09/10/16 13:08:16 ## : IKE Daemon, ver 2.2.0
09/10/16 13:08:16 ## : Copyright 2008 Shrew Soft Inc.
09/10/16 13:08:16 ## : This product linked OpenSSL 0.9.8h 28 May 2008
09/10/16 13:08:16 ii : opened 'C:\Programme\ShrewSoft\VPN Client\debug\iked.log'
09/10/16 13:08:16 ii : rebuilding vnet device list ...
09/10/16 13:08:16 ii : device ROOT\VNET\0000 disabled
09/10/16 13:08:16 ii : network process thread begin ...
09/10/16 13:08:16 ii : pfkey process thread begin ...
09/10/16 13:08:16 ii : ipc server process thread begin ...
09/10/16 13:08:19 !! : unable to connect to pfkey interface
09/10/16 13:08:27 ii : ipc client process thread begin ...
09/10/16 13:08:27 <A : peer config add message
09/10/16 13:08:27 <A : proposal config message
09/10/16 13:08:27 <A : proposal config message
09/10/16 13:08:27 <A : client config message
09/10/16 13:08:27 <A : xauth username message
09/10/16 13:08:27 <A : xauth password message
09/10/16 13:08:27 <A : local id '<group>' message
09/10/16 13:08:27 <A : preshared key message
09/10/16 13:08:27 <A : peer tunnel enable message
09/10/16 13:08:27 DB : peer added ( obj count = 1 )
09/10/16 13:08:27 ii : local address 192.168.176.178 selected for peer
09/10/16 13:08:27 DB : tunnel added ( obj count = 1 )
09/10/16 13:08:27 DB : new phase1 ( ISAKMP initiator )
09/10/16 13:08:27 DB : exchange type is aggressive
09/10/16 13:08:27 DB : 192.168.176.178:500 <-> <cisco-ip>:500
09/10/16 13:08:27 DB : 307c150f1ac09ca6:0000000000000000
09/10/16 13:08:27 DB : phase1 added ( obj count = 1 )
09/10/16 13:08:27 >> : security association payload
09/10/16 13:08:27 >> : - proposal #1 payload 
09/10/16 13:08:27 >> : -- transform #1 payload 
09/10/16 13:08:27 >> : -- transform #2 payload 
09/10/16 13:08:27 >> : -- transform #3 payload 
09/10/16 13:08:27 >> : -- transform #4 payload 
09/10/16 13:08:27 >> : -- transform #5 payload 
09/10/16 13:08:27 >> : -- transform #6 payload 
09/10/16 13:08:27 >> : -- transform #7 payload 
09/10/16 13:08:27 >> : -- transform #8 payload 
09/10/16 13:08:27 >> : -- transform #9 payload 
09/10/16 13:08:27 >> : -- transform #10 payload 
09/10/16 13:08:27 >> : -- transform #11 payload 
09/10/16 13:08:27 >> : -- transform #12 payload 
09/10/16 13:08:27 >> : -- transform #13 payload 
09/10/16 13:08:27 >> : -- transform #14 payload 
09/10/16 13:08:27 >> : -- transform #15 payload 
09/10/16 13:08:27 >> : -- transform #16 payload 
09/10/16 13:08:27 >> : -- transform #17 payload 
09/10/16 13:08:27 >> : -- transform #18 payload 
09/10/16 13:08:27 >> : key exchange payload
09/10/16 13:08:27 >> : nonce payload
09/10/16 13:08:27 >> : identification payload
09/10/16 13:08:27 >> : vendor id payload
09/10/16 13:08:27 ii : local supports XAUTH
09/10/16 13:08:27 >> : vendor id payload
09/10/16 13:08:27 ii : local supports nat-t ( draft v00 )
09/10/16 13:08:27 >> : vendor id payload
09/10/16 13:08:27 ii : local supports nat-t ( draft v01 )
09/10/16 13:08:27 >> : vendor id payload
09/10/16 13:08:27 ii : local supports nat-t ( draft v02 )
09/10/16 13:08:27 >> : vendor id payload
09/10/16 13:08:27 ii : local supports nat-t ( draft v03 )
09/10/16 13:08:27 >> : vendor id payload
09/10/16 13:08:27 ii : local supports nat-t ( rfc )
09/10/16 13:08:27 >> : vendor id payload
09/10/16 13:08:27 >> : vendor id payload
09/10/16 13:08:27 ii : local supports DPDv1
09/10/16 13:08:27 >> : vendor id payload
09/10/16 13:08:27 ii : local is SHREW SOFT compatible
09/10/16 13:08:27 >> : vendor id payload
09/10/16 13:08:27 ii : local is NETSCREEN compatible
09/10/16 13:08:27 >> : vendor id payload
09/10/16 13:08:27 ii : local is SIDEWINDER compatible
09/10/16 13:08:27 >> : vendor id payload
09/10/16 13:08:27 ii : local is CISCO UNITY compatible
09/10/16 13:08:27 >= : cookies 307c150f1ac09ca6:0000000000000000
09/10/16 13:08:27 >= : message 00000000
09/10/16 13:08:27 -> : send IKE packet 192.168.176.178:500 -> <cisco-ip>:500 ( 1184 bytes )
09/10/16 13:08:27 DB : phase1 resend event scheduled ( ref count = 2 )
09/10/16 13:08:28 <- : recv IKE packet <cisco-ip>:500 -> 192.168.176.178:500 ( 448 bytes )
09/10/16 13:08:28 DB : phase1 found
09/10/16 13:08:28 ii : processing phase1 packet ( 448 bytes )
09/10/16 13:08:28 =< : cookies 307c150f1ac09ca6:0334d93b1203f840
09/10/16 13:08:28 =< : message 00000000
09/10/16 13:08:28 << : security association payload
09/10/16 13:08:28 << : - propsal #1 payload 
09/10/16 13:08:28 << : -- transform #13 payload 
09/10/16 13:08:28 ii : unmatched isakmp proposal/transform
09/10/16 13:08:28 ii : cipher type ( 3des != aes )
09/10/16 13:08:28 ii : unmatched isakmp proposal/transform
09/10/16 13:08:28 ii : cipher type ( 3des != aes )
09/10/16 13:08:28 ii : unmatched isakmp proposal/transform
09/10/16 13:08:28 ii : cipher type ( 3des != aes )
09/10/16 13:08:28 ii : unmatched isakmp proposal/transform
09/10/16 13:08:28 ii : cipher type ( 3des != aes )
09/10/16 13:08:28 ii : unmatched isakmp proposal/transform
09/10/16 13:08:28 ii : cipher type ( 3des != aes )
09/10/16 13:08:28 ii : unmatched isakmp proposal/transform
09/10/16 13:08:28 ii : cipher type ( 3des != aes )
09/10/16 13:08:28 ii : unmatched isakmp proposal/transform
09/10/16 13:08:28 ii : cipher type ( 3des != blowfish )
09/10/16 13:08:28 ii : unmatched isakmp proposal/transform
09/10/16 13:08:28 ii : cipher type ( 3des != blowfish )
09/10/16 13:08:28 ii : unmatched isakmp proposal/transform
09/10/16 13:08:28 ii : cipher type ( 3des != blowfish )
09/10/16 13:08:28 ii : unmatched isakmp proposal/transform
09/10/16 13:08:28 ii : cipher type ( 3des != blowfish )
09/10/16 13:08:28 ii : unmatched isakmp proposal/transform
09/10/16 13:08:28 ii : cipher type ( 3des != blowfish )
09/10/16 13:08:28 ii : unmatched isakmp proposal/transform
09/10/16 13:08:28 ii : cipher type ( 3des != blowfish )
09/10/16 13:08:28 ii : matched isakmp proposal #1 transform #13
09/10/16 13:08:28 ii : - transform    = ike
09/10/16 13:08:28 ii : - cipher type  = 3des
09/10/16 13:08:28 ii : - key length   = default
09/10/16 13:08:28 ii : - hash type    = md5
09/10/16 13:08:28 ii : - dh group     = modp-1024
09/10/16 13:08:28 ii : - auth type    = xauth-initiator-psk
