[Swan] Memory Leak / LibreSwan instability

Thu Aug 23 15:03:19 UTC 2018

Not really, but I suspect those listed leaks are misleading:

- to leak 4GB either something is MB in size or allocated millions of
times, I don't see that

- the few objects I checked were under the control of a crypto thread
(or in the crypto queue); shutdown doesn't try to clean that up
(getting that correct is hairy for little value, and that is before
having to deal with (mumble something rude) broken pthread_cancel())

The other place a leak can occur is in the crypto code.  Because
crypto objects are allocated from NSS's private memory pool the don't
show up in the above list.  The only symptom is a large process size
after lots of crypto.  One notable fix, in 3.20, is:

* IKEv2: Fix memory leak in DH secret calculation (since v3.9)
(reported by Eric Andersson)

Andrew
On Thu, 23 Aug 2018 at 05:58, Madden, Joe <Joe.Madden at mottmac.com> wrote:
>
> Hi List,
>
> Does anyone have any suggestions?
>
> Cheers
>
> Joe.
>
> -----Original Message-----
> From: Madden, Joe
> Sent: 20 August 2018 09:55
> To: Madden, Joe <Joe.Madden at mottmac.com>; swan at lists.libreswan.org
> Subject: RE: Memory Leak / LibreSwan instability
>
> Sorry, the logs seems to have gone a bit nuts in the email below, I'd added it to paste in for you.
>
> https://pastebin.com/raw/Y1ZCFcQk
>
> Cheers
>
> Joe
>
> -----Original Message-----
> From: Swan <swan-bounces at lists.libreswan.org> On Behalf Of Madden, Joe
> Sent: 20 August 2018 09:48
> To: swan at lists.libreswan.org
> Subject: [Swan] Memory Leak / LibreSwan instability
>
> Hi List,
>
> We've had a reoccurring issue where Libreswan will lockup after time causing the VPNs become disconnect.
>
> The ipsec service does not shutdown cleanly, as a result we added in leak-detective to try and see if we could get some output to help us better understand the issue. After killing the service 4Gb of Memory will become free, and starting ipsec results in VPN connection working.
>
> Libreswan is running on RHEL 6.10 with version libreswan-3.15-7.5.el6_9.x86_64
>
> The leak information isn't very helpful to me - Does anyone understand it/is able to give me any pointers on what to try next?
>
>
> The VPN ends up into this state with
> Aug 20 08:26:19 hal-internal-firewall pluto[23477]: initiate_ondemand_body() failed to install negotiation_shunt, Aug 20 08:26:19 hal-internal-firewall pluto[23477]: initiate on demand from 10.123.38.95:41483 to 192.168.12.10:21 proto=6 state: fos_start because: acquire Aug 20 08:26:19 hal-internal-firewall pluto[23477]: assign_holdpass() delete_bare_shunt() failed Aug 20 08:26:27 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-2" #85466: max number of retransmissions (8) reached STATE_PARENT_I1.  No response (or no acceptable response) to our first IKEv2 message Aug 20 08:26:27 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-2" #85466: starting keying attempt 3 of an unlimited number Aug 20 08:26:27 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-2" #85574: initiating v2 parent SA to replace #85466 Aug 20 08:26:27 hal-internal-firewall pluto[23477]: deleting state #85466 (STATE_PARENT_I1)
>
> The Leak information is below:
>
