mza:/# /etc/init.d/ipsec restart ipsec_setup: Stopping FreeS/WAN IPsec... ipsec_setup: Removing orphaned /var/run/pluto.pid: ipsec_setup: Starting FreeS/WAN IPsec 2.04... mza:/# tail -f /var/log/syslog Feb 1 20:31:13 mza kernel: klips_debug:pfkey_address_parse: extr->eroute set to 192.168.0.0/0:0->192.168.1.0/0:0 Feb 1 20:31:13 mza kernel: klips_debug:pfkey_address_process: successful. Feb 1 20:31:13 mza kernel: klips_debug:pfkey_msg_interp: processing ext 23 0pccdaa808 with processor 0pc024c090. Feb 1 20:31:13 mza kernel: klips_debug:pfkey_address_process: Feb 1 20:31:13 mza kernel: klips_debug:pfkey_address_process: found address family=2, AF_INET, 255.255.255.0. Feb 1 20:31:13 mza kernel: klips_debug:pfkey_address_process: found src mask address. Feb 1 20:31:13 mza kernel: klips_debug:pfkey_alloc_eroute: eroute struct already allocated Feb 1 20:31:13 mza kernel: klips_debug:pfkey_address_parse: extr->eroute set to 192.168.0.0/24:0->192.168.1.0/0:0 Feb 1 20:31:13 mza kernel: klips_debug:pfkey_address_process: successful. Feb 1 20:31:13 mza kernel: klips_debug:pfkey_msg_interp: processing ext 24 0pccdaa820 with processor 0pc024c090. Feb 1 20:31:13 mza kernel: klips_debug:pfkey_address_process: Feb 1 20:31:13 mza kernel: klips_debug:pfkey_address_process: found address family=2, AF_INET, 255.255.255.0. Feb 1 20:31:13 mza ipsec_setup: Stopping FreeS/WAN IPsec... Feb 1 20:31:13 mza kernel: klips_debug:pfkey_address_process: found dst mask address. Feb 1 20:31:13 mza kernel: klips_debug:pfkey_alloc_eroute: eroute struct already allocated Feb 1 20:31:14 mza kernel: klips_debug:pfkey_address_parse: extr->eroute set to 192.168.0.0/24:0->192.168.1.0/24:0 Feb 1 20:31:14 mza kernel: klips_debug:pfkey_address_process: successful. Feb 1 20:31:14 mza kernel: klips_debug:pfkey_msg_interp: parsing message type 14(x-addflow(eroute)) with msg_parser 0pc0249a60. Feb 1 20:31:14 mza kernel: klips_debug:pfkey_x_addflow_parse: . Feb 1 20:31:14 mza kernel: klips_debug:pfkey_x_addflow_parse: calling breakeroute and/or makeroute for 192.168.0.0/24->192.168.1.0/24 Feb 1 20:31:14 mza kernel: klips_debug:pfkey_x_addflow_parse: calling makeroute. Feb 1 20:31:14 mza kernel: klips_debug:ipsec_makeroute: attempting to allocate 168 bytes to insert eroute for 192.168.0.0/24:0->192.168.1.0/24:0 0, SA: %%trap, PID:14682, skb=0p00000000, ident:NULL->NULL Feb 1 20:31:14 mza kernel: klips_debug:ipsec_makeroute: succeeded, I think... Feb 1 20:31:14 mza kernel: klips_debug:pfkey_x_addflow_parse: makeroute call successful. Feb 1 20:31:14 mza kernel: klips_debug:pfkey_msg_hdr_build: Feb 1 20:31:14 mza kernel: klips_debug:pfkey_msg_hdr_build: on_entry &pfkey_ext=0pc230dc28 pfkey_ext=0pc230dd10 *pfkey_ext=0p00000000. Feb 1 20:31:14 mza kernel: klips_debug:pfkey_msg_hdr_build: on_exit &pfkey_ext=0pc230dc28 pfkey_ext=0pc230dd10 *pfkey_ext=0pcbadbc80. Feb 1 20:31:14 mza kernel: klips_debug:pfkey_safe_build: error=0 Feb 1 20:31:14 mza kernel: klips_debug:pfkey_safe_build:success. Feb 1 20:31:15 mza kernel: klips_debug:pfkey_sa_build: spi=00000104 replay=0 sa_state=0 auth=0 encrypt=0 flags=0 Feb 1 20:31:15 mza kernel: klips_debug:pfkey_safe_build: error=0 Feb 1 20:31:15 mza kernel: klips_debug:pfkey_safe_build:success. Feb 1 20:31:15 mza kernel: klips_debug:pfkey_address_build: exttype=5 proto=0 prefixlen=0 Feb 1 20:31:15 mza kernel: klips_debug:pfkey_address_build: found address family AF_INET. Feb 1 20:31:15 mza kernel: klips_debug:pfkey_address_build: found address=190.3.63.165:0. Feb 1 20:31:15 mza kernel: klips_debug:pfkey_address_build: successful. Feb 1 20:31:15 mza kernel: klips_debug:pfkey_safe_build: error=0 Feb 1 20:31:15 mza kernel: klips_debug:pfkey_safe_build:success. Feb 1 20:31:16 mza kernel: klips_debug:pfkey_address_build: exttype=6 proto=0 prefixlen=0 Feb 1 20:31:16 mza kernel: klips_debug:pfkey_address_build: found address family AF_INET. Feb 1 20:31:16 mza kernel: klips_debug:pfkey_address_build: found address=0.0.0.0:0. Feb 1 20:31:16 mza kernel: klips_debug:pfkey_address_build: successful. Feb 1 20:31:16 mza kernel: klips_debug:pfkey_safe_build: error=0 Feb 1 20:31:16 mza kernel: klips_debug:pfkey_safe_build:success. Feb 1 20:31:16 mza kernel: klips_debug:pfkey_address_build: exttype=21 proto=0 prefixlen=0 Feb 1 20:31:16 mza kernel: klips_debug:pfkey_address_build: found address family AF_INET. Feb 1 20:31:16 mza kernel: klips_debug:pfkey_address_build: found address=192.168.0.0:0. Feb 1 20:31:16 mza kernel: klips_debug:pfkey_address_build: successful. Feb 1 20:31:16 mza kernel: klips_debug:pfkey_safe_build: error=0 Feb 1 20:31:16 mza kernel: klips_debug:pfkey_safe_build:success. Feb 1 20:31:16 mza kernel: klips_debug:pfkey_address_build: exttype=22 proto=0 prefixlen=0 Feb 1 20:31:16 mza kernel: klips_debug:pfkey_address_build: found address family AF_INET. Feb 1 20:31:16 mza kernel: klips_debug:pfkey_address_build: found address=192.168.1.0:0. Feb 1 20:31:16 mza kernel: klips_debug:pfkey_address_build: successful. Feb 1 20:31:16 mza kernel: klips_debug:pfkey_safe_build: error=0 Feb 1 20:31:16 mza kernel: klips_debug:pfkey_safe_build:success. Feb 1 20:31:16 mza kernel: klips_debug:pfkey_address_build: exttype=23 proto=0 prefixlen=0 Feb 1 20:31:16 mza kernel: klips_debug:pfkey_address_build: found address family AF_INET. Feb 1 20:31:16 mza kernel: klips_debug:pfkey_address_build: found address=255.255.255.0:0. Feb 1 20:31:16 mza kernel: klips_debug:pfkey_address_build: successful. Feb 1 20:31:16 mza kernel: klips_debug:pfkey_safe_build: error=0 Feb 1 20:31:16 mza kernel: klips_debug:pfkey_safe_build:success. Feb 1 20:31:16 mza kernel: klips_debug:pfkey_address_build: exttype=24 proto=0 prefixlen=0 Feb 1 20:31:16 mza kernel: klips_debug:pfkey_address_build: found address family AF_INET. Feb 1 20:31:16 mza kernel: klips_debug:pfkey_address_build: found address=255.255.255.0:0. Feb 1 20:31:16 mza kernel: klips_debug:pfkey_address_build: successful. Feb 1 20:31:16 mza kernel: klips_debug:pfkey_safe_build: error=0 Feb 1 20:31:16 mza kernel: klips_debug:pfkey_safe_build:success. Feb 1 20:31:16 mza ipsec__plutorun: 104 "mzabsas" #1: STATE_MAIN_I1: initiate Feb 1 20:31:16 mza ipsec__plutorun: ...could not start conn "mzabsas" Feb 1 20:31:16 mza kernel: klips_debug:pfkey_msg_build: pfkey_msg=0pc28e96c0 allocated 184 bytes, &(extensions[0])=0pc230dd10 Feb 1 20:31:16 mza kernel: klips_debug:pfkey_msg_build: copying 24 bytes from extensions[1]=0pccded6c0 to=0pc28e96d0 Feb 1 20:31:16 mza kernel: klips_debug:pfkey_msg_build: copying 24 bytes from extensions[5]=0pccdedf00 to=0pc28e96e8 Feb 1 20:31:16 mza kernel: klips_debug:pfkey_msg_build: copying 24 bytes from extensions[6]=0pc295b680 to=0pc28e9700 Feb 1 20:31:16 mza kernel: klips_debug:pfkey_msg_build: copying 24 bytes from extensions[21]=0pc295ba00 to=0pc28e9718 Feb 1 20:31:16 mza kernel: klips_debug:pfkey_msg_build: copying 24 bytes from extensions[22]=0pc295b700 to=0pc28e9730 Feb 1 20:31:16 mza kernel: klips_debug:pfkey_msg_build: copying 24 bytes from extensions[23]=0pc295b840 to=0pc28e9748 Feb 1 20:31:16 mza kernel: klips_debug:pfkey_msg_build: copying 24 bytes from extensions[24]=0pc295bc80 to=0pc28e9760 Feb 1 20:31:16 mza kernel: klips_debug:pfkey_msg_build: extensions permitted=05e00063, seen=01e00063, required=01e00043. Feb 1 20:31:16 mza kernel: klips_debug:pfkey_msg_parse: parsing message ver=2, type=14(x-addflow(eroute)), errno=0, satype=11(INT), len=23, res=0, seq=5, pid=14682. Feb 1 20:31:16 mza kernel: klips_debug:pfkey_msg_parse: satype 11(INT) conversion to proto gives 61 for msg_type 14(x-addflow(eroute)). Feb 1 20:31:16 mza kernel: klips_debug:pfkey_msg_parse: remain=21 ext_type=1(security-association) ext_len=3 parsing ext 0pc28e96d0 with parser pfkey_sa_parse. Feb 1 20:31:16 mza kernel: klips_debug:pfkey_sa_parse: successfully found len=3 exttype=1(security-association) spi=00000104 replay=0 state=0 auth=0 encrypt=0 flags=0 ref=1622. Feb 1 20:31:16 mza kernel: klips_debug:pfkey_msg_parse: remain=18 ext_type=5(source-address) ext_len=3 parsing ext 0pc28e96e8 with parser pfkey_address_parse. Feb 1 20:31:16 mza kernel: klips_debug:pfkey_address_parse: found exttype=5(source-address) family=2(AF_INET) address=190.3.63.165 proto=0 port=0. Feb 1 20:31:16 mza kernel: klips_debug:pfkey_msg_parse: remain=15 ext_type=6(destination-address) ext_len=3 parsing ext 0pc28e9700 with parser pfkey_address_parse. Feb 1 20:31:16 mza kernel: klips_debug:pfkey_address_parse: found exttype=6(destination-address) family=2(AF_INET) address=0.0.0.0 proto=0 port=0. Feb 1 20:31:16 mza kernel: klips_debug:pfkey_msg_parse: remain=12 ext_type=21(X-source-flow-address) ext_len=3 parsing ext 0pc28e9718 with parser pfkey_address_parse. Feb 1 20:31:16 mza kernel: klips_debug:pfkey_address_parse: found exttype=21(X-source-flow-address) family=2(AF_INET) address=192.168.0.0 proto=0 port=0. Feb 1 20:31:16 mza kernel: klips_debug:pfkey_msg_parse: remain=9 ext_type=22(X-dest-flow-address) ext_len=3 parsing ext 0pc28e9730 with parser pfkey_address_parse. Feb 1 20:31:16 mza kernel: klips_debug:pfkey_address_parse: found exttype=22(X-dest-flow-address) family=2(AF_INET) address=192.168.1.0 proto=0 port=0. Feb 1 20:31:16 mza kernel: klips_debug:pfkey_msg_parse: remain=6 ext_type=23(X-source-mask) ext_len=3 parsing ext 0pc28e9748 with parser pfkey_address_parse. Feb 1 20:31:16 mza kernel: klips_debug:pfkey_address_parse: found exttype=23(X-source-mask) family=2(AF_INET) address=255.255.255.0 proto=0 port=0. Feb 1 20:31:16 mza kernel: klips_debug:pfkey_msg_parse: remain=3 ext_type=24(X-dest-mask) ext_len=3 parsing ext 0pc28e9760 with parser pfkey_address_parse. Feb 1 20:31:16 mza kernel: klips_debug:pfkey_address_parse: found exttype=24(X-dest-mask) family=2(AF_INET) address=255.255.255.0 proto=0 port=0. Feb 1 20:31:16 mza kernel: klips_debug:pfkey_msg_parse: extensions permitted=05e00063, seen=01e00063, required=01e00043. Feb 1 20:31:16 mza kernel: klips_debug:pfkey_upmsg: allocating 184 bytes... Feb 1 20:31:16 mza kernel: klips_debug:pfkey_upmsg: ...allocated at 0pcf12fa80. Feb 1 20:31:16 mza kernel: klips_debug:pfkey_x_addflow_parse: sending up x_addflow reply message for satype=11(INT) (proto=61) to socket=0pc28339e0 succeeded. Feb 1 20:31:16 mza kernel: klips_debug:pfkey_x_addflow_parse: extr->ips cleaned up and freed. Feb 1 20:31:16 mza kernel: klips_debug:ipsec_sa_wipe: removing SA=%%trap(0pcce25800), SAref=1622, table=0(0pd0000000), entry=1622 from the refTable. Feb 1 20:31:16 mza kernel: klips_debug:ipsec_sa_put: ipsec_sa SA:%%trap, ref:-1 reference count decremented. Feb 1 20:31:16 mza kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 Feb 1 20:31:16 mza kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0. Feb 1 20:31:16 mza kernel: klips_debug: IP: ihl:20 ver:4 tos:0 tlen:104 id:26583 frag_off:0 ttl:60 proto:50 chk:59045 saddr:200.123.105.195 daddr:190.3.63.165 Feb 1 20:31:16 mza kernel: klips_debug:ipsec_rcv_decap_once: decap (50) from 200.123.105.195 -> 190.3.63.165 Feb 1 20:31:16 mza kernel: klips_debug:ipsec_sa_getbyid: linked entry in ipsec_sa table for hash=154 of SA:esp0x2d289485@190.3.63.165 requested. Feb 1 20:31:16 mza kernel: klips_debug:ipsec_sa_getbyid: no entries in ipsec_sa table for hash=154 of SA:esp0x2d289485@190.3.63.165. Feb 1 20:31:16 mza kernel: klips_debug:ipsec_rcv: no ipsec_sa for SA:esp0x2d289485@190.3.63.165: incoming packet with no SA dropped Feb 1 20:31:16 mza kernel: klips_debug:ipsec_rcv: decap_once failed: -7 Feb 1 20:31:16 mza kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 Feb 1 20:31:16 mza kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0. Feb 1 20:31:16 mza kernel: klips_debug: IP: ihl:20 ver:4 tos:0 tlen:104 id:26584 frag_off:0 ttl:60 proto:50 chk:59044 saddr:200.123.105.195 daddr:190.3.63.165 Feb 1 20:31:16 mza kernel: klips_debug:ipsec_rcv_decap_once: decap (50) from 200.123.105.195 -> 190.3.63.165 Feb 1 20:31:16 mza kernel: klips_debug:ipsec_sa_getbyid: linked entry in ipsec_sa table for hash=154 of SA:esp0x2d289485@190.3.63.165 requested. Feb 1 20:31:16 mza kernel: klips_debug:ipsec_sa_getbyid: no entries in ipsec_sa table for hash=154 of SA:esp0x2d289485@190.3.63.165. Feb 1 20:31:16 mza kernel: klips_debug:ipsec_rcv: no ipsec_sa for SA:esp0x2d289485@190.3.63.165: incoming packet with no SA dropped Feb 1 20:31:16 mza kernel: klips_debug:ipsec_rcv: decap_once failed: -7 Feb 1 20:31:16 mza kernel: klips_debug:pfkey_sendmsg: . Feb 1 20:31:16 mza kernel: klips_debug:pfkey_sendmsg: allocating 112 bytes for downward message. Feb 1 20:31:16 mza kernel: klips_debug:pfkey_sendmsg: msg sent for parsing. Feb 1 20:31:16 mza kernel: klips_debug:pfkey_msg_interp: parsing message ver=2, type=15, errno=0, satype=11(INT), len=14, res=0, seq=6, pid=14682. Feb 1 20:31:16 mza kernel: klips_debug:ipsec_SAref_alloc: SAref requested... head=87, cont=1792, tail=255, listsize=256. Feb 1 20:31:16 mza kernel: klips_debug:ipsec_SAref_alloc: allocating SAref=1623, table=0, entry=1623 of 65536. Feb 1 20:31:16 mza kernel: klips_debug:ipsec_sa_alloc: allocated 500 bytes for ipsec_sa struct=0pcce25800 ref=1623. Feb 1 20:31:16 mza kernel: klips_debug:pfkey_msg_interp: allocated extr->ips=0pcce25800. Feb 1 20:31:17 mza kernel: klips_debug:pfkey_msg_parse: parsing message ver=2, type=15(x-delflow(eroute)), errno=0, satype=11(INT), len=14, res=0, seq=6, pid=14682. Feb 1 20:31:17 mza kernel: klips_debug:pfkey_msg_parse: remain=12 ext_type=21(X-source-flow-address) ext_len=3 parsing ext 0pcef19bd0 with parser pfkey_address_parse. Feb 1 20:31:17 mza kernel: klips_debug:pfkey_address_parse: found exttype=21(X-source-flow-address) family=2(AF_INET) address=192.168.0.0 proto=0 port=0. Feb 1 20:31:17 mza kernel: klips_debug:pfkey_msg_parse: remain=9 ext_type=22(X-dest-flow-address) ext_len=3 parsing ext 0pcef19be8 with parser pfkey_address_parse. Feb 1 20:31:17 mza kernel: klips_debug:pfkey_address_parse: found exttype=22(X-dest-flow-address) family=2(AF_INET) address=192.168.1.0 proto=0 port=0. Feb 1 20:31:17 mza kernel: klips_debug:pfkey_msg_parse: remain=6 ext_type=23(X-source-mask) ext_len=3 parsing ext 0pcef19c00 with parser pfkey_address_parse. Feb 1 20:31:17 mza kernel: klips_debug:pfkey_address_parse: found exttype=23(X-source-mask) family=2(AF_INET) address=255.255.255.0 proto=0 port=0. Feb 1 20:31:17 mza kernel: klips_debug:pfkey_msg_parse: remain=3 ext_type=24(X-dest-mask) ext_len=3 parsing ext 0pcef19c18 with parser pfkey_address_parse. Feb 1 20:31:17 mza kernel: klips_debug:pfkey_address_parse: found exttype=24(X-dest-mask) family=2(AF_INET) address=255.255.255.0 proto=0 port=0. Feb 1 20:31:17 mza kernel: klips_debug:pfkey_msg_parse: extensions permitted=05e00c03, seen=01e00001, required=00000001. Feb 1 20:31:17 mza kernel: klips_debug:pfkey_msg_interp: processing ext 21 0pcef19bd0 with processor 0pc024c090. Feb 1 20:31:17 mza kernel: klips_debug:pfkey_address_process: Feb 1 20:31:17 mza kernel: klips_debug:pfkey_address_process: found address family=2, AF_INET, 192.168.0.0. Feb 1 20:31:17 mza kernel: klips_debug:pfkey_address_process: found src flow address. Feb 1 20:31:17 mza kernel: klips_debug:pfkey_alloc_eroute: allocating 168 bytes for an eroute. Feb 1 20:31:17 mza kernel: klips_debug:pfkey_alloc_eroute: allocated eroute struct=0pc230de58. Feb 1 20:31:17 mza kernel: klips_debug:pfkey_address_parse: extr->eroute set to 192.168.0.0/0:0->0.0.0.0/0:0 Feb 1 20:31:17 mza kernel: klips_debug:pfkey_address_process: successful. Feb 1 20:31:17 mza kernel: klips_debug:pfkey_msg_interp: processing ext 22 0pcef19be8 with processor 0pc024c090. Feb 1 20:31:17 mza kernel: klips_debug:pfkey_address_process: Feb 1 20:31:17 mza kernel: klips_debug:pfkey_address_process: found address family=2, AF_INET, 192.168.1.0. Feb 1 20:31:17 mza kernel: klips_debug:pfkey_address_process: found dst flow address. Feb 1 20:31:17 mza kernel: klips_debug:pfkey_alloc_eroute: eroute struct already allocated Feb 1 20:31:17 mza kernel: klips_debug:pfkey_address_parse: extr->eroute set to 192.168.0.0/0:0->192.168.1.0/0:0 Feb 1 20:31:17 mza kernel: klips_debug:pfkey_address_process: successful. Feb 1 20:31:17 mza kernel: klips_debug:pfkey_msg_interp: processing ext 23 0pcef19c00 with processor 0pc024c090. Feb 1 20:31:17 mza kernel: klips_debug:pfkey_address_process: Feb 1 20:31:17 mza kernel: klips_debug:pfkey_address_process: found address family=2, AF_INET, 255.255.255.0. Feb 1 20:31:17 mza kernel: klips_debug:pfkey_address_process: found src mask address. Feb 1 20:31:17 mza kernel: klips_debug:pfkey_alloc_eroute: eroute struct already allocated Feb 1 20:31:17 mza kernel: klips_debug:pfkey_address_parse: extr->eroute set to 192.168.0.0/24:0->192.168.1.0/0:0 Feb 1 20:31:17 mza kernel: klips_debug:pfkey_address_process: successful. Feb 1 20:31:17 mza kernel: klips_debug:pfkey_msg_interp: processing ext 24 0pcef19c18 with processor 0pc024c090. Feb 1 20:31:17 mza kernel: klips_debug:pfkey_address_process: Feb 1 20:31:17 mza kernel: klips_debug:pfkey_address_process: found address family=2, AF_INET, 255.255.255.0. Feb 1 20:31:17 mza kernel: klips_debug:pfkey_address_process: found dst mask address. Feb 1 20:31:17 mza kernel: klips_debug:pfkey_alloc_eroute: eroute struct already allocated Feb 1 20:31:17 mza kernel: klips_debug:pfkey_address_parse: extr->eroute set to 192.168.0.0/24:0->192.168.1.0/24:0 Feb 1 20:31:17 mza kernel: klips_debug:pfkey_address_process: successful. Feb 1 20:31:17 mza kernel: klips_debug:pfkey_msg_interp: parsing message type 15(x-delflow(eroute)) with msg_parser 0pc024a4b0. Feb 1 20:31:17 mza kernel: klips_debug:pfkey_x_delflow_parse: . Feb 1 20:31:17 mza kernel: klips_debug:pfkey_x_delflow_parse: calling breakeroute for 192.168.0.0/24->192.168.1.0/24 Feb 1 20:31:17 mza kernel: klips_debug:ipsec_breakroute: attempting to delete eroute for 192.168.0.0/24:0->192.168.1.0/24:0 0 Feb 1 20:31:17 mza kernel: klips_debug:ipsec_breakroute: deleted eroute=0pc28e93c0, ident=0p00000000->0p00000000, first=0p00000000, last=0p00000000 Feb 1 20:31:17 mza kernel: klips_debug:pfkey_msg_hdr_build: Feb 1 20:31:17 mza kernel: klips_debug:pfkey_msg_hdr_build: on_entry &pfkey_ext=0pc230dc5c pfkey_ext=0pc230dd10 *pfkey_ext=0p00000000. Feb 1 20:31:17 mza kernel: klips_debug:pfkey_msg_hdr_build: on_exit &pfkey_ext=0pc230dc5c pfkey_ext=0pc230dd10 *pfkey_ext=0pccdedf00. Feb 1 20:31:17 mza kernel: klips_debug:pfkey_safe_build: error=0 Feb 1 20:31:17 mza kernel: klips_debug:pfkey_safe_build:success. Feb 1 20:31:17 mza kernel: klips_debug:pfkey_sa_build: spi=00000000 replay=0 sa_state=0 auth=0 encrypt=0 flags=0 Feb 1 20:31:17 mza kernel: klips_debug:pfkey_safe_build: error=0 Feb 1 20:31:17 mza kernel: klips_debug:pfkey_safe_build:success. Feb 1 20:31:17 mza kernel: klips_debug:pfkey_address_build: exttype=21 proto=0 prefixlen=0 Feb 1 20:31:17 mza kernel: klips_debug:pfkey_address_build: found address family AF_INET. Feb 1 20:31:17 mza kernel: klips_debug:pfkey_address_build: found address=192.168.0.0:0. Feb 1 20:31:17 mza kernel: klips_debug:pfkey_address_build: successful. Feb 1 20:31:17 mza kernel: klips_debug:pfkey_safe_build: error=0 Feb 1 20:31:17 mza kernel: klips_debug:pfkey_safe_build:success. Feb 1 20:31:17 mza kernel: klips_debug:pfkey_address_build: exttype=22 proto=0 prefixlen=0 Feb 1 20:31:17 mza kernel: klips_debug:pfkey_address_build: found address family AF_INET. Feb 1 20:31:17 mza kernel: klips_debug:pfkey_address_build: found address=192.168.1.0:0. Feb 1 20:31:17 mza kernel: klips_debug:pfkey_address_build: successful. Feb 1 20:31:17 mza kernel: klips_debug:pfkey_safe_build: error=0 Feb 1 20:31:17 mza kernel: klips_debug:pfkey_safe_build:success. Feb 1 20:31:17 mza kernel: klips_debug:pfkey_address_build: exttype=23 proto=0 prefixlen=0 Feb 1 20:31:17 mza kernel: klips_debug:pfkey_address_build: found address family AF_INET. Feb 1 20:31:17 mza kernel: klips_debug:pfkey_address_build: found address=255.255.255.0:0. Feb 1 20:31:17 mza kernel: klips_debug:pfkey_address_build: successful. Feb 1 20:31:17 mza kernel: klips_debug:pfkey_safe_build: error=0 Feb 1 20:31:17 mza kernel: klips_debug:pfkey_safe_build:success. Feb 1 20:31:17 mza kernel: klips_debug:pfkey_address_build: exttype=24 proto=0 prefixlen=0 Feb 1 20:31:17 mza kernel: klips_debug:pfkey_address_build: found address family AF_INET. Feb 1 20:31:17 mza kernel: klips_debug:pfkey_address_build: found address=255.255.255.0:0. Feb 1 20:31:17 mza kernel: klips_debug:pfkey_address_build: successful. Feb 1 20:31:17 mza kernel: klips_debug:pfkey_safe_build: error=0 Feb 1 20:31:17 mza kernel: klips_debug:pfkey_safe_build:success. Feb 1 20:31:17 mza kernel: klips_debug:pfkey_msg_build: pfkey_msg=0pc28e93c0 allocated 136 bytes, &(extensions[0])=0pc230dd10 Feb 1 20:31:17 mza kernel: klips_debug:pfkey_msg_build: copying 24 bytes from extensions[1]=0pccded6c0 to=0pc28e93d0 Feb 1 20:31:17 mza kernel: klips_debug:pfkey_msg_build: copying 24 bytes from extensions[21]=0pcbadbf40 to=0pc28e93e8 Feb 1 20:31:17 mza kernel: klips_debug:pfkey_msg_build: copying 24 bytes from extensions[22]=0pcbadb700 to=0pc28e9400 Feb 1 20:31:17 mza kernel: klips_debug:pfkey_msg_build: copying 24 bytes from extensions[23]=0pcbadbc80 to=0pc28e9418 Feb 1 20:31:17 mza kernel: klips_debug:pfkey_msg_build: copying 24 bytes from extensions[24]=0pc295bc80 to=0pc28e9430 Feb 1 20:31:17 mza kernel: klips_debug:pfkey_msg_build: extensions permitted=05e00003, seen=01e00003, required=01e00001. Feb 1 20:31:17 mza kernel: klips_debug:pfkey_msg_parse: parsing message ver=2, type=15(x-delflow(eroute)), errno=0, satype=11(INT), len=17, res=0, seq=6, pid=14682. Feb 1 20:31:17 mza kernel: klips_debug:pfkey_msg_parse: remain=15 ext_type=1(security-association) ext_len=3 parsing ext 0pc28e93d0 with parser pfkey_sa_parse. Feb 1 20:31:17 mza kernel: klips_debug:pfkey_sa_parse: successfully found len=3 exttype=1(security-association) spi=00000000 replay=0 state=0 auth=0 encrypt=0 flags=0 ref=1623. Feb 1 20:31:17 mza kernel: klips_debug:pfkey_msg_parse: remain=12 ext_type=21(X-source-flow-address) ext_len=3 parsing ext 0pc28e93e8 with parser pfkey_address_parse. Feb 1 20:31:17 mza kernel: klips_debug:pfkey_address_parse: found exttype=21(X-source-flow-address) family=2(AF_INET) address=192.168.0.0 proto=0 port=0. Feb 1 20:31:17 mza kernel: klips_debug:pfkey_msg_parse: remain=9 ext_type=22(X-dest-flow-address) ext_len=3 parsing ext 0pc28e9400 with parser pfkey_address_parse. Feb 1 20:31:17 mza kernel: klips_debug:pfkey_address_parse: found exttype=22(X-dest-flow-address) family=2(AF_INET) address=192.168.1.0 proto=0 port=0. Feb 1 20:31:17 mza kernel: klips_debug:pfkey_msg_parse: remain=6 ext_type=23(X-source-mask) ext_len=3 parsing ext 0pc28e9418 with parser pfkey_address_parse. Feb 1 20:31:17 mza kernel: klips_debug:pfkey_address_parse: found exttype=23(X-source-mask) family=2(AF_INET) address=255.255.255.0 proto=0 port=0. Feb 1 20:31:17 mza kernel: klips_debug:pfkey_msg_parse: remain=3 ext_type=24(X-dest-mask) ext_len=3 parsing ext 0pc28e9430 with parser pfkey_address_parse. Feb 1 20:31:17 mza kernel: klips_debug:pfkey_address_parse: found exttype=24(X-dest-mask) family=2(AF_INET) address=255.255.255.0 proto=0 port=0. Feb 1 20:31:17 mza kernel: klips_debug:pfkey_msg_parse: extensions permitted=05e00003, seen=01e00003, required=01e00001. Feb 1 20:31:17 mza kernel: klips_debug:pfkey_upmsg: allocating 136 bytes... Feb 1 20:31:17 mza kernel: klips_debug:pfkey_upmsg: ...allocated at 0pcba70180. Feb 1 20:31:17 mza kernel: klips_debug:pfkey_x_delflow_parse: sending up x_delflow reply message for satype=11(INT) to socket=0pc28339e0 succeeded. Feb 1 20:31:17 mza kernel: klips_debug:pfkey_x_delflow_parse: extr->ips cleaned up and freed. Feb 1 20:31:17 mza kernel: klips_debug:ipsec_sa_wipe: removing SA= (error)(0pcce25800), SAref=1623, table=0(0pd0000000), entry=1623 from the refTable. Feb 1 20:31:17 mza kernel: klips_debug:ipsec_sa_put: ipsec_sa SA: (error), ref:-1 reference count decremented. Feb 1 20:31:17 mza kernel: klips_debug:pfkey_release: sock=0pc28339e0 sk=0pcdb41100 Feb 1 20:31:17 mza kernel: klips_debug:pfkey_destroy_socket: . Feb 1 20:31:17 mza kernel: klips_debug:pfkey_remove_socket: . Feb 1 20:31:17 mza kernel: klips_debug:pfkey_remove_socket: succeeded. Feb 1 20:31:17 mza kernel: klips_debug:pfkey_destroy_socket: pfkey_remove_socket called. Feb 1 20:31:17 mza kernel: klips_debug:pfkey_destroy_socket: sk(0pcdb41100)->(&0pcdb41148)receive_queue.{next=0pcdb41148,prev=0pcdb41148}. Feb 1 20:31:17 mza kernel: klips_debug:pfkey_destroy_socket: destroyed. Feb 1 20:31:17 mza kernel: klips_debug:pfkey_list_remove_socket: removing sock=0pc28339e0 Feb 1 20:31:17 mza last message repeated 12 times Feb 1 20:31:17 mza kernel: klips_debug:pfkey_release: succeeded. Feb 1 20:31:18 mza kernel: klips_debug:ipsec_device_event: NETDEV_GOING_DOWN dev=ipsec0 Feb 1 20:31:18 mza kernel: klips_debug:ipsec_device_event: NETDEV_DOWN dev=ipsec0 flags=80 Feb 1 20:31:18 mza kernel: IPSEC EVENT: KLIPS device ipsec0 shut down. Feb 1 20:31:18 mza kernel: klips_debug:ipsec_tunnel_ioctl: tncfg service call #35313 for dev=ipsec0 Feb 1 20:31:18 mza kernel: klips_debug:ipsec_tunnel_ioctl: calling ipsec_tunnel_detatch. Feb 1 20:31:18 mza kernel: klips_debug:ipsec_tunnel_detach: physical device eth0 being detached from virtual device ipsec0 Feb 1 20:31:18 mza kernel: klips_debug:pfkey_create: sock=0pc2ada7a0 type:3 state:1 flags:0 protocol:2 Feb 1 20:31:18 mza kernel: klips_debug:pfkey_create: sock->fasync_list=0p00000000 sk->sleep=0pc2ada7bc. Feb 1 20:31:18 mza kernel: klips_debug:pfkey_insert_socket: sk=0pcdeeab40 Feb 1 20:31:18 mza kernel: klips_debug:pfkey_list_insert_socket: allocating 8 bytes for socketp=0pc2ada7a0 Feb 1 20:31:18 mza kernel: klips_debug:pfkey_create: Socket sock=0pc2ada7a0 sk=0pcdeeab40 initialised. Feb 1 20:31:18 mza kernel: klips_debug:pfkey_sendmsg: . Feb 1 20:31:18 mza kernel: klips_debug:pfkey_sendmsg: allocating 72 bytes for downward message. Feb 1 20:31:18 mza kernel: klips_debug:pfkey_sendmsg: msg sent for parsing. Feb 1 20:31:18 mza kernel: klips_debug:pfkey_msg_interp: parsing message ver=2, type=16, errno=0, satype=0(UNKNOWN), len=9, res=0, seq=1, pid=14786. Feb 1 20:31:18 mza kernel: klips_debug:ipsec_SAref_alloc: SAref requested... head=88, cont=1792, tail=255, listsize=256. Feb 1 20:31:18 mza kernel: klips_debug:ipsec_SAref_alloc: allocating SAref=1624, table=0, entry=1624 of 65536. Feb 1 20:31:18 mza kernel: klips_debug:ipsec_sa_alloc: allocated 500 bytes for ipsec_sa struct=0pcce25800 ref=1624. Feb 1 20:31:18 mza kernel: klips_debug:pfkey_msg_interp: allocated extr->ips=0pcce25800. Feb 1 20:31:18 mza kernel: klips_debug:pfkey_msg_parse: parsing message ver=2, type=16(x-debug), errno=0, satype=0(UNKNOWN), len=9, res=0, seq=1, pid=14786. Feb 1 20:31:18 mza kernel: klips_debug:pfkey_msg_parse: remain=7 ext_type=25(X-set-debug) ext_len=7 parsing ext 0pcef19950 with parser pfkey_x_ext_debug_parse. Feb 1 20:31:18 mza kernel: klips_debug:pfkey_msg_parse: extensions permitted=02000001, seen=02000001, required=02000001. Feb 1 20:31:18 mza kernel: klips_debug:pfkey_msg_interp: processing ext 25 0pcef19950 with processor 0pc024cdd0. Feb 1 20:31:18 mza kernel: klips_debug:pfkey_x_debug_process: . Feb 1 20:31:18 mza kernel: klips_debug:pfkey_x_debug_process: unset Feb 1 20:31:18 mza kernel: Feb 1 20:31:18 mza ipsec_setup: ...FreeS/WAN IPsec stopped Feb 1 20:31:18 mza ipsec_setup: Restarting FreeS/WAN IPsec 2.04... Feb 1 20:31:18 mza ipsec_setup: KLIPS debug `all' Feb 1 20:31:18 mza kernel: klips_debug:pfkey_x_debug_process: set Feb 1 20:31:18 mza kernel: klips_debug:pfkey_msg_interp: parsing message type 16(x-debug) with msg_parser 0pc024aaa0. Feb 1 20:31:18 mza kernel: klips_debug:pfkey_x_msg_debug_parse: . Feb 1 20:31:18 mza kernel: klips_debug:ipsec_sa_wipe: removing SA= (error)(0pcce25800), SAref=1627, table=0(0pd0000000), entry=1627 from the refTable. Feb 1 20:31:18 mza kernel: klips_debug:ipsec_sa_put: ipsec_sa SA: (error), ref:-1 reference count decremented. Feb 1 20:31:18 mza kernel: klips_debug:pfkey_release: sock=0pc2ada1a0 sk=0pc253e480 Feb 1 20:31:18 mza kernel: klips_debug:pfkey_destroy_socket: . Feb 1 20:31:18 mza kernel: klips_debug:pfkey_remove_socket: . Feb 1 20:31:18 mza kernel: klips_debug:pfkey_remove_socket: succeeded. Feb 1 20:31:18 mza kernel: klips_debug:pfkey_destroy_socket: pfkey_remove_socket called. Feb 1 20:31:18 mza kernel: klips_debug:pfkey_destroy_socket: sk(0pc253e480)->(&0pc253e4c8)receive_queue.{next=0pc253e4c8,prev=0pc253e4c8}. Feb 1 20:31:18 mza kernel: klips_debug:pfkey_destroy_socket: destroyed. Feb 1 20:31:18 mza kernel: klips_debug:pfkey_list_remove_socket: removing sock=0pc2ada1a0 Feb 1 20:31:18 mza last message repeated 12 times Feb 1 20:31:18 mza kernel: klips_debug:pfkey_release: succeeded. Feb 1 20:31:18 mza kernel: klips_debug:pfkey_create: sock=0pc2ada1a0 type:3 state:1 flags:0 protocol:2 Feb 1 20:31:18 mza kernel: klips_debug:pfkey_create: sock->fasync_list=0p00000000 sk->sleep=0pc2ada1bc. Feb 1 20:31:18 mza kernel: klips_debug:pfkey_insert_socket: sk=0pc253e480 Feb 1 20:31:18 mza kernel: klips_debug:pfkey_list_insert_socket: allocating 8 bytes for socketp=0pc2ada1a0 Feb 1 20:31:18 mza kernel: klips_debug:pfkey_create: Socket sock=0pc2ada1a0 sk=0pc253e480 initialised. Feb 1 20:31:18 mza kernel: klips_debug:pfkey_sendmsg: . Feb 1 20:31:18 mza kernel: klips_debug:pfkey_sendmsg: allocating 40 bytes for downward message. Feb 1 20:31:18 mza kernel: klips_debug:pfkey_sendmsg: msg sent for parsing. Feb 1 20:31:18 mza kernel: klips_debug:pfkey_msg_interp: parsing message ver=2, type=15, errno=0, satype=0(UNKNOWN), len=5, res=0, seq=1, pid=14827. Feb 1 20:31:18 mza kernel: klips_debug:ipsec_SAref_alloc: SAref requested... head=92, cont=1792, tail=255, listsize=256. Feb 1 20:31:18 mza kernel: klips_debug:ipsec_SAref_alloc: allocating SAref=1628, table=0, entry=1628 of 65536. Feb 1 20:31:18 mza kernel: klips_debug:ipsec_sa_alloc: allocated 500 bytes for ipsec_sa struct=0pcce25800 ref=1628. Feb 1 20:31:18 mza kernel: klips_debug:pfkey_msg_interp: allocated extr->ips=0pcce25800. Feb 1 20:31:18 mza kernel: klips_debug:pfkey_msg_parse: parsing message ver=2, type=15(x-delflow(eroute)), errno=0, satype=0(UNKNOWN), len=5, res=0, seq=1, pid=14827. Feb 1 20:31:18 mza kernel: klips_debug:pfkey_msg_parse: remain=3 ext_type=1(security-association) ext_len=3 parsing ext 0pcef5b450 with parser pfkey_sa_parse. Feb 1 20:31:18 mza kernel: klips_debug:pfkey_sa_parse: successfully found len=3 exttype=1(security-association) spi=6d2e6172 replay=0 state=0 auth=0 encrypt=0 flags=4 ref=-1. Feb 1 20:31:18 mza kernel: klips_debug:pfkey_msg_parse: extensions permitted=05e00c03, seen=00000003, required=00000001. Feb 1 20:31:18 mza kernel: klips_debug:pfkey_msg_interp: processing ext 1 0pcef5b450 with processor 0pc024bd40. Feb 1 20:31:18 mza kernel: klips_debug:pfkey_sa_process: . Feb 1 20:31:18 mza kernel: klips_debug:pfkey_msg_interp: parsing message type 15(x-delflow(eroute)) with msg_parser 0pc024a4b0. Feb 1 20:31:18 mza kernel: klips_debug:pfkey_x_delflow_parse: . Feb 1 20:31:18 mza kernel: klips_debug:pfkey_x_delflow_parse: CLEARFLOW flag set, calling cleareroutes. Feb 1 20:31:18 mza kernel: klips_debug:rj_walktree: for: rn=0pc133b1e8 rj_b=-3 rj_flags=6 leaf key = 00000000->00000000 Feb 1 20:31:18 mza kernel: klips_debug:rj_walktree: processing leaves, rn=0pc133b218 rj_b=-3 rj_flags=6 leaf key = ffffffff->ffffffff Feb 1 20:31:18 mza kernel: klips_debug:rj_walktree: while: base=0p00000000 rn=0pc133b1e8 rj_b=-3 rj_flags=6 leaf key = 00000000->00000000 Feb 1 20:31:18 mza kernel: klips_debug:ipsec_sa_wipe: removing SA= (error)(0pcce25800), SAref=1628, table=0(0pd0000000), entry=1628 from the refTable. Feb 1 20:31:18 mza kernel: klips_debug:ipsec_sa_put: ipsec_sa SA: (error), ref:-1 reference count decremented. Feb 1 20:31:18 mza kernel: klips_debug:pfkey_release: sock=0pc2ada1a0 sk=0pc253e480 Feb 1 20:31:18 mza kernel: klips_debug:pfkey_destroy_socket: . Feb 1 20:31:18 mza kernel: klips_debug:pfkey_remove_socket: . Feb 1 20:31:18 mza kernel: klips_debug:pfkey_remove_socket: succeeded. Feb 1 20:31:18 mza kernel: klips_debug:pfkey_destroy_socket: pfkey_remove_socket called. Feb 1 20:31:18 mza kernel: klips_debug:pfkey_destroy_socket: sk(0pc253e480)->(&0pc253e4c8)receive_queue.