PRIMA LOG
*********************************************************************************
2004:10:12-16:28:36 (none) ipsec_starter[22552]: shutting down interface ipsec0/eth1
2004:10:12-16:47:58 (none) ipsec_starter[23041]: Starting FreeS/WAN IPsec 1.0.2 [starter]...
2004:10:12-16:47:58 (none) ipsec_starter[23053]: attaching interface ipsec0 to eth1
2004:10:12-16:47:58 (none) ipsec_starter[23053]: Attempting to start pluto...
2004:10:12-16:47:59 (none) ipsec_starter[23053]: pluto (23066) started
2004:10:12-16:47:59 (none) ipsec_starter[23053]: Setting --esp=aes128-md5;modp1536
2004:10:12-16:47:59 (none) pluto[23066]: Starting Pluto (Openswan Version 1.0.2)
2004:10:12-16:47:59 (none) pluto[23066]:   including X.509 patch with traffic selectors (Version 0.9.39)
2004:10:12-16:47:59 (none) pluto[23066]:   including NAT-Traversal patch (Version 0.6)
2004:10:12-16:47:59 (none) pluto[23066]: | inserting event EVENT_REINIT_SECRET, timeout in 3600 seconds
2004:10:12-16:47:59 (none) pluto[23066]: ike_alg_register_enc(): Activating OAKLEY_DES_CBC: Ok (ret=0)
2004:10:12-16:47:59 (none) pluto[23066]: ike_alg_register_enc(): Activating OAKLEY_AES_CBC: Ok (ret=0)
2004:10:12-16:47:59 (none) pluto[23066]: ike_alg_register_enc(): Activating OAKLEY_BLOWFISH_CBC: Ok (ret=0)
2004:10:12-16:47:59 (none) pluto[23066]: ike_alg_register_enc(): Activating OAKLEY_CAST_CBC: Ok (ret=0)
2004:10:12-16:47:59 (none) pluto[23066]: ike_alg_register_enc(): Activating OAKLEY_SERPENT_CBC: Ok (ret=0)
2004:10:12-16:47:59 (none) pluto[23066]: ike_alg_register_hash(): Activating OAKLEY_SHA2_256: Ok (ret=0)
2004:10:12-16:47:59 (none) pluto[23066]: ike_alg_register_hash(): Activating OAKLEY_SHA2_512: Ok (ret=0)
2004:10:12-16:47:59 (none) pluto[23066]: ike_alg_register_enc(): Activating OAKLEY_TWOFISH_CBC: Ok (ret=0)
2004:10:12-16:47:59 (none) pluto[23066]: ike_alg_register_enc(): Activating OAKLEY_SSH_PRIVATE_65289: Ok (ret=0)
2004:10:12-16:47:59 (none) pluto[23066]: | inserting event EVENT_SHUNT_SCAN, timeout in 120 seconds
2004:10:12-16:47:59 (none) pluto[23066]: Changing to directory '/etc/ipsec.d/cacerts'
2004:10:12-16:47:59 (none) pluto[23066]:   Warning: empty directory
2004:10:12-16:47:59 (none) pluto[23066]: Changing to directory '/etc/ipsec.d/crls'
2004:10:12-16:47:59 (none) pluto[23066]:   Warning: empty directory
2004:10:12-16:47:59 (none) pluto[23066]: OpenPGP certificate file '/etc/pgpcert.pgp' not found
2004:10:12-16:47:59 (none) pluto[23066]: | next event EVENT_SHUNT_SCAN in 120 seconds
2004:10:12-16:47:59 (none) pluto[23066]: |  
2004:10:12-16:47:59 (none) pluto[23066]: | *received whack message
2004:10:12-16:47:59 (none) pluto[23066]: listening for IKE messages
2004:10:12-16:47:59 (none) pluto[23066]: | found lo with address 127.0.0.1
2004:10:12-16:47:59 (none) pluto[23066]: | found eth0 with address 192.168.1.253
2004:10:12-16:47:59 (none) pluto[23066]: | found eth1 with address 192.168.2.253
2004:10:12-16:47:59 (none) pluto[23066]: | found ipsec0 with address 192.168.2.253
2004:10:12-16:48:00 (none) pluto[23066]: adding interface ipsec0/eth1 192.168.2.253
2004:10:12-16:48:00 (none) pluto[23066]: adding interface ipsec0/eth1 192.168.2.253:4500
2004:10:12-16:48:00 (none) pluto[23066]: | IP interface eth0 192.168.1.253 has no matching ipsec* interface -- ignored
2004:10:12-16:48:00 (none) pluto[23066]: | IP interface lo 127.0.0.1 has no matching ipsec* interface -- ignored
2004:10:12-16:48:00 (none) pluto[23066]: | could not open /proc/net/if_inet6
2004:10:12-16:48:00 (none) pluto[23066]: loading secrets from "/etc/ipsec.secrets"
2004:10:12-16:48:00 (none) pluto[23066]: | next event EVENT_SHUNT_SCAN in 119 seconds
2004:10:12-16:48:00 (none) pluto[23066]: |  
2004:10:12-16:48:00 (none) pluto[23066]: | *received whack message
2004:10:12-16:48:00 (none) pluto[23066]: | from whack: got --esp=aes128-md5;modp1536
2004:10:12-16:48:00 (none) pluto[23066]: | esp string values: 12_128-1, ; pfsgroup=5; flags=-strict
2004:10:12-16:48:00 (none) pluto[23066]: | from whack: got --ike=3des-md5-modp1536
2004:10:12-16:48:00 (none) pluto[23066]: | ike string values: 5_000-1-5, flags=-strict
2004:10:12-16:48:00 (none) pluto[23066]: added connection description "S_zaventem-primalux_0"
2004:10:12-16:48:00 (none) pluto[23066]: | 192.168.1.0/24===192.168.2.253[harry@ice.be]...82.12.179.230[harry@ice.be]===192.168.35.0/24
2004:10:12-16:48:00 (none) pluto[23066]: | ike_life: 7800s; ipsec_life: 3600s; rekey_margin: 540s; rekey_fuzz: 100%; keyingtries: 0; policy: RSASIG+ENCRYPT+TUNNEL+PFS
2004:10:12-16:48:00 (none) pluto[23066]: | next event EVENT_SHUNT_SCAN in 119 seconds
2004:10:12-16:48:00 (none) pluto[23066]: |  
2004:10:12-16:48:00 (none) pluto[23066]: | *received whack message
2004:10:12-16:48:00 (none) pluto[23066]: | next event EVENT_SHUNT_SCAN in 119 seconds
2004:10:12-16:48:00 (none) pluto[23066]: |  
2004:10:12-16:48:00 (none) pluto[23066]: | *received whack message
2004:10:12-16:48:00 (none) pluto[23066]: | next event EVENT_SHUNT_SCAN in 119 seconds
2004:10:12-16:48:00 (none) pluto[23066]: |  
2004:10:12-16:48:00 (none) pluto[23066]: | *received whack message
2004:10:12-16:48:00 (none) pluto[23066]: | creating state object #1 at 0x80ecc70
2004:10:12-16:48:00 (none) pluto[23066]: | ICOOKIE:  d0 57 e6 c1  98 1e a8 56
2004:10:12-16:48:00 (none) pluto[23066]: | RCOOKIE:  00 00 00 00  00 00 00 00
2004:10:12-16:48:00 (none) pluto[23066]: | peer:  51 0b b2 e6
2004:10:12-16:48:00 (none) pluto[23066]: | state hash entry 22
2004:10:12-16:48:00 (none) pluto[23066]: | inserting event EVENT_SO_DISCARD, timeout in 0 seconds for #1
2004:10:12-16:48:00 (none) pluto[23066]: | Queuing pending Quick Mode with 82.12.179.230 "S_zaventem-primalux_0"
2004:10:12-16:48:00 (none) pluto[23066]: "S_zaventem-primalux_0" #1: initiating Main Mode
2004:10:12-16:48:00 (none) pluto[23066]: | **emit ISAKMP Message:
2004:10:12-16:48:00 (none) pluto[23066]: |    initiator cookie:
2004:10:12-16:48:00 (none) pluto[23066]: |   d0 57 e6 c1  98 1e a8 56
2004:10:12-16:48:00 (none) pluto[23066]: |    responder cookie:
2004:10:12-16:48:00 (none) pluto[23066]: |   00 00 00 00  00 00 00 00
2004:10:12-16:48:00 (none) pluto[23066]: |    next payload type: ISAKMP_NEXT_SA
2004:10:12-16:48:00 (none) pluto[23066]: |    ISAKMP version: ISAKMP Version 1.0
2004:10:12-16:48:00 (none) pluto[23066]: |    exchange type: ISAKMP_XCHG_IDPROT
2004:10:12-16:48:00 (none) pluto[23066]: |    flags: none
2004:10:12-16:48:00 (none) pluto[23066]: |    message ID:  00 00 00 00
2004:10:12-16:48:00 (none) pluto[23066]: | ***emit ISAKMP Security Association Payload:
2004:10:12-16:48:00 (none) pluto[23066]: |    next payload type: ISAKMP_NEXT_NONE
2004:10:12-16:48:00 (none) pluto[23066]: |    DOI: ISAKMP_DOI_IPSEC
2004:10:12-16:48:00 (none) pluto[23066]: | ****emit IPsec DOI SIT:
2004:10:12-16:48:00 (none) pluto[23066]: |    IPsec DOI SIT: SIT_IDENTITY_ONLY
2004:10:12-16:48:00 (none) pluto[23066]: | 5_000-1-5, flags=-strict
2004:10:12-16:48:00 (none) pluto[23066]: | ****emit ISAKMP Proposal Payload:
2004:10:12-16:48:00 (none) pluto[23066]: |    next payload type: ISAKMP_NEXT_NONE
2004:10:12-16:48:00 (none) pluto[23066]: |    proposal number: 0
2004:10:12-16:48:00 (none) pluto[23066]: |    protocol ID: PROTO_ISAKMP
2004:10:12-16:48:00 (none) pluto[23066]: |    SPI size: 0
2004:10:12-16:48:00 (none) pluto[23066]: |    number of transforms: 1
2004:10:12-16:48:00 (none) pluto[23066]: | *****emit ISAKMP Transform Payload (ISAKMP):
2004:10:12-16:48:00 (none) pluto[23066]: |    next payload type: ISAKMP_NEXT_NONE
2004:10:12-16:48:00 (none) pluto[23066]: |    transform number: 0
2004:10:12-16:48:00 (none) pluto[23066]: |    transform ID: KEY_IKE
2004:10:12-16:48:00 (none) pluto[23066]: | ******emit ISAKMP Oakley attribute:
2004:10:12-16:48:00 (none) pluto[23066]: |    af+type: OAKLEY_LIFE_TYPE
2004:10:12-16:48:00 (none) pluto[23066]: |    length/value: 1
2004:10:12-16:48:00 (none) pluto[23066]: |     [1 is OAKLEY_LIFE_SECONDS]
2004:10:12-16:48:00 (none) pluto[23066]: | ******emit ISAKMP Oakley attribute:
2004:10:12-16:48:00 (none) pluto[23066]: |    af+type: OAKLEY_LIFE_DURATION
2004:10:12-16:48:00 (none) pluto[23066]: |    length/value: 7800
2004:10:12-16:48:00 (none) pluto[23066]: | ******emit ISAKMP Oakley attribute:
2004:10:12-16:48:00 (none) pluto[23066]: |    af+type: OAKLEY_ENCRYPTION_ALGORITHM
2004:10:12-16:48:00 (none) pluto[23066]: |    length/value: 5
2004:10:12-16:48:00 (none) pluto[23066]: |     [5 is OAKLEY_3DES_CBC]
2004:10:12-16:48:00 (none) pluto[23066]: | ******emit ISAKMP Oakley attribute:
2004:10:12-16:48:00 (none) pluto[23066]: |    af+type: OAKLEY_HASH_ALGORITHM
2004:10:12-16:48:00 (none) pluto[23066]: |    length/value: 1
2004:10:12-16:48:00 (none) pluto[23066]: |     [1 is OAKLEY_MD5]
2004:10:12-16:48:00 (none) pluto[23066]: | ******emit ISAKMP Oakley attribute:
2004:10:12-16:48:00 (none) pluto[23066]: |    af+type: OAKLEY_AUTHENTICATION_METHOD
2004:10:12-16:48:00 (none) pluto[23066]: |    length/value: 3
2004:10:12-16:48:00 (none) pluto[23066]: |     [3 is OAKLEY_RSA_SIG]
2004:10:12-16:48:00 (none) pluto[23066]: | ******emit ISAKMP Oakley attribute:
2004:10:12-16:48:00 (none) pluto[23066]: |    af+type: OAKLEY_GROUP_DESCRIPTION
2004:10:12-16:48:00 (none) pluto[23066]: |    length/value: 5
2004:10:12-16:48:00 (none) pluto[23066]: |     [5 is OAKLEY_GROUP_MODP1536]
2004:10:12-16:48:00 (none) pluto[23066]: | emitting length of ISAKMP Transform Payload (ISAKMP): 32
2004:10:12-16:48:00 (none) pluto[23066]: | emitting length of ISAKMP Proposal Payload: 40
2004:10:12-16:48:00 (none) pluto[23066]: | emitting length of ISAKMP Security Association Payload: 52
2004:10:12-16:48:00 (none) pluto[23066]: | out_vendorid(): sending [draft-ietf-ipsec-nat-t-ike-03]
2004:10:12-16:48:00 (none) pluto[23066]: | ***emit ISAKMP Vendor ID Payload:
2004:10:12-16:48:00 (none) pluto[23066]: |    next payload type: ISAKMP_NEXT_NONE
2004:10:12-16:48:00 (none) pluto[23066]: | emitting 16 raw bytes of V_ID into ISAKMP Vendor ID Payload
2004:10:12-16:48:00 (none) pluto[23066]: | V_ID  7d 94 19 a6  53 10 ca 6f  2c 17 9d 92  15 52 9d 56
2004:10:12-16:48:00 (none) pluto[23066]: | emitting length of ISAKMP Vendor ID Payload: 20
2004:10:12-16:48:00 (none) pluto[23066]: | out_vendorid(): sending [draft-ietf-ipsec-nat-t-ike-02]
2004:10:12-16:48:00 (none) pluto[23066]: | ***emit ISAKMP Vendor ID Payload:
2004:10:12-16:48:00 (none) pluto[23066]: |    next payload type: ISAKMP_NEXT_NONE
2004:10:12-16:48:00 (none) pluto[23066]: | emitting 16 raw bytes of V_ID into ISAKMP Vendor ID Payload
2004:10:12-16:48:00 (none) pluto[23066]: | V_ID  cd 60 46 43  35 df 21 f8  7c fd b2 fc  68 b6 a4 48
2004:10:12-16:48:00 (none) pluto[23066]: | emitting length of ISAKMP Vendor ID Payload: 20
2004:10:12-16:48:00 (none) pluto[23066]: | out_vendorid(): sending [draft-ietf-ipsec-nat-t-ike-00]
2004:10:12-16:48:00 (none) pluto[23066]: | ***emit ISAKMP Vendor ID Payload:
2004:10:12-16:48:00 (none) pluto[23066]: |    next payload type: ISAKMP_NEXT_NONE
2004:10:12-16:48:00 (none) pluto[23066]: | emitting 16 raw bytes of V_ID into ISAKMP Vendor ID Payload
2004:10:12-16:48:00 (none) pluto[23066]: | V_ID  44 85 15 2d  18 b6 bb cd  0b e8 a8 46  95 79 dd cc
2004:10:12-16:48:00 (none) pluto[23066]: | emitting length of ISAKMP Vendor ID Payload: 20
2004:10:12-16:48:00 (none) pluto[23066]: | emitting length of ISAKMP Message: 140
2004:10:12-16:48:00 (none) pluto[23066]: | inserting event EVENT_RETRANSMIT, timeout in 10 seconds for #1
2004:10:12-16:48:00 (none) pluto[23066]: | next event EVENT_RETRANSMIT in 10 seconds for #1
2004:10:12-16:48:00 (none) pluto[23066]: | rejected packet:
2004:10:12-16:48:00 (none) pluto[23066]: |   d0 57 e6 c1  98 1e a8 56  00 00 00 00  00 00 00 00
2004:10:12-16:48:00 (none) pluto[23066]: |   01 10 02 00  00 00 00 00  00 00 00 8c  0d 00 00 34
2004:10:12-16:48:00 (none) pluto[23066]: |   00 00 00 01  00 00 00 01  00 00 00 28  00 01 00 01
2004:10:12-16:48:00 (none) pluto[23066]: |   00 00 00 20  00 01 00 00  80 0b 00 01  80 0c 1e 78
2004:10:12-16:48:00 (none) pluto[23066]: |   80 01 00 05  80 02 00 01  80 03 00 03  80 04 00 05
2004:10:12-16:48:00 (none) pluto[23066]: |   0d 00 00 14  7d 94 19 a6  53 10 ca 6f  2c 17 9d 92
2004:10:12-16:48:00 (none) pluto[23066]: |   15 52 9d 56  0d 00 00 14  cd 60 46 43  35 df 21 f8
2004:10:12-16:48:00 (none) pluto[23066]: |   7c fd b2 fc  68 b6 a4 48  00 00 00 14  44 85 15 2d
2004:10:12-16:48:00 (none) pluto[23066]: |   18 b6 bb cd  0b e8 a8 46  95 79 dd cc
2004:10:12-16:48:00 (none) pluto[23066]: | control:
2004:10:12-16:48:00 (none) pluto[23066]: |   2c 00 00 00  00 00 00 00  0b 00 00 00  6f 00 00 00
2004:10:12-16:48:00 (none) pluto[23066]: |   02 03 03 00  00 00 00 00  00 00 00 00  02 00 00 00
2004:10:12-16:48:00 (none) pluto[23066]: |   51 0b b2 e6  00 00 00 00  00 00 00 00
2004:10:12-16:48:00 (none) pluto[23066]: | name:
2004:10:12-16:48:00 (none) pluto[23066]: |   02 00 01 f4  51 0b b2 e6  00 00 00 00  00 00 00 00
2004:10:12-16:48:00 (none) pluto[23066]: "S_zaventem-primalux_0" #1: ERROR: asynchronous network error report on eth1 for message to 82.12.179.230 port 500, complainant 82.12.179.230: Connection refused [errno 111, origin ICMP type 3 code 3 (not authenticated)]
2004:10:12-16:48:00 (none) pluto[23066]: | next event EVENT_RETRANSMIT in 10 seconds for #1
2004:10:12-16:48:10 (none) pluto[23066]: |  
2004:10:12-16:48:10 (none) pluto[23066]: | *time to handle event
2004:10:12-16:48:10 (none) pluto[23066]: | event after this is EVENT_SHUNT_SCAN in 109 seconds
2004:10:12-16:48:10 (none) pluto[23066]: | handling event EVENT_RETRANSMIT for 82.12.179.230 "S_zaventem-primalux_0" #1
2004:10:12-16:48:10 (none) pluto[23066]: | inserting event EVENT_RETRANSMIT, timeout in 20 seconds for #1
2004:10:12-16:48:10 (none) pluto[23066]: | next event EVENT_RETRANSMIT in 20 seconds for #1
2004:10:12-16:48:10 (none) pluto[23066]: | rejected packet:
2004:10:12-16:48:10 (none) pluto[23066]: |   d0 57 e6 c1  98 1e a8 56  00 00 00 00  00 00 00 00
2004:10:12-16:48:10 (none) pluto[23066]: |   01 10 02 00  00 00 00 00  00 00 00 8c  0d 00 00 34
2004:10:12-16:48:10 (none) pluto[23066]: |   00 00 00 01  00 00 00 01  00 00 00 28  00 01 00 01
2004:10:12-16:48:10 (none) pluto[23066]: |   00 00 00 20  00 01 00 00  80 0b 00 01  80 0c 1e 78
2004:10:12-16:48:10 (none) pluto[23066]: |   80 01 00 05  80 02 00 01  80 03 00 03  80 04 00 05
2004:10:12-16:48:10 (none) pluto[23066]: |   0d 00 00 14  7d 94 19 a6  53 10 ca 6f  2c 17 9d 92
2004:10:12-16:48:10 (none) pluto[23066]: |   15 52 9d 56  0d 00 00 14  cd 60 46 43  35 df 21 f8
2004:10:12-16:48:10 (none) pluto[23066]: |   7c fd b2 fc  68 b6 a4 48  00 00 00 14  44 85 15 2d
2004:10:12-16:48:10 (none) pluto[23066]: |   18 b6 bb cd  0b e8 a8 46  95 79 dd cc
2004:10:12-16:48:10 (none) pluto[23066]: | control:
2004:10:12-16:48:10 (none) pluto[23066]: |   2c 00 00 00  00 00 00 00  0b 00 00 00  6f 00 00 00
2004:10:12-16:48:10 (none) pluto[23066]: |   02 03 03 00  00 00 00 00  00 00 00 00  02 00 00 00
2004:10:12-16:48:10 (none) pluto[23066]: |   51 0b b2 e6  00 00 00 00  00 00 00 00
2004:10:12-16:48:10 (none) pluto[23066]: | name:
2004:10:12-16:48:10 (none) pluto[23066]: |   02 00 01 f4  51 0b b2 e6  00 00 00 00  00 00 00 00
2004:10:12-16:48:10 (none) pluto[23066]: "S_zaventem-primalux_0" #1: ERROR: asynchronous network error report on eth1 for message to 82.12.179.230 port 500, complainant 82.12.179.230: Connection refused [errno 111, origin ICMP type 3 code 3 (not authenticated)]
2004:10:12-16:48:10 (none) pluto[23066]: | next event EVENT_RETRANSMIT in 20 seconds for #1
2004:10:12-16:48:30 (none) pluto[23066]: |  
2004:10:12-16:48:30 (none) pluto[23066]: | *time to handle event
2004:10:12-16:48:30 (none) pluto[23066]: | event after this is EVENT_SHUNT_SCAN in 89 seconds
2004:10:12-16:48:30 (none) pluto[23066]: | handling event EVENT_RETRANSMIT for 82.12.179.230 "S_zaventem-primalux_0" #1
2004:10:12-16:48:30 (none) pluto[23066]: | inserting event EVENT_RETRANSMIT, timeout in 40 seconds for #1
2004:10:12-16:48:30 (none) pluto[23066]: | next event EVENT_RETRANSMIT in 40 seconds for #1
2004:10:12-16:48:30 (none) pluto[23066]: | rejected packet:
2004:10:12-16:48:30 (none) pluto[23066]: |   d0 57 e6 c1  98 1e a8 56  00 00 00 00  00 00 00 00
2004:10:12-16:48:30 (none) pluto[23066]: |   01 10 02 00  00 00 00 00  00 00 00 8c  0d 00 00 34
2004:10:12-16:48:30 (none) pluto[23066]: |   00 00 00 01  00 00 00 01  00 00 00 28  00 01 00 01
2004:10:12-16:48:30 (none) pluto[23066]: |   00 00 00 20  00 01 00 00  80 0b 00 01  80 0c 1e 78
2004:10:12-16:48:30 (none) pluto[23066]: |   80 01 00 05  80 02 00 01  80 03 00 03  80 04 00 05
2004:10:12-16:48:30 (none) pluto[23066]: |   0d 00 00 14  7d 94 19 a6  53 10 ca 6f  2c 17 9d 92
2004:10:12-16:48:30 (none) pluto[23066]: |   15 52 9d 56  0d 00 00 14  cd 60 46 43  35 df 21 f8
2004:10:12-16:48:30 (none) pluto[23066]: |   7c fd b2 fc  68 b6 a4 48  00 00 00 14  44 85 15 2d
2004:10:12-16:48:30 (none) pluto[23066]: |   18 b6 bb cd  0b e8 a8 46  95 79 dd cc
2004:10:12-16:48:30 (none) pluto[23066]: | control:
2004:10:12-16:48:30 (none) pluto[23066]: |   2c 00 00 00  00 00 00 00  0b 00 00 00  6f 00 00 00
2004:10:12-16:48:30 (none) pluto[23066]: |   02 03 03 00  00 00 00 00  00 00 00 00  02 00 00 00
2004:10:12-16:48:30 (none) pluto[23066]: |   51 0b b2 e6  00 00 00 00  00 00 00 00
2004:10:12-16:48:30 (none) pluto[23066]: | name:
2004:10:12-16:48:30 (none) pluto[23066]: |   02 00 01 f4  51 0b b2 e6  00 00 00 00  00 00 00 00
2004:10:12-16:48:30 (none) pluto[23066]: "S_zaventem-primalux_0" #1: ERROR: asynchronous network error report on eth1 for message to 82.12.179.230 port 500, complainant 82.12.179.230: Connection refused [errno 111, origin ICMP type 3 code 3 (not authenticated)]
2004:10:12-16:48:30 (none) pluto[23066]: | next event EVENT_RETRANSMIT in 40 seconds for #1
2004:10:12-16:49:10 (none) pluto[23066]: |  
2004:10:12-16:49:10 (none) pluto[23066]: | *time to handle event
2004:10:12-16:49:10 (none) pluto[23066]: | event after this is EVENT_SHUNT_SCAN in 49 seconds
2004:10:12-16:49:10 (none) pluto[23066]: | handling event EVENT_RETRANSMIT for 82.12.179.230 "S_zaventem-primalux_0" #1
2004:10:12-16:49:10 (none) pluto[23066]: | inserting event EVENT_RETRANSMIT, timeout in 40 seconds for #1
2004:10:12-16:49:10 (none) pluto[23066]: | next event EVENT_RETRANSMIT in 40 seconds for #1
2004:10:12-16:49:10 (none) pluto[23066]: |  
2004:10:12-16:49:10 (none) pluto[23066]: | *received 100 bytes from 82.12.179.230:500 on eth1
2004:10:12-16:49:10 (none) pluto[23066]: | **parse ISAKMP Message:
2004:10:12-16:49:10 (none) pluto[23066]: |    initiator cookie:
2004:10:12-16:49:10 (none) pluto[23066]: |   d0 57 e6 c1  98 1e a8 56
2004:10:12-16:49:10 (none) pluto[23066]: |    responder cookie:
2004:10:12-16:49:10 (none) pluto[23066]: |   a7 16 3c 21  fc 06 25 97
2004:10:12-16:49:10 (none) pluto[23066]: |    next payload type: ISAKMP_NEXT_SA
2004:10:12-16:49:10 (none) pluto[23066]: |    ISAKMP version: ISAKMP Version 1.0
2004:10:12-16:49:10 (none) pluto[23066]: |    exchange type: ISAKMP_XCHG_IDPROT
2004:10:12-16:49:10 (none) pluto[23066]: |    flags: none
2004:10:12-16:49:10 (none) pluto[23066]: |    message ID:  00 00 00 00
2004:10:12-16:49:10 (none) pluto[23066]: |    length: 100
2004:10:12-16:49:10 (none) pluto[23066]: | The xchg type is ISAKMP_XCHG_IDPROT (2)
2004:10:12-16:49:10 (none) pluto[23066]: | ICOOKIE:  d0 57 e6 c1  98 1e a8 56
2004:10:12-16:49:10 (none) pluto[23066]: | RCOOKIE:  a7 16 3c 21  fc 06 25 97
