26sec using IPcomp

From: Marco Berizzi
Date: Sat Jun 25 2005 - 06:09:07 EST


Hello.
I have setup two Openswan 2.3.1 boxes with
linux 2.6.12 (Slackware 10.1).
I have established an ESP/IPcomp tunnel. Tunnel
is correctly established, but there is no packet
flow when these are bigger than 295 bytes.

(Same behaviour with ipsec-tools 0.5.2 When I
disable IPcomp, packet flow is fine.)

Is there any know problem with IPcomp on
Linux 2.6.12 ?

What should I do to debug this problem?

Any feed back are welcome.

PS: Please CC me, I am not subscribed to the list.

This is the setket -D output:

sadb_msg{ version=2 type=18 errno=0 satype=0
len=2 reserved=0 seq=0 pid=6052

sadb_msg{ version=2 type=18 errno=0 satype=0
len=30 reserved=1 seq=6 pid=6052
sadb_ext{ len=3 type=5 }
sadb_address{ proto=255 prefixlen=24 reserved=0x0000 }
sockaddr{ len=16 family=2 port=0
0a010100 }
sadb_ext{ len=3 type=6 }
sadb_address{ proto=255 prefixlen=24 reserved=0x0000 }
sockaddr{ len=16 family=2 port=0
0a010200 }
sadb_ext{ len=4 type=3 }
sadb_lifetime{ alloc=0, bytes=0
addtime=0, usetime=0 }
sadb_ext{ len=4 type=4 }
sadb_lifetime{ alloc=0, bytes=0
addtime=0, usetime=0 }
sadb_ext{ len=4 type=2 }
sadb_lifetime{ alloc=0, bytes=0
addtime=1119518684, usetime=1119520559 }
sadb_ext{ len=10 type=18 }
sadb_x_policy{ type=2 dir=1 id=68 priority=2344 }
{ len=48 proto=108 mode=2 level=1 reqid=16386
sockaddr{ len=16 family=2 port=0
ac1001e2 }
sockaddr{ len=16 family=2 port=0
ac1001f7 }
}
{ len=16 proto=50 mode=1 level=3 reqid=16385
}

10.1.1.0/24[any] 10.1.2.0/24[any] any
in prio high + 1073739480 ipsec
ipcomp/tunnel/172.16.1.226-172.16.1.247/use#16386
esp/transport//unique#16385
created: Jun 23 11:24:44 2005 lastused: Jun 23 11:55:59 2005
lifetime: 0(s) validtime: 0(s)
spid=104 seq=6 pid=6052
refcnt=1
sadb_msg{ version=0 type=0 errno=0 satype=0
len=0 reserved=0 seq=0 pid=0

sadb_msg{ version=2 type=18 errno=0 satype=0
len=30 reserved=1 seq=5 pid=6052
sadb_ext{ len=3 type=5 }
sadb_address{ proto=255 prefixlen=24 reserved=0x0000 }
sockaddr{ len=16 family=2 port=0
0a010200 }
sadb_ext{ len=3 type=6 }
sadb_address{ proto=255 prefixlen=24 reserved=0x0000 }
sockaddr{ len=16 family=2 port=0
0a010100 }
sadb_ext{ len=4 type=3 }
sadb_lifetime{ alloc=0, bytes=0
addtime=0, usetime=0 }
sadb_ext{ len=4 type=4 }
sadb_lifetime{ alloc=0, bytes=0
addtime=0, usetime=0 }
sadb_ext{ len=4 type=2 }
sadb_lifetime{ alloc=0, bytes=0
addtime=1119520424, usetime=1119520559 }
sadb_ext{ len=10 type=18 }
sadb_x_policy{ type=2 dir=2 id=61 priority=2344 }
{ len=48 proto=108 mode=2 level=1 reqid=16386
sockaddr{ len=16 family=2 port=0
ac1001f7 }
sockaddr{ len=16 family=2 port=0
ac1001e2 }
}
{ len=16 proto=50 mode=1 level=3 reqid=16385
}

