2010:01:05-19:17:22 (none) pluto[4445]: | next event EVENT_REINIT_SECRET in 3598 seconds
2010:01:05-19:25:17 acenn ipsec_starter[4442]: Pluto has changed
2010:01:05-19:25:17 acenn pluto[4445]: | 
2010:01:05-19:25:17 acenn pluto[4445]: | *received whack message
2010:01:05-19:25:17 acenn pluto[4445]: shutting down
2010:01:05-19:25:17 acenn pluto[4445]: forgetting secrets
2010:01:05-19:25:17 acenn pluto[4445]: "D_REF_zfmTEQwktH_1": deleting connection
2010:01:05-19:25:17 acenn pluto[4445]: "D_REF_zfmTEQwktH_0": deleting connection
2010:01:05-19:25:17 acenn pluto[4445]: "S_REF_HuOgVAQLsd_1": deleting connection
2010:01:05-19:25:17 acenn pluto[4445]: "S_REF_HuOgVAQLsd_0": deleting connection
2010:01:05-19:25:17 acenn pluto[4445]: "S_REF_qCtYiwToAT_0": deleting connection
2010:01:05-19:25:17 acenn pluto[4445]: shutting down interface lo/lo ::1
2010:01:05-19:25:17 acenn pluto[4445]: shutting down interface lo/lo 127.0.0.1
2010:01:05-19:25:17 acenn pluto[4445]: shutting down interface lo/lo 127.0.0.1
2010:01:05-19:25:17 acenn pluto[4445]: shutting down interface eth0/eth0 192.168.2.100
2010:01:05-19:25:17 acenn pluto[4445]: shutting down interface eth0/eth0 192.168.2.100
2010:01:05-19:25:17 acenn pluto[4445]: shutting down interface eth0/eth0 192.168.1.15
2010:01:05-19:25:17 acenn pluto[4445]: shutting down interface eth0/eth0 192.168.1.15
2010:01:05-19:25:17 acenn pluto[4445]: shutting down interface eth0/eth0 192.168.1.10
2010:01:05-19:25:17 acenn pluto[4445]: shutting down interface eth0/eth0 192.168.1.10
2010:01:05-19:25:17 acenn pluto[4445]: shutting down interface eth1/eth1 192.168.1.125
2010:01:05-19:25:17 acenn pluto[4445]: shutting down interface eth1/eth1 192.168.1.125
2010:01:05-19:25:17 acenn pluto[4445]: | xauth module unloaded
2010:01:05-19:25:17 acenn ipsec_starter[4442]: pluto stopped after 20 ms
2010:01:05-19:25:17 acenn pluto[7169]: Starting IKEv1 pluto daemon (strongSwan 4.3.5) THREADS VENDORID CISCO_QUIRKS
2010:01:05-19:25:17 acenn pluto[7169]: | plugin 'curl': loaded successfully
2010:01:05-19:25:17 acenn pluto[7169]: | plugin 'ldap': loaded successfully
2010:01:05-19:25:17 acenn pluto[7169]: | plugin 'aes': loaded successfully
2010:01:05-19:25:17 acenn pluto[7169]: | plugin 'des': loaded successfully
2010:01:05-19:25:17 acenn pluto[7169]: | plugin 'blowfish': loaded successfully
2010:01:05-19:25:17 acenn pluto[7169]: | plugin 'sha1': loaded successfully
2010:01:05-19:25:17 acenn pluto[7169]: | plugin 'sha2': loaded successfully
2010:01:05-19:25:17 acenn pluto[7169]: | plugin 'md5': loaded successfully
2010:01:05-19:25:17 acenn pluto[7169]: | plugin 'random': loaded successfully
2010:01:05-19:25:17 acenn pluto[7169]: | plugin 'x509': loaded successfully
2010:01:05-19:25:17 acenn pluto[7169]: | plugin 'pubkey': loaded successfully
2010:01:05-19:25:17 acenn pluto[7169]: | plugin 'pkcs1': loaded successfully
2010:01:05-19:25:17 acenn pluto[7169]: | plugin 'pgp': loaded successfully
2010:01:05-19:25:17 acenn pluto[7169]: | plugin 'dnskey': loaded successfully
2010:01:05-19:25:17 acenn pluto[7169]: | plugin 'pem': loaded successfully
2010:01:05-19:25:17 acenn pluto[7169]: | plugin 'hmac': loaded successfully
2010:01:05-19:25:17 acenn pluto[7169]: | plugin 'gmp': loaded successfully
2010:01:05-19:25:17 acenn pluto[7169]: loaded plugins: curl ldap aes des blowfish sha1 sha2 md5 random x509 pubkey pkcs1 pgp dnskey pem hmac gmp 
2010:01:05-19:25:17 acenn pluto[7169]: | inserting event EVENT_REINIT_SECRET, timeout in 3600 seconds
2010:01:05-19:25:17 acenn pluto[7169]:   including NAT-Traversal patch (Version 0.6c)
2010:01:05-19:25:17 acenn pluto[7169]: | xauth module '/usr/libexec/ipsec/xauth_aua.so' loading'
2010:01:05-19:25:17 acenn pluto[7169]: | xauth module: found verify_secret() function
2010:01:05-19:25:17 acenn pluto[7169]: | xauth module: using default get_secret() function
2010:01:05-19:25:17 acenn pluto[7169]: Using Linux 2.6 IPsec interface code
2010:01:05-19:25:17 acenn ipsec_starter[4442]: pluto (7169) started after 20 ms
2010:01:05-19:25:18 acenn pluto[7169]: loading ca certificates from '/etc/ipsec.d/cacerts'
2010:01:05-19:25:18 acenn pluto[7169]: |   file content is not binary ASN.1
2010:01:05-19:25:18 acenn pluto[7169]: |   -----BEGIN CERTIFICATE-----
2010:01:05-19:25:18 acenn pluto[7169]: |   -----END CERTIFICATE-----
2010:01:05-19:25:18 acenn pluto[7169]: | L0 - x509:
2010:01:05-19:25:18 acenn pluto[7169]: | L1 - tbsCertificate:
2010:01:05-19:25:18 acenn pluto[7169]: | L2 - DEFAULT v1:
2010:01:05-19:25:18 acenn pluto[7169]: | L3 - version:
2010:01:05-19:25:18 acenn pluto[7169]: |   X.509v3
2010:01:05-19:25:18 acenn pluto[7169]: | L2 - serialNumber:
2010:01:05-19:25:18 acenn pluto[7169]: | L2 - signature:
2010:01:05-19:25:18 acenn pluto[7169]: | L3 - algorithmIdentifier:
2010:01:05-19:25:18 acenn pluto[7169]: | L4 - algorithm:
2010:01:05-19:25:18 acenn pluto[7169]: |   'md5WithRSAEncryption'
2010:01:05-19:25:18 acenn pluto[7169]: | L2 - issuer:
2010:01:05-19:25:18 acenn pluto[7169]: |   'C=in, L=pune, O=karvid, CN=karvid VPN CA, E=postmaster@karvid.com'
2010:01:05-19:25:18 acenn pluto[7169]: | L2 - validity:
2010:01:05-19:25:18 acenn pluto[7169]: | L3 - notBefore:
2010:01:05-19:25:18 acenn pluto[7169]: | L4 - utcTime:
2010:01:05-19:25:18 acenn pluto[7169]: |   'Jun 13 12:16:10 UTC 2009'
2010:01:05-19:25:18 acenn pluto[7169]: | L3 - notAfter:
2010:01:05-19:25:18 acenn pluto[7169]: | L4 - utcTime:
2010:01:05-19:25:18 acenn pluto[7169]: |   'Oct 28 12:16:10 UTC 2036'
2010:01:05-19:25:18 acenn pluto[7169]: | L2 - subject:
2010:01:05-19:25:18 acenn pluto[7169]: |   'C=in, L=pune, O=karvid, CN=karvid VPN CA, E=postmaster@karvid.com'
2010:01:05-19:25:18 acenn pluto[7169]: | L2 - subjectPublicKeyInfo:
2010:01:05-19:25:18 acenn pluto[7169]: | -- > --
2010:01:05-19:25:18 acenn pluto[7169]: | L0 - subjectPublicKeyInfo:
2010:01:05-19:25:18 acenn pluto[7169]: | L1 - algorithm:
2010:01:05-19:25:18 acenn pluto[7169]: | L2 - algorithmIdentifier:
2010:01:05-19:25:18 acenn pluto[7169]: | L3 - algorithm:
2010:01:05-19:25:18 acenn pluto[7169]: |   'rsaEncryption'
2010:01:05-19:25:18 acenn pluto[7169]: | L1 - subjectPublicKey:
2010:01:05-19:25:18 acenn pluto[7169]: | -- > --
2010:01:05-19:25:18 acenn pluto[7169]: | L0 - RSAPublicKey:
2010:01:05-19:25:18 acenn pluto[7169]: | L1 - modulus:
2010:01:05-19:25:18 acenn pluto[7169]: | L1 - publicExponent:
2010:01:05-19:25:18 acenn pluto[7169]: | -- < --
2010:01:05-19:25:18 acenn pluto[7169]: | -- < --
2010:01:05-19:25:18 acenn pluto[7169]: | L2 - optional extensions:
2010:01:05-19:25:18 acenn pluto[7169]: | L3 - extensions:
2010:01:05-19:25:18 acenn pluto[7169]: | L4 - extension:
2010:01:05-19:25:18 acenn pluto[7169]: | L5 - extnID:
2010:01:05-19:25:18 acenn pluto[7169]: |   'subjectKeyIdentifier'
2010:01:05-19:25:18 acenn pluto[7169]: | L5 - critical:
2010:01:05-19:25:18 acenn pluto[7169]: |   FALSE
2010:01:05-19:25:18 acenn pluto[7169]: | L5 - extnValue:
2010:01:05-19:25:18 acenn pluto[7169]: | L6 - keyIdentifier:
2010:01:05-19:25:18 acenn pluto[7169]: | L4 - extension:
2010:01:05-19:25:18 acenn pluto[7169]: | L5 - extnID:
2010:01:05-19:25:18 acenn pluto[7169]: |   'basicConstraints'
2010:01:05-19:25:18 acenn pluto[7169]: | L5 - critical:
2010:01:05-19:25:18 acenn pluto[7169]: |   FALSE
2010:01:05-19:25:18 acenn pluto[7169]: | L5 - extnValue:
2010:01:05-19:25:18 acenn pluto[7169]: | L6 - basicConstraints:
2010:01:05-19:25:18 acenn pluto[7169]: | L7 - CA:
2010:01:05-19:25:18 acenn pluto[7169]: |   TRUE
2010:01:05-19:25:18 acenn pluto[7169]: | L4 - extension:
2010:01:05-19:25:18 acenn pluto[7169]: | L5 - extnID:
2010:01:05-19:25:18 acenn pluto[7169]: |   'subjectAltName'
2010:01:05-19:25:18 acenn pluto[7169]: | L5 - critical:
2010:01:05-19:25:18 acenn pluto[7169]: |   FALSE
2010:01:05-19:25:18 acenn pluto[7169]: | L5 - extnValue:
2010:01:05-19:25:18 acenn pluto[7169]: | L6 - generalNames:
2010:01:05-19:25:18 acenn pluto[7169]: | L7 - generalName:
2010:01:05-19:25:18 acenn pluto[7169]: | L8 - ipAddress:
2010:01:05-19:25:18 acenn pluto[7169]: |   '127.0.0.1'
2010:01:05-19:25:18 acenn pluto[7169]: | L1 - signatureAlgorithm:
2010:01:05-19:25:18 acenn pluto[7169]: | L2 - algorithmIdentifier:
2010:01:05-19:25:18 acenn pluto[7169]: | L3 - algorithm:
2010:01:05-19:25:18 acenn pluto[7169]: |   'md5WithRSAEncryption'
2010:01:05-19:25:18 acenn pluto[7169]: | L1 - signatureValue:
2010:01:05-19:25:18 acenn pluto[7169]: | signature verification:
2010:01:05-19:25:18 acenn pluto[7169]: | L0 - digestInfo:
2010:01:05-19:25:18 acenn pluto[7169]: | L1 - digestAlgorithm:
2010:01:05-19:25:18 acenn pluto[7169]: | L2 - algorithmIdentifier:
2010:01:05-19:25:18 acenn pluto[7169]: | L3 - algorithm:
2010:01:05-19:25:18 acenn pluto[7169]: |   'md5'
2010:01:05-19:25:18 acenn pluto[7169]: | L1 - digest:
2010:01:05-19:25:18 acenn pluto[7169]:   loaded ca certificate from '/etc/ipsec.d/cacerts/REF_RwwihhYnGO.pem'
2010:01:05-19:25:18 acenn pluto[7169]: |   authcert inserted
2010:01:05-19:25:18 acenn pluto[7169]: |   file content is not binary ASN.1
2010:01:05-19:25:18 acenn pluto[7169]: |   -----BEGIN CERTIFICATE-----
2010:01:05-19:25:18 acenn pluto[7169]: |   -----END CERTIFICATE-----
2010:01:05-19:25:18 acenn pluto[7169]: | L0 - x509:
2010:01:05-19:25:18 acenn pluto[7169]: | L1 - tbsCertificate:
2010:01:05-19:25:18 acenn pluto[7169]: | L2 - DEFAULT v1:
2010:01:05-19:25:18 acenn pluto[7169]: | L3 - version:
2010:01:05-19:25:18 acenn pluto[7169]: |   X.509v3
2010:01:05-19:25:18 acenn pluto[7169]: | L2 - serialNumber:
2010:01:05-19:25:18 acenn pluto[7169]: | L2 - signature:
2010:01:05-19:25:18 acenn pluto[7169]: | L3 - algorithmIdentifier:
2010:01:05-19:25:18 acenn pluto[7169]: | L4 - algorithm:
2010:01:05-19:25:18 acenn pluto[7169]: |   'sha-1WithRSAEncryption'
2010:01:05-19:25:18 acenn pluto[7169]: | L2 - issuer:
2010:01:05-19:25:18 acenn pluto[7169]: |   'C=in, L=pune, O=cybervision, CN=cybervision VPN CA, E=thinvm@gmail.com'
2010:01:05-19:25:18 acenn pluto[7169]: | L2 - validity:
2010:01:05-19:25:18 acenn pluto[7169]: | L3 - notBefore:
2010:01:05-19:25:18 acenn pluto[7169]: | L4 - utcTime:
2010:01:05-19:25:18 acenn pluto[7169]: |   'Dec 22 16:43:12 UTC 2009'
2010:01:05-19:25:18 acenn pluto[7169]: | L3 - notAfter:
2010:01:05-19:25:18 acenn pluto[7169]: | L4 - utcTime:
2010:01:05-19:25:18 acenn pluto[7169]: |   'May 08 16:43:12 UTC 2037'
2010:01:05-19:25:18 acenn pluto[7169]: | L2 - subject:
2010:01:05-19:25:18 acenn pluto[7169]: |   'C=in, L=pune, O=cybervision, CN=cybervision VPN CA, E=thinvm@gmail.com'
2010:01:05-19:25:18 acenn pluto[7169]: | L2 - subjectPublicKeyInfo:
2010:01:05-19:25:18 acenn pluto[7169]: | -- > --
2010:01:05-19:25:18 acenn pluto[7169]: | L0 - subjectPublicKeyInfo:
2010:01:05-19:25:18 acenn pluto[7169]: | L1 - algorithm:
2010:01:05-19:25:18 acenn pluto[7169]: | L2 - algorithmIdentifier:
2010:01:05-19:25:18 acenn pluto[7169]: | L3 - algorithm:
2010:01:05-19:25:18 acenn pluto[7169]: |   'rsaEncryption'
2010:01:05-19:25:18 acenn pluto[7169]: | L1 - subjectPublicKey:
2010:01:05-19:25:18 acenn pluto[7169]: | -- > --
2010:01:05-19:25:18 acenn pluto[7169]: | L0 - RSAPublicKey:
2010:01:05-19:25:18 acenn pluto[7169]: | L1 - modulus:
2010:01:05-19:25:18 acenn pluto[7169]: | L1 - publicExponent:
2010:01:05-19:25:18 acenn pluto[7169]: | -- < --
2010:01:05-19:25:18 acenn pluto[7169]: | -- < --
2010:01:05-19:25:18 acenn pluto[7169]: | L2 - optional extensions:
2010:01:05-19:25:18 acenn pluto[7169]: | L3 - extensions:
2010:01:05-19:25:18 acenn pluto[7169]: | L4 - extension:
2010:01:05-19:25:18 acenn pluto[7169]: | L5 - extnID:
2010:01:05-19:25:18 acenn pluto[7169]: |   'subjectKeyIdentifier'
2010:01:05-19:25:18 acenn pluto[7169]: | L5 - critical:
2010:01:05-19:25:18 acenn pluto[7169]: |   FALSE
2010:01:05-19:25:18 acenn pluto[7169]: | L5 - extnValue:
2010:01:05-19:25:18 acenn pluto[7169]: | L6 - keyIdentifier:
2010:01:05-19:25:18 acenn pluto[7169]: | L4 - extension:
2010:01:05-19:25:18 acenn pluto[7169]: | L5 - extnID:
2010:01:05-19:25:18 acenn pluto[7169]: |   'basicConstraints'
2010:01:05-19:25:18 acenn pluto[7169]: | L5 - critical:
2010:01:05-19:25:18 acenn pluto[7169]: |   FALSE
2010:01:05-19:25:18 acenn pluto[7169]: | L5 - extnValue:
2010:01:05-19:25:18 acenn pluto[7169]: | L6 - basicConstraints:
2010:01:05-19:25:18 acenn pluto[7169]: | L7 - CA:
2010:01:05-19:25:18 acenn pluto[7169]: |   TRUE
2010:01:05-19:25:18 acenn pluto[7169]: | L4 - extension:
2010:01:05-19:25:18 acenn pluto[7169]: | L5 - extnID:
2010:01:05-19:25:18 acenn pluto[7169]: |   'subjectAltName'
2010:01:05-19:25:18 acenn pluto[7169]: | L5 - critical:
2010:01:05-19:25:18 acenn pluto[7169]: |   FALSE
2010:01:05-19:25:18 acenn pluto[7169]: | L5 - extnValue:
2010:01:05-19:25:18 acenn pluto[7169]: | L6 - generalNames:
2010:01:05-19:25:18 acenn pluto[7169]: | L7 - generalName:
2010:01:05-19:25:18 acenn pluto[7169]: | L8 - ipAddress:
2010:01:05-19:25:18 acenn pluto[7169]: |   '127.0.0.1'
2010:01:05-19:25:18 acenn pluto[7169]: | L1 - signatureAlgorithm:
2010:01:05-19:25:18 acenn pluto[7169]: | L2 - algorithmIdentifier:
2010:01:05-19:25:18 acenn pluto[7169]: | L3 - algorithm:
2010:01:05-19:25:18 acenn pluto[7169]: |   'sha-1WithRSAEncryption'
2010:01:05-19:25:18 acenn pluto[7169]: | L1 - signatureValue:
2010:01:05-19:25:18 acenn pluto[7169]: | signature verification:
2010:01:05-19:25:18 acenn pluto[7169]: | L0 - digestInfo:
2010:01:05-19:25:18 acenn pluto[7169]: | L1 - digestAlgorithm:
2010:01:05-19:25:18 acenn pluto[7169]: | L2 - algorithmIdentifier:
2010:01:05-19:25:18 acenn pluto[7169]: | L3 - algorithm:
2010:01:05-19:25:18 acenn pluto[7169]: |   'sha-1'
2010:01:05-19:25:18 acenn pluto[7169]: | L1 - digest:
2010:01:05-19:25:18 acenn pluto[7169]:   loaded ca certificate from '/etc/ipsec.d/cacerts/REF_ZuhEiTCsdi.pem'
2010:01:05-19:25:18 acenn pluto[7169]: |   authcert inserted
2010:01:05-19:25:18 acenn pluto[7169]: |   file content is not binary ASN.1
2010:01:05-19:25:18 acenn pluto[7169]: |   -----BEGIN CERTIFICATE-----
2010:01:05-19:25:18 acenn pluto[7169]: |   -----END CERTIFICATE-----
2010:01:05-19:25:18 acenn pluto[7169]: | L0 - x509:
2010:01:05-19:25:18 acenn pluto[7169]: | L1 - tbsCertificate:
2010:01:05-19:25:18 acenn pluto[7169]: | L2 - DEFAULT v1:
2010:01:05-19:25:18 acenn pluto[7169]: | L3 - version:
2010:01:05-19:25:18 acenn pluto[7169]: |   X.509v3
2010:01:05-19:25:18 acenn pluto[7169]: | L2 - serialNumber:
2010:01:05-19:25:18 acenn pluto[7169]: | L2 - signature:
2010:01:05-19:25:18 acenn pluto[7169]: | L3 - algorithmIdentifier:
2010:01:05-19:25:18 acenn pluto[7169]: | L4 - algorithm:
2010:01:05-19:25:18 acenn pluto[7169]: |   'sha-1WithRSAEncryption'
2010:01:05-19:25:18 acenn pluto[7169]: | L2 - issuer:
2010:01:05-19:25:18 acenn pluto[7169]: |   'C=in, L=pune, O=cybervision, CN=cybervision VPN CA, E=thinvm@gmail.com'
2010:01:05-19:25:18 acenn pluto[7169]: | L2 - validity:
2010:01:05-19:25:18 acenn pluto[7169]: | L3 - notBefore:
2010:01:05-19:25:18 acenn pluto[7169]: | L4 - utcTime:
2010:01:05-19:25:18 acenn pluto[7169]: |   'Dec 19 07:00:55 UTC 2009'
2010:01:05-19:25:18 acenn pluto[7169]: | L3 - notAfter:
2010:01:05-19:25:18 acenn pluto[7169]: | L4 - utcTime:
2010:01:05-19:25:18 acenn pluto[7169]: |   'May 05 07:00:55 UTC 2037'
2010:01:05-19:25:18 acenn pluto[7169]: | L2 - subject:
2010:01:05-19:25:18 acenn pluto[7169]: |   'C=in, L=pune, O=cybervision, CN=cybervision VPN CA, E=thinvm@gmail.com'
2010:01:05-19:25:18 acenn pluto[7169]: | L2 - subjectPublicKeyInfo:
2010:01:05-19:25:18 acenn pluto[7169]: | -- > --
2010:01:05-19:25:18 acenn pluto[7169]: | L0 - subjectPublicKeyInfo:
2010:01:05-19:25:18 acenn pluto[7169]: | L1 - algorithm:
2010:01:05-19:25:18 acenn pluto[7169]: | L2 - algorithmIdentifier:
2010:01:05-19:25:18 acenn pluto[7169]: | L3 - algorithm:
2010:01:05-19:25:18 acenn pluto[7169]: |   'rsaEncryption'
2010:01:05-19:25:18 acenn pluto[7169]: | L1 - subjectPublicKey:
2010:01:05-19:25:18 acenn pluto[7169]: | -- > --
2010:01:05-19:25:18 acenn pluto[7169]: | L0 - RSAPublicKey:
2010:01:05-19:25:18 acenn pluto[7169]: | L1 - modulus:
2010:01:05-19:25:18 acenn pluto[7169]: | L1 - publicExponent:
2010:01:05-19:25:18 acenn pluto[7169]: | -- < --
2010:01:05-19:25:18 acenn pluto[7169]: | -- < --
2010:01:05-19:25:18 acenn pluto[7169]: | L2 - optional extensions:
2010:01:05-19:25:18 acenn pluto[7169]: | L3 - extensions:
2010:01:05-19:25:18 acenn pluto[7169]: | L4 - extension:
2010:01:05-19:25:18 acenn pluto[7169]: | L5 - extnID:
2010:01:05-19:25:18 acenn pluto[7169]: |   'subjectKeyIdentifier'
2010:01:05-19:25:18 acenn pluto[7169]: | L5 - critical:
2010:01:05-19:25:18 acenn pluto[7169]: |   FALSE
2010:01:05-19:25:18 acenn pluto[7169]: | L5 - extnValue:
2010:01:05-19:25:18 acenn pluto[7169]: | L6 - keyIdentifier:
2010:01:05-19:25:18 acenn pluto[7169]: | L4 - extension:
2010:01:05-19:25:18 acenn pluto[7169]: | L5 - extnID:
2010:01:05-19:25:18 acenn pluto[7169]: |   'basicConstraints'
2010:01:05-19:25:18 acenn pluto[7169]: | L5 - critical:
2010:01:05-19:25:18 acenn pluto[7169]: |   FALSE
2010:01:05-19:25:18 acenn pluto[7169]: | L5 - extnValue:
2010:01:05-19:25:18 acenn pluto[7169]: | L6 - basicConstraints:
2010:01:05-19:25:18 acenn pluto[7169]: | L7 - CA:
2010:01:05-19:25:18 acenn pluto[7169]: |   TRUE
2010:01:05-19:25:18 acenn pluto[7169]: | L4 - extension:
2010:01:05-19:25:18 acenn pluto[7169]: | L5 - extnID:
2010:01:05-19:25:18 acenn pluto[7169]: |   'subjectAltName'
2010:01:05-19:25:18 acenn pluto[7169]: | L5 - critical:
2010:01:05-19:25:18 acenn pluto[7169]: |   FALSE
2010:01:05-19:25:18 acenn pluto[7169]: | L5 - extnValue:
2010:01:05-19:25:18 acenn pluto[7169]: | L6 - generalNames:
2010:01:05-19:25:18 acenn pluto[7169]: | L7 - generalName:
2010:01:05-19:25:18 acenn pluto[7169]: | L8 - ipAddress:
2010:01:05-19:25:18 acenn pluto[7169]: |   '127.0.0.1'
2010:01:05-19:25:18 acenn pluto[7169]: | L1 - signatureAlgorithm:
2010:01:05-19:25:18 acenn pluto[7169]: | L2 - algorithmIdentifier:
2010:01:05-19:25:18 acenn pluto[7169]: | L3 - algorithm:
2010:01:05-19:25:18 acenn pluto[7169]: |   'sha-1WithRSAEncryption'
2010:01:05-19:25:18 acenn pluto[7169]: | L1 - signatureValue:
2010:01:05-19:25:18 acenn pluto[7169]: | signature verification:
2010:01:05-19:25:18 acenn pluto[7169]: | L0 - digestInfo:
2010:01:05-19:25:18 acenn pluto[7169]: | L1 - digestAlgorithm:
2010:01:05-19:25:18 acenn pluto[7169]: | L2 - algorithmIdentifier:
2010:01:05-19:25:18 acenn pluto[7169]: | L3 - algorithm:
2010:01:05-19:25:18 acenn pluto[7169]: |   'sha-1'
2010:01:05-19:25:18 acenn pluto[7169]: | L1 - digest:
2010:01:05-19:25:18 acenn pluto[7169]:   loaded ca certificate from '/etc/ipsec.d/cacerts/REF_SSVVVgxDJa.pem'
2010:01:05-19:25:18 acenn pluto[7169]: |   authcert inserted
2010:01:05-19:25:18 acenn pluto[7169]: loading aa certificates from '/etc/ipsec.d/aacerts'
2010:01:05-19:25:18 acenn pluto[7169]: loading ocsp certificates from '/etc/ipsec.d/ocspcerts'
2010:01:05-19:25:18 acenn pluto[7169]: Changing to directory '/etc/ipsec.d/crls'
2010:01:05-19:25:18 acenn pluto[7169]: loading attribute certificates from '/etc/ipsec.d/acerts'
2010:01:05-19:25:18 acenn pluto[7169]: | inserting event EVENT_LOG_DAILY, timeout in 16482 seconds
2010:01:05-19:25:18 acenn pluto[7169]: | next event EVENT_REINIT_SECRET in 3599 seconds
2010:01:05-19:25:18 acenn pluto[7169]: | 
2010:01:05-19:25:18 acenn pluto[7169]: | *received whack message
2010:01:05-19:25:18 acenn pluto[7169]: listening for IKE messages
2010:01:05-19:25:18 acenn pluto[7169]: | found lo with address 127.0.0.1
2010:01:05-19:25:18 acenn pluto[7169]: | found eth0 with address 192.168.2.100
2010:01:05-19:25:18 acenn pluto[7169]: | found eth0 with address 192.168.1.15
2010:01:05-19:25:18 acenn pluto[7169]: | found eth0 with address 192.168.1.10
2010:01:05-19:25:18 acenn pluto[7169]: | found eth1 with address 192.168.1.125
2010:01:05-19:25:18 acenn pluto[7169]: | found tun0 with address 10.242.2.1
2010:01:05-19:25:18 acenn pluto[7169]: adding interface tun0/tun0 10.242.2.1:500
2010:01:05-19:25:18 acenn pluto[7169]: adding interface tun0/tun0 10.242.2.1:4500
2010:01:05-19:25:18 acenn pluto[7169]: adding interface eth1/eth1 192.168.1.125:500
2010:01:05-19:25:18 acenn pluto[7169]: adding interface eth1/eth1 192.168.1.125:4500
2010:01:05-19:25:18 acenn pluto[7169]: adding interface eth0/eth0 192.168.1.10:500
2010:01:05-19:25:18 acenn pluto[7169]: adding interface eth0/eth0 192.168.1.10:4500
2010:01:05-19:25:18 acenn pluto[7169]: adding interface eth0/eth0 192.168.1.15:500
2010:01:05-19:25:18 acenn pluto[7169]: adding interface eth0/eth0 192.168.1.15:4500
2010:01:05-19:25:18 acenn pluto[7169]: adding interface eth0/eth0 192.168.2.100:500
2010:01:05-19:25:18 acenn pluto[7169]: adding interface eth0/eth0 192.168.2.100:4500
2010:01:05-19:25:18 acenn pluto[7169]: adding interface lo/lo 127.0.0.1:500
2010:01:05-19:25:18 acenn pluto[7169]: adding interface lo/lo 127.0.0.1:4500
2010:01:05-19:25:18 acenn pluto[7169]: | found lo with address 0000:0000:0000:0000:0000:0000:0000:0001
2010:01:05-19:25:18 acenn pluto[7169]: adding interface lo/lo ::1:500
2010:01:05-19:25:18 acenn pluto[7169]: loading secrets from "/etc/ipsec.secrets"
2010:01:05-19:25:18 acenn pluto[7169]: |   file content is not binary ASN.1
2010:01:05-19:25:18 acenn pluto[7169]: |   -----BEGIN RSA PRIVATE KEY-----
2010:01:05-19:25:18 acenn pluto[7169]: |   -----END RSA PRIVATE KEY-----
2010:01:05-19:25:18 acenn pluto[7169]: | L0 - RSAPrivateKey:
2010:01:05-19:25:18 acenn pluto[7169]: | L1 - version:
2010:01:05-19:25:18 acenn pluto[7169]: | L1 - modulus:
2010:01:05-19:25:18 acenn pluto[7169]: | L1 - publicExponent:
2010:01:05-19:25:18 acenn pluto[7169]: | L1 - privateExponent:
2010:01:05-19:25:18 acenn pluto[7169]: | L1 - prime1:
2010:01:05-19:25:18 acenn pluto[7169]: | L1 - prime2:
2010:01:05-19:25:18 acenn pluto[7169]: | L1 - exponent1:
2010:01:05-19:25:18 acenn pluto[7169]: | L1 - exponent2:
2010:01:05-19:25:18 acenn pluto[7169]: | L1 - coefficient:
2010:01:05-19:25:18 acenn pluto[7169]:   loaded private key from 'REF_sgSKUMhcAO.pem'
2010:01:05-19:25:18 acenn pluto[7169]:   loaded shared key for %any 192.168.1.125 
2010:01:05-19:25:18 acenn pluto[7169]: | next event EVENT_REINIT_SECRET in 3599 seconds
2010:01:05-19:25:18 acenn pluto[7169]: | 
2010:01:05-19:25:18 acenn pluto[7169]: | *received whack message
2010:01:05-19:25:18 acenn pluto[7169]: | from whack: got --esp=aes256-md5
2010:01:05-19:25:18 acenn pluto[7169]: | esp proposal: AES_CBC_256/HMAC_MD5, 
2010:01:05-19:25:18 acenn pluto[7169]: | from whack: got --ike=aes256-md5-modp1536
2010:01:05-19:25:18 acenn pluto[7169]: | ike proposal: AES_CBC_256/HMAC_MD5/MODP_1536, 
2010:01:05-19:25:18 acenn pluto[7169]: added connection description "S_REF_qCtYiwToAT_0"
2010:01:05-19:25:18 acenn pluto[7169]: | 192.168.2.0/24===192.168.1.125[192.168.1.125]...%any[%any]==={0.0.0.0/0}
2010:01:05-19:25:18 acenn pluto[7169]: | ike_life: 7800s; ipsec_life: 3600s; rekey_margin: 540s; rekey_fuzz: 100%; keyingtries: 3; policy: PSK+ENCRYPT+TUNNEL
2010:01:05-19:25:18 acenn pluto[7169]: | next event EVENT_REINIT_SECRET in 3599 seconds
2010:01:05-19:25:18 acenn pluto[7169]: | 
2010:01:05-19:25:18 acenn pluto[7169]: | *received whack message
2010:01:05-19:25:18 acenn pluto[7169]: | from whack: got --esp=3des-md5
2010:01:05-19:25:18 acenn pluto[7169]: | esp proposal: 3DES_CBC/HMAC_MD5, 
2010:01:05-19:25:18 acenn pluto[7169]: | from whack: got --ike=3des-sha-modp2048
2010:01:05-19:25:18 acenn pluto[7169]: | ike proposal: 3DES_CBC/HMAC_SHA1/MODP_2048, 
2010:01:05-19:25:18 acenn pluto[7169]: added connection description "S_REF_HuOgVAQLsd_0"
2010:01:05-19:25:18 acenn pluto[7169]: | 192.168.1.125[192.168.1.125]:17/1701...%any[%any]:17/%any==={0.0.0.0/0}
2010:01:05-19:25:18 acenn pluto[7169]: | ike_life: 28800s; ipsec_life: 3600s; rekey_margin: 540s; rekey_fuzz: 100%; keyingtries: 3; policy: PSK+ENCRYPT+DONTREKEY
2010:01:05-19:25:18 acenn pluto[7169]: | next event EVENT_REINIT_SECRET in 3599 seconds
2010:01:05-19:25:18 acenn pluto[7169]: | 
2010:01:05-19:25:18 acenn pluto[7169]: | *received whack message
2010:01:05-19:25:18 acenn pluto[7169]: | from whack: got --esp=3des-md5
2010:01:05-19:25:18 acenn pluto[7169]: | esp proposal: 3DES_CBC/HMAC_MD5, 
2010:01:05-19:25:18 acenn pluto[7169]: | from whack: got --ike=3des-sha-modp2048
2010:01:05-19:25:18 acenn pluto[7169]: | ike proposal: 3DES_CBC/HMAC_SHA1/MODP_2048, 
2010:01:05-19:25:18 acenn pluto[7169]: added connection description "S_REF_HuOgVAQLsd_1"
2010:01:05-19:25:18 acenn pluto[7169]: | 192.168.1.125[192.168.1.125]:17/0...%any[%any]:17/%any==={0.0.0.0/0}
2010:01:05-19:25:18 acenn pluto[7169]: | ike_life: 28800s; ipsec_life: 3600s; rekey_margin: 540s; rekey_fuzz: 100%; keyingtries: 3; policy: PSK+ENCRYPT+DONTREKEY
2010:01:05-19:25:18 acenn pluto[7169]: | next event EVENT_REINIT_SECRET in 3599 seconds
2010:01:05-19:25:18 acenn pluto[7169]: | 
2010:01:05-19:25:18 acenn pluto[7169]: | *received whack message
2010:01:05-19:25:18 acenn pluto[7169]: | from whack: got --esp=aes256-sha2_256
2010:01:05-19:25:18 acenn pluto[7169]: | esp proposal: AES_CBC_256/HMAC_SHA2_256, 
2010:01:05-19:25:18 acenn pluto[7169]: | from whack: got --ike=aes256-sha2_256-modp2048
2010:01:05-19:25:18 acenn pluto[7169]: | ike proposal: AES_CBC_256/HMAC_SHA2_256/MODP_2048, 
2010:01:05-19:25:18 acenn pluto[7169]: |   file content is not binary ASN.1
2010:01:05-19:25:18 acenn pluto[7169]: |   -----BEGIN CERTIFICATE-----
2010:01:05-19:25:18 acenn pluto[7169]: |   -----END CERTIFICATE-----
2010:01:05-19:25:18 acenn pluto[7169]: | L0 - x509:
2010:01:05-19:25:18 acenn pluto[7169]: | L1 - tbsCertificate:
2010:01:05-19:25:18 acenn pluto[7169]: | L2 - DEFAULT v1:
2010:01:05-19:25:18 acenn pluto[7169]: | L3 - version:
2010:01:05-19:25:18 acenn pluto[7169]: |   X.509v3
2010:01:05-19:25:18 acenn pluto[7169]: | L2 - serialNumber:
2010:01:05-19:25:18 acenn pluto[7169]: | L2 - signature:
2010:01:05-19:25:18 acenn pluto[7169]: | L3 - algorithmIdentifier:
2010:01:05-19:25:18 acenn pluto[7169]: | L4 - algorithm:
2010:01:05-19:25:18 acenn pluto[7169]: |   'sha-1WithRSAEncryption'
2010:01:05-19:25:18 acenn pluto[7169]: | L2 - issuer:
2010:01:05-19:25:18 acenn pluto[7169]: |   'C=in, L=pune, O=cybervision, CN=cybervision VPN CA, E=thinvm@gmail.com'
2010:01:05-19:25:18 acenn pluto[7169]: | L2 - validity:
2010:01:05-19:25:18 acenn pluto[7169]: | L3 - notBefore:
2010:01:05-19:25:18 acenn pluto[7169]: | L4 - utcTime:
2010:01:05-19:25:18 acenn pluto[7169]: |   'Dec 22 16:43:13 UTC 2009'
2010:01:05-19:25:18 acenn pluto[7169]: | L3 - notAfter:
2010:01:05-19:25:18 acenn pluto[7169]: | L4 - utcTime:
2010:01:05-19:25:18 acenn pluto[7169]: |   'May 08 16:43:13 UTC 2037'
2010:01:05-19:25:18 acenn pluto[7169]: | L2 - subject:
2010:01:05-19:25:18 acenn pluto[7169]: |   'C=in, L=pune, O=cybervision, CN=acenn.utmxtm.com, E=thinvm@gmail.com'
2010:01:05-19:25:18 acenn pluto[7169]: | L2 - subjectPublicKeyInfo:
2010:01:05-19:25:18 acenn pluto[7169]: | -- > --
2010:01:05-19:25:18 acenn pluto[7169]: | L0 - subjectPublicKeyInfo:
2010:01:05-19:25:18 acenn pluto[7169]: | L1 - algorithm:
2010:01:05-19:25:18 acenn pluto[7169]: | L2 - algorithmIdentifier:
2010:01:05-19:25:18 acenn pluto[7169]: | L3 - algorithm:
2010:01:05-19:25:18 acenn pluto[7169]: |   'rsaEncryption'
2010:01:05-19:25:18 acenn pluto[7169]: | L1 - subjectPublicKey:
2010:01:05-19:25:18 acenn pluto[7169]: | -- > --
2010:01:05-19:25:18 acenn pluto[7169]: | L0 - RSAPublicKey:
2010:01:05-19:25:18 acenn pluto[7169]: | L1 - modulus:
2010:01:05-19:25:18 acenn pluto[7169]: | L1 - publicExponent:
2010:01:05-19:25:18 acenn pluto[7169]: | -- < --
2010:01:05-19:25:18 acenn pluto[7169]: | -- < --
2010:01:05-19:25:18 acenn pluto[7169]: | L2 - optional extensions:
2010:01:05-19:25:18 acenn pluto[7169]: | L3 - extensions:
2010:01:05-19:25:18 acenn pluto[7169]: | L4 - extension:
2010:01:05-19:25:18 acenn pluto[7169]: | L5 - extnID:
2010:01:05-19:25:18 acenn pluto[7169]: |   'subjectKeyIdentifier'
2010:01:05-19:25:18 acenn pluto[7169]: | L5 - critical:
2010:01:05-19:25:18 acenn pluto[7169]: |   FALSE
2010:01:05-19:25:18 acenn pluto[7169]: | L5 - extnValue:
2010:01:05-19:25:18 acenn pluto[7169]: | L6 - keyIdentifier:
2010:01:05-19:25:18 acenn pluto[7169]: | L4 - extension:
2010:01:05-19:25:18 acenn pluto[7169]: | L5 - extnID:
2010:01:05-19:25:18 acenn pluto[7169]: |   'authorityKeyIdentifier'
2010:01:05-19:25:18 acenn pluto[7169]: | L5 - critical:
2010:01:05-19:25:18 acenn pluto[7169]: |   FALSE
2010:01:05-19:25:18 acenn pluto[7169]: | L5 - extnValue:
2010:01:05-19:25:18 acenn pluto[7169]: | L6 - authorityKeyIdentifier:
2010:01:05-19:25:18 acenn pluto[7169]: | L7 - keyIdentifier:
2010:01:05-19:25:18 acenn pluto[7169]: | L7 - authorityCertIssuer:
2010:01:05-19:25:18 acenn pluto[7169]: | L7 - authorityCertSerialNumber:
2010:01:05-19:25:18 acenn pluto[7169]: | L4 - extension:
2010:01:05-19:25:18 acenn pluto[7169]: | L5 - extnID:
2010:01:05-19:25:18 acenn pluto[7169]: |   'subjectAltName'
2010:01:05-19:25:18 acenn pluto[7169]: | L5 - critical:
2010:01:05-19:25:18 acenn pluto[7169]: |   FALSE
2010:01:05-19:25:18 acenn pluto[7169]: | L5 - extnValue:
2010:01:05-19:25:18 acenn pluto[7169]: | L6 - generalNames:
2010:01:05-19:25:18 acenn pluto[7169]: | L7 - generalName:
2010:01:05-19:25:18 acenn pluto[7169]: | L8 - dnsName:
2010:01:05-19:25:18 acenn pluto[7169]: |   'acenn.utmxtm.com'
2010:01:05-19:25:18 acenn pluto[7169]: | L4 - extension:
2010:01:05-19:25:18 acenn pluto[7169]: | L5 - extnID:
2010:01:05-19:25:18 acenn pluto[7169]: |   'basicConstraints'
2010:01:05-19:25:18 acenn pluto[7169]: | L5 - critical:
2010:01:05-19:25:18 acenn pluto[7169]: |   FALSE
2010:01:05-19:25:18 acenn pluto[7169]: | L5 - extnValue:
2010:01:05-19:25:18 acenn pluto[7169]: | L6 - basicConstraints:
2010:01:05-19:25:18 acenn pluto[7169]: | L7 - CA:
2010:01:05-19:25:18 acenn pluto[7169]: |   FALSE
2010:01:05-19:25:18 acenn pluto[7169]: | L4 - extension:
2010:01:05-19:25:18 acenn pluto[7169]: | L5 - extnID:
2010:01:05-19:25:18 acenn pluto[7169]: |   'keyUsage'
2010:01:05-19:25:18 acenn pluto[7169]: | L5 - critical:
2010:01:05-19:25:18 acenn pluto[7169]: |   FALSE
2010:01:05-19:25:18 acenn pluto[7169]: | L5 - extnValue:
2010:01:05-19:25:18 acenn pluto[7169]: | L1 - signatureAlgorithm:
2010:01:05-19:25:18 acenn pluto[7169]: | L2 - algorithmIdentifier:
2010:01:05-19:25:18 acenn pluto[7169]: | L3 - algorithm:
2010:01:05-19:25:18 acenn pluto[7169]: |   'sha-1WithRSAEncryption'
2010:01:05-19:25:18 acenn pluto[7169]: | L1 - signatureValue:
2010:01:05-19:25:18 acenn pluto[7169]:   loaded host certificate from '/etc/ipsec.d/certs/REF_sgSKUMhcAO.pem'
2010:01:05-19:25:18 acenn pluto[7169]: | certificate is valid
2010:01:05-19:25:18 acenn pluto[7169]: |   x509 cert inserted
2010:01:05-19:25:18 acenn pluto[7169]: |   file content is not binary ASN.1
2010:01:05-19:25:18 acenn pluto[7169]: |   -----BEGIN CERTIFICATE-----
2010:01:05-19:25:18 acenn pluto[7169]: |   -----END CERTIFICATE-----
2010:01:05-19:25:18 acenn pluto[7169]: | L0 - x509:
2010:01:05-19:25:18 acenn pluto[7169]: | L1 - tbsCertificate:
2010:01:05-19:25:18 acenn pluto[7169]: | L2 - DEFAULT v1:
2010:01:05-19:25:18 acenn pluto[7169]: | L3 - version:
2010:01:05-19:25:18 acenn pluto[7169]: |   X.509v3
2010:01:05-19:25:18 acenn pluto[7169]: | L2 - serialNumber:
2010:01:05-19:25:18 acenn pluto[7169]: | L2 - signature:
2010:01:05-19:25:18 acenn pluto[7169]: | L3 - algorithmIdentifier:
2010:01:05-19:25:18 acenn pluto[7169]: | L4 - algorithm:
2010:01:05-19:25:18 acenn pluto[7169]: |   'sha-1WithRSAEncryption'
2010:01:05-19:25:18 acenn pluto[7169]: | L2 - issuer:
2010:01:05-19:25:18 acenn pluto[7169]: |   'C=in, L=pune, O=cybervision, CN=cybervision VPN CA, E=thinvm@gmail.com'
2010:01:05-19:25:18 acenn pluto[7169]: | L2 - validity:
2010:01:05-19:25:18 acenn pluto[7169]: | L3 - notBefore:
2010:01:05-19:25:18 acenn pluto[7169]: | L4 - utcTime:
2010:01:05-19:25:18 acenn pluto[7169]: |   'Dec 22 16:43:14 UTC 2009'
2010:01:05-19:25:18 acenn pluto[7169]: | L3 - notAfter:
2010:01:05-19:25:18 acenn pluto[7169]: | L4 - utcTime:
2010:01:05-19:25:18 acenn pluto[7169]: |   'May 08 16:43:14 UTC 2037'
2010:01:05-19:25:18 acenn pluto[7169]: | L2 - subject:
2010:01:05-19:25:18 acenn pluto[7169]: |   'C=in, L=pune, O=cybervision, CN=admin, E=thinvm@gmail.com'
2010:01:05-19:25:18 acenn pluto[7169]: | L2 - subjectPublicKeyInfo:
2010:01:05-19:25:18 acenn pluto[7169]: | -- > --
2010:01:05-19:25:18 acenn pluto[7169]: | L0 - subjectPublicKeyInfo:
2010:01:05-19:25:18 acenn pluto[7169]: | L1 - algorithm:
2010:01:05-19:25:18 acenn pluto[7169]: | L2 - algorithmIdentifier:
2010:01:05-19:25:18 acenn pluto[7169]: | L3 - algorithm:
2010:01:05-19:25:18 acenn pluto[7169]: |   'rsaEncryption'
2010:01:05-19:25:18 acenn pluto[7169]: | L1 - subjectPublicKey:
2010:01:05-19:25:18 acenn pluto[7169]: | -- > --
2010:01:05-19:25:18 acenn pluto[7169]: | L0 - RSAPublicKey:
2010:01:05-19:25:18 acenn pluto[7169]: | L1 - modulus:
2010:01:05-19:25:18 acenn pluto[7169]: | L1 - publicExponent:
2010:01:05-19:25:18 acenn pluto[7169]: | -- < --
2010:01:05-19:25:18 acenn pluto[7169]: | -- < --
2010:01:05-19:25:18 acenn pluto[7169]: | L2 - optional extensions:
2010:01:05-19:25:18 acenn pluto[7169]: | L3 - extensions:
2010:01:05-19:25:18 acenn pluto[7169]: | L4 - extension:
2010:01:05-19:25:18 acenn pluto[7169]: | L5 - extnID:
2010:01:05-19:25:18 acenn pluto[7169]: |   'subjectKeyIdentifier'
2010:01:05-19:25:18 acenn pluto[7169]: | L5 - critical:
2010:01:05-19:25:18 acenn pluto[7169]: |   FALSE
2010:01:05-19:25:18 acenn pluto[7169]: | L5 - extnValue:
2010:01:05-19:25:18 acenn pluto[7169]: | L6 - keyIdentifier:
2010:01:05-19:25:18 acenn pluto[7169]: | L4 - extension:
2010:01:05-19:25:18 acenn pluto[7169]: | L5 - extnID:
2010:01:05-19:25:18 acenn pluto[7169]: |   'authorityKeyIdentifier'
2010:01:05-19:25:18 acenn pluto[7169]: | L5 - critical:
2010:01:05-19:25:18 acenn pluto[7169]: |   FALSE
2010:01:05-19:25:18 acenn pluto[7169]: | L5 - extnValue:
2010:01:05-19:25:18 acenn pluto[7169]: | L6 - authorityKeyIdentifier:
2010:01:05-19:25:18 acenn pluto[7169]: | L7 - keyIdentifier:
2010:01:05-19:25:18 acenn pluto[7169]: | L7 - authorityCertIssuer:
2010:01:05-19:25:18 acenn pluto[7169]: | L7 - authorityCertSerialNumber:
2010:01:05-19:25:18 acenn pluto[7169]: | L4 - extension:
2010:01:05-19:25:18 acenn pluto[7169]: | L5 - extnID:
2010:01:05-19:25:18 acenn pluto[7169]: |   'subjectAltName'
2010:01:05-19:25:18 acenn pluto[7169]: | L5 - critical:
2010:01:05-19:25:18 acenn pluto[7169]: |   FALSE
2010:01:05-19:25:18 acenn pluto[7169]: | L5 - extnValue:
2010:01:05-19:25:18 acenn pluto[7169]: | L6 - generalNames:
2010:01:05-19:25:18 acenn pluto[7169]: | L7 - generalName:
2010:01:05-19:25:18 acenn pluto[7169]: | L8 - rfc822Name:
2010:01:05-19:25:18 acenn pluto[7169]: |   'thinvm@gmail.com'
2010:01:05-19:25:18 acenn pluto[7169]: | L4 - extension:
2010:01:05-19:25:18 acenn pluto[7169]: | L5 - extnID:
2010:01:05-19:25:18 acenn pluto[7169]: |   'basicConstraints'
2010:01:05-19:25:18 acenn pluto[7169]: | L5 - critical:
2010:01:05-19:25:18 acenn pluto[7169]: |   FALSE
2010:01:05-19:25:18 acenn pluto[7169]: | L5 - extnValue:
2010:01:05-19:25:18 acenn pluto[7169]: | L6 - basicConstraints:
2010:01:05-19:25:18 acenn pluto[7169]: | L7 - CA:
2010:01:05-19:25:18 acenn pluto[7169]: |   FALSE
2010:01:05-19:25:18 acenn pluto[7169]: | L4 - extension:
2010:01:05-19:25:18 acenn pluto[7169]: | L5 - extnID:
2010:01:05-19:25:18 acenn pluto[7169]: |   'keyUsage'
2010:01:05-19:25:18 acenn pluto[7169]: | L5 - critical:
2010:01:05-19:25:18 acenn pluto[7169]: |   FALSE
2010:01:05-19:25:18 acenn pluto[7169]: | L5 - extnValue:
2010:01:05-19:25:18 acenn pluto[7169]: | L1 - signatureAlgorithm:
2010:01:05-19:25:18 acenn pluto[7169]: | L2 - algorithmIdentifier:
2010:01:05-19:25:18 acenn pluto[7169]: | L3 - algorithm:
2010:01:05-19:25:18 acenn pluto[7169]: |   'sha-1WithRSAEncryption'
2010:01:05-19:25:18 acenn pluto[7169]: | L1 - signatureValue:
2010:01:05-19:25:18 acenn pluto[7169]:   loaded host certificate from '/etc/ipsec.d/certs/REF_pjUjayNQkE_1d0e492a.pem'
2010:01:05-19:25:18 acenn pluto[7169]:   no subjectAltName matches ID '%any', replaced by subject DN
2010:01:05-19:25:18 acenn pluto[7169]: | certificate is valid
2010:01:05-19:25:18 acenn pluto[7169]: |   x509 cert inserted
2010:01:05-19:25:18 acenn pluto[7169]: added connection description "D_REF_zfmTEQwktH_0"
2010:01:05-19:25:18 acenn pluto[7169]: | 0.0.0.0/0===192.168.1.125[acenn.utmxtm.com]...%any[C=in, L=pune, O=cybervision, CN=admin, E=thinvm@gmail.com]===10.242.5.1/32
2010:01:05-19:25:18 acenn pluto[7169]: | ike_life: 7800s; ipsec_life: 3600s; rekey_margin: 540s; rekey_fuzz: 100%; keyingtries: 3; policy: ENCRYPT+TUNNEL+XAUTHRSASIG+XAUTHSERVER
2010:01:05-19:25:18 acenn pluto[7169]: | next event EVENT_REINIT_SECRET in 3599 seconds
2010:01:05-19:25:18 acenn pluto[7169]: | 
2010:01:05-19:25:18 acenn pluto[7169]: | *received whack message
2010:01:05-19:25:18 acenn pluto[7169]: | from whack: got --esp=aes256-sha2_256
2010:01:05-19:25:18 acenn pluto[7169]: | esp proposal: AES_CBC_256/HMAC_SHA2_256, 
2010:01:05-19:25:18 acenn pluto[7169]: | from whack: got --ike=aes256-sha2_256-modp2048
2010:01:05-19:25:18 acenn pluto[7169]: | ike proposal: AES_CBC_256/HMAC_SHA2_256/MODP_2048, 
2010:01:05-19:25:18 acenn pluto[7169]: |   file content is not binary ASN.1
2010:01:05-19:25:18 acenn pluto[7169]: |   -----BEGIN CERTIFICATE-----
2010:01:05-19:25:18 acenn pluto[7169]: |   -----END CERTIFICATE-----
2010:01:05-19:25:18 acenn pluto[7169]: | L0 - x509:
2010:01:05-19:25:18 acenn pluto[7169]: | L1 - tbsCertificate:
2010:01:05-19:25:18 acenn pluto[7169]: | L2 - DEFAULT v1:
2010:01:05-19:25:18 acenn pluto[7169]: | L3 - version:
2010:01:05-19:25:18 acenn pluto[7169]: |   X.509v3
2010:01:05-19:25:18 acenn pluto[7169]: | L2 - serialNumber:
2010:01:05-19:25:18 acenn pluto[7169]: | L2 - signature:
2010:01:05-19:25:18 acenn pluto[7169]: | L3 - algorithmIdentifier:
2010:01:05-19:25:18 acenn pluto[7169]: | L4 - algorithm:
2010:01:05-19:25:18 acenn pluto[7169]: |   'sha-1WithRSAEncryption'
2010:01:05-19:25:18 acenn pluto[7169]: | L2 - issuer:
2010:01:05-19:25:18 acenn pluto[7169]: |   'C=in, L=pune, O=cybervision, CN=cybervision VPN CA, E=thinvm@gmail.com'
2010:01:05-19:25:18 acenn pluto[7169]: | L2 - validity:
2010:01:05-19:25:18 acenn pluto[7169]: | L3 - notBefore:
2010:01:05-19:25:18 acenn pluto[7169]: | L4 - utcTime:
2010:01:05-19:25:18 acenn pluto[7169]: |   'Dec 22 16:43:13 UTC 2009'
2010:01:05-19:25:18 acenn pluto[7169]: | L3 - notAfter:
2010:01:05-19:25:18 acenn pluto[7169]: | L4 - utcTime:
2010:01:05-19:25:18 acenn pluto[7169]: |   'May 08 16:43:13 UTC 2037'
2010:01:05-19:25:18 acenn pluto[7169]: | L2 - subject:
2010:01:05-19:25:18 acenn pluto[7169]: |   'C=in, L=pune, O=cybervision, CN=acenn.utmxtm.com, E=thinvm@gmail.com'
2010:01:05-19:25:18 acenn pluto[7169]: | L2 - subjectPublicKeyInfo:
2010:01:05-19:25:18 acenn pluto[7169]: | -- > --
2010:01:05-19:25:18 acenn pluto[7169]: | L0 - subjectPublicKeyInfo:
2010:01:05-19:25:18 acenn pluto[7169]: | L1 - algorithm:
2010:01:05-19:25:18 acenn pluto[7169]: | L2 - algorithmIdentifier:
2010:01:05-19:25:18 acenn pluto[7169]: | L3 - algorithm:
2010:01:05-19:25:18 acenn pluto[7169]: |   'rsaEncryption'
2010:01:05-19:25:18 acenn pluto[7169]: | L1 - subjectPublicKey:
2010:01:05-19:25:18 acenn pluto[7169]: | -- > --
2010:01:05-19:25:18 acenn pluto[7169]: | L0 - RSAPublicKey:
2010:01:05-19:25:18 acenn pluto[7169]: | L1 - modulus:
2010:01:05-19:25:18 acenn pluto[7169]: | L1 - publicExponent:
2010:01:05-19:25:18 acenn pluto[7169]: | -- < --
2010:01:05-19:25:18 acenn pluto[7169]: | -- < --
2010:01:05-19:25:18 acenn pluto[7169]: | L2 - optional extensions:
2010:01:05-19:25:18 acenn pluto[7169]: | L3 - extensions:
2010:01:05-19:25:18 acenn pluto[7169]: | L4 - extension:
2010:01:05-19:25:18 acenn pluto[7169]: | L5 - extnID:
2010:01:05-19:25:18 acenn pluto[7169]: |   'subjectKeyIdentifier'
2010:01:05-19:25:18 acenn pluto[7169]: | L5 - critical:
2010:01:05-19:25:18 acenn pluto[7169]: |   FALSE
2010:01:05-19:25:18 acenn pluto[7169]: | L5 - extnValue:
2010:01:05-19:25:18 acenn pluto[7169]: | L6 - keyIdentifier:
2010:01:05-19:25:18 acenn pluto[7169]: | L4 - extension:
2010:01:05-19:25:18 acenn pluto[7169]: | L5 - extnID:
2010:01:05-19:25:18 acenn pluto[7169]: |   'authorityKeyIdentifier'
2010:01:05-19:25:18 acenn pluto[7169]: | L5 - critical:
2010:01:05-19:25:18 acenn pluto[7169]: |   FALSE
2010:01:05-19:25:18 acenn pluto[7169]: | L5 - extnValue:
2010:01:05-19:25:18 acenn pluto[7169]: | L6 - authorityKeyIdentifier:
2010:01:05-19:25:18 acenn pluto[7169]: | L7 - keyIdentifier:
2010:01:05-19:25:18 acenn pluto[7169]: | L7 - authorityCertIssuer:
2010:01:05-19:25:18 acenn pluto[7169]: | L7 - authorityCertSerialNumber:
2010:01:05-19:25:18 acenn pluto[7169]: | L4 - extension:
2010:01:05-19:25:18 acenn pluto[7169]: | L5 - extnID:
2010:01:05-19:25:18 acenn pluto[7169]: |   'subjectAltName'
2010:01:05-19:25:18 acenn pluto[7169]: | L5 - critical:
2010:01:05-19:25:18 acenn pluto[7169]: |   FALSE
2010:01:05-19:25:18 acenn pluto[7169]: | L5 - extnValue:
2010:01:05-19:25:18 acenn pluto[7169]: | L6 - generalNames:
2010:01:05-19:25:18 acenn pluto[7169]: | L7 - generalName:
2010:01:05-19:25:18 acenn pluto[7169]: | L8 - dnsName:
2010:01:05-19:25:18 acenn pluto[7169]: |   'acenn.utmxtm.com'
2010:01:05-19:25:18 acenn pluto[7169]: | L4 - extension:
2010:01:05-19:25:18 acenn pluto[7169]: | L5 - extnID:
2010:01:05-19:25:18 acenn pluto[7169]: |   'basicConstraints'
2010:01:05-19:25:18 acenn pluto[7169]: | L5 - critical:
2010:01:05-19:25:18 acenn pluto[7169]: |   FALSE
2010:01:05-19:25:18 acenn pluto[7169]: | L5 - extnValue:
2010:01:05-19:25:18 acenn pluto[7169]: | L6 - basicConstraints:
2010:01:05-19:25:18 acenn pluto[7169]: | L7 - CA:
2010:01:05-19:25:18 acenn pluto[7169]: |   FALSE
2010:01:05-19:25:18 acenn pluto[7169]: | L4 - extension:
2010:01:05-19:25:18 acenn pluto[7169]: | L5 - extnID:
2010:01:05-19:25:18 acenn pluto[7169]: |   'keyUsage'
2010:01:05-19:25:18 acenn pluto[7169]: | L5 - critical:
2010:01:05-19:25:18 acenn pluto[7169]: |   FALSE
2010:01:05-19:25:18 acenn pluto[7169]: | L5 - extnValue:
2010:01:05-19:25:18 acenn pluto[7169]: | L1 - signatureAlgorithm:
2010:01:05-19:25:18 acenn pluto[7169]: | L2 - algorithmIdentifier:
2010:01:05-19:25:18 acenn pluto[7169]: | L3 - algorithm:
2010:01:05-19:25:18 acenn pluto[7169]: |   'sha-1WithRSAEncryption'
2010:01:05-19:25:18 acenn pluto[7169]: | L1 - signatureValue:
2010:01:05-19:25:18 acenn pluto[7169]:   loaded host certificate from '/etc/ipsec.d/certs/REF_sgSKUMhcAO.pem'
2010:01:05-19:25:18 acenn pluto[7169]: | certificate is valid
2010:01:05-19:25:18 acenn pluto[7169]: |   file content is not binary ASN.1
2010:01:05-19:25:18 acenn pluto[7169]: |   -----BEGIN CERTIFICATE-----
2010:01:05-19:25:18 acenn pluto[7169]: |   -----END CERTIFICATE-----
2010:01:05-19:25:18 acenn pluto[7169]: | L0 - x509:
2010:01:05-19:25:18 acenn pluto[7169]: | L1 - tbsCertificate:
2010:01:05-19:25:18 acenn pluto[7169]: | L2 - DEFAULT v1:
2010:01:05-19:25:18 acenn pluto[7169]: | L3 - version:
2010:01:05-19:25:18 acenn pluto[7169]: |   X.509v3
2010:01:05-19:25:18 acenn pluto[7169]: | L2 - serialNumber:
2010:01:05-19:25:18 acenn pluto[7169]: | L2 - signature:
2010:01:05-19:25:18 acenn pluto[7169]: | L3 - algorithmIdentifier:
2010:01:05-19:25:18 acenn pluto[7169]: | L4 - algorithm:
2010:01:05-19:25:18 acenn pluto[7169]: |   'sha-1WithRSAEncryption'
2010:01:05-19:25:18 acenn pluto[7169]: | L2 - issuer:
2010:01:05-19:25:18 acenn pluto[7169]: |   'C=in, L=pune, O=cybervision, CN=cybervision VPN CA, E=thinvm@gmail.com'
2010:01:05-19:25:18 acenn pluto[7169]: | L2 - validity:
2010:01:05-19:25:18 acenn pluto[7169]: | L3 - notBefore:
2010:01:05-19:25:18 acenn pluto[7169]: | L4 - utcTime:
2010:01:05-19:25:18 acenn pluto[7169]: |   'Jan 04 15:54:32 UTC 2010'
2010:01:05-19:25:18 acenn pluto[7169]: | L3 - notAfter:
2010:01:05-19:25:18 acenn pluto[7169]: | L4 - utcTime:
2010:01:05-19:25:18 acenn pluto[7169]: |   'May 21 15:54:32 UTC 2037'
2010:01:05-19:25:18 acenn pluto[7169]: | L2 - subject:
2010:01:05-19:25:18 acenn pluto[7169]: |   'C=in, L=pune, O=cybervision, CN=Bob Alfson, E=BAlfson@MediaSoftUSA.com'
2010:01:05-19:25:18 acenn pluto[7169]: | L2 - subjectPublicKeyInfo:
2010:01:05-19:25:18 acenn pluto[7169]: | -- > --
2010:01:05-19:25:18 acenn pluto[7169]: | L0 - subjectPublicKeyInfo:
2010:01:05-19:25:18 acenn pluto[7169]: | L1 - algorithm:
2010:01:05-19:25:18 acenn pluto[7169]: | L2 - algorithmIdentifier:
2010:01:05-19:25:18 acenn pluto[7169]: | L3 - algorithm:
2010:01:05-19:25:18 acenn pluto[7169]: |   'rsaEncryption'
2010:01:05-19:25:18 acenn pluto[7169]: | L1 - subjectPublicKey:
2010:01:05-19:25:18 acenn pluto[7169]: | -- > --
2010:01:05-19:25:18 acenn pluto[7169]: | L0 - RSAPublicKey:
2010:01:05-19:25:18 acenn pluto[7169]: | L1 - modulus:
2010:01:05-19:25:18 acenn pluto[7169]: | L1 - publicExponent:
2010:01:05-19:25:18 acenn pluto[7169]: | -- < --
2010:01:05-19:25:18 acenn pluto[7169]: | -- < --
2010:01:05-19:25:18 acenn pluto[7169]: | L2 - optional extensions:
2010:01:05-19:25:18 acenn pluto[7169]: | L3 - extensions:
2010:01:05-19:25:18 acenn pluto[7169]: | L4 - extension:
2010:01:05-19:25:18 acenn pluto[7169]: | L5 - extnID:
2010:01:05-19:25:18 acenn pluto[7169]: |   'subjectKeyIdentifier'
2010:01:05-19:25:18 acenn pluto[7169]: | L5 - critical:
2010:01:05-19:25:18 acenn pluto[7169]: |   FALSE
2010:01:05-19:25:18 acenn pluto[7169]: | L5 - extnValue:
2010:01:05-19:25:18 acenn pluto[7169]: | L6 - keyIdentifier:
2010:01:05-19:25:18 acenn pluto[7169]: | L4 - extension:
2010:01:05-19:25:18 acenn pluto[7169]: | L5 - extnID:
2010:01:05-19:25:18 acenn pluto[7169]: |   'authorityKeyIdentifier'
2010:01:05-19:25:18 acenn pluto[7169]: | L5 - critical:
2010:01:05-19:25:18 acenn pluto[7169]: |   FALSE
2010:01:05-19:25:18 acenn pluto[7169]: | L5 - extnValue:
2010:01:05-19:25:18 acenn pluto[7169]: | L6 - authorityKeyIdentifier:
2010:01:05-19:25:18 acenn pluto[7169]: | L7 - keyIdentifier:
2010:01:05-19:25:18 acenn pluto[7169]: | L7 - authorityCertIssuer:
2010:01:05-19:25:18 acenn pluto[7169]: | L7 - authorityCertSerialNumber:
2010:01:05-19:25:18 acenn pluto[7169]: | L4 - extension:
2010:01:05-19:25:18 acenn pluto[7169]: | L5 - extnID:
2010:01:05-19:25:18 acenn pluto[7169]: |   'subjectAltName'
2010:01:05-19:25:18 acenn pluto[7169]: | L5 - critical:
2010:01:05-19:25:18 acenn pluto[7169]: |   FALSE
2010:01:05-19:25:18 acenn pluto[7169]: | L5 - extnValue:
2010:01:05-19:25:18 acenn pluto[7169]: | L6 - generalNames:
2010:01:05-19:25:18 acenn pluto[7169]: | L7 - generalName:
2010:01:05-19:25:18 acenn pluto[7169]: | L8 - rfc822Name:
2010:01:05-19:25:18 acenn pluto[7169]: |   'BAlfson@MediaSoftUSA.com'
2010:01:05-19:25:18 acenn pluto[7169]: | L4 - extension:
2010:01:05-19:25:18 acenn pluto[7169]: | L5 - extnID:
2010:01:05-19:25:18 acenn pluto[7169]: |   'basicConstraints'
2010:01:05-19:25:18 acenn pluto[7169]: | L5 - critical:
2010:01:05-19:25:18 acenn pluto[7169]: |   FALSE
2010:01:05-19:25:18 acenn pluto[7169]: | L5 - extnValue:
2010:01:05-19:25:18 acenn pluto[7169]: | L6 - basicConstraints:
2010:01:05-19:25:18 acenn pluto[7169]: | L7 - CA:
2010:01:05-19:25:18 acenn pluto[7169]: |   FALSE
2010:01:05-19:25:18 acenn pluto[7169]: | L4 - extension:
2010:01:05-19:25:18 acenn pluto[7169]: | L5 - extnID:
2010:01:05-19:25:18 acenn pluto[7169]: |   'keyUsage'
2010:01:05-19:25:18 acenn pluto[7169]: | L5 - critical:
2010:01:05-19:25:18 acenn pluto[7169]: |   FALSE
2010:01:05-19:25:18 acenn pluto[7169]: | L5 - extnValue:
2010:01:05-19:25:18 acenn pluto[7169]: | L1 - signatureAlgorithm:
2010:01:05-19:25:18 acenn pluto[7169]: | L2 - algorithmIdentifier:
2010:01:05-19:25:18 acenn pluto[7169]: | L3 - algorithm:
2010:01:05-19:25:18 acenn pluto[7169]: |   'sha-1WithRSAEncryption'
2010:01:05-19:25:18 acenn pluto[7169]: | L1 - signatureValue:
2010:01:05-19:25:18 acenn pluto[7169]:   loaded host certificate from '/etc/ipsec.d/certs/REF_XExftYnBJC_1ebd8fb8.pem'
2010:01:05-19:25:18 acenn pluto[7169]:   no subjectAltName matches ID '%any', replaced by subject DN
2010:01:05-19:25:18 acenn pluto[7169]: | certificate is valid
2010:01:05-19:25:18 acenn pluto[7169]: |   x509 cert inserted
2010:01:05-19:25:18 acenn pluto[7169]: added connection description "D_REF_zfmTEQwktH_1"
2010:01:05-19:25:18 acenn pluto[7169]: | 0.0.0.0/0===192.168.1.125[acenn.utmxtm.com]...%any[C=in, L=pune, O=cybervision, CN=Bob Alfson, E=BAlfson@MediaSoftUSA.com]===10.242.5.2/32
2010:01:05-19:25:18 acenn pluto[7169]: | ike_life: 7800s; ipsec_life: 3600s; rekey_margin: 540s; rekey_fuzz: 100%; keyingtries: 3; policy: ENCRYPT+TUNNEL+XAUTHRSASIG+XAUTHSERVER
2010:01:05-19:25:18 acenn pluto[7169]: | next event EVENT_REINIT_SECRET in 3599 seconds
2010:01:05-19:25:18 acenn pluto[7169]: | 
2010:01:05-19:25:18 acenn pluto[7169]: | *received whack message
2010:01:05-19:25:18 acenn pluto[7169]: forgetting secrets
2010:01:05-19:25:18 acenn pluto[7169]: loading secrets from "/etc/ipsec.secrets"
2010:01:05-19:25:18 acenn pluto[7169]: |   file content is not binary ASN.1
2010:01:05-19:25:18 acenn pluto[7169]: |   -----BEGIN RSA PRIVATE KEY-----
2010:01:05-19:25:18 acenn pluto[7169]: |   -----END RSA PRIVATE KEY-----
2010:01:05-19:25:18 acenn pluto[7169]: | L0 - RSAPrivateKey:
2010:01:05-19:25:18 acenn pluto[7169]: | L1 - version:
2010:01:05-19:25:18 acenn pluto[7169]: | L1 - modulus:
2010:01:05-19:25:18 acenn pluto[7169]: | L1 - publicExponent:
2010:01:05-19:25:18 acenn pluto[7169]: | L1 - privateExponent:
2010:01:05-19:25:18 acenn pluto[7169]: | L1 - prime1:
2010:01:05-19:25:18 acenn pluto[7169]: | L1 - prime2:
2010:01:05-19:25:18 acenn pluto[7169]: | L1 - exponent1:
2010:01:05-19:25:18 acenn pluto[7169]: | L1 - exponent2:
2010:01:05-19:25:18 acenn pluto[7169]: | L1 - coefficient:
2010:01:05-19:25:18 acenn pluto[7169]:   loaded private key from 'REF_sgSKUMhcAO.pem'
2010:01:05-19:25:18 acenn pluto[7169]:   loaded shared key for %any 192.168.1.125 
2010:01:05-19:25:18 acenn pluto[7169]: loading ca certificates from '/etc/ipsec.d/cacerts'
2010:01:05-19:25:18 acenn pluto[7169]: |   file content is not binary ASN.1
2010:01:05-19:25:18 acenn pluto[7169]: |   -----BEGIN CERTIFICATE-----
2010:01:05-19:25:18 acenn pluto[7169]: |   -----END CERTIFICATE-----
2010:01:05-19:25:18 acenn pluto[7169]: | L0 - x509:
2010:01:05-19:25:18 acenn pluto[7169]: | L1 - tbsCertificate:
2010:01:05-19:25:18 acenn pluto[7169]: | L2 - DEFAULT v1:
2010:01:05-19:25:18 acenn pluto[7169]: | L3 - version:
2010:01:05-19:25:18 acenn pluto[7169]: |   X.509v3
2010:01:05-19:25:18 acenn pluto[7169]: | L2 - serialNumber:
2010:01:05-19:25:18 acenn pluto[7169]: | L2 - signature:
2010:01:05-19:25:18 acenn pluto[7169]: | L3 - algorithmIdentifier:
2010:01:05-19:25:18 acenn pluto[7169]: | L4 - algorithm:
2010:01:05-19:25:18 acenn pluto[7169]: |   'md5WithRSAEncryption'
2010:01:05-19:25:18 acenn pluto[7169]: | L2 - issuer:
2010:01:05-19:25:18 acenn pluto[7169]: |   'C=in, L=pune, O=karvid, CN=karvid VPN CA, E=postmaster@karvid.com'
2010:01:05-19:25:18 acenn pluto[7169]: | L2 - validity:
2010:01:05-19:25:18 acenn pluto[7169]: | L3 - notBefore:
2010:01:05-19:25:18 acenn pluto[7169]: | L4 - utcTime:
2010:01:05-19:25:18 acenn pluto[7169]: |   'Jun 13 12:16:10 UTC 2009'
2010:01:05-19:25:18 acenn pluto[7169]: | L3 - notAfter:
2010:01:05-19:25:18 acenn pluto[7169]: | L4 - utcTime:
2010:01:05-19:25:18 acenn pluto[7169]: |   'Oct 28 12:16:10 UTC 2036'
2010:01:05-19:25:18 acenn pluto[7169]: | L2 - subject:
2010:01:05-19:25:18 acenn pluto[7169]: |   'C=in, L=pune, O=karvid, CN=karvid VPN CA, E=postmaster@karvid.com'
2010:01:05-19:25:18 acenn pluto[7169]: | L2 - subjectPublicKeyInfo:
2010:01:05-19:25:18 acenn pluto[7169]: | -- > --
2010:01:05-19:25:18 acenn pluto[7169]: | L0 - subjectPublicKeyInfo:
2010:01:05-19:25:18 acenn pluto[7169]: | L1 - algorithm:
2010:01:05-19:25:18 acenn pluto[7169]: | L2 - algorithmIdentifier:
2010:01:05-19:25:18 acenn pluto[7169]: | L3 - algorithm:
2010:01:05-19:25:18 acenn pluto[7169]: |   'rsaEncryption'
2010:01:05-19:25:18 acenn pluto[7169]: | L1 - subjectPublicKey:
2010:01:05-19:25:18 acenn pluto[7169]: | -- > --
2010:01:05-19:25:18 acenn pluto[7169]: | L0 - RSAPublicKey:
2010:01:05-19:25:18 acenn pluto[7169]: | L1 - modulus:
2010:01:05-19:25:18 acenn pluto[7169]: | L1 - publicExponent:
2010:01:05-19:25:18 acenn pluto[7169]: | -- < --
2010:01:05-19:25:18 acenn pluto[7169]: | -- < --
2010:01:05-19:25:18 acenn pluto[7169]: | L2 - optional extensions:
2010:01:05-19:25:18 acenn pluto[7169]: | L3 - extensions:
2010:01:05-19:25:18 acenn pluto[7169]: | L4 - extension:
2010:01:05-19:25:18 acenn pluto[7169]: | L5 - extnID:
2010:01:05-19:25:18 acenn pluto[7169]: |   'subjectKeyIdentifier'
2010:01:05-19:25:18 acenn pluto[7169]: | L5 - critical:
2010:01:05-19:25:18 acenn pluto[7169]: |   FALSE
2010:01:05-19:25:18 acenn pluto[7169]: | L5 - extnValue:
2010:01:05-19:25:18 acenn pluto[7169]: | L6 - keyIdentifier:
2010:01:05-19:25:18 acenn pluto[7169]: | L4 - extension:
2010:01:05-19:25:18 acenn pluto[7169]: | L5 - extnID:
2010:01:05-19:25:18 acenn pluto[7169]: |   'basicConstraints'
2010:01:05-19:25:18 acenn pluto[7169]: | L5 - critical:
2010:01:05-19:25:18 acenn pluto[7169]: |   FALSE
2010:01:05-19:25:18 acenn pluto[7169]: | L5 - extnValue:
2010:01:05-19:25:18 acenn pluto[7169]: | L6 - basicConstraints:
2010:01:05-19:25:18 acenn pluto[7169]: | L7 - CA:
2010:01:05-19:25:18 acenn pluto[7169]: |   TRUE
2010:01:05-19:25:18 acenn pluto[7169]: | L4 - extension:
2010:01:05-19:25:18 acenn pluto[7169]: | L5 - extnID:
2010:01:05-19:25:18 acenn pluto[7169]: |   'subjectAltName'
2010:01:05-19:25:18 acenn pluto[7169]: | L5 - critical:
2010:01:05-19:25:18 acenn pluto[7169]: |   FALSE
2010:01:05-19:25:18 acenn pluto[7169]: | L5 - extnValue:
2010:01:05-19:25:18 acenn pluto[7169]: | L6 - generalNames:
2010:01:05-19:25:18 acenn pluto[7169]: | L7 - generalName:
2010:01:05-19:25:18 acenn pluto[7169]: | L8 - ipAddress:
2010:01:05-19:25:18 acenn pluto[7169]: |   '127.0.0.1'
2010:01:05-19:25:18 acenn pluto[7169]: | L1 - signatureAlgorithm:
2010:01:05-19:25:18 acenn pluto[7169]: | L2 - algorithmIdentifier:
2010:01:05-19:25:18 acenn pluto[7169]: | L3 - algorithm:
2010:01:05-19:25:18 acenn pluto[7169]: |   'md5WithRSAEncryption'
2010:01:05-19:25:18 acenn pluto[7169]: | L1 - signatureValue:
2010:01:05-19:25:18 acenn pluto[7169]: | signature verification:
2010:01:05-19:25:18 acenn pluto[7169]: | L0 - digestInfo:
2010:01:05-19:25:18 acenn pluto[7169]: | L1 - digestAlgorithm:
2010:01:05-19:25:18 acenn pluto[7169]: | L2 - algorithmIdentifier:
2010:01:05-19:25:18 acenn pluto[7169]: | L3 - algorithm:
2010:01:05-19:25:18 acenn pluto[7169]: |   'md5'
2010:01:05-19:25:18 acenn pluto[7169]: | L1 - digest:
2010:01:05-19:25:18 acenn pluto[7169]:   loaded ca certificate from '/etc/ipsec.d/cacerts/REF_RwwihhYnGO.pem'
2010:01:05-19:25:18 acenn pluto[7169]: |   authcert is already present and identical
2010:01:05-19:25:18 acenn pluto[7169]: |   file content is not binary ASN.1
2010:01:05-19:25:18 acenn pluto[7169]: |   -----BEGIN CERTIFICATE-----
2010:01:05-19:25:18 acenn pluto[7169]: |   -----END CERTIFICATE-----
2010:01:05-19:25:18 acenn pluto[7169]: | L0 - x509:
2010:01:05-19:25:18 acenn pluto[7169]: | L1 - tbsCertificate:
2010:01:05-19:25:18 acenn pluto[7169]: | L2 - DEFAULT v1:
2010:01:05-19:25:18 acenn pluto[7169]: | L3 - version:
2010:01:05-19:25:18 acenn pluto[7169]: |   X.509v3
2010:01:05-19:25:18 acenn pluto[7169]: | L2 - serialNumber:
2010:01:05-19:25:18 acenn pluto[7169]: | L2 - signature:
2010:01:05-19:25:18 acenn pluto[7169]: | L3 - algorithmIdentifier:
2010:01:05-19:25:18 acenn pluto[7169]: | L4 - algorithm:
2010:01:05-19:25:18 acenn pluto[7169]: |   'sha-1WithRSAEncryption'
2010:01:05-19:25:18 acenn pluto[7169]: | L2 - issuer:
2010:01:05-19:25:18 acenn pluto[7169]: |   'C=in, L=pune, O=cybervision, CN=cybervision VPN CA, E=thinvm@gmail.com'
2010:01:05-19:25:18 acenn pluto[7169]: | L2 - validity:
2010:01:05-19:25:18 acenn pluto[7169]: | L3 - notBefore:
2010:01:05-19:25:18 acenn pluto[7169]: | L4 - utcTime:
2010:01:05-19:25:18 acenn pluto[7169]: |   'Dec 22 16:43:12 UTC 2009'
2010:01:05-19:25:18 acenn pluto[7169]: | L3 - notAfter:
2010:01:05-19:25:18 acenn pluto[7169]: | L4 - utcTime:
2010:01:05-19:25:18 acenn pluto[7169]: |   'May 08 16:43:12 UTC 2037'
2010:01:05-19:25:18 acenn pluto[7169]: | L2 - subject:
2010:01:05-19:25:18 acenn pluto[7169]: |   'C=in, L=pune, O=cybervision, CN=cybervision VPN CA, E=thinvm@gmail.com'
2010:01:05-19:25:18 acenn pluto[7169]: | L2 - subjectPublicKeyInfo:
2010:01:05-19:25:18 acenn pluto[7169]: | -- > --
2010:01:05-19:25:18 acenn pluto[7169]: | L0 - subjectPublicKeyInfo:
2010:01:05-19:25:18 acenn pluto[7169]: | L1 - algorithm:
2010:01:05-19:25:18 acenn pluto[7169]: | L2 - algorithmIdentifier:
2010:01:05-19:25:18 acenn pluto[7169]: | L3 - algorithm:
2010:01:05-19:25:18 acenn pluto[7169]: |   'rsaEncryption'
2010:01:05-19:25:18 acenn pluto[7169]: | L1 - subjectPublicKey:
2010:01:05-19:25:18 acenn pluto[7169]: | -- > --
2010:01:05-19:25:18 acenn pluto[7169]: | L0 - RSAPublicKey:
2010:01:05-19:25:18 acenn pluto[7169]: | L1 - modulus:
2010:01:05-19:25:18 acenn pluto[7169]: | L1 - publicExponent:
2010:01:05-19:25:18 acenn pluto[7169]: | -- < --
2010:01:05-19:25:18 acenn pluto[7169]: | -- < --
2010:01:05-19:25:18 acenn pluto[7169]: | L2 - optional extensions:
2010:01:05-19:25:18 acenn pluto[7169]: | L3 - extensions:
2010:01:05-19:25:18 acenn pluto[7169]: | L4 - extension:
2010:01:05-19:25:18 acenn pluto[7169]: | L5 - extnID:
2010:01:05-19:25:18 acenn pluto[7169]: |   'subjectKeyIdentifier'
2010:01:05-19:25:18 acenn pluto[7169]: | L5 - critical:
2010:01:05-19:25:18 acenn pluto[7169]: |   FALSE
2010:01:05-19:25:18 acenn pluto[7169]: | L5 - extnValue:
2010:01:05-19:25:18 acenn pluto[7169]: | L6 - keyIdentifier:
2010:01:05-19:25:18 acenn pluto[7169]: | L4 - extension:
2010:01:05-19:25:18 acenn pluto[7169]: | L5 - extnID:
2010:01:05-19:25:18 acenn pluto[7169]: |   'basicConstraints'
2010:01:05-19:25:18 acenn pluto[7169]: | L5 - critical:
2010:01:05-19:25:18 acenn pluto[7169]: |   FALSE
2010:01:05-19:25:18 acenn pluto[7169]: | L5 - extnValue:
2010:01:05-19:25:18 acenn pluto[7169]: | L6 - basicConstraints:
2010:01:05-19:25:18 acenn pluto[7169]: | L7 - CA:
2010:01:05-19:25:18 acenn pluto[7169]: |   TRUE
2010:01:05-19:25:18 acenn pluto[7169]: | L4 - extension:
2010:01:05-19:25:18 acenn pluto[7169]: | L5 - extnID:
2010:01:05-19:25:18 acenn pluto[7169]: |   'subjectAltName'
2010:01:05-19:25:18 acenn pluto[7169]: | L5 - critical:
2010:01:05-19:25:18 acenn pluto[7169]: |   FALSE
2010:01:05-19:25:18 acenn pluto[7169]: | L5 - extnValue:
2010:01:05-19:25:18 acenn pluto[7169]: | L6 - generalNames:
2010:01:05-19:25:18 acenn pluto[7169]: | L7 - generalName:
2010:01:05-19:25:18 acenn pluto[7169]: | L8 - ipAddress:
2010:01:05-19:25:18 acenn pluto[7169]: |   '127.0.0.1'
2010:01:05-19:25:18 acenn pluto[7169]: | L1 - signatureAlgorithm:
2010:01:05-19:25:18 acenn pluto[7169]: | L2 - algorithmIdentifier:
2010:01:05-19:25:18 acenn pluto[7169]: | L3 - algorithm:
2010:01:05-19:25:18 acenn pluto[7169]: |   'sha-1WithRSAEncryption'
2010:01:05-19:25:18 acenn pluto[7169]: | L1 - signatureValue:
2010:01:05-19:25:18 acenn pluto[7169]: | signature verification:
2010:01:05-19:25:18 acenn pluto[7169]: | L0 - digestInfo:
2010:01:05-19:25:18 acenn pluto[7169]: | L1 - digestAlgorithm:
2010:01:05-19:25:18 acenn pluto[7169]: | L2 - algorithmIdentifier:
2010:01:05-19:25:18 acenn pluto[7169]: | L3 - algorithm:
2010:01:05-19:25:18 acenn pluto[7169]: |   'sha-1'
2010:01:05-19:25:18 acenn pluto[7169]: | L1 - digest:
2010:01:05-19:25:18 acenn pluto[7169]:   loaded ca certificate from '/etc/ipsec.d/cacerts/REF_ZuhEiTCsdi.pem'
2010:01:05-19:25:18 acenn pluto[7169]: |   authcert is already present and identical
2010:01:05-19:25:18 acenn pluto[7169]: |   file content is not binary ASN.1
2010:01:05-19:25:18 acenn pluto[7169]: |   -----BEGIN CERTIFICATE-----
2010:01:05-19:25:18 acenn pluto[7169]: |   -----END CERTIFICATE-----
2010:01:05-19:25:18 acenn pluto[7169]: | L0 - x509:
2010:01:05-19:25:18 acenn pluto[7169]: | L1 - tbsCertificate:
2010:01:05-19:25:18 acenn pluto[7169]: | L2 - DEFAULT v1:
2010:01:05-19:25:18 acenn pluto[7169]: | L3 - version:
2010:01:05-19:25:18 acenn pluto[7169]: |   X.509v3
2010:01:05-19:25:18 acenn pluto[7169]: | L2 - serialNumber:
2010:01:05-19:25:18 acenn pluto[7169]: | L2 - signature:
2010:01:05-19:25:18 acenn pluto[7169]: | L3 - algorithmIdentifier:
2010:01:05-19:25:18 acenn pluto[7169]: | L4 - algorithm:
2010:01:05-19:25:18 acenn pluto[7169]: |   'sha-1WithRSAEncryption'
2010:01:05-19:25:18 acenn pluto[7169]: | L2 - issuer:
2010:01:05-19:25:18 acenn pluto[7169]: |   'C=in, L=pune, O=cybervision, CN=cybervision VPN CA, E=thinvm@gmail.com'
2010:01:05-19:25:18 acenn pluto[7169]: | L2 - validity:
2010:01:05-19:25:18 acenn pluto[7169]: | L3 - notBefore:
2010:01:05-19:25:18 acenn pluto[7169]: | L4 - utcTime:
2010:01:05-19:25:18 acenn pluto[7169]: |   'Dec 19 07:00:55 UTC 2009'
2010:01:05-19:25:18 acenn pluto[7169]: | L3 - notAfter:
2010:01:05-19:25:18 acenn pluto[7169]: | L4 - utcTime:
2010:01:05-19:25:18 acenn pluto[7169]: |   'May 05 07:00:55 UTC 2037'
2010:01:05-19:25:18 acenn pluto[7169]: | L2 - subject:
2010:01:05-19:25:18 acenn pluto[7169]: |   'C=in, L=pune, O=cybervision, CN=cybervision VPN CA, E=thinvm@gmail.com'
2010:01:05-19:25:18 acenn pluto[7169]: | L2 - subjectPublicKeyInfo:
2010:01:05-19:25:18 acenn pluto[7169]: | -- > --
2010:01:05-19:25:18 acenn pluto[7169]: | L0 - subjectPublicKeyInfo:
2010:01:05-19:25:18 acenn pluto[7169]: | L1 - algorithm:
2010:01:05-19:25:18 acenn pluto[7169]: | L2 - algorithmIdentifier:
2010:01:05-19:25:18 acenn pluto[7169]: | L3 - algorithm:
2010:01:05-19:25:18 acenn pluto[7169]: |   'rsaEncryption'
2010:01:05-19:25:18 acenn pluto[7169]: | L1 - subjectPublicKey:
2010:01:05-19:25:18 acenn pluto[7169]: | -- > --
2010:01:05-19:25:18 acenn pluto[7169]: | L0 - RSAPublicKey:
2010:01:05-19:25:18 acenn pluto[7169]: | L1 - modulus:
2010:01:05-19:25:18 acenn pluto[7169]: | L1 - publicExponent:
2010:01:05-19:25:18 acenn pluto[7169]: | -- < --
2010:01:05-19:25:18 acenn pluto[7169]: | -- < --
2010:01:05-19:25:18 acenn pluto[7169]: | L2 - optional extensions:
2010:01:05-19:25:18 acenn pluto[7169]: | L3 - extensions:
2010:01:05-19:25:18 acenn pluto[7169]: | L4 - extension:
2010:01:05-19:25:18 acenn pluto[7169]: | L5 - extnID:
2010:01:05-19:25:18 acenn pluto[7169]: |   'subjectKeyIdentifier'
2010:01:05-19:25:18 acenn pluto[7169]: | L5 - critical:
2010:01:05-19:25:18 acenn pluto[7169]: |   FALSE
2010:01:05-19:25:18 acenn pluto[7169]: | L5 - extnValue:
2010:01:05-19:25:18 acenn pluto[7169]: | L6 - keyIdentifier:
2010:01:05-19:25:18 acenn pluto[7169]: | L4 - extension:
2010:01:05-19:25:18 acenn pluto[7169]: | L5 - extnID:
2010:01:05-19:25:18 acenn pluto[7169]: |   'basicConstraints'
2010:01:05-19:25:18 acenn pluto[7169]: | L5 - critical:
2010:01:05-19:25:18 acenn pluto[7169]: |   FALSE
2010:01:05-19:25:18 acenn pluto[7169]: | L5 - extnValue:
2010:01:05-19:25:18 acenn pluto[7169]: | L6 - basicConstraints:
2010:01:05-19:25:18 acenn pluto[7169]: | L7 - CA:
2010:01:05-19:25:18 acenn pluto[7169]: |   TRUE
2010:01:05-19:25:18 acenn pluto[7169]: | L4 - extension:
2010:01:05-19:25:18 acenn pluto[7169]: | L5 - extnID:
2010:01:05-19:25:18 acenn pluto[7169]: |   'subjectAltName'
2010:01:05-19:25:18 acenn pluto[7169]: | L5 - critical:
2010:01:05-19:25:18 acenn pluto[7169]: |   FALSE
2010:01:05-19:25:18 acenn pluto[7169]: | L5 - extnValue:
2010:01:05-19:25:18 acenn pluto[7169]: | L6 - generalNames:
2010:01:05-19:25:18 acenn pluto[7169]: | L7 - generalName:
2010:01:05-19:25:18 acenn pluto[7169]: | L8 - ipAddress:
2010:01:05-19:25:18 acenn pluto[7169]: |   '127.0.0.1'
2010:01:05-19:25:18 acenn pluto[7169]: | L1 - signatureAlgorithm:
2010:01:05-19:25:18 acenn pluto[7169]: | L2 - algorithmIdentifier:
2010:01:05-19:25:18 acenn pluto[7169]: | L3 - algorithm:
2010:01:05-19:25:18 acenn pluto[7169]: |   'sha-1WithRSAEncryption'
2010:01:05-19:25:18 acenn pluto[7169]: | L1 - signatureValue:
2010:01:05-19:25:18 acenn pluto[7169]: | signature verification:
2010:01:05-19:25:18 acenn pluto[7169]: | L0 - digestInfo:
2010:01:05-19:25:18 acenn pluto[7169]: | L1 - digestAlgorithm:
2010:01:05-19:25:18 acenn pluto[7169]: | L2 - algorithmIdentifier:
2010:01:05-19:25:18 acenn pluto[7169]: | L3 - algorithm:
2010:01:05-19:25:18 acenn pluto[7169]: |   'sha-1'
2010:01:05-19:25:18 acenn pluto[7169]: | L1 - digest:
2010:01:05-19:25:18 acenn pluto[7169]:   loaded ca certificate from '/etc/ipsec.d/cacerts/REF_SSVVVgxDJa.pem'
2010:01:05-19:25:18 acenn pluto[7169]: |   authcert is already present and identical
2010:01:05-19:25:18 acenn pluto[7169]: loading aa certificates from '/etc/ipsec.d/aacerts'
2010:01:05-19:25:18 acenn pluto[7169]: loading ocsp certificates from '/etc/ipsec.d/ocspcerts'
2010:01:05-19:25:18 acenn pluto[7169]: loading attribute certificates from '/etc/ipsec.d/acerts'
2010:01:05-19:25:18 acenn pluto[7169]: Changing to directory '/etc/ipsec.d/crls'
2010:01:05-19:25:18 acenn pluto[7169]: | next event EVENT_REINIT_SECRET in 3599 seconds
2010:01:05-19:27:57 acenn pluto[7169]: | 
2010:01:05-19:27:57 acenn pluto[7169]: | *received whack message
2010:01:05-19:27:57 acenn pluto[7169]: "S_REF_qCtYiwToAT_0": deleting connection
2010:01:05-19:27:57 acenn pluto[7169]: | next event EVENT_REINIT_SECRET in 3440 seconds
2010:01:05-19:27:57 acenn pluto[7169]: | 
2010:01:05-19:27:57 acenn pluto[7169]: | *received whack message
2010:01:05-19:27:57 acenn pluto[7169]: "S_REF_HuOgVAQLsd_0": deleting connection
2010:01:05-19:27:57 acenn pluto[7169]: | next event EVENT_REINIT_SECRET in 3440 seconds
2010:01:05-19:27:57 acenn pluto[7169]: | 
2010:01:05-19:27:57 acenn pluto[7169]: | *received whack message
2010:01:05-19:27:57 acenn pluto[7169]: "S_REF_HuOgVAQLsd_1": deleting connection
2010:01:05-19:27:57 acenn pluto[7169]: | next event EVENT_REINIT_SECRET in 3440 seconds
2010:01:05-19:27:57 acenn pluto[7169]: | 
2010:01:05-19:27:57 acenn pluto[7169]: | *received whack message
2010:01:05-19:27:57 acenn pluto[7169]: "D_REF_zfmTEQwktH_0": deleting connection
2010:01:05-19:27:57 acenn pluto[7169]: | next event EVENT_REINIT_SECRET in 3440 seconds
2010:01:05-19:27:57 acenn pluto[7169]: | 
2010:01:05-19:27:57 acenn pluto[7169]: | *received whack message
2010:01:05-19:27:57 acenn pluto[7169]: "D_REF_zfmTEQwktH_1": deleting connection
2010:01:05-19:27:57 acenn pluto[7169]: | next event EVENT_REINIT_SECRET in 3440 seconds
2010:01:05-19:27:57 acenn pluto[7169]: | 
2010:01:05-19:27:57 acenn pluto[7169]: | *received whack message
2010:01:05-19:27:57 acenn pluto[7169]: listening for IKE messages
2010:01:05-19:27:57 acenn pluto[7169]: | found lo with address 127.0.0.1
2010:01:05-19:27:57 acenn pluto[7169]: | found eth0 with address 192.168.2.100
2010:01:05-19:27:57 acenn pluto[7169]: | found eth0 with address 192.168.1.15
2010:01:05-19:27:57 acenn pluto[7169]: | found eth0 with address 192.168.1.10
2010:01:05-19:27:57 acenn pluto[7169]: | found eth1 with address my_public_ip
2010:01:05-19:27:57 acenn pluto[7169]: | found tun0 with address 10.242.2.1
2010:01:05-19:27:57 acenn pluto[7169]: adding interface eth1/eth1 my_public_ip:500
2010:01:05-19:27:57 acenn pluto[7169]: adding interface eth1/eth1 my_public_ip:4500
2010:01:05-19:27:57 acenn pluto[7169]: | found lo with address 0000:0000:0000:0000:0000:0000:0000:0001
2010:01:05-19:27:57 acenn pluto[7169]: shutting down interface eth1/eth1 192.168.1.125
2010:01:05-19:27:57 acenn pluto[7169]: shutting down interface eth1/eth1 192.168.1.125
2010:01:05-19:27:57 acenn pluto[7169]: forgetting secrets
2010:01:05-19:27:57 acenn pluto[7169]: loading secrets from "/etc/ipsec.secrets"
2010:01:05-19:27:57 acenn pluto[7169]: |   file content is not binary ASN.1
2010:01:05-19:27:57 acenn pluto[7169]: |   -----BEGIN RSA PRIVATE KEY-----
2010:01:05-19:27:57 acenn pluto[7169]: |   -----END RSA PRIVATE KEY-----
2010:01:05-19:27:57 acenn pluto[7169]: | L0 - RSAPrivateKey:
2010:01:05-19:27:57 acenn pluto[7169]: | L1 - version:
2010:01:05-19:27:57 acenn pluto[7169]: | L1 - modulus:
2010:01:05-19:27:57 acenn pluto[7169]: | L1 - publicExponent:
2010:01:05-19:27:57 acenn pluto[7169]: | L1 - privateExponent:
2010:01:05-19:27:57 acenn pluto[7169]: | L1 - prime1:
2010:01:05-19:27:57 acenn pluto[7169]: | L1 - prime2:
2010:01:05-19:27:57 acenn pluto[7169]: | L1 - exponent1:
2010:01:05-19:27:57 acenn pluto[7169]: | L1 - exponent2:
2010:01:05-19:27:57 acenn pluto[7169]: | L1 - coefficient:
2010:01:05-19:27:57 acenn pluto[7169]:   loaded private key from 'REF_sgSKUMhcAO.pem'
2010:01:05-19:27:57 acenn pluto[7169]:   loaded shared key for %any my_public_ip 
2010:01:05-19:27:57 acenn pluto[7169]: | next event EVENT_REINIT_SECRET in 3440 seconds
2010:01:05-19:27:57 acenn pluto[7169]: | 
2010:01:05-19:27:57 acenn pluto[7169]: | *received whack message
2010:01:05-19:27:57 acenn pluto[7169]: | from whack: got --esp=aes256-md5
2010:01:05-19:27:57 acenn pluto[7169]: | esp proposal: AES_CBC_256/HMAC_MD5, 
2010:01:05-19:27:57 acenn pluto[7169]: | from whack: got --ike=aes256-md5-modp1536
2010:01:05-19:27:57 acenn pluto[7169]: | ike proposal: AES_CBC_256/HMAC_MD5/MODP_1536, 
2010:01:05-19:27:57 acenn pluto[7169]: added connection description "S_REF_qCtYiwToAT_0"
2010:01:05-19:27:57 acenn pluto[7169]: | 192.168.2.0/24===my_public_ip[my_public_ip]...%any[%any]==={0.0.0.0/0}
2010:01:05-19:27:57 acenn pluto[7169]: | ike_life: 7800s; ipsec_life: 3600s; rekey_margin: 540s; rekey_fuzz: 100%; keyingtries: 3; policy: PSK+ENCRYPT+TUNNEL
2010:01:05-19:27:57 acenn pluto[7169]: | next event EVENT_REINIT_SECRET in 3440 seconds
2010:01:05-19:27:57 acenn pluto[7169]: | 
2010:01:05-19:27:57 acenn pluto[7169]: | *received whack message
2010:01:05-19:27:57 acenn pluto[7169]: | from whack: got --esp=3des-md5
2010:01:05-19:27:57 acenn pluto[7169]: | esp proposal: 3DES_CBC/HMAC_MD5, 
2010:01:05-19:27:57 acenn pluto[7169]: | from whack: got --ike=3des-sha-modp2048
2010:01:05-19:27:57 acenn pluto[7169]: | ike proposal: 3DES_CBC/HMAC_SHA1/MODP_2048, 
2010:01:05-19:27:57 acenn pluto[7169]: added connection description "S_REF_HuOgVAQLsd_0"
2010:01:05-19:27:57 acenn pluto[7169]: | my_public_ip[my_public_ip]:17/1701...%any[%any]:17/%any==={0.0.0.0/0}
2010:01:05-19:27:57 acenn pluto[7169]: | ike_life: 28800s; ipsec_life: 3600s; rekey_margin: 540s; rekey_fuzz: 100%; keyingtries: 3; policy: PSK+ENCRYPT+DONTREKEY
2010:01:05-19:27:57 acenn pluto[7169]: | next event EVENT_REINIT_SECRET in 3440 seconds
2010:01:05-19:27:57 acenn pluto[7169]: | 
2010:01:05-19:27:57 acenn pluto[7169]: | *received whack message
2010:01:05-19:27:57 acenn pluto[7169]: | from whack: got --esp=3des-md5
2010:01:05-19:27:57 acenn pluto[7169]: | esp proposal: 3DES_CBC/HMAC_MD5, 
2010:01:05-19:27:57 acenn pluto[7169]: | from whack: got --ike=3des-sha-modp2048
2010:01:05-19:27:57 acenn pluto[7169]: | ike proposal: 3DES_CBC/HMAC_SHA1/MODP_2048, 
2010:01:05-19:27:57 acenn pluto[7169]: added connection description "S_REF_HuOgVAQLsd_1"
2010:01:05-19:27:57 acenn pluto[7169]: | my_public_ip[my_public_ip]:17/0...%any[%any]:17/%any==={0.0.0.0/0}
2010:01:05-19:27:57 acenn pluto[7169]: | ike_life: 28800s; ipsec_life: 3600s; rekey_margin: 540s; rekey_fuzz: 100%; keyingtries: 3; policy: PSK+ENCRYPT+DONTREKEY
2010:01:05-19:27:57 acenn pluto[7169]: | next event EVENT_REINIT_SECRET in 3440 seconds
2010:01:05-19:27:57 acenn pluto[7169]: | 
2010:01:05-19:27:57 acenn pluto[7169]: | *received whack message
2010:01:05-19:27:57 acenn pluto[7169]: | from whack: got --esp=aes256-sha2_256
2010:01:05-19:27:57 acenn pluto[7169]: | esp proposal: AES_CBC_256/HMAC_SHA2_256, 
2010:01:05-19:27:57 acenn pluto[7169]: | from whack: got --ike=aes256-sha2_256-modp2048
2010:01:05-19:27:57 acenn pluto[7169]: | ike proposal: AES_CBC_256/HMAC_SHA2_256/MODP_2048, 
2010:01:05-19:27:57 acenn pluto[7169]: |   file content is not binary ASN.1
2010:01:05-19:27:57 acenn pluto[7169]: |   -----BEGIN CERTIFICATE-----
2010:01:05-19:27:57 acenn pluto[7169]: |   -----END CERTIFICATE-----
2010:01:05-19:27:57 acenn pluto[7169]: | L0 - x509:
2010:01:05-19:27:57 acenn pluto[7169]: | L1 - tbsCertificate:
2010:01:05-19:27:57 acenn pluto[7169]: | L2 - DEFAULT v1:
2010:01:05-19:27:57 acenn pluto[7169]: | L3 - version:
2010:01:05-19:27:57 acenn pluto[7169]: |   X.509v3
2010:01:05-19:27:57 acenn pluto[7169]: | L2 - serialNumber:
2010:01:05-19:27:57 acenn pluto[7169]: | L2 - signature:
2010:01:05-19:27:57 acenn pluto[7169]: | L3 - algorithmIdentifier:
2010:01:05-19:27:57 acenn pluto[7169]: | L4 - algorithm:
2010:01:05-19:27:57 acenn pluto[7169]: |   'sha-1WithRSAEncryption'
2010:01:05-19:27:57 acenn pluto[7169]: | L2 - issuer:
2010:01:05-19:27:57 acenn pluto[7169]: |   'C=in, L=pune, O=cybervision, CN=cybervision VPN CA, E=thinvm@gmail.com'
2010:01:05-19:27:57 acenn pluto[7169]: | L2 - validity:
2010:01:05-19:27:57 acenn pluto[7169]: | L3 - notBefore:
2010:01:05-19:27:57 acenn pluto[7169]: | L4 - utcTime:
2010:01:05-19:27:57 acenn pluto[7169]: |   'Dec 22 16:43:13 UTC 2009'
2010:01:05-19:27:57 acenn pluto[7169]: | L3 - notAfter:
2010:01:05-19:27:57 acenn pluto[7169]: | L4 - utcTime:
2010:01:05-19:27:57 acenn pluto[7169]: |   'May 08 16:43:13 UTC 2037'
2010:01:05-19:27:57 acenn pluto[7169]: | L2 - subject:
2010:01:05-19:27:57 acenn pluto[7169]: |   'C=in, L=pune, O=cybervision, CN=acenn.utmxtm.com, E=thinvm@gmail.com'
2010:01:05-19:27:57 acenn pluto[7169]: | L2 - subjectPublicKeyInfo:
2010:01:05-19:27:57 acenn pluto[7169]: | -- > --
2010:01:05-19:27:57 acenn pluto[7169]: | L0 - subjectPublicKeyInfo:
2010:01:05-19:27:57 acenn pluto[7169]: | L1 - algorithm:
2010:01:05-19:27:57 acenn pluto[7169]: | L2 - algorithmIdentifier:
2010:01:05-19:27:57 acenn pluto[7169]: | L3 - algorithm:
2010:01:05-19:27:57 acenn pluto[7169]: |   'rsaEncryption'
2010:01:05-19:27:57 acenn pluto[7169]: | L1 - subjectPublicKey:
2010:01:05-19:27:57 acenn pluto[7169]: | -- > --
2010:01:05-19:27:57 acenn pluto[7169]: | L0 - RSAPublicKey:
2010:01:05-19:27:57 acenn pluto[7169]: | L1 - modulus:
2010:01:05-19:27:57 acenn pluto[7169]: | L1 - publicExponent:
2010:01:05-19:27:57 acenn pluto[7169]: | -- < --
2010:01:05-19:27:57 acenn pluto[7169]: | -- < --
2010:01:05-19:27:57 acenn pluto[7169]: | L2 - optional extensions:
2010:01:05-19:27:57 acenn pluto[7169]: | L3 - extensions:
2010:01:05-19:27:57 acenn pluto[7169]: | L4 - extension:
2010:01:05-19:27:57 acenn pluto[7169]: | L5 - extnID:
2010:01:05-19:27:57 acenn pluto[7169]: |   'subjectKeyIdentifier'
2010:01:05-19:27:57 acenn pluto[7169]: | L5 - critical:
2010:01:05-19:27:57 acenn pluto[7169]: |   FALSE
2010:01:05-19:27:57 acenn pluto[7169]: | L5 - extnValue:
2010:01:05-19:27:57 acenn pluto[7169]: | L6 - keyIdentifier:
2010:01:05-19:27:57 acenn pluto[7169]: | L4 - extension:
2010:01:05-19:27:57 acenn pluto[7169]: | L5 - extnID:
2010:01:05-19:27:57 acenn pluto[7169]: |   'authorityKeyIdentifier'
2010:01:05-19:27:57 acenn pluto[7169]: | L5 - critical:
2010:01:05-19:27:57 acenn pluto[7169]: |   FALSE
2010:01:05-19:27:57 acenn pluto[7169]: | L5 - extnValue:
2010:01:05-19:27:57 acenn pluto[7169]: | L6 - authorityKeyIdentifier:
2010:01:05-19:27:57 acenn pluto[7169]: | L7 - keyIdentifier:
2010:01:05-19:27:57 acenn pluto[7169]: | L7 - authorityCertIssuer:
2010:01:05-19:27:57 acenn pluto[7169]: | L7 - authorityCertSerialNumber:
2010:01:05-19:27:57 acenn pluto[7169]: | L4 - extension:
2010:01:05-19:27:57 acenn pluto[7169]: | L5 - extnID:
2010:01:05-19:27:57 acenn pluto[7169]: |   'subjectAltName'
2010:01:05-19:27:57 acenn pluto[7169]: | L5 - critical:
2010:01:05-19:27:57 acenn pluto[7169]: |   FALSE
2010:01:05-19:27:57 acenn pluto[7169]: | L5 - extnValue:
2010:01:05-19:27:57 acenn pluto[7169]: | L6 - generalNames:
2010:01:05-19:27:57 acenn pluto[7169]: | L7 - generalName:
2010:01:05-19:27:57 acenn pluto[7169]: | L8 - dnsName:
2010:01:05-19:27:57 acenn pluto[7169]: |   'acenn.utmxtm.com'
2010:01:05-19:27:57 acenn pluto[7169]: | L4 - extension:
2010:01:05-19:27:57 acenn pluto[7169]: | L5 - extnID:
2010:01:05-19:27:57 acenn pluto[7169]: |   'basicConstraints'
2010:01:05-19:27:57 acenn pluto[7169]: | L5 - critical:
2010:01:05-19:27:57 acenn pluto[7169]: |   FALSE
2010:01:05-19:27:57 acenn pluto[7169]: | L5 - extnValue:
2010:01:05-19:27:57 acenn pluto[7169]: | L6 - basicConstraints:
2010:01:05-19:27:57 acenn pluto[7169]: | L7 - CA:
2010:01:05-19:27:57 acenn pluto[7169]: |   FALSE
2010:01:05-19:27:57 acenn pluto[7169]: | L4 - extension:
2010:01:05-19:27:57 acenn pluto[7169]: | L5 - extnID:
2010:01:05-19:27:57 acenn pluto[7169]: |   'keyUsage'
2010:01:05-19:27:57 acenn pluto[7169]: | L5 - critical:
2010:01:05-19:27:57 acenn pluto[7169]: |   FALSE
2010:01:05-19:27:57 acenn pluto[7169]: | L5 - extnValue:
2010:01:05-19:27:57 acenn pluto[7169]: | L1 - signatureAlgorithm:
2010:01:05-19:27:57 acenn pluto[7169]: | L2 - algorithmIdentifier:
2010:01:05-19:27:57 acenn pluto[7169]: | L3 - algorithm:
2010:01:05-19:27:57 acenn pluto[7169]: |   'sha-1WithRSAEncryption'
2010:01:05-19:27:57 acenn pluto[7169]: | L1 - signatureValue:
2010:01:05-19:27:57 acenn pluto[7169]:   loaded host certificate from '/etc/ipsec.d/certs/REF_sgSKUMhcAO.pem'
2010:01:05-19:27:57 acenn pluto[7169]: | certificate is valid
2010:01:05-19:27:57 acenn pluto[7169]: |   x509 cert inserted
2010:01:05-19:27:57 acenn pluto[7169]: |   file content is not binary ASN.1
2010:01:05-19:27:57 acenn pluto[7169]: |   -----BEGIN CERTIFICATE-----
2010:01:05-19:27:57 acenn pluto[7169]: |   -----END CERTIFICATE-----
2010:01:05-19:27:57 acenn pluto[7169]: | L0 - x509:
2010:01:05-19:27:57 acenn pluto[7169]: | L1 - tbsCertificate:
2010:01:05-19:27:57 acenn pluto[7169]: | L2 - DEFAULT v1:
2010:01:05-19:27:57 acenn pluto[7169]: | L3 - version:
2010:01:05-19:27:57 acenn pluto[7169]: |   X.509v3
2010:01:05-19:27:57 acenn pluto[7169]: | L2 - serialNumber:
2010:01:05-19:27:57 acenn pluto[7169]: | L2 - signature:
2010:01:05-19:27:57 acenn pluto[7169]: | L3 - algorithmIdentifier:
2010:01:05-19:27:57 acenn pluto[7169]: | L4 - algorithm:
2010:01:05-19:27:57 acenn pluto[7169]: |   'sha-1WithRSAEncryption'
2010:01:05-19:27:57 acenn pluto[7169]: | L2 - issuer:
2010:01:05-19:27:57 acenn pluto[7169]: |   'C=in, L=pune, O=cybervision, CN=cybervision VPN CA, E=thinvm@gmail.com'
2010:01:05-19:27:57 acenn pluto[7169]: | L2 - validity:
2010:01:05-19:27:57 acenn pluto[7169]: | L3 - notBefore:
2010:01:05-19:27:57 acenn pluto[7169]: | L4 - utcTime:
2010:01:05-19:27:57 acenn pluto[7169]: |   'Dec 22 16:43:14 UTC 2009'
2010:01:05-19:27:57 acenn pluto[7169]: | L3 - notAfter:
2010:01:05-19:27:57 acenn pluto[7169]: | L4 - utcTime:
2010:01:05-19:27:57 acenn pluto[7169]: |   'May 08 16:43:14 UTC 2037'
2010:01:05-19:27:57 acenn pluto[7169]: | L2 - subject:
2010:01:05-19:27:57 acenn pluto[7169]: |   'C=in, L=pune, O=cybervision, CN=admin, E=thinvm@gmail.com'
2010:01:05-19:27:57 acenn pluto[7169]: | L2 - subjectPublicKeyInfo:
2010:01:05-19:27:57 acenn pluto[7169]: | -- > --
2010:01:05-19:27:57 acenn pluto[7169]: | L0 - subjectPublicKeyInfo:
2010:01:05-19:27:57 acenn pluto[7169]: | L1 - algorithm:
2010:01:05-19:27:57 acenn pluto[7169]: | L2 - algorithmIdentifier:
2010:01:05-19:27:57 acenn pluto[7169]: | L3 - algorithm:
2010:01:05-19:27:57 acenn pluto[7169]: |   'rsaEncryption'
2010:01:05-19:27:57 acenn pluto[7169]: | L1 - subjectPublicKey:
2010:01:05-19:27:57 acenn pluto[7169]: | -- > --
2010:01:05-19:27:57 acenn pluto[7169]: | L0 - RSAPublicKey:
2010:01:05-19:27:57 acenn pluto[7169]: | L1 - modulus:
2010:01:05-19:27:57 acenn pluto[7169]: | L1 - publicExponent:
2010:01:05-19:27:57 acenn pluto[7169]: | -- < --
2010:01:05-19:27:57 acenn pluto[7169]: | -- < --
2010:01:05-19:27:57 acenn pluto[7169]: | L2 - optional extensions:
2010:01:05-19:27:57 acenn pluto[7169]: | L3 - extensions:
2010:01:05-19:27:57 acenn pluto[7169]: | L4 - extension:
2010:01:05-19:27:57 acenn pluto[7169]: | L5 - extnID:
2010:01:05-19:27:57 acenn pluto[7169]: |   'subjectKeyIdentifier'
2010:01:05-19:27:57 acenn pluto[7169]: | L5 - critical:
2010:01:05-19:27:57 acenn pluto[7169]: |   FALSE
2010:01:05-19:27:57 acenn pluto[7169]: | L5 - extnValue:
2010:01:05-19:27:57 acenn pluto[7169]: | L6 - keyIdentifier:
2010:01:05-19:27:57 acenn pluto[7169]: | L4 - extension:
2010:01:05-19:27:57 acenn pluto[7169]: | L5 - extnID:
2010:01:05-19:27:57 acenn pluto[7169]: |   'authorityKeyIdentifier'
2010:01:05-19:27:57 acenn pluto[7169]: | L5 - critical:
2010:01:05-19:27:57 acenn pluto[7169]: |   FALSE
2010:01:05-19:27:57 acenn pluto[7169]: | L5 - extnValue:
2010:01:05-19:27:57 acenn pluto[7169]: | L6 - authorityKeyIdentifier:
2010:01:05-19:27:57 acenn pluto[7169]: | L7 - keyIdentifier:
2010:01:05-19:27:57 acenn pluto[7169]: | L7 - authorityCertIssuer:
2010:01:05-19:27:57 acenn pluto[7169]: | L7 - authorityCertSerialNumber:
2010:01:05-19:27:57 acenn pluto[7169]: | L4 - extension:
2010:01:05-19:27:57 acenn pluto[7169]: | L5 - extnID:
2010:01:05-19:27:57 acenn pluto[7169]: |   'subjectAltName'
2010:01:05-19:27:57 acenn pluto[7169]: | L5 - critical:
2010:01:05-19:27:57 acenn pluto[7169]: |   FALSE
2010:01:05-19:27:57 acenn pluto[7169]: | L5 - extnValue:
2010:01:05-19:27:57 acenn pluto[7169]: | L6 - generalNames:
2010:01:05-19:27:57 acenn pluto[7169]: | L7 - generalName:
2010:01:05-19:27:57 acenn pluto[7169]: | L8 - rfc822Name:
2010:01:05-19:27:57 acenn pluto[7169]: |   'thinvm@gmail.com'
2010:01:05-19:27:57 acenn pluto[7169]: | L4 - extension:
2010:01:05-19:27:57 acenn pluto[7169]: | L5 - extnID:
2010:01:05-19:27:57 acenn pluto[7169]: |   'basicConstraints'
2010:01:05-19:27:57 acenn pluto[7169]: | L5 - critical:
2010:01:05-19:27:57 acenn pluto[7169]: |   FALSE
2010:01:05-19:27:57 acenn pluto[7169]: | L5 - extnValue:
2010:01:05-19:27:57 acenn pluto[7169]: | L6 - basicConstraints:
2010:01:05-19:27:57 acenn pluto[7169]: | L7 - CA:
2010:01:05-19:27:57 acenn pluto[7169]: |   FALSE
2010:01:05-19:27:57 acenn pluto[7169]: | L4 - extension:
2010:01:05-19:27:57 acenn pluto[7169]: | L5 - extnID:
2010:01:05-19:27:57 acenn pluto[7169]: |   'keyUsage'
2010:01:05-19:27:57 acenn pluto[7169]: | L5 - critical:
2010:01:05-19:27:57 acenn pluto[7169]: |   FALSE
2010:01:05-19:27:57 acenn pluto[7169]: | L5 - extnValue:
2010:01:05-19:27:57 acenn pluto[7169]: | L1 - signatureAlgorithm:
2010:01:05-19:27:57 acenn pluto[7169]: | L2 - algorithmIdentifier:
2010:01:05-19:27:57 acenn pluto[7169]: | L3 - algorithm:
2010:01:05-19:27:57 acenn pluto[7169]: |   'sha-1WithRSAEncryption'
2010:01:05-19:27:57 acenn pluto[7169]: | L1 - signatureValue:
2010:01:05-19:27:57 acenn pluto[7169]:   loaded host certificate from '/etc/ipsec.d/certs/REF_pjUjayNQkE_1d0e492a.pem'
2010:01:05-19:27:57 acenn pluto[7169]:   no subjectAltName matches ID '%any', replaced by subject DN
2010:01:05-19:27:57 acenn pluto[7169]: | certificate is valid
2010:01:05-19:27:57 acenn pluto[7169]: |   x509 cert inserted
2010:01:05-19:27:57 acenn pluto[7169]: added connection description "D_REF_zfmTEQwktH_0"
2010:01:05-19:27:57 acenn pluto[7169]: | 0.0.0.0/0===my_public_ip[acenn.utmxtm.com]...%any[C=in, L=pune, O=cybervision, CN=admin, E=thinvm@gmail.com]===10.242.5.1/32
2010:01:05-19:27:57 acenn pluto[7169]: | ike_life: 7800s; ipsec_life: 3600s; rekey_margin: 540s; rekey_fuzz: 100%; keyingtries: 3; policy: ENCRYPT+TUNNEL+XAUTHRSASIG+XAUTHSERVER
2010:01:05-19:27:57 acenn pluto[7169]: | next event EVENT_REINIT_SECRET in 3440 seconds
2010:01:05-19:27:57 acenn pluto[7169]: | 
2010:01:05-19:27:57 acenn pluto[7169]: | *received whack message
2010:01:05-19:27:57 acenn pluto[7169]: | from whack: got --esp=aes256-sha2_256
2010:01:05-19:27:57 acenn pluto[7169]: | esp proposal: AES_CBC_256/HMAC_SHA2_256, 
2010:01:05-19:27:57 acenn pluto[7169]: | from whack: got --ike=aes256-sha2_256-modp2048
2010:01:05-19:27:57 acenn pluto[7169]: | ike proposal: AES_CBC_256/HMAC_SHA2_256/MODP_2048, 
2010:01:05-19:27:57 acenn pluto[7169]: |   file content is not binary ASN.1
2010:01:05-19:27:57 acenn pluto[7169]: |   -----BEGIN CERTIFICATE-----
2010:01:05-19:27:57 acenn pluto[7169]: |   -----END CERTIFICATE-----
2010:01:05-19:27:57 acenn pluto[7169]: | L0 - x509:
2010:01:05-19:27:57 acenn pluto[7169]: | L1 - tbsCertificate:
2010:01:05-19:27:57 acenn pluto[7169]: | L2 - DEFAULT v1:
2010:01:05-19:27:57 acenn pluto[7169]: | L3 - version:
2010:01:05-19:27:57 acenn pluto[7169]: |   X.509v3
2010:01:05-19:27:57 acenn pluto[7169]: | L2 - serialNumber:
2010:01:05-19:27:57 acenn pluto[7169]: | L2 - signature:
2010:01:05-19:27:57 acenn pluto[7169]: | L3 - algorithmIdentifier:
2010:01:05-19:27:57 acenn pluto[7169]: | L4 - algorithm:
2010:01:05-19:27:57 acenn pluto[7169]: |   'sha-1WithRSAEncryption'
2010:01:05-19:27:57 acenn pluto[7169]: | L2 - issuer:
2010:01:05-19:27:57 acenn pluto[7169]: |   'C=in, L=pune, O=cybervision, CN=cybervision VPN CA, E=thinvm@gmail.com'
2010:01:05-19:27:57 acenn pluto[7169]: | L2 - validity:
2010:01:05-19:27:57 acenn pluto[7169]: | L3 - notBefore:
2010:01:05-19:27:57 acenn pluto[7169]: | L4 - utcTime:
2010:01:05-19:27:57 acenn pluto[7169]: |   'Dec 22 16:43:13 UTC 2009'
2010:01:05-19:27:57 acenn pluto[7169]: | L3 - notAfter:
2010:01:05-19:27:57 acenn pluto[7169]: | L4 - utcTime:
2010:01:05-19:27:57 acenn pluto[7169]: |   'May 08 16:43:13 UTC 2037'
2010:01:05-19:27:57 acenn pluto[7169]: | L2 - subject:
2010:01:05-19:27:57 acenn pluto[7169]: |   'C=in, L=pune, O=cybervision, CN=acenn.utmxtm.com, E=thinvm@gmail.com'
2010:01:05-19:27:57 acenn pluto[7169]: | L2 - subjectPublicKeyInfo:
2010:01:05-19:27:57 acenn pluto[7169]: | -- > --
2010:01:05-19:27:57 acenn pluto[7169]: | L0 - subjectPublicKeyInfo:
2010:01:05-19:27:57 acenn pluto[7169]: | L1 - algorithm:
2010:01:05-19:27:57 acenn pluto[7169]: | L2 - algorithmIdentifier:
2010:01:05-19:27:57 acenn pluto[7169]: | L3 - algorithm:
2010:01:05-19:27:57 acenn pluto[7169]: |   'rsaEncryption'
2010:01:05-19:27:57 acenn pluto[7169]: | L1 - subjectPublicKey:
2010:01:05-19:27:57 acenn pluto[7169]: | -- > --
2010:01:05-19:27:57 acenn pluto[7169]: | L0 - RSAPublicKey:
2010:01:05-19:27:57 acenn pluto[7169]: | L1 - modulus:
2010:01:05-19:27:57 acenn pluto[7169]: | L1 - publicExponent:
2010:01:05-19:27:57 acenn pluto[7169]: | -- < --
2010:01:05-19:27:57 acenn pluto[7169]: | -- < --
2010:01:05-19:27:57 acenn pluto[7169]: | L2 - optional extensions:
2010:01:05-19:27:57 acenn pluto[7169]: | L3 - extensions:
2010:01:05-19:27:57 acenn pluto[7169]: | L4 - extension:
2010:01:05-19:27:57 acenn pluto[7169]: | L5 - extnID:
2010:01:05-19:27:57 acenn pluto[7169]: |   'subjectKeyIdentifier'
2010:01:05-19:27:57 acenn pluto[7169]: | L5 - critical:
2010:01:05-19:27:57 acenn pluto[7169]: |   FALSE
2010:01:05-19:27:57 acenn pluto[7169]: | L5 - extnValue:
2010:01:05-19:27:57 acenn pluto[7169]: | L6 - keyIdentifier:
2010:01:05-19:27:57 acenn pluto[7169]: | L4 - extension:
2010:01:05-19:27:57 acenn pluto[7169]: | L5 - extnID:
2010:01:05-19:27:57 acenn pluto[7169]: |   'authorityKeyIdentifier'
2010:01:05-19:27:57 acenn pluto[7169]: | L5 - critical:
2010:01:05-19:27:57 acenn pluto[7169]: |   FALSE
2010:01:05-19:27:57 acenn pluto[7169]: | L5 - extnValue:
2010:01:05-19:27:57 acenn pluto[7169]: | L6 - authorityKeyIdentifier:
2010:01:05-19:27:57 acenn pluto[7169]: | L7 - keyIdentifier:
2010:01:05-19:27:57 acenn pluto[7169]: | L7 - authorityCertIssuer:
2010:01:05-19:27:57 acenn pluto[7169]: | L7 - authorityCertSerialNumber:
2010:01:05-19:27:57 acenn pluto[7169]: | L4 - extension:
2010:01:05-19:27:57 acenn pluto[7169]: | L5 - extnID:
2010:01:05-19:27:57 acenn pluto[7169]: |   'subjectAltName'
2010:01:05-19:27:57 acenn pluto[7169]: | L5 - critical:
2010:01:05-19:27:57 acenn pluto[7169]: |   FALSE
2010:01:05-19:27:57 acenn pluto[7169]: | L5 - extnValue:
2010:01:05-19:27:57 acenn pluto[7169]: | L6 - generalNames:
2010:01:05-19:27:57 acenn pluto[7169]: | L7 - generalName:
2010:01:05-19:27:57 acenn pluto[7169]: | L8 - dnsName:
2010:01:05-19:27:57 acenn pluto[7169]: |   'acenn.utmxtm.com'
2010:01:05-19:27:57 acenn pluto[7169]: | L4 - extension:
2010:01:05-19:27:57 acenn pluto[7169]: | L5 - extnID:
2010:01:05-19:27:57 acenn pluto[7169]: |   'basicConstraints'
2010:01:05-19:27:57 acenn pluto[7169]: | L5 - critical:
2010:01:05-19:27:57 acenn pluto[7169]: |   FALSE
2010:01:05-19:27:57 acenn pluto[7169]: | L5 - extnValue:
2010:01:05-19:27:57 acenn pluto[7169]: | L6 - basicConstraints:
2010:01:05-19:27:57 acenn pluto[7169]: | L7 - CA:
2010:01:05-19:27:57 acenn pluto[7169]: |   FALSE
2010:01:05-19:27:57 acenn pluto[7169]: | L4 - extension:
2010:01:05-19:27:57 acenn pluto[7169]: | L5 - extnID:
2010:01:05-19:27:57 acenn pluto[7169]: |   'keyUsage'
2010:01:05-19:27:57 acenn pluto[7169]: | L5 - critical:
2010:01:05-19:27:57 acenn pluto[7169]: |   FALSE
2010:01:05-19:27:57 acenn pluto[7169]: | L5 - extnValue:
2010:01:05-19:27:57 acenn pluto[7169]: | L1 - signatureAlgorithm:
2010:01:05-19:27:57 acenn pluto[7169]: | L2 - algorithmIdentifier:
2010:01:05-19:27:57 acenn pluto[7169]: | L3 - algorithm:
2010:01:05-19:27:57 acenn pluto[7169]: |   'sha-1WithRSAEncryption'
2010:01:05-19:27:57 acenn pluto[7169]: | L1 - signatureValue:
2010:01:05-19:27:57 acenn pluto[7169]:   loaded host certificate from '/etc/ipsec.d/certs/REF_sgSKUMhcAO.pem'
2010:01:05-19:27:57 acenn pluto[7169]: | certificate is valid
2010:01:05-19:27:57 acenn pluto[7169]: |   file content is not binary ASN.1
2010:01:05-19:27:57 acenn pluto[7169]: |   -----BEGIN CERTIFICATE-----
2010:01:05-19:27:57 acenn pluto[7169]: |   -----END CERTIFICATE-----
2010:01:05-19:27:57 acenn pluto[7169]: | L0 - x509:
2010:01:05-19:27:57 acenn pluto[7169]: | L1 - tbsCertificate:
2010:01:05-19:27:57 acenn pluto[7169]: | L2 - DEFAULT v1:
2010:01:05-19:27:57 acenn pluto[7169]: | L3 - version:
2010:01:05-19:27:57 acenn pluto[7169]: |   X.509v3
2010:01:05-19:27:57 acenn pluto[7169]: | L2 - serialNumber:
2010:01:05-19:27:57 acenn pluto[7169]: | L2 - signature:
2010:01:05-19:27:57 acenn pluto[7169]: | L3 - algorithmIdentifier:
2010:01:05-19:27:57 acenn pluto[7169]: | L4 - algorithm:
2010:01:05-19:27:57 acenn pluto[7169]: |   'sha-1WithRSAEncryption'
2010:01:05-19:27:57 acenn pluto[7169]: | L2 - issuer:
2010:01:05-19:27:57 acenn pluto[7169]: |   'C=in, L=pune, O=cybervision, CN=cybervision VPN CA, E=thinvm@gmail.com'
2010:01:05-19:27:57 acenn pluto[7169]: | L2 - validity:
2010:01:05-19:27:57 acenn pluto[7169]: | L3 - notBefore:
2010:01:05-19:27:57 acenn pluto[7169]: | L4 - utcTime:
2010:01:05-19:27:57 acenn pluto[7169]: |   'Jan 04 15:54:32 UTC 2010'
2010:01:05-19:27:57 acenn pluto[7169]: | L3 - notAfter:
2010:01:05-19:27:57 acenn pluto[7169]: | L4 - utcTime:
2010:01:05-19:27:57 acenn pluto[7169]: |   'May 21 15:54:32 UTC 2037'
2010:01:05-19:27:57 acenn pluto[7169]: | L2 - subject:
2010:01:05-19:27:57 acenn pluto[7169]: |   'C=in, L=pune, O=cybervision, CN=Bob Alfson, E=BAlfson@MediaSoftUSA.com'
2010:01:05-19:27:57 acenn pluto[7169]: | L2 - subjectPublicKeyInfo:
2010:01:05-19:27:57 acenn pluto[7169]: | -- > --
2010:01:05-19:27:57 acenn pluto[7169]: | L0 - subjectPublicKeyInfo:
2010:01:05-19:27:57 acenn pluto[7169]: | L1 - algorithm:
2010:01:05-19:27:57 acenn pluto[7169]: | L2 - algorithmIdentifier:
2010:01:05-19:27:57 acenn pluto[7169]: | L3 - algorithm:
2010:01:05-19:27:57 acenn pluto[7169]: |   'rsaEncryption'
2010:01:05-19:27:57 acenn pluto[7169]: | L1 - subjectPublicKey:
2010:01:05-19:27:57 acenn pluto[7169]: | -- > --
2010:01:05-19:27:57 acenn pluto[7169]: | L0 - RSAPublicKey:
2010:01:05-19:27:57 acenn pluto[7169]: | L1 - modulus:
2010:01:05-19:27:57 acenn pluto[7169]: | L1 - publicExponent:
2010:01:05-19:27:57 acenn pluto[7169]: | -- < --
2010:01:05-19:27:57 acenn pluto[7169]: | -- < --
2010:01:05-19:27:57 acenn pluto[7169]: | L2 - optional extensions:
2010:01:05-19:27:57 acenn pluto[7169]: | L3 - extensions:
2010:01:05-19:27:57 acenn pluto[7169]: | L4 - extension:
2010:01:05-19:27:57 acenn pluto[7169]: | L5 - extnID:
2010:01:05-19:27:57 acenn pluto[7169]: |   'subjectKeyIdentifier'
2010:01:05-19:27:57 acenn pluto[7169]: | L5 - critical:
2010:01:05-19:27:57 acenn pluto[7169]: |   FALSE
2010:01:05-19:27:57 acenn pluto[7169]: | L5 - extnValue:
2010:01:05-19:27:57 acenn pluto[7169]: | L6 - keyIdentifier:
2010:01:05-19:27:57 acenn pluto[7169]: | L4 - extension:
2010:01:05-19:27:57 acenn pluto[7169]: | L5 - extnID:
2010:01:05-19:27:57 acenn pluto[7169]: |   'authorityKeyIdentifier'
2010:01:05-19:27:57 acenn pluto[7169]: | L5 - critical:
2010:01:05-19:27:57 acenn pluto[7169]: |   FALSE
2010:01:05-19:27:57 acenn pluto[7169]: | L5 - extnValue:
2010:01:05-19:27:57 acenn pluto[7169]: | L6 - authorityKeyIdentifier:
2010:01:05-19:27:57 acenn pluto[7169]: | L7 - keyIdentifier:
2010:01:05-19:27:57 acenn pluto[7169]: | L7 - authorityCertIssuer:
2010:01:05-19:27:57 acenn pluto[7169]: | L7 - authorityCertSerialNumber:
2010:01:05-19:27:57 acenn pluto[7169]: | L4 - extension:
2010:01:05-19:27:57 acenn pluto[7169]: | L5 - extnID:
2010:01:05-19:27:57 acenn pluto[7169]: |   'subjectAltName'
2010:01:05-19:27:57 acenn pluto[7169]: | L5 - critical:
2010:01:05-19:27:57 acenn pluto[7169]: |   FALSE
2010:01:05-19:27:57 acenn pluto[7169]: | L5 - extnValue:
2010:01:05-19:27:57 acenn pluto[7169]: | L6 - generalNames:
2010:01:05-19:27:57 acenn pluto[7169]: | L7 - generalName:
2010:01:05-19:27:57 acenn pluto[7169]: | L8 - rfc822Name:
2010:01:05-19:27:57 acenn pluto[7169]: |   'BAlfson@MediaSoftUSA.com'
2010:01:05-19:27:57 acenn pluto[7169]: | L4 - extension:
2010:01:05-19:27:57 acenn pluto[7169]: | L5 - extnID:
2010:01:05-19:27:57 acenn pluto[7169]: |   'basicConstraints'
2010:01:05-19:27:57 acenn pluto[7169]: | L5 - critical:
2010:01:05-19:27:57 acenn pluto[7169]: |   FALSE
2010:01:05-19:27:57 acenn pluto[7169]: | L5 - extnValue:
2010:01:05-19:27:57 acenn pluto[7169]: | L6 - basicConstraints:
2010:01:05-19:27:57 acenn pluto[7169]: | L7 - CA:
2010:01:05-19:27:57 acenn pluto[7169]: |   FALSE
2010:01:05-19:27:57 acenn pluto[7169]: | L4 - extension:
2010:01:05-19:27:57 acenn pluto[7169]: | L5 - extnID:
2010:01:05-19:27:57 acenn pluto[7169]: |   'keyUsage'
2010:01:05-19:27:57 acenn pluto[7169]: | L5 - critical:
2010:01:05-19:27:57 acenn pluto[7169]: |   FALSE
2010:01:05-19:27:57 acenn pluto[7169]: | L5 - extnValue:
2010:01:05-19:27:57 acenn pluto[7169]: | L1 - signatureAlgorithm:
2010:01:05-19:27:57 acenn pluto[7169]: | L2 - algorithmIdentifier:
2010:01:05-19:27:57 acenn pluto[7169]: | L3 - algorithm:
2010:01:05-19:27:57 acenn pluto[7169]: |   'sha-1WithRSAEncryption'
2010:01:05-19:27:57 acenn pluto[7169]: | L1 - signatureValue:
2010:01:05-19:27:57 acenn pluto[7169]:   loaded host certificate from '/etc/ipsec.d/certs/REF_XExftYnBJC_1ebd8fb8.pem'
2010:01:05-19:27:57 acenn pluto[7169]:   no subjectAltName matches ID '%any', replaced by subject DN
2010:01:05-19:27:57 acenn pluto[7169]: | certificate is valid
2010:01:05-19:27:57 acenn pluto[7169]: |   x509 cert inserted
2010:01:05-19:27:57 acenn pluto[7169]: added connection description "D_REF_zfmTEQwktH_1"
2010:01:05-19:27:57 acenn pluto[7169]: | 0.0.0.0/0===my_public_ip[acenn.utmxtm.com]...%any[C=in, L=pune, O=cybervision, CN=Bob Alfson, E=BAlfson@MediaSoftUSA.com]===10.242.5.2/32
2010:01:05-19:27:57 acenn pluto[7169]: | ike_life: 7800s; ipsec_life: 3600s; rekey_margin: 540s; rekey_fuzz: 100%; keyingtries: 3; policy: ENCRYPT+TUNNEL+XAUTHRSASIG+XAUTHSERVER
2010:01:05-19:27:57 acenn pluto[7169]: | next event EVENT_REINIT_SECRET in 3440 seconds
2010:01:05-19:27:57 acenn pluto[7169]: | 
2010:01:05-19:27:57 acenn pluto[7169]: | *received whack message
2010:01:05-19:27:57 acenn pluto[7169]: forgetting secrets
2010:01:05-19:27:57 acenn pluto[7169]: loading secrets from "/etc/ipsec.secrets"
2010:01:05-19:27:57 acenn pluto[7169]: |   file content is not binary ASN.1
2010:01:05-19:27:57 acenn pluto[7169]: |   -----BEGIN RSA PRIVATE KEY-----
2010:01:05-19:27:57 acenn pluto[7169]: |   -----END RSA PRIVATE KEY-----
2010:01:05-19:27:57 acenn pluto[7169]: | L0 - RSAPrivateKey:
2010:01:05-19:27:57 acenn pluto[7169]: | L1 - version:
2010:01:05-19:27:57 acenn pluto[7169]: | L1 - modulus:
2010:01:05-19:27:57 acenn pluto[7169]: | L1 - publicExponent:
2010:01:05-19:27:57 acenn pluto[7169]: | L1 - privateExponent:
2010:01:05-19:27:57 acenn pluto[7169]: | L1 - prime1:
2010:01:05-19:27:57 acenn pluto[7169]: | L1 - prime2:
2010:01:05-19:27:57 acenn pluto[7169]: | L1 - exponent1:
2010:01:05-19:27:57 acenn pluto[7169]: | L1 - exponent2:
2010:01:05-19:27:57 acenn pluto[7169]: | L1 - coefficient:
2010:01:05-19:27:57 acenn pluto[7169]:   loaded private key from 'REF_sgSKUMhcAO.pem'
2010:01:05-19:27:57 acenn pluto[7169]:   loaded shared key for %any my_public_ip 
2010:01:05-19:27:57 acenn pluto[7169]: loading ca certificates from '/etc/ipsec.d/cacerts'
2010:01:05-19:27:57 acenn pluto[7169]: |   file content is not binary ASN.1
2010:01:05-19:27:57 acenn pluto[7169]: |   -----BEGIN CERTIFICATE-----
2010:01:05-19:27:57 acenn pluto[7169]: |   -----END CERTIFICATE-----
2010:01:05-19:27:57 acenn pluto[7169]: | L0 - x509:
2010:01:05-19:27:57 acenn pluto[7169]: | L1 - tbsCertificate:
2010:01:05-19:27:57 acenn pluto[7169]: | L2 - DEFAULT v1:
2010:01:05-19:27:57 acenn pluto[7169]: | L3 - version:
2010:01:05-19:27:57 acenn pluto[7169]: |   X.509v3
2010:01:05-19:27:57 acenn pluto[7169]: | L2 - serialNumber:
2010:01:05-19:27:57 acenn pluto[7169]: | L2 - signature:
2010:01:05-19:27:57 acenn pluto[7169]: | L3 - algorithmIdentifier:
2010:01:05-19:27:57 acenn pluto[7169]: | L4 - algorithm:
2010:01:05-19:27:57 acenn pluto[7169]: |   'md5WithRSAEncryption'
2010:01:05-19:27:57 acenn pluto[7169]: | L2 - issuer:
2010:01:05-19:27:57 acenn pluto[7169]: |   'C=in, L=pune, O=karvid, CN=karvid VPN CA, E=postmaster@karvid.com'
2010:01:05-19:27:57 acenn pluto[7169]: | L2 - validity:
2010:01:05-19:27:57 acenn pluto[7169]: | L3 - notBefore:
2010:01:05-19:27:57 acenn pluto[7169]: | L4 - utcTime:
2010:01:05-19:27:57 acenn pluto[7169]: |   'Jun 13 12:16:10 UTC 2009'
2010:01:05-19:27:57 acenn pluto[7169]: | L3 - notAfter:
2010:01:05-19:27:57 acenn pluto[7169]: | L4 - utcTime:
2010:01:05-19:27:57 acenn pluto[7169]: |   'Oct 28 12:16:10 UTC 2036'
2010:01:05-19:27:57 acenn pluto[7169]: | L2 - subject:
2010:01:05-19:27:57 acenn pluto[7169]: |   'C=in, L=pune, O=karvid, CN=karvid VPN CA, E=postmaster@karvid.com'
2010:01:05-19:27:57 acenn pluto[7169]: | L2 - subjectPublicKeyInfo:
2010:01:05-19:27:57 acenn pluto[7169]: | -- > --
2010:01:05-19:27:57 acenn pluto[7169]: | L0 - subjectPublicKeyInfo:
2010:01:05-19:27:57 acenn pluto[7169]: | L1 - algorithm:
2010:01:05-19:27:57 acenn pluto[7169]: | L2 - algorithmIdentifier:
2010:01:05-19:27:57 acenn pluto[7169]: | L3 - algorithm:
2010:01:05-19:27:57 acenn pluto[7169]: |   'rsaEncryption'
2010:01:05-19:27:57 acenn pluto[7169]: | L1 - subjectPublicKey:
2010:01:05-19:27:57 acenn pluto[7169]: | -- > --
2010:01:05-19:27:57 acenn pluto[7169]: | L0 - RSAPublicKey:
2010:01:05-19:27:57 acenn pluto[7169]: | L1 - modulus:
2010:01:05-19:27:57 acenn pluto[7169]: | L1 - publicExponent:
2010:01:05-19:27:57 acenn pluto[7169]: | -- < --
2010:01:05-19:27:57 acenn pluto[7169]: | -- < --
2010:01:05-19:27:57 acenn pluto[7169]: | L2 - optional extensions:
2010:01:05-19:27:57 acenn pluto[7169]: | L3 - extensions:
2010:01:05-19:27:57 acenn pluto[7169]: | L4 - extension:
2010:01:05-19:27:57 acenn pluto[7169]: | L5 - extnID:
2010:01:05-19:27:57 acenn pluto[7169]: |   'subjectKeyIdentifier'
2010:01:05-19:27:57 acenn pluto[7169]: | L5 - critical:
2010:01:05-19:27:57 acenn pluto[7169]: |   FALSE
2010:01:05-19:27:57 acenn pluto[7169]: | L5 - extnValue:
2010:01:05-19:27:57 acenn pluto[7169]: | L6 - keyIdentifier:
2010:01:05-19:27:57 acenn pluto[7169]: | L4 - extension:
2010:01:05-19:27:57 acenn pluto[7169]: | L5 - extnID:
2010:01:05-19:27:57 acenn pluto[7169]: |   'basicConstraints'
2010:01:05-19:27:57 acenn pluto[7169]: | L5 - critical:
2010:01:05-19:27:57 acenn pluto[7169]: |   FALSE
2010:01:05-19:27:57 acenn pluto[7169]: | L5 - extnValue:
2010:01:05-19:27:57 acenn pluto[7169]: | L6 - basicConstraints:
2010:01:05-19:27:57 acenn pluto[7169]: | L7 - CA:
2010:01:05-19:27:57 acenn pluto[7169]: |   TRUE
2010:01:05-19:27:57 acenn pluto[7169]: | L4 - extension:
2010:01:05-19:27:57 acenn pluto[7169]: | L5 - extnID:
2010:01:05-19:27:57 acenn pluto[7169]: |   'subjectAltName'
2010:01:05-19:27:57 acenn pluto[7169]: | L5 - critical:
2010:01:05-19:27:57 acenn pluto[7169]: |   FALSE
2010:01:05-19:27:57 acenn pluto[7169]: | L5 - extnValue:
2010:01:05-19:27:57 acenn pluto[7169]: | L6 - generalNames:
2010:01:05-19:27:57 acenn pluto[7169]: | L7 - generalName:
2010:01:05-19:27:57 acenn pluto[7169]: | L8 - ipAddress:
2010:01:05-19:27:57 acenn pluto[7169]: |   '127.0.0.1'
2010:01:05-19:27:57 acenn pluto[7169]: | L1 - signatureAlgorithm:
2010:01:05-19:27:57 acenn pluto[7169]: | L2 - algorithmIdentifier:
2010:01:05-19:27:57 acenn pluto[7169]: | L3 - algorithm:
2010:01:05-19:27:57 acenn pluto[7169]: |   'md5WithRSAEncryption'
2010:01:05-19:27:57 acenn pluto[7169]: | L1 - signatureValue:
2010:01:05-19:27:57 acenn pluto[7169]: | signature verification:
2010:01:05-19:27:57 acenn pluto[7169]: | L0 - digestInfo:
2010:01:05-19:27:57 acenn pluto[7169]: | L1 - digestAlgorithm:
2010:01:05-19:27:57 acenn pluto[7169]: | L2 - algorithmIdentifier:
2010:01:05-19:27:57 acenn pluto[7169]: | L3 - algorithm:
2010:01:05-19:27:57 acenn pluto[7169]: |   'md5'
2010:01:05-19:27:57 acenn pluto[7169]: | L1 - digest:
2010:01:05-19:27:57 acenn pluto[7169]:   loaded ca certificate from '/etc/ipsec.d/cacerts/REF_RwwihhYnGO.pem'
2010:01:05-19:27:57 acenn pluto[7169]: |   authcert is already present and identical
2010:01:05-19:27:57 acenn pluto[7169]: |   file content is not binary ASN.1
2010:01:05-19:27:57 acenn pluto[7169]: |   -----BEGIN CERTIFICATE-----
2010:01:05-19:27:57 acenn pluto[7169]: |   -----END CERTIFICATE-----
2010:01:05-19:27:57 acenn pluto[7169]: | L0 - x509:
2010:01:05-19:27:57 acenn pluto[7169]: | L1 - tbsCertificate:
2010:01:05-19:27:57 acenn pluto[7169]: | L2 - DEFAULT v1:
2010:01:05-19:27:57 acenn pluto[7169]: | L3 - version:
2010:01:05-19:27:57 acenn pluto[7169]: |   X.509v3
2010:01:05-19:27:57 acenn pluto[7169]: | L2 - serialNumber:
2010:01:05-19:27:57 acenn pluto[7169]: | L2 - signature:
2010:01:05-19:27:57 acenn pluto[7169]: | L3 - algorithmIdentifier:
2010:01:05-19:27:57 acenn pluto[7169]: | L4 - algorithm:
2010:01:05-19:27:57 acenn pluto[7169]: |   'sha-1WithRSAEncryption'
2010:01:05-19:27:57 acenn pluto[7169]: | L2 - issuer:
2010:01:05-19:27:57 acenn pluto[7169]: |   'C=in, L=pune, O=cybervision, CN=cybervision VPN CA, E=thinvm@gmail.com'
2010:01:05-19:27:57 acenn pluto[7169]: | L2 - validity:
2010:01:05-19:27:57 acenn pluto[7169]: | L3 - notBefore:
2010:01:05-19:27:57 acenn pluto[7169]: | L4 - utcTime:
2010:01:05-19:27:57 acenn pluto[7169]: |   'Dec 22 16:43:12 UTC 2009'
2010:01:05-19:27:57 acenn pluto[7169]: | L3 - notAfter:
2010:01:05-19:27:57 acenn pluto[7169]: | L4 - utcTime:
2010:01:05-19:27:57 acenn pluto[7169]: |   'May 08 16:43:12 UTC 2037'
2010:01:05-19:27:57 acenn pluto[7169]: | L2 - subject:
2010:01:05-19:27:57 acenn pluto[7169]: |   'C=in, L=pune, O=cybervision, CN=cybervision VPN CA, E=thinvm@gmail.com'
2010:01:05-19:27:57 acenn pluto[7169]: | L2 - subjectPublicKeyInfo:
2010:01:05-19:27:57 acenn pluto[7169]: | -- > --
2010:01:05-19:27:57 acenn pluto[7169]: | L0 - subjectPublicKeyInfo:
2010:01:05-19:27:57 acenn pluto[7169]: | L1 - algorithm:
2010:01:05-19:27:57 acenn pluto[7169]: | L2 - algorithmIdentifier:
2010:01:05-19:27:57 acenn pluto[7169]: | L3 - algorithm:
2010:01:05-19:27:57 acenn pluto[7169]: |   'rsaEncryption'
2010:01:05-19:27:57 acenn pluto[7169]: | L1 - subjectPublicKey:
2010:01:05-19:27:57 acenn pluto[7169]: | -- > --
2010:01:05-19:27:57 acenn pluto[7169]: | L0 - RSAPublicKey:
2010:01:05-19:27:57 acenn pluto[7169]: | L1 - modulus:
2010:01:05-19:27:57 acenn pluto[7169]: | L1 - publicExponent:
2010:01:05-19:27:57 acenn pluto[7169]: | -- < --
2010:01:05-19:27:57 acenn pluto[7169]: | -- < --
2010:01:05-19:27:57 acenn pluto[7169]: | L2 - optional extensions:
2010:01:05-19:27:57 acenn pluto[7169]: | L3 - extensions:
2010:01:05-19:27:57 acenn pluto[7169]: | L4 - extension:
2010:01:05-19:27:57 acenn pluto[7169]: | L5 - extnID:
2010:01:05-19:27:57 acenn pluto[7169]: |   'subjectKeyIdentifier'
2010:01:05-19:27:57 acenn pluto[7169]: | L5 - critical:
2010:01:05-19:27:57 acenn pluto[7169]: |   FALSE
2010:01:05-19:27:57 acenn pluto[7169]: | L5 - extnValue:
2010:01:05-19:27:57 acenn pluto[7169]: | L6 - keyIdentifier:
2010:01:05-19:27:57 acenn pluto[7169]: | L4 - extension:
2010:01:05-19:27:57 acenn pluto[7169]: | L5 - extnID:
2010:01:05-19:27:57 acenn pluto[7169]: |   'basicConstraints'
2010:01:05-19:27:57 acenn pluto[7169]: | L5 - critical:
2010:01:05-19:27:57 acenn pluto[7169]: |   FALSE
2010:01:05-19:27:57 acenn pluto[7169]: | L5 - extnValue:
2010:01:05-19:27:57 acenn pluto[7169]: | L6 - basicConstraints:
2010:01:05-19:27:57 acenn pluto[7169]: | L7 - CA:
2010:01:05-19:27:57 acenn pluto[7169]: |   TRUE
2010:01:05-19:27:57 acenn pluto[7169]: | L4 - extension:
2010:01:05-19:27:57 acenn pluto[7169]: | L5 - extnID:
2010:01:05-19:27:57 acenn pluto[7169]: |   'subjectAltName'
2010:01:05-19:27:57 acenn pluto[7169]: | L5 - critical:
2010:01:05-19:27:57 acenn pluto[7169]: |   FALSE
2010:01:05-19:27:57 acenn pluto[7169]: | L5 - extnValue:
2010:01:05-19:27:57 acenn pluto[7169]: | L6 - generalNames:
2010:01:05-19:27:57 acenn pluto[7169]: | L7 - generalName:
2010:01:05-19:27:57 acenn pluto[7169]: | L8 - ipAddress:
2010:01:05-19:27:57 acenn pluto[7169]: |   '127.0.0.1'
2010:01:05-19:27:57 acenn pluto[7169]: | L1 - signatureAlgorithm:
2010:01:05-19:27:57 acenn pluto[7169]: | L2 - algorithmIdentifier:
2010:01:05-19:27:58 acenn pluto[7169]: | L3 - algorithm:
2010:01:05-19:27:58 acenn pluto[7169]: |   'sha-1WithRSAEncryption'
2010:01:05-19:27:58 acenn pluto[7169]: | L1 - signatureValue:
2010:01:05-19:27:58 acenn pluto[7169]: | signature verification:
2010:01:05-19:27:58 acenn pluto[7169]: | L0 - digestInfo:
2010:01:05-19:27:58 acenn pluto[7169]: | L1 - digestAlgorithm:
2010:01:05-19:27:58 acenn pluto[7169]: | L2 - algorithmIdentifier:
2010:01:05-19:27:58 acenn pluto[7169]: | L3 - algorithm:
2010:01:05-19:27:58 acenn pluto[7169]: |   'sha-1'
2010:01:05-19:27:58 acenn pluto[7169]: | L1 - digest:
2010:01:05-19:27:58 acenn pluto[7169]:   loaded ca certificate from '/etc/ipsec.d/cacerts/REF_ZuhEiTCsdi.pem'
2010:01:05-19:27:58 acenn pluto[7169]: |   authcert is already present and identical
2010:01:05-19:27:58 acenn pluto[7169]: |   file content is not binary ASN.1
2010:01:05-19:27:58 acenn pluto[7169]: |   -----BEGIN CERTIFICATE-----
2010:01:05-19:27:58 acenn pluto[7169]: |   -----END CERTIFICATE-----
2010:01:05-19:27:58 acenn pluto[7169]: | L0 - x509:
2010:01:05-19:27:58 acenn pluto[7169]: | L1 - tbsCertificate:
2010:01:05-19:27:58 acenn pluto[7169]: | L2 - DEFAULT v1:
2010:01:05-19:27:58 acenn pluto[7169]: | L3 - version:
2010:01:05-19:27:58 acenn pluto[7169]: |   X.509v3
2010:01:05-19:27:58 acenn pluto[7169]: | L2 - serialNumber:
2010:01:05-19:27:58 acenn pluto[7169]: | L2 - signature:
2010:01:05-19:27:58 acenn pluto[7169]: | L3 - algorithmIdentifier:
2010:01:05-19:27:58 acenn pluto[7169]: | L4 - algorithm:
2010:01:05-19:27:58 acenn pluto[7169]: |   'sha-1WithRSAEncryption'
2010:01:05-19:27:58 acenn pluto[7169]: | L2 - issuer:
2010:01:05-19:27:58 acenn pluto[7169]: |   'C=in, L=pune, O=cybervision, CN=cybervision VPN CA, E=thinvm@gmail.com'
2010:01:05-19:27:58 acenn pluto[7169]: | L2 - validity:
2010:01:05-19:27:58 acenn pluto[7169]: | L3 - notBefore:
2010:01:05-19:27:58 acenn pluto[7169]: | L4 - utcTime:
2010:01:05-19:27:58 acenn pluto[7169]: |   'Dec 19 07:00:55 UTC 2009'
2010:01:05-19:27:58 acenn pluto[7169]: | L3 - notAfter:
2010:01:05-19:27:58 acenn pluto[7169]: | L4 - utcTime:
2010:01:05-19:27:58 acenn pluto[7169]: |   'May 05 07:00:55 UTC 2037'
2010:01:05-19:27:58 acenn pluto[7169]: | L2 - subject:
2010:01:05-19:27:58 acenn pluto[7169]: |   'C=in, L=pune, O=cybervision, CN=cybervision VPN CA, E=thinvm@gmail.com'
2010:01:05-19:27:58 acenn pluto[7169]: | L2 - subjectPublicKeyInfo:
2010:01:05-19:27:58 acenn pluto[7169]: | -- > --
2010:01:05-19:27:58 acenn pluto[7169]: | L0 - subjectPublicKeyInfo:
2010:01:05-19:27:58 acenn pluto[7169]: | L1 - algorithm:
2010:01:05-19:27:58 acenn pluto[7169]: | L2 - algorithmIdentifier:
2010:01:05-19:27:58 acenn pluto[7169]: | L3 - algorithm:
2010:01:05-19:27:58 acenn pluto[7169]: |   'rsaEncryption'
2010:01:05-19:27:58 acenn pluto[7169]: | L1 - subjectPublicKey:
2010:01:05-19:27:58 acenn pluto[7169]: | -- > --
2010:01:05-19:27:58 acenn pluto[7169]: | L0 - RSAPublicKey:
2010:01:05-19:27:58 acenn pluto[7169]: | L1 - modulus:
2010:01:05-19:27:58 acenn pluto[7169]: | L1 - publicExponent:
2010:01:05-19:27:58 acenn pluto[7169]: | -- < --
2010:01:05-19:27:58 acenn pluto[7169]: | -- < --
2010:01:05-19:27:58 acenn pluto[7169]: | L2 - optional extensions:
2010:01:05-19:27:58 acenn pluto[7169]: | L3 - extensions:
2010:01:05-19:27:58 acenn pluto[7169]: | L4 - extension:
2010:01:05-19:27:58 acenn pluto[7169]: | L5 - extnID:
2010:01:05-19:27:58 acenn pluto[7169]: |   'subjectKeyIdentifier'
2010:01:05-19:27:58 acenn pluto[7169]: | L5 - critical:
2010:01:05-19:27:58 acenn pluto[7169]: |   FALSE
2010:01:05-19:27:58 acenn pluto[7169]: | L5 - extnValue:
2010:01:05-19:27:58 acenn pluto[7169]: | L6 - keyIdentifier:
2010:01:05-19:27:58 acenn pluto[7169]: | L4 - extension:
2010:01:05-19:27:58 acenn pluto[7169]: | L5 - extnID:
2010:01:05-19:27:58 acenn pluto[7169]: |   'basicConstraints'
2010:01:05-19:27:58 acenn pluto[7169]: | L5 - critical:
2010:01:05-19:27:58 acenn pluto[7169]: |   FALSE
2010:01:05-19:27:58 acenn pluto[7169]: | L5 - extnValue:
2010:01:05-19:27:58 acenn pluto[7169]: | L6 - basicConstraints:
2010:01:05-19:27:58 acenn pluto[7169]: | L7 - CA:
2010:01:05-19:27:58 acenn pluto[7169]: |   TRUE
2010:01:05-19:27:58 acenn pluto[7169]: | L4 - extension:
2010:01:05-19:27:58 acenn pluto[7169]: | L5 - extnID:
2010:01:05-19:27:58 acenn pluto[7169]: |   'subjectAltName'
2010:01:05-19:27:58 acenn pluto[7169]: | L5 - critical:
2010:01:05-19:27:58 acenn pluto[7169]: |   FALSE
2010:01:05-19:27:58 acenn pluto[7169]: | L5 - extnValue:
2010:01:05-19:27:58 acenn pluto[7169]: | L6 - generalNames:
2010:01:05-19:27:58 acenn pluto[7169]: | L7 - generalName:
2010:01:05-19:27:58 acenn pluto[7169]: | L8 - ipAddress:
2010:01:05-19:27:58 acenn pluto[7169]: |   '127.0.0.1'
2010:01:05-19:27:58 acenn pluto[7169]: | L1 - signatureAlgorithm:
2010:01:05-19:27:58 acenn pluto[7169]: | L2 - algorithmIdentifier:
2010:01:05-19:27:58 acenn pluto[7169]: | L3 - algorithm:
2010:01:05-19:27:58 acenn pluto[7169]: |   'sha-1WithRSAEncryption'
2010:01:05-19:27:58 acenn pluto[7169]: | L1 - signatureValue:
2010:01:05-19:27:58 acenn pluto[7169]: | signature verification:
2010:01:05-19:27:58 acenn pluto[7169]: | L0 - digestInfo:
2010:01:05-19:27:58 acenn pluto[7169]: | L1 - digestAlgorithm:
2010:01:05-19:27:58 acenn pluto[7169]: | L2 - algorithmIdentifier:
2010:01:05-19:27:58 acenn pluto[7169]: | L3 - algorithm:
2010:01:05-19:27:58 acenn pluto[7169]: |   'sha-1'
2010:01:05-19:27:58 acenn pluto[7169]: | L1 - digest:
2010:01:05-19:27:58 acenn pluto[7169]:   loaded ca certificate from '/etc/ipsec.d/cacerts/REF_SSVVVgxDJa.pem'
2010:01:05-19:27:58 acenn pluto[7169]: |   authcert is already present and identical
2010:01:05-19:27:58 acenn pluto[7169]: loading aa certificates from '/etc/ipsec.d/aacerts'
2010:01:05-19:27:58 acenn pluto[7169]: loading ocsp certificates from '/etc/ipsec.d/ocspcerts'
2010:01:05-19:27:58 acenn pluto[7169]: loading attribute certificates from '/etc/ipsec.d/acerts'
2010:01:05-19:27:58 acenn pluto[7169]: Changing to directory '/etc/ipsec.d/crls'
2010:01:05-19:27:58 acenn pluto[7169]: | next event EVENT_REINIT_SECRET in 3439 seconds
2010:01:05-19:29:52 acenn pluto[7169]: | 
2010:01:05-19:29:52 acenn pluto[7169]: | *received 1160 bytes from 192.168.2.150:1193 on eth1
2010:01:05-19:29:52 acenn pluto[7169]: | **parse ISAKMP Message:
2010:01:05-19:29:52 acenn pluto[7169]: |    initiator cookie:
2010:01:05-19:29:52 acenn pluto[7169]: |   d4 47 00 c4  46 4d 09 09
2010:01:05-19:29:52 acenn pluto[7169]: |    responder cookie:
2010:01:05-19:29:52 acenn pluto[7169]: |   00 00 00 00  00 00 00 00
2010:01:05-19:29:52 acenn pluto[7169]: |    next payload type: ISAKMP_NEXT_SA
2010:01:05-19:29:52 acenn pluto[7169]: |    ISAKMP version: ISAKMP Version 1.0
2010:01:05-19:29:52 acenn pluto[7169]: |    exchange type: ISAKMP_XCHG_IDPROT
2010:01:05-19:29:52 acenn pluto[7169]: |    flags: none
2010:01:05-19:29:52 acenn pluto[7169]: |    message ID:  00 00 00 00
2010:01:05-19:29:52 acenn pluto[7169]: |    length: 1144
2010:01:05-19:29:52 acenn pluto[7169]: packet from 192.168.2.150:1193: size (1160) differs from size specified in ISAKMP HDR (1144)
2010:01:05-19:29:52 acenn pluto[7169]: packet from 192.168.2.150:1193: Cisco VPN client appends 16 surplus NULL bytes
2010:01:05-19:29:52 acenn pluto[7169]: | ***parse ISAKMP Security Association Payload:
2010:01:05-19:29:52 acenn pluto[7169]: |    next payload type: ISAKMP_NEXT_VID
2010:01:05-19:29:52 acenn pluto[7169]: |    length: 1020
2010:01:05-19:29:52 acenn pluto[7169]: |    DOI: ISAKMP_DOI_IPSEC
2010:01:05-19:29:52 acenn pluto[7169]: | ***parse ISAKMP Vendor ID Payload:
2010:01:05-19:29:52 acenn pluto[7169]: |    next payload type: ISAKMP_NEXT_VID
2010:01:05-19:29:52 acenn pluto[7169]: |    length: 12
2010:01:05-19:29:52 acenn pluto[7169]: | ***parse ISAKMP Vendor ID Payload:
2010:01:05-19:29:52 acenn pluto[7169]: |    next payload type: ISAKMP_NEXT_VID
2010:01:05-19:29:52 acenn pluto[7169]: |    length: 20
2010:01:05-19:29:52 acenn pluto[7169]: | ***parse ISAKMP Vendor ID Payload:
2010:01:05-19:29:52 acenn pluto[7169]: |    next payload type: ISAKMP_NEXT_VID
2010:01:05-19:29:52 acenn pluto[7169]: |    length: 24
2010:01:05-19:29:52 acenn pluto[7169]: | ***parse ISAKMP Vendor ID Payload:
2010:01:05-19:29:52 acenn pluto[7169]: |    next payload type: ISAKMP_NEXT_VID
2010:01:05-19:29:52 acenn pluto[7169]: |    length: 20
2010:01:05-19:29:52 acenn pluto[7169]: | ***parse ISAKMP Vendor ID Payload:
2010:01:05-19:29:52 acenn pluto[7169]: |    next payload type: ISAKMP_NEXT_NONE
2010:01:05-19:29:52 acenn pluto[7169]: |    length: 20
2010:01:05-19:29:52 acenn pluto[7169]: packet from 192.168.2.150:1193: received Vendor ID payload [XAUTH]
2010:01:05-19:29:52 acenn pluto[7169]: packet from 192.168.2.150:1193: received Vendor ID payload [Dead Peer Detection]
2010:01:05-19:29:52 acenn pluto[7169]: packet from 192.168.2.150:1193: ignoring Vendor ID payload [FRAGMENTATION 80000000]
2010:01:05-19:29:52 acenn pluto[7169]: packet from 192.168.2.150:1193: received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02_n]
2010:01:05-19:29:52 acenn pluto[7169]: packet from 192.168.2.150:1193: ignoring Vendor ID payload [Cisco-Unity]
2010:01:05-19:29:52 acenn pluto[7169]: | ****parse IPsec DOI SIT:
2010:01:05-19:29:52 acenn pluto[7169]: |    IPsec DOI SIT: SIT_IDENTITY_ONLY
2010:01:05-19:29:52 acenn pluto[7169]: | ****parse ISAKMP Proposal Payload:
2010:01:05-19:29:52 acenn pluto[7169]: |    next payload type: ISAKMP_NEXT_NONE
2010:01:05-19:29:52 acenn pluto[7169]: |    length: 1008
2010:01:05-19:29:52 acenn pluto[7169]: |    proposal number: 1
2010:01:05-19:29:52 acenn pluto[7169]: |    protocol ID: PROTO_ISAKMP
2010:01:05-19:29:52 acenn pluto[7169]: |    SPI size: 0
2010:01:05-19:29:52 acenn pluto[7169]: |    number of transforms: 26
2010:01:05-19:29:52 acenn pluto[7169]: | *****parse ISAKMP Transform Payload (ISAKMP):
2010:01:05-19:29:52 acenn pluto[7169]: |    next payload type: ISAKMP_NEXT_T
2010:01:05-19:29:52 acenn pluto[7169]: |    length: 40
2010:01:05-19:29:52 acenn pluto[7169]: |    transform number: 1
2010:01:05-19:29:52 acenn pluto[7169]: |    transform ID: KEY_IKE
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_ENCRYPTION_ALGORITHM
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 7
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_HASH_ALGORITHM
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 2
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_GROUP_DESCRIPTION
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 5
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_AUTHENTICATION_METHOD
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 65005
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_LIFE_TYPE
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 1
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_LIFE_DURATION (variable length)
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 4
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_KEY_LENGTH
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 256
2010:01:05-19:29:52 acenn pluto[7169]: | *****parse ISAKMP Transform Payload (ISAKMP):
2010:01:05-19:29:52 acenn pluto[7169]: |    next payload type: ISAKMP_NEXT_T
2010:01:05-19:29:52 acenn pluto[7169]: |    length: 40
2010:01:05-19:29:52 acenn pluto[7169]: |    transform number: 2
2010:01:05-19:29:52 acenn pluto[7169]: |    transform ID: KEY_IKE
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_ENCRYPTION_ALGORITHM
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 7
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_HASH_ALGORITHM
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 1
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_GROUP_DESCRIPTION
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 5
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_AUTHENTICATION_METHOD
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 65005
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_LIFE_TYPE
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 1
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_LIFE_DURATION (variable length)
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 4
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_KEY_LENGTH
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 256
2010:01:05-19:29:52 acenn pluto[7169]: | *****parse ISAKMP Transform Payload (ISAKMP):
2010:01:05-19:29:52 acenn pluto[7169]: |    next payload type: ISAKMP_NEXT_T
2010:01:05-19:29:52 acenn pluto[7169]: |    length: 40
2010:01:05-19:29:52 acenn pluto[7169]: |    transform number: 3
2010:01:05-19:29:52 acenn pluto[7169]: |    transform ID: KEY_IKE
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_ENCRYPTION_ALGORITHM
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 7
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_HASH_ALGORITHM
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 2
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_GROUP_DESCRIPTION
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 5
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_AUTHENTICATION_METHOD
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 3
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_LIFE_TYPE
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 1
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_LIFE_DURATION (variable length)
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 4
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_KEY_LENGTH
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 256
2010:01:05-19:29:52 acenn pluto[7169]: | *****parse ISAKMP Transform Payload (ISAKMP):
2010:01:05-19:29:52 acenn pluto[7169]: |    next payload type: ISAKMP_NEXT_T
2010:01:05-19:29:52 acenn pluto[7169]: |    length: 40
2010:01:05-19:29:52 acenn pluto[7169]: |    transform number: 4
2010:01:05-19:29:52 acenn pluto[7169]: |    transform ID: KEY_IKE
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_ENCRYPTION_ALGORITHM
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 7
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_HASH_ALGORITHM
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 1
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_GROUP_DESCRIPTION
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 5
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_AUTHENTICATION_METHOD
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 3
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_LIFE_TYPE
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 1
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_LIFE_DURATION (variable length)
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 4
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_KEY_LENGTH
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 256
2010:01:05-19:29:52 acenn pluto[7169]: | *****parse ISAKMP Transform Payload (ISAKMP):
2010:01:05-19:29:52 acenn pluto[7169]: |    next payload type: ISAKMP_NEXT_T
2010:01:05-19:29:52 acenn pluto[7169]: |    length: 40
2010:01:05-19:29:52 acenn pluto[7169]: |    transform number: 5
2010:01:05-19:29:52 acenn pluto[7169]: |    transform ID: KEY_IKE
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_ENCRYPTION_ALGORITHM
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 7
