netdev - pmtu discovery on SA

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <3C59DB883F7B0B4D8096010D45ACCD13230254@exch.facton.local>
Date:	Wed, 18 Jul 2007 14:21:56 +0200
From:	"Beschorner Daniel" <Daniel.Beschorner@...ton.com>
To:	"Patrick McHardy" <kaber@...sh.net>
Cc:	<netdev@...r.kernel.org>
Subject: pmtu discovery on SA

> > No more crashes with IPComp and smaller PMTUs.
> > But the "pmtu discovery on SA ESP/..." messages don't disappear.
> 
> Thats probably a different issue. Please post the output of
> "ip -x xfrm state" (obfuscate keys if you care ..).

Linux (MTU 1500) <-> ADSL router (1492) <-> ... <-> Linux (1500)

Both boxes show these messages.

src 1.1.1.1 dst 2.2.2.2
        proto comp spi 0x0000e901 reqid 16398 mode tunnel
        replay-window 0
        comp deflate 0x
src 2.2.2.2 dst 1.1.1.1
        proto comp spi 0x000001a3 reqid 16398 mode tunnel
        replay-window 0
        comp deflate 0x
src 1.1.1.1 dst 2.2.2.2
        proto esp spi 0x767eaf0b reqid 16397 mode transport
        replay-window 32
        auth hmac(sha1) 0xxxxxxxxxxxxxxxxxxxxxx
        enc cbc(aes) 0xxxxxxxxxxxxxxxxxxxxxx
src 2.2.2.2 dst 1.1.1.1
        proto esp spi 0x44c5adda reqid 16397 mode transport
        replay-window 32
        auth hmac(sha1) 0xxxxxxxxxxxxxxxxxxxxxx
        enc cbc(aes) 0xxxxxxxxxxxxxxxxxxxxxx
src 2.2.2.2 dst 1.1.1.1
        proto (null) spi 0xd527fed2 reqid 0 mode tunnel
        replay-window 0
src 1.1.1.1 dst 2.2.2.2
        proto (null) spi 0x4cf1a149 reqid 0 mode tunnel
        replay-window 0 
-
To unsubscribe from this list: send the line "unsubscribe netdev" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html