2013:05:30-12:49:14 proxy pluto[26095]: |
2013:05:30-12:49:14 proxy pluto[26095]: | *time to handle event
2013:05:30-12:49:14 proxy pluto[26095]: | event after this is EVENT_DPD in 14 seconds
2013:05:30-12:49:14 proxy pluto[26095]: | inserting event EVENT_DPD_UPDATE, timeout in 30 seconds for #2
2013:05:30-12:49:14 proxy pluto[26095]: | next event EVENT_DPD in 14 seconds for #1
2013:05:30-12:49:17 proxy pluto[26095]: |
2013:05:30-12:49:17 proxy pluto[26095]: | *received 1160 bytes from 62.133.96.97:1133 on eth1
2013:05:30-12:49:17 proxy pluto[26095]: packet from 62.133.96.97:1133: size (1160) differs from size specified in ISAKMP HDR (1144)
2013:05:30-12:49:17 proxy pluto[26095]: packet from 62.133.96.97:1133: Cisco VPN client appends 16 surplus NULL bytes
2013:05:30-12:49:17 proxy pluto[26095]: packet from 62.133.96.97:1133: received Vendor ID payload [XAUTH]
2013:05:30-12:49:17 proxy pluto[26095]: packet from 62.133.96.97:1133: received Vendor ID payload [Dead Peer Detection]
2013:05:30-12:49:17 proxy pluto[26095]: packet from 62.133.96.97:1133: ignoring Vendor ID payload [FRAGMENTATION 80000000]
2013:05:30-12:49:17 proxy pluto[26095]: packet from 62.133.96.97:1133: received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02_n]
2013:05:30-12:49:17 proxy pluto[26095]: packet from 62.133.96.97:1133: ignoring Vendor ID payload [Cisco-Unity]
2013:05:30-12:49:17 proxy pluto[26095]: | preparse_isakmp_policy: peer requests PUBKEY+XAUTHRSASIG+XAUTHSERVER authentication
2013:05:30-12:49:17 proxy pluto[26095]: | instantiated "D_for admin to Any" for 62.133.96.97
2013:05:30-12:49:17 proxy pluto[26095]: | creating state object #11 at 0x82f84f0
2013:05:30-12:49:17 proxy pluto[26095]: | ICOOKIE: d5 0b 0d a7 ae 26 9a f5
2013:05:30-12:49:17 proxy pluto[26095]: | RCOOKIE: a8 d9 dd 85 e0 0f 79 6a
2013:05:30-12:49:17 proxy pluto[26095]: | peer: 3e 85 60 61
2013:05:30-12:49:17 proxy pluto[26095]: | state hash entry 0
2013:05:30-12:49:17 proxy pluto[26095]: | inserting event EVENT_SO_DISCARD, timeout in 0 seconds for #11
2013:05:30-12:49:17 proxy pluto[26095]: "D_for admin to Any"[3] 62.133.96.97:1133 #11: responding to Main Mode from unknown peer 62.133.96.97:1133
2013:05:30-12:49:17 proxy pluto[26095]: "D_for admin to Any"[3] 62.133.96.97:1133 #11: peer requested 2147483 seconds which exceeds our limit 86400 seconds
2013:05:30-12:49:17 proxy pluto[26095]: "D_for admin to Any"[3] 62.133.96.97:1133 #11: lifetime reduced to 86400 seconds (todo: IPSEC_RESPONDER_LIFETIME notification)
2013:05:30-12:49:17 proxy pluto[26095]: | inserting event EVENT_RETRANSMIT, timeout in 10 seconds for #11
2013:05:30-12:49:17 proxy pluto[26095]: | next event EVENT_RETRANSMIT in 10 seconds for #11
2013:05:30-12:49:17 proxy pluto[26095]: |
2013:05:30-12:49:17 proxy pluto[26095]: | *received 352 bytes from 62.133.96.97:1133 on eth1
2013:05:30-12:49:17 proxy pluto[26095]: packet from 62.133.96.97:1133: size (352) differs from size specified in ISAKMP HDR (336)
2013:05:30-12:49:17 proxy pluto[26095]: packet from 62.133.96.97:1133: Cisco VPN client appends 16 surplus NULL bytes
2013:05:30-12:49:17 proxy pluto[26095]: | ICOOKIE: d5 0b 0d a7 ae 26 9a f5
2013:05:30-12:49:17 proxy pluto[26095]: | RCOOKIE: a8 d9 dd 85 e0 0f 79 6a
2013:05:30-12:49:17 proxy pluto[26095]: | peer: 3e 85 60 61
2013:05:30-12:49:17 proxy pluto[26095]: | state hash entry 0
2013:05:30-12:49:17 proxy pluto[26095]: | state object #11 found, in STATE_MAIN_R1
2013:05:30-12:49:17 proxy pluto[26095]: "D_for admin to Any"[3] 62.133.96.97:1133 #11: ignoring Vendor ID payload [20ccaabaae279af59ddfb66292ca43c8]
2013:05:30-12:49:17 proxy pluto[26095]: "D_for admin to Any"[3] 62.133.96.97:1133 #11: ignoring Vendor ID payload [Cisco-Unity]
2013:05:30-12:49:17 proxy pluto[26095]: "D_for admin to Any"[3] 62.133.96.97:1133 #11: NAT-Traversal: Result using draft-ietf-ipsec-nat-t-ike-02/03: peer is NATed
2013:05:30-12:49:17 proxy pluto[26095]: | inserting event EVENT_NAT_T_KEEPALIVE, timeout in 60 seconds
2013:05:30-12:49:17 proxy pluto[26095]: | inserting event EVENT_RETRANSMIT, timeout in 10 seconds for #11
2013:05:30-12:49:17 proxy pluto[26095]: | next event EVENT_RETRANSMIT in 10 seconds for #11
2013:05:30-12:49:27 proxy pluto[26095]: |
2013:05:30-12:49:27 proxy pluto[26095]: | *time to handle event
2013:05:30-12:49:27 proxy pluto[26095]: | event after this is EVENT_DPD in 1 seconds
2013:05:30-12:49:27 proxy pluto[26095]: | handling event EVENT_RETRANSMIT for 62.133.96.97 "D_for admin to Any" #11
2013:05:30-12:49:27 proxy pluto[26095]: | inserting event EVENT_RETRANSMIT, timeout in 20 seconds for #11
2013:05:30-12:49:27 proxy pluto[26095]: | next event EVENT_DPD in 1 seconds for #1
2013:05:30-12:49:28 proxy pluto[26095]: |
2013:05:30-12:49:28 proxy pluto[26095]: | *time to handle event
2013:05:30-12:49:28 proxy pluto[26095]: | event after this is EVENT_DPD_UPDATE in 0 seconds
2013:05:30-12:49:28 proxy pluto[26095]: | sent DPD notification R_U_THERE with seqno = 28846
2013:05:30-12:49:28 proxy pluto[26095]: | inserting event EVENT_DPD, timeout in 30 seconds for #1
2013:05:30-12:49:28 proxy pluto[26095]: | next event EVENT_DPD_UPDATE in 0 seconds for #3
2013:05:30-12:49:28 proxy pluto[26095]: |
2013:05:30-12:49:28 proxy pluto[26095]: | *time to handle event
2013:05:30-12:49:28 proxy pluto[26095]: | event after this is EVENT_DPD_UPDATE in 0 seconds
2013:05:30-12:49:28 proxy pluto[26095]: | inserting event EVENT_DPD_UPDATE, timeout in 30 seconds for #3
2013:05:30-12:49:28 proxy pluto[26095]: | next event EVENT_DPD_UPDATE in 0 seconds for #4
2013:05:30-12:49:28 proxy pluto[26095]: |
2013:05:30-12:49:28 proxy pluto[26095]: | *time to handle event
2013:05:30-12:49:28 proxy pluto[26095]: | event after this is EVENT_DPD_UPDATE in 5 seconds
2013:05:30-12:49:28 proxy pluto[26095]: | inserting event EVENT_DPD_UPDATE, timeout in 30 seconds for #4
2013:05:30-12:49:28 proxy pluto[26095]: | next event EVENT_DPD_UPDATE in 5 seconds for #8
2013:05:30-12:49:28 proxy pluto[26095]: |
2013:05:30-12:49:28 proxy pluto[26095]: | *received 92 bytes from 212.64.68.226:4500 on eth1
2013:05:30-12:49:28 proxy pluto[26095]: | ICOOKIE: c4 fc fa ab 0b cc dc 47
2013:05:30-12:49:28 proxy pluto[26095]: | RCOOKIE: 75 72 46 4c 2f 07 c2 30
2013:05:30-12:49:28 proxy pluto[26095]: | peer: d4 40 44 e2
2013:05:30-12:49:28 proxy pluto[26095]: | state hash entry 16
2013:05:30-12:49:28 proxy pluto[26095]: | state object #1 found, in STATE_MAIN_R3
2013:05:30-12:49:28 proxy pluto[26095]: | received DPD notification R_U_THERE_ACK with seqno = 28846
2013:05:30-12:49:28 proxy pluto[26095]: | next event EVENT_DPD_UPDATE in 5 seconds for #8
2013:05:30-12:49:33 proxy pluto[26095]: |
2013:05:30-12:49:33 proxy pluto[26095]: | *time to handle event
2013:05:30-12:49:33 proxy pluto[26095]: | event after this is EVENT_DPD_UPDATE in 0 seconds
2013:05:30-12:49:33 proxy pluto[26095]: | inserting event EVENT_DPD_UPDATE, timeout in 30 seconds for #8
2013:05:30-12:49:33 proxy pluto[26095]: | next event EVENT_DPD_UPDATE in 0 seconds for #5
2013:05:30-12:49:33 proxy pluto[26095]: |
2013:05:30-12:49:33 proxy pluto[26095]: | *time to handle event
2013:05:30-12:49:33 proxy pluto[26095]: | event after this is EVENT_DPD_UPDATE in 11 seconds
2013:05:30-12:49:33 proxy pluto[26095]: | inserting event EVENT_DPD_UPDATE, timeout in 30 seconds for #5
2013:05:30-12:49:33 proxy pluto[26095]: | next event EVENT_DPD_UPDATE in 11 seconds for #2
2013:05:30-12:49:40 proxy pluto[26095]: |
2013:05:30-12:49:40 proxy pluto[26095]: | *received 92 bytes from 62.133.96.97:1134 on eth1
2013:05:30-12:49:40 proxy pluto[26095]: | ICOOKIE: d5 0b 0d a7 ae 26 9a f5
2013:05:30-12:49:40 proxy pluto[26095]: | RCOOKIE: a8 d9 dd 85 e0 0f 79 6a
2013:05:30-12:49:40 proxy pluto[26095]: | peer: 3e 85 60 61
2013:05:30-12:49:40 proxy pluto[26095]: | state hash entry 0
2013:05:30-12:49:40 proxy pluto[26095]: | state object #11 found, in STATE_MAIN_R2
2013:05:30-12:49:40 proxy pluto[26095]: "D_for admin to Any"[3] 62.133.96.97:1133 #11: byte 2 of ISAKMP Hash Payload must be zero, but is not
2013:05:30-12:49:40 proxy pluto[26095]: "D_for admin to Any"[3] 62.133.96.97:1133 #11: malformed payload in packet
2013:05:30-12:49:40 proxy pluto[26095]: | next event EVENT_DPD_UPDATE in 4 seconds for #2
2013:05:30-12:49:44 proxy pluto[26095]: |