09/11/05 08:17:26 ## : IKE Daemon, ver 2.1.0
09/11/05 08:17:26 ## : Copyright 2008 Shrew Soft Inc.
09/11/05 08:17:26 ## : This product linked OpenSSL 0.9.8h 28 May 2008
09/11/05 08:17:26 ii : opened 'C:\Program Files\ShrewSoft\VPN Client\debug\iked.log'
09/11/05 08:17:26 ii : opened 'C:\Program Files\ShrewSoft\VPN Client/debug/dump-ike-decrypt.cap'
09/11/05 08:17:26 ii : rebuilding vnet device list ...
09/11/05 08:17:26 ii : device ROOT\VNET\0000 disabled
09/11/05 08:17:26 ii : network process thread begin ...
09/11/05 08:17:26 ii : pfkey process thread begin ...
09/11/05 08:17:26 ii : ipc server process thread begin ...
09/11/05 08:17:47 ii : ipc client process thread begin ...
09/11/05 08:17:47 <A : peer config add message
09/11/05 08:17:47 DB : peer added ( obj count = 1 )
09/11/05 08:17:47 ii : local address 192.168.1.107 selected for peer
09/11/05 08:17:47 DB : tunnel added ( obj count = 1 )
09/11/05 08:17:47 <A : proposal config message
09/11/05 08:17:47 <A : proposal config message
09/11/05 08:17:47 <A : client config message
09/11/05 08:17:47 <A : xauth username message
09/11/05 08:17:47 <A : xauth password message
09/11/05 08:17:47 <A : local id 'vpn' message
09/11/05 08:17:47 <A : preshared key message
09/11/05 08:17:47 <A : peer tunnel enable message
09/11/05 08:17:47 DB : new phase1 ( ISAKMP initiator )
09/11/05 08:17:47 DB : exchange type is aggressive
09/11/05 08:17:47 DB : 192.168.1.107:500 <-> 192.18.32.145:500
09/11/05 08:17:47 DB : 1b4c735ad5eb484c:0000000000000000
09/11/05 08:17:47 DB : phase1 added ( obj count = 1 )
09/11/05 08:17:47 >> : security association payload
09/11/05 08:17:47 >> : - proposal #1 payload 
09/11/05 08:17:47 >> : -- transform #1 payload 
09/11/05 08:17:47 >> : -- transform #2 payload 
09/11/05 08:17:47 >> : -- transform #3 payload 
09/11/05 08:17:47 >> : -- transform #4 payload 
09/11/05 08:17:47 >> : -- transform #5 payload 
09/11/05 08:17:47 >> : -- transform #6 payload 
09/11/05 08:17:47 >> : -- transform #7 payload 
09/11/05 08:17:47 >> : -- transform #8 payload 
09/11/05 08:17:47 >> : -- transform #9 payload 
09/11/05 08:17:47 >> : -- transform #10 payload 
09/11/05 08:17:47 >> : -- transform #11 payload 
09/11/05 08:17:47 >> : -- transform #12 payload 
09/11/05 08:17:47 >> : -- transform #13 payload 
09/11/05 08:17:47 >> : -- transform #14 payload 
09/11/05 08:17:47 >> : -- transform #15 payload 
09/11/05 08:17:47 >> : -- transform #16 payload 
09/11/05 08:17:47 >> : -- transform #17 payload 
09/11/05 08:17:47 >> : -- transform #18 payload 
09/11/05 08:17:47 >> : key exchange payload
09/11/05 08:17:47 >> : nonce payload
09/11/05 08:17:47 >> : identification payload
09/11/05 08:17:47 >> : vendor id payload
09/11/05 08:17:47 ii : local supports XAUTH
09/11/05 08:17:47 >> : vendor id payload
09/11/05 08:17:47 ii : local supports nat-t ( draft v00 )
09/11/05 08:17:47 >> : vendor id payload
09/11/05 08:17:47 ii : local supports nat-t ( draft v01 )
09/11/05 08:17:47 >> : vendor id payload
09/11/05 08:17:47 ii : local supports nat-t ( draft v02 )
09/11/05 08:17:47 >> : vendor id payload
09/11/05 08:17:47 ii : local supports nat-t ( draft v03 )
09/11/05 08:17:47 >> : vendor id payload
09/11/05 08:17:47 ii : local supports nat-t ( rfc )
09/11/05 08:17:47 >> : vendor id payload
09/11/05 08:17:47 ii : local supports DPDv1
09/11/05 08:17:47 >> : vendor id payload
09/11/05 08:17:47 ii : local is SHREW SOFT compatible
09/11/05 08:17:47 >> : vendor id payload
09/11/05 08:17:47 ii : local is NETSCREEN compatible
09/11/05 08:17:47 >> : vendor id payload
09/11/05 08:17:47 ii : local is SIDEWINDER compatible
09/11/05 08:17:47 >> : vendor id payload
09/11/05 08:17:47 ii : local is CISCO UNITY compatible
09/11/05 08:17:47 >= : cookies 1b4c735ad5eb484c:0000000000000000
09/11/05 08:17:47 >= : message 00000000
09/11/05 08:17:47 -> : send IKE packet 192.168.1.107:500 -> 192.18.32.145:500 ( 1155 bytes )
09/11/05 08:17:47 DB : phase1 resend event scheduled ( ref count = 2 )
09/11/05 08:17:47 <- : recv IKE packet 192.18.32.145:500 -> 192.168.1.107:500 ( 448 bytes )
09/11/05 08:17:47 DB : phase1 found
09/11/05 08:17:47 ii : processing phase1 packet ( 448 bytes )
09/11/05 08:17:47 =< : cookies 1b4c735ad5eb484c:da90a0043753e5c6
09/11/05 08:17:47 =< : message 00000000
