1 Program invoked with PATH/start.sh spi1.sh
3 Starting UML PATH/start.sh
5 tracing thread pid = XXXXX
7 On node 0 totalpages: 8192
12 Calibrating delay loop... XXXX bogomips
13 Memory: 32244k available
14 Dentry-cache hash table entries: 4096 (order: 3, 32768 bytes)
15 Inode-cache hash table entries: 2048 (order: 2, 16384 bytes)
16 Mount-cache hash table entries: 512 (order: 0, 4096 bytes)
17 Buffer-cache hash table entries: 1024 (order: 0, 4096 bytes)
18 Page-cache hash table entries: 8192 (order: 3, 32768 bytes)
19 POSIX conformance testing by UNIFIX
20 Linux NET4.0 for Linux 2.4
21 Based upon Swansea University Computer Society NET3.039
22 Initializing RT netlink socket
24 VFS: Diskquotas version dquot_6.4.0 initialized
25 devfs: VERSION Richard Gooch (rgooch@atnf.csiro.au)
27 pty: 256 Unix98 ptys configured
28 block: slots and queues
29 RAMDISK driver initialized: 16 RAM disks of 4096K size 1024 blocksize
30 Netdevice 0 : daemon backend- ethernet address = 10:0:0:dc:bc:ff
32 Netdevice 1 : daemon backend- ethernet address = 10:0:0:64:64:23
34 SLIP: version 0.8.4-NET3.019-NEWTTY (dynamic channels, max=256).
35 loop: loaded (max 8 devices)
36 PPP generic driver version 2.4.1
37 Universal TUN/TAP device driver 1.4 (C)1999-2001 Maxim Krasnyansky
38 NET4: Linux TCP/IP 1.0 for NET4.0
39 IP Protocols: ICMP, UDP, TCP
40 IP: routing cache hash table of 512 buckets, 4Kbytes
41 TCP: Hash tables configured (established 2048 bind 2048)
42 IPv4 over IPv4 tunneling driver
43 GRE over IPv4 tunneling driver
44 klips_info:ipsec_init: KLIPS startup, FreeS/WAN IPSec version: XXXX
45 NET4: Unix domain sockets 1.0/SMP for Linux NET4.0.
46 Initializing stdio console driver
47 Initializing software serial port version 1
48 mconsole initialized on PATH
50 INIT: version 2.78 booting
52 Calculating module dependancies
56 Checking all file systems...
57 Parallelizing fsck version 1.18 (11-Nov-1999)
58 Setting kernel variables.
59 Mounting local filesystems...
60 /dev/ubd/1 on /usr/share type hostfs (ro,/usr/share)
61 /dev/shm on /tmp type tmpfs (rw)
62 /dev/shm on /var/run type tmpfs (rw)
63 devpts on /dev/pts type devpts (rw,mode=0622)
64 Enabling packet forwarding: done.
65 Configuring network interfaces: done.
66 Cleaning: /tmp /var/lock /var/run.
67 Initializing random number generator... done.
68 Recovering nvi editor sessions... done.
69 Give root password for maintenance
70 (or type Control-D for normal startup):
71 east:~# TZ=GMT export TZ
72 east:~# ipsec spi --clear
73 east:~# ipsec eroute --clear
74 east:~# enckey=0x4043434545464649494a4a4c4c4f4f515152525454575758
75 east:~# authkey=0x87658765876587658765876587658765
76 east:~# ipsec klipsdebug --set pfkey
77 klips_debug:pfkey_x_debug_process: set
78 klips_debug:pfkey_msg_interp: parsing message type 16 with msg_parser ABCDABCD
79 klips_debug:pfkey_x_msg_debug_parse: .
80 klips_debug:pfkey_release: sock=ABCDABCD sk=ABCDABCD
81 klips_debug:pfkey_destroy_socket: STUFF
82 klips_debug:pfkey_remove_socket: .
83 klips_debug:pfkey_remove_socket: succeeded.
84 klips_debug:pfkey_destroy_socket: STUFF
85 klips_debug:pfkey_destroy_socket: STUFF
86 klips_debug:pfkey_destroy_socket: STUFF
87 klips_debug:pfkey_list_remove_socket: removing sock=ABCDABCD
88 klips_debug:pfkey_list_remove_socket: removing sock=ABCDABCD
89 klips_debug:pfkey_list_remove_socket: removing sock=ABCDABCD
90 klips_debug:pfkey_list_remove_socket: removing sock=ABCDABCD
91 klips_debug:pfkey_list_remove_socket: removing sock=ABCDABCD
92 klips_debug:pfkey_list_remove_socket: removing sock=ABCDABCD
93 klips_debug:pfkey_list_remove_socket: removing sock=ABCDABCD
94 klips_debug:pfkey_list_remove_socket: removing sock=ABCDABCD
95 klips_debug:pfkey_list_remove_socket: removing sock=ABCDABCD
96 klips_debug:pfkey_list_remove_socket: removing sock=ABCDABCD
97 klips_debug:pfkey_list_remove_socket: removing sock=ABCDABCD
98 klips_debug:pfkey_list_remove_socket: removing sock=ABCDABCD
99 klips_debug:pfkey_list_remove_socket: removing sock=ABCDABCD
100 klips_debug:pfkey_release: succeeded.
