Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- Mar 20 19:28:15.595: ISAKMP (0:2064): received packet from 213.100.24.75 dport 500 sport 500 Global (R) QM_IDLE
- Mar 20 19:28:15.595: ISAKMP: set new node -418712520 to QM_IDLE
- Mar 20 19:28:15.595: crypto_engine: Decrypt IKE packet
- Mar 20 19:28:15.595: crypto_engine: Generate IKE hash
- Mar 20 19:28:15.595: ISAKMP:(2064): processing HASH payload. message ID = -418712520
- Mar 20 19:28:15.595: ISAKMP:(2064): processing SA payload. message ID = -418712520
- Mar 20 19:28:15.595: ISAKMP:(2064):Checking IPSec proposal 1
- Mar 20 19:28:15.595: ISAKMP: transform 1, ESP_DES
- Mar 20 19:28:15.595: ISAKMP: attributes in transform:
- Mar 20 19:28:15.595: ISAKMP: SA life type in seconds
- Mar 20 19:28:15.595: ISAKMP: SA life duration (VPI) of 0x0 0x0 0xE 0x10
- Mar 20 19:28:15.599: ISAKMP: encaps is 1 (Tunnel)
- Mar 20 19:28:15.599: ISAKMP: authenticator is HMAC-MD5
- Mar 20 19:28:15.599: ISAKMP:(2064):atts are acceptable.
- Mar 20 19:28:15.599: IPSEC(validate_proposal_request): proposal part #1
- Mar 20 19:28:15.599: IPSEC(validate_proposal_request): proposal part #1,
- (key eng. msg.) INBOUND local= 213.101.208.105, remote= 213.100.24.75,
- local_proxy= 213.101.208.105/255.255.255.255/0/0 (type=1),
- remote_proxy= 213.100.24.75/255.255.255.255/0/0 (type=1),
- protocol= ESP, transform= NONE (Tunnel),
- lifedur= 0s and 0kb,
- spi= 0x0(0), conn_id= 0, keysize= 0, flags= 0x0
- Mar 20 19:28:15.599: IPSEC(ipsec_process_proposal): proxy identities not supported
- Mar 20 19:28:15.599: ISAKMP:(2064): IPSec policy invalidated proposal with error 32
- Mar 20 19:28:15.599: ISAKMP:(2064): phase 2 SA policy not acceptable! (local 213.101.208.105 remote 213.100.24.75)
- Mar 20 19:28:15.599: ISAKMP: set new node 656929626 to QM_IDLE
- Mar 20 19:28:15.599: crypto_engine: Generate IKE hash
- Mar 20 19:28:15.599: ISAKMP:(2064):Sending NOTIFY PROPOSAL_NOT_CHOSEN protocol 3
- spi 2207533048, message ID = 656929626
- Mar 20 19:28:15.599: crypto_engine: Encrypt IKE packet
- Mar 20 19:28:15.599: ISAKMP:(2064): sending packet to 213.100.24.75 my_port 500 peer_port 500 (R) QM_IDLE
- Mar 20 19:28:15.599: ISAKMP:(2064):Sending an IKE IPv4 Packet.
- Mar 20 19:28:15.599: ISAKMP:(2064):purging node 656929626
- Mar 20 19:28:15.603: ISAKMP:(2064):deleting node -418712520 error TRUE reason "QM rejected"
- Mar 20 19:28:15.603: ISAKMP:(2064):Node -418712520, Input = IKE_MESG_FROM_PEER, IKE_QM_EXCH
- Mar 20 19:28:15.603: ISAKMP:(2064):Old State = IKE_QM_READY New State = IKE_QM_READY
- Mar 20 19:28:16.991: ISAKMP (0:2064): received packet from 213.100.24.75 dport 500 sport 500 Global (R) QM_IDLE
- Mar 20 19:28:16.991: ISAKMP:(2064): phase 2 packet is a duplicate of a previous packet.
- Mar 20 19:28:16.995: ISAKMP:(2064): retransmitting due to retransmit phase 2
- Mar 20 19:28:16.995: ISAKMP:(2064): ignoring retransmission,because phase2 node marked dead -418712520
- Mar 20 19:28:18.995: ISAKMP (0:2064): received packet from 213.100.24.75 dport 500 sport 500 Global (R) QM_IDLE
- Mar 20 19:28:18.995: ISAKMP:(2064): phase 2 packet is a duplicate of a previous packet.