09/11/05 08:17:47 << : security association payload
09/11/05 08:17:47 << : - propsal #1 payload 
09/11/05 08:17:47 << : -- transform #13 payload 
09/11/05 08:17:47 ii : unmatched isakmp proposal/transform
09/11/05 08:17:47 ii : cipher type ( 3des != aes )
09/11/05 08:17:47 ii : unmatched isakmp proposal/transform
09/11/05 08:17:47 ii : cipher type ( 3des != aes )
09/11/05 08:17:47 ii : unmatched isakmp proposal/transform
09/11/05 08:17:47 ii : cipher type ( 3des != aes )
09/11/05 08:17:47 ii : unmatched isakmp proposal/transform
09/11/05 08:17:47 ii : cipher type ( 3des != aes )
09/11/05 08:17:47 ii : unmatched isakmp proposal/transform
09/11/05 08:17:47 ii : cipher type ( 3des != aes )
09/11/05 08:17:47 ii : unmatched isakmp proposal/transform
09/11/05 08:17:47 ii : cipher type ( 3des != aes )
09/11/05 08:17:47 ii : unmatched isakmp proposal/transform
09/11/05 08:17:47 ii : cipher type ( 3des != blowfish )
09/11/05 08:17:47 ii : unmatched isakmp proposal/transform
09/11/05 08:17:47 ii : cipher type ( 3des != blowfish )
09/11/05 08:17:47 ii : unmatched isakmp proposal/transform
09/11/05 08:17:47 ii : cipher type ( 3des != blowfish )
09/11/05 08:17:47 ii : unmatched isakmp proposal/transform
09/11/05 08:17:47 ii : cipher type ( 3des != blowfish )
09/11/05 08:17:47 ii : unmatched isakmp proposal/transform
09/11/05 08:17:47 ii : cipher type ( 3des != blowfish )
09/11/05 08:17:47 ii : unmatched isakmp proposal/transform
09/11/05 08:17:47 ii : cipher type ( 3des != blowfish )
09/11/05 08:17:47 ii : matched isakmp proposal #1 transform #13
09/11/05 08:17:47 ii : - transform    = ike
09/11/05 08:17:47 ii : - cipher type  = 3des
09/11/05 08:17:47 ii : - key length   = default
09/11/05 08:17:47 ii : - hash type    = md5
09/11/05 08:17:47 ii : - dh group     = modp-1024
09/11/05 08:17:47 ii : - auth type    = xauth-initiator-psk
09/11/05 08:17:47 ii : - life seconds = 86400
09/11/05 08:17:47 ii : - life kbytes  = 0
09/11/05 08:17:47 << : key exchange payload
09/11/05 08:17:47 << : nonce payload
09/11/05 08:17:47 << : identification payload
09/11/05 08:17:47 ii : phase1 id target is any
09/11/05 08:17:47 ii : phase1 id match 
09/11/05 08:17:47 ii : received = ipv4-host 192.18.32.145
09/11/05 08:17:47 << : hash payload
09/11/05 08:17:47 << : vendor id payload
09/11/05 08:17:47 ii : peer is CISCO UNITY compatible
09/11/05 08:17:47 << : vendor id payload
09/11/05 08:17:47 ii : peer supports XAUTH
09/11/05 08:17:47 << : vendor id payload
09/11/05 08:17:47 ii : peer supports DPDv1
09/11/05 08:17:47 << : vendor id payload
09/11/05 08:17:47 ii : peer supports nat-t ( draft v02 )
09/11/05 08:17:47 << : nat discovery payload
09/11/05 08:17:47 << : nat discovery payload
09/11/05 08:17:47 << : vendor id payload
09/11/05 08:17:47 ii : unknown vendor id ( 20 bytes )
09/11/05 08:17:47 0x : 4048b7d5 6ebce885 25e7de7f 00d6c2d3 c0000000
09/11/05 08:17:47 << : vendor id payload
09/11/05 08:17:47 ii : unknown vendor id ( 16 bytes )
09/11/05 08:17:47 0x : 2f570719 3752e5c6 f5165cdc 0bcc0eff
09/11/05 08:17:47 << : vendor id payload
09/11/05 08:17:47 ii : unknown vendor id ( 16 bytes )
09/11/05 08:17:47 0x : 1f07f70e aa6514d3 b0fa9654 2a500407
09/11/05 08:17:47 ii : nat discovery - local address is translated
09/11/05 08:17:47 ii : switching to src nat-t udp port 4500
09/11/05 08:17:47 ii : switching to dst nat-t udp port 4500
09/11/05 08:17:47 == : DH shared secret ( 128 bytes )
09/11/05 08:17:47 == : SETKEYID ( 16 bytes )
09/11/05 08:17:47 == : SETKEYID_d ( 16 bytes )
09/11/05 08:17:47 == : SETKEYID_a ( 16 bytes )
09/11/05 08:17:47 == : SETKEYID_e ( 16 bytes )
09/11/05 08:17:47 == : cipher key ( 32 bytes )
09/11/05 08:17:47 == : cipher iv ( 8 bytes )
09/11/05 08:17:47 == : phase1 hash_i ( computed ) ( 16 bytes )
09/11/05 08:17:47 >> : hash payload
09/11/05 08:17:47 >> : nat discovery payload
09/11/05 08:17:47 >> : nat discovery payload
09/11/05 08:17:47 >= : cookies 1b4c735ad5eb484c:da90a0043753e5c6
09/11/05 08:17:47 >= : message 00000000
09/11/05 08:17:47 >= : encrypt iv ( 8 bytes )
09/11/05 08:17:47 == : encrypt packet ( 88 bytes )
09/11/05 08:17:47 == : stored iv ( 8 bytes )
09/11/05 08:17:47 DB : phase1 resend event canceled ( ref count = 1 )
09/11/05 08:17:47 -> : send NAT-T:IKE packet 192.168.1.107:4500 -> 192.18.32.145:4500 ( 124 bytes )