> Aug 20 08:27:10 hal-internal-firewall pluto[23477]: shutting down Aug 20 08:27:10 hal-internal-firewall pluto[23477]: forgetting secrets Aug 20 08:27:10 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-3": deleting connection Aug 20 08:27:10 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-3" #85548: deleting state #85548 (STATE_PARENT_I1) Aug 20 08:27:10 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-3" #85559: deleting state #85559 (STATE_PARENT_I1) Aug 20 08:27:10 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-2": deleting connection Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-2" #85545: deleting state #85545 (STATE_PARENT_I1) Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-2" #85584: deleting state #85584 (STATE_PARENT_I1) Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-2" #85526: deleting state #85526 (STATE_PARENT_I1) Aug 2
>  0 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-2" #85571: deleting state #85571 (STATE_PARENT_I1) Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-2" #85568: deleting state #85568 (STATE_PARENT_I1) Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-2" #85576: deleting state #85576 (STATE_PARENT_I1) Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-2" #85580: deleting state #85580 (STATE_PARENT_I1) Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-2" #85531: deleting state #85531 (STATE_PARENT_I1) Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-2" #85589: deleting state #85589 (STATE_PARENT_I1) Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-2" #85555: deleting state #85555 (STATE_PARENT_I1) Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-2" #85553: de
>  leting state #85553 (STATE_PARENT_I1) Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-2" #85578: deleting state #85578 (STATE_PARENT_I1) Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-2" #85563: deleting state #85563 (STATE_PARENT_I1) Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-2" #85557: deleting state #85557 (STATE_PARENT_I1) Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-2" #85528: deleting state #85528 (STATE_PARENT_I1) Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-2" #85572: deleting state #85572 (STATE_PARENT_I1) Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-2" #85564: deleting state #85564 (STATE_PARENT_I1) Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-2" #85536: deleting state #85536 (STATE_PARENT_I1) Aug 20 08:27:11 hal-internal-firewall pluto[23477
>  ]: "ssl-iptrafficsig-1-subnet-2" #85527: deleting state #85527 (STATE_PARENT_I1) Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-2" #85508: deleting state #85508 (STATE_PARENT_I1) Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-2" #85551: deleting state #85551 (STATE_PARENT_I1) Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-2" #85521: deleting state #85521 (STATE_PARENT_I1) Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-2" #85575: deleting state #85575 (STATE_PARENT_I1) Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-2" #85547: deleting state #85547 (STATE_PARENT_I1) Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-2" #85534: deleting state #85534 (STATE_PARENT_I1) Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-2" #85566: deleting state #85566 (STATE_PARENT_I1) Aug 20
>   08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-2" #85532: deleting state #85532 (STATE_PARENT_I1) Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-2" #85549: deleting state #85549 (STATE_PARENT_I1) Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-2" #85535: deleting state #85535 (STATE_PARENT_I1) Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-2" #85530: deleting state #85530 (STATE_PARENT_I1) Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-2" #85511: deleting state #85511 (STATE_PARENT_I1) Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-2" #85574: deleting state #85574 (STATE_PARENT_I1) Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-2" #85540: deleting state #85540 (STATE_PARENT_I1) Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-2" #85550: del
>  eting state #85550 (STATE_PARENT_I1) Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-2" #85541: deleting state #85541 (STATE_PARENT_I1) Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-2" #85538: deleting state #85538 (STATE_PARENT_I1) Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-1": deleting connection Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-1" #85567: deleting state #85567 (STATE_PARENT_I1) Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-1" #85582: deleting state #85582 (STATE_PARENT_I1) Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-1" #85579: deleting state #85579 (STATE_PARENT_I1) Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-1" #85577: deleting state #85577 (STATE_PARENT_I1) Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subne
>  t-1" #85546: deleting state #85546 (STATE_PARENT_I1) Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-1" #85524: deleting state #85524 (STATE_PARENT_I1) Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-1" #85573: deleting state #85573 (STATE_PARENT_I1) Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-1" #85512: deleting state #85512 (STATE_PARENT_I1) Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-1" #85509: deleting state #85509 (STATE_PARENT_I1) Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-1" #85587: deleting state #85587 (STATE_PARENT_I1) Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-1" #85565: deleting state #85565 (STATE_PARENT_I1) Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-1" #85560: deleting state #85560 (STATE_PARENT_I1) Aug 20 08:27:11 hal-internal-firew
>  all pluto[23477]: "ssl-iptrafficsig-1-subnet-1" #85510: deleting state #85510 (STATE_PARENT_I1) Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-1" #85581: deleting state #85581 (STATE_PARENT_I1) Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-1" #85515: deleting state #85515 (STATE_PARENT_I1) Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-1" #85556: deleting state #85556 (STATE_PARENT_I1) Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-1" #85514: deleting state #85514 (STATE_PARENT_I1) Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-1" #85507: deleting state #85507 (STATE_PARENT_I1) Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-1" #85504: deleting state #85504 (STATE_PARENT_I1) Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-1" #85588: deleting state #85588 (STATE_PA
>  RENT_I1) Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-1" #85554: deleting state #85554 (STATE_PARENT_I1) Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-1" #85505: deleting state #85505 (STATE_PARENT_I1) Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-1" #85552: deleting state #85552 (STATE_PARENT_I1) Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-1" #85519: deleting state #85519 (STATE_PARENT_I1) Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-1" #85518: deleting state #85518 (STATE_PARENT_I1) Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-1" #85516: deleting state #85516 (STATE_PARENT_I1) Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-1" #85558: deleting state #85558 (STATE_PARENT_I1) Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet
>  -1" #85542: deleting state #85542 (STATE_PARENT_I1) Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-1" #85520: deleting state #85520 (STATE_PARENT_I1) Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-1" #85533: deleting state #85533 (STATE_PARENT_I1) Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-1" #85583: deleting state #85583 (STATE_PARENT_I1) Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-1" #85585: deleting state #85585 (STATE_PARENT_I1) Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-1" #85543: deleting state #85543 (STATE_PARENT_I1) Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-1" #85539: deleting state #85539 (STATE_PARENT_I1) Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-1" #85570: deleting state #85570 (STATE_PARENT_I1) Aug 20 08:27:11 hal-internal-firewa
>  ll pluto[23477]: "ssl-iptrafficsig-1-subnet-1" #85569: deleting state #85569 (STATE_PARENT_I1) Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-1" #85537: deleting state #85537 (STATE_PARENT_I1) Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-1" #85525: deleting state #85525 (STATE_PARENT_I1) Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-1" #85590: deleting state #85590 (STATE_PARENT_I1) Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-1" #85562: deleting state #85562 (STATE_PARENT_I1) Aug 20 08:27:11 hal-internal-firewall pluto[23477]: "ssl-iptrafficsig-1-subnet-1" #85529: deleting state #85529 (STATE_PARENT_I1) Aug 20 08:27:12 hal-internal-firewall pluto[23477]: "v6neighbor-hole-out": deleting connection Aug 20 08:27:12 hal-internal-firewall pluto[23477]: "v6neighbor-hole-in": deleting connection Aug 20 08:27:12 hal-internal-firewall pluto[23477]: "ssl-nissen
>  -1/13x0": deleting connection Aug 20 08:27:12 hal-internal-firewall pluto[23477]: "ssl-nissen-1/13x0" #85523: deleting state #85523 (STATE_MAIN_R1) Aug 20 08:27:12 hal-internal-firewall pluto[23477]: "ssl-nissen-1/13x0" #85522: deleting state #85522 (STATE_MAIN_R1) Aug 20 08:27:12 hal-internal-firewall pluto[23477]: "ssl-nissen-1/13x0" #85561: deleting state #85561 (STATE_MAIN_R1) Aug 20 08:27:12 hal-internal-firewall pluto[23477]: "ssl-nissen-1/13x0" #85544: deleting state #85544 (STATE_MAIN_R1) Aug 20 08:27:12 hal-internal-firewall pluto[23477]: "ssl-nissen-1/12x0": deleting connection Aug 20 08:27:12 hal-internal-firewall pluto[23477]: "ssl-nissen-1/11x0": deleting connection Aug 20 08:27:12 hal-internal-firewall pluto[23477]: "ssl-nissen-1/10x0": deleting connection Aug 20 08:27:12 hal-internal-firewall pluto[23477]: "ssl-nissen-1/9x0": deleting connection Aug 20 08:27:12 hal-internal-firewall pluto[23477]: "ssl-nissen-1/8x0": deleting connection Aug 20 08:27:12 hal-internal-fir
>  ewall pluto[23477]: "ssl-nissen-1/7x0": deleting connection Aug 20 08:27:12 hal-internal-firewall pluto[23477]: "ssl-nissen-1/6x0": deleting connection Aug 20 08:27:12 hal-internal-firewall pluto[23477]: "ssl-nissen-1/5x0": deleting connection Aug 20 08:27:12 hal-internal-firewall pluto[23477]: "ssl-nissen-1/4x0": deleting connection Aug 20 08:27:12 hal-internal-firewall pluto[23477]: "ssl-nissen-1/3x0": deleting connection Aug 20 08:27:12 hal-internal-firewall pluto[23477]: "ssl-nissen-1/2x0": deleting connection Aug 20 08:27:12 hal-internal-firewall pluto[23477]: "ssl-nissen-1/1x0": deleting connection Aug 20 08:27:12 hal-internal-firewall pluto[23477]: "ssl-nissen-1/1x0" #85586: deleting state #85586 (STATE_MAIN_I1) Aug 20 08:27:12 hal-internal-firewall pluto[23477]: shutting down interface lo/lo 127.0.0.1:4500 Aug 20 08:27:12 hal-internal-firewall pluto[23477]: shutting down interface lo/lo 127.0.0.1:500 Aug 20 08:27:12 hal-internal-firewall pluto[23477]: shutting down interface
>   eth1/eth1 10.59.31.49:4500 Aug 20 08:27:12 hal-internal-firewall pluto[23477]: shutting down interface eth1/eth1 10.59.31.49:500 Aug 20 08:27:12 hal-internal-firewall pluto[23477]: shutting down interface eth1:0/eth1:0 10.59.31.50:4500 Aug 20 08:27:12 hal-internal-firewall pluto[23477]: shutting down interface eth1:0/eth1:0 10.59.31.50:500 Aug 20 08:27:12 hal-internal-firewall pluto[23477]: shutting down interface eth4/eth4 10.59.42.110:4500 Aug 20 08:27:12 hal-internal-firewall pluto[23477]: shutting down interface eth4/eth4 10.59.42.110:500 Aug 20 08:27:12 hal-internal-firewall pluto[23477]: shutting down interface bond0/bond0 10.59.31.33:4500 Aug 20 08:27:12 hal-internal-firewall pluto[23477]: shutting down interface bond0/bond0 10.59.31.33:500 Aug 20 08:27:13 hal-internal-firewall pluto[23477]: leak: 4 * ikev2_outI1 KE, item size: 144 Aug 20 08:27:13 hal-internal-firewall pluto[23477]: leak: EVENT_PENDING_DDNS, item size: 32 Aug 20 08:27:13 hal-internal-firewall pluto[23477]: l
>  eak: ikev2_outI1 KE, item size: 144 Aug 20 08:27:13 hal-internal-firewall pluto[23477]: leak: msg_digest, item size: 4152 Aug 20 08:27:13 hal-internal-firewall pluto[23477]: leak: ikev2_outI1 KE, item size: 144 Aug 20 08:27:13 hal-internal-firewall pluto[23477]: leak: msg_digest, item size: 4152 Aug 20 08:27:13 hal-internal-firewall pluto[23477]: leak: ikev2_outI1 KE, item size: 144 Aug 20 08:27:13 hal-internal-firewall pluto[23477]: leak: msg_digest, item size: 4152 Aug 20 08:27:13 hal-internal-firewall pluto[23477]: leak: ikev2_outI1 KE, item size: 144 Aug 20 08:27:13 hal-internal-firewall pluto[23477]: leak: msg_digest, item size: 4152 Aug 20 08:27:13 hal-internal-firewall pluto[23477]: leak: ikev2_outI1 KE, item size: 144 Aug 20 08:27:13 hal-internal-firewall pluto[23477]: leak: msg_digest, item size: 4152 Aug 20 08:27:13 hal-internal-firewall pluto[23477]: leak: ikev2_outI1 KE, item size: 144 Aug 20 08:27:13 hal-internal-firewall pluto[23477]: leak: msg_digest, item size: 4152
>  Aug 20 08:27:13 hal-internal-firewall pluto[23477]: leak: ikev2_outI1 KE, item size: 144 Aug 20 08:27:13 hal-internal-firewall pluto[23477]: leak: msg_digest, item size: 4152 Aug 20 08:27:13 hal-internal-firewall pluto[23477]: leak: ikev2_outI1 KE, item size: 144 Aug 20 08:27:13 hal-internal-firewall pluto[23477]: leak: msg_digest, item size: 4152 Aug 20 08:27:13 hal-internal-firewall pluto[23477]: leak: ikev2_outI1 KE, item size: 144 Aug 20 08:27:13 hal-internal-firewall pluto[23477]: leak: msg_digest, item size: 4152 Aug 20 08:27:13 hal-internal-firewall pluto[23477]: leak: ikev2_outI1 KE, item size: 144 Aug 20 08:27:13 hal-internal-firewall pluto[23477]: leak: msg_digest, item size: 4152 Aug 20 08:27:13 hal-internal-firewall pluto[23477]: leak: ikev2_outI1 KE, item size: 144 Aug 20 08:27:13 hal-internal-firewall pluto[23477]: leak: msg_digest, item size: 4152 Aug 20 08:27:13 hal-internal-firewall pluto[23477]: leak: ikev2_outI1 KE, item size: 144 Aug 20 08:27:13 hal-internal-fire
>  wall pluto[23477]: leak: msg_digest, item size: 4152 Aug 20 08:27:13 hal-internal-firewall pluto[23477]: leak: ikev2_outI1 KE, item size: 144 Aug 20 08:27:13 hal-internal-firewall pluto[23477]: leak: msg_digest, item size: 4152 Aug 20 08:27:13 hal-internal-firewall pluto[23477]: leak: ikev2_outI1 KE, item size: 144 Aug 20 08:27:13 hal-internal-firewall pluto[23477]: leak: msg_digest, item size: 4152 Aug 20 08:27:13 hal-internal-firewall pluto[23477]: leak: ikev2_outI1 KE, item size: 144 Aug 20 08:27:13 hal-internal-firewall pluto[23477]: leak: msg_digest, item size: 4152 Aug 20 08:27:13 hal-internal-firewall pluto[23477]: leak: ikev2_outI1 KE, item size: 144 Aug 20 08:27:13 hal-internal-firewall pluto[23477]: leak: msg_digest, item size: 4152 Aug 20 08:27:13 hal-internal-firewall pluto[23477]: leak: ikev2_outI1 KE, item size: 144 Aug 20 08:27:13 hal-internal-firewall pluto[23477]: leak: msg_digest, item size: 4152 Aug 20 08:27:13 hal-internal-firewall pluto[23477]: leak: ikev2_outI1
