Test Information

Title	Processing invalid ISAKMP Payload Length *
CommandLine	./SGW/SG_R_RFC2408_5_1_GENERIC.seq -pkt ./SGW/SG_R_RFC2408_5_1_GENERIC.def test_type=BASIC -log 167.html -ti Processing invalid ISAKMP Payload Length *
TestVersion	undefined
ToolVersion	REL_3_0_8
Start	2006/03/13 15:40:22
Tn	/usr/local/v6eval//etc//tn.def
Nu	/usr/local/v6eval//etc//nut.def
Pkt	./SGW/SG_R_RFC2408_5_1_GENERIC.def
System	freebsd-i386
TargetName	FreeBSD 5.4-RELEASE
HostName	target1.tahi.org
Type	router

Test Sequence Execution Log

15:40:22	Start
	* Target IKE initialization phase * Target: Reset IKE SA entries: saddump
15:40:23	vRemote(ikeResetSA.rmt) ``/usr/local/v6eval//bin/freebsd-i386//ikeResetSA.rmt -t freebsd-i386 -u root -p v6eval -d cuad0 -o 1 saddump '' Connected target1# target1# /usr/sbin/setkey -c <<EOD dump; flush; EOD? dump; ? flush; ? EOD The result of line 1: No SAD entries. target1# target1# sendMessagesSync: never got /usr/sbin/setkey -c <<EODdump;flush;EOD echo $status 0 target1# kill -TERM `head -1 /var/run/racoon.pid` head: /var/run/racoon.pid: No such file or directory target1# target1# echo $status 1 target1# /bin/rm -f /var/run/racoon.pid target1# target1# echo $status 0 ~ [EOT]
	Target: Clear SPD entries: spddump
15:40:30	vRemote(ipsecResetSPD.rmt) ``/usr/local/v6eval//bin/freebsd-i386//ipsecResetSPD.rmt -t freebsd-i386 -u root -p v6eval -d cuad0 -o 1 spddump '' Connected target1# target1# /usr/sbin/setkey -c <<EOD spddump; spdflush? spddump; ; EOD ? spdflush; EOD ? EOD The result of line 1: No SPD entries. target1# target1# sendMessagesSync: never got /usr/sbin/setkey -c <<EODspddump;spdflush;EOD echo $status 0 ~ [EOT]
	Target: Set SPD entries: dst=3ffe:501:ffff:100::/64 src=3ffe:501:ffff:104::/64 tdst=3ffe:501:ffff:102::1 tsrc=3ffe:501:ffff:103::11 direction=in protocol=PROTO_IPSEC_ESP mode=Tunnel
15:40:36	vRemote(ipsecSetSPD.rmt) ``/usr/local/v6eval//bin/freebsd-i386//ipsecSetSPD.rmt -t freebsd-i386 -u root -p v6eval -d cuad0 -o 1 dst=3ffe:501:ffff:100::/64 src=3ffe:501:ffff:104::/64 tdst=3ffe:501:ffff:102::1 tsrc=3ffe:501:ffff:103::11 direction=in protocol=PROTO_IPSEC_ESP mode=Tunnel '' Connected target1# target1# /usr/sbin/setkey -c <<EOD spdadd 3ffe:501:ffff:104::/64 3ffe:501:ffff:100::/64 any -P in ipsec esp/tunnel/3ffe:501:ffff:103::11-3ffe:501:ffff:102::1/require ; spddump; EOD ? spdadd 3ffe:501:ffff:104::/64 3ffe:501:ffff:100::/64 any -P in ipsec esp/tunnel/3ffe:501:ffff:103::11-3ffe:501:ffff:102::1/require ; spddump; EOD ? any ? -P in ipsec ? esp/tunnel/3ffe:501:ffff:103::11-3ffe:501:ffff:102::1/require ? ; ? spddump; ? EOD 3ffe:501:ffff:104::/64[any] 3ffe:501:ffff:100::/64[any] any in ipsec esp/tunnel/3ffe:501:ffff:103::11-3ffe:501:ffff:102::1/require created: Mar 13 15:47:14 2006 lastused: Mar 13 15:47:14 2006 lifetime: 0(s) validtime: 0(s) spid=18378 seq=0 pid=2371 refcnt=1 target1# target1# sendMessagesSync: never got /usr/sbin/setkey -c <<EODspdadd 3ffe:501:ffff:104::/64 3ffe:501:ffff:100::/64 any -P in ipsec esp/tunnel/3ffe:501:ffff:103::11-3ffe:501:ffff:102::1/require;spddump;EOD echo $status 0 ~ [EOT]
	Target: Set IKE SA entries: dst=3ffe:501:ffff:103::11 dst_port=500 exchange_mode=main doi=ipsec_doi situation=identity_only isakmp_src_id_type=address isakmp_src_id=3ffe:501:ffff:102::1 dh_group=2 lifetime=28800 lifetime_unit=seconds encryption_algorithm=3des hash_algorithm=sha1 authentication_method=pre_shared_key key_id=3ffe:501:ffff:103::11 key_value=0x494b452d54455354 ph2_id_type=address ph2_src_id=3ffe:501:ffff:100::/64 ph2_dst_id=3ffe:501:ffff:104::/64 ph2_src_upper=any ph2_dst_upper=any ipsec_p_num=1 ipsec_p1_t_num=1 ph2_p1_t1_lt=8 ph2_p1_t1_lt_unit=hour ph2_p1_t1_enc_alg=ESP_3DES ph2_p1_t1_auth_mtd=HMAC_SHA
15:40:42	vRemote(ikeSetSA.rmt) ``/usr/local/v6eval//bin/freebsd-i386//ikeSetSA.rmt -t freebsd-i386 -u root -p v6eval -d cuad0 -o 1 dst=3ffe:501:ffff:103::11 dst_port=500 exchange_mode=main doi=ipsec_doi situation=identity_only isakmp_src_id_type=address isakmp_src_id=3ffe:501:ffff:102::1 dh_group=2 lifetime=28800 lifetime_unit=seconds encryption_algorithm=3des hash_algorithm=sha1 authentication_method=pre_shared_key key_id=3ffe:501:ffff:103::11 key_value=0x494b452d54455354 ph2_id_type=address ph2_src_id=3ffe:501:ffff:100::/64 ph2_dst_id=3ffe:501:ffff:104::/64 ph2_src_upper=any ph2_dst_upper=any ipsec_p_num=1 ipsec_p1_t_num=1 ph2_p1_t1_lt=8 ph2_p1_t1_lt_unit=hour ph2_p1_t1_enc_alg=ESP_3DES ph2_p1_t1_auth_mtd=HMAC_SHA '' Connected target1# target1# ~[set] echocheck target1# target1# ~[put] freebsd-i386.psk.txt /tmp/psk.txt Dtarget1# target1# target1# /bin/chmod 600 /tmp/psk.txt target1# echo $status 0 target1# ~[set] echocheck target1# target1# ~[put] freebsd-i386.ike.conf /tmp/ike.conf Dtarget1# target1# target1# test -f /var/run/racoon.pid &&kill -TERM `head -1 /var/run/racoon.pid` target1# target1# echo $status 1 target1# /usr/local/sbin/racoon -f /tmp/ike.conf target1# target1# echo $status 0 ~ [EOT]
15:40:56	vRemote(ikeEnable.rmt) ``/usr/local/v6eval//bin/freebsd-i386//ikeEnable.rmt -t freebsd-i386 -u root -p v6eval -d cuad0 -o 1 ''
	* Target initialization phase *
15:40:57	Start Capturing Packets (Link0)
15:40:57	Start Capturing Packets (Link1)
	* Target testing phase * * Phase-1 1st message send *
15:40:57	Clear Captured Packets (Link1)
15:40:57	Clear Captured Packets (Link0)
15:40:57	vSend(Link0,isakmp_phase1_send_1st) !!! unable decode Hdr_ISAKMP size(28,0) ,in Udp_ISAKMP at(0,0)/size(0) Send 1st message from HOST2(TN)
	Not ISAKMP message * Phase-1 2nd message receive *
15:40:58	vRecv(Link0,isakmp_phase1_recv_2nd router_ns_multi router_ns_uni_link1 router_ns_uni_tll_sll_link1 router_ns_multi_llt_link1 router_ns_uni_sll router_ns_uni router_ns_multi_llt router_ns_uni_sll_link1 router_ns_multi_link1 router_ns_uni_tll_sll) timeout:5 cntLimit:0 seektime:0 vRecv() return status=1
	NG:Receive no packets OK:Phase-1 2nd message is not returned. Invalid ISAKMP Payload Length is correct * Target test finish *
15:41:03	Stop Capturing Packets (Link1)
15:41:03	Stop Capturing Packets (Link0)
	Target: Reset IKE SA entries: saddump
15:41:03	vRemote(ikeResetSA.rmt) ``/usr/local/v6eval//bin/freebsd-i386//ikeResetSA.rmt -t freebsd-i386 -u root -p v6eval -d cuad0 -o 1 saddump '' Connected target1# target1# /usr/sbin/setkey -c <<EOD dump; flush; EOD ? dump; ? flush; ? EOD The result of line 1: No SAD entries. target1# target1# sendMessagesSync: never got /usr/sbin/setkey -c <<EODdump;flush;EOD echo $status 0 target1# kill -TERM `head -1 /var/run/racoon.pid` target1# target1# echo $status 0 target1# /bin/rm -f /var/run/racoon.pid target1# target1# echo $status 0 ~ [EOT]
	Target: Clear SPD entries: spddump
15:41:09	vRemote(ipsecResetSPD.rmt) ``/usr/local/v6eval//bin/freebsd-i386//ipsecResetSPD.rmt -t freebsd-i386 -u root -p v6eval -d cuad0 -o 1 spddump '' Connected target1# target1# /usr/sbin/setkey -c <<EOD spddump; spdflush? spddump; ; EOD ? spdflush; EOD ? EOD 3ffe:501:ffff:104::/64[any] 3ffe:501:ffff:100::/64[any] any in ipsec esp/tunnel/3ffe:501:ffff:103::11-3ffe:501:ffff:102::1/require created: Mar 13 15:47:14 2006 lastused: Mar 13 15:47:14 2006 lifetime: 0(s) validtime: 0(s) spid=18378 seq=0 pid=2381 refcnt=1 target1# target1# sendMessagesSync: never got /usr/sbin/setkey -c <<EODspddump;spdflush;EOD echo $status 0 ~ [EOT]
	OK
15:41:15	End