09/11/05 08:17:47 == : phase1 hash_r ( computed ) ( 16 bytes )
09/11/05 08:17:47 == : phase1 hash_r ( received ) ( 16 bytes )
09/11/05 08:17:47 ii : phase1 sa established
09/11/05 08:17:47 ii : 192.18.32.145:4500 <-> 192.168.1.107:4500
09/11/05 08:17:47 ii : 1b4c735ad5eb484c:da90a0043753e5c6
09/11/05 08:17:47 ii : sending peer INITIAL-CONTACT notification
09/11/05 08:17:47 ii : - 192.168.1.107:4500 -> 192.18.32.145:4500
09/11/05 08:17:47 ii : - isakmp spi = 1b4c735ad5eb484c:da90a0043753e5c6
09/11/05 08:17:47 ii : - data size 0
09/11/05 08:17:47 >> : hash payload
09/11/05 08:17:47 >> : notification payload
09/11/05 08:17:47 == : new informational hash ( 16 bytes )
09/11/05 08:17:47 == : new informational iv ( 8 bytes )
09/11/05 08:17:47 >= : cookies 1b4c735ad5eb484c:da90a0043753e5c6
09/11/05 08:17:47 >= : message df36a9f1
09/11/05 08:17:47 >= : encrypt iv ( 8 bytes )
09/11/05 08:17:47 == : encrypt packet ( 76 bytes )
09/11/05 08:17:47 == : stored iv ( 8 bytes )
09/11/05 08:17:47 -> : send NAT-T:IKE packet 192.168.1.107:4500 -> 192.18.32.145:4500 ( 108 bytes )
09/11/05 08:17:47 DB : phase2 not found
09/11/05 08:17:47 <- : recv NAT-T:IKE packet 192.18.32.145:4500 -> 192.168.1.107:4500 ( 84 bytes )
09/11/05 08:17:47 DB : phase1 found
09/11/05 08:17:47 ii : processing informational packet ( 84 bytes )
09/11/05 08:17:47 == : new informational iv ( 8 bytes )
09/11/05 08:17:47 =< : cookies 1b4c735ad5eb484c:da90a0043753e5c6
09/11/05 08:17:47 =< : message 231f5175
09/11/05 08:17:47 =< : decrypt iv ( 8 bytes )
09/11/05 08:17:47 == : decrypt packet ( 84 bytes )
09/11/05 08:17:47 <= : trimmed packet padding ( 4 bytes )
09/11/05 08:17:47 <= : stored iv ( 8 bytes )
09/11/05 08:17:47 << : hash payload
09/11/05 08:17:47 << : notification payload
09/11/05 08:17:47 == : informational hash_i ( computed ) ( 16 bytes )
09/11/05 08:17:47 == : informational hash_c ( received ) ( 16 bytes )
09/11/05 08:17:47 ii : informational hash verified
09/11/05 08:17:47 ii : received peer UNITY-LOAD-BALANCE notification
09/11/05 08:17:47 ii : - 192.18.32.145:4500 -> 192.168.1.107:4500
09/11/05 08:17:47 ii : - isakmp spi = 1b4c735ad5eb484c:da90a0043753e5c6
09/11/05 08:17:47 ii : - data size 4
09/11/05 08:17:47 ii : UNITY-LOAD-BALANCE requested migration to 192.18.32.148
09/11/05 08:17:47 DB : new phase1 ( ISAKMP initiator )
09/11/05 08:17:47 DB : exchange type is aggressive
09/11/05 08:17:47 DB : 192.168.1.107:4500 <-> 192.18.32.145:4500
09/11/05 08:17:47 DB : 10d873e6c06bf045:0000000000000000
09/11/05 08:17:47 DB : phase1 added ( obj count = 2 )
09/11/05 08:17:47 DB : phase1 soft event canceled ( ref count = 4 )
09/11/05 08:17:47 DB : phase1 hard event canceled ( ref count = 3 )
09/11/05 08:17:47 DB : phase1 dead event canceled ( ref count = 2 )
09/11/05 08:17:47 ii : sending peer DELETE message
09/11/05 08:17:47 ii : - 192.168.1.107:4500 -> 192.18.32.145:4500
09/11/05 08:17:47 ii : - isakmp spi = 1b4c735ad5eb484c:da90a0043753e5c6
09/11/05 08:17:47 ii : - data size 0
09/11/05 08:17:47 >> : hash payload
09/11/05 08:17:47 >> : delete payload
09/11/05 08:17:47 == : new informational hash ( 16 bytes )
09/11/05 08:17:47 == : new informational iv ( 8 bytes )
09/11/05 08:17:47 >= : cookies 1b4c735ad5eb484c:da90a0043753e5c6
09/11/05 08:17:47 >= : message 34ef9c8e
09/11/05 08:17:47 >= : encrypt iv ( 8 bytes )
09/11/05 08:17:47 == : encrypt packet ( 76 bytes )
09/11/05 08:17:47 == : stored iv ( 8 bytes )
09/11/05 08:17:47 -> : send NAT-T:IKE packet 192.168.1.107:4500 -> 192.18.32.145:4500 ( 108 bytes )
09/11/05 08:17:47 ii : phase1 removal before expire time
09/11/05 08:17:47 >> : security association payload
09/11/05 08:17:47 >> : - proposal #1 payload 
09/11/05 08:17:47 >> : -- transform #1 payload 
09/11/05 08:17:47 >> : -- transform #2 payload 
09/11/05 08:17:47 >> : -- transform #3 payload 
09/11/05 08:17:47 >> : -- transform #4 payload 
09/11/05 08:17:47 >> : -- transform #5 payload 
09/11/05 08:17:47 >> : -- transform #6 payload 
09/11/05 08:17:47 >> : -- transform #7 payload 
09/11/05 08:17:47 >> : -- transform #8 payload 
09/11/05 08:17:47 >> : -- transform #9 payload 
09/11/05 08:17:47 >> : -- transform #10 payload 
09/11/05 08:17:47 >> : -- transform #11 payload 
09/11/05 08:17:47 >> : -- transform #12 payload 