{next=0pc253e4c8,prev=0pc253e4c8}. Feb 1 20:31:18 mza kernel: klips_debug:pfkey_destroy_socket: destroyed. Feb 1 20:31:18 mza kernel: klips_debug:pfkey_list_remove_socket: removing sock=0pc2ada1a0 Feb 1 20:31:18 mza last message repeated 12 times Feb 1 20:31:18 mza kernel: klips_debug:pfkey_release: succeeded. Feb 1 20:31:18 mza kernel: klips_debug:pfkey_create: sock=0pc2ada1a0 type:3 state:1 flags:0 protocol:2 Feb 1 20:31:18 mza kernel: klips_debug:pfkey_create: sock->fasync_list=0p00000000 sk->sleep=0pc2ada1bc. Feb 1 20:31:18 mza kernel: klips_debug:pfkey_insert_socket: sk=0pc253e480 Feb 1 20:31:18 mza kernel: klips_debug:pfkey_list_insert_socket: allocating 8 bytes for socketp=0pc2ada1a0 Feb 1 20:31:18 mza kernel: klips_debug:pfkey_create: Socket sock=0pc2ada1a0 sk=0pc253e480 initialised. Feb 1 20:31:18 mza kernel: klips_debug:pfkey_sendmsg: . Feb 1 20:31:18 mza kernel: klips_debug:pfkey_sendmsg: allocating 16 bytes for downward message. Feb 1 20:31:18 mza kernel: klips_debug:pfkey_sendmsg: msg sent for parsing. Feb 1 20:31:18 mza kernel: klips_debug:pfkey_msg_interp: parsing message ver=2, type=9, errno=0, satype=0(UNKNOWN), len=2, res=0, seq=1, pid=14828. Feb 1 20:31:18 mza kernel: klips_debug:ipsec_SAref_alloc: SAref requested... head=93, cont=1792, tail=255, listsize=256. Feb 1 20:31:18 mza kernel: klips_debug:ipsec_SAref_alloc: allocating SAref=1629, table=0, entry=1629 of 65536. Feb 1 20:31:18 mza kernel: klips_debug:ipsec_sa_alloc: allocated 500 bytes for ipsec_sa struct=0pcce25800 ref=1629. Feb 1 20:31:18 mza kernel: klips_debug:pfkey_msg_interp: allocated extr->ips=0pcce25800. Feb 1 20:31:18 mza kernel: klips_debug:pfkey_msg_parse: parsing message ver=2, type=9(flush), errno=0, satype=0(UNKNOWN), len=2, res=0, seq=1, pid=14828. Feb 1 20:31:18 mza kernel: klips_debug:pfkey_msg_parse: extensions permitted=00000001, seen=00000001, required=00000001. Feb 1 20:31:18 mza kernel: klips_debug:pfkey_msg_interp: parsing message type 9(flush) with msg_parser 0pc0249120. Feb 1 20:31:18 mza kernel: klips_debug:pfkey_flush_parse: flushing type 0 SAs Feb 1 20:31:18 mza kernel: klips_debug:ipsec_sadb_cleanup: cleaning up proto=0. Feb 1 20:31:18 mza kernel: klips_debug:ipsec_sadb_cleanup: removing SAref entries and tables.<6>klips_debug:ipsec_sadb_cleanup: cleaning SAref table=0. Feb 1 20:31:18 mza kernel: klips_debug:ipsec_sa_delchain: passed SA: (error) Feb 1 20:31:18 mza kernel: klips_debug:ipsec_sa_delchain: unlinking and delting SA: (error)<6>. Feb 1 20:31:18 mza kernel: klips_debug:ipsec_sa_del: deleting SA: (error), hashval=0. Feb 1 20:31:18 mza kernel: klips_debug:ipsec_sa_del: no entries in ipsec_sa table for hash=0 of SA: (error). Feb 1 20:31:18 mza kernel: klips_debug:ipsec_sa_delchain: ipsec_sa_del returned error 2. Feb 1 20:31:18 mza kernel: klips_debug:ipsec_sadb_cleanup: cleaning SAref table=1. Feb 1 20:31:18 mza kernel: Feb 1 20:31:18 mza kernel: klips_debug:ipsec_sadb_cleanup: cleaned 1 used refTables. Feb 1 20:31:18 mza kernel: klips_debug:pfkey_upmsg: allocating 16 bytes... Feb 1 20:31:18 mza kernel: klips_debug:pfkey_upmsg: ...allocated at 0pcba70480. Feb 1 20:31:18 mza kernel: klips_debug:pfkey_flush_parse: sending up flush reply message for satype=0(UNKNOWN) to socket=0pc2ada1a0 succeeded. Feb 1 20:31:18 mza kernel: klips_debug:ipsec_sa_wipe: removing SA= (error)(0pcce25800), SAref=1629, table=0(0pd0000000), entry=1629 from the refTable. Feb 1 20:31:18 mza kernel: klips_debug:ipsec_sa_put: ipsec_sa SA: (error), ref:-1 reference count decremented. Feb 1 20:31:18 mza kernel: klips_debug:pfkey_release: sock=0pc2ada1a0 sk=0pc253e480 Feb 1 20:31:18 mza kernel: klips_debug:pfkey_destroy_socket: . Feb 1 20:31:18 mza kernel: klips_debug:pfkey_remove_socket: . Feb 1 20:31:18 mza kernel: klips_debug:pfkey_remove_socket: succeeded. Feb 1 20:31:18 mza kernel: klips_debug:pfkey_destroy_socket: pfkey_remove_socket called. Feb 1 20:31:18 mza kernel: klips_debug:pfkey_destroy_socket: sk(0pc253e480)->(&0pc253e4c8)receive_queue.{next=0pcba70480,prev=0pcba70480}. Feb 1 20:31:18 mza kernel: klips_debug:pfkey_destroy_socket: skb=0pcba70480 freed. Feb 1 20:31:18 mza kernel: klips_debug:pfkey_destroy_socket: destroyed. Feb 1 20:31:18 mza kernel: klips_debug:pfkey_list_remove_socket: removing sock=0pc2ada1a0 Feb 1 20:31:18 mza last message repeated 12 times Feb 1 20:31:18 mza kernel: klips_debug:pfkey_release: succeeded. Feb 1 20:31:18 mza ipsec_setup: KLIPS ipsec0 on eth0 190.3.63.165/255.255.255.224 broadcast 190.3.63.191 Feb 1 20:31:18 mza kernel: klips_debug:ipsec_tunnel_ioctl: tncfg service call #35312 for dev=ipsec0 Feb 1 20:31:18 mza kernel: klips_debug:ipsec_tunnel_ioctl: calling ipsec_tunnel_attatch... Feb 1 20:31:18 mza kernel: klips_debug:ipsec_tunnel_attach: physical device eth0 being attached has HW address: 0:08:a1:40:fe:0a Feb 1 20:31:18 mza kernel: klips_debug:ipsec_tunnel_open: dev = ipsec0, prv->dev = eth0 Feb 1 20:31:18 mza kernel: klips_debug:ipsec_device_event: NETDEV_UP dev=ipsec0 Feb 1 20:31:18 mza ipsec_setup: ...FreeS/WAN IPsec started Feb 1 20:31:18 mza kernel: klips_debug:pfkey_create: sock=0pc2a41d60 type:3 state:1 flags:0 protocol:2 Feb 1 20:31:18 mza kernel: klips_debug:pfkey_create: sock->fasync_list=0p00000000 sk->sleep=0pc2a41d7c. Feb 1 20:31:18 mza kernel: klips_debug:pfkey_insert_socket: sk=0pc253e480 Feb 1 20:31:18 mza kernel: klips_debug:pfkey_list_insert_socket: allocating 8 bytes for socketp=0pc2a41d60 Feb 1 20:31:18 mza kernel: klips_debug:pfkey_create: Socket sock=0pc2a41d60 sk=0pc253e480 initialised. Feb 1 20:31:18 mza kernel: klips_debug:pfkey_sendmsg: . Feb 1 20:31:18 mza kernel: klips_debug:pfkey_sendmsg: allocating 16 bytes for downward message. Feb 1 20:31:18 mza kernel: klips_debug:pfkey_sendmsg: msg sent for parsing. Feb 1 20:31:18 mza kernel: klips_debug:pfkey_msg_interp: parsing message ver=2, type=7, errno=0, satype=2(AH), len=2, res=0, seq=1, pid=14866. Feb 1 20:31:18 mza kernel: klips_debug:ipsec_SAref_alloc: SAref requested... head=94, cont=1792, tail=255, listsize=256. Feb 1 20:31:18 mza kernel: klips_debug:ipsec_SAref_alloc: allocating SAref=1630, table=0, entry=1630 of 65536. Feb 1 20:31:18 mza kernel: klips_debug:ipsec_sa_alloc: allocated 500 bytes for ipsec_sa struct=0pcce25800 ref=1630. Feb 1 20:31:18 mza kernel: klips_debug:pfkey_msg_interp: allocated extr->ips=0pcce25800. Feb 1 20:31:18 mza kernel: klips_debug:pfkey_msg_parse: parsing message ver=2, type=7(register), errno=0, satype=2(AH), len=2, res=0, seq=1, pid=14866. Feb 1 20:31:19 mza kernel: klips_debug:pfkey_msg_parse: extensions permitted=00000001, seen=00000001, required=00000001. Feb 1 20:31:19 mza kernel: klips_debug:pfkey_msg_interp: parsing message type 7(register) with msg_parser 0pc0248930. Feb 1 20:31:19 mza kernel: klips_debug:pfkey_register_parse: . Feb 1 20:31:19 mza kernel: klips_debug:pfkey_list_insert_socket: allocating 8 bytes for socketp=0pc2a41d60 Feb 1 20:31:19 mza kernel: klips_debug:pfkey_register_parse: SATYPE=02(AH) successfully registered by KMd (pid=14866). Feb 1 20:31:19 mza kernel: klips_debug:pfkey_register_reply: pfkey_supported_list[2]=0pc1370e80 Feb 1 20:31:19 mza kernel: klips_debug:pfkey_register_reply: checking supported=0pc1370e80 Feb 1 20:31:19 mza kernel: klips_debug:pfkey_register_reply: adding auth alg. Feb 1 20:31:19 mza kernel: klips_debug:pfkey_register_reply: checking supported=0pc1370e40 Feb 1 20:31:19 mza kernel: klips_debug:pfkey_register_reply: adding auth alg. Feb 1 20:31:19 mza kernel: klips_debug:pfkey_register_reply: allocating 16 bytes for auth algs. Feb 1 20:31:19 mza kernel: klips_debug:pfkey_register_reply: found satype=2(AH) exttype=14 id=3 ivlen=0 minbits=160 maxbits=160. Feb 1 20:31:19 mza kernel: klips_debug:pfkey_register_reply: found satype=2(AH) exttype=14 id=2 ivlen=0 minbits=128 maxbits=128. Feb 1 20:31:19 mza kernel: klips_debug:pfkey_msg_hdr_build: Feb 1 20:31:19 mza kernel: klips_debug:pfkey_msg_hdr_build: on_entry &pfkey_ext=0pc2a67d38 pfkey_ext=0pc2a67d6c *pfkey_ext=0p00000000. Feb 1 20:31:19 mza kernel: klips_debug:pfkey_msg_hdr_build: on_exit &pfkey_ext=0pc2a67d38 pfkey_ext=0pc2a67d6c *pfkey_ext=0pcbadbf00. Feb 1 20:31:19 mza kernel: klips_debug:pfkey_safe_build: error=0 Feb 1 20:31:19 mza kernel: klips_debug:pfkey_safe_build:success. Feb 1 20:31:19 mza kernel: klips_debug:pfkey_safe_build: error=0 Feb 1 20:31:19 mza kernel: klips_debug:pfkey_safe_build:success. Feb 1 20:31:19 mza kernel: klips_debug:pfkey_msg_build: pfkey_msg=0pcf7dfd00 allocated 40 bytes, &(extensions[0])=0pc2a67d6c Feb 1 20:31:19 mza kernel: klips_debug:pfkey_msg_build: copying 24 bytes from extensions[14]=0pcbadbc80 to=0pcf7dfd10 Feb 1 20:31:19 mza kernel: klips_debug:pfkey_msg_build: extensions permitted=0000c001, seen=00004001, required=00000001. Feb 1 20:31:19 mza kernel: klips_debug:pfkey_msg_parse: parsing message ver=2, type=7(register), errno=0, satype=2(AH), len=5, res=0, seq=1, pid=14866. Feb 1 20:31:19 mza kernel: klips_debug:pfkey_msg_parse: remain=3 ext_type=14(supported-auth) ext_len=3 parsing ext 0pcf7dfd10 with parser pfkey_supported_parse. Feb 1 20:31:19 mza kernel: klips_debug:pfkey_msg_parse: extensions permitted=0000c001, seen=00004001, required=00000001. Feb 1 20:31:19 mza kernel: klips_debug:pfkey_upmsg: allocating 40 bytes... Feb 1 20:31:19 mza kernel: klips_debug:pfkey_upmsg: ...allocated at 0pc1375500. Feb 1 20:31:19 mza kernel: klips_debug:pfkey_register_reply: sending up register message for satype=2(AH) to socket=0pc2a41d60 succeeded. Feb 1 20:31:19 mza kernel: klips_debug:ipsec_sa_wipe: removing SA= (error)(0pcce25800), SAref=1630, table=0(0pd0000000), entry=1630 from the refTable. Feb 1 20:31:19 mza kernel: klips_debug:ipsec_sa_put: ipsec_sa SA: (error), ref:-1 reference count decremented. Feb 1 20:31:19 mza kernel: klips_debug:pfkey_sendmsg: . Feb 1 20:31:19 mza kernel: klips_debug:pfkey_sendmsg: allocating 16 bytes for downward message. Feb 1 20:31:19 mza kernel: klips_debug:pfkey_sendmsg: msg sent for parsing. Feb 1 20:31:19 mza kernel: klips_debug:pfkey_msg_interp: parsing message ver=2, type=7, errno=0, satype=3(ESP), len=2, res=0, seq=2, pid=14866. Feb 1 20:31:19 mza kernel: klips_debug:ipsec_SAref_alloc: SAref requested... head=95, cont=1792, tail=255, listsize=256. Feb 1 20:31:19 mza kernel: klips_debug:ipsec_SAref_alloc: allocating SAref=1631, table=0, entry=1631 of 65536. Feb 1 20:31:19 mza kernel: klips_debug:ipsec_sa_alloc: allocated 500 bytes for ipsec_sa struct=0pcce25800 ref=1631. Feb 1 20:31:19 mza kernel: klips_debug:pfkey_msg_interp: allocated extr->ips=0pcce25800. Feb 1 20:31:19 mza kernel: klips_debug:pfkey_msg_parse: parsing message ver=2, type=7(register), errno=0, satype=3(ESP), len=2, res=0, seq=2, pid=14866. Feb 1 20:31:19 mza kernel: klips_debug:pfkey_msg_parse: extensions permitted=00000001, seen=00000001, required=00000001. Feb 1 20:31:19 mza kernel: klips_debug:pfkey_msg_interp: parsing message type 7(register) with msg_parser 0pc0248930. Feb 1 20:31:19 mza kernel: klips_debug:pfkey_register_parse: . Feb 1 20:31:19 mza kernel: klips_debug:pfkey_list_insert_socket: allocating 8 bytes for socketp=0pc2a41d60 Feb 1 20:31:19 mza kernel: klips_debug:pfkey_register_parse: SATYPE=03(ESP) successfully registered by KMd (pid=14866). Feb 1 20:31:19 mza kernel: klips_debug:pfkey_register_reply: pfkey_supported_list[3]=0pc1370f40 Feb 1 20:31:19 mza kernel: klips_debug:pfkey_register_reply: checking supported=0pc1370f40 Feb 1 20:31:19 mza kernel: klips_debug:pfkey_register_reply: adding encrypt alg. Feb 1 20:31:19 mza kernel: klips_debug:pfkey_register_reply: checking supported=0pc1370f00 Feb 1 20:31:19 mza kernel: klips_debug:pfkey_register_reply: adding auth alg. Feb 1 20:31:19 mza kernel: klips_debug:pfkey_register_reply: checking supported=0pc1370ec0 Feb 1 20:31:19 mza kernel: klips_debug:pfkey_register_reply: adding auth alg. Feb 1 20:31:19 mza kernel: klips_debug:pfkey_register_reply: allocating 16 bytes for auth algs. Feb 1 20:31:19 mza kernel: klips_debug:pfkey_register_reply: allocating 8 bytes for enc algs. Feb 1 20:31:19 mza kernel: klips_debug:pfkey_register_reply: found satype=3(ESP) exttype=15 id=3 ivlen=64 minbits=168 maxbits=168. Feb 1 20:31:19 mza kernel: klips_debug:pfkey_register_reply: found satype=3(ESP) exttype=14 id=3 ivlen=0 minbits=160 maxbits=160. Feb 1 20:31:19 mza kernel: klips_debug:pfkey_register_reply: found satype=3(ESP) exttype=14 id=2 ivlen=0 minbits=128 maxbits=128. Feb 1 20:31:19 mza kernel: klips_debug:pfkey_msg_hdr_build: Feb 1 20:31:19 mza kernel: klips_debug:pfkey_msg_hdr_build: on_entry &pfkey_ext=0pc2a67d38 pfkey_ext=0pc2a67d6c *pfkey_ext=0p00000000. Feb 1 20:31:19 mza kernel: klips_debug:pfkey_msg_hdr_build: on_exit &pfkey_ext=0pc2a67d38 pfkey_ext=0pc2a67d6c *pfkey_ext=0pcbadbec0. Feb 1 20:31:19 mza kernel: klips_debug:pfkey_safe_build: error=0 Feb 1 20:31:19 mza kernel: klips_debug:pfkey_safe_build:success. Feb 1 20:31:19 mza kernel: klips_debug:pfkey_safe_build: error=0 Feb 1 20:31:19 mza kernel: klips_debug:pfkey_safe_build:success. Feb 1 20:31:19 mza kernel: klips_debug:pfkey_safe_build: error=0 Feb 1 20:31:19 mza kernel: klips_debug:pfkey_safe_build:success. Feb 1 20:31:19 mza kernel: klips_debug:pfkey_msg_build: pfkey_msg=0pcf7dfd00 allocated 56 bytes, &(extensions[0])=0pc2a67d6c Feb 1 20:31:19 mza kernel: klips_debug:pfkey_msg_build: copying 24 bytes from extensions[14]=0pcbadb700 to=0pcf7dfd10 Feb 1 20:31:19 mza kernel: klips_debug:pfkey_msg_build: copying 16 bytes from extensions[15]=0pcbadbf40 to=0pcf7dfd28 Feb 1 20:31:19 mza kernel: klips_debug:pfkey_msg_build: extensions permitted=0000c001, seen=0000c001, required=00000001. Feb 1 20:31:19 mza kernel: klips_debug:pfkey_msg_parse: parsing message ver=2, type=7(register), errno=0, satype=3(ESP), len=7, res=0, seq=2, pid=14866. Feb 1 20:31:19 mza kernel: klips_debug:pfkey_msg_parse: remain=5 ext_type=14(supported-auth) ext_len=3 parsing ext 0pcf7dfd10 with parser pfkey_supported_parse. Feb 1 20:31:19 mza kernel: klips_debug:pfkey_msg_parse: remain=2 ext_type=15(supported-cipher) ext_len=2 parsing ext 0pcf7dfd28 with parser pfkey_supported_parse. Feb 1 20:31:19 mza kernel: klips_debug:pfkey_msg_parse: extensions permitted=0000c001, seen=0000c001, required=00000001. Feb 1 20:31:19 mza kernel: klips_debug:pfkey_upmsg: allocating 56 bytes... Feb 1 20:31:19 mza kernel: klips_debug:pfkey_upmsg: ...allocated at 0pcbc16b00. Feb 1 20:31:19 mza kernel: klips_debug:pfkey_register_reply: sending up register message for satype=3(ESP) to socket=0pc2a41d60 succeeded. Feb 1 20:31:19 mza kernel: klips_debug:ipsec_sa_wipe: removing SA= (error)(0pcce25800), SAref=1631, table=0(0pd0000000), entry=1631 from the refTable. Feb 1 20:31:19 mza kernel: klips_debug:ipsec_sa_put: ipsec_sa SA: (error), ref:-1 reference count decremented. Feb 1 20:31:19 mza kernel: klips_debug:pfkey_sendmsg: . Feb 1 20:31:19 mza kernel: klips_debug:pfkey_sendmsg: allocating 16 bytes for downward message. Feb 1 20:31:19 mza kernel: klips_debug:pfkey_sendmsg: msg sent for parsing. Feb 1 20:31:19 mza kernel: klips_debug:pfkey_msg_interp: parsing message ver=2, type=7, errno=0, satype=10(COMP), len=2, res=0, seq=3, pid=14866. Feb 1 20:31:19 mza kernel: klips_debug:ipsec_SAref_alloc: SAref requested... head=96, cont=1792, tail=255, listsize=256. Feb 1 20:31:19 mza kernel: klips_debug:ipsec_SAref_alloc: allocating SAref=1632, table=0, entry=1632 of 65536. Feb 1 20:31:19 mza kernel: klips_debug:ipsec_sa_alloc: allocated 500 bytes for ipsec_sa struct=0pcce25800 ref=1632. Feb 1 20:31:19 mza kernel: klips_debug:pfkey_msg_interp: allocated extr->ips=0pcce25800. Feb 1 20:31:19 mza kernel: klips_debug:pfkey_msg_parse: parsing message ver=2, type=7(register), errno=0, satype=10(COMP), len=2, res=0, seq=3, pid=14866. Feb 1 20:31:19 mza kernel: klips_debug:pfkey_msg_parse: extensions permitted=00000001, seen=00000001, required=00000001. Feb 1 20:31:19 mza kernel: klips_debug:pfkey_msg_interp: parsing message type 7(register) with msg_parser 0pc0248930. Feb 1 20:31:19 mza kernel: klips_debug:pfkey_register_parse: . Feb 1 20:31:19 mza kernel: klips_debug:pfkey_list_insert_socket: allocating 8 bytes for socketp=0pc2a41d60 Feb 1 20:31:19 mza kernel: klips_debug:pfkey_register_parse: SATYPE=10(COMP) successfully registered by KMd (pid=14866). Feb 1 20:31:19 mza kernel: klips_debug:pfkey_register_reply: pfkey_supported_list[10]=0pc1370f80 Feb 1 20:31:19 mza kernel: klips_debug:pfkey_register_reply: checking supported=0pc1370f80 Feb 1 20:31:19 mza kernel: klips_debug:pfkey_register_reply: adding encrypt alg. Feb 1 20:31:19 mza kernel: klips_debug:pfkey_register_reply: allocating 8 bytes for enc algs. Feb 1 20:31:19 mza kernel: klips_debug:pfkey_register_reply: found satype=10(COMP) exttype=15 id=2 ivlen=0 minbits=1 maxbits=1. Feb 1 20:31:19 mza kernel: klips_debug:pfkey_msg_hdr_build: Feb 1 20:31:19 mza kernel: klips_debug:pfkey_msg_hdr_build: on_entry &pfkey_ext=0pc2a67d38 pfkey_ext=0pc2a67d6c *pfkey_ext=0p00000000. Feb 1 20:31:19 mza kernel: klips_debug:pfkey_msg_hdr_build: on_exit &pfkey_ext=0pc2a67d38 pfkey_ext=0pc2a67d6c *pfkey_ext=0pcbadbec0. Feb 1 20:31:19 mza kernel: klips_debug:pfkey_safe_build: error=0 Feb 1 20:31:19 mza kernel: klips_debug:pfkey_safe_build:success. Feb 1 20:31:19 mza kernel: klips_debug:pfkey_safe_build: error=0 Feb 1 20:31:19 mza kernel: klips_debug:pfkey_safe_build:success. Feb 1 20:31:19 mza kernel: klips_debug:pfkey_msg_build: pfkey_msg=0pcbadbc80 allocated 32 bytes, &(extensions[0])=0pc2a67d6c Feb 1 20:31:19 mza kernel: klips_debug:pfkey_msg_build: copying 16 bytes from extensions[15]=0pcbadbf00 to=0pcbadbc90 Feb 1 20:31:19 mza kernel: klips_debug:pfkey_msg_build: extensions permitted=0000c001, seen=00008001, required=00000001. Feb 1 20:31:19 mza kernel: klips_debug:pfkey_msg_parse: parsing message ver=2, type=7(register), errno=0, satype=10(COMP), len=4, res=0, seq=3, pid=14866. Feb 1 20:31:19 mza kernel: klips_debug:pfkey_msg_parse: remain=2 ext_type=15(supported-cipher) ext_len=2 parsing ext 0pcbadbc90 with parser pfkey_supported_parse. Feb 1 20:31:19 mza kernel: klips_debug:pfkey_msg_parse: extensions permitted=0000c001, seen=00008001, required=00000001. Feb 1 20:31:19 mza kernel: klips_debug:pfkey_upmsg: allocating 32 bytes... Feb 1 20:31:19 mza kernel: klips_debug:pfkey_upmsg: ...allocated at 0pcdcc1a80. Feb 1 20:31:19 mza kernel: klips_debug:pfkey_register_reply: sending up register message for satype=10(COMP) to socket=0pc2a41d60 succeeded. Feb 1 20:31:19 mza kernel: klips_debug:ipsec_sa_wipe: removing SA= (error)(0pcce25800), SAref=1632, table=0(0pd0000000), entry=1632 from the refTable. Feb 1 20:31:19 mza kernel: klips_debug:ipsec_sa_put: ipsec_sa SA: (error), ref:-1 reference count decremented. Feb 1 20:31:19 mza kernel: klips_debug:pfkey_sendmsg: . Feb 1 20:31:19 mza kernel: klips_debug:pfkey_sendmsg: allocating 16 bytes for downward message. Feb 1 20:31:19 mza kernel: klips_debug:pfkey_sendmsg: msg sent for parsing. Feb 1 20:31:19 mza kernel: klips_debug:pfkey_msg_interp: parsing message ver=2, type=7, errno=0, satype=9(IPIP), len=2, res=0, seq=4, pid=14866. Feb 1 20:31:19 mza kernel: klips_debug:ipsec_SAref_alloc: SAref requested... head=97, cont=1792, tail=255, listsize=256. Feb 1 20:31:19 mza kernel: klips_debug:ipsec_SAref_alloc: allocating SAref=1633, table=0, entry=1633 of 65536. Feb 1 20:31:19 mza kernel: klips_debug:ipsec_sa_alloc: allocated 500 bytes for ipsec_sa struct=0pcce25800 ref=1633. Feb 1 20:31:19 mza kernel: klips_debug:pfkey_msg_interp: allocated extr->ips=0pcce25800. Feb 1 20:31:19 mza kernel: klips_debug:pfkey_msg_parse: parsing message ver=2, type=7(register), errno=0, satype=9(IPIP), len=2, res=0, seq=4, pid=14866. Feb 1 20:31:19 mza kernel: klips_debug:pfkey_msg_parse: extensions permitted=00000001, seen=00000001, required=00000001. Feb 1 20:31:19 mza kernel: klips_debug:pfkey_msg_interp: parsing message type 7(register) with msg_parser 0pc0248930. Feb 1 20:31:19 mza kernel: klips_debug:pfkey_register_parse: . Feb 1 20:31:19 mza kernel: klips_debug:pfkey_list_insert_socket: allocating 8 bytes for socketp=0pc2a41d60 Feb 1 20:31:19 mza kernel: klips_debug:pfkey_register_parse: SATYPE=09(IPIP) successfully registered by KMd (pid=14866). Feb 1 20:31:19 mza kernel: klips_debug:pfkey_register_reply: pfkey_supported_list[9]=0pc1370fc0 Feb 1 20:31:19 mza kernel: klips_debug:pfkey_register_reply: checking supported=0pc1370fc0 Feb 1 20:31:19 mza kernel: klips_debug:pfkey_register_reply: adding encrypt alg. Feb 1 20:31:19 mza kernel: klips_debug:pfkey_register_reply: allocating 8 bytes for enc algs. Feb 1 20:31:19 mza kernel: klips_debug:pfkey_register_reply: found satype=9(IPIP) exttype=15 id=1 ivlen=0 minbits=32 maxbits=32. Feb 1 20:31:19 mza kernel: klips_debug:pfkey_msg_hdr_build: Feb 1 20:31:20 mza kernel: klips_debug:pfkey_msg_hdr_build: on_entry &pfkey_ext=0pc2a67d38 pfkey_ext=0pc2a67d6c *pfkey_ext=0p00000000. Feb 1 20:31:20 mza kernel: klips_debug:pfkey_msg_hdr_build: on_exit &pfkey_ext=0pc2a67d38 pfkey_ext=0pc2a67d6c *pfkey_ext=0pcbadb700. Feb 1 20:31:20 mza kernel: klips_debug:pfkey_safe_build: error=0 Feb 1 20:31:20 mza kernel: klips_debug:pfkey_safe_build:success. Feb 1 20:31:20 mza kernel: klips_debug:pfkey_safe_build: error=0 Feb 1 20:31:20 mza kernel: klips_debug:pfkey_safe_build:success. Feb 1 20:31:20 mza kernel: klips_debug:pfkey_msg_build: pfkey_msg=0pccdedf00 allocated 32 bytes, &(extensions[0])=0pc2a67d6c Feb 1 20:31:20 mza kernel: klips_debug:pfkey_msg_build: copying 16 bytes from extensions[15]=0pccded6c0 to=0pccdedf10 Feb 1 20:31:20 mza kernel: klips_debug:pfkey_msg_build: extensions permitted=0000c001, seen=00008001, required=00000001. Feb 1 20:31:20 mza kernel: klips_debug:pfkey_msg_parse: parsing message ver=2, type=7(register), errno=0, satype=9(IPIP), len=4, res=0, seq=4, pid=14866. Feb 1 20:31:20 mza kernel: klips_debug:pfkey_msg_parse: remain=2 ext_type=15(supported-cipher) ext_len=2 parsing ext 0pccdedf10 with parser pfkey_supported_parse. Feb 1 20:31:20 mza kernel: klips_debug:pfkey_msg_parse: extensions permitted=0000c001, seen=00008001, required=00000001. Feb 1 20:31:20 mza kernel: klips_debug:pfkey_upmsg: allocating 32 bytes... Feb 1 20:31:20 mza kernel: klips_debug:pfkey_upmsg: ...allocated at 0pc2add380. Feb 1 20:31:20 mza kernel: klips_debug:pfkey_register_reply: sending up register message for satype=9(IPIP) to socket=0pc2a41d60 succeeded. Feb 1 20:31:20 mza kernel: klips_debug:ipsec_sa_wipe: removing SA= (error)(0pcce25800), SAref=1633, table=0(0pd0000000), entry=1633 from the refTable. Feb 1 20:31:20 mza kernel: klips_debug:ipsec_sa_put: ipsec_sa SA: (error), ref:-1 reference count decremented. Feb 1 20:31:21 mza kernel: klips_debug:pfkey_sendmsg: . Feb 1 20:31:21 mza kernel: klips_debug:pfkey_sendmsg: allocating 184 bytes for downward message. Feb 1 20:31:21 mza kernel: klips_debug:pfkey_sendmsg: msg sent for parsing. Feb 1 20:31:21 mza kernel: klips_debug:pfkey_msg_interp: parsing message ver=2, type=14, errno=0, satype=11(INT), len=23, res=0, seq=5, pid=14866. Feb 1 20:31:21 mza kernel: klips_debug:ipsec_SAref_alloc: SAref requested... head=98, cont=1792, tail=255, listsize=256. Feb 1 20:31:21 mza kernel: klips_debug:ipsec_SAref_alloc: allocating SAref=1634, table=0, entry=1634 of 65536. Feb 1 20:31:21 mza kernel: klips_debug:ipsec_sa_alloc: allocated 500 bytes for ipsec_sa struct=0pcce25800 ref=1634. Feb 1 20:31:21 mza kernel: klips_debug:pfkey_msg_interp: allocated extr->ips=0pcce25800. Feb 1 20:31:21 mza kernel: klips_debug:pfkey_msg_interp: satype 11 lookups to proto=61. Feb 1 20:31:21 mza kernel: klips_debug:pfkey_msg_parse: parsing message ver=2, type=14(x-addflow(eroute)), errno=0, satype=11(INT), len=23, res=0, seq=5, pid=14866. Feb 1 20:31:21 mza kernel: klips_debug:pfkey_msg_parse: satype 11(INT) conversion to proto gives 61 for msg_type 14(x-addflow(eroute)). Feb 1 20:31:21 mza kernel: klips_debug:pfkey_msg_parse: remain=21 ext_type=1(security-association) ext_len=3 parsing ext 0pccdaa790 with parser pfkey_sa_parse. Feb 1 20:31:22 mza kernel: klips_debug:pfkey_sa_parse: successfully found len=3 exttype=1(security-association) spi=00000104 replay=0 state=0 auth=0 encrypt=0 flags=0 ref=-1. Feb 1 20:31:22 mza kernel: klips_debug:pfkey_msg_parse: remain=18 ext_type=5(source-address) ext_len=3 parsing ext 0pccdaa7a8 with parser pfkey_address_parse. Feb 1 20:31:22 mza kernel: klips_debug:pfkey_address_parse: found exttype=5(source-address) family=2(AF_INET) address=190.3.63.165 proto=0 port=0. Feb 1 20:31:22 mza kernel: klips_debug:pfkey_msg_parse: remain=15 ext_type=6(destination-address) ext_len=3 parsing ext 0pccdaa7c0 with parser pfkey_address_parse. Feb 1 20:31:22 mza kernel: klips_debug:pfkey_address_parse: found exttype=6(destination-address) family=2(AF_INET) address=0.0.0.0 proto=0 port=0. Feb 1 20:31:22 mza kernel: klips_debug:pfkey_msg_parse: remain=12 ext_type=21(X-source-flow-address) ext_len=3 parsing ext 0pccdaa7d8 with parser pfkey_address_parse. Feb 1 20:31:22 mza kernel: klips_debug:pfkey_address_parse: found exttype=21(X-source-flow-address) family=2(AF_INET) address=192.168.0.0 proto=0 port=0. Feb 1 20:31:22 mza kernel: klips_debug:pfkey_msg_parse: remain=9 ext_type=22(X-dest-flow-address) ext_len=3 parsing ext 0pccdaa7f0 with parser pfkey_address_parse. Feb 1 20:31:22 mza kernel: klips_debug:pfkey_address_parse: found exttype=22(X-dest-flow-address) family=2(AF_INET) address=192.168.1.0 proto=0 port=0. Feb 1 20:31:22 mza kernel: klips_debug:pfkey_msg_parse: remain=6 ext_type=23(X-source-mask) ext_len=3 parsing ext 0pccdaa808 with parser pfkey_address_parse. Feb 1 20:31:22 mza kernel: klips_debug:pfkey_address_parse: found exttype=23(X-source-mask) family=2(AF_INET) address=255.255.255.0 proto=0 port=0. Feb 1 20:31:22 mza kernel: klips_debug:pfkey_msg_parse: remain=3 ext_type=24(X-dest-mask) ext_len=3 parsing ext 0pccdaa820 with parser pfkey_address_parse. Feb 1 20:31:22 mza kernel: klips_debug:pfkey_address_parse: found exttype=24(X-dest-mask) family=2(AF_INET) address=255.255.255.0 proto=0 port=0. Feb 1 20:31:22 mza kernel: klips_debug:pfkey_msg_parse: extensions permitted=05e00c63, seen=01e00063, required=01e00043. Feb 1 20:31:22 mza kernel: klips_debug:pfkey_msg_interp: processing ext 1 0pccdaa790 with processor 0pc024bd40. Feb 1 20:31:22 mza kernel: klips_debug:pfkey_sa_process: . Feb 1 20:31:22 mza kernel: klips_debug:pfkey_msg_interp: processing ext 5 0pccdaa7a8 with processor 0pc024c090. Feb 1 20:31:22 mza kernel: klips_debug:pfkey_address_process: Feb 1 20:31:22 mza kernel: klips_debug:pfkey_address_process: found address family=2, AF_INET, 190.3.63.165. Feb 1 20:31:22 mza kernel: klips_debug:pfkey_address_process: found src address. Feb 1 20:31:22 mza kernel: klips_debug:pfkey_address_process: allocating 16 bytes for saddr. Feb 1 20:31:22 mza kernel: klips_debug:pfkey_address_process: successful. Feb 1 20:31:22 mza kernel: klips_debug:pfkey_msg_interp: processing ext 6 0pccdaa7c0 with processor 0pc024c090. Feb 1 20:31:22 mza kernel: klips_debug:pfkey_address_process: Feb 1 20:31:22 mza kernel: klips_debug:pfkey_address_process: found address family=2, AF_INET, 0.0.0.0. Feb 1 20:31:23 mza kernel: klips_debug:pfkey_address_process: found dst address. Feb 1 20:31:23 mza kernel: klips_debug:pfkey_address_process: allocating 16 bytes for saddr. Feb 1 20:31:23 mza kernel: klips_debug:pfkey_address_process: ips_said.dst set to 0.0.0.0. Feb 1 20:31:23 mza kernel: klips_debug:pfkey_address_process: successful. Feb 1 20:31:23 mza kernel: klips_debug:pfkey_msg_interp: processing ext 21 0pccdaa7d8 with processor 0pc024c090. Feb 1 20:31:23 mza kernel: klips_debug:pfkey_address_process: Feb 1 20:31:23 mza kernel: klips_debug:pfkey_address_process: found address family=2, AF_INET, 192.168.0.0. Feb 1 20:31:23 mza kernel: klips_debug:pfkey_address_process: found src flow address. Feb 1 20:31:23 mza kernel: klips_debug:pfkey_alloc_eroute: allocating 168 bytes for an eroute. Feb 1 20:31:23 mza kernel: klips_debug:pfkey_alloc_eroute: allocated eroute struct=0pc2a67e58. Feb 1 20:31:23 mza kernel: klips_debug:pfkey_address_parse: extr->eroute set to 192.168.0.0/0:0->0.0.0.0/0:0 Feb 1 20:31:23 mza kernel: klips_debug:pfkey_address_process: successful. Feb 1 20:31:23 mza kernel: klips_debug:pfkey_msg_interp: processing ext 22 0pccdaa7f0 with processor 0pc024c090. Feb 1 20:31:23 mza kernel: klips_debug:pfkey_address_process: Feb 1 20:31:23 mza kernel: klips_debug:pfkey_address_process: found address family=2, AF_INET, 192.168.1.0. Feb 1 20:31:23 mza kernel: klips_debug:pfkey_address_process: found dst flow address. Feb 1 20:31:23 mza kernel: klips_debug:pfkey_alloc_eroute: eroute struct already allocated Feb 1 20:31:23 mza kernel: klips_debug:pfkey_address_parse: extr->eroute