| Title | Encryption of ISAKMP payload *** |
| CommandLine | ./SGW/SG_R_RFC2409_5_5_1.seq -pkt ./SGW/SG_R_RFC2409_5_5_1.def test_phase=2 test_type=BASIC -log 205.html -ti Encryption of ISAKMP payload *** |
| TestVersion | undefined |
| ToolVersion | REL_3_0_8 |
| Start | 2006/03/13 16:09:21 |
| Tn | /usr/local/v6eval//etc//tn.def |
| Nu | /usr/local/v6eval//etc//nut.def |
| Pkt | ./SGW/SG_R_RFC2409_5_5_1.def |
| System | freebsd-i386 |
| TargetName | FreeBSD 5.4-RELEASE |
| HostName | target1.tahi.org |
| Type | router |
| 16:09:21 | Start |
|
*** Target IKE initialization phase *** Target: Reset IKE SA entries: saddump |
|
| 16:09:22 |
vRemote(ikeResetSA.rmt) ``/usr/local/v6eval//bin/freebsd-i386//ikeResetSA.rmt -t freebsd-i386 -u root -p v6eval -d cuad0 -o 1 saddump ''
Connected target1# target1# /usr/sbin/setkey -c <<EOD dump; flush; EO? dump; ? flush; D ? EOD The result of line 1: No SAD entries. target1# target1# sendMessagesSync: never got /usr/sbin/setkey -c <<EODdump;flush;EOD echo $status 0 target1# kill -TERM `head -1 /var/run/racoon.pid` head: /var/run/racoon.pid: No such file or directory target1# target1# echo $status 1 target1# /bin/rm -f /var/run/racoon.pid target1# target1# echo $status 0 ~ [EOT] |
| Target: Clear SPD entries: spddump | |
| 16:09:28 |
vRemote(ipsecResetSPD.rmt) ``/usr/local/v6eval//bin/freebsd-i386//ipsecResetSPD.rmt -t freebsd-i386 -u root -p v6eval -d cuad0 -o 1 spddump ''
Connected target1# target1# /usr/sbin/setkey -c <<EOD spddump; spdflus? spddump; h; EOD ? spdflush; EOD ? EOD The result of line 1: No SPD entries. target1# target1# sendMessagesSync: never got /usr/sbin/setkey -c <<EODspddump;spdflush;EOD echo $status 0 ~ [EOT] |
| Target: Set SPD entries: src=3ffe:501:ffff:100::/64 dst=3ffe:501:ffff:104::/64 tsrc=3ffe:501:ffff:102::1 tdst=3ffe:501:ffff:103::11 upperspec=any direction=out protocol=PROTO_IPSEC_ESP mode=Tunnel | |
| 16:09:34 |
vRemote(ipsecSetSPD.rmt) ``/usr/local/v6eval//bin/freebsd-i386//ipsecSetSPD.rmt -t freebsd-i386 -u root -p v6eval -d cuad0 -o 1 src=3ffe:501:ffff:100::/64 dst=3ffe:501:ffff:104::/64 tsrc=3ffe:501:ffff:102::1 tdst=3ffe:501:ffff:103::11 upperspec=any direction=out protocol=PROTO_IPSEC_ESP mode=Tunnel ''
Connected
target1#
target1# /usr/sbin/setkey -c <<EOD
spdadd 3ffe:501:ffff:100::/64 3ffe:501:ffff:104::/64
any
-P out ipsec
esp/tunnel/3ffe:501:ffff:102::1-3ffe:501:ffff:103::11/require
;
spddump;
EOD
? spdadd 3ffe:501:ffff:100::/64 3ffe:501:ffff:104::/64
any
-P out ipsec
esp/tunnel/3ffe:501:ffff:102::1-3ffe:501:ffff:103::11/require
;
spddump;
EOD
? any
? -P out ipsec
? esp/tunnel/3ffe:501:ffff:102::1-3ffe:501:ffff:103::11/require
? ;
? spddump;
? EOD
3ffe:501:ffff:100::/64[any] 3ffe:501:ffff:104::/64[any] any
out ipsec
esp/tunnel/3ffe:501:ffff:102::1-3ffe:501:ffff:103::11/require
created: Mar 13 16:16:12 2006 lastused: Mar 13 16:16:12 2006
lifetime: 0(s) validtime: 0(s)
spid=18967 seq=0 pid=2898
refcnt=1
target1#
target1# sendMessagesSync: never got /usr/sbin/setkey -c <<EODspdadd 3ffe:501:ffff:100::/64 3ffe:501:ffff:104::/64 any -P out ipsec esp/tunnel/3ffe:501:ffff:102::1-3ffe:501:ffff:103::11/require;spddump;EOD
echo $status
0
~
[EOT]
|
| Target: Set SPD entries: dst=3ffe:501:ffff:100::/64 src=3ffe:501:ffff:104::/64 tdst=3ffe:501:ffff:102::1 tsrc=3ffe:501:ffff:103::11 upperspec=any direction=in protocol=PROTO_IPSEC_ESP mode=Tunnel | |
| 16:09:40 |
vRemote(ipsecSetSPD.rmt) ``/usr/local/v6eval//bin/freebsd-i386//ipsecSetSPD.rmt -t freebsd-i386 -u root -p v6eval -d cuad0 -o 1 dst=3ffe:501:ffff:100::/64 src=3ffe:501:ffff:104::/64 tdst=3ffe:501:ffff:102::1 tsrc=3ffe:501:ffff:103::11 upperspec=any direction=in protocol=PROTO_IPSEC_ESP mode=Tunnel ''
Connected
target1#
target1# /usr/sbin/setkey -c <<EOD
spdadd 3ffe:501:ffff:104::/64 3ffe:501:ffff:100::/64
any
-P in ipsec
esp/tunnel/3ffe:501:ffff:103::11-3ffe:501:ffff:102::1/require
;
spddump;
EOD
? spdadd 3ffe:501:ffff:104::/64 3ffe:501:ffff:100::/64
any
-P in ipsec
esp/tunnel/3ffe:501:ffff:103::11-3ffe:501:ffff:102::1/require
;
spddump;
EOD
? any
? -P in ipsec
? esp/tunnel/3ffe:501:ffff:103::11-3ffe:501:ffff:102::1/require
? ;
? spddump;
? EOD
3ffe:501:ffff:104::/64[any] 3ffe:501:ffff:100::/64[any] any
in ipsec
esp/tunnel/3ffe:501:ffff:103::11-3ffe:501:ffff:102::1/require
created: Mar 13 16:16:18 2006 lastused: Mar 13 16:16:18 2006
lifetime: 0(s) validtime: 0(s)
spid=18968 seq=1 pid=2899
refcnt=1
3ffe:501:ffff:100::/64[any] 3ffe:501:ffff:104::/64[any] any
out ipsec
esp/tunnel/3ffe:501:ffff:102::1-3ffe:501:ffff:103::11/require
created: Mar 13 16:16:12 2006 lastused: Mar 13 16:16:12 2006
lifetime: 0(s) validtime: 0(s)
spid=18967 seq=0 pid=2899
refcnt=1
target1#
target1# sendMessagesSync: never got /usr/sbin/setkey -c <<EODspdadd 3ffe:501:ffff:104::/64 3ffe:501:ffff:100::/64 any -P in ipsec esp/tunnel/3ffe:501:ffff:103::11-3ffe:501:ffff:102::1/require;spddump;EOD
echo $status
0
~
[EOT]
|
| Target: Set IKE SA entries: dst=3ffe:501:ffff:103::11 dst_port=500 exchange_mode=main doi=ipsec_doi situation=identity_only isakmp_src_id_type=address isakmp_src_id=3ffe:501:ffff:102::1 dh_group=2 lifetime=28800 lifetime_unit=seconds encryption_algorithm=3des hash_algorithm=sha1 authentication_method=pre_shared_key key_id=3ffe:501:ffff:103::11 key_value=0x494b452d54455354 ph2_id_type=address ph2_src_id=3ffe:501:ffff:100::/64 ph2_dst_id=3ffe:501:ffff:104::/64 ph2_src_upper=any ph2_dst_upper=any ipsec_p_num=1 ipsec_p1_t_num=1 ph2_p1_t1_lt=8 ph2_p1_t1_lt_unit=hour ph2_p1_t1_enc_alg=ESP_3DES ph2_p1_t1_auth_mtd=HMAC_SHA | |
| 16:09:46 |
vRemote(ikeSetSA.rmt) ``/usr/local/v6eval//bin/freebsd-i386//ikeSetSA.rmt -t freebsd-i386 -u root -p v6eval -d cuad0 -o 1 dst=3ffe:501:ffff:103::11 dst_port=500 exchange_mode=main doi=ipsec_doi situation=identity_only isakmp_src_id_type=address isakmp_src_id=3ffe:501:ffff:102::1 dh_group=2 lifetime=28800 lifetime_unit=seconds encryption_algorithm=3des hash_algorithm=sha1 authentication_method=pre_shared_key key_id=3ffe:501:ffff:103::11 key_value=0x494b452d54455354 ph2_id_type=address ph2_src_id=3ffe:501:ffff:100::/64 ph2_dst_id=3ffe:501:ffff:104::/64 ph2_src_upper=any ph2_dst_upper=any ipsec_p_num=1 ipsec_p1_t_num=1 ph2_p1_t1_lt=8 ph2_p1_t1_lt_unit=hour ph2_p1_t1_enc_alg=ESP_3DES ph2_p1_t1_auth_mtd=HMAC_SHA ''
Connected target1# target1# ~[set] echocheck target1# target1# ~[put] freebsd-i386.psk.txt /tmp/psk.txt Dtarget1# target1# target1# /bin/chmod 600 /tmp/psk.txt target1# echo $status 0 target1# ~[set] echocheck target1# target1# ~[put] freebsd-i386.ike.conf /tmp/ike.conf Dtarget1# target1# target1# test -f /var/run/racoon.pid &&kill -TERM `head -1 /var/run/racoon.pid` target1# target1# echo $status 1 target1# /usr/local/sbin/racoon -f /tmp/ike.conf target1# target1# echo $status 0 ~ [EOT] |
| 16:10:01 | vRemote(ikeEnable.rmt) ``/usr/local/v6eval//bin/freebsd-i386//ikeEnable.rmt -t freebsd-i386 -u root -p v6eval -d cuad0 -o 1 '' |
|
*** Target initialization phase *** |
|
| 16:10:01 | Start Capturing Packets (Link0) |
| 16:10:01 | Start Capturing Packets (Link1) |
|
*** Target pre-test seaquence *** *** Phase-1 1st message send *** |
|
| 16:10:02 | Clear Captured Packets (Link0) |
| 16:10:02 |
vSend(Link0,isakmp_phase1_send_1st) Send 1st message from HOST2(TN) |
|
*** Phase-1 2nd message recieve *** |
|
| 16:10:02 | vRecv(Link0,isakmp_phase1_recv_2nd router_ns_multi router_ns_uni_link1 router_ns_uni_tll_sll_link1 router_ns_multi_llt_link1 router_ns_uni_sll router_ns_uni router_ns_multi_llt router_ns_uni_sll_link1 router_ns_multi_link1 router_ns_uni_tll_sll) timeout:5 cntLimit:0 seektime:0 Recv 2nd message from HOST1(NUT) |
|
OK payload_check *** Phase-1 3rd message send *** |
|
| 16:10:02 | Clear Captured Packets (Link0) |
| 16:10:03 |
vSend(Link0,isakmp_phase1_send_3rd) Send 3rd message from HOST2(TN) |
|
*** Phase-1 4th message recieve *** |
|
| 16:10:03 | vRecv(Link0,isakmp_phase1_recv_4th router_ns_multi router_ns_uni_link1 router_ns_uni_tll_sll_link1 router_ns_multi_llt_link1 router_ns_uni_sll router_ns_uni router_ns_multi_llt router_ns_uni_sll_link1 router_ns_multi_link1 router_ns_uni_tll_sll) timeout:5 cntLimit:0 seektime:0 Recv 4th message from HOST1(NUT) |
|
OK payload_check *** Phase-1 5th message send *** |
|
| 16:10:03 | Clear Captured Packets (Link0) |
| 16:10:04 |
vSend(Link0,isakmp_phase1_send_5th) Send 5th message from HOST2(TN) |
|
*** Phase-1 6th message recieve *** |
|
| 16:10:04 | vRecv(Link0,isakmp_phase1_recv_6th router_ns_multi router_ns_uni_link1 router_ns_uni_tll_sll_link1 router_ns_multi_llt_link1 router_ns_uni_sll router_ns_uni router_ns_multi_llt router_ns_uni_sll_link1 router_ns_multi_link1 router_ns_uni_tll_sll) timeout:5 cntLimit:0 seektime:0 Recv 6th message from HOST1(NUT) |
|
OK payload_check *** Target testing phase start *** *** Phase-2 1st message send *** |
|
| 16:10:04 | Clear Captured Packets (Link0) |
| 16:10:04 | Clear Captured Packets (Link1) |
| 16:10:04 |
vSend(Link0,isakmp_phase2_send) Send Phase-2 1st message (HDR*, HASH(1), SA, Ni) from HOST2(TN) |
|
*** Phase-2 2nd message recv *** |
|
| 16:10:05 | vRecv(Link0,isakmp_phase2_recv_2nd router_ns_multi router_ns_uni_link1 router_ns_uni_tll_sll_link1 router_ns_multi_llt_link1 router_ns_uni_sll router_ns_uni router_ns_multi_llt router_ns_uni_sll_link1 router_ns_multi_link1 router_ns_uni_tll_sll) timeout:5 cntLimit:0 seektime:0 Recv Phase-2 2nd message (HDR*, HASH(2), SA, Ni) from HOST1(NUT) |
|
OK payload_check Encryption of ISAKMP payload is correct *** Target test finish *** |
|
| 16:10:05 | Stop Capturing Packets (Link0) |
| 16:10:05 | Stop Capturing Packets (Link1) |
| Target: Reset IKE SA entries: saddump | |
| 16:10:05 |
vRemote(ikeResetSA.rmt) ``/usr/local/v6eval//bin/freebsd-i386//ikeResetSA.rmt -t freebsd-i386 -u root -p v6eval -d cuad0 -o 1 saddump ''
Connected
target1#
target1# /usr/sbin/setkey -c <<EOD
dump;
flush;
EOD? dump;
? flush;
? EOD
3ffe:501:ffff:103::11 3ffe:501:ffff:102::1
esp mode=tunnel spi=85086284(0x0512504c) reqid=0(0x00000000)
seq=0x00000000 replay=0 flags=0x00000000 state=larval
sadb_seq=0 pid=2906 refcnt=1
target1#
target1# sendMessagesSync: never got /usr/sbin/setkey -c <<EODdump;flush;EOD
echo $status
0
target1# kill -TERM `head -1 /var/run/racoon.pid`
target1#
target1# echo $status
0
target1# /bin/rm -f /var/run/racoon.pid
target1#
target1# echo $status
0
~
[EOT]
|
| Target: Clear SPD entries: spddump | |
| 16:10:11 |
vRemote(ipsecResetSPD.rmt) ``/usr/local/v6eval//bin/freebsd-i386//ipsecResetSPD.rmt -t freebsd-i386 -u root -p v6eval -d cuad0 -o 1 spddump ''
Connected
target1#
target1# /usr/sbin/setkey -c <<EOD
spddump;
sp? spddump;
dflush;
EOD
? spdflush;
EOD
? EOD
3ffe:501:ffff:104::/64[any] 3ffe:501:ffff:100::/64[any] any
in ipsec
esp/tunnel/3ffe:501:ffff:103::11-3ffe:501:ffff:102::1/require
created: Mar 13 16:16:18 2006 lastused: Mar 13 16:16:18 2006
lifetime: 0(s) validtime: 0(s)
spid=18968 seq=1 pid=2909
refcnt=1
3ffe:501:ffff:100::/64[any] 3ffe:501:ffff:104::/64[any] any
out ipsec
esp/tunnel/3ffe:501:ffff:102::1-3ffe:501:ffff:103::11/require
created: Mar 13 16:16:12 2006 lastused: Mar 13 16:16:12 2006
lifetime: 0(s) validtime: 0(s)
spid=18967 seq=0 pid=2909
refcnt=1
target1#
target1# sendMessagesSync: never got /usr/sbin/setkey -c <<EODspddump;spdflush;EOD
echo $status
0
~
[EOT]
|
|
OK |
|
| 16:10:17 | End |
Frame_Ether (length:146) | Hdr_Ether (length:14) | | DestinationAddress = 00:00:02:00:27:cd | | SourceAddress = 00:00:00:00:00:11 | | Type = 34525 | Packet_IPv6 (length:132) | | Hdr_IPv6 (length:40) | | | Version = 6 | | | TrafficClass = 0 | | | FlowLabel = 0 | | | PayloadLength = 92 | | | NextHeader = 17 | | | HopLimit = 64 | | | SourceAddress = 3ffe:501:ffff:103::11 | | | DestinationAddress = 3ffe:501:ffff:102::1 | | Upp_UDP (length:92) | | | Hdr_UDP (length:8) | | | | SourcePort = 500 | | | | DestinationPort = 500 | | | | Length = 92 | | | | Checksum = 6271 calc(6271) | | | Udp_ISAKMP (length:84) | | | | Hdr_ISAKMP (length:28) | | | | | InitiatorCookie = dfc7612ff2102d0e | | | | | ResponderCookie = 0000000000000000 | | | | | NextPayload = 1 | | | | | MjVer = 1 | | | | | MnVer = 0 | | | | | ExchangeType = 2 | | | | | Reserved = 0 | | | | | AFlag = 0 | | | | | CFlag = 0 | | | | | EFlag = 0 | | | | | MessageID = 0 | | | | | Length = 84 | | | | Pld_ISAKMP_SA_IPsec_IDonly (length:56) | | | | | NextPayload = 0 | | | | | Reserved1 = 0 | | | | | PayloadLength = 56 | | | | | DOI = 1 | | | | | Situation = 1 | | | | | Pld_ISAKMP_P_ISAKMP (length:44) | | | | | | NextPayload = 0 | | | | | | Reserved1 = 0 | | | | | | PayloadLength = 44 | | | | | | ProposalNumber = 1 | | | | | | ProtocolID = 1 | | | | | | SPIsize = 0 | | | | | | NumOfTransforms = 1 | | | | | | SPI = | | | | | | Pld_ISAKMP_T (length:36) | | | | | | | NextPayload = 0 | | | | | | | Reserved1 = 0 | | | | | | | PayloadLength = 36 | | | | | | | TransformNumber = 1 | | | | | | | TransformID = 1 | | | | | | | Reserved2 = 0 | | | | | | | Attr_ISAKMP_TV (length:4) | | | | | | | | AF = 1 | | | | | | | | Type = 1 | | | | | | | | Value = 5 | | | | | | | Attr_ISAKMP_TV (length:4) | | | | | | | | AF = 1 | | | | | | | | Type = 2 | | | | | | | | Value = 2 | | | | | | | Attr_ISAKMP_TV (length:4) | | | | | | | | AF = 1 | | | | | | | | Type = 3 | | | | | | | | Value = 1 | | | | | | | Attr_ISAKMP_TV (length:4) | | | | | | | | AF = 1 | | | | | | | | Type = 4 | | | | | | | | Value = 2 | | | | | | | Attr_ISAKMP_TV (length:4) | | | | | | | | AF = 1 | | | | | | | | Type = 11 | | | | | | | | Value = 1 | | | | | | | Attr_ISAKMP_TLV (length:8) | | | | | | | | AF = 0 | | | | | | | | Type = 12 | | | | | | | | Length = 4 | | | | | | | | Value = 00007080
Frame_Ether (length:166) | Hdr_Ether (length:14) | | DestinationAddress = 00:00:00:00:00:11 | | SourceAddress = 00:00:02:00:27:cd | | Type = 34525 | Packet_IPv6 (length:152) | | Hdr_IPv6 (length:40) | | | Version = 6 | | | TrafficClass = 0 | | | FlowLabel = 0 | | | PayloadLength = 112 | | | NextHeader = 17 | | | HopLimit = 64 | | | SourceAddress = 3ffe:501:ffff:102::1 | | | DestinationAddress = 3ffe:501:ffff:103::11 | | Upp_UDP (length:112) | | | Hdr_UDP (length:8) | | | | SourcePort = 500 | | | | DestinationPort = 500 | | | | Length = 112 | | | | Checksum = 293 calc(293) | | | Udp_ISAKMP (length:104) | | | | Hdr_ISAKMP (length:28) | | | | | InitiatorCookie = dfc7612ff2102d0e | | | | | ResponderCookie = ac6e5117915887f0 | | | | | NextPayload = 1 | | | | | MjVer = 1 | | | | | MnVer = 0 | | | | | ExchangeType = 2 | | | | | Reserved = 0 | | | | | AFlag = 0 | | | | | CFlag = 0 | | | | | EFlag = 0 | | | | | MessageID = 0 | | | | | Length = 104 | | | | Pld_ISAKMP_SA_IPsec_IDonly (length:56) | | | | | NextPayload = 13 | | | | | Reserved1 = 0 | | | | | PayloadLength = 56 | | | | | DOI = 1 | | | | | Situation = 1 | | | | | Pld_ISAKMP_P_ISAKMP (length:44) | | | | | | NextPayload = 0 | | | | | | Reserved1 = 0 | | | | | | PayloadLength = 44 | | | | | | ProposalNumber = 1 | | | | | | ProtocolID = 1 | | | | | | SPIsize = 0 | | | | | | NumOfTransforms = 1 | | | | | | SPI = | | | | | | Pld_ISAKMP_T (length:36) | | | | | | | NextPayload = 0 | | | | | | | Reserved1 = 0 | | | | | | | PayloadLength = 36 | | | | | | | TransformNumber = 1 | | | | | | | TransformID = 1 | | | | | | | Reserved2 = 0 | | | | | | | Attr_ISAKMP_TV (length:4) | | | | | | | | AF = 1 | | | | | | | | Type = 1 | | | | | | | | Value = 5 | | | | | | | Attr_ISAKMP_TV (length:4) | | | | | | | | AF = 1 | | | | | | | | Type = 2 | | | | | | | | Value = 2 | | | | | | | Attr_ISAKMP_TV (length:4) | | | | | | | | AF = 1 | | | | | | | | Type = 3 | | | | | | | | Value = 1 | | | | | | | Attr_ISAKMP_TV (length:4) | | | | | | | | AF = 1 | | | | | | | | Type = 4 | | | | | | | | Value = 2 | | | | | | | Attr_ISAKMP_TV (length:4) | | | | | | | | AF = 1 | | | | | | | | Type = 11 | | | | | | | | Value = 1 | | | | | | | Attr_ISAKMP_TLV (length:8) | | | | | | | | AF = 0 | | | | | | | | Type = 12 | | | | | | | | Length = 4 | | | | | | | | Value = 00007080 | | | | Pld_ISAKMP_VID (length:20) | | | | | NextPayload = 0 | | | | | Reserved1 = 0 | | | | | PayloadLength = 20 | | | | | VID = 7003cbc1 097dbe9c 2600ba69 83bc8b35 ===isakmp_phase1_recv_2nd=================================
Frame_Ether (length:242) | Hdr_Ether (length:14) | | DestinationAddress = 00:00:02:00:27:cd | | SourceAddress = 00:00:00:00:00:11 | | Type = 34525 | Packet_IPv6 (length:228) | | Hdr_IPv6 (length:40) | | | Version = 6 | | | TrafficClass = 0 | | | FlowLabel = 0 | | | PayloadLength = 188 | | | NextHeader = 17 | | | HopLimit = 64 | | | SourceAddress = 3ffe:501:ffff:103::11 | | | DestinationAddress = 3ffe:501:ffff:102::1 | | Upp_UDP (length:188) | | | Hdr_UDP (length:8) | | | | SourcePort = 500 | | | | DestinationPort = 500 | | | | Length = 188 | | | | Checksum = 50230 calc(50230) | | | Udp_ISAKMP (length:180) | | | | Hdr_ISAKMP (length:28) | | | | | InitiatorCookie = dfc7612ff2102d0e | | | | | ResponderCookie = ac6e5117915887f0 | | | | | NextPayload = 4 | | | | | MjVer = 1 | | | | | MnVer = 0 | | | | | ExchangeType = 2 | | | | | Reserved = 0 | | | | | AFlag = 0 | | | | | CFlag = 0 | | | | | EFlag = 0 | | | | | MessageID = 0 | | | | | Length = 180 | | | | Pld_ISAKMP_KE (length:132) | | | | | NextPayload = 10 | | | | | Reserved1 = 0 | | | | | PayloadLength = 132 | | | | | KeyExchangeData = | | | | | 3e676482 9950580e 50e68464 b669ab3b 5d90ac4b 7894f30e d9bc25d4 6db3d29c | | | | | 427cb03f 8c75ca2b 127e419b d9ef6450 ca7814de 21fd9518 40db9835 fb41517e | | | | | 889ac632 2ebe6c99 56a2f970 5334063f 5e38253b 51b30238 beb63620 1885fec1 | | | | | c4d35afe 1ead5820 47195658 b0dac9a3 142d234e d6c7c553 a5955a4f 6bd5a469 | | | | Pld_ISAKMP_NONCE (length:20) | | | | | NextPayload = 0 | | | | | Reserved1 = 0 | | | | | PayloadLength = 20 | | | | | NonceData = 00000000 00000000 00000000 00000000
Frame_Ether (length:262) | Hdr_Ether (length:14) | | DestinationAddress = 00:00:00:00:00:11 | | SourceAddress = 00:00:02:00:27:cd | | Type = 34525 | Packet_IPv6 (length:248) | | Hdr_IPv6 (length:40) | | | Version = 6 | | | TrafficClass = 0 | | | FlowLabel = 0 | | | PayloadLength = 208 | | | NextHeader = 17 | | | HopLimit = 64 | | | SourceAddress = 3ffe:501:ffff:102::1 | | | DestinationAddress = 3ffe:501:ffff:103::11 | | Upp_UDP (length:208) | | | Hdr_UDP (length:8) | | | | SourcePort = 500 | | | | DestinationPort = 500 | | | | Length = 208 | | | | Checksum = 22597 calc(22597) | | | Udp_ISAKMP (length:200) | | | | Hdr_ISAKMP (length:28) | | | | | InitiatorCookie = dfc7612ff2102d0e | | | | | ResponderCookie = ac6e5117915887f0 | | | | | NextPayload = 4 | | | | | MjVer = 1 | | | | | MnVer = 0 | | | | | ExchangeType = 2 | | | | | Reserved = 0 | | | | | AFlag = 0 | | | | | CFlag = 0 | | | | | EFlag = 0 | | | | | MessageID = 0 | | | | | Length = 200 | | | | Pld_ISAKMP_KE (length:132) | | | | | NextPayload = 10 | | | | | Reserved1 = 0 | | | | | PayloadLength = 132 | | | | | KeyExchangeData = | | | | | 9ae42f83 7f7785bf e88b2244 6a5deef2 49e7d4dd bb63c9be 1a581e43 d9fd4135 | | | | | f9d17d54 9cd8018b 19e9721c 4e153f9d 0bacff66 db07e487 0995a5ff 2a23c631 | | | | | fec1f9c9 aee9619c 5fd57b93 b8c03a1a 3084dcb4 23a05d02 1f3ec619 1eeddb11 | | | | | bff41db2 32b3bff1 7ffb6cae 071c853f a53973db 59faf96c 488d0d4a e4f5fd45 | | | | Pld_ISAKMP_NONCE (length:20) | | | | | NextPayload = 13 | | | | | Reserved1 = 0 | | | | | PayloadLength = 20 | | | | | NonceData = 86486924 1369aadc 718ee3df 5f1a337f | | | | Pld_ISAKMP_VID (length:20) | | | | | NextPayload = 0 | | | | | Reserved1 = 0 | | | | | PayloadLength = 20 | | | | | VID = 7003cbc1 097dbe9c 2600ba69 83bc8b35 ===isakmp_phase1_recv_4th=================================
Frame_Ether (length:146) | Hdr_Ether (length:14) | | DestinationAddress = 00:00:02:00:27:cd | | SourceAddress = 00:00:00:00:00:11 | | Type = 34525 | Packet_IPv6 (length:132) | | Hdr_IPv6 (length:40) | | | Version = 6 | | | TrafficClass = 0 | | | FlowLabel = 0 | | | PayloadLength = 92 | | | NextHeader = 17 | | | HopLimit = 64 | | | SourceAddress = 3ffe:501:ffff:103::11 | | | DestinationAddress = 3ffe:501:ffff:102::1 | | Upp_UDP (length:92) | | | Hdr_UDP (length:8) | | | | SourcePort = 500 | | | | DestinationPort = 500 | | | | Length = 92 | | | | Checksum = 39084 calc(39084) | | | Udp_ISAKMP (length:84) | | | | Hdr_ISAKMP (length:28) | | | | | InitiatorCookie = dfc7612ff2102d0e | | | | | ResponderCookie = ac6e5117915887f0 | | | | | NextPayload = 5 | | | | | MjVer = 1 | | | | | MnVer = 0 | | | | | ExchangeType = 2 | | | | | Reserved = 0 | | | | | AFlag = 0 | | | | | CFlag = 0 | | | | | EFlag = 1 | | | | | MessageID = 0 | | | | | Length = 84 | | | | ISAKMP_Encryption (length:56) | | | | | algorithm = alg_isakmp_phase1_send_5th | | | | | IVEC = de5c042d aeb2e6cd | | | | | Decrypted (length:56) | | | | | | PlainText (length:48) | | | | | | | Pld_ISAKMP_ID_IPV6_ADDR (length:24) | | | | | | | | NextPayload = 8 | | | | | | | | Reserved1 = 0 | | | | | | | | PayloadLength = 24 | | | | | | | | IDtype = 5 | | | | | | | | ProtocolID = 17 | | | | | | | | Port = 500 | | | | | | | | ID = 3ffe:501:ffff:103::11 | | | | | | | Pld_ISAKMP_HASH (length:24) | | | | | | | | NextPayload = 0 | | | | | | | | Reserved1 = 0 | | | | | | | | PayloadLength = 24 | | | | | | | | HashData = | | | | | | | | dd7aa55c 66e96dbe 6e62a6c1 56defec1 8aaff512 | | | | | | Padding = 00000000 00000007
===ALGORITHM LISTS BEGIN====================
--------------------------------------------
frame=isakmp_phase1_recv_6th
ESP=alg_isakmp_phase1_recv_6th
crypt=ike_des3cbc(hexstr("772b2dcaf1b66b27593dc4ff1a10572c6911fa84bdb4dbd8b5a76e4cbdb3c04e0676ad3da6affeb96e80ffd006362a4846ba40ea11d13900613e3ec8",24),hexstr("de5c042daeb2e6cd",8))
--------------------------------------------
===ALGORITHM LISTS END======================
Frame_Ether (length:146)
| Hdr_Ether (length:14)
| | DestinationAddress = 00:00:00:00:00:11
| | SourceAddress = 00:00:02:00:27:cd
| | Type = 34525
| Packet_IPv6 (length:132)
| | Hdr_IPv6 (length:40)
| | | Version = 6
| | | TrafficClass = 0
| | | FlowLabel = 0
| | | PayloadLength = 92
| | | NextHeader = 17
| | | HopLimit = 64
| | | SourceAddress = 3ffe:501:ffff:102::1
| | | DestinationAddress = 3ffe:501:ffff:103::11
| | Upp_UDP (length:92)
| | | Hdr_UDP (length:8)
| | | | SourcePort = 500
| | | | DestinationPort = 500
| | | | Length = 92
| | | | Checksum = 27062 calc(27062)
| | | Udp_ISAKMP (length:84)
| | | | Hdr_ISAKMP (length:28)
| | | | | InitiatorCookie = dfc7612ff2102d0e
| | | | | ResponderCookie = ac6e5117915887f0
| | | | | NextPayload = 5
| | | | | MjVer = 1
| | | | | MnVer = 0
| | | | | ExchangeType = 2
| | | | | Reserved = 0
| | | | | AFlag = 0
| | | | | CFlag = 0
| | | | | EFlag = 1
| | | | | MessageID = 0
| | | | | Length = 84
| | | | ISAKMP_Encryption (length:56)
| | | | | algorithm = alg_isakmp_phase1_recv_6th
| | | | | IVEC = 55bd41be e2901db1
| | | | | Decrypted (length:56)
| | | | | | PlainText (length:48)
| | | | | | | Pld_ISAKMP_ID_IPV6_ADDR (length:24)
| | | | | | | | NextPayload = 8
| | | | | | | | Reserved1 = 0
| | | | | | | | PayloadLength = 24
| | | | | | | | IDtype = 5
| | | | | | | | ProtocolID = 17
| | | | | | | | Port = 500
| | | | | | | | ID = 3ffe:501:ffff:102::1
| | | | | | | Pld_ISAKMP_HASH (length:24)
| | | | | | | | NextPayload = 0
| | | | | | | | Reserved1 = 0
| | | | | | | | PayloadLength = 24
| | | | | | | | HashData =
| | | | | | | | 29caa9e4 15b7e04b 6832f320 5b22a8ba 50a9ebe4
| | | | | | Padding = ded30de3 5989b207
===isakmp_phase1_recv_6th=================================
applied algorithms={alg_isakmp_phase1_recv_6th}
Frame_Ether (length:274) | Hdr_Ether (length:14) | | DestinationAddress = 00:00:02:00:27:cd | | SourceAddress = 00:00:00:00:00:11 | | Type = 34525 | Packet_IPv6 (length:260) | | Hdr_IPv6 (length:40) | | | Version = 6 | | | TrafficClass = 0 | | | FlowLabel = 0 | | | PayloadLength = 220 | | | NextHeader = 17 | | | HopLimit = 64 | | | SourceAddress = 3ffe:501:ffff:103::11 | | | DestinationAddress = 3ffe:501:ffff:102::1 | | Upp_UDP (length:220) | | | Hdr_UDP (length:8) | | | | SourcePort = 500 | | | | DestinationPort = 500 | | | | Length = 220 | | | | Checksum = 21139 calc(21139) | | | Udp_ISAKMP (length:212) | | | | Hdr_ISAKMP (length:28) | | | | | InitiatorCookie = dfc7612ff2102d0e | | | | | ResponderCookie = ac6e5117915887f0 | | | | | NextPayload = 8 | | | | | MjVer = 1 | | | | | MnVer = 0 | | | | | ExchangeType = 32 | | | | | Reserved = 0 | | | | | AFlag = 0 | | | | | CFlag = 0 | | | | | EFlag = 1 | | | | | MessageID = 65535 | | | | | Length = 212 | | | | ISAKMP_Encryption (length:184) | | | | | algorithm = alg_isakmp_phase2_send_1st | | | | | IVEC = 1510803f 0a1c0f7d | | | | | Decrypted (length:184) | | | | | | PlainText (length:176) | | | | | | | Pld_ISAKMP_HASH (length:24) | | | | | | | | NextPayload = 1 | | | | | | | | Reserved1 = 0 | | | | | | | | PayloadLength = 24 | | | | | | | | HashData = | | | | | | | | 257e228b 126dda95 d0570dd8 3b691125 981f8738 | | | | | | | Pld_ISAKMP_SA_IPsec_IDonly (length:52) | | | | | | | | NextPayload = 10 | | | | | | | | Reserved1 = 0 | | | | | | | | PayloadLength = 52 | | | | | | | | DOI = 1 | | | | | | | | Situation = 1 | | | | | | | | Pld_ISAKMP_P_IPsec_ESP (length:40) | | | | | | | | | NextPayload = 0 | | | | | | | | | Reserved1 = 0 | | | | | | | | | PayloadLength = 40 | | | | | | | | | ProposalNumber = 1 | | | | | | | | | ProtocolID = 3 | | | | | | | | | SPIsize = 4 | | | | | | | | | NumOfTransforms = 1 | | | | | | | | | SPI = 4096 | | | | | | | | | Pld_ISAKMP_T (length:28) | | | | | | | | | | NextPayload = 0 | | | | | | | | | | Reserved1 = 0 | | | | | | | | | | PayloadLength = 28 | | | | | | | | | | TransformNumber = 1 | | | | | | | | | | TransformID = 3 | | | | | | | | | | Reserved2 = 0 | | | | | | | | | | Attr_ISAKMP_TV (length:4) | | | | | | | | | | | AF = 1 | | | | | | | | | | | Type = 1 | | | | | | | | | | | Value = 1 | | | | | | | | | | Attr_ISAKMP_TLV (length:8) | | | | | | | | | | | AF = 0 | | | | | | | | | | | Type = 2 | | | | | | | | | | | Length = 4 | | | | | | | | | | | Value = 00007080 | | | | | | | | | | Attr_ISAKMP_TV (length:4) | | | | | | | | | | | AF = 1 | | | | | | | | | | | Type = 4 | | | | | | | | | | | Value = 1 | | | | | | | | | | Attr_ISAKMP_TV (length:4) | | | | | | | | | | | AF = 1 | | | | | | | | | | | Type = 5 | | | | | | | | | | | Value = 2 | | | | | | | Pld_ISAKMP_NONCE (length:20) | | | | | | | | NextPayload = 5 | | | | | | | | Reserved1 = 0 | | | | | | | | PayloadLength = 20 | | | | | | | | NonceData = 00000000 00000000 00000000 00000001 | | | | | | | Pld_ISAKMP_ID_IPV6_ADDR_SUBNET (length:40) | | | | | | | | NextPayload = 5 | | | | | | | | Reserved1 = 0 | | | | | | | | PayloadLength = 40 | | | | | | | | IDtype = 6 | | | | | | | | ProtocolID = 0 | | | | | | | | Port = 0 | | | | | | | | ID1 = 3ffe:501:ffff:104:: | | | | | | | | ID2 = ffff:ffff:ffff:ffff:: | | | | | | | Pld_ISAKMP_ID_IPV6_ADDR_SUBNET (length:40) | | | | | | | | NextPayload = 0 | | | | | | | | Reserved1 = 0 | | | | | | | | PayloadLength = 40 | | | | | | | | IDtype = 6 | | | | | | | | ProtocolID = 0 | | | | | | | | Port = 0 | | | | | | | | ID1 = 3ffe:501:ffff:100:: | | | | | | | | ID2 = ffff:ffff:ffff:ffff:: | | | | | | Padding = 00000000 00000007
===ALGORITHM LISTS BEGIN====================
--------------------------------------------
frame=isakmp_phase2_recv_2nd
ESP=alg_isakmp_phase2_recv_2nd
crypt=ike_des3cbc(hexstr("772b2dcaf1b66b27593dc4ff1a10572c6911fa84bdb4dbd8b5a76e4cbdb3c04e0676ad3da6affeb96e80ffd006362a4846ba40ea11d13900613e3ec8",24),hexstr("1510803f0a1c0f7d",8))
--------------------------------------------
===ALGORITHM LISTS END======================
Frame_Ether (length:274)
| Hdr_Ether (length:14)
| | DestinationAddress = 00:00:00:00:00:11
| | SourceAddress = 00:00:02:00:27:cd
| | Type = 34525
| Packet_IPv6 (length:260)
| | Hdr_IPv6 (length:40)
| | | Version = 6
| | | TrafficClass = 0
| | | FlowLabel = 0
| | | PayloadLength = 220
| | | NextHeader = 17
| | | HopLimit = 64
| | | SourceAddress = 3ffe:501:ffff:102::1
| | | DestinationAddress = 3ffe:501:ffff:103::11
| | Upp_UDP (length:220)
| | | Hdr_UDP (length:8)
| | | | SourcePort = 500
| | | | DestinationPort = 500
| | | | Length = 220
| | | | Checksum = 51172 calc(51172)
| | | Udp_ISAKMP (length:212)
| | | | Hdr_ISAKMP (length:28)
| | | | | InitiatorCookie = dfc7612ff2102d0e
| | | | | ResponderCookie = ac6e5117915887f0
| | | | | NextPayload = 8
| | | | | MjVer = 1
| | | | | MnVer = 0
| | | | | ExchangeType = 32
| | | | | Reserved = 0
| | | | | AFlag = 0
| | | | | CFlag = 0
| | | | | EFlag = 1
| | | | | MessageID = 65535
| | | | | Length = 212
| | | | ISAKMP_Encryption (length:184)
| | | | | algorithm = alg_isakmp_phase2_recv_2nd
| | | | | IVEC = 3d3ad7ad 8878b310
| | | | | Decrypted (length:184)
| | | | | | PlainText (length:176)
| | | | | | | Pld_ISAKMP_HASH (length:24)
| | | | | | | | NextPayload = 1
| | | | | | | | Reserved1 = 0
| | | | | | | | PayloadLength = 24
| | | | | | | | HashData =
| | | | | | | | ecd5c157 69fae99f 8b097134 160038b6 09426844
| | | | | | | Pld_ISAKMP_SA_IPsec_IDonly (length:52)
| | | | | | | | NextPayload = 10
| | | | | | | | Reserved1 = 0
| | | | | | | | PayloadLength = 52
| | | | | | | | DOI = 1
| | | | | | | | Situation = 1
| | | | | | | | Pld_ISAKMP_P_IPsec_ESP (length:40)
| | | | | | | | | NextPayload = 0
| | | | | | | | | Reserved1 = 0
| | | | | | | | | PayloadLength = 40
| | | | | | | | | ProposalNumber = 1
| | | | | | | | | ProtocolID = 3
| | | | | | | | | SPIsize = 4
| | | | | | | | | NumOfTransforms = 1
| | | | | | | | | SPI = 85086284
| | | | | | | | | Pld_ISAKMP_T (length:28)
| | | | | | | | | | NextPayload = 0
| | | | | | | | | | Reserved1 = 0
| | | | | | | | | | PayloadLength = 28
| | | | | | | | | | TransformNumber = 1
| | | | | | | | | | TransformID = 3
| | | | | | | | | | Reserved2 = 0
| | | | | | | | | | Attr_ISAKMP_TV (length:4)
| | | | | | | | | | | AF = 1
| | | | | | | | | | | Type = 1
| | | | | | | | | | | Value = 1
| | | | | | | | | | Attr_ISAKMP_TLV (length:8)
| | | | | | | | | | | AF = 0
| | | | | | | | | | | Type = 2
| | | | | | | | | | | Length = 4
| | | | | | | | | | | Value = 00007080
| | | | | | | | | | Attr_ISAKMP_TV (length:4)
| | | | | | | | | | | AF = 1
| | | | | | | | | | | Type = 4
| | | | | | | | | | | Value = 1
| | | | | | | | | | Attr_ISAKMP_TV (length:4)
| | | | | | | | | | | AF = 1
| | | | | | | | | | | Type = 5
| | | | | | | | | | | Value = 2
| | | | | | | Pld_ISAKMP_NONCE (length:20)
| | | | | | | | NextPayload = 5
| | | | | | | | Reserved1 = 0
| | | | | | | | PayloadLength = 20
| | | | | | | | NonceData = de9a521f 59199d1b 9859f1a5 1921d215
| | | | | | | Pld_ISAKMP_ID_IPV6_ADDR_SUBNET (length:40)
| | | | | | | | NextPayload = 5
| | | | | | | | Reserved1 = 0
| | | | | | | | PayloadLength = 40
| | | | | | | | IDtype = 6
| | | | | | | | ProtocolID = 0
| | | | | | | | Port = 0
| | | | | | | | ID1 = 3ffe:501:ffff:104::
| | | | | | | | ID2 = ffff:ffff:ffff:ffff::
| | | | | | | Pld_ISAKMP_ID_IPV6_ADDR_SUBNET (length:40)
| | | | | | | | NextPayload = 0
| | | | | | | | Reserved1 = 0
| | | | | | | | PayloadLength = 40
| | | | | | | | IDtype = 6
| | | | | | | | ProtocolID = 0
| | | | | | | | Port = 0
| | | | | | | | ID1 = 3ffe:501:ffff:100::
| | | | | | | | ID2 = ffff:ffff:ffff:ffff::
| | | | | | Padding = b6504d04 bfda6507
===isakmp_phase2_recv_2nd=================================
applied algorithms={alg_isakmp_phase2_recv_2nd}