[Vpn-help] 2.1.4 Beta problem in WinXP with PIX
Marc Goldburg
marc.goldburg at stanfordalumni.org
Wed Oct 29 15:35:57 CDT 2008
With 2.1.4 beta and several of the preceding releases, I am unable to
connect to a PIX running Cisco software 6.3(5) that I was previously
able to connect to with version 2.0.3 of the Shrew client with an
identical config. The Shrew client complains about "invalid message
from gateway" and in the log, below, the corresponding event seems to be
the the following one
08/10/29 13:23:26 !! : config message type is invalid for pull config
Any pointers would be appreciated. Thanks!
Marc
08/10/29 13:23:19 ## : IKE Daemon, ver 2.1.0
08/10/29 13:23:19 ## : Copyright 2007 Shrew Soft Inc.
08/10/29 13:23:19 ## : This product linked OpenSSL 0.9.8h 28 May 2008
08/10/29 13:23:19 ii : opened 'C:\Program Files\ShrewSoft\VPN
Client\debug\iked.log'
08/10/29 13:23:19 ii : opened 'C:\Program Files\ShrewSoft\VPN
Client/debug/dump-ike-decrypt.cap'
08/10/29 13:23:19 ii : opened 'C:\Program Files\ShrewSoft\VPN
Client/debug/dump-ike-encrypt.cap'
08/10/29 13:23:19 ii : rebuilding vnet device list ...
08/10/29 13:23:19 ii : device ROOT\VNET\0000 disabled
08/10/29 13:23:19 ii : network process thread begin ...
08/10/29 13:23:19 ii : pfkey process thread begin ...
08/10/29 13:23:19 ii : ipc server process thread begin ...
08/10/29 13:23:24 ii : ipc client process thread begin ...
08/10/29 13:23:24 <A : peer config add message
08/10/29 13:23:24 DB : peer ref increment ( ref count = 1, obj count = 0 )
08/10/29 13:23:24 DB : peer added ( obj count = 1 )
08/10/29 13:23:24 ii : local address 172.17.1.129:500 selected for peer
08/10/29 13:23:24 DB : peer ref increment ( ref count = 2, obj count = 1 )
08/10/29 13:23:25 DB : tunnel ref increment ( ref count = 1, obj count = 0 )
08/10/29 13:23:25 DB : tunnel added ( obj count = 1 )
08/10/29 13:23:25 <A : proposal config message
08/10/29 13:23:25 <A : proposal config message
08/10/29 13:23:25 <A : client config message
08/10/29 13:23:25 <A : xauth username message
08/10/29 13:23:25 <A : xauth password message
08/10/29 13:23:25 <A : local id 'remoteClient' message
08/10/29 13:23:25 <A : preshared key message
08/10/29 13:23:25 <A : peer tunnel enable message
08/10/29 13:23:25 DB : tunnel ref increment ( ref count = 2, obj count = 1 )
08/10/29 13:23:25 DB : new phase1 ( ISAKMP initiator )
08/10/29 13:23:25 DB : exchange type is aggressive
08/10/29 13:23:25 DB : 172.17.1.129:500 <-> 67.152.82.163:500
08/10/29 13:23:25 DB : aae443123e06f538:0000000000000000
08/10/29 13:23:25 DB : phase1 ref increment ( ref count = 1, obj count = 0 )
08/10/29 13:23:25 DB : phase1 added ( obj count = 1 )
08/10/29 13:23:25 >> : security association payload
08/10/29 13:23:25 >> : - proposal #1 payload
08/10/29 13:23:25 >> : -- transform #1 payload
08/10/29 13:23:25 >> : -- transform #2 payload
08/10/29 13:23:25 >> : -- transform #3 payload
08/10/29 13:23:25 >> : -- transform #4 payload
08/10/29 13:23:25 >> : -- transform #5 payload
08/10/29 13:23:25 >> : -- transform #6 payload
08/10/29 13:23:25 >> : -- transform #7 payload
08/10/29 13:23:25 >> : -- transform #8 payload
08/10/29 13:23:25 >> : -- transform #9 payload
08/10/29 13:23:25 >> : -- transform #10 payload
08/10/29 13:23:25 >> : -- transform #11 payload
08/10/29 13:23:25 >> : -- transform #12 payload
08/10/29 13:23:25 >> : -- transform #13 payload
08/10/29 13:23:25 >> : -- transform #14 payload
08/10/29 13:23:25 >> : -- transform #15 payload
08/10/29 13:23:25 >> : -- transform #16 payload
08/10/29 13:23:25 >> : -- transform #17 payload
08/10/29 13:23:25 >> : -- transform #18 payload
08/10/29 13:23:25 >> : key exchange payload
08/10/29 13:23:25 >> : nonce payload
08/10/29 13:23:25 >> : identification payload
08/10/29 13:23:25 >> : vendor id payload
08/10/29 13:23:25 ii : local supports XAUTH
08/10/29 13:23:25 >> : vendor id payload
08/10/29 13:23:25 ii : local supports nat-t ( draft v00 )
08/10/29 13:23:25 >> : vendor id payload
08/10/29 13:23:25 ii : local supports nat-t ( draft v01 )
08/10/29 13:23:25 >> : vendor id payload
08/10/29 13:23:25 ii : local supports nat-t ( draft v02 )
08/10/29 13:23:25 >> : vendor id payload
08/10/29 13:23:25 ii : local supports nat-t ( draft v03 )
08/10/29 13:23:25 >> : vendor id payload
08/10/29 13:23:25 ii : local supports nat-t ( rfc )
08/10/29 13:23:25 >> : vendor id payload