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_HASH_ALGORITHM
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 2
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_GROUP_DESCRIPTION
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 2
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_AUTHENTICATION_METHOD
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 65005
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_LIFE_TYPE
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 1
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_LIFE_DURATION (variable length)
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 4
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_KEY_LENGTH
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 256
2010:01:05-19:29:52 acenn pluto[7169]: | *****parse ISAKMP Transform Payload (ISAKMP):
2010:01:05-19:29:52 acenn pluto[7169]: |    next payload type: ISAKMP_NEXT_T
2010:01:05-19:29:52 acenn pluto[7169]: |    length: 40
2010:01:05-19:29:52 acenn pluto[7169]: |    transform number: 6
2010:01:05-19:29:52 acenn pluto[7169]: |    transform ID: KEY_IKE
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_ENCRYPTION_ALGORITHM
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 7
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_HASH_ALGORITHM
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 1
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_GROUP_DESCRIPTION
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 2
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_AUTHENTICATION_METHOD
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 65005
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_LIFE_TYPE
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 1
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_LIFE_DURATION (variable length)
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 4
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_KEY_LENGTH
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 256
2010:01:05-19:29:52 acenn pluto[7169]: | *****parse ISAKMP Transform Payload (ISAKMP):
2010:01:05-19:29:52 acenn pluto[7169]: |    next payload type: ISAKMP_NEXT_T
2010:01:05-19:29:52 acenn pluto[7169]: |    length: 40
2010:01:05-19:29:52 acenn pluto[7169]: |    transform number: 7
2010:01:05-19:29:52 acenn pluto[7169]: |    transform ID: KEY_IKE
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_ENCRYPTION_ALGORITHM
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 7
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_HASH_ALGORITHM
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 2
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_GROUP_DESCRIPTION
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 2
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_AUTHENTICATION_METHOD
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 3
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_LIFE_TYPE
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 1
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_LIFE_DURATION (variable length)
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 4
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_KEY_LENGTH
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 256
2010:01:05-19:29:52 acenn pluto[7169]: | *****parse ISAKMP Transform Payload (ISAKMP):
2010:01:05-19:29:52 acenn pluto[7169]: |    next payload type: ISAKMP_NEXT_T
2010:01:05-19:29:52 acenn pluto[7169]: |    length: 40
2010:01:05-19:29:52 acenn pluto[7169]: |    transform number: 8
2010:01:05-19:29:52 acenn pluto[7169]: |    transform ID: KEY_IKE
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_ENCRYPTION_ALGORITHM
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 7
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_HASH_ALGORITHM
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 1
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_GROUP_DESCRIPTION
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 2
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_AUTHENTICATION_METHOD
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 3
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_LIFE_TYPE
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 1
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_LIFE_DURATION (variable length)
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 4
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_KEY_LENGTH
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 256
2010:01:05-19:29:52 acenn pluto[7169]: | *****parse ISAKMP Transform Payload (ISAKMP):
2010:01:05-19:29:52 acenn pluto[7169]: |    next payload type: ISAKMP_NEXT_T
2010:01:05-19:29:52 acenn pluto[7169]: |    length: 40
2010:01:05-19:29:52 acenn pluto[7169]: |    transform number: 9
2010:01:05-19:29:52 acenn pluto[7169]: |    transform ID: KEY_IKE
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_ENCRYPTION_ALGORITHM
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 7
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_HASH_ALGORITHM
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 2
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_GROUP_DESCRIPTION
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 5
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_AUTHENTICATION_METHOD
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 65005
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_LIFE_TYPE
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 1
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_LIFE_DURATION (variable length)
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 4
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_KEY_LENGTH
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 128
2010:01:05-19:29:52 acenn pluto[7169]: | *****parse ISAKMP Transform Payload (ISAKMP):
2010:01:05-19:29:52 acenn pluto[7169]: |    next payload type: ISAKMP_NEXT_T
2010:01:05-19:29:52 acenn pluto[7169]: |    length: 40
2010:01:05-19:29:52 acenn pluto[7169]: |    transform number: 10
2010:01:05-19:29:52 acenn pluto[7169]: |    transform ID: KEY_IKE
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_ENCRYPTION_ALGORITHM
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 7
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_HASH_ALGORITHM
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 1
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_GROUP_DESCRIPTION
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 5
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_AUTHENTICATION_METHOD
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 65005
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_LIFE_TYPE
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 1
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_LIFE_DURATION (variable length)
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 4
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_KEY_LENGTH
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 128
2010:01:05-19:29:52 acenn pluto[7169]: | *****parse ISAKMP Transform Payload (ISAKMP):
2010:01:05-19:29:52 acenn pluto[7169]: |    next payload type: ISAKMP_NEXT_T
2010:01:05-19:29:52 acenn pluto[7169]: |    length: 40
2010:01:05-19:29:52 acenn pluto[7169]: |    transform number: 11
2010:01:05-19:29:52 acenn pluto[7169]: |    transform ID: KEY_IKE
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_ENCRYPTION_ALGORITHM
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 7
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_HASH_ALGORITHM
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 2
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_GROUP_DESCRIPTION
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 5
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_AUTHENTICATION_METHOD
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 3
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_LIFE_TYPE
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 1
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_LIFE_DURATION (variable length)
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 4
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_KEY_LENGTH
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 128
2010:01:05-19:29:52 acenn pluto[7169]: | *****parse ISAKMP Transform Payload (ISAKMP):
2010:01:05-19:29:52 acenn pluto[7169]: |    next payload type: ISAKMP_NEXT_T
2010:01:05-19:29:52 acenn pluto[7169]: |    length: 40
2010:01:05-19:29:52 acenn pluto[7169]: |    transform number: 12
2010:01:05-19:29:52 acenn pluto[7169]: |    transform ID: KEY_IKE
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_ENCRYPTION_ALGORITHM
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 7
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_HASH_ALGORITHM
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 1
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_GROUP_DESCRIPTION
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 5
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_AUTHENTICATION_METHOD
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 3
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_LIFE_TYPE
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 1
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_LIFE_DURATION (variable length)
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 4
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_KEY_LENGTH
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 128
2010:01:05-19:29:52 acenn pluto[7169]: | *****parse ISAKMP Transform Payload (ISAKMP):
2010:01:05-19:29:52 acenn pluto[7169]: |    next payload type: ISAKMP_NEXT_T
2010:01:05-19:29:52 acenn pluto[7169]: |    length: 40
2010:01:05-19:29:52 acenn pluto[7169]: |    transform number: 13
2010:01:05-19:29:52 acenn pluto[7169]: |    transform ID: KEY_IKE
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_ENCRYPTION_ALGORITHM
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 7
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_HASH_ALGORITHM
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 2
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_GROUP_DESCRIPTION
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 2
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_AUTHENTICATION_METHOD
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 65005
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_LIFE_TYPE
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 1
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_LIFE_DURATION (variable length)
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 4
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_KEY_LENGTH
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 128
2010:01:05-19:29:52 acenn pluto[7169]: | *****parse ISAKMP Transform Payload (ISAKMP):
2010:01:05-19:29:52 acenn pluto[7169]: |    next payload type: ISAKMP_NEXT_T
2010:01:05-19:29:52 acenn pluto[7169]: |    length: 40
2010:01:05-19:29:52 acenn pluto[7169]: |    transform number: 14
2010:01:05-19:29:52 acenn pluto[7169]: |    transform ID: KEY_IKE
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_ENCRYPTION_ALGORITHM
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 7
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_HASH_ALGORITHM
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 1
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_GROUP_DESCRIPTION
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 2
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_AUTHENTICATION_METHOD
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 65005
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_LIFE_TYPE
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 1
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_LIFE_DURATION (variable length)
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 4
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_KEY_LENGTH
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 128
2010:01:05-19:29:52 acenn pluto[7169]: | *****parse ISAKMP Transform Payload (ISAKMP):
2010:01:05-19:29:52 acenn pluto[7169]: |    next payload type: ISAKMP_NEXT_T
2010:01:05-19:29:52 acenn pluto[7169]: |    length: 40
2010:01:05-19:29:52 acenn pluto[7169]: |    transform number: 15
2010:01:05-19:29:52 acenn pluto[7169]: |    transform ID: KEY_IKE
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_ENCRYPTION_ALGORITHM
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 7
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_HASH_ALGORITHM
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 2
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_GROUP_DESCRIPTION
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 2
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_AUTHENTICATION_METHOD
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 3
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_LIFE_TYPE
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 1
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_LIFE_DURATION (variable length)
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 4
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_KEY_LENGTH
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 128
2010:01:05-19:29:52 acenn pluto[7169]: | *****parse ISAKMP Transform Payload (ISAKMP):
2010:01:05-19:29:52 acenn pluto[7169]: |    next payload type: ISAKMP_NEXT_T
2010:01:05-19:29:52 acenn pluto[7169]: |    length: 40
2010:01:05-19:29:52 acenn pluto[7169]: |    transform number: 16
2010:01:05-19:29:52 acenn pluto[7169]: |    transform ID: KEY_IKE
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_ENCRYPTION_ALGORITHM
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 7
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_HASH_ALGORITHM
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 1
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_GROUP_DESCRIPTION
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 2
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_AUTHENTICATION_METHOD
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 3
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_LIFE_TYPE
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 1
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_LIFE_DURATION (variable length)
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 4
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_KEY_LENGTH
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 128
2010:01:05-19:29:52 acenn pluto[7169]: | *****parse ISAKMP Transform Payload (ISAKMP):
2010:01:05-19:29:52 acenn pluto[7169]: |    next payload type: ISAKMP_NEXT_T
2010:01:05-19:29:52 acenn pluto[7169]: |    length: 36
2010:01:05-19:29:52 acenn pluto[7169]: |    transform number: 17
2010:01:05-19:29:52 acenn pluto[7169]: |    transform ID: KEY_IKE
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_ENCRYPTION_ALGORITHM
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 5
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_HASH_ALGORITHM
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 2
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_GROUP_DESCRIPTION
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 5
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_AUTHENTICATION_METHOD
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 65005
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_LIFE_TYPE
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 1
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_LIFE_DURATION (variable length)
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 4
2010:01:05-19:29:52 acenn pluto[7169]: | *****parse ISAKMP Transform Payload (ISAKMP):
2010:01:05-19:29:52 acenn pluto[7169]: |    next payload type: ISAKMP_NEXT_T
2010:01:05-19:29:52 acenn pluto[7169]: |    length: 36
2010:01:05-19:29:52 acenn pluto[7169]: |    transform number: 18
2010:01:05-19:29:52 acenn pluto[7169]: |    transform ID: KEY_IKE
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_ENCRYPTION_ALGORITHM
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 5
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_HASH_ALGORITHM
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 1
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_GROUP_DESCRIPTION
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 5
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_AUTHENTICATION_METHOD
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 65005
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_LIFE_TYPE
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 1
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_LIFE_DURATION (variable length)
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 4
2010:01:05-19:29:52 acenn pluto[7169]: | *****parse ISAKMP Transform Payload (ISAKMP):
2010:01:05-19:29:52 acenn pluto[7169]: |    next payload type: ISAKMP_NEXT_T
2010:01:05-19:29:52 acenn pluto[7169]: |    length: 36
2010:01:05-19:29:52 acenn pluto[7169]: |    transform number: 19
2010:01:05-19:29:52 acenn pluto[7169]: |    transform ID: KEY_IKE
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_ENCRYPTION_ALGORITHM
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 5
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_HASH_ALGORITHM
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 2
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_GROUP_DESCRIPTION
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 5
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_AUTHENTICATION_METHOD
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 3
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_LIFE_TYPE
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 1
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_LIFE_DURATION (variable length)
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 4
2010:01:05-19:29:52 acenn pluto[7169]: | *****parse ISAKMP Transform Payload (ISAKMP):
2010:01:05-19:29:52 acenn pluto[7169]: |    next payload type: ISAKMP_NEXT_T
2010:01:05-19:29:52 acenn pluto[7169]: |    length: 36
2010:01:05-19:29:52 acenn pluto[7169]: |    transform number: 20
2010:01:05-19:29:52 acenn pluto[7169]: |    transform ID: KEY_IKE
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_ENCRYPTION_ALGORITHM
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 5
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_HASH_ALGORITHM
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 1
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_GROUP_DESCRIPTION
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 5
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_AUTHENTICATION_METHOD
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 3
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_LIFE_TYPE
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 1
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_LIFE_DURATION (variable length)
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 4
2010:01:05-19:29:52 acenn pluto[7169]: | *****parse ISAKMP Transform Payload (ISAKMP):
2010:01:05-19:29:52 acenn pluto[7169]: |    next payload type: ISAKMP_NEXT_T
2010:01:05-19:29:52 acenn pluto[7169]: |    length: 36
2010:01:05-19:29:52 acenn pluto[7169]: |    transform number: 21
2010:01:05-19:29:52 acenn pluto[7169]: |    transform ID: KEY_IKE
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_ENCRYPTION_ALGORITHM
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 5
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_HASH_ALGORITHM
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 2
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_GROUP_DESCRIPTION
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 2
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_AUTHENTICATION_METHOD
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 65005
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_LIFE_TYPE
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 1
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_LIFE_DURATION (variable length)
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 4
2010:01:05-19:29:52 acenn pluto[7169]: | *****parse ISAKMP Transform Payload (ISAKMP):
2010:01:05-19:29:52 acenn pluto[7169]: |    next payload type: ISAKMP_NEXT_T
2010:01:05-19:29:52 acenn pluto[7169]: |    length: 36
2010:01:05-19:29:52 acenn pluto[7169]: |    transform number: 22
2010:01:05-19:29:52 acenn pluto[7169]: |    transform ID: KEY_IKE
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_ENCRYPTION_ALGORITHM
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 5
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_HASH_ALGORITHM
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 1
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_GROUP_DESCRIPTION
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 2
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_AUTHENTICATION_METHOD
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 65005
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_LIFE_TYPE
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 1
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_LIFE_DURATION (variable length)
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 4
2010:01:05-19:29:52 acenn pluto[7169]: | *****parse ISAKMP Transform Payload (ISAKMP):
2010:01:05-19:29:52 acenn pluto[7169]: |    next payload type: ISAKMP_NEXT_T
2010:01:05-19:29:52 acenn pluto[7169]: |    length: 36
2010:01:05-19:29:52 acenn pluto[7169]: |    transform number: 23
2010:01:05-19:29:52 acenn pluto[7169]: |    transform ID: KEY_IKE
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_ENCRYPTION_ALGORITHM
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 5
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_HASH_ALGORITHM
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 2
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_GROUP_DESCRIPTION
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 2
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_AUTHENTICATION_METHOD
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 3
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_LIFE_TYPE
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 1
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_LIFE_DURATION (variable length)
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 4
2010:01:05-19:29:52 acenn pluto[7169]: | *****parse ISAKMP Transform Payload (ISAKMP):
2010:01:05-19:29:52 acenn pluto[7169]: |    next payload type: ISAKMP_NEXT_T
2010:01:05-19:29:52 acenn pluto[7169]: |    length: 36
2010:01:05-19:29:52 acenn pluto[7169]: |    transform number: 24
2010:01:05-19:29:52 acenn pluto[7169]: |    transform ID: KEY_IKE
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_ENCRYPTION_ALGORITHM
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 5
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_HASH_ALGORITHM
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 1
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_GROUP_DESCRIPTION
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 2
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_AUTHENTICATION_METHOD
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 3
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_LIFE_TYPE
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 1
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_LIFE_DURATION (variable length)
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 4
2010:01:05-19:29:52 acenn pluto[7169]: | *****parse ISAKMP Transform Payload (ISAKMP):
2010:01:05-19:29:52 acenn pluto[7169]: |    next payload type: ISAKMP_NEXT_T
2010:01:05-19:29:52 acenn pluto[7169]: |    length: 36
2010:01:05-19:29:52 acenn pluto[7169]: |    transform number: 25
2010:01:05-19:29:52 acenn pluto[7169]: |    transform ID: KEY_IKE
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_ENCRYPTION_ALGORITHM
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 1
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_HASH_ALGORITHM
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 1
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_GROUP_DESCRIPTION
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 1
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_AUTHENTICATION_METHOD
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 65005
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_LIFE_TYPE
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 1
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_LIFE_DURATION (variable length)
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 4
2010:01:05-19:29:52 acenn pluto[7169]: | *****parse ISAKMP Transform Payload (ISAKMP):
2010:01:05-19:29:52 acenn pluto[7169]: |    next payload type: ISAKMP_NEXT_NONE
2010:01:05-19:29:52 acenn pluto[7169]: |    length: 36
2010:01:05-19:29:52 acenn pluto[7169]: |    transform number: 26
2010:01:05-19:29:52 acenn pluto[7169]: |    transform ID: KEY_IKE
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_ENCRYPTION_ALGORITHM
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 1
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_HASH_ALGORITHM
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 1
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_GROUP_DESCRIPTION
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 1
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_AUTHENTICATION_METHOD
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 3
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_LIFE_TYPE
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 1
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_LIFE_DURATION (variable length)
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 4
2010:01:05-19:29:52 acenn pluto[7169]: | preparse_isakmp_policy: peer requests PUBKEY+XAUTHRSASIG+XAUTHSERVER authentication
2010:01:05-19:29:52 acenn pluto[7169]: | instantiated "D_REF_zfmTEQwktH_1" for 192.168.2.150
2010:01:05-19:29:52 acenn pluto[7169]: | creating state object #1 at 0x993fb30
2010:01:05-19:29:52 acenn pluto[7169]: | ICOOKIE:  d4 47 00 c4  46 4d 09 09
2010:01:05-19:29:52 acenn pluto[7169]: | RCOOKIE:  0b e3 90 f0  1a 30 ea 70
2010:01:05-19:29:52 acenn pluto[7169]: | peer:  c0 a8 02 96
2010:01:05-19:29:52 acenn pluto[7169]: | state hash entry 10
2010:01:05-19:29:52 acenn pluto[7169]: | inserting event EVENT_SO_DISCARD, timeout in 0 seconds for #1
2010:01:05-19:29:52 acenn pluto[7169]: "D_REF_zfmTEQwktH_1"[1] 192.168.2.150:1193 #1: responding to Main Mode from unknown peer 192.168.2.150:1193
2010:01:05-19:29:52 acenn pluto[7169]: | *****parse ISAKMP Transform Payload (ISAKMP):
2010:01:05-19:29:52 acenn pluto[7169]: |    next payload type: ISAKMP_NEXT_T
2010:01:05-19:29:52 acenn pluto[7169]: |    length: 40
2010:01:05-19:29:52 acenn pluto[7169]: |    transform number: 1
2010:01:05-19:29:52 acenn pluto[7169]: |    transform ID: KEY_IKE
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_ENCRYPTION_ALGORITHM
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 7
2010:01:05-19:29:52 acenn pluto[7169]: |    [7 is AES_CBC]
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_HASH_ALGORITHM
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 2
2010:01:05-19:29:52 acenn pluto[7169]: |    [2 is HMAC_SHA1]
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_GROUP_DESCRIPTION
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 5
2010:01:05-19:29:52 acenn pluto[7169]: |    [5 is MODP_1536]
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_AUTHENTICATION_METHOD
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 65005
2010:01:05-19:29:52 acenn pluto[7169]: |    [65005 is XAUTHInitRSA]
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_LIFE_TYPE
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 1
2010:01:05-19:29:52 acenn pluto[7169]: |    [1 is OAKLEY_LIFE_SECONDS]
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_LIFE_DURATION (variable length)
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 4
2010:01:05-19:29:52 acenn pluto[7169]: |    long duration: 2147483
2010:01:05-19:29:52 acenn pluto[7169]: "D_REF_zfmTEQwktH_1"[1] 192.168.2.150:1193 #1: peer requested 2147483 seconds which exceeds our limit 86400 seconds
2010:01:05-19:29:52 acenn pluto[7169]: "D_REF_zfmTEQwktH_1"[1] 192.168.2.150:1193 #1: lifetime reduced to 86400 seconds (todo: IPSEC_RESPONDER_LIFETIME notification)
2010:01:05-19:29:52 acenn pluto[7169]: | ******parse ISAKMP Oakley attribute:
2010:01:05-19:29:52 acenn pluto[7169]: |    af+type: OAKLEY_KEY_LENGTH
2010:01:05-19:29:52 acenn pluto[7169]: |    length/value: 256
2010:01:05-19:29:52 acenn pluto[7169]: | Oakley Transform 1 accepted
2010:01:05-19:29:52 acenn pluto[7169]: | inserting event EVENT_RETRANSMIT, timeout in 10 seconds for #1
2010:01:05-19:29:52 acenn pluto[7169]: | next event EVENT_RETRANSMIT in 10 seconds for #1
2010:01:05-19:29:52 acenn pluto[7169]: | 
2010:01:05-19:29:52 acenn pluto[7169]: | *received 352 bytes from 192.168.2.150:1193 on eth1
2010:01:05-19:29:52 acenn pluto[7169]: | **parse ISAKMP Message:
2010:01:05-19:29:52 acenn pluto[7169]: |    initiator cookie:
2010:01:05-19:29:52 acenn pluto[7169]: |   d4 47 00 c4  46 4d 09 09
2010:01:05-19:29:52 acenn pluto[7169]: |    responder cookie:
2010:01:05-19:29:52 acenn pluto[7169]: |   0b e3 90 f0  1a 30 ea 70
2010:01:05-19:29:52 acenn pluto[7169]: |    next payload type: ISAKMP_NEXT_KE
2010:01:05-19:29:52 acenn pluto[7169]: |    ISAKMP version: ISAKMP Version 1.0
2010:01:05-19:29:52 acenn pluto[7169]: |    exchange type: ISAKMP_XCHG_IDPROT
2010:01:05-19:29:52 acenn pluto[7169]: |    flags: none
2010:01:05-19:29:52 acenn pluto[7169]: |    message ID:  00 00 00 00
2010:01:05-19:29:52 acenn pluto[7169]: |    length: 336
2010:01:05-19:29:52 acenn pluto[7169]: packet from 192.168.2.150:1193: size (352) differs from size specified in ISAKMP HDR (336)
2010:01:05-19:29:52 acenn pluto[7169]: packet from 192.168.2.150:1193: Cisco VPN client appends 16 surplus NULL bytes
2010:01:05-19:29:52 acenn pluto[7169]: | ICOOKIE:  d4 47 00 c4  46 4d 09 09
2010:01:05-19:29:52 acenn pluto[7169]: | RCOOKIE:  0b e3 90 f0  1a 30 ea 70
