[Swan] Memory Leak / LibreSwan instability

[Madden, Joe]

Hi List,

We've had a reoccurring issue where Libreswan will lockup after time causing the VPNs become disconnect. 

The ipsec service does not shutdown cleanly, as a result we added in leak-detective to try and see if we could get some output to help us better understand the issue. After killing the service 4Gb of Memory will become free, and starting ipsec results in VPN connection working.

Libreswan is running on RHEL 6.10 with version libreswan-3.15-7.5.el6_9.x86_64

The leak information isn't very helpful to me - Does anyone understand it/is able to give me any pointers on what to try next?


The VPN ends up into this state with 
Aug 20 08:26:19 hal-internal-firewall pluto[23477]: initiate_ondemand_body() failed to install negotiation_shunt,
Aug 20 08:26:19 hal-internal-firewall pluto[23477]: initiate on demand from 10.123.38.95:41483 to 192.168.12.10:21 proto=6 state: fos_start because: acquire
Aug 20 08:26:19 hal-internal-firewall pluto[23477]: assign_holdpass() delete_bare_shunt() failed
Aug 20 08:26:27 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-2" #85466: max number of retransmissions (8) reached STATE_PARENT_I1.  No response (or no acceptable response) to our first IKEv2 message
Aug 20 08:26:27 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-2" #85466: starting keying attempt 3 of an unlimited number
Aug 20 08:26:27 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-2" #85574: initiating v2 parent SA to replace #85466
Aug 20 08:26:27 hal-internal-firewall pluto[23477]: deleting state #85466 (STATE_PARENT_I1)

The Leak information is below:

Aug 20 08:27:10 hal-internal-firewall pluto[23477]: shutting down
Aug 20 08:27:10 hal-internal-firewall pluto[23477]: forgetting secrets
Aug 20 08:27:10 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-3": deleting connection
Aug 20 08:27:10 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-3" #85548: deleting state #85548 (STATE_PARENT_I1)
Aug 20 08:27:10 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-3" #85559: deleting state #85559 (STATE_PARENT_I1)
Aug 20 08:27:10 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-2": deleting connection
Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-2" #85545: deleting state #85545 (STATE_PARENT_I1)
Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-2" #85584: deleting state #85584 (STATE_PARENT_I1)
Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-2" #85526: deleting state #85526 (STATE_PARENT_I1)
Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-2" #85571: deleting state #85571 (STATE_PARENT_I1)
Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-2" #85568: deleting state #85568 (STATE_PARENT_I1)
Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-2" #85576: deleting state #85576 (STATE_PARENT_I1)
Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-2" #85580: deleting state #85580 (STATE_PARENT_I1)
Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-2" #85531: deleting state #85531 (STATE_PARENT_I1)
Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-2" #85589: deleting state #85589 (STATE_PARENT_I1)
Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-2" #85555: deleting state #85555 (STATE_PARENT_I1)
Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-2" #85553: deleting state #85553 (STATE_PARENT_I1)
Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-2" #85578: deleting state #85578 (STATE_PARENT_I1)
Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-2" #85563: deleting state #85563 (STATE_PARENT_I1)
Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-2" #85557: deleting state #85557 (STATE_PARENT_I1)
Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-2" #85528: deleting state #85528 (STATE_PARENT_I1)
Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-2" #85572: deleting state #85572 (STATE_PARENT_I1)
Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-2" #85564: deleting state #85564 (STATE_PARENT_I1)
Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-2" #85536: deleting state #85536 (STATE_PARENT_I1)
Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-2" #85527: deleting state #85527 (STATE_PARENT_I1)
Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-2" #85508: deleting state #85508 (STATE_PARENT_I1)
Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-2" #85551: deleting state #85551 (STATE_PARENT_I1)
Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-2" #85521: deleting state #85521 (STATE_PARENT_I1)
Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-2" #85575: deleting state #85575 (STATE_PARENT_I1)
Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-2" #85547: deleting state #85547 (STATE_PARENT_I1)
Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-2" #85534: deleting state #85534 (STATE_PARENT_I1)
Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-2" #85566: deleting state #85566 (STATE_PARENT_I1)
Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-2" #85532: deleting state #85532 (STATE_PARENT_I1)
Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-2" #85549: deleting state #85549 (STATE_PARENT_I1)
Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-2" #85535: deleting state #85535 (STATE_PARENT_I1)
Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-2" #85530: deleting state #85530 (STATE_PARENT_I1)
Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-2" #85511: deleting state #85511 (STATE_PARENT_I1)
Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-2" #85574: deleting state #85574 (STATE_PARENT_I1)
Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-2" #85540: deleting state #85540 (STATE_PARENT_I1)
Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-2" #85550: deleting state #85550 (STATE_PARENT_I1)
Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-2" #85541: deleting state #85541 (STATE_PARENT_I1)
Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-2" #85538: deleting state #85538 (STATE_PARENT_I1)
Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-1": deleting connection
Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-1" #85567: deleting state #85567 (STATE_PARENT_I1)
Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-1" #85582: deleting state #85582 (STATE_PARENT_I1)
Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-1" #85579: deleting state #85579 (STATE_PARENT_I1)
Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-1" #85577: deleting state #85577 (STATE_PARENT_I1)
Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-1" #85546: deleting state #85546 (STATE_PARENT_I1)
Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-1" #85524: deleting state #85524 (STATE_PARENT_I1)
Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-1" #85573: deleting state #85573 (STATE_PARENT_I1)
Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-1" #85512: deleting state #85512 (STATE_PARENT_I1)
Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-1" #85509: deleting state #85509 (STATE_PARENT_I1)
Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-1" #85587: deleting state #85587 (STATE_PARENT_I1)
Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-1" #85565: deleting state #85565 (STATE_PARENT_I1)
Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-1" #85560: deleting state #85560 (STATE_PARENT_I1)
Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-1" #85510: deleting state #85510 (STATE_PARENT_I1)
Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-1" #85581: deleting state #85581 (STATE_PARENT_I1)
Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-1" #85515: deleting state #85515 (STATE_PARENT_I1)
Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-1" #85556: deleting state #85556 (STATE_PARENT_I1)
Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-1" #85514: deleting state #85514 (STATE_PARENT_I1)
Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-1" #85507: deleting state #85507 (STATE_PARENT_I1)
Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-1" #85504: deleting state #85504 (STATE_PARENT_I1)
Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-1" #85588: deleting state #85588 (STATE_PARENT_I1)
Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-1" #85554: deleting state #85554 (STATE_PARENT_I1)
Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-1" #85505: deleting state #85505 (STATE_PARENT_I1)
Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-1" #85552: deleting state #85552 (STATE_PARENT_I1)
Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-1" #85519: deleting state #85519 (STATE_PARENT_I1)
Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-1" #85518: deleting state #85518 (STATE_PARENT_I1)
Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-1" #85516: deleting state #85516 (STATE_PARENT_I1)
Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-1" #85558: deleting state #85558 (STATE_PARENT_I1)
Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-1" #85542: deleting state #85542 (STATE_PARENT_I1)
Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-1" #85520: deleting state #85520 (STATE_PARENT_I1)
Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-1" #85533: deleting state #85533 (STATE_PARENT_I1)
Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-1" #85583: deleting state #85583 (STATE_PARENT_I1)
Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-1" #85585: deleting state #85585 (STATE_PARENT_I1)
Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-1" #85543: deleting state #85543 (STATE_PARENT_I1)
Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-1" #85539: deleting state #85539 (STATE_PARENT_I1)
Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-1" #85570: deleting state #85570 (STATE_PARENT_I1)
Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-1" #85569: deleting state #85569 (STATE_PARENT_I1)
Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-1" #85537: deleting state #85537 (STATE_PARENT_I1)
Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-1" #85525: deleting state #85525 (STATE_PARENT_I1)
Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-1" #85590: deleting state #85590 (STATE_PARENT_I1)
Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-1" #85562: deleting state #85562 (STATE_PARENT_I1)
Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-1" #85529: deleting state #85529 (STATE_PARENT_I1)
Aug 20 08:27:12 hal-internal-firewall pluto[23477]: "v6neighbor-hole-out": deleting connection
Aug 20 08:27:12 hal-internal-firewall pluto[23477]: "v6neighbor-hole-in": deleting connection
Aug 20 08:27:12 hal-internal-firewall pluto[23477]: "ssl-nissen-1/13x0": deleting connection
Aug 20 08:27:12 hal-internal-firewall pluto[23477]: "ssl-nissen-1/13x0" #85523: deleting state #85523 (STATE_MAIN_R1)
Aug 20 08:27:12 hal-internal-firewall pluto[23477]: "ssl-nissen-1/13x0" #85522: deleting state #85522 (STATE_MAIN_R1)
Aug 20 08:27:12 hal-internal-firewall pluto[23477]: "ssl-nissen-1/13x0" #85561: deleting state #85561 (STATE_MAIN_R1)
Aug 20 08:27:12 hal-internal-firewall pluto[23477]: "ssl-nissen-1/13x0" #85544: deleting state #85544 (STATE_MAIN_R1)
Aug 20 08:27:12 hal-internal-firewall pluto[23477]: "ssl-nissen-1/12x0": deleting connection
Aug 20 08:27:12 hal-internal-firewall pluto[23477]: "ssl-nissen-1/11x0": deleting connection
Aug 20 08:27:12 hal-internal-firewall pluto[23477]: "ssl-nissen-1/10x0": deleting connection