2004:10:12-16:49:10 (none) pluto[23066]: | peer:  51 0b b2 e6
2004:10:12-16:49:10 (none) pluto[23066]: | state hash entry 22
2004:10:12-16:49:10 (none) pluto[23066]: | state object not found
2004:10:12-16:49:10 (none) pluto[23066]: | ICOOKIE:  d0 57 e6 c1  98 1e a8 56
2004:10:12-16:49:10 (none) pluto[23066]: | RCOOKIE:  00 00 00 00  00 00 00 00
2004:10:12-16:49:10 (none) pluto[23066]: | peer:  51 0b b2 e6
2004:10:12-16:49:10 (none) pluto[23066]: | state hash entry 22
2004:10:12-16:49:10 (none) pluto[23066]: | peer and cookies match, provided msgid 00000000 vs 00000000
2004:10:12-16:49:10 (none) pluto[23066]: | state object #1 found, in STATE_MAIN_I1
2004:10:12-16:49:10 (none) pluto[23066]: | ***parse ISAKMP Security Association Payload:
2004:10:12-16:49:10 (none) pluto[23066]: |    next payload type: ISAKMP_NEXT_VID
2004:10:12-16:49:10 (none) pluto[23066]: |    length: 52
2004:10:12-16:49:10 (none) pluto[23066]: |    DOI: ISAKMP_DOI_IPSEC
2004:10:12-16:49:10 (none) pluto[23066]: | ***parse ISAKMP Vendor ID Payload:
2004:10:12-16:49:10 (none) pluto[23066]: |    next payload type: ISAKMP_NEXT_NONE
2004:10:12-16:49:10 (none) pluto[23066]: |    length: 20
2004:10:12-16:49:10 (none) pluto[23066]: "S_zaventem-primalux_0" #1: received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-03]
2004:10:12-16:49:10 (none) pluto[23066]: | VID:  7d 94 19 a6  53 10 ca 6f  2c 17 9d 92  15 52 9d 56
2004:10:12-16:49:10 (none) pluto[23066]: | ****parse IPsec DOI SIT:
2004:10:12-16:49:10 (none) pluto[23066]: |    IPsec DOI SIT: SIT_IDENTITY_ONLY
2004:10:12-16:49:10 (none) pluto[23066]: | ****parse ISAKMP Proposal Payload:
2004:10:12-16:49:10 (none) pluto[23066]: |    next payload type: ISAKMP_NEXT_NONE
2004:10:12-16:49:10 (none) pluto[23066]: |    length: 40
2004:10:12-16:49:10 (none) pluto[23066]: |    proposal number: 0
2004:10:12-16:49:10 (none) pluto[23066]: |    protocol ID: PROTO_ISAKMP
2004:10:12-16:49:10 (none) pluto[23066]: |    SPI size: 0
2004:10:12-16:49:10 (none) pluto[23066]: |    number of transforms: 1
2004:10:12-16:49:10 (none) pluto[23066]: | *****parse ISAKMP Transform Payload (ISAKMP):
2004:10:12-16:49:10 (none) pluto[23066]: |    next payload type: ISAKMP_NEXT_NONE
2004:10:12-16:49:10 (none) pluto[23066]: |    length: 32
2004:10:12-16:49:10 (none) pluto[23066]: |    transform number: 0
2004:10:12-16:49:10 (none) pluto[23066]: |    transform ID: KEY_IKE
2004:10:12-16:49:10 (none) pluto[23066]: | ******parse ISAKMP Oakley attribute:
2004:10:12-16:49:10 (none) pluto[23066]: |    af+type: OAKLEY_LIFE_TYPE
2004:10:12-16:49:10 (none) pluto[23066]: |    length/value: 1
2004:10:12-16:49:10 (none) pluto[23066]: |    [1 is OAKLEY_LIFE_SECONDS]
2004:10:12-16:49:10 (none) pluto[23066]: | ******parse ISAKMP Oakley attribute:
2004:10:12-16:49:10 (none) pluto[23066]: |    af+type: OAKLEY_LIFE_DURATION
2004:10:12-16:49:10 (none) pluto[23066]: |    length/value: 7800
2004:10:12-16:49:10 (none) pluto[23066]: | ******parse ISAKMP Oakley attribute:
2004:10:12-16:49:10 (none) pluto[23066]: |    af+type: OAKLEY_ENCRYPTION_ALGORITHM
2004:10:12-16:49:10 (none) pluto[23066]: |    length/value: 5
2004:10:12-16:49:10 (none) pluto[23066]: |    [5 is OAKLEY_3DES_CBC]
2004:10:12-16:49:10 (none) pluto[23066]: | ******parse ISAKMP Oakley attribute:
2004:10:12-16:49:10 (none) pluto[23066]: |    af+type: OAKLEY_HASH_ALGORITHM
2004:10:12-16:49:10 (none) pluto[23066]: |    length/value: 1
2004:10:12-16:49:10 (none) pluto[23066]: |    [1 is OAKLEY_MD5]
2004:10:12-16:49:10 (none) pluto[23066]: | ******parse ISAKMP Oakley attribute:
2004:10:12-16:49:10 (none) pluto[23066]: |    af+type: OAKLEY_AUTHENTICATION_METHOD
2004:10:12-16:49:10 (none) pluto[23066]: |    length/value: 3
2004:10:12-16:49:10 (none) pluto[23066]: |    [3 is OAKLEY_RSA_SIG]
2004:10:12-16:49:10 (none) pluto[23066]: | ******parse ISAKMP Oakley attribute:
2004:10:12-16:49:10 (none) pluto[23066]: |    af+type: OAKLEY_GROUP_DESCRIPTION
2004:10:12-16:49:10 (none) pluto[23066]: |    length/value: 5
2004:10:12-16:49:10 (none) pluto[23066]: |    [5 is OAKLEY_GROUP_MODP1536]
2004:10:12-16:49:10 (none) pluto[23066]: | Oakley Transform 0 accepted
2004:10:12-16:49:10 (none) pluto[23066]: | **emit ISAKMP Message:
2004:10:12-16:49:10 (none) pluto[23066]: |    initiator cookie:
2004:10:12-16:49:10 (none) pluto[23066]: |   d0 57 e6 c1  98 1e a8 56
2004:10:12-16:49:10 (none) pluto[23066]: |    responder cookie:
2004:10:12-16:49:10 (none) pluto[23066]: |   a7 16 3c 21  fc 06 25 97
2004:10:12-16:49:10 (none) pluto[23066]: |    next payload type: ISAKMP_NEXT_KE
2004:10:12-16:49:10 (none) pluto[23066]: |    ISAKMP version: ISAKMP Version 1.0
2004:10:12-16:49:10 (none) pluto[23066]: |    exchange type: ISAKMP_XCHG_IDPROT
2004:10:12-16:49:10 (none) pluto[23066]: |    flags: none
2004:10:12-16:49:10 (none) pluto[23066]: |    message ID:  00 00 00 00
2004:10:12-16:49:10 (none) pluto[23066]: | ***emit ISAKMP Key Exchange Payload:
2004:10:12-16:49:10 (none) pluto[23066]: |    next payload type: ISAKMP_NEXT_NONCE
2004:10:12-16:49:10 (none) pluto[23066]: | emitting 192 raw bytes of keyex value into ISAKMP Key Exchange Payload
2004:10:12-16:49:10 (none) pluto[23066]: | keyex value  60 1c af 66  7a ba 32 da  1a de eb f7  12 17 b6 2a
2004:10:12-16:49:10 (none) pluto[23066]: |   0f 7d bd 07  c1 3a b8 5a  98 41 7a 27  cc 48 80 c4
2004:10:12-16:49:10 (none) pluto[23066]: |   ab 0a 4c 2c  ed 08 60 8e  fa 82 af 79  73 63 98 03
2004:10:12-16:49:10 (none) pluto[23066]: |   ed 8d e7 c2  cf e1 c9 69  6a 4f e2 03  d9 f3 a1 74
2004:10:12-16:49:10 (none) pluto[23066]: |   6d 43 a1 54  2e e5 2a c6  e1 d0 00 34  20 ed 92 06
2004:10:12-16:49:10 (none) pluto[23066]: |   83 24 0e 4c  94 86 05 f6  f3 66 59 55  f8 cd d8 30
2004:10:12-16:49:10 (none) pluto[23066]: |   48 06 5a de  dd 42 60 2c  df 88 a5 43  b5 1d f5 2b
2004:10:12-16:49:10 (none) pluto[23066]: |   2a 25 77 00  93 bc 3b 1e  ed d2 81 1d  51 86 2a d3
2004:10:12-16:49:10 (none) pluto[23066]: |   00 00 05 12  41 7c a7 b6  a5 78 33 c7  f1 fa aa 30
2004:10:12-16:49:10 (none) pluto[23066]: |   73 dc df 8f  69 57 7d ed  c4 2f e4 1f  45 07 93 82
2004:10:12-16:49:10 (none) pluto[23066]: |   02 85 2e f2  e7 18 92 0e  79 55 67 cf  b6 65 85 2c
2004:10:12-16:49:10 (none) pluto[23066]: |   bb 65 3e b0  13 57 e2 78  e6 1a 19 ff  1c 9c 56 3c
2004:10:12-16:49:10 (none) pluto[23066]: | emitting length of ISAKMP Key Exchange Payload: 196
2004:10:12-16:49:10 (none) pluto[23066]: | ***emit ISAKMP Nonce Payload:
2004:10:12-16:49:10 (none) pluto[23066]: |    next payload type: ISAKMP_NEXT_NONE
2004:10:12-16:49:10 (none) pluto[23066]: | emitting 16 raw bytes of Ni into ISAKMP Nonce Payload
2004:10:12-16:49:10 (none) pluto[23066]: | Ni  99 d3 6b 86  89 33 5e b4  a2 b8 0d 10  ac 7f 58 9a
2004:10:12-16:49:10 (none) pluto[23066]: | emitting length of ISAKMP Nonce Payload: 20
2004:10:12-16:49:10 (none) pluto[23066]: | ***emit ISAKMP NAT-D Payload:
2004:10:12-16:49:10 (none) pluto[23066]: |    next payload type: ISAKMP_NEXT_NAT-D
2004:10:12-16:49:10 (none) pluto[23066]: | emitting 16 raw bytes of NAT-D into ISAKMP NAT-D Payload
2004:10:12-16:49:10 (none) pluto[23066]: | NAT-D  e8 c1 71 fa  24 18 f5 55  a5 9e 26 09  9d 54 b6 72
2004:10:12-16:49:10 (none) pluto[23066]: | emitting length of ISAKMP NAT-D Payload: 20
2004:10:12-16:49:10 (none) pluto[23066]: | ***emit ISAKMP NAT-D Payload:
2004:10:12-16:49:10 (none) pluto[23066]: |    next payload type: ISAKMP_NEXT_NONE
2004:10:12-16:49:10 (none) pluto[23066]: | emitting 16 raw bytes of NAT-D into ISAKMP NAT-D Payload
2004:10:12-16:49:10 (none) pluto[23066]: | NAT-D  b2 0d 80 3c  c8 a5 78 78  c3 e6 c9 30  0f 66 db 87
2004:10:12-16:49:10 (none) pluto[23066]: | emitting length of ISAKMP NAT-D Payload: 20
2004:10:12-16:49:10 (none) pluto[23066]: | emitting length of ISAKMP Message: 284
2004:10:12-16:49:10 (none) pluto[23066]: | ICOOKIE:  d0 57 e6 c1  98 1e a8 56
2004:10:12-16:49:10 (none) pluto[23066]: | RCOOKIE:  00 00 00 00  00 00 00 00
2004:10:12-16:49:10 (none) pluto[23066]: | peer:  51 0b b2 e6
2004:10:12-16:49:10 (none) pluto[23066]: | state hash entry 22
2004:10:12-16:49:10 (none) pluto[23066]: | ICOOKIE:  d0 57 e6 c1  98 1e a8 56
2004:10:12-16:49:10 (none) pluto[23066]: | RCOOKIE:  a7 16 3c 21  fc 06 25 97
2004:10:12-16:49:10 (none) pluto[23066]: | peer:  51 0b b2 e6
2004:10:12-16:49:10 (none) pluto[23066]: | state hash entry 22
2004:10:12-16:49:10 (none) pluto[23066]: "S_zaventem-primalux_0" #1: transition from state STATE_MAIN_I1 to state STATE_MAIN_I2
2004:10:12-16:49:10 (none) pluto[23066]: | inserting event EVENT_RETRANSMIT, timeout in 10 seconds for #1
2004:10:12-16:49:10 (none) pluto[23066]: | next event EVENT_RETRANSMIT in 10 seconds for #1
2004:10:12-16:49:10 (none) pluto[23066]: |  
2004:10:12-16:49:10 (none) pluto[23066]: | *received 284 bytes from 82.12.179.230:500 on eth1
2004:10:12-16:49:10 (none) pluto[23066]: | **parse ISAKMP Message:
2004:10:12-16:49:10 (none) pluto[23066]: |    initiator cookie:
2004:10:12-16:49:10 (none) pluto[23066]: |   d0 57 e6 c1  98 1e a8 56
2004:10:12-16:49:10 (none) pluto[23066]: |    responder cookie:
2004:10:12-16:49:10 (none) pluto[23066]: |   a7 16 3c 21  fc 06 25 97
2004:10:12-16:49:10 (none) pluto[23066]: |    next payload type: ISAKMP_NEXT_KE
2004:10:12-16:49:10 (none) pluto[23066]: |    ISAKMP version: ISAKMP Version 1.0
2004:10:12-16:49:10 (none) pluto[23066]: |    exchange type: ISAKMP_XCHG_IDPROT
2004:10:12-16:49:10 (none) pluto[23066]: |    flags: none
2004:10:12-16:49:10 (none) pluto[23066]: |    message ID:  00 00 00 00
2004:10:12-16:49:10 (none) pluto[23066]: |    length: 284
2004:10:12-16:49:10 (none) pluto[23066]: | The xchg type is ISAKMP_XCHG_IDPROT (2)
2004:10:12-16:49:10 (none) pluto[23066]: | ICOOKIE:  d0 57 e6 c1  98 1e a8 56
2004:10:12-16:49:10 (none) pluto[23066]: | RCOOKIE:  a7 16 3c 21  fc 06 25 97
2004:10:12-16:49:10 (none) pluto[23066]: | peer:  51 0b b2 e6
2004:10:12-16:49:10 (none) pluto[23066]: | state hash entry 22
2004:10:12-16:49:10 (none) pluto[23066]: | peer and cookies match, provided msgid 00000000 vs 00000000
2004:10:12-16:49:10 (none) pluto[23066]: | state object #1 found, in STATE_MAIN_I2
2004:10:12-16:49:10 (none) pluto[23066]: | ***parse ISAKMP Key Exchange Payload:
2004:10:12-16:49:10 (none) pluto[23066]: |    next payload type: ISAKMP_NEXT_NONCE
2004:10:12-16:49:10 (none) pluto[23066]: |    length: 196
2004:10:12-16:49:10 (none) pluto[23066]: | ***parse ISAKMP Nonce Payload:
2004:10:12-16:49:10 (none) pluto[23066]: |    next payload type: ISAKMP_NEXT_NAT-D
2004:10:12-16:49:10 (none) pluto[23066]: |    length: 20
2004:10:12-16:49:10 (none) pluto[23066]: | ***parse ISAKMP NAT-D Payload:
2004:10:12-16:49:10 (none) pluto[23066]: |    next payload type: ISAKMP_NEXT_NAT-D
2004:10:12-16:49:10 (none) pluto[23066]: |    length: 20
2004:10:12-16:49:10 (none) pluto[23066]: | ***parse ISAKMP NAT-D Payload:
2004:10:12-16:49:10 (none) pluto[23066]: |    next payload type: ISAKMP_NEXT_NONE
2004:10:12-16:49:10 (none) pluto[23066]: |    length: 20
2004:10:12-16:49:10 (none) pluto[23066]: | **emit ISAKMP Message:
2004:10:12-16:49:10 (none) pluto[23066]: |    initiator cookie:
2004:10:12-16:49:10 (none) pluto[23066]: |   d0 57 e6 c1  98 1e a8 56
2004:10:12-16:49:10 (none) pluto[23066]: |    responder cookie:
2004:10:12-16:49:10 (none) pluto[23066]: |   a7 16 3c 21  fc 06 25 97
2004:10:12-16:49:10 (none) pluto[23066]: |    next payload type: ISAKMP_NEXT_ID
2004:10:12-16:49:10 (none) pluto[23066]: |    ISAKMP version: ISAKMP Version 1.0
2004:10:12-16:49:10 (none) pluto[23066]: |    exchange type: ISAKMP_XCHG_IDPROT
2004:10:12-16:49:10 (none) pluto[23066]: |    flags: ISAKMP_FLAG_ENCRYPTION
2004:10:12-16:49:10 (none) pluto[23066]: |    message ID:  00 00 00 00
2004:10:12-16:49:10 (none) pluto[23066]: "S_zaventem-primalux_0" #1: NAT-Traversal: Result using draft-ietf-ipsec-nat-t-ike-02/03: i am NATed
2004:10:12-16:49:10 (none) pluto[23066]: | inserting event EVENT_NAT_T_KEEPALIVE, timeout in 60 seconds
2004:10:12-16:49:10 (none) pluto[23066]: | ***emit ISAKMP Identification Payload (IPsec DOI):
2004:10:12-16:49:10 (none) pluto[23066]: |    next payload type: ISAKMP_NEXT_SIG
2004:10:12-16:49:10 (none) pluto[23066]: |    ID type: ID_USER_FQDN
2004:10:12-16:49:10 (none) pluto[23066]: |    Protocol ID: 0
2004:10:12-16:49:10 (none) pluto[23066]: |    port: 0
2004:10:12-16:49:10 (none) pluto[23066]: | emitting 12 raw bytes of my identity into ISAKMP Identification Payload (IPsec DOI)
2004:10:12-16:49:10 (none) pluto[23066]: | my identity  68 61 72 72  79 40 69 63  65 2e 62 65
2004:10:12-16:49:10 (none) pluto[23066]: | emitting length of ISAKMP Identification Payload (IPsec DOI): 20
2004:10:12-16:49:10 (none) pluto[23066]: | signing hash with RSA Key *AQO5KDG9Q
2004:10:12-16:49:11 (none) pluto[23066]: | ***emit ISAKMP Signature Payload:
2004:10:12-16:49:11 (none) pluto[23066]: |    next payload type: ISAKMP_NEXT_NONE
2004:10:12-16:49:11 (none) pluto[23066]: | emitting 128 raw bytes of SIG_I into ISAKMP Signature Payload
2004:10:12-16:49:11 (none) pluto[23066]: | SIG_I  96 84 19 87  12 81 27 85  34 d3 ca 76  c0 aa 6f ca
2004:10:12-16:49:11 (none) pluto[23066]: |   92 10 01 f2  a8 22 d8 27  3d c8 7d b9  99 d4 d5 90
2004:10:12-16:49:11 (none) pluto[23066]: |   69 d4 ab 0a  43 37 c9 b5  47 f1 ce 6e  0c c0 39 65
2004:10:12-16:49:11 (none) pluto[23066]: |   7e a9 d4 9c  1c 90 15 b3  02 6f 58 08  f2 50 09 81
2004:10:12-16:49:11 (none) pluto[23066]: |   37 4b f0 ed  7e cb 45 4b  f0 d9 84 bf  29 5b 42 30
2004:10:12-16:49:11 (none) pluto[23066]: |   9f f9 a3 a4  79 e8 5c 47  90 8f 18 95  03 26 1c ac
2004:10:12-16:49:11 (none) pluto[23066]: |   cd 34 74 4e  7d c7 c5 b2  f8 07 73 65  7d 9d d4 33
2004:10:12-16:49:11 (none) pluto[23066]: |   73 a4 f5 05  aa fd b2 e8  17 30 97 9d  60 89 44 e9
2004:10:12-16:49:11 (none) pluto[23066]: | emitting length of ISAKMP Signature Payload: 132
2004:10:12-16:49:11 (none) pluto[23066]: | emitting length of ISAKMP Message: 180
2004:10:12-16:49:11 (none) pluto[23066]: "S_zaventem-primalux_0" #1: transition from state STATE_MAIN_I2 to state STATE_MAIN_I3
2004:10:12-16:49:11 (none) pluto[23066]: | inserting event EVENT_RETRANSMIT, timeout in 10 seconds for #1
2004:10:12-16:49:11 (none) pluto[23066]: | next event EVENT_RETRANSMIT in 10 seconds for #1
2004:10:12-16:49:11 (none) pluto[23066]: |  
2004:10:12-16:49:11 (none) pluto[23066]: | *received 180 bytes from 82.12.179.230:4500 on eth1
2004:10:12-16:49:11 (none) pluto[23066]: | **parse ISAKMP Message:
2004:10:12-16:49:11 (none) pluto[23066]: |    initiator cookie:
2004:10:12-16:49:11 (none) pluto[23066]: |   d0 57 e6 c1  98 1e a8 56
2004:10:12-16:49:11 (none) pluto[23066]: |    responder cookie:
2004:10:12-16:49:11 (none) pluto[23066]: |   a7 16 3c 21  fc 06 25 97
2004:10:12-16:49:11 (none) pluto[23066]: |    next payload type: ISAKMP_NEXT_ID
2004:10:12-16:49:11 (none) pluto[23066]: |    ISAKMP version: ISAKMP Version 1.0
2004:10:12-16:49:11 (none) pluto[23066]: |    exchange type: ISAKMP_XCHG_IDPROT
2004:10:12-16:49:11 (none) pluto[23066]: |    flags: ISAKMP_FLAG_ENCRYPTION
2004:10:12-16:49:11 (none) pluto[23066]: |    message ID:  00 00 00 00
2004:10:12-16:49:11 (none) pluto[23066]: |    length: 180
2004:10:12-16:49:11 (none) pluto[23066]: | The xchg type is ISAKMP_XCHG_IDPROT (2)
2004:10:12-16:49:11 (none) pluto[23066]: | ICOOKIE:  d0 57 e6 c1  98 1e a8 56
2004:10:12-16:49:11 (none) pluto[23066]: | RCOOKIE:  a7 16 3c 21  fc 06 25 97
2004:10:12-16:49:11 (none) pluto[23066]: | peer:  51 0b b2 e6
2004:10:12-16:49:11 (none) pluto[23066]: | state hash entry 22
2004:10:12-16:49:11 (none) pluto[23066]: | peer and cookies match, provided msgid 00000000 vs 00000000
2004:10:12-16:49:11 (none) pluto[23066]: | state object #1 found, in STATE_MAIN_I3
2004:10:12-16:49:11 (none) pluto[23066]: | ***parse ISAKMP Identification Payload:
2004:10:12-16:49:11 (none) pluto[23066]: |    next payload type: ISAKMP_NEXT_SIG
2004:10:12-16:49:11 (none) pluto[23066]: |    length: 20
2004:10:12-16:49:11 (none) pluto[23066]: |    ID type: ID_USER_FQDN
2004:10:12-16:49:11 (none) pluto[23066]: |    DOI specific A: 0
2004:10:12-16:49:11 (none) pluto[23066]: |    DOI specific B: 0
2004:10:12-16:49:11 (none) pluto[23066]: | ***parse ISAKMP Signature Payload:
2004:10:12-16:49:11 (none) pluto[23066]: |    next payload type: ISAKMP_NEXT_NONE
2004:10:12-16:49:11 (none) pluto[23066]: |    length: 132
2004:10:12-16:49:11 (none) pluto[23066]: "S_zaventem-primalux_0" #1: Main mode peer ID is ID_USER_FQDN: 'harry@ice.be'
2004:10:12-16:49:11 (none) pluto[23066]: | required CA is '%any'
2004:10:12-16:49:11 (none) pluto[23066]: | key issuer CA is '%any'
2004:10:12-16:49:11 (none) pluto[23066]: | an RSA Sig check passed with *AQOF0SD6B [preloaded key]
2004:10:12-16:49:11 (none) pluto[23066]: "S_zaventem-primalux_0" #1: transition from state STATE_MAIN_I3 to state STATE_MAIN_I4
2004:10:12-16:49:11 (none) pluto[23066]: | inserting event EVENT_SA_REPLACE, timeout in 6935 seconds for #1
2004:10:12-16:49:11 (none) pluto[23066]: "S_zaventem-primalux_0" #1: ISAKMP SA established
2004:10:12-16:49:11 (none) pluto[23066]: | unqueuing pending Quick Mode with 82.12.179.230 "S_zaventem-primalux_0"
2004:10:12-16:49:11 (none) pluto[23066]: | duplicating state object #1
2004:10:12-16:49:11 (none) pluto[23066]: | creating state object #2 at 0x80ee560
2004:10:12-16:49:11 (none) pluto[23066]: | ICOOKIE:  d0 57 e6 c1  98 1e a8 56
2004:10:12-16:49:11 (none) pluto[23066]: | RCOOKIE:  a7 16 3c 21  fc 06 25 97
2004:10:12-16:49:11 (none) pluto[23066]: | peer:  51 0b b2 e6
2004:10:12-16:49:11 (none) pluto[23066]: | state hash entry 22
2004:10:12-16:49:11 (none) pluto[23066]: | inserting event EVENT_SO_DISCARD, timeout in 0 seconds for #2
2004:10:12-16:49:11 (none) pluto[23066]: "S_zaventem-primalux_0" #2: initiating Quick Mode RSASIG+ENCRYPT+TUNNEL+PFS
2004:10:12-16:49:11 (none) pluto[23066]: | **emit ISAKMP Message:
2004:10:12-16:49:11 (none) pluto[23066]: |    initiator cookie:
2004:10:12-16:49:11 (none) pluto[23066]: |   d0 57 e6 c1  98 1e a8 56
2004:10:12-16:49:11 (none) pluto[23066]: |    responder cookie:
2004:10:12-16:49:11 (none) pluto[23066]: |   a7 16 3c 21  fc 06 25 97
2004:10:12-16:49:11 (none) pluto[23066]: |    next payload type: ISAKMP_NEXT_HASH
2004:10:12-16:49:11 (none) pluto[23066]: |    ISAKMP version: ISAKMP Version 1.0
2004:10:12-16:49:11 (none) pluto[23066]: |    exchange type: ISAKMP_XCHG_QUICK
2004:10:12-16:49:11 (none) pluto[23066]: |    flags: ISAKMP_FLAG_ENCRYPTION
2004:10:12-16:49:11 (none) pluto[23066]: |    message ID:  05 31 a3 e9
2004:10:12-16:49:11 (none) pluto[23066]: | ***emit ISAKMP Hash Payload:
2004:10:12-16:49:11 (none) pluto[23066]: |    next payload type: ISAKMP_NEXT_SA
2004:10:12-16:49:11 (none) pluto[23066]: | emitting 16 zero bytes of HASH into ISAKMP Hash Payload
2004:10:12-16:49:11 (none) pluto[23066]: | emitting length of ISAKMP Hash Payload: 20
2004:10:12-16:49:11 (none) pluto[23066]: | ***emit ISAKMP Security Association Payload:
2004:10:12-16:49:11 (none) pluto[23066]: |    next payload type: ISAKMP_NEXT_NONCE
2004:10:12-16:49:11 (none) pluto[23066]: |    DOI: ISAKMP_DOI_IPSEC
2004:10:12-16:49:11 (none) pluto[23066]: | ****emit IPsec DOI SIT:
2004:10:12-16:49:11 (none) pluto[23066]: |    IPsec DOI SIT: SIT_IDENTITY_ONLY
2004:10:12-16:49:11 (none) pluto[23066]: | 12_128-1, ; pfsgroup=5; flags=-strict
2004:10:12-16:49:11 (none) pluto[23066]: | kernel_alg_db_prop_new() initial trans_cnt=48
2004:10:12-16:49:11 (none) pluto[23066]: | kernel_alg_db_prop_new() will return p_new->protoid=3, p_new->trans_cnt=1