101 east:~# ipsec klipsdebug --set verbose
102 klips_debug:pfkey_create: sock=ABCDABCD type:3 state:1 flags:0 protocol:2
103 klips_debug:pfkey_create: sock->fasync_list=00000000 sk->sleep=ABCDABCD
104 klips_debug:pfkey_insert_socket: sk=ABCDABCD
105 klips_debug:pfkey_list_insert_socket: socketp=ABCDABCD
106 klips_debug:pfkey_create: Socket sock=ABCDABCD sk=ABCDABCD initialised.
107 klips_debug:pfkey_sendmsg: .
108 klips_debug:pfkey_sendmsg: msg sent for parsing.
109 klips_debug:pfkey_msg_interp: parsing message ver=2, type=16, errno=0, satype=0(UNKNOWN), len=9, res=0, seq=1, pid=987.
110 klips_debug:pfkey_alloc_ipsec_sa: allocated tdb struct=ABDCABCD
111 klips_debug:pfkey_msg_interp: allocated extr->tdb=ABCDABCD
112 klips_debug:pfkey_msg_interp: processing ext 25 ABCDABCD with processor ABCDABCD
113 klips_debug:pfkey_x_debug_process: .
114 klips_debug:pfkey_x_debug_process: set
115 klips_debug:pfkey_msg_interp: parsing message type 16 with msg_parser ABCDABCD
116 klips_debug:pfkey_x_msg_debug_parse: .
117 klips_debug:pfkey_release: sock=ABCDABCD sk=ABCDABCD
118 klips_debug:pfkey_destroy_socket: STUFF
119 klips_debug:pfkey_remove_socket: .
120 klips_debug:pfkey_remove_socket: succeeded.
121 klips_debug:pfkey_destroy_socket: STUFF
122 klips_debug:pfkey_destroy_socket: STUFF
123 klips_debug:pfkey_destroy_socket: STUFF
124 klips_debug:pfkey_list_remove_socket: removing sock=ABCDABCD
125 klips_debug:pfkey_list_remove_socket: removing sock=ABCDABCD
126 klips_debug:pfkey_list_remove_socket: removing sock=ABCDABCD
127 klips_debug:pfkey_list_remove_socket: removing sock=ABCDABCD
128 klips_debug:pfkey_list_remove_socket: removing sock=ABCDABCD
129 klips_debug:pfkey_list_remove_socket: removing sock=ABCDABCD
130 klips_debug:pfkey_list_remove_socket: removing sock=ABCDABCD
131 klips_debug:pfkey_list_remove_socket: removing sock=ABCDABCD
132 klips_debug:pfkey_list_remove_socket: removing sock=ABCDABCD
133 klips_debug:pfkey_list_remove_socket: removing sock=ABCDABCD
134 klips_debug:pfkey_list_remove_socket: removing sock=ABCDABCD
135 klips_debug:pfkey_list_remove_socket: removing sock=ABCDABCD
136 klips_debug:pfkey_list_remove_socket: removing sock=ABCDABCD
137 klips_debug:pfkey_release: succeeded.
138 east:~# ipsec spi --af inet --edst 192.1.2.45 --spi 0x12345678 --proto esp --src 192.1.2.23 --esp 3des-md5-96 --enckey $enckey --authkey $authkey
139 klips_debug:pfkey_create: sock=ABCDABCD type:3 state:1 flags:0 protocol:2
140 klips_debug:pfkey_create: sock->fasync_list=00000000 sk->sleep=ABCDABCD
141 klips_debug:pfkey_insert_socket: sk=ABCDABCD
142 klips_debug:pfkey_list_insert_socket: socketp=ABCDABCD
143 klips_debug:pfkey_create: Socket sock=ABCDABCD sk=ABCDABCD initialised.
144 klips_debug:pfkey_sendmsg: .
145 klips_debug:pfkey_sendmsg: msg sent for parsing.
146 klips_debug:pfkey_msg_interp: parsing message ver=2, type=3, errno=0, satype=3(ESP), len=17, res=0, seq=1, pid=987.
147 klips_debug:pfkey_alloc_ipsec_sa: allocated tdb struct=ABDCABCD
148 klips_debug:pfkey_msg_interp: allocated extr->tdb=ABCDABCD
149 klips_debug:pfkey_msg_interp: satype 3 lookups to proto=50.
150 klips_debug:pfkey_msg_interp: processing ext 1 ABCDABCD with processor ABCDABCD
151 klips_debug:pfkey_sa_process: .
152 klips_debug:pfkey_msg_interp: processing ext 5 ABCDABCD with processor ABCDABCD
153 klips_debug:pfkey_address_process:
154 klips_debug:pfkey_address_process: found address family=2, AF_INET, 192.1.2.23.
155 klips_debug:pfkey_address_process: found src address.
156 klips_debug:pfkey_address_process: successful.
157 klips_debug:pfkey_msg_interp: processing ext 6 ABCDABCD with processor ABCDABCD
158 klips_debug:pfkey_address_process:
159 klips_debug:pfkey_address_process: found address family=2, AF_INET, 192.1.2.45.
160 klips_debug:pfkey_address_process: found dst address.
161 klips_debug:pfkey_address_process: tdb_said.dst set to 192.1.2.45.
162 klips_debug:pfkey_address_process: successful.
163 klips_debug:pfkey_msg_interp: processing ext 8 ABCDABCD with processor ABCDABCD
164 klips_debug:pfkey_key_process: .
165 klips_debug:pfkey_key_process: success.
166 klips_debug:pfkey_msg_interp: processing ext 9 ABCDABCD with processor ABCDABCD
167 klips_debug:pfkey_key_process: .
168 klips_debug:pfkey_key_process: success.