2010:01:05-19:29:52 acenn pluto[7169]: | peer:  c0 a8 02 96
2010:01:05-19:29:52 acenn pluto[7169]: | state hash entry 10
2010:01:05-19:29:52 acenn pluto[7169]: | state object #1 found, in STATE_MAIN_R1
2010:01:05-19:29:52 acenn pluto[7169]: | ***parse ISAKMP Key Exchange Payload:
2010:01:05-19:29:52 acenn pluto[7169]: |    next payload type: ISAKMP_NEXT_NONCE
2010:01:05-19:29:52 acenn pluto[7169]: |    length: 196
2010:01:05-19:29:52 acenn pluto[7169]: | ***parse ISAKMP Nonce Payload:
2010:01:05-19:29:52 acenn pluto[7169]: |    next payload type: ISAKMP_NEXT_NAT-D
2010:01:05-19:29:52 acenn pluto[7169]: |    length: 24
2010:01:05-19:29:52 acenn pluto[7169]: | ***parse ISAKMP NAT-D Payload:
2010:01:05-19:29:52 acenn pluto[7169]: |    next payload type: ISAKMP_NEXT_NAT-D
2010:01:05-19:29:52 acenn pluto[7169]: |    length: 24
2010:01:05-19:29:52 acenn pluto[7169]: | ***parse ISAKMP NAT-D Payload:
2010:01:05-19:29:52 acenn pluto[7169]: |    next payload type: ISAKMP_NEXT_VID
2010:01:05-19:29:52 acenn pluto[7169]: |    length: 24
2010:01:05-19:29:52 acenn pluto[7169]: | ***parse ISAKMP Vendor ID Payload:
2010:01:05-19:29:52 acenn pluto[7169]: |    next payload type: ISAKMP_NEXT_VID
2010:01:05-19:29:52 acenn pluto[7169]: |    length: 20
2010:01:05-19:29:52 acenn pluto[7169]: | ***parse ISAKMP Vendor ID Payload:
2010:01:05-19:29:52 acenn pluto[7169]: |    next payload type: ISAKMP_NEXT_NONE
2010:01:05-19:29:52 acenn pluto[7169]: |    length: 20
2010:01:05-19:29:52 acenn pluto[7169]: "D_REF_zfmTEQwktH_1"[1] 192.168.2.150:1193 #1: ignoring Vendor ID payload [2180a7d9464c0909026de55b5c6431d0]
2010:01:05-19:29:52 acenn pluto[7169]: "D_REF_zfmTEQwktH_1"[1] 192.168.2.150:1193 #1: ignoring Vendor ID payload [Cisco-Unity]
2010:01:05-19:29:52 acenn pluto[7169]: "D_REF_zfmTEQwktH_1"[1] 192.168.2.150:1193 #1: NAT-Traversal: Result using draft-ietf-ipsec-nat-t-ike-02/03: no NAT detected
2010:01:05-19:29:52 acenn pluto[7169]: | inserting event EVENT_NAT_T_KEEPALIVE, timeout in 60 seconds
2010:01:05-19:29:52 acenn pluto[7169]: | size of DH secret exponent: 1533 bits
2010:01:05-19:29:52 acenn pluto[7169]: | inserting event EVENT_RETRANSMIT, timeout in 10 seconds for #1
2010:01:05-19:29:52 acenn pluto[7169]: | next event EVENT_RETRANSMIT in 10 seconds for #1
2010:01:05-19:29:52 acenn pluto[7169]: | 
2010:01:05-19:29:52 acenn pluto[7169]: | *received 1996 bytes from 192.168.2.150:1193 on eth1
2010:01:05-19:29:52 acenn pluto[7169]: | **parse ISAKMP Message:
2010:01:05-19:29:52 acenn pluto[7169]: |    initiator cookie:
2010:01:05-19:29:52 acenn pluto[7169]: |   d4 47 00 c4  46 4d 09 09
2010:01:05-19:29:52 acenn pluto[7169]: |    responder cookie:
2010:01:05-19:29:52 acenn pluto[7169]: |   0b e3 90 f0  1a 30 ea 70
2010:01:05-19:29:52 acenn pluto[7169]: |    next payload type: ISAKMP_NEXT_ID
2010:01:05-19:29:52 acenn pluto[7169]: |    ISAKMP version: ISAKMP Version 1.0
2010:01:05-19:29:52 acenn pluto[7169]: |    exchange type: ISAKMP_XCHG_IDPROT
2010:01:05-19:29:52 acenn pluto[7169]: |    flags: ISAKMP_FLAG_ENCRYPTION
2010:01:05-19:29:52 acenn pluto[7169]: |    message ID:  00 00 00 00
2010:01:05-19:29:52 acenn pluto[7169]: |    length: 1996
2010:01:05-19:29:52 acenn pluto[7169]: | ICOOKIE:  d4 47 00 c4  46 4d 09 09
2010:01:05-19:29:52 acenn pluto[7169]: | RCOOKIE:  0b e3 90 f0  1a 30 ea 70
2010:01:05-19:29:52 acenn pluto[7169]: | peer:  c0 a8 02 96
2010:01:05-19:29:52 acenn pluto[7169]: | state hash entry 10
2010:01:05-19:29:52 acenn pluto[7169]: | state object #1 found, in STATE_MAIN_R2
2010:01:05-19:29:52 acenn pluto[7169]: | ***parse ISAKMP Identification Payload:
2010:01:05-19:29:52 acenn pluto[7169]: |    next payload type: ISAKMP_NEXT_CERT
2010:01:05-19:29:52 acenn pluto[7169]: |    length: 109
2010:01:05-19:29:52 acenn pluto[7169]: |    ID type: ID_DER_ASN1_DN
2010:01:05-19:29:52 acenn pluto[7169]: |    DOI specific A: 17
2010:01:05-19:29:52 acenn pluto[7169]: |    DOI specific B: 500
2010:01:05-19:29:52 acenn pluto[7169]: | ***parse ISAKMP Certificate Payload:
2010:01:05-19:29:52 acenn pluto[7169]: |    next payload type: ISAKMP_NEXT_CR
2010:01:05-19:29:52 acenn pluto[7169]: |    length: 1576
2010:01:05-19:29:52 acenn pluto[7169]: |    cert encoding: CERT_PKCS7_WRAPPED_X509
2010:01:05-19:29:52 acenn pluto[7169]: | ***parse ISAKMP Certificate RequestPayload:
2010:01:05-19:29:52 acenn pluto[7169]: |    next payload type: ISAKMP_NEXT_SIG
2010:01:05-19:29:52 acenn pluto[7169]: |    length: 119
2010:01:05-19:29:52 acenn pluto[7169]: |    cert type: CERT_X509_SIGNATURE
2010:01:05-19:29:52 acenn pluto[7169]: | ***parse ISAKMP Signature Payload:
2010:01:05-19:29:52 acenn pluto[7169]: |    next payload type: ISAKMP_NEXT_N
2010:01:05-19:29:52 acenn pluto[7169]: |    length: 132
2010:01:05-19:29:52 acenn pluto[7169]: | ***parse ISAKMP Notification Payload:
2010:01:05-19:29:52 acenn pluto[7169]: |    next payload type: ISAKMP_NEXT_NONE
2010:01:05-19:29:52 acenn pluto[7169]: |    length: 28
2010:01:05-19:29:52 acenn pluto[7169]: |    DOI: ISAKMP_DOI_IPSEC
2010:01:05-19:29:52 acenn pluto[7169]: |    protocol ID: 1
2010:01:05-19:29:52 acenn pluto[7169]: |    SPI size: 16
2010:01:05-19:29:52 acenn pluto[7169]: |    Notify Message Type: IPSEC_INITIAL_CONTACT
2010:01:05-19:29:52 acenn pluto[7169]: | removing 4 bytes of padding
2010:01:05-19:29:52 acenn pluto[7169]: "D_REF_zfmTEQwktH_1"[1] 192.168.2.150:1193 #1: ignoring informational payload, type IPSEC_INITIAL_CONTACT
2010:01:05-19:29:52 acenn pluto[7169]: | info:  d4 47 00 c4  46 4d 09 09  0b e3 90 f0  1a 30 ea 70
2010:01:05-19:29:52 acenn pluto[7169]: "D_REF_zfmTEQwktH_1"[1] 192.168.2.150:1193 #1: Peer ID is ID_DER_ASN1_DN: 'C=in, L=pune, O=cybervision, CN=admin, E=thinvm@gmail.com'
2010:01:05-19:29:52 acenn pluto[7169]: | L0 - contentInfo:
2010:01:05-19:29:52 acenn pluto[7169]: | L1 - contentType:
2010:01:05-19:29:52 acenn pluto[7169]: |   'signedData'
2010:01:05-19:29:52 acenn pluto[7169]: | L1 - content:
2010:01:05-19:29:52 acenn pluto[7169]: | L2 - signedData:
2010:01:05-19:29:52 acenn pluto[7169]: | L3 - version:
2010:01:05-19:29:52 acenn pluto[7169]: |   v1
2010:01:05-19:29:52 acenn pluto[7169]: | L3 - digestAlgorithms:
2010:01:05-19:29:52 acenn pluto[7169]: | L3 - contentInfo:
2010:01:05-19:29:52 acenn pluto[7169]: | L3 - certificates:
2010:01:05-19:29:52 acenn pluto[7169]: | L4 - certificate:
2010:01:05-19:29:52 acenn pluto[7169]: |   parsing pkcs7-wrapped certificate
2010:01:05-19:29:52 acenn pluto[7169]: | L0 - x509:
2010:01:05-19:29:52 acenn pluto[7169]: | L1 - tbsCertificate:
2010:01:05-19:29:52 acenn pluto[7169]: | L2 - DEFAULT v1:
2010:01:05-19:29:52 acenn pluto[7169]: | L3 - version:
2010:01:05-19:29:52 acenn pluto[7169]: |   X.509v3
2010:01:05-19:29:52 acenn pluto[7169]: | L2 - serialNumber:
2010:01:05-19:29:52 acenn pluto[7169]: | L2 - signature:
2010:01:05-19:29:52 acenn pluto[7169]: | L3 - algorithmIdentifier:
2010:01:05-19:29:52 acenn pluto[7169]: | L4 - algorithm:
2010:01:05-19:29:52 acenn pluto[7169]: |   'sha-1WithRSAEncryption'
2010:01:05-19:29:52 acenn pluto[7169]: | L2 - issuer:
2010:01:05-19:29:52 acenn pluto[7169]: |   'C=in, L=pune, O=cybervision, CN=cybervision VPN CA, E=thinvm@gmail.com'
2010:01:05-19:29:52 acenn pluto[7169]: | L2 - validity:
2010:01:05-19:29:52 acenn pluto[7169]: | L3 - notBefore:
2010:01:05-19:29:52 acenn pluto[7169]: | L4 - utcTime:
2010:01:05-19:29:52 acenn pluto[7169]: |   'Dec 22 16:43:12 UTC 2009'
2010:01:05-19:29:52 acenn pluto[7169]: | L3 - notAfter:
2010:01:05-19:29:52 acenn pluto[7169]: | L4 - utcTime:
2010:01:05-19:29:52 acenn pluto[7169]: |   'May 08 16:43:12 UTC 2037'
2010:01:05-19:29:52 acenn pluto[7169]: | L2 - subject:
2010:01:05-19:29:52 acenn pluto[7169]: |   'C=in, L=pune, O=cybervision, CN=cybervision VPN CA, E=thinvm@gmail.com'
2010:01:05-19:29:52 acenn pluto[7169]: | L2 - subjectPublicKeyInfo:
2010:01:05-19:29:52 acenn pluto[7169]: | -- > --
2010:01:05-19:29:52 acenn pluto[7169]: | L0 - subjectPublicKeyInfo:
2010:01:05-19:29:52 acenn pluto[7169]: | L1 - algorithm:
2010:01:05-19:29:52 acenn pluto[7169]: | L2 - algorithmIdentifier:
2010:01:05-19:29:52 acenn pluto[7169]: | L3 - algorithm:
2010:01:05-19:29:52 acenn pluto[7169]: |   'rsaEncryption'
2010:01:05-19:29:52 acenn pluto[7169]: | L1 - subjectPublicKey:
2010:01:05-19:29:52 acenn pluto[7169]: | -- > --
2010:01:05-19:29:52 acenn pluto[7169]: | L0 - RSAPublicKey:
2010:01:05-19:29:52 acenn pluto[7169]: | L1 - modulus:
2010:01:05-19:29:52 acenn pluto[7169]: | L1 - publicExponent:
2010:01:05-19:29:52 acenn pluto[7169]: | -- < --
2010:01:05-19:29:52 acenn pluto[7169]: | -- < --
2010:01:05-19:29:52 acenn pluto[7169]: | L2 - optional extensions:
2010:01:05-19:29:52 acenn pluto[7169]: | L3 - extensions:
2010:01:05-19:29:52 acenn pluto[7169]: | L4 - extension:
2010:01:05-19:29:52 acenn pluto[7169]: | L5 - extnID:
2010:01:05-19:29:52 acenn pluto[7169]: |   'subjectKeyIdentifier'
2010:01:05-19:29:52 acenn pluto[7169]: | L5 - critical:
2010:01:05-19:29:52 acenn pluto[7169]: |   FALSE
2010:01:05-19:29:52 acenn pluto[7169]: | L5 - extnValue:
2010:01:05-19:29:52 acenn pluto[7169]: | L6 - keyIdentifier:
2010:01:05-19:29:52 acenn pluto[7169]: | L4 - extension:
2010:01:05-19:29:52 acenn pluto[7169]: | L5 - extnID:
2010:01:05-19:29:52 acenn pluto[7169]: |   'basicConstraints'
2010:01:05-19:29:52 acenn pluto[7169]: | L5 - critical:
2010:01:05-19:29:52 acenn pluto[7169]: |   FALSE
2010:01:05-19:29:52 acenn pluto[7169]: | L5 - extnValue:
2010:01:05-19:29:52 acenn pluto[7169]: | L6 - basicConstraints:
2010:01:05-19:29:52 acenn pluto[7169]: | L7 - CA:
2010:01:05-19:29:52 acenn pluto[7169]: |   TRUE
2010:01:05-19:29:52 acenn pluto[7169]: | L4 - extension:
2010:01:05-19:29:52 acenn pluto[7169]: | L5 - extnID:
2010:01:05-19:29:52 acenn pluto[7169]: |   'subjectAltName'
2010:01:05-19:29:52 acenn pluto[7169]: | L5 - critical:
2010:01:05-19:29:52 acenn pluto[7169]: |   FALSE
2010:01:05-19:29:52 acenn pluto[7169]: | L5 - extnValue:
2010:01:05-19:29:52 acenn pluto[7169]: | L6 - generalNames:
2010:01:05-19:29:52 acenn pluto[7169]: | L7 - generalName:
2010:01:05-19:29:52 acenn pluto[7169]: | L8 - ipAddress:
2010:01:05-19:29:52 acenn pluto[7169]: |   '127.0.0.1'
2010:01:05-19:29:52 acenn pluto[7169]: | L1 - signatureAlgorithm:
2010:01:05-19:29:52 acenn pluto[7169]: | L2 - algorithmIdentifier:
2010:01:05-19:29:52 acenn pluto[7169]: | L3 - algorithm:
2010:01:05-19:29:52 acenn pluto[7169]: |   'sha-1WithRSAEncryption'
2010:01:05-19:29:52 acenn pluto[7169]: | L1 - signatureValue:
2010:01:05-19:29:52 acenn pluto[7169]: | signature verification:
2010:01:05-19:29:52 acenn pluto[7169]: | L0 - digestInfo:
2010:01:05-19:29:52 acenn pluto[7169]: | L1 - digestAlgorithm:
2010:01:05-19:29:52 acenn pluto[7169]: | L2 - algorithmIdentifier:
2010:01:05-19:29:52 acenn pluto[7169]: | L3 - algorithm:
2010:01:05-19:29:52 acenn pluto[7169]: |   'sha-1'
2010:01:05-19:29:52 acenn pluto[7169]: | L1 - digest:
2010:01:05-19:29:52 acenn pluto[7169]: | L4 - certificate:
2010:01:05-19:29:52 acenn pluto[7169]: |   parsing pkcs7-wrapped certificate
2010:01:05-19:29:52 acenn pluto[7169]: | L0 - x509:
2010:01:05-19:29:52 acenn pluto[7169]: | L1 - tbsCertificate:
2010:01:05-19:29:52 acenn pluto[7169]: | L2 - DEFAULT v1:
2010:01:05-19:29:52 acenn pluto[7169]: | L3 - version:
2010:01:05-19:29:52 acenn pluto[7169]: |   X.509v3
2010:01:05-19:29:52 acenn pluto[7169]: | L2 - serialNumber:
2010:01:05-19:29:52 acenn pluto[7169]: | L2 - signature:
2010:01:05-19:29:52 acenn pluto[7169]: | L3 - algorithmIdentifier:
2010:01:05-19:29:52 acenn pluto[7169]: | L4 - algorithm:
2010:01:05-19:29:52 acenn pluto[7169]: |   'sha-1WithRSAEncryption'
2010:01:05-19:29:52 acenn pluto[7169]: | L2 - issuer:
2010:01:05-19:29:52 acenn pluto[7169]: |   'C=in, L=pune, O=cybervision, CN=cybervision VPN CA, E=thinvm@gmail.com'
2010:01:05-19:29:52 acenn pluto[7169]: | L2 - validity:
2010:01:05-19:29:52 acenn pluto[7169]: | L3 - notBefore:
2010:01:05-19:29:52 acenn pluto[7169]: | L4 - utcTime:
2010:01:05-19:29:52 acenn pluto[7169]: |   'Dec 22 16:43:14 UTC 2009'
2010:01:05-19:29:52 acenn pluto[7169]: | L3 - notAfter:
2010:01:05-19:29:52 acenn pluto[7169]: | L4 - utcTime:
2010:01:05-19:29:52 acenn pluto[7169]: |   'May 08 16:43:14 UTC 2037'
2010:01:05-19:29:52 acenn pluto[7169]: | L2 - subject:
2010:01:05-19:29:52 acenn pluto[7169]: |   'C=in, L=pune, O=cybervision, CN=admin, E=thinvm@gmail.com'
2010:01:05-19:29:52 acenn pluto[7169]: | L2 - subjectPublicKeyInfo:
2010:01:05-19:29:52 acenn pluto[7169]: | -- > --
2010:01:05-19:29:52 acenn pluto[7169]: | L0 - subjectPublicKeyInfo:
2010:01:05-19:29:52 acenn pluto[7169]: | L1 - algorithm:
2010:01:05-19:29:52 acenn pluto[7169]: | L2 - algorithmIdentifier:
2010:01:05-19:29:52 acenn pluto[7169]: | L3 - algorithm:
2010:01:05-19:29:52 acenn pluto[7169]: |   'rsaEncryption'
2010:01:05-19:29:52 acenn pluto[7169]: | L1 - subjectPublicKey:
2010:01:05-19:29:52 acenn pluto[7169]: | -- > --
2010:01:05-19:29:52 acenn pluto[7169]: | L0 - RSAPublicKey:
2010:01:05-19:29:52 acenn pluto[7169]: | L1 - modulus:
2010:01:05-19:29:52 acenn pluto[7169]: | L1 - publicExponent:
2010:01:05-19:29:52 acenn pluto[7169]: | -- < --
2010:01:05-19:29:52 acenn pluto[7169]: | -- < --
2010:01:05-19:29:52 acenn pluto[7169]: | L2 - optional extensions:
2010:01:05-19:29:52 acenn pluto[7169]: | L3 - extensions:
2010:01:05-19:29:52 acenn pluto[7169]: | L4 - extension:
2010:01:05-19:29:52 acenn pluto[7169]: | L5 - extnID:
2010:01:05-19:29:52 acenn pluto[7169]: |   'subjectKeyIdentifier'
2010:01:05-19:29:52 acenn pluto[7169]: | L5 - critical:
2010:01:05-19:29:52 acenn pluto[7169]: |   FALSE
2010:01:05-19:29:52 acenn pluto[7169]: | L5 - extnValue:
2010:01:05-19:29:52 acenn pluto[7169]: | L6 - keyIdentifier:
2010:01:05-19:29:52 acenn pluto[7169]: | L4 - extension:
2010:01:05-19:29:52 acenn pluto[7169]: | L5 - extnID:
2010:01:05-19:29:52 acenn pluto[7169]: |   'authorityKeyIdentifier'
2010:01:05-19:29:52 acenn pluto[7169]: | L5 - critical:
2010:01:05-19:29:52 acenn pluto[7169]: |   FALSE
2010:01:05-19:29:52 acenn pluto[7169]: | L5 - extnValue:
2010:01:05-19:29:52 acenn pluto[7169]: | L6 - authorityKeyIdentifier:
2010:01:05-19:29:52 acenn pluto[7169]: | L7 - keyIdentifier:
2010:01:05-19:29:52 acenn pluto[7169]: | L7 - authorityCertIssuer:
2010:01:05-19:29:52 acenn pluto[7169]: | L7 - authorityCertSerialNumber:
2010:01:05-19:29:52 acenn pluto[7169]: | L4 - extension:
2010:01:05-19:29:52 acenn pluto[7169]: | L5 - extnID:
2010:01:05-19:29:52 acenn pluto[7169]: |   'subjectAltName'
2010:01:05-19:29:52 acenn pluto[7169]: | L5 - critical:
2010:01:05-19:29:52 acenn pluto[7169]: |   FALSE
2010:01:05-19:29:52 acenn pluto[7169]: | L5 - extnValue:
2010:01:05-19:29:52 acenn pluto[7169]: | L6 - generalNames:
2010:01:05-19:29:52 acenn pluto[7169]: | L7 - generalName:
2010:01:05-19:29:52 acenn pluto[7169]: | L8 - rfc822Name:
2010:01:05-19:29:52 acenn pluto[7169]: |   'thinvm@gmail.com'
2010:01:05-19:29:52 acenn pluto[7169]: | L4 - extension:
2010:01:05-19:29:52 acenn pluto[7169]: | L5 - extnID:
2010:01:05-19:29:52 acenn pluto[7169]: |   'basicConstraints'
2010:01:05-19:29:52 acenn pluto[7169]: | L5 - critical:
2010:01:05-19:29:52 acenn pluto[7169]: |   FALSE
2010:01:05-19:29:52 acenn pluto[7169]: | L5 - extnValue:
2010:01:05-19:29:52 acenn pluto[7169]: | L6 - basicConstraints:
2010:01:05-19:29:52 acenn pluto[7169]: | L7 - CA:
2010:01:05-19:29:52 acenn pluto[7169]: |   FALSE
2010:01:05-19:29:52 acenn pluto[7169]: | L4 - extension:
2010:01:05-19:29:52 acenn pluto[7169]: | L5 - extnID:
2010:01:05-19:29:52 acenn pluto[7169]: |   'keyUsage'
2010:01:05-19:29:52 acenn pluto[7169]: | L5 - critical:
2010:01:05-19:29:52 acenn pluto[7169]: |   FALSE
2010:01:05-19:29:52 acenn pluto[7169]: | L5 - extnValue:
2010:01:05-19:29:52 acenn pluto[7169]: | L1 - signatureAlgorithm:
2010:01:05-19:29:52 acenn pluto[7169]: | L2 - algorithmIdentifier:
2010:01:05-19:29:52 acenn pluto[7169]: | L3 - algorithm:
2010:01:05-19:29:52 acenn pluto[7169]: |   'sha-1WithRSAEncryption'
2010:01:05-19:29:52 acenn pluto[7169]: | L1 - signatureValue:
2010:01:05-19:29:52 acenn pluto[7169]: | L3 - signerInfos:
2010:01:05-19:29:52 acenn pluto[7169]: "D_REF_zfmTEQwktH_1"[1] 192.168.2.150:1193 #1: self-signed cacert rejected
2010:01:05-19:29:52 acenn pluto[7169]: | subject: 'C=in, L=pune, O=cybervision, CN=admin, E=thinvm@gmail.com'
2010:01:05-19:29:52 acenn pluto[7169]: | issuer:  'C=in, L=pune, O=cybervision, CN=cybervision VPN CA, E=thinvm@gmail.com'
2010:01:05-19:29:52 acenn pluto[7169]: | authkey:  c1:9a:80:2b:5a:f5:d5:ea:58:a3:df:e8:7a:3f:6f:23:df:25:81:63
2010:01:05-19:29:52 acenn pluto[7169]: | certificate is valid
2010:01:05-19:29:52 acenn pluto[7169]: | issuer cacert found
2010:01:05-19:29:53 acenn pluto[7169]: | signature verification:
2010:01:05-19:29:53 acenn pluto[7169]: | L0 - digestInfo:
2010:01:05-19:29:53 acenn pluto[7169]: | L1 - digestAlgorithm:
2010:01:05-19:29:53 acenn pluto[7169]: | L2 - algorithmIdentifier:
2010:01:05-19:29:53 acenn pluto[7169]: | L3 - algorithm:
2010:01:05-19:29:53 acenn pluto[7169]: |   'sha-1'
2010:01:05-19:29:53 acenn pluto[7169]: | L1 - digest:
2010:01:05-19:29:53 acenn pluto[7169]: | certificate signature is valid
2010:01:05-19:29:53 acenn pluto[7169]: "D_REF_zfmTEQwktH_1"[1] 192.168.2.150:1193 #1: crl not found
2010:01:05-19:29:53 acenn pluto[7169]: "D_REF_zfmTEQwktH_1"[1] 192.168.2.150:1193 #1: certificate status unknown
2010:01:05-19:29:53 acenn pluto[7169]: | subject: 'C=in, L=pune, O=cybervision, CN=cybervision VPN CA, E=thinvm@gmail.com'
2010:01:05-19:29:53 acenn pluto[7169]: | issuer:  'C=in, L=pune, O=cybervision, CN=cybervision VPN CA, E=thinvm@gmail.com'
2010:01:05-19:29:53 acenn pluto[7169]: | certificate is valid
2010:01:05-19:29:53 acenn pluto[7169]: | issuer cacert found
2010:01:05-19:29:53 acenn pluto[7169]: | certificate signature is valid
2010:01:05-19:29:53 acenn pluto[7169]: | reached self-signed root ca
2010:01:05-19:29:53 acenn pluto[7169]: | public key validated
2010:01:05-19:29:53 acenn pluto[7169]: | XAUTHInitRSA check passed with keyid e6:38:4f:5d:23:6a:44:22:6c:b3:32:45:19:07:30:ef:42:f7:8f:83
2010:01:05-19:29:53 acenn pluto[7169]: | peer CA:      "C=in, L=pune, O=cybervision, CN=cybervision VPN CA, E=thinvm@gmail.com"
2010:01:05-19:29:53 acenn pluto[7169]: | CR  30 70 31 0b  30 09 06 03  55 04 06 13  02 69 6e 31
2010:01:05-19:29:53 acenn pluto[7169]: |   0d 30 0b 06  03 55 04 07  13 04 70 75  6e 65 31 14
2010:01:05-19:29:53 acenn pluto[7169]: |   30 12 06 03  55 04 0a 13  0b 63 79 62  65 72 76 69
2010:01:05-19:29:53 acenn pluto[7169]: |   73 69 6f 6e  31 1b 30 19  06 03 55 04  03 13 12 63
2010:01:05-19:29:53 acenn pluto[7169]: |   79 62 65 72  76 69 73 69  6f 6e 20 56  50 4e 20 43
2010:01:05-19:29:53 acenn pluto[7169]: |   41 31 1f 30  1d 06 09 2a  86 48 86 f7  0d 01 09 01
2010:01:05-19:29:53 acenn pluto[7169]: |   16 10 74 68  69 6e 76 6d  40 67 6d 61  69 6c 2e 63
2010:01:05-19:29:53 acenn pluto[7169]: |   6f 6d
2010:01:05-19:29:53 acenn pluto[7169]: | requested CA: "C=in, L=pune, O=cybervision, CN=cybervision VPN CA, E=thinvm@gmail.com"
2010:01:05-19:29:53 acenn pluto[7169]: | offered CA:   "C=in, L=pune, O=cybervision, CN=cybervision VPN CA, E=thinvm@gmail.com"
2010:01:05-19:29:53 acenn pluto[7169]: | switched from "D_REF_zfmTEQwktH_1" to "D_REF_zfmTEQwktH_0"
2010:01:05-19:29:53 acenn pluto[7169]: | instantiated "D_REF_zfmTEQwktH_0" for 192.168.2.150
2010:01:05-19:29:53 acenn pluto[7169]: "D_REF_zfmTEQwktH_0"[1] 192.168.2.150:1193 #1: deleting connection "D_REF_zfmTEQwktH_1" instance with peer 192.168.2.150 {isakmp=#0/ipsec=#0}
2010:01:05-19:29:53 acenn pluto[7169]: | our certificate policy is ALWAYS_SEND
2010:01:05-19:29:53 acenn pluto[7169]: "D_REF_zfmTEQwktH_0"[1] 192.168.2.150:1193 #1: we have a cert and are sending it 
2010:01:05-19:29:53 acenn pluto[7169]: | inserting event EVENT_SA_REPLACE, timeout in 7530 seconds for #1
2010:01:05-19:29:53 acenn pluto[7169]: "D_REF_zfmTEQwktH_0"[1] 192.168.2.150:1193 #1: sent MR3, ISAKMP SA established
2010:01:05-19:29:53 acenn pluto[7169]: | starting XAUTH server
2010:01:05-19:29:53 acenn pluto[7169]: "D_REF_zfmTEQwktH_0"[1] 192.168.2.150:1193 #1: sending XAUTH request
2010:01:05-19:29:53 acenn pluto[7169]: | inserting event EVENT_RETRANSMIT, timeout in 10 seconds for #1
2010:01:05-19:29:53 acenn pluto[7169]: | next event EVENT_RETRANSMIT in 10 seconds for #1
2010:01:05-19:29:56 acenn pluto[7169]: | 
2010:01:05-19:29:56 acenn pluto[7169]: | *received 92 bytes from 192.168.2.150:1193 on eth1
2010:01:05-19:29:56 acenn pluto[7169]: | **parse ISAKMP Message:
2010:01:05-19:29:56 acenn pluto[7169]: |    initiator cookie:
2010:01:05-19:29:56 acenn pluto[7169]: |   d4 47 00 c4  46 4d 09 09
2010:01:05-19:29:56 acenn pluto[7169]: |    responder cookie:
2010:01:05-19:29:56 acenn pluto[7169]: |   0b e3 90 f0  1a 30 ea 70
2010:01:05-19:29:56 acenn pluto[7169]: |    next payload type: ISAKMP_NEXT_HASH
2010:01:05-19:29:56 acenn pluto[7169]: |    ISAKMP version: ISAKMP Version 1.0
2010:01:05-19:29:56 acenn pluto[7169]: |    exchange type: ISAKMP_XCHG_MODE_CFG
2010:01:05-19:29:56 acenn pluto[7169]: |    flags: ISAKMP_FLAG_ENCRYPTION
2010:01:05-19:29:56 acenn pluto[7169]: |    message ID:  fb 4a ae de
2010:01:05-19:29:56 acenn pluto[7169]: |    length: 92
2010:01:05-19:29:56 acenn pluto[7169]: | ICOOKIE:  d4 47 00 c4  46 4d 09 09
2010:01:05-19:29:56 acenn pluto[7169]: | RCOOKIE:  0b e3 90 f0  1a 30 ea 70
2010:01:05-19:29:56 acenn pluto[7169]: | peer:  c0 a8 02 96
2010:01:05-19:29:56 acenn pluto[7169]: | state hash entry 10
2010:01:05-19:29:56 acenn pluto[7169]: | state object #1 found, in STATE_XAUTH_R1
2010:01:05-19:29:56 acenn pluto[7169]: | ***parse ISAKMP Hash Payload:
2010:01:05-19:29:56 acenn pluto[7169]: |    next payload type: ISAKMP_NEXT_MODECFG
2010:01:05-19:29:56 acenn pluto[7169]: |    length: 24
2010:01:05-19:29:56 acenn pluto[7169]: | ***parse ISAKMP Mode Attribute:
2010:01:05-19:29:56 acenn pluto[7169]: |    next payload type: ISAKMP_NEXT_NONE
2010:01:05-19:29:56 acenn pluto[7169]: |    length: 27
2010:01:05-19:29:56 acenn pluto[7169]: |    Attr Msg Type: ISAKMP_CFG_REPLY
2010:01:05-19:29:56 acenn pluto[7169]: |    Identifier: 0
2010:01:05-19:29:56 acenn pluto[7169]: | removing 13 bytes of padding
2010:01:05-19:29:56 acenn pluto[7169]: "D_REF_zfmTEQwktH_0"[1] 192.168.2.150:1193 #1: parsing XAUTH reply
2010:01:05-19:29:56 acenn pluto[7169]: | ****parse ISAKMP ModeCfg attribute:
2010:01:05-19:29:56 acenn pluto[7169]: |    ModeCfg attr type: XAUTH_USER_NAME
2010:01:05-19:29:56 acenn pluto[7169]: |    length/value: 5
2010:01:05-19:29:56 acenn pluto[7169]: | ****parse ISAKMP ModeCfg attribute:
2010:01:05-19:29:56 acenn pluto[7169]: |    ModeCfg attr type: XAUTH_USER_PASSWORD
2010:01:05-19:29:56 acenn pluto[7169]: |    length/value: 6
2010:01:05-19:29:56 acenn pluto[7169]: | peer xauth user name is 'admin'
2010:01:05-19:29:57 acenn pluto[7169]: "D_REF_zfmTEQwktH_0"[1] 192.168.2.150:1193 #1: extended authentication was successful
2010:01:05-19:29:57 acenn pluto[7169]: "D_REF_zfmTEQwktH_0"[1] 192.168.2.150:1193 #1: sending XAUTH status:
2010:01:05-19:29:57 acenn pluto[7169]: | inserting event EVENT_RETRANSMIT, timeout in 10 seconds for #1
2010:01:05-19:29:57 acenn pluto[7169]: | next event EVENT_RETRANSMIT in 10 seconds for #1
2010:01:05-19:29:57 acenn pluto[7169]: | 
2010:01:05-19:29:57 acenn pluto[7169]: | *received 60 bytes from 192.168.2.150:1193 on eth1
2010:01:05-19:29:57 acenn pluto[7169]: | **parse ISAKMP Message:
2010:01:05-19:29:57 acenn pluto[7169]: |    initiator cookie:
2010:01:05-19:29:57 acenn pluto[7169]: |   d4 47 00 c4  46 4d 09 09
2010:01:05-19:29:57 acenn pluto[7169]: |    responder cookie:
2010:01:05-19:29:57 acenn pluto[7169]: |   0b e3 90 f0  1a 30 ea 70
2010:01:05-19:29:57 acenn pluto[7169]: |    next payload type: ISAKMP_NEXT_HASH
2010:01:05-19:29:57 acenn pluto[7169]: |    ISAKMP version: ISAKMP Version 1.0
2010:01:05-19:29:57 acenn pluto[7169]: |    exchange type: ISAKMP_XCHG_MODE_CFG
2010:01:05-19:29:57 acenn pluto[7169]: |    flags: ISAKMP_FLAG_ENCRYPTION
2010:01:05-19:29:57 acenn pluto[7169]: |    message ID:  87 a0 cb 45
2010:01:05-19:29:57 acenn pluto[7169]: |    length: 60
2010:01:05-19:29:57 acenn pluto[7169]: | ICOOKIE:  d4 47 00 c4  46 4d 09 09
2010:01:05-19:29:57 acenn pluto[7169]: | RCOOKIE:  0b e3 90 f0  1a 30 ea 70
2010:01:05-19:29:57 acenn pluto[7169]: | peer:  c0 a8 02 96
2010:01:05-19:29:57 acenn pluto[7169]: | state hash entry 10
2010:01:05-19:29:57 acenn pluto[7169]: | state object #1 found, in STATE_XAUTH_R2
2010:01:05-19:29:57 acenn pluto[7169]: | ***parse ISAKMP Hash Payload:
2010:01:05-19:29:57 acenn pluto[7169]: |    next payload type: ISAKMP_NEXT_MODECFG
2010:01:05-19:29:57 acenn pluto[7169]: |    length: 24
2010:01:05-19:29:57 acenn pluto[7169]: | ***parse ISAKMP Mode Attribute:
2010:01:05-19:29:57 acenn pluto[7169]: |    next payload type: ISAKMP_NEXT_NONE
2010:01:05-19:29:57 acenn pluto[7169]: |    length: 8
2010:01:05-19:29:57 acenn pluto[7169]: |    Attr Msg Type: ISAKMP_CFG_ACK
2010:01:05-19:29:57 acenn pluto[7169]: |    Identifier: 0
2010:01:05-19:29:57 acenn pluto[7169]: "D_REF_zfmTEQwktH_0"[1] 192.168.2.150:1193 #1: parsing XAUTH ack
2010:01:05-19:29:57 acenn pluto[7169]: | inserting event EVENT_SA_REPLACE, timeout in 7530 seconds for #1
2010:01:05-19:29:57 acenn pluto[7169]: "D_REF_zfmTEQwktH_0"[1] 192.168.2.150:1193 #1: received XAUTH ack, established
2010:01:05-19:29:57 acenn pluto[7169]: | next event EVENT_NAT_T_KEEPALIVE in 55 seconds
2010:01:05-19:29:57 acenn pluto[7169]: | 
2010:01:05-19:29:57 acenn pluto[7169]: | *received 204 bytes from 192.168.2.150:1193 on eth1
2010:01:05-19:29:57 acenn pluto[7169]: | **parse ISAKMP Message:
2010:01:05-19:29:57 acenn pluto[7169]: |    initiator cookie:
2010:01:05-19:29:57 acenn pluto[7169]: |   d4 47 00 c4  46 4d 09 09
2010:01:05-19:29:57 acenn pluto[7169]: |    responder cookie:
2010:01:05-19:29:57 acenn pluto[7169]: |   0b e3 90 f0  1a 30 ea 70
2010:01:05-19:29:57 acenn pluto[7169]: |    next payload type: ISAKMP_NEXT_HASH
2010:01:05-19:29:57 acenn pluto[7169]: |    ISAKMP version: ISAKMP Version 1.0
2010:01:05-19:29:57 acenn pluto[7169]: |    exchange type: ISAKMP_XCHG_MODE_CFG
2010:01:05-19:29:57 acenn pluto[7169]: |    flags: ISAKMP_FLAG_ENCRYPTION
2010:01:05-19:29:57 acenn pluto[7169]: |    message ID:  0b 35 c5 36
2010:01:05-19:29:57 acenn pluto[7169]: |    length: 204
2010:01:05-19:29:57 acenn pluto[7169]: | ICOOKIE:  d4 47 00 c4  46 4d 09 09
2010:01:05-19:29:57 acenn pluto[7169]: | RCOOKIE:  0b e3 90 f0  1a 30 ea 70
2010:01:05-19:29:57 acenn pluto[7169]: | peer:  c0 a8 02 96
2010:01:05-19:29:57 acenn pluto[7169]: | state hash entry 10
2010:01:05-19:29:57 acenn pluto[7169]: | state object not found
2010:01:05-19:29:57 acenn pluto[7169]: | ICOOKIE:  d4 47 00 c4  46 4d 09 09
2010:01:05-19:29:57 acenn pluto[7169]: | RCOOKIE:  0b e3 90 f0  1a 30 ea 70
2010:01:05-19:29:57 acenn pluto[7169]: | peer:  c0 a8 02 96
2010:01:05-19:29:57 acenn pluto[7169]: | state hash entry 10
2010:01:05-19:29:57 acenn pluto[7169]: | state object #1 found, in STATE_XAUTH_R3
2010:01:05-19:29:57 acenn pluto[7169]: | ***parse ISAKMP Hash Payload:
2010:01:05-19:29:57 acenn pluto[7169]: |    next payload type: ISAKMP_NEXT_MODECFG
2010:01:05-19:29:57 acenn pluto[7169]: |    length: 24
2010:01:05-19:29:57 acenn pluto[7169]: | ***parse ISAKMP Mode Attribute:
2010:01:05-19:29:57 acenn pluto[7169]: |    next payload type: ISAKMP_NEXT_NONE
2010:01:05-19:29:57 acenn pluto[7169]: |    length: 138
2010:01:05-19:29:57 acenn pluto[7169]: |    Attr Msg Type: ISAKMP_CFG_REQUEST
2010:01:05-19:29:57 acenn pluto[7169]: |    Identifier: 0
2010:01:05-19:29:57 acenn pluto[7169]: | removing 14 bytes of padding
2010:01:05-19:29:57 acenn pluto[7169]: | ****parse ISAKMP ModeCfg attribute:
2010:01:05-19:29:57 acenn pluto[7169]: |    ModeCfg attr type: INTERNAL_IP4_ADDRESS
2010:01:05-19:29:57 acenn pluto[7169]: |    length/value: 0
2010:01:05-19:29:57 acenn pluto[7169]: | ****parse ISAKMP ModeCfg attribute:
2010:01:05-19:29:57 acenn pluto[7169]: |    ModeCfg attr type: INTERNAL_IP4_NETMASK
2010:01:05-19:29:57 acenn pluto[7169]: |    length/value: 0
2010:01:05-19:29:57 acenn pluto[7169]: | ****parse ISAKMP ModeCfg attribute:
2010:01:05-19:29:57 acenn pluto[7169]: |    ModeCfg attr type: INTERNAL_IP4_DNS
2010:01:05-19:29:57 acenn pluto[7169]: |    length/value: 0
2010:01:05-19:29:57 acenn pluto[7169]: | ****parse ISAKMP ModeCfg attribute:
2010:01:05-19:29:57 acenn pluto[7169]: |    ModeCfg attr type: INTERNAL_IP4_NBNS
2010:01:05-19:29:57 acenn pluto[7169]: |    length/value: 0
2010:01:05-19:29:57 acenn pluto[7169]: | ****parse ISAKMP ModeCfg attribute:
2010:01:05-19:29:57 acenn pluto[7169]: |    ModeCfg attr type: INTERNAL_ADDRESS_EXPIRY
2010:01:05-19:29:57 acenn pluto[7169]: |    length/value: 0
2010:01:05-19:29:57 acenn pluto[7169]: | ****parse ISAKMP ModeCfg attribute:
2010:01:05-19:29:57 acenn pluto[7169]: |    ModeCfg attr type: UNITY_BANNER
2010:01:05-19:29:57 acenn pluto[7169]: |    length/value: 0
2010:01:05-19:29:57 acenn pluto[7169]: | ****parse ISAKMP ModeCfg attribute:
2010:01:05-19:29:57 acenn pluto[7169]: |    ModeCfg attr type: UNITY_SAVE_PASSWD
2010:01:05-19:29:57 acenn pluto[7169]: |    length/value: 0
2010:01:05-19:29:57 acenn pluto[7169]: | ****parse ISAKMP ModeCfg attribute:
2010:01:05-19:29:57 acenn pluto[7169]: |    ModeCfg attr type: UNITY_DEF_DOMAIN
2010:01:05-19:29:57 acenn pluto[7169]: |    length/value: 0
2010:01:05-19:29:57 acenn pluto[7169]: | ****parse ISAKMP ModeCfg attribute:
2010:01:05-19:29:57 acenn pluto[7169]: |    ModeCfg attr type: UNITY_SPLIT_INCLUDE
2010:01:05-19:29:57 acenn pluto[7169]: |    length/value: 0
2010:01:05-19:29:57 acenn pluto[7169]: | ****parse ISAKMP ModeCfg attribute:
2010:01:05-19:29:57 acenn pluto[7169]: |    ModeCfg attr type: UNITY_SPLITDNS_NAME
2010:01:05-19:29:57 acenn pluto[7169]: |    length/value: 0
2010:01:05-19:29:57 acenn pluto[7169]: | ****parse ISAKMP ModeCfg attribute:
2010:01:05-19:29:57 acenn pluto[7169]: |    ModeCfg attr type: UNITY_PFS
2010:01:05-19:29:57 acenn pluto[7169]: |    length/value: 0
2010:01:05-19:29:57 acenn pluto[7169]: | ****parse ISAKMP ModeCfg attribute:
2010:01:05-19:29:57 acenn pluto[7169]: |    ModeCfg attr type: 28683??
2010:01:05-19:29:57 acenn pluto[7169]: |    length/value: 0
2010:01:05-19:29:57 acenn pluto[7169]: "D_REF_zfmTEQwktH_0"[1] 192.168.2.150:1193 #1: unsupported ModeCfg attribute 28683?? received.
2010:01:05-19:29:57 acenn pluto[7169]: | ****parse ISAKMP ModeCfg attribute:
2010:01:05-19:29:57 acenn pluto[7169]: |    ModeCfg attr type: UNITY_BACKUP_SERVERS
2010:01:05-19:29:57 acenn pluto[7169]: |    length/value: 0
2010:01:05-19:29:57 acenn pluto[7169]: | ****parse ISAKMP ModeCfg attribute:
2010:01:05-19:29:57 acenn pluto[7169]: |    ModeCfg attr type: 28684??
2010:01:05-19:29:57 acenn pluto[7169]: |    length/value: 0
2010:01:05-19:29:57 acenn pluto[7169]: "D_REF_zfmTEQwktH_0"[1] 192.168.2.150:1193 #1: unsupported ModeCfg attribute 28684?? received.
2010:01:05-19:29:57 acenn pluto[7169]: | ****parse ISAKMP ModeCfg attribute:
2010:01:05-19:29:57 acenn pluto[7169]: |    ModeCfg attr type: APPLICATION_VERSION
2010:01:05-19:29:57 acenn pluto[7169]: |    length/value: 42
2010:01:05-19:29:57 acenn pluto[7169]: |    'Cisco Systems VPN Client 5.0.06.0160:WinNT'
2010:01:05-19:29:57 acenn pluto[7169]: | ****parse ISAKMP ModeCfg attribute:
2010:01:05-19:29:57 acenn pluto[7169]: |    ModeCfg attr type: UNITY_FW_TYPE
2010:01:05-19:29:57 acenn pluto[7169]: |    length/value: 12
2010:01:05-19:29:57 acenn pluto[7169]: | ****parse ISAKMP ModeCfg attribute:
2010:01:05-19:29:57 acenn pluto[7169]: |    ModeCfg attr type: UNITY_DDNS_HOSTNAME
2010:01:05-19:29:57 acenn pluto[7169]: |    length/value: 4
2010:01:05-19:29:57 acenn pluto[7169]: |    'mail'
2010:01:05-19:29:57 acenn pluto[7169]: | ****parse ISAKMP ModeCfg attribute:
2010:01:05-19:29:57 acenn pluto[7169]: |    ModeCfg attr type: UNITY_NATT_PORT
2010:01:05-19:29:57 acenn pluto[7169]: |    length/value: 0
2010:01:05-19:29:57 acenn pluto[7169]: "D_REF_zfmTEQwktH_0"[1] 192.168.2.150:1193 #1: peer requested virtual IP %any
2010:01:05-19:29:57 acenn pluto[7169]: "D_REF_zfmTEQwktH_0"[1] 192.168.2.150:1193 #1: assigning virtual IP  10.242.5.1 to peer
2010:01:05-19:29:57 acenn pluto[7169]: "D_REF_zfmTEQwktH_0"[1] 192.168.2.150:1193 #1: assigning DNS server 202.54.1.66 to peer
2010:01:05-19:29:57 acenn pluto[7169]: "D_REF_zfmTEQwktH_0"[1] 192.168.2.150:1193 #1: sending ModeCfg reply
2010:01:05-19:29:57 acenn pluto[7169]: | inserting event EVENT_SA_REPLACE, timeout in 7530 seconds for #1
2010:01:05-19:29:57 acenn pluto[7169]: "D_REF_zfmTEQwktH_0"[1] 192.168.2.150:1193 #1: sent ModeCfg reply, established
2010:01:05-19:29:57 acenn pluto[7169]: | next event EVENT_NAT_T_KEEPALIVE in 55 seconds
2010:01:05-19:29:57 acenn pluto[7169]: | 
2010:01:05-19:29:57 acenn pluto[7169]: | *received 1036 bytes from 192.168.2.150:1193 on eth1
2010:01:05-19:29:57 acenn pluto[7169]: | **parse ISAKMP Message:
2010:01:05-19:29:57 acenn pluto[7169]: |    initiator cookie:
2010:01:05-19:29:57 acenn pluto[7169]: |   d4 47 00 c4  46 4d 09 09
2010:01:05-19:29:57 acenn pluto[7169]: |    responder cookie:
2010:01:05-19:29:57 acenn pluto[7169]: |   0b e3 90 f0  1a 30 ea 70
2010:01:05-19:29:57 acenn pluto[7169]: |    next payload type: ISAKMP_NEXT_HASH
2010:01:05-19:29:57 acenn pluto[7169]: |    ISAKMP version: ISAKMP Version 1.0
2010:01:05-19:29:57 acenn pluto[7169]: |    exchange type: ISAKMP_XCHG_QUICK
2010:01:05-19:29:57 acenn pluto[7169]: |    flags: ISAKMP_FLAG_ENCRYPTION
2010:01:05-19:29:57 acenn pluto[7169]: |    message ID:  b1 77 86 1c
2010:01:05-19:29:57 acenn pluto[7169]: |    length: 1036
2010:01:05-19:29:57 acenn pluto[7169]: | ICOOKIE:  d4 47 00 c4  46 4d 09 09
2010:01:05-19:29:57 acenn pluto[7169]: | RCOOKIE:  0b e3 90 f0  1a 30 ea 70
2010:01:05-19:29:57 acenn pluto[7169]: | peer:  c0 a8 02 96
2010:01:05-19:29:57 acenn pluto[7169]: | state hash entry 10
2010:01:05-19:29:57 acenn pluto[7169]: | state object not found
2010:01:05-19:29:57 acenn pluto[7169]: | ICOOKIE:  d4 47 00 c4  46 4d 09 09
2010:01:05-19:29:57 acenn pluto[7169]: | RCOOKIE:  0b e3 90 f0  1a 30 ea 70
2010:01:05-19:29:57 acenn pluto[7169]: | peer:  c0 a8 02 96
2010:01:05-19:29:57 acenn pluto[7169]: | state hash entry 10
2010:01:05-19:29:57 acenn pluto[7169]: | state object #1 found, in STATE_MODE_CFG_R1
2010:01:05-19:29:57 acenn pluto[7169]: | ***parse ISAKMP Hash Payload:
2010:01:05-19:29:57 acenn pluto[7169]: |    next payload type: ISAKMP_NEXT_SA
2010:01:05-19:29:57 acenn pluto[7169]: |    length: 24
2010:01:05-19:29:57 acenn pluto[7169]: | ***parse ISAKMP Security Association Payload:
2010:01:05-19:29:57 acenn pluto[7169]: |    next payload type: ISAKMP_NEXT_NONCE
2010:01:05-19:29:57 acenn pluto[7169]: |    length: 922
2010:01:05-19:29:57 acenn pluto[7169]: |    DOI: ISAKMP_DOI_IPSEC
2010:01:05-19:29:57 acenn pluto[7169]: | ***parse ISAKMP Nonce Payload:
2010:01:05-19:29:57 acenn pluto[7169]: |    next payload type: ISAKMP_NEXT_ID
2010:01:05-19:29:57 acenn pluto[7169]: |    length: 24
2010:01:05-19:29:57 acenn pluto[7169]: | ***parse ISAKMP Identification Payload (IPsec DOI):
2010:01:05-19:29:57 acenn pluto[7169]: |    next payload type: ISAKMP_NEXT_ID
2010:01:05-19:29:57 acenn pluto[7169]: |    length: 12
2010:01:05-19:29:57 acenn pluto[7169]: |    ID type: ID_IPV4_ADDR
2010:01:05-19:29:57 acenn pluto[7169]: |    Protocol ID: 0
2010:01:05-19:29:57 acenn pluto[7169]: |    port: 0
2010:01:05-19:29:57 acenn pluto[7169]: | ***parse ISAKMP Identification Payload (IPsec DOI):
2010:01:05-19:29:57 acenn pluto[7169]: |    next payload type: ISAKMP_NEXT_NONE
2010:01:05-19:29:57 acenn pluto[7169]: |    length: 16
2010:01:05-19:29:57 acenn pluto[7169]: |    ID type: ID_IPV4_ADDR_SUBNET
2010:01:05-19:29:57 acenn pluto[7169]: |    Protocol ID: 0
2010:01:05-19:29:57 acenn pluto[7169]: |    port: 0
2010:01:05-19:29:57 acenn pluto[7169]: | removing 10 bytes of padding
2010:01:05-19:29:57 acenn pluto[7169]: | peer client is 10.242.5.1
2010:01:05-19:29:57 acenn pluto[7169]: | peer client protocol/port is 0/0
2010:01:05-19:29:57 acenn pluto[7169]: | our client is subnet 0.0.0.0/0
2010:01:05-19:29:57 acenn pluto[7169]: | our client protocol/port is 0/0
2010:01:05-19:29:57 acenn pluto[7169]: | no valid attribute cert found
2010:01:05-19:29:57 acenn pluto[7169]: | duplicating state object #1
2010:01:05-19:29:57 acenn pluto[7169]: | creating state object #2 at 0x995abc8
2010:01:05-19:29:57 acenn pluto[7169]: | ICOOKIE:  d4 47 00 c4  46 4d 09 09
2010:01:05-19:29:57 acenn pluto[7169]: | RCOOKIE:  0b e3 90 f0  1a 30 ea 70
2010:01:05-19:29:57 acenn pluto[7169]: | peer:  c0 a8 02 96
2010:01:05-19:29:57 acenn pluto[7169]: | state hash entry 10
2010:01:05-19:29:57 acenn pluto[7169]: | inserting event EVENT_SO_DISCARD, timeout in 0 seconds for #2
2010:01:05-19:29:57 acenn pluto[7169]: | ****parse IPsec DOI SIT:
2010:01:05-19:29:57 acenn pluto[7169]: |    IPsec DOI SIT: SIT_IDENTITY_ONLY
2010:01:05-19:29:57 acenn pluto[7169]: | ****parse ISAKMP Proposal Payload:
2010:01:05-19:29:57 acenn pluto[7169]: |    next payload type: ISAKMP_NEXT_P
2010:01:05-19:29:57 acenn pluto[7169]: |    length: 44
2010:01:05-19:29:57 acenn pluto[7169]: |    proposal number: 1
2010:01:05-19:29:57 acenn pluto[7169]: |    protocol ID: PROTO_IPSEC_ESP
2010:01:05-19:29:57 acenn pluto[7169]: |    SPI size: 4
2010:01:05-19:29:57 acenn pluto[7169]: |    number of transforms: 1
2010:01:05-19:29:57 acenn pluto[7169]: | parsing 4 raw bytes of ISAKMP Proposal Payload into SPI
2010:01:05-19:29:57 acenn pluto[7169]: | SPI  65 7c 45 a4
2010:01:05-19:29:57 acenn pluto[7169]: | ****parse ISAKMP Proposal Payload:
2010:01:05-19:29:57 acenn pluto[7169]: |    next payload type: ISAKMP_NEXT_P
2010:01:05-19:29:57 acenn pluto[7169]: |    length: 34
2010:01:05-19:29:57 acenn pluto[7169]: |    proposal number: 1
2010:01:05-19:29:57 acenn pluto[7169]: |    protocol ID: PROTO_IPCOMP
2010:01:05-19:29:57 acenn pluto[7169]: |    SPI size: 2
2010:01:05-19:29:57 acenn pluto[7169]: |    number of transforms: 1
2010:01:05-19:29:57 acenn pluto[7169]: | parsing 2 raw bytes of ISAKMP Proposal Payload into CPI
2010:01:05-19:29:57 acenn pluto[7169]: | CPI  94 f7
2010:01:05-19:29:57 acenn pluto[7169]: | ****parse ISAKMP Proposal Payload:
2010:01:05-19:29:57 acenn pluto[7169]: |    next payload type: ISAKMP_NEXT_P
2010:01:05-19:29:57 acenn pluto[7169]: |    length: 44
2010:01:05-19:29:57 acenn pluto[7169]: |    proposal number: 2
2010:01:05-19:29:57 acenn pluto[7169]: |    protocol ID: PROTO_IPSEC_ESP
2010:01:05-19:29:57 acenn pluto[7169]: |    SPI size: 4
2010:01:05-19:29:57 acenn pluto[7169]: |    number of transforms: 1
2010:01:05-19:29:57 acenn pluto[7169]: | *****parse ISAKMP Transform Payload (ESP):
2010:01:05-19:29:57 acenn pluto[7169]: |    next payload type: ISAKMP_NEXT_NONE
2010:01:05-19:29:57 acenn pluto[7169]: |    length: 32
2010:01:05-19:29:57 acenn pluto[7169]: |    transform number: 1
2010:01:05-19:29:57 acenn pluto[7169]: |    transform ID: AES_CBC
2010:01:05-19:29:57 acenn pluto[7169]: | ******parse ISAKMP IPsec DOI attribute:
2010:01:05-19:29:57 acenn pluto[7169]: |    af+type: AUTH_ALGORITHM
2010:01:05-19:29:57 acenn pluto[7169]: |    length/value: 1
2010:01:05-19:29:57 acenn pluto[7169]: |    [1 is HMAC_MD5]
2010:01:05-19:29:57 acenn pluto[7169]: | ******parse ISAKMP IPsec DOI attribute:
2010:01:05-19:29:57 acenn pluto[7169]: |    af+type: KEY_LENGTH
2010:01:05-19:29:57 acenn pluto[7169]: |    length/value: 256
2010:01:05-19:29:57 acenn pluto[7169]: | ******parse ISAKMP IPsec DOI attribute:
2010:01:05-19:29:57 acenn pluto[7169]: |    af+type: ENCAPSULATION_MODE
2010:01:05-19:29:57 acenn pluto[7169]: |    length/value: 1
2010:01:05-19:29:57 acenn pluto[7169]: |    [1 is ENCAPSULATION_MODE_TUNNEL]
2010:01:05-19:29:57 acenn pluto[7169]: | ******parse ISAKMP IPsec DOI attribute:
2010:01:05-19:29:57 acenn pluto[7169]: |    af+type: SA_LIFE_TYPE
2010:01:05-19:29:57 acenn pluto[7169]: |    length/value: 1
2010:01:05-19:29:57 acenn pluto[7169]: |    [1 is SA_LIFE_TYPE_SECONDS]
2010:01:05-19:29:57 acenn pluto[7169]: | ******parse ISAKMP IPsec DOI attribute:
2010:01:05-19:29:57 acenn pluto[7169]: |    af+type: SA_LIFE_DURATION (variable length)
2010:01:05-19:29:57 acenn pluto[7169]: |    length/value: 4
2010:01:05-19:29:57 acenn pluto[7169]: |    long duration: 2147483
2010:01:05-19:29:57 acenn pluto[7169]: | *****parse ISAKMP Transform Payload (COMP):
2010:01:05-19:29:57 acenn pluto[7169]: |    next payload type: ISAKMP_NEXT_NONE
2010:01:05-19:29:57 acenn pluto[7169]: |    length: 24
2010:01:05-19:29:57 acenn pluto[7169]: |    transform number: 1
2010:01:05-19:29:57 acenn pluto[7169]: |    transform ID: IPCOMP_LZS
2010:01:05-19:29:57 acenn pluto[7169]: | ******parse ISAKMP IPsec DOI attribute:
2010:01:05-19:29:57 acenn pluto[7169]: |    af+type: ENCAPSULATION_MODE
2010:01:05-19:29:57 acenn pluto[7169]: |    length/value: 1
2010:01:05-19:29:57 acenn pluto[7169]: |    [1 is ENCAPSULATION_MODE_TUNNEL]
2010:01:05-19:29:57 acenn pluto[7169]: | ******parse ISAKMP IPsec DOI attribute:
2010:01:05-19:29:57 acenn pluto[7169]: |    af+type: SA_LIFE_TYPE
2010:01:05-19:29:57 acenn pluto[7169]: |    length/value: 1
2010:01:05-19:29:57 acenn pluto[7169]: |    [1 is SA_LIFE_TYPE_SECONDS]
2010:01:05-19:29:57 acenn pluto[7169]: | ******parse ISAKMP IPsec DOI attribute:
2010:01:05-19:29:57 acenn pluto[7169]: |    af+type: SA_LIFE_DURATION (variable length)
2010:01:05-19:29:57 acenn pluto[7169]: |    length/value: 4
2010:01:05-19:29:57 acenn pluto[7169]: |    long duration: 2147483
2010:01:05-19:29:57 acenn pluto[7169]: | unsupported IPCOMP Transform IPCOMP_LZS from 192.168.2.150
2010:01:05-19:29:57 acenn pluto[7169]: | parsing 4 raw bytes of ISAKMP Proposal Payload into SPI
2010:01:05-19:29:57 acenn pluto[7169]: | SPI  65 7c 45 a4
2010:01:05-19:29:57 acenn pluto[7169]: | ****parse ISAKMP Proposal Payload:
2010:01:05-19:29:57 acenn pluto[7169]: |    next payload type: ISAKMP_NEXT_P
2010:01:05-19:29:57 acenn pluto[7169]: |    length: 34
2010:01:05-19:29:57 acenn pluto[7169]: |    proposal number: 2
2010:01:05-19:29:57 acenn pluto[7169]: |    protocol ID: PROTO_IPCOMP
2010:01:05-19:29:57 acenn pluto[7169]: |    SPI size: 2
2010:01:05-19:29:57 acenn pluto[7169]: |    number of transforms: 1
2010:01:05-19:29:57 acenn pluto[7169]: | parsing 2 raw bytes of ISAKMP Proposal Payload into CPI
2010:01:05-19:29:57 acenn pluto[7169]: | CPI  94 22
2010:01:05-19:29:57 acenn pluto[7169]: | ****parse ISAKMP Proposal Payload:
2010:01:05-19:29:57 acenn pluto[7169]: |    next payload type: ISAKMP_NEXT_P
2010:01:05-19:29:57 acenn pluto[7169]: |    length: 44
2010:01:05-19:29:57 acenn pluto[7169]: |    proposal number: 3
2010:01:05-19:29:57 acenn pluto[7169]: |    protocol ID: PROTO_IPSEC_ESP
2010:01:05-19:29:57 acenn pluto[7169]: |    SPI size: 4
2010:01:05-19:29:57 acenn pluto[7169]: |    number of transforms: 1
2010:01:05-19:29:57 acenn pluto[7169]: | *****parse ISAKMP Transform Payload (ESP):
2010:01:05-19:29:57 acenn pluto[7169]: |    next payload type: ISAKMP_NEXT_NONE
2010:01:05-19:29:57 acenn pluto[7169]: |    length: 32
2010:01:05-19:29:57 acenn pluto[7169]: |    transform number: 1
2010:01:05-19:29:57 acenn pluto[7169]: |    transform ID: AES_CBC
2010:01:05-19:29:57 acenn pluto[7169]: | ******parse ISAKMP IPsec DOI attribute:
2010:01:05-19:29:57 acenn pluto[7169]: |    af+type: AUTH_ALGORITHM
2010:01:05-19:29:57 acenn pluto[7169]: |    length/value: 2
2010:01:05-19:29:57 acenn pluto[7169]: |    [2 is HMAC_SHA1]
2010:01:05-19:29:57 acenn pluto[7169]: | ******parse ISAKMP IPsec DOI attribute:
2010:01:05-19:29:57 acenn pluto[7169]: |    af+type: KEY_LENGTH
2010:01:05-19:29:57 acenn pluto[7169]: |    length/value: 256
2010:01:05-19:29:57 acenn pluto[7169]: | ******parse ISAKMP IPsec DOI attribute:
2010:01:05-19:29:57 acenn pluto[7169]: |    af+type: ENCAPSULATION_MODE
2010:01:05-19:29:57 acenn pluto[7169]: |    length/value: 1
2010:01:05-19:29:57 acenn pluto[7169]: |    [1 is ENCAPSULATION_MODE_TUNNEL]
2010:01:05-19:29:57 acenn pluto[7169]: | ******parse ISAKMP IPsec DOI attribute:
2010:01:05-19:29:57 acenn pluto[7169]: |    af+type: SA_LIFE_TYPE
2010:01:05-19:29:57 acenn pluto[7169]: |    length/value: 1
2010:01:05-19:29:57 acenn pluto[7169]: |    [1 is SA_LIFE_TYPE_SECONDS]
2010:01:05-19:29:57 acenn pluto[7169]: | ******parse ISAKMP IPsec DOI attribute:
2010:01:05-19:29:57 acenn pluto[7169]: |    af+type: SA_LIFE_DURATION (variable length)
2010:01:05-19:29:57 acenn pluto[7169]: |    length/value: 4
2010:01:05-19:29:57 acenn pluto[7169]: |    long duration: 2147483
2010:01:05-19:29:57 acenn pluto[7169]: | *****parse ISAKMP Transform Payload (COMP):
2010:01:05-19:29:57 acenn pluto[7169]: |    next payload type: ISAKMP_NEXT_NONE
2010:01:05-19:29:57 acenn pluto[7169]: |    length: 24
2010:01:05-19:29:57 acenn pluto[7169]: |    transform number: 1
2010:01:05-19:29:57 acenn pluto[7169]: |    transform ID: IPCOMP_LZS
2010:01:05-19:29:57 acenn pluto[7169]: | ******parse ISAKMP IPsec DOI attribute:
2010:01:05-19:29:57 acenn pluto[7169]: |    af+type: ENCAPSULATION_MODE
2010:01:05-19:29:57 acenn pluto[7169]: |    length/value: 1
2010:01:05-19:29:57 acenn pluto[7169]: |    [1 is ENCAPSULATION_MODE_TUNNEL]
2010:01:05-19:29:57 acenn pluto[7169]: | ******parse ISAKMP IPsec DOI attribute:
2010:01:05-19:29:57 acenn pluto[7169]: |    af+type: SA_LIFE_TYPE
2010:01:05-19:29:57 acenn pluto[7169]: |    length/value: 1
2010:01:05-19:29:57 acenn pluto[7169]: |    [1 is SA_LIFE_TYPE_SECONDS]
2010:01:05-19:29:57 acenn pluto[7169]: | ******parse ISAKMP IPsec DOI attribute:
2010:01:05-19:29:57 acenn pluto[7169]: |    af+type: SA_LIFE_DURATION (variable length)
2010:01:05-19:29:57 acenn pluto[7169]: |    length/value: 4
2010:01:05-19:29:57 acenn pluto[7169]: |    long duration: 2147483
2010:01:05-19:29:57 acenn pluto[7169]: | unsupported IPCOMP Transform IPCOMP_LZS from 192.168.2.150
2010:01:05-19:29:57 acenn pluto[7169]: | parsing 4 raw bytes of ISAKMP Proposal Payload into SPI
2010:01:05-19:29:57 acenn pluto[7169]: | SPI  65 7c 45 a4
2010:01:05-19:29:57 acenn pluto[7169]: | ****parse ISAKMP Proposal Payload:
2010:01:05-19:29:57 acenn pluto[7169]: |    next payload type: ISAKMP_NEXT_P
2010:01:05-19:29:57 acenn pluto[7169]: |    length: 34
2010:01:05-19:29:57 acenn pluto[7169]: |    proposal number: 3
2010:01:05-19:29:57 acenn pluto[7169]: |    protocol ID: PROTO_IPCOMP
2010:01:05-19:29:57 acenn pluto[7169]: |    SPI size: 2
2010:01:05-19:29:57 acenn pluto[7169]: |    number of transforms: 1
2010:01:05-19:29:57 acenn pluto[7169]: | parsing 2 raw bytes of ISAKMP Proposal Payload into CPI
2010:01:05-19:29:57 acenn pluto[7169]: | CPI  7a f9
2010:01:05-19:29:57 acenn pluto[7169]: | ****parse ISAKMP Proposal Payload:
2010:01:05-19:29:57 acenn pluto[7169]: |    next payload type: ISAKMP_NEXT_P
2010:01:05-19:29:57 acenn pluto[7169]: |    length: 44
2010:01:05-19:29:57 acenn pluto[7169]: |    proposal number: 4
2010:01:05-19:29:57 acenn pluto[7169]: |    protocol ID: PROTO_IPSEC_ESP
2010:01:05-19:29:57 acenn pluto[7169]: |    SPI size: 4
2010:01:05-19:29:57 acenn pluto[7169]: |    number of transforms: 1
2010:01:05-19:29:57 acenn pluto[7169]: | *****parse ISAKMP Transform Payload (ESP):
2010:01:05-19:29:57 acenn pluto[7169]: |    next payload type: ISAKMP_NEXT_NONE
2010:01:05-19:29:57 acenn pluto[7169]: |    length: 32
2010:01:05-19:29:57 acenn pluto[7169]: |    transform number: 1
2010:01:05-19:29:57 acenn pluto[7169]: |    transform ID: AES_CBC
2010:01:05-19:29:57 acenn pluto[7169]: | ******parse ISAKMP IPsec DOI attribute:
2010:01:05-19:29:57 acenn pluto[7169]: |    af+type: AUTH_ALGORITHM
2010:01:05-19:29:57 acenn pluto[7169]: |    length/value: 1
2010:01:05-19:29:57 acenn pluto[7169]: |    [1 is HMAC_MD5]
2010:01:05-19:29:57 acenn pluto[7169]: | ******parse ISAKMP IPsec DOI attribute:
2010:01:05-19:29:57 acenn pluto[7169]: |    af+type: KEY_LENGTH
2010:01:05-19:29:57 acenn pluto[7169]: |    length/value: 128
2010:01:05-19:29:57 acenn pluto[7169]: | ******parse ISAKMP IPsec DOI attribute:
2010:01:05-19:29:57 acenn pluto[7169]: |    af+type: ENCAPSULATION_MODE
2010:01:05-19:29:57 acenn pluto[7169]: |    length/value: 1
2010:01:05-19:29:57 acenn pluto[7169]: |    [1 is ENCAPSULATION_MODE_TUNNEL]
2010:01:05-19:29:57 acenn pluto[7169]: | ******parse ISAKMP IPsec DOI attribute:
2010:01:05-19:29:57 acenn pluto[7169]: |    af+type: SA_LIFE_TYPE
2010:01:05-19:29:57 acenn pluto[7169]: |    length/value: 1
2010:01:05-19:29:57 acenn pluto[7169]: |    [1 is SA_LIFE_TYPE_SECONDS]
2010:01:05-19:29:57 acenn pluto[7169]: | ******parse ISAKMP IPsec DOI attribute:
2010:01:05-19:29:57 acenn pluto[7169]: |    af+type: SA_LIFE_DURATION (variable length)
2010:01:05-19:29:57 acenn pluto[7169]: |    length/value: 4
2010:01:05-19:29:57 acenn pluto[7169]: |    long duration: 2147483
2010:01:05-19:29:57 acenn pluto[7169]: | *****parse ISAKMP Transform Payload (COMP):
2010:01:05-19:29:57 acenn pluto[7169]: |    next payload type: ISAKMP_NEXT_NONE
2010:01:05-19:29:57 acenn pluto[7169]: |    length: 24
2010:01:05-19:29:57 acenn pluto[7169]: |    transform number: 1
2010:01:05-19:29:57 acenn pluto[7169]: |    transform ID: IPCOMP_LZS
2010:01:05-19:29:57 acenn pluto[7169]: | ******parse ISAKMP IPsec DOI attribute:
2010:01:05-19:29:57 acenn pluto[7169]: |    af+type: ENCAPSULATION_MODE
2010:01:05-19:29:57 acenn pluto[7169]: |    length/value: 1
2010:01:05-19:29:57 acenn pluto[7169]: |    [1 is ENCAPSULATION_MODE_TUNNEL]
2010:01:05-19:29:57 acenn pluto[7169]: | ******parse ISAKMP IPsec DOI attribute:
2010:01:05-19:29:57 acenn pluto[7169]: |    af+type: SA_LIFE_TYPE
2010:01:05-19:29:57 acenn pluto[7169]: |    length/value: 1
2010:01:05-19:29:57 acenn pluto[7169]: |    [1 is SA_LIFE_TYPE_SECONDS]
2010:01:05-19:29:57 acenn pluto[7169]: | ******parse ISAKMP IPsec DOI attribute:
2010:01:05-19:29:57 acenn pluto[7169]: |    af+type: SA_LIFE_DURATION (variable length)
2010:01:05-19:29:57 acenn pluto[7169]: |    length/value: 4
2010:01:05-19:29:57 acenn pluto[7169]: |    long duration: 2147483
2010:01:05-19:29:57 acenn pluto[7169]: | unsupported IPCOMP Transform IPCOMP_LZS from 192.168.2.150
2010:01:05-19:29:57 acenn pluto[7169]: | parsing 4 raw bytes of ISAKMP Proposal Payload into SPI
2010:01:05-19:29:57 acenn pluto[7169]: | SPI  65 7c 45 a4
2010:01:05-19:29:57 acenn pluto[7169]: | ****parse ISAKMP Proposal Payload:
2010:01:05-19:29:57 acenn pluto[7169]: |    next payload type: ISAKMP_NEXT_P
2010:01:05-19:29:57 acenn pluto[7169]: |    length: 34
2010:01:05-19:29:57 acenn pluto[7169]: |    proposal number: 4
2010:01:05-19:29:57 acenn pluto[7169]: |    protocol ID: PROTO_IPCOMP
2010:01:05-19:29:57 acenn pluto[7169]: |    SPI size: 2
2010:01:05-19:29:57 acenn pluto[7169]: |    number of transforms: 1
2010:01:05-19:29:57 acenn pluto[7169]: | parsing 2 raw bytes of ISAKMP Proposal Payload into CPI
2010:01:05-19:29:57 acenn pluto[7169]: | CPI  60 30
2010:01:05-19:29:57 acenn pluto[7169]: | ****parse ISAKMP Proposal Payload:
2010:01:05-19:29:57 acenn pluto[7169]: |    next payload type: ISAKMP_NEXT_P
2010:01:05-19:29:57 acenn pluto[7169]: |    length: 44
2010:01:05-19:29:57 acenn pluto[7169]: |    proposal number: 5
2010:01:05-19:29:57 acenn pluto[7169]: |    protocol ID: PROTO_IPSEC_ESP
2010:01:05-19:29:57 acenn pluto[7169]: |    SPI size: 4
2010:01:05-19:29:57 acenn pluto[7169]: |    number of transforms: 1
2010:01:05-19:29:57 acenn pluto[7169]: | *****parse ISAKMP Transform Payload (ESP):
2010:01:05-19:29:57 acenn pluto[7169]: |    next payload type: ISAKMP_NEXT_NONE
2010:01:05-19:29:57 acenn pluto[7169]: |    length: 32
2010:01:05-19:29:57 acenn pluto[7169]: |    transform number: 1
2010:01:05-19:29:57 acenn pluto[7169]: |    transform ID: AES_CBC
2010:01:05-19:29:57 acenn pluto[7169]: | ******parse ISAKMP IPsec DOI attribute:
2010:01:05-19:29:57 acenn pluto[7169]: |    af+type: AUTH_ALGORITHM
2010:01:05-19:29:57 acenn pluto[7169]: |    length/value: 2
2010:01:05-19:29:57 acenn pluto[7169]: |    [2 is HMAC_SHA1]
2010:01:05-19:29:57 acenn pluto[7169]: | ******parse ISAKMP IPsec DOI attribute:
2010:01:05-19:29:57 acenn pluto[7169]: |    af+type: KEY_LENGTH
2010:01:05-19:29:57 acenn pluto[7169]: |    length/value: 128
2010:01:05-19:29:57 acenn pluto[7169]: | ******parse ISAKMP IPsec DOI attribute:
2010:01:05-19:29:57 acenn pluto[7169]: |    af+type: ENCAPSULATION_MODE
2010:01:05-19:29:57 acenn pluto[7169]: |    length/value: 1
2010:01:05-19:29:57 acenn pluto[7169]: |    [1 is ENCAPSULATION_MODE_TUNNEL]
2010:01:05-19:29:57 acenn pluto[7169]: | ******parse ISAKMP IPsec DOI attribute:
2010:01:05-19:29:57 acenn pluto[7169]: |    af+type: SA_LIFE_TYPE
2010:01:05-19:29:57 acenn pluto[7169]: |    length/value: 1
2010:01:05-19:29:57 acenn pluto[7169]: |    [1 is SA_LIFE_TYPE_SECONDS]
2010:01:05-19:29:57 acenn pluto[7169]: | ******parse ISAKMP IPsec DOI attribute:
2010:01:05-19:29:57 acenn pluto[7169]: |    af+type: SA_LIFE_DURATION (variable length)
2010:01:05-19:29:57 acenn pluto[7169]: |    length/value: 4
2010:01:05-19:29:57 acenn pluto[7169]: |    long duration: 2147483
2010:01:05-19:29:57 acenn pluto[7169]: | *****parse ISAKMP Transform Payload (COMP):
2010:01:05-19:29:57 acenn pluto[7169]: |    next payload type: ISAKMP_NEXT_NONE
2010:01:05-19:29:57 acenn pluto[7169]: |    length: 24
2010:01:05-19:29:57 acenn pluto[7169]: |    transform number: 1
2010:01:05-19:29:57 acenn pluto[7169]: |    transform ID: IPCOMP_LZS
2010:01:05-19:29:57 acenn pluto[7169]: | ******parse ISAKMP IPsec DOI attribute:
2010:01:05-19:29:57 acenn pluto[7169]: |    af+type: ENCAPSULATION_MODE
2010:01:05-19:29:57 acenn pluto[7169]: |    length/value: 1
2010:01:05-19:29:57 acenn pluto[7169]: |    [1 is ENCAPSULATION_MODE_TUNNEL]
2010:01:05-19:29:57 acenn pluto[7169]: | ******parse ISAKMP IPsec DOI attribute:
2010:01:05-19:29:57 acenn pluto[7169]: |    af+type: SA_LIFE_TYPE
2010:01:05-19:29:57 acenn pluto[7169]: |    length/value: 1
2010:01:05-19:29:57 acenn pluto[7169]: |    [1 is SA_LIFE_TYPE_SECONDS]
2010:01:05-19:29:57 acenn pluto[7169]: | ******parse ISAKMP IPsec DOI attribute:
2010:01:05-19:29:57 acenn pluto[7169]: |    af+type: SA_LIFE_DURATION (variable length)
2010:01:05-19:29:57 acenn pluto[7169]: |    length/value: 4
2010:01:05-19:29:57 acenn pluto[7169]: |    long duration: 2147483
2010:01:05-19:29:57 acenn pluto[7169]: | unsupported IPCOMP Transform IPCOMP_LZS from 192.168.2.150
2010:01:05-19:29:57 acenn pluto[7169]: | parsing 4 raw bytes of ISAKMP Proposal Payload into SPI
2010:01:05-19:29:57 acenn pluto[7169]: | SPI  65 7c 45 a4
2010:01:05-19:29:57 acenn pluto[7169]: | ****parse ISAKMP Proposal Payload:
2010:01:05-19:29:57 acenn pluto[7169]: |    next payload type: ISAKMP_NEXT_P
2010:01:05-19:29:57 acenn pluto[7169]: |    length: 44
2010:01:05-19:29:57 acenn pluto[7169]: |    proposal number: 6
2010:01:05-19:29:57 acenn pluto[7169]: |    protocol ID: PROTO_IPSEC_ESP
2010:01:05-19:29:57 acenn pluto[7169]: |    SPI size: 4
2010:01:05-19:29:57 acenn pluto[7169]: |    number of transforms: 1
2010:01:05-19:29:57 acenn pluto[7169]: | *****parse ISAKMP Transform Payload (ESP):
2010:01:05-19:29:57 acenn pluto[7169]: |    next payload type: ISAKMP_NEXT_NONE
2010:01:05-19:29:57 acenn pluto[7169]: |    length: 32
2010:01:05-19:29:57 acenn pluto[7169]: |    transform number: 1
2010:01:05-19:29:57 acenn pluto[7169]: |    transform ID: AES_CBC
2010:01:05-19:29:57 acenn pluto[7169]: | ******parse ISAKMP IPsec DOI attribute:
2010:01:05-19:29:57 acenn pluto[7169]: |    af+type: AUTH_ALGORITHM
2010:01:05-19:29:57 acenn pluto[7169]: |    length/value: 1
2010:01:05-19:29:57 acenn pluto[7169]: |    [1 is HMAC_MD5]
2010:01:05-19:29:57 acenn pluto[7169]: | ******parse ISAKMP IPsec DOI attribute:
2010:01:05-19:29:57 acenn pluto[7169]: |    af+type: KEY_LENGTH
2010:01:05-19:29:57 acenn pluto[7169]: |    length/value: 256
2010:01:05-19:29:57 acenn pluto[7169]: | ******parse ISAKMP IPsec DOI attribute:
2010:01:05-19:29:57 acenn pluto[7169]: |    af+type: ENCAPSULATION_MODE
2010:01:05-19:29:57 acenn pluto[7169]: |    length/value: 1
2010:01:05-19:29:57 acenn pluto[7169]: |    [1 is ENCAPSULATION_MODE_TUNNEL]
2010:01:05-19:29:57 acenn pluto[7169]: | ******parse ISAKMP IPsec DOI attribute:
2010:01:05-19:29:57 acenn pluto[7169]: |    af+type: SA_LIFE_TYPE