Aug 20 08:27:12 hal-internal-firewall pluto[23477]: "ssl-nissen-1/9x0": deleting connection
Aug 20 08:27:12 hal-internal-firewall pluto[23477]: "ssl-nissen-1/8x0": deleting connection
Aug 20 08:27:12 hal-internal-firewall pluto[23477]: "ssl-nissen-1/7x0": deleting connection
Aug 20 08:27:12 hal-internal-firewall pluto[23477]: "ssl-nissen-1/6x0": deleting connection
Aug 20 08:27:12 hal-internal-firewall pluto[23477]: "ssl-nissen-1/5x0": deleting connection
Aug 20 08:27:12 hal-internal-firewall pluto[23477]: "ssl-nissen-1/4x0": deleting connection
Aug 20 08:27:12 hal-internal-firewall pluto[23477]: "ssl-nissen-1/3x0": deleting connection
Aug 20 08:27:12 hal-internal-firewall pluto[23477]: "ssl-nissen-1/2x0": deleting connection
Aug 20 08:27:12 hal-internal-firewall pluto[23477]: "ssl-nissen-1/1x0": deleting connection
Aug 20 08:27:12 hal-internal-firewall pluto[23477]: "ssl-nissen-1/1x0" #85586: deleting state #85586 (STATE_MAIN_I1)
Aug 20 08:27:12 hal-internal-firewall pluto[23477]: shutting down interface lo/lo 127.0.0.1:4500
Aug 20 08:27:12 hal-internal-firewall pluto[23477]: shutting down interface lo/lo 127.0.0.1:500
Aug 20 08:27:12 hal-internal-firewall pluto[23477]: shutting down interface eth1/eth1 10.59.31.49:4500
Aug 20 08:27:12 hal-internal-firewall pluto[23477]: shutting down interface eth1/eth1 10.59.31.49:500
Aug 20 08:27:12 hal-internal-firewall pluto[23477]: shutting down interface eth1:0/eth1:0 10.59.31.50:4500
Aug 20 08:27:12 hal-internal-firewall pluto[23477]: shutting down interface eth1:0/eth1:0 10.59.31.50:500
Aug 20 08:27:12 hal-internal-firewall pluto[23477]: shutting down interface eth4/eth4 10.59.42.110:4500
Aug 20 08:27:12 hal-internal-firewall pluto[23477]: shutting down interface eth4/eth4 10.59.42.110:500
Aug 20 08:27:12 hal-internal-firewall pluto[23477]: shutting down interface bond0/bond0 10.59.31.33:4500
Aug 20 08:27:12 hal-internal-firewall pluto[23477]: shutting down interface bond0/bond0 10.59.31.33:500
Aug 20 08:27:13 hal-internal-firewall pluto[23477]: leak: 4 * ikev2_outI1 KE, item size: 144
Aug 20 08:27:13 hal-internal-firewall pluto[23477]: leak: EVENT_PENDING_DDNS, item size: 32
Aug 20 08:27:13 hal-internal-firewall pluto[23477]: leak: ikev2_outI1 KE, item size: 144
Aug 20 08:27:13 hal-internal-firewall pluto[23477]: leak: msg_digest, item size: 4152
Aug 20 08:27:13 hal-internal-firewall pluto[23477]: leak: ikev2_outI1 KE, item size: 144
Aug 20 08:27:13 hal-internal-firewall pluto[23477]: leak: msg_digest, item size: 4152
Aug 20 08:27:13 hal-internal-firewall pluto[23477]: leak: ikev2_outI1 KE, item size: 144
Aug 20 08:27:13 hal-internal-firewall pluto[23477]: leak: msg_digest, item size: 4152
Aug 20 08:27:13 hal-internal-firewall pluto[23477]: leak: ikev2_outI1 KE, item size: 144
Aug 20 08:27:13 hal-internal-firewall pluto[23477]: leak: msg_digest, item size: 4152
Aug 20 08:27:13 hal-internal-firewall pluto[23477]: leak: ikev2_outI1 KE, item size: 144
Aug 20 08:27:13 hal-internal-firewall pluto[23477]: leak: msg_digest, item size: 4152
Aug 20 08:27:13 hal-internal-firewall pluto[23477]: leak: ikev2_outI1 KE, item size: 144
Aug 20 08:27:13 hal-internal-firewall pluto[23477]: leak: msg_digest, item size: 4152
Aug 20 08:27:13 hal-internal-firewall pluto[23477]: leak: ikev2_outI1 KE, item size: 144
Aug 20 08:27:13 hal-internal-firewall pluto[23477]: leak: msg_digest, item size: 4152
Aug 20 08:27:13 hal-internal-firewall pluto[23477]: leak: ikev2_outI1 KE, item size: 144
Aug 20 08:27:13 hal-internal-firewall pluto[23477]: leak: msg_digest, item size: 4152
Aug 20 08:27:13 hal-internal-firewall pluto[23477]: leak: ikev2_outI1 KE, item size: 144
Aug 20 08:27:13 hal-internal-firewall pluto[23477]: leak: msg_digest, item size: 4152
Aug 20 08:27:13 hal-internal-firewall pluto[23477]: leak: ikev2_outI1 KE, item size: 144
