496 9b85c06c c6b2b595 9edf2650 780d7b1a
7bd5ad54 53c92cb4 af6da583 1d64905a f8f1b171 45ddb007 e26c488b c362d9de
9846320c f4081c64 90993704 578c99ed 557e174a
lifetime status: 480 of 28800 seconds used, 0|1 of 0 kbytes used
got late ike packet: 368 bytes
payload too short or not padded: len=368, min=28 (ivlen=8)
Payload:
2e95e333 9ded130d 00000000 00000000 01100400 00000000 00000170 04000038
00000001 00000001 0000002c 01010001 00000024 01010000 80040002 80010005
80020002 8003fdea 800b0001 000c0004 000001e0 0a000084 5ee4d9d5 b8881dd6
95c54d5a ceb7d221 131d89f0 5ccd9522 7bc96a59 d9e2cb8a ae34378e 3c3e8e53
dbc5bd56 e89617d7 02536c08 5c11f699 07d8effe 23d16417 bde8d6be ee43b124
a9faa4e8 466a311c 28f3d40b e83ed226 d5df7208 b268d4b5 86ce6dff 58072a34
54b76515 a1a6fe88 d7a3f905 caba25de 6dc33c7a bb687351 05000018 60f82028
d3d870cf a02f51f9 acd650fa 7e84933c 0d00000c 01110000 29df3803 0d000014
12f5f28c 457168a9 702d9fe2 74cc0100 0d00000c 09002689 dfd6b712 0d000014
90cb8091 3ebb696e 086381b5 ec427b1f 0d000014 7d9419a6 5310ca6f 2c179d92
15529d56 0d000014 4a131c81 07035845 5c5728f2 0e95452f 00000018 4048b7d5
6ebce885 25e7de7f 00d6c2d3 c0000000
got packet with wrong cookies
lifetime status: 488 of 28800 seconds used, 0|1 of 0 kbytes used
got late ike packet: 68 bytes
BEGIN_PARSE
Recieved Packet Len: 68
i_cookie: d660ffaf 2a491d88
r_cookie: f772cf43 c042649c
payload: 08 (ISAKMP_PAYLOAD_HASH)
isakmp_version: 10
exchange_type: 05 (ISAKMP_EXCHANGE_INFORMATIONAL)
flags: 01
message_id: e8d01e95
len: 00000044
PARSING PAYLOAD type: 08 (ISAKMP_PAYLOAD_HASH)
next_type: 0c (ISAKMP_PAYLOAD_D)
length: 0018
ke.data:
0526296b c487334a 8476a9d6 5ec1dd76 0c73ede1
DONE PARSING PAYLOAD type: 08 (ISAKMP_PAYLOAD_HASH)
PARSING PAYLOAD type: 0c (ISAKMP_PAYLOAD_D)
next_type: 00 (ISAKMP_PAYLOAD_NONE)
length: 0010
d.doi: 00000001 (ISAKMP_DOI_IPSEC)
d.protocol: 03 (ISAKMP_IPSEC_PROTO_IPSEC_ESP)
d.spi_length: 04
d.num_spi: 0001
d.spi: ede892a0
DONE PARSING PAYLOAD type: 0c (ISAKMP_PAYLOAD_D)
PARSING PAYLOAD type: 00 (ISAKMP_PAYLOAD_NONE)
PARSE_OK
hashlen: 20
u.hash.length: 20
expected_hash:
0526296b c487334a 8476a9d6 5ec1dd76 0c73ede1
h->u.hash.data:
0526296b c487334a 8476a9d6 5ec1dd76 0c73ede1
S7.1 QM_packet1
[2012-09-15 14:40:25]
S7.2 QM_packet2 send_receive
[2012-09-15 14:40:25]
size = 592, blksz = 8, padding = 0
sending: ========================>
BEGIN_PARSE
Recieved Packet Len: 620
i_cookie: d660ffaf 2a491d88
r_cookie: f772cf43 c042649c
payload: 08 (ISAKMP_PAYLOAD_HASH)
isakmp_version: 10
exchange_type: 20 (ISAKMP_EXCHANGE_IKE_QUICK)
flags: 01
message_id: 8886c2ec
len: 0000026c
PARSING PAYLOAD type: 08 (ISAKMP_PAYLOAD_HASH)
next_type: 01 (ISAKMP_PAYLOAD_SA)
length: 0018
ke.data:
31f66057 6d67b087 4b0a5288 19b1a287 ff940e95
DONE PARSING PAYLOAD type: 08 (ISAKMP_PAYLOAD_HASH)
PARSING PAYLOAD type: 01 (ISAKMP_PAYLOAD_SA)
next_type: 0a (ISAKMP_PAYLOAD_NONCE)
length: 0204
sa.doi: 00000001 (ISAKMP_DOI_IPSEC)
sa.situation: 00000001 (ISAKMP_IPSEC_SIT_IDENTITY_ONLY)
PARSING PAYLOAD type: 02 (ISAKMP_PAYLOAD_P)
next_type: 02 (ISAKMP_PAYLOAD_P)
length: 002c
p.number: 00
p.prot_id: 03 (ISAKMP_IPSEC_PROTO_IPSEC_ESP)
p.spi_size: 04
length: 01
p.spi: 77415f4b
PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T)
next_type: 00 (ISAKMP_PAYLOAD_NONE)
length: 0020
t.number: 00
t.id: 0c (ISAKMP_IPSEC_ESP_AES)
t.attributes.type: 0006 (ISAKMP_IPSEC_ATTRIB_KEY_LENGTH)
t.attributes.u.attr_16: 0100
t.attributes.type: 0004 (ISAKMP_IPSEC_ATTRIB_ENCAP_MODE)
t.attributes.u.attr_16: f003 (IPSEC_ENCAP_UDP_TUNNEL_OLD)
t.attributes.type: 0005 (ISAKMP_IPSEC_ATTRIB_AUTH_ALG)
t.attributes.u.attr_16: 0002 (IPSEC_AUTH_HMAC_SHA)
t.attributes.type: 0001 (ISAKMP_IPSEC_ATTRIB_SA_LIFE_TYPE)
t.attributes.u.attr_16: 0001 (IPSEC_LIFE_SECONDS)
t.attributes.type: 0002 (ISAKMP_IPSEC_ATTRIB_SA_LIFE_DURATION)
t.attributes.u.lots.length: 0004
t.attributes.u.lots.data: 0020c49b
DONE PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T)
PARSING PAYLOAD type: 00 (ISAKMP_PAYLOAD_NONE)
DONE PARSING PAYLOAD type: 02 (ISAKMP_PAYLOAD_P)
PARSING PAYLOAD type: 02 (ISAKMP_PAYLOAD_P)
next_type: 02 (ISAKMP_PAYLOAD_P)
length: 002c
p.number: 01
p.prot_id: 03 (ISAKMP_IPSEC_PROTO_IPSEC_ESP)
p.spi_size: 04
length: 01
p.spi: 77415f4b
PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T)
next_type: 00 (ISAKMP_PAYLOAD_NONE)
length: 0020
t.number: 00
t.id: 0c (ISAKMP_IPSEC_ESP_AES)
t.attributes.type: 0006 (ISAKMP_IPSEC_ATTRIB_KEY_LENGTH)
t.attributes.u.attr_16: 0100
t.attributes.type: 0004 (ISAKMP_IPSEC_ATTRIB_ENCAP_MODE)
t.attributes.u.attr_16: f003 (IPSEC_ENCAP_UDP_TUNNEL_OLD)
t.attributes.type: 0005 (ISAKMP_IPSEC_ATTRIB_AUTH_ALG)
t.attributes.u.attr_16: 0001 (IPSEC_AUTH_HMAC_MD5)
t.attributes.type: 0001 (ISAKMP_IPSEC_ATTRIB_SA_LIFE_TYPE)
t.attributes.u.attr_16: 0001 (IPSEC_LIFE_SECONDS)
t.attributes.type: 0002 (ISAKMP_IPSEC_ATTRIB_SA_LIFE_DURATION)
t.attributes.u.lots.length: 0004
t.attributes.u.lots.data: 0020c49b
DONE PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T)
PARSING PAYLOAD type: 00 (ISAKMP_PAYLOAD_NONE)
DONE PARSING PAYLOAD type: 02 (ISAKMP_PAYLOAD_P)
PARSING PAYLOAD type: 02 (ISAKMP_PAYLOAD_P)
next_type: 02 (ISAKMP_PAYLOAD_P)
length: 002c
p.number: 02
p.prot_id: 03 (ISAKMP_IPSEC_PROTO_IPSEC_ESP)
p.spi_size: 04
length: 01
p.spi: 77415f4b
PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T)
next_type: 00 (ISAKMP_PAYLOAD_NONE)
length: 0020
t.number: 00
t.id: 0c (ISAKMP_IPSEC_ESP_AES)
t.attributes.type: 0006 (ISAKMP_IPSEC_ATTRIB_KEY_LENGTH)
t.attributes.u.attr_16: 00c0
t.attributes.type: 0004 (ISAKMP_IPSEC_ATTRIB_ENCAP_MODE)
t.attributes.u.attr_16: f003 (IPSEC_ENCAP_UDP_TUNNEL_OLD)
t.attributes.type: 0005 (ISAKMP_IPSEC_ATTRIB_AUTH_ALG)
t.attributes.u.attr_16: 0002 (IPSEC_AUTH_HMAC_SHA)
t.attributes.type: 0001 (ISAKMP_IPSEC_ATTRIB_SA_LIFE_TYPE)
t.attributes.u.attr_16: 0001 (IPSEC_LIFE_SECONDS)
t.attributes.type: 0002 (ISAKMP_IPSEC_ATTRIB_SA_LIFE_DURATION)
t.attributes.u.lots.length: 0004
t.attributes.u.lots.data: 0020c49b
DONE PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T)
PARSING PAYLOAD type: 00 (ISAKMP_PAYLOAD_NONE)
DONE PARSING PAYLOAD type: 02 (ISAKMP_PAYLOAD_P)
PARSING PAYLOAD type: 02 (ISAKMP_PAYLOAD_P)
next_type: 02 (ISAKMP_PAYLOAD_P)
length: 002c
p.number: 03
p.prot_id: 03 (ISAKMP_IPSEC_PROTO_IPSEC_ESP)
p.spi_size: 04
length: 01
p.spi: 77415f4b
PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T)
next_type: 00 (ISAKMP_PAYLOAD_NONE)
length: 0020
t.number: 00
t.id: 0c (ISAKMP_IPSEC_ESP_AES)
t.attributes.type: 0006 (ISAKMP_IPSEC_ATTRIB_KEY_LENGTH)
t.attributes.u.attr_16: 00c0
t.attributes.type: 0004 (ISAKMP_IPSEC_ATTRIB_ENCAP_MODE)
t.attributes.u.attr_16: f003 (IPSEC_ENCAP_UDP_TUNNEL_OLD)
t.attributes.type: 0005 (ISAKMP_IPSEC_ATTRIB_AUTH_ALG)
t.attributes.u.attr_16: 0001 (IPSEC_AUTH_HMAC_MD5)
t.attributes.type: 0001 (ISAKMP_IPSEC_ATTRIB_SA_LIFE_TYPE)
t.attributes.u.attr_16: 0001 (IPSEC_LIFE_SECONDS)
t.attributes.type: 0002 (ISAKMP_IPSEC_ATTRIB_SA_LIFE_DURATION)
t.attributes.u.lots.length: 0004
t.attributes.u.lots.data: 0020c49b
DONE PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T)
PARSING PAYLOAD type: 00 (ISAKMP_PAYLOAD_NONE)
DONE PARSING PAYLOAD type: 02 (ISAKMP_PAYLOAD_P)
PARSING PAYLOAD type: 02 (ISAKMP_PAYLOAD_P)
next_type: 02 (ISAKMP_PAYLOAD_P)
length: 002c
p.number: 04
p.prot_id: 03 (ISAKMP_IPSEC_PROTO_IPSEC_ESP)
p.spi_size: 04
length: 01
p.spi: 77415f4b
PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T)
