[Swan] Odd messages in /var/log/secure
Madden, Joe
Joe.Madden at mottmac.com
Thu Feb 16 09:31:04 UTC 2017
Hi List, Paul,
Sorry it taken me a while to reproduce the issue - Finally have the debug logs to have a look though.
I've taken a look though them but I'd be lying if I said I understood it!
http://pastebin.com/ZuNBeVGJ
The far end is a StrongSWAN instance. I am not sure of the version yet. We restarted our end but only one tunnel came up again.
Any help would be great!
Thanks
Joe
-----Original Message-----
From: Paul Wouters [mailto:paul at nohats.ca]
Sent: 12 November 2016 04:56
To: Madden, Joe <Joe.Madden at mottmac.com>
Cc: swan at lists.libreswan.org
Subject: Re: [Swan] Odd messages in /var/log/secure
If you log with plutodebug=all we can look at the actual payloads and determine the bad values or problems and maybe understand it better. If possible let us also know what software the other end runs?
Sent from my iPhone
> On Nov 10, 2016, at 23:11, Madden, Joe <Joe.Madden at mottmac.com> wrote:
>
> Hi All,
>
> Seen a weird message which accoutred around the time of our VPN connection going down.
>
> Nov 10 13:45:34 hal-internal-firewall pluto[10724]:
> "ssl-iptrafficsig-1/1x0" #2748: transition from state STATE_QUICK_R0
> to state STATE_QUICK_R1 Nov 10 13:45:34 hal-internal-firewall
> pluto[10724]: "ssl-iptrafficsig-1/1x0" #2748: STATE_QUICK_R1: sent
> QR1, inbound IPsec SA installed, expecting QI2 tunnel mode {ESP/NAT=>0xc125a56b <0xcb2eb046 xfrm=AES_256-HMAC_SHA2_256 NATOA=none NATD=52.48.93.253:4500 DPD=passive} Nov 10 13:45:34 hal-internal-firewall pluto[10724]: "ssl-iptrafficsig-1/1x0" #2739: received 2 malformed payload notifies Nov 10 13:45:34 hal-internal-firewall pluto[10724]: "ssl-iptrafficsig-1/1x0" #2739: the peer proposed: 10.2.170.0/26:0/0 -> 10.199.0.0/28:0/0 Nov 10 13:45:34 hal-internal-firewall pluto[10724]: "ssl-iptrafficsig-1/1x0" #2749: responding to Quick Mode proposal {msgid:17fd3082}
> Nov 10 13:45:34 hal-internal-firewall pluto[10724]: "ssl-iptrafficsig-1/1x0" #2749: us: 10.2.170.0/26===10.59.31.49<10.59.31.49>[193.195.162.135]
> Nov 10 13:45:34 hal-internal-firewall pluto[10724]: "ssl-iptrafficsig-1/1x0" #2749: them: 52.48.93.253<52.48.93.253>===10.199.0.0/28
> Nov 10 13:45:34 hal-internal-firewall pluto[10724]:
> "ssl-iptrafficsig-1/1x0" #2749: keeping refhim=4294901761 during rekey
> Nov 10 13:45:34 hal-internal-firewall pluto[10724]:
> "ssl-iptrafficsig-1/1x0" #2749: transition from state STATE_QUICK_R0
> to state STATE_QUICK_R1 Nov 10 13:45:34 hal-internal-firewall
> pluto[10724]: "ssl-iptrafficsig-1/1x0" #2749: STATE_QUICK_R1: sent QR1, inbound IPsec SA installed, expecting QI2 tunnel mode {ESP/NAT=>0xce170e2f <0xb786314f xfrm=AES_256-HMAC_SHA2_256 NATOA=none NATD=52.48.93.253:4500 DPD=passive} Nov 10 13:45:34 hal-internal-firewall pluto[10724]: "ssl-iptrafficsig-1/1x0" #2739: received 3 malformed payload notifies Nov 10 13:45:34 hal-internal-firewall pluto[10724]: "ssl-iptrafficsig-1/1x0" #2739: the peer proposed: 10.2.170.0/26:0/0 -> 10.199.0.0/28:0/0 Nov 10 13:45:34 hal-internal-firewall pluto[10724]: "ssl-iptrafficsig-1/1x0" #2750: responding to Quick Mode proposal {msgid:effa5a53}