169 klips_debug:pfkey_msg_interp: parsing message type 3 with msg_parser ABCDABCD
170 klips_debug:pfkey_add_parse: .
171 klips_debug:pfkey_add_parse: existing Tunnel Descriptor Block not found (this is good) for SAesp0x12345678@192.1.2.45, out-bound, allocating.
172 klips_debug:pfkey_ipsec_sa_init: (pfkey defined) called for SA:esp0x12345678@192.1.2.45
173 klips_debug:pfkey_ipsec_sa_init: calling init routine of ESP_3DES_HMAC_MD5
174 klips_debug:pfkey_msg_hdr_build:
175 klips_debug:pfkey_msg_hdr_build: on_entry &pfkey_ext=ABCDABCD pfkey_ext=ABCDABCD *pfkey_ext=ABCDABCD
176 klips_debug:pfkey_msg_hdr_build: on_exit &pfkey_ext=ABCDABCD pfkey_ext=ABCDABCD *pfkey_ext=ABCDABCD
177 klips_debug:pfkey_safe_build: error=0
178 klips_debug:pfkey_safe_build:success.
179 klips_debug:pfkey_sa_build: spi=12345678 replay=0 sa_state=1 auth=2 encrypt=3 flags=0
180 klips_debug:pfkey_safe_build: error=0
181 klips_debug:pfkey_safe_build:success.
182 klips_debug:pfkey_address_build: exttype=5 proto=0 prefixlen=0
183 klips_debug:pfkey_address_build: found address family AF_INET.
184 klips_debug:pfkey_address_build: found address=192.1.2.23:0.
185 klips_debug:pfkey_address_build: successful.
186 klips_debug:pfkey_safe_build: error=0
187 klips_debug:pfkey_safe_build:success.
188 klips_debug:pfkey_address_build: exttype=6 proto=0 prefixlen=0
189 klips_debug:pfkey_address_build: found address family AF_INET.
190 klips_debug:pfkey_address_build: found address=192.1.2.45:0.
191 klips_debug:pfkey_address_build: successful.
192 klips_debug:pfkey_safe_build: error=0
193 klips_debug:pfkey_safe_build:success.
194 klips_debug:pfkey_msg_build: pfkey_msg=ABCDABCD allocated 80 bytes, &(extensions[0])=ABCDABCD
195 klips_debug:pfkey_msg_build: copying 16 bytes from extensions[1]=ABCDABCD to=ABCDABCD
196 klips_debug:pfkey_msg_build: copying 24 bytes from extensions[5]=ABCDABCD to=ABCDABCD
197 klips_debug:pfkey_msg_build: copying 24 bytes from extensions[6]=ABCDABCD to=ABCDABCD
198 klips_debug:pfkey_msg_build: extensions permitted=00001c7b, seen=00000063, required=00000063.
199 klips_debug:pfkey_upmsg: allocating 80 bytes...
200 klips_debug:pfkey_upmsg: ...allocated at ABCDABCD
201 klips_debug:pfkey_add_parse: sending up add reply message for satype=3(ESP) to socket=ABCDABCD succeeded.
202 klips_debug:pfkey_add_parse: successful for SA: esp0x12345678@192.1.2.45
203 klips_debug:pfkey_release: sock=ABCDABCD sk=ABCDABCD
204 klips_debug:pfkey_destroy_socket: STUFF
205 klips_debug:pfkey_remove_socket: .
206 klips_debug:pfkey_remove_socket: succeeded.
207 klips_debug:pfkey_destroy_socket: STUFF
208 klips_debug:pfkey_destroy_socket: STUFF
209 klips_debug:pfkey_destroy_socket: STUFF
210 klips_debug:pfkey_destroy_socket: STUFF
211 klips_debug:pfkey_destroy_socket: STUFF
212 klips_debug:pfkey_destroy_socket: STUFF
213 klips_debug:pfkey_list_remove_socket: removing sock=ABCDABCD
214 klips_debug:pfkey_list_remove_socket: removing sock=ABCDABCD
215 klips_debug:pfkey_list_remove_socket: removing sock=ABCDABCD
216 klips_debug:pfkey_list_remove_socket: removing sock=ABCDABCD
217 klips_debug:pfkey_list_remove_socket: removing sock=ABCDABCD
218 klips_debug:pfkey_list_remove_socket: removing sock=ABCDABCD
219 klips_debug:pfkey_list_remove_socket: removing sock=ABCDABCD
220 klips_debug:pfkey_list_remove_socket: removing sock=ABCDABCD
221 klips_debug:pfkey_list_remove_socket: removing sock=ABCDABCD
222 klips_debug:pfkey_list_remove_socket: removing sock=ABCDABCD
223 klips_debug:pfkey_list_remove_socket: removing sock=ABCDABCD
224 klips_debug:pfkey_list_remove_socket: removing sock=ABCDABCD
225 klips_debug:pfkey_list_remove_socket: removing sock=ABCDABCD
226 klips_debug:pfkey_release: succeeded.
227 east:~# ipsec spi --af inet --edst 192.1.2.45 --spi 0x12345678 --proto tun --src 192.1.2.23 --dst 192.1.2.45 --ip4
228 klips_debug:pfkey_create: sock=ABCDABCD type:3 state:1 flags:0 protocol:2
229 klips_debug:pfkey_create: sock->fasync_list=00000000 sk->sleep=ABCDABCD
230 klips_debug:pfkey_insert_socket: sk=ABCDABCD
231 klips_debug:pfkey_list_insert_socket: socketp=ABCDABCD
232 klips_debug:pfkey_create: Socket sock=ABCDABCD sk=ABCDABCD initialised.
233 klips_debug:pfkey_sendmsg: .
234 klips_debug:pfkey_sendmsg: msg sent for parsing.
235 klips_debug:pfkey_msg_interp: parsing message ver=2, type=3, errno=0, satype=9(IPIP), len=10, res=0, seq=1, pid=987.
236 klips_debug:pfkey_alloc_ipsec_sa: allocated tdb struct=ABDCABCD
237 klips_debug:pfkey_msg_interp: allocated extr->tdb=ABCDABCD
238 klips_debug:pfkey_msg_interp: satype 9 lookups to proto=4.
239 klips_debug:pfkey_msg_interp: processing ext 1 ABCDABCD with processor ABCDABCD
240 klips_debug:pfkey_sa_process: .
241 klips_debug:pfkey_msg_interp: processing ext 5 ABCDABCD with processor ABCDABCD
242 klips_debug:pfkey_address_process:
243 klips_debug:pfkey_address_process: found address family=2, AF_INET, 192.1.2.23.
244 klips_debug:pfkey_address_process: found src address.
245 klips_debug:pfkey_address_process: successful.
246 klips_debug:pfkey_msg_interp: processing ext 6 ABCDABCD with processor ABCDABCD
247 klips_debug:pfkey_address_process:
248 klips_debug:pfkey_address_process: found address family=2, AF_INET, 192.1.2.45.
249 klips_debug:pfkey_address_process: found dst address.
250 klips_debug:pfkey_address_process: tdb_said.dst set to 192.1.2.45.
251 klips_debug:pfkey_address_process: successful.
252 klips_debug:pfkey_msg_interp: parsing message type 3 with msg_parser ABCDABCD
253 klips_debug:pfkey_add_parse: .
254 klips_debug:pfkey_add_parse: existing Tunnel Descriptor Block not found (this is good) for SAtun0x12345678@192.1.2.45, out-bound, allocating.
255 klips_debug:pfkey_ipsec_sa_init: (pfkey defined) called for SA:tun0x12345678@192.1.2.45
256 klips_debug:pfkey_ipsec_sa_init: calling init routine of IPIP
257 klips_debug:pfkey_ipsec_sa_init: (pfkey defined) IPIP tdb set for 192.1.2.23->192.1.2.45.
258 klips_debug:pfkey_msg_hdr_build:
259 klips_debug:pfkey_msg_hdr_build: on_entry &pfkey_ext=ABCDABCD pfkey_ext=ABCDABCD *pfkey_ext=ABCDABCD
260 klips_debug:pfkey_msg_hdr_build: on_exit &pfkey_ext=ABCDABCD pfkey_ext=ABCDABCD *pfkey_ext=ABCDABCD
261 klips_debug:pfkey_safe_build: error=0
262 klips_debug:pfkey_safe_build:success.
263 klips_debug:pfkey_sa_build: spi=12345678 replay=0 sa_state=1 auth=0 encrypt=0 flags=0
264 klips_debug:pfkey_safe_build: error=0
265 klips_debug:pfkey_safe_build:success.
266 klips_debug:pfkey_address_build: exttype=5 proto=0 prefixlen=0
267 klips_debug:pfkey_address_build: found address family AF_INET.
268 klips_debug:pfkey_address_build: found address=192.1.2.23:0.
269 klips_debug:pfkey_address_build: successful.
270 klips_debug:pfkey_safe_build: error=0
271 klips_debug:pfkey_safe_build:success.
272 klips_debug:pfkey_address_build: exttype=6 proto=0 prefixlen=0
273 klips_debug:pfkey_address_build: found address family AF_INET.
274 klips_debug:pfkey_address_build: found address=192.1.2.45:0.
275 klips_debug:pfkey_address_build: successful.
276 klips_debug:pfkey_safe_build: error=0
277 klips_debug:pfkey_safe_build:success.
278 klips_debug:pfkey_msg_build: pfkey_msg=ABCDABCD allocated 80 bytes, &(extensions[0])=ABCDABCD
279 klips_debug:pfkey_msg_build: copying 16 bytes from extensions[1]=ABCDABCD to=ABCDABCD
280 klips_debug:pfkey_msg_build: copying 24 bytes from extensions[5]=ABCDABCD to=ABCDABCD
281 klips_debug:pfkey_msg_build: copying 24 bytes from extensions[6]=ABCDABCD to=ABCDABCD
282 klips_debug:pfkey_msg_build: extensions permitted=00001c7b, seen=00000063, required=00000063.
283 klips_debug:pfkey_upmsg: allocating 80 bytes...
284 klips_debug:pfkey_upmsg: ...allocated at ABCDABCD
285 klips_debug:pfkey_add_parse: sending up add reply message for satype=9(IPIP) to socket=ABCDABCD succeeded.
286 klips_debug:pfkey_add_parse: successful for SA: tun0x12345678@192.1.2.45
287 klips_debug:pfkey_release: sock=ABCDABCD sk=ABCDABCD
288 klips_debug:pfkey_destroy_socket: STUFF
289 klips_debug:pfkey_remove_socket: .
290 klips_debug:pfkey_remove_socket: succeeded.
