13/09/26 19:40:27 ## : IKE Daemon, ver 2.2.1
13/09/26 19:40:27 ## : Copyright 2013 Shrew Soft Inc.
13/09/26 19:40:27 ## : This product linked OpenSSL 1.0.1e-fips 11 Feb 2013
13/09/26 19:40:27 ii : opened '/var/log/iked.log'
13/09/26 19:40:27 ii : ipc server process thread begin ...
13/09/26 19:40:27 ii : pfkey process thread begin ...
13/09/26 19:40:27 ii : network process thread begin ...
13/09/26 19:40:27 K< : recv pfkey REGISTER AH message
13/09/26 19:40:27 K< : recv pfkey REGISTER ESP message
13/09/26 19:40:27 K< : recv pfkey REGISTER IPCOMP message
13/09/26 19:40:27 K! : recv X_SPDDUMP message failure ( errno = 2 )
13/09/26 19:40:52 ii : ipc client process thread begin ...
13/09/26 19:40:52 <A : peer config add message
13/09/26 19:40:52 <A : proposal config message
13/09/26 19:40:52 <A : proposal config message
13/09/26 19:40:52 <A : client config message
13/09/26 19:40:52 <A : xauth username message
13/09/26 19:40:52 <A : xauth password message
13/09/26 19:40:52 <A : remote certificate data message
13/09/26 19:40:52 ii : remote certificate read complete ( 889 bytes )
13/09/26 19:40:52 <A : local certificate data message
13/09/26 19:40:52 ii : local certificate read complete ( 1493 bytes )
13/09/26 19:40:52 <A : local key data message
13/09/26 19:40:52 ii : local key read complete ( 1193 bytes )
13/09/26 19:40:52 <A : peer tunnel enable message
13/09/26 19:40:52 DB : peer added ( obj count = 1 )
13/09/26 19:40:52 ii : local address B.B.B.B selected for peer
13/09/26 19:40:52 DB : tunnel added ( obj count = 1 )
13/09/26 19:40:52 ii : obtained x509 cert subject ( 159 bytes )
13/09/26 19:40:52 DB : new phase1 ( ISAKMP initiator )
13/09/26 19:40:52 DB : exchange type is identity protect
13/09/26 19:40:52 DB : B.B.B.B:500 <-> S.S.S.S:500
13/09/26 19:40:52 DB : e900000057000000:0000000000000000
13/09/26 19:40:52 DB : phase1 added ( obj count = 1 )
13/09/26 19:40:52 >> : security association payload
13/09/26 19:40:52 >> : - proposal #1 payload 
13/09/26 19:40:52 >> : -- transform #1 payload 
13/09/26 19:40:52 >> : vendor id payload
13/09/26 19:40:52 ii : local supports XAUTH
13/09/26 19:40:52 >> : vendor id payload
13/09/26 19:40:52 ii : local supports nat-t ( draft v00 )
13/09/26 19:40:52 >> : vendor id payload
13/09/26 19:40:52 ii : local supports nat-t ( draft v01 )
13/09/26 19:40:52 >> : vendor id payload
13/09/26 19:40:52 ii : local supports nat-t ( draft v02 )
13/09/26 19:40:52 >> : vendor id payload
13/09/26 19:40:52 ii : local supports nat-t ( draft v03 )
13/09/26 19:40:52 >> : vendor id payload
13/09/26 19:40:52 ii : local supports nat-t ( rfc )
13/09/26 19:40:52 >> : vendor id payload
13/09/26 19:40:52 ii : local supports FRAGMENTATION
13/09/26 19:40:52 >> : vendor id payload
13/09/26 19:40:52 >> : vendor id payload
13/09/26 19:40:52 ii : local supports DPDv1
13/09/26 19:40:52 >> : vendor id payload
13/09/26 19:40:52 ii : local is SHREW SOFT compatible
13/09/26 19:40:52 >> : vendor id payload
13/09/26 19:40:52 ii : local is NETSCREEN compatible
13/09/26 19:40:52 >> : vendor id payload
13/09/26 19:40:52 ii : local is SIDEWINDER compatible
13/09/26 19:40:52 >> : vendor id payload
13/09/26 19:40:52 ii : local is CISCO UNITY compatible
13/09/26 19:40:52 >= : cookies e900000057000000:0000000000000000
13/09/26 19:40:52 >= : message 00000000
13/09/26 19:40:52 -> : send IKE packet B.B.B.B:500 -> S.S.S.S:500 ( 372 bytes )
13/09/26 19:40:52 DB : phase1 resend event scheduled ( ref count = 2 )
13/09/26 19:40:52 <- : recv IKE packet S.S.S.S:500 -> B.B.B.B:500 ( 136 bytes )
13/09/26 19:40:52 DB : phase1 found
13/09/26 19:40:52 ii : processing phase1 packet ( 136 bytes )
13/09/26 19:40:52 =< : cookies e900000057000000:e40000003f000000
13/09/26 19:40:52 =< : message 00000000
13/09/26 19:40:52 << : security association payload
13/09/26 19:40:52 << : - propsal #1 payload 
13/09/26 19:40:52 << : -- transform #1 payload 
13/09/26 19:40:52 ii : matched isakmp proposal #1 transform #1
13/09/26 19:40:52 ii : - transform    = ike
13/09/26 19:40:52 ii : - cipher type  = 3des
13/09/26 19:40:52 ii : - key length   = default