- Mar 20 19:28:18.995: ISAKMP:(2064): retransmitting due to retransmit phase 2
- Mar 20 19:28:18.995: ISAKMP:(2064): ignoring retransmission,because phase2 node marked dead -418712520
- Mar 20 19:28:23.003: ISAKMP (0:2064): received packet from 213.100.24.75 dport 500 sport 500 Global (R) QM_IDLE
- Mar 20 19:28:23.003: ISAKMP:(2064): phase 2 packet is a duplicate of a previous packet.
- Mar 20 19:28:23.003: ISAKMP:(2064): retransmitting due to retransmit phase 2
- Mar 20 19:28:23.003: ISAKMP:(2064): ignoring retransmission,because phase2 node marked dead -418712520
- Mar 20 19:28:31.015: ISAKMP (0:2064): received packet from 213.100.24.75 dport 500 sport 500 Global (R) QM_IDLE
- Mar 20 19:28:31.015: ISAKMP:(2064): phase 2 packet is a duplicate of a previous packet.
- Mar 20 19:28:31.015: ISAKMP:(2064): retransmitting due to retransmit phase 2
- Mar 20 19:28:31.015: ISAKMP:(2064): ignoring retransmission,because phase2 node marked dead -418712520
- Mar 20 19:28:47.043: ISAKMP (0:2064): received packet from 213.100.24.75 dport 500 sport 500 Global (R) QM_IDLE
- Mar 20 19:28:47.043: ISAKMP:(2064): phase 2 packet is a duplicate of a previous packet.
- Mar 20 19:28:47.043: ISAKMP:(2064): retransmitting due to retransmit phase 2
- Mar 20 19:28:47.043: ISAKMP:(2064): ignoring retransmission,because phase2 node marked dead -418712520
- Mar 20 19:29:05.603: ISAKMP:(2064):purging node -418712520
- Mar 20 19:29:19.099: ISAKMP (0:2064): received packet from 213.100.24.75 dport 500 sport 500 Global (R) QM_IDLE
- Mar 20 19:29:19.099: ISAKMP: set new node -1338923996 to QM_IDLE
- Mar 20 19:29:19.099: crypto_engine: Decrypt IKE packet
- Mar 20 19:29:19.099: crypto_engine: Generate IKE hash
- Mar 20 19:29:19.099: ISAKMP:(2064): processing HASH payload. message ID = -1338923996
- Mar 20 19:29:19.099: ISAKMP:(2064): processing DELETE payload. message ID = -1338923996
- Mar 20 19:29:19.099: ISAKMP:(2064):peer does not do paranoid keepalives.
- Mar 20 19:29:19.099: ISAKMP:(2064):deleting SA reason "No reason" state (R) QM_IDLE (peer 213.100.24.75)
- Mar 20 19:29:19.099: ISAKMP:(2064):deleting node -1338923996 error FALSE reason "Informational (in) state 1"
- Mar 20 19:29:19.103: ISAKMP: set new node 1398114083 to QM_IDLE
- Mar 20 19:29:19.103: crypto_engine: Generate IKE hash
- Mar 20 19:29:19.103: crypto_engine: Encrypt IKE packet
- Mar 20 19:29:19.103: ISAKMP:(2064): sending packet to 213.100.24.75 my_port 500 peer_port 500 (R) QM_IDLE
- Mar 20 19:29:19.103: ISAKMP:(2064):Sending an IKE IPv4 Packet.