08/10/29 13:23:25 ii : local supports FRAGMENTATION
08/10/29 13:23:25 >> : vendor id payload
08/10/29 13:23:25 ii : local supports DPDv1
08/10/29 13:23:25 >> : vendor id payload
08/10/29 13:23:25 ii : local is SHREW SOFT compatible
08/10/29 13:23:25 >> : vendor id payload
08/10/29 13:23:25 ii : local is CISCO UNITY compatible
08/10/29 13:23:25 >> : vendor id payload
08/10/29 13:23:25 ii : local is NETSCREEN compatible
08/10/29 13:23:25 >> : vendor id payload
08/10/29 13:23:25 ii : local is SIDEWINDER compatible
08/10/29 13:23:25 >> : vendor id payload
08/10/29 13:23:25 ii : local is CHECKPOINT compatible
08/10/29 13:23:25 >= : cookies aae443123e06f538:0000000000000000
08/10/29 13:23:25 >= : message 00000000
08/10/29 13:23:25 -> : send IKE packet 172.17.1.129:500 ->
67.152.82.163:500 ( 1232 bytes )
08/10/29 13:23:25 0x : 450004d0 95840000 40119ccb ac110181 439852a3
01f401f4 04bc6754 aae44312
08/10/29 13:23:25 0x : 3e06f538 00000000 00000000 01100400 00000000
000004b4 040002cc 00000001
08/10/29 13:23:25 0x : 00000001 000002c0 01010012 03000028 01010000
80010007 800e0100 80020001
08/10/29 13:23:25 0x : 80040002 8003fde9 800b0001 000c0004 00015180
03000028 02010000 80010007
08/10/29 13:23:25 0x : 800e0100 80020002 80040002 8003fde9 800b0001
000c0004 00015180 03000028
08/10/29 13:23:25 0x : 03010000 80010007 800e00c0 80020001 80040002
8003fde9 800b0001 000c0004
08/10/29 13:23:25 0x : 00015180 03000028 04010000 80010007 800e00c0
80020002 80040002 8003fde9
08/10/29 13:23:25 0x : 800b0001 000c0004 00015180 03000028 05010000
80010007 800e0080 80020001
08/10/29 13:23:25 0x : 80040002 8003fde9 800b0001 000c0004 00015180
03000028 06010000 80010007
08/10/29 13:23:25 0x : 800e0080 80020002 80040002 8003fde9 800b0001
000c0004 00015180 03000028
08/10/29 13:23:25 0x : 07010000 80010003 800e0100 80020001 80040002
8003fde9 800b0001 000c0004
08/10/29 13:23:25 0x : 00015180 03000028 08010000 80010003 800e0100
80020002 80040002 8003fde9
08/10/29 13:23:25 0x : 800b0001 000c0004 00015180 03000028 09010000
80010003 800e00c0 80020001
08/10/29 13:23:25 0x : 80040002 8003fde9 800b0001 000c0004 00015180
03000028 0a010000 80010003
08/10/29 13:23:25 0x : 800e00c0 80020002 80040002 8003fde9 800b0001
000c0004 00015180 03000028
08/10/29 13:23:25 0x : 0b010000 80010003 800e0080 80020001 80040002
8003fde9 800b0001 000c0004
08/10/29 13:23:25 0x : 00015180 03000028 0c010000 80010003 800e0080
80020002 80040002 8003fde9
08/10/29 13:23:25 0x : 800b0001 000c0004 00015180 03000024 0d010000
80010005 80020001 80040002
08/10/29 13:23:25 0x : 8003fde9 800b0001 000c0004 00015180 03000024
0e010000 80010005 80020002
08/10/29 13:23:25 0x : 80040002 8003fde9 800b0001 000c0004 00015180
03000024 0f010000 80010006
08/10/29 13:23:25 0x : 80020001 80040002 8003fde9 800b0001 000c0004
00015180 03000024 10010000
08/10/29 13:23:25 0x : 80010006 80020002 80040002 8003fde9 800b0001
000c0004 00015180 03000024
08/10/29 13:23:25 0x : 11010000 80010001 80020001 80040002 8003fde9
800b0001 000c0004 00015180
08/10/29 13:23:25 0x : 00000024 12010000 80010001 80020002 80040002
8003fde9 800b0001 000c0004
08/10/29 13:23:25 0x : 00015180 0a000084 a8d4b84c dc48ff65 aeb4ac02
d0725fe9 c17fd447 862ac3a2
08/10/29 13:23:25 0x : 5fcb189f 6daa29fd 689c670e fe1ada58 b05fcfef
84a201a1 c279630d c5b98597
08/10/29 13:23:25 0x : 9b89d958 c9ebdd9d b750cd3b 69a4c92a 8be6f8d5
a951b192 62c90619 09f77ce9
08/10/29 13:23:25 0x : abab2bf5 1d88e19d 7f241368 6a594031 56145487
0400ae4a d9172b21 1374046a
08/10/29 13:23:25 0x : d20a275b ab98b3d9 05000018 bf89b529 00ae8728
ec992891 14bf0f2e 0e84fa40
08/10/29 13:23:25 0x : 0d000014 0b000000 72656d6f 7465436c 69656e74
0d00000c 09002689 dfd6b712
08/10/29 13:23:25 0x : 0d000014 4485152d 18b6bbcd 0be8a846 9579ddcc
0d000014 16f6ca16 e4a4066d
08/10/29 13:23:25 0x : 83821a0f 0aeaa862 0d000014 90cb8091 3ebb696e
086381b5 ec427b1f 0d000014
08/10/29 13:23:25 0x : 7d9419a6 5310ca6f 2c179d92 15529d56 0d000014
4a131c81 07035845 5c5728f2
08/10/29 13:23:25 0x : 0e95452f 0d000018 4048b7d5 6ebce885 25e7de7f
00d6c2d3 80000000 0d000014
08/10/29 13:23:25 0x : afcad713 68a1f1c9 6b8696fc 77570100 0d000014
f14b94b7 bff1fef0 2773b8c4
08/10/29 13:23:25 0x : 9feded26 0d000014 12f5f28c 457168a9 702d9fe2
74cc0100 0d000018 166f932d
08/10/29 13:23:25 0x : 55eb64d8 e4df4fd3 7e2313f0 d0fd8451 0d000014
8404adf9 cda05760 b2ca292e
08/10/29 13:23:25 0x : 4bff537b 0000002c f4ed19e0 c114eb51 6faaac0e
