Test Information

TitleInbound Header Order (Fragment Header vs AH)
CommandLine./HTR_A_In_Fragment.seq -pkt ./HTR_A_Fragment.def -log 9.html -ti Inbound Header Order (Fragment Header vs AH)
TestVersion
ToolVersionundefined
Start2002/03/27 18:42:30
Tn/usr/local/v6eval//etc//tn.def
Nu/usr/local/v6eval//etc//nut.def
Pkt./HTR_A_Fragment.def
Systemusagi-i386
TargetNameRed Hat Linux release 7.2 (Enigma) + usagi cvs 2002/03/26 20:00
HostNameusagi.tahi.org
Typehost

Test Sequence Execution Log

18:42:30Start

 *** Target initialization phase ***
Target: Clear all SAD and SPD entries
18:42:31 vRemote(ipsecClearAll.rmt) ``/usr/local/v6eval//bin/usagi-i386//ipsecClearAll.rmt -t usagi-i386 -u root -p v6eval -d cuaa0 -o 1 '' 
Connected.

[root@usagi root]# 
[root@usagi root]# /usr/local/v6/bin/pfkey -F any
[root@usagi root]# echo $?
16
[root@usagi root]# ~.
Disconnected.

Target: Set SAD entries: src="3ffe:501:ffff:ff05:200:ff:fe00:c1c1" dst="3ffe:501:ffff:ff03:200:ff:fe00:b0b0" spi=0x1000 mode=transport protocol=ah aalgo=hmac-md5 aalgokey=TAHITEST89ABCDEF
18:42:34 vRemote(ipsecSetSAD.rmt) ``/usr/local/v6eval//bin/usagi-i386//ipsecSetSAD.rmt -t usagi-i386 -u root -p v6eval -d cuaa0 -o 1 src="3ffe:501:ffff:ff05:200:ff:fe00:c1c1" dst="3ffe:501:ffff:ff03:200:ff:fe00:b0b0" spi=0x1000 mode=transport protocol=ah aalgo=hmac-md5 aalgokey=TAHITEST89ABCDEF '' 
Connected.

[root@usagi root]# 
[root@usagi root]#  /usr/local/v6/bin/pfkey -A sa -T ah -S 0x1000 -s 3ffe:501:ff ff:ff05:200:ff:fe00:c1c1/128 -d 3ffe:501:ffff:ff03:200:ff:fe00:b0b0/128 --auth h mac-md5 --authkey 0x54414849544553543839414243444546
[root@usagi root]# sendMessagesSync: never got  /usr/local/v6/bin/pfkey -A sa -T ah -S 0x1000 -s 3ffe:501:ffff:ff05:200:ff:fe00:c1c1/128 -d 3ffe:501:ffff:ff03:200:ff:fe00:b0b0/128 --auth hmac-md5 --authkey 0x54414849544553543839414243444546
~.
Disconnected.

Target: Set SPD entries: src="3ffe:501:ffff:ff05:200:ff:fe00:c1c1" dst="3ffe:501:ffff:ff03:200:ff:fe00:b0b0" upperspec=any direction=in protocol=ah mode=transport
18:43:14 vRemote(ipsecSetSPD.rmt) ``/usr/local/v6eval//bin/usagi-i386//ipsecSetSPD.rmt -t usagi-i386 -u root -p v6eval -d cuaa0 -o 1 src="3ffe:501:ffff:ff05:200:ff:fe00:c1c1" dst="3ffe:501:ffff:ff03:200:ff:fe00:b0b0" upperspec=any direction=in protocol=ah mode=transport '' 
Connected.
level is specified. I ignore it 

[root@usagi root]# 
[root@usagi root]# /usr/local/v6/bin/pfkey -A sp -S any -T ah -s 3ffe:501:ffff:f f05:200:ff:fe00:c1c1/128 -d 3ffe:501:ffff:ff03:200:ff:fe00:b0b0/128
[root@usagi root]# sendMessagesSync: never got /usr/local/v6/bin/pfkey -A sp -S any -T ah -s 3ffe:501:ffff:ff05:200:ff:fe00:c1c1/128 -d 3ffe:501:ffff:ff03:200:ff:fe00:b0b0/128

[root@usagi root]# /usr/local/v6/bin/pfkey -L
SADB:
-----------------------------------------------
sa:cec07800
state: 1
sport:0
src:3ffe:0501:ffff:ff05:0200:00ff:fe00:c1c1/128
dport:0
dst:3ffe:0501:ffff:ff03:0200:00ff:fe00:b0b0/128
pxy:
proto:0 ipsec_proto:2
spi:0x1000 state:1 refcnt:1
auth:2
esp:0
lifetime c:0         0        (byte), 0         1009     (add), 0         0        (use)
lifetime s:0         0        (byte), 0         0        (add), 0         0        (use)
lifetime h:0         0        (byte), 0         0        (add), 0         0        (use)
-----------------------------------------------

SPD:
---------------------------------------------
src:3ffe:0501:ffff:ff05:0200:00ff:fe00:c1c1/128
sport:0
dst:3ffe:0501:ffff:ff03:0200:00ff:fe00:b0b0/128
dport:0
proto:0
policy:0
sa(ah):00000000
dst:3ffe:0501:ffff:ff03:0200:00ff:fe00:b0b0/128
ipsec_proto:2 spi:0xffffffff
---------------------------------------------
[root@usagi root]# echo $?
1
~.
Disconnected.
18:43:53Start Capturing Packets (Link0)
18:43:53 vSend(Link0,echo_request_from_host1_ah)
send echo_request_from_host1_ah
18:43:53 vRecv(Link0,ns_to_router echo_reply_to_host1) timeout:6 cntLimit:0 seektime:0
recv echo_reply_to_host1
18:43:54 vRecv(Link0,ns_to_router) timeout:6 cntLimit:0 seektime:0
recv ns_to_router
18:43:58 vSend(Link0,na_from_router)
send na_from_router

NC about Router was PROBE state, but now it's REACHABLE.
18:43:59 vRecv(Link0,ns_to_router) timeout:6 cntLimit:0 seektime:0
vRecv() return status=1
18:44:05 vRecv(Link0,ns_to_router) timeout:6 cntLimit:0 seektime:0
vRecv() return status=1

*** Target testing phase ***
18:44:11 vSend(Link0,echo_request_from_host1_1st_ah)
send echo_request_from_host1_1st_ah
18:44:11 vSend(Link0,echo_request_from_host1_2nd_ah)
send echo_request_from_host1_2nd_ah
18:44:11 vRecv(Link0,echo_reply_to_host1_1st echo_reply_to_host1_2nd) timeout:5 cntLimit:0 seektime:0
vRecv() return status=1

TN received no echo reply from NUT to HOST1.
NG
18:44:16End

Packet Reverse Log