>   KE, item size: 144 Aug 20 08:27:13 hal-internal-firewall pluto[23477]: leak: msg_digest, item size: 4152 Aug 20 08:27:13 hal-internal-firewall pluto[23477]: leak: 3 * ikev2_outI1 KE, item size: 144 Aug 20 08:27:13 hal-internal-firewall pluto[23477]: leak: EVENT_SHUNT_SCAN, item size: 32 Aug 20 08:27:13 hal-internal-firewall pluto[23477]: leak: 3 * ikev2_outI1 KE, item size: 144 Aug 20 08:27:13 hal-internal-firewall pluto[23477]: leak: msg_digest, item size: 4152 Aug 20 08:27:13 hal-internal-firewall pluto[23477]: leak: ikev2_outI1 KE, item size: 144 Aug 20 08:27:13 hal-internal-firewall pluto[23477]: leak: msg_digest, item size: 4152 Aug 20 08:27:13 hal-internal-firewall pluto[23477]: leak: ikev2_outI1 KE, item size: 144 Aug 20 08:27:13 hal-internal-firewall pluto[23477]: leak: msg_digest, item size: 4152 Aug 20 08:27:13 hal-internal-firewall pluto[23477]: leak: ikev2_outI1 KE, item size: 144 Aug 20 08:27:13 hal-internal-firewall pluto[23477]: leak: msg_digest, item size: 4152 Aug
>  20 08:27:13 hal-internal-firewall pluto[23477]: leak: 4 * ikev2_outI1 KE, item size: 144 Aug 20 08:27:13 hal-internal-firewall pluto[23477]: leak: EVENT_PENDING_PHASE2, item size: 32 Aug 20 08:27:13 hal-internal-firewall pluto[23477]: leak: 91 * msg_digest, item size: 4152 Aug 20 08:27:13 hal-internal-firewall pluto[23477]: leak: 5 * saved received dcookie, item size: 24 Aug 20 08:27:13 hal-internal-firewall pluto[23477]: leak: 65 * msg_digest, item size: 4152 Aug 20 08:27:13 hal-internal-firewall pluto[23477]: leak: EVENT_REINIT_SECRET, item size: 32 Aug 20 08:27:14 hal-internal-firewall pluto[23477]: leak: 56 * msg_digest, item size: 4152 Aug 20 08:27:14 hal-internal-firewall pluto[23477]: leak: 3 * saved received dcookie, item size: 24 Aug 20 08:27:14 hal-internal-firewall pluto[23477]: leak: 3 * msg_digest, item size: 4152 Aug 20 08:27:14 hal-internal-firewall pluto[23477]: leak: 2 * saved received dcookie, item size: 24 Aug 20 08:27:14 hal-internal-firewall pluto[23477]: leak:
>  8 * msg_digest, item size: 4152 Aug 20 08:27:14 hal-internal-firewall pluto[23477]: leak: 2 * saved received dcookie, item size: 24 Aug 20 08:27:15 hal-internal-firewall pluto[23477]: leak: 142 * msg_digest, item size: 4152 Aug 20 08:27:15 hal-internal-firewall pluto[23477]: leak: 5 * saved received dcookie, item size: 24 Aug 20 08:27:15 hal-internal-firewall pluto[23477]: leak: 4 * msg_digest, item size: 4152 Aug 20 08:27:15 hal-internal-firewall pluto[23477]: leak: 3 * saved received dcookie, item size: 24 Aug 20 08:27:15 hal-internal-firewall pluto[23477]: leak: 2 * msg_digest, item size: 4152 Aug 20 08:27:15 hal-internal-firewall pluto[23477]: leak: saved received dcookie, item size: 24 Aug 20 08:27:16 hal-internal-firewall pluto[23477]: leak: 8 * msg_digest, item size: 4152 Aug 20 08:27:16 hal-internal-firewall pluto[23477]: leak: 3 * saved received dcookie, item size: 24 Aug 20 08:27:16 hal-internal-firewall pluto[23477]: leak: 2 * msg_digest, item size: 4152 Aug 20 08:27:16 h
>  al-internal-firewall pluto[23477]: leak: 2 * saved received dcookie, item size: 24 Aug 20 08:27:16 hal-internal-firewall pluto[23477]: leak: 8 * msg_digest, item size: 4152 Aug 20 08:27:16 hal-internal-firewall pluto[23477]: leak: 2 * saved received dcookie, item size: 24 Aug 20 08:27:17 hal-internal-firewall pluto[23477]: leak: 127 * msg_digest, item size: 4152 Aug 20 08:27:17 hal-internal-firewall pluto[23477]: leak: 2 * saved received dcookie, item size: 24 Aug 20 08:27:17 hal-internal-firewall pluto[23477]: leak: 11 * msg_digest, item size: 4152 Aug 20 08:27:17 hal-internal-firewall pluto[23477]: leak: 6 * saved received dcookie, item size: 24 Aug 20 08:27:19 hal-internal-firewall pluto[23477]: leak: 118 * msg_digest, item size: 4152 Aug 20 08:27:19 hal-internal-firewall pluto[23477]: leak: 3 * saved received dcookie, item size: 24 Aug 20 08:27:19 hal-internal-firewall pluto[23477]: leak: 2 * msg_digest, item size: 4152 Aug 20 08:27:19 hal-internal-firewall pluto[23477]: leak: 1
>  5 * saved received dcookie, item size: 24 Aug 20 08:27:19 hal-internal-firewall pluto[23477]: leak: msg_digest, item size: 4152 Aug 20 08:27:19 hal-internal-firewall pluto[23477]: leak: 15 * saved received dcookie, item size: 24 Aug 20 08:27:19 hal-internal-firewall pluto[23477]: leak: 49 * msg_digest, item size: 4152 Aug 20 08:27:19 hal-internal-firewall pluto[23477]: leak: 2 * saved received dcookie, item size: 24 Aug 20 08:27:19 hal-internal-firewall pluto[23477]: leak: 14 * msg_digest, item size: 4152 Aug 20 08:27:19 hal-internal-firewall pluto[23477]: leak: 2 * saved received dcookie, item size: 24 Aug 20 08:27:21 hal-internal-firewall pluto[23477]: leak: 99 * msg_digest, item size: 4152 Aug 20 08:27:21 hal-internal-firewall pluto[23477]: leak: 13 * saved received dcookie, item size: 24 Aug 20 08:27:21 hal-internal-firewall pluto[23477]: leak: msg_digest, item size: 4152 Aug 20 08:27:21 hal-internal-firewall pluto[23477]: leak: 2 * saved received dcookie, item size: 24 Aug 20 0
>  8:27:21 hal-internal-firewall pluto[23477]: leak: 6 * msg_digest, item size: 4152 Aug 20 08:27:21 hal-internal-firewall pluto[23477]: leak: 3 * saved received dcookie, item size: 24 Aug 20 08:27:25 hal-internal-firewall pluto[23477]: leak: 333 * msg_digest, item size: 4152 Aug 20 08:27:25 hal-internal-firewall pluto[23477]: leak: EVENT_LOG_DAILY, item size: 32 Aug 20 08:27:29 hal-internal-firewall pluto[23477]: leak: 393 * msg_digest, item size: 4152 Aug 20 08:27:29 hal-internal-firewall pluto[23477]: leak: saved received dcookie, item size: 24 Aug 20 08:27:29 hal-internal-firewall pluto[23477]: leak: 16 * msg_digest, item size: 4152 Aug 20 08:27:29 hal-internal-firewall pluto[23477]: leak: 6 * saved received dcookie, item size: 24 Aug 20 08:27:29 hal-internal-firewall pluto[23477]: leak: 10 * msg_digest, item size: 4152 Aug 20 08:27:29 hal-internal-firewall pluto[23477]: leak: saved received dcookie, item size: 24 Aug 20 08:27:29 hal-internal-firewall pluto[23477]: leak: 2 * msg_di
>  gest, item size: 4152 Aug 20 08:27:29 hal-internal-firewall pluto[23477]: leak: 8 * saved received dcookie, item size: 24 Aug 20 08:27:29 hal-internal-firewall pluto[23477]: leak: 3 * msg_digest, item size: 4152 Aug 20 08:27:29 hal-internal-firewall pluto[23477]: leak: 8 * saved received dcookie, item size: 24 Aug 20 08:27:29 hal-internal-firewall pluto[23477]: leak: msg_digest, item size: 4152 Aug 20 08:27:29 hal-internal-firewall pluto[23477]: leak: 18 * saved received dcookie, item size: 24 Aug 20 08:27:29 hal-internal-firewall pluto[23477]: leak: 3 * msg_digest, item size: 4152 Aug 20 08:27:29 hal-internal-firewall pluto[23477]: leak: 17 * saved received dcookie, item size: 24 Aug 20 08:27:29 hal-internal-firewall pluto[23477]: leak: 2 * msg_digest, item size: 4152 Aug 20 08:27:29 hal-internal-firewall pluto[23477]: leak: 15 * saved received dcookie, item size: 24 Aug 20 08:27:29 hal-internal-firewall pluto[23477]: leak: 13 * msg_digest, item size: 4152 Aug 20 08:27:29 hal-inter
>  nal-firewall pluto[23477]: leak: 7 * saved received dcookie, item size: 24 Aug 20 08:27:29 hal-internal-firewall pluto[23477]: leak: 4 * msg_digest, item size: 4152 Aug 20 08:27:29 hal-internal-firewall pluto[23477]: leak: saved received dcookie, item size: 24 Aug 20 08:27:29 hal-internal-firewall pluto[23477]: leak: 5 * msg_digest, item size: 4152 Aug 20 08:27:29 hal-internal-firewall pluto[23477]: leak: 6 * saved received dcookie, item size: 24 Aug 20 08:27:29 hal-internal-firewall pluto[23477]: leak: 8 * msg_digest, item size: 4152 Aug 20 08:27:29 hal-internal-firewall pluto[23477]: leak: saved received dcookie, item size: 24 Aug 20 08:27:29 hal-internal-firewall pluto[23477]: leak: 2 * msg_digest, item size: 4152 Aug 20 08:27:29 hal-internal-firewall pluto[23477]: leak: 5 * saved received dcookie, item size: 24 Aug 20 08:27:29 hal-internal-firewall pluto[23477]: leak: 5 * msg_digest, item size: 4152 Aug 20 08:27:29 hal-internal-firewall pluto[23477]: leak: saved received dcookie
>  , item size: 24 Aug 20 08:27:29 hal-internal-firewall pluto[23477]: leak: 2 * msg_digest, item size: 4152 Aug 20 08:27:29 hal-internal-firewall pluto[23477]: leak: 3 * saved received dcookie, item size: 24 Aug 20 08:27:30 hal-internal-firewall pluto[23477]: leak: 40 * msg_digest, item size: 4152 Aug 20 08:27:30 hal-internal-firewall pluto[23477]: leak: 2 * saved received dcookie, item size: 24 Aug 20 08:27:32 hal-internal-firewall pluto[23477]: leak: 306 * msg_digest, item size: 4152 Aug 20 08:27:32 hal-internal-firewall pluto[23477]: leak: 5 * saved received dcookie, item size: 24 Aug 20 08:27:32 hal-internal-firewall pluto[23477]: leak: 2 * msg_digest, item size: 4152 Aug 20 08:27:32 hal-internal-firewall pluto[23477]: leak: saved received dcookie, item size: 24 Aug 20 08:27:32 hal-internal-firewall pluto[23477]: leak: 8 * msg_digest, item size: 4152 Aug 20 08:27:32 hal-internal-firewall pluto[23477]: leak: 20 * saved received dcookie, item size: 24 Aug 20 08:27:32 hal-internal-fi
>  rewall pluto[23477]: leak: msg_digest, item size: 4152 Aug 20 08:27:32 hal-internal-firewall pluto[23477]: leak: 4 * saved received dcookie, item size: 24 Aug 20 08:27:33 hal-internal-firewall pluto[23477]: leak: 27 * msg_digest, item size: 4152 Aug 20 08:27:33 hal-internal-firewall pluto[23477]: leak: 3 * saved received dcookie, item size: 24 Aug 20 08:27:33 hal-internal-firewall pluto[23477]: leak: 11 * msg_digest, item size: 4152 Aug 20 08:27:33 hal-internal-firewall pluto[23477]: leak: 13 * saved received dcookie, item size: 24 Aug 20 08:27:33 hal-internal-firewall pluto[23477]: leak: 26 * msg_digest, item size: 4152 Aug 20 08:27:33 hal-internal-firewall pluto[23477]: leak: 55 * saved received dcookie, item size: 24 Aug 20 08:27:35 hal-internal-firewall pluto[23477]: leak: 177 * msg_digest, item size: 4152 Aug 20 08:27:35 hal-internal-firewall pluto[23477]: leak: 2 * saved received dcookie, item size: 24 Aug 20 08:27:35 hal-internal-firewall pluto[23477]: leak: 2 * msg_digest, i
>  tem size: 4152 Aug 20 08:27:35 hal-internal-firewall pluto[23477]: leak: 4 * saved received dcookie, item size: 24
>
>
> Thanks
>
> Joe.
> _______________________________________________
> Swan mailing list
> Swan at lists.libreswan.org
> https://emea01.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists.libreswan.org%2Fmailman%2Flistinfo%2Fswan&data=01%7C01%7Cjoe.madden%40mottmac.com%7Cc9ef1376262b4b7025c408d60679b616%7Ca2bed0c459574f73b0c2a811407590fb%7C0&sdata=6Dl5bBWJizDFOCs33POoDaZaEByPxn3arJMD9Kz6XYY%3D&reserved=0
> _______________________________________________
> Swan mailing list
> Swan at lists.libreswan.org
> https://lists.libreswan.org/mailman/listinfo/swan