netdev - Re: oops with ipcomp

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <3C59DB883F7B0B4D8096010D45ACCD134F20D4@exch.facton.local>
Date:	Fri, 8 Feb 2008 11:45:33 +0100
From:	"Beschorner Daniel" <Daniel.Beschorner@...ton.com>
To:	"Herbert Xu" <herbert@...dor.apana.org.au>
Cc:	<netdev@...r.kernel.org>
Subject: Re: oops with ipcomp

> No I meant the exact output of ip x p and ip x s.

I know, but as I end up every time with a tainted kernel on our
production server I didn't turn ipcomp on, but now I got it.

src Net_B dst A
	dir in priority 2088 
	tmpl src B dst A
		proto comp reqid 16394 mode tunnel
		level use 
	tmpl src 0.0.0.0 dst 0.0.0.0
		proto esp reqid 16393 mode transport
src Net_B dst Net_A
	dir in priority 2344 
	tmpl src B dst A
		proto comp reqid 16390 mode tunnel
		level use 
	tmpl src 0.0.0.0 dst 0.0.0.0
		proto esp reqid 16389 mode transport
src A dst Net_B 
	dir out priority 2088 
	tmpl src A dst B
		proto comp reqid 16394 mode tunnel
	tmpl src 0.0.0.0 dst 0.0.0.0
		proto esp reqid 16393 mode transport
src Net_A dst Net_B
	dir out priority 2344 
	tmpl src A dst B
		proto comp reqid 16390 mode tunnel
	tmpl src 0.0.0.0 dst 0.0.0.0
		proto esp reqid 16389 mode transport
src Net_B dst A
	dir fwd priority 2088 
	tmpl src B dst A
		proto comp reqid 16394 mode tunnel
		level use 
	tmpl src 0.0.0.0 dst 0.0.0.0
		proto esp reqid 16393 mode transport
src Net_B dst Net_A
	dir fwd priority 2344 
	tmpl src B dst A
		proto comp reqid 16390 mode tunnel
		level use 
	tmpl src 0.0.0.0 dst 0.0.0.0
		proto esp reqid 16389 mode transport

src A dst B
	proto comp spi 0x0000427e reqid 16390 mode tunnel
	replay-window 0 
	comp deflate 0x
	sel src 0.0.0.0/0 dst 0.0.0.0/0 
src B dst A
	proto comp spi 0x0000ecf0 reqid 16390 mode tunnel
	replay-window 0 
	comp deflate 0x
	sel src 0.0.0.0/0 dst 0.0.0.0/0 
src A dst B
	proto esp spi 0x53f15e96 reqid 16389 mode transport
	replay-window 32 
	auth hmac(sha1) 0x...
	enc cbc(aes) 0x...
	sel src 0.0.0.0/0 dst 0.0.0.0/0 
src B dst A
	proto esp spi 0x7b329066 reqid 16389 mode transport
	replay-window 32 
	auth hmac(sha1) 0...
	enc cbc(aes) 0x...
	sel src 0.0.0.0/0 dst 0.0.0.0/0 
src A dst B
	proto (null) spi 0x53ec987a reqid 0 mode tunnel
	replay-window 0 
	sel src 0.0.0.0/0 dst 0.0.0.0/0 
src B dst A
	proto (null) spi 0xc19ef67c reqid 0 mode tunnel
	replay-window 0 
	sel src 0.0.0.0/0 dst 0.0.0.0/0 
src A dst B
	proto comp spi 0x00001314 reqid 16394 mode tunnel
	replay-window 0 
	comp deflate 0x
	sel src 0.0.0.0/0 dst 0.0.0.0/0 
src B dst A
	proto comp spi 0x000032ff reqid 16394 mode tunnel
	replay-window 0 
	comp deflate 0x
	sel src 0.0.0.0/0 dst 0.0.0.0/0 
src A dst B
	proto esp spi 0xec7d12de reqid 16393 mode transport
	replay-window 32 
	auth hmac(sha1) 0x...
	enc cbc(aes) 0x...
	sel src 0.0.0.0/0 dst 0.0.0.0/0 
src B dst A
	proto esp spi 0x75016d2d reqid 16393 mode transport
	replay-window 32 
	auth hmac(sha1) 0x...
	enc cbc(aes) 0x...
	sel src 0.0.0.0/0 dst 0.0.0.0/0 
--
To unsubscribe from this list: send the line "unsubscribe netdev" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html