09/11/05 08:17:47 >> : -- transform #13 payload 
09/11/05 08:17:47 >> : -- transform #14 payload 
09/11/05 08:17:47 >> : -- transform #15 payload 
09/11/05 08:17:47 >> : -- transform #16 payload 
09/11/05 08:17:47 >> : -- transform #17 payload 
09/11/05 08:17:47 >> : -- transform #18 payload 
09/11/05 08:17:47 >> : key exchange payload
09/11/05 08:17:47 >> : nonce payload
09/11/05 08:17:47 >> : identification payload
09/11/05 08:17:47 >> : vendor id payload
09/11/05 08:17:47 ii : local supports XAUTH
09/11/05 08:17:47 >> : vendor id payload
09/11/05 08:17:47 ii : local supports nat-t ( draft v00 )
09/11/05 08:17:47 >> : vendor id payload
09/11/05 08:17:47 ii : local supports nat-t ( draft v01 )
09/11/05 08:17:47 >> : vendor id payload
09/11/05 08:17:47 ii : local supports nat-t ( draft v02 )
09/11/05 08:17:47 >> : vendor id payload
09/11/05 08:17:47 ii : local supports nat-t ( draft v03 )
09/11/05 08:17:47 >> : vendor id payload
09/11/05 08:17:47 ii : local supports nat-t ( rfc )
09/11/05 08:17:47 >> : vendor id payload
09/11/05 08:17:47 ii : local supports DPDv1
09/11/05 08:17:47 >> : vendor id payload
09/11/05 08:17:47 ii : local is SHREW SOFT compatible
09/11/05 08:17:47 >> : vendor id payload
09/11/05 08:17:47 ii : local is NETSCREEN compatible
09/11/05 08:17:47 >> : vendor id payload
09/11/05 08:17:47 ii : local is SIDEWINDER compatible
09/11/05 08:17:47 >> : vendor id payload
09/11/05 08:17:47 ii : local is CISCO UNITY compatible
09/11/05 08:17:47 >= : cookies 10d873e6c06bf045:0000000000000000
09/11/05 08:17:47 >= : message 00000000
09/11/05 08:17:47 -> : send IKE packet 192.168.1.107:500 -> 192.18.32.148:500 ( 1155 bytes )
09/11/05 08:17:47 DB : phase1 resend event scheduled ( ref count = 2 )
09/11/05 08:17:47 DB : phase1 deleted ( obj count = 1 )
09/11/05 08:17:47 <- : recv IKE packet 192.18.32.148:500 -> 192.168.1.107:500 ( 448 bytes )
09/11/05 08:17:47 DB : phase1 found
09/11/05 08:17:47 ii : processing phase1 packet ( 448 bytes )
09/11/05 08:17:47 =< : cookies 10d873e6c06bf045:c84809a38a2f9ba3
09/11/05 08:17:47 =< : message 00000000
09/11/05 08:17:47 << : security association payload
09/11/05 08:17:47 << : - propsal #1 payload 
09/11/05 08:17:47 << : -- transform #13 payload 
09/11/05 08:17:47 ii : unmatched isakmp proposal/transform
09/11/05 08:17:47 ii : cipher type ( 3des != aes )
09/11/05 08:17:47 ii : unmatched isakmp proposal/transform
09/11/05 08:17:47 ii : cipher type ( 3des != aes )
09/11/05 08:17:47 ii : unmatched isakmp proposal/transform
09/11/05 08:17:47 ii : cipher type ( 3des != aes )
09/11/05 08:17:47 ii : unmatched isakmp proposal/transform
09/11/05 08:17:47 ii : cipher type ( 3des != aes )
09/11/05 08:17:47 ii : unmatched isakmp proposal/transform
09/11/05 08:17:47 ii : cipher type ( 3des != aes )
09/11/05 08:17:47 ii : unmatched isakmp proposal/transform
09/11/05 08:17:47 ii : cipher type ( 3des != aes )
09/11/05 08:17:47 ii : unmatched isakmp proposal/transform
09/11/05 08:17:47 ii : cipher type ( 3des != blowfish )
09/11/05 08:17:47 ii : unmatched isakmp proposal/transform
09/11/05 08:17:47 ii : cipher type ( 3des != blowfish )
09/11/05 08:17:47 ii : unmatched isakmp proposal/transform
09/11/05 08:17:47 ii : cipher type ( 3des != blowfish )
09/11/05 08:17:47 ii : unmatched isakmp proposal/transform
09/11/05 08:17:47 ii : cipher type ( 3des != blowfish )
09/11/05 08:17:47 ii : unmatched isakmp proposal/transform
09/11/05 08:17:47 ii : cipher type ( 3des != blowfish )
09/11/05 08:17:47 ii : unmatched isakmp proposal/transform
09/11/05 08:17:47 ii : cipher type ( 3des != blowfish )
09/11/05 08:17:47 ii : matched isakmp proposal #1 transform #13
09/11/05 08:17:47 ii : - transform    = ike
09/11/05 08:17:47 ii : - cipher type  = 3des
09/11/05 08:17:47 ii : - key length   = default
09/11/05 08:17:47 ii : - hash type    = md5
09/11/05 08:17:47 ii : - dh group     = modp-1024
09/11/05 08:17:47 ii : - auth type    = xauth-initiator-psk
09/11/05 08:17:47 ii : - life seconds = 86400
09/11/05 08:17:47 ii : - life kbytes  = 0
09/11/05 08:17:47 << : key exchange payload
09/11/05 08:17:47 << : nonce payload
09/11/05 08:17:47 << : identification payload
09/11/05 08:17:47 ii : phase1 id target is any
09/11/05 08:17:47 ii : phase1 id match 
09/11/05 08:17:47 ii : received = ipv4-host 192.18.32.148
09/11/05 08:17:47 << : hash payload
09/11/05 08:17:47 << : vendor id payload
09/11/05 08:17:47 ii : peer is CISCO UNITY compatible
09/11/05 08:17:47 << : vendor id payload
09/11/05 08:17:47 ii : peer supports XAUTH
09/11/05 08:17:47 << : vendor id payload
09/11/05 08:17:47 ii : peer supports DPDv1
09/11/05 08:17:47 << : vendor id payload
09/11/05 08:17:47 ii : peer supports nat-t ( draft v02 )
09/11/05 08:17:47 << : nat discovery payload
09/11/05 08:17:47 << : nat discovery payload
09/11/05 08:17:47 << : vendor id payload
09/11/05 08:17:47 ii : unknown vendor id ( 20 bytes )
09/11/05 08:17:47 0x : 4048b7d5 6ebce885 25e7de7f 00d6c2d3 c0000000
09/11/05 08:17:47 << : vendor id payload
09/11/05 08:17:47 ii : unknown vendor id ( 16 bytes )
09/11/05 08:17:47 0x : 3d8faebe 8a2e9ba3 2154040e a49836ca
09/11/05 08:17:47 << : vendor id payload
09/11/05 08:17:47 ii : unknown vendor id ( 16 bytes )
09/11/05 08:17:47 0x : 1f07f70e aa6514d3 b0fa9654 2a500407
09/11/05 08:17:47 ii : nat discovery - local address is translated
09/11/05 08:17:47 ii : switching to src nat-t udp port 4500
09/11/05 08:17:47 ii : switching to dst nat-t udp port 4500
09/11/05 08:17:47 == : DH shared secret ( 128 bytes )
09/11/05 08:17:47 == : SETKEYID ( 16 bytes )
09/11/05 08:17:47 == : SETKEYID_d ( 16 bytes )
09/11/05 08:17:47 == : SETKEYID_a ( 16 bytes )
09/11/05 08:17:47 == : SETKEYID_e ( 16 bytes )
09/11/05 08:17:47 == : cipher key ( 32 bytes )
09/11/05 08:17:47 == : cipher iv ( 8 bytes )
09/11/05 08:17:47 == : phase1 hash_i ( computed ) ( 16 bytes )
09/11/05 08:17:47 >> : hash payload
09/11/05 08:17:47 >> : nat discovery payload
09/11/05 08:17:47 >> : nat discovery payload
09/11/05 08:17:47 >= : cookies 10d873e6c06bf045:c84809a38a2f9ba3
09/11/05 08:17:47 >= : message 00000000
09/11/05 08:17:47 >= : encrypt iv ( 8 bytes )
09/11/05 08:17:47 == : encrypt packet ( 88 bytes )
09/11/05 08:17:47 == : stored iv ( 8 bytes )
09/11/05 08:17:47 DB : phase1 resend event canceled ( ref count = 1 )
09/11/05 08:17:47 -> : send NAT-T:IKE packet 192.168.1.107:4500 -> 192.18.32.148:4500 ( 124 bytes )
09/11/05 08:17:47 == : phase1 hash_r ( computed ) ( 16 bytes )
09/11/05 08:17:47 == : phase1 hash_r ( received ) ( 16 bytes )
09/11/05 08:17:47 ii : phase1 sa established
09/11/05 08:17:47 ii : 192.18.32.148:4500 <-> 192.168.1.107:4500
09/11/05 08:17:47 ii : 10d873e6c06bf045:c84809a38a2f9ba3
09/11/05 08:17:47 ii : sending peer INITIAL-CONTACT notification
09/11/05 08:17:47 ii : - 192.168.1.107:4500 -> 192.18.32.148:4500
09/11/05 08:17:47 ii : - isakmp spi = 10d873e6c06bf045:c84809a38a2f9ba3
09/11/05 08:17:47 ii : - data size 0
09/11/05 08:17:47 >> : hash payload
09/11/05 08:17:47 >> : notification payload
09/11/05 08:17:47 == : new informational hash ( 16 bytes )
09/11/05 08:17:47 == : new informational iv ( 8 bytes )
09/11/05 08:17:47 >= : cookies 10d873e6c06bf045:c84809a38a2f9ba3
09/11/05 08:17:47 >= : message 7da3d6a9
09/11/05 08:17:47 >= : encrypt iv ( 8 bytes )
09/11/05 08:17:47 == : encrypt packet ( 76 bytes )
09/11/05 08:17:47 == : stored iv ( 8 bytes )
09/11/05 08:17:47 -> : send NAT-T:IKE packet 192.168.1.107:4500 -> 192.18.32.148:4500 ( 108 bytes )
09/11/05 08:17:47 DB : phase2 not found
09/11/05 08:17:47 <- : recv NAT-T:IKE packet 192.18.32.148:4500 -> 192.168.1.107:4500 ( 100 bytes )
09/11/05 08:17:47 DB : phase1 found
09/11/05 08:17:47 ii : processing config packet ( 100 bytes )
09/11/05 08:17:47 DB : config not found
09/11/05 08:17:47 DB : config added ( obj count = 1 )
09/11/05 08:17:47 == : new config iv ( 8 bytes )
09/11/05 08:17:47 =< : cookies 10d873e6c06bf045:c84809a38a2f9ba3
09/11/05 08:17:47 =< : message 2fb868d4
09/11/05 08:17:47 =< : decrypt iv ( 8 bytes )
09/11/05 08:17:47 == : decrypt packet ( 100 bytes )
09/11/05 08:17:47 <= : stored iv ( 8 bytes )
09/11/05 08:17:47 << : hash payload
09/11/05 08:17:47 << : attribute payload
09/11/05 08:17:47 == : configure hash_i ( computed ) ( 16 bytes )
09/11/05 08:17:47 == : configure hash_c ( computed ) ( 16 bytes )
09/11/05 08:17:47 ii : configure hash verified
09/11/05 08:17:47 ii : - xauth authentication type
09/11/05 08:17:47 ii : - xauth username
09/11/05 08:17:47 ii : - xauth password
09/11/05 08:17:47 ii : received basic xauth request - Enter Username and Password.
