spi1-console26.txt

ipsec vpn

Starting UML /0i/sandboxes/pool/t4/east/start.sh
spawn /0i/sandboxes/pool/t4/east/start.sh single
Checking for /proc/mm...found
Checking for the skas3 patch in the host...found
Checking PROT_EXEC mmap in /tmp...OK
Linux version 2.6.11.2 (mcr@gimli) (gcc version 3.3.5 (Debian 1:3.3.5-8)) #20 Sun Apr 17 01:27:00 EDT 2005
Built 1 zonelists
Kernel command line: root=/dev/root rootfstype=hostfs rootflags=/0i/sandboxes/pool/t4/east/root rw eth0=daemon,10:00:00:dc:bc:ff,unix,/tmp/umlDgWHlU.d/private/ctl,/tmp/umlDgWHlU.d/private/data eth1=daemon,10:00:00:64:64:23,unix,/tmp/umlDgWHlU.d/public/ctl,/tmp/umlDgWHlU.d/public/data eth2=daemon,10:00:00:32:64:23,unix,/tmp/umlDgWHlU.d/admin/ctl,/tmp/umlDgWHlU.d/admin/data single
PID hash table entries: 256 (order: 8, 4096 bytes)
Dentry cache hash table entries: 8192 (order: 3, 32768 bytes)
Inode-cache hash table entries: 4096 (order: 2, 16384 bytes)
Memory: 28712k available
Mount-cache hash table entries: 512 (order: 0, 4096 bytes)
Checking for host processor cmov support...Yes
Checking for host processor xmm support...No
Checking that ptrace can change system call numbers...OK
Checking syscall emulation patch for ptrace...missing
Checking that host ptys support output SIGIO...Yes
Checking that host ptys support SIGIO on close...No, enabling workaround
Checking for /dev/anon on the host...Not available (open failed with errno 2)
NET: Registered protocol family 16
daemon_setup : Ignoring data socket specification
Netdevice 0 (10:00:00:dc:bc:ff) : daemon backend (uml_switch version 3) - unix:/tmp/umlDgWHlU.d/private/ctl
daemon_setup : Ignoring data socket specification
Netdevice 1 (10:00:00:64:64:23) : daemon backend (uml_switch version 3) - unix:/tmp/umlDgWHlU.d/public/ctl
daemon_setup : Ignoring data socket specification
Netdevice 2 (10:00:00:32:64:23) : daemon backend (uml_switch version 3) - unix:/tmp/umlDgWHlU.d/admin/ctl
mconsole (version 2) initialized on /home/mcr/.uml/east/mconsole
VFS: Disk quotas dquot_6.5.1
Dquot-cache hash table entries: 1024 (order 0, 4096 bytes)
devfs: 2004-01-31 Richard Gooch ([e-mail])
devfs: boot_options: 0x1
Initializing Cryptographic API
io scheduler noop registered
io scheduler anticipatory registered
io scheduler deadline registered
io scheduler cfq registered
RAMDISK driver initialized: 16 RAM disks of 4096K size 1024 blocksize
loop: loaded (max 8 devices)
nbd: registered device at major 43
PPP generic driver version 2.4.2
SLIP: version 0.8.4-NET3.019-NEWTTY (dynamic channels, max=256).
tun: Universal TUN/TAP device driver, 1.6
tun: (C) 1999-2004 Max Krasnyansky <[e-mail]>
NET: Registered protocol family 2
IP: routing cache hash table of 512 buckets, 4Kbytes
TCP established hash table entries: 2048 (order: 2, 16384 bytes)
TCP bind hash table entries: 2048 (order: 1, 8192 bytes)
TCP: Hash tables configured (established 2048 bind 2048)
klips_info:ipsec_init: KLIPS startup, Openswan KLIPS IPsec stack version: cvs2005Apr16_23:42:32
NET: Registered protocol family 15
klips_info:ipsec_alg_init: KLIPS alg v=0.8.1-0 (EALG_MAX=255, AALG_MAX=251)
klips_info:ipsec_alg_init: calling ipsec_alg_static_init()
ipsec_aes_init(alg_type=15 alg_id=12 name=aes): ret=0
ipsec_aes_init(alg_type=14 alg_id=9 name=aes_mac): ret=0
IPv4 over IPv4 tunneling driver
GRE over IPv4 tunneling driver
ip_conntrack version 2.1 (224 buckets, 1792 max) - 212 bytes per conntrack
ip_tables: (C) 2000-2002 Netfilter core team
ipt_recent v0.3.1: Stephen Frost <[e-mail]>.  http://snowman.net/projects/ipt_recent/
arp_tables: (C) 2002 David S. Miller
NET: Registered protocol family 1
NET: Registered protocol family 17
Initialized stdio console driver
Console initialized on /dev/tty0
Initializing software serial port version 1
VFS: Mounted root (hostfs filesystem).
Mounted devfs on /dev
line_ioctl: tty0: ioctl KDSIGACCEPT called

INIT: version 2.78 booting
Activating swap...
Checking all file systems...
Parallelizing fsck version 1.18 (11-Nov-1999)
Setting kernel variables.
Mounting local filesystems...
/dev/shm on /tmp type tmpfs (rw)
/dev/shm on /var/run type tmpfs (rw)
devpts on /dev/pts type devpts (rw,mode=0622)
none on /usr/share type hostfs (ro)
none on /testing type hostfs (ro,/0i/sandboxes/t4/testing)
none on /usr/src type hostfs (ro,/0i/sandboxes/t4)
none on /usr/local type hostfs (rw,/0i/sandboxes/pool/t4/east/root/usr/local)
none on /var/tmp type hostfs (rw,/0i/sandboxes/pool/t4/east/root/var/tmp)
Enabling packet forwarding: done.
Configuring network interfaces: done.
Cleaning: /tmp /var/lock /var/run.
Initializing random number generator... done.
Recovering nvi editor sessions... done.
Give root password for maintenance
(or type Control-D for normal startup): 
east:~# echo Starting loading module
Starting loading module
east:~# exec bash --noediting
east:~# ulimit -c unlimited
east:~# echo Finished loading module
Finished loading module
east:~# klogd -c 4 -x -f /tmp/klog.log
east:~# TZ=GMT export TZ
east:~# ipsec spi --clear
east:~# ipsec eroute --clear
east:~# ipsec klipsdebug --set pfkey
east:~# ipsec eroute --add --eraf inet --src 192.1.2.23/32 --dst 192.0.1.0/24 --said %hold
east:~# ipsec tncfg --attach --virtual ipsec0 --physical eth1
east:~# ifconfig ipsec0 inet 192.1.2.23 netmask 0xffffff00 broadcast 192.1.2.255 up
east:~# arp -s 192.1.2.45 10:00:00:64:64:45
east:~# arp -s 192.1.2.254 10:00:00:64:64:45
east:~# ipsec look
east Sun Apr 17 05:45:18 GMT 2005
192.1.2.23/32      -> 192.0.1.0/24       => %hold (0)
ipsec0->eth1 mtu=16260(1500)->1500
Destination     Gateway         Genmask         Flags   MSS Window  irtt Iface
east:~# route add -host 192.0.1.1 gw 192.1.2.45 dev ipsec0
east:~# /usr/src/programs/ikeping/ikeping --verbose --wait 2 --inet 192.0.1.1 192.0.1.1 192.0.1.1 192.0.1.1
Sending packet to 192.0.1.1/500
Sending packet to 192.0.1.1/500
Sending packet to 192.0.1.1/500
Sending packet to 192.0.1.1/500
east:~# ipsec setup stop
IPSEC EVENT: KLIPS device ipsec0 shut down.
ipsec_setup: Stopping Openswan IPsec...
ipsec_setup: stop ordered, but IPsec does not appear to be running!
ipsec_setup: doing cleanup anyway...
east:~# kill `cat /var/run/klogd.pid`; cat /tmp/klog.log
klogd 1.3-3#33.1, log source = /proc/kmsg started.
<4>Linux version 2.6.11.2 (mcr@gimli) (gcc version 3.3.5 (Debian 1:3.3.5-8)) #20 Sun Apr 17 01:27:00 EDT 2005
<7>On node 0 totalpages: 8192
<7>  DMA zone: 8192 pages, LIFO batch:2
<7>  Normal zone: 0 pages, LIFO batch:1
<7>  HighMem zone: 0 pages, LIFO batch:1
<4>Built 1 zonelists
<4>Kernel command line: root=/dev/root rootfstype=hostfs rootflags=/0i/sandboxes/pool/t4/east/root rw eth0=daemon,10:00:00:dc:bc:ff,unix,/tmp/umlDgWHlU.d/private/ctl,/tmp/umlDgWHlU.d/private/data eth1=daemon,10:00:00:64:64:23,unix,/tmp/umlDgWHlU.d/public/ctl,/tmp/umlDgWHlU.d/public/data eth2=daemon,10:00:00:32:64:23,unix,/tmp/umlDgWHlU.d/admin/ctl,/tmp/umlDgWHlU.d/admin/data single
<4>PID hash table entries: 256 (order: 8, 4096 bytes)
<4>Dentry cache hash table entries: 8192 (order: 3, 32768 bytes)
<4>Inode-cache hash table entries: 4096 (order: 2, 16384 bytes)
<6>Memory: 28712k available
<7>Calibrating delay loop... 848.69 BogoMIPS (lpj=4243456)
<4>Mount-cache hash table entries: 512 (order: 0, 4096 bytes)
<4>Checking for host processor cmov support...Yes
<4>Checking for host processor xmm support...No
<4>Checking that ptrace can change system call numbers...OK
<4>Checking syscall emulation patch for ptrace...missing
<4>Checking that host ptys support output SIGIO...Yes
<4>Checking that host ptys support SIGIO on close...No, enabling workaround
<4>Checking for /dev/anon on the host...Not available (open failed with errno 2)
<6>NET: Registered protocol family 16
<4>daemon_setup : Ignoring data socket specification
<6>Netdevice 0 (10:00:00:dc:bc:ff) : daemon backend (uml_switch version 3) - unix:/tmp/umlDgWHlU.d/private/ctl
<4>daemon_setup : Ignoring data socket specification
<6>Netdevice 1 (10:00:00:64:64:23) : daemon backend (uml_switch version 3) - unix:/tmp/umlDgWHlU.d/public/ctl
<4>daemon_setup : Ignoring data socket specification
<6>Netdevice 2 (10:00:00:32:64:23) : daemon backend (uml_switch version 3) - unix:/tmp/umlDgWHlU.d/admin/ctl
<4>mconsole (version 2) initialized on /home/mcr/.uml/east/mconsole
<5>VFS: Disk quotas dquot_6.5.1
<4>Dquot-cache hash table entries: 1024 (order 0, 4096 bytes)
<6>devfs: 2004-01-31 Richard Gooch ([e-mail])
<6>devfs: boot_options: 0x1
<6>Initializing Cryptographic API
<6>io scheduler noop registered
<6>io scheduler anticipatory registered
<6>io scheduler deadline registered
<6>io scheduler cfq registered
<4>RAMDISK driver initialized: 16 RAM disks of 4096K size 1024 blocksize
<6>loop: loaded (max 8 devices)
<6>nbd: registered device at major 43
<6>PPP generic driver version 2.4.2
<6>SLIP: version 0.8.4-NET3.019-NEWTTY (dynamic channels, max=256).
<6>tun: Universal TUN/TAP device driver, 1.6
<6>tun: (C) 1999-2004 Max Krasnyansky <[e-mail]>
<6>NET: Registered protocol family 2
<6>IP: routing cache hash table of 512 buckets, 4Kbytes
<4>TCP established hash table entries: 2048 (order: 2, 16384 bytes)
<4>TCP bind hash table entries: 2048 (order: 1, 8192 bytes)
<6>TCP: Hash tables configured (established 2048 bind 2048)
<6>klips_info:ipsec_init: KLIPS startup, Openswan KLIPS IPsec stack version: cvs2005Apr16_23:42:32
<6>NET: Registered protocol family 15
<6>klips_info:ipsec_alg_init: KLIPS alg v=0.8.1-0 (EALG_MAX=255, AALG_MAX=251)
<6>klips_info:ipsec_alg_init: calling ipsec_alg_static_init()
<4>ipsec_aes_init(alg_type=15 alg_id=12 name=aes): ret=0
<4>ipsec_aes_init(alg_type=14 alg_id=9 name=aes_mac): ret=0
<6>IPv4 over IPv4 tunneling driver
<6>GRE over IPv4 tunneling driver
<4>ip_conntrack version 2.1 (224 buckets, 1792 max) - 212 bytes per conntrack
<4>ip_tables: (C) 2000-2002 Netfilter core team
<6>ipt_recent v0.3.1: Stephen Frost <[e-mail]>.  http://snowman.net/projects/ipt_recent/
<4>arp_tables: (C) 2002 David S. Miller
<6>NET: Registered protocol family 1
<6>NET: Registered protocol family 17
<6>Initialized stdio console driver
<4>Console initialized on /dev/tty0
<6>Initializing software serial port version 1
<4>VFS: Mounted root (hostfs filesystem).
<6>Mounted devfs on /dev
<6>line_ioctl: tty0: ioctl KDSIGACCEPT called
<7>Something isn't implemented in here
<7>Something isn't implemented in here
<7>Something isn't implemented in here
<7>Something isn't implemented in here
<7>Something isn't implemented in here
<7>Something isn't implemented in here
<4>
<6>klips_debug:pfkey_x_debug_process: set
<6>klips_debug:pfkey_msg_interp: parsing message type 16(x-debug) with msg_parser 0pa018cb30.
<6>klips_debug:pfkey_x_msg_debug_parse: .
<6>klips_debug:pfkey_release: sock=0pa03a8300 sk=0pa03ac7c0
<6>klips_debug:pfkey_destroy_socket: 0pa03ac7c0
<6>klips_debug:pfkey_remove_socket: 0pa03ac7c0
<6>klips_debug:pfkey_destroy_socket: pfkey_remove_socket called, sk=0pa03ac7c0
<6>klips_debug:pfkey_destroy_socket: sk(0pa03ac7c0)->(&0pa03ac804)receive_queue.{next=0pa03ac804,prev=0pa03ac804}.
<6>klips_debug:pfkey_destroy_socket: destroyed.
<6>klips_debug:pfkey_list_remove_socket: removing sock=0pa03a8300
<6>klips_debug:pfkey_list_remove_socket: removing sock=0pa03a8300
<6>klips_debug:pfkey_list_remove_socket: removing sock=0pa03a8300
<6>klips_debug:pfkey_list_remove_socket: removing sock=0pa03a8300
<6>klips_debug:pfkey_list_remove_socket: removing sock=0pa03a8300