Packet Reverse Log

Send 1st message from HOST2(TN) at 15:40:57

Frame_Ether                     (length:146)
| Hdr_Ether                       (length:14)
| | DestinationAddress               = 00:00:02:00:27:cd
| | SourceAddress                    = 00:00:00:00:00:11
| | Type                             = 34525
| Packet_IPv6                     (length:132)
| | Hdr_IPv6                        (length:40)
| | | Version                          = 6
| | | TrafficClass                     = 0
| | | FlowLabel                        = 0
| | | PayloadLength                    = 92
| | | NextHeader                       = 17
| | | HopLimit                         = 64
| | | SourceAddress                    = 3ffe:501:ffff:103::11
| | | DestinationAddress               = 3ffe:501:ffff:102::1
| | Upp_UDP                         (length:92)
| | | Hdr_UDP                         (length:8)
| | | | SourcePort                       = 500
| | | | DestinationPort                  = 500
| | | | Length                           = 92
| | | | Checksum                         = 56140 calc()
| | | Udp_ISAKMP                      (length:0)
| | | [Needless]                      (length:84)
| | | | data                             = 
| | | |   06d10725 b853d752  00000000 00000000  01100200 00000000  00000000 00000038
| | | |   00000001 00000001  0000002c 01010001  00000024 01010000  80010005 80020002
| | | |   80030001 80040002  800b0001 000c0004  00007080