10.1.2.0/24[any] 10.1.1.0/24[any] any
out prio high + 1073739480 ipsec
ipcomp/tunnel/172.16.1.247-172.16.1.226/use#16386
esp/transport//unique#16385
created: Jun 23 11:53:44 2005 lastused: Jun 23 11:55:59 2005
lifetime: 0(s) validtime: 0(s)
spid=97 seq=5 pid=6052
refcnt=1
sadb_msg{ version=0 type=0 errno=0 satype=0
len=0 reserved=0 seq=0 pid=0

sadb_msg{ version=2 type=18 errno=0 satype=0
len=30 reserved=1 seq=4 pid=6052
sadb_ext{ len=3 type=5 }
sadb_address{ proto=255 prefixlen=24 reserved=0x0000 }
sockaddr{ len=16 family=2 port=0
0a010100 }
sadb_ext{ len=3 type=6 }
sadb_address{ proto=255 prefixlen=24 reserved=0x0000 }
sockaddr{ len=16 family=2 port=0
0a010200 }
sadb_ext{ len=4 type=3 }
sadb_lifetime{ alloc=0, bytes=0
addtime=0, usetime=0 }
sadb_ext{ len=4 type=4 }
sadb_lifetime{ alloc=0, bytes=0
addtime=0, usetime=0 }
sadb_ext{ len=4 type=2 }
sadb_lifetime{ alloc=0, bytes=0
addtime=1119518684, usetime=0 }
sadb_ext{ len=10 type=18 }
sadb_x_policy{ type=2 dir=3 id=72 priority=2344 }
{ len=48 proto=108 mode=2 level=1 reqid=16386
sockaddr{ len=16 family=2 port=0
ac1001e2 }
sockaddr{ len=16 family=2 port=0
ac1001f7 }
}
{ len=16 proto=50 mode=1 level=3 reqid=16385
}

10.1.1.0/24[any] 10.1.2.0/24[any] any
fwd prio high + 1073739480 ipsec
ipcomp/tunnel/172.16.1.226-172.16.1.247/use#16386
esp/transport//unique#16385
created: Jun 23 11:24:44 2005 lastused:
lifetime: 0(s) validtime: 0(s)
spid=114 seq=4 pid=6052
refcnt=1
sadb_msg{ version=0 type=0 errno=0 satype=0
len=0 reserved=0 seq=0 pid=0

sadb_msg{ version=2 type=18 errno=0 satype=0
len=22 reserved=1 seq=3 pid=6052
sadb_ext{ len=3 type=5 }
sadb_address{ proto=255 prefixlen=0 reserved=0x0000 }
sockaddr{ len=16 family=2 port=0
00000000 }
sadb_ext{ len=3 type=6 }
sadb_address{ proto=255 prefixlen=0 reserved=0x0000 }
sockaddr{ len=16 family=2 port=0
00000000 }
sadb_ext{ len=4 type=3 }
sadb_lifetime{ alloc=0, bytes=0
addtime=0, usetime=0 }
sadb_ext{ len=4 type=4 }
sadb_lifetime{ alloc=0, bytes=0
addtime=0, usetime=0 }
sadb_ext{ len=4 type=2 }
sadb_lifetime{ alloc=0, bytes=0
addtime=1119518684, usetime=0 }
sadb_ext{ len=2 type=18 }
sadb_x_policy{ type=1 dir=1 id=53 priority=0 }

(per-socket policy)
in none
created: Jun 23 11:24:44 2005 lastused:
lifetime: 0(s) validtime: 0(s)
spid=83 seq=3 pid=6052
refcnt=1
sadb_msg{ version=48 type=0 errno=108 satype=0
len=258 reserved=0 seq=16386 pid=0
sadb_ext{ len=2 type=0 }
kdebug_sadb: invalid ext_type 0 was passed.