next_type: 00 (ISAKMP_PAYLOAD_NONE)
length: 0020
t.number: 00
t.id: 0c (ISAKMP_IPSEC_ESP_AES)
t.attributes.type: 0006 (ISAKMP_IPSEC_ATTRIB_KEY_LENGTH)
t.attributes.u.attr_16: 0080
t.attributes.type: 0004 (ISAKMP_IPSEC_ATTRIB_ENCAP_MODE)
t.attributes.u.attr_16: f003 (IPSEC_ENCAP_UDP_TUNNEL_OLD)
t.attributes.type: 0005 (ISAKMP_IPSEC_ATTRIB_AUTH_ALG)
t.attributes.u.attr_16: 0002 (IPSEC_AUTH_HMAC_SHA)
t.attributes.type: 0001 (ISAKMP_IPSEC_ATTRIB_SA_LIFE_TYPE)
t.attributes.u.attr_16: 0001 (IPSEC_LIFE_SECONDS)
t.attributes.type: 0002 (ISAKMP_IPSEC_ATTRIB_SA_LIFE_DURATION)
t.attributes.u.lots.length: 0004
t.attributes.u.lots.data: 0020c49b
DONE PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T)
PARSING PAYLOAD type: 00 (ISAKMP_PAYLOAD_NONE)
DONE PARSING PAYLOAD type: 02 (ISAKMP_PAYLOAD_P)
PARSING PAYLOAD type: 02 (ISAKMP_PAYLOAD_P)
next_type: 02 (ISAKMP_PAYLOAD_P)
length: 002c
p.number: 05
p.prot_id: 03 (ISAKMP_IPSEC_PROTO_IPSEC_ESP)
p.spi_size: 04
length: 01
p.spi: 77415f4b
PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T)
next_type: 00 (ISAKMP_PAYLOAD_NONE)
length: 0020
t.number: 00
t.id: 0c (ISAKMP_IPSEC_ESP_AES)
t.attributes.type: 0006 (ISAKMP_IPSEC_ATTRIB_KEY_LENGTH)
t.attributes.u.attr_16: 0080
t.attributes.type: 0004 (ISAKMP_IPSEC_ATTRIB_ENCAP_MODE)
t.attributes.u.attr_16: f003 (IPSEC_ENCAP_UDP_TUNNEL_OLD)
t.attributes.type: 0005 (ISAKMP_IPSEC_ATTRIB_AUTH_ALG)
t.attributes.u.attr_16: 0001 (IPSEC_AUTH_HMAC_MD5)
t.attributes.type: 0001 (ISAKMP_IPSEC_ATTRIB_SA_LIFE_TYPE)
t.attributes.u.attr_16: 0001 (IPSEC_LIFE_SECONDS)
t.attributes.type: 0002 (ISAKMP_IPSEC_ATTRIB_SA_LIFE_DURATION)
t.attributes.u.lots.length: 0004
t.attributes.u.lots.data: 0020c49b
DONE PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T)
PARSING PAYLOAD type: 00 (ISAKMP_PAYLOAD_NONE)
DONE PARSING PAYLOAD type: 02 (ISAKMP_PAYLOAD_P)
PARSING PAYLOAD type: 02 (ISAKMP_PAYLOAD_P)
next_type: 02 (ISAKMP_PAYLOAD_P)
length: 0028
p.number: 06
p.prot_id: 03 (ISAKMP_IPSEC_PROTO_IPSEC_ESP)
p.spi_size: 04
length: 01
p.spi: 77415f4b
PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T)
next_type: 00 (ISAKMP_PAYLOAD_NONE)
length: 001c
t.number: 00
t.id: 03 (ISAKMP_IPSEC_ESP_3DES)
t.attributes.type: 0004 (ISAKMP_IPSEC_ATTRIB_ENCAP_MODE)
t.attributes.u.attr_16: f003 (IPSEC_ENCAP_UDP_TUNNEL_OLD)
t.attributes.type: 0005 (ISAKMP_IPSEC_ATTRIB_AUTH_ALG)
t.attributes.u.attr_16: 0002 (IPSEC_AUTH_HMAC_SHA)
t.attributes.type: 0001 (ISAKMP_IPSEC_ATTRIB_SA_LIFE_TYPE)
