📄 spi1-console.txt
字号:
klips_debug:pfkey_msg_build: copying 16 bytes from extensions[1]=ABCDABCD to=ABCDABCDklips_debug:pfkey_msg_build: copying 24 bytes from extensions[6]=ABCDABCD to=ABCDABCDklips_debug:pfkey_msg_build: copying 8 bytes from extensions[18]=ABCDABCD to=ABCDABCDklips_debug:pfkey_msg_build: copying 16 bytes from extensions[19]=ABCDABCD to=ABCDABCDklips_debug:pfkey_msg_build: copying 24 bytes from extensions[20]=ABCDABCD to=ABCDABCDklips_debug:pfkey_msg_build: extensions permitted=001c0043, seen=001c0043, required=00000043.klips_debug:pfkey_upmsg: allocating 104 bytes...klips_debug:pfkey_upmsg: ...allocated at ABCDABCDklips_debug:pfkey_x_grpsa_parse: sending up x_grpsa reply message for satype=9(IPIP) to socket=ABCDABCD succeeded.klips_debug:pfkey_x_grpsa_parse: succeeded in sending x_grpsa reply message.klips_debug:pfkey_release: sock=ABCDABCD sk=ABCDABCDklips_debug:pfkey_destroy_socket: STUFFklips_debug:pfkey_remove_socket: .klips_debug:pfkey_remove_socket: succeeded.klips_debug:pfkey_destroy_socket: STUFFklips_debug:pfkey_destroy_socket: STUFFklips_debug:pfkey_destroy_socket: STUFFklips_debug:pfkey_destroy_socket: STUFFklips_debug:pfkey_destroy_socket: STUFFklips_debug:pfkey_destroy_socket: STUFFklips_debug:pfkey_list_remove_socket: removing sock=ABCDABCDklips_debug:pfkey_list_remove_socket: removing sock=ABCDABCDklips_debug:pfkey_list_remove_socket: removing sock=ABCDABCDklips_debug:pfkey_list_remove_socket: removing sock=ABCDABCDklips_debug:pfkey_list_remove_socket: removing sock=ABCDABCDklips_debug:pfkey_list_remove_socket: removing sock=ABCDABCDklips_debug:pfkey_list_remove_socket: removing sock=ABCDABCDklips_debug:pfkey_list_remove_socket: removing sock=ABCDABCDklips_debug:pfkey_list_remove_socket: removing sock=ABCDABCDklips_debug:pfkey_list_remove_socket: removing sock=ABCDABCDklips_debug:pfkey_list_remove_socket: removing sock=ABCDABCDklips_debug:pfkey_list_remove_socket: removing sock=ABCDABCDklips_debug:pfkey_list_remove_socket: removing sock=ABCDABCDklips_debug:pfkey_release: succeeded.west:~# ipsec eroute --add --eraf inet --src 192.0.2.0/24 --dst 192.0.1.0/24 --s aid tun0x12345678@192.1.2.45klips_debug:pfkey_create: sock=ABCDABCD type:3 state:1 flags:0 protocol:2klips_debug:pfkey_create: sock->fasync_list=00000000 sk->sleep=ABCDABCDklips_debug:pfkey_insert_socket: sk=ABCDABCDklips_debug:pfkey_list_insert_socket: socketp=ABCDABCDklips_debug:pfkey_create: Socket sock=ABCDABCD sk=ABCDABCD initialised.klips_debug:pfkey_sendmsg: .klips_debug:pfkey_sendmsg: msg sent for parsing.klips_debug:pfkey_msg_interp: parsing message ver=2, type=14, errno=0, satype=9(IPIP), len=22, res=0, seq=1, pid=987.klips_debug:pfkey_alloc_ipsec_sa: allocated tdb struct=ABDCABCDklips_debug:pfkey_msg_interp: allocated extr->tdb=ABCDABCDklips_debug:pfkey_msg_interp: satype 9 lookups to proto=4.klips_debug:pfkey_msg_interp: processing ext 1 ABCDABCD with processor ABCDABCDklips_debug:pfkey_sa_process: .klips_debug:pfkey_msg_interp: processing ext 5 ABCDABCD with processor ABCDABCDklips_debug:pfkey_address_process:klips_debug:pfkey_address_process: found address family=2, AF_INET, 0.0.0.0.klips_debug:pfkey_address_process: found src address.klips_debug:pfkey_address_process: successful.klips_debug:pfkey_msg_interp: processing ext 6 ABCDABCD with processor ABCDABCDklips_debug:pfkey_address_process:klips_debug:pfkey_address_process: found address family=2, AF_INET, 192.1.2.45.klips_debug:pfkey_address_process: found dst address.klips_debug:pfkey_address_process: tdb_said.dst set to 192.1.2.45.klips_debug:pfkey_address_process: successful.klips_debug:pfkey_msg_interp: processing ext 21 ABCDABCD with processor ABCDABCDklips_debug:pfkey_address_process:klips_debug:pfkey_address_process: found address family=2, AF_INET, 192.0.2.0.klips_debug:pfkey_address_process: found src flow address.klips_debug:pfkey_alloc_eroute: allocated eroute struct=ABCDABCDklips_debug:pfkey_address_parse: extr->eroute set to 192.0.2.0/0->0.0.0.0/0klips_debug:pfkey_address_process: successful.klips_debug:pfkey_msg_interp: processing ext 22 ABCDABCD with processor ABCDABCDklips_debug:pfkey_address_process:klips_debug:pfkey_address_process: found address family=2, AF_INET, 192.0.1.0.klips_debug:pfkey_address_process: found dst flow address.klips_debug:pfkey_alloc_eroute: eroute struct already allocatedklips_debug:pfkey_address_parse: extr->eroute set to 192.0.2.0/0->192.0.1.0/0klips_debug:pfkey_address_process: successful.klips_debug:pfkey_msg_interp: processing ext 23 ABCDABCD with processor ABCDABCDklips_debug:pfkey_address_process:klips_debug:pfkey_address_process: found address family=2, AF_INET, 255.255.255.0.klips_debug:pfkey_address_process: found src mask address.klips_debug:pfkey_alloc_eroute: eroute struct already allocatedklips_debug:pfkey_address_parse: extr->eroute set to 192.0.2.0/24->192.0.1.0/0klips_debug:pfkey_address_process: successful.klips_debug:pfkey_msg_interp: processing ext 24 ABCDABCD with processor ABCDABCDklips_debug:pfkey_address_process:klips_debug:pfkey_address_process: found address family=2, AF_INET, 255.255.255.0.klips_debug:pfkey_address_process: found dst mask address.klips_debug:pfkey_alloc_eroute: eroute struct already allocatedklips_debug:pfkey_address_parse: extr->eroute set to 192.0.2.0/24->192.0.1.0/24klips_debug:pfkey_address_process: successful.klips_debug:pfkey_msg_interp: parsing message type 14 with msg_parser ABCDABCDklips_debug:pfkey_x_addflow_parse: .klips_debug:pfkey_x_addflow_parse: calling breakeroute and/or makeroute for 192.0.2.0/24->192.0.1.0/24klips_debug:pfkey_x_addflow_parse: calling makeroute.klips_debug:pfkey_x_addflow_parse: makeroute call successful.klips_debug:pfkey_msg_hdr_build:klips_debug:pfkey_msg_hdr_build: on_entry &pfkey_ext=ABCDABCD pfkey_ext=ABCDABCD *pfkey_ext=ABCDABCDklips_debug:pfkey_msg_hdr_build: on_exit &pfkey_ext=ABCDABCD pfkey_ext=ABCDABCD *pfkey_ext=ABCDABCDklips_debug:pfkey_safe_build: error=0klips_debug:pfkey_safe_build:success.klips_debug:pfkey_sa_build: spi=12345678 replay=0 sa_state=0 auth=0 encrypt=0 flags=0klips_debug:pfkey_safe_build: error=0klips_debug:pfkey_safe_build:success.klips_debug:pfkey_address_build: exttype=5 proto=0 prefixlen=0klips_debug:pfkey_address_build: found address family AF_INET.klips_debug:pfkey_address_build: found address=0.0.0.0:0.klips_debug:pfkey_address_build: successful.klips_debug:pfkey_safe_build: error=0klips_debug:pfkey_safe_build:success.klips_debug:pfkey_address_build: exttype=6 proto=0 prefixlen=0klips_debug:pfkey_address_build: found address family AF_INET.klips_debug:pfkey_address_build: found address=192.1.2.45:0.klips_debug:pfkey_address_build: successful.klips_debug:pfkey_safe_build: error=0klips_debug:pfkey_safe_build:success.klips_debug:pfkey_address_build: exttype=21 proto=0 prefixlen=0klips_debug:pfkey_address_build: found address family AF_INET.klips_debug:pfkey_address_build: found address=192.0.2.0:0.klips_debug:pfkey_address_build: successful.klips_debug:pfkey_safe_build: error=0klips_debug:pfkey_safe_build:success.klips_debug:pfkey_address_build: exttype=22 proto=0 prefixlen=0klips_debug:pfkey_address_build: found address family AF_INET.klips_debug:pfkey_address_build: found address=192.0.1.0:0.klips_debug:pfkey_address_build: successful.klips_debug:pfkey_safe_build: error=0klips_debug:pfkey_safe_build:success.klips_debug:pfkey_address_build: exttype=23 proto=0 prefixlen=0klips_debug:pfkey_address_build: found address family AF_INET.klips_debug:pfkey_address_build: found address=255.255.255.0:0.klips_debug:pfkey_address_build: successful.klips_debug:pfkey_safe_build: error=0klips_debug:pfkey_safe_build:success.klips_debug:pfkey_address_build: exttype=24 proto=0 prefixlen=0klips_debug:pfkey_address_build: found address family AF_INET.klips_debug:pfkey_address_build: found address=255.255.255.0:0.klips_debug:pfkey_address_build: successful.klips_debug:pfkey_safe_build: error=0klips_debug:pfkey_safe_build:success.klips_debug:pfkey_msg_build: pfkey_msg=ABCDABCD allocated 176 bytes, &(extensions[0])=ABCDABCDklips_debug:pfkey_msg_build: copying 16 bytes from extensions[1]=ABCDABCD to=ABCDABCDklips_debug:pfkey_msg_build: copying 24 bytes from extensions[5]=ABCDABCD to=ABCDABCDklips_debug:pfkey_msg_build: copying 24 bytes from extensions[6]=ABCDABCD to=ABCDABCDklips_debug:pfkey_msg_build: copying 24 bytes from extensions[21]=ABCDABCD to=ABCDABCDklips_debug:pfkey_msg_build: copying 24 bytes from extensions[22]=ABCDABCD to=ABCDABCDklips_debug:pfkey_msg_build: copying 24 bytes from extensions[23]=ABCDABCD to=ABCDABCDklips_debug:pfkey_msg_build: copying 24 bytes from extensions[24]=ABCDABCD to=ABCDABCDklips_debug:pfkey_msg_build: extensions permitted=01e00063, seen=01e00063, required=01e00043.klips_debug:pfkey_upmsg: allocating 176 bytes...klips_debug:pfkey_upmsg: ...allocated at ABCDABCDklips_debug:pfkey_x_addflow_parse: sending up x_addflow reply message for satype=9(IPIP) (proto=4) to socket=ABCDABCD succeeded.klips_debug:pfkey_x_addflow_parse: extr->tdb cleaned up and freed.klips_debug:pfkey_release: sock=ABCDABCD sk=ABCDABCDklips_debug:pfkey_destroy_socket: STUFFklips_debug:pfkey_remove_socket: .klips_debug:pfkey_remove_socket: succeeded.klips_debug:pfkey_destroy_socket: STUFFklips_debug:pfkey_destroy_socket: STUFFklips_debug:pfkey_destroy_socket: STUFFklips_debug:pfkey_destroy_socket: STUFFklips_debug:pfkey_destroy_socket: STUFFklips_debug:pfkey_destroy_socket: STUFFklips_debug:pfkey_list_remove_socket: removing sock=ABCDABCDklips_debug:pfkey_list_remove_socket: removing sock=ABCDABCDklips_debug:pfkey_list_remove_socket: removing sock=ABCDABCDklips_debug:pfkey_list_remove_socket: removing sock=ABCDABCDklips_debug:pfkey_list_remove_socket: removing sock=ABCDABCDklips_debug:pfkey_list_remove_socket: removing sock=ABCDABCDklips_debug:pfkey_list_remove_socket: removing sock=ABCDABCDklips_debug:pfkey_list_remove_socket: removing sock=ABCDABCDklips_debug:pfkey_list_remove_socket: removing sock=ABCDABCDklips_debug:pfkey_list_remove_socket: removing sock=ABCDABCDklips_debug:pfkey_list_remove_socket: removing sock=ABCDABCDklips_debug:pfkey_list_remove_socket: removing sock=ABCDABCDklips_debug:pfkey_list_remove_socket: removing sock=ABCDABCDklips_debug:pfkey_release: succeeded.west:~# ipsec tncfg --attach --virtual ipsec0 --physical eth1west:~# ifconfig ipsec0 inet 192.1.2.45 netmask 0xffffff00 broadcast 192.1.2.255 upwest:~# ipsec lookwest NOW192.0.2.0/24 -> 192.0.1.0/24 => tun0x12345678@192.1.2.45 esp0x12345678@192.1.2.45 (0)ipsec0->eth1 mtu=16260(1500)->1500esp0x12345678@192.1.2.45 ESP_3DES_HMAC_MD5: dir=in src=192.1.2.23 iv_bits=64bits iv=0xABCDABCDABCDABCD alen=128 aklen=128 eklen=192 life(c,s,h)=tun0x12345678@192.1.2.45 IPIP: dir=in src=192.1.2.23 life(c,s,h)=Destination Gateway Genmask Flags MSS Window irtt Ifacewest:~# route add -host 192.0.2.1 gw 192.1.2.23 dev ipsec0west:~# nbd: module cleaned up.⌨️ 快捷键说明
复制代码
Ctrl + C
搜索代码
Ctrl + F
全屏模式
F11
切换主题
Ctrl + Shift + D
显示快捷键
?
增大字号
Ctrl + =
减小字号
Ctrl + -