09/10/16 13:08:28 ii : - life seconds = 86400
09/10/16 13:08:28 ii : - life kbytes  = 0
09/10/16 13:08:28 << : key exchange payload
09/10/16 13:08:28 << : nonce payload
09/10/16 13:08:28 << : identification payload
09/10/16 13:08:28 ii : phase1 id match ( natt prevents ip match )
09/10/16 13:08:28 ii : received = ipv4-host <cisco-ip>
09/10/16 13:08:28 << : hash payload
09/10/16 13:08:28 << : vendor id payload
09/10/16 13:08:28 ii : peer is CISCO UNITY compatible
09/10/16 13:08:28 << : vendor id payload
09/10/16 13:08:28 ii : peer supports XAUTH
09/10/16 13:08:28 << : vendor id payload
09/10/16 13:08:28 ii : peer supports DPDv1
09/10/16 13:08:28 << : vendor id payload
09/10/16 13:08:28 ii : peer supports nat-t ( draft v02 )
09/10/16 13:08:28 << : nat discovery payload
09/10/16 13:08:28 << : nat discovery payload
09/10/16 13:08:28 << : vendor id payload
09/10/16 13:08:28 ii : unknown vendor id ( 20 bytes )
09/10/16 13:08:28 0x : 4048b7d5 6ebce885 25e7de7f 00d6c2d3 c0000000
09/10/16 13:08:28 << : vendor id payload
09/10/16 13:08:28 ii : unknown vendor id ( 16 bytes )
09/10/16 13:08:28 0x : f6f37e26 1202f840 086a9b4a 91a6d8ae
09/10/16 13:08:28 << : vendor id payload
09/10/16 13:08:28 ii : unknown vendor id ( 16 bytes )
09/10/16 13:08:28 0x : 1f07f70e aa6514d3 b0fa9654 2a500407
09/10/16 13:08:28 ii : nat discovery - local address is translated
09/10/16 13:08:28 ii : switching to src nat-t udp port 4500
09/10/16 13:08:28 ii : switching to dst nat-t udp port 4500
09/10/16 13:08:28 == : DH shared secret ( 128 bytes )
09/10/16 13:08:28 == : SETKEYID ( 16 bytes )
09/10/16 13:08:28 == : SETKEYID_d ( 16 bytes )
09/10/16 13:08:28 == : SETKEYID_a ( 16 bytes )
09/10/16 13:08:28 == : SETKEYID_e ( 16 bytes )
09/10/16 13:08:28 == : cipher key ( 32 bytes )
09/10/16 13:08:28 == : cipher iv ( 8 bytes )
09/10/16 13:08:28 == : phase1 hash_i ( computed ) ( 16 bytes )
09/10/16 13:08:28 >> : hash payload
09/10/16 13:08:28 >> : nat discovery payload
09/10/16 13:08:28 >> : nat discovery payload
09/10/16 13:08:28 >= : cookies 307c150f1ac09ca6:0334d93b1203f840
09/10/16 13:08:28 >= : message 00000000
09/10/16 13:08:28 >= : encrypt iv ( 8 bytes )
09/10/16 13:08:28 == : encrypt packet ( 88 bytes )
09/10/16 13:08:28 == : stored iv ( 8 bytes )
09/10/16 13:08:28 DB : phase1 resend event canceled ( ref count = 1 )
09/10/16 13:08:28 -> : send NAT-T:IKE packet 192.168.176.178:4500 -> <cisco-ip>:4500 ( 124 bytes )
09/10/16 13:08:28 == : phase1 hash_r ( computed ) ( 16 bytes )
09/10/16 13:08:28 == : phase1 hash_r ( received ) ( 16 bytes )
09/10/16 13:08:28 ii : phase1 sa established
09/10/16 13:08:28 ii : <cisco-ip>:4500 <-> 192.168.176.178:4500
09/10/16 13:08:28 ii : 307c150f1ac09ca6:334d93b1203f840
09/10/16 13:08:28 ii : sending peer INITIAL-CONTACT notification
09/10/16 13:08:28 ii : - 192.168.176.178:4500 -> <cisco-ip>:4500
09/10/16 13:08:28 ii : - isakmp spi = 307c150f1ac09ca6:0334d93b1203f840
09/10/16 13:08:28 ii : - data size 0
09/10/16 13:08:28 >> : hash payload
09/10/16 13:08:28 >> : notification payload