t.attributes.u.attr_16: 0001 (IPSEC_LIFE_SECONDS)
t.attributes.type: 0002 (ISAKMP_IPSEC_ATTRIB_SA_LIFE_DURATION)
t.attributes.u.lots.length: 0004
t.attributes.u.lots.data: 0020c49b
DONE PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T)
PARSING PAYLOAD type: 00 (ISAKMP_PAYLOAD_NONE)
DONE PARSING PAYLOAD type: 02 (ISAKMP_PAYLOAD_P)
PARSING PAYLOAD type: 02 (ISAKMP_PAYLOAD_P)
next_type: 02 (ISAKMP_PAYLOAD_P)
length: 0028
p.number: 07
p.prot_id: 03 (ISAKMP_IPSEC_PROTO_IPSEC_ESP)
p.spi_size: 04
length: 01
p.spi: 77415f4b
PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T)
next_type: 00 (ISAKMP_PAYLOAD_NONE)
length: 001c
t.number: 00
t.id: 03 (ISAKMP_IPSEC_ESP_3DES)
t.attributes.type: 0004 (ISAKMP_IPSEC_ATTRIB_ENCAP_MODE)
t.attributes.u.attr_16: f003 (IPSEC_ENCAP_UDP_TUNNEL_OLD)
t.attributes.type: 0005 (ISAKMP_IPSEC_ATTRIB_AUTH_ALG)
t.attributes.u.attr_16: 0001 (IPSEC_AUTH_HMAC_MD5)
t.attributes.type: 0001 (ISAKMP_IPSEC_ATTRIB_SA_LIFE_TYPE)
t.attributes.u.attr_16: 0001 (IPSEC_LIFE_SECONDS)
t.attributes.type: 0002 (ISAKMP_IPSEC_ATTRIB_SA_LIFE_DURATION)
t.attributes.u.lots.length: 0004
t.attributes.u.lots.data: 0020c49b
DONE PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T)
PARSING PAYLOAD type: 00 (ISAKMP_PAYLOAD_NONE)
DONE PARSING PAYLOAD type: 02 (ISAKMP_PAYLOAD_P)
PARSING PAYLOAD type: 02 (ISAKMP_PAYLOAD_P)
next_type: 02 (ISAKMP_PAYLOAD_P)
length: 0028
p.number: 08
p.prot_id: 03 (ISAKMP_IPSEC_PROTO_IPSEC_ESP)
p.spi_size: 04
length: 01
p.spi: 77415f4b
PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T)
next_type: 00 (ISAKMP_PAYLOAD_NONE)
length: 001c
t.number: 00
t.id: 02 (ISAKMP_IPSEC_ESP_DES)
t.attributes.type: 0004 (ISAKMP_IPSEC_ATTRIB_ENCAP_MODE)
t.attributes.u.attr_16: f003 (IPSEC_ENCAP_UDP_TUNNEL_OLD)
t.attributes.type: 0005 (ISAKMP_IPSEC_ATTRIB_AUTH_ALG)
t.attributes.u.attr_16: 0002 (IPSEC_AUTH_HMAC_SHA)
t.attributes.type: 0001 (ISAKMP_IPSEC_ATTRIB_SA_LIFE_TYPE)
t.attributes.u.attr_16: 0001 (IPSEC_LIFE_SECONDS)
t.attributes.type: 0002 (ISAKMP_IPSEC_ATTRIB_SA_LIFE_DURATION)
t.attributes.u.lots.length: 0004
t.attributes.u.lots.data: 0020c49b
DONE PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T)
PARSING PAYLOAD type: 00 (ISAKMP_PAYLOAD_NONE)
DONE PARSING PAYLOAD type: 02 (ISAKMP_PAYLOAD_P)
PARSING PAYLOAD type: 02 (ISAKMP_PAYLOAD_P)
next_type: 02 (ISAKMP_PAYLOAD_P)
length: 0028
p.number: 09
p.prot_id: 03 (ISAKMP_IPSEC_PROTO_IPSEC_ESP)
p.spi_size: 04
length: 01
p.spi: 77415f4b
PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T)
next_type: 00 (ISAKMP_PAYLOAD_NONE)
length: 001c
t.number: 00
t.id: 02 (ISAKMP_IPSEC_ESP_DES)
t.attributes.type: 0004 (ISAKMP_IPSEC_ATTRIB_ENCAP_MODE)
t.attributes.u.attr_16: f003 (IPSEC_ENCAP_UDP_TUNNEL_OLD)
t.attributes.type: 0005 (ISAKMP_IPSEC_ATTRIB_AUTH_ALG)
t.attributes.u.attr_16: 0001 (IPSEC_AUTH_HMAC_MD5)
t.attributes.type: 0001 (ISAKMP_IPSEC_ATTRIB_SA_LIFE_TYPE)
t.attributes.u.attr_16: 0001 (IPSEC_LIFE_SECONDS)
t.attributes.type: 0002 (ISAKMP_IPSEC_ATTRIB_SA_LIFE_DURATION)
t.attributes.u.lots.length: 0004
t.attributes.u.lots.data: 0020c49b
DONE PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T)
PARSING PAYLOAD type: 00 (ISAKMP_PAYLOAD_NONE)
DONE PARSING PAYLOAD type: 02 (ISAKMP_PAYLOAD_P)
PARSING PAYLOAD type: 02 (ISAKMP_PAYLOAD_P)
next_type: 02 (ISAKMP_PAYLOAD_P)
length: 0028
p.number: 0a
p.prot_id: 03 (ISAKMP_IPSEC_PROTO_IPSEC_ESP)
p.spi_size: 04
length: 01
p.spi: 77415f4b
PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T)
next_type: 00 (ISAKMP_PAYLOAD_NONE)
length: 001c
t.number: 00
t.id: 0b (ISAKMP_IPSEC_ESP_NULL)
t.attributes.type: 0004 (ISAKMP_IPSEC_ATTRIB_ENCAP_MODE)
t.attributes.u.attr_16: f003 (IPSEC_ENCAP_UDP_TUNNEL_OLD)
t.attributes.type: 0005 (ISAKMP_IPSEC_ATTRIB_AUTH_ALG)
t.attributes.u.attr_16: 0002 (IPSEC_AUTH_HMAC_SHA)
t.attributes.type: 0001 (ISAKMP_IPSEC_ATTRIB_SA_LIFE_TYPE)
t.attributes.u.attr_16: 0001 (IPSEC_LIFE_SECONDS)
t.attributes.type: 0002 (ISAKMP_IPSEC_ATTRIB_SA_LIFE_DURATION)
t.attributes.u.lots.length: 0004
t.attributes.u.lots.data: 0020c49b
DONE PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T)
PARSING PAYLOAD type: 00 (ISAKMP_PAYLOAD_NONE)
DONE PARSING PAYLOAD type: 02 (ISAKMP_PAYLOAD_P)
PARSING PAYLOAD type: 02 (ISAKMP_PAYLOAD_P)
next_type: 00 (ISAKMP_PAYLOAD_NONE)
length: 0028
p.number: 0b
p.prot_id: 03 (ISAKMP_IPSEC_PROTO_IPSEC_ESP)
p.spi_size: 04
length: 01
p.spi: 77415f4b
PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T)
next_type: 00 (ISAKMP_PAYLOAD_NONE)
length: 001c
t.number: 00
t.id: 0b (ISAKMP_IPSEC_ESP_NULL)
t.attributes.type: 0004 (ISAKMP_IPSEC_ATTRIB_ENCAP_MODE)
t.attributes.u.attr_16: f003 (IPSEC_ENCAP_UDP_TUNNEL_OLD)
t.attributes.type: 0005 (ISAKMP_IPSEC_ATTRIB_AUTH_ALG)
t.attributes.u.attr_16: 0001 (IPSEC_AUTH_HMAC_MD5)
t.attributes.type: 0001 (ISAKMP_IPSEC_ATTRIB_SA_LIFE_TYPE)
t.attributes.u.attr_16: 0001 (IPSEC_LIFE_SECONDS)
t.attributes.type: 0002 (ISAKMP_IPSEC_ATTRIB_SA_LIFE_DURATION)
t.attributes.u.lots.length: 0004
t.attributes.u.lots.data: 0020c49b