- Mar 20 19:29:19.103: ISAKMP:(2064):purging node 1398114083
- Mar 20 19:29:19.103: ISAKMP:(2064):Input = IKE_MESG_INTERNAL, IKE_PHASE1_DEL
- Mar 20 19:29:19.103: ISAKMP:(2064):Old State = IKE_P1_COMPLETE New State = IKE_DEST_SA
- Mar 20 19:29:19.107: ISAKMP (0:0): received packet from 213.100.24.75 dport 500 sport 500 Global (N) NEW SA
- Mar 20 19:29:19.107: ISAKMP: Found a peer struct for 213.100.24.75, peer port 500
- Mar 20 19:29:19.107: ISAKMP: Locking peer struct 0x83F6BF7C, refcount 2 for crypto_isakmp_process_block
- Mar 20 19:29:19.107: ISAKMP: local port 500, remote port 500
- Mar 20 19:29:19.107: ISAKMP: Find a dup sa in the avl tree during calling isadb_insert sa = 83D77794
- Mar 20 19:29:19.107: ISAKMP:(0):Input = IKE_MESG_FROM_PEER, IKE_MM_EXCH
- Mar 20 19:29:19.107: ISAKMP:(0):Old State = IKE_READY New State = IKE_R_MM1
- Mar 20 19:29:19.107: ISAKMP:(2064):deleting SA reason "No reason" state (R) QM_IDLE (peer 213.100.24.75)
- Mar 20 19:29:19.107: ISAKMP:(0):Can't decrement IKE Call Admission Control stat incoming_active since it's already 0.
- Mar 20 19:29:19.107: ISAKMP: Unlocking peer struct 0x83F6BF7C for isadb_mark_sa_deleted(), count 1
- Mar 20 19:29:19.107: ISAKMP:(2064):deleting node -1338923996 error FALSE reason "IKE deleted"
- Mar 20 19:29:19.107: crypto engine: deleting IKE SA SW:64
- Mar 20 19:29:19.107: crypto_engine: Delete IKE SA
- Mar 20 19:29:19.107: ISAKMP:(2064):Input = IKE_MESG_FROM_PEER, IKE_MM_EXCH
- Mar 20 19:29:19.111: ISAKMP:(2064):Old State = IKE_DEST_SA New State = IKE_DEST_SA
- Mar 20 19:29:19.111: ISAKMP:(0): processing SA payload. message ID = 0
- Mar 20 19:29:19.111: ISAKMP:(0): processing vendor id payload
- Mar 20 19:29:19.111: ISAKMP:(0): processing IKE frag vendor id payload
- Mar 20 19:29:19.111: ISAKMP:(0): Support for IKE Fragmentation not enabled
- Mar 20 19:29:19.111: ISAKMP:(0): processing vendor id payload
- Mar 20 19:29:19.111: ISAKMP:(0): vendor ID seems Unity/DPD but major 194 mismatch
- Mar 20 19:29:19.111: ISAKMP:(0): processing vendor id payload
- Mar 20 19:29:19.111: ISAKMP:(0): vendor ID seems Unity/DPD but major 123 mismatch
- Mar 20 19:29:19.111: ISAKMP:(0): vendor ID is NAT-T v2
- Mar 20 19:29:19.111: ISAKMP:(0): processing vendor id payload
- Mar 20 19:29:19.111: ISAKMP:(0): vendor ID seems Unity/DPD but major 184 mismatch
- Mar 20 19:29:19.111: ISAKMP:(0):found peer pre-shared key matching 213.100.24.75
- Mar 20 19:29:19.111: ISAKMP:(0): local preshared key found
- Mar 20 19:29:19.111: ISAKMP : Scanning profiles for xauth ...
- Mar 20 19:29:19.111: ISAKMP:(0):Checking ISAKMP transform 1 against priority 1 policy
- Mar 20 19:29:19.111: ISAKMP: encryption DES-CBC
- Mar 20 19:29:19.111: ISAKMP: hash SHA
- Mar 20 19:29:19.111: ISAKMP: default group 1
- Mar 20 19:29:19.111: ISAKMP: auth pre-share
- Mar 20 19:29:19.111: ISAKMP: life type in seconds
- Mar 20 19:29:19.111: ISAKMP: life duration (VPI) of 0x0 0x0 0x70 0x80
- Mar 20 19:29:19.111: ISAKMP:(0):atts are acceptable. Next payload is 3
- Mar 20 19:29:19.115: ISAKMP:(0):Acceptable atts:actual life: 0
- Mar 20 19:29:19.115: ISAKMP:(0):Acceptable atts:life: 0
- Mar 20 19:29:19.115: ISAKMP:(0):Fill atts in sa vpi_length:4
- Mar 20 19:29:19.115: ISAKMP:(0):Fill atts in sa life_in_seconds:28800
- Mar 20 19:29:19.115: ISAKMP:(0):Returning Actual lifetime: 28800
- Mar 20 19:29:19.115: ISAKMP:(0)::Started lifetime timer: 28800.