set to 192.168.0.0/0:0->192.168.1.0/0:0 Feb 1 20:31:23 mza kernel: klips_debug:pfkey_address_process: successful. Feb 1 20:31:23 mza kernel: klips_debug:pfkey_msg_interp: processing ext 23 0pccdaa808 with processor 0pc024c090. Feb 1 20:31:23 mza kernel: klips_debug:pfkey_address_process: Feb 1 20:31:23 mza kernel: klips_debug:pfkey_address_process: found address family=2, AF_INET, 255.255.255.0. Feb 1 20:31:24 mza kernel: klips_debug:pfkey_address_process: found src mask address. Feb 1 20:31:24 mza kernel: klips_debug:pfkey_alloc_eroute: eroute struct already allocated Feb 1 20:31:24 mza kernel: klips_debug:pfkey_address_parse: extr->eroute set to 192.168.0.0/24:0->192.168.1.0/0:0 Feb 1 20:31:24 mza kernel: klips_debug:pfkey_address_process: successful. Feb 1 20:31:24 mza kernel: klips_debug:pfkey_msg_interp: processing ext 24 0pccdaa820 with processor 0pc024c090. Feb 1 20:31:24 mza kernel: klips_debug:pfkey_address_process: Feb 1 20:31:24 mza kernel: klips_debug:pfkey_address_process: found address family=2, AF_INET, 255.255.255.0. Feb 1 20:31:24 mza kernel: klips_debug:pfkey_address_process: found dst mask address. Feb 1 20:31:24 mza kernel: klips_debug:pfkey_alloc_eroute: eroute struct already allocated Feb 1 20:31:24 mza kernel: klips_debug:pfkey_address_parse: extr->eroute set to 192.168.0.0/24:0->192.168.1.0/24:0 Feb 1 20:31:24 mza kernel: klips_debug:pfkey_address_process: successful. Feb 1 20:31:24 mza kernel: klips_debug:pfkey_msg_interp: parsing message type 14(x-addflow(eroute)) with msg_parser 0pc0249a60. Feb 1 20:31:24 mza kernel: klips_debug:pfkey_x_addflow_parse: . Feb 1 20:31:24 mza kernel: klips_debug:pfkey_x_addflow_parse: calling breakeroute and/or makeroute for 192.168.0.0/24->192.168.1.0/24 Feb 1 20:31:24 mza kernel: klips_debug:pfkey_x_addflow_parse: calling makeroute. Feb 1 20:31:24 mza kernel: klips_debug:ipsec_makeroute: attempting to allocate 168 bytes to insert eroute for 192.168.0.0/24:0->192.168.1.0/24:0 0, SA: %%trap, PID:14866, skb=0p00000000, ident:NULL->NULL Feb 1 20:31:24 mza kernel: klips_debug:ipsec_makeroute: succeeded, I think... Feb 1 20:31:24 mza kernel: klips_debug:pfkey_x_addflow_parse: makeroute call successful. Feb 1 20:31:24 mza kernel: klips_debug:pfkey_msg_hdr_build: Feb 1 20:31:24 mza kernel: klips_debug:pfkey_msg_hdr_build: on_entry &pfkey_ext=0pc2a67c28 pfkey_ext=0pc2a67d10 *pfkey_ext=0p00000000. Feb 1 20:31:24 mza kernel: klips_debug:pfkey_msg_hdr_build: on_exit &pfkey_ext=0pc2a67c28 pfkey_ext=0pc2a67d10 *pfkey_ext=0pcbadbf00. Feb 1 20:31:24 mza kernel: klips_debug:pfkey_safe_build: error=0 Feb 1 20:31:24 mza kernel: klips_debug:pfkey_safe_build:success. Feb 1 20:31:24 mza kernel: klips_debug:pfkey_sa_build: spi=00000104 replay=0 sa_state=0 auth=0 encrypt=0 flags=0 Feb 1 20:31:24 mza kernel: klips_debug:pfkey_safe_build: error=0 Feb 1 20:31:24 mza kernel: klips_debug:pfkey_safe_build:success. Feb 1 20:31:24 mza kernel: klips_debug:pfkey_address_build: exttype=5 proto=0 prefixlen=0 Feb 1 20:31:24 mza kernel: klips_debug:pfkey_address_build: found address family AF_INET. Feb 1 20:31:24 mza kernel: klips_debug:pfkey_address_build: found address=190.3.63.165:0. Feb 1 20:31:24 mza kernel: klips_debug:pfkey_address_build: successful. Feb 1 20:31:24 mza kernel: klips_debug:pfkey_safe_build: error=0 Feb 1 20:31:24 mza kernel: klips_debug:pfkey_safe_build:success. Feb 1 20:31:25 mza kernel: klips_debug:pfkey_address_build: exttype=6 proto=0 prefixlen=0 Feb 1 20:31:25 mza kernel: klips_debug:pfkey_address_build: found address family AF_INET. Feb 1 20:31:25 mza kernel: klips_debug:pfkey_address_build: found address=0.0.0.0:0. Feb 1 20:31:25 mza kernel: klips_debug:pfkey_address_build: successful. Feb 1 20:31:25 mza kernel: klips_debug:pfkey_safe_build: error=0 Feb 1 20:31:25 mza kernel: klips_debug:pfkey_safe_build:success. Feb 1 20:31:25 mza kernel: klips_debug:pfkey_address_build: exttype=21 proto=0 prefixlen=0 Feb 1 20:31:25 mza kernel: klips_debug:pfkey_address_build: found address family AF_INET. Feb 1 20:31:25 mza kernel: klips_debug:pfkey_address_build: found address=192.168.0.0:0. Feb 1 20:31:25 mza kernel: klips_debug:pfkey_address_build: successful. Feb 1 20:31:25 mza kernel: klips_debug:pfkey_safe_build: error=0 Feb 1 20:31:25 mza kernel: klips_debug:pfkey_safe_build:success. Feb 1 20:31:25 mza kernel: klips_debug:pfkey_address_build: exttype=22 proto=0 prefixlen=0 Feb 1 20:31:25 mza kernel: klips_debug:pfkey_address_build: found address family AF_INET. Feb 1 20:31:25 mza kernel: klips_debug:pfkey_address_build: found address=192.168.1.0:0. Feb 1 20:31:25 mza kernel: klips_debug:pfkey_address_build: successful. Feb 1 20:31:25 mza kernel: klips_debug:pfkey_safe_build: error=0 Feb 1 20:31:25 mza kernel: klips_debug:pfkey_safe_build:success. Feb 1 20:31:25 mza kernel: klips_debug:pfkey_address_build: exttype=23 proto=0 prefixlen=0 Feb 1 20:31:25 mza kernel: klips_debug:pfkey_address_build: found address family AF_INET. Feb 1 20:31:25 mza kernel: klips_debug:pfkey_address_build: found address=255.255.255.0:0. Feb 1 20:31:25 mza kernel: klips_debug:pfkey_address_build: successful. Feb 1 20:31:25 mza kernel: klips_debug:pfkey_safe_build: error=0 Feb 1 20:31:25 mza kernel: klips_debug:pfkey_safe_build:success. Feb 1 20:31:25 mza kernel: klips_debug:pfkey_address_build: exttype=24 proto=0 prefixlen=0 Feb 1 20:31:25 mza kernel: klips_debug:pfkey_address_build: found address family AF_INET. Feb 1 20:31:25 mza kernel: klips_debug:pfkey_address_build: found address=255.255.255.0:0. Feb 1 20:31:25 mza kernel: klips_debug:pfkey_address_build: successful. Feb 1 20:31:25 mza kernel: klips_debug:pfkey_safe_build: error=0 Feb 1 20:31:26 mza kernel: klips_debug:pfkey_safe_build:success. Feb 1 20:31:26 mza kernel: klips_debug:pfkey_msg_build: pfkey_msg=0pc28e91c0 allocated 184 bytes, &(extensions[0])=0pc2a67d10 Feb 1 20:31:26 mza kernel: klips_debug:pfkey_msg_build: copying 24 bytes from extensions[1]=0pcbadb700 to=0pc28e91d0 Feb 1 20:31:26 mza kernel: klips_debug:pfkey_msg_build: copying 24 bytes from extensions[5]=0pcbadbc80 to=0pc28e91e8 Feb 1 20:31:26 mza kernel: klips_debug:pfkey_msg_build: copying 24 bytes from extensions[6]=0pc295bc80 to=0pc28e9200 Feb 1 20:31:26 mza kernel: klips_debug:pfkey_msg_build: copying 24 bytes from extensions[21]=0pc295b840 to=0pc28e9218 Feb 1 20:31:26 mza kernel: klips_debug:pfkey_msg_build: copying 24 bytes from extensions[22]=0pc295b700 to=0pc28e9230 Feb 1 20:31:26 mza kernel: klips_debug:pfkey_msg_build: copying 24 bytes from extensions[23]=0pc295ba00 to=0pc28e9248 Feb 1 20:31:26 mza kernel: klips_debug:pfkey_msg_build: copying 24 bytes from extensions[24]=0pc295b680 to=0pc28e9260 Feb 1 20:31:26 mza kernel: klips_debug:pfkey_msg_build: extensions permitted=05e00063, seen=01e00063, required=01e00043. Feb 1 20:31:26 mza kernel: klips_debug:pfkey_msg_parse: parsing message ver=2, type=14(x-addflow(eroute)), errno=0, satype=11(INT), len=23, res=0, seq=5, pid=14866. Feb 1 20:31:26 mza kernel: klips_debug:pfkey_msg_parse: satype 11(INT) conversion to proto gives 61 for msg_type 14(x-addflow(eroute)). Feb 1 20:31:26 mza kernel: klips_debug:pfkey_msg_parse: remain=21 ext_type=1(security-association) ext_len=3 parsing ext 0pc28e91d0 with parser pfkey_sa_parse. Feb 1 20:31:26 mza kernel: klips_debug:pfkey_sa_parse: successfully found len=3 exttype=1(security-association) spi=00000104 replay=0 state=0 auth=0 encrypt=0 flags=0 ref=1634. Feb 1 20:31:26 mza kernel: klips_debug:pfkey_msg_parse: remain=18 ext_type=5(source-address) ext_len=3 parsing ext 0pc28e91e8 with parser pfkey_address_parse. Feb 1 20:31:26 mza kernel: klips_debug:pfkey_address_parse: found exttype=5(source-address) family=2(AF_INET) address=190.3.63.165 proto=0 port=0. Feb 1 20:31:26 mza kernel: klips_debug:pfkey_msg_parse: remain=15 ext_type=6(destination-address) ext_len=3 parsing ext 0pc28e9200 with parser pfkey_address_parse. Feb 1 20:31:26 mza kernel: klips_debug:pfkey_address_parse: found exttype=6(destination-address) family=2(AF_INET) address=0.0.0.0 proto=0 port=0. Feb 1 20:31:26 mza kernel: klips_debug:pfkey_msg_parse: remain=12 ext_type=21(X-source-flow-address) ext_len=3 parsing ext 0pc28e9218 with parser pfkey_address_parse. Feb 1 20:31:26 mza kernel: klips_debug:pfkey_address_parse: found exttype=21(X-source-flow-address) family=2(AF_INET) address=192.168.0.0 proto=0 port=0. Feb 1 20:31:26 mza kernel: klips_debug:pfkey_msg_parse: remain=9 ext_type=22(X-dest-flow-address) ext_len=3 parsing ext 0pc28e9230 with parser pfkey_address_parse. Feb 1 20:31:26 mza kernel: klips_debug:pfkey_address_parse: found exttype=22(X-dest-flow-address) family=2(AF_INET) address=192.168.1.0 proto=0 port=0. Feb 1 20:31:26 mza kernel: klips_debug:pfkey_msg_parse: remain=6 ext_type=23(X-source-mask) ext_len=3 parsing ext 0pc28e9248 with parser pfkey_address_parse. Feb 1 20:31:26 mza kernel: klips_debug:pfkey_address_parse: found exttype=23(X-source-mask) family=2(AF_INET) address=255.255.255.0 proto=0 port=0. Feb 1 20:31:26 mza kernel: klips_debug:pfkey_msg_parse: remain=3 ext_type=24(X-dest-mask) ext_len=3 parsing ext 0pc28e9260 with parser pfkey_address_parse. Feb 1 20:31:26 mza kernel: klips_debug:pfkey_address_parse: found exttype=24(X-dest-mask) family=2(AF_INET) address=255.255.255.0 proto=0 port=0. Feb 1 20:31:26 mza kernel: klips_debug:pfkey_msg_parse: extensions permitted=05e00063, seen=01e00063, required=01e00043. Feb 1 20:31:26 mza kernel: klips_debug:pfkey_upmsg: allocating 184 bytes... Feb 1 20:31:26 mza kernel: klips_debug:pfkey_upmsg: ...allocated at 0pcd175600. Feb 1 20:31:26 mza kernel: klips_debug:pfkey_x_addflow_parse: sending up x_addflow reply message for satype=11(INT) (proto=61) to socket=0pc2a41d60 succeeded. Feb 1 20:31:26 mza kernel: klips_debug:pfkey_x_addflow_parse: extr->ips cleaned up and freed. Feb 1 20:31:27 mza kernel: klips_debug:ipsec_sa_wipe: removing SA=%%trap(0pcce25800), SAref=1634, table=0(0pd0000000), entry=1634 from the refTable. Feb 1 20:31:27 mza kernel: klips_debug:ipsec_sa_put: ipsec_sa SA:%%trap, ref:-1 reference count decremented. Feb 1 20:31:27 mza ipsec__plutorun: 104 "mzabsas" #1: STATE_MAIN_I1: initiate Feb 1 20:31:27 mza ipsec__plutorun: ...could not start conn "mzabsas" Feb 1 20:31:40 mza kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 Feb 1 20:31:40 mza kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0. Feb 1 20:31:40 mza kernel: klips_debug: IP: ihl:20 ver:4 tos:0 tlen:104 id:26585 frag_off:0 ttl:60 proto:50 chk:59043 saddr:200.123.105.195 daddr:190.3.63.165 Feb 1 20:31:40 mza kernel: klips_debug:ipsec_rcv_decap_once: decap (50) from 200.123.105.195 -> 190.3.63.165 Feb 1 20:31:40 mza kernel: klips_debug:ipsec_sa_getbyid: linked entry in ipsec_sa table for hash=154 of SA:esp0x2d289485@190.3.63.165 requested. Feb 1 20:31:40 mza kernel: klips_debug:ipsec_sa_getbyid: no entries in ipsec_sa table for hash=154 of SA:esp0x2d289485@190.3.63.165. Feb 1 20:31:40 mza kernel: klips_debug:ipsec_rcv: no ipsec_sa for SA:esp0x2d289485@190.3.63.165: incoming packet with no SA dropped Feb 1 20:31:40 mza kernel: klips_debug:ipsec_rcv: decap_once failed: -7 Feb 1 20:31:40 mza kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 Feb 1 20:31:40 mza kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0. Feb 1 20:31:40 mza kernel: klips_debug: IP: ihl:20 ver:4 tos:0 tlen:104 id:26586 frag_off:0 ttl:60 proto:50 chk:59042 saddr:200.123.105.195 daddr:190.3.63.165 Feb 1 20:31:40 mza kernel: klips_debug:ipsec_rcv_decap_once: decap (50) from 200.123.105.195 -> 190.3.63.165 Feb 1 20:31:40 mza kernel: klips_debug:ipsec_sa_getbyid: linked entry in ipsec_sa table for hash=154 of SA:esp0x2d289485@190.3.63.165 requested. Feb 1 20:31:40 mza kernel: klips_debug:ipsec_sa_getbyid: no entries in ipsec_sa table for hash=154 of SA:esp0x2d289485@190.3.63.165. Feb 1 20:31:40 mza kernel: klips_debug:ipsec_rcv: no ipsec_sa for SA:esp0x2d289485@190.3.63.165: incoming packet with no SA dropped Feb 1 20:31:40 mza kernel: klips_debug:ipsec_rcv: decap_once failed: -7 Feb 1 20:31:43 mza kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 Feb 1 20:31:43 mza kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0. Feb 1 20:31:43 mza kernel: klips_debug: IP: ihl:20 ver:4 tos:0 tlen:104 id:26587 frag_off:0 ttl:60 proto:50 chk:59041 saddr:200.123.105.195 daddr:190.3.63.165 Feb 1 20:31:43 mza kernel: klips_debug:ipsec_rcv_decap_once: decap (50) from 200.123.105.195 -> 190.3.63.165 Feb 1 20:31:43 mza kernel: klips_debug:ipsec_sa_getbyid: linked entry in ipsec_sa table for hash=154 of SA:esp0x2d289485@190.3.63.165 requested. Feb 1 20:31:43 mza kernel: klips_debug:ipsec_sa_getbyid: no entries in ipsec_sa table for hash=154 of SA:esp0x2d289485@190.3.63.165. Feb 1 20:31:43 mza kernel: klips_debug:ipsec_rcv: no ipsec_sa for SA:esp0x2d289485@190.3.63.165: incoming packet with no SA dropped Feb 1 20:31:43 mza kernel: klips_debug:ipsec_rcv: decap_once failed: -7 Feb 1 20:31:43 mza kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 Feb 1 20:31:43 mza kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0. Feb 1 20:31:43 mza kernel: klips_debug: IP: ihl:20 ver:4 tos:0 tlen:104 id:26588 frag_off:0 ttl:60 proto:50 chk:59040 saddr:200.123.105.195 daddr:190.3.63.165 Feb 1 20:31:43 mza kernel: klips_debug:ipsec_rcv_decap_once: decap (50) from 200.123.105.195 -> 190.3.63.165 Feb 1 20:31:43 mza kernel: klips_debug:ipsec_sa_getbyid: linked entry in ipsec_sa table for hash=154 of SA:esp0x2d289485@190.3.63.165 requested. Feb 1 20:31:43 mza kernel: klips_debug:ipsec_sa_getbyid: no entries in ipsec_sa table for hash=154 of SA:esp0x2d289485@190.3.63.165. Feb 1 20:31:43 mza kernel: klips_debug:ipsec_rcv: no ipsec_sa for SA:esp0x2d289485@190.3.63.165: incoming packet with no SA dropped Feb 1 20:31:44 mza kernel: klips_debug:ipsec_rcv: decap_once failed: -7 Feb 1 20:31:45 mza kernel: klips_debug:pfkey_sendmsg: . Feb 1 20:31:45 mza kernel: klips_debug:pfkey_sendmsg: allocating 88 bytes for downward message. Feb 1 20:31:45 mza kernel: klips_debug:pfkey_sendmsg: msg sent for parsing. Feb 1 20:31:45 mza kernel: klips_debug:pfkey_msg_interp: parsing message ver=2, type=3, errno=0, satype=9(IPIP), len=11, res=0, seq=6, pid=14866. Feb 1 20:31:45 mza kernel: klips_debug:ipsec_SAref_alloc: SAref requested... head=99, cont=1792, tail=255, listsize=256. Feb 1 20:31:45 mza kernel: klips_debug:ipsec_SAref_alloc: allocating SAref=1635, table=0, entry=1635 of 65536. Feb 1 20:31:45 mza kernel: klips_debug:ipsec_sa_alloc: allocated 500 bytes for ipsec_sa struct=0pcce25800 ref=1635. Feb 1 20:31:45 mza kernel: klips_debug:pfkey_msg_interp: allocated extr->ips=0pcce25800. Feb 1 20:31:45 mza kernel: klips_debug:pfkey_msg_interp: satype 9 lookups to proto=4. Feb 1 20:31:45 mza kernel: klips_debug:pfkey_msg_parse: parsing message ver=2, type=3(add), errno=0, satype=9(IPIP), len=11, res=0, seq=6, pid=14866. Feb 1 20:31:45 mza kernel: klips_debug:pfkey_msg_parse: satype 9(IPIP) conversion to proto gives 4 for msg_type 3(add). Feb 1 20:31:45 mza kernel: klips_debug:pfkey_msg_parse: remain=9 ext_type=1(security-association) ext_len=3 parsing ext 0pcef19bd0 with parser pfkey_sa_parse. Feb 1 20:31:45 mza kernel: klips_debug:pfkey_sa_parse: successfully found len=3 exttype=1(security-association) spi=00001001 replay=0 state=1 auth=0 encrypt=0 flags=0 ref=-1. Feb 1 20:31:46 mza kernel: klips_debug:pfkey_msg_parse: remain=6 ext_type=5(source-address) ext_len=3 parsing ext 0pcef19be8 with parser pfkey_address_parse. Feb 1 20:31:46 mza kernel: klips_debug:pfkey_address_parse: found exttype=5(source-address) family=2(AF_INET) address=200.123.105.195 proto=0 port=0. Feb 1 20:31:46 mza kernel: klips_debug:pfkey_msg_parse: remain=3 ext_type=6(destination-address) ext_len=3 parsing ext 0pcef19c00 with parser pfkey_address_parse. Feb 1 20:31:46 mza kernel: klips_debug:pfkey_address_parse: found exttype=6(destination-address) family=2(AF_INET) address=190.3.63.165 proto=0 port=0. Feb 1 20:31:46 mza kernel: klips_debug:pfkey_msg_parse: extensions permitted=78001ffb, seen=00000063, required=00000063. Feb 1 20:31:46 mza kernel: klips_debug:pfkey_msg_interp: processing ext 1 0pcef19bd0 with processor 0pc024bd40. Feb 1 20:31:46 mza kernel: klips_debug:pfkey_sa_process: . Feb 1 20:31:46 mza kernel: klips_debug:pfkey_msg_interp: processing ext 5 0pcef19be8 with processor 0pc024c090. Feb 1 20:31:46 mza kernel: klips_debug:pfkey_address_process: Feb 1 20:31:46 mza kernel: klips_debug:pfkey_address_process: found address family=2, AF_INET, 200.123.105.195. Feb 1 20:31:46 mza kernel: klips_debug:pfkey_address_process: found src address. Feb 1 20:31:46 mza kernel: klips_debug:pfkey_address_process: allocating 16 bytes for saddr. Feb 1 20:31:46 mza kernel: klips_debug:pfkey_address_process: successful. Feb 1 20:31:46 mza kernel: klips_debug:pfkey_msg_interp: processing ext 6 0pcef19c00 with processor 0pc024c090. Feb 1 20:31:46 mza kernel: klips_debug:pfkey_address_process: Feb 1 20:31:46 mza kernel: klips_debug:pfkey_address_process: found address family=2, AF_INET, 190.3.63.165. Feb 1 20:31:46 mza kernel: klips_debug:pfkey_address_process: found dst address. Feb 1 20:31:46 mza kernel: klips_debug:pfkey_address_process: allocating 16 bytes for saddr. Feb 1 20:31:46 mza kernel: klips_debug:pfkey_address_process: ips_said.dst set to 190.3.63.165. Feb 1 20:31:46 mza kernel: klips_debug:pfkey_address_process: successful. Feb 1 20:31:46 mza kernel: klips_debug:pfkey_msg_interp: parsing message type 3(add) with msg_parser 0pc0247610. Feb 1 20:31:46 mza kernel: klips_debug:pfkey_add_parse: . Feb 1 20:31:46 mza kernel: klips_debug:ipsec_sa_getbyid: linked entry in ipsec_sa table for hash=104 of SA:tun0x1001@190.3.63.165 requested. Feb 1 20:31:46 mza kernel: klips_debug:ipsec_sa_getbyid: no entries in ipsec_sa table for hash=104 of SA:tun0x1001@190.3.63.165. Feb 1 20:31:46 mza kernel: klips_debug:pfkey_add_parse: existing ipsec_sa not found (this is good) for SAtun0x1001@190.3.63.165, in-bound, allocating. Feb 1 20:31:46 mza kernel: klips_debug:pfkey_ipsec_sa_init: (pfkey defined) called for SA:tun0x1001@190.3.63.165 Feb 1 20:31:46 mza kernel: klips_debug:pfkey_ipsec_sa_init: calling init routine of IPIP Feb 1 20:31:46 mza kernel: klips_debug:pfkey_ipsec_sa_init: (pfkey defined) IPIP ipsec_sa set for 200.123.105.195->190.3.63.165. Feb 1 20:31:46 mza kernel: klips_debug:pfkey_msg_hdr_build: Feb 1 20:31:46 mza kernel: klips_debug:pfkey_msg_hdr_build: on_entry &pfkey_ext=0pc2a67d28 pfkey_ext=0pc2a67d60 *pfkey_ext=0p00000000. Feb 1 20:31:47 mza kernel: klips_debug:pfkey_msg_hdr_build: on_exit &pfkey_ext=0pc2a67d28 pfkey_ext=0pc2a67d60 *pfkey_ext=0pcbadbc80. Feb 1 20:31:47 mza kernel: klips_debug:pfkey_safe_build: error=0 Feb 1 20:31:47 mza kernel: klips_debug:pfkey_safe_build:success. Feb 1 20:31:47 mza kernel: klips_debug:pfkey_sa_build: spi=00001001 replay=0 sa_state=1 auth=0 encrypt=0 flags=1 Feb 1 20:31:47 mza kernel: klips_debug:pfkey_safe_build: error=0 Feb 1 20:31:47 mza kernel: klips_debug:pfkey_safe_build:success. Feb 1 20:31:47 mza kernel: klips_debug:pfkey_address_build: exttype=5 proto=0 prefixlen=0 Feb 1 20:31:47 mza kernel: ions permitted=05e00063, seen=01e00063, required=01e00043. Feb 1 20:31:47 mza kernel: klips_debug:pfkey_upmsg: allocating 184 bytes... Feb 1 20:31:47 mza kernel: klips_debug:pfkey_upmsg: ...allocated at 0pc2add380. Feb 1 20:31:47 mza kernel: klips_debug:pfkey_x_addflow_parse: sending up x_addflow reply message for satype=9(IPIP) (proto=4) to socket=0pc2a41d60 succeeded. Feb 1 20:31:47 mza kernel: klips_debug:pfkey_x_addflow_parse: extr->ips cleaned up and freed. Feb 1 20:31:47 mza kernel: klips_debug:ipsec_sa_wipe: removing SA=tun0x1001@190.3.63.165(0pcce25200), SAref=1637, table=0(0pd0000000), entry=1637 from the refTable. Feb 1 20:31:47 mza kernel: klips_debug:ipsec_sa_put: ipsec_sa SA:tun0x1001@190.3.63.165, ref:-1 reference count decremented. Feb 1 20:31:47 mza kernel: klips_debug:pfkey_sendmsg: . Feb 1 20:31:47 mza kernel: klips_debug:pfkey_sendmsg: allocating 120 bytes for downward message. Feb 1 20:31:47 mza kernel: klips_debug:pfkey_sendmsg: msg sent for parsing. Feb 1 20:31:47 mza kernel: klips_debug:pfkey_msg_interp: parsing message ver=2, type=13, errno=0, satype=9(IPIP), len=15, res=0, seq=9, pid=14866. Feb 1 20:31:47 mza kernel: klips_debug:ipsec_SAref_alloc: SAref requested... head=102, cont=1792, tail=255, listsize=256. Feb 1 20:31:47 mza kernel: klips_debug:ipsec_SAref_alloc: allocating SAref=1638, table=0, entry=1638 of 65536. Feb 1 20:31:47 mza kernel: klips_debug:ipsec_sa_alloc: allocated 500 bytes for ipsec_sa struct=0pcce25200 ref=1638. Feb 1 20:31:47 mza kernel: klips_debug:pfkey_msg_interp: allocated extr->ips=0pcce25200. Feb 1 20:31:47 mza kernel: klips_debug:pfkey_msg_interp: satype 9 lookups to proto=4. Feb 1 20:31:47 mza kernel: klips_debug:pfkey_msg_parse: parsing message ver=2, type=13(x-groupsa), errno=0, satype=9(IPIP), len=15, res=0, seq=9, pid=14866. Feb 1 20:31:47 mza kernel: klips_debug:pfkey_msg_parse: satype 9(IPIP) conversion to proto gives 4 for msg_type 13(x-groupsa). Feb 1 20:31:47 mza kernel: klips_debug:pfkey_msg_parse: remain=13 ext_type=1(security-association) ext_len=3 parsing ext 0pcef19cd0 with parser pfkey_sa_parse. Feb 1 20:31:47 mza kernel: klips_debug:pfkey_sa_parse: successfully found len=3 exttype=1(security-association) spi=00001001 replay=0 state=0 auth=0 encrypt=0 flags=0 ref=-1. Feb 1 20:31:47 mza kernel: klips_debug:pfkey_msg_parse: remain=10 ext_type=6(destination-address) ext_len=3 parsing ext 0pcef19ce8 with parser pfkey_address_parse. Feb 1 20:31:47 mza kernel: klips_debug:pfkey_address_parse: found exttype=6(destination-address) family=2(AF_INET) address=190.3.63.165 proto=0 port=0. Feb 1 20:31:47 mza kernel: klips_debug:pfkey_msg_parse: remain=7 ext_type=18(X-satype2) ext_len=1 parsing ext 0pcef19d00 with parser pfkey_x_satype_parse. Feb 1 20:31:47 mza kernel: klips_debug:pfkey_x_satype_parse: len=1 ext=18(X-satype2) satype=3(ESP) res=0,0,0. Feb 1 20:31:47 mza kernel: klips_debug:pfkey_msg_parse: remain=6 ext_type=19(X-security-association) ext_len=3 parsing ext 0pcef19d08 with parser pfkey_sa_parse. Feb 1 20:31:48 mza kernel: klips_debug:pfkey_sa_parse: successfully found len=3 exttype=19(X-security-association) spi=065adcdd replay=0 state=0 auth=0 encrypt=0 flags=0 ref=-1. Feb 1 20:31:48 mza kernel: klips_debug:pfkey_msg_parse: remain=3 ext_type=20(X-destination-address2) ext_len=3 parsing ext 0pcef19d20 with parser pfkey_address_parse. Feb 1 20:31:48 mza kernel: klips_debug:pfkey_address_parse: found exttype=20(X-destination-address2) family=2(AF_INET) address=190.3.63.165 proto=0 port=0. Feb 1 20:31:48 mza kernel: klips_debug:pfkey_msg_parse: extensions permitted=001c0043, seen=001c0043, required=00000043. Feb 1 20:31:48 mza kernel: klips_debug:pfkey_msg_interp: processing ext 1 0pcef19cd0 with processor 0pc024bd40. Feb 1 20:31:48 mza kernel: klips_debug:pfkey_sa_process: . Feb 1 20:31:48 mza kernel: klips_debug:pfkey_msg_interp: processing ext 6 0pcef19ce8 with processor 0pc024c090. Feb 1 20:31:48 mza kernel: klips_debug:pfkey_address_process: Feb 1 20:31:48 mza kernel: klips_debug:pfkey_address_process: found address family=2, AF_INET, 190.3.63.165. Feb 1 20:31:48 mza kernel: klips_debug:pfkey_address_process: found dst address. Feb 1 20:31:48 mza kernel: klips_debug:pfkey_address_process: allocating 16 bytes for saddr. Feb 1 20:31:48 mza kernel: klips_debug:pfkey_address_process: ips_said.dst set to 190.3.63.165. Feb 1 20:31:48 mza kernel: klips_debug:pfkey_address_process: successful. Feb 1 20:31:48 mza kernel: klips_debug:pfkey_msg_interp: processing ext 18 0pcef19d00 with processor 0pc024cb10. Feb 1 20:31:48 mza kernel: klips_debug:pfkey_x_satype_process: . Feb 1 20:31:48 mza kernel: klips_debug:ipsec_SAref_alloc: SAref requested... head=103, cont=1792, tail=255, listsize=256. Feb 1 20:31:48 mza kernel: klips_debug:ipsec_SAref_alloc: allocating SAref=1639, table=0, entry=1639 of 65536. Feb 1 20:31:48 mza kernel: klips_debug:ipsec_sa_alloc: allocated 500 bytes for ipsec_sa struct=0pcce25400 ref=1639. Feb 1 20:31:48 mza kernel: klips_debug:pfkey_x_satype_process: protocol==50 decoded from satype==3(ESP). Feb 1 20:31:48 mza kernel: klips_debug:pfkey_msg_interp: processing ext 19 0pcefttype=20 proto=0 prefixlen=0 Feb 1 20:31:48 mza kernel: klips_debug:pfkey_address_build: found address family AF_INET. Feb 1 20:31:48 mza kernel: klips_debug:pfkey_address_build: found address=200.123.105.195:0. Feb 1 20:31:48 mza kernel: klips_debug:pfkey_address_build: successful. Feb 1 20:31:48 mza kernel: klips_debug:pfkey_safe_build: error=0 Feb 1 20:31:48 mza kernel: klips_debug:pfkey_safe_build:success. Feb 1 20:31:48 mza kernel: klips_debug:pfkey_msg_build: pfkey_msg=0pcef19cc0 allocated 120 bytes, &(extensions[0])=0pc2a67d90 Feb 1 20:31:48 mza kernel: klips_debug:pfkey_msg_build: copying 24 bytes from extensions[1]=0pc295bc00 to=0pcef19cd0 Feb 1 20:31:48 mza kernel: klips_debug:pfkey_msg_build: copying 24 bytes from extensions[6]=0pc295bcc0 to=0pcef19ce8 Feb 1 20:31:48 mza kernel: klips_debug:pfkey_msg_build: copying 8 bytes from extensions[18]=0pc295b800 to=0pcef19d00 Feb 1 20:31:48 mza kernel: klips_debug:pfkey_msg_build: copying 24 bytes from extensions[19]=0pc295b240 to=0pcef19d08 Feb 1 20:31:48 mza kernel: klips_debug:pfkey_msg_build: copying 24 bytes from extensions[20]=0pc295b9c0 to=0pcef19d20 Feb 1 20:31:48 mza kernel: klips_debug:pfkey_msg_build: extensions permitted=001c0043, seen=001c0043, required=00000043. Feb 1 20:31:48 mza kernel: klips_debug:pfkey_msg_parse: parsing message ver=2, type=13(x-groupsa), errno=0, satype=9(IPIP), len=15, res=0, seq=12, pid=14866. Feb 1 20:31:48 mza kernel: klips_debug:pfkey_msg_parse: satype 9(IPIP) conversion to proto gives 4 for msg_type 13(x-groupsa). Feb 1 20:31:48 mza kernel: klips_debug:pfkey_msg_parse: remain=13 ext_type=1(security-association) ext_len=3 parsing ext 0pcef19cd0 with parser pfkey_sa_parse. Feb 1 20:31:48 mza kernel: klips_debug:pfkey_sa_parse: successfully found len=3 exttype=1(security-association) spi=00001002 replay=0 state=0 auth=0 encrypt=0 flags=0 ref=1642. Feb 1 20:31:48 mza kernel: klips_debug:pfkey_msg_parse: remain=10 ext_type=6(destination-address) ext_len=3 parsing ext 0pcef19ce8 with parser pfkey_address_parse. Feb 1 20:31:48 mza kernel: klips_debug:pfkey_address_parse: found exttype=6(destination-address) family=2(AF_INET) address=200.123.105.195 proto=0 port=0. Feb 1 20:31:48 mza kernel: klips_debug:pfkey_msg_parse: remain=7 ext_type=18(X-satype2) ext_len=1 parsing ext 0pcef19d00 with parser pfkey_x_satype_parse. Feb 1 20:31:48 mza kernel: klips_debug:pfkey_x_satype_parse: len=1 ext=18(X-satype2) satype=3(ESP) res=0,0,0. Feb 1 20:31:48 mza kernel: klips_debug:pfkey_msg_parse: remain=6 ext_type=19(X-security-association) ext_len=3 parsing ext 0pcef19d08 with parser pfkey_sa_parse. Feb 1 20:31:48 mza kernel: klips_debug:pfkey_sa_parse: successfully found len=3 exttype=19(X-security-association) spi=5d6ab522 replay=0 state=0 auth=0 encrypt=0 flags=0 ref=1643. Feb 1 20:31:48 mza kernel: klips_debug:pfkey_msg_parse: remain=3 ext_type=20(X-destination-address2) ext_len=3 parsing ext 0pcef19d20 with parser pfkey_address_parse. Feb 1 20:31:48 mza kernel: klips_debug:pfkey_address_parse: found exttype=20(X-destination-address2) family=2(AF_INET) address=200.123.105.195 proto=0 port=0. Feb 1 20:31:48 mza kernel: klips_debug:pfkey_msg_parse: extensions permitted=001c0043, seen=001c0043, required=00000043. Feb 1 20:31:48 mza kernel: klips_debug:pfkey_upmsg: allocating 120 bytes... Feb 1 20:31:48 mza kernel: klips_debug:pfkey_upmsg: ...allocated at 0pcf0b2440. Feb 1 20:31:48 mza kernel: klips_debug:pfkey_x_grpsa_parse: sending up x_grpsa reply message for satype=9(IPIP) to socket=0pc2a41d60 succeeded. Feb 1 20:31:48 mza kernel: klips_debug:pfkey_x_grpsa_parse: succeeded in sending x_grpsa reply message. Feb 1 20:31:48 mza kernel: klips_debug:ipsec_sa_wipe: removing SA=tun0x1002@200.123.105.195(0pcf0b0000), SAref=1642, table=0(0pd0000000), entry=1642 from the refTable. Feb 1 20:31:48 mza kernel: klips_debug:ipsec_sa_put: ipsec_sa SA:tun0x1002@200.123.105.195, ref:-1 reference count decremented. Feb 1 20:31:48 mza kernel: klips_debug:ipsec_sa_wipe: removing SA=esp0x5d6ab522@200.123.105.195(0pcf0b0200), SAref=1643, table=0(0pd0000000), entry=1643 from the refTable. Feb 1 20:31:48 mza kernel: klips_debug:ipsec_sa_put: ipsec_sa SA:esp0x5d6ab522@200.123.105.195, ref:-1 reference count decremented. Feb 1 20:31:48 mza kernel: klips_debug:pfkey_sendmsg: . Feb 1 20:31:48 mza kernel: klips_debug:pfkey_sendmsg: allocating 184 bytes for downward message. Feb 1 20:31:48 mza kernel: klips_debug:pfkey_sendmsg: msg sent for parsing. Feb 1 20:31:48 mza kernel: klips_debug:pfkey_msg_interp: parsing message ver=2, type=14, errno=0, satype=9(IPIP), len=23, res=0, seq=13, pid=14866. Feb 1 20:31:48 mza kernel: klips_debug:ipsec_SAref_alloc: SAref requested... head=108, cont=1792, tail=255, listsize=256. Feb 1 20:31:48 mza kernel: klips_debug:ipsec_SAref_alloc: allocating SAref=1644, table=0, entry=1644 of 65536. Feb 1 20:31:48 mza kernel: klips_debug:ipsec_sa_alloc: allocated 500 bytes for ipsec_sa struct=0pcf0b0200 ref=1644. Feb 1 20:31:48 mza kernel: klips_debug:pfkey_msg_interp: allocated extr->ips=0pcf0b0200. Feb 1 20:31:48 mza kernel: klips_debug:pfkey_msg_interp: satype 9 lookups to proto=4. Feb 1 20:31:48 mza kernel: klips_debug:pfkey_msg_parse: parsing message ver=2, type=14(x-addflow(eroute)), errno=0, satype=9(IPIP), len=23, res=0, seq=13, pid=14866. Feb 1 20:31:48 mza kernel: klips_debug:pfkey_msg_parse: satype 9(IPIP) conversion to proto gives 4 for msg_type 14(x-addflow(eroute)). Feb 1 20:31:48 mza kernel: klips_debug:pfkey_msg_parse: remain=21 ext_type=1(security-association) ext_len=3 parsing ext 0pccdaa590 with parser pfkey_sa_parse. Feb 1 20:31:48 mza kernel: klips_debug:pfkey_sa_parse: successfully found len=3 exttype=1(security-association) spi=00001002 replay=0 state=0 auth=0 encrypt=0 flags=2 ref=-1. Feb 1 20:31:48 mza kernel: klips_debug:pfkey_msg_parse: remain=18 ext_type=5(source-address) ext_len=3 parsing ext 0pccdaa5a8 with parser pfkey_address_parse. Feb 1 20:31:48 mza kernel: klips_debug:pfkey_address_parse: found exttype=5(source-address) family=2(AF_INET) address=190.3.63.165 proto=0 port=0. Feb 1 20:31:48 mza kernel: klips_debug:pfkey_msg_parse: remain=15 ext_type=6(destination-address) ext_len=3 parsing ext 0pccdaa5c0 with parser