(usagi-users 02723) Re: problem with retransmit packet

[Mitsuru KANDA / 神田 充 <mk@xxxxxxxxxxxxxx>]

At Wed, 17 Dec 2003 16:14:16 +0900,
Kazutaka Tachibana <Kazutaka.Tachibana@xxxxxxxxxxx> wrote:
...
> pfkey setting is following..
> -------------------------------------------------------------------------
> pfkey -A sa -s 'Src Address' -d 'Dst Address' -T esp -S 0x600 -p any --auth 
> hmac-sha1 \
> --authkey 0x54686973206973206120536563726574204b6579 --esp 3des-cbc 
> \
> --espkey 0x54686973206973206120536563726574204b657920212121
> 
> pfkey -A sp -s 'Src Address' -d 'Dst Address' -T esp -S 0x600 -p any
> 
> pfkey -A sa -d 'Src Address' -s 'Dst Address' -T esp -S 0x601 -p any --auth 
> hmac-sha1 \
> --authkey 0x54686973206973206120536563726574204b6579 --esp 3des-cbc 
> \
> --espkey 0x54686973206973206120536563726574204b657920212121
> 
> pfkey -A sp -d 'Src Address' -s 'Dst Address' -T esp -S 0x601 -p any
> -------------------------------------------------------------------------
I think it's no problems.

> I communicated between USAGI and another OS using IPsec.
> My test is like this.
> Another OS intentionally drop IPsec packet from USAGI, because I want USAGI 
> kernel
> to send TCP retransmit packet.

Can you set debugging on and send logs to us?
(sysctl -w net.ipsec.debug_{ipv6,pfkey,sadb,spd}=1)

> >And also Could you try to test another version of USAGI kit?
> >(e.g., "snap-shot-20030721"
> >or cvs tag name "bHISTORIC-IPSEC-MIP6-20030804" is the latest/fixed
> >USAGI 2.4 IPsec version.)
> 
> I tried to run "snap-shot-20030721 kernel", but Red Hat Linux freezed.
> So I couldn't check above problem.
> Please tell me how to make "snap-shot-20030721 kernel".
...
> >At Sun, 14 Dec 2003 13:57:36 +0900,
> >Kazutaka Tachibana <Kazutaka.Tachibana@xxxxxxxxxxx> wrote:
> > >
> > > Hi.
> > >
> > > I'm facing problem with TCP retransmit packet has
> > > incorrcet cheksum when using IPsec( not Authenticate,
> > > only Cipher ).
Did this kind of your "incorrect checksum" problem happen only 
"TCP retransmit packet"?

(snip)
> > > I'm runnig usagi stable 4.1 on RedHat9.0.

-mk