13/09/26 19:40:52 ii : - hash type    = sha1
13/09/26 19:40:52 ii : - dh group     = group2 ( modp-1024 )
13/09/26 19:40:52 ii : - auth type    = xauth-initiator-rsa
13/09/26 19:40:52 ii : - life seconds = 86400
13/09/26 19:40:52 ii : - life kbytes  = 0
13/09/26 19:40:52 << : vendor id payload
13/09/26 19:40:52 ii : peer supports XAUTH
13/09/26 19:40:52 << : vendor id payload
13/09/26 19:40:52 ii : peer supports DPDv1
13/09/26 19:40:52 << : vendor id payload
13/09/26 19:40:52 ii : peer supports nat-t ( rfc )
13/09/26 19:40:52 >> : key exchange payload
13/09/26 19:40:52 >> : nonce payload
13/09/26 19:40:52 >> : cert request payload
13/09/26 19:40:52 >> : nat discovery payload
13/09/26 19:40:52 >> : nat discovery payload
13/09/26 19:40:52 >= : cookies e900000057000000:e40000003f000000
13/09/26 19:40:52 >= : message 00000000
13/09/26 19:40:52 DB : phase1 resend event canceled ( ref count = 1 )
13/09/26 19:40:52 -> : send IKE packet B.B.B.B:500 -> S.S.S.S:500 ( 265 bytes )
13/09/26 19:40:52 DB : phase1 resend event scheduled ( ref count = 2 )
13/09/26 19:40:52 <- : recv IKE packet S.S.S.S:500 -> B.B.B.B:500 ( 328 bytes )
13/09/26 19:40:52 DB : phase1 found
13/09/26 19:40:52 ii : processing phase1 packet ( 328 bytes )
13/09/26 19:40:52 =< : cookies e900000057000000:e40000003f000000
13/09/26 19:40:52 =< : message 00000000
13/09/26 19:40:52 << : key exchange payload
13/09/26 19:40:52 << : nonce payload
13/09/26 19:40:52 << : cert request payload
13/09/26 19:40:52 << : nat discovery payload
13/09/26 19:40:52 << : nat discovery payload
13/09/26 19:40:52 ii : disabled nat-t ( no nat detected )
13/09/26 19:40:52 == : DH shared secret ( 128 bytes )
13/09/26 19:40:52 == : SETKEYID ( 20 bytes )
13/09/26 19:40:52 == : SETKEYID_d ( 20 bytes )
13/09/26 19:40:52 == : SETKEYID_a ( 20 bytes )
13/09/26 19:40:52 == : SETKEYID_e ( 20 bytes )
13/09/26 19:40:52 == : cipher key ( 40 bytes )
13/09/26 19:40:52 == : cipher iv ( 8 bytes )
13/09/26 19:40:52 >> : identification payload
13/09/26 19:40:52 >> : certificate payload
13/09/26 19:40:52 == : phase1 hash_i ( computed ) ( 20 bytes )
13/09/26 19:40:52 >> : signature payload
13/09/26 19:40:52 >= : cookies e900000057000000:e40000003f000000
13/09/26 19:40:52 >= : message 00000000
13/09/26 19:40:52 >= : encrypt iv ( 8 bytes )
13/09/26 19:40:52 == : encrypt packet ( 1953 bytes )
13/09/26 19:40:52 == : stored iv ( 8 bytes )
13/09/26 19:40:52 DB : phase1 resend event canceled ( ref count = 1 )
13/09/26 19:40:52 -> : send IKE packet B.B.B.B:500 -> S.S.S.S:500 ( 1984 bytes )
13/09/26 19:41:37 ii : hard halt signal received, shutting down
13/09/26 19:41:37 DB : removing all peer tunnel references
13/09/26 19:41:37 DB : removing tunnel config references
13/09/26 19:41:37 DB : removing tunnel phase2 references
13/09/26 19:41:37 DB : removing tunnel phase1 references
13/09/26 19:41:37 ii : sending peer DELETE message
13/09/26 19:41:37 ii : - B.B.B.B:500 -> S.S.S.S:500
13/09/26 19:41:37 ii : - isakmp spi = e900000057000000:e40000003f000000
13/09/26 19:41:37 ii : - data size 0
13/09/26 19:41:37 >> : hash payload
13/09/26 19:41:37 >> : delete payload
13/09/26 19:41:37 == : new informational hash ( 20 bytes )
13/09/26 19:41:37 == : new informational iv ( 8 bytes )
13/09/26 19:41:37 >= : cookies e900000057000000:e40000003f000000
13/09/26 19:41:37 >= : message 8349f253
13/09/26 19:41:37 >= : encrypt iv ( 8 bytes )
13/09/26 19:41:37 == : encrypt packet ( 80 bytes )
13/09/26 19:41:37 == : stored iv ( 8 bytes )
13/09/26 19:41:37 -> : send IKE packet B.B.B.B:500 -> S.S.S.S:500 ( 112 bytes )
13/09/26 19:41:37 ii : phase1 removal before expire time
13/09/26 19:41:37 DB : phase1 deleted ( obj count = 0 )
13/09/26 19:41:37 DB : policy not found
13/09/26 19:41:37 DB : policy not found
13/09/26 19:41:37 DB : tunnel deleted ( obj count = 0 )
13/09/26 19:41:37 DB : peer deleted ( obj count = 0 )
13/09/26 19:41:37 ii : ipc client process thread exit ...
13/09/26 19:41:37 ii : ipc server process thread exit ...
13/09/26 19:41:37 ii : pfkey process thread exit ...
13/09/26 19:41:37 ii : network process thread exit ...