pfkey_address_parse. Feb 1 20:31:48 mza kernel: klips_debug:pfkey_address_parse: found exttype=6(destination-address) family=2(AF_INET) address=200.123.105.195 proto=0 port=0. Feb 1 20:31:48 mza kernel: klips_debug:pfkey_msg_parse: remain=12 ext_type=21(X-source-flow-address) ext_len=3 parsing ext 0pccdaa5d8 with parser pfkey_address_parse. Feb 1 20:31:48 mza kernel: klips_debug:pfkey_address_parse: found exttype=21(X-source-flow-address) family=2(AF_INET) address=192.168.0.0 proto=0 port=0. Feb 1 20:31:48 mza kernel: klips_debug:pfkey_msg_parse: remain=9 ext_type=22(X-dest-flow-address) ext_len=3 parsing ext 0pccdaa5f0 with parser pfkey_address_parse. Feb 1 20:31:48 mza kernel: klips_debug:pfkey_address_parse: found exttype=22(X-dest-flow-address) family=2(AF_INET) address=192.168.1.0 proto=0 port=0. Feb 1 20:31:48 mza kernel: klips_debug:pfkey_msg_parse: remain=6 ext_type=23(X-source-mask) ext_len=3 parsing ext 0pccdaa608 with parser pfkey_address_parse. Feb 1 20:31:48 mza kernel: klips_debug:pfkey_address_parse: found exttype=23(X-source-mask) family=2(AF_INET) address=255.255.255.0 proto=0 port=0. Feb 1 20:31:48 mza kernel: klips_debug:pfkey_msg_parse: remain=3 ext_type=24(X-dest-mask) ext_len=3 parsing ext 0pccdaa620 with parser pfkey_address_parse. Feb 1 20:31:48 mza kernel: klips_debug:pfkey_address_parse: found exttype=24(X-dest-mask) family=2(AF_INET) address=255.255.255.0 proto=0 port=0. Feb 1 20:31:48 mza kernel: klips_debug:pfkey_msg_parse: extensions permitted=05e00c63, seen=01e00063, required=01e00043. Feb 1 20:31:48 mza kernel: klips_debug:pfkey_msg_interp: processing ext 1 0pccdaa590 with processor 0pc024bd40. Feb 1 20:31:48 mza kernel: klips_debug:pfkey_sa_process: . Feb 1 20:31:48 mza kernel: klips_debug:pfkey_msg_interp: processing ext 5 0pccdaa5a8 with processor 0pc024c090. Feb 1 20:31:48 mza kernel: klips_debug:pfkey_address_process: Feb 1 20:31:48 mza kernel: klips_debug:pfkey_address_process: found address family=2, AF_INET, 190.3.63.165. Feb 1 20:31:48 mza kernel: klips_debug:pfkey_address_process: found src address. Feb 1 20:31:48 mza kernel: klips_debug:pfkey_address_process: allocating 16 bytes for saddr. Feb 1 20:31:48 mza kernel: klips_debug:pfkey_address_process: successful. Feb 1 20:31:48 mza kernel: klips_debug:pfkey_msg_interp: processing ext 6 0pccdaa5c0 with processor 0pc024c090. Feb 1 20:31:48 mza kernel: klips_debug:pfkey_address_process: Feb 1 20:31:48 mza kernel: klips_debug:pfkey_address_process: found address family=2, AF_INET, 200.123.105.195. Feb 1 20:31:48 mza kernel: klips_debug:pfkey_address_process: found dst address. Feb 1 20:31:48 mza kernel: klips_debug:pfkey_address_process: allocating 16 bytes for saddr. Feb 1 20:31:48 mza kernel: klips_debug:pfkey_address_process: ips_said.dst set to 200.123.105.195. Feb 1 20:31:48 mza kernel: klips_debug:pfkey_address_process: successful. Feb 1 20:31:48 mza kernel: klips_debug:pfkey_msg_interp: processing ext 21 0pccdaa5d8 with processor 0pc024c090. Feb 1 20:31:48 mza kernel: klips_debug:pfkey_address_process: Feb 1 20:31:48 mza kernel: klips_debug:pfkey_address_process: found address family=2, AF_INET, 192.168.0.0. Feb 1 20:31:48 mza kernel: klips_debug:pfkey_address_process: found src flow address. Feb 1 20:31:48 mza kernel: klips_debug:pfkey_alloc_eroute: allocating 168 bytes for an eroute. Feb 1 20:31:48 mza kernel: klips_debug:pfkey_alloc_eroute: allocated eroute struct=0pc2a67e58. Feb 1 20:31:48 mza kernel: klips_debug:pfkey_address_parse: extr->eroute set to 192.168.0.0/0:0->0.0.0.0/0:0 Feb 1 20:31:48 mza kernel: klips_debug:pfkey_address_process: successful. Feb 1 20:31:48 mza kernel: klips_debug:pfkey_msg_interp: processing ext 22 0pccdaa5f0 with processor 0pc024c090. Feb 1 20:31:48 mza kernel: klips_debug:pfkey_address_process: Feb 1 20:31:48 mza kernel: klips_debug:pfkey_address_process: found address family=2, AF_INET, 192.168.1.0. Feb 1 20:31:48 mza kernel: klips_debug:pfkey_address_process: found dst flow address. Feb 1 20:31:48 mza kernel: klips_debug:pfkey_alloc_eroute: eroute struct already allocated Feb 1 20:31:48 mza kernel: klips_debug:pfkey_address_parse: extr->eroute set to 192.168.0.0/0:0->192.168.1.0/0:0 Feb 1 20:31:48 mza kernel: klips_debug:pfkey_address_process: successful. Feb 1 20:31:48 mza kernel: klips_debug:pfkey_msg_interp: processing ext 23 0pccdaa608 with processor 0pc024c090. Feb 1 20:31:48 mza kernel: klips_debug:pfkey_address_process: Feb 1 20:31:48 mza kernel: klips_debug:pfkey_address_process: found address family=2, AF_INET, 255.255.255.0. Feb 1 20:31:48 mza kernel: klips_debug:pfkey_address_process: found src mask address. Feb 1 20:31:48 mza kernel: klips_debug:pfkey_alloc_eroute: eroute struct already allocated Feb 1 20:31:48 mza kernel: klips_debug:pfkey_address_parse: extr->eroute set to 192.168.0.0/24:0->192.168.1.0/0:0 Feb 1 20:31:48 mza kernel: klips_debug:pfkey_address_process: successful. Feb 1 20:31:48 mza kernel: klips_debug:pfkey_msg_interp: processing ext 24 0pccdaa620 with processor 0pc024c090. Feb 1 20:31:48 mza kernel: klips_debug:pfkey_address_process: Feb 1 20:31:48 mza kernel: klips_debug:pfkey_address_process: found address family=2, AF_INET, 255.255.255.0. Feb 1 20:31:48 mza kernel: klips_debug:pfkey_address_process: found dst mask address. Feb 1 20:31:48 mza kernel: klips_debug:pfkey_alloc_eroute: eroute struct already allocated Feb 1 20:31:48 mza kernel: klips_debug:pfkey_address_parse: extr->eroute set to 192.168.0.0/24:0->192.168.1.0/24:0 Feb 1 20:31:48 mza kernel: klips_debug:pfkey_address_process: successful. Feb 1 20:31:48 mza kernel: klips_debug:pfkey_msg_interp: parsing message type 14(x-addflow(eroute)) with msg_parser 0pc0249a60. Feb 1 20:31:48 mza kernel: klips_debug:pfkey_x_addflow_parse: . Feb 1 20:31:48 mza ipsec__plutorun: /usr/lib/ipsec/_plutorun: line 1: 14866 Segmentation fault /usr/lib/ipsec/pluto --nofork --secretsfile /etc/ipsec.secrets --policygroupsdir /etc/ipsec.d/policies --debug-all --uniqueids Feb 1 20:31:48 mza kernel: klips_debug:pfkey_x_addflow_parse: calling breakeroute and/or makeroute for 192.168.0.0/24->192.168.1.0/24 Feb 1 20:31:48 mza ipsec__plutorun: !pluto failure!: exited with error status 139 (signal 11) Feb 1 20:31:48 mza kernel: klips_debug:pfkey_x_addflow_parse: REPLACEFLOW flag set, calling breakeroute. Feb 1 20:31:48 mza ipsec__plutorun: restarting IPsec after pause... Feb 1 20:31:48 mza kernel: klips_debug:ipsec_breakroute: attempting to delete eroute for 192.168.0.0/24:0->192.168.1.0/24:0 0 Feb 1 20:31:48 mza kernel: klips_debug:ipsec_breakroute: deleted eroute=0pc28e98c0, ident=0p00000000->0p00000000, first=0p00000000, last=0p00000000 Feb 1 20:31:48 mza kernel: klips_debug:pfkey_x_addflow_parse: calling makeroute. Feb 1 20:31:48 mza kernel: klips_debug:ipsec_makeroute: attempting to allocate 168 bytes to insert eroute for 192.168.0.0/24:0->192.168.1.0/24:0 0, SA: tun0x1002@200.123.105.195, PID:14866, skb=0p00000000, ident:NULL->NULL Feb 1 20:31:48 mza kernel: klips_debug:ipsec_makeroute: succeeded, I think... Feb 1 20:31:48 mza kernel: klips_debug:pfkey_x_addflow_parse: makeroute call successful. Feb 1 20:31:48 mza kernel: klips_debug:pfkey_msg_hdr_build: Feb 1 20:31:48 mza kernel: klips_debug:pfkey_msg_hdr_build: on_entry &pfkey_ext=0pc2a67c28 pfkey_ext=0pc2a67d10 *pfkey_ext=0p00000000. Feb 1 20:31:48 mza kernel: klips_debug:pfkey_msg_hdr_build: on_exit &pfkey_ext=0pc2a67c28 pfkey_ext=0pc2a67d10 *pfkey_ext=0pc295b9c0. Feb 1 20:31:48 mza kernel: klips_debug:pfkey_safe_build: error=0 Feb 1 20:31:48 mza kernel: klips_debug:pfkey_safe_build:success. Feb 1 20:31:48 mza kernel: klips_debug:pfkey_sa_build: spi=00001002 replay=0 sa_state=0 auth=0 encrypt=0 flags=2 Feb 1 20:31:48 mza kernel: klips_debug:pfkey_safe_build: error=0 Feb 1 20:31:48 mza kernel: klips_debug:pfkey_safe_build:success. Feb 1 20:31:48 mza kernel: klips_debug:pfkey_address_build: exttype=5 proto=0 prefixlen=0 Feb 1 20:31:48 mza kernel: klips_debug:pfkey_address_build: found address family AF_INET. Feb 1 20:31:48 mza kernel: klips_debug:pfkey_address_build: found address=190.3.63.165:0. Feb 1 20:31:48 mza kernel: klips_debug:pfkey_address_build: successful. Feb 1 20:31:48 mza kernel: klips_debug:pfkey_safe_build: error=0 Feb 1 20:31:48 mza kernel: klips_debug:pfkey_safe_build:success. Feb 1 20:31:48 mza kernel: klips_debug:pfkey_address_build: exttype=6 proto=0 prefixlen=0 Feb 1 20:31:48 mza kernel: klips_debug:pfkey_address_build: found address family AF_INET. Feb 1 20:31:48 mza kernel: klips_debug:pfkey_address_build: found address=200.123.105.195:0. Feb 1 20:31:48 mza kernel: klips_debug:pfkey_address_build: successful. Feb 1 20:31:48 mza kernel: klips_debug:pfkey_safe_build: error=0 Feb 1 20:31:48 mza kernel: klips_debug:pfkey_safe_build:success. Feb 1 20:31:48 mza kernel: klips_debug:pfkey_address_build: exttype=21 proto=0 prefixlen=0 Feb 1 20:31:48 mza kernel: klips_debug:pfkey_address_build: found address family AF_INET. Feb 1 20:31:48 mza kernel: klips_debug:pfkey_address_build: found address=192.168.0.0:0. Feb 1 20:31:48 mza kernel: klips_debug:pfkey_address_build: successful. Feb 1 20:31:48 mza kernel: klips_debug:pfkey_safe_build: error=0 Feb 1 20:31:48 mza kernel: klips_debug:pfkey_safe_build:success. Feb 1 20:31:48 mza kernel: klips_debug:pfkey_address_build: exttype=22 proto=0 prefixlen=0 Feb 1 20:31:48 mza kernel: klips_debug:pfkey_address_build: found address family AF_INET. Feb 1 20:31:48 mza kernel: klips_debug:pfkey_address_build: found address=192.168.1.0:0. Feb 1 20:31:48 mza kernel: klips_debug:pfkey_address_build: successful. Feb 1 20:31:48 mza kernel: klips_debug:pfkey_safe_build: error=0 Feb 1 20:31:48 mza kernel: klips_debug:pfkey_safe_build:success. Feb 1 20:31:48 mza kernel: klips_debug:pfkey_address_build: exttype=23 proto=0 prefixlen=0 Feb 1 20:31:48 mza kernel: klips_debug:pfkey_address_build: found address family AF_INET. Feb 1 20:31:48 mza kernel: klips_debug:pfkey_address_build: found address=255.255.255.0:0. Feb 1 20:31:48 mza kernel: klips_debug:pfkey_address_build: successful. Feb 1 20:31:48 mza kernel: klips_debug:pfkey_safe_build: error=0 Feb 1 20:31:48 mza kernel: klips_debug:pfkey_safe_build:success. Feb 1 20:31:48 mza kernel: klips_debug:pfkey_address_build: exttype=24 proto=0 prefixlen=0 Feb 1 20:31:48 mza kernel: klips_debug:pfkey_address_build: found address family AF_INET. Feb 1 20:31:48 mza kernel: klips_debug:pfkey_address_build: found address=255.255.255.0:0. Feb 1 20:31:48 mza kernel: klips_debug:pfkey_address_build: successful. Feb 1 20:31:48 mza kernel: klips_debug:pfkey_safe_build: error=0 Feb 1 20:31:48 mza kernel: klips_debug:pfkey_safe_build:success. Feb 1 20:31:48 mza kernel: klips_debug:pfkey_msg_build: pfkey_msg=0pc28e94c0 allocated 184 bytes, &(extensions[0])=0pc2a67d10 Feb 1 20:31:48 mza kernel: klips_debug:pfkey_msg_build: copying 24 bytes from extensions[1]=0pc295b240 to=0pc28e94d0 Feb 1 20:31:48 mza kernel: klips_debug:pfkey_msg_build: copying 24 bytes from extensions[5]=0pc295b800 to=0pc28e94e8 Feb 1 20:31:48 mza kernel: klips_debug:pfkey_msg_build: copying 24 bytes from extensions[6]=0pc295bcc0 to=0pc28e9500 Feb 1 20:31:48 mza kernel: klips_debug:pfkey_msg_build: copying 24 bytes from extensions[21]=0pc295bc00 to=0pc28e9518 Feb 1 20:31:48 mza kernel: klips_debug:pfkey_msg_build: copying 24 bytes from extensions[22]=0pc295b980 to=0pc28e9530 Feb 1 20:31:48 mza kernel: klips_debug:pfkey_msg_build: copying 24 bytes from extensions[23]=0pc295bd00 to=0pc28e9548 Feb 1 20:31:48 mza kernel: klips_debug:pfkey_msg_build: copying 24 bytes from extensions[24]=0pc295bdc0 to=0pc28e9560 Feb 1 20:31:48 mza kernel: klips_debug:pfkey_msg_build: extensions permitted=05e00063, seen=01e00063, required=01e00043. Feb 1 20:31:48 mza kernel: klips_debug:pfkey_msg_parse: parsing message ver=2, type=14(x-addflow(eroute)), errno=0, satype=9(IPIP), len=23, res=0, seq=13, pid=14866. Feb 1 20:31:48 mza kernel: klips_debug:pfkey_msg_parse: satype 9(IPIP) conversion to proto gives 4 for msg_type 14(x-addflow(eroute)). Feb 1 20:31:48 mza kernel: klips_debug:pfkey_msg_parse: remain=21 ext_type=1(security-association) ext_len=3 parsing ext 0pc28e94d0 with parser pfkey_sa_parse. Feb 1 20:31:48 mza kernel: klips_debug:pfkey_sa_parse: successfully found len=3 exttype=1(security-association) spi=00001002 replay=0 state=0 auth=0 encrypt=0 flags=2 ref=1644. Feb 1 20:31:48 mza kernel: klips_debug:pfkey_msg_parse: remain=18 ext_type=5(source-address) ext_len=3 parsing ext 0pc28e94e8 with parser pfkey_address_parse. Feb 1 20:31:48 mza kernel: klips_debug:pfkey_address_parse: found exttype=5(source-address) family=2(AF_INET) address=190.3.63.165 proto=0 port=0. Feb 1 20:31:48 mza kernel: klips_debug:pfkey_msg_parse: remain=15 ext_type=6(destination-address) ext_len=3 parsing ext 0pc28e9500 with parser pfkey_address_parse. Feb 1 20:31:48 mza kernel: klips_debug:pfkey_address_parse: found exttype=6(destination-address) family=2(AF_INET) address=200.123.105.195 proto=0 port=0. Feb 1 20:31:48 mza kernel: klips_debug:pfkey_msg_parse: remain=12 ext_type=21(X-source-flow-address) ext_len=3 parsing ext 0pc28e9518 with parser pfkey_address_parse. Feb 1 20:31:48 mza kernel: klips_debug:pfkey_address_parse: found exttype=21(X-source-flow-address) family=2(AF_INET) address=192.168.0.0 proto=0 port=0. Feb 1 20:31:48 mza kernel: klips_debug:pfkey_msg_parse: remain=9 ext_type=22(X-dest-flow-address) ext_len=3 parsing ext 0pc28e9530 with parser pfkey_address_parse. Feb 1 20:31:48 mza kernel: klips_debug:pfkey_address_parse: found exttype=22(X-dest-flow-address) family=2(AF_INET) address=192.168.1.0 proto=0 port=0. Feb 1 20:31:48 mza kernel: klips_debug:pfkey_msg_parse: remain=6 ext_type=23(X-source-mask) ext_len=3 parsing ext 0pc28e9548 with parser pfkey_address_parse. Feb 1 20:31:48 mza kernel: klips_debug:pfkey_address_parse: found exttype=23(X-source-mask) family=2(AF_INET) address=255.255.255.0 proto=0 port=0. Feb 1 20:31:48 mza kernel: klips_debug:pfkey_msg_parse: remain=3 ext_type=24(X-dest-mask) ext_len=3 parsing ext 0pc28e9560 with parser pfkey_address_parse. Feb 1 20:31:48 mza kernel: klips_debug:pfkey_address_parse: found exttype=24(X-dest-mask) family=2(AF_INET) address=255.255.255.0 proto=0 port=0. Feb 1 20:31:48 mza kernel: klips_debug:pfkey_msg_parse: extensions permitted=05e00063, seen=01e00063, required=01e00043. Feb 1 20:31:48 mza kernel: klips_debug:pfkey_upmsg: allocating 184 bytes... Feb 1 20:31:48 mza kernel: klips_debug:pfkey_upmsg: ...allocated at 0pcf12f840. Feb 1 20:31:48 mza kernel: klips_debug:pfkey_x_addflow_parse: sending up x_addflow reply message for satype=9(IPIP) (proto=4) to socket=0pc2a41d60 succeeded. Feb 1 20:31:48 mza kernel: klips_debug:pfkey_x_addflow_parse: extr->ips cleaned up and freed. Feb 1 20:31:48 mza kernel: klips_debug:ipsec_sa_wipe: removing SA=tun0x1002@200.123.105.195(0pcf0b0200), SAref=1644, table=0(0pd0000000), entry=1644 from the refTable. Feb 1 20:31:48 mza kernel: klips_debug:ipsec_sa_put: ipsec_sa SA:tun0x1002@200.123.105.195, ref:-1 reference count decremented. Feb 1 20:31:48 mza kernel: klips_debug:pfkey_release: sock=0pc2a41d60 sk=0pc253e480 Feb 1 20:31:48 mza kernel: klips_debug:pfkey_destroy_socket: . Feb 1 20:31:48 mza kernel: klips_debug:pfkey_remove_socket: . Feb 1 20:31:48 mza kernel: klips_debug:pfkey_remove_socket: succeeded. Feb 1 20:31:48 mza kernel: klips_debug:pfkey_destroy_socket: pfkey_remove_socket called. Feb 1 20:31:48 mza kernel: klips_debug:pfkey_destroy_socket: sk(0pc253e480)->(&0pc253e4c8)receive_queue.{next=0pc253e4c8,prev=0pc253e4c8}. Feb 1 20:31:48 mza kernel: klips_debug:pfkey_destroy_socket: destroyed. Feb 1 20:31:48 mza kernel: klips_debug:pfkey_list_remove_socket: removing sock=0pc2a41d60 Feb 1 20:31:48 mza last message repeated 12 times Feb 1 20:31:48 mza kernel: klips_debug:pfkey_release: succeeded. Feb 1 20:31:49 mza kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 Feb 1 20:31:49 mza kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0. Feb 1 20:31:49 mza kernel: klips_debug: IP: ihl:20 ver:4 tos:0 tlen:104 id:26589 frag_off:0 ttl:60 proto:50 chk:59039 saddr:200.123.105.195 daddr:190.3.63.165 Feb 1 20:31:49 mza kernel: klips_debug:ipsec_rcv_decap_once: decap (50) from 200.123.105.195 -> 190.3.63.165 Feb 1 20:31:49 mza kernel: klips_debug:ipsec_sa_getbyid: linked entry in ipsec_sa table for hash=154 of SA:esp0x2d289485@190.3.63.165 requested. Feb 1 20:31:49 mza kernel: klips_debug:ipsec_sa_getbyid: no entries in ipsec_sa table for hash=154 of SA:esp0x2d289485@190.3.63.165. Feb 1 20:31:49 mza kernel: klips_debug:ipsec_rcv: no ipsec_sa for SA:esp0x2d289485@190.3.63.165: incoming packet with no SA dropped Feb 1 20:31:49 mza kernel: klips_debug:ipsec_rcv: decap_once failed: -7 Feb 1 20:31:49 mza kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 Feb 1 20:31:49 mza kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0. Feb 1 20:31:49 mza kernel: klips_debug: IP: ihl:20 ver:4 tos:0 tlen:104 id:26590 frag_off:0 ttl:60 proto:50 chk:59038 saddr:200.123.105.195 daddr:190.3.63.165 Feb 1 20:31:49 mza kernel: klips_debug:ipsec_rcv_decap_once: decap (50) from 200.123.105.195 -> 190.3.63.165 Feb 1 20:31:49 mza kernel: klips_debug:ipsec_sa_getbyid: linked entry in ipsec_sa table for hash=154 of SA:esp0x2d289485@190.3.63.165 requested. Feb 1 20:31:49 mza kernel: klips_debug:ipsec_sa_getbyid: no entries in ipsec_sa table for hash=154 of SA:esp0x2d289485@190.3.63.165. Feb 1 20:31:49 mza kernel: klips_debug:ipsec_rcv: no ipsec_sa for SA:esp0x2d289485@190.3.63.165: incoming packet with no SA dropped Feb 1 20:31:49 mza kernel: klips_debug:ipsec_rcv: decap_once failed: -7 Feb 1 20:31:58 mza ipsec_setup: Stopping FreeS/WAN IPsec... Feb 1 20:31:58 mza ipsec_setup: Removing orphaned /var/run/pluto.pid: Feb 1 20:31:58 mza kernel: klips_debug:ipsec_device_event: NETDEV_GOING_DOWN dev=ipsec0 Feb 1 20:31:58 mza kernel: klips_debug:ipsec_device_event: NETDEV_DOWN dev=ipsec0 flags=80 Feb 1 20:31:58 mza kernel: IPSEC EVENT: KLIPS device ipsec0 shut down. Feb 1 20:31:58 mza kernel: klips_debug:ipsec_tunnel_ioctl: tncfg service call #35313 for dev=ipsec0 Feb 1 20:31:58 mza kernel: klips_debug:ipsec_tunnel_ioctl: calling ipsec_tunnel_detatch. Feb 1 20:31:58 mza kernel: klips_debug:ipsec_tunnel_detach: physical device eth0 being detached from virtual device ipsec0 Feb 1 20:31:58 mza kernel: klips_debug:pfkey_create: sock=0pc28339e0 type:3 state:1 flags:0 protocol:2 Feb 1 20:31:58 mza kernel: klips_debug:pfkey_create: sock->fasync_list=0p00000000 sk->sleep=0pc28339fc. Feb 1 20:31:58 mza kernel: klips_debug:pfkey_insert_socket: sk=0pc253e800 Feb 1 20:31:58 mza kernel: klips_debug:pfkey_list_insert_socket: allocating 8 bytes for socketp=0pc28339e0 Feb 1 20:31:58 mza kernel: klips_debug:pfkey_create: Socket sock=0pc28339e0 sk=0pc253e800 initialised. Feb 1 20:31:58 mza kernel: klips_debug:pfkey_sendmsg: . Feb 1 20:31:58 mza kernel: klips_debug:pfkey_sendmsg: allocating 72 bytes for downward message. Feb 1 20:31:58 mza kernel: klips_debug:pfkey_sendmsg: msg sent for parsing. Feb 1 20:31:58 mza kernel: klips_debug:pfkey_msg_interp: parsing message ver=2, type=16, errno=0, satype=0(UNKNOWN), len=9, res=0, seq=1, pid=14969. Feb 1 20:31:58 mza kernel: klips_debug:ipsec_SAref_alloc: SAref requested... head=109, cont=1792, tail=255, listsize=256. Feb 1 20:31:58 mza kernel: klips_debug:ipsec_SAref_alloc: allocating SAref=1645, table=0, entry=1645 of 65536. Feb 1 20:31:58 mza kernel: klips_debug:ipsec_sa_alloc: allocated 500 bytes for ipsec_sa struct=0pcf0b0000 ref=1645. Feb 1 20:31:58 mza kernel: klips_debug:pfkey_msg_interp: allocated extr->ips=0pcf0b0000. Feb 1 20:31:58 mza kernel: klips_debug:pfkey_msg_parse: parsing message ver=2, type=16(x-debug), errno=0, satype=0(UNKNOWN), len=9, res=0, seq=1, pid=14969. Feb 1 20:31:58 mza kernel: klips_debug:pfkey_msg_parse: remain=7 ext_type=25(X-set-debug) ext_len=7 parsing ext 0pcef19750 with parser pfkey_x_ext_debug_parse. Feb 1 20:31:58 mza kernel: klips_debug:pfkey_msg_parse: extensions permitted=02000001, seen=02000001, required=02000001. Feb 1 20:31:58 mza kernel: klips_debug:pfkey_msg_interp: processing ext 25 0pcef19750 with processor 0pc024cdd0. Feb 1 20:31:58 mza kernel: klips_debug:pfkey_x_debug_process: . Feb 1 20:31:58 mza kernel: klips_debug:pfkey_x_debug_process: unset Feb 1 20:31:58 mza kernel: Feb 1 20:31:58 mza ipsec_setup: ...FreeS/WAN IPsec stopped Feb 1 20:31:58 mza ipsec_setup: Restarting FreeS/WAN IPsec 2.04... Feb 1 20:31:58 mza ipsec_setup: KLIPS debug `all' Feb 1 20:31:58 mza kernel: klips_debug:pfkey_x_debug_process: set Feb 1 20:31:58 mza kernel: klips_debug:pfkey_msg_interp: parsing message type 16(x-debug) with msg_parser 0pc024aaa0. Feb 1 20:31:58 mza kernel: klips_debug:pfkey_x_msg_debug_parse: . Feb 1 20:31:58 mza kernel: klips_debug:ipsec_sa_wipe: removing SA= (error)(0pcce25800), SAref=1648, table=0(0pd0000000), entry=1648 from the refTable. Feb 1 20:31:58 mza kernel: klips_debug:ipsec_sa_put: ipsec_sa SA: (error), ref:-1 reference count decremented. Feb 1 20:31:58 mza kernel: klips_debug:pfkey_release: sock=0pc28333e0 sk=0pc253e800 Feb 1 20:31:58 mza kernel: klips_debug:pfkey_destroy_socket: . Feb 1 20:31:58 mza kernel: klips_debug:pfkey_remove_socket: . Feb 1 20:31:58 mza kernel: klips_debug:pfkey_remove_socket: succeeded. Feb 1 20:31:58 mza kernel: klips_debug:pfkey_destroy_socket: pfkey_remove_socket called. Feb 1 20:31:58 mza kernel: klips_debug:pfkey_destroy_socket: sk(0pc253e800)->(&0pc253e848)receive_queue.{next=0pc253e848,prev=0pc253e848}. Feb 1 20:31:58 mza kernel: klips_debug:pfkey_destroy_socket: destroyed. Feb 1 20:31:58 mza kernel: klips_debug:pfkey_list_remove_socket: removing sock=0pc28333e0 Feb 1 20:31:58 mza last message repeated 12 times Feb 1 20:31:58 mza kernel: klips_debug:pfkey_release: succeeded. Feb 1 20:31:58 mza kernel: klips_debug:pfkey_create: sock=0pc28333e0 type:3 state:1 flags:0 protocol:2 Feb 1 20:31:58 mza kernel: klips_debug:pfkey_create: sock->fasync_list=0p00000000 sk->sleep=0pc28333fc. Feb 1 20:31:58 mza kernel: klips_debug:pfkey_insert_socket: sk=0pc253e800 Feb 1 20:31:58 mza kernel: klips_debug:pfkey_list_insert_socket: allocating 8 bytes for socketp=0pc28333e0 Feb 1 20:31:58 mza kernel: klips_debug:pfkey_create: Socket sock=0pc28333e0 sk=0pc253e800 initialised. Feb 1 20:31:58 mza kernel: klips_debug:pfkey_sendmsg: . Feb 1 20:31:58 mza kernel: klips_debug:pfkey_sendmsg: allocating 40 bytes for downward message. Feb 1 20:31:58 mza kernel: klips_debug:pfkey_sendmsg: msg sent for parsing. Feb 1 20:31:58 mza kernel: klips_debug:pfkey_msg_interp: parsing message ver=2, type=15, errno=0, satype=0(UNKNOWN), len=5, res=0, seq=1, pid=15010. Feb 1 20:31:58 mza kernel: klips_debug:ipsec_SAref_alloc: SAref requested... head=113, cont=1792, tail=255, listsize=256. Feb 1 20:31:58 mza kernel: klips_debug:ipsec_SAref_alloc: allocating SAref=1649, table=0, entry=1649 of 65536. Feb 1 20:31:58 mza kernel: klips_debug:ipsec_sa_alloc: allocated 500 bytes for ipsec_sa struct=0pcce25800 ref=1649. Feb 1 20:31:58 mza kernel: klips_debug:pfkey_msg_interp: allocated extr->ips=0pcce25800. Feb 1 20:31:58 mza kernel: klips_debug:pfkey_msg_parse: parsing message ver=2, type=15(x-delflow(eroute)), errno=0, satype=0(UNKNOWN), len=5, res=0, seq=1, pid=15010. Feb 1 20:31:58 mza kernel: klips_debug:pfkey_msg_parse: remain=3 ext_type=1(security-association) ext_len=3 parsing ext 0pcef5b750 with parser pfkey_sa_parse. Feb 1 20:31:58 mza kernel: klips_debug:pfkey_sa_parse: successfully found len=3 exttype=1(security-association) spi=6d2e6172 replay=0 state=0 auth=0 encrypt=0 flags=4 ref=-1. Feb 1 20:31:58 mza kernel: klips_debug:pfkey_msg_parse: extensions permitted=05e00c03, seen=00000003, required=00000001. Feb 1 20:31:58 mza kernel: klips_debug:pfkey_msg_interp: processing ext 1 0pcef5b750 with processor 0pc024bd40. Feb 1 20:31:58 mza kernel: klips_debug:pfkey_sa_process: . Feb 1 20:31:58 mza kernel: klips_debug:pfkey_msg_interp: parsing message type 15(x-delflow(eroute)) with msg_parser 0pc024a4b0. Feb 1 20:31:58 mza kernel: klips_debug:pfkey_x_delflow_parse: . Feb 1 20:31:58 mza kernel: klips_debug:pfkey_x_delflow_parse: CLEARFLOW flag set, calling cleareroutes. Feb 1 20:31:58 mza kernel: klips_debug:rj_walktree: for: rn=0pc133b1e8 rj_b=-3 rj_flags=6 leaf key = 00000000->00000000 Feb 1 20:31:58 mza kernel: klips_debug:rj_walktree: processing leaves, rn=0pc133b218 rj_b=-3 rj_flags=6 leaf key = ffffffff->ffffffff Feb 1 20:31:58 mza kernel: klips_debug:rj_walktree: while: base=0p00000000 rn=0pc133b1e8 rj_b=-3 rj_flags=6 leaf key = 00000000->00000000 Feb 1 20:31:58 mza kernel: klips_debug:ipsec_sa_wipe: removing SA= (error)(0pcce25800), SAref=1649, table=0(0pd0000000), entry=1649 from the refTable. Feb 1 20:31:58 mza kernel: klips_debug:ipsec_sa_put: ipsec_sa SA: (error), ref:-1 reference count decremented. Feb 1 20:31:58 mza kernel: klips_debug:pfkey_release: sock=0pc28333e0 sk=0pc253e800 Feb 1 20:31:58 mza kernel: klips_debug:pfkey_destroy_socket: . Feb 1 20:31:58 mza kernel: klips_debug:pfkey_remove_socket: . Feb 1 20:31:58 mza kernel: klips_debug:pfkey_remove_socket: succeeded. Feb 1 20:31:58 mza kernel: klips_debug:pfkey_destroy_socket: pfkey_remove_socket called. Feb 1 20:31:58 mza kernel: klips_debug:pfkey_destroy_socket: sk(0pc253e800)->(&0pc253e848)receive_queue.{next=0pc253e848,prev=0pc253e848}. Feb 1 20:31:58 mza kernel: klips_debug:pfkey_destroy_socket: destroyed. Feb 1 20:31:58 mza kernel: klips_debug:pfkey_list_remove_socket: removing sock=0pc28333e0 Feb 1 20:31:58 mza last message repeated 12 times Feb 1 20:31:58 mza kernel: klips_debug:pfkey_release: succeeded. Feb 1 20:31:58 mza kernel: klips_debug:pfkey_create: sock=0pc28333e0 type:3 state:1 flags:0 protocol:2 Feb 1 20:31:58 mza kernel: klips_debug:pfkey_create: sock->fasync_list=0p00000000 sk->sleep=0pc28333fc. Feb 1 20:31:58 mza kernel: klips_debug:pfkey_insert_socket: sk=0pc253e800 Feb 1 20:31:58 mza kernel: klips_debug:pfkey_list_insert_socket: allocating 8 bytes for socketp=0pc28333e0 Feb 1 20:31:58 mza kernel: klips_debug:pfkey_create: Socket sock=0pc28333e0 sk=0pc253e800 initialised. Feb 1 20:31:58 mza kernel: klips_debug:pfkey_sendmsg: . Feb 1 20:31:58 mza kernel: klips_debug:pfkey_sendmsg: allocating 16 bytes for downward message. Feb 1 20:31:58 mza kernel: klips_debug:pfkey_sendmsg: msg sent for parsing. Feb 1 20:31:58 mza kernel: klips_debug:pfkey_msg_interp: parsing message ver=2, type=9, errno=0, satype=0(UNKNOWN), len=2, res=0, seq=1, pid=15011. Feb 1 20:31:58 mza kernel: klips_debug:ipsec_SAref_alloc: SAref requested... head=114, cont=1792, tail=255, listsize=256. Feb 1 20:31:58 mza kernel: klips_debug:ipsec_SAref_alloc: allocating SAref=1650, table=0, entry=1650 of 65536. Feb 1 20:31:58 mza kernel: klips_debug:ipsec_sa_alloc: allocated 500 bytes for ipsec_sa struct=0pcce25800 ref=1650. Feb 1 20:31:58 mza kernel: klips_debug:pfkey_msg_interp: allocated extr->ips=0pcce25800. Feb 1 20:31:58 mza kernel: klips_debug:pfkey_msg_parse: parsing message ver=2, type=9(flush), errno=0, satype=0(UNKNOWN), len=2, res=0, seq=1, pid=15011. Feb 1 20:31:58 mza kernel: klips_debug:pfkey_msg_parse: extensions permitted=00000001, seen=00000001, required=00000001. Feb 1 20:31:58 mza kernel: klips_debug:pfkey_msg_interp: parsing message type 9(flush) with msg_parser 0pc0249120. Feb 1 20:31:58 mza kernel: klips_debug:pfkey_flush_parse: flushing type 0 SAs Feb 1 20:31:58 mza kernel: klips_debug:ipsec_sadb_cleanup: cleaning up proto=0. Feb 1 20:31:58 mza kernel: klips_debug:ipsec_sadb_cleanup: removing SAref entries and tables.<6>klips_debug:ipsec_sadb_cleanup: cleaning SAref table=0. Feb 1 20:31:58 mza kernel: klips_debug:ipsec_sa_delchain: passed SA: (error) Feb 1 20:31:58 mza kernel: klips_debug:ipsec_sa_delchain: unlinking and delting SA: (error)<6>. Feb 1 20:31:58 mza kernel: klips_debug:ipsec_sa_del: deleting SA: (error), hashval=0. Feb 1 20:31:58 mza kernel: klips_debug:ipsec_sa_del: no entries in ipsec_sa table for hash=0 of SA: (error). Feb 1 20:31:58 mza kernel: klips_debug:ipsec_sa_delchain: ipsec_sa_del returned error 2. Feb 1 20:31:58 mza kernel: klips_debug:ipsec_sadb_cleanup: cleaning SAref table=1. Feb 1 20:31:58 mza kernel: Feb 1 20:31:58 mza kernel: klips_debug:ipsec_sadb_cleanup: cleaned 1 used refTables. Feb 1 20:31:58 mza kernel: klips_debug:pfkey_upmsg: allocating 16 bytes... Feb 1 20:31:58 mza kernel: klips_debug:pfkey_upmsg: ...allocated at 0pcd175780. Feb 1 20:31:58 mza kernel: klips_debug:pfkey_flush_parse: sending up flush reply message for satype=0(UNKNOWN) to socket=0pc28333e0 succeeded. Feb 1 20:31:58 mza kernel: klips_debug:ipsec_sa_wipe: removing SA= (error)(0pcce25800), SAref=1650, table=0(0pd0000000), entry=1650 from the refTable. Feb 1 20:31:58 mza kernel: klips_debug:ipsec_sa_put: ipsec_sa SA: (error), ref:-1 reference count decremented. Feb 1 20:31:58 mza kernel: klips_debug:pfkey_release: sock=0pc28333e0 sk=0pc253e800 Feb 1 20:31:58 mza kernel: klips_debug:pfkey_destroy_socket: . Feb 1 20:31:58 mza kernel: klips_debug:pfkey_remove_socket: . Feb 1 20:31:58 mza kernel: klips_debug:pfkey_remove_socket: succeeded. Feb 1 20:31:58 mza kernel: klips_debug:pfkey_destroy_socket: pfkey_remove_socket called. Feb 1 20:31:58 mza kernel: klips_debug:pfkey_destroy_socket: sk(0pc253e800)->(&0pc253e848)receive_queue.