2004:10:12-16:49:11 (none) pluto[23066]: | kernel_alg_db_prop_new()     trans[0]: transid=12, attr_cnt=2, attrs[0].type=5, attrs[0].val=1
2004:10:12-16:49:11 (none) pluto[23066]: | ****emit ISAKMP Proposal Payload:
2004:10:12-16:49:11 (none) pluto[23066]: |    next payload type: ISAKMP_NEXT_NONE
2004:10:12-16:49:11 (none) pluto[23066]: |    proposal number: 0
2004:10:12-16:49:11 (none) pluto[23066]: |    protocol ID: PROTO_IPSEC_ESP
2004:10:12-16:49:11 (none) pluto[23066]: |    SPI size: 4
2004:10:12-16:49:11 (none) pluto[23066]: |    number of transforms: 1
2004:10:12-16:49:11 (none) pluto[23066]: | generate SPI:  12 c6 7a a6
2004:10:12-16:49:11 (none) pluto[23066]: | emitting 4 raw bytes of SPI into ISAKMP Proposal Payload
2004:10:12-16:49:11 (none) pluto[23066]: | SPI  12 c6 7a a6
2004:10:12-16:49:11 (none) pluto[23066]: | *****emit ISAKMP Transform Payload (ESP):
2004:10:12-16:49:11 (none) pluto[23066]: |    next payload type: ISAKMP_NEXT_NONE
2004:10:12-16:49:11 (none) pluto[23066]: |    transform number: 0
2004:10:12-16:49:11 (none) pluto[23066]: |    transform ID: ESP_AES
2004:10:12-16:49:11 (none) pluto[23066]: | ******emit ISAKMP IPsec DOI attribute:
2004:10:12-16:49:11 (none) pluto[23066]: |    af+type: GROUP_DESCRIPTION
2004:10:12-16:49:11 (none) pluto[23066]: |    length/value: 5
2004:10:12-16:49:11 (none) pluto[23066]: |     [5 is OAKLEY_GROUP_MODP1536]
2004:10:12-16:49:11 (none) pluto[23066]: | ******emit ISAKMP IPsec DOI attribute:
2004:10:12-16:49:11 (none) pluto[23066]: |    af+type: ENCAPSULATION_MODE
2004:10:12-16:49:11 (none) pluto[23066]: |    length/value: 61443
2004:10:12-16:49:11 (none) pluto[23066]: |     [61443 is ENCAPSULATION_MODE_UDP_TUNNEL]
2004:10:12-16:49:11 (none) pluto[23066]: | ******emit ISAKMP IPsec DOI attribute:
2004:10:12-16:49:11 (none) pluto[23066]: |    af+type: SA_LIFE_TYPE
2004:10:12-16:49:11 (none) pluto[23066]: |    length/value: 1
2004:10:12-16:49:11 (none) pluto[23066]: |     [1 is SA_LIFE_TYPE_SECONDS]
2004:10:12-16:49:11 (none) pluto[23066]: | ******emit ISAKMP IPsec DOI attribute:
2004:10:12-16:49:11 (none) pluto[23066]: |    af+type: SA_LIFE_DURATION
2004:10:12-16:49:11 (none) pluto[23066]: |    length/value: 3600
2004:10:12-16:49:11 (none) pluto[23066]: | ******emit ISAKMP IPsec DOI attribute:
2004:10:12-16:49:11 (none) pluto[23066]: |    af+type: AUTH_ALGORITHM
2004:10:12-16:49:11 (none) pluto[23066]: |    length/value: 1
2004:10:12-16:49:11 (none) pluto[23066]: |     [1 is AUTH_ALGORITHM_HMAC_MD5]
2004:10:12-16:49:11 (none) pluto[23066]: | ******emit ISAKMP IPsec DOI attribute:
2004:10:12-16:49:11 (none) pluto[23066]: |    af+type: KEY_LENGTH
2004:10:12-16:49:11 (none) pluto[23066]: |    length/value: 128
2004:10:12-16:49:11 (none) pluto[23066]: | emitting length of ISAKMP Transform Payload (ESP): 32
2004:10:12-16:49:11 (none) pluto[23066]: | emitting length of ISAKMP Proposal Payload: 44
2004:10:12-16:49:11 (none) pluto[23066]: | emitting length of ISAKMP Security Association Payload: 56
2004:10:12-16:49:11 (none) pluto[23066]: | ***emit ISAKMP Nonce Payload:
2004:10:12-16:49:11 (none) pluto[23066]: |    next payload type: ISAKMP_NEXT_KE
2004:10:12-16:49:11 (none) pluto[23066]: | emitting 16 raw bytes of Ni into ISAKMP Nonce Payload
2004:10:12-16:49:11 (none) pluto[23066]: | Ni  18 03 6d b4  98 4b 4f 49  28 61 b5 11  ab 8d 1a 08
2004:10:12-16:49:11 (none) pluto[23066]: | emitting length of ISAKMP Nonce Payload: 20
2004:10:12-16:49:11 (none) pluto[23066]: | ***emit ISAKMP Key Exchange Payload:
2004:10:12-16:49:11 (none) pluto[23066]: |    next payload type: ISAKMP_NEXT_ID
2004:10:12-16:49:11 (none) pluto[23066]: | emitting 192 raw bytes of keyex value into ISAKMP Key Exchange Payload
2004:10:12-16:49:11 (none) pluto[23066]: | keyex value  c6 ec b8 85  22 34 8e 62  d2 97 73 5c  d8 82 d1 48
2004:10:12-16:49:11 (none) pluto[23066]: |   5f bc 60 ce  37 d9 b0 33  97 a2 26 89  db d0 9f 12
2004:10:12-16:49:11 (none) pluto[23066]: |   03 66 00 01  af 07 9c 7b  6b c5 c9 3e  b1 72 16 58
2004:10:12-16:49:11 (none) pluto[23066]: |   83 63 ea 20  c7 25 68 b4  43 8f a5 4c  55 63 2d de
2004:10:12-16:49:11 (none) pluto[23066]: |   71 e3 19 86  c8 96 d0 9f  2d 62 58 15  11 e6 4c bb
2004:10:12-16:49:11 (none) pluto[23066]: |   fa 6d c8 78  86 e9 e7 36  b7 03 00 06  3b 51 e9 2f
2004:10:12-16:49:11 (none) pluto[23066]: |   3a de 94 e2  f6 cc f3 c4  fd d4 92 31  a4 24 e8 29
2004:10:12-16:49:11 (none) pluto[23066]: |   ec af e5 5c  d7 b6 9a a5  48 6b 10 3f  f3 ae 6f 99
2004:10:12-16:49:11 (none) pluto[23066]: |   0f ba 3e 2a  0c d0 f4 e5  35 3c 8a 2d  e2 f3 ac 69
2004:10:12-16:49:11 (none) pluto[23066]: |   1c 79 4f dd  42 2e 3d c5  e4 44 2b fd  43 c6 48 56
2004:10:12-16:49:11 (none) pluto[23066]: |   6f f3 01 cf  4c 6b f6 cd  8c 66 af 3a  87 d8 99 95
2004:10:12-16:49:11 (none) pluto[23066]: |   cc 34 71 62  b5 48 ab 37  f8 9d 36 4d  7d 5c 9c f7
2004:10:12-16:49:11 (none) pluto[23066]: | emitting length of ISAKMP Key Exchange Payload: 196
2004:10:12-16:49:11 (none) pluto[23066]: | ***emit ISAKMP Identification Payload (IPsec DOI):
2004:10:12-16:49:11 (none) pluto[23066]: |    next payload type: ISAKMP_NEXT_ID
2004:10:12-16:49:11 (none) pluto[23066]: |    ID type: ID_IPV4_ADDR_SUBNET
2004:10:12-16:49:11 (none) pluto[23066]: |    Protocol ID: 0
2004:10:12-16:49:11 (none) pluto[23066]: |    port: 0
2004:10:12-16:49:11 (none) pluto[23066]: | emitting 4 raw bytes of client network into ISAKMP Identification Payload (IPsec DOI)
2004:10:12-16:49:11 (none) pluto[23066]: | client network  c0 a8 01 00
2004:10:12-16:49:11 (none) pluto[23066]: | emitting 4 raw bytes of client mask into ISAKMP Identification Payload (IPsec DOI)
2004:10:12-16:49:11 (none) pluto[23066]: | client mask  ff ff ff 00
2004:10:12-16:49:11 (none) pluto[23066]: | emitting length of ISAKMP Identification Payload (IPsec DOI): 16
2004:10:12-16:49:11 (none) pluto[23066]: | ***emit ISAKMP Identification Payload (IPsec DOI):
2004:10:12-16:49:11 (none) pluto[23066]: |    next payload type: ISAKMP_NEXT_NONE
2004:10:12-16:49:11 (none) pluto[23066]: |    ID type: ID_IPV4_ADDR_SUBNET
2004:10:12-16:49:11 (none) pluto[23066]: |    Protocol ID: 0
2004:10:12-16:49:11 (none) pluto[23066]: |    port: 0
2004:10:12-16:49:11 (none) pluto[23066]: | emitting 4 raw bytes of client network into ISAKMP Identification Payload (IPsec DOI)
2004:10:12-16:49:11 (none) pluto[23066]: | client network  c0 a8 23 00
2004:10:12-16:49:11 (none) pluto[23066]: | emitting 4 raw bytes of client mask into ISAKMP Identification Payload (IPsec DOI)
2004:10:12-16:49:11 (none) pluto[23066]: | client mask  ff ff ff 00
2004:10:12-16:49:11 (none) pluto[23066]: | emitting length of ISAKMP Identification Payload (IPsec DOI): 16
2004:10:12-16:49:11 (none) pluto[23066]: | emitting 4 zero bytes of encryption padding into ISAKMP Message
2004:10:12-16:49:11 (none) pluto[23066]: | emitting length of ISAKMP Message: 356
2004:10:12-16:49:11 (none) pluto[23066]: | inserting event EVENT_RETRANSMIT, timeout in 10 seconds for #2
2004:10:12-16:49:11 (none) pluto[23066]: | next event EVENT_RETRANSMIT in 10 seconds for #2
2004:10:12-16:49:11 (none) pluto[23066]: |  
2004:10:12-16:49:11 (none) pluto[23066]: | *received 356 bytes from 82.12.179.230:4500 on eth1
2004:10:12-16:49:11 (none) pluto[23066]: | **parse ISAKMP Message:
2004:10:12-16:49:11 (none) pluto[23066]: |    initiator cookie:
2004:10:12-16:49:11 (none) pluto[23066]: |   d0 57 e6 c1  98 1e a8 56
2004:10:12-16:49:11 (none) pluto[23066]: |    responder cookie:
2004:10:12-16:49:11 (none) pluto[23066]: |   a7 16 3c 21  fc 06 25 97
2004:10:12-16:49:11 (none) pluto[23066]: |    next payload type: ISAKMP_NEXT_HASH
2004:10:12-16:49:11 (none) pluto[23066]: |    ISAKMP version: ISAKMP Version 1.0
2004:10:12-16:49:11 (none) pluto[23066]: |    exchange type: ISAKMP_XCHG_QUICK
2004:10:12-16:49:11 (none) pluto[23066]: |    flags: ISAKMP_FLAG_ENCRYPTION
2004:10:12-16:49:11 (none) pluto[23066]: |    message ID:  05 31 a3 e9
2004:10:12-16:49:11 (none) pluto[23066]: |    length: 356
2004:10:12-16:49:11 (none) pluto[23066]: | The xchg type is ISAKMP_XCHG_QUICK (32)
2004:10:12-16:49:11 (none) pluto[23066]: | ICOOKIE:  d0 57 e6 c1  98 1e a8 56
2004:10:12-16:49:11 (none) pluto[23066]: | RCOOKIE:  a7 16 3c 21  fc 06 25 97
2004:10:12-16:49:11 (none) pluto[23066]: | peer:  51 0b b2 e6
2004:10:12-16:49:11 (none) pluto[23066]: | state hash entry 22
2004:10:12-16:49:11 (none) pluto[23066]: | peer and cookies match, provided msgid 0531a3e9 vs 0531a3e9
2004:10:12-16:49:11 (none) pluto[23066]: | state object #2 found, in STATE_QUICK_I1
2004:10:12-16:49:11 (none) pluto[23066]: | ***parse ISAKMP Hash Payload:
2004:10:12-16:49:11 (none) pluto[23066]: |    next payload type: ISAKMP_NEXT_SA
2004:10:12-16:49:11 (none) pluto[23066]: |    length: 20
2004:10:12-16:49:11 (none) pluto[23066]: | ***parse ISAKMP Security Association Payload:
2004:10:12-16:49:11 (none) pluto[23066]: |    next payload type: ISAKMP_NEXT_NONCE
2004:10:12-16:49:11 (none) pluto[23066]: |    length: 56
2004:10:12-16:49:11 (none) pluto[23066]: |    DOI: ISAKMP_DOI_IPSEC
2004:10:12-16:49:11 (none) pluto[23066]: | ***parse ISAKMP Nonce Payload:
2004:10:12-16:49:11 (none) pluto[23066]: |    next payload type: ISAKMP_NEXT_KE
2004:10:12-16:49:11 (none) pluto[23066]: |    length: 20
2004:10:12-16:49:11 (none) pluto[23066]: | ***parse ISAKMP Key Exchange Payload:
2004:10:12-16:49:11 (none) pluto[23066]: |    next payload type: ISAKMP_NEXT_ID
2004:10:12-16:49:11 (none) pluto[23066]: |    length: 196
2004:10:12-16:49:11 (none) pluto[23066]: | ***parse ISAKMP Identification Payload (IPsec DOI):
2004:10:12-16:49:11 (none) pluto[23066]: |    next payload type: ISAKMP_NEXT_ID
2004:10:12-16:49:11 (none) pluto[23066]: |    length: 16
2004:10:12-16:49:11 (none) pluto[23066]: |    ID type: ID_IPV4_ADDR_SUBNET
2004:10:12-16:49:11 (none) pluto[23066]: |    Protocol ID: 0
2004:10:12-16:49:11 (none) pluto[23066]: |    port: 0
2004:10:12-16:49:11 (none) pluto[23066]: | ***parse ISAKMP Identification Payload (IPsec DOI):
2004:10:12-16:49:11 (none) pluto[23066]: |    next payload type: ISAKMP_NEXT_NONE
2004:10:12-16:49:11 (none) pluto[23066]: |    length: 16
2004:10:12-16:49:11 (none) pluto[23066]: |    ID type: ID_IPV4_ADDR_SUBNET
2004:10:12-16:49:11 (none) pluto[23066]: |    Protocol ID: 0
2004:10:12-16:49:11 (none) pluto[23066]: |    port: 0
2004:10:12-16:49:11 (none) pluto[23066]: | removing 4 bytes of padding
2004:10:12-16:49:11 (none) pluto[23066]: | **emit ISAKMP Message:
2004:10:12-16:49:11 (none) pluto[23066]: |    initiator cookie:
2004:10:12-16:49:11 (none) pluto[23066]: |   d0 57 e6 c1  98 1e a8 56
2004:10:12-16:49:11 (none) pluto[23066]: |    responder cookie:
2004:10:12-16:49:11 (none) pluto[23066]: |   a7 16 3c 21  fc 06 25 97
2004:10:12-16:49:11 (none) pluto[23066]: |    next payload type: ISAKMP_NEXT_HASH
2004:10:12-16:49:11 (none) pluto[23066]: |    ISAKMP version: ISAKMP Version 1.0
2004:10:12-16:49:11 (none) pluto[23066]: |    exchange type: ISAKMP_XCHG_QUICK
2004:10:12-16:49:11 (none) pluto[23066]: |    flags: ISAKMP_FLAG_ENCRYPTION
2004:10:12-16:49:11 (none) pluto[23066]: |    message ID:  05 31 a3 e9
2004:10:12-16:49:11 (none) pluto[23066]: | ****parse IPsec DOI SIT:
2004:10:12-16:49:11 (none) pluto[23066]: |    IPsec DOI SIT: SIT_IDENTITY_ONLY
2004:10:12-16:49:11 (none) pluto[23066]: | ****parse ISAKMP Proposal Payload:
2004:10:12-16:49:11 (none) pluto[23066]: |    next payload type: ISAKMP_NEXT_NONE
2004:10:12-16:49:11 (none) pluto[23066]: |    length: 44
2004:10:12-16:49:11 (none) pluto[23066]: |    proposal number: 0
2004:10:12-16:49:11 (none) pluto[23066]: |    protocol ID: PROTO_IPSEC_ESP
2004:10:12-16:49:11 (none) pluto[23066]: |    SPI size: 4
2004:10:12-16:49:11 (none) pluto[23066]: |    number of transforms: 1
2004:10:12-16:49:11 (none) pluto[23066]: | parsing 4 raw bytes of ISAKMP Proposal Payload into SPI
2004:10:12-16:49:11 (none) pluto[23066]: | SPI  2f b2 28 b0
2004:10:12-16:49:11 (none) pluto[23066]: | *****parse ISAKMP Transform Payload (ESP):
2004:10:12-16:49:11 (none) pluto[23066]: |    next payload type: ISAKMP_NEXT_NONE
2004:10:12-16:49:11 (none) pluto[23066]: |    length: 32
2004:10:12-16:49:11 (none) pluto[23066]: |    transform number: 0
2004:10:12-16:49:11 (none) pluto[23066]: |    transform ID: ESP_AES
2004:10:12-16:49:11 (none) pluto[23066]: | ******parse ISAKMP IPsec DOI attribute:
2004:10:12-16:49:11 (none) pluto[23066]: |    af+type: GROUP_DESCRIPTION
2004:10:12-16:49:11 (none) pluto[23066]: |    length/value: 5
2004:10:12-16:49:11 (none) pluto[23066]: |    [5 is OAKLEY_GROUP_MODP1536]
2004:10:12-16:49:11 (none) pluto[23066]: | ******parse ISAKMP IPsec DOI attribute:
2004:10:12-16:49:11 (none) pluto[23066]: |    af+type: ENCAPSULATION_MODE
2004:10:12-16:49:11 (none) pluto[23066]: |    length/value: 61443
2004:10:12-16:49:11 (none) pluto[23066]: |    [61443 is ENCAPSULATION_MODE_UDP_TUNNEL]
2004:10:12-16:49:11 (none) pluto[23066]: | ******parse ISAKMP IPsec DOI attribute:
2004:10:12-16:49:11 (none) pluto[23066]: |    af+type: SA_LIFE_TYPE
2004:10:12-16:49:11 (none) pluto[23066]: |    length/value: 1
2004:10:12-16:49:11 (none) pluto[23066]: |    [1 is SA_LIFE_TYPE_SECONDS]
2004:10:12-16:49:11 (none) pluto[23066]: | ******parse ISAKMP IPsec DOI attribute:
2004:10:12-16:49:11 (none) pluto[23066]: |    af+type: SA_LIFE_DURATION
2004:10:12-16:49:11 (none) pluto[23066]: |    length/value: 3600
2004:10:12-16:49:11 (none) pluto[23066]: | ******parse ISAKMP IPsec DOI attribute:
2004:10:12-16:49:11 (none) pluto[23066]: |    af+type: AUTH_ALGORITHM
2004:10:12-16:49:11 (none) pluto[23066]: |    length/value: 1
2004:10:12-16:49:11 (none) pluto[23066]: |    [1 is AUTH_ALGORITHM_HMAC_MD5]
2004:10:12-16:49:11 (none) pluto[23066]: | ******parse ISAKMP IPsec DOI attribute:
2004:10:12-16:49:11 (none) pluto[23066]: |    af+type: KEY_LENGTH
2004:10:12-16:49:11 (none) pluto[23066]: |    length/value: 128
2004:10:12-16:49:11 (none) pluto[23066]: | our client is subnet 192.168.1.0/24
2004:10:12-16:49:11 (none) pluto[23066]: | our client protocol/port is 0/0
2004:10:12-16:49:11 (none) pluto[23066]: | peer client is subnet 192.168.35.0/24
2004:10:12-16:49:11 (none) pluto[23066]: | peer client protocol/port is 0/0
2004:10:12-16:49:11 (none) pluto[23066]: | ***emit ISAKMP Hash Payload:
2004:10:12-16:49:11 (none) pluto[23066]: |    next payload type: ISAKMP_NEXT_NONE
2004:10:12-16:49:11 (none) pluto[23066]: | emitting 16 zero bytes of HASH into ISAKMP Hash Payload
2004:10:12-16:49:11 (none) pluto[23066]: | emitting length of ISAKMP Hash Payload: 20
2004:10:12-16:49:11 (none) pluto[23066]: | compute_proto_keymat:key_len=16 from peer
2004:10:12-16:49:11 (none) pluto[23066]: | compute_proto_keymat:needed_len (after ESP enc)=16
2004:10:12-16:49:11 (none) pluto[23066]: | kernel_alg_esp_auth_keylen(auth=1, sadb_aalg=2): a_keylen=16
2004:10:12-16:49:11 (none) pluto[23066]: | compute_proto_keymat:needed_len (after ESP auth)=32
2004:10:12-16:49:11 (none) pluto[23066]: | route owner of "S_zaventem-primalux_0" CK_PERMANENT unrouted: NULL; eroute owner: NULL
2004:10:12-16:49:11 (none) pluto[23066]: | kernel_alg_esp_info():transid=12, auth=1, ei=0x80d7060, enckeylen=32, authkeylen=16, encryptalg=12, authalg=2
2004:10:12-16:49:11 (none) pluto[23066]: | add inbound eroute 192.168.35.0/24:0 -> 192.168.1.0/24:0 => tun.1001@192.168.2.253:0
2004:10:12-16:49:11 (none) pluto[23066]: | kernel_alg_esp_info():transid=12, auth=1, ei=0x80d7060, enckeylen=32, authkeylen=16, encryptalg=12, authalg=2
2004:10:12-16:49:11 (none) pluto[23066]: | route owner of "S_zaventem-primalux_0" CK_PERMANENT unrouted: NULL; eroute owner: NULL
2004:10:12-16:49:11 (none) pluto[23066]: | add eroute 192.168.1.0/24:0 -> 192.168.35.0/24:0 => tun.1002@82.12.179.230:0
2004:10:12-16:49:11 (none) pluto[23066]: | executing up-client: 2>&1 PLUTO_VERSION='1.1' PLUTO_VERB='up-client' PLUTO_CONNECTION='S_zaventem-primalux_0' PLUTO_NEXT_HOP='82.12.179.230' PLUTO_INTERFACE='ipsec0' PLUTO_ME='192.168.2.253' PLUTO_MY_ID='harry@ice.be' PLUTO_MY_CLIENT='192.168.1.0/24' PLUTO_MY_CLIENT_NET='192.168.1.0' PLUTO_MY_CLIENT_MASK='255.255.255.0' PLUTO_MY_PORT='0' PLUTO_MY_PROTOCOL='0' PLUTO_PEER='82.12.179.230' PLUTO_PEER_ID='harry@ice.be' PLUTO_PEER_CLIENT='192.168.35.0/24' PLUTO_PEER_CLIENT_NET='192.168.35.0' PLUTO_PEER_CLIENT_MASK='255.255.255.0' PLUTO_PEER_PORT='0' PLUTO_PEER_PROTOCOL='0' PLUTO_PEER_CA='' /opt/_updown.classic 2>/tmp/log 1>/tmp/log
2004:10:12-16:49:11 (none) pluto[23066]: | executing prepare-client: 2>&1 PLUTO_VERSION='1.1' PLUTO_VERB='prepare-client' PLUTO_CONNECTION='S_zaventem-primalux_0' PLUTO_NEXT_HOP='82.12.179.230' PLUTO_INTERFACE='ipsec0' PLUTO_ME='192.168.2.253' PLUTO_MY_ID='harry@ice.be' PLUTO_MY_CLIENT='192.168.1.0/24' PLUTO_MY_CLIENT_NET='192.168.1.0' PLUTO_MY_CLIENT_MASK='255.255.255.0' PLUTO_MY_PORT='0' PLUTO_MY_PROTOCOL='0' PLUTO_PEER='82.12.179.230' PLUTO_PEER_ID='harry@ice.be' PLUTO_PEER_CLIENT='192.168.35.0/24' PLUTO_PEER_CLIENT_NET='192.168.35.0' PLUTO_PEER_CLIENT_MASK='255.255.255.0' PLUTO_PEER_PORT='0' PLUTO_PEER_PROTOCOL='0' PLUTO_PEER_CA='' /opt/_updown.classic 2>/tmp/log 1>/tmp/log
2004:10:12-16:49:11 (none) pluto[23066]: | executing route-client: 2>&1 PLUTO_VERSION='1.1' PLUTO_VERB='route-client' PLUTO_CONNECTION='S_zaventem-primalux_0' PLUTO_NEXT_HOP='82.12.179.230' PLUTO_INTERFACE='ipsec0' PLUTO_ME='192.168.2.253' PLUTO_MY_ID='harry@ice.be' PLUTO_MY_CLIENT='192.168.1.0/24' PLUTO_MY_CLIENT_NET='192.168.1.0' PLUTO_MY_CLIENT_MASK='255.255.255.0' PLUTO_MY_PORT='0' PLUTO_MY_PROTOCOL='0' PLUTO_PEER='82.12.179.230' PLUTO_PEER_ID='harry@ice.be' PLUTO_PEER_CLIENT='192.168.35.0/24' PLUTO_PEER_CLIENT_NET='192.168.35.0' PLUTO_PEER_CLIENT_MASK='255.255.255.0' PLUTO_PEER_PORT='0' PLUTO_PEER_PROTOCOL='0' PLUTO_PEER_CA='' /opt/_updown.classic 2>/tmp/log 1>/tmp/log
2004:10:12-16:49:12 (none) pluto[23066]: | emitting 4 zero bytes of encryption padding into ISAKMP Message
2004:10:12-16:49:12 (none) pluto[23066]: | emitting length of ISAKMP Message: 52
2004:10:12-16:49:12 (none) pluto[23066]: "S_zaventem-primalux_0" #2: transition from state STATE_QUICK_I1 to state STATE_QUICK_I2
2004:10:12-16:49:12 (none) pluto[23066]: | inserting event EVENT_SA_REPLACE, timeout in 2865 seconds for #2
2004:10:12-16:49:12 (none) pluto[23066]: "S_zaventem-primalux_0" #2: sent QI2, IPsec SA established
2004:10:12-16:49:12 (none) pluto[23066]: | next event EVENT_SHUNT_SCAN in 47 seconds
2004:10:12-16:49:59 (none) pluto[23066]: |  
2004:10:12-16:49:59 (none) pluto[23066]: | *time to handle event
2004:10:12-16:49:59 (none) pluto[23066]: | event after this is EVENT_NAT_T_KEEPALIVE in 11 seconds
2004:10:12-16:49:59 (none) pluto[23066]: | inserting event EVENT_SHUNT_SCAN, timeout in 120 seconds
2004:10:12-16:49:59 (none) pluto[23066]: | scanning for shunt eroutes
2004:10:12-16:49:59 (none) pluto[23066]: | next event EVENT_NAT_T_KEEPALIVE in 11 seconds
2004:10:12-16:50:10 (none) pluto[23066]: |  
2004:10:12-16:50:10 (none) pluto[23066]: | *time to handle event
2004:10:12-16:50:10 (none) pluto[23066]: | event after this is EVENT_SHUNT_SCAN in 109 seconds
2004:10:12-16:50:10 (none) pluto[23066]: | inserting event EVENT_NAT_T_KEEPALIVE, timeout in 60 seconds
2004:10:12-16:50:10 (none) pluto[23066]: | next event EVENT_NAT_T_KEEPALIVE in 60 seconds
2004:10:12-16:51:10 (none) pluto[23066]: |  
2004:10:12-16:51:10 (none) pluto[23066]: | *time to handle event
2004:10:12-16:51:10 (none) pluto[23066]: | event after this is EVENT_SHUNT_SCAN in 49 seconds
