lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date:	Wed, 18 Jul 2007 14:21:56 +0200
From:	"Beschorner Daniel" <Daniel.Beschorner@...ton.com>
To:	"Patrick McHardy" <kaber@...sh.net>
Cc:	<netdev@...r.kernel.org>
Subject: pmtu discovery on SA

> > No more crashes with IPComp and smaller PMTUs.
> > But the "pmtu discovery on SA ESP/..." messages don't disappear.
> 
> Thats probably a different issue. Please post the output of
> "ip -x xfrm state" (obfuscate keys if you care ..).

Linux (MTU 1500) <-> ADSL router (1492) <-> ... <-> Linux (1500)

Both boxes show these messages.

src 1.1.1.1 dst 2.2.2.2
        proto comp spi 0x0000e901 reqid 16398 mode tunnel
        replay-window 0
        comp deflate 0x
src 2.2.2.2 dst 1.1.1.1
        proto comp spi 0x000001a3 reqid 16398 mode tunnel
        replay-window 0
        comp deflate 0x
src 1.1.1.1 dst 2.2.2.2
        proto esp spi 0x767eaf0b reqid 16397 mode transport
        replay-window 32
        auth hmac(sha1) 0xxxxxxxxxxxxxxxxxxxxxx
        enc cbc(aes) 0xxxxxxxxxxxxxxxxxxxxxx
src 2.2.2.2 dst 1.1.1.1
        proto esp spi 0x44c5adda reqid 16397 mode transport
        replay-window 32
        auth hmac(sha1) 0xxxxxxxxxxxxxxxxxxxxxx
        enc cbc(aes) 0xxxxxxxxxxxxxxxxxxxxxx
src 2.2.2.2 dst 1.1.1.1
        proto (null) spi 0xd527fed2 reqid 0 mode tunnel
        replay-window 0
src 1.1.1.1 dst 2.2.2.2
        proto (null) spi 0x4cf1a149 reqid 0 mode tunnel
        replay-window 0 
-
To unsubscribe from this list: send the line "unsubscribe netdev" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html

Powered by blists - more mailing lists