| Title | Identification Payload Format(Tunnel mode vs HOST) *** |
| CommandLine | ./SGW/SG_I_H_RFC2409_5_5_4.seq -pkt ./SGW/SG_I_H_RFC2409_5_5_4.def test_phase=2 test_type=BASIC -log 99.html -ti Identification Payload Format(Tunnel mode vs HOST) *** |
| TestVersion | undefined |
| ToolVersion | REL_3_0_8 |
| Start | 2006/03/16 14:32:32 |
| Tn | /usr/local/v6eval//etc//tn.def |
| Nu | /usr/local/v6eval//etc//nut.def |
| Pkt | ./SGW/SG_I_H_RFC2409_5_5_4.def |
| System | freebsd-i386 |
| TargetName | FreeBSD 5.4-RELEASE |
| HostName | target1.tahi.org |
| Type | router |
| 14:32:32 | Start |
|
*** Target IKE initialization phase *** Target: Reset IKE SA entries: saddump |
|
| 14:32:33 |
vRemote(ikeResetSA.rmt) ``/usr/local/v6eval//bin/freebsd-i386//ikeResetSA.rmt -t freebsd-i386 -u root -p v6eval -d cuad0 -o 1 saddump ''
Connected target1# target1# /usr/sbin/setkey -c <<EOD dump; flush; E? dump; ? flush; OD ? EOD The result of line 1: No SAD entries. target1# target1# sendMessagesSync: never got /usr/sbin/setkey -c <<EODdump;flush;EOD echo $status 0 target1# kill -TERM `head -1 /var/run/racoon.pid` head: /var/run/racoon.pid: No such file or directory target1# target1# echo $status target1# echo $status 1 /bin/rm -f /var/run/racoon.pid target1# /bin/rm -f /var/run/racoon.pid target1# target1# echo $status 0 ~ [EOT] |
| Target: Clear SPD entries: spddump | |
| 14:32:40 |
vRemote(ipsecResetSPD.rmt) ``/usr/local/v6eval//bin/freebsd-i386//ipsecResetSPD.rmt -t freebsd-i386 -u root -p v6eval -d cuad0 -o 1 spddump ''
Connected target1# target1# /usr/sbin/setkey -c <<EOD spddump; spdflu? spddump; sh; EOD ? spdflush; EOD ? EOD The result of line 1: No SPD entries. target1# target1# sendMessagesSync: never got /usr/sbin/setkey -c <<EODspddump;spdflush;EOD echo $status 0 ~ [EOT] |
| Target: Set SPD entries: src=3ffe:501:ffff:100::/64 dst=3ffe:501:ffff:103::11 tsrc=3ffe:501:ffff:102::1 tdst=3ffe:501:ffff:103::11 upperspec=any direction=out protocol=PROTO_IPSEC_ESP mode=Tunnel | |
| 14:32:46 |
vRemote(ipsecSetSPD.rmt) ``/usr/local/v6eval//bin/freebsd-i386//ipsecSetSPD.rmt -t freebsd-i386 -u root -p v6eval -d cuad0 -o 1 src=3ffe:501:ffff:100::/64 dst=3ffe:501:ffff:103::11 tsrc=3ffe:501:ffff:102::1 tdst=3ffe:501:ffff:103::11 upperspec=any direction=out protocol=PROTO_IPSEC_ESP mode=Tunnel ''
Connected
target1#
target1# /usr/sbin/setkey -c <<EOD
spdadd 3ffe:501:ffff:100::/64 3ffe:501:ffff:103::11
any
-P out ipsec
esp/tunnel/3ffe:501:ffff:102::1-3ffe:501:ffff:103::11/require
;
spddump;
EOD
? spdadd 3ffe:501:ffff:100::/64 3ffe:501:ffff:103::11
any
-P out ipsec
esp/tunnel/3ffe:501:ffff:102::1-3ffe:501:ffff:103::11/require
;
spddump;
EOD
? any
? -P out ipsec
? esp/tunnel/3ffe:501:ffff:102::1-3ffe:501:ffff:103::11/require
? ;
? spddump;
? EOD
3ffe:501:ffff:100::/64[any] 3ffe:501:ffff:103::11[any] any
out ipsec
esp/tunnel/3ffe:501:ffff:102::1-3ffe:501:ffff:103::11/require
created: Mar 16 14:39:56 2006 lastused: Mar 16 14:39:56 2006
lifetime: 0(s) validtime: 0(s)
spid=17434 seq=0 pid=1485
refcnt=1
target1#
target1# sendMessagesSync: never got /usr/sbin/setkey -c <<EODspdadd 3ffe:501:ffff:100::/64 3ffe:501:ffff:103::11 any -P out ipsec esp/tunnel/3ffe:501:ffff:102::1-3ffe:501:ffff:103::11/require;spddump;EOD
echo $status
0
~
[EOT]
|
| Target: Set SPD entries: dst=3ffe:501:ffff:100::/64 src=3ffe:501:ffff:103::11 tdst=3ffe:501:ffff:102::1 tsrc=3ffe:501:ffff:103::11 upperspec=any direction=in protocol=PROTO_IPSEC_ESP mode=Tunnel | |
| 14:32:52 |
vRemote(ipsecSetSPD.rmt) ``/usr/local/v6eval//bin/freebsd-i386//ipsecSetSPD.rmt -t freebsd-i386 -u root -p v6eval -d cuad0 -o 1 dst=3ffe:501:ffff:100::/64 src=3ffe:501:ffff:103::11 tdst=3ffe:501:ffff:102::1 tsrc=3ffe:501:ffff:103::11 upperspec=any direction=in protocol=PROTO_IPSEC_ESP mode=Tunnel ''
Connected
target1#
target1# /usr/sbin/setkey -c <<EOD
spdadd 3ffe:501:ffff:103::11 3ffe:501:ffff:100::/64
any
-P in ipsec
esp/tunnel/3ffe:501:ffff:103::11-3ffe:501:ffff:102::1/require
;
spddump;
EOD
? spdadd 3ffe:501:ffff:103::11 3ffe:501:ffff:100::/64
any
-P in ipsec
esp/tunnel/3ffe:501:ffff:103::11-3ffe:501:ffff:102::1/require
;
spddump;
EOD
? any
? -P in ipsec
? esp/tunnel/3ffe:501:ffff:103::11-3ffe:501:ffff:102::1/require
? ;
? spddump;
? EOD
3ffe:501:ffff:103::11[any] 3ffe:501:ffff:100::/64[any] any
in ipsec
esp/tunnel/3ffe:501:ffff:103::11-3ffe:501:ffff:102::1/require
created: Mar 16 14:40:02 2006 lastused: Mar 16 14:40:02 2006
lifetime: 0(s) validtime: 0(s)
spid=17435 seq=1 pid=1489
refcnt=1
3ffe:501:ffff:100::/64[any] 3ffe:501:ffff:103::11[any] any
out ipsec
esp/tunnel/3ffe:501:ffff:102::1-3ffe:501:ffff:103::11/require
created: Mar 16 14:39:56 2006 lastused: Mar 16 14:39:56 2006
lifetime: 0(s) validtime: 0(s)
spid=17434 seq=0 pid=1489
refcnt=1
target1#
target1# sendMessagesSync: never got /usr/sbin/setkey -c <<EODspdadd 3ffe:501:ffff:103::11 3ffe:501:ffff:100::/64 any -P in ipsec esp/tunnel/3ffe:501:ffff:103::11-3ffe:501:ffff:102::1/require;spddump;EOD
echo $status
0
~
[EOT]
|
| Target: Set IKE SA entries: dst=3ffe:501:ffff:103::11 dst_port=500 exchange_mode=main doi=ipsec_doi situation=identity_only isakmp_src_id_type=address isakmp_src_id=3ffe:501:ffff:102::1 dh_group=2 lifetime=28800 lifetime_unit=seconds encryption_algorithm=3des hash_algorithm=sha1 authentication_method=pre_shared_key key_id=3ffe:501:ffff:103::11 key_value=0x494b452d54455354 ph2_id_type=address ph2_src_id=3ffe:501:ffff:100::/64 ph2_dst_id=3ffe:501:ffff:103::11 ph2_src_upper=any ph2_dst_upper=any ipsec_p_num=1 ipsec_p1_t_num=1 ph2_p1_t1_lt=8 ph2_p1_t1_lt_unit=hour ph2_p1_t1_enc_alg=ESP_3DES ph2_p1_t1_auth_mtd=HMAC_SHA | |
| 14:32:58 |
vRemote(ikeSetSA.rmt) ``/usr/local/v6eval//bin/freebsd-i386//ikeSetSA.rmt -t freebsd-i386 -u root -p v6eval -d cuad0 -o 1 dst=3ffe:501:ffff:103::11 dst_port=500 exchange_mode=main doi=ipsec_doi situation=identity_only isakmp_src_id_type=address isakmp_src_id=3ffe:501:ffff:102::1 dh_group=2 lifetime=28800 lifetime_unit=seconds encryption_algorithm=3des hash_algorithm=sha1 authentication_method=pre_shared_key key_id=3ffe:501:ffff:103::11 key_value=0x494b452d54455354 ph2_id_type=address ph2_src_id=3ffe:501:ffff:100::/64 ph2_dst_id=3ffe:501:ffff:103::11 ph2_src_upper=any ph2_dst_upper=any ipsec_p_num=1 ipsec_p1_t_num=1 ph2_p1_t1_lt=8 ph2_p1_t1_lt_unit=hour ph2_p1_t1_enc_alg=ESP_3DES ph2_p1_t1_auth_mtd=HMAC_SHA ''
Connected target1# target1# ~[set] echocheck target1# target1# ~[put] freebsd-i386.psk.txt /tmp/psk.txt Dtarget1# target1# target1# /bin/chmod 600 /tmp/psk.txt target1# echo $status 0 target1# ~[set] echocheck target1# target1# ~[put] freebsd-i386.ike.conf /tmp/ike.conf Dtarget1# target1# target1# test -f /var/run/racoon.pid &&kill -TERM `head -1 /var/run/racoon.pid` target1# target1# echo $status 1 target1# /usr/local/sbin/racoon -f /tmp/ike.conf target1# target1# echo $status 0 ~ [EOT] |
| 14:33:12 | vRemote(ikeEnable.rmt) ``/usr/local/v6eval//bin/freebsd-i386//ikeEnable.rmt -t freebsd-i386 -u root -p v6eval -d cuad0 -o 1 '' |
|
*** Target initialization phase *** |
|
| 14:33:12 | Start Capturing Packets (Link0) |
| 14:33:13 | Start Capturing Packets (Link1) |
| 14:33:13 |
vSend(Link1,echo_request_send_net0host1_net3host2) Send Echo Request from Host-1(TN) to Host-2(TN) via SGW1(NUT) |
|
*** Target pre-test seaquence *** |
|
| 14:33:13 | Clear Captured Packets (Link0) |
|
*** Phase-1 1st message recv *** |
|
| 14:33:13 | vRecv(Link0,isakmp_phase1_recv router_ns_multi router_ns_uni_link1 router_ns_uni_tll_sll_link1 router_ns_multi_llt_link1 router_ns_uni_sll router_ns_uni router_ns_multi_llt router_ns_uni_sll_link1 router_ns_multi_link1 router_ns_uni_tll_sll) timeout:10 cntLimit:0 seektime:0 Receive Neighbor Solicitation from SGW1(NUT) |
| 14:33:18 |
vSend(Link0,router_na) Send Neighbor Advertisement(TN) |
| 14:33:18 | vRecv(Link0,isakmp_phase1_recv router_ns_multi router_ns_uni_link1 router_ns_uni_tll_sll_link1 router_ns_multi_llt_link1 router_ns_uni_sll router_ns_uni router_ns_multi_llt router_ns_uni_sll_link1 router_ns_multi_link1 router_ns_uni_tll_sll) timeout:10 cntLimit:0 seektime:0 Recv 1st message from HOST1(NUT) |
|
OK payload_check *** Phase-1 2nd message send *** |
|
| 14:33:23 | Clear Captured Packets (Link0) |
| 14:33:23 |
vSend(Link0,isakmp_phase1_send_2nd) Send 2nd message from HOST2(TN) |
|
*** Phase-1 3rd message recv *** |
|
| 14:33:23 | vRecv(Link0,isakmp_phase1_recv_3rd router_ns_multi router_ns_uni_link1 router_ns_uni_tll_sll_link1 router_ns_multi_llt_link1 router_ns_uni_sll router_ns_uni router_ns_multi_llt router_ns_uni_sll_link1 router_ns_multi_link1 router_ns_uni_tll_sll) timeout:5 cntLimit:0 seektime:0 Recv 3rd message from HOST1(NUT) |
|
OK payload_check *** Phase-1 4th message send *** |
|
| 14:33:24 | Clear Captured Packets (Link0) |
| 14:33:24 |
vSend(Link0,isakmp_phase1_send_4th) Send 4th message from HOST2(TN) |
|
*** Phase-1 5th message recv *** |
|
| 14:33:25 | vRecv(Link0,isakmp_phase1_recv_5th router_ns_multi router_ns_uni_link1 router_ns_uni_tll_sll_link1 router_ns_multi_llt_link1 router_ns_uni_sll router_ns_uni router_ns_multi_llt router_ns_uni_sll_link1 router_ns_multi_link1 router_ns_uni_tll_sll) timeout:5 cntLimit:0 seektime:0 Recv 5th message from HOST1(NUT) |
|
OK payload_check *** Phase-1 6th message send *** |
|
| 14:33:25 | Clear Captured Packets (Link0) |
| 14:33:25 |
vSend(Link0,isakmp_phase1_send_6th) Send 6th message from HOST2(TN) |
|
*** Target testing phase start *** *** Phase-2 1st message recv *** |
|
| 14:33:25 | vRecv(Link0,isakmp_phase2_recv router_ns_multi router_ns_uni_link1 router_ns_uni_tll_sll_link1 router_ns_multi_llt_link1 router_ns_uni_sll router_ns_uni router_ns_multi_llt router_ns_uni_sll_link1 router_ns_multi_link1 router_ns_uni_tll_sll) timeout:5 cntLimit:0 seektime:0 recv unexpect packet at 14:33:25 Recv Phase-2 1st message (HDR*, HASH(1), SA, Ni, *, *) from HOST1(NUT) |
|
****OK payload_check payload_check_ID ****OK payload_check payload_check_ID OK payload_check Identification Payload Format(Phase II,Tunnel mode to HOST) is correct *** Target test finish *** |
|
| 14:33:25 | Stop Capturing Packets (Link0) |
| 14:33:26 | Stop Capturing Packets (Link1) |
| Target: Reset IKE SA entries: saddump | |
| 14:33:26 |
vRemote(ikeResetSA.rmt) ``/usr/local/v6eval//bin/freebsd-i386//ikeResetSA.rmt -t freebsd-i386 -u root -p v6eval -d cuad0 -o 1 saddump ''
Connected
target1#
target1# /usr/sbin/setkey -c <<EOD
dump;
flush;
EO? dump;
? flush;
D
? EOD
3ffe:501:ffff:103::11 3ffe:501:ffff:102::1
esp mode=tunnel spi=7696035(0x00756ea3) reqid=0(0x00000000)
seq=0x00000000 replay=0 flags=0x00000000 state=larval
sadb_seq=0 pid=1496 refcnt=1
target1#
target1# sendMessagesSync: never got /usr/sbin/setkey -c <<EODdump;flush;EOD
echo $status
0
target1# kill -TERM `head -1 /var/run/racoon.pid`
target1#
target1# echo $status
0
target1# /bin/rm -f /var/run/racoon.pid
target1#
target1# echo $status
0
~
[EOT]
|
| Target: Clear SPD entries: spddump | |
| 14:33:32 |
vRemote(ipsecResetSPD.rmt) ``/usr/local/v6eval//bin/freebsd-i386//ipsecResetSPD.rmt -t freebsd-i386 -u root -p v6eval -d cuad0 -o 1 spddump ''
Connected
target1#
target1# /usr/sbin/setkey -c <<EOD
spddump;
spdflus? spddump;
h;
EOD
? spdflush;
EOD
? EOD
3ffe:501:ffff:103::11[any] 3ffe:501:ffff:100::/64[any] any
in ipsec
esp/tunnel/3ffe:501:ffff:103::11-3ffe:501:ffff:102::1/require
created: Mar 16 14:40:02 2006 lastused: Mar 16 14:40:02 2006
lifetime: 0(s) validtime: 0(s)
spid=17435 seq=1 pid=1499
refcnt=1
3ffe:501:ffff:100::/64[any] 3ffe:501:ffff:103::11[any] any
out ipsec
esp/tunnel/3ffe:501:ffff:102::1-3ffe:501:ffff:103::11/require
created: Mar 16 14:39:56 2006 lastused: Mar 16 14:40:21 2006
lifetime: 0(s) validtime: 0(s)
spid=17434 seq=0 pid=1499
refcnt=1
target1#
target1# sendMessagesSync: never got /usr/sbin/setkey -c <<EODspddump;spdflush;EOD
echo $status
0
~
[EOT]
|
|
OK |
|
| 14:33:38 | End |
Frame_Ether (length:70) | Hdr_Ether (length:14) | | DestinationAddress = 00:00:02:00:26:ba | | SourceAddress = 00:00:00:00:00:10 | | Type = 34525 | Packet_IPv6 (length:56) | | Hdr_IPv6 (length:40) | | | Version = 6 | | | TrafficClass = 0 | | | FlowLabel = 0 | | | PayloadLength = 16 | | | NextHeader = 58 | | | HopLimit = 64 | | | SourceAddress = 3ffe:501:ffff:100::13 | | | DestinationAddress = 3ffe:501:ffff:103::11 | | ICMPv6_EchoRequest (length:16) | | | Type = 128 | | | Code = 0 | | | Checksum = 36090 calc(36090) | | | Identifier = 0 | | | SequenceNumber = 0 | | | Payload (length:8) | | | | data = 4563686f 44617461
Frame_Ether (length:86)
| Hdr_Ether (length:14)
| | DestinationAddress = 00:00:00:00:00:11
| | SourceAddress = 00:00:02:00:27:cd
| | Type = 34525
| Packet_IPv6 (length:72)
| | Hdr_IPv6 (length:40)
| | | Version = 6
| | | TrafficClass = 0
| | | FlowLabel = 0
| | | PayloadLength = 32
| | | NextHeader = 58
| | | HopLimit = 255
| | | SourceAddress = 3ffe:501:ffff:102::1
| | | DestinationAddress = 3ffe:501:ffff:102::11
| | ICMPv6_NS (length:32)
| | | Type = 135
| | | Code = 0
| | | Checksum = 31664 calc(31664)
| | | Reserved = 0
| | | TargetAddress = 3ffe:501:ffff:102::11
| | | Opt_ICMPv6_SLL (length:8)
| | | | Type = 1
| | | | Length = 1
| | | | LinkLayerAddress = 00:00:02:00:27:cd
===isakmp_phase1_recv=================================
ng compare _HDR_IPV6_isakmp_phase1_recv.NextHeader received:58 = 17
ng compare _HDR_IPV6_isakmp_phase1_recv.DestinationAddress received:3ffe:501:ffff:102::11 = 3ffe:501:ffff:103::11
ng meta Packet_IPv6.Upp_UDP != Packet_IPv6.ICMPv6_NS
===router_ns_multi=================================
ng compare _HETHER_nut2tnA11solnode.DestinationAddress received:00:00:00:00:00:11 = 33:33:ff:00:00:11
ng compare _HDR_IPV6_router_ns_multi.DestinationAddress received:3ffe:501:ffff:102::11 = ff02::1:ff00:11
===router_ns_uni_link1=================================
ng compare _HETHER_nut2tnA10.DestinationAddress received:00:00:00:00:00:11 = 00:00:00:00:00:10
ng compare _HETHER_nut2tnA10.SourceAddress received:00:00:02:00:27:cd = 00:00:02:00:26:ba
ng compare _HDR_IPV6_router_ns_uni_link1.SourceAddress received:3ffe:501:ffff:102::1 = oneof(nutv6("Link1"),v6("3ffe:501:ffff:101::1"))
ng compare _HDR_IPV6_router_ns_uni_link1.DestinationAddress received:3ffe:501:ffff:102::11 = 3ffe:501:ffff:101::11
ng compare _ICMPV6_router_ns_uni_link1.TargetAddress received:3ffe:501:ffff:102::11 = 3ffe:501:ffff:101::11
ng count Packet_IPv6.ICMPv6_NS != Packet_IPv6.ICMPv6_NS
===router_ns_uni_tll_sll_link1=================================
ng compare _HETHER_nut2tnA10.DestinationAddress received:00:00:00:00:00:11 = 00:00:00:00:00:10
ng compare _HETHER_nut2tnA10.SourceAddress received:00:00:02:00:27:cd = 00:00:02:00:26:ba
ng compare _HDR_IPV6_router_ns_uni_tll_sll_link1.SourceAddress received:3ffe:501:ffff:102::1 = fe80::200:2ff:fe00:26ba
ng compare _HDR_IPV6_router_ns_uni_tll_sll_link1.DestinationAddress received:3ffe:501:ffff:102::11 = fe80::11
ng compare _ICMPV6_router_ns_uni_tll_sll_link1.TargetAddress received:3ffe:501:ffff:102::11 = fe80::11
===router_ns_multi_llt_link1=================================
ng compare _HETHER_nut2tnA10solnode.DestinationAddress received:00:00:00:00:00:11 = 33:33:ff:00:00:11
ng compare _HETHER_nut2tnA10solnode.SourceAddress received:00:00:02:00:27:cd = 00:00:02:00:26:ba
ng compare _HDR_IPV6_router_ns_multi_llt_link1.SourceAddress received:3ffe:501:ffff:102::1 = oneof(nutv6("Link1"),v6("3ffe:501:ffff:101::1"))
ng compare _HDR_IPV6_router_ns_multi_llt_link1.DestinationAddress received:3ffe:501:ffff:102::11 = ff02::1:ff00:11
ng compare _ICMPV6_router_ns_multi_llt_link1.TargetAddress received:3ffe:501:ffff:102::11 = fe80::11
===router_ns_uni_sll=================================
Frame_Ether (length:86) | Hdr_Ether (length:14) | | DestinationAddress = 00:00:02:00:27:cd | | SourceAddress = 00:00:00:00:00:11 | | Type = 34525 | Packet_IPv6 (length:72) | | Hdr_IPv6 (length:40) | | | Version = 6 | | | TrafficClass = 0 | | | FlowLabel = 0 | | | PayloadLength = 32 | | | NextHeader = 58 | | | HopLimit = 255 | | | SourceAddress = 3ffe:501:ffff:102::11 | | | DestinationAddress = 3ffe:501:ffff:102::1 | | ICMPv6_NA (length:32) | | | Type = 136 | | | Code = 0 | | | Checksum = 50027 calc(50027) | | | RFlag = 1 | | | SFlag = 1 | | | OFlag = 1 | | | Reserved = 0 | | | TargetAddress = 3ffe:501:ffff:102::11 | | | Opt_ICMPv6_TLL (length:8) | | | | Type = 2 | | | | Length = 1 | | | | LinkLayerAddress = 00:00:00:00:00:11
Frame_Ether (length:142) | Hdr_Ether (length:14) | | DestinationAddress = 00:00:00:00:00:11 | | SourceAddress = 00:00:02:00:27:cd | | Type = 34525 | Packet_IPv6 (length:128) | | Hdr_IPv6 (length:40) | | | Version = 6 | | | TrafficClass = 0 | | | FlowLabel = 0 | | | PayloadLength = 88 | | | NextHeader = 17 | | | HopLimit = 64 | | | SourceAddress = 3ffe:501:ffff:102::1 | | | DestinationAddress = 3ffe:501:ffff:103::11 | | Upp_UDP (length:88) | | | Hdr_UDP (length:8) | | | | SourcePort = 500 | | | | DestinationPort = 500 | | | | Length = 88 | | | | Checksum = 58572 calc(58572) | | | Udp_ISAKMP (length:80) | | | | Hdr_ISAKMP (length:28) | | | | | InitiatorCookie = 9bb9127bf3857229 | | | | | ResponderCookie = 0000000000000000 | | | | | NextPayload = 1 | | | | | MjVer = 1 | | | | | MnVer = 0 | | | | | ExchangeType = 2 | | | | | Reserved = 0 | | | | | AFlag = 0 | | | | | CFlag = 0 | | | | | EFlag = 0 | | | | | MessageID = 0 | | | | | Length = 80 | | | | Pld_ISAKMP_SA_IPsec_IDonly (length:52) | | | | | NextPayload = 0 | | | | | Reserved1 = 0 | | | | | PayloadLength = 52 | | | | | DOI = 1 | | | | | Situation = 1 | | | | | Pld_ISAKMP_P_ISAKMP (length:40) | | | | | | NextPayload = 0 | | | | | | Reserved1 = 0 | | | | | | PayloadLength = 40 | | | | | | ProposalNumber = 1 | | | | | | ProtocolID = 1 | | | | | | SPIsize = 0 | | | | | | NumOfTransforms = 1 | | | | | | SPI = | | | | | | Pld_ISAKMP_T (length:32) | | | | | | | NextPayload = 0 | | | | | | | Reserved1 = 0 | | | | | | | PayloadLength = 32 | | | | | | | TransformNumber = 1 | | | | | | | TransformID = 1 | | | | | | | Reserved2 = 0 | | | | | | | Attr_ISAKMP_TV (length:4) | | | | | | | | AF = 1 | | | | | | | | Type = 11 | | | | | | | | Value = 1 | | | | | | | Attr_ISAKMP_TV (length:4) | | | | | | | | AF = 1 | | | | | | | | Type = 12 | | | | | | | | Value = 28800 | | | | | | | Attr_ISAKMP_TV (length:4) | | | | | | | | AF = 1 | | | | | | | | Type = 1 | | | | | | | | Value = 5 | | | | | | | Attr_ISAKMP_TV (length:4) | | | | | | | | AF = 1 | | | | | | | | Type = 3 | | | | | | | | Value = 1 | | | | | | | Attr_ISAKMP_TV (length:4) | | | | | | | | AF = 1 | | | | | | | | Type = 2 | | | | | | | | Value = 2 | | | | | | | Attr_ISAKMP_TV (length:4) | | | | | | | | AF = 1 | | | | | | | | Type = 4 | | | | | | | | Value = 2 ===isakmp_phase1_recv=================================
Frame_Ether (length:146) | Hdr_Ether (length:14) | | DestinationAddress = 00:00:02:00:27:cd | | SourceAddress = 00:00:00:00:00:11 | | Type = 34525 | Packet_IPv6 (length:132) | | Hdr_IPv6 (length:40) | | | Version = 6 | | | TrafficClass = 0 | | | FlowLabel = 0 | | | PayloadLength = 92 | | | NextHeader = 17 | | | HopLimit = 64 | | | SourceAddress = 3ffe:501:ffff:103::11 | | | DestinationAddress = 3ffe:501:ffff:102::1 | | Upp_UDP (length:92) | | | Hdr_UDP (length:8) | | | | SourcePort = 500 | | | | DestinationPort = 500 | | | | Length = 92 | | | | Checksum = 21967 calc(21967) | | | Udp_ISAKMP (length:84) | | | | Hdr_ISAKMP (length:28) | | | | | InitiatorCookie = 9bb9127bf3857229 | | | | | ResponderCookie = db7410a10992193a | | | | | NextPayload = 1 | | | | | MjVer = 1 | | | | | MnVer = 0 | | | | | ExchangeType = 2 | | | | | Reserved = 0 | | | | | AFlag = 0 | | | | | CFlag = 0 | | | | | EFlag = 0 | | | | | MessageID = 0 | | | | | Length = 84 | | | | Pld_ISAKMP_SA_IPsec_IDonly (length:56) | | | | | NextPayload = 0 | | | | | Reserved1 = 0 | | | | | PayloadLength = 56 | | | | | DOI = 1 | | | | | Situation = 1 | | | | | Pld_ISAKMP_P_ISAKMP (length:44) | | | | | | NextPayload = 0 | | | | | | Reserved1 = 0 | | | | | | PayloadLength = 44 | | | | | | ProposalNumber = 1 | | | | | | ProtocolID = 1 | | | | | | SPIsize = 0 | | | | | | NumOfTransforms = 1 | | | | | | SPI = | | | | | | Pld_ISAKMP_T (length:36) | | | | | | | NextPayload = 0 | | | | | | | Reserved1 = 0 | | | | | | | PayloadLength = 36 | | | | | | | TransformNumber = 1 | | | | | | | TransformID = 1 | | | | | | | Reserved2 = 0 | | | | | | | Attr_ISAKMP_TV (length:4) | | | | | | | | AF = 1 | | | | | | | | Type = 1 | | | | | | | | Value = 5 | | | | | | | Attr_ISAKMP_TV (length:4) | | | | | | | | AF = 1 | | | | | | | | Type = 2 | | | | | | | | Value = 2 | | | | | | | Attr_ISAKMP_TV (length:4) | | | | | | | | AF = 1 | | | | | | | | Type = 3 | | | | | | | | Value = 1 | | | | | | | Attr_ISAKMP_TV (length:4) | | | | | | | | AF = 1 | | | | | | | | Type = 4 | | | | | | | | Value = 2 | | | | | | | Attr_ISAKMP_TV (length:4) | | | | | | | | AF = 1 | | | | | | | | Type = 11 | | | | | | | | Value = 1 | | | | | | | Attr_ISAKMP_TLV (length:8) | | | | | | | | AF = 0 | | | | | | | | Type = 12 | | | | | | | | Length = 4 | | | | | | | | Value = 00007080
Frame_Ether (length:262) | Hdr_Ether (length:14) | | DestinationAddress = 00:00:00:00:00:11 | | SourceAddress = 00:00:02:00:27:cd | | Type = 34525 | Packet_IPv6 (length:248) | | Hdr_IPv6 (length:40) | | | Version = 6 | | | TrafficClass = 0 | | | FlowLabel = 0 | | | PayloadLength = 208 | | | NextHeader = 17 | | | HopLimit = 64 | | | SourceAddress = 3ffe:501:ffff:102::1 | | | DestinationAddress = 3ffe:501:ffff:103::11 | | Upp_UDP (length:208) | | | Hdr_UDP (length:8) | | | | SourcePort = 500 | | | | DestinationPort = 500 | | | | Length = 208 | | | | Checksum = 42454 calc(42454) | | | Udp_ISAKMP (length:200) | | | | Hdr_ISAKMP (length:28) | | | | | InitiatorCookie = 9bb9127bf3857229 | | | | | ResponderCookie = db7410a10992193a | | | | | NextPayload = 4 | | | | | MjVer = 1 | | | | | MnVer = 0 | | | | | ExchangeType = 2 | | | | | Reserved = 0 | | | | | AFlag = 0 | | | | | CFlag = 0 | | | | | EFlag = 0 | | | | | MessageID = 0 | | | | | Length = 200 | | | | Pld_ISAKMP_KE (length:132) | | | | | NextPayload = 10 | | | | | Reserved1 = 0 | | | | | PayloadLength = 132 | | | | | KeyExchangeData = | | | | | 46e387c7 bd4d81c1 12a544bd 7543d268 2f4758bb 070786e4 8de85b4d fb675c2d | | | | | ec25064a afed6ce5 0db80954 174babe2 9b012fb4 4a9f1e12 517c36bf 64d42cdf | | | | | e81f7985 25d60e60 490a5f0c 2c2ed7ba 35633006 76ece57b fd037fe1 5b72ce11 | | | | | 4dd84483 ea883279 24a8e089 ff1e9f8d db9539db 5bb0d38c 3ccac810 c66e1823 | | | | Pld_ISAKMP_NONCE (length:20) | | | | | NextPayload = 13 | | | | | Reserved1 = 0 | | | | | PayloadLength = 20 | | | | | NonceData = a2e45fbe d4c4d3a3 72c358f5 198da3e0 | | | | Pld_ISAKMP_VID (length:20) | | | | | NextPayload = 0 | | | | | Reserved1 = 0 | | | | | PayloadLength = 20 | | | | | VID = 7003cbc1 097dbe9c 2600ba69 83bc8b35 ===isakmp_phase1_recv_3rd=================================
Frame_Ether (length:242) | Hdr_Ether (length:14) | | DestinationAddress = 00:00:02:00:27:cd | | SourceAddress = 00:00:00:00:00:11 | | Type = 34525 | Packet_IPv6 (length:228) | | Hdr_IPv6 (length:40) | | | Version = 6 | | | TrafficClass = 0 | | | FlowLabel = 0 | | | PayloadLength = 188 | | | NextHeader = 17 | | | HopLimit = 64 | | | SourceAddress = 3ffe:501:ffff:103::11 | | | DestinationAddress = 3ffe:501:ffff:102::1 | | Upp_UDP (length:188) | | | Hdr_UDP (length:8) | | | | SourcePort = 500 | | | | DestinationPort = 500 | | | | Length = 188 | | | | Checksum = 17754 calc(17754) | | | Udp_ISAKMP (length:180) | | | | Hdr_ISAKMP (length:28) | | | | | InitiatorCookie = 9bb9127bf3857229 | | | | | ResponderCookie = db7410a10992193a | | | | | NextPayload = 4 | | | | | MjVer = 1 | | | | | MnVer = 0 | | | | | ExchangeType = 2 | | | | | Reserved = 0 | | | | | AFlag = 0 | | | | | CFlag = 0 | | | | | EFlag = 0 | | | | | MessageID = 0 | | | | | Length = 180 | | | | Pld_ISAKMP_KE (length:132) | | | | | NextPayload = 10 | | | | | Reserved1 = 0 | | | | | PayloadLength = 132 | | | | | KeyExchangeData = | | | | | 28d7fb14 ccfd741c 002d86ac 51e8e9f7 08cb774a 76444591 f1836f62 3fd7d450 | | | | | 263cc7ec 31d40ad5 1feda0c2 30da2c0d a8b0a61c 77edd6f5 51be3d81 75b7b7d6 | | | | | a4fef7bc 3356d5d3 1e52731b bfca3c35 a82ada98 0a727fcb d15c0cd7 205e6861 | | | | | cbbf1548 89545620 0aa267cd ffcf216b 02e48c5b 2bcde318 d4b5b09d 0c744dff | | | | Pld_ISAKMP_NONCE (length:20) | | | | | NextPayload = 0 | | | | | Reserved1 = 0 | | | | | PayloadLength = 20 | | | | | NonceData = 00000000 00000000 00000000 00000000
===ALGORITHM LISTS BEGIN====================
--------------------------------------------
frame=isakmp_phase1_recv_5th
ESP=alg_isakmp_phase1_recv_5th
crypt=ike_des3cbc(hexstr("f8578b4cd13484aae57b876f007ebaf09642e387a57f014b467232507ed3c318943607580d8dd51e041cc4b260657bd5ec5d2927d6654a76c3034995",24),p1_iv("sha1",hexstr("46e387c7bd4d81c112a544bd7543d2682f4758bb070786e48de85b4dfb675c2dec25064aafed6ce50db80954174babe29b012fb44a9f1e12517c36bf64d42cdfe81f798525d60e60490a5f0c2c2ed7ba3563300676ece57bfd037fe15b72ce114dd84483ea88327924a8e089ff1e9f8ddb9539db5bb0d38c3ccac810c66e1823"),hexstr("28D7FB14CCFD741C002D86AC51E8E9F708CB774A76444591F1836F623FD7D450263CC7EC31D40AD51FEDA0C230DA2C0DA8B0A61C77EDD6F551BE3D8175B7B7D6A4FEF7BC3356D5D31E52731BBFCA3C35A82ADA980A727FCBD15C0CD7205E6861CBBF1548895456200AA267CDFFCF216B02E48C5B2BCDE318D4B5B09D0C744DFF"),8))
--------------------------------------------
===ALGORITHM LISTS END======================
Frame_Ether (length:146)
| Hdr_Ether (length:14)
| | DestinationAddress = 00:00:00:00:00:11
| | SourceAddress = 00:00:02:00:27:cd
| | Type = 34525
| Packet_IPv6 (length:132)
| | Hdr_IPv6 (length:40)
| | | Version = 6
| | | TrafficClass = 0
| | | FlowLabel = 0
| | | PayloadLength = 92
| | | NextHeader = 17
| | | HopLimit = 64
| | | SourceAddress = 3ffe:501:ffff:102::1
| | | DestinationAddress = 3ffe:501:ffff:103::11
| | Upp_UDP (length:92)
| | | Hdr_UDP (length:8)
| | | | SourcePort = 500
| | | | DestinationPort = 500
| | | | Length = 92
| | | | Checksum = 8767 calc(8767)
| | | Udp_ISAKMP (length:84)
| | | | Hdr_ISAKMP (length:28)
| | | | | InitiatorCookie = 9bb9127bf3857229
| | | | | ResponderCookie = db7410a10992193a
| | | | | NextPayload = 5
| | | | | MjVer = 1
| | | | | MnVer = 0
| | | | | ExchangeType = 2
| | | | | Reserved = 0
| | | | | AFlag = 0
| | | | | CFlag = 0
| | | | | EFlag = 1
| | | | | MessageID = 0
| | | | | Length = 84
| | | | ISAKMP_Encryption (length:56)
| | | | | algorithm = alg_isakmp_phase1_recv_5th
| | | | | IVEC = 3290a6d7 5fda2956
| | | | | Decrypted (length:56)
| | | | | | PlainText (length:48)
| | | | | | | Pld_ISAKMP_ID_IPV6_ADDR (length:24)
| | | | | | | | NextPayload = 8
| | | | | | | | Reserved1 = 0
| | | | | | | | PayloadLength = 24
| | | | | | | | IDtype = 5
| | | | | | | | ProtocolID = 17
| | | | | | | | Port = 500
| | | | | | | | ID = 3ffe:501:ffff:102::1
| | | | | | | Pld_ISAKMP_HASH (length:24)
| | | | | | | | NextPayload = 0
| | | | | | | | Reserved1 = 0
| | | | | | | | PayloadLength = 24
| | | | | | | | HashData =
| | | | | | | | af55b03e 0b3f17a4 618db131 d847a013 2a209ae1
| | | | | | Padding = 8f9efad5 1d143b07
===isakmp_phase1_recv_5th=================================
applied algorithms={alg_isakmp_phase1_recv_5th}
Frame_Ether (length:146) | Hdr_Ether (length:14) | | DestinationAddress = 00:00:02:00:27:cd | | SourceAddress = 00:00:00:00:00:11 | | Type = 34525 | Packet_IPv6 (length:132) | | Hdr_IPv6 (length:40) | | | Version = 6 | | | TrafficClass = 0 | | | FlowLabel = 0 | | | PayloadLength = 92 | | | NextHeader = 17 | | | HopLimit = 64 | | | SourceAddress = 3ffe:501:ffff:103::11 | | | DestinationAddress = 3ffe:501:ffff:102::1 | | Upp_UDP (length:92) | | | Hdr_UDP (length:8) | | | | SourcePort = 500 | | | | DestinationPort = 500 | | | | Length = 92 | | | | Checksum = 8718 calc(8718) | | | Udp_ISAKMP (length:84) | | | | Hdr_ISAKMP (length:28) | | | | | InitiatorCookie = 9bb9127bf3857229 | | | | | ResponderCookie = db7410a10992193a | | | | | NextPayload = 5 | | | | | MjVer = 1 | | | | | MnVer = 0 | | | | | ExchangeType = 2 | | | | | Reserved = 0 | | | | | AFlag = 0 | | | | | CFlag = 0 | | | | | EFlag = 1 | | | | | MessageID = 0 | | | | | Length = 84 | | | | ISAKMP_Encryption (length:56) | | | | | algorithm = alg_isakmp_phase1_send_6th | | | | | IVEC = 1b53d7ac 4ad1b388 | | | | | Decrypted (length:56) | | | | | | PlainText (length:48) | | | | | | | Pld_ISAKMP_ID_IPV6_ADDR (length:24) | | | | | | | | NextPayload = 8 | | | | | | | | Reserved1 = 0 | | | | | | | | PayloadLength = 24 | | | | | | | | IDtype = 5 | | | | | | | | ProtocolID = 17 | | | | | | | | Port = 500 | | | | | | | | ID = 3ffe:501:ffff:103::11 | | | | | | | Pld_ISAKMP_HASH (length:24) | | | | | | | | NextPayload = 0 | | | | | | | | Reserved1 = 0 | | | | | | | | PayloadLength = 24 | | | | | | | | HashData = | | | | | | | | 213489ed 06f01585 4902b86c e395a181 0f665537 | | | | | | Padding = 00000000 00000007
===ALGORITHM LISTS BEGIN====================
--------------------------------------------
frame=isakmp_phase2_recv
ESP=alg_isakmp_phase2_recv_1st
crypt=ike_des3cbc(hexstr("f8578b4cd13484aae57b876f007ebaf09642e387a57f014b467232507ed3c318943607580d8dd51e041cc4b260657bd5ec5d2927d6654a76c3034995",24),p2_iv("sha1",hexstr("1b53d7ac4ad1b388",8),8))
--------------------------------------------
===ALGORITHM LISTS END======================
Frame_Ether (length:146)
| Hdr_Ether (length:14)
| | DestinationAddress = 00:00:00:00:00:11
| | SourceAddress = 00:00:02:00:27:cd
| | Type = 34525
| Packet_IPv6 (length:132)
| | Hdr_IPv6 (length:40)
| | | Version = 6
| | | TrafficClass = 0
| | | FlowLabel = 0
| | | PayloadLength = 92
| | | NextHeader = 17
| | | HopLimit = 64
| | | SourceAddress = 3ffe:501:ffff:102::1
| | | DestinationAddress = 3ffe:501:ffff:103::11
| | Upp_UDP (length:92)
| | | Hdr_UDP (length:8)
| | | | SourcePort = 500
| | | | DestinationPort = 500
| | | | Length = 92
| | | | Checksum = 42138 calc(42138)
| | | Udp_ISAKMP (length:84)
| | | | Hdr_ISAKMP (length:28)
| | | | | InitiatorCookie = 9bb9127bf3857229
| | | | | ResponderCookie = db7410a10992193a
| | | | | NextPayload = 8
| | | | | MjVer = 1
| | | | | MnVer = 0
| | | | | ExchangeType = 5
| | | | | Reserved = 0
| | | | | AFlag = 0
| | | | | CFlag = 0
| | | | | EFlag = 1
| | | | | MessageID = 2318477098
| | | | | Length = 84
| | | | ISAKMP_Encryption (length:56)
| | | | | algorithm = alg_isakmp_phase2_recv_1st
| | | | | IVEC = 33c650d3 5a18fa46
| | | | | Decrypted (length:56)
| | | | | | PlainText (length:52)
| | | | | | | Pld_ISAKMP_HASH (length:24)
| | | | | | | | NextPayload = 11
| | | | | | | | Reserved1 = 0
| | | | | | | | PayloadLength = 24
| | | | | | | | HashData =
| | | | | | | | 89010d25 51e83ff9 092b85f0 fe839615 a6cbdc2e
| | | | | | | Pld_ISAKMP_N_IPsec_ANY (length:28)
| | | | | | | | NextPayload = 0
| | | | | | | | Reserved1 = 0
| | | | | | | | PayloadLength = 28
| | | | | | | | DOI = 1
| | | | | | | | ProtocolID = 1
| | | | | | | | SPIsize = 16
| | | | | | | | NotifyMessageType = 24578
| | | | | | | | SPI = 9bb9127b f3857229 db7410a1 0992193a
| | | | | | | | NotificationData =
| | | | | | Padding = b6edc503
===isakmp_phase2_recv=================================
applied algorithms={alg_isakmp_phase2_recv_1st}
ng compare hdr_isakmp_phase2_recv_1st.ExchangeType received:5 = 32
Frame_Ether (length:250)
| Hdr_Ether (length:14)
| | DestinationAddress = 00:00:00:00:00:11
| | SourceAddress = 00:00:02:00:27:cd
| | Type = 34525
| Packet_IPv6 (length:236)
| | Hdr_IPv6 (length:40)
| | | Version = 6
| | | TrafficClass = 0
| | | FlowLabel = 0
| | | PayloadLength = 196
| | | NextHeader = 17
| | | HopLimit = 64
| | | SourceAddress = 3ffe:501:ffff:102::1
| | | DestinationAddress = 3ffe:501:ffff:103::11
| | Upp_UDP (length:196)
| | | Hdr_UDP (length:8)
| | | | SourcePort = 500
| | | | DestinationPort = 500
| | | | Length = 196
| | | | Checksum = 63527 calc(63527)
| | | Udp_ISAKMP (length:188)
| | | | Hdr_ISAKMP (length:28)
| | | | | InitiatorCookie = 9bb9127bf3857229
| | | | | ResponderCookie = db7410a10992193a
| | | | | NextPayload = 8
| | | | | MjVer = 1
| | | | | MnVer = 0
| | | | | ExchangeType = 32
| | | | | Reserved = 0
| | | | | AFlag = 0
| | | | | CFlag = 0
| | | | | EFlag = 1
| | | | | MessageID = 3146224178
| | | | | Length = 188
| | | | ISAKMP_Encryption (length:160)
| | | | | algorithm = alg_isakmp_phase2_recv_1st
| | | | | IVEC = 1707752f 24fba9a1
| | | | | Decrypted (length:160)
| | | | | | PlainText (length:156)
| | | | | | | Pld_ISAKMP_HASH (length:24)
| | | | | | | | NextPayload = 1
| | | | | | | | Reserved1 = 0
| | | | | | | | PayloadLength = 24
| | | | | | | | HashData =
| | | | | | | | 948462f4 4a0b2c07 3db85188 03d312e7 e22403cd
| | | | | | | Pld_ISAKMP_SA_IPsec_IDonly (length:48)
| | | | | | | | NextPayload = 10
| | | | | | | | Reserved1 = 0
| | | | | | | | PayloadLength = 48
| | | | | | | | DOI = 1
| | | | | | | | Situation = 1
| | | | | | | | Pld_ISAKMP_P_IPsec_ESP (length:36)
| | | | | | | | | NextPayload = 0
| | | | | | | | | Reserved1 = 0
| | | | | | | | | PayloadLength = 36
| | | | | | | | | ProposalNumber = 1
| | | | | | | | | ProtocolID = 3
| | | | | | | | | SPIsize = 4
| | | | | | | | | NumOfTransforms = 1
| | | | | | | | | SPI = 7696035
| | | | | | | | | Pld_ISAKMP_T (length:24)
| | | | | | | | | | NextPayload = 0
| | | | | | | | | | Reserved1 = 0
| | | | | | | | | | PayloadLength = 24
| | | | | | | | | | TransformNumber = 1
| | | | | | | | | | TransformID = 3
| | | | | | | | | | Reserved2 = 0
| | | | | | | | | | Attr_ISAKMP_TV (length:4)
| | | | | | | | | | | AF = 1
| | | | | | | | | | | Type = 1
| | | | | | | | | | | Value = 1
| | | | | | | | | | Attr_ISAKMP_TV (length:4)
| | | | | | | | | | | AF = 1
| | | | | | | | | | | Type = 2
| | | | | | | | | | | Value = 28800
| | | | | | | | | | Attr_ISAKMP_TV (length:4)
| | | | | | | | | | | AF = 1
| | | | | | | | | | | Type = 4
| | | | | | | | | | | Value = 1
| | | | | | | | | | Attr_ISAKMP_TV (length:4)
| | | | | | | | | | | AF = 1
| | | | | | | | | | | Type = 5
| | | | | | | | | | | Value = 2
| | | | | | | Pld_ISAKMP_NONCE (length:20)
| | | | | | | | NextPayload = 5
| | | | | | | | Reserved1 = 0
| | | | | | | | PayloadLength = 20
| | | | | | | | NonceData = 9c09c3ea 40ac773f d1dcbe24 371c8096
| | | | | | | Pld_ISAKMP_ID_IPV6_ADDR_SUBNET (length:40)
| | | | | | | | NextPayload = 5
| | | | | | | | Reserved1 = 0
| | | | | | | | PayloadLength = 40
| | | | | | | | IDtype = 6
| | | | | | | | ProtocolID = 0
| | | | | | | | Port = 0
| | | | | | | | ID1 = 3ffe:501:ffff:100::
| | | | | | | | ID2 = ffff:ffff:ffff:ffff::
| | | | | | | Pld_ISAKMP_ID_IPV6_ADDR (length:24)
| | | | | | | | NextPayload = 0
| | | | | | | | Reserved1 = 0
| | | | | | | | PayloadLength = 24
| | | | | | | | IDtype = 5
| | | | | | | | ProtocolID = 0
| | | | | | | | Port = 0
| | | | | | | | ID = 3ffe:501:ffff:103::11
| | | | | | Padding = 02d29403
===isakmp_phase2_recv=================================
applied algorithms={alg_isakmp_phase2_recv_1st}