2004:10:12-16:51:10 (none) pluto[23066]: | inserting event EVENT_NAT_T_KEEPALIVE, timeout in 60 seconds
2004:10:12-16:51:10 (none) pluto[23066]: | next event EVENT_SHUNT_SCAN in 49 seconds
2004:10:12-16:51:59 (none) pluto[23066]: |  
2004:10:12-16:51:59 (none) pluto[23066]: | *time to handle event
2004:10:12-16:51:59 (none) pluto[23066]: | event after this is EVENT_NAT_T_KEEPALIVE in 11 seconds
2004:10:12-16:51:59 (none) pluto[23066]: | inserting event EVENT_SHUNT_SCAN, timeout in 120 seconds
2004:10:12-16:51:59 (none) pluto[23066]: | scanning for shunt eroutes
2004:10:12-16:51:59 (none) pluto[23066]: | next event EVENT_NAT_T_KEEPALIVE in 11 seconds
2004:10:12-16:52:10 (none) pluto[23066]: |  
2004:10:12-16:52:10 (none) pluto[23066]: | *time to handle event
2004:10:12-16:52:10 (none) pluto[23066]: | event after this is EVENT_SHUNT_SCAN in 109 seconds
2004:10:12-16:52:10 (none) pluto[23066]: | inserting event EVENT_NAT_T_KEEPALIVE, timeout in 60 seconds
2004:10:12-16:52:10 (none) pluto[23066]: | next event EVENT_NAT_T_KEEPALIVE in 60 seconds
2004:10:12-16:53:10 (none) pluto[23066]: |  
2004:10:12-16:53:10 (none) pluto[23066]: | *time to handle event
2004:10:12-16:53:10 (none) pluto[23066]: | event after this is EVENT_SHUNT_SCAN in 49 seconds
2004:10:12-16:53:10 (none) pluto[23066]: | inserting event EVENT_NAT_T_KEEPALIVE, timeout in 60 seconds
2004:10:12-16:53:10 (none) pluto[23066]: | next event EVENT_SHUNT_SCAN in 49 seconds
2004:10:12-16:53:59 (none) pluto[23066]: |  
2004:10:12-16:53:59 (none) pluto[23066]: | *time to handle event
2004:10:12-16:53:59 (none) pluto[23066]: | event after this is EVENT_NAT_T_KEEPALIVE in 11 seconds
2004:10:12-16:53:59 (none) pluto[23066]: | inserting event EVENT_SHUNT_SCAN, timeout in 120 seconds
2004:10:12-16:53:59 (none) pluto[23066]: | scanning for shunt eroutes
2004:10:12-16:53:59 (none) pluto[23066]: | next event EVENT_NAT_T_KEEPALIVE in 11 seconds
2004:10:12-16:54:10 (none) pluto[23066]: |  
2004:10:12-16:54:10 (none) pluto[23066]: | *time to handle event
2004:10:12-16:54:10 (none) pluto[23066]: | event after this is EVENT_SHUNT_SCAN in 109 seconds
2004:10:12-16:54:10 (none) pluto[23066]: | inserting event EVENT_NAT_T_KEEPALIVE, timeout in 60 seconds
2004:10:12-16:54:10 (none) pluto[23066]: | next event EVENT_NAT_T_KEEPALIVE in 60 seconds
2004:10:12-16:54:45 (none) pluto[23066]: |  
2004:10:12-16:54:45 (none) pluto[23066]: | *received whack message
2004:10:12-16:54:45 (none) pluto[23066]: | kernel_alg_esp_auth_keylen(auth=1, sadb_aalg=2): a_keylen=16
2004:10:12-16:54:45 (none) pluto[23066]: | next event EVENT_NAT_T_KEEPALIVE in 25 seconds
2004:10:12-16:54:53 (none) pluto[23066]: |  
2004:10:12-16:54:53 (none) pluto[23066]: | *received whack message
2004:10:12-16:54:53 (none) pluto[23066]: | kernel_alg_esp_auth_keylen(auth=1, sadb_aalg=2): a_keylen=16
2004:10:12-16:54:53 (none) pluto[23066]: | next event EVENT_NAT_T_KEEPALIVE in 17 seconds
2004:10:12-16:54:57 (none) pluto[23066]: |  
2004:10:12-16:54:57 (none) pluto[23066]: | *received whack message
2004:10:12-16:54:57 (none) pluto[23066]: | kernel_alg_esp_auth_keylen(auth=1, sadb_aalg=2): a_keylen=16
2004:10:12-16:54:57 (none) pluto[23066]: | next event EVENT_NAT_T_KEEPALIVE in 13 seconds
2004:10:12-16:55:01 (none) pluto[23066]: |  
2004:10:12-16:55:01 (none) pluto[23066]: | *received whack message
2004:10:12-16:55:01 (none) pluto[23066]: | kernel_alg_esp_auth_keylen(auth=1, sadb_aalg=2): a_keylen=16
2004:10:12-16:55:01 (none) pluto[23066]: | next event EVENT_NAT_T_KEEPALIVE in 9 seconds
2004:10:12-16:55:06 (none) pluto[23066]: |  
2004:10:12-16:55:06 (none) pluto[23066]: | *received whack message
2004:10:12-16:55:06 (none) pluto[23066]: | kernel_alg_esp_auth_keylen(auth=1, sadb_aalg=2): a_keylen=16
2004:10:12-16:55:06 (none) pluto[23066]: | next event EVENT_NAT_T_KEEPALIVE in 4 seconds
2004:10:12-16:55:10 (none) pluto[23066]: |  
2004:10:12-16:55:10 (none) pluto[23066]: | *time to handle event
2004:10:12-16:55:10 (none) pluto[23066]: | event after this is EVENT_SHUNT_SCAN in 49 seconds
2004:10:12-16:55:10 (none) pluto[23066]: | inserting event EVENT_NAT_T_KEEPALIVE, timeout in 60 seconds
2004:10:12-16:55:10 (none) pluto[23066]: | next event EVENT_SHUNT_SCAN in 49 seconds
2004:10:12-16:55:12 (none) pluto[23066]: |  
2004:10:12-16:55:12 (none) pluto[23066]: | *received whack message
2004:10:12-16:55:12 (none) pluto[23066]: | kernel_alg_esp_auth_keylen(auth=1, sadb_aalg=2): a_keylen=16
2004:10:12-16:55:12 (none) pluto[23066]: | next event EVENT_SHUNT_SCAN in 47 seconds
2004:10:12-16:55:20 (none) pluto[23066]: |  
2004:10:12-16:55:20 (none) pluto[23066]: | *received whack message
2004:10:12-16:55:20 (none) pluto[23066]: | kernel_alg_esp_auth_keylen(auth=1, sadb_aalg=2): a_keylen=16
2004:10:12-16:55:20 (none) pluto[23066]: | next event EVENT_SHUNT_SCAN in 39 seconds
2004:10:12-16:55:25 (none) pluto[23066]: |  
2004:10:12-16:55:25 (none) pluto[23066]: | *received whack message
2004:10:12-16:55:25 (none) pluto[23066]: | kernel_alg_esp_auth_keylen(auth=1, sadb_aalg=2): a_keylen=16
2004:10:12-16:55:25 (none) pluto[23066]: | next event EVENT_SHUNT_SCAN in 34 seconds
2004:10:12-16:55:30 (none) pluto[23066]: |  
2004:10:12-16:55:30 (none) pluto[23066]: | *received whack message
2004:10:12-16:55:30 (none) pluto[23066]: | kernel_alg_esp_auth_keylen(auth=1, sadb_aalg=2): a_keylen=16
2004:10:12-16:55:30 (none) pluto[23066]: | next event EVENT_SHUNT_SCAN in 29 seconds
2004:10:12-16:55:59 (none) pluto[23066]: |  
2004:10:12-16:55:59 (none) pluto[23066]: | *time to handle event
2004:10:12-16:55:59 (none) pluto[23066]: | event after this is EVENT_NAT_T_KEEPALIVE in 11 seconds
2004:10:12-16:55:59 (none) pluto[23066]: | inserting event EVENT_SHUNT_SCAN, timeout in 120 seconds
2004:10:12-16:55:59 (none) pluto[23066]: | scanning for shunt eroutes
2004:10:12-16:55:59 (none) pluto[23066]: | next event EVENT_NAT_T_KEEPALIVE in 11 seconds
2004:10:12-16:56:10 (none) pluto[23066]: |  
2004:10:12-16:56:10 (none) pluto[23066]: | *time to handle event
2004:10:12-16:56:10 (none) pluto[23066]: | event after this is EVENT_SHUNT_SCAN in 109 seconds
2004:10:12-16:56:10 (none) pluto[23066]: | inserting event EVENT_NAT_T_KEEPALIVE, timeout in 60 seconds
2004:10:12-16:56:10 (none) pluto[23066]: | next event EVENT_NAT_T_KEEPALIVE in 60 seconds
2004:10:12-16:57:10 (none) pluto[23066]: |  
2004:10:12-16:57:10 (none) pluto[23066]: | *time to handle event
2004:10:12-16:57:10 (none) pluto[23066]: | event after this is EVENT_SHUNT_SCAN in 49 seconds
2004:10:12-16:57:10 (none) pluto[23066]: | inserting event EVENT_NAT_T_KEEPALIVE, timeout in 60 seconds
2004:10:12-16:57:10 (none) pluto[23066]: | next event EVENT_SHUNT_SCAN in 49 seconds
2004:10:12-16:57:59 (none) pluto[23066]: |  
2004:10:12-16:57:59 (none) pluto[23066]: | *time to handle event
2004:10:12-16:57:59 (none) pluto[23066]: | event after this is EVENT_NAT_T_KEEPALIVE in 11 seconds
2004:10:12-16:57:59 (none) pluto[23066]: | inserting event EVENT_SHUNT_SCAN, timeout in 120 seconds
2004:10:12-16:57:59 (none) pluto[23066]: | scanning for shunt eroutes
2004:10:12-16:57:59 (none) pluto[23066]: | next event EVENT_NAT_T_KEEPALIVE in 11 seconds
2004:10:12-16:58:10 (none) pluto[23066]: |  
2004:10:12-16:58:10 (none) pluto[23066]: | *time to handle event
2004:10:12-16:58:10 (none) pluto[23066]: | event after this is EVENT_SHUNT_SCAN in 109 seconds
2004:10:12-16:58:10 (none) pluto[23066]: | inserting event EVENT_NAT_T_KEEPALIVE, timeout in 60 seconds
2004:10:12-16:58:10 (none) pluto[23066]: | next event EVENT_NAT_T_KEEPALIVE in 60 seconds
2004:10:12-16:59:10 (none) pluto[23066]: |  
2004:10:12-16:59:10 (none) pluto[23066]: | *time to handle event
2004:10:12-16:59:10 (none) pluto[23066]: | event after this is EVENT_SHUNT_SCAN in 49 seconds
2004:10:12-16:59:10 (none) pluto[23066]: | inserting event EVENT_NAT_T_KEEPALIVE, timeout in 60 seconds
2004:10:12-16:59:10 (none) pluto[23066]: | next event EVENT_SHUNT_SCAN in 49 seconds
2004:10:12-16:59:59 (none) pluto[23066]: |  
2004:10:12-16:59:59 (none) pluto[23066]: | *time to handle event
2004:10:12-16:59:59 (none) pluto[23066]: | event after this is EVENT_NAT_T_KEEPALIVE in 11 seconds
2004:10:12-16:59:59 (none) pluto[23066]: | inserting event EVENT_SHUNT_SCAN, timeout in 120 seconds
2004:10:12-16:59:59 (none) pluto[23066]: | scanning for shunt eroutes
2004:10:12-16:59:59 (none) pluto[23066]: | next event EVENT_NAT_T_KEEPALIVE in 11 seconds
2004:10:12-17:00:10 (none) pluto[23066]: |  
2004:10:12-17:00:10 (none) pluto[23066]: | *time to handle event
2004:10:12-17:00:10 (none) pluto[23066]: | event after this is EVENT_SHUNT_SCAN in 109 seconds
2004:10:12-17:00:10 (none) pluto[23066]: | inserting event EVENT_NAT_T_KEEPALIVE, timeout in 60 seconds
2004:10:12-17:00:10 (none) pluto[23066]: | next event EVENT_NAT_T_KEEPALIVE in 60 seconds
2004:10:12-17:01:10 (none) pluto[23066]: |  
2004:10:12-17:01:10 (none) pluto[23066]: | *time to handle event
2004:10:12-17:01:10 (none) pluto[23066]: | event after this is EVENT_SHUNT_SCAN in 49 seconds
2004:10:12-17:01:10 (none) pluto[23066]: | inserting event EVENT_NAT_T_KEEPALIVE, timeout in 60 seconds
2004:10:12-17:01:10 (none) pluto[23066]: | next event EVENT_SHUNT_SCAN in 49 seconds
2004:10:12-17:01:59 (none) pluto[23066]: |  
2004:10:12-17:01:59 (none) pluto[23066]: | *time to handle event
2004:10:12-17:01:59 (none) pluto[23066]: | event after this is EVENT_NAT_T_KEEPALIVE in 11 seconds
2004:10:12-17:01:59 (none) pluto[23066]: | inserting event EVENT_SHUNT_SCAN, timeout in 120 seconds
2004:10:12-17:01:59 (none) pluto[23066]: | scanning for shunt eroutes
2004:10:12-17:01:59 (none) pluto[23066]: | next event EVENT_NAT_T_KEEPALIVE in 11 seconds
2004:10:12-17:02:10 (none) pluto[23066]: |  
2004:10:12-17:02:10 (none) pluto[23066]: | *time to handle event
2004:10:12-17:02:10 (none) pluto[23066]: | event after this is EVENT_SHUNT_SCAN in 109 seconds
2004:10:12-17:02:10 (none) pluto[23066]: | inserting event EVENT_NAT_T_KEEPALIVE, timeout in 60 seconds
2004:10:12-17:02:10 (none) pluto[23066]: | next event EVENT_NAT_T_KEEPALIVE in 60 seconds
2004:10:12-17:03:10 (none) pluto[23066]: |  
2004:10:12-17:03:10 (none) pluto[23066]: | *time to handle event
2004:10:12-17:03:10 (none) pluto[23066]: | event after this is EVENT_SHUNT_SCAN in 49 seconds
2004:10:12-17:03:10 (none) pluto[23066]: | inserting event EVENT_NAT_T_KEEPALIVE, timeout in 60 seconds
2004:10:12-17:03:10 (none) pluto[23066]: | next event EVENT_SHUNT_SCAN in 49 seconds
2004:10:12-17:03:59 (none) pluto[23066]: |  
2004:10:12-17:03:59 (none) pluto[23066]: | *time to handle event
2004:10:12-17:03:59 (none) pluto[23066]: | event after this is EVENT_NAT_T_KEEPALIVE in 11 seconds
2004:10:12-17:03:59 (none) pluto[23066]: | inserting event EVENT_SHUNT_SCAN, timeout in 120 seconds
2004:10:12-17:03:59 (none) pluto[23066]: | scanning for shunt eroutes
2004:10:12-17:03:59 (none) pluto[23066]: | next event EVENT_NAT_T_KEEPALIVE in 11 seconds
2004:10:12-17:04:10 (none) pluto[23066]: |  
2004:10:12-17:04:10 (none) pluto[23066]: | *time to handle event
2004:10:12-17:04:10 (none) pluto[23066]: | event after this is EVENT_SHUNT_SCAN in 109 seconds
2004:10:12-17:04:10 (none) pluto[23066]: | inserting event EVENT_NAT_T_KEEPALIVE, timeout in 60 seconds
2004:10:12-17:04:10 (none) pluto[23066]: | next event EVENT_NAT_T_KEEPALIVE in 60 seconds
2004:10:12-17:05:10 (none) pluto[23066]: |  
2004:10:12-17:05:10 (none) pluto[23066]: | *time to handle event
2004:10:12-17:05:10 (none) pluto[23066]: | event after this is EVENT_SHUNT_SCAN in 49 seconds
2004:10:12-17:05:10 (none) pluto[23066]: | inserting event EVENT_NAT_T_KEEPALIVE, timeout in 60 seconds
2004:10:12-17:05:10 (none) pluto[23066]: | next event EVENT_SHUNT_SCAN in 49 seconds
2004:10:12-17:05:59 (none) pluto[23066]: |  
2004:10:12-17:05:59 (none) pluto[23066]: | *time to handle event
2004:10:12-17:05:59 (none) pluto[23066]: | event after this is EVENT_NAT_T_KEEPALIVE in 11 seconds
2004:10:12-17:05:59 (none) pluto[23066]: | inserting event EVENT_SHUNT_SCAN, timeout in 120 seconds
2004:10:12-17:05:59 (none) pluto[23066]: | scanning for shunt eroutes
2004:10:12-17:05:59 (none) pluto[23066]: | next event EVENT_NAT_T_KEEPALIVE in 11 seconds
2004:10:12-17:06:10 (none) pluto[23066]: |  
2004:10:12-17:06:10 (none) pluto[23066]: | *received whack message
2004:10:12-17:06:10 (none) pluto[23066]: shutting down
2004:10:12-17:06:10 (none) pluto[23066]: forgetting secrets
2004:10:12-17:06:10 (none) pluto[23066]: "S_zaventem-primalux_0": deleting connection
2004:10:12-17:06:10 (none) pluto[23066]: | examining state #2 (STATE_QUICK_I2), 1 vs parent=1
2004:10:12-17:06:10 (none) pluto[23066]: "S_zaventem-primalux_0" #2: deleting state (STATE_QUICK_I2)
2004:10:12-17:06:10 (none) pluto[23066]: | **emit ISAKMP Message:
2004:10:12-17:06:10 (none) pluto[23066]: |    initiator cookie:
2004:10:12-17:06:10 (none) pluto[23066]: |   d0 57 e6 c1  98 1e a8 56
2004:10:12-17:06:10 (none) pluto[23066]: |    responder cookie:
2004:10:12-17:06:10 (none) pluto[23066]: |   a7 16 3c 21  fc 06 25 97
2004:10:12-17:06:10 (none) pluto[23066]: |    next payload type: ISAKMP_NEXT_HASH
2004:10:12-17:06:10 (none) pluto[23066]: |    ISAKMP version: ISAKMP Version 1.0
2004:10:12-17:06:10 (none) pluto[23066]: |    exchange type: ISAKMP_XCHG_INFO
2004:10:12-17:06:10 (none) pluto[23066]: |    flags: ISAKMP_FLAG_ENCRYPTION
2004:10:12-17:06:10 (none) pluto[23066]: |    message ID:  54 96 fc e2
2004:10:12-17:06:10 (none) pluto[23066]: | ***emit ISAKMP Hash Payload:
2004:10:12-17:06:10 (none) pluto[23066]: |    next payload type: ISAKMP_NEXT_D
2004:10:12-17:06:10 (none) pluto[23066]: | emitting 16 zero bytes of HASH(1) into ISAKMP Hash Payload
2004:10:12-17:06:10 (none) pluto[23066]: | emitting length of ISAKMP Hash Payload: 20
2004:10:12-17:06:10 (none) pluto[23066]: | ***emit ISAKMP Delete Payload:
2004:10:12-17:06:10 (none) pluto[23066]: |    next payload type: ISAKMP_NEXT_NONE
2004:10:12-17:06:10 (none) pluto[23066]: |    DOI: ISAKMP_DOI_IPSEC
2004:10:12-17:06:10 (none) pluto[23066]: |    protocol ID: 3
2004:10:12-17:06:10 (none) pluto[23066]: |    SPI size: 4
2004:10:12-17:06:10 (none) pluto[23066]: |    number of SPIs: 1
2004:10:12-17:06:10 (none) pluto[23066]: | emitting 4 raw bytes of delete payload into ISAKMP Delete Payload
2004:10:12-17:06:10 (none) pluto[23066]: | delete payload  12 c6 7a a6
2004:10:12-17:06:10 (none) pluto[23066]: | emitting length of ISAKMP Delete Payload: 16
2004:10:12-17:06:10 (none) pluto[23066]: | emitting 4 zero bytes of encryption padding into ISAKMP Message
2004:10:12-17:06:10 (none) pluto[23066]: | emitting length of ISAKMP Message: 68
2004:10:12-17:06:10 (none) pluto[23066]: | ICOOKIE:  d0 57 e6 c1  98 1e a8 56
2004:10:12-17:06:10 (none) pluto[23066]: | RCOOKIE:  a7 16 3c 21  fc 06 25 97
2004:10:12-17:06:10 (none) pluto[23066]: | peer:  51 0b b2 e6
2004:10:12-17:06:10 (none) pluto[23066]: | state hash entry 22
2004:10:12-17:06:10 (none) pluto[23066]: | executing down-client: 2>&1 PLUTO_VERSION='1.1' PLUTO_VERB='down-client' PLUTO_CONNECTION='S_zaventem-primalux_0' PLUTO_NEXT_HOP='82.12.179.230' PLUTO_INTERFACE='ipsec0' PLUTO_ME='192.168.2.253' PLUTO_MY_ID='harry@ice.be' PLUTO_MY_CLIENT='192.168.1.0/24' PLUTO_MY_CLIENT_NET='192.168.1.0' PLUTO_MY_CLIENT_MASK='255.255.255.0' PLUTO_MY_PORT='0' PLUTO_MY_PROTOCOL='0' PLUTO_PEER='82.12.179.230' PLUTO_PEER_ID='harry@ice.be' PLUTO_PEER_CLIENT='192.168.35.0/24' PLUTO_PEER_CLIENT_NET='192.168.35.0' PLUTO_PEER_CLIENT_MASK='255.255.255.0' PLUTO_PEER_PORT='0' PLUTO_PEER_PROTOCOL='0' PLUTO_PEER_CA='' /opt/_updown.classic 2>/tmp/log 1>/tmp/log
2004:10:12-17:06:10 (none) pluto[23066]: | replace with shunt eroute 192.168.1.0/24:0 -> 192.168.35.0/24:0 => %trap:0
2004:10:12-17:06:10 (none) pluto[23066]: | examining state #1 (STATE_MAIN_I4), 0 vs parent=1
2004:10:12-17:06:10 (none) pluto[23066]: | examining state #1 (STATE_MAIN_I4), 0 vs parent=1
2004:10:12-17:06:10 (none) pluto[23066]: "S_zaventem-primalux_0" #1: deleting state (STATE_MAIN_I4)
2004:10:12-17:06:10 (none) pluto[23066]: | **emit ISAKMP Message:
2004:10:12-17:06:10 (none) pluto[23066]: |    initiator cookie:
2004:10:12-17:06:10 (none) pluto[23066]: |   d0 57 e6 c1  98 1e a8 56
2004:10:12-17:06:10 (none) pluto[23066]: |    responder cookie:
2004:10:12-17:06:10 (none) pluto[23066]: |   a7 16 3c 21  fc 06 25 97
2004:10:12-17:06:10 (none) pluto[23066]: |    next payload type: ISAKMP_NEXT_HASH
2004:10:12-17:06:10 (none) pluto[23066]: |    ISAKMP version: ISAKMP Version 1.0
2004:10:12-17:06:10 (none) pluto[23066]: |    exchange type: ISAKMP_XCHG_INFO
2004:10:12-17:06:10 (none) pluto[23066]: |    flags: ISAKMP_FLAG_ENCRYPTION
2004:10:12-17:06:10 (none) pluto[23066]: |    message ID:  24 31 08 6e
2004:10:12-17:06:10 (none) pluto[23066]: | ***emit ISAKMP Hash Payload:
2004:10:12-17:06:10 (none) pluto[23066]: |    next payload type: ISAKMP_NEXT_D
2004:10:12-17:06:10 (none) pluto[23066]: | emitting 16 zero bytes of HASH(1) into ISAKMP Hash Payload
2004:10:12-17:06:10 (none) pluto[23066]: | emitting length of ISAKMP Hash Payload: 20
2004:10:12-17:06:10 (none) pluto[23066]: | ***emit ISAKMP Delete Payload:
2004:10:12-17:06:10 (none) pluto[23066]: |    next payload type: ISAKMP_NEXT_NONE
2004:10:12-17:06:10 (none) pluto[23066]: |    DOI: ISAKMP_DOI_IPSEC
2004:10:12-17:06:10 (none) pluto[23066]: |    protocol ID: 1
2004:10:12-17:06:10 (none) pluto[23066]: |    SPI size: 16
2004:10:12-17:06:10 (none) pluto[23066]: |    number of SPIs: 1
2004:10:12-17:06:10 (none) pluto[23066]: | emitting 16 raw bytes of delete payload into ISAKMP Delete Payload
2004:10:12-17:06:10 (none) pluto[23066]: | delete payload  d0 57 e6 c1  98 1e a8 56  a7 16 3c 21  fc 06 25 97
2004:10:12-17:06:10 (none) pluto[23066]: | emitting length of ISAKMP Delete Payload: 28
2004:10:12-17:06:10 (none) pluto[23066]: | emitting length of ISAKMP Message: 76
2004:10:12-17:06:10 (none) pluto[23066]: | ICOOKIE:  d0 57 e6 c1  98 1e a8 56
2004:10:12-17:06:10 (none) pluto[23066]: | RCOOKIE:  a7 16 3c 21  fc 06 25 97
2004:10:12-17:06:10 (none) pluto[23066]: | peer:  51 0b b2 e6
2004:10:12-17:06:10 (none) pluto[23066]: | state hash entry 22
2004:10:12-17:06:10 (none) pluto[23066]: | delete eroute 192.168.1.0/24:0 -> 192.168.35.0/24:0 => %trap:0
2004:10:12-17:06:10 (none) pluto[23066]: | route owner of "S_zaventem-primalux_0" CK_PERMANENT unrouted: NULL
2004:10:12-17:06:10 (none) pluto[23066]: | executing unroute-client: 2>&1 PLUTO_VERSION='1.1' PLUTO_VERB='unroute-client' PLUTO_CONNECTION='S_zaventem-primalux_0' PLUTO_NEXT_HOP='82.12.179.230' PLUTO_INTERFACE='ipsec0' PLUTO_ME='192.168.2.253' PLUTO_MY_ID='harry@ice.be' PLUTO_MY_CLIENT='192.168.1.0/24' PLUTO_MY_CLIENT_NET='192.168.1.0' PLUTO_MY_CLIENT_MASK='255.255.255.0' PLUTO_MY_PORT='0' PLUTO_MY_PROTOCOL='0' PLUTO_PEER='82.12.179.230' PLUTO_PEER_ID='harry@ice.be' PLUTO_PEER_CLIENT='192.168.35.0/24' PLUTO_PEER_CLIENT_NET='192.168.35.0' PLUTO_PEER_CLIENT_MASK='255.255.255.0' PLUTO_PEER_PORT='0' PLUTO_PEER_PROTOCOL='0' PLUTO_PEER_CA='' /opt/_updown.classic 2>/tmp/log 1>/tmp/log
2004:10:12-17:06:10 (none) ipsec_starter[23053]: child 23066 (Pluto) has been killed by sig 9
2004:10:12-17:06:10 (none) ipsec_starter[23053]: shutting down interface ipsec0/eth1

TRENDZ LOG
**************************************************************************************************************

2004:10:12-16:48:47 (none) ipsec_starter[13098]: Starting FreeS/WAN IPsec 1.0.2 [starter]...
2004:10:12-16:48:47 (none) ipsec_starter[13110]: attaching interface ipsec0 to ppp0
2004:10:12-16:48:47 (none) ipsec_starter[13110]: Attempting to start pluto...
2004:10:12-16:48:48 (none) ipsec_starter[13110]: pluto too long to start... - kill kill
2004:10:12-16:48:49 (none) ipsec_starter[13110]: child 13114 (Pluto) has been killed by sig 15
2004:10:12-16:48:49 (none) ipsec_starter[13110]: pluto has died -- restart scheduled (5sec)
2004:10:12-16:48:54 (none) ipsec_starter[13110]: Attempting to start pluto...
2004:10:12-16:48:55 (none) ipsec_starter[13110]: pluto too long to start... - kill kill
2004:10:12-16:48:55 (none) ipsec_starter[13110]: child 13133 (Pluto) has been killed by sig 15
2004:10:12-16:48:55 (none) ipsec_starter[13110]: pluto has died -- restart scheduled (5sec)
2004:10:12-16:49:00 (none) ipsec_starter[13110]: Attempting to start pluto...
2004:10:12-16:49:01 (none) ipsec_starter[13110]: pluto (13144) started
2004:10:12-16:49:01 (none) ipsec_starter[13110]: Setting --esp=aes128-md5;modp1536
2004:10:12-16:49:01 (none) pluto[13144]: Starting Pluto (Openswan Version 1.0.2)
2004:10:12-16:49:01 (none) pluto[13144]:   including X.509 patch with traffic selectors (Version 0.9.39)
2004:10:12-16:49:01 (none) pluto[13144]:   including NAT-Traversal patch (Version 0.6)
2004:10:12-16:49:02 (none) pluto[13144]: | inserting event EVENT_REINIT_SECRET, timeout in 3600 seconds
2004:10:12-16:49:02 (none) pluto[13144]: ike_alg_register_enc(): Activating OAKLEY_DES_CBC: Ok (ret=0)
2004:10:12-16:49:02 (none) pluto[13144]: ike_alg_register_enc(): Activating OAKLEY_AES_CBC: Ok (ret=0)
2004:10:12-16:49:02 (none) pluto[13144]: ike_alg_register_enc(): Activating OAKLEY_BLOWFISH_CBC: Ok (ret=0)
2004:10:12-16:49:02 (none) pluto[13144]: ike_alg_register_enc(): Activating OAKLEY_CAST_CBC: Ok (ret=0)
2004:10:12-16:49:02 (none) pluto[13144]: ike_alg_register_enc(): Activating OAKLEY_SERPENT_CBC: Ok (ret=0)
2004:10:12-16:49:02 (none) pluto[13144]: ike_alg_register_hash(): Activating OAKLEY_SHA2_256: Ok (ret=0)
2004:10:12-16:49:02 (none) pluto[13144]: ike_alg_register_hash(): Activating OAKLEY_SHA2_512: Ok (ret=0)
2004:10:12-16:49:02 (none) pluto[13144]: ike_alg_register_enc(): Activating OAKLEY_TWOFISH_CBC: Ok (ret=0)
2004:10:12-16:49:02 (none) pluto[13144]: ike_alg_register_enc(): Activating OAKLEY_SSH_PRIVATE_65289: Ok (ret=0)
2004:10:12-16:49:02 (none) pluto[13144]: | inserting event EVENT_SHUNT_SCAN, timeout in 120 seconds
2004:10:12-16:49:02 (none) pluto[13144]: Changing to directory '/etc/ipsec.d/cacerts'
2004:10:12-16:49:02 (none) pluto[13144]:   Warning: empty directory
2004:10:12-16:49:02 (none) pluto[13144]: Changing to directory '/etc/ipsec.d/crls'
2004:10:12-16:49:02 (none) pluto[13144]:   Warning: empty directory
2004:10:12-16:49:02 (none) pluto[13144]: OpenPGP certificate file '/etc/pgpcert.pgp' not found
2004:10:12-16:49:02 (none) pluto[13144]: | next event EVENT_SHUNT_SCAN in 120 seconds
2004:10:12-16:49:02 (none) pluto[13144]: |  
2004:10:12-16:49:02 (none) pluto[13144]: | *received whack message
2004:10:12-16:49:02 (none) pluto[13144]: listening for IKE messages
2004:10:12-16:49:02 (none) pluto[13144]: | found lo with address 127.0.0.1
2004:10:12-16:49:02 (none) pluto[13144]: | found eth0 with address 192.168.35.254
2004:10:12-16:49:02 (none) pluto[13144]: | found ppp0 with address 82.12.179.230
2004:10:12-16:49:02 (none) pluto[13144]: | found ipsec0 with address 82.12.179.230
2004:10:12-16:49:02 (none) pluto[13144]: adding interface ipsec0/ppp0 82.12.179.230
2004:10:12-16:49:02 (none) pluto[13144]: adding interface ipsec0/ppp0 82.12.179.230:4500
2004:10:12-16:49:02 (none) pluto[13144]: | IP interface eth0 192.168.35.254 has no matching ipsec* interface -- ignored
2004:10:12-16:49:02 (none) pluto[13144]: | IP interface lo 127.0.0.1 has no matching ipsec* interface -- ignored
2004:10:12-16:49:02 (none) pluto[13144]: | could not open /proc/net/if_inet6
2004:10:12-16:49:02 (none) pluto[13144]: loading secrets from "/etc/ipsec.secrets"
2004:10:12-16:49:02 (none) pluto[13144]: | next event EVENT_SHUNT_SCAN in 120 seconds
2004:10:12-16:49:02 (none) pluto[13144]: |  
2004:10:12-16:49:02 (none) pluto[13144]: | *received whack message
2004:10:12-16:49:02 (none) pluto[13144]: | from whack: got --esp=aes128-md5;modp1536
2004:10:12-16:49:02 (none) pluto[13144]: | esp string values: 12_128-1, ; pfsgroup=5; flags=-strict
2004:10:12-16:49:02 (none) pluto[13144]: | from whack: got --ike=3des-md5-modp1536
2004:10:12-16:49:02 (none) pluto[13144]: | ike string values: 5_000-1-5, flags=-strict
2004:10:12-16:49:02 (none) pluto[13144]: added connection description "S_zaventem-primalux_0"
2004:10:12-16:49:02 (none) pluto[13144]: | 192.168.35.0/24===82.12.179.230[harry@ice.be]...%any[harry@ice.be]===192.168.1.0/24
2004:10:12-16:49:02 (none) pluto[13144]: | ike_life: 7800s; ipsec_life: 3600s; rekey_margin: 540s; rekey_fuzz: 100%; keyingtries: 0; policy: RSASIG+ENCRYPT+TUNNEL+PFS
2004:10:12-16:49:02 (none) pluto[13144]: | next event EVENT_SHUNT_SCAN in 120 seconds
2004:10:12-16:49:02 (none) pluto[13144]: |  
2004:10:12-16:49:02 (none) pluto[13144]: | *received whack message
2004:10:12-16:49:02 (none) pluto[13144]: | next event EVENT_SHUNT_SCAN in 120 seconds
2004:10:12-16:49:02 (none) pluto[13144]: |  
2004:10:12-16:49:02 (none) pluto[13144]: | *received whack message
2004:10:12-16:49:02 (none) pluto[13144]: | next event EVENT_SHUNT_SCAN in 120 seconds
2004:10:12-16:49:10 (none) pluto[13144]: |  
2004:10:12-16:49:10 (none) pluto[13144]: | *received 140 bytes from 213.240.183.2:500 on ppp0
2004:10:12-16:49:10 (none) pluto[13144]: | **parse ISAKMP Message:
2004:10:12-16:49:10 (none) pluto[13144]: |    initiator cookie:
2004:10:12-16:49:10 (none) pluto[13144]: |   d0 57 e6 c1  98 1e a8 56
2004:10:12-16:49:10 (none) pluto[13144]: |    responder cookie:
2004:10:12-16:49:10 (none) pluto[13144]: |   00 00 00 00  00 00 00 00
2004:10:12-16:49:10 (none) pluto[13144]: |    next payload type: ISAKMP_NEXT_SA
2004:10:12-16:49:10 (none) pluto[13144]: |    ISAKMP version: ISAKMP Version 1.0
2004:10:12-16:49:10 (none) pluto[13144]: |    exchange type: ISAKMP_XCHG_IDPROT
2004:10:12-16:49:10 (none) pluto[13144]: |    flags: none
2004:10:12-16:49:10 (none) pluto[13144]: |    message ID:  00 00 00 00
2004:10:12-16:49:10 (none) pluto[13144]: |    length: 140
2004:10:12-16:49:10 (none) pluto[13144]: | The xchg type is ISAKMP_XCHG_IDPROT (2)
2004:10:12-16:49:10 (none) pluto[13144]: | ***parse ISAKMP Security Association Payload:
2004:10:12-16:49:10 (none) pluto[13144]: |    next payload type: ISAKMP_NEXT_VID
2004:10:12-16:49:10 (none) pluto[13144]: |    length: 52
2004:10:12-16:49:10 (none) pluto[13144]: |    DOI: ISAKMP_DOI_IPSEC
2004:10:12-16:49:10 (none) pluto[13144]: | ***parse ISAKMP Vendor ID Payload:
2004:10:12-16:49:10 (none) pluto[13144]: |    next payload type: ISAKMP_NEXT_VID
2004:10:12-16:49:10 (none) pluto[13144]: |    length: 20
2004:10:12-16:49:10 (none) pluto[13144]: | ***parse ISAKMP Vendor ID Payload:
2004:10:12-16:49:10 (none) pluto[13144]: |    next payload type: ISAKMP_NEXT_VID
2004:10:12-16:49:10 (none) pluto[13144]: |    length: 20
2004:10:12-16:49:10 (none) pluto[13144]: | ***parse ISAKMP Vendor ID Payload:
2004:10:12-16:49:10 (none) pluto[13144]: |    next payload type: ISAKMP_NEXT_NONE
2004:10:12-16:49:10 (none) pluto[13144]: |    length: 20
2004:10:12-16:49:10 (none) pluto[13144]: packet from 213.240.183.2:500: received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-03]
2004:10:12-16:49:10 (none) pluto[13144]: | VID:  7d 94 19 a6  53 10 ca 6f  2c 17 9d 92  15 52 9d 56
2004:10:12-16:49:10 (none) pluto[13144]: packet from 213.240.183.2:500: ignoring Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02]
2004:10:12-16:49:10 (none) pluto[13144]: | VID:  cd 60 46 43  35 df 21 f8  7c fd b2 fc  68 b6 a4 48
2004:10:12-16:49:10 (none) pluto[13144]: packet from 213.240.183.2:500: ignoring Vendor ID payload [draft-ietf-ipsec-nat-t-ike-00]
2004:10:12-16:49:10 (none) pluto[13144]: | VID:  44 85 15 2d  18 b6 bb cd  0b e8 a8 46  95 79 dd cc
2004:10:12-16:49:10 (none) pluto[13144]: | ****parse IPsec DOI SIT:
2004:10:12-16:49:10 (none) pluto[13144]: |    IPsec DOI SIT: SIT_IDENTITY_ONLY
2004:10:12-16:49:10 (none) pluto[13144]: | ****parse ISAKMP Proposal Payload:
2004:10:12-16:49:10 (none) pluto[13144]: |    next payload type: ISAKMP_NEXT_NONE
2004:10:12-16:49:10 (none) pluto[13144]: |    length: 40
2004:10:12-16:49:10 (none) pluto[13144]: |    proposal number: 0
2004:10:12-16:49:10 (none) pluto[13144]: |    protocol ID: PROTO_ISAKMP
2004:10:12-16:49:10 (none) pluto[13144]: |    SPI size: 0
2004:10:12-16:49:10 (none) pluto[13144]: |    number of transforms: 1
2004:10:12-16:49:10 (none) pluto[13144]: | *****parse ISAKMP Transform Payload (ISAKMP):
2004:10:12-16:49:10 (none) pluto[13144]: |    next payload type: ISAKMP_NEXT_NONE
2004:10:12-16:49:10 (none) pluto[13144]: |    length: 32
2004:10:12-16:49:10 (none) pluto[13144]: |    transform number: 0
2004:10:12-16:49:10 (none) pluto[13144]: |    transform ID: KEY_IKE
2004:10:12-16:49:10 (none) pluto[13144]: | ******parse ISAKMP Oakley attribute:
2004:10:12-16:49:10 (none) pluto[13144]: |    af+type: OAKLEY_LIFE_TYPE
2004:10:12-16:49:10 (none) pluto[13144]: |    length/value: 1
2004:10:12-16:49:10 (none) pluto[13144]: | ******parse ISAKMP Oakley attribute:
2004:10:12-16:49:10 (none) pluto[13144]: |    af+type: OAKLEY_LIFE_DURATION
2004:10:12-16:49:10 (none) pluto[13144]: |    length/value: 7800
2004:10:12-16:49:10 (none) pluto[13144]: | ******parse ISAKMP Oakley attribute:
2004:10:12-16:49:10 (none) pluto[13144]: |    af+type: OAKLEY_ENCRYPTION_ALGORITHM
2004:10:12-16:49:10 (none) pluto[13144]: |    length/value: 5
2004:10:12-16:49:10 (none) pluto[13144]: | ******parse ISAKMP Oakley attribute:
2004:10:12-16:49:10 (none) pluto[13144]: |    af+type: OAKLEY_HASH_ALGORITHM
2004:10:12-16:49:10 (none) pluto[13144]: |    length/value: 1
2004:10:12-16:49:10 (none) pluto[13144]: | ******parse ISAKMP Oakley attribute:
2004:10:12-16:49:10 (none) pluto[13144]: |    af+type: OAKLEY_AUTHENTICATION_METHOD
2004:10:12-16:49:10 (none) pluto[13144]: |    length/value: 3
2004:10:12-16:49:10 (none) pluto[13144]: | ******parse ISAKMP Oakley attribute:
2004:10:12-16:49:10 (none) pluto[13144]: |    af+type: OAKLEY_GROUP_DESCRIPTION
2004:10:12-16:49:10 (none) pluto[13144]: |    length/value: 5
2004:10:12-16:49:10 (none) pluto[13144]: | instantiated "S_zaventem-primalux_0" for 213.240.183.2
2004:10:12-16:49:10 (none) pluto[13144]: | creating state object #1 at 0x80eddc8
2004:10:12-16:49:10 (none) pluto[13144]: | ICOOKIE:  d0 57 e6 c1  98 1e a8 56
2004:10:12-16:49:10 (none) pluto[13144]: | RCOOKIE:  a7 16 3c 21  fc 06 25 97
2004:10:12-16:49:10 (none) pluto[13144]: | peer:  d4 ef b6 02
2004:10:12-16:49:10 (none) pluto[13144]: | state hash entry 1
2004:10:12-16:49:10 (none) pluto[13144]: | inserting event EVENT_SO_DISCARD, timeout in 0 seconds for #1
2004:10:12-16:49:10 (none) pluto[13144]: "S_zaventem-primalux_0"[1] 213.240.183.2 #1: responding to Main Mode from unknown peer 213.240.183.2
2004:10:12-16:49:10 (none) pluto[13144]: | **emit ISAKMP Message:
2004:10:12-16:49:10 (none) pluto[13144]: |    initiator cookie:
2004:10:12-16:49:10 (none) pluto[13144]: |   d0 57 e6 c1  98 1e a8 56
2004:10:12-16:49:10 (none) pluto[13144]: |    responder cookie:
2004:10:12-16:49:10 (none) pluto[13144]: |   a7 16 3c 21  fc 06 25 97
2004:10:12-16:49:10 (none) pluto[13144]: |    next payload type: ISAKMP_NEXT_SA
2004:10:12-16:49:10 (none) pluto[13144]: |    ISAKMP version: ISAKMP Version 1.0
2004:10:12-16:49:10 (none) pluto[13144]: |    exchange type: ISAKMP_XCHG_IDPROT
2004:10:12-16:49:10 (none) pluto[13144]: |    flags: none
2004:10:12-16:49:10 (none) pluto[13144]: |    message ID:  00 00 00 00
2004:10:12-16:49:10 (none) pluto[13144]: | ***emit ISAKMP Security Association Payload:
2004:10:12-16:49:10 (none) pluto[13144]: |    next payload type: ISAKMP_NEXT_NONE
2004:10:12-16:49:10 (none) pluto[13144]: |    DOI: ISAKMP_DOI_IPSEC
2004:10:12-16:49:10 (none) pluto[13144]: | ****parse IPsec DOI SIT:
2004:10:12-16:49:10 (none) pluto[13144]: |    IPsec DOI SIT: SIT_IDENTITY_ONLY
2004:10:12-16:49:10 (none) pluto[13144]: | ****parse ISAKMP Proposal Payload:
2004:10:12-16:49:10 (none) pluto[13144]: |    next payload type: ISAKMP_NEXT_NONE
2004:10:12-16:49:10 (none) pluto[13144]: |    length: 40
2004:10:12-16:49:10 (none) pluto[13144]: |    proposal number: 0
2004:10:12-16:49:10 (none) pluto[13144]: |    protocol ID: PROTO_ISAKMP
2004:10:12-16:49:10 (none) pluto[13144]: |    SPI size: 0
2004:10:12-16:49:10 (none) pluto[13144]: |    number of transforms: 1
2004:10:12-16:49:10 (none) pluto[13144]: | *****parse ISAKMP Transform Payload (ISAKMP):
2004:10:12-16:49:10 (none) pluto[13144]: |    next payload type: ISAKMP_NEXT_NONE
2004:10:12-16:49:10 (none) pluto[13144]: |    length: 32
2004:10:12-16:49:10 (none) pluto[13144]: |    transform number: 0
2004:10:12-16:49:10 (none) pluto[13144]: |    transform ID: KEY_IKE
2004:10:12-16:49:10 (none) pluto[13144]: | ******parse ISAKMP Oakley attribute:
2004:10:12-16:49:10 (none) pluto[13144]: |    af+type: OAKLEY_LIFE_TYPE
2004:10:12-16:49:10 (none) pluto[13144]: |    length/value: 1
2004:10:12-16:49:10 (none) pluto[13144]: |    [1 is OAKLEY_LIFE_SECONDS]
2004:10:12-16:49:10 (none) pluto[13144]: | ******parse ISAKMP Oakley attribute:
2004:10:12-16:49:10 (none) pluto[13144]: |    af+type: OAKLEY_LIFE_DURATION
2004:10:12-16:49:10 (none) pluto[13144]: |    length/value: 7800
2004:10:12-16:49:10 (none) pluto[13144]: | ******parse ISAKMP Oakley attribute:
2004:10:12-16:49:10 (none) pluto[13144]: |    af+type: OAKLEY_ENCRYPTION_ALGORITHM
2004:10:12-16:49:10 (none) pluto[13144]: |    length/value: 5
2004:10:12-16:49:10 (none) pluto[13144]: |    [5 is OAKLEY_3DES_CBC]
2004:10:12-16:49:10 (none) pluto[13144]: | ******parse ISAKMP Oakley attribute:
2004:10:12-16:49:10 (none) pluto[13144]: |    af+type: OAKLEY_HASH_ALGORITHM
2004:10:12-16:49:10 (none) pluto[13144]: |    length/value: 1
2004:10:12-16:49:10 (none) pluto[13144]: |    [1 is OAKLEY_MD5]
2004:10:12-16:49:10 (none) pluto[13144]: | ******parse ISAKMP Oakley attribute:
2004:10:12-16:49:10 (none) pluto[13144]: |    af+type: OAKLEY_AUTHENTICATION_METHOD
2004:10:12-16:49:10 (none) pluto[13144]: |    length/value: 3
2004:10:12-16:49:10 (none) pluto[13144]: |    [3 is OAKLEY_RSA_SIG]
2004:10:12-16:49:10 (none) pluto[13144]: | ******parse ISAKMP Oakley attribute:
2004:10:12-16:49:10 (none) pluto[13144]: |    af+type: OAKLEY_GROUP_DESCRIPTION
2004:10:12-16:49:10 (none) pluto[13144]: |    length/value: 5
2004:10:12-16:49:10 (none) pluto[13144]: |    [5 is OAKLEY_GROUP_MODP1536]
2004:10:12-16:49:10 (none) pluto[13144]: | Oakley Transform 0 accepted
2004:10:12-16:49:10 (none) pluto[13144]: | ****emit IPsec DOI SIT:
2004:10:12-16:49:10 (none) pluto[13144]: |    IPsec DOI SIT: SIT_IDENTITY_ONLY
2004:10:12-16:49:10 (none) pluto[13144]: | ****emit ISAKMP Proposal Payload:
2004:10:12-16:49:10 (none) pluto[13144]: |    next payload type: ISAKMP_NEXT_NONE
2004:10:12-16:49:10 (none) pluto[13144]: |    proposal number: 0
2004:10:12-16:49:10 (none) pluto[13144]: |    protocol ID: PROTO_ISAKMP
2004:10:12-16:49:10 (none) pluto[13144]: |    SPI size: 0
2004:10:12-16:49:10 (none) pluto[13144]: |    number of transforms: 1
2004:10:12-16:49:10 (none) pluto[13144]: | *****emit ISAKMP Transform Payload (ISAKMP):
2004:10:12-16:49:10 (none) pluto[13144]: |    next payload type: ISAKMP_NEXT_NONE
2004:10:12-16:49:10 (none) pluto[13144]: |    transform number: 0
2004:10:12-16:49:10 (none) pluto[13144]: |    transform ID: KEY_IKE
2004:10:12-16:49:10 (none) pluto[13144]: | emitting 24 raw bytes of attributes into ISAKMP Transform Payload (ISAKMP)
2004:10:12-16:49:10 (none) pluto[13144]: | attributes  80 0b 00 01  80 0c 1e 78  80 01 00 05  80 02 00 01
2004:10:12-16:49:10 (none) pluto[13144]: |   80 03 00 03  80 04 00 05
2004:10:12-16:49:10 (none) pluto[13144]: | emitting length of ISAKMP Transform Payload (ISAKMP): 32
2004:10:12-16:49:10 (none) pluto[13144]: | emitting length of ISAKMP Proposal Payload: 40
2004:10:12-16:49:10 (none) pluto[13144]: | emitting length of ISAKMP Security Association Payload: 52
2004:10:12-16:49:10 (none) pluto[13144]: | out_vendorid(): sending [draft-ietf-ipsec-nat-t-ike-03]
2004:10:12-16:49:10 (none) pluto[13144]: | ***emit ISAKMP Vendor ID Payload:
2004:10:12-16:49:10 (none) pluto[13144]: |    next payload type: ISAKMP_NEXT_NONE
2004:10:12-16:49:10 (none) pluto[13144]: | emitting 16 raw bytes of V_ID into ISAKMP Vendor ID Payload
2004:10:12-16:49:10 (none) pluto[13144]: | V_ID  7d 94 19 a6  53 10 ca 6f  2c 17 9d 92  15 52 9d 56
2004:10:12-16:49:10 (none) pluto[13144]: | emitting length of ISAKMP Vendor ID Payload: 20
2004:10:12-16:49:10 (none) pluto[13144]: | emitting length of ISAKMP Message: 100
2004:10:12-16:49:10 (none) pluto[13144]: "S_zaventem-primalux_0"[1] 213.240.183.2 #1: transition from state (null) to state STATE_MAIN_R1
2004:10:12-16:49:10 (none) pluto[13144]: | inserting event EVENT_RETRANSMIT, timeout in 10 seconds for #1
2004:10:12-16:49:10 (none) pluto[13144]: | next event EVENT_RETRANSMIT in 10 seconds for #1
2004:10:12-16:49:10 (none) pluto[13144]: |  
2004:10:12-16:49:10 (none) pluto[13144]: | *received 284 bytes from 213.240.183.2:500 on ppp0
2004:10:12-16:49:10 (none) pluto[13144]: | **parse ISAKMP Message:
2004:10:12-16:49:10 (none) pluto[13144]: |    initiator cookie:
2004:10:12-16:49:10 (none) pluto[13144]: |   d0 57 e6 c1  98 1e a8 56
2004:10:12-16:49:10 (none) pluto[13144]: |    responder cookie:
2004:10:12-16:49:10 (none) pluto[13144]: |   a7 16 3c 21  fc 06 25 97
2004:10:12-16:49:10 (none) pluto[13144]: |    next payload type: ISAKMP_NEXT_KE
2004:10:12-16:49:10 (none) pluto[13144]: |    ISAKMP version: ISAKMP Version 1.0
2004:10:12-16:49:10 (none) pluto[13144]: |    exchange type: ISAKMP_XCHG_IDPROT
2004:10:12-16:49:10 (none) pluto[13144]: |    flags: none
2004:10:12-16:49:10 (none) pluto[13144]: |    message ID:  00 00 00 00
2004:10:12-16:49:10 (none) pluto[13144]: |    length: 284
2004:10:12-16:49:10 (none) pluto[13144]: | The xchg type is ISAKMP_XCHG_IDPROT (2)
2004:10:12-16:49:10 (none) pluto[13144]: | ICOOKIE:  d0 57 e6 c1  98 1e a8 56
