[Swan] Pluto consumes all available memory

Will Roberts ironwill42 at gmail.com
Wed Apr 29 04:31:03 EEST 2015


We recently switched to Libreswan 3.12 from OpenSwan. Over the past week 
I've started having some connectivity issues with a few of my servers. 
After the SA is established the following message is logged:

Apr 28 13:42:13 sanfrancisco pluto[16567]: "L2TP"[20074] <ip goes here> 
#41490: unable to popen up-host command

I haven't had any luck searching for that phrase on Google thus far. 
Restarting the ipsec services appears to correct the connectivity issue. 
Prior to restarting the services, pluto was using a fair amount of memory:

22422 root      20   0  245m 139m 1652 S   0.0 28.2  41:24.35 pluto

versus afterwards:

24216 root      20   0  110m 6952 4668 S   0.0  1.4   0:00.17 pluto

I'm running Debian 7.x 64bit on my servers. My monitoring infrastructure 
will set up short-lived tunnels to the servers to verify that they are 
accepting connections and able to properly route traffic. Let me know if 
there's anything else I can provide to help diagnose this.


More information about the Swan mailing list