Aug 20 08:27:13 hal-internal-firewall pluto[23477]: leak: msg_digest, item size: 4152
Aug 20 08:27:13 hal-internal-firewall pluto[23477]: leak: ikev2_outI1 KE, item size: 144
Aug 20 08:27:13 hal-internal-firewall pluto[23477]: leak: msg_digest, item size: 4152
Aug 20 08:27:13 hal-internal-firewall pluto[23477]: leak: ikev2_outI1 KE, item size: 144
Aug 20 08:27:13 hal-internal-firewall pluto[23477]: leak: msg_digest, item size: 4152
Aug 20 08:27:13 hal-internal-firewall pluto[23477]: leak: ikev2_outI1 KE, item size: 144
Aug 20 08:27:13 hal-internal-firewall pluto[23477]: leak: msg_digest, item size: 4152
Aug 20 08:27:13 hal-internal-firewall pluto[23477]: leak: ikev2_outI1 KE, item size: 144
Aug 20 08:27:13 hal-internal-firewall pluto[23477]: leak: msg_digest, item size: 4152
Aug 20 08:27:13 hal-internal-firewall pluto[23477]: leak: ikev2_outI1 KE, item size: 144
Aug 20 08:27:13 hal-internal-firewall pluto[23477]: leak: msg_digest, item size: 4152
Aug 20 08:27:13 hal-internal-firewall pluto[23477]: leak: ikev2_outI1 KE, item size: 144
Aug 20 08:27:13 hal-internal-firewall pluto[23477]: leak: msg_digest, item size: 4152
Aug 20 08:27:13 hal-internal-firewall pluto[23477]: leak: ikev2_outI1 KE, item size: 144
Aug 20 08:27:13 hal-internal-firewall pluto[23477]: leak: msg_digest, item size: 4152
Aug 20 08:27:13 hal-internal-firewall pluto[23477]: leak: ikev2_outI1 KE, item size: 144
Aug 20 08:27:13 hal-internal-firewall pluto[23477]: leak: msg_digest, item size: 4152
Aug 20 08:27:13 hal-internal-firewall pluto[23477]: leak: 3 * ikev2_outI1 KE, item size: 144
Aug 20 08:27:13 hal-internal-firewall pluto[23477]: leak: EVENT_SHUNT_SCAN, item size: 32
Aug 20 08:27:13 hal-internal-firewall pluto[23477]: leak: 3 * ikev2_outI1 KE, item size: 144
Aug 20 08:27:13 hal-internal-firewall pluto[23477]: leak: msg_digest, item size: 4152
Aug 20 08:27:13 hal-internal-firewall pluto[23477]: leak: ikev2_outI1 KE, item size: 144
Aug 20 08:27:13 hal-internal-firewall pluto[23477]: leak: msg_digest, item size: 4152
Aug 20 08:27:13 hal-internal-firewall pluto[23477]: leak: ikev2_outI1 KE, item size: 144
Aug 20 08:27:13 hal-internal-firewall pluto[23477]: leak: msg_digest, item size: 4152
Aug 20 08:27:13 hal-internal-firewall pluto[23477]: leak: ikev2_outI1 KE, item size: 144
Aug 20 08:27:13 hal-internal-firewall pluto[23477]: leak: msg_digest, item size: 4152
Aug 20 08:27:13 hal-internal-firewall pluto[23477]: leak: 4 * ikev2_outI1 KE, item size: 144
Aug 20 08:27:13 hal-internal-firewall pluto[23477]: leak: EVENT_PENDING_PHASE2, item size: 32
Aug 20 08:27:13 hal-internal-firewall pluto[23477]: leak: 91 * msg_digest, item size: 4152
Aug 20 08:27:13 hal-internal-firewall pluto[23477]: leak: 5 * saved received dcookie, item size: 24
Aug 20 08:27:13 hal-internal-firewall pluto[23477]: leak: 65 * msg_digest, item size: 4152
Aug 20 08:27:13 hal-internal-firewall pluto[23477]: leak: EVENT_REINIT_SECRET, item size: 32
Aug 20 08:27:14 hal-internal-firewall pluto[23477]: leak: 56 * msg_digest, item size: 4152
Aug 20 08:27:14 hal-internal-firewall pluto[23477]: leak: 3 * saved received dcookie, item size: 24
Aug 20 08:27:14 hal-internal-firewall pluto[23477]: leak: 3 * msg_digest, item size: 4152
Aug 20 08:27:14 hal-internal-firewall pluto[23477]: leak: 2 * saved received dcookie, item size: 24
Aug 20 08:27:14 hal-internal-firewall pluto[23477]: leak: 8 * msg_digest, item size: 4152
Aug 20 08:27:14 hal-internal-firewall pluto[23477]: leak: 2 * saved received dcookie, item size: 24
Aug 20 08:27:15 hal-internal-firewall pluto[23477]: leak: 142 * msg_digest, item size: 4152
Aug 20 08:27:15 hal-internal-firewall pluto[23477]: leak: 5 * saved received dcookie, item size: 24
Aug 20 08:27:15 hal-internal-firewall pluto[23477]: leak: 4 * msg_digest, item size: 4152
Aug 20 08:27:15 hal-internal-firewall pluto[23477]: leak: 3 * saved received dcookie, item size: 24