2004:10:12-16:49:10 (none) pluto[13144]: | RCOOKIE:  a7 16 3c 21  fc 06 25 97
2004:10:12-16:49:10 (none) pluto[13144]: | peer:  d4 ef b6 02
2004:10:12-16:49:10 (none) pluto[13144]: | state hash entry 1
2004:10:12-16:49:10 (none) pluto[13144]: | peer and cookies match, provided msgid 00000000 vs 00000000
2004:10:12-16:49:10 (none) pluto[13144]: | state object #1 found, in STATE_MAIN_R1
2004:10:12-16:49:10 (none) pluto[13144]: | ***parse ISAKMP Key Exchange Payload:
2004:10:12-16:49:10 (none) pluto[13144]: |    next payload type: ISAKMP_NEXT_NONCE
2004:10:12-16:49:10 (none) pluto[13144]: |    length: 196
2004:10:12-16:49:10 (none) pluto[13144]: | ***parse ISAKMP Nonce Payload:
2004:10:12-16:49:10 (none) pluto[13144]: |    next payload type: ISAKMP_NEXT_NAT-D
2004:10:12-16:49:10 (none) pluto[13144]: |    length: 20
2004:10:12-16:49:10 (none) pluto[13144]: | ***parse ISAKMP NAT-D Payload:
2004:10:12-16:49:10 (none) pluto[13144]: |    next payload type: ISAKMP_NEXT_NAT-D
2004:10:12-16:49:10 (none) pluto[13144]: |    length: 20
2004:10:12-16:49:10 (none) pluto[13144]: | ***parse ISAKMP NAT-D Payload:
2004:10:12-16:49:10 (none) pluto[13144]: |    next payload type: ISAKMP_NEXT_NONE
2004:10:12-16:49:10 (none) pluto[13144]: |    length: 20
2004:10:12-16:49:10 (none) pluto[13144]: | **emit ISAKMP Message:
2004:10:12-16:49:10 (none) pluto[13144]: |    initiator cookie:
2004:10:12-16:49:10 (none) pluto[13144]: |   d0 57 e6 c1  98 1e a8 56
2004:10:12-16:49:10 (none) pluto[13144]: |    responder cookie:
2004:10:12-16:49:10 (none) pluto[13144]: |   a7 16 3c 21  fc 06 25 97
2004:10:12-16:49:10 (none) pluto[13144]: |    next payload type: ISAKMP_NEXT_KE
2004:10:12-16:49:10 (none) pluto[13144]: |    ISAKMP version: ISAKMP Version 1.0
2004:10:12-16:49:10 (none) pluto[13144]: |    exchange type: ISAKMP_XCHG_IDPROT
2004:10:12-16:49:10 (none) pluto[13144]: |    flags: none
2004:10:12-16:49:10 (none) pluto[13144]: |    message ID:  00 00 00 00
2004:10:12-16:49:10 (none) pluto[13144]: "S_zaventem-primalux_0"[1] 213.240.183.2 #1: NAT-Traversal: Result using draft-ietf-ipsec-nat-t-ike-02/03: peer is NATed
2004:10:12-16:49:10 (none) pluto[13144]: | inserting event EVENT_NAT_T_KEEPALIVE, timeout in 60 seconds
2004:10:12-16:49:11 (none) pluto[13144]: | ***emit ISAKMP Key Exchange Payload:
2004:10:12-16:49:11 (none) pluto[13144]: |    next payload type: ISAKMP_NEXT_NONCE
2004:10:12-16:49:11 (none) pluto[13144]: | emitting 192 raw bytes of keyex value into ISAKMP Key Exchange Payload
2004:10:12-16:49:11 (none) pluto[13144]: | keyex value  ea e3 54 b4  88 22 b3 76  ad 9d 3b b9  85 3f 1d 2e
2004:10:12-16:49:11 (none) pluto[13144]: |   7d e6 ee d3  7c af 28 91  ce 6a fe d8  b6 d9 6e cb
2004:10:12-16:49:11 (none) pluto[13144]: |   4c 2d a0 54  3b 34 0e 80  89 ce 11 3d  9d 29 08 89
2004:10:12-16:49:11 (none) pluto[13144]: |   1b a2 9c 21  2b a3 da 85  f0 86 c3 b7  7b b3 1e 4e
2004:10:12-16:49:11 (none) pluto[13144]: |   e5 86 1a a1  2d b8 ca 3d  c2 08 0d 24  ac 5d 37 94
2004:10:12-16:49:11 (none) pluto[13144]: |   24 3d 3e 35  1e 50 33 18  ba d8 98 5a  f1 2f 6e 11
2004:10:12-16:49:11 (none) pluto[13144]: |   08 5a 55 46  77 98 7e 78  15 cb 9a 0c  84 2e 2d 01
2004:10:12-16:49:11 (none) pluto[13144]: |   3a d5 1f ae  77 e9 d7 1b  9c 6f 7f 09  b3 c0 10 45
2004:10:12-16:49:11 (none) pluto[13144]: |   ab 02 34 19  05 03 22 a9  9b 01 ab ed  1a cd f8 2b
2004:10:12-16:49:11 (none) pluto[13144]: |   bb 3f 79 f2  cd 6d 67 d6  47 9b c1 23  f6 af f6 af
2004:10:12-16:49:11 (none) pluto[13144]: |   5c 9c 35 86  a8 6f ad 10  f5 3c c9 d3  79 dd eb 12
2004:10:12-16:49:11 (none) pluto[13144]: |   b7 95 55 b4  db ed 82 ae  09 c3 47 81  66 cf 64 22
2004:10:12-16:49:11 (none) pluto[13144]: | emitting length of ISAKMP Key Exchange Payload: 196
2004:10:12-16:49:11 (none) pluto[13144]: | ***emit ISAKMP Nonce Payload:
2004:10:12-16:49:11 (none) pluto[13144]: |    next payload type: ISAKMP_NEXT_NONE
2004:10:12-16:49:11 (none) pluto[13144]: | emitting 16 raw bytes of Nr into ISAKMP Nonce Payload
2004:10:12-16:49:11 (none) pluto[13144]: | Nr  eb c5 8c f5  68 97 ef 24  16 27 62 a3  ea ca 82 73
2004:10:12-16:49:11 (none) pluto[13144]: | emitting length of ISAKMP Nonce Payload: 20
2004:10:12-16:49:11 (none) pluto[13144]: | ***emit ISAKMP NAT-D Payload:
2004:10:12-16:49:11 (none) pluto[13144]: |    next payload type: ISAKMP_NEXT_NAT-D
2004:10:12-16:49:11 (none) pluto[13144]: | emitting 16 raw bytes of NAT-D into ISAKMP NAT-D Payload
2004:10:12-16:49:11 (none) pluto[13144]: | NAT-D  6f 1f 55 51  a3 af 1c 72  23 9b bc f1  82 a2 07 ec
2004:10:12-16:49:11 (none) pluto[13144]: | emitting length of ISAKMP NAT-D Payload: 20
2004:10:12-16:49:11 (none) pluto[13144]: | ***emit ISAKMP NAT-D Payload:
2004:10:12-16:49:11 (none) pluto[13144]: |    next payload type: ISAKMP_NEXT_NONE
2004:10:12-16:49:11 (none) pluto[13144]: | emitting 16 raw bytes of NAT-D into ISAKMP NAT-D Payload
2004:10:12-16:49:11 (none) pluto[13144]: | NAT-D  e8 c1 71 fa  24 18 f5 55  a5 9e 26 09  9d 54 b6 72
2004:10:12-16:49:11 (none) pluto[13144]: | emitting length of ISAKMP NAT-D Payload: 20
2004:10:12-16:49:11 (none) pluto[13144]: | emitting length of ISAKMP Message: 284
2004:10:12-16:49:11 (none) pluto[13144]: "S_zaventem-primalux_0"[1] 213.240.183.2 #1: transition from state STATE_MAIN_R1 to state STATE_MAIN_R2
2004:10:12-16:49:11 (none) pluto[13144]: | inserting event EVENT_RETRANSMIT, timeout in 10 seconds for #1
2004:10:12-16:49:11 (none) pluto[13144]: | next event EVENT_RETRANSMIT in 10 seconds for #1
2004:10:12-16:49:11 (none) pluto[13144]: |  
2004:10:12-16:49:11 (none) pluto[13144]: | *received 180 bytes from 213.240.183.2:4500 on ppp0
2004:10:12-16:49:11 (none) pluto[13144]: | **parse ISAKMP Message:
2004:10:12-16:49:11 (none) pluto[13144]: |    initiator cookie:
2004:10:12-16:49:11 (none) pluto[13144]: |   d0 57 e6 c1  98 1e a8 56
2004:10:12-16:49:11 (none) pluto[13144]: |    responder cookie:
2004:10:12-16:49:11 (none) pluto[13144]: |   a7 16 3c 21  fc 06 25 97
2004:10:12-16:49:11 (none) pluto[13144]: |    next payload type: ISAKMP_NEXT_ID
2004:10:12-16:49:11 (none) pluto[13144]: |    ISAKMP version: ISAKMP Version 1.0
2004:10:12-16:49:11 (none) pluto[13144]: |    exchange type: ISAKMP_XCHG_IDPROT
2004:10:12-16:49:11 (none) pluto[13144]: |    flags: ISAKMP_FLAG_ENCRYPTION
2004:10:12-16:49:11 (none) pluto[13144]: |    message ID:  00 00 00 00
2004:10:12-16:49:11 (none) pluto[13144]: |    length: 180
2004:10:12-16:49:11 (none) pluto[13144]: | The xchg type is ISAKMP_XCHG_IDPROT (2)
2004:10:12-16:49:11 (none) pluto[13144]: | ICOOKIE:  d0 57 e6 c1  98 1e a8 56
2004:10:12-16:49:11 (none) pluto[13144]: | RCOOKIE:  a7 16 3c 21  fc 06 25 97
2004:10:12-16:49:11 (none) pluto[13144]: | peer:  d4 ef b6 02
2004:10:12-16:49:11 (none) pluto[13144]: | state hash entry 1
2004:10:12-16:49:11 (none) pluto[13144]: | peer and cookies match, provided msgid 00000000 vs 00000000
2004:10:12-16:49:11 (none) pluto[13144]: | state object #1 found, in STATE_MAIN_R2
2004:10:12-16:49:11 (none) pluto[13144]: | ***parse ISAKMP Identification Payload:
2004:10:12-16:49:11 (none) pluto[13144]: |    next payload type: ISAKMP_NEXT_SIG
2004:10:12-16:49:11 (none) pluto[13144]: |    length: 20
2004:10:12-16:49:11 (none) pluto[13144]: |    ID type: ID_USER_FQDN
2004:10:12-16:49:11 (none) pluto[13144]: |    DOI specific A: 0
2004:10:12-16:49:11 (none) pluto[13144]: |    DOI specific B: 0
2004:10:12-16:49:11 (none) pluto[13144]: | ***parse ISAKMP Signature Payload:
2004:10:12-16:49:11 (none) pluto[13144]: |    next payload type: ISAKMP_NEXT_NONE
2004:10:12-16:49:11 (none) pluto[13144]: |    length: 132
2004:10:12-16:49:11 (none) pluto[13144]: "S_zaventem-primalux_0"[1] 213.240.183.2 #1: Main mode peer ID is ID_USER_FQDN: 'harry@ice.be'
2004:10:12-16:49:11 (none) pluto[13144]: | offered CA: '%none'
2004:10:12-16:49:11 (none) pluto[13144]: | required CA is '%any'
2004:10:12-16:49:11 (none) pluto[13144]: | key issuer CA is '%any'
2004:10:12-16:49:11 (none) pluto[13144]: | an RSA Sig check passed with *AQO5KDG9Q [preloaded key]
2004:10:12-16:49:11 (none) pluto[13144]: | **emit ISAKMP Message:
2004:10:12-16:49:11 (none) pluto[13144]: |    initiator cookie:
2004:10:12-16:49:11 (none) pluto[13144]: |   d0 57 e6 c1  98 1e a8 56
2004:10:12-16:49:11 (none) pluto[13144]: |    responder cookie:
2004:10:12-16:49:11 (none) pluto[13144]: |   a7 16 3c 21  fc 06 25 97
2004:10:12-16:49:11 (none) pluto[13144]: |    next payload type: ISAKMP_NEXT_ID
2004:10:12-16:49:11 (none) pluto[13144]: |    ISAKMP version: ISAKMP Version 1.0
2004:10:12-16:49:11 (none) pluto[13144]: |    exchange type: ISAKMP_XCHG_IDPROT
2004:10:12-16:49:11 (none) pluto[13144]: |    flags: ISAKMP_FLAG_ENCRYPTION
2004:10:12-16:49:11 (none) pluto[13144]: |    message ID:  00 00 00 00
2004:10:12-16:49:11 (none) pluto[13144]: | ***emit ISAKMP Identification Payload (IPsec DOI):
2004:10:12-16:49:11 (none) pluto[13144]: |    next payload type: ISAKMP_NEXT_SIG
2004:10:12-16:49:11 (none) pluto[13144]: |    ID type: ID_USER_FQDN
2004:10:12-16:49:11 (none) pluto[13144]: |    Protocol ID: 0
2004:10:12-16:49:11 (none) pluto[13144]: |    port: 0
2004:10:12-16:49:11 (none) pluto[13144]: | emitting 12 raw bytes of my identity into ISAKMP Identification Payload (IPsec DOI)
2004:10:12-16:49:11 (none) pluto[13144]: | my identity  68 61 72 72  79 40 69 63  65 2e 62 65
2004:10:12-16:49:11 (none) pluto[13144]: | emitting length of ISAKMP Identification Payload (IPsec DOI): 20
2004:10:12-16:49:11 (none) pluto[13144]: | signing hash with RSA Key *AQOF0SD6B
2004:10:12-16:49:11 (none) pluto[13144]: | ***emit ISAKMP Signature Payload:
2004:10:12-16:49:11 (none) pluto[13144]: |    next payload type: ISAKMP_NEXT_NONE
2004:10:12-16:49:11 (none) pluto[13144]: | emitting 128 raw bytes of SIG_R into ISAKMP Signature Payload
2004:10:12-16:49:11 (none) pluto[13144]: | SIG_R  71 fb e8 5f  42 6c 47 27  7f 04 73 4b  35 72 78 77
2004:10:12-16:49:11 (none) pluto[13144]: |   fb 85 69 9e  ea 4a 61 54  96 a2 cb d0  2f 8c 36 d3
2004:10:12-16:49:11 (none) pluto[13144]: |   00 11 7b 53  d8 5d 29 9e  74 ea 2a 4d  ea 67 20 74
2004:10:12-16:49:11 (none) pluto[13144]: |   e0 76 ea 81  a0 88 04 55  0e 96 8b 48  c4 e5 d0 fa
2004:10:12-16:49:11 (none) pluto[13144]: |   88 d3 ac 31  c9 29 6b bc  75 13 a2 d4  05 5a 99 62
2004:10:12-16:49:11 (none) pluto[13144]: |   c5 b1 d9 f8  62 af 7f 2f  54 cf 1e cd  fb ee a2 11
2004:10:12-16:49:11 (none) pluto[13144]: |   f3 1e e8 a2  84 62 44 b0  80 3a ec 40  96 ae c1 f9
2004:10:12-16:49:11 (none) pluto[13144]: |   90 8b 94 c6  31 9b c1 5b  4b bf 75 1d  81 51 18 69
2004:10:12-16:49:11 (none) pluto[13144]: | emitting length of ISAKMP Signature Payload: 132
2004:10:12-16:49:11 (none) pluto[13144]: | emitting length of ISAKMP Message: 180
2004:10:12-16:49:11 (none) pluto[13144]: "S_zaventem-primalux_0"[1] 213.240.183.2 #1: transition from state STATE_MAIN_R2 to state STATE_MAIN_R3
2004:10:12-16:49:11 (none) pluto[13144]: | NAT-T: new mapping 213.240.183.2:500/4500)
2004:10:12-16:49:11 (none) pluto[13144]: | inserting event EVENT_SA_REPLACE, timeout in 7530 seconds for #1
2004:10:12-16:49:11 (none) pluto[13144]: "S_zaventem-primalux_0"[1] 213.240.183.2:4500 #1: sent MR3, ISAKMP SA established
2004:10:12-16:49:11 (none) pluto[13144]: | next event EVENT_NAT_T_KEEPALIVE in 59 seconds
2004:10:12-16:49:11 (none) pluto[13144]: |  
2004:10:12-16:49:11 (none) pluto[13144]: | *received 356 bytes from 213.240.183.2:4500 on ppp0
2004:10:12-16:49:11 (none) pluto[13144]: | **parse ISAKMP Message:
2004:10:12-16:49:11 (none) pluto[13144]: |    initiator cookie:
2004:10:12-16:49:11 (none) pluto[13144]: |   d0 57 e6 c1  98 1e a8 56
2004:10:12-16:49:11 (none) pluto[13144]: |    responder cookie:
2004:10:12-16:49:11 (none) pluto[13144]: |   a7 16 3c 21  fc 06 25 97
2004:10:12-16:49:11 (none) pluto[13144]: |    next payload type: ISAKMP_NEXT_HASH
2004:10:12-16:49:11 (none) pluto[13144]: |    ISAKMP version: ISAKMP Version 1.0
2004:10:12-16:49:11 (none) pluto[13144]: |    exchange type: ISAKMP_XCHG_QUICK
2004:10:12-16:49:11 (none) pluto[13144]: |    flags: ISAKMP_FLAG_ENCRYPTION
2004:10:12-16:49:11 (none) pluto[13144]: |    message ID:  05 31 a3 e9
2004:10:12-16:49:11 (none) pluto[13144]: |    length: 356
2004:10:12-16:49:11 (none) pluto[13144]: | The xchg type is ISAKMP_XCHG_QUICK (32)
2004:10:12-16:49:11 (none) pluto[13144]: | ICOOKIE:  d0 57 e6 c1  98 1e a8 56
2004:10:12-16:49:11 (none) pluto[13144]: | RCOOKIE:  a7 16 3c 21  fc 06 25 97
2004:10:12-16:49:11 (none) pluto[13144]: | peer:  d4 ef b6 02
2004:10:12-16:49:11 (none) pluto[13144]: | state hash entry 1
2004:10:12-16:49:11 (none) pluto[13144]: | peer and cookies match, provided msgid 0531a3e9 vs 00000000
2004:10:12-16:49:11 (none) pluto[13144]: | state object not found
2004:10:12-16:49:11 (none) pluto[13144]: | ICOOKIE:  d0 57 e6 c1  98 1e a8 56
2004:10:12-16:49:11 (none) pluto[13144]: | RCOOKIE:  a7 16 3c 21  fc 06 25 97
2004:10:12-16:49:11 (none) pluto[13144]: | peer:  d4 ef b6 02
2004:10:12-16:49:11 (none) pluto[13144]: | state hash entry 1
2004:10:12-16:49:11 (none) pluto[13144]: | peer and cookies match, provided msgid 00000000 vs 00000000
2004:10:12-16:49:11 (none) pluto[13144]: | state object #1 found, in STATE_MAIN_R3
2004:10:12-16:49:11 (none) pluto[13144]: | ***parse ISAKMP Hash Payload:
2004:10:12-16:49:11 (none) pluto[13144]: |    next payload type: ISAKMP_NEXT_SA
2004:10:12-16:49:11 (none) pluto[13144]: |    length: 20
2004:10:12-16:49:11 (none) pluto[13144]: | ***parse ISAKMP Security Association Payload:
2004:10:12-16:49:11 (none) pluto[13144]: |    next payload type: ISAKMP_NEXT_NONCE
2004:10:12-16:49:11 (none) pluto[13144]: |    length: 56
2004:10:12-16:49:11 (none) pluto[13144]: |    DOI: ISAKMP_DOI_IPSEC
2004:10:12-16:49:11 (none) pluto[13144]: | ***parse ISAKMP Nonce Payload:
2004:10:12-16:49:11 (none) pluto[13144]: |    next payload type: ISAKMP_NEXT_KE
2004:10:12-16:49:11 (none) pluto[13144]: |    length: 20
2004:10:12-16:49:11 (none) pluto[13144]: | ***parse ISAKMP Key Exchange Payload:
2004:10:12-16:49:11 (none) pluto[13144]: |    next payload type: ISAKMP_NEXT_ID
2004:10:12-16:49:11 (none) pluto[13144]: |    length: 196
2004:10:12-16:49:11 (none) pluto[13144]: | ***parse ISAKMP Identification Payload (IPsec DOI):
2004:10:12-16:49:11 (none) pluto[13144]: |    next payload type: ISAKMP_NEXT_ID
2004:10:12-16:49:11 (none) pluto[13144]: |    length: 16
2004:10:12-16:49:11 (none) pluto[13144]: |    ID type: ID_IPV4_ADDR_SUBNET
2004:10:12-16:49:11 (none) pluto[13144]: |    Protocol ID: 0
2004:10:12-16:49:11 (none) pluto[13144]: |    port: 0
2004:10:12-16:49:11 (none) pluto[13144]: | ***parse ISAKMP Identification Payload (IPsec DOI):
2004:10:12-16:49:11 (none) pluto[13144]: |    next payload type: ISAKMP_NEXT_NONE
2004:10:12-16:49:11 (none) pluto[13144]: |    length: 16
2004:10:12-16:49:11 (none) pluto[13144]: |    ID type: ID_IPV4_ADDR_SUBNET
2004:10:12-16:49:11 (none) pluto[13144]: |    Protocol ID: 0
2004:10:12-16:49:11 (none) pluto[13144]: |    port: 0
2004:10:12-16:49:11 (none) pluto[13144]: | removing 4 bytes of padding
2004:10:12-16:49:11 (none) pluto[13144]: | peer client is subnet 192.168.1.0/24
2004:10:12-16:49:11 (none) pluto[13144]: | peer client protocol/port is 0/0
2004:10:12-16:49:11 (none) pluto[13144]: | our client is subnet 192.168.35.0/24
2004:10:12-16:49:11 (none) pluto[13144]: | our client protocol/port is 0/0
2004:10:12-16:49:11 (none) pluto[13144]: | duplicating state object #1
2004:10:12-16:49:11 (none) pluto[13144]: | creating state object #2 at 0x80ee9c0
2004:10:12-16:49:11 (none) pluto[13144]: | ICOOKIE:  d0 57 e6 c1  98 1e a8 56
2004:10:12-16:49:11 (none) pluto[13144]: | RCOOKIE:  a7 16 3c 21  fc 06 25 97
2004:10:12-16:49:11 (none) pluto[13144]: | peer:  d4 ef b6 02
2004:10:12-16:49:11 (none) pluto[13144]: | state hash entry 1
2004:10:12-16:49:11 (none) pluto[13144]: | inserting event EVENT_SO_DISCARD, timeout in 0 seconds for #2
2004:10:12-16:49:11 (none) pluto[13144]: | **emit ISAKMP Message:
2004:10:12-16:49:11 (none) pluto[13144]: |    initiator cookie:
2004:10:12-16:49:11 (none) pluto[13144]: |   d0 57 e6 c1  98 1e a8 56
2004:10:12-16:49:11 (none) pluto[13144]: |    responder cookie:
2004:10:12-16:49:11 (none) pluto[13144]: |   a7 16 3c 21  fc 06 25 97
2004:10:12-16:49:11 (none) pluto[13144]: |    next payload type: ISAKMP_NEXT_HASH
2004:10:12-16:49:11 (none) pluto[13144]: |    ISAKMP version: ISAKMP Version 1.0
2004:10:12-16:49:11 (none) pluto[13144]: |    exchange type: ISAKMP_XCHG_QUICK
2004:10:12-16:49:11 (none) pluto[13144]: |    flags: ISAKMP_FLAG_ENCRYPTION
2004:10:12-16:49:11 (none) pluto[13144]: |    message ID:  05 31 a3 e9
2004:10:12-16:49:11 (none) pluto[13144]: | ***emit ISAKMP Hash Payload:
2004:10:12-16:49:11 (none) pluto[13144]: |    next payload type: ISAKMP_NEXT_SA
2004:10:12-16:49:11 (none) pluto[13144]: | emitting 16 zero bytes of HASH into ISAKMP Hash Payload
2004:10:12-16:49:11 (none) pluto[13144]: | emitting length of ISAKMP Hash Payload: 20
2004:10:12-16:49:11 (none) pluto[13144]: | ***emit ISAKMP Security Association Payload:
2004:10:12-16:49:11 (none) pluto[13144]: |    next payload type: ISAKMP_NEXT_NONCE
2004:10:12-16:49:11 (none) pluto[13144]: |    DOI: ISAKMP_DOI_IPSEC
2004:10:12-16:49:11 (none) pluto[13144]: | ****parse IPsec DOI SIT:
2004:10:12-16:49:11 (none) pluto[13144]: |    IPsec DOI SIT: SIT_IDENTITY_ONLY
2004:10:12-16:49:11 (none) pluto[13144]: | ****parse ISAKMP Proposal Payload:
2004:10:12-16:49:11 (none) pluto[13144]: |    next payload type: ISAKMP_NEXT_NONE
2004:10:12-16:49:11 (none) pluto[13144]: |    length: 44
2004:10:12-16:49:11 (none) pluto[13144]: |    proposal number: 0
2004:10:12-16:49:11 (none) pluto[13144]: |    protocol ID: PROTO_IPSEC_ESP
2004:10:12-16:49:11 (none) pluto[13144]: |    SPI size: 4
2004:10:12-16:49:11 (none) pluto[13144]: |    number of transforms: 1
2004:10:12-16:49:11 (none) pluto[13144]: | parsing 4 raw bytes of ISAKMP Proposal Payload into SPI
2004:10:12-16:49:11 (none) pluto[13144]: | SPI  12 c6 7a a6
2004:10:12-16:49:11 (none) pluto[13144]: | *****parse ISAKMP Transform Payload (ESP):
2004:10:12-16:49:11 (none) pluto[13144]: |    next payload type: ISAKMP_NEXT_NONE
2004:10:12-16:49:11 (none) pluto[13144]: |    length: 32
2004:10:12-16:49:11 (none) pluto[13144]: |    transform number: 0
2004:10:12-16:49:11 (none) pluto[13144]: |    transform ID: ESP_AES
2004:10:12-16:49:11 (none) pluto[13144]: | ******parse ISAKMP IPsec DOI attribute:
2004:10:12-16:49:11 (none) pluto[13144]: |    af+type: GROUP_DESCRIPTION
2004:10:12-16:49:11 (none) pluto[13144]: |    length/value: 5
2004:10:12-16:49:11 (none) pluto[13144]: |    [5 is OAKLEY_GROUP_MODP1536]
2004:10:12-16:49:11 (none) pluto[13144]: | ******parse ISAKMP IPsec DOI attribute:
2004:10:12-16:49:11 (none) pluto[13144]: |    af+type: ENCAPSULATION_MODE
2004:10:12-16:49:11 (none) pluto[13144]: |    length/value: 61443
2004:10:12-16:49:11 (none) pluto[13144]: |    [61443 is ENCAPSULATION_MODE_UDP_TUNNEL]
2004:10:12-16:49:11 (none) pluto[13144]: | ******parse ISAKMP IPsec DOI attribute:
2004:10:12-16:49:11 (none) pluto[13144]: |    af+type: SA_LIFE_TYPE
2004:10:12-16:49:11 (none) pluto[13144]: |    length/value: 1
2004:10:12-16:49:11 (none) pluto[13144]: |    [1 is SA_LIFE_TYPE_SECONDS]
2004:10:12-16:49:11 (none) pluto[13144]: | ******parse ISAKMP IPsec DOI attribute:
2004:10:12-16:49:11 (none) pluto[13144]: |    af+type: SA_LIFE_DURATION
2004:10:12-16:49:11 (none) pluto[13144]: |    length/value: 3600
2004:10:12-16:49:11 (none) pluto[13144]: | ******parse ISAKMP IPsec DOI attribute:
2004:10:12-16:49:11 (none) pluto[13144]: |    af+type: AUTH_ALGORITHM
2004:10:12-16:49:11 (none) pluto[13144]: |    length/value: 1
2004:10:12-16:49:11 (none) pluto[13144]: |    [1 is AUTH_ALGORITHM_HMAC_MD5]
2004:10:12-16:49:11 (none) pluto[13144]: | ******parse ISAKMP IPsec DOI attribute:
2004:10:12-16:49:11 (none) pluto[13144]: |    af+type: KEY_LENGTH
2004:10:12-16:49:11 (none) pluto[13144]: |    length/value: 128
2004:10:12-16:49:11 (none) pluto[13144]: | ****emit IPsec DOI SIT:
2004:10:12-16:49:11 (none) pluto[13144]: |    IPsec DOI SIT: SIT_IDENTITY_ONLY
2004:10:12-16:49:11 (none) pluto[13144]: | ****emit ISAKMP Proposal Payload:
2004:10:12-16:49:11 (none) pluto[13144]: |    next payload type: ISAKMP_NEXT_NONE
2004:10:12-16:49:11 (none) pluto[13144]: |    proposal number: 0
2004:10:12-16:49:11 (none) pluto[13144]: |    protocol ID: PROTO_IPSEC_ESP
2004:10:12-16:49:11 (none) pluto[13144]: |    SPI size: 4
2004:10:12-16:49:11 (none) pluto[13144]: |    number of transforms: 1
2004:10:12-16:49:11 (none) pluto[13144]: | generate SPI:  2f b2 28 b0
2004:10:12-16:49:11 (none) pluto[13144]: | emitting 4 raw bytes of SPI into ISAKMP Proposal Payload
2004:10:12-16:49:11 (none) pluto[13144]: | SPI  2f b2 28 b0
2004:10:12-16:49:11 (none) pluto[13144]: | *****emit ISAKMP Transform Payload (ESP):
2004:10:12-16:49:11 (none) pluto[13144]: |    next payload type: ISAKMP_NEXT_NONE
2004:10:12-16:49:11 (none) pluto[13144]: |    transform number: 0
2004:10:12-16:49:11 (none) pluto[13144]: |    transform ID: ESP_AES
2004:10:12-16:49:11 (none) pluto[13144]: | emitting 24 raw bytes of attributes into ISAKMP Transform Payload (ESP)
2004:10:12-16:49:11 (none) pluto[13144]: | attributes  80 03 00 05  80 04 f0 03  80 01 00 01  80 02 0e 10
2004:10:12-16:49:11 (none) pluto[13144]: |   80 05 00 01  80 06 00 80
2004:10:12-16:49:11 (none) pluto[13144]: | emitting length of ISAKMP Transform Payload (ESP): 32
2004:10:12-16:49:11 (none) pluto[13144]: | emitting length of ISAKMP Proposal Payload: 44
2004:10:12-16:49:11 (none) pluto[13144]: | emitting length of ISAKMP Security Association Payload: 56
2004:10:12-16:49:11 (none) pluto[13144]: "S_zaventem-primalux_0"[1] 213.240.183.2:4500 #2: responding to Quick Mode
2004:10:12-16:49:11 (none) pluto[13144]: | ***emit ISAKMP Nonce Payload:
2004:10:12-16:49:11 (none) pluto[13144]: |    next payload type: ISAKMP_NEXT_KE
2004:10:12-16:49:11 (none) pluto[13144]: | emitting 16 raw bytes of Nr into ISAKMP Nonce Payload
2004:10:12-16:49:11 (none) pluto[13144]: | Nr  df 26 79 69  97 1d eb 7f  4f 11 05 1b  5c f9 94 ab
2004:10:12-16:49:11 (none) pluto[13144]: | emitting length of ISAKMP Nonce Payload: 20
2004:10:12-16:49:11 (none) pluto[13144]: | ***emit ISAKMP Key Exchange Payload:
2004:10:12-16:49:11 (none) pluto[13144]: |    next payload type: ISAKMP_NEXT_ID
2004:10:12-16:49:11 (none) pluto[13144]: | emitting 192 raw bytes of keyex value into ISAKMP Key Exchange Payload
2004:10:12-16:49:11 (none) pluto[13144]: | keyex value  d5 4d e8 cb  5d 70 50 3c  91 1f c7 12  ad 36 35 dc
2004:10:12-16:49:11 (none) pluto[13144]: |   29 e2 53 44  5e c5 65 db  1e e9 45 bc  9a 63 65 e1
2004:10:12-16:49:11 (none) pluto[13144]: |   cb 67 c4 de  bd 4d c5 29  d3 ff 49 db  e9 ad 51 c9
2004:10:12-16:49:11 (none) pluto[13144]: |   3d 84 6b bf  bf 6f 61 9c  d3 82 17 fc  d0 51 c4 ef
2004:10:12-16:49:11 (none) pluto[13144]: |   12 73 e7 de  8a 41 74 6f  c6 82 d3 94  7c 55 ea 52
2004:10:12-16:49:11 (none) pluto[13144]: |   04 15 e5 c7  db 42 51 7c  91 e7 da 73  bf 36 52 20
2004:10:12-16:49:11 (none) pluto[13144]: |   00 fe 96 fb  01 81 dd 4f  22 8d 52 1e  88 55 5e f1
2004:10:12-16:49:11 (none) pluto[13144]: |   cb 29 82 ec  65 4e 61 7d  d4 cd 29 75  f1 96 3b d7
2004:10:12-16:49:11 (none) pluto[13144]: |   47 41 1a 8a  fb b7 c0 1d  ba 4a 31 1e  fd 04 66 a7
2004:10:12-16:49:11 (none) pluto[13144]: |   5b 03 48 61  9e 89 9a 51  f2 97 fb 70  f5 f9 93 94
2004:10:12-16:49:11 (none) pluto[13144]: |   34 a5 33 05  c1 91 ee 4b  a7 e5 65 fb  35 a4 bc 6c
2004:10:12-16:49:11 (none) pluto[13144]: |   04 79 46 cb  ac 74 24 7a  d4 15 0c 19  87 bd 81 b9
2004:10:12-16:49:11 (none) pluto[13144]: | emitting length of ISAKMP Key Exchange Payload: 196
2004:10:12-16:49:11 (none) pluto[13144]: | emitting 16 raw bytes of IDci into ISAKMP Message
2004:10:12-16:49:11 (none) pluto[13144]: | IDci  05 00 00 10  04 00 00 00  c0 a8 01 00  ff ff ff 00
2004:10:12-16:49:11 (none) pluto[13144]: | emitting 16 raw bytes of IDcr into ISAKMP Message
2004:10:12-16:49:11 (none) pluto[13144]: | IDcr  00 00 00 10  04 00 00 00  c0 a8 23 00  ff ff ff 00
2004:10:12-16:49:11 (none) pluto[13144]: | compute_proto_keymat:key_len=16 from peer
2004:10:12-16:49:11 (none) pluto[13144]: | compute_proto_keymat:needed_len (after ESP enc)=16
2004:10:12-16:49:11 (none) pluto[13144]: | kernel_alg_esp_auth_keylen(auth=1, sadb_aalg=2): a_keylen=16
2004:10:12-16:49:11 (none) pluto[13144]: | compute_proto_keymat:needed_len (after ESP auth)=32
2004:10:12-16:49:11 (none) pluto[13144]: | route owner of "S_zaventem-primalux_0" CK_INSTANCE unrouted: NULL
2004:10:12-16:49:11 (none) pluto[13144]: | route owner of "S_zaventem-primalux_0" CK_INSTANCE unrouted: NULL; eroute owner: NULL
2004:10:12-16:49:11 (none) pluto[13144]: | kernel_alg_esp_info():transid=12, auth=1, ei=0x80d7060, enckeylen=32, authkeylen=16, encryptalg=12, authalg=2
2004:10:12-16:49:11 (none) pluto[13144]: | add inbound eroute 192.168.1.0/24:0 -> 192.168.35.0/24:0 => tun.1001@82.12.179.230:0
2004:10:12-16:49:11 (none) pluto[13144]: | emitting 4 zero bytes of encryption padding into ISAKMP Message
2004:10:12-16:49:11 (none) pluto[13144]: | emitting length of ISAKMP Message: 356
2004:10:12-16:49:11 (none) pluto[13144]: "S_zaventem-primalux_0"[1] 213.240.183.2:4500 #2: transition from state (null) to state STATE_QUICK_R1
2004:10:12-16:49:11 (none) pluto[13144]: | inserting event EVENT_RETRANSMIT, timeout in 10 seconds for #2
2004:10:12-16:49:11 (none) pluto[13144]: | next event EVENT_RETRANSMIT in 10 seconds for #2
2004:10:12-16:49:12 (none) pluto[13144]: |  
2004:10:12-16:49:12 (none) pluto[13144]: | *received 52 bytes from 213.240.183.2:4500 on ppp0
2004:10:12-16:49:12 (none) pluto[13144]: | **parse ISAKMP Message:
2004:10:12-16:49:12 (none) pluto[13144]: |    initiator cookie:
2004:10:12-16:49:12 (none) pluto[13144]: |   d0 57 e6 c1  98 1e a8 56
2004:10:12-16:49:12 (none) pluto[13144]: |    responder cookie:
2004:10:12-16:49:12 (none) pluto[13144]: |   a7 16 3c 21  fc 06 25 97
2004:10:12-16:49:12 (none) pluto[13144]: |    next payload type: ISAKMP_NEXT_HASH
2004:10:12-16:49:12 (none) pluto[13144]: |    ISAKMP version: ISAKMP Version 1.0
2004:10:12-16:49:12 (none) pluto[13144]: |    exchange type: ISAKMP_XCHG_QUICK
2004:10:12-16:49:12 (none) pluto[13144]: |    flags: ISAKMP_FLAG_ENCRYPTION
2004:10:12-16:49:12 (none) pluto[13144]: |    message ID:  05 31 a3 e9
2004:10:12-16:49:12 (none) pluto[13144]: |    length: 52
2004:10:12-16:49:12 (none) pluto[13144]: | The xchg type is ISAKMP_XCHG_QUICK (32)
2004:10:12-16:49:12 (none) pluto[13144]: | ICOOKIE:  d0 57 e6 c1  98 1e a8 56
2004:10:12-16:49:12 (none) pluto[13144]: | RCOOKIE:  a7 16 3c 21  fc 06 25 97
2004:10:12-16:49:12 (none) pluto[13144]: | peer:  d4 ef b6 02
2004:10:12-16:49:12 (none) pluto[13144]: | state hash entry 1
2004:10:12-16:49:12 (none) pluto[13144]: | peer and cookies match, provided msgid 0531a3e9 vs 0531a3e9
2004:10:12-16:49:12 (none) pluto[13144]: | state object #2 found, in STATE_QUICK_R1
2004:10:12-16:49:12 (none) pluto[13144]: | ***parse ISAKMP Hash Payload:
2004:10:12-16:49:12 (none) pluto[13144]: |    next payload type: ISAKMP_NEXT_NONE
2004:10:12-16:49:12 (none) pluto[13144]: |    length: 20
2004:10:12-16:49:12 (none) pluto[13144]: | removing 4 bytes of padding
2004:10:12-16:49:12 (none) pluto[13144]: | route owner of "S_zaventem-primalux_0" CK_INSTANCE unrouted: NULL; eroute owner: NULL
2004:10:12-16:49:12 (none) pluto[13144]: | kernel_alg_esp_info():transid=12, auth=1, ei=0x80d7060, enckeylen=32, authkeylen=16, encryptalg=12, authalg=2
2004:10:12-16:49:12 (none) pluto[13144]: | route owner of "S_zaventem-primalux_0" CK_INSTANCE unrouted: NULL; eroute owner: NULL
2004:10:12-16:49:12 (none) pluto[13144]: | add eroute 192.168.35.0/24:0 -> 192.168.1.0/24:0 => tun.1002@213.240.183.2:0
2004:10:12-16:49:12 (none) pluto[13144]: | executing up-client: 2>&1 PLUTO_VERSION='1.1' PLUTO_VERB='up-client' PLUTO_CONNECTION='S_zaventem-primalux_0' PLUTO_NEXT_HOP='213.240.183.2' PLUTO_INTERFACE='ipsec0' PLUTO_ME='82.12.179.230' PLUTO_MY_ID='harry@ice.be' PLUTO_MY_CLIENT='192.168.35.0/24' PLUTO_MY_CLIENT_NET='192.168.35.0' PLUTO_MY_CLIENT_MASK='255.255.255.0' PLUTO_MY_PORT='0' PLUTO_MY_PROTOCOL='0' PLUTO_PEER='213.240.183.2' PLUTO_PEER_ID='harry@ice.be' PLUTO_PEER_CLIENT='192.168.1.0/24' PLUTO_PEER_CLIENT_NET='192.168.1.0' PLUTO_PEER_CLIENT_MASK='255.255.255.0' PLUTO_PEER_PORT='0' PLUTO_PEER_PROTOCOL='0' PLUTO_PEER_CA='' /opt/_updown.classic 2>/tmp/log 1>/tmp/log
2004:10:12-16:49:12 (none) pluto[13144]: | executing prepare-client: 2>&1 PLUTO_VERSION='1.1' PLUTO_VERB='prepare-client' PLUTO_CONNECTION='S_zaventem-primalux_0' PLUTO_NEXT_HOP='213.240.183.2' PLUTO_INTERFACE='ipsec0' PLUTO_ME='82.12.179.230' PLUTO_MY_ID='harry@ice.be' PLUTO_MY_CLIENT='192.168.35.0/24' PLUTO_MY_CLIENT_NET='192.168.35.0' PLUTO_MY_CLIENT_MASK='255.255.255.0' PLUTO_MY_PORT='0' PLUTO_MY_PROTOCOL='0' PLUTO_PEER='213.240.183.2' PLUTO_PEER_ID='harry@ice.be' PLUTO_PEER_CLIENT='192.168.1.0/24' PLUTO_PEER_CLIENT_NET='192.168.1.0' PLUTO_PEER_CLIENT_MASK='255.255.255.0' PLUTO_PEER_PORT='0' PLUTO_PEER_PROTOCOL='0' PLUTO_PEER_CA='' /opt/_updown.classic 2>/tmp/log 1>/tmp/log
2004:10:12-16:49:12 (none) pluto[13144]: | executing route-client: 2>&1 PLUTO_VERSION='1.1' PLUTO_VERB='route-client' PLUTO_CONNECTION='S_zaventem-primalux_0' PLUTO_NEXT_HOP='213.240.183.2' PLUTO_INTERFACE='ipsec0' PLUTO_ME='82.12.179.230' PLUTO_MY_ID='harry@ice.be' PLUTO_MY_CLIENT='192.168.35.0/24' PLUTO_MY_CLIENT_NET='192.168.35.0' PLUTO_MY_CLIENT_MASK='255.255.255.0' PLUTO_MY_PORT='0' PLUTO_MY_PROTOCOL='0' PLUTO_PEER='213.240.183.2' PLUTO_PEER_ID='harry@ice.be' PLUTO_PEER_CLIENT='192.168.1.0/24' PLUTO_PEER_CLIENT_NET='192.168.1.0' PLUTO_PEER_CLIENT_MASK='255.255.255.0' PLUTO_PEER_PORT='0' PLUTO_PEER_PROTOCOL='0' PLUTO_PEER_CA='' /opt/_updown.classic 2>/tmp/log 1>/tmp/log
2004:10:12-16:49:12 (none) pluto[13144]: "S_zaventem-primalux_0"[1] 213.240.183.2:4500 #2: transition from state STATE_QUICK_R1 to state STATE_QUICK_R2
2004:10:12-16:49:12 (none) pluto[13144]: | inserting event EVENT_SA_REPLACE, timeout in 3330 seconds for #2
2004:10:12-16:49:12 (none) pluto[13144]: "S_zaventem-primalux_0"[1] 213.240.183.2:4500 #2: IPsec SA established
2004:10:12-16:49:12 (none) pluto[13144]: | next event EVENT_NAT_T_KEEPALIVE in 58 seconds
2004:10:12-16:50:10 (none) pluto[13144]: |  
2004:10:12-16:50:10 (none) pluto[13144]: | *time to handle event
2004:10:12-16:50:10 (none) pluto[13144]: | event after this is EVENT_SHUNT_SCAN in 52 seconds
2004:10:12-16:50:10 (none) pluto[13144]: | next event EVENT_SHUNT_SCAN in 52 seconds
2004:10:12-16:51:02 (none) pluto[13144]: |  
2004:10:12-16:51:02 (none) pluto[13144]: | *time to handle event
2004:10:12-16:51:02 (none) pluto[13144]: | event after this is EVENT_SA_REPLACE in 3220 seconds
2004:10:12-16:51:02 (none) pluto[13144]: | inserting event EVENT_SHUNT_SCAN, timeout in 120 seconds
2004:10:12-16:51:02 (none) pluto[13144]: | scanning for shunt eroutes
2004:10:12-16:51:02 (none) pluto[13144]: | next event EVENT_SHUNT_SCAN in 120 seconds
2004:10:12-16:53:02 (none) pluto[13144]: |  
2004:10:12-16:53:02 (none) pluto[13144]: | *time to handle event
2004:10:12-16:53:02 (none) pluto[13144]: | event after this is EVENT_SA_REPLACE in 3100 seconds
2004:10:12-16:53:02 (none) pluto[13144]: | inserting event EVENT_SHUNT_SCAN, timeout in 120 seconds
2004:10:12-16:53:02 (none) pluto[13144]: | scanning for shunt eroutes
2004:10:12-16:53:02 (none) pluto[13144]: | next event EVENT_SHUNT_SCAN in 120 seconds
2004:10:12-16:55:02 (none) pluto[13144]: |  
2004:10:12-16:55:02 (none) pluto[13144]: | *time to handle event
2004:10:12-16:55:02 (none) pluto[13144]: | event after this is EVENT_SA_REPLACE in 2980 seconds
2004:10:12-16:55:02 (none) pluto[13144]: | inserting event EVENT_SHUNT_SCAN, timeout in 120 seconds
2004:10:12-16:55:02 (none) pluto[13144]: | scanning for shunt eroutes
2004:10:12-16:55:02 (none) pluto[13144]: | next event EVENT_SHUNT_SCAN in 120 seconds
2004:10:12-16:55:59 (none) pluto[13144]: |  
2004:10:12-16:55:59 (none) pluto[13144]: | *received whack message
2004:10:12-16:55:59 (none) pluto[13144]: | kernel_alg_esp_auth_keylen(auth=1, sadb_aalg=2): a_keylen=16
2004:10:12-16:55:59 (none) pluto[13144]: | kernel_alg_esp_auth_keylen(auth=1, sadb_aalg=2): a_keylen=16
2004:10:12-16:55:59 (none) pluto[13144]: | next event EVENT_SHUNT_SCAN in 63 seconds
2004:10:12-16:56:06 (none) pluto[13144]: |  
2004:10:12-16:56:06 (none) pluto[13144]: | *received whack message
2004:10:12-16:56:06 (none) pluto[13144]: | kernel_alg_esp_auth_keylen(auth=1, sadb_aalg=2): a_keylen=16
2004:10:12-16:56:06 (none) pluto[13144]: | kernel_alg_esp_auth_keylen(auth=1, sadb_aalg=2): a_keylen=16
2004:10:12-16:56:06 (none) pluto[13144]: | next event EVENT_SHUNT_SCAN in 56 seconds
2004:10:12-16:56:10 (none) pluto[13144]: |  
2004:10:12-16:56:10 (none) pluto[13144]: | *received whack message
2004:10:12-16:56:10 (none) pluto[13144]: | kernel_alg_esp_auth_keylen(auth=1, sadb_aalg=2): a_keylen=16
2004:10:12-16:56:10 (none) pluto[13144]: | kernel_alg_esp_auth_keylen(auth=1, sadb_aalg=2): a_keylen=16
2004:10:12-16:56:10 (none) pluto[13144]: | next event EVENT_SHUNT_SCAN in 52 seconds
2004:10:12-16:56:14 (none) pluto[13144]: |  
2004:10:12-16:56:14 (none) pluto[13144]: | *received whack message
2004:10:12-16:56:14 (none) pluto[13144]: | kernel_alg_esp_auth_keylen(auth=1, sadb_aalg=2): a_keylen=16
2004:10:12-16:56:14 (none) pluto[13144]: | kernel_alg_esp_auth_keylen(auth=1, sadb_aalg=2): a_keylen=16
2004:10:12-16:56:14 (none) pluto[13144]: | next event EVENT_SHUNT_SCAN in 48 seconds
2004:10:12-16:56:18 (none) pluto[13144]: |  
2004:10:12-16:56:18 (none) pluto[13144]: | *received whack message
2004:10:12-16:56:18 (none) pluto[13144]: | kernel_alg_esp_auth_keylen(auth=1, sadb_aalg=2): a_keylen=16
2004:10:12-16:56:18 (none) pluto[13144]: | kernel_alg_esp_auth_keylen(auth=1, sadb_aalg=2): a_keylen=16
2004:10:12-16:56:18 (none) pluto[13144]: | next event EVENT_SHUNT_SCAN in 44 seconds
2004:10:12-16:56:22 (none) pluto[13144]: |  
2004:10:12-16:56:22 (none) pluto[13144]: | *received whack message
2004:10:12-16:56:22 (none) pluto[13144]: | kernel_alg_esp_auth_keylen(auth=1, sadb_aalg=2): a_keylen=16
2004:10:12-16:56:22 (none) pluto[13144]: | kernel_alg_esp_auth_keylen(auth=1, sadb_aalg=2): a_keylen=16
2004:10:12-16:56:22 (none) pluto[13144]: | next event EVENT_SHUNT_SCAN in 40 seconds
2004:10:12-16:56:26 (none) pluto[13144]: |  
2004:10:12-16:56:26 (none) pluto[13144]: | *received whack message
2004:10:12-16:56:26 (none) pluto[13144]: | kernel_alg_esp_auth_keylen(auth=1, sadb_aalg=2): a_keylen=16
2004:10:12-16:56:26 (none) pluto[13144]: | kernel_alg_esp_auth_keylen(auth=1, sadb_aalg=2): a_keylen=16
2004:10:12-16:56:26 (none) pluto[13144]: | next event EVENT_SHUNT_SCAN in 36 seconds
2004:10:12-16:56:30 (none) pluto[13144]: |  
2004:10:12-16:56:30 (none) pluto[13144]: | *received whack message
2004:10:12-16:56:30 (none) pluto[13144]: | kernel_alg_esp_auth_keylen(auth=1, sadb_aalg=2): a_keylen=16
2004:10:12-16:56:30 (none) pluto[13144]: | kernel_alg_esp_auth_keylen(auth=1, sadb_aalg=2): a_keylen=16
2004:10:12-16:56:30 (none) pluto[13144]: | next event EVENT_SHUNT_SCAN in 32 seconds
2004:10:12-16:56:34 (none) pluto[13144]: |  
2004:10:12-16:56:34 (none) pluto[13144]: | *received whack message
2004:10:12-16:56:34 (none) pluto[13144]: | kernel_alg_esp_auth_keylen(auth=1, sadb_aalg=2): a_keylen=16
2004:10:12-16:56:34 (none) pluto[13144]: | kernel_alg_esp_auth_keylen(auth=1, sadb_aalg=2): a_keylen=16
2004:10:12-16:56:34 (none) pluto[13144]: | next event EVENT_SHUNT_SCAN in 28 seconds
2004:10:12-16:56:38 (none) pluto[13144]: |  
2004:10:12-16:56:38 (none) pluto[13144]: | *received whack message
2004:10:12-16:56:38 (none) pluto[13144]: | kernel_alg_esp_auth_keylen(auth=1, sadb_aalg=2): a_keylen=16
2004:10:12-16:56:38 (none) pluto[13144]: | kernel_alg_esp_auth_keylen(auth=1, sadb_aalg=2): a_keylen=16
2004:10:12-16:56:38 (none) pluto[13144]: | next event EVENT_SHUNT_SCAN in 24 seconds
2004:10:12-16:56:42 (none) pluto[13144]: |  
2004:10:12-16:56:42 (none) pluto[13144]: | *received whack message
2004:10:12-16:56:42 (none) pluto[13144]: | kernel_alg_esp_auth_keylen(auth=1, sadb_aalg=2): a_keylen=16
2004:10:12-16:56:42 (none) pluto[13144]: | kernel_alg_esp_auth_keylen(auth=1, sadb_aalg=2): a_keylen=16
2004:10:12-16:56:42 (none) pluto[13144]: | next event EVENT_SHUNT_SCAN in 20 seconds
2004:10:12-16:56:45 (none) pluto[13144]: |  
2004:10:12-16:56:45 (none) pluto[13144]: | *received whack message
2004:10:12-16:56:45 (none) pluto[13144]: | kernel_alg_esp_auth_keylen(auth=1, sadb_aalg=2): a_keylen=16
2004:10:12-16:56:45 (none) pluto[13144]: | kernel_alg_esp_auth_keylen(auth=1, sadb_aalg=2): a_keylen=16
2004:10:12-16:56:45 (none) pluto[13144]: | next event EVENT_SHUNT_SCAN in 17 seconds
2004:10:12-16:56:51 (none) pluto[13144]: |  
2004:10:12-16:56:51 (none) pluto[13144]: | *received whack message
2004:10:12-16:56:51 (none) pluto[13144]: | kernel_alg_esp_auth_keylen(auth=1, sadb_aalg=2): a_keylen=16
2004:10:12-16:56:51 (none) pluto[13144]: | kernel_alg_esp_auth_keylen(auth=1, sadb_aalg=2): a_keylen=16
2004:10:12-16:56:51 (none) pluto[13144]: | next event EVENT_SHUNT_SCAN in 11 seconds
2004:10:12-16:56:54 (none) pluto[13144]: |  
2004:10:12-16:56:54 (none) pluto[13144]: | *received whack message
2004:10:12-16:56:54 (none) pluto[13144]: | kernel_alg_esp_auth_keylen(auth=1, sadb_aalg=2): a_keylen=16
2004:10:12-16:56:54 (none) pluto[13144]: | kernel_alg_esp_auth_keylen(auth=1, sadb_aalg=2): a_keylen=16
2004:10:12-16:56:54 (none) pluto[13144]: | next event EVENT_SHUNT_SCAN in 8 seconds
2004:10:12-16:56:58 (none) pluto[13144]: |  
2004:10:12-16:56:58 (none) pluto[13144]: | *received whack message
2004:10:12-16:56:58 (none) pluto[13144]: | kernel_alg_esp_auth_keylen(auth=1, sadb_aalg=2): a_keylen=16
2004:10:12-16:56:58 (none) pluto[13144]: | kernel_alg_esp_auth_keylen(auth=1, sadb_aalg=2): a_keylen=16
2004:10:12-16:56:58 (none) pluto[13144]: | next event EVENT_SHUNT_SCAN in 4 seconds
2004:10:12-16:57:02 (none) pluto[13144]: |  
2004:10:12-16:57:02 (none) pluto[13144]: | *received whack message
2004:10:12-16:57:02 (none) pluto[13144]: | kernel_alg_esp_auth_keylen(auth=1, sadb_aalg=2): a_keylen=16
2004:10:12-16:57:02 (none) pluto[13144]: | kernel_alg_esp_auth_keylen(auth=1, sadb_aalg=2): a_keylen=16
2004:10:12-16:57:02 (none) pluto[13144]: | next event EVENT_SHUNT_SCAN in 0 seconds
2004:10:12-16:57:02 (none) pluto[13144]: |  
2004:10:12-16:57:02 (none) pluto[13144]: | *time to handle event
2004:10:12-16:57:02 (none) pluto[13144]: | event after this is EVENT_SA_REPLACE in 2860 seconds
2004:10:12-16:57:02 (none) pluto[13144]: | inserting event EVENT_SHUNT_SCAN, timeout in 120 seconds
2004:10:12-16:57:02 (none) pluto[13144]: | scanning for shunt eroutes
2004:10:12-16:57:02 (none) pluto[13144]: | next event EVENT_SHUNT_SCAN in 120 seconds
2004:10:12-16:57:06 (none) pluto[13144]: |  
2004:10:12-16:57:06 (none) pluto[13144]: | *received whack message
2004:10:12-16:57:06 (none) pluto[13144]: | kernel_alg_esp_auth_keylen(auth=1, sadb_aalg=2): a_keylen=16
2004:10:12-16:57:06 (none) pluto[13144]: | kernel_alg_esp_auth_keylen(auth=1, sadb_aalg=2): a_keylen=16
2004:10:12-16:57:06 (none) pluto[13144]: | next event EVENT_SHUNT_SCAN in 116 seconds
2004:10:12-16:57:10 (none) pluto[13144]: |  
2004:10:12-16:57:10 (none) pluto[13144]: | *received whack message
2004:10:12-16:57:10 (none) pluto[13144]: | kernel_alg_esp_auth_keylen(auth=1, sadb_aalg=2): a_keylen=16
2004:10:12-16:57:10 (none) pluto[13144]: | kernel_alg_esp_auth_keylen(auth=1, sadb_aalg=2): a_keylen=16
2004:10:12-16:57:10 (none) pluto[13144]: | next event EVENT_SHUNT_SCAN in 112 seconds
2004:10:12-16:57:14 (none) pluto[13144]: |  
2004:10:12-16:57:14 (none) pluto[13144]: | *received whack message
2004:10:12-16:57:14 (none) pluto[13144]: | kernel_alg_esp_auth_keylen(auth=1, sadb_aalg=2): a_keylen=16
2004:10:12-16:57:14 (none) pluto[13144]: | kernel_alg_esp_auth_keylen(auth=1, sadb_aalg=2): a_keylen=16
2004:10:12-16:57:14 (none) pluto[13144]: | next event EVENT_SHUNT_SCAN in 108 seconds
2004:10:12-16:57:17 (none) pluto[13144]: |  
2004:10:12-16:57:17 (none) pluto[13144]: | *received whack message
2004:10:12-16:57:17 (none) pluto[13144]: | kernel_alg_esp_auth_keylen(auth=1, sadb_aalg=2): a_keylen=16
2004:10:12-16:57:17 (none) pluto[13144]: | kernel_alg_esp_auth_keylen(auth=1, sadb_aalg=2): a_keylen=16
2004:10:12-16:57:17 (none) pluto[13144]: | next event EVENT_SHUNT_SCAN in 105 seconds
2004:10:12-16:59:02 (none) pluto[13144]: |  
2004:10:12-16:59:02 (none) pluto[13144]: | *time to handle event
2004:10:12-16:59:02 (none) pluto[13144]: | event after this is EVENT_SA_REPLACE in 2740 seconds
2004:10:12-16:59:02 (none) pluto[13144]: | inserting event EVENT_SHUNT_SCAN, timeout in 120 seconds
2004:10:12-16:59:02 (none) pluto[13144]: | scanning for shunt eroutes
2004:10:12-16:59:02 (none) pluto[13144]: | next event EVENT_SHUNT_SCAN in 120 seconds
2004:10:12-17:01:02 (none) pluto[13144]: |  
2004:10:12-17:01:02 (none) pluto[13144]: | *time to handle event
2004:10:12-17:01:02 (none) pluto[13144]: | event after this is EVENT_SA_REPLACE in 2620 seconds
2004:10:12-17:01:02 (none) pluto[13144]: | inserting event EVENT_SHUNT_SCAN, timeout in 120 seconds
2004:10:12-17:01:02 (none) pluto[13144]: | scanning for shunt eroutes
2004:10:12-17:01:02 (none) pluto[13144]: | next event EVENT_SHUNT_SCAN in 120 seconds
2004:10:12-17:03:02 (none) pluto[13144]: |  
2004:10:12-17:03:02 (none) pluto[13144]: | *time to handle event
2004:10:12-17:03:02 (none) pluto[13144]: | event after this is EVENT_SA_REPLACE in 2500 seconds
2004:10:12-17:03:02 (none) pluto[13144]: | inserting event EVENT_SHUNT_SCAN, timeout in 120 seconds
2004:10:12-17:03:02 (none) pluto[13144]: | scanning for shunt eroutes
2004:10:12-17:03:02 (none) pluto[13144]: | next event EVENT_SHUNT_SCAN in 120 seconds
2004:10:12-17:05:02 (none) pluto[13144]: |  
2004:10:12-17:05:02 (none) pluto[13144]: | *time to handle event
2004:10:12-17:05:02 (none) pluto[13144]: | event after this is EVENT_SA_REPLACE in 2380 seconds
2004:10:12-17:05:02 (none) pluto[13144]: | inserting event EVENT_SHUNT_SCAN, timeout in 120 seconds
2004:10:12-17:05:02 (none) pluto[13144]: | scanning for shunt eroutes
2004:10:12-17:05:02 (none) pluto[13144]: | next event EVENT_SHUNT_SCAN in 120 seconds
2004:10:12-17:06:10 (none) pluto[13144]: |  
2004:10:12-17:06:10 (none) pluto[13144]: | *received 68 bytes from 213.240.183.2:4500 on ppp0
2004:10:12-17:06:10 (none) pluto[13144]: | **parse ISAKMP Message:
2004:10:12-17:06:10 (none) pluto[13144]: |    initiator cookie:
2004:10:12-17:06:10 (none) pluto[13144]: |   d0 57 e6 c1  98 1e a8 56
2004:10:12-17:06:10 (none) pluto[13144]: |    responder cookie:
2004:10:12-17:06:10 (none) pluto[13144]: |   a7 16 3c 21  fc 06 25 97
2004:10:12-17:06:10 (none) pluto[13144]: |    next payload type: ISAKMP_NEXT_HASH
2004:10:12-17:06:10 (none) pluto[13144]: |    ISAKMP version: ISAKMP Version 1.0
2004:10:12-17:06:10 (none) pluto[13144]: |    exchange type: ISAKMP_XCHG_INFO
2004:10:12-17:06:10 (none) pluto[13144]: |    flags: ISAKMP_FLAG_ENCRYPTION
2004:10:12-17:06:10 (none) pluto[13144]: |    message ID:  54 96 fc e2
2004:10:12-17:06:10 (none) pluto[13144]: |    length: 68
2004:10:12-17:06:10 (none) pluto[13144]: | The xchg type is ISAKMP_XCHG_INFO (5)
2004:10:12-17:06:10 (none) pluto[13144]: | ICOOKIE:  d0 57 e6 c1  98 1e a8 56
2004:10:12-17:06:10 (none) pluto[13144]: | RCOOKIE:  a7 16 3c 21  fc 06 25 97
2004:10:12-17:06:10 (none) pluto[13144]: | peer:  d4 ef b6 02
2004:10:12-17:06:10 (none) pluto[13144]: | state hash entry 1
2004:10:12-17:06:10 (none) pluto[13144]: | peer and cookies match, provided msgid 00000000 vs 0531a3e9
2004:10:12-17:06:10 (none) pluto[13144]: | peer and cookies match, provided msgid 00000000 vs 00000000
2004:10:12-17:06:10 (none) pluto[13144]: | state object #1 found, in STATE_MAIN_R3
2004:10:12-17:06:10 (none) pluto[13144]: | ***parse ISAKMP Hash Payload:
2004:10:12-17:06:10 (none) pluto[13144]: |    next payload type: ISAKMP_NEXT_D
2004:10:12-17:06:10 (none) pluto[13144]: |    length: 20
2004:10:12-17:06:10 (none) pluto[13144]: | ***parse ISAKMP Delete Payload:
2004:10:12-17:06:10 (none) pluto[13144]: |    next payload type: ISAKMP_NEXT_NONE
2004:10:12-17:06:10 (none) pluto[13144]: |    length: 16
2004:10:12-17:06:10 (none) pluto[13144]: |    DOI: ISAKMP_DOI_IPSEC
2004:10:12-17:06:10 (none) pluto[13144]: |    protocol ID: 3
2004:10:12-17:06:10 (none) pluto[13144]: |    SPI size: 4
2004:10:12-17:06:10 (none) pluto[13144]: |    number of SPIs: 1
2004:10:12-17:06:10 (none) pluto[13144]: | removing 4 bytes of padding
2004:10:12-17:06:10 (none) pluto[13144]: "S_zaventem-primalux_0"[1] 213.240.183.2:4500 #1: received Delete SA payload: deleting IPSEC State #2
2004:10:12-17:06:10 (none) pluto[13144]: | **emit ISAKMP Message:
2004:10:12-17:06:10 (none) pluto[13144]: |    initiator cookie:
2004:10:12-17:06:10 (none) pluto[13144]: |   d0 57 e6 c1  98 1e a8 56
2004:10:12-17:06:10 (none) pluto[13144]: |    responder cookie:
2004:10:12-17:06:10 (none) pluto[13144]: |   a7 16 3c 21  fc 06 25 97
2004:10:12-17:06:10 (none) pluto[13144]: |    next payload type: ISAKMP_NEXT_HASH
2004:10:12-17:06:10 (none) pluto[13144]: |    ISAKMP version: ISAKMP Version 1.0
2004:10:12-17:06:10 (none) pluto[13144]: |    exchange type: ISAKMP_XCHG_INFO
2004:10:12-17:06:10 (none) pluto[13144]: |    flags: ISAKMP_FLAG_ENCRYPTION
2004:10:12-17:06:10 (none) pluto[13144]: |    message ID:  a4 87 60 07
2004:10:12-17:06:10 (none) pluto[13144]: | ***emit ISAKMP Hash Payload:
2004:10:12-17:06:10 (none) pluto[13144]: |    next payload type: ISAKMP_NEXT_D
2004:10:12-17:06:10 (none) pluto[13144]: | emitting 16 zero bytes of HASH(1) into ISAKMP Hash Payload
2004:10:12-17:06:10 (none) pluto[13144]: | emitting length of ISAKMP Hash Payload: 20
2004:10:12-17:06:10 (none) pluto[13144]: | ***emit ISAKMP Delete Payload:
2004:10:12-17:06:10 (none) pluto[13144]: |    next payload type: ISAKMP_NEXT_NONE
2004:10:12-17:06:10 (none) pluto[13144]: |    DOI: ISAKMP_DOI_IPSEC
2004:10:12-17:06:10 (none) pluto[13144]: |    protocol ID: 3
2004:10:12-17:06:10 (none) pluto[13144]: |    SPI size: 4
2004:10:12-17:06:10 (none) pluto[13144]: |    number of SPIs: 1
2004:10:12-17:06:10 (none) pluto[13144]: | emitting 4 raw bytes of delete payload into ISAKMP Delete Payload
2004:10:12-17:06:10 (none) pluto[13144]: | delete payload  2f b2 28 b0
2004:10:12-17:06:10 (none) pluto[13144]: | emitting length of ISAKMP Delete Payload: 16
2004:10:12-17:06:10 (none) pluto[13144]: | emitting 4 zero bytes of encryption padding into ISAKMP Message
2004:10:12-17:06:10 (none) pluto[13144]: | emitting length of ISAKMP Message: 68
2004:10:12-17:06:10 (none) pluto[13144]: | ICOOKIE:  d0 57 e6 c1  98 1e a8 56
2004:10:12-17:06:10 (none) pluto[13144]: | RCOOKIE:  a7 16 3c 21  fc 06 25 97
2004:10:12-17:06:10 (none) pluto[13144]: | peer:  d4 ef b6 02
2004:10:12-17:06:10 (none) pluto[13144]: | state hash entry 1
2004:10:12-17:06:10 (none) pluto[13144]: | executing down-client: 2>&1 PLUTO_VERSION='1.1' PLUTO_VERB='down-client' PLUTO_CONNECTION='S_zaventem-primalux_0' PLUTO_NEXT_HOP='213.240.183.2' PLUTO_INTERFACE='ipsec0' PLUTO_ME='82.12.179.230' PLUTO_MY_ID='harry@ice.be' PLUTO_MY_CLIENT='192.168.35.0/24' PLUTO_MY_CLIENT_NET='192.168.35.0' PLUTO_MY_CLIENT_MASK='255.255.255.0' PLUTO_MY_PORT='0' PLUTO_MY_PROTOCOL='0' PLUTO_PEER='213.240.183.2' PLUTO_PEER_ID='harry@ice.be' PLUTO_PEER_CLIENT='192.168.1.0/24' PLUTO_PEER_CLIENT_NET='192.168.1.0' PLUTO_PEER_CLIENT_MASK='255.255.255.0' PLUTO_PEER_PORT='0' PLUTO_PEER_PROTOCOL='0' PLUTO_PEER_CA='' /opt/_updown.classic 2>/tmp/log 1>/tmp/log
2004:10:12-17:06:10 (none) pluto[13144]: | replace with shunt eroute 192.168.35.0/24:0 -> 192.168.1.0/24:0 => %trap:0
2004:10:12-17:06:10 (none) pluto[13144]: | del:  12 c6 7a a6
2004:10:12-17:06:10 (none) pluto[13144]: "S_zaventem-primalux_0"[1] 213.240.183.2:4500 #1: received and ignored informational message
2004:10:12-17:06:10 (none) pluto[13144]: | next event EVENT_SHUNT_SCAN in 52 seconds
2004:10:12-17:06:10 (none) pluto[13144]: |  
2004:10:12-17:06:10 (none) pluto[13144]: | *received 76 bytes from 213.240.183.2:4500 on ppp0
2004:10:12-17:06:10 (none) pluto[13144]: | **parse ISAKMP Message:
2004:10:12-17:06:10 (none) pluto[13144]: |    initiator cookie:
2004:10:12-17:06:10 (none) pluto[13144]: |   d0 57 e6 c1  98 1e a8 56
2004:10:12-17:06:10 (none) pluto[13144]: |    responder cookie:
2004:10:12-17:06:10 (none) pluto[13144]: |   a7 16 3c 21  fc 06 25 97
2004:10:12-17:06:10 (none) pluto[13144]: |    next payload type: ISAKMP_NEXT_HASH
2004:10:12-17:06:10 (none) pluto[13144]: |    ISAKMP version: ISAKMP Version 1.0
2004:10:12-17:06:10 (none) pluto[13144]: |    exchange type: ISAKMP_XCHG_INFO
2004:10:12-17:06:10 (none) pluto[13144]: |    flags: ISAKMP_FLAG_ENCRYPTION
2004:10:12-17:06:10 (none) pluto[13144]: |    message ID:  24 31 08 6e
2004:10:12-17:06:10 (none) pluto[13144]: |    length: 76
2004:10:12-17:06:10 (none) pluto[13144]: | The xchg type is ISAKMP_XCHG_INFO (5)
2004:10:12-17:06:10 (none) pluto[13144]: | ICOOKIE:  d0 57 e6 c1  98 1e a8 56
2004:10:12-17:06:10 (none) pluto[13144]: | RCOOKIE:  a7 16 3c 21  fc 06 25 97
2004:10:12-17:06:10 (none) pluto[13144]: | peer:  d4 ef b6 02
2004:10:12-17:06:10 (none) pluto[13144]: | state hash entry 1
2004:10:12-17:06:10 (none) pluto[13144]: | peer and cookies match, provided msgid 00000000 vs 00000000
2004:10:12-17:06:10 (none) pluto[13144]: | state object #1 found, in STATE_MAIN_R3
2004:10:12-17:06:10 (none) pluto[13144]: | ***parse ISAKMP Hash Payload:
2004:10:12-17:06:10 (none) pluto[13144]: |    next payload type: ISAKMP_NEXT_D
2004:10:12-17:06:10 (none) pluto[13144]: |    length: 20
2004:10:12-17:06:10 (none) pluto[13144]: | ***parse ISAKMP Delete Payload:
2004:10:12-17:06:10 (none) pluto[13144]: |    next payload type: ISAKMP_NEXT_NONE
2004:10:12-17:06:10 (none) pluto[13144]: |    length: 28
2004:10:12-17:06:10 (none) pluto[13144]: |    DOI: ISAKMP_DOI_IPSEC
2004:10:12-17:06:10 (none) pluto[13144]: |    protocol ID: 1
2004:10:12-17:06:10 (none) pluto[13144]: |    SPI size: 16
2004:10:12-17:06:10 (none) pluto[13144]: |    number of SPIs: 1
2004:10:12-17:06:10 (none) pluto[13144]: "S_zaventem-primalux_0"[1] 213.240.183.2:4500 #1: received Delete SA payload: deleting ISAKMP State #1
2004:10:12-17:06:10 (none) pluto[13144]: | **emit ISAKMP Message:
2004:10:12-17:06:10 (none) pluto[13144]: |    initiator cookie:
2004:10:12-17:06:10 (none) pluto[13144]: |   d0 57 e6 c1  98 1e a8 56
2004:10:12-17:06:10 (none) pluto[13144]: |    responder cookie:
2004:10:12-17:06:10 (none) pluto[13144]: |   a7 16 3c 21  fc 06 25 97
2004:10:12-17:06:10 (none) pluto[13144]: |    next payload type: ISAKMP_NEXT_HASH
2004:10:12-17:06:10 (none) pluto[13144]: |    ISAKMP version: ISAKMP Version 1.0
2004:10:12-17:06:10 (none) pluto[13144]: |    exchange type: ISAKMP_XCHG_INFO
2004:10:12-17:06:10 (none) pluto[13144]: |    flags: ISAKMP_FLAG_ENCRYPTION
2004:10:12-17:06:10 (none) pluto[13144]: |    message ID:  2b 3e b3 dd
2004:10:12-17:06:10 (none) pluto[13144]: | ***emit ISAKMP Hash Payload:
2004:10:12-17:06:10 (none) pluto[13144]: |    next payload type: ISAKMP_NEXT_D
2004:10:12-17:06:10 (none) pluto[13144]: | emitting 16 zero bytes of HASH(1) into ISAKMP Hash Payload
2004:10:12-17:06:10 (none) pluto[13144]: | emitting length of ISAKMP Hash Payload: 20
2004:10:12-17:06:10 (none) pluto[13144]: | ***emit ISAKMP Delete Payload:
2004:10:12-17:06:10 (none) pluto[13144]: |    next payload type: ISAKMP_NEXT_NONE
2004:10:12-17:06:10 (none) pluto[13144]: |    DOI: ISAKMP_DOI_IPSEC
2004:10:12-17:06:10 (none) pluto[13144]: |    protocol ID: 1
2004:10:12-17:06:10 (none) pluto[13144]: |    SPI size: 16
2004:10:12-17:06:10 (none) pluto[13144]: |    number of SPIs: 1
2004:10:12-17:06:10 (none) pluto[13144]: | emitting 16 raw bytes of delete payload into ISAKMP Delete Payload
2004:10:12-17:06:10 (none) pluto[13144]: | delete payload  d0 57 e6 c1  98 1e a8 56  a7 16 3c 21  fc 06 25 97
2004:10:12-17:06:10 (none) pluto[13144]: | emitting length of ISAKMP Delete Payload: 28
2004:10:12-17:06:10 (none) pluto[13144]: | emitting length of ISAKMP Message: 76
2004:10:12-17:06:10 (none) pluto[13144]: | ICOOKIE:  d0 57 e6 c1  98 1e a8 56
2004:10:12-17:06:10 (none) pluto[13144]: | RCOOKIE:  a7 16 3c 21  fc 06 25 97
2004:10:12-17:06:10 (none) pluto[13144]: | peer:  d4 ef b6 02
2004:10:12-17:06:10 (none) pluto[13144]: | state hash entry 1
2004:10:12-17:06:10 (none) pluto[13144]: "S_zaventem-primalux_0"[1] 213.240.183.2:4500: deleting connection "S_zaventem-primalux_0" instance with peer 213.240.183.2
2004:10:12-17:06:10 (none) pluto[13144]: | delete eroute 192.168.35.0/24:0 -> 192.168.1.0/24:0 => %trap:0
2004:10:12-17:06:10 (none) pluto[13144]: | route owner of "S_zaventem-primalux_0" CK_GOING_AWAY unrouted: NULL
2004:10:12-17:06:10 (none) pluto[13144]: | executing unroute-client: 2>&1 PLUTO_VERSION='1.1' PLUTO_VERB='unroute-client' PLUTO_CONNECTION='S_zaventem-primalux_0' PLUTO_NEXT_HOP='213.240.183.2' PLUTO_INTERFACE='ipsec0' PLUTO_ME='82.12.179.230' PLUTO_MY_ID='harry@ice.be' PLUTO_MY_CLIENT='192.168.35.0/24' PLUTO_MY_CLIENT_NET='192.168.35.0' PLUTO_MY_CLIENT_MASK='255.255.255.0' PLUTO_MY_PORT='0' PLUTO_MY_PROTOCOL='0' PLUTO_PEER='213.240.183.2' PLUTO_PEER_ID='harry@ice.be' PLUTO_PEER_CLIENT='192.168.1.0/24' PLUTO_PEER_CLIENT_NET='192.168.1.0' PLUTO_PEER_CLIENT_MASK='255.255.255.0' PLUTO_PEER_PORT='0' PLUTO_PEER_PROTOCOL='0' PLUTO_PEER_CA='' /opt/_updown.classic 2>/tmp/log 1>/tmp/log
2004:10:12-17:06:10 (none) pluto[13144]: | del:  d0 57 e6 c1  98 1e a8 56  a7 16 3c 21  fc 06 25 97
2004:10:12-17:06:10 (none) pluto[13144]: packet from 213.240.183.2:4500: received and ignored informational message
2004:10:12-17:06:10 (none) pluto[13144]: | next event EVENT_SHUNT_SCAN in 52 seconds
2004:10:12-17:06:31 (none) pluto[13144]: |  
2004:10:12-17:06:31 (none) pluto[13144]: | *received whack message
2004:10:12-17:06:31 (none) pluto[13144]: shutting down
2004:10:12-17:06:31 (none) pluto[13144]: forgetting secrets
2004:10:12-17:06:31 (none) pluto[13144]: "S_zaventem-primalux_0": deleting connection
2004:10:12-17:06:31 (none) pluto[13144]: shutting down interface ipsec0/ppp0 82.12.179.230
2004:10:12-17:06:31 (none) pluto[13144]: shutting down interface ipsec0/ppp0 82.12.179.230
2004:10:12-17:06:31 (none) ipsec_starter[13110]: child 13144 (Pluto) has quit (exit code 0)
2004:10:12-17:06:31 (none) ipsec_starter[13110]: shutting down interface ipsec0/ppp0