09/11/05 08:17:47 ii : - standard xauth username
09/11/05 08:17:47 ii : - standard xauth password
09/11/05 08:17:47 ii : sending xauth response for xxx
09/11/05 08:17:47 >> : hash payload
09/11/05 08:17:47 >> : attribute payload
09/11/05 08:17:47 == : new configure hash ( 16 bytes )
09/11/05 08:17:47 >= : cookies 10d873e6c06bf045:c84809a38a2f9ba3
09/11/05 08:17:47 >= : message 2fb868d4
09/11/05 08:17:47 >= : encrypt iv ( 8 bytes )
09/11/05 08:17:47 == : encrypt packet ( 84 bytes )
09/11/05 08:17:47 == : stored iv ( 8 bytes )
09/11/05 08:17:47 -> : send NAT-T:IKE packet 192.168.1.107:4500 -> 192.18.32.148:4500 ( 116 bytes )
09/11/05 08:17:47 DB : config resend event scheduled ( ref count = 2 )
09/11/05 08:17:48 <- : recv NAT-T:IKE packet 192.18.32.148:4500 -> 192.168.1.107:4500 ( 60 bytes )
09/11/05 08:17:48 DB : phase1 found
09/11/05 08:17:48 ii : processing config packet ( 60 bytes )
09/11/05 08:17:48 DB : config found
09/11/05 08:17:48 == : new config iv ( 8 bytes )
09/11/05 08:17:48 =< : cookies 10d873e6c06bf045:c84809a38a2f9ba3
09/11/05 08:17:48 =< : message 33212004
09/11/05 08:17:48 =< : decrypt iv ( 8 bytes )
09/11/05 08:17:48 == : decrypt packet ( 60 bytes )
09/11/05 08:17:48 <= : stored iv ( 8 bytes )
09/11/05 08:17:48 << : hash payload
09/11/05 08:17:48 << : attribute payload
09/11/05 08:17:48 == : configure hash_i ( computed ) ( 16 bytes )
09/11/05 08:17:48 == : configure hash_c ( computed ) ( 16 bytes )
09/11/05 08:17:48 ii : configure hash verified
09/11/05 08:17:48 ii : received xauth result - 
09/11/05 08:17:48 ii : user xxx authentication succeeded
09/11/05 08:17:48 ii : sending xauth acknowledge
09/11/05 08:17:48 >> : hash payload
09/11/05 08:17:48 >> : attribute payload
09/11/05 08:17:48 == : new configure hash ( 16 bytes )
09/11/05 08:17:48 >= : cookies 10d873e6c06bf045:c84809a38a2f9ba3
09/11/05 08:17:48 >= : message 33212004
09/11/05 08:17:48 >= : encrypt iv ( 8 bytes )
09/11/05 08:17:48 == : encrypt packet ( 56 bytes )
09/11/05 08:17:48 == : stored iv ( 8 bytes )
09/11/05 08:17:48 DB : config resend event canceled ( ref count = 1 )
09/11/05 08:17:48 -> : send NAT-T:IKE packet 192.168.1.107:4500 -> 192.18.32.148:4500 ( 92 bytes )
09/11/05 08:17:48 DB : config resend event scheduled ( ref count = 2 )
09/11/05 08:17:48 ii : building config attribute list
09/11/05 08:17:48 ii : - IP4 Address
09/11/05 08:17:48 ii : - Address Expiry
09/11/05 08:17:48 ii : - IP4 Netamask
09/11/05 08:17:48 ii : - IP4 DNS Server
09/11/05 08:17:48 ii : - IP4 WINS Server
09/11/05 08:17:48 ii : - DNS Suffix
09/11/05 08:17:48 ii : - Split DNS Domain
09/11/05 08:17:48 ii : - IP4 Split Network Include
09/11/05 08:17:48 ii : - IP4 Split Network Exclude
09/11/05 08:17:48 ii : - Login Banner
09/11/05 08:17:48 ii : - PFS Group
09/11/05 08:17:48 ii : - Save Password
09/11/05 08:17:48 == : new config iv ( 8 bytes )
09/11/05 08:17:48 ii : sending config pull request
09/11/05 08:17:48 >> : hash payload
09/11/05 08:17:48 >> : attribute payload
09/11/05 08:17:48 == : new configure hash ( 16 bytes )
09/11/05 08:17:48 >= : cookies 10d873e6c06bf045:c84809a38a2f9ba3
09/11/05 08:17:48 >= : message 991db8c0
09/11/05 08:17:48 >= : encrypt iv ( 8 bytes )
09/11/05 08:17:48 == : encrypt packet ( 104 bytes )
09/11/05 08:17:48 == : stored iv ( 8 bytes )
09/11/05 08:17:48 DB : config resend event canceled ( ref count = 1 )
09/11/05 08:17:48 -> : send NAT-T:IKE packet 192.168.1.107:4500 -> 192.18.32.148:4500 ( 140 bytes )
09/11/05 08:17:48 DB : config resend event scheduled ( ref count = 2 )
09/11/05 08:17:48 <- : recv NAT-T:IKE packet 192.18.32.148:4500 -> 192.168.1.107:4500 ( 636 bytes )
09/11/05 08:17:48 DB : phase1 found
09/11/05 08:17:48 ii : processing config packet ( 636 bytes )
09/11/05 08:17:48 DB : config found
09/11/05 08:17:48 =< : cookies 10d873e6c06bf045:c84809a38a2f9ba3
09/11/05 08:17:48 =< : message 991db8c0
09/11/05 08:17:48 =< : decrypt iv ( 8 bytes )
09/11/05 08:17:48 == : decrypt packet ( 636 bytes )
09/11/05 08:17:48 <= : trimmed packet padding ( 6 bytes )
09/11/05 08:17:48 <= : stored iv ( 8 bytes )
09/11/05 08:17:48 << : hash payload
09/11/05 08:17:48 << : attribute payload
09/11/05 08:17:48 == : configure hash_i ( computed ) ( 16 bytes )
09/11/05 08:17:48 == : configure hash_c ( computed ) ( 16 bytes )
09/11/05 08:17:48 ii : configure hash verified
09/11/05 08:17:48 ii : received config pull response
09/11/05 08:17:48 ii : - IP4 Address = 129.150.24.48
09/11/05 08:17:48 ii : - IP4 DNS Server = 129.145.155.220
09/11/05 08:17:48 ii : - IP4 DNS Server = 129.145.154.118
09/11/05 08:17:48 ii : - Login Banner = WARNING: This i ...
09/11/05 08:17:48 ii : - Save Password = 0
09/11/05 08:17:48 ii : - DNS Suffix = sun.com
09/11/05 08:17:48 ii : - PFS Group = 0
09/11/05 08:17:48 ii : - IP4 Split Network Exclude = ANY:0.0.0.0/32:* ( invalid subnet ignored )
09/11/05 08:17:48 DB : config resend event canceled ( ref count = 1 )
09/11/05 08:17:48 !! : invalid private netmask, defaulting to class c
09/11/05 08:17:49 ii : waiting for vnet to arrive ...