> Nov 10 13:45:34 hal-internal-firewall pluto[10724]: "ssl-iptrafficsig-1/1x0" #2750: us: 10.2.170.0/26===10.59.31.49<10.59.31.49>[193.195.162.135]
> Nov 10 13:45:34 hal-internal-firewall pluto[10724]: "ssl-iptrafficsig-1/1x0" #2750: them: 52.48.93.253<52.48.93.253>===10.199.0.0/28
> Nov 10 13:45:34 hal-internal-firewall pluto[10724]:
> "ssl-iptrafficsig-1/1x0" #2750: keeping refhim=4294901761 during rekey
> Nov 10 13:45:34 hal-internal-firewall pluto[10724]:
> "ssl-iptrafficsig-1/1x0" #2750: transition from state STATE_QUICK_R0
> to state STATE_QUICK_R1 Nov 10 13:45:34 hal-internal-firewall
> pluto[10724]: "ssl-iptrafficsig-1/1x0" #2750: STATE_QUICK_R1: sent QR1, inbound IPsec SA installed, expecting QI2 tunnel mode {ESP/NAT=>0xcbd8f84f <0x62dfaa0d xfrm=AES_256-HMAC_SHA2_256 NATOA=none NATD=52.48.93.253:4500 DPD=passive} Nov 10 13:45:34 hal-internal-firewall pluto[10724]: "ssl-iptrafficsig-1/1x0" #2739: received 4 malformed payload notifies Nov 10 13:45:35 hal-internal-firewall pluto[10724]: "ssl-iptrafficsig-1/1x0" #2739: the peer proposed: 10.2.170.0/26:0/0 -> 10.199.0.0/28:0/0 Nov 10 13:45:35 hal-internal-firewall pluto[10724]: "ssl-iptrafficsig-1/1x0" #2751: responding to Quick Mode proposal {msgid:e5947f02}
> Nov 10 13:45:35 hal-internal-firewall pluto[10724]: "ssl-iptrafficsig-1/1x0" #2751: us: 10.2.170.0/26===10.59.31.49<10.59.31.49>[193.195.162.135]
> Nov 10 13:45:35 hal-internal-firewall pluto[10724]: "ssl-iptrafficsig-1/1x0" #2751: them: 52.48.93.253<52.48.93.253>===10.199.0.0/28
> Nov 10 13:45:35 hal-internal-firewall pluto[10724]:
> "ssl-iptrafficsig-1/1x0" #2751: keeping refhim=4294901761 during rekey
> Nov 10 13:45:35 hal-internal-firewall pluto[10724]:
> "ssl-iptrafficsig-1/1x0" #2751: transition from state STATE_QUICK_R0
> to state STATE_QUICK_R1 Nov 10 13:45:35 hal-internal-firewall
> pluto[10724]: "ssl-iptrafficsig-1/1x0" #2751: STATE_QUICK_R1: sent
> QR1, inbound IPsec SA installed, expecting QI2 tunnel mode
> {ESP/NAT=>0xcd4c0ca5 <0xb855bd37 xfrm=AES_256-HMAC_SHA2_256 NATOA=none
> NATD=52.48.93.253:4500 DPD=passive} Nov 10 13:45:35
> hal-internal-firewall pluto[10724]: "ssl-iptrafficsig-1/1x0" #2739:
> received 5 malformed payload notifies Nov 10 13:45:35
> hal-internal-firewall pluto[10724]: "ssl-iptrafficsig-1/1x0" #2739:
> ignoring informational payload NO_PROPOSAL_CHOSEN, msgid=00000000,
> length=16 Nov 10 13:45:35 hal-internal-firewall pluto[10724]:
> "ssl-iptrafficsig-1/1x0" #2739: received and ignored informational
> message Nov 10 13:45:35 hal-internal-firewall pluto[10724]:
> "ssl-iptrafficsig-1/1x0" #2739: ignoring informational payload
> NO_PROPOSAL_CHOSEN, msgid=00000000, length=16 Nov 10 13:45:35
> hal-internal-firewall pluto[10724]: "ssl-iptrafficsig-1/1x0" #2739:
> received and ignored informational message Nov 10 13:45:35
> hal-internal-firewall pluto[10724]: "ssl-iptrafficsig-1/1x0" #2739:
> ignoring informational payload NO_PROPOSAL_CHOSEN, msgid=00000000,
> length=16 Nov 10 13:45:35 hal-internal-firewall pluto[10724]:
> "ssl-iptrafficsig-1/1x0" #2739: received and ignored informational
> message Nov 10 13:45:35 hal-internal-firewall pluto[10724]:
> "ssl-iptrafficsig-1/1x0" #2739: ignoring informational payload
> NO_PROPOSAL_CHOSEN, msgid=00000000, length=16 Nov 10 13:45:35
> hal-internal-firewall pluto[10724]: "ssl-iptrafficsig-1/1x0" #2739:
> received and ignored informational message Nov 10 13:45:35
> hal-internal-firewall pluto[10724]: "ssl-iptrafficsig-1/1x0" #2739:
> ignoring informational payload NO_PROPOSAL_CHOSEN, msgid=00000000,
> length=16 Nov 10 13:45:35 hal-internal-firewall pluto[10724]:
> "ssl-iptrafficsig-1/1x0" #2739: received and ignored informational
> message Nov 10 13:45:35 hal-internal-firewall pluto[10724]:
> "ssl-iptrafficsig-1/1x0" #2739: ignoring informational payload
> NO_PROPOSAL_CHOSEN, msgid=00000000, length=16 Nov 10 13:45:35
> hal-internal-firewall pluto[10724]: "ssl-iptrafficsig-1/1x0" #2739:
> received and ignored informational message Nov 10 13:45:35
> hal-internal-firewall pluto[10724]: "ssl-iptrafficsig-1/1x0" #2739:
> ignoring informational payload NO_PROPOSAL_CHOSEN, msgid=00000000,
> length=16 Nov 10 13:45:35 hal-internal-firewall pluto[10724]:
> "ssl-iptrafficsig-1/1x0" #2739: received and ignored informational
> message Nov 10 13:45:35 hal-internal-firewall pluto[10724]:
> "ssl-iptrafficsig-1/1x0" #2739: ignoring informational payload
> NO_PROPOSAL_CHOSEN, msgid=00000000, length=16 Nov 10 13:45:35
> hal-internal-firewall pluto[10724]: "ssl-iptrafficsig-1/1x0" #2739:
> received and ignored informational message Nov 10 13:45:35
> hal-internal-firewall pluto[10724]: "ssl-iptrafficsig-1/1x0" #2739:
> ignoring informational payload NO_PROPOSAL_CHOSEN, msgid=00000000,
> length=16 Nov 10 13:45:35 hal-internal-firewall pluto[10724]:
> "ssl-iptrafficsig-1/1x0" #2739: received and ignored informational
> message Nov 10 13:45:35 hal-internal-firewall pluto[10724]:
> "ssl-iptrafficsig-1/1x0" #2739: ignoring informational payload
> NO_PROPOSAL_CHOSEN, msgid=00000000, length=16 Nov 10 13:45:35
> hal-internal-firewall pluto[10724]: "ssl-iptrafficsig-1/1x0" #2739:
> received and ignored informational message Nov 10 13:45:35
> hal-internal-firewall pluto[10724]: "ssl-iptrafficsig-1/1x0" #2739:
> ignoring informational payload NO_PROPOSAL_CHOSEN, msgid=00000000,
> length=16 Nov 10 13:45:35 hal-internal-firewall pluto[10724]:
> "ssl-iptrafficsig-1/1x0" #2739: received and ignored informational
> message Nov 10 13:45:35 hal-internal-firewall pluto[10724]:
> "ssl-iptrafficsig-1/1x0" #2739: received 6 malformed payload notifies
> Nov 10 13:45:35 hal-internal-firewall pluto[10724]:
> "ssl-iptrafficsig-1/1x0" #2739: received 7 malformed payload notifies
> Nov 10 13:45:35 hal-internal-firewall pluto[10724]:
> "ssl-iptrafficsig-1/1x0" #2739: received 8 malformed payload notifies
> Nov 10 13:45:35 hal-internal-firewall pluto[10724]:
> "ssl-iptrafficsig-1/1x0" #2739: received 9 malformed payload notifies
> Nov 10 13:45:35 hal-internal-firewall pluto[10724]:
> "ssl-iptrafficsig-1/1x0" #2739: received 10 malformed payload notifies
> Nov 10 13:45:35 hal-internal-firewall pluto[10724]:
> "ssl-iptrafficsig-1/1x0" #2739: received 11 malformed payload notifies
> Nov 10 13:45:35 hal-internal-firewall pluto[10724]:
> "ssl-iptrafficsig-1/1x0" #2739: received 12 malformed payload notifies
> Nov 10 13:45:35 hal-internal-firewall pluto[10724]:
> "ssl-iptrafficsig-1/1x0" #2739: received 13 malformed payload notifies
> Nov 10 13:45:35 hal-internal-firewall pluto[10724]:
> "ssl-iptrafficsig-1/1x0" #2739: received 14 malformed payload notifies
> Nov 10 13:45:35 hal-internal-firewall pluto[10724]:
> "ssl-iptrafficsig-1/1x0" #2739: received 15 malformed payload notifies
> Nov 10 13:45:35 hal-internal-firewall pluto[10724]:
> "ssl-iptrafficsig-1/1x0" #2739: received 16 malformed payload notifies
> Nov 10 13:45:35 hal-internal-firewall pluto[10724]:
> "ssl-iptrafficsig-1/1x0" #2739: received 17 malformed payload notifies
> Nov 10 13:45:35 hal-internal-firewall pluto[10724]:
> "ssl-iptrafficsig-1/1x0" #2739: received 18 malformed payload notifies
> Nov 10 13:45:36 hal-internal-firewall pluto[10724]:
> "ssl-iptrafficsig-1/1x0" #2739: received 19 malformed payload notifies
> Nov 10 13:45:36 hal-internal-firewall pluto[10724]:
> "ssl-iptrafficsig-1/1x0" #2739: received 20 malformed payload notifies
> Nov 10 13:45:36 hal-internal-firewall pluto[10724]:
> "ssl-iptrafficsig-1/1x0" #2739: received 21 malformed payload notifies
> Nov 10 13:45:36 hal-internal-firewall pluto[10724]:
> "ssl-iptrafficsig-1/1x0" #2739: received 22 malformed payload notifies
> Nov 10 13:45:36 hal-internal-firewall pluto[10724]:
> "ssl-iptrafficsig-1/1x0" #2739: received 23 malformed payload notifies
> Nov 10 13:45:36 hal-internal-firewall pluto[10724]:
> "ssl-iptrafficsig-1/1x0" #2739: received 24 malformed payload notifies
> Nov 10 13:45:36 hal-internal-firewall pluto[10724]:
> "ssl-iptrafficsig-1/1x0" #2739: received 25 malformed payload notifies
> Nov 10 13:45:36 hal-internal-firewall pluto[10724]:
> "ssl-iptrafficsig-1/1x0" #2739: received 26 malformed payload notifies
> Nov 10 13:45:36 hal-internal-firewall pluto[10724]:
> "ssl-iptrafficsig-1/1x0" #2739: received 27 malformed payload notifies
> Nov 10 13:45:38 hal-internal-firewall pluto[10724]:
> "ssl-iptrafficsig-1/1x0" #2739: received 28 malformed payload notifies
> Nov 10 13:45:38 hal-internal-firewall pluto[10724]:
> "ssl-iptrafficsig-1/1x0" #2739: received 29 malformed payload notifies
> Nov 10 13:45:38 hal-internal-firewall pluto[10724]:
> "ssl-iptrafficsig-1/1x0" #2739: received 30 malformed payload notifies
> Nov 10 13:45:38 hal-internal-firewall pluto[10724]:
> "ssl-iptrafficsig-1/1x0" #2739: received 31 malformed payload notifies
> Nov 10 13:45:38 hal-internal-firewall pluto[10724]:
> "ssl-iptrafficsig-1/1x0" #2739: received 32 malformed payload notifies