sadb_msg{ version=2 type=18 errno=0 satype=0
len=22 reserved=1 seq=2 pid=6052
sadb_ext{ len=3 type=5 }
sadb_address{ proto=255 prefixlen=0 reserved=0x0000 }
sockaddr{ len=16 family=2 port=0
00000000 }
sadb_ext{ len=3 type=6 }
sadb_address{ proto=255 prefixlen=0 reserved=0x0000 }
sockaddr{ len=16 family=2 port=0
00000000 }
sadb_ext{ len=4 type=3 }
sadb_lifetime{ alloc=0, bytes=0
addtime=0, usetime=0 }
sadb_ext{ len=4 type=4 }
sadb_lifetime{ alloc=0, bytes=0
addtime=0, usetime=0 }
sadb_ext{ len=4 type=2 }
sadb_lifetime{ alloc=0, bytes=0
addtime=1119518684, usetime=1119520424 }
sadb_ext{ len=2 type=18 }
sadb_x_policy{ type=1 dir=1 id=43 priority=0 }

(per-socket policy)
in none
created: Jun 23 11:24:44 2005 lastused: Jun 23 11:53:44 2005
lifetime: 0(s) validtime: 0(s)
spid=67 seq=2 pid=6052
refcnt=1
sadb_msg{ version=48 type=0 errno=108 satype=0
len=258 reserved=0 seq=16386 pid=0
sadb_ext{ len=2 type=0 }
kdebug_sadb: invalid ext_type 0 was passed.

sadb_msg{ version=2 type=18 errno=0 satype=0
len=22 reserved=1 seq=1 pid=6052
sadb_ext{ len=3 type=5 }
sadb_address{ proto=255 prefixlen=0 reserved=0x0000 }
sockaddr{ len=16 family=2 port=0
00000000 }
sadb_ext{ len=3 type=6 }
sadb_address{ proto=255 prefixlen=0 reserved=0x0000 }
sockaddr{ len=16 family=2 port=0
00000000 }
sadb_ext{ len=4 type=3 }
sadb_lifetime{ alloc=0, bytes=0
addtime=0, usetime=0 }
sadb_ext{ len=4 type=4 }
sadb_lifetime{ alloc=0, bytes=0
addtime=0, usetime=0 }
sadb_ext{ len=4 type=2 }
sadb_lifetime{ alloc=0, bytes=0
addtime=1119518684, usetime=0 }
sadb_ext{ len=2 type=18 }
sadb_x_policy{ type=1 dir=2 id=5c priority=0 }

(per-socket policy)
out none
created: Jun 23 11:24:44 2005 lastused:
lifetime: 0(s) validtime: 0(s)
spid=92 seq=1 pid=6052
refcnt=1
sadb_msg{ version=48 type=0 errno=108 satype=0
len=258 reserved=0 seq=16386 pid=0
sadb_ext{ len=2 type=0 }
kdebug_sadb: invalid ext_type 0 was passed.

sadb_msg{ version=2 type=18 errno=0 satype=0
len=22 reserved=1 seq=0 pid=6052
sadb_ext{ len=3 type=5 }
sadb_address{ proto=255 prefixlen=0 reserved=0x0000 }
sockaddr{ len=16 family=2 port=0
00000000 }
sadb_ext{ len=3 type=6 }
sadb_address{ proto=255 prefixlen=0 reserved=0x0000 }
sockaddr{ len=16 family=2 port=0
00000000 }
sadb_ext{ len=4 type=3 }
sadb_lifetime{ alloc=0, bytes=0
addtime=0, usetime=0 }
sadb_ext{ len=4 type=4 }
sadb_lifetime{ alloc=0, bytes=0
addtime=0, usetime=0 }
sadb_ext{ len=4 type=2 }
sadb_lifetime{ alloc=0, bytes=0
addtime=1119518684, usetime=1119520424 }
sadb_ext{ len=2 type=18 }
sadb_x_policy{ type=1 dir=2 id=4c priority=0 }

(per-socket policy)
out none
created: Jun 23 11:24:44 2005 lastused: Jun 23 11:53:44 2005
lifetime: 0(s) validtime: 0(s)
spid=76 seq=0 pid=6052
refcnt=1


-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/