Hello René, On 25.04.2017 20:04, Rene Maurer wrote: > Meanwhile I have looked at the time stamps and IMHO they are a little bit > strange: > >>> Apr 25 16:32:28 daemon.info syslog: 05[NET] sending packet: from >>> 10.64.33.100[4500] to xxx.137.25.195[4500] (1120 bytes) >>> 16:32:32.802620 IP 10.64.33.100.4500 > xxx.137.25.195.4500: NONESP-encap: >>> isakmp: child_sa ikev2_auth[I] >>> Apr 25 16:32:32 daemon.info syslog: 03[IKE] retransmit 1 of request with >>> message ID 1 > strongSwan[NET] is sending the package 16:32:28. > The package is visible on ppp0 16:32:32. > 4 seconds... this seams to be charons retransmit_timeout (which we can see as > well). > > Is there an explanation for this behavior?
As you wrote, the link is a GPRS link, so it's anything but fast or responsive. It probably just takes four seconds to write the packet to the link, or you have a serious problem with the queueing discipline of the output interface (or the driver for the interface, or the whole kernel, or ...). It's definitively not something that's caused by strongSwan. Kind regards, Noel -- GPG Key ID: 0x63EC6658 Fingerprint: 23CA BB60 2146 05E7 7278 6592 3839 298F 63EC 6658
signature.asc
Description: OpenPGP digital signature
_______________________________________________ Users mailing list Users@lists.strongswan.org https://lists.strongswan.org/mailman/listinfo/users