> Nov 10 13:45:38 hal-internal-firewall pluto[10724]:
> "ssl-iptrafficsig-1/1x0" #2739: received 33 malformed payload notifies
> Nov 10 13:45:38 hal-internal-firewall pluto[10724]:
> "ssl-iptrafficsig-1/1x0" #2739: received 34 malformed payload notifies
> Nov 10 13:45:38 hal-internal-firewall pluto[10724]:
> "ssl-iptrafficsig-1/1x0" #2739: received 35 malformed payload notifies
> Nov 10 13:45:38 hal-internal-firewall pluto[10724]:
> "ssl-iptrafficsig-1/1x0" #2739: received 36 malformed payload notifies
> Nov 10 13:45:42 hal-internal-firewall pluto[10724]:
> "ssl-iptrafficsig-1/1x0" #2739: received 37 malformed payload notifies
> Nov 10 13:45:42 hal-internal-firewall pluto[10724]:
> "ssl-iptrafficsig-1/1x0" #2739: received 38 malformed payload notifies
> Nov 10 13:45:42 hal-internal-firewall pluto[10724]:
> "ssl-iptrafficsig-1/1x0" #2739: received 39 malformed payload notifies
> Nov 10 13:45:42 hal-internal-firewall pluto[10724]:
> "ssl-iptrafficsig-1/1x0" #2739: received 40 malformed payload notifies
> Nov 10 13:45:42 hal-internal-firewall pluto[10724]:
> "ssl-iptrafficsig-1/1x0" #2739: received 41 malformed payload notifies
> Nov 10 13:45:42 hal-internal-firewall pluto[10724]:
> "ssl-iptrafficsig-1/1x0" #2739: received 42 malformed payload notifies
> Nov 10 13:45:42 hal-internal-firewall pluto[10724]:
> "ssl-iptrafficsig-1/1x0" #2739: received 43 malformed payload notifies
> Nov 10 13:45:42 hal-internal-firewall pluto[10724]:
> "ssl-iptrafficsig-1/1x0" #2739: received 44 malformed payload notifies
> Nov 10 13:45:42 hal-internal-firewall pluto[10724]:
> "ssl-iptrafficsig-1/1x0" #2739: received 45 malformed payload notifies
> Nov 10 13:45:50 hal-internal-firewall pluto[10724]:
> "ssl-iptrafficsig-1/1x0" #2739: received 46 malformed payload notifies
> Nov 10 13:45:50 hal-internal-firewall pluto[10724]:
> "ssl-iptrafficsig-1/1x0" #2739: received 47 malformed payload notifies
> Nov 10 13:45:50 hal-internal-firewall pluto[10724]:
> "ssl-iptrafficsig-1/1x0" #2739: received 48 malformed payload notifies
> Nov 10 13:45:50 hal-internal-firewall pluto[10724]:
> "ssl-iptrafficsig-1/1x0" #2739: received 49 malformed payload notifies
> Nov 10 13:45:50 hal-internal-firewall pluto[10724]:
> "ssl-iptrafficsig-1/1x0" #2739: received 50 malformed payload notifies
> Nov 10 13:45:50 hal-internal-firewall pluto[10724]:
> "ssl-iptrafficsig-1/1x0" #2739: received 51 malformed payload notifies
> Nov 10 13:45:50 hal-internal-firewall pluto[10724]:
> "ssl-iptrafficsig-1/1x0" #2739: received 52 malformed payload notifies
> Nov 10 13:45:50 hal-internal-firewall pluto[10724]:
> "ssl-iptrafficsig-1/1x0" #2739: received 53 malformed payload notifies
> Nov 10 13:45:50 hal-internal-firewall pluto[10724]:
> "ssl-iptrafficsig-1/1x0" #2739: received 54 malformed payload notifies
> Nov 10 13:45:55 hal-internal-firewall pluto[10724]:
> "ssl-iptrafficsig-1/1x0" #2738: max number of retransmissions (8)
> reached STATE_MAIN_R1 Nov 10 13:45:55 hal-internal-firewall
> pluto[10724]: "ssl-iptrafficsig-1/1x0" #2738: deleting state #2738
