Received: with ECARTIS (v1.0.0; list netdev); Mon, 31 Jan 2005 13:11:43 -0800 (PST) Received: from arnor.apana.org.au (mail@arnor.apana.org.au [203.14.152.115]) by oss.sgi.com (8.13.0/8.13.0) with ESMTP id j0VLBYXX002915 for ; Mon, 31 Jan 2005 13:11:35 -0800 Received: from gondolin.me.apana.org.au ([192.168.0.6] ident=mail) by arnor.apana.org.au with esmtp (Exim 3.35 #1 (Debian)) id 1CvipQ-0001rQ-00; Tue, 01 Feb 2005 08:11:24 +1100 Received: from herbert by gondolin.me.apana.org.au with local (Exim 3.36 #1 (Debian)) id 1Cvip4-0005IK-00; Tue, 01 Feb 2005 08:11:02 +1100 Date: Tue, 1 Feb 2005 08:11:02 +1100 To: Andreas Unterluggauer Cc: netdev@oss.sgi.com Subject: Re: Fw: [Bugme-new] [Bug 4138] New: ipsec with racoon in transport mode with esp and ah hangs (problem is in xfrm_state_add) Message-ID: <20050131211102.GA20323@gondor.apana.org.au> References: <200501311640.16118.au@unterluggauer.org> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <200501311640.16118.au@unterluggauer.org> User-Agent: Mutt/1.5.6+20040722i From: Herbert Xu X-Virus-Scanned: ClamAV 0.80/650/Sun Jan 2 19:00:02 2005 clamav-milter version 0.80j on 127.0.0.1 X-Virus-Status: Clean X-archive-position: 1127 X-ecartis-version: Ecartis v1.0.0 Sender: netdev-bounce@oss.sgi.com Errors-to: netdev-bounce@oss.sgi.com X-original-sender: herbert@gondor.apana.org.au Precedence: bulk X-list: netdev Content-Length: 982 Lines: 22 Hi Andreas: On Mon, Jan 31, 2005 at 03:40:16PM +0000, Andreas Unterluggauer wrote: > > 2005-01-31 16:29:58: DEBUG: === > 2005-01-31 16:29:58: DEBUG: get pfkey ADD message > andi: libipsec/pfkey.c, pfkey_check: start (msg->sadb_msg_satype: 3) > 2005-01-31 16:29:58: DEBUG: andi: in pfkey.c, pk_recvadd: msg->sadb_msg_seq 2, msg->sadb_msg_type: ADD > 2005-01-31 16:29:58: INFO: IPsec-SA established: ESP/Transport 192.168.2.5->192.168.2.3 spi=103868257(0x630e761) > 2005-01-31 16:29:58: DEBUG: === Does the machine hang at this point in time? If not, then this is simply a racoon bug. Although the acquire message carries a policy with it, it's really only acquiring a single SA. Therefore, only the SA being acquired should be added with that sequence number. Cheers, -- Visit Openswan at http://www.openswan.org/ Email: Herbert Xu ~{PmV>HI~} Home Page: http://gondor.apana.org.au/~herbert/ PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt