I'm running the release version or OpenBSD 4.0 on my firewall and
experiencing some odd IPSEC VPN behavior when connecting to a Fortigate
peer. The tunnel will come up just fine but will randomly go down and
then come back up and will continue this cycle. I am running isakmpd
with the -K option and using ipsecctl to establish flows and SA's. This
is what my ipsec.conf looks like:
remote_gw = "10.1.1.1"
flow esp from 192.168.8.1/32 to 192.168.0.0/16 peer $remote_gw type
bypass
ike dynamic esp from 192.168.8.0/24 to 192.168.0.0/16 peer $remote_gw \
aggressive auth hmac-sha1 enc 3des group modp1536 \
quick auth hmac-sha1 enc 3des group modp1536 \
srcid [EMAIL PROTECTED] \
psk sharedsecret
The peer is DPD capable and enabled with the following settings:
retry-count: 3
retry-interval: 5
After running isakmpd in debug mode (isakmpd -d -DA=50 -K) and after
running ipsecctl I issued a continuous ping to one of the hosts at the
other side of the tunnel. The ping ran fine for a period of time and
then stopped. Here is the ouput from the debug:
073059.683292 Cryp 30 crypto_decrypt: after decryption:
073059.686654 Cryp 30 01000018 fbbe1146 c43cf921 dc386a4a 0dfc2751
e4cf2a6d 0a000034 00000001
073059.689438 Cryp 30 00000001 00000028 01030401 f286fdea 0000001c
01030000 80010001 800204b0
073059.692737 Cryp 30 80040001 80050002 80030005 04000014 c5664590
c4700a67 9cec6a71 633ffd8c
073059.695546 Cryp 30 050000c4 6214a4ed 31ca88ca 0945b3d6 dd2c44ef
d03b008d 72b5ea00 273d3e0a
073059.698996 Cryp 30 5ec40d98 02c0ebad e3eac805 f87fa1ee 1142e2fd
92aee043 09e84e1c 3788c268
073059.701817 Cryp 30 4fdab8c6 1cbfad15 8123a459 df7a9a3b 66db84c5
59211ec4 90882bfc 2ae61c66
073059.705109 Cryp 30 6d35acdf 585d0b08 c5560cf9 d4a996a7 32a18daa
d3385206 7ce49f52 f5bab82c
073059.707999 Cryp 30 12b6cc01 29fec19b 3f582995 e80637b4 5e99d396
3a3b650b 2d78dd5f 44879af5
073059.711332 Cryp 30 1f8e016d 27c69817 341c6984 52e4f663 175db8ba
c206fb2b 08b9d0df f46705c1
073059.714125 Cryp 30 5a7d0a5a 05000010 04000000 0a4c0800 ffffff00
00000010 04000000 0a4c0000
073059.717252 Cryp 30 ffff0000 00000000
073059.719573 Mesg 50 message_parse_payloads: offset 28 payload HASH
073059.722425 Mesg 50 message_parse_payloads: offset 52 payload SA
073059.724772 Mesg 50 message_parse_payloads: offset 104 payload NONCE
073059.727806 Mesg 50 message_parse_payloads: offset 124 payload
KEY_EXCH
073059.730126 Mesg 50 message_parse_payloads: offset 320 payload ID
073059.733027 Mesg 50 message_parse_payloads: offset 336 payload ID
073059.735500 Mesg 50 message_parse_payloads: offset 64 payload PROPOSAL
073059.738492 Mesg 50 message_parse_payloads: offset 76 payload
TRANSFORM
073059.740835 Mesg 50 Transform 1's attributes
073059.743665 Mesg 50 Attribute SA_LIFE_TYPE value 1
073059.745973 Mesg 50 Attribute SA_LIFE_DURATION value 1200
073059.749044 Mesg 50 Attribute ENCAPSULATION_MODE value 1
073059.751324 Mesg 50 Attribute AUTHENTICATION_ALGORITHM value 2
073059.754161 Mesg 50 Attribute GROUP_DESCRIPTION value 5
073059.757008 Mesg 40 ipsec_validate_id_information: proto 0 port 0 type
4
073059.761190 Mesg 40 ipsec_validate_id_information: IPv4
network/netmask:
073059.763556 Mesg 40 0a4c0800 ffffff00
073059.766532 Mesg 40 ipsec_validate_id_information: proto 0 port 0 type
4
073059.768913 Mesg 40 ipsec_validate_id_information: IPv4
network/netmask:
073059.771838 Mesg 40 0a4c0000 ffff0000
073059.774860 Misc 20 ipsec_decode_transform: transform 1 chosen
073059.778019 Cryp 50 crypto_update_iv: updated IV:
073059.780420 Cryp 50 acdf5f44 564c53bf
073059.783186 Exch 40 exchange_run: exchange 0x8990e000 finished step 1,
advancing...
073059.786754 Cryp 30 crypto_encrypt: before encryption:
073059.789907 Cryp 30 00000018 ffd2fd35 9f9703b5 931c4a0e a7a39fd6
38d67537
073059.792339 Cryp 30 crypto_encrypt: after encryption:
073059.795498 Cryp 30 29a4e78f 474a5a98 2f00dcca b662924e d5de0039
29beb555
073059.797975 Cryp 50 crypto_update_iv: updated IV:
073059.800865 Cryp 50 d5de0039 29beb555
073059.804274 Exch 40 exchange_run: exchange 0x8990e000 finished step 2,
advancing...
073102.451676 Exch 10 exchange_finalize: 0x8990e000
IPsec-10.76.8.0/24-10.76.0.0/16 qm-10.76.8.0/24-10.76.0.0/16 policy
initiator phase 2 doi 1 exchange 32 step 3
073102.454201 Exch 10 exchange_finalize: icookie 24ecf40d73ec86fa
rcookie b49a30f91498c9f5
073102.457290 Exch 10 exchange_finalize: msgid 803a2cca sa_list
0x8990e100
073102.461087 Sdep 40 pf_key_v2_convert_id: UFQDN [EMAIL PROTECTED]
073102.464038 Sdep 40 pf_key_v2_convert_id: IPv4 address
64.254.145.133/32
073102.466674 Sdep 10 pf_key_v2_set_spi: satype 2 dst 64.254.145.133 SPI
0xf286fdea
073102.469698 Timr 10 timer_add_event: event sa_soft_expire(0x8990e100)
added before sa_soft_expire(0x7ec2f900), expiration in 1051s
073102.472224 Timr 10 timer_add_event: event sa_hard_expire(0x8990e100)
added before sa_soft_expire(0x7ec2f900), expiration in 1200s
073102.477810 Sdep 50 pf_key_v2_set_spi: done
073102.480684 Sdep 40 pf_key_v2_convert_id: UFQDN [EMAIL PROTECTED]
073102.483711 Sdep 40 pf_key_v2_convert_id: IPv4 address
64.254.145.133/32
073102.486343 Sdep 10 pf_key_v2_set_spi: satype 2 dst 64.46.13.251 SPI
0xbd254135
073102.493179 Sdep 50 pf_key_v2_set_spi: done
073102.495765 Exch 50 ipsec_finalize_exchange: src 10.76.8.0
255.255.255.0 dst 10.76.0.0 255.255.0.0 tproto 0 sport 0 dport 0
073102.499028 Sdep 40 pf_key_v2_convert_id: UFQDN [EMAIL PROTECTED]
073102.501404 Sdep 40 pf_key_v2_convert_id: IPv4 address
64.254.145.133/32
073102.504574 Sdep 50 pf_key_v2_flow: src 10.76.8.0 255.255.255.0 dst
10.76.0.0 255.255.0.0 proto 0 sport 0 dport 0
073102.508739 Misc 50 pf_key_v2_flow: ADDFLOW: done
073102.511924 Sdep 50 pf_key_v2_flow: src 10.76.0.0 255.255.0.0 dst
10.76.8.0 255.255.255.0 proto 0 sport 0 dport 0
073102.515942 Misc 50 pf_key_v2_flow: ADDFLOW: done
073104.623456 Timr 10 timer_handle_expirations: event
dpd_event(0x7ec2f900)
073104.627099 Sdep 50 pf_key_v2_get_kernel_sa: spi:
073104.629932 Sdep 50 bd254135
073104.632377 Mesg 30 dpd_event: sending R_U_THERE to 64.254.145.133 seq
28518
073104.635623 Timr 10 timer_add_event: event
exchange_free_aux(0x8990e800) added before sa_soft_expire(0x8990e100),
expiration in 120s
073104.638135 Exch 10 exchange_establish_p2: 0x8990e800 <unnamed> <no
policy> policy initiator phase 2 doi 1 exchange 5 step 0
073104.641155 Exch 10 exchange_establish_p2: icookie 24ecf40d73ec86fa
rcookie b49a30f91498c9f5
073104.643647 Exch 10 exchange_establish_p2: msgid 25ae751d sa_list
073104.647421 Cryp 50 crypto_init_iv: initialized IV:
073104.649771 Cryp 50 ec1d5fb7 8ddc0509
073104.652550 Cryp 30 crypto_encrypt: before encryption:
073104.655412 Cryp 30 0b000018 3ed5e1c1 b444b7e3 72d6f523 798bb359
c4cbcc31 00000020 00000001
073104.658598 Cryp 30 01108d28 24ecf40d 73ec86fa b49a30f9 1498c9f5
00006f66
073104.661119 Cryp 30 crypto_encrypt: after encryption:
073104.664495 Cryp 30 821eb041 132621ed b7f36cd9 e4e13443 d29754d8
65541eeb d57aeb25 69be3a8b
073104.667150 Cryp 30 78a3459d 2e62c155 45e420bc a4b137b0 87fb22ac
41f5d87c
073104.669917 Cryp 50 crypto_update_iv: updated IV:
073104.672326 Cryp 50 87fb22ac 41f5d87c
073104.676781 Exch 40 exchange_run: exchange 0x8990e800 finished step 0,
advancing...
073104.679230 Timr 10 timer_add_event: event dpd_check_event(0x7ec2f900)
added before connection_checker(0x83f01f90), expiration in 5s
073104.684255 Exch 10 exchange_finalize: 0x8990e800 <unnamed> <no
policy> policy initiator phase 2 doi 1 exchange 5 step 1
073104.687543 Exch 10 exchange_finalize: icookie 24ecf40d73ec86fa
rcookie b49a30f91498c9f5
073104.689876 Exch 10 exchange_finalize: msgid 25ae751d sa_list
073104.692739 Timr 10 timer_remove_event: removing event
exchange_free_aux(0x8990e800)
073104.695448 Mesg 20 message_free: freeing 0x7f49d680
073104.698913 Trpt 50 virtual_clone: old 0x7c617840 new 0x7c617e40 (main
is 0x7c617ec0)
073104.703249 Cryp 50 crypto_init_iv: initialized IV:
073104.706258 Cryp 50 3b61e1be 8116d41a
073104.708485 Cryp 30 crypto_decrypt: before decryption:
073104.711724 Cryp 30 705cd77b 436bf282 3c04a02d 3936ac8a 214892a6
9999b5c7 089cbfbb 626937bd
073104.714537 Cryp 30 5614eda7 57c70fd5 1885574d f73b5d90 714c310d
4937eeae
073104.717623 Cryp 30 crypto_decrypt: after decryption:
073104.720307 Cryp 30 0b000018 f9d41491 1c4ce188 0f9a0fe1 62815061
bd0b0716 00000020 00000000
073104.723490 Cryp 30 01108d29 24ecf40d 73ec86fa b49a30f9 1498c9f5
00006f66
073104.726029 Mesg 50 message_parse_payloads: offset 28 payload HASH
073104.728880 Mesg 50 message_parse_payloads: offset 52 payload NOTIFY
073104.731966 Timr 10 timer_add_event: event
exchange_free_aux(0x8990e800) added before sa_soft_expire(0x8990e100),
expiration in 120s
073104.735157 Exch 10 exchange_setup_p2: 0x8990e800 <unnamed> <no
policy> policy responder phase 2 doi 0 exchange 5 step 0
073104.737548 Exch 10 exchange_setup_p2: icookie 24ecf40d73ec86fa
rcookie b49a30f91498c9f5
073104.740396 Exch 10 exchange_setup_p2: msgid 810be5d8 sa_list
073104.742838 Exch 10 isakmp_responder: got NOTIFY of type
STATUS_DPD_R_U_THERE_ACK, ignoring
073104.745880 Cryp 50 crypto_update_iv: updated IV:
073104.748247 Cryp 50 714c310d 4937eeae
073104.751107 Exch 10 exchange_finalize: 0x8990e800 <unnamed> <no
policy> policy responder phase 2 doi 0 exchange 5 step 0
073104.753497 Exch 10 exchange_finalize: icookie 24ecf40d73ec86fa
rcookie b49a30f91498c9f5
073104.757525 Exch 10 exchange_finalize: msgid 810be5d8 sa_list
073104.760381 Timr 10 timer_remove_event: removing event
exchange_free_aux(0x8990e800)
073104.762718 Mesg 20 message_free: freeing 0x7f49d580
073109.710915 Timr 10 timer_handle_expirations: event
dpd_check_event(0x7ec2f900)
073109.713467 Mesg 10 dpd_check_event: peer not responding, retry 1 of 5
073109.716777 Timr 10 timer_add_event: event
exchange_free_aux(0x8990e800) added before sa_soft_expire(0x8990e100),
expiration in 120s
073109.719584 Exch 10 exchange_establish_p2: 0x8990e800 <unnamed> <no
policy> policy initiator phase 2 doi 1 exchange 5 step 0
073109.722996 Exch 10 exchange_establish_p2: icookie 24ecf40d73ec86fa
rcookie b49a30f91498c9f5
073109.725647 Exch 10 exchange_establish_p2: msgid 045d80fd sa_list
073109.729690 Cryp 50 crypto_init_iv: initialized IV:
073109.731097 Cryp 50 40242559 9a59929b
073109.731584 Cryp 30 crypto_encrypt: before encryption:
073109.732410 Cryp 30 0b000018 205ed6ba 9bfbfbc6 eb6dd42a 464a823d
aa0d88a6 00000020 00000001
073109.733137 Cryp 30 01108d28 24ecf40d 73ec86fa b49a30f9 1498c9f5
00006f66
073109.733801 Cryp 30 crypto_encrypt: after encryption:
073109.734655 Cryp 30 1aa369dc b5f2eb1d 0792ac76 0a363d7c 729e971d
714db022 9c29522f c4fb4c1b
073109.735324 Cryp 30 c0ce4912 861d1ae8 db1f3446 95ec9318 f0919714
bbb4b78d
073109.735678 Cryp 50 crypto_update_iv: updated IV:
073109.736120 Cryp 50 f0919714 bbb4b78d
073109.738107 Exch 40 exchange_run: exchange 0x8990e800 finished step 0,
advancing...
073109.738624 Timr 10 timer_add_event: event dpd_check_event(0x7ec2f900)
added before connection_checker(0x83f01f90), expiration in 5s
073109.740108 Exch 10 exchange_finalize: 0x8990e800 <unnamed> <no
policy> policy initiator phase 2 doi 1 exchange 5 step 1
073109.740587 Exch 10 exchange_finalize: icookie 24ecf40d73ec86fa
rcookie b49a30f91498c9f5
073109.742469 Exch 10 exchange_finalize: msgid 045d80fd sa_list
073109.742934 Timr 10 timer_remove_event: removing event
exchange_free_aux(0x8990e800)
073109.743488 Mesg 20 message_free: freeing 0x7f49d680
073109.744639 Trpt 50 virtual_clone: old 0x7c617840 new 0x7c617e40 (main
is 0x7c617ec0)
073109.747088 Cryp 50 crypto_init_iv: initialized IV:
073109.747602 Cryp 50 f967debe 475930b5
073109.747959 Cryp 30 crypto_decrypt: before decryption:
073109.748752 Cryp 30 e46ac69b 11732861 e60f42a4 240dcf29 4d2739ab
52f65650 cf293a40 a387f3b8
073109.749399 Cryp 30 2f548453 26bed8d8 7b3cafb8 16a4cd3e 4115d79d
58891336
073109.750059 Cryp 30 crypto_decrypt: after decryption:
073109.751012 Cryp 30 0b000018 e68954ad e0caca7c bb808141 501694f5
e4e080b4 00000020 00000000
073109.751689 Cryp 30 01108d29 24ecf40d 73ec86fa b49a30f9 1498c9f5
00006f66
073109.752137 Mesg 50 message_parse_payloads: offset 28 payload HASH
073109.752559 Mesg 50 message_parse_payloads: offset 52 payload NOTIFY
073109.753798 Timr 10 timer_add_event: event
exchange_free_aux(0x8990e800) added before sa_soft_expire(0x8990e100),
expiration in 120s
073109.757215 Exch 10 exchange_setup_p2: 0x8990e800 <unnamed> <no
policy> policy responder phase 2 doi 0 exchange 5 step 0
073109.757660 Exch 10 exchange_setup_p2: icookie 24ecf40d73ec86fa
rcookie b49a30f91498c9f5
073109.758049 Exch 10 exchange_setup_p2: msgid 3b7a7184 sa_list
073109.758544 Exch 10 isakmp_responder: got NOTIFY of type
STATUS_DPD_R_U_THERE_ACK, ignoring
073109.759023 Cryp 50 crypto_update_iv: updated IV:
073109.759481 Cryp 50 4115d79d 58891336
073109.759880 Exch 10 exchange_finalize: 0x8990e800 <unnamed> <no
policy> policy responder phase 2 doi 0 exchange 5 step 0
073109.760279 Exch 10 exchange_finalize: icookie 24ecf40d73ec86fa
rcookie b49a30f91498c9f5
073109.760651 Exch 10 exchange_finalize: msgid 3b7a7184 sa_list
073109.761236 Timr 10 timer_remove_event: removing event
exchange_free_aux(0x8990e800)
073109.761651 Mesg 20 message_free: freeing 0x7f49d580
073114.768230 Timr 10 timer_handle_expirations: event
dpd_check_event(0x7ec2f900)
073114.770793 Mesg 10 dpd_check_event: peer not responding, retry 2 of 5
073114.774140 Timr 10 timer_add_event: event
exchange_free_aux(0x8990e800) added before sa_soft_expire(0x8990e100),
expiration in 120s
073114.776877 Exch 10 exchange_establish_p2: 0x8990e800 <unnamed> <no
policy> policy initiator phase 2 doi 1 exchange 5 step 0
073114.780309 Exch 10 exchange_establish_p2: icookie 24ecf40d73ec86fa
rcookie b49a30f91498c9f5
073114.782919 Exch 10 exchange_establish_p2: msgid 8eaab5a5 sa_list
073114.786961 Cryp 50 crypto_init_iv: initialized IV:
073114.789717 Cryp 50 596a5635 d2586115
073114.792778 Cryp 30 crypto_encrypt: before encryption:
073114.795722 Cryp 30 0b000018 7965f357 6eb1dd37 88314ae4 78b9de86
942b6cb1 00000020 00000001
073114.799370 Cryp 30 01108d28 24ecf40d 73ec86fa b49a30f9 1498c9f5
00006f66
073114.802116 Cryp 30 crypto_encrypt: after encryption:
073114.805685 Cryp 30 c9711d1d 654db117 4c58dfe9 ec75e422 ae7a5732
6eb2fafc d991f931 54404ad1
073114.810459 Cryp 30 202f9a4c bbe6022e aba05569 78503dd6 682a1204
c443b58d
073114.812976 Cryp 50 crypto_update_iv: updated IV:
073114.816141 Cryp 50 682a1204 c443b58d
073114.820472 Exch 40 exchange_run: exchange 0x8990e800 finished step 0,
advancing...