> (STATE_MAIN_R1) Nov 10 13:46:06 hal-internal-firewall pluto[10724]:
> "ssl-iptrafficsig-1/1x0" #2739: received 55 malformed payload notifies
> Nov 10 13:46:06 hal-internal-firewall pluto[10724]:
> "ssl-iptrafficsig-1/1x0" #2739: received 56 malformed payload notifies
> Nov 10 13:46:06 hal-internal-firewall pluto[10724]:
> "ssl-iptrafficsig-1/1x0" #2739: received 57 malformed payload notifies
> Nov 10 13:46:06 hal-internal-firewall pluto[10724]:
> "ssl-iptrafficsig-1/1x0" #2739: received 58 malformed payload notifies
> Nov 10 13:46:06 hal-internal-firewall pluto[10724]:
> "ssl-iptrafficsig-1/1x0" #2739: received 59 malformed payload notifies
> Nov 10 13:46:06 hal-internal-firewall pluto[10724]:
> "ssl-iptrafficsig-1/1x0" #2739: received 60 malformed payload notifies
> Nov 10 13:46:06 hal-internal-firewall pluto[10724]:
> "ssl-iptrafficsig-1/1x0" #2739: received 61 malformed payload notifies
> Nov 10 13:46:06 hal-internal-firewall pluto[10724]:
> "ssl-iptrafficsig-1/1x0" #2739: received 62 malformed payload notifies
> Nov 10 13:46:06 hal-internal-firewall pluto[10724]:
> "ssl-iptrafficsig-1/1x0" #2739: received 63 malformed payload notifies
> Nov 10 13:46:38 hal-internal-firewall pluto[10724]:
> "ssl-iptrafficsig-1/1x0" #2741: max number of retransmissions (8)
> reached STATE_QUICK_R1 Nov 10 13:46:38 hal-internal-firewall
> pluto[10724]: "ssl-iptrafficsig-1/1x0" #2741: deleting state #2741
> (STATE_QUICK_R1) Nov 10 13:46:38 hal-internal-firewall pluto[10724]:
> "ssl-iptrafficsig-1/1x0" #2741: ESP traffic information: in=0B out=0B
> Nov 10 13:46:38 hal-internal-firewall pluto[10724]:
> "ssl-iptrafficsig-1/1x0" #2741: ERROR: netlink response for Del SA
> esp.c43960bb at 52.48.93.253 included errno 3: No such process Nov 10
> 13:46:38 hal-internal-firewall pluto[10724]: "ssl-iptrafficsig-1/1x0"
> #2742: max number of retransmissions (8) reached STATE_QUICK_R1 Nov 10
> 13:46:38 hal-internal-firewall pluto[10724]: "ssl-iptrafficsig-1/1x0"
> #2742: deleting state #2742 (STATE_QUICK_R1) Nov 10 13:46:38
> hal-internal-firewall pluto[10724]: "ssl-iptrafficsig-1/1x0" #2742:
> ESP traffic information: in=0B out=0B Nov 10 13:46:38
> hal-internal-firewall pluto[10724]: "ssl-iptrafficsig-1/1x0" #2742:
> ERROR: netlink response for Del SA esp.ccf4d45f at 52.48.93.253 included
> errno 3: No such process Nov 10 13:46:38 hal-internal-firewall
> pluto[10724]: "ssl-iptrafficsig-1/1x0" #2743: max number of
> retransmissions (8) reached STATE_QUICK_R1 Nov 10 13:46:38
> hal-internal-firewall pluto[10724]: "ssl-iptrafficsig-1/1x0" #2743:
> deleting state #2743 (STATE_QUICK_R1) Nov 10 13:46:38
> hal-internal-firewall pluto[10724]: "ssl-iptrafficsig-1/1x0" #2743:
> ESP traffic information: in=0B out=0B Nov 10 13:46:38
> hal-internal-firewall pluto[10724]: "ssl-iptrafficsig-1/1x0" #2743:
> ERROR: netlink response for Del SA esp.cfbe2958 at 52.48.93.253 included
> errno 3: No such process Nov 10 13:46:38 hal-internal-firewall
> pluto[10724]: "ssl-iptrafficsig-1/1x0" #2744: max number of
> retransmissions (8) reached STATE_QUICK_R1 Nov 10 13:46:38
> hal-internal-firewall pluto[10724]: "ssl-iptrafficsig-1/1x0" #2744:
> deleting state #2744 (STATE_QUICK_R1) Nov 10 13:46:38
> hal-internal-firewall pluto[10724]: "ssl-iptrafficsig-1/1x0" #2744:
> ESP traffic information: in=0B out=0B Nov 10 13:46:38
> hal-internal-firewall pluto[10724]: "ssl-iptrafficsig-1/1x0" #2744:
> ERROR: netlink response for Del SA esp.c3409f0f at 52.48.93.253 included
> errno 3: No such process Nov 10 13:46:38 hal-internal-firewall
> pluto[10724]: "ssl-iptrafficsig-1/1x0" #2745: max number of
> retransmissions (8) reached STATE_QUICK_R1 Nov 10 13:46:38
> hal-internal-firewall pluto[10724]: "ssl-iptrafficsig-1/1x0" #2745:
> deleting state #2745 (STATE_QUICK_R1) Nov 10 13:46:38
> hal-internal-firewall pluto[10724]: "ssl-iptrafficsig-1/1x0" #2745:
> ESP traffic information: in=0B out=0B Nov 10 13:46:38
> hal-internal-firewall pluto[10724]: "ssl-iptrafficsig-1/1x0" #2745:
> ERROR: netlink response for Del SA esp.cdeea2ea at 52.48.93.253 included
> errno 3: No such process Nov 10 13:46:38 hal-internal-firewall
> pluto[10724]: "ssl-iptrafficsig-1/1x0" #2746: max number of
> retransmissions (8) reached STATE_QUICK_R1 Nov 10 13:46:38
> hal-internal-firewall pluto[10724]: "ssl-iptrafficsig-1/1x0" #2746:
> deleting state #2746 (STATE_QUICK_R1) Nov 10 13:46:38
> hal-internal-firewall pluto[10724]: "ssl-iptrafficsig-1/1x0" #2746:
> ESP traffic information: in=0B out=0B Nov 10 13:46:38
> hal-internal-firewall pluto[10724]: "ssl-iptrafficsig-1/1x0" #2746:
> ERROR: netlink response for Del SA esp.c0b9534e at 52.48.93.253 included
> errno 3: No such process Nov 10 13:46:38 hal-internal-firewall
> pluto[10724]: "ssl-iptrafficsig-1/1x0" #2747: max number of
> retransmissions (8) reached STATE_QUICK_R1 Nov 10 13:46:38
> hal-internal-firewall pluto[10724]: "ssl-iptrafficsig-1/1x0" #2747:
> deleting state #2747 (STATE_QUICK_R1) Nov 10 13:46:38
> hal-internal-firewall pluto[10724]: "ssl-iptrafficsig-1/1x0" #2747:
> ESP traffic information: in=0B out=0B Nov 10 13:46:38
> hal-internal-firewall pluto[10724]: "ssl-iptrafficsig-1/1x0" #2747:
> ERROR: netlink response for Del SA esp.c0e94aa4 at 52.48.93.253 included
> errno 3: No such process Nov 10 13:46:38 hal-internal-firewall
> pluto[10724]: "ssl-iptrafficsig-1/1x0" #2748: max number of
> retransmissions (8) reached STATE_QUICK_R1 Nov 10 13:46:38
> hal-internal-firewall pluto[10724]: "ssl-iptrafficsig-1/1x0" #2748:
> deleting state #2748 (STATE_QUICK_R1) Nov 10 13:46:38
> hal-internal-firewall pluto[10724]: "ssl-iptrafficsig-1/1x0" #2748:
> ESP traffic information: in=0B out=0B Nov 10 13:46:38
> hal-internal-firewall pluto[10724]: "ssl-iptrafficsig-1/1x0" #2748:
> ERROR: netlink response for Del SA esp.c125a56b at 52.48.93.253 included
> errno 3: No such process Nov 10 13:46:38 hal-internal-firewall
> pluto[10724]: "ssl-iptrafficsig-1/1x0" #2749: max number of
> retransmissions (8) reached STATE_QUICK_R1 Nov 10 13:46:38
> hal-internal-firewall pluto[10724]: "ssl-iptrafficsig-1/1x0" #2749:
> deleting state #2749 (STATE_QUICK_R1) Nov 10 13:46:38
> hal-internal-firewall pluto[10724]: "ssl-iptrafficsig-1/1x0" #2749:
> ESP traffic information: in=0B out=0B Nov 10 13:46:38
> hal-internal-firewall pluto[10724]: "ssl-iptrafficsig-1/1x0" #2749:
> ERROR: netlink response for Del SA esp.ce170e2f at 52.48.93.253 included
> errno 3: No such process Nov 10 13:46:38 hal-internal-firewall
> pluto[10724]: "ssl-iptrafficsig-1/1x0" #2750: max number of
> retransmissions (8) reached STATE_QUICK_R1 Nov 10 13:46:38
> hal-internal-firewall pluto[10724]: "ssl-iptrafficsig-1/1x0" #2750:
> deleting state #2750 (STATE_QUICK_R1) Nov 10 13:46:38
> hal-internal-firewall pluto[10724]: "ssl-iptrafficsig-1/1x0" #2750:
> ESP traffic information: in=0B out=0B Nov 10 13:46:38
> hal-internal-firewall pluto[10724]: "ssl-iptrafficsig-1/1x0" #2750:
> ERROR: netlink response for Del SA esp.cbd8f84f at 52.48.93.253 included
> errno 3: No such process Nov 10 13:46:39 hal-internal-firewall
> pluto[10724]: "ssl-iptrafficsig-1/1x0" #2751: max number of
> retransmissions (8) reached STATE_QUICK_R1 Nov 10 13:46:39
> hal-internal-firewall pluto[10724]: "ssl-iptrafficsig-1/1x0" #2751:
> deleting state #2751 (STATE_QUICK_R1) Nov 10 13:46:39
> hal-internal-firewall pluto[10724]: "ssl-iptrafficsig-1/1x0" #2751:
> ESP traffic information: in=0B out=0B Nov 10 13:46:39
> hal-internal-firewall pluto[10724]: "ssl-iptrafficsig-1/1x0" #2751:
> ERROR: netlink response for Del SA esp.cd4c0ca5 at 52.48.93.253 included
> errno 3: No such process Nov 10 14:04:48 hal-internal-firewall
> pluto[10724]: "ssl-iptrafficsig-1/1x0" #2739: received Delete SA
> payload: replace IPSEC State #2740 in 60 seconds Nov 10 14:04:48
> hal-internal-firewall pluto[10724]: "ssl-iptrafficsig-1/1x0" #2739:
> received and ignored empty informational notification payload Nov 10
> 14:04:48 hal-internal-firewall pluto[10724]: "ssl-iptrafficsig-1/1x0"
> #2739: received Delete SA payload: self-deleting ISAKMP State #2739
> Nov 10 14:04:48 hal-internal-firewall pluto[10724]:
> "ssl-iptrafficsig-1/1x0" #2739: deleting state #2739 (STATE_MAIN_R3)
>
>
> Anyone have any suggestions to what
>
> received 11 malformed payload notifies & Nov 10 13:46:38
> hal-internal-firewall pluto[10724]: "ssl-iptrafficsig-1/1x0" #2743:
> deleting state #2743 (STATE_QUICK_R1) Nov 10 13:46:38
> hal-internal-firewall pluto[10724]: "ssl-iptrafficsig-1/1x0" #2743:
> ESP traffic information: in=0B out=0B Nov 10 13:46:38
> hal-internal-firewall pluto[10724]: "ssl-iptrafficsig-1/1x0" #2743:
> ERROR: netlink response for Del SA esp.cfbe2958 at 52.48.93.253 included
> errno 3: No such process Nov 10 13:46:38 hal-internal-firewall
> pluto[10724]: "ssl-iptrafficsig-1/1x0" #2744: max number of
> retransmissions (8) reached STATE_QUICK_R1
>
> Could mean?
>
> Thanks
>
> Joe
> _______________________________________________
> Swan mailing list
> Swan at lists.libreswan.org
> https://lists.libreswan.org/mailman/listinfo/swan
More information about the Swan
mailing list