- Mar 20 19:29:19.115: ISAKMP:(0): processing vendor id payload
- Mar 20 19:29:19.115: ISAKMP:(0): processing IKE frag vendor id payload
- Mar 20 19:29:19.115: ISAKMP:(0): Support for IKE Fragmentation not enabled
- Mar 20 19:29:19.115: ISAKMP:(0): processing vendor id payload
- Mar 20 19:29:19.115: ISAKMP:(0): vendor ID seems Unity/DPD but major 194 mismatch
- Mar 20 19:29:19.115: ISAKMP:(0): processing vendor id payload
- Mar 20 19:29:19.115: ISAKMP:(0): vendor ID seems Unity/DPD but major 123 mismatch
- Mar 20 19:29:19.115: ISAKMP:(0): vendor ID is NAT-T v2
- Mar 20 19:29:19.115: ISAKMP:(0): processing vendor id payload
- Mar 20 19:29:19.115: ISAKMP:(0): vendor ID seems Unity/DPD but major 184 mismatch
- Mar 20 19:29:19.115: ISAKMP:(0):Input = IKE_MESG_INTERNAL, IKE_PROCESS_MAIN_MODE
- Mar 20 19:29:19.115: ISAKMP:(0):Old State = IKE_R_MM1 New State = IKE_R_MM1
- Mar 20 19:29:19.115: ISAKMP:(0): constructed NAT-T vendor-02 ID
- Mar 20 19:29:19.115: ISAKMP:(0): sending packet to 213.100.24.75 my_port 500 peer_port 500 (R) MM_SA_SETUP
- Mar 20 19:29:19.119: ISAKMP:(0):Sending an IKE IPv4 Packet.
- Mar 20 19:29:19.119: ISAKMP:(0):Input = IKE_MESG_INTERNAL, IKE_PROCESS_COMPLETE
- Mar 20 19:29:19.119: ISAKMP:(0):Old State = IKE_R_MM1 New State = IKE_R_MM2
- Mar 20 19:29:19.175: ISAKMP (0:0): received packet from 213.100.24.75 dport 500 sport 500 Global (R) MM_SA_SETUP
- Mar 20 19:29:19.175: ISAKMP:(0):Input = IKE_MESG_FROM_PEER, IKE_MM_EXCH
- Mar 20 19:29:19.175: ISAKMP:(0):Old State = IKE_R_MM2 New State = IKE_R_MM3
- Mar 20 19:29:19.179: ISAKMP:(0): processing KE payload. message ID = 0
- Mar 20 19:29:19.179: crypto_engine: Create DH shared secret
- Mar 20 19:29:19.203: ISAKMP:(0): processing NONCE payload. message ID = 0
- Mar 20 19:29:19.203: ISAKMP:(0):found peer pre-shared key matching 213.100.24.75
- Mar 20 19:29:19.203: crypto_engine: Create IKE SA
- Mar 20 19:29:19.207: crypto engine: deleting DH phase 2 SW:70
- Mar 20 19:29:19.207: crypto_engine: Delete DH shared secret
- Mar 20 19:29:19.207: ISAKMP:received payload type 20
- Mar 20 19:29:19.207: ISAKMP:received payload type 20
- Mar 20 19:29:19.207: ISAKMP:(2065):Input = IKE_MESG_INTERNAL, IKE_PROCESS_MAIN_MODE
- Mar 20 19:29:19.207: ISAKMP:(2065):Old State = IKE_R_MM3 New State = IKE_R_MM3
- Mar 20 19:29:19.207: ISAKMP:(2065): sending packet to 213.100.24.75 my_port 500 peer_port 500 (R) MM_KEY_EXCH
- Mar 20 19:29:19.207: ISAKMP:(2065):Sending an IKE IPv4 Packet.