DONE PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T)
PARSING PAYLOAD type: 00 (ISAKMP_PAYLOAD_NONE)
DONE PARSING PAYLOAD type: 02 (ISAKMP_PAYLOAD_P)
PARSING PAYLOAD type: 00 (ISAKMP_PAYLOAD_NONE)
DONE PARSING PAYLOAD type: 01 (ISAKMP_PAYLOAD_SA)
PARSING PAYLOAD type: 0a (ISAKMP_PAYLOAD_NONCE)
next_type: 05 (ISAKMP_PAYLOAD_ID)
length: 0018
ke.data:
64da8463 5af7c252 8c07a224 8790e1ca d6de86f7
DONE PARSING PAYLOAD type: 0a (ISAKMP_PAYLOAD_NONCE)
PARSING PAYLOAD type: 05 (ISAKMP_PAYLOAD_ID)
next_type: 05 (ISAKMP_PAYLOAD_ID)
length: 000c
id.type: 01 (ISAKMP_IPSEC_ID_IPV4_ADDR)
id.protocol: 00
id.port: 0000
id.data: ac174530
DONE PARSING PAYLOAD type: 05 (ISAKMP_PAYLOAD_ID)
PARSING PAYLOAD type: 05 (ISAKMP_PAYLOAD_ID)
next_type: 00 (ISAKMP_PAYLOAD_NONE)
length: 0010
id.type: 04 (ISAKMP_IPSEC_ID_IPV4_ADDR_SUBNET)
id.protocol: 00
id.port: 0000
id.data: 00000000 00000000
DONE PARSING PAYLOAD type: 05 (ISAKMP_PAYLOAD_ID)
PARSING PAYLOAD type: 00 (ISAKMP_PAYLOAD_NONE)
PARSE_OK
NAT-T mode, adding non-esp marker
receiving: <========================
[2012-09-15 14:40:25]
S7.3 QM_packet2 validate type
[2012-09-15 14:40:25]
BEGIN_PARSE
Recieved Packet Len: 84
i_cookie: d660ffaf 2a491d88
r_cookie: f772cf43 c042649c
payload: 08 (ISAKMP_PAYLOAD_HASH)
isakmp_version: 10
exchange_type: 05 (ISAKMP_EXCHANGE_INFORMATIONAL)
flags: 01
message_id: da253590
len: 00000054
PARSING PAYLOAD type: 08 (ISAKMP_PAYLOAD_HASH)
next_type: 0c (ISAKMP_PAYLOAD_D)
length: 0018
ke.data:
f686cba1 661e9f92 d27e6a7a 3c4c8c7d 57463f09
DONE PARSING PAYLOAD type: 08 (ISAKMP_PAYLOAD_HASH)
PARSING PAYLOAD type: 0c (ISAKMP_PAYLOAD_D)
next_type: 00 (ISAKMP_PAYLOAD_NONE)
length: 001c
d.doi: 00000001 (ISAKMP_DOI_IPSEC)
d.protocol: 01 (ISAKMP_IPSEC_PROTO_ISAKMP)
d.spi_length: 10
d.num_spi: 0001
d.spi: d660ffaf 2a491d88 f772cf43 c042649c
DONE PARSING PAYLOAD type: 0c (ISAKMP_PAYLOAD_D)
PARSING PAYLOAD type: 00 (ISAKMP_PAYLOAD_NONE)
PARSE_OK
hashlen: 20
u.hash.length: 20
expected_hash:
2292fb8a 38abdbeb d3bafc93 57393ec4 e5cb7b3d
h->u.hash.data:
f686cba1 661e9f92 d27e6a7a 3c4c8c7d 57463f09
got delete for old connection, ignoring..
vpnc: no response from target
At this point, /var/log/messages shows
Sep 15 14:24:17 vmfc17vpn vpnc[44740]: connection terminated by peer
_______________________________________________
vpnc-devel mailing list
vpnc-devel@unix-ag.uni-kl.de
https://lists.unix-ag.uni-kl.de/mailman/listinfo/vpnc-devel
http://www.unix-ag.uni-kl.de/~massar/vpnc/