spi1-console.txt

This a good VPN source

klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth1 dev=eth1 
klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth1.
klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:124 id:17051 frag_off:0 ttl:64 proto:50 chk:45934 saddr:192.1.2.23 daddr:192.1.2.45
klips_debug:ipsec_rcv_decap_once: decap (50) from 192.1.2.23 -> 192.1.2.45
klips_debug:ipsec_sa_getbyid: linked entry in ipsec_sa table for hash=73 of SA:esp.1000583@192.1.2.45 requested.
klips_debug:ipsec_rcv: SA:esp.1000583@192.1.2.45, src=192.1.2.23 of pkt agrees with expected SA source address policy.
klips_debug:ipsec_rcv: SA:esp.1000583@192.1.2.45 First SA in group.
klips_debug:ipsec_rcv: natt_type=0 tdbp->ips_natt_type=0 : ok
klips_debug:ipsec_rcv: padlen=2, contents: 0x<offset>: 0x<value> 0x<value> ...
klips_debug:           00: 01 02
klips_debug:ipsec_rcv: packet decrypted from 192.1.2.23: next_header = 4, padding = 2
klips_debug:ipsec_rcv: trimming to 104.
klips_debug:ipsec_rcv: after <ESP_3DES>, SA:esp.1000583@192.1.2.45:
klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:104 id:17051 frag_off:0 ttl:64 proto:4 chk:46000 saddr:192.1.2.23 daddr:192.1.2.45
klips_debug:ipsec_rcv: SA:esp.1000583@192.1.2.45, Another IPSEC header to process.
klips_debug:ipsec_rcv: ESP SA sets skb->nfmark=0x70000.
klips_debug:ipsec_rcv: IPIP tunnel stripped.
klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:84 id:0 DF frag_off:0 ttl:63 proto:1 (ICMP) chk:47270 saddr:192.0.2.1 daddr:192.0.1.1 type:code=8:0
klips_debug:ipsec_rcv: IPIP SA sets skb->nfmark=0xf0000.
klips_debug:ipsec_rcv: netif_rx() called.
klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth1 dev=eth1 
klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth1.
klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:124 id:17052 frag_off:0 ttl:64 proto:50 chk:45933 saddr:192.1.2.23 daddr:192.1.2.45
klips_debug:ipsec_rcv_decap_once: decap (50) from 192.1.2.23 -> 192.1.2.45
klips_debug:ipsec_sa_getbyid: linked entry in ipsec_sa table for hash=73 of SA:esp.1000583@192.1.2.45 requested.
klips_debug:ipsec_rcv: SA:esp.1000583@192.1.2.45, src=192.1.2.23 of pkt agrees with expected SA source address policy.
klips_debug:ipsec_rcv: SA:esp.1000583@192.1.2.45 First SA in group.
klips_debug:ipsec_rcv: natt_type=0 tdbp->ips_natt_type=0 : ok
klips_debug:ipsec_rcv: padlen=2, contents: 0x<offset>: 0x<value> 0x<value> ...
klips_debug:           00: 01 02
klips_debug:ipsec_rcv: packet decrypted from 192.1.2.23: next_header = 4, padding = 2
klips_debug:ipsec_rcv: trimming to 104.
klips_debug:ipsec_rcv: after <ESP_3DES>, SA:esp.1000583@192.1.2.45:
klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:104 id:17052 frag_off:0 ttl:64 proto:4 chk:45999 saddr:192.1.2.23 daddr:192.1.2.45
klips_debug:ipsec_rcv: SA:esp.1000583@192.1.2.45, Another IPSEC header to process.
klips_debug:ipsec_rcv: ESP SA sets skb->nfmark=0x70000.
klips_debug:ipsec_rcv: IPIP tunnel stripped.
klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:84 id:0 DF frag_off:0 ttl:63 proto:1 (ICMP) chk:47270 saddr:192.0.2.1 daddr:192.0.1.1 type:code=8:0
klips_debug:ipsec_rcv: IPIP SA sets skb->nfmark=0xf0000.
klips_debug:ipsec_rcv: netif_rx() called.
klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth1 dev=eth1 
klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth1.
klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:124 id:17053 frag_off:0 ttl:64 proto:50 chk:45932 saddr:192.1.2.23 daddr:192.1.2.45
klips_debug:ipsec_rcv_decap_once: decap (50) from 192.1.2.23 -> 192.1.2.45
klips_debug:ipsec_sa_getbyid: linked entry in ipsec_sa table for hash=73 of SA:esp.1000583@192.1.2.45 requested.
klips_debug:ipsec_rcv: SA:esp.1000583@192.1.2.45, src=192.1.2.23 of pkt agrees with expected SA source address policy.
klips_debug:ipsec_rcv: SA:esp.1000583@192.1.2.45 First SA in group.
klips_debug:ipsec_rcv: natt_type=0 tdbp->ips_natt_type=0 : ok
klips_debug:ipsec_rcv: padlen=2, contents: 0x<offset>: 0x<value> 0x<value> ...
klips_debug:           00: 01 02
klips_debug:ipsec_rcv: packet decrypted from 192.1.2.23: next_header = 4, padding = 2
klips_debug:ipsec_rcv: trimming to 104.
klips_debug:ipsec_rcv: after <ESP_3DES>, SA:esp.1000583@192.1.2.45:
klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:104 id:17053 frag_off:0 ttl:64 proto:4 chk:45998 saddr:192.1.2.23 daddr:192.1.2.45
klips_debug:ipsec_rcv: SA:esp.1000583@192.1.2.45, Another IPSEC header to process.
klips_debug:ipsec_rcv: ESP SA sets skb->nfmark=0x70000.
klips_debug:ipsec_rcv: IPIP tunnel stripped.
klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:84 id:0 DF frag_off:0 ttl:63 proto:1 (ICMP) chk:47270 saddr:192.0.2.1 daddr:192.0.1.1 type:code=8:0
klips_debug:ipsec_rcv: IPIP SA sets skb->nfmark=0xf0000.
klips_debug:ipsec_rcv: netif_rx() called.
klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth1 dev=eth1 
klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth1.
klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:124 id:17054 frag_off:0 ttl:64 proto:50 chk:45931 saddr:192.1.2.23 daddr:192.1.2.45
klips_debug:ipsec_rcv_decap_once: decap (50) from 192.1.2.23 -> 192.1.2.45
klips_debug:ipsec_sa_getbyid: linked entry in ipsec_sa table for hash=73 of SA:esp.1000583@192.1.2.45 requested.
klips_debug:ipsec_rcv: SA:esp.1000583@192.1.2.45, src=192.1.2.23 of pkt agrees with expected SA source address policy.
klips_debug:ipsec_rcv: SA:esp.1000583@192.1.2.45 First SA in group.
klips_debug:ipsec_rcv: natt_type=0 tdbp->ips_natt_type=0 : ok
klips_debug:ipsec_rcv: padlen=2, contents: 0x<offset>: 0x<value> 0x<value> ...
klips_debug:           00: 01 02
klips_debug:ipsec_rcv: packet decrypted from 192.1.2.23: next_header = 4, padding = 2
klips_debug:ipsec_rcv: trimming to 104.
klips_debug:ipsec_rcv: after <ESP_3DES>, SA:esp.1000583@192.1.2.45:
klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:104 id:17054 frag_off:0 ttl:64 proto:4 chk:45997 saddr:192.1.2.23 daddr:192.1.2.45
klips_debug:ipsec_rcv: SA:esp.1000583@192.1.2.45, Another IPSEC header to process.
klips_debug:ipsec_rcv: ESP SA sets skb->nfmark=0x70000.
klips_debug:ipsec_rcv: IPIP tunnel stripped.
klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:84 id:0 DF frag_off:0 ttl:63 proto:1 (ICMP) chk:47270 saddr:192.0.2.1 daddr:192.0.1.1 type:code=8:0
klips_debug:ipsec_rcv: IPIP SA sets skb->nfmark=0xf0000.
klips_debug:ipsec_rcv: netif_rx() called.
klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth1 dev=eth1 
klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth1.
klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:124 id:17055 frag_off:0 ttl:64 proto:50 chk:45930 saddr:192.1.2.23 daddr:192.1.2.45
klips_debug:ipsec_rcv_decap_once: decap (50) from 192.1.2.23 -> 192.1.2.45
klips_debug:ipsec_sa_getbyid: linked entry in ipsec_sa table for hash=73 of SA:esp.1000583@192.1.2.45 requested.