073114.823690 Timr 10 timer_add_event: event dpd_check_event(0x7ec2f900)
added before connection_checker(0x83f01f90), expiration in 5s
073114.827416 Exch 10 exchange_finalize: 0x8990e800 <unnamed> <no
policy> policy initiator phase 2 doi 1 exchange 5 step 1
073114.831138 Exch 10 exchange_finalize: icookie 24ecf40d73ec86fa
rcookie b49a30f91498c9f5
073114.833699 Exch 10 exchange_finalize: msgid 8eaab5a5 sa_list
073114.836861 Timr 10 timer_remove_event: removing event
exchange_free_aux(0x8990e800)
073114.839671 Mesg 20 message_free: freeing 0x7f49d680
073114.843516 Trpt 50 virtual_clone: old 0x7c617840 new 0x7c617e40 (main
is 0x7c617ec0)
073114.848094 Cryp 50 crypto_init_iv: initialized IV:
073114.851491 Cryp 50 785ab762 b6e49448
073114.853929 Cryp 30 crypto_decrypt: before decryption:
073114.857409 Cryp 30 a1c765f0 073bb7b2 c8f39e6e 8c61b188 c8bb9079
a9b043cd 15c0fda7 cce9f478
073114.860590 Cryp 30 854b764c 14713b3a 062aec9b e45637be 2fdaee70
ae83da00
073114.863889 Cryp 30 crypto_decrypt: after decryption:
073114.866850 Cryp 30 0b000018 cc20a17a 00227033 675b11af 9fc22c4d
b54b4158 00000020 00000000
073114.870490 Cryp 30 01108d29 24ecf40d 73ec86fa b49a30f9 1498c9f5
00006f66
073114.873060 Mesg 50 message_parse_payloads: offset 28 payload HASH
073114.876233 Mesg 50 message_parse_payloads: offset 52 payload NOTIFY
073114.879724 Timr 10 timer_add_event: event
exchange_free_aux(0x8990e800) added before sa_soft_expire(0x8990e100),
expiration in 120s
073114.883044 Exch 10 exchange_setup_p2: 0x8990e800 <unnamed> <no
policy> policy responder phase 2 doi 0 exchange 5 step 0
073114.885643 Exch 10 exchange_setup_p2: icookie 24ecf40d73ec86fa
rcookie b49a30f91498c9f5
073114.888864 Exch 10 exchange_setup_p2: msgid 5b05fac5 sa_list
073114.891519 Exch 10 isakmp_responder: got NOTIFY of type
STATUS_DPD_R_U_THERE_ACK, ignoring
073114.894730 Cryp 50 crypto_update_iv: updated IV:
073114.897361 Cryp 50 2fdaee70 ae83da00
073114.900581 Exch 10 exchange_finalize: 0x8990e800 <unnamed> <no
policy> policy responder phase 2 doi 0 exchange 5 step 0
073114.903167 Exch 10 exchange_finalize: icookie 24ecf40d73ec86fa
rcookie b49a30f91498c9f5
073114.907115 Exch 10 exchange_finalize: msgid 5b05fac5 sa_list
073114.910383 Timr 10 timer_remove_event: removing event
exchange_free_aux(0x8990e800)
073114.912988 Mesg 20 message_free: freeing 0x7f49d580
073119.845618 Timr 10 timer_handle_expirations: event
dpd_check_event(0x7ec2f900)
073119.848172 Mesg 10 dpd_check_event: peer not responding, retry 3 of 5
073119.851498 Timr 10 timer_add_event: event
exchange_free_aux(0x8990e800) added before sa_soft_expire(0x8990e100),
expiration in 120s
073119.854239 Exch 10 exchange_establish_p2: 0x8990e800 <unnamed> <no
policy> policy initiator phase 2 doi 1 exchange 5 step 0
073119.857631 Exch 10 exchange_establish_p2: icookie 24ecf40d73ec86fa
rcookie b49a30f91498c9f5
073119.860272 Exch 10 exchange_establish_p2: msgid 0969c3d5 sa_list
073119.864312 Cryp 50 crypto_init_iv: initialized IV:
073119.865905 Cryp 50 d410abee 10aaaaa4
073119.866436 Cryp 30 crypto_encrypt: before encryption:
073119.867266 Cryp 30 0b000018 3a629976 dcf59dba ceee513a bff13d62
c69cc827 00000020 00000001
073119.867940 Cryp 30 01108d28 24ecf40d 73ec86fa b49a30f9 1498c9f5
00006f66
073119.868592 Cryp 30 crypto_encrypt: after encryption:
073119.869444 Cryp 30 86dd8be2 59cda975 d15fff18 ab6be82e ed376d0e
68fe743f 4bf4be3b 5d9d5863
073119.870121 Cryp 30 cd497fa9 27cdb839 c0d6058d a808bbeb 3765e288
3ea9529d
073119.870476 Cryp 50 crypto_update_iv: updated IV:
073119.870921 Cryp 50 3765e288 3ea9529d
073119.872916 Exch 40 exchange_run: exchange 0x8990e800 finished step 0,
advancing...
