Test Information

Title	Processing invalid Transform Payload *
CommandLine	./SGW/SG_R_A_RFC2408_5_6_2_2_T.seq -pkt ./SGW/SG_R_A_RFC2408_5_6_2_2_T.def test_type=BASIC -log 192.html -ti Processing invalid Transform Payload *
TestVersion	undefined
ToolVersion	REL_3_0_8
Start	2006/03/16 15:50:53
Tn	/usr/local/v6eval//etc//tn.def
Nu	/usr/local/v6eval//etc//nut.def
Pkt	./SGW/SG_R_A_RFC2408_5_6_2_2_T.def
System	freebsd-i386
TargetName	FreeBSD 5.4-RELEASE
HostName	target1.tahi.org
Type	router

Test Sequence Execution Log

15:50:53	Start
	* Target IKE initialization phase * Target: Reset IKE SA entries: saddump
15:50:54	vRemote(ikeResetSA.rmt) ``/usr/local/v6eval//bin/freebsd-i386//ikeResetSA.rmt -t freebsd-i386 -u root -p v6eval -d cuad0 -o 1 saddump '' Connected target1# target1# /usr/sbin/setkey -c <<EOD dump; flush; EOD ? dump; ? flush; ? EOD The result of line 1: No SAD entries. target1# target1# sendMessagesSync: never got /usr/sbin/setkey -c <<EODdump;flush;EOD echo $status 0 target1# kill -TERM `head -1 /var/run/racoon.pid` head: /var/run/racoon.pid: No such file or directory target1# target1# echo $status 1 target1# /bin/rm -f /var/run/racoon.pid target1# target1# echo $status 0 ~ [EOT]
	Target: Clear SPD entries: spddump
15:51:01	vRemote(ipsecResetSPD.rmt) ``/usr/local/v6eval//bin/freebsd-i386//ipsecResetSPD.rmt -t freebsd-i386 -u root -p v6eval -d cuad0 -o 1 spddump '' Connected target1# target1# /usr/sbin/setkey -c <<EOD spddump; spdflus? spddump; h; EOD ? spdflush; EOD ? EOD The result of line 1: No SPD entries. target1# target1# sendMessagesSync: never got /usr/sbin/setkey -c <<EODspddump;spdflush;EOD echo $status 0 ~ [EOT]
	Target: Set SPD entries: dst=3ffe:501:ffff:100::/64 src=3ffe:501:ffff:104::/64 tdst=3ffe:501:ffff:102::1 tsrc=3ffe:501:ffff:103::11 direction=in protocol=PROTO_IPSEC_ESP mode=Tunnel
15:51:07	vRemote(ipsecSetSPD.rmt) ``/usr/local/v6eval//bin/freebsd-i386//ipsecSetSPD.rmt -t freebsd-i386 -u root -p v6eval -d cuad0 -o 1 dst=3ffe:501:ffff:100::/64 src=3ffe:501:ffff:104::/64 tdst=3ffe:501:ffff:102::1 tsrc=3ffe:501:ffff:103::11 direction=in protocol=PROTO_IPSEC_ESP mode=Tunnel '' Connected target1# target1# /usr/sbin/setkey -c <<EOD spdadd 3ffe:501:ffff:104::/64 3ffe:501:ffff:100::/64 any -P in ipsec esp/tunnel/3ffe:501:ffff:103::11-3ffe:501:ffff:102::1/require ; spddump; EOD ? spdadd 3ffe:501:ffff:104::/64 3ffe:501:ffff:100::/64 any -P in ipsec esp/tunnel/3ffe:501:ffff:103::11-3ffe:501:ffff:102::1/require ; spddump; EOD ? any ? -P in ipsec ? esp/tunnel/3ffe:501:ffff:103::11-3ffe:501:ffff:102::1/require ? ; ? spddump; ? EOD 3ffe:501:ffff:104::/64[any] 3ffe:501:ffff:100::/64[any] any in ipsec esp/tunnel/3ffe:501:ffff:103::11-3ffe:501:ffff:102::1/require created: Mar 16 15:58:17 2006 lastused: Mar 16 15:58:17 2006 lifetime: 0(s) validtime: 0(s) spid=18853 seq=0 pid=2773 refcnt=1 target1# target1# sendMessagesSync: never got /usr/sbin/setkey -c <<EODspdadd 3ffe:501:ffff:104::/64 3ffe:501:ffff:100::/64 any -P in ipsec esp/tunnel/3ffe:501:ffff:103::11-3ffe:501:ffff:102::1/require;spddump;EOD echo $status 0 ~ [EOT]
	Target: Set IKE SA entries: dst=3ffe:501:ffff:103::11 dst_port=500 exchange_mode=aggressive doi=ipsec_doi situation=identity_only isakmp_src_id_type=address isakmp_src_id=3ffe:501:ffff:102::1 dh_group=2 lifetime=28800 lifetime_unit=seconds encryption_algorithm=3des hash_algorithm=sha1 authentication_method=pre_shared_key key_id=3ffe:501:ffff:103::11 key_value=0x494b452d54455354 ph2_id_type=address ph2_src_id=3ffe:501:ffff:100::/64 ph2_dst_id=3ffe:501:ffff:104::/64 ph2_src_upper=any ph2_dst_upper=any ipsec_p_num=1 ipsec_p1_t_num=1 ph2_p1_t1_lt=8 ph2_p1_t1_lt_unit=hour ph2_p1_t1_enc_alg=ESP_3DES ph2_p1_t1_auth_mtd=HMAC_SHA
15:51:13	vRemote(ikeSetSA.rmt) ``/usr/local/v6eval//bin/freebsd-i386//ikeSetSA.rmt -t freebsd-i386 -u root -p v6eval -d cuad0 -o 1 dst=3ffe:501:ffff:103::11 dst_port=500 exchange_mode=aggressive doi=ipsec_doi situation=identity_only isakmp_src_id_type=address isakmp_src_id=3ffe:501:ffff:102::1 dh_group=2 lifetime=28800 lifetime_unit=seconds encryption_algorithm=3des hash_algorithm=sha1 authentication_method=pre_shared_key key_id=3ffe:501:ffff:103::11 key_value=0x494b452d54455354 ph2_id_type=address ph2_src_id=3ffe:501:ffff:100::/64 ph2_dst_id=3ffe:501:ffff:104::/64 ph2_src_upper=any ph2_dst_upper=any ipsec_p_num=1 ipsec_p1_t_num=1 ph2_p1_t1_lt=8 ph2_p1_t1_lt_unit=hour ph2_p1_t1_enc_alg=ESP_3DES ph2_p1_t1_auth_mtd=HMAC_SHA '' Connected target1# target1# ~[set] echocheck target1# target1# ~[put] freebsd-i386.psk.txt /tmp/psk.txt Dtarget1# target1# target1# /bin/chmod 600 /tmp/psk.txt target1# echo $status 0 target1# ~[set] echocheck target1# target1# ~[put] freebsd-i386.ike.conf /tmp/ike.conf Dtarget1# target1# target1# test -f /var/run/racoon.pid &&kill -TERM `head -1 /var/run/racoon.pid` target1# target1# echo $status 1 target1# /usr/local/sbin/racoon -f /tmp/ike.conf target1# target1# echo $status 0 ~ [EOT]
15:51:27	vRemote(ikeEnable.rmt) ``/usr/local/v6eval//bin/freebsd-i386//ikeEnable.rmt -t freebsd-i386 -u root -p v6eval -d cuad0 -o 1 ''
	* Target initialization phase *
15:51:28	Start Capturing Packets (Link0)
15:51:28	Start Capturing Packets (Link1)
	* Target testing phase * * Phase-1 1st message send *
15:51:28	Clear Captured Packets (Link1)
15:51:28	Clear Captured Packets (Link0)
15:51:28	vSend(Link0,isakmp_phase1_send_1st_agg) Send 1st message from HOST2(TN)
	* Phase-1 2nd message receive *
15:51:28	vRecv(Link0,isakmp_phase1_recv_2nd router_ns_multi router_ns_uni_link1 router_ns_uni_tll_sll_link1 router_ns_multi_llt_link1 router_ns_uni_sll router_ns_uni router_ns_multi_llt router_ns_uni_sll_link1 router_ns_multi_link1 router_ns_uni_tll_sll) timeout:5 cntLimit:0 seektime:0 vRecv() return status=1
	NG:Receive no packets OK:Phase-1 2nd message is not returned. Check the Transform to confirm it is valid is PASS * Target test finish *
15:51:33	Stop Capturing Packets (Link1)
15:51:34	Stop Capturing Packets (Link0)
	Target: Reset IKE SA entries: saddump
15:51:34	vRemote(ikeResetSA.rmt) ``/usr/local/v6eval//bin/freebsd-i386//ikeResetSA.rmt -t freebsd-i386 -u root -p v6eval -d cuad0 -o 1 saddump '' Connected target1# target1# /usr/sbin/setkey -c <<EOD dump; flush; ? dump; ? Eflush; OD ? EOD The result of line 1: No SAD entries. target1# target1# sendMessagesSync: never got /usr/sbin/setkey -c <<EODdump;flush;EOD echo $status 0 target1# kill -TERM `head -1 /var/run/racoon.pid` target1# target1# echo $status 0 target1# /bin/rm -f /var/run/racoon.pid target1# target1# echo $status 0 ~ [EOT]
	Target: Clear SPD entries: spddump
15:51:40	vRemote(ipsecResetSPD.rmt) ``/usr/local/v6eval//bin/freebsd-i386//ipsecResetSPD.rmt -t freebsd-i386 -u root -p v6eval -d cuad0 -o 1 spddump '' Connected target1# target1# /usr/sbin/setkey -c <<EOD spddump; spdfl? spddump; ush; EOD ? spdflush; EOD ? EOD 3ffe:501:ffff:104::/64[any] 3ffe:501:ffff:100::/64[any] any in ipsec esp/tunnel/3ffe:501:ffff:103::11-3ffe:501:ffff:102::1/require created: Mar 16 15:58:17 2006 lastused: Mar 16 15:58:17 2006 lifetime: 0(s) validtime: 0(s) spid=18853 seq=0 pid=2783 refcnt=1 target1# target1# sendMessagesSync: never got /usr/sbin/setkey -c <<EODspddump;spdflush;EOD echo $status 0 ~ [EOT]
	OK
15:51:46	End

Packet Reverse Log

Send 1st message from HOST2(TN) at 15:51:28

Frame_Ether                     (length:294)
| Hdr_Ether                       (length:14)
| | DestinationAddress               = 00:00:02:00:27:cd
| | SourceAddress                    = 00:00:00:00:00:11
| | Type                             = 34525
| Packet_IPv6                     (length:280)
| | Hdr_IPv6                        (length:40)
| | | Version                          = 6
| | | TrafficClass                     = 0
| | | FlowLabel                        = 0
| | | PayloadLength                    = 240
| | | NextHeader                       = 17
| | | HopLimit                         = 64
| | | SourceAddress                    = 3ffe:501:ffff:103::11
| | | DestinationAddress               = 3ffe:501:ffff:102::1
| | Upp_UDP                         (length:240)
| | | Hdr_UDP                         (length:8)
| | | | SourcePort                       = 500
| | | | DestinationPort                  = 500
| | | | Length                           = 240
| | | | Checksum                         = 12613 calc(12613)
| | | Udp_ISAKMP                      (length:232)
| | | | Hdr_ISAKMP                      (length:28)
| | | | | InitiatorCookie                  = 44e5028f8e4d46a4
| | | | | ResponderCookie                  = 0000000000000000
| | | | | NextPayload                      = 1
| | | | | MjVer                            = 1
| | | | | MnVer                            = 0
| | | | | ExchangeType                     = 4
| | | | | Reserved                         = 0
| | | | | AFlag                            = 0
| | | | | CFlag                            = 0
| | | | | EFlag                            = 0
| | | | | MessageID                        = 0
| | | | | Length                           = 232
| | | | Pld_ISAKMP_SA_IPsec_IDonly      (length:28)
| | | | | NextPayload                      = 4
| | | | | Reserved1                        = 0
| | | | | PayloadLength                    = 28
| | | | | DOI                              = 1
| | | | | Situation                        = 1
| | | | | Pld_ISAKMP_P_ISAKMP             (length:16)
| | | | | | NextPayload                      = 0
| | | | | | Reserved1                        = 0
| | | | | | PayloadLength                    = 16
| | | | | | ProposalNumber                   = 1
| | | | | | ProtocolID                       = 1
| | | | | | SPIsize                          = 0
| | | | | | NumOfTransforms                  = 1
| | | | | | SPI                              = 
| | | | | | Pld_ISAKMP_T                    (length:8)
| | | | | | | NextPayload                      = 0
| | | | | | | Reserved1                        = 0
| | | | | | | PayloadLength                    = 8
| | | | | | | TransformNumber                  = 1
| | | | | | | TransformID                      = 1
| | | | | | | Reserved2                        = 0
| | | | Pld_ISAKMP_KE                   (length:132)
| | | | | NextPayload                      = 10
| | | | | Reserved1                        = 0
| | | | | PayloadLength                    = 132
| | | | | KeyExchangeData                  = 
| | | | |   5f304575 ada912b7  05eb78bf e3c2a33d  e37f1be9 109b6327  8140246d 7fe73ea0
| | | | |   d9dd674a 0d5d6afe  d37221f1 26a2dac4  18de56c4 05935953  a9293d9f ed292089
| | | | |   9768139a 75770bd5  a50f2c7f e97fed21  d19ee43b a91e3cbd  cdba6abc 22a967d3
| | | | |   f71b5fba 2d3de8dd  b5986c75 5211e980  3ca1d02c 0569e0d7  3c1c8169 e6046db1
| | | | Pld_ISAKMP_NONCE                (length:20)
| | | | | NextPayload                      = 5
| | | | | Reserved1                        = 0
| | | | | PayloadLength                    = 20
| | | | | NonceData                        = 00000000 00000000  00000000 00000000
| | | | Pld_ISAKMP_ID_IPV6_ADDR         (length:24)
| | | | | NextPayload                      = 0
| | | | | Reserved1                        = 0
| | | | | PayloadLength                    = 24
| | | | | IDtype                           = 5
| | | | | ProtocolID                       = 17
| | | | | Port                             = 500
| | | | | ID                               = 3ffe:501:ffff:103::11