{next=0pcd175780,prev=0pcd175780}. Feb 1 20:31:58 mza kernel: klips_debug:pfkey_destroy_socket: skb=0pcd175780 freed. Feb 1 20:31:58 mza kernel: klips_debug:pfkey_destroy_socket: destroyed. Feb 1 20:31:58 mza kernel: klips_debug:pfkey_list_remove_socket: removing sock=0pc28333e0 Feb 1 20:31:58 mza last message repeated 12 times Feb 1 20:31:58 mza kernel: klips_debug:pfkey_release: succeeded. Feb 1 20:31:58 mza ipsec_setup: KLIPS ipsec0 on eth0 190.3.63.165/255.255.255.224 broadcast 190.3.63.191 Feb 1 20:31:59 mza kernel: klips_debug:ipsec_tunnel_ioctl: tncfg service call #35312 for dev=ipsec0 Feb 1 20:31:59 mza kernel: klips_debug:ipsec_tunnel_ioctl: calling ipsec_tunnel_attatch... Feb 1 20:31:59 mza kernel: klips_debug:ipsec_tunnel_attach: physical device eth0 being attached has HW address: 0:08:a1:40:fe:0a Feb 1 20:31:59 mza kernel: klips_debug:ipsec_tunnel_open: dev = ipsec0, prv->dev = eth0 Feb 1 20:31:59 mza kernel: klips_debug:ipsec_device_event: NETDEV_UP dev=ipsec0 Feb 1 20:31:59 mza ipsec_setup: ...FreeS/WAN IPsec started Feb 1 20:31:59 mza kernel: klips_debug:pfkey_create: sock=0pc2a41b60 type:3 state:1 flags:0 protocol:2 Feb 1 20:31:59 mza kernel: klips_debug:pfkey_create: sock->fasync_list=0p00000000 sk->sleep=0pc2a41b7c. Feb 1 20:31:59 mza kernel: klips_debug:pfkey_insert_socket: sk=0pc253e800 Feb 1 20:31:59 mza kernel: klips_debug:pfkey_list_insert_socket: allocating 8 bytes for socketp=0pc2a41b60 Feb 1 20:32:00 mza kernel: klips_debug:pfkey_create: Socket sock=0pc2a41b60 sk=0pc253e800 initialised. Feb 1 20:32:00 mza kernel: klips_debug:pfkey_sendmsg: . Feb 1 20:32:00 mza kernel: klips_debug:pfkey_sendmsg: allocating 16 bytes for downward message. Feb 1 20:32:00 mza kernel: klips_debug:pfkey_sendmsg: msg sent for parsing. Feb 1 20:32:00 mza kernel: klips_debug:pfkey_msg_interp: parsing message ver=2, type=7, errno=0, satype=2(AH), len=2, res=0, seq=1, pid=15051. Feb 1 20:32:00 mza kernel: klips_debug:ipsec_SAref_alloc: SAref requested... head=115, cont=1792, tail=255, listsize=256. Feb 1 20:32:00 mza kernel: klips_debug:ipsec_SAref_alloc: allocating SAref=1651, table=0, entry=1651 of 65536. Feb 1 20:32:00 mza kernel: klips_debug:ipsec_sa_alloc: allocated 500 bytes for ipsec_sa struct=0pcce25800 ref=1651. Feb 1 20:32:00 mza kernel: klips_debug:pfkey_msg_interp: allocated extr->ips=0pcce25800. Feb 1 20:32:00 mza kernel: klips_debug:pfkey_msg_parse: parsing message ver=2, type=7(register), errno=0, satype=2(AH), len=2, res=0, seq=1, pid=15051. Feb 1 20:32:00 mza kernel: klips_debug:pfkey_msg_parse: extensions permitted=00000001, seen=00000001, required=00000001. Feb 1 20:32:00 mza kernel: klips_debug:pfkey_msg_interp: parsing message type 7(register) with msg_parser 0pc0248930. Feb 1 20:32:00 mza kernel: klips_debug:pfkey_register_parse: . Feb 1 20:32:00 mza kernel: klips_debug:pfkey_list_insert_socket: allocating 8 bytes for socketp=0pc2a41b60 Feb 1 20:32:00 mza kernel: klips_debug:pfkey_register_parse: SATYPE=02(AH) successfully registered by KMd (pid=15051). Feb 1 20:32:00 mza kernel: klips_debug:pfkey_register_reply: pfkey_supported_list[2]=0pc1370e80 Feb 1 20:32:00 mza kernel: klips_debug:pfkey_register_reply: checking supported=0pc1370e80 Feb 1 20:32:00 mza kernel: klips_debug:pfkey_register_reply: adding auth alg. Feb 1 20:32:00 mza kernel: klips_debug:pfkey_register_reply: checking supported=0pc1370e40 Feb 1 20:32:00 mza kernel: klips_debug:pfkey_register_reply: adding auth alg. Feb 1 20:32:00 mza kernel: klips_debug:pfkey_register_reply: allocating 16 bytes for auth algs. Feb 1 20:32:00 mza kernel: klips_debug:pfkey_register_reply: found satype=2(AH) exttype=14 id=3 ivlen=0 minbits=160 maxbits=160. Feb 1 20:32:00 mza kernel: klips_debug:pfkey_register_reply: found satype=2(AH) exttype=14 id=2 ivlen=0 minbits=128 maxbits=128. Feb 1 20:32:00 mza kernel: klips_debug:pfkey_msg_hdr_build: Feb 1 20:32:00 mza kernel: klips_debug:pfkey_msg_hdr_build: on_entry &pfkey_ext=0pc258dd38 pfkey_ext=0pc258dd6c *pfkey_ext=0p00000000. Feb 1 20:32:00 mza kernel: klips_debug:pfkey_msg_hdr_build: on_exit &pfkey_ext=0pc258dd38 pfkey_ext=0pc258dd6c *pfkey_ext=0pcec8d480. Feb 1 20:32:00 mza kernel: klips_debug:pfkey_safe_build: error=0 Feb 1 20:32:00 mza kernel: klips_debug:pfkey_safe_build:success. Feb 1 20:32:00 mza kernel: klips_debug:pfkey_safe_build: error=0 Feb 1 20:32:00 mza kernel: klips_debug:pfkey_safe_build:success. Feb 1 20:32:00 mza kernel: klips_debug:pfkey_msg_build: pfkey_msg=0pcef5b700 allocated 40 bytes, &(extensions[0])=0pc258dd6c Feb 1 20:32:00 mza kernel: klips_debug:pfkey_msg_build: copying 24 bytes from extensions[14]=0pcec8d6c0 to=0pcef5b710 Feb 1 20:32:00 mza kernel: klips_debug:pfkey_msg_build: extensions permitted=0000c001, seen=00004001, required=00000001. Feb 1 20:32:00 mza kernel: klips_debug:pfkey_msg_parse: parsing message ver=2, type=7(register), errno=0, satype=2(AH), len=5, res=0, seq=1, pid=15051. Feb 1 20:32:00 mza kernel: klips_debug:pfkey_msg_parse: remain=3 ext_type=14(supported-auth) ext_len=3 parsing ext 0pcef5b710 with parser pfkey_supported_parse. Feb 1 20:32:00 mza kernel: klips_debug:pfkey_msg_parse: extensions permitted=0000c001, seen=00004001, required=00000001. Feb 1 20:32:00 mza kernel: klips_debug:pfkey_upmsg: allocating 40 bytes... Feb 1 20:32:00 mza kernel: klips_debug:pfkey_upmsg: ...allocated at 0pcbc16140. Feb 1 20:32:00 mza kernel: klips_debug:pfkey_register_reply: sending up register message for satype=2(AH) to socket=0pc2a41b60 succeeded. Feb 1 20:32:00 mza kernel: klips_debug:ipsec_sa_wipe: removing SA= (error)(0pcce25800), SAref=1651, table=0(0pd0000000), entry=1651 from the refTable. Feb 1 20:32:00 mza kernel: klips_debug:ipsec_sa_put: ipsec_sa SA: (error), ref:-1 reference count decremented. Feb 1 20:32:00 mza kernel: klips_debug:pfkey_sendmsg: . Feb 1 20:32:00 mza kernel: klips_debug:pfkey_sendmsg: allocating 16 bytes for downward message. Feb 1 20:32:00 mza kernel: klips_debug:pfkey_sendmsg: msg sent for parsing. Feb 1 20:32:00 mza kernel: klips_debug:pfkey_msg_interp: parsing message ver=2, type=7, errno=0, satype=3(ESP), len=2, res=0, seq=2, pid=15051. Feb 1 20:32:00 mza kernel: klips_debug:ipsec_SAref_alloc: SAref requested... head=116, cont=1792, tail=255, listsize=256. Feb 1 20:32:00 mza kernel: klips_debug:ipsec_SAref_alloc: allocating SAref=1652, table=0, entry=1652 of 65536. Feb 1 20:32:00 mza kernel: klips_debug:ipsec_sa_alloc: allocated 500 bytes for ipsec_sa struct=0pcce25800 ref=1652. Feb 1 20:32:00 mza kernel: klips_debug:pfkey_msg_interp: allocated extr->ips=0pcce25800. Feb 1 20:32:00 mza kernel: klips_debug:pfkey_msg_parse: parsing message ver=2, type=7(register), errno=0, satype=3(ESP), len=2, res=0, seq=2, pid=15051. Feb 1 20:32:00 mza kernel: klips_debug:pfkey_msg_parse: extensions permitted=00000001, seen=00000001, required=00000001. Feb 1 20:32:00 mza kernel: klips_debug:pfkey_msg_interp: parsing message type 7(register) with msg_parser 0pc0248930. Feb 1 20:32:00 mza kernel: klips_debug:pfkey_register_parse: . Feb 1 20:32:00 mza kernel: klips_debug:pfkey_list_insert_socket: allocating 8 bytes for socketp=0pc2a41b60 Feb 1 20:32:00 mza kernel: klips_debug:pfkey_register_parse: SATYPE=03(ESP) successfully registered by KMd (pid=15051). Feb 1 20:32:00 mza kernel: klips_debug:pfkey_register_reply: pfkey_supported_list[3]=0pc1370f40 Feb 1 20:32:00 mza kernel: klips_debug:pfkey_register_reply: checking supported=0pc1370f40 Feb 1 20:32:00 mza kernel: klips_debug:pfkey_register_reply: adding encrypt alg. Feb 1 20:32:00 mza kernel: klips_debug:pfkey_register_reply: checking supported=0pc1370f00 Feb 1 20:32:00 mza kernel: klips_debug:pfkey_register_reply: adding auth alg. Feb 1 20:32:00 mza kernel: klips_debug:pfkey_register_reply: checking supported=0pc1370ec0 Feb 1 20:32:00 mza kernel: klips_debug:pfkey_register_reply: adding auth alg. Feb 1 20:32:00 mza kernel: klips_debug:pfkey_register_reply: allocating 16 bytes for auth algs. Feb 1 20:32:00 mza kernel: klips_debug:pfkey_register_reply: allocating 8 bytes for enc algs. Feb 1 20:32:00 mza kernel: klips_debug:pfkey_register_reply: found satype=3(ESP) exttype=15 id=3 ivlen=64 minbits=168 maxbits=168. Feb 1 20:32:00 mza kernel: klips_debug:pfkey_register_reply: found satype=3(ESP) exttype=14 id=3 ivlen=0 minbits=160 maxbits=160. Feb 1 20:32:00 mza kernel: klips_debug:pfkey_register_reply: found satype=3(ESP) exttype=14 id=2 ivlen=0 minbits=128 maxbits=128. Feb 1 20:32:00 mza kernel: klips_debug:pfkey_msg_hdr_build: Feb 1 20:32:00 mza kernel: klips_debug:pfkey_msg_hdr_build: on_entry &pfkey_ext=0pc258dd38 pfkey_ext=0pc258dd6c *pfkey_ext=0p00000000. Feb 1 20:32:00 mza kernel: klips_debug:pfkey_msg_hdr_build: on_exit &pfkey_ext=0pc258dd38 pfkey_ext=0pc258dd6c *pfkey_ext=0pcec8d480. Feb 1 20:32:00 mza kernel: klips_debug:pfkey_safe_build: error=0 Feb 1 20:32:00 mza kernel: klips_debug:pfkey_safe_build:success. Feb 1 20:32:00 mza kernel: klips_debug:pfkey_safe_build: error=0 Feb 1 20:32:00 mza kernel: klips_debug:pfkey_safe_build:success. Feb 1 20:32:00 mza kernel: klips_debug:pfkey_safe_build: error=0 Feb 1 20:32:00 mza kernel: klips_debug:pfkey_safe_build:success. Feb 1 20:32:00 mza kernel: klips_debug:pfkey_msg_build: pfkey_msg=0pcef5b700 allocated 56 bytes, &(extensions[0])=0pc258dd6c Feb 1 20:32:00 mza kernel: klips_debug:pfkey_msg_build: copying 24 bytes from extensions[14]=0pcec8da80 to=0pcef5b710 Feb 1 20:32:00 mza kernel: klips_debug:pfkey_msg_build: copying 16 bytes from extensions[15]=0pcec8d700 to=0pcef5b728 Feb 1 20:32:00 mza kernel: klips_debug:pfkey_msg_build: extensions permitted=0000c001, seen=0000c001, required=00000001. Feb 1 20:32:00 mza kernel: klips_debug:pfkey_msg_parse: parsing message ver=2, type=7(register), errno=0, satype=3(ESP), len=7, res=0, seq=2, pid=15051. Feb 1 20:32:00 mza kernel: klips_debug:pfkey_msg_parse: remain=5 ext_type=14(supported-auth) ext_len=3 parsing ext 0pcef5b710 with parser pfkey_supported_parse. Feb 1 20:32:00 mza kernel: klips_debug:pfkey_msg_parse: remain=2 ext_type=15(supported-cipher) ext_len=2 parsing ext 0pcef5b728 with parser pfkey_supported_parse. Feb 1 20:32:00 mza kernel: klips_debug:pfkey_msg_parse: extensions permitted=0000c001, seen=0000c001, required=00000001. Feb 1 20:32:00 mza kernel: klips_debug:pfkey_upmsg: allocating 56 bytes... Feb 1 20:32:00 mza kernel: klips_debug:pfkey_upmsg: ...allocated at 0pcbc16ec0. Feb 1 20:32:00 mza kernel: klips_debug:pfkey_register_reply: sending up register message for satype=3(ESP) to socket=0pc2a41b60 succeeded. Feb 1 20:32:00 mza kernel: klips_debug:ipsec_sa_wipe: removing SA= (error)(0pcce25800), SAref=1652, table=0(0pd0000000), entry=1652 from the refTable. Feb 1 20:32:00 mza kernel: klips_debug:ipsec_sa_put: ipsec_sa SA: (error), ref:-1 reference count decremented. Feb 1 20:32:00 mza kernel: klips_debug:pfkey_sendmsg: . Feb 1 20:32:00 mza kernel: klips_debug:pfkey_sendmsg: allocating 16 bytes for downward message. Feb 1 20:32:00 mza kernel: klips_debug:pfkey_sendmsg: msg sent for parsing. Feb 1 20:32:00 mza kernel: klips_debug:pfkey_msg_interp: parsing message ver=2, type=7, errno=0, satype=10(COMP), len=2, res=0, seq=3, pid=15051. Feb 1 20:32:00 mza kernel: klips_debug:ipsec_SAref_alloc: SAref requested... head=117, cont=1792, tail=255, listsize=256. Feb 1 20:32:00 mza kernel: klips_debug:ipsec_SAref_alloc: allocating SAref=1653, table=0, entry=1653 of 65536. Feb 1 20:32:00 mza kernel: klips_debug:ipsec_sa_alloc: allocated 500 bytes for ipsec_sa struct=0pcce25800 ref=1653. Feb 1 20:32:00 mza kernel: klips_debug:pfkey_msg_interp: allocated extr->ips=0pcce25800. Feb 1 20:32:00 mza kernel: klips_debug:pfkey_msg_parse: parsing message ver=2, type=7(register), errno=0, satype=10(COMP), len=2, res=0, seq=3, pid=15051. Feb 1 20:32:00 mza kernel: klips_debug:pfkey_msg_parse: extensions permitted=00000001, seen=00000001, required=00000001. Feb 1 20:32:00 mza kernel: klips_debug:pfkey_msg_interp: parsing message type 7(register) with msg_parser 0pc0248930. Feb 1 20:32:00 mza kernel: klips_debug:pfkey_register_parse: . Feb 1 20:32:00 mza kernel: klips_debug:pfkey_list_insert_socket: allocating 8 bytes for socketp=0pc2a41b60 Feb 1 20:32:00 mza kernel: klips_debug:pfkey_register_parse: SATYPE=10(COMP) successfully registered by KMd (pid=15051). Feb 1 20:32:00 mza kernel: klips_debug:pfkey_register_reply: pfkey_supported_list[10]=0pc1370f80 Feb 1 20:32:00 mza kernel: klips_debug:pfkey_register_reply: checking supported=0pc1370f80 Feb 1 20:32:00 mza kernel: klips_debug:pfkey_register_reply: adding encrypt alg. Feb 1 20:32:00 mza kernel: klips_debug:pfkey_register_reply: allocating 8 bytes for enc algs. Feb 1 20:32:00 mza kernel: klips_debug:pfkey_register_reply: found satype=10(COMP) exttype=15 id=2 ivlen=0 minbits=1 maxbits=1. Feb 1 20:32:00 mza kernel: klips_debug:pfkey_msg_hdr_build: Feb 1 20:32:00 mza kernel: klips_debug:pfkey_msg_hdr_build: on_entry &pfkey_ext=0pc258dd38 pfkey_ext=0pc258dd6c *pfkey_ext=0p00000000. Feb 1 20:32:00 mza kernel: klips_debug:pfkey_msg_hdr_build: on_exit &pfkey_ext=0pc258dd38 pfkey_ext=0pc258dd6c *pfkey_ext=0pcec8da80. Feb 1 20:32:00 mza kernel: klips_debug:pfkey_safe_build: error=0 Feb 1 20:32:00 mza kernel: klips_debug:pfkey_safe_build:success. Feb 1 20:32:00 mza kernel: klips_debug:pfkey_safe_build: error=0 Feb 1 20:32:00 mza kernel: klips_debug:pfkey_safe_build:success. Feb 1 20:32:00 mza kernel: klips_debug:pfkey_msg_build: pfkey_msg=0pcec8d6c0 allocated 32 bytes, &(extensions[0])=0pc258dd6c Feb 1 20:32:00 mza kernel: klips_debug:pfkey_msg_build: copying 16 bytes from extensions[15]=0pcec8d480 to=0pcec8d6d0 Feb 1 20:32:00 mza kernel: klips_debug:pfkey_msg_build: extensions permitted=0000c001, seen=00008001, required=00000001. Feb 1 20:32:00 mza kernel: klips_debug:pfkey_msg_parse: parsing message ver=2, type=7(register), errno=0, satype=10(COMP), len=4, res=0, seq=3, pid=15051. Feb 1 20:32:00 mza kernel: klips_debug:pfkey_msg_parse: remain=2 ext_type=15(supported-cipher) ext_len=2 parsing ext 0pcec8d6d0 with parser pfkey_supported_parse. Feb 1 20:32:00 mza kernel: klips_debug:pfkey_msg_parse: extensions permitted=0000c001, seen=00008001, required=00000001. Feb 1 20:32:00 mza kernel: klips_debug:pfkey_upmsg: allocating 32 bytes... Feb 1 20:32:00 mza kernel: klips_debug:pfkey_upmsg: ...allocated at 0pcf0b2080. Feb 1 20:32:00 mza kernel: klips_debug:pfkey_register_reply: sending up register message for satype=10(COMP) to socket=0pc2a41b60 succeeded. Feb 1 20:32:00 mza kernel: klips_debug:ipsec_sa_wipe: removing SA= (error)(0pcce25800), SAref=1653, table=0(0pd0000000), entry=1653 from the refTable. Feb 1 20:32:00 mza kernel: klips_debug:ipsec_sa_put: ipsec_sa SA: (error), ref:-1 reference count decremented. Feb 1 20:32:00 mza kernel: klips_debug:pfkey_sendmsg: . Feb 1 20:32:00 mza kernel: klips_debug:pfkey_sendmsg: allocating 16 bytes for downward message. Feb 1 20:32:00 mza kernel: klips_debug:pfkey_sendmsg: msg sent for parsing. Feb 1 20:32:00 mza kernel: klips_debug:pfkey_msg_interp: parsing message ver=2, type=7, errno=0, satype=9(IPIP), len=2, res=0, seq=4, pid=15051. Feb 1 20:32:00 mza kernel: klips_debug:ipsec_SAref_alloc: SAref requested... head=118, cont=1792, tail=255, listsize=256. Feb 1 20:32:00 mza kernel: klips_debug:ipsec_SAref_alloc: allocating SAref=1654, table=0, entry=1654 of 65536. Feb 1 20:32:00 mza kernel: klips_debug:ipsec_sa_alloc: allocated 500 bytes for ipsec_sa struct=0pcce25800 ref=1654. Feb 1 20:32:00 mza kernel: klips_debug:pfkey_msg_interp: allocated extr->ips=0pcce25800. Feb 1 20:32:00 mza kernel: klips_debug:pfkey_msg_parse: parsing message ver=2, type=7(register), errno=0, satype=9(IPIP), len=2, res=0, seq=4, pid=15051. Feb 1 20:32:00 mza kernel: klips_debug:pfkey_msg_parse: extensions permitted=00000001, seen=00000001, required=00000001. Feb 1 20:32:00 mza kernel: klips_debug:pfkey_msg_interp: parsing message type 7(register) with msg_parser 0pc0248930. Feb 1 20:32:00 mza kernel: klips_debug:pfkey_register_parse: . Feb 1 20:32:00 mza kernel: klips_debug:pfkey_list_insert_socket: allocating 8 bytes for socketp=0pc2a41b60 Feb 1 20:32:00 mza kernel: klips_debug:pfkey_register_parse: SATYPE=09(IPIP) successfully registered by KMd (pid=15051). Feb 1 20:32:00 mza kernel: klips_debug:pfkey_register_reply: pfkey_supported_list[9]=0pc1370fc0 Feb 1 20:32:00 mza kernel: klips_debug:pfkey_register_reply: checking supported=0pc1370fc0 Feb 1 20:32:00 mza kernel: klips_debug:pfkey_register_reply: adding encrypt alg. Feb 1 20:32:00 mza kernel: klips_debug:pfkey_register_reply: allocating 8 bytes for enc algs. Feb 1 20:32:00 mza kernel: klips_debug:pfkey_register_reply: found satype=9(IPIP) exttype=15 id=1 ivlen=0 minbits=32 maxbits=32. Feb 1 20:32:00 mza kernel: klips_debug:pfkey_msg_hdr_build: Feb 1 20:32:00 mza kernel: klips_debug:pfkey_msg_hdr_build: on_entry &pfkey_ext=0pc258dd38 pfkey_ext=0pc258dd6c *pfkey_ext=0p00000000. Feb 1 20:32:00 mza kernel: klips_debug:pfkey_msg_hdr_build: on_exit &pfkey_ext=0pc258dd38 pfkey_ext=0pc258dd6c *pfkey_ext=0pcec8d6c0. Feb 1 20:32:00 mza kernel: klips_debug:pfkey_safe_build: error=0 Feb 1 20:32:00 mza kernel: klips_debug:pfkey_safe_build:success. Feb 1 20:32:00 mza kernel: klips_debug:pfkey_safe_build: error=0 Feb 1 20:32:00 mza kernel: klips_debug:pfkey_safe_build:success. Feb 1 20:32:00 mza kernel: klips_debug:pfkey_msg_build: pfkey_msg=0pcec8d1c0 allocated 32 bytes, &(extensions[0])=0pc258dd6c Feb 1 20:32:00 mza kernel: klips_debug:pfkey_msg_build: copying 16 bytes from extensions[15]=0pcec8d700 to=0pcec8d1d0 Feb 1 20:32:00 mza kernel: klips_debug:pfkey_msg_build: extensions permitted=0000c001, seen=00008001, required=00000001. Feb 1 20:32:00 mza kernel: klips_debug:pfkey_msg_parse: parsing message ver=2, type=7(register), errno=0, satype=9(IPIP), len=4, res=0, seq=4, pid=15051. Feb 1 20:32:00 mza kernel: klips_debug:pfkey_msg_parse: remain=2 ext_type=15(supported-cipher) ext_len=2 parsing ext 0pcec8d1d0 with parser pfkey_supported_parse. Feb 1 20:32:00 mza kernel: klips_debug:pfkey_msg_parse: extensions permitted=0000c001, seen=00008001, required=00000001. Feb 1 20:32:00 mza kernel: klips_debug:pfkey_upmsg: allocating 32 bytes... Feb 1 20:32:00 mza kernel: klips_debug:pfkey_upmsg: ...allocated at 0pcbc16d40. Feb 1 20:32:00 mza kernel: klips_debug:pfkey_register_reply: sending up register message for satype=9(IPIP) to socket=0pc2a41b60 succeeded. Feb 1 20:32:00 mza kernel: klips_debug:ipsec_sa_wipe: removing SA= (error)(0pcce25800), SAref=1654, table=0(0pd0000000), entry=1654 from the refTable. Feb 1 20:32:00 mza kernel: klips_debug:ipsec_sa_put: ipsec_sa SA: (error), ref:-1 reference count decremented. Feb 1 20:32:02 mza kernel: klips_debug:pfkey_sendmsg: . Feb 1 20:32:02 mza kernel: klips_debug:pfkey_sendmsg: allocating 184 bytes for downward message. Feb 1 20:32:02 mza kernel: klips_debug:pfkey_sendmsg: msg sent for parsing. Feb 1 20:32:02 mza kernel: klips_debug:pfkey_msg_interp: parsing message ver=2, type=14, errno=0, satype=11(INT), len=23, res=0, seq=5, pid=15051. Feb 1 20:32:02 mza kernel: klips_debug:ipsec_SAref_alloc: SAref requested... head=119, cont=1792, tail=255, listsize=256. Feb 1 20:32:02 mza kernel: klips_debug:ipsec_SAref_alloc: allocating SAref=1655, table=0, entry=1655 of 65536. Feb 1 20:32:02 mza kernel: klips_debug:ipsec_sa_alloc: allocated 500 bytes for ipsec_sa struct=0pcce25800 ref=1655. Feb 1 20:32:02 mza kernel: klips_debug:pfkey_msg_interp: allocated extr->ips=0pcce25800. Feb 1 20:32:02 mza kernel: klips_debug:pfkey_msg_interp: satype 11 lookups to proto=61. Feb 1 20:32:02 mza kernel: klips_debug:pfkey_msg_parse: parsing message ver=2, type=14(x-addflow(eroute)), errno=0, satype=11(INT), len=23, res=0, seq=5, pid=15051. Feb 1 20:32:02 mza kernel: klips_debug:pfkey_msg_parse: satype 11(INT) conversion to proto gives 61 for msg_type 14(x-addflow(eroute)). Feb 1 20:32:02 mza kernel: klips_debug:pfkey_msg_parse: remain=21 ext_type=1(security-association) ext_len=3 parsing ext 0pccdaa690 with parser pfkey_sa_parse. Feb 1 20:32:02 mza kernel: klips_debug:pfkey_sa_parse: successfully found len=3 exttype=1(security-association) spi=00000104 replay=0 state=0 auth=0 encrypt=0 flags=0 ref=-1. Feb 1 20:32:02 mza kernel: klips_debug:pfkey_msg_parse: remain=18 ext_type=5(source-address) ext_len=3 parsing ext 0pccdaa6a8 with parser pfkey_address_parse. Feb 1 20:32:02 mza kernel: klips_debug:pfkey_address_parse: found exttype=5(source-address) family=2(AF_INET) address=190.3.63.165 proto=0 port=0. Feb 1 20:32:02 mza kernel: klips_debug:pfkey_msg_parse: remain=15 ext_type=6(destination-address) ext_len=3 parsing ext 0pccdaa6c0 with parser pfkey_address_parse. Feb 1 20:32:02 mza kernel: klips_debug:pfkey_address_parse: found exttype=6(destination-address) family=2(AF_INET) address=0.0.0.0 proto=0 port=0. Feb 1 20:32:02 mza kernel: klips_debug:pfkey_msg_parse: remain=12 ext_type=21(X-source-flow-address) ext_len=3 parsing ext 0pccdaa6d8 with parser pfkey_address_parse. Feb 1 20:32:02 mza kernel: klips_debug:pfkey_address_parse: found exttype=21(X-source-flow-address) family=2(AF_INET) address=192.168.0.0 proto=0 port=0. Feb 1 20:32:02 mza kernel: klips_debug:pfkey_msg_parse: remain=9 ext_type=22(X-dest-flow-address) ext_len=3 parsing ext 0pccdaa6f0 with parser pfkey_address_parse. Feb 1 20:32:02 mza kernel: klips_debug:pfkey_address_parse: found exttype=22(X-dest-flow-address) family=2(AF_INET) address=192.168.1.0 proto=0 port=0. Feb 1 20:32:02 mza kernel: klips_debug:pfkey_msg_parse: remain=6 ext_type=23(X-source-mask) ext_len=3 parsing ext 0pccdaa708 with parser pfkey_address_parse. Feb 1 20:32:02 mza kernel: klips_debug:pfkey_address_parse: found exttype=23(X-source-mask) family=2(AF_INET) address=255.255.255.0 proto=0 port=0. Feb 1 20:32:02 mza kernel: klips_debug:pfkey_msg_parse: remain=3 ext_type=24(X-dest-mask) ext_len=3 parsing ext 0pccdaa720 with parser pfkey_address_parse. Feb 1 20:32:02 mza kernel: klips_debug:pfkey_address_parse: found exttype=24(X-dest-mask) family=2(AF_INET) address=255.255.255.0 proto=0 port=0. Feb 1 20:32:02 mza kernel: klips_debug:pfkey_msg_parse: extensions permitted=05e00c63, seen=01e00063, required=01e00043. Feb 1 20:32:02 mza kernel: klips_debug:pfkey_msg_interp: processing ext 1 0pccdaa690 with processor 0pc024bd40. Feb 1 20:32:02 mza kernel: klips_debug:pfkey_sa_process: . Feb 1 20:32:02 mza kernel: klips_debug:pfkey_msg_interp: processing ext 5 0pccdaa6a8 with processor 0pc024c090. Feb 1 20:32:02 mza kernel: klips_debug:pfkey_address_process: Feb 1 20:32:02 mza kernel: klips_debug:pfkey_address_process: found address family=2, AF_INET, 190.3.63.165. Feb 1 20:32:02 mza kernel: klips_debug:pfkey_address_process: found src address. Feb 1 20:32:02 mza kernel: klips_debug:pfkey_address_process: allocating 16 bytes for saddr. Feb 1 20:32:02 mza kernel: klips_debug:pfkey_address_process: successful. Feb 1 20:32:02 mza kernel: klips_debug:pfkey_msg_interp: processing ext 6 0pccdaa6c0 with processor 0pc024c090. Feb 1 20:32:02 mza kernel: klips_debug:pfkey_address_process: Feb 1 20:32:02 mza kernel: klips_debug:pfkey_address_process: found address family=2, AF_INET, 0.0.0.0. Feb 1 20:32:02 mza kernel: klips_debug:pfkey_address_process: found dst address. Feb 1 20:32:02 mza kernel: klips_debug:pfkey_address_process: allocating 16 bytes for saddr. Feb 1 20:32:02 mza kernel: klips_debug:pfkey_address_process: ips_said.dst set to 0.0.0.0. Feb 1 20:32:02 mza kernel: klips_debug:pfkey_address_process: successful. Feb 1 20:32:02 mza kernel: klips_debug:pfkey_msg_interp: processing ext 21 0pccdaa6d8 with processor 0pc024c090. Feb 1 20:32:02 mza kernel: klips_debug:pfkey_address_process: Feb 1 20:32:02 mza kernel: klips_debug:pfkey_address_process: found address family=2, AF_INET, 192.168.0.0. Feb 1 20:32:02 mza kernel: klips_debug:pfkey_address_process: found src flow address. Feb 1 20:32:02 mza kernel: klips_debug:pfkey_alloc_eroute: allocating 168 bytes for an eroute. Feb 1 20:32:02 mza kernel: klips_debug:pfkey_alloc_eroute: allocated eroute struct=0pc258de58. Feb 1 20:32:02 mza kernel: klips_debug:pfkey_address_parse: extr->eroute set to 192.168.0.0/0:0->0.0.0.0/0:0 Feb 1 20:32:02 mza kernel: klips_debug:pfkey_address_process: successful. Feb 1 20:32:02 mza kernel: klips_debug:pfkey_msg_interp: processing ext 22 0pccdaa6f0 with processor 0pc024c090. Feb 1 20:32:02 mza kernel: klips_debug:pfkey_address_process: Feb 1 20:32:02 mza kernel: klips_debug:pfkey_address_process: found address family=2, AF_INET, 192.168.1.0. Feb 1 20:32:02 mza kernel: klips_debug:pfkey_address_process: found dst flow address. Feb 1 20:32:02 mza kernel: klips_debug:pfkey_alloc_eroute: eroute struct already allocated Feb 1 20:32:02 mza kernel: klips_debug:pfkey_address_parse: extr->eroute set to 192.168.0.0/0:0->192.168.1.0/0:0 Feb 1 20:32:02 mza kernel: klips_debug:pfkey_address_process: successful. Feb 1 20:32:02 mza kernel: klips_debug:pfkey_msg_interp: processing ext 23 0pccdaa708 with processor 0pc024c090. Feb 1 20:32:02 mza kernel: klips_debug:pfkey_address_process: Feb 1 20:32:02 mza kernel: klips_debug:pfkey_address_process: found address family=2, AF_INET, 255.255.255.0. Feb 1 20:32:02 mza kernel: klips_debug:pfkey_address_process: found src mask address. Feb 1 20:32:02 mza kernel: klips_debug:pfkey_alloc_eroute: eroute struct already allocated Feb 1 20:32:02 mza kernel: klips_debug:pfkey_address_parse: extr->eroute set to 192.168.0.0/24:0->192.168.1.0/0:0 Feb 1 20:32:02 mza kernel: klips_debug:pfkey_address_process: successful. Feb 1 20:32:02 mza kernel: klips_debug:pfkey_msg_interp: processing ext 24 0pccdaa720 with processor 0pc024c090. Feb 1 20:32:02 mza kernel: klips_debug:pfkey_address_process: Feb 1 20:32:02 mza kernel: klips_debug:pfkey_address_process: found address family=2, AF_INET, 255.255.255.0. Feb 1 20:32:02 mza kernel: klips_debug:pfkey_address_process: found dst mask address. Feb 1 20:32:02 mza kernel: klips_debug:pfkey_alloc_eroute: eroute struct already allocated Feb 1 20:32:02 mza kernel: klips_debug:pfkey_address_parse: extr->eroute set to 192.168.0.0/24:0->192.168.1.0/24:0 Feb 1 20:32:02 mza kernel: klips_debug:pfkey_address_process: successful. Feb 1 20:32:02 mza kernel: klips_debug:pfkey_msg_interp: parsing message type 14(x-addflow(eroute)) with msg_parser 0pc0249a60. Feb 1 20:32:02 mza kernel: klips_debug:pfkey_x_addflow_parse: . Feb 1 20:32:02 mza kernel: klips_debug:pfkey_x_addflow_parse: calling breakeroute and/or makeroute for 192.168.0.0/24->192.168.1.0/24 Feb 1 20:32:02 mza kernel: klips_debug:pfkey_x_addflow_parse: calling makeroute. Feb 1 20:32:02 mza kernel: klips_debug:ipsec_makeroute: attempting to allocate 168 bytes to insert eroute for 192.168.0.0/24:0->192.168.1.0/24:0 0, SA: %%trap, PID:15051, skb=0p00000000, ident:NULL->NULL Feb 1 20:32:02 mza kernel: klips_debug:ipsec_makeroute: succeeded, I think... Feb 1 20:32:02 mza kernel: klips_debug:pfkey_x_addflow_parse: makeroute call successful. Feb 1 20:32:02 mza kernel: klips_debug:pfkey_msg_hdr_build: Feb 1 20:32:02 mza kernel: klips_debug:pfkey_msg_hdr_build: on_entry &pfkey_ext=0pc258dc28 pfkey_ext=0pc258dd10 *pfkey_ext=0p00000000. Feb 1 20:32:02 mza kernel: klips_debug:pfkey_msg_hdr_build: on_exit &pfkey_ext=0pc258dc28 pfkey_ext=0pc258dd10 *pfkey_ext=0pcec8d1c0. Feb 1 20:32:02 mza kernel: klips_debug:pfkey_safe_build: error=0 Feb 1 20:32:02 mza kernel: klips_debug:pfkey_safe_build:success. Feb 1 20:32:02 mza kernel: klips_debug:pfkey_sa_build: spi=00000104 replay=0 sa_state=0 auth=0 encrypt=0 flags=0 Feb 1 20:32:02 mza kernel: klips_debug:pfkey_safe_build: error=0 Feb 1 20:32:02 mza kernel: klips_debug:pfkey_safe_build:success. Feb 1 20:32:02 mza kernel: klips_debug:pfkey_address_build: exttype=5 proto=0 prefixlen=0 Feb 1 20:32:02 mza kernel: klips_debug:pfkey_address_build: found address family AF_INET. Feb 1 20:32:02 mza kernel: klips_debug:pfkey_address_build: found address=190.3.63.165:0. Feb 1 20:32:02 mza kernel: klips_debug:pfkey_address_build: successful. Feb 1 20:32:02 mza kernel: klips_debug:pfkey_safe_build: error=0 Feb 1 20:32:02 mza kernel: klips_debug:pfkey_safe_build:success. Feb 1 20:32:02 mza kernel: klips_debug:pfkey_address_build: exttype=6 proto=0 prefixlen=0 Feb 1 20:32:02 mza kernel: klips_debug:pfkey_address_build: found address family AF_INET. Feb 1 20:32:02 mza kernel: klips_debug:pfkey_address_build: found address=0.0.0.0:0. Feb 1 20:32:02 mza kernel: klips_debug:pfkey_address_build: successful. Feb 1 20:32:02 mza kernel: klips_debug:pfkey_safe_build: error=0 Feb 1 20:32:02 mza kernel: klips_debug:pfkey_safe_build:success. Feb 1 20:32:02 mza kernel: klips_debug:pfkey_address_build: exttype=21 proto=0 prefixlen=0 Feb 1 20:32:02 mza kernel: klips_debug:pfkey_address_build: found address family AF_INET. Feb 1 20:32:02 mza kernel: klips_debug:pfkey_address_build: found address=192.168.0.0:0. Feb 1 20:32:02 mza kernel: klips_debug:pfkey_address_build: successful. Feb 1 20:32:02 mza kernel: klips_debug:pfkey_safe_build: error=0 Feb 1 20:32:02 mza kernel: klips_debug:pfkey_safe_build:success. Feb 1 20:32:02 mza kernel: klips_debug:pfkey_address_build: exttype=22 proto=0 prefixlen=0 Feb 1 20:32:02 mza kernel: klips_debug:pfkey_address_build: found address family AF_INET. Feb 1 20:32:02 mza kernel: klips_debug:pfkey_address_build: found address=192.168.1.0:0. Feb 1 20:32:02 mza kernel: klips_debug:pfkey_address_build: successful. Feb 1 20:32:02 mza kernel: klips_debug:pfkey_safe_build: error=0 Feb 1 20:32:02 mza kernel: klips_debug:pfkey_safe_build:success. Feb 1 20:32:02 mza kernel: klips_debug:pfkey_address_build: exttype=23 proto=0 prefixlen=0 Feb 1 20:32:02 mza kernel: klips_debug:pfkey_address_build: found address family AF_INET. Feb 1 20:32:02 mza kernel: klips_debug:pfkey_address_build: found address=255.255.255.0:0. Feb 1 20:32:02 mza kernel: klips_debug:pfkey_address_build: successful. Feb 1 20:32:02 mza kernel: klips_debug:pfkey_safe_build: error=0 Feb 1 20:32:02 mza kernel: klips_debug:pfkey_safe_build:success. Feb 1 20:32:02 mza kernel: klips_debug:pfkey_address_build: exttype=24 proto=0 prefixlen=0 Feb 1 20:32:02 mza kernel: klips_debug:pfkey_address_build: found address family AF_INET. Feb 1 20:32:02 mza kernel: klips_debug:pfkey_address_build: found address=255.255.255.0:0. Feb 1 20:32:02 mza kernel: klips_debug:pfkey_address_build: successful. Feb 1 20:32:02 mza kernel: klips_debug:pfkey_safe_build: error=0 Feb 1 20:32:02 mza kernel: klips_debug:pfkey_safe_build:success. Feb 1 20:32:02 mza kernel: klips_debug:pfkey_msg_build: pfkey_msg=0pc28e92c0 allocated 184 bytes, &(extensions[0])=0pc258dd10 Feb 1 20:32:02 mza kernel: klips_debug:pfkey_msg_build: copying 24 bytes from extensions[1]=0pcec8da80 to=0pc28e92d0 Feb 1 20:32:02 mza kernel: klips_debug:pfkey_msg_build: copying 24 bytes from extensions[5]=0pcba0cf80 to=0pc28e92e8 Feb 1 20:32:02 mza kernel: klips_debug:pfkey_msg_build: copying 24 bytes from extensions[6]=0pc295b700 to=0pc28e9300 Feb 1 20:32:02 mza kernel: klips_debug:pfkey_msg_build: copying 24 bytes from extensions[21]=0pc295bc80 to=0pc28e9318 Feb 1 20:32:02 mza kernel: klips_debug:pfkey_msg_build: copying 24 bytes from extensions[22]=0pc295bb80 to=0pc28e9330 Feb 1 20:32:02 mza kernel: klips_debug:pfkey_msg_build: copying 24 bytes from extensions[23]=0pc295bc40 to=0pc28e9348 Feb 1 20:32:02 mza kernel: klips_debug:pfkey_msg_build: copying 24 bytes from extensions[24]=0pc295bd80 to=0pc28e9360 Feb 1 20:32:02 mza kernel: klips_debug:pfkey_msg_build: extensions permitted=05e00063, seen=01e00063, required=01e00043. Feb 1 20:32:02 mza kernel: klips_debug:pfkey_msg_parse: parsing message ver=2, type=14(x-addflow(eroute)), errno=0, satype=11(INT), len=23, res=0, seq=5, pid=15051. Feb 1 20:32:02 mza kernel: klips_debug:pfkey_msg_parse: satype 11(INT) conversion to proto gives 61 for msg_type 14(x-addflow(eroute)). Feb 1 20:32:02 mza kernel: klips_debug:pfkey_msg_parse: remain=21 ext_type=1(security-association) ext_len=3 parsing ext 0pc28e92d0 with parser pfkey_sa_parse. Feb 1 20:32:02 mza kernel: klips_debug:pfkey_sa_parse: successfully found len=3 exttype=1(security-association) spi=00000104 replay=0 state=0 auth=0 encrypt=0 flags=0 ref=1655. Feb 1 20:32:02 mza kernel: klips_debug:pfkey_msg_parse: remain=18 ext_type=5(source-address) ext_len=3 parsing ext 0pc28e92e8 with parser pfkey_address_parse. Feb 1 20:32:02 mza kernel: klips_debug:pfkey_address_parse: found exttype=5(source-address) family=2(AF_INET) address=190.3.63.165 proto=0 port=0. Feb 1 20:32:02 mza kernel: klips_debug:pfkey_msg_parse: remain=15 ext_type=6(destination-address) ext_len=3 parsing ext 0pc28e9300 with parser pfkey_address_parse. Feb 1 20:32:02 mza kernel: klips_debug:pfkey_address_parse: found exttype=6(destination-address) family=2(AF_INET) address=0.0.0.0 proto=0 port=0. Feb 1 20:32:02 mza kernel: klips_debug:pfkey_msg_parse: remain=12 ext_type=21(X-source-flow-address) ext_len=3 parsing ext 0pc28e9318 with parser pfkey_address_parse. Feb 1 20:32:02 mza kernel: klips_debug:pfkey_address_parse: found exttype=21(X-source-flow-address) family=2(AF_INET) address=192.168.0.0 proto=0 port=0. Feb 1 20:32:02 mza kernel: klips_debug:pfkey_msg_parse: remain=9 ext_type=22(X-dest-flow-address) ext_len=3 parsing ext 0pc28e9330 with parser pfkey_address_parse. Feb 1 20:32:02 mza kernel: klips_debug:pfkey_address_parse: found exttype=22(X-dest-flow-address) family=2(AF_INET) address=192.168.1.0 proto=0 port=0. Feb 1 20:32:02 mza kernel: klips_debug:pfkey_msg_parse: remain=6 ext_type=23(X-source-mask) ext_len=3 parsing ext 0pc28e9348 with parser pfkey_address_parse. Feb 1 20:32:02 mza kernel: klips_debug:pfkey_address_parse: found exttype=23(X-source-mask) family=2(AF_INET) address=255.255.255.0 proto=0 port=0. Feb 1 20:32:02 mza kernel: klips_debug:pfkey_msg_parse: remain=3 ext_type=24(X-dest-mask) ext_len=3 parsing ext 0pc28e9360 with parser pfkey_address_parse. Feb 1 20:32:02 mza kernel: klips_debug:pfkey_address_parse: found exttype=24(X-dest-mask) family=2(AF_INET) address=255.255.255.0 proto=0 port=0. Feb 1 20:32:02 mza kernel: klips_debug:pfkey_msg_parse: extensions permitted=05e00063, seen=01e00063, required=01e00043. Feb 1 20:32:02 mza kernel: klips_debug:pfkey_upmsg: allocating 184 bytes... Feb 1 20:32:02 mza kernel: klips_debug:pfkey_upmsg: ...allocated at 0pcbc16d40. Feb 1 20:32:02 mza kernel: klips_debug:pfkey_x_addflow_parse: sending up x_addflow reply message for satype=11(INT) (proto=61) to socket=0pc2a41b60 succeeded. Feb 1 20:32:02 mza kernel: klips_debug:pfkey_x_addflow_parse: extr->ips cleaned up and freed. Feb 1 20:32:02 mza kernel: klips_debug:ipsec_sa_wipe: removing SA=%%trap(0pcce25800), SAref=1655, table=0(0pd0000000), entry=1655 from the refTable. Feb 1 20:32:02 mza kernel: klips_debug:ipsec_sa_put: ipsec_sa SA:%%trap, ref:-1 reference count decremented. Feb 1 20:32:05 mza ipsec__plutorun: 104 "mzabsas" #1: STATE_MAIN_I1: initiate Feb 1 20:32:05 mza ipsec__plutorun: ...could not start conn "mzabsas" Feb 1 20:32:14 mza kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 Feb 1 20:32:14 mza kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0. Feb 1 20:32:14 mza kernel: klips_debug: IP: ihl:20 ver:4 tos:0 tlen:104 id:26591 frag_off:0 ttl:60 proto:50 chk:59037 saddr:200.123.105.195 daddr:190.3.63.165 Feb 1 20:32:14 mza kernel: klips_debug:ipsec_rcv_decap_once: decap (50) from 200.123.105.195 -> 190.3.63.165 Feb 1 20:32:14 mza kernel: klips_debug:ipsec_sa_getbyid: linked entry in ipsec_sa table for hash=154 of SA:esp0x2d289485@190.3.63.165 requested. Feb 1 20:32:14 mza kernel: klips_debug:ipsec_sa_getbyid: no entries in ipsec_sa table for hash=154 of SA:esp0x2d289485@190.3.63.165. Feb 1 20:32:14 mza kernel: klips_debug:ipsec_rcv: no ipsec_sa for SA:esp0x2d289485@190.3.63.165: incoming packet with no SA dropped Feb 1 20:32:14 mza kernel: klips_debug:ipsec_rcv: decap_once failed: -7 Feb 1 20:32:14 mza kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 Feb 1 20:32:14 mza kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0. Feb 1 20:32:14 mza kernel: klips_debug: IP: ihl:20 ver:4 tos:0 tlen:104 id:26592 frag_off:0 ttl:60 proto:50 chk:59036 saddr:200.123.105.195 daddr:190.3.63.165 Feb 1 20:32:14 mza kernel: klips_debug:ipsec_rcv_decap_once: decap (50) from 200.123.105.195 -> 190.3.63.165 Feb 1 20:32:14 mza kernel: klips_debug:ipsec_sa_getbyid: linked entry in ipsec_sa table for hash=154 of SA:esp0x2d289485@190.3.63.165 requested. Feb 1 20:32:14 mza kernel: klips_debug:ipsec_sa_getbyid: no entries in ipsec_sa table for hash=154 of SA:esp0x2d289485@190.3.63.165. Feb 1 20:32:14 mza kernel: klips_debug:ipsec_rcv: no ipsec_sa for SA:esp0x2d289485@190.3.63.165: incoming packet with no SA dropped Feb 1 20:32:14 mza kernel: klips_debug:ipsec_rcv: decap_once failed: -7 Feb 1 20:32:17 mza kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 Feb 1 20:32:17 mza kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0. Feb 1 20:32:17 mza kernel: klips_debug: IP: ihl:20 ver:4 tos:0 tlen:104 id:26593 frag_off:0 ttl:60 proto:50 chk:59035 saddr:200.123.105.195 daddr:190.3.63.165 Feb 1 20:32:17 mza kernel: klips_debug:ipsec_rcv_decap_once: decap (50) from 200.123.105.195 -> 190.3.63.165 Feb 1 20:32:17 mza kernel: klips_debug:ipsec_sa_getbyid: linked entry in ipsec_sa table for hash=154 of SA:esp0x2d289485@190.3.63.165 requested. Feb 1 20:32:17 mza kernel: klips_debug:ipsec_sa_getbyid: no entries in ipsec_sa table for hash=154 of SA:esp0x2d289485@190.3.63.165. Feb 1 20:32:17 mza kernel: klips_debug:ipsec_rcv: no ipsec_sa for SA:esp0x2d289485@190.3.63.165: incoming packet with no SA dropped Feb 1 20:32:17 mza kernel: klips_debug:ipsec_rcv: decap_once failed: -7 Feb 1 20:32:17 mza kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 Feb 1 20:32:17 mza kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0. Feb 1 20:32:17 mza kernel: klips_debug: IP: ihl:20 ver:4 tos:0 tlen:104 id:26594 frag_off:0 ttl:60 proto:50 chk:59034 saddr:200.123.105.195 daddr:190.3.63.165 Feb 1 20:32:17 mza kernel: klips_debug:ipsec_rcv_decap_once: decap (50) from 200.123.105.195 -> 190.3.63.165 Feb 1 20:32:17 mza kernel: klips_debug:ipsec_sa_getbyid: linked entry in ipsec_sa table for hash=154 of SA:esp0x2d289485@190.3.63.165 requested. Feb 1 20:32:17 mza kernel: klips_debug:ipsec_sa_getbyid: no entries in ipsec_sa table for hash=154 of SA:esp0x2d289485@190.3.63.165. Feb 1 20:32:17 mza kernel: klips_debug:ipsec_rcv: no ipsec_sa for SA:esp0x2d289485@190.3.63.165: incoming packet with no SA dropped Feb 1 20:32:17 mza kernel: klips_debug:ipsec_rcv: decap_once failed: -7 Feb 1 20:32:23 mza kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 Feb 1 20:32:23 mza kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0. Feb 1 20:32:23 mza kernel: klips_debug: IP: ihl:20 ver:4 tos:0 tlen:104 id:26595 frag_off:0 ttl:60 proto:50 chk:59033 saddr:200.123.105.195 daddr:190.3.63.165 Feb 1 20:32:23 mza kernel: klips_debug:ipsec_rcv_decap_once: decap (50) from 200.123.105.195 -> 190.3.63.165 Feb 1 20:32:23 mza kernel: klips_debug:ipsec_sa_getbyid: linked entry in ipsec_sa table for hash=154 of SA:esp0x2d289485@190.3.63.165 requested. Feb 1 20:32:23 mza kernel: klips_debug:ipsec_sa_getbyid: no entries in ipsec_sa table for hash=154 of SA:esp0x2d289485@190.3.63.165. Feb 1 20:32:23 mza kernel: klips_debug:ipsec_rcv: no ipsec_sa for SA:esp0x2d289485@190.3.63.165: incoming packet with no SA dropped Feb 1 20:32:23 mza kernel: klips_debug:ipsec_rcv: decap_once failed: -7 Feb 1 20:32:23 mza kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 Feb 1 20:32:23 mza kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0. Feb 1 20:32:24 mza kernel: klips_debug: IP: ihl:20 ver:4 tos:0 tlen:104 id:26596 frag_off:0 ttl:60 proto:50 chk:59032 saddr:200.123.105.195 daddr:190.3.63.165 Feb 1 20:32:24 mza kernel: klips_debug:ipsec_rcv_decap_once: decap (50) from 200.123.105.195 -> 190.3.63.165 Feb 1 20:32:24 mza kernel: klips_debug:ipsec_sa_getbyid: linked entry in ipsec_sa table for hash=154 of SA:esp0x2d289485@190.3.63.165 requested. Feb 1 20:32:24 mza kernel: klips_debug:ipsec_sa_getbyid: no entries in ipsec_sa table for hash=154 of SA:esp0x2d289485@190.3.63.165. Feb 1 20:32:24 mza kernel: klips_debug:ipsec_rcv: no ipsec_sa for SA:esp0x2d289485@190.3.63.165: incoming packet with no SA dropped Feb 1 20:32:24 mza kernel: klips_debug:ipsec_rcv: decap_once failed: -7 Feb 1 20:32:31 mza kernel: klips_debug:pfkey_sendmsg: . Feb 1 20:32:31 mza kernel: klips_debug:pfkey_sendmsg: allocating 88 bytes for downward message. Feb 1 20:32:31 mza kernel: klips_debug:pfkey_sendmsg: msg sent for parsing. Feb 1 20:32:31 mza kernel: klips_debug:pfkey_msg_interp: parsing message ver=2, type=3, errno=0, satype=9(IPIP), len=11, res=0, seq=6, pid=15051. Feb 1 20:32:31 mza kernel: klips_debug:ipsec_SAref_alloc: SAref requested... head=120, cont=1792, tail=255, listsize=256. Feb 1 20:32:31 mza kernel: klips_debug:ipsec_SAref_alloc: allocating SAref=1656, table=0, entry=1656 of 65536. Feb 1 20:32:31 mza kernel: klips_debug:ipsec_sa_alloc: allocated 500 bytes for ipsec_sa struct=0pcce25800 ref=1656. Feb 1 20:32:31 mza kernel: klips_debug:pfkey_msg_interp: allocated extr->ips=0pcce25800. Feb 1 20:32:31 mza kernel: klips_debug:pfkey_msg_interp: satype 9 lookups to proto=4. Feb 1 20:32:31 mza kernel: klips_debug:pfkey_msg_parse: parsing message ver=2, type=3(add), errno=0, satype=9(IPIP), len=11, res=0, seq=6, pid=15051. Feb 1 20:32:31 mza kernel: klips_debug:pfkey_msg_parse: satype 9(IPIP) conversion to proto gives 4 for msg_type 3(add). Feb 1 20:32:31 mza kernel: klips_debug:pfkey_msg_parse: remain=9 ext_type=1(security-association) ext_len=3 parsing ext 0pcef199d0 with parser pfkey_sa_parse. Feb 1 20:32:31 mza kernel: klips_debug:pfkey_sa_parse: successfully found len=3 exttype=1(security-association) spi=00001001 replay=0 state=1 auth=0 encrypt=0 flags=0 ref=-1. Feb 1 20:32:31 mza kernel: klips_debug:pfkey_msg_parse: remain=6 ext_type=5(source-address) ext_len=3 parsing ext 0pcef199e8 with parser pfkey_address_parse. Feb 1 20:32:31 mza kernel: klips_debug:pfkey_address_parse: found exttype=5(source-address) family=2(AF_INET) address=200.123.105.195 proto=0 port=0. Feb 1 20:32:31 mza kernel: klips_debug:pfkey_msg_parse: remain=3 ext_type=6(destination-address) ext_len=3 parsing ext 0pcef19a00 with parser pfkey_address_parse. Feb 1 20:32:31 mza kernel: klips_debug:pfkey_address_parse: found exttype=6(destination-address) family=2(AF_INET) address=190.3.63.165 proto=0 port=0. Feb 1 20:32:31 mza kernel: klips_debug:pfkey_msg_parse: extensions permitted=78001ffb, seen=00000063, required=00000063. Feb 1 20:32:31 mza kernel: klips_debug:pfkey_msg_interp: processing ext 1 0pcef199d0 with processor 0pc024bd40. Feb 1 20:32:31 mza kernel: klips_debug:pfkey_sa_process: . Feb 1 20:32:31 mza kernel: klips_debug:pfkey_msg_interp: processing ext 5 0pcef199e8 with processor 0pc024c090. Feb 1 20:32:31 mza kernel: klips_debug:pfkey_address_process: Feb 1 20:32:31 mza kernel: klips_debug:pfkey_address_process: found address family=2, AF_INET, 200.123.105.195. Feb 1 20:32:31 mza kernel: klips_debug:pfkey_address_process: found src address. Feb 1 20:32:31 mza kernel: klips_debug:pfkey_address_process: allocating 16 bytes for saddr. Feb 1 20:32:32 mza kernel: klips_debug:pfkey_address_process: successful. Feb 1 20:32:32 mza kernel: klips_debug:pfkey_msg_interp: processing ext 6 0pcef19a00 with processor 0pc024c090. Feb 1 20:32:32 mza kernel: klips_debug:pfkey_address_process: Feb 1 20:32:32 mza kernel: klips_debug:pfkey_address_process: found address family=2, AF_INET, 190.3.63.165. Feb 1 20:32:32 mza kernel: klips_debug:pfkey_address_process: found dst address. Feb 1 20:32:32 mza kernel: klips_debug:pfkey_address_process: allocating 16 bytes for saddr. Feb 1 20:32:32 mza kernel: klips_debug:pfkey_address_process: ips_said.dst set to 190.3.63.165. Feb 1 20:32:32 mza kernel: klips_debug:pfkey_address_process: successful. Feb 1 20:32:32 mza kernel: klips_debug:pfkey_msg_interp: parsing message type 3(add) with msg_parser 0pc0247610. Feb 1 20:32:32 mza kernel: klips_debug:pfkey_add_parse: . Feb 1 20:32:32 mza kernel: klips_debug:ipsec_sa_getbyid: linked entry in ipsec_sa table for hash=104 of SA:tun0x1001@190.3.63.165 requested. Feb 1 20:32:32 mza kernel: klips_debug:ipsec_sa_getbyid: no entries in ipsec_sa table for hash=104 of SA:tun0x1001@190.3.63.165. Feb 1 20:32:32 mza kernel: klips_debug:pfkey_add_parse: existing ipsec_sa not found (this is good) for SAtun0x1001@190.3.63.165, in-bound, allocating. Feb 1 20:32:32 mza kernel: klips_debug:pfkey_ipsec_sa_init: (pfkey defined) called for SA:tun0x1001@190.3.63.165 Feb 1 20:32:32 mza kernel: klips_debug:pfkey_ipsec_sa_init: calling init routine of IPIP Feb 1 20:32:32 mza kernel: klips_debug:pfkey_ipsec_sa_init: (pfkey defined) IPIP ipsec_sa set for 200.123.105.195->190.3.63.165. Feb 1 20:32:32 mza kernel: klips_debug:pfkey_msg_hdr_build: Feb 1 20:32:32 mza kernel: klips_debug:pfkey_msg_hdr_build: on_entry &pfkey_ext=0pc258dd28 pfkey_ext=0pc258dd60 *pfkey_ext=0p00000000. Feb 1 20:32:32 mza kernel: klips_debug:pfkey_msg_hdr_build: on_exit &pfkey_ext=0pc258dd28 pfkey_ext=0pc258dd60 *pfkey_ext=0pcec8d700. Feb 1 20:32:32 mza kernel: klips_debug:pfkey_safe_build: error=0 Feb 1 20:32:32 mza kernel: klips_debug:pfkey_safe_build:success. Feb 1 20:32:32 mza kernel: klips_debug:pfkey_sa_build: spi=00001001 replay=0 sa_state=1 auth=0 encrypt=0 flags=1 Feb 1 20:32:32 mza kernel: klips_debug:pfkey_safe_build: error=0 Feb 1 20:32:32 mza kernel: klips_debug:pfkey_safe_build:success. Feb 1 20:32:32 mza kernel: klips_debug:pfkey_address_build: exttype=5 proto=0 prefixlen=0 Feb 1 20:32:32 mza kernel: <6permitted=05e00063, seen=01e00063, required=01e00043. Feb 1 20:32:32 mza kernel: klips_debug:pfkey_upmsg: allocating 184 bytes... Feb 1 20:32:32 mza kernel: klips_debug:pfkey_upmsg: ...allocated at 0pcd175600. Feb 1 20:32:32 mza kernel: klips_debug:pfkey_x_addflow_parse: sending up x_addflow reply message for satype=9(IPIP) (proto=4) to socket=0pc2a41b60 succeeded. Feb 1 20:32:32 mza kernel: klips_debug:pfkey_x_addflow_parse: extr->ips cleaned up and freed. Feb 1 20:32:32 mza kernel: klips_debug:ipsec_sa_wipe: removing SA=tun0x1001@190.3.63.165(0pcce25400), SAref=1658, table=0(0pd0000000), entry=1658 from the refTable. Feb 1 20:32:32 mza kernel: klips_debug:ipsec_sa_put: ipsec_sa SA:tun0x1001@190.3.63.165, ref:-1 reference count decremented. Feb 1 20:32:33 mza kernel: klips_debug:pfkey_sendmsg: . Feb 1 20:32:33 mza kernel: klips_debug:pfkey_sendmsg: allocating 120 bytes for downward message. Feb 1 20:32:33 mza kernel: klips_debug:pfkey_sendmsg: msg sent for parsing. Feb 1 20:32:33 mza kernel: klips_debug:pfkey_msg_interp: parsing message ver=2, type=13, errno=0, satype=9(IPIP), len=15, res=0, seq=9, pid=15051. Feb 1 20:32:33 mza kernel: klips_debug:ipsec_SAref_alloc: SAref requested... head=123, cont=1792, tail=255, listsize=256. Feb 1 20:32:33 mza kernel: klips_debug:ipsec_SAref_alloc: allocating SAref=1659, table=0, entry=1659 of 65536. Feb 1 20:32:33 mza kernel: klips_debug:ipsec_sa_alloc: allocated 500 bytes for ipsec_sa struct=0pcce25400 ref=1659. Feb 1 20:32:33 mza kernel: klips_debug:pfkey_msg_interp: allocated extr->ips=0pcce25400. Feb 1 20:32:33 mza kernel: klips_debug:pfkey_msg_interp: satype 9 lookups to proto=4. Feb 1 20:32:33 mza kernel: klips_debug:pfkey_msg_parse: parsing message ver=2, type=13(x-groupsa), errno=0, satype=9(IPIP), len=15, res=0, seq=9, pid=15051. Feb 1 20:32:33 mza kernel: klips_debug:pfkey_msg_parse: satype 9(IPIP) conversion to proto gives 4 for msg_type 13(x-groupsa). Feb 1 20:32:33 mza kernel: klips_debug:pfkey_msg_parse: remain=13 ext_type=1(security-association) ext_len=3 parsing ext 0pcef19e50 with parser pfkey_sa_parse. Feb 1 20:32:33 mza kernel: klips_debug:pfkey_sa_parse: successfully found len=3 exttype=1(security-association) spi=00001001 replay=0 state=0 auth=0 encrypt=0 flags=0 ref=-1. Feb 1 20:32:33 mza kernel: klips_debug:pfkey_msg_parse: remain=10 ext_type=6(destination-address) ext_len=3 parsing ext 0pcef19e68 with parser pfkey_address_parse. Feb 1 20:32:33 mza kernel: klips_debug:pfkey_address_parse: found exttype=6(destination-address) family=2(AF_INET) address=190.3.63.165 proto=0 port=0. Feb 1 20:32:33 mza kernel: klips_debug:pfkey_msg_parse: remain=7 ext_type=18(X-satype2) ext_len=1 parsing ext 0pcef19e80 with parser pfkey_x_satype_parse. Feb 1 20:32:33 mza kernel: klips_debug:pfkey_x_satype_parse: len=1 ext=18(X-satype2) satype=3(ESP) res=0,0,0. Feb 1 20:32:33 mza kernel: klips_debug:pfkey_msg_parse: remain=6 ext_type=19(X-security-association) ext_len=3 parsing ext 0pcef19e88 with parser pfkey_sa_parse. Feb 1 20:32:33 mza kernel: klips_debug:pfkey_sa_parse: successfully found len=3 exttype=19(X-security-association) spi=2fab2d90 replay=0 state=0 auth=0 encrypt=0 flags=0 ref=-1. Feb 1 20:32:33 mza kernel: klips_debug:pfkey_msg_parse: remain=3 ext_type=20(X-destination-address2) ext_len=3 parsing ext 0pcef19ea0 with parser pfkey_address_parse. Feb 1 20:32:33 mza kernel: klips_debug:pfkey_address_parse: found exttype=20(X-destination-address2) family=2(AF_INET) address=190.3.63.165 proto=0 port=0. Feb 1 20:32:33 mza kernel: klips_debug:pfkey_msg_parse: extensions permitted=001c0043, seen=001c0043, required=00000043. Feb 1 20:32:33 mza kernel: klips_debug:pfkey_msg_interp: processing ext 1 0pcef19e50 with processor 0pc024bd40. Feb 1 20:32:33 mza kernel: klips_debug:pfkey_sa_process: . Feb 1 20:32:33 mza kernel: klips_debug:pfkey_msg_interp: processing ext 6 0pcef19e68 with processor 0pc024c090. Feb 1 20:32:33 mza kernel: klips_debug:pfkey_address_process: Feb 1 20:32:33 mza kernel: klips_debug:pfkey_address_process: found address family=2, AF_INET, 190.3.63.165. Feb 1 20:32:33 mza kernel: klips_debug:pfkey_address_process: found dst address. Feb 1 20:32:34 mza kernel: klips_debug:pfkey_address_process: allocating 16 bytes for saddr. Feb 1 20:32:34 mza kernel: klips_debug:pfkey_address_process: ips_said.dst set to 190.3.63.165. Feb 1 20:32:34 mza kernel: klips_debug:pfkey_address_process: successful. Feb 1 20:32:34 mza kernel: klips_debug:pfkey_msg_interp: processing ext 18 0pcef19e80 with processor 0pc024cb10. Feb 1 20:32:34 mza kernel: klips_debug:pfkey_x_satype_process: . Feb 1 20:32:34 mza kernel: klips_debug:ipsec_SAref_alloc: SAref requested... head=124, cont=1792, tail=255, listsize=256. Feb 1 20:32:34 mza kernel: klips_debug:ipsec_SAref_alloc: allocating SAref=1660, table=0, entry=1660 of 65536. Feb 1 20:32:34 mza kernel: klips_debug:ipsec_sa_alloc: allocated 500 bytes for ipsec_sa struct=0pcce25200 ref=1660. Feb 1 20:32:34 mza kernel: klips_debug:pfkey_x_satype_process: protocol==50 decoded from satype==3(ESP). Feb 1 20:32:34 mza kernel: klips_debug:pfkey_msg_interp: processing ext 19 0pcef19e88ttype=20 proto=0 prefixlen=0 Feb 1 20:32:34 mza kernel: klips_debug:pfkey_address_build: found address family AF_INET. Feb 1 20:32:34 mza kernel: klips_debug:pfkey_address_build: found address=200.123.105.195:0. Feb 1 20:32:34 mza kernel: klips_debug:pfkey_address_build: successful. Feb 1 20:32:34 mza kernel: klips_debug:pfkey_safe_build: error=0 Feb 1 20:32:34 mza kernel: klips_debug:pfkey_safe_build:success. Feb 1 20:32:34 mza kernel: klips_debug:pfkey_msg_build: pfkey_msg=0pcef19e40 allocated 120 bytes, &(extensions[0])=0pc258dd90 Feb 1 20:32:34 mza kernel: klips_debug:pfkey_msg_build: copying 24 bytes from extensions[1]=0pc295b680 to=0pcef19e50 Feb 1 20:32:34 mza kernel: klips_debug:pfkey_msg_build: copying 24 bytes from extensions[6]=0pc295bcc0 to=0pcef19e68 Feb 1 20:32:34 mza ipsec__plutorun: /usr/lib/ipsec/_plutorun: line 1: 15051 Segmentation fault /usr/lib/ipsec/pluto --nofork --secretsfile /etc/ipsec.secrets --policygroupsdir /etc/ipsec.d/policies --debug-all --uniqueids Feb 1 20:32:34 mza kernel: klips_debug:pfkey_msg_build: copying 8 bytes from extensions[18]=0pc295b800 to=0pcef19e80 Feb 1 20:32:34 mza ipsec__plutorun: !pluto failure!: exited with error status 139 (signal 11) Feb 1 20:32:34 mza kernel: klips_debug:pfkey_msg_build: copying 24 bytes from extensions[19]=0pc295b240 to=0pcef19e88 Feb 1 20:32:34 mza ipsec__plutorun: restarting IPsec after pause... Feb 1 20:32:34 mza kernel: klips_debug:pfkey_msg_build: copying 24 bytes from extensions[20]=0pc295b9c0 to=0pcef19ea0 Feb 1 20:32:34 mza kernel: klips_debug:pfkey_msg_build: extensions permitted=001c0043, seen=001c0043, required=00000043. Feb 1 20:32:34 mza kernel: klips_debug:pfkey_msg_parse: parsing message ver=2, type=13(x-groupsa), errno=0, satype=9(IPIP), len=15, res=0, seq=12, pid=15051. Feb 1 20:32:34 mza kernel: klips_debug:pfkey_msg_parse: satype 9(IPIP) conversion to proto gives 4 for msg_type 13(x-groupsa). Feb 1 20:32:34 mza kernel: klips_debug:pfkey_msg_parse: remain=13 ext_type=1(security-association) ext_len=3 parsing ext 0pcef19e50 with parser pfkey_sa_parse. Feb 1 20:32:34 mza kernel: klips_debug:pfkey_sa_parse: successfully found len=3 exttype=1(security-association) spi=00001002 replay=0 state=0 auth=0 encrypt=0 flags=0 ref=1663. Feb 1 20:32:34 mza kernel: klips_debug:pfkey_msg_parse: remain=10 ext_type=6(destination-address) ext_len=3 parsing ext 0pcef19e68 with parser pfkey_address_parse. Feb 1 20:32:34 mza kernel: klips_debug:pfkey_address_parse: found exttype=6(destination-address) family=2(AF_INET) address=200.123.105.195 proto=0 port=0. Feb 1 20:32:34 mza kernel: klips_debug:pfkey_msg_parse: remain=7 ext_type=18(X-satype2) ext_len=1 parsing ext 0pcef19e80 with parser pfkey_x_satype_parse. Feb 1 20:32:34 mza kernel: klips_debug:pfkey_x_satype_parse: len=1 ext=18(X-satype2) satype=3(ESP) res=0,0,0. Feb 1 20:32:34 mza kernel: klips_debug:pfkey_msg_parse: remain=6 ext_type=19(X-security-association) ext_len=3 parsing ext 0pcef19e88 with parser pfkey_sa_parse. Feb 1 20:32:34 mza kernel: klips_debug:pfkey_sa_parse: successfully found len=3 exttype=19(X-security-association) spi=5d6ab523 replay=0 state=0 auth=0 encrypt=0 flags=0 ref=1664. Feb 1 20:32:34 mza kernel: klips_debug:pfkey_msg_parse: remain=3 ext_type=20(X-destination-address2) ext_len=3 parsing ext 0pcef19ea0 with parser pfkey_address_parse. Feb 1 20:32:34 mza kernel: klips_debug:pfkey_address_parse: found exttype=20(X-destination-address2) family=2(AF_INET) address=200.123.105.195 proto=0 port=0. Feb 1 20:32:34 mza kernel: klips_debug:pfkey_msg_parse: extensions permitted=001c0043, seen=001c0043, required=00000043. Feb 1 20:32:34 mza kernel: klips_debug:pfkey_upmsg: allocating 120 bytes... Feb 1 20:32:34 mza kernel: klips_debug:pfkey_upmsg: ...allocated at 0pcf12f3c0. Feb 1 20:32:34 mza kernel: klips_debug:pfkey_x_grpsa_parse: sending up x_grpsa reply message for satype=9(IPIP) to socket=0pc2a41b60 succeeded. Feb 1 20:32:34 mza kernel: klips_debug:pfkey_x_grpsa_parse: succeeded in sending x_grpsa reply message. Feb 1 20:32:34 mza kernel: klips_debug:ipsec_sa_wipe: removing SA=tun0x1002@200.123.105.195(0pcf0b0000), SAref=1663, table=0(0pd0000000), entry=1663 from the refTable. Feb 1 20:32:34 mza kernel: klips_debug:ipsec_sa_put: ipsec_sa SA:tun0x1002@200.123.105.195, ref:-1 reference count decremented. Feb 1 20:32:34 mza kernel: klips_debug:ipsec_sa_wipe: removing SA=esp0x5d6ab523@200.123.105.195(0pcf0b0200), SAref=1664, table=0(0pd0000000), entry=1664 from the refTable. Feb 1 20:32:34 mza kernel: klips_debug:ipsec_sa_put: ipsec_sa SA:esp0x5d6ab523@200.123.105.195, ref:-1 reference count decremented. Feb 1 20:32:34 mza kernel: klips_debug:pfkey_sendmsg: . Feb 1 20:32:34 mza kernel: klips_debug:pfkey_sendmsg: allocating 184 bytes for downward message. Feb 1 20:32:34 mza kernel: klips_debug:pfkey_sendmsg: msg sent for parsing. Feb 1 20:32:34 mza kernel: klips_debug:pfkey_msg_interp: parsing message ver=2, type=14, errno=0, satype=9(IPIP), len=23, res=0, seq=13, pid=15051. Feb 1 20:32:34 mza kernel: klips_debug:ipsec_SAref_alloc: SAref requested... head=129, cont=1792, tail=255, listsize=256. Feb 1 20:32:34 mza kernel: klips_debug:ipsec_SAref_alloc: allocating SAref=1665, table=0, entry=1665 of 65536. Feb 1 20:32:34 mza kernel: klips_debug:ipsec_sa_alloc: allocated 500 bytes for ipsec_sa struct=0pcf0b0200 ref=1665. Feb 1 20:32:34 mza kernel: klips_debug:pfkey_msg_interp: allocated extr->ips=0pcf0b0200. Feb 1 20:32:34 mza kernel: klips_debug:pfkey_msg_interp: satype 9 lookups to proto=4. Feb 1 20:32:34 mza kernel: klips_debug:pfkey_msg_parse: parsing message ver=2, type=14(x-addflow(eroute)), errno=0, satype=9(IPIP), len=23, res=0, seq=13, pid=15051. Feb 1 20:32:34 mza kernel: klips_debug:pfkey_msg_parse: satype 9(IPIP) conversion to proto gives 4 for msg_type 14(x-addflow(eroute)). Feb 1 20:32:34 mza kernel: klips_debug:pfkey_msg_parse: remain=21 ext_type=1(security-association) ext_len=3 parsing ext 0pc28e94d0 with parser pfkey_sa_parse. Feb 1 20:32:34 mza kernel: klips_debug:pfkey_sa_parse: successfully found len=3 exttype=1(security-association) spi=00001002 replay=0 state=0 auth=0 encrypt=0 flags=2 ref=-1. Feb 1 20:32:34 mza kernel: klips_debug:pfkey_msg_parse: remain=18 ext_type=5(source-address) ext_len=3 parsing ext 0pc28e94e8 with parser pfkey_address_parse. Feb 1 20:32:34 mza kernel: klips_debug:pfkey_address_parse: found exttype=5(source-address) family=2(AF_INET) address=190.3.63.165 proto=0 port=0. Feb 1 20:32:34 mza kernel: klips_debug:pfkey_msg_parse: remain=15 ext_type=6(destination-address) ext_len=3 parsing ext 0pc28e9500 with parser pfkey_address_parse. Feb 1 20:32:34 mza kernel: klips_debug:pfkey_address_parse: found exttype=6(destination-address) family=2(AF_INET) address=200.123.105.195 proto=0 port=0. Feb 1 20:32:34 mza kernel: klips_debug:pfkey_msg_parse: remain=12 ext_type=21(X-source-flow-address) ext_len=3 parsing ext 0pc28e9518 with parser pfkey_address_parse. Feb 1 20:32:34 mza kernel: klips_debug:pfkey_address_parse: found exttype=21(X-source-flow-address) family=2(AF_INET) address=192.168.0.0 proto=0 port=0. Feb 1 20:32:34 mza kernel: klips_debug:pfkey_msg_parse: remain=9 ext_type=22(X-dest-flow-address) ext_len=3 parsing ext 0pc28e9530 with parser pfkey_address_parse. Feb 1 20:32:34 mza kernel: klips_debug:pfkey_address_parse: found exttype=22(X-dest-flow-address) family=2(AF_INET) address=192.168.1.0 proto=0 port=0. Feb 1 20:32:34 mza kernel: klips_debug:pfkey_msg_parse: remain=6 ext_type=23(X-source-mask) ext_len=3 parsing ext 0pc28e9548 with parser pfkey_address_parse. Feb 1 20:32:34 mza kernel: klips_debug:pfkey_address_parse: found exttype=23(X-source-mask) family=2(AF_INET) address=255.255.255.0 proto=0 port=0. Feb 1 20:32:34 mza kernel: klips_debug:pfkey_msg_parse: remain=3 ext_type=24(X-dest-mask) ext_len=3 parsing ext 0pc28e9560 with parser pfkey_address_parse. Feb 1 20:32:34 mza kernel: klips_debug:pfkey_address_parse: found exttype=24(X-dest-mask) family=2(AF_INET) address=255.255.255.0 proto=0 port=0. Feb 1 20:32:34 mza kernel: klips_debug:pfkey_msg_parse: extensions permitted=05e00c63, seen=01e00063, required=01e00043. Feb 1 20:32:34 mza kernel: klips_debug:pfkey_msg_interp: processing ext 1 0pc28e94d0 with processor 0pc024bd40. Feb 1 20:32:34 mza kernel: klips_debug:pfkey_sa_process: . Feb 1 20:32:34 mza kernel: klips_debug:pfkey_msg_interp: processing ext 5 0pc28e94e8 with processor 0pc024c090. Feb 1 20:32:34 mza kernel: klips_debug:pfkey_address_process: Feb 1 20:32:34 mza kernel: klips_debug:pfkey_address_process: found address family=2, AF_INET, 190.3.63.165. Feb 1 20:32:34 mza kernel: klips_debug:pfkey_address_process: found src address. Feb 1 20:32:34 mza kernel: klips_debug:pfkey_address_process: allocating 16 bytes for saddr. Feb 1 20:32:34 mza kernel: klips_debug:pfkey_address_process: successful. Feb 1 20:32:34 mza kernel: klips_debug:pfkey_msg_interp: processing ext 6 0pc28e9500 with processor 0pc024c090. Feb 1 20:32:34 mza kernel: klips_debug:pfkey_address_process: Feb 1 20:32:34 mza kernel: klips_debug:pfkey_address_process: found address family=2, AF_INET, 200.123.105.195. Feb 1 20:32:34 mza kernel: klips_debug:pfkey_address_process: found dst address. Feb 1 20:32:34 mza kernel: klips_debug:pfkey_address_process: allocating 16 bytes for saddr. Feb 1 20:32:34 mza kernel: klips_debug:pfkey_address_process: ips_said.dst set to 200.123.105.195. Feb 1 20:32:34 mza kernel: klips_debug:pfkey_address_process: successful. Feb 1 20:32:34 mza kernel: klips_debug:pfkey_msg_interp: processing ext 21 0pc28e9518 with processor 0pc024c090. Feb 1 20:32:34 mza kernel: klips_debug:pfkey_address_process: Feb 1 20:32:34 mza kernel: klips_debug:pfkey_address_process: found address family=2, AF_INET, 192.168.0.0. Feb 1 20:32:34 mza kernel: klips_debug:pfkey_address_process: found src flow address. Feb 1 20:32:34 mza kernel: klips_debug:pfkey_alloc_eroute: allocating 168 bytes for an eroute. Feb 1 20:32:34 mza kernel: klips_debug:pfkey_alloc_eroute: allocated eroute struct=0pc258de58. Feb 1 20:32:34 mza kernel: klips_debug:pfkey_address_parse: extr->eroute set to 192.168.0.0/0:0->0.0.0.0/0:0 Feb 1 20:32:34 mza kernel: klips_debug:pfkey_address_process: successful. Feb 1 20:32:34 mza kernel: klips_debug:pfkey_msg_interp: processing ext 22 0pc28e9530 with processor 0pc024c090. Feb 1 20:32:34 mza kernel: klips_debug:pfkey_address_process: Feb 1 20:32:34 mza kernel: klips_debug:pfkey_address_process: found address family=2, AF_INET, 192.168.1.0. Feb 1 20:32:34 mza kernel: klips_debug:pfkey_address_process: found dst flow address. Feb 1 20:32:34 mza kernel: klips_debug:pfkey_alloc_eroute: eroute struct already allocated Feb 1 20:32:34 mza kernel: klips_debug:pfkey_address_parse: extr->eroute set to 192.168.0.0/0:0->192.168.1.0/0:0 Feb 1 20:32:34 mza kernel: klips_debug:pfkey_address_process: successful. Feb 1 20:32:34 mza kernel: klips_debug:pfkey_msg_interp: processing ext 23 0pc28e9548 with processor 0pc024c090. Feb 1 20:32:34 mza kernel: klips_debug:pfkey_address_process: Feb 1 20:32:34 mza kernel: klips_debug:pfkey_address_process: found address family=2, AF_INET, 255.255.255.0. Feb 1 20:32:34 mza kernel: klips_debug:pfkey_address_process: found src mask address. Feb 1 20:32:34 mza kernel: klips_debug:pfkey_alloc_eroute: eroute struct already allocated Feb 1 20:32:34 mza kernel: klips_debug:pfkey_address_parse: extr->eroute set to 192.168.0.0/24:0->192.168.1.0/0:0 Feb 1 20:32:34 mza kernel: klips_debug:pfkey_address_process: successful. Feb 1 20:32:34 mza kernel: klips_debug:pfkey_msg_interp: processing ext 24 0pc28e9560 with processor 0pc024c090. Feb 1 20:32:34 mza kernel: klips_debug:pfkey_address_process: Feb 1 20:32:34 mza kernel: klips_debug:pfkey_address_process: found address family=2, AF_INET, 255.255.255.0. Feb 1 20:32:34 mza kernel: klips_debug:pfkey_address_process: found dst mask address. Feb 1 20:32:34 mza kernel: klips_debug:pfkey_alloc_eroute: eroute struct already allocated Feb 1 20:32:34 mza kernel: klips_debug:pfkey_address_parse: extr->eroute set to 192.168.0.0/24:0->192.168.1.0/24:0 Feb 1 20:32:34 mza kernel: klips_debug:pfkey_address_process: successful. Feb 1 20:32:34 mza kernel: klips_debug:pfkey_msg_interp: parsing message type 14(x-addflow(eroute)) with msg_parser 0pc0249a60. Feb 1 20:32:34 mza kernel: klips_debug:pfkey_x_addflow_parse: . Feb 1 20:32:34 mza kernel: klips_debug:pfkey_x_addflow_parse: calling breakeroute and/or makeroute for 192.168.0.0/24->192.168.1.0/24 Feb 1 20:32:34 mza kernel: klips_debug:pfkey_x_addflow_parse: REPLACEFLOW flag set, calling breakeroute. Feb 1 20:32:34 mza kernel: klips_debug:ipsec_breakroute: attempting to delete eroute for 192.168.0.0/24:0->192.168.1.0/24:0 0 Feb 1 20:32:34 mza kernel: klips_debug:ipsec_breakroute: deleted eroute=0pc28e91c0, ident=0p00000000->0p00000000, first=0p00000000, last=0p00000000 Feb 1 20:32:34 mza kernel: klips_debug:pfkey_x_addflow_parse: calling makeroute. Feb 1 20:32:34 mza kernel: klips_debug:ipsec_makeroute: attempting to allocate 168 bytes to insert eroute for 192.168.0.0/24:0->192.168.1.0/24:0 0, SA: tun0x1002@200.123.105.195, PID:15051, skb=0p00000000, ident:NULL->NULL Feb 1 20:32:34 mza kernel: klips_debug:ipsec_makeroute: succeeded, I think... Feb 1 20:32:34 mza kernel: klips_debug:pfkey_x_addflow_parse: makeroute call successful. Feb 1 20:32:34 mza kernel: klips_debug:pfkey_msg_hdr_build: Feb 1 20:32:34 mza kernel: klips_debug:pfkey_msg_hdr_build: on_entry &pfkey_ext=0pc258dc28 pfkey_ext=0pc258dd10 *pfkey_ext=0p00000000. Feb 1 20:32:34 mza kernel: klips_debug:pfkey_msg_hdr_build: on_exit &pfkey_ext=0pc258dc28 pfkey_ext=0pc258dd10 *pfkey_ext=0pc295b9c0. Feb 1 20:32:34 mza kernel: klips_debug:pfkey_safe_build: error=0 Feb 1 20:32:34 mza kernel: klips_debug:pfkey_safe_build:success. Feb 1 20:32:34 mza kernel: klips_debug:pfkey_sa_build: spi=00001002 replay=0 sa_state=0 auth=0 encrypt=0 flags=2 Feb 1 20:32:34 mza kernel: klips_debug:pfkey_safe_build: error=0 Feb 1 20:32:34 mza kernel: klips_debug:pfkey_safe_build:success. Feb 1 20:32:34 mza kernel: klips_debug:pfkey_address_build: exttype=5 proto=0 prefixlen=0 Feb 1 20:32:34 mza kernel: klips_debug:pfkey_address_build: found address family AF_INET. Feb 1 20:32:34 mza kernel: klips_debug:pfkey_address_build: found address=190.3.63.165:0. Feb 1 20:32:34 mza kernel: klips_debug:pfkey_address_build: successful. Feb 1 20:32:34 mza kernel: klips_debug:pfkey_safe_build: error=0 Feb 1 20:32:34 mza kernel: klips_debug:pfkey_safe_build:success. Feb 1 20:32:34 mza kernel: klips_debug:pfkey_address_build: exttype=6 proto=0 prefixlen=0 Feb 1 20:32:34 mza kernel: klips_debug:pfkey_address_build: found address family AF_INET. Feb 1 20:32:34 mza kernel: klips_debug:pfkey_address_build: found address=200.123.105.195:0. Feb 1 20:32:34 mza kernel: klips_debug:pfkey_address_build: successful. Feb 1 20:32:34 mza kernel: klips_debug:pfkey_safe_build: error=0 Feb 1 20:32:34 mza kernel: klips_debug:pfkey_safe_build:success. Feb 1 20:32:34 mza kernel: klips_debug:pfkey_address_build: exttype=21 proto=0 prefixlen=0 Feb 1 20:32:34 mza kernel: klips_debug:pfkey_address_build: found address family AF_INET. Feb 1 20:32:34 mza kernel: klips_debug:pfkey_address_build: found address=192.168.0.0:0. Feb 1 20:32:34 mza kernel: klips_debug:pfkey_address_build: successful. Feb 1 20:32:34 mza kernel: klips_debug:pfkey_safe_build: error=0 Feb 1 20:32:34 mza kernel: klips_debug:pfkey_safe_build:success. Feb 1 20:32:34 mza kernel: klips_debug:pfkey_address_build: exttype=22 proto=0 prefixlen=0 Feb 1 20:32:34 mza kernel: klips_debug:pfkey_address_build: found address family AF_INET. Feb 1 20:32:34 mza kernel: klips_debug:pfkey_address_build: found address=192.168.1.0:0. Feb 1 20:32:34 mza kernel: klips_debug:pfkey_address_build: successful. Feb 1 20:32:34 mza kernel: klips_debug:pfkey_safe_build: error=0 Feb 1 20:32:34 mza kernel: klips_debug:pfkey_safe_build:success. Feb 1 20:32:34 mza kernel: klips_debug:pfkey_address_build: exttype=23 proto=0 prefixlen=0 Feb 1 20:32:34 mza kernel: klips_debug:pfkey_address_build: found address family AF_INET. Feb 1 20:32:34 mza kernel: klips_debug:pfkey_address_build: found address=255.255.255.0:0. Feb 1 20:32:34 mza kernel: klips_debug:pfkey_address_build: successful. Feb 1 20:32:34 mza kernel: klips_debug:pfkey_safe_build: error=0 Feb 1 20:32:34 mza kernel: klips_debug:pfkey_safe_build:success. Feb 1 20:32:34 mza kernel: klips_debug:pfkey_address_build: exttype=24 proto=0 prefixlen=0 Feb 1 20:32:34 mza kernel: klips_debug:pfkey_address_build: found address family AF_INET. Feb 1 20:32:34 mza kernel: klips_debug:pfkey_address_build: found address=255.255.255.0:0. Feb 1 20:32:34 mza kernel: klips_debug:pfkey_address_build: successful. Feb 1 20:32:34 mza kernel: klips_debug:pfkey_safe_build: error=0 Feb 1 20:32:34 mza kernel: klips_debug:pfkey_safe_build:success. Feb 1 20:32:34 mza kernel: klips_debug:pfkey_msg_build: pfkey_msg=0pc28e95c0 allocated 184 bytes, &(extensions[0])=0pc258dd10 Feb 1 20:32:34 mza kernel: klips_debug:pfkey_msg_build: copying 24 bytes from extensions[1]=0pc295b240 to=0pc28e95d0 Feb 1 20:32:34 mza kernel: klips_debug:pfkey_msg_build: copying 24 bytes from extensions[5]=0pc295b800 to=0pc28e95e8 Feb 1 20:32:34 mza kernel: klips_debug:pfkey_msg_build: copying 24 bytes from extensions[6]=0pc295bcc0 to=0pc28e9600 Feb 1 20:32:34 mza kernel: klips_debug:pfkey_msg_build: copying 24 bytes from extensions[21]=0pc295b680 to=0pc28e9618 Feb 1 20:32:34 mza kernel: klips_debug:pfkey_msg_build: copying 24 bytes from extensions[22]=0pc295b840 to=0pc28e9630 Feb 1 20:32:34 mza kernel: klips_debug:pfkey_msg_build: copying 24 bytes from extensions[23]=0pc295be00 to=0pc28e9648 Feb 1 20:32:34 mza kernel: klips_debug:pfkey_msg_build: copying 24 bytes from extensions[24]=0pc295be40 to=0pc28e9660 Feb 1 20:32:34 mza kernel: klips_debug:pfkey_msg_build: extensions permitted=05e00063, seen=01e00063, required=01e00043. Feb 1 20:32:34 mza kernel: klips_debug:pfkey_msg_parse: parsing message ver=2, type=14(x-addflow(eroute)), errno=0, satype=9(IPIP), len=23, res=0, seq=13, pid=15051. Feb 1 20:32:34 mza kernel: klips_debug:pfkey_msg_parse: satype 9(IPIP) conversion to proto gives 4 for msg_type 14(x-addflow(eroute)). Feb 1 20:32:34 mza kernel: klips_debug:pfkey_msg_parse: remain=21 ext_type=1(security-association) ext_len=3 parsing ext 0pc28e95d0 with parser pfkey_sa_parse. Feb 1 20:32:34 mza kernel: klips_debug:pfkey_sa_parse: successfully found len=3 exttype=1(security-association) spi=00001002 replay=0 state=0 auth=0 encrypt=0 flags=2 ref=1665. Feb 1 20:32:34 mza kernel: klips_debug:pfkey_msg_parse: remain=18 ext_type=5(source-address) ext_len=3 parsing ext 0pc28e95e8 with parser pfkey_address_parse. Feb 1 20:32:34 mza kernel: klips_debug:pfkey_address_parse: found exttype=5(source-address) family=2(AF_INET) address=190.3.63.165 proto=0 port=0. Feb 1 20:32:34 mza kernel: klips_debug:pfkey_msg_parse: remain=15 ext_type=6(destination-address) ext_len=3 parsing ext 0pc28e9600 with parser pfkey_address_parse. Feb 1 20:32:34 mza kernel: klips_debug:pfkey_address_parse: found exttype=6(destination-address) family=2(AF_INET) address=200.123.105.195 proto=0 port=0. Feb 1 20:32:34 mza kernel: klips_debug:pfkey_msg_parse: remain=12 ext_type=21(X-source-flow-address) ext_len=3 parsing ext 0pc28e9618 with parser pfkey_address_parse. Feb 1 20:32:34 mza kernel: klips_debug:pfkey_address_parse: found exttype=21(X-source-flow-address) family=2(AF_INET) address=192.168.0.0 proto=0 port=0. Feb 1 20:32:34 mza kernel: klips_debug:pfkey_msg_parse: remain=9 ext_type=22(X-dest-flow-address) ext_len=3 parsing ext 0pc28e9630 with parser pfkey_address_parse. Feb 1 20:32:34 mza kernel: klips_debug:pfkey_address_parse: found exttype=22(X-dest-flow-address) family=2(AF_INET) address=192.168.1.0 proto=0 port=0. Feb 1 20:32:34 mza kernel: klips_debug:pfkey_msg_parse: remain=6 ext_type=23(X-source-mask) ext_len=3 parsing ext 0pc28e9648 with parser pfkey_address_parse. Feb 1 20:32:34 mza kernel: klips_debug:pfkey_address_parse: found exttype=23(X-source-mask) family=2(AF_INET) address=255.255.255.0 proto=0 port=0. Feb 1 20:32:34 mza kernel: klips_debug:pfkey_msg_parse: remain=3 ext_type=24(X-dest-mask) ext_len=3 parsing ext 0pc28e9660 with parser pfkey_address_parse. Feb 1 20:32:34 mza kernel: klips_debug:pfkey_address_parse: found exttype=24(X-dest-mask) family=2(AF_INET) address=255.255.255.0 proto=0 port=0. Feb 1 20:32:34 mza kernel: klips_debug:pfkey_msg_parse: extensions permitted=05e00063, seen=01e00063, required=01e00043. Feb 1 20:32:34 mza kernel: klips_debug:pfkey_upmsg: allocating 184 bytes... Feb 1 20:32:34 mza kernel: klips_debug:pfkey_upmsg: ...allocated at 0pcd175780. Feb 1 20:32:34 mza kernel: klips_debug:pfkey_x_addflow_parse: sending up x_addflow reply message for satype=9(IPIP) (proto=4) to socket=0pc2a41b60 succeeded. Feb 1 20:32:34 mza kernel: klips_debug:pfkey_x_addflow_parse: extr->ips cleaned up and freed. Feb 1 20:32:34 mza kernel: klips_debug:ipsec_sa_wipe: removing SA=tun0x1002@200.123.105.195(0pcf0b0200), SAref=1665, table=0(0pd0000000), entry=1665 from the refTable. Feb 1 20:32:34 mza kernel: klips_debug:ipsec_sa_put: ipsec_sa SA:tun0x1002@200.123.105.195, ref:-1 reference count decremented. Feb 1 20:32:34 mza kernel: klips_debug:pfkey_release: sock=0pc2a41b60 sk=0pc253e800 Feb 1 20:32:34 mza kernel: klips_debug:pfkey_destroy_socket: . Feb 1 20:32:34 mza kernel: klips_debug:pfkey_remove_socket: . Feb 1 20:32:34 mza kernel: klips_debug:pfkey_remove_socket: succeeded. Feb 1 20:32:34 mza kernel: klips_debug:pfkey_destroy_socket: pfkey_remove_socket called. Feb 1 20:32:34 mza kernel: klips_debug:pfkey_destroy_socket: sk(0pc253e800)->(&0pc253e848)receive_queue.{next=0pc253e848,prev=0pc253e848}. Feb 1 20:32:34 mza kernel: klips_debug:pfkey_destroy_socket: destroyed. Feb 1 20:32:34 mza kernel: klips_debug:pfkey_list_remove_socket: removing sock=0pc2a41b60 Feb 1 20:32:34 mza last message repeated 12 times Feb 1 20:32:34 mza kernel: klips_debug:pfkey_release: succeeded. Feb 1 20:32:44 mza ipsec_setup: Stopping FreeS/WAN IPsec... Feb 1 20:32:44 mza ipsec_setup: Removing orphaned /var/run/pluto.pid: Feb 1 20:32:44 mza kernel: klips_debug:ipsec_device_event: NETDEV_GOING_DOWN dev=ipsec0 Feb 1 20:32:44 mza kernel: klips_debug:ipsec_device_event: NETDEV_DOWN dev=ipsec0 flags=80 Feb 1 20:32:44 mza kernel: IPSEC EVENT: KLIPS device ipsec0 shut down. Feb 1 20:32:44 mza kernel: klips_debug:ipsec_tunnel_ioctl: tncfg service call #35313 for dev=ipsec0 Feb 1 20:32:44 mza kernel: klips_debug:ipsec_tunnel_ioctl: calling ipsec_tunnel_detatch. Feb 1 20:32:44 mza kernel: klips_debug:ipsec_tunnel_detach: physical device eth0 being detached from virtual device ipsec0 Feb 1 20:32:44 mza kernel: klips_debug:pfkey_create: sock=0pcbcff7a0 type:3 state:1 flags:0 protocol:2 Feb 1 20:32:44 mza kernel: klips_debug:pfkey_create: sock->fasync_list=0p00000000 sk->sleep=0pcbcff7bc. Feb 1 20:32:44 mza kernel: klips_debug:pfkey_insert_socket: sk=0pc253eb80 Feb 1 20:32:44 mza kernel: klips_debug:pfkey_list_insert_socket: allocating 8 bytes for socketp=0pcbcff7a0 Feb 1 20:32:44 mza kernel: klips_debug:pfkey_create: Socket sock=0pcbcff7a0 sk=0pc253eb80 initialised. Feb 1 20:32:44 mza kernel: klips_debug:pfkey_sendmsg: . Feb 1 20:32:44 mza kernel: klips_debug:pfkey_sendmsg: allocating 72 bytes for downward message. Feb 1 20:32:44 mza kernel: klips_debug:pfkey_sendmsg: msg sent for parsing. Feb 1 20:32:44 mza kernel: klips_debug:pfkey_msg_interp: parsing message ver=2, type=16, errno=0, satype=0(UNKNOWN), len=9, res=0, seq=1, pid=15152. Feb 1 20:32:44 mza kernel: klips_debug:ipsec_SAref_alloc: SAref requested... head=130, cont=1792, tail=255, listsize=256. Feb 1 20:32:44 mza kernel: klips_debug:ipsec_SAref_alloc: allocating SAref=1666, table=0, entry=1666 of 65536. Feb 1 20:32:44 mza kernel: klips_debug:ipsec_sa_alloc: allocated 500 bytes for ipsec_sa struct=0pcf0b0200 ref=1666. Feb 1 20:32:44 mza kernel: klips_debug:pfkey_msg_interp: allocated extr->ips=0pcf0b0200. Feb 1 20:32:44 mza kernel: klips_debug:pfkey_msg_parse: parsing message ver=2, type=16(x-debug), errno=0, satype=0(UNKNOWN), len=9, res=0, seq=1, pid=15152. Feb 1 20:32:44 mza kernel: klips_debug:pfkey_msg_parse: remain=7 ext_type=25(X-set-debug) ext_len=7 parsing ext 0pcef196d0 with parser pfkey_x_ext_debug_parse. Feb 1 20:32:44 mza kernel: klips_debug:pfkey_msg_parse: extensions permitted=02000001, seen=02000001, required=02000001. Feb 1 20:32:44 mza kernel: klips_debug:pfkey_msg_interp: processing ext 25 0pcef196d0 with processor 0pc024cdd0. Feb 1 20:32:44 mza kernel: klips_debug:pfkey_x_debug_process: . Feb 1 20:32:44 mza kernel: klips_debug:pfkey_x_debug_process: unset Feb 1 20:32:44 mza kernel: Feb 1 20:32:44 mza ipsec_setup: ...FreeS/WAN IPsec stopped Feb 1 20:32:44 mza ipsec_setup: Restarting FreeS/WAN IPsec 2.04... Feb 1 20:32:44 mza ipsec_setup: KLIPS debug `all' Feb 1 20:32:44 mza kernel: klips_debug:pfkey_x_debug_process: set Feb 1 20:32:44 mza kernel: klips_debug:pfkey_msg_interp: parsing message type 16(x-debug) with msg_parser 0pc024aaa0. Feb 1 20:32:44 mza kernel: klips_debug:pfkey_x_msg_debug_parse: . Feb 1 20:32:44 mza kernel: klips_debug:ipsec_sa_wipe: removing SA= (error)(0pcce25800), SAref=1669, table=0(0pd0000000), entry=1669 from the refTable. Feb 1 20:32:44 mza kernel: klips_debug:ipsec_sa_put: ipsec_sa SA: (error), ref:-1 reference count decremented. Feb 1 20:32:44 mza kernel: klips_debug:pfkey_release: sock=0pc28331e0 sk=0pc253eb80 Feb 1 20:32:44 mza kernel: klips_debug:pfkey_destroy_socket: . Feb 1 20:32:44 mza kernel: klips_debug:pfkey_remove_socket: . Feb 1 20:32:44 mza kernel: klips_debug:pfkey_remove_socket: succeeded. Feb 1 20:32:44 mza kernel: klips_debug:pfkey_destroy_socket: pfkey_remove_socket called. Feb 1 20:32:44 mza kernel: klips_debug:pfkey_destroy_socket: sk(0pc253eb80)->(&0pc253ebc8)receive_queue.{next=0pc253ebc8,prev=0pc253ebc8}. Feb 1 20:32:44 mza kernel: klips_debug:pfkey_destroy_socket: destroyed. Feb 1 20:32:44 mza kernel: klips_debug:pfkey_list_remove_socket: removing sock=0pc28331e0 Feb 1 20:32:44 mza last message repeated 12 times Feb 1 20:32:44 mza kernel: klips_debug:pfkey_release: succeeded. Feb 1 20:32:44 mza kernel: klips_debug:pfkey_create: sock=0pc28331e0 type:3 state:1 flags:0 protocol:2 Feb 1 20:32:44 mza kernel: klips_debug:pfkey_create: sock->fasync_list=0p00000000 sk->sleep=0pc28331fc. Feb 1 20:32:44 mza kernel: klips_debug:pfkey_insert_socket: sk=0pc253eb80 Feb 1 20:32:44 mza kernel: klips_debug:pfkey_list_insert_socket: allocating 8 bytes for socketp=0pc28331e0 Feb 1 20:32:44 mza kernel: klips_debug:pfkey_create: Socket sock=0pc28331e0 sk=0pc253eb80 initialised. Feb 1 20:32:44 mza kernel: klips_debug:pfkey_sendmsg: . Feb 1 20:32:44 mza kernel: klips_debug:pfkey_sendmsg: allocating 40 bytes for downward message. Feb 1 20:32:44 mza kernel: klips_debug:pfkey_sendmsg: msg sent for parsing. Feb 1 20:32:44 mza kernel: klips_debug:pfkey_msg_interp: parsing message ver=2, type=15, errno=0, satype=0(UNKNOWN), len=5, res=0, seq=1, pid=15193. Feb 1 20:32:44 mza kernel: klips_debug:ipsec_SAref_alloc: SAref requested... head=134, cont=1792, tail=255, listsize=256. Feb 1 20:32:44 mza kernel: klips_debug:ipsec_SAref_alloc: allocating SAref=1670, table=0, entry=1670 of 65536. Feb 1 20:32:44 mza kernel: klips_debug:ipsec_sa_alloc: allocated 500 bytes for ipsec_sa struct=0pcce25800 ref=1670. Feb 1 20:32:44 mza kernel: klips_debug:pfkey_msg_interp: allocated extr->ips=0pcce25800. Feb 1 20:32:44 mza kernel: klips_debug:pfkey_msg_parse: parsing message ver=2, type=15(x-delflow(eroute)), errno=0, satype=0(UNKNOWN), len=5, res=0, seq=1, pid=15193. Feb 1 20:32:44 mza kernel: klips_debug:pfkey_msg_parse: remain=3 ext_type=1(security-association) ext_len=3 parsing ext 0pcef5b710 with parser pfkey_sa_parse. Feb 1 20:32:44 mza kernel: klips_debug:pfkey_sa_parse: successfully found len=3 exttype=1(security-association) spi=6d2e6172 replay=0 state=0 auth=0 encrypt=0 flags=4 ref=-1. Feb 1 20:32:44 mza kernel: klips_debug:pfkey_msg_parse: extensions permitted=05e00c03, seen=00000003, required=00000001. Feb 1 20:32:44 mza kernel: klips_debug:pfkey_msg_interp: processing ext 1 0pcef5b710 with processor 0pc024bd40. Feb 1 20:32:44 mza kernel: klips_debug:pfkey_sa_process: . Feb 1 20:32:44 mza kernel: klips_debug:pfkey_msg_interp: parsing message type 15(x-delflow(eroute)) with msg_parser 0pc024a4b0. Feb 1 20:32:44 mza kernel: klips_debug:pfkey_x_delflow_parse: . Feb 1 20:32:44 mza kernel: klips_debug:pfkey_x_delflow_parse: CLEARFLOW flag set, calling cleareroutes. Feb 1 20:32:44 mza kernel: klips_debug:rj_walktree: for: rn=0pc133b1e8 rj_b=-3 rj_flags=6 leaf key = 00000000->00000000 Feb 1 20:32:44 mza kernel: klips_debug:rj_walktree: processing leaves, rn=0pc133b218 rj_b=-3 rj_flags=6 leaf key = ffffffff->ffffffff Feb 1 20:32:44 mza kernel: klips_debug:rj_walktree: while: base=0p00000000 rn=0pc133b1e8 rj_b=-3 rj_flags=6 leaf key = 00000000->00000000 Feb 1 20:32:44 mza kernel: klips_debug:ipsec_sa_wipe: removing SA= (error)(0pcce25800), SAref=1670, table=0(0pd0000000), entry=1670 from the refTable. Feb 1 20:32:44 mza kernel: klips_debug:ipsec_sa_put: ipsec_sa SA: (error), ref:-1 reference count decremented. Feb 1 20:32:44 mza kernel: klips_debug:pfkey_release: sock=0pc28331e0 sk=0pc253eb80 Feb 1 20:32:44 mza kernel: klips_debug:pfkey_destroy_socket: . Feb 1 20:32:44 mza kernel: klips_debug:pfkey_remove_socket: . Feb 1 20:32:44 mza kernel: klips_debug:pfkey_remove_socket: succeeded. Feb 1 20:32:44 mza kernel: klips_debug:pfkey_destroy_socket: pfkey_remove_socket called. Feb 1 20:32:44 mza kernel: klips_debug:pfkey_destroy_socket: sk(0pc253eb80)->(&0pc253ebc8)receive_queue.{next=0pc253ebc8,prev=0pc253ebc8}. Feb 1 20:32:44 mza kernel: klips_debug:pfkey_destroy_socket: destroyed. Feb 1 20:32:44 mza kernel: klips_debug:pfkey_list_remove_socket: removing sock=0pc28331e0 Feb 1 20:32:44 mza last message repeated 12 times Feb 1 20:32:44 mza kernel: klips_debug:pfkey_release: succeeded. Feb 1 20:32:44 mza kernel: klips_debug:pfkey_create: sock=0pc28331e0 type:3 state:1 flags:0 protocol:2 Feb 1 20:32:44 mza kernel: klips_debug:pfkey_create: sock->fasync_list=0p00000000 sk->sleep=0pc28331fc. Feb 1 20:32:44 mza kernel: klips_debug:pfkey_insert_socket: sk=0pc253eb80 Feb 1 20:32:44 mza kernel: klips_debug:pfkey_list_insert_socket: allocating 8 bytes for socketp=0pc28331e0 Feb 1 20:32:44 mza kernel: klips_debug:pfkey_create: Socket sock=0pc28331e0 sk=0pc253eb80 initialised. Feb 1 20:32:44 mza kernel: klips_debug:pfkey_sendmsg: . Feb 1 20:32:44 mza kernel: klips_debug:pfkey_sendmsg: allocating 16 bytes for downward message. Feb 1 20:32:44 mza kernel: klips_debug:pfkey_sendmsg: msg sent for parsing. Feb 1 20:32:44 mza kernel: klips_debug:pfkey_msg_interp: parsing message ver=2, type=9, errno=0, satype=0(UNKNOWN), len=2, res=0, seq=1, pid=15194. Feb 1 20:32:44 mza kernel: klips_debug:ipsec_SAref_alloc: SAref requested... head=135, cont=1792, tail=255, listsize=256. Feb 1 20:32:44 mza kernel: klips_debug:ipsec_SAref_alloc: allocating SAref=1671, table=0, entry=1671 of 65536. Feb 1 20:32:44 mza kernel: klips_debug:ipsec_sa_alloc: allocated 500 bytes for ipsec_sa struct=0pcce25800 ref=1671. Feb 1 20:32:44 mza kernel: klips_debug:pfkey_msg_interp: allocated extr->ips=0pcce25800. Feb 1 20:32:44 mza kernel: klips_debug:pfkey_msg_parse: parsing message ver=2, type=9(flush), errno=0, satype=0(UNKNOWN), len=2, res=0, seq=1, pid=15194. Feb 1 20:32:44 mza kernel: klips_debug:pfkey_msg_parse: extensions permitted=00000001, seen=00000001, required=00000001. Feb 1 20:32:44 mza kernel: klips_debug:pfkey_msg_interp: parsing message type 9(flush) with msg_parser 0pc0249120. Feb 1 20:32:44 mza kernel: klips_debug:pfkey_flush_parse: flushing type 0 SAs Feb 1 20:32:44 mza kernel: klips_debug:ipsec_sadb_cleanup: cleaning up proto=0. Feb 1 20:32:44 mza kernel: klips_debug:ipsec_sadb_cleanup: removing SAref entries and tables.<6>klips_debug:ipsec_sadb_cleanup: cleaning SAref table=0. Feb 1 20:32:44 mza kernel: klips_debug:ipsec_sa_delchain: passed SA: (error) Feb 1 20:32:44 mza kernel: klips_debug:ipsec_sa_delchain: unlinking and delting SA: (error)<6>. Feb 1 20:32:44 mza kernel: klips_debug:ipsec_sa_del: deleting SA: (error), hashval=0. Feb 1 20:32:44 mza kernel: klips_debug:ipsec_sa_del: no entries in ipsec_sa table for hash=0 of SA: (error). Feb 1 20:32:44 mza kernel: klips_debug:ipsec_sa_delchain: ipsec_sa_del returned error 2. Feb 1 20:32:44 mza kernel: klips_debug:ipsec_sadb_cleanup: cleaning SAref table=1. Feb 1 20:32:44 mza kernel: Feb 1 20:32:44 mza kernel: klips_debug:ipsec_sadb_cleanup: cleaned 1 used refTables. Feb 1 20:32:44 mza kernel: klips_debug:pfkey_upmsg: allocating 16 bytes... Feb 1 20:32:44 mza kernel: klips_debug:pfkey_upmsg: ...allocated at 0pce037a40. Feb 1 20:32:44 mza kernel: klips_debug:pfkey_flush_parse: sending up flush reply message for satype=0(UNKNOWN) to socket=0pc28331e0 succeeded. Feb 1 20:32:44 mza kernel: klips_debug:ipsec_sa_wipe: removing SA= (error)(0pcce25800), SAref=1671, table=0(0pd0000000), entry=1671 from the refTable. Feb 1 20:32:44 mza kernel: klips_debug:ipsec_sa_put: ipsec_sa SA: (error), ref:-1 reference count decremented. Feb 1 20:32:44 mza kernel: klips_debug:pfkey_release: sock=0pc28331e0 sk=0pc253eb80 Feb 1 20:32:44 mza kernel: klips_debug:pfkey_destroy_socket: . Feb 1 20:32:44 mza kernel: klips_debug:pfkey_remove_socket: . Feb 1 20:32:44 mza kernel: klips_debug:pfkey_remove_socket: succeeded. Feb 1 20:32:44 mza kernel: klips_debug:pfkey_destroy_socket: pfkey_remove_socket called. Feb 1 20:32:44 mza kernel: klips_debug:pfkey_destroy_socket: sk(0pc253eb80)->(&0pc253ebc8)receive_queue.{next=0pce037a40,prev=0pce037a40}. Feb 1 20:32:44 mza kernel: klips_debug:pfkey_destroy_socket: skb=0pce037a40 freed. Feb 1 20:32:44 mza kernel: klips_debug:pfkey_destroy_socket: destroyed. Feb 1 20:32:44 mza kernel: klips_debug:pfkey_list_remove_socket: removing sock=0pc28331e0 Feb 1 20:32:44 mza last message repeated 12 times Feb 1 20:32:44 mza kernel: klips_debug:pfkey_release: succeeded. Feb 1 20:32:44 mza ipsec_setup: KLIPS ipsec0 on eth0 190.3.63.165/255.255.255.224 broadcast 190.3.63.191 Feb 1 20:32:44 mza kernel: klips_debug:ipsec_tunnel_ioctl: tncfg service call #35312 for dev=ipsec0 Feb 1 20:32:44 mza kernel: klips_debug:ipsec_tunnel_ioctl: calling ipsec_tunnel_attatch... Feb 1 20:32:44 mza kernel: klips_debug:ipsec_tunnel_attach: physical device eth0 being attached has HW address: 0:08:a1:40:fe:0a Feb 1 20:32:44 mza kernel: klips_debug:ipsec_tunnel_open: dev = ipsec0, prv->dev = eth0 Feb 1 20:32:44 mza kernel: klips_debug:ipsec_device_event: NETDEV_UP dev=ipsec0 Feb 1 20:32:44 mza ipsec_setup: ...FreeS/WAN IPsec started Feb 1 20:32:45 mza kernel: klips_debug:pfkey_create: sock=0pc2ada1a0 type:3 state:1 flags:0 protocol:2 Feb 1 20:32:45 mza kernel: klips_debug:pfkey_create: sock->fasync_list=0p00000000 sk->sleep=0pc2ada1bc. Feb 1 20:32:45 mza kernel: klips_debug:pfkey_insert_socket: sk=0pc253eb80 Feb 1 20:32:45 mza kernel: klips_debug:pfkey_list_insert_socket: allocating 8 bytes for socketp=0pc2ada1a0 Feb 1 20:32:45 mza kernel: klips_debug:pfkey_create: Socket sock=0pc2ada1a0 sk=0pc253eb80 initialised. Feb 1 20:32:46 mza kernel: klips_debug:pfkey_sendmsg: . Feb 1 20:32:46 mza kernel: klips_debug:pfkey_sendmsg: allocating 16 bytes for downward message. Feb 1 20:32:46 mza kernel: klips_debug:pfkey_sendmsg: msg sent for parsing. Feb 1 20:32:46 mza kernel: klips_debug:pfkey_msg_interp: parsing message ver=2, type=7, errno=0, satype=2(AH), len=2, res=0, seq=1, pid=15232. Feb 1 20:32:46 mza kernel: klips_debug:ipsec_SAref_alloc: SAref requested... head=136, cont=1792, tail=255, listsize=256. Feb 1 20:32:46 mza kernel: klips_debug:ipsec_SAref_alloc: allocating SAref=1672, table=0, entry=1672 of 65536. Feb 1 20:32:46 mza kernel: klips_debug:ipsec_sa_alloc: allocated 500 bytes for ipsec_sa struct=0pcce25800 ref=1672. Feb 1 20:32:46 mza kernel: klips_debug:pfkey_msg_interp: allocated extr->ips=0pcce25800. Feb 1 20:32:46 mza kernel: klips_debug:pfkey_msg_parse: parsing message ver=2, type=7(register), errno=0, satype=2(AH), len=2, res=0, seq=1, pid=15232. Feb 1 20:32:46 mza kernel: klips_debug:pfkey_msg_parse: extensions permitted=00000001, seen=00000001, required=00000001. Feb 1 20:32:46 mza kernel: klips_debug:pfkey_msg_interp: parsing message type 7(register) with msg_parser 0pc0248930. Feb 1 20:32:46 mza kernel: klips_debug:pfkey_register_parse: . Feb 1 20:32:46 mza kernel: klips_debug:pfkey_list_insert_socket: allocating 8 bytes for socketp=0pc2ada1a0 Feb 1 20:32:46 mza kernel: klips_debug:pfkey_register_parse: SATYPE=02(AH) successfully registered by KMd (pid=15232). Feb 1 20:32:46 mza kernel: klips_debug:pfkey_register_reply: pfkey_supported_list[2]=0pc1370e80 Feb 1 20:32:46 mza kernel: klips_debug:pfkey_register_reply: checking supported=0pc1370e80 Feb 1 20:32:46 mza kernel: klips_debug:pfkey_register_reply: adding auth alg. Feb 1 20:32:46 mza kernel: klips_debug:pfkey_register_reply: checking supported=0pc1370e40 Feb 1 20:32:46 mza kernel: klips_debug:pfkey_register_reply: adding auth alg. Feb 1 20:32:46 mza kernel: klips_debug:pfkey_register_reply: allocating 16 bytes for auth algs. Feb 1 20:32:46 mza kernel: klips_debug:pfkey_register_reply: found satype=2(AH) exttype=14 id=3 ivlen=0 minbits=160 maxbits=160. Feb 1 20:32:46 mza kernel: klips_debug:pfkey_register_reply: found satype=2(AH) exttype=14 id=2 ivlen=0 minbits=128 maxbits=128. Feb 1 20:32:46 mza kernel: klips_debug:pfkey_msg_hdr_build: Feb 1 20:32:46 mza kernel: klips_debug:pfkey_msg_hdr_build: on_entry &pfkey_ext=0pc2611d38 pfkey_ext=0pc2611d6c *pfkey_ext=0p00000000. Feb 1 20:32:46 mza kernel: klips_debug:pfkey_msg_hdr_build: on_exit &pfkey_ext=0pc2611d38 pfkey_ext=0pc2611d6c *pfkey_ext=0pcec8d1c0. Feb 1 20:32:46 mza kernel: klips_debug:pfkey_safe_build: error=0 Feb 1 20:32:46 mza kernel: klips_debug:pfkey_safe_build:success. Feb 1 20:32:46 mza kernel: klips_debug:pfkey_safe_build: error=0 Feb 1 20:32:46 mza kernel: klips_debug:pfkey_safe_build:success. Feb 1 20:32:46 mza kernel: klips_debug:pfkey_msg_build: pfkey_msg=0pcf7dfd00 allocated 40 bytes, &(extensions[0])=0pc2611d6c Feb 1 20:32:46 mza kernel: klips_debug:pfkey_msg_build: copying 24 bytes from extensions[14]=0pcec8d700 to=0pcf7dfd10 Feb 1 20:32:46 mza kernel: klips_debug:pfkey_msg_build: extensions permitted=0000c001, seen=00004001, required=00000001. Feb 1 20:32:46 mza kernel: klips_debug:pfkey_msg_parse: parsing message ver=2, type=7(register), errno=0, satype=2(AH), len=5, res=0, seq=1, pid=15232. Feb 1 20:32:46 mza kernel: klips_debug:pfkey_msg_parse: remain=3 ext_type=14(supported-auth) ext_len=3 parsing ext 0pcf7dfd10 with parser pfkey_supported_parse. Feb 1 20:32:46 mza kernel: klips_debug:pfkey_msg_parse: extensions permitted=0000c001, seen=00004001, required=00000001. Feb 1 20:32:46 mza kernel: klips_debug:pfkey_upmsg: allocating 40 bytes... Feb 1 20:32:46 mza kernel: klips_debug:pfkey_upmsg: ...allocated at 0pcba700c0. Feb 1 20:32:46 mza kernel: klips_debug:pfkey_register_reply: sending up register message for satype=2(AH) to socket=0pc2ada1a0 succeeded. Feb 1 20:32:46 mza kernel: klips_debug:ipsec_sa_wipe: removing SA= (error)(0pcce25800), SAref=1672, table=0(0pd0000000), entry=1672 from the refTable. Feb 1 20:32:46 mza kernel: klips_debug:ipsec_sa_put: ipsec_sa SA: (error), ref:-1 reference count decremented. Feb 1 20:32:46 mza kernel: klips_debug:pfkey_sendmsg: . Feb 1 20:32:46 mza kernel: klips_debug:pfkey_sendmsg: allocating 16 bytes for downward message. Feb 1 20:32:46 mza kernel: klips_debug:pfkey_sendmsg: msg sent for parsing. Feb 1 20:32:46 mza kernel: klips_debug:pfkey_msg_interp: parsing message ver=2, type=7, errno=0, satype=3(ESP), len=2, res=0, seq=2, pid=15232. Feb 1 20:32:46 mza kernel: klips_debug:ipsec_SAref_alloc: SAref requested... head=137, cont=1792, tail=255, listsize=256. Feb 1 20:32:46 mza kernel: klips_debug:ipsec_SAref_alloc: allocating SAref=1673, table=0, entry=1673 of 65536. Feb 1 20:32:46 mza kernel: klips_debug:ipsec_sa_alloc: allocated 500 bytes for ipsec_sa struct=0pcce25800 ref=1673. Feb 1 20:32:46 mza kernel: klips_debug:pfkey_msg_interp: allocated extr->ips=0pcce25800. Feb 1 20:32:46 mza kernel: klips_debug:pfkey_msg_parse: parsing message ver=2, type=7(register), errno=0, satype=3(ESP), len=2, res=0, seq=2, pid=15232. Feb 1 20:32:46 mza kernel: klips_debug:pfkey_msg_parse: extensions permitted=00000001, seen=00000001, required=00000001. Feb 1 20:32:46 mza kernel: klips_debug:pfkey_msg_interp: parsing message type 7(register) with msg_parser 0pc0248930. Feb 1 20:32:46 mza kernel: klips_debug:pfkey_register_parse: . Feb 1 20:32:46 mza kernel: klips_debug:pfkey_list_insert_socket: allocating 8 bytes for socketp=0pc2ada1a0 Feb 1 20:32:46 mza kernel: klips_debug:pfkey_register_parse: SATYPE=03(ESP) successfully registered by KMd (pid=15232). Feb 1 20:32:46 mza kernel: klips_debug:pfkey_register_reply: pfkey_supported_list[3]=0pc1370f40 Feb 1 20:32:46 mza kernel: klips_debug:pfkey_register_reply: checking supported=0pc1370f40 Feb 1 20:32:46 mza kernel: klips_debug:pfkey_register_reply: adding encrypt alg. Feb 1 20:32:46 mza kernel: klips_debug:pfkey_register_reply: checking supported=0pc1370f00 Feb 1 20:32:46 mza kernel: klips_debug:pfkey_register_reply: adding auth alg. Feb 1 20:32:46 mza kernel: klips_debug:pfkey_register_reply: checking supported=0pc1370ec0 Feb 1 20:32:46 mza kernel: klips_debug:pfkey_register_reply: adding auth alg. Feb 1 20:32:46 mza kernel: klips_debug:pfkey_register_reply: allocating 16 bytes for auth algs. Feb 1 20:32:46 mza kernel: klips_debug:pfkey_register_reply: allocating 8 bytes for enc algs. Feb 1 20:32:46 mza kernel: klips_debug:pfkey_register_reply: found satype=3(ESP) exttype=15 id=3 ivlen=64 minbits=168 maxbits=168. Feb 1 20:32:46 mza kernel: klips_debug:pfkey_register_reply: found satype=3(ESP) exttype=14 id=3 ivlen=0 minbits=160 maxbits=160. Feb 1 20:32:46 mza kernel: klips_debug:pfkey_register_reply: found satype=3(ESP) exttype=14 id=2 ivlen=0 minbits=128 maxbits=128. Feb 1 20:32:46 mza kernel: klips_debug:pfkey_msg_hdr_build: Feb 1 20:32:46 mza kernel: klips_debug:pfkey_msg_hdr_build: on_entry &pfkey_ext=0pc2611d38 pfkey_ext=0pc2611d6c *pfkey_ext=0p00000000. Feb 1 20:32:46 mza kernel: klips_debug:pfkey_msg_hdr_build: on_exit &pfkey_ext=0pc2611d38 pfkey_ext=0pc2611d6c *pfkey_ext=0pcbadbec0. Feb 1 20:32:46 mza kernel: klips_debug:pfkey_safe_build: error=0 Feb 1 20:32:46 mza kernel: klips_debug:pfkey_safe_build:success. Feb 1 20:32:46 mza kernel: klips_debug:pfkey_safe_build: error=0 Feb 1 20:32:46 mza kernel: klips_debug:pfkey_safe_build:success. Feb 1 20:32:46 mza kernel: klips_debug:pfkey_safe_build: error=0 Feb 1 20:32:46 mza kernel: klips_debug:pfkey_safe_build:success. Feb 1 20:32:46 mza kernel: klips_debug:pfkey_msg_build: pfkey_msg=0pccc4cb00 allocated 56 bytes, &(extensions[0])=0pc2611d6c Feb 1 20:32:46 mza kernel: klips_debug:pfkey_msg_build: copying 24 bytes from extensions[14]=0pcbadbc80 to=0pccc4cb10 Feb 1 20:32:46 mza kernel: klips_debug:pfkey_msg_build: copying 16 bytes from extensions[15]=0pcbadb700 to=0pccc4cb28 Feb 1 20:32:46 mza kernel: klips_debug:pfkey_msg_build: extensions permitted=0000c001, seen=0000c001, required=00000001. Feb 1 20:32:46 mza kernel: klips_debug:pfkey_msg_parse: parsing message ver=2, type=7(register), errno=0, satype=3(ESP), len=7, res=0, seq=2, pid=15232. Feb 1 20:32:46 mza kernel: klips_debug:pfkey_msg_parse: remain=5 ext_type=14(supported-auth) ext_len=3 parsing ext 0pccc4cb10 with parser pfkey_supported_parse. Feb 1 20:32:46 mza kernel: klips_debug:pfkey_msg_parse: remain=2 ext_type=15(supported-cipher) ext_len=2 parsing ext 0pccc4cb28 with parser pfkey_supported_parse. Feb 1 20:32:46 mza kernel: klips_debug:pfkey_msg_parse: extensions permitted=0000c001, seen=0000c001, required=00000001. Feb 1 20:32:46 mza kernel: klips_debug:pfkey_upmsg: allocating 56 bytes... Feb 1 20:32:46 mza kernel: klips_debug:pfkey_upmsg: ...allocated at 0pcbc16b00. Feb 1 20:32:46 mza kernel: klips_debug:pfkey_register_reply: sending up register message for satype=3(ESP) to socket=0pc2ada1a0 succeeded. Feb 1 20:32:46 mza kernel: klips_debug:ipsec_sa_wipe: removing SA= (error)(0pcce25800), SAref=1673, table=0(0pd0000000), entry=1673 from the refTable. Feb 1 20:32:46 mza kernel: klips_debug:ipsec_sa_put: ipsec_sa SA: (error), ref:-1 reference count decremented. Feb 1 20:32:46 mza kernel: klips_debug:pfkey_sendmsg: . Feb 1 20:32:46 mza kernel: klips_debug:pfkey_sendmsg: allocating 16 bytes for downward message. Feb 1 20:32:46 mza kernel: klips_debug:pfkey_sendmsg: msg sent for parsing. Feb 1 20:32:46 mza kernel: klips_debug:pfkey_msg_interp: parsing message ver=2, type=7, errno=0, satype=10(COMP), len=2, res=0, seq=3, pid=15232. Feb 1 20:32:46 mza kernel: klips_debug:ipsec_SAref_alloc: SAref requested... head=138, cont=1792, tail=255, listsize=256. Feb 1 20:32:46 mza kernel: klips_debug:ipsec_SAref_alloc: allocating SAref=1674, table=0, entry=1674 of 65536. Feb 1 20:32:46 mza kernel: klips_debug:ipsec_sa_alloc: allocated 500 bytes for ipsec_sa struct=0pcce25800 ref=1674. Feb 1 20:32:46 mza kernel: klips_debug:pfkey_msg_interp: allocated extr->ips=0pcce25800. Feb 1 20:32:46 mza kernel: klips_debug:pfkey_msg_parse: parsing message ver=2, type=7(register), errno=0, satype=10(COMP), len=2, res=0, seq=3, pid=15232. Feb 1 20:32:46 mza kernel: klips_debug:pfkey_msg_parse: extensions permitted=00000001, seen=00000001, required=00000001. Feb 1 20:32:46 mza kernel: klips_debug:pfkey_msg_interp: parsing message type 7(register) with msg_parser 0pc0248930. Feb 1 20:32:46 mza kernel: klips_debug:pfkey_register_parse: . Feb 1 20:32:46 mza kernel: klips_debug:pfkey_list_insert_socket: allocating 8 bytes for socketp=0pc2ada1a0 Feb 1 20:32:46 mza kernel: klips_debug:pfkey_register_parse: SATYPE=10(COMP) successfully registered by KMd (pid=15232). Feb 1 20:32:46 mza kernel: klips_debug:pfkey_register_reply: pfkey_supported_list[10]=0pc1370f80 Feb 1 20:32:46 mza kernel: klips_debug:pfkey_register_reply: checking supported=0pc1370f80 Feb 1 20:32:46 mza kernel: klips_debug:pfkey_register_reply: adding encrypt alg. Feb 1 20:32:46 mza kernel: klips_debug:pfkey_register_reply: allocating 8 bytes for enc algs. Feb 1 20:32:46 mza kernel: klips_debug:pfkey_register_reply: found satype=10(COMP) exttype=15 id=2 ivlen=0 minbits=1 maxbits=1. Feb 1 20:32:46 mza kernel: klips_debug:pfkey_msg_hdr_build: Feb 1 20:32:46 mza kernel: klips_debug:pfkey_msg_hdr_build: on_entry &pfkey_ext=0pc2611d38 pfkey_ext=0pc2611d6c *pfkey_ext=0p00000000. Feb 1 20:32:46 mza kernel: klips_debug:pfkey_msg_hdr_build: on_exit &pfkey_ext=0pc2611d38 pfkey_ext=0pc2611d6c *pfkey_ext=0pcbadb700. Feb 1 20:32:46 mza kernel: klips_debug:pfkey_safe_build: error=0 Feb 1 20:32:46 mza kernel: klips_debug:pfkey_safe_build:success. Feb 1 20:32:46 mza kernel: klips_debug:pfkey_safe_build: error=0 Feb 1 20:32:46 mza kernel: klips_debug:pfkey_safe_build:success. Feb 1 20:32:46 mza kernel: klips_debug:pfkey_msg_build: pfkey_msg=0pcbadbec0 allocated 32 bytes, &(extensions[0])=0pc2611d6c Feb 1 20:32:46 mza kernel: klips_debug:pfkey_msg_build: copying 16 bytes from extensions[15]=0pcbadbc80 to=0pcbadbed0 Feb 1 20:32:46 mza kernel: klips_debug:pfkey_msg_build: extensions permitted=0000c001, seen=00008001, required=00000001. Feb 1 20:32:46 mza kernel: klips_debug:pfkey_msg_parse: parsing message ver=2, type=7(register), errno=0, satype=10(COMP), len=4, res=0, seq=3, pid=15232. Feb 1 20:32:46 mza kernel: klips_debug:pfkey_msg_parse: remain=2 ext_type=15(supported-cipher) ext_len=2 parsing ext 0pcbadbed0 with parser pfkey_supported_parse. Feb 1 20:32:46 mza kernel: klips_debug:pfkey_msg_parse: extensions permitted=0000c001, seen=00008001, required=00000001. Feb 1 20:32:46 mza kernel: klips_debug:pfkey_upmsg: allocating 32 bytes... Feb 1 20:32:46 mza kernel: klips_debug:pfkey_upmsg: ...allocated at 0pcba703c0. Feb 1 20:32:46 mza kernel: klips_debug:pfkey_register_reply: sending up register message for satype=10(COMP) to socket=0pc2ada1a0 succeeded. Feb 1 20:32:46 mza kernel: klips_debug:ipsec_sa_wipe: removing SA= (error)(0pcce25800), SAref=1674, table=0(0pd0000000), entry=1674 from the refTable. Feb 1 20:32:46 mza kernel: klips_debug:ipsec_sa_put: ipsec_sa SA: (error), ref:-1 reference count decremented. Feb 1 20:32:46 mza kernel: klips_debug:pfkey_sendmsg: . Feb 1 20:32:46 mza kernel: klips_debug:pfkey_sendmsg: allocating 16 bytes for downward message. Feb 1 20:32:46 mza kernel: klips_debug:pfkey_sendmsg: msg sent for parsing. Feb 1 20:32:46 mza kernel: klips_debug:pfkey_msg_interp: parsing message ver=2, type=7, errno=0, satype=9(IPIP), len=2, res=0, seq=4, pid=15232. Feb 1 20:32:46 mza kernel: klips_debug:ipsec_SAref_alloc: SAref requested... head=139, cont=1792, tail=255, listsize=256. Feb 1 20:32:46 mza kernel: klips_debug:ipsec_SAref_alloc: allocating SAref=1675, table=0, entry=1675 of 65536. Feb 1 20:32:46 mza kernel: klips_debug:ipsec_sa_alloc: allocated 500 bytes for ipsec_sa struct=0pcce25800 ref=1675. Feb 1 20:32:46 mza kernel: klips_debug:pfkey_msg_interp: allocated extr->ips=0pcce25800. Feb 1 20:32:46 mza kernel: klips_debug:pfkey_msg_parse: parsing message ver=2, type=7(register), errno=0, satype=9(IPIP), len=2, res=0, seq=4, pid=15232. Feb 1 20:32:46 mza kernel: klips_debug:pfkey_msg_parse: extensions permitted=00000001, seen=00000001, required=00000001. Feb 1 20:32:46 mza kernel: klips_debug:pfkey_msg_interp: parsing message type 7(register) with msg_parser 0pc0248930. Feb 1 20:32:46 mza kernel: klips_debug:pfkey_register_parse: . Feb 1 20:32:46 mza kernel: klips_debug:pfkey_list_insert_socket: allocating 8 bytes for socketp=0pc2ada1a0 Feb 1 20:32:46 mza kernel: klips_debug:pfkey_register_parse: SATYPE=09(IPIP) successfully registered by KMd (pid=15232). Feb 1 20:32:46 mza kernel: klips_debug:pfkey_register_reply: pfkey_supported_list[9]=0pc1370fc0 Feb 1 20:32:46 mza kernel: klips_debug:pfkey_register_reply: checking supported=0pc1370fc0 Feb 1 20:32:46 mza kernel: klips_debug:pfkey_register_reply: adding encrypt alg. Feb 1 20:32:46 mza kernel: klips_debug:pfkey_register_reply: allocating 8 bytes for enc algs. Feb 1 20:32:46 mza kernel: klips_debug:pfkey_register_reply: found satype=9(IPIP) exttype=15 id=1 ivlen=0 minbits=32 maxbits=32. Feb 1 20:32:46 mza kernel: klips_debug:pfkey_msg_hdr_build: Feb 1 20:32:46 mza kernel: klips_debug:pfkey_msg_hdr_build: on_entry &pfkey_ext=0pc2611d38 pfkey_ext=0pc2611d6c *pfkey_ext=0p00000000. Feb 1 20:32:46 mza kernel: klips_debug:pfkey_msg_hdr_build: on_exit &pfkey_ext=0pc2611d38 pfkey_ext=0pc2611d6c *pfkey_ext=0pcbadb700. Feb 1 20:32:46 mza kernel: klips_debug:pfkey_safe_build: error=0 Feb 1 20:32:46 mza kernel: klips_debug:pfkey_safe_build:success. Feb 1 20:32:46 mza kernel: klips_debug:pfkey_safe_build: error=0 Feb 1 20:32:46 mza kernel: klips_debug:pfkey_safe_build:success. Feb 1 20:32:46 mza kernel: klips_debug:pfkey_msg_build: pfkey_msg=0pcbadbf00 allocated 32 bytes, &(extensions[0])=0pc2611d6c Feb 1 20:32:46 mza kernel: klips_debug:pfkey_msg_build: copying 16 bytes from extensions[15]=0pcbadbec0 to=0pcbadbf10 Feb 1 20:32:46 mza kernel: klips_debug:pfkey_msg_build: extensions permitted=0000c001, seen=00008001, required=00000001. Feb 1 20:32:46 mza kernel: klips_debug:pfkey_msg_parse: parsing message ver=2, type=7(register), errno=0, satype=9(IPIP), len=4, res=0, seq=4, pid=15232. Feb 1 20:32:46 mza kernel: klips_debug:pfkey_msg_parse: remain=2 ext_type=15(supported-cipher) ext_len=2 parsing ext 0pcbadbf10 with parser pfkey_supported_parse. Feb 1 20:32:46 mza kernel: klips_debug:pfkey_msg_parse: extensions permitted=0000c001, seen=00008001, required=00000001. Feb 1 20:32:46 mza kernel: klips_debug:pfkey_upmsg: allocating 32 bytes... Feb 1 20:32:46 mza kernel: klips_debug:pfkey_upmsg: ...allocated at 0pcecfa9c0. Feb 1 20:32:46 mza kernel: klips_debug:pfkey_register_reply: sending up register message for satype=9(IPIP) to socket=0pc2ada1a0 succeeded. Feb 1 20:32:46 mza kernel: klips_debug:ipsec_sa_wipe: removing SA= (error)(0pcce25800), SAref=1675, table=0(0pd0000000), entry=1675 from the refTable. Feb 1 20:32:46 mza kernel: klips_debug:ipsec_sa_put: ipsec_sa SA: (error), ref:-1 reference count decremented. Feb 1 20:32:48 mza kernel: klips_debug:pfkey_sendmsg: . Feb 1 20:32:48 mza kernel: klips_debug:pfkey_sendmsg: allocating 184 bytes for downward message. Feb 1 20:32:48 mza kernel: klips_debug:pfkey_sendmsg: msg sent for parsing. Feb 1 20:32:48 mza kernel: klips_debug:pfkey_msg_interp: parsing message ver=2, type=14, errno=0, satype=11(INT), len=23, res=0, seq=5, pid=15232. Feb 1 20:32:48 mza kernel: klips_debug:ipsec_SAref_alloc: SAref requested... head=140, cont=1792, tail=255, listsize=256. Feb 1 20:32:48 mza kernel: klips_debug:ipsec_SAref_alloc: allocating SAref=1676, table=0, entry=1676 of 65536. Feb 1 20:32:48 mza kernel: klips_debug:ipsec_sa_alloc: allocated 500 bytes for ipsec_sa struct=0pcce25800 ref=1676. Feb 1 20:32:48 mza kernel: klips_debug:pfkey_msg_interp: allocated extr->ips=0pcce25800. Feb 1 20:32:48 mza kernel: klips_debug:pfkey_msg_interp: satype 11 lookups to proto=61. Feb 1 20:32:48 mza kernel: klips_debug:pfkey_msg_parse: parsing message ver=2, type=14(x-addflow(eroute)), errno=0, satype=11(INT), len=23, res=0, seq=5, pid=15232. Feb 1 20:32:48 mza kernel: klips_debug:pfkey_msg_parse: satype 11(INT) conversion to proto gives 61 for msg_type 14(x-addflow(eroute)). Feb 1 20:32:48 mza kernel: klips_debug:pfkey_msg_parse: remain=21 ext_type=1(security-association) ext_len=3 parsing ext 0pccdaa790 with parser pfkey_sa_parse. Feb 1 20:32:48 mza kernel: klips_debug:pfkey_sa_parse: successfully found len=3 exttype=1(security-association) spi=00000104 replay=0 state=0 auth=0 encrypt=0 flags=0 ref=-1. Feb 1 20:32:48 mza kernel: klips_debug:pfkey_msg_parse: remain=18 ext_type=5(source-address) ext_len=3 parsing ext 0pccdaa7a8 with parser pfkey_address_parse. Feb 1 20:32:48 mza kernel: klips_debug:pfkey_address_parse: found exttype=5(source-address) family=2(AF_INET) address=190.3.63.165 proto=0 port=0. Feb 1 20:32:48 mza kernel: klips_debug:pfkey_msg_parse: remain=15 ext_type=6(destination-address) ext_len=3 parsing ext 0pccdaa7c0 with parser pfkey_address_parse. Feb 1 20:32:49 mza kernel: klips_debug:pfkey_address_parse: found exttype=6(destination-address) family=2(AF_INET) address=0.0.0.0 proto=0 port=0. Feb 1 20:32:49 mza kernel: klips_debug:pfkey_msg_parse: remain=12 ext_type=21(X-source-flow-address) ext_len=3 parsing ext 0pccdaa7d8 with parser pfkey_address_parse. Feb 1 20:32:49 mza kernel: klips_debug:pfkey_address_parse: found exttype=21(X-source-flow-address) family=2(AF_INET) address=192.168.0.0 proto=0 port=0. Feb 1 20:32:49 mza kernel: klips_debug:pfkey_msg_parse: remain=9 ext_type=22(X-dest-flow-address) ext_len=3 parsing ext 0pccdaa7f0 with parser pfkey_address_parse. Feb 1 20:32:49 mza kernel: klips_debug:pfkey_address_parse: found exttype=22(X-dest-flow-address) family=2(AF_INET) address=192.168.1.0 proto=0 port=0. Feb 1 20:32:49 mza kernel: klips_debug:pfkey_msg_parse: remain=6 ext_type=23(X-source-mask) ext_len=3 parsing ext 0pccdaa808 with parser pfkey_address_parse. Feb 1 20:32:49 mza kernel: klips_debug:pfkey_address_parse: found exttype=23(X-source-mask) family=2(AF_INET) address=255.255.255.0 proto=0 port=0. Feb 1 20:32:49 mza kernel: klips_debug:pfkey_msg_parse: remain=3 ext_type=24(X-dest-mask) ext_len=3 parsing ext 0pccdaa820 with parser pfkey_address_parse. Feb 1 20:32:49 mza kernel: klips_debug:pfkey_address_parse: found exttype=24(X-dest-mask) family=2(AF_INET) address=255.255.255.0 proto=0 port=0. Feb 1 20:32:49 mza kernel: klips_debug:pfkey_msg_parse: extensions permitted=05e00c63, seen=01e00063, required=01e00043. Feb 1 20:32:49 mza kernel: klips_debug:pfkey_msg_interp: processing ext 1 0pccdaa790 with processor 0pc024bd40. Feb 1 20:32:49 mza kernel: klips_debug:pfkey_sa_process: . Feb 1 20:32:49 mza kernel: klips_debug:pfkey_msg_interp: processing ext 5 0pccdaa7a8 with processor 0pc024c090. Feb 1 20:32:49 mza kernel: klips_debug:pfkey_address_process: Feb 1 20:32:49 mza kernel: klips_debug:pfkey_address_process: found address family=2, AF_INET, 190.3.63.165. Feb 1 20:32:49 mza kernel: klips_debug:pfkey_address_process: found src address. Feb 1 20:32:49 mza kernel: klips_debug:pfkey_address_process: allocating 16 bytes for saddr. Feb 1 20:32:49 mza kernel: klips_debug:pfkey_address_process: successful. Feb 1 20:32:49 mza kernel: klips_debug:pfkey_msg_interp: processing ext 6 0pccdaa7c0 with processor 0pc024c090. Feb 1 20:32:49 mza kernel: klips_debug:pfkey_address_process: Feb 1 20:32:49 mza kernel: klips_debug:pfkey_address_process: found address family=2, AF_INET, 0.0.0.0. Feb 1 20:32:49 mza kernel: klips_debug:pfkey_address_process: found dst address. Feb 1 20:32:49 mza kernel: klips_debug:pfkey_address_process: allocating 16 bytes for saddr. Feb 1 20:32:49 mza kernel: klips_debug:pfkey_address_process: ips_said.dst set to 0.0.0.0. Feb 1 20:32:49 mza kernel: klips_debug:pfkey_address_process: successful. Feb 1 20:32:49 mza kernel: klips_debug:pfkey_msg_interp: processing ext 21 0pccdaa7d8 with processor 0pc024c090. Feb 1 20:32:50 mza kernel: klips_debug:pfkey_address_process: Feb 1 20:32:50 mza kernel: klips_debug:pfkey_address_process: found address family=2, AF_INET, 192.168.0.0. Feb 1 20:32:50 mza kernel: klips_debug:pfkey_address_process: found src flow address. Feb 1 20:32:50 mza kernel: klips_debug:pfkey_alloc_eroute: allocating 168 bytes for an eroute. Feb 1 20:32:50 mza kernel: klips_debug:pfkey_alloc_eroute: allocated eroute struct=0pc2611e58. Feb 1 20:32:50 mza kernel: klips_debug:pfkey_address_parse: extr->eroute set to 192.168.0.0/0:0->0.0.0.0/0:0 Feb 1 20:32:50 mza kernel: klips_debug:pfkey_address_process: successful. Feb 1 20:32:50 mza kernel: klips_debug:pfkey_msg_interp: processing ext 22 0pccdaa7f0 with processor 0pc024c090. Feb 1 20:32:50 mza kernel: klips_debug:pfkey_address_process: Feb 1 20:32:50 mza kernel: klips_debug:pfkey_address_process: found address family=2, AF_INET, 192.168.1.0. Feb 1 20:32:50 mza kernel: klips_debug:pfkey_address_process: found dst flow address. Feb 1 20:32:50 mza kernel: klips_debug:pfkey_alloc_eroute: eroute struct already allocated Feb 1 20:32:50 mza kernel: klips_debug:pfkey_address_parse: extr->eroute set to 192.168.0.0/0:0->192.168.1.0/0:0 Feb 1 20:32:50 mza kernel: klips_debug:pfkey_address_process: successful. Feb 1 20:32:50 mza kernel: klips_debug:pfkey_msg_interp: processing ext 23 0pccdaa808 with processor 0pc024c090. Feb 1 20:32:50 mza kernel: klips_debug:pfkey_address_process: Feb 1 20:32:50 mza kernel: klips_debug:pfkey_address_process: found address family=2, AF_INET, 255.255.255.0. Feb 1 20:32:50 mza kernel: klips_debug:pfkey_address_process: found src mask address. Feb 1 20:32:50 mza kernel: klips_debug:pfkey_alloc_eroute: eroute struct already allocated Feb 1 20:32:50 mza kernel: klips_debug:pfkey_address_parse: extr->eroute set to 192.168.0.0/24:0->192.168.1.0/0:0 Feb 1 20:32:50 mza kernel: klips_debug:pfkey_address_process: successful. Feb 1 20:32:50 mza kernel: klips_debug:pfkey_msg_interp: processing ext 24 0pccdaa820 with processor 0pc024c090. Feb 1 20:32:51 mza kernel: klips_debug:pfkey_address_process: Feb 1 20:32:51 mza kernel: klips_debug:pfkey_address_process: found address family=2, AF_INET, 255.255.255.0. Feb 1 20:32:51 mza kernel: klips_debug:pfkey_address_process: found dst mask address. Feb 1 20:32:51 mza kernel: klips_debug:pfkey_alloc_eroute: eroute struct already allocated Feb 1 20:32:51 mza kernel: klips_debug:pfkey_address_parse: extr->eroute set to 192.168.0.0/24:0->192.168.1.0/24:0 Feb 1 20:32:51 mza kernel: klips_debug:pfkey_address_process: successful. Feb 1 20:32:51 mza kernel: klips_debug:pfkey_msg_interp: parsing message type 14(x-addflow(eroute)) with msg_parser 0pc0249a60. Feb 1 20:32:51 mza kernel: klips_debug:pfkey_x_addflow_parse: . Feb 1 20:32:51 mza kernel: klips_debug:pfkey_x_addflow_parse: calling breakeroute and/or makeroute for 192.168.0.0/24->192.168.1.0/24 Feb 1 20:32:51 mza kernel: klips_debug:pfkey_x_addflow_parse: calling makeroute. Feb 1 20:32:51 mza kernel: klips_debug:ipsec_makeroute: attempting to allocate 168 bytes to insert eroute for 192.168.0.0/24:0->192.168.1.0/24:0 0, SA: %%trap, PID:15232, skb=0p00000000, ident:NULL->NULL Feb 1 20:32:51 mza kernel: klips_debug:ipsec_makeroute: succeeded, I think... Feb 1 20:32:51 mza kernel: klips_debug:pfkey_x_addflow_parse: makeroute call successful. Feb 1 20:32:51 mza kernel: klips_debug:pfkey_msg_hdr_build: Feb 1 20:32:51 mza kernel: klips_debug:pfkey_msg_hdr_build: on_entry &pfkey_ext=0pc2611c28 pfkey_ext=0pc2611d10 *pfkey_ext=0p00000000. Feb 1 20:32:51 mza kernel: klips_debug:pfkey_msg_hdr_build: on_exit &pfkey_ext=0pc2611c28 pfkey_ext=0pc2611d10 *pfkey_ext=0pcbadbf00. Feb 1 20:32:51 mza kernel: klips_debug:pfkey_safe_build: error=0 Feb 1 20:32:51 mza kernel: klips_debug:pfkey_safe_build:success. Feb 1 20:32:51 mza kernel: klips_debug:pfkey_sa_build: spi=00000104 replay=0 sa_state=0 auth=0 encrypt=0 flags=0 Feb 1 20:32:51 mza kernel: klips_debug:pfkey_safe_build: error=0 Feb 1 20:32:51 mza kernel: klips_debug:pfkey_safe_build:success. Feb 1 20:32:51 mza kernel: klips_debug:pfkey_address_build: exttype=5 proto=0 prefixlen=0 Feb 1 20:32:51 mza kernel: klips_debug:pfkey_address_build: found address family AF_INET. Feb 1 20:32:51 mza kernel: klips_debug:pfkey_address_build: found address=190.3.63.165:0. Feb 1 20:32:51 mza kernel: klips_debug:pfkey_address_build: successful. Feb 1 20:32:52 mza kernel: klips_debug:pfkey_safe_build: error=0 Feb 1 20:32:52 mza kernel: klips_debug:pfkey_safe_build:success. Feb 1 20:32:52 mza kernel: klips_debug:pfkey_address_build: exttype=6 proto=0 prefixlen=0 Feb 1 20:32:52 mza kernel: klips_debug:pfkey_address_build: found address family AF_INET. Feb 1 20:32:52 mza kernel: klips_debug:pfkey_address_build: found address=0.0.0.0:0. Feb 1 20:32:52 mza kernel: klips_debug:pfkey_address_build: successful. Feb 1 20:32:52 mza kernel: klips_debug:pfkey_safe_build: error=0 Feb 1 20:32:52 mza kernel: klips_debug:pfkey_safe_build:success. Feb 1 20:32:52 mza kernel: klips_debug:pfkey_address_build: exttype=21 proto=0 prefixlen=0 Feb 1 20:32:52 mza kernel: klips_debug:pfkey_address_build: found address family AF_INET. Feb 1 20:32:52 mza kernel: klips_debug:pfkey_address_build: found address=192.168.0.0:0. Feb 1 20:32:52 mza kernel: klips_debug:pfkey_address_build: successful. Feb 1 20:32:52 mza kernel: klips_debug:pfkey_safe_build: error=0 Feb 1 20:32:52 mza kernel: klips_debug:pfkey_safe_build:success. Feb 1 20:32:52 mza kernel: klips_debug:pfkey_address_build: exttype=22 proto=0 prefixlen=0 Feb 1 20:32:52 mza kernel: klips_debug:pfkey_address_build: found address family AF_INET. Feb 1 20:32:52 mza kernel: klips_debug:pfkey_address_build: found address=192.168.1.0:0. Feb 1 20:32:52 mza kernel: klips_debug:pfkey_address_build: successful. Feb 1 20:32:52 mza kernel: klips_debug:pfkey_safe_build: error=0 Feb 1 20:32:52 mza kernel: klips_debug:pfkey_safe_build:success. Feb 1 20:32:52 mza kernel: klips_debug:pfkey_address_build: exttype=23 proto=0 prefixlen=0 Feb 1 20:32:52 mza kernel: klips_debug:pfkey_address_build: found address family AF_INET. Feb 1 20:32:52 mza kernel: klips_debug:pfkey_address_build: found address=255.255.255.0:0. Feb 1 20:32:52 mza kernel: klips_debug:pfkey_address_build: successful. Feb 1 20:32:52 mza kernel: klips_debug:pfkey_safe_build: error=0 Feb 1 20:32:52 mza kernel: klips_debug:pfkey_safe_build:success. Feb 1 20:32:52 mza kernel: klips_debug:pfkey_address_build: exttype=24 proto=0 prefixlen=0 Feb 1 20:32:52 mza kernel: klips_debug:pfkey_address_build: found address family AF_INET. Feb 1 20:32:52 mza kernel: klips_debug:pfkey_address_build: found address=255.255.255.0:0. Feb 1 20:32:52 mza kernel: klips_debug:pfkey_address_build: successful. Feb 1 20:32:52 mza kernel: klips_debug:pfkey_safe_build: error=0 Feb 1 20:32:53 mza kernel: klips_debug:pfkey_safe_build:success. Feb 1 20:32:53 mza kernel: klips_debug:pfkey_msg_build: pfkey_msg=0pc28e94c0 allocated 184 bytes, &(extensions[0])=0pc2611d10 Feb 1 20:32:53 mza kernel: klips_debug:pfkey_msg_build: copying 24 bytes from extensions[1]=0pcbadbc80 to=0pc28e94d0 Feb 1 20:32:53 mza kernel: klips_debug:pfkey_msg_build: copying 24 bytes from extensions[5]=0pcbadbf40 to=0pc28e94e8 Feb 1 20:32:53 mza kernel: klips_debug:pfkey_msg_build: copying 24 bytes from extensions[6]=0pc295bb80 to=0pc28e9500 Feb 1 20:32:53 mza kernel: klips_debug:pfkey_msg_build: copying 24 bytes from extensions[21]=0pc295b700 to=0pc28e9518 Feb 1 20:32:53 mza kernel: klips_debug:pfkey_msg_build: copying 24 bytes from extensions[22]=0pc295bc00 to=0pc28e9530 Feb 1 20:32:53 mza kernel: klips_debug:pfkey_msg_build: copying 24 bytes from extensions[23]=0pc295bdc0 to=0pc28e9548 Feb 1 20:32:53 mza kernel: klips_debug:pfkey_msg_build: copying 24 bytes from extensions[24]=0pc295bd00 to=0pc28e9560 Feb 1 20:32:53 mza kernel: klips_debug:pfkey_msg_build: extensions permitted=05e00063, seen=01e00063, required=01e00043. Feb 1 20:32:53 mza kernel: klips_debug:pfkey_msg_parse: parsing message ver=2, type=14(x-addflow(eroute)), errno=0, satype=11(INT), len=23, res=0, seq=5, pid=15232. Feb 1 20:32:53 mza kernel: klips_debug:pfkey_msg_parse: satype 11(INT) conversion to proto gives 61 for msg_type 14(x-addflow(eroute)). Feb 1 20:32:53 mza kernel: klips_debug:pfkey_msg_parse: remain=21 ext_type=1(security-association) ext_len=3 parsing ext 0pc28e94d0 with parser pfkey_sa_parse. Feb 1 20:32:53 mza kernel: klips_debug:pfkey_sa_parse: successfully found len=3 exttype=1(security-association) spi=00000104 replay=0 state=0 auth=0 encrypt=0 flags=0 ref=1676. Feb 1 20:32:53 mza kernel: klips_debug:pfkey_msg_parse: remain=18 ext_type=5(source-address) ext_len=3 parsing ext 0pc28e94e8 with parser pfkey_address_parse. Feb 1 20:32:53 mza kernel: klips_debug:pfkey_address_parse: found exttype=5(source-address) family=2(AF_INET) address=190.3.63.165 proto=0 port=0. Feb 1 20:32:53 mza kernel: klips_debug:pfkey_msg_parse: remain=15 ext_type=6(destination-address) ext_len=3 parsing ext 0pc28e9500 with parser pfkey_address_parse. Feb 1 20:32:53 mza kernel: klips_debug:pfkey_address_parse: found exttype=6(destination-address) family=2(AF_INET) address=0.0.0.0 proto=0 port=0. Feb 1 20:32:53 mza kernel: klips_debug:pfkey_msg_parse: remain=12 ext_type=21(X-source-flow-address) ext_len=3 parsing ext 0pc28e9518 with parser pfkey_address_parse. Feb 1 20:32:53 mza kernel: klips_debug:pfkey_address_parse: found exttype=21(X-source-flow-address) family=2(AF_INET) address=192.168.0.0 proto=0 port=0. Feb 1 20:32:53 mza kernel: klips_debug:pfkey_msg_parse: remain=9 ext_type=22(X-dest-flow-address) ext_len=3 parsing ext 0pc28e9530 with parser pfkey_address_parse. Feb 1 20:32:53 mza kernel: klips_debug:pfkey_address_parse: found exttype=22(X-dest-flow-address) family=2(AF_INET) address=192.168.1.0 proto=0 port=0. Feb 1 20:32:53 mza kernel: klips_debug:pfkey_msg_parse: remain=6 ext_type=23(X-source-mask) ext_len=3 parsing ext 0pc28e9548 with parser pfkey_address_parse. Feb 1 20:32:53 mza kernel: klips_debug:pfkey_address_parse: found exttype=23(X-source-mask) family=2(AF_INET) address=255.255.255.0 proto=0 port=0. Feb 1 20:32:53 mza kernel: klips_debug:pfkey_msg_parse: remain=3 ext_type=24(X-dest-mask) ext_len=3 parsing ext 0pc28e9560 with parser pfkey_address_parse. Feb 1 20:32:53 mza kernel: klips_debug:pfkey_address_parse: found exttype=24(X-dest-mask) family=2(AF_INET) address=255.255.255.0 proto=0 port=0. Feb 1 20:32:53 mza kernel: klips_debug:pfkey_msg_parse: extensions permitted=05e00063, seen=01e00063, required=01e00043. Feb 1 20:32:53 mza kernel: klips_debug:pfkey_upmsg: allocating 184 bytes... Feb 1 20:32:53 mza kernel: klips_debug:pfkey_upmsg: ...allocated at 0pcbc16680. Feb 1 20:32:54 mza kernel: klips_debug:pfkey_x_addflow_parse: sending up x_addflow reply message for satype=11(INT) (proto=61) to socket=0pc2ada1a0 succeeded. Feb 1 20:32:54 mza kernel: klips_debug:pfkey_x_addflow_parse: extr->ips cleaned up and freed. Feb 1 20:32:54 mza kernel: klips_debug:ipsec_sa_wipe: removing SA=%%trap(0pcce25800), SAref=1676, table=0(0pd0000000), entry=1676 from the refTable. Feb 1 20:32:54 mza ipsec__plutorun: 104 "mzabsas" #1: STATE_MAIN_I1: initiate Feb 1 20:32:54 mza kernel: klips_debug:ipsec_sa_put: ipsec_sa SA:%%trap, ref:-1 reference count decremented. Feb 1 20:32:54 mza ipsec__plutorun: ...could not start conn "mzabsas" Feb 1 20:32:54 mza kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 Feb 1 20:32:54 mza kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0. Feb 1 20:32:54 mza kernel: klips_debug: IP: ihl:20 ver:4 tos:0 tlen:104 id:26597 frag_off:0 ttl:60 proto:50 chk:59031 saddr:200.123.105.195 daddr:190.3.63.165 Feb 1 20:32:54 mza kernel: klips_debug:ipsec_rcv_decap_once: decap (50) from 200.123.105.195 -> 190.3.63.165 Feb 1 20:32:54 mza kernel: klips_debug:ipsec_sa_getbyid: linked entry in ipsec_sa table for hash=154 of SA:esp0x2d289485@190.3.63.165 requested. Feb 1 20:32:54 mza kernel: klips_debug:ipsec_sa_getbyid: no entries in ipsec_sa table for hash=154 of SA:esp0x2d289485@190.3.63.165. Feb 1 20:32:54 mza kernel: klips_debug:ipsec_rcv: no ipsec_sa for SA:esp0x2d289485@190.3.63.165: incoming packet with no SA dropped Feb 1 20:32:54 mza kernel: klips_debug:ipsec_rcv: decap_once failed: -7 Feb 1 20:32:54 mza kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 Feb 1 20:32:54 mza kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0. Feb 1 20:32:54 mza kernel: klips_debug: IP: ihl:20 ver:4 tos:0 tlen:104 id:26598 frag_off:0 ttl:60 proto:50 chk:59030 saddr:200.123.105.195 daddr:190.3.63.165 Feb 1 20:32:54 mza kernel: klips_debug:ipsec_rcv_decap_once: decap (50) from 200.123.105.195 -> 190.3.63.165 Feb 1 20:32:54 mza kernel: klips_debug:ipsec_sa_getbyid: linked entry in ipsec_sa table for hash=154 of SA:esp0x2d289485@190.3.63.165 requested. Feb 1 20:32:54 mza kernel: klips_debug:ipsec_sa_getbyid: no entries in ipsec_sa table for hash=154 of SA:esp0x2d289485@190.3.63.165. Feb 1 20:32:54 mza kernel: klips_debug:ipsec_rcv: no ipsec_sa for SA:esp0x2d289485@190.3.63.165: incoming packet with no SA dropped Feb 1 20:32:54 mza kernel: klips_debug:ipsec_rcv: decap_once failed: -7 Feb 1 20:32:54 mza kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 Feb 1 20:32:54 mza kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0. Feb 1 20:32:54 mza kernel: klips_debug: IP: ihl:20 ver:4 tos:0 tlen:104 id:26599 frag_off:0 ttl:60 proto:50 chk:59029 saddr:200.123.105.195 daddr:190.3.63.165 Feb 1 20:32:54 mza kernel: klips_debug:ipsec_rcv_decap_once: decap (50) from 200.123.105.195 -> 190.3.63.165 Feb 1 20:32:54 mza kernel: klips_debug:ipsec_sa_getbyid: linked entry in ipsec_sa table for hash=154 of SA:esp0x2d289485@190.3.63.165 requested. Feb 1 20:32:54 mza kernel: klips_debug:ipsec_sa_getbyid: no entries in ipsec_sa table for hash=154 of SA:esp0x2d289485@190.3.63.165. Feb 1 20:32:54 mza kernel: klips_debug:ipsec_rcv: no ipsec_sa for SA:esp0x2d289485@190.3.63.165: incoming packet with no SA dropped Feb 1 20:32:54 mza kernel: klips_debug:ipsec_rcv: decap_once failed: -7 Feb 1 20:32:54 mza kernel: klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth0 dev=eth0 Feb 1 20:32:54 mza kernel: klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth0. Feb 1 20:32:54 mza kernel: klips_debug: IP: ihl:20 ver:4 tos:0 tlen:104 id:26600 frag_off:0 ttl:60 proto:50 chk:59028 saddr:200.123.105.195 daddr:190.3.63.165 Feb 1 20:32:54 mza kernel: klips_debug:ipsec_rcv_decap_once: decap (50) from 200.123.105.195 -> 190.3.63.165 Feb 1 20:32:54 mza kernel: klips_debug:ipsec_sa_getbyid: linked entry in ipsec_sa table for hash=154 of SA:esp0x2d289485@190.3.63.165 requested. Feb 1 20:32:54 mza kernel: klips_debug:ipsec_sa_getbyid: no entries in ipsec_sa table for hash=154 of SA:esp0x2d289485@190.3.63.165. Feb 1 20:32:54 mza kernel: klips_debug:ipsec_rcv: no ipsec_sa for SA:esp0x2d289485@190.3.63.165: incoming packet with no SA dropped Feb 1 20:32:54 mza kernel: klips_debug:ipsec_rcv: decap_once failed: -7