291 klips_debug:pfkey_destroy_socket: STUFF
292 klips_debug:pfkey_destroy_socket: STUFF
293 klips_debug:pfkey_destroy_socket: STUFF
294 klips_debug:pfkey_destroy_socket: STUFF
295 klips_debug:pfkey_destroy_socket: STUFF
296 klips_debug:pfkey_destroy_socket: STUFF
297 klips_debug:pfkey_list_remove_socket: removing sock=ABCDABCD
298 klips_debug:pfkey_list_remove_socket: removing sock=ABCDABCD
299 klips_debug:pfkey_list_remove_socket: removing sock=ABCDABCD
300 klips_debug:pfkey_list_remove_socket: removing sock=ABCDABCD
301 klips_debug:pfkey_list_remove_socket: removing sock=ABCDABCD
302 klips_debug:pfkey_list_remove_socket: removing sock=ABCDABCD
303 klips_debug:pfkey_list_remove_socket: removing sock=ABCDABCD
304 klips_debug:pfkey_list_remove_socket: removing sock=ABCDABCD
305 klips_debug:pfkey_list_remove_socket: removing sock=ABCDABCD
306 klips_debug:pfkey_list_remove_socket: removing sock=ABCDABCD
307 klips_debug:pfkey_list_remove_socket: removing sock=ABCDABCD
308 klips_debug:pfkey_list_remove_socket: removing sock=ABCDABCD
309 klips_debug:pfkey_list_remove_socket: removing sock=ABCDABCD
310 klips_debug:pfkey_release: succeeded.
311 east:~# ipsec spigrp inet 192.1.2.45 0x12345678 tun inet 192.1.2.45 0x12345678 e sp
312 klips_debug:pfkey_create: sock=ABCDABCD type:3 state:1 flags:0 protocol:2
313 klips_debug:pfkey_create: sock->fasync_list=00000000 sk->sleep=ABCDABCD
314 klips_debug:pfkey_insert_socket: sk=ABCDABCD
315 klips_debug:pfkey_list_insert_socket: socketp=ABCDABCD
316 klips_debug:pfkey_create: Socket sock=ABCDABCD sk=ABCDABCD initialised.
317 klips_debug:pfkey_sendmsg: .
318 klips_debug:pfkey_sendmsg: msg sent for parsing.
319 klips_debug:pfkey_msg_interp: parsing message ver=2, type=13, errno=0, satype=9(IPIP), len=13, res=0, seq=1, pid=987.
320 klips_debug:pfkey_alloc_ipsec_sa: allocated tdb struct=ABDCABCD
321 klips_debug:pfkey_msg_interp: allocated extr->tdb=ABCDABCD
322 klips_debug:pfkey_msg_interp: satype 9 lookups to proto=4.
323 klips_debug:pfkey_msg_interp: processing ext 1 ABCDABCD with processor ABCDABCD
324 klips_debug:pfkey_sa_process: .
325 klips_debug:pfkey_msg_interp: processing ext 6 ABCDABCD with processor ABCDABCD
326 klips_debug:pfkey_address_process:
327 klips_debug:pfkey_address_process: found address family=2, AF_INET, 192.1.2.45.
328 klips_debug:pfkey_address_process: found dst address.
329 klips_debug:pfkey_address_process: tdb_said.dst set to 192.1.2.45.
330 klips_debug:pfkey_address_process: successful.
331 klips_debug:pfkey_msg_interp: processing ext 18 ABCDABCD with processor ABCDABCD
332 klips_debug:pfkey_x_satype_process: .
333 klips_debug:pfkey_alloc_ipsec_sa: allocated tdb struct=ABDCABCD
334 klips_debug:pfkey_x_satype_process: protocol==50 decoded from satype==3(ESP).
335 klips_debug:pfkey_msg_interp: processing ext 19 ABCDABCD with processor ABCDABCD
336 klips_debug:pfkey_sa_process: .
337 klips_debug:pfkey_alloc_ipsec_sa: tdb struct already allocated
338 klips_debug:pfkey_msg_interp: processing ext 20 ABCDABCD with processor ABCDABCD
339 klips_debug:pfkey_address_process:
340 klips_debug:pfkey_address_process: found address family=2, AF_INET, 192.1.2.45.
341 klips_debug:pfkey_address_process: found 2nd dst address.
342 klips_debug:pfkey_alloc_ipsec_sa: tdb struct already allocated
343 klips_debug:pfkey_address_process: tdb_said.dst set to 192.1.2.45.
344 klips_debug:pfkey_address_process: successful.
345 klips_debug:pfkey_msg_interp: parsing message type 13 with msg_parser ABCDABCD
346 klips_debug:pfkey_x_grpsa_parse: .
347 klips_debug:pfkey_msg_hdr_build:
348 klips_debug:pfkey_msg_hdr_build: on_entry &pfkey_ext=ABCDABCD pfkey_ext=ABCDABCD *pfkey_ext=ABCDABCD
349 klips_debug:pfkey_msg_hdr_build: on_exit &pfkey_ext=ABCDABCD pfkey_ext=ABCDABCD *pfkey_ext=ABCDABCD
350 klips_debug:pfkey_safe_build: error=0
351 klips_debug:pfkey_safe_build:success.
352 klips_debug:pfkey_sa_build: spi=12345678 replay=0 sa_state=0 auth=0 encrypt=0 flags=0
353 klips_debug:pfkey_safe_build: error=0
354 klips_debug:pfkey_safe_build:success.
355 klips_debug:pfkey_address_build: exttype=6 proto=0 prefixlen=0
356 klips_debug:pfkey_address_build: found address family AF_INET.
357 klips_debug:pfkey_address_build: found address=192.1.2.45:0.
358 klips_debug:pfkey_address_build: successful.
359 klips_debug:pfkey_safe_build: error=0
360 klips_debug:pfkey_safe_build:success.
