Foreground mode. 2010-03-18 12:27:28: INFO: @(#)ipsec-tools 0.7.1 (http://ipsec-tools.sourceforge.net) 2010-03-18 12:27:28: INFO: @(#)This product linked OpenSSL 0.9.8g 19 Oct 2007 (http://www.openssl.org/) 2010-03-18 12:27:28: INFO: Reading configuration from "/etc/racoon/racoon.conf" 2010-03-18 12:27:28: INFO: Resize address pool from 0 to 255 2010-03-18 12:27:28: DEBUG2: lifetime = 28800 2010-03-18 12:27:28: DEBUG2: lifebyte = 0 2010-03-18 12:27:28: DEBUG2: encklen=128 2010-03-18 12:27:28: DEBUG2: p:1 t:1 2010-03-18 12:27:28: DEBUG2: AES-CBC(7) 2010-03-18 12:27:28: DEBUG2: SHA(2) 2010-03-18 12:27:28: DEBUG2: 1024-bit MODP group(2) 2010-03-18 12:27:28: DEBUG2: RSA signatures(3) 2010-03-18 12:27:28: DEBUG2: 2010-03-18 12:27:28: DEBUG: hmac(modp1024) 2010-03-18 12:27:28: DEBUG: compression algorithm can not be checked because sadb message doesn't support it. 2010-03-18 12:27:28: DEBUG: getsainfo params: loc='ANONYMOUS', rmt='ANONYMOUS', peer='NULL', id=0 2010-03-18 12:27:28: DEBUG: getsainfo pass #2 2010-03-18 12:27:28: DEBUG2: parse successed. 2010-03-18 12:27:28: DEBUG: open /var/run/racoon/racoon.sock as racoon management. 2010-03-18 12:27:28: DEBUG: my interface: fe80::20c:29ff:fecd:9c8a%eth0 (eth0) 2010-03-18 12:27:28: DEBUG: my interface: 2001:1:1:1::1 (eth0) 2010-03-18 12:27:28: DEBUG: my interface: ::1 (lo) 2010-03-18 12:27:28: DEBUG: my interface: 192.168.111.129 (eth0) 2010-03-18 12:27:28: DEBUG: my interface: 127.0.0.1 (lo) 2010-03-18 12:27:28: DEBUG: configuring default isakmp port. 2010-03-18 12:27:28: DEBUG: 5 addrs are configured successfully 2010-03-18 12:27:28: INFO: 127.0.0.1[500] used as isakmp port (fd=6) 2010-03-18 12:27:28: INFO: 127.0.0.1[500] used for NAT-T 2010-03-18 12:27:28: INFO: 192.168.111.129[500] used as isakmp port (fd=7) 2010-03-18 12:27:28: INFO: 192.168.111.129[500] used for NAT-T 2010-03-18 12:27:28: INFO: ::1[500] used as isakmp port (fd=8) 2010-03-18 12:27:28: INFO: 2001:1:1:1::1[500] used as isakmp port (fd=9) 2010-03-18 12:27:28: INFO: fe80::20c:29ff:fecd:9c8a%eth0[500] used as isakmp port (fd=10) 2010-03-18 12:27:28: DEBUG: pk_recv: retry[0] recv() 2010-03-18 12:27:28: DEBUG: get pfkey X_SPDDUMP message 2010-03-18 12:27:28: DEBUG2: 02120000 18000200 01000000 4b0e0000 03000500 ff200000 02000000 c0a86f81 00000000 00000000 03000600 ff200000 02000000 c0a86f82 00000000 00000000 04000300 00000000 00000000 00000000 00000000 00000000 00000000 00000000 04000400 00000000 00000000 00000000 00000000 00000000 00000000 00000000 04000200 00000000 00000000 00000000 b61ba24b 00000000 d01ba24b 00000000 04001200 02000200 a1080000 00000080 10003200 01020000 00000000 00000000 2010-03-18 12:27:28: DEBUG: pk_recv: retry[0] recv() 2010-03-18 12:27:28: DEBUG: get pfkey X_SPDDUMP message 2010-03-18 12:27:28: DEBUG2: 02120000 18000100 02000000 4b0e0000 03000500 ff200000 02000000 c0a86f82 00000000 00000000 03000600 ff200000 02000000 c0a86f81 00000000 00000000 04000300 00000000 00000000 00000000 00000000 00000000 00000000 00000000 04000400 00000000 00000000 00000000 00000000 00000000 00000000 00000000 04000200 00000000 00000000 00000000 b61ba24b 00000000 00000000 00000000 04001200 02000300 9a080000 00000080 10003200 01020000 00000000 00000000 2010-03-18 12:27:28: DEBUG: sub:0xbfd50b28: 192.168.111.130/32[0] 192.168.111.129/32[0] proto=any dir=fwd 2010-03-18 12:27:28: DEBUG: db :0xb82c4970: 192.168.111.129/32[0] 192.168.111.130/32[0] proto=any dir=out 2010-03-18 12:27:28: DEBUG: pk_recv: retry[0] recv() 2010-03-18 12:27:28: DEBUG: get pfkey X_SPDDUMP message 2010-03-18 12:27:28: DEBUG2: 02120000 18000200 03000000 4b0e0000 03000500 ff200000 02000000 c0a86f82 00000000 00000000 03000600 ff200000 02000000 c0a86f81 00000000 00000000 04000300 00000000 00000000 00000000 00000000 00000000 00000000 00000000 04000400 00000000 00000000 00000000 00000000 00000000 00000000 00000000 04000200 00000000 00000000 00000000 b61ba24b 00000000 d01ba24b 00000000 04001200 02000100 90080000 00000080 10003200 01020000 00000000 00000000 2010-03-18 12:27:28: DEBUG: sub:0xbfd50b28: 192.168.111.130/32[0] 192.168.111.129/32[0] proto=any dir=in 2010-03-18 12:27:28: DEBUG: db :0xb82c4970: 192.168.111.129/32[0] 192.168.111.130/32[0] proto=any dir=out 2010-03-18 12:27:28: DEBUG: sub:0xbfd50b28: 192.168.111.130/32[0] 192.168.111.129/32[0] proto=any dir=in 2010-03-18 12:27:28: DEBUG: db :0xb82c5ea0: 192.168.111.130/32[0] 192.168.111.129/32[0] proto=any dir=fwd 2010-03-18 12:27:28: DEBUG: pk_recv: retry[0] recv() 2010-03-18 12:27:28: DEBUG: get pfkey X_SPDDUMP message 2010-03-18 12:27:28: DEBUG2: 02120000 1c000200 04000000 4b0e0000 05000500 ff800000 0a000000 00000000 20010001 00010001 00000000 00000001 00000000 00000000 05000600 ff800000 0a000000 00000000 20010001 00010001 00000000 00000002 00000000 00000000 04000300 00000000 00000000 00000000 00000000 00000000 00000000 00000000 04000400 00000000 00000000 00000000 00000000 00000000 00000000 00000000 04000200 00000000 00000000 00000000 b61ba24b 00000000 161ca24b 00000000 04001200 02000200 89080000 00000080 10003200 01020000 00000000 00000000 2010-03-18 12:27:28: DEBUG: sub:0xbfd50b28: 2001:1:1:1::1/128[0] 2001:1:1:1::2/128[0] proto=any dir=out 2010-03-18 12:27:28: DEBUG: db :0xb82c4970: 192.168.111.129/32[0] 192.168.111.130/32[0] proto=any dir=out 2010-03-18 12:27:28: DEBUG: sub:0xbfd50b28: 2001:1:1:1::1/128[0] 2001:1:1:1::2/128[0] proto=any dir=out 2010-03-18 12:27:28: DEBUG: db :0xb82c5ea0: 192.168.111.130/32[0] 192.168.111.129/32[0] proto=any dir=fwd 2010-03-18 12:27:28: DEBUG: sub:0xbfd50b28: 2001:1:1:1::1/128[0] 2001:1:1:1::2/128[0] proto=any dir=out 2010-03-18 12:27:28: DEBUG: db :0xb82c60e8: 192.168.111.130/32[0] 192.168.111.129/32[0] proto=any dir=in 2010-03-18 12:27:28: DEBUG: pk_recv: retry[0] recv() 2010-03-18 12:27:28: DEBUG: get pfkey X_SPDDUMP message 2010-03-18 12:27:28: DEBUG2: 02120000 1c000100 05000000 4b0e0000 05000500 ff800000 0a000000 00000000 20010001 00010001 00000000 00000002 00000000 00000000 05000600 ff800000 0a000000 00000000 20010001 00010001 00000000 00000001 00000000 00000000 04000300 00000000 00000000 00000000 00000000 00000000 00000000 00000000 04000400 00000000 00000000 00000000 00000000 00000000 00000000 00000000 04000200 00000000 00000000 00000000 b61ba24b 00000000 00000000 00000000 04001200 02000300 82080000 00000080 10003200 01020000 00000000 00000000 2010-03-18 12:27:28: DEBUG: sub:0xbfd50b28: 2001:1:1:1::2/128[0] 2001:1:1:1::1/128[0] proto=any dir=fwd 2010-03-18 12:27:28: DEBUG: db :0xb82c4970: 192.168.111.129/32[0] 192.168.111.130/32[0] proto=any dir=out 2010-03-18 12:27:28: DEBUG: sub:0xbfd50b28: 2001:1:1:1::2/128[0] 2001:1:1:1::1/128[0] proto=any dir=fwd 2010-03-18 12:27:28: DEBUG: db :0xb82c5ea0: 192.168.111.130/32[0] 192.168.111.129/32[0] proto=any dir=fwd 2010-03-18 12:27:28: DEBUG: sub:0xbfd50b28: 2001:1:1:1::2/128[0] 2001:1:1:1::1/128[0] proto=any dir=fwd 2010-03-18 12:27:28: DEBUG: db :0xb82c60e8: 192.168.111.130/32[0] 192.168.111.129/32[0] proto=any dir=in 2010-03-18 12:27:28: DEBUG: sub:0xbfd50b28: 2001:1:1:1::2/128[0] 2001:1:1:1::1/128[0] proto=any dir=fwd 2010-03-18 12:27:28: DEBUG: db :0xb82c6330: 2001:1:1:1::1/128[0] 2001:1:1:1::2/128[0] proto=any dir=out 2010-03-18 12:27:28: DEBUG: pk_recv: retry[0] recv() 2010-03-18 12:27:28: DEBUG: get pfkey X_SPDDUMP message 2010-03-18 12:27:28: DEBUG2: 02120000 1c000100 00000000 4b0e0000 05000500 ff800000 0a000000 00000000 20010001 00010001 00000000 00000002 00000000 00000000 05000600 ff800000 0a000000 00000000 20010001 00010001 00000000 00000001 00000000 00000000 04000300 00000000 00000000 00000000 00000000 00000000 00000000 00000000 04000400 00000000 00000000 00000000 00000000 00000000 00000000 00000000 04000200 00000000 00000000 00000000 b61ba24b 00000000 00000000 00000000 04001200 02000100 78080000 00000080 10003200 01020000 00000000 00000000 2010-03-18 12:27:28: DEBUG: sub:0xbfd50b28: 2001:1:1:1::2/128[0] 2001:1:1:1::1/128[0] proto=any dir=in 2010-03-18 12:27:28: DEBUG: db :0xb82c4970: 192.168.111.129/32[0] 192.168.111.130/32[0] proto=any dir=out 2010-03-18 12:27:28: DEBUG: sub:0xbfd50b28: 2001:1:1:1::2/128[0] 2001:1:1:1::1/128[0] proto=any dir=in 2010-03-18 12:27:28: DEBUG: db :0xb82c5ea0: 192.168.111.130/32[0] 192.168.111.129/32[0] proto=any dir=fwd 2010-03-18 12:27:28: DEBUG: sub:0xbfd50b28: 2001:1:1:1::2/128[0] 2001:1:1:1::1/128[0] proto=any dir=in 2010-03-18 12:27:28: DEBUG: db :0xb82c60e8: 192.168.111.130/32[0] 192.168.111.129/32[0] proto=any dir=in 2010-03-18 12:27:28: DEBUG: sub:0xbfd50b28: 2001:1:1:1::2/128[0] 2001:1:1:1::1/128[0] proto=any dir=in 2010-03-18 12:27:28: DEBUG: db :0xb82c6330: 2001:1:1:1::1/128[0] 2001:1:1:1::2/128[0] proto=any dir=out 2010-03-18 12:27:28: DEBUG: sub:0xbfd50b28: 2001:1:1:1::2/128[0] 2001:1:1:1::1/128[0] proto=any dir=in 2010-03-18 12:27:28: DEBUG: db :0xb82c6578: 2001:1:1:1::2/128[0] 2001:1:1:1::1/128[0] proto=any dir=fwd 2010-03-18 12:27:35: DEBUG: pk_recv: retry[0] recv() 2010-03-18 12:27:35: DEBUG: get pfkey ACQUIRE message 2010-03-18 12:27:35: DEBUG2: 02060003 0f000000 10000000 00000000 05000500 00800000 0a000000 00000000 20010001 00010001 00000000 00000001 00000000 55473a20 05000600 00800000 0a000000 00000000 20010001 00010001 00000000 00000002 00000000 20323030 02001200 0200023a 89080000 32385b30 01000d00 20000000 2010-03-18 12:27:35: DEBUG: suitable outbound SP found: 2001:1:1:1::1/128[0] 2001:1:1:1::2/128[0] proto=any dir=out. 2010-03-18 12:27:35: DEBUG: sub:0xbfd50a28: 2001:1:1:1::2/128[0] 2001:1:1:1::1/128[0] proto=any dir=in 2010-03-18 12:27:35: DEBUG: db :0xb82c4970: 192.168.111.129/32[0] 192.168.111.130/32[0] proto=any dir=out 2010-03-18 12:27:35: DEBUG: sub:0xbfd50a28: 2001:1:1:1::2/128[0] 2001:1:1:1::1/128[0] proto=any dir=in 2010-03-18 12:27:35: DEBUG: db :0xb82c5ea0: 192.168.111.130/32[0] 192.168.111.129/32[0] proto=any dir=fwd 2010-03-18 12:27:35: DEBUG: sub:0xbfd50a28: 2001:1:1:1::2/128[0] 2001:1:1:1::1/128[0] proto=any dir=in 2010-03-18 12:27:35: DEBUG: db :0xb82c60e8: 192.168.111.130/32[0] 192.168.111.129/32[0] proto=any dir=in 2010-03-18 12:27:35: DEBUG: sub:0xbfd50a28: 2001:1:1:1::2/128[0] 2001:1:1:1::1/128[0] proto=any dir=in 2010-03-18 12:27:35: DEBUG: db :0xb82c6330: 2001:1:1:1::1/128[0] 2001:1:1:1::2/128[0] proto=any dir=out 2010-03-18 12:27:35: DEBUG: sub:0xbfd50a28: 2001:1:1:1::2/128[0] 2001:1:1:1::1/128[0] proto=any dir=in 2010-03-18 12:27:35: DEBUG: db :0xb82c6578: 2001:1:1:1::2/128[0] 2001:1:1:1::1/128[0] proto=any dir=fwd 2010-03-18 12:27:35: DEBUG: sub:0xbfd50a28: 2001:1:1:1::2/128[0] 2001:1:1:1::1/128[0] proto=any dir=in 2010-03-18 12:27:35: DEBUG: db :0xb82c67c0: 2001:1:1:1::2/128[0] 2001:1:1:1::1/128[0] proto=any dir=in 2010-03-18 12:27:35: DEBUG: suitable inbound SP found: 2001:1:1:1::2/128[0] 2001:1:1:1::1/128[0] proto=any dir=in. 2010-03-18 12:27:35: DEBUG: new acquire 2001:1:1:1::1/128[0] 2001:1:1:1::2/128[0] proto=any dir=out 2010-03-18 12:27:35: DEBUG: anonymous configuration selected for 2001:1:1:1::2. 2010-03-18 12:27:35: DEBUG: getsainfo params: loc='2001:1:1:1::1', rmt='2001:1:1:1::2', peer='NULL', id=0 2010-03-18 12:27:35: DEBUG: getsainfo pass #2 2010-03-18 12:27:35: DEBUG: evaluating sainfo: loc='ANONYMOUS', rmt='ANONYMOUS', peer='ANY', id=0 2010-03-18 12:27:35: DEBUG: selected sainfo: loc='ANONYMOUS', rmt='ANONYMOUS', peer='ANY', id=0 2010-03-18 12:27:35: DEBUG: (proto_id=ESP spisize=4 spi=00000000 spi_p=00000000 encmode=Transport reqid=0:0) 2010-03-18 12:27:35: DEBUG: (trns_id=AES encklen=128 authtype=hmac-sha) 2010-03-18 12:27:35: DEBUG: in post_acquire 2010-03-18 12:27:35: DEBUG: anonymous configuration selected for 2001:1:1:1::2. 2010-03-18 12:27:35: INFO: IPsec-SA request for 2001:1:1:1::2 queued due to no phase1 found. 2010-03-18 12:27:35: ERROR: unknown AF: 0 2010-03-18 12:27:35: DEBUG: === 2010-03-18 12:27:35: INFO: initiate new phase 1 negotiation: 2001:1:1:1::1[500]<=>2001:1:1:1::2[500] 2010-03-18 12:27:35: INFO: begin Identity Protection mode. 2010-03-18 12:27:35: DEBUG: new cookie: 854c9f9d9b9feabd 2010-03-18 12:27:35: DEBUG: add payload of len 52, next type 13 2010-03-18 12:27:35: DEBUG: add payload of len 16, next type 0 2010-03-18 12:27:35: DEBUG: 104 bytes from 2001:1:1:1::1[500] to 2001:1:1:1::2[500] 2010-03-18 12:27:35: DEBUG: sockname 2001:1:1:1::1[500] 2010-03-18 12:27:35: DEBUG: send packet from 2001:1:1:1::1[500] 2010-03-18 12:27:35: DEBUG: send packet to 2001:1:1:1::2[500] 2010-03-18 12:27:35: DEBUG: src6 2001:1:1:1::1[500] 0 2010-03-18 12:27:35: DEBUG: dst6 2001:1:1:1::2[500] 0 2010-03-18 12:27:35: DEBUG: 1 times of 104 bytes message will be sent to 2001:1:1:1::2[500] 2010-03-18 12:27:35: DEBUG: 854c9f9d 9b9feabd 00000000 00000000 01100200 00000000 00000068 0d000038 00000001 00000001 0000002c 01010001 00000024 01010000 800b0001 800c7080 80010007 800e0080 80030003 80020002 80040002 00000014 afcad713 68a1f1c9 6b8696fc 77570100 2010-03-18 12:27:35: DEBUG: resend phase1 packet 854c9f9d9b9feabd:0000000000000000 2010-03-18 12:27:36: DEBUG2: CHKPH1THERE: extract_port. 2010-03-18 12:27:36: DEBUG2: CHKPH1THERE: found a ph1 wop. 2010-03-18 12:27:36: DEBUG2: CHKPH1THERE: no established ph1 handler found 2010-03-18 12:27:37: DEBUG2: CHKPH1THERE: extract_port. 2010-03-18 12:27:37: DEBUG2: CHKPH1THERE: found a ph1 wop. 2010-03-18 12:27:37: DEBUG2: CHKPH1THERE: no established ph1 handler found 2010-03-18 12:27:38: DEBUG2: CHKPH1THERE: extract_port. 2010-03-18 12:27:38: DEBUG2: CHKPH1THERE: found a ph1 wop. 2010-03-18 12:27:38: DEBUG2: CHKPH1THERE: no established ph1 handler found 2010-03-18 12:27:39: DEBUG2: CHKPH1THERE: extract_port. 2010-03-18 12:27:39: DEBUG2: CHKPH1THERE: found a ph1 wop. 2010-03-18 12:27:39: DEBUG2: CHKPH1THERE: no established ph1 handler found 2010-03-18 12:27:40: DEBUG2: CHKPH1THERE: extract_port. 2010-03-18 12:27:40: DEBUG2: CHKPH1THERE: found a ph1 wop. 2010-03-18 12:27:40: DEBUG2: CHKPH1THERE: no established ph1 handler found 2010-03-18 12:27:41: DEBUG2: CHKPH1THERE: extract_port. 2010-03-18 12:27:41: DEBUG2: CHKPH1THERE: found a ph1 wop. 2010-03-18 12:27:41: DEBUG2: CHKPH1THERE: no established ph1 handler found 2010-03-18 12:27:42: DEBUG2: CHKPH1THERE: extract_port. 2010-03-18 12:27:42: DEBUG2: CHKPH1THERE: found a ph1 wop. 2010-03-18 12:27:42: DEBUG2: CHKPH1THERE: no established ph1 handler found 2010-03-18 12:27:43: DEBUG2: CHKPH1THERE: extract_port. 2010-03-18 12:27:43: DEBUG2: CHKPH1THERE: found a ph1 wop. 2010-03-18 12:27:43: DEBUG2: CHKPH1THERE: no established ph1 handler found 2010-03-18 12:27:44: DEBUG2: CHKPH1THERE: extract_port. 2010-03-18 12:27:44: DEBUG2: CHKPH1THERE: found a ph1 wop. 2010-03-18 12:27:44: DEBUG2: CHKPH1THERE: no established ph1 handler found 2010-03-18 12:27:45: DEBUG: 104 bytes from 2001:1:1:1::1[500] to 2001:1:1:1::2[500] 2010-03-18 12:27:45: DEBUG: sockname 2001:1:1:1::1[500] 2010-03-18 12:27:45: DEBUG: send packet from 2001:1:1:1::1[500] 2010-03-18 12:27:45: DEBUG: send packet to 2001:1:1:1::2[500] 2010-03-18 12:27:45: DEBUG: src6 2001:1:1:1::1[500] 0 2010-03-18 12:27:45: DEBUG: dst6 2001:1:1:1::2[500] 0 2010-03-18 12:27:45: DEBUG: 1 times of 104 bytes message will be sent to 2001:1:1:1::2[500] 2010-03-18 12:27:45: DEBUG: 854c9f9d 9b9feabd 00000000 00000000 01100200 00000000 00000068 0d000038 00000001 00000001 0000002c 01010001 00000024 01010000 800b0001 800c7080 80010007 800e0080 80030003 80020002 80040002 00000014 afcad713 68a1f1c9 6b8696fc 77570100 2010-03-18 12:27:45: DEBUG: resend phase1 packet 854c9f9d9b9feabd:0000000000000000 2010-03-18 12:27:45: DEBUG2: CHKPH1THERE: extract_port. 2010-03-18 12:27:45: DEBUG2: CHKPH1THERE: found a ph1 wop. 2010-03-18 12:27:45: DEBUG2: CHKPH1THERE: no established ph1 handler found 2010-03-18 12:27:46: DEBUG2: CHKPH1THERE: extract_port. 2010-03-18 12:27:46: DEBUG2: CHKPH1THERE: found a ph1 wop. 2010-03-18 12:27:46: DEBUG2: CHKPH1THERE: no established ph1 handler found 2010-03-18 12:27:47: DEBUG2: CHKPH1THERE: extract_port. 2010-03-18 12:27:47: DEBUG2: CHKPH1THERE: found a ph1 wop. 2010-03-18 12:27:47: DEBUG2: CHKPH1THERE: no established ph1 handler found 2010-03-18 12:27:48: DEBUG2: CHKPH1THERE: extract_port. 2010-03-18 12:27:48: DEBUG2: CHKPH1THERE: found a ph1 wop. 2010-03-18 12:27:48: DEBUG2: CHKPH1THERE: no established ph1 handler found 2010-03-18 12:27:49: DEBUG2: CHKPH1THERE: extract_port. 2010-03-18 12:27:49: DEBUG2: CHKPH1THERE: found a ph1 wop. 2010-03-18 12:27:49: DEBUG2: CHKPH1THERE: no established ph1 handler found 2010-03-18 12:27:50: INFO: caught signal 2 2010-03-18 12:27:50: DEBUG2: CHKPH1THERE: extract_port. 2010-03-18 12:27:50: DEBUG2: CHKPH1THERE: found a ph1 wop. 2010-03-18 12:27:50: DEBUG2: CHKPH1THERE: no established ph1 handler found 2010-03-18 12:27:50: DEBUG: pk_recv: retry[0] recv() 2010-03-18 12:27:50: DEBUG: get pfkey FLUSH message 2010-03-18 12:27:50: DEBUG2: 02090000 02007220 00000000 4b0e0000 2010-03-18 12:27:50: DEBUG2: flushing all ph2 handlers... 2010-03-18 12:27:50: DEBUG2: skipping ph2 handler (state 2) 2010-03-18 12:27:50: DEBUG: an undead schedule has been deleted. 2010-03-18 12:27:51: DEBUG: call pfkey_send_dump 2010-03-18 12:27:51: DEBUG: pk_recv: retry[0] recv() 2010-03-18 12:27:51: DEBUG: an undead schedule has been deleted. 2010-03-18 12:27:51: INFO: racoon shutdown