e37daf28 07b4381f 00000002
08/10/29 13:23:25 0x : 0000138e 00000000 00000000 18800000
08/10/29 13:23:25 DB : phase1 resend event scheduled ( ref count = 2 )
08/10/29 13:23:25 DB : phase1 ref decrement ( ref count = 1, obj count = 1 )
08/10/29 13:23:25 DB : tunnel ref increment ( ref count = 3, obj count = 1 )
08/10/29 13:23:26 <- : recv IKE packet 67.152.82.163:500 ->
172.17.1.129:500 ( 428 bytes )
08/10/29 13:23:26 0x : aae44312 3e06f538 972982e3 b359e08c 01100400
00000000 000001ac 0d00003c
08/10/29 13:23:26 0x : 00000001 00000001 00000030 01010001 00000028
01010000 80010007 800e0100
08/10/29 13:23:26 0x : 80020001 80040002 8003fde9 800b0001 000c0004
00015180 0d00000c 09002689
08/10/29 13:23:26 0x : dfd6b712 0d000014 afcad713 68a1f1c9 6b8696fc
77570100 0d000014 12f5f28c
08/10/29 13:23:26 0x : 457168a9 702d9fe2 74cc0100 04000014 62ee25fe
b358e08c 2dd8efb0 305640a5
08/10/29 13:23:26 0x : 05000084 7b57211e 38ab1fe4 2f5a4ee2 5f958956
eecfcc9a 489ac086 b82e17e6
08/10/29 13:23:26 0x : 0a3ee588 44780bab c507781d 9ae92fb5 980e2aeb
3a8dd318 d00234d2 0ec470a9
08/10/29 13:23:26 0x : 71920bde 2ed3acd2 dbc78d56 f435ed36 e9171907
f9055fb7 c53a989e e7085ed8
08/10/29 13:23:26 0x : aa6c68a5 f2dfcfb4 3764e23e b39196f7 5f770908
f6e20f61 d543d8ac 4dc03d90
08/10/29 13:23:26 0x : 93ffb0ed 0a00000c 01110000 439852a3 0d000018
f5a57161 ff4f18ff 9b3aaca7
08/10/29 13:23:26 0x : c008faa3 5bfc7236 0d000014 7d9419a6 5310ca6f
2c179d92 15529d56 82000014
08/10/29 13:23:26 0x : 90cb8091 3ebb696e 086381b5 ec427b1f 82000014
0b9f6e9d b84cba85 ba8de19d
08/10/29 13:23:26 0x : 5ccd64b7 08000014 9d23aa24 2dfb92e3 f2f9f3c6
6e0b99b3 00000014 f4799e25
08/10/29 13:23:26 0x : 526a0301 0c82310f 86da0a2e
08/10/29 13:23:26 DB : phase1 found
08/10/29 13:23:26 DB : phase1 ref increment ( ref count = 2, obj count = 1 )
08/10/29 13:23:26 ii : processing phase1 packet ( 428 bytes )
08/10/29 13:23:26 =< : cookies aae443123e06f538:972982e3b359e08c
08/10/29 13:23:26 =< : message 00000000
08/10/29 13:23:26 << : security association payload
08/10/29 13:23:26 << : - propsal #1 payload
08/10/29 13:23:26 << : -- transform #1 payload
08/10/29 13:23:26 ii : matched isakmp proposal #1 transform #1
08/10/29 13:23:26 ii : - transform = ike
08/10/29 13:23:26 ii : - cipher type = aes
08/10/29 13:23:26 ii : - key length = 256 bits
08/10/29 13:23:26 ii : - hash type = md5
08/10/29 13:23:26 ii : - dh group = modp-1024
08/10/29 13:23:26 ii : - auth type = xauth-initiator-psk
08/10/29 13:23:26 ii : - life seconds = 86400
08/10/29 13:23:26 ii : - life kbytes = 0
08/10/29 13:23:26 << : vendor id payload
08/10/29 13:23:26 ii : peer supports XAUTH
08/10/29 13:23:26 << : vendor id payload
08/10/29 13:23:26 ii : peer supports DPDv1
08/10/29 13:23:26 << : vendor id payload
08/10/29 13:23:26 ii : peer is CISCO UNITY compatible
08/10/29 13:23:26 << : vendor id payload
08/10/29 13:23:26 ii : unknown vendor id ( 16 bytes )
08/10/29 13:23:26 0x : 62ee25fe b358e08c 2dd8efb0 305640a5
08/10/29 13:23:26 << : key exchange payload
08/10/29 13:23:26 << : identification payload
08/10/29 13:23:26 ii : phase1 id match ( natt prevents ip match )
08/10/29 13:23:26 ii : received = ipv4-host 67.152.82.163
08/10/29 13:23:26 << : nonce payload
08/10/29 13:23:26 << : vendor id payload
08/10/29 13:23:26 ii : peer supports nat-t ( draft v03 )
08/10/29 13:23:26 << : vendor id payload
08/10/29 13:23:26 ii : peer supports nat-t ( draft v02 )
08/10/29 13:23:26 << : nat discovery payload
08/10/29 13:23:26 << : nat discovery payload
08/10/29 13:23:26 << : hash payload
08/10/29 13:23:26 ii : nat discovery - local address is translated
08/10/29 13:23:26 ii : switching to nat-t udp port 4500
08/10/29 13:23:26 ii : computed DH private key ( 128 bytes )
08/10/29 13:23:26 0x : 7e016719 f3769a96 538f3747 e940ba59 4118abfc
74d2c912 8582bb72 8396f979
08/10/29 13:23:26 0x : 233e95a6 8f8fe529 e5808796 cb14197c 498b9717
c4056e14 c60fb3f9 6a1c6646
08/10/29 13:23:26 0x : cb2358a3 5b6b5ef3 85a656da 9a28b503 28c96198
c255aa01 e8e66b5f f5276aa9
08/10/29 13:23:26 0x : 8439e9a9 72300253 bdc4bc44 c5eb4ce9 6b331259
7560138d 17e0b322 d86e977f
08/10/29 13:23:26 ii : computed DH public key ( 128 bytes )
08/10/29 13:23:26 0x : a8d4b84c dc48ff65 aeb4ac02 d0725fe9 c17fd447
862ac3a2 5fcb189f 6daa29fd
08/10/29 13:23:26 0x : 689c670e fe1ada58 b05fcfef 84a201a1 c279630d
c5b98597 9b89d958 c9ebdd9d