361 klips_debug:pfkey_x_satype_build:
362 klips_debug:pfkey_safe_build: error=0
363 klips_debug:pfkey_safe_build:success.
364 klips_debug:pfkey_sa_build: spi=12345678 replay=0 sa_state=0 auth=0 encrypt=0 flags=0
365 klips_debug:pfkey_safe_build: error=0
366 klips_debug:pfkey_safe_build:success.
367 klips_debug:pfkey_address_build: exttype=20 proto=0 prefixlen=0
368 klips_debug:pfkey_address_build: found address family AF_INET.
369 klips_debug:pfkey_address_build: found address=192.1.2.45:0.
370 klips_debug:pfkey_address_build: successful.
371 klips_debug:pfkey_safe_build: error=0
372 klips_debug:pfkey_safe_build:success.
373 klips_debug:pfkey_msg_build: pfkey_msg=ABCDABCD allocated 104 bytes, &(extensions[0])=ABCDABCD
374 klips_debug:pfkey_msg_build: copying 16 bytes from extensions[1]=ABCDABCD to=ABCDABCD
375 klips_debug:pfkey_msg_build: copying 24 bytes from extensions[6]=ABCDABCD to=ABCDABCD
376 klips_debug:pfkey_msg_build: copying 8 bytes from extensions[18]=ABCDABCD to=ABCDABCD
377 klips_debug:pfkey_msg_build: copying 16 bytes from extensions[19]=ABCDABCD to=ABCDABCD
378 klips_debug:pfkey_msg_build: copying 24 bytes from extensions[20]=ABCDABCD to=ABCDABCD
379 klips_debug:pfkey_msg_build: extensions permitted=001c0043, seen=001c0043, required=00000043.
380 klips_debug:pfkey_upmsg: allocating 104 bytes...
381 klips_debug:pfkey_upmsg: ...allocated at ABCDABCD
382 klips_debug:pfkey_x_grpsa_parse: sending up x_grpsa reply message for satype=9(IPIP) to socket=ABCDABCD succeeded.
383 klips_debug:pfkey_x_grpsa_parse: succeeded in sending x_grpsa reply message.
384 klips_debug:pfkey_release: sock=ABCDABCD sk=ABCDABCD
385 klips_debug:pfkey_destroy_socket: STUFF
386 klips_debug:pfkey_remove_socket: .
387 klips_debug:pfkey_remove_socket: succeeded.
388 klips_debug:pfkey_destroy_socket: STUFF
389 klips_debug:pfkey_destroy_socket: STUFF
390 klips_debug:pfkey_destroy_socket: STUFF
391 klips_debug:pfkey_destroy_socket: STUFF
392 klips_debug:pfkey_destroy_socket: STUFF
393 klips_debug:pfkey_destroy_socket: STUFF
394 klips_debug:pfkey_list_remove_socket: removing sock=ABCDABCD
395 klips_debug:pfkey_list_remove_socket: removing sock=ABCDABCD
396 klips_debug:pfkey_list_remove_socket: removing sock=ABCDABCD
397 klips_debug:pfkey_list_remove_socket: removing sock=ABCDABCD
398 klips_debug:pfkey_list_remove_socket: removing sock=ABCDABCD
399 klips_debug:pfkey_list_remove_socket: removing sock=ABCDABCD
400 klips_debug:pfkey_list_remove_socket: removing sock=ABCDABCD
401 klips_debug:pfkey_list_remove_socket: removing sock=ABCDABCD
402 klips_debug:pfkey_list_remove_socket: removing sock=ABCDABCD
403 klips_debug:pfkey_list_remove_socket: removing sock=ABCDABCD
404 klips_debug:pfkey_list_remove_socket: removing sock=ABCDABCD
405 klips_debug:pfkey_list_remove_socket: removing sock=ABCDABCD
406 klips_debug:pfkey_list_remove_socket: removing sock=ABCDABCD
407 klips_debug:pfkey_release: succeeded.
408 east:~# ipsec eroute --add --eraf inet --src 192.0.2.0/24 --dst 192.0.1.0/24 --s aid tun0x12345678@192.1.2.45
409 klips_debug:pfkey_create: sock=ABCDABCD type:3 state:1 flags:0 protocol:2
410 klips_debug:pfkey_create: sock->fasync_list=00000000 sk->sleep=ABCDABCD
411 klips_debug:pfkey_insert_socket: sk=ABCDABCD
412 klips_debug:pfkey_list_insert_socket: socketp=ABCDABCD
413 klips_debug:pfkey_create: Socket sock=ABCDABCD sk=ABCDABCD initialised.
414 klips_debug:pfkey_sendmsg: .
415 klips_debug:pfkey_sendmsg: msg sent for parsing.
416 klips_debug:pfkey_msg_interp: parsing message ver=2, type=14, errno=0, satype=9(IPIP), len=22, res=0, seq=1, pid=987.
417 klips_debug:pfkey_alloc_ipsec_sa: allocated tdb struct=ABDCABCD
418 klips_debug:pfkey_msg_interp: allocated extr->tdb=ABCDABCD
419 klips_debug:pfkey_msg_interp: satype 9 lookups to proto=4.
420 klips_debug:pfkey_msg_interp: processing ext 1 ABCDABCD with processor ABCDABCD
421 klips_debug:pfkey_sa_process: .
422 klips_debug:pfkey_msg_interp: processing ext 5 ABCDABCD with processor ABCDABCD
423 klips_debug:pfkey_address_process:
424 klips_debug:pfkey_address_process: found address family=2, AF_INET, 0.0.0.0.
425 klips_debug:pfkey_address_process: found src address.
426 klips_debug:pfkey_address_process: successful.
427 klips_debug:pfkey_msg_interp: processing ext 6 ABCDABCD with processor ABCDABCD
428 klips_debug:pfkey_address_process:
429 klips_debug:pfkey_address_process: found address family=2, AF_INET, 192.1.2.45.
430 klips_debug:pfkey_address_process: found dst address.
431 klips_debug:pfkey_address_process: tdb_said.dst set to 192.1.2.45.
432 klips_debug:pfkey_address_process: successful.
433 klips_debug:pfkey_msg_interp: processing ext 21 ABCDABCD with processor ABCDABCD
434 klips_debug:pfkey_address_process:
435 klips_debug:pfkey_address_process: found address family=2, AF_INET, 192.0.2.0.
436 klips_debug:pfkey_address_process: found src flow address.
437 klips_debug:pfkey_alloc_eroute: allocated eroute struct=ABCDABCD
438 klips_debug:pfkey_address_parse: extr->eroute set to 192.0.2.0/0->0.0.0.0/0
439 klips_debug:pfkey_address_process: successful.
440 klips_debug:pfkey_msg_interp: processing ext 22 ABCDABCD with processor ABCDABCD
441 klips_debug:pfkey_address_process:
442 klips_debug:pfkey_address_process: found address family=2, AF_INET, 192.0.1.0.
443 klips_debug:pfkey_address_process: found dst flow address.
444 klips_debug:pfkey_alloc_eroute: eroute struct already allocated
445 klips_debug:pfkey_address_parse: extr->eroute set to 192.0.2.0/0->192.0.1.0/0
446 klips_debug:pfkey_address_process: successful.
447 klips_debug:pfkey_msg_interp: processing ext 23 ABCDABCD with processor ABCDABCD
448 klips_debug:pfkey_address_process:
449 klips_debug:pfkey_address_process: found address family=2, AF_INET, 255.255.255.0.
450 klips_debug:pfkey_address_process: found src mask address.
451 klips_debug:pfkey_alloc_eroute: eroute struct already allocated
452 klips_debug:pfkey_address_parse: extr->eroute set to 192.0.2.0/24->192.0.1.0/0
453 klips_debug:pfkey_address_process: successful.
454 klips_debug:pfkey_msg_interp: processing ext 24 ABCDABCD with processor ABCDABCD
455 klips_debug:pfkey_address_process:
456 klips_debug:pfkey_address_process: found address family=2, AF_INET, 255.255.255.0.
457 klips_debug:pfkey_address_process: found dst mask address.
458 klips_debug:pfkey_alloc_eroute: eroute struct already allocated
459 klips_debug:pfkey_address_parse: extr->eroute set to 192.0.2.0/24->192.0.1.0/24
460 klips_debug:pfkey_address_process: successful.
461 klips_debug:pfkey_msg_interp: parsing message type 14 with msg_parser ABCDABCD
462 klips_debug:pfkey_x_addflow_parse: .
463 klips_debug:pfkey_x_addflow_parse: calling breakeroute and/or makeroute for 192.0.2.0/24->192.0.1.0/24
464 klips_debug:pfkey_x_addflow_parse: calling makeroute.
465 klips_debug:pfkey_x_addflow_parse: makeroute call successful.
466 klips_debug:pfkey_msg_hdr_build:
467 klips_debug:pfkey_msg_hdr_build: on_entry &pfkey_ext=ABCDABCD pfkey_ext=ABCDABCD *pfkey_ext=ABCDABCD
468 klips_debug:pfkey_msg_hdr_build: on_exit &pfkey_ext=ABCDABCD pfkey_ext=ABCDABCD *pfkey_ext=ABCDABCD
469 klips_debug:pfkey_safe_build: error=0
470 klips_debug:pfkey_safe_build:success.
471 klips_debug:pfkey_sa_build: spi=12345678 replay=0 sa_state=0 auth=0 encrypt=0 flags=0
472 klips_debug:pfkey_safe_build: error=0
473 klips_debug:pfkey_safe_build:success.
474 klips_debug:pfkey_address_build: exttype=5 proto=0 prefixlen=0
475 klips_debug:pfkey_address_build: found address family AF_INET.
476 klips_debug:pfkey_address_build: found address=0.0.0.0:0.
477 klips_debug:pfkey_address_build: successful.
478 klips_debug:pfkey_safe_build: error=0
479 klips_debug:pfkey_safe_build:success.
480 klips_debug:pfkey_address_build: exttype=6 proto=0 prefixlen=0
481 klips_debug:pfkey_address_build: found address family AF_INET.
482 klips_debug:pfkey_address_build: found address=192.1.2.45:0.
483 klips_debug:pfkey_address_build: successful.
484 klips_debug:pfkey_safe_build: error=0
485 klips_debug:pfkey_safe_build:success.
486 klips_debug:pfkey_address_build: exttype=21 proto=0 prefixlen=0
487 klips_debug:pfkey_address_build: found address family AF_INET.
488 klips_debug:pfkey_address_build: found address=192.0.2.0:0.
489 klips_debug:pfkey_address_build: successful.
490 klips_debug:pfkey_safe_build: error=0
491 klips_debug:pfkey_safe_build:success.
492 klips_debug:pfkey_address_build: exttype=22 proto=0 prefixlen=0
493 klips_debug:pfkey_address_build: found address family AF_INET.
494 klips_debug:pfkey_address_build: found address=192.0.1.0:0.