- Mar 20 19:29:19.207: ISAKMP:(2065):Input = IKE_MESG_INTERNAL, IKE_PROCESS_COMPLETE
- Mar 20 19:29:19.207: ISAKMP:(2065):Old State = IKE_R_MM3 New State = IKE_R_MM4
- Mar 20 19:29:19.231: ISAKMP (0:2065): received packet from 213.100.24.75 dport 500 sport 500 Global (R) MM_KEY_EXCH
- Mar 20 19:29:19.231: crypto_engine: Decrypt IKE packet
- Mar 20 19:29:19.231: ISAKMP:(2065):Input = IKE_MESG_FROM_PEER, IKE_MM_EXCH
- Mar 20 19:29:19.231: ISAKMP:(2065):Old State = IKE_R_MM4 New State = IKE_R_MM5
- Mar 20 19:29:19.231: ISAKMP:(2065): processing ID payload. message ID = 0
- Mar 20 19:29:19.235: ISAKMP (0:2065): ID payload
- next-payload : 8
- type : 1
- address : 213.100.24.75
- protocol : 0
- port : 0
- length : 12
- Mar 20 19:29:19.235: ISAKMP:(0):: peer matches *none* of the profiles
- Mar 20 19:29:19.235: ISAKMP:(2065): processing HASH payload. message ID = 0
- Mar 20 19:29:19.235: crypto_engine: Generate IKE hash
- Mar 20 19:29:19.235: ISAKMP:(2065):SA authentication status:
- authenticated
- Mar 20 19:29:19.235: ISAKMP:(2065):SA has been authenticated with 213.100.24.75
- Mar 20 19:29:19.235: ISAKMP:(2065):Input = IKE_MESG_INTERNAL, IKE_PROCESS_MAIN_MODE
- Mar 20 19:29:19.235: ISAKMP:(2065):Old State = IKE_R_MM5 New State = IKE_R_MM5
- Mar 20 19:29:19.235: ISAKMP:(2065):SA is doing pre-shared key authentication using id type ID_IPV4_ADDR
- Mar 20 19:29:19.235: ISAKMP (0:2065): ID payload
- next-payload : 8
- type : 1
- address : 213.101.208.105
- protocol : 17
- port : 500
- length : 12
- Mar 20 19:29:19.235: ISAKMP:(2065):Total payload length: 12
- Mar 20 19:29:19.235: crypto_engine: Generate IKE hash
- Mar 20 19:29:19.235: crypto_engine: Encrypt IKE packet
- Mar 20 19:29:19.235: ISAKMP:(2065): sending packet to 213.100.24.75 my_port 500 peer_port 500 (R) MM_KEY_EXCH
- Mar 20 19:29:19.235: ISAKMP:(2065):Sending an IKE IPv4 Packet.
- Mar 20 19:29:19.239: ISAKMP:(2065):Input = IKE_MESG_INTERNAL, IKE_PROCESS_COMPLETE
- Mar 20 19:29:19.239: ISAKMP:(2065):Old State = IKE_R_MM5 New State = IKE_P1_COMPLETE
- Mar 20 19:29:19.239: ISAKMP:(2065):Input = IKE_MESG_INTERNAL, IKE_PHASE1_COMPLETE
- Mar 20 19:29:19.239: ISAKMP:(2065):Old State = IKE_P1_COMPLETE New State = IKE_P1_COMPLETE
- Mar 20 19:29:19.243: ISAKMP (0:2065): received packet from 213.100.24.75 dport 500 sport 500 Global (R) QM_IDLE
- Mar 20 19:29:19.243: ISAKMP: set new node -838672811 to QM_IDLE
- Mar 20 19:29:19.243: crypto_engine: Decrypt IKE packet
- Mar 20 19:29:19.243: crypto_engine: Generate IKE hash
- Mar 20 19:29:19.243: ISAKMP:(2065): processing HASH payload. message ID = -838672811
- Mar 20 19:29:19.243: ISAKMP:(2065): processing SA payload. message ID = -838672811
- Mar 20 19:29:19.243: ISAKMP:(2065):Checking IPSec proposal 1
- Mar 20 19:29:19.243: ISAKMP: transform 1, ESP_DES
- Mar 20 19:29:19.243: ISAKMP: attributes in transform:
- Mar 20 19:29:19.247: ISAKMP: SA life type in seconds
- Mar 20 19:29:19.247: ISAKMP: SA life duration (VPI) of 0x0 0x0 0xE 0x10
- Mar 20 19:29:19.247: ISAKMP: encaps is 1 (Tunnel)
- Mar 20 19:29:19.247: ISAKMP: authenticator is HMAC-MD5
- Mar 20 19:29:19.247: ISAKMP:(2065):atts are acceptable.