09/10/16 13:08:28 == : new informational hash ( 16 bytes )
09/10/16 13:08:28 == : new informational iv ( 8 bytes )
09/10/16 13:08:28 >= : cookies 307c150f1ac09ca6:0334d93b1203f840
09/10/16 13:08:28 >= : message 6e191f08
09/10/16 13:08:28 >= : encrypt iv ( 8 bytes )
09/10/16 13:08:28 == : encrypt packet ( 76 bytes )
09/10/16 13:08:28 == : stored iv ( 8 bytes )
09/10/16 13:08:28 -> : send NAT-T:IKE packet 192.168.176.178:4500 -> <cisco-ip>:4500 ( 108 bytes )
09/10/16 13:08:28 DB : phase2 not found
09/10/16 13:08:28 <- : recv NAT-T:IKE packet <cisco-ip>:4500 -> 192.168.176.178:4500 ( 100 bytes )
09/10/16 13:08:28 DB : phase1 found
09/10/16 13:08:28 ii : processing config packet ( 100 bytes )
09/10/16 13:08:28 DB : config not found
09/10/16 13:08:28 DB : config added ( obj count = 1 )
09/10/16 13:08:28 == : new config iv ( 8 bytes )
09/10/16 13:08:28 =< : cookies 307c150f1ac09ca6:0334d93b1203f840
09/10/16 13:08:28 =< : message 2864bb42
09/10/16 13:08:28 =< : decrypt iv ( 8 bytes )
09/10/16 13:08:28 == : decrypt packet ( 100 bytes )
09/10/16 13:08:28 <= : stored iv ( 8 bytes )
09/10/16 13:08:28 << : hash payload
09/10/16 13:08:28 << : attribute payload
09/10/16 13:08:28 == : configure hash_i ( computed ) ( 16 bytes )
09/10/16 13:08:28 == : configure hash_c ( computed ) ( 16 bytes )
09/10/16 13:08:28 ii : configure hash verified
09/10/16 13:08:28 ii : - xauth authentication type
09/10/16 13:08:28 ii : - xauth username
09/10/16 13:08:28 ii : - xauth password
09/10/16 13:08:28 ii : received basic xauth request - Enter Username and Password.
09/10/16 13:08:28 ii : - standard xauth username
09/10/16 13:08:28 ii : - standard xauth basic password
09/10/16 13:08:28 ii : sending xauth response for <user>
09/10/16 13:08:28 >> : hash payload
09/10/16 13:08:28 >> : attribute payload
09/10/16 13:08:28 == : new configure hash ( 16 bytes )
09/10/16 13:08:28 >= : cookies 307c150f1ac09ca6:0334d93b1203f840
09/10/16 13:08:28 >= : message 2864bb42
09/10/16 13:08:28 >= : encrypt iv ( 8 bytes )
09/10/16 13:08:28 == : encrypt packet ( 80 bytes )
09/10/16 13:08:28 == : stored iv ( 8 bytes )
09/10/16 13:08:28 -> : send NAT-T:IKE packet 192.168.176.178:4500 -> <cisco-ip>:4500 ( 116 bytes )
09/10/16 13:08:28 DB : config resend event scheduled ( ref count = 2 )
09/10/16 13:08:28 <- : recv NAT-T:IKE packet <cisco-ip>:4500 -> 192.168.176.178:4500 ( 448 bytes )
09/10/16 13:08:28 DB : phase1 found
09/10/16 13:08:28 ii : processing phase1 packet ( 448 bytes )
09/10/16 13:08:28 !! : phase1 packet ignored, resending last packet ( phase1 already mature )
09/10/16 13:08:28 -> : resend 1 phase1 packet(s) [0/2] 192.168.176.178:4500 -> <cisco-ip>:4500
09/10/16 13:08:28 <- : recv NAT-T:IKE packet <cisco-ip>:4500 -> 192.168.176.178:4500 ( 100 bytes )
09/10/16 13:08:28 DB : phase1 found
09/10/16 13:08:28 ii : processing config packet ( 100 bytes )
09/10/16 13:08:28 DB : config found
09/10/16 13:08:28 =< : cookies 307c150f1ac09ca6:0334d93b1203f840
09/10/16 13:08:28 =< : message 2864bb42
09/10/16 13:08:28 =< : decrypt iv ( 8 bytes )
09/10/16 13:08:28 == : decrypt packet ( 100 bytes )
09/10/16 13:08:28 !! : validate packet failed ( reserved value is non-null )
09/10/16 13:08:28 !! : config packet ignored ( packet decryption error )
09/10/16 13:08:28 <- : recv NAT-T:IKE packet <cisco-ip>:4500 -> 192.168.176.178:4500 ( 448 bytes )
09/10/16 13:08:28 DB : phase1 found
09/10/16 13:08:28 ii : processing phase1 packet ( 448 bytes )
09/10/16 13:08:28 !! : phase1 packet ignored, resending last packet ( phase1 already mature )
09/10/16 13:08:28 -> : resend 1 phase1 packet(s) [1/2] 192.168.176.178:4500 -> <cisco-ip>:4500
09/10/16 13:08:28 <- : recv NAT-T:IKE packet <cisco-ip>:4500 -> 192.168.176.178:4500 ( 448 bytes )
09/10/16 13:08:28 DB : phase1 found
09/10/16 13:08:28 ii : processing phase1 packet ( 448 bytes )
09/10/16 13:08:28 !! : phase1 packet ignored, resending last packet ( phase1 already mature )
09/10/16 13:08:28 -> : resend 1 phase1 packet(s) [2/2] 192.168.176.178:4500 -> <cisco-ip>:4500
09/10/16 13:08:28 <- : recv NAT-T:IKE packet <cisco-ip>:4500 -> 192.168.176.178:4500 ( 76 bytes )
09/10/16 13:08:28 DB : phase1 found
09/10/16 13:08:28 ii : processing informational packet ( 76 bytes )
09/10/16 13:08:28 == : new informational iv ( 8 bytes )
09/10/16 13:08:28 =< : cookies 307c150f1ac09ca6:0334d93b1203f840
09/10/16 13:08:28 =< : message eb7b9aac
09/10/16 13:08:28 =< : decrypt iv ( 8 bytes )
09/10/16 13:08:28 == : decrypt packet ( 76 bytes )
09/10/16 13:08:28 <= : stored iv ( 8 bytes )
09/10/16 13:08:28 << : hash payload
09/10/16 13:08:28 << : delete payload
09/10/16 13:08:28 == : informational hash_i ( computed ) ( 16 bytes )
09/10/16 13:08:28 == : informational hash_c ( received ) ( 16 bytes )
09/10/16 13:08:28 ii : informational hash verified
09/10/16 13:08:28 ii : received peer DELETE message
09/10/16 13:08:28 ii : - <cisco-ip>:4500 -> 192.168.176.178:4500
09/10/16 13:08:28 ii : - isakmp spi = 307c150f1ac09ca6:0334d93b1203f840
09/10/16 13:08:28 DB : phase1 found
09/10/16 13:08:28 ii : cleanup, marked phase1 307c150f1ac09ca6:0334d93b1203f840 for removal
09/10/16 13:08:28 DB : phase1 soft event canceled ( ref count = 4 )
09/10/16 13:08:28 DB : phase1 hard event canceled ( ref count = 3 )
09/10/16 13:08:28 DB : phase1 dead event canceled ( ref count = 2 )
09/10/16 13:08:28 DB : config resend event canceled ( ref count = 1 )
09/10/16 13:08:28 DB : config deleted ( obj count = 0 )
09/10/16 13:08:28 ii : phase1 removal before expire time
09/10/16 13:08:28 DB : phase1 not found
09/10/16 13:08:28 DB : phase1 deleted ( obj count = 0 )
09/10/16 13:08:28 DB : tunnel dpd event canceled ( ref count = 2 )
09/10/16 13:08:28 DB : tunnel natt event canceled ( ref count = 1 )
09/10/16 13:08:28 DB : removing tunnel config references
09/10/16 13:08:28 DB : removing tunnel phase2 references
09/10/16 13:08:28 DB : removing tunnel phase1 references
09/10/16 13:08:28 DB : tunnel deleted ( obj count = 0 )
09/10/16 13:08:28 DB : removing all peer tunnel refrences
09/10/16 13:08:28 DB : peer deleted ( obj count = 0 )
09/10/16 13:08:28 ii : ipc client process thread exit ...