2010:01:05-19:29:57 acenn pluto[7169]: |    length/value: 1
2010:01:05-19:29:57 acenn pluto[7169]: |    [1 is SA_LIFE_TYPE_SECONDS]
2010:01:05-19:29:57 acenn pluto[7169]: | ******parse ISAKMP IPsec DOI attribute:
2010:01:05-19:29:57 acenn pluto[7169]: |    af+type: SA_LIFE_DURATION (variable length)
2010:01:05-19:29:57 acenn pluto[7169]: |    length/value: 4
2010:01:05-19:29:57 acenn pluto[7169]: |    long duration: 2147483
2010:01:05-19:29:57 acenn pluto[7169]: "D_REF_zfmTEQwktH_0"[1] 192.168.2.150:1193 #2: responding to Quick Mode
2010:01:05-19:29:57 acenn pluto[7169]: | kernel_alg_esp_auth_keylen(auth=1, sadb_aalg=2): a_keylen=16
2010:01:05-19:29:57 acenn pluto[7169]: | route owner of "D_REF_zfmTEQwktH_0"[1] 192.168.2.150:1193 unrouted: NULL
2010:01:05-19:29:57 acenn pluto[7169]: | install_inbound_ipsec_sa() checking if we can route
2010:01:05-19:29:57 acenn pluto[7169]: | route owner of "D_REF_zfmTEQwktH_0"[1] 192.168.2.150:1193 unrouted: NULL; eroute owner: NULL
2010:01:05-19:29:57 acenn pluto[7169]: | kernel_alg_esp_info():transid=12, auth=1, ei=0x80d7f88, enckeylen=32, authkeylen=16, encryptalg=12, authalg=2
2010:01:05-19:29:57 acenn pluto[7169]: "D_REF_zfmTEQwktH_0"[1] 192.168.2.150:1193 #2: ERROR: netlink response for Add SA esp.0@my_public_ip included errno 22: Invalid argument
2010:01:05-19:29:57 acenn pluto[7169]: | state transition function for STATE_QUICK_R0 had internal error
2010:01:05-19:29:57 acenn pluto[7169]: | next event EVENT_SO_DISCARD in 0 seconds for #2
2010:01:05-19:29:57 acenn pluto[7169]: | 
2010:01:05-19:29:57 acenn pluto[7169]: | *time to handle event
2010:01:05-19:29:57 acenn pluto[7169]: | event after this is EVENT_NAT_T_KEEPALIVE in 55 seconds
2010:01:05-19:29:57 acenn pluto[7169]: | ICOOKIE:  d4 47 00 c4  46 4d 09 09
2010:01:05-19:29:57 acenn pluto[7169]: | RCOOKIE:  0b e3 90 f0  1a 30 ea 70
2010:01:05-19:29:57 acenn pluto[7169]: | peer:  c0 a8 02 96
2010:01:05-19:29:57 acenn pluto[7169]: | state hash entry 10
2010:01:05-19:29:57 acenn pluto[7169]: | next event EVENT_NAT_T_KEEPALIVE in 55 seconds
2010:01:05-19:30:03 acenn pluto[7169]: | 
2010:01:05-19:30:03 acenn pluto[7169]: | *received 1036 bytes from 192.168.2.150:1193 on eth1
2010:01:05-19:30:03 acenn pluto[7169]: | **parse ISAKMP Message:
2010:01:05-19:30:03 acenn pluto[7169]: |    initiator cookie:
2010:01:05-19:30:03 acenn pluto[7169]: |   d4 47 00 c4  46 4d 09 09
2010:01:05-19:30:03 acenn pluto[7169]: |    responder cookie:
2010:01:05-19:30:03 acenn pluto[7169]: |   0b e3 90 f0  1a 30 ea 70
2010:01:05-19:30:03 acenn pluto[7169]: |    next payload type: ISAKMP_NEXT_HASH
2010:01:05-19:30:03 acenn pluto[7169]: |    ISAKMP version: ISAKMP Version 1.0
2010:01:05-19:30:03 acenn pluto[7169]: |    exchange type: ISAKMP_XCHG_QUICK
2010:01:05-19:30:03 acenn pluto[7169]: |    flags: ISAKMP_FLAG_ENCRYPTION
2010:01:05-19:30:03 acenn pluto[7169]: |    message ID:  b1 77 86 1c
2010:01:05-19:30:03 acenn pluto[7169]: |    length: 1036
2010:01:05-19:30:03 acenn pluto[7169]: | ICOOKIE:  d4 47 00 c4  46 4d 09 09
2010:01:05-19:30:03 acenn pluto[7169]: | RCOOKIE:  0b e3 90 f0  1a 30 ea 70
2010:01:05-19:30:03 acenn pluto[7169]: | peer:  c0 a8 02 96
2010:01:05-19:30:03 acenn pluto[7169]: | state hash entry 10
2010:01:05-19:30:03 acenn pluto[7169]: | state object not found
2010:01:05-19:30:03 acenn pluto[7169]: | ICOOKIE:  d4 47 00 c4  46 4d 09 09
2010:01:05-19:30:03 acenn pluto[7169]: | RCOOKIE:  0b e3 90 f0  1a 30 ea 70
2010:01:05-19:30:03 acenn pluto[7169]: | peer:  c0 a8 02 96
2010:01:05-19:30:03 acenn pluto[7169]: | state hash entry 10
2010:01:05-19:30:03 acenn pluto[7169]: | state object #1 found, in STATE_MODE_CFG_R1
2010:01:05-19:30:03 acenn pluto[7169]: "D_REF_zfmTEQwktH_0"[1] 192.168.2.150:1193 #1: Quick Mode I1 message is unacceptable because it uses a previously used Message ID 0x1c8677b1 (perhaps this is a duplicated packet)
2010:01:05-19:30:03 acenn pluto[7169]: "D_REF_zfmTEQwktH_0"[1] 192.168.2.150:1193 #1: sending encrypted notification INVALID_MESSAGE_ID to 192.168.2.150:1193
2010:01:05-19:30:03 acenn pluto[7169]: | next event EVENT_NAT_T_KEEPALIVE in 49 seconds
2010:01:05-19:30:07 acenn pluto[7169]: | 
2010:01:05-19:30:07 acenn pluto[7169]: | *received 92 bytes from 192.168.2.150:1193 on eth1
2010:01:05-19:30:07 acenn pluto[7169]: | **parse ISAKMP Message:
2010:01:05-19:30:07 acenn pluto[7169]: |    initiator cookie:
2010:01:05-19:30:07 acenn pluto[7169]: |   d4 47 00 c4  46 4d 09 09
2010:01:05-19:30:07 acenn pluto[7169]: |    responder cookie:
2010:01:05-19:30:07 acenn pluto[7169]: |   0b e3 90 f0  1a 30 ea 70
2010:01:05-19:30:07 acenn pluto[7169]: |    next payload type: ISAKMP_NEXT_HASH
2010:01:05-19:30:07 acenn pluto[7169]: |    ISAKMP version: ISAKMP Version 1.0
2010:01:05-19:30:07 acenn pluto[7169]: |    exchange type: ISAKMP_XCHG_INFO
2010:01:05-19:30:07 acenn pluto[7169]: |    flags: ISAKMP_FLAG_ENCRYPTION
2010:01:05-19:30:07 acenn pluto[7169]: |    message ID:  4d 6d 01 d8
2010:01:05-19:30:07 acenn pluto[7169]: |    length: 92
2010:01:05-19:30:07 acenn pluto[7169]: | ICOOKIE:  d4 47 00 c4  46 4d 09 09
2010:01:05-19:30:07 acenn pluto[7169]: | RCOOKIE:  0b e3 90 f0  1a 30 ea 70
2010:01:05-19:30:07 acenn pluto[7169]: | peer:  c0 a8 02 96
2010:01:05-19:30:07 acenn pluto[7169]: | state hash entry 10
2010:01:05-19:30:07 acenn pluto[7169]: | state object #1 found, in STATE_MODE_CFG_R1
2010:01:05-19:30:07 acenn pluto[7169]: | ***parse ISAKMP Hash Payload:
2010:01:05-19:30:07 acenn pluto[7169]: |    next payload type: ISAKMP_NEXT_N
2010:01:05-19:30:07 acenn pluto[7169]: |    length: 24
2010:01:05-19:30:07 acenn pluto[7169]: | ***parse ISAKMP Notification Payload:
2010:01:05-19:30:07 acenn pluto[7169]: |    next payload type: ISAKMP_NEXT_NONE
2010:01:05-19:30:07 acenn pluto[7169]: |    length: 32
2010:01:05-19:30:07 acenn pluto[7169]: |    DOI: ISAKMP_DOI_IPSEC
2010:01:05-19:30:07 acenn pluto[7169]: |    protocol ID: 1
2010:01:05-19:30:07 acenn pluto[7169]: |    SPI size: 16
2010:01:05-19:30:07 acenn pluto[7169]: |    Notify Message Type: R_U_THERE
2010:01:05-19:30:07 acenn pluto[7169]: | removing 8 bytes of padding
2010:01:05-19:30:07 acenn pluto[7169]: | info:  d4 47 00 c4  46 4d 09 09  0b e3 90 f0  1a 30 ea 70
2010:01:05-19:30:07 acenn pluto[7169]: |   8b 1a 57 bc
2010:01:05-19:30:07 acenn pluto[7169]: | received DPD notification R_U_THERE with seqno = 2333759420
2010:01:05-19:30:07 acenn pluto[7169]: | sent DPD notification R_U_THERE_ACK with seqno = 2333759420
2010:01:05-19:30:07 acenn pluto[7169]: | next event EVENT_NAT_T_KEEPALIVE in 45 seconds
2010:01:05-19:30:08 acenn pluto[7169]: | 
2010:01:05-19:30:08 acenn pluto[7169]: | *received 1036 bytes from 192.168.2.150:1193 on eth1
2010:01:05-19:30:08 acenn pluto[7169]: | **parse ISAKMP Message:
2010:01:05-19:30:08 acenn pluto[7169]: |    initiator cookie:
2010:01:05-19:30:08 acenn pluto[7169]: |   d4 47 00 c4  46 4d 09 09
2010:01:05-19:30:08 acenn pluto[7169]: |    responder cookie:
2010:01:05-19:30:08 acenn pluto[7169]: |   0b e3 90 f0  1a 30 ea 70
2010:01:05-19:30:08 acenn pluto[7169]: |    next payload type: ISAKMP_NEXT_HASH
2010:01:05-19:30:08 acenn pluto[7169]: |    ISAKMP version: ISAKMP Version 1.0
2010:01:05-19:30:08 acenn pluto[7169]: |    exchange type: ISAKMP_XCHG_QUICK
2010:01:05-19:30:08 acenn pluto[7169]: |    flags: ISAKMP_FLAG_ENCRYPTION
2010:01:05-19:30:08 acenn pluto[7169]: |    message ID:  b1 77 86 1c
2010:01:05-19:30:08 acenn pluto[7169]: |    length: 1036
2010:01:05-19:30:08 acenn pluto[7169]: | ICOOKIE:  d4 47 00 c4  46 4d 09 09
2010:01:05-19:30:08 acenn pluto[7169]: | RCOOKIE:  0b e3 90 f0  1a 30 ea 70
2010:01:05-19:30:08 acenn pluto[7169]: | peer:  c0 a8 02 96
2010:01:05-19:30:08 acenn pluto[7169]: | state hash entry 10
2010:01:05-19:30:08 acenn pluto[7169]: | state object not found
2010:01:05-19:30:08 acenn pluto[7169]: | ICOOKIE:  d4 47 00 c4  46 4d 09 09
2010:01:05-19:30:08 acenn pluto[7169]: | RCOOKIE:  0b e3 90 f0  1a 30 ea 70
2010:01:05-19:30:08 acenn pluto[7169]: | peer:  c0 a8 02 96
2010:01:05-19:30:08 acenn pluto[7169]: | state hash entry 10
2010:01:05-19:30:08 acenn pluto[7169]: | state object #1 found, in STATE_MODE_CFG_R1
2010:01:05-19:30:08 acenn pluto[7169]: "D_REF_zfmTEQwktH_0"[1] 192.168.2.150:1193 #1: Quick Mode I1 message is unacceptable because it uses a previously used Message ID 0x1c8677b1 (perhaps this is a duplicated packet)
2010:01:05-19:30:08 acenn pluto[7169]: "D_REF_zfmTEQwktH_0"[1] 192.168.2.150:1193 #1: sending encrypted notification INVALID_MESSAGE_ID to 192.168.2.150:1193
2010:01:05-19:30:08 acenn pluto[7169]: | next event EVENT_NAT_T_KEEPALIVE in 44 seconds
2010:01:05-19:30:13 acenn pluto[7169]: | 
2010:01:05-19:30:13 acenn pluto[7169]: | *received 1036 bytes from 192.168.2.150:1193 on eth1
2010:01:05-19:30:13 acenn pluto[7169]: | **parse ISAKMP Message:
2010:01:05-19:30:13 acenn pluto[7169]: |    initiator cookie:
2010:01:05-19:30:13 acenn pluto[7169]: |   d4 47 00 c4  46 4d 09 09
2010:01:05-19:30:13 acenn pluto[7169]: |    responder cookie:
2010:01:05-19:30:13 acenn pluto[7169]: |   0b e3 90 f0  1a 30 ea 70
2010:01:05-19:30:13 acenn pluto[7169]: |    next payload type: ISAKMP_NEXT_HASH
2010:01:05-19:30:13 acenn pluto[7169]: |    ISAKMP version: ISAKMP Version 1.0
2010:01:05-19:30:13 acenn pluto[7169]: |    exchange type: ISAKMP_XCHG_QUICK
2010:01:05-19:30:13 acenn pluto[7169]: |    flags: ISAKMP_FLAG_ENCRYPTION
2010:01:05-19:30:13 acenn pluto[7169]: |    message ID:  b1 77 86 1c
2010:01:05-19:30:13 acenn pluto[7169]: |    length: 1036
2010:01:05-19:30:13 acenn pluto[7169]: | ICOOKIE:  d4 47 00 c4  46 4d 09 09
2010:01:05-19:30:13 acenn pluto[7169]: | RCOOKIE:  0b e3 90 f0  1a 30 ea 70
2010:01:05-19:30:13 acenn pluto[7169]: | peer:  c0 a8 02 96
2010:01:05-19:30:13 acenn pluto[7169]: | state hash entry 10
2010:01:05-19:30:13 acenn pluto[7169]: | state object not found
2010:01:05-19:30:13 acenn pluto[7169]: | ICOOKIE:  d4 47 00 c4  46 4d 09 09
2010:01:05-19:30:13 acenn pluto[7169]: | RCOOKIE:  0b e3 90 f0  1a 30 ea 70
2010:01:05-19:30:13 acenn pluto[7169]: | peer:  c0 a8 02 96
2010:01:05-19:30:13 acenn pluto[7169]: | state hash entry 10
2010:01:05-19:30:13 acenn pluto[7169]: | state object #1 found, in STATE_MODE_CFG_R1
2010:01:05-19:30:13 acenn pluto[7169]: "D_REF_zfmTEQwktH_0"[1] 192.168.2.150:1193 #1: Quick Mode I1 message is unacceptable because it uses a previously used Message ID 0x1c8677b1 (perhaps this is a duplicated packet)
2010:01:05-19:30:13 acenn pluto[7169]: "D_REF_zfmTEQwktH_0"[1] 192.168.2.150:1193 #1: sending encrypted notification INVALID_MESSAGE_ID to 192.168.2.150:1193
2010:01:05-19:30:13 acenn pluto[7169]: | next event EVENT_NAT_T_KEEPALIVE in 39 seconds
2010:01:05-19:30:17 acenn pluto[7169]: | 
2010:01:05-19:30:17 acenn pluto[7169]: | *received 92 bytes from 192.168.2.150:1193 on eth1
2010:01:05-19:30:17 acenn pluto[7169]: | **parse ISAKMP Message:
2010:01:05-19:30:17 acenn pluto[7169]: |    initiator cookie:
2010:01:05-19:30:17 acenn pluto[7169]: |   d4 47 00 c4  46 4d 09 09
2010:01:05-19:30:17 acenn pluto[7169]: |    responder cookie:
2010:01:05-19:30:17 acenn pluto[7169]: |   0b e3 90 f0  1a 30 ea 70
2010:01:05-19:30:17 acenn pluto[7169]: |    next payload type: ISAKMP_NEXT_HASH
2010:01:05-19:30:17 acenn pluto[7169]: |    ISAKMP version: ISAKMP Version 1.0
2010:01:05-19:30:17 acenn pluto[7169]: |    exchange type: ISAKMP_XCHG_INFO
2010:01:05-19:30:17 acenn pluto[7169]: |    flags: ISAKMP_FLAG_ENCRYPTION
2010:01:05-19:30:17 acenn pluto[7169]: |    message ID:  f8 1e b2 49
2010:01:05-19:30:17 acenn pluto[7169]: |    length: 92
2010:01:05-19:30:17 acenn pluto[7169]: | ICOOKIE:  d4 47 00 c4  46 4d 09 09
2010:01:05-19:30:17 acenn pluto[7169]: | RCOOKIE:  0b e3 90 f0  1a 30 ea 70
2010:01:05-19:30:17 acenn pluto[7169]: | peer:  c0 a8 02 96
2010:01:05-19:30:17 acenn pluto[7169]: | state hash entry 10
2010:01:05-19:30:17 acenn pluto[7169]: | state object #1 found, in STATE_MODE_CFG_R1
2010:01:05-19:30:17 acenn pluto[7169]: | ***parse ISAKMP Hash Payload:
2010:01:05-19:30:17 acenn pluto[7169]: |    next payload type: ISAKMP_NEXT_N
2010:01:05-19:30:17 acenn pluto[7169]: |    length: 24
2010:01:05-19:30:17 acenn pluto[7169]: | ***parse ISAKMP Notification Payload:
2010:01:05-19:30:17 acenn pluto[7169]: |    next payload type: ISAKMP_NEXT_NONE
2010:01:05-19:30:17 acenn pluto[7169]: |    length: 32
2010:01:05-19:30:17 acenn pluto[7169]: |    DOI: ISAKMP_DOI_IPSEC
2010:01:05-19:30:17 acenn pluto[7169]: |    protocol ID: 1
2010:01:05-19:30:17 acenn pluto[7169]: |    SPI size: 16
2010:01:05-19:30:17 acenn pluto[7169]: |    Notify Message Type: R_U_THERE
2010:01:05-19:30:17 acenn pluto[7169]: | removing 8 bytes of padding
2010:01:05-19:30:17 acenn pluto[7169]: | info:  d4 47 00 c4  46 4d 09 09  0b e3 90 f0  1a 30 ea 70
2010:01:05-19:30:17 acenn pluto[7169]: |   8b 1a 57 bd
2010:01:05-19:30:17 acenn pluto[7169]: | received DPD notification R_U_THERE with seqno = 2333759421
2010:01:05-19:30:17 acenn pluto[7169]: | sent DPD notification R_U_THERE_ACK with seqno = 2333759421
2010:01:05-19:30:17 acenn pluto[7169]: | next event EVENT_NAT_T_KEEPALIVE in 35 seconds
2010:01:05-19:30:18 acenn pluto[7169]: | 
2010:01:05-19:30:18 acenn pluto[7169]: | *received 92 bytes from 192.168.2.150:1193 on eth1
2010:01:05-19:30:18 acenn pluto[7169]: | **parse ISAKMP Message:
2010:01:05-19:30:18 acenn pluto[7169]: |    initiator cookie:
2010:01:05-19:30:18 acenn pluto[7169]: |   d4 47 00 c4  46 4d 09 09
2010:01:05-19:30:18 acenn pluto[7169]: |    responder cookie:
2010:01:05-19:30:18 acenn pluto[7169]: |   0b e3 90 f0  1a 30 ea 70
2010:01:05-19:30:18 acenn pluto[7169]: |    next payload type: ISAKMP_NEXT_HASH
2010:01:05-19:30:18 acenn pluto[7169]: |    ISAKMP version: ISAKMP Version 1.0
2010:01:05-19:30:18 acenn pluto[7169]: |    exchange type: ISAKMP_XCHG_INFO
2010:01:05-19:30:18 acenn pluto[7169]: |    flags: ISAKMP_FLAG_ENCRYPTION
2010:01:05-19:30:18 acenn pluto[7169]: |    message ID:  4f ee 13 29
2010:01:05-19:30:18 acenn pluto[7169]: |    length: 92
2010:01:05-19:30:18 acenn pluto[7169]: | ICOOKIE:  d4 47 00 c4  46 4d 09 09
2010:01:05-19:30:18 acenn pluto[7169]: | RCOOKIE:  0b e3 90 f0  1a 30 ea 70
2010:01:05-19:30:18 acenn pluto[7169]: | peer:  c0 a8 02 96
2010:01:05-19:30:18 acenn pluto[7169]: | state hash entry 10
2010:01:05-19:30:18 acenn pluto[7169]: | state object #1 found, in STATE_MODE_CFG_R1
2010:01:05-19:30:18 acenn pluto[7169]: | ***parse ISAKMP Hash Payload:
2010:01:05-19:30:18 acenn pluto[7169]: |    next payload type: ISAKMP_NEXT_N
2010:01:05-19:30:18 acenn pluto[7169]: |    length: 24
2010:01:05-19:30:18 acenn pluto[7169]: | ***parse ISAKMP Notification Payload:
2010:01:05-19:30:18 acenn pluto[7169]: |    next payload type: ISAKMP_NEXT_NONE
2010:01:05-19:30:18 acenn pluto[7169]: |    length: 32
2010:01:05-19:30:18 acenn pluto[7169]: |    DOI: ISAKMP_DOI_IPSEC
2010:01:05-19:30:18 acenn pluto[7169]: |    protocol ID: 1
2010:01:05-19:30:18 acenn pluto[7169]: |    SPI size: 16
2010:01:05-19:30:18 acenn pluto[7169]: |    Notify Message Type: R_U_THERE
2010:01:05-19:30:18 acenn pluto[7169]: | removing 8 bytes of padding
2010:01:05-19:30:18 acenn pluto[7169]: | info:  d4 47 00 c4  46 4d 09 09  0b e3 90 f0  1a 30 ea 70
2010:01:05-19:30:18 acenn pluto[7169]: |   8b 1a 57 be
2010:01:05-19:30:18 acenn pluto[7169]: | received DPD notification R_U_THERE with seqno = 2333759422
2010:01:05-19:30:18 acenn pluto[7169]: | sent DPD notification R_U_THERE_ACK with seqno = 2333759422
2010:01:05-19:30:18 acenn pluto[7169]: | next event EVENT_NAT_T_KEEPALIVE in 34 seconds
2010:01:05-19:30:18 acenn pluto[7169]: | 
2010:01:05-19:30:18 acenn pluto[7169]: | *received 76 bytes from 192.168.2.150:1193 on eth1
2010:01:05-19:30:18 acenn pluto[7169]: | **parse ISAKMP Message:
2010:01:05-19:30:18 acenn pluto[7169]: |    initiator cookie:
2010:01:05-19:30:18 acenn pluto[7169]: |   d4 47 00 c4  46 4d 09 09
2010:01:05-19:30:18 acenn pluto[7169]: |    responder cookie:
2010:01:05-19:30:18 acenn pluto[7169]: |   0b e3 90 f0  1a 30 ea 70
2010:01:05-19:30:18 acenn pluto[7169]: |    next payload type: ISAKMP_NEXT_HASH
2010:01:05-19:30:18 acenn pluto[7169]: |    ISAKMP version: ISAKMP Version 1.0
2010:01:05-19:30:18 acenn pluto[7169]: |    exchange type: ISAKMP_XCHG_INFO
2010:01:05-19:30:18 acenn pluto[7169]: |    flags: ISAKMP_FLAG_ENCRYPTION
2010:01:05-19:30:18 acenn pluto[7169]: |    message ID:  4c cc ec c7
2010:01:05-19:30:18 acenn pluto[7169]: |    length: 76
2010:01:05-19:30:18 acenn pluto[7169]: | ICOOKIE:  d4 47 00 c4  46 4d 09 09
2010:01:05-19:30:18 acenn pluto[7169]: | RCOOKIE:  0b e3 90 f0  1a 30 ea 70
2010:01:05-19:30:18 acenn pluto[7169]: | peer:  c0 a8 02 96
2010:01:05-19:30:18 acenn pluto[7169]: | state hash entry 10
2010:01:05-19:30:18 acenn pluto[7169]: | state object #1 found, in STATE_MODE_CFG_R1
2010:01:05-19:30:18 acenn pluto[7169]: | ***parse ISAKMP Hash Payload:
2010:01:05-19:30:18 acenn pluto[7169]: |    next payload type: ISAKMP_NEXT_D
2010:01:05-19:30:18 acenn pluto[7169]: |    length: 24
2010:01:05-19:30:18 acenn pluto[7169]: | ***parse ISAKMP Delete Payload:
2010:01:05-19:30:18 acenn pluto[7169]: |    next payload type: ISAKMP_NEXT_NONE
2010:01:05-19:30:18 acenn pluto[7169]: |    length: 16
2010:01:05-19:30:18 acenn pluto[7169]: |    DOI: ISAKMP_DOI_IPSEC
2010:01:05-19:30:18 acenn pluto[7169]: |    protocol ID: 3
2010:01:05-19:30:18 acenn pluto[7169]: |    SPI size: 4
2010:01:05-19:30:18 acenn pluto[7169]: |    number of SPIs: 1
2010:01:05-19:30:18 acenn pluto[7169]: | removing 8 bytes of padding
2010:01:05-19:30:18 acenn pluto[7169]: "D_REF_zfmTEQwktH_0"[1] 192.168.2.150:1193 #1: ignoring Delete SA payload: PROTO_IPSEC_ESP SA(0x657c45a4) not found (maybe expired)
2010:01:05-19:30:18 acenn pluto[7169]: | del:  65 7c 45 a4
2010:01:05-19:30:18 acenn pluto[7169]: | next event EVENT_NAT_T_KEEPALIVE in 34 seconds
2010:01:05-19:30:28 acenn pluto[7169]: | 
2010:01:05-19:30:28 acenn pluto[7169]: | *received 92 bytes from 192.168.2.150:1193 on eth1
2010:01:05-19:30:28 acenn pluto[7169]: | **parse ISAKMP Message:
2010:01:05-19:30:28 acenn pluto[7169]: |    initiator cookie:
2010:01:05-19:30:28 acenn pluto[7169]: |   d4 47 00 c4  46 4d 09 09
2010:01:05-19:30:28 acenn pluto[7169]: |    responder cookie:
2010:01:05-19:30:28 acenn pluto[7169]: |   0b e3 90 f0  1a 30 ea 70
2010:01:05-19:30:28 acenn pluto[7169]: |    next payload type: ISAKMP_NEXT_HASH
2010:01:05-19:30:28 acenn pluto[7169]: |    ISAKMP version: ISAKMP Version 1.0
2010:01:05-19:30:28 acenn pluto[7169]: |    exchange type: ISAKMP_XCHG_INFO
2010:01:05-19:30:28 acenn pluto[7169]: |    flags: ISAKMP_FLAG_ENCRYPTION
2010:01:05-19:30:28 acenn pluto[7169]: |    message ID:  58 df 4d fc
2010:01:05-19:30:28 acenn pluto[7169]: |    length: 92
2010:01:05-19:30:28 acenn pluto[7169]: | ICOOKIE:  d4 47 00 c4  46 4d 09 09
2010:01:05-19:30:28 acenn pluto[7169]: | RCOOKIE:  0b e3 90 f0  1a 30 ea 70
2010:01:05-19:30:28 acenn pluto[7169]: | peer:  c0 a8 02 96
2010:01:05-19:30:28 acenn pluto[7169]: | state hash entry 10
2010:01:05-19:30:28 acenn pluto[7169]: | state object #1 found, in STATE_MODE_CFG_R1
2010:01:05-19:30:28 acenn pluto[7169]: | ***parse ISAKMP Hash Payload:
2010:01:05-19:30:28 acenn pluto[7169]: |    next payload type: ISAKMP_NEXT_N
2010:01:05-19:30:28 acenn pluto[7169]: |    length: 24
2010:01:05-19:30:28 acenn pluto[7169]: | ***parse ISAKMP Notification Payload:
2010:01:05-19:30:28 acenn pluto[7169]: |    next payload type: ISAKMP_NEXT_NONE
2010:01:05-19:30:28 acenn pluto[7169]: |    length: 32
2010:01:05-19:30:28 acenn pluto[7169]: |    DOI: ISAKMP_DOI_IPSEC
2010:01:05-19:30:28 acenn pluto[7169]: |    protocol ID: 1
2010:01:05-19:30:28 acenn pluto[7169]: |    SPI size: 16
2010:01:05-19:30:28 acenn pluto[7169]: |    Notify Message Type: R_U_THERE
2010:01:05-19:30:28 acenn pluto[7169]: | removing 8 bytes of padding
2010:01:05-19:30:28 acenn pluto[7169]: | info:  d4 47 00 c4  46 4d 09 09  0b e3 90 f0  1a 30 ea 70
2010:01:05-19:30:28 acenn pluto[7169]: |   8b 1a 57 bf
2010:01:05-19:30:28 acenn pluto[7169]: | received DPD notification R_U_THERE with seqno = 2333759423
2010:01:05-19:30:28 acenn pluto[7169]: | sent DPD notification R_U_THERE_ACK with seqno = 2333759423
2010:01:05-19:30:28 acenn pluto[7169]: | next event EVENT_NAT_T_KEEPALIVE in 24 seconds
2010:01:05-19:30:38 acenn pluto[7169]: | 
2010:01:05-19:30:38 acenn pluto[7169]: | *received 92 bytes from 192.168.2.150:1193 on eth1
2010:01:05-19:30:38 acenn pluto[7169]: | **parse ISAKMP Message:
2010:01:05-19:30:38 acenn pluto[7169]: |    initiator cookie:
2010:01:05-19:30:38 acenn pluto[7169]: |   d4 47 00 c4  46 4d 09 09
2010:01:05-19:30:38 acenn pluto[7169]: |    responder cookie:
2010:01:05-19:30:38 acenn pluto[7169]: |   0b e3 90 f0  1a 30 ea 70
2010:01:05-19:30:38 acenn pluto[7169]: |    next payload type: ISAKMP_NEXT_HASH
2010:01:05-19:30:38 acenn pluto[7169]: |    ISAKMP version: ISAKMP Version 1.0
2010:01:05-19:30:38 acenn pluto[7169]: |    exchange type: ISAKMP_XCHG_INFO
2010:01:05-19:30:38 acenn pluto[7169]: |    flags: ISAKMP_FLAG_ENCRYPTION
2010:01:05-19:30:38 acenn pluto[7169]: |    message ID:  02 f0 8a 44
2010:01:05-19:30:38 acenn pluto[7169]: |    length: 92
2010:01:05-19:30:38 acenn pluto[7169]: | ICOOKIE:  d4 47 00 c4  46 4d 09 09
2010:01:05-19:30:38 acenn pluto[7169]: | RCOOKIE:  0b e3 90 f0  1a 30 ea 70
2010:01:05-19:30:38 acenn pluto[7169]: | peer:  c0 a8 02 96
2010:01:05-19:30:38 acenn pluto[7169]: | state hash entry 10
2010:01:05-19:30:38 acenn pluto[7169]: | state object #1 found, in STATE_MODE_CFG_R1
2010:01:05-19:30:38 acenn pluto[7169]: | ***parse ISAKMP Hash Payload:
2010:01:05-19:30:38 acenn pluto[7169]: |    next payload type: ISAKMP_NEXT_N
2010:01:05-19:30:38 acenn pluto[7169]: |    length: 24
2010:01:05-19:30:38 acenn pluto[7169]: | ***parse ISAKMP Notification Payload:
2010:01:05-19:30:38 acenn pluto[7169]: |    next payload type: ISAKMP_NEXT_NONE
2010:01:05-19:30:38 acenn pluto[7169]: |    length: 32
2010:01:05-19:30:38 acenn pluto[7169]: |    DOI: ISAKMP_DOI_IPSEC
2010:01:05-19:30:38 acenn pluto[7169]: |    protocol ID: 1
2010:01:05-19:30:38 acenn pluto[7169]: |    SPI size: 16
2010:01:05-19:30:38 acenn pluto[7169]: |    Notify Message Type: R_U_THERE
2010:01:05-19:30:38 acenn pluto[7169]: | removing 8 bytes of padding
2010:01:05-19:30:38 acenn pluto[7169]: | info:  d4 47 00 c4  46 4d 09 09  0b e3 90 f0  1a 30 ea 70
2010:01:05-19:30:38 acenn pluto[7169]: |   8b 1a 57 c0
2010:01:05-19:30:38 acenn pluto[7169]: | received DPD notification R_U_THERE with seqno = 2333759424
2010:01:05-19:30:38 acenn pluto[7169]: | sent DPD notification R_U_THERE_ACK with seqno = 2333759424
2010:01:05-19:30:38 acenn pluto[7169]: | next event EVENT_NAT_T_KEEPALIVE in 14 seconds
2010:01:05-19:30:48 acenn pluto[7169]: | 
2010:01:05-19:30:48 acenn pluto[7169]: | *received 92 bytes from 192.168.2.150:1193 on eth1
2010:01:05-19:30:48 acenn pluto[7169]: | **parse ISAKMP Message:
2010:01:05-19:30:48 acenn pluto[7169]: |    initiator cookie:
2010:01:05-19:30:48 acenn pluto[7169]: |   d4 47 00 c4  46 4d 09 09
2010:01:05-19:30:48 acenn pluto[7169]: |    responder cookie:
2010:01:05-19:30:48 acenn pluto[7169]: |   0b e3 90 f0  1a 30 ea 70
2010:01:05-19:30:48 acenn pluto[7169]: |    next payload type: ISAKMP_NEXT_HASH
2010:01:05-19:30:48 acenn pluto[7169]: |    ISAKMP version: ISAKMP Version 1.0
2010:01:05-19:30:48 acenn pluto[7169]: |    exchange type: ISAKMP_XCHG_INFO
2010:01:05-19:30:48 acenn pluto[7169]: |    flags: ISAKMP_FLAG_ENCRYPTION
2010:01:05-19:30:48 acenn pluto[7169]: |    message ID:  07 b0 c1 34
2010:01:05-19:30:48 acenn pluto[7169]: |    length: 92
2010:01:05-19:30:48 acenn pluto[7169]: | ICOOKIE:  d4 47 00 c4  46 4d 09 09
2010:01:05-19:30:48 acenn pluto[7169]: | RCOOKIE:  0b e3 90 f0  1a 30 ea 70
2010:01:05-19:30:48 acenn pluto[7169]: | peer:  c0 a8 02 96
2010:01:05-19:30:48 acenn pluto[7169]: | state hash entry 10
2010:01:05-19:30:48 acenn pluto[7169]: | state object #1 found, in STATE_MODE_CFG_R1
2010:01:05-19:30:48 acenn pluto[7169]: | ***parse ISAKMP Hash Payload:
2010:01:05-19:30:48 acenn pluto[7169]: |    next payload type: ISAKMP_NEXT_D
2010:01:05-19:30:48 acenn pluto[7169]: |    length: 24
2010:01:05-19:30:48 acenn pluto[7169]: | ***parse ISAKMP Delete Payload:
2010:01:05-19:30:48 acenn pluto[7169]: |    next payload type: ISAKMP_NEXT_NONE
2010:01:05-19:30:48 acenn pluto[7169]: |    length: 28
2010:01:05-19:30:48 acenn pluto[7169]: |    DOI: ISAKMP_DOI_ISAKMP
2010:01:05-19:30:48 acenn pluto[7169]: |    protocol ID: 1
2010:01:05-19:30:48 acenn pluto[7169]: |    SPI size: 16
2010:01:05-19:30:48 acenn pluto[7169]: |    number of SPIs: 1
2010:01:05-19:30:48 acenn pluto[7169]: | removing 12 bytes of padding
2010:01:05-19:30:48 acenn pluto[7169]: | ICOOKIE:  d4 47 00 c4  46 4d 09 09
2010:01:05-19:30:48 acenn pluto[7169]: | RCOOKIE:  0b e3 90 f0  1a 30 ea 70
2010:01:05-19:30:48 acenn pluto[7169]: | peer:  c0 a8 02 96
2010:01:05-19:30:48 acenn pluto[7169]: | state hash entry 10
2010:01:05-19:30:48 acenn pluto[7169]: | state object #1 found, in STATE_MODE_CFG_R1
2010:01:05-19:30:48 acenn pluto[7169]: "D_REF_zfmTEQwktH_0"[1] 192.168.2.150:1193 #1: received Delete SA payload: deleting ISAKMP State #1
2010:01:05-19:30:48 acenn pluto[7169]: | ICOOKIE:  d4 47 00 c4  46 4d 09 09
2010:01:05-19:30:48 acenn pluto[7169]: | RCOOKIE:  0b e3 90 f0  1a 30 ea 70
2010:01:05-19:30:48 acenn pluto[7169]: | peer:  c0 a8 02 96
2010:01:05-19:30:48 acenn pluto[7169]: | state hash entry 10
2010:01:05-19:30:48 acenn pluto[7169]: "D_REF_zfmTEQwktH_0"[1] 192.168.2.150:1193: deleting connection "D_REF_zfmTEQwktH_0" instance with peer 192.168.2.150 {isakmp=#0/ipsec=#0}
2010:01:05-19:30:48 acenn pluto[7169]: | del:  d4 47 00 c4  46 4d 09 09  0b e3 90 f0  1a 30 ea 70
2010:01:05-19:30:48 acenn pluto[7169]: | next event EVENT_NAT_T_KEEPALIVE in 4 seconds
2010:01:05-19:30:52 acenn pluto[7169]: | 
2010:01:05-19:30:52 acenn pluto[7169]: | *time to handle event
2010:01:05-19:30:52 acenn pluto[7169]: | event after this is EVENT_REINIT_SECRET in 3265 seconds
2010:01:05-19:30:52 acenn pluto[7169]: | next event EVENT_REINIT_SECRET in 3265 seconds