495 klips_debug:pfkey_address_build: successful.
496 klips_debug:pfkey_safe_build: error=0
497 klips_debug:pfkey_safe_build:success.
498 klips_debug:pfkey_address_build: exttype=23 proto=0 prefixlen=0
499 klips_debug:pfkey_address_build: found address family AF_INET.
500 klips_debug:pfkey_address_build: found address=255.255.255.0:0.
501 klips_debug:pfkey_address_build: successful.
502 klips_debug:pfkey_safe_build: error=0
503 klips_debug:pfkey_safe_build:success.
504 klips_debug:pfkey_address_build: exttype=24 proto=0 prefixlen=0
505 klips_debug:pfkey_address_build: found address family AF_INET.
506 klips_debug:pfkey_address_build: found address=255.255.255.0:0.
507 klips_debug:pfkey_address_build: successful.
508 klips_debug:pfkey_safe_build: error=0
509 klips_debug:pfkey_safe_build:success.
510 klips_debug:pfkey_msg_build: pfkey_msg=ABCDABCD allocated 176 bytes, &(extensions[0])=ABCDABCD
511 klips_debug:pfkey_msg_build: copying 16 bytes from extensions[1]=ABCDABCD to=ABCDABCD
512 klips_debug:pfkey_msg_build: copying 24 bytes from extensions[5]=ABCDABCD to=ABCDABCD
513 klips_debug:pfkey_msg_build: copying 24 bytes from extensions[6]=ABCDABCD to=ABCDABCD
514 klips_debug:pfkey_msg_build: copying 24 bytes from extensions[21]=ABCDABCD to=ABCDABCD
515 klips_debug:pfkey_msg_build: copying 24 bytes from extensions[22]=ABCDABCD to=ABCDABCD
516 klips_debug:pfkey_msg_build: copying 24 bytes from extensions[23]=ABCDABCD to=ABCDABCD
517 klips_debug:pfkey_msg_build: copying 24 bytes from extensions[24]=ABCDABCD to=ABCDABCD
518 klips_debug:pfkey_msg_build: extensions permitted=01e00063, seen=01e00063, required=01e00043.
519 klips_debug:pfkey_upmsg: allocating 176 bytes...
520 klips_debug:pfkey_upmsg: ...allocated at ABCDABCD
521 klips_debug:pfkey_x_addflow_parse: sending up x_addflow reply message for satype=9(IPIP) (proto=4) to socket=ABCDABCD succeeded.
522 klips_debug:pfkey_x_addflow_parse: extr->tdb cleaned up and freed.
523 klips_debug:pfkey_release: sock=ABCDABCD sk=ABCDABCD
524 klips_debug:pfkey_destroy_socket: STUFF
525 klips_debug:pfkey_remove_socket: .
526 klips_debug:pfkey_remove_socket: succeeded.
527 klips_debug:pfkey_destroy_socket: STUFF
528 klips_debug:pfkey_destroy_socket: STUFF
529 klips_debug:pfkey_destroy_socket: STUFF
530 klips_debug:pfkey_destroy_socket: STUFF
531 klips_debug:pfkey_destroy_socket: STUFF
532 klips_debug:pfkey_destroy_socket: STUFF
533 klips_debug:pfkey_list_remove_socket: removing sock=ABCDABCD
534 klips_debug:pfkey_list_remove_socket: removing sock=ABCDABCD
535 klips_debug:pfkey_list_remove_socket: removing sock=ABCDABCD
536 klips_debug:pfkey_list_remove_socket: removing sock=ABCDABCD
537 klips_debug:pfkey_list_remove_socket: removing sock=ABCDABCD
538 klips_debug:pfkey_list_remove_socket: removing sock=ABCDABCD
539 klips_debug:pfkey_list_remove_socket: removing sock=ABCDABCD
540 klips_debug:pfkey_list_remove_socket: removing sock=ABCDABCD
541 klips_debug:pfkey_list_remove_socket: removing sock=ABCDABCD
542 klips_debug:pfkey_list_remove_socket: removing sock=ABCDABCD
543 klips_debug:pfkey_list_remove_socket: removing sock=ABCDABCD
544 klips_debug:pfkey_list_remove_socket: removing sock=ABCDABCD
545 klips_debug:pfkey_list_remove_socket: removing sock=ABCDABCD
546 klips_debug:pfkey_release: succeeded.
547 east:~# ipsec tncfg --attach --virtual ipsec0 --physical eth1
548 east:~# ifconfig ipsec0 inet 192.1.2.23 netmask 0xffffff00 broadcast 192.1.2.255 up
549 east:~# arp -s 192.1.2.45 10:00:00:64:64:45
550 east:~# arp -s 192.1.2.254 10:00:00:64:64:45
553 192.0.2.0/24 -> 192.0.1.0/24 => tun0x12345678@192.1.2.45 esp0x12345678@192.1.2.45 (0)
554 ipsec0->eth1 mtu=16260(1500)->1500
555 esp0x12345678@192.1.2.45 ESP_3DES_HMAC_MD5: dir=out src=192.1.2.23 iv_bits=64bits iv=0xABCDABCDABCDABCD alen=128 aklen=128 eklen=192 life(c,s,h)=
556 tun0x12345678@192.1.2.45 IPIP: dir=out src=192.1.2.23 life(c,s,h)=
557 Destination Gateway Genmask Flags MSS Window irtt Iface
558 east:~# route add -host 192.0.1.1 gw 192.1.2.45 dev ipsec0
559 east:~# nbd: module cleaned up.