09/11/05 08:17:50 !! : VNET adapter MTU defaulted to 1500.
09/11/05 08:17:50 ii : enabled adapter ROOT\VNET\0000
09/11/05 08:17:50 ii : creating NONE INBOUND policy ANY:192.18.32.148:* -> ANY:192.168.1.107:*
09/11/05 08:17:50 DB : policy added ( obj count = 1 )
09/11/05 08:17:50 K> : send pfkey X_SPDADD UNSPEC message
09/11/05 08:17:50 ii : creating NONE OUTBOUND policy ANY:192.168.1.107:* -> ANY:192.18.32.148:*
09/11/05 08:17:50 K< : recv pfkey X_SPDADD UNSPEC message
09/11/05 08:17:50 DB : policy found
09/11/05 08:17:50 ii : created NONE policy route for 192.18.32.148/32
09/11/05 08:17:50 DB : policy added ( obj count = 2 )
09/11/05 08:17:50 K> : send pfkey X_SPDADD UNSPEC message
09/11/05 08:17:50 ii : creating IPSEC INBOUND policy ANY:0.0.0.0/0:* -> ANY:129.150.24.48:*
09/11/05 08:17:50 DB : policy added ( obj count = 3 )
09/11/05 08:17:50 K> : send pfkey X_SPDADD UNSPEC message
09/11/05 08:17:50 ii : creating IPSEC OUTBOUND policy ANY:129.150.24.48:* -> ANY:0.0.0.0/0:*
09/11/05 08:17:50 K< : recv pfkey X_SPDADD UNSPEC message
09/11/05 08:17:50 DB : policy found
09/11/05 08:17:50 ii : calling init phase2 for initial policy
09/11/05 08:17:50 DB : policy found
09/11/05 08:17:50 DB : policy not found
09/11/05 08:17:50 !! : unable to locate inbound policy for init phase2
09/11/05 08:17:50 K< : recv pfkey X_SPDADD UNSPEC message
09/11/05 08:17:50 DB : policy found
09/11/05 08:17:55 !! : failed to create IPSEC policy route for 0.0.0.0
09/11/05 08:17:55 DB : policy added ( obj count = 4 )
09/11/05 08:17:55 K> : send pfkey X_SPDADD UNSPEC message
09/11/05 08:17:55 ii : split DNS bypassed ( no split domains defined )
09/11/05 08:17:55 K< : recv pfkey X_SPDADD UNSPEC message
09/11/05 08:17:55 DB : policy found
09/11/05 08:17:56 <- : recv NAT-T:IKE packet 192.18.32.148:4500 -> 192.168.1.107:4500 ( 636 bytes )
09/11/05 08:17:56 DB : phase1 found
09/11/05 08:17:56 ii : processing config packet ( 636 bytes )
09/11/05 08:17:56 DB : config found
09/11/05 08:17:56 !! : config packet ignored, ( config already mature )
09/11/05 08:18:02 DB : phase1 found
09/11/05 08:18:02 ii : sending peer DPDV1-R-U-THERE notification
09/11/05 08:18:02 ii : - 192.168.1.107:4500 -> 192.18.32.148:4500
09/11/05 08:18:02 ii : - isakmp spi = 10d873e6c06bf045:c84809a38a2f9ba3
09/11/05 08:18:02 ii : - data size 4
09/11/05 08:18:02 >> : hash payload
09/11/05 08:18:02 >> : notification payload
09/11/05 08:18:02 == : new informational hash ( 16 bytes )
09/11/05 08:18:02 == : new informational iv ( 8 bytes )
09/11/05 08:18:02 >= : cookies 10d873e6c06bf045:c84809a38a2f9ba3
09/11/05 08:18:02 >= : message e511a470
09/11/05 08:18:02 >= : encrypt iv ( 8 bytes )
09/11/05 08:18:02 == : encrypt packet ( 80 bytes )
09/11/05 08:18:02 == : stored iv ( 8 bytes )
09/11/05 08:18:02 -> : send NAT-T:IKE packet 192.168.1.107:4500 -> 192.18.32.148:4500 ( 116 bytes )
09/11/05 08:18:02 ii : DPD ARE-YOU-THERE sequence 11cd5e01 requested
09/11/05 08:18:02 DB : phase1 found
09/11/05 08:18:02 -> : send NAT-T:KEEP-ALIVE packet 192.168.1.107:4500 -> 192.18.32.148:4500
09/11/05 08:18:04 <- : recv NAT-T:IKE packet 192.18.32.148:4500 -> 192.168.1.107:4500 ( 636 bytes )
09/11/05 08:18:04 DB : phase1 found
09/11/05 08:18:04 ii : processing config packet ( 636 bytes )
09/11/05 08:18:04 DB : config found
09/11/05 08:18:04 !! : config packet ignored, ( config already mature )
09/11/05 08:18:12 <- : recv NAT-T:IKE packet 192.18.32.148:4500 -> 192.168.1.107:4500 ( 636 bytes )
09/11/05 08:18:12 DB : phase1 found
09/11/05 08:18:12 ii : processing config packet ( 636 bytes )
09/11/05 08:18:12 DB : config found
09/11/05 08:18:12 !! : config packet ignored, ( config already mature )
09/11/05 08:18:17 DB : phase1 found
09/11/05 08:18:17 -> : send NAT-T:KEEP-ALIVE packet 192.168.1.107:4500 -> 192.18.32.148:4500
09/11/05 08:18:17 DB : phase1 found
09/11/05 08:18:17 ii : next tunnel DPD retry in 4 secs for peer 192.18.32.148:4500
09/11/05 08:18:17 ii : sending peer DPDV1-R-U-THERE notification
09/11/05 08:18:17 ii : - 192.168.1.107:4500 -> 192.18.32.148:4500
09/11/05 08:18:17 ii : - isakmp spi = 10d873e6c06bf045:c84809a38a2f9ba3
09/11/05 08:18:17 ii : - data size 4
09/11/05 08:18:17 >> : hash payload
