| Title | Processing invalid Key Exchange Data field * |
| CommandLine | ./ENODE/I_RFC2408_5_7_2_1_P2_KE.seq -pkt ./ENODE/I_RFC2408_5_7_2_1_P2_KE.def test_phase=2 test_type=BASIC -log 140.html -ti Processing invalid Key Exchange Data field * |
| TestVersion | undefined |
| ToolVersion | REL_3_0_8 |
| Start | 2006/03/18 00:32:06 |
| Tn | /usr/local/v6eval//etc//tn.def |
| Nu | /usr/local/v6eval//etc//nut.def |
| Pkt | ./ENODE/I_RFC2408_5_7_2_1_P2_KE.def |
| System | freebsd-i386 |
| TargetName | freebsd5.4 |
| HostName | racoon |
| Type | host |
| 00:32:06 | Start |
|
*** Target IKE initialization phase *** Target: Reset IKE SA entries: saddump |
|
| 00:32:06 |
vRemote(ikeResetSA.rmt) ``/usr/local/v6eval//bin/freebsd-i386//ikeResetSA.rmt -t freebsd-i386 -u root -p v6eval -d ucom0 -o 1 saddump ''
Connected dell# dell# /usr/local/sbin/setkey -c <<EOD dump; flush; EOD ? dump; ? flush; ? EOD No SAD entries. dell# dell# sendMessagesSync: never got /usr/local/sbin/setkey -c <<EODdump;flush;EOD echo $status 0 dell# kill -TERM `head -1 /var/run/racoon.pid` head: /var/run/racoon.pid: No such file or directory dell# echo $status dell# echo $status 1 dell# /bin/rm -f /var/run/racoon.pid dell# echo $status dell# echo $status 0~ [EOT] |
| Target: Clear SPD entries: spddump | |
| 00:32:15 |
vRemote(ipsecResetSPD.rmt) ``/usr/local/v6eval//bin/freebsd-i386//ipsecResetSPD.rmt -t freebsd-i386 -u root -p v6eval -d ucom0 -o 1 spddump ''
Connected dell# dell# /usr/local/sbin/setkey -c <<EOD spddump; spdflush; ? spddump; ? spdflush; EOD ? EOD No SPD entries. dell# dell# sendMessagesSync: never got /usr/local/sbin/setkey -c <<EODspddump;spdflush;EOD echo $status 0~ [EOT] |
| Target: Set SPD entries: src=3ffe:501:ffff:100:290:99ff:fe7e:3e52 dst=3ffe:501:ffff:101::11 upperspec=any direction=out protocol=PROTO_IPSEC_ESP mode=Transport | |
| 00:32:22 |
vRemote(ipsecSetSPD.rmt) ``/usr/local/v6eval//bin/freebsd-i386//ipsecSetSPD.rmt -t freebsd-i386 -u root -p v6eval -d ucom0 -o 1 src=3ffe:501:ffff:100:290:99ff:fe7e:3e52 dst=3ffe:501:ffff:101::11 upperspec=any direction=out protocol=PROTO_IPSEC_ESP mode=Transport ''
Connected
dell#
dell# /usr/local/sbin/setkey -c <<EOD
spdadd 3ffe:501:ffff:100:290:99ff:fe7e:3e52 3ffe:501:ffff:101::11
any
-P out ipsec
esp/transport/3ffe:501:ffff:100:290:99ff:fe7e:3e52-3ffe:501:ffff:101::11/require
;
spddump;
EOD
? spdadd 3ffe:501:ffff:100:290:99ff:fe7e:3e52 3ffe:501:ffff:101::11
any
-P out ipsec
esp/transport/3ffe:501:ffff:100:290:99ff:fe7e:3e52-3ffe:501:ffff:101::11/require
;
spddump;
EOD
? any
? -P out ipsec
? esp/transport/3ffe:501:ffff:100:290:99ff:fe7e:3e52-3ffe:501:ffff:101::1 1/require
? ;
? spddump;
? EOD
3ffe:501:ffff:100:290:99ff:fe7e:3e52[any] 3ffe:501:ffff:101::11[any] any
out ipsec
esp/transport/3ffe:501:ffff:100:290:99ff:fe7e:3e52-3ffe:501:ffff:101::11/require
created: Mar 17 15:39:41 2006 lastused: Mar 17 15:39:41 2006
lifetime: 0(s) validtime: 0(s)
spid=18179 seq=0 pid=2109
refcnt=1
dell#
dell# sendMessagesSync: never got /usr/local/sbin/setkey -c <<EODspdadd 3ffe:501:ffff:100:290:99ff:fe7e:3e52 3ffe:501:ffff:101::11 any -P out ipsec esp/transport/3ffe:501:ffff:100:290:99ff:fe7e:3e52-3ffe:501:ffff:101::11/require;spddump;EOD
echo $status
0~
[EOT]
|
| Target: Set IKE SA entries: dst=3ffe:501:ffff:101::11 dst_port=500 exchange_mode=main doi=ipsec_doi situation=identity_only isakmp_src_id_type=address isakmp_src_id=3ffe:501:ffff:100:290:99ff:fe7e:3e52 dh_group=2 lifetime=28800 lifetime_unit=seconds encryption_algorithm=3des hash_algorithm=sha1 authentication_method=pre_shared_key key_id=3ffe:501:ffff:101::11 key_value=0x494b452d54455354 ph2_id_type=address ph2_src_id=3ffe:501:ffff:100:290:99ff:fe7e:3e52 ph2_dst_id=3ffe:501:ffff:101::11 ph2_src_upper=any ph2_dst_upper=any pfs_group=2 ipsec_p_num=1 ipsec_p1_t_num=1 ph2_p1_t1_lt=8 ph2_p1_t1_lt_unit=hour ph2_p1_t1_enc_alg=ESP_3DES ph2_p1_t1_auth_mtd=HMAC_SHA | |
| 00:32:30 |
vRemote(ikeSetSA.rmt) ``/usr/local/v6eval//bin/freebsd-i386//ikeSetSA.rmt -t freebsd-i386 -u root -p v6eval -d ucom0 -o 1 dst=3ffe:501:ffff:101::11 dst_port=500 exchange_mode=main doi=ipsec_doi situation=identity_only isakmp_src_id_type=address isakmp_src_id=3ffe:501:ffff:100:290:99ff:fe7e:3e52 dh_group=2 lifetime=28800 lifetime_unit=seconds encryption_algorithm=3des hash_algorithm=sha1 authentication_method=pre_shared_key key_id=3ffe:501:ffff:101::11 key_value=0x494b452d54455354 ph2_id_type=address ph2_src_id=3ffe:501:ffff:100:290:99ff:fe7e:3e52 ph2_dst_id=3ffe:501:ffff:101::11 ph2_src_upper=any ph2_dst_upper=any pfs_group=2 ipsec_p_num=1 ipsec_p1_t_num=1 ph2_p1_t1_lt=8 ph2_p1_t1_lt_unit=hour ph2_p1_t1_enc_alg=ESP_3DES ph2_p1_t1_auth_mtd=HMAC_SHA ''
Connected dell# dell# ~[set] echocheck dell# dell# ~[put] freebsd-i386.psk.txt /tmp/psk.txt Ddell# dell# dell# /bin/chmod 600 /tmp/psk.txt dell# echo $status dell# echo $status 0 dell# ~[set] echocheck dell# dell# ~[put] freebsd-i386.ike.conf /tmp/ike.conf Ddell# dell# dell# test -f /var/run/racoon.pid &&kill -TERM `head -1 /var/run/racoon.pid` dell# echo $status dell# echo $status 1 dell# /usr/local/sbin/racoon -f /tmp/ike.conf dell# echo $status dell# echo $status 0~ [EOT] |
| 00:32:44 | vRemote(ikeEnable.rmt) ``/usr/local/v6eval//bin/freebsd-i386//ikeEnable.rmt -t freebsd-i386 -u root -p v6eval -d ucom0 -o 1 '' |
|
*** Target initialization phase *** |
|
| 00:32:44 | Start Capturing Packets (Link0) |
| 00:32:44 | vRecv(Link0,rs_from_nut rs_from_nut_wsll) timeout:15 cntLimit:0 seektime:0 vRecv() return status=1 |
|
*** Target pre-test seaquence *** |
|
| 00:32:59 | Clear Captured Packets (Link0) |
|
*** Phase-1 1st message recv *** HOST1(NUT) send ICMP to HOST2(TN) |
|
| 00:32:59 |
vRemoteAsync(ping6.rmt) ``/usr/local/v6eval//bin/freebsd-i386//ping6.rmt -t freebsd-i386 -u root -p v6eval -d ucom0 -o 1 count=10 interval=1 if=rl0 addr=3ffe:501:ffff:101::11''
Link to remote control log |
| 00:32:59 | vRecv(Link0,isakmp_phase1_recv ns_uni rs_from_nut rs_from_nut_wsll ns_uni_tll_sll ns_uni_sll ns_multi_llt ns_multi) timeout:10 cntLimit:0 seektime:0 Recv 1st message from HOST1(NUT) |
|
OK payload_check *** Phase-1 2nd message send *** |
|
| 00:33:03 | Clear Captured Packets (Link0) |
| 00:33:03 |
vSend(Link0,isakmp_phase1_send_2nd) Send 2nd message from HOST2(TN) |
|
*** Phase-1 3rd message recv *** |
|
| 00:33:03 | vRecv(Link0,isakmp_phase1_recv_3rd ns_uni rs_from_nut rs_from_nut_wsll ns_uni_tll_sll ns_uni_sll ns_multi_llt ns_multi) timeout:5 cntLimit:0 seektime:0 Recv 3rd message from HOST1(NUT) |
|
OK payload_check *** Phase-1 4th message send *** |
|
| 00:33:03 | Clear Captured Packets (Link0) |
| 00:33:03 |
vSend(Link0,isakmp_phase1_send_4th) Send 4th message from HOST2(TN) |
|
*** Phase-1 5th message recv *** |
|
| 00:33:03 | vRecv(Link0,isakmp_phase1_recv_5th ns_uni rs_from_nut rs_from_nut_wsll ns_uni_tll_sll ns_uni_sll ns_multi_llt ns_multi) timeout:5 cntLimit:0 seektime:0 Recv 5th message from HOST1(NUT) |
|
OK payload_check *** Phase-1 6th message send *** |
|
| 00:33:03 | Clear Captured Packets (Link0) |
| 00:33:03 |
vSend(Link0,isakmp_phase1_send_6th) Send 6th message from HOST2(TN) |
|
*** Target testing phase start *** *** Phase-2 1st message recv *** |
|
| 00:33:04 | vRecv(Link0,isakmp_phase2_recv ns_uni rs_from_nut rs_from_nut_wsll ns_uni_tll_sll ns_uni_sll ns_multi_llt ns_multi) timeout:5 cntLimit:0 seektime:0 recv unexpect packet at 00:33:03 Recv Phase-2 1st message (HDR*, HASH(1), SA, Ni, *, *) from HOST1(NUT) |
|
****OK payload_check payload_check_Transform OK payload_check *** Phase-2 2nd message send *** |
|
| 00:33:04 | Clear Captured Packets (Link0) |
| 00:33:04 |
vSend(Link0,isakmp_phase2_send_2nd) Send Phase-2 2nd message (HDR*, HASH(2), SA, Nr) from HOST2(TN) |
|
*** Phase-2 3rd message recv *** |
|
| 00:33:04 | vRecv(Link0,isakmp_phase2_recv_3rd ns_uni rs_from_nut rs_from_nut_wsll ns_uni_tll_sll ns_uni_sll ns_multi_llt ns_multi) timeout:5 cntLimit:0 seektime:0 Recv Phase-2 3rd message HDR*, HASH(3) from HOST1(NUT) |
|
****OK payload_check payload_check_Hash OK payload_check NG:Phase-2 3rd message is returned. |
|
| 00:33:04 |
vRemoteAsyncWait()
Link to remote control start point sleep 3 [sec] for escaping critical point of asynchronous remoteconf. Connected dell# dell# /sbin/ping6 -n -c 10 -i 1 -h 64 -s 2 -p 00 -I rl0 3ffe:501:ffff:101::11 PATTERN: 0x00 PING6(50=40+8+2 bytes) 3ffe:501:ffff:100:290:99ff:fe7e:3e52 --> 3ffe:501:ffff:101::11 ~ [EOT] |
| Target: Reset IKE SA entries: saddump | |
| 00:33:20 |
vRemote(ikeResetSA.rmt) ``/usr/local/v6eval//bin/freebsd-i386//ikeResetSA.rmt -t freebsd-i386 -u root -p v6eval -d ucom0 -o 1 saddump ''
Connected
--- 3ffe:501:ffff:101::11 ping6 statistics ---
10 packets transmitted, 0 packets received, 100.0% packet loss
dell#
dell#
dell#
/usr/local/sbin/setkey -c <<EOD
dump;
flush;
EOD
dell# /usr/local/sbin/setkey -c <<EOD
dump;
flush;
EOD
? dump;
? flush;
? EOD
3ffe:501:ffff:100:290:99ff:fe7e:3e52 3ffe:501:ffff:101::11
esp mode=transport spi=4096(0x00001000) reqid=0(0x00000000)
E: 3des-cbc 8a5461f8 dbc81b34 2da20aa6 110580d4 98acba39 1d3c566f
A: hmac-sha1 eb203eb8 e6687062 b122cc6c db703ae0 37c9e500
seq=0x00000009 replay=4 flags=0x00000000 state=mature
created: Mar 17 15:40:21 2006 current: Mar 17 15:40:40 2006
diff: 19(s) hard: 28800(s) soft: 23040(s)
last: Mar 17 15:40:29 2006 hard: 0(s) soft: 0(s)
current: 756(bytes) hard: 0(bytes) soft: 0(bytes)
allocated: 9 hard: 0 soft: 0
sadb_seq=1 pid=2120 refcnt=2
3ffe:501:ffff:101::11 3ffe:501:ffff:100:290:99ff:fe7e:3e52
esp mode=transport spi=161638207(0x09a2673f) reqid=0(0x00000000)
E: 3des-cbc 580d5e8a 2ac19d40 8370ca4a b3d7fbeb 7d94850f 0c01ee44
A: hmac-sha1 1b66b4fb 226e9b00 034f0152 1e396b3f ed88b605
seq=0x00000000 replay=4 flags=0x00000000 state=mature
created: Mar 17 15:40:21 2006 current: Mar 17 15:40:40 2006
diff: 19(s) hard: 28800(s) soft: 23040(s)
last: hard: 0(s) soft: 0(s)
current: 0(bytes) hard: 0(bytes) soft: 0(bytes)
allocated: 0 hard: 0 soft: 0
sadb_seq=0 pid=2120 refcnt=1
dell#
dell# sendMessagesSync: never got /usr/local/sbin/setkey -c <<EODdump;flush;EOD
echo $status
0
dell# kill -TERM `head -1 /var/run/racoon.pid`
dell#
echo $status
dell# echo $status
0
dell# /bin/rm -f /var/run/racoon.pid
dell#
echo $status
dell# echo $status
0~
[EOT]
|
| Target: Clear SPD entries: spddump | |
| 00:33:30 |
vRemote(ipsecResetSPD.rmt) ``/usr/local/v6eval//bin/freebsd-i386//ipsecResetSPD.rmt -t freebsd-i386 -u root -p v6eval -d ucom0 -o 1 spddump ''
Connected
dell#
dell# /usr/local/sbin/setkey -c <<EOD
spddump;
spdflush;
? spddump;
? spdflush;
EOD
? EOD
3ffe:501:ffff:100:290:99ff:fe7e:3e52[any] 3ffe:501:ffff:101::11[any] any
out ipsec
esp/transport/3ffe:501:ffff:100:290:99ff:fe7e:3e52-3ffe:501:ffff:101::11/require
created: Mar 17 15:39:41 2006 lastused: Mar 17 15:40:29 2006
lifetime: 0(s) validtime: 0(s)
spid=18179 seq=0 pid=2123
refcnt=1
dell#
dell# sendMessagesSync: never got /usr/local/sbin/setkey -c <<EODspddump;spdflush;EOD
echo $status
0~
[EOT]
|
| 00:33:38 | End |
Frame_Ether (length:162) | Hdr_Ether (length:14) | | DestinationAddress = 00:00:00:00:00:11 | | SourceAddress = 00:90:99:7e:3e:52 | | Type = 34525 | Packet_IPv6 (length:148) | | Hdr_IPv6 (length:40) | | | Version = 6 | | | TrafficClass = 0 | | | FlowLabel = 0 | | | PayloadLength = 108 | | | NextHeader = 17 | | | HopLimit = 64 | | | SourceAddress = 3ffe:501:ffff:100:290:99ff:fe7e:3e52 | | | DestinationAddress = 3ffe:501:ffff:101::11 | | Upp_UDP (length:108) | | | Hdr_UDP (length:8) | | | | SourcePort = 500 | | | | DestinationPort = 500 | | | | Length = 108 | | | | Checksum = 20294 calc(20294) | | | Udp_ISAKMP (length:100) | | | | Hdr_ISAKMP (length:28) | | | | | InitiatorCookie = 139d89f764c46441 | | | | | ResponderCookie = 0000000000000000 | | | | | NextPayload = 1 | | | | | MjVer = 1 | | | | | MnVer = 0 | | | | | ExchangeType = 2 | | | | | Reserved = 0 | | | | | AFlag = 0 | | | | | CFlag = 0 | | | | | EFlag = 0 | | | | | MessageID = 0 | | | | | Length = 100 | | | | Pld_ISAKMP_SA_IPsec_IDonly (length:52) | | | | | NextPayload = 13 | | | | | Reserved1 = 0 | | | | | PayloadLength = 52 | | | | | DOI = 1 | | | | | Situation = 1 | | | | | Pld_ISAKMP_P_ISAKMP (length:40) | | | | | | NextPayload = 0 | | | | | | Reserved1 = 0 | | | | | | PayloadLength = 40 | | | | | | ProposalNumber = 1 | | | | | | ProtocolID = 1 | | | | | | SPIsize = 0 | | | | | | NumOfTransforms = 1 | | | | | | SPI = | | | | | | Pld_ISAKMP_T (length:32) | | | | | | | NextPayload = 0 | | | | | | | Reserved1 = 0 | | | | | | | PayloadLength = 32 | | | | | | | TransformNumber = 1 | | | | | | | TransformID = 1 | | | | | | | Reserved2 = 0 | | | | | | | Attr_ISAKMP_TV (length:4) | | | | | | | | AF = 1 | | | | | | | | Type = 11 | | | | | | | | Value = 1 | | | | | | | Attr_ISAKMP_TV (length:4) | | | | | | | | AF = 1 | | | | | | | | Type = 12 | | | | | | | | Value = 28800 | | | | | | | Attr_ISAKMP_TV (length:4) | | | | | | | | AF = 1 | | | | | | | | Type = 1 | | | | | | | | Value = 5 | | | | | | | Attr_ISAKMP_TV (length:4) | | | | | | | | AF = 1 | | | | | | | | Type = 3 | | | | | | | | Value = 1 | | | | | | | Attr_ISAKMP_TV (length:4) | | | | | | | | AF = 1 | | | | | | | | Type = 2 | | | | | | | | Value = 2 | | | | | | | Attr_ISAKMP_TV (length:4) | | | | | | | | AF = 1 | | | | | | | | Type = 4 | | | | | | | | Value = 2 | | | | Pld_ISAKMP_VID (length:20) | | | | | NextPayload = 0 | | | | | Reserved1 = 0 | | | | | PayloadLength = 20 | | | | | VID = afcad713 68a1f1c9 6b8696fc 77570100 ===isakmp_phase1_recv=================================
Frame_Ether (length:146) | Hdr_Ether (length:14) | | DestinationAddress = 00:90:99:7e:3e:52 | | SourceAddress = 00:00:00:00:00:11 | | Type = 34525 | Packet_IPv6 (length:132) | | Hdr_IPv6 (length:40) | | | Version = 6 | | | TrafficClass = 0 | | | FlowLabel = 0 | | | PayloadLength = 92 | | | NextHeader = 17 | | | HopLimit = 64 | | | SourceAddress = 3ffe:501:ffff:101::11 | | | DestinationAddress = 3ffe:501:ffff:100:290:99ff:fe7e:3e52 | | Upp_UDP (length:92) | | | Hdr_UDP (length:8) | | | | SourcePort = 500 | | | | DestinationPort = 500 | | | | Length = 92 | | | | Checksum = 36920 calc(36920) | | | Udp_ISAKMP (length:84) | | | | Hdr_ISAKMP (length:28) | | | | | InitiatorCookie = 139d89f764c46441 | | | | | ResponderCookie = 37fb864c93c2565c | | | | | NextPayload = 1 | | | | | MjVer = 1 | | | | | MnVer = 0 | | | | | ExchangeType = 2 | | | | | Reserved = 0 | | | | | AFlag = 0 | | | | | CFlag = 0 | | | | | EFlag = 0 | | | | | MessageID = 0 | | | | | Length = 84 | | | | Pld_ISAKMP_SA_IPsec_IDonly (length:56) | | | | | NextPayload = 0 | | | | | Reserved1 = 0 | | | | | PayloadLength = 56 | | | | | DOI = 1 | | | | | Situation = 1 | | | | | Pld_ISAKMP_P_ISAKMP (length:44) | | | | | | NextPayload = 0 | | | | | | Reserved1 = 0 | | | | | | PayloadLength = 44 | | | | | | ProposalNumber = 1 | | | | | | ProtocolID = 1 | | | | | | SPIsize = 0 | | | | | | NumOfTransforms = 1 | | | | | | SPI = | | | | | | Pld_ISAKMP_T (length:36) | | | | | | | NextPayload = 0 | | | | | | | Reserved1 = 0 | | | | | | | PayloadLength = 36 | | | | | | | TransformNumber = 1 | | | | | | | TransformID = 1 | | | | | | | Reserved2 = 0 | | | | | | | Attr_ISAKMP_TV (length:4) | | | | | | | | AF = 1 | | | | | | | | Type = 1 | | | | | | | | Value = 5 | | | | | | | Attr_ISAKMP_TV (length:4) | | | | | | | | AF = 1 | | | | | | | | Type = 2 | | | | | | | | Value = 2 | | | | | | | Attr_ISAKMP_TV (length:4) | | | | | | | | AF = 1 | | | | | | | | Type = 3 | | | | | | | | Value = 1 | | | | | | | Attr_ISAKMP_TV (length:4) | | | | | | | | AF = 1 | | | | | | | | Type = 4 | | | | | | | | Value = 2 | | | | | | | Attr_ISAKMP_TV (length:4) | | | | | | | | AF = 1 | | | | | | | | Type = 11 | | | | | | | | Value = 1 | | | | | | | Attr_ISAKMP_TLV (length:8) | | | | | | | | AF = 0 | | | | | | | | Type = 12 | | | | | | | | Length = 4 | | | | | | | | Value = 00007080
Frame_Ether (length:242) | Hdr_Ether (length:14) | | DestinationAddress = 00:00:00:00:00:11 | | SourceAddress = 00:90:99:7e:3e:52 | | Type = 34525 | Packet_IPv6 (length:228) | | Hdr_IPv6 (length:40) | | | Version = 6 | | | TrafficClass = 0 | | | FlowLabel = 0 | | | PayloadLength = 188 | | | NextHeader = 17 | | | HopLimit = 64 | | | SourceAddress = 3ffe:501:ffff:100:290:99ff:fe7e:3e52 | | | DestinationAddress = 3ffe:501:ffff:101::11 | | Upp_UDP (length:188) | | | Hdr_UDP (length:8) | | | | SourcePort = 500 | | | | DestinationPort = 500 | | | | Length = 188 | | | | Checksum = 48208 calc(48208) | | | Udp_ISAKMP (length:180) | | | | Hdr_ISAKMP (length:28) | | | | | InitiatorCookie = 139d89f764c46441 | | | | | ResponderCookie = 37fb864c93c2565c | | | | | NextPayload = 4 | | | | | MjVer = 1 | | | | | MnVer = 0 | | | | | ExchangeType = 2 | | | | | Reserved = 0 | | | | | AFlag = 0 | | | | | CFlag = 0 | | | | | EFlag = 0 | | | | | MessageID = 0 | | | | | Length = 180 | | | | Pld_ISAKMP_KE (length:132) | | | | | NextPayload = 10 | | | | | Reserved1 = 0 | | | | | PayloadLength = 132 | | | | | KeyExchangeData = | | | | | 18b9452b 2c524238 4094d6ab 2deaa69b 76f9c3fd 9fd1204e 268291f2 b5e67afb | | | | | 38a8e751 ccf6106e 3a8d0cbf 16476f49 108d2c92 a91027c6 9e93a08f 14be0c39 | | | | | 34db3638 c0a86f51 3a0c0720 4d1ef84c e87e06be a41949b8 b63bd2c5 a21f3940 | | | | | 74186748 66c4cf62 61611a78 52b57932 50480e4c eb7a7f17 e5292b5a 031ff1c0 | | | | Pld_ISAKMP_NONCE (length:20) | | | | | NextPayload = 0 | | | | | Reserved1 = 0 | | | | | PayloadLength = 20 | | | | | NonceData = 92f7ef94 063fc287 a1850a39 b89aa8ea ===isakmp_phase1_recv_3rd=================================
Frame_Ether (length:242) | Hdr_Ether (length:14) | | DestinationAddress = 00:90:99:7e:3e:52 | | SourceAddress = 00:00:00:00:00:11 | | Type = 34525 | Packet_IPv6 (length:228) | | Hdr_IPv6 (length:40) | | | Version = 6 | | | TrafficClass = 0 | | | FlowLabel = 0 | | | PayloadLength = 188 | | | NextHeader = 17 | | | HopLimit = 64 | | | SourceAddress = 3ffe:501:ffff:101::11 | | | DestinationAddress = 3ffe:501:ffff:100:290:99ff:fe7e:3e52 | | Upp_UDP (length:188) | | | Hdr_UDP (length:8) | | | | SourcePort = 500 | | | | DestinationPort = 500 | | | | Length = 188 | | | | Checksum = 24470 calc(24470) | | | Udp_ISAKMP (length:180) | | | | Hdr_ISAKMP (length:28) | | | | | InitiatorCookie = 139d89f764c46441 | | | | | ResponderCookie = 37fb864c93c2565c | | | | | NextPayload = 4 | | | | | MjVer = 1 | | | | | MnVer = 0 | | | | | ExchangeType = 2 | | | | | Reserved = 0 | | | | | AFlag = 0 | | | | | CFlag = 0 | | | | | EFlag = 0 | | | | | MessageID = 0 | | | | | Length = 180 | | | | Pld_ISAKMP_KE (length:132) | | | | | NextPayload = 10 | | | | | Reserved1 = 0 | | | | | PayloadLength = 132 | | | | | KeyExchangeData = | | | | | 9e44c3cb 64bb6456 31fe2f66 3fbc5a76 691cce6d 7fd0dcf1 90fca3f4 fd676a6b | | | | | a33eb9cf 0dfabfd8 b0a4131f 0757b7ec e4588061 1abe4691 bfcd847b 556aada4 | | | | | 93f8ecce 9dd93c06 4609bdb1 eafb0c8f dae5693a b5776f0b f85f8a6b dea2695f | | | | | 9412e17b 37625128 e096033a 93e6bd2c 8efe5355 41d51833 57760385 787235ef | | | | Pld_ISAKMP_NONCE (length:20) | | | | | NextPayload = 0 | | | | | Reserved1 = 0 | | | | | PayloadLength = 20 | | | | | NonceData = 00000000 00000000 00000000 00000000
===ALGORITHM LISTS BEGIN====================
--------------------------------------------
frame=isakmp_phase1_recv_5th
ESP=alg_isakmp_phase1_recv_5th
crypt=ike_des3cbc(hexstr("1fa994738fd7ca416dc5abaeaa31df90cc5d59a96517e921a3b987a780b324803309e585e4e56762c4e7ecd6b9368d5ba54c8069ea6fb22a565052f8",24),p1_iv("sha1",hexstr("18b9452b2c5242384094d6ab2deaa69b76f9c3fd9fd1204e268291f2b5e67afb38a8e751ccf6106e3a8d0cbf16476f49108d2c92a91027c69e93a08f14be0c3934db3638c0a86f513a0c07204d1ef84ce87e06bea41949b8b63bd2c5a21f39407418674866c4cf6261611a7852b5793250480e4ceb7a7f17e5292b5a031ff1c0"),hexstr("9E44C3CB64BB645631FE2F663FBC5A76691CCE6D7FD0DCF190FCA3F4FD676A6BA33EB9CF0DFABFD8B0A4131F0757B7ECE45880611ABE4691BFCD847B556AADA493F8ECCE9DD93C064609BDB1EAFB0C8FDAE5693AB5776F0BF85F8A6BDEA2695F9412E17B37625128E096033A93E6BD2C8EFE535541D5183357760385787235EF"),8))
--------------------------------------------
===ALGORITHM LISTS END======================
Frame_Ether (length:146)
| Hdr_Ether (length:14)
| | DestinationAddress = 00:00:00:00:00:11
| | SourceAddress = 00:90:99:7e:3e:52
| | Type = 34525
| Packet_IPv6 (length:132)
| | Hdr_IPv6 (length:40)
| | | Version = 6
| | | TrafficClass = 0
| | | FlowLabel = 0
| | | PayloadLength = 92
| | | NextHeader = 17
| | | HopLimit = 64
| | | SourceAddress = 3ffe:501:ffff:100:290:99ff:fe7e:3e52
| | | DestinationAddress = 3ffe:501:ffff:101::11
| | Upp_UDP (length:92)
| | | Hdr_UDP (length:8)
| | | | SourcePort = 500
| | | | DestinationPort = 500
| | | | Length = 92
| | | | Checksum = 60564 calc(60564)
| | | Udp_ISAKMP (length:84)
| | | | Hdr_ISAKMP (length:28)
| | | | | InitiatorCookie = 139d89f764c46441
| | | | | ResponderCookie = 37fb864c93c2565c
| | | | | NextPayload = 5
| | | | | MjVer = 1
| | | | | MnVer = 0
| | | | | ExchangeType = 2
| | | | | Reserved = 0
| | | | | AFlag = 0
| | | | | CFlag = 0
| | | | | EFlag = 1
| | | | | MessageID = 0
| | | | | Length = 84
| | | | ISAKMP_Encryption (length:56)
| | | | | algorithm = alg_isakmp_phase1_recv_5th
| | | | | IVEC = 5f5ccca9 11f0e454
| | | | | Decrypted (length:56)
| | | | | | PlainText (length:48)
| | | | | | | Pld_ISAKMP_ID_IPV6_ADDR (length:24)
| | | | | | | | NextPayload = 8
| | | | | | | | Reserved1 = 0
| | | | | | | | PayloadLength = 24
| | | | | | | | IDtype = 5
| | | | | | | | ProtocolID = 17
| | | | | | | | Port = 500
| | | | | | | | ID = 3ffe:501:ffff:100:290:99ff:fe7e:3e52
| | | | | | | Pld_ISAKMP_HASH (length:24)
| | | | | | | | NextPayload = 0
| | | | | | | | Reserved1 = 0
| | | | | | | | PayloadLength = 24
| | | | | | | | HashData =
| | | | | | | | 7ba6b88b 3d35fef0 381f5fbe 9373c834 fcd441b0
| | | | | | Padding = eafcd2bf 8fe8fb07
===isakmp_phase1_recv_5th=================================
applied algorithms={alg_isakmp_phase1_recv_5th}
Frame_Ether (length:146) | Hdr_Ether (length:14) | | DestinationAddress = 00:90:99:7e:3e:52 | | SourceAddress = 00:00:00:00:00:11 | | Type = 34525 | Packet_IPv6 (length:132) | | Hdr_IPv6 (length:40) | | | Version = 6 | | | TrafficClass = 0 | | | FlowLabel = 0 | | | PayloadLength = 92 | | | NextHeader = 17 | | | HopLimit = 64 | | | SourceAddress = 3ffe:501:ffff:101::11 | | | DestinationAddress = 3ffe:501:ffff:100:290:99ff:fe7e:3e52 | | Upp_UDP (length:92) | | | Hdr_UDP (length:8) | | | | SourcePort = 500 | | | | DestinationPort = 500 | | | | Length = 92 | | | | Checksum = 22146 calc(22146) | | | Udp_ISAKMP (length:84) | | | | Hdr_ISAKMP (length:28) | | | | | InitiatorCookie = 139d89f764c46441 | | | | | ResponderCookie = 37fb864c93c2565c | | | | | NextPayload = 5 | | | | | MjVer = 1 | | | | | MnVer = 0 | | | | | ExchangeType = 2 | | | | | Reserved = 0 | | | | | AFlag = 0 | | | | | CFlag = 0 | | | | | EFlag = 1 | | | | | MessageID = 0 | | | | | Length = 84 | | | | ISAKMP_Encryption (length:56) | | | | | algorithm = alg_isakmp_phase1_send_6th | | | | | IVEC = 49fcf4e0 e752ccbb | | | | | Decrypted (length:56) | | | | | | PlainText (length:48) | | | | | | | Pld_ISAKMP_ID_IPV6_ADDR (length:24) | | | | | | | | NextPayload = 8 | | | | | | | | Reserved1 = 0 | | | | | | | | PayloadLength = 24 | | | | | | | | IDtype = 5 | | | | | | | | ProtocolID = 17 | | | | | | | | Port = 500 | | | | | | | | ID = 3ffe:501:ffff:101::11 | | | | | | | Pld_ISAKMP_HASH (length:24) | | | | | | | | NextPayload = 0 | | | | | | | | Reserved1 = 0 | | | | | | | | PayloadLength = 24 | | | | | | | | HashData = | | | | | | | | 87b92884 9ac06ead c0f17df9 13500764 092f1a08 | | | | | | Padding = 00000000 00000007
===ALGORITHM LISTS BEGIN====================
--------------------------------------------
frame=isakmp_phase2_recv
ESP=alg_isakmp_phase2_recv
crypt=ike_des3cbc(hexstr("1fa994738fd7ca416dc5abaeaa31df90cc5d59a96517e921a3b987a780b324803309e585e4e56762c4e7ecd6b9368d5ba54c8069ea6fb22a565052f8",24),p2_iv("sha1",hexstr("49fcf4e0e752ccbb",8),8))
--------------------------------------------
===ALGORITHM LISTS END======================
Frame_Ether (length:146)
| Hdr_Ether (length:14)
| | DestinationAddress = 00:00:00:00:00:11
| | SourceAddress = 00:90:99:7e:3e:52
| | Type = 34525
| Packet_IPv6 (length:132)
| | Hdr_IPv6 (length:40)
| | | Version = 6
| | | TrafficClass = 0
| | | FlowLabel = 0
| | | PayloadLength = 92
| | | NextHeader = 17
| | | HopLimit = 64
| | | SourceAddress = 3ffe:501:ffff:100:290:99ff:fe7e:3e52
| | | DestinationAddress = 3ffe:501:ffff:101::11
| | Upp_UDP (length:92)
| | | Hdr_UDP (length:8)
| | | | SourcePort = 500
| | | | DestinationPort = 500
| | | | Length = 92
| | | | Checksum = 39465 calc(39465)
| | | Udp_ISAKMP (length:84)
| | | | Hdr_ISAKMP (length:28)
| | | | | InitiatorCookie = 139d89f764c46441
| | | | | ResponderCookie = 37fb864c93c2565c
| | | | | NextPayload = 8
| | | | | MjVer = 1
| | | | | MnVer = 0
| | | | | ExchangeType = 5
| | | | | Reserved = 0
| | | | | AFlag = 0
| | | | | CFlag = 0
| | | | | EFlag = 1
| | | | | MessageID = 2801795772
| | | | | Length = 84
| | | | ISAKMP_Encryption (length:56)
| | | | | algorithm = alg_isakmp_phase2_recv
| | | | | IVEC = 7cd2373e 3b90a29d
| | | | | Decrypted (length:56)
| | | | | | PlainText (length:52)
| | | | | | | Pld_ISAKMP_HASH (length:24)
| | | | | | | | NextPayload = 11
| | | | | | | | Reserved1 = 0
| | | | | | | | PayloadLength = 24
| | | | | | | | HashData =
| | | | | | | | 0fb96acd 4394ad56 5b6ccf9c f0a88976 101eef1b
| | | | | | | Pld_ISAKMP_N_IPsec_ANY (length:28)
| | | | | | | | NextPayload = 0
| | | | | | | | Reserved1 = 0
| | | | | | | | PayloadLength = 28
| | | | | | | | DOI = 1
| | | | | | | | ProtocolID = 1
| | | | | | | | SPIsize = 16
| | | | | | | | NotifyMessageType = 24578
| | | | | | | | SPI = 139d89f7 64c46441 37fb864c 93c2565c
| | | | | | | | NotificationData =
| | | | | | Padding = 91ef8d03
===isakmp_phase2_recv=================================
applied algorithms={alg_isakmp_phase2_recv}
ng compare hdr_isakmp_phase2_recv.ExchangeType received:5 = 32
Frame_Ether (length:322)
| Hdr_Ether (length:14)
| | DestinationAddress = 00:00:00:00:00:11
| | SourceAddress = 00:90:99:7e:3e:52
| | Type = 34525
| Packet_IPv6 (length:308)
| | Hdr_IPv6 (length:40)
| | | Version = 6
| | | TrafficClass = 0
| | | FlowLabel = 0
| | | PayloadLength = 268
| | | NextHeader = 17
| | | HopLimit = 64
| | | SourceAddress = 3ffe:501:ffff:100:290:99ff:fe7e:3e52
| | | DestinationAddress = 3ffe:501:ffff:101::11
| | Upp_UDP (length:268)
| | | Hdr_UDP (length:8)
| | | | SourcePort = 500
| | | | DestinationPort = 500
| | | | Length = 268
| | | | Checksum = 30906 calc(30906)
| | | Udp_ISAKMP (length:260)
| | | | Hdr_ISAKMP (length:28)
| | | | | InitiatorCookie = 139d89f764c46441
| | | | | ResponderCookie = 37fb864c93c2565c
| | | | | NextPayload = 8
| | | | | MjVer = 1
| | | | | MnVer = 0
| | | | | ExchangeType = 32
| | | | | Reserved = 0
| | | | | AFlag = 0
| | | | | CFlag = 0
| | | | | EFlag = 1
| | | | | MessageID = 3903221123
| | | | | Length = 260
| | | | ISAKMP_Encryption (length:232)
| | | | | algorithm = alg_isakmp_phase2_recv
| | | | | IVEC = 76594b29 a6dda319
| | | | | Decrypted (length:232)
| | | | | | PlainText (length:228)
| | | | | | | Pld_ISAKMP_HASH (length:24)
| | | | | | | | NextPayload = 1
| | | | | | | | Reserved1 = 0
| | | | | | | | PayloadLength = 24
| | | | | | | | HashData =
| | | | | | | | 771f2073 bf938aca 90b80dad 30ae7df8 c44ab654
| | | | | | | Pld_ISAKMP_SA_IPsec_IDonly (length:52)
| | | | | | | | NextPayload = 10
| | | | | | | | Reserved1 = 0
| | | | | | | | PayloadLength = 52
| | | | | | | | DOI = 1
| | | | | | | | Situation = 1
| | | | | | | | Pld_ISAKMP_P_IPsec_ESP (length:40)
| | | | | | | | | NextPayload = 0
| | | | | | | | | Reserved1 = 0
| | | | | | | | | PayloadLength = 40
| | | | | | | | | ProposalNumber = 1
| | | | | | | | | ProtocolID = 3
| | | | | | | | | SPIsize = 4
| | | | | | | | | NumOfTransforms = 1
| | | | | | | | | SPI = 161638207
| | | | | | | | | Pld_ISAKMP_T (length:28)
| | | | | | | | | | NextPayload = 0
| | | | | | | | | | Reserved1 = 0
| | | | | | | | | | PayloadLength = 28
| | | | | | | | | | TransformNumber = 1
| | | | | | | | | | TransformID = 3
| | | | | | | | | | Reserved2 = 0
| | | | | | | | | | Attr_ISAKMP_TV (length:4)
| | | | | | | | | | | AF = 1
| | | | | | | | | | | Type = 1
| | | | | | | | | | | Value = 1
| | | | | | | | | | Attr_ISAKMP_TV (length:4)
| | | | | | | | | | | AF = 1
| | | | | | | | | | | Type = 2
| | | | | | | | | | | Value = 28800
| | | | | | | | | | Attr_ISAKMP_TV (length:4)
| | | | | | | | | | | AF = 1
| | | | | | | | | | | Type = 4
| | | | | | | | | | | Value = 2
| | | | | | | | | | Attr_ISAKMP_TV (length:4)
| | | | | | | | | | | AF = 1
| | | | | | | | | | | Type = 5
| | | | | | | | | | | Value = 2
| | | | | | | | | | Attr_ISAKMP_TV (length:4)
| | | | | | | | | | | AF = 1
| | | | | | | | | | | Type = 3
| | | | | | | | | | | Value = 2
| | | | | | | Pld_ISAKMP_NONCE (length:20)
| | | | | | | | NextPayload = 4
| | | | | | | | Reserved1 = 0
| | | | | | | | PayloadLength = 20
| | | | | | | | NonceData = f9cee647 e8ce76c9 53ea92ab 60fef96b
| | | | | | | Pld_ISAKMP_KE (length:132)
| | | | | | | | NextPayload = 0
| | | | | | | | Reserved1 = 0
| | | | | | | | PayloadLength = 132
| | | | | | | | KeyExchangeData =
| | | | | | | | 3e4d8f7b 01ac991e 34b5abaa 970a7cdf ac8446d6 0eb1799d 0ad92c74 1906f505
| | | | | | | | 324c6597 0e61eb4a d9b13e20 86d70e83 e78246a1 a1a61d02 830da477 034c8bd6
| | | | | | | | 2e910254 f7963ebd 046320e6 d9a3f0f4 23a8755d 26a92f07 d2c2f3f8 a6a48d7e
| | | | | | | | f492a0ce cb80cf85 1166271a d3c8e8e3 535a9094 fe1c4097 afbf20c0 0e9fa684
| | | | | | Padding = f1f8ea03
===isakmp_phase2_recv=================================
applied algorithms={alg_isakmp_phase2_recv}
Frame_Ether (length:202) | Hdr_Ether (length:14) | | DestinationAddress = 00:90:99:7e:3e:52 | | SourceAddress = 00:00:00:00:00:11 | | Type = 34525 | Packet_IPv6 (length:188) | | Hdr_IPv6 (length:40) | | | Version = 6 | | | TrafficClass = 0 | | | FlowLabel = 0 | | | PayloadLength = 148 | | | NextHeader = 17 | | | HopLimit = 64 | | | SourceAddress = 3ffe:501:ffff:101::11 | | | DestinationAddress = 3ffe:501:ffff:100:290:99ff:fe7e:3e52 | | Upp_UDP (length:148) | | | Hdr_UDP (length:8) | | | | SourcePort = 500 | | | | DestinationPort = 500 | | | | Length = 148 | | | | Checksum = 26596 calc(26596) | | | Udp_ISAKMP (length:140) | | | | Hdr_ISAKMP (length:28) | | | | | InitiatorCookie = 139d89f764c46441 | | | | | ResponderCookie = 37fb864c93c2565c | | | | | NextPayload = 8 | | | | | MjVer = 1 | | | | | MnVer = 0 | | | | | ExchangeType = 32 | | | | | Reserved = 0 | | | | | AFlag = 0 | | | | | CFlag = 0 | | | | | EFlag = 1 | | | | | MessageID = 3903221123 | | | | | Length = 140 | | | | ISAKMP_Encryption (length:112) | | | | | algorithm = alg_isakmp_phase2_send_2nd | | | | | IVEC = 18675a95 170a532c | | | | | Decrypted (length:112) | | | | | | PlainText (length:105) | | | | | | | Pld_ISAKMP_HASH (length:24) | | | | | | | | NextPayload = 1 | | | | | | | | Reserved1 = 0 | | | | | | | | PayloadLength = 24 | | | | | | | | HashData = | | | | | | | | fe6c997a 49760c53 f758644f 20e47cb9 cc9c4778 | | | | | | | Pld_ISAKMP_SA_IPsec_IDonly (length:56) | | | | | | | | NextPayload = 10 | | | | | | | | Reserved1 = 0 | | | | | | | | PayloadLength = 56 | | | | | | | | DOI = 1 | | | | | | | | Situation = 1 | | | | | | | | Pld_ISAKMP_P_IPsec_ESP (length:44) | | | | | | | | | NextPayload = 0 | | | | | | | | | Reserved1 = 0 | | | | | | | | | PayloadLength = 44 | | | | | | | | | ProposalNumber = 1 | | | | | | | | | ProtocolID = 3 | | | | | | | | | SPIsize = 4 | | | | | | | | | NumOfTransforms = 1 | | | | | | | | | SPI = 4096 | | | | | | | | | Pld_ISAKMP_T (length:32) | | | | | | | | | | NextPayload = 0 | | | | | | | | | | Reserved1 = 0 | | | | | | | | | | PayloadLength = 32 | | | | | | | | | | TransformNumber = 1 | | | | | | | | | | TransformID = 3 | | | | | | | | | | Reserved2 = 0 | | | | | | | | | | Attr_ISAKMP_TV (length:4) | | | | | | | | | | | AF = 1 | | | | | | | | | | | Type = 1 | | | | | | | | | | | Value = 1 | | | | | | | | | | Attr_ISAKMP_TLV (length:8) | | | | | | | | | | | AF = 0 | | | | | | | | | | | Type = 2 | | | | | | | | | | | Length = 4 | | | | | | | | | | | Value = 00007080 | | | | | | | | | | Attr_ISAKMP_TV (length:4) | | | | | | | | | | | AF = 1 | | | | | | | | | | | Type = 4 | | | | | | | | | | | Value = 2 | | | | | | | | | | Attr_ISAKMP_TV (length:4) | | | | | | | | | | | AF = 1 | | | | | | | | | | | Type = 3 | | | | | | | | | | | Value = 2 | | | | | | | | | | Attr_ISAKMP_TV (length:4) | | | | | | | | | | | AF = 1 | | | | | | | | | | | Type = 5 | | | | | | | | | | | Value = 2 | | | | | | | Pld_ISAKMP_NONCE (length:20) | | | | | | | | NextPayload = 4 | | | | | | | | Reserved1 = 0 | | | | | | | | PayloadLength = 20 | | | | | | | | NonceData = 00000000 00000000 00000000 00000001 | | | | | | | Pld_ISAKMP_KE (length:5) | | | | | | | | NextPayload = 0 | | | | | | | | Reserved1 = 0 | | | | | | | | PayloadLength = 5 | | | | | | | | KeyExchangeData = 00 | | | | | | Padding = 00000000 000006
===ALGORITHM LISTS BEGIN====================
--------------------------------------------
frame=isakmp_phase2_recv_3rd
ESP=alg_isakmp_phase2_recv_3rd
crypt=ike_des3cbc(hexstr("1fa994738fd7ca416dc5abaeaa31df90cc5d59a96517e921a3b987a780b324803309e585e4e56762c4e7ecd6b9368d5ba54c8069ea6fb22a565052f8",24),hexstr("18675a95170a532c",8))
--------------------------------------------
===ALGORITHM LISTS END======================
Frame_Ether (length:122)
| Hdr_Ether (length:14)
| | DestinationAddress = 00:00:00:00:00:11
| | SourceAddress = 00:90:99:7e:3e:52
| | Type = 34525
| Packet_IPv6 (length:108)
| | Hdr_IPv6 (length:40)
| | | Version = 6
| | | TrafficClass = 0
| | | FlowLabel = 0
| | | PayloadLength = 68
| | | NextHeader = 17
| | | HopLimit = 64
| | | SourceAddress = 3ffe:501:ffff:100:290:99ff:fe7e:3e52
| | | DestinationAddress = 3ffe:501:ffff:101::11
| | Upp_UDP (length:68)
| | | Hdr_UDP (length:8)
| | | | SourcePort = 500
| | | | DestinationPort = 500
| | | | Length = 68
| | | | Checksum = 49850 calc(49850)
| | | Udp_ISAKMP (length:60)
| | | | Hdr_ISAKMP (length:28)
| | | | | InitiatorCookie = 139d89f764c46441
| | | | | ResponderCookie = 37fb864c93c2565c
| | | | | NextPayload = 8
| | | | | MjVer = 1
| | | | | MnVer = 0
| | | | | ExchangeType = 32
| | | | | Reserved = 0
| | | | | AFlag = 0
| | | | | CFlag = 0
| | | | | EFlag = 1
| | | | | MessageID = 3903221123
| | | | | Length = 60
| | | | ISAKMP_Encryption (length:32)
| | | | | algorithm = alg_isakmp_phase2_recv_3rd
| | | | | IVEC = 1de09863 d1d568c6
| | | | | Decrypted (length:32)
| | | | | | PlainText (length:24)
| | | | | | | Pld_ISAKMP_HASH (length:24)
| | | | | | | | NextPayload = 0
| | | | | | | | Reserved1 = 0
| | | | | | | | PayloadLength = 24
| | | | | | | | HashData =
| | | | | | | | e9d2b2cf bb3bd612 708be133 c172a8b2 345d784b
| | | | | | Padding = d7bbcabd b082ec07
===isakmp_phase2_recv_3rd=================================
applied algorithms={alg_isakmp_phase2_recv_3rd}