Aug 20 08:27:15 hal-internal-firewall pluto[23477]: leak: 2 * msg_digest, item size: 4152
Aug 20 08:27:15 hal-internal-firewall pluto[23477]: leak: saved received dcookie, item size: 24
Aug 20 08:27:16 hal-internal-firewall pluto[23477]: leak: 8 * msg_digest, item size: 4152
Aug 20 08:27:16 hal-internal-firewall pluto[23477]: leak: 3 * saved received dcookie, item size: 24
Aug 20 08:27:16 hal-internal-firewall pluto[23477]: leak: 2 * msg_digest, item size: 4152
Aug 20 08:27:16 hal-internal-firewall pluto[23477]: leak: 2 * saved received dcookie, item size: 24
Aug 20 08:27:16 hal-internal-firewall pluto[23477]: leak: 8 * msg_digest, item size: 4152
Aug 20 08:27:16 hal-internal-firewall pluto[23477]: leak: 2 * saved received dcookie, item size: 24
Aug 20 08:27:17 hal-internal-firewall pluto[23477]: leak: 127 * msg_digest, item size: 4152
Aug 20 08:27:17 hal-internal-firewall pluto[23477]: leak: 2 * saved received dcookie, item size: 24
Aug 20 08:27:17 hal-internal-firewall pluto[23477]: leak: 11 * msg_digest, item size: 4152
Aug 20 08:27:17 hal-internal-firewall pluto[23477]: leak: 6 * saved received dcookie, item size: 24
Aug 20 08:27:19 hal-internal-firewall pluto[23477]: leak: 118 * msg_digest, item size: 4152
Aug 20 08:27:19 hal-internal-firewall pluto[23477]: leak: 3 * saved received dcookie, item size: 24
Aug 20 08:27:19 hal-internal-firewall pluto[23477]: leak: 2 * msg_digest, item size: 4152
Aug 20 08:27:19 hal-internal-firewall pluto[23477]: leak: 15 * saved received dcookie, item size: 24
Aug 20 08:27:19 hal-internal-firewall pluto[23477]: leak: msg_digest, item size: 4152
Aug 20 08:27:19 hal-internal-firewall pluto[23477]: leak: 15 * saved received dcookie, item size: 24
Aug 20 08:27:19 hal-internal-firewall pluto[23477]: leak: 49 * msg_digest, item size: 4152
Aug 20 08:27:19 hal-internal-firewall pluto[23477]: leak: 2 * saved received dcookie, item size: 24
Aug 20 08:27:19 hal-internal-firewall pluto[23477]: leak: 14 * msg_digest, item size: 4152
Aug 20 08:27:19 hal-internal-firewall pluto[23477]: leak: 2 * saved received dcookie, item size: 24
Aug 20 08:27:21 hal-internal-firewall pluto[23477]: leak: 99 * msg_digest, item size: 4152
Aug 20 08:27:21 hal-internal-firewall pluto[23477]: leak: 13 * saved received dcookie, item size: 24
Aug 20 08:27:21 hal-internal-firewall pluto[23477]: leak: msg_digest, item size: 4152
Aug 20 08:27:21 hal-internal-firewall pluto[23477]: leak: 2 * saved received dcookie, item size: 24
Aug 20 08:27:21 hal-internal-firewall pluto[23477]: leak: 6 * msg_digest, item size: 4152
Aug 20 08:27:21 hal-internal-firewall pluto[23477]: leak: 3 * saved received dcookie, item size: 24
Aug 20 08:27:25 hal-internal-firewall pluto[23477]: leak: 333 * msg_digest, item size: 4152
Aug 20 08:27:25 hal-internal-firewall pluto[23477]: leak: EVENT_LOG_DAILY, item size: 32
Aug 20 08:27:29 hal-internal-firewall pluto[23477]: leak: 393 * msg_digest, item size: 4152
Aug 20 08:27:29 hal-internal-firewall pluto[23477]: leak: saved received dcookie, item size: 24
Aug 20 08:27:29 hal-internal-firewall pluto[23477]: leak: 16 * msg_digest, item size: 4152
Aug 20 08:27:29 hal-internal-firewall pluto[23477]: leak: 6 * saved received dcookie, item size: 24
Aug 20 08:27:29 hal-internal-firewall pluto[23477]: leak: 10 * msg_digest, item size: 4152
Aug 20 08:27:29 hal-internal-firewall pluto[23477]: leak: saved received dcookie, item size: 24
Aug 20 08:27:29 hal-internal-firewall pluto[23477]: leak: 2 * msg_digest, item size: 4152
Aug 20 08:27:29 hal-internal-firewall pluto[23477]: leak: 8 * saved received dcookie, item size: 24
Aug 20 08:27:29 hal-internal-firewall pluto[23477]: leak: 3 * msg_digest, item size: 4152
Aug 20 08:27:29 hal-internal-firewall pluto[23477]: leak: 8 * saved received dcookie, item size: 24