- Mar 20 19:29:19.247: IPSEC(validate_proposal_request): proposal part #1
- Mar 20 19:29:19.247: IPSEC(validate_proposal_request): proposal part #1,
- (key eng. msg.) INBOUND local= 213.101.208.105, remote= 213.100.24.75,
- local_proxy= 213.101.208.105/255.255.255.255/0/0 (type=1),
- remote_proxy= 213.100.24.75/255.255.255.255/0/0 (type=1),
- protocol= ESP, transform= NONE (Tunnel),
- lifedur= 0s and 0kb,
- spi= 0x0(0), conn_id= 0, keysize= 0, flags= 0x0
- Mar 20 19:29:19.247: IPSEC(ipsec_process_proposal): proxy identities not supported
- Mar 20 19:29:19.247: ISAKMP:(2065): IPSec policy invalidated proposal with error 32
- Mar 20 19:29:19.247: ISAKMP:(2065): phase 2 SA policy not acceptable! (local 213.101.208.105 remote 213.100.24.75)
- Mar 20 19:29:19.247: ISAKMP: set new node 133378110 to QM_IDLE
- Mar 20 19:29:19.247: crypto_engine: Generate IKE hash
- Mar 20 19:29:19.247: ISAKMP:(2065):Sending NOTIFY PROPOSAL_NOT_CHOSEN protocol 3
- spi 2207533048, message ID = 133378110
- Mar 20 19:29:19.247: crypto_engine: Encrypt IKE packet
- Mar 20 19:29:19.247: ISAKMP:(2065): sending packet to 213.100.24.75 my_port 500 peer_port 500 (R) QM_IDLE
- Mar 20 19:29:19.247: ISAKMP:(2065):Sending an IKE IPv4 Packet.
- Mar 20 19:29:19.247: ISAKMP:(2065):purging node 133378110
- Mar 20 19:29:19.251: ISAKMP:(2065):deleting node -838672811 error TRUE reason "QM rejected"
- Mar 20 19:29:19.251: ISAKMP:(2065):Node -838672811, Input = IKE_MESG_FROM_PEER, IKE_QM_EXCH
- Mar 20 19:29:19.251: ISAKMP:(2065):Old State = IKE_QM_READY New State = IKE_QM_READY
- Mar 20 19:29:20.099: ISAKMP (0:2065): received packet from 213.100.24.75 dport 500 sport 500 Global (R) QM_IDLE
- Mar 20 19:29:20.099: ISAKMP:(2065): phase 2 packet is a duplicate of a previous packet.
- Mar 20 19:29:20.099: ISAKMP:(2065): retransmitting due to retransmit phase 2
- Mar 20 19:29:20.099: ISAKMP:(2065): ignoring retransmission,because phase2 node marked dead -838672811
- Mar 20 19:29:22.103: ISAKMP (0:2065): received packet from 213.100.24.75 dport 500 sport 500 Global (R) QM_IDLE
- Mar 20 19:29:22.103: ISAKMP:(2065): phase 2 packet is a duplicate of a previous packet.
- Mar 20 19:29:22.103: ISAKMP:(2065): retransmitting due to retransmit phase 2
- Mar 20 19:29:22.103: ISAKMP:(2065): ignoring retransmission,because phase2 node marked dead -838672811
- Mar 20 19:29:26.107: ISAKMP (0:2065): received packet from 213.100.24.75 dport 500 sport 500 Global (R) QM_IDLE
- Mar 20 19:29:26.111: ISAKMP:(2065): phase 2 packet is a duplicate of a previous packet.
- Mar 20 19:29:26.111: ISAKMP:(2065): retransmitting due to retransmit phase 2
- Mar 20 19:29:26.111: ISAKMP:(2065): ignoring retransmission,because phase2 node marked dead -838672811
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement