Test Information

TitleOutbound Header Order (Fragment Header vs AH)
CommandLine./HTR_A_Out_Fragment.seq -pkt ./HTR_A_Fragment.def -log 4.html -ti Outbound Header Order (Fragment Header vs AH)
TestVersion
ToolVersionundefined
Start2002/03/27 18:30:57
Tn/usr/local/v6eval//etc//tn.def
Nu/usr/local/v6eval//etc//nut.def
Pkt./HTR_A_Fragment.def
Systemusagi-i386
TargetNameRed Hat Linux release 7.2 (Enigma) + usagi cvs 2002/03/26 20:00
HostNameusagi.tahi.org
Typehost

Test Sequence Execution Log

18:30:57Start

*** Target initialization phase ***
Target: Clear all SAD and SPD entries
18:30:57 vRemote(ipsecClearAll.rmt) ``/usr/local/v6eval//bin/usagi-i386//ipsecClearAll.rmt -t usagi-i386 -u root -p v6eval -d cuaa0 -o 1 ''
Connected.

[root@usagi root]# 
[root@usagi root]# /usr/local/v6/bin/pfkey -F any
[root@usagi root]# echo $?
16
~.
Disconnected.

Target: Set SAD entries: src="3ffe:501:ffff:ff03:200:ff:fe00:b0b0" dst="3ffe:501:ffff:ff05:200:ff:fe00:c1c1" spi=0x1000 mode=transport protocol=ah aalgo=hmac-md5 aalgokey=TAHITEST89ABCDEF
18:31:01 vRemote(ipsecSetSAD.rmt) ``/usr/local/v6eval//bin/usagi-i386//ipsecSetSAD.rmt -t usagi-i386 -u root -p v6eval -d cuaa0 -o 1 src="3ffe:501:ffff:ff03:200:ff:fe00:b0b0" dst="3ffe:501:ffff:ff05:200:ff:fe00:c1c1" spi=0x1000 mode=transport protocol=ah aalgo=hmac-md5 aalgokey=TAHITEST89ABCDEF ''
Connected.

[root@usagi root]# 
[root@usagi root]#  /usr/local/v6/bin/pfkey -A sa -T ah -S 0x1000 -s 3ffe:501:ff ff:ff03:200:ff:fe00:b0b0/128 -d 3ffe:501:ffff:ff05:200:ff:fe00:c1c1/128 --auth h mac-md5 --authkey 0x54414849544553543839414243444546
[root@usagi root]# sendMessagesSync: never got  /usr/local/v6/bin/pfkey -A sa -T ah -S 0x1000 -s 3ffe:501:ffff:ff03:200:ff:fe00:b0b0/128 -d 3ffe:501:ffff:ff05:200:ff:fe00:c1c1/128 --auth hmac-md5 --authkey 0x54414849544553543839414243444546
~.
Disconnected.

Target: Set SPD entries: src="3ffe:501:ffff:ff03:200:ff:fe00:b0b0" dst="3ffe:501:ffff:ff05:200:ff:fe00:c1c1" upperspec=any direction=out protocol=ah mode=transport
18:31:40 vRemote(ipsecSetSPD.rmt) ``/usr/local/v6eval//bin/usagi-i386//ipsecSetSPD.rmt -t usagi-i386 -u root -p v6eval -d cuaa0 -o 1 src="3ffe:501:ffff:ff03:200:ff:fe00:b0b0" dst="3ffe:501:ffff:ff05:200:ff:fe00:c1c1" upperspec=any direction=out protocol=ah mode=transport ''
Connected.
level is specified. I ignore it 

[root@usagi root]# 
[root@usagi root]# /usr/local/v6/bin/pfkey -A sp -S any -T ah -s 3ffe:501:ffff:f f03:200:ff:fe00:b0b0/128 -d 3ffe:501:ffff:ff05:200:ff:fe00:c1c1/128
[root@usagi root]# sendMessagesSync: never got /usr/local/v6/bin/pfkey -A sp -S any -T ah -s 3ffe:501:ffff:ff03:200:ff:fe00:b0b0/128 -d 3ffe:501:ffff:ff05:200:ff:fe00:c1c1/128

[root@usagi root]# /usr/local/v6/bin/pfkey -L
SADB:
-----------------------------------------------
sa:cf349c00
state: 1
sport:0
src:3ffe:0501:ffff:ff03:0200:00ff:fe00:b0b0/128
dport:0
dst:3ffe:0501:ffff:ff05:0200:00ff:fe00:c1c1/128
pxy:
proto:0 ipsec_proto:2
spi:0x1000 state:1 refcnt:1
auth:2
esp:0
lifetime c:0         0        (byte), 0         316      (add), 0         0        (use)
lifetime s:0         0        (byte), 0         0        (add), 0         0        (use)
lifetime h:0         0        (byte), 0         0        (add), 0         0        (use)
-----------------------------------------------

SPD:
---------------------------------------------
src:3ffe:0501:ffff:ff03:0200:00ff:fe00:b0b0/128
sport:0
dst:3ffe:0501:ffff:ff05:0200:00ff:fe00:c1c1/128
dport:0
proto:0
policy:0
sa(ah):00000000
dst:3ffe:0501:ffff:ff05:0200:00ff:fe00:c1c1/128
ipsec_proto:2 spi:0xffffffff
---------------------------------------------
[root@usagi root]# echo $?
1
~.
Disconnected.
18:32:21Start Capturing Packets (Link0)
18:32:21 vSend(Link0,echo_request_from_host1)
send echo_request_from_host1
18:32:21 vRecv(Link0,ns_to_router echo_reply_to_host1_ah) timeout:6 cntLimit:0 seektime:0
recv echo_reply_to_host1_ah
18:32:21 vRecv(Link0,ns_to_router) timeout:6 cntLimit:0 seektime:0
recv ns_to_router
18:32:26 vSend(Link0,na_from_router)
send na_from_router

NC about Router was PROBE state, but now it's REACHABLE.
18:32:26 vRecv(Link0,ns_to_router) timeout:6 cntLimit:0 seektime:0
vRecv() return status=1
18:32:32 vRecv(Link0,ns_to_router) timeout:6 cntLimit:0 seektime:0
vRecv() return status=1

*** Target testing phase ***
18:32:38 vSend(Link0,echo_request_from_host1_1st)
send echo_request_from_host1_1st
18:32:38 vSend(Link0,echo_request_from_host1_2nd)
send echo_request_from_host1_2nd
18:32:39 vRecv(Link0,echo_reply_to_host1_1st_ah echo_reply_to_host1_2nd_ah) timeout:5 cntLimit:0 seektime:0
recv unexpect packet at 18:32:39
recv unexpect packet at 18:32:39
vRecv() return status=1

TN received no echo reply from NUT to HOST1.
NG
18:32:44End

Packet Reverse Log