09/11/05 08:18:17 >> : notification payload
09/11/05 08:18:17 == : new informational hash ( 16 bytes )
09/11/05 08:18:17 == : new informational iv ( 8 bytes )
09/11/05 08:18:17 >= : cookies 10d873e6c06bf045:c84809a38a2f9ba3
09/11/05 08:18:17 >= : message bda31bb3
09/11/05 08:18:17 >= : encrypt iv ( 8 bytes )
09/11/05 08:18:17 == : encrypt packet ( 80 bytes )
09/11/05 08:18:17 == : stored iv ( 8 bytes )
09/11/05 08:18:17 -> : send NAT-T:IKE packet 192.168.1.107:4500 -> 192.18.32.148:4500 ( 116 bytes )
09/11/05 08:18:17 ii : DPD ARE-YOU-THERE sequence 11cd5e02 requested
09/11/05 08:18:20 <- : recv NAT-T:IKE packet 192.18.32.148:4500 -> 192.168.1.107:4500 ( 76 bytes )
09/11/05 08:18:20 DB : phase1 found
09/11/05 08:18:20 ii : processing informational packet ( 76 bytes )
09/11/05 08:18:20 == : new informational iv ( 8 bytes )
09/11/05 08:18:20 =< : cookies 10d873e6c06bf045:c84809a38a2f9ba3
09/11/05 08:18:20 =< : message 23cf7b5f
09/11/05 08:18:20 =< : decrypt iv ( 8 bytes )
09/11/05 08:18:20 == : decrypt packet ( 76 bytes )
09/11/05 08:18:20 <= : stored iv ( 8 bytes )
09/11/05 08:18:20 << : hash payload
09/11/05 08:18:20 << : delete payload
09/11/05 08:18:20 == : informational hash_i ( computed ) ( 16 bytes )
09/11/05 08:18:20 == : informational hash_c ( received ) ( 16 bytes )
09/11/05 08:18:20 ii : informational hash verified
09/11/05 08:18:20 ii : received peer DELETE message
09/11/05 08:18:20 ii : - 192.18.32.148:4500 -> 192.168.1.107:4500
09/11/05 08:18:20 ii : - isakmp spi = 10d873e6c06bf045:c84809a38a2f9ba3
09/11/05 08:18:20 DB : phase1 found
09/11/05 08:18:20 ii : cleanup, marked phase1 10d873e6c06bf045:c84809a38a2f9ba3 for removal
09/11/05 08:18:20 DB : phase1 soft event canceled ( ref count = 4 )
09/11/05 08:18:20 DB : phase1 hard event canceled ( ref count = 3 )
09/11/05 08:18:20 DB : phase1 dead event canceled ( ref count = 2 )
09/11/05 08:18:20 DB : config deleted ( obj count = 0 )
09/11/05 08:18:20 ii : phase1 removal before expire time
09/11/05 08:18:20 DB : phase1 not found
09/11/05 08:18:20 DB : phase1 deleted ( obj count = 0 )
09/11/05 08:18:20 DB : policy found
09/11/05 08:18:20 ii : removing IPSEC INBOUND policy ANY:0.0.0.0/0:* -> ANY:129.150.24.48:*
09/11/05 08:18:20 K> : send pfkey X_SPDDELETE2 UNSPEC message
09/11/05 08:18:20 DB : policy found
09/11/05 08:18:20 ii : removing IPSEC OUTBOUND policy ANY:129.150.24.48:* -> ANY:0.0.0.0/0:*
09/11/05 08:18:20 K> : send pfkey X_SPDDELETE2 UNSPEC message
09/11/05 08:18:20 DB : policy found
09/11/05 08:18:20 ii : removing NONE INBOUND policy ANY:192.18.32.148:* -> ANY:192.168.1.107:*
09/11/05 08:18:20 K> : send pfkey X_SPDDELETE2 UNSPEC message
09/11/05 08:18:20 DB : policy found
09/11/05 08:18:20 ii : removing NONE OUTBOUND policy ANY:192.168.1.107:* -> ANY:192.18.32.148:*
09/11/05 08:18:20 K> : send pfkey X_SPDDELETE2 UNSPEC message
09/11/05 08:18:20 K< : recv pfkey X_SPDDELETE2 UNSPEC message
09/11/05 08:18:20 ii : removed NONE policy route for ANY:192.18.32.148:*
09/11/05 08:18:20 DB : policy found
09/11/05 08:18:20 DB : policy deleted ( obj count = 3 )
09/11/05 08:18:20 ii : disabled adapter ROOT\VNET\0000
09/11/05 08:18:20 DB : tunnel dpd event canceled ( ref count = 3 )
09/11/05 08:18:20 DB : tunnel natt event canceled ( ref count = 2 )
09/11/05 08:18:20 DB : tunnel stats event canceled ( ref count = 1 )
09/11/05 08:18:20 DB : removing tunnel config references
09/11/05 08:18:20 DB : removing tunnel phase2 references
09/11/05 08:18:20 DB : removing tunnel phase1 references
09/11/05 08:18:20 DB : tunnel deleted ( obj count = 0 )
09/11/05 08:18:21 K< : recv pfkey X_SPDDELETE2 UNSPEC message
09/11/05 08:18:21 DB : policy found
09/11/05 08:18:21 DB : policy deleted ( obj count = 2 )
09/11/05 08:18:21 K< : recv pfkey X_SPDDELETE2 UNSPEC message
09/11/05 08:18:21 DB : policy found
09/11/05 08:18:21 DB : policy deleted ( obj count = 1 )
09/11/05 08:18:21 K< : recv pfkey X_SPDDELETE2 UNSPEC message
09/11/05 08:18:21 DB : policy found
09/11/05 08:18:21 DB : policy deleted ( obj count = 0 )
09/11/05 08:18:21 DB : removing all peer tunnel refrences
09/11/05 08:18:21 DB : peer deleted ( obj count = 0 )
09/11/05 08:18:21 ii : ipc client process thread exit ...
