| Title | Processing invalid Initiator Cookie field * |
| CommandLine | ./ENODE/R_RFC2408_5_2_P1_1_HEADER.seq -pkt ./ENODE/R_RFC2408_5_2_P1_1_HEADER.def test_type=BASIC -log 171.html -ti Processing invalid Initiator Cookie field * |
| TestVersion | undefined |
| ToolVersion | REL_3_0_8 |
| Start | 2006/03/16 16:16:15 |
| Tn | /usr/local/v6eval//etc//tn.def |
| Nu | /usr/local/v6eval//etc//nut.def |
| Pkt | ./ENODE/R_RFC2408_5_2_P1_1_HEADER.def |
| System | freebsd-i386 |
| TargetName | freebsd5.4 |
| HostName | racoon |
| Type | host |
| 16:16:15 | Start |
|
*** Target IKE initialization phase *** Target: Reset IKE SA entries: saddump |
|
| 16:16:15 |
vRemote(ikeResetSA.rmt) ``/usr/local/v6eval//bin/freebsd-i386//ikeResetSA.rmt -t freebsd-i386 -u root -p v6eval -d ucom0 -o 1 saddump ''
Connected dell# dell# /usr/local/sbin/setkey -c <<EOD dump; flush; EOD ? dump; ? flush; ? EOD No SAD entries. dell# dell# sendMessagesSync: never got /usr/local/sbin/setkey -c <<EODdump;flush;EOD echo $status 0 dell# kill -TERM `head -1 /var/run/racoon.pid` head: /var/run/racoon.pid: No such file or directory dell# echo $status dell# echo $status 1 dell# /bin/rm -f /var/run/racoon.pid dell# echo $status dell# echo $status 0~ [EOT] |
| Target: Clear SPD entries: spddump | |
| 16:16:23 |
vRemote(ipsecResetSPD.rmt) ``/usr/local/v6eval//bin/freebsd-i386//ipsecResetSPD.rmt -t freebsd-i386 -u root -p v6eval -d ucom0 -o 1 spddump ''
Connected dell# dell# /usr/local/sbin/setkey -c <<EOD spddump; spdflush;? spddump; EOD ? spdflush; EOD ? EOD No SPD entries. dell# dell# sendMessagesSync: never got /usr/local/sbin/setkey -c <<EODspddump;spdflush;EOD echo $status 0~ [EOT] |
| Target: Set SPD entries: src=3ffe:501:ffff:101::11 dst=3ffe:501:ffff:100:290:99ff:fe7e:3e52 upperspec=any direction=in protocol=PROTO_IPSEC_ESP mode=Transport | |
| 16:16:31 |
vRemote(ipsecSetSPD.rmt) ``/usr/local/v6eval//bin/freebsd-i386//ipsecSetSPD.rmt -t freebsd-i386 -u root -p v6eval -d ucom0 -o 1 src=3ffe:501:ffff:101::11 dst=3ffe:501:ffff:100:290:99ff:fe7e:3e52 upperspec=any direction=in protocol=PROTO_IPSEC_ESP mode=Transport ''
Connected
dell#
dell# /usr/local/sbin/setkey -c <<EOD
spdadd 3ffe:501:ffff:101::11 3ffe:501:ffff:100:290:99ff:fe7e:3e52
any
-P in ipsec
esp/transport/3ffe:501:ffff:101::11-3ffe:501:ffff:100:290:99ff:fe7e:3e52/require
;
spddump;
EOD
? spdadd 3ffe:501:ffff:101::11 3ffe:501:ffff:100:290:99ff:fe7e:3e52
any
-P in ipsec
esp/transport/3ffe:501:ffff:101::11-3ffe:501:ffff:100:290:99ff:fe7e:3e52/require
;
spddump;
EOD
? any
? -P in ipsec
? esp/transport/3ffe:501:ffff:101::11-3ffe:501:ffff:100:290:99ff:fe7e:3e5 2/require
? ;
? spddump;
? EOD
3ffe:501:ffff:101::11[any] 3ffe:501:ffff:100:290:99ff:fe7e:3e52[any] any
in ipsec
esp/transport/3ffe:501:ffff:101::11-3ffe:501:ffff:100:290:99ff:fe7e:3e52/require
created: Mar 16 07:23:47 2006 lastused: Mar 16 07:23:47 2006
lifetime: 0(s) validtime: 0(s)
spid=18484 seq=0 pid=2418
refcnt=1
dell#
dell# sendMessagesSync: never got /usr/local/sbin/setkey -c <<EODspdadd 3ffe:501:ffff:101::11 3ffe:501:ffff:100:290:99ff:fe7e:3e52 any -P in ipsec esp/transport/3ffe:501:ffff:101::11-3ffe:501:ffff:100:290:99ff:fe7e:3e52/require;spddump;EOD
echo $status
0~
[EOT]
|
| Target: Set IKE SA entries: dst=3ffe:501:ffff:101::11 dst_port=500 exchange_mode=main doi=ipsec_doi situation=identity_only isakmp_src_id_type=address isakmp_src_id=3ffe:501:ffff:100:290:99ff:fe7e:3e52 dh_group=2 lifetime=28800 lifetime_unit=seconds encryption_algorithm=3des hash_algorithm=sha1 authentication_method=pre_shared_key key_id=3ffe:501:ffff:101::11 key_value=0x494b452d54455354 ph2_id_type=address ph2_src_id=3ffe:501:ffff:100:290:99ff:fe7e:3e52 ph2_dst_id=3ffe:501:ffff:101::11 ph2_src_upper=any ph2_dst_upper=any ipsec_p_num=1 ipsec_p1_t_num=1 ph2_p1_t1_lt=8 ph2_p1_t1_lt_unit=hour ph2_p1_t1_enc_alg=ESP_3DES ph2_p1_t1_auth_mtd=HMAC_SHA | |
| 16:16:39 |
vRemote(ikeSetSA.rmt) ``/usr/local/v6eval//bin/freebsd-i386//ikeSetSA.rmt -t freebsd-i386 -u root -p v6eval -d ucom0 -o 1 dst=3ffe:501:ffff:101::11 dst_port=500 exchange_mode=main doi=ipsec_doi situation=identity_only isakmp_src_id_type=address isakmp_src_id=3ffe:501:ffff:100:290:99ff:fe7e:3e52 dh_group=2 lifetime=28800 lifetime_unit=seconds encryption_algorithm=3des hash_algorithm=sha1 authentication_method=pre_shared_key key_id=3ffe:501:ffff:101::11 key_value=0x494b452d54455354 ph2_id_type=address ph2_src_id=3ffe:501:ffff:100:290:99ff:fe7e:3e52 ph2_dst_id=3ffe:501:ffff:101::11 ph2_src_upper=any ph2_dst_upper=any ipsec_p_num=1 ipsec_p1_t_num=1 ph2_p1_t1_lt=8 ph2_p1_t1_lt_unit=hour ph2_p1_t1_enc_alg=ESP_3DES ph2_p1_t1_auth_mtd=HMAC_SHA ''
Connected dell# dell# ~[set] echocheck dell# dell# ~[put] freebsd-i386.psk.txt /tmp/psk.txt Ddell# dell# dell# /bin/chmod 600 /tmp/psk.txt dell# echo $status 0 dell# ~[set] echocheck dell# dell# ~[put] freebsd-i386.ike.conf /tmp/ike.conf D dell# dell# dell# test -f /var/run/racoon.pid &&kill -TERM `head -1 /var/run/racoon.pid` dell# dell# echo $status 1 dell# /usr/local/sbin/racoon -f /tmp/ike.conf dell# dell# echo $status 0~ [EOT] |
| 16:16:51 | vRemote(ikeEnable.rmt) ``/usr/local/v6eval//bin/freebsd-i386//ikeEnable.rmt -t freebsd-i386 -u root -p v6eval -d ucom0 -o 1 '' |
|
*** Target initialization phase *** |
|
| 16:16:51 | Start Capturing Packets (Link0) |
| 16:16:51 | vRecv(Link0,rs_from_nut rs_from_nut_wsll) timeout:15 cntLimit:0 seektime:0 vRecv() return status=1 |
|
*** Target testing phase *** |
|
| 16:17:06 | Clear Captured Packets (Link0) |
|
*** Phase-1 1st message send *** |
|
| 16:17:06 |
vSend(Link0,isakmp_phase1_send_1st) Send 1st message from HOST2(TN) |
|
*** Phase-1 2nd message receive *** |
|
| 16:17:07 | vRecv(Link0,isakmp_phase1_recv_2nd ns_uni rs_from_nut rs_from_nut_wsll ns_uni_tll_sll ns_uni_sll ns_multi_llt ns_multi) timeout:5 cntLimit:0 seektime:0 Recv 2nd message from HOST1(NUT) |
|
****OK payload_check payload_check_Proposal ****OK payload_check payload_check_Transform OK payload_check *** Phase-1 3rd message send *** |
|
| 16:17:07 | Clear Captured Packets (Link0) |
| 16:17:07 |
vSend(Link0,isakmp_phase1_send_3rd) Send 3rd message from HOST2(TN) |
|
*** Phase-1 4th message receive *** |
|
| 16:17:07 | vRecv(Link0,isakmp_phase1_recv_4th ns_uni rs_from_nut rs_from_nut_wsll ns_uni_tll_sll ns_uni_sll ns_multi_llt ns_multi) timeout:5 cntLimit:0 seektime:0 Receive Neighbor Solicitation from HOST-1(NUT) |
| 16:17:11 |
vSend(Link0,na_ll_llt) Send Neighbor Advertisement(TN) |
| 16:17:11 | vRecv(Link0,isakmp_phase1_recv_4th ns_uni rs_from_nut rs_from_nut_wsll ns_uni_tll_sll ns_uni_sll ns_multi_llt ns_multi) timeout:5 cntLimit:0 seektime:0 vRecv() return status=1 |
|
NG:Receive no packets OK:Phase-1 4th message is not returned. Invalid Initiator Cookie is correct *** Target test finish *** |
|
| 16:17:16 | Stop Capturing Packets (Link0) |
| Target: Reset IKE SA entries: saddump | |
| 16:17:16 |
vRemote(ikeResetSA.rmt) ``/usr/local/v6eval//bin/freebsd-i386//ikeResetSA.rmt -t freebsd-i386 -u root -p v6eval -d ucom0 -o 1 saddump ''
Connected dell# dell# /usr/local/sbin/setkey -c <<EOD dump; flush; EOD ? dump; ? flush; ? EOD No SAD entries. dell# dell# sendMessagesSync: never got /usr/local/sbin/setkey -c <<EODdump;flush;EOD echo $status 0 dell# kill -TERM `head -1 /var/run/racoon.pid` dell# echo $status dell# echo $status 0 dell# /bin/rm -f /var/run/racoon.pid dell# echo $status dell# echo $status 0~ [EOT] |
| Target: Clear SPD entries: spddump | |
| 16:17:24 |
vRemote(ipsecResetSPD.rmt) ``/usr/local/v6eval//bin/freebsd-i386//ipsecResetSPD.rmt -t freebsd-i386 -u root -p v6eval -d ucom0 -o 1 spddump ''
Connected
dell#
dell# /usr/local/sbin/setkey -c <<EOD
spddump;
spdflush;
? spddump;
? spdflush;
EOD
? EOD
3ffe:501:ffff:101::11[any] 3ffe:501:ffff:100:290:99ff:fe7e:3e52[any] any
in ipsec
esp/transport/3ffe:501:ffff:101::11-3ffe:501:ffff:100:290:99ff:fe7e:3e52/require
created: Mar 16 07:23:47 2006 lastused: Mar 16 07:23:47 2006
lifetime: 0(s) validtime: 0(s)
spid=18484 seq=0 pid=2428
refcnt=1
dell#
dell# sendMessagesSync: never got /usr/local/sbin/setkey -c <<EODspddump;spdflush;EOD
echo $status
0~
[EOT]
|
|
OK |
|
| 16:17:33 | End |
Frame_Ether (length:146) | Hdr_Ether (length:14) | | DestinationAddress = 00:90:99:7e:3e:52 | | SourceAddress = 00:00:00:00:00:11 | | Type = 34525 | Packet_IPv6 (length:132) | | Hdr_IPv6 (length:40) | | | Version = 6 | | | TrafficClass = 0 | | | FlowLabel = 0 | | | PayloadLength = 92 | | | NextHeader = 17 | | | HopLimit = 64 | | | SourceAddress = 3ffe:501:ffff:101::11 | | | DestinationAddress = 3ffe:501:ffff:100:290:99ff:fe7e:3e52 | | Upp_UDP (length:92) | | | Hdr_UDP (length:8) | | | | SourcePort = 500 | | | | DestinationPort = 500 | | | | Length = 92 | | | | Checksum = 37575 calc(37575) | | | Udp_ISAKMP (length:84) | | | | Hdr_ISAKMP (length:28) | | | | | InitiatorCookie = 228e96ec1c4836af | | | | | ResponderCookie = 0000000000000000 | | | | | NextPayload = 1 | | | | | MjVer = 1 | | | | | MnVer = 0 | | | | | ExchangeType = 2 | | | | | Reserved = 0 | | | | | AFlag = 0 | | | | | CFlag = 0 | | | | | EFlag = 0 | | | | | MessageID = 0 | | | | | Length = 84 | | | | Pld_ISAKMP_SA_IPsec_IDonly (length:56) | | | | | NextPayload = 0 | | | | | Reserved1 = 0 | | | | | PayloadLength = 56 | | | | | DOI = 1 | | | | | Situation = 1 | | | | | Pld_ISAKMP_P_ISAKMP (length:44) | | | | | | NextPayload = 0 | | | | | | Reserved1 = 0 | | | | | | PayloadLength = 44 | | | | | | ProposalNumber = 1 | | | | | | ProtocolID = 1 | | | | | | SPIsize = 0 | | | | | | NumOfTransforms = 1 | | | | | | SPI = | | | | | | Pld_ISAKMP_T (length:36) | | | | | | | NextPayload = 0 | | | | | | | Reserved1 = 0 | | | | | | | PayloadLength = 36 | | | | | | | TransformNumber = 1 | | | | | | | TransformID = 1 | | | | | | | Reserved2 = 0 | | | | | | | Attr_ISAKMP_TV (length:4) | | | | | | | | AF = 1 | | | | | | | | Type = 1 | | | | | | | | Value = 5 | | | | | | | Attr_ISAKMP_TV (length:4) | | | | | | | | AF = 1 | | | | | | | | Type = 2 | | | | | | | | Value = 2 | | | | | | | Attr_ISAKMP_TV (length:4) | | | | | | | | AF = 1 | | | | | | | | Type = 3 | | | | | | | | Value = 1 | | | | | | | Attr_ISAKMP_TV (length:4) | | | | | | | | AF = 1 | | | | | | | | Type = 4 | | | | | | | | Value = 2 | | | | | | | Attr_ISAKMP_TV (length:4) | | | | | | | | AF = 1 | | | | | | | | Type = 11 | | | | | | | | Value = 1 | | | | | | | Attr_ISAKMP_TLV (length:8) | | | | | | | | AF = 0 | | | | | | | | Type = 12 | | | | | | | | Length = 4 | | | | | | | | Value = 00007080
Frame_Ether (length:166) | Hdr_Ether (length:14) | | DestinationAddress = 00:00:00:00:00:11 | | SourceAddress = 00:90:99:7e:3e:52 | | Type = 34525 | Packet_IPv6 (length:152) | | Hdr_IPv6 (length:40) | | | Version = 6 | | | TrafficClass = 0 | | | FlowLabel = 0 | | | PayloadLength = 112 | | | NextHeader = 17 | | | HopLimit = 64 | | | SourceAddress = 3ffe:501:ffff:100:290:99ff:fe7e:3e52 | | | DestinationAddress = 3ffe:501:ffff:101::11 | | Upp_UDP (length:112) | | | Hdr_UDP (length:8) | | | | SourcePort = 500 | | | | DestinationPort = 500 | | | | Length = 112 | | | | Checksum = 11245 calc(11245) | | | Udp_ISAKMP (length:104) | | | | Hdr_ISAKMP (length:28) | | | | | InitiatorCookie = 228e96ec1c4836af | | | | | ResponderCookie = f8c25d4913159444 | | | | | NextPayload = 1 | | | | | MjVer = 1 | | | | | MnVer = 0 | | | | | ExchangeType = 2 | | | | | Reserved = 0 | | | | | AFlag = 0 | | | | | CFlag = 0 | | | | | EFlag = 0 | | | | | MessageID = 0 | | | | | Length = 104 | | | | Pld_ISAKMP_SA_IPsec_IDonly (length:56) | | | | | NextPayload = 13 | | | | | Reserved1 = 0 | | | | | PayloadLength = 56 | | | | | DOI = 1 | | | | | Situation = 1 | | | | | Pld_ISAKMP_P_ISAKMP (length:44) | | | | | | NextPayload = 0 | | | | | | Reserved1 = 0 | | | | | | PayloadLength = 44 | | | | | | ProposalNumber = 1 | | | | | | ProtocolID = 1 | | | | | | SPIsize = 0 | | | | | | NumOfTransforms = 1 | | | | | | SPI = | | | | | | Pld_ISAKMP_T (length:36) | | | | | | | NextPayload = 0 | | | | | | | Reserved1 = 0 | | | | | | | PayloadLength = 36 | | | | | | | TransformNumber = 1 | | | | | | | TransformID = 1 | | | | | | | Reserved2 = 0 | | | | | | | Attr_ISAKMP_TV (length:4) | | | | | | | | AF = 1 | | | | | | | | Type = 1 | | | | | | | | Value = 5 | | | | | | | Attr_ISAKMP_TV (length:4) | | | | | | | | AF = 1 | | | | | | | | Type = 2 | | | | | | | | Value = 2 | | | | | | | Attr_ISAKMP_TV (length:4) | | | | | | | | AF = 1 | | | | | | | | Type = 3 | | | | | | | | Value = 1 | | | | | | | Attr_ISAKMP_TV (length:4) | | | | | | | | AF = 1 | | | | | | | | Type = 4 | | | | | | | | Value = 2 | | | | | | | Attr_ISAKMP_TV (length:4) | | | | | | | | AF = 1 | | | | | | | | Type = 11 | | | | | | | | Value = 1 | | | | | | | Attr_ISAKMP_TLV (length:8) | | | | | | | | AF = 0 | | | | | | | | Type = 12 | | | | | | | | Length = 4 | | | | | | | | Value = 00007080 | | | | Pld_ISAKMP_VID (length:20) | | | | | NextPayload = 0 | | | | | Reserved1 = 0 | | | | | PayloadLength = 20 | | | | | VID = afcad713 68a1f1c9 6b8696fc 77570100 ===isakmp_phase1_recv_2nd=================================
Frame_Ether (length:242) | Hdr_Ether (length:14) | | DestinationAddress = 00:90:99:7e:3e:52 | | SourceAddress = 00:00:00:00:00:11 | | Type = 34525 | Packet_IPv6 (length:228) | | Hdr_IPv6 (length:40) | | | Version = 6 | | | TrafficClass = 0 | | | FlowLabel = 0 | | | PayloadLength = 188 | | | NextHeader = 17 | | | HopLimit = 64 | | | SourceAddress = 3ffe:501:ffff:101::11 | | | DestinationAddress = 3ffe:501:ffff:100:290:99ff:fe7e:3e52 | | Upp_UDP (length:188) | | | Hdr_UDP (length:8) | | | | SourcePort = 500 | | | | DestinationPort = 500 | | | | Length = 188 | | | | Checksum = 20975 calc(20975) | | | Udp_ISAKMP (length:180) | | | | Hdr_ISAKMP (length:28) | | | | | InitiatorCookie = 228e96ec1c4836af | | | | | ResponderCookie = 0000000000000000 | | | | | NextPayload = 4 | | | | | MjVer = 1 | | | | | MnVer = 0 | | | | | ExchangeType = 2 | | | | | Reserved = 0 | | | | | AFlag = 0 | | | | | CFlag = 0 | | | | | EFlag = 0 | | | | | MessageID = 0 | | | | | Length = 180 | | | | Pld_ISAKMP_KE (length:132) | | | | | NextPayload = 10 | | | | | Reserved1 = 0 | | | | | PayloadLength = 132 | | | | | KeyExchangeData = | | | | | 46d039ef dcc97388 b93adcbc 865fa5cf aac5884c 86451f15 f44dddc2 f9c1c411 | | | | | 474a7ea2 450ababb 114508b9 1050a2df e3b0557b db53f3db 1b6964e3 1ab2101b | | | | | 7b1a1996 d946a4bd f415dd36 93ac9184 51121e47 e6a78c85 1887aee7 b0675fa1 | | | | | d4e0e73c eabbb898 0b22ee9c c5a9c6b7 e715360b a671da9c 70619dfa 82960b99 | | | | Pld_ISAKMP_NONCE (length:20) | | | | | NextPayload = 0 | | | | | Reserved1 = 0 | | | | | PayloadLength = 20 | | | | | NonceData = 00000000 00000000 00000000 00000000
Frame_Ether (length:86) | Hdr_Ether (length:14) | | DestinationAddress = 00:00:00:00:00:11 | | SourceAddress = 00:90:99:7e:3e:52 | | Type = 34525 | Packet_IPv6 (length:72) | | Hdr_IPv6 (length:40) | | | Version = 6 | | | TrafficClass = 0 | | | FlowLabel = 0 | | | PayloadLength = 32 | | | NextHeader = 58 | | | HopLimit = 255 | | | SourceAddress = fe80::290:99ff:fe7e:3e52 | | | DestinationAddress = fe80::11 | | ICMPv6_NS (length:32) | | | Type = 135 | | | Code = 0 | | | Checksum = 51773 calc(51773) | | | Reserved = 0 | | | TargetAddress = fe80::11 | | | Opt_ICMPv6_SLL (length:8) | | | | Type = 1 | | | | Length = 1 | | | | LinkLayerAddress = 00:90:99:7e:3e:52 ===isakmp_phase1_recv_4th================================= ng compare _HDR_IPV6_isakmp_phase1_recv_4th.NextHeader received:58 = 17 ng compare _HDR_IPV6_isakmp_phase1_recv_4th.SourceAddress received:fe80::290:99ff:fe7e:3e52 = 3ffe:501:ffff:100:290:99ff:fe7e:3e52 ng compare _HDR_IPV6_isakmp_phase1_recv_4th.DestinationAddress received:fe80::11 = 3ffe:501:ffff:101::11 ng meta Packet_IPv6.Upp_UDP != Packet_IPv6.ICMPv6_NS ===ns_uni================================= ng compare _HDR_IPV6_ns_uni.DestinationAddress received:fe80::11 = 3ffe:501:ffff:100::11 ng compare _ICMPV6_ns_uni.TargetAddress received:fe80::11 = 3ffe:501:ffff:100::11 ng count Packet_IPv6.ICMPv6_NS != Packet_IPv6.ICMPv6_NS ===rs_from_nut================================= ng compare _HETHER_nut2allrouters.DestinationAddress received:00:00:00:00:00:11 = 33:33:00:00:00:02 ng compare _HDR_IPV6_rs_from_nut.DestinationAddress received:fe80::11 = ff02::2 ng meta Packet_IPv6.ICMPv6_RS != Packet_IPv6.ICMPv6_NS ===rs_from_nut_wsll================================= ng compare _HETHER_nut2allrouters.DestinationAddress received:00:00:00:00:00:11 = 33:33:00:00:00:02 ng compare _HDR_IPV6_rs_from_nut_wsll.DestinationAddress received:fe80::11 = ff02::2 ng meta Packet_IPv6.ICMPv6_RS != Packet_IPv6.ICMPv6_NS ===ns_uni_tll_sll=================================
Frame_Ether (length:86) | Hdr_Ether (length:14) | | DestinationAddress = 00:90:99:7e:3e:52 | | SourceAddress = 00:00:00:00:00:11 | | Type = 34525 | Packet_IPv6 (length:72) | | Hdr_IPv6 (length:40) | | | Version = 6 | | | TrafficClass = 0 | | | FlowLabel = 0 | | | PayloadLength = 32 | | | NextHeader = 58 | | | HopLimit = 255 | | | SourceAddress = fe80::11 | | | DestinationAddress = fe80::290:99ff:fe7e:3e52 | | ICMPv6_NA (length:32) | | | Type = 136 | | | Code = 0 | | | Checksum = 49292 calc(49292) | | | RFlag = 1 | | | SFlag = 1 | | | OFlag = 1 | | | Reserved = 0 | | | TargetAddress = fe80::11 | | | Opt_ICMPv6_TLL (length:8) | | | | Type = 2 | | | | Length = 1 | | | | LinkLayerAddress = 00:00:00:00:00:11