klips_debug:ipsec_rcv: SA:esp.1000583@192.1.2.45, src=192.1.2.23 of pkt agrees with expected SA source address policy.
klips_debug:ipsec_rcv: SA:esp.1000583@192.1.2.45 First SA in group.
klips_debug:ipsec_rcv: natt_type=0 tdbp->ips_natt_type=0 : ok
klips_debug:ipsec_rcv: padlen=2, contents: 0x<offset>: 0x<value> 0x<value> ...
klips_debug:           00: 01 02
klips_debug:ipsec_rcv: packet decrypted from 192.1.2.23: next_header = 4, padding = 2
klips_debug:ipsec_rcv: trimming to 104.
klips_debug:ipsec_rcv: after <ESP_3DES>, SA:esp.1000583@192.1.2.45:
klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:104 id:17055 frag_off:0 ttl:64 proto:4 chk:45996 saddr:192.1.2.23 daddr:192.1.2.45
klips_debug:ipsec_rcv: SA:esp.1000583@192.1.2.45, Another IPSEC header to process.
klips_debug:ipsec_rcv: ESP SA sets skb->nfmark=0x70000.
klips_debug:ipsec_rcv: IPIP tunnel stripped.
klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:84 id:0 DF frag_off:0 ttl:63 proto:1 (ICMP) chk:47270 saddr:192.0.2.1 daddr:192.0.1.1 type:code=8:0
klips_debug:ipsec_rcv: IPIP SA sets skb->nfmark=0xf0000.
klips_debug:ipsec_rcv: netif_rx() called.
klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth1 dev=eth1 
klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth1.
klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:124 id:17056 frag_off:0 ttl:64 proto:50 chk:45929 saddr:192.1.2.23 daddr:192.1.2.45
klips_debug:ipsec_rcv_decap_once: decap (50) from 192.1.2.23 -> 192.1.2.45
klips_debug:ipsec_sa_getbyid: linked entry in ipsec_sa table for hash=73 of SA:esp.1000583@192.1.2.45 requested.
klips_debug:ipsec_rcv: SA:esp.1000583@192.1.2.45, src=192.1.2.23 of pkt agrees with expected SA source address policy.
klips_debug:ipsec_rcv: SA:esp.1000583@192.1.2.45 First SA in group.
klips_debug:ipsec_rcv: natt_type=0 tdbp->ips_natt_type=0 : ok
klips_debug:ipsec_rcv: padlen=2, contents: 0x<offset>: 0x<value> 0x<value> ...
klips_debug:           00: 01 02
klips_debug:ipsec_rcv: packet decrypted from 192.1.2.23: next_header = 4, padding = 2
klips_debug:ipsec_rcv: trimming to 104.
klips_debug:ipsec_rcv: after <ESP_3DES>, SA:esp.1000583@192.1.2.45:
klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:104 id:17056 frag_off:0 ttl:64 proto:4 chk:45995 saddr:192.1.2.23 daddr:192.1.2.45
klips_debug:ipsec_rcv: SA:esp.1000583@192.1.2.45, Another IPSEC header to process.
klips_debug:ipsec_rcv: ESP SA sets skb->nfmark=0x70000.
klips_debug:ipsec_rcv: IPIP tunnel stripped.
klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:84 id:0 DF frag_off:0 ttl:63 proto:1 (ICMP) chk:47270 saddr:192.0.2.1 daddr:192.0.1.1 type:code=8:0
klips_debug:ipsec_rcv: IPIP SA sets skb->nfmark=0xf0000.
klips_debug:ipsec_rcv: netif_rx() called.
klips_debug:ipsec_rcv: <<< Info -- skb->dev=eth1 dev=eth1 
klips_debug:ipsec_rcv: assigning packet ownership to virtual device ipsec0 from physical device eth1.
klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:124 id:17057 frag_off:0 ttl:64 proto:50 chk:45928 saddr:192.1.2.23 daddr:192.1.2.45
klips_debug:ipsec_rcv_decap_once: decap (50) from 192.1.2.23 -> 192.1.2.45
klips_debug:ipsec_sa_getbyid: linked entry in ipsec_sa table for hash=73 of SA:esp.1000583@192.1.2.45 requested.
klips_debug:ipsec_rcv: SA:esp.1000583@192.1.2.45, src=192.1.2.23 of pkt agrees with expected SA source address policy.
klips_debug:ipsec_rcv: SA:esp.1000583@192.1.2.45 First SA in group.
klips_debug:ipsec_rcv: natt_type=0 tdbp->ips_natt_type=0 : ok
klips_debug:ipsec_rcv: padlen=2, contents: 0x<offset>: 0x<value> 0x<value> ...
klips_debug:           00: 01 02
klips_debug:ipsec_rcv: packet decrypted from 192.1.2.23: next_header = 4, padding = 2
klips_debug:ipsec_rcv: trimming to 104.
klips_debug:ipsec_rcv: after <ESP_3DES>, SA:esp.1000583@192.1.2.45:
klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:104 id:17057 frag_off:0 ttl:64 proto:4 chk:45994 saddr:192.1.2.23 daddr:192.1.2.45
klips_debug:ipsec_rcv: SA:esp.1000583@192.1.2.45, Another IPSEC header to process.
klips_debug:ipsec_rcv: ESP SA sets skb->nfmark=0x70000.
klips_debug:ipsec_rcv: IPIP tunnel stripped.
klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:84 id:0 DF frag_off:0 ttl:63 proto:1 (ICMP) chk:47270 saddr:192.0.2.1 daddr:192.0.1.1 type:code=8:0
klips_debug:ipsec_rcv: IPIP SA sets skb->nfmark=0xf0000.
klips_debug:ipsec_rcv: netif_rx() called.
klips_debug:ipsec_device_event: NETDEV_GOING_DOWN dev=ipsec0
klips_debug:ipsec_device_event: NETDEV_DOWN dev=ipsec0 flags=80
klips_debug:ipsec_tunnel_ioctl: tncfg service call #35313 for dev=ipsec0
klips_debug:ipsec_tunnel_ioctl: calling ipsec_tunnel_detatch.
klips_debug:ipsec_tunnel_detach: physical device eth1 being detached from virtual device ipsec0
klips_debug:pfkey_create: sock=0pDEADF00D type:3 state:1 flags:0 protocol:2
klips_debug:pfkey_create: sock->fasync_list=0pDEADF00D sk->sleep=0pDEADF00D.
klips_debug:pfkey_insert_socket: sk=0pDEADF00D
klips_debug:pfkey_list_insert_socket: allocating 8 bytes for socketp=0pDEADF00D
klips_debug:pfkey_create: Socket sock=0pDEADF00D sk=0pDEADF00D initialised.
klips_debug:pfkey_sendmsg: .
klips_debug:pfkey_sendmsg: allocating 72 bytes for downward message.
klips_debug:pfkey_sendmsg: msg sent for parsing.
klips_debug:pfkey_msg_interp: parsing message ver=2, type=16, errno=0, satype=0(UNKNOWN), len=9, res=0, seq=1, pid=987.
klips_debug:ipsec_SAref_alloc: SAref requested... head=12, cont=256, tail=255, listsize=256.
klips_debug:ipsec_SAref_alloc: allocating SAref=12, table=0, entry=12 of 65536.
klips_debug:ipsec_sa_alloc: allocated 528 bytes for ipsec_sa struct=0pDEADF00D ref=12.
klips_debug:pfkey_msg_interp: allocated extr->ips=0pDEADF00D.
klips_debug:pfkey_msg_parse: parsing message ver=2, type=16(x-debug), errno=0, satype=0(UNKNOWN), len=9, res=0, seq=1, pid=987.
klips_debug:pfkey_msg_parse: remain=7, ext_type=25(X-set-debug), ext_len=7.
klips_debug:pfkey_msg_parse: extensions permitted=02000001, required=02000001.
klips_debug:pfkey_msg_parse: parsing ext type=25(X-set-debug) remain=7.
klips_debug:pfkey_msg_parse: remain=7 ext_type=25(X-set-debug) ext_len=7 parsing ext 0pDEADF00D with parser pfkey_x_ext_debug_parse.
klips_debug:pfkey_x_debug_parse: enter
klips_debug:pfkey_msg_parse: Extension 25(X-set-debug) parsed.
klips_debug:pfkey_msg_parse: extensions permitted=02000001, seen=02000001, required=02000001.
klips_debug:pfkey_msg_interp: processing ext 25 0pDEADF00D with processor 0pDEADF00D.
klips_debug:pfkey_x_debug_process: .
klips_debug:pfkey_x_debug_process: unset