073119.873433 Timr 10 timer_add_event: event dpd_check_event(0x7ec2f900)
added before exchange_free_aux(0x7ec2f800), expiration in 5s
073119.874958 Exch 10 exchange_finalize: 0x8990e800 <unnamed> <no
policy> policy initiator phase 2 doi 1 exchange 5 step 1
073119.875552 Exch 10 exchange_finalize: icookie 24ecf40d73ec86fa
rcookie b49a30f91498c9f5
073119.877133 Exch 10 exchange_finalize: msgid 0969c3d5 sa_list
073119.877595 Timr 10 timer_remove_event: removing event
exchange_free_aux(0x8990e800)
073119.878148 Mesg 20 message_free: freeing 0x7f49d680
073119.879297 Trpt 50 virtual_clone: old 0x7c617840 new 0x7c617e40 (main
is 0x7c617ec0)
073119.881746 Cryp 50 crypto_init_iv: initialized IV:
073119.882313 Cryp 50 923596e9 d4325ce3
073119.882671 Cryp 30 crypto_decrypt: before decryption:
073119.883407 Cryp 30 931e8baf 42666149 fb2807ed 72f9f59b e221a63f
2595a522 ec2283a7 bed4877b
073119.884046 Cryp 30 70b4a25c d3883963 e9a62047 c80e46ca 1f168175
0fd2ba6d
073119.884708 Cryp 30 crypto_decrypt: after decryption:
073119.885687 Cryp 30 0b000018 750f9416 20d1bd38 87c6dc77 c5ceeb9c
d25a416b 00000020 00000000
073119.886371 Cryp 30 01108d29 24ecf40d 73ec86fa b49a30f9 1498c9f5
00006f66
073119.886823 Mesg 50 message_parse_payloads: offset 28 payload HASH
073119.887251 Mesg 50 message_parse_payloads: offset 52 payload NOTIFY
073119.888491 Timr 10 timer_add_event: event
exchange_free_aux(0x8990e800) added before sa_soft_expire(0x8990e100),
expiration in 120s
073119.891911 Exch 10 exchange_setup_p2: 0x8990e800 <unnamed> <no
policy> policy responder phase 2 doi 0 exchange 5 step 0
073119.892358 Exch 10 exchange_setup_p2: icookie 24ecf40d73ec86fa
rcookie b49a30f91498c9f5
073119.892748 Exch 10 exchange_setup_p2: msgid 27832a73 sa_list
073119.893241 Exch 10 isakmp_responder: got NOTIFY of type
STATUS_DPD_R_U_THERE_ACK, ignoring
073119.893719 Cryp 50 crypto_update_iv: updated IV:
073119.894179 Cryp 50 1f168175 0fd2ba6d
073119.894583 Exch 10 exchange_finalize: 0x8990e800 <unnamed> <no
policy> policy responder phase 2 doi 0 exchange 5 step 0
073119.894982 Exch 10 exchange_finalize: icookie 24ecf40d73ec86fa
rcookie b49a30f91498c9f5
073119.895355 Exch 10 exchange_finalize: msgid 27832a73 sa_list
073119.895940 Timr 10 timer_remove_event: removing event
exchange_free_aux(0x8990e800)
073119.896355 Mesg 20 message_free: freeing 0x7f49d580
073122.013042 Timr 10 timer_handle_expirations: event
connection_checker(0x83f01f90)
073122.015767 Timr 10 timer_add_event: event
connection_checker(0x83f01f90) added before
exchange_free_aux(0x7ec2f800), expiration in 30s
073124.892907 Timr 10 timer_handle_expirations: event
dpd_check_event(0x7ec2f900)
073124.895437 Mesg 10 dpd_check_event: peer not responding, retry 4 of 5
073124.898782 Timr 10 timer_add_event: event
exchange_free_aux(0x8990e800) added before sa_soft_expire(0x8990e100),
expiration in 120s
073124.901512 Exch 10 exchange_establish_p2: 0x8990e800 <unnamed> <no
policy> policy initiator phase 2 doi 1 exchange 5 step 0
073124.904930 Exch 10 exchange_establish_p2: icookie 24ecf40d73ec86fa
rcookie b49a30f91498c9f5
073124.907583 Exch 10 exchange_establish_p2: msgid 63cb3925 sa_list
073124.911634 Cryp 50 crypto_init_iv: initialized IV:
073124.914397 Cryp 50 dede69b2 53e715d3
073124.917470 Cryp 30 crypto_encrypt: before encryption:
073124.920402 Cryp 30 0b000018 06de0d31 5d328b18 6f6675fa 9e96289e
3cfda2d1 00000020 00000001
073124.924034 Cryp 30 01108d28 24ecf40d 73ec86fa b49a30f9 1498c9f5
00006f66
073124.926781 Cryp 30 crypto_encrypt: after encryption:
073124.930344 Cryp 30 d147f00f 5bdbf4fc 558dcb52 6e3a14c8 b6364526
df6a17cf 57a9759e 61aa615b
073124.933467 Cryp 30 8b516cc1 0da2a726 17fb4a11 fed154d2 11e89817
a2a5fd47
073124.936503 Cryp 50 crypto_update_iv: updated IV:
073124.939136 Cryp 50 11e89817 a2a5fd47
073124.943963 Exch 40 exchange_run: exchange 0x8990e800 finished step 0,
advancing...
073124.946628 Timr 10 timer_add_event: event dpd_check_event(0x7ec2f900)
added before connection_checker(0x83f01f90), expiration in 5s
073124.950878 Exch 10 exchange_finalize: 0x8990e800 <unnamed> <no
policy> policy initiator phase 2 doi 1 exchange 5 step 1
073124.954056 Exch 10 exchange_finalize: icookie 24ecf40d73ec86fa
rcookie b49a30f91498c9f5
073124.957183 Exch 10 exchange_finalize: msgid 63cb3925 sa_list
073124.959729 Timr 10 timer_remove_event: removing event
exchange_free_aux(0x8990e800)
073124.963458 Mesg 20 message_free: freeing 0x7f49d680
073124.966673 Trpt 50 virtual_clone: old 0x7c617840 new 0x7c617e40 (main
is 0x7c617ec0)
073124.973426 Cryp 50 crypto_init_iv: initialized IV:
073124.976067 Cryp 50 3902ba05 97e92088
073124.979090 Cryp 30 crypto_decrypt: before decryption:
073124.981985 Cryp 30 5f07aeb1 e39f94a3 4caf922f f98281e8 1ccdcd95
95b87cea cc499c50 f9faaee1
073124.983549 Cryp 30 4615be2d a8b8b473 edd57954 9847f8e0 4c999e96
d14d4806
073124.984321 Cryp 30 crypto_decrypt: after decryption:
073124.985139 Cryp 30 0b000018 87067333 c95611e8 e68b7e15 75ec0b3e
af97aa18 00000020 00000000
073124.985781 Cryp 30 01108d29 24ecf40d 73ec86fa b49a30f9 1498c9f5
00006f66
073124.986232 Mesg 50 message_parse_payloads: offset 28 payload HASH
073124.986656 Mesg 50 message_parse_payloads: offset 52 payload NOTIFY
073124.987893 Timr 10 timer_add_event: event
exchange_free_aux(0x8990e800) added before sa_soft_expire(0x8990e100),
expiration in 120s
073124.988420 Exch 10 exchange_setup_p2: 0x8990e800 <unnamed> <no
policy> policy responder phase 2 doi 0 exchange 5 step 0
073124.988836 Exch 10 exchange_setup_p2: icookie 24ecf40d73ec86fa
rcookie b49a30f91498c9f5
073124.989223 Exch 10 exchange_setup_p2: msgid df3a0498 sa_list
073124.989720 Exch 10 isakmp_responder: got NOTIFY of type
STATUS_DPD_R_U_THERE_ACK, ignoring
073124.990196 Cryp 50 crypto_update_iv: updated IV:
073124.990658 Cryp 50 4c999e96 d14d4806
073124.992164 Exch 10 exchange_finalize: 0x8990e800 <unnamed> <no
policy> policy responder phase 2 doi 0 exchange 5 step 0
073124.992606 Exch 10 exchange_finalize: icookie 24ecf40d73ec86fa
rcookie b49a30f91498c9f5
073124.993116 Exch 10 exchange_finalize: msgid df3a0498 sa_list
073124.993573 Timr 10 timer_remove_event: removing event
exchange_free_aux(0x8990e800)
073124.993984 Mesg 20 message_free: freeing 0x7f49d580
073129.980498 Timr 10 timer_handle_expirations: event
dpd_check_event(0x7ec2f900)
073129.983113 Mesg 10 dpd_check_event: peer is dead, deleting all SAs
connected to SA 0x7ec2f900
073129.986303 Mesg 30 dpd_check_event: deleting SA 0x8990e100
073129.988833 Timr 10 timer_remove_event: removing event
sa_hard_expire(0x8990e100)
073129.993721 Timr 10 timer_remove_event: removing event
sa_soft_expire(0x8990e100)
073129.996778 Sdep 50 pf_key_v2_flow: src 10.76.8.0 255.255.255.0 dst
10.76.0.0 255.255.0.0 proto 0 sport 0 dport 0
073130.001597 Misc 50 pf_key_v2_flow: DELFLOW: done
073130.004072 Sdep 50 pf_key_v2_delete_spi: removing configuration
IPsec-10.76.8.0/24-10.76.0.0/16
073130.008540 Sdep 50 pf_key_v2_delete_spi: done
073130.011664 Sdep 50 pf_key_v2_flow: src 10.76.0.0 255.255.0.0 dst
10.76.8.0 255.255.255.0 proto 0 sport 0 dport 0
073130.016270 Misc 50 pf_key_v2_flow: DELFLOW: done
073130.018758 Sdep 50 pf_key_v2_delete_spi: removing configuration
IPsec-10.76.8.0/24-10.76.0.0/16
073130.023378 Sdep 50 pf_key_v2_delete_spi: done
073130.026094 Mesg 30 dpd_check_event: deleting ISAKMP SA 0x7ec2f900
073130.029197 Timr 10 timer_remove_event: removing event
sa_hard_expire(0x7ec2f900)
073130.032064 Timr 10 timer_remove_event: removing event
sa_soft_expire(0x7ec2f900)
073134.214067 Trpt 50 virtual_clone: old 0x7c617840 new 0x7c617a80 (main
is 0x7c617dc0)
073134.216584 Default message_recv: invalid cookie(s) 24ecf40d73ec86fa
b49a30f91498c9f5
073134.217153 Default dropped message from 64.254.145.133 port 500 due
to notification type INVALID_COOKIE
073134.217777 Timr 10 timer_add_event: event
exchange_free_aux(0x8990e100) added last, expiration in 120s
073134.218511 Exch 10 exchange_establish_p1: 0x8990e100 <unnamed> <no
policy> policy initiator phase 1 doi 1 exchange 5 step 0
073134.218995 Exch 10 exchange_establish_p1: icookie 50bbc62ad93c41b8
rcookie 0000000000000000
073134.219372 Exch 10 exchange_establish_p1: msgid 00000000
073134.221242 Exch 40 exchange_run: exchange 0x8990e100 finished step 0,
advancing...
073134.221658 Mesg 20 message_free: freeing 0x7f49d580
073134.223246 Exch 10 exchange_finalize: 0x8990e100 <unnamed> <no
policy> policy initiator phase 1 doi 1 exchange 5 step 1
073134.223725 Exch 10 exchange_finalize: icookie 50bbc62ad93c41b8
rcookie 0000000000000000
073134.224481 Exch 10 exchange_finalize: msgid 00000000
073134.232371 Timr 10 timer_remove_event: removing event
exchange_free_aux(0x8990e100)
073134.236315 Mesg 20 message_free: freeing 0x7f49d780
073139.213198 Trpt 50 virtual_clone: old 0x7c617840 new 0x7c617a80 (main
is 0x7c617dc0)
073139.217207 Default message_recv: invalid cookie(s) 24ecf40d73ec86fa
b49a30f91498c9f5
073139.220194 Default dropped message from 64.254.145.133 port 500 due
to notification type INVALID_COOKIE
073139.222854 Timr 10 timer_add_event: event
exchange_free_aux(0x8990e100) added last, expiration in 120s
073139.225953 Exch 10 exchange_establish_p1: 0x8990e100 <unnamed> <no
policy> policy initiator phase 1 doi 1 exchange 5 step 0
073139.228474 Exch 10 exchange_establish_p1: icookie 46649c6b6b1a49cc
rcookie 0000000000000000
073139.231355 Exch 10 exchange_establish_p1: msgid 00000000
073139.233537 Exch 40 exchange_run: exchange 0x8990e100 finished step 0,
advancing...
073139.233928 Mesg 20 message_free: freeing 0x7f49d580
073139.235431 Exch 10 exchange_finalize: 0x8990e100 <unnamed> <no
policy> policy initiator phase 1 doi 1 exchange 5 step 1
073139.235875 Exch 10 exchange_finalize: icookie 46649c6b6b1a49cc
rcookie 0000000000000000
073139.236218 Exch 10 exchange_finalize: msgid 00000000
073139.236575 Timr 10 timer_remove_event: removing event
exchange_free_aux(0x8990e100)
073139.237017 Mesg 20 message_free: freeing 0x7f49d780
073144.212482 Trpt 50 virtual_clone: old 0x7c617840 new 0x7c617a80 (main
is 0x7c617dc0)
073144.216487 Default message_recv: invalid cookie(s) 24ecf40d73ec86fa
b49a30f91498c9f5
073144.219611 Default dropped message from 64.254.145.133 port 500 due
to notification type INVALID_COOKIE
073144.222154 Timr 10 timer_add_event: event
exchange_free_aux(0x8990e100) added last, expiration in 120s
073144.225241 Exch 10 exchange_establish_p1: 0x8990e100 <unnamed> <no
policy> policy initiator phase 1 doi 1 exchange 5 step 0
073144.227763 Exch 10 exchange_establish_p1: icookie 514947efa1455acb
rcookie 0000000000000000
073144.230770 Exch 10 exchange_establish_p1: msgid 00000000
073144.234510 Exch 40 exchange_run: exchange 0x8990e100 finished step 0,
advancing...
073144.237942 Mesg 20 message_free: freeing 0x7f49d580
073144.241933 Exch 10 exchange_finalize: 0x8990e100 <unnamed> <no
policy> policy initiator phase 1 doi 1 exchange 5 step 1
073144.244364 Exch 10 exchange_finalize: icookie 514947efa1455acb
rcookie 0000000000000000
073144.247178 Exch 10 exchange_finalize: msgid 00000000
073144.249426 Timr 10 timer_remove_event: removing event
exchange_free_aux(0x8990e100)
073144.249940 Mesg 20 message_free: freeing 0x7f49d780
^C073146.209599 Default isakmpd: shutting down...
073146.210056 Default isakmpd: exit
Any help is appreciated.
Cheers,
-Chris