Aug 20 08:27:29 hal-internal-firewall pluto[23477]: leak: msg_digest, item size: 4152
Aug 20 08:27:29 hal-internal-firewall pluto[23477]: leak: 18 * saved received dcookie, item size: 24
Aug 20 08:27:29 hal-internal-firewall pluto[23477]: leak: 3 * msg_digest, item size: 4152
Aug 20 08:27:29 hal-internal-firewall pluto[23477]: leak: 17 * saved received dcookie, item size: 24
Aug 20 08:27:29 hal-internal-firewall pluto[23477]: leak: 2 * msg_digest, item size: 4152
Aug 20 08:27:29 hal-internal-firewall pluto[23477]: leak: 15 * saved received dcookie, item size: 24
Aug 20 08:27:29 hal-internal-firewall pluto[23477]: leak: 13 * msg_digest, item size: 4152
Aug 20 08:27:29 hal-internal-firewall pluto[23477]: leak: 7 * saved received dcookie, item size: 24
Aug 20 08:27:29 hal-internal-firewall pluto[23477]: leak: 4 * msg_digest, item size: 4152
Aug 20 08:27:29 hal-internal-firewall pluto[23477]: leak: saved received dcookie, item size: 24
Aug 20 08:27:29 hal-internal-firewall pluto[23477]: leak: 5 * msg_digest, item size: 4152
Aug 20 08:27:29 hal-internal-firewall pluto[23477]: leak: 6 * saved received dcookie, item size: 24
Aug 20 08:27:29 hal-internal-firewall pluto[23477]: leak: 8 * msg_digest, item size: 4152
Aug 20 08:27:29 hal-internal-firewall pluto[23477]: leak: saved received dcookie, item size: 24
Aug 20 08:27:29 hal-internal-firewall pluto[23477]: leak: 2 * msg_digest, item size: 4152
Aug 20 08:27:29 hal-internal-firewall pluto[23477]: leak: 5 * saved received dcookie, item size: 24
Aug 20 08:27:29 hal-internal-firewall pluto[23477]: leak: 5 * msg_digest, item size: 4152
Aug 20 08:27:29 hal-internal-firewall pluto[23477]: leak: saved received dcookie, item size: 24
Aug 20 08:27:29 hal-internal-firewall pluto[23477]: leak: 2 * msg_digest, item size: 4152
Aug 20 08:27:29 hal-internal-firewall pluto[23477]: leak: 3 * saved received dcookie, item size: 24
Aug 20 08:27:30 hal-internal-firewall pluto[23477]: leak: 40 * msg_digest, item size: 4152
Aug 20 08:27:30 hal-internal-firewall pluto[23477]: leak: 2 * saved received dcookie, item size: 24
Aug 20 08:27:32 hal-internal-firewall pluto[23477]: leak: 306 * msg_digest, item size: 4152
Aug 20 08:27:32 hal-internal-firewall pluto[23477]: leak: 5 * saved received dcookie, item size: 24
Aug 20 08:27:32 hal-internal-firewall pluto[23477]: leak: 2 * msg_digest, item size: 4152
Aug 20 08:27:32 hal-internal-firewall pluto[23477]: leak: saved received dcookie, item size: 24
Aug 20 08:27:32 hal-internal-firewall pluto[23477]: leak: 8 * msg_digest, item size: 4152
Aug 20 08:27:32 hal-internal-firewall pluto[23477]: leak: 20 * saved received dcookie, item size: 24
Aug 20 08:27:32 hal-internal-firewall pluto[23477]: leak: msg_digest, item size: 4152
Aug 20 08:27:32 hal-internal-firewall pluto[23477]: leak: 4 * saved received dcookie, item size: 24
Aug 20 08:27:33 hal-internal-firewall pluto[23477]: leak: 27 * msg_digest, item size: 4152
Aug 20 08:27:33 hal-internal-firewall pluto[23477]: leak: 3 * saved received dcookie, item size: 24
Aug 20 08:27:33 hal-internal-firewall pluto[23477]: leak: 11 * msg_digest, item size: 4152
Aug 20 08:27:33 hal-internal-firewall pluto[23477]: leak: 13 * saved received dcookie, item size: 24
Aug 20 08:27:33 hal-internal-firewall pluto[23477]: leak: 26 * msg_digest, item size: 4152
Aug 20 08:27:33 hal-internal-firewall pluto[23477]: leak: 55 * saved received dcookie, item size: 24
Aug 20 08:27:35 hal-internal-firewall pluto[23477]: leak: 177 * msg_digest, item size: 4152
Aug 20 08:27:35 hal-internal-firewall pluto[23477]: leak: 2 * saved received dcookie, item size: 24
Aug 20 08:27:35 hal-internal-firewall pluto[23477]: leak: 2 * msg_digest, item size: 4152
Aug 20 08:27:35 hal-internal-firewall pluto[23477]: leak: 4 * saved received dcookie, item size: 24


Thanks

Joe.