08/10/29 13:23:26 0x : b750cd3b 69a4c92a 8be6f8d5 a951b192 62c90619
09f77ce9 abab2bf5 1d88e19d
08/10/29 13:23:26 0x : 7f241368 6a594031 56145487 0400ae4a d9172b21
1374046a d20a275b ab98b3d9
08/10/29 13:23:26 ii : received DH public key ( 128 bytes )
08/10/29 13:23:26 0x : 7b57211e 38ab1fe4 2f5a4ee2 5f958956 eecfcc9a
489ac086 b82e17e6 0a3ee588
08/10/29 13:23:26 0x : 44780bab c507781d 9ae92fb5 980e2aeb 3a8dd318
d00234d2 0ec470a9 71920bde
08/10/29 13:23:26 0x : 2ed3acd2 dbc78d56 f435ed36 e9171907 f9055fb7
c53a989e e7085ed8 aa6c68a5
08/10/29 13:23:26 0x : f2dfcfb4 3764e23e b39196f7 5f770908 f6e20f61
d543d8ac 4dc03d90 93ffb0ed
08/10/29 13:23:26 == : DH shared secret ( 128 bytes )
08/10/29 13:23:26 0x : 12d00ab9 84228184 7ba6917d 72be50db 5708f6e6
5649f478 78eee8b4 d4f161f9
08/10/29 13:23:26 0x : c5c5a460 f66582aa e4cf4765 90871d74 99c530e3
6d86c13f 350a2e26 cff257aa
08/10/29 13:23:26 0x : 2d7b4dec d9f3ec79 aeca0363 38495229 2c9f9394
e98ac6ff b4897e0c 6ee37d36
08/10/29 13:23:26 0x : d317bf3d 44282763 6b68b900 a58a2dc3 8553aee3
0be20603 b51c767d b42fe0e5
08/10/29 13:23:26 == : SETKEYID ( 16 bytes )
08/10/29 13:23:26 0x : 53997da1 5c466707 3635bd33 a3555f3f
08/10/29 13:23:26 == : SETKEYID_d ( 16 bytes )
08/10/29 13:23:26 0x : 6e094ec2 ce6aeefa 6ad13e8d 00ecd2d0
08/10/29 13:23:26 == : SETKEYID_a ( 16 bytes )
08/10/29 13:23:26 0x : d4150a6c 07999435 f5e54327 72cda89c
08/10/29 13:23:26 == : SETKEYID_e ( 16 bytes )
08/10/29 13:23:26 0x : 511b169d 55c2cc31 399044d9 1ec03593
08/10/29 13:23:26 == : cipher key ( 32 bytes )
08/10/29 13:23:26 0x : debe33d8 b65b6f47 796eee30 4781fe2e 9331e4d0
61d24f10 e6d5e056 8d47aeab
08/10/29 13:23:26 == : cipher iv ( 16 bytes )
08/10/29 13:23:26 0x : 9e17b012 6ba09fd4 bcb7f1db 12c5996a
08/10/29 13:23:26 == : phase1 hash_i ( computed ) ( 16 bytes )
08/10/29 13:23:26 0x : ee994a49 0cc36b8c da80663b e262a0c2
08/10/29 13:23:26 >> : hash payload
08/10/29 13:23:26 >> : nat discovery payload
08/10/29 13:23:26 >> : nat discovery payload
08/10/29 13:23:26 >= : cookies aae443123e06f538:972982e3b359e08c
08/10/29 13:23:26 >= : message 00000000
08/10/29 13:23:26 >= : encrypt iv ( 16 bytes )
08/10/29 13:23:26 0x : 9e17b012 6ba09fd4 bcb7f1db 12c5996a
08/10/29 13:23:26 == : encrypt packet ( 88 bytes )
08/10/29 13:23:26 0x : aae44312 3e06f538 972982e3 b359e08c 08100401
00000000 00000058 82000014
08/10/29 13:23:26 0x : ee994a49 0cc36b8c da80663b e262a0c2 82000014
5e504e1a f7b15c1c 1db7a337
08/10/29 13:23:26 0x : 95877625 00000014 a2eb252c 428b759b 090d01d8 9c24dfc6
08/10/29 13:23:26 == : stored iv ( 16 bytes )
08/10/29 13:23:26 0x : 620aa540 59145785 c211cf36 94100d1d
08/10/29 13:23:26 DB : phase1 resend event canceled ( ref count = 1 )
08/10/29 13:23:26 -> : send NAT-T:IKE packet 172.17.1.129:4500 ->
67.152.82.163:4500 ( 124 bytes )
08/10/29 13:23:26 0x : 4500007c 98840000 40119e1f ac110181 439852a3
11941194 0068bb82 00000000
08/10/29 13:23:26 0x : aae44312 3e06f538 972982e3 b359e08c 08100401
00000000 0000005c cc97b265
08/10/29 13:23:26 0x : addfcc29 45be61b8 9e0823b6 ce935c76 a577f38f
6b46b078 c2762521 4ebc1cc0
08/10/29 13:23:26 0x : 3a10452c df45b2cb 5c5b13e9 620aa540 59145785
c211cf36 94100d1d
08/10/29 13:23:26 == : phase1 hash_r ( computed ) ( 16 bytes )
08/10/29 13:23:26 0x : f4799e25 526a0301 0c82310f 86da0a2e
08/10/29 13:23:26 == : phase1 hash_r ( received ) ( 16 bytes )
08/10/29 13:23:26 0x : f4799e25 526a0301 0c82310f 86da0a2e
08/10/29 13:23:26 ii : phase1 sa established
08/10/29 13:23:26 ii : 67.152.82.163:4500 <-> 172.17.1.129:4500
08/10/29 13:23:26 ii : aae443123e06f538:972982e3b359e08c
08/10/29 13:23:26 ii : sending peer INITIAL-CONTACT notification
08/10/29 13:23:26 ii : - 172.17.1.129:4500 -> 67.152.82.163:4500
08/10/29 13:23:26 ii : - isakmp spi = aae443123e06f538:972982e3b359e08c
08/10/29 13:23:26 ii : - data size 0
08/10/29 13:23:26 >> : hash payload
08/10/29 13:23:26 >> : notification payload
08/10/29 13:23:26 == : new informational hash ( 16 bytes )
08/10/29 13:23:26 0x : 7d167e73 7626054c 583e0397 285d2531
08/10/29 13:23:26 == : new informational iv ( 16 bytes )
08/10/29 13:23:26 0x : 5a4028da 8ae0b6de 7f315734 2904b20e
08/10/29 13:23:26 >= : cookies aae443123e06f538:972982e3b359e08c
08/10/29 13:23:26 >= : message 229e434c
08/10/29 13:23:26 >= : encrypt iv ( 16 bytes )
08/10/29 13:23:26 0x : 5a4028da 8ae0b6de 7f315734 2904b20e
08/10/29 13:23:26 == : encrypt packet ( 76 bytes )
08/10/29 13:23:26 0x : aae44312 3e06f538 972982e3 b359e08c 08100501
229e434c 0000004c 0b000014
08/10/29 13:23:26 0x : 7d167e73 7626054c 583e0397 285d2531 0000001c
00000001 01106002 aae44312
08/10/29 13:23:26 0x : 3e06f538 972982e3 b359e08c
08/10/29 13:23:26 == : stored iv ( 16 bytes )
08/10/29 13:23:26 0x : b621c75d 6ded26ac 2eadc16e 89546d4d
08/10/29 13:23:26 -> : send NAT-T:IKE packet 172.17.1.129:4500 ->
67.152.82.163:4500 ( 108 bytes )
08/10/29 13:23:26 0x : 4500006c 9a840000 40119c2f ac110181 439852a3
11941194 0058fe66 00000000
08/10/29 13:23:26 0x : aae44312 3e06f538 972982e3 b359e08c 08100501
229e434c 0000004c 2e4b4ad6
08/10/29 13:23:26 0x : af35f0e3 83b65186 b374464a 743c8539 021f77a3
3dfdb9da c946420b b621c75d
08/10/29 13:23:26 0x : 6ded26ac 2eadc16e 89546d4d
08/10/29 13:23:26 DB : tunnel ref increment ( ref count = 4, obj count = 1 )
08/10/29 13:23:26 DB : tunnel ref increment ( ref count = 5, obj count = 1 )
08/10/29 13:23:26 DB : phase1 ref increment ( ref count = 2, obj count = 1 )
08/10/29 13:23:26 DB : phase1 ref increment ( ref count = 3, obj count = 1 )
08/10/29 13:23:26 DB : phase1 ref increment ( ref count = 4, obj count = 1 )
08/10/29 13:23:26 DB : phase2 not found
08/10/29 13:23:26 DB : phase1 ref decrement ( ref count = 3, obj count = 1 )
08/10/29 13:23:26 <- : recv NAT-T:IKE packet 67.152.82.163:4500 ->
172.17.1.129:4500 ( 92 bytes )
08/10/29 13:23:26 0x : aae44312 3e06f538 972982e3 b359e08c 08100501
8e0ae0de 0000005c f1205552
08/10/29 13:23:26 0x : e22aa5b2 e1027605 3838fd7d d9a566bc 971e6c31
11d44a8f ea8b5b23 ed7d7a4f
08/10/29 13:23:26 0x : 57caed71 ccec1f01 b5c9dd13 0519c499 c6abb7f3
a7e22886 d7c0804f
08/10/29 13:23:26 DB : phase1 found
08/10/29 13:23:26 DB : phase1 ref increment ( ref count = 4, obj count = 1 )
08/10/29 13:23:26 ii : processing informational packet ( 92 bytes )
08/10/29 13:23:26 == : new informational iv ( 16 bytes )
08/10/29 13:23:26 0x : e85bacc3 8056221a d274d385 55015b7a
08/10/29 13:23:26 =< : cookies aae443123e06f538:972982e3b359e08c
08/10/29 13:23:26 =< : message 8e0ae0de
08/10/29 13:23:26 =< : decrypt iv ( 16 bytes )
08/10/29 13:23:26 0x : e85bacc3 8056221a d274d385 55015b7a
08/10/29 13:23:26 == : decrypt packet ( 92 bytes )
08/10/29 13:23:26 0x : aae44312 3e06f538 972982e3 b359e08c 08100501
8e0ae0de 0000005c 0b000014
08/10/29 13:23:26 0x : 5c42cbc8 83995f2d 368ac34c 78dd5427 0000001c
00000001 01106002 aae44312
08/10/29 13:23:26 0x : 3e06f538 972982e3 b359e08c 00000000 00000000
00000000 00000000
08/10/29 13:23:26 <= : trimmed packet padding ( 16 bytes )
08/10/29 13:23:26 <= : stored iv ( 16 bytes )
08/10/29 13:23:26 0x : 0519c499 c6abb7f3 a7e22886 d7c0804f
08/10/29 13:23:26 << : hash payload
08/10/29 13:23:26 << : notification payload
08/10/29 13:23:26 == : informational hash_i ( computed ) ( 16 bytes )
08/10/29 13:23:26 0x : 5c42cbc8 83995f2d 368ac34c 78dd5427
08/10/29 13:23:26 == : informational hash_c ( received ) ( 16 bytes )
08/10/29 13:23:26 0x : 5c42cbc8 83995f2d 368ac34c 78dd5427
08/10/29 13:23:26 ii : informational hash verified
08/10/29 13:23:26 ii : received peer INITIAL-CONTACT notification
08/10/29 13:23:26 ii : - 67.152.82.163:4500 -> 172.17.1.129:4500
08/10/29 13:23:26 ii : - isakmp spi = aae443123e06f538:972982e3b359e08c
08/10/29 13:23:26 ii : - data size 0
08/10/29 13:23:26 DB : phase1 ref decrement ( ref count = 3, obj count = 1 )
08/10/29 13:23:26 <- : recv NAT-T:IKE packet 67.152.82.163:4500 ->
172.17.1.129:4500 ( 76 bytes )
08/10/29 13:23:26 0x : aae44312 3e06f538 972982e3 b359e08c 08100601
0b555b21 0000004c 6c25d176
08/10/29 13:23:26 0x : 5b6e55e7 aae71d8e eafa4b2b 783a177f e8db355d
8f732c81 bbdcb665 fbbf2b4c
08/10/29 13:23:26 0x : cf6951b7 5b1cf676 fa64305b
08/10/29 13:23:26 DB : phase1 found
08/10/29 13:23:26 DB : phase1 ref increment ( ref count = 4, obj count = 1 )
08/10/29 13:23:26 ii : processing config packet ( 76 bytes )
08/10/29 13:23:26 DB : config not found
08/10/29 13:23:26 DB : tunnel ref increment ( ref count = 6, obj count = 1 )
08/10/29 13:23:26 DB : config ref increment ( ref count = 1, obj count = 0 )
08/10/29 13:23:26 DB : config added ( obj count = 1 )
08/10/29 13:23:26 == : new config iv ( 16 bytes )
08/10/29 13:23:26 0x : 26bb6413 58b30b3c cfd73a1c c1b790d7
08/10/29 13:23:26 =< : cookies aae443123e06f538:972982e3b359e08c
08/10/29 13:23:26 =< : message 0b555b21
08/10/29 13:23:26 =< : decrypt iv ( 16 bytes )
08/10/29 13:23:26 0x : 26bb6413 58b30b3c cfd73a1c c1b790d7
08/10/29 13:23:26 == : decrypt packet ( 76 bytes )
08/10/29 13:23:26 0x : aae44312 3e06f538 972982e3 b359e08c 08100601
0b555b21 0000004c 0e000014
08/10/29 13:23:26 0x : 36106c6c d917b375 6b15c4be 3a4ec7a0 00000014
01000000 800d0000 000e0000
08/10/29 13:23:26 0x : 000f0000 00000000 00000000
08/10/29 13:23:26 <= : trimmed packet padding ( 8 bytes )
08/10/29 13:23:26 <= : stored iv ( 16 bytes )
08/10/29 13:23:26 0x : fbbf2b4c cf6951b7 5b1cf676 fa64305b
08/10/29 13:23:26 << : hash payload
08/10/29 13:23:26 << : attribute payload
08/10/29 13:23:26 == : configure hash_i ( computed ) ( 16 bytes )
08/10/29 13:23:26 0x : 36106c6c d917b375 6b15c4be 3a4ec7a0
08/10/29 13:23:26 == : configure hash_c ( computed ) ( 16 bytes )
08/10/29 13:23:26 0x : 36106c6c d917b375 6b15c4be 3a4ec7a0
08/10/29 13:23:26 ii : configure hash verified
08/10/29 13:23:26 ii : received xauth request -
08/10/29 13:23:26 ii : added standard xauth username attribute
08/10/29 13:23:26 ii : added standard xauth password attribute
08/10/29 13:23:26 ii : sending xauth response for mgoldburg
08/10/29 13:23:26 >> : hash payload
08/10/29 13:23:26 >> : attribute payload
08/10/29 13:23:26 == : new configure hash ( 16 bytes )
08/10/29 13:23:26 0x : fc69dd5e 8dfccedf a041881b d756ebbd
08/10/29 13:23:26 >= : cookies aae443123e06f538:972982e3b359e08c
08/10/29 13:23:26 >= : message 0b555b21
08/10/29 13:23:26 >= : encrypt iv ( 16 bytes )
08/10/29 13:23:26 0x : fbbf2b4c cf6951b7 5b1cf676 fa64305b
08/10/29 13:23:26 == : encrypt packet ( 86 bytes )
08/10/29 13:23:26 0x : aae44312 3e06f538 972982e3 b359e08c 08100601
0b555b21 00000056 0e000014
08/10/29 13:23:26 0x : fc69dd5e 8dfccedf a041881b d756ebbd 00000026
02000000 c0880000 40890009
08/10/29 13:23:26 0x : 6d676f6c 64627572 67408a00 09506f6e 6b546f6e 6b21
08/10/29 13:23:26 == : stored iv ( 16 bytes )
08/10/29 13:23:26 0x : 3ec54cf7 22861ece 27fbd5da 2e04ef2a
08/10/29 13:23:26 -> : send NAT-T:IKE packet 172.17.1.129:4500 ->
67.152.82.163:4500 ( 124 bytes )
08/10/29 13:23:26 0x : 4500007c 9e840000 4011981f ac110181 439852a3
11941194 006871b1 00000000
08/10/29 13:23:26 0x : aae44312 3e06f538 972982e3 b359e08c 08100601
0b555b21 0000005c f03489c1
08/10/29 13:23:26 0x : 4b60d7ab 1bc7d720 d7c541d5 1c700fb8 4b054790
7ea0e046 0b94f0ec e8f38e3a
08/10/29 13:23:26 0x : 027553df e40117e7 f71b7620 3ec54cf7 22861ece
27fbd5da 2e04ef2a
08/10/29 13:23:26 DB : config resend event scheduled ( ref count = 2 )
08/10/29 13:23:26 DB : config ref decrement ( ref count = 1, obj count = 1 )
08/10/29 13:23:26 DB : phase1 ref decrement ( ref count = 3, obj count = 1 )
08/10/29 13:23:26 <- : recv NAT-T:IKE packet 67.152.82.163:4500 ->
172.17.1.129:4500 ( 76 bytes )
08/10/29 13:23:26 0x : aae44312 3e06f538 972982e3 b359e08c 08100601
0b555b21 0000004c f37ff805
08/10/29 13:23:26 0x : cc267daa fc13aa80 fe183b0d d0cea6e9 030387db
38eb1f57 e627126f fa15822a
08/10/29 13:23:26 0x : 1a803a55 a4378109 c7567c02
08/10/29 13:23:26 DB : phase1 found
08/10/29 13:23:26 DB : phase1 ref increment ( ref count = 4, obj count = 1 )
08/10/29 13:23:26 ii : processing config packet ( 76 bytes )
08/10/29 13:23:26 DB : config found
08/10/29 13:23:26 DB : config ref increment ( ref count = 2, obj count = 1 )
08/10/29 13:23:26 =< : cookies aae443123e06f538:972982e3b359e08c
08/10/29 13:23:26 =< : message 0b555b21
08/10/29 13:23:26 =< : decrypt iv ( 16 bytes )
08/10/29 13:23:26 0x : 3ec54cf7 22861ece 27fbd5da 2e04ef2a
08/10/29 13:23:26 == : decrypt packet ( 76 bytes )
08/10/29 13:23:26 0x : aae44312 3e06f538 972982e3 b359e08c 08100601
0b555b21 0000004c 0e000014
08/10/29 13:23:26 0x : 5fb1ff75 90dd996a 7ff5e2a8 ea190bdb 0000000c
03000000 80140001 00000000
08/10/29 13:23:26 0x : 00000000 00000000 00000000
08/10/29 13:23:26 <= : trimmed packet padding ( 16 bytes )
08/10/29 13:23:26 <= : stored iv ( 16 bytes )
08/10/29 13:23:26 0x : fa15822a 1a803a55 a4378109 c7567c02
08/10/29 13:23:26 << : hash payload
08/10/29 13:23:26 << : attribute payload
08/10/29 13:23:26 == : configure hash_i ( computed ) ( 16 bytes )
08/10/29 13:23:26 0x : 5fb1ff75 90dd996a 7ff5e2a8 ea190bdb
08/10/29 13:23:26 == : configure hash_c ( computed ) ( 16 bytes )
08/10/29 13:23:26 0x : 5fb1ff75 90dd996a 7ff5e2a8 ea190bdb
08/10/29 13:23:26 ii : configure hash verified
08/10/29 13:23:26 ii : received xauth result -
08/10/29 13:23:26 ii : user mgoldburg authentication succeeded
08/10/29 13:23:26 ii : sending xauth acknowledge
08/10/29 13:23:26 >> : hash payload
08/10/29 13:23:26 >> : attribute payload
08/10/29 13:23:26 == : new configure hash ( 16 bytes )
08/10/29 13:23:26 0x : bc282fb3 a64a3e3b fdc0dd4f 123680a6
08/10/29 13:23:26 >= : cookies aae443123e06f538:972982e3b359e08c
08/10/29 13:23:26 >= : message 0b555b21
08/10/29 13:23:26 >= : encrypt iv ( 16 bytes )
08/10/29 13:23:26 0x : fa15822a 1a803a55 a4378109 c7567c02
08/10/29 13:23:26 == : encrypt packet ( 56 bytes )
08/10/29 13:23:26 0x : aae44312 3e06f538 972982e3 b359e08c 08100601
0b555b21 00000038 0e000014
08/10/29 13:23:26 0x : bc282fb3 a64a3e3b fdc0dd4f 123680a6 00000008 04000000
08/10/29 13:23:26 == : stored iv ( 16 bytes )
08/10/29 13:23:26 0x : 0bf4b242 98ece8f1 ecc93d80 9c6bda81
08/10/29 13:23:26 DB : config resend event canceled ( ref count = 1 )
08/10/29 13:23:26 -> : send NAT-T:IKE packet 172.17.1.129:4500 ->
67.152.82.163:4500 ( 92 bytes )
08/10/29 13:23:26 0x : 4500005c a1840000 4011953f ac110181 439852a3
11941194 0048e908 00000000
08/10/29 13:23:26 0x : aae44312 3e06f538 972982e3 b359e08c 08100601
0b555b21 0000003c 5e4f72f9
08/10/29 13:23:26 0x : f310a599 5475ba17 d4a63cfe 0bf4b242 98ece8f1
ecc93d80 9c6bda81
08/10/29 13:23:26 DB : config resend event scheduled ( ref count = 2 )
08/10/29 13:23:26 ii : building config attribute list
08/10/29 13:23:26 ii : - IP4 Address
08/10/29 13:23:26 ii : - Address Expiry
08/10/29 13:23:26 ii : - IP4 Netamask
08/10/29 13:23:26 ii : - IP4 DNS Server
08/10/29 13:23:26 ii : - DNS Suffix
08/10/29 13:23:26 ii : - Split DNS Domain
08/10/29 13:23:26 ii : - IP4 Split Network Include
08/10/29 13:23:26 ii : - IP4 Split Network Exclude
08/10/29 13:23:26 ii : - Login Banner
08/10/29 13:23:26 ii : - Save Password
08/10/29 13:23:26 == : new config iv ( 16 bytes )
08/10/29 13:23:26 0x : ea412da8 6d8d4c17 c9c3d89f 3bf8243e
08/10/29 13:23:26 ii : sending config pull request
08/10/29 13:23:26 >> : hash payload
08/10/29 13:23:26 >> : attribute payload
08/10/29 13:23:26 == : new configure hash ( 16 bytes )
08/10/29 13:23:26 0x : a4cd38fc b9988ed5 d55415e5 74293381
08/10/29 13:23:26 >= : cookies aae443123e06f538:972982e3b359e08c
08/10/29 13:23:26 >= : message 06821696
08/10/29 13:23:26 >= : encrypt iv ( 16 bytes )
08/10/29 13:23:26 0x : ea412da8 6d8d4c17 c9c3d89f 3bf8243e
08/10/29 13:23:26 == : encrypt packet ( 96 bytes )
08/10/29 13:23:26 0x : aae44312 3e06f538 972982e3 b359e08c 08100601
06821696 00000060 0e000014
08/10/29 13:23:26 0x : a4cd38fc b9988ed5 d55415e5 74293381 00000030
01000000 00010000 00050000
08/10/29 13:23:26 0x : 00020000 00030000 70020000 70030000 70040000
70060000 70000000 70010000
08/10/29 13:23:26 == : stored iv ( 16 bytes )
08/10/29 13:23:26 0x : ebf347c9 badce413 071270a5 c40d23f1
08/10/29 13:23:26 DB : config resend event canceled ( ref count = 1 )
08/10/29 13:23:26 -> : send NAT-T:IKE packet 172.17.1.129:4500 ->
67.152.82.163:4500 ( 140 bytes )
08/10/29 13:23:26 0x : 4500008c a3840000 4011930f ac110181 439852a3
11941194 0078b651 00000000
08/10/29 13:23:26 0x : aae44312 3e06f538 972982e3 b359e08c 08100601
06821696 0000006c 980668eb
08/10/29 13:23:26 0x : 5633f3aa 1f756179 431e3880 402eddd0 de08576b
92ebb4b2 67ee22a9 bdee26d3
08/10/29 13:23:26 0x : 094c256d 967020bf 5d036553 ad171d74 662ca59b
b462d32b c7a09508 ebf347c9
08/10/29 13:23:26 0x : badce413 071270a5 c40d23f1
08/10/29 13:23:26 DB : config resend event scheduled ( ref count = 2 )
08/10/29 13:23:26 DB : config ref decrement ( ref count = 1, obj count = 1 )
08/10/29 13:23:26 DB : phase1 ref decrement ( ref count = 3, obj count = 1 )
08/10/29 13:23:26 <- : recv NAT-T:IKE packet 67.152.82.163:4500 ->
172.17.1.129:4500 ( 76 bytes )
08/10/29 13:23:26 0x : aae44312 3e06f538 972982e3 b359e08c 08100601
80430b40 0000004c 40c1f273
08/10/29 13:23:26 0x : 910afa1e a154b678 d8c22b3a 5c199401 afd2babc
1166da21 f0c1dbc9 13aa8d4c
08/10/29 13:23:26 0x : 171c7eec 4b5093c4 315e56ff
08/10/29 13:23:26 DB : phase1 found
08/10/29 13:23:26 DB : phase1 ref increment ( ref count = 4, obj count = 1 )
08/10/29 13:23:26 ii : processing config packet ( 76 bytes )
08/10/29 13:23:26 DB : config found
08/10/29 13:23:26 DB : config ref increment ( ref count = 2, obj count = 1 )
08/10/29 13:23:26 == : new config iv ( 16 bytes )
08/10/29 13:23:26 0x : f120a22a 20f48056 57a41c21 db530aa7
08/10/29 13:23:26 =< : cookies aae443123e06f538:972982e3b359e08c
08/10/29 13:23:26 =< : message 80430b40
08/10/29 13:23:26 =< : decrypt iv ( 16 bytes )
08/10/29 13:23:26 0x : f120a22a 20f48056 57a41c21 db530aa7
08/10/29 13:23:26 == : decrypt packet ( 76 bytes )
08/10/29 13:23:26 0x : aae44312 3e06f538 972982e3 b359e08c 08100601
80430b40 0000004c 0e000014
08/10/29 13:23:26 0x : f3986b74 18005b3b 46701047 3be01d59 0000000c
03000000 80140001 00000000
08/10/29 13:23:26 0x : 00000000 00000000 00000000
08/10/29 13:23:26 <= : trimmed packet padding ( 16 bytes )
08/10/29 13:23:26 <= : stored iv ( 16 bytes )
08/10/29 13:23:26 0x : 13aa8d4c 171c7eec 4b5093c4 315e56ff
08/10/29 13:23:26 << : hash payload
08/10/29 13:23:26 << : attribute payload
08/10/29 13:23:26 == : configure hash_i ( computed ) ( 16 bytes )
08/10/29 13:23:26 0x : f3986b74 18005b3b 46701047 3be01d59
08/10/29 13:23:26 == : configure hash_c ( computed ) ( 16 bytes )
08/10/29 13:23:26 0x : f3986b74 18005b3b 46701047 3be01d59
08/10/29 13:23:26 ii : configure hash verified
08/10/29 13:23:26 !! : config message type is invalid for pull config
08/10/29 13:23:26 DB : config ref decrement ( ref count = 1, obj count = 1 )
08/10/29 13:23:26 DB : phase1 soft event canceled ( ref count = 3 )
08/10/29 13:23:26 DB : phase1 hard event canceled ( ref count = 2 )
08/10/29 13:23:26 DB : phase1 dead event canceled ( ref count = 1 )
08/10/29 13:23:26 ii : sending peer DELETE message
08/10/29 13:23:26 ii : - 172.17.1.129:4500 -> 67.152.82.163:4500
08/10/29 13:23:26 ii : - isakmp spi = aae443123e06f538:972982e3b359e08c
08/10/29 13:23:26 ii : - data size 0
08/10/29 13:23:26 >> : hash payload
08/10/29 13:23:26 >> : delete payload
08/10/29 13:23:26 == : new informational hash ( 16 bytes )
08/10/29 13:23:26 0x : f33e954f 6e6b8385 5bd89b61 185a25f6
08/10/29 13:23:26 == : new informational iv ( 16 bytes )
08/10/29 13:23:26 0x : 889ec3d7 288a8980 9430440c bc9e4411
08/10/29 13:23:26 >= : cookies aae443123e06f538:972982e3b359e08c
08/10/29 13:23:26 >= : message cc49133a
08/10/29 13:23:26 >= : encrypt iv ( 16 bytes )
08/10/29 13:23:26 0x : 889ec3d7 288a8980 9430440c bc9e4411
08/10/29 13:23:26 == : encrypt packet ( 76 bytes )
08/10/29 13:23:26 0x : aae44312 3e06f538 972982e3 b359e08c 08100501
cc49133a 0000004c 0c000014
08/10/29 13:23:26 0x : f33e954f 6e6b8385 5bd89b61 185a25f6 0000001c
00000001 01100001 aae44312
08/10/29 13:23:26 0x : 3e06f538 972982e3 b359e08c
08/10/29 13:23:26 == : stored iv ( 16 bytes )
08/10/29 13:23:26 0x : 17a1bb3f 43b8bb20 5c489fbc 5118d5da
08/10/29 13:23:26 -> : send NAT-T:IKE packet 172.17.1.129:4500 ->
67.152.82.163:4500 ( 108 bytes )
08/10/29 13:23:26 0x : 4500006c a6840000 4011902f ac110181 439852a3
11941194 0058923a 00000000
08/10/29 13:23:26 0x : aae44312 3e06f538 972982e3 b359e08c 08100501
cc49133a 0000004c dc69b174
08/10/29 13:23:26 0x : 73e88f0b e97f03ab 2f335b5b f629bb69 09b91bf4
cc66d7f4 3bcf9559 17a1bb3f
08/10/29 13:23:26 0x : 43b8bb20 5c489fbc 5118d5da
08/10/29 13:23:26 DB : config ref increment ( ref count = 2, obj count = 1 )
08/10/29 13:23:26 DB : config resend event canceled ( ref count = 1 )
08/10/29 13:23:26 DB : config deleted ( obj count = 0 )
08/10/29 13:23:26 DB : tunnel ref decrement ( ref count = 5, obj count = 1 )
08/10/29 13:23:26 ii : phase1 removal before expire time
08/10/29 13:23:26 DB : phase1 deleted ( obj count = 0 )
08/10/29 13:23:26 DB : tunnel ref decrement ( ref count = 4, obj count = 1 )
08/10/29 13:23:26 DB : tunnel dpd event canceled ( ref count = 3 )
08/10/29 13:23:26 DB : tunnel natt event canceled ( ref count = 2 )
08/10/29 13:23:26 DB : tunnel stats event canceled ( ref count = 1 )
08/10/29 13:23:26 DB : removing tunnel config references
08/10/29 13:23:26 DB : removing tunnel phase2 references
08/10/29 13:23:26 DB : removing tunnel phase1 references
08/10/29 13:23:26 DB : tunnel deleted ( obj count = 0 )
08/10/29 13:23:27 DB : peer ref decrement ( ref count = 1, obj count = 1 )
08/10/29 13:23:27 DB : removing all peer tunnel refrences
08/10/29 13:23:27 DB : peer deleted ( obj count = 0 )
08/10/29 13:23:27 ii : ipc client process thread exit ...
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.shrew.net/pipermail/vpn-help/attachments/20081029/cb921380/attachment-0001.html>
More information about the vpn-help
mailing list